@byok-sdk/cloud 0.5.0 → 0.6.0

package/dist/cloud.d.ts

@@ -14,7 +14,7 @@
  * quietly undo that — a Running/session map — is asserted absent by
  * `src/__tests__/constraints.test.ts`.
  */
-import { type BoardItem, type BoardItemInput, type BoardListQuery, type BoardPage, type CapabilityDeclaration, type Clock, type CoreStores, type PresenceHint, type SkillPackStore, type TenantId } from '@byok-sdk/core';
+import { type BoardItem, type BoardItemInput, type BoardListQuery, type BoardPage, type CapabilityDeclaration, type Clock, type CoreStores, type PresenceHint, type SkillPackStore, type TenantId, type TenantReadiness } from '@byok-sdk/core';
 import type { ActivityTail } from './activity';
 import type { ApprovalTimelineTail } from './approval-timeline';
 import { type Envelope, type TaskOfferPayload, type TaskOfferWithToolsetsPayload } from '@byok-sdk/protocol';
@@ -127,17 +127,18 @@ export interface ByokCloud {
     enqueueOffer(tenant: TenantId, deviceId: string, input: EnqueueOfferInput): Promise<EnqueuedOffer>;
     /** Host control plane: enqueue the additive fail-closed offer variant that requires local MCP toolsets. */
     enqueueToolsetOffer(tenant: TenantId, deviceId: string, input: EnqueueToolsetOfferInput): Promise<EnqueuedOffer>;
+    /** Host control plane: durably request cancellation by tenant/task id. Idempotent. */
+    cancelTask(tenant: TenantId, taskId: string, reason?: string): Promise<TaskAttempt>;
     readTaskAttempt(tenant: TenantId, taskId: string): Promise<TaskAttempt | undefined>;
     /** The recorded terminal for a task — the first one, re-encoded canonically under the frozen v1 codec (see `recordTerminal`, `inbound.ts`: the stored body is `encodeEnvelope` of the zod-parsed envelope, not the device's original byte sequence). */
     readTerminalReceipt(tenant: TenantId, taskId: string): Promise<RequestReceipt | undefined>;
     /**
      * Host control plane: the same first terminal, decoded into the typed read
      * model ({@link TerminalResult}) so a host reads result fields, not envelope
-     * prose. `undefined` ONLY means no terminal fact is recorded yet:
-     * first-terminal-wins is inherited from the receipt store
-     * ({@link ByokCloud.readTerminalReceipt} reads the same row), and a declined
-     * task records no terminal at all — use {@link ByokCloud.readTaskAttempt}
-     * for that attempt status. An absent `document` covers both a legacy
+     * prose. An accepted host cancellation tombstone outranks a later device
+     * receipt; the raw receipt remains readable as device evidence through
+     * {@link ByokCloud.readTerminalReceipt}. `undefined` means neither fact
+     * exists. An absent `document` covers both a legacy
      * pre-`result-document` daemon build and a daemon with no `resultDocument`
      * extractor; a receipt whose body is not a terminal envelope throws rather
      * than returning a best-effort shape.
@@ -151,6 +152,8 @@ export interface ByokCloud {
     /** Human review authority. Device routes cannot produce `done`. */
     acceptBoardItem(tenant: TenantId, itemId: string): Promise<BoardItem>;
     listPresence(tenant: TenantId): Promise<readonly PresenceHint[]>;
+    /** SDK-owned observation only; never a scheduler or execution authority. */
+    readTenantReadiness(tenant: TenantId): Promise<TenantReadiness>;
     readActivity(tenant: TenantId, taskId: string): Promise<ActivityTail | undefined>;
     readApprovalTimeline(tenant: TenantId, taskId: string): Promise<ApprovalTimelineTail | undefined>;
 }

package/dist/errors.d.ts

@@ -41,6 +41,8 @@ export declare const CLOUD_ERROR_CODES: {
     readonly terminal_receipt_unreadable: 'terminal_receipt_unreadable';
     /** A progress/activity batch exceeded the configured event or byte ceiling. */
     readonly activity_batch_too_large: 'activity_batch_too_large';
+    /** Host control-plane task lookup is tenant-closed and found no task. */
+    readonly task_not_found: 'task_not_found';
 };
 export type CloudErrorCode = (typeof CLOUD_ERROR_CODES)[keyof typeof CLOUD_ERROR_CODES];
 export declare class ByokCloudError extends Error {

package/dist/index.d.ts

@@ -61,6 +61,6 @@ export { TruthCommitError, isTruthCommitError } from './truth/errors';
 export type { TruthCommitErrorCode } from './truth/errors';
 export { CLOUD_STORE_NAMES, TASK_ATTEMPT_STATUSES } from './stores/ports';
 export { CLOUD_PORT_INTERFACES, CLOUD_PORT_METHODS } from './stores/ports-contract';
