@byok-sdk/cloud 0.14.0 → 0.16.0

package/dist/offer-identity.d.ts

@@ -0,0 +1,4 @@
+import type { AgentRef } from '@byok-sdk/protocol';
+export declare function uuidFromSha256(value: string): string;
+export declare function taskOfferMessageId(tenant: string, taskId: string, deviceId: string, agentRef: AgentRef | undefined, sha256: (bytes: Uint8Array) => Promise<string>): Promise<string>;
+export declare function hashOfferBytes(bytes: Uint8Array): Promise<string>;

package/dist/stores/in-memory/device-directory.d.ts

@@ -1,3 +1,4 @@
+import type { HarnessInfo } from '@byok-sdk/protocol';
 /**
  * In-memory {@link DeviceDirectory}.
  *
@@ -26,6 +27,7 @@ export declare class InMemoryDeviceDirectory implements DeviceDirectory {
     revoke(tenant: TenantId, deviceId: string): Promise<void>;
     recordCapabilities(tenant: TenantId, input: {
         readonly deviceId: string;
+        readonly harnesses?: readonly HarnessInfo[];
         readonly capabilities: readonly string[];
     }): Promise<DeviceRecord | undefined>;
     list(tenant: TenantId): Promise<readonly DeviceRecord[]>;

package/dist/stores/in-memory/task-attempts.d.ts

@@ -63,6 +63,7 @@ export declare class InMemoryTaskAttemptStore implements TaskAttemptStore {
         taskId: string;
         deviceId: string;
         runtime?: RuntimeId;
+        harnessId?: string;
         capabilities?: RuntimeCapabilities;
     }): Promise<TaskAttempt | undefined>;
     recordStatus(tenant: TenantId, input: {

package/dist/stores/ports.d.ts

@@ -1,3 +1,4 @@
+import type { HarnessInfo } from '@byok-sdk/protocol';
 /**
  * The cloud-local store ports.
  *
@@ -68,6 +69,7 @@ export interface DeviceRecord {
      * lossy/TTL-bounded and cannot authorize Agent dispatch.
      */
     readonly capabilities?: readonly string[];
+    readonly harnesses?: readonly HarnessInfo[];
 }
 /** Everything `POST /byok/pair` knows at registration time. `tenantId` is the store's first parameter; `revoked` is the store's own to set (always `false`). */
 export interface DeviceRegistration {
@@ -122,6 +124,7 @@ export interface DeviceDirectory {
      */
     recordCapabilities(tenant: TenantId, input: {
         readonly deviceId: string;
+        readonly harnesses?: readonly HarnessInfo[];
         readonly capabilities: readonly string[];
     }): Promise<DeviceRecord | undefined>;
     /** Pre-tenant. Two callers only: `POST /byok/challenge` and `POST /byok/token`. Never exposed through the tenant facade. */
@@ -230,6 +233,7 @@ export interface TaskAttempt {
      * Absent for a daemon whose `task.claim` carried no `runtime` at all.
      */
     readonly claimedRuntime?: RuntimeId;
+    readonly claimedHarnessId?: string;
     /**
      * The capability block the CLAIMING adapter reported for ITSELF on that same
      * `task.claim` (`TaskClaimPayload.capabilities`), snapshotted under exactly
@@ -366,6 +370,7 @@ export interface TaskAttemptStore {
         readonly taskId: string;
         readonly deviceId: string;
         readonly runtime?: RuntimeId;
+        readonly harnessId?: string;
         readonly capabilities?: RuntimeCapabilities;
     }): Promise<TaskAttempt | undefined>;
     /** Record a lifecycle transition. No-op (returns `undefined`) for an unknown task — same shape as the reference server's per-type handlers. */

package/dist/tenant-stores.d.ts

@@ -1,3 +1,4 @@
+import type { HarnessInfo } from '@byok-sdk/protocol';
 /**
  * Layer 2 of the six-layer isolation model (§12.6.2) — the tenant-closed
  * facade a handler actually receives.
@@ -61,6 +62,7 @@ export interface TenantBoundDevices {
     revoke(deviceId: string): Promise<void>;
     /** Persist the authenticated device's own capability snapshot. */
     recordCapabilities(input: {
+        readonly harnesses?: readonly HarnessInfo[];
         readonly capabilities: readonly string[];
     }): Promise<DeviceRecord | undefined>;
     readiness(): Promise<TenantReadiness>;
@@ -105,6 +107,7 @@ export interface TenantBoundTaskAttempts {
         readonly taskId: string;
         readonly deviceId: string;
         readonly runtime?: RuntimeId;
+        readonly harnessId?: string;
         readonly capabilities?: RuntimeCapabilities;
     }): Promise<TaskAttempt | undefined>;
     recordStatus(input: {

package/dist/terminal-result.d.ts

@@ -1,4 +1,4 @@
-import { type AgentRef, type BlobRef, type TerminalInferenceUsage } from '@byok-sdk/protocol';
+import { type AgentRef, type BlobRef, type TerminalInferenceUsage, type TaskFailPayload } from '@byok-sdk/protocol';
 import type { RequestReceipt } from './stores/ports';
 /**
  * The typed terminal read model — the hosted counterpart of the embedded
@@ -9,6 +9,9 @@ import type { RequestReceipt } from './stores/ports';
  */
 export interface TerminalResult {
     readonly taskId: string;
+    readonly harnessId?: string;
+    /** Local interruption observation; claimed ownership remains on TaskAttempt. */
+    readonly recovery?: TaskFailPayload['recovery'];
     readonly state: 'complete' | 'failed' | 'cancelled';
     /** Exact Agent identity echoed by the winning terminal, when Agent-bound. */
     readonly agentRef?: AgentRef;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@byok-sdk/cloud",
-  "version": "0.14.0",
+  "version": "0.16.0",
   "description": "BYOK SDK hosted device surface: stateless frozen-v1 HTTP handlers over tenant-first @byok-sdk/core ports",
   "type": "module",
   "license": "MIT",
@@ -44,8 +44,8 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@byok-sdk/core": "0.14.0",
-    "@byok-sdk/protocol": "0.14.0",
+    "@byok-sdk/core": "0.16.0",
+    "@byok-sdk/protocol": "0.16.0",
     "hono": "^4.12.30",
     "zod": "^4.4.3"
   }