@byok-sdk/cloud-dataplane 0.8.0 → 0.9.0-rc.1

package/dist/sql/0014_agent_memory_projection.sql

@@ -0,0 +1,134 @@
+-- 0014_agent_memory_projection.sql — bounded hosted Agent-memory projection.
+--
+-- The head is one redacted, bounded snapshot per (tenant, agent). It is not a
+-- transcript, audit log, or raw-source store: replacing it discards the prior
+-- bytes in the same transaction that records the accepted metering receipt.
+-- The receipt deliberately has no body column, so durable metering cannot
+-- become a second content authority.
+
+CREATE TABLE agent_memory_projection_head (
+  tenant_id              text        NOT NULL,
+  agent_id               text        NOT NULL,
+  writer_epoch           integer     NOT NULL,
+  source_seq             integer     NOT NULL,
+  mutation_id            uuid        NOT NULL,
+  device_id              text        NOT NULL,
+  task_id                text        NOT NULL,
+  agent_profile_revision text        NOT NULL,
+  session_ref            text        NOT NULL,
+  runtime_id             text        NOT NULL,
+  grant_ref              text        NOT NULL,
+  policy_revision        text        NOT NULL,
+  redacted_hash          text        NOT NULL,
+  redacted_snapshot      bytea       NOT NULL,
+  redacted_byte_count    integer     NOT NULL,
+  committed_at           timestamptz NOT NULL,
+  PRIMARY KEY (tenant_id, agent_id),
+  CONSTRAINT agent_memory_projection_head_epoch_positive
+    CHECK (writer_epoch > 0),
+  CONSTRAINT agent_memory_projection_head_seq_positive
+    CHECK (source_seq > 0),
+  CONSTRAINT agent_memory_projection_head_snapshot_bounded
+    CHECK (
+      redacted_byte_count >= 0
+      AND redacted_byte_count <= 524288
+      AND octet_length(redacted_snapshot) = redacted_byte_count
+    ),
+  CONSTRAINT agent_memory_projection_head_hash_shape
+    CHECK (redacted_hash ~ '^sha256:[a-f0-9]{64}$'),
+  CONSTRAINT agent_memory_projection_head_agent_bounded
+    CHECK (
+      octet_length(agent_id) BETWEEN 1 AND 160
+      AND agent_id !~ '[[:cntrl:]]'
+      AND octet_length(agent_profile_revision) BETWEEN 1 AND 160
+      AND agent_profile_revision !~ '[[:cntrl:]]'
+    ),
+  CONSTRAINT agent_memory_projection_head_binding_bounded
+    CHECK (
+      octet_length(device_id) BETWEEN 1 AND 160
+      AND device_id !~ '[[:cntrl:]]'
+      AND octet_length(task_id) BETWEEN 1 AND 2048
+      AND octet_length(session_ref) BETWEEN 1 AND 512
+      AND session_ref !~ '[[:cntrl:]]'
+      AND octet_length(runtime_id) BETWEEN 1 AND 160
+      AND runtime_id !~ '[[:cntrl:]]'
+      AND octet_length(grant_ref) BETWEEN 1 AND 512
+      AND grant_ref !~ '[[:cntrl:]]'
+      AND octet_length(policy_revision) BETWEEN 1 AND 160
+      AND policy_revision !~ '[[:cntrl:]]'
+    )
+);
+
+-- Metering retains immutable acceptance facts but no body. A sequence key is
+-- unique within one writer epoch; mutation_id is independently unique there so
+-- a reused mutation cannot silently account for two sequence positions.
+CREATE TABLE agent_memory_projection_metering_receipt (
+  tenant_id           text        NOT NULL,
+  agent_id            text        NOT NULL,
+  writer_epoch        integer     NOT NULL,
+  source_seq          integer     NOT NULL,
+  mutation_id         uuid        NOT NULL,
+  device_id           text        NOT NULL,
+  task_id             text        NOT NULL,
+  agent_profile_revision text     NOT NULL,
+  session_ref         text        NOT NULL,
+  runtime_id          text        NOT NULL,
+  grant_ref           text        NOT NULL,
+  policy_revision     text        NOT NULL,
+  redacted_hash       text        NOT NULL,
+  redacted_byte_count integer     NOT NULL,
+  metering_receipt_id uuid        NOT NULL,
+  recorded_at         timestamptz NOT NULL,
+  PRIMARY KEY (tenant_id, agent_id, writer_epoch, source_seq),
+  UNIQUE (tenant_id, agent_id, writer_epoch, mutation_id),
+  CONSTRAINT agent_memory_projection_metering_epoch_positive
+    CHECK (writer_epoch > 0),
+  CONSTRAINT agent_memory_projection_metering_seq_positive
+    CHECK (source_seq > 0),
+  CONSTRAINT agent_memory_projection_metering_bytes_bounded
+    CHECK (redacted_byte_count >= 0 AND redacted_byte_count <= 524288),
+  CONSTRAINT agent_memory_projection_metering_hash_shape
+    CHECK (redacted_hash ~ '^sha256:[a-f0-9]{64}$'),
+  CONSTRAINT agent_memory_projection_metering_agent_bounded
+    CHECK (
+      octet_length(agent_id) BETWEEN 1 AND 160
+      AND agent_id !~ '[[:cntrl:]]'
+      AND octet_length(agent_profile_revision) BETWEEN 1 AND 160
+      AND agent_profile_revision !~ '[[:cntrl:]]'
+    ),
+  CONSTRAINT agent_memory_projection_metering_binding_bounded
+    CHECK (
+      octet_length(device_id) BETWEEN 1 AND 160
+      AND device_id !~ '[[:cntrl:]]'
+      AND octet_length(task_id) BETWEEN 1 AND 2048
+      AND octet_length(session_ref) BETWEEN 1 AND 512
+      AND session_ref !~ '[[:cntrl:]]'
+      AND octet_length(runtime_id) BETWEEN 1 AND 160
+      AND runtime_id !~ '[[:cntrl:]]'
+      AND octet_length(grant_ref) BETWEEN 1 AND 512
+      AND grant_ref !~ '[[:cntrl:]]'
+      AND octet_length(policy_revision) BETWEEN 1 AND 160
+      AND policy_revision !~ '[[:cntrl:]]'
+    )
+);
+
+CREATE INDEX agent_memory_projection_metering_receipt_readback
+  ON agent_memory_projection_metering_receipt (tenant_id, agent_id, writer_epoch, source_seq);
+
+-- Server-side erase deletes the only body and all immutable receipts, but it
+-- must leave one body-free epoch fence. A stale local outbox cannot re-enter
+-- after deletion and make an empty head accept an old writer's later sequence.
+CREATE TABLE agent_memory_projection_erase_fence (
+  tenant_id         text        NOT NULL,
+  agent_id          text        NOT NULL,
+  next_writer_epoch integer     NOT NULL,
+  erased_at         timestamptz NOT NULL,
+  PRIMARY KEY (tenant_id, agent_id),
+  CONSTRAINT agent_memory_projection_erase_fence_epoch_positive
+    CHECK (next_writer_epoch > 0),
+  CONSTRAINT agent_memory_projection_erase_fence_agent_bounded
+    CHECK (
+      octet_length(agent_id) BETWEEN 1 AND 160
+      AND agent_id !~ '[[:cntrl:]]'
+    )
+);

