@byok-sdk/protocol 0.22.0 → 0.23.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/codec.d.ts CHANGED
@@ -78,6 +78,10 @@ interface EnvelopeShapeOptions {
78
78
  taskId?: never;
79
79
  seq: number;
80
80
  };
81
+ 'provider.provisioning.available': {
82
+ taskId?: never;
83
+ seq: number;
84
+ };
81
85
  'agent.content.receipt': {
82
86
  taskId?: string;
83
87
  seq?: number;
@@ -601,6 +601,11 @@ export declare const EnvelopeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
601
601
  requestDigest: z.ZodString;
602
602
  artifactDigest: z.ZodOptional<z.ZodString>;
603
603
  }, z.core.$strict>;
604
+ agentMemory: z.ZodEnum<{
605
+ none: "none";
606
+ read: "read";
607
+ "read-write": "read-write";
608
+ }>;
604
609
  egressPolicy: z.ZodObject<{
605
610
  policyRevision: z.ZodString;
606
611
  activity: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -759,6 +764,11 @@ export declare const EnvelopeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
759
764
  session_ref: z.ZodOptional<z.ZodString>;
760
765
  seq: z.ZodNumber;
761
766
  payload: z.ZodObject<{
767
+ agentMemory: z.ZodEnum<{
768
+ none: "none";
769
+ read: "read";
770
+ "read-write": "read-write";
771
+ }>;
762
772
  requestId: z.ZodUUID;
763
773
  agentRef: z.ZodObject<{
764
774
  agentId: z.ZodString;
@@ -876,6 +886,17 @@ export declare const EnvelopeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
876
886
  ruledResidualKeys: z.ZodArray<z.ZodString>;
877
887
  }, z.core.$strict>>;
878
888
  }, z.core.$strict>;
889
+ }, z.core.$strip>, z.ZodObject<{
890
+ v: z.ZodNumber;
891
+ id: z.ZodUUID;
892
+ ts: z.ZodISODateTime;
893
+ type: z.ZodLiteral<"provider.provisioning.available">;
894
+ task_id: z.ZodOptional<z.ZodNever>;
895
+ session_ref: z.ZodOptional<z.ZodString>;
896
+ seq: z.ZodNumber;
897
+ payload: z.ZodObject<{
898
+ requestId: z.ZodUUID;
899
+ }, z.core.$strict>;
879
900
  }, z.core.$strip>, z.ZodObject<{
880
901
  v: z.ZodNumber;
881
902
  id: z.ZodUUID;
@@ -695,6 +695,11 @@ export declare const EventsPollResponseSchema: z.ZodObject<{
695
695
  requestDigest: z.ZodString;
696
696
  artifactDigest: z.ZodOptional<z.ZodString>;
697
697
  }, z.core.$strict>;
698
+ agentMemory: z.ZodEnum<{
699
+ none: "none";
700
+ read: "read";
701
+ "read-write": "read-write";
702
+ }>;
698
703
  egressPolicy: z.ZodObject<{
699
704
  policyRevision: z.ZodString;
700
705
  activity: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -853,6 +858,11 @@ export declare const EventsPollResponseSchema: z.ZodObject<{
853
858
  session_ref: z.ZodOptional<z.ZodString>;
854
859
  seq: z.ZodNumber;
855
860
  payload: z.ZodObject<{
861
+ agentMemory: z.ZodEnum<{
862
+ none: "none";
863
+ read: "read";
864
+ "read-write": "read-write";
865
+ }>;
856
866
  requestId: z.ZodUUID;
857
867
  agentRef: z.ZodObject<{
858
868
  agentId: z.ZodString;
@@ -970,6 +980,17 @@ export declare const EventsPollResponseSchema: z.ZodObject<{
970
980
  ruledResidualKeys: z.ZodArray<z.ZodString>;
971
981
  }, z.core.$strict>>;
972
982
  }, z.core.$strict>;
983
+ }, z.core.$strip>, z.ZodObject<{
984
+ v: z.ZodNumber;
985
+ id: z.ZodUUID;
986
+ ts: z.ZodISODateTime;
987
+ type: z.ZodLiteral<"provider.provisioning.available">;
988
+ task_id: z.ZodOptional<z.ZodNever>;
989
+ session_ref: z.ZodOptional<z.ZodString>;
990
+ seq: z.ZodNumber;
991
+ payload: z.ZodObject<{
992
+ requestId: z.ZodUUID;
993
+ }, z.core.$strict>;
973
994
  }, z.core.$strip>, z.ZodObject<{
974
995
  v: z.ZodNumber;
975
996
  id: z.ZodUUID;
@@ -2073,6 +2094,11 @@ export declare const MessagesSendRequestSchema: z.ZodObject<{
2073
2094
  requestDigest: z.ZodString;
2074
2095
  artifactDigest: z.ZodOptional<z.ZodString>;
2075
2096
  }, z.core.$strict>;
2097
+ agentMemory: z.ZodEnum<{
2098
+ none: "none";
2099
+ read: "read";
2100
+ "read-write": "read-write";
2101
+ }>;
2076
2102
  egressPolicy: z.ZodObject<{
2077
2103
  policyRevision: z.ZodString;
2078
2104
  activity: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -2231,6 +2257,11 @@ export declare const MessagesSendRequestSchema: z.ZodObject<{
2231
2257
  session_ref: z.ZodOptional<z.ZodString>;
2232
2258
  seq: z.ZodNumber;
2233
2259
  payload: z.ZodObject<{
2260
+ agentMemory: z.ZodEnum<{
2261
+ none: "none";
2262
+ read: "read";
2263
+ "read-write": "read-write";
2264
+ }>;
2234
2265
  requestId: z.ZodUUID;
2235
2266
  agentRef: z.ZodObject<{
2236
2267
  agentId: z.ZodString;
@@ -2348,6 +2379,17 @@ export declare const MessagesSendRequestSchema: z.ZodObject<{
2348
2379
  ruledResidualKeys: z.ZodArray<z.ZodString>;
2349
2380
  }, z.core.$strict>>;
2350
2381
  }, z.core.$strict>;
