@byok-sdk/client 0.1.1 → 0.2.0

package/README.md

@@ -7,8 +7,9 @@ and exposes authenticated local diagnostics/control commands.
 The package installs `byok-agent` and `byok-approval-mcp` binaries. Provider
 credentials are not read by the dispatch plane; `@byok-sdk/keys` is separate.
 
-Pi, Claude Code and Codex are user-installed runtimes. Install and authenticate
-the runtime CLI you choose; the SDK never packages its executable or
+Pi is a required exact npm dependency and runs as an external Node subprocess;
+authenticate it with your own provider credentials. Claude Code and Codex
+remain user-installed runtimes. The SDK never reads or packages provider
 credentials. Hosts that only need runtime detection/composition can import the
 transport-free adapter surface:
 
@@ -16,5 +17,4 @@ transport-free adapter surface:
 import { PiAdapter, ClaudeAdapter, CodexAdapter } from '@byok-sdk/client/adapters';
 ```
 
-MIT licensed. Node.js 20 or newer; SQLite-backed journaling requires a runtime
-with `node:sqlite` support.
+MIT licensed. Node.js 22.19.0 or newer.

package/dist/adapters/claude/resolve-bin.d.ts

@@ -6,7 +6,7 @@ export interface ResolvedBin {
  * Resolve the `claude` (Claude Code) CLI executable.
  *
  * Unlike pi (`../pi/resolve-bin.ts`), this package does NOT bundle a
- * matched `claude` build as an optionalDependency. Claude Code is the end
+ * matched `claude` build as a dependency. Claude Code is the end
  * user's own globally-installed, individually-authenticated CLI (`claude
  * auth login`, tied to their Anthropic/claude.ai account) — there is
  * nothing useful to vendor: a bundled copy could never carry the user's own
@@ -22,6 +22,6 @@ export interface ResolvedBin {
  * `fake-claude.mjs` fixture ahead of a real claude install, exactly as pi's
  * own override does), otherwise this falls back to the literal command name
  * `claude`, resolved via the child process's own PATH lookup — there is no
- * optionalDependency tier in between.
+ * package-resolution tier in between.
  */
 export declare function resolveClaudeBin(): ResolvedBin;

package/dist/adapters/codex/codex-adapter.d.ts

@@ -66,9 +66,10 @@ export declare class CodexAdapter implements RuntimeAdapter {
      * Two independently-verified channel gotchas apply here, the "pi lesson"
      * yet again:
      *   - `codex login status`'s human-readable "Logged in using ChatGPT"
-     *     message prints on STDERR, not stdout (the opposite-channel
-     *     counterpart of pi's own `--version`-goes-to-stderr surprise) — both
-     *     streams are checked here for exactly that reason.
+     *     message prints on STDERR, not stdout — both streams are checked
+     *     here for exactly that reason. pi's `--version` is the same class of
+     *     hazard from the other direction: its channel has moved between pi
+     *     releases (see ../pi/pi-adapter.ts), so neither stream is assumed.
