@adcp/sdk 16.0.0-beta.3 → 16.0.0-beta.4

package/dist/lib/reporting/gcs/row-provider.mjs

@@ -1,208 +0,0 @@
-import { createHash } from "node:crypto";
-import { ReportingRowStoreError } from "../ledger/row-storage-errors.mjs";
-import {
-  assertReportingRowLocationKeys,
-  assertReportingRowReadBounds,
-  readReportingRowStream,
-  reportingRowClientMap,
-  reportingRowPrefixFilterOverlaps,
-  runReportingRowProviderOperation,
-  selectReportingRowClient
-} from "../ledger/row-storage-provider-io.mjs";
-const BUCKET = /^[a-z0-9][a-z0-9._-]{1,220}[a-z0-9]$/;
-const GENERATION = /^[1-9][0-9]{0,15}$/;
-const NONCURRENT_ONLY_CONDITIONS = ["numNewerVersions", "daysSinceNoncurrentTime", "noncurrentTimeBefore"];
-function status(error) {
-  if (!error || typeof error !== "object" || !("code" in error)) return void 0;
-  const code = Number(error.code);
-  return Number.isInteger(code) ? code : void 0;
-}
-function generationOf(metadata) {
-  const generation = metadata?.generation === void 0 ? "" : String(metadata.generation);
-  if (!GENERATION.test(generation) || !Number.isSafeInteger(Number(generation))) {
-    throw new ReportingRowStoreError("PROVIDER_UNAVAILABLE", "object generation is missing");
-  }
-  return generation;
-}
-function pinnedGeneration(nativeVersionRef) {
-  return typeof nativeVersionRef === "string" && GENERATION.test(nativeVersionRef) && Number.isSafeInteger(Number(nativeVersionRef)) ? nativeVersionRef : null;
-}
-function assertGcsReportingRowBucketPolicyV1(metadata, prefix) {
-  if (!metadata || typeof metadata !== "object") {
-    throw new ReportingRowStoreError("UNSAFE_BINDING", "bucket policy is unavailable");
-  }
-  if (metadata.iamConfiguration?.uniformBucketLevelAccess?.enabled !== true) {
-    throw new ReportingRowStoreError("UNSAFE_BINDING", "bucket must enable uniform bucket-level access");
-  }
-  if (metadata.iamConfiguration?.publicAccessPrevention !== "enforced") {
-    throw new ReportingRowStoreError("UNSAFE_BINDING", "bucket must enforce public access prevention");
-  }
-  for (const rule of metadata.lifecycle?.rule ?? []) {
-    if (rule?.action?.type !== "Delete") continue;
-    const condition = rule.condition ?? {};
-    if (condition.isLive === false) continue;
-    if (NONCURRENT_ONLY_CONDITIONS.some((name) => condition[name] !== void 0 && condition[name] !== null)) continue;
-    const prefixes = condition.matchesPrefix ?? [];
-    if (prefixes.length === 0 || prefixes.some((filter) => reportingRowPrefixFilterOverlaps(filter, prefix))) {
-      throw new ReportingRowStoreError("UNSAFE_BINDING", "a bucket lifecycle rule can delete live row objects");
-    }
-  }
-}
-function createGcsReportingRowObjectProviderV1(options) {
-  if (!options || typeof options !== "object") {
-    throw new ReportingRowStoreError("INVALID_INPUT", "GCS row provider options are required");
-  }
-  const clients = reportingRowClientMap(options.clients);
-  const isStorage = (value) => !!value && typeof value === "object" && typeof value.bucket === "function";
-  if (options.storage !== void 0 && !isStorage(options.storage) || [...clients.values()].some((client) => !isStorage(client)) || options.storage === void 0 && clients.size === 0) {
-    throw new ReportingRowStoreError("INVALID_INPUT", "inject an official Storage client as storage or clients");
-  }
-  const validateLocation = (location) => {
-    assertReportingRowLocationKeys(location, ["bucket"]);
-    if (!BUCKET.test(location.bucket) || location.bucket.includes("..")) {
-      throw new ReportingRowStoreError("INVALID_INPUT", "GCS bucket name is invalid");
-    }
-  };
-  const bucketFor = (input) => {
-    validateLocation(input.location);
-    return selectReportingRowClient(options.storage, clients, input.credentialRef).bucket(input.location.bucket);
-  };
-  const assertKey = (key) => {
-    if (typeof key !== "string" || key.length === 0 || Buffer.byteLength(key) > 1024) {
-      throw new ReportingRowStoreError("INVALID_INPUT", "object key is invalid");
-    }
-  };
-  return {
-    name: "gcs",
-    rangedReads: true,
-    validateLocation,
-    probe(input, context) {
-      return runReportingRowProviderOperation(context.signal, async () => {
-        const bucket = bucketFor(input);
-        let metadata;
-        try {
-          [metadata] = await bucket.getMetadata();
-        } catch (error) {
-          const code = status(error);
-          if (code === 404) throw new ReportingRowStoreError("UNSAFE_BINDING", "bucket does not exist");
-          if (code === 401 || code === 403) {
-            throw new ReportingRowStoreError("UNSAFE_BINDING", "bucket policy cannot be read with this client");
-          }
-          throw error;
-        }
-        assertGcsReportingRowBucketPolicyV1(metadata, input.prefix);
-      });
-    },
-    putIfAbsent(input, context) {
