@adcp/sdk 16.0.0-beta.3 → 16.0.0-beta.4

package/dist/lib/reporting/gcs/bucket-policy.d.ts

@@ -1,3 +0,0 @@
-import type { BucketMetadata } from '@google-cloud/storage';
-/** Pure policy guard shared by the real-provider probe and deterministic negative controls. */
-export declare function assertGcsReportingBucketPolicy(metadata: BucketMetadata): void;

package/dist/lib/reporting/gcs/bucket-policy.mjs

@@ -1,7 +0,0 @@
-function assertGcsReportingBucketPolicy(metadata) {
-  if (!metadata || metadata.versioning?.enabled || metadata.softDeletePolicy?.retentionDurationSeconds === void 0 || Number(metadata.softDeletePolicy.retentionDurationSeconds) !== 0 || Number(metadata.retentionPolicy?.retentionPeriod ?? 0) !== 0 || metadata.defaultEventBasedHold === true || metadata.objectRetention?.mode === "Enabled" || (metadata.lifecycle?.rule?.length ?? 0) > 0 || metadata.iamConfiguration?.uniformBucketLevelAccess?.enabled !== true || metadata.iamConfiguration?.publicAccessPrevention !== "enforced")
-    throw new Error("Unsafe reporting GCS bucket policy");
-}
-export {
-  assertGcsReportingBucketPolicy
-};

package/dist/lib/reporting/gcs/errors.d.mts

@@ -1,11 +0,0 @@
-/**
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export declare class ReportingGcsFenceError extends Error {
-    readonly code: 'INVALID_INPUT' | 'UNSAFE_BUCKET' | 'REVOKED' | 'NOT_REVOKED' | 'CONTENT_CONFLICT' | 'ABORTED' | 'PROVIDER_UNAVAILABLE' | 'DEADLINE_EXCEEDED' | 'HOST_CALLBACK_FAILED' | 'STATE_UNAVAILABLE';
-    constructor(code: 'INVALID_INPUT' | 'UNSAFE_BUCKET' | 'REVOKED' | 'NOT_REVOKED' | 'CONTENT_CONFLICT' | 'ABORTED' | 'PROVIDER_UNAVAILABLE' | 'DEADLINE_EXCEEDED' | 'HOST_CALLBACK_FAILED' | 'STATE_UNAVAILABLE');
-}
-/**
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export declare function isReportingGcsFenceError(error: unknown): error is ReportingGcsFenceError;

package/dist/lib/reporting/gcs/errors.d.ts

@@ -1,11 +0,0 @@
-/**
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export declare class ReportingGcsFenceError extends Error {
-    readonly code: 'INVALID_INPUT' | 'UNSAFE_BUCKET' | 'REVOKED' | 'NOT_REVOKED' | 'CONTENT_CONFLICT' | 'ABORTED' | 'PROVIDER_UNAVAILABLE' | 'DEADLINE_EXCEEDED' | 'HOST_CALLBACK_FAILED' | 'STATE_UNAVAILABLE';
-    constructor(code: 'INVALID_INPUT' | 'UNSAFE_BUCKET' | 'REVOKED' | 'NOT_REVOKED' | 'CONTENT_CONFLICT' | 'ABORTED' | 'PROVIDER_UNAVAILABLE' | 'DEADLINE_EXCEEDED' | 'HOST_CALLBACK_FAILED' | 'STATE_UNAVAILABLE');
-}
-/**
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export declare function isReportingGcsFenceError(error: unknown): error is ReportingGcsFenceError;

package/dist/lib/reporting/gcs/errors.mjs

@@ -1,16 +0,0 @@
-class ReportingGcsFenceError extends Error {
-  constructor(code) {
-    super(`Reporting GCS fence: ${code}`);
-    this.code = code;
-    this.name = "ReportingGcsFenceError";
-    Object.defineProperty(this, /* @__PURE__ */ Symbol.for("adcp.reportingGcsFenceError"), { value: true });
-  }
-  code;
-}
-function isReportingGcsFenceError(error) {
-  return !!error && typeof error === "object" && error[/* @__PURE__ */ Symbol.for("adcp.reportingGcsFenceError")] === true;
-}
-export {
-  ReportingGcsFenceError,
-  isReportingGcsFenceError
-};

