@byok-sdk/protocol 0.18.0 → 0.20.0

package/dist/index.d.ts

@@ -13,21 +13,24 @@ export { AgentEgressPolicySchema, AgentEgressActivityPolicySchema, AgentReliable
 export type { AgentEgressPolicy, AgentEgressActivityPolicy, AgentReliableQuotaPolicy, ContentReadPolicy, AgentEgressLane, AgentEgressDropReason, AgentMessageContentType, AgentMessageEgressRequirement, AgentMessageServerContext, AgentContentReadSurface, AgentContentActorKind, AgentContentActor, AgentContentDecodeAs, AgentContentReadDecision, AgentContentReadDenialReason, } from './agent-egress';
 export { AGENT_HOME_PROJECTION_CAPABILITY, AGENT_HOME_PROJECTION_MAX_BYTES, AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM, AgentHomeProjectionProfileRevisionSchema, AgentHomeProjectionHashSchema, AgentHomeProjectionOutcomeSchema, AgentHomeProjectionValueSchema, } from './agent-home-projection';
 export type { AgentHomeProjectionProfileRevision, AgentHomeProjectionHash, AgentHomeProjectionOutcome, AgentHomeProjectionValue, } from './agent-home-projection';
+export { AGENT_INPUT_PREPARATION_CAPABILITY, INPUT_PREPARATION_WIRE_VERSION, InputPreparationContentHashSchema, InputPreparationPermissionModeSchema, InputPreparationPolicyRevisionSchema, InputPreparationProfileIdSchema, InputPreparationSourceSchema, InputPreparationModelCostSchema, InputPreparationModelSchema, InputPreparationOptionsSchema, InputPreparationSelectionSchema, InputPreparationContextFileSchema, InputPreparationDocsPathsSchema, InputPreparationSkillSchema, InputPreparationPromptSnapshotSchema, InputPreparationUserMessageSchema, InputPreparationHostCanonicalAssistantMessageSchema, InputPreparationMessageSchema, InputPreparationContextDocumentSchema, InputPreparationStateSchema, InputPreparationReadinessReasonSchema, InputPreparationRuntimeIdentitySchema, InputPreparationCounterTargetSchema, InputPreparationAccountingPolicyRefSchema, InputPreparationCounterProviderEvidenceSchema, InputPreparationCounterEvidenceSchema, InputPreparationResidualValueClassSchema, InputPreparationResidualKeySchema, InputPreparationProjectionSchema, InputPreparationToolImplementationKindSchema, InputPreparationArtifactSummarySchema, InputPreparationBindingSchema, InputPreparationReceiptSummarySchema, InputPreparationReferenceSchema, InputPreparationOfferBindingSchema, InputPreparationRejectionReasonSchema, } from './input-preparation';
+export type { InputPreparationPermissionMode, InputPreparationSource, InputPreparationModel, InputPreparationOptions, InputPreparationSelection, InputPreparationSkill, InputPreparationMessage, InputPreparationContextDocument, InputPreparationState, InputPreparationReadinessReason, InputPreparationAccountingPolicyRef, InputPreparationResidualValueClass, InputPreparationRuntimeIdentity, InputPreparationReceiptSummary, InputPreparationOfferBinding, InputPreparationRejectionReason, } from './input-preparation';
 export { AGENT_MEMORY_PROJECTION_CAPABILITY, AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES, AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE, AgentMemoryProjectionGrantRefSchema, AgentMemoryProjectionSessionRefSchema, AgentMemoryProjectionWriterEpochSchema, AgentMemoryProjectionSourceSeqSchema, AgentMemoryProjectionSnapshotSchema, AgentMemoryProjectionMeteringReceiptSchema, AgentMemoryProjectionMutationSchema, AgentMemoryProjectionReceiptSchema, AgentMemoryProjectionEraseResultSchema, agentMemoryProjectionBase64UrlByteLength, } from './agent-memory-projection';
 export type { AgentMemoryProjectionGrantRef, AgentMemoryProjectionSessionRef, AgentMemoryProjectionWriterEpoch, AgentMemoryProjectionSourceSeq, AgentMemoryProjectionSnapshot, AgentMemoryProjectionMeteringReceipt, AgentMemoryProjectionMutation, AgentMemoryProjectionReceipt, AgentMemoryProjectionEraseResult, } from './agent-memory-projection';
+export { HOST_MCP_TASK_CONTEXT_CAPABILITY } from './task-assertion';
 export { TERMINAL_PROJECTION_SELECTION_CAPABILITY, TerminalProjectionContractSchema, TerminalProjectionSelectionSchema, } from './terminal-projection';
 export type { TerminalProjectionSelection } from './terminal-projection';
 export { TASK_STATES, TASK_TRANSITIONS, canTransition } from './task-state';
 export type { TaskState } from './task-state';
-export { MESSAGE_TYPES, TASK_OFFER_TYPES, isTaskOfferType, MESSAGE_PAYLOAD_SCHEMAS, SERVER_TO_DAEMON_TYPES, DAEMON_TO_SERVER_TYPES, RuntimeIdSchema, ProtocolVersionNumberSchema, RuntimeInfoSchema, HarnessIdSchema, HarnessInfoSchema, HarnessInventorySchema, RuntimeCapabilitiesSchema, AgentRefSchema, AgentHomeProjectionAgentRefSchema, AGENT_REF_MAX_BYTES, DispatchSelectionSchema, ToolsetIdSchema, ConfiguredToolsetsSchema, RequiredToolsetsSchema, CONFIGURED_TOOLSETS_MAX_ITEMS, ConnHelloPayloadSchema, ConnAckPayloadSchema, TaskOfferPayloadSchema, TaskOfferWithToolsetsPayloadSchema, TaskOfferForAgentPayloadSchema, TaskOfferForAgentWithEgressPayloadSchema, TaskOfferForAgentWithEgressFreshPayloadSchema, AgentEgressReliablePayloadSchema, AgentEgressAckPayloadSchema, AgentMessagePublishPayloadSchema, AgentMessageDispositionPayloadSchema, AgentContentReadPayloadSchema, AgentContentReceiptPayloadSchema, AgentHomeProjectionPayloadSchema, TaskApprovePayloadSchema, TaskRejectPayloadSchema, TaskCancelPayloadSchema, TaskSteerPayloadSchema, TaskClaimPayloadSchema, TaskStartedPayloadSchema, TaskDeclinePayloadSchema, TaskProgressPayloadSchema, TaskArtifactPayloadSchema, TaskAwaitApprovalPayloadSchema, TaskCompletePayloadSchema, TaskFailPayloadSchema, TaskCancelledPayloadSchema, TaskApprovalResolvedPayloadSchema, RESULT_DOCUMENT_MAX_BYTES, checkResultDocument, TerminalInferenceUsageSchema, TERMINAL_INFERENCE_USAGE_MAX_TOKENS, TERMINAL_INFERENCE_USAGE_MAX_DURATION_MS, TERMINAL_INFERENCE_USAGE_PROVIDER_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_CLIENT_VERSION_MAX_LENGTH, } from './messages';
-export type { ResultDocumentCheck, MessageType, RuntimeId, RuntimeInfo, RuntimeCapabilities, AgentRef, AgentHomeProjectionAgentRef, DispatchSelection, ToolsetId, ConnHelloPayload, ConnAckPayload, TaskOfferPayload, TaskOfferWithToolsetsPayload, TaskOfferForAgentPayload, TaskOfferForAgentWithEgressPayload, TaskOfferForAgentWithEgressFreshPayload, AgentEgressReliablePayload, AgentEgressAckPayload, AgentMessagePublishPayload, AgentMessageDispositionPayload, AgentContentReadPayload, AgentContentReceiptPayload, AgentHomeProjectionPayload, TaskApprovePayload, TaskRejectPayload, TaskCancelPayload, TaskSteerPayload, TaskClaimPayload, TaskStartedPayload, TaskDeclinePayload, TaskProgressPayload, TaskArtifactPayload, TaskAwaitApprovalPayload, TaskCompletePayload, TaskFailPayload, TaskCancelledPayload, TaskApprovalResolvedPayload, TerminalInferenceUsage, } from './messages';
