@byok-sdk/client 0.7.0 → 0.8.0-beta.0

package/dist/daemon/create-daemon.d.ts

@@ -372,8 +372,11 @@ export interface AgentContentReadConfig {
 export interface AgentReliableEgressInput {
     agentRef: AgentRef;
     sessionRef: string;
+    /** Exact runtime identity from the durable Agent-home handoff. */
+    runtimeId: string;
+    /** Exact task identity from the same durable Agent-home handoff. */
+    taskId: string;
     payload: unknown;
-    taskId?: string;
     eventId?: string;
 }
 /**

package/dist/daemon/task-runner.d.ts

@@ -1,4 +1,4 @@
-import { type AgentEgressPolicy, type Envelope, type PermissionPolicy, type RuntimeId, type TaskOfferPayload, type TaskOfferForAgentPayload, type TaskOfferForAgentWithEgressPayload, type TaskOfferWithToolsetsPayload } from '@byok-sdk/protocol';
+import { type AgentEgressPolicy, type Envelope, type PermissionPolicy, type RuntimeId, type TaskOfferPayload, type TaskOfferForAgentPayload, type TaskOfferForAgentWithEgressPayload, type TaskOfferForAgentWithEgressFreshPayload, type TaskOfferWithToolsetsPayload } from '@byok-sdk/protocol';
 import { type McpToolsetConfig, type RuntimeAdapter } from '../types';
 import { AgentHomeManager, type AgentRef } from '../agent-home';
 import { AgentSessionHandoffStore, type AgentTerminalCause } from './agent-session-handoff-store';
@@ -366,7 +366,7 @@ export type AdmissionGuardDecision = {
     readonly reason: string;
     readonly retryable: boolean;
 };
-type AcceptedOfferPayload = TaskOfferPayload | TaskOfferWithToolsetsPayload | TaskOfferForAgentPayload | TaskOfferForAgentWithEgressPayload;
+type AcceptedOfferPayload = TaskOfferPayload | TaskOfferWithToolsetsPayload | TaskOfferForAgentPayload | TaskOfferForAgentWithEgressPayload | TaskOfferForAgentWithEgressFreshPayload;
 /**
  * Per-connection task orchestration: offer -> (decline | prepare -> seal ->
  * claim -> prepared operation -> started) -> seq-ordered progress batches -> complete/fail/

package/dist/index.js

@@ -1,7 +1,7 @@
 import { randomUUID, createHash, sign, createPrivateKey, generateKeyPairSync, randomBytes, timingSafeEqual, createHmac } from 'crypto';
 import { promises, mkdirSync, existsSync, renameSync, writeFileSync, chmodSync, statSync, readdirSync, linkSync, fstatSync, lstatSync, unlinkSync, constants, readFileSync, realpathSync } from 'fs';
 import path, { join, isAbsolute } from 'path';
-import { AGENT_CONTENT_ARTIFACT_READ_CAPABILITY, AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY, AGENT_CONTENT_WORKSPACE_READ_CAPABILITY, AgentRefSchema, BYOK_PAIR_PATH, PairResponseSchema, BYOK_CHALLENGE_PATH, BYOK_TOKEN_PATH, byokBlobUrlPath, BYOK_BLOBS_PATH, byokBlobFinalizePath, partitionAgentEvents, BYOK_SKILL_PACKS_PATH, byokSkillPackFilePath, BYOK_RECORDS_PATH, byokRecordPath, TASK_TRANSITIONS, AgentEgressPolicySchema, CONFIGURED_TOOLSETS_MAX_ITEMS, ToolsetIdSchema, AgentContentReceiptPayloadSchema, encodeEnvelope, PROTOCOL_VERSION, createEnvelope, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY, AGENT_EGRESS_POLICY_CAPABILITY, parseMessage, checkResultDocument, MAX_MESSAGES_PER_BATCH, BYOK_CAPABILITIES_PATH, BYOK_PRESENCE_PATH, RuntimeIdSchema, TERMINAL_INFERENCE_USAGE_MAX_DURATION_MS, TERMINAL_INFERENCE_USAGE_MAX_TOKENS, RESULT_DOCUMENT_MAX_BYTES, decodeEnvelope, BYOK_EVENTS_PATH, BYOK_MESSAGES_PATH, MessagesSendResponseSchema, UnknownMessageTypeError, BYOK_WS_PATH } from '@byok-sdk/protocol';
