@byok-sdk/client 0.4.2 → 0.5.0

package/dist/daemon/create-daemon.d.ts

@@ -11,7 +11,7 @@ import { type LocalTaskJournal } from './journal/journal';
 import { type JournalOpenFaultSeam } from './journal/sqlite-support';
 import { LocalStoragePressureEngine, type LocalStoragePolicyInput } from './journal/storage-policy';
 import { type ResultDocumentExtractor } from './task-runner';
-import type { ProgressBatcherOptions } from './progress-batcher';
+import { type ProgressBatcherOptions } from './progress-batcher';
 /**
  * Optional white-label product display info — purely opaque passthrough
  * (never interpreted, validated, or rendered by the daemon itself). Carried
@@ -223,6 +223,14 @@ export interface DaemonConfig {
      * explicitly instead to opt out of enforcement altogether.
      */
     maxTaskOutputBytes?: number;
+    /**
+     * Host-owned batching policy for normalized `task.progress` events.
+     * `maxBatchBytes`, when set, measures exactly the UTF-8 bytes of
+     * `JSON.stringify(events)` and must match the deployment's activity-ingress
+     * budget. It is deliberately unset by default because that ingress ceiling
+     * is deployment policy, not a frozen protocol constant.
+     */
+    progressBatch?: ProgressBatcherOptions;
     /**
      * additive-minor (`task.complete.document`): the seam through which this
      * product turns a finished task's final output text into the STRUCTURED
@@ -415,7 +423,6 @@ export interface Daemon {
 /** Internal seam so tests can substitute stub adapters / faster backoff+batch+liveness+long-poll timing. `createDaemonWithAdapters` (which takes this) is also the real entry point for products supplying a hand-built adapter set `createDaemon` can't construct on its own — e.g. custom adapter options, or an adapter that REPLACES a bundled runtime's implementation under the same id. Honest limit: an adapter id outside `pi`/`claude`/`codex` cannot pass wire validation today — `RuntimeIdSchema` (`@byok-sdk/protocol`) is a closed `z.enum(['pi', 'claude', 'codex'])`, and `isRuntimeId` filtering below (see `detectRuntimes`) drops any detected adapter outside that set before it ever reaches a wire-visible field. A genuinely fourth/namespaced runtime id is a future protocol change, not something this seam enables today. */
 export interface DaemonOverrides {
     backoff?: BackoffOptions;
-    batch?: ProgressBatcherOptions;
     liveness?: LivenessOptions;
     /** M4 Phase 3: overrides `TaskRunner`'s default out-of-band approval wait (`DEFAULT_APPROVAL_TIMEOUT_MS`, 10 minutes) before an unanswered `requestApproval` force-resolves as a fail-closed rejection. */
     approvalTimeoutMs?: number;

package/dist/daemon/progress-batcher.d.ts

@@ -5,7 +5,19 @@ export interface ProgressBatcherOptions {
     maxBatchSize?: number;
     /** Otherwise flush at most this often (ms) while events are pending. Default 250 (~4/sec). */
     flushIntervalMs?: number;
+    /**
+     * Optional deployment-owned ceiling for the UTF-8 bytes in the serialized
+     * `events[]` array. Unset means no byte ceiling; hosts should inject the
+     * same value their activity ingress enforces.
+     */
+    maxBatchBytes?: number;
 }
+export declare class ProgressEventTooLargeError extends Error {
+    readonly actualBytes: number;
+    readonly maxBatchBytes: number;
+    constructor(actualBytes: number, maxBatchBytes: number);
+}
+export declare function validateProgressBatcherOptions(options?: ProgressBatcherOptions): void;
 /**
  * Coalesces a task's `AgentEvent`s into seq-ordered `task.progress` batches:
  * flush immediately at `maxBatchSize` events, otherwise at most every
@@ -19,6 +31,7 @@ export declare class ProgressBatcher {
     private timer;
     private readonly maxBatchSize;
     private readonly flushIntervalMs;
+    private readonly maxBatchBytes;
     constructor(emit: ProgressEmitter, options?: ProgressBatcherOptions);
     push(event: AgentEvent): void;
     /** M4 Phase 4 (part B.3, observability): events buffered right now, not yet flushed as a `task.progress` batch — a cheap per-task queue-depth watermark for the daemon's control-socket `status` result (see `task-runner.ts`'s `getQueueWatermarks`). */

