@byok-sdk/client 0.14.0 → 0.16.0

package/dist/diagnostics/operator-actions.d.ts

@@ -0,0 +1,63 @@
+import { type AgentRef } from '@byok-sdk/protocol';
+import type { DaemonConfig } from '../daemon/create-daemon';
+import type { OperationalHealthFixResult } from './types';
+import type { DiagnoseDeviceOptions } from './device-doctor';
+declare const MESSAGES: {
+    readonly 'confirmation-required': 'Explicit confirmation is required for this local maintenance action.';
+    readonly 'invalid-input': 'The maintenance action requires valid explicit inputs.';
+    readonly 'daemon-running': 'Stop the host daemon before local maintenance.';
+    readonly 'store-busy': 'Another operation owns the device store.';
+    readonly 'agent-busy': 'Another operation owns the Agent home.';
+    readonly 'target-mismatch': 'The stored device or Agent records do not match the authorized target.';
+    readonly 'source-unavailable': 'The local source cannot be accessed safely; preserve it for inspection.';
+    readonly 'output-exists': 'The selected output already exists; it will not be overwritten.';
+    readonly 'operation-failed': 'The maintenance operation did not complete; preserve evidence before retrying.';
+};
+export type DeviceOperatorErrorCode = keyof typeof MESSAGES;
+/** Closed codes only: never attach filesystem/OS error text, paths or nested causes. */
+export declare class DeviceOperatorError extends Error {
+    readonly code: DeviceOperatorErrorCode;
+    constructor(code: DeviceOperatorErrorCode);
+}
+export interface ConfirmDeviceMaintenanceInput {
+    confirmed: true;
+}
+export type DeviceHealthQuarantineResult = OperationalHealthFixResult & {
+    action: 'quarantine-operational-health';
+    scope: 'device';
+};
+export interface ExportDeviceSupportBundleInput extends DiagnoseDeviceOptions {
+    /** Absolute, previously unused file in an existing directory. */
+    outputPath: string;
+}
+export interface DeviceSupportBundleExportResult {
+    action: 'export-support-bundle';
+    scope: 'device';
+    status: 'written';
+    bundleVersion: 1;
+}
+export interface ArchiveAgentTerminalMessagesInput extends ConfirmDeviceMaintenanceInput {
+    expectedTenantId: string;
+    expectedDeviceId: string;
+    /** Selects one Agent home. Historical profile revisions are preserved verbatim. */
+    agentRef: AgentRef;
+    /** Absolute NEW directory in an existing parent; contains sensitive audit bodies. */
+    archiveDirectory: string;
+}
+export type AgentTerminalMessagesArchiveResult = {
+    action: 'archive-terminal-messages';
+    scope: 'agent';
+} & ({
+    status: 'not-needed';
+} | {
+    status: 'archived';
+    archivedRecords: number;
+    archiveFileName: string;
+});
+/** Quarantines confirmed-corrupt health only; the host owns supervisor stop/restart. */
+export declare function quarantineDeviceOperationalHealth(config: DaemonConfig, input: ConfirmDeviceMaintenanceInput): Promise<DeviceHealthQuarantineResult>;
+/** Read-only source observation; publishes only the SDK allowlisted bundle, never raw logs. */
+export declare function exportDeviceSupportBundle(config: DaemonConfig, input: ExportDeviceSupportBundleInput): Promise<DeviceSupportBundleExportResult>;
+/** Archive refused/revoked evidence for one Agent under device and Agent single-writer leases. */
+export declare function archiveAgentTerminalMessages(config: DaemonConfig, input: ArchiveAgentTerminalMessagesInput): Promise<AgentTerminalMessagesArchiveResult>;
+export {};

