@byok-sdk/client 0.12.0 → 0.13.0

package/dist/daemon/task-runner.d.ts

@@ -177,6 +177,15 @@ export type ResultDocumentExtractor = (finalOutput: string, task: ResultDocument
  * opt-out pin.
  */
 export declare const DEFAULT_MAX_TASK_OUTPUT_BYTES: number;
+/**
+ * WP0: default number of Attempts allowed to execute concurrently in one
+ * canonical Agent home. One — the canonical home is every Agent session's
+ * cwd, so a second concurrent Attempt is a second writer of the same
+ * `MEMORY.md`, `notes/` and `.git`. Raising it is an explicit host choice
+ * (`DaemonConfig.maxConcurrentMutableSessionsPerAgentHome`) that re-enables
+ * the 0.12.0 co-writing exposure; there is no implicit fallback to it.
+ */
+export declare const DEFAULT_MAX_CONCURRENT_MUTABLE_SESSIONS_PER_AGENT_HOME = 1;
 export interface TaskRunnerDeps {
     adapters: RuntimeAdapter[];
     runtimeAllowlist?: string[];
@@ -204,6 +213,13 @@ export interface TaskRunnerDeps {
     agentHome?: AgentHomeManager;
     /** Local authority: legacy offers are declined after journal/dedup/cancel precedence. */
     strictAgentOnly?: boolean;
+    /**
+     * WP0: how many Attempts may execute concurrently in ONE canonical Agent
+     * home — see `DaemonConfig.maxConcurrentMutableSessionsPerAgentHome`'s own
+     * doc comment (`create-daemon.ts`) for the validated contract. Unset
+     * defaults to {@link DEFAULT_MAX_CONCURRENT_MUTABLE_SESSIONS_PER_AGENT_HOME}.
+     */
+    maxConcurrentMutableSessionsPerAgentHome?: number;
     /** Exact host-selected policy accepted by `task.offer_for_agent_with_egress`. */
     agentEgressPolicy?: Readonly<AgentEgressPolicy>;
     /** Always-present projection/sanitizer consumer; it defaults to metadata-only. */
@@ -553,6 +569,8 @@ export declare class TaskRunner {
     usesAgentEgress(taskId: string): boolean;
     /** M5 batch-3 (workstream 2): effective `maxTaskOutputBytes` cap for this daemon — see {@link DEFAULT_MAX_TASK_OUTPUT_BYTES}'s own doc comment. */
     private get maxTaskOutputBytes();
+    /** WP0: effective per-canonical-Agent-home Attempt cap — see {@link DEFAULT_MAX_CONCURRENT_MUTABLE_SESSIONS_PER_AGENT_HOME}. */
+    private get maxConcurrentMutableSessionsPerAgentHome();
     /**
      * M4 Phase 4 (part B.3, observability): per-active-task queue watermarks
      * for the control socket's `status` result — see

package/dist/daemon/url.d.ts

@@ -1,7 +1,5 @@
-/** Normalize a configured `serverUrl` (http/https/ws/wss, any path) to an http(s) base with no path/query. */
+/** Normalize a configured HTTP(S) `serverUrl` (any path) to a base with no path/query. */
 export declare function toHttpBase(serverUrl: string): string;
-/** Derive the `/byok/ws` WebSocket URL from a configured `serverUrl`. */
-export declare function toWsUrl(serverUrl: string): string;
 /**
  * Which route a transport diagnostic is about, in the only two fields that
  * are safe to keep: the host (with port) and the path.
@@ -15,7 +13,7 @@ export declare function toWsUrl(serverUrl: string): string;
  * by formatting a raw URL of its own.
  */
 export interface TransportEndpoint {
-    readonly transport: 'ws' | 'long-poll';
+    readonly transport: 'long-poll';
     /** `URL.host` — hostname plus port when non-default. Never userinfo. */
     readonly host: string;
     /** `URL.pathname` — no query, no fragment. */
@@ -43,7 +41,7 @@ export declare class InsecureServerUrlError extends Error {
 }
 export interface AssertServerUrlAllowedOptions {
     /**
-     * Explicit escape hatch: when `true`, a `http:`/`ws:` `serverUrl` whose
+     * Explicit escape hatch: when `true`, an `http:` `serverUrl` whose
      * host is NOT loopback is allowed through instead of throwing. Does
      * nothing for an unsupported scheme (see {@link assertServerUrlAllowed}'s
      * own doc comment) — that rejection is unconditional. Threaded from
@@ -57,25 +55,25 @@ export interface AssertServerUrlAllowedOptions {
 }
 /**
  * M5: transport-security gate for a configured `serverUrl` — refuses
- * plaintext (`ws:`/`http:`) transport to any non-loopback host, so a device
+ * plaintext (`http:`) transport to any non-loopback host, so a device
  * can never be talked into pairing with (and sending its pairing code /
  * device credentials to) a remote host in the clear. Call this ONCE at each
  * real entry point a raw, operator-supplied `serverUrl` first enters the
  * client (`create-daemon.ts`'s `pair()`/`start()`) rather than inside
- * `toHttpBase`/`toWsUrl` themselves: ws-transport, the long-poll fallback,
- * and blob-client all read `serverUrl` from that SAME `DaemonConfig`, never
+ * `toHttpBase` itself: long-poll and blob-client both read `serverUrl` from
+ * that same `DaemonConfig`, never
  * an independently-supplied URL of their own, so those two call sites are
  * already the single common path every one of them goes through.
  *
  * Rules, checked in order:
- *  - `https:`/`wss:` — always allowed, any host (TLS is the actual
+ *  - `https:` — always allowed, any host (TLS is the actual
  *    plaintext-network defense; this gate has nothing further to add there).
- *  - `http:`/`ws:` — allowed only when the hostname is loopback: exactly
+ *  - `http:` — allowed only when the hostname is loopback: exactly
  *    `localhost` or any `*.localhost` subdomain, an IPv4 literal in
  *    `127.0.0.0/8`, or the IPv6 loopback `::1` — see {@link isLoopbackHostname}.
- *  - `http:`/`ws:` to any other host — refused with a clear, typed
+ *  - `http:` to any other host — refused with a clear, typed
  *    {@link InsecureServerUrlError} naming the redacted scheme/host/path and the fix
- *    (use `wss:`/`https:`, or pass `dangerouslyAllowInsecureRemote: true` if
+ *    (use `https:`, or pass `dangerouslyAllowInsecureRemote: true` if
  *    this is a deliberate, understood exception) — UNLESS
  *    `opts.dangerouslyAllowInsecureRemote` is `true`.
  *  - Any other scheme (or a `serverUrl` that fails to parse as a URL at

