@byok-sdk/protocol 0.11.0 → 0.13.0

package/README.md

@@ -3,6 +3,12 @@
 The frozen v1 BYOK device wire contract: envelope schemas, message payloads,
 codecs, version negotiation, and golden fixtures.
 
+`provider-profile-binding` is an additive v1 capability for exact device-local
+BYOK routing. Its `byok-profile` selection contains only `profileRef`, canonical
+decimal `profileRevision`, SHA-256 `profileHash`, `modelId`, and bounded
+`requiredCapabilities`. Endpoint, auth configuration, and credential material
+remain outside the protocol.
+
 `TaskOfferPayload.dispatchSelection` is the optional strict dual-lane target
 contract: subscription selects Claude/Codex + model, while BYOK selects Pi +
 provider + model. When present it is authoritative and runtime disagreement

package/dist/codec.d.ts

@@ -11,7 +11,7 @@ import { MESSAGE_PAYLOAD_SCHEMAS, type MessageType } from './messages';
 export declare function parseMessage(data: unknown): Envelope;
 /**
  * Decode a single NDJSON line into a validated {@link Envelope}. Accepts a
- * string or raw bytes (e.g. a WebSocket binary frame) — isomorphic, no
+ * string or raw bytes (e.g. a binary transport frame) — isomorphic, no
  * stream handling required of the caller.
  */
 export declare function decodeEnvelope(line: string | Uint8Array): Envelope;

package/dist/envelope.d.ts

@@ -110,6 +110,18 @@ export declare const EnvelopeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             runtimeId: z.ZodLiteral<"pi">;
             providerId: z.ZodString;
             modelId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            lane: z.ZodLiteral<"byok-profile">;
+            runtimeId: z.ZodLiteral<"pi">;
+            providerProfile: z.ZodObject<{
+                profileRef: z.ZodString;
+                profileRevision: z.ZodString;
+                profileHash: z.ZodString;
+                modelId: z.ZodString;
+                requiredCapabilities: z.ZodArray<z.ZodEnum<{
+                    "image-input": "image-input";
+                }>>;
+            }, z.core.$strict>;
         }, z.core.$strict>], "lane">>;
         sessionRef: z.ZodOptional<z.ZodString>;
         workspaceHint: z.ZodOptional<z.ZodString>;
@@ -166,6 +178,18 @@ export declare const EnvelopeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             runtimeId: z.ZodLiteral<"pi">;
             providerId: z.ZodString;
             modelId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            lane: z.ZodLiteral<"byok-profile">;
+            runtimeId: z.ZodLiteral<"pi">;
+            providerProfile: z.ZodObject<{
+                profileRef: z.ZodString;
+                profileRevision: z.ZodString;
+                profileHash: z.ZodString;
+                modelId: z.ZodString;
+                requiredCapabilities: z.ZodArray<z.ZodEnum<{
+                    "image-input": "image-input";
+                }>>;
+            }, z.core.$strict>;
         }, z.core.$strict>], "lane">>;
         sessionRef: z.ZodOptional<z.ZodString>;
         workspaceHint: z.ZodOptional<z.ZodString>;
@@ -228,6 +252,18 @@ export declare const EnvelopeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             runtimeId: z.ZodLiteral<"pi">;
             providerId: z.ZodString;
             modelId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            lane: z.ZodLiteral<"byok-profile">;
+            runtimeId: z.ZodLiteral<"pi">;
+            providerProfile: z.ZodObject<{
+                profileRef: z.ZodString;
+                profileRevision: z.ZodString;
+                profileHash: z.ZodString;
+                modelId: z.ZodString;
+                requiredCapabilities: z.ZodArray<z.ZodEnum<{
+                    "image-input": "image-input";
+                }>>;
+            }, z.core.$strict>;
         }, z.core.$strict>], "lane">>;
         terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
             mode: z.ZodLiteral<"none">;
@@ -294,6 +330,18 @@ export declare const EnvelopeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             runtimeId: z.ZodLiteral<"pi">;
             providerId: z.ZodString;
             modelId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            lane: z.ZodLiteral<"byok-profile">;
+            runtimeId: z.ZodLiteral<"pi">;
+            providerProfile: z.ZodObject<{
+                profileRef: z.ZodString;
+                profileRevision: z.ZodString;
+                profileHash: z.ZodString;
+                modelId: z.ZodString;
+                requiredCapabilities: z.ZodArray<z.ZodEnum<{
+                    "image-input": "image-input";
+                }>>;
+            }, z.core.$strict>;
         }, z.core.$strict>], "lane">>;
         terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
             mode: z.ZodLiteral<"none">;
@@ -400,6 +448,18 @@ export declare const EnvelopeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             runtimeId: z.ZodLiteral<"pi">;
             providerId: z.ZodString;
             modelId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            lane: z.ZodLiteral<"byok-profile">;
+            runtimeId: z.ZodLiteral<"pi">;
+            providerProfile: z.ZodObject<{
+                profileRef: z.ZodString;
+                profileRevision: z.ZodString;
+                profileHash: z.ZodString;
+                modelId: z.ZodString;
+                requiredCapabilities: z.ZodArray<z.ZodEnum<{
+                    "image-input": "image-input";
+                }>>;
+            }, z.core.$strict>;
         }, z.core.$strict>], "lane">>;
         terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
             mode: z.ZodLiteral<"none">;