2382
+ }, z.core.$strip>, z.ZodObject<{
2383
+ v: z.ZodNumber;
2384
+ id: z.ZodUUID;
2385
+ ts: z.ZodISODateTime;
2386
+ type: z.ZodLiteral<"provider.provisioning.available">;
2387
+ task_id: z.ZodOptional<z.ZodNever>;
2388
+ session_ref: z.ZodOptional<z.ZodString>;
2389
+ seq: z.ZodNumber;
2390
+ payload: z.ZodObject<{
2391
+ requestId: z.ZodUUID;
2392
+ }, z.core.$strict>;
2351
2393
  }, z.core.$strip>, z.ZodObject<{
2352
2394
  v: z.ZodNumber;
2353
2395
  id: z.ZodUUID;
@@ -2928,6 +2970,11 @@ export declare const InputPreparationCompletionRequestSchema: z.ZodDiscriminated
2928
2970
  reserved: "reserved";
2929
2971
  }>;
2930
2972
  binding: z.ZodObject<{
2973
+ agentMemory: z.ZodEnum<{
2974
+ none: "none";
2975
+ read: "read";
2976
+ "read-write": "read-write";
2977
+ }>;
2931
2978
  scopeId: z.ZodString;
2932
2979
  deviceId: z.ZodString;
2933
2980
  agentRef: z.ZodString;
@@ -3124,6 +3171,11 @@ export declare const InputPreparationReadbackSchema: z.ZodObject<{
3124
3171
  reserved: "reserved";
3125
3172
  }>;
3126
3173
  binding: z.ZodObject<{
3174
+ agentMemory: z.ZodEnum<{
3175
+ none: "none";
3176
+ read: "read";
3177
+ "read-write": "read-write";
3178
+ }>;
3127
3179
  scopeId: z.ZodString;
3128
3180
  deviceId: z.ZodString;
3129
3181
  agentRef: z.ZodString;
package/dist/index.d.ts CHANGED
@@ -7,6 +7,8 @@ export { PermissionPolicySchema, PERMISSION_MODES } from './permission';
7
7
  export type { PermissionPolicy, PermissionMode } from './permission';
8
8
  export { PROVIDER_PROFILE_BINDING_CAPABILITY, PROVIDER_MODEL_CAPABILITIES, ProviderProfileRefSchema, ProviderProfileRevisionSchema, ProviderProfileHashSchema, ProviderModelCapabilitySchema, ProviderProfileBindingSchema, } from './provider-profile-binding';
9
9
  export type { ProviderProfileRef, ProviderProfileRevision, ProviderProfileHash, ProviderModelCapability, ProviderProfileBinding, } from './provider-profile-binding';
10
+ export { PROVIDER_PROVISIONING_CAPABILITY, PROVIDER_SECRET_SEALING_KEY_REGISTER_OPERATION, PROVIDER_PROVISIONING_OPERATIONS, PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM, PROVIDER_PROVISIONING_REJECTION_CODES, PROVIDER_PROVISIONING_HOST_TERMINAL_CODES, PROVIDER_PROVISIONING_DISPOSITIONS, PROVIDER_PROVISIONING_KEY_CHECK_RESULTS, ProviderProvisioningAvailablePayloadSchema, ProviderProvisioningKeyCheckResultSchema, ProviderProvisioningKeyCheckSchema, ProviderProvisioningOperationSchema, ProviderProvisioningOperationGenerationSchema, ProviderProvisioningOperationDigestSchema, ProviderProvisioningRejectionCodeSchema, ProviderProvisioningProviderStatusSchema, ProviderProvisioningCompletionSchema, ProviderProvisioningDispositionSchema, ProviderProvisioningReadbackSchema, } from './provider-provisioning';
11
+ export type { ProviderProvisioningAvailablePayload, ProviderProvisioningOperation, ProviderProvisioningOperationGeneration, ProviderProvisioningOperationDigest, ProviderProvisioningRejectionCode, ProviderProvisioningProviderStatus, ProviderProvisioningCompletion, ProviderProvisioningDisposition, ProviderProvisioningReadback, ProviderProvisioningKeyCheckResult, ProviderProvisioningKeyCheck, } from './provider-provisioning';
10
12
  export { AgentEventSchema, AgentEventSpillSchema, AGENT_EVENT_SPILL_UNSTORED_REASON_MAX_LENGTH, UnknownAgentEventSchema, AgentEventOrUnknownSchema, KNOWN_AGENT_EVENT_TYPES, isKnownAgentEvent, partitionAgentEvents, } from './agent-event';
11
13
  export type { AgentEvent, AgentEventSpill, UnknownAgentEvent, AgentEventOrUnknown } from './agent-event';
12
14
  export { AgentEgressPolicySchema, AgentEgressActivityPolicySchema, AgentReliableQuotaPolicySchema, ContentReadPolicySchema, AgentEgressLaneSchema, AgentEgressDropReasonSchema, AgentContentReadSurfaceSchema, AgentContentActorKindSchema, AgentContentActorSchema, AgentContentDecodeAsSchema, AgentContentMimeTypeSchema, AgentContentReadDecisionSchema, AgentContentReadDenialReasonSchema, AgentEgressContentHashSchema, AgentEgressPolicyRevisionSchema, AgentMessageContractSchema, AgentMessageContentTypeSchema, AgentMessageDestinationBindingSchema, AgentMessageFreshnessCursorSchema, AgentMessageServerContextSchema, AgentMessageEgressRequirementSchema, AGENT_MESSAGE_MAX_BYTES, AGENT_MESSAGE_EGRESS_CAPABILITY, AGENT_EGRESS_POLICY_CAPABILITY, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY, AGENT_EGRESS_FRESH_SESSION_CAPABILITY, AGENT_CONTENT_WORKSPACE_READ_CAPABILITY, AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY, AGENT_CONTENT_ARTIFACT_READ_CAPABILITY, } from './agent-egress';
@@ -34,3 +36,4 @@ export type { PairRequest, PairResponse, ChallengeRequest, ChallengeResponse, To
