@byok-sdk/protocol 0.28.3 → 0.30.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (16) hide show
  1. package/dist/capability-constants.d.ts +11 -0
  2. package/dist/codec.d.ts +56 -0
  3. package/dist/constants.js +8 -2
  4. package/dist/constants.js.map +1 -1
  5. package/dist/e2ee-member.d.ts +158 -0
  6. package/dist/envelope.d.ts +18 -1401
  7. package/dist/http-api.d.ts +13 -1400
  8. package/dist/index.d.ts +7 -3
  9. package/dist/index.js +451 -11
  10. package/dist/index.js.map +1 -1
  11. package/dist/messages.d.ts +1000 -1515
  12. package/dist/sealed-payload.d.ts +219 -0
  13. package/dist/sealed-split-table.d.ts +173 -0
  14. package/dist/version.d.ts +1 -1
  15. package/dist/wire-additions.d.ts +2 -2
  16. package/package.json +1 -1
package/dist/messages.d.ts CHANGED
@@ -1,4 +1,6 @@
1
1
  import { z } from 'zod';
2
+ import { ProviderProvisioningAvailablePayloadSchema } from './provider-provisioning';
3
+ import { E2eeKeyPackageAvailablePayloadSchema } from './e2ee-member';
2
4
  import { type PlainJsonCheck } from './plain-json';
3
5
  export declare const RuntimeIdSchema: z.ZodEnum<{
4
6
  claude: "claude";
@@ -197,6 +199,8 @@ export type DispatchSelection = z.infer<typeof DispatchSelectionSchema>;
197
199
  * envelope's `task_id` (M1 gap #7 — single source of truth for routing).
198
200
  */
199
201
  export declare const TaskOfferPayloadSchema: z.ZodObject<{
202
+ sealed: z.ZodOptional<z.ZodNever>;
203
+ sealing: z.ZodOptional<z.ZodNever>;
200
204
  instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
201
205
  blobRef: z.ZodObject<{
202
206
  blobId: z.ZodString;
@@ -258,6 +262,8 @@ export declare const RequiredToolsetsSchema: z.ZodArray<z.ZodString>;
258
262
  * strict because every field here affects execution authority.
259
263
  */
260
264
  export declare const TaskOfferWithToolsetsPayloadSchema: z.ZodObject<{
265
+ sealed: z.ZodOptional<z.ZodNever>;
266
+ sealing: z.ZodOptional<z.ZodNever>;
261
267
  instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
262
268
  blobRef: z.ZodObject<{
263
269
  blobId: z.ZodString;
@@ -321,12 +327,32 @@ export type TaskOfferWithToolsetsPayload = z.infer<typeof TaskOfferWithToolsetsP
321
327
  */
322
328
  export declare const AgentHomeAccessSchema: z.ZodLiteral<"memory-reader">;
323
329
  export type AgentHomeAccess = z.infer<typeof AgentHomeAccessSchema>;
330
+ /**
331
+ * The `agentMemory` of an ordinary Agent offer: the prepared modes plus
332
+ * `read-if-admitted`. That value runs as `read` when the daemon admits the
333
+ * memory MCP and as `none` when it does not. A host sends it only to a device
334
+ * that advertises `agent-memory-read-if-admitted`. Prepared offers refuse it.
335
+ */
336
+ export declare const AgentMemorySelectionSchema: z.ZodEnum<{
337
+ none: "none";
338
+ read: "read";
339
+ "read-if-admitted": "read-if-admitted";
340
+ "read-write": "read-write";
341
+ }>;
342
+ export type AgentMemorySelection = z.infer<typeof AgentMemorySelectionSchema>;
324
343
  /**
325
344
  * Strict additive offer for a durable host-owned Agent. An older daemon that
326
345
  * does not advertise `agent-home-contract` skips this distinct message type
327
346
  * instead of stripping identity and applying legacy workspace semantics.
347
+ *
348
+ * `agentMemory` selects the Agent memory of this one task (see
349
+ * {@link AgentMemorySelectionSchema}). Absent keeps the daemon admission. A
350
+ * host sends it only to a device that advertises `agent-memory-selection`. The
351
+ * prepared offer replaces it with its own required selection.
328
352
  */
329
353
  export declare const TaskOfferForAgentPayloadSchema: z.ZodObject<{
354
+ sealed: z.ZodOptional<z.ZodNever>;
355
+ sealing: z.ZodOptional<z.ZodNever>;
330
356
  instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
331
357
  blobRef: z.ZodObject<{
332
358
  blobId: z.ZodString;
@@ -341,6 +367,12 @@ export declare const TaskOfferForAgentPayloadSchema: z.ZodObject<{
341
367
  profileRevision: z.ZodString;
342
368
  }, z.core.$strict>;
343
369
  homeAccess: z.ZodOptional<z.ZodLiteral<"memory-reader">>;
370
+ agentMemory: z.ZodOptional<z.ZodEnum<{
371
+ none: "none";
372
+ read: "read";
373
+ "read-if-admitted": "read-if-admitted";
374
+ "read-write": "read-write";
375
+ }>>;
344
376
  requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
345
377
  runtime: z.ZodOptional<z.ZodEnum<{
346
378
  claude: "claude";
@@ -394,6 +426,8 @@ export type TaskOfferForAgentPayload = z.infer<typeof TaskOfferForAgentPayloadSc
394
426
  * with an unconsumed egress declaration.
395
427
  */
396
428
  export declare const TaskOfferForAgentWithEgressPayloadSchema: z.ZodObject<{
429
+ sealed: z.ZodOptional<z.ZodNever>;
430
+ sealing: z.ZodOptional<z.ZodNever>;
397
431
  instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
398
432
  blobRef: z.ZodObject<{
399
433
  blobId: z.ZodString;
@@ -408,6 +442,12 @@ export declare const TaskOfferForAgentWithEgressPayloadSchema: z.ZodObject<{
408
442
  profileRevision: z.ZodString;
409
443
  }, z.core.$strict>;
410
444
  homeAccess: z.ZodOptional<z.ZodLiteral<"memory-reader">>;
445
+ agentMemory: z.ZodOptional<z.ZodEnum<{
446
+ none: "none";
447
+ read: "read";
448
+ "read-if-admitted": "read-if-admitted";
449
+ "read-write": "read-write";
450
+ }>>;
411
451
  requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
412
452
  runtime: z.ZodOptional<z.ZodEnum<{
413
453
  claude: "claude";
@@ -498,6 +538,8 @@ export type TaskOfferForAgentWithEgressPayload = z.infer<typeof TaskOfferForAgen
498
538
  * interpreted as a fresh execution by an older daemon.
499
539
  */
500
540
  export declare const TaskOfferForAgentWithEgressFreshPayloadSchema: z.ZodObject<{
541
+ sealed: z.ZodOptional<z.ZodNever>;
542
+ sealing: z.ZodOptional<z.ZodNever>;
501
543
  instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
502
544
  blobRef: z.ZodObject<{
503
545
  blobId: z.ZodString;
@@ -512,6 +554,12 @@ export declare const TaskOfferForAgentWithEgressFreshPayloadSchema: z.ZodObject<
512
554
  profileRevision: z.ZodString;
513
555
  }, z.core.$strict>;
514
556
  homeAccess: z.ZodOptional<z.ZodLiteral<"memory-reader">>;
557
+ agentMemory: z.ZodOptional<z.ZodEnum<{
558
+ none: "none";
559
+ read: "read";
560
+ "read-if-admitted": "read-if-admitted";
561
+ "read-write": "read-write";
562
+ }>>;
515
563
  requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
516
564
  runtime: z.ZodOptional<z.ZodEnum<{
517
565
  claude: "claude";
@@ -615,6 +663,8 @@ export type TaskOfferForAgentWithEgressFreshPayload = z.infer<typeof TaskOfferFo
615
663
  * and declines non-retryably on any difference; nothing here is authority.
616
664
  */
617
665
  export declare const TaskOfferPreparedPayloadSchema: z.ZodObject<{
666
+ sealed: z.ZodOptional<z.ZodNever>;
667
+ sealing: z.ZodOptional<z.ZodNever>;
618
668
  agentRef: z.ZodObject<{
619
669
  agentId: z.ZodString;
620
670
  profileRevision: z.ZodString;
@@ -1168,6 +1218,8 @@ export declare const TaskCancelPayloadSchema: z.ZodObject<{
1168
1218
  export type TaskCancelPayload = z.infer<typeof TaskCancelPayloadSchema>;
1169
1219
  /** server -> daemon: inject steering text into a running task. */
1170
1220
  export declare const TaskSteerPayloadSchema: z.ZodObject<{
1221
+ sealed: z.ZodOptional<z.ZodNever>;
1222
+ sealing: z.ZodOptional<z.ZodNever>;
1171
1223
  text: z.ZodString;
1172
1224
  }, z.core.$strip>;
1173
1225
  export type TaskSteerPayload = z.infer<typeof TaskSteerPayloadSchema>;
@@ -1238,21 +1290,13 @@ export type TaskClaimPayload = z.infer<typeof TaskClaimPayloadSchema>;
1238
1290
  export declare const TaskStartedPayloadSchema: z.ZodObject<{}, z.core.$strip>;
1239
1291
  export type TaskStartedPayload = z.infer<typeof TaskStartedPayloadSchema>;
1240
1292
  /**
1241
- * daemon -> server: decline an offer *before* claiming it (M1 gap #5) — e.g.
1242
- * no compatible/available runtime. Fail-closed rejections must use this instead of silently
1243
- * dropping the offer.
1244
- *
1245
- * Decision (see docs/protocol.md "Declined vs. Failed" for the full
1246
- * writeup): declining does *not* introduce a new `Declined` terminal state.
1247
- * It maps onto the existing `Failed` state via a new `Offered -> Failed`
1248
- * transition. `reason`/`retryable` intentionally mirror `TaskFailPayload`
1249
- * semantics, because a pre-claim decline and a post-claim failure are the same
1250
- * outcome from the dispatcher's point of view (this attempt produced no
1251
- * result; here's whether retrying — e.g. offering to a different device —
1252
- * makes sense), and keeping the state machine minimal avoids forking every
1253
- * terminal-state consumer into "Failed or Declined, handle both".
1293
+ * #654: a sealed decline code names a fixed, non-retryable outcome and
1294
+ * carries no content, so its `reason` is the code itself. A free-text reason
1295
+ * or `retryable: true` never goes with it.
1254
1296
  */
1255
1297
  export declare const TaskDeclinePayloadSchema: z.ZodObject<{
1298
+ sealed: z.ZodOptional<z.ZodNever>;
1299
+ sealing: z.ZodOptional<z.ZodNever>;
1256
1300
  reason: z.ZodString;
1257
1301
  retryable: z.ZodOptional<z.ZodBoolean>;
1258
1302
  agentRef: z.ZodOptional<z.ZodObject<{
@@ -1262,6 +1306,10 @@ export declare const TaskDeclinePayloadSchema: z.ZodObject<{
1262
1306
  code: z.ZodOptional<z.ZodEnum<{
1263
1307
  agent_home_reader_busy: "agent_home_reader_busy";
1264
1308
  agent_home_writer_busy: "agent_home_writer_busy";
1309
+ sealed_content_mac_mismatch: "sealed_content_mac_mismatch";
1310
+ sealed_key_unavailable: "sealed_key_unavailable";
1311
+ sealed_open_failed: "sealed_open_failed";
1312
+ sealing_policy_mismatch: "sealing_policy_mismatch";
1265
1313
  }>>;
1266
1314
  }, z.core.$strip>;
1267
1315
  export type TaskDeclinePayload = z.infer<typeof TaskDeclinePayloadSchema>;
@@ -1277,6 +1325,8 @@ export type TaskDeclinePayload = z.infer<typeof TaskDeclinePayloadSchema>;
1277
1325
  * unknowns instead of choking on them.
1278
1326
  */
1279
1327
  export declare const TaskProgressPayloadSchema: z.ZodObject<{
1328
+ sealed: z.ZodOptional<z.ZodNever>;
1329
+ sealing: z.ZodOptional<z.ZodNever>;
1280
1330
  seq: z.ZodNumber;
1281
1331
  events: z.ZodArray<z.ZodUnion<readonly [z.ZodDiscriminatedUnion<[z.ZodObject<{
1282
1332
  type: z.ZodLiteral<"progress">;
@@ -1366,6 +1416,8 @@ export declare const TaskProgressPayloadSchema: z.ZodObject<{
1366
1416
  export type TaskProgressPayload = z.infer<typeof TaskProgressPayloadSchema>;
1367
1417
  /** daemon -> server: an artifact produced by the task, inline or by blob ref. */
1368
1418
  export declare const TaskArtifactPayloadSchema: z.ZodObject<{
1419
+ sealed: z.ZodOptional<z.ZodNever>;
1420
+ sealing: z.ZodOptional<z.ZodNever>;
1369
1421
  name: z.ZodString;
1370
1422
  contentType: z.ZodString;
1371
1423
  inline: z.ZodOptional<z.ZodString>;
@@ -1395,6 +1447,8 @@ export type TaskArtifactPayload = z.infer<typeof TaskArtifactPayloadSchema>;
1395
1447
  * pending" — the same behavior every server had before this field existed.
1396
1448
  */
1397
1449
  export declare const TaskAwaitApprovalPayloadSchema: z.ZodObject<{
1450
+ sealed: z.ZodOptional<z.ZodNever>;
1451
+ sealing: z.ZodOptional<z.ZodNever>;
1398
1452
  summary: z.ZodString;
1399
1453
  approvalId: z.ZodOptional<z.ZodString>;
1400
1454
  }, z.core.$strip>;
@@ -1610,6 +1664,8 @@ export type TerminalAgentHomeMemoryChange = z.infer<typeof TerminalAgentHomeMemo
1610
1664
  * `RESULT_OUTCOME_MAX_BYTES`).
1611
1665
  */
1612
1666
  export declare const TaskCompletePayloadSchema: z.ZodObject<{
1667
+ sealed: z.ZodOptional<z.ZodNever>;
1668
+ sealing: z.ZodOptional<z.ZodNever>;
1613
1669
  harnessId: z.ZodOptional<z.ZodString>;
1614
1670
  summary: z.ZodString;
1615
1671
  finalMessage: z.ZodOptional<z.ZodString>;
@@ -1664,6 +1720,8 @@ export declare const TaskCompletePayloadSchema: z.ZodObject<{
1664
1720
  export type TaskCompletePayload = z.infer<typeof TaskCompletePayloadSchema>;
1665
1721
  /** daemon -> server: task failed. */
1666
1722
  export declare const TaskFailPayloadSchema: z.ZodObject<{
1723
+ sealed: z.ZodOptional<z.ZodNever>;
1724
+ sealing: z.ZodOptional<z.ZodNever>;
1667
1725
  recovery: z.ZodOptional<z.ZodObject<{
1668
1726
  kind: z.ZodLiteral<"daemon_interrupted">;
1669
1727
  offerId: z.ZodUUID;
@@ -1731,6 +1789,8 @@ export type TaskFailPayload = z.infer<typeof TaskFailPayloadSchema>;
1731
1789
  * trigger that moves `Claimed`/`Running`/`AwaitApproval -> Cancelled`.
