@plumbus/core 0.7.1 → 0.8.0-beta.1

package/instructions/deployment.md

@@ -8,15 +8,15 @@ Plumbus applications deploy as up to four services — a **backend** (Fastify AP
 +-----------+     +-----------+     +-----------+
 | frontend  |     |   admin   |     |  backend  |
 | Next.js   |     | Next.js   |     | Fastify   |
-| :3001     |---->| :3002     |---->| :3000     |
+| $FRONTEND |---->| $ADMIN    |---->| $API_PORT |
 +-----------+     +-----------+     +-----+-----+
                                           |
               +---------------------------+---------------------------+
               |                           |                           |
         +-----v-----+               +-----v-----+               +-----v-----+
         |  worker   |               |    PG     |               |   Redis   |
-        | (optional)|               |  :5432    |               |  :6379    |
-        |  :3001    |               +-----------+               +-----------+
+        | (optional)|               |           |               |           |
+        | $HEALTH   |               +-----------+               +-----------+
         +-----------+
 ```
 
@@ -70,7 +70,7 @@ These rules are critical. Violating any one causes build failures or bloated ima
 - **DO**: Create a separate `proddeps` stage that removes `@plumbus/ui` from `package.json` before `npm install --omit=dev`.
 - **DO NOT**: Copy the full `node_modules` (including `@plumbus/ui`) into the backend runner.
 - **Why**: `@plumbus/ui` pulls in `next`, `react`, `react-dom`, `tailwindcss`, `lucide-react` (~300 MB). The backend only needs `@plumbus/core` at runtime.
-- **Peer deps**: npm enforces `peerDependencies` strictly in this stage. Add-on packages must declare npm-safe `@plumbus/core` peers (`0.7.x` for the new release family). See `peer-dependencies.md` in this folder — `pnpm install` passing locally does not prove Docker will build.
+- **Peer deps**: npm enforces `peerDependencies` strictly in this stage. Add-on packages must declare npm-safe `@plumbus/core` peers (`0.8.x` for the new release family). See `peer-dependencies.md` in this folder — `pnpm install` passing locally does not prove Docker will build.
 - **Target image size**: Backend should be ~500-700 MB, not 1.5 GB+.
 
 ### Rule 8: Use `ENV PATH` instead of `npx` for frontend builds
@@ -81,7 +81,7 @@ These rules are critical. Violating any one causes build failures or bloated ima
 
 ### Rule 9: Never run migrations in the entrypoint
 
-- **DO**: Run `npx plumbus migrate apply` as a separate CI/CD step or one-off job.
+- **DO**: Run `npx plumbus migrate apply` as a separate CI/CD step or one-off job. Database-per-tenant hosts apply once per named database (`--database` or `applyDataPlaneMigrations`) as the owner role.
 - **DO NOT**: Put migration commands in `entrypoint.sh` or Docker init containers.
 - **Why**: In multi-replica deployments, concurrent migrations corrupt data.
 
@@ -143,7 +143,7 @@ Use `plumbus start` for production:
 | Cookies | `secure: false` | `secure: true` |
 
 ```bash
-npx plumbus start --port 3000
+npx plumbus start --port $PLUMBUS_START_PORT
 ```
 
 ### Runtime File Requirements
@@ -165,7 +165,7 @@ These directories **must be present** in the production image:
 # entrypoint.sh — only starts the server. No migrations here.
 #!/bin/sh
 set -e
-exec npx plumbus start --port 3000
+exec npx plumbus start --port $PLUMBUS_START_PORT
 ```
 
 Migrations run separately:
@@ -173,6 +173,8 @@ Migrations run separately:
 ```sh
 # Run BEFORE deploying new containers (CI/CD step or one-off job):
 npx plumbus migrate apply
+# Per tenant data plane (owner credentials in env):
+# npx plumbus migrate apply --database tenant_alpha
 ```
 
 ### Health Endpoints
@@ -190,10 +192,10 @@ For production deployments that scale API and background work independently:
 
 ```bash
 # API container — no worker pool
-PLUMBUS_RUNTIME_ROLE=api npx plumbus start --port 3000
+PLUMBUS_RUNTIME_ROLE=api npx plumbus start --port $PLUMBUS_START_PORT
 
 # Worker container — no public API routes
-npx plumbus worker start --health-port 3001
+npx plumbus worker start --health-port $PLUMBUS_WORKER_HEALTH_PORT
 ```
 