+export { MESSAGE_TYPES, TASK_OFFER_TYPES, isTaskOfferType, MESSAGE_PAYLOAD_SCHEMAS, SERVER_TO_DAEMON_TYPES, DAEMON_TO_SERVER_TYPES, RuntimeIdSchema, ProtocolVersionNumberSchema, RuntimeInfoSchema, HarnessIdSchema, HarnessInfoSchema, HarnessInventorySchema, RuntimeCapabilitiesSchema, AgentRefSchema, AgentHomeProjectionAgentRefSchema, AGENT_REF_MAX_BYTES, DispatchSelectionSchema, ToolsetIdSchema, ConfiguredToolsetsSchema, RequiredToolsetsSchema, CONFIGURED_TOOLSETS_MAX_ITEMS, ConnHelloPayloadSchema, ConnAckPayloadSchema, TaskOfferPayloadSchema, TaskOfferWithToolsetsPayloadSchema, TaskOfferForAgentPayloadSchema, TaskOfferForAgentWithEgressPayloadSchema, TaskOfferForAgentWithEgressFreshPayloadSchema, TaskOfferPreparedPayloadSchema, AgentEgressReliablePayloadSchema, AgentEgressAckPayloadSchema, AgentMessagePublishPayloadSchema, AgentMessageDispositionPayloadSchema, AgentContentReadPayloadSchema, AgentContentReceiptPayloadSchema, AgentHomeProjectionPayloadSchema, AgentInputPreparationPayloadSchema, TaskApprovePayloadSchema, TaskRejectPayloadSchema, TaskCancelPayloadSchema, TaskSteerPayloadSchema, TaskClaimPayloadSchema, TaskStartedPayloadSchema, TaskDeclinePayloadSchema, TaskProgressPayloadSchema, TaskArtifactPayloadSchema, TaskAwaitApprovalPayloadSchema, TaskCompletePayloadSchema, TaskFailPayloadSchema, TaskCancelledPayloadSchema, TaskApprovalResolvedPayloadSchema, RESULT_DOCUMENT_MAX_BYTES, checkResultDocument, TerminalInferenceUsageSchema, TerminalPreparedObservationSchema, TERMINAL_INFERENCE_USAGE_MAX_TOKENS, TERMINAL_INFERENCE_USAGE_MAX_DURATION_MS, TERMINAL_INFERENCE_USAGE_PROVIDER_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_CLIENT_VERSION_MAX_LENGTH, } from './messages';
+export type { ResultDocumentCheck, MessageType, RuntimeId, RuntimeInfo, RuntimeCapabilities, AgentRef, AgentHomeProjectionAgentRef, DispatchSelection, ToolsetId, ConnHelloPayload, ConnAckPayload, TaskOfferPayload, TaskOfferWithToolsetsPayload, TaskOfferForAgentPayload, TaskOfferForAgentWithEgressPayload, TaskOfferForAgentWithEgressFreshPayload, TaskOfferPreparedPayload, AgentEgressReliablePayload, AgentEgressAckPayload, AgentMessagePublishPayload, AgentMessageDispositionPayload, AgentContentReadPayload, AgentContentReceiptPayload, AgentHomeProjectionPayload, AgentInputPreparationPayload, TaskApprovePayload, TaskRejectPayload, TaskCancelPayload, TaskSteerPayload, TaskClaimPayload, TaskStartedPayload, TaskDeclinePayload, TaskProgressPayload, TaskArtifactPayload, TaskAwaitApprovalPayload, TaskCompletePayload, TaskFailPayload, TaskCancelledPayload, TaskApprovalResolvedPayload, TerminalInferenceUsage, TerminalPreparedObservation, } from './messages';
 export { EnvelopeSchema, isServerToDaemonType } from './envelope';
 export type { Envelope } from './envelope';
 export { ProtocolError, EnvelopeParseError, UnknownMessageTypeError, EnvelopeValidationError, } from './errors';
 export { encodeEnvelope, decodeEnvelope, createEnvelope, parseMessage } from './codec';
 export type { CreateEnvelopeOptions } from './codec';
-export { PairRequestSchema, PairResponseTenantIdSchema, PAIR_RESPONSE_TENANT_ID_MAX_LENGTH, PairResponseSchema, ChallengeRequestSchema, ChallengeResponseSchema, TokenRequestSchema, TokenResponseSchema, PresencePublishRequestSchema, CreateBlobRequestSchema, CreateBlobResponseSchema, BlobDownloadUrlResponseSchema, EventsPollQuerySchema, EventsPollResponseSchema, MessagesSendRequestSchema, MessagesSendResponseSchema, AgentHomeProjectionCompletionRequestSchema, AgentHomeProjectionStatusSchema, AgentHomeProjectionReadbackSchema, AgentMemoryProjectionCommitRequestSchema, AgentMemoryProjectionCommitResponseSchema, MAX_MESSAGES_PER_BATCH, BYOK_PAIR_PATH, BYOK_CHALLENGE_PATH, BYOK_TOKEN_PATH, BYOK_CAPABILITIES_PATH, BYOK_EVENTS_PATH, BYOK_MESSAGES_PATH, BYOK_AGENT_HOME_PROJECTIONS_PATH, BYOK_AGENT_HOME_PROJECTION_COMPLETION_ROUTE, byokAgentHomeProjectionCompletionPath, BYOK_AGENT_MEMORY_PROJECTIONS_PATH, BYOK_PRESENCE_PATH, BYOK_ACTIVITY_PATH, BYOK_BOARD_PATH, BYOK_BOARD_STREAM_PATH, BYOK_BOARD_CLAIM_ROUTE, BYOK_BOARD_UNCLAIM_ROUTE, BYOK_BOARD_STATUS_ROUTE, BYOK_RECORDS_PATH, BYOK_RECORD_ROUTE, byokRecordPath, BYOK_SKILL_PACKS_PATH, BYOK_SKILL_PACK_FILE_ROUTE, byokSkillPackFilePath, BYOK_BLOBS_PATH, BYOK_BLOB_FINALIZE_ROUTE, BYOK_BLOB_URL_ROUTE, BYOK_BLOB_CONTENT_ROUTE, byokBlobFinalizePath, byokBlobUrlPath, byokBlobContentPath, } from './http-api';
-export type { PairRequest, PairResponse, ChallengeRequest, ChallengeResponse, TokenRequest, TokenResponse, PresencePublishRequest, CreateBlobRequest, CreateBlobResponse, BlobDownloadUrlResponse, EventsPollQuery, EventsPollResponse, MessagesSendRequest, MessagesSendResponse, AgentHomeProjectionCompletionRequest, AgentHomeProjectionStatus, AgentHomeProjectionReadback, AgentMemoryProjectionCommitRequest, AgentMemoryProjectionCommitResponse, } from './http-api';
+export { PairRequestSchema, PairResponseTenantIdSchema, PAIR_RESPONSE_TENANT_ID_MAX_LENGTH, PairResponseSchema, ChallengeRequestSchema, ChallengeResponseSchema, TokenRequestSchema, TokenResponseSchema, PresencePublishRequestSchema, CreateBlobRequestSchema, CreateBlobResponseSchema, BlobDownloadUrlResponseSchema, EventsPollQuerySchema, EventsPollResponseSchema, MessagesSendRequestSchema, MessagesSendResponseSchema, AgentHomeProjectionCompletionRequestSchema, AgentHomeProjectionStatusSchema, AgentHomeProjectionReadbackSchema, AgentMemoryProjectionCommitRequestSchema, AgentMemoryProjectionCommitResponseSchema, MAX_MESSAGES_PER_BATCH, BYOK_PAIR_PATH, BYOK_CHALLENGE_PATH, BYOK_TOKEN_PATH, BYOK_CAPABILITIES_PATH, BYOK_EVENTS_PATH, BYOK_MESSAGES_PATH, BYOK_AGENT_HOME_PROJECTIONS_PATH, BYOK_AGENT_HOME_PROJECTION_COMPLETION_ROUTE, byokAgentHomeProjectionCompletionPath, BYOK_AGENT_MEMORY_PROJECTIONS_PATH, BYOK_PRESENCE_PATH, BYOK_ACTIVITY_PATH, BYOK_BOARD_PATH, BYOK_BOARD_STREAM_PATH, BYOK_BOARD_CLAIM_ROUTE, BYOK_BOARD_UNCLAIM_ROUTE, BYOK_BOARD_STATUS_ROUTE, BYOK_RECORDS_PATH, BYOK_RECORD_ROUTE, byokRecordPath, BYOK_SKILL_PACKS_PATH, BYOK_SKILL_PACK_FILE_ROUTE, byokSkillPackFilePath, BYOK_BLOBS_PATH, BYOK_BLOB_FINALIZE_ROUTE, BYOK_BLOB_URL_ROUTE, BYOK_BLOB_CONTENT_ROUTE, byokBlobFinalizePath, byokBlobUrlPath, byokBlobContentPath, BYOK_INPUT_PREPARATIONS_PATH, BYOK_INPUT_PREPARATION_COMPLETION_ROUTE, BYOK_INPUT_PREPARATION_STATUS_ROUTE, byokInputPreparationCompletionPath, byokInputPreparationStatusPath, InputPreparationCompletionRequestSchema, InputPreparationStatusSchema, InputPreparationReadbackSchema, InputPreparationStatusQuerySchema, } from './http-api';
