@byok-sdk/cloud 0.22.0 → 0.24.0

package/README.md

@@ -68,7 +68,7 @@ if (result === undefined) {
 stored body is not a terminal envelope throws `ByokCloudError` rather than
 returning a best-effort shape.
 
-MIT licensed. Node.js 22.22.0 or newer.
+MIT licensed. Node.js 24.15.0 or newer.
 
 
 ## Immutable offer readback

package/dist/activity.d.ts

@@ -73,6 +73,12 @@ export declare const ActivityAppendRequestSchema: z.ZodObject<{
         outputTokens: z.ZodOptional<z.ZodNumber>;
         reasoningTokens: z.ZodOptional<z.ZodNumber>;
         totalTokens: z.ZodOptional<z.ZodNumber>;
+        contextTokens: z.ZodOptional<z.ZodNumber>;
+        contextWindow: z.ZodOptional<z.ZodNumber>;
+        contextSource: z.ZodOptional<z.ZodEnum<{
+            estimate: "estimate";
+            provider: "provider";
+        }>>;
     }, z.core.$strip>], "type">, z.ZodObject<{
         type: z.ZodString;
     }, z.core.$loose>]>>;
@@ -152,6 +158,12 @@ export declare const TimelineEventSchema: z.ZodObject<{
         outputTokens: z.ZodOptional<z.ZodNumber>;
         reasoningTokens: z.ZodOptional<z.ZodNumber>;
         totalTokens: z.ZodOptional<z.ZodNumber>;
+        contextTokens: z.ZodOptional<z.ZodNumber>;
+        contextWindow: z.ZodOptional<z.ZodNumber>;
+        contextSource: z.ZodOptional<z.ZodEnum<{
+            estimate: "estimate";
+            provider: "provider";
+        }>>;
     }, z.core.$strip>], "type">, z.ZodObject<{
         type: z.ZodString;
     }, z.core.$loose>]>;

package/dist/capabilities.d.ts

@@ -73,7 +73,7 @@ export declare const CLOUD_CAPABILITIES: {
      * DEVICE's only way to discharge a mailbox row this same deployment handed
      * it — withholding it would strand the device's redelivery cursor rather
      * than degrade a feature. For the same reason the completion route asserts
-     * no DEVICE capability either: the device-level `agent-input-preparation-v7`
+     * no DEVICE capability either: the device-level `agent-input-preparation-v8`
      * flag gates ADMISSION (`enqueueInputPreparation`) and nothing else, so an
      * unconfigured device is refused a row instead of being handed one whose
      * only honest answer — `input_preparation_unconfigured` — it could not then

