@byok-sdk/protocol 0.29.0 → 0.30.0

package/dist/messages.d.ts

@@ -1,4 +1,6 @@
 import { z } from 'zod';
+import { ProviderProvisioningAvailablePayloadSchema } from './provider-provisioning';
+import { E2eeKeyPackageAvailablePayloadSchema } from './e2ee-member';
 import { type PlainJsonCheck } from './plain-json';
 export declare const RuntimeIdSchema: z.ZodEnum<{
     claude: "claude";
@@ -197,6 +199,8 @@ export type DispatchSelection = z.infer<typeof DispatchSelectionSchema>;
  * envelope's `task_id` (M1 gap #7 — single source of truth for routing).
  */
 export declare const TaskOfferPayloadSchema: z.ZodObject<{
+    sealed: z.ZodOptional<z.ZodNever>;
+    sealing: z.ZodOptional<z.ZodNever>;
     instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
         blobRef: z.ZodObject<{
             blobId: z.ZodString;
@@ -258,6 +262,8 @@ export declare const RequiredToolsetsSchema: z.ZodArray<z.ZodString>;
  * strict because every field here affects execution authority.
  */
 export declare const TaskOfferWithToolsetsPayloadSchema: z.ZodObject<{
+    sealed: z.ZodOptional<z.ZodNever>;
+    sealing: z.ZodOptional<z.ZodNever>;
     instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
         blobRef: z.ZodObject<{
             blobId: z.ZodString;
@@ -321,17 +327,32 @@ export type TaskOfferWithToolsetsPayload = z.infer<typeof TaskOfferWithToolsetsP
  */
 export declare const AgentHomeAccessSchema: z.ZodLiteral<"memory-reader">;
 export type AgentHomeAccess = z.infer<typeof AgentHomeAccessSchema>;
+/**
+ * The `agentMemory` of an ordinary Agent offer: the prepared modes plus
+ * `read-if-admitted`. That value runs as `read` when the daemon admits the
+ * memory MCP and as `none` when it does not. A host sends it only to a device
+ * that advertises `agent-memory-read-if-admitted`. Prepared offers refuse it.
+ */
+export declare const AgentMemorySelectionSchema: z.ZodEnum<{
+    none: "none";
+    read: "read";
+    "read-if-admitted": "read-if-admitted";
+    "read-write": "read-write";
+}>;
+export type AgentMemorySelection = z.infer<typeof AgentMemorySelectionSchema>;
 /**
  * Strict additive offer for a durable host-owned Agent. An older daemon that
  * does not advertise `agent-home-contract` skips this distinct message type
  * instead of stripping identity and applying legacy workspace semantics.
  *
- * `agentMemory` selects the Agent memory of this one task, with the values of
- * the prepared offer. Absent keeps the daemon admission. A host sends it only
- * to a device that advertises `agent-memory-selection`. The prepared offer
- * replaces it with its own required selection.
+ * `agentMemory` selects the Agent memory of this one task (see
+ * {@link AgentMemorySelectionSchema}). Absent keeps the daemon admission. A
+ * host sends it only to a device that advertises `agent-memory-selection`. The
+ * prepared offer replaces it with its own required selection.
  */
 export declare const TaskOfferForAgentPayloadSchema: z.ZodObject<{
+    sealed: z.ZodOptional<z.ZodNever>;
+    sealing: z.ZodOptional<z.ZodNever>;
     instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
         blobRef: z.ZodObject<{
             blobId: z.ZodString;
@@ -349,6 +370,7 @@ export declare const TaskOfferForAgentPayloadSchema: z.ZodObject<{
     agentMemory: z.ZodOptional<z.ZodEnum<{
         none: "none";
         read: "read";
+        "read-if-admitted": "read-if-admitted";
         "read-write": "read-write";
     }>>;
     requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -404,6 +426,8 @@ export type TaskOfferForAgentPayload = z.infer<typeof TaskOfferForAgentPayloadSc
  * with an unconsumed egress declaration.
  */
 export declare const TaskOfferForAgentWithEgressPayloadSchema: z.ZodObject<{
+    sealed: z.ZodOptional<z.ZodNever>;
+    sealing: z.ZodOptional<z.ZodNever>;
     instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
         blobRef: z.ZodObject<{
             blobId: z.ZodString;
@@ -421,6 +445,7 @@ export declare const TaskOfferForAgentWithEgressPayloadSchema: z.ZodObject<{
     agentMemory: z.ZodOptional<z.ZodEnum<{
         none: "none";
         read: "read";
+        "read-if-admitted": "read-if-admitted";
         "read-write": "read-write";
     }>>;
     requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -513,6 +538,8 @@ export type TaskOfferForAgentWithEgressPayload = z.infer<typeof TaskOfferForAgen
  * interpreted as a fresh execution by an older daemon.
  */
 export declare const TaskOfferForAgentWithEgressFreshPayloadSchema: z.ZodObject<{
+    sealed: z.ZodOptional<z.ZodNever>;
+    sealing: z.ZodOptional<z.ZodNever>;
     instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
         blobRef: z.ZodObject<{
             blobId: z.ZodString;
@@ -530,6 +557,7 @@ export declare const TaskOfferForAgentWithEgressFreshPayloadSchema: z.ZodObject<
     agentMemory: z.ZodOptional<z.ZodEnum<{
         none: "none";
         read: "read";
+        "read-if-admitted": "read-if-admitted";
         "read-write": "read-write";
     }>>;
     requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -635,6 +663,8 @@ export type TaskOfferForAgentWithEgressFreshPayload = z.infer<typeof TaskOfferFo
  * and declines non-retryably on any difference; nothing here is authority.
  */
 export declare const TaskOfferPreparedPayloadSchema: z.ZodObject<{
+    sealed: z.ZodOptional<z.ZodNever>;
+    sealing: z.ZodOptional<z.ZodNever>;
     agentRef: z.ZodObject<{
         agentId: z.ZodString;
         profileRevision: z.ZodString;
@@ -1188,6 +1218,8 @@ export declare const TaskCancelPayloadSchema: z.ZodObject<{
 export type TaskCancelPayload = z.infer<typeof TaskCancelPayloadSchema>;
 /** server -> daemon: inject steering text into a running task. */
 export declare const TaskSteerPayloadSchema: z.ZodObject<{
+    sealed: z.ZodOptional<z.ZodNever>;
+    sealing: z.ZodOptional<z.ZodNever>;
     text: z.ZodString;
 }, z.core.$strip>;
 export type TaskSteerPayload = z.infer<typeof TaskSteerPayloadSchema>;
@@ -1258,21 +1290,13 @@ export type TaskClaimPayload = z.infer<typeof TaskClaimPayloadSchema>;
 export declare const TaskStartedPayloadSchema: z.ZodObject<{}, z.core.$strip>;
 export type TaskStartedPayload = z.infer<typeof TaskStartedPayloadSchema>;
 /**
- * daemon -> server: decline an offer *before* claiming it (M1 gap #5) — e.g.
- * no compatible/available runtime. Fail-closed rejections must use this instead of silently
- * dropping the offer.
- *
- * Decision (see docs/protocol.md "Declined vs. Failed" for the full
- * writeup): declining does *not* introduce a new `Declined` terminal state.
- * It maps onto the existing `Failed` state via a new `Offered -> Failed`
- * transition. `reason`/`retryable` intentionally mirror `TaskFailPayload`
- * semantics, because a pre-claim decline and a post-claim failure are the same
- * outcome from the dispatcher's point of view (this attempt produced no
- * result; here's whether retrying — e.g. offering to a different device —
- * makes sense), and keeping the state machine minimal avoids forking every
- * terminal-state consumer into "Failed or Declined, handle both".
+ * #654: a sealed decline code names a fixed, non-retryable outcome and
+ * carries no content, so its `reason` is the code itself. A free-text reason
+ * or `retryable: true` never goes with it.
  */
 export declare const TaskDeclinePayloadSchema: z.ZodObject<{
+    sealed: z.ZodOptional<z.ZodNever>;
+    sealing: z.ZodOptional<z.ZodNever>;
     reason: z.ZodString;
     retryable: z.ZodOptional<z.ZodBoolean>;
     agentRef: z.ZodOptional<z.ZodObject<{
@@ -1282,6 +1306,10 @@ export declare const TaskDeclinePayloadSchema: z.ZodObject<{
     code: z.ZodOptional<z.ZodEnum<{
         agent_home_reader_busy: "agent_home_reader_busy";
         agent_home_writer_busy: "agent_home_writer_busy";
+        sealed_content_mac_mismatch: "sealed_content_mac_mismatch";
+        sealed_key_unavailable: "sealed_key_unavailable";
+        sealed_open_failed: "sealed_open_failed";
+        sealing_policy_mismatch: "sealing_policy_mismatch";
     }>>;
 }, z.core.$strip>;
 export type TaskDeclinePayload = z.infer<typeof TaskDeclinePayloadSchema>;
@@ -1297,6 +1325,8 @@ export type TaskDeclinePayload = z.infer<typeof TaskDeclinePayloadSchema>;
  * unknowns instead of choking on them.
  */
 export declare const TaskProgressPayloadSchema: z.ZodObject<{
+    sealed: z.ZodOptional<z.ZodNever>;
+    sealing: z.ZodOptional<z.ZodNever>;
     seq: z.ZodNumber;
     events: z.ZodArray<z.ZodUnion<readonly [z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"progress">;
@@ -1386,6 +1416,8 @@ export declare const TaskProgressPayloadSchema: z.ZodObject<{
 export type TaskProgressPayload = z.infer<typeof TaskProgressPayloadSchema>;
 /** daemon -> server: an artifact produced by the task, inline or by blob ref. */
 export declare const TaskArtifactPayloadSchema: z.ZodObject<{
+    sealed: z.ZodOptional<z.ZodNever>;
+    sealing: z.ZodOptional<z.ZodNever>;
     name: z.ZodString;
     contentType: z.ZodString;
     inline: z.ZodOptional<z.ZodString>;
@@ -1415,6 +1447,8 @@ export type TaskArtifactPayload = z.infer<typeof TaskArtifactPayloadSchema>;
  * pending" — the same behavior every server had before this field existed.
  */
 export declare const TaskAwaitApprovalPayloadSchema: z.ZodObject<{
+    sealed: z.ZodOptional<z.ZodNever>;
+    sealing: z.ZodOptional<z.ZodNever>;
     summary: z.ZodString;
     approvalId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
@@ -1630,6 +1664,8 @@ export type TerminalAgentHomeMemoryChange = z.infer<typeof TerminalAgentHomeMemo
  * `RESULT_OUTCOME_MAX_BYTES`).
  */
 export declare const TaskCompletePayloadSchema: z.ZodObject<{
+    sealed: z.ZodOptional<z.ZodNever>;
+    sealing: z.ZodOptional<z.ZodNever>;
     harnessId: z.ZodOptional<z.ZodString>;
     summary: z.ZodString;
     finalMessage: z.ZodOptional<z.ZodString>;
@@ -1684,6 +1720,8 @@ export declare const TaskCompletePayloadSchema: z.ZodObject<{
 export type TaskCompletePayload = z.infer<typeof TaskCompletePayloadSchema>;
 /** daemon -> server: task failed. */
 export declare const TaskFailPayloadSchema: z.ZodObject<{
+    sealed: z.ZodOptional<z.ZodNever>;
+    sealing: z.ZodOptional<z.ZodNever>;
     recovery: z.ZodOptional<z.ZodObject<{
         kind: z.ZodLiteral<"daemon_interrupted">;
         offerId: z.ZodUUID;
@@ -1751,6 +1789,8 @@ export type TaskFailPayload = z.infer<typeof TaskFailPayloadSchema>;
  * trigger that moves `Claimed`/`Running`/`AwaitApproval -> Cancelled`.
