chtypes 2.0.0.dev2__tar.gz → 2.0.0.dev4__tar.gz

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev4}/CHANGELOG.md

@@ -6,6 +6,19 @@ The four bindings in this repository are released together and give one answer,
 
 ## [Unreleased]
 
+### Added
+
+- The server's filter-declined settings (ABI v2; moves the dev fingerprint): `SchemaServer.filter_declined_settings`, a tuple of `DeclinedSetting` (`name`, `tier`), decoded from `schema_description`'s new required `server.filter_declined_settings`, with the new `DeclinedTier` vocabulary (`PREDICATE`, `PREDICATE_UNFLIPPED`, `RESULT_CONTENT`, and its unknown(n)). `compile_filter` on a schema whose server lists any is the library's `CHS_DECLINED`, an `UnsupportedError` carrying its message; a filter's own settings other than `session_timezone` are no longer declined at compile, and a declined one is named at evaluation instead.
+- The v2 spec states that a filter verdict counts only when the evaluation's outcome is `ok`: over a body a server would not accept, every verdict is `d`.
+- The v2 spec publishes the WHERE-affecting settings lists (`spec/abi-v2/where-settings/`) with the consumer rule.
+- The v2 spec publishes the filter decline-reasons catalog (`spec/abi-v2/declines/`).
+- A `410 Gone` is a retired repository, and permanent (#571). Any request the fetch layer makes (a tag, an alias, a digest, a blob, `tags/list`, the referrers API or its fallback tag, after a redirect too) that answers `410` is now the new code `CHTYPES_SOURCE_RETIRED` (exit status 10), never retried and never sent to the next base, nor from the dev channel's alias to its tag. It was `CHTYPES_SOURCE_UNREACHABLE` (exit 3) with the registry's message dropped, and Go, Python and Rust moved on to the next base, so a mirror's 404 could hide the retirement. The error names the URL that answered and carries the registry's own message, with control and bidirectional-formatting characters removed and cut to 256 code points: Go `CodeSourceRetired` (`errors.Is(err, ErrSourceRetired)`), Python and TypeScript `SourceRetiredError`, Rust `Error::SourceRetired`. The rule is `docs/guides/fetch-v1.md` section 2, "A retired repository", and the `retired-410-*` and `list-tags-retired-410` conformance cases and one shared message table (`tests/fixtures/retired-message/cases.json`) hold all four bindings to it.
+- A 2.0.0-dev SDK prefers the newest build of its own fingerprint (#511). A version request resolves `<tag>--fp-<fingerprint>` first, the alias the staging dev registry serves beside every dev tag, with the binding's own generated ABI fingerprint, and the tag itself only when every base answers the alias 404; any other failure of the alias request is that failure, with no fallback, and an alias whose index lacks the platform is `CHTYPES_ARTIFACT_UNPUBLISHED`. The dev channel's cache lookups (the installed-build lookup a registry open makes first, the offline answer, and the monotonic rule of a fetch) now see only records whose signed `abi_fingerprint` is the SDK's own, so a newer build of another fingerprint, installed by another dev SDK in the shared cache, is never returned or kept over this one's own, and is never removed or rewritten. So a dev build of a newer fingerprint no longer strands an older dev SDK until its consumers upgrade. Trust is unchanged (the signed predicate and the load checks decide), a listing never shows an alias, nothing records one, `list` and `where` are unchanged, and there is no option: both steps are the dev channel's alone, and the v1 contract and every production channel never take them. The rule is `docs/guides/fetch-v1.md` section 3, and the `dev-alias-*`, `resolve-installed-dev-alias-*` and `list-tags-dev-alias` conformance cases hold all four bindings to it.
+
+### Fixed
+
+- A 2.0.0-dev SDK whose fingerprint no published build carries yet now fails closed with a precise message (#578). When every base answers its own alias 404 and the tag names a build signed for another fingerprint, `fetch` is `CHTYPES_ARTIFACT_UNPUBLISHED` (exit status 4): `no published build for this SDK's fingerprint <own fp>; newest published on this channel is <fp> (build <id>)`. It used to install that build, or report it already installed, and the lookup at open then answered `CHTYPES_ARTIFACT_MISSING` with advice to run `fetch`: a loop with no pointer to the cause. Nothing is downloaded or installed and the cache is unchanged. An alias that answers, a tag at the SDK's own fingerprint and the v1 contract are unchanged. All four bindings run the same fetch conformance cases, `fp-ahead-*`, and the rule is `docs/guides/fetch-v1.md` section 3.
+
 ## [1.1.0] — 2026-10-06
 
 ### Added

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: chtypes
-Version: 2.0.0.dev2
+Version: 2.0.0.dev4
 Summary: Python binding for the chtypes artifacts: ClickHouse's own type system, per version, behind the frozen chs_* C ABI
 Project-URL: Homepage, https://github.com/wave-rf/chtypes
 Project-URL: Repository, https://github.com/wave-rf/chtypes
@@ -19,9 +19,11 @@ Description-Content-Type: text/markdown
 