+import { AGENT_CONTENT_ARTIFACT_READ_CAPABILITY, AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY, AGENT_CONTENT_WORKSPACE_READ_CAPABILITY, AgentRefSchema, BYOK_PAIR_PATH, PairResponseSchema, BYOK_CHALLENGE_PATH, BYOK_TOKEN_PATH, byokBlobUrlPath, BYOK_BLOBS_PATH, byokBlobFinalizePath, partitionAgentEvents, BYOK_SKILL_PACKS_PATH, byokSkillPackFilePath, BYOK_RECORDS_PATH, byokRecordPath, TASK_TRANSITIONS, AgentEgressPolicySchema, CONFIGURED_TOOLSETS_MAX_ITEMS, ToolsetIdSchema, AgentContentReceiptPayloadSchema, encodeEnvelope, PROTOCOL_VERSION, createEnvelope, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY, AGENT_EGRESS_POLICY_CAPABILITY, AGENT_EGRESS_FRESH_SESSION_CAPABILITY, parseMessage, checkResultDocument, MAX_MESSAGES_PER_BATCH, BYOK_CAPABILITIES_PATH, BYOK_PRESENCE_PATH, RuntimeIdSchema, TERMINAL_INFERENCE_USAGE_MAX_DURATION_MS, TERMINAL_INFERENCE_USAGE_MAX_TOKENS, RESULT_DOCUMENT_MAX_BYTES, decodeEnvelope, BYOK_EVENTS_PATH, BYOK_MESSAGES_PATH, MessagesSendResponseSchema, UnknownMessageTypeError, BYOK_WS_PATH } from '@byok-sdk/protocol';
 import { execFile, spawn } from 'child_process';
 import os6 from 'os';
 import { parseDeviceAssertionEnvelope, tenantId, DeviceProofProtectedClaimsSchema, deviceProofSigningInput, DEVICE_PROOF_SCHEMA_ID, SKILL_PACK_MAX_BYTES, hasCapability, parseSkillPackManifest, checkSkillPackManifest, skillPackContentHashInput, checkSkillPackFileContent, SKILL_PACK_ENTRY_PATH, checkSkillPackEntry, isSkillPackPathSafe, DEVICE_PROOF_HEADER, contentHash as contentHash$1, TRUTH_RECORD_KINDS, nonceSigningBytes, DEVICE_ASSERTION_AUDIENCE_MAX_BYTES, DEVICE_ASSERTION_DEFAULT_TTL_MS, DEVICE_ASSERTION_MAX_TTL_MS, CONTENT_HASH_PATTERN, isTenantId, CapabilityDeclarationSchema, DeviceAssertionClaimsSchema, deviceAssertionSigningInput, DEVICE_ASSERTION_SCHEMA_ID } from '@byok-sdk/core';
@@ -9827,6 +9827,11 @@ function offeredAgentRef(payload) {
   if (!Object.prototype.hasOwnProperty.call(payload, "agentRef")) return void 0;
   return validateAgentRef(payload.agentRef);
 }
+function offeredSessionRef(payload) {
+  if (!Object.prototype.hasOwnProperty.call(payload, "sessionRef")) return void 0;
+  const value = payload.sessionRef;
+  return typeof value === "string" ? value : void 0;
+}
 function errorMessage4(err) {
   return err instanceof Error ? err.message : String(err);
 }
@@ -10195,6 +10200,9 @@ var TaskRunner = class {
       case "task.offer_for_agent_with_egress":
         await this.handleOffer(envelope.task_id, envelope.payload, true);
         return;
+      case "task.offer_for_agent_with_egress_fresh":
+        await this.handleOffer(envelope.task_id, envelope.payload, true);
+        return;
       case "task.cancel":
         await this.handleCancel(envelope.task_id, envelope.payload.reason);
         return;
@@ -10236,6 +10244,7 @@ var TaskRunner = class {
     const decline = (reason, retryable) => {
       this.decline(taskId, reason, retryable, agentRef);
     };
+    const sessionRef = offeredSessionRef(payload);
     if ("egressPolicy" in payload) {
       if (this.deps.agentEgressPolicy === void 0 || !sameEgressPolicy(this.deps.agentEgressPolicy, payload.egressPolicy)) {
