@byok-sdk/client 0.6.0 → 0.6.1

package/dist/adapters/pi/events.d.ts

@@ -1,7 +1,7 @@
 import type { AgentEvent } from '@byok-sdk/protocol';
 import type { PiRpcMessage } from './rpc-client';
 /**
- * Map pi 0.84.1 RPC frames into BYOK's runtime-neutral event contract.
+ * Map pi 0.84.2 RPC frames into BYOK's runtime-neutral event contract.
  *
  * `agent_settled` is the only whole-task completion authority. `agent_end`
  * ends one low-level agent run, but pi may still perform retry/compaction or

package/dist/adapters/pi/mcp-config.d.ts

@@ -0,0 +1 @@
+export declare const BYOK_PI_MCP_CONFIG_PATH = "BYOK_PI_MCP_CONFIG_PATH";

package/dist/adapters/pi/mcp-extension.js

@@ -0,0 +1,25 @@
+import { readFileSync } from 'fs';
+import { createMcpAdapter } from 'pi-mcp-adapter';
+
+// src/adapters/pi/mcp-extension.ts
+
+// src/adapters/pi/mcp-config.ts
+var BYOK_PI_MCP_CONFIG_PATH = "BYOK_PI_MCP_CONFIG_PATH";
+
+// src/adapters/pi/mcp-extension.ts
+function loadTaskScopedConfig() {
+  const configPath = process.env[BYOK_PI_MCP_CONFIG_PATH];
+  if (!configPath) {
+    throw new Error(`${BYOK_PI_MCP_CONFIG_PATH} is required for the BYOK Pi MCP extension`);
+  }
+  const parsed = JSON.parse(readFileSync(configPath, "utf8"));
+  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed) || !Object.prototype.hasOwnProperty.call(parsed, "mcpServers") || parsed.mcpServers === null || typeof parsed.mcpServers !== "object" || Array.isArray(parsed.mcpServers)) {
+    throw new Error("BYOK Pi MCP configuration must contain an mcpServers object");
+  }
+  return parsed;
+}
+var mcp_extension_default = createMcpAdapter({ config: loadTaskScopedConfig() });
+
+export { mcp_extension_default as default };
+//# sourceMappingURL=mcp-extension.js.map
+//# sourceMappingURL=mcp-extension.js.map

package/dist/adapters/pi/mcp-extension.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/adapters/pi/mcp-config.ts","../../../src/adapters/pi/mcp-extension.ts"],"names":[],"mappings":";;;;;;AAAO,IAAM,uBAAA,GAA0B,yBAAA;;;ACKvC,SAAS,oBAAA,GAAkC;AACzC,EAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,GAAA,CAAI,uBAAuB,CAAA;AACtD,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,EAAG,uBAAuB,CAAA,0CAAA,CAA4C,CAAA;AAAA,EACxF;AAEA,EAAA,MAAM,SAAS,IAAA,CAAK,KAAA,CAAM,YAAA,CAAa,UAAA,EAAY,MAAM,CAAC,CAAA;AAC1D,EAAA,IACE,MAAA,KAAW,IAAA,IACX,OAAO,MAAA,KAAW,QAAA,IAClB,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,IACpB,CAAC,MAAA,CAAO,SAAA,CAAU,cAAA,CAAe,IAAA,CAAK,MAAA,EAAQ,YAAY,CAAA,IACzD,MAAA,CAAoC,UAAA,KAAe,IAAA,IACpD,OAAQ,MAAA,CAAoC,UAAA,KAAe,QAAA,IAC3D,KAAA,CAAM,OAAA,CAAS,MAAA,CAAoC,UAAU,CAAA,EAC7D;AACA,IAAA,MAAM,IAAI,MAAM,6DAA6D,CAAA;AAAA,EAC/E;AACA,EAAA,OAAO,MAAA;AACT;AAIA,IAAO,wBAAQ,gBAAA,CAAiB,EAAE,MAAA,EAAQ,oBAAA,IAAwB","file":"mcp-extension.js","sourcesContent":["export const BYOK_PI_MCP_CONFIG_PATH = 'BYOK_PI_MCP_CONFIG_PATH';\n","import { readFileSync } from 'node:fs';\nimport { createMcpAdapter } from 'pi-mcp-adapter';\nimport type { McpConfig } from 'pi-mcp-adapter/types';\nimport { BYOK_PI_MCP_CONFIG_PATH } from './mcp-config';\n\nfunction loadTaskScopedConfig(): McpConfig {\n  const configPath = process.env[BYOK_PI_MCP_CONFIG_PATH];\n  if (!configPath) {\n    throw new Error(`${BYOK_PI_MCP_CONFIG_PATH} is required for the BYOK Pi MCP extension`);\n  }\n\n  const parsed = JSON.parse(readFileSync(configPath, 'utf8')) as unknown;\n  if (\n    parsed === null ||\n    typeof parsed !== 'object' ||\n    Array.isArray(parsed) ||\n    !Object.prototype.hasOwnProperty.call(parsed, 'mcpServers') ||\n    (parsed as { mcpServers?: unknown }).mcpServers === null ||\n    typeof (parsed as { mcpServers?: unknown }).mcpServers !== 'object' ||\n    Array.isArray((parsed as { mcpServers?: unknown }).mcpServers)\n  ) {\n    throw new Error('BYOK Pi MCP configuration must contain an mcpServers object');\n  }\n  return parsed as McpConfig;\n}\n\n// Supplying `config` is pi-mcp-adapter's isolated SDK mode: it deliberately\n// does not merge ~/.config/mcp, .mcp.json, Pi settings, imports, or argv.\nexport default createMcpAdapter({ config: loadTaskScopedConfig() });\n"]}

