chtypes 2.0.0.dev2__tar.gz → 2.0.0.dev3__tar.gz

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev3}/CHANGELOG.md

@@ -6,6 +6,10 @@ The four bindings in this repository are released together and give one answer,
 
 ## [Unreleased]
 
+### Added
+
+- A 2.0.0-dev SDK prefers the newest build of its own fingerprint (#511). A version request resolves `<tag>--fp-<fingerprint>` first, the alias the staging dev registry serves beside every dev tag, with the binding's own generated ABI fingerprint, and the tag itself only when every base answers the alias 404; any other failure of the alias request is that failure, with no fallback, and an alias whose index lacks the platform is `CHTYPES_ARTIFACT_UNPUBLISHED`. The dev channel's cache lookups (the installed-build lookup a registry open makes first, the offline answer, and the monotonic rule of a fetch) now see only records whose signed `abi_fingerprint` is the SDK's own, so a newer build of another fingerprint, installed by another dev SDK in the shared cache, is never returned or kept over this one's own, and is never removed or rewritten. So a dev build of a newer fingerprint no longer strands an older dev SDK until its consumers upgrade. Trust is unchanged (the signed predicate and the load checks decide), a listing never shows an alias, nothing records one, `list` and `where` are unchanged, and there is no option: both steps are the dev channel's alone, and the v1 contract and every production channel never take them. The rule is `docs/guides/fetch-v1.md` section 3, and the `dev-alias-*`, `resolve-installed-dev-alias-*` and `list-tags-dev-alias` conformance cases hold all four bindings to it.
+
 ## [1.1.0] — 2026-10-06
 
 ### Added

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: chtypes
-Version: 2.0.0.dev2
+Version: 2.0.0.dev3
 Summary: Python binding for the chtypes artifacts: ClickHouse's own type system, per version, behind the frozen chs_* C ABI
 Project-URL: Homepage, https://github.com/wave-rf/chtypes
 Project-URL: Repository, https://github.com/wave-rf/chtypes
@@ -19,7 +19,7 @@ Description-Content-Type: text/markdown
 
 # chtypes — Python SDK
 
-> **2.0.0-dev: UNSTABLE, staging only, not for production.** This is the ABI v2 development binding (public issue #511). It speaks ABI v2's unstable description, pins its dev fingerprint and refuses a library with any other ("update your dev SDK"). It fetches only from the staging dev channel (`https://registry-staging.wavehouse.dev/chtypes/v2-dev`) and trusts only the staging key; `CHTYPES_ARTIFACTS_URL`, `CHTYPES_TRUSTED_KEYS` and `CHTYPES_ALLOW_UNSIGNED`, and the `bases`, `trusted_keys` and `allow_unsigned` fetch options, are ignored, each with one warning; `--lock`, `--frozen` and `--update`, and the `frozen`, `lock_path`, `lock_write` and `update` options, are refused, because a dev build is replaceable and a superseded one expires after 14 days. Its cache is `${XDG_CACHE_HOME:-~/.cache}/chtypes/v2-dev`, or `<CHTYPES_CACHE>/v2-dev` under an explicit cache, which no 1.x SDK reads. Every vocabulary keeps a value it does not list as its `unknown(n)` member (`Outcome("x")`, whose `known` is `False`) instead of failing the document. The rules are r1 to r6 of [`docs/reference/abi-v2.md`](../docs/reference/abi-v2.md). For production, use the 1.x package: `pip install "chtypes<2"`.
+> **2.0.0-dev: UNSTABLE, staging only, not for production.** This is the ABI v2 development binding (public issue #511). It speaks ABI v2's unstable description, pins its dev fingerprint and refuses a library with any other ("update your dev SDK"). It fetches only from the staging dev channel (`https://registry-staging.wavehouse.dev/chtypes/v2-dev`) and trusts only the staging key; `CHTYPES_ARTIFACTS_URL`, `CHTYPES_TRUSTED_KEYS` and `CHTYPES_ALLOW_UNSIGNED`, and the `bases`, `trusted_keys` and `allow_unsigned` fetch options, are ignored, each with one warning; `--lock`, `--frozen` and `--update`, and the `frozen`, `lock_path`, `lock_write` and `update` options, are refused, because a dev build is replaceable and a superseded one expires after 14 days. Its cache is `${XDG_CACHE_HOME:-~/.cache}/chtypes/v2-dev`, or `<CHTYPES_CACHE>/v2-dev` under an explicit cache, which no 1.x SDK reads. A dev SDK prefers the newest build of its own fingerprint: it resolves `<tag>--fp-<its fingerprint>` first and the tag only when no such build exists, and its cache lookups ignore another dev SDK's builds in a shared cache, so a newer dev fingerprint never strands it (§3 of [`docs/guides/fetch-v1.md`](../docs/guides/fetch-v1.md)). Every vocabulary keeps a value it does not list as its `unknown(n)` member (`Outcome("x")`, whose `known` is `False`) instead of failing the document. The rules are r1 to r6 of [`docs/reference/abi-v2.md`](../docs/reference/abi-v2.md). For production, use the 1.x package: `pip install "chtypes<2"`.
 >
 > An explicit cache directory gets the `v2-dev` subroot whether it comes from `CHTYPES_CACHE` or from `FetchOptions(cache_dir=...)`: the layout is under `<cache_dir>/v2-dev`, never in the directory itself, so code that inspects or pre-populates a cache looks there; `chtypes.cache_root` and `chtypes.search_dirs` return the resolved paths. `CHTYPES_OFFLINE=1` is the environment twin of `FetchOptions(offline=True)` and `--offline`: the cache only, no request.
 