 **Redis is required** when API and worker run as separate replicas. Set `QUEUE_URL` or `REDIS_URL` on both containers.
@@ -221,8 +223,8 @@ Full monorepo checklists: `docs/upgrading-workers.md` and `docs/upgrading-capabi
 
 | Container | Command | Probes | Notes |
 |-----------|---------|--------|-------|
-| API | `plumbus start` | `GET /health`, `GET /ready` on port 3000 | Set `PLUMBUS_RUNTIME_ROLE=api` |
-| Worker | `plumbus worker start` | `GET /health`, `GET /ready` on `--health-port` (default 3001) | Exposes `/metrics` for Prometheus |
+| API | `plumbus start --port $PLUMBUS_START_PORT` | `GET /health`, `GET /ready` on that port | Set `PLUMBUS_RUNTIME_ROLE=api` |
+| Worker | `plumbus worker start --health-port $PLUMBUS_WORKER_HEALTH_PORT` | `GET /health`, `GET /ready` on `--health-port` | Exposes `/metrics` for Prometheus |
 
 Install optional peers in both images when needed:
 
@@ -238,16 +240,16 @@ Worker entrypoint example:
 ```sh
 #!/bin/sh
 set -e
-exec npx plumbus worker start --health-port 3001
+exec npx plumbus worker start --health-port $PLUMBUS_WORKER_HEALTH_PORT
 ```
 
 Worker health probes (Kubernetes):
 
 ```yaml
 livenessProbe:
-  httpGet: { path: /health, port: 3001 }
+  httpGet: { path: /health, port: health }
 readinessProbe:
-  httpGet: { path: /ready, port: 3001 }
+  httpGet: { path: /ready, port: health }
 ```
 
 Colocated mode (single `plumbus start` process, no separate worker container) remains the default and requires no `PLUMBUS_RUNTIME_ROLE` override. See `docs/architecture/workers-and-queues.md` for runtime mode details.
@@ -274,7 +276,7 @@ const nextConfig = {
 npx next build
 
 # Run standalone server
-PORT=3001 HOSTNAME=0.0.0.0 node .next/standalone/frontend/server.js
+PORT=$FRONTEND_PORT HOSTNAME=0.0.0.0 node .next/standalone/frontend/server.js
 ```
 
 ### Static Assets
@@ -289,7 +291,7 @@ After a standalone build, copy static files alongside the server:
 ### Environment Variables
 
 - `NEXT_PUBLIC_*` — inlined at **build time**. Set before `next build`, not at runtime.
-- `API_BASE_URL` — set at **runtime**. Internal Docker network address (e.g., `http://backend:3000`).
+- **`API_BASE_URL`** — set at **runtime**. Internal Docker network address (the backend service name plus `PLUMBUS_START_PORT`).
 - `AUTH_SECRET` — required for cookie signing.
 
 ---
@@ -324,7 +326,7 @@ After a standalone build, copy static files alongside the server:
 | Variable | Build/Runtime | Description |
 |----------|---------------|-------------|
 | `NEXT_PUBLIC_API_BASE_URL` | Build | Public API URL (empty string if using server-side proxy) |
-| `API_BASE_URL` | Runtime | Backend URL for server-side proxy (e.g., `http://backend:3000`) |
+| `API_BASE_URL` | Runtime | Backend URL for server-side proxy (Docker service name plus the API listen port from env) |
 | `AUTH_SECRET` | Runtime | Cookie signing secret |
 | `AUTH_COOKIE_SECURE` | Runtime | Set to `"true"` for TLS, `"false"` for HTTP-only deployments |
 
@@ -415,14 +417,15 @@ COPY app/ ./app/
 COPY config/ ./config/
 COPY drizzle/ ./drizzle/
 USER plumbus
-EXPOSE 3000
-HEALTHCHECK CMD wget -q -O /dev/null http://localhost:3000/ready || exit 1
+# Do not EXPOSE a literal port — EXPOSE cannot read env. Publish the mapping in compose/k8s.
+HEALTHCHECK --interval=30s --timeout=5s --start-period=15s --retries=3 \
+  CMD node -e "const p=process.env.PLUMBUS_START_PORT||process.env.PORT;if(!p){process.exit(1)}fetch('http://127.0.0.1:'+p+'/ready').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"
 ENTRYPOINT ["./entrypoint.sh"]
 ```
 