 # chtypes — Python SDK
 
-> **2.0.0-dev: UNSTABLE, staging only, not for production.** This is the ABI v2 development binding (public issue #511). It speaks ABI v2's unstable description, pins its dev fingerprint and refuses a library with any other ("update your dev SDK"). It fetches only from the staging dev channel (`https://registry-staging.wavehouse.dev/chtypes/v2-dev`) and trusts only the staging key; `CHTYPES_ARTIFACTS_URL`, `CHTYPES_TRUSTED_KEYS` and `CHTYPES_ALLOW_UNSIGNED`, and the `bases`, `trusted_keys` and `allow_unsigned` fetch options, are ignored, each with one warning; `--lock`, `--frozen` and `--update`, and the `frozen`, `lock_path`, `lock_write` and `update` options, are refused, because a dev build is replaceable and a superseded one expires after 14 days. Its cache is `${XDG_CACHE_HOME:-~/.cache}/chtypes/v2-dev`, or `<CHTYPES_CACHE>/v2-dev` under an explicit cache, which no 1.x SDK reads. Every vocabulary keeps a value it does not list as its `unknown(n)` member (`Outcome("x")`, whose `known` is `False`) instead of failing the document. The rules are r1 to r6 of [`docs/reference/abi-v2.md`](../docs/reference/abi-v2.md). For production, use the 1.x package: `pip install "chtypes<2"`.
+> **2.0.0-dev: UNSTABLE, staging only, not for production.** This is the ABI v2 development binding (public issue #511). It speaks ABI v2's unstable description, pins its dev fingerprint and refuses a library with any other ("update your dev SDK"). It fetches only from the staging dev channel (`https://registry-staging.wavehouse.dev/chtypes/v2-dev`) and trusts only the staging key; `CHTYPES_ARTIFACTS_URL`, `CHTYPES_TRUSTED_KEYS` and `CHTYPES_ALLOW_UNSIGNED`, and the `bases`, `trusted_keys` and `allow_unsigned` fetch options, are ignored, each with one warning; `--lock`, `--frozen` and `--update`, and the `frozen`, `lock_path`, `lock_write` and `update` options, are refused, because a dev build is replaceable and a superseded one expires after 14 days. Its cache is `${XDG_CACHE_HOME:-~/.cache}/chtypes/v2-dev`, or `<CHTYPES_CACHE>/v2-dev` under an explicit cache, which no 1.x SDK reads. A dev SDK prefers the newest build of its own fingerprint: it resolves `<tag>--fp-<its fingerprint>` first and the tag only when no such build exists, and its cache lookups ignore another dev SDK's builds in a shared cache, so a newer dev fingerprint never strands it (§3 of [`docs/guides/fetch-v1.md`](../docs/guides/fetch-v1.md)). Every vocabulary keeps a value it does not list as its `unknown(n)` member (`Outcome("x")`, whose `known` is `False`) instead of failing the document. The rules are r1 to r6 of [`docs/reference/abi-v2.md`](../docs/reference/abi-v2.md). For production, use the 1.x package: `pip install "chtypes<2"`.
 >
 > An explicit cache directory gets the `v2-dev` subroot whether it comes from `CHTYPES_CACHE` or from `FetchOptions(cache_dir=...)`: the layout is under `<cache_dir>/v2-dev`, never in the directory itself, so code that inspects or pre-populates a cache looks there; `chtypes.cache_root` and `chtypes.search_dirs` return the resolved paths. `CHTYPES_OFFLINE=1` is the environment twin of `FetchOptions(offline=True)` and `--offline`: the cache only, no request.
+>
+> <!-- remove-at-v2-lock -->v2-dev builds before the one that carries this contract (its release notice names it) can answer `ok` with `t` verdicts after a refused row. On those builds, when a body or block holds more than one row, treat every verdict as `d` if `errors` is non-empty.<!-- /remove-at-v2-lock -->
 
 **If this row were inserted into this table on this ClickHouse version, what would happen?** chtypes answers with ClickHouse's own code: the real C++ type machinery, vendored per release into a native library behind the frozen `chs_*` C ABI and reached here through stdlib `ctypes`. Nothing semantic is reimplemented, so _"what does ClickHouse do with `256` into a `UInt8`?"_ is answered by ClickHouse rather than by a model of it. One peer binding among `{go, python, ts, rust}` — no language is privileged, and all four give one answer.
 

