@byok-sdk/cloud-do 0.26.1 → 0.27.0

package/README.md

@@ -4,26 +4,33 @@ This package hosts a pi-durable session in a Cloudflare Durable Object.
 It provides native SQLite storage, inline tools, wake and inbox processing,
 usage limits, settlement hooks, and transcript reads.
 
-The prepared stable candidate is 0.26.1, with keys 0.11.1. It is not
-published. See the [candidate release notes](../../docs/releases/v0.26.1.md).
-
-The current `latest` release is 0.26.0, in the nine-package release set with
-keys 0.11.0. Registry readback passed on 2026-10-11; see the
-[publication record](../../docs/releases/v0.26.0-publication.md).
-The published 0.26.0-rc.4 (see the
+The current source prepares stable 0.27.0, in the nine-package release set
+with keys 0.12.0, for the npm dist-tag `latest`. Publication remains pending.
+The published `rc` train remains 0.27.0-rc.2 / keys 0.12.0-rc.2; see the
+[rc.2 publication record](../../docs/releases/v0.27.0-rc.2-publication.md).
+See the [release notes](../../docs/releases/v0.27.0.md) for the stable plan
+and the open Host acceptance gap (#195).
+
+The current `latest` release is 0.26.1, in the nine-package release set with
+keys 0.11.1. Registry readback and isolated installation passed on 2026-10-12.
+See the [publication record](../../docs/releases/v0.26.1-publication.md).
+The previous stable release was 0.26.0 / keys 0.11.0; its
+[publication record](../../docs/releases/v0.26.0-publication.md) remains historical.
+The earlier published 0.26.0-rc.4 (see the
 [rc.4 publication record](../../docs/releases/v0.26.0-rc.4-publication.md))
-stays on `rc`; rc.1 to rc.3 are superseded. See the
-[release notes](../../docs/releases/v0.26.0.md#version-set-and-channel).
+is superseded by 0.27.0-rc.2; 0.26.0-rc.1 to rc.3 are superseded. See the
+[release notes](../../docs/releases/v0.26.1.md#version-set-and-channel).
 Live Host acceptance remains separate.
 The package needs Node 24.15.0 or later for build tooling.
 
 ## Install and subclass
 
-The following install example names the prepared stable candidate. Publish
-it before installation. Use an installed package to verify the consumer path.
+The following install example names the 0.27.0 candidate. It works only
+after publication and exact registry readback. Use an installed package to
+verify the consumer path.
 
 ~~~sh
-npm install @byok-sdk/cloud-do@0.26.1
+npm install @byok-sdk/cloud-do@0.27.0
 npm install --save-dev @cloudflare/workers-types
 ~~~
 
@@ -109,13 +116,13 @@ openDurableObjectStorage has the local structural factory type
 (location: DurableObjectStorage) => Promise<Storage>.
 Storage is pi-durable's native interface. The package does not import client
 source or keys types. Its three runtime dependencies are pi-durable, pi-ai,
-and chord, each pinned to 1.1.0.
+and chord, each pinned to 1.2.0.
 
 The Durable Object owns the physical connection. Closing the adapter
 invalidates that adapter. It does not close the Durable Object database.
 
 This follows the async adapter in [Cloudflare Agents d6656161](https://github.com/cloudflare/agents/blob/d6656161/packages/agents/src/harness/pi/session-store.ts).
-Current upstream uses a different synchronous pi contract. Pinned pi 1.1.0 takes
+Current upstream uses a different synchronous pi contract. Pinned pi 1.2.0 takes
 async callbacks, so `transactionSync()` cannot host its transaction callback.
 Cloudflare documents async SQL transactions on the
 [SQLite storage API](https://developers.cloudflare.com/durable-objects/api/sqlite-storage-api/).
@@ -128,11 +135,13 @@ under the SDK's pre-1.0 policy.
 ## Package checks
 
 The library build emits dist/index.js and a local declaration closure.
-The dist check rejects Node builtins, missing or escaped declaration paths,
-and undeclared external type imports. A separate Wrangler dry run writes
+The dist check rejects missing or escaped declaration paths and undeclared
+external type imports. The entry dependency contract enforces runtime builtin policy. A separate Wrangler dry run writes
 dist-worker. That Worker output is not in the npm package.
 
 Release verification installs a real tarball in a temporary consumer.
 It typechecks the subclass, bundles it with Wrangler, and runs its hook,
 Durable Object RPC, identity helper, and SQLite adapter in real workerd.
 The same smoke runs in the Linux, macOS, and Windows release-pack jobs.
+
+Runtime dependencies and size budgets: [entry dependency contract](../../README.md#entry-dependencies).