-      return runReportingRowProviderOperation(context.signal, async () => {
-        const bucket = bucketFor(input);
-        assertKey(input.objectRef);
-        const file = bucket.file(input.objectRef);
-        try {
-          const bytes = Buffer.from(input.bytes);
-          await file.save(bytes, {
-            resumable: false,
-            gzip: false,
-            // GCS verifies the declared MD5 before creating the object, so a corrupted upload
-            // is refused server-side. Client-side validation is off because on mismatch the
-            // client deletes the key without a generation precondition.
-            validation: false,
-            contentType: input.contentType,
-            metadata: {
-              contentType: input.contentType,
-              md5Hash: createHash("md5").update(bytes).digest("base64"),
-              cacheControl: "no-store",
-              metadata: { ...input.metadata }
-            },
-            preconditionOpts: { ifGenerationMatch: 0 }
-          });
-        } catch (error) {
-          if (status(error) !== 412) throw error;
-          context.signal.throwIfAborted();
-          const [existing] = await bucket.file(input.objectRef).getMetadata();
-          return { created: false, nativeVersionRef: generationOf(existing) };
-        }
-        if (file.metadata?.generation !== void 0) {
-          return { created: true, nativeVersionRef: generationOf(file.metadata) };
-        }
-        const [created] = await file.getMetadata();
-        return { created: true, nativeVersionRef: generationOf(created) };
-      });
-    },
-    get(input, context) {
-      return runReportingRowProviderOperation(context.signal, async () => {
-        const bucket = bucketFor(input);
-        assertKey(input.objectRef);
-        assertReportingRowReadBounds(input);
-        const generation = pinnedGeneration(input.nativeVersionRef);
-        if (generation === null) return null;
-        const file = bucket.file(input.objectRef, { generation });
-        try {
-          if (input.range?.length === 0) {
-            const [metadata] = await file.getMetadata();
-            if (input.range.offset > Number(metadata.size)) {
-              throw new ReportingRowStoreError("ROWS_INTEGRITY_FAILED", "requested range exceeds the stored object");
-            }
-            return Buffer.alloc(0);
-          }
-          const stream = file.createReadStream({
-            // The client always sends `Accept-Encoding: gzip`; with `decompress: false`
-            // neither GCS nor the client transcodes, so these are the stored bytes.
-            decompress: false,
-            // Digests recorded in PostgreSQL verify every byte returned.
-            validation: false,
-            ...input.range ? { start: input.range.offset, end: input.range.offset + input.range.length - 1 } : {}
-          });
-          return await readReportingRowStream(stream, input.maxBytes, context.signal);
-        } catch (error) {
-          const code = status(error);
-          if (code === 404) return null;
-          if (code === 416) {
-            throw new ReportingRowStoreError("ROWS_INTEGRITY_FAILED", "requested range exceeds the stored object");
-          }
-          throw error;
-        }
-      });
-    },
-    stat(input, context) {
-      return runReportingRowProviderOperation(context.signal, async () => {
-        const bucket = bucketFor(input);
-        assertKey(input.objectRef);
-        const generation = pinnedGeneration(input.nativeVersionRef);
-        if (generation === null) return null;
-        try {
-          const [metadata] = await bucket.file(input.objectRef, { generation }).getMetadata();
-          const size = Number(metadata.size);
-          if (String(metadata.generation) !== generation) return null;
-          if (!Number.isSafeInteger(size) || size < 0) {
-            throw new ReportingRowStoreError("PROVIDER_UNAVAILABLE", "object metadata is malformed");
-          }
-          return { nativeVersionRef: generation, sizeBytes: size };
-        } catch (error) {
-          if (status(error) === 404) return null;
-          throw error;
-        }
-      });
-    },
-    delete(input, context) {
-      return runReportingRowProviderOperation(context.signal, async () => {
-        const bucket = bucketFor(input);
-        assertKey(input.objectRef);
-        const generation = pinnedGeneration(input.nativeVersionRef);
-        if (generation === null) return "absent";
-        try {
-          await bucket.file(input.objectRef, { generation }).delete();
-          return "deleted";
-        } catch (error) {
-          const code = status(error);
-          if (code === 404 || code === 412) return "absent";
-          throw error;
-        }
-      });
-    }
-  };
-}
-export {
-  assertGcsReportingRowBucketPolicyV1,
-  createGcsReportingRowObjectProviderV1
-};