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev3}/README.md

@@ -1,6 +1,6 @@
 # chtypes — Python SDK
 
-> **2.0.0-dev: UNSTABLE, staging only, not for production.** This is the ABI v2 development binding (public issue #511). It speaks ABI v2's unstable description, pins its dev fingerprint and refuses a library with any other ("update your dev SDK"). It fetches only from the staging dev channel (`https://registry-staging.wavehouse.dev/chtypes/v2-dev`) and trusts only the staging key; `CHTYPES_ARTIFACTS_URL`, `CHTYPES_TRUSTED_KEYS` and `CHTYPES_ALLOW_UNSIGNED`, and the `bases`, `trusted_keys` and `allow_unsigned` fetch options, are ignored, each with one warning; `--lock`, `--frozen` and `--update`, and the `frozen`, `lock_path`, `lock_write` and `update` options, are refused, because a dev build is replaceable and a superseded one expires after 14 days. Its cache is `${XDG_CACHE_HOME:-~/.cache}/chtypes/v2-dev`, or `<CHTYPES_CACHE>/v2-dev` under an explicit cache, which no 1.x SDK reads. Every vocabulary keeps a value it does not list as its `unknown(n)` member (`Outcome("x")`, whose `known` is `False`) instead of failing the document. The rules are r1 to r6 of [`docs/reference/abi-v2.md`](../docs/reference/abi-v2.md). For production, use the 1.x package: `pip install "chtypes<2"`.
+> **2.0.0-dev: UNSTABLE, staging only, not for production.** This is the ABI v2 development binding (public issue #511). It speaks ABI v2's unstable description, pins its dev fingerprint and refuses a library with any other ("update your dev SDK"). It fetches only from the staging dev channel (`https://registry-staging.wavehouse.dev/chtypes/v2-dev`) and trusts only the staging key; `CHTYPES_ARTIFACTS_URL`, `CHTYPES_TRUSTED_KEYS` and `CHTYPES_ALLOW_UNSIGNED`, and the `bases`, `trusted_keys` and `allow_unsigned` fetch options, are ignored, each with one warning; `--lock`, `--frozen` and `--update`, and the `frozen`, `lock_path`, `lock_write` and `update` options, are refused, because a dev build is replaceable and a superseded one expires after 14 days. Its cache is `${XDG_CACHE_HOME:-~/.cache}/chtypes/v2-dev`, or `<CHTYPES_CACHE>/v2-dev` under an explicit cache, which no 1.x SDK reads. A dev SDK prefers the newest build of its own fingerprint: it resolves `<tag>--fp-<its fingerprint>` first and the tag only when no such build exists, and its cache lookups ignore another dev SDK's builds in a shared cache, so a newer dev fingerprint never strands it (§3 of [`docs/guides/fetch-v1.md`](../docs/guides/fetch-v1.md)). Every vocabulary keeps a value it does not list as its `unknown(n)` member (`Outcome("x")`, whose `known` is `False`) instead of failing the document. The rules are r1 to r6 of [`docs/reference/abi-v2.md`](../docs/reference/abi-v2.md). For production, use the 1.x package: `pip install "chtypes<2"`.
 >
 > An explicit cache directory gets the `v2-dev` subroot whether it comes from `CHTYPES_CACHE` or from `FetchOptions(cache_dir=...)`: the layout is under `<cache_dir>/v2-dev`, never in the directory itself, so code that inspects or pre-populates a cache looks there; `chtypes.cache_root` and `chtypes.search_dirs` return the resolved paths. `CHTYPES_OFFLINE=1` is the environment twin of `FetchOptions(offline=True)` and `--offline`: the cache only, no request.
 