package/dist/lib/reporting/gcs/fence.d.mts

@@ -1,41 +0,0 @@
-import type { Storage } from '@google-cloud/storage';
-import { type ReportingObjectWriteScopeV1, type ReportingObjectWritePlanV1, type ReportingObjectWriteStoreV1 } from '../ledger/object-writes.mjs';
-export { ReportingGcsFenceError } from './errors.mjs';
-/**
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export interface GcsReportingObjectFenceV1 {
-    probe(context?: {
-        signal?: AbortSignal;
-    }): Promise<void>;
-    register(scope: ReportingObjectWriteScopeV1, deliveryId: string, bodies: readonly Uint8Array[], context?: {
-        signal?: AbortSignal;
-    }): Promise<ReportingObjectWritePlanV1>;
-    write(plan: ReportingObjectWritePlanV1, index: number, bytes: Uint8Array, context: {
-        signal: AbortSignal;
-    }): Promise<void>;
-    revoke(scope: ReportingObjectWriteScopeV1, context: {
-        signal: AbortSignal;
-        maxObjects?: number;
-    }): Promise<{
-        fenced: number;
-        complete: boolean;
-    }>;
-}
-/**
- * Provider-side write fence, not a complete Managed Delivery adapter.
- * Derive scope from authenticated host state; these methods do not authorize callers.
- * Bucket configuration must remain managed exclusively by the trusted host.
- * Tombstones and inventory MUST NOT be deleted while stale requests can execute.
- * Inject the official Storage client with host-owned, keyless credentials.
- *
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export declare function createGcsReportingObjectFenceV1(options: {
-    storage: Storage;
-    store: ReportingObjectWriteStoreV1;
-    bucket: string;
-    /** Opaque deployment identity, separate from account and destination generations. */
-    namespace: string;
-    operationDeadlineMilliseconds?: number;
-}): GcsReportingObjectFenceV1;

package/dist/lib/reporting/gcs/fence.d.ts

@@ -1,41 +0,0 @@
-import type { Storage } from '@google-cloud/storage';
-import { type ReportingObjectWriteScopeV1, type ReportingObjectWritePlanV1, type ReportingObjectWriteStoreV1 } from '../ledger/object-writes';
-export { ReportingGcsFenceError } from './errors';
-/**
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export interface GcsReportingObjectFenceV1 {
-    probe(context?: {
-        signal?: AbortSignal;
-    }): Promise<void>;
-    register(scope: ReportingObjectWriteScopeV1, deliveryId: string, bodies: readonly Uint8Array[], context?: {
-        signal?: AbortSignal;
-    }): Promise<ReportingObjectWritePlanV1>;
-    write(plan: ReportingObjectWritePlanV1, index: number, bytes: Uint8Array, context: {
-        signal: AbortSignal;
-    }): Promise<void>;
-    revoke(scope: ReportingObjectWriteScopeV1, context: {
-        signal: AbortSignal;
-        maxObjects?: number;
-    }): Promise<{
-        fenced: number;
-        complete: boolean;
-    }>;
-}
-/**
- * Provider-side write fence, not a complete Managed Delivery adapter.
- * Derive scope from authenticated host state; these methods do not authorize callers.
- * Bucket configuration must remain managed exclusively by the trusted host.
- * Tombstones and inventory MUST NOT be deleted while stale requests can execute.
- * Inject the official Storage client with host-owned, keyless credentials.
- *
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export declare function createGcsReportingObjectFenceV1(options: {
-    storage: Storage;
-    store: ReportingObjectWriteStoreV1;
-    bucket: string;
-    /** Opaque deployment identity, separate from account and destination generations. */
-    namespace: string;
-    operationDeadlineMilliseconds?: number;
-}): GcsReportingObjectFenceV1;

