trellis-pg 0.1.0-aarch64-linux-musl

data/lib/trellis/values.rb

@@ -0,0 +1,386 @@
+# frozen_string_literal: true
+
+module Trellis
+  # Times cross the native boundary as signed microseconds since the Unix
+  # epoch (ADR-0010 decision 4) and become Times here, in Ruby, not in Rust.
+  # Not part of the public API.
+  module EpochMicros
+    # The largest and smallest epoch microseconds the engine takes (an i64).
+    RANGE = (-(2**63))..((2**63) - 1)
+
+    def self.to_time(micros)
+      ::Time.at(0, micros, :microsecond, in: "UTC")
+    end
+
+    # `time` in whole microseconds, truncated toward the past, or nil if the
+    # engine can't represent it.
+    def self.from_time(time)
+      micros = (time.to_r * 1_000_000).floor
+      micros if RANGE.cover?(micros)
+    end
+  end
+
+  # A registered transform definition, as Trellis.definitions lists it.
+  # target_table (fully qualified, "schema.table") identifies the transform;
+  # status is a symbol (:waiting_to_backfill, :backfilling, :live, ...) from
+  # a closed set, never one made from a string the database returned;
+  # created_at is when it was registered (a Time). backfill_failure is nil unless its build keeps
+  # failing. halt is nil unless the drain, or its build's merge, halted on
+  # it: a CaptureFailure of kind :halt, the definition :paused until the
+  # cause is fixed and it is resumed. Listing the definitions and looking for
+  # a halt is the health check for halts.
+  DefinitionSummary = Data.define(:target_table, :status, :created_at, :backfill_failure, :halt) do
+    def self.from_native(hash)
+      failure = hash[:backfill_failure]
+      halt = hash[:halt]
+      new(**hash.except(:created_at_micros, :backfill_failure, :halt),
+          created_at: EpochMicros.to_time(hash.fetch(:created_at_micros)),
+          backfill_failure: failure && BackfillFailure.from_native(failure),
+          halt: halt && CaptureFailure.from_native(halt))
+    end
+  end
+
+  # A definition's status, as Trellis.status returns it.
+  #
+  # status is one of :waiting_to_backfill, :backfilling, :catching_up,
+  # :live, :quarantined or :paused. A newly defined transform starts
+  # :waiting_to_backfill and reaches :live once some process in the fleet
+  # runs the staging worker and drain threads (see Trellis.connect).
+  #
+  # The other fields say what the definition is stuck on, and are nil when
+  # nothing holds it up:
+  # - backfill_failure: its build keeps failing (one of its build chunks).
+  # - capture_wait: installing or widening capture on a table it reads waits
+  #   for a lock another session holds. It clears once that session lets go.
+  # - capture_failure: capture of a table it reads is broken, or the drain
+  #   halted on it. A schema change paused it (resume it once fixed),
+  #   installing capture keeps failing (it clears once the cause is fixed),
+  #   or, with kind :halt, a failure no retry gets past reached it, so the
+  #   drain (or its build's merge) paused it and what depends on it (resume
+  #   it once fixed). A definition an operator paused has none.
+  # - held_keys: it holds keys in quarantine (a HeldKeys): source keys whose
+  #   changes kept failing in its apply, so it leaves them out and their
+  #   target rows stay as they were, whatever its status, :live included.
+  #   Trellis.sample_quarantined lists them, and Trellis.release_key releases
+  #   one once its cause is fixed.
+  # - drain_failure: the drain keeps failing on a page holding changes to a
+  #   table it reads, with nothing charged or paused (a DrainFailure), so its
+  #   target stops short of that page, whatever its status, :live included.
+  #   Every drain pass retries the page; fix the cause its error names. A
+  #   paused or quarantined definition has none.
+  # Every process sees them, whichever one runs the staging worker.
+  #
+  # source_index_gaps is a warning, never a hold-up: the SourceIndexGaps for
+  # the source indexes a GROUP BY or JOIN target needs and lacks ([] when it
+  # needs none or they exist). Define and a resume refuse a definition
+  # without them, so a gap is an index dropped since, or one the definition
+  # opted out of with WITHOUT SOURCE INDEX. Nothing is paused, but
+  # Trellis.self_check refuses to walk the target unless it opted out, when
+  # the walk scans the source once per page.
+  #
+  # correcting lists the CorrectingNodes of its partitioned source it is being
+  # corrected for, oldest first ([] when none): a partition was attached,
+  # detached, dropped or truncated, and the definition re-derives the keys
+  # it touched. It reads :backfilling while one is listed, and :live again
+  # once they are re-derived and folded into its target. A paused or
+  # quarantined definition lists none.