         decline("Agent egress offer policy is not exactly enabled by this daemon", false);
@@ -10337,11 +10346,11 @@ var TaskRunner = class {
       let plainWorkspaceNeedsResolve = false;
       if (agentBinding !== void 0) {
         workspaceDir = agentBinding.lease.cwd;
-        if (payload.sessionRef !== void 0) {
+        if (sessionRef !== void 0) {
           try {
             await this.deps.agentSessionHandoffs.requireMatch({
               agentRef: agentBinding.resolution.agentRef,
-              sessionRef: payload.sessionRef,
+              sessionRef,
               runtimeId: pick.descriptor.id,
               cwd: workspaceDir
             });
@@ -10363,15 +10372,15 @@ var TaskRunner = class {
           return;
         }
       } else if (this.deps.gitWorkspaceManager && this.deps.gitWorkspaceStore) {
-        known = payload.sessionRef ? await this.deps.sessionWorkspaces.get(payload.sessionRef) : void 0;
+        known = sessionRef ? await this.deps.sessionWorkspaces.get(sessionRef) : void 0;
         const gitManager = this.deps.gitWorkspaceManager;
         const gitStore = this.deps.gitWorkspaceStore;
-        if (payload.sessionRef) {
-          const ledger = await gitStore.findBySessionAnyPhase(payload.sessionRef).catch(() => void 0);
+        if (sessionRef) {
+          const ledger = await gitStore.findBySessionAnyPhase(sessionRef).catch(() => void 0);
           const sameProtocolTask = ledger?.taskId === taskId;
           const interruptedOldTask = ledger?.phase === "interrupted" && sameProtocolTask;
           const activeDifferentTask = ledger !== void 0 && ledger.taskId !== taskId && (ledger.phase === "preparing" || ledger.phase === "active");
-          if (!known || known.workspaceKind !== "git" || !known.gitWorkspaceId || !ledger || ledger.workspaceId !== known.gitWorkspaceId || ledger.sessionRef !== payload.sessionRef || path.resolve(ledger.workspaceDir) !== path.resolve(known.workspaceDir) || interruptedOldTask || activeDifferentTask) {
+          if (!known || known.workspaceKind !== "git" || !known.gitWorkspaceId || !ledger || ledger.workspaceId !== known.gitWorkspaceId || ledger.sessionRef !== sessionRef || path.resolve(ledger.workspaceDir) !== path.resolve(known.workspaceDir) || interruptedOldTask || activeDifferentTask) {
             decline("session is incompatible with Git workspace mode", true);
             return;
           }
@@ -10390,13 +10399,13 @@ var TaskRunner = class {
           gitWorkspaceId = randomUUID();
         }
         try {
-          gitLease = await gitManager.acquireLease(workspaceDir, payload.sessionRef);
+          gitLease = await gitManager.acquireLease(workspaceDir, sessionRef);
         } catch {
           decline("workspace is busy or unavailable", true);
           return;
         }
       } else if (!this.deps.gitWorkspaceManager && !this.deps.gitWorkspaceStore) {
-        known = payload.sessionRef ? await this.deps.sessionWorkspaces.get(payload.sessionRef) : void 0;
+        known = sessionRef ? await this.deps.sessionWorkspaces.get(sessionRef) : void 0;
         workspaceDir = known?.workspaceDir ?? path.join(this.deps.workspaceRoot, taskId);
         plainWorkspaceNeedsResolve = true;