package/dist/lib/reporting/gcs/fence.js

@@ -1,250 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var fence_exports = {};
-__export(fence_exports, {
-  ReportingGcsFenceError: () => import_errors2.ReportingGcsFenceError,
-  createGcsReportingObjectFenceV1: () => createGcsReportingObjectFenceV1
-});
-module.exports = __toCommonJS(fence_exports);
-var import_node_crypto = require("node:crypto");
-var import_object_writes = require('../ledger/object-writes.js');
-var import_errors = require('./errors.js');
-var import_io = require('./io.js');
-var import_bucket_policy = require('./bucket-policy.js');
-var import_errors2 = require('./errors.js');
-const hash = (bytes) => (0, import_node_crypto.createHash)("sha256").update(bytes).digest("hex");
-const TOMBSTONE = "adcp_reporting_tombstone";
-function createGcsReportingObjectFenceV1(options) {
-  if (!options || typeof options.bucket !== "string" || !/^[a-z0-9][a-z0-9.-]{1,220}[a-z0-9]$/.test(options.bucket) || typeof options.namespace !== "string" || options.namespace.length < 1 || options.namespace.length > 255 || !options.storage || typeof options.storage.bucket !== "function" || !options.store)
-    throw new import_errors.ReportingGcsFenceError("INVALID_INPUT");
-  const { storage, store, bucket: bucketName, namespace } = options;
-  const deadline = options.operationDeadlineMilliseconds ?? 6e4;
-  if (!Number.isSafeInteger(deadline) || deadline < 1 || deadline > 6e4)
-    throw new import_errors.ReportingGcsFenceError("INVALID_INPUT");
-  const provider = { bucket: bucketName, namespace_key: hash(namespace) };
-  const status = (error, code) => !!error && typeof error === "object" && "code" in error && Number(error.code) === code;
-  const bounded = (work, signal) => (0, import_io.withGcsDeadline)(work, { signal, milliseconds: deadline });
-  async function probe(bucket, signal) {
-    (0, import_io.activeGcsSignal)(signal);
-    try {
-      const [metadata] = await bucket.getMetadata();
-      (0, import_io.activeGcsSignal)(signal);
-      try {
-        (0, import_bucket_policy.assertGcsReportingBucketPolicy)(metadata);
-      } catch {
-        throw new import_errors.ReportingGcsFenceError("UNSAFE_BUCKET");
-      }
-    } catch (error) {
-      (0, import_io.activeGcsSignal)(signal);
-      if ((0, import_errors.isReportingGcsFenceError)(error)) throw error;
-      throw new import_errors.ReportingGcsFenceError("PROVIDER_UNAVAILABLE");
-    }
-  }
-  function assertScope(scope) {
-    try {
-      (0, import_object_writes.assertReportingObjectWriteScope)(scope);
-    } catch {
-      throw new import_errors.ReportingGcsFenceError("INVALID_INPUT");
-    }
-  }
-  function assertPlan(plan) {
-    try {
-      (0, import_object_writes.reportingObjectWritePlanFingerprint)(plan);
-    } catch {
-      throw new import_errors.ReportingGcsFenceError("INVALID_INPUT");
-    }
-    if (plan.provider.bucket !== bucketName || plan.provider.namespace_key !== provider.namespace_key)
-      throw new import_errors.ReportingGcsFenceError("INVALID_INPUT");
-  }
-  async function register(scope, deliveryId, bodies, signal) {
-    assertScope(scope);
-    if (typeof deliveryId !== "string" || deliveryId.length < 1 || deliveryId.length > 255 || !Array.isArray(bodies) || bodies.length < 1 || bodies.length > 128 || bodies.some((b) => !(b instanceof Uint8Array) || b.byteLength > 64 * 1024 * 1024) || bodies.reduce((total, b) => total + b.byteLength, 0) > 64 * 1024 * 1024)
-      throw new import_errors.ReportingGcsFenceError("INVALID_INPUT");
-    const scopeCopy = {
-      account_id: scope.account_id,
-      destination_ref: scope.destination_ref,
-      generation: scope.generation
-    };
-    const planId = hash(deliveryId);
-    const plan = {
-      ...scopeCopy,
-      provider: { ...provider },
-      plan_id: planId,
-      objects: bodies.map((b, i) => ({
-        bucket: bucketName,
-        object_name: (0, import_object_writes.reportingObjectWriteName)(scopeCopy, provider, planId, i),
