@byok-sdk/protocol 0.24.0 → 0.25.0-rc.1

package/dist/input-preparation.d.ts

@@ -23,7 +23,7 @@ import { z } from 'zod';
  * 3. Every shape here is `.strict()`. This is control data: an unrecognized
  *    field must be REJECTED, not silently stripped, per docs/protocol.md's
  *    freeze-rule asymmetry. Adding a field post-freeze is therefore a
- *    breaking change, exactly like `PermissionPolicySchema`.
+ *    breaking change.
  */
 /**
  * The ONE version of the input-preparation contract, shared by this relay wire
@@ -36,7 +36,7 @@ import { z } from 'zod';
  * below. See `INPUT_PREPARATION_VERSION` in the client for what each version
  * changed.
  */
-export declare const INPUT_PREPARATION_WIRE_VERSION: 8;
+export declare const INPUT_PREPARATION_WIRE_VERSION: 9;
 /**
  * Capability required before a task-free remote input preparation — or a
  * prepared Execution — is admitted: `agent-input-preparation-v<N>`, where
@@ -59,7 +59,7 @@ export declare const INPUT_PREPARATION_WIRE_VERSION: 8;
  * devices as a pair is the operator precondition for the cut (`docs/spec.md`,
  * bounded admission); nothing here parses an older receipt.
  */
-export declare const AGENT_INPUT_PREPARATION_CAPABILITY: "agent-input-preparation-v8";
+export declare const AGENT_INPUT_PREPARATION_CAPABILITY: "agent-input-preparation-v9";
 /** The preparation surface uses the package-wide lowercase `sha256:<hex>` transport form. */
 export declare const InputPreparationContentHashSchema: z.ZodString;
 /**
@@ -78,26 +78,6 @@ export declare const InputPreparationPolicyRevisionSchema: z.ZodString;
  * anything is compiled.
  */
 export declare const InputPreparationProfileIdSchema: z.ZodString;
-/**
- * The permission mode a preparation is compiled FOR.
- *
- * It is the same closed set every task policy uses (`permission.ts`'s
- * `PERMISSION_MODES`), spelled here as its own schema because a preparation
- * carries a mode without carrying a policy: there is no task, no grant and no
- * approval seam on this wire. The mode selects which tools the device's own
- * observation projects into the counted manifest, and nothing else.
- *
- * Declared by the requester rather than inferred by the device: a device that
- * guessed would be counting a manifest the requester never asked for, and a
- * device that defaulted would silently count the widest one.
- */
-export declare const InputPreparationPermissionModeSchema: z.ZodEnum<{
-    auto: "auto";
-    confirm: "confirm";
-    plan: "plan";
-    readonly: "readonly";
-}>;
-export type InputPreparationPermissionMode = z.infer<typeof InputPreparationPermissionModeSchema>;
 /** Explicit prepared SDK memory selection; never defaulted. */
 export declare const PreparedAgentMemoryModeSchema: z.ZodEnum<{
     none: "none";
@@ -400,7 +380,7 @@ export type InputPreparationState = z.infer<typeof InputPreparationStateSchema>;
  * `ready` means the preparation CAN BE CONSUMED — the artifact is intact and
  * unexpired, the native compiler's projection is content-complete, every
  * residual key is ruled by an applicable Host accounting policy, D is text
- * only, every executor identity is attested, and — only when the device has an
+ * only, and — only when the device has an
  * optional counter configured — that count is provider-authoritative and
  * covered. No count is required: the size evidence is
  * `artifact.requestBytes`, the exact byte length of the frozen D. It is
@@ -416,7 +396,6 @@ export declare const InputPreparationReadinessReasonSchema: z.ZodEnum<{
     counter_authority_not_production: "counter_authority_not_production";
     counter_coverage_incomplete: "counter_coverage_incomplete";
     counter_interrupted: "counter_interrupted";
-    executor_identity_unproven: "executor_identity_unproven";
     failed: "failed";
     not_prepared: "not_prepared";
     projection_unknown: "projection_unknown";
@@ -529,16 +508,6 @@ export declare const InputPreparationCounterEvidenceSchema: z.ZodObject<{
     calledAt: z.ZodISODateTime;
     completedAt: z.ZodISODateTime;
 }, z.core.$strict>;
-/**
- * What the device established about the implementation behind ONE
- * model-visible tool: `attested`, or `unavailable:<reason>` naming which of
- * the SDK's closed unavailable reasons applies.
- *
- * A kind, never the identity itself: an install path, a closure digest or a
- * stat tuple is device-local filesystem detail, and a receipt discloses
- * identity facts, not the machine's layout.
- */
-export declare const InputPreparationToolImplementationKindSchema: z.ZodString;
 /**
  * What the native compiler proved about ONE top-level key of D that lies
  * outside P(D).