 ### Frontend Dockerfile
 
-For the **admin dashboard**, replace `{./frontend}` with `{./frontend-admin}`, change port 3001 to 3002, and adjust the package filter accordingly.
+For the **admin dashboard**, replace `{./frontend}` with `{./frontend-admin}` and bind the dashboard to `FRONTEND_ADMIN_PORT` from the host environment.
 
 ```dockerfile
 # ==============================================================
@@ -463,7 +466,6 @@ RUN addgroup --system --gid 1001 nextjs && \
 COPY --from=build /app/deployed/.next/standalone ./
 COPY --from=build /app/deployed/.next/static ./deployed/.next/static
 USER nextjs
-EXPOSE 3001
 CMD ["node", "deployed/server.js"]
 ```
 
@@ -483,7 +485,7 @@ services:
     volumes: [uploads_data:/app/uploads]
   worker:
     build: { dockerfile: Dockerfile.backend }
-    command: ['npx', 'plumbus', 'worker', 'start', '--health-port', '3001']
+    command: ['npx', 'plumbus', 'worker', 'start', '--health-port', '${PLUMBUS_WORKER_HEALTH_PORT}']
     depends_on: [postgres, redis]
   frontend:
     build: { dockerfile: Dockerfile.frontend }
@@ -594,10 +596,10 @@ spec:
 
 ```yaml
 livenessProbe:
-  httpGet: { path: /health, port: 3000 }
+  httpGet: { path: /health, port: http }
   periodSeconds: 30
 readinessProbe:
-  httpGet: { path: /ready, port: 3000 }
+  httpGet: { path: /ready, port: http }
   periodSeconds: 10
 ```
 
@@ -649,7 +651,7 @@ readinessProbe:
 ### Volumes and Networking
 
 - [ ] Persistent volumes for PostgreSQL data and uploads
-- [ ] `API_BASE_URL` set to Docker service name (e.g., `http://backend:3000`)
+- [ ] `API_BASE_URL` set to the Docker service name and the API listen port from env
 - [ ] `NEXT_PUBLIC_API_BASE_URL` set to empty string `""` (for server-side proxy)
 - [ ] `AUTH_COOKIE_SECURE` set to `"true"` (or `"false"` only for HTTP-only — security trade-off)
 

package/instructions/flows.md

@@ -38,7 +38,8 @@ export const refundApproval = defineFlow({
 | `wait` | Pause until event or timeout | `event` |
 | `delay` | Pause for a fixed duration | `duration` (e.g., `"24h"`, `"5m"`) |
 | `parallel` | Run multiple steps concurrently | `branches` (step names) |
-| `eventEmit` | Emit a framework event | `event` (event type) |
+| `eventEmit` | Emit a framework event | `event` |
+| `approval-outcome` | Route on Stage 4 approval decision | `outcomes` |
 ### Conditional Syntax
 
 The `if` field accepts a JavaScript-like expression string. You can reference the flow `input` and `state` directly:
@@ -113,6 +114,12 @@ retry: {
 
 Steps that fail with transient errors are retried. Permanent failures stop the flow and move it to the dead-letter queue.
 
+## Compiled definitions
+
+Scheduled flows use `createFlowScheduler` and `flow_schedules`. Set `schedule.catchUpPolicy` to `catch-up` for bounded missed-tick catch-up; default is `skip`. Do not add a second scheduler.
+
+`plumbus compile-flows` emits signed JSON from `defineFlow` modules. Pass `compiledRegistry` to `createFlowEngine` so production runs consume compiled JSON (not live TypeScript steps) and pin version+digest on `flow_executions`. `approval-outcome` steps use Stage 4 `ApprovalService`. `applyDefinitionStrategy(..., 'migrate')` is not supported. Do not write a second workflow engine.
+
 ## Flow Lifecycle
 
 `created → running → waiting → running → completed | failed`

package/instructions/framework.md

@@ -2,7 +2,7 @@
 
 ## Release family 0.7.0
 
-This package requires an explicit upgrade from its previous minor line. Current Plumbus peers: `@plumbus/api` `0.2.x`, `@plumbus/ai-bedrock` `0.2.x`, `@plumbus/mcp` `0.6.x`. Install the matching versions of all Plumbus packages the app uses; do not bypass peer checks with `--force` or `--legacy-peer-deps`. Historical feature floors below describe earlier releases, not compatibility with this new family. Read the core `instructions/upgrading-security-release.md` checklist and refresh agent wiring with `plumbus init --patch` (v16).
+This package requires an explicit upgrade from its previous minor line. Current Plumbus peers: `@plumbus/api` `0.3.x`, `@plumbus/ai-bedrock` `0.3.x`, `@plumbus/mcp` `0.7.x`. Install the matching versions of all Plumbus packages the app uses; do not bypass peer checks with `--force` or `--legacy-peer-deps`. Historical feature floors below describe earlier releases, not compatibility with this new family. Read the core `instructions/upgrading-security-release.md` checklist and refresh agent wiring with `plumbus init --patch` (v16).
 