-export type { BlobContent, BlobContentProxy, BlobDeclaration, BlobObservation, BlobWriteResult, CloudBlobStore, CloudStoreName, CloudStores, DeviceDirectory, DeviceRecord, DeviceRegistration, InboundDedupStore, InboundRateLimiter, NonceStore, PairingCodeClaims, PairingCodeInfo, PairingCodeIssueInput, PairingCodeStore, ProofRequestReceipt, ProofRequestReceiptInput, ProofRequestReceiptStore, RequestReceipt, RequestReceiptStore, TaskAttempt, TaskAttemptStatus, TaskAttemptStore, } from './stores/ports';
-export { AllowAllRateLimiter, BLOB_URL_TTL_MS, DEDUP_RING_CAPACITY, InMemoryBlobContentProxy, InMemoryCloudBlobStore, InMemoryActivityStore, InMemoryDeviceDirectory, InMemoryInboundDedupStore, InMemoryNonceStore, InMemoryPairingCodeStore, InMemoryRequestReceiptStore, InMemoryProofRequestReceiptStore, InMemoryTaskAttemptStore, NONCE_TTL_MS, createInMemoryBlobs, createInMemoryCloudStores, } from './stores/in-memory/index';
+export type { BlobContent, BlobContentProxy, BlobDeclaration, BlobObservation, BlobWriteResult, CloudBlobStore, CloudStoreName, CloudStores, DeviceDirectory, DeviceRecord, DeviceRegistration, InboundDedupStore, InboundRateLimiter, NonceStore, PairingCodeClaims, PairingCodeInfo, PairingCodeIssueInput, PairingCodeStore, ProofRequestReceipt, ProofRequestReceiptInput, ProofRequestReceiptStore, RequestReceipt, RequestReceiptStore, TaskAttempt, TaskAttemptStatus, TaskAttemptStore, TaskCancellationMutation, TaskCancellationRequest, TaskCancellationStore, } from './stores/ports';
+export { AllowAllRateLimiter, BLOB_URL_TTL_MS, DEDUP_RING_CAPACITY, InMemoryBlobContentProxy, InMemoryCloudBlobStore, InMemoryActivityStore, InMemoryDeviceDirectory, InMemoryInboundDedupStore, InMemoryNonceStore, InMemoryPairingCodeStore, InMemoryRequestReceiptStore, InMemoryProofRequestReceiptStore, InMemoryTaskAttemptStore, InMemoryTaskCancellationStore, NONCE_TTL_MS, createInMemoryBlobs, createInMemoryCloudStores, } from './stores/in-memory/index';
 export type { InMemoryBlobStoreOptions, InMemoryBlobs, InMemoryCloudComposition, } from './stores/in-memory/index';

package/dist/index.js

@@ -1,6 +1,6 @@
-import { BOARD_STATUSES, PRESENCE_LEVELS, CapabilityDeclarationSchema, NONCE_SIGNING_DOMAIN, hasCapability, isTenantId, tenantId, principalTenant, parseDeviceProofEnvelope, deviceProofSigningInput, parseCapabilityDeclaration, ByokCoreError, tenantKey, createInMemoryCoreStores, authenticateDeviceAssertion, assertCapability, contentHash, isCoreConflictError, isCoreError, DEVICE_PROOF_HEADER, TRUTH_RECORD_KINDS, STORAGE_ERROR_CODES, STORAGE_ERROR_HTTP_STATUS } from '@byok-sdk/core';
+import { BOARD_STATUSES, CapabilityDeclarationSchema, NONCE_SIGNING_DOMAIN, hasCapability, isTenantId, tenantId, principalTenant, parseDeviceProofEnvelope, deviceProofSigningInput, contentHash, parseCapabilityDeclaration, ByokCoreError, tenantKey, PRESENCE_LEVELS, createInMemoryCoreStores, authenticateDeviceAssertion, assertCapability, isCoreConflictError, isCoreError, DEVICE_PROOF_HEADER, TRUTH_RECORD_KINDS, STORAGE_ERROR_CODES, STORAGE_ERROR_HTTP_STATUS } from '@byok-sdk/core';
 export { DEVICE_PROOF_HEADER, NONCE_SIGNING_DOMAIN, isTenantId, tenantId } from '@byok-sdk/core';
-import { AgentEventOrUnknownSchema, ConfiguredToolsetsSchema, DAEMON_TO_SERVER_TYPES, encodeEnvelope, decodeEnvelope, BYOK_PAIR_PATH, BYOK_CHALLENGE_PATH, BYOK_TOKEN_PATH, BYOK_CAPABILITIES_PATH, BYOK_EVENTS_PATH, BYOK_MESSAGES_PATH, BYOK_BOARD_PATH, BYOK_BOARD_CLAIM_ROUTE, BYOK_BOARD_UNCLAIM_ROUTE, BYOK_BOARD_STATUS_ROUTE, BYOK_BOARD_STREAM_PATH, BYOK_PRESENCE_PATH, BYOK_ACTIVITY_PATH, BYOK_RECORDS_PATH, BYOK_RECORD_ROUTE, BYOK_SKILL_PACKS_PATH, BYOK_SKILL_PACK_FILE_ROUTE, BYOK_BLOBS_PATH, BYOK_BLOB_FINALIZE_ROUTE, BYOK_BLOB_URL_ROUTE, BYOK_BLOB_CONTENT_ROUTE, createEnvelope, PairRequestSchema, ChallengeRequestSchema, TokenRequestSchema, MessagesSendRequestSchema, CreateBlobRequestSchema, byokBlobContentPath } from '@byok-sdk/protocol';
+import { AgentEventOrUnknownSchema, DAEMON_TO_SERVER_TYPES, encodeEnvelope, decodeEnvelope, BYOK_PAIR_PATH, BYOK_CHALLENGE_PATH, BYOK_TOKEN_PATH, BYOK_CAPABILITIES_PATH, BYOK_EVENTS_PATH, BYOK_MESSAGES_PATH, BYOK_BOARD_PATH, BYOK_BOARD_CLAIM_ROUTE, BYOK_BOARD_UNCLAIM_ROUTE, BYOK_BOARD_STATUS_ROUTE, BYOK_BOARD_STREAM_PATH, BYOK_PRESENCE_PATH, BYOK_ACTIVITY_PATH, BYOK_RECORDS_PATH, BYOK_RECORD_ROUTE, BYOK_SKILL_PACKS_PATH, BYOK_SKILL_PACK_FILE_ROUTE, BYOK_BLOBS_PATH, BYOK_BLOB_FINALIZE_ROUTE, BYOK_BLOB_URL_ROUTE, BYOK_BLOB_CONTENT_ROUTE, createEnvelope, PairRequestSchema, ChallengeRequestSchema, TokenRequestSchema, MessagesSendRequestSchema, PresencePublishRequestSchema, CreateBlobRequestSchema, byokBlobContentPath } from '@byok-sdk/protocol';