package/dist/lib/reporting/gcs/validation.d.mts

@@ -1,5 +0,0 @@
-import type { ReportingManagedDeliveryAdapterV1 } from '../ledger/managed.mjs';
-import type { ExpectedReportingPeriod } from '../reconciliation.mjs';
-type DeliveryInput = Parameters<ReportingManagedDeliveryAdapterV1['deliver']>[0];
-export declare function assertExpectedBinding(input: DeliveryInput, expected: ExpectedReportingPeriod): void;
-export {};

package/dist/lib/reporting/gcs/validation.d.ts

@@ -1,5 +0,0 @@
-import type { ReportingManagedDeliveryAdapterV1 } from '../ledger/managed';
-import type { ExpectedReportingPeriod } from '../reconciliation';
-type DeliveryInput = Parameters<ReportingManagedDeliveryAdapterV1['deliver']>[0];
-export declare function assertExpectedBinding(input: DeliveryInput, expected: ExpectedReportingPeriod): void;
-export {};

package/dist/lib/reporting/gcs/validation.js

@@ -1,49 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var validation_exports = {};
-__export(validation_exports, {
-  assertExpectedBinding: () => assertExpectedBinding
-});
-module.exports = __toCommonJS(validation_exports);
-var import_jcs = require('../../utils/jcs.js');
-var import_errors = require('./errors.js');
-function assertExpectedBinding(input, expected) {
-  const {
-    binding,
-    revision: { wireRevision: r },
-    obligation
-  } = input;
-  const shaMatches = (a, b) => typeof a === "string" && /^[a-fA-F0-9]{64}$/.test(a) && /^[a-fA-F0-9]{64}$/.test(b) && a.toLowerCase() === b.toLowerCase();
-  if (expected.verificationProfile !== binding.verification_profile || expected.destinationRef !== binding.destination_ref || expected.deliveryMethod !== binding.method || expected.deliveryConfigId !== binding.delivery_config_id || expected.deliveryConfigVersion !== binding.delivery_config_version || expected.reportDefinitionId !== r.report_definition_id || expected.feedPurpose !== binding.feed_purpose || expected.reportingProfile !== r.reporting_profile || expected.reconciliationMode !== binding.reconciliation_mode || expected.requiredFinality !== obligation.requiredFinality || expected.periodStart !== r.period.start || expected.periodEnd !== r.period.end || (0, import_jcs.canonicalize)([...expected.mediaBuyIds].sort()) !== (0, import_jcs.canonicalize)([...r.media_buy_ids].sort()) || expected.reportDefinitionUri !== r.report_definition_uri || !shaMatches(r.report_definition_sha256, expected.reportDefinitionSha256) || expected.schemaUri !== r.schema_uri || !shaMatches(r.schema_sha256, expected.schemaSha256) || expected.schemaVersion !== r.schema_version || expected.schemaDialect !== r.schema_dialect || expected.schemaRefPolicy !== r.schema_ref_policy || r.finality === "official" && (!expected.officialFinality || expected.officialFinality.policyId !== r.finality_policy_id || expected.officialFinality.basis !== r.finality_basis))
-    throw new import_errors.ReportingGcsFenceError("CONTENT_CONFLICT");
-  const coverage = (value) => Object.fromEntries(
-    Object.entries(value).filter(([key]) => !["evaluated_at", "limitations"].includes(key)).map(([key, item]) => [key, Array.isArray(item) ? [...item].sort() : item])
-  );
-  if ((0, import_jcs.canonicalize)(coverage(expected.coverage)) !== (0, import_jcs.canonicalize)(coverage(r.coverage)))