  */
 export declare const TaskCancelledPayloadSchema: z.ZodObject<{
+    sealed: z.ZodOptional<z.ZodNever>;
+    sealing: z.ZodOptional<z.ZodNever>;
     harnessId: z.ZodOptional<z.ZodString>;
     reason: z.ZodOptional<z.ZodString>;
     usage: z.ZodOptional<z.ZodObject<{
@@ -1836,1629 +1876,1024 @@ export declare const TaskApprovalResolvedPayloadSchema: z.ZodObject<{
     at: z.ZodISODateTime;
 }, z.core.$strip>;
 export type TaskApprovalResolvedPayload = z.infer<typeof TaskApprovalResolvedPayloadSchema>;
-/** Protocol-owned task-opening family; the wire registry consumes these same entries. */
-declare const TASK_OFFER_PAYLOAD_SCHEMAS: {
-    readonly 'task.offer': z.ZodObject<{
-        instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
-            blobRef: z.ZodObject<{
-                blobId: z.ZodString;
-                contentHash: z.ZodString;
-                size: z.ZodNumber;
-                contentType: z.ZodString;
-                url: z.ZodOptional<z.ZodString>;
-            }, z.core.$strip>;
-        }, z.core.$strict>]>;
-        runtime: z.ZodOptional<z.ZodEnum<{
-            claude: "claude";
-            codex: "codex";
-            pi: "pi";
-        }>>;
-        harnessId: z.ZodOptional<z.ZodString>;
-        dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            lane: z.ZodLiteral<"subscription">;
-            runtimeId: z.ZodEnum<{
-                claude: "claude";
-                codex: "codex";
-            }>;
-            providerId: z.ZodNull;
-            modelId: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            lane: z.ZodLiteral<"byok">;
-            runtimeId: z.ZodLiteral<"pi">;
-            providerId: z.ZodString;
-            modelId: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            lane: z.ZodLiteral<"byok-profile">;
-            runtimeId: z.ZodLiteral<"pi">;
-            providerProfile: z.ZodObject<{
-                profileRef: z.ZodString;
-                profileRevision: z.ZodString;
-                profileHash: z.ZodString;
-                modelId: z.ZodString;
-                requiredCapabilities: z.ZodArray<z.ZodEnum<{
-                    "image-input": "image-input";
-                }>>;
-            }, z.core.$strict>;
-        }, z.core.$strict>], "lane">>;
-        sessionRef: z.ZodOptional<z.ZodString>;
-        workspaceHint: z.ZodOptional<z.ZodString>;
-        limits: z.ZodOptional<z.ZodObject<{
-            maxDurationMs: z.ZodOptional<z.ZodNumber>;
-            maxTokens: z.ZodOptional<z.ZodNumber>;
-        }, z.core.$strip>>;
-    }, z.core.$strip>;
-    readonly 'task.offer_with_toolsets': z.ZodObject<{
-        instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
-            blobRef: z.ZodObject<{
-                blobId: z.ZodString;
-                contentHash: z.ZodString;
-                size: z.ZodNumber;
-                contentType: z.ZodString;
-                url: z.ZodOptional<z.ZodString>;
-            }, z.core.$strip>;
-        }, z.core.$strict>]>;
-        runtime: z.ZodOptional<z.ZodEnum<{
+/** server -> daemon: `task.offer` of a sealed task. */
+export declare const TaskOfferSealedPayloadSchema: z.ZodObject<{
+    runtime: z.ZodOptional<z.ZodEnum<{
+        claude: "claude";
+        codex: "codex";
+        pi: "pi";
+    }>>;
+    harnessId: z.ZodOptional<z.ZodString>;
+    dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        lane: z.ZodLiteral<"subscription">;
+        runtimeId: z.ZodEnum<{
             claude: "claude";
             codex: "codex";
-            pi: "pi";
-        }>>;
-        harnessId: z.ZodOptional<z.ZodString>;
-        dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            lane: z.ZodLiteral<"subscription">;
-            runtimeId: z.ZodEnum<{
-                claude: "claude";
-                codex: "codex";
-            }>;
-            providerId: z.ZodNull;
-            modelId: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            lane: z.ZodLiteral<"byok">;
-            runtimeId: z.ZodLiteral<"pi">;
-            providerId: z.ZodString;
-            modelId: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            lane: z.ZodLiteral<"byok-profile">;
-            runtimeId: z.ZodLiteral<"pi">;
-            providerProfile: z.ZodObject<{
-                profileRef: z.ZodString;
-                profileRevision: z.ZodString;
-                profileHash: z.ZodString;
-                modelId: z.ZodString;
-                requiredCapabilities: z.ZodArray<z.ZodEnum<{
-                    "image-input": "image-input";
-                }>>;
-            }, z.core.$strict>;
-        }, z.core.$strict>], "lane">>;
-        sessionRef: z.ZodOptional<z.ZodString>;
-        workspaceHint: z.ZodOptional<z.ZodString>;
-        limits: z.ZodOptional<z.ZodObject<{
-            maxDurationMs: z.ZodOptional<z.ZodNumber>;
-            maxTokens: z.ZodOptional<z.ZodNumber>;
-        }, z.core.$strip>>;
-        requiredToolsets: z.ZodArray<z.ZodString>;
-    }, z.core.$strict>;
-    readonly 'task.offer_for_agent': z.ZodObject<{
-        instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
-            blobRef: z.ZodObject<{
-                blobId: z.ZodString;
-                contentHash: z.ZodString;
-                size: z.ZodNumber;
-                contentType: z.ZodString;
-                url: z.ZodOptional<z.ZodString>;
-            }, z.core.$strip>;
-        }, z.core.$strict>]>;
-        agentRef: z.ZodObject<{
-            agentId: z.ZodString;
+        }>;
+        providerId: z.ZodNull;
+        modelId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        lane: z.ZodLiteral<"byok">;
+        runtimeId: z.ZodLiteral<"pi">;
+        providerId: z.ZodString;
+        modelId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        lane: z.ZodLiteral<"byok-profile">;
+        runtimeId: z.ZodLiteral<"pi">;
+        providerProfile: z.ZodObject<{
+            profileRef: z.ZodString;
             profileRevision: z.ZodString;
+            profileHash: z.ZodString;
+            modelId: z.ZodString;
+            requiredCapabilities: z.ZodArray<z.ZodEnum<{
+                "image-input": "image-input";
+            }>>;
         }, z.core.$strict>;
-        homeAccess: z.ZodOptional<z.ZodLiteral<"memory-reader">>;
-        agentMemory: z.ZodOptional<z.ZodEnum<{
-            none: "none";
-            read: "read";
-            "read-write": "read-write";
-        }>>;
-        requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        runtime: z.ZodOptional<z.ZodEnum<{
-            claude: "claude";
-            codex: "codex";
-            pi: "pi";
+    }, z.core.$strict>], "lane">>;
+    sessionRef: z.ZodOptional<z.ZodString>;
+    workspaceHint: z.ZodOptional<z.ZodString>;
+    limits: z.ZodOptional<z.ZodObject<{
+        maxDurationMs: z.ZodOptional<z.ZodNumber>;
+        maxTokens: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    instruction: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        blobRef: z.ZodObject<{
+            blobId: z.ZodString;
+            contentHash: z.ZodString;
+            size: z.ZodNumber;
+            contentType: z.ZodString;
+            url: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strict>]>>;
+    sealing: z.ZodObject<{
+        scopeId: z.ZodString;
+        epoch: z.ZodNumber;
+        categories: z.ZodArray<z.ZodEnum<{
+            "task-input": "task-input";
+            "task-output": "task-output";
         }>>;
-        harnessId: z.ZodOptional<z.ZodString>;
-        dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            lane: z.ZodLiteral<"subscription">;
-            runtimeId: z.ZodEnum<{
-                claude: "claude";
-                codex: "codex";
-            }>;
-            providerId: z.ZodNull;
-            modelId: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            lane: z.ZodLiteral<"byok">;
-            runtimeId: z.ZodLiteral<"pi">;
-            providerId: z.ZodString;
-            modelId: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            lane: z.ZodLiteral<"byok-profile">;
-            runtimeId: z.ZodLiteral<"pi">;
-            providerProfile: z.ZodObject<{
-                profileRef: z.ZodString;
-                profileRevision: z.ZodString;
-                profileHash: z.ZodString;
-                modelId: z.ZodString;
-                requiredCapabilities: z.ZodArray<z.ZodEnum<{
-                    "image-input": "image-input";
-                }>>;
-            }, z.core.$strict>;
-        }, z.core.$strict>], "lane">>;
-        terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            mode: z.ZodLiteral<"none">;
-        }, z.core.$strict>, z.ZodObject<{
-            mode: z.ZodLiteral<"result-document">;
-            contract: z.ZodString;
-            schema: z.ZodCustom<import("./result-schema").ResultSchema, import("./result-schema").ResultSchema>;
-        }, z.core.$strict>], "mode">>;
-        sessionRef: z.ZodOptional<z.ZodString>;
-        limits: z.ZodOptional<z.ZodObject<{
-            maxDurationMs: z.ZodOptional<z.ZodNumber>;
-            maxTokens: z.ZodOptional<z.ZodNumber>;
-        }, z.core.$strip>>;
     }, z.core.$strict>;
-    readonly 'task.offer_for_agent_with_egress': z.ZodObject<{
-        instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
-            blobRef: z.ZodObject<{
-                blobId: z.ZodString;
-                contentHash: z.ZodString;
-                size: z.ZodNumber;
-                contentType: z.ZodString;
-                url: z.ZodOptional<z.ZodString>;
-            }, z.core.$strip>;
-        }, z.core.$strict>]>;
-        agentRef: z.ZodObject<{
-            agentId: z.ZodString;
-            profileRevision: z.ZodString;
+    sealed: z.ZodOptional<z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
+        category: z.ZodLiteral<"task-input">;
+        scope: z.ZodObject<{
+            id: z.ZodString;
+            epoch: z.ZodNumber;
+            keyId: z.ZodString;
         }, z.core.$strict>;
-        homeAccess: z.ZodOptional<z.ZodLiteral<"memory-reader">>;
-        agentMemory: z.ZodOptional<z.ZodEnum<{
-            none: "none";
-            read: "read";
-            "read-write": "read-write";
-        }>>;
-        requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        runtime: z.ZodOptional<z.ZodEnum<{
-            claude: "claude";
-            codex: "codex";
-            pi: "pi";
-        }>>;
-        harnessId: z.ZodOptional<z.ZodString>;
-        dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            lane: z.ZodLiteral<"subscription">;
-            runtimeId: z.ZodEnum<{
-                claude: "claude";
-                codex: "codex";
-            }>;
-            providerId: z.ZodNull;
-            modelId: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            lane: z.ZodLiteral<"byok">;
-            runtimeId: z.ZodLiteral<"pi">;
-            providerId: z.ZodString;
-            modelId: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            lane: z.ZodLiteral<"byok-profile">;
-            runtimeId: z.ZodLiteral<"pi">;
-            providerProfile: z.ZodObject<{
-                profileRef: z.ZodString;
-                profileRevision: z.ZodString;
-                profileHash: z.ZodString;
-                modelId: z.ZodString;
-                requiredCapabilities: z.ZodArray<z.ZodEnum<{
-                    "image-input": "image-input";
-                }>>;
-            }, z.core.$strict>;
-        }, z.core.$strict>], "lane">>;
-        terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            mode: z.ZodLiteral<"none">;
-        }, z.core.$strict>, z.ZodObject<{
-            mode: z.ZodLiteral<"result-document">;
-            contract: z.ZodString;
-            schema: z.ZodCustom<import("./result-schema").ResultSchema, import("./result-schema").ResultSchema>;
-        }, z.core.$strict>], "mode">>;
-        limits: z.ZodOptional<z.ZodObject<{
-            maxDurationMs: z.ZodOptional<z.ZodNumber>;
-            maxTokens: z.ZodOptional<z.ZodNumber>;
-        }, z.core.$strip>>;
-        sessionRef: z.ZodString;
-        egressPolicy: z.ZodObject<{
-            policyRevision: z.ZodString;
-            activity: z.ZodObject<{
-                delivery: z.ZodLiteral<"latest-value">;
-                maxCoalesceMs: z.ZodNumber;
-                maxEventBytes: z.ZodNumber;
-            }, z.core.$strict>;
-            reliable: z.ZodObject<{
-                maxPendingEventsPerAgent: z.ZodNumber;
-                maxPendingBytesPerAgent: z.ZodNumber;
-                maxPendingBytesPerTenant: z.ZodNumber;
-            }, z.core.$strict>;
-            transfers: z.ZodObject<{
-                workspace: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
-                    maxBytes: z.ZodNumber;
-                    allowedMimeTypes: z.ZodArray<z.ZodString>;
-                }, z.core.$strict>]>;
-                transcript: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
-                    maxBytes: z.ZodNumber;
-                    allowedMimeTypes: z.ZodArray<z.ZodString>;
-                }, z.core.$strict>]>;
-                artifact: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
-                    maxBytes: z.ZodNumber;
-                    allowedMimeTypes: z.ZodArray<z.ZodString>;
-                }, z.core.$strict>]>;
-            }, z.core.$strict>;
+        chainHead: z.ZodObject<{
+            seq: z.ZodNumber;
+            hash: z.ZodString;
         }, z.core.$strict>;
-        messageEgress: z.ZodOptional<z.ZodObject<{
-            mode: z.ZodLiteral<"required">;
-            contract: z.ZodString;
-            contentType: z.ZodEnum<{
-                "text/markdown": "text/markdown";
-                "text/plain": "text/plain";
-            }>;
-            maxBytes: z.ZodNumber;
+        sender: z.ZodString;
+        salt: z.ZodString;
+        nonce: z.ZodString;
+        paddedLength: z.ZodNumber;
+        contentMac: z.ZodString;
+        ciphertext: z.ZodOptional<z.ZodString>;
+        ciphertextRef: z.ZodOptional<z.ZodObject<{
+            blobId: z.ZodString;
+            contentHash: z.ZodString;
+            size: z.ZodNumber;
+            contentType: z.ZodString;
         }, z.core.$strict>>;
-    }, z.core.$strict>;
-    readonly 'task.offer_for_agent_with_egress_fresh': z.ZodObject<{
-        instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
-            blobRef: z.ZodObject<{
-                blobId: z.ZodString;
-                contentHash: z.ZodString;
-                size: z.ZodNumber;
-                contentType: z.ZodString;
-                url: z.ZodOptional<z.ZodString>;
-            }, z.core.$strip>;
-        }, z.core.$strict>]>;
-        agentRef: z.ZodObject<{
-            agentId: z.ZodString;
-            profileRevision: z.ZodString;
-        }, z.core.$strict>;
-        homeAccess: z.ZodOptional<z.ZodLiteral<"memory-reader">>;
-        agentMemory: z.ZodOptional<z.ZodEnum<{
-            none: "none";
-            read: "read";
-            "read-write": "read-write";
-        }>>;
-        requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        runtime: z.ZodOptional<z.ZodEnum<{
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type TaskOfferSealedPayload = z.infer<typeof TaskOfferSealedPayloadSchema>;
+/** server -> daemon: `task.offer_with_toolsets` of a sealed task. */
+export declare const TaskOfferWithToolsetsSealedPayloadSchema: z.ZodObject<{
+    runtime: z.ZodOptional<z.ZodEnum<{
+        claude: "claude";
+        codex: "codex";
+        pi: "pi";
+    }>>;
+    harnessId: z.ZodOptional<z.ZodString>;
+    dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        lane: z.ZodLiteral<"subscription">;
+        runtimeId: z.ZodEnum<{
             claude: "claude";
             codex: "codex";
-            pi: "pi";
-        }>>;
-        harnessId: z.ZodOptional<z.ZodString>;
-        dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            lane: z.ZodLiteral<"subscription">;
-            runtimeId: z.ZodEnum<{
-                claude: "claude";
-                codex: "codex";
-            }>;
-            providerId: z.ZodNull;
-            modelId: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            lane: z.ZodLiteral<"byok">;
