@byok-sdk/keys 0.1.0 → 0.2.0

package/dist/pi-provider-launcher-core.d.ts

@@ -0,0 +1,34 @@
+import { type ModelProviderId, type ModelProviderProfile } from './provider-profile';
+import { type SecretStore } from './secret-store';
+export interface PiProviderLauncherOptions {
+    piBin: string;
+    profileDbPath: string;
+    providerId: ModelProviderId;
+    modelId: string;
+    sessionDir: string;
+    secretServicePrefix?: string;
+    piArgs: string[];
+}
+export declare function parsePiProviderLauncherOptions(args: string[]): PiProviderLauncherOptions;
+/**
+ * Resolve only the credential the validated profile requires. In particular,
+ * an auth-free local provider must remain usable on hosts without an OS
+ * credential backend; constructing a keychain there would invent a false
+ * dependency and turn an explicit `auth_mode: none` into a hidden fallback.
+ */
+export declare function resolvePiProviderSecret(profile: ModelProviderProfile, createStore: () => SecretStore): Promise<string | undefined>;
+/** Build Pi's child environment from a closed platform baseline plus one exact key. */
+export declare function buildPiProviderChildEnvironment(options: {
+    ambient: NodeJS.ProcessEnv;
+    projectionDir: string;
+    sessionDir: string;
+    secret: string | undefined;
+    platform?: NodeJS.Platform;
+}): Record<string, string>;
+/**
+ * Create the configured session directory owner-only without mutating the
+ * mode of an existing host-owned directory. The path is operator config, so
+ * an accidental `/`, home, or shared-directory value must never become a
+ * recursive chmod sink.
+ */
+export declare function ensurePiSessionDirectory(sessionDir: string): Promise<void>;

package/dist/pi-provider-projection.d.ts

@@ -0,0 +1,11 @@
+import type { ModelProviderProfile } from './provider-profile';
+export declare const PI_PROJECTED_KEY_ENV = "PI_PROVIDER_API_KEY";
+/** Keep projected providers disjoint from Pi built-ins so composition can never fall back to one. */
+export declare function piProjectionProviderId(profileProviderId: string): string;
+/** Credential-blind Pi configuration derived from one validated local profile. */
+export declare function buildPiProviderProjection(profile: ModelProviderProfile): object;
+/**
+ * Validate the credential-blind RPC argv the client may delegate, then bind
+ * the Pi child to the namespaced projection and exact configured model.
+ */
+export declare function buildPiProviderArgs(profile: ModelProviderProfile, delegatedArgs: readonly string[]): string[];

package/dist/profile-store.d.ts

@@ -4,7 +4,7 @@ import { type ModelProviderId, type ModelProviderProfile } from './provider-prof
  * Storage contract for provider profiles — everything needed to address a
  * provider except the API key, which lives in a {@link SecretStore}.
  *
- * Shaped after `@byok/server`'s `TaskStore` (`packages/server/src/task-store.ts`)
+ * Shaped after `@byok-sdk/server`'s `TaskStore` (`packages/server/src/task-store.ts`)
  * as a *pattern*, not a dependency: `keys` must not import `server`, and
  * `server` must not import `keys` (the plan's Security Boundary keeps the
  * agent-dispatch packages free of any credential-adjacent code).
@@ -22,22 +22,22 @@ import { type ModelProviderId, type ModelProviderProfile } from './provider-prof
  */
 export interface ProviderProfileStore {
     /** Release the underlying resource. Safe to call more than once. */
-    close(): void;
+    close(): Promise<void>;
     /** Remove `providerId`; `false` when it was not configured. */
-    delete(providerId: ModelProviderId): boolean;
+    delete(providerId: ModelProviderId): Promise<boolean>;
     /** Read one provider's profile, configured or not enabled alike. */
-    get(providerId: ModelProviderId): ModelProviderProfile | undefined;
+    get(providerId: ModelProviderId): Promise<ModelProviderProfile | undefined>;
     /** The single enabled profile, or `undefined` when none is enabled. */
-    getEnabled(): ModelProviderProfile | undefined;
+    getEnabled(): Promise<ModelProviderProfile | undefined>;
     /** Every configured profile, ordered by provider id. */
-    list(): ModelProviderProfile[];
+    list(): Promise<ModelProviderProfile[]>;
     /** Insert or update `profile`, enforcing both invariants above. */
-    save(profile: ModelProviderProfile): ModelProviderProfile;
+    save(profile: ModelProviderProfile): Promise<ModelProviderProfile>;
     /**
      * Make `providerId` the enabled profile. Throws `PROVIDER_NOT_CONFIGURED`
      * when it has no profile — a fail-closed port of `providers.ts:1243-1250`.
      */
-    setEnabled(providerId: ModelProviderId): ModelProviderProfile;
+    setEnabled(providerId: ModelProviderId): Promise<ModelProviderProfile>;
 }
 /** Shared by both implementations so their error text cannot drift apart. */
 export declare function providerNotConfigured(providerId: ModelProviderId): ByokKeysError;
@@ -45,17 +45,17 @@ export declare function providerNotConfigured(providerId: ModelProviderId): Byok
  * Profile store held in process memory: the default, and the one every test
  * that does not specifically exercise SQLite should use.
  *
- * Mirrors `InMemoryTaskStore`'s role in `@byok/server` — a real implementation
+ * Mirrors `InMemoryTaskStore`'s role in `@byok-sdk/server` — a real implementation
  * of the contract, not a stub, so behaviour proven here is the behaviour the
  * SQLite store must match (`profile-store.test.ts` runs one suite against both).
  */
 export declare class InMemoryProviderProfileStore implements ProviderProfileStore {
     #private;
-    close(): void;
-    delete(providerId: ModelProviderId): boolean;
-    get(providerId: ModelProviderId): ModelProviderProfile | undefined;
-    getEnabled(): ModelProviderProfile | undefined;
-    list(): ModelProviderProfile[];
-    save(profile: ModelProviderProfile): ModelProviderProfile;
-    setEnabled(providerId: ModelProviderId): ModelProviderProfile;
+    close(): Promise<void>;
+    delete(providerId: ModelProviderId): Promise<boolean>;
+    get(providerId: ModelProviderId): Promise<ModelProviderProfile | undefined>;
+    getEnabled(): Promise<ModelProviderProfile | undefined>;
+    list(): Promise<ModelProviderProfile[]>;
+    save(profile: ModelProviderProfile): Promise<ModelProviderProfile>;
+    setEnabled(providerId: ModelProviderId): Promise<ModelProviderProfile>;
 }

