@byok-sdk/protocol 0.22.0 → 0.24.0

package/dist/index.js

@@ -123,7 +123,7 @@ var PermissionPolicySchema = z.object({
 }).strict();
 
 // src/input-preparation.ts
-var INPUT_PREPARATION_WIRE_VERSION = 7;
+var INPUT_PREPARATION_WIRE_VERSION = 8;
 var AGENT_INPUT_PREPARATION_CAPABILITY = `agent-input-preparation-v${INPUT_PREPARATION_WIRE_VERSION}`;
 var InputPreparationContentHashSchema = AgentEgressContentHashSchema;
 var OPAQUE_ID = z.string().min(1).max(512).regex(/^[^\u0000-\u001f\u007f]+$/u, "control identifiers must not contain control characters");
@@ -131,6 +131,7 @@ var OPAQUE_TEXT = z.string().min(1).max(2048).regex(/^[^\u0000-\u001f\u007f]+$/u
 var InputPreparationPolicyRevisionSchema = OPAQUE_ID;
 var InputPreparationProfileIdSchema = OPAQUE_ID;
 var InputPreparationPermissionModeSchema = z.enum(PERMISSION_MODES);
+var PreparedAgentMemoryModeSchema = z.enum(["none", "read", "read-write"]);
 var InputPreparationSourceSchema = z.object({ revision: OPAQUE_ID, digest: OPAQUE_ID }).strict();
 var InputPreparationModelCostSchema = z.object({
   input: z.number().finite(),
@@ -333,6 +334,7 @@ var InputPreparationArtifactSummarySchema = z.object({
   toolImplementationKinds: z.record(OPAQUE_ID, InputPreparationToolImplementationKindSchema)
 }).strict();
 var InputPreparationBindingSchema = z.object({
+  agentMemory: PreparedAgentMemoryModeSchema,
   scopeId: OPAQUE_ID,
   deviceId: OPAQUE_ID,
   agentRef: OPAQUE_ID,
@@ -474,39 +476,144 @@ var ProviderProfileBindingSchema = z.object({
     ctx.addIssue({ code: "custom", path: ["requiredCapabilities"], message: "duplicate provider capability" });
   }
 });
-
-// src/version.ts
-var MAILBOX_READ_AHEAD_MAX_SEQS = 4096;
-var MAILBOX_READ_AHEAD_CAPABILITY = "mailbox-read-ahead";
-var PROTOCOL_VERSION = 1;
-var STRICT_AGENT_ONLY_CAPABILITY = "strict-agent-only";
-var CUSTOM_HARNESS_CAPABILITY = "custom-harness";
-var CAPABILITY_FLAGS = [
-  "steer",
-  "blob-upload",
-  "interactive-approval",
-  "approval_resolved",
-  "approval-targeting",
-  "result-document",
-  "dispatch-selection",
-  PROVIDER_PROFILE_BINDING_CAPABILITY,
-  "toolset-selection",
-  "agent-home-contract",
-  STRICT_AGENT_ONLY_CAPABILITY,
-  AGENT_EGRESS_POLICY_CAPABILITY,
-  AGENT_EGRESS_RELIABLE_ACK_CAPABILITY,
-  AGENT_MESSAGE_EGRESS_CAPABILITY,
-  AGENT_EGRESS_FRESH_SESSION_CAPABILITY,
-  AGENT_CONTENT_WORKSPACE_READ_CAPABILITY,
-  AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY,
-  AGENT_CONTENT_ARTIFACT_READ_CAPABILITY,
-  AGENT_HOME_PROJECTION_CAPABILITY,
-  AGENT_INPUT_PREPARATION_CAPABILITY,
-  TERMINAL_PROJECTION_SELECTION_CAPABILITY,
-  HOST_MCP_TASK_CONTEXT_CAPABILITY,
-  CUSTOM_HARNESS_CAPABILITY,
-  MAILBOX_READ_AHEAD_CAPABILITY
+var PROVIDER_PROVISIONING_CAPABILITY = "provider-provisioning.v1";
+var PROVIDER_SECRET_SEALING_KEY_REGISTER_OPERATION = "provider-secret-sealing-key.register";
+var ProviderProvisioningAvailablePayloadSchema = z.object({
+  requestId: z.uuid()
+}).strict();
+var PROVIDER_PROVISIONING_OPERATIONS = ["configure", "update_model", "replace_secret", "delete"];
+var ProviderProvisioningOperationSchema = z.enum(PROVIDER_PROVISIONING_OPERATIONS);
+var PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM = "9223372036854775807";
+var ProviderProvisioningOperationGenerationSchema = z.string().regex(/^[1-9][0-9]{0,18}$/u, "operationGeneration must be a canonical positive decimal string").refine(
+  (value) => value.length < PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM.length || value <= PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM,
+  `operationGeneration must not exceed ${PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM}`
+);
+var ProviderProvisioningOperationDigestSchema = z.string().regex(/^sha256:[0-9a-f]{64}$/u, "operationDigest must be lowercase sha256");
+var PROVIDER_PROVISIONING_REJECTION_CODES = [
+  "request_invalid",
+  "request_conflict",
+  "request_expired",
+  "request_not_yet_valid",
+  "request_window_invalid",
+  "sealing_key_rotated",
+  "enrollment_mismatch",
+  "agent_not_placed",
+  "config_digest_mismatch",
+  "operation_generation_stale",
+  "profile_changed",
+  "profile_not_found",
+  "credential_scope_mismatch",
+  "provider_kind_unsupported",
+  "pi_model_invalid",
+  "capabilities_invalid",
+  "seal_open_failed",
+  "secret_invalid",
+  "local_commit_interrupted",
+  "secret_store_unavailable"
 ];
+var ProviderProvisioningRejectionCodeSchema = z.enum(PROVIDER_PROVISIONING_REJECTION_CODES);
+var PROVIDER_PROVISIONING_HOST_TERMINAL_CODES = ["request_expired", "sealing_key_rotated"];
+var ProviderProvisioningProviderStatusSchema = z.object({
+  profileRef: ProviderProfileRefSchema,
+  providerKind: z.string().min(1).max(64).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/u, "providerKind must be a lowercase portable identifier"),
+  modelId: z.string().min(1).max(160).regex(/^[^\u0000\r\n]+$/u),
+  capabilities: z.array(ProviderModelCapabilitySchema).max(8),
+  secretConfigured: z.boolean()