 
 Plumbus is an AI-native, contract-driven TypeScript application framework. You build applications by composing six primitives — **Capabilities**, **Entities**, **Events**, **Flows**, **Prompts**, and **Translations** — through a controlled execution context (`ctx`). Optional add-on packages extend the surface when installed explicitly: `@plumbus/api` (partner HTTP API), `@plumbus/mcp` (AI agent tools), `@plumbus/chat` (+ `@plumbus/chat-ui`), `@plumbus/voice`, `@plumbus/knowledge-base`, `@plumbus/ui` (web UI generation), and `@plumbus/browser-extension`.
@@ -154,6 +154,7 @@ The optional `app/server.ts` file exports hooks that customize server behavior.
 | `resolveAiOverrides` | Before each AI call | Dynamic model/provider configuration from DB |
 | `onAICostRecorded` | After each AI cost record is written | Custom cost analytics or billing hooks |
 | `enableStrictStructuredOutputs` | Server bootstrap | Global toggle for strict structured-output mode |
+| `credentials` | Server bootstrap | Optional host credential catalog (`export const credentials`). Passed to `createServer({ credentials })`. Names, types, refs, and public labels only — secrets stay in the host resolver. |
 
 ### Error Capture Coverage
 

package/instructions/mcp.md

@@ -17,7 +17,7 @@ Plumbus capabilities can be exposed to external AI agents as MCP tools. **Contra
 - **`plumbus generate`** — MCP manifest + skill files (no `@plumbus/mcp` install required).
 - **`plumbus mcp serve` / `list-tools` / `mcp generate`** — CLI entry points. The current CLI loads environment config, not `plumbus.config.*`; use `AUTH_SECRET` for CLI JWT authentication, or application-owned runtime wiring for `mcp.agents`.
 
-Install the runtime when serving agents: `pnpm add @plumbus/mcp` (optional peer of `@plumbus/core`, version-locked `0.6.x`).
+Install the runtime when serving agents: `pnpm add @plumbus/mcp` (optional peer of `@plumbus/core`, version-locked `0.7.x`).
 
 
 Core 0.7.0 + MCP 0.6.0 require explicit authentication on every HTTP transport request. Discovery remains separately configurable. Environment-token fallback is for map-based stdio calls without an explicit header; an invalid header never falls back. Read [the security release checklist](./upgrading-security-release.md).

package/instructions/peer-dependencies.md

@@ -2,26 +2,28 @@
 
 Read this file before editing `peerDependencies` in any `packages/*/package.json`.
 
-## Security release family — explicit upgrade required
+## Core 0.8 family (beta) — explicit upgrade required
 
-Core **0.7.x**, UI **0.8.x**, MCP **0.6.x**, voice **0.5.x**, and the remaining add-ons **0.2.x** form one coordinated release family. This is an intentional migration boundary: legacy caret ranges must not install these packages, and new packages must not accept legacy Plumbus peers. Do not widen these ranges to admit old core/voice lines just to make an installation pass.
+Core **0.8.x**, UI **0.9.x**, MCP **0.7.x**, voice **0.6.x**, and the remaining add-ons **0.3.x** form one coordinated release family. It is currently staged as **`-beta.N` prereleases under a branch-named dist-tag (`plumbus-next`)**; see [Upgrading to core 0.8](../../../docs/upgrading-core-0.8.md). This is an intentional migration boundary: legacy caret ranges must not install these packages, and new packages must not accept legacy Plumbus peers. Do not widen these ranges to admit old core/voice lines just to make an installation pass.
 
-The previous family remains on core 0.6.x, UI 0.7.x, MCP 0.5.x, voice 0.4.x, and add-ons 0.1.x. Historical feature floors are not peer contracts for the new release.
+The previous family remains on core 0.7.x, UI 0.8.x, MCP 0.6.x, voice 0.5.x, and add-ons 0.2.x (the security release). Historical feature floors are not peer contracts for the new release.
+
+**Prerelease literal.** Semver excludes prereleases from `0.8.x`, so while the family is in beta every peer uses the closed range `>=0.8.0-beta.0 <0.9.0` (same shape for the other lines). It admits `0.8.0-beta.N` and every stable `0.8.N`, and still rejects 0.7.x. When the family goes stable, replace each literal with the plain `0.8.x` form in the same commit that drops the `-beta` suffixes.
 
