@byok-sdk/protocol 0.29.0 → 0.30.1

package/dist/index.js

@@ -18,7 +18,27 @@ var PROVIDER_PROVISIONING_CAPABILITY = "provider-provisioning.v1";
 var AGENT_MEMORY_INTENT_CAPABILITY = "agent-memory-intent.v1";
 var AGENT_MEMORY_PROJECTION_CAPABILITY = "agent.memory.projection";
 var AGENT_MEMORY_SELECTION_CAPABILITY = "agent-memory-selection";
+var AGENT_MEMORY_READ_IF_ADMITTED_CAPABILITY = "agent-memory-read-if-admitted";
+var AGENT_MEMORY_READ_WRITE_IF_ADMITTED_CAPABILITY = "agent-memory-read-write-if-admitted";
 var AGENT_INPUT_PREPARATION_CAPABILITY = `agent-input-preparation-v${INPUT_PREPARATION_WIRE_VERSION}`;
+var SEALED_PAYLOAD_CAPABILITY = "sealed-payload-v1";
+var SEALED_OUTPUT_CIPHERTEXT_REF_CAPABILITY = "sealed-output-ciphertext-ref";
+var RUNTIME_FAILURE_CLASS_CAPABILITY = "runtime-failure-class";
+var RUNTIME_FAILURE_CLASSES = [
+  "auth",
+  "quota",
+  "rate_limited",
+  "billing",
+  "model_unavailable",
+  "input_too_large",
+  "invalid_request",
+  "overloaded",
+  "provider",
+  "runtime_exited",
+  "limit_reached",
+  "output_schema",
+  "unknown"
+];
 var PREPARED_AGENT_MEMORY_MODES = ["none", "read", "read-write"];
 function isPreparedAgentMemoryMode(value) {
   return typeof value === "string" && PREPARED_AGENT_MEMORY_MODES.some((mode) => mode === value);
@@ -59,7 +79,12 @@ var CAPABILITY_FLAGS = [
   PROVIDER_PROVISIONING_CAPABILITY,
   AGENT_MEMORY_INTENT_CAPABILITY,
   AGENT_MEMORY_SELECTION_CAPABILITY,
-  "agent-message-draft"
+  AGENT_MEMORY_READ_IF_ADMITTED_CAPABILITY,
+  AGENT_MEMORY_READ_WRITE_IF_ADMITTED_CAPABILITY,
+  "agent-message-draft",
+  SEALED_PAYLOAD_CAPABILITY,
+  SEALED_OUTPUT_CIPHERTEXT_REF_CAPABILITY,
+  RUNTIME_FAILURE_CLASS_CAPABILITY
 ];
 
 // src/task-state.ts
@@ -90,6 +115,95 @@ var AGENT_MEMORY_MAX_SNAPSHOT_BYTES = 1024 * 1024;
 var AGENT_MEMORY_MAX_SNAPSHOT_FILES = 128;
 var RUNTIME_IDS = Object.freeze(["pi", "claude", "codex"]);
 
+// src/sealed-split-table.ts
+var OFFER_DIGESTS = {
+  "instruction.blobRef.contentHash": "sealed",
+  "dispatchSelection.providerProfile.profileRevision": "plain",
+  "dispatchSelection.providerProfile.profileHash": "plain"
+};
+var AGENT_OFFER_DIGESTS = { ...OFFER_DIGESTS, "agentRef.profileRevision": "plain" };
+var EGRESS_OFFER_DIGESTS = { ...AGENT_OFFER_DIGESTS, "egressPolicy.policyRevision": "plain" };
+var TERMINAL_DIGESTS = {
+  "agentRef.profileRevision": "plain",
+  "agentHomeProjection.profileRevision": "plain",
+  "agentHomeProjection.projectionHash": "plain"
+};
+var sealedOffer = (plainType, digests) => ({ plainType, category: "task-input", identity: [], moved: ["instruction"], forbidden: [], digests });
+var SEALED_SPLIT_TABLE = Object.freeze({
+  "task.offer_sealed": sealedOffer("task.offer", OFFER_DIGESTS),
+  "task.offer_with_toolsets_sealed": sealedOffer("task.offer_with_toolsets", OFFER_DIGESTS),
+  "task.offer_for_agent_sealed": sealedOffer("task.offer_for_agent", AGENT_OFFER_DIGESTS),
+  "task.offer_for_agent_with_egress_sealed": sealedOffer("task.offer_for_agent_with_egress", EGRESS_OFFER_DIGESTS),
+  "task.offer_for_agent_with_egress_fresh_sealed": sealedOffer("task.offer_for_agent_with_egress_fresh", EGRESS_OFFER_DIGESTS),
+  "task.steer_sealed": { plainType: "task.steer", category: "task-input", identity: ["steerId"], moved: ["text"], forbidden: [], digests: {} },
+  "task.complete_sealed": {
+    plainType: "task.complete",
+    category: "task-output",
+    identity: [],
+    moved: ["summary", "finalMessage", "document"],
+    forbidden: ["artifactRefs", "preparedObservation"],
+    digests: {
+      ...TERMINAL_DIGESTS,
+      "artifactRefs[].contentHash": "forbidden",
+      "preparedObservation.requestDigest": "forbidden"
+    }
+  },
+  "task.fail_sealed": {
+    plainType: "task.fail",
+    category: "task-output",
+    identity: [],
+    moved: ["reason"],
+    forbidden: ["preparedObservation"],
+    digests: { ...TERMINAL_DIGESTS, "preparedObservation.requestDigest": "forbidden" }
+  },
+  "task.decline_sealed": {
+    plainType: "task.decline",
+    category: "task-output",
+    identity: [],
+    moved: ["reason"],
+    forbidden: [],
+    digests: { "agentRef.profileRevision": "plain" }
+  },
+  "task.cancelled_sealed": {
+    plainType: "task.cancelled",
+    category: "task-output",
+    identity: [],
+    moved: ["reason"],
+    forbidden: [],
+    digests: TERMINAL_DIGESTS
+  },
+  "task.progress_sealed": {
+    plainType: "task.progress",
+    category: "task-output",
+    identity: ["seq"],
+    moved: ["events"],
+    forbidden: [],
+    digests: { "events[].spill.blob.contentHash": "sealed" },
+    inlineOnly: true
+  },
+  "task.artifact_sealed": {
+    plainType: "task.artifact",
+    category: "task-output",
+    identity: ["artifactId"],
+    moved: ["inline"],
+    forbidden: ["blobRef"],
+    digests: { "blobRef.contentHash": "forbidden" },
+    limits: { inline: 2 * 1024 * 1024 }
+  },
+  "task.await_approval_sealed": {
+    plainType: "task.await_approval",
+    category: "task-output",
+    identity: ["approvalId"],
+    moved: ["summary"],
+    forbidden: [],
+    digests: {},
+    inlineOnly: true
+  }
+});
+function isSealedMessageType(type) {
+  return Object.hasOwn(SEALED_SPLIT_TABLE, type);
+}
+
 // src/wire-additions.ts
 var AGENT_OFFER_FIELDS = (surface) => [
   { kind: "envelope", rule: "gated", surface, field: "dispatchSelection", capability: "dispatch-selection", advertisedBy: "device" },
@@ -101,24 +215,46 @@ var EGRESS_OFFER_FIELDS = (surface) => [
   { kind: "envelope", rule: "gated", surface, field: "messageEgress", capability: "agent-message-egress", advertisedBy: "device" },
   ...AGENT_OFFER_FIELDS(surface)
 ];
-var WIRE_ADDITIONS = Object.freeze([
+function sealedRows(plainRows) {
+  return Object.keys(SEALED_SPLIT_TABLE).flatMap((surface) => {
+    const { plainType, moved, forbidden } = SEALED_SPLIT_TABLE[surface];
+    const dropped = [...moved, ...forbidden];
+    const advertisedBy = SEALED_SPLIT_TABLE[surface].category === "task-input" ? "device" : "server";
+    const inherited = plainRows.flatMap((row) => {
+      if (row.kind !== "envelope" || row.surface !== plainType) return [];
+      if (row.field !== void 0 && dropped.includes(row.field.split(/[.[]/u)[0])) return [];
+      return [{ ...row, surface }];
+    });
+    const entry = SEALED_SPLIT_TABLE[surface];
+    const byReference = advertisedBy === "server" && entry.inlineOnly !== true ? [{ kind: "envelope", rule: "gated", surface, field: "sealed.ciphertextRef", capability: "sealed-output-ciphertext-ref", advertisedBy }] : [];
+    return [{ kind: "envelope", rule: "gated", surface, capability: "sealed-payload-v1", advertisedBy }, ...inherited, ...byReference];
+  });
+}
+var SEALED_DECLINE_CODE = (value) => ({ kind: "envelope", rule: "gated", surface: "task.decline", field: "code", value, capability: "sealed-payload-v1", advertisedBy: "server" });
+var PLAIN_ROWS = [
   // Server to daemon: offers.