package/dist/stores/agent-memory-projection.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Postgres authority for the optional, one-way hosted Agent-memory projection.
+ *
+ * The only stored body is the latest accepted redacted snapshot. Immutable
+ * receipt rows retain the complete non-body replay binding and byte metering so
+ * an old exact retry is still provable after the head advances or an epoch is
+ * superseded. Neither table has a raw-source hash, cwd, path, or audit body.
+ */
+import { type AgentMemoryProjectionCommitInput, type AgentMemoryProjectionEraseResult, type AgentMemoryProjectionReceipt, type AgentMemoryProjectionStore, type CloudCrypto } from '@byok-sdk/cloud';
+import type { Clock, TenantId } from '@byok-sdk/core';
+import type { Pool } from 'pg';
+export interface PostgresAgentMemoryProjectionStoreOptions {
+    readonly pool: Pool;
+    readonly clock: Clock;
+    /** The same Worker-safe crypto authority used by the hosting cloud composition. */
+    readonly crypto: Pick<CloudCrypto, 'randomUuid' | 'sha256'>;
+}
+/**
+ * A transaction-scoped Postgres projection store. The per-source advisory lock
+ * closes the empty-head race without creating a separate lock row or making a
+ * tenant-wide writer bottleneck; erase takes the identical lock.
+ */
+export declare class PostgresAgentMemoryProjectionStore implements AgentMemoryProjectionStore {
+    #private;
+    constructor(options: PostgresAgentMemoryProjectionStoreOptions);
+    commit(input: AgentMemoryProjectionCommitInput): Promise<AgentMemoryProjectionReceipt>;
+    /** Delete body/receipts but retain a body-free epoch fence under one source lock. */
+    erase(input: {
+        readonly tenantId: TenantId;
+        readonly agentId: string;
+    }): Promise<AgentMemoryProjectionEraseResult>;
+}
+/** Build the runtime-safe Postgres implementation of the optional cloud port. */
+export declare function createPostgresAgentMemoryProjectionStore(options: PostgresAgentMemoryProjectionStoreOptions): AgentMemoryProjectionStore;