+  #
+  # paused_upstream_columns names the paused columns of upstream 1-1 targets
+  # that make a :live definition report :catching_up, each "target.column"
+  # ([] when none). A column is paused when its fuse tripped or PAUSE
+  # TRANSFORM t.col froze it; an aggregate or JOIN reading it keeps applying
+  # over its frozen values, so it is stale against the source. Nothing is
+  # paused or rebuilt: resuming the column writes through to the reader and
+  # it reads :live again.
+  Status = Data.define(:status, :backfill_failure, :capture_wait, :capture_failure,
+                       :held_keys, :drain_failure, :source_index_gaps,
+                       :correcting, :paused_upstream_columns) do
+    def self.from_native(hash)
+      failure = hash[:backfill_failure]
+      wait = hash[:capture_wait]
+      capture_failure = hash[:capture_failure]
+      held_keys = hash[:held_keys]
+      drain_failure = hash[:drain_failure]
+      new(status: hash[:status],
+          backfill_failure: failure && BackfillFailure.from_native(failure),
+          capture_wait: wait && CaptureWait.from_native(wait),
+          capture_failure: capture_failure && CaptureFailure.from_native(capture_failure),
+          held_keys: held_keys && HeldKeys.from_native(held_keys),
+          drain_failure: drain_failure && DrainFailure.from_native(drain_failure),
+          source_index_gaps: hash.fetch(:source_index_gaps).map { |g| SourceIndexGap.new(**g) },
+          correcting: hash.fetch(:correcting).map { |c| CorrectingNode.from_native(c) },
+          paused_upstream_columns: hash.fetch(:paused_upstream_columns))
+    end
+  end
+
+  # A node of a partitioned source a definition is being corrected for, as
+  # Trellis.status reports it: the schema-qualified node (node), when the
+  # staging worker queued its correction (since, a Time), and the keys still
+  # to re-derive (keys_remaining, nil until the correction has counted them;
+  # an estimate while it reads the node's own rows).
+  CorrectingNode = Data.define(:node, :since, :keys_remaining) do
+    def self.from_native(hash)
+      new(node: hash.fetch(:node),
+          since: EpochMicros.to_time(hash.fetch(:since_micros)),
+          keys_remaining: hash.fetch(:keys_remaining))
+    end
+  end
+
+  # A source index a GROUP BY or JOIN target needs and lacks, as
+  # Trellis.status reports it: the qualified table (table), the columns the
+  # index should lead with (columns), the part of the definition that needs it
+  # (role: :group_by for the GROUP BY columns, :join_from or :join_joined for a
+  # JOIN's ON columns on its from or joined side), whether the definition opted out with
+  # WITHOUT SOURCE INDEX (opted_out), and a create index statement to run
+  # (fix). Trellis doesn't create indexes on your tables.
+  SourceIndexGap = Data.define(:table, :columns, :role, :opted_out, :fix)
+
+  # A drain page that keeps failing with nothing charged or paused, as
+  # Trellis.status and Trellis.self_check report it: the segment whose page
+  # fails (seg_seq), the qualified source tables it holds changes to
+  # (tables), the latest failure's error and its SQLSTATE (sqlstate, nil when
+  # it didn't come from Postgres), when a drain first and last failed on it
+  # (since and last_seen, Times), and how many drain passes have (attempts).
+  DrainFailure = Data.define(:seg_seq, :tables, :error, :sqlstate, :since, :last_seen,
+                             :attempts) do
+    def self.from_native(hash)
+      new(**hash.except(:since_micros, :last_seen_micros),
+          since: EpochMicros.to_time(hash.fetch(:since_micros)),
+          last_seen: EpochMicros.to_time(hash.fetch(:last_seen_micros)))
+    end
+  end
+
+  # The keys a definition holds in quarantine, as Trellis.status and
+  # Trellis.self_check report them: how many (count), and when the one held
+  # longest was last poisoned (oldest_poisoned_at, a Time).
+  HeldKeys = Data.define(:count, :oldest_poisoned_at) do
+    def self.from_native(hash)
+      new(count: hash.fetch(:count),
+          oldest_poisoned_at: EpochMicros.to_time(hash.fetch(:oldest_poisoned_at_micros)))
+    end
+  end
+
+  # What a definition's capture waits on: the staging worker's install,
+  # widen or uninstall (operation, a String) of the capture triggers on
+  # table needs lock_mode, and another session holds or is queued for a
+  # conflicting lock. blockers has one line per such session. waiting_since
+  # and observed_at are Times.
