@byok-sdk/server 0.23.0 → 0.25.0-rc.1

package/dist/sqlite-support.d.ts

@@ -28,6 +28,26 @@ export declare function closeSqliteDatabaseAfterInitializationFailure(db: Databa
 export declare class SqliteUnavailableError extends Error {
     constructor(cause: unknown);
 }
+/**
+ * Why a SQLite file was refused at open, so a host can tell the user what to do
+ * without parsing the message:
+ * - `SQLITE_SCHEMA_UNSUPPORTED`: the stored version is not this build's and no
+ *   matching `migration` selector was given (an older file needs one; a newer
+ *   file needs a newer build).
+ * - `SQLITE_MIGRATION_REFUSED`: the selected migration would lose durable
+ *   authority; preserve the file for reconciliation.
+ * - `SQLITE_SCHEMA_INVALID`: the file contradicts its declared BYOK schema or
+ *   is not a BYOK database.
+ */
+export type SqliteSchemaErrorCode = 'SQLITE_SCHEMA_UNSUPPORTED' | 'SQLITE_MIGRATION_REFUSED' | 'SQLITE_SCHEMA_INVALID';
+export declare class SqliteSchemaError extends Error {
+    readonly code: SqliteSchemaErrorCode;
+    /** The stored `schema_version`; `undefined` when the file has none. */
+    readonly foundVersion: string | undefined;
+    /** The schema version this build writes. */
+    readonly requiredVersion: string;
+    constructor(code: SqliteSchemaErrorCode, message: string, foundVersion: string | undefined, requiredVersion: string, options?: ErrorOptions);
+}
 /**
  * Whether `nodeVersion` (a `major.minor.patch` string shaped like
  * `process.versions.node`) is new enough to have `node:sqlite` at all.

package/dist/stores/sqlite/index.d.ts

@@ -5,7 +5,7 @@ import type { DatabaseSync } from 'node:sqlite';
 export interface SqliteEmbeddedStoreOptions {
     readonly path: string;
     readonly urlTtlMs?: number;
-    readonly migration?: 'v1-to-v3' | 'v2-to-v3';
+    readonly migration?: 'v1-to-v4' | 'v2-to-v4' | 'v3-to-v4';
 }
 export interface SqliteEmbeddedStores {
     readonly core: CoreStores;
@@ -17,7 +17,7 @@ export interface SqliteEmbeddedStores {
 declare class SqliteCoordinator {
     #private;
     readonly db: DatabaseSync;
-    constructor(path: string, migration?: 'v1-to-v3' | 'v2-to-v3');
+    constructor(path: string, migration?: 'v1-to-v4' | 'v2-to-v4' | 'v3-to-v4');
     run<T>(operation: (db: DatabaseSync) => T | Promise<T>): Promise<T>;
     transaction<T>(operation: (db: DatabaseSync) => T | Promise<T>): Promise<T>;
     close(): Promise<void>;
@@ -70,6 +70,7 @@ export declare class SqliteTaskAttemptStore implements TaskAttemptStore {
         taskId: string;
         deviceId: string;
         runtime?: RuntimeId;
+        harnessId?: string;
         capabilities?: RuntimeCapabilities;
     }): Promise<TaskAttempt | undefined>;
     recordStatus(tenant: TenantId, input: {