+export type { PairRequest, PairResponse, ChallengeRequest, ChallengeResponse, TokenRequest, TokenResponse, PresencePublishRequest, CreateBlobRequest, CreateBlobResponse, BlobDownloadUrlResponse, EventsPollQuery, EventsPollResponse, MessagesSendRequest, MessagesSendResponse, AgentHomeProjectionCompletionRequest, AgentHomeProjectionStatus, AgentHomeProjectionReadback, AgentMemoryProjectionCommitRequest, AgentMemoryProjectionCommitResponse, InputPreparationCompletionRequest, InputPreparationStatus, InputPreparationReadback, InputPreparationStatusQuery, } from './http-api';
 export type { TaskOfferType } from './messages';
 export type { HarnessId, HarnessInfo } from './messages';
 export { CUSTOM_HARNESS_CAPABILITY } from './version';

package/dist/index.js

@@ -113,6 +113,356 @@ var AgentHomeProjectionValueSchema = z.json().refine(
   (value) => new TextEncoder().encode(JSON.stringify(value)).byteLength <= AGENT_HOME_PROJECTION_MAX_BYTES,
   `projection must not exceed ${AGENT_HOME_PROJECTION_MAX_BYTES} UTF-8 JSON bytes`
 );
+var PERMISSION_MODES = ["auto", "confirm", "readonly", "plan"];
+var PermissionPolicySchema = z.object({
+  mode: z.enum(PERMISSION_MODES),
+  allowTools: z.array(z.string()).optional(),
+  denyTools: z.array(z.string()).optional(),
+  workspaceRoot: z.string().optional(),
+  network: z.boolean().optional()
+}).strict();
+
+// src/input-preparation.ts
+var INPUT_PREPARATION_WIRE_VERSION = 5;
+var AGENT_INPUT_PREPARATION_CAPABILITY = `agent-input-preparation-v${INPUT_PREPARATION_WIRE_VERSION}`;
+var InputPreparationContentHashSchema = AgentEgressContentHashSchema;
+var OPAQUE_ID = z.string().min(1).max(512).regex(/^[^\u0000-\u001f\u007f]+$/u, "control identifiers must not contain control characters");
+var OPAQUE_TEXT = z.string().min(1).max(2048).regex(/^[^\u0000-\u001f\u007f]+$/u, "control text must not contain control characters");
+var InputPreparationPolicyRevisionSchema = OPAQUE_ID;
+var InputPreparationProfileIdSchema = OPAQUE_ID;
+var InputPreparationPermissionModeSchema = z.enum(PERMISSION_MODES);
+var InputPreparationSourceSchema = z.object({ revision: OPAQUE_ID, digest: OPAQUE_ID }).strict();
+var InputPreparationModelCostSchema = z.object({
+  input: z.number().finite(),
+  output: z.number().finite(),
+  cacheRead: z.number().finite(),
+  cacheWrite: z.number().finite()
+}).strict();
+var THINKING_EFFORT = z.string().min(1).max(64).regex(/^[a-zA-Z0-9_-]+$/u).nullable();
+var InputPreparationThinkingLevelMapSchema = z.object({
+  off: THINKING_EFFORT,
+  minimal: THINKING_EFFORT,
+  low: THINKING_EFFORT,
+  medium: THINKING_EFFORT,
+  high: THINKING_EFFORT,
+  xhigh: THINKING_EFFORT,
+  max: THINKING_EFFORT
+}).strict();
+var InputPreparationModelCompatSchema = z.object({
+  supportsStore: z.boolean().optional(),
+  supportsDeveloperRole: z.boolean().optional(),
+  supportsReasoningEffort: z.boolean().optional(),
+  supportsUsageInStreaming: z.boolean().optional(),
+  maxTokensField: z.enum(["max_completion_tokens", "max_tokens"]).optional(),
+  thinkingFormat: z.enum([
+    "openai",
+    "openrouter",
+    "deepseek",
+    "together",
+    "baseten",
+    "zai",
+    "qwen",
+    "chat-template",
+    "qwen-chat-template",
+    "string-thinking",
+    "ant-ling"
+  ]).optional(),
+  zaiToolStream: z.boolean().optional()
+}).strict();
+var InputPreparationModelSchema = z.object({
+  id: OPAQUE_ID,
+  name: OPAQUE_ID,
+  api: z.literal("openai-completions"),
+  provider: OPAQUE_ID,
+  baseUrl: OPAQUE_TEXT,
+  reasoning: z.boolean(),
+  input: z.array(z.enum(["text", "image"])).min(1).max(8),
+  cost: InputPreparationModelCostSchema,
+  contextWindow: z.number().int().positive(),
+  maxTokens: z.number().int().positive(),
+  thinkingLevelMap: InputPreparationThinkingLevelMapSchema.optional(),
+  compat: InputPreparationModelCompatSchema.optional()
+}).strict();
+var InputPreparationOptionsSchema = z.object({
+  cacheRetention: z.enum(["none", "short", "long"]),
+  maxTokens: z.number().int().positive(),
+  temperature: z.number().finite().optional(),
+  toolChoice: z.enum(["auto", "none"]).optional(),
+  reasoningEffort: z.enum(["minimal", "low", "medium", "high", "xhigh", "max"]).optional()
+}).strict();
+var InputPreparationSelectionSchema = z.object({ model: InputPreparationModelSchema, options: InputPreparationOptionsSchema }).strict();
+var CONTEXT_PATH = z.string().max(4096).regex(/^[^\u0000]*$/u, "paths must not contain a NUL character");
+var InputPreparationContextFileSchema = z.object({ path: CONTEXT_PATH, content: z.string() }).strict();
+var InputPreparationDocsPathsSchema = z.object({ readmePath: CONTEXT_PATH, docsPath: CONTEXT_PATH, examplesPath: CONTEXT_PATH }).strict();
+var InputPreparationSkillSchema = z.object({
+  name: OPAQUE_ID,
+  description: z.string().max(4096),
+  filePath: CONTEXT_PATH,
+  disableModelInvocation: z.boolean()
+}).strict();
+var InputPreparationPromptSnapshotSchema = z.object({
+  customPrompt: z.string().optional(),
+  appendSystemPrompt: z.string().optional(),
+  cwd: CONTEXT_PATH,
+  toolSnippets: z.record(z.string(), z.string()),
+  toolGuidelines: z.record(z.string(), z.array(z.string()).max(512)),
+  promptGuidelines: z.array(z.string()).max(512),
+  contextFiles: z.array(InputPreparationContextFileSchema).max(512),
+  skills: z.array(InputPreparationSkillSchema).max(512),
+  docsPaths: InputPreparationDocsPathsSchema
+}).strict();
+var InputPreparationUserMessageSchema = z.object({
+  role: z.literal("user"),
+  content: z.string(),
+  timestamp: z.number().int()
+}).strict();
+var InputPreparationHostCanonicalAssistantMessageSchema = z.object({
+  role: z.literal("assistant"),
+  origin: z.literal("host_canonical"),
+  content: z.string(),
+  timestamp: z.number().int()
+}).strict();
+var InputPreparationMessageSchema = z.discriminatedUnion("role", [
+  InputPreparationUserMessageSchema,
+  InputPreparationHostCanonicalAssistantMessageSchema
+]);
+var InputPreparationContextDocumentSchema = z.object({
+  prompt: InputPreparationPromptSnapshotSchema,
+  messages: z.array(InputPreparationMessageSchema).max(4096)
+}).strict();
+var InputPreparationStateSchema = z.enum([
+  "reserved",
+  "counting",
+  "prepared",
+  "cancelled",
+  "failed",
+  "counter_interrupted"
+]);
+var InputPreparationReadinessReasonSchema = z.enum([
+  /** The record has not reached `prepared` (it is `reserved` or `counting`). */
+  "not_prepared",
+  "counter_interrupted",
+  "cancelled",
+  "failed",
+  "artifact_expired",
+  /** A counter IS present and its authority is not `provider` (a fixture never reaches ready). */
+  "counter_authority_not_production",
+  /** A counter IS present and it reported its projection as not covered. */
+  "counter_coverage_incomplete",
+  /**
+   * D, the frozen provider request, carries a message content part whose
+   * `type` is not `text`. The first release admits text-only D; a multimodal
+   * part is not sized by `requestBytes` in any way the Host's ruling covers.