1732
1790
  */
1733
1791
  export declare const TaskCancelledPayloadSchema: z.ZodObject<{
1792
+ sealed: z.ZodOptional<z.ZodNever>;
1793
+ sealing: z.ZodOptional<z.ZodNever>;
1734
1794
  harnessId: z.ZodOptional<z.ZodString>;
1735
1795
  reason: z.ZodOptional<z.ZodString>;
1736
1796
  usage: z.ZodOptional<z.ZodObject<{
@@ -1816,1599 +1876,1024 @@ export declare const TaskApprovalResolvedPayloadSchema: z.ZodObject<{
1816
1876
  at: z.ZodISODateTime;
1817
1877
  }, z.core.$strip>;
1818
1878
  export type TaskApprovalResolvedPayload = z.infer<typeof TaskApprovalResolvedPayloadSchema>;
1819
- /** Protocol-owned task-opening family; the wire registry consumes these same entries. */
1820
- declare const TASK_OFFER_PAYLOAD_SCHEMAS: {
1821
- readonly 'task.offer': z.ZodObject<{
1822
- instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
1823
- blobRef: z.ZodObject<{
1824
- blobId: z.ZodString;
1825
- contentHash: z.ZodString;
1826
- size: z.ZodNumber;
1827
- contentType: z.ZodString;
1828
- url: z.ZodOptional<z.ZodString>;
1829
- }, z.core.$strip>;
1830
- }, z.core.$strict>]>;
1831
- runtime: z.ZodOptional<z.ZodEnum<{
1832
- claude: "claude";
1833
- codex: "codex";
1834
- pi: "pi";
1835
- }>>;
1836
- harnessId: z.ZodOptional<z.ZodString>;
1837
- dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
1838
- lane: z.ZodLiteral<"subscription">;
1839
- runtimeId: z.ZodEnum<{
1840
- claude: "claude";
1841
- codex: "codex";
1842
- }>;
1843
- providerId: z.ZodNull;
1844
- modelId: z.ZodString;
1845
- }, z.core.$strict>, z.ZodObject<{
1846
- lane: z.ZodLiteral<"byok">;
1847
- runtimeId: z.ZodLiteral<"pi">;
1848
- providerId: z.ZodString;
1849
- modelId: z.ZodString;
1850
- }, z.core.$strict>, z.ZodObject<{
1851
- lane: z.ZodLiteral<"byok-profile">;
1852
- runtimeId: z.ZodLiteral<"pi">;
1853
- providerProfile: z.ZodObject<{
1854
- profileRef: z.ZodString;
1855
- profileRevision: z.ZodString;
1856
- profileHash: z.ZodString;
1857
- modelId: z.ZodString;
1858
- requiredCapabilities: z.ZodArray<z.ZodEnum<{
1859
- "image-input": "image-input";
1860
- }>>;
1861
- }, z.core.$strict>;
1862
- }, z.core.$strict>], "lane">>;
1863
- sessionRef: z.ZodOptional<z.ZodString>;
1864
- workspaceHint: z.ZodOptional<z.ZodString>;
1865
- limits: z.ZodOptional<z.ZodObject<{
1866
- maxDurationMs: z.ZodOptional<z.ZodNumber>;
1867
- maxTokens: z.ZodOptional<z.ZodNumber>;
1868
- }, z.core.$strip>>;
1869
- }, z.core.$strip>;
1870
- readonly 'task.offer_with_toolsets': z.ZodObject<{
1871
- instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
1872
- blobRef: z.ZodObject<{
1873
- blobId: z.ZodString;
1874
- contentHash: z.ZodString;
1875
- size: z.ZodNumber;
1876
- contentType: z.ZodString;
1877
- url: z.ZodOptional<z.ZodString>;
1878
- }, z.core.$strip>;
1879
- }, z.core.$strict>]>;
1880
- runtime: z.ZodOptional<z.ZodEnum<{
1879
+ /** server -> daemon: `task.offer` of a sealed task. */
1880
+ export declare const TaskOfferSealedPayloadSchema: z.ZodObject<{
1881
+ runtime: z.ZodOptional<z.ZodEnum<{
1882
+ claude: "claude";
1883
+ codex: "codex";
1884
+ pi: "pi";
1885
+ }>>;
1886
+ harnessId: z.ZodOptional<z.ZodString>;
1887
+ dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
1888
+ lane: z.ZodLiteral<"subscription">;
1889
+ runtimeId: z.ZodEnum<{
1881
1890
  claude: "claude";
1882
1891
  codex: "codex";
1883
- pi: "pi";
1884
- }>>;
1885
- harnessId: z.ZodOptional<z.ZodString>;
1886
- dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
1887
- lane: z.ZodLiteral<"subscription">;
1888
- runtimeId: z.ZodEnum<{
1889
- claude: "claude";
1890
- codex: "codex";
1891
- }>;
1892
- providerId: z.ZodNull;
1893
- modelId: z.ZodString;
1894
- }, z.core.$strict>, z.ZodObject<{
1895
- lane: z.ZodLiteral<"byok">;
1896
- runtimeId: z.ZodLiteral<"pi">;
1897
- providerId: z.ZodString;
1898
- modelId: z.ZodString;
1899
- }, z.core.$strict>, z.ZodObject<{
1900
- lane: z.ZodLiteral<"byok-profile">;
1901
- runtimeId: z.ZodLiteral<"pi">;
1902
- providerProfile: z.ZodObject<{
1903
- profileRef: z.ZodString;
1904
- profileRevision: z.ZodString;
1905
- profileHash: z.ZodString;
1906
- modelId: z.ZodString;
1907
- requiredCapabilities: z.ZodArray<z.ZodEnum<{
1908
- "image-input": "image-input";
1909
- }>>;
1910
- }, z.core.$strict>;
1911
- }, z.core.$strict>], "lane">>;
1912
- sessionRef: z.ZodOptional<z.ZodString>;
1913
- workspaceHint: z.ZodOptional<z.ZodString>;
1914
- limits: z.ZodOptional<z.ZodObject<{
1915
- maxDurationMs: z.ZodOptional<z.ZodNumber>;
1916
- maxTokens: z.ZodOptional<z.ZodNumber>;
1917
- }, z.core.$strip>>;
1918
- requiredToolsets: z.ZodArray<z.ZodString>;
1919
- }, z.core.$strict>;
1920
- readonly 'task.offer_for_agent': z.ZodObject<{
1921
- instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
1922
- blobRef: z.ZodObject<{
1923
- blobId: z.ZodString;
1924
- contentHash: z.ZodString;
1925
- size: z.ZodNumber;
1926
- contentType: z.ZodString;
1927
- url: z.ZodOptional<z.ZodString>;
1928
- }, z.core.$strip>;
1929
- }, z.core.$strict>]>;
1930
- agentRef: z.ZodObject<{
1931
- agentId: z.ZodString;
1892
+ }>;
1893
+ providerId: z.ZodNull;
1894
+ modelId: z.ZodString;
1895
+ }, z.core.$strict>, z.ZodObject<{
1896
+ lane: z.ZodLiteral<"byok">;
1897
+ runtimeId: z.ZodLiteral<"pi">;
1898
+ providerId: z.ZodString;
1899
+ modelId: z.ZodString;
1900
+ }, z.core.$strict>, z.ZodObject<{
1901
+ lane: z.ZodLiteral<"byok-profile">;
1902
+ runtimeId: z.ZodLiteral<"pi">;
1903
+ providerProfile: z.ZodObject<{
1904
+ profileRef: z.ZodString;
1932
1905
  profileRevision: z.ZodString;
1906
+ profileHash: z.ZodString;
1907
+ modelId: z.ZodString;
1908
+ requiredCapabilities: z.ZodArray<z.ZodEnum<{
1909
+ "image-input": "image-input";
1910
+ }>>;
1933
1911
  }, z.core.$strict>;
1934
- homeAccess: z.ZodOptional<z.ZodLiteral<"memory-reader">>;
1935
- requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
1936
- runtime: z.ZodOptional<z.ZodEnum<{
1937
- claude: "claude";
1938
- codex: "codex";
1939
- pi: "pi";
1912
+ }, z.core.$strict>], "lane">>;
1913
+ sessionRef: z.ZodOptional<z.ZodString>;
1914
+ workspaceHint: z.ZodOptional<z.ZodString>;
1915
+ limits: z.ZodOptional<z.ZodObject<{
1916
+ maxDurationMs: z.ZodOptional<z.ZodNumber>;
1917
+ maxTokens: z.ZodOptional<z.ZodNumber>;
1918
+ }, z.core.$strip>>;
1919
+ instruction: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
1920
+ blobRef: z.ZodObject<{
1921
+ blobId: z.ZodString;
1922
+ contentHash: z.ZodString;
1923
+ size: z.ZodNumber;
1924
+ contentType: z.ZodString;
1925
+ url: z.ZodOptional<z.ZodString>;
1926
+ }, z.core.$strip>;
1927
+ }, z.core.$strict>]>>;
1928
+ sealing: z.ZodObject<{
1929
+ scopeId: z.ZodString;
1930
+ epoch: z.ZodNumber;
1931
+ categories: z.ZodArray<z.ZodEnum<{
1932
+ "task-input": "task-input";
1933
+ "task-output": "task-output";
1940
1934
  }>>;
1941
- harnessId: z.ZodOptional<z.ZodString>;
1942
- dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
1943
- lane: z.ZodLiteral<"subscription">;
1944
- runtimeId: z.ZodEnum<{
1945
- claude: "claude";
1946
- codex: "codex";
1947
- }>;
1948
- providerId: z.ZodNull;
1949
- modelId: z.ZodString;
1950
- }, z.core.$strict>, z.ZodObject<{
1951
- lane: z.ZodLiteral<"byok">;
1952
- runtimeId: z.ZodLiteral<"pi">;
1953
- providerId: z.ZodString;
1954
- modelId: z.ZodString;
1955
- }, z.core.$strict>, z.ZodObject<{
1956
- lane: z.ZodLiteral<"byok-profile">;
1957
- runtimeId: z.ZodLiteral<"pi">;
1958
- providerProfile: z.ZodObject<{
1959
- profileRef: z.ZodString;
1960
- profileRevision: z.ZodString;
1961
- profileHash: z.ZodString;
1962
- modelId: z.ZodString;
1963
- requiredCapabilities: z.ZodArray<z.ZodEnum<{
1964
- "image-input": "image-input";
1965
- }>>;
1966
- }, z.core.$strict>;
1967
- }, z.core.$strict>], "lane">>;
1968
- terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
1969
- mode: z.ZodLiteral<"none">;
1970
- }, z.core.$strict>, z.ZodObject<{
1971
- mode: z.ZodLiteral<"result-document">;
1972
- contract: z.ZodString;
1973
- schema: z.ZodCustom<import("./result-schema").ResultSchema, import("./result-schema").ResultSchema>;
1974
- }, z.core.$strict>], "mode">>;
1975
- sessionRef: z.ZodOptional<z.ZodString>;
1976
- limits: z.ZodOptional<z.ZodObject<{
1977
- maxDurationMs: z.ZodOptional<z.ZodNumber>;
1978
- maxTokens: z.ZodOptional<z.ZodNumber>;
1979
- }, z.core.$strip>>;
1980
1935
  }, z.core.$strict>;
1981
- readonly 'task.offer_for_agent_with_egress': z.ZodObject<{
1982
- instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
1983
- blobRef: z.ZodObject<{
1984
- blobId: z.ZodString;
1985
- contentHash: z.ZodString;
1986
- size: z.ZodNumber;
1987
- contentType: z.ZodString;
1988
- url: z.ZodOptional<z.ZodString>;
1989
- }, z.core.$strip>;
1990
- }, z.core.$strict>]>;
1991
- agentRef: z.ZodObject<{
1992
- agentId: z.ZodString;
1993
- profileRevision: z.ZodString;
1936
+ sealed: z.ZodOptional<z.ZodObject<{
1937
+ v: z.ZodLiteral<1>;
1938
+ suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
1939
+ category: z.ZodLiteral<"task-input">;
1940
+ scope: z.ZodObject<{
1941
+ id: z.ZodString;
1942
+ epoch: z.ZodNumber;
1943
+ keyId: z.ZodString;
1994
1944
  }, z.core.$strict>;
1995
- homeAccess: z.ZodOptional<z.ZodLiteral<"memory-reader">>;
1996
- requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
1997
- runtime: z.ZodOptional<z.ZodEnum<{
1998
- claude: "claude";
1999
- codex: "codex";
2000
- pi: "pi";
2001
- }>>;
2002
- harnessId: z.ZodOptional<z.ZodString>;
2003
- dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
2004
- lane: z.ZodLiteral<"subscription">;
2005
- runtimeId: z.ZodEnum<{
2006
- claude: "claude";
2007
- codex: "codex";
2008
- }>;
2009
- providerId: z.ZodNull;
2010
- modelId: z.ZodString;
2011
- }, z.core.$strict>, z.ZodObject<{
2012
- lane: z.ZodLiteral<"byok">;
2013
- runtimeId: z.ZodLiteral<"pi">;
2014
- providerId: z.ZodString;
2015
- modelId: z.ZodString;
2016
- }, z.core.$strict>, z.ZodObject<{
2017
- lane: z.ZodLiteral<"byok-profile">;
2018
- runtimeId: z.ZodLiteral<"pi">;
2019
- providerProfile: z.ZodObject<{
2020
- profileRef: z.ZodString;
2021
- profileRevision: z.ZodString;
2022
- profileHash: z.ZodString;
2023
- modelId: z.ZodString;
2024
- requiredCapabilities: z.ZodArray<z.ZodEnum<{
2025
- "image-input": "image-input";
2026
- }>>;
2027
- }, z.core.$strict>;
2028
- }, z.core.$strict>], "lane">>;
2029
- terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
2030
- mode: z.ZodLiteral<"none">;
2031
- }, z.core.$strict>, z.ZodObject<{
2032
- mode: z.ZodLiteral<"result-document">;
2033
- contract: z.ZodString;
2034
- schema: z.ZodCustom<import("./result-schema").ResultSchema, import("./result-schema").ResultSchema>;
2035
- }, z.core.$strict>], "mode">>;
2036
- limits: z.ZodOptional<z.ZodObject<{
2037
- maxDurationMs: z.ZodOptional<z.ZodNumber>;
2038
- maxTokens: z.ZodOptional<z.ZodNumber>;
2039
- }, z.core.$strip>>;
2040
- sessionRef: z.ZodString;
2041
- egressPolicy: z.ZodObject<{
2042
- policyRevision: z.ZodString;
2043
- activity: z.ZodObject<{
2044
- delivery: z.ZodLiteral<"latest-value">;
2045
- maxCoalesceMs: z.ZodNumber;
2046
- maxEventBytes: z.ZodNumber;
2047
- }, z.core.$strict>;
2048
- reliable: z.ZodObject<{
2049
- maxPendingEventsPerAgent: z.ZodNumber;
2050
- maxPendingBytesPerAgent: z.ZodNumber;
2051
- maxPendingBytesPerTenant: z.ZodNumber;
2052
- }, z.core.$strict>;
2053
- transfers: z.ZodObject<{
2054
- workspace: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
2055
- maxBytes: z.ZodNumber;
2056
- allowedMimeTypes: z.ZodArray<z.ZodString>;
2057
- }, z.core.$strict>]>;
2058
- transcript: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
2059
- maxBytes: z.ZodNumber;
2060
- allowedMimeTypes: z.ZodArray<z.ZodString>;
2061
- }, z.core.$strict>]>;
2062
- artifact: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
2063
- maxBytes: z.ZodNumber;
2064
- allowedMimeTypes: z.ZodArray<z.ZodString>;
2065
- }, z.core.$strict>]>;
2066
- }, z.core.$strict>;
1945
+ chainHead: z.ZodObject<{
1946
+ seq: z.ZodNumber;
1947
+ hash: z.ZodString;
2067
1948
  }, z.core.$strict>;
2068
- messageEgress: z.ZodOptional<z.ZodObject<{
2069
- mode: z.ZodLiteral<"required">;
2070
- contract: z.ZodString;
2071
- contentType: z.ZodEnum<{
2072
- "text/markdown": "text/markdown";
2073
- "text/plain": "text/plain";
2074
- }>;
2075
- maxBytes: z.ZodNumber;
1949
+ sender: z.ZodString;
1950
+ salt: z.ZodString;
1951
+ nonce: z.ZodString;
1952
+ paddedLength: z.ZodNumber;
1953
+ contentMac: z.ZodString;
1954
+ ciphertext: z.ZodOptional<z.ZodString>;
1955
+ ciphertextRef: z.ZodOptional<z.ZodObject<{
1956
+ blobId: z.ZodString;
1957
+ contentHash: z.ZodString;
1958
+ size: z.ZodNumber;
1959
+ contentType: z.ZodString;
2076
1960
  }, z.core.$strict>>;
2077
- }, z.core.$strict>;
2078
- readonly 'task.offer_for_agent_with_egress_fresh': z.ZodObject<{
2079
- instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
2080
- blobRef: z.ZodObject<{
2081
- blobId: z.ZodString;
2082
- contentHash: z.ZodString;
2083
- size: z.ZodNumber;
2084
- contentType: z.ZodString;
2085
- url: z.ZodOptional<z.ZodString>;
2086
- }, z.core.$strip>;
2087
- }, z.core.$strict>]>;
2088
- agentRef: z.ZodObject<{
2089
- agentId: z.ZodString;
2090
- profileRevision: z.ZodString;
2091
- }, z.core.$strict>;
2092
- homeAccess: z.ZodOptional<z.ZodLiteral<"memory-reader">>;
2093
- requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
2094
- runtime: z.ZodOptional<z.ZodEnum<{
1961
+ }, z.core.$strict>>;
1962
+ }, z.core.$strict>;
1963
+ export type TaskOfferSealedPayload = z.infer<typeof TaskOfferSealedPayloadSchema>;
1964
+ /** server -> daemon: `task.offer_with_toolsets` of a sealed task. */
1965
+ export declare const TaskOfferWithToolsetsSealedPayloadSchema: z.ZodObject<{
1966
+ runtime: z.ZodOptional<z.ZodEnum<{
1967
+ claude: "claude";
1968
+ codex: "codex";
1969
+ pi: "pi";
1970
+ }>>;
1971
+ harnessId: z.ZodOptional<z.ZodString>;
1972
+ dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
1973
+ lane: z.ZodLiteral<"subscription">;
1974
+ runtimeId: z.ZodEnum<{
2095
1975
  claude: "claude";
2096
1976
  codex: "codex";
2097
- pi: "pi";
2098
- }>>;
2099
- harnessId: z.ZodOptional<z.ZodString>;
2100
- dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
2101
- lane: z.ZodLiteral<"subscription">;
2102
- runtimeId: z.ZodEnum<{
2103
- claude: "claude";
2104
- codex: "codex";
2105
- }>;
2106
- providerId: z.ZodNull;
2107
- modelId: z.ZodString;
2108
- }, z.core.$strict>, z.ZodObject<{
2109
- lane: z.ZodLiteral<"byok">;
2110
- runtimeId: z.ZodLiteral<"pi">;
2111
- providerId: z.ZodString;
2112
- modelId: z.ZodString;
2113
- }, z.core.$strict>, z.ZodObject<{
2114
- lane: z.ZodLiteral<"byok-profile">;
2115
- runtimeId: z.ZodLiteral<"pi">;
2116
- providerProfile: z.ZodObject<{
