@byok-sdk/protocol 0.23.0 → 0.25.0-rc.1

package/dist/index.js

@@ -30,18 +30,11 @@ var ContentReadPolicySchema = z.object({
   maxBytes: POSITIVE_LIMIT,
   allowedMimeTypes: z.array(AgentContentMimeTypeSchema).min(1).max(32)
 }).strict();
-var AgentEgressActivityPolicySchema = z.discriminatedUnion("mode", [
-  z.object({
-    mode: z.literal("metadata-status"),
-    delivery: z.literal("latest-value")
-  }).strict(),
-  z.object({
-    mode: z.literal("contentful-trajectory"),
-    delivery: z.literal("latest-value"),
-    maxCoalesceMs: POSITIVE_LIMIT,
-    maxEventBytes: POSITIVE_LIMIT
-  }).strict()
-]);
+var AgentEgressActivityPolicySchema = z.object({
+  delivery: z.literal("latest-value"),
+  maxCoalesceMs: POSITIVE_LIMIT,
+  maxEventBytes: POSITIVE_LIMIT
+}).strict();
 var AgentReliableQuotaPolicySchema = z.object({
   maxPendingEventsPerAgent: POSITIVE_LIMIT,
   maxPendingBytesPerAgent: POSITIVE_LIMIT,
@@ -61,7 +54,6 @@ var AgentEgressLaneSchema = z.enum(["reliable", "latest-value"]);
 var AgentEgressDropReasonSchema = z.enum([
   "policy_denied",
   "capability_missing",
-  "sanitizer_rejected",
   "quota_exceeded",
   "backpressure",
   "coalesced",
@@ -113,24 +105,13 @@ var AgentHomeProjectionValueSchema = z.json().refine(
   (value) => new TextEncoder().encode(JSON.stringify(value)).byteLength <= AGENT_HOME_PROJECTION_MAX_BYTES,
   `projection must not exceed ${AGENT_HOME_PROJECTION_MAX_BYTES} UTF-8 JSON bytes`
 );
-var PERMISSION_MODES = ["auto", "confirm", "readonly", "plan"];
-var PermissionPolicySchema = z.object({
-  mode: z.enum(PERMISSION_MODES),
-  allowTools: z.array(z.string()).optional(),
-  denyTools: z.array(z.string()).optional(),
-  workspaceRoot: z.string().optional(),
-  network: z.boolean().optional()
-}).strict();
-
-// src/input-preparation.ts
-var INPUT_PREPARATION_WIRE_VERSION = 8;
+var INPUT_PREPARATION_WIRE_VERSION = 9;
 var AGENT_INPUT_PREPARATION_CAPABILITY = `agent-input-preparation-v${INPUT_PREPARATION_WIRE_VERSION}`;
 var InputPreparationContentHashSchema = AgentEgressContentHashSchema;
 var OPAQUE_ID = z.string().min(1).max(512).regex(/^[^\u0000-\u001f\u007f]+$/u, "control identifiers must not contain control characters");
 var OPAQUE_TEXT = z.string().min(1).max(2048).regex(/^[^\u0000-\u001f\u007f]+$/u, "control text must not contain control characters");
 var InputPreparationPolicyRevisionSchema = OPAQUE_ID;
 var InputPreparationProfileIdSchema = OPAQUE_ID;
-var InputPreparationPermissionModeSchema = z.enum(PERMISSION_MODES);
 var PreparedAgentMemoryModeSchema = z.enum(["none", "read", "read-write"]);
 var InputPreparationSourceSchema = z.object({ revision: OPAQUE_ID, digest: OPAQUE_ID }).strict();
 var InputPreparationModelCostSchema = z.object({
@@ -245,7 +226,6 @@ var InputPreparationReadinessReasonSchema = z.enum([
   "accounting_policy_missing",
   /** The named policy was ruled for a different runtime, endpoint or model. */
   "accounting_policy_inapplicable",
-  "executor_identity_unproven",
   /**
    * The record was prepared against a runtime contract this build no longer
    * speaks: its binding declares a prepared-compiler version other than the one
@@ -298,7 +278,6 @@ var InputPreparationCounterEvidenceSchema = z.object({
   calledAt: z.iso.datetime({ offset: true }),
   completedAt: z.iso.datetime({ offset: true })
 }).strict();
-var InputPreparationToolImplementationKindSchema = z.string().regex(/^(?:attested|unavailable:[a-z_]{1,64})$/u, 'a tool implementation kind is "attested" or "unavailable:<reason>"');
 var InputPreparationResidualValueClassSchema = z.enum([
   "constant",
   "boolean",
@@ -331,7 +310,7 @@ var InputPreparationArtifactSummarySchema = z.object({
   residual: z.array(InputPreparationResidualKeySchema).max(64),
   observationDigest: OPAQUE_ID,
   toolBindingDigest: OPAQUE_ID,
-  toolImplementationKinds: z.record(OPAQUE_ID, InputPreparationToolImplementationKindSchema)
+  toolNames: z.array(OPAQUE_ID)
 }).strict();
 var InputPreparationBindingSchema = z.object({
   agentMemory: PreparedAgentMemoryModeSchema,
@@ -343,14 +322,6 @@ var InputPreparationBindingSchema = z.object({
   source: InputPreparationSourceSchema,
   target: InputPreparationCounterTargetSchema,
   policyRevision: OPAQUE_ID,
-  /**
-   * The mode the counted manifest was filtered for. Recorded on the binding
-   * rather than only inside the request digest so a consumer can COMPARE it
-   * without re-deriving the digest: an Execution offered under a different
-   * mode is an Execution whose registered tool set differs from the one
-   * these tokens were counted for.
-   */
-  permissionMode: InputPreparationPermissionModeSchema,
   runtime: InputPreparationRuntimeIdentitySchema,
   requestDigest: OPAQUE_ID,
   /**
@@ -406,31 +377,14 @@ var InputPreparationRejectionReasonSchema = z.enum([
   "context_hash_mismatch",
   "toolsets_unobservable",
   "deadline_elapsed",
-  /**
-   * The device could not prove a non-writable launch directory (or a trusted
-   * launcher) for the MCP toolset servers this preparation names, so it
-   * refused rather than observing them in a directory the agent's own uid can
-   * write. The specific `TrustedLaunchCwdUnavailableReason` travels in the
-   * receipt's `detail`; it is not widened into a spawn.