+}).strict().superRefine((status, ctx) => {
+  if (new Set(status.capabilities).size !== status.capabilities.length) {
+    ctx.addIssue({ code: "custom", path: ["capabilities"], message: "duplicate provider capability" });
+  }
+});
+var PROVIDER_PROVISIONING_KEY_CHECK_RESULTS = [
+  "ok",
+  "credential_rejected",
+  "rate_limited",
+  "quota_or_billing",
+  "model_not_permitted",
+  "provider_error",
+  "unreachable",
+  "timeout",
+  "not_run"
+];
+var ProviderProvisioningKeyCheckResultSchema = z.enum(PROVIDER_PROVISIONING_KEY_CHECK_RESULTS);
+var ProviderProvisioningKeyCheckSchema = z.object({
+  result: ProviderProvisioningKeyCheckResultSchema
+}).strict();
+var completionIdentity = {
+  requestId: z.uuid(),
+  operation: ProviderProvisioningOperationSchema,
+  operationGeneration: ProviderProvisioningOperationGenerationSchema,
+  operationDigest: ProviderProvisioningOperationDigestSchema
+};
+var AppliedCompletionSchema = z.object({
+  outcome: z.literal("applied"),
+  ...completionIdentity,
+  providerStatus: ProviderProvisioningProviderStatusSchema.nullable(),
+  binding: ProviderProfileBindingSchema.nullable(),
+  keyCheck: ProviderProvisioningKeyCheckSchema
+}).strict();
+var RejectedCompletionSchema = z.object({
+  outcome: z.literal("rejected"),
+  ...completionIdentity,
+  code: ProviderProvisioningRejectionCodeSchema
+}).strict();
+var ProviderProvisioningCompletionSchema = z.discriminatedUnion("outcome", [AppliedCompletionSchema, RejectedCompletionSchema]).superRefine((completion, ctx) => {
+  if (completion.outcome !== "applied") return;
+  const { operation, providerStatus, binding } = completion;
+  if (operation === "delete") {
+    if (completion.keyCheck.result !== "not_run") {
+      ctx.addIssue({ code: "custom", path: ["keyCheck", "result"], message: "an applied delete must report keyCheck not_run" });
+    }
+    if (providerStatus !== null) {
+      ctx.addIssue({ code: "custom", path: ["providerStatus"], message: "an applied delete reports no provider status" });
+    }
+    if (binding !== null) {
+      ctx.addIssue({ code: "custom", path: ["binding"], message: "an applied delete reports no binding" });
+    }
+    return;
+  }
+  if (providerStatus === null) {
+    ctx.addIssue({ code: "custom", path: ["providerStatus"], message: `an applied ${operation} must report provider status` });
+  }
+  if (binding === null) {
+    ctx.addIssue({ code: "custom", path: ["binding"], message: `an applied ${operation} must report its exact binding` });
+  }
+  if (providerStatus === null || binding === null) return;
+  if (providerStatus.profileRef !== binding.profileRef) {
+    ctx.addIssue({ code: "custom", path: ["binding", "profileRef"], message: "binding profileRef must equal providerStatus profileRef" });
+  }
+  if (providerStatus.modelId !== binding.modelId) {
+    ctx.addIssue({ code: "custom", path: ["binding", "modelId"], message: "binding modelId must equal providerStatus modelId" });
+  }
+  if ((operation === "configure" || operation === "replace_secret") && !providerStatus.secretConfigured) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["providerStatus", "secretConfigured"],
+      message: `an applied ${operation} must report a configured secret`
+    });
+  }
+});
+var PROVIDER_PROVISIONING_DISPOSITIONS = ["recorded", "idempotent", "conflict", "host_terminal"];
+var ProviderProvisioningDispositionSchema = z.enum(PROVIDER_PROVISIONING_DISPOSITIONS);
+var ProviderProvisioningReadbackSchema = z.object({
+  tenantId: z.string().min(1),
+  deviceId: z.string().min(1),
+  requestId: z.uuid(),
+  disposition: ProviderProvisioningDispositionSchema,
+  completion: ProviderProvisioningCompletionSchema,
+  completedAt: z.iso.datetime({ offset: true })
+}).strict().superRefine((readback, ctx) => {
+  if (readback.completion.requestId !== readback.requestId) {
+    ctx.addIssue({ code: "custom", path: ["completion", "requestId"], message: "completion requestId must equal readback requestId" });
+  }
+  if (readback.disposition === "host_terminal" && (readback.completion.outcome !== "rejected" || !PROVIDER_PROVISIONING_HOST_TERMINAL_CODES.includes(readback.completion.code))) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["completion"],
+      message: `a host_terminal readback must carry a rejected completion with one of: ${PROVIDER_PROVISIONING_HOST_TERMINAL_CODES.join(", ")}`
+    });
+  }
+});
 var CONTENT_HASH_RE = /^sha256:[0-9a-f]{64}$/;
 var BlobRefSchema = z.object({
   blobId: z.string(),
@@ -568,7 +675,11 @@ var AgentEventSchema = z.discriminatedUnion("type", [
     cachedInputTokens: z.number().int().nonnegative().optional(),
     outputTokens: z.number().int().nonnegative().optional(),
     reasoningTokens: z.number().int().nonnegative().optional(),
-    totalTokens: z.number().int().nonnegative().optional()
+    totalTokens: z.number().int().nonnegative().optional(),
+    // Context occupancy is independent of provider cost counters. Unknown stays absent.