package/dist/http-api.d.ts

@@ -3,12 +3,12 @@ import { z } from 'zod';
  * HTTP-side request/response shapes for the reference server's auth and blob
  * endpoints (M1 Part B). These are plain HTTP bodies, not wire envelopes —
  * kept in a separate module from `envelope.ts`/`messages.ts` because they
- * never travel over the WSS connection. Documented in full in
- * docs/protocol.md ("Auth flows", "Blob flows", "Long-poll fallback").
+ * are HTTP request/response bodies rather than mailbox envelopes. Documented
+ * in full in docs/protocol.md ("Auth flows", "Blob flows", "Long-poll").
  *
  * The wire protocol version (`v:1`) is unaffected by any of this: pairing,
- * token renewal, and blob transfer are out-of-band HTTP calls that happen
- * before/alongside the WSS connection, not envelope types.
+ * token renewal, and blob transfer are separate HTTP calls around the
+ * long-poll mailbox lifecycle, not envelope types.
  */
 export declare const PairRequestSchema: z.ZodObject<{
     pairingCode: z.ZodString;
@@ -83,7 +83,7 @@ export type PresencePublishRequest = z.infer<typeof PresencePublishRequestSchema
 /**
  * Revocation is server-side only (dashboard/API call on the SaaS's own
  * device registry) — there is no wire message for it. A revoked device's
- * next `/byok/challenge` or `/byok/token` call (or WSS connect) gets a 401;
+ * next `/byok/challenge`, `/byok/token`, or authenticated mailbox call gets a 401;
  * the daemon's only recourse is to re-run `/byok/pair` from scratch.
  */
 /** POST /byok/blobs request: declare a blob before uploading it. `contentHash` must be the canonical `sha256:<64 lowercase hex>` form (finding F9) — the server rejects anything else outright, no normalization. */
@@ -203,6 +203,18 @@ export declare const EventsPollResponseSchema: z.ZodObject<{
                 runtimeId: z.ZodLiteral<"pi">;
                 providerId: z.ZodString;
                 modelId: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                lane: z.ZodLiteral<"byok-profile">;
+                runtimeId: z.ZodLiteral<"pi">;
+                providerProfile: z.ZodObject<{
+                    profileRef: z.ZodString;
+                    profileRevision: z.ZodString;
+                    profileHash: z.ZodString;
+                    modelId: z.ZodString;
+                    requiredCapabilities: z.ZodArray<z.ZodEnum<{
+                        "image-input": "image-input";
+                    }>>;
+                }, z.core.$strict>;
             }, z.core.$strict>], "lane">>;
             sessionRef: z.ZodOptional<z.ZodString>;
             workspaceHint: z.ZodOptional<z.ZodString>;
@@ -259,6 +271,18 @@ export declare const EventsPollResponseSchema: z.ZodObject<{
                 runtimeId: z.ZodLiteral<"pi">;
                 providerId: z.ZodString;
                 modelId: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                lane: z.ZodLiteral<"byok-profile">;
+                runtimeId: z.ZodLiteral<"pi">;
+                providerProfile: z.ZodObject<{
+                    profileRef: z.ZodString;
+                    profileRevision: z.ZodString;
+                    profileHash: z.ZodString;
+                    modelId: z.ZodString;
+                    requiredCapabilities: z.ZodArray<z.ZodEnum<{
+                        "image-input": "image-input";
+                    }>>;
+                }, z.core.$strict>;
             }, z.core.$strict>], "lane">>;
             sessionRef: z.ZodOptional<z.ZodString>;
             workspaceHint: z.ZodOptional<z.ZodString>;
@@ -321,6 +345,18 @@ export declare const EventsPollResponseSchema: z.ZodObject<{
                 runtimeId: z.ZodLiteral<"pi">;
                 providerId: z.ZodString;
                 modelId: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                lane: z.ZodLiteral<"byok-profile">;
+                runtimeId: z.ZodLiteral<"pi">;
+                providerProfile: z.ZodObject<{
+                    profileRef: z.ZodString;
+                    profileRevision: z.ZodString;
+                    profileHash: z.ZodString;
+                    modelId: z.ZodString;
+                    requiredCapabilities: z.ZodArray<z.ZodEnum<{
+                        "image-input": "image-input";
+                    }>>;
+                }, z.core.$strict>;
             }, z.core.$strict>], "lane">>;
             terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
                 mode: z.ZodLiteral<"none">;
@@ -387,6 +423,18 @@ export declare const EventsPollResponseSchema: z.ZodObject<{
                 runtimeId: z.ZodLiteral<"pi">;
                 providerId: z.ZodString;
                 modelId: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                lane: z.ZodLiteral<"byok-profile">;
+                runtimeId: z.ZodLiteral<"pi">;
+                providerProfile: z.ZodObject<{
+                    profileRef: z.ZodString;
+                    profileRevision: z.ZodString;
+                    profileHash: z.ZodString;
+                    modelId: z.ZodString;
+                    requiredCapabilities: z.ZodArray<z.ZodEnum<{
+                        "image-input": "image-input";
+                    }>>;
+                }, z.core.$strict>;
             }, z.core.$strict>], "lane">>;
             terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
                 mode: z.ZodLiteral<"none">;
@@ -493,6 +541,18 @@ export declare const EventsPollResponseSchema: z.ZodObject<{
                 runtimeId: z.ZodLiteral<"pi">;
                 providerId: z.ZodString;
                 modelId: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                lane: z.ZodLiteral<"byok-profile">;
+                runtimeId: z.ZodLiteral<"pi">;
+                providerProfile: z.ZodObject<{
+                    profileRef: z.ZodString;
+                    profileRevision: z.ZodString;
+                    profileHash: z.ZodString;
+                    modelId: z.ZodString;
+                    requiredCapabilities: z.ZodArray<z.ZodEnum<{
+                        "image-input": "image-input";
+                    }>>;
+                }, z.core.$strict>;
             }, z.core.$strict>], "lane">>;
             terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
