@byok-sdk/client 0.13.0 → 0.15.0

package/dist/bin/byok-agent-message-mcp.js

@@ -1,10 +1,36 @@
 #!/usr/bin/env node
+import { spawn } from 'child_process';
 import { promises, constants } from 'fs';
 import net from 'net';
 import { randomBytes, createHash, timingSafeEqual, createHmac } from 'crypto';
 import path from 'path';
 import { createInterface } from 'readline';
 
+async function runMcpEnvLauncher() {
+  const key = process.env.BYOK_MCP_ENV_KEY;
+  if (!key || !/^BYOK_MCP_PAYLOAD_[A-F0-9]{32}$/.test(key)) throw new Error("invalid MCP environment binding");
+  const encoded = process.env[key];
+  if (!encoded) throw new Error("missing sealed MCP environment");
+  let config;
+  try {
+    config = JSON.parse(encoded);
+    if (!config || typeof config.command !== "string" || !config.command || config.args !== void 0 && (!Array.isArray(config.args) || config.args.some((value) => typeof value !== "string")) || config.env !== void 0 && (typeof config.env !== "object" || config.env === null || Array.isArray(config.env) || Object.values(config.env).some((value) => typeof value !== "string"))) throw new Error();
+  } catch {
+    throw new Error("invalid sealed MCP environment");
+  }
+  const env = { ...process.env };
+  delete env.BYOK_MCP_ENV_KEY;
+  for (const name of Object.keys(env)) if (name.startsWith("BYOK_MCP_PAYLOAD_")) delete env[name];
+  Object.assign(env, config.env);
+  await new Promise((resolve, reject) => {
+    const child = spawn(config.command, config.args ?? [], { env, stdio: "inherit", windowsHide: true });
+    child.once("error", () => reject(new Error("MCP child could not be spawned")));
+    child.once("close", (code) => {
+      if (code === 0) resolve();
+      else reject(new Error("MCP child exited unsuccessfully"));
+    });
+  });
+}
 var CONTROL_PROTOCOL_VERSION = 1;
 var HANDSHAKE_TIMEOUT_MS = 3e3;
 var UNIX_SOCKET_PATH_SOFT_LIMIT = 100;
@@ -740,6 +766,9 @@ async function runAgentTeamMcp() {
 }
 async function runSdkReservedHelper(kind) {
   switch (kind) {
+    case "mcp-env":
+      await runMcpEnvLauncher();
+      return;
     case "agent-message-mcp":
       await runAgentMessageMcp();
       return;