package/dist/stores/index.d.ts

@@ -35,6 +35,8 @@ export { PostgresTaskCancellationStore } from './task-cancellations';
 export { PostgresActivityStore } from './activity';
 export { PostgresApprovalTimelineStore } from './approval-timeline';
 export { PostgresAgentEgressStore } from './agent-egress';
+export { PostgresAgentMemoryProjectionStore, createPostgresAgentMemoryProjectionStore, } from './agent-memory-projection';
+export type { PostgresAgentMemoryProjectionStoreOptions } from './agent-memory-projection';
 export { PostgresDeviceAssertionReplayAuthority } from './device-assertion-replay';
 export { DEFAULT_MAX_ATTEMPTS, DEFAULT_PRESIGN_TTL_SECONDS, DEFAULT_RETRY_DELAY_MS, MAX_PRESIGN_TTL_SECONDS, MIN_PRESIGN_TTL_SECONDS, ObjectStoreRequestError, R2_BLOB_ERROR_CODES, R2BlobStoreError, R2CloudBlobStore, R2ObjectMaintenanceStore, } from './r2-blobs';
 export type { ObjectStoreFetch, R2BlobErrorCode, R2BlobStoreOptions } from './r2-blobs';

package/dist/tenant-erasure.d.ts

@@ -1,8 +1,8 @@
 import { type Clock, type TenantId } from '@byok-sdk/core';
 import type { Pool } from 'pg';
 import { type R2BlobStoreOptions, type R2ObjectMaintenance } from './stores/r2-blobs';
-/** Every tenant-owned table as of 0013, in child-before-parent deletion order. */
-export declare const TENANT_ERASURE_TABLES: readonly ['object_reference', 'object_manifest', 'storage_reservation', 'storage_usage', 'storage_entitlement', 'gc_cursor', 'cleanup_job', 'tenant_retention_policy', 'skill_pack_file', 'skill_pack', 'approval_timeline_tail', 'activity_tail', 'attested_record', 'board_item', 'tenant_stream', 'outbox', 'agent_egress_event', 'device_request_receipts', 'proof_request_receipt', 'task', 'device_presence', 'device_assertion_replay', 'device_stream', 'inbound_dedup', 'auth_nonce', 'pairing_code', 'device'];
+/** Every tenant-owned table as of 0014, in child-before-parent deletion order. */
+export declare const TENANT_ERASURE_TABLES: readonly ['object_reference', 'object_manifest', 'storage_reservation', 'storage_usage', 'storage_entitlement', 'gc_cursor', 'cleanup_job', 'tenant_retention_policy', 'skill_pack_file', 'skill_pack', 'approval_timeline_tail', 'activity_tail', 'attested_record', 'board_item', 'tenant_stream', 'outbox', 'agent_memory_projection_metering_receipt', 'agent_memory_projection_head', 'agent_memory_projection_erase_fence', 'agent_egress_event', 'device_request_receipts', 'proof_request_receipt', 'task', 'device_presence', 'device_assertion_replay', 'device_stream', 'inbound_dedup', 'auth_nonce', 'pairing_code', 'device'];
 export declare const TENANT_ERASURE_ERROR_CODES: {
     readonly tenant_erasure_invalid_input: 'tenant_erasure_invalid_input';
     readonly tenant_erasure_schema_drift: 'tenant_erasure_schema_drift';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@byok-sdk/cloud-dataplane",
-  "version": "0.8.0",
+  "version": "0.9.0-rc.1",
   "description": "BYOK SDK hosted data plane: canonical Postgres + R2 stores, migrations, truth transactions, and maintenance",
   "type": "module",
   "license": "MIT",
@@ -49,9 +49,9 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@byok-sdk/cloud": "0.8.0",
-    "@byok-sdk/core": "0.8.0",
-    "@byok-sdk/protocol": "0.8.0",
+    "@byok-sdk/cloud": "0.9.0-rc.1",
+    "@byok-sdk/core": "0.9.0-rc.1",
+    "@byok-sdk/protocol": "0.9.0-rc.1",
     "aws4fetch": "1.0.20",
     "fast-xml-parser": "^5.10.1",
     "pg": "^8.22.0"