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev3}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "chtypes"
-version = "2.0.0.dev2"
+version = "2.0.0.dev3"
 description = "Python binding for the chtypes artifacts: ClickHouse's own type system, per version, behind the frozen chs_* C ABI"
 readme = "README.md"
 license = "Apache-2.0"

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev3}/src/chtypes/__init__.py

@@ -53,6 +53,7 @@ from ._abi2._vocab import (
     DocFlags,
     FilterOutcome,
     Format,
+    MergeReason,
     Outcome,
     Reason,
     Source,
@@ -95,6 +96,7 @@ from .errors import (
 from .library import Block, Filter, Library, Schema, Server, open_unverified
 from .registry import FetchOptions, Registry, Resolved, TrustedKey, cache_root, search_dirs
 from .results import (
+    AtMergeEntry,
     BatchResult,
     BuildInfo,
     Capabilities,
@@ -138,6 +140,7 @@ __all__ = [
     "ArtifactPinnedError",
     "ArtifactUnpublishedError",
     "ArtifactUntrustedError",
+    "AtMergeEntry",
     "BatchResult",
     "Block",
     "BuildInfo",
@@ -166,6 +169,7 @@ __all__ = [
     "Header",
     "InternalError",
     "Library",
+    "MergeReason",
     "Outcome",
     "Reason",
     "Registry",

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev3}/src/chtypes/_abi2/_decls.py

@@ -1,4 +1,4 @@
-# GENERATED by scripts/abi-v1/gen.py --major 2 from spec/abi-v2/abi.json (CHS_ABI_FINGERPRINT sha256:d87e91be2bbe75b985c38224268c2f7dc5d8236dab0a4b4d61357c6dfdc1a232) — DO NOT EDIT  # noqa: E501
+# GENERATED by scripts/abi-v1/gen.py --major 2 from spec/abi-v2/abi.json (CHS_ABI_FINGERPRINT sha256:4129dccc3f4e698dedb0e99cae413f5240085f633c5a1244e2c55bf7a7bb6c3a) — DO NOT EDIT  # noqa: E501
 """The Python binding's generated ABI v2 layer: ctypes signatures, the handle
 classes, the two-phase resolve functions and invoke_by_name(), the test-only
 dispatcher the conformance suite drives from tests/fixtures/abi-v2/cases.json.
@@ -19,7 +19,7 @@ from dataclasses import dataclass, field
 from . import _errmap
 
 CHS_ABI_VERSION = 2
-CHS_ABI_FINGERPRINT = "sha256:d87e91be2bbe75b985c38224268c2f7dc5d8236dab0a4b4d61357c6dfdc1a232"
+CHS_ABI_FINGERPRINT = "sha256:4129dccc3f4e698dedb0e99cae413f5240085f633c5a1244e2c55bf7a7bb6c3a"
 
 # The description's stability: "unstable" while this generation is being
 # designed, so CHS_ABI_FINGERPRINT moves with every change, and "locked" after

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev3}/src/chtypes/_abi2/_errmap.py

@@ -1,4 +1,4 @@
-# GENERATED by scripts/abi-v1/gen.py --major 2 from spec/abi-v2/abi.json (CHS_ABI_FINGERPRINT sha256:d87e91be2bbe75b985c38224268c2f7dc5d8236dab0a4b4d61357c6dfdc1a232) — DO NOT EDIT  # noqa: E501
+# GENERATED by scripts/abi-v1/gen.py --major 2 from spec/abi-v2/abi.json (CHS_ABI_FINGERPRINT sha256:4129dccc3f4e698dedb0e99cae413f5240085f633c5a1244e2c55bf7a7bb6c3a) — DO NOT EDIT  # noqa: E501
 """spec/abi-v2/sdk.json's error-mapping tables, as references to the
 public classes (python/src/chtypes/errors.py, re-exported by
 python/src/chtypes/_abi2/_errors.py). Only the MAPPING is generated: the

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev3}/src/chtypes/_abi2/_vocab.py

@@ -1,10 +1,10 @@
-# GENERATED by scripts/abi-v1/gen.py --major 2 from spec/abi-v2/abi.json (CHS_ABI_FINGERPRINT sha256:d87e91be2bbe75b985c38224268c2f7dc5d8236dab0a4b4d61357c6dfdc1a232) — DO NOT EDIT  # noqa: E501
+# GENERATED by scripts/abi-v1/gen.py --major 2 from spec/abi-v2/abi.json (CHS_ABI_FINGERPRINT sha256:4129dccc3f4e698dedb0e99cae413f5240085f633c5a1244e2c55bf7a7bb6c3a) — DO NOT EDIT  # noqa: E501
 """The Python binding's generated vocabularies, from spec/abi-v2/abi.json: the C
 enums (`Format`, `Status`), the document vocabularies (`Outcome`, `FilterOutcome`,
-`Verdict`, `DefaultKind`, `Reason`, `Source`, `DiscoverQueryParam`) with the facts the
-description attaches to each value (`Format.ch_name`, `Reason` lossy, `Source`
-is_stored, `Verdict.answered`), and the `DocFlags` groups. No other file in this
-package keeps a copy of any of it.
+`Verdict`, `DefaultKind`, `MergeReason`, `Reason`, `Source`, `DiscoverQueryParam`) with the
+facts the description attaches to each value (`Format.ch_name`, `Reason` lossy,
+`Source` is_stored, `Verdict.answered`), and the `DocFlags` groups. No other file in
+this package keeps a copy of any of it.
 
