@byok-sdk/protocol 0.21.0 → 0.23.0

package/dist/codec.d.ts

@@ -78,6 +78,10 @@ interface EnvelopeShapeOptions {
         taskId?: never;
         seq: number;
     };
+    'provider.provisioning.available': {
+        taskId?: never;
+        seq: number;
+    };
     'agent.content.receipt': {
         taskId?: string;
         seq?: number;

package/dist/envelope.d.ts

@@ -601,6 +601,11 @@ export declare const EnvelopeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             requestDigest: z.ZodString;
             artifactDigest: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>;
+        agentMemory: z.ZodEnum<{
+            none: "none";
+            read: "read";
+            "read-write": "read-write";
+        }>;
         egressPolicy: z.ZodObject<{
             policyRevision: z.ZodString;
             activity: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -759,6 +764,11 @@ export declare const EnvelopeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     session_ref: z.ZodOptional<z.ZodString>;
     seq: z.ZodNumber;
     payload: z.ZodObject<{
+        agentMemory: z.ZodEnum<{
+            none: "none";
+            read: "read";
+            "read-write": "read-write";
+        }>;
         requestId: z.ZodUUID;
         agentRef: z.ZodObject<{
             agentId: z.ZodString;
@@ -876,6 +886,17 @@ export declare const EnvelopeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             ruledResidualKeys: z.ZodArray<z.ZodString>;
         }, z.core.$strict>>;
     }, z.core.$strict>;
+}, z.core.$strip>, z.ZodObject<{
+    v: z.ZodNumber;
+    id: z.ZodUUID;
+    ts: z.ZodISODateTime;
+    type: z.ZodLiteral<"provider.provisioning.available">;
+    task_id: z.ZodOptional<z.ZodNever>;
+    session_ref: z.ZodOptional<z.ZodString>;
+    seq: z.ZodNumber;
+    payload: z.ZodObject<{
+        requestId: z.ZodUUID;
+    }, z.core.$strict>;
 }, z.core.$strip>, z.ZodObject<{
     v: z.ZodNumber;
     id: z.ZodUUID;

package/dist/http-api.d.ts

@@ -695,6 +695,11 @@ export declare const EventsPollResponseSchema: z.ZodObject<{
                 requestDigest: z.ZodString;
                 artifactDigest: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>;
+            agentMemory: z.ZodEnum<{
+                none: "none";
+                read: "read";
+                "read-write": "read-write";
+            }>;
             egressPolicy: z.ZodObject<{
                 policyRevision: z.ZodString;
                 activity: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -853,6 +858,11 @@ export declare const EventsPollResponseSchema: z.ZodObject<{
         session_ref: z.ZodOptional<z.ZodString>;
         seq: z.ZodNumber;
         payload: z.ZodObject<{
+            agentMemory: z.ZodEnum<{
+                none: "none";
+                read: "read";
+                "read-write": "read-write";
+            }>;
             requestId: z.ZodUUID;
             agentRef: z.ZodObject<{
                 agentId: z.ZodString;
@@ -970,6 +980,17 @@ export declare const EventsPollResponseSchema: z.ZodObject<{
                 ruledResidualKeys: z.ZodArray<z.ZodString>;
             }, z.core.$strict>>;
         }, z.core.$strict>;
+    }, z.core.$strip>, z.ZodObject<{
+        v: z.ZodNumber;
+        id: z.ZodUUID;
+        ts: z.ZodISODateTime;
+        type: z.ZodLiteral<"provider.provisioning.available">;
+        task_id: z.ZodOptional<z.ZodNever>;
+        session_ref: z.ZodOptional<z.ZodString>;
+        seq: z.ZodNumber;
+        payload: z.ZodObject<{
+            requestId: z.ZodUUID;
+        }, z.core.$strict>;
     }, z.core.$strip>, z.ZodObject<{
         v: z.ZodNumber;
         id: z.ZodUUID;
@@ -2073,6 +2094,11 @@ export declare const MessagesSendRequestSchema: z.ZodObject<{
                 requestDigest: z.ZodString;
                 artifactDigest: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>;
+            agentMemory: z.ZodEnum<{
+                none: "none";
+                read: "read";
+                "read-write": "read-write";
+            }>;
             egressPolicy: z.ZodObject<{
                 policyRevision: z.ZodString;
                 activity: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -2231,6 +2257,11 @@ export declare const MessagesSendRequestSchema: z.ZodObject<{
         session_ref: z.ZodOptional<z.ZodString>;
         seq: z.ZodNumber;
         payload: z.ZodObject<{
+            agentMemory: z.ZodEnum<{
+                none: "none";
+                read: "read";
+                "read-write": "read-write";
+            }>;
             requestId: z.ZodUUID;
             agentRef: z.ZodObject<{
                 agentId: z.ZodString;
@@ -2348,6 +2379,17 @@ export declare const MessagesSendRequestSchema: z.ZodObject<{
                 ruledResidualKeys: z.ZodArray<z.ZodString>;
             }, z.core.$strict>>;
         }, z.core.$strict>;
+    }, z.core.$strip>, z.ZodObject<{
+        v: z.ZodNumber;
+        id: z.ZodUUID;
+        ts: z.ZodISODateTime;
+        type: z.ZodLiteral<"provider.provisioning.available">;
+        task_id: z.ZodOptional<z.ZodNever>;
+        session_ref: z.ZodOptional<z.ZodString>;
+        seq: z.ZodNumber;
+        payload: z.ZodObject<{
+            requestId: z.ZodUUID;
+        }, z.core.$strict>;
     }, z.core.$strip>, z.ZodObject<{
         v: z.ZodNumber;
         id: z.ZodUUID;
@@ -2928,6 +2970,11 @@ export declare const InputPreparationCompletionRequestSchema: z.ZodDiscriminated
             reserved: "reserved";
         }>;
         binding: z.ZodObject<{
+            agentMemory: z.ZodEnum<{
+                none: "none";
+                read: "read";
+                "read-write": "read-write";