-            runtimeId: z.ZodLiteral<"pi">;
-            providerId: z.ZodString;
-            modelId: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            lane: z.ZodLiteral<"byok-profile">;
-            runtimeId: z.ZodLiteral<"pi">;
-            providerProfile: z.ZodObject<{
-                profileRef: z.ZodString;
-                profileRevision: z.ZodString;
-                profileHash: z.ZodString;
-                modelId: z.ZodString;
-                requiredCapabilities: z.ZodArray<z.ZodEnum<{
-                    "image-input": "image-input";
-                }>>;
-            }, z.core.$strict>;
-        }, z.core.$strict>], "lane">>;
-        terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            mode: z.ZodLiteral<"none">;
-        }, z.core.$strict>, z.ZodObject<{
-            mode: z.ZodLiteral<"result-document">;
-            contract: z.ZodString;
-            schema: z.ZodCustom<import("./result-schema").ResultSchema, import("./result-schema").ResultSchema>;
-        }, z.core.$strict>], "mode">>;
-        limits: z.ZodOptional<z.ZodObject<{
-            maxDurationMs: z.ZodOptional<z.ZodNumber>;
-            maxTokens: z.ZodOptional<z.ZodNumber>;
-        }, z.core.$strip>>;
-        egressPolicy: z.ZodObject<{
-            policyRevision: z.ZodString;
-            activity: z.ZodObject<{
-                delivery: z.ZodLiteral<"latest-value">;
-                maxCoalesceMs: z.ZodNumber;
-                maxEventBytes: z.ZodNumber;
-            }, z.core.$strict>;
-            reliable: z.ZodObject<{
-                maxPendingEventsPerAgent: z.ZodNumber;
-                maxPendingBytesPerAgent: z.ZodNumber;
-                maxPendingBytesPerTenant: z.ZodNumber;
-            }, z.core.$strict>;
-            transfers: z.ZodObject<{
-                workspace: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
-                    maxBytes: z.ZodNumber;
-                    allowedMimeTypes: z.ZodArray<z.ZodString>;
-                }, z.core.$strict>]>;
-                transcript: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
-                    maxBytes: z.ZodNumber;
-                    allowedMimeTypes: z.ZodArray<z.ZodString>;
-                }, z.core.$strict>]>;
-                artifact: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
-                    maxBytes: z.ZodNumber;
-                    allowedMimeTypes: z.ZodArray<z.ZodString>;
-                }, z.core.$strict>]>;
-            }, z.core.$strict>;
-        }, z.core.$strict>;
-        messageEgress: z.ZodOptional<z.ZodObject<{
-            mode: z.ZodLiteral<"required">;
-            contract: z.ZodString;
-            contentType: z.ZodEnum<{
-                "text/markdown": "text/markdown";
-                "text/plain": "text/plain";
-            }>;
-            maxBytes: z.ZodNumber;
-        }, z.core.$strict>>;
-    }, z.core.$strict>;
-    readonly 'task.offer_prepared': z.ZodObject<{
-        agentRef: z.ZodObject<{
-            agentId: z.ZodString;
+        }>;
+        providerId: z.ZodNull;
+        modelId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        lane: z.ZodLiteral<"byok">;
+        runtimeId: z.ZodLiteral<"pi">;
+        providerId: z.ZodString;
+        modelId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        lane: z.ZodLiteral<"byok-profile">;
+        runtimeId: z.ZodLiteral<"pi">;
+        providerProfile: z.ZodObject<{
+            profileRef: z.ZodString;
             profileRevision: z.ZodString;
+            profileHash: z.ZodString;
+            modelId: z.ZodString;
+            requiredCapabilities: z.ZodArray<z.ZodEnum<{
+                "image-input": "image-input";
+            }>>;
         }, z.core.$strict>;
-        homeAccess: z.ZodOptional<z.ZodLiteral<"memory-reader">>;
-        requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        runtime: z.ZodOptional<z.ZodEnum<{
-            claude: "claude";
-            codex: "codex";
-            pi: "pi";
+    }, z.core.$strict>], "lane">>;
+    sessionRef: z.ZodOptional<z.ZodString>;
+    workspaceHint: z.ZodOptional<z.ZodString>;
+    limits: z.ZodOptional<z.ZodObject<{
+        maxDurationMs: z.ZodOptional<z.ZodNumber>;
+        maxTokens: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    requiredToolsets: z.ZodArray<z.ZodString>;
+    instruction: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        blobRef: z.ZodObject<{
+            blobId: z.ZodString;
+            contentHash: z.ZodString;
+            size: z.ZodNumber;
+            contentType: z.ZodString;
+            url: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strict>]>>;
+    sealing: z.ZodObject<{
+        scopeId: z.ZodString;
+        epoch: z.ZodNumber;
+        categories: z.ZodArray<z.ZodEnum<{
+            "task-input": "task-input";
+            "task-output": "task-output";
         }>>;
-        harnessId: z.ZodOptional<z.ZodString>;
-        dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            lane: z.ZodLiteral<"subscription">;
-            runtimeId: z.ZodEnum<{
-                claude: "claude";
-                codex: "codex";
-            }>;
-            providerId: z.ZodNull;
-            modelId: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            lane: z.ZodLiteral<"byok">;
-            runtimeId: z.ZodLiteral<"pi">;
-            providerId: z.ZodString;
-            modelId: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            lane: z.ZodLiteral<"byok-profile">;
-            runtimeId: z.ZodLiteral<"pi">;
-            providerProfile: z.ZodObject<{
-                profileRef: z.ZodString;
-                profileRevision: z.ZodString;
-                profileHash: z.ZodString;
-                modelId: z.ZodString;
-                requiredCapabilities: z.ZodArray<z.ZodEnum<{
-                    "image-input": "image-input";
-                }>>;
-            }, z.core.$strict>;
-        }, z.core.$strict>], "lane">>;
-        terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            mode: z.ZodLiteral<"none">;
-        }, z.core.$strict>, z.ZodObject<{
-            mode: z.ZodLiteral<"result-document">;
-            contract: z.ZodString;
-            schema: z.ZodCustom<import("./result-schema").ResultSchema, import("./result-schema").ResultSchema>;
-        }, z.core.$strict>], "mode">>;
-        limits: z.ZodOptional<z.ZodObject<{
-            maxDurationMs: z.ZodOptional<z.ZodNumber>;
-            maxTokens: z.ZodOptional<z.ZodNumber>;
-        }, z.core.$strip>>;
-        preparation: z.ZodObject<{
-            reference: z.ZodString;
-            requestDigest: z.ZodString;
-            artifactDigest: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    sealed: z.ZodOptional<z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
+        category: z.ZodLiteral<"task-input">;
+        scope: z.ZodObject<{
+            id: z.ZodString;
+            epoch: z.ZodNumber;
+            keyId: z.ZodString;
         }, z.core.$strict>;
-        agentMemory: z.ZodEnum<{
-            none: "none";
-            read: "read";
-            "read-write": "read-write";
-        }>;
-        egressPolicy: z.ZodObject<{
-            policyRevision: z.ZodString;
-            activity: z.ZodObject<{
-                delivery: z.ZodLiteral<"latest-value">;
-                maxCoalesceMs: z.ZodNumber;
-                maxEventBytes: z.ZodNumber;
-            }, z.core.$strict>;
-            reliable: z.ZodObject<{
-                maxPendingEventsPerAgent: z.ZodNumber;
-                maxPendingBytesPerAgent: z.ZodNumber;
-                maxPendingBytesPerTenant: z.ZodNumber;
-            }, z.core.$strict>;
-            transfers: z.ZodObject<{
-                workspace: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
-                    maxBytes: z.ZodNumber;
-                    allowedMimeTypes: z.ZodArray<z.ZodString>;
-                }, z.core.$strict>]>;
-                transcript: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
-                    maxBytes: z.ZodNumber;
-                    allowedMimeTypes: z.ZodArray<z.ZodString>;
-                }, z.core.$strict>]>;
-                artifact: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
-                    maxBytes: z.ZodNumber;
-                    allowedMimeTypes: z.ZodArray<z.ZodString>;
-                }, z.core.$strict>]>;
-            }, z.core.$strict>;
+        chainHead: z.ZodObject<{
+            seq: z.ZodNumber;
+            hash: z.ZodString;
         }, z.core.$strict>;
-        messageEgress: z.ZodOptional<z.ZodObject<{
-            mode: z.ZodLiteral<"required">;
-            contract: z.ZodString;
-            contentType: z.ZodEnum<{
-                "text/markdown": "text/markdown";
-                "text/plain": "text/plain";
-            }>;
-            maxBytes: z.ZodNumber;
+        sender: z.ZodString;
+        salt: z.ZodString;
+        nonce: z.ZodString;
+        paddedLength: z.ZodNumber;
+        contentMac: z.ZodString;
+        ciphertext: z.ZodOptional<z.ZodString>;
+        ciphertextRef: z.ZodOptional<z.ZodObject<{
+            blobId: z.ZodString;
+            contentHash: z.ZodString;
+            size: z.ZodNumber;
+            contentType: z.ZodString;
         }, z.core.$strict>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type TaskOfferWithToolsetsSealedPayload = z.infer<typeof TaskOfferWithToolsetsSealedPayloadSchema>;
+/** server -> daemon: `task.offer_for_agent` of a sealed task. */
+export declare const TaskOfferForAgentSealedPayloadSchema: z.ZodObject<{
+    agentRef: z.ZodObject<{
+        agentId: z.ZodString;
+        profileRevision: z.ZodString;
     }, z.core.$strict>;
-};
-export type TaskOfferType = keyof typeof TASK_OFFER_PAYLOAD_SCHEMAS;
-export declare const TASK_OFFER_TYPES: readonly TaskOfferType[];
-/** Classify task-opening offers without duplicating the protocol registry in consumers. */
-export declare function isTaskOfferType(type: string): type is TaskOfferType;
-export declare const MESSAGE_PAYLOAD_SCHEMAS: {
-    readonly 'task.offer': z.ZodObject<{
-        instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
-            blobRef: z.ZodObject<{
-                blobId: z.ZodString;
-                contentHash: z.ZodString;
-                size: z.ZodNumber;
-                contentType: z.ZodString;
-                url: z.ZodOptional<z.ZodString>;
-            }, z.core.$strip>;
-        }, z.core.$strict>]>;
-        runtime: z.ZodOptional<z.ZodEnum<{
+    homeAccess: z.ZodOptional<z.ZodLiteral<"memory-reader">>;
+    agentMemory: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        read: "read";
+        "read-if-admitted": "read-if-admitted";
+        "read-write": "read-write";
+    }>>;
+    requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    runtime: z.ZodOptional<z.ZodEnum<{
+        claude: "claude";
+        codex: "codex";
+        pi: "pi";
+    }>>;
+    harnessId: z.ZodOptional<z.ZodString>;
+    dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        lane: z.ZodLiteral<"subscription">;
+        runtimeId: z.ZodEnum<{
             claude: "claude";
             codex: "codex";
-            pi: "pi";
-        }>>;
-        harnessId: z.ZodOptional<z.ZodString>;
-        dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            lane: z.ZodLiteral<"subscription">;
-            runtimeId: z.ZodEnum<{
-                claude: "claude";
-                codex: "codex";
-            }>;
-            providerId: z.ZodNull;
-            modelId: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            lane: z.ZodLiteral<"byok">;
-            runtimeId: z.ZodLiteral<"pi">;
-            providerId: z.ZodString;
+        }>;
+        providerId: z.ZodNull;
+        modelId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        lane: z.ZodLiteral<"byok">;
+        runtimeId: z.ZodLiteral<"pi">;
+        providerId: z.ZodString;
+        modelId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        lane: z.ZodLiteral<"byok-profile">;
+        runtimeId: z.ZodLiteral<"pi">;
+        providerProfile: z.ZodObject<{
+            profileRef: z.ZodString;
+            profileRevision: z.ZodString;
+            profileHash: z.ZodString;
             modelId: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            lane: z.ZodLiteral<"byok-profile">;
-            runtimeId: z.ZodLiteral<"pi">;
-            providerProfile: z.ZodObject<{
-                profileRef: z.ZodString;
-                profileRevision: z.ZodString;
-                profileHash: z.ZodString;
-                modelId: z.ZodString;
-                requiredCapabilities: z.ZodArray<z.ZodEnum<{
-                    "image-input": "image-input";
-                }>>;
-            }, z.core.$strict>;
-        }, z.core.$strict>], "lane">>;
-        sessionRef: z.ZodOptional<z.ZodString>;
-        workspaceHint: z.ZodOptional<z.ZodString>;
-        limits: z.ZodOptional<z.ZodObject<{
-            maxDurationMs: z.ZodOptional<z.ZodNumber>;
-            maxTokens: z.ZodOptional<z.ZodNumber>;
-        }, z.core.$strip>>;
-    }, z.core.$strip>;
-    readonly 'task.offer_with_toolsets': z.ZodObject<{
-        instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
-            blobRef: z.ZodObject<{
-                blobId: z.ZodString;
-                contentHash: z.ZodString;
-                size: z.ZodNumber;
-                contentType: z.ZodString;
-                url: z.ZodOptional<z.ZodString>;
-            }, z.core.$strip>;
-        }, z.core.$strict>]>;
-        runtime: z.ZodOptional<z.ZodEnum<{
-            claude: "claude";
-            codex: "codex";
-            pi: "pi";
-        }>>;
-        harnessId: z.ZodOptional<z.ZodString>;
-        dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            lane: z.ZodLiteral<"subscription">;
-            runtimeId: z.ZodEnum<{
-                claude: "claude";
-                codex: "codex";
-            }>;
-            providerId: z.ZodNull;
-            modelId: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            lane: z.ZodLiteral<"byok">;
-            runtimeId: z.ZodLiteral<"pi">;
-            providerId: z.ZodString;
-            modelId: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            lane: z.ZodLiteral<"byok-profile">;
-            runtimeId: z.ZodLiteral<"pi">;
-            providerProfile: z.ZodObject<{
-                profileRef: z.ZodString;
-                profileRevision: z.ZodString;
-                profileHash: z.ZodString;
-                modelId: z.ZodString;
-                requiredCapabilities: z.ZodArray<z.ZodEnum<{
-                    "image-input": "image-input";
-                }>>;
-            }, z.core.$strict>;
-        }, z.core.$strict>], "lane">>;
-        sessionRef: z.ZodOptional<z.ZodString>;
-        workspaceHint: z.ZodOptional<z.ZodString>;
-        limits: z.ZodOptional<z.ZodObject<{
-            maxDurationMs: z.ZodOptional<z.ZodNumber>;
-            maxTokens: z.ZodOptional<z.ZodNumber>;
-        }, z.core.$strip>>;
-        requiredToolsets: z.ZodArray<z.ZodString>;
-    }, z.core.$strict>;
-    readonly 'task.offer_for_agent': z.ZodObject<{
-        instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
-            blobRef: z.ZodObject<{
-                blobId: z.ZodString;
-                contentHash: z.ZodString;
-                size: z.ZodNumber;
-                contentType: z.ZodString;
-                url: z.ZodOptional<z.ZodString>;
-            }, z.core.$strip>;
-        }, z.core.$strict>]>;
-        agentRef: z.ZodObject<{
-            agentId: z.ZodString;
-            profileRevision: z.ZodString;
+            requiredCapabilities: z.ZodArray<z.ZodEnum<{
+                "image-input": "image-input";
+            }>>;
         }, z.core.$strict>;
-        homeAccess: z.ZodOptional<z.ZodLiteral<"memory-reader">>;
-        agentMemory: z.ZodOptional<z.ZodEnum<{
-            none: "none";
-            read: "read";
-            "read-write": "read-write";
-        }>>;
-        requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        runtime: z.ZodOptional<z.ZodEnum<{
-            claude: "claude";
-            codex: "codex";
