SK-3118: Remove flowvault query op + rewrite README as full Java-parity mirror

Remove the `query` operation from the Python flowvault SDK so its operation set
mirrors Java flowvault (which has no query):
- Drop VaultController.query and the query wire helper; remove QueryRequest/
  QueryResponse/QueryResponseRecord/QueryResponseMetadata/QueryOptions data
  classes, validation, messages, the client query-api accessor, tests, and the
  query sample.
- Relax the shared common IVaultController interface: query is no longer a
  required abstract op (skyvault keeps its own concrete query, unaffected), so
  flowvault's controller is concrete without it. Updated the common contract test.
- Regenerated the flowvault public-API contract baseline (query classes removed).

Rewrite flowvault/README.md as a full mirror of the Java flowvault README
structure, adapted to Python: expanded Authenticate (bearer/context/scoped/signed
token generation via skyflow.service_account), VaultConfig + builder reference
tables, Schema-vs-schemaless, Unary-vs-bulk parity, the "SDK Guidelines: Unary vs
Bulk Operations" section, per-operation sections with sample responses, Custom
Request Headers, and a full Error Handling breakdown. Dropped the Java-only
tokenize/delete-tokens ops and the removed query op; removed the "Privacy DB"
install-vs-import note; corrected the bulk concurrency max to 100.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: saileshwar-skyflow

common/tests/vault/test_base_vault_controller.py

@@ -20,9 +20,6 @@ def update(self, request):
     def delete(self, request):
         raise NotImplementedError
 
-    def query(self, request):
-        raise NotImplementedError
-
     def detokenize(self, request):
         raise NotImplementedError
 
@@ -36,11 +33,11 @@ class Incomplete(BaseVaultController):
             Incomplete(vault_client=None)
 
     def test_cannot_instantiate_missing_any_single_method(self):
-        """Java-interface-style: every one of the six operations is independently required --
+        """Java-interface-style: every one of the five operations is independently required --
         omitting any single one (not just insert) blocks instantiation."""
-        for missing in ("insert", "get", "update", "delete", "query", "detokenize"):
+        for missing in ("insert", "get", "update", "delete", "detokenize"):
             methods = {name: (lambda self, request: None) for name in
-                       ("insert", "get", "update", "delete", "query", "detokenize") if name != missing}
+                       ("insert", "get", "update", "delete", "detokenize") if name != missing}
             Incomplete = type("Incomplete", (BaseVaultController,), methods)
             with self.assertRaises(TypeError, msg=f"missing only '{missing}' should still fail to instantiate"):
                 Incomplete(vault_client=None)

common/vault/base_vault_controller.py

@@ -25,10 +25,6 @@ def update(self, request):
     def delete(self, request):
         raise NotImplementedError
 
-    @abstractmethod
-    def query(self, request):
-        raise NotImplementedError
-
     @abstractmethod
     def detokenize(self, request):
         raise NotImplementedError

flowvault/README.md

@@ -47,7 +47,6 @@
   "skyflow.vault.controller.VaultController.detokenize": "def (self, request: DetokenizeRequest, options: DetokenizeOptions = None) -> DetokenizeResponse",
   "skyflow.vault.controller.VaultController.get": "def (self, request: GetRequest, options: GetOptions = None) -> GetResponse",
   "skyflow.vault.controller.VaultController.insert": "def (self, request: InsertRequest, options: InsertOptions = None) -> InsertResponse",
-  "skyflow.vault.controller.VaultController.query": "def (self, request: QueryRequest, options: QueryOptions = None) -> QueryResponse",
   "skyflow.vault.controller.VaultController.update": "def (self, request: UpdateRequest, options: UpdateOptions = None) -> UpdateResponse",
   "skyflow.vault.data.BulkDetokenizeOptions": "class ()",
   "skyflow.vault.data.BulkDetokenizeOptions.__init__": "def (self, interceptor: Optional[Callable[[RequestContext], None]] = None)",
@@ -219,22 +218,6 @@
   "skyflow.vault.data.InsertResponseRecord.skyflow_id": "attr",
   "skyflow.vault.data.InsertResponseRecord.table_name": "attr",
   "skyflow.vault.data.InsertResponseRecord.tokens": "attr",
-  "skyflow.vault.data.QueryOptions": "class ()",
-  "skyflow.vault.data.QueryOptions.__init__": "def (self, interceptor: Optional[Callable[[RequestContext], None]] = None)",
-  "skyflow.vault.data.QueryOptions.interceptor": "attr",
-  "skyflow.vault.data.QueryRequest": "class ()",
-  "skyflow.vault.data.QueryRequest.__init__": "def (self, query: str)",
-  "skyflow.vault.data.QueryRequest.query": "attr",
-  "skyflow.vault.data.QueryResponse": "class ()",
-  "skyflow.vault.data.QueryResponse.__init__": "def (self, records = None, metadata = None)",
-  "skyflow.vault.data.QueryResponse.metadata": "attr",
-  "skyflow.vault.data.QueryResponse.records": "attr",
-  "skyflow.vault.data.QueryResponseMetadata": "class ()",
-  "skyflow.vault.data.QueryResponseMetadata.__init__": "def (self, columns = None)",
-  "skyflow.vault.data.QueryResponseMetadata.columns": "attr",
-  "skyflow.vault.data.QueryResponseRecord": "class ()",
-  "skyflow.vault.data.QueryResponseRecord.__init__": "def (self, data = None)",
-  "skyflow.vault.data.QueryResponseRecord.data": "attr",
   "skyflow.vault.data.RequestContext": "class ()",
   "skyflow.vault.data.RequestContext.__init__": "def (self, operation, batch_index = NOT_BATCHED, total_batches = NOT_BATCHED)",
   "skyflow.vault.data.RequestContext.add_header": "def (self, key, value)",

