@byok-sdk/client 0.17.0 → 0.18.0

package/dist/daemon/agent-egress-sanitizer.d.ts

@@ -33,6 +33,8 @@ export type SanitizedEnvelope = Readonly<{
  */
 export declare function sanitizeEgressEnvelope(envelope: Envelope, policy: Readonly<AgentEgressPolicy>, sanitizer: AgentEgressSanitizer | undefined, context?: Omit<AgentEgressSanitizerContext, 'lane' | 'policyRevision' | 'envelopeType'> & {
     lane?: 'latest-value' | 'reliable';
+    /** Set only from the active task's frozen terminalProjection, never payload inference. */
+    resultDocumentSelected?: boolean;
 }): SanitizedEnvelope;
 /** Sanitizes a reliable payload before it is hashed/appended, never after. */
 export declare function sanitizeReliablePayload(payload: unknown, policy: Readonly<AgentEgressPolicy>, sanitizer: AgentEgressSanitizer | undefined, context?: Omit<AgentEgressSanitizerContext, 'lane' | 'policyRevision'>): unknown;

package/dist/daemon/task-runner.d.ts

@@ -584,6 +584,8 @@ export declare class TaskRunner {
      * egress contract must never reclassify their existing wire semantics.
      */
     usesAgentEgress(taskId: string): boolean;
+    /** Frozen offer authority for the outbound result-document lane. */
+    selectsResultDocument(taskId: string): boolean;
     /** M5 batch-3 (workstream 2): effective `maxTaskOutputBytes` cap for this daemon — see {@link DEFAULT_MAX_TASK_OUTPUT_BYTES}'s own doc comment. */
     private get maxTaskOutputBytes();
     /** Effective per-event inline ceiling for this daemon — see `DaemonConfig.maxInlineEventBytes`. */