                 mode: z.ZodLiteral<"none">;
@@ -1213,6 +1273,18 @@ export declare const MessagesSendRequestSchema: z.ZodObject<{
                 runtimeId: z.ZodLiteral<"pi">;
                 providerId: z.ZodString;
                 modelId: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                lane: z.ZodLiteral<"byok-profile">;
+                runtimeId: z.ZodLiteral<"pi">;
+                providerProfile: z.ZodObject<{
+                    profileRef: z.ZodString;
+                    profileRevision: z.ZodString;
+                    profileHash: z.ZodString;
+                    modelId: z.ZodString;
+                    requiredCapabilities: z.ZodArray<z.ZodEnum<{
+                        "image-input": "image-input";
+                    }>>;
+                }, z.core.$strict>;
             }, z.core.$strict>], "lane">>;
             sessionRef: z.ZodOptional<z.ZodString>;
             workspaceHint: z.ZodOptional<z.ZodString>;
@@ -1269,6 +1341,18 @@ export declare const MessagesSendRequestSchema: z.ZodObject<{
                 runtimeId: z.ZodLiteral<"pi">;
                 providerId: z.ZodString;
                 modelId: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                lane: z.ZodLiteral<"byok-profile">;
+                runtimeId: z.ZodLiteral<"pi">;
+                providerProfile: z.ZodObject<{
+                    profileRef: z.ZodString;
+                    profileRevision: z.ZodString;
+                    profileHash: z.ZodString;
+                    modelId: z.ZodString;
+                    requiredCapabilities: z.ZodArray<z.ZodEnum<{
+                        "image-input": "image-input";
+                    }>>;
+                }, z.core.$strict>;
             }, z.core.$strict>], "lane">>;
             sessionRef: z.ZodOptional<z.ZodString>;
             workspaceHint: z.ZodOptional<z.ZodString>;
@@ -1331,6 +1415,18 @@ export declare const MessagesSendRequestSchema: z.ZodObject<{
                 runtimeId: z.ZodLiteral<"pi">;
                 providerId: z.ZodString;
                 modelId: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                lane: z.ZodLiteral<"byok-profile">;
+                runtimeId: z.ZodLiteral<"pi">;
+                providerProfile: z.ZodObject<{
+                    profileRef: z.ZodString;
+                    profileRevision: z.ZodString;
+                    profileHash: z.ZodString;
+                    modelId: z.ZodString;
+                    requiredCapabilities: z.ZodArray<z.ZodEnum<{
+                        "image-input": "image-input";
+                    }>>;
+                }, z.core.$strict>;
             }, z.core.$strict>], "lane">>;
             terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
                 mode: z.ZodLiteral<"none">;
@@ -1397,6 +1493,18 @@ export declare const MessagesSendRequestSchema: z.ZodObject<{
                 runtimeId: z.ZodLiteral<"pi">;
                 providerId: z.ZodString;
                 modelId: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                lane: z.ZodLiteral<"byok-profile">;
+                runtimeId: z.ZodLiteral<"pi">;
+                providerProfile: z.ZodObject<{
+                    profileRef: z.ZodString;
+                    profileRevision: z.ZodString;
+                    profileHash: z.ZodString;
+                    modelId: z.ZodString;
+                    requiredCapabilities: z.ZodArray<z.ZodEnum<{
+                        "image-input": "image-input";
+                    }>>;
+                }, z.core.$strict>;
             }, z.core.$strict>], "lane">>;
             terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
                 mode: z.ZodLiteral<"none">;
@@ -1503,6 +1611,18 @@ export declare const MessagesSendRequestSchema: z.ZodObject<{
                 runtimeId: z.ZodLiteral<"pi">;
                 providerId: z.ZodString;
                 modelId: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                lane: z.ZodLiteral<"byok-profile">;
+                runtimeId: z.ZodLiteral<"pi">;
+                providerProfile: z.ZodObject<{
+                    profileRef: z.ZodString;
+                    profileRevision: z.ZodString;
+                    profileHash: z.ZodString;
+                    modelId: z.ZodString;
+                    requiredCapabilities: z.ZodArray<z.ZodEnum<{
+                        "image-input": "image-input";
+                    }>>;
+                }, z.core.$strict>;
             }, z.core.$strict>], "lane">>;
             terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
                 mode: z.ZodLiteral<"none">;
@@ -2119,12 +2239,10 @@ export declare const MessagesSendRequestSchema: z.ZodObject<{
 export type MessagesSendRequest = z.infer<typeof MessagesSendRequestSchema>;
 /**
  * `accepted` counts every envelope `ConnectionHub.handleInbound` returned
- * `'accepted'` *or* `'duplicate'` for (finding P2) — a dedup'd replay is a
- * wire-level success (§9's idempotency window), even though no handler ran
- * for it a second time. `rejected` (a type outside `DAEMON_TO_SERVER_TYPES`,
- * or an ownership mismatch — N2) is a separate, additive count: omitted
- * entirely when zero, so a batch with nothing rejected keeps the pre-P2
- * `{ accepted }` shape callers already depend on.
+ * `'accepted'` *or* `'duplicate'` for — a deduped replay is a wire-level
+ * success even though the business mutation did not run a second time.
+ * `rejected` is additive and omitted when zero, preserving frozen v1's
+ * `{ accepted }` response shape.
  */
 export declare const MessagesSendResponseSchema: z.ZodObject<{
     accepted: z.ZodNumber;
@@ -2229,8 +2347,6 @@ export declare const AgentMemoryProjectionCommitResponseSchema: z.ZodObject<{
     }, z.core.$strict>;
 }, z.core.$strict>;
 export type AgentMemoryProjectionCommitResponse = z.infer<typeof AgentMemoryProjectionCommitResponseSchema>;
-/** `GET /byok/ws` — WebSocket upgrade path. */
-export declare const BYOK_WS_PATH = "/byok/ws";
 /** `POST /byok/pair` — one-time device pairing (§6). */
 export declare const BYOK_PAIR_PATH = "/byok/pair";
 /** `POST /byok/challenge` — token-renewal challenge (§6.3). */

