@byok-sdk/cloud-dataplane 0.4.2 → 0.5.0

package/README.md

@@ -15,6 +15,13 @@ partial bundle for them to run. `createPostgresCloudMaintenance` is the third,
 host-only operational composition; it is deliberately outside both port
 inventories.
 
+`PostgresDeviceAssertionReplayAuthority` is a separate online security
+authority for connector-binding exchanges. Its unique key makes consumption an
+atomic `INSERT ... ON CONFLICT DO NOTHING` decision, and bounded expiry cleanup
+keeps the short-lived ledger finite. It is intentionally not a `CloudStores`
+member: hosts opt into assertion exchange explicitly, while connector sessions
+and provider credentials stay outside this package.
+
 `PostgresTruthCommitter` is the S6 transaction authority rather than another
 raw store bundle. It owns the one transaction that couples proof receipt,
 terminal/snapshot preconditions, committed object checks, object references,

package/dist/index.js

@@ -1387,6 +1387,55 @@ var PostgresApprovalTimelineStore = class {
   }
 };
 
+// src/stores/device-assertion-replay.ts
+var PostgresDeviceAssertionReplayAuthority = class {
+  #pool;
+  constructor(pool) {
+    this.#pool = pool;
+  }
+  async consume(input) {
+    if (!Number.isFinite(Date.parse(input.expiresAt))) {
+      throw new Error("device assertion replay expiry is invalid");
+    }
+    const result = await this.#pool.query(
+      `INSERT INTO device_assertion_replay (
+         tenant_id, issuer, product_id, device_id, audience, jti, expires_at
+       )
+       VALUES ($1, $2, $3, $4, $5, $6, $7)
+       ON CONFLICT (tenant_id, issuer, product_id, device_id, audience, jti) DO NOTHING
+       RETURNING jti`,
+      [
+        input.tenantId,
+        input.issuer,
+        input.productId,
+        input.deviceId,
+        input.audience,
+        input.jti,
+        input.expiresAt
+      ]
+    );
+    return result.rowCount === 1;
+  }
+  /** Bounded retention cleanup; callers choose cadence and batch size. */
+  async deleteExpired(before, limit) {
+    if (!Number.isFinite(before.getTime()) || !Number.isSafeInteger(limit) || limit <= 0) {
+      throw new Error("device assertion replay cleanup bounds are invalid");
+    }
+    const result = await this.#pool.query(
+      `DELETE FROM device_assertion_replay
+       WHERE ctid IN (
+         SELECT ctid
+         FROM device_assertion_replay
+         WHERE expires_at <= $1
+         ORDER BY expires_at
+         LIMIT $2
+       )`,
+      [before.toISOString(), limit]
+    );
+    return result.rowCount ?? 0;
+  }
+};
+
 // src/stores/index.ts
 function createPostgresCloudStores(options) {
   const { pool, clock, crypto } = options;
@@ -4415,6 +4464,6 @@ function deadLetterMissing(ref) {
   );
 }
 
-export { CLOUD_CLEANUP_ERROR_CODES, CloudCleanupError, DEFAULT_MAX_ATTEMPTS, DEFAULT_PRESIGN_TTL_SECONDS, DEFAULT_RETRY_DELAY_MS, MAX_PRESIGN_TTL_SECONDS, MIN_PRESIGN_TTL_SECONDS, MigrationChecksumMismatchError, MigrationFilenameError, ObjectStoreRequestError, PostgresActivityStore, PostgresApprovalTimelineStore, PostgresBoardStore, PostgresCloudCleanup, PostgresDeviceDirectory, PostgresInboundDedupStore, PostgresMailboxStore, PostgresNonceStore, PostgresObjectStore, PostgresPairingCodeStore, PostgresPresenceStore, PostgresProofRequestReceiptStore, PostgresQuotaStore, PostgresRequestReceiptStore, PostgresSkillPackStore, PostgresTaskAttemptStore, PostgresTruthCommitter, PostgresTruthStore, R2BlobStoreError, R2CloudBlobStore, R2ObjectMaintenanceStore, R2_BLOB_ERROR_CODES, createByokPool, createPostgresCloudMaintenance, createPostgresCloudStores, createPostgresCoreStores, migrate, migrationsDir, readMigrationFiles };
+export { CLOUD_CLEANUP_ERROR_CODES, CloudCleanupError, DEFAULT_MAX_ATTEMPTS, DEFAULT_PRESIGN_TTL_SECONDS, DEFAULT_RETRY_DELAY_MS, MAX_PRESIGN_TTL_SECONDS, MIN_PRESIGN_TTL_SECONDS, MigrationChecksumMismatchError, MigrationFilenameError, ObjectStoreRequestError, PostgresActivityStore, PostgresApprovalTimelineStore, PostgresBoardStore, PostgresCloudCleanup, PostgresDeviceAssertionReplayAuthority, PostgresDeviceDirectory, PostgresInboundDedupStore, PostgresMailboxStore, PostgresNonceStore, PostgresObjectStore, PostgresPairingCodeStore, PostgresPresenceStore, PostgresProofRequestReceiptStore, PostgresQuotaStore, PostgresRequestReceiptStore, PostgresSkillPackStore, PostgresTaskAttemptStore, PostgresTruthCommitter, PostgresTruthStore, R2BlobStoreError, R2CloudBlobStore, R2ObjectMaintenanceStore, R2_BLOB_ERROR_CODES, createByokPool, createPostgresCloudMaintenance, createPostgresCloudStores, createPostgresCoreStores, migrate, migrationsDir, readMigrationFiles };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map