@byok-sdk/client 0.8.1 → 0.9.0-rc.1

package/README.md

@@ -4,7 +4,13 @@ The local BYOK daemon. It pairs a device, durably journals tasks, connects over
 WebSocket or long poll, dispatches to local Claude Code, Codex, or pi adapters,
 and exposes authenticated local diagnostics/control commands.
 
-The package installs `byok-agent` and `byok-approval-mcp` binaries. Provider
+The package installs `byok-agent`, `byok-approval-mcp`, and the SDK-reserved
+`byok-agent-message-mcp` task helper. The message helper exposes only bounded
+plain text/Markdown; authenticated task, Agent, session, device, tenant, and
+destination facts remain daemon/server authority and are never model input.
+The helper receives only a daemon-issued single-task sealed context token;
+it cannot select a task id or product destination.
+Provider
 credentials are not read by the dispatch plane; `@byok-sdk/keys` is a separate
 install and keeps a zero dependency edge to this package.
 

package/dist/adapters/index.js

@@ -2551,6 +2551,7 @@ var CodexAdapter = class {
       steer: false,
       resume: true,
       approvalInteractive: false,
+      mcpToolsets: true,
       permissionModes: ["auto", "readonly"]
     },
     environmentRequirements: { credentialNames: [] }
@@ -2682,7 +2683,7 @@ ${withStreams.stderr ?? ""}`);
       resumeRef: startInput.manifest.sessionRef,
       instruction: startInput.instruction,
       modelId: manifestModelId,
-      policyArgs: [...policyArgs],
+      policyArgs: [...policyArgs, ...codexMcpConfigArgs(startInput.mcpServers)],
       cwd: manifestCwd,
       env: runtimeEnv,
       spawnFn: this.options.spawnFn,
@@ -2712,6 +2713,18 @@ ${withStreams.stderr ?? ""}`);
     return (this.options.resolveBin ?? resolveCodexBin)();
   }
 };
+function codexMcpConfigArgs(servers) {
+  if (servers === void 0 || Object.keys(servers).length === 0) return [];
+  const args = ["--ignore-user-config"];
+  for (const [name, server] of Object.entries(servers).sort(([left], [right]) => left.localeCompare(right))) {
+    args.push("-c", `mcp_servers.${name}.command=${JSON.stringify(server.command)}`);
+    if (server.args !== void 0) args.push("-c", `mcp_servers.${name}.args=${JSON.stringify([...server.args])}`);
+    for (const [key, value] of Object.entries(server.env ?? {}).sort(([left], [right]) => left.localeCompare(right))) {
+      args.push("-c", `mcp_servers.${name}.env.${key}=${JSON.stringify(value)}`);
+    }
+  }
+  return args;
+}
 async function resolveRealWorkspaceDir(workspaceDir) {
   return promises.realpath(workspaceDir).catch(() => workspaceDir);
 }