package/dist/index.d.ts

@@ -4,6 +4,8 @@ export { BlobRefSchema, CONTENT_HASH_RE } from './blob';
 export type { BlobRef } from './blob';
 export { PermissionPolicySchema, PERMISSION_MODES } from './permission';
 export type { PermissionPolicy, PermissionMode } from './permission';
+export { PROVIDER_PROFILE_BINDING_CAPABILITY, PROVIDER_MODEL_CAPABILITIES, ProviderProfileRefSchema, ProviderProfileRevisionSchema, ProviderProfileHashSchema, ProviderModelCapabilitySchema, ProviderProfileBindingSchema, } from './provider-profile-binding';
+export type { ProviderProfileRef, ProviderProfileRevision, ProviderProfileHash, ProviderModelCapability, ProviderProfileBinding, } from './provider-profile-binding';
 export { AgentEventSchema, UnknownAgentEventSchema, AgentEventOrUnknownSchema, KNOWN_AGENT_EVENT_TYPES, isKnownAgentEvent, partitionAgentEvents, } from './agent-event';
 export type { AgentEvent, UnknownAgentEvent, AgentEventOrUnknown } from './agent-event';
 export { AgentEgressPolicySchema, AgentEgressActivityPolicySchema, AgentReliableQuotaPolicySchema, ContentReadPolicySchema, AgentEgressLaneSchema, AgentEgressDropReasonSchema, AgentContentReadSurfaceSchema, AgentContentActorKindSchema, AgentContentActorSchema, AgentContentDecodeAsSchema, AgentContentMimeTypeSchema, AgentContentReadDecisionSchema, AgentContentReadDenialReasonSchema, AgentEgressContentHashSchema, AgentEgressPolicyRevisionSchema, AgentMessageContractSchema, AgentMessageContentTypeSchema, AgentMessageDestinationBindingSchema, AgentMessageFreshnessCursorSchema, AgentMessageServerContextSchema, AgentMessageEgressRequirementSchema, AGENT_MESSAGE_MAX_BYTES, AGENT_MESSAGE_EGRESS_CAPABILITY, AGENT_EGRESS_POLICY_CAPABILITY, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY, AGENT_EGRESS_FRESH_SESSION_CAPABILITY, AGENT_CONTENT_WORKSPACE_READ_CAPABILITY, AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY, AGENT_CONTENT_ARTIFACT_READ_CAPABILITY, } from './agent-egress';
@@ -23,5 +25,5 @@ export type { Envelope } from './envelope';
 export { ProtocolError, EnvelopeParseError, UnknownMessageTypeError, EnvelopeValidationError, } from './errors';
 export { encodeEnvelope, decodeEnvelope, createEnvelope, parseMessage } from './codec';
 export type { CreateEnvelopeOptions } from './codec';
-export { PairRequestSchema, PairResponseTenantIdSchema, PAIR_RESPONSE_TENANT_ID_MAX_LENGTH, PairResponseSchema, ChallengeRequestSchema, ChallengeResponseSchema, TokenRequestSchema, TokenResponseSchema, PresencePublishRequestSchema, CreateBlobRequestSchema, CreateBlobResponseSchema, BlobDownloadUrlResponseSchema, EventsPollQuerySchema, EventsPollResponseSchema, MessagesSendRequestSchema, MessagesSendResponseSchema, AgentHomeProjectionCompletionRequestSchema, AgentHomeProjectionStatusSchema, AgentHomeProjectionReadbackSchema, AgentMemoryProjectionCommitRequestSchema, AgentMemoryProjectionCommitResponseSchema, MAX_MESSAGES_PER_BATCH, BYOK_WS_PATH, BYOK_PAIR_PATH, BYOK_CHALLENGE_PATH, BYOK_TOKEN_PATH, BYOK_CAPABILITIES_PATH, BYOK_EVENTS_PATH, BYOK_MESSAGES_PATH, BYOK_AGENT_HOME_PROJECTIONS_PATH, BYOK_AGENT_HOME_PROJECTION_COMPLETION_ROUTE, byokAgentHomeProjectionCompletionPath, BYOK_AGENT_MEMORY_PROJECTIONS_PATH, BYOK_PRESENCE_PATH, BYOK_ACTIVITY_PATH, BYOK_BOARD_PATH, BYOK_BOARD_STREAM_PATH, BYOK_BOARD_CLAIM_ROUTE, BYOK_BOARD_UNCLAIM_ROUTE, BYOK_BOARD_STATUS_ROUTE, BYOK_RECORDS_PATH, BYOK_RECORD_ROUTE, byokRecordPath, BYOK_SKILL_PACKS_PATH, BYOK_SKILL_PACK_FILE_ROUTE, byokSkillPackFilePath, BYOK_BLOBS_PATH, BYOK_BLOB_FINALIZE_ROUTE, BYOK_BLOB_URL_ROUTE, BYOK_BLOB_CONTENT_ROUTE, byokBlobFinalizePath, byokBlobUrlPath, byokBlobContentPath, } from './http-api';
+export { PairRequestSchema, PairResponseTenantIdSchema, PAIR_RESPONSE_TENANT_ID_MAX_LENGTH, PairResponseSchema, ChallengeRequestSchema, ChallengeResponseSchema, TokenRequestSchema, TokenResponseSchema, PresencePublishRequestSchema, CreateBlobRequestSchema, CreateBlobResponseSchema, BlobDownloadUrlResponseSchema, EventsPollQuerySchema, EventsPollResponseSchema, MessagesSendRequestSchema, MessagesSendResponseSchema, AgentHomeProjectionCompletionRequestSchema, AgentHomeProjectionStatusSchema, AgentHomeProjectionReadbackSchema, AgentMemoryProjectionCommitRequestSchema, AgentMemoryProjectionCommitResponseSchema, MAX_MESSAGES_PER_BATCH, BYOK_PAIR_PATH, BYOK_CHALLENGE_PATH, BYOK_TOKEN_PATH, BYOK_CAPABILITIES_PATH, BYOK_EVENTS_PATH, BYOK_MESSAGES_PATH, BYOK_AGENT_HOME_PROJECTIONS_PATH, BYOK_AGENT_HOME_PROJECTION_COMPLETION_ROUTE, byokAgentHomeProjectionCompletionPath, BYOK_AGENT_MEMORY_PROJECTIONS_PATH, BYOK_PRESENCE_PATH, BYOK_ACTIVITY_PATH, BYOK_BOARD_PATH, BYOK_BOARD_STREAM_PATH, BYOK_BOARD_CLAIM_ROUTE, BYOK_BOARD_UNCLAIM_ROUTE, BYOK_BOARD_STATUS_ROUTE, BYOK_RECORDS_PATH, BYOK_RECORD_ROUTE, byokRecordPath, BYOK_SKILL_PACKS_PATH, BYOK_SKILL_PACK_FILE_ROUTE, byokSkillPackFilePath, BYOK_BLOBS_PATH, BYOK_BLOB_FINALIZE_ROUTE, BYOK_BLOB_URL_ROUTE, BYOK_BLOB_CONTENT_ROUTE, byokBlobFinalizePath, byokBlobUrlPath, byokBlobContentPath, } from './http-api';
 export type { PairRequest, PairResponse, ChallengeRequest, ChallengeResponse, TokenRequest, TokenResponse, PresencePublishRequest, CreateBlobRequest, CreateBlobResponse, BlobDownloadUrlResponse, EventsPollQuery, EventsPollResponse, MessagesSendRequest, MessagesSendResponse, AgentHomeProjectionCompletionRequest, AgentHomeProjectionStatus, AgentHomeProjectionReadback, AgentMemoryProjectionCommitRequest, AgentMemoryProjectionCommitResponse, } from './http-api';

