ankka 0.15.0 → 0.16.0

package/dist/_proto/ankka/protocol/v1/erasure_pb.js

@@ -0,0 +1,24 @@
+// The service's erasure handler (protocol 1.23, feature 042): what the platform cannot erase for it,
+// such as objects in a bucket. The sidecar calls it on one instance for each erased data subject,
+// and again on each re-run within the window; it must be idempotent. A handler that fails is
+// recorded as failed for that run and run again on the next.
+import { fileDesc, messageDesc, serviceDesc } from "@bufbuild/protobuf/codegenv2";
+import { file_ankka_protocol_v1_payload } from "./payload_pb.js";
+/**
+ * Describes the file ankka/protocol/v1/erasure.proto.
+ */
+export const file_ankka_protocol_v1_erasure = /*@__PURE__*/ fileDesc("Ch9hbmtrYS9wcm90b2NvbC92MS9lcmFzdXJlLnByb3RvEhFhbmtrYS5wcm90b2NvbC52MSJxCgtFcmFzdXJlQ2FsbBIPCgdzdWJqZWN0GAEgASgJEhMKC2VyYXN1cmVfc2VxGAIgASgDEg0KBXJlcnVuGAMgASgIEi0KCG1ldGFkYXRhGAQgASgLMhsuYW5ra2EucHJvdG9jb2wudjEuTWV0YWRhdGEicAoMRXJhc3VyZVJlcGx5EhYKDm9iamVjdHNfZXJhc2VkGAEgASgDEhAKCGZpbmFsaXR5GAIgASgJEiwKBWVycm9yGAMgASgLMhguYW5ra2EucHJvdG9jb2wudjEuRXJyb3JIAIgBAUIICgZfZXJyb3IyVAoHRXJhc3VyZRJJCgZJbnZva2USHi5hbmtrYS5wcm90b2NvbC52MS5FcmFzdXJlQ2FsbBofLmFua2thLnByb3RvY29sLnYxLkVyYXN1cmVSZXBseWIGcHJvdG8z", [file_ankka_protocol_v1_payload]);
+/**
+ * Describes the message ankka.protocol.v1.ErasureCall.
+ * Use `create(ErasureCallSchema)` to create a new message.
+ */
+export const ErasureCallSchema = /*@__PURE__*/ messageDesc(file_ankka_protocol_v1_erasure, 0);
+/**
+ * Describes the message ankka.protocol.v1.ErasureReply.
+ * Use `create(ErasureReplySchema)` to create a new message.
+ */
+export const ErasureReplySchema = /*@__PURE__*/ messageDesc(file_ankka_protocol_v1_erasure, 1);
+/**
+ * @generated from service ankka.protocol.v1.Erasure
+ */
+export const Erasure = /*@__PURE__*/ serviceDesc(file_ankka_protocol_v1_erasure, 0);

package/dist/_proto/ankka/protocol/v1/event_sourced_pb.d.ts

@@ -64,6 +64,13 @@ export type EventSourcedIn_Init = Message<"ankka.protocol.v1.EventSourcedIn.Init
      * @generated from field: string installation = 4;
      */
     installation: string;
+    /**
+     * 1.23: the home the snapshot was written under, whose keyring keeps the keys of its personal
+     * fields (SubjectKeyRequest.home); empty for an entity not replicated or no snapshot.
+     *
+     * @generated from field: string home = 5;
+     */
+    home: string;
 };
 /**
  * Describes the message ankka.protocol.v1.EventSourcedIn.Init.
@@ -180,6 +187,13 @@ export type EventSourcedIn_Command = Message<"ankka.protocol.v1.EventSourcedIn.C
      * @generated from field: string forwarded_from = 9;
      */
     forwardedFrom: string;
+    /**
+     * 1.23: the entity's home as this copy reads it, whose keyring keeps the keys of the state's
+     * personal fields (SubjectKeyRequest.home); empty for an entity not replicated.
+     *
+     * @generated from field: string home = 10;
+     */
+    home: string;
 };
 /**
  * Describes the message ankka.protocol.v1.EventSourcedIn.Command.