 ## Canonical literals — copy exactly
 
 | Declaring package | Peer target | Literal |
 | --- | --- | --- |
-| Every add-on that peers on core | `@plumbus/core` | `"0.7.x"` |
-| `@plumbus/core` | `@plumbus/mcp` | `"0.6.x"` (optional) |
-| `@plumbus/core` | `@plumbus/api` | `"0.2.x"` (optional) |
-| `@plumbus/core` | `@plumbus/ai-bedrock` | `"0.2.x"` (optional) |
-| `@plumbus/chat` | `@plumbus/knowledge-base` | `"0.2.x"` (optional) |
-| `@plumbus/chat-ui` | `@plumbus/chat` | `"0.2.x"` |
-| `@plumbus/auth-cognito` | `@plumbus/auth` | `"0.2.x"` |
-| Every `@plumbus/voice-*` provider | `@plumbus/voice` | `"0.5.x"` |
+| Every add-on that peers on core | `@plumbus/core` | `">=0.8.0-beta.0 <0.9.0"` (stable: `"0.8.x"`) |
+| `@plumbus/core` | `@plumbus/mcp` | `">=0.7.0-beta.0 <0.8.0"` (optional; stable: `"0.7.x"`) |
+| `@plumbus/core` | `@plumbus/api` | `">=0.3.0-beta.0 <0.4.0"` (optional; stable: `"0.3.x"`) |
+| `@plumbus/core` | `@plumbus/ai-bedrock` | `">=0.3.0-beta.0 <0.4.0"` (optional; stable: `"0.3.x"`) |
+| `@plumbus/chat` | `@plumbus/knowledge-base` | `">=0.3.0-beta.0 <0.4.0"` (optional; stable: `"0.3.x"`) |
+| `@plumbus/chat-ui` | `@plumbus/chat` | `">=0.3.0-beta.0 <0.4.0"` (stable: `"0.3.x"`) |
+| `@plumbus/auth-cognito` | `@plumbus/auth` | `">=0.3.0-beta.0 <0.4.0"` (stable: `"0.3.x"`) |
+| Every `@plumbus/voice-*` provider | `@plumbus/voice` | `">=0.6.0-beta.0 <0.7.0"` (stable: `"0.6.x"`) |
 
-UI 0.8.0 replaces its direct core dependency with the required peer `"@plumbus/core": "0.7.x"` and uses `workspace:*` only for development. This prevents npm from accepting old application core plus a hidden new core nested inside UI. Install core and UI together. All Plumbus packages share the application runtime through peers.
+UI 0.9.x keeps the required core peer (no direct core dependency) and uses `workspace:*` only for development. This prevents npm from accepting old application core plus a hidden new core nested inside UI. Install core and UI together. All Plumbus packages share the application runtime through peers.
 
 Voice does not peer on vendor add-ons. Apps explicitly install only providers they use, register their `*_REGISTRATION` through `createProviderRegistry()`, and pass that registry to routes/workers.
 
@@ -31,7 +33,7 @@ Voice does not peer on vendor add-ons. Apps explicitly install only providers th
 - New-family packages require the new family. Do not publish narrowed peers or migration-requiring behavior as a patch on an old line: an existing caret could select that patch.
 - `pnpm install` passing in this workspace does not prove npm consumer compatibility. Validate packed tarballs with npm; production installs use npm.
 - Keep all manifests, READMEs, package instructions, changelogs, and AGENTS/CLAUDE in sync.
-- Packages publish normally to npm’s **latest** dist-tag; there is no separate release-staging or promotion step.
+- The publish workflow picks the npm dist-tag from the branch that contains the tagged commit: `latest` when the commit is on `main`, otherwise the branch name (this beta, tagged from `plumbus-next`, publishes as `plumbus-next`). Promoting to latest is a separate operator decision after the entire family and consumer staging checks pass.
 
 ## Future releases
 
@@ -41,4 +43,4 @@ Run lint, format checking, typechecking, tests, and packed npm install checks be
 
 ## Consumer upgrade
 
-Read [upgrading-security-release.md](./upgrading-security-release.md), explicitly select the new package versions for every installed Plumbus add-on, and run `plumbus init --patch` for agent wiring **v16**. Keep application business logic in Plumbus primitives and `ctx.*`; do not bypass security checks to make a migration pass.
+Read [upgrading-security-release.md](./upgrading-security-release.md) and the 0.8 notes in the root docs, explicitly select the new package versions for every installed Plumbus add-on, and run `plumbus init --patch` for agent wiring **v16**. Keep application business logic in Plumbus primitives and `ctx.*`; do not bypass security checks to make a migration pass.

