@byok-sdk/client 0.14.0 → 0.15.0

package/dist/runtime-detection.d.ts

@@ -0,0 +1,3 @@
+import { type RuntimeDetectResult } from './types';
+/** Reject legacy/mixed authoring shapes; copy only validated, known facts. */
+export declare function validateRuntimeDetectResult(value: unknown): RuntimeDetectResult;

package/dist/runtime-failure.d.ts

@@ -62,3 +62,9 @@ export declare const RUNTIME_ADAPTER_CONTRACT_VIOLATION_REASON: Readonly<{
 export declare function projectRuntimeBoundaryFailure(value: unknown, expectedPhase: RuntimeFailurePhase): RuntimeFailureProjection & {
     contractViolation: boolean;
 };
+/** A failed startup whose process tree has not yielded a disposal receipt. */
+export declare class RuntimeStartupDisposalFailure extends Error {
+    readonly retryDisposal: () => Promise<void>;
+    constructor(retryDisposal: () => Promise<void>, options?: ErrorOptions);
+}
+export declare function isRuntimeStartupDisposalFailure(value: unknown): value is RuntimeStartupDisposalFailure;

package/dist/sdk-reserved-helper-host.d.ts

@@ -1,5 +1,5 @@
 export declare const BYOK_SDK_HELPER_SUBCOMMAND = "__byok_sdk_helper";
-export type SdkReservedHelperKind = 'agent-message-mcp' | 'agent-memory-mcp' | 'approval-mcp' | 'agent-team-mcp';
+export type SdkReservedHelperKind = 'agent-message-mcp' | 'agent-memory-mcp' | 'approval-mcp' | 'agent-team-mcp' | 'mcp-env';
 export interface SdkHelperHostConfig {
     /**
      * Run SDK-reserved helpers by re-entering the product's single-file/SEA

package/dist/types.d.ts

@@ -8,16 +8,21 @@ export interface GitWorkspaceConfig {
     mode: 'local-checkpoints';
 }
 /**
- * Result of probing whether a runtime is usable on this machine. `authPresent`
- * is computed without ever reading the runtime's own credential storage (see
- * the credential-isolation rule on {@link RuntimeAdapter}) — it only reflects
- * whether a recognized environment variable name is set.
+ * Failure vocabulary shared by the detection contract and local diagnostics.
  */
-export interface RuntimeDetectResult {
-    present: boolean;
-    version?: string;
-    authPresent?: boolean;
-}
+export declare const RUNTIME_DETECTION_FAILURE_KINDS: readonly ['not-found', 'not-executable', 'timeout', 'probe-failed'];
+/**
+ * One probe outcome, never a separately authored presence boolean. Authentication
+ * observation retains each adapter's native status/env-name probe and never
+ * reads credential storage. Failure variants contain no arbitrary diagnostics.
+ */
+export type RuntimeDetectResult = {
+    readonly kind: 'available';
+    readonly version?: string;
+    readonly authPresent?: boolean;
+} | {
+    readonly kind: typeof RUNTIME_DETECTION_FAILURE_KINDS[number];
+};
 /** What a runtime adapter can do, advertised so the daemon can pick/validate adapters. */
 export interface RuntimeCapabilities {
     readonly steer: boolean;
@@ -195,6 +200,8 @@ export interface RuntimeAdapterDescriptor {
 }
 /** The pure input to one adapter admission decision. It contains no credential values or workspace resources. */
 export interface RuntimeAdapterPrepareInput {
+    /** Admission cancellation; late pure results are discarded and never started. */
+    signal?: AbortSignal;
     offer: TaskOfferPayload;
     policy: PermissionPolicy;
     descriptor: RuntimeAdapterDescriptor;
@@ -262,6 +269,8 @@ export interface RuntimeOperationManifest {
 }
 /** Runtime resources only available after TaskRunner has sealed the manifest and claimed the task. */
 export interface RuntimeOperationStartInput {
+    /** Startup cancellation only; rejection must preserve unresolved process ownership. */
+    readonly signal?: AbortSignal;
     readonly manifest: RuntimeOperationManifest;
     readonly instruction: string;
     readonly env: NodeJS.ProcessEnv;
@@ -283,7 +292,8 @@ export interface PreparedRuntimeOperation {
  */
 export interface RuntimeAdapter {
     readonly descriptor: RuntimeAdapterDescriptor;
-    detect(): Promise<RuntimeDetectResult>;
+    /** Readiness probing must not mutate an Agent home or allocate execution ownership. */
+    detect(signal?: AbortSignal): Promise<RuntimeDetectResult>;
     prepare(input: RuntimeAdapterPrepareInput): Promise<RuntimeAdapterPrepareResult>;
 }
 /** Copy then deeply freeze descriptor authority so callers cannot retain a mutable source reference. */

package/dist/util/durable-jsonl.d.ts

@@ -0,0 +1,12 @@
+/** File mechanics only. The caller owns replay, identity and serialized mutations. */
+export declare class DurableJsonlFile {
+    readonly filePath: string;
+    private failure;
+    constructor(filePath: string);
+    assertWritable(): void;
+    /** Replay is not a durability receipt: confirm the recovered bytes before use. */
+    confirmRecovered(): Promise<void>;
+    append(json: string): Promise<void>;
+    replace(lines: readonly string[]): Promise<void>;
+    private syncDirectory;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@byok-sdk/client",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "description": "BYOK SDK client daemon: runs on the end user's machine, pairs with a SaaS server, and drives a local coding-agent runtime",
   "type": "module",
   "license": "MIT",
@@ -67,8 +67,8 @@
     "koffi": "3.2.0"
   },
   "dependencies": {
-    "@byok-sdk/core": "0.14.0",
-    "@byok-sdk/protocol": "0.14.0",
+    "@byok-sdk/core": "0.15.0",
+    "@byok-sdk/protocol": "0.15.0",
     "@earendil-works/pi-coding-agent": "0.85.1",
     "@juicesharp/rpiv-todo": "2.8.0",
     "pi-mcp-adapter": "2.27.0",
@@ -76,7 +76,7 @@
     "pi-web-access": "0.24.1"
   },
   "devDependencies": {
-    "@byok-sdk/server": "0.14.0",
+    "@byok-sdk/server": "0.15.0",
     "@hono/node-server": "^2.0.10"
   }
 }