   { kind: "envelope", rule: "gated", surface: "task.offer", field: "harnessId", capability: "custom-harness", advertisedBy: "device" },
   { kind: "envelope", rule: "gated", surface: "task.offer_with_toolsets", field: "harnessId", capability: "custom-harness", advertisedBy: "device" },
   { kind: "envelope", rule: "gated", surface: "task.offer_for_agent", capability: "agent-home-contract", advertisedBy: "device" },
   ...AGENT_OFFER_FIELDS("task.offer_for_agent"),
   { kind: "envelope", rule: "gated", surface: "task.offer_for_agent", field: "agentMemory", capability: "agent-memory-selection", advertisedBy: "device" },
+  { kind: "envelope", rule: "gated", surface: "task.offer_for_agent", field: "agentMemory", value: "read-if-admitted", capability: "agent-memory-read-if-admitted", advertisedBy: "device" },
+  { kind: "envelope", rule: "gated", surface: "task.offer_for_agent", field: "agentMemory", value: "read-write-if-admitted", capability: "agent-memory-read-write-if-admitted", advertisedBy: "device" },
   { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress", capability: "agent-home-contract", advertisedBy: "device" },
   { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress", capability: "agent-egress-policy", advertisedBy: "device" },
   { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress", capability: "agent-egress-reliable-ack", advertisedBy: "device" },
   ...EGRESS_OFFER_FIELDS("task.offer_for_agent_with_egress"),
   { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress", field: "agentMemory", capability: "agent-memory-selection", advertisedBy: "device" },
+  { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress", field: "agentMemory", value: "read-if-admitted", capability: "agent-memory-read-if-admitted", advertisedBy: "device" },
+  { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress", field: "agentMemory", value: "read-write-if-admitted", capability: "agent-memory-read-write-if-admitted", advertisedBy: "device" },
   { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress_fresh", capability: "agent-home-contract", advertisedBy: "device" },
   { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress_fresh", capability: "agent-egress-policy", advertisedBy: "device" },
   { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress_fresh", capability: "agent-egress-reliable-ack", advertisedBy: "device" },
   { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress_fresh", capability: "agent-egress-fresh-session", advertisedBy: "device" },
   ...EGRESS_OFFER_FIELDS("task.offer_for_agent_with_egress_fresh"),
   { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress_fresh", field: "agentMemory", capability: "agent-memory-selection", advertisedBy: "device" },
+  { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress_fresh", field: "agentMemory", value: "read-if-admitted", capability: "agent-memory-read-if-admitted", advertisedBy: "device" },
+  { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress_fresh", field: "agentMemory", value: "read-write-if-admitted", capability: "agent-memory-read-write-if-admitted", advertisedBy: "device" },
   { kind: "envelope", rule: "gated", surface: "task.offer_prepared", capability: "agent-home-contract", advertisedBy: "device" },
   { kind: "envelope", rule: "gated", surface: "task.offer_prepared", capability: "agent-input-preparation-v9", advertisedBy: "device" },
   { kind: "envelope", rule: "gated", surface: "task.offer_prepared", capability: "agent-egress-policy", advertisedBy: "device" },
@@ -138,6 +274,7 @@ var WIRE_ADDITIONS = Object.freeze([
   { kind: "envelope", rule: "gated", surface: "agent.input.preparation", capability: "agent-input-preparation-v9", advertisedBy: "device" },
   { kind: "envelope", rule: "gated", surface: "provider.provisioning.available", capability: "provider-provisioning.v1", advertisedBy: "device" },
   { kind: "envelope", rule: "gated", surface: "agent.memory.intent.available", capability: "agent-memory-intent.v1", advertisedBy: "device" },
+  { kind: "envelope", rule: "gated", surface: "e2ee.key_package.available", capability: "sealed-payload-v1", advertisedBy: "device" },
   // One optional runtime capability, shared by discovery and the claim snapshot.
   { kind: "envelope", rule: "strip-safe", surface: "conn.hello", field: "runtimes[].capabilities.messageDraft" },
   { kind: "envelope", rule: "strip-safe", surface: "conn.hello", field: "harnesses[].capabilities.messageDraft" },
@@ -146,7 +283,16 @@ var WIRE_ADDITIONS = Object.freeze([
   { kind: "envelope", rule: "strip-safe", surface: "task.progress", field: "events[].mcp" },
   // Daemon to server.
   { kind: "envelope", rule: "gated", surface: "agent.message.draft", capability: "agent-message-draft", advertisedBy: "server" },
-  { kind: "envelope", rule: "gated", surface: "task.approval_resolved", capability: "approval_resolved", advertisedBy: "server" }
+  { kind: "envelope", rule: "gated", surface: "task.approval_resolved", capability: "approval_resolved", advertisedBy: "server" },
+  { kind: "envelope", rule: "gated", surface: "task.fail", field: "failure", capability: "runtime-failure-class", advertisedBy: "server" }
+];
+var WIRE_ADDITIONS = Object.freeze([
+  ...PLAIN_ROWS,
+  ...sealedRows(PLAIN_ROWS),
+  SEALED_DECLINE_CODE("sealed_key_unavailable"),
+  SEALED_DECLINE_CODE("sealed_open_failed"),
+  SEALED_DECLINE_CODE("sealed_content_mac_mismatch"),
+  SEALED_DECLINE_CODE("sealing_policy_mismatch")
 ]);
 function requiredReceiverCapabilities(type, payload) {
   const fields = payload !== null && typeof payload === "object" ? payload : {};
@@ -154,7 +300,10 @@ function requiredReceiverCapabilities(type, payload) {
   for (const entry of WIRE_ADDITIONS) {
     if (entry.kind !== "envelope" || entry.rule !== "gated" || entry.surface !== type) continue;
     if (entry.field !== void 0) {
-      const value = fields[entry.field];
+      const value = entry.field.split(".").reduce(
+        (parent, segment) => parent !== null && typeof parent === "object" ? parent[segment] : void 0,
+        fields
+      );
       if (value === void 0) continue;
       if (entry.value !== void 0 && value !== entry.value) continue;
     }
@@ -170,6 +319,154 @@ var BlobRefSchema = z.object({
   contentType: z.string(),
   url: z.string().optional()
 });
+var SEALED_PAYLOAD_VERSION = 1;
+var SEALED_PAYLOAD_SUITE = "byok-sealed-v1.hkdf-sha256.aes-256-gcm";
+var SEALED_PAYLOAD_CATEGORIES = ["task-input", "agent-message", "task-output", "memory-projection"];
+var SEALED_PAYLOAD_V1_CATEGORIES = ["task-input", "task-output"];
+var SEALED_DECLINE_CODES = [
+  "sealed_key_unavailable",
+  "sealed_open_failed",
+  "sealed_content_mac_mismatch",
+  "sealing_policy_mismatch"
+];
+var SEALED_TASK_PLAIN_CODES = Object.freeze({
+  "task.fail": { reason: ["daemon_interrupted", "sealed_key_unavailable"] },
+  "task.decline": { reason: SEALED_DECLINE_CODES },
+  "task.cancelled": { reason: [] }
+});
+function isSealedTaskPlainOutput(type, payload) {
+  const codes = Object.hasOwn(SEALED_TASK_PLAIN_CODES, type) ? SEALED_TASK_PLAIN_CODES[type] : {};
+  const fields = Object.values(SEALED_SPLIT_TABLE).filter((entry) => entry.category === "task-output" && entry.plainType === type).flatMap((entry) => [...entry.moved, ...entry.forbidden]);
+  if (fields.length > 0 && !Object.hasOwn(SEALED_TASK_PLAIN_CODES, type)) return false;
+  const record = payload;
+  for (const field of fields) {
+    const value = record[field];
+    if (value !== void 0 && !(typeof value === "string" && (codes[field] ?? []).includes(value))) return false;