package/dist/adapters/pi/permission-mapping.d.ts

@@ -8,7 +8,7 @@ export interface PiPermissionMapping {
 }
 /**
  * Map an effective {@link PermissionPolicy} to `pi --mode rpc` CLI args,
- * fail-closed against the exact pi 0.84.1 CLI contract:
+ * fail-closed against the exact pi 0.84.2 CLI contract:
  *
  * - `auto` / `readonly` are expressible via `--tools` / `--no-tools`.
  * - `confirm` and `plan` are NOT expressible: pi ships no built-in per-call

package/dist/adapters/pi/pi-adapter.d.ts

@@ -1,5 +1,6 @@
 import { type RuntimeAdapter, type RuntimeDetectResult, type RuntimeAdapterPrepareInput, type RuntimeAdapterPrepareResult } from '../../types';
 import { type ResolvedBin } from './resolve-bin';
+import { type ResolvedPiExtensions } from './resolve-extensions';
 import { type SpawnFn } from './rpc-client';
 /**
  * Known provider credential env var *names* (never values) — see the
@@ -13,6 +14,8 @@ export interface PiAdapterOptions {
     resolveBin?: () => ResolvedBin;
     /** Override process spawning — tests substitute a fake spawn. */
     spawnFn?: SpawnFn;
+    /** Override bundled extension resolution — tests use stable fixture paths. */
+    resolveExtensions?: () => ResolvedPiExtensions;
     /**
      * Separate-process BYOK credential boundary. The launcher receives only
      * non-secret selection/config paths, resolves the OS credential itself,
@@ -26,8 +29,10 @@ export interface PiByokLauncherConfig {
     args?: string[];
     profileDbPath: string;
     sessionDir: string;
+    macosKeychainPath?: string;
     secretServicePrefix?: string;
 }
+export declare function validatePiByokLauncherConfig(launcher: PiByokLauncherConfig | undefined): void;
 export declare class PiAdapter implements RuntimeAdapter {
     private readonly options;
     readonly descriptor: import("..").RuntimeAdapterDescriptor;

package/dist/adapters/pi/resolve-extensions.d.ts

@@ -0,0 +1,11 @@
+export interface ResolvedPiExtensions {
+    readonly webAccess: string;
+    readonly mcpAdapter: string;
+}
+/**
+ * Resolve the two Pi extensions shipped as required `@byok-sdk/client`
+ * dependencies. Pi receives explicit extension paths so runtime behavior is
+ * pinned to this package graph rather than a user's mutable global Pi package
+ * settings.
+ */
+export declare function resolvePiExtensions(): ResolvedPiExtensions;