package/instructions/prompts.md

@@ -12,6 +12,9 @@ The actual instructions sent to the provider live in two optional string fields:
 | `description` | User/data prompt content (the main task text) |
 
 Both support simple top-level `{{key}}` substitution from the prompt `input` object.
+Fill is a single pass over the original template. Values are inserted literally:
+`$` sequences and `{{otherKey}}` inside a value are not interpreted. The helper is
+`fillPromptTemplate` from `@plumbus/core`.
 
 ```ts
 import { definePrompt } from "@plumbus/core";

package/instructions/security.md

@@ -57,6 +57,10 @@ If flow steps return **403** after upgrading to 0.5.x, audit `access.roles` on s
 
 Events carry `tenantId` and are only delivered to matching consumers.
 
+**Database-per-tenant:** `provisionDataPlane` creates the database plus owner/runtime roles. Apply generated `drizzle/` SQL as the **owner** (`applyDataPlaneMigrations` or `plumbus migrate apply --database <name>`). Request traffic opens the same database as the **runtime** role through `openDataPlaneConnection`. See `docs/sdk-reference/tenant-data-planes.md`.
+
+**Credential catalog:** `createMemoryCredentialCatalog` is the host-declared type list plus opaque name/ref bindings. The host supplies secret values at `reveal`; they never enter logs, JSON, or catalog errors. There are no built-in types. See `docs/sdk-reference/credential-catalog.md`.
+
 ## Field Classification & Edit Zones
 
 Entity fields with `classification: "sensitive"` or `"highly_sensitive"`:

package/instructions/testing.md

@@ -195,7 +195,7 @@ Plumbus provides vitest + Playwright end-to-end testing for generated Next.js fr
 plumbus ui e2e
 
 # Custom output directory and base URL
-plumbus ui e2e e2e-tests --frontend-dir frontend --base-url http://localhost:3001
+plumbus ui e2e e2e-tests --frontend-dir frontend --base-url "$E2E_BASE_URL"
 ```
 
 This scans `frontend/app/**/page.tsx` for ActionPanel usage and generates:
@@ -245,7 +245,7 @@ describe("Project page", () => {
   beforeAll(async () => {
     browser = await chromium.launch();
     page = await browser.newPage();
-    await page.goto("http://localhost:3001/project");
+    await page.goto(`${process.env.E2E_BASE_URL}/project`);
     await page.waitForLoadState("networkidle");
   }, 30_000);
 

package/migrations/durable-tenant/0000_durable_tenant.sql

@@ -0,0 +1,92 @@
+CREATE SCHEMA IF NOT EXISTS "core_plumbus";
+--> statement-breakpoint
+CREATE TABLE "core_plumbus"."execution_state" (
+  execution_id text PRIMARY KEY,
+  state_ref_id text NOT NULL,
+  tenant_ref text NOT NULL,
+  revision integer NOT NULL,
+  tenant_epoch integer NOT NULL,
+  status text NOT NULL,
+  definition_id text NOT NULL,
+  definition_version text NOT NULL,
+  current_step_id text NOT NULL,
+  step_index integer NOT NULL,
+  attempt integer NOT NULL,
+  correlation_id text NOT NULL,
+  created_at timestamptz NOT NULL,
+  updated_at timestamptz NOT NULL,
+  wake_at timestamptz,
+  terminal boolean NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX execution_state_status_idx ON "core_plumbus"."execution_state" (status);
+--> statement-breakpoint
+CREATE INDEX execution_state_epoch_idx ON "core_plumbus"."execution_state" (tenant_epoch);
+--> statement-breakpoint
+CREATE TABLE "core_plumbus"."step_execution" (
+  step_execution_id text PRIMARY KEY,
+  execution_id text NOT NULL,
+  step_id text NOT NULL,
+  attempt integer NOT NULL,
+  state text NOT NULL,
+  started_at timestamptz NOT NULL,
+  updated_at timestamptz NOT NULL,
+  completed_at timestamptz
+);
+--> statement-breakpoint
+CREATE INDEX step_execution_exec_idx ON "core_plumbus"."step_execution" (execution_id);
+--> statement-breakpoint
+CREATE TABLE "core_plumbus"."wait_state" (
+  wait_state_id text PRIMARY KEY,
+  execution_id text NOT NULL,
+  step_id text NOT NULL,
+  kind text NOT NULL,
+  state text NOT NULL,
+  created_at timestamptz NOT NULL,
+  updated_at timestamptz NOT NULL,
+  not_before timestamptz,
+  expires_at timestamptz,
+  resolved_at timestamptz
+);
+--> statement-breakpoint
+CREATE INDEX wait_state_exec_idx ON "core_plumbus"."wait_state" (execution_id);
+--> statement-breakpoint
+CREATE TABLE "core_plumbus"."terminal_state" (
+  terminal_state_id text PRIMARY KEY,
+  execution_id text NOT NULL UNIQUE,
+  operational_state text NOT NULL,
+  final_revision integer NOT NULL,
+  completed_at timestamptz NOT NULL,
+  domain_outcome_id text
+);
+--> statement-breakpoint
+CREATE TABLE "core_plumbus"."dispatch_outbox" (
+  outbox_id text PRIMARY KEY,
+  execution_id text NOT NULL,
+  state_ref_id text NOT NULL,
+  expected_revision integer NOT NULL,
+  tenant_epoch integer NOT NULL,
+  tenant_ref text NOT NULL,
+  step_id text NOT NULL,
+  definition_id text NOT NULL,
+  definition_version text NOT NULL,
+  correlation_id text NOT NULL,
+  work_class_id text NOT NULL,
+  priority_class_id text NOT NULL,
+  not_before timestamptz NOT NULL,
+  created_at timestamptz NOT NULL,
+  published_at timestamptz,
+  spine_row_id text,
+  spine_acked_at timestamptz,
+  superseded boolean NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX dispatch_outbox_pending_idx ON "core_plumbus"."dispatch_outbox" (published_at, spine_acked_at);
+--> statement-breakpoint
+CREATE INDEX dispatch_outbox_exec_rev_idx ON "core_plumbus"."dispatch_outbox" (execution_id, expected_revision);
+--> statement-breakpoint
+CREATE TABLE "core_plumbus"."side_effect_log" (
+  effect_key text PRIMARY KEY,
+  label text NOT NULL,
+  applied_at timestamptz NOT NULL
+);