 Rule r3 (spec/abi-v2/docs.md): every vocabulary has an unknown(n) member, and a
 value the description does not list reads as it, carrying the raw value, for that
@@ -225,6 +225,30 @@ class DefaultKind(StrEnum):
         return cls(text)
 
 
+class MergeReason(StrEnum):
+    """What a merge would do to one row of the part an INSERT writes, as a batch's
+    `at_merge` reports it."""
+
+    TTL_DELETE = "ttl_delete"
+    TTL_COLUMN_RESET = "ttl_column_reset"
+
+    @classmethod
+    def _missing_(cls, value: object) -> MergeReason | None:
+        return _unknown_str(cls, value)
+
+    @property
+    def known(self) -> bool:
+        """Whether the description lists this value: False for exactly the unknown(n)
+        member an unlisted value reads as (rule r3)."""
+        return type(self)._value2member_map_.get(self._value_) is self
+
+    @classmethod
+    def of(cls, text: str) -> MergeReason:
+        """Map a document's spelling. One the description does not list is kept as
+        this vocabulary's unknown(n) member, carrying it (rule r3)."""
+        return cls(text)
+
+
 class DiscoverQueryParam(StrEnum):
     """A query parameter of the SQL `discover_query` returns, which the caller binds
     when it runs the query."""
@@ -383,6 +407,7 @@ DESCRIBED_VOCABULARIES: Final[dict[str, type]] = {
     "chs_status": Status,
     "chs_format": Format,
     "transform_reason": Reason,
+    "merge_reason": MergeReason,
     "value_src": Source,
     "row_outcome": Outcome,
     "batch_outcome": Outcome,

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev3}/src/chtypes/_decode.py

@@ -28,9 +28,10 @@ import json
 from collections.abc import Callable, Mapping
 from typing import Any
 
-from ._abi2._vocab import DefaultKind, FilterOutcome, Outcome, Reason, Source, Verdict
+from ._abi2._vocab import DefaultKind, FilterOutcome, MergeReason, Outcome, Reason, Source, Verdict
 from .errors import ArtifactCorruptError, internal
 from .results import (
+    AtMergeEntry,
     BatchResult,
     BuildInfo,
     Capabilities,
@@ -325,6 +326,29 @@ def _engine_cell(obj: dict[str, Any], where: str) -> EngineCell:
     )
 
 
+def _int_list(obj: Mapping[str, Any], key: str, where: str) -> tuple[int, ...] | None:
+    """A list of non-negative integers: None when absent."""
+    if obj.get(key) is None:
+        return None
+    out = []
+    for item in _list(obj, key, where):
+        if isinstance(item, bool) or not isinstance(item, int) or item < 0:
+            raise _wrong(where, key, "an array of non-negative integers", item)
+        out.append(item)
+    return tuple(out)
+
+
+def _at_merge(obj: dict[str, Any], where: str) -> AtMergeEntry:
+    # An unlisted reason is its unknown(n): kept, never a failure (rule r3).
+    return AtMergeEntry(
+        row=_int(obj, "row", where),
+        reason=MergeReason.of(_text(obj, "reason", where)),
+        column=_bytes_or_none(obj, "column", where),
+        stored=_bytes_or_none(obj, "stored", where),
+        input_rows=_int_list(obj, "input_rows", where),
+    )
+
+
 def _engine_rows(obj: Mapping[str, Any], where: str) -> tuple[tuple[EngineCell, ...], ...]:
     rows = []
     for i, row in enumerate(_list(obj, "engine_rows", where)):
@@ -411,6 +435,8 @@ def decode_batch(raw: bytes, export: bytes | None) -> BatchResult:
         framing=None
         if framing is None
         else _framing(_obj(framing, where, "framing"), f"{where}.framing"),
+        unsupported_settings=_name_list(obj, "unsupported_settings", where),
+        at_merge=_objects(obj, "at_merge", where, _at_merge),
     )
 
 

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev3}/src/chtypes/_ocifetch/_channel.py

@@ -18,6 +18,19 @@ five ways:
   used through its subroot `<cache>/v2-dev`, never as a whole layout;
 - a signed predicate must say abi 2.
 