flowvault/api-report/skyflow.api.json

@@ -43,7 +43,6 @@ python flowvault/samples/vault_api/bulk_insert_async.py   # async samples run th
 | [update_record.py](vault_api/update_record.py) | Update a record |
 | [delete_records.py](vault_api/delete_records.py) | Delete records |
 | [detokenize_records.py](vault_api/detokenize_records.py) | Detokenize tokens |
-| [query_records.py](vault_api/query_records.py) | Run a SQL `SELECT` query |
 
 ## Bulk operations
 

flowvault/samples/README.md

@@ -81,8 +81,6 @@ class Error(Enum):
         INVALID_TOKENS_TYPE_IN_DETOKENIZE = f"{error_prefix} Detokenize failed. 'tokens' must be a non-empty list of strings."
         INVALID_TOKEN_GROUP_REDACTIONS_IN_DETOKENIZE = f"{error_prefix} Detokenize failed. 'token_group_redactions' must be a list of TokenGroupRedactions objects with a non-empty 'token_group_name'."
 
-        INVALID_QUERY_IN_QUERY = f"{error_prefix} Query failed. 'query' must be a non-empty string."
-
 
         EMPTY_RECORDS_IN_BULK_INSERT = f"{error_prefix} Bulk insert failed. Specify at least one record to insert."
         INVALID_RECORDS_TYPE_IN_BULK_INSERT = f"{error_prefix} Bulk insert failed. 'records' must be a list of BulkInsertRequestRecord objects."
@@ -121,12 +119,6 @@ class Info(Enum):
         DETOKENIZE_REQUEST_RESOLVED = f"{INFO}: [{error_prefix}] Detokenize request resolved."
         DETOKENIZE_SUCCESS = f"{INFO}: [{error_prefix}] Tokens detokenized."
 
-        VALIDATE_QUERY_REQUEST = f"{INFO}: [{error_prefix}] Validating query request."
-        QUERY_TRIGGERED = f"{INFO}: [{error_prefix}] Query method triggered."
-        QUERY_REQUEST_RESOLVED = f"{INFO}: [{error_prefix}] Query request resolved."
-        QUERY_SUCCESS = f"{INFO}: [{error_prefix}] Query executed."
-
-
         VALIDATE_BULK_INSERT_REQUEST = f"{INFO}: [{error_prefix}] Validating bulk insert request."
         BULK_INSERT_TRIGGERED = f"{INFO}: [{error_prefix}] Bulk insert method triggered."
         BULK_INSERT_REQUEST_RESOLVED = f"{INFO}: [{error_prefix}] Bulk insert request resolved."
@@ -145,6 +137,5 @@ class ErrorLogs(Enum):
         UPDATE_RECORDS_REJECTED = f"{ERROR}: [{error_prefix}] Update call resulted in failure."
         DELETE_RECORDS_REJECTED = f"{ERROR}: [{error_prefix}] Delete call resulted in failure."
         DETOKENIZE_RECORDS_REJECTED = f"{ERROR}: [{error_prefix}] Detokenize call resulted in failure."
-        QUERY_RECORDS_REJECTED = f"{ERROR}: [{error_prefix}] Query call resulted in failure."
         BULK_INSERT_RECORDS_REJECTED = f"{ERROR}: [{error_prefix}] Bulk insert batch resulted in failure."
         BULK_DETOKENIZE_RECORDS_REJECTED = f"{ERROR}: [{error_prefix}] Bulk detokenize batch resulted in failure."

flowvault/samples/vault_api/query_records.py

@@ -6,7 +6,6 @@
     validate_update_request,
     validate_delete_request,
     validate_detokenize_request,
-    validate_query_request,
     validate_bulk_insert_request,
     validate_bulk_detokenize_request,
 )

flowvault/skyflow/utils/_skyflow_messages.py

@@ -201,11 +201,6 @@ def validate_detokenize_request(logger, request):
             raise SkyflowError(SkyflowMessages.Error.INVALID_TOKEN_GROUP_REDACTIONS_IN_DETOKENIZE.value, invalid_input_error_code)
 
 
-def validate_query_request(logger, request):
-    if not isinstance(request.query, str) or not request.query.strip():
-        raise SkyflowError(SkyflowMessages.Error.INVALID_QUERY_IN_QUERY.value, invalid_input_error_code)
-
-
 def validate_bulk_insert_request(logger, request):
     if not isinstance(request.records, list) or not all(isinstance(r, BulkInsertRequestRecord) for r in request.records):
         raise SkyflowError(SkyflowMessages.Error.INVALID_RECORDS_TYPE_IN_BULK_INSERT.value, invalid_input_error_code)

flowvault/skyflow/utils/validations/__init__.py

@@ -147,9 +147,6 @@ def get_records_api(self):
     def get_tokens_api(self):
         return self._api_client.tokens
 
-    def get_query_api(self):
-        return self._api_client.query
-
     def get_async_records_api(self):
         return self._async_api_client.records