-   */
-  "launch_boundary_unavailable",
   /**
    * A repeat of an already-recorded `requestId` arrived after the facts its
    * executor fingerprints were frozen against changed — a toolset definition
-   * revision, the launch attestation, or an implementation identity that no
-   * longer measures the same. The recorded receipt is not re-derived and no
+   * revision or a configured server argv. The recorded receipt is not re-derived and no
    * server is re-probed; the repeat is refused so the caller mints a new
    * preparation instead of silently receiving one bound to stale evidence.
    */
   "observation_drift",
-  /**
-   * The declared `permissionMode` is not one this device admits: it exceeds
-   * the operator's configured ceiling. The requester's declaration is INTENT,
-   * not authorization — it goes through the same merge that admits a task
-   * offer's `policy.mode` — and an unadmitted mode refuses rather than being
-   * silently narrowed to one the device would allow.
-   */
-  "permission_mode_denied",
   /**
    * The device compiled the input, then found that the `prompt_prepared` frame
    * the runtime would have to be handed exceeds the single-frame byte cap that
@@ -614,40 +568,6 @@ var ProviderProvisioningReadbackSchema = z.object({
     });
   }
 });
-
-// src/version.ts
-var MAILBOX_READ_AHEAD_MAX_SEQS = 4096;
-var MAILBOX_READ_AHEAD_CAPABILITY = "mailbox-read-ahead";
-var PROTOCOL_VERSION = 1;
-var STRICT_AGENT_ONLY_CAPABILITY = "strict-agent-only";
-var CUSTOM_HARNESS_CAPABILITY = "custom-harness";
-var CAPABILITY_FLAGS = [
-  "steer",
-  "blob-upload",
-  "interactive-approval",
-  "approval_resolved",
-  "approval-targeting",
-  "result-document",
-  "dispatch-selection",
-  PROVIDER_PROFILE_BINDING_CAPABILITY,
-  "toolset-selection",
-  "agent-home-contract",
-  STRICT_AGENT_ONLY_CAPABILITY,
-  AGENT_EGRESS_POLICY_CAPABILITY,
-  AGENT_EGRESS_RELIABLE_ACK_CAPABILITY,
-  AGENT_MESSAGE_EGRESS_CAPABILITY,
-  AGENT_EGRESS_FRESH_SESSION_CAPABILITY,
-  AGENT_CONTENT_WORKSPACE_READ_CAPABILITY,
-  AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY,
-  AGENT_CONTENT_ARTIFACT_READ_CAPABILITY,
-  AGENT_HOME_PROJECTION_CAPABILITY,
-  AGENT_INPUT_PREPARATION_CAPABILITY,
-  TERMINAL_PROJECTION_SELECTION_CAPABILITY,
-  HOST_MCP_TASK_CONTEXT_CAPABILITY,
-  CUSTOM_HARNESS_CAPABILITY,
-  MAILBOX_READ_AHEAD_CAPABILITY,
-  PROVIDER_PROVISIONING_CAPABILITY
-];
 var CONTENT_HASH_RE = /^sha256:[0-9a-f]{64}$/;
 var BlobRefSchema = z.object({
   blobId: z.string(),
@@ -709,7 +629,11 @@ var AgentEventSchema = z.discriminatedUnion("type", [
     cachedInputTokens: z.number().int().nonnegative().optional(),
     outputTokens: z.number().int().nonnegative().optional(),
     reasoningTokens: z.number().int().nonnegative().optional(),
-    totalTokens: z.number().int().nonnegative().optional()
+    totalTokens: z.number().int().nonnegative().optional(),
+    // Context occupancy is independent of provider cost counters. Unknown stays absent.
+    contextTokens: z.number().int().nonnegative().optional(),
+    contextWindow: z.number().int().positive().optional(),
+    contextSource: z.enum(["provider", "estimate"]).optional()
   })
 ]);
 var KNOWN_AGENT_EVENT_TYPES = z.toJSONSchema(AgentEventSchema).oneOf.map((branch) => branch.properties.type.const);
@@ -733,6 +657,8 @@ function partitionAgentEvents(events) {
   }
   return { known, unknown };
 }
+
+// src/messages.ts
 var MAX_INLINE_BYTES = 64 * 1024;
 function isWithinInlineByteLimit(value) {
   return new TextEncoder().encode(value).length <= MAX_INLINE_BYTES;
@@ -744,8 +670,7 @@ var RuntimeCapabilitiesSchema = z.object({
   resume: z.boolean().optional(),
   approvalInteractive: z.boolean().optional(),
   /** Whether this runtime can project a locally configured MCP toolset into one task. */
-  mcpToolsets: z.boolean().optional(),
-  permissionModes: z.array(z.string()).optional()
+  mcpToolsets: z.boolean().optional()
 });
 var RuntimeInfoSchema = z.object({
   id: RuntimeIdSchema,
@@ -839,7 +764,6 @@ var DispatchSelectionSchema = z.discriminatedUnion("lane", [
 ]);
 var TaskOfferPayloadSchema = z.object({
   instruction: z.union([z.string(), InstructionBlobRefSchema]),
-  policy: PermissionPolicySchema,
   runtime: RuntimeIdSchema.optional(),
   harnessId: HarnessIdSchema.optional(),
   dispatchSelection: DispatchSelectionSchema.optional(),
@@ -856,7 +780,6 @@ var TaskOfferWithToolsetsPayloadSchema = TaskOfferPayloadSchema.extend({
 }).strict();
 var TaskOfferForAgentPayloadSchema = z.object({
   instruction: z.union([z.string(), InstructionBlobRefSchema]),
-  policy: PermissionPolicySchema,
   agentRef: AgentRefSchema,
   requiredToolsets: RequiredToolsetsSchema.optional(),
   runtime: RuntimeIdSchema.optional(),
@@ -891,7 +814,7 @@ var TaskOfferPreparedPayloadSchema = TaskOfferForAgentPayloadSchema.omit({
 }).strict();
 var EGRESS_SAFE_VALUE = z.json().refine(
   (value) => new TextEncoder().encode(JSON.stringify(value)).byteLength <= 256 * 1024,
-  "sanitized egress payload exceeds 256KiB"
+  "egress payload exceeds 256KiB"
 );