 import { z } from 'zod';
 import { Hono } from 'hono';
 
@@ -317,7 +317,9 @@ var CLOUD_ERROR_CODES = {
    */
   terminal_receipt_unreadable: "terminal_receipt_unreadable",
   /** A progress/activity batch exceeded the configured event or byte ceiling. */
-  activity_batch_too_large: "activity_batch_too_large"
+  activity_batch_too_large: "activity_batch_too_large",
+  /** Host control-plane task lookup is tenant-closed and found no task. */
+  task_not_found: "task_not_found"
 };
 var ByokCloudError = class extends Error {
   code;
@@ -524,14 +526,19 @@ function tenantStoresFor(principal, root) {
     devices: {
       get: (deviceId) => cloud.devices.get(tenant, deviceId),
       list: () => cloud.devices.list(tenant),
-      revoke: (deviceId) => cloud.devices.revoke(tenant, deviceId)
+      revoke: (deviceId) => cloud.devices.revoke(tenant, deviceId),
+      readiness: () => cloud.devices.readiness(tenant, core.presence)
     },
     tasks: {
       open: (input) => cloud.tasks.open(tenant, input),
       get: (taskId) => cloud.tasks.get(tenant, taskId),
+      getMany: (taskIds) => cloud.tasks.getMany(tenant, taskIds),
       claim: (input) => cloud.tasks.claim(tenant, input),
       recordStatus: (input) => cloud.tasks.recordStatus(tenant, input)
     },
+    cancellations: {
+      request: (input) => cloud.cancellations.request(tenant, input)
+    },
     dedup: {
       checkAndRecord: (deviceId, envelopeId) => cloud.dedup.checkAndRecord(tenant, deviceId, envelopeId)
     },
@@ -774,13 +781,30 @@ function eventsHandler(deps) {
     }
     const attempts = Math.max(1, Math.ceil(deps.longPollHoldMs / deps.longPollIntervalMs));
     for (let attempt = 0; attempt < attempts; attempt += 1) {
-      const page = await stores.mailbox.readAfter({
-        deviceId: device.deviceId,
-        afterSeq: cursor,
-        limit: deps.pageLimit
-      });
-      if (page.messages.length > 0) {
-        const events = page.messages.map((message) => decodeEnvelope(message.body));
+      let scanCursor = cursor;
+      while (true) {
+        const page = await stores.mailbox.readAfter({
+          deviceId: device.deviceId,
+          afterSeq: scanCursor,
+          limit: deps.pageLimit
+        });
+        if (page.messages.length === 0) break;
+        const decoded = page.messages.map((message) => decodeEnvelope(message.body));
+        const offeredTaskIds = decoded.flatMap(
+          (event) => (event.type === "task.offer" || event.type === "task.offer_with_toolsets") && event.task_id !== void 0 ? [event.task_id] : []
+        );
+        const attemptsByTaskId = Object.fromEntries(
+          (await stores.tasks.getMany(offeredTaskIds)).map((attempt2) => [attempt2.taskId, attempt2])
+        );
+        const events = decoded.filter((event) => {
+          if (event.type !== "task.offer" && event.type !== "task.offer_with_toolsets") return true;
+          return event.task_id === void 0 || attemptsByTaskId[event.task_id]?.cancellation === void 0;
+        });
+        if (events.length === 0 && page.hasMore) {
+          scanCursor = page.nextSeq;
+          continue;
+        }
+        if (events.length === 0) break;
         const response2 = {
           events,
           cursor: page.nextSeq,
@@ -999,12 +1023,20 @@ function approvalTimelineAppendInput(taskId, envelope) {
   }
 }
 async function recordTerminal(stores, taskId, envelope, status) {
+  const attempt = await stores.tasks.get(taskId);
   const { created } = await stores.receipts.record({
     key: terminalReceiptKey(taskId),
     body: encodeEnvelope(envelope)
   });
+  if (attempt?.cancellation !== void 0) {
+    if (status === "cancelled") {
+      await stores.tasks.recordStatus({ taskId, status: "cancelled" });
+    }
+    return;
+  }
   if (!created) return;
-  await stores.tasks.recordStatus({ taskId, status });
+  const recordedAttempt = await stores.tasks.recordStatus({ taskId, status });
+  if (recordedAttempt?.status !== status || recordedAttempt.cancellation !== void 0) return;
   await projectTerminalToReview(stores.board, taskId);
 }
 
@@ -1271,11 +1303,7 @@ function boardFailure(c, caught) {
   if (isCoreError(caught, "board_not_held")) return c.json({ error: caught.code }, 409);
   throw caught;
 }
-var PresenceBodySchema = z.object({
-  level: z.enum(PRESENCE_LEVELS),
-  detail: z.string().optional(),
