@byok-sdk/cloud-dataplane 0.4.2 → 0.6.0

package/dist/migrate.d.ts

@@ -13,6 +13,39 @@ export interface MigrationResult {
     readonly applied: readonly string[];
     readonly alreadyApplied: readonly string[];
 }
+/** The exact package-owned row returned after a successful ledger readback. */
+export interface MigrationVerificationRow {
+    readonly version: string;
+    readonly checksum: string;
+}
+export type MigrationStateIssue = {
+    readonly kind: 'missing';
+    readonly version: string;
+    readonly expectedChecksum: string;
+} | {
+    readonly kind: 'unexpected';
+    readonly version: string;
+    readonly actualChecksum: string;
+} | {
+    readonly kind: 'checksum_mismatch';
+    readonly version: string;
+    readonly expectedChecksum: string;
+    readonly actualChecksum: string;
+} | {
+    readonly kind: 'ledger_missing';
+    readonly table: 'byok_schema_migration';
+};
+/**
+ * The database's migration state does not exactly match this package's files.
+ *
+ * This is deliberately aggregate and fail-closed: a host can report every
+ * drift fact in one readiness result, but it cannot continue as though a
+ * partially matching schema were usable.
+ */
+export declare class MigrationStateMismatchError extends Error {
+    readonly issues: readonly MigrationStateIssue[];
+    constructor(issues: readonly MigrationStateIssue[], options?: ErrorOptions);
+}
 /**
  * A published migration file changed after it was applied.
  *
@@ -41,6 +74,15 @@ export declare class MigrationFilenameError extends Error {
  * dropped in this directory is how a migration goes missing.
  */
 export declare function readMigrationFiles(directory: string): Promise<readonly MigrationFile[]>;
+/**
+ * Reads the package migration files and the existing ledger, then requires an
+ * exact version/checksum match.
+ *
+ * The default directory is the migration projection shipped by this package.
+ * This function only reads state: it never creates the ledger, applies a
+ * migration, or synthesizes a compatible result for a missing/changed row.
+ */
+export declare function verifyMigrations(pool: Pool, directory?: string): Promise<readonly MigrationVerificationRow[]>;
 /**
  * Applies every pending migration in `directory`, in prefix order.
  *

package/dist/runtime.d.ts

@@ -26,7 +26,7 @@
  */
 export { createByokPool } from './pool';
 export type { ByokPoolOptions } from './pool';
-export { PostgresDeviceDirectory, PostgresInboundDedupStore, PostgresNonceStore, PostgresPairingCodeStore, PostgresProofRequestReceiptStore, PostgresRequestReceiptStore, PostgresTaskAttemptStore, PostgresActivityStore, PostgresApprovalTimelineStore, createPostgresCloudStores, } from './stores/index';
+export { PostgresDeviceDirectory, PostgresInboundDedupStore, PostgresNonceStore, PostgresPairingCodeStore, PostgresProofRequestReceiptStore, PostgresRequestReceiptStore, PostgresTaskAttemptStore, PostgresTaskCancellationStore, PostgresActivityStore, PostgresApprovalTimelineStore, PostgresDeviceAssertionReplayAuthority, createPostgresCloudStores, } from './stores/index';
 export type { PostgresCloudStoreOptions, PostgresCloudStores, PostgresObjectStorageOptions, } from './stores/index';
 export { DEFAULT_MAX_ATTEMPTS, DEFAULT_PRESIGN_TTL_SECONDS, DEFAULT_RETRY_DELAY_MS, MAX_PRESIGN_TTL_SECONDS, MIN_PRESIGN_TTL_SECONDS, ObjectStoreRequestError, R2_BLOB_ERROR_CODES, R2BlobStoreError, R2CloudBlobStore, R2ObjectMaintenanceStore, } from './stores/index';
 export type { ObjectStoreFetch, R2BlobErrorCode, R2BlobStoreOptions } from './stores/index';