-        sha256: hash(b),
-        size_bytes: b.byteLength
-      }))
-    };
-    await probe(storage.bucket(bucketName), signal);
-    (0, import_io.activeGcsSignal)(signal);
-    const registered = await store.registerObjectWritePlan(plan, { signal });
-    (0, import_io.activeGcsSignal)(signal);
-    if (registered === "revoked") throw new import_errors.ReportingGcsFenceError("REVOKED");
-    return plan;
-  }
-  async function write(input, index, inputBytes, signal) {
-    const plan = structuredClone(input);
-    assertPlan(plan);
-    const expected = plan.objects[index];
-    if (!Number.isInteger(index) || !expected || !(inputBytes instanceof Uint8Array))
-      throw new import_errors.ReportingGcsFenceError("INVALID_INPUT");
-    if (inputBytes.byteLength !== expected.size_bytes) throw new import_errors.ReportingGcsFenceError("CONTENT_CONFLICT");
-    const bytes = Buffer.from(inputBytes);
-    if (hash(bytes) !== expected.sha256) throw new import_errors.ReportingGcsFenceError("CONTENT_CONFLICT");
-    (0, import_io.activeGcsSignal)(signal);
-    const bucket = storage.bucket(bucketName);
-    await probe(bucket, signal);
-    (0, import_io.activeGcsSignal)(signal);
-    const registered = await store.registerObjectWritePlan(plan, { signal });
-    (0, import_io.activeGcsSignal)(signal);
-    if (registered === "revoked") throw new import_errors.ReportingGcsFenceError("REVOKED");
-    const file = bucket.file(expected.object_name);
-    try {
-      await file.save(bytes, {
-        resumable: false,
-        preconditionOpts: { ifGenerationMatch: 0 },
-        metadata: { cacheControl: "no-store" }
-      });
-      (0, import_io.activeGcsSignal)(signal);
-    } catch (error) {
-      (0, import_io.activeGcsSignal)(signal);
-      if (!status(error, 412)) throw new import_errors.ReportingGcsFenceError("PROVIDER_UNAVAILABLE");
-      try {
-        const [metadata] = await file.getMetadata();
-        (0, import_io.activeGcsSignal)(signal);
-        if (metadata.metadata?.[TOMBSTONE] !== void 0) throw new import_errors.ReportingGcsFenceError("REVOKED");
-        const existing = await (0, import_io.readGcsBytes)(
-          bucket.file(expected.object_name, { generation: metadata.generation }),
-          bytes.length,
-          signal
-        );
-        if (existing.length !== bytes.length || hash(existing) !== expected.sha256)
-          throw new import_errors.ReportingGcsFenceError("CONTENT_CONFLICT");
-      } catch (error2) {
-        (0, import_io.activeGcsSignal)(signal);
-        if (status(error2, 404)) {
-          const current = await store.registerObjectWritePlan(plan, { signal });
-          (0, import_io.activeGcsSignal)(signal);
-          if (current === "revoked") throw new import_errors.ReportingGcsFenceError("REVOKED");
-        }
-        if ((0, import_errors.isReportingGcsFenceError)(error2)) throw error2;
-        throw new import_errors.ReportingGcsFenceError("PROVIDER_UNAVAILABLE");
-      }
-    }
-    (0, import_io.activeGcsSignal)(signal);
-    if (await store.registerObjectWritePlan(plan, { signal }) === "revoked")
-      throw new import_errors.ReportingGcsFenceError("REVOKED");
-    (0, import_io.activeGcsSignal)(signal);
-  }
-  async function revoke(scopeInput, maxObjects, signal) {
-    assertScope(scopeInput);
-    const scope = {
-      account_id: scopeInput.account_id,
-      destination_ref: scopeInput.destination_ref,
-      generation: scopeInput.generation
-    };
-    const limit = maxObjects ?? 10;
-    if (!Number.isSafeInteger(limit) || limit < 1 || limit > 1e3) throw new import_errors.ReportingGcsFenceError("INVALID_INPUT");
-    (0, import_io.activeGcsSignal)(signal);
-    const binding = await store.getObjectWriteBinding(scope, { signal });
-    (0, import_io.activeGcsSignal)(signal);
-    const objects = await store.listRevokedObjectWrites(scope, { limit }, { signal });
-    (0, import_io.activeGcsSignal)(signal);