package/dist/registry.d.ts

@@ -75,7 +75,7 @@ export interface ProviderRegistryOptions {
 export declare class ProviderRegistry {
     #private;
     constructor(options: ProviderRegistryOptions);
-    close(): void;
+    close(): Promise<void>;
     /**
      * Persist a provider's profile and, when supplied, its secret
      * (`providers.ts:1180-1229`).

package/dist/sqlite-profile-store.d.ts

@@ -4,12 +4,14 @@ export interface SqliteProviderProfileStoreOptions {
     /**
      * Database file path. `:memory:` exercises the SQLite code path without a
      * temp file, but defeats the point of this store (restart-safety) exactly as
-     * it does for `@byok/server`'s `SqliteTaskStore`.
+     * it does for `@byok-sdk/server`'s `SqliteTaskStore`.
      */
     path: string;
+    /** Open an existing profile database without creating or mutating it. */
+    readOnly?: boolean;
 }
 /**
- * SQLite-backed {@link ProviderProfileStore}, following `@byok/server`'s
+ * SQLite-backed {@link ProviderProfileStore}, following `@byok-sdk/server`'s
  * `SqliteTaskStore` shape. Holds no secret: the API key lives in the injected
  * `SecretStore`, and `registry.golden.test.ts` asserts the plaintext key never
  * appears in this file's bytes.
@@ -23,13 +25,13 @@ export declare class SqliteProviderProfileStore implements ProviderProfileStore
      * routinely closed both by the code that finished with it and by a test's
      * teardown.
      */
-    close(): void;
-    delete(providerId: ModelProviderId): boolean;
-    get(providerId: ModelProviderId): ModelProviderProfile | undefined;
-    getEnabled(): ModelProviderProfile | undefined;
-    list(): ModelProviderProfile[];
-    save(profile: ModelProviderProfile): ModelProviderProfile;
-    setEnabled(providerId: ModelProviderId): ModelProviderProfile;
+    close(): Promise<void>;
+    delete(providerId: ModelProviderId): Promise<boolean>;
+    get(providerId: ModelProviderId): Promise<ModelProviderProfile | undefined>;
+    getEnabled(): Promise<ModelProviderProfile | undefined>;
+    list(): Promise<ModelProviderProfile[]>;
+    save(profile: ModelProviderProfile): Promise<ModelProviderProfile>;
+    setEnabled(providerId: ModelProviderId): Promise<ModelProviderProfile>;
 }
 /** Exported for the store's own tests to enumerate the CHECK-constrained ids. */
 export declare const SQLITE_PROFILE_PROVIDER_IDS: readonly ["openai", "deepseek", "anthropic", "custom"];