+  }
+  return type !== "task.decline" || record.reason === void 0 || record.code === record.reason;
+}
+var SEALED_INLINE_MAX_PADDED_LENGTH = 256 * 1024;
+var SEALED_PAYLOAD_MAX_CONTENT_LENGTH = 2 * 1024 * 1024;
+var AEAD_TAG_BYTES = 16;
+var FRAME_HEADER_BYTES = 4;
+var ALIGNED_FRAME_LIMIT = 16 * 1024;
+var FRAME_ALIGNMENT = 256;
+var SALT_BYTES = 32;
+var NONCE_BYTES = 12;
+function floorLog2(value) {
+  let exponent = 0;
+  for (let remaining = value; remaining >= 2; remaining = Math.floor(remaining / 2)) exponent += 1;
+  return exponent;
+}
+function sealedPayloadPaddedLength(frameLength) {
+  if (!Number.isSafeInteger(frameLength) || frameLength < FRAME_HEADER_BYTES) {
+    throw new RangeError("Sealed frame length must be a safe integer of at least 4");
+  }
+  if (frameLength <= ALIGNED_FRAME_LIMIT) return Math.ceil(frameLength / FRAME_ALIGNMENT) * FRAME_ALIGNMENT;
+  const exponent = floorLog2(frameLength);
+  const step = 2 ** (exponent - (floorLog2(exponent) + 1));
+  return Math.ceil(frameLength / step) * step;
+}
+var SEALED_PAYLOAD_MAX_PADDED_LENGTH = sealedPayloadPaddedLength(
+  FRAME_HEADER_BYTES + SEALED_PAYLOAD_MAX_CONTENT_LENGTH
+);
+function isLegalPaddedLength(value) {
+  return Number.isSafeInteger(value) && value >= FRAME_ALIGNMENT && value <= SEALED_PAYLOAD_MAX_PADDED_LENGTH && sealedPayloadPaddedLength(value) === value;
+}
+var BASE64URL_VALUE = /^[A-Za-z0-9_-]*$/u;
+var BASE64URL_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
+function sealedBase64UrlByteLength(value) {
+  if (!BASE64URL_VALUE.test(value)) return void 0;
+  const tail = value.length % 4;
+  if (tail === 1) return void 0;
+  if (tail !== 0) {
+    const last = BASE64URL_ALPHABET.indexOf(value[value.length - 1]);
+    const unusedBits = tail === 2 ? 15 : 3;
+    if ((last & unusedBits) !== 0) return void 0;
+  }
+  return Math.floor(value.length / 4) * 3 + (tail === 0 ? 0 : tail - 1);
+}
+function base64UrlOf(bytes) {
+  return z.string().refine((value) => sealedBase64UrlByteLength(value) === bytes, `must be canonical unpadded base64url of ${bytes} bytes`);
+}
+var PositiveIntegerSchema = z.number().int().positive().max(Number.MAX_SAFE_INTEGER);
+function sealedPayloadSchema(category) {
+  return z.object({
+    v: z.literal(SEALED_PAYLOAD_VERSION),
+    suite: z.literal(SEALED_PAYLOAD_SUITE),
+    category,
+    scope: z.object({
+      id: z.string().min(1),
+      epoch: PositiveIntegerSchema,
+      keyId: z.string().regex(/^[A-Za-z0-9_-]{22}$/u)
+    }).strict(),
+    chainHead: z.object({
+      seq: PositiveIntegerSchema,
+      hash: z.string().regex(CONTENT_HASH_RE)
+    }).strict(),
+    sender: z.string().regex(/^[A-Za-z0-9_-]{43}$/u),
+    salt: base64UrlOf(SALT_BYTES),
+    nonce: base64UrlOf(NONCE_BYTES),
+    paddedLength: PositiveIntegerSchema.refine(isLegalPaddedLength, "must be a legal padded frame length within the v1 limit"),
+    contentMac: z.string().regex(/^hmac-sha256:[0-9a-f]{64}$/u),
+    ciphertext: z.string().optional(),
+    /** The ciphertext blob. A presigned `url` is transport detail and never part of a sealed member. */
+    ciphertextRef: BlobRefSchema.omit({ url: true }).strict().optional()
+  }).strict().superRefine((sealed, ctx) => {
+    const ciphertextLength = sealed.paddedLength + AEAD_TAG_BYTES;
+    const inline = sealed.paddedLength <= SEALED_INLINE_MAX_PADDED_LENGTH;
+    if (inline) {
+      if (sealed.ciphertextRef !== void 0 || sealed.ciphertext === void 0) {
+        ctx.addIssue({ code: "custom", path: ["ciphertext"], message: `a padded length up to ${SEALED_INLINE_MAX_PADDED_LENGTH} carries inline ciphertext only` });
+      } else if (sealedBase64UrlByteLength(sealed.ciphertext) !== ciphertextLength) {
+        ctx.addIssue({ code: "custom", path: ["ciphertext"], message: "ciphertext must be canonical base64url of paddedLength + 16 bytes" });
+      }
+      return;
+    }
+    if (sealed.ciphertext !== void 0 || sealed.ciphertextRef === void 0) {
+      ctx.addIssue({ code: "custom", path: ["ciphertextRef"], message: `a padded length above ${SEALED_INLINE_MAX_PADDED_LENGTH} carries ciphertextRef only` });
+    } else if (sealed.ciphertextRef.size !== ciphertextLength) {
+      ctx.addIssue({ code: "custom", path: ["ciphertextRef", "size"], message: "ciphertextRef size must equal paddedLength + 16" });
+    }
+  });
+}
+var SealedPayloadSchema = sealedPayloadSchema(z.enum(SEALED_PAYLOAD_V1_CATEGORIES));
+var SealedTaskInputSchema = sealedPayloadSchema(z.literal("task-input"));
+var SealedTaskOutputSchema = sealedPayloadSchema(z.literal("task-output"));
+function isCanonicalCategoryList(categories) {
+  return categories.every((category, index) => index === 0 || SEALED_PAYLOAD_CATEGORIES.indexOf(categories[index - 1]) < SEALED_PAYLOAD_CATEGORIES.indexOf(category));
+}
+var TaskSealingSchema = z.object({
+  scopeId: z.string().min(1),
+  epoch: PositiveIntegerSchema,
+  categories: z.array(z.enum(SEALED_PAYLOAD_V1_CATEGORIES)).min(1).refine(isCanonicalCategoryList, "categories must be unique and in canonical order")
+}).strict();
+var CanonicalInstantSchema = z.string().regex(/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u).refine((value) => {
+  const instant = Date.parse(value);
+  return Number.isFinite(instant) && new Date(instant).toISOString() === value;
+}, "must be a canonical UTC instant");
+var RoutineRefSchema = z.object({
+  routineId: z.string().min(1),
+  definitionVersion: z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER),
+  notAfter: CanonicalInstantSchema
+}).strict();
+function sealedOfferRule(payload, ctx) {
+  const { instruction, sealing, sealed, routineRef } = payload;
+  if (!sealing.categories.includes("task-input")) {
+    if (routineRef !== void 0) ctx.addIssue({ code: "custom", path: ["routineRef"], message: "a routine template is sealed task input, so routineRef needs a task that seals task-input" });
+    if (sealed !== void 0) ctx.addIssue({ code: "custom", path: ["sealed"], message: "a task that does not seal task-input carries no sealed member" });
+    if (instruction === void 0) ctx.addIssue({ code: "custom", path: ["instruction"], message: "a task that does not seal task-input carries a plaintext instruction" });
+    return;
+  }
+  if (sealed === void 0) {
+    ctx.addIssue({ code: "custom", path: ["sealed"], message: "a task that seals task-input carries the sealed instruction" });
+    return;
+  }
+  if (instruction !== void 0) ctx.addIssue({ code: "custom", path: ["instruction"], message: "a sealed instruction never travels in plaintext too" });
+  if (sealed.scope.id !== sealing.scopeId || sealed.scope.epoch !== sealing.epoch) {
+    ctx.addIssue({ code: "custom", path: ["sealed", "scope"], message: "the offer task-input must be sealed under the task scope at the task epoch" });
+  }
+}
 var ProviderProfileRefSchema = z.string().min(1).max(64).regex(/^[a-z0-9]+(?:[-_][a-z0-9]+)*$/u, "provider profile refs must be lowercase portable identifiers");
 var ProviderProfileRevisionSchema = z.string().regex(/^(?:0|[1-9][0-9]{0,19})$/u, "provider profile revision must be canonical decimal");
 var ProviderProfileHashSchema = z.string().regex(/^sha256:[0-9a-f]{64}$/u, "provider profile hash must be lowercase sha256");
@@ -1177,6 +1474,87 @@ var AgentHomeProjectionValueSchema = z.json().refine(
   (value) => new TextEncoder().encode(JSON.stringify(value)).byteLength <= AGENT_HOME_PROJECTION_MAX_BYTES,
   `projection must not exceed ${AGENT_HOME_PROJECTION_MAX_BYTES} UTF-8 JSON bytes`
 );
+var E2EE_MEMBER_CHAIN_APPEND_MAX_ENTRIES = 64;
+var E2EE_MEMBER_CHAIN_ENTRY_MAX_BYTES = 65536;
