@byok-sdk/server 0.3.0 → 0.4.1

package/README.md

@@ -4,7 +4,7 @@ The self-hosted SaaS-side reference coordinator: pairing, authenticated device
 HTTP/WebSocket/long-poll transport, task leasing, approvals, and in-memory
 stores over the frozen v1 protocol.
 
-Use `@byok-sdk/cloud` plus `@byok-sdk/cloud-postgres` for the durable hosted
+Use `@byok-sdk/cloud` plus `@byok-sdk/cloud-dataplane` for the durable hosted
 composition.
 
 Toolset-aware dispatch names logical device-local MCP toolsets; it never sends
@@ -21,6 +21,8 @@ const task = await server.dispatch({
 ```
 
 The self-hosted coordinator rejects this call before task creation unless the
-live device advertises `toolset-selection`.
+live device advertises `toolset-selection` and its `configuredToolsets`
+inventory contains every required ID. `machines.list()` projects that same
+logical-ID-only inventory; MCP commands and credentials remain device-local.
 
-MIT licensed. Node.js 22.19.0 or newer.
+MIT licensed. Node.js 22.22.0 or newer.

package/dist/hub.d.ts

@@ -1,5 +1,5 @@
 import type { WebSocket } from 'ws';
-import { type Envelope, type RuntimeId, type RuntimeInfo, type TaskState } from '@byok-sdk/protocol';
+import { type Envelope, type RuntimeId, type RuntimeInfo, type TaskState, type ToolsetId } from '@byok-sdk/protocol';
 import type { DeviceRegistry } from './auth';
 import { RateLimiter } from './rate-limiter';
 import type { TaskStore } from './task-store';
@@ -276,7 +276,7 @@ export declare class ConnectionHub {
      * connection this hub never learns capabilities for simply reads back
      * `undefined` from {@link getDeviceCapabilities}.
      */
-    registerConnection(deviceId: string, ws: WebSocket, runtimes: RuntimeInfo[] | undefined, capabilities?: readonly string[]): void;
+    registerConnection(deviceId: string, ws: WebSocket, runtimes: RuntimeInfo[] | undefined, capabilities?: readonly string[], configuredToolsets?: readonly ToolsetId[]): void;
     sendConnAck(deviceId: string, capabilities: string[]): void;
     /**
      * Reconnection procedure step 3 (§9): redeliver, in `seq` order, every

package/dist/index.js

@@ -489,7 +489,7 @@ function buildHonoApp(deps) {
       cursor = parsedCursor;
     }
     const result = await deps.hub.pollEvents(principal.deviceId, cursor, deps.longPollHoldMs);
-    const response = result;
+    const response = { ...result, capabilities: [...CAPABILITY_FLAGS] };
     return c.json(response, 200);
   });
   app.post(BYOK_MESSAGES_PATH, async (c) => {
@@ -844,9 +844,16 @@ var ConnectionHub = class {
    * connection this hub never learns capabilities for simply reads back
    * `undefined` from {@link getDeviceCapabilities}.
    */
-  registerConnection(deviceId, ws, runtimes, capabilities) {
+  registerConnection(deviceId, ws, runtimes, capabilities, configuredToolsets) {
     const at = (/* @__PURE__ */ new Date()).toISOString();
-    this.connections.set(deviceId, { ws, connected: true, lastSeen: at, runtimes, capabilities });
+    this.connections.set(deviceId, {
+      ws,
+      connected: true,
+      lastSeen: at,
+      runtimes,
+      capabilities,
+      configuredToolsets
+    });
     this.serverEvents.push({ kind: "device.connected", deviceId, at });
     this.settleLongPollWaiter(deviceId);
   }
@@ -941,7 +948,13 @@ var ConnectionHub = class {
     const wasFreshlyConnected = !conn || conn.ws !== void 0 || !conn.connected;
     if (conn?.ws) {
       const ws = conn.ws;
-      this.connections.set(deviceId, { connected: true, lastSeen: at, runtimes: conn.runtimes, capabilities: conn.capabilities });
+      this.connections.set(deviceId, {
+        connected: true,
+        lastSeen: at,
+        runtimes: conn.runtimes,