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev4}/README.md

@@ -1,8 +1,10 @@
 # chtypes — Python SDK
 
-> **2.0.0-dev: UNSTABLE, staging only, not for production.** This is the ABI v2 development binding (public issue #511). It speaks ABI v2's unstable description, pins its dev fingerprint and refuses a library with any other ("update your dev SDK"). It fetches only from the staging dev channel (`https://registry-staging.wavehouse.dev/chtypes/v2-dev`) and trusts only the staging key; `CHTYPES_ARTIFACTS_URL`, `CHTYPES_TRUSTED_KEYS` and `CHTYPES_ALLOW_UNSIGNED`, and the `bases`, `trusted_keys` and `allow_unsigned` fetch options, are ignored, each with one warning; `--lock`, `--frozen` and `--update`, and the `frozen`, `lock_path`, `lock_write` and `update` options, are refused, because a dev build is replaceable and a superseded one expires after 14 days. Its cache is `${XDG_CACHE_HOME:-~/.cache}/chtypes/v2-dev`, or `<CHTYPES_CACHE>/v2-dev` under an explicit cache, which no 1.x SDK reads. Every vocabulary keeps a value it does not list as its `unknown(n)` member (`Outcome("x")`, whose `known` is `False`) instead of failing the document. The rules are r1 to r6 of [`docs/reference/abi-v2.md`](../docs/reference/abi-v2.md). For production, use the 1.x package: `pip install "chtypes<2"`.
+> **2.0.0-dev: UNSTABLE, staging only, not for production.** This is the ABI v2 development binding (public issue #511). It speaks ABI v2's unstable description, pins its dev fingerprint and refuses a library with any other ("update your dev SDK"). It fetches only from the staging dev channel (`https://registry-staging.wavehouse.dev/chtypes/v2-dev`) and trusts only the staging key; `CHTYPES_ARTIFACTS_URL`, `CHTYPES_TRUSTED_KEYS` and `CHTYPES_ALLOW_UNSIGNED`, and the `bases`, `trusted_keys` and `allow_unsigned` fetch options, are ignored, each with one warning; `--lock`, `--frozen` and `--update`, and the `frozen`, `lock_path`, `lock_write` and `update` options, are refused, because a dev build is replaceable and a superseded one expires after 14 days. Its cache is `${XDG_CACHE_HOME:-~/.cache}/chtypes/v2-dev`, or `<CHTYPES_CACHE>/v2-dev` under an explicit cache, which no 1.x SDK reads. A dev SDK prefers the newest build of its own fingerprint: it resolves `<tag>--fp-<its fingerprint>` first and the tag only when no such build exists, and its cache lookups ignore another dev SDK's builds in a shared cache, so a newer dev fingerprint never strands it (§3 of [`docs/guides/fetch-v1.md`](../docs/guides/fetch-v1.md)). Every vocabulary keeps a value it does not list as its `unknown(n)` member (`Outcome("x")`, whose `known` is `False`) instead of failing the document. The rules are r1 to r6 of [`docs/reference/abi-v2.md`](../docs/reference/abi-v2.md). For production, use the 1.x package: `pip install "chtypes<2"`.
 >
 > An explicit cache directory gets the `v2-dev` subroot whether it comes from `CHTYPES_CACHE` or from `FetchOptions(cache_dir=...)`: the layout is under `<cache_dir>/v2-dev`, never in the directory itself, so code that inspects or pre-populates a cache looks there; `chtypes.cache_root` and `chtypes.search_dirs` return the resolved paths. `CHTYPES_OFFLINE=1` is the environment twin of `FetchOptions(offline=True)` and `--offline`: the cache only, no request.
+>
+> <!-- remove-at-v2-lock -->v2-dev builds before the one that carries this contract (its release notice names it) can answer `ok` with `t` verdicts after a refused row. On those builds, when a body or block holds more than one row, treat every verdict as `d` if `errors` is non-empty.<!-- /remove-at-v2-lock -->
 
 **If this row were inserted into this table on this ClickHouse version, what would happen?** chtypes answers with ClickHouse's own code: the real C++ type machinery, vendored per release into a native library behind the frozen `chs_*` C ABI and reached here through stdlib `ctypes`. Nothing semantic is reimplemented, so _"what does ClickHouse do with `256` into a `UInt8`?"_ is answered by ClickHouse rather than by a model of it. One peer binding among `{go, python, ts, rust}` — no language is privileged, and all four give one answer.
 