+            }>;
             scopeId: z.ZodString;
             deviceId: z.ZodString;
             agentRef: z.ZodString;
@@ -2951,9 +2998,10 @@ export declare const InputPreparationCompletionRequestSchema: z.ZodDiscriminated
             runtime: z.ZodObject<{
                 packageName: z.ZodString;
                 packageVersion: z.ZodString;
-                upstreamBase: z.ZodString;
+                tarballIntegrity: z.ZodString;
+                provenanceDigest: z.ZodString;
+                closureDigest: z.ZodString;
                 upstreamCommit: z.ZodString;
-                forkBuild: z.ZodNumber;
                 envelopeFormat: z.ZodString;
                 requestFormat: z.ZodString;
                 compilerVersion: z.ZodNumber;
@@ -3123,6 +3171,11 @@ export declare const InputPreparationReadbackSchema: z.ZodObject<{
             reserved: "reserved";
         }>;
         binding: z.ZodObject<{
+            agentMemory: z.ZodEnum<{
+                none: "none";
+                read: "read";
+                "read-write": "read-write";
+            }>;
             scopeId: z.ZodString;
             deviceId: z.ZodString;
             agentRef: z.ZodString;
@@ -3146,9 +3199,10 @@ export declare const InputPreparationReadbackSchema: z.ZodObject<{
             runtime: z.ZodObject<{
                 packageName: z.ZodString;
                 packageVersion: z.ZodString;
-                upstreamBase: z.ZodString;
+                tarballIntegrity: z.ZodString;
+                provenanceDigest: z.ZodString;
+                closureDigest: z.ZodString;
                 upstreamCommit: z.ZodString;
-                forkBuild: z.ZodNumber;
                 envelopeFormat: z.ZodString;
                 requestFormat: z.ZodString;
                 compilerVersion: z.ZodNumber;

package/dist/index.d.ts

@@ -7,14 +7,16 @@ export { PermissionPolicySchema, PERMISSION_MODES } from './permission';
 export type { PermissionPolicy, PermissionMode } from './permission';
 export { PROVIDER_PROFILE_BINDING_CAPABILITY, PROVIDER_MODEL_CAPABILITIES, ProviderProfileRefSchema, ProviderProfileRevisionSchema, ProviderProfileHashSchema, ProviderModelCapabilitySchema, ProviderProfileBindingSchema, } from './provider-profile-binding';
 export type { ProviderProfileRef, ProviderProfileRevision, ProviderProfileHash, ProviderModelCapability, ProviderProfileBinding, } from './provider-profile-binding';
+export { PROVIDER_PROVISIONING_CAPABILITY, PROVIDER_SECRET_SEALING_KEY_REGISTER_OPERATION, PROVIDER_PROVISIONING_OPERATIONS, PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM, PROVIDER_PROVISIONING_REJECTION_CODES, PROVIDER_PROVISIONING_HOST_TERMINAL_CODES, PROVIDER_PROVISIONING_DISPOSITIONS, PROVIDER_PROVISIONING_KEY_CHECK_RESULTS, ProviderProvisioningAvailablePayloadSchema, ProviderProvisioningKeyCheckResultSchema, ProviderProvisioningKeyCheckSchema, ProviderProvisioningOperationSchema, ProviderProvisioningOperationGenerationSchema, ProviderProvisioningOperationDigestSchema, ProviderProvisioningRejectionCodeSchema, ProviderProvisioningProviderStatusSchema, ProviderProvisioningCompletionSchema, ProviderProvisioningDispositionSchema, ProviderProvisioningReadbackSchema, } from './provider-provisioning';
+export type { ProviderProvisioningAvailablePayload, ProviderProvisioningOperation, ProviderProvisioningOperationGeneration, ProviderProvisioningOperationDigest, ProviderProvisioningRejectionCode, ProviderProvisioningProviderStatus, ProviderProvisioningCompletion, ProviderProvisioningDisposition, ProviderProvisioningReadback, ProviderProvisioningKeyCheckResult, ProviderProvisioningKeyCheck, } from './provider-provisioning';
 export { AgentEventSchema, AgentEventSpillSchema, AGENT_EVENT_SPILL_UNSTORED_REASON_MAX_LENGTH, UnknownAgentEventSchema, AgentEventOrUnknownSchema, KNOWN_AGENT_EVENT_TYPES, isKnownAgentEvent, partitionAgentEvents, } from './agent-event';
 export type { AgentEvent, AgentEventSpill, UnknownAgentEvent, AgentEventOrUnknown } from './agent-event';
 export { AgentEgressPolicySchema, AgentEgressActivityPolicySchema, AgentReliableQuotaPolicySchema, ContentReadPolicySchema, AgentEgressLaneSchema, AgentEgressDropReasonSchema, AgentContentReadSurfaceSchema, AgentContentActorKindSchema, AgentContentActorSchema, AgentContentDecodeAsSchema, AgentContentMimeTypeSchema, AgentContentReadDecisionSchema, AgentContentReadDenialReasonSchema, AgentEgressContentHashSchema, AgentEgressPolicyRevisionSchema, AgentMessageContractSchema, AgentMessageContentTypeSchema, AgentMessageDestinationBindingSchema, AgentMessageFreshnessCursorSchema, AgentMessageServerContextSchema, AgentMessageEgressRequirementSchema, AGENT_MESSAGE_MAX_BYTES, AGENT_MESSAGE_EGRESS_CAPABILITY, AGENT_EGRESS_POLICY_CAPABILITY, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY, AGENT_EGRESS_FRESH_SESSION_CAPABILITY, AGENT_CONTENT_WORKSPACE_READ_CAPABILITY, AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY, AGENT_CONTENT_ARTIFACT_READ_CAPABILITY, } from './agent-egress';
 export type { AgentEgressPolicy, AgentEgressActivityPolicy, AgentReliableQuotaPolicy, ContentReadPolicy, AgentEgressLane, AgentEgressDropReason, AgentMessageContentType, AgentMessageEgressRequirement, AgentMessageServerContext, AgentContentReadSurface, AgentContentActorKind, AgentContentActor, AgentContentDecodeAs, AgentContentReadDecision, AgentContentReadDenialReason, } from './agent-egress';
 export { AGENT_HOME_PROJECTION_CAPABILITY, AGENT_HOME_PROJECTION_MAX_BYTES, AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM, AgentHomeProjectionProfileRevisionSchema, AgentHomeProjectionHashSchema, AgentHomeProjectionOutcomeSchema, AgentHomeProjectionValueSchema, } from './agent-home-projection';
