@byok-sdk/protocol 0.30.2 → 0.32.0

package/dist/index.js

@@ -1,3059 +1,9 @@
 import { z } from 'zod';
 import { Validator } from '@cfworker/json-schema';
 
-// src/capability-constants.ts
-var INPUT_PREPARATION_WIRE_VERSION = 9;
-var AGENT_EGRESS_POLICY_CAPABILITY = "agent-egress-policy";
-var AGENT_EGRESS_RELIABLE_ACK_CAPABILITY = "agent-egress-reliable-ack";
-var AGENT_EGRESS_FRESH_SESSION_CAPABILITY = "agent-egress-fresh-session";
-var AGENT_MESSAGE_EGRESS_CAPABILITY = "agent-message-egress";
-var AGENT_CONTENT_WORKSPACE_READ_CAPABILITY = "agent-content-workspace-read";
-var AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY = "agent-content-transcript-read";
-var AGENT_CONTENT_ARTIFACT_READ_CAPABILITY = "agent-content-artifact-read";
-var AGENT_HOME_PROJECTION_CAPABILITY = "agent-home-projection";
-var TERMINAL_PROJECTION_SELECTION_CAPABILITY = "terminal-projection-selection";
-var HOST_MCP_TASK_CONTEXT_CAPABILITY = "host-mcp-task-context";
-var PROVIDER_PROFILE_BINDING_CAPABILITY = "provider-profile-binding";
-var PROVIDER_PROVISIONING_CAPABILITY = "provider-provisioning.v1";
-var AGENT_MEMORY_INTENT_CAPABILITY = "agent-memory-intent.v1";
-var AGENT_MEMORY_PROJECTION_CAPABILITY = "agent.memory.projection";
-var AGENT_MEMORY_SELECTION_CAPABILITY = "agent-memory-selection";
-var AGENT_MEMORY_READ_IF_ADMITTED_CAPABILITY = "agent-memory-read-if-admitted";
-var AGENT_MEMORY_READ_WRITE_IF_ADMITTED_CAPABILITY = "agent-memory-read-write-if-admitted";
-var AGENT_INPUT_PREPARATION_CAPABILITY = `agent-input-preparation-v${INPUT_PREPARATION_WIRE_VERSION}`;
-var SEALED_PAYLOAD_CAPABILITY = "sealed-payload-v1";
-var SEALED_OUTPUT_CIPHERTEXT_REF_CAPABILITY = "sealed-output-ciphertext-ref";
-var RUNTIME_FAILURE_CLASS_CAPABILITY = "runtime-failure-class";
-var RUNTIME_FAILURE_CLASSES = [
-  "auth",
-  "quota",
-  "rate_limited",
-  "billing",
-  "model_unavailable",
-  "input_too_large",
-  "invalid_request",
-  "overloaded",
-  "provider",
-  "runtime_exited",
-  "limit_reached",
-  "output_schema",
-  "unknown"
-];
-var PREPARED_AGENT_MEMORY_MODES = ["none", "read", "read-write"];
-function isPreparedAgentMemoryMode(value) {
-  return typeof value === "string" && PREPARED_AGENT_MEMORY_MODES.some((mode) => mode === value);
-}
+var INPUT_PREPARATION_WIRE_VERSION=9;var AGENT_EGRESS_POLICY_CAPABILITY="agent-egress-policy";var AGENT_EGRESS_RELIABLE_ACK_CAPABILITY="agent-egress-reliable-ack";var AGENT_EGRESS_FRESH_SESSION_CAPABILITY="agent-egress-fresh-session";var AGENT_MESSAGE_EGRESS_CAPABILITY="agent-message-egress";var AGENT_CONTENT_WORKSPACE_READ_CAPABILITY="agent-content-workspace-read";var AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY="agent-content-transcript-read";var AGENT_CONTENT_ARTIFACT_READ_CAPABILITY="agent-content-artifact-read";var AGENT_HOME_PROJECTION_CAPABILITY="agent-home-projection";var TERMINAL_PROJECTION_SELECTION_CAPABILITY="terminal-projection-selection";var HOST_MCP_TASK_CONTEXT_CAPABILITY="host-mcp-task-context";var PROVIDER_PROFILE_BINDING_CAPABILITY="provider-profile-binding";var PROVIDER_PROVISIONING_CAPABILITY="provider-provisioning.v1";var AGENT_MEMORY_INTENT_CAPABILITY="agent-memory-intent.v1";var AGENT_MEMORY_PROJECTION_CAPABILITY="agent.memory.projection";var AGENT_MEMORY_SELECTION_CAPABILITY="agent-memory-selection";var AGENT_MEMORY_READ_IF_ADMITTED_CAPABILITY="agent-memory-read-if-admitted";var AGENT_MEMORY_READ_WRITE_IF_ADMITTED_CAPABILITY="agent-memory-read-write-if-admitted";var AGENT_INPUT_PREPARATION_CAPABILITY=`agent-input-preparation-v${INPUT_PREPARATION_WIRE_VERSION}`;var SEALED_PAYLOAD_CAPABILITY="sealed-payload-v1";var SEALED_OUTPUT_CIPHERTEXT_REF_CAPABILITY="sealed-output-ciphertext-ref";var RUNTIME_FAILURE_CLASS_CAPABILITY="runtime-failure-class";var RUNTIME_UNAVAILABLE_CAUSE_CAPABILITY="runtime-unavailable-cause";var RUNTIME_FAILURE_CLASSES=["auth","quota","rate_limited","billing","model_unavailable","input_too_large","invalid_request","overloaded","provider","runtime_exited","limit_reached","output_schema","unknown"];var PREPARED_AGENT_MEMORY_MODES=["none","read","read-write"];function isPreparedAgentMemoryMode(value){return typeof value==="string"&&PREPARED_AGENT_MEMORY_MODES.some(mode=>mode===value)}var MAILBOX_READ_AHEAD_MAX_SEQS=4096;var MAILBOX_READ_AHEAD_CAPABILITY="mailbox-read-ahead";var PROTOCOL_VERSION=4;var AGENT_HOME_READERS_CAPABILITY="agent-home-readers";var CUSTOM_HARNESS_CAPABILITY="custom-harness";var CAPABILITY_FLAGS=["steer","blob-upload","dispatch-selection",PROVIDER_PROFILE_BINDING_CAPABILITY,"toolset-selection","agent-home-contract",AGENT_HOME_READERS_CAPABILITY,AGENT_EGRESS_POLICY_CAPABILITY,AGENT_EGRESS_RELIABLE_ACK_CAPABILITY,AGENT_MESSAGE_EGRESS_CAPABILITY,AGENT_EGRESS_FRESH_SESSION_CAPABILITY,AGENT_CONTENT_WORKSPACE_READ_CAPABILITY,AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY,AGENT_CONTENT_ARTIFACT_READ_CAPABILITY,AGENT_HOME_PROJECTION_CAPABILITY,AGENT_INPUT_PREPARATION_CAPABILITY,TERMINAL_PROJECTION_SELECTION_CAPABILITY,HOST_MCP_TASK_CONTEXT_CAPABILITY,CUSTOM_HARNESS_CAPABILITY,MAILBOX_READ_AHEAD_CAPABILITY,PROVIDER_PROVISIONING_CAPABILITY,AGENT_MEMORY_INTENT_CAPABILITY,AGENT_MEMORY_SELECTION_CAPABILITY,AGENT_MEMORY_READ_IF_ADMITTED_CAPABILITY,AGENT_MEMORY_READ_WRITE_IF_ADMITTED_CAPABILITY,"agent-message-draft",SEALED_PAYLOAD_CAPABILITY,SEALED_OUTPUT_CIPHERTEXT_REF_CAPABILITY,RUNTIME_FAILURE_CLASS_CAPABILITY,RUNTIME_UNAVAILABLE_CAUSE_CAPABILITY];var TASK_STATES=["Offered","Claimed","Running","AwaitApproval","Complete","Failed","Cancelled"];var TASK_TRANSITIONS={Offered:["Claimed","Cancelled","Failed"],Claimed:["Running","Failed","Cancelled"],Running:["AwaitApproval","Complete","Failed","Cancelled"],AwaitApproval:["Running","Failed","Cancelled"],Complete:[],Failed:[],Cancelled:[]};function canTransition(from,to){return TASK_TRANSITIONS[from].includes(to)}var TASK_FAIL_REASON_MAX_BYTES=2048;var REDACTED="[redacted]";var VALUE=String.raw`(?:"(?:\\[^\n]|[^"\\\n])*(?:\\)?"?|'(?:\\[^\n]|[^'\\\n])*(?:\\)?'?|[^\s"'\[\u2026,;&|][^\s"',;&|]*)`;var GAP="[ \\t]{0,16}";var RULES=[[new RegExp(String.raw`\b((?:proxy-)?authorization)(["']?${GAP}[:=]${GAP})(?:(?:bearer|basic|token|digest)[ \t]{1,16})?${VALUE}`,"gi"),`$1$2${REDACTED}`],[/\b(bearer)[ \t]{1,16}[A-Za-z0-9._~+/=-]{8,}/gi,`$1 ${REDACTED}`],[new RegExp(String.raw`(key|token|secret|passw(?:or)?d[\w.-]{0,64})(["']?${GAP}[:=]${GAP})${VALUE}`,"gi"),`$1$2${REDACTED}`],[/:\/\/[^\s/?#@]{1,256}@/g,`://${REDACTED}@`],[/\bsk-[A-Za-z0-9_-]{16,}/g,REDACTED],[/\bxai-[A-Za-z0-9_-]{16,}/g,REDACTED],[/\bAIza[0-9A-Za-z_-]{30,}/g,REDACTED],[/\bgh[pousr]_[A-Za-z0-9]{20,}/g,REDACTED],[/\bgithub_pat_[A-Za-z0-9_]{20,}/g,REDACTED],[/\bAKIA[0-9A-Z]{16}/g,REDACTED],[/\beyJ[A-Za-z0-9_-]{10,}(?:\.[A-Za-z0-9_-]*){0,2}/g,REDACTED]];var encoder=new TextEncoder;var decoder=new TextDecoder("utf-8");function redact(text2){let out=text2;for(const[pattern,replacement]of RULES)out=out.replace(pattern,replacement);return out}function boundFailureReason(reason){const redacted=redact(reason);const bytes=encoder.encode(redacted);if(bytes.length<=TASK_FAIL_REASON_MAX_BYTES)return redacted;let keep=TASK_FAIL_REASON_MAX_BYTES-encoder.encode(`\u2026[truncated ${bytes.length} bytes]`).length;while(keep>0&&((bytes[keep]??0)&192)===128)keep-=1;return `${decoder.decode(bytes.subarray(0,keep))}\u2026[truncated ${bytes.length-keep} bytes]`}var AGENT_MEMORY_MAX_SNAPSHOT_BYTES=1024*1024;var AGENT_MEMORY_MAX_SNAPSHOT_FILES=128;var RUNTIME_IDS=Object.freeze(["pi","claude","codex"]);var RUNTIME_UNAVAILABLE_CAUSES=Object.freeze(["not_installed","not_executable","probe_timeout","probe_failed","app_server_unavailable","acp_unavailable","platform_unsupported","environment_unavailable","version_blocked","runtime_not_configured","runtime_not_allowed","none_available"]);var TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH=160;var TERMINAL_DIGESTS={"agentRef.profileRevision":"plain","agentHomeProjection.profileRevision":"plain","agentHomeProjection.projectionHash":"plain"};var SEALED_SPLIT_TABLE=Object.freeze({"task.offer":{marker:"sealing",category:"task-input",identity:[],moved:["instruction"],forbidden:["preparation"],digests:{"instruction.blobRef.contentHash":"sealed","agentRef.profileRevision":"plain","dispatchSelection.providerProfile.profileRevision":"plain","dispatchSelection.providerProfile.profileHash":"plain","egressPolicy.policyRevision":"plain","preparation.requestDigest":"forbidden","preparation.artifactDigest":"forbidden"}},"task.steer":{marker:"sealed",category:"task-input",identity:["steerId"],moved:["text"],forbidden:[],digests:{}},"task.complete":{marker:"sealed",category:"task-output",identity:[],moved:["summary","finalMessage","document"],forbidden:["artifactRefs","preparedObservation"],digests:{...TERMINAL_DIGESTS,"artifactRefs[].contentHash":"forbidden","preparedObservation.requestDigest":"forbidden"}},"task.fail":{marker:"sealed",category:"task-output",identity:[],moved:["reason"],forbidden:["preparedObservation"],digests:{...TERMINAL_DIGESTS,"preparedObservation.requestDigest":"forbidden"}},"task.decline":{marker:"sealed",category:"task-output",identity:[],moved:["reason"],forbidden:[],digests:{"agentRef.profileRevision":"plain"}},"task.cancelled":{marker:"sealed",category:"task-output",identity:[],moved:["reason"],forbidden:[],digests:TERMINAL_DIGESTS},"task.progress":{marker:"sealed",category:"task-output",identity:["seq"],moved:["events"],forbidden:[],digests:{"events[].spill.blob.contentHash":"sealed"},inlineOnly:true},"task.artifact":{marker:"sealed",category:"task-output",identity:["artifactId"],moved:["inline"],forbidden:["blobRef"],digests:{"blobRef.contentHash":"forbidden"},limits:{inline:2*1024*1024}},"task.await_approval":{marker:"sealed",category:"task-output",identity:["approvalId"],moved:["summary"],forbidden:[],digests:{},inlineOnly:true}});function isSealableMessageType(type){return Object.hasOwn(SEALED_SPLIT_TABLE,type)}function isSealedPayload(type,payload){return isSealableMessageType(type)&&payload!==null&&typeof payload==="object"&&payload[SEALED_SPLIT_TABLE[type].marker]!==void 0}var MATRIX_FIELDS=["toolAuthorizationAuto","durablePi","preparedLane","isolation"];var offerRow=(field,capability,value)=>({kind:"envelope",rule:"gated",surface:"task.offer",...field===void 0?{}:{field},...value===void 0?{}:{value},capability,advertisedBy:"device"});function sealedRows(){return Object.keys(SEALED_SPLIT_TABLE).flatMap(surface=>{const entry=SEALED_SPLIT_TABLE[surface];const advertisedBy=entry.category==="task-input"?"device":"server";const byReference=advertisedBy==="server"&&entry.inlineOnly!==true?[{kind:"envelope",rule:"gated",surface,field:"sealed.ciphertextRef",capability:"sealed-output-ciphertext-ref",advertisedBy}]:[];return [{kind:"envelope",rule:"gated",surface,field:entry.marker,capability:"sealed-payload-v1",advertisedBy},...byReference]})}var SEALED_DECLINE_CODE=value=>({kind:"envelope",rule:"gated",surface:"task.decline",field:"code",value,capability:"sealed-payload-v1",advertisedBy:"server"});var PLAIN_ROWS=[offerRow(void 0,"agent-home-contract"),offerRow("dispatchSelection","dispatch-selection"),offerRow("requiredToolsets","toolset-selection"),offerRow("terminalProjection","terminal-projection-selection"),offerRow("homeAccess","agent-home-readers"),offerRow("harnessId","custom-harness"),offerRow("agentMemory","agent-memory-selection"),offerRow("agentMemory","agent-memory-read-if-admitted","read-if-admitted"),offerRow("agentMemory","agent-memory-read-write-if-admitted","read-write-if-admitted"),offerRow("egressPolicy","agent-egress-policy"),offerRow("egressPolicy","agent-egress-reliable-ack"),offerRow("messageEgress","agent-message-egress"),offerRow("session.mode","agent-egress-fresh-session","fresh"),offerRow("preparation","agent-input-preparation-v9"),{kind:"envelope",rule:"gated",surface:"agent.content.read",capability:"agent-home-contract",advertisedBy:"device"},{kind:"envelope",rule:"gated",surface:"agent.content.read",capability:"agent-egress-policy",advertisedBy:"device"},{kind:"envelope",rule:"gated",surface:"agent.content.read",capability:"agent-egress-reliable-ack",advertisedBy:"device"},{kind:"envelope",rule:"gated",surface:"agent.content.read",field:"surface",value:"workspace",capability:"agent-content-workspace-read",advertisedBy:"device"},{kind:"envelope",rule:"gated",surface:"agent.content.read",field:"surface",value:"transcript",capability:"agent-content-transcript-read",advertisedBy:"device"},{kind:"envelope",rule:"gated",surface:"agent.content.read",field:"surface",value:"artifact",capability:"agent-content-artifact-read",advertisedBy:"device"},{kind:"envelope",rule:"gated",surface:"agent.home.projection",capability:"agent-home-contract",advertisedBy:"device"},{kind:"envelope",rule:"gated",surface:"agent.home.projection",capability:"agent-home-projection",advertisedBy:"device"},{kind:"envelope",rule:"gated",surface:"agent.input.preparation",capability:"agent-home-contract",advertisedBy:"device"},{kind:"envelope",rule:"gated",surface:"agent.input.preparation",capability:"agent-input-preparation-v9",advertisedBy:"device"},{kind:"envelope",rule:"gated",surface:"provider.provisioning.available",capability:"provider-provisioning.v1",advertisedBy:"device"},{kind:"envelope",rule:"gated",surface:"agent.memory.intent.available",capability:"agent-memory-intent.v1",advertisedBy:"device"},{kind:"envelope",rule:"gated",surface:"e2ee.key_package.available",capability:"sealed-payload-v1",advertisedBy:"device"},{kind:"envelope",rule:"strip-safe",surface:"conn.hello",field:"runtimes[].capabilities.messageDraft"},{kind:"envelope",rule:"strip-safe",surface:"conn.hello",field:"harnesses[].capabilities.messageDraft"},{kind:"envelope",rule:"strip-safe",surface:"task.claim",field:"capabilities.messageDraft"},...MATRIX_FIELDS.flatMap(field=>[{kind:"envelope",rule:"strip-safe",surface:"conn.hello",field:`runtimes[].capabilities.${field}`},{kind:"envelope",rule:"strip-safe",surface:"conn.hello",field:`harnesses[].capabilities.${field}`},{kind:"envelope",rule:"strip-safe",surface:"task.claim",field:`capabilities.${field}`}]),{kind:"envelope",rule:"strip-safe",surface:"conn.hello",field:"runtimes[].versionPolicy"},{kind:"envelope",rule:"strip-safe",surface:"conn.hello",field:"harnesses[].versionPolicy"},{kind:"envelope",rule:"strip-safe",surface:"conn.hello",field:"runtimeUnavailable"},{kind:"http",rule:"strip-safe",surface:"PresencePublishRequest",field:"runtimes[].versionPolicy"},{kind:"http",rule:"strip-safe",surface:"PresencePublishRequest",field:"runtimeUnavailable"},{kind:"http",rule:"strip-safe",surface:"PresencePublishRequest",field:"runtimes[].capabilities"},{kind:"envelope",rule:"strip-safe",surface:"task.progress",field:"events[].mcp"},{kind:"envelope",rule:"gated",surface:"agent.message.draft",capability:"agent-message-draft",advertisedBy:"server"},{kind:"envelope",rule:"gated",surface:"task.fail",field:"failure",capability:"runtime-failure-class",advertisedBy:"server"},{kind:"envelope",rule:"strip-safe",surface:"task.decline",field:"runtimeUnavailable"},{kind:"http",rule:"strip-safe",surface:"TokenResponse",field:"expiresIn"},{kind:"http",rule:"strip-safe",surface:"PairResponse",field:"expiresIn"}];var WIRE_ADDITIONS=Object.freeze([...PLAIN_ROWS,...sealedRows(),SEALED_DECLINE_CODE("sealed_key_unavailable"),SEALED_DECLINE_CODE("sealed_open_failed"),SEALED_DECLINE_CODE("sealed_content_mac_mismatch"),SEALED_DECLINE_CODE("sealing_policy_mismatch")]);function requiredReceiverCapabilities(type,payload){const fields=payload!==null&&typeof payload==="object"?payload:{};const required=[];for(const entry of WIRE_ADDITIONS){if(entry.kind!=="envelope"||entry.rule!=="gated"||entry.surface!==type)continue;if(entry.field!==void 0){const value=entry.field.split(".").reduce((parent,segment)=>parent!==null&&typeof parent==="object"?parent[segment]:void 0,fields);if(value===void 0)continue;if(entry.value!==void 0&&value!==entry.value)continue}if(!required.includes(entry.capability))required.push(entry.capability);}return required}var CONTENT_HASH_RE=/^sha256:[0-9a-f]{64}$/;var BlobRefSchema=z.object({blobId:z.string(),contentHash:z.string().regex(CONTENT_HASH_RE,'contentHash must be "sha256:<64 lowercase hex>"'),size:z.number().int().nonnegative(),contentType:z.string(),url:z.string().optional()});var SEALED_PAYLOAD_VERSION=1;var SEALED_PAYLOAD_SUITE="byok-sealed-v1.hkdf-sha256.aes-256-gcm";var SEALED_PAYLOAD_CATEGORIES=["task-input","agent-message","task-output","memory-projection"];var SEALED_PAYLOAD_V1_CATEGORIES=["task-input","task-output"];var SEALED_DECLINE_CODES=["sealed_key_unavailable","sealed_open_failed","sealed_content_mac_mismatch","sealing_policy_mismatch"];var SEALED_TASK_PLAIN_CODES=Object.freeze({"task.fail":{reason:["daemon_interrupted","sealed_key_unavailable"]},"task.decline":{reason:SEALED_DECLINE_CODES},"task.cancelled":{reason:[]}});function isSealedTaskPlainOutput(type,payload){const codes=Object.hasOwn(SEALED_TASK_PLAIN_CODES,type)?SEALED_TASK_PLAIN_CODES[type]:{};const entry=isSealableMessageType(type)?SEALED_SPLIT_TABLE[type]:void 0;const fields=entry?.category==="task-output"?[...entry.moved,...entry.forbidden]:[];if(fields.length>0&&!Object.hasOwn(SEALED_TASK_PLAIN_CODES,type))return false;const record=payload;for(const field of fields){const value=record[field];if(value!