@byok-sdk/cloud-dataplane 0.12.0 → 0.13.0

package/dist/sql/0018_task_attempt_claimed_runtime.sql

@@ -0,0 +1,23 @@
+-- The claim-time runtime snapshot on the task attempt.
+--
+-- Two columns, one fact: what the daemon that WON the ownership CAS reported
+-- about itself on its own `task.claim` — its runtime id and that adapter's own
+-- capability block. Both are written by the guarded claim UPDATE and by nothing
+-- else, so they are set exactly once, at the `offered -> claimed` transition,
+-- and a redelivered or losing claim can never restamp them.
+--
+-- They are ATTRIBUTION, not execution state: they stop changing the moment
+-- ownership is decided, which is what keeps them inside what ADR-028 allows the
+-- coordination plane to hold. `ByokCloud.steerTask` reads
+-- `claimed_runtime_capabilities` as the single input to its steer gate; the
+-- connection-level capability snapshot on the device row is deliberately not an
+-- input, because it describes a device build rather than the adapter that took
+-- this task.
+--
+-- Additive and nullable with NO backfill, deliberately. A task claimed before
+-- this migration has no snapshot to reconstruct — the claim that carried it is
+-- long gone — and inventing one would open the steer gate on a guess. NULL
+-- means "unknown", and the gate refuses an unknown.
+
+ALTER TABLE task ADD COLUMN claimed_runtime text;
+ALTER TABLE task ADD COLUMN claimed_runtime_capabilities jsonb;

package/dist/sql/0019_agent_ref_replay_keys.sql

@@ -0,0 +1,36 @@
+-- Strict Agent reliability identities.
+--
+-- A device may host many Agents. The old device-plus-envelope/event primary
+-- keys therefore let Agent A suppress Agent B when they independently used
+-- the same reliable id. This migration cuts those keys forward: physical facts
+-- retain the empty Agent scope, while every Agent-bound caller must supply the
+-- exact AgentRef. The empty pair is not an AgentRef and is never a read
+-- fallback; it is the explicit keyspace for facts such as conn.hello that have
+-- no Agent authority.
+
+ALTER TABLE inbound_dedup
+  ADD COLUMN agent_id text NOT NULL DEFAULT '',
+  ADD COLUMN agent_profile_revision text NOT NULL DEFAULT '';
+
+ALTER TABLE inbound_dedup
+  ADD CONSTRAINT inbound_dedup_agent_scope_shape CHECK (
+    (agent_id = '' AND agent_profile_revision = '') OR
+    (
+      octet_length(agent_id) BETWEEN 1 AND 160
+      AND octet_length(agent_profile_revision) BETWEEN 1 AND 160
+      AND agent_id !~ '[[:cntrl:]]'
+      AND agent_profile_revision !~ '[[:cntrl:]]'
+    )
+  );
+
+ALTER TABLE inbound_dedup DROP CONSTRAINT inbound_dedup_pkey;
+ALTER TABLE inbound_dedup
+  ADD PRIMARY KEY (tenant_id, device_id, agent_id, agent_profile_revision, envelope_id);
+
+DROP INDEX inbound_dedup_reclaim_idx;
+CREATE INDEX inbound_dedup_reclaim_idx
+  ON inbound_dedup (tenant_id, device_id, agent_id, agent_profile_revision, recorded_seq);
+
+ALTER TABLE agent_egress_event DROP CONSTRAINT agent_egress_event_pkey;
+ALTER TABLE agent_egress_event
+  ADD PRIMARY KEY (tenant_id, device_id, agent_id, agent_profile_revision, event_id);

package/dist/sql/0020_agent_ref_request_keys.sql

@@ -0,0 +1,7 @@
+-- Agent reliability identities are exact to the attempt's AgentRef. The
+-- task-bound primary key already supplies that authority through `task`; a
+-- device-wide message-id uniqueness constraint would instead let one Agent
+-- suppress another active Agent on the same device.
+
+ALTER TABLE agent_message_admission
+  DROP CONSTRAINT agent_message_admission_tenant_id_device_id_message_id_key;

package/dist/stores/agent-egress.d.ts

@@ -1,3 +1,4 @@
+import { type AgentEgressReliablePayload } from '@byok-sdk/protocol';
 import type { AgentEgressRecord, AgentEgressStore } from '@byok-sdk/cloud';
 import type { Clock, TenantId } from '@byok-sdk/core';
 import type { Pool } from 'pg';
@@ -10,5 +11,5 @@ export declare class PostgresAgentEgressStore implements AgentEgressStore {
         readonly record: AgentEgressRecord;
         readonly created: boolean;
     }>;
-    get(tenant: TenantId, deviceId: string, eventId: string): Promise<AgentEgressRecord | undefined>;
+    get(tenant: TenantId, deviceId: string, agentRef: AgentEgressReliablePayload['agentRef'], eventId: string): Promise<AgentEgressRecord | undefined>;
 }

package/dist/stores/approval-timeline.d.ts

@@ -1,4 +1,4 @@
-import { type ApprovalTimelineAppendInput, type ApprovalTimelineStore, type ApprovalTimelineTail } from '@byok-sdk/cloud';
+import { type ApprovalTimelineAppendInput, type ApprovalTimelineResolvePendingInput, type ApprovalTimelineResolvePendingResult, type ApprovalTimelineStore, type ApprovalTimelineTail } from '@byok-sdk/cloud';
 import type { Clock, TenantId } from '@byok-sdk/core';
 import type { Pool } from 'pg';
 export declare class PostgresApprovalTimelineStore implements ApprovalTimelineStore {
@@ -6,5 +6,6 @@ export declare class PostgresApprovalTimelineStore implements ApprovalTimelineSt
     private readonly clock;
     constructor(pool: Pool, clock: Clock);
     append(tenant: TenantId, input: ApprovalTimelineAppendInput): Promise<ApprovalTimelineTail>;
+    resolvePending(tenant: TenantId, input: ApprovalTimelineResolvePendingInput): Promise<ApprovalTimelineResolvePendingResult>;
     read(tenant: TenantId, taskId: string): Promise<ApprovalTimelineTail | undefined>;
 }