package/dist/_proto/ankka/protocol/v1/event_sourced_pb.js

@@ -5,7 +5,7 @@ import { file_ankka_protocol_v1_payload } from "./payload_pb.js";
 /**
  * Describes the file ankka/protocol/v1/event_sourced.proto.
  */
-export const file_ankka_protocol_v1_event_sourced = /*@__PURE__*/ fileDesc("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", [file_ankka_protocol_v1_payload]);
+export const file_ankka_protocol_v1_event_sourced = /*@__PURE__*/ fileDesc("CiVhbmtrYS9wcm90b2NvbC92MS9ldmVudF9zb3VyY2VkLnByb3RvEhFhbmtrYS5wcm90b2NvbC52MSLIBgoORXZlbnRTb3VyY2VkSW4SNgoEaW5pdBgBIAEoCzImLmFua2thLnByb3RvY29sLnYxLkV2ZW50U291cmNlZEluLkluaXRIABI4CgVldmVudBgCIAEoCzInLmFua2thLnByb3RvY29sLnYxLkV2ZW50U291cmNlZEluLkV2ZW50SAASPAoHY29tbWFuZBgDIAEoCzIpLmFua2thLnByb3RvY29sLnYxLkV2ZW50U291cmNlZEluLkNvbW1hbmRIABqjAQoESW5pdBIUCgxjb21wb25lbnRfaWQYASABKAkSEQoJZW50aXR5X2lkGAIgASgJEkEKCHNuYXBzaG90GAMgASgLMiouYW5ra2EucHJvdG9jb2wudjEuRXZlbnRTb3VyY2VkSW4uU25hcHNob3RIAIgBARIUCgxpbnN0YWxsYXRpb24YBCABKAkSDAoEaG9tZRgFIAEoCUILCglfc25hcHNob3QaSQoIU25hcHNob3QSEAoIc2VxdWVuY2UYASABKAMSKwoHcGF5bG9hZBgCIAEoCzIaLmFua2thLnByb3RvY29sLnYxLlBheWxvYWQaiQEKBUV2ZW50EhAKCHNlcXVlbmNlGAEgASgDEisKB3BheWxvYWQYAiABKAsyGi5hbmtrYS5wcm90b2NvbC52MS5QYXlsb2FkEhQKDGluc3RhbGxhdGlvbhgDIAEoCRITCgthdHRyaWJ1dGlvbhgEIAEoCRIWCg5mb3J3YXJkZWRfZnJvbRgFIAEoCRr9AQoHQ29tbWFuZBIKCgJpZBgBIAEoAxIMCgRuYW1lGAIgASgJEisKB3BheWxvYWQYAyABKAsyGi5hbmtrYS5wcm90b2NvbC52MS5QYXlsb2FkEi0KCG1ldGFkYXRhGAQgASgLMhsuYW5ra2EucHJvdG9jb2wudjEuTWV0YWRhdGESGgoSc25hcHNob3RfcmVxdWVzdGVkGAUgASgIEhQKDGluc3RhbGxhdGlvbhgGIAEoCRIPCgdhdF9ob21lGAcgASgIEhMKC2F0dHJpYnV0aW9uGAggASgJEhYKDmZvcndhcmRlZF9mcm9tGAkgASgJEgwKBGhvbWUYCiABKAlCCQoHbWVzc2FnZSLRAwoPRXZlbnRTb3VyY2VkT3V0EjkKBXJlcGx5GAEgASgLMiguYW5ra2EucHJvdG9jb2wudjEuRXZlbnRTb3VyY2VkT3V0LlJlcGx5SAASLQoHZmFpbHVyZRgCIAEoCzIaLmFua2thLnByb3RvY29sLnYxLkZhaWx1cmVIABrIAgoFUmVwbHkSEgoKY29tbWFuZF9pZBgBIAEoAxIqCgZldmVudHMYAiADKAsyGi5hbmtrYS5wcm90b2NvbC52MS5QYXlsb2FkEjQKCXJldGVudGlvbhgDIAEoCzIcLmFua2thLnByb3RvY29sLnYxLlJldGVudGlvbkgAiAEBEisKB291dGNvbWUYBCABKAsyGi5hbmtrYS5wcm90b2NvbC52MS5PdXRjb21lEjEKCHNuYXBzaG90GAUgASgLMhouYW5ra2EucHJvdG9jb2wudjEuUGF5bG9hZEgBiAEBEj4KC3JlcGxpY2F0aW9uGAYgASgLMiQuYW5ra2EucHJvdG9jb2wudjEuUmVwbGljYXRpb25DaGFuZ2VIAogBAUIMCgpfcmV0ZW50aW9uQgsKCV9zbmFwc2hvdEIOCgxfcmVwbGljYXRpb25CCQoHbWVzc2FnZSKeAQoRUmVwbGljYXRpb25DaGFuZ2USFgoMaGFuZF9vdmVyX3RvGAEgASgJSAASPQoDc2V0GAIgASgLMi4uYW5ra2EucHJvdG9jb2wudjEuUmVwbGljYXRpb25DaGFuZ2UuU2V0Q2hhbmdlSAAaKAoJU2V0Q2hhbmdlEgsKA2FkZBgBIAMoCRIOCgZyZW1vdmUYAiADKAlCCAoGY2hhbmdlMmMKDEV2ZW50U291cmNlZBJTCgZIYW5kbGUSIS5hbmtrYS5wcm90b2NvbC52MS5FdmVudFNvdXJjZWRJbhoiLmFua2thLnByb3RvY29sLnYxLkV2ZW50U291cmNlZE91dCgBMAFiBnByb3RvMw", [file_ankka_protocol_v1_payload]);
 /**
  * Describes the message ankka.protocol.v1.EventSourcedIn.
  * Use `create(EventSourcedInSchema)` to create a new message.