package/dist/daemon/task-runner.d.ts

@@ -102,6 +102,8 @@ export declare const MAX_TRACKED_TASK_IDS = 2000;
 export declare const MAX_DURATION_EXCEEDED_REASON_PREFIX = "resource limit exceeded: maxDurationMs";
 /** M5 batch-3 (workstream 2): same contract as {@link MAX_DURATION_EXCEEDED_REASON_PREFIX}, for `DaemonConfig.maxTaskOutputBytes` — see `TaskRunner.pump`'s own per-event byte counting. */
 export declare const MAX_OUTPUT_BYTES_EXCEEDED_REASON_PREFIX = "resource limit exceeded: maxTaskOutputBytes";
+/** Stable fail-closed reason for one normalized event that cannot fit the configured activity batch budget. */
+export declare const MAX_PROGRESS_BATCH_BYTES_EXCEEDED_REASON_PREFIX = "resource limit exceeded: progressBatch.maxBatchBytes";
 /**
  * additive-minor (`task.complete.document`): same stable-PREFIX contract as
  * {@link MAX_DURATION_EXCEEDED_REASON_PREFIX} above, carried by every

package/dist/index.d.ts

@@ -9,6 +9,7 @@ export { GitWorkspaceStore } from './daemon/git-workspace-store';
 export type { GitWorkspaceLedger, GitWorkspaceLedgerRecord, GitWorkspacePhase } from './daemon/git-workspace-store';
 export { createDaemon, createDaemonWithAdapters } from './daemon/create-daemon';
 export type { Daemon, DaemonConfig, DaemonStatus, DaemonOverrides, DaemonBranding, HostedJournalConfig, DeviceAssertionConfig } from './daemon/create-daemon';
+export type { ProgressBatcherOptions } from './daemon/progress-batcher';
 /**
  * Plan `device-assertion-broker`: the ONLY control-socket capability this
  * package exposes publicly. `connectControlClient`/`ControlClient` are

package/dist/index.js

@@ -8188,6 +8188,11 @@ function createStatfsFreeBytesProvider(dir) {
 var BASE_PLATFORM_ALLOWLIST = [
   "PATH",
   "HOME",
+  // macOS credential-store discovery used by subscription-authenticated
+  // agent CLIs depends on the login account name as well as HOME. Omitting
+  // USER makes `claude auth status` report logged out under the filtered
+  // child environment even when the host CLI is logged in.
+  "USER",
   "USERPROFILE",
   "TMPDIR",
   "TEMP",
@@ -8295,11 +8300,37 @@ function computeEffectivePolicy(offered, ceiling) {
 }
 