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev4}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "chtypes"
-version = "2.0.0.dev2"
+version = "2.0.0.dev4"
 description = "Python binding for the chtypes artifacts: ClickHouse's own type system, per version, behind the frozen chs_* C ABI"
 readme = "README.md"
 license = "Apache-2.0"

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev4}/src/chtypes/__init__.py

@@ -48,11 +48,13 @@ from importlib.metadata import version as _package_version
 
 from ._abi2._vocab import (
     EXPORT_NONE,
+    DeclinedTier,
     DefaultKind,
     DiscoverQueryParam,
     DocFlags,
     FilterOutcome,
     Format,
+    MergeReason,
     Outcome,
     Reason,
     Source,
@@ -71,6 +73,7 @@ from .errors import (
     CODE_CACHE_UNUSABLE,
     CODE_SOURCE_FORBIDDEN,
     CODE_SOURCE_INCOMPATIBLE,
+    CODE_SOURCE_RETIRED,
     CODE_SOURCE_UNAUTHORIZED,
     CODE_SOURCE_UNREACHABLE,
     ArtifactCorruptError,
@@ -87,6 +90,7 @@ from .errors import (
     SchemaError,
     SourceForbiddenError,
     SourceIncompatibleError,
+    SourceRetiredError,
     SourceUnauthorizedError,
     SourceUnreachableError,
     UnsupportedError,
@@ -95,11 +99,13 @@ from .errors import (
 from .library import Block, Filter, Library, Schema, Server, open_unverified
 from .registry import FetchOptions, Registry, Resolved, TrustedKey, cache_root, search_dirs
 from .results import (
+    AtMergeEntry,
     BatchResult,
     BuildInfo,
     Capabilities,
     Column,
     Computed,
+    DeclinedSetting,
     DiscoveredColumn,
     Discovery,
     EngineCell,
@@ -128,6 +134,7 @@ __all__ = [
     "CODE_CACHE_UNUSABLE",
     "CODE_SOURCE_FORBIDDEN",
     "CODE_SOURCE_INCOMPATIBLE",
+    "CODE_SOURCE_RETIRED",
     "CODE_SOURCE_UNAUTHORIZED",
     "CODE_SOURCE_UNREACHABLE",
     "EXPORT_NONE",
@@ -138,6 +145,7 @@ __all__ = [
     "ArtifactPinnedError",
     "ArtifactUnpublishedError",
     "ArtifactUntrustedError",
+    "AtMergeEntry",
     "BatchResult",
     "Block",
     "BuildInfo",
@@ -148,6 +156,8 @@ __all__ = [
     "ChtypesError",
     "Column",
     "Computed",
+    "DeclinedSetting",
+    "DeclinedTier",
     "DefaultKind",
     "DiscoverQueryParam",
     "DiscoveredColumn",
@@ -166,6 +176,7 @@ __all__ = [
     "Header",
     "InternalError",
     "Library",
+    "MergeReason",
     "Outcome",
     "Reason",
     "Registry",
@@ -182,6 +193,7 @@ __all__ = [
     "Source",
     "SourceForbiddenError",
     "SourceIncompatibleError",
+    "SourceRetiredError",
     "SourceUnauthorizedError",
     "SourceUnreachableError",
     "Span",

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev4}/src/chtypes/_abi2/_decls.py

@@ -1,4 +1,4 @@
-# GENERATED by scripts/abi-v1/gen.py --major 2 from spec/abi-v2/abi.json (CHS_ABI_FINGERPRINT sha256:d87e91be2bbe75b985c38224268c2f7dc5d8236dab0a4b4d61357c6dfdc1a232) — DO NOT EDIT  # noqa: E501
+# GENERATED by scripts/abi-v1/gen.py --major 2 from spec/abi-v2/abi.json (CHS_ABI_FINGERPRINT sha256:28c7445ce6b5c6d0ae33177fd60eb7b3b5654a966c842b8d812aea622824dc72) — DO NOT EDIT  # noqa: E501
 """The Python binding's generated ABI v2 layer: ctypes signatures, the handle
 classes, the two-phase resolve functions and invoke_by_name(), the test-only
 dispatcher the conformance suite drives from tests/fixtures/abi-v2/cases.json.
@@ -19,7 +19,7 @@ from dataclasses import dataclass, field
 from . import _errmap
 
 CHS_ABI_VERSION = 2
-CHS_ABI_FINGERPRINT = "sha256:d87e91be2bbe75b985c38224268c2f7dc5d8236dab0a4b4d61357c6dfdc1a232"
+CHS_ABI_FINGERPRINT = "sha256:28c7445ce6b5c6d0ae33177fd60eb7b3b5654a966c842b8d812aea622824dc72"
 
 # The description's stability: "unstable" while this generation is being
 # designed, so CHS_ABI_FINGERPRINT moves with every change, and "locked" after

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev4}/src/chtypes/_abi2/_errmap.py

@@ -1,4 +1,4 @@
-# GENERATED by scripts/abi-v1/gen.py --major 2 from spec/abi-v2/abi.json (CHS_ABI_FINGERPRINT sha256:d87e91be2bbe75b985c38224268c2f7dc5d8236dab0a4b4d61357c6dfdc1a232) — DO NOT EDIT  # noqa: E501
+# GENERATED by scripts/abi-v1/gen.py --major 2 from spec/abi-v2/abi.json (CHS_ABI_FINGERPRINT sha256:28c7445ce6b5c6d0ae33177fd60eb7b3b5654a966c842b8d812aea622824dc72) — DO NOT EDIT  # noqa: E501
 """spec/abi-v2/sdk.json's error-mapping tables, as references to the
 public classes (python/src/chtypes/errors.py, re-exported by
 python/src/chtypes/_abi2/_errors.py). Only the MAPPING is generated: the