+   */
+  "request_content_not_text",
+  /** The native compiler's projection kind is not `content_complete`. */
+  "projection_unknown",
+  /** The artifact carries a residual key the accounting policy does not rule on. */
+  "residual_not_ruled",
+  /** The request named no accounting policy. There is no default. */
+  "accounting_policy_missing",
+  /** The named policy was ruled for a different runtime, endpoint or model. */
+  "accounting_policy_inapplicable",
+  "executor_identity_unproven",
+  /**
+   * The record was prepared against a runtime contract this build no longer
+   * speaks: its binding declares a prepared-compiler version other than the one
+   * this build prepares and consumes against. The artifact is not re-read
+   * through the current contract and is not translated — a projection frozen
+   * under another compiler's classification table is evidence about a request
+   * this build cannot re-derive.
+   */
+  "runtime_contract_superseded"
+]);
+var InputPreparationRuntimeIdentitySchema = z.object({
+  packageName: OPAQUE_ID,
+  packageVersion: OPAQUE_ID,
+  upstreamBase: OPAQUE_ID,
+  upstreamCommit: OPAQUE_ID,
+  forkBuild: z.number().int().nonnegative(),
+  envelopeFormat: OPAQUE_ID,
+  requestFormat: OPAQUE_ID,
+  compilerVersion: z.number().int().nonnegative()
+}).strict();
+var InputPreparationCounterTargetSchema = z.object({ endpoint: OPAQUE_TEXT, modelId: OPAQUE_ID }).strict();
+var InputPreparationAccountingPolicyRefSchema = z.object({
+  revision: OPAQUE_ID,
+  /** The runtime identity string this ruling was made for. */
+  ruledRuntime: OPAQUE_ID,
+  /** The endpoint/model this ruling was made for. */
+  ruledTarget: InputPreparationCounterTargetSchema,
+  /** Every residual key the Host's accounting already accounts for. */
+  ruledResidualKeys: z.array(OPAQUE_ID).max(64)
+}).strict();
+var InputPreparationCounterProviderEvidenceSchema = z.object({
+  projectionDigest: z.string().regex(/^[0-9a-f]{64}$/u, "a projection digest is lowercase sha-256 hex"),
+  endpoint: OPAQUE_TEXT,
+  modelId: OPAQUE_ID,
+  asserted: z.object({
+    httpStatus: z.number().int(),
+    usageFields: z.record(OPAQUE_ID, z.number().finite()),
+    responseDigest: OPAQUE_ID
+  }).strict()
+}).strict();
+var InputPreparationCounterEvidenceSchema = z.object({
+  method: OPAQUE_ID,
+  methodVersion: OPAQUE_ID,
+  authority: z.enum(["provider", "test_fixture"]),
+  value: z.number().int().nonnegative(),
+  coverage: z.object({ covered: z.boolean(), reason: z.string().max(512).optional() }).strict(),
+  providerEvidence: InputPreparationCounterProviderEvidenceSchema,
+  target: InputPreparationCounterTargetSchema,
+  calledAt: z.iso.datetime({ offset: true }),
+  completedAt: z.iso.datetime({ offset: true })
+}).strict();
+var InputPreparationToolImplementationKindSchema = z.string().regex(/^(?:attested|unavailable:[a-z_]{1,64})$/u, 'a tool implementation kind is "attested" or "unavailable:<reason>"');
+var InputPreparationResidualValueClassSchema = z.enum([
+  "constant",
+  "boolean",
+  "bounded_integer",
+  "bounded_number",
+  "finite_number",
+  "closed_enum",
+  "nonempty_string",
+  "object_shape"
+]);
+var InputPreparationResidualKeySchema = z.object({ key: OPAQUE_ID, valueClass: InputPreparationResidualValueClassSchema }).strict();
+var InputPreparationProjectionSchema = z.object({
+  version: z.literal(3),
+  kind: z.enum(["content_complete", "unknown"]),
+  digest: z.string().regex(/^[0-9a-f]{64}$/u, "a projection digest is lowercase sha-256 hex")
+}).strict();
+var InputPreparationArtifactSummarySchema = z.object({
+  requestDigest: OPAQUE_ID,
+  envelopeDigest: OPAQUE_ID,
+  toolManifestDigest: OPAQUE_ID,
+  /**
+   * The exact UTF-8 byte length of the frozen provider request D, measured
+   * by the device's own compiler. The ONE size evidence a receipt carries:
+   * the Host rules the budget (`requestBytes + C + max_tokens <= window`)
+   * against it. Never a token count and never an estimate.
+   */
+  requestBytes: z.number().int().nonnegative(),
+  projectionBytes: z.number().int().nonnegative(),
+  projection: InputPreparationProjectionSchema,
+  residual: z.array(InputPreparationResidualKeySchema).max(64),
+  observationDigest: OPAQUE_ID,
+  toolBindingDigest: OPAQUE_ID,
+  toolImplementationKinds: z.record(OPAQUE_ID, InputPreparationToolImplementationKindSchema)
+}).strict();
+var InputPreparationBindingSchema = z.object({
+  scopeId: OPAQUE_ID,
+  deviceId: OPAQUE_ID,
+  agentRef: OPAQUE_ID,
+  profileId: OPAQUE_ID,
+  profileRevision: OPAQUE_ID,
+  source: InputPreparationSourceSchema,
+  target: InputPreparationCounterTargetSchema,
+  policyRevision: OPAQUE_ID,
+  /**
+   * The mode the counted manifest was filtered for. Recorded on the binding
+   * rather than only inside the request digest so a consumer can COMPARE it
+   * without re-deriving the digest: an Execution offered under a different
+   * mode is an Execution whose registered tool set differs from the one
+   * these tokens were counted for.
+   */
+  permissionMode: InputPreparationPermissionModeSchema,
+  runtime: InputPreparationRuntimeIdentitySchema,
+  requestDigest: OPAQUE_ID,
+  /**
+   * The Host's accounting ruling this preparation was requested under,
+   * copied verbatim. Absent when the request named none — never filled in,
+   * and never narrowed to one the device would have chosen.
+   */
+  accountingPolicyRef: InputPreparationAccountingPolicyRefSchema.optional()
+}).strict();
+var InputPreparationReceiptSummarySchema = z.object({
+  reference: OPAQUE_ID,
+  state: InputPreparationStateSchema,
+  binding: InputPreparationBindingSchema,
+  artifact: InputPreparationArtifactSummarySchema.optional(),
+  counter: InputPreparationCounterEvidenceSchema.optional(),
+  ready: z.boolean(),
+  readinessReasons: z.array(InputPreparationReadinessReasonSchema).max(16),
+  detail: OPAQUE_ID.optional(),
+  artifactExpiresAt: z.iso.datetime({ offset: true })
+}).strict().superRefine((value, ctx) => {
+  if (value.ready !== (value.readinessReasons.length === 0)) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["ready"],
+      message: "ready must be true exactly when readinessReasons is empty"
+    });
+  }
+});
+var InputPreparationReferenceSchema = OPAQUE_ID;
+var InputPreparationOfferBindingSchema = z.object({
+  reference: InputPreparationReferenceSchema,
+  /** `InputPreparationBindingSchema.requestDigest`, as the receipt reported it. */
+  requestDigest: OPAQUE_ID,
+  /** `InputPreparationArtifactSummarySchema.envelopeDigest`, when the receipt carried one. */
+  artifactDigest: OPAQUE_ID.optional()
+}).strict();
+var InputPreparationRejectionReasonSchema = z.enum([
+  "input_preparation_unconfigured",
+  "bad_request",
+  "authority_unavailable",
+  "scope_denied",
+  "policy_revision_mismatch",
+  "runtime_identity_unavailable",
+  "unsupported_input",
+  "limit_exceeded",
+  "request_conflict",
+  "not_found",
+  "counter_unavailable",
+  "counter_interrupted",
+  "durable_write_failed",
+  "cancelled",
+  "context_unresolvable",
+  "context_hash_mismatch",
+  "toolsets_unobservable",
+  "deadline_elapsed",
+  /**
+   * The device could not prove a non-writable launch directory (or a trusted
+   * launcher) for the MCP toolset servers this preparation names, so it
+   * refused rather than observing them in a directory the agent's own uid can
+   * write. The specific `TrustedLaunchCwdUnavailableReason` travels in the
+   * receipt's `detail`; it is not widened into a spawn.