-            pi: "pi";
+    }, z.core.$strict>], "lane">>;
+    terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        mode: z.ZodLiteral<"none">;
+    }, z.core.$strict>, z.ZodObject<{
+        mode: z.ZodLiteral<"result-document">;
+        contract: z.ZodString;
+        schema: z.ZodCustom<import("./result-schema").ResultSchema, import("./result-schema").ResultSchema>;
+    }, z.core.$strict>], "mode">>;
+    sessionRef: z.ZodOptional<z.ZodString>;
+    limits: z.ZodOptional<z.ZodObject<{
+        maxDurationMs: z.ZodOptional<z.ZodNumber>;
+        maxTokens: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    instruction: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        blobRef: z.ZodObject<{
+            blobId: z.ZodString;
+            contentHash: z.ZodString;
+            size: z.ZodNumber;
+            contentType: z.ZodString;
+            url: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strict>]>>;
+    sealing: z.ZodObject<{
+        scopeId: z.ZodString;
+        epoch: z.ZodNumber;
+        categories: z.ZodArray<z.ZodEnum<{
+            "task-input": "task-input";
+            "task-output": "task-output";
         }>>;
-        harnessId: z.ZodOptional<z.ZodString>;
-        dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            lane: z.ZodLiteral<"subscription">;
-            runtimeId: z.ZodEnum<{
-                claude: "claude";
-                codex: "codex";
-            }>;
-            providerId: z.ZodNull;
-            modelId: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            lane: z.ZodLiteral<"byok">;
-            runtimeId: z.ZodLiteral<"pi">;
-            providerId: z.ZodString;
-            modelId: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            lane: z.ZodLiteral<"byok-profile">;
-            runtimeId: z.ZodLiteral<"pi">;
-            providerProfile: z.ZodObject<{
-                profileRef: z.ZodString;
-                profileRevision: z.ZodString;
-                profileHash: z.ZodString;
-                modelId: z.ZodString;
-                requiredCapabilities: z.ZodArray<z.ZodEnum<{
-                    "image-input": "image-input";
-                }>>;
-            }, z.core.$strict>;
-        }, z.core.$strict>], "lane">>;
-        terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            mode: z.ZodLiteral<"none">;
-        }, z.core.$strict>, z.ZodObject<{
-            mode: z.ZodLiteral<"result-document">;
-            contract: z.ZodString;
-            schema: z.ZodCustom<import("./result-schema").ResultSchema, import("./result-schema").ResultSchema>;
-        }, z.core.$strict>], "mode">>;
-        sessionRef: z.ZodOptional<z.ZodString>;
-        limits: z.ZodOptional<z.ZodObject<{
-            maxDurationMs: z.ZodOptional<z.ZodNumber>;
-            maxTokens: z.ZodOptional<z.ZodNumber>;
-        }, z.core.$strip>>;
     }, z.core.$strict>;
-    readonly 'task.offer_for_agent_with_egress': z.ZodObject<{
-        instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
-            blobRef: z.ZodObject<{
-                blobId: z.ZodString;
-                contentHash: z.ZodString;
-                size: z.ZodNumber;
-                contentType: z.ZodString;
-                url: z.ZodOptional<z.ZodString>;
-            }, z.core.$strip>;
-        }, z.core.$strict>]>;
-        agentRef: z.ZodObject<{
-            agentId: z.ZodString;
-            profileRevision: z.ZodString;
+    sealed: z.ZodOptional<z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
+        category: z.ZodLiteral<"task-input">;
+        scope: z.ZodObject<{
+            id: z.ZodString;
+            epoch: z.ZodNumber;
+            keyId: z.ZodString;
         }, z.core.$strict>;
-        homeAccess: z.ZodOptional<z.ZodLiteral<"memory-reader">>;
-        agentMemory: z.ZodOptional<z.ZodEnum<{
-            none: "none";
-            read: "read";
-            "read-write": "read-write";
-        }>>;
-        requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        runtime: z.ZodOptional<z.ZodEnum<{
-            claude: "claude";
-            codex: "codex";
-            pi: "pi";
-        }>>;
-        harnessId: z.ZodOptional<z.ZodString>;
-        dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            lane: z.ZodLiteral<"subscription">;
-            runtimeId: z.ZodEnum<{
-                claude: "claude";
-                codex: "codex";
-            }>;
-            providerId: z.ZodNull;
-            modelId: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            lane: z.ZodLiteral<"byok">;
-            runtimeId: z.ZodLiteral<"pi">;
-            providerId: z.ZodString;
-            modelId: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            lane: z.ZodLiteral<"byok-profile">;
-            runtimeId: z.ZodLiteral<"pi">;
-            providerProfile: z.ZodObject<{
-                profileRef: z.ZodString;
-                profileRevision: z.ZodString;
-                profileHash: z.ZodString;
-                modelId: z.ZodString;
-                requiredCapabilities: z.ZodArray<z.ZodEnum<{
-                    "image-input": "image-input";
-                }>>;
-            }, z.core.$strict>;
-        }, z.core.$strict>], "lane">>;
-        terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            mode: z.ZodLiteral<"none">;
-        }, z.core.$strict>, z.ZodObject<{
-            mode: z.ZodLiteral<"result-document">;
-            contract: z.ZodString;
-            schema: z.ZodCustom<import("./result-schema").ResultSchema, import("./result-schema").ResultSchema>;
-        }, z.core.$strict>], "mode">>;
-        limits: z.ZodOptional<z.ZodObject<{
-            maxDurationMs: z.ZodOptional<z.ZodNumber>;
-            maxTokens: z.ZodOptional<z.ZodNumber>;
-        }, z.core.$strip>>;
-        sessionRef: z.ZodString;
-        egressPolicy: z.ZodObject<{
-            policyRevision: z.ZodString;
-            activity: z.ZodObject<{
-                delivery: z.ZodLiteral<"latest-value">;
-                maxCoalesceMs: z.ZodNumber;
-                maxEventBytes: z.ZodNumber;
-            }, z.core.$strict>;
-            reliable: z.ZodObject<{
-                maxPendingEventsPerAgent: z.ZodNumber;
-                maxPendingBytesPerAgent: z.ZodNumber;
-                maxPendingBytesPerTenant: z.ZodNumber;
-            }, z.core.$strict>;
-            transfers: z.ZodObject<{
-                workspace: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
-                    maxBytes: z.ZodNumber;
-                    allowedMimeTypes: z.ZodArray<z.ZodString>;
-                }, z.core.$strict>]>;
-                transcript: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
-                    maxBytes: z.ZodNumber;
-                    allowedMimeTypes: z.ZodArray<z.ZodString>;
-                }, z.core.$strict>]>;
-                artifact: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
-                    maxBytes: z.ZodNumber;
-                    allowedMimeTypes: z.ZodArray<z.ZodString>;
-                }, z.core.$strict>]>;
-            }, z.core.$strict>;
+        chainHead: z.ZodObject<{
+            seq: z.ZodNumber;
+            hash: z.ZodString;
         }, z.core.$strict>;
-        messageEgress: z.ZodOptional<z.ZodObject<{
-            mode: z.ZodLiteral<"required">;
-            contract: z.ZodString;
-            contentType: z.ZodEnum<{
-                "text/markdown": "text/markdown";
-                "text/plain": "text/plain";
-            }>;
-            maxBytes: z.ZodNumber;
+        sender: z.ZodString;
+        salt: z.ZodString;
+        nonce: z.ZodString;
+        paddedLength: z.ZodNumber;
+        contentMac: z.ZodString;
+        ciphertext: z.ZodOptional<z.ZodString>;
+        ciphertextRef: z.ZodOptional<z.ZodObject<{
+            blobId: z.ZodString;
+            contentHash: z.ZodString;
+            size: z.ZodNumber;
+            contentType: z.ZodString;
         }, z.core.$strict>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type TaskOfferForAgentSealedPayload = z.infer<typeof TaskOfferForAgentSealedPayloadSchema>;
+/** server -> daemon: `task.offer_for_agent_with_egress` of a sealed task. */
+export declare const TaskOfferForAgentWithEgressSealedPayloadSchema: z.ZodObject<{
+    agentRef: z.ZodObject<{
+        agentId: z.ZodString;
+        profileRevision: z.ZodString;
     }, z.core.$strict>;
-    readonly 'task.offer_for_agent_with_egress_fresh': z.ZodObject<{
-        instruction: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
-            blobRef: z.ZodObject<{
-                blobId: z.ZodString;
-                contentHash: z.ZodString;
-                size: z.ZodNumber;
-                contentType: z.ZodString;
-                url: z.ZodOptional<z.ZodString>;
-            }, z.core.$strip>;
-        }, z.core.$strict>]>;
-        agentRef: z.ZodObject<{
-            agentId: z.ZodString;
-            profileRevision: z.ZodString;
-        }, z.core.$strict>;
-        homeAccess: z.ZodOptional<z.ZodLiteral<"memory-reader">>;
-        agentMemory: z.ZodOptional<z.ZodEnum<{
-            none: "none";
-            read: "read";
-            "read-write": "read-write";
-        }>>;
-        requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        runtime: z.ZodOptional<z.ZodEnum<{
+    homeAccess: z.ZodOptional<z.ZodLiteral<"memory-reader">>;
+    agentMemory: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        read: "read";
+        "read-if-admitted": "read-if-admitted";
+        "read-write": "read-write";
+    }>>;
+    requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    runtime: z.ZodOptional<z.ZodEnum<{
+        claude: "claude";
+        codex: "codex";
+        pi: "pi";
+    }>>;
+    harnessId: z.ZodOptional<z.ZodString>;
+    dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        lane: z.ZodLiteral<"subscription">;
+        runtimeId: z.ZodEnum<{
             claude: "claude";
             codex: "codex";
-            pi: "pi";
-        }>>;
-        harnessId: z.ZodOptional<z.ZodString>;
-        dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            lane: z.ZodLiteral<"subscription">;
-            runtimeId: z.ZodEnum<{
-                claude: "claude";
-                codex: "codex";
-            }>;
-            providerId: z.ZodNull;
-            modelId: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            lane: z.ZodLiteral<"byok">;
-            runtimeId: z.ZodLiteral<"pi">;
-            providerId: z.ZodString;
+        }>;
+        providerId: z.ZodNull;
+        modelId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        lane: z.ZodLiteral<"byok">;
+        runtimeId: z.ZodLiteral<"pi">;
+        providerId: z.ZodString;
+        modelId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        lane: z.ZodLiteral<"byok-profile">;
+        runtimeId: z.ZodLiteral<"pi">;
+        providerProfile: z.ZodObject<{
+            profileRef: z.ZodString;
+            profileRevision: z.ZodString;
+            profileHash: z.ZodString;
             modelId: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            lane: z.ZodLiteral<"byok-profile">;
-            runtimeId: z.ZodLiteral<"pi">;
-            providerProfile: z.ZodObject<{
-                profileRef: z.ZodString;
-                profileRevision: z.ZodString;
-                profileHash: z.ZodString;
-                modelId: z.ZodString;
-                requiredCapabilities: z.ZodArray<z.ZodEnum<{
-                    "image-input": "image-input";
-                }>>;
-            }, z.core.$strict>;
-        }, z.core.$strict>], "lane">>;
-        terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            mode: z.ZodLiteral<"none">;
-        }, z.core.$strict>, z.ZodObject<{
-            mode: z.ZodLiteral<"result-document">;
-            contract: z.ZodString;
-            schema: z.ZodCustom<import("./result-schema").ResultSchema, import("./result-schema").ResultSchema>;
-        }, z.core.$strict>], "mode">>;
-        limits: z.ZodOptional<z.ZodObject<{
-            maxDurationMs: z.ZodOptional<z.ZodNumber>;
-            maxTokens: z.ZodOptional<z.ZodNumber>;
-        }, z.core.$strip>>;
-        egressPolicy: z.ZodObject<{
-            policyRevision: z.ZodString;
-            activity: z.ZodObject<{
-                delivery: z.ZodLiteral<"latest-value">;
-                maxCoalesceMs: z.ZodNumber;
-                maxEventBytes: z.ZodNumber;
-            }, z.core.$strict>;
-            reliable: z.ZodObject<{
-                maxPendingEventsPerAgent: z.ZodNumber;
-                maxPendingBytesPerAgent: z.ZodNumber;
-                maxPendingBytesPerTenant: z.ZodNumber;
-            }, z.core.$strict>;
-            transfers: z.ZodObject<{
-                workspace: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
-                    maxBytes: z.ZodNumber;
-                    allowedMimeTypes: z.ZodArray<z.ZodString>;
-                }, z.core.$strict>]>;
-                transcript: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
-                    maxBytes: z.ZodNumber;
-                    allowedMimeTypes: z.ZodArray<z.ZodString>;
-                }, z.core.$strict>]>;
-                artifact: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
-                    maxBytes: z.ZodNumber;
-                    allowedMimeTypes: z.ZodArray<z.ZodString>;
-                }, z.core.$strict>]>;
-            }, z.core.$strict>;
+            requiredCapabilities: z.ZodArray<z.ZodEnum<{
+                "image-input": "image-input";
+            }>>;
         }, z.core.$strict>;
-        messageEgress: z.ZodOptional<z.ZodObject<{
-            mode: z.ZodLiteral<"required">;
-            contract: z.ZodString;
-            contentType: z.ZodEnum<{
-                "text/markdown": "text/markdown";
-                "text/plain": "text/plain";
-            }>;
-            maxBytes: z.ZodNumber;
-        }, z.core.$strict>>;
-    }, z.core.$strict>;
-    readonly 'task.offer_prepared': z.ZodObject<{
-        agentRef: z.ZodObject<{
-            agentId: z.ZodString;
-            profileRevision: z.ZodString;
+    }, z.core.$strict>], "lane">>;
+    terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        mode: z.ZodLiteral<"none">;
+    }, z.core.$strict>, z.ZodObject<{
+        mode: z.ZodLiteral<"result-document">;
+        contract: z.ZodString;
+        schema: z.ZodCustom<import("./result-schema").ResultSchema, import("./result-schema").ResultSchema>;
+    }, z.core.$strict>], "mode">>;
+    limits: z.ZodOptional<z.ZodObject<{
+        maxDurationMs: z.ZodOptional<z.ZodNumber>;
+        maxTokens: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    sessionRef: z.ZodString;
+    egressPolicy: z.ZodObject<{
+        policyRevision: z.ZodString;
+        activity: z.ZodObject<{
+            delivery: z.ZodLiteral<"latest-value">;
+            maxCoalesceMs: z.ZodNumber;
+            maxEventBytes: z.ZodNumber;
         }, z.core.$strict>;
-        homeAccess: z.ZodOptional<z.ZodLiteral<"memory-reader">>;
-        requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        runtime: z.ZodOptional<z.ZodEnum<{
-            claude: "claude";
-            codex: "codex";
-            pi: "pi";
-        }>>;
-        harnessId: z.ZodOptional<z.ZodString>;
-        dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            lane: z.ZodLiteral<"subscription">;
-            runtimeId: z.ZodEnum<{
-                claude: "claude";
-                codex: "codex";
-            }>;
-            providerId: z.ZodNull;
-            modelId: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            lane: z.ZodLiteral<"byok">;
-            runtimeId: z.ZodLiteral<"pi">;
-            providerId: z.ZodString;
-            modelId: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            lane: z.ZodLiteral<"byok-profile">;
-            runtimeId: z.ZodLiteral<"pi">;
-            providerProfile: z.ZodObject<{
-                profileRef: z.ZodString;
-                profileRevision: z.ZodString;
-                profileHash: z.ZodString;
-                modelId: z.ZodString;
-                requiredCapabilities: z.ZodArray<z.ZodEnum<{