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev4}/src/chtypes/_abi2/_vocab.py

@@ -1,10 +1,10 @@
-# GENERATED by scripts/abi-v1/gen.py --major 2 from spec/abi-v2/abi.json (CHS_ABI_FINGERPRINT sha256:d87e91be2bbe75b985c38224268c2f7dc5d8236dab0a4b4d61357c6dfdc1a232) — DO NOT EDIT  # noqa: E501
+# GENERATED by scripts/abi-v1/gen.py --major 2 from spec/abi-v2/abi.json (CHS_ABI_FINGERPRINT sha256:28c7445ce6b5c6d0ae33177fd60eb7b3b5654a966c842b8d812aea622824dc72) — DO NOT EDIT  # noqa: E501
 """The Python binding's generated vocabularies, from spec/abi-v2/abi.json: the C
 enums (`Format`, `Status`), the document vocabularies (`Outcome`, `FilterOutcome`,
-`Verdict`, `DefaultKind`, `Reason`, `Source`, `DiscoverQueryParam`) with the facts the
-description attaches to each value (`Format.ch_name`, `Reason` lossy, `Source`
-is_stored, `Verdict.answered`), and the `DocFlags` groups. No other file in this
-package keeps a copy of any of it.
+`Verdict`, `DefaultKind`, `MergeReason`, `DeclinedTier`, `Reason`, `Source`,
+`DiscoverQueryParam`) with the facts the description attaches to each value
+(`Format.ch_name`, `Reason` lossy, `Source` is_stored, `Verdict.answered`), and the
+`DocFlags` groups. No other file in this package keeps a copy of any of it.
 
 Rule r3 (spec/abi-v2/docs.md): every vocabulary has an unknown(n) member, and a
 value the description does not list reads as it, carrying the raw value, for that
@@ -225,6 +225,55 @@ class DefaultKind(StrEnum):
         return cls(text)
 
 
+class MergeReason(StrEnum):
+    """What a merge would do to one row of the part an INSERT writes, as a batch's
+    `at_merge` reports it."""
+
+    TTL_DELETE = "ttl_delete"
+    TTL_COLUMN_RESET = "ttl_column_reset"
+
+    @classmethod
+    def _missing_(cls, value: object) -> MergeReason | None:
+        return _unknown_str(cls, value)
+
+    @property
+    def known(self) -> bool:
+        """Whether the description lists this value: False for exactly the unknown(n)
+        member an unlisted value reads as (rule r3)."""
+        return type(self)._value2member_map_.get(self._value_) is self
+
+    @classmethod
+    def of(cls, text: str) -> MergeReason:
+        """Map a document's spelling. One the description does not list is kept as
+        this vocabulary's unknown(n) member, carrying it (rule r3)."""
+        return cls(text)
+
+
+class DeclinedTier(StrEnum):
+    """The WHERE-settings tier of a setting a server profile sets and this build's
+    filters do not honor in a WHERE, as a `DeclinedSetting` reports it."""
+
+    PREDICATE = "predicate"
+    PREDICATE_UNFLIPPED = "predicate-unflipped"
+    RESULT_CONTENT = "result-content"
+
+    @classmethod
+    def _missing_(cls, value: object) -> DeclinedTier | None:
+        return _unknown_str(cls, value)
+
+    @property
+    def known(self) -> bool:
+        """Whether the description lists this value: False for exactly the unknown(n)
+        member an unlisted value reads as (rule r3)."""
+        return type(self)._value2member_map_.get(self._value_) is self
+
+    @classmethod
+    def of(cls, text: str) -> DeclinedTier:
+        """Map a document's spelling. One the description does not list is kept as
+        this vocabulary's unknown(n) member, carrying it (rule r3)."""
+        return cls(text)
+
+
 class DiscoverQueryParam(StrEnum):
     """A query parameter of the SQL `discover_query` returns, which the caller binds
     when it runs the query."""
@@ -383,6 +432,7 @@ DESCRIBED_VOCABULARIES: Final[dict[str, type]] = {
     "chs_status": Status,
     "chs_format": Format,
     "transform_reason": Reason,
+    "merge_reason": MergeReason,
     "value_src": Source,
     "row_outcome": Outcome,
     "batch_outcome": Outcome,
@@ -390,6 +440,7 @@ DESCRIBED_VOCABULARIES: Final[dict[str, type]] = {
     "filter_verdict": Verdict,
     "discover_query_param": DiscoverQueryParam,
     "default_kind": DefaultKind,
+    "declined_tier": DeclinedTier,
 }
 
 