package/dist/index.js

@@ -122,6 +122,23 @@ var TerminalProjectionSelectionSchema = z.discriminatedUnion("mode", [
     contract: TerminalProjectionContractSchema
   }).strict()
 ]);
+var PROVIDER_PROFILE_BINDING_CAPABILITY = "provider-profile-binding";
+var ProviderProfileRefSchema = z.string().min(1).max(64).regex(/^[a-z0-9]+(?:[-_][a-z0-9]+)*$/u, "provider profile refs must be lowercase portable identifiers");
+var ProviderProfileRevisionSchema = z.string().regex(/^(?:0|[1-9][0-9]{0,19})$/u, "provider profile revision must be canonical decimal");
+var ProviderProfileHashSchema = z.string().regex(/^sha256:[0-9a-f]{64}$/u, "provider profile hash must be lowercase sha256");
+var PROVIDER_MODEL_CAPABILITIES = ["image-input"];
+var ProviderModelCapabilitySchema = z.enum(PROVIDER_MODEL_CAPABILITIES);
+var ProviderProfileBindingSchema = z.object({
+  profileRef: ProviderProfileRefSchema,
+  profileRevision: ProviderProfileRevisionSchema,
+  profileHash: ProviderProfileHashSchema,
+  modelId: z.string().min(1).max(160).regex(/^[^\u0000\r\n]+$/u),
+  requiredCapabilities: z.array(ProviderModelCapabilitySchema).max(8)
+}).strict().superRefine((binding, ctx) => {
+  if (new Set(binding.requiredCapabilities).size !== binding.requiredCapabilities.length) {
+    ctx.addIssue({ code: "custom", path: ["requiredCapabilities"], message: "duplicate provider capability" });
+  }
+});
 