package/dist/_proto/ankka/protocol/v1/wasm_pb.d.ts

@@ -1,5 +1,5 @@
 import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
-import type { Failure, Payload } from "./payload_pb.ts";
+import type { Error, Failure, Payload } from "./payload_pb.ts";
 import type { Kind, Spec } from "./discovery_pb.ts";
 import type { EventSourcedIn_Command, EventSourcedOut_Reply } from "./event_sourced_pb.ts";
 import type { KeyValueIn_Command, KeyValueOut_Reply } from "./key_value_pb.ts";
@@ -329,3 +329,138 @@ export type StreamTokens = Message<"ankka.protocol.v1.StreamTokens"> & {
  * Use `create(StreamTokensSchema)` to create a new message.
  */
 export declare const StreamTokensSchema: GenMessage<StreamTokens>;
+/**
+ * keyring_seal (1.23, feature 042): a personal field sealed into its envelope by the runtime, with
+ * the keyring the runtime holds and the same code a Scala field is sealed with. `value` is the
+ * field's own JSON; `manifest` the manifest of the record the field is in, which the envelope is
+ * bound to. A write for an erased data subject is the reply's Error (CONFLICT), never a trap.
+ *
+ * @generated from message ankka.protocol.v1.KeyringSealRequest
+ */
+export type KeyringSealRequest = Message<"ankka.protocol.v1.KeyringSealRequest"> & {
+    /**
+     * @generated from field: string subject = 1;
+     */
+    subject: string;
+    /**
+     * @generated from field: string manifest = 2;
+     */
+    manifest: string;
+    /**
+     * @generated from field: bytes value = 3;
+     */
+    value: Uint8Array;
+    /**
+     * the field written erased: the envelope without
+     *
+     * @generated from field: bool erased = 4;
+     */
+    erased: boolean;
+    /**
+     * `c`, under the project the runtime holds; `value`
+     * is not read
+     * 1.23: the project of the envelope the field was read from, when another project's (FR-027):
+     * the field is sealed again under that project's key, never made here, and written erased when
+     * that key is no longer given. Empty: the runtime's own project.
+     *
+     * @generated from field: string project = 5;
+     */
+    project: string;
+};
+/**
+ * Describes the message ankka.protocol.v1.KeyringSealRequest.
+ * Use `create(KeyringSealRequestSchema)` to create a new message.
+ */
+export declare const KeyringSealRequestSchema: GenMessage<KeyringSealRequest>;
+/**
+ * @generated from message ankka.protocol.v1.KeyringSealReply
+ */
+export type KeyringSealReply = Message<"ankka.protocol.v1.KeyringSealReply"> & {
+    /**
+     * @generated from oneof ankka.protocol.v1.KeyringSealReply.reply
+     */
+    reply: {
+        /**
+         * the field as it is written: the envelope's JSON
+         *
+         * @generated from field: bytes envelope = 1;
+         */
+        value: Uint8Array;
+        case: "envelope";
+    } | {
+        /**
+         * @generated from field: ankka.protocol.v1.Error error = 2;
+         */
+        value: Error;
+        case: "error";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message ankka.protocol.v1.KeyringSealReply.
+ * Use `create(KeyringSealReplySchema)` to create a new message.
+ */
+export declare const KeyringSealReplySchema: GenMessage<KeyringSealReply>;
+/**
+ * keyring_open (1.23): an envelope read back. Erased when the subject's key is destroyed; an
+ * envelope whose authentication fails is the reply's Error (INTERNAL, details `personal` =
+ * `corrupt`).
+ *
+ * @generated from message ankka.protocol.v1.KeyringOpenRequest
+ */
+export type KeyringOpenRequest = Message<"ankka.protocol.v1.KeyringOpenRequest"> & {
+    /**
+     * the field as it was written
+     *
+     * @generated from field: bytes envelope = 1;
+     */
+    envelope: Uint8Array;
+    /**
+     * @generated from field: string manifest = 2;
+     */
+    manifest: string;
+};
+/**
+ * Describes the message ankka.protocol.v1.KeyringOpenRequest.
+ * Use `create(KeyringOpenRequestSchema)` to create a new message.
+ */
+export declare const KeyringOpenRequestSchema: GenMessage<KeyringOpenRequest>;
+/**
+ * @generated from message ankka.protocol.v1.KeyringOpenReply
+ */
+export type KeyringOpenReply = Message<"ankka.protocol.v1.KeyringOpenReply"> & {
+    /**
+     * @generated from oneof ankka.protocol.v1.KeyringOpenReply.reply
+     */
+    reply: {
+        /**
+         * the field's own JSON
+         *
+         * @generated from field: bytes value = 1;
+         */
+        value: Uint8Array;
+        case: "value";
+    } | {
+        /**
+         * @generated from field: bool erased = 2;
+         */
+        value: boolean;
+        case: "erased";
+    } | {
+        /**
+         * @generated from field: ankka.protocol.v1.Error error = 3;
+         */
+        value: Error;
+        case: "error";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message ankka.protocol.v1.KeyringOpenReply.
+ * Use `create(KeyringOpenReplySchema)` to create a new message.
+ */
+export declare const KeyringOpenReplySchema: GenMessage<KeyringOpenReply>;