package/dist/cloud.d.ts

@@ -19,7 +19,7 @@ import { type RecurringExecutionInput } from './recurring';
 import { type BoardItem, type BoardItemInput, type BoardListQuery, type BoardPage, type CapabilityDeclaration, type Clock, type CoreStores, type PresenceHint, type SkillPackStore, type TenantId, type TenantReadiness } from '@byok-sdk/core';
 import type { ActivityTail } from './activity';
 import type { ApprovalTimelineTail } from './approval-timeline';
-import { type Envelope, type TaskOfferType, type AgentRef, type AgentContentReadPayload, type AgentMessageDispositionPayload, type AgentMessagePublishPayload, type AgentMessageServerContext, type AgentHomeProjectionCompletionRequest, type AgentHomeProjectionPayload, type AgentHomeProjectionReadback, type AgentInputPreparationPayload, type InputPreparationCompletionRequest, type InputPreparationReadback, type AgentMemoryProjectionEraseResult, type TaskOfferPayload, type TaskSteerPayload, type TaskOfferForAgentPayload, type TaskOfferPreparedPayload, type TaskOfferForAgentWithEgressPayload, type TaskOfferForAgentWithEgressFreshPayload, type TaskOfferWithToolsetsPayload } from '@byok-sdk/protocol';
+import { type Envelope, type TaskOfferType, type AgentRef, type AgentContentReadPayload, type AgentMessageDispositionPayload, type AgentMessagePublishPayload, type AgentMessageServerContext, type AgentHomeProjectionCompletionRequest, type AgentHomeProjectionPayload, type AgentHomeProjectionReadback, type AgentInputPreparationPayload, type ProviderProvisioningAvailablePayload, type AgentMemoryIntentAvailablePayload, type InputPreparationCompletionRequest, type InputPreparationReadback, type AgentMemoryProjectionEraseResult, type TaskOfferPayload, type TaskSteerPayload, type TaskOfferForAgentPayload, type TaskOfferPreparedPayload, type TaskOfferForAgentWithEgressPayload, type TaskOfferForAgentWithEgressFreshPayload, type TaskOfferWithToolsetsPayload } from '@byok-sdk/protocol';
 import type { TokenSigner } from './auth/tokens';
 import type { CloudCrypto } from './crypto/port';
 import { type RouteDescriptor } from './router/registry';
@@ -197,6 +197,19 @@ export interface AgentContentReadInput {
 }
 /** Task-free exact-device projection desired state, intentionally unrelated to TaskAttempt. */
 export type AgentHomeProjectionInput = AgentHomeProjectionPayload;
+/**
+ * Task-free sealed provider provisioning notice: exactly `{ requestId }`. The
+ * sealed request itself stays in the Host's own store and is fetched by the
+ * device over Host routes; nothing else can be carried by this input.
+ */
+export type ProviderProvisioningNoticeInput = ProviderProvisioningAvailablePayload;
+/**
+ * Task-free Host-approved Agent memory intent notice: exactly
+ * `{ intentId, agentRef }`. The immutable intent, and any memory content it
+ * carries, stays in the Host's own store and is fetched by the device over
+ * Host routes; nothing else can be carried by this input.
+ */
+export type AgentMemoryIntentNoticeInput = AgentMemoryIntentAvailablePayload;
 /** Exact request identity a host must echo to read back durable projection status. */
 export type AgentHomeProjectionStatusInput = AgentHomeProjectionReceiptInput;
 /** Task-free exact-device remote preparation request, intentionally unrelated to TaskAttempt. */
@@ -285,7 +298,7 @@ export interface ByokCloud {
      * Host control plane: enqueue an offer for an already-counted preparation.
      *
      * Admission requires the device to durably advertise both the Agent-home
-     * contract and `agent-input-preparation-v7` — the second because only a device
+     * contract and `agent-input-preparation-v8` — the second because only a device
      * that can prepare holds the durable record this offer names. A device that
      * advertises neither never receives the message, and a device whose protocol
      * build predates the type skips it whole rather than running it as an
@@ -320,6 +333,40 @@ export interface ByokCloud {
      * and NO delivery row behind.
      */
     enqueueInputPreparation(tenant: TenantId, deviceId: string, input: InputPreparationInput): Promise<EnqueuedInputPreparation>;
+    /**
+     * Durable, task-free `provider.provisioning.available` notice for precisely
+     * one device that durably advertised `provider-provisioning.v1`. The payload
+     * is validated strictly before admission, and admission happens before the
+     * mailbox append, so a refused call leaves no delivery row behind.
+     *
+     * Idempotent per (tenant, device, requestId): the mailbox message id is
+     * derived from that identity, so a retried enqueue returns the existing row
+     * and its seq instead of appending a second notice. The completion and its
+     * durable readback are Host authority on Host routes; this plane records no
+     * provisioning receipt of its own.
+     */
+    enqueueProviderProvisioningNotice(tenant: TenantId, deviceId: string, input: ProviderProvisioningNoticeInput): Promise<EnqueuedAgentControl>;
+    /**
+     * Durable, task-free `agent.memory.intent.available` notice for precisely
+     * one device that durably advertised `agent-memory-intent.v1`. The payload
+     * is validated strictly before admission, and admission happens before the
+     * mailbox append, so a refused call leaves no delivery row behind.
+     *
+     * Idempotent per (tenant, device, intentId) while the original mailbox row
+     * is retained: the mailbox message id is derived from that identity, so a
+     * retried enqueue returns the existing row and its seq instead of appending
+     * a second notice, and a retry naming a different `agentRef` for the same
+     * intent fails `mailbox_receipt_mismatch`. After acked-row retention cleanup
+     * a retry appends a new row with a new seq and `agentRef` is no longer
+     * compared, so the Host must keep `agentRef` fixed per `intentId`. The
+     * device fails closed (`fetch_invalid`/`readback_invalid`) on a mismatched
+     * `agentId`, or on a mismatched `profileRevision` once its ledger row is
+     * pruned; while the row is live it replays its stored completion without
+     * comparing the notice's `profileRevision` (no memory write, no second CAS).
+     * Approval, release, completion and readback are Host authority on Host
+     * routes; this plane records no intent receipt of its own.
+     */
+    enqueueAgentMemoryIntentNotice(tenant: TenantId, deviceId: string, input: AgentMemoryIntentNoticeInput): Promise<EnqueuedAgentControl>;
     /** Tenant/device/request-bound durable desired-state and terminal-outcome readback. */
     getInputPreparationStatus(tenant: TenantId, deviceId: string, input: InputPreparationStatusInput): Promise<InputPreparationReadback | undefined>;
     /** Direct device completion endpoint authority; first exact terminal receipt wins. */