 var EGRESS_SESSION_REF = z.string().min(1).max(512);
 var AgentEgressReliablePayloadSchema = z.object({
@@ -1020,6 +943,10 @@ var AgentHomeProjectionPayloadSchema = z.object({
   projectionHash: AgentHomeProjectionHashSchema,
   projection: AgentHomeProjectionValueSchema
 }).strict();
+var AgentMemoryIntentAvailablePayloadSchema = z.object({
+  intentId: z.uuid(),
+  agentRef: AgentHomeProjectionAgentRefSchema
+}).strict();
 var InputPreparationInlineContextSchema = z.object({
   inline: z.string().refine(isWithinInlineByteLimit, `inline context must not exceed ${MAX_INLINE_BYTES} UTF-8 bytes`)
 }).strict();
@@ -1043,7 +970,6 @@ var AgentInputPreparationPayloadSchema = z.object({
   deadlineAt: z.iso.datetime({ offset: true }),
   context: z.union([InputPreparationInlineContextSchema, InputPreparationBlobContextSchema]),
   requiredToolsets: z.array(ToolsetIdSchema).max(16).superRefine((ids, ctx) => rejectDuplicateToolsets(ids, ctx, "required")),
-  permissionMode: InputPreparationPermissionModeSchema,
   /**
    * The Host's accounting ruling for this preparation, carried verbatim onto
    * the receipt's binding. Optional and defaulted NOWHERE: a payload that
@@ -1240,6 +1166,7 @@ var MESSAGE_PAYLOAD_SCHEMAS = {
   "agent.home.projection": AgentHomeProjectionPayloadSchema,
   "agent.input.preparation": AgentInputPreparationPayloadSchema,
   "provider.provisioning.available": ProviderProvisioningAvailablePayloadSchema,
+  "agent.memory.intent.available": AgentMemoryIntentAvailablePayloadSchema,
   "task.approve": TaskApprovePayloadSchema,
   "task.reject": TaskRejectPayloadSchema,
   "task.cancel": TaskCancelPayloadSchema,
@@ -1270,6 +1197,7 @@ var SERVER_TO_DAEMON_TYPES = [
   "agent.home.projection",
   "agent.input.preparation",
   "provider.provisioning.available",
+  "agent.memory.intent.available",
   "task.approve",
   "task.reject",
   "task.cancel",
@@ -1291,7 +1219,204 @@ var DAEMON_TO_SERVER_TYPES = [
   "agent.content.receipt"
 ];
 
-// src/agent-memory-projection.ts
+// src/agent-memory-intent.ts
+var AGENT_MEMORY_INTENT_CAPABILITY = "agent-memory-intent.v1";
+var AGENT_MEMORY_INTENT_CONTENT_MAX_BYTES = 262144;
+var AGENT_MEMORY_INTENT_PATH_MAX_BYTES = 1024;
+var AGENT_MEMORY_INTENT_APPROVAL_REF_MAX_BYTES = 128;
+var SHA256_REVISION = /^sha256:[0-9a-f]{64}$/u;
+var AgentMemoryIntentRevisionSchema = z.string().regex(SHA256_REVISION, "revision must be lowercase sha256:<64 hex>");
+var AgentMemoryIntentOperationDigestSchema = z.string().regex(SHA256_REVISION, "operationDigest must be lowercase sha256:<64 hex>");
+var AgentMemoryIntentPathSchema = z.string().min(1).max(AGENT_MEMORY_INTENT_PATH_MAX_BYTES).regex(/^[\x20\x21\x23-\x5b\x5d-\x7e]+$/u, "path must be printable ASCII without quote or backslash");
+var AgentMemoryIntentApprovalRefSchema = z.string().regex(
+  new RegExp(`^[A-Za-z0-9._:-]{1,${AGENT_MEMORY_INTENT_APPROVAL_REF_MAX_BYTES}}$`, "u"),
+  `approvalRef must be 1..${AGENT_MEMORY_INTENT_APPROVAL_REF_MAX_BYTES} characters of [A-Za-z0-9._:-]`
+);
+var LONE_SURROGATE = /[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/u;
+var utf8 = new TextEncoder();
+var AgentMemoryIntentContentSchema = z.string().refine((value) => !LONE_SURROGATE.test(value), "content must be well-formed Unicode (encodable as UTF-8)").refine(
+  (value) => utf8.encode(value).byteLength <= AGENT_MEMORY_INTENT_CONTENT_MAX_BYTES,
+  `content must not exceed ${AGENT_MEMORY_INTENT_CONTENT_MAX_BYTES} UTF-8 bytes`
+);
+var AGENT_MEMORY_INTENT_OPERATIONS = ["replace", "delete"];
+var AgentMemoryIntentOperationSchema = z.enum(AGENT_MEMORY_INTENT_OPERATIONS);
+var AgentMemoryIntentV1Schema = z.object({
+  intentId: z.uuid(),
+  agentRef: AgentHomeProjectionAgentRefSchema,
+  path: AgentMemoryIntentPathSchema,
+  operation: AgentMemoryIntentOperationSchema,
+  baseRevision: AgentMemoryIntentRevisionSchema,
+  targetRevision: AgentMemoryIntentRevisionSchema.nullable(),
+  content: AgentMemoryIntentContentSchema.optional(),
+  approvalRef: AgentMemoryIntentApprovalRefSchema,
+  operationDigest: AgentMemoryIntentOperationDigestSchema
+}).strict().superRefine((intent, ctx) => {
+  if (intent.operation === "delete") {
+    if (intent.targetRevision !== null) {
+      ctx.addIssue({ code: "custom", path: ["targetRevision"], message: "a delete intent has a null targetRevision" });
+    }
+    if (intent.content !== void 0) {
+      ctx.addIssue({ code: "custom", path: ["content"], message: "a delete intent never carries content" });
+    }
+    return;
+  }
+  if (intent.targetRevision === null) {
+    ctx.addIssue({ code: "custom", path: ["targetRevision"], message: "a replace intent requires a targetRevision" });
+  } else if (intent.targetRevision === intent.baseRevision) {
+    ctx.addIssue({ code: "custom", path: ["targetRevision"], message: "targetRevision must differ from baseRevision" });
+  }
+});
+var AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES = [
+  "intent_revoked",
+  "intent_expired",
+  "placement_changed",
+  "profile_revision_changed"
+];
+var AgentMemoryIntentHostTerminalCodeSchema = z.enum(AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES);
