@byok-sdk/cloud 0.13.0 → 0.14.0

package/dist/activity.d.ts

@@ -14,12 +14,46 @@ export declare const ActivityAppendRequestSchema: z.ZodObject<{
         tool: z.ZodString;
         input: z.ZodOptional<z.ZodUnknown>;
         toolCallId: z.ZodOptional<z.ZodString>;
+        spill: z.ZodOptional<z.ZodObject<{
+            field: z.ZodEnum<{
+                input: "input";
+                output: "output";
+            }>;
+            totalBytes: z.ZodNumber;
+            omittedBytes: z.ZodNumber;
+            contentType: z.ZodLiteral<"application/json">;
+            blob: z.ZodOptional<z.ZodObject<{
+                blobId: z.ZodString;
+                contentHash: z.ZodString;
+                size: z.ZodNumber;
+                contentType: z.ZodString;
+                url: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            unstoredReason: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"tool_result">;
         tool: z.ZodString;
         output: z.ZodOptional<z.ZodUnknown>;
         toolCallId: z.ZodOptional<z.ZodString>;
         isError: z.ZodOptional<z.ZodBoolean>;
+        spill: z.ZodOptional<z.ZodObject<{
+            field: z.ZodEnum<{
+                input: "input";
+                output: "output";
+            }>;
+            totalBytes: z.ZodNumber;
+            omittedBytes: z.ZodNumber;
+            contentType: z.ZodLiteral<"application/json">;
+            blob: z.ZodOptional<z.ZodObject<{
+                blobId: z.ZodString;
+                contentHash: z.ZodString;
+                size: z.ZodNumber;
+                contentType: z.ZodString;
+                url: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            unstoredReason: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"artifact">;
         name: z.ZodString;
@@ -59,12 +93,46 @@ export declare const TimelineEventSchema: z.ZodObject<{
         tool: z.ZodString;
         input: z.ZodOptional<z.ZodUnknown>;
         toolCallId: z.ZodOptional<z.ZodString>;
+        spill: z.ZodOptional<z.ZodObject<{
+            field: z.ZodEnum<{
+                input: "input";
+                output: "output";
+            }>;
+            totalBytes: z.ZodNumber;
+            omittedBytes: z.ZodNumber;
+            contentType: z.ZodLiteral<"application/json">;
+            blob: z.ZodOptional<z.ZodObject<{
+                blobId: z.ZodString;
+                contentHash: z.ZodString;
+                size: z.ZodNumber;
+                contentType: z.ZodString;
+                url: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            unstoredReason: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"tool_result">;
         tool: z.ZodString;
         output: z.ZodOptional<z.ZodUnknown>;
         toolCallId: z.ZodOptional<z.ZodString>;
         isError: z.ZodOptional<z.ZodBoolean>;
+        spill: z.ZodOptional<z.ZodObject<{
+            field: z.ZodEnum<{
+                input: "input";
+                output: "output";
+            }>;
+            totalBytes: z.ZodNumber;
+            omittedBytes: z.ZodNumber;
+            contentType: z.ZodLiteral<"application/json">;
+            blob: z.ZodOptional<z.ZodObject<{
+                blobId: z.ZodString;
+                contentHash: z.ZodString;
+                size: z.ZodNumber;
+                contentType: z.ZodString;
+                url: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            unstoredReason: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"artifact">;
         name: z.ZodString;

package/dist/inbound.d.ts

@@ -13,13 +13,12 @@
  *    authenticated long-poll `conn.hello` capability snapshot handled below.
  *    A server -> daemon type arriving inbound, or anything unrecognized, is
  *    rejected before it is dispatched or counted accepted.
- * 2. **ownership** — an envelope for a task already owned by a DIFFERENT
- *    device is dropped, never force-failed: force-failing on an authz mismatch
+ * 2. **ownership** — an envelope must name an existing task targeted at this
+ *    exact device, and a task already owned by a DIFFERENT device is dropped,
+ *    never force-failed: force-failing on an authz mismatch
  *    would let an attacker who merely guesses a `taskId` kill the real owner's
- *    task. A task with no owner yet, or that this tenant does not have at all,
- *    is not rejected here — the store's own no-op-on-missing behavior covers
- *    the latter, and it covers it per tenant, so a guessed id from another
- *    tenant writes nothing anywhere.
+ *    task. Unknown task ids are rejected before any task-scoped projection or
+ *    dedup fact can be written.
  * 3. **apply/recover** — every lifecycle side effect is idempotent under the
  *    envelope's own durable identity. A retry after a partial failure resumes
  *    this step rather than being hidden by transport admission.