      *   - The NOT-logged-in message/exit-code shape was deliberately never
      *     empirically tested: this machine has a real, live ChatGPT login, and
      *     running `codex logout` to observe the negative case would have

package/dist/adapters/index.js

@@ -1,9 +1,9 @@
 import { execFile, spawn, spawnSync } from 'child_process';
 import { promisify } from 'util';
-import { promises, realpathSync } from 'fs';
-import os from 'os';
-import path2 from 'path';
+import { promises, existsSync, readFileSync, realpathSync } from 'fs';
+import path3 from 'path';
 import { fileURLToPath } from 'url';
+import os from 'os';
 import 'readline';
 
 // src/adapters/pi/pi-adapter.ts
@@ -24,20 +24,50 @@ var SteerUnsupportedError = class extends Error {
     this.runtimeId = runtimeId;
   }
 };
-
-// src/adapters/pi/resolve-bin.ts
 var PI_PACKAGE_NAME = "@earendil-works/pi-coding-agent";
+function readPackageJson(dir) {
+  const candidate = path3.join(dir, "package.json");
+  if (!existsSync(candidate)) return void 0;
+  try {
+    return JSON.parse(readFileSync(candidate, "utf8"));
+  } catch {
+    return void 0;
+  }
+}
 function resolvePiBin() {
   const override = process.env.BYOK_PI_BIN;
   if (override) {
-    return { command: override, source: "path" };
+    return { command: override, source: "env" };
   }
-  return { command: "pi", source: "path" };
+  try {
+    const mainEntryUrl = import.meta.resolve(PI_PACKAGE_NAME);
+    let dir = path3.dirname(fileURLToPath(mainEntryUrl));
+    for (let depth = 0; depth < 6; depth++) {
+      const pkg = readPackageJson(dir);
+      if (pkg?.name === PI_PACKAGE_NAME) {
+        const binRel = typeof pkg.bin === "string" ? pkg.bin : pkg.bin?.pi;
+        if (binRel) {
+          return { command: path3.join(dir, binRel), source: "package" };
+        }
+        break;
+      }
+      const parent = path3.dirname(dir);
+      if (parent === dir) break;
+      dir = parent;
+    }
+  } catch (cause) {
+    throw new Error(
+      `Required ${PI_PACKAGE_NAME} could not be resolved; install @byok-sdk/client dependencies or set BYOK_PI_BIN to a Node 22.19+ pi sidecar`,
+      { cause }
+    );
+  }
+  throw new Error(
+    `Required ${PI_PACKAGE_NAME} does not expose the pi CLI; reinstall the pinned dependency or set BYOK_PI_BIN to a Node 22.19+ pi sidecar`
+  );
 }
 
 // src/adapters/pi/permission-mapping.ts
 var READONLY_TOOLS = ["read", "grep", "find", "ls"];
-var DEFAULT_ACTIVE_TOOLS = ["read", "bash", "edit", "write"];
 function mapPermissionPolicyToPiArgs(policy) {
   if (policy.network === false) {
     return {
@@ -56,22 +86,18 @@ function mapPermissionPolicyToPiArgs(policy) {
   const denyTools = policy.denyTools ?? [];
   if (policy.mode === "readonly") {
     const base = policy.allowTools ? policy.allowTools.filter((tool) => READONLY_TOOLS.includes(tool)) : [...READONLY_TOOLS];
-    const effective = subtractDenied(base, denyTools);
-    return { ok: true, args: effective.length === 0 ? ["--no-tools"] : ["--tools", effective.join(",")] };
-  }
-  if (denyTools.length > 0) {
-    const base = policy.allowTools && policy.allowTools.length > 0 ? policy.allowTools : [...DEFAULT_ACTIVE_TOOLS];
-    const effective = subtractDenied(base, denyTools);
-    return { ok: true, args: effective.length === 0 ? ["--no-tools"] : ["--tools", effective.join(",")] };
+    if (base.length === 0) return { ok: true, args: ["--no-tools"] };
+    return {
+      ok: true,
+      args: ["--tools", base.join(","), ...denyTools.length > 0 ? ["--exclude-tools", denyTools.join(",")] : []]
+    };
   }
+  const args = [];
   if (policy.allowTools && policy.allowTools.length > 0) {
-    return { ok: true, args: ["--tools", policy.allowTools.join(",")] };
+    args.push("--tools", policy.allowTools.join(","));
   }
-  return { ok: true, args: [] };
-}
-function subtractDenied(tools, denyTools) {
-  const denied = new Set(denyTools);
-  return tools.filter((tool) => !denied.has(tool));
+  if (denyTools.length > 0) args.push("--exclude-tools", denyTools.join(","));
+  return { ok: true, args };
 }
 
 // src/adapters/pi/events.ts
@@ -96,7 +122,7 @@ function mapPiMessageToAgentEvent(msg) {
         output: { result: msg.result, isError: msg.isError === true }
       };
     }
-    case "agent_end":
+    case "agent_settled":
       return { type: "turn_end" };
     /**
      * `artifact` is NOT a real pi RPC message — pi's own `write` tool only
@@ -132,16 +158,22 @@ function mapPiMessageToAgentEvent(msg) {
     // `recordUnmappedFrame`) can tell "known, expected, silently ignored"
     // apart from "genuinely never seen before" (falls to `default` below).