==void 0&&!(typeof value==="string"&&(codes[field]??[]).includes(value)))return false}return type!=="task.decline"||record.reason===void 0||record.code===record.reason}var SEALED_INLINE_MAX_PADDED_LENGTH=256*1024;var SEALED_PAYLOAD_MAX_CONTENT_LENGTH=2*1024*1024;var AEAD_TAG_BYTES=16;var FRAME_HEADER_BYTES=4;var ALIGNED_FRAME_LIMIT=16*1024;var FRAME_ALIGNMENT=256;var SALT_BYTES=32;var NONCE_BYTES=12;function floorLog2(value){let exponent=0;for(let remaining=value;remaining>=2;remaining=Math.floor(remaining/2))exponent+=1;return exponent}function sealedPayloadPaddedLength(frameLength){if(!Number.isSafeInteger(frameLength)||frameLength<FRAME_HEADER_BYTES){throw new RangeError("Sealed frame length must be a safe integer of at least 4")}if(frameLength<=ALIGNED_FRAME_LIMIT)return Math.ceil(frameLength/FRAME_ALIGNMENT)*FRAME_ALIGNMENT;const exponent=floorLog2(frameLength);const step=2**(exponent-(floorLog2(exponent)+1));return Math.ceil(frameLength/step)*step}var SEALED_PAYLOAD_MAX_PADDED_LENGTH=sealedPayloadPaddedLength(FRAME_HEADER_BYTES+SEALED_PAYLOAD_MAX_CONTENT_LENGTH);function isLegalPaddedLength(value){return Number.isSafeInteger(value)&&value>=FRAME_ALIGNMENT&&value<=SEALED_PAYLOAD_MAX_PADDED_LENGTH&&sealedPayloadPaddedLength(value)===value}var BASE64URL_VALUE=/^[A-Za-z0-9_-]*$/u;var BASE64URL_ALPHABET="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";function sealedBase64UrlByteLength(value){if(!BASE64URL_VALUE.test(value))return void 0;const tail=value.length%4;if(tail===1)return void 0;if(tail!==0){const last=BASE64URL_ALPHABET.indexOf(value[value.length-1]);const unusedBits=tail===2?15:3;if((last&unusedBits)!==0)return void 0}return Math.floor(value.length/4)*3+(tail===0?0:tail-1)}function base64UrlOf(bytes){return z.string().refine(value=>sealedBase64UrlByteLength(value)===bytes,`must be canonical unpadded base64url of ${bytes} bytes`)}var PositiveIntegerSchema=z.number().int().positive().max(Number.MAX_SAFE_INTEGER);function sealedPayloadSchema(category){return z.object({v:z.literal(SEALED_PAYLOAD_VERSION),suite:z.literal(SEALED_PAYLOAD_SUITE),category,scope:z.object({id:z.string().min(1),epoch:PositiveIntegerSchema,keyId:z.string().regex(/^[A-Za-z0-9_-]{22}$/u)}).strict(),chainHead:z.object({seq:PositiveIntegerSchema,hash:z.string().regex(CONTENT_HASH_RE)}).strict(),sender:z.string().regex(/^[A-Za-z0-9_-]{43}$/u),salt:base64UrlOf(SALT_BYTES),nonce:base64UrlOf(NONCE_BYTES),paddedLength:PositiveIntegerSchema.refine(isLegalPaddedLength,"must be a legal padded frame length within the v1 limit"),contentMac:z.string().regex(/^hmac-sha256:[0-9a-f]{64}$/u),ciphertext:z.string().optional(),ciphertextRef:BlobRefSchema.omit({url:true}).strict().optional()}).strict().superRefine((sealed,ctx)=>{const ciphertextLength=sealed.paddedLength+AEAD_TAG_BYTES;const inline=sealed.paddedLength<=SEALED_INLINE_MAX_PADDED_LENGTH;if(inline){if(sealed.ciphertextRef!==void 0||sealed.ciphertext===void 0){ctx.addIssue({code:"custom",path:["ciphertext"],message:`a padded length up to ${SEALED_INLINE_MAX_PADDED_LENGTH} carries inline ciphertext only`});}else if(sealedBase64UrlByteLength(sealed.ciphertext)!==ciphertextLength){ctx.addIssue({code:"custom",path:["ciphertext"],message:"ciphertext must be canonical base64url of paddedLength + 16 bytes"});}return}if(sealed.ciphertext!==void 0||sealed.ciphertextRef===void 0){ctx.addIssue({code:"custom",path:["ciphertextRef"],message:`a padded length above ${SEALED_INLINE_MAX_PADDED_LENGTH} carries ciphertextRef only`});}else if(sealed.ciphertextRef.size!==ciphertextLength){ctx.addIssue({code:"custom",path:["ciphertextRef","size"],message:"ciphertextRef size must equal paddedLength + 16"});}})}var SealedPayloadSchema=sealedPayloadSchema(z.enum(SEALED_PAYLOAD_V1_CATEGORIES));var SealedTaskInputSchema=sealedPayloadSchema(z.literal("task-input"));var SealedTaskOutputSchema=sealedPayloadSchema(z.literal("task-output"));function isCanonicalCategoryList(categories){return categories.every((category,index)=>index===0||SEALED_PAYLOAD_CATEGORIES.indexOf(categories[index-1])<SEALED_PAYLOAD_CATEGORIES.indexOf(category))}var TaskSealingSchema=z.object({scopeId:z.string().min(1),epoch:PositiveIntegerSchema,categories:z.array(z.enum(SEALED_PAYLOAD_V1_CATEGORIES)).min(1).refine(isCanonicalCategoryList,"categories must be unique and in canonical order")}).strict();var CanonicalInstantSchema=z.string().regex(/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u).refine(value=>{const instant=Date.parse(value);return Number.isFinite(instant)&&new Date(instant).toISOString()===value},"must be a canonical UTC instant");var RoutineRefSchema=z.object({routineId:z.string().min(1),definitionVersion:z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER),notAfter:CanonicalInstantSchema}).strict();function sealedOfferRule(payload,ctx){const{instruction,sealing,sealed,routineRef}=payload;if(!sealing.categories.includes("task-input")){if(routineRef!==void 0)ctx.addIssue({code:"custom",path:["routineRef"],message:"a routine template is sealed task input, so routineRef needs a task that seals task-input"});if(sealed!==void 0)ctx.addIssue({code:"custom",path:["sealed"],message:"a task that does not seal task-input carries no sealed member"});if(instruction===void 0)ctx.addIssue({code:"custom",path:["instruction"],message:"a task that does not seal task-input carries a plaintext instruction"});return}if(sealed===void 0){ctx.addIssue({code:"custom",path:["sealed"],message:"a task that seals task-input carries the sealed instruction"});return}if(instruction!==void 0)ctx.addIssue({code:"custom",path:["instruction"],message:"a sealed instruction never travels in plaintext too"});if(sealed.scope.id!==sealing.scopeId||sealed.scope.epoch!==sealing.epoch){ctx.addIssue({code:"custom",path:["sealed","scope"],message:"the offer task-input must be sealed under the task scope at the task epoch"});}}var ProviderProfileRefSchema=z.string().min(1).max(64).regex(/^[a-z0-9]+(?:[-_][a-z0-9]+)*$/u,"provider profile refs must be lowercase portable identifiers");var ProviderProfileRevisionSchema=z.string().regex(/^(?:0|[1-9][0-9]{0,19})$/u,"provider profile revision must be canonical decimal");var ProviderProfileHashSchema=z.string().regex(/^sha256:[0-9a-f]{64}$/u,"provider profile hash must be lowercase sha256");var PROVIDER_MODEL_CAPABILITIES=["image-input"];var ProviderModelCapabilitySchema=z.enum(PROVIDER_MODEL_CAPABILITIES);var ProviderProfileBindingSchema=z.object({profileRef:ProviderProfileRefSchema,profileRevision:ProviderProfileRevisionSchema,profileHash:ProviderProfileHashSchema,modelId:z.string().min(1).max(160).regex(/^[^\u0000\r\n]+$/u),requiredCapabilities:z.array(ProviderModelCapabilitySchema).max(8)}).strict().superRefine((binding,ctx)=>{if(new Set(binding.requiredCapabilities).size!==binding.requiredCapabilities.length){ctx.addIssue({code:"custom",path:["requiredCapabilities"],message:"duplicate provider capability"});}});var PROVIDER_SECRET_SEALING_KEY_REGISTER_OPERATION="provider-secret-sealing-key.register";var ProviderProvisioningAvailablePayloadSchema=z.object({requestId:z.uuid()}).strict();var PROVIDER_PROVISIONING_OPERATIONS=["configure","update_model","replace_secret","delete"];var ProviderProvisioningOperationSchema=z.enum(PROVIDER_PROVISIONING_OPERATIONS);var PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM="9223372036854775807";var ProviderProvisioningOperationGenerationSchema=z.string().regex(/^[1-9][0-9]{0,18}$/u,"operationGeneration must be a canonical positive decimal string").refine(value=>value.length<PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM.length||value<=PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM,`operationGeneration must not exceed ${PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM}`);var ProviderProvisioningOperationDigestSchema=z.string().regex(/^sha256:[0-9a-f]{64}$/u,"operationDigest must be lowercase sha256");var PROVIDER_PROVISIONING_REJECTION_CODES=["request_invalid","request_conflict","request_expired","request_not_yet_valid","request_window_invalid","sealing_key_rotated","enrollment_mismatch","agent_not_placed","config_digest_mismatch","operation_generation_stale","profile_changed","profile_not_found","credential_scope_mismatch","provider_kind_unsupported","pi_model_invalid","capabilities_invalid","seal_open_failed","secret_invalid","local_commit_interrupted","secret_store_unavailable"];var ProviderProvisioningRejectionCodeSchema=z.enum(PROVIDER_PROVISIONING_REJECTION_CODES);var PROVIDER_PROVISIONING_HOST_TERMINAL_CODES=["request_expired","sealing_key_rotated"];var ProviderProvisioningProviderStatusSchema=z.object({profileRef:ProviderProfileRefSchema,providerKind:z.string().min(1).max(64).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/u,"providerKind must be a lowercase portable identifier"),modelId:z.string().min(1).max(160).regex(/^[^\u0000\r\n]+$/u),capabilities:z.array(ProviderModelCapabilitySchema).max(8),secretConfigured:z.boolean()}).strict().superRefine((status,ctx)=>{if(new Set(status.capabilities).size!==status.capabilities.length){ctx.addIssue({code:"custom",path:["capabilities"],message:"duplicate provider capability"});}});var PROVIDER_PROVISIONING_KEY_CHECK_RESULTS=["ok","credential_rejected","rate_limited","quota_or_billing","model_not_permitted","provider_error","unreachable","timeout","not_run"];var ProviderProvisioningKeyCheckResultSchema=z.enum(PROVIDER_PROVISIONING_KEY_CHECK_RESULTS);var ProviderProvisioningKeyCheckSchema=z.object({result:ProviderProvisioningKeyCheckResultSchema}).strict();var completionIdentity={requestId:z.uuid(),operation:ProviderProvisioningOperationSchema,operationGeneration:ProviderProvisioningOperationGenerationSchema,operationDigest:ProviderProvisioningOperationDigestSchema};var AppliedCompletionSchema=z.object({outcome:z.literal("applied"),...completionIdentity,providerStatus:ProviderProvisioningProviderStatusSchema.nullable(),binding:ProviderProfileBindingSchema.nullable(),keyCheck:ProviderProvisioningKeyCheckSchema}).strict();var RejectedCompletionSchema=z.object({outcome:z.literal("rejected"),...completionIdentity,code:ProviderProvisioningRejectionCodeSchema}).strict();var ProviderProvisioningCompletionSchema=z.discriminatedUnion("outcome",[AppliedCompletionSchema,RejectedCompletionSchema]).superRefine((completion,ctx)=>{if(completion.outcome!=="applied")return;const{operation,providerStatus,binding}=completion;if(operation==="delete"){if(completion.keyCheck.result!=="not_run"){ctx.addIssue({code:"custom",path:["keyCheck","result"],message:"an applied delete must report keyCheck not_run"});}if(providerStatus!==null){ctx.addIssue({code:"custom",path:["providerStatus"],message:"an applied delete reports no provider status"});}if(binding!==null){ctx.addIssue({code:"custom",path:["binding"],message:"an applied delete reports no binding"});}return}if(providerStatus===null){ctx.addIssue({code:"custom",path:["providerStatus"],message:`an applied ${operation} must report provider status`});}if(binding===null){ctx.addIssue({code:"custom",path:["binding"],message:`an applied ${operation} must report its exact binding`});}if(providerStatus===null||binding===null)return;if(providerStatus.profileRef!==binding.profileRef){ctx.addIssue({code:"custom",path:["binding","profileRef"],message:"binding profileRef must equal providerStatus profileRef"});}if(providerStatus.modelId!==binding.modelId){ctx.addIssue({code:"custom",path:["binding","modelId"],message:"binding modelId must equal providerStatus modelId"});}if((operation==="configure"||operation==="replace_secret")&&!providerStatus.secretConfigured){ctx.addIssue({code:"custom",path:["providerStatus","secretConfigured"],message:`an applied ${operation} must report a configured secret`});}});var PROVIDER_PROVISIONING_DISPOSITIONS=["recorded","idempotent","conflict","host_terminal"];var ProviderProvisioningDispositionSchema=z.enum(PROVIDER_PROVISIONING_DISPOSITIONS);var ProviderProvisioningReadbackSchema=z.object({tenantId:z.string().min(1),deviceId:z.string().min(1),requestId:z.uuid(),disposition:ProviderProvisioningDispositionSchema,completion:ProviderProvisioningCompletionSchema,completedAt:z.iso.datetime({offset:true})}).strict().superRefine((readback,ctx)=>{if(readback.completion.requestId!==readback.requestId){ctx.addIssue({code:"custom",path:["completion","requestId"],message:"completion requestId must equal readback requestId"});}if(readback.disposition==="host_terminal"&&(readback.completion.outcome!=="rejected"||!PROVIDER_PROVISIONING_HOST_TERMINAL_CODES.includes(readback.completion.code))){ctx.addIssue({code:"custom",path:["completion"],message:`a host_terminal readback must carry a rejected completion with one of: ${PROVIDER_PROVISIONING_HOST_TERMINAL_CODES.join(", ")}`});}});function isSameJsonData(a,b){if(a===null||b===null)return a===b;const typeOfA=typeof a;if(typeOfA!==typeof b)return false;if(typeOfA!=="object"){return a===b}const aIsArray=Array.isArray(a);if(aIsArray!==Array.isArray(b))return false;if(aIsArray){const arrayA=a;const arrayB=b;if(arrayA.length!==arrayB.length)return false;for(let index=0;index<arrayA.length;index+=1){if(!isSameJsonData(arrayA[index],arrayB[index]))return false}return true}const objectA=a;const objectB=b;const keysA=Object.keys(objectA);const keysB=Object.keys(objectB);if(keysA.length===0){const prototypeA=Object.getPrototypeOf(objectA);if(prototypeA!==Object.prototype&&prototypeA!==null)return false}if(keysA.length!==keysB.length)return false;for(const key of keysA){if(!Object.prototype.hasOwnProperty.call(objectB,key))return false;if(!isSameJsonData(objectA[key],objectB[key]))return false}return true}function jsonDepthExceeds(value,limit){const stack=[{node:value,depth:0}];while(stack.length>0){const{node,depth}=stack.pop();if(node===null||typeof node!=="object")continue;const next=depth+1;if(next>limit)return true;const children=Array.isArray(node)?node:Object.values(node);for(const child of children)stack.push({node:child,depth:next});}return false}function canonicalizePlainJson(value,maxBytes,maxDepth){let json;try{json=JSON.stringify(value);}catch{return {ok:false,reason:"not-serializable"}}if(json===void 0)return {ok:false,reason:"not-serializable"};const bytes=new TextEncoder().encode(json).length;if(bytes>maxBytes)return {ok:false,reason:"over-cap",bytes};const canonical=JSON.parse(json);if(maxDepth!==void 0&&jsonDepthExceeds(canonical,maxDepth))return {ok:false,reason:"too-deep",bytes};if(!isSameJsonData(value,canonical))return {ok:false,reason:"not-plain-json"};return {ok:true,bytes,canonical}}var RESULT_SCHEMA_MAX_BYTES=16384;var RESULT_OUTCOME_MAX_BYTES=65536;var RESULT_SCHEMA_MAX_DEPTH=32;var RESULT_JSON_MAX_DEPTH=128;var RESULT_ISSUES_MAX_COUNT=20;var RESULT_ISSUES_MAX_BYTES=4096;var ISSUE_STRING_MAX_LENGTH=128;var RESULT_SCHEMA_KEYWORDS=Object.freeze(["type","properties","required","additionalProperties","items","enum","const","oneOf","minLength","maxLength","minItems","maxItems","minimum","maximum","description"]);var RESULT_SCHEMA_INSTANCE_TYPES=Object.freeze(["object","array","string","number","integer","boolean","null"]);var KEYWORDS=new Set(RESULT_SCHEMA_KEYWORDS);var INSTANCE_TYPES=new Set(RESULT_SCHEMA_INSTANCE_TYPES);var encoder2=new TextEncoder;function cut(value){return value.length<=ISSUE_STRING_MAX_LENGTH?value:`${value.slice(0,ISSUE_STRING_MAX_LENGTH-1)}\u2026`}var IssueSink=class{issues=[];truncated=false;bytes=2;add(pointer,keyword,message){const issue={pointer:cut(pointer),keyword:cut(keyword),message:cut(message)};const size2=encoder2.encode(JSON.stringify(issue)).length+(this.issues.length===0?0:1);if(this.issues.length>=RESULT_ISSUES_MAX_COUNT||this.bytes+size2>RESULT_ISSUES_MAX_BYTES){this.truncated=true;return}this.issues.push(issue);this.bytes+=size2;}get empty(){return this.issues.length===0&&!this.truncated}};function pointerTo(base,token){return `${base}/${String(token).replace(/~/g,"~0").replace(/\//g,"~1")}`}function isObject(value){return value!==null&&typeof value==="object"&&!Array.isArray(value)}function isNonNegativeInteger(value){return typeof value==="number"&&Number.isSafeInteger(value)&&value>=0}var LONE_SURROGATE=/[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/u;function hasLoneSurrogate(value){const stack=[value];while(stack.length>0){const node=stack.pop();if(typeof node==="string"){if(LONE_SURROGATE.test(node))return true}else if(Array.isArray(node)){for(const member of node)stack.push(member);}else if(node!