package/migrations/durable-tenant/0001_human_task.sql

@@ -0,0 +1,45 @@
+CREATE SCHEMA IF NOT EXISTS "core_plumbus";
+--> statement-breakpoint
+CREATE TABLE "core_plumbus"."human_task" (
+  human_task_id text PRIMARY KEY,
+  kind text NOT NULL,
+  state text NOT NULL,
+  approval_request_id text,
+  execution_id text,
+  created_at timestamptz NOT NULL,
+  expires_at timestamptz NOT NULL,
+  updated_at timestamptz NOT NULL,
+  resolved_at timestamptz
+);
+--> statement-breakpoint
+CREATE INDEX human_task_state_idx ON "core_plumbus"."human_task" (state);
+--> statement-breakpoint
+CREATE TABLE "core_plumbus"."approval_request" (
+  approval_request_id text PRIMARY KEY,
+  capability_id text NOT NULL,
+  definition_version text NOT NULL,
+  input_digest text NOT NULL,
+  risk_class text NOT NULL,
+  review_reason text NOT NULL,
+  state text NOT NULL,
+  execution_id text,
+  created_at timestamptz NOT NULL,
+  expires_at timestamptz NOT NULL,
+  updated_at timestamptz NOT NULL,
+  resolved_at timestamptz,
+  invalidated_reason text
+);
+--> statement-breakpoint
+CREATE INDEX approval_request_capability_idx ON "core_plumbus"."approval_request" (capability_id);
+--> statement-breakpoint
+CREATE INDEX approval_request_binding_idx ON "core_plumbus"."approval_request" (capability_id, definition_version, input_digest);
+--> statement-breakpoint
+CREATE TABLE "core_plumbus"."approval_decision" (
+  approval_decision_id text PRIMARY KEY,
+  approval_request_id text NOT NULL,
+  approver_account_id text NOT NULL,
+  decision text NOT NULL,
+  decided_at timestamptz NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX approval_decision_request_idx ON "core_plumbus"."approval_decision" (approval_request_id);

package/migrations/durable-tenant/meta/_journal.json

@@ -0,0 +1,20 @@
+{
+  "version": "7",
+  "dialect": "postgresql",
+  "entries": [
+    {
+      "idx": 0,
+      "version": "7",
+      "when": 1787184000000,
+      "tag": "0000_durable_tenant",
+      "breakpoints": true
+    },
+    {
+      "idx": 1,
+      "version": "7",
+      "when": 1787184060000,
+      "tag": "0001_human_task",
+      "breakpoints": true
+    }
+  ]
+}