-                    "image-input": "image-input";
-                }>>;
-            }, z.core.$strict>;
-        }, z.core.$strict>], "lane">>;
-        terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            mode: z.ZodLiteral<"none">;
-        }, z.core.$strict>, z.ZodObject<{
-            mode: z.ZodLiteral<"result-document">;
-            contract: z.ZodString;
-            schema: z.ZodCustom<import("./result-schema").ResultSchema, import("./result-schema").ResultSchema>;
-        }, z.core.$strict>], "mode">>;
-        limits: z.ZodOptional<z.ZodObject<{
-            maxDurationMs: z.ZodOptional<z.ZodNumber>;
-            maxTokens: z.ZodOptional<z.ZodNumber>;
-        }, z.core.$strip>>;
-        preparation: z.ZodObject<{
-            reference: z.ZodString;
-            requestDigest: z.ZodString;
-            artifactDigest: z.ZodOptional<z.ZodString>;
+        reliable: z.ZodObject<{
+            maxPendingEventsPerAgent: z.ZodNumber;
+            maxPendingBytesPerAgent: z.ZodNumber;
+            maxPendingBytesPerTenant: z.ZodNumber;
         }, z.core.$strict>;
-        agentMemory: z.ZodEnum<{
-            none: "none";
-            read: "read";
-            "read-write": "read-write";
-        }>;
-        egressPolicy: z.ZodObject<{
-            policyRevision: z.ZodString;
-            activity: z.ZodObject<{
-                delivery: z.ZodLiteral<"latest-value">;
-                maxCoalesceMs: z.ZodNumber;
-                maxEventBytes: z.ZodNumber;
-            }, z.core.$strict>;
-            reliable: z.ZodObject<{
-                maxPendingEventsPerAgent: z.ZodNumber;
-                maxPendingBytesPerAgent: z.ZodNumber;
-                maxPendingBytesPerTenant: z.ZodNumber;
-            }, z.core.$strict>;
-            transfers: z.ZodObject<{
-                workspace: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
-                    maxBytes: z.ZodNumber;
-                    allowedMimeTypes: z.ZodArray<z.ZodString>;
-                }, z.core.$strict>]>;
-                transcript: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
-                    maxBytes: z.ZodNumber;
-                    allowedMimeTypes: z.ZodArray<z.ZodString>;
-                }, z.core.$strict>]>;
-                artifact: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
-                    maxBytes: z.ZodNumber;
-                    allowedMimeTypes: z.ZodArray<z.ZodString>;
-                }, z.core.$strict>]>;
-            }, z.core.$strict>;
+        transfers: z.ZodObject<{
+            workspace: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
+                maxBytes: z.ZodNumber;
+                allowedMimeTypes: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>]>;
+            transcript: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
+                maxBytes: z.ZodNumber;
+                allowedMimeTypes: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>]>;
+            artifact: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
+                maxBytes: z.ZodNumber;
+                allowedMimeTypes: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>]>;
         }, z.core.$strict>;
-        messageEgress: z.ZodOptional<z.ZodObject<{
-            mode: z.ZodLiteral<"required">;
-            contract: z.ZodString;
-            contentType: z.ZodEnum<{
-                "text/markdown": "text/markdown";
-                "text/plain": "text/plain";
-            }>;
-            maxBytes: z.ZodNumber;
-        }, z.core.$strict>>;
     }, z.core.$strict>;
-    readonly 'conn.hello': z.ZodObject<{
-        protocolVersions: z.ZodArray<z.ZodNumber>;
-        capabilities: z.ZodArray<z.ZodString>;
-        deviceId: z.ZodString;
-        productId: z.ZodString;
-        clientVersion: z.ZodOptional<z.ZodString>;
-        runtimes: z.ZodOptional<z.ZodArray<z.ZodObject<{
-            id: z.ZodEnum<{
-                claude: "claude";
-                codex: "codex";
-                pi: "pi";
-            }>;
-            version: z.ZodOptional<z.ZodString>;
-            authPresent: z.ZodOptional<z.ZodBoolean>;
-            capabilities: z.ZodOptional<z.ZodObject<{
-                steer: z.ZodOptional<z.ZodBoolean>;
-                resume: z.ZodOptional<z.ZodBoolean>;
-                approvalInteractive: z.ZodOptional<z.ZodBoolean>;
-                mcpToolsets: z.ZodOptional<z.ZodBoolean>;
-                messageDraft: z.ZodOptional<z.ZodBoolean>;
-            }, z.core.$strip>>;
-        }, z.core.$strip>>>;
-        harnesses: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    messageEgress: z.ZodOptional<z.ZodObject<{
+        mode: z.ZodLiteral<"required">;
+        contract: z.ZodString;
+        contentType: z.ZodEnum<{
+            "text/markdown": "text/markdown";
+            "text/plain": "text/plain";
+        }>;
+        maxBytes: z.ZodNumber;
+    }, z.core.$strict>>;
+    instruction: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        blobRef: z.ZodObject<{
+            blobId: z.ZodString;
+            contentHash: z.ZodString;
+            size: z.ZodNumber;
+            contentType: z.ZodString;
+            url: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strict>]>>;
+    sealing: z.ZodObject<{
+        scopeId: z.ZodString;
+        epoch: z.ZodNumber;
+        categories: z.ZodArray<z.ZodEnum<{
+            "task-input": "task-input";
+            "task-output": "task-output";
+        }>>;
+    }, z.core.$strict>;
+    sealed: z.ZodOptional<z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
+        category: z.ZodLiteral<"task-input">;
+        scope: z.ZodObject<{
             id: z.ZodString;
-            version: z.ZodOptional<z.ZodString>;
-            capabilities: z.ZodObject<{
-                steer: z.ZodOptional<z.ZodBoolean>;
-                resume: z.ZodOptional<z.ZodBoolean>;
-                approvalInteractive: z.ZodOptional<z.ZodBoolean>;
-                mcpToolsets: z.ZodOptional<z.ZodBoolean>;
-                messageDraft: z.ZodOptional<z.ZodBoolean>;
-            }, z.core.$strip>;
-        }, z.core.$strip>>>;
-        configuredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        cursor: z.ZodOptional<z.ZodNumber>;
-    }, z.core.$strip>;
-    readonly 'conn.ack': z.ZodObject<{
-        protocolVersion: z.ZodNumber;
-        capabilities: z.ZodArray<z.ZodString>;
-        serverTime: z.ZodISODateTime;
-    }, z.core.$strip>;
-    readonly 'agent.egress.reliable': z.ZodObject<{
-        agentRef: z.ZodObject<{
-            agentId: z.ZodString;
-            profileRevision: z.ZodString;
+            epoch: z.ZodNumber;
+            keyId: z.ZodString;
         }, z.core.$strict>;
-        sessionRef: z.ZodString;
-        policyRevision: z.ZodString;
-        eventId: z.ZodUUID;
-        cursor: z.ZodNumber;
-        payload: z.ZodJSONSchema;
-        contentHash: z.ZodString;
-        byteCount: z.ZodNumber;
+        chainHead: z.ZodObject<{
+            seq: z.ZodNumber;
+            hash: z.ZodString;
+        }, z.core.$strict>;
+        sender: z.ZodString;
+        salt: z.ZodString;
+        nonce: z.ZodString;
+        paddedLength: z.ZodNumber;
+        contentMac: z.ZodString;
+        ciphertext: z.ZodOptional<z.ZodString>;
+        ciphertextRef: z.ZodOptional<z.ZodObject<{
+            blobId: z.ZodString;
+            contentHash: z.ZodString;
+            size: z.ZodNumber;
+            contentType: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type TaskOfferForAgentWithEgressSealedPayload = z.infer<typeof TaskOfferForAgentWithEgressSealedPayloadSchema>;
+/**
+ * server -> daemon: `task.offer_for_agent_with_egress_fresh` of a sealed task.
+ * Only this type takes `routineRef`: a routine occurrence is an execution.
+ */
+export declare const TaskOfferForAgentWithEgressFreshSealedPayloadSchema: z.ZodObject<{
+    agentRef: z.ZodObject<{
+        agentId: z.ZodString;
+        profileRevision: z.ZodString;
     }, z.core.$strict>;
-    readonly 'agent.egress.ack': z.ZodObject<{
-        agentRef: z.ZodObject<{
-            agentId: z.ZodString;
+    homeAccess: z.ZodOptional<z.ZodLiteral<"memory-reader">>;
+    agentMemory: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        read: "read";
+        "read-if-admitted": "read-if-admitted";
+        "read-write": "read-write";
+    }>>;
+    requiredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    runtime: z.ZodOptional<z.ZodEnum<{
+        claude: "claude";
+        codex: "codex";
+        pi: "pi";
+    }>>;
+    harnessId: z.ZodOptional<z.ZodString>;
+    dispatchSelection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        lane: z.ZodLiteral<"subscription">;
+        runtimeId: z.ZodEnum<{
+            claude: "claude";
+            codex: "codex";
+        }>;
+        providerId: z.ZodNull;
+        modelId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        lane: z.ZodLiteral<"byok">;
+        runtimeId: z.ZodLiteral<"pi">;
+        providerId: z.ZodString;
+        modelId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        lane: z.ZodLiteral<"byok-profile">;
+        runtimeId: z.ZodLiteral<"pi">;
+        providerProfile: z.ZodObject<{
+            profileRef: z.ZodString;
             profileRevision: z.ZodString;
+            profileHash: z.ZodString;
+            modelId: z.ZodString;
+            requiredCapabilities: z.ZodArray<z.ZodEnum<{
+                "image-input": "image-input";
+            }>>;
         }, z.core.$strict>;
-        sessionRef: z.ZodString;
+    }, z.core.$strict>], "lane">>;
+    terminalProjection: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        mode: z.ZodLiteral<"none">;
+    }, z.core.$strict>, z.ZodObject<{
+        mode: z.ZodLiteral<"result-document">;
+        contract: z.ZodString;
+        schema: z.ZodCustom<import("./result-schema").ResultSchema, import("./result-schema").ResultSchema>;
+    }, z.core.$strict>], "mode">>;
+    limits: z.ZodOptional<z.ZodObject<{
+        maxDurationMs: z.ZodOptional<z.ZodNumber>;
+        maxTokens: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    egressPolicy: z.ZodObject<{
         policyRevision: z.ZodString;
-        eventId: z.ZodUUID;
-        cursor: z.ZodNumber;
-        receiptId: z.ZodUUID;
-    }, z.core.$strict>;
-    readonly 'agent.message.draft': z.ZodObject<{
-        agentRef: z.ZodObject<{
-            agentId: z.ZodString;
-            profileRevision: z.ZodString;
+        activity: z.ZodObject<{
+            delivery: z.ZodLiteral<"latest-value">;
+            maxCoalesceMs: z.ZodNumber;
+            maxEventBytes: z.ZodNumber;
         }, z.core.$strict>;
-        revision: z.ZodNumber;
-        offset: z.ZodNumber;
-        text: z.ZodString;
-        overflow: z.ZodOptional<z.ZodLiteral<true>>;
-    }, z.core.$strict>;
-    readonly 'agent.message.publish': z.ZodObject<{
-        agentRef: z.ZodObject<{
-            agentId: z.ZodString;
-            profileRevision: z.ZodString;
+        reliable: z.ZodObject<{
+            maxPendingEventsPerAgent: z.ZodNumber;
+            maxPendingBytesPerAgent: z.ZodNumber;
+            maxPendingBytesPerTenant: z.ZodNumber;
         }, z.core.$strict>;
-        sessionRef: z.ZodString;
+        transfers: z.ZodObject<{
+            workspace: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
+                maxBytes: z.ZodNumber;
+                allowedMimeTypes: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>]>;
+            transcript: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
+                maxBytes: z.ZodNumber;
+                allowedMimeTypes: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>]>;
+            artifact: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodObject<{
+                maxBytes: z.ZodNumber;
+                allowedMimeTypes: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>]>;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    messageEgress: z.ZodOptional<z.ZodObject<{
+        mode: z.ZodLiteral<"required">;
         contract: z.ZodString;
-        messageId: z.ZodUUID;
-        cursor: z.ZodNumber;
         contentType: z.ZodEnum<{
             "text/markdown": "text/markdown";
             "text/plain": "text/plain";
         }>;
-        body: z.ZodString;
-        contentHash: z.ZodString;
-        byteCount: z.ZodNumber;
+        maxBytes: z.ZodNumber;
+    }, z.core.$strict>>;
+    instruction: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        blobRef: z.ZodObject<{
+            blobId: z.ZodString;
+            contentHash: z.ZodString;
+            size: z.ZodNumber;
+            contentType: z.ZodString;
+            url: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strict>]>>;
+    sealing: z.ZodObject<{
+        scopeId: z.ZodString;
+        epoch: z.ZodNumber;
+        categories: z.ZodArray<z.ZodEnum<{
+            "task-input": "task-input";
+            "task-output": "task-output";
+        }>>;
     }, z.core.$strict>;
-    readonly 'agent.message.disposition': z.ZodObject<{
-        agentRef: z.ZodObject<{
-            agentId: z.ZodString;
-            profileRevision: z.ZodString;
+    sealed: z.ZodOptional<z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
+        category: z.ZodLiteral<"task-input">;
+        scope: z.ZodObject<{
+            id: z.ZodString;
+            epoch: z.ZodNumber;
+            keyId: z.ZodString;
         }, z.core.$strict>;
-        sessionRef: z.ZodString;
-        contract: z.ZodString;
-        messageId: z.ZodUUID;
-        cursor: z.ZodNumber;
-        contentHash: z.ZodString;
-        outcome: z.ZodEnum<{
-            accepted: "accepted";
-            held: "held";
-            refused: "refused";
-        }>;
-        receiptId: z.ZodUUID;
-        reasonCode: z.ZodOptional<z.ZodString>;
+        chainHead: z.ZodObject<{
+            seq: z.ZodNumber;
+            hash: z.ZodString;
+        }, z.core.$strict>;
+        sender: z.ZodString;
+        salt: z.ZodString;
+        nonce: z.ZodString;
+        paddedLength: z.ZodNumber;
+        contentMac: z.ZodString;
+        ciphertext: z.ZodOptional<z.ZodString>;
+        ciphertextRef: z.ZodOptional<z.ZodObject<{
+            blobId: z.ZodString;
+            contentHash: z.ZodString;
+            size: z.ZodNumber;
+            contentType: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    routineRef: z.ZodOptional<z.ZodObject<{
+        routineId: z.ZodString;
+        definitionVersion: z.ZodNumber;
+        notAfter: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type TaskOfferForAgentWithEgressFreshSealedPayload = z.infer<typeof TaskOfferForAgentWithEgressFreshSealedPayloadSchema>;
+/**
+ * server -> daemon: sealed steering text. `steerId` names this steer in the
+ * AAD and the content MAC, so the Host cannot replay an earlier steer of the
+ * same task as a new one.
+ */
+export declare const TaskSteerSealedPayloadSchema: z.ZodObject<{
+    steerId: z.ZodUUID;
+    sealed: z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
+        category: z.ZodLiteral<"task-input">;
+        scope: z.ZodObject<{
+            id: z.ZodString;
+            epoch: z.ZodNumber;
+            keyId: z.ZodString;
+        }, z.core.$strict>;
+        chainHead: z.ZodObject<{
+            seq: z.ZodNumber;
+            hash: z.ZodString;
+        }, z.core.$strict>;
+        sender: z.ZodString;
+        salt: z.ZodString;
+        nonce: z.ZodString;
+        paddedLength: z.ZodNumber;
+        contentMac: z.ZodString;
+        ciphertext: z.ZodOptional<z.ZodString>;
+        ciphertextRef: z.ZodOptional<z.ZodObject<{
+            blobId: z.ZodString;
+            contentHash: z.ZodString;
+            size: z.ZodNumber;
+            contentType: z.ZodString;
+        }, z.core.$strict>>;
     }, z.core.$strict>;
-    readonly 'agent.content.read': z.ZodObject<{
-        requestId: z.ZodUUID;
-        surface: z.ZodEnum<{
-            artifact: "artifact";
-            transcript: "transcript";
-            workspace: "workspace";
+}, z.core.$strict>;
+export type TaskSteerSealedPayload = z.infer<typeof TaskSteerSealedPayloadSchema>;
+/**
+ * daemon -> server: `task.complete` of a sealed task. `summary`,
+ * `finalMessage` and `document` are sealed. `artifactRefs` and
+ * `preparedObservation` are not carried in v1.