-    throw new import_errors.ReportingGcsFenceError("CONTENT_CONFLICT");
-  if (expected.verificationProfile === "canonical_digest") {
-    const pin = expected.canonicalization, digest = r.canonical_content_digest;
-    if (!digest || digest.canonicalization_id !== pin.id || digest.canonicalization_uri !== pin.uri || !shaMatches(digest.canonicalization_sha256, pin.sha256))
-      throw new import_errors.ReportingGcsFenceError("CONTENT_CONFLICT");
-  }
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  assertExpectedBinding
-});

package/dist/lib/reporting/gcs/validation.mjs

@@ -1,25 +0,0 @@
-import { canonicalize } from "../../utils/jcs.mjs";
-import { ReportingGcsFenceError } from "./errors.mjs";
-function assertExpectedBinding(input, expected) {
-  const {
-    binding,
-    revision: { wireRevision: r },
-    obligation
-  } = input;
-  const shaMatches = (a, b) => typeof a === "string" && /^[a-fA-F0-9]{64}$/.test(a) && /^[a-fA-F0-9]{64}$/.test(b) && a.toLowerCase() === b.toLowerCase();
-  if (expected.verificationProfile !== binding.verification_profile || expected.destinationRef !== binding.destination_ref || expected.deliveryMethod !== binding.method || expected.deliveryConfigId !== binding.delivery_config_id || expected.deliveryConfigVersion !== binding.delivery_config_version || expected.reportDefinitionId !== r.report_definition_id || expected.feedPurpose !== binding.feed_purpose || expected.reportingProfile !== r.reporting_profile || expected.reconciliationMode !== binding.reconciliation_mode || expected.requiredFinality !== obligation.requiredFinality || expected.periodStart !== r.period.start || expected.periodEnd !== r.period.end || canonicalize([...expected.mediaBuyIds].sort()) !== canonicalize([...r.media_buy_ids].sort()) || expected.reportDefinitionUri !== r.report_definition_uri || !shaMatches(r.report_definition_sha256, expected.reportDefinitionSha256) || expected.schemaUri !== r.schema_uri || !shaMatches(r.schema_sha256, expected.schemaSha256) || expected.schemaVersion !== r.schema_version || expected.schemaDialect !== r.schema_dialect || expected.schemaRefPolicy !== r.schema_ref_policy || r.finality === "official" && (!expected.officialFinality || expected.officialFinality.policyId !== r.finality_policy_id || expected.officialFinality.basis !== r.finality_basis))
-    throw new ReportingGcsFenceError("CONTENT_CONFLICT");
-  const coverage = (value) => Object.fromEntries(
-    Object.entries(value).filter(([key]) => !["evaluated_at", "limitations"].includes(key)).map(([key, item]) => [key, Array.isArray(item) ? [...item].sort() : item])
-  );
-  if (canonicalize(coverage(expected.coverage)) !== canonicalize(coverage(r.coverage)))
-    throw new ReportingGcsFenceError("CONTENT_CONFLICT");
-  if (expected.verificationProfile === "canonical_digest") {
-    const pin = expected.canonicalization, digest = r.canonical_content_digest;
-    if (!digest || digest.canonicalization_id !== pin.id || digest.canonicalization_uri !== pin.uri || !shaMatches(digest.canonicalization_sha256, pin.sha256))
-      throw new ReportingGcsFenceError("CONTENT_CONFLICT");
-  }
-}
-export {
-  assertExpectedBinding
-};