+   */
+  "launch_boundary_unavailable",
+  /**
+   * A repeat of an already-recorded `requestId` arrived after the facts its
+   * executor fingerprints were frozen against changed — a toolset definition
+   * revision, the launch attestation, or an implementation identity that no
+   * longer measures the same. The recorded receipt is not re-derived and no
+   * server is re-probed; the repeat is refused so the caller mints a new
+   * preparation instead of silently receiving one bound to stale evidence.
+   */
+  "observation_drift",
+  /**
+   * The declared `permissionMode` is not one this device admits: it exceeds
+   * the operator's configured ceiling. The requester's declaration is INTENT,
+   * not authorization — it goes through the same merge that admits a task
+   * offer's `policy.mode` — and an unadmitted mode refuses rather than being
+   * silently narrowed to one the device would allow.
+   */
+  "permission_mode_denied",
+  /**
+   * The device compiled the input, then found that the `prompt_prepared` frame
+   * the runtime would have to be handed exceeds the single-frame byte cap that
+   * runtime enforces. The bound belongs to the runtime, not to the operator's
+   * retention policy, so it is decided first and nothing is retained: a
+   * preparation that could never be delivered is not a smaller preparation.
+   */
+  "rpc_frame_too_large",
+  /**
+   * The device's input-preparation lane is off because its durable record log
+   * holds a record from an older record schema version. The rest of the
+   * device runs; this lane refuses until an operator archives that log. No
+   * record is migrated, read forward or deleted.
+   */
+  "input_preparation_record_log_unsupported"
+]);
 var TERMINAL_PROJECTION_SELECTION_CAPABILITY = "terminal-projection-selection";
 var TerminalProjectionContractSchema = z.string().min(1).max(128).regex(/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/u, "terminal projection contracts must be opaque lowercase ids");
 var TerminalProjectionSelectionSchema = z.discriminatedUnion("mode", [
@@ -122,6 +472,9 @@ var TerminalProjectionSelectionSchema = z.discriminatedUnion("mode", [
     contract: TerminalProjectionContractSchema
   }).strict()
 ]);
+
+// src/task-assertion.ts
+var HOST_MCP_TASK_CONTEXT_CAPABILITY = "host-mcp-task-context";
 var PROVIDER_PROFILE_BINDING_CAPABILITY = "provider-profile-binding";
 var ProviderProfileRefSchema = z.string().min(1).max(64).regex(/^[a-z0-9]+(?:[-_][a-z0-9]+)*$/u, "provider profile refs must be lowercase portable identifiers");
 var ProviderProfileRevisionSchema = z.string().regex(/^(?:0|[1-9][0-9]{0,19})$/u, "provider profile revision must be canonical decimal");
@@ -166,7 +519,9 @@ var CAPABILITY_FLAGS = [
   AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY,
   AGENT_CONTENT_ARTIFACT_READ_CAPABILITY,
   AGENT_HOME_PROJECTION_CAPABILITY,
+  AGENT_INPUT_PREPARATION_CAPABILITY,
   TERMINAL_PROJECTION_SELECTION_CAPABILITY,
+  HOST_MCP_TASK_CONTEXT_CAPABILITY,
   CUSTOM_HARNESS_CAPABILITY,
   MAILBOX_READ_AHEAD_CAPABILITY
 ];
@@ -178,14 +533,6 @@ var BlobRefSchema = z.object({
   contentType: z.string(),
   url: z.string().optional()
 });
-var PERMISSION_MODES = ["auto", "confirm", "readonly", "plan"];
-var PermissionPolicySchema = z.object({
-  mode: z.enum(PERMISSION_MODES),
-  allowTools: z.array(z.string()).optional(),
-  denyTools: z.array(z.string()).optional(),
-  workspaceRoot: z.string().optional(),
-  network: z.boolean().optional()
-}).strict();
 var AGENT_EVENT_SPILL_UNSTORED_REASON_MAX_LENGTH = 512;
 var AgentEventSpillSchema = z.object({
   /** Which field of the event was replaced by a preview. */
@@ -410,6 +757,10 @@ var TaskOfferForAgentWithEgressFreshPayloadSchema = TaskOfferForAgentPayloadSche
   egressPolicy: AgentEgressPolicySchema,
   messageEgress: AgentMessageEgressRequirementSchema.optional()
 }).strict();
+var TaskOfferPreparedPayloadSchema = TaskOfferForAgentPayloadSchema.omit({
+  instruction: true,
+  sessionRef: true
+}).extend({ preparation: InputPreparationOfferBindingSchema }).strict();
 var EGRESS_SAFE_VALUE = z.json().refine(
   (value) => new TextEncoder().encode(JSON.stringify(value)).byteLength <= 256 * 1024,
   "sanitized egress payload exceeds 256KiB"
@@ -541,6 +892,37 @@ var AgentHomeProjectionPayloadSchema = z.object({
   projectionHash: AgentHomeProjectionHashSchema,
   projection: AgentHomeProjectionValueSchema
 }).strict();
+var InputPreparationInlineContextSchema = z.object({
+  inline: z.string().refine(isWithinInlineByteLimit, `inline context must not exceed ${MAX_INLINE_BYTES} UTF-8 bytes`)
+}).strict();
+var InputPreparationBlobContextSchema = z.object({ blobRef: BlobRefSchema, contentHash: InputPreparationContentHashSchema }).strict().superRefine((value, ctx) => {
+  if (value.blobRef.contentHash !== value.contentHash) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["blobRef", "contentHash"],
+      message: "blobRef contentHash must equal contentHash"
+    });
+  }
+});
+var AgentInputPreparationPayloadSchema = z.object({
+  requestId: z.uuid(),
+  agentRef: AgentRefSchema,
+  profileId: InputPreparationProfileIdSchema,
+  policyRevision: InputPreparationPolicyRevisionSchema,
+  source: InputPreparationSourceSchema,
+  selection: InputPreparationSelectionSchema,
+  deadlineAt: z.iso.datetime({ offset: true }),
+  context: z.union([InputPreparationInlineContextSchema, InputPreparationBlobContextSchema]),
+  requiredToolsets: RequiredToolsetsSchema,
+  permissionMode: InputPreparationPermissionModeSchema,
+  /**
+   * The Host's accounting ruling for this preparation, carried verbatim onto
+   * the receipt's binding. Optional and defaulted NOWHERE: a payload that
+   * omits it produces a receipt that says `accounting_policy_missing`, which
+   * is the honest answer — the device rules on no residual key by itself.