 // src/daemon/progress-batcher.ts
+var ProgressEventTooLargeError = class extends Error {
+  constructor(actualBytes, maxBatchBytes) {
+    super(`Progress event requires ${actualBytes} UTF-8 bytes, exceeding maxBatchBytes ${maxBatchBytes}.`);
+    this.actualBytes = actualBytes;
+    this.maxBatchBytes = maxBatchBytes;
+    this.name = "ProgressEventTooLargeError";
+  }
+  actualBytes;
+  maxBatchBytes;
+};
+var encoder = new TextEncoder();
+function assertPositiveSafeInteger(value, name) {
+  if (value !== void 0 && (!Number.isSafeInteger(value) || value <= 0)) {
+    throw new TypeError(`${name} must be a positive safe integer when configured.`);
+  }
+}
+function validateProgressBatcherOptions(options = {}) {
+  assertPositiveSafeInteger(options.maxBatchSize, "maxBatchSize");
+  assertPositiveSafeInteger(options.flushIntervalMs, "flushIntervalMs");
+  assertPositiveSafeInteger(options.maxBatchBytes, "maxBatchBytes");
+}
+function encodedEventsBytes(events) {
+  return encoder.encode(JSON.stringify(events)).length;
+}
 var ProgressBatcher = class {
   constructor(emit, options = {}) {
     this.emit = emit;
+    validateProgressBatcherOptions(options);
     this.maxBatchSize = options.maxBatchSize ?? 10;
     this.flushIntervalMs = options.flushIntervalMs ?? 250;
+    this.maxBatchBytes = options.maxBatchBytes;
   }
   emit;
   buffer = [];
@@ -8307,7 +8338,17 @@ var ProgressBatcher = class {
   timer;
   maxBatchSize;
   flushIntervalMs;
+  maxBatchBytes;
   push(event) {
+    if (this.maxBatchBytes !== void 0) {
+      const eventBytes = encodedEventsBytes([event]);
+      if (eventBytes > this.maxBatchBytes) {
+        throw new ProgressEventTooLargeError(eventBytes, this.maxBatchBytes);
+      }
+      if (this.buffer.length > 0 && encodedEventsBytes([...this.buffer, event]) > this.maxBatchBytes) {
+        this.flush();
+      }
+    }
     this.buffer.push(event);
     if (this.buffer.length >= this.maxBatchSize) {
       this.flush();
@@ -8360,6 +8401,7 @@ var MAX_INLINE_ARTIFACT_BYTES = 64 * 1024;
 var MAX_TRACKED_TASK_IDS = 2e3;
 var MAX_DURATION_EXCEEDED_REASON_PREFIX = "resource limit exceeded: maxDurationMs";
 var MAX_OUTPUT_BYTES_EXCEEDED_REASON_PREFIX = "resource limit exceeded: maxTaskOutputBytes";
+var MAX_PROGRESS_BATCH_BYTES_EXCEEDED_REASON_PREFIX = "resource limit exceeded: progressBatch.maxBatchBytes";
 var RESULT_DOCUMENT_UNDELIVERABLE_REASON_PREFIX = "result document undeliverable";
 function resultDocumentRejectionDetail(check) {
   switch (check.reason) {
@@ -9216,6 +9258,13 @@ var TaskRunner = class {
     } catch (err) {
       if (this.tasks.get(active.taskId) !== active || active.beingTornDown) return;
       active.batcher.flush();
+      if (err instanceof ProgressEventTooLargeError) {
+        await this.failActiveTaskForResourceLimit(
+          active.taskId,
+          `${MAX_PROGRESS_BATCH_BYTES_EXCEEDED_REASON_PREFIX}: event requires ${err.actualBytes} UTF-8 bytes, exceeding the configured limit of ${err.maxBatchBytes} bytes`
+        );
+        return;
+      }
       const failure = projectRuntimeBoundaryFailure(err, "run");
       if (failure.contractViolation) {
         console.error("[byok/client] runtime adapter events iterable returned an untyped failure", err);
@@ -10302,6 +10351,7 @@ function buildDaemonWithAdapters(config, adapters, overrides = {}, assertionProb
       `DaemonConfig.maxTaskOutputBytes must be a positive number (or omitted to use the ${DEFAULT_MAX_TASK_OUTPUT_BYTES}-byte default) \u2014 got ${config.maxTaskOutputBytes}. Pass Number.POSITIVE_INFINITY to explicitly disable the cap; 0 or a negative number is rejected rather than silently treated as "disabled".`
     );
   }
+  validateProgressBatcherOptions(config.progressBatch);
   const presenceCadence = {
     intervalMs: config.presence?.intervalMs ?? DEFAULT_PRESENCE_HEARTBEAT_INTERVAL_MS,
     ttlMs: config.presence?.ttlMs ?? DEFAULT_PRESENCE_TTL_MS,
@@ -10587,7 +10637,7 @@ function buildDaemonWithAdapters(config, adapters, overrides = {}, assertionProb
         // untouched. See `observer.ts`'s module doc comment.
         send: sendEnvelope,
         blobClient,
-        batcherOptions: overrides.batch,
+        batcherOptions: config.progressBatch,
         sessionWorkspaces,
         gitWorkspaceManager,
         gitWorkspaceStore,