+var E2EE_MEMBER_CHAIN_READ_MAX_ENTRIES = 256;
+var E2EE_SCOPE_KEY_PACKAGE_PUT_MAX = 256;
+var E2EE_SCOPE_ID_MAX_LENGTH = 512;
+var E2EE_MEMBER_KEY_REGISTER_OPERATION = "e2ee-member-key.register";
+var E2EE_MEMBER_CHAIN_APPEND_OPERATION = "e2ee-member-chain.append";
+var E2EE_SCOPE_KEY_PACKAGE_PUT_OPERATION = "e2ee-scope-key-package.put";
+function base64UrlBytes(bytes) {
+  const length = Math.ceil(bytes * 4 / 3);
+  const last = ["[A-Za-z0-9_-]", "[AQgw]", "[AEIMQUYcgkosw048]"][bytes % 3];
+  return z.string().regex(new RegExp(`^[A-Za-z0-9_-]{${length - 1}}${last}$`, "u"));
+}
+var MemberIdSchema = z.string().regex(/^[A-Za-z0-9_-]{43}$/u);
+var PositiveSafeIntegerSchema = z.number().int().positive().max(Number.MAX_SAFE_INTEGER);
+var SignatureSchema = base64UrlBytes(64);
+var P256PublicJwkSchema = z.strictObject({
+  kty: z.literal("EC"),
+  crv: z.literal("P-256"),
+  x: base64UrlBytes(32),
+  y: base64UrlBytes(32)
+});
+var E2eeMemberKeyBundleSchema = z.strictObject({
+  v: z.literal(1),
+  memberId: MemberIdSchema,
+  signingPublicJwk: P256PublicJwkSchema,
+  kemPublicJwk: P256PublicJwkSchema,
+  kemEpoch: PositiveSafeIntegerSchema,
+  kemSig: SignatureSchema,
+  deviceId: z.string().min(1).optional()
+});
+var E2EE_MEMBER_CHAIN_OPS = ["add", "remove", "rotate", "scope-policy", "shred"];
+var E2eeScopeShredSubjectSchema = z.strictObject({ scopeId: z.string().min(1) });
+var E2eeMemberChainEntrySchema = z.strictObject({
+  v: z.literal(1),
+  tenantId: z.string().min(1),
+  seq: PositiveSafeIntegerSchema,
+  prev: z.union([z.null(), z.string().regex(CONTENT_HASH_RE)]),
+  op: z.enum(E2EE_MEMBER_CHAIN_OPS),
+  subject: z.custom(
+    (value) => value !== null && typeof value === "object" && !Array.isArray(value)
+  ),
+  signer: MemberIdSchema,
+  sig: SignatureSchema
+}).refine((entry) => entry.seq === 1 === (entry.prev === null), {
+  path: ["prev"],
+  message: "the first entry, and only the first, has no prev"
+}).refine((entry) => entry.op !== "shred" || E2eeScopeShredSubjectSchema.safeParse(entry.subject).success, {
+  path: ["subject"],
+  message: "a shred subject is exactly { scopeId }"
+});
+var E2eeScopeKeyPackageSchema = z.strictObject({
+  v: z.literal(1),
+  tenantId: z.string().min(1),
+  scopeId: z.string().min(1),
+  epoch: PositiveSafeIntegerSchema,
+  keyId: z.string().regex(/^[A-Za-z0-9_-]{22}$/u),
+  recipient: MemberIdSchema,
+  sender: MemberIdSchema,
+  enc: base64UrlBytes(65),
+  ciphertext: base64UrlBytes(48),
+  sig: SignatureSchema
+});
+var E2eePairingMacSchema = base64UrlBytes(32);
+var E2eeMemberKeyRegisterRequestSchema = z.strictObject({
+  member: E2eeMemberKeyBundleSchema.refine((member) => member.deviceId !== void 0, {
+    message: "a device member names its deviceId"
+  }),
+  mac: E2eePairingMacSchema
+});
+var E2eeClientPairingMacSchema = z.strictObject({
+  mac: E2eePairingMacSchema,
+  member: E2eeMemberKeyBundleSchema.refine((member) => member.deviceId === void 0, {
+    message: "a client member has no deviceId"
+  }),
+  chainHead: z.strictObject({ seq: PositiveSafeIntegerSchema, hash: z.string().regex(CONTENT_HASH_RE) })
+});
+var E2eeKeyPackageAvailablePayloadSchema = z.strictObject({
+  scopeId: z.string().min(1).max(E2EE_SCOPE_ID_MAX_LENGTH),
+  epoch: PositiveSafeIntegerSchema
+});
 
 // src/messages.ts
 var MAX_INLINE_BYTES = 64 * 1024;
@@ -1283,7 +1661,9 @@ var DispatchSelectionSchema = z.discriminatedUnion("lane", [
     providerProfile: ProviderProfileBindingSchema
   }).strict()
 ]);
+var NO_SEALED_MEMBER = { sealed: z.never().optional(), sealing: z.never().optional() };
 var TaskOfferPayloadSchema = z.object({
+  ...NO_SEALED_MEMBER,
   instruction: z.union([z.string(), InstructionBlobRefSchema]),
   runtime: RuntimeIdSchema.optional(),
   harnessId: HarnessIdSchema.optional(),
@@ -1300,11 +1680,17 @@ var TaskOfferWithToolsetsPayloadSchema = TaskOfferPayloadSchema.extend({
   requiredToolsets: RequiredToolsetsSchema
 }).strict();
 var AgentHomeAccessSchema = z.literal("memory-reader");
+var AgentMemorySelectionSchema = z.enum([
+  ...PreparedAgentMemoryModeSchema.options,
+  "read-if-admitted",
+  "read-write-if-admitted"
+]);
 var TaskOfferForAgentPayloadSchema = z.object({
+  ...NO_SEALED_MEMBER,
   instruction: z.union([z.string(), InstructionBlobRefSchema]),
   agentRef: AgentRefSchema,
   homeAccess: AgentHomeAccessSchema.optional(),
-  agentMemory: PreparedAgentMemoryModeSchema.optional(),
+  agentMemory: AgentMemorySelectionSchema.optional(),
   requiredToolsets: RequiredToolsetsSchema.optional(),
   runtime: RuntimeIdSchema.optional(),
   harnessId: HarnessIdSchema.optional(),
@@ -1524,6 +1910,7 @@ var TaskCancelPayloadSchema = z.object({
   reason: z.string().optional()
 });
 var TaskSteerPayloadSchema = z.object({
+  ...NO_SEALED_MEMBER,
   text: z.string()
 });
 var TaskClaimPayloadSchema = z.object({
@@ -1535,17 +1922,25 @@ var TaskClaimPayloadSchema = z.object({
   capabilities: RuntimeCapabilitiesSchema.optional()
 });
 var TaskStartedPayloadSchema = z.object({});
-var TaskDeclinePayloadSchema = z.object({
+var HOME_DECLINE_CODES = ["agent_home_writer_busy", "agent_home_reader_busy"];
+var DeclineFields = z.object({
+  ...NO_SEALED_MEMBER,
   reason: z.string(),
   retryable: z.boolean().optional(),
   agentRef: AgentRefSchema.optional(),
-  code: z.enum(["agent_home_writer_busy", "agent_home_reader_busy"]).optional()
+  code: z.enum([...HOME_DECLINE_CODES, ...SEALED_DECLINE_CODES]).optional()
 });
+var TaskDeclinePayloadSchema = DeclineFields.refine(
+  (p) => !SEALED_DECLINE_CODES.includes(p.code) || p.reason === p.code && p.retryable !== true,
+  { message: "a sealed code needs reason === code, not retryable" }
+);
 var TaskProgressPayloadSchema = z.object({
+  ...NO_SEALED_MEMBER,
   seq: z.number().int(),
   events: z.array(AgentEventOrUnknownSchema)
 });
 var TaskArtifactPayloadSchema = z.object({
+  ...NO_SEALED_MEMBER,
   name: z.string(),
   contentType: z.string(),
   inline: z.string().refine(isWithinInlineByteLimit, {
@@ -1554,6 +1949,7 @@ var TaskArtifactPayloadSchema = z.object({
   blobRef: BlobRefSchema.optional()
 });
 var TaskAwaitApprovalPayloadSchema = z.object({
+  ...NO_SEALED_MEMBER,
   summary: z.string(),
   approvalId: z.string().optional()
 });
@@ -1610,6 +2006,7 @@ var TerminalAgentHomeMemoryChangeSchema = z.discriminatedUnion("outcome", [
   z.object({ outcome: z.literal("unmeasured") }).strict()
 ]);
 var TaskCompletePayloadSchema = z.object({
+  ...NO_SEALED_MEMBER,
   harnessId: HarnessIdSchema.optional(),
   summary: z.string(),
   /**
@@ -1633,12 +2030,20 @@ var TaskCompletePayloadSchema = z.object({
   agentHomeProjection: TerminalAgentHomeProjectionSchema.optional(),
   agentHomeMemoryChange: TerminalAgentHomeMemoryChangeSchema.optional()
 });
+var RuntimeFailureClassSchema = z.enum(RUNTIME_FAILURE_CLASSES);
+var TaskFailureSchema = z.union([
+  z.object({ class: z.literal("quota"), resetsAt: z.iso.datetime().optional() }).strict(),
+  z.object({ class: RuntimeFailureClassSchema.exclude(["quota"]) }).strict()
+]);
 var TaskFailPayloadSchema = z.object({
+  ...NO_SEALED_MEMBER,
   /** Local interruption observation bound to the immutable offer; does not assert a cloud claim. */
   recovery: z.object({ kind: z.literal("daemon_interrupted"), offerId: z.uuid() }).strict().optional(),
   harnessId: HarnessIdSchema.optional(),
   reason: z.string(),
   retryable: z.boolean().optional(),
+  /** Gated on the server's `runtime-failure-class` flag. Plaintext on `task.fail_sealed`. */
+  failure: TaskFailureSchema.optional(),
   usage: TerminalInferenceUsageSchema.optional(),