package/dist/agent-home.d.ts

@@ -0,0 +1,106 @@
+import { type AgentRef } from '@byok-sdk/protocol';
+export type { AgentRef } from '@byok-sdk/protocol';
+export declare const AGENT_HOME_DIRECTORY = "agents";
+export declare const AGENT_HOME_INTERNAL_DIRECTORY = ".byok";
+export declare class AgentHomeError extends Error {
+    constructor(message: string);
+}
+export declare class AgentRefValidationError extends AgentHomeError {
+    constructor(message: string);
+}
+export declare class AgentHomeResolutionError extends AgentHomeError {
+    constructor(message: string);
+}
+export declare class AgentHomeCollisionError extends AgentHomeResolutionError {
+    constructor(message: string);
+}
+export declare class AgentHomeBusyError extends AgentHomeError {
+    constructor(message: string);
+}
+/** A malformed persisted lease is integrity failure, never retryable contention. */
+export declare class AgentHomeLeaseCorruptError extends AgentHomeResolutionError {
+    constructor(message: string);
+}
+export interface AgentHomeResolution {
+    readonly agentRef: AgentRef;
+    /** Absolute branded storage root supplied by the host, after realpath. */
+    readonly hostStorageRoot: string;
+    /** SDK-owned `<hostStorageRoot>/agents` authority, after realpath. */
+    readonly agentsRoot: string;
+    /** Canonical absolute Agent home. This is also the runtime cwd. */
+    readonly homeDir: string;
+    readonly canonicalHome: string;
+}
+export interface AgentHomeProjectionInput extends AgentHomeResolution {
+    readonly cwd: string;
+}
+/**
+ * Optional downstream projection hook. The SDK supplies the canonical home;
+ * the host supplies opaque, redacted product content and never joins
+ * `agents/<agentId>` itself. The SDK does not parse the projected content.
+ */
+export interface AgentHomeProjection {
+    prepare(input: AgentHomeProjectionInput): void | Promise<void>;
+}
+export type AgentHomeProjectionFunction = (input: AgentHomeProjectionInput) => void | Promise<void>;
+export interface AgentHomeLease {
+    readonly leaseId: string;
+    readonly agentRef: AgentRef;
+    readonly canonicalHome: string;
+    readonly cwd: string;
+    release(): Promise<void>;
+}
+export interface AgentHomeBinding {
+    readonly resolution: AgentHomeResolution;
+    readonly lease: AgentHomeLease;
+}
+export declare function validateAgentRef(value: unknown): AgentRef;
+/**
+ * SDK-owned deterministic Agent-home layout. The downstream supplies exactly
+ * one absolute branded storage root; there is deliberately no host path
+ * resolver and no second workspace authority.
+ */
+export declare class AgentHomeLayout {
+    private readonly hostStorageRootInput;
+    private readonly agentIdByCanonicalHome;
+    private canonicalRoot?;
+    constructor(hostStorageRoot: string);
+    resolve(agentRefInput: AgentRef): Promise<AgentHomeResolution>;
+    /**
+     * Prove the canonical root is materializable and writable before the daemon
+     * advertises Agent-home capability. No Agent identity or persistent Agent
+     * file is created by this preflight.
+     */
+    preflight(): Promise<void>;
+    private resolveRoot;
+}
+export declare function stableAgentHomeOwnerId(storeDir: string, productId: string): string;
+/** One-writer lease backed by both a process registry and an exclusive marker. */
+export declare class AgentHomeLeaseManager {
+    private static readonly held;
+    private readonly ownerId;
+    constructor(options?: {
+        ownerId?: string;
+    });
+    acquire(resolution: AgentHomeResolution): Promise<AgentHomeLease>;
+    private openLeaseMarker;
+}
+/** Coordinates SDK-owned initialization, optional projection, and the lease. */
+export declare class AgentHomeManager {
+    readonly layout: AgentHomeLayout;
+    readonly projection?: AgentHomeProjection;
+    readonly leaseManager: AgentHomeLeaseManager;
+    constructor(options: {
+        hostStorageRoot: string;
+        projection?: AgentHomeProjection;
+        leaseManager?: AgentHomeLeaseManager;
+    });
+    prepare(agentRef: AgentRef): Promise<AgentHomeBinding>;
+    /** Validate the configured root before capability publication. */
+    preflight(): Promise<void>;
+    /** Resolve and lease without applying downstream projection side effects. */
+    acquire(agentRef: AgentRef): Promise<AgentHomeBinding>;
+    /** Initialize only after any requested session exact-match has succeeded. */
+    initialize(binding: AgentHomeBinding): Promise<void>;
+}
+export declare function createAgentHomeProjection(prepare: AgentHomeProjectionFunction): AgentHomeProjection;