 // src/version.ts
 var PROTOCOL_VERSION = 1;
@@ -134,6 +151,7 @@ var CAPABILITY_FLAGS = [
   "approval-targeting",
   "result-document",
   "dispatch-selection",
+  PROVIDER_PROFILE_BINDING_CAPABILITY,
   "toolset-selection",
   "agent-home-contract",
   STRICT_AGENT_ONLY_CAPABILITY,
@@ -307,6 +325,11 @@ var DispatchSelectionSchema = z.discriminatedUnion("lane", [
     runtimeId: z.literal("pi"),
     providerId: DispatchTargetIdSchema,
     modelId: DispatchTargetIdSchema
+  }).strict(),
+  z.object({
+    lane: z.literal("byok-profile"),
+    runtimeId: z.literal("pi"),
+    providerProfile: ProviderProfileBindingSchema
   }).strict()
 ]);
 var TaskOfferPayloadSchema = z.object({
@@ -1044,7 +1067,6 @@ var AgentHomeProjectionReadbackSchema = z.object({
 }).strict();
 var AgentMemoryProjectionCommitRequestSchema = AgentMemoryProjectionMutationSchema;
 var AgentMemoryProjectionCommitResponseSchema = AgentMemoryProjectionReceiptSchema;
-var BYOK_WS_PATH = "/byok/ws";
 var BYOK_PAIR_PATH = "/byok/pair";
 var BYOK_CHALLENGE_PATH = "/byok/challenge";
 var BYOK_TOKEN_PATH = "/byok/token";
@@ -1088,6 +1110,6 @@ function byokBlobContentPath(blobId) {
   return `/byok/blobs/${blobId}/content`;
 }
 