+    contextTokens: z.number().int().nonnegative().optional(),
+    contextWindow: z.number().int().positive().optional(),
+    contextSource: z.enum(["provider", "estimate"]).optional()
   })
 ]);
 var KNOWN_AGENT_EVENT_TYPES = z.toJSONSchema(AgentEventSchema).oneOf.map((branch) => branch.properties.type.const);
@@ -592,6 +703,8 @@ function partitionAgentEvents(events) {
   }
   return { known, unknown };
 }
+
+// src/messages.ts
 var MAX_INLINE_BYTES = 64 * 1024;
 function isWithinInlineByteLimit(value) {
   return new TextEncoder().encode(value).length <= MAX_INLINE_BYTES;
@@ -744,6 +857,7 @@ var TaskOfferPreparedPayloadSchema = TaskOfferForAgentPayloadSchema.omit({
   sessionRef: true
 }).extend({
   preparation: InputPreparationOfferBindingSchema,
+  agentMemory: PreparedAgentMemoryModeSchema,
   egressPolicy: AgentEgressPolicySchema,
   messageEgress: AgentMessageEgressRequirementSchema.optional()
 }).strict();
@@ -878,6 +992,10 @@ var AgentHomeProjectionPayloadSchema = z.object({
   projectionHash: AgentHomeProjectionHashSchema,
   projection: AgentHomeProjectionValueSchema
 }).strict();
+var AgentMemoryIntentAvailablePayloadSchema = z.object({
+  intentId: z.uuid(),
+  agentRef: AgentHomeProjectionAgentRefSchema
+}).strict();
 var InputPreparationInlineContextSchema = z.object({
   inline: z.string().refine(isWithinInlineByteLimit, `inline context must not exceed ${MAX_INLINE_BYTES} UTF-8 bytes`)
 }).strict();
@@ -891,6 +1009,7 @@ var InputPreparationBlobContextSchema = z.object({ blobRef: BlobRefSchema, conte
   }
 });
 var AgentInputPreparationPayloadSchema = z.object({
+  agentMemory: PreparedAgentMemoryModeSchema,
   requestId: z.uuid(),
   agentRef: AgentRefSchema,
   profileId: InputPreparationProfileIdSchema,
@@ -1096,6 +1215,8 @@ var MESSAGE_PAYLOAD_SCHEMAS = {
   "agent.content.receipt": AgentContentReceiptPayloadSchema,
   "agent.home.projection": AgentHomeProjectionPayloadSchema,
   "agent.input.preparation": AgentInputPreparationPayloadSchema,
+  "provider.provisioning.available": ProviderProvisioningAvailablePayloadSchema,
+  "agent.memory.intent.available": AgentMemoryIntentAvailablePayloadSchema,
   "task.approve": TaskApprovePayloadSchema,
   "task.reject": TaskRejectPayloadSchema,
   "task.cancel": TaskCancelPayloadSchema,
@@ -1125,6 +1246,8 @@ var SERVER_TO_DAEMON_TYPES = [
   "agent.content.read",
   "agent.home.projection",
   "agent.input.preparation",
+  "provider.provisioning.available",
+  "agent.memory.intent.available",
   "task.approve",
   "task.reject",
   "task.cancel",
@@ -1146,7 +1269,204 @@ var DAEMON_TO_SERVER_TYPES = [
   "agent.content.receipt"
 ];
 
-// src/agent-memory-projection.ts
+// src/agent-memory-intent.ts
+var AGENT_MEMORY_INTENT_CAPABILITY = "agent-memory-intent.v1";
+var AGENT_MEMORY_INTENT_CONTENT_MAX_BYTES = 262144;
+var AGENT_MEMORY_INTENT_PATH_MAX_BYTES = 1024;
+var AGENT_MEMORY_INTENT_APPROVAL_REF_MAX_BYTES = 128;
+var SHA256_REVISION = /^sha256:[0-9a-f]{64}$/u;
+var AgentMemoryIntentRevisionSchema = z.string().regex(SHA256_REVISION, "revision must be lowercase sha256:<64 hex>");
+var AgentMemoryIntentOperationDigestSchema = z.string().regex(SHA256_REVISION, "operationDigest must be lowercase sha256:<64 hex>");
+var AgentMemoryIntentPathSchema = z.string().min(1).max(AGENT_MEMORY_INTENT_PATH_MAX_BYTES).regex(/^[\x20\x21\x23-\x5b\x5d-\x7e]+$/u, "path must be printable ASCII without quote or backslash");
+var AgentMemoryIntentApprovalRefSchema = z.string().regex(
+  new RegExp(`^[A-Za-z0-9._:-]{1,${AGENT_MEMORY_INTENT_APPROVAL_REF_MAX_BYTES}}$`, "u"),
+  `approvalRef must be 1..${AGENT_MEMORY_INTENT_APPROVAL_REF_MAX_BYTES} characters of [A-Za-z0-9._:-]`
+);
+var LONE_SURROGATE = /[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/u;
+var utf8 = new TextEncoder();
+var AgentMemoryIntentContentSchema = z.string().refine((value) => !LONE_SURROGATE.test(value), "content must be well-formed Unicode (encodable as UTF-8)").refine(
+  (value) => utf8.encode(value).byteLength <= AGENT_MEMORY_INTENT_CONTENT_MAX_BYTES,
+  `content must not exceed ${AGENT_MEMORY_INTENT_CONTENT_MAX_BYTES} UTF-8 bytes`
+);
+var AGENT_MEMORY_INTENT_OPERATIONS = ["replace", "delete"];
+var AgentMemoryIntentOperationSchema = z.enum(AGENT_MEMORY_INTENT_OPERATIONS);
+var AgentMemoryIntentV1Schema = z.object({
+  intentId: z.uuid(),
+  agentRef: AgentHomeProjectionAgentRefSchema,
+  path: AgentMemoryIntentPathSchema,
+  operation: AgentMemoryIntentOperationSchema,
+  baseRevision: AgentMemoryIntentRevisionSchema,
+  targetRevision: AgentMemoryIntentRevisionSchema.nullable(),
+  content: AgentMemoryIntentContentSchema.optional(),
+  approvalRef: AgentMemoryIntentApprovalRefSchema,
+  operationDigest: AgentMemoryIntentOperationDigestSchema
+}).strict().superRefine((intent, ctx) => {
+  if (intent.operation === "delete") {
+    if (intent.targetRevision !== null) {
+      ctx.addIssue({ code: "custom", path: ["targetRevision"], message: "a delete intent has a null targetRevision" });
+    }
+    if (intent.content !== void 0) {
+      ctx.addIssue({ code: "custom", path: ["content"], message: "a delete intent never carries content" });