package/dist/diagnostics/support-bundle.d.ts

@@ -28,7 +28,7 @@ export interface SupportBundle {
         status: 'online';
         pid: number;
         uptimeMs: number;
-        transport: 'connecting' | 'open' | 'closed' | 'degraded' | 'revoked' | 'unavailable';
+        transport: 'connecting' | 'open' | 'closed' | 'revoked' | 'unavailable';
         activeTaskCount: number;
         pendingApprovalCount: number;
         operationalHealth: {

package/dist/index.d.ts

@@ -3,7 +3,7 @@ export type { AgentRef } from './agent-home';
 export { AgentHomeError, AgentRefValidationError, AgentHomeResolutionError, AgentHomeCollisionError, AgentHomeBusyError, AgentHomeLeaseCorruptError, AgentHomeLayout, AgentHomeLeaseManager, AgentHomeManager, createAgentHomeProjection, createAgentHomeProjectionConsumer, AGENT_HOME_PROJECTION_STATE_FILE, stableAgentHomeOwnerId, validateAgentRef, } from './agent-home';
 export { AgentSessionHandoffStore, AgentSessionHandoffStoreError, AgentSessionHandoffCorruptError, AgentSessionHandoffMismatchError, } from './daemon/agent-session-handoff-store';
 export type { AgentSessionHandoff, AgentSessionHandoffMatch, AgentTaskTerminalEvidence, AgentTaskTerminalMatch, AgentTerminalCause, } from './daemon/agent-session-handoff-store';
-export type { AgentHomeResolution, AgentHomeProjection, AgentHomeProjectionInput, AgentHomeProjectionApplyInput, AgentHomeProjectionFunction, AgentHomeProjectionApplyFunction, AgentHomeLease, AgentHomeBinding, AgentHomeExecutionLease, AgentHomeExecutionBinding, } from './agent-home';
+export type { AgentHomeResolution, AgentHomeProjection, AgentHomeProjectionInput, AgentHomeProjectionApplyInput, AgentHomeProjectionFunction, AgentHomeProjectionApplyFunction, AgentHomeLease, AgentHomeBinding, AgentHomeExecutionLease, AgentHomeExecutionBinding, AgentHomeExecutionStatus, } from './agent-home';
 export { localStateRelocation, LocalStateRelocationError, LocalStateRelocationBusyError, LocalStateRelocationIntegrityError, } from './local-state-relocation';
 export type { LocalStateRelocationInput, LocalStateRelocationLease, } from './local-state-relocation';
 export { PolicyUnsupportedError, SteerUnsupportedError, freezeRuntimeAdapterDescriptor, sealRuntimeOperationManifest } from './types';
@@ -61,7 +61,7 @@ export { SKILL_PACKS_CAPABILITY, SKILL_PACKS_DIRNAME, SKILL_PACK_AUDIT_FILENAME,
 export type { InstallSkillPacksOptions, InstalledSkillPack, ProjectedSkillPack, SkillPackInstallErrorCode, SkillPackInstallResult, SkillPackLock, } from './daemon/skill-pack-installer';
 export { TruthMemoryClient, TruthMemoryClientError } from './daemon/truth-memory-client';
 export type { LocalMemoryFilter, MemorySelector, TruthManifestQueryInput, TruthManifestRecord, TruthMemoryClientErrorCode, TruthMemoryClientOptions, TruthMemoryMetric, TruthSnapshotCandidateInput, TruthSnapshotWriteInput, TruthTerminalWriteInput, TruthWriteBody, TruthWriteResult, VerifiedTruthRecord, } from './daemon/truth-memory-client';
-export type { ConnectionState } from './daemon/ws-transport';
+export type { ConnectionState } from './daemon/connection-manager';
 export { ReplayCursorTooOldError } from './daemon/replay-cursor';
 export { BlobClient, BlobRequestAbortedError } from './daemon/blob-client';
 export type { BlobClientOptions, BlobRequestAbortReason, BlobRequestOptions, BlobResolver } from './daemon/blob-client';