-export { AGENT_CONTENT_ARTIFACT_READ_CAPABILITY, AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY, AGENT_CONTENT_WORKSPACE_READ_CAPABILITY, AGENT_EGRESS_FRESH_SESSION_CAPABILITY, AGENT_EGRESS_POLICY_CAPABILITY, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY, AGENT_HOME_PROJECTION_CAPABILITY, AGENT_HOME_PROJECTION_MAX_BYTES, AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM, AGENT_MEMORY_PROJECTION_CAPABILITY, AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE, AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES, AGENT_MESSAGE_EGRESS_CAPABILITY, AGENT_MESSAGE_MAX_BYTES, AGENT_REF_MAX_BYTES, AgentContentActorKindSchema, AgentContentActorSchema, AgentContentDecodeAsSchema, AgentContentMimeTypeSchema, AgentContentReadDecisionSchema, AgentContentReadDenialReasonSchema, AgentContentReadPayloadSchema, AgentContentReadSurfaceSchema, AgentContentReceiptPayloadSchema, AgentEgressAckPayloadSchema, AgentEgressActivityPolicySchema, AgentEgressContentHashSchema, AgentEgressDropReasonSchema, AgentEgressLaneSchema, AgentEgressPolicyRevisionSchema, AgentEgressPolicySchema, AgentEgressReliablePayloadSchema, AgentEventOrUnknownSchema, AgentEventSchema, AgentHomeProjectionAgentRefSchema, AgentHomeProjectionCompletionRequestSchema, AgentHomeProjectionHashSchema, AgentHomeProjectionOutcomeSchema, AgentHomeProjectionPayloadSchema, AgentHomeProjectionProfileRevisionSchema, AgentHomeProjectionReadbackSchema, AgentHomeProjectionStatusSchema, AgentHomeProjectionValueSchema, AgentMemoryProjectionCommitRequestSchema, AgentMemoryProjectionCommitResponseSchema, AgentMemoryProjectionEraseResultSchema, AgentMemoryProjectionGrantRefSchema, AgentMemoryProjectionMeteringReceiptSchema, AgentMemoryProjectionMutationSchema, AgentMemoryProjectionReceiptSchema, AgentMemoryProjectionSessionRefSchema, AgentMemoryProjectionSnapshotSchema, AgentMemoryProjectionSourceSeqSchema, AgentMemoryProjectionWriterEpochSchema, AgentMessageContentTypeSchema, AgentMessageContractSchema, AgentMessageDestinationBindingSchema, AgentMessageDispositionPayloadSchema, AgentMessageEgressRequirementSchema, AgentMessageFreshnessCursorSchema, AgentMessagePublishPayloadSchema, AgentMessageServerContextSchema, AgentRefSchema, AgentReliableQuotaPolicySchema, BYOK_ACTIVITY_PATH, BYOK_AGENT_HOME_PROJECTIONS_PATH, BYOK_AGENT_HOME_PROJECTION_COMPLETION_ROUTE, BYOK_AGENT_MEMORY_PROJECTIONS_PATH, BYOK_BLOBS_PATH, BYOK_BLOB_CONTENT_ROUTE, BYOK_BLOB_FINALIZE_ROUTE, BYOK_BLOB_URL_ROUTE, BYOK_BOARD_CLAIM_ROUTE, BYOK_BOARD_PATH, BYOK_BOARD_STATUS_ROUTE, BYOK_BOARD_STREAM_PATH, BYOK_BOARD_UNCLAIM_ROUTE, BYOK_CAPABILITIES_PATH, BYOK_CHALLENGE_PATH, BYOK_EVENTS_PATH, BYOK_MESSAGES_PATH, BYOK_PAIR_PATH, BYOK_PRESENCE_PATH, BYOK_RECORDS_PATH, BYOK_RECORD_ROUTE, BYOK_SKILL_PACKS_PATH, BYOK_SKILL_PACK_FILE_ROUTE, BYOK_TOKEN_PATH, BYOK_WS_PATH, BlobDownloadUrlResponseSchema, BlobRefSchema, CAPABILITY_FLAGS, CONFIGURED_TOOLSETS_MAX_ITEMS, CONTENT_HASH_RE, ChallengeRequestSchema, ChallengeResponseSchema, ConfiguredToolsetsSchema, ConnAckPayloadSchema, ConnHelloPayloadSchema, ContentReadPolicySchema, CreateBlobRequestSchema, CreateBlobResponseSchema, DAEMON_TO_SERVER_TYPES, DispatchSelectionSchema, EnvelopeParseError, EnvelopeSchema, EnvelopeValidationError, EventsPollQuerySchema, EventsPollResponseSchema, KNOWN_AGENT_EVENT_TYPES, MAX_MESSAGES_PER_BATCH, MESSAGE_PAYLOAD_SCHEMAS, MESSAGE_TYPES, MessagesSendRequestSchema, MessagesSendResponseSchema, PAIR_RESPONSE_TENANT_ID_MAX_LENGTH, PERMISSION_MODES, PROTOCOL_VERSION, PairRequestSchema, PairResponseSchema, PairResponseTenantIdSchema, PermissionPolicySchema, PresencePublishRequestSchema, ProtocolError, ProtocolVersionNumberSchema, RESULT_DOCUMENT_MAX_BYTES, RequiredToolsetsSchema, RuntimeCapabilitiesSchema, RuntimeIdSchema, RuntimeInfoSchema, SERVER_TO_DAEMON_TYPES, STRICT_AGENT_ONLY_CAPABILITY, TASK_STATES, TASK_TRANSITIONS, TERMINAL_INFERENCE_USAGE_CLIENT_VERSION_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_MAX_DURATION_MS, TERMINAL_INFERENCE_USAGE_MAX_TOKENS, TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_PROVIDER_MAX_LENGTH, TERMINAL_PROJECTION_SELECTION_CAPABILITY, TaskApprovalResolvedPayloadSchema, TaskApprovePayloadSchema, TaskArtifactPayloadSchema, TaskAwaitApprovalPayloadSchema, TaskCancelPayloadSchema, TaskCancelledPayloadSchema, TaskClaimPayloadSchema, TaskCompletePayloadSchema, TaskDeclinePayloadSchema, TaskFailPayloadSchema, TaskOfferForAgentPayloadSchema, TaskOfferForAgentWithEgressFreshPayloadSchema, TaskOfferForAgentWithEgressPayloadSchema, TaskOfferPayloadSchema, TaskOfferWithToolsetsPayloadSchema, TaskProgressPayloadSchema, TaskRejectPayloadSchema, TaskStartedPayloadSchema, TaskSteerPayloadSchema, TerminalInferenceUsageSchema, TerminalProjectionContractSchema, TerminalProjectionSelectionSchema, TokenRequestSchema, TokenResponseSchema, ToolsetIdSchema, UnknownAgentEventSchema, UnknownMessageTypeError, agentMemoryProjectionBase64UrlByteLength, byokAgentHomeProjectionCompletionPath, byokBlobContentPath, byokBlobFinalizePath, byokBlobUrlPath, byokRecordPath, byokSkillPackFilePath, canTransition, checkResultDocument, createEnvelope, decodeEnvelope, encodeEnvelope, isKnownAgentEvent, isServerToDaemonType, parseMessage, partitionAgentEvents };