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev4}/src/chtypes/_decode.py

@@ -28,14 +28,25 @@ import json
 from collections.abc import Callable, Mapping
 from typing import Any
 
-from ._abi2._vocab import DefaultKind, FilterOutcome, Outcome, Reason, Source, Verdict
+from ._abi2._vocab import (
+    DeclinedTier,
+    DefaultKind,
+    FilterOutcome,
+    MergeReason,
+    Outcome,
+    Reason,
+    Source,
+    Verdict,
+)
 from .errors import ArtifactCorruptError, internal
 from .results import (
+    AtMergeEntry,
     BatchResult,
     BuildInfo,
     Capabilities,
     Column,
     Computed,
+    DeclinedSetting,
     DiscoveredColumn,
     Discovery,
     EngineCell,
@@ -325,6 +336,29 @@ def _engine_cell(obj: dict[str, Any], where: str) -> EngineCell:
     )
 
 
+def _int_list(obj: Mapping[str, Any], key: str, where: str) -> tuple[int, ...] | None:
+    """A list of non-negative integers: None when absent."""
+    if obj.get(key) is None:
+        return None
+    out = []
+    for item in _list(obj, key, where):
+        if isinstance(item, bool) or not isinstance(item, int) or item < 0:
+            raise _wrong(where, key, "an array of non-negative integers", item)
+        out.append(item)
+    return tuple(out)
+
+
+def _at_merge(obj: dict[str, Any], where: str) -> AtMergeEntry:
+    # An unlisted reason is its unknown(n): kept, never a failure (rule r3).
+    return AtMergeEntry(
+        row=_int(obj, "row", where),
+        reason=MergeReason.of(_text(obj, "reason", where)),
+        column=_bytes_or_none(obj, "column", where),
+        stored=_bytes_or_none(obj, "stored", where),
+        input_rows=_int_list(obj, "input_rows", where),
+    )
+
+
 def _engine_rows(obj: Mapping[str, Any], where: str) -> tuple[tuple[EngineCell, ...], ...]:
     rows = []
     for i, row in enumerate(_list(obj, "engine_rows", where)):
@@ -411,6 +445,8 @@ def decode_batch(raw: bytes, export: bytes | None) -> BatchResult:
         framing=None
         if framing is None
         else _framing(_obj(framing, where, "framing"), f"{where}.framing"),
+        unsupported_settings=_name_list(obj, "unsupported_settings", where),
+        at_merge=_objects(obj, "at_merge", where, _at_merge),
     )
 
 
@@ -467,11 +503,22 @@ def _string_map(obj: Mapping[str, Any], key: str, where: str) -> dict[str, str]
     return out
 
 
+def _declined_setting(obj: dict[str, Any], where: str) -> DeclinedSetting:
+    # An unlisted tier is its unknown(n): kept, never a failure (rule r3).
+    return DeclinedSetting(
+        name=_name(obj, "name", where),
+        tier=DeclinedTier.of(_text(obj, "tier", where)),
+    )
+
+
 def _server(obj: dict[str, Any], where: str) -> SchemaServer:
     return SchemaServer(
         timezone=_text(obj, "timezone", where),
         settings=_string_map(obj, "settings", where) or {},
         macros=_string_map(obj, "macros", where),
+        filter_declined_settings=_objects(
+            obj, "filter_declined_settings", where, _declined_setting
+        ),
     )
 
 

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev4}/src/chtypes/_ocifetch/_channel.py

@@ -18,6 +18,19 @@ five ways:
   used through its subroot `<cache>/v2-dev`, never as a whole layout;
 - a signed predicate must say abi 2.
 
+It also resolves one tag the v1 contract never asks for: a version request
+fetches `<tag>--fp-<its own fingerprint>` first, the newest dev build of the ABI
+this binding speaks, and falls back to `<tag>` only when no base has that alias
+(docs/guides/fetch-v1.md §3, "The dev channel's alias step"), so a dev build of a
+newer fingerprint never strands this one. Its cache lookups (`resolve_installed`,
+and `ensure`'s offline answer and its monotonic rule) see only the records whose
+signed `abi_fingerprint` is its own: a build of another fingerprint in a shared
+cache is never returned and never kept over this one's own, and it is never
+removed or rewritten either. It is automatic, with no override; the trust checks
+are unchanged, and a listing never shows an alias. The fingerprint
+is the generated `CHS_ABI_FINGERPRINT` of the ABI layer (`chtypes._abi2._decls`),
+never a hand-written copy.
+
 The v1 contract itself stays in this package, unchanged, because the fetch-v1
 conformance cases (tests/fixtures/fetch-v1) are its specification and the dev
 channel shares every other rule with it. Only a test run reaches it:
@@ -29,16 +42,20 @@ override a user can reach.
 from __future__ import annotations
 
 import os
+import re
 import sys
 import threading
 from collections.abc import Callable, Sequence
 from dataclasses import dataclass, replace
 from typing import Final, Protocol
 
