@byok-sdk/client 0.8.0 → 0.9.0-rc.1

package/README.md

@@ -4,7 +4,13 @@ The local BYOK daemon. It pairs a device, durably journals tasks, connects over
 WebSocket or long poll, dispatches to local Claude Code, Codex, or pi adapters,
 and exposes authenticated local diagnostics/control commands.
 
-The package installs `byok-agent` and `byok-approval-mcp` binaries. Provider
+The package installs `byok-agent`, `byok-approval-mcp`, and the SDK-reserved
+`byok-agent-message-mcp` task helper. The message helper exposes only bounded
+plain text/Markdown; authenticated task, Agent, session, device, tenant, and
+destination facts remain daemon/server authority and are never model input.
+The helper receives only a daemon-issued single-task sealed context token;
+it cannot select a task id or product destination.
+Provider
 credentials are not read by the dispatch plane; `@byok-sdk/keys` is a separate
 install and keeps a zero dependency edge to this package.
 
@@ -108,6 +114,14 @@ createDaemon({
 });
 ```
 
+For task-free desired-state projection, use
+`createAgentHomeProjectionConsumer`. Its hook must atomically and idempotently
+ensure its opaque product bytes. BYOK may invoke it again under the same
+canonical-home writer lease when a new request carries the exact current
+revision/hash; the terminal outcome remains `idempotent`. This permits repair
+of locally lost derived files without giving the SDK product path or schema
+knowledge. Stale and same-revision/different-hash requests do not invoke it.
+
 Startup materializes and write-probes the canonical root before publishing
 `agent-home-contract`. `agentHome` and `gitWorkspace` are mutually exclusive;
 strict Agent execution has one workspace authority and never falls back to a
@@ -131,6 +145,13 @@ keeps runtime activity metadata/status-only; enabling it is an explicit product
 decision and requires the server capability. Reliable events are fsynced under
 the canonical Agent home and retire only after an exact ack.
 
+Hosts that need cold setup or diagnostic state use
+`readDeviceEnrollmentStatus({ productId, storeDir })`. It validates the
+complete SDK-owned record but returns only `unpaired`, `paired` with
+`deviceId`, or `re_pair_required`; tenant, token, expiry and device keys are
+never projected. Only explicit pairing may replace `re_pair_required` state,
+while filesystem-safety failures remain errors.
+
 ```ts
 createDaemon({
   // ...normal device, transport and agentHome configuration

package/dist/adapters/index.js

@@ -2551,6 +2551,7 @@ var CodexAdapter = class {
       steer: false,
       resume: true,
       approvalInteractive: false,
+      mcpToolsets: true,
       permissionModes: ["auto", "readonly"]
     },
     environmentRequirements: { credentialNames: [] }
@@ -2682,7 +2683,7 @@ ${withStreams.stderr ?? ""}`);
       resumeRef: startInput.manifest.sessionRef,
       instruction: startInput.instruction,
       modelId: manifestModelId,
-      policyArgs: [...policyArgs],
+      policyArgs: [...policyArgs, ...codexMcpConfigArgs(startInput.mcpServers)],
       cwd: manifestCwd,
       env: runtimeEnv,
       spawnFn: this.options.spawnFn,
@@ -2712,6 +2713,18 @@ ${withStreams.stderr ?? ""}`);
     return (this.options.resolveBin ?? resolveCodexBin)();
   }
 };
+function codexMcpConfigArgs(servers) {
+  if (servers === void 0 || Object.keys(servers).length === 0) return [];
+  const args = ["--ignore-user-config"];
+  for (const [name, server] of Object.entries(servers).sort(([left], [right]) => left.localeCompare(right))) {
+    args.push("-c", `mcp_servers.${name}.command=${JSON.stringify(server.command)}`);
+    if (server.args !== void 0) args.push("-c", `mcp_servers.${name}.args=${JSON.stringify([...server.args])}`);
+    for (const [key, value] of Object.entries(server.env ?? {}).sort(([left], [right]) => left.localeCompare(right))) {
+      args.push("-c", `mcp_servers.${name}.env.${key}=${JSON.stringify(value)}`);
+    }
+  }
+  return args;
+}
 async function resolveRealWorkspaceDir(workspaceDir) {
   return promises.realpath(workspaceDir).catch(() => workspaceDir);
 }