+export { AGENT_CONTENT_ARTIFACT_READ_CAPABILITY, AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY, AGENT_CONTENT_WORKSPACE_READ_CAPABILITY, AGENT_EGRESS_FRESH_SESSION_CAPABILITY, AGENT_EGRESS_POLICY_CAPABILITY, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY, AGENT_HOME_PROJECTION_CAPABILITY, AGENT_HOME_PROJECTION_MAX_BYTES, AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM, AGENT_MEMORY_PROJECTION_CAPABILITY, AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE, AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES, AGENT_MESSAGE_EGRESS_CAPABILITY, AGENT_MESSAGE_MAX_BYTES, AGENT_REF_MAX_BYTES, AgentContentActorKindSchema, AgentContentActorSchema, AgentContentDecodeAsSchema, AgentContentMimeTypeSchema, AgentContentReadDecisionSchema, AgentContentReadDenialReasonSchema, AgentContentReadPayloadSchema, AgentContentReadSurfaceSchema, AgentContentReceiptPayloadSchema, AgentEgressAckPayloadSchema, AgentEgressActivityPolicySchema, AgentEgressContentHashSchema, AgentEgressDropReasonSchema, AgentEgressLaneSchema, AgentEgressPolicyRevisionSchema, AgentEgressPolicySchema, AgentEgressReliablePayloadSchema, AgentEventOrUnknownSchema, AgentEventSchema, AgentHomeProjectionAgentRefSchema, AgentHomeProjectionCompletionRequestSchema, AgentHomeProjectionHashSchema, AgentHomeProjectionOutcomeSchema, AgentHomeProjectionPayloadSchema, AgentHomeProjectionProfileRevisionSchema, AgentHomeProjectionReadbackSchema, AgentHomeProjectionStatusSchema, AgentHomeProjectionValueSchema, AgentMemoryProjectionCommitRequestSchema, AgentMemoryProjectionCommitResponseSchema, AgentMemoryProjectionEraseResultSchema, AgentMemoryProjectionGrantRefSchema, AgentMemoryProjectionMeteringReceiptSchema, AgentMemoryProjectionMutationSchema, AgentMemoryProjectionReceiptSchema, AgentMemoryProjectionSessionRefSchema, AgentMemoryProjectionSnapshotSchema, AgentMemoryProjectionSourceSeqSchema, AgentMemoryProjectionWriterEpochSchema, AgentMessageContentTypeSchema, AgentMessageContractSchema, AgentMessageDestinationBindingSchema, AgentMessageDispositionPayloadSchema, AgentMessageEgressRequirementSchema, AgentMessageFreshnessCursorSchema, AgentMessagePublishPayloadSchema, AgentMessageServerContextSchema, AgentRefSchema, AgentReliableQuotaPolicySchema, BYOK_ACTIVITY_PATH, BYOK_AGENT_HOME_PROJECTIONS_PATH, BYOK_AGENT_HOME_PROJECTION_COMPLETION_ROUTE, BYOK_AGENT_MEMORY_PROJECTIONS_PATH, BYOK_BLOBS_PATH, BYOK_BLOB_CONTENT_ROUTE, BYOK_BLOB_FINALIZE_ROUTE, BYOK_BLOB_URL_ROUTE, BYOK_BOARD_CLAIM_ROUTE, BYOK_BOARD_PATH, BYOK_BOARD_STATUS_ROUTE, BYOK_BOARD_STREAM_PATH, BYOK_BOARD_UNCLAIM_ROUTE, BYOK_CAPABILITIES_PATH, BYOK_CHALLENGE_PATH, BYOK_EVENTS_PATH, BYOK_MESSAGES_PATH, BYOK_PAIR_PATH, BYOK_PRESENCE_PATH, BYOK_RECORDS_PATH, BYOK_RECORD_ROUTE, BYOK_SKILL_PACKS_PATH, BYOK_SKILL_PACK_FILE_ROUTE, BYOK_TOKEN_PATH, BlobDownloadUrlResponseSchema, BlobRefSchema, CAPABILITY_FLAGS, CONFIGURED_TOOLSETS_MAX_ITEMS, CONTENT_HASH_RE, ChallengeRequestSchema, ChallengeResponseSchema, ConfiguredToolsetsSchema, ConnAckPayloadSchema, ConnHelloPayloadSchema, ContentReadPolicySchema, CreateBlobRequestSchema, CreateBlobResponseSchema, DAEMON_TO_SERVER_TYPES, DispatchSelectionSchema, EnvelopeParseError, EnvelopeSchema, EnvelopeValidationError, EventsPollQuerySchema, EventsPollResponseSchema, KNOWN_AGENT_EVENT_TYPES, MAX_MESSAGES_PER_BATCH, MESSAGE_PAYLOAD_SCHEMAS, MESSAGE_TYPES, MessagesSendRequestSchema, MessagesSendResponseSchema, PAIR_RESPONSE_TENANT_ID_MAX_LENGTH, PERMISSION_MODES, PROTOCOL_VERSION, PROVIDER_MODEL_CAPABILITIES, PROVIDER_PROFILE_BINDING_CAPABILITY, PairRequestSchema, PairResponseSchema, PairResponseTenantIdSchema, PermissionPolicySchema, PresencePublishRequestSchema, ProtocolError, ProtocolVersionNumberSchema, ProviderModelCapabilitySchema, ProviderProfileBindingSchema, ProviderProfileHashSchema, ProviderProfileRefSchema, ProviderProfileRevisionSchema, RESULT_DOCUMENT_MAX_BYTES, RequiredToolsetsSchema, RuntimeCapabilitiesSchema, RuntimeIdSchema, RuntimeInfoSchema, SERVER_TO_DAEMON_TYPES, STRICT_AGENT_ONLY_CAPABILITY, TASK_STATES, TASK_TRANSITIONS, TERMINAL_INFERENCE_USAGE_CLIENT_VERSION_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_MAX_DURATION_MS, TERMINAL_INFERENCE_USAGE_MAX_TOKENS, TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_PROVIDER_MAX_LENGTH, TERMINAL_PROJECTION_SELECTION_CAPABILITY, TaskApprovalResolvedPayloadSchema, TaskApprovePayloadSchema, TaskArtifactPayloadSchema, TaskAwaitApprovalPayloadSchema, TaskCancelPayloadSchema, TaskCancelledPayloadSchema, TaskClaimPayloadSchema, TaskCompletePayloadSchema, TaskDeclinePayloadSchema, TaskFailPayloadSchema, TaskOfferForAgentPayloadSchema, TaskOfferForAgentWithEgressFreshPayloadSchema, TaskOfferForAgentWithEgressPayloadSchema, TaskOfferPayloadSchema, TaskOfferWithToolsetsPayloadSchema, TaskProgressPayloadSchema, TaskRejectPayloadSchema, TaskStartedPayloadSchema, TaskSteerPayloadSchema, TerminalInferenceUsageSchema, TerminalProjectionContractSchema, TerminalProjectionSelectionSchema, TokenRequestSchema, TokenResponseSchema, ToolsetIdSchema, UnknownAgentEventSchema, UnknownMessageTypeError, agentMemoryProjectionBase64UrlByteLength, byokAgentHomeProjectionCompletionPath, byokBlobContentPath, byokBlobFinalizePath, byokBlobUrlPath, byokRecordPath, byokSkillPackFilePath, canTransition, checkResultDocument, createEnvelope, decodeEnvelope, encodeEnvelope, isKnownAgentEvent, isServerToDaemonType, parseMessage, partitionAgentEvents };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map