package/dist/index.js

@@ -2271,6 +2271,8 @@ var SessionRuntime = class {
   #initializing = false;
   #deferredSettlements = [];
   #opened;
+  /** Pi 1.2: the cached Harness's Session failed and closed. The next open() replaces it from Storage. */
+  #sessionFailed = false;
   #recovery;
   #recovered = false;
   #config;
@@ -2345,14 +2347,23 @@ var SessionRuntime = class {
     });
   }
   open(selected) {
-    if (!this.#opened) {
+    if (!this.#opened || this.#sessionFailed) {
+      this.#sessionFailed = false;
+      let openGuard;
+      const disposeOpenGuard = () => {
+        openGuard?.dispose();
+        if (this.#recoveryGuard === openGuard) this.#recoveryGuard = void 0;
+      };
       const initialized = prepareCloudGuard(this.env, selected).then((guard) => {
+        openGuard = guard;
         this.#recoveryGuard = guard;
         this.#initializing = true;
         return this.state.blockConcurrencyWhile(async () => {
           this.ledger.ensureSchema();
           this.cloud.ensureSchema();
           this.#sessionSchema();
+          this.#dispatcher = void 0;
+          this.#bootstrapFailure = void 0;
           this.#config = this.#storedConfig();
           if (!this.#config && this.ledger.pending().length) this.#bootstrapFailure = "CLOUD_TOOL_NOT_AVAILABLE";
           if (this.#config) {
@@ -2428,20 +2439,22 @@ var SessionRuntime = class {
           return { harness, replay };
         });
       });
-      this.#opened = initialized.then(({ harness, replay }) => {
+      const opened = initialized.then(({ harness, replay }) => {
         this.#flushSettlements();
-        this.#recovery = this.#recover(harness, replay).finally(() => {
-          this.#recoveryGuard?.dispose();
-          this.#recoveryGuard = void 0;
+        void harness.closed.then((end) => {
+          if (end.reason !== "failed" || this.#opened !== opened) return;
+          this.#recovered = false;
+          this.#sessionFailed = true;
         });
+        this.#recovery = this.#recover(harness, replay).finally(disposeOpenGuard);
         void this.#recovery.catch(() => void 0);
         return harness;
       }, (error) => {
         this.#flushSettlements();
-        this.#recoveryGuard?.dispose();
-        this.#recoveryGuard = void 0;
+        disposeOpenGuard();
         throw error;
       });
+      this.#opened = opened;
     }
     return this.#opened;
   }
@@ -2638,7 +2651,7 @@ var SessionRuntime = class {
       this.#repairing = false;
       guard?.dispose();
       previousGuard?.dispose();
-      this.#recoveryGuard = void 0;
+      if (this.#recoveryGuard === guard) this.#recoveryGuard = void 0;
       if (this.#active) this.#active.guard = void 0;
     }
   }
@@ -2881,11 +2894,13 @@ var SessionRuntime = class {
       await this.#runInvocation(row2, void 0, true).catch(() => void 0);
     }
     await this.#adjudicateRuns(harness);
+    if (this.#active && !this.#active.liveOwner) {
+      clearTimeout(this.#active.timer);
+      this.#active = void 0;
+    }
     await this.#backfillTurns(harness);
     await this.cloud.rearmAlarm({ busy: false, repairRetrying: false });
     this.#recovered = true;
-    this.#recoveryGuard?.dispose();
-    this.#recoveryGuard = void 0;
   }
   async #backfillTurns(harness) {
     let before = Number.MAX_SAFE_INTEGER;
@@ -2966,20 +2981,20 @@ var SessionRuntime = class {
     const error = result.error;
     if (Object.hasOwn(result, "modelView")) return {
       isError: result.ok === false,
-      content: [{ type: "text", text: JSON.stringify(result.modelView) }]
+      output: [{ type: "text", text: JSON.stringify(result.modelView) }]
     };
     if (result.ok === false) {
       if (this.#dispatcher?.domainErrors?.includes(error.code)) return {
         isError: true,
-        content: [{ type: "text", text: JSON.stringify({ ok: false, error }) }]
+        output: [{ type: "text", text: JSON.stringify({ ok: false, error }) }]
       };
       return this.#errorResult(error.code);
     }
-    return { content: [{ type: "text", text: JSON.stringify(result) }] };
+    return { output: [{ type: "text", text: JSON.stringify(result) }] };
   }
   #errorResult(code) {
     const fixed = safeCloudError(new Error(typeof code === "string" ? code : "CLOUD_TOOL_FAILED")).code;
-    return { isError: true, content: [{ type: "text", text: JSON.stringify({ ok: false, error: { code: fixed } }) }] };
+    return { isError: true, output: [{ type: "text", text: JSON.stringify({ ok: false, error: { code: fixed } }) }] };
   }
   #toolErrorCode(error) {
     const code = safeCloudError(error).code;
@@ -3016,7 +3031,7 @@ var SessionRuntime = class {
     let removeAbort;
     try {
       deadline = Math.min(row2.deadlineAt, this.ledger.execution(row2.conversationId)?.deadlineAt ?? row2.deadlineAt);
-      if (Date.now() >= deadline) throw new CloudDoError("CLOUD_TOOL_TIMEOUT");
+      if (Date.now() >= deadline) throw new CloudDoError(this.#timeoutCode(row2.conversationId));
       if (!this.#config || !this.#dispatcher) throw new CloudDoError("CLOUD_EXECUTION_INTERRUPTED");
       if (!recovery && this.fatal(row2.conversationId)) throw new CloudDoError(this.fatal(row2.conversationId));
       const args = JSON.parse(row2.argsJson);