-  configuredToolsets: ConfiguredToolsetsSchema.optional()
-});
+var PresenceBodySchema = PresencePublishRequestSchema;
 function presencePublishHandler(deps) {
   return async (c) => {
     const authenticated = await authenticateDevice(c, deps);
@@ -1292,6 +1320,15 @@ function presencePublishHandler(deps) {
           level: parsed.data.level,
           ...parsed.data.detail === void 0 ? {} : { detail: parsed.data.detail },
           ...parsed.data.configuredToolsets === void 0 ? {} : { configuredToolsets: parsed.data.configuredToolsets },
+          ...parsed.data.clientVersion === void 0 ? {} : { clientVersion: parsed.data.clientVersion },
+          ...parsed.data.protocolVersions === void 0 ? {} : { protocolVersions: parsed.data.protocolVersions },
+          ...parsed.data.runtimes === void 0 ? {} : {
+            runtimes: parsed.data.runtimes.map(({ id, version, authPresent }) => ({
+              id,
+              ...version === void 0 ? {} : { version },
+              ...authPresent === void 0 ? {} : { authPresent }
+            }))
+          },
           ttlMs: deps.ttlMs,
           minimumIntervalMs: deps.minimumIntervalMs
         }),
@@ -1792,6 +1829,7 @@ function projectTerminalResult(taskId, receipt) {
         sessionRef: envelope.payload.sessionRef,
         ...envelope.payload.artifactRefs !== void 0 ? { artifactRefs: envelope.payload.artifactRefs } : {},
         ...envelope.payload.document !== void 0 ? { document: envelope.payload.document } : {},
+        ...envelope.payload.usage !== void 0 ? { usage: envelope.payload.usage } : {},
         recordedAt: receipt.recordedAt
       };
     case "task.fail":
@@ -1800,6 +1838,7 @@ function projectTerminalResult(taskId, receipt) {
         state: "failed",
         reason: envelope.payload.reason,
         ...envelope.payload.retryable !== void 0 ? { retryable: envelope.payload.retryable } : {},
+        ...envelope.payload.usage !== void 0 ? { usage: envelope.payload.usage } : {},
         recordedAt: receipt.recordedAt
       };
     case "task.cancelled":
@@ -1807,6 +1846,7 @@ function projectTerminalResult(taskId, receipt) {
         taskId,
         state: "cancelled",
         ...envelope.payload.reason !== void 0 ? { reason: envelope.payload.reason } : {},
+        ...envelope.payload.usage !== void 0 ? { usage: envelope.payload.usage } : {},
         recordedAt: receipt.recordedAt
       };
     default:
@@ -2041,6 +2081,42 @@ function createByokCloud(options) {
         (taskId, seq, messageId) => createEnvelope("task.offer_with_toolsets", input.payload, { id: messageId, taskId, seq })
       );
     },
+    async cancelTask(tenant, taskId, reason) {
+      const stores = tenantStoresFor(controlPlane(tenant), root);
+      const proposedMessageId = options.crypto.randomUuid();
+      const mutation = await stores.cancellations.request({
+        taskId,
+        proposedMessageId,
+        ...reason === void 0 ? {} : { reason },
+        materialize: async (seq, messageId) => {
+          const envelope = createEnvelope("task.cancel", reason === void 0 ? {} : { reason }, {
+            id: messageId,
+            taskId,
+            seq
+          });
+          const body = encodeEnvelope(envelope);
+          const bytes = new TextEncoder().encode(body);
+          return {
+            body,
+            bodyHash: contentHash(await options.crypto.sha256(bytes)),
+            byteSize: BigInt(bytes.length)
+          };
+        }
+      });
+      if (mutation === void 0) {
+        throw new ByokCloudError("task_not_found", `Task ${taskId} was not found for this tenant.`);
+      }
+      if (mutation.message !== void 0) {
+        const envelope = decodeEnvelope(mutation.message.body);
+        if (envelope.seq !== mutation.message.seq || envelope.type !== "task.cancel") {
+          throw new ByokCloudError(
+            "mailbox_seq_mismatch",
+            `Mailbox stored cancellation seq ${String(envelope.seq)} at row ${mutation.message.seq}.`
+          );
+        }
+      }
+      return mutation.attempt;
+    },
     readTaskAttempt(tenant, taskId) {
       return tenantStoresFor(controlPlane(tenant), root).tasks.get(taskId);
     },
@@ -2048,7 +2124,17 @@ function createByokCloud(options) {
       return tenantStoresFor(controlPlane(tenant), root).receipts.get(terminalReceiptKey(taskId));
     },
     async readTaskResult(tenant, taskId) {
-      const receipt = await tenantStoresFor(controlPlane(tenant), root).receipts.get(
+      const stores = tenantStoresFor(controlPlane(tenant), root);