package/dist/_proto/ankka/protocol/v1/wasm_pb.js

@@ -14,7 +14,7 @@ import { file_ankka_protocol_v1_client } from "./client_pb.js";
 /**
  * Describes the file ankka/protocol/v1/wasm.proto.
  */
-export const file_ankka_protocol_v1_wasm = /*@__PURE__*/ fileDesc("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", [file_ankka_protocol_v1_payload, file_ankka_protocol_v1_discovery, file_ankka_protocol_v1_event_sourced, file_ankka_protocol_v1_key_value, file_ankka_protocol_v1_workflow, file_ankka_protocol_v1_client]);
+export const file_ankka_protocol_v1_wasm = /*@__PURE__*/ fileDesc("ChxhbmtrYS9wcm90b2NvbC92MS93YXNtLnByb3RvEhFhbmtrYS5wcm90b2NvbC52MSJYCghXYXNtU3BlYxIlCgRzcGVjGAEgASgLMhcuYW5ra2EucHJvdG9jb2wudjEuU3BlYxIQCghzdGF0ZWZ1bBgCIAMoCRITCgthYmlfdmVyc2lvbhgDIAEoCSLfAgoNSGFuZGxlUmVxdWVzdBIlCgRraW5kGAEgASgOMhcuYW5ra2EucHJvdG9jb2wudjEuS2luZBIUCgxjb21wb25lbnRfaWQYAiABKAkSEQoJZW50aXR5X2lkGAMgASgJEi4KBXN0YXRlGAQgASgLMhouYW5ra2EucHJvdG9jb2wudjEuUGF5bG9hZEgBiAEBEkIKDWV2ZW50X3NvdXJjZWQYCiABKAsyKS5hbmtrYS5wcm90b2NvbC52MS5FdmVudFNvdXJjZWRJbi5Db21tYW5kSAASOgoJa2V5X3ZhbHVlGAsgASgLMiUuYW5ra2EucHJvdG9jb2wudjEuS2V5VmFsdWVJbi5Db21tYW5kSAASOQoId29ya2Zsb3cYDCABKAsyJS5hbmtrYS5wcm90b2NvbC52MS5Xb3JrZmxvd0luLkNvbW1hbmRIAEIJCgdjb21tYW5kQggKBl9zdGF0ZSLGAgoLSGFuZGxlUmVwbHkSQQoNZXZlbnRfc291cmNlZBgKIAEoCzIoLmFua2thLnByb3RvY29sLnYxLkV2ZW50U291cmNlZE91dC5SZXBseUgAEjkKCWtleV92YWx1ZRgLIAEoCzIkLmFua2thLnByb3RvY29sLnYxLktleVZhbHVlT3V0LlJlcGx5SAASOAoId29ya2Zsb3cYDCABKAsyJC5hbmtrYS5wcm90b2NvbC52MS5Xb3JrZmxvd091dC5SZXBseUgAEi4KBXN0YXRlGAIgASgLMhouYW5ra2EucHJvdG9jb2wudjEuUGF5bG9hZEgBiAEBEjAKB2ZhaWx1cmUYAyABKAsyGi5hbmtrYS5wcm90b2NvbC52MS5GYWlsdXJlSAKIAQFCBwoFcmVwbHlCCAoGX3N0YXRlQgoKCF9mYWlsdXJlIoICCgtGb2xkUmVxdWVzdBIUCgxjb21wb25lbnRfaWQYASABKAkSEQoJZW50aXR5X2lkGAIgASgJEi4KBXN0YXRlGAMgASgLMhouYW5ra2EucHJvdG9jb2wudjEuUGF5bG9hZEgAiAEBEikKBWV2ZW50GAQgASgLMhouYW5ra2EucHJvdG9jb2wudjEuUGF5bG9hZBIQCghzZXF1ZW5jZRgFIAEoAxIUCgxpbnN0YWxsYXRpb24YBiABKAkSEAoIbWlycm9yZWQYByABKAgSEwoLYXR0cmlidXRpb24YCCABKAkSFgoOZm9yd2FyZGVkX2Zyb20YCSABKAlCCAoGX3N0YXRlInQKCUZvbGRSZXBseRIpCgVzdGF0ZRgBIAEoCzIaLmFua2thLnByb3RvY29sLnYxLlBheWxvYWQSMAoHZmFpbHVyZRgCIAEoCzIaLmFua2thLnByb3RvY29sLnYxLkZhaWx1cmVIAIgBAUIKCghfZmFpbHVyZSKpAQoLU3RlcFJlcXVlc3QSFAoMY29tcG9uZW50X2lkGAEgASgJEhEKCWVudGl0eV9pZBgCIAEoCRIuCgVzdGF0ZRgDIAEoCzIaLmFua2thLnByb3RvY29sLnYxLlBheWxvYWRIAIgBARI3CghydW5fc3RlcBgEIAEoCzIlLmFua2thLnByb3RvY29sLnYxLldvcmtmbG93SW4uUnVuU3RlcEIICgZfc3RhdGUivAEKCVN0ZXBSZXBseRI3CgVyZXBseRgBIAEoCzIoLmFua2thLnByb3RvY29sLnYxLldvcmtmbG93T3V0LlN0ZXBSZXBseRIuCgVzdGF0ZRgCIAEoCzIaLmFua2thLnByb3RvY29sLnYxLlBheWxvYWRIAIgBARIwCgdmYWlsdXJlGAMgASgLMhouYW5ra2EucHJvdG9jb2wudjEuRmFpbHVyZUgBiAEBQggKBl9zdGF0ZUIKCghfZmFpbHVyZSI0CglQYXNzaXZhdGUSFAoMY29tcG9uZW50X2lkGAEgASgJEhEKCWVudGl0eV9pZBgCIAEoCSIdCg1Db25maWdSZXF1ZXN0EgwKBG5hbWUYASABKAkiKwoLQ29uZmlnUmVwbHkSEgoFdmFsdWUYASABKAlIAIgBAUIICgZfdmFsdWUiPgoMU3RyZWFtVG9rZW5zEi4KBnRva2VucxgBIAMoCzIeLmFua2thLnByb3RvY29sLnYxLlN0cmVhbVRva2VuImcKEktleXJpbmdTZWFsUmVxdWVzdBIPCgdzdWJqZWN0GAEgASgJEhAKCG1hbmlmZXN0GAIgASgJEg0KBXZhbHVlGAMgASgMEg4KBmVyYXNlZBgEIAEoCBIPCgdwcm9qZWN0GAUgASgJIloKEEtleXJpbmdTZWFsUmVwbHkSEgoIZW52ZWxvcGUYASABKAxIABIpCgVlcnJvchgCIAEoCzIYLmFua2thLnByb3RvY29sLnYxLkVycm9ySABCBwoFcmVwbHkiOAoSS2V5cmluZ09wZW5SZXF1ZXN0EhAKCGVudmVsb3BlGAEgASgMEhAKCG1hbmlmZXN0GAIgASgJImkKEEtleXJpbmdPcGVuUmVwbHkSDwoFdmFsdWUYASABKAxIABIQCgZlcmFzZWQYAiABKAhIABIpCgVlcnJvchgDIAEoCzIYLmFua2thLnByb3RvY29sLnYxLkVycm9ySABCBwoFcmVwbHliBnByb3RvMw", [file_ankka_protocol_v1_payload, file_ankka_protocol_v1_discovery, file_ankka_protocol_v1_event_sourced, file_ankka_protocol_v1_key_value, file_ankka_protocol_v1_workflow, file_ankka_protocol_v1_client]);
 /**
  * Describes the message ankka.protocol.v1.WasmSpec.
  * Use `create(WasmSpecSchema)` to create a new message.
@@ -70,3 +70,23 @@ export const ConfigReplySchema = /*@__PURE__*/ messageDesc(file_ankka_protocol_v
  * Use `create(StreamTokensSchema)` to create a new message.
  */
 export const StreamTokensSchema = /*@__PURE__*/ messageDesc(file_ankka_protocol_v1_wasm, 10);
+/**
+ * Describes the message ankka.protocol.v1.KeyringSealRequest.
+ * Use `create(KeyringSealRequestSchema)` to create a new message.
+ */
+export const KeyringSealRequestSchema = /*@__PURE__*/ messageDesc(file_ankka_protocol_v1_wasm, 11);
+/**
+ * Describes the message ankka.protocol.v1.KeyringSealReply.
+ * Use `create(KeyringSealReplySchema)` to create a new message.
+ */
+export const KeyringSealReplySchema = /*@__PURE__*/ messageDesc(file_ankka_protocol_v1_wasm, 12);
+/**
+ * Describes the message ankka.protocol.v1.KeyringOpenRequest.
+ * Use `create(KeyringOpenRequestSchema)` to create a new message.
+ */
+export const KeyringOpenRequestSchema = /*@__PURE__*/ messageDesc(file_ankka_protocol_v1_wasm, 13);
+/**
+ * Describes the message ankka.protocol.v1.KeyringOpenReply.
+ * Use `create(KeyringOpenReplySchema)` to create a new message.
+ */
+export const KeyringOpenReplySchema = /*@__PURE__*/ messageDesc(file_ankka_protocol_v1_wasm, 14);