@@ -601,19 +570,16 @@ export declare const InputPreparationProjectionSchema: z.ZodObject<{
  * launch checkable rather than assumed:
  *
  * - `observationDigest` binds everything the device OBSERVED — the projected
- *   tools, their executor fingerprints, the launch attestation and the
- *   implementation identities — so a launch whose live observation differs is
- *   a different manifest, whatever the schemas say.
+ *   tools and their executor fingerprints — so a launch whose live
+ *   observation differs is a different manifest, whatever the schemas say.
  * - `toolBindingDigest` binds only the facts that can be re-derived WITHOUT
- *   spawning a server: the launch attestation, the toolset definition
- *   revisions and the implementation identities. It is what a replay of an
- *   already-recorded requestId compares against, because re-probing to detect
- *   drift would be the second executor fact the idempotency key exists to
- *   prevent.
- * - `toolImplementationKinds` states, per model-visible tool name, whether the
- *   implementation behind it was attested. It is the evidence behind
- *   `executor_identity_unproven`, so a reader does not have to take that
- *   readiness reason on trust.
+ *   spawning a server: the toolset definition revisions and the configured
+ *   argv. It is what a replay of an already-recorded requestId compares
+ *   against, because re-probing to detect drift would be the second executor
+ *   fact the idempotency key exists to prevent.
+ * - `toolNames` lists the counted model-visible tool names, sorted. A launch
+ *   that registers a different set can name the tool that appeared or
+ *   vanished.
  */
 export declare const InputPreparationArtifactSummarySchema: z.ZodObject<{
     requestDigest: z.ZodString;
@@ -644,7 +610,7 @@ export declare const InputPreparationArtifactSummarySchema: z.ZodObject<{
     }, z.core.$strict>>;
     observationDigest: z.ZodString;
     toolBindingDigest: z.ZodString;
-    toolImplementationKinds: z.ZodRecord<z.ZodString, z.ZodString>;
+    toolNames: z.ZodArray<z.ZodString>;
 }, z.core.$strict>;
 /** The immutable binding a receipt carries and a later consumer must re-present. */
 export declare const InputPreparationBindingSchema: z.ZodObject<{
@@ -667,12 +633,6 @@ export declare const InputPreparationBindingSchema: z.ZodObject<{
         modelId: z.ZodString;
     }, z.core.$strict>;
     policyRevision: z.ZodString;
-    permissionMode: z.ZodEnum<{
-        auto: "auto";
-        confirm: "confirm";
-        plan: "plan";
-        readonly: "readonly";
-    }>;
     runtime: z.ZodObject<{
         packageName: z.ZodString;
         packageVersion: z.ZodString;
@@ -732,12 +692,6 @@ export declare const InputPreparationReceiptSummarySchema: z.ZodObject<{
             modelId: z.ZodString;
         }, z.core.$strict>;
         policyRevision: z.ZodString;
-        permissionMode: z.ZodEnum<{
-            auto: "auto";
-            confirm: "confirm";
-            plan: "plan";
-            readonly: "readonly";
-        }>;
         runtime: z.ZodObject<{
             packageName: z.ZodString;
             packageVersion: z.ZodString;
@@ -789,7 +743,7 @@ export declare const InputPreparationReceiptSummarySchema: z.ZodObject<{
         }, z.core.$strict>>;
         observationDigest: z.ZodString;
         toolBindingDigest: z.ZodString;
-        toolImplementationKinds: z.ZodRecord<z.ZodString, z.ZodString>;
+        toolNames: z.ZodArray<z.ZodString>;
     }, z.core.$strict>>;
     counter: z.ZodOptional<z.ZodObject<{
         method: z.ZodString;
@@ -829,7 +783,6 @@ export declare const InputPreparationReceiptSummarySchema: z.ZodObject<{
         counter_authority_not_production: "counter_authority_not_production";
         counter_coverage_incomplete: "counter_coverage_incomplete";
         counter_interrupted: "counter_interrupted";
-        executor_identity_unproven: "executor_identity_unproven";
         failed: "failed";
         not_prepared: "not_prepared";
         projection_unknown: "projection_unknown";
@@ -893,11 +846,9 @@ export declare const InputPreparationRejectionReasonSchema: z.ZodEnum<{
     durable_write_failed: "durable_write_failed";
     input_preparation_record_log_unsupported: "input_preparation_record_log_unsupported";
     input_preparation_unconfigured: "input_preparation_unconfigured";
-    launch_boundary_unavailable: "launch_boundary_unavailable";
     limit_exceeded: "limit_exceeded";
     not_found: "not_found";
     observation_drift: "observation_drift";
-    permission_mode_denied: "permission_mode_denied";
     policy_revision_mismatch: "policy_revision_mismatch";
     request_conflict: "request_conflict";
     rpc_frame_too_large: "rpc_frame_too_large";