+  CaptureWait = Data.define(:table, :operation, :lock_mode, :waiting_since, :observed_at,
+                            :blockers) do
+    def self.from_native(hash)
+      new(**hash.except(:waiting_since_micros, :observed_at_micros),
+          waiting_since: EpochMicros.to_time(hash.fetch(:waiting_since_micros)),
+          observed_at: EpochMicros.to_time(hash.fetch(:observed_at_micros)))
+    end
+  end
+
+  # Why capture of source_table is broken, or why the drain (or a build's
+  # merge) halted on the definition: kind is :capture or :halt, error is a
+  # sentence naming the cause, columns the columns it is about (empty when it
+  # isn't about a column, and for a halt), and detected_at (a Time) when it
+  # was first found.
+  CaptureFailure = Data.define(:kind, :source_table, :columns, :error, :detected_at) do
+    def self.from_native(hash)
+      new(**hash.except(:detected_at_micros),
+          detected_at: EpochMicros.to_time(hash.fetch(:detected_at_micros)))
+    end
+  end
+
+  # Why a definition's build isn't finishing: the build of source_table has
+  # failed `attempts` times, the latest being last_error, and won't be
+  # retried before next_attempt_at (a Time). It retries on its own, except
+  # that a build failing for a reason no row explains pauses the definition
+  # after a few attempts (next_attempt_at is then when it paused). Fix the
+  # cause, resume a paused definition, and the next attempt goes through.
+  BackfillFailure = Data.define(:source_table, :attempts, :last_error, :next_attempt_at) do
+    def self.from_native(hash)
+      new(**hash.except(:next_attempt_at_micros),
+          next_attempt_at: EpochMicros.to_time(hash.fetch(:next_attempt_at_micros)))
+    end
+  end
+
+  # What Trellis.apply did. `kind` says which statement form ran, and each
+  # other field is set only for the kinds that carry it (nil otherwise):
+  #
+  # - :transform_defined: a TRANSFORM statement registered the transform
+  #   writing `target_table` (fully qualified), at :waiting_to_backfill.
+  # - :paused: a PAUSE TRANSFORM statement froze its subject, or found it
+  #   already frozen.
+  # - :resumed: a RESUME TRANSFORM statement unfroze its subject. `columns`
+  #   lists every column a column resume resumed, as "transform.column": the
+  #   one it named, then any dependent whose pause was only that one's
+  #   cascade. It is [] for a whole-transform resume, which drops the
+  #   transform to :waiting_to_backfill to rebuild.
+  # - :dropped: a DROP statement removed its subject, or found it already
+  #   gone.
+  # - :altered: an ALTER TRANSFORM statement edited the transform writing `target_table`. `added`,
+  #   `dropped` and `altered` name only the fields this call changed.
+  # - :unknown: the statement was applied, but its outcome is newer than this
+  #   version of the binding, which has no shape for it. It is still a
+  #   success: don't retry the statement, which would apply it twice.
+  #
+  # It pattern-matches by kind:
+  #
+  #   case Trellis.apply("RESUME TRANSFORM order_totals.total")
+  #   in { kind: :resumed, columns: } then puts "resumed #{columns.join(', ')}"
+  #   end
+  Applied = Data.define(:kind, :target_table, :columns, :added, :dropped, :altered) do
+    def self.from_native(hash)
+      new(**hash)
+    end
+  end
+
+  # One target's quarantine state, as Trellis.quarantined lists it and
+  # Trellis.quarantine_status reports it.
+  #
+  # target is an address: a transform's bare target table name
+  # ("order_totals") for the whole transform, or "order_totals.total" for one
+  # of its columns. Pass it straight back to Trellis.quarantine_status,
+  # Trellis.sample_quarantined, or a RESUME TRANSFORM statement.
+  #
+  # state is :live or :paused for a column; a whole transform reports its
+  # lifecycle status (see Status). paused_at (a Time) and last_error are set
+  # only for a paused column: when its pause tripped, and its most recent
+  # failure (nil for a pause that cascaded from an upstream column rather
+  # than failing on its own).