34
36
  export type { TaskOfferType } from './messages';
35
37
  export type { HarnessId, HarnessInfo } from './messages';
36
38
  export { CUSTOM_HARNESS_CAPABILITY } from './version';
39
+ export { PreparedAgentMemoryModeSchema, type PreparedAgentMemoryMode } from './input-preparation';
package/dist/index.js CHANGED
@@ -123,7 +123,7 @@ var PermissionPolicySchema = z.object({
123
123
  }).strict();
124
124
 
125
125
  // src/input-preparation.ts
126
- var INPUT_PREPARATION_WIRE_VERSION = 7;
126
+ var INPUT_PREPARATION_WIRE_VERSION = 8;
127
127
  var AGENT_INPUT_PREPARATION_CAPABILITY = `agent-input-preparation-v${INPUT_PREPARATION_WIRE_VERSION}`;
128
128
  var InputPreparationContentHashSchema = AgentEgressContentHashSchema;
129
129
  var OPAQUE_ID = z.string().min(1).max(512).regex(/^[^\u0000-\u001f\u007f]+$/u, "control identifiers must not contain control characters");
@@ -131,6 +131,7 @@ var OPAQUE_TEXT = z.string().min(1).max(2048).regex(/^[^\u0000-\u001f\u007f]+$/u
131
131
  var InputPreparationPolicyRevisionSchema = OPAQUE_ID;
132
132
  var InputPreparationProfileIdSchema = OPAQUE_ID;
133
133
  var InputPreparationPermissionModeSchema = z.enum(PERMISSION_MODES);
134
+ var PreparedAgentMemoryModeSchema = z.enum(["none", "read", "read-write"]);
134
135
  var InputPreparationSourceSchema = z.object({ revision: OPAQUE_ID, digest: OPAQUE_ID }).strict();
135
136
  var InputPreparationModelCostSchema = z.object({
136
137
  input: z.number().finite(),
@@ -333,6 +334,7 @@ var InputPreparationArtifactSummarySchema = z.object({
333
334
  toolImplementationKinds: z.record(OPAQUE_ID, InputPreparationToolImplementationKindSchema)
334
335
  }).strict();
335
336
  var InputPreparationBindingSchema = z.object({
337
+ agentMemory: PreparedAgentMemoryModeSchema,
336
338
  scopeId: OPAQUE_ID,
337
339
  deviceId: OPAQUE_ID,
338
340
  agentRef: OPAQUE_ID,
@@ -474,6 +476,144 @@ var ProviderProfileBindingSchema = z.object({
474
476
  ctx.addIssue({ code: "custom", path: ["requiredCapabilities"], message: "duplicate provider capability" });
475
477
  }
476
478
  });
479
+ var PROVIDER_PROVISIONING_CAPABILITY = "provider-provisioning.v1";
480
+ var PROVIDER_SECRET_SEALING_KEY_REGISTER_OPERATION = "provider-secret-sealing-key.register";
481
+ var ProviderProvisioningAvailablePayloadSchema = z.object({
482
+ requestId: z.uuid()
483
+ }).strict();
484
+ var PROVIDER_PROVISIONING_OPERATIONS = ["configure", "update_model", "replace_secret", "delete"];
485
+ var ProviderProvisioningOperationSchema = z.enum(PROVIDER_PROVISIONING_OPERATIONS);
486
+ var PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM = "9223372036854775807";
487
+ var ProviderProvisioningOperationGenerationSchema = z.string().regex(/^[1-9][0-9]{0,18}$/u, "operationGeneration must be a canonical positive decimal string").refine(
488
+ (value) => value.length < PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM.length || value <= PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM,
489
+ `operationGeneration must not exceed ${PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM}`
490
+ );
491
+ var ProviderProvisioningOperationDigestSchema = z.string().regex(/^sha256:[0-9a-f]{64}$/u, "operationDigest must be lowercase sha256");
492
+ var PROVIDER_PROVISIONING_REJECTION_CODES = [
493
+ "request_invalid",
494
+ "request_conflict",
495
+ "request_expired",
496
+ "request_not_yet_valid",
497
+ "request_window_invalid",
498
+ "sealing_key_rotated",
499
+ "enrollment_mismatch",
500
+ "agent_not_placed",
501
+ "config_digest_mismatch",
502
+ "operation_generation_stale",
503
+ "profile_changed",
504
+ "profile_not_found",
505
+ "credential_scope_mismatch",
506
+ "provider_kind_unsupported",
507
+ "pi_model_invalid",
508
+ "capabilities_invalid",
509
+ "seal_open_failed",
510
+ "secret_invalid",
511
+ "local_commit_interrupted",
512
+ "secret_store_unavailable"
513
+ ];
514
+ var ProviderProvisioningRejectionCodeSchema = z.enum(PROVIDER_PROVISIONING_REJECTION_CODES);
515
+ var PROVIDER_PROVISIONING_HOST_TERMINAL_CODES = ["request_expired", "sealing_key_rotated"];
516
+ var ProviderProvisioningProviderStatusSchema = z.object({
517
+ profileRef: ProviderProfileRefSchema,
518
+ providerKind: z.string().min(1).max(64).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/u, "providerKind must be a lowercase portable identifier"),
519
+ modelId: z.string().min(1).max(160).regex(/^[^\u0000\r\n]+$/u),
520
+ capabilities: z.array(ProviderModelCapabilitySchema).max(8),
521
+ secretConfigured: z.boolean()
522
+ }).strict().superRefine((status, ctx) => {
523