+from chtypes._abi2._decls import CHS_ABI_FINGERPRINT
 from chtypes._ocifetch import _constants as C
 from chtypes._ocifetch._dsse import TrustedKey
+from chtypes._ocifetch._errors import ArtifactUnpublishedError
 
 __all__ = [
+    "ALIAS_SEPARATOR",
     "DEV_ABI_GENERATION",
     "DEV_CACHE_DIR",
     "DEV_CHANNEL_BASE",
@@ -50,12 +67,16 @@ __all__ = [
     "PinningRefusedError",
     "abi",
     "active",
+    "ahead_of_registry",
+    "alias_tag",
     "allow_overrides_for_tests",
     "channel_name",
     "enforce",
     "ignored_settings_warned",
     "pinning_requested",
     "trusted_keys",
+    "use_own_fingerprint_for_tests",
+    "visible",
     "use_dev_channel_for_tests",
     "use_fetch_v1_for_tests",
 ]
@@ -79,6 +100,10 @@ DEV_RECORD_SCHEMA: Final = 2
 # The abi a dev predicate must carry.
 DEV_ABI_GENERATION: Final = 2
 
+# Joins a tag and a fingerprint into the dev channel's alias tag:
+# <tag>--fp-<64 lowercase hex> (docs/guides/fetch-v1.md §3).
+ALIAS_SEPARATOR: Final = "--fp-"
+
 # What every lock, frozen or update request gets from a 2.0.0-dev SDK, before
 # any network call (rule r6).
 PINNING_REFUSED: Final = (
@@ -102,6 +127,11 @@ class Channel:
     keys: tuple[dict[str, str], ...]  # {"keyid", "ed25519_hex"}: the default trust
     overridable: bool  # the base, trust and unsigned overrides are honored
     pinnable: bool  # lock, frozen and update are honored
+    # The fingerprint, 64 lowercase hex, this contract's SDK speaks: a version
+    # request resolves its alias tag before the tag itself, and the cache
+    # lookups see only records signed with it. "" does neither (the v1 contract
+    # and every production channel).
+    own_fingerprint: str = ""
 
 
 # What a 2.0.0-dev SDK speaks, and what every process speaks unless a test
@@ -117,6 +147,7 @@ DEV_CHANNEL: Final = Channel(
     keys=({"keyid": DEV_KEY_ID, "ed25519_hex": DEV_KEY_HEX},),
     overridable=False,
     pinnable=False,
+    own_fingerprint=CHS_ABI_FINGERPRINT.removeprefix("sha256:"),
 )
 
 # The v1 contract the fetch-v1 conformance cases specify, from the generated
@@ -202,6 +233,86 @@ def allow_overrides_for_tests() -> Callable[[], None]:
     return _use(replace(DEV_CHANNEL, overridable=True))
 
