Implement checked aggregation plans, native SQL, and bounded RPC capture

test/queries.test.mjs

@@ -5,6 +5,14 @@ import { QueryResponseSchema } from "../dist/camino/api_pb.js";
 import { InjectedDependencySchema } from "../dist/quixos/refs_pb.js";
 import { createRuntimeContext, decodeQuerySnapshot, jsToProtoValue, protoValueToJs } from "../dist/index.js";
 
+test("private relational captures cannot be decoded as a completed public query", () => {
+  const response = create(QueryResponseSchema, { relationalCaptures: [{ rootObjectId: "obj:private" }] });
+  assert.throws(
+    () => decodeQuerySnapshot(response, { kind: "record", fields: {} }, "run", 1n),
+    /QUERY_RESULT_UNFINISHED/,
+  );
+});
+
 test("query ports carry only an injected query identity and root", async () => {
   let seen;
   const context = createRuntimeContext(