package/dist/diagnostics/types.d.ts

@@ -0,0 +1,92 @@
+import type { RuntimeDetectResult } from '../types';
+import type { ControlStatusResult } from '../daemon/control-protocol';
+import type { OperationalHealthFileInspection } from '../daemon/operational-health';
+export type DiagnosticStatus = 'pass' | 'warn' | 'fail';
+export interface DiagnosticCheck {
+    id: 'config' | 'device' | 'runtimes' | 'control' | 'health' | 'journal' | 'workspace' | 'quarantine';
+    status: DiagnosticStatus;
+    summary: string;
+}
+export interface DiagnosticsSnapshot {
+    version: 1;
+    generatedAt: string;
+    product: {
+        nameHash: string;
+        idHash: string;
+    };
+    system: {
+        node: string;
+        platform: NodeJS.Platform;
+        arch: string;
+        sqliteAvailable: boolean;
+    };
+    config: {
+        serverProtocol: 'http' | 'https' | 'ws' | 'wss' | 'invalid' | 'unsupported';
+        customStoreDir: boolean;
+        hostedJournal: boolean;
+        runtimeAllowlistCount?: number;
+    };
+    device: {
+        status: 'paired' | 'unpaired' | 'unavailable';
+        deviceIdHash?: string;
+    };
+    runtimes: Array<{
+        idHash: string;
+        present: boolean;
+        outcome: RuntimeDetectResult['kind'];
+        versionPresent: boolean;
+        authPresent?: boolean;
+        steer: boolean;
+        resume: boolean;
+        permissionModeCount: number;
+    }>;
+    control: {
+        status: 'offline';
+        reason: string;
+    } | {
+        status: 'online';
+        pid: number;
+        uptimeMs: number;
+        transport: string;
+        activeTaskCount: number;
+        pendingApprovalCount: number;
+        operationalHealth: ControlStatusResult['operationalHealth'];
+        storage?: ControlStatusResult['storage'];
+    };
+    health: OperationalHealthFileInspection;
+    journal: {
+        status: 'missing' | 'present' | 'corrupt' | 'unavailable';
+        sizeBytes?: number;
+        walBytes?: number;
+        integrity?: 'ok' | 'not-checked';
+        reason?: string;
+    };
+    workspace: {
+        status: 'available' | 'missing' | 'unavailable';
+        writable?: boolean;
+        reason?: string;
+    };
+    quarantine: {
+        status: 'available' | 'missing' | 'unavailable';
+        count: number;
+        scannedCount: number;
+        truncated: boolean;
+        entries: Array<{
+            nameHash: string;
+            sizeBytes: number;
+            modifiedAt: string;
+        }>;
+        reason?: string;
+    };
+    checks: DiagnosticCheck[];
+}
+export type OperationalHealthFixResult = {
+    status: 'not-needed';
+    reason: 'missing' | 'valid';
+} | {
+    status: 'quarantined';
+    evidenceName: string;
+    manifestName: string;
+    sha256: string;
+    sizeBytes: number;
+};

package/dist/index.d.ts

@@ -12,7 +12,7 @@ export { resolveLocalAgentReleaseIdentity } from './release-identity';
 export type { LocalAgentReleaseIdentity } from './release-identity';
 export { BYOK_SDK_HELPER_SUBCOMMAND, resolveSdkReservedHelperBin, runSdkReservedHelperCommand, } from './sdk-reserved-helper-host';
 export type { SdkHelperHostConfig, SdkReservedHelperKind, ResolvedSdkReservedHelperBin, } from './sdk-reserved-helper-host';
-export { RuntimeExecutionFailure, RuntimeDisposalFailure, RUNTIME_ADAPTER_CONTRACT_VIOLATION_REASON, isRuntimeDisposalFailure, isRuntimeExecutionFailure, projectRuntimeBoundaryFailure, projectRuntimeExecutionFailure, } from './runtime-failure';
+export { RuntimeExecutionFailure, RuntimeStartupDisposalFailure, isRuntimeStartupDisposalFailure, RuntimeDisposalFailure, RUNTIME_ADAPTER_CONTRACT_VIOLATION_REASON, isRuntimeDisposalFailure, isRuntimeExecutionFailure, projectRuntimeBoundaryFailure, projectRuntimeExecutionFailure, } from './runtime-failure';
 export type { RuntimeExecutionFailureInput, RuntimeDisposalFailureInput, RuntimeDisposalStage, RuntimeFailureCategory, RuntimeFailurePhase, RuntimeFailureProjection, RuntimeRetryDisposition, } from './runtime-failure';
 export { GitWorkspaceManager, GitWorkspaceError, isGitWorkspaceConfig, prependGitWorkspaceGuidance } from './daemon/git-workspace';
 export type { GitWorkspaceObservation, GitWorkspaceLease, GitWorkspaceOptions, GitErrorCategory } from './daemon/git-workspace';
@@ -82,3 +82,7 @@ export { PI_PACKAGE_NAME } from './adapters/pi/resolve-bin';
 export { ClaudeAdapter } from './adapters/claude/claude-adapter';
 export type { ClaudeAdapterOptions } from './adapters/claude/claude-adapter';
 export { CodexAdapter, type CodexAdapterOptions } from './adapters/codex/codex-adapter';
+export { diagnoseDevice, repairDeviceEnrollmentMetadata, DeviceMetadataRepairError } from './diagnostics/device-doctor';
+export type { DiagnoseDeviceOptions, DiagnosticsSnapshot, DiagnosticCheck, DiagnosticStatus, RepairDeviceEnrollmentMetadataInput, DeviceMetadataRepairResult, DeviceMetadataRepairErrorCode, } from './diagnostics/device-doctor';
+export { quarantineDeviceOperationalHealth, exportDeviceSupportBundle, archiveAgentTerminalMessages, DeviceOperatorError } from './diagnostics/operator-actions';
+export type { ConfirmDeviceMaintenanceInput, DeviceHealthQuarantineResult, ExportDeviceSupportBundleInput, DeviceSupportBundleExportResult, ArchiveAgentTerminalMessagesInput, AgentTerminalMessagesArchiveResult, DeviceOperatorErrorCode } from './diagnostics/operator-actions';