 export type { AgentHomeProjectionProfileRevision, AgentHomeProjectionHash, AgentHomeProjectionOutcome, AgentHomeProjectionValue, } from './agent-home-projection';
-export { AGENT_INPUT_PREPARATION_CAPABILITY, INPUT_PREPARATION_WIRE_VERSION, InputPreparationContentHashSchema, InputPreparationPermissionModeSchema, InputPreparationPolicyRevisionSchema, InputPreparationProfileIdSchema, InputPreparationSourceSchema, InputPreparationModelCostSchema, InputPreparationModelSchema, InputPreparationOptionsSchema, InputPreparationSelectionSchema, InputPreparationContextFileSchema, InputPreparationDocsPathsSchema, InputPreparationSkillSchema, InputPreparationPromptSnapshotSchema, InputPreparationUserMessageSchema, InputPreparationHostCanonicalAssistantMessageSchema, InputPreparationMessageSchema, InputPreparationContextDocumentSchema, InputPreparationStateSchema, InputPreparationReadinessReasonSchema, InputPreparationRuntimeIdentitySchema, InputPreparationCounterTargetSchema, InputPreparationAccountingPolicyRefSchema, InputPreparationCounterProviderEvidenceSchema, InputPreparationCounterEvidenceSchema, InputPreparationResidualValueClassSchema, InputPreparationResidualKeySchema, InputPreparationProjectionSchema, InputPreparationToolImplementationKindSchema, InputPreparationArtifactSummarySchema, InputPreparationBindingSchema, InputPreparationReceiptSummarySchema, InputPreparationReferenceSchema, InputPreparationOfferBindingSchema, InputPreparationRejectionReasonSchema, } from './input-preparation';
-export type { InputPreparationPermissionMode, InputPreparationSource, InputPreparationModel, InputPreparationOptions, InputPreparationSelection, InputPreparationSkill, InputPreparationMessage, InputPreparationContextDocument, InputPreparationState, InputPreparationReadinessReason, InputPreparationAccountingPolicyRef, InputPreparationResidualValueClass, InputPreparationRuntimeIdentity, InputPreparationReceiptSummary, InputPreparationOfferBinding, InputPreparationRejectionReason, } from './input-preparation';
+export { AGENT_INPUT_PREPARATION_CAPABILITY, INPUT_PREPARATION_WIRE_VERSION, InputPreparationContentHashSchema, InputPreparationPermissionModeSchema, InputPreparationPolicyRevisionSchema, InputPreparationProfileIdSchema, InputPreparationSourceSchema, InputPreparationModelCostSchema, InputPreparationModelSchema, InputPreparationOptionsSchema, InputPreparationSelectionSchema, InputPreparationPromptSnapshotSchema, InputPreparationUserMessageSchema, InputPreparationHostCanonicalAssistantMessageSchema, InputPreparationMessageSchema, InputPreparationContextDocumentSchema, InputPreparationStateSchema, InputPreparationReadinessReasonSchema, InputPreparationRuntimeIdentitySchema, InputPreparationCounterTargetSchema, InputPreparationAccountingPolicyRefSchema, InputPreparationCounterProviderEvidenceSchema, InputPreparationCounterEvidenceSchema, InputPreparationResidualValueClassSchema, InputPreparationResidualKeySchema, InputPreparationProjectionSchema, InputPreparationToolImplementationKindSchema, InputPreparationArtifactSummarySchema, InputPreparationBindingSchema, InputPreparationReceiptSummarySchema, InputPreparationReferenceSchema, InputPreparationOfferBindingSchema, InputPreparationRejectionReasonSchema, } from './input-preparation';
+export type { InputPreparationPermissionMode, InputPreparationSource, InputPreparationModel, InputPreparationOptions, InputPreparationSelection, InputPreparationMessage, InputPreparationContextDocument, InputPreparationState, InputPreparationReadinessReason, InputPreparationAccountingPolicyRef, InputPreparationResidualValueClass, InputPreparationRuntimeIdentity, InputPreparationReceiptSummary, InputPreparationOfferBinding, InputPreparationRejectionReason, } from './input-preparation';
 export { AGENT_MEMORY_PROJECTION_CAPABILITY, AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES, AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE, AgentMemoryProjectionGrantRefSchema, AgentMemoryProjectionSessionRefSchema, AgentMemoryProjectionWriterEpochSchema, AgentMemoryProjectionSourceSeqSchema, AgentMemoryProjectionSnapshotSchema, AgentMemoryProjectionMeteringReceiptSchema, AgentMemoryProjectionMutationSchema, AgentMemoryProjectionReceiptSchema, AgentMemoryProjectionEraseResultSchema, agentMemoryProjectionBase64UrlByteLength, } from './agent-memory-projection';
 export type { AgentMemoryProjectionGrantRef, AgentMemoryProjectionSessionRef, AgentMemoryProjectionWriterEpoch, AgentMemoryProjectionSourceSeq, AgentMemoryProjectionSnapshot, AgentMemoryProjectionMeteringReceipt, AgentMemoryProjectionMutation, AgentMemoryProjectionReceipt, AgentMemoryProjectionEraseResult, } from './agent-memory-projection';
 export { HOST_MCP_TASK_CONTEXT_CAPABILITY } from './task-assertion';
@@ -34,3 +36,4 @@ export type { PairRequest, PairResponse, ChallengeRequest, ChallengeResponse, To
 export type { TaskOfferType } from './messages';
 export type { HarnessId, HarnessInfo } from './messages';
 export { CUSTOM_HARNESS_CAPABILITY } from './version';
+export { PreparedAgentMemoryModeSchema, type PreparedAgentMemoryMode } from './input-preparation';

package/dist/index.js

@@ -123,7 +123,7 @@ var PermissionPolicySchema = z.object({
 }).strict();
 
 // src/input-preparation.ts
-var INPUT_PREPARATION_WIRE_VERSION = 6;
+var INPUT_PREPARATION_WIRE_VERSION = 8;
 var AGENT_INPUT_PREPARATION_CAPABILITY = `agent-input-preparation-v${INPUT_PREPARATION_WIRE_VERSION}`;
 var InputPreparationContentHashSchema = AgentEgressContentHashSchema;
 var OPAQUE_ID = z.string().min(1).max(512).regex(/^[^\u0000-\u001f\u007f]+$/u, "control identifiers must not contain control characters");