2117
- profileRef: z.ZodString;
2118
- profileRevision: z.ZodString;
2119
- profileHash: z.ZodString;
2120
- modelId: z.ZodString;
2121
- requiredCapabilities: z.ZodArray<z.ZodEnum<{
2122
- "image-input": "image-input";
2123
- }>>;
2124
- }, z.core.$strict>;
2125
- }, z.core.$strict>], "lane">>;
2126
- terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
2127
- mode: z.ZodLiteral<"none">;
2128
- }, z.core.$strict>, z.ZodObject<{
2129
- mode: z.ZodLiteral<"result-document">;
2130
- contract: z.ZodString;
2131
- schema: z.ZodCustom<import("./result-schema").ResultSchema, import("./result-schema").ResultSchema>;
2132
- }, z.core.$strict>], "mode">>;
2133
- limits: z.ZodOptional<z.ZodObject<{
2134
- maxDurationMs: z.ZodOptional<z.ZodNumber>;
2135
- maxTokens: z.ZodOptional<z.ZodNumber>;
2136
- }, z.core.$strip>>;
2137
- egressPolicy: z.ZodObject<{
2138
- policyRevision: z.ZodString;
2139
- activity: z.ZodObject<{
2140
- delivery: z.ZodLiteral<"latest-value">;
2141
- maxCoalesceMs: z.ZodNumber;
2142
- maxEventBytes: z.ZodNumber;
2143
- }, z.core.$strict>;
2144
- reliable: z.ZodObject<{
2145
- maxPendingEventsPerAgent: z.ZodNumber;
2146
- maxPendingBytesPerAgent: z.ZodNumber;
2147
- maxPendingBytesPerTenant: z.ZodNumber;
2148
- }, z.core.$strict>;
2149
- transfers: z.ZodObject<{
2150
- workspace: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
2151
- maxBytes: z.ZodNumber;
2152
- allowedMimeTypes: z.ZodArray<z.ZodString>;
2153
- }, z.core.$strict>]>;
2154
- transcript: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
2155
- maxBytes: z.ZodNumber;
2156
- allowedMimeTypes: z.ZodArray<z.ZodString>;
2157
- }, z.core.$strict>]>;
2158
- artifact: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
2159
- maxBytes: z.ZodNumber;
2160
- allowedMimeTypes: z.ZodArray<z.ZodString>;
2161
- }, z.core.$strict>]>;
2162
- }, z.core.$strict>;
2163
- }, z.core.$strict>;
2164
- messageEgress: z.ZodOptional<z.ZodObject<{
2165
- mode: z.ZodLiteral<"required">;
2166
- contract: z.ZodString;
2167
- contentType: z.ZodEnum<{
2168
- "text/markdown": "text/markdown";
2169
- "text/plain": "text/plain";
2170
- }>;
2171
- maxBytes: z.ZodNumber;
2172
- }, z.core.$strict>>;
2173
- }, z.core.$strict>;
2174
- readonly 'task.offer_prepared': z.ZodObject<{
2175
- agentRef: z.ZodObject<{
2176
- agentId: z.ZodString;
1977
+ }>;
1978
+ providerId: z.ZodNull;
1979
+ modelId: z.ZodString;
1980
+ }, z.core.$strict>, z.ZodObject<{
1981
+ lane: z.ZodLiteral<"byok">;
1982
+ runtimeId: z.ZodLiteral<"pi">;
1983
+ providerId: z.ZodString;
1984
+ modelId: z.ZodString;
1985
+ }, z.core.$strict>, z.ZodObject<{
1986
+ lane: z.ZodLiteral<"byok-profile">;
1987
+ runtimeId: z.ZodLiteral<"pi">;
1988
+ providerProfile: z.ZodObject<{
1989
+ profileRef: z.ZodString;
2177
1990
  profileRevision: z.ZodString;
1991
+ profileHash: z.ZodString;
1992
+ modelId: z.ZodString;
1993
+ requiredCapabilities: z.ZodArray<z.ZodEnum<{
1994
+ "image-input": "image-input";
1995
+ }>>;
2178
1996
  }, z.core.$strict>;
2179
- homeAccess: z.ZodOptional<z.ZodLiteral<"memory-reader">>;
2180
- requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
2181
- runtime: z.ZodOptional<z.ZodEnum<{
2182
- claude: "claude";
2183
- codex: "codex";
2184
- pi: "pi";
1997
+ }, z.core.$strict>], "lane">>;
1998
+ sessionRef: z.ZodOptional<z.ZodString>;
1999
+ workspaceHint: z.ZodOptional<z.ZodString>;
2000
+ limits: z.ZodOptional<z.ZodObject<{
2001
+ maxDurationMs: z.ZodOptional<z.ZodNumber>;
2002
+ maxTokens: z.ZodOptional<z.ZodNumber>;
2003
+ }, z.core.$strip>>;
2004
+ requiredToolsets: z.ZodArray<z.ZodString>;
2005
+ instruction: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
2006
+ blobRef: z.ZodObject<{
2007
+ blobId: z.ZodString;
2008
+ contentHash: z.ZodString;
2009
+ size: z.ZodNumber;
2010
+ contentType: z.ZodString;
2011
+ url: z.ZodOptional<z.ZodString>;
2012
+ }, z.core.$strip>;
2013
+ }, z.core.$strict>]>>;
2014
+ sealing: z.ZodObject<{
2015
+ scopeId: z.ZodString;
2016
+ epoch: z.ZodNumber;
2017
+ categories: z.ZodArray<z.ZodEnum<{
2018
+ "task-input": "task-input";
2019
+ "task-output": "task-output";
2185
2020
  }>>;
2186
- harnessId: z.ZodOptional<z.ZodString>;
2187
- dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
2188
- lane: z.ZodLiteral<"subscription">;
2189
- runtimeId: z.ZodEnum<{
2190
- claude: "claude";
2191
- codex: "codex";
2192
- }>;
2193
- providerId: z.ZodNull;
2194
- modelId: z.ZodString;
2195
- }, z.core.$strict>, z.ZodObject<{
2196
- lane: z.ZodLiteral<"byok">;
2197
- runtimeId: z.ZodLiteral<"pi">;
2198
- providerId: z.ZodString;
2199
- modelId: z.ZodString;
2200
- }, z.core.$strict>, z.ZodObject<{
2201
- lane: z.ZodLiteral<"byok-profile">;
2202
- runtimeId: z.ZodLiteral<"pi">;
2203
- providerProfile: z.ZodObject<{
2204
- profileRef: z.ZodString;
2205
- profileRevision: z.ZodString;
2206
- profileHash: z.ZodString;
2207
- modelId: z.ZodString;
2208
- requiredCapabilities: z.ZodArray<z.ZodEnum<{
2209
- "image-input": "image-input";
2210
- }>>;
2211
- }, z.core.$strict>;
2212
- }, z.core.$strict>], "lane">>;
2213
- terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
2214
- mode: z.ZodLiteral<"none">;
2215
- }, z.core.$strict>, z.ZodObject<{
2216
- mode: z.ZodLiteral<"result-document">;
2217
- contract: z.ZodString;
2218
- schema: z.ZodCustom<import("./result-schema").ResultSchema, import("./result-schema").ResultSchema>;
2219
- }, z.core.$strict>], "mode">>;
2220
- limits: z.ZodOptional<z.ZodObject<{
2221
- maxDurationMs: z.ZodOptional<z.ZodNumber>;
2222
- maxTokens: z.ZodOptional<z.ZodNumber>;
2223
- }, z.core.$strip>>;
2224
- preparation: z.ZodObject<{
2225
- reference: z.ZodString;
2226
- requestDigest: z.ZodString;
2227
- artifactDigest: z.ZodOptional<z.ZodString>;
2021
+ }, z.core.$strict>;
2022
+ sealed: z.ZodOptional<z.ZodObject<{
2023
+ v: z.ZodLiteral<1>;
2024
+ suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
2025
+ category: z.ZodLiteral<"task-input">;
2026
+ scope: z.ZodObject<{
2027
+ id: z.ZodString;
2028
+ epoch: z.ZodNumber;
2029
+ keyId: z.ZodString;
2228
2030
  }, z.core.$strict>;
2229
- agentMemory: z.ZodEnum<{
2230
- none: "none";
2231
- read: "read";
2232
- "read-write": "read-write";
2233
- }>;
2234
- egressPolicy: z.ZodObject<{
2235
- policyRevision: z.ZodString;
2236
- activity: z.ZodObject<{
2237
- delivery: z.ZodLiteral<"latest-value">;
2238
- maxCoalesceMs: z.ZodNumber;
2239
- maxEventBytes: z.ZodNumber;
2240
- }, z.core.$strict>;
2241
- reliable: z.ZodObject<{
2242
- maxPendingEventsPerAgent: z.ZodNumber;
2243
- maxPendingBytesPerAgent: z.ZodNumber;
2244
- maxPendingBytesPerTenant: z.ZodNumber;
2245
- }, z.core.$strict>;
2246
- transfers: z.ZodObject<{
2247
- workspace: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
2248
- maxBytes: z.ZodNumber;
2249
- allowedMimeTypes: z.ZodArray<z.ZodString>;
2250
- }, z.core.$strict>]>;
2251
- transcript: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
2252
- maxBytes: z.ZodNumber;
2253
- allowedMimeTypes: z.ZodArray<z.ZodString>;
2254
- }, z.core.$strict>]>;
2255
- artifact: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
2256
- maxBytes: z.ZodNumber;
2257
- allowedMimeTypes: z.ZodArray<z.ZodString>;
2258
- }, z.core.$strict>]>;
2259
- }, z.core.$strict>;
2031
+ chainHead: z.ZodObject<{
2032
+ seq: z.ZodNumber;
2033
+ hash: z.ZodString;
2260
2034
  }, z.core.$strict>;
2261
- messageEgress: z.ZodOptional<z.ZodObject<{
2262
- mode: z.ZodLiteral<"required">;
2263
- contract: z.ZodString;
2264
- contentType: z.ZodEnum<{
2265
- "text/markdown": "text/markdown";
2266
- "text/plain": "text/plain";
2267
- }>;
2268
- maxBytes: z.ZodNumber;
2035
+ sender: z.ZodString;
2036
+ salt: z.ZodString;
2037
+ nonce: z.ZodString;
2038
+ paddedLength: z.ZodNumber;
2039
+ contentMac: z.ZodString;
2040
+ ciphertext: z.ZodOptional<z.ZodString>;
2041
+ ciphertextRef: z.ZodOptional<z.ZodObject<{
2042
+ blobId: z.ZodString;
2043
+ contentHash: z.ZodString;
2044
+ size: z.ZodNumber;
2045
+ contentType: z.ZodString;
2269
2046
  }, z.core.$strict>>;
2047
+ }, z.core.$strict>>;
2048
+ }, z.core.$strict>;
2049
+ export type TaskOfferWithToolsetsSealedPayload = z.infer<typeof TaskOfferWithToolsetsSealedPayloadSchema>;
2050
+ /** server -> daemon: `task.offer_for_agent` of a sealed task. */
2051
+ export declare const TaskOfferForAgentSealedPayloadSchema: z.ZodObject<{
2052
+ agentRef: z.ZodObject<{
2053
+ agentId: z.ZodString;
2054
+ profileRevision: z.ZodString;
2270
2055
  }, z.core.$strict>;
2271
- };
2272
- export type TaskOfferType = keyof typeof TASK_OFFER_PAYLOAD_SCHEMAS;
2273
- export declare const TASK_OFFER_TYPES: readonly TaskOfferType[];
2274
- /** Classify task-opening offers without duplicating the protocol registry in consumers. */
2275
- export declare function isTaskOfferType(type: string): type is TaskOfferType;
2276
- export declare const MESSAGE_PAYLOAD_SCHEMAS: {
2277
- readonly 'task.offer': z.ZodObject<{
2278
- instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
2279
- blobRef: z.ZodObject<{
2280
- blobId: z.ZodString;
2281
- contentHash: z.ZodString;
2282
- size: z.ZodNumber;
2283
- contentType: z.ZodString;
2284
- url: z.ZodOptional<z.ZodString>;
2285
- }, z.core.$strip>;
2286
- }, z.core.$strict>]>;
2287
- runtime: z.ZodOptional<z.ZodEnum<{
2056
+ homeAccess: z.ZodOptional<z.ZodLiteral<"memory-reader">>;
2057
+ agentMemory: z.ZodOptional<z.ZodEnum<{
2058
+ none: "none";
2059
+ read: "read";
2060
+ "read-if-admitted": "read-if-admitted";
2061
+ "read-write": "read-write";
2062
+ }>>;
2063
+ requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
2064
+ runtime: z.ZodOptional<z.ZodEnum<{
2065
+ claude: "claude";
2066
+ codex: "codex";
2067
+ pi: "pi";
2068
+ }>>;
2069
+ harnessId: z.ZodOptional<z.ZodString>;
2070
+ dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
2071
+ lane: z.ZodLiteral<"subscription">;
2072
+ runtimeId: z.ZodEnum<{
2288
2073
  claude: "claude";
2289
2074
  codex: "codex";
2290
- pi: "pi";
2291
- }>>;
2292
- harnessId: z.ZodOptional<z.ZodString>;
2293
- dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
2294
- lane: z.ZodLiteral<"subscription">;
2295
- runtimeId: z.ZodEnum<{
2296
- claude: "claude";
2297
- codex: "codex";
2298
- }>;
2299
- providerId: z.ZodNull;
2300
- modelId: z.ZodString;
2301
- }, z.core.$strict>, z.ZodObject<{
2302
- lane: z.ZodLiteral<"byok">;
2303
- runtimeId: z.ZodLiteral<"pi">;
2304
- providerId: z.ZodString;
2305
- modelId: z.ZodString;
2306
- }, z.core.$strict>, z.ZodObject<{
2307
- lane: z.ZodLiteral<"byok-profile">;
2308
- runtimeId: z.ZodLiteral<"pi">;
2309
- providerProfile: z.ZodObject<{
2310
- profileRef: z.ZodString;
2311
- profileRevision: z.ZodString;
2312
- profileHash: z.ZodString;
2313
- modelId: z.ZodString;
2314
- requiredCapabilities: z.ZodArray<z.ZodEnum<{
2315
- "image-input": "image-input";
2316
- }>>;
2317
- }, z.core.$strict>;
2318
- }, z.core.$strict>], "lane">>;
2319
- sessionRef: z.ZodOptional<z.ZodString>;
2320
- workspaceHint: z.ZodOptional<z.ZodString>;
2321
- limits: z.ZodOptional<z.ZodObject<{
2322
- maxDurationMs: z.ZodOptional<z.ZodNumber>;
2323
- maxTokens: z.ZodOptional<z.ZodNumber>;
2324
- }, z.core.$strip>>;
2325
- }, z.core.$strip>;
2326
- readonly 'task.offer_with_toolsets': z.ZodObject<{
2327
- instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
2328
- blobRef: z.ZodObject<{
2329
- blobId: z.ZodString;
2330
- contentHash: z.ZodString;
2331
- size: z.ZodNumber;
2332
- contentType: z.ZodString;
2333
- url: z.ZodOptional<z.ZodString>;
2334
- }, z.core.$strip>;
2335
- }, z.core.$strict>]>;
2336
- runtime: z.ZodOptional<z.ZodEnum<{
2337
- claude: "claude";
2338
- codex: "codex";
2339
- pi: "pi";
2340
- }>>;
2341
- harnessId: z.ZodOptional<z.ZodString>;
2342
- dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
2343
- lane: z.ZodLiteral<"subscription">;
2344
- runtimeId: z.ZodEnum<{
2345
- claude: "claude";
2346
- codex: "codex";
2347
- }>;
2348
- providerId: z.ZodNull;
2349
- modelId: z.ZodString;
2350
- }, z.core.$strict>, z.ZodObject<{
2351
- lane: z.ZodLiteral<"byok">;
2352
- runtimeId: z.ZodLiteral<"pi">;
2353
- providerId: z.ZodString;
2354
- modelId: z.ZodString;
2355
- }, z.core.$strict>, z.ZodObject<{
2356
- lane: z.ZodLiteral<"byok-profile">;
2357
- runtimeId: z.ZodLiteral<"pi">;
2358
- providerProfile: z.ZodObject<{
2359
- profileRef: z.ZodString;
2360
- profileRevision: z.ZodString;
2361
- profileHash: z.ZodString;
2362
- modelId: z.ZodString;
2363
- requiredCapabilities: z.ZodArray<z.ZodEnum<{
2364
- "image-input": "image-input";
2365
- }>>;
2366
- }, z.core.$strict>;
2367
- }, z.core.$strict>], "lane">>;
2368
- sessionRef: z.ZodOptional<z.ZodString>;
2369
- workspaceHint: z.ZodOptional<z.ZodString>;
2370
- limits: z.ZodOptional<z.ZodObject<{
2371
- maxDurationMs: z.ZodOptional<z.ZodNumber>;
2372
- maxTokens: z.ZodOptional<z.ZodNumber>;
2373
- }, z.core.$strip>>;
2374
- requiredToolsets: z.ZodArray<z.ZodString>;
2375
- }, z.core.$strict>;
2376
- readonly 'task.offer_for_agent': z.ZodObject<{
2377
- instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
2378
- blobRef: z.ZodObject<{
2379
- blobId: z.ZodString;
2380
- contentHash: z.ZodString;
2381
- size: z.ZodNumber;
2382
- contentType: z.ZodString;
2383
- url: z.ZodOptional<z.ZodString>;
2384
- }, z.core.$strip>;
2385
- }, z.core.$strict>]>;
2386
- agentRef: z.ZodObject<{
2387
- agentId: z.ZodString;
2075
+ }>;
2076
+ providerId: z.ZodNull;
2077
+ modelId: z.ZodString;
2078
+ }, z.core.$strict>, z.ZodObject<{
2079
+ lane: z.ZodLiteral<"byok">;
2080
+ runtimeId: z.ZodLiteral<"pi">;
2081
+ providerId: z.ZodString;
2082
+ modelId: z.ZodString;
2083
+ }, z.core.$strict>, z.ZodObject<{
2084
+ lane: z.ZodLiteral<"byok-profile">;
2085
+ runtimeId: z.ZodLiteral<"pi">;
2086
+ providerProfile: z.ZodObject<{
2087
+ profileRef: z.ZodString;
2388
2088
  profileRevision: z.ZodString;
2089
+ profileHash: z.ZodString;
2090
+ modelId: z.ZodString;
2091
+ requiredCapabilities: z.ZodArray<z.ZodEnum<{
2092
+ "image-input": "image-input";
2093
+ }>>;
2389
2094
  }, z.core.$strict>;
2390
- homeAccess: z.ZodOptional<z.ZodLiteral<"memory-reader">>;
2391
- requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
2392
- runtime: z.ZodOptional<z.ZodEnum<{
2393
- claude: "claude";
2394
- codex: "codex";
2395
- pi: "pi";
2095
+ }, z.core.$strict>], "lane">>;
2096
+ terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
2097
+ mode: z.ZodLiteral<"none">;
2098
+ }, z.core.$strict>, z.ZodObject<{
2099
+ mode: z.ZodLiteral<"result-document">;
2100
+ contract: z.ZodString;
2101
+ schema: z.ZodCustom<import("./result-schema").ResultSchema, import("./result-schema").ResultSchema>;
2102
+ }, z.core.$strict>], "mode">>;
2103
+ sessionRef: z.ZodOptional<z.ZodString>;