==null&&typeof node==="object"){for(const[key,member]of Object.entries(node)){if(LONE_SURROGATE.test(key))return true;stack.push(member);}}}return false}function canonicalDocument(value,maxBytes){const check=canonicalizePlainJson(value,maxBytes,RESULT_JSON_MAX_DEPTH);if(check.ok&&hasLoneSurrogate(check.canonical))return {ok:false,reason:"not-plain-json"};return check}function documentFailure(check,what,maxBytes){const sink=new IssueSink;switch(check.reason){case "not-serializable":sink.add("",check.reason,`${what} is not JSON-serializable`);return {ok:false,reason:check.reason,issues:sink.issues,truncated:false};case "not-plain-json":sink.add("",check.reason,`${what} is not plain JSON data in well-formed Unicode`);return {ok:false,reason:check.reason,issues:sink.issues,truncated:false};case "over-cap":sink.add("",check.reason,`${what} is ${check.bytes} bytes as canonical JSON (UTF-8); the cap is ${maxBytes}`);return {ok:false,reason:check.reason,bytes:check.bytes,issues:sink.issues,truncated:false};case "too-deep":sink.add("",check.reason,`${what} nests JSON containers deeper than ${RESULT_JSON_MAX_DEPTH}`);return {ok:false,reason:check.reason,bytes:check.bytes,issues:sink.issues,truncated:false}}}function checkSubschema(node,pointer,depth,sink,requireObjectRoot=true){if(!isObject(node)){sink.add(pointer,"schema","a subschema must be a JSON object");return}if(depth>RESULT_SCHEMA_MAX_DEPTH){sink.add(pointer,"depth",`subschemas nest deeper than ${RESULT_SCHEMA_MAX_DEPTH} levels`);return}for(const key of Object.keys(node)){if(!KEYWORDS.has(key))sink.add(pointerTo(pointer,key),key,"keyword is outside the result schema subset");}if(requireObjectRoot&&depth===0&&node.type!=="object"){sink.add(pointerTo(pointer,"type"),"type","the root schema must declare type: 'object'");}if(Object.hasOwn(node,"type")){const type=node.type;const valid=typeof type==="string"?INSTANCE_TYPES.has(type):Array.isArray(type)&&type.length>0&&type.every(member=>typeof member==="string"&&INSTANCE_TYPES.has(member))&&new Set(type).size===type.length;if(!valid)sink.add(pointerTo(pointer,"type"),"type","must be a JSON type name or a non-empty array of unique type names");}if(Object.hasOwn(node,"properties")){const properties=node.properties;const at=pointerTo(pointer,"properties");if(!isObject(properties))sink.add(at,"properties","must be an object of subschemas");else for(const[name,subschema]of Object.entries(properties))checkSubschema(subschema,pointerTo(at,name),depth+1,sink);}if(Object.hasOwn(node,"required")){const required=node.required;if(!Array.isArray(required)||!required.every(name=>typeof name==="string")||new Set(required).size!==required.length){sink.add(pointerTo(pointer,"required"),"required","must be an array of unique property names");}}if(Object.hasOwn(node,"additionalProperties")&&node.additionalProperties!==false){sink.add(pointerTo(pointer,"additionalProperties"),"additionalProperties","only additionalProperties: false is allowed");}if(Object.hasOwn(node,"items")){if(!isObject(node.items))sink.add(pointerTo(pointer,"items"),"items","must be one subschema object");else checkSubschema(node.items,pointerTo(pointer,"items"),depth+1,sink);}if(Object.hasOwn(node,"enum")&&(!Array.isArray(node.enum)||node.enum.length===0)){sink.add(pointerTo(pointer,"enum"),"enum","must be a non-empty array");}if(Object.hasOwn(node,"oneOf")){const oneOf=node.oneOf;const at=pointerTo(pointer,"oneOf");if(!Array.isArray(oneOf)||oneOf.length===0)sink.add(at,"oneOf","must be a non-empty array of subschemas");else oneOf.forEach((subschema,index)=>checkSubschema(subschema,pointerTo(at,index),depth+1,sink));}for(const keyword of ["minLength","maxLength","minItems","maxItems"]){if(Object.hasOwn(node,keyword)&&!isNonNegativeInteger(node[keyword])){sink.add(pointerTo(pointer,keyword),keyword,"must be a non-negative integer");}}for(const keyword of ["minimum","maximum"]){if(Object.hasOwn(node,keyword)&&typeof node[keyword]!=="number"){sink.add(pointerTo(pointer,keyword),keyword,"must be a number");}}if(Object.hasOwn(node,"description")&&typeof node.description!=="string"){sink.add(pointerTo(pointer,"description"),"description","must be a string");}}function checkResultSchema(schema){const document=canonicalDocument(schema,RESULT_SCHEMA_MAX_BYTES);if(!document.ok)return documentFailure(document,"the result schema",RESULT_SCHEMA_MAX_BYTES);const sink=new IssueSink;checkSubschema(document.canonical,"",0,sink);if(!sink.empty)return {ok:false,reason:"not-subset",bytes:document.bytes,issues:sink.issues,truncated:sink.truncated};return {ok:true,bytes:document.bytes,canonical:document.canonical}}function withoutPrototypes(value){if(value===null||typeof value!=="object")return value;if(Array.isArray(value))return value.map(withoutPrototypes);const copy=Object.create(null);for(const[key,member]of Object.entries(value)){Object.defineProperty(copy,key,{value:withoutPrototypes(member),enumerable:true,writable:true,configurable:true});}return copy}function fragmentToPointer(location){return decodeURI(location.startsWith("#")?location.slice(1):location)}function validateResultOutcome(schema,outcome){const admitted=checkResultSchema(schema);if(!admitted.ok){return {ok:false,reason:"schema-not-admitted",bytes:admitted.bytes,issues:admitted.issues,truncated:admitted.truncated}}const document=canonicalDocument(outcome,RESULT_OUTCOME_MAX_BYTES);if(!document.ok)return documentFailure(document,"the outcome",RESULT_OUTCOME_MAX_BYTES);const validator=new Validator(withoutPrototypes(admitted.canonical),"2020-12",true);const result=validator.validate(withoutPrototypes(document.canonical));if(result.valid)return {ok:true,bytes:document.bytes,canonical:document.canonical};const sink=new IssueSink;for(const unit of result.errors)sink.add(fragmentToPointer(unit.instanceLocation),unit.keyword,unit.error);return {ok:false,reason:"schema-mismatch",bytes:document.bytes,issues:sink.issues,truncated:sink.truncated}}var MAX_BYTES_PER_CODE_POINT=6;var MAX_NUMBER_BYTES=25;var MAX_INTEGER_BYTES=24;var DECIMAL_LIMIT=1e21;var enc=new TextEncoder;var size=v=>enc.encode(JSON.stringify(v)).length;function typeBound(node,type){switch(type){case "null":return 4;case "boolean":return 5;case "integer":{const lo=typeof node.minimum==="number"?Math.ceil(node.minimum):void 0;const hi=typeof node.maximum==="number"?Math.floor(node.maximum):void 0;if(lo===void 0||hi===void 0||!(Math.abs(lo)<DECIMAL_LIMIT)||!(Math.abs(hi)<DECIMAL_LIMIT))return MAX_INTEGER_BYTES;return Math.min(MAX_INTEGER_BYTES,Math.max(String(lo).length,String(hi).length))}case "number":return MAX_NUMBER_BYTES;case "string":return typeof node.maxLength==="number"?2+MAX_BYTES_PER_CODE_POINT*node.maxLength:null;case "array":{if(node.maxItems===0)return 2;if(typeof node.maxItems!=="number"||node.items===void 0)return null;const item=outcomeBound(node.items);return item===null?null:2+node.maxItems*item+Math.max(0,node.maxItems-1)}case "object":{if(node.additionalProperties!==false)return null;const entries=Object.entries(node.properties??{});let total=2+Math.max(0,entries.length-1);for(const[name,sub]of entries){const b=outcomeBound(sub);if(b===null)return null;total+=size(name)+1+b;}return total}default:return null}}function outcomeBound(schema){const node=schema;const bounds=[];if(Object.hasOwn(node,"const"))bounds.push(size(node.const));if(Array.isArray(node.enum))bounds.push(Math.max(...node.enum.map(size)));if(Array.isArray(node.oneOf)){const branches=node.oneOf.map(outcomeBound);if(branches.every(b=>b!==null))bounds.push(Math.max(...branches));}if(node.type!==void 0){const types=Array.isArray(node.type)?node.type:[node.type];const each=types.map(t=>typeBound(node,t));if(each.every(b=>b!==null))bounds.push(Math.max(...each));}return bounds.length===0?null:Math.min(...bounds)}function resultOutcomeMaxBytes(schema){const pending=[schema];const seen=new Set;while(pending.length>0){const value=pending.pop();if(typeof value==="function")return null;if(value===null||typeof value!=="object"||seen.has(value))continue;seen.add(value);const prototype=Object.getPrototypeOf(value);if(prototype!==null&&prototype!==Object.prototype&&prototype!==Array.prototype)return null;for(const[name,descriptor]of Object.entries(Object.getOwnPropertyDescriptors(value))){if(name==="toJSON"&&(!Object.hasOwn(descriptor,"value")||typeof descriptor.value==="function"))return null;if(!descriptor.enumerable)continue;if(!Object.hasOwn(descriptor,"value"))return null;pending.push(descriptor.value);}}const document=canonicalDocument(schema,RESULT_SCHEMA_MAX_BYTES);if(!document.ok)return null;const sink=new IssueSink;checkSubschema(document.canonical,"",0,sink,false);if(!sink.empty)return null;return outcomeBound(document.canonical)}var TerminalProjectionContractSchema=z.string().min(1).max(128).regex(/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/u,"terminal projection contracts must be opaque lowercase ids");var ResultDocumentSchemaSchema=z.custom().superRefine((value,ctx)=>{const check=checkResultSchema(value);if(check.ok)return;for(const issue of check.issues){ctx.addIssue({code:"custom",message:`result schema ${check.reason} at '${issue.pointer}' (${issue.keyword}): ${issue.message}`,params:{reason:check.reason,pointer:issue.pointer,keyword:issue.keyword}});}if(check.truncated){ctx.addIssue({code:"custom",message:"result schema issues truncated",params:{reason:check.reason,truncated:true}});}});var TerminalProjectionSelectionSchema=z.discriminatedUnion("mode",[z.object({mode:z.literal("none")}).strict(),z.object({mode:z.literal("result-document"),contract:TerminalProjectionContractSchema,schema:ResultDocumentSchemaSchema}).strict()]);var POLICY_REVISION=z.string().min(1).max(160).regex(/^[^\u0000-\u001f\u007f\r\n]+$/u,"policyRevision must not contain control characters");var POSITIVE_LIMIT=z.number().int().positive().max(2147483647);var AGENT_MESSAGE_DRAFT_FRAME_MAX_BYTES=16*1024;var AGENT_MESSAGE_MAX_BYTES=256*1024;var AgentMessageContractSchema=z.string().min(1).max(160).regex(/^[A-Za-z0-9][A-Za-z0-9._:/-]*$/u,"message contract must be an opaque portable identifier");var AgentMessageContentTypeSchema=z.enum(["text/plain","text/markdown"]);var AgentMessageDestinationBindingSchema=z.string().min(1).max(2048).regex(/^[^\u0000-\u001f\u007f\r\n]+$/u,"destination binding must not contain control characters");var AgentMessageFreshnessCursorSchema=z.string().min(1).max(512).regex(/^[^\u0000-\u001f\u007f\r\n]+$/u,"freshness cursor must not contain control characters");var AgentMessageServerContextSchema=z.object({destinationBinding:AgentMessageDestinationBindingSchema,freshnessCursor:AgentMessageFreshnessCursorSchema.optional()}).strict();var AgentMessageEgressRequirementSchema=z.object({mode:z.literal("required"),contract:AgentMessageContractSchema,contentType:AgentMessageContentTypeSchema,maxBytes:z.number().int().positive().max(AGENT_MESSAGE_MAX_BYTES)}).strict();var AgentContentMimeTypeSchema=z.string().min(3).max(255).regex(/^[a-z0-9!#$&^_.+-]+\/[a-z0-9!#$&^_.+-]+$/iu,"MIME types must be explicit type/subtype values");var ContentReadPolicySchema=z.object({maxBytes:POSITIVE_LIMIT,allowedMimeTypes:z.array(AgentContentMimeTypeSchema).min(1).max(32)}).strict();var AgentEgressActivityPolicySchema=z.object({delivery:z.literal("latest-value"),maxCoalesceMs:POSITIVE_LIMIT,maxEventBytes:POSITIVE_LIMIT}).strict();var AgentReliableQuotaPolicySchema=z.object({maxPendingEventsPerAgent:POSITIVE_LIMIT,maxPendingBytesPerAgent:POSITIVE_LIMIT,maxPendingBytesPerTenant:POSITIVE_LIMIT}).strict();var AgentEgressPolicySchema=z.object({policyRevision:POLICY_REVISION,activity:AgentEgressActivityPolicySchema,reliable:AgentReliableQuotaPolicySchema,transfers:z.object({workspace:z.union([z.literal("disabled"),ContentReadPolicySchema]),transcript:z.union([z.literal("disabled"),ContentReadPolicySchema]),artifact:z.union([z.literal("disabled"),ContentReadPolicySchema])}).strict()}).strict();var AgentEgressLaneSchema=z.enum(["reliable","latest-value"]);var AgentEgressDropReasonSchema=z.enum(["policy_denied","capability_missing","quota_exceeded","backpressure","coalesced","disconnected","invalid_envelope","ack_mismatch"]);var AgentContentReadSurfaceSchema=z.enum(["workspace","transcript","artifact"]);var AgentContentActorKindSchema=z.enum(["user","agent","system"]);var AgentContentActorSchema=z.object({kind:AgentContentActorKindSchema,id:z.string().min(1).max(512).regex(/^[^\u0000-\u001f\u007f]+$/u,"actor id must not contain control characters")}).strict();var AgentContentDecodeAsSchema=z.enum(["bytes","utf8"]);var AgentContentReadDecisionSchema=z.enum(["allowed","denied"]);var AgentContentReadDenialReasonSchema=z.enum(["invalid-request","policy-disabled","capability-missing","policy-revision-mismatch","absolute-target","non-relative-target","dot-segment","sensitive-name","root-not-allowlisted","root-invalid","path-escape","target-missing","symlink","not-regular-file","byte-limit","mime-not-allowlisted","text-not-allowlisted","text-decode-failed","identity-mismatch"]);var AgentEgressContentHashSchema=z.string().regex(/^sha256:[a-f0-9]{64}$/u,"contentHash must be a lowercase SHA-256 digest");var AgentEgressPolicyRevisionSchema=POLICY_REVISION;var InputPreparationContentHashSchema=AgentEgressContentHashSchema;var OPAQUE_ID=z.string().min(1).max(512).regex(/^[^\u0000-\u001f\u007f]+$/u,"control identifiers must not contain control characters");var OPAQUE_TEXT=z.string().min(1).max(2048).regex(/^[^\u0000-\u001f\u007f]+$/u,"control text must not contain control characters");var InputPreparationPolicyRevisionSchema=OPAQUE_ID;var InputPreparationProfileIdSchema=OPAQUE_ID;var PreparedAgentMemoryModeSchema=z.enum(PREPARED_AGENT_MEMORY_MODES);var InputPreparationSourceSchema=z.object({revision:OPAQUE_ID,digest:OPAQUE_ID}).strict();var InputPreparationModelCostSchema=z.object({input:z.number().finite(),output:z.number().finite(),cacheRead:z.number().finite(),cacheWrite:z.number().finite()}).strict();var THINKING_EFFORT=z.string().min(1).max(64).regex(/^[a-zA-Z0-9_-]+$/u).nullable();var InputPreparationThinkingLevelMapSchema=z.object({off:THINKING_EFFORT,minimal:THINKING_EFFORT,low:THINKING_EFFORT,medium:THINKING_EFFORT,high:THINKING_EFFORT,xhigh:THINKING_EFFORT,max:THINKING_EFFORT}).strict();var InputPreparationModelCompatSchema=z.object({supportsStore:z.boolean().optional(),supportsDeveloperRole:z.boolean().optional(),supportsReasoningEffort:z.boolean().optional(),supportsUsageInStreaming:z.boolean().optional(),maxTokensField:z.enum(["max_completion_tokens","max_tokens"]).optional(),thinkingFormat:z.enum(["openai","openrouter","deepseek","together","baseten","zai","qwen","chat-template","qwen-chat-template","string-thinking","ant-ling"]).optional(),zaiToolStream:z.boolean().optional()}).strict();var InputPreparationModelSchema=z.object({id:OPAQUE_ID,name:OPAQUE_ID,api:z.literal("openai-completions"),provider:OPAQUE_ID,baseUrl:OPAQUE_TEXT,reasoning:z.boolean(),input:z.array(z.enum(["text","image"])).min(1).max(8),cost:InputPreparationModelCostSchema,contextWindow:z.number().int().positive(),maxTokens:z.number().int().positive(),thinkingLevelMap:InputPreparationThinkingLevelMapSchema.optional(),compat:InputPreparationModelCompatSchema.optional()}).strict();var InputPreparationOptionsSchema=z.object({cacheRetention:z.enum(["none","short","long"]),maxTokens:z.number().int().positive(),temperature:z.number().finite().optional(),toolChoice:z.enum(["auto","none"]).optional(),reasoningEffort:z.enum(["minimal","low","medium","high","xhigh","max"]).optional()}).strict();var InputPreparationSelectionSchema=z.object({model:InputPreparationModelSchema,options:InputPreparationOptionsSchema}).strict();var InputPreparationPromptSnapshotSchema=z.object({systemPrompt:z.string()}).strict();var InputPreparationUserMessageSchema=z.object({role:z.literal("user"),content:z.string(),timestamp:z.number().int()}).strict();var InputPreparationHostCanonicalAssistantMessageSchema=z.object({role:z.literal("assistant"),origin:z.literal("host_canonical"),content:z.string(),timestamp:z.number().int()}).strict();var InputPreparationMessageSchema=z.discriminatedUnion("role",[InputPreparationUserMessageSchema,InputPreparationHostCanonicalAssistantMessageSchema]);var InputPreparationContextDocumentSchema=z.object({prompt:InputPreparationPromptSnapshotSchema,messages:z.array(InputPreparationMessageSchema).max(4096)}).strict();var InputPreparationStateSchema=z.enum(["reserved","counting","prepared","cancelled","failed","counter_interrupted"]);var InputPreparationReadinessReasonSchema=z.enum(["not_prepared","counter_interrupted","cancelled","failed","artifact_expired","counter_authority_not_production","counter_coverage_incomplete","request_content_not_text","projection_unknown","residual_not_ruled","accounting_policy_missing","accounting_policy_inapplicable","runtime_contract_superseded"]);var InputPreparationRuntimeIdentitySchema=z.object({packageName:OPAQUE_ID,packageVersion:OPAQUE_ID,tarballIntegrity:z.string().regex(/^sha512-[A-Za-z0-9+/]+={0,2}$/u),provenanceDigest:z.string().regex(/^[0-9a-f]{64}$/u),closureDigest:z.string().regex(/^[0-9a-f]{64}$/u),upstreamCommit:OPAQUE_ID,envelopeFormat:OPAQUE_ID,requestFormat:OPAQUE_ID,compilerVersion:z.number().int().nonnegative()}).strict();var InputPreparationCounterTargetSchema=z.object({endpoint:OPAQUE_TEXT,modelId:OPAQUE_ID}).strict();var InputPreparationAccountingPolicyRefSchema=z.object({revision:OPAQUE_ID,ruledRuntime:OPAQUE_ID,ruledTarget:InputPreparationCounterTargetSchema,ruledResidualKeys:z.array(OPAQUE_ID).max(64)}).strict();var InputPreparationCounterProviderEvidenceSchema=z.object({projectionDigest:z.string().regex(/^[0-9a-f]{64}$/u,"a projection digest is lowercase sha-256 hex"),endpoint:OPAQUE_TEXT,modelId:OPAQUE_ID,asserted:z.object({httpStatus:z.number().int(),usageFields:z.record(OPAQUE_ID,z.number().finite()),responseDigest:OPAQUE_ID}).strict()}).strict();var InputPreparationCounterEvidenceSchema=z.object({method:OPAQUE_ID,methodVersion:OPAQUE_ID,authority:z.enum(["provider","test_fixture"]),value:z.number().int().nonnegative(),coverage:z.object({covered:z.boolean(),reason:z.string().max(512).optional()}).strict(),providerEvidence:InputPreparationCounterProviderEvidenceSchema,target:InputPreparationCounterTargetSchema,calledAt:z.iso.datetime({offset:true}),completedAt:z.iso.datetime({offset:true})}).strict();var InputPreparationResidualValueClassSchema=z.enum(["constant","boolean","bounded_integer","bounded_number","finite_number","closed_enum","nonempty_string","object_shape"]);var InputPreparationResidualKeySchema=z.object({key:OPAQUE_ID,valueClass:InputPreparationResidualValueClassSchema}).strict();var InputPreparationProjectionSchema=z.object({version:z.literal(3),kind:z.enum(["content_complete","unknown"]),digest:z.string().regex(/^[0-9a-f]{64}$/u,"a projection digest is lowercase sha-256 hex")}).strict();var InputPreparationArtifactSummarySchema=z.object({requestDigest:OPAQUE_ID,envelopeDigest:OPAQUE_ID,toolManifestDigest:OPAQUE_ID,requestBytes:z.number().int().nonnegative(),projectionBytes:z.number().int().nonnegative(),projection:InputPreparationProjectionSchema,residual:z.array(InputPreparationResidualKeySchema).max(64),observationDigest:OPAQUE_ID,toolBindingDigest:OPAQUE_ID,toolNames:z.array(OPAQUE_ID)}).strict();var InputPreparationBindingSchema=z.object({terminalProjection:TerminalProjectionSelectionSchema.optional(),agentMemory:PreparedAgentMemoryModeSchema,scopeId:OPAQUE_ID,deviceId:OPAQUE_ID,agentRef:OPAQUE_ID,profileId:OPAQUE_ID,profileRevision:OPAQUE_ID,source:InputPreparationSourceSchema,target:InputPreparationCounterTargetSchema,policyRevision:OPAQUE_ID,runtime:InputPreparationRuntimeIdentitySchema,requestDigest:OPAQUE_ID,accountingPolicyRef:InputPreparationAccountingPolicyRefSchema.optional()}).strict();var InputPreparationReceiptSummarySchema=z.object({reference:OPAQUE_ID,state:InputPreparationStateSchema,binding:InputPreparationBindingSchema,artifact:InputPreparationArtifactSummarySchema.optional(),counter:InputPreparationCounterEvidenceSchema.optional(),ready:z.boolean(),readinessReasons:z.array(InputPreparationReadinessReasonSchema).max(16),detail:OPAQUE_ID.optional(),artifactExpiresAt:z.iso.datetime({offset:true})}).strict().superRefine((value,ctx)=>{if(value.ready!