+It also resolves one tag the v1 contract never asks for: a version request
+fetches `<tag>--fp-<its own fingerprint>` first, the newest dev build of the ABI
+this binding speaks, and falls back to `<tag>` only when no base has that alias
+(docs/guides/fetch-v1.md §3, "The dev channel's alias step"), so a dev build of a
+newer fingerprint never strands this one. Its cache lookups (`resolve_installed`,
+and `ensure`'s offline answer and its monotonic rule) see only the records whose
+signed `abi_fingerprint` is its own: a build of another fingerprint in a shared
+cache is never returned and never kept over this one's own, and it is never
+removed or rewritten either. It is automatic, with no override; the trust checks
+are unchanged, and a listing never shows an alias. The fingerprint
+is the generated `CHS_ABI_FINGERPRINT` of the ABI layer (`chtypes._abi2._decls`),
+never a hand-written copy.
+
 The v1 contract itself stays in this package, unchanged, because the fetch-v1
 conformance cases (tests/fixtures/fetch-v1) are its specification and the dev
 channel shares every other rule with it. Only a test run reaches it:
@@ -29,16 +42,19 @@ override a user can reach.
 from __future__ import annotations
 
 import os
+import re
 import sys
 import threading
 from collections.abc import Callable, Sequence
 from dataclasses import dataclass, replace
 from typing import Final, Protocol
 
+from chtypes._abi2._decls import CHS_ABI_FINGERPRINT
 from chtypes._ocifetch import _constants as C
 from chtypes._ocifetch._dsse import TrustedKey
 
 __all__ = [
+    "ALIAS_SEPARATOR",
     "DEV_ABI_GENERATION",
     "DEV_CACHE_DIR",
     "DEV_CHANNEL_BASE",
@@ -50,12 +66,15 @@ __all__ = [
     "PinningRefusedError",
     "abi",
     "active",
+    "alias_tag",
     "allow_overrides_for_tests",
     "channel_name",
     "enforce",
     "ignored_settings_warned",
     "pinning_requested",
     "trusted_keys",
+    "use_own_fingerprint_for_tests",
+    "visible",
     "use_dev_channel_for_tests",
     "use_fetch_v1_for_tests",
 ]
@@ -79,6 +98,10 @@ DEV_RECORD_SCHEMA: Final = 2
 # The abi a dev predicate must carry.
 DEV_ABI_GENERATION: Final = 2
 
+# Joins a tag and a fingerprint into the dev channel's alias tag:
+# <tag>--fp-<64 lowercase hex> (docs/guides/fetch-v1.md §3).
+ALIAS_SEPARATOR: Final = "--fp-"
+
 # What every lock, frozen or update request gets from a 2.0.0-dev SDK, before
 # any network call (rule r6).
 PINNING_REFUSED: Final = (
@@ -102,6 +125,11 @@ class Channel:
     keys: tuple[dict[str, str], ...]  # {"keyid", "ed25519_hex"}: the default trust
     overridable: bool  # the base, trust and unsigned overrides are honored
     pinnable: bool  # lock, frozen and update are honored
+    # The fingerprint, 64 lowercase hex, this contract's SDK speaks: a version
+    # request resolves its alias tag before the tag itself, and the cache
+    # lookups see only records signed with it. "" does neither (the v1 contract
+    # and every production channel).
+    own_fingerprint: str = ""
 
 
 # What a 2.0.0-dev SDK speaks, and what every process speaks unless a test
@@ -117,6 +145,7 @@ DEV_CHANNEL: Final = Channel(
     keys=({"keyid": DEV_KEY_ID, "ed25519_hex": DEV_KEY_HEX},),
     overridable=False,
     pinnable=False,
+    own_fingerprint=CHS_ABI_FINGERPRINT.removeprefix("sha256:"),
 )
 
 # The v1 contract the fetch-v1 conformance cases specify, from the generated
@@ -202,6 +231,49 @@ def allow_overrides_for_tests() -> Callable[[], None]:
     return _use(replace(DEV_CHANNEL, overridable=True))
 