   /** Present on a prepared Execution that observed provider usage before failing. */
   preparedObservation: TerminalPreparedObservationSchema.optional(),
@@ -1647,6 +2052,7 @@ var TaskFailPayloadSchema = z.object({
   agentHomeMemoryChange: TerminalAgentHomeMemoryChangeSchema.optional()
 });
 var TaskCancelledPayloadSchema = z.object({
+  ...NO_SEALED_MEMBER,
   harnessId: HarnessIdSchema.optional(),
   reason: z.string().optional(),
   usage: TerminalInferenceUsageSchema.optional(),
@@ -1660,13 +2066,42 @@ var TaskApprovalResolvedPayloadSchema = z.object({
   resolvedBy: z.enum(["local"]),
   at: z.iso.datetime({ offset: true })
 });
+var SEALED_OFFER_FIELDS = {
+  instruction: z.union([z.string(), InstructionBlobRefSchema]).optional(),
+  sealing: TaskSealingSchema,
+  sealed: SealedTaskInputSchema.optional()
+};
+var TaskOfferSealedPayloadSchema = TaskOfferPayloadSchema.extend(SEALED_OFFER_FIELDS).strict().superRefine(sealedOfferRule);
+var TaskOfferWithToolsetsSealedPayloadSchema = TaskOfferWithToolsetsPayloadSchema.extend(SEALED_OFFER_FIELDS).strict().superRefine(sealedOfferRule);
+var TaskOfferForAgentSealedPayloadSchema = TaskOfferForAgentPayloadSchema.extend(SEALED_OFFER_FIELDS).strict().superRefine(sealedOfferRule);
+var TaskOfferForAgentWithEgressSealedPayloadSchema = TaskOfferForAgentWithEgressPayloadSchema.extend(SEALED_OFFER_FIELDS).strict().superRefine(sealedOfferRule);
+var TaskOfferForAgentWithEgressFreshSealedPayloadSchema = TaskOfferForAgentWithEgressFreshPayloadSchema.extend({ ...SEALED_OFFER_FIELDS, routineRef: RoutineRefSchema.optional() }).strict().superRefine(sealedOfferRule);
+var TaskSteerSealedPayloadSchema = z.object({ steerId: z.uuid(), sealed: SealedTaskInputSchema }).strict();
+var TaskCompleteSealedPayloadSchema = TaskCompletePayloadSchema.omit({
+  summary: true,
+  finalMessage: true,
+  document: true,
+  artifactRefs: true,
+  preparedObservation: true
+}).extend({ sealed: SealedTaskOutputSchema }).strict();
+var TaskFailSealedPayloadSchema = TaskFailPayloadSchema.omit({ reason: true, preparedObservation: true }).extend({ sealed: SealedTaskOutputSchema }).strict();
+var TaskDeclineSealedPayloadSchema = DeclineFields.omit({ reason: true }).extend({ code: z.enum(HOME_DECLINE_CODES).optional(), sealed: SealedTaskOutputSchema }).strict();
+var TaskCancelledSealedPayloadSchema = TaskCancelledPayloadSchema.omit({ reason: true }).extend({ sealed: SealedTaskOutputSchema }).strict();
+var TaskProgressSealedPayloadSchema = TaskProgressPayloadSchema.omit({ events: true }).extend({ sealed: SealedTaskOutputSchema }).strict();
+var TaskArtifactSealedPayloadSchema = TaskArtifactPayloadSchema.omit({ inline: true, blobRef: true }).extend({ artifactId: z.uuid(), sealed: SealedTaskOutputSchema }).strict();
+var TaskAwaitApprovalSealedPayloadSchema = TaskAwaitApprovalPayloadSchema.omit({ summary: true }).extend({ approvalId: z.string().min(1), sealed: SealedTaskOutputSchema }).strict();
 var TASK_OFFER_PAYLOAD_SCHEMAS = {
   "task.offer": TaskOfferPayloadSchema,
   "task.offer_with_toolsets": TaskOfferWithToolsetsPayloadSchema,
   "task.offer_for_agent": TaskOfferForAgentPayloadSchema,
   "task.offer_for_agent_with_egress": TaskOfferForAgentWithEgressPayloadSchema,
   "task.offer_for_agent_with_egress_fresh": TaskOfferForAgentWithEgressFreshPayloadSchema,
-  "task.offer_prepared": TaskOfferPreparedPayloadSchema
+  "task.offer_prepared": TaskOfferPreparedPayloadSchema,
+  "task.offer_sealed": TaskOfferSealedPayloadSchema,
+  "task.offer_with_toolsets_sealed": TaskOfferWithToolsetsSealedPayloadSchema,
+  "task.offer_for_agent_sealed": TaskOfferForAgentSealedPayloadSchema,
+  "task.offer_for_agent_with_egress_sealed": TaskOfferForAgentWithEgressSealedPayloadSchema,
+  "task.offer_for_agent_with_egress_fresh_sealed": TaskOfferForAgentWithEgressFreshSealedPayloadSchema
 };
 var TASK_OFFER_TYPES = Object.freeze(
   Object.keys(TASK_OFFER_PAYLOAD_SCHEMAS)
@@ -1702,7 +2137,16 @@ var MESSAGE_PAYLOAD_SCHEMAS = {
   "task.complete": TaskCompletePayloadSchema,
   "task.fail": TaskFailPayloadSchema,
   "task.cancelled": TaskCancelledPayloadSchema,
-  "task.approval_resolved": TaskApprovalResolvedPayloadSchema
+  "task.approval_resolved": TaskApprovalResolvedPayloadSchema,
+  "task.steer_sealed": TaskSteerSealedPayloadSchema,
+  "task.complete_sealed": TaskCompleteSealedPayloadSchema,
+  "task.fail_sealed": TaskFailSealedPayloadSchema,
+  "task.decline_sealed": TaskDeclineSealedPayloadSchema,
+  "task.cancelled_sealed": TaskCancelledSealedPayloadSchema,
+  "task.progress_sealed": TaskProgressSealedPayloadSchema,
+  "task.artifact_sealed": TaskArtifactSealedPayloadSchema,
+  "task.await_approval_sealed": TaskAwaitApprovalSealedPayloadSchema,
+  "e2ee.key_package.available": E2eeKeyPackageAvailablePayloadSchema
 };
 var MESSAGE_TYPES = Object.keys(MESSAGE_PAYLOAD_SCHEMAS);
 var SERVER_TO_DAEMON_TYPES = [
@@ -1723,7 +2167,14 @@ var SERVER_TO_DAEMON_TYPES = [
   "task.approve",
   "task.reject",
   "task.cancel",
-  "task.steer"
+  "task.steer",
+  "task.offer_sealed",
+  "task.offer_with_toolsets_sealed",
+  "task.offer_for_agent_sealed",
+  "task.offer_for_agent_with_egress_sealed",
+  "task.offer_for_agent_with_egress_fresh_sealed",
+  "task.steer_sealed",
+  "e2ee.key_package.available"
 ];
 var DAEMON_TO_SERVER_TYPES = [
   "task.claim",
@@ -1739,7 +2190,14 @@ var DAEMON_TO_SERVER_TYPES = [
   "agent.egress.reliable",
   "agent.message.draft",
   "agent.message.publish",
-  "agent.content.receipt"
+  "agent.content.receipt",
+  "task.complete_sealed",
+  "task.fail_sealed",
+  "task.decline_sealed",
+  "task.cancelled_sealed",
+  "task.progress_sealed",
+  "task.artifact_sealed",
+  "task.await_approval_sealed"
 ];
 
 // src/agent-memory-intent.ts
@@ -2035,7 +2493,24 @@ var EnvelopeSchema = z.discriminatedUnion("type", [
   envelopeShape("agent.egress.reliable", OPTIONAL_TASK_ID, OPTIONAL_SEQ),
   envelopeShape("agent.message.draft", REQUIRED_TASK_ID, OPTIONAL_SEQ),
   envelopeShape("agent.message.publish", REQUIRED_TASK_ID, OPTIONAL_SEQ),
-  envelopeShape("agent.content.receipt", OPTIONAL_TASK_ID, OPTIONAL_SEQ)
+  envelopeShape("agent.content.receipt", OPTIONAL_TASK_ID, OPTIONAL_SEQ),
+  // Sealed payload v1 (#654). Appended last, so every released branch keeps
+  // its position in the union.
+  envelopeShape("task.offer_sealed", REQUIRED_TASK_ID, REQUIRED_SEQ),
+  envelopeShape("task.offer_with_toolsets_sealed", REQUIRED_TASK_ID, REQUIRED_SEQ),
+  envelopeShape("task.offer_for_agent_sealed", REQUIRED_TASK_ID, REQUIRED_SEQ),
+  envelopeShape("task.offer_for_agent_with_egress_sealed", REQUIRED_TASK_ID, REQUIRED_SEQ),
+  envelopeShape("task.offer_for_agent_with_egress_fresh_sealed", REQUIRED_TASK_ID, REQUIRED_SEQ),
+  envelopeShape("task.steer_sealed", REQUIRED_TASK_ID, REQUIRED_SEQ),
+  envelopeShape("task.complete_sealed", REQUIRED_TASK_ID, OPTIONAL_SEQ),
+  envelopeShape("task.fail_sealed", REQUIRED_TASK_ID, OPTIONAL_SEQ),
+  envelopeShape("task.decline_sealed", REQUIRED_TASK_ID, OPTIONAL_SEQ),
+  envelopeShape("task.cancelled_sealed", REQUIRED_TASK_ID, OPTIONAL_SEQ),
+  envelopeShape("task.progress_sealed", REQUIRED_TASK_ID, OPTIONAL_SEQ),
+  envelopeShape("task.artifact_sealed", REQUIRED_TASK_ID, OPTIONAL_SEQ),
+  envelopeShape("task.await_approval_sealed", REQUIRED_TASK_ID, OPTIONAL_SEQ),
+  // E2EE key package notice (#654 E2c-3), appended for the same reason.
+  envelopeShape("e2ee.key_package.available", FORBIDDEN_TASK_ID, REQUIRED_SEQ)
 ]);
 function isServerToDaemonType(type) {
   return SERVER_TO_DAEMON_TYPES.includes(type);