package/dist/lib/reporting/ledger/change-feed.d.mts

@@ -1,69 +0,0 @@
-/**
- * Host-facing reporting change feed (shared SDK persistence spec,
- * adcontextprotocol/adcp#7996 §2.1 and §3.7).
- *
- * Apply after {@link REPORTING_LEDGER_MIGRATION}; PostgreSQL 13 or later
- * (`xid8`). The store appends one row per committed obligation, revision,
- * adjustment and retirement in the same transaction as the record, taking the
- * sequence value only after the account lock, so per-account sequence order is
- * commit order. Deployment-wide readers order by `(xid, seq)` and stop below
- * the reading snapshot's `xmin`, so a slow commit is never skipped. Account
- * readers order by `seq` and end the page before the first change at or above
- * that `xmin`. Use exactly one writer SDK per ledger database.
- *
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export declare const REPORTING_LEDGER_CHANGES_MIGRATION: string;
-/**
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export type ReportingChangeKindV1 = 'obligation' | 'revision' | 'adjustment' | 'retirement';
-/**
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export interface ReportingChangeRecordV1 {
-    kind: ReportingChangeKindV1;
-    record_id: string;
-    reporting_obligation_id: string;
-    account_id: string;
-    recorded_at: string;
-}
-/**
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export interface ReportingChangesPageV1 {
-    records: ReportingChangeRecordV1[];
-    /** Pass back to resume. Always present; equal to the input when nothing new committed. */
-    cursor: string;
-}
-interface ChangeCursorV1 {
-    v: 1;
-    /** Account scope, or `null` for the deployment-wide feed. */
-    account: string | null;
-    seq: string;
-    /** Deployment-wide feeds only: the writing transaction of the last record returned. */
-    xid?: string;
-}
-/**
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export declare function encodeReportingChangeCursorV1(cursor: ChangeCursorV1): string;
-/**
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export declare function decodeReportingChangeCursorV1(value: string, account: string | null): ChangeCursorV1;
-/**
- * Thrown when a change cursor is older than the retained change history.
- *
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export declare class ReportingChangeCursorExpiredError extends Error {
-    readonly cursor?: string | undefined;
-    readonly code: "CURSOR_EXPIRED";
-    /**
-     * Original feed position, when available, so a cold-start consumer can retain its recovery
-     * boundary. It encodes the feed's account scope: do not serialize it to other tenants.
-     */
-    constructor(cursor?: string | undefined);
-}
-export {};