package/dist/handlers/shared.d.ts

@@ -26,6 +26,19 @@ export interface BoundedJsonBodyResult {
  * existing validation status.
  */
 export declare function readBoundedJsonBody(c: Context, maximum: number): Promise<BoundedJsonBodyResult>;
+/**
+ * Count actual request bytes before retaining each chunk. Keep the bytes intact
+ * for consumers that authenticate a raw-body hash before decoding JSON.
+ * Content-Length policy belongs to the caller; it never replaces this ceiling.
+ */
+export declare function readBoundedRawBody(stream: ReadableStream<Uint8Array> | null, maximum: number): Promise<Uint8Array | 'too_large' | undefined>;
+/**
+ * Cancellation is a resource-release best effort that is never awaited before
+ * rejecting an already oversized request. `ReadableStream.cancel()` is used
+ * before a reader exists; `ReadableStreamDefaultReader.cancel()` owns the
+ * same underlying request stream after an overflow has been observed.
+ */
+export declare function cancelBody(body: ReadableStream<Uint8Array> | ReadableStreamDefaultReader<Uint8Array> | null): void;
 export interface DeviceRouteDeps {
     readonly bearer: BearerAuthDeps;
     readonly root: CloudRootStores;

package/dist/index.d.ts

@@ -16,7 +16,7 @@ export { isTenantId, tenantId } from '@byok-sdk/core';
 export type { TenantId } from '@byok-sdk/core';
 export { createByokCloud } from './cloud';
 export type { TaskAgentMessage } from './task-agent-message';
-export type { ByokCloud, ByokCloudOptions, AgentDispatchInput, AgentEgressDispatchInput, AgentEgressFreshSessionDispatchInput, AgentContentReadInput, AgentHomeProjectionInput, AgentHomeProjectionStatusInput, InputPreparationInput, InputPreparationStatusInput, ApproveTaskOptions, EnqueueOfferInput, EnqueueToolsetOfferInput, RejectTaskOptions, EnqueuedAgentControl, EnqueuedAgentHomeProjection, EnqueuedInputPreparation, EnqueuedOffer, TaskOfferReadback, } from './cloud';
+export type { ByokCloud, ByokCloudOptions, AgentDispatchInput, AgentEgressDispatchInput, AgentEgressFreshSessionDispatchInput, AgentContentReadInput, AgentHomeProjectionInput, ProviderProvisioningNoticeInput, AgentMemoryIntentNoticeInput, AgentHomeProjectionStatusInput, InputPreparationInput, InputPreparationStatusInput, ApproveTaskOptions, EnqueueOfferInput, EnqueueToolsetOfferInput, RejectTaskOptions, EnqueuedAgentControl, EnqueuedAgentHomeProjection, EnqueuedInputPreparation, EnqueuedOffer, TaskOfferReadback, } from './cloud';
 export { agentHomeProjectionCompletionKey, agentHomeProjectionRequestKey, readAgentHomeProjectionStatus, recordAgentHomeProjectionCompletion, } from './agent-home-projections';
 export type { AgentHomeProjectionReceiptInput } from './agent-home-projections';
 export { inputPreparationCompletionKey, inputPreparationRequestKey, readInputPreparationStatus, recordInputPreparationCompletion, sameInputPreparationRequest, } from './input-preparations';