+      const attempt = await stores.tasks.get(taskId);
+      if (attempt?.cancellation !== void 0) {
+        return {
+          taskId,
+          state: "cancelled",
+          ...attempt.cancellation.reason === void 0 ? {} : { reason: attempt.cancellation.reason },
+          recordedAt: attempt.cancellation.requestedAt
+        };
+      }
+      const receipt = await stores.receipts.get(
         terminalReceiptKey(taskId)
       );
       return receipt === void 0 ? void 0 : projectTerminalResult(taskId, receipt);
@@ -2079,6 +2165,9 @@ function createByokCloud(options) {
     listPresence(tenant) {
       return tenantStoresFor(controlPlane(tenant), root).presence.list();
     },
+    readTenantReadiness(tenant) {
+      return tenantStoresFor(controlPlane(tenant), root).devices.readiness();
+    },
     readActivity(tenant, taskId) {
       return tenantStoresFor(controlPlane(tenant), root).activity.read(taskId);
     },
@@ -2307,6 +2396,52 @@ var InMemoryDeviceDirectory = class {
     const prefix = tenantKey(tenant, "");
     return [...this.#byTenant.entries()].filter(([key]) => key.startsWith(prefix)).map(([, record]) => record);
   }
+  async readiness(tenant, presence) {
+    const devices = await this.list(tenant);
+    const livePresence = await presence.list(tenant);
+    const presenceByDevice = new Map(livePresence.map((hint) => [hint.deviceId, hint]));
+    const activeDeviceIds = new Set(
+      devices.filter((device) => !device.revoked).map((device) => device.deviceId)
+    );
+    const observedPresenceByLevel = Object.fromEntries(
+      PRESENCE_LEVELS.map((level) => [level, 0])
+    );
+    for (const hint of livePresence) {
+      if (!activeDeviceIds.has(hint.deviceId)) continue;
+      observedPresenceByLevel[hint.level] += 1;
+    }
+    return {
+      tenantId: tenant,
+      activePairedDeviceCount: devices.filter((device) => !device.revoked).length,
+      revokedDeviceCount: devices.filter((device) => device.revoked).length,
+      observedPresenceCount: Object.values(observedPresenceByLevel).reduce(
+        (total, count) => total + count,
+        0
+      ),
+      observedPresenceByLevel,
+      devices: [...devices].sort((left, right) => left.deviceId.localeCompare(right.deviceId)).map((device) => {
+        const hint = device.revoked ? void 0 : presenceByDevice.get(device.deviceId);
+        return {
+          deviceId: device.deviceId,
+          productId: device.productId,
+          deviceName: device.deviceName,
+          revoked: device.revoked,
+          ...hint === void 0 ? {} : {
+            presence: {
+              level: hint.level,
+              ...hint.detail === void 0 ? {} : { detail: hint.detail },
+              ...hint.configuredToolsets === void 0 ? {} : { configuredToolsets: hint.configuredToolsets },
+              ...hint.clientVersion === void 0 ? {} : { clientVersion: hint.clientVersion },
+              ...hint.protocolVersions === void 0 ? {} : { protocolVersions: hint.protocolVersions },
+              ...hint.runtimes === void 0 ? {} : { runtimes: hint.runtimes },
+              observedAt: hint.observedAt,
+              expiresAt: hint.expiresAt
+            }
+          }
+        };
+      })
+    };
+  }
   async resolveByDeviceId(deviceId) {
     const key = this.#byDeviceId.get(deviceId);
     return key === void 0 ? void 0 : this.#byTenant.get(key);
@@ -2449,53 +2584,143 @@ var InMemoryProofRequestReceiptStore = class {
   }
 };
 var InMemoryTaskAttemptStore = class {
-  #attempts = /* @__PURE__ */ new Map();
-  #clock;
-  constructor(clock) {
-    this.#clock = clock;
+  #state;
+  constructor(clock, state = new InMemoryTaskAttemptState(clock)) {
+    this.#state = state;
   }
   async open(tenant, input) {
     const key = tenantKey(tenant, input.taskId);
-    const existing = this.#attempts.get(key);
-    if (existing !== void 0) return existing;
-    const attempt = {
-      tenantId: tenant,
-      taskId: input.taskId,
-      deviceId: input.deviceId,
-      status: "offered",
-      updatedAt: this.#now()
-    };
-    this.#attempts.set(key, attempt);
-    return attempt;
+    return this.#state.mutate(key, () => {
+      const existing = this.#state.attempts.get(key);
+      if (existing !== void 0) return existing;
+      const attempt = {
+        tenantId: tenant,
+        taskId: input.taskId,
+        deviceId: input.deviceId,
+        status: "offered",
+        updatedAt: this.#now()
+      };
+      this.#state.attempts.set(key, attempt);