@@ -2236,6 +2711,7 @@ var EventsPollResponseSchema = z.object({
   ingress: ActivityIngressSchema
 });
 var MAX_MESSAGES_PER_BATCH = 256;
+var MESSAGES_SEND_MAX_BODY_BYTES = 2 * 1024 * 1024;
 var MessagesSendRequestSchema = z.object({
   messages: z.array(EnvelopeSchema).max(MAX_MESSAGES_PER_BATCH)
 });
@@ -2350,6 +2826,10 @@ var BYOK_RECORD_ROUTE = "/byok/records/:kind/:key";
 function byokRecordPath(kind, key) {
   return `/byok/records/${encodeURIComponent(kind)}/${encodeURIComponent(key)}`;
 }
+var BYOK_E2EE_MEMBER_KEY_PATH = "/byok/e2ee/member-key";
+var BYOK_E2EE_CHAIN_PATH = "/byok/e2ee/chain";
+var BYOK_E2EE_KEY_PACKAGES_PATH = "/byok/e2ee/key-packages";
+var BYOK_E2EE_PAIRING_MAC_PATH = "/byok/e2ee/pairing-mac";
 var BYOK_SKILL_PACKS_PATH = "/byok/skill-packs";
 var BYOK_SKILL_PACK_FILE_ROUTE = "/byok/skill-packs/:name/files/:path";
 function byokSkillPackFilePath(name, path) {
@@ -2558,6 +3038,6 @@ function composeBotTurnOutcomeSchema(fragments, required = []) {
   return admitted.canonical;
 }
 
-export { AGENT_CONTENT_ARTIFACT_READ_CAPABILITY, AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY, AGENT_CONTENT_WORKSPACE_READ_CAPABILITY, AGENT_EGRESS_FRESH_SESSION_CAPABILITY, AGENT_EGRESS_POLICY_CAPABILITY, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY, AGENT_EVENT_SPILL_UNSTORED_REASON_MAX_LENGTH, AGENT_HOME_MEMORY_DIGEST_MAX_BYTES, AGENT_HOME_MEMORY_DIGEST_MAX_FILES, AGENT_HOME_MEMORY_PATH_MAX_LENGTH, AGENT_HOME_PROJECTION_CAPABILITY, AGENT_HOME_PROJECTION_MAX_BYTES, AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM, AGENT_HOME_READERS_CAPABILITY, AGENT_INPUT_PREPARATION_CAPABILITY, AGENT_MEMORY_INTENT_APPROVAL_REF_MAX_BYTES, AGENT_MEMORY_INTENT_CAPABILITY, AGENT_MEMORY_INTENT_CONTENT_MAX_BYTES, AGENT_MEMORY_INTENT_FETCH_DISPOSITIONS, AGENT_MEMORY_INTENT_FETCH_DISPOSITIONS_BY_RESERVATION, AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES, AGENT_MEMORY_INTENT_OPERATIONS, AGENT_MEMORY_INTENT_PATH_MAX_BYTES, AGENT_MEMORY_INTENT_READBACK_DISPOSITIONS, AGENT_MEMORY_INTENT_REJECTION_CODES, AGENT_MEMORY_INTENT_RESERVATIONS, AGENT_MEMORY_MAX_SNAPSHOT_BYTES, AGENT_MEMORY_MAX_SNAPSHOT_FILES, AGENT_MEMORY_PROJECTION_CAPABILITY, AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE, AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES, AGENT_MEMORY_SELECTION_CAPABILITY, AGENT_MESSAGE_DRAFT_FRAME_MAX_BYTES, AGENT_MESSAGE_EGRESS_CAPABILITY, AGENT_MESSAGE_MAX_BYTES, AGENT_REF_MAX_BYTES, ActivityIngressSchema, AgentContentActorKindSchema, AgentContentActorSchema, AgentContentDecodeAsSchema, AgentContentMimeTypeSchema, AgentContentReadDecisionSchema, AgentContentReadDenialReasonSchema, AgentContentReadPayloadSchema, AgentContentReadSurfaceSchema, AgentContentReceiptPayloadSchema, AgentEgressAckPayloadSchema, AgentEgressActivityPolicySchema, AgentEgressContentHashSchema, AgentEgressDropReasonSchema, AgentEgressLaneSchema, AgentEgressPolicyRevisionSchema, AgentEgressPolicySchema, AgentEgressReliablePayloadSchema, AgentEventOrUnknownSchema, AgentEventSchema, AgentEventSpillSchema, AgentHomeAccessSchema, AgentHomeProjectionAgentRefSchema, AgentHomeProjectionCompletionRequestSchema, AgentHomeProjectionHashSchema, AgentHomeProjectionOutcomeSchema, AgentHomeProjectionPayloadSchema, AgentHomeProjectionProfileRevisionSchema, AgentHomeProjectionReadbackSchema, AgentHomeProjectionStatusSchema, AgentHomeProjectionValueSchema, AgentInputPreparationPayloadSchema, AgentMemoryIntentApprovalRefSchema, AgentMemoryIntentAvailablePayloadSchema, AgentMemoryIntentCompletionSchema, AgentMemoryIntentContentSchema, AgentMemoryIntentFetchRequestSchema, AgentMemoryIntentFetchResponseSchema, AgentMemoryIntentFileObservationSchema, AgentMemoryIntentHostTerminalCodeSchema, AgentMemoryIntentOperationDigestSchema, AgentMemoryIntentOperationSchema, AgentMemoryIntentPathSchema, AgentMemoryIntentReadbackDispositionSchema, AgentMemoryIntentReadbackSchema, AgentMemoryIntentRejectionCodeSchema, AgentMemoryIntentReservationSchema, AgentMemoryIntentRevisionSchema, AgentMemoryIntentV1Schema, AgentMemoryProjectionCommitRequestSchema, AgentMemoryProjectionCommitResponseSchema, AgentMemoryProjectionEraseResultSchema, AgentMemoryProjectionGrantRefSchema, AgentMemoryProjectionMeteringReceiptSchema, AgentMemoryProjectionMutationSchema, AgentMemoryProjectionReceiptSchema, AgentMemoryProjectionSessionRefSchema, AgentMemoryProjectionSnapshotSchema, AgentMemoryProjectionSourceSeqSchema, AgentMemoryProjectionWriterEpochSchema, AgentMessageContentTypeSchema, AgentMessageContractSchema, AgentMessageDestinationBindingSchema, AgentMessageDispositionPayloadSchema, AgentMessageDraftPayloadSchema, AgentMessageEgressRequirementSchema, AgentMessageFreshnessCursorSchema, AgentMessagePublishPayloadSchema, AgentMessageServerContextSchema, AgentRefSchema, AgentReliableQuotaPolicySchema, BOT_TURN_OUTCOME_CONTRACT, BOT_TURN_OUTCOME_LIMITS, BYOK_ACTIVITY_PATH, BYOK_AGENT_HOME_PROJECTIONS_PATH, BYOK_AGENT_HOME_PROJECTION_COMPLETION_ROUTE, BYOK_AGENT_MEMORY_PROJECTIONS_PATH, BYOK_BLOBS_PATH, BYOK_BLOB_CONTENT_ROUTE, BYOK_BLOB_FINALIZE_ROUTE, BYOK_BLOB_URL_ROUTE, BYOK_BOARD_CLAIM_ROUTE, BYOK_BOARD_PATH, BYOK_BOARD_STATUS_ROUTE, BYOK_BOARD_STREAM_PATH, BYOK_BOARD_UNCLAIM_ROUTE, BYOK_CAPABILITIES_PATH, BYOK_CHALLENGE_PATH, BYOK_EVENTS_PATH, BYOK_INPUT_PREPARATIONS_PATH, BYOK_INPUT_PREPARATION_COMPLETION_ROUTE, BYOK_INPUT_PREPARATION_STATUS_ROUTE, BYOK_MESSAGES_PATH, BYOK_PAIR_PATH, BYOK_PRESENCE_PATH, BYOK_RECORDS_PATH, BYOK_RECORD_ROUTE, BYOK_SKILL_PACKS_PATH, BYOK_SKILL_PACK_FILE_ROUTE, BYOK_TOKEN_PATH, BlobDownloadUrlResponseSchema, BlobRefSchema, BotTurnOutcomeSchemaError, CAPABILITY_FLAGS, CONFIGURED_TOOLSETS_MAX_ITEMS, CONTENT_HASH_RE, CUSTOM_HARNESS_CAPABILITY, ChallengeRequestSchema, ChallengeResponseSchema, ConfiguredToolsetsSchema, ConnAckPayloadSchema, ConnHelloPayloadSchema, ContentReadPolicySchema, CreateBlobRequestSchema, CreateBlobResponseSchema, DAEMON_TO_SERVER_TYPES, DispatchSelectionSchema, EnvelopeParseError, EnvelopeSchema, EnvelopeValidationError, EventsPollQuerySchema, EventsPollResponseSchema, HOST_MCP_TASK_CONTEXT_CAPABILITY, HarnessIdSchema, HarnessInfoSchema, HarnessInventorySchema, INPUT_PREPARATION_WIRE_VERSION, InputPreparationAccountingPolicyRefSchema, InputPreparationArtifactSummarySchema, InputPreparationBindingSchema, InputPreparationCompletionRequestSchema, InputPreparationContentHashSchema, InputPreparationContextDocumentSchema, InputPreparationCounterEvidenceSchema, InputPreparationCounterProviderEvidenceSchema, InputPreparationCounterTargetSchema, InputPreparationHostCanonicalAssistantMessageSchema, InputPreparationMessageSchema, InputPreparationModelCostSchema, InputPreparationModelSchema, InputPreparationOfferBindingSchema, InputPreparationOptionsSchema, InputPreparationPolicyRevisionSchema, InputPreparationProfileIdSchema, InputPreparationProjectionSchema, InputPreparationPromptSnapshotSchema, InputPreparationReadbackSchema, InputPreparationReadinessReasonSchema, InputPreparationReceiptSummarySchema, InputPreparationReferenceSchema, InputPreparationRejectionReasonSchema, InputPreparationResidualKeySchema, InputPreparationResidualValueClassSchema, InputPreparationRuntimeIdentitySchema, InputPreparationSelectionSchema, InputPreparationSourceSchema, InputPreparationStateSchema, InputPreparationStatusQuerySchema, InputPreparationStatusSchema, InputPreparationUserMessageSchema, KNOWN_AGENT_EVENT_TYPES, MAILBOX_READ_AHEAD_CAPABILITY, MAILBOX_READ_AHEAD_MAX_SEQS, MAX_MESSAGES_PER_BATCH, MESSAGE_PAYLOAD_SCHEMAS, MESSAGE_TYPES, MessageSendOutcomeSchema, MessagesSendRequestSchema, MessagesSendResponseSchema, OUTBOUND_REFUSAL_REASONS, PAIR_RESPONSE_TENANT_ID_MAX_LENGTH, PREPARED_AGENT_MEMORY_MODES, PROTOCOL_VERSION, PROVIDER_MODEL_CAPABILITIES, PROVIDER_PROFILE_BINDING_CAPABILITY, PROVIDER_PROVISIONING_CAPABILITY, PROVIDER_PROVISIONING_DISPOSITIONS, PROVIDER_PROVISIONING_HOST_TERMINAL_CODES, PROVIDER_PROVISIONING_KEY_CHECK_RESULTS, PROVIDER_PROVISIONING_OPERATIONS, PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM, PROVIDER_PROVISIONING_REJECTION_CODES, PROVIDER_SECRET_SEALING_KEY_REGISTER_OPERATION, PairRequestSchema, PairResponseSchema, PairResponseTenantIdSchema, PreparedAgentMemoryModeSchema, PresencePublishRequestSchema, ProtocolError, ProtocolVersionNumberSchema, ProviderModelCapabilitySchema, ProviderProfileBindingSchema, ProviderProfileHashSchema, ProviderProfileRefSchema, ProviderProfileRevisionSchema, ProviderProvisioningAvailablePayloadSchema, ProviderProvisioningCompletionSchema, ProviderProvisioningDispositionSchema, ProviderProvisioningKeyCheckResultSchema, ProviderProvisioningKeyCheckSchema, ProviderProvisioningOperationDigestSchema, ProviderProvisioningOperationGenerationSchema, ProviderProvisioningOperationSchema, ProviderProvisioningProviderStatusSchema, ProviderProvisioningReadbackSchema, ProviderProvisioningRejectionCodeSchema, RESULT_DOCUMENT_MAX_BYTES, RESULT_ISSUES_MAX_BYTES, RESULT_ISSUES_MAX_COUNT, RESULT_JSON_MAX_DEPTH, RESULT_OUTCOME_MAX_BYTES, RESULT_SCHEMA_INSTANCE_TYPES, RESULT_SCHEMA_KEYWORDS, RESULT_SCHEMA_MAX_BYTES, RESULT_SCHEMA_MAX_DEPTH, ROUTINE_DAYS_OF_WEEK, RUNTIME_IDS, RequiredToolsetsSchema, ResultDocumentSchemaSchema, RuntimeCapabilitiesSchema, RuntimeIdSchema, RuntimeInfoSchema, SERVER_TO_DAEMON_TYPES, STRICT_AGENT_ONLY_CAPABILITY, TASK_OFFER_TYPES, TASK_STATES, TASK_TRANSITIONS, TERMINAL_INFERENCE_USAGE_CLIENT_VERSION_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_MAX_DURATION_MS, TERMINAL_INFERENCE_USAGE_MAX_TOKENS, TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_PROVIDER_MAX_LENGTH, TERMINAL_PROJECTION_SELECTION_CAPABILITY, TaskApprovalResolvedPayloadSchema, TaskApprovePayloadSchema, TaskArtifactPayloadSchema, TaskAwaitApprovalPayloadSchema, TaskCancelPayloadSchema, TaskCancelledPayloadSchema, TaskClaimPayloadSchema, TaskCompletePayloadSchema, TaskDeclinePayloadSchema, TaskFailPayloadSchema, TaskOfferForAgentPayloadSchema, TaskOfferForAgentWithEgressFreshPayloadSchema, TaskOfferForAgentWithEgressPayloadSchema, TaskOfferPayloadSchema, TaskOfferPreparedPayloadSchema, TaskOfferWithToolsetsPayloadSchema, TaskProgressPayloadSchema, TaskRejectPayloadSchema, TaskStartedPayloadSchema, TaskSteerPayloadSchema, TerminalAgentHomeMemoryChangeSchema, TerminalAgentHomeProjectionSchema, TerminalInferenceUsageSchema, TerminalPreparedObservationSchema, TerminalProjectionContractSchema, TerminalProjectionSelectionSchema, TokenRequestSchema, TokenResponseSchema, ToolsetIdSchema, UnknownAgentEventSchema, UnknownMessageTypeError, WIRE_ADDITIONS, agentMemoryIntentFetchResponseSchemaFor, agentMemoryProjectionBase64UrlByteLength, botTurnOutcomeFragments, byokAgentHomeProjectionCompletionPath, byokBlobContentPath, byokBlobFinalizePath, byokBlobUrlPath, byokInputPreparationCompletionPath, byokInputPreparationStatusPath, byokRecordPath, byokSkillPackFilePath, canTransition, checkResultDocument, checkResultSchema, composeBotTurnOutcomeSchema, createEnvelope, decodeEnvelope, encodeEnvelope, isKnownAgentEvent, isPreparedAgentMemoryMode, isServerToDaemonType, isTaskOfferType, parseMessage, partitionAgentEvents, requiredReceiverCapabilities, resultOutcomeMaxBytes, validateResultOutcome };
+export { AGENT_CONTENT_ARTIFACT_READ_CAPABILITY, AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY, AGENT_CONTENT_WORKSPACE_READ_CAPABILITY, AGENT_EGRESS_FRESH_SESSION_CAPABILITY, AGENT_EGRESS_POLICY_CAPABILITY, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY, AGENT_EVENT_SPILL_UNSTORED_REASON_MAX_LENGTH, AGENT_HOME_MEMORY_DIGEST_MAX_BYTES, AGENT_HOME_MEMORY_DIGEST_MAX_FILES, AGENT_HOME_MEMORY_PATH_MAX_LENGTH, AGENT_HOME_PROJECTION_CAPABILITY, AGENT_HOME_PROJECTION_MAX_BYTES, AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM, AGENT_HOME_READERS_CAPABILITY, AGENT_INPUT_PREPARATION_CAPABILITY, AGENT_MEMORY_INTENT_APPROVAL_REF_MAX_BYTES, AGENT_MEMORY_INTENT_CAPABILITY, AGENT_MEMORY_INTENT_CONTENT_MAX_BYTES, AGENT_MEMORY_INTENT_FETCH_DISPOSITIONS, AGENT_MEMORY_INTENT_FETCH_DISPOSITIONS_BY_RESERVATION, AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES, AGENT_MEMORY_INTENT_OPERATIONS, AGENT_MEMORY_INTENT_PATH_MAX_BYTES, AGENT_MEMORY_INTENT_READBACK_DISPOSITIONS, AGENT_MEMORY_INTENT_REJECTION_CODES, AGENT_MEMORY_INTENT_RESERVATIONS, AGENT_MEMORY_MAX_SNAPSHOT_BYTES, AGENT_MEMORY_MAX_SNAPSHOT_FILES, AGENT_MEMORY_PROJECTION_CAPABILITY, AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE, AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES, AGENT_MEMORY_READ_IF_ADMITTED_CAPABILITY, AGENT_MEMORY_READ_WRITE_IF_ADMITTED_CAPABILITY, AGENT_MEMORY_SELECTION_CAPABILITY, AGENT_MESSAGE_DRAFT_FRAME_MAX_BYTES, AGENT_MESSAGE_EGRESS_CAPABILITY, AGENT_MESSAGE_MAX_BYTES, AGENT_REF_MAX_BYTES, ActivityIngressSchema, AgentContentActorKindSchema, AgentContentActorSchema, AgentContentDecodeAsSchema, AgentContentMimeTypeSchema, AgentContentReadDecisionSchema, AgentContentReadDenialReasonSchema, AgentContentReadPayloadSchema, AgentContentReadSurfaceSchema, AgentContentReceiptPayloadSchema, AgentEgressAckPayloadSchema, AgentEgressActivityPolicySchema, AgentEgressContentHashSchema, AgentEgressDropReasonSchema, AgentEgressLaneSchema, AgentEgressPolicyRevisionSchema, AgentEgressPolicySchema, AgentEgressReliablePayloadSchema, AgentEventOrUnknownSchema, AgentEventSchema, AgentEventSpillSchema, AgentHomeAccessSchema, AgentHomeProjectionAgentRefSchema, AgentHomeProjectionCompletionRequestSchema, AgentHomeProjectionHashSchema, AgentHomeProjectionOutcomeSchema, AgentHomeProjectionPayloadSchema, AgentHomeProjectionProfileRevisionSchema, AgentHomeProjectionReadbackSchema, AgentHomeProjectionStatusSchema, AgentHomeProjectionValueSchema, AgentInputPreparationPayloadSchema, AgentMemoryIntentApprovalRefSchema, AgentMemoryIntentAvailablePayloadSchema, AgentMemoryIntentCompletionSchema, AgentMemoryIntentContentSchema, AgentMemoryIntentFetchRequestSchema, AgentMemoryIntentFetchResponseSchema, AgentMemoryIntentFileObservationSchema, AgentMemoryIntentHostTerminalCodeSchema, AgentMemoryIntentOperationDigestSchema, AgentMemoryIntentOperationSchema, AgentMemoryIntentPathSchema, AgentMemoryIntentReadbackDispositionSchema, AgentMemoryIntentReadbackSchema, AgentMemoryIntentRejectionCodeSchema, AgentMemoryIntentReservationSchema, AgentMemoryIntentRevisionSchema, AgentMemoryIntentV1Schema, AgentMemoryProjectionCommitRequestSchema, AgentMemoryProjectionCommitResponseSchema, AgentMemoryProjectionEraseResultSchema, AgentMemoryProjectionGrantRefSchema, AgentMemoryProjectionMeteringReceiptSchema, AgentMemoryProjectionMutationSchema, AgentMemoryProjectionReceiptSchema, AgentMemoryProjectionSessionRefSchema, AgentMemoryProjectionSnapshotSchema, AgentMemoryProjectionSourceSeqSchema, AgentMemoryProjectionWriterEpochSchema, AgentMemorySelectionSchema, AgentMessageContentTypeSchema, AgentMessageContractSchema, AgentMessageDestinationBindingSchema, AgentMessageDispositionPayloadSchema, AgentMessageDraftPayloadSchema, AgentMessageEgressRequirementSchema, AgentMessageFreshnessCursorSchema, AgentMessagePublishPayloadSchema, AgentMessageServerContextSchema, AgentRefSchema, AgentReliableQuotaPolicySchema, BOT_TURN_OUTCOME_CONTRACT, BOT_TURN_OUTCOME_LIMITS, BYOK_ACTIVITY_PATH, BYOK_AGENT_HOME_PROJECTIONS_PATH, BYOK_AGENT_HOME_PROJECTION_COMPLETION_ROUTE, BYOK_AGENT_MEMORY_PROJECTIONS_PATH, BYOK_BLOBS_PATH, BYOK_BLOB_CONTENT_ROUTE, BYOK_BLOB_FINALIZE_ROUTE, BYOK_BLOB_URL_ROUTE, BYOK_BOARD_CLAIM_ROUTE, BYOK_BOARD_PATH, BYOK_BOARD_STATUS_ROUTE, BYOK_BOARD_STREAM_PATH, BYOK_BOARD_UNCLAIM_ROUTE, BYOK_CAPABILITIES_PATH, BYOK_CHALLENGE_PATH, BYOK_E2EE_CHAIN_PATH, BYOK_E2EE_KEY_PACKAGES_PATH, BYOK_E2EE_MEMBER_KEY_PATH, BYOK_E2EE_PAIRING_MAC_PATH, BYOK_EVENTS_PATH, BYOK_INPUT_PREPARATIONS_PATH, BYOK_INPUT_PREPARATION_COMPLETION_ROUTE, BYOK_INPUT_PREPARATION_STATUS_ROUTE, BYOK_MESSAGES_PATH, BYOK_PAIR_PATH, BYOK_PRESENCE_PATH, BYOK_RECORDS_PATH, BYOK_RECORD_ROUTE, BYOK_SKILL_PACKS_PATH, BYOK_SKILL_PACK_FILE_ROUTE, BYOK_TOKEN_PATH, BlobDownloadUrlResponseSchema, BlobRefSchema, BotTurnOutcomeSchemaError, CAPABILITY_FLAGS, CONFIGURED_TOOLSETS_MAX_ITEMS, CONTENT_HASH_RE, CUSTOM_HARNESS_CAPABILITY, ChallengeRequestSchema, ChallengeResponseSchema, ConfiguredToolsetsSchema, ConnAckPayloadSchema, ConnHelloPayloadSchema, ContentReadPolicySchema, CreateBlobRequestSchema, CreateBlobResponseSchema, DAEMON_TO_SERVER_TYPES, DispatchSelectionSchema, E2EE_MEMBER_CHAIN_APPEND_MAX_ENTRIES, E2EE_MEMBER_CHAIN_APPEND_OPERATION, E2EE_MEMBER_CHAIN_ENTRY_MAX_BYTES, E2EE_MEMBER_CHAIN_OPS, E2EE_MEMBER_CHAIN_READ_MAX_ENTRIES, E2EE_MEMBER_KEY_REGISTER_OPERATION, E2EE_SCOPE_ID_MAX_LENGTH, E2EE_SCOPE_KEY_PACKAGE_PUT_MAX, E2EE_SCOPE_KEY_PACKAGE_PUT_OPERATION, E2eeClientPairingMacSchema, E2eeKeyPackageAvailablePayloadSchema, E2eeMemberChainEntrySchema, E2eeMemberKeyBundleSchema, E2eeMemberKeyRegisterRequestSchema, E2eePairingMacSchema, E2eeScopeKeyPackageSchema, EnvelopeParseError, EnvelopeSchema, EnvelopeValidationError, EventsPollQuerySchema, EventsPollResponseSchema, HOST_MCP_TASK_CONTEXT_CAPABILITY, HarnessIdSchema, HarnessInfoSchema, HarnessInventorySchema, INPUT_PREPARATION_WIRE_VERSION, InputPreparationAccountingPolicyRefSchema, InputPreparationArtifactSummarySchema, InputPreparationBindingSchema, InputPreparationCompletionRequestSchema, InputPreparationContentHashSchema, InputPreparationContextDocumentSchema, InputPreparationCounterEvidenceSchema, InputPreparationCounterProviderEvidenceSchema, InputPreparationCounterTargetSchema, InputPreparationHostCanonicalAssistantMessageSchema, InputPreparationMessageSchema, InputPreparationModelCostSchema, InputPreparationModelSchema, InputPreparationOfferBindingSchema, InputPreparationOptionsSchema, InputPreparationPolicyRevisionSchema, InputPreparationProfileIdSchema, InputPreparationProjectionSchema, InputPreparationPromptSnapshotSchema, InputPreparationReadbackSchema, InputPreparationReadinessReasonSchema, InputPreparationReceiptSummarySchema, InputPreparationReferenceSchema, InputPreparationRejectionReasonSchema, InputPreparationResidualKeySchema, InputPreparationResidualValueClassSchema, InputPreparationRuntimeIdentitySchema, InputPreparationSelectionSchema, InputPreparationSourceSchema, InputPreparationStateSchema, InputPreparationStatusQuerySchema, InputPreparationStatusSchema, InputPreparationUserMessageSchema, KNOWN_AGENT_EVENT_TYPES, MAILBOX_READ_AHEAD_CAPABILITY, MAILBOX_READ_AHEAD_MAX_SEQS, MAX_MESSAGES_PER_BATCH, MESSAGES_SEND_MAX_BODY_BYTES, MESSAGE_PAYLOAD_SCHEMAS, MESSAGE_TYPES, MessageSendOutcomeSchema, MessagesSendRequestSchema, MessagesSendResponseSchema, OUTBOUND_REFUSAL_REASONS, PAIR_RESPONSE_TENANT_ID_MAX_LENGTH, PREPARED_AGENT_MEMORY_MODES, PROTOCOL_VERSION, PROVIDER_MODEL_CAPABILITIES, PROVIDER_PROFILE_BINDING_CAPABILITY, PROVIDER_PROVISIONING_CAPABILITY, PROVIDER_PROVISIONING_DISPOSITIONS, PROVIDER_PROVISIONING_HOST_TERMINAL_CODES, PROVIDER_PROVISIONING_KEY_CHECK_RESULTS, PROVIDER_PROVISIONING_OPERATIONS, PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM, PROVIDER_PROVISIONING_REJECTION_CODES, PROVIDER_SECRET_SEALING_KEY_REGISTER_OPERATION, PairRequestSchema, PairResponseSchema, PairResponseTenantIdSchema, PreparedAgentMemoryModeSchema, PresencePublishRequestSchema, ProtocolError, ProtocolVersionNumberSchema, ProviderModelCapabilitySchema, ProviderProfileBindingSchema, ProviderProfileHashSchema, ProviderProfileRefSchema, ProviderProfileRevisionSchema, ProviderProvisioningAvailablePayloadSchema, ProviderProvisioningCompletionSchema, ProviderProvisioningDispositionSchema, ProviderProvisioningKeyCheckResultSchema, ProviderProvisioningKeyCheckSchema, ProviderProvisioningOperationDigestSchema, ProviderProvisioningOperationGenerationSchema, ProviderProvisioningOperationSchema, ProviderProvisioningProviderStatusSchema, ProviderProvisioningReadbackSchema, ProviderProvisioningRejectionCodeSchema, RESULT_DOCUMENT_MAX_BYTES, RESULT_ISSUES_MAX_BYTES, RESULT_ISSUES_MAX_COUNT, RESULT_JSON_MAX_DEPTH, RESULT_OUTCOME_MAX_BYTES, RESULT_SCHEMA_INSTANCE_TYPES, RESULT_SCHEMA_KEYWORDS, RESULT_SCHEMA_MAX_BYTES, RESULT_SCHEMA_MAX_DEPTH, ROUTINE_DAYS_OF_WEEK, RUNTIME_FAILURE_CLASSES, RUNTIME_FAILURE_CLASS_CAPABILITY, RUNTIME_IDS, RequiredToolsetsSchema, ResultDocumentSchemaSchema, RuntimeCapabilitiesSchema, RuntimeFailureClassSchema, RuntimeIdSchema, RuntimeInfoSchema, SEALED_DECLINE_CODES, SEALED_INLINE_MAX_PADDED_LENGTH, SEALED_OUTPUT_CIPHERTEXT_REF_CAPABILITY, SEALED_PAYLOAD_CAPABILITY, SEALED_PAYLOAD_CATEGORIES, SEALED_PAYLOAD_MAX_CONTENT_LENGTH, SEALED_PAYLOAD_MAX_PADDED_LENGTH, SEALED_PAYLOAD_SUITE, SEALED_PAYLOAD_V1_CATEGORIES, SEALED_PAYLOAD_VERSION, SEALED_SPLIT_TABLE, SEALED_TASK_PLAIN_CODES, SERVER_TO_DAEMON_TYPES, STRICT_AGENT_ONLY_CAPABILITY, SealedPayloadSchema, SealedTaskInputSchema, SealedTaskOutputSchema, TASK_OFFER_TYPES, TASK_STATES, TASK_TRANSITIONS, TERMINAL_INFERENCE_USAGE_CLIENT_VERSION_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_MAX_DURATION_MS, TERMINAL_INFERENCE_USAGE_MAX_TOKENS, TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_PROVIDER_MAX_LENGTH, TERMINAL_PROJECTION_SELECTION_CAPABILITY, TaskApprovalResolvedPayloadSchema, TaskApprovePayloadSchema, TaskArtifactPayloadSchema, TaskAwaitApprovalPayloadSchema, TaskCancelPayloadSchema, TaskCancelledPayloadSchema, TaskClaimPayloadSchema, TaskCompletePayloadSchema, TaskDeclinePayloadSchema, TaskFailPayloadSchema, TaskFailureSchema, TaskOfferForAgentPayloadSchema, TaskOfferForAgentWithEgressFreshPayloadSchema, TaskOfferForAgentWithEgressPayloadSchema, TaskOfferPayloadSchema, TaskOfferPreparedPayloadSchema, TaskOfferWithToolsetsPayloadSchema, TaskProgressPayloadSchema, TaskRejectPayloadSchema, TaskSealingSchema, TaskStartedPayloadSchema, TaskSteerPayloadSchema, TerminalAgentHomeMemoryChangeSchema, TerminalAgentHomeProjectionSchema, TerminalInferenceUsageSchema, TerminalPreparedObservationSchema, TerminalProjectionContractSchema, TerminalProjectionSelectionSchema, TokenRequestSchema, TokenResponseSchema, ToolsetIdSchema, UnknownAgentEventSchema, UnknownMessageTypeError, WIRE_ADDITIONS, agentMemoryIntentFetchResponseSchemaFor, agentMemoryProjectionBase64UrlByteLength, botTurnOutcomeFragments, byokAgentHomeProjectionCompletionPath, byokBlobContentPath, byokBlobFinalizePath, byokBlobUrlPath, byokInputPreparationCompletionPath, byokInputPreparationStatusPath, byokRecordPath, byokSkillPackFilePath, canTransition, checkResultDocument, checkResultSchema, composeBotTurnOutcomeSchema, createEnvelope, decodeEnvelope, encodeEnvelope, isKnownAgentEvent, isPreparedAgentMemoryMode, isSealedMessageType, isSealedTaskPlainOutput, isServerToDaemonType, isTaskOfferType, parseMessage, partitionAgentEvents, requiredReceiverCapabilities, resultOutcomeMaxBytes, sealedBase64UrlByteLength, sealedPayloadPaddedLength, validateResultOutcome };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map