==(value.readinessReasons.length===0)){ctx.addIssue({code:"custom",path:["ready"],message:"ready must be true exactly when readinessReasons is empty"});}});var InputPreparationReferenceSchema=OPAQUE_ID;var InputPreparationOfferBindingSchema=z.object({reference:InputPreparationReferenceSchema,requestDigest:OPAQUE_ID,artifactDigest:OPAQUE_ID.optional()}).strict();var InputPreparationRejectionReasonSchema=z.enum(["input_preparation_unconfigured","bad_request","authority_unavailable","scope_denied","policy_revision_mismatch","runtime_identity_unavailable","unsupported_input","limit_exceeded","request_conflict","not_found","counter_unavailable","counter_interrupted","durable_write_failed","cancelled","context_unresolvable","context_hash_mismatch","toolsets_unobservable","deadline_elapsed","observation_drift","rpc_frame_too_large","input_preparation_record_log_unsupported"]);var AGENT_EVENT_SPILL_UNSTORED_REASON_MAX_LENGTH=512;var AgentEventSpillSchema=z.object({field:z.enum(["input","output"]),totalBytes:z.number().int().nonnegative(),omittedBytes:z.number().int().nonnegative(),contentType:z.literal("application/json"),blob:BlobRefSchema.optional(),unstoredReason:z.string().min(1).max(AGENT_EVENT_SPILL_UNSTORED_REASON_MAX_LENGTH).optional()}).strict().refine(spill=>spill.blob===void 0!==(spill.unstoredReason===void 0),"spill must carry exactly one of blob (the omitted bytes are readable) or unstoredReason (they are not)");var AgentEventSchema=z.discriminatedUnion("type",[z.object({type:z.literal("progress"),text:z.string()}),z.object({type:z.literal("tool_use"),tool:z.string(),mcp:z.object({server:z.string().min(1),tool:z.string().min(1)}).strict().optional(),input:z.unknown().optional(),toolCallId:z.string().regex(/\S/,"toolCallId must contain a non-whitespace character").optional(),spill:AgentEventSpillSchema.optional()}),z.object({type:z.literal("tool_result"),tool:z.string(),mcp:z.object({server:z.string().min(1),tool:z.string().min(1)}).strict().optional(),output:z.unknown().optional(),toolCallId:z.string().regex(/\S/,"toolCallId must contain a non-whitespace character").optional(),isError:z.boolean().optional(),spill:AgentEventSpillSchema.optional()}),z.object({type:z.literal("artifact"),name:z.string(),contentType:z.string()}),z.object({type:z.literal("turn_end")}),z.object({type:z.literal("error"),message:z.string()}),z.object({type:z.literal("usage"),inputTokens:z.number().int().nonnegative().optional(),cachedInputTokens:z.number().int().nonnegative().optional(),outputTokens:z.number().int().nonnegative().optional(),reasoningTokens:z.number().int().nonnegative().optional(),totalTokens:z.number().int().nonnegative().optional(),contextTokens:z.number().int().nonnegative().optional(),contextWindow:z.number().int().positive().optional(),contextSource:z.enum(["provider","estimate"]).optional(),model:z.string().min(1).max(TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH).optional()})]);var KNOWN_AGENT_EVENT_TYPES=z.toJSONSchema(AgentEventSchema).oneOf.map(branch=>branch.properties.type.const);var UnknownAgentEventSchema=z.object({type:z.string()}).passthrough().refine(event=>!KNOWN_AGENT_EVENT_TYPES.includes(event.type),"type refers to a known AgentEvent variant; malformed known variants must fail through AgentEventSchema, not fall back to unknown-tolerance");var AgentEventOrUnknownSchema=z.union([AgentEventSchema,UnknownAgentEventSchema]);function isKnownAgentEvent(event){return KNOWN_AGENT_EVENT_TYPES.includes(event.type)}function partitionAgentEvents(events){const known=[];const unknown=[];for(const event of events){if(isKnownAgentEvent(event)){known.push(event);}else {unknown.push(event);}}return {known,unknown}}var AGENT_HOME_PROJECTION_MAX_BYTES=64*1024;var AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM="9223372036854775807";var AgentHomeProjectionProfileRevisionSchema=z.string().regex(/^[1-9][0-9]{0,18}$/u,"profileRevision must be a canonical positive decimal string").refine(value=>value.length<AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM.length||value<=AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM,`profileRevision must not exceed PostgreSQL BIGINT maximum ${AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM}`);var AgentHomeProjectionHashSchema=AgentEgressContentHashSchema;var AgentHomeProjectionOutcomeSchema=z.enum(["applied","idempotent","stale","conflict"]);var AgentHomeProjectionValueSchema=z.json().refine(value=>new TextEncoder().encode(JSON.stringify(value)).byteLength<=AGENT_HOME_PROJECTION_MAX_BYTES,`projection must not exceed ${AGENT_HOME_PROJECTION_MAX_BYTES} UTF-8 JSON bytes`);var E2EE_MEMBER_CHAIN_APPEND_MAX_ENTRIES=64;var E2EE_MEMBER_CHAIN_ENTRY_MAX_BYTES=65536;var E2EE_MEMBER_CHAIN_READ_MAX_ENTRIES=256;var E2EE_SCOPE_KEY_PACKAGE_PUT_MAX=256;var E2EE_SCOPE_KEY_PACKAGE_PAGE_MAX=16;var E2EE_SCOPE_ID_MAX_LENGTH=512;var E2EE_MEMBER_KEY_REGISTER_OPERATION="e2ee-member-key.register";var E2EE_MEMBER_CHAIN_APPEND_OPERATION="e2ee-member-chain.append";var E2EE_SCOPE_KEY_PACKAGE_PUT_OPERATION="e2ee-scope-key-package.put";function base64UrlBytes(bytes){const length=Math.ceil(bytes*4/3);const last=["[A-Za-z0-9_-]","[AQgw]","[AEIMQUYcgkosw048]"][bytes%3];return z.string().regex(new RegExp(`^[A-Za-z0-9_-]{${length-1}}${last}$`,"u"))}var MemberIdSchema=z.string().regex(/^[A-Za-z0-9_-]{43}$/u);var PositiveSafeIntegerSchema=z.number().int().positive().max(Number.MAX_SAFE_INTEGER);var SignatureSchema=base64UrlBytes(64);var P256PublicJwkSchema=z.strictObject({kty:z.literal("EC"),crv:z.literal("P-256"),x:base64UrlBytes(32),y:base64UrlBytes(32)});var E2eeMemberKeyBundleSchema=z.strictObject({v:z.literal(1),memberId:MemberIdSchema,signingPublicJwk:P256PublicJwkSchema,kemPublicJwk:P256PublicJwkSchema,kemEpoch:PositiveSafeIntegerSchema,kemSig:SignatureSchema,deviceId:z.string().min(1).optional()});var E2EE_MEMBER_CHAIN_OPS=["add","remove","rotate","scope-policy","shred"];var E2eeScopeShredSubjectSchema=z.strictObject({scopeId:z.string().min(1)});var E2eeMemberRotateSubjectSchema=z.strictObject({memberId:MemberIdSchema,kemPublicJwk:P256PublicJwkSchema,kemEpoch:PositiveSafeIntegerSchema,kemSig:SignatureSchema});var E2eeMemberChainEntrySchema=z.strictObject({v:z.literal(1),tenantId:z.string().min(1),seq:PositiveSafeIntegerSchema,prev:z.union([z.null(),z.string().regex(CONTENT_HASH_RE)]),op:z.enum(E2EE_MEMBER_CHAIN_OPS),subject:z.custom(value=>value!==null&&typeof value==="object"&&!Array.isArray(value)),signer:MemberIdSchema,sig:SignatureSchema}).refine(entry=>entry.seq===1===(entry.prev===null),{path:["prev"],message:"the first entry, and only the first, has no prev"}).refine(entry=>entry.op!=="shred"||E2eeScopeShredSubjectSchema.safeParse(entry.subject).success,{path:["subject"],message:"a shred subject is exactly { scopeId }"}).refine(entry=>entry.op!=="rotate"||E2eeMemberRotateSubjectSchema.safeParse(entry.subject).success,{path:["subject"],message:"a rotate subject is exactly { memberId, kemPublicJwk, kemEpoch, kemSig }"});var E2eeScopeKeyPackageV1Schema=z.strictObject({v:z.literal(1),tenantId:z.string().min(1),scopeId:z.string().min(1),epoch:PositiveSafeIntegerSchema,keyId:z.string().regex(/^[A-Za-z0-9_-]{22}$/u),recipient:MemberIdSchema,sender:MemberIdSchema,enc:base64UrlBytes(65),ciphertext:base64UrlBytes(48),sig:SignatureSchema});var E2eeScopeKeyPackageV2Schema=z.strictObject({...E2eeScopeKeyPackageV1Schema.shape,v:z.literal(2),recipientKemEpoch:PositiveSafeIntegerSchema});var E2eeScopeKeyPackageSchema=z.union([E2eeScopeKeyPackageV1Schema,E2eeScopeKeyPackageV2Schema]);var E2eePairingMacSchema=base64UrlBytes(32);var E2eeMemberKeyRegisterRequestSchema=z.strictObject({member:E2eeMemberKeyBundleSchema.refine(member=>member.deviceId!==void 0,{message:"a device member names its deviceId"}),mac:E2eePairingMacSchema});var E2eeClientPairingMacSchema=z.strictObject({mac:E2eePairingMacSchema,member:E2eeMemberKeyBundleSchema.refine(member=>member.deviceId===void 0,{message:"a client member has no deviceId"}),chainHead:z.strictObject({seq:PositiveSafeIntegerSchema,hash:z.string().regex(CONTENT_HASH_RE)})});var E2eeKeyPackageAvailablePayloadSchema=z.strictObject({scopeId:z.string().min(1).max(E2EE_SCOPE_ID_MAX_LENGTH),epoch:PositiveSafeIntegerSchema});var OPEN_VOCABULARY_TOKEN=/^[a-z][a-z0-9_-]{0,63}$/;function openVocabularyToken(){return z.string().regex(OPEN_VOCABULARY_TOKEN)}function unrecognizedToken(known){return openVocabularyToken().refine(value=>!known.includes(value),{message:"a recognized value is not reported as unrecognized"})}var MAX_INLINE_BYTES=64*1024;function isWithinInlineByteLimit(value){return new TextEncoder().encode(value).length<=MAX_INLINE_BYTES}var RuntimeIdSchema=z.enum(RUNTIME_IDS);var RuntimeUnavailableCauseSchema=z.union([z.enum(RUNTIME_UNAVAILABLE_CAUSES),unrecognizedToken(RUNTIME_UNAVAILABLE_CAUSES)]);function readRuntimeUnavailableCause(cause){return RUNTIME_UNAVAILABLE_CAUSES.includes(cause)?{cause}:{cause:"unknown",reportedCause:cause}}var ProtocolVersionNumberSchema=z.number().int().nonnegative().max(2147483647);var RuntimeCapabilitiesSchema=z.object({steer:z.boolean().optional(),resume:z.boolean().optional(),approvalInteractive:z.boolean().optional(),mcpToolsets:z.boolean().optional(),messageDraft:z.boolean().optional(),toolAuthorizationAuto:z.boolean().optional(),durablePi:z.boolean().optional(),preparedLane:z.boolean().optional(),isolation:z.object({userContext:z.boolean().optional(),userMcpServers:z.boolean().optional(),sessionPersistence:z.boolean().optional()}).optional()});var RuntimeVersionPolicyProjectionSchema=z.object({state:z.enum(["allow","warn","block"]),qualifiedVersion:z.string().min(1).max(256).optional()});var RuntimeInfoSchema=z.object({id:RuntimeIdSchema,version:z.string().optional(),authPresent:z.boolean().optional(),capabilities:RuntimeCapabilitiesSchema.optional(),versionPolicy:RuntimeVersionPolicyProjectionSchema.optional()});var HarnessIdSchema=z.string().min(1).max(128).regex(/^[a-z][a-z0-9]*(?:[._-][a-z0-9]+)*$/).refine(value=>!RUNTIME_IDS.includes(value),"built-in runtime must use runtime");var HarnessInfoSchema=z.object({id:HarnessIdSchema,version:z.string().min(1).max(128).optional(),capabilities:RuntimeCapabilitiesSchema,versionPolicy:RuntimeVersionPolicyProjectionSchema.optional()});var HarnessInventorySchema=z.array(HarnessInfoSchema).max(64).refine(values=>new Set(values.map(value=>value.id)).size===values.length,"duplicate harness identity");var RuntimeUnavailableEntrySchema=z.object({id:z.union([RuntimeIdSchema,HarnessIdSchema]),cause:RuntimeUnavailableCauseSchema,retryable:z.boolean()});var RuntimeUnavailableListSchema=z.array(RuntimeUnavailableEntrySchema).max(16).refine(values=>new Set(values.map(value=>value.id)).size===values.length,"duplicate runtime-unavailable identity");var CONFIGURED_TOOLSETS_MAX_ITEMS=64;var ToolsetIdSchema=z.string().min(1).max(128).regex(/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/u,"toolset ids must be lowercase logical identifiers");var AGENT_REF_MAX_BYTES=160;var AGENT_REF_VALUE=z.string().min(1).max(AGENT_REF_MAX_BYTES).refine(value=>new TextEncoder().encode(value).byteLength<=AGENT_REF_MAX_BYTES,{message:`AgentRef values must not exceed ${AGENT_REF_MAX_BYTES} UTF-8 bytes`}).regex(/^[^\u0000-\u001f\u007f\r\n]+$/u,"AgentRef values must not contain control characters");var WINDOWS_RESERVED_AGENT_SEGMENT=/^(?:con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\..*)?$/iu;var AgentRefSchema=z.object({agentId:AGENT_REF_VALUE.regex(/^[^\\/:<>"|?*]+$/u,"agentId must be one portable pathname segment").refine(value=>value!=="."&&value!=="..","agentId must not be a dot segment").refine(value=>!/[. ]$/u.test(value)&&!WINDOWS_RESERVED_AGENT_SEGMENT.test(value),"agentId must be a portable Windows-safe pathname segment"),profileRevision:AGENT_REF_VALUE}).strict();var AgentHomeProjectionAgentRefSchema=AgentRefSchema.extend({profileRevision:AgentHomeProjectionProfileRevisionSchema}).strict();function rejectDuplicateToolsets(ids,ctx,label){const seen=new Set;for(const[index,id]of ids.entries()){if(seen.has(id)){ctx.addIssue({code:"custom",path:[index],message:`duplicate ${label} toolset: ${id}`});}seen.add(id);}}var ConfiguredToolsetsSchema=z.array(ToolsetIdSchema).max(CONFIGURED_TOOLSETS_MAX_ITEMS).superRefine((ids,ctx)=>rejectDuplicateToolsets(ids,ctx,"configured"));var ConnHelloPayloadSchema=z.object({protocolVersions:z.array(ProtocolVersionNumberSchema).max(16),capabilities:z.array(z.string()),deviceId:z.string(),productId:z.string(),clientVersion:z.string().min(1).max(128).optional(),runtimes:z.array(RuntimeInfoSchema).optional(),harnesses:HarnessInventorySchema.optional(),runtimeUnavailable:RuntimeUnavailableListSchema.optional(),configuredToolsets:ConfiguredToolsetsSchema.optional(),cursor:z.number().int().optional()});var InstructionBlobRefSchema=z.object({blobRef:BlobRefSchema}).strict();var DispatchTargetIdSchema=z.string().min(1).max(160).regex(/^[^\u0000\r\n]+$/u,"dispatch target ids must not contain control line breaks");var DispatchSelectionSchema=z.discriminatedUnion("lane",[z.object({lane:z.literal("subscription"),runtimeId:z.enum(["claude","codex"]),providerId:z.null(),modelId:DispatchTargetIdSchema}).strict(),z.object({lane:z.literal("byok"),runtimeId:z.literal("pi"),providerId:DispatchTargetIdSchema,modelId:DispatchTargetIdSchema}).strict(),z.object({lane:z.literal("byok-profile"),runtimeId:z.literal("pi"),providerProfile:ProviderProfileBindingSchema}).strict()]);var NO_SEALED_MEMBER={sealed:z.never().optional(),sealing:z.never().optional()};var RequiredToolsetsSchema=z.array(ToolsetIdSchema).min(1).max(16).superRefine((ids,ctx)=>rejectDuplicateToolsets(ids,ctx,"required"));var AgentHomeAccessSchema=z.literal("memory-reader");var AgentMemorySelectionSchema=z.enum([...PreparedAgentMemoryModeSchema.options,"read-if-admitted","read-write-if-admitted"]);var SessionSelectionSchema=z.discriminatedUnion("mode",[z.object({mode:z.literal("resume"),sessionRef:z.string().min(1).max(512)}).strict(),z.object({mode:z.literal("fresh")}).strict()]);var OFFER_FIELDS={agentRef:AgentRefSchema,session:SessionSelectionSchema,preparation:InputPreparationOfferBindingSchema.optional(),agentMemory:AgentMemorySelectionSchema.optional(),homeAccess:AgentHomeAccessSchema.optional(),requiredToolsets:RequiredToolsetsSchema.optional(),runtime:RuntimeIdSchema.optional(),harnessId:HarnessIdSchema.optional(),dispatchSelection:DispatchSelectionSchema.optional(),terminalProjection:TerminalProjectionSelectionSchema.optional(),limits:z.object({maxDurationMs:z.number().int().positive().optional(),maxTokens:z.number().int().positive().optional()}).strict().optional(),egressPolicy:AgentEgressPolicySchema.optional(),messageEgress:AgentMessageEgressRequirementSchema.optional()};function offerRule(payload,ctx,plaintext){const{instruction,session,preparation,agentMemory,egressPolicy,messageEgress,routineRef}=payload;if(preparation!==void 0){if(instruction!==void 0)ctx.addIssue({code:"custom",path:["instruction"],message:"a prepared offer carries no instruction"});if(session.mode!