+var AGENT_MEMORY_INTENT_REJECTION_CODES = [
+  "intent_invalid",
+  "path_invalid",
+  "memory_md_not_deletable",
+  "content_invalid",
+  "intent_digest_mismatch",
+  "agent_ref_mismatch",
+  "agent_home_unavailable",
+  ...AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES
+];
+var AgentMemoryIntentRejectionCodeSchema = z.enum(AGENT_MEMORY_INTENT_REJECTION_CODES);
+var AgentMemoryIntentFileObservationSchema = z.object({
+  exists: z.boolean(),
+  revision: AgentMemoryIntentRevisionSchema
+}).strict();
+var completionIdentity2 = {
+  intentId: z.uuid(),
+  agentRef: AgentHomeProjectionAgentRefSchema,
+  path: AgentMemoryIntentPathSchema,
+  operation: AgentMemoryIntentOperationSchema,
+  operationDigest: AgentMemoryIntentOperationDigestSchema
+};
+var AppliedCompletionSchema2 = z.object({ ...completionIdentity2, outcome: z.literal("applied"), result: AgentMemoryIntentFileObservationSchema }).strict();
+var ConflictCompletionSchema = z.object({ ...completionIdentity2, outcome: z.literal("conflict"), observed: AgentMemoryIntentFileObservationSchema }).strict();
+var RejectedCompletionSchema2 = z.object({ ...completionIdentity2, outcome: z.literal("rejected"), code: AgentMemoryIntentRejectionCodeSchema }).strict();
+var UncertainCompletionSchema = z.object({ ...completionIdentity2, outcome: z.literal("uncertain"), observed: AgentMemoryIntentFileObservationSchema }).strict();
+var AgentMemoryIntentCompletionSchema = z.discriminatedUnion("outcome", [
+  AppliedCompletionSchema2,
+  ConflictCompletionSchema,
+  RejectedCompletionSchema2,
+  UncertainCompletionSchema
+]);
+var AGENT_MEMORY_INTENT_READBACK_DISPOSITIONS = ["recorded", "idempotent", "conflict", "host_terminal"];
+var AgentMemoryIntentReadbackDispositionSchema = z.enum(AGENT_MEMORY_INTENT_READBACK_DISPOSITIONS);
+var AgentMemoryIntentReadbackSchema = z.object({
+  tenantId: z.string().min(1),
+  deviceId: z.string().min(1),
+  intentId: z.uuid(),
+  disposition: AgentMemoryIntentReadbackDispositionSchema,
+  completion: AgentMemoryIntentCompletionSchema,
+  recordedAt: z.iso.datetime({ offset: true })
+}).strict().superRefine((readback, ctx) => {
+  if (readback.completion.intentId !== readback.intentId) {
+    ctx.addIssue({ code: "custom", path: ["completion", "intentId"], message: "completion intentId must equal readback intentId" });
+  }
+  if (readback.disposition === "host_terminal" && (readback.completion.outcome !== "rejected" || !AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES.includes(readback.completion.code))) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["completion"],
+      message: `a host_terminal readback must carry a rejected completion with one of: ${AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES.join(", ")}`
+    });
+  }
+});
+var AGENT_MEMORY_INTENT_RESERVATIONS = ["held", "none"];
+var AgentMemoryIntentReservationSchema = z.enum(AGENT_MEMORY_INTENT_RESERVATIONS);
+var AgentMemoryIntentFetchRequestSchema = z.object({
+  intentId: z.uuid(),
+  reservation: AgentMemoryIntentReservationSchema
+}).strict();
+var AGENT_MEMORY_INTENT_FETCH_DISPOSITIONS = ["release", "withheld", "terminal", "deferred"];
+var AGENT_MEMORY_INTENT_FETCH_DISPOSITIONS_BY_RESERVATION = {
+  held: ["release", "withheld", "terminal"],
+  none: ["terminal", "deferred"]
+};
+function requireNoContent(intent, ctx, disposition) {
+  if (intent.content !== void 0) {
+    ctx.addIssue({ code: "custom", path: ["intent", "content"], message: `a ${disposition} fetch response never carries content` });
+  }
+}
+var ReleaseFetchResponseSchema = z.object({ disposition: z.literal("release"), intent: AgentMemoryIntentV1Schema }).strict().superRefine((response, ctx) => {
+  if (response.intent.operation === "replace" && response.intent.content === void 0) {
+    ctx.addIssue({ code: "custom", path: ["intent", "content"], message: "a replace release must carry content" });
+  }
+});
+var WithheldFetchResponseSchema = z.object({ disposition: z.literal("withheld"), intent: AgentMemoryIntentV1Schema, code: AgentMemoryIntentHostTerminalCodeSchema }).strict().superRefine((response, ctx) => requireNoContent(response.intent, ctx, "withheld"));
+var TerminalFetchResponseSchema = z.object({ disposition: z.literal("terminal"), intent: AgentMemoryIntentV1Schema, readback: AgentMemoryIntentReadbackSchema }).strict().superRefine((response, ctx) => {
+  requireNoContent(response.intent, ctx, "terminal");
+  const { intent, readback } = response;
+  if (readback.intentId !== intent.intentId) {
+    ctx.addIssue({ code: "custom", path: ["readback", "intentId"], message: "readback intentId must equal intent intentId" });
+  }
+  const completion = readback.completion;
+  if (completion.agentRef.agentId !== intent.agentRef.agentId || completion.agentRef.profileRevision !== intent.agentRef.profileRevision || completion.path !== intent.path || completion.operation !== intent.operation || completion.operationDigest !== intent.operationDigest) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["readback", "completion"],