+    }
+    return;
+  }
+  if (intent.targetRevision === null) {
+    ctx.addIssue({ code: "custom", path: ["targetRevision"], message: "a replace intent requires a targetRevision" });
+  } else if (intent.targetRevision === intent.baseRevision) {
+    ctx.addIssue({ code: "custom", path: ["targetRevision"], message: "targetRevision must differ from baseRevision" });
+  }
+});
+var AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES = [
+  "intent_revoked",
+  "intent_expired",
+  "placement_changed",
+  "profile_revision_changed"
+];
+var AgentMemoryIntentHostTerminalCodeSchema = z.enum(AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES);
+var AGENT_MEMORY_INTENT_REJECTION_CODES = [
+  "intent_invalid",
+  "path_invalid",
+  "memory_md_not_deletable",
+  "content_invalid",
+  "intent_digest_mismatch",
+  "agent_ref_mismatch",
+  "agent_home_unavailable",
+  ...AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES
+];
+var AgentMemoryIntentRejectionCodeSchema = z.enum(AGENT_MEMORY_INTENT_REJECTION_CODES);
+var AgentMemoryIntentFileObservationSchema = z.object({
+  exists: z.boolean(),
+  revision: AgentMemoryIntentRevisionSchema
+}).strict();
+var completionIdentity2 = {
+  intentId: z.uuid(),
+  agentRef: AgentHomeProjectionAgentRefSchema,
+  path: AgentMemoryIntentPathSchema,
+  operation: AgentMemoryIntentOperationSchema,
+  operationDigest: AgentMemoryIntentOperationDigestSchema
+};
+var AppliedCompletionSchema2 = z.object({ ...completionIdentity2, outcome: z.literal("applied"), result: AgentMemoryIntentFileObservationSchema }).strict();
+var ConflictCompletionSchema = z.object({ ...completionIdentity2, outcome: z.literal("conflict"), observed: AgentMemoryIntentFileObservationSchema }).strict();
+var RejectedCompletionSchema2 = z.object({ ...completionIdentity2, outcome: z.literal("rejected"), code: AgentMemoryIntentRejectionCodeSchema }).strict();
+var UncertainCompletionSchema = z.object({ ...completionIdentity2, outcome: z.literal("uncertain"), observed: AgentMemoryIntentFileObservationSchema }).strict();
+var AgentMemoryIntentCompletionSchema = z.discriminatedUnion("outcome", [
+  AppliedCompletionSchema2,
+  ConflictCompletionSchema,
+  RejectedCompletionSchema2,
+  UncertainCompletionSchema
+]);
+var AGENT_MEMORY_INTENT_READBACK_DISPOSITIONS = ["recorded", "idempotent", "conflict", "host_terminal"];
+var AgentMemoryIntentReadbackDispositionSchema = z.enum(AGENT_MEMORY_INTENT_READBACK_DISPOSITIONS);
+var AgentMemoryIntentReadbackSchema = z.object({
+  tenantId: z.string().min(1),
+  deviceId: z.string().min(1),
+  intentId: z.uuid(),
+  disposition: AgentMemoryIntentReadbackDispositionSchema,
+  completion: AgentMemoryIntentCompletionSchema,
+  recordedAt: z.iso.datetime({ offset: true })
+}).strict().superRefine((readback, ctx) => {
+  if (readback.completion.intentId !== readback.intentId) {
+    ctx.addIssue({ code: "custom", path: ["completion", "intentId"], message: "completion intentId must equal readback intentId" });
+  }
+  if (readback.disposition === "host_terminal" && (readback.completion.outcome !== "rejected" || !AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES.includes(readback.completion.code))) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["completion"],
+      message: `a host_terminal readback must carry a rejected completion with one of: ${AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES.join(", ")}`
+    });
+  }
+});
+var AGENT_MEMORY_INTENT_RESERVATIONS = ["held", "none"];
+var AgentMemoryIntentReservationSchema = z.enum(AGENT_MEMORY_INTENT_RESERVATIONS);
+var AgentMemoryIntentFetchRequestSchema = z.object({
+  intentId: z.uuid(),
+  reservation: AgentMemoryIntentReservationSchema
+}).strict();
+var AGENT_MEMORY_INTENT_FETCH_DISPOSITIONS = ["release", "withheld", "terminal", "deferred"];
+var AGENT_MEMORY_INTENT_FETCH_DISPOSITIONS_BY_RESERVATION = {
+  held: ["release", "withheld", "terminal"],
+  none: ["terminal", "deferred"]
+};
+function requireNoContent(intent, ctx, disposition) {
+  if (intent.content !== void 0) {
+    ctx.addIssue({ code: "custom", path: ["intent", "content"], message: `a ${disposition} fetch response never carries content` });
+  }
+}
+var ReleaseFetchResponseSchema = z.object({ disposition: z.literal("release"), intent: AgentMemoryIntentV1Schema }).strict().superRefine((response, ctx) => {
+  if (response.intent.operation === "replace" && response.intent.content === void 0) {
+    ctx.addIssue({ code: "custom", path: ["intent", "content"], message: "a replace release must carry content" });
+  }
+});
+var WithheldFetchResponseSchema = z.object({ disposition: z.literal("withheld"), intent: AgentMemoryIntentV1Schema, code: AgentMemoryIntentHostTerminalCodeSchema }).strict().superRefine((response, ctx) => requireNoContent(response.intent, ctx, "withheld"));
+var TerminalFetchResponseSchema = z.object({ disposition: z.literal("terminal"), intent: AgentMemoryIntentV1Schema, readback: AgentMemoryIntentReadbackSchema }).strict().superRefine((response, ctx) => {
+  requireNoContent(response.intent, ctx, "terminal");