+ */
+export declare const TaskCompleteSealedPayloadSchema: z.ZodObject<{
+    sealing: z.ZodOptional<z.ZodNever>;
+    harnessId: z.ZodOptional<z.ZodString>;
+    sessionRef: z.ZodString;
+    usage: z.ZodOptional<z.ZodObject<{
+        runtime: z.ZodEnum<{
+            claude: "claude";
+            codex: "codex";
+            pi: "pi";
         }>;
-        actor: z.ZodObject<{
-            kind: z.ZodEnum<{
-                agent: "agent";
-                system: "system";
-                user: "user";
-            }>;
+        provider: z.ZodOptional<z.ZodString>;
+        model: z.ZodOptional<z.ZodString>;
+        promptTokens: z.ZodOptional<z.ZodNumber>;
+        completionTokens: z.ZodOptional<z.ZodNumber>;
+        durationMs: z.ZodOptional<z.ZodNumber>;
+        clientVersion: z.ZodString;
+        reportedAt: z.ZodISODateTime;
+    }, z.core.$strip>>;
+    agentRef: z.ZodOptional<z.ZodObject<{
+        agentId: z.ZodString;
+        profileRevision: z.ZodString;
+    }, z.core.$strict>>;
+    agentHomeProjection: z.ZodOptional<z.ZodObject<{
+        profileRevision: z.ZodString;
+        projectionHash: z.ZodString;
+    }, z.core.$strict>>;
+    agentHomeMemoryChange: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        outcome: z.ZodLiteral<"unchanged">;
+    }, z.core.$strict>, z.ZodObject<{
+        outcome: z.ZodLiteral<"reader-attributed">;
+        paths: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        outcome: z.ZodLiteral<"unattributed">;
+        paths: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        outcome: z.ZodLiteral<"unmeasured">;
+    }, z.core.$strict>], "outcome">>;
+    sealed: z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
+        category: z.ZodLiteral<"task-output">;
+        scope: z.ZodObject<{
             id: z.ZodString;
+            epoch: z.ZodNumber;
+            keyId: z.ZodString;
         }, z.core.$strict>;
-        agentRef: z.ZodObject<{
-            agentId: z.ZodString;
-            profileRevision: z.ZodString;
+        chainHead: z.ZodObject<{
+            seq: z.ZodNumber;
+            hash: z.ZodString;
         }, z.core.$strict>;
-        sessionRef: z.ZodString;
+        sender: z.ZodString;
+        salt: z.ZodString;
+        nonce: z.ZodString;
+        paddedLength: z.ZodNumber;
+        contentMac: z.ZodString;
+        ciphertext: z.ZodOptional<z.ZodString>;
+        ciphertextRef: z.ZodOptional<z.ZodObject<{
+            blobId: z.ZodString;
+            contentHash: z.ZodString;
+            size: z.ZodNumber;
+            contentType: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type TaskCompleteSealedPayload = z.infer<typeof TaskCompleteSealedPayloadSchema>;
+/** daemon -> server: `task.fail` of a sealed task. `reason` is sealed; `preparedObservation` is not carried in v1. */
+export declare const TaskFailSealedPayloadSchema: z.ZodObject<{
+    sealing: z.ZodOptional<z.ZodNever>;
+    recovery: z.ZodOptional<z.ZodObject<{
+        kind: z.ZodLiteral<"daemon_interrupted">;
+        offerId: z.ZodUUID;
+    }, z.core.$strict>>;
+    harnessId: z.ZodOptional<z.ZodString>;
+    retryable: z.ZodOptional<z.ZodBoolean>;
+    usage: z.ZodOptional<z.ZodObject<{
         runtime: z.ZodEnum<{
             claude: "claude";
             codex: "codex";
             pi: "pi";
         }>;
-        cwd: z.ZodString;
-        policyRevision: z.ZodString;
-        target: z.ZodString;
-        mimeType: z.ZodString;
-        decodeAs: z.ZodEnum<{
-            bytes: "bytes";
-            utf8: "utf8";
-        }>;
-        policy: z.ZodObject<{
-            maxBytes: z.ZodNumber;
-            allowedMimeTypes: z.ZodArray<z.ZodString>;
-        }, z.core.$strict>;
-    }, z.core.$strict>;
-    readonly 'agent.content.receipt': z.ZodDiscriminatedUnion<[z.ZodObject<{
-        requestId: z.ZodUUID;
-        eventId: z.ZodUUID;
-        cursor: z.ZodNumber;
-        surface: z.ZodEnum<{
-            artifact: "artifact";
-            transcript: "transcript";
-            workspace: "workspace";
-        }>;
-        actor: z.ZodObject<{
-            kind: z.ZodEnum<{
-                agent: "agent";
-                system: "system";
-                user: "user";
-            }>;
+        provider: z.ZodOptional<z.ZodString>;
+        model: z.ZodOptional<z.ZodString>;
+        promptTokens: z.ZodOptional<z.ZodNumber>;
+        completionTokens: z.ZodOptional<z.ZodNumber>;
+        durationMs: z.ZodOptional<z.ZodNumber>;
+        clientVersion: z.ZodString;
+        reportedAt: z.ZodISODateTime;
+    }, z.core.$strip>>;
+    agentRef: z.ZodOptional<z.ZodObject<{
+        agentId: z.ZodString;
+        profileRevision: z.ZodString;
+    }, z.core.$strict>>;
+    agentHomeProjection: z.ZodOptional<z.ZodObject<{
+        profileRevision: z.ZodString;
+        projectionHash: z.ZodString;
+    }, z.core.$strict>>;
+    agentHomeMemoryChange: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        outcome: z.ZodLiteral<"unchanged">;
+    }, z.core.$strict>, z.ZodObject<{
+        outcome: z.ZodLiteral<"reader-attributed">;
+        paths: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        outcome: z.ZodLiteral<"unattributed">;
+        paths: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        outcome: z.ZodLiteral<"unmeasured">;
+    }, z.core.$strict>], "outcome">>;
+    sealed: z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
+        category: z.ZodLiteral<"task-output">;
+        scope: z.ZodObject<{
             id: z.ZodString;
+            epoch: z.ZodNumber;
+            keyId: z.ZodString;
         }, z.core.$strict>;
-        agentRef: z.ZodObject<{
-            agentId: z.ZodString;
-            profileRevision: z.ZodString;
+        chainHead: z.ZodObject<{
+            seq: z.ZodNumber;
+            hash: z.ZodString;
         }, z.core.$strict>;
-        sessionRef: z.ZodString;
-        runtime: z.ZodEnum<{
-            claude: "claude";
-            codex: "codex";
-            pi: "pi";
-        }>;
-        cwd: z.ZodString;
-        policyRevision: z.ZodString;
-        target: z.ZodString;
-        mimeType: z.ZodString;
-        decodeAs: z.ZodEnum<{
-            bytes: "bytes";
-            utf8: "utf8";
-        }>;
-        decision: z.ZodLiteral<"allowed">;
-        byteCount: z.ZodNumber;
-        contentHash: z.ZodString;
-        blobRef: z.ZodObject<{
+        sender: z.ZodString;
+        salt: z.ZodString;
+        nonce: z.ZodString;
+        paddedLength: z.ZodNumber;
+        contentMac: z.ZodString;
+        ciphertext: z.ZodOptional<z.ZodString>;
+        ciphertextRef: z.ZodOptional<z.ZodObject<{
             blobId: z.ZodString;
             contentHash: z.ZodString;
             size: z.ZodNumber;
             contentType: z.ZodString;
-            url: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>;
-    }, z.core.$strict>, z.ZodObject<{
-        requestId: z.ZodUUID;
-        eventId: z.ZodUUID;
-        cursor: z.ZodNumber;
-        surface: z.ZodEnum<{
-            artifact: "artifact";
-            transcript: "transcript";
-            workspace: "workspace";
-        }>;
-        actor: z.ZodObject<{
-            kind: z.ZodEnum<{
-                agent: "agent";
-                system: "system";
-                user: "user";
-            }>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type TaskFailSealedPayload = z.infer<typeof TaskFailSealedPayloadSchema>;
+/**
+ * daemon -> server: `task.decline` of a sealed task with a sealed `reason`.
+ * The sealed decline codes go only on the plaintext `task.decline`: a device
+ * that cannot open or use the scope key often cannot seal a reply either.
+ */
+export declare const TaskDeclineSealedPayloadSchema: z.ZodObject<{
+    sealing: z.ZodOptional<z.ZodNever>;
+    retryable: z.ZodOptional<z.ZodBoolean>;
+    agentRef: z.ZodOptional<z.ZodObject<{
+        agentId: z.ZodString;
+        profileRevision: z.ZodString;
+    }, z.core.$strict>>;
+    code: z.ZodOptional<z.ZodEnum<{
+        agent_home_reader_busy: "agent_home_reader_busy";
+        agent_home_writer_busy: "agent_home_writer_busy";
+    }>>;
+    sealed: z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
+        category: z.ZodLiteral<"task-output">;
+        scope: z.ZodObject<{
             id: z.ZodString;
+            epoch: z.ZodNumber;
+            keyId: z.ZodString;
         }, z.core.$strict>;
-        agentRef: z.ZodObject<{
-            agentId: z.ZodString;
-            profileRevision: z.ZodString;
+        chainHead: z.ZodObject<{
+            seq: z.ZodNumber;
+            hash: z.ZodString;
         }, z.core.$strict>;
-        sessionRef: z.ZodString;
+        sender: z.ZodString;
+        salt: z.ZodString;
+        nonce: z.ZodString;
+        paddedLength: z.ZodNumber;
+        contentMac: z.ZodString;
+        ciphertext: z.ZodOptional<z.ZodString>;
+        ciphertextRef: z.ZodOptional<z.ZodObject<{
+            blobId: z.ZodString;
+            contentHash: z.ZodString;
+            size: z.ZodNumber;
+            contentType: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type TaskDeclineSealedPayload = z.infer<typeof TaskDeclineSealedPayloadSchema>;
+/** daemon -> server: `task.cancelled` of a sealed task. `reason` is sealed. */
+export declare const TaskCancelledSealedPayloadSchema: z.ZodObject<{
+    sealing: z.ZodOptional<z.ZodNever>;
+    harnessId: z.ZodOptional<z.ZodString>;
+    usage: z.ZodOptional<z.ZodObject<{
         runtime: z.ZodEnum<{
             claude: "claude";
             codex: "codex";
             pi: "pi";
         }>;
-        cwd: z.ZodString;
-        policyRevision: z.ZodString;
-        target: z.ZodString;
-        mimeType: z.ZodString;
-        decodeAs: z.ZodEnum<{
-            bytes: "bytes";
-            utf8: "utf8";
-        }>;
-        decision: z.ZodLiteral<"denied">;
-        byteCount: z.ZodLiteral<0>;
-        reason: z.ZodEnum<{
-            "absolute-target": "absolute-target";
-            "byte-limit": "byte-limit";
-            "capability-missing": "capability-missing";
-            "dot-segment": "dot-segment";
-            "identity-mismatch": "identity-mismatch";
-            "invalid-request": "invalid-request";
-            "mime-not-allowlisted": "mime-not-allowlisted";
-            "non-relative-target": "non-relative-target";
-            "not-regular-file": "not-regular-file";
-            "path-escape": "path-escape";
-            "policy-disabled": "policy-disabled";
-            "policy-revision-mismatch": "policy-revision-mismatch";
-            "root-invalid": "root-invalid";
-            "root-not-allowlisted": "root-not-allowlisted";
-            "sensitive-name": "sensitive-name";
-            symlink: "symlink";
-            "target-missing": "target-missing";
-            "text-decode-failed": "text-decode-failed";
-            "text-not-allowlisted": "text-not-allowlisted";
-        }>;
-    }, z.core.$strict>], "decision">;
-    readonly 'agent.home.projection': z.ZodObject<{
-        requestId: z.ZodUUID;
-        agentRef: z.ZodObject<{
-            agentId: z.ZodString;
-            profileRevision: z.ZodString;
-        }, z.core.$strict>;
+        provider: z.ZodOptional<z.ZodString>;
+        model: z.ZodOptional<z.ZodString>;
+        promptTokens: z.ZodOptional<z.ZodNumber>;
+        completionTokens: z.ZodOptional<z.ZodNumber>;
+        durationMs: z.ZodOptional<z.ZodNumber>;
+        clientVersion: z.ZodString;
+        reportedAt: z.ZodISODateTime;
+    }, z.core.$strip>>;
+    agentRef: z.ZodOptional<z.ZodObject<{
+        agentId: z.ZodString;
+        profileRevision: z.ZodString;
+    }, z.core.$strict>>;
+    agentHomeProjection: z.ZodOptional<z.ZodObject<{
+        profileRevision: z.ZodString;
         projectionHash: z.ZodString;
-        projection: z.ZodType<import("./agent-home-projection").AgentHomeProjectionValue, unknown, z.core.$ZodTypeInternals<import("./agent-home-projection").AgentHomeProjectionValue, unknown>>;
-    }, z.core.$strict>;
-    readonly 'agent.input.preparation': z.ZodObject<{
-        agentMemory: z.ZodEnum<{
-            none: "none";
-            read: "read";
-            "read-write": "read-write";
-        }>;
-        requestId: z.ZodUUID;
-        agentRef: z.ZodObject<{
-            agentId: z.ZodString;
-            profileRevision: z.ZodString;
-        }, z.core.$strict>;
-        profileId: z.ZodString;
-        policyRevision: z.ZodString;
-        source: z.ZodObject<{
-            revision: z.ZodString;
-            digest: z.ZodString;
+    }, z.core.$strict>>;
+    agentHomeMemoryChange: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        outcome: z.ZodLiteral<"unchanged">;
+    }, z.core.$strict>, z.ZodObject<{
+        outcome: z.ZodLiteral<"reader-attributed">;
+        paths: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        outcome: z.ZodLiteral<"unattributed">;
+        paths: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        outcome: z.ZodLiteral<"unmeasured">;
+    }, z.core.$strict>], "outcome">>;
+    sealed: z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
+        category: z.ZodLiteral<"task-output">;
+        scope: z.ZodObject<{
+            id: z.ZodString;
+            epoch: z.ZodNumber;
+            keyId: z.ZodString;
         }, z.core.$strict>;
-        selection: z.ZodObject<{
-            model: z.ZodObject<{
-                id: z.ZodString;
-                name: z.ZodString;
-                api: z.ZodLiteral<"openai-completions">;
-                provider: z.ZodString;
-                baseUrl: z.ZodString;
-                reasoning: z.ZodBoolean;
-                input: z.ZodArray<z.ZodEnum<{
-                    image: "image";
-                    text: "text";
-                }>>;
-                cost: z.ZodObject<{
-                    input: z.ZodNumber;
-                    output: z.ZodNumber;
-                    cacheRead: z.ZodNumber;
-                    cacheWrite: z.ZodNumber;
-                }, z.core.$strict>;
-                contextWindow: z.ZodNumber;
-                maxTokens: z.ZodNumber;
-                thinkingLevelMap: z.ZodOptional<z.ZodObject<{
-                    off: z.ZodNullable<z.ZodString>;
-                    minimal: z.ZodNullable<z.ZodString>;
-                    low: z.ZodNullable<z.ZodString>;
-                    medium: z.ZodNullable<z.ZodString>;
-                    high: z.ZodNullable<z.ZodString>;
-                    xhigh: z.ZodNullable<z.ZodString>;
-                    max: z.ZodNullable<z.ZodString>;
-                }, z.core.$strict>>;
-                compat: z.ZodOptional<z.ZodObject<{
-                    supportsStore: z.ZodOptional<z.ZodBoolean>;
-                    supportsDeveloperRole: z.ZodOptional<z.ZodBoolean>;
-                    supportsReasoningEffort: z.ZodOptional<z.ZodBoolean>;
-                    supportsUsageInStreaming: z.ZodOptional<z.ZodBoolean>;
-                    maxTokensField: z.ZodOptional<z.ZodEnum<{
-                        max_completion_tokens: "max_completion_tokens";
-                        max_tokens: "max_tokens";
-                    }>>;
-                    thinkingFormat: z.ZodOptional<z.ZodEnum<{
-                        "ant-ling": "ant-ling";
-                        baseten: "baseten";
-                        "chat-template": "chat-template";
-                        deepseek: "deepseek";
-                        openai: "openai";
-                        openrouter: "openrouter";
-                        qwen: "qwen";
-                        "qwen-chat-template": "qwen-chat-template";
-                        "string-thinking": "string-thinking";
-                        together: "together";
-                        zai: "zai";
-                    }>>;
-                    zaiToolStream: z.ZodOptional<z.ZodBoolean>;
-                }, z.core.$strict>>;
-            }, z.core.$strict>;
-            options: z.ZodObject<{
-                cacheRetention: z.ZodEnum<{
-                    long: "long";
-                    none: "none";
-                    short: "short";
-                }>;
-                maxTokens: z.ZodNumber;
-                temperature: z.ZodOptional<z.ZodNumber>;
-                toolChoice: z.ZodOptional<z.ZodEnum<{
-                    auto: "auto";
-                    none: "none";
-                }>>;
-                reasoningEffort: z.ZodOptional<z.ZodEnum<{
-                    high: "high";
-                    low: "low";
-                    max: "max";
-                    medium: "medium";
-                    minimal: "minimal";
-                    xhigh: "xhigh";
-                }>>;
-            }, z.core.$strict>;
+        chainHead: z.ZodObject<{
+            seq: z.ZodNumber;
+            hash: z.ZodString;
         }, z.core.$strict>;
-        deadlineAt: z.ZodISODateTime;
-        context: z.ZodUnion<readonly [z.ZodObject<{
-            inline: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            blobRef: z.ZodObject<{
-                blobId: z.ZodString;
-                contentHash: z.ZodString;
-                size: z.ZodNumber;
-                contentType: z.ZodString;
-                url: z.ZodOptional<z.ZodString>;
-            }, z.core.$strip>;
+        sender: z.ZodString;
+        salt: z.ZodString;
+        nonce: z.ZodString;
+        paddedLength: z.ZodNumber;
+        contentMac: z.ZodString;
+        ciphertext: z.ZodOptional<z.ZodString>;
+        ciphertextRef: z.ZodOptional<z.ZodObject<{
+            blobId: z.ZodString;
             contentHash: z.ZodString;
-        }, z.core.$strict>]>;
-        requiredToolsets: z.ZodArray<z.ZodString>;
-        accountingPolicyRef: z.ZodOptional<z.ZodObject<{
-            revision: z.ZodString;
-            ruledRuntime: z.ZodString;
-            ruledTarget: z.ZodObject<{
-                endpoint: z.ZodString;
-                modelId: z.ZodString;
-            }, z.core.$strict>;
-            ruledResidualKeys: z.ZodArray<z.ZodString>;
+            size: z.ZodNumber;
+            contentType: z.ZodString;
         }, z.core.$strict>>;
     }, z.core.$strict>;
-    readonly 'provider.provisioning.available': z.ZodObject<{
-        requestId: z.ZodUUID;
-    }, z.core.$strict>;
-    readonly 'agent.memory.intent.available': z.ZodObject<{
-        intentId: z.ZodUUID;
-        agentRef: z.ZodObject<{
-            agentId: z.ZodString;
-            profileRevision: z.ZodString;
+}, z.core.$strict>;
+export type TaskCancelledSealedPayload = z.infer<typeof TaskCancelledSealedPayloadSchema>;
+/** daemon -> server: `task.progress` of a sealed task. `events` is sealed; `seq` names the batch. */
+export declare const TaskProgressSealedPayloadSchema: z.ZodObject<{
+    sealing: z.ZodOptional<z.ZodNever>;
+    seq: z.ZodNumber;
+    sealed: z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
+        category: z.ZodLiteral<"task-output">;
+        scope: z.ZodObject<{
+            id: z.ZodString;
+            epoch: z.ZodNumber;
+            keyId: z.ZodString;
         }, z.core.$strict>;
-    }, z.core.$strict>;
-    readonly 'task.approve': z.ZodObject<{
-        approvalId: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>;
-    readonly 'task.reject': z.ZodObject<{
-        reason: z.ZodOptional<z.ZodString>;
-        approvalId: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>;
-    readonly 'task.cancel': z.ZodObject<{
-        reason: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>;
-    readonly 'task.steer': z.ZodObject<{
-        text: z.ZodString;
-    }, z.core.$strip>;
-    readonly 'task.claim': z.ZodObject<{
-        deviceId: z.ZodString;
-        agentId: z.ZodOptional<z.ZodString>;
-        agentRef: z.ZodOptional<z.ZodObject<{
-            agentId: z.ZodString;
-            profileRevision: z.ZodString;
-        }, z.core.$strict>>;
-        runtime: z.ZodOptional<z.ZodEnum<{
-            claude: "claude";
-            codex: "codex";
-            pi: "pi";
-        }>>;
-        harnessId: z.ZodOptional<z.ZodString>;
-        capabilities: z.ZodOptional<z.ZodObject<{
-            steer: z.ZodOptional<z.ZodBoolean>;
-            resume: z.ZodOptional<z.ZodBoolean>;
-            approvalInteractive: z.ZodOptional<z.ZodBoolean>;
-            mcpToolsets: z.ZodOptional<z.ZodBoolean>;
-            messageDraft: z.ZodOptional<z.ZodBoolean>;
-        }, z.core.$strip>>;
-    }, z.core.$strip>;
-    readonly 'task.started': z.ZodObject<{}, z.core.$strip>;
-    readonly 'task.decline': z.ZodObject<{
-        reason: z.ZodString;
-        retryable: z.ZodOptional<z.ZodBoolean>;
-        agentRef: z.ZodOptional<z.ZodObject<{
-            agentId: z.ZodString;
-            profileRevision: z.ZodString;
-        }, z.core.$strict>>;
-        code: z.ZodOptional<z.ZodEnum<{
-            agent_home_reader_busy: "agent_home_reader_busy";
-            agent_home_writer_busy: "agent_home_writer_busy";
-        }>>;
-    }, z.core.$strip>;
-    readonly 'task.progress': z.ZodObject<{
-        seq: z.ZodNumber;
-        events: z.ZodArray<z.ZodUnion<readonly [z.ZodDiscriminatedUnion<[z.ZodObject<{
-            type: z.ZodLiteral<"progress">;
-            text: z.ZodString;
-        }, z.core.$strip>, z.ZodObject<{
-            type: z.ZodLiteral<"tool_use">;
-            tool: z.ZodString;
-            mcp: z.ZodOptional<z.ZodObject<{
-                server: z.ZodString;
-                tool: z.ZodString;
-            }, z.core.$strict>>;
-            input: z.ZodOptional<z.ZodUnknown>;
-            toolCallId: z.ZodOptional<z.ZodString>;
-            spill: z.ZodOptional<z.ZodObject<{
-                field: z.ZodEnum<{
-                    input: "input";
-                    output: "output";
-                }>;
-                totalBytes: z.ZodNumber;
-                omittedBytes: z.ZodNumber;
-                contentType: z.ZodLiteral<"application/json">;
-                blob: z.ZodOptional<z.ZodObject<{
-                    blobId: z.ZodString;
-                    contentHash: z.ZodString;
-                    size: z.ZodNumber;
-                    contentType: z.ZodString;
-                    url: z.ZodOptional<z.ZodString>;
-                }, z.core.$strip>>;
-                unstoredReason: z.ZodOptional<z.ZodString>;
-            }, z.core.$strict>>;
-        }, z.core.$strip>, z.ZodObject<{
-            type: z.ZodLiteral<"tool_result">;
-            tool: z.ZodString;
-            mcp: z.ZodOptional<z.ZodObject<{
-                server: z.ZodString;
-                tool: z.ZodString;
-            }, z.core.$strict>>;
-            output: z.ZodOptional<z.ZodUnknown>;
-            toolCallId: z.ZodOptional<z.ZodString>;
-            isError: z.ZodOptional<z.ZodBoolean>;
-            spill: z.ZodOptional<z.ZodObject<{
-                field: z.ZodEnum<{
-                    input: "input";
-                    output: "output";
-                }>;
-                totalBytes: z.ZodNumber;
-                omittedBytes: z.ZodNumber;
-                contentType: z.ZodLiteral<"application/json">;
-                blob: z.ZodOptional<z.ZodObject<{
-                    blobId: z.ZodString;
-                    contentHash: z.ZodString;
-                    size: z.ZodNumber;
-                    contentType: z.ZodString;
-                    url: z.ZodOptional<z.ZodString>;
-                }, z.core.$strip>>;
-                unstoredReason: z.ZodOptional<z.ZodString>;
-            }, z.core.$strict>>;
-        }, z.core.$strip>, z.ZodObject<{
-            type: z.ZodLiteral<"artifact">;
-            name: z.ZodString;
-            contentType: z.ZodString;
-        }, z.core.$strip>, z.ZodObject<{
-            type: z.ZodLiteral<"needs_approval">;
-            summary: z.ZodString;
-        }, z.core.$strip>, z.ZodObject<{
-            type: z.ZodLiteral<"turn_end">;
-        }, z.core.$strip>, z.ZodObject<{
-            type: z.ZodLiteral<"error">;
-            message: z.ZodString;
-        }, z.core.$strip>, z.ZodObject<{
-            type: z.ZodLiteral<"usage">;
-            inputTokens: z.ZodOptional<z.ZodNumber>;
-            cachedInputTokens: z.ZodOptional<z.ZodNumber>;
-            outputTokens: z.ZodOptional<z.ZodNumber>;
-            reasoningTokens: z.ZodOptional<z.ZodNumber>;
-            totalTokens: z.ZodOptional<z.ZodNumber>;
-            contextTokens: z.ZodOptional<z.ZodNumber>;
-            contextWindow: z.ZodOptional<z.ZodNumber>;
-            contextSource: z.ZodOptional<z.ZodEnum<{
-                estimate: "estimate";
-                provider: "provider";
-            }>>;
-        }, z.core.$strip>], "type">, z.ZodObject<{
-            type: z.ZodString;
-        }, z.core.$loose>]>>;
-    }, z.core.$strip>;
-    readonly 'task.artifact': z.ZodObject<{
-        name: z.ZodString;
-        contentType: z.ZodString;
-        inline: z.ZodOptional<z.ZodString>;
-        blobRef: z.ZodOptional<z.ZodObject<{
+        chainHead: z.ZodObject<{
+            seq: z.ZodNumber;
+            hash: z.ZodString;
+        }, z.core.$strict>;
+        sender: z.ZodString;
+        salt: z.ZodString;
+        nonce: z.ZodString;
+        paddedLength: z.ZodNumber;
+        contentMac: z.ZodString;
+        ciphertext: z.ZodOptional<z.ZodString>;
+        ciphertextRef: z.ZodOptional<z.ZodObject<{
             blobId: z.ZodString;
             contentHash: z.ZodString;
             size: z.ZodNumber;
             contentType: z.ZodString;
-            url: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>>;
-    }, z.core.$strip>;
-    readonly 'task.await_approval': z.ZodObject<{
-        summary: z.ZodString;
-        approvalId: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>;
-    readonly 'task.complete': z.ZodObject<{
-        harnessId: z.ZodOptional<z.ZodString>;
-        summary: z.ZodString;
-        finalMessage: z.ZodOptional<z.ZodString>;
-        sessionRef: z.ZodString;
-        artifactRefs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type TaskProgressSealedPayload = z.infer<typeof TaskProgressSealedPayloadSchema>;
+/**
+ * daemon -> server: an inline artifact of a sealed task. `inline` is sealed; a
+ * blob artifact is not carried in v1. `artifactId` names the write in the AAD
+ * and the content MAC, because two artifacts of one task may share a `name`.