+  QuarantineEntry = Data.define(:target, :state, :paused_at, :last_error) do
+    def self.from_native(hash)
+      micros = hash[:paused_at_micros]
+      new(**hash.except(:paused_at_micros), paused_at: micros && EpochMicros.to_time(micros))
+    end
+  end
+
+  # One source row the apply path gave up on, as Trellis.poisoned_since
+  # lists it: the transform it's held for (every other transform reading the
+  # row keeps applying it), its fully-qualified src_table, its key as Trellis
+  # renders it, the error that poisoned it, and when (poisoned_at, a Time).
+  PoisonEntry = Data.define(:transform, :src_table, :key, :last_error, :poisoned_at) do
+    def self.from_native(hash)
+      new(**hash.except(:poisoned_at_micros),
+          poisoned_at: EpochMicros.to_time(hash.fetch(:poisoned_at_micros)))
+    end
+  end
+
+  # One quarantined source row, as Trellis.sample_quarantined pages them: its
+  # fully-qualified src_table, its key as Trellis renders it, and the error
+  # it failed with.
+  PoisonSample = Data.define(:src_table, :key, :error_message)
+
+  # One page of Trellis.sample_quarantined, ordered by (src_table, key).
+  #
+  # next_cursor is opaque: pass it back as the `after:` option for the next
+  # page, and don't read or build one. The last page is the one with fewer
+  # rows than the limit. An empty page hands back the cursor it was asked
+  # for, so polling from where you got to never falls back to the first page;
+  # next_cursor is nil only for an empty first page.
+  SamplePage = Data.define(:samples, :next_cursor) do
+    def self.from_native(hash)
+      new(samples: hash.fetch(:samples).map { |sample| PoisonSample.new(**sample) },
+          next_cursor: hash.fetch(:next_cursor))
+    end
+  end
+
+  # A background check of a target table, as Trellis.self_check starts it and
+  # Trellis.self_check_job reads it back.
+  #
+  # - id: what Trellis.self_check_job takes.
+  # - target: the audited target's bare table name.
+  # - mode: :standard or :strict, as the job was started. A second
+  #   Trellis.self_check of a target whose job is still running returns that
+  #   job, so its mode is the first call's.
+  # - state: :queued (no worker has taken it up yet; with no drain worker
+  #   anywhere in the fleet it stays so), :running, then :done, :failed
+  #   (error says why) or :cancelled (the worker running it shut down; error
+  #   says so). Only :done carries a report.
+  # - rows_compared: the distinct keys the pages so far compared; it moves
+  #   while the job is :running.
+  # - report: the SelfCheckReport, once the job is :done; nil before.
+  # - error: why a :failed or :cancelled job ended; nil otherwise.
+  #
+  # A job ends when its transform is dropped, and Trellis.self_check_job then
+  # returns nil for it.
+  SelfCheckJob = Data.define(:id, :target, :mode, :state, :rows_compared, :report, :error) do
+    def self.from_native(hash)
+      report = hash[:report]
+      new(**hash, report: report && SelfCheckReport.from_native(report))
+    end
+
+    # Whether the job has ended, so polling it again changes nothing.
+    def finished?
+      %i[done failed cancelled].include?(state)
+    end
+  end
+
+  # What a finished Trellis.self_check job found auditing the whole of a
+  # target table against a fresh recompute of its definition from the source.
+  #
+  # - outcome: :converged (every compared cell, row and column matched),
+  #   :not_caught_up (the target didn't catch up within timeout_ms: not a
+  #   verdict on correctness), :not_live (the transform isn't :live, so
+  #   nothing was awaited or compared; see status), or :diverged (see
+  #   divergences).
+  # - status: the transform's status when outcome is :not_live (a rebuild
+  #   Trellis.request_backfill starts reads :backfilling from the call's
+  #   return, so poll status until it is :live, then check again); nil for
+  #   every other outcome.
+  # - divergences: the Divergences found; [] unless outcome is :diverged.
+  # - rows_compared: the distinct keys compared.
+  # - truncated: true when the job stopped before the end of the target's
+  #   keys: it found 1,000 divergences, or the transform stopped being :live,
+  #   stopped catching up or lost its capture partway. rows_compared says how
+  #   far it got.
+  # - checked_through: the watermark the outcome holds through, a token
+  #   Trellis.await_converged takes.
+  # - held_keys: whatever the outcome, a HeldKeys while the transform holds
+  #   keys in quarantine, nil otherwise; read when the job is polled. Their
+  #   target rows are ones the audit can't vouch for, and a key with held
+  #   changes keeps the target from catching up, so the outcome is
+  #   :not_caught_up until it is released.
+  # - drain_failures: whatever the outcome, every DrainFailure open on the
+  #   instance when the job is polled, oldest first, whichever definitions
+  #   read its tables; [] when there is none. Each holds back the targets of
+  #   the tables it holds changes to, and with them the convergence the audit
+  #   waits on.