package/dist/index.js

@@ -1,7 +1,7 @@
 import { BOARD_STATUSES, CapabilityDeclarationSchema, NONCE_SIGNING_DOMAIN, hasCapability, isTenantId, tenantId, principalTenant, parseDeviceProofEnvelope, deviceProofSigningInput, contentHash, parseCapabilityDeclaration, ByokCoreError, tenantKey, PRESENCE_LEVELS, createInMemoryCoreStores, authenticateDeviceAssertion, authenticateTaskAssertion, assertCapability, isCoreConflictError, isCoreError, DEVICE_PROOF_HEADER, TRUTH_RECORD_KINDS, STORAGE_ERROR_CODES, STORAGE_ERROR_HTTP_STATUS } from '@byok-sdk/core';
 export { DEVICE_PROOF_HEADER, NONCE_SIGNING_DOMAIN, isTenantId, tenantId } from '@byok-sdk/core';
 import { z } from 'zod';
-import { AgentEventOrUnknownSchema, AgentMessageServerContextSchema, AgentMessageEgressRequirementSchema, AgentRefSchema, TaskOfferForAgentWithEgressFreshPayloadSchema, PROTOCOL_VERSION, DAEMON_TO_SERVER_TYPES, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY, encodeEnvelope, decodeEnvelope, AgentHomeProjectionCompletionRequestSchema, AgentInputPreparationPayloadSchema, InputPreparationCompletionRequestSchema, BYOK_PAIR_PATH, BYOK_CHALLENGE_PATH, BYOK_TOKEN_PATH, BYOK_CAPABILITIES_PATH, BYOK_AGENT_MEMORY_PROJECTIONS_PATH, BYOK_EVENTS_PATH, BYOK_MESSAGES_PATH, BYOK_AGENT_HOME_PROJECTION_COMPLETION_ROUTE, BYOK_INPUT_PREPARATION_COMPLETION_ROUTE, BYOK_INPUT_PREPARATION_STATUS_ROUTE, BYOK_BOARD_PATH, BYOK_BOARD_CLAIM_ROUTE, BYOK_BOARD_UNCLAIM_ROUTE, BYOK_BOARD_STATUS_ROUTE, BYOK_BOARD_STREAM_PATH, BYOK_PRESENCE_PATH, BYOK_ACTIVITY_PATH, BYOK_RECORDS_PATH, BYOK_RECORD_ROUTE, BYOK_SKILL_PACKS_PATH, BYOK_SKILL_PACK_FILE_ROUTE, BYOK_BLOBS_PATH, BYOK_BLOB_FINALIZE_ROUTE, BYOK_BLOB_URL_ROUTE, BYOK_BLOB_CONTENT_ROUTE, AgentMessagePublishPayloadSchema, isTaskOfferType, MESSAGE_PAYLOAD_SCHEMAS, createEnvelope, AgentHomeProjectionPayloadSchema, AgentContentReadPayloadSchema, AGENT_EGRESS_POLICY_CAPABILITY, AGENT_MESSAGE_EGRESS_CAPABILITY, TERMINAL_PROJECTION_SELECTION_CAPABILITY, TaskOfferForAgentWithEgressPayloadSchema, AGENT_INPUT_PREPARATION_CAPABILITY, AGENT_EGRESS_FRESH_SESSION_CAPABILITY, TaskOfferPreparedPayloadSchema, TaskOfferForAgentPayloadSchema, AgentMemoryProjectionMutationSchema, AgentMemoryProjectionReceiptSchema, AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE, AgentMemoryProjectionEraseResultSchema, HarnessIdSchema, STRICT_AGENT_ONLY_CAPABILITY, AGENT_CONTENT_ARTIFACT_READ_CAPABILITY, AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY, AGENT_CONTENT_WORKSPACE_READ_CAPABILITY, AGENT_HOME_PROJECTION_CAPABILITY, PairRequestSchema, PairResponseSchema, ChallengeRequestSchema, TokenRequestSchema, AgentMemoryProjectionCommitRequestSchema, agentMemoryProjectionBase64UrlByteLength, MAILBOX_READ_AHEAD_MAX_SEQS, MAILBOX_READ_AHEAD_CAPABILITY, MessagesSendRequestSchema, InputPreparationStatusQuerySchema, PresencePublishRequestSchema, CreateBlobRequestSchema, byokBlobContentPath, AgentMessageDispositionPayloadSchema, AgentEgressAckPayloadSchema, AgentContentReceiptPayloadSchema } from '@byok-sdk/protocol';