package/dist/index.js

@@ -1453,12 +1453,12 @@ async function applyInboundGate(stores, deviceId, envelope, activityBounds, agen
   const taskId = envelope.task_id;
   if (taskId === void 0) return "rejected";
   const attempt = await stores.tasks.get(taskId);
-  if (attempt?.agentRef !== void 0 && attempt.deviceId !== deviceId) return "rejected";
+  if (attempt === void 0 || attempt.deviceId !== deviceId) return "rejected";
   if (attempt?.ownerDeviceId !== void 0 && attempt.ownerDeviceId !== deviceId) return "rejected";
+  if (envelope.type === "task.claim" && envelope.payload.deviceId !== deviceId) return "rejected";
   if (attempt?.agentRef !== void 0 && agentRefEchoRequired(envelope) && !sameAgentRef(attempt.agentRef, inboundAgentRef(envelope))) {
     return "rejected";
   }
-  if (terminalStatus(envelope) !== void 0 && attempt === void 0) return "rejected";
   if (envelope.type === "task.progress" && envelope.payload.events.length > 0) {
     try {
       validateActivityBatch(
@@ -1587,13 +1587,11 @@ async function recordTerminal(stores, taskId, envelope) {
   }
   const attempt = await stores.tasks.get(taskId);
   if (attempt?.cancellation !== void 0) {
-    if (winner.status === "cancelled") {
-      await stores.tasks.recordStatus({
-        taskId,
-        status: "cancelled",
-        ...attempt.agentRef === void 0 ? {} : { agentRef: attempt.agentRef }
-      });
-    }
+    await stores.tasks.recordStatus({
+      taskId,
+      status: "cancelled",
+      ...attempt.agentRef === void 0 ? {} : { agentRef: attempt.agentRef }
+    });
     return;
   }
   const recordedAttempt = await stores.tasks.recordStatus({
@@ -1602,7 +1600,16 @@ async function recordTerminal(stores, taskId, envelope) {
     ...attempt?.agentRef === void 0 ? {} : { agentRef: attempt.agentRef },
     ...winner.cause === void 0 ? {} : { terminalCause: winner.cause }
   });
-  if (recordedAttempt?.status !== winner.status || recordedAttempt.cancellation !== void 0) return;
+  if (recordedAttempt?.cancellation !== void 0 || recordedAttempt?.status !== winner.status) {
+    if (recordedAttempt?.cancellation !== void 0) {
+      await stores.tasks.recordStatus({
+        taskId,
+        status: "cancelled",
+        ...recordedAttempt.agentRef === void 0 ? {} : { agentRef: recordedAttempt.agentRef }
+      });
+    }
+    return;
+  }
   await projectTerminalToReview(stores.board, taskId);
 }
 function terminalStatus(envelope) {
@@ -2905,10 +2912,10 @@ function createByokCloud(options) {
     }
     const offerReceiptKey = `task-offer:${messageId}`;
     const deliveryReceiptKey = `task-offer-delivered:${messageId}`;
-    if (agentRef !== void 0 && reservation?.created === false && await stores.receipts.get(deliveryReceiptKey) !== void 0) {
+    if (await stores.receipts.get(deliveryReceiptKey) !== void 0) {
       throw new ByokCloudError(
-        "agent_task_already_exists",
-        `Task ${taskId} already has a durable Agent attempt and cannot be enqueued again.`
+        agentRef === void 0 ? "coordination_input_invalid" : "agent_task_already_exists",
+        `Task ${taskId} already has a durable delivered attempt and cannot be enqueued again.`
       );
     }
     const proposed = buildEnvelope(taskId, 0, messageId);
@@ -2955,14 +2962,12 @@ function createByokCloud(options) {
         `Task ${taskId} already has a different executable offer body.`
       );
     }
-    if (agentRef !== void 0) {
-      const delivered = await stores.receipts.record({ key: deliveryReceiptKey, body: messageId });
-      if (reservation?.created === false && !delivered.created) {
-        throw new ByokCloudError(
-          "agent_task_already_exists",
-          `Task ${taskId} already has a durable Agent attempt and cannot be enqueued again.`
-        );
-      }
+    const delivered = await stores.receipts.record({ key: deliveryReceiptKey, body: messageId });
+    if (agentRef !== void 0 && reservation?.created === false && !delivered.created) {
+      throw new ByokCloudError(
+        "agent_task_already_exists",
+        `Task ${taskId} already has a durable Agent attempt and cannot be enqueued again.`
+      );
     }
     return { taskId, seq: message.seq, envelope, attempt: openedBeforeAppend };
   }
@@ -4355,7 +4360,7 @@ var InMemoryTaskAttemptStore = class {
     return this.#state.mutate(key, () => {
       const existing = this.#state.attempts.get(key);
       if (existing === void 0) return void 0;
-      if (existing.ownerDeviceId !== void 0 || existing.cancellation !== void 0 || existing.status !== "offered") return existing;
+      if (existing.deviceId !== input.deviceId || existing.ownerDeviceId !== void 0 || existing.cancellation !== void 0 || existing.status !== "offered") return existing;
       const claimed = {
         ...existing,
         ownerDeviceId: input.deviceId,