-    if (!binding) {
-      if (objects.length) throw new import_errors.ReportingGcsFenceError("STATE_UNAVAILABLE");
-      return { fenced: 0, complete: true };
-    }
-    const bucket = storage.bucket(binding.bucket);
-    await probe(bucket, signal);
-    const scopeKey = (0, import_object_writes.reportingObjectWriteScopeKey)(scope);
-    for (const object of objects) {
-      (0, import_io.activeGcsSignal)(signal);
-      if (object.bucket !== binding.bucket || object.object_name !== (0, import_object_writes.reportingObjectWriteName)(scope, binding, object.plan_id, object.object_index))
-        throw new import_errors.ReportingGcsFenceError("STATE_UNAVAILABLE");
-      const file = bucket.file(object.object_name);
-      let fencedGeneration;
-      for (let attempt = 0; attempt < 4 && !fencedGeneration; attempt++) {
-        (0, import_io.activeGcsSignal)(signal);
-        let generation = 0;
-        try {
-          const [metadata] = await file.getMetadata();
-          (0, import_io.activeGcsSignal)(signal);
-          generation = String(metadata.generation);
-          if (metadata.metadata?.[TOMBSTONE] === scopeKey && String(metadata.size) === "0") {
-            fencedGeneration = String(metadata.generation);
-            break;
-          }
-        } catch (error) {
-          (0, import_io.activeGcsSignal)(signal);
-          if (!status(error, 404)) throw new import_errors.ReportingGcsFenceError("PROVIDER_UNAVAILABLE");
-        }
-        (0, import_io.activeGcsSignal)(signal);
-        try {
-          await file.save(Buffer.alloc(0), {
-            resumable: false,
-            preconditionOpts: { ifGenerationMatch: generation },
-            metadata: { cacheControl: "no-store", metadata: { [TOMBSTONE]: scopeKey } }
-          });
-          (0, import_io.activeGcsSignal)(signal);
-          const [verified] = await file.getMetadata();
-          (0, import_io.activeGcsSignal)(signal);
-          if (verified.metadata?.[TOMBSTONE] !== scopeKey || String(verified.size) !== "0")
-            throw new import_errors.ReportingGcsFenceError("PROVIDER_UNAVAILABLE");
-          fencedGeneration = String(verified.generation);
-        } catch (error) {
-          (0, import_io.activeGcsSignal)(signal);
-          if ((0, import_errors.isReportingGcsFenceError)(error)) throw error;
-          if (!status(error, 412)) throw new import_errors.ReportingGcsFenceError("PROVIDER_UNAVAILABLE");
-        }
-      }
-      if (!fencedGeneration) throw new import_errors.ReportingGcsFenceError("PROVIDER_UNAVAILABLE");
-      (0, import_io.activeGcsSignal)(signal);
-      await store.markObjectWriteFenced(
-        {
-          ...scope,
-          plan_id: object.plan_id,
-          object_index: object.object_index,
-          tombstone_generation: fencedGeneration
-        },
-        { signal }
-      );
-      (0, import_io.activeGcsSignal)(signal);
-    }
-    const remaining = await store.listRevokedObjectWrites(scope, { limit: 1 }, { signal });
-    (0, import_io.activeGcsSignal)(signal);
-    return { fenced: objects.length, complete: remaining.length === 0 };
-  }
-  function requireSignal(context) {
-    if (!(context?.signal instanceof AbortSignal)) throw new import_errors.ReportingGcsFenceError("INVALID_INPUT");
-    return context.signal;
-  }
-  return {
-    probe: async (context) => bounded((signal) => probe(storage.bucket(bucketName), signal), context?.signal),
-    register: async (scope, deliveryId, bodies, context) => bounded((signal) => register(scope, deliveryId, bodies, signal), context?.signal),
-    write: async (plan, index, bytes, context) => bounded((signal) => write(plan, index, bytes, signal), requireSignal(context)),
-    revoke: async (scope, context) => bounded((signal) => revoke(scope, context.maxObjects, signal), requireSignal(context))
-  };
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  ReportingGcsFenceError,
-  createGcsReportingObjectFenceV1
-});