     case "agent_start":
+    case "agent_end":
+    // one low-level run; `agent_settled` is BYOK completion
     case "turn_start":
     case "turn_end":
-    // pi's own per-LLM-turn boundary, not ours — see `agent_end` above
+    // pi's own per-LLM-turn boundary, not ours
     case "message_start":
     case "message_end":
+    case "bash_execution_update":
     case "tool_execution_update":
     case "queue_update":
     case "compaction_start":
     case "compaction_end":
     case "auto_retry_start":
+    case "summarization_retry_scheduled":
+    case "summarization_retry_attempt_start":
+    case "summarization_retry_finished":
     case "session_info_changed":
     case "thinking_level_changed":
       return void 0;
@@ -151,15 +183,20 @@ function mapPiMessageToAgentEvent(msg) {
 }
 var ROUTINE_PI_EVENT_TYPES = /* @__PURE__ */ new Set([
   "agent_start",
+  "agent_end",
   "turn_start",
   "turn_end",
   "message_start",
   "message_end",
+  "bash_execution_update",
   "tool_execution_update",
   "queue_update",
   "compaction_start",
   "compaction_end",
   "auto_retry_start",
+  "summarization_retry_scheduled",
+  "summarization_retry_attempt_start",
+  "summarization_retry_finished",
   "session_info_changed",
   "thinking_level_changed"
 ]);
@@ -293,10 +330,7 @@ var PiRpcClient = class {
    * traffic. Logs once per distinct type (not per occurrence, so a
    * repeating unmapped type can't spam stdout); the running tally is also
    * folded into this client's exit-time error message (`buildExitError`) so
-   * a post-mortem on a failed/hung task has it without needing separate log
-   * scraping. This is the exact mechanism that would have turned this
-   * task's root-cause hang (`agent_end` arriving with no mapping) into a
-   * one-line, immediate warning instead of a silent stall.
+   * a post-mortem on a failed/hung task has it without separate log scraping.
    */
   recordUnmappedFrame(type) {
     const next = (this.unmappedFrameCounts.get(type) ?? 0) + 1;
@@ -437,8 +471,8 @@ var PiAdapter = class {
   options;
   id = "pi";
   async detect() {
-    const bin = this.resolveBin();
     try {
+      const bin = this.resolveBin();
       const { stdout, stderr } = await execFileAsync(bin.command, ["--version"], { timeout: DETECT_TIMEOUT_MS });
       const version = stdout.trim() || stderr.trim();
       const authPresent = KNOWN_PROVIDER_ENV_VARS.some((name) => process.env[name] !== void 0);
@@ -584,7 +618,7 @@ function resolveApprovalMcpBin() {
   if (override) {
     return { command: override, args: [], source: "env" };
   }
-  const distBin = path2.join(path2.dirname(fileURLToPath(import.meta.url)), "bin", "byok-approval-mcp.js");
+  const distBin = path3.join(path3.dirname(fileURLToPath(import.meta.url)), "bin", "byok-approval-mcp.js");
   return { command: process.execPath, args: [distBin], source: "dist" };
 }
 
@@ -615,7 +649,7 @@ function mapPermissionPolicyToClaudeArgs(policy) {
   }
   if (policy.mode === "readonly") {
     const base = policy.allowTools ? policy.allowTools.filter((tool) => READONLY_TOOLS2.includes(tool)) : [...READONLY_TOOLS2];
-    const effective = subtractDenied2(base, denyTools);
+    const effective = subtractDenied(base, denyTools);
     return { ok: true, args: ["--permission-mode", "default", "--tools", effective.join(",")] };
   }
   if (denyTools.length > 0) {
@@ -632,7 +666,7 @@ function mapPermissionPolicyToClaudeArgs(policy) {
   }
   return { ok: true, args };
 }
-function subtractDenied2(tools, denyTools) {
+function subtractDenied(tools, denyTools) {
   const denied = new Set(denyTools);
   return tools.filter((tool) => !denied.has(tool));
 }
@@ -664,7 +698,7 @@ var EXTENSION_CONTENT_TYPES = {
   ".yml": "application/yaml"
 };
 function guessContentType(filePath) {
-  const ext = path2.extname(filePath).toLowerCase();
+  const ext = path3.extname(filePath).toLowerCase();