2104
+ limits: z.ZodOptional<z.ZodObject<{
2105
+ maxDurationMs: z.ZodOptional<z.ZodNumber>;
2106
+ maxTokens: z.ZodOptional<z.ZodNumber>;
2107
+ }, z.core.$strip>>;
2108
+ instruction: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
2109
+ blobRef: z.ZodObject<{
2110
+ blobId: z.ZodString;
2111
+ contentHash: z.ZodString;
2112
+ size: z.ZodNumber;
2113
+ contentType: z.ZodString;
2114
+ url: z.ZodOptional<z.ZodString>;
2115
+ }, z.core.$strip>;
2116
+ }, z.core.$strict>]>>;
2117
+ sealing: z.ZodObject<{
2118
+ scopeId: z.ZodString;
2119
+ epoch: z.ZodNumber;
2120
+ categories: z.ZodArray<z.ZodEnum<{
2121
+ "task-input": "task-input";
2122
+ "task-output": "task-output";
2396
2123
  }>>;
2397
- harnessId: z.ZodOptional<z.ZodString>;
2398
- dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
2399
- lane: z.ZodLiteral<"subscription">;
2400
- runtimeId: z.ZodEnum<{
2401
- claude: "claude";
2402
- codex: "codex";
2403
- }>;
2404
- providerId: z.ZodNull;
2405
- modelId: z.ZodString;
2406
- }, z.core.$strict>, z.ZodObject<{
2407
- lane: z.ZodLiteral<"byok">;
2408
- runtimeId: z.ZodLiteral<"pi">;
2409
- providerId: z.ZodString;
2410
- modelId: z.ZodString;
2411
- }, z.core.$strict>, z.ZodObject<{
2412
- lane: z.ZodLiteral<"byok-profile">;
2413
- runtimeId: z.ZodLiteral<"pi">;
2414
- providerProfile: z.ZodObject<{
2415
- profileRef: z.ZodString;
2416
- profileRevision: z.ZodString;
2417
- profileHash: z.ZodString;
2418
- modelId: z.ZodString;
2419
- requiredCapabilities: z.ZodArray<z.ZodEnum<{
2420
- "image-input": "image-input";
2421
- }>>;
2422
- }, z.core.$strict>;
2423
- }, z.core.$strict>], "lane">>;
2424
- terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
2425
- mode: z.ZodLiteral<"none">;
2426
- }, z.core.$strict>, z.ZodObject<{
2427
- mode: z.ZodLiteral<"result-document">;
2428
- contract: z.ZodString;
2429
- schema: z.ZodCustom<import("./result-schema").ResultSchema, import("./result-schema").ResultSchema>;
2430
- }, z.core.$strict>], "mode">>;
2431
- sessionRef: z.ZodOptional<z.ZodString>;
2432
- limits: z.ZodOptional<z.ZodObject<{
2433
- maxDurationMs: z.ZodOptional<z.ZodNumber>;
2434
- maxTokens: z.ZodOptional<z.ZodNumber>;
2435
- }, z.core.$strip>>;
2436
2124
  }, z.core.$strict>;
2437
- readonly 'task.offer_for_agent_with_egress': z.ZodObject<{
2438
- instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
2439
- blobRef: z.ZodObject<{
2440
- blobId: z.ZodString;
2441
- contentHash: z.ZodString;
2442
- size: z.ZodNumber;
2443
- contentType: z.ZodString;
2444
- url: z.ZodOptional<z.ZodString>;
2445
- }, z.core.$strip>;
2446
- }, z.core.$strict>]>;
2447
- agentRef: z.ZodObject<{
2448
- agentId: z.ZodString;
2449
- profileRevision: z.ZodString;
2125
+ sealed: z.ZodOptional<z.ZodObject<{
2126
+ v: z.ZodLiteral<1>;
2127
+ suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
2128
+ category: z.ZodLiteral<"task-input">;
2129
+ scope: z.ZodObject<{
2130
+ id: z.ZodString;
2131
+ epoch: z.ZodNumber;
2132
+ keyId: z.ZodString;
2450
2133
  }, z.core.$strict>;
2451
- homeAccess: z.ZodOptional<z.ZodLiteral<"memory-reader">>;
2452
- requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
2453
- runtime: z.ZodOptional<z.ZodEnum<{
2454
- claude: "claude";
2455
- codex: "codex";
2456
- pi: "pi";
2457
- }>>;
2458
- harnessId: z.ZodOptional<z.ZodString>;
2459
- dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
2460
- lane: z.ZodLiteral<"subscription">;
2461
- runtimeId: z.ZodEnum<{
2462
- claude: "claude";
2463
- codex: "codex";
2464
- }>;
2465
- providerId: z.ZodNull;
2466
- modelId: z.ZodString;
2467
- }, z.core.$strict>, z.ZodObject<{
2468
- lane: z.ZodLiteral<"byok">;
2469
- runtimeId: z.ZodLiteral<"pi">;
2470
- providerId: z.ZodString;
2471
- modelId: z.ZodString;
2472
- }, z.core.$strict>, z.ZodObject<{
2473
- lane: z.ZodLiteral<"byok-profile">;
2474
- runtimeId: z.ZodLiteral<"pi">;
2475
- providerProfile: z.ZodObject<{
2476
- profileRef: z.ZodString;
2477
- profileRevision: z.ZodString;
2478
- profileHash: z.ZodString;
2479
- modelId: z.ZodString;
2480
- requiredCapabilities: z.ZodArray<z.ZodEnum<{
2481
- "image-input": "image-input";
2482
- }>>;
2483
- }, z.core.$strict>;
2484
- }, z.core.$strict>], "lane">>;
2485
- terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
2486
- mode: z.ZodLiteral<"none">;
2487
- }, z.core.$strict>, z.ZodObject<{
2488
- mode: z.ZodLiteral<"result-document">;
2489
- contract: z.ZodString;
2490
- schema: z.ZodCustom<import("./result-schema").ResultSchema, import("./result-schema").ResultSchema>;
2491
- }, z.core.$strict>], "mode">>;
2492
- limits: z.ZodOptional<z.ZodObject<{
2493
- maxDurationMs: z.ZodOptional<z.ZodNumber>;
2494
- maxTokens: z.ZodOptional<z.ZodNumber>;
2495
- }, z.core.$strip>>;
2496
- sessionRef: z.ZodString;
2497
- egressPolicy: z.ZodObject<{
2498
- policyRevision: z.ZodString;
2499
- activity: z.ZodObject<{
2500
- delivery: z.ZodLiteral<"latest-value">;
2501
- maxCoalesceMs: z.ZodNumber;
2502
- maxEventBytes: z.ZodNumber;
2503
- }, z.core.$strict>;
2504
- reliable: z.ZodObject<{
2505
- maxPendingEventsPerAgent: z.ZodNumber;
2506
- maxPendingBytesPerAgent: z.ZodNumber;
2507
- maxPendingBytesPerTenant: z.ZodNumber;
2508
- }, z.core.$strict>;
2509
- transfers: z.ZodObject<{
2510
- workspace: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
2511
- maxBytes: z.ZodNumber;
2512
- allowedMimeTypes: z.ZodArray<z.ZodString>;
2513
- }, z.core.$strict>]>;
2514
- transcript: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
2515
- maxBytes: z.ZodNumber;
2516
- allowedMimeTypes: z.ZodArray<z.ZodString>;
2517
- }, z.core.$strict>]>;
2518
- artifact: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
2519
- maxBytes: z.ZodNumber;
2520
- allowedMimeTypes: z.ZodArray<z.ZodString>;
2521
- }, z.core.$strict>]>;
2522
- }, z.core.$strict>;
2134
+ chainHead: z.ZodObject<{
2135
+ seq: z.ZodNumber;
2136
+ hash: z.ZodString;
2523
2137
  }, z.core.$strict>;
2524
- messageEgress: z.ZodOptional<z.ZodObject<{
2525
- mode: z.ZodLiteral<"required">;
2526
- contract: z.ZodString;
2527
- contentType: z.ZodEnum<{
2528
- "text/markdown": "text/markdown";
2529
- "text/plain": "text/plain";
2530
- }>;
2531
- maxBytes: z.ZodNumber;
2138
+ sender: z.ZodString;
2139
+ salt: z.ZodString;
2140
+ nonce: z.ZodString;
2141
+ paddedLength: z.ZodNumber;
2142
+ contentMac: z.ZodString;
2143
+ ciphertext: z.ZodOptional<z.ZodString>;
2144
+ ciphertextRef: z.ZodOptional<z.ZodObject<{
2145
+ blobId: z.ZodString;
2146
+ contentHash: z.ZodString;
2147
+ size: z.ZodNumber;
2148
+ contentType: z.ZodString;
2532
2149
  }, z.core.$strict>>;
2150
+ }, z.core.$strict>>;
2151
+ }, z.core.$strict>;
2152
+ export type TaskOfferForAgentSealedPayload = z.infer<typeof TaskOfferForAgentSealedPayloadSchema>;
2153
+ /** server -> daemon: `task.offer_for_agent_with_egress` of a sealed task. */
2154
+ export declare const TaskOfferForAgentWithEgressSealedPayloadSchema: z.ZodObject<{
2155
+ agentRef: z.ZodObject<{
2156
+ agentId: z.ZodString;
2157
+ profileRevision: z.ZodString;
2533
2158
  }, z.core.$strict>;
2534
- readonly 'task.offer_for_agent_with_egress_fresh': z.ZodObject<{
2535
- instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
2536
- blobRef: z.ZodObject<{
2537
- blobId: z.ZodString;
2538
- contentHash: z.ZodString;
2539
- size: z.ZodNumber;
2540
- contentType: z.ZodString;
2541
- url: z.ZodOptional<z.ZodString>;
2542
- }, z.core.$strip>;
2543
- }, z.core.$strict>]>;
2544
- agentRef: z.ZodObject<{
2545
- agentId: z.ZodString;
2546
- profileRevision: z.ZodString;
2547
- }, z.core.$strict>;
2548
- homeAccess: z.ZodOptional<z.ZodLiteral<"memory-reader">>;
2549
- requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
2550
- runtime: z.ZodOptional<z.ZodEnum<{
2159
+ homeAccess: z.ZodOptional<z.ZodLiteral<"memory-reader">>;
2160
+ agentMemory: z.ZodOptional<z.ZodEnum<{
2161
+ none: "none";
2162
+ read: "read";
2163
+ "read-if-admitted": "read-if-admitted";
2164
+ "read-write": "read-write";
2165
+ }>>;
2166
+ requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
2167
+ runtime: z.ZodOptional<z.ZodEnum<{
2168
+ claude: "claude";
2169
+ codex: "codex";
2170
+ pi: "pi";
2171
+ }>>;
2172
+ harnessId: z.ZodOptional<z.ZodString>;
2173
+ dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
2174
+ lane: z.ZodLiteral<"subscription">;
2175
+ runtimeId: z.ZodEnum<{
2551
2176
  claude: "claude";
2552
2177
  codex: "codex";
2553
- pi: "pi";
2554
- }>>;
2555
- harnessId: z.ZodOptional<z.ZodString>;
2556
- dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
2557
- lane: z.ZodLiteral<"subscription">;
2558
- runtimeId: z.ZodEnum<{
2559
- claude: "claude";
2560
- codex: "codex";
2561
- }>;
2562
- providerId: z.ZodNull;
2563
- modelId: z.ZodString;
2564
- }, z.core.$strict>, z.ZodObject<{
2565
- lane: z.ZodLiteral<"byok">;
2566
- runtimeId: z.ZodLiteral<"pi">;
2567
- providerId: z.ZodString;
2178
+ }>;
2179
+ providerId: z.ZodNull;
2180
+ modelId: z.ZodString;
2181
+ }, z.core.$strict>, z.ZodObject<{
2182
+ lane: z.ZodLiteral<"byok">;
2183
+ runtimeId: z.ZodLiteral<"pi">;
2184
+ providerId: z.ZodString;
2185
+ modelId: z.ZodString;
2186
+ }, z.core.$strict>, z.ZodObject<{
2187
+ lane: z.ZodLiteral<"byok-profile">;
2188
+ runtimeId: z.ZodLiteral<"pi">;
2189
+ providerProfile: z.ZodObject<{
2190
+ profileRef: z.ZodString;
2191
+ profileRevision: z.ZodString;
2192
+ profileHash: z.ZodString;
2568
2193
  modelId: z.ZodString;
2569
- }, z.core.$strict>, z.ZodObject<{
2570
- lane: z.ZodLiteral<"byok-profile">;
2571
- runtimeId: z.ZodLiteral<"pi">;
2572
- providerProfile: z.ZodObject<{
2573
- profileRef: z.ZodString;
2574
- profileRevision: z.ZodString;
2575
- profileHash: z.ZodString;
2576
- modelId: z.ZodString;
2577
- requiredCapabilities: z.ZodArray<z.ZodEnum<{
2578
- "image-input": "image-input";
2579
- }>>;
2580
- }, z.core.$strict>;
2581
- }, z.core.$strict>], "lane">>;
2582
- terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
2583
- mode: z.ZodLiteral<"none">;
2584
- }, z.core.$strict>, z.ZodObject<{
2585
- mode: z.ZodLiteral<"result-document">;
2586
- contract: z.ZodString;
2587
- schema: z.ZodCustom<import("./result-schema").ResultSchema, import("./result-schema").ResultSchema>;
2588
- }, z.core.$strict>], "mode">>;
2589
- limits: z.ZodOptional<z.ZodObject<{
2590
- maxDurationMs: z.ZodOptional<z.ZodNumber>;
2591
- maxTokens: z.ZodOptional<z.ZodNumber>;
2592
- }, z.core.$strip>>;
2593
- egressPolicy: z.ZodObject<{
2594
- policyRevision: z.ZodString;
2595
- activity: z.ZodObject<{
2596
- delivery: z.ZodLiteral<"latest-value">;
2597
- maxCoalesceMs: z.ZodNumber;
2598
- maxEventBytes: z.ZodNumber;
2599
- }, z.core.$strict>;
2600
- reliable: z.ZodObject<{
2601
- maxPendingEventsPerAgent: z.ZodNumber;
2602
- maxPendingBytesPerAgent: z.ZodNumber;
2603
- maxPendingBytesPerTenant: z.ZodNumber;
2604
- }, z.core.$strict>;
2605
- transfers: z.ZodObject<{
2606
- workspace: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
2607
- maxBytes: z.ZodNumber;
2608
- allowedMimeTypes: z.ZodArray<z.ZodString>;
2609
- }, z.core.$strict>]>;
2610
- transcript: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
2611
- maxBytes: z.ZodNumber;
2612
- allowedMimeTypes: z.ZodArray<z.ZodString>;
2613
- }, z.core.$strict>]>;
2614
- artifact: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
2615
- maxBytes: z.ZodNumber;
2616
- allowedMimeTypes: z.ZodArray<z.ZodString>;
2617
- }, z.core.$strict>]>;
2618
- }, z.core.$strict>;
2194
+ requiredCapabilities: z.ZodArray<z.ZodEnum<{
2195
+ "image-input": "image-input";
2196
+ }>>;
2619
2197
  }, z.core.$strict>;
2620
- messageEgress: z.ZodOptional<z.ZodObject<{
2621
- mode: z.ZodLiteral<"required">;
2622
- contract: z.ZodString;
2623
- contentType: z.ZodEnum<{
2624
- "text/markdown": "text/markdown";
2625
- "text/plain": "text/plain";
2626
- }>;
2627
- maxBytes: z.ZodNumber;
2628
- }, z.core.$strict>>;
2629
- }, z.core.$strict>;
2630
- readonly 'task.offer_prepared': z.ZodObject<{
2631
- agentRef: z.ZodObject<{
2632
- agentId: z.ZodString;
2633
- profileRevision: z.ZodString;
2198
+ }, z.core.$strict>], "lane">>;
2199
+ terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
2200
+ mode: z.ZodLiteral<"none">;
2201
+ }, z.core.$strict>, z.ZodObject<{
2202
+ mode: z.ZodLiteral<"result-document">;
2203
+ contract: z.ZodString;
2204
+ schema: z.ZodCustom<import("./result-schema").ResultSchema, import("./result-schema").ResultSchema>;
2205
+ }, z.core.$strict>], "mode">>;
2206
+ limits: z.ZodOptional<z.ZodObject<{
2207
+ maxDurationMs: z.ZodOptional<z.ZodNumber>;
2208
+ maxTokens: z.ZodOptional<z.ZodNumber>;
2209
+ }, z.core.$strip>>;
2210
+ sessionRef: z.ZodString;
2211
+ egressPolicy: z.ZodObject<{
2212
+ policyRevision: z.ZodString;
2213
+ activity: z.ZodObject<{
2214
+ delivery: z.ZodLiteral<"latest-value">;
2215
+ maxCoalesceMs: z.ZodNumber;
2216
+ maxEventBytes: z.ZodNumber;
2634
2217
  }, z.core.$strict>;
2635
- homeAccess: z.ZodOptional<z.ZodLiteral<"memory-reader">>;
2636
- requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
2637
- runtime: z.ZodOptional<z.ZodEnum<{
2638
- claude: "claude";
2639
- codex: "codex";
2640
- pi: "pi";
2641
- }>>;
2642
- harnessId: z.ZodOptional<z.ZodString>;
2643
- dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
2644
- lane: z.ZodLiteral<"subscription">;
2645
- runtimeId: z.ZodEnum<{
2646
- claude: "claude";
2647
- codex: "codex";
2648
- }>;
2649
- providerId: z.ZodNull;
2650
- modelId: z.ZodString;
2651
- }, z.core.$strict>, z.ZodObject<{
2652
- lane: z.ZodLiteral<"byok">;
2653
- runtimeId: z.ZodLiteral<"pi">;
2654
- providerId: z.ZodString;
2655
- modelId: z.ZodString;
2656
- }, z.core.$strict>, z.ZodObject<{
2657
- lane: z.ZodLiteral<"byok-profile">;
2658
- runtimeId: z.ZodLiteral<"pi">;
2659
- providerProfile: z.ZodObject<{
2660
- profileRef: z.ZodString;
2661
- profileRevision: z.ZodString;
2662
- profileHash: z.ZodString;
2663
- modelId: z.ZodString;
2664
- requiredCapabilities: z.ZodArray<z.ZodEnum<{
2665
- "image-input": "image-input";
2666
- }>>;
2667
- }, z.core.$strict>;
2668
- }, z.core.$strict>], "lane">>;
2669
- terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
2670
- mode: z.ZodLiteral<"none">;
2671
- }, z.core.$strict>, z.ZodObject<{
2672
- mode: z.ZodLiteral<"result-document">;
2673
- contract: z.ZodString;
2674
- schema: z.ZodCustom<import("./result-schema").ResultSchema, import("./result-schema").ResultSchema>;
2675
- }, z.core.$strict>], "mode">>;
2676
- limits: z.ZodOptional<z.ZodObject<{
2677
- maxDurationMs: z.ZodOptional<z.ZodNumber>;
2678
- maxTokens: z.ZodOptional<z.ZodNumber>;
2679
- }, z.core.$strip>>;
2680
- preparation: z.ZodObject<{
2681
- reference: z.ZodString;
2682
- requestDigest: z.ZodString;