package/dist/lib/reporting/gcs/fence.mjs

@@ -1,230 +0,0 @@
-import { createHash } from "node:crypto";
-import {
-  assertReportingObjectWriteScope,
-  reportingObjectWritePlanFingerprint,
-  reportingObjectWriteName,
-  reportingObjectWriteScopeKey
-} from "../ledger/object-writes.mjs";
-import { ReportingGcsFenceError, isReportingGcsFenceError } from "./errors.mjs";
-import { activeGcsSignal as active, withGcsDeadline, readGcsBytes } from "./io.mjs";
-import { assertGcsReportingBucketPolicy } from "./bucket-policy.mjs";
-const hash = (bytes) => createHash("sha256").update(bytes).digest("hex");
-const TOMBSTONE = "adcp_reporting_tombstone";
-import { ReportingGcsFenceError as ReportingGcsFenceError2 } from "./errors.mjs";
-function createGcsReportingObjectFenceV1(options) {
-  if (!options || typeof options.bucket !== "string" || !/^[a-z0-9][a-z0-9.-]{1,220}[a-z0-9]$/.test(options.bucket) || typeof options.namespace !== "string" || options.namespace.length < 1 || options.namespace.length > 255 || !options.storage || typeof options.storage.bucket !== "function" || !options.store)
-    throw new ReportingGcsFenceError("INVALID_INPUT");
-  const { storage, store, bucket: bucketName, namespace } = options;
-  const deadline = options.operationDeadlineMilliseconds ?? 6e4;
-  if (!Number.isSafeInteger(deadline) || deadline < 1 || deadline > 6e4)
-    throw new ReportingGcsFenceError("INVALID_INPUT");
-  const provider = { bucket: bucketName, namespace_key: hash(namespace) };
-  const status = (error, code) => !!error && typeof error === "object" && "code" in error && Number(error.code) === code;
-  const bounded = (work, signal) => withGcsDeadline(work, { signal, milliseconds: deadline });
-  async function probe(bucket, signal) {
-    active(signal);
-    try {
-      const [metadata] = await bucket.getMetadata();
-      active(signal);
-      try {
-        assertGcsReportingBucketPolicy(metadata);
-      } catch {
-        throw new ReportingGcsFenceError("UNSAFE_BUCKET");
-      }
-    } catch (error) {
-      active(signal);
-      if (isReportingGcsFenceError(error)) throw error;
-      throw new ReportingGcsFenceError("PROVIDER_UNAVAILABLE");
-    }
-  }
-  function assertScope(scope) {
-    try {
-      assertReportingObjectWriteScope(scope);
-    } catch {
-      throw new ReportingGcsFenceError("INVALID_INPUT");
-    }
-  }
-  function assertPlan(plan) {
-    try {
-      reportingObjectWritePlanFingerprint(plan);
-    } catch {
-      throw new ReportingGcsFenceError("INVALID_INPUT");
-    }
-    if (plan.provider.bucket !== bucketName || plan.provider.namespace_key !== provider.namespace_key)
-      throw new ReportingGcsFenceError("INVALID_INPUT");
-  }
-  async function register(scope, deliveryId, bodies, signal) {
-    assertScope(scope);
-    if (typeof deliveryId !== "string" || deliveryId.length < 1 || deliveryId.length > 255 || !Array.isArray(bodies) || bodies.length < 1 || bodies.length > 128 || bodies.some((b) => !(b instanceof Uint8Array) || b.byteLength > 64 * 1024 * 1024) || bodies.reduce((total, b) => total + b.byteLength, 0) > 64 * 1024 * 1024)
-      throw new ReportingGcsFenceError("INVALID_INPUT");
-    const scopeCopy = {
-      account_id: scope.account_id,
-      destination_ref: scope.destination_ref,
-      generation: scope.generation
-    };
-    const planId = hash(deliveryId);
-    const plan = {
-      ...scopeCopy,
-      provider: { ...provider },
-      plan_id: planId,
-      objects: bodies.map((b, i) => ({
-        bucket: bucketName,
-        object_name: reportingObjectWriteName(scopeCopy, provider, planId, i),
-        sha256: hash(b),
-        size_bytes: b.byteLength
-      }))
-    };
-    await probe(storage.bucket(bucketName), signal);
-    active(signal);
-    const registered = await store.registerObjectWritePlan(plan, { signal });
-    active(signal);
-    if (registered === "revoked") throw new ReportingGcsFenceError("REVOKED");
-    return plan;
-  }
-  async function write(input, index, inputBytes, signal) {
-    const plan = structuredClone(input);
-    assertPlan(plan);
-    const expected = plan.objects[index];
-    if (!Number.isInteger(index) || !expected || !(inputBytes instanceof Uint8Array))
-      throw new ReportingGcsFenceError("INVALID_INPUT");
-    if (inputBytes.byteLength !== expected.size_bytes) throw new ReportingGcsFenceError("CONTENT_CONFLICT");
-    const bytes = Buffer.from(inputBytes);
-    if (hash(bytes) !== expected.sha256) throw new ReportingGcsFenceError("CONTENT_CONFLICT");
-    active(signal);
-    const bucket = storage.bucket(bucketName);
-    await probe(bucket, signal);
-    active(signal);
-    const registered = await store.registerObjectWritePlan(plan, { signal });
-    active(signal);
-    if (registered === "revoked") throw new ReportingGcsFenceError("REVOKED");
-    const file = bucket.file(expected.object_name);
-    try {
-      await file.save(bytes, {
-        resumable: false,
-        preconditionOpts: { ifGenerationMatch: 0 },
-        metadata: { cacheControl: "no-store" }
-      });
-      active(signal);
-    } catch (error) {
-      active(signal);
-      if (!status(error, 412)) throw new ReportingGcsFenceError("PROVIDER_UNAVAILABLE");
-      try {