package/dist/autonomous.d.ts

@@ -5,6 +5,7 @@ import { type Buckets } from "./storage.ts";
 import type { GuardrailRef, ToolRef } from "./handlers.ts";
 import type { Schema } from "./schema.ts";
 import { type Services } from "./services.ts";
+import { type DataSubject } from "./personal.ts";
 type MaybePromise<T> = T | Promise<T>;
 export declare const COMPLETE_TASK = "complete_task";
 export declare const FAIL_TASK = "fail_task";
@@ -130,11 +131,18 @@ export interface Notification {
 export declare class Tasks {
     #private;
     constructor(client: ComponentClient);
-    /** A dependency that does not exist is refused before anything is written; one that has already ended cancels the new task. */
+    /**
+     * A dependency that does not exist is refused before anything is written; one that has already ended
+     * cancels the new task. With `subject` (feature 042) the task's instructions, attachments, result and
+     * the conversation an agent has working on it are kept sealed under that data subject's key, and read
+     * as erased once it is erased; an instance made for the task alone takes it too. An id that breaks the
+     * data subject rule throws a `TypeError` before anything is sent.
+     */
     create(type: TaskType<any>, instructions: string, options?: {
         id?: string;
         attachments?: readonly Attachment[];
         dependsOn?: readonly string[];
+        subject?: DataSubject | string;
     }): Promise<string>;
 }
 /** Calls about one task. */
@@ -155,7 +163,9 @@ export declare class AutonomousAgentCalls {
     #private;
     readonly componentId: string;
     readonly instanceId: string | undefined;
-    constructor(client: ComponentClient, componentId: string, instanceId: string | undefined);
+    /** The data subject the instance is started with, named by its first assignment (feature 042). */
+    readonly subject: DataSubject | undefined;
+    constructor(client: ComponentClient, componentId: string, instanceId: string | undefined, about?: DataSubject | string);
     /** Creates the task, starts an instance on it, and answers the task's id at once. */
     runSingleTask(type: TaskType<any>, instructions: string, options?: Parameters<Tasks["create"]>[2]): Promise<string>;
     assign(...taskIds: string[]): Promise<{

package/dist/autonomous.js

@@ -20,6 +20,7 @@ import { processStorage } from "./storage.js";
 import { decodeJsonValue, reviver } from "./json.js";
 import { toJsonSchema } from "./schema.js";
 import { servicesFor } from "./services.js";
+import { subject } from "./personal.js";
 export const COMPLETE_TASK = "complete_task";
 export const FAIL_TASK = "fail_task";
 export const accepted = () => Object.freeze({ verdict: "accepted" });
@@ -110,8 +111,15 @@ export class Tasks {
     constructor(client) {
         this.#client = client;
     }
-    /** A dependency that does not exist is refused before anything is written; one that has already ended cancels the new task. */
+    /**
+     * A dependency that does not exist is refused before anything is written; one that has already ended
+     * cancels the new task. With `subject` (feature 042) the task's instructions, attachments, result and
+     * the conversation an agent has working on it are kept sealed under that data subject's key, and read
+     * as erased once it is erased; an instance made for the task alone takes it too. An id that breaks the
+     * data subject rule throws a `TypeError` before anything is sent.
+     */
     async create(type, instructions, options = {}) {
+        const about = options.subject === undefined ? undefined : subject(options.subject);
         const id = options.id ?? crypto.randomUUID();
         const dependencies = [...new Set(options.dependsOn ?? [])];
         for (const dep of dependencies)
@@ -125,6 +133,7 @@ export class Tasks {
                 content: a.uri !== undefined ? { type: "Reference", uri: a.uri } : { type: "Inline", text: a.content ?? "" },
             })),
             dependencies,
+            ...(about === undefined ? {} : { subject: about }),
         });
         for (const dep of dependencies) {
             const answer = (await this.#client._raw("event-sourced", TASK, dep, "add-dependent", { taskId: id }));
@@ -186,10 +195,13 @@ export class AutonomousAgentCalls {
     #client;
     componentId;
     instanceId;
-    constructor(client, componentId, instanceId) {
+    /** The data subject the instance is started with, named by its first assignment (feature 042). */
+    subject;
+    constructor(client, componentId, instanceId, about) {
         this.#client = client;
         this.componentId = componentId;
         this.instanceId = instanceId;
+        this.subject = about === undefined ? undefined : subject(about);
     }
     #instance() {
         if (!this.instanceId)
@@ -203,7 +215,9 @@ export class AutonomousAgentCalls {
         return taskId;
     }
     assign(...taskIds) {
-        return this.#client._raw("autonomous-agent", this.componentId, this.#instance(), "assign", { taskIds });
+        // The instance's data subject travels in the assignment, which is what its host reads.
+        const body = this.subject === undefined ? { taskIds } : { taskIds, subject: this.subject };
+        return this.#client._raw("autonomous-agent", this.componentId, this.#instance(), "assign", body);
     }
     async suspend() {
         await this.#client._raw("autonomous-agent", this.componentId, this.#instance(), "suspend");