+      return attempt;
+    });
   }
   async get(tenant, taskId) {
-    return this.#attempts.get(tenantKey(tenant, taskId));
+    return this.#state.attempts.get(tenantKey(tenant, taskId));
+  }
+  async getMany(tenant, taskIds) {
+    return taskIds.flatMap((taskId) => {
+      const attempt = this.#state.attempts.get(tenantKey(tenant, taskId));
+      return attempt === void 0 ? [] : [attempt];
+    });
   }
   async claim(tenant, input) {
     const key = tenantKey(tenant, input.taskId);
-    const existing = this.#attempts.get(key);
-    if (existing === void 0) return void 0;
-    if (existing.ownerDeviceId !== void 0) return existing;
-    const claimed = {
-      ...existing,
-      ownerDeviceId: input.deviceId,
-      status: "claimed",
-      updatedAt: this.#now()
-    };
-    this.#attempts.set(key, claimed);
-    return claimed;
+    return this.#state.mutate(key, () => {
+      const existing = this.#state.attempts.get(key);
+      if (existing === void 0) return void 0;
+      if (existing.ownerDeviceId !== void 0 || existing.cancellation !== void 0 || existing.status !== "offered") return existing;
+      const claimed = {
+        ...existing,
+        ownerDeviceId: input.deviceId,
+        status: "claimed",
+        updatedAt: this.#now()
+      };
+      this.#state.attempts.set(key, claimed);
+      return claimed;
+    });
   }
   async recordStatus(tenant, input) {
     const key = tenantKey(tenant, input.taskId);
-    const existing = this.#attempts.get(key);
-    if (existing === void 0) return void 0;
-    const updated = { ...existing, status: input.status, updatedAt: this.#now() };
-    this.#attempts.set(key, updated);
-    return updated;
+    return this.#state.mutate(key, () => {
+      const existing = this.#state.attempts.get(key);
+      if (existing === void 0) return void 0;
+      if (existing.cancellation !== void 0) {
+        if (input.status !== "cancelled" || existing.status === "cancelled") return existing;
+      } else if (existing.status === "complete" || existing.status === "failed" || existing.status === "cancelled") {
+        return existing;
+      }
+      const updated = { ...existing, status: input.status, updatedAt: this.#now() };
+      this.#state.attempts.set(key, updated);
+      return updated;
+    });
   }
   #now() {
+    return this.#state.now();
+  }
+};
+var InMemoryTaskAttemptState = class {
+  attempts = /* @__PURE__ */ new Map();
+  #clock;
+  #mutationTails = /* @__PURE__ */ new Map();
+  constructor(clock) {
+    this.#clock = clock;
+  }
+  now() {
     return this.#clock.now().toISOString();
   }
+  /** Serialize every state-changing operation for one tenant/task key. */
+  async mutate(key, operation) {
+    const previous = this.#mutationTails.get(key) ?? Promise.resolve();
+    const result = previous.then(operation);
+    const tail = result.then(
+      () => void 0,
+      () => void 0
+    );
+    this.#mutationTails.set(key, tail);
+    try {
+      return await result;
+    } finally {
+      if (this.#mutationTails.get(key) === tail) this.#mutationTails.delete(key);
+    }
+  }
+};
+var InMemoryTaskCancellationStore = class {
+  #state;
+  #mailbox;
+  #messageIds = /* @__PURE__ */ new Map();
+  #inFlight = /* @__PURE__ */ new Map();
+  constructor(state, mailbox) {
+    this.#state = state;
+    this.#mailbox = mailbox;
+  }
+  request(tenant, input) {
+    const key = tenantKey(tenant, input.taskId);
+    const running = this.#inFlight.get(key);
+    if (running !== void 0) return running;
+    const operation = this.#request(tenant, key, input).finally(() => {
+      this.#inFlight.delete(key);
+    });
+    this.#inFlight.set(key, operation);
+    return operation;
+  }
+  async #request(tenant, key, input) {
+    return this.#state.mutate(key, async () => {
+      const existing = this.#state.attempts.get(key);
+      if (existing === void 0) return void 0;
+      if (existing.cancellation === void 0 && (existing.status === "complete" || existing.status === "failed" || existing.status === "cancelled")) {
+        return { attempt: existing };
+      }
+      const messageId = this.#messageIds.get(key) ?? input.proposedMessageId;
+      const message = await this.#mailbox.append(tenant, {
+        deviceId: existing.deviceId,
+        messageId,
+        materialize: (seq) => input.materialize(seq, messageId)
+      });
+      const requestedAt = this.#state.now();
+      const attempt = existing.cancellation === void 0 ? {