       } else {
@@ -10415,7 +10424,7 @@ var TaskRunner = class {
         policy: decision.policy,
         requiredToolsetIds: requiredToolsets ?? [],
         ...offered.dispatchSelection === void 0 ? {} : { dispatchSelection: offered.dispatchSelection },
-        ...payload.sessionRef === void 0 || known === void 0 && agentBinding === void 0 ? {} : { sessionRef: payload.sessionRef },
+        ...sessionRef === void 0 || known === void 0 && agentBinding === void 0 ? {} : { sessionRef },
         ...agentBinding === void 0 ? {} : {
           agentRef: agentBinding.resolution.agentRef,
           cwd: agentBinding.lease.cwd,
@@ -10518,7 +10527,7 @@ var TaskRunner = class {
             workspaceId,
             taskId,
             workspaceDir,
-            sessionRef: payload.sessionRef,
+            sessionRef,
             phase,
             baseline: gitBaseline ?? observation.head,
             current: observation.head,
@@ -13485,7 +13494,13 @@ function computeCapabilities(adapters, agentHomeConfigured = false, agentEgressC
     flags.push("toolset-selection");
   }
   if (agentHomeConfigured) flags.push("agent-home-contract");
-  if (agentEgressConfigured) flags.push(AGENT_EGRESS_POLICY_CAPABILITY, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY);
+  if (agentEgressConfigured) {
+    flags.push(
+      AGENT_EGRESS_POLICY_CAPABILITY,
+      AGENT_EGRESS_RELIABLE_ACK_CAPABILITY,
+      AGENT_EGRESS_FRESH_SESSION_CAPABILITY
+    );
+  }
   if (contentReadPolicies !== void 0) {
     for (const surface of Object.keys(AGENT_CONTENT_READ_CAPABILITIES)) {
       const policy = contentReadPolicies[surface];
@@ -14690,7 +14705,7 @@ function buildDaemonWithAdapters(config, adapters, overrides = {}, assertionProb
     connection.send(sanitized.envelope);
   }
   async function publishReliableAgentEgress(input) {
-    if (config.agentEgress === void 0 || agentHomeManager === void 0) {
+    if (config.agentEgress === void 0 || agentHomeManager === void 0 || agentSessionHandoffs === void 0) {
       throw new Error("Agent reliable egress is not configured");
     }
     if (tenantRebinding) {
@@ -14699,12 +14714,21 @@ function buildDaemonWithAdapters(config, adapters, overrides = {}, assertionProb
     const binding = await agentHomeManager.acquire(input.agentRef);
     try {
       await agentHomeManager.initialize(binding);
+      const handoff = await agentSessionHandoffs.requireMatch({
+        agentRef: binding.resolution.agentRef,
+        sessionRef: input.sessionRef,
+        runtimeId: input.runtimeId,
+        cwd: binding.resolution.canonicalHome
+      });
+      if (handoff.taskId !== input.taskId) {
+        throw new Error("Agent reliable egress taskId does not match the durable session handoff");
+      }
       const appended = await agentEgress.appendReliable({
         homeDir: binding.resolution.canonicalHome,
         agentRef: binding.resolution.agentRef,
         sessionRef: input.sessionRef,
         payload: input.payload,
-        ...input.taskId === void 0 ? {} : { taskId: input.taskId },
+        taskId: input.taskId,
         ...input.eventId === void 0 ? {} : { eventId: input.eventId }
       });
       if (appended.ok) dispatchReliableRecord(appended.record);