+  const { intent, readback } = response;
+  if (readback.intentId !== intent.intentId) {
+    ctx.addIssue({ code: "custom", path: ["readback", "intentId"], message: "readback intentId must equal intent intentId" });
+  }
+  const completion = readback.completion;
+  if (completion.agentRef.agentId !== intent.agentRef.agentId || completion.agentRef.profileRevision !== intent.agentRef.profileRevision || completion.path !== intent.path || completion.operation !== intent.operation || completion.operationDigest !== intent.operationDigest) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["readback", "completion"],
+      message: "readback completion identity must equal the intent identity and operationDigest"
+    });
+  }
+});
+var DeferredFetchResponseSchema = z.object({ disposition: z.literal("deferred"), intent: AgentMemoryIntentV1Schema }).strict().superRefine((response, ctx) => requireNoContent(response.intent, ctx, "deferred"));
+var AgentMemoryIntentFetchResponseSchema = z.discriminatedUnion("disposition", [
+  ReleaseFetchResponseSchema,
+  WithheldFetchResponseSchema,
+  TerminalFetchResponseSchema,
+  DeferredFetchResponseSchema
+]);
+function agentMemoryIntentFetchResponseSchemaFor(reservation) {
+  const allowed = AGENT_MEMORY_INTENT_FETCH_DISPOSITIONS_BY_RESERVATION[AgentMemoryIntentReservationSchema.parse(reservation)];
+  return AgentMemoryIntentFetchResponseSchema.superRefine((response, ctx) => {
+    if (!allowed.includes(response.disposition)) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["disposition"],
+        message: `a ${reservation} reservation allows only: ${allowed.join(", ")}`
+      });
+    }
+  });
+}
+
+// src/version.ts
+var MAILBOX_READ_AHEAD_MAX_SEQS = 4096;
+var MAILBOX_READ_AHEAD_CAPABILITY = "mailbox-read-ahead";
+var PROTOCOL_VERSION = 1;
+var STRICT_AGENT_ONLY_CAPABILITY = "strict-agent-only";
+var CUSTOM_HARNESS_CAPABILITY = "custom-harness";
+var CAPABILITY_FLAGS = [
+  "steer",
+  "blob-upload",
+  "interactive-approval",
+  "approval_resolved",
+  "approval-targeting",
+  "result-document",
+  "dispatch-selection",
+  PROVIDER_PROFILE_BINDING_CAPABILITY,
+  "toolset-selection",
+  "agent-home-contract",
+  STRICT_AGENT_ONLY_CAPABILITY,
+  AGENT_EGRESS_POLICY_CAPABILITY,
+  AGENT_EGRESS_RELIABLE_ACK_CAPABILITY,
+  AGENT_MESSAGE_EGRESS_CAPABILITY,
+  AGENT_EGRESS_FRESH_SESSION_CAPABILITY,
+  AGENT_CONTENT_WORKSPACE_READ_CAPABILITY,
+  AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY,
+  AGENT_CONTENT_ARTIFACT_READ_CAPABILITY,
+  AGENT_HOME_PROJECTION_CAPABILITY,
+  AGENT_INPUT_PREPARATION_CAPABILITY,
+  TERMINAL_PROJECTION_SELECTION_CAPABILITY,
+  HOST_MCP_TASK_CONTEXT_CAPABILITY,
+  CUSTOM_HARNESS_CAPABILITY,
+  MAILBOX_READ_AHEAD_CAPABILITY,
+  PROVIDER_PROVISIONING_CAPABILITY,
+  AGENT_MEMORY_INTENT_CAPABILITY
+];
 var AGENT_MEMORY_PROJECTION_CAPABILITY = "agent.memory.projection";
 var AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES = 512 * 1024;
 var AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE = 2147483647;
@@ -1280,6 +1600,8 @@ var EnvelopeSchema = z.discriminatedUnion("type", [
   envelopeShape("agent.content.read", OPTIONAL_TASK_ID, REQUIRED_SEQ),
   envelopeShape("agent.home.projection", FORBIDDEN_TASK_ID, REQUIRED_SEQ),
   envelopeShape("agent.input.preparation", FORBIDDEN_TASK_ID, REQUIRED_SEQ),
+  envelopeShape("provider.provisioning.available", FORBIDDEN_TASK_ID, REQUIRED_SEQ),
+  envelopeShape("agent.memory.intent.available", FORBIDDEN_TASK_ID, REQUIRED_SEQ),
   envelopeShape("task.approve", REQUIRED_TASK_ID, REQUIRED_SEQ),
   envelopeShape("task.reject", REQUIRED_TASK_ID, REQUIRED_SEQ),
   envelopeShape("task.cancel", REQUIRED_TASK_ID, REQUIRED_SEQ),
@@ -1610,6 +1932,6 @@ function byokBlobContentPath(blobId) {
   return `/byok/blobs/${blobId}/content`;
 }
 
-export { AGENT_CONTENT_ARTIFACT_READ_CAPABILITY, AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY, AGENT_CONTENT_WORKSPACE_READ_CAPABILITY, AGENT_EGRESS_FRESH_SESSION_CAPABILITY, AGENT_EGRESS_POLICY_CAPABILITY, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY, AGENT_EVENT_SPILL_UNSTORED_REASON_MAX_LENGTH, AGENT_HOME_PROJECTION_CAPABILITY, AGENT_HOME_PROJECTION_MAX_BYTES, AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM, AGENT_INPUT_PREPARATION_CAPABILITY, AGENT_MEMORY_PROJECTION_CAPABILITY, AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE, AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES, AGENT_MESSAGE_EGRESS_CAPABILITY, AGENT_MESSAGE_MAX_BYTES, AGENT_REF_MAX_BYTES, AgentContentActorKindSchema, AgentContentActorSchema, AgentContentDecodeAsSchema, AgentContentMimeTypeSchema, AgentContentReadDecisionSchema, AgentContentReadDenialReasonSchema, AgentContentReadPayloadSchema, AgentContentReadSurfaceSchema, AgentContentReceiptPayloadSchema, AgentEgressAckPayloadSchema, AgentEgressActivityPolicySchema, AgentEgressContentHashSchema, AgentEgressDropReasonSchema, AgentEgressLaneSchema, AgentEgressPolicyRevisionSchema, AgentEgressPolicySchema, AgentEgressReliablePayloadSchema, AgentEventOrUnknownSchema, AgentEventSchema, AgentEventSpillSchema, AgentHomeProjectionAgentRefSchema, AgentHomeProjectionCompletionRequestSchema, AgentHomeProjectionHashSchema, AgentHomeProjectionOutcomeSchema, AgentHomeProjectionPayloadSchema, AgentHomeProjectionProfileRevisionSchema, AgentHomeProjectionReadbackSchema, AgentHomeProjectionStatusSchema, AgentHomeProjectionValueSchema, AgentInputPreparationPayloadSchema, AgentMemoryProjectionCommitRequestSchema, AgentMemoryProjectionCommitResponseSchema, AgentMemoryProjectionEraseResultSchema, AgentMemoryProjectionGrantRefSchema, AgentMemoryProjectionMeteringReceiptSchema, AgentMemoryProjectionMutationSchema, AgentMemoryProjectionReceiptSchema, AgentMemoryProjectionSessionRefSchema, AgentMemoryProjectionSnapshotSchema, AgentMemoryProjectionSourceSeqSchema, AgentMemoryProjectionWriterEpochSchema, AgentMessageContentTypeSchema, AgentMessageContractSchema, AgentMessageDestinationBindingSchema, AgentMessageDispositionPayloadSchema, AgentMessageEgressRequirementSchema, AgentMessageFreshnessCursorSchema, AgentMessagePublishPayloadSchema, AgentMessageServerContextSchema, AgentRefSchema, AgentReliableQuotaPolicySchema, BYOK_ACTIVITY_PATH, BYOK_AGENT_HOME_PROJECTIONS_PATH, BYOK_AGENT_HOME_PROJECTION_COMPLETION_ROUTE, BYOK_AGENT_MEMORY_PROJECTIONS_PATH, BYOK_BLOBS_PATH, BYOK_BLOB_CONTENT_ROUTE, BYOK_BLOB_FINALIZE_ROUTE, BYOK_BLOB_URL_ROUTE, BYOK_BOARD_CLAIM_ROUTE, BYOK_BOARD_PATH, BYOK_BOARD_STATUS_ROUTE, BYOK_BOARD_STREAM_PATH, BYOK_BOARD_UNCLAIM_ROUTE, BYOK_CAPABILITIES_PATH, BYOK_CHALLENGE_PATH, BYOK_EVENTS_PATH, BYOK_INPUT_PREPARATIONS_PATH, BYOK_INPUT_PREPARATION_COMPLETION_ROUTE, BYOK_INPUT_PREPARATION_STATUS_ROUTE, BYOK_MESSAGES_PATH, BYOK_PAIR_PATH, BYOK_PRESENCE_PATH, BYOK_RECORDS_PATH, BYOK_RECORD_ROUTE, BYOK_SKILL_PACKS_PATH, BYOK_SKILL_PACK_FILE_ROUTE, BYOK_TOKEN_PATH, BlobDownloadUrlResponseSchema, BlobRefSchema, CAPABILITY_FLAGS, CONFIGURED_TOOLSETS_MAX_ITEMS, CONTENT_HASH_RE, CUSTOM_HARNESS_CAPABILITY, ChallengeRequestSchema, ChallengeResponseSchema, ConfiguredToolsetsSchema, ConnAckPayloadSchema, ConnHelloPayloadSchema, ContentReadPolicySchema, CreateBlobRequestSchema, CreateBlobResponseSchema, DAEMON_TO_SERVER_TYPES, DispatchSelectionSchema, EnvelopeParseError, EnvelopeSchema, EnvelopeValidationError, EventsPollQuerySchema, EventsPollResponseSchema, HOST_MCP_TASK_CONTEXT_CAPABILITY, HarnessIdSchema, HarnessInfoSchema, HarnessInventorySchema, INPUT_PREPARATION_WIRE_VERSION, InputPreparationAccountingPolicyRefSchema, InputPreparationArtifactSummarySchema, InputPreparationBindingSchema, InputPreparationCompletionRequestSchema, InputPreparationContentHashSchema, InputPreparationContextDocumentSchema, InputPreparationCounterEvidenceSchema, InputPreparationCounterProviderEvidenceSchema, InputPreparationCounterTargetSchema, InputPreparationHostCanonicalAssistantMessageSchema, InputPreparationMessageSchema, InputPreparationModelCostSchema, InputPreparationModelSchema, InputPreparationOfferBindingSchema, InputPreparationOptionsSchema, InputPreparationPermissionModeSchema, InputPreparationPolicyRevisionSchema, InputPreparationProfileIdSchema, InputPreparationProjectionSchema, InputPreparationPromptSnapshotSchema, InputPreparationReadbackSchema, InputPreparationReadinessReasonSchema, InputPreparationReceiptSummarySchema, InputPreparationReferenceSchema, InputPreparationRejectionReasonSchema, InputPreparationResidualKeySchema, InputPreparationResidualValueClassSchema, InputPreparationRuntimeIdentitySchema, InputPreparationSelectionSchema, InputPreparationSourceSchema, InputPreparationStateSchema, InputPreparationStatusQuerySchema, InputPreparationStatusSchema, InputPreparationToolImplementationKindSchema, InputPreparationUserMessageSchema, KNOWN_AGENT_EVENT_TYPES, MAILBOX_READ_AHEAD_CAPABILITY, MAILBOX_READ_AHEAD_MAX_SEQS, MAX_MESSAGES_PER_BATCH, MESSAGE_PAYLOAD_SCHEMAS, MESSAGE_TYPES, MessagesSendRequestSchema, MessagesSendResponseSchema, PAIR_RESPONSE_TENANT_ID_MAX_LENGTH, PERMISSION_MODES, PROTOCOL_VERSION, PROVIDER_MODEL_CAPABILITIES, PROVIDER_PROFILE_BINDING_CAPABILITY, PairRequestSchema, PairResponseSchema, PairResponseTenantIdSchema, PermissionPolicySchema, PresencePublishRequestSchema, ProtocolError, ProtocolVersionNumberSchema, ProviderModelCapabilitySchema, ProviderProfileBindingSchema, ProviderProfileHashSchema, ProviderProfileRefSchema, ProviderProfileRevisionSchema, RESULT_DOCUMENT_MAX_BYTES, RequiredToolsetsSchema, RuntimeCapabilitiesSchema, RuntimeIdSchema, RuntimeInfoSchema, SERVER_TO_DAEMON_TYPES, STRICT_AGENT_ONLY_CAPABILITY, TASK_OFFER_TYPES, TASK_STATES, TASK_TRANSITIONS, TERMINAL_INFERENCE_USAGE_CLIENT_VERSION_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_MAX_DURATION_MS, TERMINAL_INFERENCE_USAGE_MAX_TOKENS, TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_PROVIDER_MAX_LENGTH, TERMINAL_PROJECTION_SELECTION_CAPABILITY, TaskApprovalResolvedPayloadSchema, TaskApprovePayloadSchema, TaskArtifactPayloadSchema, TaskAwaitApprovalPayloadSchema, TaskCancelPayloadSchema, TaskCancelledPayloadSchema, TaskClaimPayloadSchema, TaskCompletePayloadSchema, TaskDeclinePayloadSchema, TaskFailPayloadSchema, TaskOfferForAgentPayloadSchema, TaskOfferForAgentWithEgressFreshPayloadSchema, TaskOfferForAgentWithEgressPayloadSchema, TaskOfferPayloadSchema, TaskOfferPreparedPayloadSchema, TaskOfferWithToolsetsPayloadSchema, TaskProgressPayloadSchema, TaskRejectPayloadSchema, TaskStartedPayloadSchema, TaskSteerPayloadSchema, TerminalInferenceUsageSchema, TerminalPreparedObservationSchema, TerminalProjectionContractSchema, TerminalProjectionSelectionSchema, TokenRequestSchema, TokenResponseSchema, ToolsetIdSchema, UnknownAgentEventSchema, UnknownMessageTypeError, agentMemoryProjectionBase64UrlByteLength, byokAgentHomeProjectionCompletionPath, byokBlobContentPath, byokBlobFinalizePath, byokBlobUrlPath, byokInputPreparationCompletionPath, byokInputPreparationStatusPath, byokRecordPath, byokSkillPackFilePath, canTransition, checkResultDocument, createEnvelope, decodeEnvelope, encodeEnvelope, isKnownAgentEvent, isServerToDaemonType, isTaskOfferType, parseMessage, partitionAgentEvents };
+export { AGENT_CONTENT_ARTIFACT_READ_CAPABILITY, AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY, AGENT_CONTENT_WORKSPACE_READ_CAPABILITY, AGENT_EGRESS_FRESH_SESSION_CAPABILITY, AGENT_EGRESS_POLICY_CAPABILITY, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY, AGENT_EVENT_SPILL_UNSTORED_REASON_MAX_LENGTH, AGENT_HOME_PROJECTION_CAPABILITY, AGENT_HOME_PROJECTION_MAX_BYTES, AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM, AGENT_INPUT_PREPARATION_CAPABILITY, AGENT_MEMORY_INTENT_APPROVAL_REF_MAX_BYTES, AGENT_MEMORY_INTENT_CAPABILITY, AGENT_MEMORY_INTENT_CONTENT_MAX_BYTES, AGENT_MEMORY_INTENT_FETCH_DISPOSITIONS, AGENT_MEMORY_INTENT_FETCH_DISPOSITIONS_BY_RESERVATION, AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES, AGENT_MEMORY_INTENT_OPERATIONS, AGENT_MEMORY_INTENT_PATH_MAX_BYTES, AGENT_MEMORY_INTENT_READBACK_DISPOSITIONS, AGENT_MEMORY_INTENT_REJECTION_CODES, AGENT_MEMORY_INTENT_RESERVATIONS, AGENT_MEMORY_PROJECTION_CAPABILITY, AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE, AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES, AGENT_MESSAGE_EGRESS_CAPABILITY, AGENT_MESSAGE_MAX_BYTES, AGENT_REF_MAX_BYTES, AgentContentActorKindSchema, AgentContentActorSchema, AgentContentDecodeAsSchema, AgentContentMimeTypeSchema, AgentContentReadDecisionSchema, AgentContentReadDenialReasonSchema, AgentContentReadPayloadSchema, AgentContentReadSurfaceSchema, AgentContentReceiptPayloadSchema, AgentEgressAckPayloadSchema, AgentEgressActivityPolicySchema, AgentEgressContentHashSchema, AgentEgressDropReasonSchema, AgentEgressLaneSchema, AgentEgressPolicyRevisionSchema, AgentEgressPolicySchema, AgentEgressReliablePayloadSchema, AgentEventOrUnknownSchema, AgentEventSchema, AgentEventSpillSchema, AgentHomeProjectionAgentRefSchema, AgentHomeProjectionCompletionRequestSchema, AgentHomeProjectionHashSchema, AgentHomeProjectionOutcomeSchema, AgentHomeProjectionPayloadSchema, AgentHomeProjectionProfileRevisionSchema, AgentHomeProjectionReadbackSchema, AgentHomeProjectionStatusSchema, AgentHomeProjectionValueSchema, AgentInputPreparationPayloadSchema, AgentMemoryIntentApprovalRefSchema, AgentMemoryIntentAvailablePayloadSchema, AgentMemoryIntentCompletionSchema, AgentMemoryIntentContentSchema, AgentMemoryIntentFetchRequestSchema, AgentMemoryIntentFetchResponseSchema, AgentMemoryIntentFileObservationSchema, AgentMemoryIntentHostTerminalCodeSchema, AgentMemoryIntentOperationDigestSchema, AgentMemoryIntentOperationSchema, AgentMemoryIntentPathSchema, AgentMemoryIntentReadbackDispositionSchema, AgentMemoryIntentReadbackSchema, AgentMemoryIntentRejectionCodeSchema, AgentMemoryIntentReservationSchema, AgentMemoryIntentRevisionSchema, AgentMemoryIntentV1Schema, AgentMemoryProjectionCommitRequestSchema, AgentMemoryProjectionCommitResponseSchema, AgentMemoryProjectionEraseResultSchema, AgentMemoryProjectionGrantRefSchema, AgentMemoryProjectionMeteringReceiptSchema, AgentMemoryProjectionMutationSchema, AgentMemoryProjectionReceiptSchema, AgentMemoryProjectionSessionRefSchema, AgentMemoryProjectionSnapshotSchema, AgentMemoryProjectionSourceSeqSchema, AgentMemoryProjectionWriterEpochSchema, AgentMessageContentTypeSchema, AgentMessageContractSchema, AgentMessageDestinationBindingSchema, AgentMessageDispositionPayloadSchema, AgentMessageEgressRequirementSchema, AgentMessageFreshnessCursorSchema, AgentMessagePublishPayloadSchema, AgentMessageServerContextSchema, AgentRefSchema, AgentReliableQuotaPolicySchema, BYOK_ACTIVITY_PATH, BYOK_AGENT_HOME_PROJECTIONS_PATH, BYOK_AGENT_HOME_PROJECTION_COMPLETION_ROUTE, BYOK_AGENT_MEMORY_PROJECTIONS_PATH, BYOK_BLOBS_PATH, BYOK_BLOB_CONTENT_ROUTE, BYOK_BLOB_FINALIZE_ROUTE, BYOK_BLOB_URL_ROUTE, BYOK_BOARD_CLAIM_ROUTE, BYOK_BOARD_PATH, BYOK_BOARD_STATUS_ROUTE, BYOK_BOARD_STREAM_PATH, BYOK_BOARD_UNCLAIM_ROUTE, BYOK_CAPABILITIES_PATH, BYOK_CHALLENGE_PATH, BYOK_EVENTS_PATH, BYOK_INPUT_PREPARATIONS_PATH, BYOK_INPUT_PREPARATION_COMPLETION_ROUTE, BYOK_INPUT_PREPARATION_STATUS_ROUTE, BYOK_MESSAGES_PATH, BYOK_PAIR_PATH, BYOK_PRESENCE_PATH, BYOK_RECORDS_PATH, BYOK_RECORD_ROUTE, BYOK_SKILL_PACKS_PATH, BYOK_SKILL_PACK_FILE_ROUTE, BYOK_TOKEN_PATH, BlobDownloadUrlResponseSchema, BlobRefSchema, CAPABILITY_FLAGS, CONFIGURED_TOOLSETS_MAX_ITEMS, CONTENT_HASH_RE, CUSTOM_HARNESS_CAPABILITY, ChallengeRequestSchema, ChallengeResponseSchema, ConfiguredToolsetsSchema, ConnAckPayloadSchema, ConnHelloPayloadSchema, ContentReadPolicySchema, CreateBlobRequestSchema, CreateBlobResponseSchema, DAEMON_TO_SERVER_TYPES, DispatchSelectionSchema, EnvelopeParseError, EnvelopeSchema, EnvelopeValidationError, EventsPollQuerySchema, EventsPollResponseSchema, HOST_MCP_TASK_CONTEXT_CAPABILITY, HarnessIdSchema, HarnessInfoSchema, HarnessInventorySchema, INPUT_PREPARATION_WIRE_VERSION, InputPreparationAccountingPolicyRefSchema, InputPreparationArtifactSummarySchema, InputPreparationBindingSchema, InputPreparationCompletionRequestSchema, InputPreparationContentHashSchema, InputPreparationContextDocumentSchema, InputPreparationCounterEvidenceSchema, InputPreparationCounterProviderEvidenceSchema, InputPreparationCounterTargetSchema, InputPreparationHostCanonicalAssistantMessageSchema, InputPreparationMessageSchema, InputPreparationModelCostSchema, InputPreparationModelSchema, InputPreparationOfferBindingSchema, InputPreparationOptionsSchema, InputPreparationPermissionModeSchema, InputPreparationPolicyRevisionSchema, InputPreparationProfileIdSchema, InputPreparationProjectionSchema, InputPreparationPromptSnapshotSchema, InputPreparationReadbackSchema, InputPreparationReadinessReasonSchema, InputPreparationReceiptSummarySchema, InputPreparationReferenceSchema, InputPreparationRejectionReasonSchema, InputPreparationResidualKeySchema, InputPreparationResidualValueClassSchema, InputPreparationRuntimeIdentitySchema, InputPreparationSelectionSchema, InputPreparationSourceSchema, InputPreparationStateSchema, InputPreparationStatusQuerySchema, InputPreparationStatusSchema, InputPreparationToolImplementationKindSchema, InputPreparationUserMessageSchema, KNOWN_AGENT_EVENT_TYPES, MAILBOX_READ_AHEAD_CAPABILITY, MAILBOX_READ_AHEAD_MAX_SEQS, MAX_MESSAGES_PER_BATCH, MESSAGE_PAYLOAD_SCHEMAS, MESSAGE_TYPES, MessagesSendRequestSchema, MessagesSendResponseSchema, PAIR_RESPONSE_TENANT_ID_MAX_LENGTH, PERMISSION_MODES, PROTOCOL_VERSION, PROVIDER_MODEL_CAPABILITIES, PROVIDER_PROFILE_BINDING_CAPABILITY, PROVIDER_PROVISIONING_CAPABILITY, PROVIDER_PROVISIONING_DISPOSITIONS, PROVIDER_PROVISIONING_HOST_TERMINAL_CODES, PROVIDER_PROVISIONING_KEY_CHECK_RESULTS, PROVIDER_PROVISIONING_OPERATIONS, PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM, PROVIDER_PROVISIONING_REJECTION_CODES, PROVIDER_SECRET_SEALING_KEY_REGISTER_OPERATION, PairRequestSchema, PairResponseSchema, PairResponseTenantIdSchema, PermissionPolicySchema, PreparedAgentMemoryModeSchema, PresencePublishRequestSchema, ProtocolError, ProtocolVersionNumberSchema, ProviderModelCapabilitySchema, ProviderProfileBindingSchema, ProviderProfileHashSchema, ProviderProfileRefSchema, ProviderProfileRevisionSchema, ProviderProvisioningAvailablePayloadSchema, ProviderProvisioningCompletionSchema, ProviderProvisioningDispositionSchema, ProviderProvisioningKeyCheckResultSchema, ProviderProvisioningKeyCheckSchema, ProviderProvisioningOperationDigestSchema, ProviderProvisioningOperationGenerationSchema, ProviderProvisioningOperationSchema, ProviderProvisioningProviderStatusSchema, ProviderProvisioningReadbackSchema, ProviderProvisioningRejectionCodeSchema, RESULT_DOCUMENT_MAX_BYTES, RequiredToolsetsSchema, RuntimeCapabilitiesSchema, RuntimeIdSchema, RuntimeInfoSchema, SERVER_TO_DAEMON_TYPES, STRICT_AGENT_ONLY_CAPABILITY, TASK_OFFER_TYPES, TASK_STATES, TASK_TRANSITIONS, TERMINAL_INFERENCE_USAGE_CLIENT_VERSION_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_MAX_DURATION_MS, TERMINAL_INFERENCE_USAGE_MAX_TOKENS, TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_PROVIDER_MAX_LENGTH, TERMINAL_PROJECTION_SELECTION_CAPABILITY, TaskApprovalResolvedPayloadSchema, TaskApprovePayloadSchema, TaskArtifactPayloadSchema, TaskAwaitApprovalPayloadSchema, TaskCancelPayloadSchema, TaskCancelledPayloadSchema, TaskClaimPayloadSchema, TaskCompletePayloadSchema, TaskDeclinePayloadSchema, TaskFailPayloadSchema, TaskOfferForAgentPayloadSchema, TaskOfferForAgentWithEgressFreshPayloadSchema, TaskOfferForAgentWithEgressPayloadSchema, TaskOfferPayloadSchema, TaskOfferPreparedPayloadSchema, TaskOfferWithToolsetsPayloadSchema, TaskProgressPayloadSchema, TaskRejectPayloadSchema, TaskStartedPayloadSchema, TaskSteerPayloadSchema, TerminalInferenceUsageSchema, TerminalPreparedObservationSchema, TerminalProjectionContractSchema, TerminalProjectionSelectionSchema, TokenRequestSchema, TokenResponseSchema, ToolsetIdSchema, UnknownAgentEventSchema, UnknownMessageTypeError, agentMemoryIntentFetchResponseSchemaFor, agentMemoryProjectionBase64UrlByteLength, byokAgentHomeProjectionCompletionPath, byokBlobContentPath, byokBlobFinalizePath, byokBlobUrlPath, byokInputPreparationCompletionPath, byokInputPreparationStatusPath, byokRecordPath, byokSkillPackFilePath, canTransition, checkResultDocument, createEnvelope, decodeEnvelope, encodeEnvelope, isKnownAgentEvent, isServerToDaemonType, isTaskOfferType, parseMessage, partitionAgentEvents };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map