package/dist/client.d.ts

@@ -4,6 +4,7 @@ import { jsonCodec, type Shape } from "./codec.ts";
 import { CommandError, type Metadata } from "./effects/common.ts";
 import type { HandlerRef } from "./handlers.ts";
 import { type ComponentKind } from "./kinds.ts";
+import { type DataSubject } from "./personal.ts";
 import { Duration } from "./time.ts";
 import { AutonomousAgentCalls, TaskCalls, Tasks } from "./autonomous.ts";
 import { type AgentOutcome, type DecisionInput } from "./approvals.ts";
@@ -74,6 +75,8 @@ export declare class AwaitingInvocation<I, S> {
     invoke(input?: I): Promise<S>;
 }
 /** Calls on one component instance, by wire name. */
+/** The metadata key a call to an agent names its data subject under (feature 042). */
+export declare const DATA_SUBJECT_KEY = "ankka-data-subject";
 export declare class Calls {
     #private;
     constructor(connection: Connection, metadata: Metadata, kind: ComponentKind, componentId: string, entityId: string, state?: Shape<unknown>);
@@ -261,15 +264,30 @@ export declare class ComponentClient {
     forEventSourcedEntity(componentId: string, entityId: string): Calls;
     forKeyValueEntity(componentId: string, entityId: string): Calls;
     forWorkflow(componentId: string, workflowId: string): Calls;
-    forAgent(componentId: string, sessionId: string): Calls;
+    /**
+     * Calls to one session of an agent. A session started with `subject` (feature 042) keeps its
+     * conversation sealed under that data subject's key, and reads as erased once the subject is erased.
+     * The subject is fixed at the session's first call: a later call naming another is refused. An id that
+     * breaks the data subject rule throws a `TypeError` before anything is sent.
+     */
+    forAgent(componentId: string, sessionId: string, options?: {
+        subject?: DataSubject | string;
+    }): Calls;
     /** Creates tasks for autonomous agents. */
     get tasks(): Tasks;
     /** Calls about one task. */
     forTask(taskId: string): TaskCalls;
-    /** One instance of an autonomous agent, by the id the caller chose; without one, only `runSingleTask`, on an instance the platform names. */
+    /**
+     * One instance of an autonomous agent, by the id the caller chose; without one, only `runSingleTask`,
+     * on an instance the platform names. An instance started with `subject` (feature 042), by its first
+     * assignment, keeps what it records of its work sealed under that data subject's key and is terminated
+     * once the subject is erased; a later call naming another data subject is refused.
+     */
     forAutonomousAgent(agent: {
         readonly componentId: string;
-    } | string, instanceId?: string): AutonomousAgentCalls;
+    } | string, instanceId?: string, options?: {
+        subject?: DataSubject | string;
+    }): AutonomousAgentCalls;
     /** @internal A call with a JSON body and a JSON reply, as the platform's own components take them. */
     _raw(kind: ComponentKind, componentId: string, entityId: string, name: string, body?: unknown): Promise<unknown>;
     /** @internal A decision on an approval request; a refusal rejects with `CommandError`. */