package/dist/lib/reporting/ledger/change-feed.d.ts

@@ -1,69 +0,0 @@
-/**
- * Host-facing reporting change feed (shared SDK persistence spec,
- * adcontextprotocol/adcp#7996 §2.1 and §3.7).
- *
- * Apply after {@link REPORTING_LEDGER_MIGRATION}; PostgreSQL 13 or later
- * (`xid8`). The store appends one row per committed obligation, revision,
- * adjustment and retirement in the same transaction as the record, taking the
- * sequence value only after the account lock, so per-account sequence order is
- * commit order. Deployment-wide readers order by `(xid, seq)` and stop below
- * the reading snapshot's `xmin`, so a slow commit is never skipped. Account
- * readers order by `seq` and end the page before the first change at or above
- * that `xmin`. Use exactly one writer SDK per ledger database.
- *
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export declare const REPORTING_LEDGER_CHANGES_MIGRATION: string;
-/**
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export type ReportingChangeKindV1 = 'obligation' | 'revision' | 'adjustment' | 'retirement';
-/**
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export interface ReportingChangeRecordV1 {
-    kind: ReportingChangeKindV1;
-    record_id: string;
-    reporting_obligation_id: string;
-    account_id: string;
-    recorded_at: string;
-}
-/**
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export interface ReportingChangesPageV1 {
-    records: ReportingChangeRecordV1[];
-    /** Pass back to resume. Always present; equal to the input when nothing new committed. */
-    cursor: string;
-}
-interface ChangeCursorV1 {
-    v: 1;
-    /** Account scope, or `null` for the deployment-wide feed. */
-    account: string | null;
-    seq: string;
-    /** Deployment-wide feeds only: the writing transaction of the last record returned. */
-    xid?: string;
-}
-/**
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export declare function encodeReportingChangeCursorV1(cursor: ChangeCursorV1): string;
-/**
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export declare function decodeReportingChangeCursorV1(value: string, account: string | null): ChangeCursorV1;
-/**
- * Thrown when a change cursor is older than the retained change history.
- *
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export declare class ReportingChangeCursorExpiredError extends Error {
-    readonly cursor?: string | undefined;
-    readonly code: "CURSOR_EXPIRED";
-    /**
-     * Original feed position, when available, so a cold-start consumer can retain its recovery
-     * boundary. It encodes the feed's account scope: do not serialize it to other tenants.
-     */
-    constructor(cursor?: string | undefined);
-}
-export {};