+   */
+  accountingPolicyRef: InputPreparationAccountingPolicyRefSchema.optional()
+}).strict();
 var TaskApprovePayloadSchema = z.object({
   approvalId: z.string().optional()
 });
@@ -658,6 +1040,14 @@ var TerminalInferenceUsageSchema = z.object({
   /** Device observation time, never server receipt time. */
   reportedAt: TerminalInferenceReportedAtSchema
 });
+var TerminalPreparedObservationSchema = z.object({
+  requestDigest: InputPreparationArtifactSummarySchema.shape.requestDigest,
+  initialPromptTokens: TerminalInferenceUsageNumberSchema,
+  maxPromptTokens: TerminalInferenceUsageNumberSchema
+}).strict().refine((value) => value.maxPromptTokens >= value.initialPromptTokens, {
+  message: "maxPromptTokens must not be below initialPromptTokens",
+  path: ["maxPromptTokens"]
+});
 var TaskCompletePayloadSchema = z.object({
   harnessId: HarnessIdSchema.optional(),
   summary: z.string(),
@@ -667,6 +1057,8 @@ var TaskCompletePayloadSchema = z.object({
     message: `task.complete.document must be plain JSON data (equal to its own JSON round trip) and at most ${RESULT_DOCUMENT_MAX_BYTES} bytes as canonical JSON (UTF-8)`
   }),
   usage: TerminalInferenceUsageSchema.optional(),
+  /** Present on a prepared Execution only — see {@link TerminalPreparedObservationSchema}. */
+  preparedObservation: TerminalPreparedObservationSchema.optional(),
   agentRef: AgentRefSchema.optional()
 });
 var TaskFailPayloadSchema = z.object({
@@ -676,6 +1068,8 @@ var TaskFailPayloadSchema = z.object({
   reason: z.string(),
   retryable: z.boolean().optional(),
   usage: TerminalInferenceUsageSchema.optional(),
+  /** Present on a prepared Execution that observed provider usage before failing. */
+  preparedObservation: TerminalPreparedObservationSchema.optional(),
   agentRef: AgentRefSchema.optional()
 });
 var TaskCancelledPayloadSchema = z.object({
@@ -695,7 +1089,8 @@ var TASK_OFFER_PAYLOAD_SCHEMAS = {
   "task.offer_with_toolsets": TaskOfferWithToolsetsPayloadSchema,
   "task.offer_for_agent": TaskOfferForAgentPayloadSchema,
   "task.offer_for_agent_with_egress": TaskOfferForAgentWithEgressPayloadSchema,
-  "task.offer_for_agent_with_egress_fresh": TaskOfferForAgentWithEgressFreshPayloadSchema
+  "task.offer_for_agent_with_egress_fresh": TaskOfferForAgentWithEgressFreshPayloadSchema,
+  "task.offer_prepared": TaskOfferPreparedPayloadSchema
 };
 var TASK_OFFER_TYPES = Object.freeze(
   Object.keys(TASK_OFFER_PAYLOAD_SCHEMAS)
@@ -714,6 +1109,7 @@ var MESSAGE_PAYLOAD_SCHEMAS = {
   "agent.content.read": AgentContentReadPayloadSchema,
   "agent.content.receipt": AgentContentReceiptPayloadSchema,
   "agent.home.projection": AgentHomeProjectionPayloadSchema,
+  "agent.input.preparation": AgentInputPreparationPayloadSchema,
   "task.approve": TaskApprovePayloadSchema,
   "task.reject": TaskRejectPayloadSchema,
   "task.cancel": TaskCancelPayloadSchema,
@@ -737,10 +1133,12 @@ var SERVER_TO_DAEMON_TYPES = [
   "task.offer_for_agent",
   "task.offer_for_agent_with_egress",
   "task.offer_for_agent_with_egress_fresh",
+  "task.offer_prepared",
   "agent.egress.ack",
   "agent.message.disposition",
   "agent.content.read",
   "agent.home.projection",
+  "agent.input.preparation",
   "task.approve",
   "task.reject",
   "task.cancel",
@@ -890,10 +1288,12 @@ var EnvelopeSchema = z.discriminatedUnion("type", [
   envelopeShape("task.offer_for_agent", REQUIRED_TASK_ID, REQUIRED_SEQ),
   envelopeShape("task.offer_for_agent_with_egress", REQUIRED_TASK_ID, REQUIRED_SEQ),
   envelopeShape("task.offer_for_agent_with_egress_fresh", REQUIRED_TASK_ID, REQUIRED_SEQ),
+  envelopeShape("task.offer_prepared", REQUIRED_TASK_ID, REQUIRED_SEQ),
   envelopeShape("agent.egress.ack", OPTIONAL_TASK_ID, REQUIRED_SEQ),
   envelopeShape("agent.message.disposition", REQUIRED_TASK_ID, REQUIRED_SEQ),
   envelopeShape("agent.content.read", OPTIONAL_TASK_ID, REQUIRED_SEQ),
   envelopeShape("agent.home.projection", FORBIDDEN_TASK_ID, REQUIRED_SEQ),
+  envelopeShape("agent.input.preparation", FORBIDDEN_TASK_ID, REQUIRED_SEQ),
   envelopeShape("task.approve", REQUIRED_TASK_ID, REQUIRED_SEQ),
   envelopeShape("task.reject", REQUIRED_TASK_ID, REQUIRED_SEQ),
   envelopeShape("task.cancel", REQUIRED_TASK_ID, REQUIRED_SEQ),
@@ -1123,6 +1523,53 @@ var AgentHomeProjectionReadbackSchema = z.object({
   status: AgentHomeProjectionStatusSchema,
   completedAt: z.iso.datetime({ offset: true }).optional()
 }).strict();
+var InputPreparationCompletionRequestSchema = z.discriminatedUnion("outcome", [
+  z.object({
+    outcome: z.literal("prepared"),
+    requestId: z.uuid(),
+    agentRef: AgentRefSchema,
+    profileId: InputPreparationProfileIdSchema,
+    policyRevision: InputPreparationPolicyRevisionSchema,
+    receipt: InputPreparationReceiptSummarySchema
+  }).strict(),
+  z.object({
+    outcome: z.literal("rejected"),
+    requestId: z.uuid(),
+    agentRef: AgentRefSchema,
+    profileId: InputPreparationProfileIdSchema,
+    policyRevision: InputPreparationPolicyRevisionSchema,
+    reason: InputPreparationRejectionReasonSchema
+  }).strict()
+]);
+var InputPreparationStatusSchema = z.enum(["pending", "prepared", "rejected"]);
+var InputPreparationReadbackSchema = z.object({
+  tenantId: z.string().min(1),
+  deviceId: z.string().min(1),
+  requestId: z.uuid(),
+  agentRef: AgentRefSchema,
+  profileId: InputPreparationProfileIdSchema,
+  policyRevision: InputPreparationPolicyRevisionSchema,
+  status: InputPreparationStatusSchema,
+  receipt: InputPreparationReceiptSummarySchema.optional(),
+  reason: InputPreparationRejectionReasonSchema.optional(),
+  completedAt: z.iso.datetime({ offset: true }).optional()
+}).strict().superRefine((value, ctx) => {
+  const expectsReceipt = value.status === "prepared";
+  const expectsReason = value.status === "rejected";
+  if (expectsReceipt !== (value.receipt !== void 0)) {
+    ctx.addIssue({ code: "custom", path: ["receipt"], message: 'receipt is present exactly when status is "prepared"' });
+  }
+  if (expectsReason !== (value.reason !== void 0)) {
+    ctx.addIssue({ code: "custom", path: ["reason"], message: 'reason is present exactly when status is "rejected"' });
+  }
+  if (value.status !== "pending" !== (value.completedAt !== void 0)) {
+    ctx.addIssue({ code: "custom", path: ["completedAt"], message: "completedAt is present exactly when the status is terminal" });
+  }
+});
+var InputPreparationStatusQuerySchema = z.object({
+  agentId: z.string().min(1),
+  profileRevision: z.string().min(1)
+}).strict();
 var AgentMemoryProjectionCommitRequestSchema = AgentMemoryProjectionMutationSchema;
 var AgentMemoryProjectionCommitResponseSchema = AgentMemoryProjectionReceiptSchema;
 var BYOK_PAIR_PATH = "/byok/pair";
@@ -1136,6 +1583,15 @@ var BYOK_AGENT_HOME_PROJECTION_COMPLETION_ROUTE = "/byok/agent-home-projections/
 function byokAgentHomeProjectionCompletionPath(requestId) {
   return `${BYOK_AGENT_HOME_PROJECTIONS_PATH}/${encodeURIComponent(requestId)}/completion`;
 }