   return EXTENSION_CONTENT_TYPES[ext] ?? "application/octet-stream";
 }
 function mapAssistant(msg, correlation) {
@@ -736,11 +770,11 @@ function tryBuildArtifactEvent(msg, workspaceDir) {
   const filePath = toolUseResult && typeof toolUseResult.filePath === "string" ? toolUseResult.filePath : void 0;
   if (!filePath) return void 0;
   const realWorkspaceDir = tryRealpath(workspaceDir) ?? workspaceDir;
-  const fileDir = path2.dirname(filePath);
+  const fileDir = path3.dirname(filePath);
   const realFileDir = tryRealpath(fileDir) ?? fileDir;
-  const realFilePath = path2.join(realFileDir, path2.basename(filePath));
-  const relative = path2.relative(realWorkspaceDir, realFilePath);
-  if (relative === "" || relative.startsWith("..") || path2.isAbsolute(relative)) {
+  const realFilePath = path3.join(realFileDir, path3.basename(filePath));
+  const relative = path3.relative(realWorkspaceDir, realFilePath);
+  if (relative === "" || relative.startsWith("..") || path3.isAbsolute(relative)) {
     return void 0;
   }
   return { type: "artifact", name: relative, contentType: guessContentType(filePath) };
@@ -1039,10 +1073,10 @@ var ClaudeAdapter = class {
         );
       }
       const approvalMcpBin = (this.options.resolveApprovalMcpBin ?? resolveApprovalMcpBin)();
-      approvalMcpConfigDir = await promises.mkdtemp(path2.join(os.tmpdir(), "byok-approval-mcp-"));
+      approvalMcpConfigDir = await promises.mkdtemp(path3.join(os.tmpdir(), "byok-approval-mcp-"));
       await promises.chmod(approvalMcpConfigDir, 448).catch(() => {
       });
-      const mcpConfigPath = path2.join(approvalMcpConfigDir, "mcp-config.json");
+      const mcpConfigPath = path3.join(approvalMcpConfigDir, "mcp-config.json");
       const mcpConfig = {
         mcpServers: {
           [APPROVAL_MCP_SERVER_NAME]: {
@@ -1389,8 +1423,8 @@ function extractArtifactEvents(changes, workspaceDir) {
     const absolutePath = typeof change.path === "string" ? change.path : void 0;
     const kind = typeof change.kind === "string" ? change.kind : void 0;
     if (!absolutePath || kind === "delete") continue;
-    const relative = path2.relative(workspaceDir, absolutePath);
-    if (relative.length === 0 || relative.startsWith("..") || path2.isAbsolute(relative)) continue;
+    const relative = path3.relative(workspaceDir, absolutePath);
+    if (relative.length === 0 || relative.startsWith("..") || path3.isAbsolute(relative)) continue;
     events.push({ type: "artifact", name: relative, contentType: guessContentType2(relative) });
   }
   return events;
@@ -1411,7 +1445,7 @@ var CONTENT_TYPE_BY_EXTENSION = {
   ".csv": "text/csv"
 };
 function guessContentType2(relativePath) {
-  return CONTENT_TYPE_BY_EXTENSION[path2.extname(relativePath).toLowerCase()] ?? "application/octet-stream";
+  return CONTENT_TYPE_BY_EXTENSION[path3.extname(relativePath).toLowerCase()] ?? "application/octet-stream";
 }
 function extractErrorMessage(rawError) {
   if (typeof rawError === "string") return rawError;
@@ -1572,9 +1606,10 @@ var CodexAdapter = class {
    * Two independently-verified channel gotchas apply here, the "pi lesson"
    * yet again:
    *   - `codex login status`'s human-readable "Logged in using ChatGPT"
-   *     message prints on STDERR, not stdout (the opposite-channel
-   *     counterpart of pi's own `--version`-goes-to-stderr surprise) — both
-   *     streams are checked here for exactly that reason.
+   *     message prints on STDERR, not stdout — both streams are checked
+   *     here for exactly that reason. pi's `--version` is the same class of
+   *     hazard from the other direction: its channel has moved between pi
+   *     releases (see ../pi/pi-adapter.ts), so neither stream is assumed.
    *   - The NOT-logged-in message/exit-code shape was deliberately never
    *     empirically tested: this machine has a real, live ChatGPT login, and
    *     running `codex logout` to observe the negative case would have