@@ -131,6 +131,7 @@ var OPAQUE_TEXT = z.string().min(1).max(2048).regex(/^[^\u0000-\u001f\u007f]+$/u
 var InputPreparationPolicyRevisionSchema = OPAQUE_ID;
 var InputPreparationProfileIdSchema = OPAQUE_ID;
 var InputPreparationPermissionModeSchema = z.enum(PERMISSION_MODES);
+var PreparedAgentMemoryModeSchema = z.enum(["none", "read", "read-write"]);
 var InputPreparationSourceSchema = z.object({ revision: OPAQUE_ID, digest: OPAQUE_ID }).strict();
 var InputPreparationModelCostSchema = z.object({
   input: z.number().finite(),
@@ -191,26 +192,7 @@ var InputPreparationOptionsSchema = z.object({
   reasoningEffort: z.enum(["minimal", "low", "medium", "high", "xhigh", "max"]).optional()
 }).strict();
 var InputPreparationSelectionSchema = z.object({ model: InputPreparationModelSchema, options: InputPreparationOptionsSchema }).strict();
-var CONTEXT_PATH = z.string().max(4096).regex(/^[^\u0000]*$/u, "paths must not contain a NUL character");
-var InputPreparationContextFileSchema = z.object({ path: CONTEXT_PATH, content: z.string() }).strict();
-var InputPreparationDocsPathsSchema = z.object({ readmePath: CONTEXT_PATH, docsPath: CONTEXT_PATH, examplesPath: CONTEXT_PATH }).strict();
-var InputPreparationSkillSchema = z.object({
-  name: OPAQUE_ID,
-  description: z.string().max(4096),
-  filePath: CONTEXT_PATH,
-  disableModelInvocation: z.boolean()
-}).strict();
-var InputPreparationPromptSnapshotSchema = z.object({
-  customPrompt: z.string().optional(),
-  appendSystemPrompt: z.string().optional(),
-  cwd: CONTEXT_PATH,
-  toolSnippets: z.record(z.string(), z.string()),
-  toolGuidelines: z.record(z.string(), z.array(z.string()).max(512)),
-  promptGuidelines: z.array(z.string()).max(512),
-  contextFiles: z.array(InputPreparationContextFileSchema).max(512),
-  skills: z.array(InputPreparationSkillSchema).max(512),
-  docsPaths: InputPreparationDocsPathsSchema
-}).strict();
+var InputPreparationPromptSnapshotSchema = z.object({ systemPrompt: z.string() }).strict();
 var InputPreparationUserMessageSchema = z.object({
   role: z.literal("user"),
   content: z.string(),
@@ -277,9 +259,10 @@ var InputPreparationReadinessReasonSchema = z.enum([
 var InputPreparationRuntimeIdentitySchema = z.object({
   packageName: OPAQUE_ID,
   packageVersion: OPAQUE_ID,
-  upstreamBase: OPAQUE_ID,
+  tarballIntegrity: z.string().regex(/^sha512-[A-Za-z0-9+/]+={0,2}$/u),
+  provenanceDigest: z.string().regex(/^[0-9a-f]{64}$/u),
+  closureDigest: z.string().regex(/^[0-9a-f]{64}$/u),
   upstreamCommit: OPAQUE_ID,
-  forkBuild: z.number().int().nonnegative(),
   envelopeFormat: OPAQUE_ID,
   requestFormat: OPAQUE_ID,
   compilerVersion: z.number().int().nonnegative()
@@ -351,6 +334,7 @@ var InputPreparationArtifactSummarySchema = z.object({
   toolImplementationKinds: z.record(OPAQUE_ID, InputPreparationToolImplementationKindSchema)
 }).strict();
 var InputPreparationBindingSchema = z.object({
+  agentMemory: PreparedAgentMemoryModeSchema,
   scopeId: OPAQUE_ID,
   deviceId: OPAQUE_ID,
   agentRef: OPAQUE_ID,
@@ -492,6 +476,144 @@ var ProviderProfileBindingSchema = z.object({
     ctx.addIssue({ code: "custom", path: ["requiredCapabilities"], message: "duplicate provider capability" });
   }
 });
+var PROVIDER_PROVISIONING_CAPABILITY = "provider-provisioning.v1";
+var PROVIDER_SECRET_SEALING_KEY_REGISTER_OPERATION = "provider-secret-sealing-key.register";
+var ProviderProvisioningAvailablePayloadSchema = z.object({
+  requestId: z.uuid()
+}).strict();
+var PROVIDER_PROVISIONING_OPERATIONS = ["configure", "update_model", "replace_secret", "delete"];
+var ProviderProvisioningOperationSchema = z.enum(PROVIDER_PROVISIONING_OPERATIONS);
+var PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM = "9223372036854775807";
+var ProviderProvisioningOperationGenerationSchema = z.string().regex(/^[1-9][0-9]{0,18}$/u, "operationGeneration must be a canonical positive decimal string").refine(
+  (value) => value.length < PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM.length || value <= PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM,
+  `operationGeneration must not exceed ${PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM}`
+);
+var ProviderProvisioningOperationDigestSchema = z.string().regex(/^sha256:[0-9a-f]{64}$/u, "operationDigest must be lowercase sha256");
+var PROVIDER_PROVISIONING_REJECTION_CODES = [
+  "request_invalid",
+  "request_conflict",
+  "request_expired",
+  "request_not_yet_valid",
+  "request_window_invalid",
+  "sealing_key_rotated",
+  "enrollment_mismatch",
+  "agent_not_placed",
+  "config_digest_mismatch",
+  "operation_generation_stale",
+  "profile_changed",
+  "profile_not_found",
+  "credential_scope_mismatch",
+  "provider_kind_unsupported",
+  "pi_model_invalid",
+  "capabilities_invalid",
+  "seal_open_failed",
+  "secret_invalid",
+  "local_commit_interrupted",
+  "secret_store_unavailable"
+];
+var ProviderProvisioningRejectionCodeSchema = z.enum(PROVIDER_PROVISIONING_REJECTION_CODES);
+var PROVIDER_PROVISIONING_HOST_TERMINAL_CODES = ["request_expired", "sealing_key_rotated"];
+var ProviderProvisioningProviderStatusSchema = z.object({
+  profileRef: ProviderProfileRefSchema,
+  providerKind: z.string().min(1).max(64).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/u, "providerKind must be a lowercase portable identifier"),
+  modelId: z.string().min(1).max(160).regex(/^[^\u0000\r\n]+$/u),
+  capabilities: z.array(ProviderModelCapabilitySchema).max(8),
+  secretConfigured: z.boolean()
+}).strict().superRefine((status, ctx) => {
+  if (new Set(status.capabilities).size !== status.capabilities.length) {
+    ctx.addIssue({ code: "custom", path: ["capabilities"], message: "duplicate provider capability" });
+  }
+});