+ if (new Set(status.capabilities).size !== status.capabilities.length) {
524
+ ctx.addIssue({ code: "custom", path: ["capabilities"], message: "duplicate provider capability" });
525
+ }
526
+ });
527
+ var PROVIDER_PROVISIONING_KEY_CHECK_RESULTS = [
528
+ "ok",
529
+ "credential_rejected",
530
+ "rate_limited",
531
+ "quota_or_billing",
532
+ "model_not_permitted",
533
+ "provider_error",
534
+ "unreachable",
535
+ "timeout",
536
+ "not_run"
537
+ ];
538
+ var ProviderProvisioningKeyCheckResultSchema = z.enum(PROVIDER_PROVISIONING_KEY_CHECK_RESULTS);
539
+ var ProviderProvisioningKeyCheckSchema = z.object({
540
+ result: ProviderProvisioningKeyCheckResultSchema
541
+ }).strict();
542
+ var completionIdentity = {
543
+ requestId: z.uuid(),
544
+ operation: ProviderProvisioningOperationSchema,
545
+ operationGeneration: ProviderProvisioningOperationGenerationSchema,
546
+ operationDigest: ProviderProvisioningOperationDigestSchema
547
+ };
548
+ var AppliedCompletionSchema = z.object({
549
+ outcome: z.literal("applied"),
550
+ ...completionIdentity,
551
+ providerStatus: ProviderProvisioningProviderStatusSchema.nullable(),
552
+ binding: ProviderProfileBindingSchema.nullable(),
553
+ keyCheck: ProviderProvisioningKeyCheckSchema
554
+ }).strict();
555
+ var RejectedCompletionSchema = z.object({
556
+ outcome: z.literal("rejected"),
557
+ ...completionIdentity,
558
+ code: ProviderProvisioningRejectionCodeSchema
559
+ }).strict();
560
+ var ProviderProvisioningCompletionSchema = z.discriminatedUnion("outcome", [AppliedCompletionSchema, RejectedCompletionSchema]).superRefine((completion, ctx) => {
561
+ if (completion.outcome !== "applied") return;
562
+ const { operation, providerStatus, binding } = completion;
563
+ if (operation === "delete") {
564
+ if (completion.keyCheck.result !== "not_run") {
565
+ ctx.addIssue({ code: "custom", path: ["keyCheck", "result"], message: "an applied delete must report keyCheck not_run" });
566
+ }
567
+ if (providerStatus !== null) {
568
+ ctx.addIssue({ code: "custom", path: ["providerStatus"], message: "an applied delete reports no provider status" });
569
+ }
570
+ if (binding !== null) {
571
+ ctx.addIssue({ code: "custom", path: ["binding"], message: "an applied delete reports no binding" });
572
+ }
573
+ return;
574
+ }
575
+ if (providerStatus === null) {
576
+ ctx.addIssue({ code: "custom", path: ["providerStatus"], message: `an applied ${operation} must report provider status` });
577
+ }
578
+ if (binding === null) {
579
+ ctx.addIssue({ code: "custom", path: ["binding"], message: `an applied ${operation} must report its exact binding` });
580
+ }
581
+ if (providerStatus === null || binding === null) return;
582
+ if (providerStatus.profileRef !== binding.profileRef) {
583
+ ctx.addIssue({ code: "custom", path: ["binding", "profileRef"], message: "binding profileRef must equal providerStatus profileRef" });
584
+ }
585
+ if (providerStatus.modelId !== binding.modelId) {
586
+ ctx.addIssue({ code: "custom", path: ["binding", "modelId"], message: "binding modelId must equal providerStatus modelId" });
587
+ }
588
+ if ((operation === "configure" || operation === "replace_secret") && !providerStatus.secretConfigured) {
589
+ ctx.addIssue({
590
+ code: "custom",
591
+ path: ["providerStatus", "secretConfigured"],
592
+ message: `an applied ${operation} must report a configured secret`
593
+ });
594
+ }
595
+ });
596
+ var PROVIDER_PROVISIONING_DISPOSITIONS = ["recorded", "idempotent", "conflict", "host_terminal"];
597
+ var ProviderProvisioningDispositionSchema = z.enum(PROVIDER_PROVISIONING_DISPOSITIONS);
598
+ var ProviderProvisioningReadbackSchema = z.object({
599
+ tenantId: z.string().min(1),
600
+ deviceId: z.string().min(1),
601
+ requestId: z.uuid(),
602
+ disposition: ProviderProvisioningDispositionSchema,
603
+ completion: ProviderProvisioningCompletionSchema,
604
+ completedAt: z.iso.datetime({ offset: true })
605
+ }).strict().superRefine((readback, ctx) => {
606
+ if (readback.completion.requestId !== readback.requestId) {
607
+ ctx.addIssue({ code: "custom", path: ["completion", "requestId"], message: "completion requestId must equal readback requestId" });
608
+ }
609
+ if (readback.disposition === "host_terminal" && (readback.completion.outcome !== "rejected" || !PROVIDER_PROVISIONING_HOST_TERMINAL_CODES.includes(readback.completion.code))) {
610
+ ctx.addIssue({
611
+ code: "custom",
612
+ path: ["completion"],
613
+ message: `a host_terminal readback must carry a rejected completion with one of: ${PROVIDER_PROVISIONING_HOST_TERMINAL_CODES.join(", ")}`
614
+ });
615
+ }
616
+ });