package/dist/lib/reporting/ledger/change-feed.js

@@ -1,107 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var change_feed_exports = {};
-__export(change_feed_exports, {
-  REPORTING_LEDGER_CHANGES_MIGRATION: () => REPORTING_LEDGER_CHANGES_MIGRATION,
-  ReportingChangeCursorExpiredError: () => ReportingChangeCursorExpiredError,
-  decodeReportingChangeCursorV1: () => decodeReportingChangeCursorV1,
-  encodeReportingChangeCursorV1: () => encodeReportingChangeCursorV1
-});
-module.exports = __toCommonJS(change_feed_exports);
-var import_row_storage_errors = require('./row-storage-errors.js');
-const REPORTING_LEDGER_CHANGES_MIGRATION = `
-CREATE TABLE IF NOT EXISTS adcp_reporting_changes (
-  seq BIGSERIAL PRIMARY KEY,
-  xid xid8 NOT NULL DEFAULT pg_current_xact_id(),
-  account_id TEXT NOT NULL,
-  record_kind TEXT NOT NULL
-    CHECK (record_kind IN ('obligation', 'revision', 'adjustment', 'retirement')),
-  record_id TEXT NOT NULL,
-  obligation_id TEXT NOT NULL,
-  recorded_at TIMESTAMPTZ NOT NULL DEFAULT clock_timestamp()
-);
-CREATE INDEX IF NOT EXISTS adcp_reporting_changes_account
-  ON adcp_reporting_changes (account_id, seq);
-CREATE INDEX IF NOT EXISTS adcp_reporting_changes_deployment
-  ON adcp_reporting_changes (xid, seq);
-CREATE INDEX IF NOT EXISTS adcp_reporting_changes_recorded
-  ON adcp_reporting_changes (recorded_at, seq);
-
--- Highest (xid, seq) ever pruned: a deployment-wide cursor below it may have
--- missed a deleted change and fails closed.
-CREATE TABLE IF NOT EXISTS adcp_reporting_change_horizon (
-  singleton BOOLEAN PRIMARY KEY DEFAULT TRUE CHECK (singleton),
-  pruned_through_xid xid8 NOT NULL DEFAULT '0',
-  pruned_through_seq BIGINT NOT NULL DEFAULT 0
-);
-INSERT INTO adcp_reporting_change_horizon (singleton) VALUES (TRUE) ON CONFLICT DO NOTHING;
-
--- Highest seq ever pruned per account: an account cursor below it fails closed.
-CREATE TABLE IF NOT EXISTS adcp_reporting_change_account_horizon (
-  account_id TEXT PRIMARY KEY,
-  pruned_through_seq BIGINT NOT NULL
-);
-
--- Registered consumers hold back pruning in their own feed order: account
--- consumers by seq within their account, deployment consumers by (xid, seq).
-CREATE TABLE IF NOT EXISTS adcp_reporting_feed_consumers (
-  consumer_name TEXT PRIMARY KEY CHECK (consumer_name ~ '^[A-Za-z0-9_.:-]{1,128}$'),
-  account_id TEXT,
-  cursor_xid xid8,
-  cursor_seq BIGINT NOT NULL,
-  updated_at TIMESTAMPTZ NOT NULL DEFAULT clock_timestamp(),
-  CHECK ((account_id IS NULL) = (cursor_xid IS NOT NULL))
-);
-`.trim();
-function encodeReportingChangeCursorV1(cursor) {
-  return Buffer.from(JSON.stringify(cursor), "utf8").toString("base64url");
-}
-function decodeReportingChangeCursorV1(value, account) {
-  let parsed;
-  try {
-    parsed = JSON.parse(Buffer.from(value, "base64url").toString("utf8"));
-  } catch {
-    throw new import_row_storage_errors.ReportingRowStoreError("INVALID_INPUT", "change cursor is malformed");
-  }
-  const cursor = parsed;
-  if (cursor.v !== 1 || (cursor.account ?? null) !== account || typeof cursor.seq !== "string" || !/^\d{1,19}$/.test(cursor.seq) || (account === null ? typeof cursor.xid !== "string" || !/^\d{1,20}$/.test(cursor.xid) : cursor.xid !== void 0)) {
-    throw new import_row_storage_errors.ReportingRowStoreError("INVALID_INPUT", "change cursor does not belong to this feed");
-  }
-  return cursor;
-}
-class ReportingChangeCursorExpiredError extends Error {
-  /**
-   * Original feed position, when available, so a cold-start consumer can retain its recovery
-   * boundary. It encodes the feed's account scope: do not serialize it to other tenants.
-   */
-  constructor(cursor) {
-    super("Reporting change cursor is older than the retained change history; resynchronize from current revisions");
-    this.cursor = cursor;
-    this.name = "ReportingChangeCursorExpiredError";
-  }
-  cursor;
-  code = "CURSOR_EXPIRED";
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  REPORTING_LEDGER_CHANGES_MIGRATION,
-  ReportingChangeCursorExpiredError,
-  decodeReportingChangeCursorV1,
-  encodeReportingChangeCursorV1
-});