+var PROVIDER_PROVISIONING_KEY_CHECK_RESULTS = [
+  "ok",
+  "credential_rejected",
+  "rate_limited",
+  "quota_or_billing",
+  "model_not_permitted",
+  "provider_error",
+  "unreachable",
+  "timeout",
+  "not_run"
+];
+var ProviderProvisioningKeyCheckResultSchema = z.enum(PROVIDER_PROVISIONING_KEY_CHECK_RESULTS);
+var ProviderProvisioningKeyCheckSchema = z.object({
+  result: ProviderProvisioningKeyCheckResultSchema
+}).strict();
+var completionIdentity = {
+  requestId: z.uuid(),
+  operation: ProviderProvisioningOperationSchema,
+  operationGeneration: ProviderProvisioningOperationGenerationSchema,
+  operationDigest: ProviderProvisioningOperationDigestSchema
+};
+var AppliedCompletionSchema = z.object({
+  outcome: z.literal("applied"),
+  ...completionIdentity,
+  providerStatus: ProviderProvisioningProviderStatusSchema.nullable(),
+  binding: ProviderProfileBindingSchema.nullable(),
+  keyCheck: ProviderProvisioningKeyCheckSchema
+}).strict();
+var RejectedCompletionSchema = z.object({
+  outcome: z.literal("rejected"),
+  ...completionIdentity,
+  code: ProviderProvisioningRejectionCodeSchema
+}).strict();
+var ProviderProvisioningCompletionSchema = z.discriminatedUnion("outcome", [AppliedCompletionSchema, RejectedCompletionSchema]).superRefine((completion, ctx) => {
+  if (completion.outcome !== "applied") return;
+  const { operation, providerStatus, binding } = completion;
+  if (operation === "delete") {
+    if (completion.keyCheck.result !== "not_run") {
+      ctx.addIssue({ code: "custom", path: ["keyCheck", "result"], message: "an applied delete must report keyCheck not_run" });
+    }
+    if (providerStatus !== null) {
+      ctx.addIssue({ code: "custom", path: ["providerStatus"], message: "an applied delete reports no provider status" });
+    }
+    if (binding !== null) {
+      ctx.addIssue({ code: "custom", path: ["binding"], message: "an applied delete reports no binding" });
+    }
+    return;
+  }
+  if (providerStatus === null) {
+    ctx.addIssue({ code: "custom", path: ["providerStatus"], message: `an applied ${operation} must report provider status` });
+  }
+  if (binding === null) {
+    ctx.addIssue({ code: "custom", path: ["binding"], message: `an applied ${operation} must report its exact binding` });
+  }
+  if (providerStatus === null || binding === null) return;
+  if (providerStatus.profileRef !== binding.profileRef) {
+    ctx.addIssue({ code: "custom", path: ["binding", "profileRef"], message: "binding profileRef must equal providerStatus profileRef" });
+  }
+  if (providerStatus.modelId !== binding.modelId) {
+    ctx.addIssue({ code: "custom", path: ["binding", "modelId"], message: "binding modelId must equal providerStatus modelId" });
+  }
+  if ((operation === "configure" || operation === "replace_secret") && !providerStatus.secretConfigured) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["providerStatus", "secretConfigured"],
+      message: `an applied ${operation} must report a configured secret`
+    });
+  }
+});
+var PROVIDER_PROVISIONING_DISPOSITIONS = ["recorded", "idempotent", "conflict", "host_terminal"];
+var ProviderProvisioningDispositionSchema = z.enum(PROVIDER_PROVISIONING_DISPOSITIONS);
+var ProviderProvisioningReadbackSchema = z.object({
+  tenantId: z.string().min(1),
+  deviceId: z.string().min(1),
+  requestId: z.uuid(),
+  disposition: ProviderProvisioningDispositionSchema,
+  completion: ProviderProvisioningCompletionSchema,
+  completedAt: z.iso.datetime({ offset: true })
+}).strict().superRefine((readback, ctx) => {
+  if (readback.completion.requestId !== readback.requestId) {
+    ctx.addIssue({ code: "custom", path: ["completion", "requestId"], message: "completion requestId must equal readback requestId" });
+  }
+  if (readback.disposition === "host_terminal" && (readback.completion.outcome !== "rejected" || !PROVIDER_PROVISIONING_HOST_TERMINAL_CODES.includes(readback.completion.code))) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["completion"],
+      message: `a host_terminal readback must carry a rejected completion with one of: ${PROVIDER_PROVISIONING_HOST_TERMINAL_CODES.join(", ")}`
+    });
+  }
+});
 
 // src/version.ts
 var MAILBOX_READ_AHEAD_MAX_SEQS = 4096;
@@ -523,7 +645,8 @@ var CAPABILITY_FLAGS = [
   TERMINAL_PROJECTION_SELECTION_CAPABILITY,
   HOST_MCP_TASK_CONTEXT_CAPABILITY,
   CUSTOM_HARNESS_CAPABILITY,
-  MAILBOX_READ_AHEAD_CAPABILITY
+  MAILBOX_READ_AHEAD_CAPABILITY,
+  PROVIDER_PROVISIONING_CAPABILITY
 ];
 var CONTENT_HASH_RE = /^sha256:[0-9a-f]{64}$/;
 var BlobRefSchema = z.object({
@@ -762,6 +885,7 @@ var TaskOfferPreparedPayloadSchema = TaskOfferForAgentPayloadSchema.omit({
   sessionRef: true
 }).extend({
   preparation: InputPreparationOfferBindingSchema,
+  agentMemory: PreparedAgentMemoryModeSchema,
   egressPolicy: AgentEgressPolicySchema,
   messageEgress: AgentMessageEgressRequirementSchema.optional()
 }).strict();
@@ -909,6 +1033,7 @@ var InputPreparationBlobContextSchema = z.object({ blobRef: BlobRefSchema, conte
   }
 });
 var AgentInputPreparationPayloadSchema = z.object({
+  agentMemory: PreparedAgentMemoryModeSchema,
   requestId: z.uuid(),
   agentRef: AgentRefSchema,
   profileId: InputPreparationProfileIdSchema,
@@ -917,7 +1042,7 @@ var AgentInputPreparationPayloadSchema = z.object({
   selection: InputPreparationSelectionSchema,
   deadlineAt: z.iso.datetime({ offset: true }),
   context: z.union([InputPreparationInlineContextSchema, InputPreparationBlobContextSchema]),
-  requiredToolsets: RequiredToolsetsSchema,
+  requiredToolsets: z.array(ToolsetIdSchema).max(16).superRefine((ids, ctx) => rejectDuplicateToolsets(ids, ctx, "required")),
   permissionMode: InputPreparationPermissionModeSchema,