-        const [metadata] = await file.getMetadata();
-        active(signal);
-        if (metadata.metadata?.[TOMBSTONE] !== void 0) throw new ReportingGcsFenceError("REVOKED");
-        const existing = await readGcsBytes(
-          bucket.file(expected.object_name, { generation: metadata.generation }),
-          bytes.length,
-          signal
-        );
-        if (existing.length !== bytes.length || hash(existing) !== expected.sha256)
-          throw new ReportingGcsFenceError("CONTENT_CONFLICT");
-      } catch (error2) {
-        active(signal);
-        if (status(error2, 404)) {
-          const current = await store.registerObjectWritePlan(plan, { signal });
-          active(signal);
-          if (current === "revoked") throw new ReportingGcsFenceError("REVOKED");
-        }
-        if (isReportingGcsFenceError(error2)) throw error2;
-        throw new ReportingGcsFenceError("PROVIDER_UNAVAILABLE");
-      }
-    }
-    active(signal);
-    if (await store.registerObjectWritePlan(plan, { signal }) === "revoked")
-      throw new ReportingGcsFenceError("REVOKED");
-    active(signal);
-  }
-  async function revoke(scopeInput, maxObjects, signal) {
-    assertScope(scopeInput);
-    const scope = {
-      account_id: scopeInput.account_id,
-      destination_ref: scopeInput.destination_ref,
-      generation: scopeInput.generation
-    };
-    const limit = maxObjects ?? 10;
-    if (!Number.isSafeInteger(limit) || limit < 1 || limit > 1e3) throw new ReportingGcsFenceError("INVALID_INPUT");
-    active(signal);
-    const binding = await store.getObjectWriteBinding(scope, { signal });
-    active(signal);
-    const objects = await store.listRevokedObjectWrites(scope, { limit }, { signal });
-    active(signal);
-    if (!binding) {
-      if (objects.length) throw new ReportingGcsFenceError("STATE_UNAVAILABLE");
-      return { fenced: 0, complete: true };
-    }
-    const bucket = storage.bucket(binding.bucket);
-    await probe(bucket, signal);
-    const scopeKey = reportingObjectWriteScopeKey(scope);
-    for (const object of objects) {
-      active(signal);
-      if (object.bucket !== binding.bucket || object.object_name !== reportingObjectWriteName(scope, binding, object.plan_id, object.object_index))
-        throw new ReportingGcsFenceError("STATE_UNAVAILABLE");
-      const file = bucket.file(object.object_name);
-      let fencedGeneration;
-      for (let attempt = 0; attempt < 4 && !fencedGeneration; attempt++) {
-        active(signal);
-        let generation = 0;
-        try {
-          const [metadata] = await file.getMetadata();
-          active(signal);
-          generation = String(metadata.generation);
-          if (metadata.metadata?.[TOMBSTONE] === scopeKey && String(metadata.size) === "0") {
-            fencedGeneration = String(metadata.generation);
-            break;
-          }
-        } catch (error) {
-          active(signal);
-          if (!status(error, 404)) throw new ReportingGcsFenceError("PROVIDER_UNAVAILABLE");
-        }
-        active(signal);
-        try {
-          await file.save(Buffer.alloc(0), {
-            resumable: false,
-            preconditionOpts: { ifGenerationMatch: generation },
-            metadata: { cacheControl: "no-store", metadata: { [TOMBSTONE]: scopeKey } }
-          });
-          active(signal);
-          const [verified] = await file.getMetadata();
-          active(signal);
-          if (verified.metadata?.[TOMBSTONE] !== scopeKey || String(verified.size) !== "0")
-            throw new ReportingGcsFenceError("PROVIDER_UNAVAILABLE");
-          fencedGeneration = String(verified.generation);
-        } catch (error) {
-          active(signal);
-          if (isReportingGcsFenceError(error)) throw error;
-          if (!status(error, 412)) throw new ReportingGcsFenceError("PROVIDER_UNAVAILABLE");
-        }
-      }
-      if (!fencedGeneration) throw new ReportingGcsFenceError("PROVIDER_UNAVAILABLE");
-      active(signal);
-      await store.markObjectWriteFenced(
-        {
-          ...scope,
-          plan_id: object.plan_id,
-          object_index: object.object_index,
-          tombstone_generation: fencedGeneration
-        },
-        { signal }
-      );
-      active(signal);
-    }
-    const remaining = await store.listRevokedObjectWrites(scope, { limit: 1 }, { signal });
-    active(signal);
-    return { fenced: objects.length, complete: remaining.length === 0 };
-  }
-  function requireSignal(context) {
-    if (!(context?.signal instanceof AbortSignal)) throw new ReportingGcsFenceError("INVALID_INPUT");
-    return context.signal;
-  }
-  return {
-    probe: async (context) => bounded((signal) => probe(storage.bucket(bucketName), signal), context?.signal),
-    register: async (scope, deliveryId, bodies, context) => bounded((signal) => register(scope, deliveryId, bodies, signal), context?.signal),
-    write: async (plan, index, bytes, context) => bounded((signal) => write(plan, index, bytes, signal), requireSignal(context)),
-    revoke: async (scope, context) => bounded((signal) => revoke(scope, context.maxObjects, signal), requireSignal(context))
-  };
-}
-export {
-  ReportingGcsFenceError2 as ReportingGcsFenceError,
-  createGcsReportingObjectFenceV1
-};

package/dist/lib/reporting/gcs/index.d.mts

@@ -1,18 +0,0 @@
-/**
- * Google Cloud Storage fence, reader, managed-delivery adapter and row-object provider for Reliable Reporting.
- *
- * Every export of this subpath is `@experimental` and may change in minor releases.
- *
- * Stability policy: https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- *
- * @packageDocumentation
- */
-export { createGcsReportingObjectFenceV1 } from './fence.mjs';
-export type { GcsReportingObjectFenceV1 } from './fence.mjs';
-export { ReportingGcsFenceError, isReportingGcsFenceError } from './errors.mjs';
-export { createGcsReportingResourceReaderV1, createGcsReportingReferenceResolverV1 } from './reader.mjs';
-export type { GcsReportingReadScopeV1, GcsReportingReadAuthorizationV1, GcsReportingReaderOptionsV1 } from './reader.mjs';
-export { createGcsReportingManagedDeliveryAdapterV1 } from './adapter.mjs';
-export type { CreateGcsReportingManagedDeliveryAdapterOptionsV1 } from './adapter.mjs';
-export { createGcsReportingRowObjectProviderV1 } from './row-provider.mjs';
-export type { CreateGcsReportingRowObjectProviderOptionsV1 } from './row-provider.mjs';

package/dist/lib/reporting/gcs/index.d.ts

@@ -1,18 +0,0 @@
-/**
- * Google Cloud Storage fence, reader, managed-delivery adapter and row-object provider for Reliable Reporting.
- *
- * Every export of this subpath is `@experimental` and may change in minor releases.
- *
- * Stability policy: https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- *
- * @packageDocumentation
- */
-export { createGcsReportingObjectFenceV1 } from './fence';
-export type { GcsReportingObjectFenceV1 } from './fence';
-export { ReportingGcsFenceError, isReportingGcsFenceError } from './errors';
-export { createGcsReportingResourceReaderV1, createGcsReportingReferenceResolverV1 } from './reader';
-export type { GcsReportingReadScopeV1, GcsReportingReadAuthorizationV1, GcsReportingReaderOptionsV1 } from './reader';
-export { createGcsReportingManagedDeliveryAdapterV1 } from './adapter';
-export type { CreateGcsReportingManagedDeliveryAdapterOptionsV1 } from './adapter';
-export { createGcsReportingRowObjectProviderV1 } from './row-provider';
-export type { CreateGcsReportingRowObjectProviderOptionsV1 } from './row-provider';