package/dist/index.js

@@ -4019,13 +4019,13 @@ function classifyDetectError(error) {
   if (code === "EACCES" || code === "EPERM" || code === "ENOEXEC") return { kind: "not-executable" };
   return { kind: "probe-failed" };
 }
-async function probeRuntimeVersion(command, timeoutMs) {
+async function probeRuntimeVersion(command, timeoutMs, prefixArgs = []) {
   if (!Number.isSafeInteger(timeoutMs) || timeoutMs <= 0) throw new TypeError("invalid runtime probe timeout");
   return new Promise((resolve) => {
     let timer;
     let timedOut = false;
     try {
-      const child = execFile(command, ["--version"], { encoding: "utf8" }, (error, stdout, stderr) => {
+      const child = execFile(command, [...prefixArgs, "--version"], { encoding: "utf8" }, (error, stdout, stderr) => {
         if (timer) clearTimeout(timer);
         if (error?.code === "ERR_CHILD_PROCESS_STDIO_MAXBUFFER") resolve({ kind: "probe-failed" });
         else if (timedOut) resolve({ kind: "timeout" });
@@ -4959,6 +4959,9 @@ function withoutProviderCredentials(env) {
 // src/adapters/pi/pi-adapter.ts
 var execFileAsync = promisify(execFile);
 var DETECT_TIMEOUT_MS = 5e3;
+function piInvocation(bin) {
+  return bin.source === "package" ? { command: process.execPath, entry: bin.command } : { command: bin.command };
+}
 function errorMessage3(err) {
   return err instanceof Error ? err.message : String(err);
 }
@@ -5007,6 +5010,7 @@ function validatePiByokLauncherConfig(launcher) {
   const reserved = /* @__PURE__ */ new Set([
     "--",
     "--pi-bin",
+    "--pi-entry",
     "--profile-db",
     "--session-dir",
     "--macos-keychain-path",
@@ -5055,7 +5059,12 @@ var PiAdapter = class {
   async detect() {
     try {
       const bin = this.resolveBin();
-      const probe = await probeRuntimeVersion(bin.command, DETECT_TIMEOUT_MS);
+      const invocation = piInvocation(bin);
+      const probe = await probeRuntimeVersion(
+        invocation.command,
+        DETECT_TIMEOUT_MS,
+        invocation.entry === void 0 ? [] : [invocation.entry]
+      );
       if (probe.kind !== "available") return probe;
       const version = probe.stdout.trim() || probe.stderr.trim();
       const authPresent = PROVIDER_CREDENTIAL_ENV_NAMES.some((name) => process.env[name] !== void 0);
@@ -5086,7 +5095,8 @@ var PiAdapter = class {
         requiredCapabilities: Object.freeze([...selection.providerProfile.requiredCapabilities])
       })
     }) : Object.freeze({ ...selection });
-    let command = bin.command;
+    const invocation = piInvocation(bin);
+    let command = invocation.command;
     let launcherArgs;
     if (pinnedSelection !== void 0) {
       if (pinnedSelection.lane !== "byok" && pinnedSelection.lane !== "byok-profile" || pinnedSelection.runtimeId !== "pi") {
@@ -5115,7 +5125,8 @@ var PiAdapter = class {
       launcherArgs = [
         ...launcher.args ?? [],
         "--pi-bin",
-        bin.command,
+        invocation.command,
+        ...invocation.entry === void 0 ? [] : ["--pi-entry", invocation.entry],
         "--profile-db",
         launcher.profileDbPath,
         "--session-dir",
@@ -5209,7 +5220,7 @@ var PiAdapter = class {
             ...resumeSessionId ? ["--session", resumeSessionId] : [],
             ...mapping.args
           ];
-          const args = launcherArgs === void 0 ? piArgs : [...launcherArgs, "--", ...piArgs];
+          const args = launcherArgs === void 0 ? [...invocation.entry === void 0 ? [] : [invocation.entry], ...piArgs] : [...launcherArgs, "--", ...piArgs];
           let rpc;
           try {
             rpc = new PiRpcClient({
@@ -15578,6 +15589,10 @@ var TaskRunner = class {
   usesAgentEgress(taskId) {
     return this.tasks.get(taskId)?.egressEnabled === true;
   }
+  /** Frozen offer authority for the outbound result-document lane. */
+  selectsResultDocument(taskId) {
+    return this.tasks.get(taskId)?.terminalProjection?.mode === "result-document";
+  }
   /** M5 batch-3 (workstream 2): effective `maxTaskOutputBytes` cap for this daemon — see {@link DEFAULT_MAX_TASK_OUTPUT_BYTES}'s own doc comment. */
   get maxTaskOutputBytes() {
     return this.deps.maxTaskOutputBytes ?? DEFAULT_MAX_TASK_OUTPUT_BYTES;
@@ -18681,7 +18696,7 @@ function cloneJson(value) {
 function asRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
-function contentlessPayload(envelope) {
+function contentlessPayload(envelope, resultDocumentSelected) {
   const payload = cloneJson(envelope.payload);
   const record3 = asRecord(payload);
   if (!record3) return payload;
@@ -18695,7 +18710,7 @@ function contentlessPayload(envelope) {
     }
     case "task.complete":
       if (typeof record3.summary === "string") record3.summary = "[content omitted]";
-      delete record3.document;
+      if (!resultDocumentSelected) delete record3.document;
       return record3;
     case "task.fail":
     case "task.decline":
@@ -18726,7 +18741,7 @@ function applyHostSanitizer(value, sanitizer, context) {
 }
 function sanitizeEgressEnvelope(envelope, policy, sanitizer, context = {}) {
   try {
-    const payload = policy.activity.mode === "metadata-status" ? contentlessPayload(envelope) : cloneJson(envelope.payload);
+    const payload = policy.activity.mode === "metadata-status" ? contentlessPayload(envelope, context.resultDocumentSelected === true) : cloneJson(envelope.payload);
     if (payload === void 0) return { ok: false, reason: "policy_denied" };
     const sanitizedPayload = applyHostSanitizer(payload, sanitizer, {
       lane: context.lane ?? "latest-value",
@@ -20626,7 +20641,9 @@ function buildDaemonWithAdapters(config, adapters, overrides = {}, assertionProb
           sendSanitizedEnvelope(candidate);
           return;
         }
-        const sanitized = sanitizeEgressEnvelope(candidate, egressPolicy, config.agentEgress?.sanitizer);
+        const sanitized = sanitizeEgressEnvelope(candidate, egressPolicy, config.agentEgress?.sanitizer, {
+          resultDocumentSelected: runner.selectsResultDocument(candidate.task_id)
+        });
         if (!sanitized.ok) {
           agentEgress.noteTransportDrop(sanitized.reason);
           return;