   /**
    * The Host's accounting ruling for this preparation, carried verbatim onto
@@ -1114,6 +1239,7 @@ var MESSAGE_PAYLOAD_SCHEMAS = {
   "agent.content.receipt": AgentContentReceiptPayloadSchema,
   "agent.home.projection": AgentHomeProjectionPayloadSchema,
   "agent.input.preparation": AgentInputPreparationPayloadSchema,
+  "provider.provisioning.available": ProviderProvisioningAvailablePayloadSchema,
   "task.approve": TaskApprovePayloadSchema,
   "task.reject": TaskRejectPayloadSchema,
   "task.cancel": TaskCancelPayloadSchema,
@@ -1143,6 +1269,7 @@ var SERVER_TO_DAEMON_TYPES = [
   "agent.content.read",
   "agent.home.projection",
   "agent.input.preparation",
+  "provider.provisioning.available",
   "task.approve",
   "task.reject",
   "task.cancel",
@@ -1298,6 +1425,7 @@ var EnvelopeSchema = z.discriminatedUnion("type", [
   envelopeShape("agent.content.read", OPTIONAL_TASK_ID, REQUIRED_SEQ),
   envelopeShape("agent.home.projection", FORBIDDEN_TASK_ID, REQUIRED_SEQ),
   envelopeShape("agent.input.preparation", FORBIDDEN_TASK_ID, REQUIRED_SEQ),
+  envelopeShape("provider.provisioning.available", FORBIDDEN_TASK_ID, REQUIRED_SEQ),
   envelopeShape("task.approve", REQUIRED_TASK_ID, REQUIRED_SEQ),
   envelopeShape("task.reject", REQUIRED_TASK_ID, REQUIRED_SEQ),
   envelopeShape("task.cancel", REQUIRED_TASK_ID, REQUIRED_SEQ),
@@ -1628,6 +1756,6 @@ function byokBlobContentPath(blobId) {
   return `/byok/blobs/${blobId}/content`;
 }
 
-export { AGENT_CONTENT_ARTIFACT_READ_CAPABILITY, AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY, AGENT_CONTENT_WORKSPACE_READ_CAPABILITY, AGENT_EGRESS_FRESH_SESSION_CAPABILITY, AGENT_EGRESS_POLICY_CAPABILITY, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY, AGENT_EVENT_SPILL_UNSTORED_REASON_MAX_LENGTH, AGENT_HOME_PROJECTION_CAPABILITY, AGENT_HOME_PROJECTION_MAX_BYTES, AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM, AGENT_INPUT_PREPARATION_CAPABILITY, AGENT_MEMORY_PROJECTION_CAPABILITY, AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE, AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES, AGENT_MESSAGE_EGRESS_CAPABILITY, AGENT_MESSAGE_MAX_BYTES, AGENT_REF_MAX_BYTES, AgentContentActorKindSchema, AgentContentActorSchema, AgentContentDecodeAsSchema, AgentContentMimeTypeSchema, AgentContentReadDecisionSchema, AgentContentReadDenialReasonSchema, AgentContentReadPayloadSchema, AgentContentReadSurfaceSchema, AgentContentReceiptPayloadSchema, AgentEgressAckPayloadSchema, AgentEgressActivityPolicySchema, AgentEgressContentHashSchema, AgentEgressDropReasonSchema, AgentEgressLaneSchema, AgentEgressPolicyRevisionSchema, AgentEgressPolicySchema, AgentEgressReliablePayloadSchema, AgentEventOrUnknownSchema, AgentEventSchema, AgentEventSpillSchema, AgentHomeProjectionAgentRefSchema, AgentHomeProjectionCompletionRequestSchema, AgentHomeProjectionHashSchema, AgentHomeProjectionOutcomeSchema, AgentHomeProjectionPayloadSchema, AgentHomeProjectionProfileRevisionSchema, AgentHomeProjectionReadbackSchema, AgentHomeProjectionStatusSchema, AgentHomeProjectionValueSchema, AgentInputPreparationPayloadSchema, AgentMemoryProjectionCommitRequestSchema, AgentMemoryProjectionCommitResponseSchema, AgentMemoryProjectionEraseResultSchema, AgentMemoryProjectionGrantRefSchema, AgentMemoryProjectionMeteringReceiptSchema, AgentMemoryProjectionMutationSchema, AgentMemoryProjectionReceiptSchema, AgentMemoryProjectionSessionRefSchema, AgentMemoryProjectionSnapshotSchema, AgentMemoryProjectionSourceSeqSchema, AgentMemoryProjectionWriterEpochSchema, AgentMessageContentTypeSchema, AgentMessageContractSchema, AgentMessageDestinationBindingSchema, AgentMessageDispositionPayloadSchema, AgentMessageEgressRequirementSchema, AgentMessageFreshnessCursorSchema, AgentMessagePublishPayloadSchema, AgentMessageServerContextSchema, AgentRefSchema, AgentReliableQuotaPolicySchema, BYOK_ACTIVITY_PATH, BYOK_AGENT_HOME_PROJECTIONS_PATH, BYOK_AGENT_HOME_PROJECTION_COMPLETION_ROUTE, BYOK_AGENT_MEMORY_PROJECTIONS_PATH, BYOK_BLOBS_PATH, BYOK_BLOB_CONTENT_ROUTE, BYOK_BLOB_FINALIZE_ROUTE, BYOK_BLOB_URL_ROUTE, BYOK_BOARD_CLAIM_ROUTE, BYOK_BOARD_PATH, BYOK_BOARD_STATUS_ROUTE, BYOK_BOARD_STREAM_PATH, BYOK_BOARD_UNCLAIM_ROUTE, BYOK_CAPABILITIES_PATH, BYOK_CHALLENGE_PATH, BYOK_EVENTS_PATH, BYOK_INPUT_PREPARATIONS_PATH, BYOK_INPUT_PREPARATION_COMPLETION_ROUTE, BYOK_INPUT_PREPARATION_STATUS_ROUTE, BYOK_MESSAGES_PATH, BYOK_PAIR_PATH, BYOK_PRESENCE_PATH, BYOK_RECORDS_PATH, BYOK_RECORD_ROUTE, BYOK_SKILL_PACKS_PATH, BYOK_SKILL_PACK_FILE_ROUTE, BYOK_TOKEN_PATH, BlobDownloadUrlResponseSchema, BlobRefSchema, CAPABILITY_FLAGS, CONFIGURED_TOOLSETS_MAX_ITEMS, CONTENT_HASH_RE, CUSTOM_HARNESS_CAPABILITY, ChallengeRequestSchema, ChallengeResponseSchema, ConfiguredToolsetsSchema, ConnAckPayloadSchema, ConnHelloPayloadSchema, ContentReadPolicySchema, CreateBlobRequestSchema, CreateBlobResponseSchema, DAEMON_TO_SERVER_TYPES, DispatchSelectionSchema, EnvelopeParseError, EnvelopeSchema, EnvelopeValidationError, EventsPollQuerySchema, EventsPollResponseSchema, HOST_MCP_TASK_CONTEXT_CAPABILITY, HarnessIdSchema, HarnessInfoSchema, HarnessInventorySchema, INPUT_PREPARATION_WIRE_VERSION, InputPreparationAccountingPolicyRefSchema, InputPreparationArtifactSummarySchema, InputPreparationBindingSchema, InputPreparationCompletionRequestSchema, InputPreparationContentHashSchema, InputPreparationContextDocumentSchema, InputPreparationContextFileSchema, InputPreparationCounterEvidenceSchema, InputPreparationCounterProviderEvidenceSchema, InputPreparationCounterTargetSchema, InputPreparationDocsPathsSchema, InputPreparationHostCanonicalAssistantMessageSchema, InputPreparationMessageSchema, InputPreparationModelCostSchema, InputPreparationModelSchema, InputPreparationOfferBindingSchema, InputPreparationOptionsSchema, InputPreparationPermissionModeSchema, InputPreparationPolicyRevisionSchema, InputPreparationProfileIdSchema, InputPreparationProjectionSchema, InputPreparationPromptSnapshotSchema, InputPreparationReadbackSchema, InputPreparationReadinessReasonSchema, InputPreparationReceiptSummarySchema, InputPreparationReferenceSchema, InputPreparationRejectionReasonSchema, InputPreparationResidualKeySchema, InputPreparationResidualValueClassSchema, InputPreparationRuntimeIdentitySchema, InputPreparationSelectionSchema, InputPreparationSkillSchema, InputPreparationSourceSchema, InputPreparationStateSchema, InputPreparationStatusQuerySchema, InputPreparationStatusSchema, InputPreparationToolImplementationKindSchema, InputPreparationUserMessageSchema, KNOWN_AGENT_EVENT_TYPES, MAILBOX_READ_AHEAD_CAPABILITY, MAILBOX_READ_AHEAD_MAX_SEQS, MAX_MESSAGES_PER_BATCH, MESSAGE_PAYLOAD_SCHEMAS, MESSAGE_TYPES, MessagesSendRequestSchema, MessagesSendResponseSchema, PAIR_RESPONSE_TENANT_ID_MAX_LENGTH, PERMISSION_MODES, PROTOCOL_VERSION, PROVIDER_MODEL_CAPABILITIES, PROVIDER_PROFILE_BINDING_CAPABILITY, PairRequestSchema, PairResponseSchema, PairResponseTenantIdSchema, PermissionPolicySchema, PresencePublishRequestSchema, ProtocolError, ProtocolVersionNumberSchema, ProviderModelCapabilitySchema, ProviderProfileBindingSchema, ProviderProfileHashSchema, ProviderProfileRefSchema, ProviderProfileRevisionSchema, RESULT_DOCUMENT_MAX_BYTES, RequiredToolsetsSchema, RuntimeCapabilitiesSchema, RuntimeIdSchema, RuntimeInfoSchema, SERVER_TO_DAEMON_TYPES, STRICT_AGENT_ONLY_CAPABILITY, TASK_OFFER_TYPES, TASK_STATES, TASK_TRANSITIONS, TERMINAL_INFERENCE_USAGE_CLIENT_VERSION_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_MAX_DURATION_MS, TERMINAL_INFERENCE_USAGE_MAX_TOKENS, TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_PROVIDER_MAX_LENGTH, TERMINAL_PROJECTION_SELECTION_CAPABILITY, TaskApprovalResolvedPayloadSchema, TaskApprovePayloadSchema, TaskArtifactPayloadSchema, TaskAwaitApprovalPayloadSchema, TaskCancelPayloadSchema, TaskCancelledPayloadSchema, TaskClaimPayloadSchema, TaskCompletePayloadSchema, TaskDeclinePayloadSchema, TaskFailPayloadSchema, TaskOfferForAgentPayloadSchema, TaskOfferForAgentWithEgressFreshPayloadSchema, TaskOfferForAgentWithEgressPayloadSchema, TaskOfferPayloadSchema, TaskOfferPreparedPayloadSchema, TaskOfferWithToolsetsPayloadSchema, TaskProgressPayloadSchema, TaskRejectPayloadSchema, TaskStartedPayloadSchema, TaskSteerPayloadSchema, TerminalInferenceUsageSchema, TerminalPreparedObservationSchema, TerminalProjectionContractSchema, TerminalProjectionSelectionSchema, TokenRequestSchema, TokenResponseSchema, ToolsetIdSchema, UnknownAgentEventSchema, UnknownMessageTypeError, agentMemoryProjectionBase64UrlByteLength, byokAgentHomeProjectionCompletionPath, byokBlobContentPath, byokBlobFinalizePath, byokBlobUrlPath, byokInputPreparationCompletionPath, byokInputPreparationStatusPath, byokRecordPath, byokSkillPackFilePath, canTransition, checkResultDocument, createEnvelope, decodeEnvelope, encodeEnvelope, isKnownAgentEvent, isServerToDaemonType, isTaskOfferType, parseMessage, partitionAgentEvents };
+export { AGENT_CONTENT_ARTIFACT_READ_CAPABILITY, AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY, AGENT_CONTENT_WORKSPACE_READ_CAPABILITY, AGENT_EGRESS_FRESH_SESSION_CAPABILITY, AGENT_EGRESS_POLICY_CAPABILITY, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY, AGENT_EVENT_SPILL_UNSTORED_REASON_MAX_LENGTH, AGENT_HOME_PROJECTION_CAPABILITY, AGENT_HOME_PROJECTION_MAX_BYTES, AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM, AGENT_INPUT_PREPARATION_CAPABILITY, AGENT_MEMORY_PROJECTION_CAPABILITY, AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE, AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES, AGENT_MESSAGE_EGRESS_CAPABILITY, AGENT_MESSAGE_MAX_BYTES, AGENT_REF_MAX_BYTES, AgentContentActorKindSchema, AgentContentActorSchema, AgentContentDecodeAsSchema, AgentContentMimeTypeSchema, AgentContentReadDecisionSchema, AgentContentReadDenialReasonSchema, AgentContentReadPayloadSchema, AgentContentReadSurfaceSchema, AgentContentReceiptPayloadSchema, AgentEgressAckPayloadSchema, AgentEgressActivityPolicySchema, AgentEgressContentHashSchema, AgentEgressDropReasonSchema, AgentEgressLaneSchema, AgentEgressPolicyRevisionSchema, AgentEgressPolicySchema, AgentEgressReliablePayloadSchema, AgentEventOrUnknownSchema, AgentEventSchema, AgentEventSpillSchema, AgentHomeProjectionAgentRefSchema, AgentHomeProjectionCompletionRequestSchema, AgentHomeProjectionHashSchema, AgentHomeProjectionOutcomeSchema, AgentHomeProjectionPayloadSchema, AgentHomeProjectionProfileRevisionSchema, AgentHomeProjectionReadbackSchema, AgentHomeProjectionStatusSchema, AgentHomeProjectionValueSchema, AgentInputPreparationPayloadSchema, AgentMemoryProjectionCommitRequestSchema, AgentMemoryProjectionCommitResponseSchema, AgentMemoryProjectionEraseResultSchema, AgentMemoryProjectionGrantRefSchema, AgentMemoryProjectionMeteringReceiptSchema, AgentMemoryProjectionMutationSchema, AgentMemoryProjectionReceiptSchema, AgentMemoryProjectionSessionRefSchema, AgentMemoryProjectionSnapshotSchema, AgentMemoryProjectionSourceSeqSchema, AgentMemoryProjectionWriterEpochSchema, AgentMessageContentTypeSchema, AgentMessageContractSchema, AgentMessageDestinationBindingSchema, AgentMessageDispositionPayloadSchema, AgentMessageEgressRequirementSchema, AgentMessageFreshnessCursorSchema, AgentMessagePublishPayloadSchema, AgentMessageServerContextSchema, AgentRefSchema, AgentReliableQuotaPolicySchema, BYOK_ACTIVITY_PATH, BYOK_AGENT_HOME_PROJECTIONS_PATH, BYOK_AGENT_HOME_PROJECTION_COMPLETION_ROUTE, BYOK_AGENT_MEMORY_PROJECTIONS_PATH, BYOK_BLOBS_PATH, BYOK_BLOB_CONTENT_ROUTE, BYOK_BLOB_FINALIZE_ROUTE, BYOK_BLOB_URL_ROUTE, BYOK_BOARD_CLAIM_ROUTE, BYOK_BOARD_PATH, BYOK_BOARD_STATUS_ROUTE, BYOK_BOARD_STREAM_PATH, BYOK_BOARD_UNCLAIM_ROUTE, BYOK_CAPABILITIES_PATH, BYOK_CHALLENGE_PATH, BYOK_EVENTS_PATH, BYOK_INPUT_PREPARATIONS_PATH, BYOK_INPUT_PREPARATION_COMPLETION_ROUTE, BYOK_INPUT_PREPARATION_STATUS_ROUTE, BYOK_MESSAGES_PATH, BYOK_PAIR_PATH, BYOK_PRESENCE_PATH, BYOK_RECORDS_PATH, BYOK_RECORD_ROUTE, BYOK_SKILL_PACKS_PATH, BYOK_SKILL_PACK_FILE_ROUTE, BYOK_TOKEN_PATH, BlobDownloadUrlResponseSchema, BlobRefSchema, CAPABILITY_FLAGS, CONFIGURED_TOOLSETS_MAX_ITEMS, CONTENT_HASH_RE, CUSTOM_HARNESS_CAPABILITY, ChallengeRequestSchema, ChallengeResponseSchema, ConfiguredToolsetsSchema, ConnAckPayloadSchema, ConnHelloPayloadSchema, ContentReadPolicySchema, CreateBlobRequestSchema, CreateBlobResponseSchema, DAEMON_TO_SERVER_TYPES, DispatchSelectionSchema, EnvelopeParseError, EnvelopeSchema, EnvelopeValidationError, EventsPollQuerySchema, EventsPollResponseSchema, HOST_MCP_TASK_CONTEXT_CAPABILITY, HarnessIdSchema, HarnessInfoSchema, HarnessInventorySchema, INPUT_PREPARATION_WIRE_VERSION, InputPreparationAccountingPolicyRefSchema, InputPreparationArtifactSummarySchema, InputPreparationBindingSchema, InputPreparationCompletionRequestSchema, InputPreparationContentHashSchema, InputPreparationContextDocumentSchema, InputPreparationCounterEvidenceSchema, InputPreparationCounterProviderEvidenceSchema, InputPreparationCounterTargetSchema, InputPreparationHostCanonicalAssistantMessageSchema, InputPreparationMessageSchema, InputPreparationModelCostSchema, InputPreparationModelSchema, InputPreparationOfferBindingSchema, InputPreparationOptionsSchema, InputPreparationPermissionModeSchema, InputPreparationPolicyRevisionSchema, InputPreparationProfileIdSchema, InputPreparationProjectionSchema, InputPreparationPromptSnapshotSchema, InputPreparationReadbackSchema, InputPreparationReadinessReasonSchema, InputPreparationReceiptSummarySchema, InputPreparationReferenceSchema, InputPreparationRejectionReasonSchema, InputPreparationResidualKeySchema, InputPreparationResidualValueClassSchema, InputPreparationRuntimeIdentitySchema, InputPreparationSelectionSchema, InputPreparationSourceSchema, InputPreparationStateSchema, InputPreparationStatusQuerySchema, InputPreparationStatusSchema, InputPreparationToolImplementationKindSchema, InputPreparationUserMessageSchema, KNOWN_AGENT_EVENT_TYPES, MAILBOX_READ_AHEAD_CAPABILITY, MAILBOX_READ_AHEAD_MAX_SEQS, MAX_MESSAGES_PER_BATCH, MESSAGE_PAYLOAD_SCHEMAS, MESSAGE_TYPES, MessagesSendRequestSchema, MessagesSendResponseSchema, PAIR_RESPONSE_TENANT_ID_MAX_LENGTH, PERMISSION_MODES, PROTOCOL_VERSION, PROVIDER_MODEL_CAPABILITIES, PROVIDER_PROFILE_BINDING_CAPABILITY, PROVIDER_PROVISIONING_CAPABILITY, PROVIDER_PROVISIONING_DISPOSITIONS, PROVIDER_PROVISIONING_HOST_TERMINAL_CODES, PROVIDER_PROVISIONING_KEY_CHECK_RESULTS, PROVIDER_PROVISIONING_OPERATIONS, PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM, PROVIDER_PROVISIONING_REJECTION_CODES, PROVIDER_SECRET_SEALING_KEY_REGISTER_OPERATION, PairRequestSchema, PairResponseSchema, PairResponseTenantIdSchema, PermissionPolicySchema, PreparedAgentMemoryModeSchema, PresencePublishRequestSchema, ProtocolError, ProtocolVersionNumberSchema, ProviderModelCapabilitySchema, ProviderProfileBindingSchema, ProviderProfileHashSchema, ProviderProfileRefSchema, ProviderProfileRevisionSchema, ProviderProvisioningAvailablePayloadSchema, ProviderProvisioningCompletionSchema, ProviderProvisioningDispositionSchema, ProviderProvisioningKeyCheckResultSchema, ProviderProvisioningKeyCheckSchema, ProviderProvisioningOperationDigestSchema, ProviderProvisioningOperationGenerationSchema, ProviderProvisioningOperationSchema, ProviderProvisioningProviderStatusSchema, ProviderProvisioningReadbackSchema, ProviderProvisioningRejectionCodeSchema, RESULT_DOCUMENT_MAX_BYTES, RequiredToolsetsSchema, RuntimeCapabilitiesSchema, RuntimeIdSchema, RuntimeInfoSchema, SERVER_TO_DAEMON_TYPES, STRICT_AGENT_ONLY_CAPABILITY, TASK_OFFER_TYPES, TASK_STATES, TASK_TRANSITIONS, TERMINAL_INFERENCE_USAGE_CLIENT_VERSION_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_MAX_DURATION_MS, TERMINAL_INFERENCE_USAGE_MAX_TOKENS, TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_PROVIDER_MAX_LENGTH, TERMINAL_PROJECTION_SELECTION_CAPABILITY, TaskApprovalResolvedPayloadSchema, TaskApprovePayloadSchema, TaskArtifactPayloadSchema, TaskAwaitApprovalPayloadSchema, TaskCancelPayloadSchema, TaskCancelledPayloadSchema, TaskClaimPayloadSchema, TaskCompletePayloadSchema, TaskDeclinePayloadSchema, TaskFailPayloadSchema, TaskOfferForAgentPayloadSchema, TaskOfferForAgentWithEgressFreshPayloadSchema, TaskOfferForAgentWithEgressPayloadSchema, TaskOfferPayloadSchema, TaskOfferPreparedPayloadSchema, TaskOfferWithToolsetsPayloadSchema, TaskProgressPayloadSchema, TaskRejectPayloadSchema, TaskStartedPayloadSchema, TaskSteerPayloadSchema, TerminalInferenceUsageSchema, TerminalPreparedObservationSchema, TerminalProjectionContractSchema, TerminalProjectionSelectionSchema, TokenRequestSchema, TokenResponseSchema, ToolsetIdSchema, UnknownAgentEventSchema, UnknownMessageTypeError, agentMemoryProjectionBase64UrlByteLength, byokAgentHomeProjectionCompletionPath, byokBlobContentPath, byokBlobFinalizePath, byokBlobUrlPath, byokInputPreparationCompletionPath, byokInputPreparationStatusPath, byokRecordPath, byokSkillPackFilePath, canTransition, checkResultDocument, createEnvelope, decodeEnvelope, encodeEnvelope, isKnownAgentEvent, isServerToDaemonType, isTaskOfferType, parseMessage, partitionAgentEvents };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map