package/migrations/spine/0000_opaque_dispatch.sql

@@ -0,0 +1,26 @@
+CREATE TABLE "opaque_dispatch" (
+  dispatch_id text PRIMARY KEY,
+  contract_version text NOT NULL,
+  tenant_route_id text NOT NULL,
+  execution_id text NOT NULL,
+  definition_id text NOT NULL,
+  definition_version text NOT NULL,
+  step_id text NOT NULL,
+  tenant_execution_state_ref_id text NOT NULL,
+  expected_revision integer NOT NULL,
+  tenant_epoch integer NOT NULL,
+  work_class_id text NOT NULL,
+  priority_class_id text NOT NULL,
+  delivery_state text NOT NULL,
+  attempt integer NOT NULL,
+  not_before timestamptz NOT NULL,
+  lease_ref_id text,
+  lease_expires_at timestamptz,
+  privacy_safe_failure_category_id text,
+  correlation_id text NOT NULL,
+  created_at timestamptz NOT NULL,
+  updated_at timestamptz NOT NULL,
+  UNIQUE (tenant_route_id, execution_id, expected_revision)
+);
+--> statement-breakpoint
+CREATE INDEX opaque_dispatch_claim_idx ON "opaque_dispatch" (delivery_state, not_before, lease_expires_at);

package/migrations/spine/meta/_journal.json

@@ -0,0 +1,13 @@
+{
+  "version": "7",
+  "dialect": "postgresql",
+  "entries": [
+    {
+      "idx": 0,
+      "version": "7",
+      "when": 1787184000001,
+      "tag": "0000_opaque_dispatch",
+      "breakpoints": true
+    }
+  ]
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plumbus/core",
-  "version": "0.7.1",
+  "version": "0.8.0-beta.1",
   "description": "Plumbus framework core — types, SDK, runtime, CLI, test utilities",
   "type": "module",
   "main": "./dist/index.js",
@@ -17,6 +17,10 @@
       "types": "./dist/errors-entry.d.ts",
       "import": "./dist/errors-entry.js"
     },
+    "./runtime": {
+      "types": "./dist/runtime-entry.d.ts",
+      "import": "./dist/runtime-entry.js"
+    },
     "./testing": {
       "types": "./dist/testing/index.d.ts",
       "import": "./dist/testing/index.js"
@@ -32,11 +36,24 @@
     "./mcp": {
       "types": "./dist/mcp/index.d.ts",
       "import": "./dist/mcp/index.js"
+    },
+    "./credentials": {
+      "types": "./dist/credentials/index.d.ts",
+      "import": "./dist/credentials/index.js"
+    },
+    "./admission": {
+      "types": "./dist/admission/index.d.ts",
+      "import": "./dist/admission/index.js"
+    },
+    "./admission/client": {
+      "types": "./dist/admission/client.d.ts",
+      "import": "./dist/admission/client.js"
     }
   },
   "files": [
     "dist",
     "instructions",
+    "migrations",
     "CHANGELOG.md"
   ],
   "keywords": [
@@ -58,6 +75,7 @@
     "node": ">=20.6.0"
   },
   "dependencies": {
+    "@noble/hashes": "1.8.0",
     "@xmldom/xmldom": "^0.9.10",
     "commander": "^12.1.0",
     "drizzle-kit": "^0.31.9",
@@ -74,9 +92,9 @@
     "zod-to-json-schema": "^3.25.2"
   },
   "peerDependencies": {
-    "@plumbus/api": "0.2.x",
-    "@plumbus/ai-bedrock": "0.2.x",
-    "@plumbus/mcp": "0.6.x",
+    "@plumbus/api": ">=0.3.0-beta.0 <0.4.0",
+    "@plumbus/ai-bedrock": ">=0.3.0-beta.0 <0.4.0",
+    "@plumbus/mcp": ">=0.7.0-beta.0 <0.8.0",
     "cron-parser": "^4.9.0",
     "redis": "^4.7.0"
   },
@@ -103,10 +121,10 @@
     "@vitest/browser": "^3.0.0",
     "esbuild": "^0.25.12",
     "typescript": "^5.7.0",
-    "@plumbus/api": "0.2.1",
-    "@plumbus/voice": "0.5.1",
-    "@plumbus/ai-bedrock": "0.2.1",
-    "@plumbus/mcp": "0.6.1"
+    "@plumbus/ai-bedrock": "0.3.0-beta.0",
+    "@plumbus/voice": "0.6.0-beta.0",
+    "@plumbus/mcp": "0.7.0-beta.0",
+    "@plumbus/api": "0.3.0-beta.0"
   },
   "scripts": {
     "build": "tsc -b",