+ */
+export declare const TaskArtifactSealedPayloadSchema: z.ZodObject<{
+    sealing: z.ZodOptional<z.ZodNever>;
+    name: z.ZodString;
+    contentType: z.ZodString;
+    artifactId: z.ZodUUID;
+    sealed: z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
+        category: z.ZodLiteral<"task-output">;
+        scope: z.ZodObject<{
+            id: z.ZodString;
+            epoch: z.ZodNumber;
+            keyId: z.ZodString;
+        }, z.core.$strict>;
+        chainHead: z.ZodObject<{
+            seq: z.ZodNumber;
+            hash: z.ZodString;
+        }, z.core.$strict>;
+        sender: z.ZodString;
+        salt: z.ZodString;
+        nonce: z.ZodString;
+        paddedLength: z.ZodNumber;
+        contentMac: z.ZodString;
+        ciphertext: z.ZodOptional<z.ZodString>;
+        ciphertextRef: z.ZodOptional<z.ZodObject<{
             blobId: z.ZodString;
             contentHash: z.ZodString;
             size: z.ZodNumber;
             contentType: z.ZodString;
-            url: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>>>;
-        document: z.ZodOptional<z.ZodUnknown>;
-        usage: z.ZodOptional<z.ZodObject<{
-            runtime: z.ZodEnum<{
-                claude: "claude";
-                codex: "codex";
-                pi: "pi";
-            }>;
-            provider: z.ZodOptional<z.ZodString>;
-            model: z.ZodOptional<z.ZodString>;
-            promptTokens: z.ZodOptional<z.ZodNumber>;
-            completionTokens: z.ZodOptional<z.ZodNumber>;
-            durationMs: z.ZodOptional<z.ZodNumber>;
-            clientVersion: z.ZodString;
-            reportedAt: z.ZodISODateTime;
-        }, z.core.$strip>>;
-        preparedObservation: z.ZodOptional<z.ZodObject<{
-            requestDigest: z.ZodString;
-            initialPromptTokens: z.ZodNumber;
-            maxPromptTokens: z.ZodNumber;
-        }, z.core.$strict>>;
-        agentRef: z.ZodOptional<z.ZodObject<{
-            agentId: z.ZodString;
-            profileRevision: z.ZodString;
-        }, z.core.$strict>>;
-        agentHomeProjection: z.ZodOptional<z.ZodObject<{
-            profileRevision: z.ZodString;
-            projectionHash: z.ZodString;
-        }, z.core.$strict>>;
-        agentHomeMemoryChange: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            outcome: z.ZodLiteral<"unchanged">;
-        }, z.core.$strict>, z.ZodObject<{
-            outcome: z.ZodLiteral<"reader-attributed">;
-            paths: z.ZodArray<z.ZodString>;
-        }, z.core.$strict>, z.ZodObject<{
-            outcome: z.ZodLiteral<"unattributed">;
-            paths: z.ZodArray<z.ZodString>;
-        }, z.core.$strict>, z.ZodObject<{
-            outcome: z.ZodLiteral<"unmeasured">;
-        }, z.core.$strict>], "outcome">>;
-    }, z.core.$strip>;
-    readonly 'task.fail': z.ZodObject<{
-        recovery: z.ZodOptional<z.ZodObject<{
-            kind: z.ZodLiteral<"daemon_interrupted">;
-            offerId: z.ZodUUID;
-        }, z.core.$strict>>;
-        harnessId: z.ZodOptional<z.ZodString>;
-        reason: z.ZodString;
-        retryable: z.ZodOptional<z.ZodBoolean>;
-        usage: z.ZodOptional<z.ZodObject<{
-            runtime: z.ZodEnum<{
-                claude: "claude";
-                codex: "codex";
-                pi: "pi";
-            }>;
-            provider: z.ZodOptional<z.ZodString>;
-            model: z.ZodOptional<z.ZodString>;
-            promptTokens: z.ZodOptional<z.ZodNumber>;
-            completionTokens: z.ZodOptional<z.ZodNumber>;
-            durationMs: z.ZodOptional<z.ZodNumber>;
-            clientVersion: z.ZodString;
-            reportedAt: z.ZodISODateTime;
-        }, z.core.$strip>>;
-        preparedObservation: z.ZodOptional<z.ZodObject<{
-            requestDigest: z.ZodString;
-            initialPromptTokens: z.ZodNumber;
-            maxPromptTokens: z.ZodNumber;
-        }, z.core.$strict>>;
-        agentRef: z.ZodOptional<z.ZodObject<{
-            agentId: z.ZodString;
-            profileRevision: z.ZodString;
-        }, z.core.$strict>>;
-        agentHomeProjection: z.ZodOptional<z.ZodObject<{
-            profileRevision: z.ZodString;
-            projectionHash: z.ZodString;
         }, z.core.$strict>>;
-        agentHomeMemoryChange: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            outcome: z.ZodLiteral<"unchanged">;
-        }, z.core.$strict>, z.ZodObject<{
-            outcome: z.ZodLiteral<"reader-attributed">;
-            paths: z.ZodArray<z.ZodString>;
-        }, z.core.$strict>, z.ZodObject<{
-            outcome: z.ZodLiteral<"unattributed">;
-            paths: z.ZodArray<z.ZodString>;
-        }, z.core.$strict>, z.ZodObject<{
-            outcome: z.ZodLiteral<"unmeasured">;
-        }, z.core.$strict>], "outcome">>;
-    }, z.core.$strip>;
-    readonly 'task.cancelled': z.ZodObject<{
-        harnessId: z.ZodOptional<z.ZodString>;
-        reason: z.ZodOptional<z.ZodString>;
-        usage: z.ZodOptional<z.ZodObject<{
-            runtime: z.ZodEnum<{
-                claude: "claude";
-                codex: "codex";
-                pi: "pi";
-            }>;
-            provider: z.ZodOptional<z.ZodString>;
-            model: z.ZodOptional<z.ZodString>;
-            promptTokens: z.ZodOptional<z.ZodNumber>;
-            completionTokens: z.ZodOptional<z.ZodNumber>;
-            durationMs: z.ZodOptional<z.ZodNumber>;
-            clientVersion: z.ZodString;
-            reportedAt: z.ZodISODateTime;
-        }, z.core.$strip>>;
-        agentRef: z.ZodOptional<z.ZodObject<{
-            agentId: z.ZodString;
-            profileRevision: z.ZodString;
-        }, z.core.$strict>>;
-        agentHomeProjection: z.ZodOptional<z.ZodObject<{
-            profileRevision: z.ZodString;
-            projectionHash: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type TaskArtifactSealedPayload = z.infer<typeof TaskArtifactSealedPayloadSchema>;
+/** daemon -> server: `task.await_approval` of a sealed task. `summary` is sealed; `approvalId` is required. */
+export declare const TaskAwaitApprovalSealedPayloadSchema: z.ZodObject<{
+    sealing: z.ZodOptional<z.ZodNever>;
+    approvalId: z.ZodString;
+    sealed: z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
+        category: z.ZodLiteral<"task-output">;
+        scope: z.ZodObject<{
+            id: z.ZodString;
+            epoch: z.ZodNumber;
+            keyId: z.ZodString;
+        }, z.core.$strict>;
+        chainHead: z.ZodObject<{
+            seq: z.ZodNumber;
+            hash: z.ZodString;
+        }, z.core.$strict>;
+        sender: z.ZodString;
+        salt: z.ZodString;
+        nonce: z.ZodString;
+        paddedLength: z.ZodNumber;
+        contentMac: z.ZodString;
+        ciphertext: z.ZodOptional<z.ZodString>;
+        ciphertextRef: z.ZodOptional<z.ZodObject<{
+            blobId: z.ZodString;
+            contentHash: z.ZodString;
+            size: z.ZodNumber;
+            contentType: z.ZodString;
         }, z.core.$strict>>;
-        agentHomeMemoryChange: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            outcome: z.ZodLiteral<"unchanged">;
-        }, z.core.$strict>, z.ZodObject<{
-            outcome: z.ZodLiteral<"reader-attributed">;
-            paths: z.ZodArray<z.ZodString>;
-        }, z.core.$strict>, z.ZodObject<{
-            outcome: z.ZodLiteral<"unattributed">;
-            paths: z.ZodArray<z.ZodString>;
-        }, z.core.$strict>, z.ZodObject<{
-            outcome: z.ZodLiteral<"unmeasured">;
-        }, z.core.$strict>], "outcome">>;
-    }, z.core.$strip>;
-    readonly 'task.approval_resolved': z.ZodObject<{
-        approvalId: z.ZodString;
-        decision: z.ZodEnum<{
-            approve: "approve";
-            reject: "reject";
-        }>;
-        resolvedBy: z.ZodEnum<{
-            local: "local";
-        }>;
-        at: z.ZodISODateTime;
-    }, z.core.$strip>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type TaskAwaitApprovalSealedPayload = z.infer<typeof TaskAwaitApprovalSealedPayloadSchema>;
+/**
+ * Protocol-owned task-opening family; the wire registry consumes these same entries.
+ *
+ * Each value is written `X as typeof X`, here and in `MESSAGE_PAYLOAD_SCHEMAS`.
+ * The assertion is type-only (no runtime code). It makes declaration emit
+ * name each schema (`typeof X`) instead of copying its full type, which keeps
+ * the published `.d.ts` small. Every new entry follows this rule.
+ */
+declare const TASK_OFFER_PAYLOAD_SCHEMAS: {
+    readonly 'task.offer': typeof TaskOfferPayloadSchema;
+    readonly 'task.offer_with_toolsets': typeof TaskOfferWithToolsetsPayloadSchema;
+    readonly 'task.offer_for_agent': typeof TaskOfferForAgentPayloadSchema;
+    readonly 'task.offer_for_agent_with_egress': typeof TaskOfferForAgentWithEgressPayloadSchema;
+    readonly 'task.offer_for_agent_with_egress_fresh': typeof TaskOfferForAgentWithEgressFreshPayloadSchema;
+    readonly 'task.offer_prepared': typeof TaskOfferPreparedPayloadSchema;
+    readonly 'task.offer_sealed': typeof TaskOfferSealedPayloadSchema;
+    readonly 'task.offer_with_toolsets_sealed': typeof TaskOfferWithToolsetsSealedPayloadSchema;
+    readonly 'task.offer_for_agent_sealed': typeof TaskOfferForAgentSealedPayloadSchema;
+    readonly 'task.offer_for_agent_with_egress_sealed': typeof TaskOfferForAgentWithEgressSealedPayloadSchema;
+    readonly 'task.offer_for_agent_with_egress_fresh_sealed': typeof TaskOfferForAgentWithEgressFreshSealedPayloadSchema;
+};
+export type TaskOfferType = keyof typeof TASK_OFFER_PAYLOAD_SCHEMAS;
+export declare const TASK_OFFER_TYPES: readonly TaskOfferType[];
+/** Classify task-opening offers without duplicating the protocol registry in consumers. */
+export declare function isTaskOfferType(type: string): type is TaskOfferType;
+export declare const MESSAGE_PAYLOAD_SCHEMAS: {
+    readonly 'task.offer': typeof TaskOfferPayloadSchema;
+    readonly 'task.offer_with_toolsets': typeof TaskOfferWithToolsetsPayloadSchema;
+    readonly 'task.offer_for_agent': typeof TaskOfferForAgentPayloadSchema;
+    readonly 'task.offer_for_agent_with_egress': typeof TaskOfferForAgentWithEgressPayloadSchema;
+    readonly 'task.offer_for_agent_with_egress_fresh': typeof TaskOfferForAgentWithEgressFreshPayloadSchema;
+    readonly 'task.offer_prepared': typeof TaskOfferPreparedPayloadSchema;
+    readonly 'task.offer_sealed': typeof TaskOfferSealedPayloadSchema;
+    readonly 'task.offer_with_toolsets_sealed': typeof TaskOfferWithToolsetsSealedPayloadSchema;
+    readonly 'task.offer_for_agent_sealed': typeof TaskOfferForAgentSealedPayloadSchema;
+    readonly 'task.offer_for_agent_with_egress_sealed': typeof TaskOfferForAgentWithEgressSealedPayloadSchema;
+    readonly 'task.offer_for_agent_with_egress_fresh_sealed': typeof TaskOfferForAgentWithEgressFreshSealedPayloadSchema;
+    readonly 'conn.hello': typeof ConnHelloPayloadSchema;
+    readonly 'conn.ack': typeof ConnAckPayloadSchema;
+    readonly 'agent.egress.reliable': typeof AgentEgressReliablePayloadSchema;
+    readonly 'agent.egress.ack': typeof AgentEgressAckPayloadSchema;
+    readonly 'agent.message.draft': typeof AgentMessageDraftPayloadSchema;
+    readonly 'agent.message.publish': typeof AgentMessagePublishPayloadSchema;
+    readonly 'agent.message.disposition': typeof AgentMessageDispositionPayloadSchema;
+    readonly 'agent.content.read': typeof AgentContentReadPayloadSchema;
+    readonly 'agent.content.receipt': typeof AgentContentReceiptPayloadSchema;
+    readonly 'agent.home.projection': typeof AgentHomeProjectionPayloadSchema;
+    readonly 'agent.input.preparation': typeof AgentInputPreparationPayloadSchema;
+    readonly 'provider.provisioning.available': typeof ProviderProvisioningAvailablePayloadSchema;
+    readonly 'agent.memory.intent.available': typeof AgentMemoryIntentAvailablePayloadSchema;
+    readonly 'task.approve': typeof TaskApprovePayloadSchema;
+    readonly 'task.reject': typeof TaskRejectPayloadSchema;
+    readonly 'task.cancel': typeof TaskCancelPayloadSchema;
+    readonly 'task.steer': typeof TaskSteerPayloadSchema;
+    readonly 'task.claim': typeof TaskClaimPayloadSchema;
+    readonly 'task.started': typeof TaskStartedPayloadSchema;
+    readonly 'task.decline': typeof TaskDeclinePayloadSchema;
+    readonly 'task.progress': typeof TaskProgressPayloadSchema;
+    readonly 'task.artifact': typeof TaskArtifactPayloadSchema;
+    readonly 'task.await_approval': typeof TaskAwaitApprovalPayloadSchema;
+    readonly 'task.complete': typeof TaskCompletePayloadSchema;
+    readonly 'task.fail': typeof TaskFailPayloadSchema;
+    readonly 'task.cancelled': typeof TaskCancelledPayloadSchema;
+    readonly 'task.approval_resolved': typeof TaskApprovalResolvedPayloadSchema;
+    readonly 'task.steer_sealed': typeof TaskSteerSealedPayloadSchema;
+    readonly 'task.complete_sealed': typeof TaskCompleteSealedPayloadSchema;
+    readonly 'task.fail_sealed': typeof TaskFailSealedPayloadSchema;
+    readonly 'task.decline_sealed': typeof TaskDeclineSealedPayloadSchema;
+    readonly 'task.cancelled_sealed': typeof TaskCancelledSealedPayloadSchema;
+    readonly 'task.progress_sealed': typeof TaskProgressSealedPayloadSchema;
+    readonly 'task.artifact_sealed': typeof TaskArtifactSealedPayloadSchema;
+    readonly 'task.await_approval_sealed': typeof TaskAwaitApprovalSealedPayloadSchema;
+    readonly 'e2ee.key_package.available': typeof E2eeKeyPackageAvailablePayloadSchema;
 };
 export type MessageType = keyof typeof MESSAGE_PAYLOAD_SCHEMAS;
 export declare const MESSAGE_TYPES: MessageType[];
@@ -3467,7 +2902,7 @@ export declare const MESSAGE_TYPES: MessageType[];
  * (`envelope.ts`) to decide which branches require envelope `seq` (M1
  * redelivery cursor).
  */
-export declare const SERVER_TO_DAEMON_TYPES: readonly ["conn.ack", "task.offer", "task.offer_with_toolsets", "task.offer_for_agent", "task.offer_for_agent_with_egress", "task.offer_for_agent_with_egress_fresh", "task.offer_prepared", "agent.egress.ack", "agent.message.disposition", "agent.content.read", "agent.home.projection", "agent.input.preparation", "provider.provisioning.available", "agent.memory.intent.available", "task.approve", "task.reject", "task.cancel", "task.steer"];
+export declare const SERVER_TO_DAEMON_TYPES: readonly ["conn.ack", "task.offer", "task.offer_with_toolsets", "task.offer_for_agent", "task.offer_for_agent_with_egress", "task.offer_for_agent_with_egress_fresh", "task.offer_prepared", "agent.egress.ack", "agent.message.disposition", "agent.content.read", "agent.home.projection", "agent.input.preparation", "provider.provisioning.available", "agent.memory.intent.available", "task.approve", "task.reject", "task.cancel", "task.steer", "task.offer_sealed", "task.offer_with_toolsets_sealed", "task.offer_for_agent_sealed", "task.offer_for_agent_with_egress_sealed", "task.offer_for_agent_with_egress_fresh_sealed", "task.steer_sealed", "e2ee.key_package.available"];
 /**
  * Message types the daemon sends to the server — the flip side of
  * {@link SERVER_TO_DAEMON_TYPES}. `conn.hello` is deliberately excluded: it's
@@ -3480,5 +2915,5 @@ export declare const SERVER_TO_DAEMON_TYPES: readonly ["conn.ack", "task.offer",
  * or anything unrecognized — is rejected before it's dispatched to any
  * handler or counted `accepted` on the `/byok/messages` wire.
  */
-export declare const DAEMON_TO_SERVER_TYPES: readonly ["task.claim", "task.started", "task.decline", "task.progress", "task.artifact", "task.await_approval", "task.complete", "task.fail", "task.cancelled", "task.approval_resolved", "agent.egress.reliable", "agent.message.draft", "agent.message.publish", "agent.content.receipt"];
+export declare const DAEMON_TO_SERVER_TYPES: readonly ["task.claim", "task.started", "task.decline", "task.progress", "task.artifact", "task.await_approval", "task.complete", "task.fail", "task.cancelled", "task.approval_resolved", "agent.egress.reliable", "agent.message.draft", "agent.message.publish", "agent.content.receipt", "task.complete_sealed", "task.fail_sealed", "task.decline_sealed", "task.cancelled_sealed", "task.progress_sealed", "task.artifact_sealed", "task.await_approval_sealed"];
 export {};