package/dist/client.js

@@ -11,7 +11,8 @@ import { CommandError } from "./effects/common.js";
 import { decodeJsonValue, reviver } from "./json.js";
 import { errorCodeFromProto, kindToProto } from "./kinds.js";
 import { metadataToProto } from "./context.js";
-import { encodePayload, decodePayload, EMPTY_PAYLOAD } from "./server/payloads.js";
+import { encodePayload, decodePayload, EMPTY_PAYLOAD, prefetchPayload, prefetchValue } from "./server/payloads.js";
+import { subject as checkedSubject, withinScope } from "./personal.js";
 import { Duration } from "./time.js";
 import { PROTOCOL_VERSION } from "./spec.js";
 import { AutonomousAgentCalls, TaskCalls, Tasks } from "./autonomous.js";
@@ -62,6 +63,12 @@ function decodeReply(shape, payload) {
     const codec = payload ? codecForManifest(payload.manifest) : undefined;
     return (codec ?? binaryCodecs.done).decode(payload?.data ?? new Uint8Array());
 }
+/** Fetches the keys a reply's personal fields need before it is decoded (feature 042). */
+async function prefetched(answer) {
+    if (answer.result.case === "reply")
+        await prefetchPayload(answer.result.value.payload);
+    return answer;
+}
 function outcomeOf(reply, answer) {
     switch (answer.result.case) {
         case "reply":
@@ -153,7 +160,8 @@ export class Invocation {
     }
     /** Calls an agent's handler for its outcome: the model's answer, or the approval requests the turn waits on. */
     async ask(input) {
-        return outcomeOf(this.#reply, await stubOf(this.#connection).invoke(this.#request(input)));
+        await prefetchValue(input);
+        return outcomeOf(this.#reply, await prefetched(await stubOf(this.#connection).invoke(this.#request(input))));
     }
     /**
      * Decides one of the session's approval requests; this invocation names the handler whose turn waits.
@@ -161,7 +169,7 @@ export class Invocation {
      * and this answers as `ask` would have. A request already decided is a conflict.
      */
     async decide(approvalId, decision) {
-        return outcomeOf(this.#reply, await decideOn(this.#connection, this.#metadata, this.#kind, this.#componentId, this.#entityId, this.#name, approvalId, decision));
+        return outcomeOf(this.#reply, await prefetched(await decideOn(this.#connection, this.#metadata, this.#kind, this.#componentId, this.#entityId, this.#name, approvalId, decision)));
     }
     /** Invokes a streaming handler; yields tokens in order; a failure rejects with `CommandError`, a turn that waits with `ApprovalAwaited`. */
     async *stream(input) {
@@ -173,6 +181,7 @@ export class Invocation {
     }
     /** As `stream`, ending with one awaiting part when the turn waits for a person. */
     async *streamParts(input) {
+        await prefetchValue(input);
         for await (const token of stubOf(this.#connection).invokeStream(this.#request(input))) {
             switch (token.token.case) {
                 case "text":
@@ -216,6 +225,12 @@ const awaitTooOld = (failure) => {
     throw failure;
 };
 /** Calls on one component instance, by wire name. */
+/** The metadata key a call to an agent names its data subject under (feature 042). */
+export const DATA_SUBJECT_KEY = "ankka-data-subject";
+/** `metadata` naming `subject` under `ankka-data-subject`, or unchanged without one; a `TypeError` when it breaks the rule. */
+function withSubject(metadata, subject) {
+    return subject === undefined ? metadata : { ...metadata, [DATA_SUBJECT_KEY]: checkedSubject(subject) };
+}
 export class Calls {
     #connection;
     #metadata;
@@ -251,7 +266,7 @@ export class Calls {
      */
     async awaitEnd(timeoutMillis, state) {
         const shape = (state ?? this.#state);
-        const answer = await stubOf(this.#connection).awaitEnd(this.#awaitRequest(timeoutMillis)).catch(awaitTooOld);
+        const answer = await prefetched(await stubOf(this.#connection).awaitEnd(this.#awaitRequest(timeoutMillis)).catch(awaitTooOld));
         const outcome = outcomeOf(shape, answer);
         if (outcome.kind !== "answered")
             throw new CommandError({ message: "a workflow answered a wait as an agent", code: "INTERNAL" });
@@ -270,6 +285,7 @@ export class Calls {
                         yield { kind: "heartbeat" };
                         break;
                     case "ended":
+                        await prefetchPayload(token.token.value);
                         yield { kind: "ended", state: decodeReply(shape, token.token.value) };
                         return;
                     case "failed": {
@@ -412,7 +428,8 @@ export class Views {
             for await (const frame of frames) {
                 switch (frame.frame.case) {
                     case "row":
-                        yield { kind: "row", key: frame.frame.value.key, row: codec.decode(frame.frame.value.payload?.data ?? new Uint8Array()) };
+                        await prefetchPayload(frame.frame.value.payload);
+                        yield { kind: "row", key: frame.frame.value.key, row: decodePayload(codec, frame.frame.value.payload) };
                         break;
                     case "removed":
                         yield { kind: "removed", key: frame.frame.value.key };
@@ -439,18 +456,21 @@ export class Views {
             throw failure;
         }
     }
-    static #rows(answer, row) {
+    static async #rows(answer, row) {
         switch (answer.result.case) {
             case "rows": {
+                // A row's personal fields are envelopes under the row's manifest (feature 042).
+                await prefetchPayload(answer.result.value);
+                const manifest = codecFor(row).manifest;
                 const text = new TextDecoder().decode(answer.result.value.data);
                 const documents = JSON.parse(text, reviver);
                 if (!Array.isArray(documents))
                     throw new CommandError({ message: "the view answered something other than a JSON array", code: "INTERNAL" });
                 if (isCodec(row)) {
                     const utf8 = new TextEncoder();
-                    return documents.map((d) => row.decode(utf8.encode(JSON.stringify(d, (_k, v) => (typeof v === "bigint" ? JSON.rawJSON(v.toString()) : v)))));
+                    return withinScope(manifest, () => documents.map((d) => row.decode(utf8.encode(JSON.stringify(d, (_k, v) => (typeof v === "bigint" ? JSON.rawJSON(v.toString()) : v))))));
                 }
-                return documents.map((d) => decodeJsonValue(row, d));
+                return withinScope(manifest, () => documents.map((d) => decodeJsonValue(row, d)));
             }
             case "error":
                 throw new CommandError(errorOf(answer.result.value));
@@ -479,6 +499,7 @@ export class Timers {
         const t = "component" in target
             ? { kind: target.component.prototype._kind, componentId: target.component.componentId, name: target.handler.name, input: target.handler.input, entityId: target.entityId }
             : target;
+        await prefetchValue(input);
         await stubOf(this.#connection).schedule({
             timerId,
             delayMillis: BigInt(delay.toMillis()),
@@ -500,6 +521,7 @@ export class Timers {
         if (problem !== undefined)
             throw new CommandError({ message: problem, code: "BAD_REQUEST" });
         const t = "component" in target ? { componentId: target.component.componentId, name: target.handler.name, input: target.handler.input } : target;
+        await prefetchValue(input);
         const reply = await stubOf(this.#connection)
             .scheduleRecurring({
             timerId,
@@ -680,8 +702,14 @@ export class ComponentClient {
     forWorkflow(componentId, workflowId) {
         return new Calls(this.#connection, this.#metadata, "workflow", componentId, workflowId);
     }
-    forAgent(componentId, sessionId) {
-        return new Calls(this.#connection, this.#metadata, "agent", componentId, sessionId);
+    /**
+     * Calls to one session of an agent. A session started with `subject` (feature 042) keeps its
+     * conversation sealed under that data subject's key, and reads as erased once the subject is erased.
+     * The subject is fixed at the session's first call: a later call naming another is refused. An id that
+     * breaks the data subject rule throws a `TypeError` before anything is sent.
+     */
+    forAgent(componentId, sessionId, options = {}) {
+        return new Calls(this.#connection, withSubject(this.#metadata, options.subject), "agent", componentId, sessionId);
     }
     /** Creates tasks for autonomous agents. */
     get tasks() {
@@ -691,9 +719,14 @@ export class ComponentClient {
     forTask(taskId) {
         return new TaskCalls(this, taskId);
     }
-    /** One instance of an autonomous agent, by the id the caller chose; without one, only `runSingleTask`, on an instance the platform names. */
-    forAutonomousAgent(agent, instanceId) {
-        return new AutonomousAgentCalls(this, typeof agent === "string" ? agent : agent.componentId, instanceId);
+    /**
+     * One instance of an autonomous agent, by the id the caller chose; without one, only `runSingleTask`,
+     * on an instance the platform names. An instance started with `subject` (feature 042), by its first
+     * assignment, keeps what it records of its work sealed under that data subject's key and is terminated
+     * once the subject is erased; a later call naming another data subject is refused.
+     */
+    forAutonomousAgent(agent, instanceId, options = {}) {
+        return new AutonomousAgentCalls(this, typeof agent === "string" ? agent : agent.componentId, instanceId, options.subject);
     }
     /** @internal A call with a JSON body and a JSON reply, as the platform's own components take them. */
     async _raw(kind, componentId, entityId, name, body) {