 
+_FINGERPRINT_HEX = re.compile(r"[0-9a-f]{64}")
+
+
+def use_own_fingerprint_for_tests(fingerprint: str) -> Callable[[], None]:
+    """Make this TEST run's active contract speak `fingerprint` (64 lowercase
+    hex) as the dev channel speaks its own: a version request resolves that
+    fingerprint's alias tag first, and the cache lookups see only records
+    signed with it. The fetch-v1 conformance cases that carry
+    `request.own_fingerprint` run under it, against fixtures that name a
+    fixture fingerprint. Everything else stays the active contract's. Returns
+    the restore function; raises outside a test run or on a fingerprint that is
+    not 64 lowercase hex."""
+    _test_only("use_own_fingerprint_for_tests")
+    if not _FINGERPRINT_HEX.fullmatch(fingerprint):
+        raise ValueError(f"use_own_fingerprint_for_tests: {fingerprint!r} is not 64 lowercase hex")
+    return _use(replace(active(), own_fingerprint=fingerprint))
+
+
+def alias_tag(tag: str, channel: Channel | None = None) -> str | None:
+    """The alias a version request for `tag` resolves first under a contract
+    with an own fingerprint, or None when it resolves `tag` alone: under the
+    v1 contract and every production channel, and for a request that is not a
+    version spelling (an arbitrary tag has no alias)."""
+    channel = channel or active()
+    if not channel.own_fingerprint or not re.fullmatch(C.SPELLING_REGEX, tag):
+        return None
+    return f"{tag}{ALIAS_SEPARATOR}{channel.own_fingerprint}"
+
+
+def visible(predicate: object, channel: Channel | None = None) -> bool:
+    """Whether a cache record (or a pre-seeded entry) whose SIGNED predicate is
+    `predicate` may answer a request under the active contract: under one with
+    an own fingerprint (the dev channel), only when the predicate's
+    `abi_fingerprint` is that fingerprint; under every other, always. A record
+    it cannot see is never returned and never kept by the monotonic rule, and
+    nothing removes or rewrites it: another SDK of another fingerprint owns it."""
+    channel = channel or active()
+    if not channel.own_fingerprint:
+        return True
+    fingerprint = predicate.get("abi_fingerprint") if isinstance(predicate, dict) else None
+    return fingerprint == f"sha256:{channel.own_fingerprint}"
+
+
 def use_dev_channel_for_tests() -> Callable[[], None]:
     """Make this TEST run speak the dev channel exactly as a user's process does
     (undoing either function above, for a test of the dev channel itself).

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev3}/src/chtypes/_ocifetch/_ensure.py

@@ -355,6 +355,10 @@ def _newer_installed(
     (`26.3.4.1`) keeps only a newer BUILD of that exact version. A request
     that is not a version spelling (an arbitrary tag) names no range, so
     nothing is kept for it.
+
+    Under the dev channel only an install of its own fingerprint counts
+    (`_channel.visible`): a newer build of another fingerprint, installed by
+    another dev SDK, is never kept over this one's own.
     """
     if not re.match(C.SPELLING_REGEX, request_spelling):
         return None
@@ -368,6 +372,8 @@ def _newer_installed(
     for dir_, record in list_verified_records(roots):
         if record.platform != platform_key:
             continue
+        if not _channel.visible(record.predicate):
+            continue  # another fingerprint's build (_channel.visible): never kept over this one's
         if not version_within_request(record.version, request_spelling):
             continue
         version_key = _version_key(record.version)
@@ -693,7 +699,11 @@ def _ensure_floating(
     scratch_root = _scratch_root(cache_root_path)
 
     index_doc, index_bytes, index_digest = fetch_manifest_by_tag(
-        bases, request.spelling, policy=policy, retry=retry
+        bases,
+        request.spelling,
+        policy=policy,
+        retry=retry,
+        alias=_channel.alias_tag(request.spelling),
     )
     platform_desc = resolve_platform_manifest(index_doc, platform_key)
     manifest_hex = parse_digest(platform_desc.digest)
@@ -1050,6 +1060,7 @@ def _verify_and_install_from_local_blobs(
     manifest_digest: str,
     cache_write_root: Path,
     trusted_keys: tuple[TrustedKey, ...],
+    visible_only: bool = False,
 ) -> VerifiedRecord | None:
     """docs/guides/fetch-v1.md §1/§6: "A pre-seeded layout has entries in
     `index.json` with no corresponding `unpacked/` directory yet; the first
@@ -1103,6 +1114,9 @@ def _verify_and_install_from_local_blobs(
         return None
 
     predicate = verified.statement.predicate
+    if visible_only and not _channel.visible(predicate):
+        # A lookup never installs another fingerprint's pre-seeded build.
+        return None
     layer_hex = parse_digest(layer_desc.digest)
     if layer_hex not in verified.statement.subject_sha256:
         return None
@@ -1180,6 +1194,7 @@ def _verify_preseeded_entries(roots: Sequence[Path], trusted_keys: tuple[Trusted
                 manifest_digest=digest,
                 cache_write_root=cache_write_root,
                 trusted_keys=trusted_keys,
+                visible_only=True,
             )
             if record is not None:
                 already_verified.add(digest)
@@ -1224,7 +1239,10 @@ def resolve_installed(request: Request, platform: str, options: Options) -> Reso
     candidates = [
         (dir_path, record)
         for dir_path, record in list_verified_records(roots)
-        if record.platform == platform and version_within_request(record.version, request.spelling)
+        if record.platform == platform
+        and version_within_request(record.version, request.spelling)
+        # Under the dev channel, only its own fingerprint's builds (_channel.visible).
+        and _channel.visible(record.predicate)
     ]
     if not candidates:
         return None

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev3}/src/chtypes/_ocifetch/_http.py

@@ -88,6 +88,12 @@ class NotFoundHttpError(TransportError):
     """A 404 (or, for a `file://` base, a missing path)."""
 