2683
- artifactDigest: z.ZodOptional<z.ZodString>;
2218
+ reliable: z.ZodObject<{
2219
+ maxPendingEventsPerAgent: z.ZodNumber;
2220
+ maxPendingBytesPerAgent: z.ZodNumber;
2221
+ maxPendingBytesPerTenant: z.ZodNumber;
2684
2222
  }, z.core.$strict>;
2685
- agentMemory: z.ZodEnum<{
2686
- none: "none";
2687
- read: "read";
2688
- "read-write": "read-write";
2689
- }>;
2690
- egressPolicy: z.ZodObject<{
2691
- policyRevision: z.ZodString;
2692
- activity: z.ZodObject<{
2693
- delivery: z.ZodLiteral<"latest-value">;
2694
- maxCoalesceMs: z.ZodNumber;
2695
- maxEventBytes: z.ZodNumber;
2696
- }, z.core.$strict>;
2697
- reliable: z.ZodObject<{
2698
- maxPendingEventsPerAgent: z.ZodNumber;
2699
- maxPendingBytesPerAgent: z.ZodNumber;
2700
- maxPendingBytesPerTenant: z.ZodNumber;
2701
- }, z.core.$strict>;
2702
- transfers: z.ZodObject<{
2703
- workspace: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
2704
- maxBytes: z.ZodNumber;
2705
- allowedMimeTypes: z.ZodArray<z.ZodString>;
2706
- }, z.core.$strict>]>;
2707
- transcript: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
2708
- maxBytes: z.ZodNumber;
2709
- allowedMimeTypes: z.ZodArray<z.ZodString>;
2710
- }, z.core.$strict>]>;
2711
- artifact: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
2712
- maxBytes: z.ZodNumber;
2713
- allowedMimeTypes: z.ZodArray<z.ZodString>;
2714
- }, z.core.$strict>]>;
2715
- }, z.core.$strict>;
2223
+ transfers: z.ZodObject<{
2224
+ workspace: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
2225
+ maxBytes: z.ZodNumber;
2226
+ allowedMimeTypes: z.ZodArray<z.ZodString>;
2227
+ }, z.core.$strict>]>;
2228
+ transcript: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
2229
+ maxBytes: z.ZodNumber;
2230
+ allowedMimeTypes: z.ZodArray<z.ZodString>;
2231
+ }, z.core.$strict>]>;
2232
+ artifact: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
2233
+ maxBytes: z.ZodNumber;
2234
+ allowedMimeTypes: z.ZodArray<z.ZodString>;
2235
+ }, z.core.$strict>]>;
2716
2236
  }, z.core.$strict>;
2717
- messageEgress: z.ZodOptional<z.ZodObject<{
2718
- mode: z.ZodLiteral<"required">;
2719
- contract: z.ZodString;
2720
- contentType: z.ZodEnum<{
2721
- "text/markdown": "text/markdown";
2722
- "text/plain": "text/plain";
2723
- }>;
2724
- maxBytes: z.ZodNumber;
2725
- }, z.core.$strict>>;
2726
2237
  }, z.core.$strict>;
2727
- readonly 'conn.hello': z.ZodObject<{
2728
- protocolVersions: z.ZodArray<z.ZodNumber>;
2729
- capabilities: z.ZodArray<z.ZodString>;
2730
- deviceId: z.ZodString;
2731
- productId: z.ZodString;
2732
- clientVersion: z.ZodOptional<z.ZodString>;
2733
- runtimes: z.ZodOptional<z.ZodArray<z.ZodObject<{
2734
- id: z.ZodEnum<{
2735
- claude: "claude";
2736
- codex: "codex";
2737
- pi: "pi";
2738
- }>;
2739
- version: z.ZodOptional<z.ZodString>;
2740
- authPresent: z.ZodOptional<z.ZodBoolean>;
2741
- capabilities: z.ZodOptional<z.ZodObject<{
2742
- steer: z.ZodOptional<z.ZodBoolean>;
2743
- resume: z.ZodOptional<z.ZodBoolean>;
2744
- approvalInteractive: z.ZodOptional<z.ZodBoolean>;
2745
- mcpToolsets: z.ZodOptional<z.ZodBoolean>;
2746
- messageDraft: z.ZodOptional<z.ZodBoolean>;
2747
- }, z.core.$strip>>;
2748
- }, z.core.$strip>>>;
2749
- harnesses: z.ZodOptional<z.ZodArray<z.ZodObject<{
2238
+ messageEgress: z.ZodOptional<z.ZodObject<{
2239
+ mode: z.ZodLiteral<"required">;
2240
+ contract: z.ZodString;
2241
+ contentType: z.ZodEnum<{
2242
+ "text/markdown": "text/markdown";
2243
+ "text/plain": "text/plain";
2244
+ }>;
2245
+ maxBytes: z.ZodNumber;
2246
+ }, z.core.$strict>>;
2247
+ instruction: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
2248
+ blobRef: z.ZodObject<{
2249
+ blobId: z.ZodString;
2250
+ contentHash: z.ZodString;
2251
+ size: z.ZodNumber;
2252
+ contentType: z.ZodString;
2253
+ url: z.ZodOptional<z.ZodString>;
2254
+ }, z.core.$strip>;
2255
+ }, z.core.$strict>]>>;
2256
+ sealing: z.ZodObject<{
2257
+ scopeId: z.ZodString;
2258
+ epoch: z.ZodNumber;
2259
+ categories: z.ZodArray<z.ZodEnum<{
2260
+ "task-input": "task-input";
2261
+ "task-output": "task-output";
2262
+ }>>;
2263
+ }, z.core.$strict>;
2264
+ sealed: z.ZodOptional<z.ZodObject<{
2265
+ v: z.ZodLiteral<1>;
2266
+ suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
2267
+ category: z.ZodLiteral<"task-input">;
2268
+ scope: z.ZodObject<{
2750
2269
  id: z.ZodString;
2751
- version: z.ZodOptional<z.ZodString>;
2752
- capabilities: z.ZodObject<{
2753
- steer: z.ZodOptional<z.ZodBoolean>;
2754
- resume: z.ZodOptional<z.ZodBoolean>;
2755
- approvalInteractive: z.ZodOptional<z.ZodBoolean>;
2756
- mcpToolsets: z.ZodOptional<z.ZodBoolean>;
2757
- messageDraft: z.ZodOptional<z.ZodBoolean>;
2758
- }, z.core.$strip>;
2759
- }, z.core.$strip>>>;
2760
- configuredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
2761
- cursor: z.ZodOptional<z.ZodNumber>;
2762
- }, z.core.$strip>;
2763
- readonly 'conn.ack': z.ZodObject<{
2764
- protocolVersion: z.ZodNumber;
2765
- capabilities: z.ZodArray<z.ZodString>;
2766
- serverTime: z.ZodISODateTime;
2767
- }, z.core.$strip>;
2768
- readonly 'agent.egress.reliable': z.ZodObject<{
2769
- agentRef: z.ZodObject<{
2770
- agentId: z.ZodString;
2771
- profileRevision: z.ZodString;
2270
+ epoch: z.ZodNumber;
2271
+ keyId: z.ZodString;
2772
2272
  }, z.core.$strict>;
2773
- sessionRef: z.ZodString;
2774
- policyRevision: z.ZodString;
2775
- eventId: z.ZodUUID;
2776
- cursor: z.ZodNumber;
2777
- payload: z.ZodJSONSchema;
2778
- contentHash: z.ZodString;
2779
- byteCount: z.ZodNumber;
2273
+ chainHead: z.ZodObject<{
2274
+ seq: z.ZodNumber;
2275
+ hash: z.ZodString;
2276
+ }, z.core.$strict>;
2277
+ sender: z.ZodString;
2278
+ salt: z.ZodString;
2279
+ nonce: z.ZodString;
2280
+ paddedLength: z.ZodNumber;
2281
+ contentMac: z.ZodString;
2282
+ ciphertext: z.ZodOptional<z.ZodString>;
2283
+ ciphertextRef: z.ZodOptional<z.ZodObject<{
2284
+ blobId: z.ZodString;
2285
+ contentHash: z.ZodString;
2286
+ size: z.ZodNumber;
2287
+ contentType: z.ZodString;
2288
+ }, z.core.$strict>>;
2289
+ }, z.core.$strict>>;
2290
+ }, z.core.$strict>;
2291
+ export type TaskOfferForAgentWithEgressSealedPayload = z.infer<typeof TaskOfferForAgentWithEgressSealedPayloadSchema>;
2292
+ /**
2293
+ * server -> daemon: `task.offer_for_agent_with_egress_fresh` of a sealed task.
2294
+ * Only this type takes `routineRef`: a routine occurrence is an execution.
2295
+ */
2296
+ export declare const TaskOfferForAgentWithEgressFreshSealedPayloadSchema: z.ZodObject<{
2297
+ agentRef: z.ZodObject<{
2298
+ agentId: z.ZodString;
2299
+ profileRevision: z.ZodString;
2780
2300
  }, z.core.$strict>;
2781
- readonly 'agent.egress.ack': z.ZodObject<{
2782
- agentRef: z.ZodObject<{
2783
- agentId: z.ZodString;
2301
+ homeAccess: z.ZodOptional<z.ZodLiteral<"memory-reader">>;
2302
+ agentMemory: z.ZodOptional<z.ZodEnum<{
2303
+ none: "none";
2304
+ read: "read";
2305
+ "read-if-admitted": "read-if-admitted";
2306
+ "read-write": "read-write";
2307
+ }>>;
2308
+ requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
2309
+ runtime: z.ZodOptional<z.ZodEnum<{
2310
+ claude: "claude";
2311
+ codex: "codex";
2312
+ pi: "pi";
2313
+ }>>;
2314
+ harnessId: z.ZodOptional<z.ZodString>;
2315
+ dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
2316
+ lane: z.ZodLiteral<"subscription">;
2317
+ runtimeId: z.ZodEnum<{
2318
+ claude: "claude";
2319
+ codex: "codex";
2320
+ }>;
2321
+ providerId: z.ZodNull;
2322
+ modelId: z.ZodString;
2323
+ }, z.core.$strict>, z.ZodObject<{
2324
+ lane: z.ZodLiteral<"byok">;
2325
+ runtimeId: z.ZodLiteral<"pi">;
2326
+ providerId: z.ZodString;
2327
+ modelId: z.ZodString;
2328
+ }, z.core.$strict>, z.ZodObject<{
2329
+ lane: z.ZodLiteral<"byok-profile">;
2330
+ runtimeId: z.ZodLiteral<"pi">;
2331
+ providerProfile: z.ZodObject<{
2332
+ profileRef: z.ZodString;
2784
2333
  profileRevision: z.ZodString;
2334
+ profileHash: z.ZodString;
2335
+ modelId: z.ZodString;
2336
+ requiredCapabilities: z.ZodArray<z.ZodEnum<{
2337
+ "image-input": "image-input";
2338
+ }>>;
2785
2339
  }, z.core.$strict>;
2786
- sessionRef: z.ZodString;
2340
+ }, z.core.$strict>], "lane">>;
2341
+ terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
2342
+ mode: z.ZodLiteral<"none">;
2343
+ }, z.core.$strict>, z.ZodObject<{
2344
+ mode: z.ZodLiteral<"result-document">;
2345
+ contract: z.ZodString;
2346
+ schema: z.ZodCustom<import("./result-schema").ResultSchema, import("./result-schema").ResultSchema>;
2347
+ }, z.core.$strict>], "mode">>;
2348
+ limits: z.ZodOptional<z.ZodObject<{
2349
+ maxDurationMs: z.ZodOptional<z.ZodNumber>;
2350
+ maxTokens: z.ZodOptional<z.ZodNumber>;
2351
+ }, z.core.$strip>>;
2352
+ egressPolicy: z.ZodObject<{
2787
2353
  policyRevision: z.ZodString;
2788
- eventId: z.ZodUUID;
2789
- cursor: z.ZodNumber;
2790
- receiptId: z.ZodUUID;
2791
- }, z.core.$strict>;
2792
- readonly 'agent.message.draft': z.ZodObject<{
2793
- agentRef: z.ZodObject<{
2794
- agentId: z.ZodString;
2795
- profileRevision: z.ZodString;
2354
+ activity: z.ZodObject<{
2355
+ delivery: z.ZodLiteral<"latest-value">;
2356
+ maxCoalesceMs: z.ZodNumber;
2357
+ maxEventBytes: z.ZodNumber;
2796
2358
  }, z.core.$strict>;
2797
- revision: z.ZodNumber;
2798
- offset: z.ZodNumber;
2799
- text: z.ZodString;
2800
- overflow: z.ZodOptional<z.ZodLiteral<true>>;
2801
- }, z.core.$strict>;
2802
- readonly 'agent.message.publish': z.ZodObject<{
2803
- agentRef: z.ZodObject<{
2804
- agentId: z.ZodString;
2805
- profileRevision: z.ZodString;
2359
+ reliable: z.ZodObject<{
2360
+ maxPendingEventsPerAgent: z.ZodNumber;
2361
+ maxPendingBytesPerAgent: z.ZodNumber;
2362
+ maxPendingBytesPerTenant: z.ZodNumber;
2363
+ }, z.core.$strict>;
2364
+ transfers: z.ZodObject<{
2365
+ workspace: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
2366
+ maxBytes: z.ZodNumber;
2367
+ allowedMimeTypes: z.ZodArray<z.ZodString>;
2368
+ }, z.core.$strict>]>;
2369
+ transcript: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
2370
+ maxBytes: z.ZodNumber;
2371
+ allowedMimeTypes: z.ZodArray<z.ZodString>;
2372
+ }, z.core.$strict>]>;
2373
+ artifact: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
2374
+ maxBytes: z.ZodNumber;
2375
+ allowedMimeTypes: z.ZodArray<z.ZodString>;
2376
+ }, z.core.$strict>]>;
2806
2377
  }, z.core.$strict>;
2807
- sessionRef: z.ZodString;
2378
+ }, z.core.$strict>;
2379
+ messageEgress: z.ZodOptional<z.ZodObject<{
2380
+ mode: z.ZodLiteral<"required">;
2808
2381
  contract: z.ZodString;
2809
- messageId: z.ZodUUID;
2810
- cursor: z.ZodNumber;
2811
2382
  contentType: z.ZodEnum<{
2812
2383
  "text/markdown": "text/markdown";
2813
2384
  "text/plain": "text/plain";
2814
2385
  }>;
2815
- body: z.ZodString;
2816
- contentHash: z.ZodString;
2817
- byteCount: z.ZodNumber;
2386
+ maxBytes: z.ZodNumber;
2387
+ }, z.core.$strict>>;
2388
+ instruction: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
2389
+ blobRef: z.ZodObject<{
2390
+ blobId: z.ZodString;
2391
+ contentHash: z.ZodString;
2392
+ size: z.ZodNumber;
2393
+ contentType: z.ZodString;
2394
+ url: z.ZodOptional<z.ZodString>;
2395
+ }, z.core.$strip>;
2396
+ }, z.core.$strict>]>>;
2397
+ sealing: z.ZodObject<{
2398
+ scopeId: z.ZodString;
2399
+ epoch: z.ZodNumber;
2400
+ categories: z.ZodArray<z.ZodEnum<{
2401
+ "task-input": "task-input";
2402
+ "task-output": "task-output";
2403
+ }>>;
2818
2404
  }, z.core.$strict>;
2819
- readonly 'agent.message.disposition': z.ZodObject<{
2820
- agentRef: z.ZodObject<{
2821
- agentId: z.ZodString;
2822
- profileRevision: z.ZodString;
2405
+ sealed: z.ZodOptional<z.ZodObject<{
2406
+ v: z.ZodLiteral<1>;
2407
+ suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
2408
+ category: z.ZodLiteral<"task-input">;
2409
+ scope: z.ZodObject<{
2410
+ id: z.ZodString;
2411
+ epoch: z.ZodNumber;
2412
+ keyId: z.ZodString;
2823
2413
  }, z.core.$strict>;
2824
- sessionRef: z.ZodString;
2825
- contract: z.ZodString;
2826
- messageId: z.ZodUUID;
2827
- cursor: z.ZodNumber;
2828
- contentHash: z.ZodString;
2829
- outcome: z.ZodEnum<{
2830
- accepted: "accepted";
2831
- held: "held";
2832
- refused: "refused";
2833
- }>;
2834
- receiptId: z.ZodUUID;
2835
- reasonCode: z.ZodOptional<z.ZodString>;
2414
+ chainHead: z.ZodObject<{
2415
+ seq: z.ZodNumber;
2416
+ hash: z.ZodString;
2417
+ }, z.core.$strict>;
2418
+ sender: z.ZodString;
2419
+ salt: z.ZodString;
2420
+ nonce: z.ZodString;
2421
+ paddedLength: z.ZodNumber;
2422
+ contentMac: z.ZodString;
2423
+ ciphertext: z.ZodOptional<z.ZodString>;
2424
+ ciphertextRef: z.ZodOptional<z.ZodObject<{
2425
+ blobId: z.ZodString;
2426
+ contentHash: z.ZodString;
2427
+ size: z.ZodNumber;
2428
+ contentType: z.ZodString;
2429
+ }, z.core.$strict>>;
2430
+ }, z.core.$strict>>;
2431
+ routineRef: z.ZodOptional<z.ZodObject<{
2432
+ routineId: z.ZodString;
2433
+ definitionVersion: z.ZodNumber;
2434
+ notAfter: z.ZodString;
2435
+ }, z.core.$strict>>;
2436
+ }, z.core.$strict>;
2437
+ export type TaskOfferForAgentWithEgressFreshSealedPayload = z.infer<typeof TaskOfferForAgentWithEgressFreshSealedPayloadSchema>;
2438
+ /**
2439
+ * server -> daemon: sealed steering text. `steerId` names this steer in the
2440
+ * AAD and the content MAC, so the Host cannot replay an earlier steer of the
2441
+ * same task as a new one.
2442
+ */
2443
+ export declare const TaskSteerSealedPayloadSchema: z.ZodObject<{
2444
+ steerId: z.ZodUUID;
2445
+ sealed: z.ZodObject<{
2446
+ v: z.ZodLiteral<1>;
2447
+ suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
2448
+ category: z.ZodLiteral<"task-input">;
2449
+ scope: z.ZodObject<{
2450
+ id: z.ZodString;
2451
+ epoch: z.ZodNumber;
2452
+ keyId: z.ZodString;
2453
+ }, z.core.$strict>;
2454
+ chainHead: z.ZodObject<{
2455
+ seq: z.ZodNumber;
2456
+ hash: z.ZodString;
2457
+ }, z.core.$strict>;
2458
+ sender: z.ZodString;
2459
+ salt: z.ZodString;
2460
+ nonce: z.ZodString;
2461
+ paddedLength: z.ZodNumber;
2462
+ contentMac: z.ZodString;
2463
+ ciphertext: z.ZodOptional<z.ZodString>;
2464
+ ciphertextRef: z.ZodOptional<z.ZodObject<{
2465
+ blobId: z.ZodString;
2466
+ contentHash: z.ZodString;
2467
+ size: z.ZodNumber;
2468
+ contentType: z.ZodString;
2469
+ }, z.core.$strict>>;
2836
2470
  }, z.core.$strict>;
2837
- readonly 'agent.content.read': z.ZodObject<{
2838
- requestId: z.ZodUUID;
2839
- surface: z.ZodEnum<{
2840
- artifact: "artifact";
2841
- transcript: "transcript";
2842
- workspace: "workspace";
2471
+ }, z.core.$strict>;
2472
+ export type TaskSteerSealedPayload = z.infer<typeof TaskSteerSealedPayloadSchema>;
2473
+ /**
2474
+ * daemon -> server: `task.complete` of a sealed task. `summary`,
2475
+ * `finalMessage` and `document` are sealed. `artifactRefs` and
2476
+ * `preparedObservation` are not carried in v1.