package/dist/stores/dedup.d.ts

@@ -6,17 +6,20 @@
  * primary key does the deciding, and zero returned rows means "already seen".
  *
  * Reclaim runs only on the path that actually grew the table, and it deletes
- * oldest-first down to `DEDUP_RING_CAPACITY` rows for that device — the same
- * bound the in-memory ring holds. The ids most likely to be redelivered are the
- * recent ones, so dropping the oldest is the retention that matches the wire's
- * behavior. An unbounded set would pass every duplicate assertion and still let
- * one chatty device grow this table without limit.
+ * oldest-first down to `DEDUP_RING_CAPACITY` rows for that exact physical or
+ * Agent-bound key — the same bound the in-memory ring holds. The ids most
+ * likely to be redelivered are the recent ones, so dropping the oldest is the
+ * retention that matches the wire's behavior. An unbounded set would pass every
+ * duplicate assertion and still let one chatty device or Agent grow this table
+ * without limit.
  */
 import { type InboundDedupStore } from '@byok-sdk/cloud';
 import type { TenantId } from '@byok-sdk/core';
+import type { AgentRef } from '@byok-sdk/protocol';
 import type { Pool } from 'pg';
 export declare class PostgresInboundDedupStore implements InboundDedupStore {
     #private;
     constructor(pool: Pool, capacity?: number);
     checkAndRecord(tenant: TenantId, deviceId: string, envelopeId: string): Promise<boolean>;
+    checkAndRecordAgent(tenant: TenantId, deviceId: string, agentRef: AgentRef, envelopeId: string): Promise<boolean>;
 }

package/dist/stores/task-attempts.d.ts

@@ -14,8 +14,9 @@
  * `claim` and `recordStatus` on a task this tenant never offered write nothing
  * and return `undefined`.
  */
-import { type AgentMessageAdmission, type AgentRef, type TaskAttempt, type TaskAttemptStatus, type TaskAttemptStore } from '@byok-sdk/cloud';
+import { type AgentMessageAdmission, type AgentRef, type TaskAttempt, type TaskAttemptListQuery, type TaskAttemptPage, type TaskAttemptStatus, type TaskAttemptStore } from '@byok-sdk/cloud';
 import type { Clock, TenantId } from '@byok-sdk/core';
+import type { RuntimeCapabilities, RuntimeId } from '@byok-sdk/protocol';
 import type { Pool } from 'pg';
 export interface TaskRow {
     readonly tenant_id: string;
@@ -29,9 +30,11 @@ export interface TaskRow {
     readonly cancel_requested_at: Date | null;
     readonly cancel_reason: string | null;
     readonly cancel_message_id: string | null;
+    readonly claimed_runtime: string | null;
+    readonly claimed_runtime_capabilities: RuntimeCapabilities | null;
     readonly updated_at: Date;
 }
-export declare const TASK_SELECT_COLUMNS = "tenant_id, task_id, device_id, agent_id, agent_profile_revision, owner_device_id, status, terminal_cause, cancel_requested_at, cancel_reason, cancel_message_id, updated_at";
+export declare const TASK_SELECT_COLUMNS = "tenant_id, task_id, device_id, agent_id, agent_profile_revision, owner_device_id, status, terminal_cause, cancel_requested_at, cancel_reason, cancel_message_id, claimed_runtime, claimed_runtime_capabilities, updated_at";
 export declare function taskRowToAttempt(row: TaskRow): TaskAttempt;
 export declare class PostgresTaskAttemptStore implements TaskAttemptStore {
     #private;
@@ -70,9 +73,12 @@ export declare class PostgresTaskAttemptStore implements TaskAttemptStore {
     }): Promise<AgentMessageAdmission | undefined>;
     get(tenant: TenantId, taskId: string): Promise<TaskAttempt | undefined>;
     getMany(tenant: TenantId, taskIds: readonly string[]): Promise<readonly TaskAttempt[]>;
+    list(tenant: TenantId, query: TaskAttemptListQuery): Promise<TaskAttemptPage>;
     claim(tenant: TenantId, input: {
         readonly taskId: string;
         readonly deviceId: string;
+        readonly runtime?: RuntimeId;
+        readonly capabilities?: RuntimeCapabilities;
     }): Promise<TaskAttempt | undefined>;
     recordStatus(tenant: TenantId, input: {
         readonly taskId: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@byok-sdk/cloud-dataplane",
-  "version": "0.12.0",
+  "version": "0.13.0",
   "description": "BYOK SDK hosted data plane: canonical Postgres + R2 stores, migrations, truth transactions, and maintenance",
   "type": "module",
   "license": "MIT",
@@ -49,9 +49,9 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@byok-sdk/cloud": "0.12.0",
-    "@byok-sdk/core": "0.12.0",
-    "@byok-sdk/protocol": "0.12.0",
+    "@byok-sdk/cloud": "0.13.0",
+    "@byok-sdk/core": "0.13.0",
+    "@byok-sdk/protocol": "0.13.0",
     "aws4fetch": "1.0.20",
     "fast-xml-parser": "^5.10.1",
     "pg": "^8.22.0"