 
+_FINGERPRINT_HEX = re.compile(r"[0-9a-f]{64}")
+
+
+def use_own_fingerprint_for_tests(fingerprint: str) -> Callable[[], None]:
+    """Make this TEST run's active contract speak `fingerprint` (64 lowercase
+    hex) as the dev channel speaks its own: a version request resolves that
+    fingerprint's alias tag first, and the cache lookups see only records
+    signed with it. The fetch-v1 conformance cases that carry
+    `request.own_fingerprint` run under it, against fixtures that name a
+    fixture fingerprint. Everything else stays the active contract's. Returns
+    the restore function; raises outside a test run or on a fingerprint that is
+    not 64 lowercase hex."""
+    _test_only("use_own_fingerprint_for_tests")
+    if not _FINGERPRINT_HEX.fullmatch(fingerprint):
+        raise ValueError(f"use_own_fingerprint_for_tests: {fingerprint!r} is not 64 lowercase hex")
+    return _use(replace(active(), own_fingerprint=fingerprint))
+
+
+def alias_tag(tag: str, channel: Channel | None = None) -> str | None:
+    """The alias a version request for `tag` resolves first under a contract
+    with an own fingerprint, or None when it resolves `tag` alone: under the
+    v1 contract and every production channel, and for a request that is not a
+    version spelling (an arbitrary tag has no alias)."""
+    channel = channel or active()
+    if not channel.own_fingerprint or not re.fullmatch(C.SPELLING_REGEX, tag):
+        return None
+    return f"{tag}{ALIAS_SEPARATOR}{channel.own_fingerprint}"
+
+
+def visible(predicate: object, channel: Channel | None = None) -> bool:
+    """Whether a cache record (or a pre-seeded entry) whose SIGNED predicate is
+    `predicate` may answer a request under the active contract: under one with
+    an own fingerprint (the dev channel), only when the predicate's
+    `abi_fingerprint` is that fingerprint; under every other, always. A record
+    it cannot see is never returned and never kept by the monotonic rule, and
+    nothing removes or rewrites it: another SDK of another fingerprint owns it."""
+    channel = channel or active()
+    if not channel.own_fingerprint:
+        return True
+    fingerprint = predicate.get("abi_fingerprint") if isinstance(predicate, dict) else None
+    return fingerprint == f"sha256:{channel.own_fingerprint}"
+
+
+def ahead_of_registry(
+    alias_absent: bool, predicate: object, channel: Channel | None = None
+) -> None:
+    """The dev channel's answer for an SDK whose fingerprint no published build
+    carries yet (docs/guides/fetch-v1.md §3; public issue #578): when every base
+    answered its own alias 404 (`alias_absent`) and the build the tag names is
+    signed for another fingerprint (`predicate`, the SIGNED predicate, the field
+    `visible` keys on), raise `ArtifactUnpublishedError`, the code a request no
+    build answers gets, naming both fingerprints. Nothing is installed and an
+    install of that build is never reported, because the lookup this SDK opens
+    through would refuse it. Returns in every other case: the alias answered,
+    the tag's build is this SDK's own, or the contract has no own fingerprint."""
+    channel = channel or active()
+    if not alias_absent or visible(predicate, channel):
+        return
+    raise ArtifactUnpublishedError(f"chtypes: {_ahead_message(channel.own_fingerprint, predicate)}")
+
+
+def _ahead_message(own: str, predicate: object) -> str:
+    """`ahead_of_registry`'s message: "no published build for this SDK's
+    fingerprint <own>; newest published on this channel is <fp> (build <id>)",
+    each fingerprint 64 lowercase hex without its `sha256:` prefix, the
+    parenthesis dropped when the predicate names no build, and "unnamed" for a
+    predicate that names no fingerprint."""
+    fields = predicate if isinstance(predicate, dict) else {}
+    theirs = fields.get("abi_fingerprint")
+    theirs = theirs.removeprefix("sha256:") if isinstance(theirs, str) else ""
+    message = (
+        f"no published build for this SDK's fingerprint {own}; "
+        f"newest published on this channel is {theirs or 'unnamed'}"
+    )
+    build = fields.get("build")
+    if isinstance(build, str) and build:
+        message += f" (build {build})"
+    return message
+
+
 def use_dev_channel_for_tests() -> Callable[[], None]:
     """Make this TEST run speak the dev channel exactly as a user's process does
     (undoing either function above, for a test of the dev channel itself).

{chtypes-2.0.0.dev2 → chtypes-2.0.0.dev4}/src/chtypes/_ocifetch/_constants.py

@@ -1,6 +1,6 @@
 # Code generated by scripts/fetch-v1/gen-constants.py from
 # spec/fetch-v1/constants.json. DO NOT EDIT.
-# Source sha256: 163dbaa1e5173aa65de7d46f1eac27c02f862e96b5c8160a23fee8cfabd77a2a
+# Source sha256: 4554956faeb154fc324a6120b7b35976222c6bc8ecbce7fd0147502e3073611d
 """The v1 fetch constants, generated: see docs/guides/fetch-v1.md."""
 
 from __future__ import annotations
@@ -83,6 +83,7 @@ RETRY_AFTER_STATUSES: Final[tuple[int, ...]] = (429, 503)
 RETRY_AFTER_OVER_BUDGET: Final[str] = "refuse"
 DIGEST_404_POLICY: Final[str] = "next_base_then_retry_on_last"
 TAG_404_POLICY: Final[str] = "next_base_then_unpublished"
+RETIRED_STATUSES: Final[tuple[int, ...]] = (410,)
 
 CONNECT_TIMEOUT_S: Final[float] = 30.0
 IDLE_READ_TIMEOUT_S: Final[float] = 60.0
@@ -95,6 +96,8 @@ MAX_REFERRERS: Final[int] = 16
 MAX_REDIRECTS: Final[int] = 5
 MAX_UNPACKED_BYTES: Final[int] = 4294967296
 ZSTD_WINDOW_LOG_MAX: Final[int] = 27
+RETIRED_BODY_MAX_BYTES: Final[int] = 65536
+RETIRED_MESSAGE_MAX_CODE_POINTS: Final[int] = 256
 
 CACHE_ROOT_TEMPLATE: Final[str] = "${XDG_CACHE_HOME:-$HOME/.cache}/chtypes/v1"
 SYSTEM_CACHE_DIRS: Final[tuple[str, ...]] = ("/usr/local/share/chtypes/v1", "/opt/chtypes/v1")
@@ -122,4 +125,5 @@ ERROR_EXIT_CODES: Final[dict[str, int]] = {
     "CHTYPES_SOURCE_INCOMPATIBLE": 7,
     "CHTYPES_ARTIFACT_INCOMPATIBLE": 8,
     "CHTYPES_CACHE_UNUSABLE": 9,
+    "CHTYPES_SOURCE_RETIRED": 10,
 }