2477
+ */
2478
+ export declare const TaskCompleteSealedPayloadSchema: z.ZodObject<{
2479
+ sealing: z.ZodOptional<z.ZodNever>;
2480
+ harnessId: z.ZodOptional<z.ZodString>;
2481
+ sessionRef: z.ZodString;
2482
+ usage: z.ZodOptional<z.ZodObject<{
2483
+ runtime: z.ZodEnum<{
2484
+ claude: "claude";
2485
+ codex: "codex";
2486
+ pi: "pi";
2843
2487
  }>;
2844
- actor: z.ZodObject<{
2845
- kind: z.ZodEnum<{
2846
- agent: "agent";
2847
- system: "system";
2848
- user: "user";
2849
- }>;
2488
+ provider: z.ZodOptional<z.ZodString>;
2489
+ model: z.ZodOptional<z.ZodString>;
2490
+ promptTokens: z.ZodOptional<z.ZodNumber>;
2491
+ completionTokens: z.ZodOptional<z.ZodNumber>;
2492
+ durationMs: z.ZodOptional<z.ZodNumber>;
2493
+ clientVersion: z.ZodString;
2494
+ reportedAt: z.ZodISODateTime;
2495
+ }, z.core.$strip>>;
2496
+ agentRef: z.ZodOptional<z.ZodObject<{
2497
+ agentId: z.ZodString;
2498
+ profileRevision: z.ZodString;
2499
+ }, z.core.$strict>>;
2500
+ agentHomeProjection: z.ZodOptional<z.ZodObject<{
2501
+ profileRevision: z.ZodString;
2502
+ projectionHash: z.ZodString;
2503
+ }, z.core.$strict>>;
2504
+ agentHomeMemoryChange: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
2505
+ outcome: z.ZodLiteral<"unchanged">;
2506
+ }, z.core.$strict>, z.ZodObject<{
2507
+ outcome: z.ZodLiteral<"reader-attributed">;
2508
+ paths: z.ZodArray<z.ZodString>;
2509
+ }, z.core.$strict>, z.ZodObject<{
2510
+ outcome: z.ZodLiteral<"unattributed">;
2511
+ paths: z.ZodArray<z.ZodString>;
2512
+ }, z.core.$strict>, z.ZodObject<{
2513
+ outcome: z.ZodLiteral<"unmeasured">;
2514
+ }, z.core.$strict>], "outcome">>;
2515
+ sealed: z.ZodObject<{
2516
+ v: z.ZodLiteral<1>;
2517
+ suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
2518
+ category: z.ZodLiteral<"task-output">;
2519
+ scope: z.ZodObject<{
2850
2520
  id: z.ZodString;
2521
+ epoch: z.ZodNumber;
2522
+ keyId: z.ZodString;
2851
2523
  }, z.core.$strict>;
2852
- agentRef: z.ZodObject<{
2853
- agentId: z.ZodString;
2854
- profileRevision: z.ZodString;
2524
+ chainHead: z.ZodObject<{
2525
+ seq: z.ZodNumber;
2526
+ hash: z.ZodString;
2855
2527
  }, z.core.$strict>;
2856
- sessionRef: z.ZodString;
2528
+ sender: z.ZodString;
2529
+ salt: z.ZodString;
2530
+ nonce: z.ZodString;
2531
+ paddedLength: z.ZodNumber;
2532
+ contentMac: z.ZodString;
2533
+ ciphertext: z.ZodOptional<z.ZodString>;
2534
+ ciphertextRef: z.ZodOptional<z.ZodObject<{
2535
+ blobId: z.ZodString;
2536
+ contentHash: z.ZodString;
2537
+ size: z.ZodNumber;
2538
+ contentType: z.ZodString;
2539
+ }, z.core.$strict>>;
2540
+ }, z.core.$strict>;
2541
+ }, z.core.$strict>;
2542
+ export type TaskCompleteSealedPayload = z.infer<typeof TaskCompleteSealedPayloadSchema>;
2543
+ /** daemon -> server: `task.fail` of a sealed task. `reason` is sealed; `preparedObservation` is not carried in v1. */
2544
+ export declare const TaskFailSealedPayloadSchema: z.ZodObject<{
2545
+ sealing: z.ZodOptional<z.ZodNever>;
2546
+ recovery: z.ZodOptional<z.ZodObject<{
2547
+ kind: z.ZodLiteral<"daemon_interrupted">;
2548
+ offerId: z.ZodUUID;
2549
+ }, z.core.$strict>>;
2550
+ harnessId: z.ZodOptional<z.ZodString>;
2551
+ retryable: z.ZodOptional<z.ZodBoolean>;
2552
+ usage: z.ZodOptional<z.ZodObject<{
2857
2553
  runtime: z.ZodEnum<{
2858
2554
  claude: "claude";
2859
2555
  codex: "codex";
2860
2556
  pi: "pi";
2861
2557
  }>;
2862
- cwd: z.ZodString;
2863
- policyRevision: z.ZodString;
2864
- target: z.ZodString;
2865
- mimeType: z.ZodString;
2866
- decodeAs: z.ZodEnum<{
2867
- bytes: "bytes";
2868
- utf8: "utf8";
2869
- }>;
2870
- policy: z.ZodObject<{
2871
- maxBytes: z.ZodNumber;
2872
- allowedMimeTypes: z.ZodArray<z.ZodString>;
2873
- }, z.core.$strict>;
2874
- }, z.core.$strict>;
2875
- readonly 'agent.content.receipt': z.ZodDiscriminatedUnion<[z.ZodObject<{
2876
- requestId: z.ZodUUID;
2877
- eventId: z.ZodUUID;
2878
- cursor: z.ZodNumber;
2879
- surface: z.ZodEnum<{
2880
- artifact: "artifact";
2881
- transcript: "transcript";
2882
- workspace: "workspace";
2883
- }>;
2884
- actor: z.ZodObject<{
2885
- kind: z.ZodEnum<{
2886
- agent: "agent";
2887
- system: "system";
2888
- user: "user";
2889
- }>;
2558
+ provider: z.ZodOptional<z.ZodString>;
2559
+ model: z.ZodOptional<z.ZodString>;
2560
+ promptTokens: z.ZodOptional<z.ZodNumber>;
2561
+ completionTokens: z.ZodOptional<z.ZodNumber>;
2562
+ durationMs: z.ZodOptional<z.ZodNumber>;
2563
+ clientVersion: z.ZodString;
2564
+ reportedAt: z.ZodISODateTime;
2565
+ }, z.core.$strip>>;
2566
+ agentRef: z.ZodOptional<z.ZodObject<{
2567
+ agentId: z.ZodString;
2568
+ profileRevision: z.ZodString;
2569
+ }, z.core.$strict>>;
2570
+ agentHomeProjection: z.ZodOptional<z.ZodObject<{
2571
+ profileRevision: z.ZodString;
2572
+ projectionHash: z.ZodString;
2573
+ }, z.core.$strict>>;
2574
+ agentHomeMemoryChange: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
2575
+ outcome: z.ZodLiteral<"unchanged">;
2576
+ }, z.core.$strict>, z.ZodObject<{
2577
+ outcome: z.ZodLiteral<"reader-attributed">;
2578
+ paths: z.ZodArray<z.ZodString>;
2579
+ }, z.core.$strict>, z.ZodObject<{
2580
+ outcome: z.ZodLiteral<"unattributed">;
2581
+ paths: z.ZodArray<z.ZodString>;
2582
+ }, z.core.$strict>, z.ZodObject<{
2583
+ outcome: z.ZodLiteral<"unmeasured">;
2584
+ }, z.core.$strict>], "outcome">>;
2585
+ sealed: z.ZodObject<{
2586
+ v: z.ZodLiteral<1>;
2587
+ suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
2588
+ category: z.ZodLiteral<"task-output">;
2589
+ scope: z.ZodObject<{
2890
2590
  id: z.ZodString;
2591
+ epoch: z.ZodNumber;
2592
+ keyId: z.ZodString;
2891
2593
  }, z.core.$strict>;
2892
- agentRef: z.ZodObject<{
2893
- agentId: z.ZodString;
2894
- profileRevision: z.ZodString;
2594
+ chainHead: z.ZodObject<{
2595
+ seq: z.ZodNumber;
2596
+ hash: z.ZodString;
2895
2597
  }, z.core.$strict>;
2896
- sessionRef: z.ZodString;
2897
- runtime: z.ZodEnum<{
2898
- claude: "claude";
2899
- codex: "codex";
2900
- pi: "pi";
2901
- }>;
2902
- cwd: z.ZodString;
2903
- policyRevision: z.ZodString;
2904
- target: z.ZodString;
2905
- mimeType: z.ZodString;
2906
- decodeAs: z.ZodEnum<{
2907
- bytes: "bytes";
2908
- utf8: "utf8";
2909
- }>;
2910
- decision: z.ZodLiteral<"allowed">;
2911
- byteCount: z.ZodNumber;
2912
- contentHash: z.ZodString;
2913
- blobRef: z.ZodObject<{
2598
+ sender: z.ZodString;
2599
+ salt: z.ZodString;
2600
+ nonce: z.ZodString;
2601
+ paddedLength: z.ZodNumber;
2602
+ contentMac: z.ZodString;
2603
+ ciphertext: z.ZodOptional<z.ZodString>;
2604
+ ciphertextRef: z.ZodOptional<z.ZodObject<{
2914
2605
  blobId: z.ZodString;
2915
2606
  contentHash: z.ZodString;
2916
2607
  size: z.ZodNumber;
2917
2608
  contentType: z.ZodString;
2918
- url: z.ZodOptional<z.ZodString>;
2919
- }, z.core.$strip>;
2920
- }, z.core.$strict>, z.ZodObject<{
2921
- requestId: z.ZodUUID;
2922
- eventId: z.ZodUUID;
2923
- cursor: z.ZodNumber;
2924
- surface: z.ZodEnum<{
2925
- artifact: "artifact";
2926
- transcript: "transcript";
2927
- workspace: "workspace";
2928
- }>;
2929
- actor: z.ZodObject<{
2930
- kind: z.ZodEnum<{
2931
- agent: "agent";
2932
- system: "system";
2933
- user: "user";
2934
- }>;
2609
+ }, z.core.$strict>>;
2610
+ }, z.core.$strict>;
2611
+ }, z.core.$strict>;
2612
+ export type TaskFailSealedPayload = z.infer<typeof TaskFailSealedPayloadSchema>;
2613
+ /**
2614
+ * daemon -> server: `task.decline` of a sealed task with a sealed `reason`.
2615
+ * The sealed decline codes go only on the plaintext `task.decline`: a device
2616
+ * that cannot open or use the scope key often cannot seal a reply either.
2617
+ */
2618
+ export declare const TaskDeclineSealedPayloadSchema: z.ZodObject<{
2619
+ sealing: z.ZodOptional<z.ZodNever>;
2620
+ retryable: z.ZodOptional<z.ZodBoolean>;
2621
+ agentRef: z.ZodOptional<z.ZodObject<{
2622
+ agentId: z.ZodString;
2623
+ profileRevision: z.ZodString;
2624
+ }, z.core.$strict>>;
2625
+ code: z.ZodOptional<z.ZodEnum<{
2626
+ agent_home_reader_busy: "agent_home_reader_busy";
2627
+ agent_home_writer_busy: "agent_home_writer_busy";
2628
+ }>>;
2629
+ sealed: z.ZodObject<{
2630
+ v: z.ZodLiteral<1>;
2631
+ suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
2632
+ category: z.ZodLiteral<"task-output">;
2633
+ scope: z.ZodObject<{
2935
2634
  id: z.ZodString;
2635
+ epoch: z.ZodNumber;
2636
+ keyId: z.ZodString;
2936
2637
  }, z.core.$strict>;
2937
- agentRef: z.ZodObject<{
2938
- agentId: z.ZodString;
2939
- profileRevision: z.ZodString;
2638
+ chainHead: z.ZodObject<{
2639
+ seq: z.ZodNumber;
2640
+ hash: z.ZodString;
2940
2641
  }, z.core.$strict>;
2941
- sessionRef: z.ZodString;
2642
+ sender: z.ZodString;
2643
+ salt: z.ZodString;
2644
+ nonce: z.ZodString;
2645
+ paddedLength: z.ZodNumber;
2646
+ contentMac: z.ZodString;
2647
+ ciphertext: z.ZodOptional<z.ZodString>;
2648
+ ciphertextRef: z.ZodOptional<z.ZodObject<{
2649
+ blobId: z.ZodString;
2650
+ contentHash: z.ZodString;
2651
+ size: z.ZodNumber;
2652
+ contentType: z.ZodString;
2653
+ }, z.core.$strict>>;
2654
+ }, z.core.$strict>;
2655
+ }, z.core.$strict>;
2656
+ export type TaskDeclineSealedPayload = z.infer<typeof TaskDeclineSealedPayloadSchema>;
2657
+ /** daemon -> server: `task.cancelled` of a sealed task. `reason` is sealed. */
2658
+ export declare const TaskCancelledSealedPayloadSchema: z.ZodObject<{
2659
+ sealing: z.ZodOptional<z.ZodNever>;
2660
+ harnessId: z.ZodOptional<z.ZodString>;
2661
+ usage: z.ZodOptional<z.ZodObject<{
2942
2662
  runtime: z.ZodEnum<{
2943
2663
  claude: "claude";
2944
2664
  codex: "codex";
2945
2665
  pi: "pi";
2946
2666
  }>;
2947
- cwd: z.ZodString;
2948
- policyRevision: z.ZodString;
2949
- target: z.ZodString;
2950
- mimeType: z.ZodString;
2951
- decodeAs: z.ZodEnum<{
2952
- bytes: "bytes";
2953
- utf8: "utf8";
2954
- }>;
2955
- decision: z.ZodLiteral<"denied">;
2956
- byteCount: z.ZodLiteral<0>;
2957
- reason: z.ZodEnum<{
2958
- "absolute-target": "absolute-target";
2959
- "byte-limit": "byte-limit";
2960
- "capability-missing": "capability-missing";
2961
- "dot-segment": "dot-segment";
2962
- "identity-mismatch": "identity-mismatch";
2963
- "invalid-request": "invalid-request";
2964
- "mime-not-allowlisted": "mime-not-allowlisted";
2965
- "non-relative-target": "non-relative-target";
2966
- "not-regular-file": "not-regular-file";
2967
- "path-escape": "path-escape";
2968
- "policy-disabled": "policy-disabled";
2969
- "policy-revision-mismatch": "policy-revision-mismatch";
2970
- "root-invalid": "root-invalid";
2971
- "root-not-allowlisted": "root-not-allowlisted";
2972
- "sensitive-name": "sensitive-name";
2973
- symlink: "symlink";
2974
- "target-missing": "target-missing";
2975
- "text-decode-failed": "text-decode-failed";
2976
- "text-not-allowlisted": "text-not-allowlisted";
2977
- }>;
2978
- }, z.core.$strict>], "decision">;
2979
- readonly 'agent.home.projection': z.ZodObject<{
2980
- requestId: z.ZodUUID;
2981
- agentRef: z.ZodObject<{
2982
- agentId: z.ZodString;
2983
- profileRevision: z.ZodString;
2984
- }, z.core.$strict>;
2667
+ provider: z.ZodOptional<z.ZodString>;
2668
+ model: z.ZodOptional<z.ZodString>;
2669
+ promptTokens: z.ZodOptional<z.ZodNumber>;
2670
+ completionTokens: z.ZodOptional<z.ZodNumber>;
2671
+ durationMs: z.ZodOptional<z.ZodNumber>;
2672
+ clientVersion: z.ZodString;
2673
+ reportedAt: z.ZodISODateTime;
2674
+ }, z.core.$strip>>;
2675
+ agentRef: z.ZodOptional<z.ZodObject<{
2676
+ agentId: z.ZodString;
2677
+ profileRevision: z.ZodString;
2678
+ }, z.core.$strict>>;
2679
+ agentHomeProjection: z.ZodOptional<z.ZodObject<{
2680
+ profileRevision: z.ZodString;
2985
2681
  projectionHash: z.ZodString;
2986
- projection: z.ZodType<import("./agent-home-projection").AgentHomeProjectionValue, unknown, z.core.$ZodTypeInternals<import("./agent-home-projection").AgentHomeProjectionValue, unknown>>;
2987
- }, z.core.$strict>;
2988
- readonly 'agent.input.preparation': z.ZodObject<{
2989
- agentMemory: z.ZodEnum<{
2990
- none: "none";
2991
- read: "read";
2992
- "read-write": "read-write";
2993
- }>;
2994
- requestId: z.ZodUUID;
2995
- agentRef: z.ZodObject<{
2996
- agentId: z.ZodString;
2997
- profileRevision: z.ZodString;
2998
- }, z.core.$strict>;
2999
- profileId: z.ZodString;
3000
- policyRevision: z.ZodString;