package/dist/sqlite-support.d.ts

@@ -1,4 +1,12 @@
 import type { DatabaseSync, DatabaseSyncOptions } from 'node:sqlite';
+export type SqliteOpenStep = 'after-open' | 'after-wal' | 'after-synchronous';
+/** Test-only seam for proving that post-open initialization failures release the native handle. */
+export interface SqliteOpenFaultSeam {
+    onStep?(step: SqliteOpenStep): void;
+    close?(database: DatabaseSync): void;
+}
+/** Release an opened handle before propagating an initialization failure. */
+export declare function closeSqliteDatabaseAfterInitializationFailure(database: DatabaseSync, initializationError: unknown, message: string, close?: (database: DatabaseSync) => void): never;
 interface SqliteModule {
     DatabaseSync: new (path: string, options?: DatabaseSyncOptions) => DatabaseSync;
 }
@@ -7,7 +15,7 @@ interface SqliteModule {
  *
  * `node:sqlite` shipped in Node.js 22.5.0 and stays marked experimental (an
  * `ExperimentalWarning` on stderr is expected and harmless). Following
- * `@byok/server`'s `sqlite-support.ts`, the SQLite-backed store here depends on
+ * `@byok-sdk/server`'s `sqlite-support.ts`, the SQLite-backed store here depends on
  * nothing else — no `better-sqlite3`, no native module — because zero native
  * dependencies is what keeps this package trivially packageable. The tradeoff
  * is that {@link SqliteProviderProfileStore} does not work below Node 22.5, and
@@ -18,7 +26,7 @@ export declare function loadSqliteModule(): SqliteModule;
 /**
  * Whether `node:sqlite` can ACTUALLY be loaded right now.
  *
- * Same predicate as `@byok/server`'s `sqlite-support.ts`, and it exists for the
+ * Same predicate as `@byok-sdk/server`'s `sqlite-support.ts`, and it exists for the
  * same reason: this package's `engines.node` is `>=20` and CI runs the matrix
  * on 20 and 22, but `node:sqlite` shipped in 22.5 and stayed behind
  * `--experimental-sqlite` for part of the 22.x line. A version-number
@@ -35,7 +43,7 @@ export declare function isSqliteAvailable(): boolean;
  * skips every filesystem step, which is how the shared contract suite exercises
  * the SQLite code path without leaving anything on disk.
  */
-export declare function openSqliteDatabase(path: string, options?: DatabaseSyncOptions): DatabaseSync;
+export declare function openSqliteDatabase(path: string, options?: DatabaseSyncOptions, faults?: SqliteOpenFaultSeam): DatabaseSync;
 /**
  * Restrict `databasePath` and its WAL/SHM siblings to owner-only read/write.
  *

package/dist/truth-profile-store.d.ts

@@ -0,0 +1,27 @@
+import { type TenantId, type TruthStore } from '@byok-sdk/core';
+import { type ProviderProfileStore } from './profile-store';
+import { type ModelProviderId, type ModelProviderProfile } from './provider-profile';
+export declare const PROVIDER_PROFILE_TRUTH_RECORD_KEY = "byok-sdk.keys/model-provider-registry-v1";
+export interface TruthStoreProviderProfileStoreOptions {
+    tenant: TenantId;
+    truthStore: TruthStore;
+}
+/**
+ * Tenant-bound profile persistence over the core TruthStore snapshot contract.
+ *
+ * The complete, closed provider registry is one CAS unit. That is what makes a
+ * delete and the "at most one enabled profile" transition atomic without
+ * adding a second transaction authority. The body is metadata only; provider
+ * credentials remain exclusively in the independently injected SecretStore.
+ */
+export declare class TruthStoreProviderProfileStore implements ProviderProfileStore {
+    #private;
+    constructor(options: TruthStoreProviderProfileStoreOptions);
+    close(): Promise<void>;
+    delete(providerId: ModelProviderId): Promise<boolean>;
+    get(providerId: ModelProviderId): Promise<ModelProviderProfile | undefined>;
+    getEnabled(): Promise<ModelProviderProfile | undefined>;
+    list(): Promise<ModelProviderProfile[]>;
+    save(profile: ModelProviderProfile): Promise<ModelProviderProfile>;
+    setEnabled(providerId: ModelProviderId): Promise<ModelProviderProfile>;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@byok-sdk/keys",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "BYOK SDK key management: provider profiles, credential-backed auth headers, and direct provider transports",
   "type": "module",
   "license": "MIT",
@@ -14,12 +14,15 @@
   },
   "homepage": "https://github.com/Ancienttwo/byok-sdk#readme",
   "engines": {
-    "node": ">=20"
+    "node": ">=22.22.0"
   },
   "sideEffects": false,
   "main": "./dist/index.js",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
+  "bin": {
+    "byok-pi-provider-launcher": "./dist/bin/pi-provider-launcher.js"
+  },
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
@@ -28,20 +31,24 @@
     "./package.json": "./package.json"
   },
   "files": [
-    "dist"
+    "dist",
+    "README.md",
+    "LICENSE"
   ],
   "publishConfig": {
     "access": "public"
   },
-  "dependencies": {
-    "zod": "^4.4.3"
-  },
   "scripts": {
+    "prepublishOnly": "bun run build",
     "build": "tsup && tsc -p tsconfig.build.json",
     "dev": "tsup --watch",
     "test": "vitest run",
     "test:watch": "vitest",
     "typecheck": "tsc --noEmit",
     "clean": "rm -rf dist"
+  },
+  "dependencies": {
+    "@byok-sdk/core": "0.4.2",
+    "zod": "^4.4.3"
   }
-}
+}