+import { AgentEventOrUnknownSchema, AgentMessageServerContextSchema, AgentMessageEgressRequirementSchema, AgentRefSchema, TaskOfferForAgentWithEgressFreshPayloadSchema, PROTOCOL_VERSION, DAEMON_TO_SERVER_TYPES, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY, encodeEnvelope, decodeEnvelope, AgentHomeProjectionCompletionRequestSchema, AgentInputPreparationPayloadSchema, InputPreparationCompletionRequestSchema, BYOK_PAIR_PATH, BYOK_CHALLENGE_PATH, BYOK_TOKEN_PATH, BYOK_CAPABILITIES_PATH, BYOK_AGENT_MEMORY_PROJECTIONS_PATH, BYOK_EVENTS_PATH, BYOK_MESSAGES_PATH, BYOK_AGENT_HOME_PROJECTION_COMPLETION_ROUTE, BYOK_INPUT_PREPARATION_COMPLETION_ROUTE, BYOK_INPUT_PREPARATION_STATUS_ROUTE, BYOK_BOARD_PATH, BYOK_BOARD_CLAIM_ROUTE, BYOK_BOARD_UNCLAIM_ROUTE, BYOK_BOARD_STATUS_ROUTE, BYOK_BOARD_STREAM_PATH, BYOK_PRESENCE_PATH, BYOK_ACTIVITY_PATH, BYOK_RECORDS_PATH, BYOK_RECORD_ROUTE, BYOK_SKILL_PACKS_PATH, BYOK_SKILL_PACK_FILE_ROUTE, BYOK_BLOBS_PATH, BYOK_BLOB_FINALIZE_ROUTE, BYOK_BLOB_URL_ROUTE, BYOK_BLOB_CONTENT_ROUTE, AgentMessagePublishPayloadSchema, isTaskOfferType, MESSAGE_PAYLOAD_SCHEMAS, createEnvelope, AgentMemoryIntentAvailablePayloadSchema, ProviderProvisioningAvailablePayloadSchema, AgentHomeProjectionPayloadSchema, AgentContentReadPayloadSchema, AGENT_EGRESS_POLICY_CAPABILITY, AGENT_MESSAGE_EGRESS_CAPABILITY, TERMINAL_PROJECTION_SELECTION_CAPABILITY, TaskOfferForAgentWithEgressPayloadSchema, AGENT_INPUT_PREPARATION_CAPABILITY, AGENT_EGRESS_FRESH_SESSION_CAPABILITY, TaskOfferPreparedPayloadSchema, TaskOfferForAgentPayloadSchema, AgentMemoryProjectionMutationSchema, AgentMemoryProjectionReceiptSchema, AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE, AgentMemoryProjectionEraseResultSchema, HarnessIdSchema, STRICT_AGENT_ONLY_CAPABILITY, AGENT_CONTENT_ARTIFACT_READ_CAPABILITY, AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY, AGENT_CONTENT_WORKSPACE_READ_CAPABILITY, AGENT_HOME_PROJECTION_CAPABILITY, AGENT_MEMORY_INTENT_CAPABILITY, PROVIDER_PROVISIONING_CAPABILITY, PairRequestSchema, PairResponseSchema, ChallengeRequestSchema, TokenRequestSchema, AgentMemoryProjectionCommitRequestSchema, agentMemoryProjectionBase64UrlByteLength, MAILBOX_READ_AHEAD_MAX_SEQS, MAILBOX_READ_AHEAD_CAPABILITY, MessagesSendRequestSchema, InputPreparationStatusQuerySchema, PresencePublishRequestSchema, CreateBlobRequestSchema, byokBlobContentPath, AgentMessageDispositionPayloadSchema, AgentEgressAckPayloadSchema, AgentContentReceiptPayloadSchema } from '@byok-sdk/protocol';
 import { Hono } from 'hono';
 