+      message: "readback completion identity must equal the intent identity and operationDigest"
+    });
+  }
+});
+var DeferredFetchResponseSchema = z.object({ disposition: z.literal("deferred"), intent: AgentMemoryIntentV1Schema }).strict().superRefine((response, ctx) => requireNoContent(response.intent, ctx, "deferred"));
+var AgentMemoryIntentFetchResponseSchema = z.discriminatedUnion("disposition", [
+  ReleaseFetchResponseSchema,
+  WithheldFetchResponseSchema,
+  TerminalFetchResponseSchema,
+  DeferredFetchResponseSchema
+]);
+function agentMemoryIntentFetchResponseSchemaFor(reservation) {
+  const allowed = AGENT_MEMORY_INTENT_FETCH_DISPOSITIONS_BY_RESERVATION[AgentMemoryIntentReservationSchema.parse(reservation)];
+  return AgentMemoryIntentFetchResponseSchema.superRefine((response, ctx) => {
+    if (!allowed.includes(response.disposition)) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["disposition"],
+        message: `a ${reservation} reservation allows only: ${allowed.join(", ")}`
+      });
+    }
+  });
+}
+
+// src/version.ts
+var MAILBOX_READ_AHEAD_MAX_SEQS = 4096;
+var MAILBOX_READ_AHEAD_CAPABILITY = "mailbox-read-ahead";
+var PROTOCOL_VERSION = 2;
+var STRICT_AGENT_ONLY_CAPABILITY = "strict-agent-only";
+var CUSTOM_HARNESS_CAPABILITY = "custom-harness";
+var CAPABILITY_FLAGS = [
+  "steer",
+  "blob-upload",
+  "interactive-approval",
+  "approval_resolved",
+  "approval-targeting",
+  "result-document",
+  "dispatch-selection",
+  PROVIDER_PROFILE_BINDING_CAPABILITY,
+  "toolset-selection",
+  "agent-home-contract",
+  STRICT_AGENT_ONLY_CAPABILITY,
+  AGENT_EGRESS_POLICY_CAPABILITY,
+  AGENT_EGRESS_RELIABLE_ACK_CAPABILITY,
+  AGENT_MESSAGE_EGRESS_CAPABILITY,
+  AGENT_EGRESS_FRESH_SESSION_CAPABILITY,
+  AGENT_CONTENT_WORKSPACE_READ_CAPABILITY,
+  AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY,
+  AGENT_CONTENT_ARTIFACT_READ_CAPABILITY,
+  AGENT_HOME_PROJECTION_CAPABILITY,
+  AGENT_INPUT_PREPARATION_CAPABILITY,
+  TERMINAL_PROJECTION_SELECTION_CAPABILITY,
+  HOST_MCP_TASK_CONTEXT_CAPABILITY,
+  CUSTOM_HARNESS_CAPABILITY,
+  MAILBOX_READ_AHEAD_CAPABILITY,
+  PROVIDER_PROVISIONING_CAPABILITY,
+  AGENT_MEMORY_INTENT_CAPABILITY
+];
 var AGENT_MEMORY_PROJECTION_CAPABILITY = "agent.memory.projection";
 var AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES = 512 * 1024;
 var AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE = 2147483647;
@@ -1426,6 +1551,7 @@ var EnvelopeSchema = z.discriminatedUnion("type", [
   envelopeShape("agent.home.projection", FORBIDDEN_TASK_ID, REQUIRED_SEQ),
   envelopeShape("agent.input.preparation", FORBIDDEN_TASK_ID, REQUIRED_SEQ),
   envelopeShape("provider.provisioning.available", FORBIDDEN_TASK_ID, REQUIRED_SEQ),
+  envelopeShape("agent.memory.intent.available", FORBIDDEN_TASK_ID, REQUIRED_SEQ),
   envelopeShape("task.approve", REQUIRED_TASK_ID, REQUIRED_SEQ),
   envelopeShape("task.reject", REQUIRED_TASK_ID, REQUIRED_SEQ),
   envelopeShape("task.cancel", REQUIRED_TASK_ID, REQUIRED_SEQ),
@@ -1756,6 +1882,6 @@ function byokBlobContentPath(blobId) {
   return `/byok/blobs/${blobId}/content`;
 }
 
-export { AGENT_CONTENT_ARTIFACT_READ_CAPABILITY, AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY, AGENT_CONTENT_WORKSPACE_READ_CAPABILITY, AGENT_EGRESS_FRESH_SESSION_CAPABILITY, AGENT_EGRESS_POLICY_CAPABILITY, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY, AGENT_EVENT_SPILL_UNSTORED_REASON_MAX_LENGTH, AGENT_HOME_PROJECTION_CAPABILITY, AGENT_HOME_PROJECTION_MAX_BYTES, AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM, AGENT_INPUT_PREPARATION_CAPABILITY, AGENT_MEMORY_PROJECTION_CAPABILITY, AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE, AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES, AGENT_MESSAGE_EGRESS_CAPABILITY, AGENT_MESSAGE_MAX_BYTES, AGENT_REF_MAX_BYTES, AgentContentActorKindSchema, AgentContentActorSchema, AgentContentDecodeAsSchema, AgentContentMimeTypeSchema, AgentContentReadDecisionSchema, AgentContentReadDenialReasonSchema, AgentContentReadPayloadSchema, AgentContentReadSurfaceSchema, AgentContentReceiptPayloadSchema, AgentEgressAckPayloadSchema, AgentEgressActivityPolicySchema, AgentEgressContentHashSchema, AgentEgressDropReasonSchema, AgentEgressLaneSchema, AgentEgressPolicyRevisionSchema, AgentEgressPolicySchema, AgentEgressReliablePayloadSchema, AgentEventOrUnknownSchema, AgentEventSchema, AgentEventSpillSchema, AgentHomeProjectionAgentRefSchema, AgentHomeProjectionCompletionRequestSchema, AgentHomeProjectionHashSchema, AgentHomeProjectionOutcomeSchema, AgentHomeProjectionPayloadSchema, AgentHomeProjectionProfileRevisionSchema, AgentHomeProjectionReadbackSchema, AgentHomeProjectionStatusSchema, AgentHomeProjectionValueSchema, AgentInputPreparationPayloadSchema, AgentMemoryProjectionCommitRequestSchema, AgentMemoryProjectionCommitResponseSchema, AgentMemoryProjectionEraseResultSchema, AgentMemoryProjectionGrantRefSchema, AgentMemoryProjectionMeteringReceiptSchema, AgentMemoryProjectionMutationSchema, AgentMemoryProjectionReceiptSchema, AgentMemoryProjectionSessionRefSchema, AgentMemoryProjectionSnapshotSchema, AgentMemoryProjectionSourceSeqSchema, AgentMemoryProjectionWriterEpochSchema, AgentMessageContentTypeSchema, AgentMessageContractSchema, AgentMessageDestinationBindingSchema, AgentMessageDispositionPayloadSchema, AgentMessageEgressRequirementSchema, AgentMessageFreshnessCursorSchema, AgentMessagePublishPayloadSchema, AgentMessageServerContextSchema, AgentRefSchema, AgentReliableQuotaPolicySchema, BYOK_ACTIVITY_PATH, BYOK_AGENT_HOME_PROJECTIONS_PATH, BYOK_AGENT_HOME_PROJECTION_COMPLETION_ROUTE, BYOK_AGENT_MEMORY_PROJECTIONS_PATH, BYOK_BLOBS_PATH, BYOK_BLOB_CONTENT_ROUTE, BYOK_BLOB_FINALIZE_ROUTE, BYOK_BLOB_URL_ROUTE, BYOK_BOARD_CLAIM_ROUTE, BYOK_BOARD_PATH, BYOK_BOARD_STATUS_ROUTE, BYOK_BOARD_STREAM_PATH, BYOK_BOARD_UNCLAIM_ROUTE, BYOK_CAPABILITIES_PATH, BYOK_CHALLENGE_PATH, BYOK_EVENTS_PATH, BYOK_INPUT_PREPARATIONS_PATH, BYOK_INPUT_PREPARATION_COMPLETION_ROUTE, BYOK_INPUT_PREPARATION_STATUS_ROUTE, BYOK_MESSAGES_PATH, BYOK_PAIR_PATH, BYOK_PRESENCE_PATH, BYOK_RECORDS_PATH, BYOK_RECORD_ROUTE, BYOK_SKILL_PACKS_PATH, BYOK_SKILL_PACK_FILE_ROUTE, BYOK_TOKEN_PATH, BlobDownloadUrlResponseSchema, BlobRefSchema, CAPABILITY_FLAGS, CONFIGURED_TOOLSETS_MAX_ITEMS, CONTENT_HASH_RE, CUSTOM_HARNESS_CAPABILITY, ChallengeRequestSchema, ChallengeResponseSchema, ConfiguredToolsetsSchema, ConnAckPayloadSchema, ConnHelloPayloadSchema, ContentReadPolicySchema, CreateBlobRequestSchema, CreateBlobResponseSchema, DAEMON_TO_SERVER_TYPES, DispatchSelectionSchema, EnvelopeParseError, EnvelopeSchema, EnvelopeValidationError, EventsPollQuerySchema, EventsPollResponseSchema, HOST_MCP_TASK_CONTEXT_CAPABILITY, HarnessIdSchema, HarnessInfoSchema, HarnessInventorySchema, INPUT_PREPARATION_WIRE_VERSION, InputPreparationAccountingPolicyRefSchema, InputPreparationArtifactSummarySchema, InputPreparationBindingSchema, InputPreparationCompletionRequestSchema, InputPreparationContentHashSchema, InputPreparationContextDocumentSchema, InputPreparationCounterEvidenceSchema, InputPreparationCounterProviderEvidenceSchema, InputPreparationCounterTargetSchema, InputPreparationHostCanonicalAssistantMessageSchema, InputPreparationMessageSchema, InputPreparationModelCostSchema, InputPreparationModelSchema, InputPreparationOfferBindingSchema, InputPreparationOptionsSchema, InputPreparationPermissionModeSchema, InputPreparationPolicyRevisionSchema, InputPreparationProfileIdSchema, InputPreparationProjectionSchema, InputPreparationPromptSnapshotSchema, InputPreparationReadbackSchema, InputPreparationReadinessReasonSchema, InputPreparationReceiptSummarySchema, InputPreparationReferenceSchema, InputPreparationRejectionReasonSchema, InputPreparationResidualKeySchema, InputPreparationResidualValueClassSchema, InputPreparationRuntimeIdentitySchema, InputPreparationSelectionSchema, InputPreparationSourceSchema, InputPreparationStateSchema, InputPreparationStatusQuerySchema, InputPreparationStatusSchema, InputPreparationToolImplementationKindSchema, InputPreparationUserMessageSchema, KNOWN_AGENT_EVENT_TYPES, MAILBOX_READ_AHEAD_CAPABILITY, MAILBOX_READ_AHEAD_MAX_SEQS, MAX_MESSAGES_PER_BATCH, MESSAGE_PAYLOAD_SCHEMAS, MESSAGE_TYPES, MessagesSendRequestSchema, MessagesSendResponseSchema, PAIR_RESPONSE_TENANT_ID_MAX_LENGTH, PERMISSION_MODES, PROTOCOL_VERSION, PROVIDER_MODEL_CAPABILITIES, PROVIDER_PROFILE_BINDING_CAPABILITY, PROVIDER_PROVISIONING_CAPABILITY, PROVIDER_PROVISIONING_DISPOSITIONS, PROVIDER_PROVISIONING_HOST_TERMINAL_CODES, PROVIDER_PROVISIONING_KEY_CHECK_RESULTS, PROVIDER_PROVISIONING_OPERATIONS, PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM, PROVIDER_PROVISIONING_REJECTION_CODES, PROVIDER_SECRET_SEALING_KEY_REGISTER_OPERATION, PairRequestSchema, PairResponseSchema, PairResponseTenantIdSchema, PermissionPolicySchema, PreparedAgentMemoryModeSchema, PresencePublishRequestSchema, ProtocolError, ProtocolVersionNumberSchema, ProviderModelCapabilitySchema, ProviderProfileBindingSchema, ProviderProfileHashSchema, ProviderProfileRefSchema, ProviderProfileRevisionSchema, ProviderProvisioningAvailablePayloadSchema, ProviderProvisioningCompletionSchema, ProviderProvisioningDispositionSchema, ProviderProvisioningKeyCheckResultSchema, ProviderProvisioningKeyCheckSchema, ProviderProvisioningOperationDigestSchema, ProviderProvisioningOperationGenerationSchema, ProviderProvisioningOperationSchema, ProviderProvisioningProviderStatusSchema, ProviderProvisioningReadbackSchema, ProviderProvisioningRejectionCodeSchema, RESULT_DOCUMENT_MAX_BYTES, RequiredToolsetsSchema, RuntimeCapabilitiesSchema, RuntimeIdSchema, RuntimeInfoSchema, SERVER_TO_DAEMON_TYPES, STRICT_AGENT_ONLY_CAPABILITY, TASK_OFFER_TYPES, TASK_STATES, TASK_TRANSITIONS, TERMINAL_INFERENCE_USAGE_CLIENT_VERSION_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_MAX_DURATION_MS, TERMINAL_INFERENCE_USAGE_MAX_TOKENS, TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_PROVIDER_MAX_LENGTH, TERMINAL_PROJECTION_SELECTION_CAPABILITY, TaskApprovalResolvedPayloadSchema, TaskApprovePayloadSchema, TaskArtifactPayloadSchema, TaskAwaitApprovalPayloadSchema, TaskCancelPayloadSchema, TaskCancelledPayloadSchema, TaskClaimPayloadSchema, TaskCompletePayloadSchema, TaskDeclinePayloadSchema, TaskFailPayloadSchema, TaskOfferForAgentPayloadSchema, TaskOfferForAgentWithEgressFreshPayloadSchema, TaskOfferForAgentWithEgressPayloadSchema, TaskOfferPayloadSchema, TaskOfferPreparedPayloadSchema, TaskOfferWithToolsetsPayloadSchema, TaskProgressPayloadSchema, TaskRejectPayloadSchema, TaskStartedPayloadSchema, TaskSteerPayloadSchema, TerminalInferenceUsageSchema, TerminalPreparedObservationSchema, TerminalProjectionContractSchema, TerminalProjectionSelectionSchema, TokenRequestSchema, TokenResponseSchema, ToolsetIdSchema, UnknownAgentEventSchema, UnknownMessageTypeError, agentMemoryProjectionBase64UrlByteLength, byokAgentHomeProjectionCompletionPath, byokBlobContentPath, byokBlobFinalizePath, byokBlobUrlPath, byokInputPreparationCompletionPath, byokInputPreparationStatusPath, byokRecordPath, byokSkillPackFilePath, canTransition, checkResultDocument, createEnvelope, decodeEnvelope, encodeEnvelope, isKnownAgentEvent, isServerToDaemonType, isTaskOfferType, parseMessage, partitionAgentEvents };
+export { AGENT_CONTENT_ARTIFACT_READ_CAPABILITY, AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY, AGENT_CONTENT_WORKSPACE_READ_CAPABILITY, AGENT_EGRESS_FRESH_SESSION_CAPABILITY, AGENT_EGRESS_POLICY_CAPABILITY, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY, AGENT_EVENT_SPILL_UNSTORED_REASON_MAX_LENGTH, AGENT_HOME_PROJECTION_CAPABILITY, AGENT_HOME_PROJECTION_MAX_BYTES, AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM, AGENT_INPUT_PREPARATION_CAPABILITY, AGENT_MEMORY_INTENT_APPROVAL_REF_MAX_BYTES, AGENT_MEMORY_INTENT_CAPABILITY, AGENT_MEMORY_INTENT_CONTENT_MAX_BYTES, AGENT_MEMORY_INTENT_FETCH_DISPOSITIONS, AGENT_MEMORY_INTENT_FETCH_DISPOSITIONS_BY_RESERVATION, AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES, AGENT_MEMORY_INTENT_OPERATIONS, AGENT_MEMORY_INTENT_PATH_MAX_BYTES, AGENT_MEMORY_INTENT_READBACK_DISPOSITIONS, AGENT_MEMORY_INTENT_REJECTION_CODES, AGENT_MEMORY_INTENT_RESERVATIONS, AGENT_MEMORY_PROJECTION_CAPABILITY, AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE, AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES, AGENT_MESSAGE_EGRESS_CAPABILITY, AGENT_MESSAGE_MAX_BYTES, AGENT_REF_MAX_BYTES, AgentContentActorKindSchema, AgentContentActorSchema, AgentContentDecodeAsSchema, AgentContentMimeTypeSchema, AgentContentReadDecisionSchema, AgentContentReadDenialReasonSchema, AgentContentReadPayloadSchema, AgentContentReadSurfaceSchema, AgentContentReceiptPayloadSchema, AgentEgressAckPayloadSchema, AgentEgressActivityPolicySchema, AgentEgressContentHashSchema, AgentEgressDropReasonSchema, AgentEgressLaneSchema, AgentEgressPolicyRevisionSchema, AgentEgressPolicySchema, AgentEgressReliablePayloadSchema, AgentEventOrUnknownSchema, AgentEventSchema, AgentEventSpillSchema, AgentHomeProjectionAgentRefSchema, AgentHomeProjectionCompletionRequestSchema, AgentHomeProjectionHashSchema, AgentHomeProjectionOutcomeSchema, AgentHomeProjectionPayloadSchema, AgentHomeProjectionProfileRevisionSchema, AgentHomeProjectionReadbackSchema, AgentHomeProjectionStatusSchema, AgentHomeProjectionValueSchema, AgentInputPreparationPayloadSchema, AgentMemoryIntentApprovalRefSchema, AgentMemoryIntentAvailablePayloadSchema, AgentMemoryIntentCompletionSchema, AgentMemoryIntentContentSchema, AgentMemoryIntentFetchRequestSchema, AgentMemoryIntentFetchResponseSchema, AgentMemoryIntentFileObservationSchema, AgentMemoryIntentHostTerminalCodeSchema, AgentMemoryIntentOperationDigestSchema, AgentMemoryIntentOperationSchema, AgentMemoryIntentPathSchema, AgentMemoryIntentReadbackDispositionSchema, AgentMemoryIntentReadbackSchema, AgentMemoryIntentRejectionCodeSchema, AgentMemoryIntentReservationSchema, AgentMemoryIntentRevisionSchema, AgentMemoryIntentV1Schema, AgentMemoryProjectionCommitRequestSchema, AgentMemoryProjectionCommitResponseSchema, AgentMemoryProjectionEraseResultSchema, AgentMemoryProjectionGrantRefSchema, AgentMemoryProjectionMeteringReceiptSchema, AgentMemoryProjectionMutationSchema, AgentMemoryProjectionReceiptSchema, AgentMemoryProjectionSessionRefSchema, AgentMemoryProjectionSnapshotSchema, AgentMemoryProjectionSourceSeqSchema, AgentMemoryProjectionWriterEpochSchema, AgentMessageContentTypeSchema, AgentMessageContractSchema, AgentMessageDestinationBindingSchema, AgentMessageDispositionPayloadSchema, AgentMessageEgressRequirementSchema, AgentMessageFreshnessCursorSchema, AgentMessagePublishPayloadSchema, AgentMessageServerContextSchema, AgentRefSchema, AgentReliableQuotaPolicySchema, BYOK_ACTIVITY_PATH, BYOK_AGENT_HOME_PROJECTIONS_PATH, BYOK_AGENT_HOME_PROJECTION_COMPLETION_ROUTE, BYOK_AGENT_MEMORY_PROJECTIONS_PATH, BYOK_BLOBS_PATH, BYOK_BLOB_CONTENT_ROUTE, BYOK_BLOB_FINALIZE_ROUTE, BYOK_BLOB_URL_ROUTE, BYOK_BOARD_CLAIM_ROUTE, BYOK_BOARD_PATH, BYOK_BOARD_STATUS_ROUTE, BYOK_BOARD_STREAM_PATH, BYOK_BOARD_UNCLAIM_ROUTE, BYOK_CAPABILITIES_PATH, BYOK_CHALLENGE_PATH, BYOK_EVENTS_PATH, BYOK_INPUT_PREPARATIONS_PATH, BYOK_INPUT_PREPARATION_COMPLETION_ROUTE, BYOK_INPUT_PREPARATION_STATUS_ROUTE, BYOK_MESSAGES_PATH, BYOK_PAIR_PATH, BYOK_PRESENCE_PATH, BYOK_RECORDS_PATH, BYOK_RECORD_ROUTE, BYOK_SKILL_PACKS_PATH, BYOK_SKILL_PACK_FILE_ROUTE, BYOK_TOKEN_PATH, BlobDownloadUrlResponseSchema, BlobRefSchema, CAPABILITY_FLAGS, CONFIGURED_TOOLSETS_MAX_ITEMS, CONTENT_HASH_RE, CUSTOM_HARNESS_CAPABILITY, ChallengeRequestSchema, ChallengeResponseSchema, ConfiguredToolsetsSchema, ConnAckPayloadSchema, ConnHelloPayloadSchema, ContentReadPolicySchema, CreateBlobRequestSchema, CreateBlobResponseSchema, DAEMON_TO_SERVER_TYPES, DispatchSelectionSchema, EnvelopeParseError, EnvelopeSchema, EnvelopeValidationError, EventsPollQuerySchema, EventsPollResponseSchema, HOST_MCP_TASK_CONTEXT_CAPABILITY, HarnessIdSchema, HarnessInfoSchema, HarnessInventorySchema, INPUT_PREPARATION_WIRE_VERSION, InputPreparationAccountingPolicyRefSchema, InputPreparationArtifactSummarySchema, InputPreparationBindingSchema, InputPreparationCompletionRequestSchema, InputPreparationContentHashSchema, InputPreparationContextDocumentSchema, InputPreparationCounterEvidenceSchema, InputPreparationCounterProviderEvidenceSchema, InputPreparationCounterTargetSchema, InputPreparationHostCanonicalAssistantMessageSchema, InputPreparationMessageSchema, InputPreparationModelCostSchema, InputPreparationModelSchema, InputPreparationOfferBindingSchema, InputPreparationOptionsSchema, InputPreparationPolicyRevisionSchema, InputPreparationProfileIdSchema, InputPreparationProjectionSchema, InputPreparationPromptSnapshotSchema, InputPreparationReadbackSchema, InputPreparationReadinessReasonSchema, InputPreparationReceiptSummarySchema, InputPreparationReferenceSchema, InputPreparationRejectionReasonSchema, InputPreparationResidualKeySchema, InputPreparationResidualValueClassSchema, InputPreparationRuntimeIdentitySchema, InputPreparationSelectionSchema, InputPreparationSourceSchema, InputPreparationStateSchema, InputPreparationStatusQuerySchema, InputPreparationStatusSchema, InputPreparationUserMessageSchema, KNOWN_AGENT_EVENT_TYPES, MAILBOX_READ_AHEAD_CAPABILITY, MAILBOX_READ_AHEAD_MAX_SEQS, MAX_MESSAGES_PER_BATCH, MESSAGE_PAYLOAD_SCHEMAS, MESSAGE_TYPES, MessagesSendRequestSchema, MessagesSendResponseSchema, PAIR_RESPONSE_TENANT_ID_MAX_LENGTH, PROTOCOL_VERSION, PROVIDER_MODEL_CAPABILITIES, PROVIDER_PROFILE_BINDING_CAPABILITY, PROVIDER_PROVISIONING_CAPABILITY, PROVIDER_PROVISIONING_DISPOSITIONS, PROVIDER_PROVISIONING_HOST_TERMINAL_CODES, PROVIDER_PROVISIONING_KEY_CHECK_RESULTS, PROVIDER_PROVISIONING_OPERATIONS, PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM, PROVIDER_PROVISIONING_REJECTION_CODES, PROVIDER_SECRET_SEALING_KEY_REGISTER_OPERATION, PairRequestSchema, PairResponseSchema, PairResponseTenantIdSchema, PreparedAgentMemoryModeSchema, PresencePublishRequestSchema, ProtocolError, ProtocolVersionNumberSchema, ProviderModelCapabilitySchema, ProviderProfileBindingSchema, ProviderProfileHashSchema, ProviderProfileRefSchema, ProviderProfileRevisionSchema, ProviderProvisioningAvailablePayloadSchema, ProviderProvisioningCompletionSchema, ProviderProvisioningDispositionSchema, ProviderProvisioningKeyCheckResultSchema, ProviderProvisioningKeyCheckSchema, ProviderProvisioningOperationDigestSchema, ProviderProvisioningOperationGenerationSchema, ProviderProvisioningOperationSchema, ProviderProvisioningProviderStatusSchema, ProviderProvisioningReadbackSchema, ProviderProvisioningRejectionCodeSchema, RESULT_DOCUMENT_MAX_BYTES, RequiredToolsetsSchema, RuntimeCapabilitiesSchema, RuntimeIdSchema, RuntimeInfoSchema, SERVER_TO_DAEMON_TYPES, STRICT_AGENT_ONLY_CAPABILITY, TASK_OFFER_TYPES, TASK_STATES, TASK_TRANSITIONS, TERMINAL_INFERENCE_USAGE_CLIENT_VERSION_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_MAX_DURATION_MS, TERMINAL_INFERENCE_USAGE_MAX_TOKENS, TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_PROVIDER_MAX_LENGTH, TERMINAL_PROJECTION_SELECTION_CAPABILITY, TaskApprovalResolvedPayloadSchema, TaskApprovePayloadSchema, TaskArtifactPayloadSchema, TaskAwaitApprovalPayloadSchema, TaskCancelPayloadSchema, TaskCancelledPayloadSchema, TaskClaimPayloadSchema, TaskCompletePayloadSchema, TaskDeclinePayloadSchema, TaskFailPayloadSchema, TaskOfferForAgentPayloadSchema, TaskOfferForAgentWithEgressFreshPayloadSchema, TaskOfferForAgentWithEgressPayloadSchema, TaskOfferPayloadSchema, TaskOfferPreparedPayloadSchema, TaskOfferWithToolsetsPayloadSchema, TaskProgressPayloadSchema, TaskRejectPayloadSchema, TaskStartedPayloadSchema, TaskSteerPayloadSchema, TerminalInferenceUsageSchema, TerminalPreparedObservationSchema, TerminalProjectionContractSchema, TerminalProjectionSelectionSchema, TokenRequestSchema, TokenResponseSchema, ToolsetIdSchema, UnknownAgentEventSchema, UnknownMessageTypeError, agentMemoryIntentFetchResponseSchemaFor, agentMemoryProjectionBase64UrlByteLength, byokAgentHomeProjectionCompletionPath, byokBlobContentPath, byokBlobFinalizePath, byokBlobUrlPath, byokInputPreparationCompletionPath, byokInputPreparationStatusPath, byokRecordPath, byokSkillPackFilePath, canTransition, checkResultDocument, createEnvelope, decodeEnvelope, encodeEnvelope, isKnownAgentEvent, isServerToDaemonType, isTaskOfferType, parseMessage, partitionAgentEvents };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map