package/dist/codec.d.ts

@@ -15,6 +15,8 @@ export type Shape<T> = Schema<T> | Codec<T>;
 export declare function isCodec<T>(shape: Shape<T>): shape is Codec<T>;
 /** The codec for a shape: the codec itself, or the schema's default. */
 export declare function codecFor<T>(shape: Shape<T>): Codec<T>;
+/** @internal The schema a default JSON codec was derived from, if `codec` is one. */
+export declare function schemaOf(codec: Codec<unknown>): Schema | undefined;
 /** The default JSON codec for a schema, under `manifest` (the schema's name when omitted). */
 export declare function jsonCodec<T>(schema: Schema<T>, manifest?: string): Codec<T>;
 /** The `text/plain` codecs for top-level primitives. */

package/dist/codec.js

@@ -24,16 +24,23 @@ function text(bytes) {
 function frozen(codec) {
     return Object.freeze(codec);
 }
+const schemaOfCodec = new WeakMap();
+/** @internal The schema a default JSON codec was derived from, if `codec` is one. */
+export function schemaOf(codec) {
+    return schemaOfCodec.get(codec);
+}
 /** The default JSON codec for a schema, under `manifest` (the schema's name when omitted). */
 export function jsonCodec(schema, manifest = defaultManifest(schema)) {
     if (typeof manifest !== "string" || manifest.trim() === "")
         throw new TypeError(`jsonCodec(${describe(schema)}): a manifest is required`);
-    return frozen({
+    const codec = frozen({
         manifest,
         contentType: JSON_CONTENT,
         encode: (value) => utf8.encode(writeJson(schema, value)),
         decode: (bytes) => readJson(schema, text(bytes)),
     });
+    schemaOfCodec.set(codec, schema);
+    return codec;
 }
 function textCodec(manifest, parse, render) {
     return frozen({

package/dist/consumer.d.ts

@@ -6,6 +6,7 @@ import { type ComponentClient, type ComponentRef, type Secrets } from "./client.
 import { type Buckets } from "./storage.ts";
 import { ConsumerEffects, type ConsumerEffect } from "./effects/stateless.ts";
 import { type Services } from "./services.ts";
+import { type Erasures } from "./erasures.ts";
 import type { Standing } from "./standing.ts";
 type MaybePromise<T> = T | Promise<T>;
 /** The metadata entry a runtime sets on a consumer's request to say what it speaks: its protocol version. */
@@ -49,6 +50,10 @@ export declare abstract class Consumer<M, Out = never> {
     get services(): Services;
     /** A unit test's in place of the runtime's: `component.services = new ScriptedServices()`. */
     set services(services: Services);
+    /** Asks for erasure requests as this service (1.23), which needs the project's `erasure` grant. */
+    get erasures(): Erasures;
+    /** A unit test's in place of the runtime's: `component.erasures = new Erasures(client)`. */
+    set erasures(erasures: Erasures);
     /** @internal */
     get _kind(): "consumer";
     abstract onMessage(message: M): MaybePromise<ConsumerEffect<Out>>;