3001
- source: z.ZodObject<{
3002
- revision: z.ZodString;
3003
- digest: z.ZodString;
2682
+ }, z.core.$strict>>;
2683
+ agentHomeMemoryChange: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
2684
+ outcome: z.ZodLiteral<"unchanged">;
2685
+ }, z.core.$strict>, z.ZodObject<{
2686
+ outcome: z.ZodLiteral<"reader-attributed">;
2687
+ paths: z.ZodArray<z.ZodString>;
2688
+ }, z.core.$strict>, z.ZodObject<{
2689
+ outcome: z.ZodLiteral<"unattributed">;
2690
+ paths: z.ZodArray<z.ZodString>;
2691
+ }, z.core.$strict>, z.ZodObject<{
2692
+ outcome: z.ZodLiteral<"unmeasured">;
2693
+ }, z.core.$strict>], "outcome">>;
2694
+ sealed: z.ZodObject<{
2695
+ v: z.ZodLiteral<1>;
2696
+ suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
2697
+ category: z.ZodLiteral<"task-output">;
2698
+ scope: z.ZodObject<{
2699
+ id: z.ZodString;
2700
+ epoch: z.ZodNumber;
2701
+ keyId: z.ZodString;
3004
2702
  }, z.core.$strict>;
3005
- selection: z.ZodObject<{
3006
- model: z.ZodObject<{
3007
- id: z.ZodString;
3008
- name: z.ZodString;
3009
- api: z.ZodLiteral<"openai-completions">;
3010
- provider: z.ZodString;
3011
- baseUrl: z.ZodString;
3012
- reasoning: z.ZodBoolean;
3013
- input: z.ZodArray<z.ZodEnum<{
3014
- image: "image";
3015
- text: "text";
3016
- }>>;
3017
- cost: z.ZodObject<{
3018
- input: z.ZodNumber;
3019
- output: z.ZodNumber;
3020
- cacheRead: z.ZodNumber;
3021
- cacheWrite: z.ZodNumber;
3022
- }, z.core.$strict>;
3023
- contextWindow: z.ZodNumber;
3024
- maxTokens: z.ZodNumber;
3025
- thinkingLevelMap: z.ZodOptional<z.ZodObject<{
3026
- off: z.ZodNullable<z.ZodString>;
3027
- minimal: z.ZodNullable<z.ZodString>;
3028
- low: z.ZodNullable<z.ZodString>;
3029
- medium: z.ZodNullable<z.ZodString>;
3030
- high: z.ZodNullable<z.ZodString>;
3031
- xhigh: z.ZodNullable<z.ZodString>;
3032
- max: z.ZodNullable<z.ZodString>;
3033
- }, z.core.$strict>>;
3034
- compat: z.ZodOptional<z.ZodObject<{
3035
- supportsStore: z.ZodOptional<z.ZodBoolean>;
3036
- supportsDeveloperRole: z.ZodOptional<z.ZodBoolean>;
3037
- supportsReasoningEffort: z.ZodOptional<z.ZodBoolean>;
3038
- supportsUsageInStreaming: z.ZodOptional<z.ZodBoolean>;
3039
- maxTokensField: z.ZodOptional<z.ZodEnum<{
3040
- max_completion_tokens: "max_completion_tokens";
3041
- max_tokens: "max_tokens";
3042
- }>>;
3043
- thinkingFormat: z.ZodOptional<z.ZodEnum<{
3044
- "ant-ling": "ant-ling";
3045
- baseten: "baseten";
3046
- "chat-template": "chat-template";
3047
- deepseek: "deepseek";
3048
- openai: "openai";
3049
- openrouter: "openrouter";
3050
- qwen: "qwen";
3051
- "qwen-chat-template": "qwen-chat-template";
3052
- "string-thinking": "string-thinking";
3053
- together: "together";
3054
- zai: "zai";
3055
- }>>;
3056
- zaiToolStream: z.ZodOptional<z.ZodBoolean>;
3057
- }, z.core.$strict>>;
3058
- }, z.core.$strict>;
3059
- options: z.ZodObject<{
3060
- cacheRetention: z.ZodEnum<{
3061
- long: "long";
3062
- none: "none";
3063
- short: "short";
3064
- }>;
3065
- maxTokens: z.ZodNumber;
3066
- temperature: z.ZodOptional<z.ZodNumber>;
3067
- toolChoice: z.ZodOptional<z.ZodEnum<{
3068
- auto: "auto";
3069
- none: "none";
3070
- }>>;
3071
- reasoningEffort: z.ZodOptional<z.ZodEnum<{
3072
- high: "high";
3073
- low: "low";
3074
- max: "max";
3075
- medium: "medium";
3076
- minimal: "minimal";
3077
- xhigh: "xhigh";
3078
- }>>;
3079
- }, z.core.$strict>;
2703
+ chainHead: z.ZodObject<{
2704
+ seq: z.ZodNumber;
2705
+ hash: z.ZodString;
3080
2706
  }, z.core.$strict>;
3081
- deadlineAt: z.ZodISODateTime;
3082
- context: z.ZodUnion<readonly [z.ZodObject<{
3083
- inline: z.ZodString;
3084
- }, z.core.$strict>, z.ZodObject<{
3085
- blobRef: z.ZodObject<{
3086
- blobId: z.ZodString;
3087
- contentHash: z.ZodString;
3088
- size: z.ZodNumber;
3089
- contentType: z.ZodString;
3090
- url: z.ZodOptional<z.ZodString>;
3091
- }, z.core.$strip>;
2707
+ sender: z.ZodString;
2708
+ salt: z.ZodString;
2709
+ nonce: z.ZodString;
2710
+ paddedLength: z.ZodNumber;
2711
+ contentMac: z.ZodString;
2712
+ ciphertext: z.ZodOptional<z.ZodString>;
2713
+ ciphertextRef: z.ZodOptional<z.ZodObject<{
2714
+ blobId: z.ZodString;
3092
2715
  contentHash: z.ZodString;
3093
- }, z.core.$strict>]>;
3094
- requiredToolsets: z.ZodArray<z.ZodString>;
3095
- accountingPolicyRef: z.ZodOptional<z.ZodObject<{
3096
- revision: z.ZodString;
3097
- ruledRuntime: z.ZodString;
3098
- ruledTarget: z.ZodObject<{
3099
- endpoint: z.ZodString;
3100
- modelId: z.ZodString;
3101
- }, z.core.$strict>;
3102
- ruledResidualKeys: z.ZodArray<z.ZodString>;
2716
+ size: z.ZodNumber;
2717
+ contentType: z.ZodString;
3103
2718
  }, z.core.$strict>>;
3104
2719
  }, z.core.$strict>;
3105
- readonly 'provider.provisioning.available': z.ZodObject<{
3106
- requestId: z.ZodUUID;
3107
- }, z.core.$strict>;
3108
- readonly 'agent.memory.intent.available': z.ZodObject<{
3109
- intentId: z.ZodUUID;
3110
- agentRef: z.ZodObject<{
3111
- agentId: z.ZodString;
3112
- profileRevision: z.ZodString;
2720
+ }, z.core.$strict>;
2721
+ export type TaskCancelledSealedPayload = z.infer<typeof TaskCancelledSealedPayloadSchema>;
2722
+ /** daemon -> server: `task.progress` of a sealed task. `events` is sealed; `seq` names the batch. */
2723
+ export declare const TaskProgressSealedPayloadSchema: z.ZodObject<{
2724
+ sealing: z.ZodOptional<z.ZodNever>;
2725
+ seq: z.ZodNumber;
2726
+ sealed: z.ZodObject<{
2727
+ v: z.ZodLiteral<1>;
2728
+ suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
2729
+ category: z.ZodLiteral<"task-output">;
2730
+ scope: z.ZodObject<{
2731
+ id: z.ZodString;
2732
+ epoch: z.ZodNumber;
2733
+ keyId: z.ZodString;
3113
2734
  }, z.core.$strict>;
3114
- }, z.core.$strict>;
3115
- readonly 'task.approve': z.ZodObject<{
3116
- approvalId: z.ZodOptional<z.ZodString>;
3117
- }, z.core.$strip>;
3118
- readonly 'task.reject': z.ZodObject<{
3119
- reason: z.ZodOptional<z.ZodString>;
3120
- approvalId: z.ZodOptional<z.ZodString>;
3121
- }, z.core.$strip>;
3122
- readonly 'task.cancel': z.ZodObject<{
3123
- reason: z.ZodOptional<z.ZodString>;
3124
- }, z.core.$strip>;
3125
- readonly 'task.steer': z.ZodObject<{
3126
- text: z.ZodString;
3127
- }, z.core.$strip>;
3128
- readonly 'task.claim': z.ZodObject<{
3129
- deviceId: z.ZodString;
3130
- agentId: z.ZodOptional<z.ZodString>;
3131
- agentRef: z.ZodOptional<z.ZodObject<{
3132
- agentId: z.ZodString;
3133
- profileRevision: z.ZodString;
3134
- }, z.core.$strict>>;
3135
- runtime: z.ZodOptional<z.ZodEnum<{
3136
- claude: "claude";
3137
- codex: "codex";
3138
- pi: "pi";
3139
- }>>;
3140
- harnessId: z.ZodOptional<z.ZodString>;
3141
- capabilities: z.ZodOptional<z.ZodObject<{
3142
- steer: z.ZodOptional<z.ZodBoolean>;
3143
- resume: z.ZodOptional<z.ZodBoolean>;
3144
- approvalInteractive: z.ZodOptional<z.ZodBoolean>;
3145
- mcpToolsets: z.ZodOptional<z.ZodBoolean>;
3146
- messageDraft: z.ZodOptional<z.ZodBoolean>;
3147
- }, z.core.$strip>>;
3148
- }, z.core.$strip>;
3149
- readonly 'task.started': z.ZodObject<{}, z.core.$strip>;
3150
- readonly 'task.decline': z.ZodObject<{
3151
- reason: z.ZodString;
3152
- retryable: z.ZodOptional<z.ZodBoolean>;
3153
- agentRef: z.ZodOptional<z.ZodObject<{
3154
- agentId: z.ZodString;
3155
- profileRevision: z.ZodString;
3156
- }, z.core.$strict>>;
3157
- code: z.ZodOptional<z.ZodEnum<{
3158
- agent_home_reader_busy: "agent_home_reader_busy";
3159
- agent_home_writer_busy: "agent_home_writer_busy";
3160
- }>>;
3161
- }, z.core.$strip>;
3162
- readonly 'task.progress': z.ZodObject<{
3163
- seq: z.ZodNumber;
3164
- events: z.ZodArray<z.ZodUnion<readonly [z.ZodDiscriminatedUnion<[z.ZodObject<{
3165
- type: z.ZodLiteral<"progress">;
3166
- text: z.ZodString;
3167
- }, z.core.$strip>, z.ZodObject<{
3168
- type: z.ZodLiteral<"tool_use">;
3169
- tool: z.ZodString;
3170
- mcp: z.ZodOptional<z.ZodObject<{
3171
- server: z.ZodString;
3172
- tool: z.ZodString;
3173
- }, z.core.$strict>>;
3174
- input: z.ZodOptional<z.ZodUnknown>;
3175
- toolCallId: z.ZodOptional<z.ZodString>;
3176
- spill: z.ZodOptional<z.ZodObject<{
3177
- field: z.ZodEnum<{
3178
- input: "input";
3179
- output: "output";
3180
- }>;
3181
- totalBytes: z.ZodNumber;
3182
- omittedBytes: z.ZodNumber;
3183
- contentType: z.ZodLiteral<"application/json">;
3184
- blob: z.ZodOptional<z.ZodObject<{
3185
- blobId: z.ZodString;
3186
- contentHash: z.ZodString;
3187
- size: z.ZodNumber;
3188
- contentType: z.ZodString;
3189
- url: z.ZodOptional<z.ZodString>;
3190
- }, z.core.$strip>>;
3191
- unstoredReason: z.ZodOptional<z.ZodString>;
3192
- }, z.core.$strict>>;
3193
- }, z.core.$strip>, z.ZodObject<{
3194
- type: z.ZodLiteral<"tool_result">;
3195
- tool: z.ZodString;
3196
- mcp: z.ZodOptional<z.ZodObject<{
3197
- server: z.ZodString;
3198
- tool: z.ZodString;
3199
- }, z.core.$strict>>;
3200
- output: z.ZodOptional<z.ZodUnknown>;
3201
- toolCallId: z.ZodOptional<z.ZodString>;
3202
- isError: z.ZodOptional<z.ZodBoolean>;
3203
- spill: z.ZodOptional<z.ZodObject<{
3204
- field: z.ZodEnum<{
3205
- input: "input";
3206
- output: "output";
3207
- }>;
3208
- totalBytes: z.ZodNumber;
3209
- omittedBytes: z.ZodNumber;
3210
- contentType: z.ZodLiteral<"application/json">;
3211
- blob: z.ZodOptional<z.ZodObject<{
3212
- blobId: z.ZodString;
3213
- contentHash: z.ZodString;
3214
- size: z.ZodNumber;
3215
- contentType: z.ZodString;
3216
- url: z.ZodOptional<z.ZodString>;
3217
- }, z.core.$strip>>;
3218
- unstoredReason: z.ZodOptional<z.ZodString>;
3219
- }, z.core.$strict>>;
3220
- }, z.core.$strip>, z.ZodObject<{
3221
- type: z.ZodLiteral<"artifact">;
3222
- name: z.ZodString;
3223
- contentType: z.ZodString;
3224
- }, z.core.$strip>, z.ZodObject<{
3225
- type: z.ZodLiteral<"needs_approval">;
3226
- summary: z.ZodString;
3227
- }, z.core.$strip>, z.ZodObject<{
3228
- type: z.ZodLiteral<"turn_end">;
3229
- }, z.core.$strip>, z.ZodObject<{
3230
- type: z.ZodLiteral<"error">;
3231
- message: z.ZodString;
3232
- }, z.core.$strip>, z.ZodObject<{
3233
- type: z.ZodLiteral<"usage">;
3234
- inputTokens: z.ZodOptional<z.ZodNumber>;
3235
- cachedInputTokens: z.ZodOptional<z.ZodNumber>;
3236
- outputTokens: z.ZodOptional<z.ZodNumber>;
3237
- reasoningTokens: z.ZodOptional<z.ZodNumber>;
3238
- totalTokens: z.ZodOptional<z.ZodNumber>;
3239
- contextTokens: z.ZodOptional<z.ZodNumber>;
3240
- contextWindow: z.ZodOptional<z.ZodNumber>;
3241
- contextSource: z.ZodOptional<z.ZodEnum<{
3242
- estimate: "estimate";
3243
- provider: "provider";
3244
- }>>;
3245
- }, z.core.$strip>], "type">, z.ZodObject<{
3246
- type: z.ZodString;
3247
- }, z.core.$loose>]>>;
3248
- }, z.core.$strip>;
3249
- readonly 'task.artifact': z.ZodObject<{
3250
- name: z.ZodString;
3251
- contentType: z.ZodString;
3252
- inline: z.ZodOptional<z.ZodString>;
3253
- blobRef: z.ZodOptional<z.ZodObject<{
2735
+ chainHead: z.ZodObject<{
2736
+ seq: z.ZodNumber;
2737
+ hash: z.ZodString;
2738
+ }, z.core.$strict>;
2739
+ sender: z.ZodString;
2740
+ salt: z.ZodString;
2741
+ nonce: z.ZodString;
2742
+ paddedLength: z.ZodNumber;
2743
+ contentMac: z.ZodString;
2744
+ ciphertext: z.ZodOptional<z.ZodString>;
2745
+ ciphertextRef: z.ZodOptional<z.ZodObject<{
3254
2746
  blobId: z.ZodString;
3255
2747
  contentHash: z.ZodString;
3256
2748
  size: z.ZodNumber;
3257
2749
  contentType: z.ZodString;
3258
- url: z.ZodOptional<z.ZodString>;
3259
- }, z.core.$strip>>;
3260
- }, z.core.$strip>;
3261
- readonly 'task.await_approval': z.ZodObject<{
3262
- summary: z.ZodString;
3263
- approvalId: z.ZodOptional<z.ZodString>;
3264
- }, z.core.$strip>;
3265
- readonly 'task.complete': z.ZodObject<{
3266
- harnessId: z.ZodOptional<z.ZodString>;
3267
- summary: z.ZodString;
3268
- finalMessage: z.ZodOptional<z.ZodString>;
3269
- sessionRef: z.ZodString;
3270
- artifactRefs: z.ZodOptional<z.ZodArray<z.ZodObject<{
2750
+ }, z.core.$strict>>;
2751
+ }, z.core.$strict>;
2752
+ }, z.core.$strict>;
2753
+ export type TaskProgressSealedPayload = z.infer<typeof TaskProgressSealedPayloadSchema>;
2754
+ /**
2755
+ * daemon -> server: an inline artifact of a sealed task. `inline` is sealed; a
2756
+ * blob artifact is not carried in v1. `artifactId` names the write in the AAD
2757
+ * and the content MAC, because two artifacts of one task may share a `name`.
