@byok-sdk/server 0.16.0 → 0.18.0

package/dist/stores/sqlite/device-directory.d.ts

@@ -0,0 +1,26 @@
+import { type PresenceStore, type TenantId, type TenantReadiness } from '@byok-sdk/core';
+import type { DeviceDirectory, DeviceRecord, DeviceRegistration } from '@byok-sdk/cloud';
+import { type HarnessInfo } from '@byok-sdk/protocol';
+import type { DatabaseSync } from 'node:sqlite';
+export declare const DEVICE_SCHEMA = "\nCREATE TABLE device_directory (\n  tenant_id TEXT NOT NULL,\n  device_id TEXT NOT NULL UNIQUE,\n  product_id TEXT NOT NULL,\n  machine_id TEXT,\n  device_name TEXT NOT NULL,\n  device_public_key TEXT NOT NULL,\n  proof_key_id TEXT NOT NULL,\n  proof_key_epoch INTEGER NOT NULL CHECK (proof_key_epoch >= 0),\n  capabilities_json TEXT,\n  harnesses_json TEXT,\n  PRIMARY KEY (tenant_id, device_id)\n);\nCREATE UNIQUE INDEX device_directory_machine\n  ON device_directory (tenant_id, product_id, machine_id) WHERE machine_id IS NOT NULL;\n";
+interface Coordinator {
+    run<T>(operation: (db: DatabaseSync) => T | Promise<T>): Promise<T>;
+    transaction<T>(operation: (db: DatabaseSync) => T | Promise<T>): Promise<T>;
+}
+/** Enrollment, capability admission and pre-tenant auth read the same durable row. */
+export declare class SqliteDeviceDirectory implements DeviceDirectory {
+    private readonly coordinator;
+    constructor(coordinator: Coordinator);
+    register(tenant: TenantId, input: DeviceRegistration): Promise<DeviceRecord>;
+    get(tenant: TenantId, deviceId: string): Promise<DeviceRecord | undefined>;
+    revoke(tenant: TenantId, deviceId: string): Promise<void>;
+    list(tenant: TenantId): Promise<readonly DeviceRecord[]>;
+    resolveByDeviceId(deviceId: string): Promise<DeviceRecord | undefined>;
+    recordCapabilities(tenant: TenantId, input: {
+        readonly deviceId: string;
+        readonly capabilities: readonly string[];
+        readonly harnesses?: readonly HarnessInfo[];
+    }): Promise<DeviceRecord | undefined>;
+    readiness(tenant: TenantId, presence: PresenceStore): Promise<TenantReadiness>;
+}
+export {};

package/dist/stores/sqlite/index.d.ts

@@ -5,6 +5,7 @@ import type { DatabaseSync } from 'node:sqlite';
 export interface SqliteEmbeddedStoreOptions {
     readonly path: string;
     readonly urlTtlMs?: number;
+    readonly migration?: 'v1-to-v3' | 'v2-to-v3';
 }
 export interface SqliteEmbeddedStores {
     readonly core: CoreStores;
@@ -16,7 +17,7 @@ export interface SqliteEmbeddedStores {
 declare class SqliteCoordinator {
     #private;
     readonly db: DatabaseSync;
-    constructor(path: string);
+    constructor(path: string, migration?: 'v1-to-v3' | 'v2-to-v3');
     run<T>(operation: (db: DatabaseSync) => T | Promise<T>): Promise<T>;
     transaction<T>(operation: (db: DatabaseSync) => T | Promise<T>): Promise<T>;
     close(): Promise<void>;
@@ -45,6 +46,10 @@ export declare class SqliteTaskAttemptStore implements TaskAttemptStore {
         messageId: string;
         payloadBody: string;
     }): Promise<'reserved' | 'pending' | 'rejected'>;
+    readTaskAgentMessage(tenant: TenantId, input: {
+        taskId: string;
+        deviceId: string;
+    }): Promise<AgentMessageAdmission | undefined>;
     readAgentMessage(tenant: TenantId, input: {
         taskId: string;
         deviceId: string;
@@ -132,7 +137,7 @@ export declare class SqliteBlobContentProxy implements BlobContentProxy {
     writeContent(blobId: string, data: Uint8Array): Promise<BlobWriteResult>;
     readContent(blobId: string): Promise<BlobReadResult | undefined>;
 }
-/** Mixed embedded composition: exactly six durable interfaces, every other port unchanged in-memory. */
+/** Mixed embedded composition: eight durable interfaces, every other port unchanged in-memory. */
 export declare function createSqliteEmbeddedStores(options: SqliteEmbeddedStoreOptions, dependencies: {
     readonly clock: Clock;
     readonly crypto: CloudCrypto;

package/dist/types.d.ts

@@ -11,6 +11,8 @@ export type ByokServerStorage = {
     readonly path: string;
     /** Lifetime of signed blob upload/download URLs. Default 15 minutes. */
     readonly urlTtlMs?: number;
+    /** One-shot adoption of a legacy database without task history. Stop all writers and back up first; old builds cannot reopen v3. */
+    readonly migration?: 'v1-to-v3' | 'v2-to-v3';
 };
 /** Options for {@link createByokServer}. */
 export interface CreateByokServerOptions {
@@ -111,6 +113,8 @@ export interface CreateByokServerOptions {
 }
 /** Input to {@link ByokServer.dispatch}. */
 export interface DispatchInput {
+    /** Pre-persisted execution identity. Requires explicit deviceId; retries may report a kernel conflict. */
+    taskId?: string;
     instruction: string;
     /**
      * Authoritative web-selected target. When present, `runtime` is derived

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@byok-sdk/server",
-  "version": "0.16.0",
+  "version": "0.18.0",
   "description": "BYOK SDK server: in-memory M0 reference implementation of the SaaS-side coordinator",
   "type": "module",
   "license": "MIT",
@@ -44,9 +44,9 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@byok-sdk/cloud": "0.16.0",
-    "@byok-sdk/core": "0.16.0",
-    "@byok-sdk/protocol": "0.16.0",
+    "@byok-sdk/cloud": "0.18.0",
+    "@byok-sdk/core": "0.18.0",
+    "@byok-sdk/protocol": "0.18.0",
     "@hono/node-server": "^2.0.10",
     "hono": "^4.12.30"
   },