=="fresh")ctx.addIssue({code:"custom",path:["session"],message:"a prepared offer never resumes"});if(!PreparedAgentMemoryModeSchema.safeParse(agentMemory).success){ctx.addIssue({code:"custom",path:["agentMemory"],message:"a prepared offer selects a prepared agentMemory mode"});}}else if(plaintext&&instruction===void 0){ctx.addIssue({code:"custom",path:["instruction"],message:"an offer that is not prepared carries an instruction"});}if((preparation!==void 0||session.mode==="fresh")&&egressPolicy===void 0){ctx.addIssue({code:"custom",path:["egressPolicy"],message:"a fresh or prepared offer carries an egressPolicy"});}if(messageEgress!==void 0&&egressPolicy===void 0){ctx.addIssue({code:"custom",path:["messageEgress"],message:"messageEgress needs an egressPolicy"});}if(routineRef!==void 0&&session.mode!=="fresh"){ctx.addIssue({code:"custom",path:["routineRef"],message:"a routine occurrence is an execution, so it needs a fresh session"});}}var TaskOfferPlainFields=z.object({...NO_SEALED_MEMBER,routineRef:z.never().optional(),instruction:z.union([z.string(),InstructionBlobRefSchema]).optional(),...OFFER_FIELDS}).strict();var TaskOfferSealedFields=z.object({instruction:z.union([z.string(),InstructionBlobRefSchema]).optional(),sealing:TaskSealingSchema,sealed:SealedTaskInputSchema.optional(),routineRef:RoutineRefSchema.optional(),...OFFER_FIELDS,preparation:z.never().optional()}).strict();var TaskOfferPlainPayloadSchema=TaskOfferPlainFields.superRefine((payload,ctx)=>offerRule(payload,ctx,true));var TaskOfferSealedPayloadSchema=TaskOfferSealedFields.superRefine((payload,ctx)=>{offerRule(payload,ctx,false);sealedOfferRule(payload,ctx);});var TaskOfferPayloadSchema=z.union([TaskOfferPlainPayloadSchema,TaskOfferSealedPayloadSchema]);var EGRESS_SAFE_VALUE=z.json().refine(value=>new TextEncoder().encode(JSON.stringify(value)).byteLength<=256*1024,"egress payload exceeds 256KiB");var EGRESS_SESSION_REF=z.string().min(1).max(512);var AgentEgressReliablePayloadSchema=z.object({agentRef:AgentRefSchema,sessionRef:EGRESS_SESSION_REF,policyRevision:AgentEgressPolicyRevisionSchema,eventId:z.uuid(),cursor:z.number().int().positive(),payload:EGRESS_SAFE_VALUE,contentHash:AgentEgressContentHashSchema,byteCount:z.number().int().nonnegative().max(256*1024)}).strict();var AgentEgressAckPayloadSchema=z.object({agentRef:AgentRefSchema,sessionRef:EGRESS_SESSION_REF,policyRevision:AgentEgressPolicyRevisionSchema,eventId:z.uuid(),cursor:z.number().int().positive(),receiptId:z.uuid()}).strict();var AGENT_MESSAGE_BODY=z.string().min(1).refine(value=>new TextEncoder().encode(value).byteLength<=AGENT_MESSAGE_MAX_BYTES,`Agent message body exceeds ${AGENT_MESSAGE_MAX_BYTES} bytes`);var AgentMessageDraftPayloadSchema=z.object({agentRef:AgentRefSchema,revision:z.number().int().min(1),offset:z.number().int().nonnegative(),text:z.string().refine(value=>new TextEncoder().encode(value).byteLength<=AGENT_MESSAGE_DRAFT_FRAME_MAX_BYTES,`Agent message draft frame exceeds ${AGENT_MESSAGE_DRAFT_FRAME_MAX_BYTES} bytes`),overflow:z.literal(true).optional()}).strict();var AgentMessagePublishPayloadSchema=z.object({agentRef:AgentRefSchema,sessionRef:EGRESS_SESSION_REF,contract:AgentMessageContractSchema,messageId:z.uuid(),cursor:z.number().int().positive(),contentType:AgentMessageContentTypeSchema,body:AGENT_MESSAGE_BODY,contentHash:AgentEgressContentHashSchema,byteCount:z.number().int().positive().max(AGENT_MESSAGE_MAX_BYTES)}).strict().superRefine((value,context)=>{const actual=new TextEncoder().encode(value.body).byteLength;if(actual!==value.byteCount){context.addIssue({code:"custom",path:["byteCount"],message:"byteCount must equal UTF-8 body bytes"});}});var AgentMessageDispositionPayloadSchema=z.object({agentRef:AgentRefSchema,sessionRef:EGRESS_SESSION_REF,contract:AgentMessageContractSchema,messageId:z.uuid(),cursor:z.number().int().positive(),contentHash:AgentEgressContentHashSchema,outcome:z.enum(["accepted","held","refused"]),receiptId:z.uuid(),reasonCode:z.string().min(1).max(160).regex(/^[A-Za-z0-9][A-Za-z0-9._:-]*$/u).optional()}).strict();var AGENT_CONTENT_TARGET=z.string().min(1).max(1024).regex(/^[^\u0000-\u001f\u007f]+$/u,"content target must not contain control characters").refine(value=>!value.startsWith("/")&&!value.includes("\\")&&value.split("/").every(segment=>segment.length>0&&segment!=="."&&segment!==".."),"content target must be a portable relative path without dot segments");var AGENT_CONTENT_CWD=z.string().min(1).max(4096).regex(/^[^\u0000-\u001f\u007f]+$/u,"cwd must not contain control characters").regex(/^(?:\/|[A-Za-z]:[\\/])/u,"cwd must be absolute");var AgentContentReadPayloadSchema=z.object({requestId:z.uuid(),surface:AgentContentReadSurfaceSchema,actor:AgentContentActorSchema,agentRef:AgentRefSchema,sessionRef:EGRESS_SESSION_REF,runtime:RuntimeIdSchema,cwd:AGENT_CONTENT_CWD,policyRevision:AgentEgressPolicyRevisionSchema,target:AGENT_CONTENT_TARGET,mimeType:AgentContentMimeTypeSchema,decodeAs:AgentContentDecodeAsSchema,policy:ContentReadPolicySchema}).strict();var AgentContentReceiptPayloadSchema=z.discriminatedUnion("decision",[z.object({requestId:z.uuid(),eventId:z.uuid(),cursor:z.number().int().positive(),surface:AgentContentReadSurfaceSchema,actor:AgentContentActorSchema,agentRef:AgentRefSchema,sessionRef:EGRESS_SESSION_REF,runtime:RuntimeIdSchema,cwd:AGENT_CONTENT_CWD,policyRevision:AgentEgressPolicyRevisionSchema,target:AGENT_CONTENT_TARGET,mimeType:AgentContentMimeTypeSchema,decodeAs:AgentContentDecodeAsSchema,decision:z.literal("allowed"),byteCount:z.number().int().nonnegative(),contentHash:AgentEgressContentHashSchema,blobRef:BlobRefSchema}).strict(),z.object({requestId:z.uuid(),eventId:z.uuid(),cursor:z.number().int().positive(),surface:AgentContentReadSurfaceSchema,actor:AgentContentActorSchema,agentRef:AgentRefSchema,sessionRef:EGRESS_SESSION_REF,runtime:RuntimeIdSchema,cwd:AGENT_CONTENT_CWD,policyRevision:AgentEgressPolicyRevisionSchema,target:AGENT_CONTENT_TARGET,mimeType:AgentContentMimeTypeSchema,decodeAs:AgentContentDecodeAsSchema,decision:z.literal("denied"),byteCount:z.literal(0),reason:z.union([AgentContentReadDenialReasonSchema,unrecognizedToken(AgentContentReadDenialReasonSchema.options)])}).strict()]).superRefine((value,ctx)=>{if(value.decision!=="allowed")return;if(value.blobRef.size!==value.byteCount){ctx.addIssue({code:"custom",path:["blobRef","size"],message:"blobRef size must equal byteCount"});}if(value.blobRef.contentHash!==value.contentHash){ctx.addIssue({code:"custom",path:["blobRef","contentHash"],message:"blobRef contentHash must equal contentHash"});}if(value.blobRef.contentType!==value.mimeType){ctx.addIssue({code:"custom",path:["blobRef","contentType"],message:"blobRef contentType must equal mimeType"});}});var AgentHomeProjectionPayloadSchema=z.object({requestId:z.uuid(),agentRef:AgentHomeProjectionAgentRefSchema,projectionHash:AgentHomeProjectionHashSchema,projection:AgentHomeProjectionValueSchema}).strict();var AgentMemoryIntentAvailablePayloadSchema=z.object({intentId:z.uuid(),agentRef:AgentHomeProjectionAgentRefSchema}).strict();var InputPreparationInlineContextSchema=z.object({inline:z.string().refine(isWithinInlineByteLimit,`inline context must not exceed ${MAX_INLINE_BYTES} UTF-8 bytes`)}).strict();var InputPreparationBlobContextSchema=z.object({blobRef:BlobRefSchema,contentHash:InputPreparationContentHashSchema}).strict().superRefine((value,ctx)=>{if(value.blobRef.contentHash!==value.contentHash){ctx.addIssue({code:"custom",path:["blobRef","contentHash"],message:"blobRef contentHash must equal contentHash"});}});var AgentInputPreparationPayloadSchema=z.object({agentMemory:PreparedAgentMemoryModeSchema,requestId:z.uuid(),agentRef:AgentRefSchema,profileId:InputPreparationProfileIdSchema,policyRevision:InputPreparationPolicyRevisionSchema,source:InputPreparationSourceSchema,selection:InputPreparationSelectionSchema,deadlineAt:z.iso.datetime({offset:true}),context:z.union([InputPreparationInlineContextSchema,InputPreparationBlobContextSchema]),requiredToolsets:z.array(ToolsetIdSchema).max(16).superRefine((ids,ctx)=>rejectDuplicateToolsets(ids,ctx,"required")),accountingPolicyRef:InputPreparationAccountingPolicyRefSchema.optional()}).strict();var TaskApprovePayloadSchema=z.object({approvalId:z.string().min(1)});var TaskRejectPayloadSchema=z.object({reason:z.string().optional(),approvalId:z.string().min(1)});var TaskCancelPayloadSchema=z.object({reason:z.string().optional()});var TaskSteerPlainPayloadSchema=z.object({...NO_SEALED_MEMBER,text:z.string()});var OFFER_ADMISSION_MAX_DURATION_MS=6048e5;var OfferAdmissionDurationSchema=z.number().int().nonnegative().max(OFFER_ADMISSION_MAX_DURATION_MS);var OfferAdmissionTimingsSchema=z.object({totalMs:OfferAdmissionDurationSchema,agentHomeWaitMs:OfferAdmissionDurationSchema.optional(),messageHelperPreflightMs:OfferAdmissionDurationSchema.optional(),resultHelperPreflightMs:OfferAdmissionDurationSchema.optional(),toolsetProbeMs:OfferAdmissionDurationSchema.optional(),runtimeLaunchMs:OfferAdmissionDurationSchema.optional()}).strict();var TaskClaimPayloadSchema=z.object({deviceId:z.string(),agentId:z.string().optional(),agentRef:AgentRefSchema.optional(),runtime:RuntimeIdSchema.optional(),harnessId:HarnessIdSchema.optional(),capabilities:RuntimeCapabilitiesSchema.optional(),admission:OfferAdmissionTimingsSchema.optional()});var TaskStartedPayloadSchema=z.object({});var HOME_DECLINE_CODES=["agent_home_writer_busy","agent_home_reader_busy"];var DECLINE_CODES=[...HOME_DECLINE_CODES,...SEALED_DECLINE_CODES];var RuntimeUnavailableSchema=z.object({cause:RuntimeUnavailableCauseSchema,code:openVocabularyToken().optional()}).refine(value=>value.code===void 0||value.cause==="environment_unavailable",{message:"only environment_unavailable carries an environment code"});var DeclineFields=z.object({...NO_SEALED_MEMBER,reason:z.string(),retryable:z.boolean().optional(),agentRef:AgentRefSchema.optional(),code:z.union([z.enum(DECLINE_CODES),unrecognizedToken(DECLINE_CODES)]).optional(),runtimeUnavailable:RuntimeUnavailableSchema.optional(),admission:OfferAdmissionTimingsSchema.optional()});function readDeclineCode(code){return DECLINE_CODES.includes(code)?{code}:{code:"unknown",reportedCode:code}}var TaskDeclinePlainPayloadSchema=DeclineFields.refine(p=>!SEALED_DECLINE_CODES.includes(p.code)||p.reason===p.code&&p.retryable!==true,{message:"a sealed code needs reason === code, not retryable"});var TaskProgressPlainPayloadSchema=z.object({...NO_SEALED_MEMBER,seq:z.number().int(),events:z.array(AgentEventOrUnknownSchema)});var TaskArtifactPlainPayloadSchema=z.object({...NO_SEALED_MEMBER,name:z.string(),contentType:z.string(),inline:z.string().refine(isWithinInlineByteLimit,{message:"inline artifact payload exceeds 64KB limit"}).optional(),blobRef:BlobRefSchema.optional()});var TaskAwaitApprovalPlainPayloadSchema=z.object({...NO_SEALED_MEMBER,summary:z.string(),approvalId:z.string().min(1)});var RESULT_DOCUMENT_MAX_BYTES=1048576;function checkResultDocument(document){return canonicalizePlainJson(document,RESULT_DOCUMENT_MAX_BYTES)}var TERMINAL_INFERENCE_USAGE_MAX_TOKENS=1e9;var TERMINAL_INFERENCE_USAGE_MAX_DURATION_MS=6048e5;var TERMINAL_INFERENCE_USAGE_PROVIDER_MAX_LENGTH=160;var TERMINAL_INFERENCE_USAGE_CLIENT_VERSION_MAX_LENGTH=128;var TerminalInferenceUsageNumberSchema=z.number().int().safe().nonnegative().max(TERMINAL_INFERENCE_USAGE_MAX_TOKENS);var TerminalInferenceUsageDurationSchema=z.number().int().safe().nonnegative().max(TERMINAL_INFERENCE_USAGE_MAX_DURATION_MS);var TerminalInferenceReportedAtSchema=z.iso.datetime({offset:true,precision:3}).refine(value=>value.endsWith("Z"),"reportedAt must be canonical UTC (Z)");var TerminalInferenceUsageSchema=z.object({runtime:RuntimeIdSchema,provider:z.string().min(1).max(TERMINAL_INFERENCE_USAGE_PROVIDER_MAX_LENGTH).optional(),model:z.string().min(1).max(TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH).optional(),promptTokens:TerminalInferenceUsageNumberSchema.optional(),completionTokens:TerminalInferenceUsageNumberSchema.optional(),durationMs:TerminalInferenceUsageDurationSchema.optional(),clientVersion:z.string().min(1).max(TERMINAL_INFERENCE_USAGE_CLIENT_VERSION_MAX_LENGTH),reportedAt:TerminalInferenceReportedAtSchema});var TerminalPreparedObservationSchema=z.object({requestDigest:InputPreparationArtifactSummarySchema.shape.requestDigest,initialPromptTokens:TerminalInferenceUsageNumberSchema,maxPromptTokens:TerminalInferenceUsageNumberSchema}).strict().refine(value=>value.maxPromptTokens>=value.initialPromptTokens,{message:"maxPromptTokens must not be below initialPromptTokens",path:["maxPromptTokens"]});var TerminalAgentHomeProjectionSchema=z.object({profileRevision:AgentHomeProjectionProfileRevisionSchema,projectionHash:AgentHomeProjectionHashSchema}).strict();var AGENT_HOME_MEMORY_DIGEST_MAX_FILES=256;var AGENT_HOME_MEMORY_DIGEST_MAX_BYTES=16*1024*1024;var AGENT_HOME_MEMORY_PATH_MAX_LENGTH=1024;var AgentHomeMemoryChangedPathsSchema=z.array(z.string().min(1).max(AGENT_HOME_MEMORY_PATH_MAX_LENGTH).regex(/^[^\u0000]+$/u)).min(1).max(AGENT_HOME_MEMORY_DIGEST_MAX_FILES*2);var TerminalAgentHomeMemoryChangeSchema=z.discriminatedUnion("outcome",[z.object({outcome:z.literal("unchanged")}).strict(),z.object({outcome:z.literal("reader-attributed"),paths:AgentHomeMemoryChangedPathsSchema}).strict(),z.object({outcome:z.literal("unattributed"),paths:AgentHomeMemoryChangedPathsSchema}).strict(),z.object({outcome:z.literal("unmeasured")}).strict()]);var TaskCompletePlainPayloadSchema=z.object({...NO_SEALED_MEMBER,harnessId:HarnessIdSchema.optional(),summary:z.string(),finalMessage:z.string().optional(),sessionRef:z.string(),artifactRefs:z.array(BlobRefSchema).optional(),document:z.unknown().optional().refine(value=>value===void 0||checkResultDocument(value).ok,{message:`task.complete.document must be plain JSON data (equal to its own JSON round trip) and at most ${RESULT_DOCUMENT_MAX_BYTES} bytes as canonical JSON (UTF-8)`}),usage:TerminalInferenceUsageSchema.optional(),preparedObservation:TerminalPreparedObservationSchema.optional(),agentRef:AgentRefSchema.optional(),agentHomeProjection:TerminalAgentHomeProjectionSchema.optional(),agentHomeMemoryChange:TerminalAgentHomeMemoryChangeSchema.optional()});var RuntimeFailureClassSchema=z.enum(RUNTIME_FAILURE_CLASSES);var TaskFailureSchema=z.union([z.object({class:z.literal("quota"),resetsAt:z.iso.datetime().optional()}).strict(),z.object({class:RuntimeFailureClassSchema.exclude(["quota"])}).strict(),z.looseObject({class:unrecognizedToken(RUNTIME_FAILURE_CLASSES)})]);function readTaskFailure(failure){if(RUNTIME_FAILURE_CLASSES.includes(failure.class))return failure;return {class:"unknown",reportedClass:failure.class}}var TaskFailPlainPayloadSchema=z.object({...NO_SEALED_MEMBER,recovery:z.object({kind:z.literal("daemon_interrupted"),offerId:z.uuid()}).strict().optional(),harnessId:HarnessIdSchema.optional(),reason:z.string().transform(boundFailureReason),retryable:z.boolean().optional(),failure:TaskFailureSchema.optional(),usage:TerminalInferenceUsageSchema.optional(),preparedObservation:TerminalPreparedObservationSchema.optional(),agentRef:AgentRefSchema.optional(),agentHomeProjection:TerminalAgentHomeProjectionSchema.optional(),agentHomeMemoryChange:TerminalAgentHomeMemoryChangeSchema.optional()});var TaskCancelledPlainPayloadSchema=z.object({...NO_SEALED_MEMBER,harnessId:HarnessIdSchema.optional(),reason:z.string().optional(),usage:TerminalInferenceUsageSchema.optional(),agentRef:AgentRefSchema.optional(),agentHomeProjection:TerminalAgentHomeProjectionSchema.optional(),agentHomeMemoryChange:TerminalAgentHomeMemoryChangeSchema.optional()});var TaskApprovalResolvedPayloadSchema=z.object({approvalId:z.string(),decision:z.enum(["approve","reject"]),resolvedBy:z.enum(["local"]),at:z.iso.datetime({offset:true})});var TaskSteerSealedPayloadSchema=z.object({steerId:z.uuid(),sealed:SealedTaskInputSchema}).strict();var TaskCompleteSealedPayloadSchema=TaskCompletePlainPayloadSchema.omit({summary:true,finalMessage:true,document:true,artifactRefs:true,preparedObservation:true}).extend({sealed:SealedTaskOutputSchema}).strict();var TaskFailSealedPayloadSchema=TaskFailPlainPayloadSchema.omit({reason:true,preparedObservation:true}).extend({sealed:SealedTaskOutputSchema}).strict();var TaskDeclineSealedPayloadSchema=DeclineFields.omit({reason:true}).extend({code:z.union([z.enum(HOME_DECLINE_CODES),unrecognizedToken(DECLINE_CODES)]).optional(),sealed:SealedTaskOutputSchema}).strict();var TaskCancelledSealedPayloadSchema=TaskCancelledPlainPayloadSchema.omit({reason:true}).extend({sealed:SealedTaskOutputSchema}).strict();var TaskProgressSealedPayloadSchema=TaskProgressPlainPayloadSchema.omit({events:true}).extend({sealed:SealedTaskOutputSchema}).strict();var TaskArtifactSealedPayloadSchema=TaskArtifactPlainPayloadSchema.omit({inline:true,blobRef:true}).extend({artifactId:z.uuid(),sealed:SealedTaskOutputSchema}).strict();var TaskAwaitApprovalSealedPayloadSchema=TaskAwaitApprovalPlainPayloadSchema.omit({summary:true}).extend({approvalId:z.string().min(1),sealed:SealedTaskOutputSchema}).strict();var TaskSteerPayloadSchema=z.union([TaskSteerPlainPayloadSchema,TaskSteerSealedPayloadSchema]);var TaskDeclinePayloadSchema=z.union([TaskDeclinePlainPayloadSchema,TaskDeclineSealedPayloadSchema]);var TaskProgressPayloadSchema=z.union([TaskProgressPlainPayloadSchema,TaskProgressSealedPayloadSchema]);var