package/dist/types.d.ts

@@ -1,5 +1,5 @@
 import type { HarnessInfo } from '@byok-sdk/protocol';
-import type { AgentContentReadPayload, AgentHomeProjectionPayload, AgentHomeProjectionReadback, AgentEventOrUnknown, AgentEgressPolicy, AgentEgressReliablePayload, AgentMessageEgressRequirement, AgentMessageServerContext, AgentMessagePublishPayload, AgentRef, BlobRef, DispatchSelection, PermissionPolicy, RuntimeCapabilities, RuntimeId, RuntimeInfo, TaskApprovalResolvedPayload, TaskArtifactPayload, TaskState, ToolsetId, TerminalProjectionSelection } from '@byok-sdk/protocol';
+import type { AgentContentReadPayload, AgentHomeProjectionPayload, AgentHomeProjectionReadback, AgentEventOrUnknown, AgentEgressPolicy, AgentEgressReliablePayload, AgentMessageEgressRequirement, AgentMessageServerContext, AgentMessagePublishPayload, AgentRef, BlobRef, DispatchSelection, RuntimeCapabilities, RuntimeId, RuntimeInfo, TaskApprovalResolvedPayload, TaskArtifactPayload, TaskState, ToolsetId, TerminalProjectionSelection } from '@byok-sdk/protocol';
 import type { TenantId, TokenSigner } from '@byok-sdk/cloud';
 import type { RateLimiterOptions } from './rate-limiter';
 /** Mutually-exclusive storage authority for the embedded reference server. */
@@ -11,8 +11,8 @@ export type ByokServerStorage = {
     readonly path: string;
     /** Lifetime of signed blob upload/download URLs. Default 15 minutes. */
     readonly urlTtlMs?: number;
-    /** One-shot adoption of a legacy database without task history. Stop all writers and back up first; old builds cannot reopen v3. */
-    readonly migration?: 'v1-to-v3' | 'v2-to-v3';
+    /** One-shot schema adoption: v1/v2 require no task history; v3 requires no ambiguous claimed identity. Stop all writers and back up first; old builds cannot reopen v4. */
+    readonly migration?: 'v1-to-v4' | 'v2-to-v4' | 'v3-to-v4';
 };
 /** Options for {@link createByokServer}. */
 export interface CreateByokServerOptions {
@@ -48,8 +48,9 @@ export interface CreateByokServerOptions {
     /**
      * How long after a task reaches a terminal its relay buffer and terminal
      * promise are RETAINED before being reclaimed, ms. A late `events()` reader
-     * within this window still replays the whole feed; past it, the durable read
-     * model (`tasks.get`) is the only answer. Default 5 minutes.
+     * within this window still replays the retained feed; past it, new event
+     * reads complete empty. Use the durable read model (`tasks.get`, `result()`)
+     * for terminal facts after expiry. Default 5 minutes.
      *
      * Retention never decides when a feed ENDS: {@link TaskHandle.events}
      * completes at the terminal event itself, whenever that happens, so a
@@ -123,7 +124,6 @@ export interface DispatchInput {
     dispatchSelection?: DispatchSelection;
     runtime?: RuntimeId;
     harnessId?: string;
-    policy?: PermissionPolicy;
     deviceId?: string;
     sessionRef?: string;
     /** Logical device-local MCP toolsets required for this task; never executable definitions. */
@@ -238,6 +238,12 @@ export type ServerTaskEvent = {
 /** Handle returned by {@link ByokServer.dispatch} for one in-flight task. */
 export interface TaskHandle {
     readonly taskId: string;
+    /**
+     * Replay retained notifications and follow live updates until terminal.
+     * New reads after terminal retention expires or the server stops complete
+     * empty; they never reopen a feed. Durable terminal facts remain available
+     * through `result()` and `ByokServer.tasks.get`.
+     */
     events(): AsyncIterable<ServerTaskEvent>;
     cancel(reason?: string): Promise<void>;
     /**
@@ -282,8 +288,8 @@ export interface MachineInfo {
  * `@byok-sdk/cloud`) on every call — never a mirrored record this package
  * maintains alongside it.
  *
- * Deliberately smaller than it used to be: `instruction`, `runtime`, `policy`
- * and `requiredToolsets` were DISPATCH INPUT the host already holds and the
+ * Deliberately smaller than it used to be: `instruction`, `runtime` and
+ * `requiredToolsets` were DISPATCH INPUT the host already holds and the
  * kernel does not persist (ADR-028 — an attempt records ownership and
  * disposition, not the request that produced it). A host that wants them back
  * keeps its own map keyed by `taskId`; this snapshot never re-derives them.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@byok-sdk/server",
-  "version": "0.23.0",
+  "version": "0.25.0-rc.1",
   "description": "BYOK SDK server: in-memory M0 reference implementation of the SaaS-side coordinator",
   "type": "module",
   "license": "MIT",
@@ -14,7 +14,7 @@
   },
   "homepage": "https://github.com/Ancienttwo/byok-sdk#readme",
   "engines": {
-    "node": ">=22.22.0"
+    "node": ">=24.15.0"
   },
   "sideEffects": false,
   "main": "./dist/index.js",
@@ -44,9 +44,9 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@byok-sdk/cloud": "0.23.0",
-    "@byok-sdk/core": "0.23.0",
-    "@byok-sdk/protocol": "0.23.0",
+    "@byok-sdk/cloud": "0.25.0-rc.1",
+    "@byok-sdk/core": "0.25.0-rc.1",
+    "@byok-sdk/protocol": "0.25.0-rc.1",
     "@hono/node-server": "^2.0.10",
     "hono": "^4.12.30"
   },