package/dist/lib/reporting/ledger/change-feed.mjs

@@ -1,80 +0,0 @@
-import { ReportingRowStoreError } from "./row-storage-errors.mjs";
-const REPORTING_LEDGER_CHANGES_MIGRATION = `
-CREATE TABLE IF NOT EXISTS adcp_reporting_changes (
-  seq BIGSERIAL PRIMARY KEY,
-  xid xid8 NOT NULL DEFAULT pg_current_xact_id(),
-  account_id TEXT NOT NULL,
-  record_kind TEXT NOT NULL
-    CHECK (record_kind IN ('obligation', 'revision', 'adjustment', 'retirement')),
-  record_id TEXT NOT NULL,
-  obligation_id TEXT NOT NULL,
-  recorded_at TIMESTAMPTZ NOT NULL DEFAULT clock_timestamp()
-);
-CREATE INDEX IF NOT EXISTS adcp_reporting_changes_account
-  ON adcp_reporting_changes (account_id, seq);
-CREATE INDEX IF NOT EXISTS adcp_reporting_changes_deployment
-  ON adcp_reporting_changes (xid, seq);
-CREATE INDEX IF NOT EXISTS adcp_reporting_changes_recorded
-  ON adcp_reporting_changes (recorded_at, seq);
-
--- Highest (xid, seq) ever pruned: a deployment-wide cursor below it may have
--- missed a deleted change and fails closed.
-CREATE TABLE IF NOT EXISTS adcp_reporting_change_horizon (
-  singleton BOOLEAN PRIMARY KEY DEFAULT TRUE CHECK (singleton),
-  pruned_through_xid xid8 NOT NULL DEFAULT '0',
-  pruned_through_seq BIGINT NOT NULL DEFAULT 0
-);
-INSERT INTO adcp_reporting_change_horizon (singleton) VALUES (TRUE) ON CONFLICT DO NOTHING;
-
--- Highest seq ever pruned per account: an account cursor below it fails closed.
-CREATE TABLE IF NOT EXISTS adcp_reporting_change_account_horizon (
-  account_id TEXT PRIMARY KEY,
-  pruned_through_seq BIGINT NOT NULL
-);
-
--- Registered consumers hold back pruning in their own feed order: account
--- consumers by seq within their account, deployment consumers by (xid, seq).
-CREATE TABLE IF NOT EXISTS adcp_reporting_feed_consumers (
-  consumer_name TEXT PRIMARY KEY CHECK (consumer_name ~ '^[A-Za-z0-9_.:-]{1,128}$'),
-  account_id TEXT,
-  cursor_xid xid8,
-  cursor_seq BIGINT NOT NULL,
-  updated_at TIMESTAMPTZ NOT NULL DEFAULT clock_timestamp(),
-  CHECK ((account_id IS NULL) = (cursor_xid IS NOT NULL))
-);
-`.trim();
-function encodeReportingChangeCursorV1(cursor) {
-  return Buffer.from(JSON.stringify(cursor), "utf8").toString("base64url");
-}
-function decodeReportingChangeCursorV1(value, account) {
-  let parsed;
-  try {
-    parsed = JSON.parse(Buffer.from(value, "base64url").toString("utf8"));
-  } catch {
-    throw new ReportingRowStoreError("INVALID_INPUT", "change cursor is malformed");
-  }
-  const cursor = parsed;
-  if (cursor.v !== 1 || (cursor.account ?? null) !== account || typeof cursor.seq !== "string" || !/^\d{1,19}$/.test(cursor.seq) || (account === null ? typeof cursor.xid !== "string" || !/^\d{1,20}$/.test(cursor.xid) : cursor.xid !== void 0)) {
-    throw new ReportingRowStoreError("INVALID_INPUT", "change cursor does not belong to this feed");
-  }
-  return cursor;
-}
-class ReportingChangeCursorExpiredError extends Error {
-  /**
-   * Original feed position, when available, so a cold-start consumer can retain its recovery
-   * boundary. It encodes the feed's account scope: do not serialize it to other tenants.
-   */
-  constructor(cursor) {
-    super("Reporting change cursor is older than the retained change history; resynchronize from current revisions");
-    this.cursor = cursor;
-    this.name = "ReportingChangeCursorExpiredError";
-  }
-  cursor;
-  code = "CURSOR_EXPIRED";
-}
-export {
-  REPORTING_LEDGER_CHANGES_MIGRATION,
-  ReportingChangeCursorExpiredError,
-  decodeReportingChangeCursorV1,
-  encodeReportingChangeCursorV1
-};