TaskArtifactPayloadSchema=z.union([TaskArtifactPlainPayloadSchema,TaskArtifactSealedPayloadSchema]);var TaskAwaitApprovalPayloadSchema=z.union([TaskAwaitApprovalPlainPayloadSchema,TaskAwaitApprovalSealedPayloadSchema]);var TaskCompletePayloadSchema=z.union([TaskCompletePlainPayloadSchema,TaskCompleteSealedPayloadSchema]);var TaskFailPayloadSchema=z.union([TaskFailPlainPayloadSchema,TaskFailSealedPayloadSchema]);var TaskCancelledPayloadSchema=z.union([TaskCancelledPlainPayloadSchema,TaskCancelledSealedPayloadSchema]);var MESSAGE_PAYLOAD_SCHEMAS={"conn.hello":ConnHelloPayloadSchema,"task.offer":TaskOfferPayloadSchema,"agent.egress.ack":AgentEgressAckPayloadSchema,"agent.message.disposition":AgentMessageDispositionPayloadSchema,"agent.content.read":AgentContentReadPayloadSchema,"agent.home.projection":AgentHomeProjectionPayloadSchema,"agent.input.preparation":AgentInputPreparationPayloadSchema,"provider.provisioning.available":ProviderProvisioningAvailablePayloadSchema,"agent.memory.intent.available":AgentMemoryIntentAvailablePayloadSchema,"task.approve":TaskApprovePayloadSchema,"task.reject":TaskRejectPayloadSchema,"task.cancel":TaskCancelPayloadSchema,"task.steer":TaskSteerPayloadSchema,"e2ee.key_package.available":E2eeKeyPackageAvailablePayloadSchema,"task.claim":TaskClaimPayloadSchema,"task.started":TaskStartedPayloadSchema,"task.decline":TaskDeclinePayloadSchema,"task.progress":TaskProgressPayloadSchema,"task.artifact":TaskArtifactPayloadSchema,"task.await_approval":TaskAwaitApprovalPayloadSchema,"task.complete":TaskCompletePayloadSchema,"task.fail":TaskFailPayloadSchema,"task.cancelled":TaskCancelledPayloadSchema,"task.approval_resolved":TaskApprovalResolvedPayloadSchema,"agent.egress.reliable":AgentEgressReliablePayloadSchema,"agent.message.draft":AgentMessageDraftPayloadSchema,"agent.message.publish":AgentMessagePublishPayloadSchema,"agent.content.receipt":AgentContentReceiptPayloadSchema};var MESSAGE_TYPES=Object.keys(MESSAGE_PAYLOAD_SCHEMAS);var SERVER_TO_DAEMON_TYPES=["task.offer","agent.egress.ack","agent.message.disposition","agent.content.read","agent.home.projection","agent.input.preparation","provider.provisioning.available","agent.memory.intent.available","task.approve","task.reject","task.cancel","task.steer","e2ee.key_package.available"];var DAEMON_TO_SERVER_TYPES=["task.claim","task.started","task.decline","task.progress","task.artifact","task.await_approval","task.complete","task.fail","task.cancelled","task.approval_resolved","agent.egress.reliable","agent.message.draft","agent.message.publish","agent.content.receipt"];var AGENT_MEMORY_INTENT_CONTENT_MAX_BYTES=262144;var AGENT_MEMORY_INTENT_PATH_MAX_BYTES=1024;var AGENT_MEMORY_INTENT_APPROVAL_REF_MAX_BYTES=128;var SHA256_REVISION=/^sha256:[0-9a-f]{64}$/u;var AgentMemoryIntentRevisionSchema=z.string().regex(SHA256_REVISION,"revision must be lowercase sha256:<64 hex>");var AgentMemoryIntentOperationDigestSchema=z.string().regex(SHA256_REVISION,"operationDigest must be lowercase sha256:<64 hex>");var AgentMemoryIntentPathSchema=z.string().min(1).max(AGENT_MEMORY_INTENT_PATH_MAX_BYTES).regex(/^[\x20\x21\x23-\x5b\x5d-\x7e]+$/u,"path must be printable ASCII without quote or backslash");var AgentMemoryIntentApprovalRefSchema=z.string().regex(new RegExp(`^[A-Za-z0-9._:-]{1,${AGENT_MEMORY_INTENT_APPROVAL_REF_MAX_BYTES}}$`,"u"),`approvalRef must be 1..${AGENT_MEMORY_INTENT_APPROVAL_REF_MAX_BYTES} characters of [A-Za-z0-9._:-]`);var LONE_SURROGATE2=/[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/u;var utf8=new TextEncoder;var AgentMemoryIntentContentSchema=z.string().refine(value=>!LONE_SURROGATE2.test(value),"content must be well-formed Unicode (encodable as UTF-8)").refine(value=>utf8.encode(value).byteLength<=AGENT_MEMORY_INTENT_CONTENT_MAX_BYTES,`content must not exceed ${AGENT_MEMORY_INTENT_CONTENT_MAX_BYTES} UTF-8 bytes`);var AGENT_MEMORY_INTENT_OPERATIONS=["replace","delete"];var AgentMemoryIntentOperationSchema=z.enum(AGENT_MEMORY_INTENT_OPERATIONS);var AgentMemoryIntentV1Schema=z.object({intentId:z.uuid(),agentRef:AgentHomeProjectionAgentRefSchema,path:AgentMemoryIntentPathSchema,operation:AgentMemoryIntentOperationSchema,baseRevision:AgentMemoryIntentRevisionSchema,targetRevision:AgentMemoryIntentRevisionSchema.nullable(),content:AgentMemoryIntentContentSchema.optional(),approvalRef:AgentMemoryIntentApprovalRefSchema,operationDigest:AgentMemoryIntentOperationDigestSchema}).strict().superRefine((intent,ctx)=>{if(intent.operation==="delete"){if(intent.targetRevision!==null){ctx.addIssue({code:"custom",path:["targetRevision"],message:"a delete intent has a null targetRevision"});}if(intent.content!==void 0){ctx.addIssue({code:"custom",path:["content"],message:"a delete intent never carries content"});}return}if(intent.targetRevision===null){ctx.addIssue({code:"custom",path:["targetRevision"],message:"a replace intent requires a targetRevision"});}else if(intent.targetRevision===intent.baseRevision){ctx.addIssue({code:"custom",path:["targetRevision"],message:"targetRevision must differ from baseRevision"});}});var AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES=["intent_revoked","intent_expired","placement_changed","profile_revision_changed"];var AgentMemoryIntentHostTerminalCodeSchema=z.enum(AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES);var AGENT_MEMORY_INTENT_REJECTION_CODES=["intent_invalid","path_invalid","memory_md_not_deletable","content_invalid","intent_digest_mismatch","agent_ref_mismatch","agent_home_unavailable",...AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES];var AgentMemoryIntentRejectionCodeSchema=z.enum(AGENT_MEMORY_INTENT_REJECTION_CODES);var AgentMemoryIntentFileObservationSchema=z.object({exists:z.boolean(),revision:AgentMemoryIntentRevisionSchema}).strict();var completionIdentity2={intentId:z.uuid(),agentRef:AgentHomeProjectionAgentRefSchema,path:AgentMemoryIntentPathSchema,operation:AgentMemoryIntentOperationSchema,operationDigest:AgentMemoryIntentOperationDigestSchema};var AppliedCompletionSchema2=z.object({...completionIdentity2,outcome:z.literal("applied"),result:AgentMemoryIntentFileObservationSchema}).strict();var ConflictCompletionSchema=z.object({...completionIdentity2,outcome:z.literal("conflict"),observed:AgentMemoryIntentFileObservationSchema}).strict();var RejectedCompletionSchema2=z.object({...completionIdentity2,outcome:z.literal("rejected"),code:AgentMemoryIntentRejectionCodeSchema}).strict();var UncertainCompletionSchema=z.object({...completionIdentity2,outcome:z.literal("uncertain"),observed:AgentMemoryIntentFileObservationSchema}).strict();var AgentMemoryIntentCompletionSchema=z.discriminatedUnion("outcome",[AppliedCompletionSchema2,ConflictCompletionSchema,RejectedCompletionSchema2,UncertainCompletionSchema]);var AGENT_MEMORY_INTENT_READBACK_DISPOSITIONS=["recorded","idempotent","conflict","host_terminal"];var AgentMemoryIntentReadbackDispositionSchema=z.enum(AGENT_MEMORY_INTENT_READBACK_DISPOSITIONS);var AgentMemoryIntentReadbackSchema=z.object({tenantId:z.string().min(1),deviceId:z.string().min(1),intentId:z.uuid(),disposition:AgentMemoryIntentReadbackDispositionSchema,completion:AgentMemoryIntentCompletionSchema,recordedAt:z.iso.datetime({offset:true})}).strict().superRefine((readback,ctx)=>{if(readback.completion.intentId!==readback.intentId){ctx.addIssue({code:"custom",path:["completion","intentId"],message:"completion intentId must equal readback intentId"});}if(readback.disposition==="host_terminal"&&(readback.completion.outcome!=="rejected"||!AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES.includes(readback.completion.code))){ctx.addIssue({code:"custom",path:["completion"],message:`a host_terminal readback must carry a rejected completion with one of: ${AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES.join(", ")}`});}});var AGENT_MEMORY_INTENT_RESERVATIONS=["held","none"];var AgentMemoryIntentReservationSchema=z.enum(AGENT_MEMORY_INTENT_RESERVATIONS);var AgentMemoryIntentFetchRequestSchema=z.object({intentId:z.uuid(),reservation:AgentMemoryIntentReservationSchema}).strict();var AGENT_MEMORY_INTENT_FETCH_DISPOSITIONS=["release","withheld","terminal","deferred"];var AGENT_MEMORY_INTENT_FETCH_DISPOSITIONS_BY_RESERVATION={held:["release","withheld","terminal"],none:["terminal","deferred"]};function requireNoContent(intent,ctx,disposition){if(intent.content!==void 0){ctx.addIssue({code:"custom",path:["intent","content"],message:`a ${disposition} fetch response never carries content`});}}var ReleaseFetchResponseSchema=z.object({disposition:z.literal("release"),intent:AgentMemoryIntentV1Schema}).strict().superRefine((response,ctx)=>{if(response.intent.operation==="replace"&&response.intent.content===void 0){ctx.addIssue({code:"custom",path:["intent","content"],message:"a replace release must carry content"});}});var WithheldFetchResponseSchema=z.object({disposition:z.literal("withheld"),intent:AgentMemoryIntentV1Schema,code:AgentMemoryIntentHostTerminalCodeSchema}).strict().superRefine((response,ctx)=>requireNoContent(response.intent,ctx,"withheld"));var TerminalFetchResponseSchema=z.object({disposition:z.literal("terminal"),intent:AgentMemoryIntentV1Schema,readback:AgentMemoryIntentReadbackSchema}).strict().superRefine((response,ctx)=>{requireNoContent(response.intent,ctx,"terminal");const{intent,readback}=response;if(readback.intentId!==intent.intentId){ctx.addIssue({code:"custom",path:["readback","intentId"],message:"readback intentId must equal intent intentId"});}const completion=readback.completion;if(completion.agentRef.agentId!==intent.agentRef.agentId||completion.agentRef.profileRevision!==intent.agentRef.profileRevision||completion.path!==intent.path||completion.operation!==intent.operation||completion.operationDigest!==intent.operationDigest){ctx.addIssue({code:"custom",path:["readback","completion"],message:"readback completion identity must equal the intent identity and operationDigest"});}});var DeferredFetchResponseSchema=z.object({disposition:z.literal("deferred"),intent:AgentMemoryIntentV1Schema}).strict().superRefine((response,ctx)=>requireNoContent(response.intent,ctx,"deferred"));var AgentMemoryIntentFetchResponseSchema=z.discriminatedUnion("disposition",[ReleaseFetchResponseSchema,WithheldFetchResponseSchema,TerminalFetchResponseSchema,DeferredFetchResponseSchema]);function agentMemoryIntentFetchResponseSchemaFor(reservation){const allowed=AGENT_MEMORY_INTENT_FETCH_DISPOSITIONS_BY_RESERVATION[AgentMemoryIntentReservationSchema.parse(reservation)];return AgentMemoryIntentFetchResponseSchema.superRefine((response,ctx)=>{if(!allowed.includes(response.disposition)){ctx.addIssue({code:"custom",path:["disposition"],message:`a ${reservation} reservation allows only: ${allowed.join(", ")}`});}})}var AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES=512*1024;var AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE=2147483647;var OPAQUE_REFERENCE_MAX_BYTES=512;var opaqueReference=field=>z.string().min(1).max(OPAQUE_REFERENCE_MAX_BYTES).refine(value=>new TextEncoder().encode(value).byteLength<=OPAQUE_REFERENCE_MAX_BYTES,{message:`${field} must not exceed ${OPAQUE_REFERENCE_MAX_BYTES} UTF-8 bytes`}).regex(/^[^\u0000-\u001f\u007f\r\n]+$/u,`${field} must not contain control characters`);var AgentMemoryProjectionGrantRefSchema=opaqueReference("grantRef");var AgentMemoryProjectionSessionRefSchema=opaqueReference("sessionRef");var AgentMemoryProjectionWriterEpochSchema=z.number().int().positive().max(AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE);var AgentMemoryProjectionSourceSeqSchema=z.number().int().positive().max(AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE);function agentMemoryProjectionBase64UrlByteLength(value){if(!/^[A-Za-z0-9_-]*$/u.test(value)||value.length%4===1)return void 0;const complete=Math.floor(value.length/4)*3;const tail=value.length%4;return complete+(tail===0?0:tail-1)}var AgentMemoryProjectionSnapshotSchema=z.object({redactedHash:AgentEgressContentHashSchema,redactedByteCount:z.number().int().nonnegative().max(AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES),redactedBytes:z.string().max(Math.ceil(AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES/3)*4)}).strict().superRefine((snapshot,ctx)=>{const actual=agentMemoryProjectionBase64UrlByteLength(snapshot.redactedBytes);if(actual===void 0){ctx.addIssue({code:"custom",path:["redactedBytes"],message:"redactedBytes must be unpadded base64url"});return}if(actual!==snapshot.redactedByteCount){ctx.addIssue({code:"custom",path:["redactedByteCount"],message:"redactedByteCount must equal the decoded redactedBytes length"});}});var AgentMemoryProjectionMutationSchema=z.object({taskId:z.string().min(1).max(512),agentRef:AgentRefSchema,sessionRef:AgentMemoryProjectionSessionRefSchema,runtimeId:RuntimeIdSchema,grantRef:AgentMemoryProjectionGrantRefSchema,writerEpoch:AgentMemoryProjectionWriterEpochSchema,sourceSeq:AgentMemoryProjectionSourceSeqSchema,mutationId:z.uuid(),policyRevision:AgentEgressPolicyRevisionSchema,snapshot:AgentMemoryProjectionSnapshotSchema}).strict();var AgentMemoryProjectionMeteringReceiptSchema=z.object({meteringReceiptId:z.uuid(),acceptedRedactedBytes:z.number().int().nonnegative().max(AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES),recordedAt:z.iso.datetime({offset:true})}).strict();var AgentMemoryProjectionReceiptSchema=z.object({outcome:z.enum(["accepted","idempotent"]),tenantId:z.string().min(1),deviceId:z.string().min(1),taskId:z.string().min(1).max(512),agentRef:AgentRefSchema,sessionRef:AgentMemoryProjectionSessionRefSchema,runtimeId:RuntimeIdSchema,grantRef:AgentMemoryProjectionGrantRefSchema,writerEpoch:AgentMemoryProjectionWriterEpochSchema,sourceSeq:AgentMemoryProjectionSourceSeqSchema,mutationId:z.uuid(),policyRevision:AgentEgressPolicyRevisionSchema,redactedHash:AgentEgressContentHashSchema,redactedByteCount:z.number().int().nonnegative().max(AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES),metering:AgentMemoryProjectionMeteringReceiptSchema}).strict();var AgentMemoryProjectionEraseResultSchema=z.object({nextWriterEpoch:AgentMemoryProjectionWriterEpochSchema}).strict();var REQUIRED_TASK_ID=z.string().min(1);var OPTIONAL_TASK_ID=REQUIRED_TASK_ID.optional();var FORBIDDEN_TASK_ID=z.never().optional();var REQUIRED_SEQ=z.number().int();var OPTIONAL_SEQ=REQUIRED_SEQ.optional();function envelopeShape(type,taskId,seq){return z.object({v:z.number().int().refine(version=>version===PROTOCOL_VERSION,{message:"unsupported protocol version"}),id:z.uuid(),ts:z.iso.datetime({offset:true}),type:z.literal(type),task_id:taskId,session_ref:z.string().optional(),seq,payload:MESSAGE_PAYLOAD_SCHEMAS[type]})}var EnvelopeSchema=z.discriminatedUnion("type",[envelopeShape("conn.hello",OPTIONAL_TASK_ID,OPTIONAL_SEQ),envelopeShape("task.offer",REQUIRED_TASK_ID,REQUIRED_SEQ),envelopeShape("agent.egress.ack",OPTIONAL_TASK_ID,REQUIRED_SEQ),envelopeShape("agent.message.disposition",REQUIRED_TASK_ID,REQUIRED_SEQ),envelopeShape("agent.content.read",OPTIONAL_TASK_ID,REQUIRED_SEQ),envelopeShape("agent.home.projection",FORBIDDEN_TASK_ID,REQUIRED_SEQ),envelopeShape("agent.input.preparation",FORBIDDEN_TASK_ID,REQUIRED_SEQ),envelopeShape("provider.provisioning.available",FORBIDDEN_TASK_ID,REQUIRED_SEQ),envelopeShape("agent.memory.intent.available",FORBIDDEN_TASK_ID,REQUIRED_SEQ),envelopeShape("task.approve",REQUIRED_TASK_ID,REQUIRED_SEQ),envelopeShape("task.reject",REQUIRED_TASK_ID,REQUIRED_SEQ),envelopeShape("task.cancel",REQUIRED_TASK_ID,REQUIRED_SEQ),envelopeShape("task.steer",REQUIRED_TASK_ID,REQUIRED_SEQ),envelopeShape("e2ee.key_package.available",FORBIDDEN_TASK_ID,REQUIRED_SEQ),envelopeShape("task.claim",REQUIRED_TASK_ID,OPTIONAL_SEQ),envelopeShape("task.started",REQUIRED_TASK_ID,OPTIONAL_SEQ),envelopeShape("task.decline",REQUIRED_TASK_ID,OPTIONAL_SEQ),envelopeShape("task.progress",REQUIRED_TASK_ID,OPTIONAL_SEQ),envelopeShape("task.artifact",REQUIRED_TASK_ID,OPTIONAL_SEQ),envelopeShape("task.await_approval",REQUIRED_TASK_ID,OPTIONAL_SEQ),envelopeShape("task.complete",REQUIRED_TASK_ID,OPTIONAL_SEQ),envelopeShape("task.fail",REQUIRED_TASK_ID,OPTIONAL_SEQ),envelopeShape("task.cancelled",REQUIRED_TASK_ID,OPTIONAL_SEQ),envelopeShape("task.approval_resolved",REQUIRED_TASK_ID,OPTIONAL_SEQ),envelopeShape("agent.egress.reliable",OPTIONAL_TASK_ID,OPTIONAL_SEQ),envelopeShape("agent.message.draft",REQUIRED_TASK_ID,OPTIONAL_SEQ),envelopeShape("agent.message.publish",REQUIRED_TASK_ID,OPTIONAL_SEQ),envelopeShape("agent.content.receipt",OPTIONAL_TASK_ID,OPTIONAL_SEQ)]);function isServerToDaemonType(type){return SERVER_TO_DAEMON_TYPES.includes(type)}var ProtocolError=class extends Error{constructor(message,options){super(message,options);this.name="ProtocolError";}};var EnvelopeParseError=class extends ProtocolError{constructor(message,cause){super(message,{cause});this.name="EnvelopeParseError";}};var UnknownMessageTypeError=class extends ProtocolError{type;constructor(type){super(`Unknown message type: ${String(type)}`);this.name="UnknownMessageTypeError";this.type=type;}};var EnvelopeValidationError=class extends ProtocolError{issues;constructor(message,issues){super(message,{cause:issues});this.name="EnvelopeValidationError";this.issues=issues;}};var MESSAGE_TYPE_SET=new Set(MESSAGE_TYPES);function decodeText(input){return typeof input==="string"?input:new TextDecoder("utf-8").decode(input)}function parseMessage(data){const result=EnvelopeSchema.safeParse(data);if(result.success){return result.data}const typeValue=typeof data==="object"&&data!==null&&!Array.isArray(data)?data.type:void 0;if(typeof typeValue!=="string"||!MESSAGE_TYPE_SET.has(typeValue)){throw new UnknownMessageTypeError(typeValue)}throw new EnvelopeValidationError(`Envelope failed validation for type "${typeValue}"`,result.error)}function decodeEnvelope(line){const text2=decodeText(line).replace(/[\r\n]+$/,"");let json;try{json=JSON.parse(text2);}catch(cause){throw new EnvelopeParseError("Envelope line is not valid JSON",cause)}return parseMessage(json)}function encodeEnvelope(env){return `${JSON.stringify(env)}