 
+class AliasNotFoundError(TransportError):
+    """`mode="alias"`: every configured base answered the alias tag 404 (or,
+    for a `file://` base, has no such path). The one alias outcome the caller
+    answers with the tag itself (docs/guides/fetch-v1.md §3)."""
+
+
 class UnauthorizedHttpError(TransportError):
     """A 401 that is not (or is no longer) resolvable by the anonymous token flow."""
 
@@ -506,6 +512,12 @@ def fetch_from_bases(
       where it is retried within the shared budget before giving up — a
       listed digest that 404s is a host fault, never "unpublished", so the
       final exception for this mode is always `UnreachableHttpError`.
+    - `alias`: the dev channel's alias tag (docs/guides/fetch-v1.md §3). A 404
+      moves to the next base, as for a tag, but only a 404 on EVERY base is
+      "not found" (`AliasNotFoundError`, which the caller answers with the tag
+      itself). Any other failure on any base is raised as that failure, as the
+      tag would get it, so a transient error can never route a request to the
+      tag, which may name a build of another fingerprint.
 
     `decided-here` (the spec does not state it): when bases disagree — some
     404, some unreachable — the outcome follows the LAST base tried, since
@@ -516,6 +528,7 @@ def fetch_from_bases(
         raise UnreachableHttpError("no base URLs configured")
     last_index = len(bases) - 1
     last_error: TransportError | None = None
+    alias_failure: TransportError | None = None  # mode="alias": a base's non-404 failure
     for i, base in enumerate(bases):
         is_last = i == last_index
         scheme = urlsplit(base).scheme
@@ -538,8 +551,13 @@ def fetch_from_bases(
             continue
         except UnreachableHttpError as e:
             last_error = e
+            alias_failure = e
             continue
     assert last_error is not None
+    if mode == "alias":
+        if alias_failure is None:
+            raise AliasNotFoundError(f"{path}: not found on any configured base")
+        last_error = alias_failure
     if mode == "tag" and isinstance(last_error, NotFoundHttpError):
         raise last_error
     if isinstance(last_error, (UnauthorizedHttpError, ForbiddenHttpError)):

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev3}/src/chtypes/_ocifetch/_oci.py

@@ -16,7 +16,13 @@ from chtypes._ocifetch._errors import (
     ArtifactUnpublishedError,
     SourceIncompatibleError,
 )
-from chtypes._ocifetch._http import FetchPolicy, RetryPolicy, fetch_from_bases, get_json
+from chtypes._ocifetch._http import (
+    AliasNotFoundError,
+    FetchPolicy,
+    RetryPolicy,
+    fetch_from_bases,
+    get_json,
+)
 
 __all__ = [
     "Descriptor",
@@ -242,9 +248,31 @@ def fetch_manifest_by_tag(
     policy: FetchPolicy,
     retry: RetryPolicy,
     max_bytes: int = C.MANIFEST_MAX_BYTES,
+    alias: str | None = None,
 ) -> tuple[dict, bytes, str]:
-    """GET manifests/<tag>; returns (doc, raw_bytes, resolved_digest)."""
+    """GET manifests/<tag>; returns (doc, raw_bytes, resolved_digest).
+
+    With `alias` (the dev channel's `<tag>--fp-<fingerprint>`, from
+    `_channel.alias_tag`), GET manifests/<alias> first, and the tag only when
+    every base answered the alias 404 (docs/guides/fetch-v1.md §3); any other
+    failure of the alias request is raised as it is. What is returned is then
+    trusted exactly as the tag's own answer would be."""
     accept = (C.MEDIA_TYPE_INDEX, C.MEDIA_TYPE_MANIFEST)
+    if alias is not None:
+        try:
+            doc, resp = get_json(
+                bases,
+                f"/manifests/{alias}",
+                mode="alias",
+                accept=accept,
+                max_bytes=max_bytes,
+                policy=policy,
+                retry=retry,
+            )
+        except AliasNotFoundError:
+            pass
+        else:
+            return doc, resp.body, f"sha256:{hashlib.sha256(resp.body).hexdigest()}"
     doc, resp = get_json(
         bases,
         f"/manifests/{tag}",