2758
+ */
2759
+ export declare const TaskArtifactSealedPayloadSchema: z.ZodObject<{
2760
+ sealing: z.ZodOptional<z.ZodNever>;
2761
+ name: z.ZodString;
2762
+ contentType: z.ZodString;
2763
+ artifactId: z.ZodUUID;
2764
+ sealed: z.ZodObject<{
2765
+ v: z.ZodLiteral<1>;
2766
+ suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
2767
+ category: z.ZodLiteral<"task-output">;
2768
+ scope: z.ZodObject<{
2769
+ id: z.ZodString;
2770
+ epoch: z.ZodNumber;
2771
+ keyId: z.ZodString;
2772
+ }, z.core.$strict>;
2773
+ chainHead: z.ZodObject<{
2774
+ seq: z.ZodNumber;
2775
+ hash: z.ZodString;
2776
+ }, z.core.$strict>;
2777
+ sender: z.ZodString;
2778
+ salt: z.ZodString;
2779
+ nonce: z.ZodString;
2780
+ paddedLength: z.ZodNumber;
2781
+ contentMac: z.ZodString;
2782
+ ciphertext: z.ZodOptional<z.ZodString>;
2783
+ ciphertextRef: z.ZodOptional<z.ZodObject<{
3271
2784
  blobId: z.ZodString;
3272
2785
  contentHash: z.ZodString;
3273
2786
  size: z.ZodNumber;
3274
2787
  contentType: z.ZodString;
3275
- url: z.ZodOptional<z.ZodString>;
3276
- }, z.core.$strip>>>;
3277
- document: z.ZodOptional<z.ZodUnknown>;
3278
- usage: z.ZodOptional<z.ZodObject<{
3279
- runtime: z.ZodEnum<{
3280
- claude: "claude";
3281
- codex: "codex";
3282
- pi: "pi";
3283
- }>;
3284
- provider: z.ZodOptional<z.ZodString>;
3285
- model: z.ZodOptional<z.ZodString>;
3286
- promptTokens: z.ZodOptional<z.ZodNumber>;
3287
- completionTokens: z.ZodOptional<z.ZodNumber>;
3288
- durationMs: z.ZodOptional<z.ZodNumber>;
3289
- clientVersion: z.ZodString;
3290
- reportedAt: z.ZodISODateTime;
3291
- }, z.core.$strip>>;
3292
- preparedObservation: z.ZodOptional<z.ZodObject<{
3293
- requestDigest: z.ZodString;
3294
- initialPromptTokens: z.ZodNumber;
3295
- maxPromptTokens: z.ZodNumber;
3296
- }, z.core.$strict>>;
3297
- agentRef: z.ZodOptional<z.ZodObject<{
3298
- agentId: z.ZodString;
3299
- profileRevision: z.ZodString;
3300
- }, z.core.$strict>>;
3301
- agentHomeProjection: z.ZodOptional<z.ZodObject<{
3302
- profileRevision: z.ZodString;
3303
- projectionHash: z.ZodString;
3304
- }, z.core.$strict>>;
3305
- agentHomeMemoryChange: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
3306
- outcome: z.ZodLiteral<"unchanged">;
3307
- }, z.core.$strict>, z.ZodObject<{
3308
- outcome: z.ZodLiteral<"reader-attributed">;
3309
- paths: z.ZodArray<z.ZodString>;
3310
- }, z.core.$strict>, z.ZodObject<{
3311
- outcome: z.ZodLiteral<"unattributed">;
3312
- paths: z.ZodArray<z.ZodString>;
3313
- }, z.core.$strict>, z.ZodObject<{
3314
- outcome: z.ZodLiteral<"unmeasured">;
3315
- }, z.core.$strict>], "outcome">>;
3316
- }, z.core.$strip>;
3317
- readonly 'task.fail': z.ZodObject<{
3318
- recovery: z.ZodOptional<z.ZodObject<{
3319
- kind: z.ZodLiteral<"daemon_interrupted">;
3320
- offerId: z.ZodUUID;
3321
- }, z.core.$strict>>;
3322
- harnessId: z.ZodOptional<z.ZodString>;
3323
- reason: z.ZodString;
3324
- retryable: z.ZodOptional<z.ZodBoolean>;
3325
- usage: z.ZodOptional<z.ZodObject<{
3326
- runtime: z.ZodEnum<{
3327
- claude: "claude";
3328
- codex: "codex";
3329
- pi: "pi";
3330
- }>;
3331
- provider: z.ZodOptional<z.ZodString>;
3332
- model: z.ZodOptional<z.ZodString>;
3333
- promptTokens: z.ZodOptional<z.ZodNumber>;
3334
- completionTokens: z.ZodOptional<z.ZodNumber>;
3335
- durationMs: z.ZodOptional<z.ZodNumber>;
3336
- clientVersion: z.ZodString;
3337
- reportedAt: z.ZodISODateTime;
3338
- }, z.core.$strip>>;
3339
- preparedObservation: z.ZodOptional<z.ZodObject<{
3340
- requestDigest: z.ZodString;
3341
- initialPromptTokens: z.ZodNumber;
3342
- maxPromptTokens: z.ZodNumber;
3343
- }, z.core.$strict>>;
3344
- agentRef: z.ZodOptional<z.ZodObject<{
3345
- agentId: z.ZodString;
3346
- profileRevision: z.ZodString;
3347
- }, z.core.$strict>>;
3348
- agentHomeProjection: z.ZodOptional<z.ZodObject<{
3349
- profileRevision: z.ZodString;
3350
- projectionHash: z.ZodString;
3351
2788
  }, z.core.$strict>>;
3352
- agentHomeMemoryChange: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
3353
- outcome: z.ZodLiteral<"unchanged">;
3354
- }, z.core.$strict>, z.ZodObject<{
3355
- outcome: z.ZodLiteral<"reader-attributed">;
3356
- paths: z.ZodArray<z.ZodString>;
3357
- }, z.core.$strict>, z.ZodObject<{
3358
- outcome: z.ZodLiteral<"unattributed">;
3359
- paths: z.ZodArray<z.ZodString>;
3360
- }, z.core.$strict>, z.ZodObject<{
3361
- outcome: z.ZodLiteral<"unmeasured">;
3362
- }, z.core.$strict>], "outcome">>;
3363
- }, z.core.$strip>;
3364
- readonly 'task.cancelled': z.ZodObject<{
3365
- harnessId: z.ZodOptional<z.ZodString>;
3366
- reason: z.ZodOptional<z.ZodString>;
3367
- usage: z.ZodOptional<z.ZodObject<{
3368
- runtime: z.ZodEnum<{
3369
- claude: "claude";
3370
- codex: "codex";
3371
- pi: "pi";
3372
- }>;
3373
- provider: z.ZodOptional<z.ZodString>;
3374
- model: z.ZodOptional<z.ZodString>;
3375
- promptTokens: z.ZodOptional<z.ZodNumber>;
3376
- completionTokens: z.ZodOptional<z.ZodNumber>;
3377
- durationMs: z.ZodOptional<z.ZodNumber>;
3378
- clientVersion: z.ZodString;
3379
- reportedAt: z.ZodISODateTime;
3380
- }, z.core.$strip>>;
3381
- agentRef: z.ZodOptional<z.ZodObject<{
3382
- agentId: z.ZodString;
3383
- profileRevision: z.ZodString;
3384
- }, z.core.$strict>>;
3385
- agentHomeProjection: z.ZodOptional<z.ZodObject<{
3386
- profileRevision: z.ZodString;
3387
- projectionHash: z.ZodString;
2789
+ }, z.core.$strict>;
2790
+ }, z.core.$strict>;
2791
+ export type TaskArtifactSealedPayload = z.infer<typeof TaskArtifactSealedPayloadSchema>;
2792
+ /** daemon -> server: `task.await_approval` of a sealed task. `summary` is sealed; `approvalId` is required. */
2793
+ export declare const TaskAwaitApprovalSealedPayloadSchema: z.ZodObject<{
2794
+ sealing: z.ZodOptional<z.ZodNever>;
2795
+ approvalId: z.ZodString;
2796
+ sealed: z.ZodObject<{
2797
+ v: z.ZodLiteral<1>;
2798
+ suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
2799
+ category: z.ZodLiteral<"task-output">;
2800
+ scope: z.ZodObject<{
2801
+ id: z.ZodString;
2802
+ epoch: z.ZodNumber;
2803
+ keyId: z.ZodString;
2804
+ }, z.core.$strict>;
2805
+ chainHead: z.ZodObject<{
2806
+ seq: z.ZodNumber;
2807
+ hash: z.ZodString;
2808
+ }, z.core.$strict>;
2809
+ sender: z.ZodString;
2810
+ salt: z.ZodString;
2811
+ nonce: z.ZodString;
2812
+ paddedLength: z.ZodNumber;
2813
+ contentMac: z.ZodString;
2814
+ ciphertext: z.ZodOptional<z.ZodString>;
2815
+ ciphertextRef: z.ZodOptional<z.ZodObject<{
2816
+ blobId: z.ZodString;
2817
+ contentHash: z.ZodString;
2818
+ size: z.ZodNumber;
2819
+ contentType: z.ZodString;
3388
2820
  }, z.core.$strict>>;
3389
- agentHomeMemoryChange: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
3390
- outcome: z.ZodLiteral<"unchanged">;
3391
- }, z.core.$strict>, z.ZodObject<{
3392
- outcome: z.ZodLiteral<"reader-attributed">;
3393
- paths: z.ZodArray<z.ZodString>;
3394
- }, z.core.$strict>, z.ZodObject<{
3395
- outcome: z.ZodLiteral<"unattributed">;
3396
- paths: z.ZodArray<z.ZodString>;
3397
- }, z.core.$strict>, z.ZodObject<{
3398
- outcome: z.ZodLiteral<"unmeasured">;
3399
- }, z.core.$strict>], "outcome">>;
3400
- }, z.core.$strip>;
3401
- readonly 'task.approval_resolved': z.ZodObject<{
3402
- approvalId: z.ZodString;
3403
- decision: z.ZodEnum<{
3404
- approve: "approve";
3405
- reject: "reject";
3406
- }>;
3407
- resolvedBy: z.ZodEnum<{
3408
- local: "local";
3409
- }>;
3410
- at: z.ZodISODateTime;
3411
- }, z.core.$strip>;
2821
+ }, z.core.$strict>;
2822
+ }, z.core.$strict>;
2823
+ export type TaskAwaitApprovalSealedPayload = z.infer<typeof TaskAwaitApprovalSealedPayloadSchema>;
2824
+ /**
2825
+ * Protocol-owned task-opening family; the wire registry consumes these same entries.
2826
+ *
2827
+ * Each value is written `X as typeof X`, here and in `MESSAGE_PAYLOAD_SCHEMAS`.
2828
+ * The assertion is type-only (no runtime code). It makes declaration emit
2829
+ * name each schema (`typeof X`) instead of copying its full type, which keeps
2830
+ * the published `.d.ts` small. Every new entry follows this rule.
2831
+ */
2832
+ declare const TASK_OFFER_PAYLOAD_SCHEMAS: {
2833
+ readonly 'task.offer': typeof TaskOfferPayloadSchema;
2834
+ readonly 'task.offer_with_toolsets': typeof TaskOfferWithToolsetsPayloadSchema;
2835
+ readonly 'task.offer_for_agent': typeof TaskOfferForAgentPayloadSchema;
2836
+ readonly 'task.offer_for_agent_with_egress': typeof TaskOfferForAgentWithEgressPayloadSchema;
2837
+ readonly 'task.offer_for_agent_with_egress_fresh': typeof TaskOfferForAgentWithEgressFreshPayloadSchema;
2838
+ readonly 'task.offer_prepared': typeof TaskOfferPreparedPayloadSchema;
2839
+ readonly 'task.offer_sealed': typeof TaskOfferSealedPayloadSchema;
2840
+ readonly 'task.offer_with_toolsets_sealed': typeof TaskOfferWithToolsetsSealedPayloadSchema;
2841
+ readonly 'task.offer_for_agent_sealed': typeof TaskOfferForAgentSealedPayloadSchema;
2842
+ readonly 'task.offer_for_agent_with_egress_sealed': typeof TaskOfferForAgentWithEgressSealedPayloadSchema;
2843
+ readonly 'task.offer_for_agent_with_egress_fresh_sealed': typeof TaskOfferForAgentWithEgressFreshSealedPayloadSchema;
2844
+ };
2845
+ export type TaskOfferType = keyof typeof TASK_OFFER_PAYLOAD_SCHEMAS;
2846
+ export declare const TASK_OFFER_TYPES: readonly TaskOfferType[];
2847
+ /** Classify task-opening offers without duplicating the protocol registry in consumers. */
2848
+ export declare function isTaskOfferType(type: string): type is TaskOfferType;
2849
+ export declare const MESSAGE_PAYLOAD_SCHEMAS: {
2850
+ readonly 'task.offer': typeof TaskOfferPayloadSchema;
2851
+ readonly 'task.offer_with_toolsets': typeof TaskOfferWithToolsetsPayloadSchema;
2852
+ readonly 'task.offer_for_agent': typeof TaskOfferForAgentPayloadSchema;
2853
+ readonly 'task.offer_for_agent_with_egress': typeof TaskOfferForAgentWithEgressPayloadSchema;
2854
+ readonly 'task.offer_for_agent_with_egress_fresh': typeof TaskOfferForAgentWithEgressFreshPayloadSchema;
2855
+ readonly 'task.offer_prepared': typeof TaskOfferPreparedPayloadSchema;
2856
+ readonly 'task.offer_sealed': typeof TaskOfferSealedPayloadSchema;
2857
+ readonly 'task.offer_with_toolsets_sealed': typeof TaskOfferWithToolsetsSealedPayloadSchema;
2858
+ readonly 'task.offer_for_agent_sealed': typeof TaskOfferForAgentSealedPayloadSchema;
2859
+ readonly 'task.offer_for_agent_with_egress_sealed': typeof TaskOfferForAgentWithEgressSealedPayloadSchema;
2860
+ readonly 'task.offer_for_agent_with_egress_fresh_sealed': typeof TaskOfferForAgentWithEgressFreshSealedPayloadSchema;
2861
+ readonly 'conn.hello': typeof ConnHelloPayloadSchema;
2862
+ readonly 'conn.ack': typeof ConnAckPayloadSchema;
2863
+ readonly 'agent.egress.reliable': typeof AgentEgressReliablePayloadSchema;
2864
+ readonly 'agent.egress.ack': typeof AgentEgressAckPayloadSchema;
2865
+ readonly 'agent.message.draft': typeof AgentMessageDraftPayloadSchema;
2866
+ readonly 'agent.message.publish': typeof AgentMessagePublishPayloadSchema;
2867
+ readonly 'agent.message.disposition': typeof AgentMessageDispositionPayloadSchema;
2868
+ readonly 'agent.content.read': typeof AgentContentReadPayloadSchema;
2869
+ readonly 'agent.content.receipt': typeof AgentContentReceiptPayloadSchema;
2870
+ readonly 'agent.home.projection': typeof AgentHomeProjectionPayloadSchema;
2871
+ readonly 'agent.input.preparation': typeof AgentInputPreparationPayloadSchema;
2872
+ readonly 'provider.provisioning.available': typeof ProviderProvisioningAvailablePayloadSchema;
2873
+ readonly 'agent.memory.intent.available': typeof AgentMemoryIntentAvailablePayloadSchema;
2874
+ readonly 'task.approve': typeof TaskApprovePayloadSchema;
2875
+ readonly 'task.reject': typeof TaskRejectPayloadSchema;
2876
+ readonly 'task.cancel': typeof TaskCancelPayloadSchema;
2877
+ readonly 'task.steer': typeof TaskSteerPayloadSchema;
2878
+ readonly 'task.claim': typeof TaskClaimPayloadSchema;
2879
+ readonly 'task.started': typeof TaskStartedPayloadSchema;
2880
+ readonly 'task.decline': typeof TaskDeclinePayloadSchema;
2881
+ readonly 'task.progress': typeof TaskProgressPayloadSchema;
2882
+ readonly 'task.artifact': typeof TaskArtifactPayloadSchema;
2883
+ readonly 'task.await_approval': typeof TaskAwaitApprovalPayloadSchema;
2884
+ readonly 'task.complete': typeof TaskCompletePayloadSchema;
2885
+ readonly 'task.fail': typeof TaskFailPayloadSchema;
2886
+ readonly 'task.cancelled': typeof TaskCancelledPayloadSchema;
2887
+ readonly 'task.approval_resolved': typeof TaskApprovalResolvedPayloadSchema;
2888
+ readonly 'task.steer_sealed': typeof TaskSteerSealedPayloadSchema;
2889
+ readonly 'task.complete_sealed': typeof TaskCompleteSealedPayloadSchema;
2890
+ readonly 'task.fail_sealed': typeof TaskFailSealedPayloadSchema;
2891
+ readonly 'task.decline_sealed': typeof TaskDeclineSealedPayloadSchema;
2892
+ readonly 'task.cancelled_sealed': typeof TaskCancelledSealedPayloadSchema;
2893
+ readonly 'task.progress_sealed': typeof TaskProgressSealedPayloadSchema;
2894
+ readonly 'task.artifact_sealed': typeof TaskArtifactSealedPayloadSchema;
2895
+ readonly 'task.await_approval_sealed': typeof TaskAwaitApprovalSealedPayloadSchema;
2896
+ readonly 'e2ee.key_package.available': typeof E2eeKeyPackageAvailablePayloadSchema;
3412
2897
  };
3413
2898
  export type MessageType = keyof typeof MESSAGE_PAYLOAD_SCHEMAS;
3414
2899
  export declare const MESSAGE_TYPES: MessageType[];
@@ -3417,7 +2902,7 @@ export declare const MESSAGE_TYPES: MessageType[];
3417
2902
  * (`envelope.ts`) to decide which branches require envelope `seq` (M1
3418
2903
  * redelivery cursor).
3419
2904
  */
3420
- export declare const SERVER_TO_DAEMON_TYPES: readonly ["conn.ack", "task.offer", "task.offer_with_toolsets", "task.offer_for_agent", "task.offer_for_agent_with_egress", "task.offer_for_agent_with_egress_fresh", "task.offer_prepared", "agent.egress.ack", "agent.message.disposition", "agent.content.read", "agent.home.projection", "agent.input.preparation", "provider.provisioning.available", "agent.memory.intent.available", "task.approve", "task.reject", "task.cancel", "task.steer"];
2905
+ export declare const SERVER_TO_DAEMON_TYPES: readonly ["conn.ack", "task.offer", "task.offer_with_toolsets", "task.offer_for_agent", "task.offer_for_agent_with_egress", "task.offer_for_agent_with_egress_fresh", "task.offer_prepared", "agent.egress.ack", "agent.message.disposition", "agent.content.read", "agent.home.projection", "agent.input.preparation", "provider.provisioning.available", "agent.memory.intent.available", "task.approve", "task.reject", "task.cancel", "task.steer", "task.offer_sealed", "task.offer_with_toolsets_sealed", "task.offer_for_agent_sealed", "task.offer_for_agent_with_egress_sealed", "task.offer_for_agent_with_egress_fresh_sealed", "task.steer_sealed", "e2ee.key_package.available"];
3421
2906
  /**
3422
2907
  * Message types the daemon sends to the server — the flip side of
3423
2908
  * {@link SERVER_TO_DAEMON_TYPES}. `conn.hello` is deliberately excluded: it's
@@ -3430,5 +2915,5 @@ export declare const SERVER_TO_DAEMON_TYPES: readonly ["conn.ack", "task.offer",
3430
2915
  * or anything unrecognized — is rejected before it's dispatched to any
3431
2916
  * handler or counted `accepted` on the `/byok/messages` wire.
3432
2917
  */
3433
- export declare const DAEMON_TO_SERVER_TYPES: readonly ["task.claim", "task.started", "task.decline", "task.progress", "task.artifact", "task.await_approval", "task.complete", "task.fail", "task.cancelled", "task.approval_resolved", "agent.egress.reliable", "agent.message.draft", "agent.message.publish", "agent.content.receipt"];
2918
+ export declare const DAEMON_TO_SERVER_TYPES: readonly ["task.claim", "task.started", "task.decline", "task.progress", "task.artifact", "task.await_approval", "task.complete", "task.fail", "task.cancelled", "task.approval_resolved", "agent.egress.reliable", "agent.message.draft", "agent.message.publish", "agent.content.receipt", "task.complete_sealed", "task.fail_sealed", "task.decline_sealed", "task.cancelled_sealed", "task.progress_sealed", "task.artifact_sealed", "task.await_approval_sealed"];
3434
2919
  export {};