+`}function createEnvelope(type,payload,...rest){const opts=rest[0]??{};const envelope={v:opts.v??PROTOCOL_VERSION,id:opts.id??crypto.randomUUID(),ts:opts.ts??new Date().toISOString(),type,...opts.taskId!==void 0?{task_id:opts.taskId}:{},...opts.sessionRef!==void 0?{session_ref:opts.sessionRef}:{},...opts.seq!==void 0?{seq:opts.seq}:{},payload};const result=EnvelopeSchema.safeParse(envelope);if(!result.success){throw new EnvelopeValidationError(`createEnvelope built an invalid envelope for type "${type}"`,result.error)}return result.data}var PairRequestSchema=z.object({pairingCode:z.string(),deviceName:z.string(),devicePublicKey:z.string(),machineId:z.string().regex(/^[0-9a-f]{64}$/u).optional()});var PAIR_RESPONSE_TENANT_ID_MAX_LENGTH=200;var PairResponseTenantIdSchema=z.string().min(1).max(PAIR_RESPONSE_TENANT_ID_MAX_LENGTH).refine(value=>value.trim()===value,{message:"tenantId must not have leading or trailing whitespace"}).refine(value=>!value.includes("\0"),{message:"tenantId must not contain a NUL character"});var PairResponseSchema=z.object({deviceId:z.string(),accessToken:z.string(),refreshHint:z.string().optional(),expiresIn:z.number().int().positive().optional(),tenantId:PairResponseTenantIdSchema});var ChallengeRequestSchema=z.object({deviceId:z.string()});var ChallengeResponseSchema=z.object({nonce:z.string()});var TokenRequestSchema=z.object({deviceId:z.string(),nonce:z.string(),signature:z.string()});var TokenResponseSchema=z.object({accessToken:z.string(),expiresAt:z.iso.datetime({offset:true}),expiresIn:z.number().int().positive().optional()});var DEVICE_NOT_REGISTERED_CODE="device_not_registered";var DeviceNotRegisteredResponseSchema=z.object({error:z.string(),code:z.literal(DEVICE_NOT_REGISTERED_CODE)});var PRESENCE_DETAIL_MAX_LENGTH=512;var PRESENCE_RUNTIME_VERSION_MAX_LENGTH=128;var PresenceRuntimeFactSchema=z.object({id:RuntimeIdSchema,version:z.string().min(1).max(PRESENCE_RUNTIME_VERSION_MAX_LENGTH).optional(),authPresent:z.boolean().optional(),capabilities:RuntimeCapabilitiesSchema.optional(),versionPolicy:RuntimeVersionPolicyProjectionSchema.optional()});var PresenceRuntimeUnavailableEntrySchema=RuntimeUnavailableEntrySchema.extend({id:RuntimeIdSchema});var PresenceRuntimeUnavailableSchema=z.array(PresenceRuntimeUnavailableEntrySchema).max(16).refine(values=>new Set(values.map(value=>value.id)).size===values.length,"duplicate runtime-unavailable identity");var PresencePublishRequestSchema=z.object({level:z.enum(["online","thinking","working","error","offline"]),detail:z.string().max(PRESENCE_DETAIL_MAX_LENGTH).optional(),configuredToolsets:ConfiguredToolsetsSchema.optional(),clientVersion:z.string().min(1).max(128).optional(),protocolVersions:z.array(ProtocolVersionNumberSchema).max(16).optional(),runtimes:z.array(PresenceRuntimeFactSchema).max(16).optional(),runtimeUnavailable:PresenceRuntimeUnavailableSchema.optional()});var CreateBlobRequestSchema=z.object({size:z.number().int().nonnegative(),contentType:z.string(),contentHash:z.string().regex(CONTENT_HASH_RE,'contentHash must be "sha256:<64 lowercase hex>"')});var CreateBlobResponseSchema=z.object({blobId:z.string(),uploadUrl:z.string()});var BlobDownloadUrlResponseSchema=z.object({downloadUrl:z.string()});var EventsPollQuerySchema=z.object({afterSeq:z.number().int().nonnegative().optional(),cursor:z.number().int().nonnegative().optional()});var ActivityIngressSchema=z.object({activityMaxEvents:z.number().int().positive(),activityMaxBytes:z.number().int().min(2)});var OUTBOUND_REFUSAL_REASONS=["payload_invalid","not_permitted","limit_exceeded","state_conflict","unsupported"];function isOutboundRefusalCode(value){return OUTBOUND_REFUSAL_REASONS.includes(value)}var MessageSendOutcomeSchema=z.object({id:z.uuid(),outcome:z.enum(["accepted","duplicate","rejected"]),reason:z.string().max(64).transform(value=>isOutboundRefusalCode(value)?value:"unknown").optional()});var EventsPollResponseSchema=z.object({events:z.array(z.unknown()),cursor:z.number().int(),capabilities:z.array(z.string()),ingress:ActivityIngressSchema});var MAX_MESSAGES_PER_BATCH=256;var MESSAGES_SEND_MAX_BODY_BYTES=2*1024*1024;var MessagesSendRequestSchema=z.object({messages:z.array(z.looseObject({v:z.literal(PROTOCOL_VERSION),id:z.uuid()})).max(MAX_MESSAGES_PER_BATCH)});var MessagesSendResponseSchema=z.object({accepted:z.number().int().nonnegative(),rejected:z.number().int().nonnegative().optional(),capabilities:z.array(z.string()).optional(),ingress:ActivityIngressSchema.optional(),outcomes:z.array(MessageSendOutcomeSchema).max(MAX_MESSAGES_PER_BATCH)});var AgentHomeProjectionCompletionRequestSchema=z.object({requestId:z.uuid(),agentRef:AgentHomeProjectionAgentRefSchema,projectionHash:AgentHomeProjectionHashSchema,outcome:AgentHomeProjectionOutcomeSchema}).strict();var AgentHomeProjectionStatusSchema=z.enum(["pending","applied","idempotent","stale","conflict"]);var AgentHomeProjectionReadbackSchema=z.object({tenantId:z.string().min(1),deviceId:z.string().min(1),requestId:z.uuid(),agentRef:AgentHomeProjectionAgentRefSchema,projectionHash:AgentHomeProjectionHashSchema,status:AgentHomeProjectionStatusSchema,completedAt:z.iso.datetime({offset:true}).optional()}).strict();var InputPreparationCompletionRequestSchema=z.discriminatedUnion("outcome",[z.object({outcome:z.literal("prepared"),requestId:z.uuid(),agentRef:AgentRefSchema,profileId:InputPreparationProfileIdSchema,policyRevision:InputPreparationPolicyRevisionSchema,receipt:InputPreparationReceiptSummarySchema}).strict(),z.object({outcome:z.literal("rejected"),requestId:z.uuid(),agentRef:AgentRefSchema,profileId:InputPreparationProfileIdSchema,policyRevision:InputPreparationPolicyRevisionSchema,reason:InputPreparationRejectionReasonSchema}).strict()]);var InputPreparationStatusSchema=z.enum(["pending","prepared","rejected"]);var InputPreparationReadbackSchema=z.object({tenantId:z.string().min(1),deviceId:z.string().min(1),requestId:z.uuid(),agentRef:AgentRefSchema,profileId:InputPreparationProfileIdSchema,policyRevision:InputPreparationPolicyRevisionSchema,status:InputPreparationStatusSchema,receipt:InputPreparationReceiptSummarySchema.optional(),reason:InputPreparationRejectionReasonSchema.optional(),completedAt:z.iso.datetime({offset:true}).optional()}).strict().superRefine((value,ctx)=>{const expectsReceipt=value.status==="prepared";const expectsReason=value.status==="rejected";if(expectsReceipt!==(value.receipt!==void 0)){ctx.addIssue({code:"custom",path:["receipt"],message:'receipt is present exactly when status is "prepared"'});}if(expectsReason!==(value.reason!==void 0)){ctx.addIssue({code:"custom",path:["reason"],message:'reason is present exactly when status is "rejected"'});}if(value.status!=="pending"!==(value.completedAt!==void 0)){ctx.addIssue({code:"custom",path:["completedAt"],message:"completedAt is present exactly when the status is terminal"});}});var InputPreparationStatusQuerySchema=z.object({agentId:z.string().min(1),profileRevision:z.string().min(1)}).strict();var AgentMemoryProjectionCommitRequestSchema=AgentMemoryProjectionMutationSchema;var AgentMemoryProjectionCommitResponseSchema=AgentMemoryProjectionReceiptSchema;var BYOK_PAIR_PATH="/byok/pair";var BYOK_CHALLENGE_PATH="/byok/challenge";var BYOK_TOKEN_PATH="/byok/token";var BYOK_CAPABILITIES_PATH="/byok/capabilities";var BYOK_EVENTS_PATH="/byok/events";var BYOK_MESSAGES_PATH="/byok/messages";var BYOK_AGENT_HOME_PROJECTIONS_PATH="/byok/agent-home-projections";var BYOK_AGENT_HOME_PROJECTION_COMPLETION_ROUTE="/byok/agent-home-projections/:requestId/completion";function byokAgentHomeProjectionCompletionPath(requestId){return `${BYOK_AGENT_HOME_PROJECTIONS_PATH}/${encodeURIComponent(requestId)}/completion`}var BYOK_INPUT_PREPARATIONS_PATH="/byok/input-preparations";var BYOK_INPUT_PREPARATION_COMPLETION_ROUTE="/byok/input-preparations/:requestId/completion";var BYOK_INPUT_PREPARATION_STATUS_ROUTE="/byok/input-preparations/:requestId";function byokInputPreparationCompletionPath(requestId){return `${BYOK_INPUT_PREPARATIONS_PATH}/${encodeURIComponent(requestId)}/completion`}function byokInputPreparationStatusPath(requestId){return `${BYOK_INPUT_PREPARATIONS_PATH}/${encodeURIComponent(requestId)}`}var BYOK_AGENT_MEMORY_PROJECTIONS_PATH="/byok/agent-memory-projections";var BYOK_PRESENCE_PATH="/byok/presence";var BYOK_BOARD_PATH="/byok/board";var BYOK_BOARD_STREAM_PATH="/byok/board/stream";var BYOK_BOARD_CLAIM_ROUTE="/byok/board/:id/claim";var BYOK_BOARD_UNCLAIM_ROUTE="/byok/board/:id/unclaim";var BYOK_BOARD_STATUS_ROUTE="/byok/board/:id/status";var BYOK_RECORDS_PATH="/byok/records";var BYOK_RECORD_ROUTE="/byok/records/:kind/:key";function byokRecordPath(kind,key){return `/byok/records/${encodeURIComponent(kind)}/${encodeURIComponent(key)}`}var BYOK_E2EE_MEMBER_KEY_PATH="/byok/e2ee/member-key";var BYOK_E2EE_CHAIN_PATH="/byok/e2ee/chain";var BYOK_E2EE_KEY_PACKAGES_PATH="/byok/e2ee/key-packages";var BYOK_E2EE_PAIRING_MAC_PATH="/byok/e2ee/pairing-mac";var BYOK_SKILL_PACKS_PATH="/byok/skill-packs";var BYOK_SKILL_PACK_FILE_ROUTE="/byok/skill-packs/:name/files/:path";function byokSkillPackFilePath(name,path){return `/byok/skill-packs/${encodeURIComponent(name)}/files/${encodeURIComponent(path)}`}var BYOK_BLOBS_PATH="/byok/blobs";var BYOK_BLOB_FINALIZE_ROUTE="/byok/blobs/:id/finalize";var BYOK_BLOB_URL_ROUTE="/byok/blobs/:id/url";var BYOK_BLOB_CONTENT_ROUTE="/byok/blobs/:id/content";function byokBlobFinalizePath(blobId){return `/byok/blobs/${encodeURIComponent(blobId)}/finalize`}function byokBlobUrlPath(blobId){return `/byok/blobs/${encodeURIComponent(blobId)}/url`}function byokBlobContentPath(blobId){return `/byok/blobs/${blobId}/content`}var BOT_TURN_OUTCOME_CONTRACT="bot-turn-outcome.v1";var BOT_TURN_OUTCOME_LIMITS=Object.freeze({delegateMaxItems:2,delegateRequestMaxLength:1e3,cancelDelegationMaxItems:2,askUserQuestionMaxLength:400,askUserOptionsMaxItems:6,askUserOptionIdMaxLength:24,askUserOptionLabelMaxLength:80,confirmableActionMaxItems:1,confirmableSummaryMaxLength:300,confirmableDraftMaxBytes:16384,createRoutineMaxItems:1,updateRoutineMaxItems:1,cancelRoutineMaxItems:2,routinePromptMaxLength:500,postTextMaxLength:2730,roomCallMembersMaxItems:4,createBotMaxItems:3,updateBotMaxItems:1,deleteBotMaxItems:1,botNameMaxLength:40,botRoleMaxLength:80,botPersonaMaxLength:300,createRoomMaxItems:1,updateRoomMaxItems:1,roomNameMaxLength:40,roomMembersMaxItems:12,roomAnnouncementMaxLength:300,teamNoteMaxLength:300});var L=BOT_TURN_OUTCOME_LIMITS;var text=maxLength=>({type:"string",minLength:1,maxLength});var oneOfIds=ids=>({enum:[...ids]});var closed=(properties,required)=>({type:"object",additionalProperties:false,required,properties});var list=(items,maxItems)=>({type:"array",minItems:1,maxItems,items});var ROUTINE_DAYS_OF_WEEK=Object.freeze(["mon","tue","wed","thu","fri","sat","sun"]);var integer=(minimum,maximum)=>({type:"integer",minimum,maximum});var BotTurnOutcomeSchemaError=class extends Error{constructor(code,message){super(message);this.code=code;this.name="BotTurnOutcomeSchemaError";}code};function schedule(timeZones,shape){const fields={minute:integer(0,59),hour:integer(0,23),daysOfWeek:{type:"array",minItems:1,maxItems:7,items:{enum:[...ROUTINE_DAYS_OF_WEEK]}},dayOfMonth:integer(1,31),month:integer(1,12),tz:oneOfIds(timeZones)};const outer={description:"Local time in tz. No day field: every day. daysOfWeek: those days only. dayOfMonth: that day of each month, or of month only.",...closed(fields,["minute","hour","tz"])};if(shape==="flat")return outer;const only=(names,required)=>({additionalProperties:false,...required.length?{required}:{},properties:Object.fromEntries(names.map(n=>[n,{}]))});return {...outer,oneOf:[only(["minute","hour","tz"],[]),only(["minute","hour","daysOfWeek","tz"],["daysOfWeek"]),only(["minute","hour","dayOfMonth","month","tz"],["dayOfMonth"])]}}function roomFields(members){return {name:text(L.roomNameMaxLength),members:{type:"array",minItems:1,maxItems:L.roomMembersMaxItems,items:oneOfIds(members)},admin:oneOfIds(members),mode:{enum:["mention","admin"]},announcement:text(L.roomAnnouncementMaxLength)}}var botTurnOutcomeFragments={delegate(o){return list(closed({to:oneOfIds(o.to),request:text(L.delegateRequestMaxLength)},["to","request"]),L.delegateMaxItems)},cancelDelegation(o){return list(closed({delegationId:oneOfIds(o.delegationIds)},["delegationId"]),L.cancelDelegationMaxItems)},askUser(){const question=text(L.askUserQuestionMaxLength);const option=closed({id:text(L.askUserOptionIdMaxLength),label:text(L.askUserOptionLabelMaxLength)},["id","label"]);return {oneOf:[closed({question,answerKind:{const:"text"}},["question","answerKind"]),closed({question,answerKind:{const:"single_choice"},options:{type:"array",minItems:2,maxItems:L.askUserOptionsMaxItems,items:option}},["question","answerKind","options"])]}},confirmableAction(o){for(const{action,draft}of o.actions){const bound=resultOutcomeMaxBytes(draft);if(bound===null||bound>L.confirmableDraftMaxBytes){throw new BotTurnOutcomeSchemaError("draft-over-budget",`draft for ${action} is ${bound??"unbounded"}; cap ${L.confirmableDraftMaxBytes}`)}}const branches=o.actions.map(({action,draft})=>closed({action:{const:action},summary:text(L.confirmableSummaryMaxLength),draft},["action","summary","draft"]));return list(branches.length===1?branches[0]:{oneOf:branches},L.confirmableActionMaxItems)},createRoutine(o){return list(closed({localId:oneOfIds(o.localIds),schedule:schedule(o.timeZones,o.scheduleShape??"checked"),prompt:text(L.routinePromptMaxLength),...o.targets?{target:oneOfIds(o.targets)}:{}},["localId","schedule","prompt"]),L.createRoutineMaxItems)},updateRoutine(o){return list(closed({routineId:oneOfIds(o.routineIds),schedule:schedule(o.timeZones,o.scheduleShape??"checked"),prompt:text(L.routinePromptMaxLength)},["routineId"]),L.updateRoutineMaxItems)},cancelRoutine(o){return list(closed({routineId:oneOfIds(o.routineIds)},["routineId"]),L.cancelRoutineMaxItems)},speech(){return {oneOf:[closed({kind:{const:"post"},text:text(L.postTextMaxLength)},["kind","text"]),closed({kind:{const:"pass"}},["kind"])]}},roomCall(o){return closed({members:{type:"array",minItems:1,maxItems:L.roomCallMembersMaxItems,items:oneOfIds(o.members)}},["members"])},createBot(o){return list(closed({localId:oneOfIds(o.localIds),name:text(L.botNameMaxLength),role:text(L.botRoleMaxLength),persona:text(L.botPersonaMaxLength),model:oneOfIds(o.models)},["localId","name","role","persona","model"]),L.createBotMaxItems)},updateBot(o){return list(closed({botId:oneOfIds(o.botIds),name:text(L.botNameMaxLength),role:text(L.botRoleMaxLength),persona:text(L.botPersonaMaxLength),model:oneOfIds(o.models)},["botId"]),L.updateBotMaxItems)},deleteBot(o){return list(closed({botId:oneOfIds(o.botIds)},["botId"]),L.deleteBotMaxItems)},createRoom(o){return list(closed({localId:oneOfIds(o.localIds),...roomFields(o.members)},["localId","name","members"]),L.createRoomMaxItems)},updateRoom(o){return list(closed({roomId:oneOfIds(o.roomIds),...roomFields(o.members)},["roomId"]),L.updateRoomMaxItems)},teamNote(){return closed({text:text(L.teamNoteMaxLength)},["text"])}};function composeBotTurnOutcomeSchema(fragments,required=[]){const schema={type:"object",additionalProperties:false,description:`${BOT_TURN_OUTCOME_CONTRACT}: actions for the Host. Omit a field for no action of that kind; {} means no actions.`,...required.length?{required:[...required]}:{},properties:fragments};const admitted=checkResultSchema(schema);if(!admitted.ok&&admitted.reason==="over-cap"){throw new BotTurnOutcomeSchemaError("schema-over-budget",`schema is ${admitted.bytes} bytes; cap ${RESULT_SCHEMA_MAX_BYTES}`)}if(!admitted.ok)throw new BotTurnOutcomeSchemaError("not-subset",JSON.stringify(admitted.issues));const bound=resultOutcomeMaxBytes(admitted.canonical);if(bound===null||bound>RESULT_OUTCOME_MAX_BYTES){throw new BotTurnOutcomeSchemaError("over-budget",`largest outcome is ${bound??"unbounded"} bytes; cap ${RESULT_OUTCOME_MAX_BYTES}`)}return admitted.canonical}
 
-// src/version.ts
-var MAILBOX_READ_AHEAD_MAX_SEQS = 4096;
-var MAILBOX_READ_AHEAD_CAPABILITY = "mailbox-read-ahead";
-var PROTOCOL_VERSION = 3;
-var STRICT_AGENT_ONLY_CAPABILITY = "strict-agent-only";
-var AGENT_HOME_READERS_CAPABILITY = "agent-home-readers";
-var CUSTOM_HARNESS_CAPABILITY = "custom-harness";
-var CAPABILITY_FLAGS = [
-  "steer",
-  "blob-upload",
-  "interactive-approval",
-  "approval_resolved",
-  "approval-targeting",
-  "dispatch-selection",
-  PROVIDER_PROFILE_BINDING_CAPABILITY,
-  "toolset-selection",
-  "agent-home-contract",