+        capabilities: conn.capabilities,
+        configuredToolsets: conn.configuredToolsets
+      });
       ws.close(1e3, "superseded by long-poll connection");
     } else if (!conn) {
       this.connections.set(deviceId, { connected: true, lastSeen: at });
@@ -1671,7 +1684,7 @@ var ConnectionHub = class {
   async dispatch(input) {
     const dispatchSelection = input.dispatchSelection === void 0 ? void 0 : DispatchSelectionSchema.parse(input.dispatchSelection);
     const requiredToolsets = input.requiredToolsets === void 0 ? void 0 : RequiredToolsetsSchema.parse(input.requiredToolsets);
-    const deviceId = input.deviceId ?? this.pickFirstConnectedDevice();
+    const deviceId = input.deviceId ?? this.pickFirstConnectedDevice(requiredToolsets);
     if (!deviceId || !this.connections.get(deviceId)?.connected) {
       throw new Error(
         deviceId ? `device ${deviceId} is not connected` : "no connected device to dispatch to (M0 does not queue tasks until a device connects)"
@@ -1687,6 +1700,21 @@ var ConnectionHub = class {
         `device ${deviceId} did not advertise toolset-selection capability; refusing a task whose semantics require local MCP tools`
       );
     }
+    if (requiredToolsets !== void 0) {
+      const configuredToolsets = this.connections.get(deviceId)?.configuredToolsets;
+      if (configuredToolsets === void 0) {
+        throw new Error(
+          `device ${deviceId} did not advertise its configured toolset inventory; refusing to guess from runtime capability`
+        );
+      }
+      const configured = new Set(configuredToolsets);
+      const missing = requiredToolsets.filter((toolsetId) => !configured.has(toolsetId));
+      if (missing.length > 0) {
+        throw new Error(
+          `device ${deviceId} is missing required MCP toolset(s): ${missing.join(", ")}`
+        );
+      }
+    }
     if (dispatchSelection !== void 0 && input.runtime !== void 0 && input.runtime !== dispatchSelection.runtimeId) {
       throw new Error(
         `dispatch runtime ${input.runtime} does not match dispatchSelection.runtimeId ${dispatchSelection.runtimeId}`
@@ -1879,9 +1907,14 @@ var ConnectionHub = class {
     }
     this.sendToDevice(record.deviceId, "task.steer", { text }, { taskId });
   }
-  pickFirstConnectedDevice() {
+  pickFirstConnectedDevice(requiredToolsets) {
     for (const [deviceId, conn] of this.connections) {
-      if (conn.connected) return deviceId;
+      if (!conn.connected) continue;
+      if (requiredToolsets === void 0) return deviceId;
+      if (!conn.capabilities?.includes("toolset-selection")) continue;
+      if (conn.configuredToolsets === void 0) continue;
+      const configured = new Set(conn.configuredToolsets);
+      if (requiredToolsets.every((toolsetId) => configured.has(toolsetId))) return deviceId;
     }
     return void 0;
   }
@@ -1964,7 +1997,8 @@ var ConnectionHub = class {
         deviceName,
         connected: conn?.connected ?? false,
         lastSeen: conn?.lastSeen,
-        runtimes: conn?.runtimes
+        runtimes: conn?.runtimes,
+        configuredToolsets: conn?.configuredToolsets ? [...conn.configuredToolsets] : void 0
       };
     });
   }
@@ -2212,7 +2246,13 @@ function handleConnection(ws, principal, deps) {
       return;
     }
     helloReceived = true;
-    deps.hub.registerConnection(deviceId, ws, payload.runtimes, payload.capabilities);
+    deps.hub.registerConnection(
+      deviceId,
+      ws,
+      payload.runtimes,
+      payload.capabilities,
+      payload.configuredToolsets
+    );
     deps.hub.sendConnAck(deviceId, SUPPORTED_CAPABILITIES);
     if (payload.cursor !== void 0) {
       deps.hub.redeliverAfterReconnect(deviceId, payload.cursor);