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev3}/src/chtypes/results.py

@@ -14,9 +14,10 @@ from __future__ import annotations
 from collections.abc import Mapping
 from dataclasses import dataclass
 
-from ._abi2._vocab import DefaultKind, FilterOutcome, Outcome, Verdict
+from ._abi2._vocab import DefaultKind, FilterOutcome, MergeReason, Outcome, Verdict
 
 __all__ = [
+    "AtMergeEntry",
     "BatchResult",
     "BuildInfo",
     "Capabilities",
@@ -108,6 +109,31 @@ class EngineCell:
     value: bytes | None = None
 
 
+@dataclass(frozen=True, slots=True)
+class AtMergeEntry:
+    """One thing an `OPTIMIZE TABLE ... FINAL` of the part the INSERT writes would do
+    to one of its rows, at the call's clock instant: an entry of the batch's
+    `at_merge` list (ABI v2). `engine_rows` stays exactly what the INSERT writer
+    produces, so the two never contradict each other.
+
+    `row` indexes `engine_rows`: the part's row, not the input body's. `reason` is
+    a `MergeReason`; one the description does not list is its unknown(n) member
+    (rule r3). `column` is the column a `ttl_column_reset` resets (from `column`
+    or `column_b64`), None when the entry names none. `stored` is the column's
+    value after the reset (from `stored` or `stored_b64`), None when the document
+    carries none, which it omits when the column's DEFAULT reads the clock or a
+    generator and the value is decided at the merge. `input_rows` is the input
+    rows, each by its index in the body, that formed the part's row, None when
+    the document carries none.
+    """
+
+    row: int
+    reason: MergeReason
+    column: bytes | None = None
+    stored: bytes | None = None
+    input_rows: tuple[int, ...] | None = None
+
+
 @dataclass(frozen=True, slots=True)
 class RowResult:
     """The `row` document. `columns` is every `cols` entry in document order;
@@ -160,6 +186,12 @@ class BatchResult:
     can be fooled too. A caller that needs every record accounted for declines
     a body with any skipped row or any `unconsumed` range
     (docs/guides/batches.md).
+
+    `unsupported_settings` is the call's own settings the library declined, from
+    the batch's top-level list (ABI v2). `at_merge` is what an `OPTIMIZE TABLE ...
+    FINAL` of the part would do to its rows, at least: a later background merge
+    can remove more as more rows expire, and a row both removed and reset lists
+    only `ttl_delete`. Each is empty when the document carries none.
     """
 
     outcome: Outcome
@@ -178,6 +210,8 @@ class BatchResult:
     partition_count: int | None
     unconsumed: tuple[Span, ...]
     framing: Framing | None
+    unsupported_settings: tuple[bytes, ...] = ()
+    at_merge: tuple[AtMergeEntry, ...] = ()
 
 
 @dataclass(frozen=True, slots=True)

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev3}/tests/abi2/test_reader_rules.py

@@ -32,6 +32,7 @@ from chtypes import (
     FilterOutcome,
     Format,
     InternalError,
+    MergeReason,
     Outcome,
     Reason,
     Source,
@@ -91,6 +92,12 @@ def test_r2_unknown_members_are_ignored(open_variant) -> None:
     assert batch.framing is not None and batch.framing.header is not None
     assert batch.framing.header.names == (b"s",)
     assert batch.payload == b'{"s":"abc"}\n'
+    # ABI v2's batch members (public issue #544): an unknown member inside either is ignored.
+    assert batch.unsupported_settings == (b"st",)
+    assert len(batch.at_merge) == 1
+    entry = batch.at_merge[0]
+    assert entry.reason is MergeReason.TTL_COLUMN_RESET and entry.column == b"s"
+    assert entry.stored == b"" and entry.input_rows == (0,)
 
     with schema.compile_filter("x > 1") as flt:
         res = flt.rows(JSON, b'{"x":1}')
@@ -163,6 +170,12 @@ def test_r3_unknown_values_are_kept(open_variant) -> None:
     b = batch("batch.storage_transforms.reason")
     assert b.outcome is Outcome.ACCEPTED and len(b.rows) == 1
 
+    b = batch("batch.at_merge.reason")
+    entry = b.at_merge[0]
+    assert entry.reason == "x_future_reason" and not entry.reason.known
+    assert isinstance(entry.reason, MergeReason) and entry.column == b"s"
+    assert b.outcome is Outcome.ACCEPTED and len(b.rows) == 1
+
     # The schema's enum constrains the writer, never the reader (r3).
     b = batch("batch.framing.container")
     assert b.framing is not None and b.framing.container == "x_future_container"