@byok-sdk/server 0.11.0 → 0.12.0

package/dist/pairing.d.ts

@@ -20,10 +20,27 @@ export interface PairingCodeInfo {
     code: string;
     expiresAt: string;
 }
+/** Immutable facts supplied by one first-pair HTTP request. */
+export interface PairingAttemptBinding {
+    deviceName: string;
+    devicePublicKey: string;
+}
+/** The recoverable enrollment fact created exactly once for one pairing code. */
+export interface PairingCompletion {
+    deviceId: string;
+    tenantId: TenantId;
+    productId: string;
+    deviceName: string;
+    devicePublicKey: string;
+}
 /** Thrown when a pairing code is missing, expired, or already used. */
 export declare class PairingCodeInvalidError extends Error {
     constructor(reason: string);
 }
+/** A spent code may be replayed only with the immutable request that spent it. */
+export declare class PairingAttemptConflictError extends Error {
+    constructor();
+}
 /**
  * In-memory pairing-code lifecycle: single-use, ~10min TTL codes minted
  * out-of-band (by the SaaS's own auth/device-flow UI) and redeemed exactly
@@ -55,4 +72,16 @@ export declare class PairingManager {
      * code can never reach the registration step at all.
      */
     redeemPairingCode(code: string): PairingCodeClaims;
+    /**
+     * Bind a code to one exact pairing request, returning any completion that a
+     * prior response/token failure left recoverable. This mutation is entirely
+     * synchronous: the HTTP route cannot yield between binding, registration,
+     * and completion recording, so concurrent requests have one winner.
+     */
+    beginPairingAttempt(code: string, binding: PairingAttemptBinding): {
+        claims: PairingCodeClaims;
+        completion?: PairingCompletion;
+    };
+    /** Record the one device identity a bound pairing attempt completed as. */
+    completePairingAttempt(code: string, binding: PairingAttemptBinding, completion: PairingCompletion): PairingCompletion;
 }

package/dist/sqlite-blob-store.d.ts

@@ -1,5 +1,6 @@
 import type { DatabaseSync } from 'node:sqlite';
 import { type BlobStore, type CreateUploadInput, type ReadContentResult, type WriteContentResult } from './blob-store';
+import type { TenantId } from './auth';
 export interface SqliteBlobStoreOptions {
     /**
      * Database file path. Use `:memory:` to exercise the SQLite code path
@@ -24,7 +25,7 @@ export interface SqliteBlobStoreOptions {
     signingKey?: Buffer;
 }
 /** Exported (only) so `sqlite-blob-store.test.ts` can apply the same schema to a raw `DatabaseSync` connection when testing {@link loadOrCreateSigningSecret}'s concurrency behavior directly. */
-export declare const SCHEMA = "\nCREATE TABLE IF NOT EXISTS meta (\n  key   TEXT PRIMARY KEY,\n  value TEXT NOT NULL\n);\nCREATE TABLE IF NOT EXISTS blobs (\n  blob_id      TEXT PRIMARY KEY,\n  size         INTEGER NOT NULL,\n  content_type TEXT NOT NULL,\n  content_hash TEXT NOT NULL,\n  uploaded     INTEGER NOT NULL DEFAULT 0,\n  data         BLOB\n);\n";
+export declare const SCHEMA = "\nCREATE TABLE IF NOT EXISTS meta (\n  key   TEXT PRIMARY KEY,\n  value TEXT NOT NULL\n);\nCREATE TABLE IF NOT EXISTS blobs (\n  blob_id      TEXT PRIMARY KEY,\n  tenant_id    TEXT NOT NULL,\n  size         INTEGER NOT NULL,\n  content_type TEXT NOT NULL,\n  content_hash TEXT NOT NULL,\n  uploaded     INTEGER NOT NULL DEFAULT 0,\n  data         BLOB\n);\n";
 /**
  * Atomically load the persisted HMAC signing secret from `db`'s `meta`
  * table, generating and persisting one if none exists yet.
@@ -74,12 +75,15 @@ export declare class SqliteBlobStore implements BlobStore {
     private readonly writeContentStmt;
     private closed;
     constructor(opts: SqliteBlobStoreOptions);
-    createUpload(input: CreateUploadInput, requestedBlobId?: string): Promise<{
+    createUpload(tenantId: TenantId, input: CreateUploadInput, requestedBlobId?: string): Promise<{
         blobId: string;
         uploadUrl: string;
     }>;
-    getDownloadUrl(blobId: string): Promise<string | undefined>;
-    exists(blobId: string): Promise<boolean>;
+    getDownloadUrl(tenantId: TenantId, blobId: string): Promise<string | undefined>;
+    exists(tenantId: TenantId, blobId: string): Promise<boolean>;
+    getUploadReservation(blobId: string): Promise<{
+        size: number;
+    } | undefined>;
     verifySignedUrl(blobId: string, action: 'put' | 'get', sig: string, exp: number): boolean;
     writeContent(blobId: string, data: Buffer): Promise<WriteContentResult>;
     readContent(blobId: string): Promise<ReadContentResult | undefined>;

package/dist/types.d.ts

@@ -14,6 +14,12 @@ export interface CreateByokServerOptions {
     productId: string;
     /** WS-native ping interval, ms (§ heartbeat). Default 30s. */
     heartbeatIntervalMs?: number;
+    /** Deadline for one authenticated socket to present a valid `conn.hello`. Default 5s. */
+    webSocketHelloTimeoutMs?: number;
+    /** Global cap for authenticated sockets that have not completed `conn.hello`. Default 32. */
+    maxPendingWebSockets?: number;
+    /** Maximum inbound WS message bytes before envelope decoding. Default accommodates the largest protocol document envelope. */
+    maxWebSocketPayloadBytes?: number;
     /** How long `GET /byok/events` holds an empty poll open before returning, ms (§8). Default ~50s; override for tests. */
     longPollHoldMs?: number;
     /** Per-product blob size ceiling in bytes (§7). Default 100MB. */

package/dist/ws-server.d.ts

@@ -6,6 +6,9 @@ interface AttachDeps extends AuthDeps {
     productId: string;
     /** WS-native ping interval, ms. Defaults inside `heartbeat.ts` (30s) if omitted. */
     heartbeatIntervalMs?: number;
+    helloTimeoutMs: number;
+    maxPendingWebSockets: number;
+    maxPayloadBytes: number;
 }
 /**
  * Wire up the `GET /byok/ws` upgrade on a raw Node HTTP server (the one

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@byok-sdk/server",
-  "version": "0.11.0",
+  "version": "0.12.0",
   "description": "BYOK SDK server: in-memory M0 reference implementation of the SaaS-side coordinator",
   "type": "module",
   "license": "MIT",
@@ -44,8 +44,8 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@byok-sdk/core": "0.11.0",
-    "@byok-sdk/protocol": "0.11.0",
+    "@byok-sdk/core": "0.12.0",
+    "@byok-sdk/protocol": "0.12.0",
     "@hono/node-server": "^2.0.10",
     "hono": "^4.12.30",
     "jose": "^6.2.3",