+        ...existing,
+        status: existing.ownerDeviceId === void 0 ? "cancelled" : "cancel_requested",
+        cancellation: {
+          requestedAt,
+          ...input.reason === void 0 ? {} : { reason: input.reason }
+        },
+        updatedAt: requestedAt
+      } : existing;
+      this.#state.attempts.set(key, attempt);
+      this.#messageIds.set(key, messageId);
+      return { attempt, message };
+    });
+  }
 };
 
 // src/stores/in-memory/activity.ts
@@ -2616,8 +2841,10 @@ var InMemoryApprovalTimelineStore = class {
 };
 
 // src/stores/in-memory/index.ts
-function createInMemoryCloudStores(clock, crypto, objects) {
+function createInMemoryCloudStores(clock, crypto, objects, mailbox) {
   const blobs = createInMemoryBlobs(clock, crypto, objects);
+  const taskState = new InMemoryTaskAttemptState(clock);
+  const tasks = new InMemoryTaskAttemptStore(clock, taskState);
   return {
     stores: {
       activity: new InMemoryActivityStore(clock),
@@ -2626,7 +2853,8 @@ function createInMemoryCloudStores(clock, crypto, objects) {
       pairingCodes: new InMemoryPairingCodeStore(clock),
       nonces: new InMemoryNonceStore(clock, crypto),
       dedup: new InMemoryInboundDedupStore(),
-      tasks: new InMemoryTaskAttemptStore(clock),
+      tasks,
+      cancellations: new InMemoryTaskCancellationStore(taskState, mailbox),
       receipts: new InMemoryRequestReceiptStore(clock),
       proofReceipts: new InMemoryProofRequestReceiptStore(clock),
       blobs: blobs.blobs,
@@ -2645,7 +2873,12 @@ function createInMemoryByokCloud(options = {}) {
   const clock = options.clock ?? systemClock();
   const crypto = options.crypto ?? createWebCrypto();
   const core = createInMemoryCoreStores({ clock }).stores;
-  const { stores, blobContentProxy } = createInMemoryCloudStores(clock, crypto, core.objects);
+  const { stores, blobContentProxy } = createInMemoryCloudStores(
+    clock,
+    crypto,
+    core.objects,
+    core.mailbox
+  );
   const tokenSigner = options.tokenSigner ?? createHmacTokenSigner(globalThis.crypto.getRandomValues(new Uint8Array(TOKEN_SECRET_BYTES)), clock);
   const cloud = createByokCloud({
     core,
@@ -2847,6 +3080,7 @@ var TASK_ATTEMPT_STATUSES = [
   "offered",
   "claimed",
   "running",
+  "cancel_requested",
   "complete",
   "failed",
   "cancelled"
@@ -2859,6 +3093,7 @@ var CLOUD_STORE_NAMES = [
   "nonces",
   "dedup",
   "tasks",
+  "cancellations",
   "receipts",
   "proofReceipts",
   "blobs",
@@ -2869,11 +3104,12 @@ var CLOUD_STORE_NAMES = [
 var CLOUD_PORT_METHODS = {
   activity: ["append", "read"],
   approvals: ["append", "read"],
-  devices: ["register", "get", "revoke", "list", "resolveByDeviceId"],
+  devices: ["register", "get", "revoke", "list", "readiness", "resolveByDeviceId"],
   pairingCodes: ["issue", "redeem"],
   nonces: ["issue", "validate", "markUsed"],
   dedup: ["checkAndRecord"],
-  tasks: ["open", "get", "claim", "recordStatus"],
+  tasks: ["open", "get", "getMany", "claim", "recordStatus"],
+  cancellations: ["request"],
   receipts: ["record", "get"],
   proofReceipts: ["record", "get"],
   // Three methods, not six: the byte-proxy trio moved to `BlobContentProxy`,
@@ -2890,12 +3126,13 @@ var CLOUD_PORT_INTERFACES = {
   nonces: "NonceStore",
   dedup: "InboundDedupStore",
   tasks: "TaskAttemptStore",
+  cancellations: "TaskCancellationStore",
   receipts: "RequestReceiptStore",
   proofReceipts: "ProofRequestReceiptStore",
   blobs: "CloudBlobStore",
   rateLimiter: "InboundRateLimiter"
 };
 
-export { ACCESS_TOKEN_TTL_SECONDS, APPROVAL_SUMMARY_MAX_BYTES, ActivityAppendRequestSchema, AllowAllRateLimiter, ApprovalObservationSchema, ApprovalTimelineEventSchema, BLOB_URL_TTL_MS, BoardFeedClient, BoardFeedRetryableError, BoardFeedStoppedError, ByokCloudError, CLOUD_CAPABILITIES, CLOUD_ERROR_CODES, CLOUD_PORT_INTERFACES, CLOUD_PORT_METHODS, CLOUD_STORE_NAMES, CapabilitiesResponseSchema, CloudRouteRegistry, DEDUP_RING_CAPACITY, DEFAULT_ACTIVITY_BOUNDS, DEFAULT_ACTIVITY_CAPACITY, DEFAULT_ACTIVITY_MAX_BYTES, DEFAULT_ACTIVITY_MAX_EVENTS, DEFAULT_ACTIVITY_TTL_MS, DEFAULT_APPROVAL_TIMELINE_CAPACITY, DEFAULT_APPROVAL_TIMELINE_TTL_MS, DEFAULT_BOARD_CHANNEL_MAX_BYTES, DEFAULT_BOARD_PAGE_LIMIT, DEFAULT_BOARD_STREAM_HEARTBEAT_INTERVAL_MS, DEFAULT_BOARD_STREAM_QUERY_INTERVAL_MS, DEFAULT_BOARD_STREAM_RECONCILIATION_INTERVAL_MS, DEFAULT_BOARD_TITLE_MAX_BYTES, DEFAULT_DEVICE_PROOF_CLOCK_SKEW_MS, DEFAULT_DEVICE_PROOF_MAX_LIFETIME_MS, DEFAULT_EVENTS_PAGE_LIMIT, DEFAULT_LONG_POLL_HOLD_MS, DEFAULT_LONG_POLL_INTERVAL_MS, DEFAULT_MAX_BLOB_SIZE_BYTES, DEFAULT_MAX_TRUTH_REQUEST_BYTES, DEFAULT_PRESENCE_DETAIL_MAX_BYTES, DEFAULT_PRESENCE_MINIMUM_INTERVAL_MS, DEFAULT_PRESENCE_TTL_MS, DEFAULT_SKILL_PACK_PAGE_LIMIT, DEVICE_IDENTITY_PROOF_KEY_EPOCH, DEVICE_IDENTITY_PROOF_KEY_ID, InMemoryActivityStore, InMemoryBlobContentProxy, InMemoryCloudBlobStore, InMemoryDeviceDirectory, InMemoryInboundDedupStore, InMemoryNonceStore, InMemoryPairingCodeStore, InMemoryProofRequestReceiptStore, InMemoryRequestReceiptStore, InMemoryTaskAttemptStore, MAX_DEVICE_PROOF_CLOCK_SKEW_MS, MAX_DEVICE_PROOF_HEADER_BYTES, MAX_DEVICE_PROOF_MAX_LIFETIME_MS, NONCE_TTL_MS, PAIRING_CODE_TTL_MS, ROUTE_CLASSES, ROUTE_METHODS, TASK_ATTEMPT_STATUSES, TRUTH_BATCH_MAX_RECORDS, TRUTH_INLINE_CONTENT_TYPE, TRUTH_LABEL_MAX_LENGTH, TRUTH_MANIFEST_MAX_LIMIT, TRUTH_RECORD_CAPABILITY, TRUTH_RECORD_KEY_MAX_LENGTH, TRUTH_REQUEST_ID_MAX_LENGTH, TimelineEventSchema, TruthBodyInputSchema, TruthCommitError, TruthCommitResponseSchema, TruthRecordKeySchema, TruthRecordMetadataSchema, TruthWriteRequestSchema, activityCursor, approvalTimelineCursor, authenticateBearer, authenticateDeviceProof, authenticateHostedDeviceAssertion, createAuthPlane, createByokCloud, createHmacTokenSigner, createInMemoryBlobs, createInMemoryByokCloud, createInMemoryCloudStores, createWebCrypto, declares, extractBearerToken, fullCapabilityDeclaration, handleInboundEnvelope, isCloudError, isTruthCommitError, parseApprovalObservations, parseTimelineEvents, projectTerminalResult, projectTimelineEvents, routeKey, tenantStoresFor, terminalReceiptKey, truthManifestMetadata, truthRecordMetadata, validateActivityAppend, validateApprovalTimelineAppend, verifyNonceSignature };
+export { ACCESS_TOKEN_TTL_SECONDS, APPROVAL_SUMMARY_MAX_BYTES, ActivityAppendRequestSchema, AllowAllRateLimiter, ApprovalObservationSchema, ApprovalTimelineEventSchema, BLOB_URL_TTL_MS, BoardFeedClient, BoardFeedRetryableError, BoardFeedStoppedError, ByokCloudError, CLOUD_CAPABILITIES, CLOUD_ERROR_CODES, CLOUD_PORT_INTERFACES, CLOUD_PORT_METHODS, CLOUD_STORE_NAMES, CapabilitiesResponseSchema, CloudRouteRegistry, DEDUP_RING_CAPACITY, DEFAULT_ACTIVITY_BOUNDS, DEFAULT_ACTIVITY_CAPACITY, DEFAULT_ACTIVITY_MAX_BYTES, DEFAULT_ACTIVITY_MAX_EVENTS, DEFAULT_ACTIVITY_TTL_MS, DEFAULT_APPROVAL_TIMELINE_CAPACITY, DEFAULT_APPROVAL_TIMELINE_TTL_MS, DEFAULT_BOARD_CHANNEL_MAX_BYTES, DEFAULT_BOARD_PAGE_LIMIT, DEFAULT_BOARD_STREAM_HEARTBEAT_INTERVAL_MS, DEFAULT_BOARD_STREAM_QUERY_INTERVAL_MS, DEFAULT_BOARD_STREAM_RECONCILIATION_INTERVAL_MS, DEFAULT_BOARD_TITLE_MAX_BYTES, DEFAULT_DEVICE_PROOF_CLOCK_SKEW_MS, DEFAULT_DEVICE_PROOF_MAX_LIFETIME_MS, DEFAULT_EVENTS_PAGE_LIMIT, DEFAULT_LONG_POLL_HOLD_MS, DEFAULT_LONG_POLL_INTERVAL_MS, DEFAULT_MAX_BLOB_SIZE_BYTES, DEFAULT_MAX_TRUTH_REQUEST_BYTES, DEFAULT_PRESENCE_DETAIL_MAX_BYTES, DEFAULT_PRESENCE_MINIMUM_INTERVAL_MS, DEFAULT_PRESENCE_TTL_MS, DEFAULT_SKILL_PACK_PAGE_LIMIT, DEVICE_IDENTITY_PROOF_KEY_EPOCH, DEVICE_IDENTITY_PROOF_KEY_ID, InMemoryActivityStore, InMemoryBlobContentProxy, InMemoryCloudBlobStore, InMemoryDeviceDirectory, InMemoryInboundDedupStore, InMemoryNonceStore, InMemoryPairingCodeStore, InMemoryProofRequestReceiptStore, InMemoryRequestReceiptStore, InMemoryTaskAttemptStore, InMemoryTaskCancellationStore, MAX_DEVICE_PROOF_CLOCK_SKEW_MS, MAX_DEVICE_PROOF_HEADER_BYTES, MAX_DEVICE_PROOF_MAX_LIFETIME_MS, NONCE_TTL_MS, PAIRING_CODE_TTL_MS, ROUTE_CLASSES, ROUTE_METHODS, TASK_ATTEMPT_STATUSES, TRUTH_BATCH_MAX_RECORDS, TRUTH_INLINE_CONTENT_TYPE, TRUTH_LABEL_MAX_LENGTH, TRUTH_MANIFEST_MAX_LIMIT, TRUTH_RECORD_CAPABILITY, TRUTH_RECORD_KEY_MAX_LENGTH, TRUTH_REQUEST_ID_MAX_LENGTH, TimelineEventSchema, TruthBodyInputSchema, TruthCommitError, TruthCommitResponseSchema, TruthRecordKeySchema, TruthRecordMetadataSchema, TruthWriteRequestSchema, activityCursor, approvalTimelineCursor, authenticateBearer, authenticateDeviceProof, authenticateHostedDeviceAssertion, createAuthPlane, createByokCloud, createHmacTokenSigner, createInMemoryBlobs, createInMemoryByokCloud, createInMemoryCloudStores, createWebCrypto, declares, extractBearerToken, fullCapabilityDeclaration, handleInboundEnvelope, isCloudError, isTruthCommitError, parseApprovalObservations, parseTimelineEvents, projectTerminalResult, projectTimelineEvents, routeKey, tenantStoresFor, terminalReceiptKey, truthManifestMetadata, truthRecordMetadata, validateActivityAppend, validateApprovalTimelineAppend, verifyNonceSignature };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map