477
617
 
478
618
  // src/version.ts
479
619
  var MAILBOX_READ_AHEAD_MAX_SEQS = 4096;
@@ -505,7 +645,8 @@ var CAPABILITY_FLAGS = [
505
645
  TERMINAL_PROJECTION_SELECTION_CAPABILITY,
506
646
  HOST_MCP_TASK_CONTEXT_CAPABILITY,
507
647
  CUSTOM_HARNESS_CAPABILITY,
508
- MAILBOX_READ_AHEAD_CAPABILITY
648
+ MAILBOX_READ_AHEAD_CAPABILITY,
649
+ PROVIDER_PROVISIONING_CAPABILITY
509
650
  ];
510
651
  var CONTENT_HASH_RE = /^sha256:[0-9a-f]{64}$/;
511
652
  var BlobRefSchema = z.object({
@@ -744,6 +885,7 @@ var TaskOfferPreparedPayloadSchema = TaskOfferForAgentPayloadSchema.omit({
744
885
  sessionRef: true
745
886
  }).extend({
746
887
  preparation: InputPreparationOfferBindingSchema,
888
+ agentMemory: PreparedAgentMemoryModeSchema,
747
889
  egressPolicy: AgentEgressPolicySchema,
748
890
  messageEgress: AgentMessageEgressRequirementSchema.optional()
749
891
  }).strict();
@@ -891,6 +1033,7 @@ var InputPreparationBlobContextSchema = z.object({ blobRef: BlobRefSchema, conte
891
1033
  }
892
1034
  });
893
1035
  var AgentInputPreparationPayloadSchema = z.object({
1036
+ agentMemory: PreparedAgentMemoryModeSchema,
894
1037
  requestId: z.uuid(),
895
1038
  agentRef: AgentRefSchema,
896
1039
  profileId: InputPreparationProfileIdSchema,
@@ -1096,6 +1239,7 @@ var MESSAGE_PAYLOAD_SCHEMAS = {
1096
1239
  "agent.content.receipt": AgentContentReceiptPayloadSchema,
1097
1240
  "agent.home.projection": AgentHomeProjectionPayloadSchema,
1098
1241
  "agent.input.preparation": AgentInputPreparationPayloadSchema,
1242
+ "provider.provisioning.available": ProviderProvisioningAvailablePayloadSchema,
1099
1243
  "task.approve": TaskApprovePayloadSchema,
1100
1244
  "task.reject": TaskRejectPayloadSchema,
1101
1245
  "task.cancel": TaskCancelPayloadSchema,
@@ -1125,6 +1269,7 @@ var SERVER_TO_DAEMON_TYPES = [
1125
1269
  "agent.content.read",
1126
1270
  "agent.home.projection",
1127
1271
  "agent.input.preparation",
1272
+ "provider.provisioning.available",
1128
1273
  "task.approve",
1129
1274
  "task.reject",
1130
1275
  "task.cancel",
@@ -1280,6 +1425,7 @@ var EnvelopeSchema = z.discriminatedUnion("type", [
1280
1425
  envelopeShape("agent.content.read", OPTIONAL_TASK_ID, REQUIRED_SEQ),
1281
1426
  envelopeShape("agent.home.projection", FORBIDDEN_TASK_ID, REQUIRED_SEQ),
1282
1427
  envelopeShape("agent.input.preparation", FORBIDDEN_TASK_ID, REQUIRED_SEQ),
1428
+ envelopeShape("provider.provisioning.available", FORBIDDEN_TASK_ID, REQUIRED_SEQ),
1283
1429
  envelopeShape("task.approve", REQUIRED_TASK_ID, REQUIRED_SEQ),
1284
1430
  envelopeShape("task.reject", REQUIRED_TASK_ID, REQUIRED_SEQ),
1285
1431
  envelopeShape("task.cancel", REQUIRED_TASK_ID, REQUIRED_SEQ),
@@ -1610,6 +1756,6 @@ function byokBlobContentPath(blobId) {
1610
1756
  return `/byok/blobs/${blobId}/content`;
1611
1757
  }
1612
1758
 
1613
- export { AGENT_CONTENT_ARTIFACT_READ_CAPABILITY, AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY, AGENT_CONTENT_WORKSPACE_READ_CAPABILITY, AGENT_EGRESS_FRESH_SESSION_CAPABILITY, AGENT_EGRESS_POLICY_CAPABILITY, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY, AGENT_EVENT_SPILL_UNSTORED_REASON_MAX_LENGTH, AGENT_HOME_PROJECTION_CAPABILITY, AGENT_HOME_PROJECTION_MAX_BYTES, AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM, AGENT_INPUT_PREPARATION_CAPABILITY, AGENT_MEMORY_PROJECTION_CAPABILITY, AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE, AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES, AGENT_MESSAGE_EGRESS_CAPABILITY, AGENT_MESSAGE_MAX_BYTES, AGENT_REF_MAX_BYTES, AgentContentActorKindSchema, AgentContentActorSchema, AgentContentDecodeAsSchema, AgentContentMimeTypeSchema, AgentContentReadDecisionSchema, AgentContentReadDenialReasonSchema, AgentContentReadPayloadSchema, AgentContentReadSurfaceSchema, AgentContentReceiptPayloadSchema, AgentEgressAckPayloadSchema, AgentEgressActivityPolicySchema, AgentEgressContentHashSchema, AgentEgressDropReasonSchema, AgentEgressLaneSchema, AgentEgressPolicyRevisionSchema, AgentEgressPolicySchema, AgentEgressReliablePayloadSchema, AgentEventOrUnknownSchema, AgentEventSchema, AgentEventSpillSchema, AgentHomeProjectionAgentRefSchema, AgentHomeProjectionCompletionRequestSchema, AgentHomeProjectionHashSchema, AgentHomeProjectionOutcomeSchema, AgentHomeProjectionPayloadSchema, AgentHomeProjectionProfileRevisionSchema, AgentHomeProjectionReadbackSchema, AgentHomeProjectionStatusSchema, AgentHomeProjectionValueSchema, AgentInputPreparationPayloadSchema, AgentMemoryProjectionCommitRequestSchema, AgentMemoryProjectionCommitResponseSchema, AgentMemoryProjectionEraseResultSchema, AgentMemoryProjectionGrantRefSchema, AgentMemoryProjectionMeteringReceiptSchema, AgentMemoryProjectionMutationSchema, AgentMemoryProjectionReceiptSchema, AgentMemoryProjectionSessionRefSchema, AgentMemoryProjectionSnapshotSchema, AgentMemoryProjectionSourceSeqSchema, AgentMemoryProjectionWriterEpochSchema, AgentMessageContentTypeSchema, AgentMessageContractSchema, AgentMessageDestinationBindingSchema, AgentMessageDispositionPayloadSchema, AgentMessageEgressRequirementSchema, AgentMessageFreshnessCursorSchema, AgentMessagePublishPayloadSchema, AgentMessageServerContextSchema, AgentRefSchema, AgentReliableQuotaPolicySchema, BYOK_ACTIVITY_PATH, BYOK_AGENT_HOME_PROJECTIONS_PATH, BYOK_AGENT_HOME_PROJECTION_COMPLETION_ROUTE, BYOK_AGENT_MEMORY_PROJECTIONS_PATH, BYOK_BLOBS_PATH, BYOK_BLOB_CONTENT_ROUTE, BYOK_BLOB_FINALIZE_ROUTE, BYOK_BLOB_URL_ROUTE, BYOK_BOARD_CLAIM_ROUTE, BYOK_BOARD_PATH, BYOK_BOARD_STATUS_ROUTE, BYOK_BOARD_STREAM_PATH, BYOK_BOARD_UNCLAIM_ROUTE, BYOK_CAPABILITIES_PATH, BYOK_CHALLENGE_PATH, BYOK_EVENTS_PATH, BYOK_INPUT_PREPARATIONS_PATH, BYOK_INPUT_PREPARATION_COMPLETION_ROUTE, BYOK_INPUT_PREPARATION_STATUS_ROUTE, BYOK_MESSAGES_PATH, BYOK_PAIR_PATH, BYOK_PRESENCE_PATH, BYOK_RECORDS_PATH, BYOK_RECORD_ROUTE, BYOK_SKILL_PACKS_PATH, BYOK_SKILL_PACK_FILE_ROUTE, BYOK_TOKEN_PATH, BlobDownloadUrlResponseSchema, BlobRefSchema, CAPABILITY_FLAGS, CONFIGURED_TOOLSETS_MAX_ITEMS, CONTENT_HASH_RE, CUSTOM_HARNESS_CAPABILITY, ChallengeRequestSchema, ChallengeResponseSchema, ConfiguredToolsetsSchema, ConnAckPayloadSchema, ConnHelloPayloadSchema, ContentReadPolicySchema, CreateBlobRequestSchema, CreateBlobResponseSchema, DAEMON_TO_SERVER_TYPES, DispatchSelectionSchema, EnvelopeParseError, EnvelopeSchema, EnvelopeValidationError, EventsPollQuerySchema, EventsPollResponseSchema, HOST_MCP_TASK_CONTEXT_CAPABILITY, HarnessIdSchema, HarnessInfoSchema, HarnessInventorySchema, INPUT_PREPARATION_WIRE_VERSION, InputPreparationAccountingPolicyRefSchema, InputPreparationArtifactSummarySchema, InputPreparationBindingSchema, InputPreparationCompletionRequestSchema, InputPreparationContentHashSchema, InputPreparationContextDocumentSchema, InputPreparationCounterEvidenceSchema, InputPreparationCounterProviderEvidenceSchema, InputPreparationCounterTargetSchema, InputPreparationHostCanonicalAssistantMessageSchema, InputPreparationMessageSchema, InputPreparationModelCostSchema, InputPreparationModelSchema, InputPreparationOfferBindingSchema, InputPreparationOptionsSchema, InputPreparationPermissionModeSchema, InputPreparationPolicyRevisionSchema, InputPreparationProfileIdSchema, InputPreparationProjectionSchema, InputPreparationPromptSnapshotSchema, InputPreparationReadbackSchema, InputPreparationReadinessReasonSchema, InputPreparationReceiptSummarySchema, InputPreparationReferenceSchema, InputPreparationRejectionReasonSchema, InputPreparationResidualKeySchema, InputPreparationResidualValueClassSchema, InputPreparationRuntimeIdentitySchema, InputPreparationSelectionSchema, InputPreparationSourceSchema, InputPreparationStateSchema, InputPreparationStatusQuerySchema, InputPreparationStatusSchema, InputPreparationToolImplementationKindSchema, InputPreparationUserMessageSchema, KNOWN_AGENT_EVENT_TYPES, MAILBOX_READ_AHEAD_CAPABILITY, MAILBOX_READ_AHEAD_MAX_SEQS, MAX_MESSAGES_PER_BATCH, MESSAGE_PAYLOAD_SCHEMAS, MESSAGE_TYPES, MessagesSendRequestSchema, MessagesSendResponseSchema, PAIR_RESPONSE_TENANT_ID_MAX_LENGTH, PERMISSION_MODES, PROTOCOL_VERSION, PROVIDER_MODEL_CAPABILITIES, PROVIDER_PROFILE_BINDING_CAPABILITY, PairRequestSchema, PairResponseSchema, PairResponseTenantIdSchema, PermissionPolicySchema, PresencePublishRequestSchema, ProtocolError, ProtocolVersionNumberSchema, ProviderModelCapabilitySchema, ProviderProfileBindingSchema, ProviderProfileHashSchema, ProviderProfileRefSchema, ProviderProfileRevisionSchema, RESULT_DOCUMENT_MAX_BYTES, RequiredToolsetsSchema, RuntimeCapabilitiesSchema, RuntimeIdSchema, RuntimeInfoSchema, SERVER_TO_DAEMON_TYPES, STRICT_AGENT_ONLY_CAPABILITY, TASK_OFFER_TYPES, TASK_STATES, TASK_TRANSITIONS, TERMINAL_INFERENCE_USAGE_CLIENT_VERSION_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_MAX_DURATION_MS, TERMINAL_INFERENCE_USAGE_MAX_TOKENS, TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_PROVIDER_MAX_LENGTH, TERMINAL_PROJECTION_SELECTION_CAPABILITY, TaskApprovalResolvedPayloadSchema, TaskApprovePayloadSchema, TaskArtifactPayloadSchema, TaskAwaitApprovalPayloadSchema, TaskCancelPayloadSchema, TaskCancelledPayloadSchema, TaskClaimPayloadSchema, TaskCompletePayloadSchema, TaskDeclinePayloadSchema, TaskFailPayloadSchema, TaskOfferForAgentPayloadSchema, TaskOfferForAgentWithEgressFreshPayloadSchema, TaskOfferForAgentWithEgressPayloadSchema, TaskOfferPayloadSchema, TaskOfferPreparedPayloadSchema, TaskOfferWithToolsetsPayloadSchema, TaskProgressPayloadSchema, TaskRejectPayloadSchema, TaskStartedPayloadSchema, TaskSteerPayloadSchema, TerminalInferenceUsageSchema, TerminalPreparedObservationSchema, TerminalProjectionContractSchema, TerminalProjectionSelectionSchema, TokenRequestSchema, TokenResponseSchema, ToolsetIdSchema, UnknownAgentEventSchema, UnknownMessageTypeError, agentMemoryProjectionBase64UrlByteLength, byokAgentHomeProjectionCompletionPath, byokBlobContentPath, byokBlobFinalizePath, byokBlobUrlPath, byokInputPreparationCompletionPath, byokInputPreparationStatusPath, byokRecordPath, byokSkillPackFilePath, canTransition, checkResultDocument, createEnvelope, decodeEnvelope, encodeEnvelope, isKnownAgentEvent, isServerToDaemonType, isTaskOfferType, parseMessage, partitionAgentEvents };
1759
+ export { AGENT_CONTENT_ARTIFACT_READ_CAPABILITY, AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY, AGENT_CONTENT_WORKSPACE_READ_CAPABILITY, AGENT_EGRESS_FRESH_SESSION_CAPABILITY, AGENT_EGRESS_POLICY_CAPABILITY, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY, AGENT_EVENT_SPILL_UNSTORED_REASON_MAX_LENGTH, AGENT_HOME_PROJECTION_CAPABILITY, AGENT_HOME_PROJECTION_MAX_BYTES, AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM, AGENT_INPUT_PREPARATION_CAPABILITY, AGENT_MEMORY_PROJECTION_CAPABILITY, AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE, AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES, AGENT_MESSAGE_EGRESS_CAPABILITY, AGENT_MESSAGE_MAX_BYTES, AGENT_REF_MAX_BYTES, AgentContentActorKindSchema, AgentContentActorSchema, AgentContentDecodeAsSchema, AgentContentMimeTypeSchema, AgentContentReadDecisionSchema, AgentContentReadDenialReasonSchema, AgentContentReadPayloadSchema, AgentContentReadSurfaceSchema, AgentContentReceiptPayloadSchema, AgentEgressAckPayloadSchema, AgentEgressActivityPolicySchema, AgentEgressContentHashSchema, AgentEgressDropReasonSchema, AgentEgressLaneSchema, AgentEgressPolicyRevisionSchema, AgentEgressPolicySchema, AgentEgressReliablePayloadSchema, AgentEventOrUnknownSchema, AgentEventSchema, AgentEventSpillSchema, AgentHomeProjectionAgentRefSchema, AgentHomeProjectionCompletionRequestSchema, AgentHomeProjectionHashSchema, AgentHomeProjectionOutcomeSchema, AgentHomeProjectionPayloadSchema, AgentHomeProjectionProfileRevisionSchema, AgentHomeProjectionReadbackSchema, AgentHomeProjectionStatusSchema, AgentHomeProjectionValueSchema, AgentInputPreparationPayloadSchema, AgentMemoryProjectionCommitRequestSchema, AgentMemoryProjectionCommitResponseSchema, AgentMemoryProjectionEraseResultSchema, AgentMemoryProjectionGrantRefSchema, AgentMemoryProjectionMeteringReceiptSchema, AgentMemoryProjectionMutationSchema, AgentMemoryProjectionReceiptSchema, AgentMemoryProjectionSessionRefSchema, AgentMemoryProjectionSnapshotSchema, AgentMemoryProjectionSourceSeqSchema, AgentMemoryProjectionWriterEpochSchema, AgentMessageContentTypeSchema, AgentMessageContractSchema, AgentMessageDestinationBindingSchema, AgentMessageDispositionPayloadSchema, AgentMessageEgressRequirementSchema, AgentMessageFreshnessCursorSchema, AgentMessagePublishPayloadSchema, AgentMessageServerContextSchema, AgentRefSchema, AgentReliableQuotaPolicySchema, BYOK_ACTIVITY_PATH, BYOK_AGENT_HOME_PROJECTIONS_PATH, BYOK_AGENT_HOME_PROJECTION_COMPLETION_ROUTE, BYOK_AGENT_MEMORY_PROJECTIONS_PATH, BYOK_BLOBS_PATH, BYOK_BLOB_CONTENT_ROUTE, BYOK_BLOB_FINALIZE_ROUTE, BYOK_BLOB_URL_ROUTE, BYOK_BOARD_CLAIM_ROUTE, BYOK_BOARD_PATH, BYOK_BOARD_STATUS_ROUTE, BYOK_BOARD_STREAM_PATH, BYOK_BOARD_UNCLAIM_ROUTE, BYOK_CAPABILITIES_PATH, BYOK_CHALLENGE_PATH, BYOK_EVENTS_PATH, BYOK_INPUT_PREPARATIONS_PATH, BYOK_INPUT_PREPARATION_COMPLETION_ROUTE, BYOK_INPUT_PREPARATION_STATUS_ROUTE, BYOK_MESSAGES_PATH, BYOK_PAIR_PATH, BYOK_PRESENCE_PATH, BYOK_RECORDS_PATH, BYOK_RECORD_ROUTE, BYOK_SKILL_PACKS_PATH, BYOK_SKILL_PACK_FILE_ROUTE, BYOK_TOKEN_PATH, BlobDownloadUrlResponseSchema, BlobRefSchema, CAPABILITY_FLAGS, CONFIGURED_TOOLSETS_MAX_ITEMS, CONTENT_HASH_RE, CUSTOM_HARNESS_CAPABILITY, ChallengeRequestSchema, ChallengeResponseSchema, ConfiguredToolsetsSchema, ConnAckPayloadSchema, ConnHelloPayloadSchema, ContentReadPolicySchema, CreateBlobRequestSchema, CreateBlobResponseSchema, DAEMON_TO_SERVER_TYPES, DispatchSelectionSchema, EnvelopeParseError, EnvelopeSchema, EnvelopeValidationError, EventsPollQuerySchema, EventsPollResponseSchema, HOST_MCP_TASK_CONTEXT_CAPABILITY, HarnessIdSchema, HarnessInfoSchema, HarnessInventorySchema, INPUT_PREPARATION_WIRE_VERSION, InputPreparationAccountingPolicyRefSchema, InputPreparationArtifactSummarySchema, InputPreparationBindingSchema, InputPreparationCompletionRequestSchema, InputPreparationContentHashSchema, InputPreparationContextDocumentSchema, InputPreparationCounterEvidenceSchema, InputPreparationCounterProviderEvidenceSchema, InputPreparationCounterTargetSchema, InputPreparationHostCanonicalAssistantMessageSchema, InputPreparationMessageSchema, InputPreparationModelCostSchema, InputPreparationModelSchema, InputPreparationOfferBindingSchema, InputPreparationOptionsSchema, InputPreparationPermissionModeSchema, InputPreparationPolicyRevisionSchema, InputPreparationProfileIdSchema, InputPreparationProjectionSchema, InputPreparationPromptSnapshotSchema, InputPreparationReadbackSchema, InputPreparationReadinessReasonSchema, InputPreparationReceiptSummarySchema, InputPreparationReferenceSchema, InputPreparationRejectionReasonSchema, InputPreparationResidualKeySchema, InputPreparationResidualValueClassSchema, InputPreparationRuntimeIdentitySchema, InputPreparationSelectionSchema, InputPreparationSourceSchema, InputPreparationStateSchema, InputPreparationStatusQuerySchema, InputPreparationStatusSchema, InputPreparationToolImplementationKindSchema, InputPreparationUserMessageSchema, KNOWN_AGENT_EVENT_TYPES, MAILBOX_READ_AHEAD_CAPABILITY, MAILBOX_READ_AHEAD_MAX_SEQS, MAX_MESSAGES_PER_BATCH, MESSAGE_PAYLOAD_SCHEMAS, MESSAGE_TYPES, MessagesSendRequestSchema, MessagesSendResponseSchema, PAIR_RESPONSE_TENANT_ID_MAX_LENGTH, PERMISSION_MODES, PROTOCOL_VERSION, PROVIDER_MODEL_CAPABILITIES, PROVIDER_PROFILE_BINDING_CAPABILITY, PROVIDER_PROVISIONING_CAPABILITY, PROVIDER_PROVISIONING_DISPOSITIONS, PROVIDER_PROVISIONING_HOST_TERMINAL_CODES, PROVIDER_PROVISIONING_KEY_CHECK_RESULTS, PROVIDER_PROVISIONING_OPERATIONS, PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM, PROVIDER_PROVISIONING_REJECTION_CODES, PROVIDER_SECRET_SEALING_KEY_REGISTER_OPERATION, PairRequestSchema, PairResponseSchema, PairResponseTenantIdSchema, PermissionPolicySchema, PreparedAgentMemoryModeSchema, PresencePublishRequestSchema, ProtocolError, ProtocolVersionNumberSchema, ProviderModelCapabilitySchema, ProviderProfileBindingSchema, ProviderProfileHashSchema, ProviderProfileRefSchema, ProviderProfileRevisionSchema, ProviderProvisioningAvailablePayloadSchema, ProviderProvisioningCompletionSchema, ProviderProvisioningDispositionSchema, ProviderProvisioningKeyCheckResultSchema, ProviderProvisioningKeyCheckSchema, ProviderProvisioningOperationDigestSchema, ProviderProvisioningOperationGenerationSchema, ProviderProvisioningOperationSchema, ProviderProvisioningProviderStatusSchema, ProviderProvisioningReadbackSchema, ProviderProvisioningRejectionCodeSchema, RESULT_DOCUMENT_MAX_BYTES, RequiredToolsetsSchema, RuntimeCapabilitiesSchema, RuntimeIdSchema, RuntimeInfoSchema, SERVER_TO_DAEMON_TYPES, STRICT_AGENT_ONLY_CAPABILITY, TASK_OFFER_TYPES, TASK_STATES, TASK_TRANSITIONS, TERMINAL_INFERENCE_USAGE_CLIENT_VERSION_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_MAX_DURATION_MS, TERMINAL_INFERENCE_USAGE_MAX_TOKENS, TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_PROVIDER_MAX_LENGTH, TERMINAL_PROJECTION_SELECTION_CAPABILITY, TaskApprovalResolvedPayloadSchema, TaskApprovePayloadSchema, TaskArtifactPayloadSchema, TaskAwaitApprovalPayloadSchema, TaskCancelPayloadSchema, TaskCancelledPayloadSchema, TaskClaimPayloadSchema, TaskCompletePayloadSchema, TaskDeclinePayloadSchema, TaskFailPayloadSchema, TaskOfferForAgentPayloadSchema, TaskOfferForAgentWithEgressFreshPayloadSchema, TaskOfferForAgentWithEgressPayloadSchema, TaskOfferPayloadSchema, TaskOfferPreparedPayloadSchema, TaskOfferWithToolsetsPayloadSchema, TaskProgressPayloadSchema, TaskRejectPayloadSchema, TaskStartedPayloadSchema, TaskSteerPayloadSchema, TerminalInferenceUsageSchema, TerminalPreparedObservationSchema, TerminalProjectionContractSchema, TerminalProjectionSelectionSchema, TokenRequestSchema, TokenResponseSchema, ToolsetIdSchema, UnknownAgentEventSchema, UnknownMessageTypeError, agentMemoryProjectionBase64UrlByteLength, byokAgentHomeProjectionCompletionPath, byokBlobContentPath, byokBlobFinalizePath, byokBlobUrlPath, byokInputPreparationCompletionPath, byokInputPreparationStatusPath, byokRecordPath, byokSkillPackFilePath, canTransition, checkResultDocument, createEnvelope, decodeEnvelope, encodeEnvelope, isKnownAgentEvent, isServerToDaemonType, isTaskOfferType, parseMessage, partitionAgentEvents };
1614
1760
  //# sourceMappingURL=index.js.map
1615
1761
  //# sourceMappingURL=index.js.map