+var BYOK_INPUT_PREPARATIONS_PATH = "/byok/input-preparations";
+var BYOK_INPUT_PREPARATION_COMPLETION_ROUTE = "/byok/input-preparations/:requestId/completion";
+var BYOK_INPUT_PREPARATION_STATUS_ROUTE = "/byok/input-preparations/:requestId";
+function byokInputPreparationCompletionPath(requestId) {
+  return `${BYOK_INPUT_PREPARATIONS_PATH}/${encodeURIComponent(requestId)}/completion`;
+}
+function byokInputPreparationStatusPath(requestId) {
+  return `${BYOK_INPUT_PREPARATIONS_PATH}/${encodeURIComponent(requestId)}`;
+}
 var BYOK_AGENT_MEMORY_PROJECTIONS_PATH = "/byok/agent-memory-projections";
 var BYOK_PRESENCE_PATH = "/byok/presence";
 var BYOK_ACTIVITY_PATH = "/byok/activity";
@@ -1168,6 +1624,6 @@ function byokBlobContentPath(blobId) {
   return `/byok/blobs/${blobId}/content`;
 }
 
-export { AGENT_CONTENT_ARTIFACT_READ_CAPABILITY, AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY, AGENT_CONTENT_WORKSPACE_READ_CAPABILITY, AGENT_EGRESS_FRESH_SESSION_CAPABILITY, AGENT_EGRESS_POLICY_CAPABILITY, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY, AGENT_EVENT_SPILL_UNSTORED_REASON_MAX_LENGTH, AGENT_HOME_PROJECTION_CAPABILITY, AGENT_HOME_PROJECTION_MAX_BYTES, AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM, AGENT_MEMORY_PROJECTION_CAPABILITY, AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE, AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES, AGENT_MESSAGE_EGRESS_CAPABILITY, AGENT_MESSAGE_MAX_BYTES, AGENT_REF_MAX_BYTES, AgentContentActorKindSchema, AgentContentActorSchema, AgentContentDecodeAsSchema, AgentContentMimeTypeSchema, AgentContentReadDecisionSchema, AgentContentReadDenialReasonSchema, AgentContentReadPayloadSchema, AgentContentReadSurfaceSchema, AgentContentReceiptPayloadSchema, AgentEgressAckPayloadSchema, AgentEgressActivityPolicySchema, AgentEgressContentHashSchema, AgentEgressDropReasonSchema, AgentEgressLaneSchema, AgentEgressPolicyRevisionSchema, AgentEgressPolicySchema, AgentEgressReliablePayloadSchema, AgentEventOrUnknownSchema, AgentEventSchema, AgentEventSpillSchema, AgentHomeProjectionAgentRefSchema, AgentHomeProjectionCompletionRequestSchema, AgentHomeProjectionHashSchema, AgentHomeProjectionOutcomeSchema, AgentHomeProjectionPayloadSchema, AgentHomeProjectionProfileRevisionSchema, AgentHomeProjectionReadbackSchema, AgentHomeProjectionStatusSchema, AgentHomeProjectionValueSchema, AgentMemoryProjectionCommitRequestSchema, AgentMemoryProjectionCommitResponseSchema, AgentMemoryProjectionEraseResultSchema, AgentMemoryProjectionGrantRefSchema, AgentMemoryProjectionMeteringReceiptSchema, AgentMemoryProjectionMutationSchema, AgentMemoryProjectionReceiptSchema, AgentMemoryProjectionSessionRefSchema, AgentMemoryProjectionSnapshotSchema, AgentMemoryProjectionSourceSeqSchema, AgentMemoryProjectionWriterEpochSchema, AgentMessageContentTypeSchema, AgentMessageContractSchema, AgentMessageDestinationBindingSchema, AgentMessageDispositionPayloadSchema, AgentMessageEgressRequirementSchema, AgentMessageFreshnessCursorSchema, AgentMessagePublishPayloadSchema, AgentMessageServerContextSchema, AgentRefSchema, AgentReliableQuotaPolicySchema, BYOK_ACTIVITY_PATH, BYOK_AGENT_HOME_PROJECTIONS_PATH, BYOK_AGENT_HOME_PROJECTION_COMPLETION_ROUTE, BYOK_AGENT_MEMORY_PROJECTIONS_PATH, BYOK_BLOBS_PATH, BYOK_BLOB_CONTENT_ROUTE, BYOK_BLOB_FINALIZE_ROUTE, BYOK_BLOB_URL_ROUTE, BYOK_BOARD_CLAIM_ROUTE, BYOK_BOARD_PATH, BYOK_BOARD_STATUS_ROUTE, BYOK_BOARD_STREAM_PATH, BYOK_BOARD_UNCLAIM_ROUTE, BYOK_CAPABILITIES_PATH, BYOK_CHALLENGE_PATH, BYOK_EVENTS_PATH, BYOK_MESSAGES_PATH, BYOK_PAIR_PATH, BYOK_PRESENCE_PATH, BYOK_RECORDS_PATH, BYOK_RECORD_ROUTE, BYOK_SKILL_PACKS_PATH, BYOK_SKILL_PACK_FILE_ROUTE, BYOK_TOKEN_PATH, BlobDownloadUrlResponseSchema, BlobRefSchema, CAPABILITY_FLAGS, CONFIGURED_TOOLSETS_MAX_ITEMS, CONTENT_HASH_RE, CUSTOM_HARNESS_CAPABILITY, ChallengeRequestSchema, ChallengeResponseSchema, ConfiguredToolsetsSchema, ConnAckPayloadSchema, ConnHelloPayloadSchema, ContentReadPolicySchema, CreateBlobRequestSchema, CreateBlobResponseSchema, DAEMON_TO_SERVER_TYPES, DispatchSelectionSchema, EnvelopeParseError, EnvelopeSchema, EnvelopeValidationError, EventsPollQuerySchema, EventsPollResponseSchema, HarnessIdSchema, HarnessInfoSchema, HarnessInventorySchema, KNOWN_AGENT_EVENT_TYPES, MAILBOX_READ_AHEAD_CAPABILITY, MAILBOX_READ_AHEAD_MAX_SEQS, MAX_MESSAGES_PER_BATCH, MESSAGE_PAYLOAD_SCHEMAS, MESSAGE_TYPES, MessagesSendRequestSchema, MessagesSendResponseSchema, PAIR_RESPONSE_TENANT_ID_MAX_LENGTH, PERMISSION_MODES, PROTOCOL_VERSION, PROVIDER_MODEL_CAPABILITIES, PROVIDER_PROFILE_BINDING_CAPABILITY, PairRequestSchema, PairResponseSchema, PairResponseTenantIdSchema, PermissionPolicySchema, PresencePublishRequestSchema, ProtocolError, ProtocolVersionNumberSchema, ProviderModelCapabilitySchema, ProviderProfileBindingSchema, ProviderProfileHashSchema, ProviderProfileRefSchema, ProviderProfileRevisionSchema, RESULT_DOCUMENT_MAX_BYTES, RequiredToolsetsSchema, RuntimeCapabilitiesSchema, RuntimeIdSchema, RuntimeInfoSchema, SERVER_TO_DAEMON_TYPES, STRICT_AGENT_ONLY_CAPABILITY, TASK_OFFER_TYPES, TASK_STATES, TASK_TRANSITIONS, TERMINAL_INFERENCE_USAGE_CLIENT_VERSION_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_MAX_DURATION_MS, TERMINAL_INFERENCE_USAGE_MAX_TOKENS, TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_PROVIDER_MAX_LENGTH, TERMINAL_PROJECTION_SELECTION_CAPABILITY, TaskApprovalResolvedPayloadSchema, TaskApprovePayloadSchema, TaskArtifactPayloadSchema, TaskAwaitApprovalPayloadSchema, TaskCancelPayloadSchema, TaskCancelledPayloadSchema, TaskClaimPayloadSchema, TaskCompletePayloadSchema, TaskDeclinePayloadSchema, TaskFailPayloadSchema, TaskOfferForAgentPayloadSchema, TaskOfferForAgentWithEgressFreshPayloadSchema, TaskOfferForAgentWithEgressPayloadSchema, TaskOfferPayloadSchema, TaskOfferWithToolsetsPayloadSchema, TaskProgressPayloadSchema, TaskRejectPayloadSchema, TaskStartedPayloadSchema, TaskSteerPayloadSchema, TerminalInferenceUsageSchema, TerminalProjectionContractSchema, TerminalProjectionSelectionSchema, TokenRequestSchema, TokenResponseSchema, ToolsetIdSchema, UnknownAgentEventSchema, UnknownMessageTypeError, agentMemoryProjectionBase64UrlByteLength, byokAgentHomeProjectionCompletionPath, byokBlobContentPath, byokBlobFinalizePath, byokBlobUrlPath, byokRecordPath, byokSkillPackFilePath, canTransition, checkResultDocument, createEnvelope, decodeEnvelope, encodeEnvelope, isKnownAgentEvent, isServerToDaemonType, isTaskOfferType, parseMessage, partitionAgentEvents };