 // src/index.ts
@@ -1217,7 +1217,7 @@ var CLOUD_CAPABILITIES = {
    * DEVICE's only way to discharge a mailbox row this same deployment handed
    * it — withholding it would strand the device's redelivery cursor rather
    * than degrade a feature. For the same reason the completion route asserts
-   * no DEVICE capability either: the device-level `agent-input-preparation-v7`
+   * no DEVICE capability either: the device-level `agent-input-preparation-v8`
    * flag gates ADMISSION (`enqueueInputPreparation`) and nothing else, so an
    * unconfigured device is refused a row instead of being handed one whose
    * only honest answer — `input_preparation_unconfigured` — it could not then
@@ -1396,8 +1396,14 @@ async function readBoundedJsonBody(c, maximum) {
       return { body: void 0, tooLarge: true };
     }
   }
-  const stream = c.req.raw.body;
-  if (stream === null) return { body: void 0, tooLarge: false };
+  const bytes = await readBoundedRawBody(c.req.raw.body, maximum);
+  return {
+    body: bytes === void 0 || bytes === "too_large" ? void 0 : parseJsonBytes(bytes),
+    tooLarge: bytes === "too_large"
+  };
+}
+async function readBoundedRawBody(stream, maximum) {
+  if (stream === null) return new Uint8Array();
   const reader = stream.getReader();
   const chunks = [];
   let total = 0;
@@ -1407,14 +1413,14 @@ async function readBoundedJsonBody(c, maximum) {
       if (done) break;
       if (value.byteLength > maximum - total) {
         cancelBody(reader);
-        return { body: void 0, tooLarge: true };
+        return "too_large";
       }
       if (value.byteLength === 0) continue;
       chunks.push(value);
       total += value.byteLength;
     }
   } catch {
-    return { body: void 0, tooLarge: false };
+    return void 0;
   } finally {
     reader.releaseLock();
   }
@@ -1424,7 +1430,7 @@ async function readBoundedJsonBody(c, maximum) {
     bytes.set(chunk, offset);
     offset += chunk.byteLength;
   }
-  return { body: parseJsonBytes(bytes), tooLarge: false };
+  return bytes;
 }
 function cancelBody(body) {
   if (body === null) return;
@@ -2103,8 +2109,12 @@ function boardStreamHandler(deps) {
           stopped = true;
           stopController.abort();
           signal.removeEventListener("abort", onAbort);
-          closeController(controller);
-        });
+        }).then(
+          () => closeController(controller),
+          (error) => {
+            controller.error(error);
+          }
+        );
       },
       cancel() {
         stopped = true;
@@ -2630,11 +2640,13 @@ async function readBoundedBody2(c, maximum) {
   if (length !== void 0) {
     const parsed = Number(length);
     if (!Number.isSafeInteger(parsed) || parsed < 0) return void 0;
-    if (parsed > maximum) return "too_large";
+    if (parsed > maximum) {
+      cancelBody(c.req.raw.body);
+      return "too_large";
+    }
   }
   try {
-    const bytes = new Uint8Array(await c.req.arrayBuffer());
-    return bytes.byteLength > maximum ? "too_large" : bytes;
+    return await readBoundedRawBody(c.req.raw.body, maximum);
   } catch {
     return void 0;
   }
@@ -4060,6 +4072,64 @@ function createByokCloud(options) {
       return { ...control, status };
     },
     getInputPreparationStatus,
+    async enqueueProviderProvisioningNotice(tenant, deviceId, input) {
+      const payload = ProviderProvisioningAvailablePayloadSchema.parse(input);
+      await assertAgentCapabilities(tenant, deviceId, [PROVIDER_PROVISIONING_CAPABILITY]);
+      const messageId = uuidFromSha256(
+        await options.crypto.sha256(
+          new TextEncoder().encode(
+            JSON.stringify({
+              domain: "byok:provider-provisioning-notice",
+              tenant,
+              deviceId,
+              requestId: payload.requestId
+            })
+          )
+        )
+      );
+      const control = await enqueueAgentControlEnvelope(
+        tenant,
+        deviceId,
+        messageId,
+        (seq) => createEnvelope("provider.provisioning.available", payload, { id: messageId, seq })
+      );
+      if (control.envelope.type !== "provider.provisioning.available" || control.envelope.payload.requestId !== payload.requestId) {
+        throw new ByokCloudError(
+          "mailbox_receipt_mismatch",
+          `Mailbox message ${messageId} does not carry provider provisioning notice ${payload.requestId}.`
+        );
+      }
+      return control;
+    },
+    async enqueueAgentMemoryIntentNotice(tenant, deviceId, input) {
+      const payload = AgentMemoryIntentAvailablePayloadSchema.parse(input);
+      await assertAgentCapabilities(tenant, deviceId, [AGENT_MEMORY_INTENT_CAPABILITY]);
+      const messageId = uuidFromSha256(
+        await options.crypto.sha256(
+          new TextEncoder().encode(
+            JSON.stringify({
+              domain: "byok:agent-memory-intent-notice",
+              tenant,
+              deviceId,
+              intentId: payload.intentId
+            })
+          )
+        )
+      );
+      const control = await enqueueAgentControlEnvelope(
+        tenant,
+        deviceId,
+        messageId,
+        (seq) => createEnvelope("agent.memory.intent.available", payload, { id: messageId, seq })
+      );
+      if (control.envelope.type !== "agent.memory.intent.available" || control.envelope.payload.intentId !== payload.intentId || control.envelope.payload.agentRef.agentId !== payload.agentRef.agentId || control.envelope.payload.agentRef.profileRevision !== payload.agentRef.profileRevision) {
+        throw new ByokCloudError(
+          "mailbox_receipt_mismatch",
+          `Mailbox message ${messageId} does not carry Agent memory intent notice ${payload.intentId} for this Agent.`
+        );
+      }
+      return control;
+    },
     completeInputPreparation,
     eraseAgentMemoryProjection,
     approveTask(tenant, taskId, opts) {