+  SelfCheckReport = Data.define(:target, :outcome, :status, :divergences, :rows_compared,
+                                :truncated, :checked_through, :held_keys, :drain_failures) do
+    def self.from_native(hash)
+      held_keys = hash[:held_keys]
+      new(**hash, divergences: hash.fetch(:divergences).map { |d| Divergence.new(**d) },
+                  held_keys: held_keys && HeldKeys.from_native(held_keys),
+                  drain_failures: hash.fetch(:drain_failures).map { |f| DrainFailure.from_native(f) })
+    end
+  end
+
+  # One thing Trellis.self_check found out of step, by kind:
+  #
+  # - :cell: the row exists on both sides but `column` differs at `key`.
+  #   `persisted` is the target table's value and `recomputed` the fresh
+  #   recompute's, both as Postgres renders them as text (nil for NULL).
+  # - :missing_row: the recompute produced `key`, but the target has no row
+  #   for it.
+  # - :extra_row: the target has a row for `key` that the recompute didn't
+  #   produce.
+  # - :missing_column: the definition expects `column`, but the target table
+  #   doesn't have it.
+  # - :extra_column: the target table has `column`, but the definition
+  #   doesn't expect it.
+  # - :capture: a table the target is computed from isn't being captured as
+  #   Trellis installed it (a capture trigger missing, disabled or calling
+  #   the wrong function, a capture function missing or with the wrong
+  #   owner, the Trellis role missing a privilege, or the table joined a
+  #   partition or inheritance hierarchy). `detail` says what, and `table`
+  #   names the table (nil for a missing privilege). self_check reports these
+  #   before, and instead of, comparing any rows.
+  #
+  # Fields a kind doesn't carry are nil.
+  Divergence = Data.define(:kind, :key, :column, :persisted, :recomputed, :table, :detail)
+
+  # The configuration this process's handle connected with, as Trellis.config
+  # returns it: connect's schema and target_schema, and the handle's call pool
+  # as it was built: max_call_pool_size and call_pool_wait_timeout_ms.
+  #
+  # Not the url: a connection string can carry a password, and a Config is
+  # the kind of value that ends up in a log line whole. The caller already
+  # has the url it connected with.
+  Config = Data.define(:schema, :target_schema, :max_call_pool_size, :call_pool_wait_timeout_ms)
+end

data/lib/trellis/version.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+module Trellis
+  # The trellis-pg gem's version: the Trellis release's, which a
+  # `v<VERSION>` tag releases (docs/releasing.md).
+  VERSION = "0.1.0"
+end

metadata

@@ -0,0 +1,67 @@
+--- !ruby/object:Gem::Specification
+name: trellis-pg
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: aarch64-linux-musl
+authors:
+- Salesforce
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2026-10-31 00:00:00.000000000 Z
+dependencies: []
+description: |
+  A native extension over the trellis crate's BlockingTrellis, so a Rails
+  app can define and run Trellis's streaming transforms in its own process,
+  against its own Postgres database, without deploying a separate service.
+email: 
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- README.md
+- lib/trellis/3.3/trellis_ruby.so
+- lib/trellis/3.4/trellis_ruby.so
+- lib/trellis/4.0/trellis_ruby.so
+- lib/trellis/error.rb
+- lib/trellis/instance.rb
+- lib/trellis/metrics.rb
+- lib/trellis/migration.rb
+- lib/trellis/pg.rb
+- lib/trellis/railtie.rb
+- lib/trellis/schema_dump.rb
+- lib/trellis/test_support.rb
+- lib/trellis/values.rb
+- lib/trellis/version.rb
+homepage: https://github.com/salesforce-misc/trellis/tree/main/clients/ruby
+licenses:
+- Apache-2.0
+metadata:
+  source_code_uri: https://github.com/salesforce-misc/trellis/tree/main/clients/ruby
+  bug_tracker_uri: https://github.com/salesforce-misc/trellis/issues
+  rubygems_mfa_required: 'true'
+  cargo_crate_name: trellis_ruby
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '3.3'
+  - - "<"
+    - !ruby/object:Gem::Version
+      version: 4.1.dev
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 3.3.22
+requirements: []
+rubygems_version: 3.5.23
+signing_key: 
+specification_version: 4
+summary: 'Embedded Trellis: streaming SQL transforms inside your Postgres, run from
+  a Ruby app'
+test_files: []