+export { AGENT_CONTENT_ARTIFACT_READ_CAPABILITY, AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY, AGENT_CONTENT_WORKSPACE_READ_CAPABILITY, AGENT_EGRESS_FRESH_SESSION_CAPABILITY, AGENT_EGRESS_POLICY_CAPABILITY, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY, AGENT_EVENT_SPILL_UNSTORED_REASON_MAX_LENGTH, AGENT_HOME_PROJECTION_CAPABILITY, AGENT_HOME_PROJECTION_MAX_BYTES, AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM, AGENT_INPUT_PREPARATION_CAPABILITY, AGENT_MEMORY_PROJECTION_CAPABILITY, AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE, AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES, AGENT_MESSAGE_EGRESS_CAPABILITY, AGENT_MESSAGE_MAX_BYTES, AGENT_REF_MAX_BYTES, AgentContentActorKindSchema, AgentContentActorSchema, AgentContentDecodeAsSchema, AgentContentMimeTypeSchema, AgentContentReadDecisionSchema, AgentContentReadDenialReasonSchema, AgentContentReadPayloadSchema, AgentContentReadSurfaceSchema, AgentContentReceiptPayloadSchema, AgentEgressAckPayloadSchema, AgentEgressActivityPolicySchema, AgentEgressContentHashSchema, AgentEgressDropReasonSchema, AgentEgressLaneSchema, AgentEgressPolicyRevisionSchema, AgentEgressPolicySchema, AgentEgressReliablePayloadSchema, AgentEventOrUnknownSchema, AgentEventSchema, AgentEventSpillSchema, AgentHomeProjectionAgentRefSchema, AgentHomeProjectionCompletionRequestSchema, AgentHomeProjectionHashSchema, AgentHomeProjectionOutcomeSchema, AgentHomeProjectionPayloadSchema, AgentHomeProjectionProfileRevisionSchema, AgentHomeProjectionReadbackSchema, AgentHomeProjectionStatusSchema, AgentHomeProjectionValueSchema, AgentInputPreparationPayloadSchema, AgentMemoryProjectionCommitRequestSchema, AgentMemoryProjectionCommitResponseSchema, AgentMemoryProjectionEraseResultSchema, AgentMemoryProjectionGrantRefSchema, AgentMemoryProjectionMeteringReceiptSchema, AgentMemoryProjectionMutationSchema, AgentMemoryProjectionReceiptSchema, AgentMemoryProjectionSessionRefSchema, AgentMemoryProjectionSnapshotSchema, AgentMemoryProjectionSourceSeqSchema, AgentMemoryProjectionWriterEpochSchema, AgentMessageContentTypeSchema, AgentMessageContractSchema, AgentMessageDestinationBindingSchema, AgentMessageDispositionPayloadSchema, AgentMessageEgressRequirementSchema, AgentMessageFreshnessCursorSchema, AgentMessagePublishPayloadSchema, AgentMessageServerContextSchema, AgentRefSchema, AgentReliableQuotaPolicySchema, BYOK_ACTIVITY_PATH, BYOK_AGENT_HOME_PROJECTIONS_PATH, BYOK_AGENT_HOME_PROJECTION_COMPLETION_ROUTE, BYOK_AGENT_MEMORY_PROJECTIONS_PATH, BYOK_BLOBS_PATH, BYOK_BLOB_CONTENT_ROUTE, BYOK_BLOB_FINALIZE_ROUTE, BYOK_BLOB_URL_ROUTE, BYOK_BOARD_CLAIM_ROUTE, BYOK_BOARD_PATH, BYOK_BOARD_STATUS_ROUTE, BYOK_BOARD_STREAM_PATH, BYOK_BOARD_UNCLAIM_ROUTE, BYOK_CAPABILITIES_PATH, BYOK_CHALLENGE_PATH, BYOK_EVENTS_PATH, BYOK_INPUT_PREPARATIONS_PATH, BYOK_INPUT_PREPARATION_COMPLETION_ROUTE, BYOK_INPUT_PREPARATION_STATUS_ROUTE, BYOK_MESSAGES_PATH, BYOK_PAIR_PATH, BYOK_PRESENCE_PATH, BYOK_RECORDS_PATH, BYOK_RECORD_ROUTE, BYOK_SKILL_PACKS_PATH, BYOK_SKILL_PACK_FILE_ROUTE, BYOK_TOKEN_PATH, BlobDownloadUrlResponseSchema, BlobRefSchema, CAPABILITY_FLAGS, CONFIGURED_TOOLSETS_MAX_ITEMS, CONTENT_HASH_RE, CUSTOM_HARNESS_CAPABILITY, ChallengeRequestSchema, ChallengeResponseSchema, ConfiguredToolsetsSchema, ConnAckPayloadSchema, ConnHelloPayloadSchema, ContentReadPolicySchema, CreateBlobRequestSchema, CreateBlobResponseSchema, DAEMON_TO_SERVER_TYPES, DispatchSelectionSchema, EnvelopeParseError, EnvelopeSchema, EnvelopeValidationError, EventsPollQuerySchema, EventsPollResponseSchema, HOST_MCP_TASK_CONTEXT_CAPABILITY, HarnessIdSchema, HarnessInfoSchema, HarnessInventorySchema, INPUT_PREPARATION_WIRE_VERSION, InputPreparationAccountingPolicyRefSchema, InputPreparationArtifactSummarySchema, InputPreparationBindingSchema, InputPreparationCompletionRequestSchema, InputPreparationContentHashSchema, InputPreparationContextDocumentSchema, InputPreparationContextFileSchema, InputPreparationCounterEvidenceSchema, InputPreparationCounterProviderEvidenceSchema, InputPreparationCounterTargetSchema, InputPreparationDocsPathsSchema, InputPreparationHostCanonicalAssistantMessageSchema, InputPreparationMessageSchema, InputPreparationModelCostSchema, InputPreparationModelSchema, InputPreparationOfferBindingSchema, InputPreparationOptionsSchema, InputPreparationPermissionModeSchema, InputPreparationPolicyRevisionSchema, InputPreparationProfileIdSchema, InputPreparationProjectionSchema, InputPreparationPromptSnapshotSchema, InputPreparationReadbackSchema, InputPreparationReadinessReasonSchema, InputPreparationReceiptSummarySchema, InputPreparationReferenceSchema, InputPreparationRejectionReasonSchema, InputPreparationResidualKeySchema, InputPreparationResidualValueClassSchema, InputPreparationRuntimeIdentitySchema, InputPreparationSelectionSchema, InputPreparationSkillSchema, InputPreparationSourceSchema, InputPreparationStateSchema, InputPreparationStatusQuerySchema, InputPreparationStatusSchema, InputPreparationToolImplementationKindSchema, InputPreparationUserMessageSchema, KNOWN_AGENT_EVENT_TYPES, MAILBOX_READ_AHEAD_CAPABILITY, MAILBOX_READ_AHEAD_MAX_SEQS, MAX_MESSAGES_PER_BATCH, MESSAGE_PAYLOAD_SCHEMAS, MESSAGE_TYPES, MessagesSendRequestSchema, MessagesSendResponseSchema, PAIR_RESPONSE_TENANT_ID_MAX_LENGTH, PERMISSION_MODES, PROTOCOL_VERSION, PROVIDER_MODEL_CAPABILITIES, PROVIDER_PROFILE_BINDING_CAPABILITY, PairRequestSchema, PairResponseSchema, PairResponseTenantIdSchema, PermissionPolicySchema, PresencePublishRequestSchema, ProtocolError, ProtocolVersionNumberSchema, ProviderModelCapabilitySchema, ProviderProfileBindingSchema, ProviderProfileHashSchema, ProviderProfileRefSchema, ProviderProfileRevisionSchema, RESULT_DOCUMENT_MAX_BYTES, RequiredToolsetsSchema, RuntimeCapabilitiesSchema, RuntimeIdSchema, RuntimeInfoSchema, SERVER_TO_DAEMON_TYPES, STRICT_AGENT_ONLY_CAPABILITY, TASK_OFFER_TYPES, TASK_STATES, TASK_TRANSITIONS, TERMINAL_INFERENCE_USAGE_CLIENT_VERSION_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_MAX_DURATION_MS, TERMINAL_INFERENCE_USAGE_MAX_TOKENS, TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_PROVIDER_MAX_LENGTH, TERMINAL_PROJECTION_SELECTION_CAPABILITY, TaskApprovalResolvedPayloadSchema, TaskApprovePayloadSchema, TaskArtifactPayloadSchema, TaskAwaitApprovalPayloadSchema, TaskCancelPayloadSchema, TaskCancelledPayloadSchema, TaskClaimPayloadSchema, TaskCompletePayloadSchema, TaskDeclinePayloadSchema, TaskFailPayloadSchema, TaskOfferForAgentPayloadSchema, TaskOfferForAgentWithEgressFreshPayloadSchema, TaskOfferForAgentWithEgressPayloadSchema, TaskOfferPayloadSchema, TaskOfferPreparedPayloadSchema, TaskOfferWithToolsetsPayloadSchema, TaskProgressPayloadSchema, TaskRejectPayloadSchema, TaskStartedPayloadSchema, TaskSteerPayloadSchema, TerminalInferenceUsageSchema, TerminalPreparedObservationSchema, TerminalProjectionContractSchema, TerminalProjectionSelectionSchema, TokenRequestSchema, TokenResponseSchema, ToolsetIdSchema, UnknownAgentEventSchema, UnknownMessageTypeError, agentMemoryProjectionBase64UrlByteLength, byokAgentHomeProjectionCompletionPath, byokBlobContentPath, byokBlobFinalizePath, byokBlobUrlPath, byokInputPreparationCompletionPath, byokInputPreparationStatusPath, byokRecordPath, byokSkillPackFilePath, canTransition, checkResultDocument, createEnvelope, decodeEnvelope, encodeEnvelope, isKnownAgentEvent, isServerToDaemonType, isTaskOfferType, parseMessage, partitionAgentEvents };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map