-  AGENT_HOME_READERS_CAPABILITY,
-  STRICT_AGENT_ONLY_CAPABILITY,
-  AGENT_EGRESS_POLICY_CAPABILITY,
-  AGENT_EGRESS_RELIABLE_ACK_CAPABILITY,
-  AGENT_MESSAGE_EGRESS_CAPABILITY,
-  AGENT_EGRESS_FRESH_SESSION_CAPABILITY,
-  AGENT_CONTENT_WORKSPACE_READ_CAPABILITY,
-  AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY,
-  AGENT_CONTENT_ARTIFACT_READ_CAPABILITY,
-  AGENT_HOME_PROJECTION_CAPABILITY,
-  AGENT_INPUT_PREPARATION_CAPABILITY,
-  TERMINAL_PROJECTION_SELECTION_CAPABILITY,
-  HOST_MCP_TASK_CONTEXT_CAPABILITY,
-  CUSTOM_HARNESS_CAPABILITY,
-  MAILBOX_READ_AHEAD_CAPABILITY,
-  PROVIDER_PROVISIONING_CAPABILITY,
-  AGENT_MEMORY_INTENT_CAPABILITY,
-  AGENT_MEMORY_SELECTION_CAPABILITY,
-  AGENT_MEMORY_READ_IF_ADMITTED_CAPABILITY,
-  AGENT_MEMORY_READ_WRITE_IF_ADMITTED_CAPABILITY,
-  "agent-message-draft",
-  SEALED_PAYLOAD_CAPABILITY,
-  SEALED_OUTPUT_CIPHERTEXT_REF_CAPABILITY,
-  RUNTIME_FAILURE_CLASS_CAPABILITY
-];
-
-// src/task-state.ts
-var TASK_STATES = [
-  "Offered",
-  "Claimed",
-  "Running",
-  "AwaitApproval",
-  "Complete",
-  "Failed",
-  "Cancelled"
-];
-var TASK_TRANSITIONS = {
-  Offered: ["Claimed", "Cancelled", "Failed"],
-  Claimed: ["Running", "Failed", "Cancelled"],
-  Running: ["AwaitApproval", "Complete", "Failed", "Cancelled"],
-  AwaitApproval: ["Running", "Failed", "Cancelled"],
-  Complete: [],
-  Failed: [],
-  Cancelled: []
-};
-function canTransition(from, to) {
-  return TASK_TRANSITIONS[from].includes(to);
-}
-
-// src/constants.ts
-var AGENT_MEMORY_MAX_SNAPSHOT_BYTES = 1024 * 1024;
-var AGENT_MEMORY_MAX_SNAPSHOT_FILES = 128;
-var RUNTIME_IDS = Object.freeze(["pi", "claude", "codex"]);
-
-// src/sealed-split-table.ts
-var OFFER_DIGESTS = {
-  "instruction.blobRef.contentHash": "sealed",
-  "dispatchSelection.providerProfile.profileRevision": "plain",
-  "dispatchSelection.providerProfile.profileHash": "plain"
-};
-var AGENT_OFFER_DIGESTS = { ...OFFER_DIGESTS, "agentRef.profileRevision": "plain" };
-var EGRESS_OFFER_DIGESTS = { ...AGENT_OFFER_DIGESTS, "egressPolicy.policyRevision": "plain" };
-var TERMINAL_DIGESTS = {
-  "agentRef.profileRevision": "plain",
-  "agentHomeProjection.profileRevision": "plain",
-  "agentHomeProjection.projectionHash": "plain"
-};
-var sealedOffer = (plainType, digests) => ({ plainType, category: "task-input", identity: [], moved: ["instruction"], forbidden: [], digests });
-var SEALED_SPLIT_TABLE = Object.freeze({
-  "task.offer_sealed": sealedOffer("task.offer", OFFER_DIGESTS),
-  "task.offer_with_toolsets_sealed": sealedOffer("task.offer_with_toolsets", OFFER_DIGESTS),
-  "task.offer_for_agent_sealed": sealedOffer("task.offer_for_agent", AGENT_OFFER_DIGESTS),
-  "task.offer_for_agent_with_egress_sealed": sealedOffer("task.offer_for_agent_with_egress", EGRESS_OFFER_DIGESTS),
-  "task.offer_for_agent_with_egress_fresh_sealed": sealedOffer("task.offer_for_agent_with_egress_fresh", EGRESS_OFFER_DIGESTS),
-  "task.steer_sealed": { plainType: "task.steer", category: "task-input", identity: ["steerId"], moved: ["text"], forbidden: [], digests: {} },
-  "task.complete_sealed": {
-    plainType: "task.complete",
-    category: "task-output",
-    identity: [],
-    moved: ["summary", "finalMessage", "document"],
-    forbidden: ["artifactRefs", "preparedObservation"],
-    digests: {
-      ...TERMINAL_DIGESTS,
-      "artifactRefs[].contentHash": "forbidden",
-      "preparedObservation.requestDigest": "forbidden"
-    }
-  },
-  "task.fail_sealed": {
-    plainType: "task.fail",
-    category: "task-output",
-    identity: [],
-    moved: ["reason"],
-    forbidden: ["preparedObservation"],
-    digests: { ...TERMINAL_DIGESTS, "preparedObservation.requestDigest": "forbidden" }
-  },
-  "task.decline_sealed": {
-    plainType: "task.decline",
-    category: "task-output",
-    identity: [],
-    moved: ["reason"],
-    forbidden: [],
-    digests: { "agentRef.profileRevision": "plain" }
-  },
-  "task.cancelled_sealed": {
-    plainType: "task.cancelled",
-    category: "task-output",
-    identity: [],
-    moved: ["reason"],
-    forbidden: [],
-    digests: TERMINAL_DIGESTS
-  },
-  "task.progress_sealed": {
-    plainType: "task.progress",
-    category: "task-output",
-    identity: ["seq"],
-    moved: ["events"],
-    forbidden: [],
-    digests: { "events[].spill.blob.contentHash": "sealed" },
-    inlineOnly: true
-  },
-  "task.artifact_sealed": {
-    plainType: "task.artifact",
-    category: "task-output",
-    identity: ["artifactId"],
-    moved: ["inline"],
-    forbidden: ["blobRef"],
-    digests: { "blobRef.contentHash": "forbidden" },
-    limits: { inline: 2 * 1024 * 1024 }
-  },
-  "task.await_approval_sealed": {
-    plainType: "task.await_approval",
-    category: "task-output",
-    identity: ["approvalId"],
-    moved: ["summary"],
-    forbidden: [],
-    digests: {},
-    inlineOnly: true
-  }
-});
-function isSealedMessageType(type) {
-  return Object.hasOwn(SEALED_SPLIT_TABLE, type);
-}
-
-// src/wire-additions.ts
-var AGENT_OFFER_FIELDS = (surface) => [
-  { kind: "envelope", rule: "gated", surface, field: "dispatchSelection", capability: "dispatch-selection", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface, field: "requiredToolsets", capability: "toolset-selection", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface, field: "terminalProjection", capability: "terminal-projection-selection", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface, field: "homeAccess", capability: "agent-home-readers", advertisedBy: "device" }
-];
-var EGRESS_OFFER_FIELDS = (surface) => [
-  { kind: "envelope", rule: "gated", surface, field: "messageEgress", capability: "agent-message-egress", advertisedBy: "device" },
-  ...AGENT_OFFER_FIELDS(surface)
-];
-function sealedRows(plainRows) {
-  return Object.keys(SEALED_SPLIT_TABLE).flatMap((surface) => {
-    const { plainType, moved, forbidden } = SEALED_SPLIT_TABLE[surface];
-    const dropped = [...moved, ...forbidden];
-    const advertisedBy = SEALED_SPLIT_TABLE[surface].category === "task-input" ? "device" : "server";
-    const inherited = plainRows.flatMap((row) => {
-      if (row.kind !== "envelope" || row.surface !== plainType) return [];
-      if (row.field !== void 0 && dropped.includes(row.field.split(/[.[]/u)[0])) return [];
-      return [{ ...row, surface }];
-    });
-    const entry = SEALED_SPLIT_TABLE[surface];
-    const byReference = advertisedBy === "server" && entry.inlineOnly !== true ? [{ kind: "envelope", rule: "gated", surface, field: "sealed.ciphertextRef", capability: "sealed-output-ciphertext-ref", advertisedBy }] : [];
-    return [{ kind: "envelope", rule: "gated", surface, capability: "sealed-payload-v1", advertisedBy }, ...inherited, ...byReference];
-  });
-}
-var SEALED_DECLINE_CODE = (value) => ({ kind: "envelope", rule: "gated", surface: "task.decline", field: "code", value, capability: "sealed-payload-v1", advertisedBy: "server" });
-var PLAIN_ROWS = [
-  // Server to daemon: offers.
-  { kind: "envelope", rule: "gated", surface: "task.offer", field: "harnessId", capability: "custom-harness", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "task.offer_with_toolsets", field: "harnessId", capability: "custom-harness", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "task.offer_for_agent", capability: "agent-home-contract", advertisedBy: "device" },
-  ...AGENT_OFFER_FIELDS("task.offer_for_agent"),
-  { kind: "envelope", rule: "gated", surface: "task.offer_for_agent", field: "agentMemory", capability: "agent-memory-selection", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "task.offer_for_agent", field: "agentMemory", value: "read-if-admitted", capability: "agent-memory-read-if-admitted", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "task.offer_for_agent", field: "agentMemory", value: "read-write-if-admitted", capability: "agent-memory-read-write-if-admitted", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress", capability: "agent-home-contract", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress", capability: "agent-egress-policy", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress", capability: "agent-egress-reliable-ack", advertisedBy: "device" },
-  ...EGRESS_OFFER_FIELDS("task.offer_for_agent_with_egress"),
-  { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress", field: "agentMemory", capability: "agent-memory-selection", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress", field: "agentMemory", value: "read-if-admitted", capability: "agent-memory-read-if-admitted", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress", field: "agentMemory", value: "read-write-if-admitted", capability: "agent-memory-read-write-if-admitted", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress_fresh", capability: "agent-home-contract", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress_fresh", capability: "agent-egress-policy", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress_fresh", capability: "agent-egress-reliable-ack", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress_fresh", capability: "agent-egress-fresh-session", advertisedBy: "device" },
-  ...EGRESS_OFFER_FIELDS("task.offer_for_agent_with_egress_fresh"),
-  { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress_fresh", field: "agentMemory", capability: "agent-memory-selection", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress_fresh", field: "agentMemory", value: "read-if-admitted", capability: "agent-memory-read-if-admitted", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "task.offer_for_agent_with_egress_fresh", field: "agentMemory", value: "read-write-if-admitted", capability: "agent-memory-read-write-if-admitted", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "task.offer_prepared", capability: "agent-home-contract", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "task.offer_prepared", capability: "agent-input-preparation-v9", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "task.offer_prepared", capability: "agent-egress-policy", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "task.offer_prepared", capability: "agent-egress-reliable-ack", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "task.offer_prepared", capability: "agent-egress-fresh-session", advertisedBy: "device" },
-  ...EGRESS_OFFER_FIELDS("task.offer_prepared"),
-  // Server to daemon: Agent control messages.
-  { kind: "envelope", rule: "gated", surface: "agent.content.read", capability: "agent-home-contract", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "agent.content.read", capability: "agent-egress-policy", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "agent.content.read", capability: "agent-egress-reliable-ack", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "agent.content.read", field: "surface", value: "workspace", capability: "agent-content-workspace-read", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "agent.content.read", field: "surface", value: "transcript", capability: "agent-content-transcript-read", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "agent.content.read", field: "surface", value: "artifact", capability: "agent-content-artifact-read", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "agent.home.projection", capability: "agent-home-contract", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "agent.home.projection", capability: "agent-home-projection", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "agent.input.preparation", capability: "agent-home-contract", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "agent.input.preparation", capability: "agent-input-preparation-v9", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "provider.provisioning.available", capability: "provider-provisioning.v1", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "agent.memory.intent.available", capability: "agent-memory-intent.v1", advertisedBy: "device" },
-  { kind: "envelope", rule: "gated", surface: "e2ee.key_package.available", capability: "sealed-payload-v1", advertisedBy: "device" },
-  // One optional runtime capability, shared by discovery and the claim snapshot.
-  { kind: "envelope", rule: "strip-safe", surface: "conn.hello", field: "runtimes[].capabilities.messageDraft" },
-  { kind: "envelope", rule: "strip-safe", surface: "conn.hello", field: "harnesses[].capabilities.messageDraft" },
-  { kind: "envelope", rule: "strip-safe", surface: "task.claim", field: "capabilities.messageDraft" },
-  // Optional MCP event identity is observability only; older receivers may omit it.
-  { kind: "envelope", rule: "strip-safe", surface: "task.progress", field: "events[].mcp" },
-  // Daemon to server.
-  { kind: "envelope", rule: "gated", surface: "agent.message.draft", capability: "agent-message-draft", advertisedBy: "server" },
-  { kind: "envelope", rule: "gated", surface: "task.approval_resolved", capability: "approval_resolved", advertisedBy: "server" },
-  { kind: "envelope", rule: "gated", surface: "task.fail", field: "failure", capability: "runtime-failure-class", advertisedBy: "server" }
-];
-var WIRE_ADDITIONS = Object.freeze([
-  ...PLAIN_ROWS,
-  ...sealedRows(PLAIN_ROWS),
-  SEALED_DECLINE_CODE("sealed_key_unavailable"),
-  SEALED_DECLINE_CODE("sealed_open_failed"),
-  SEALED_DECLINE_CODE("sealed_content_mac_mismatch"),
-  SEALED_DECLINE_CODE("sealing_policy_mismatch")
-]);
-function requiredReceiverCapabilities(type, payload) {
-  const fields = payload !== null && typeof payload === "object" ? payload : {};
-  const required = [];
-  for (const entry of WIRE_ADDITIONS) {
-    if (entry.kind !== "envelope" || entry.rule !== "gated" || entry.surface !== type) continue;
-    if (entry.field !== void 0) {
-      const value = entry.field.split(".").reduce(
-        (parent, segment) => parent !== null && typeof parent === "object" ? parent[segment] : void 0,
-        fields
-      );
-      if (value === void 0) continue;
-      if (entry.value !== void 0 && value !== entry.value) continue;
-    }
-    if (!required.includes(entry.capability)) required.push(entry.capability);
-  }
-  return required;
-}
-var CONTENT_HASH_RE = /^sha256:[0-9a-f]{64}$/;
-var BlobRefSchema = z.object({
-  blobId: z.string(),
-  contentHash: z.string().regex(CONTENT_HASH_RE, 'contentHash must be "sha256:<64 lowercase hex>"'),
-  size: z.number().int().nonnegative(),
-  contentType: z.string(),
-  url: z.string().optional()
-});
-var SEALED_PAYLOAD_VERSION = 1;
-var SEALED_PAYLOAD_SUITE = "byok-sealed-v1.hkdf-sha256.aes-256-gcm";
-var SEALED_PAYLOAD_CATEGORIES = ["task-input", "agent-message", "task-output", "memory-projection"];
-var SEALED_PAYLOAD_V1_CATEGORIES = ["task-input", "task-output"];
-var SEALED_DECLINE_CODES = [
-  "sealed_key_unavailable",
-  "sealed_open_failed",
-  "sealed_content_mac_mismatch",
-  "sealing_policy_mismatch"
-];
-var SEALED_TASK_PLAIN_CODES = Object.freeze({
-  "task.fail": { reason: ["daemon_interrupted", "sealed_key_unavailable"] },
-  "task.decline": { reason: SEALED_DECLINE_CODES },
-  "task.cancelled": { reason: [] }
-});
-function isSealedTaskPlainOutput(type, payload) {
-  const codes = Object.hasOwn(SEALED_TASK_PLAIN_CODES, type) ? SEALED_TASK_PLAIN_CODES[type] : {};
-  const fields = Object.values(SEALED_SPLIT_TABLE).filter((entry) => entry.category === "task-output" && entry.plainType === type).flatMap((entry) => [...entry.moved, ...entry.forbidden]);
-  if (fields.length > 0 && !Object.hasOwn(SEALED_TASK_PLAIN_CODES, type)) return false;
-  const record = payload;
-  for (const field of fields) {
-    const value = record[field];
-    if (value !== void 0 && !(typeof value === "string" && (codes[field] ?? []).includes(value))) return false;
-  }
-  return type !== "task.decline" || record.reason === void 0 || record.code === record.reason;
-}
-var SEALED_INLINE_MAX_PADDED_LENGTH = 256 * 1024;
-var SEALED_PAYLOAD_MAX_CONTENT_LENGTH = 2 * 1024 * 1024;
-var AEAD_TAG_BYTES = 16;
-var FRAME_HEADER_BYTES = 4;
-var ALIGNED_FRAME_LIMIT = 16 * 1024;
-var FRAME_ALIGNMENT = 256;
-var SALT_BYTES = 32;
-var NONCE_BYTES = 12;
-function floorLog2(value) {
-  let exponent = 0;
-  for (let remaining = value; remaining >= 2; remaining = Math.floor(remaining / 2)) exponent += 1;
-  return exponent;
-}
-function sealedPayloadPaddedLength(frameLength) {
-  if (!Number.isSafeInteger(frameLength) || frameLength < FRAME_HEADER_BYTES) {
-    throw new RangeError("Sealed frame length must be a safe integer of at least 4");
-  }
-  if (frameLength <= ALIGNED_FRAME_LIMIT) return Math.ceil(frameLength / FRAME_ALIGNMENT) * FRAME_ALIGNMENT;
-  const exponent = floorLog2(frameLength);
-  const step = 2 ** (exponent - (floorLog2(exponent) + 1));
-  return Math.ceil(frameLength / step) * step;
-}
-var SEALED_PAYLOAD_MAX_PADDED_LENGTH = sealedPayloadPaddedLength(
-  FRAME_HEADER_BYTES + SEALED_PAYLOAD_MAX_CONTENT_LENGTH
-);
-function isLegalPaddedLength(value) {
-  return Number.isSafeInteger(value) && value >= FRAME_ALIGNMENT && value <= SEALED_PAYLOAD_MAX_PADDED_LENGTH && sealedPayloadPaddedLength(value) === value;
-}
-var BASE64URL_VALUE = /^[A-Za-z0-9_-]*$/u;
-var BASE64URL_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
-function sealedBase64UrlByteLength(value) {
-  if (!BASE64URL_VALUE.test(value)) return void 0;
-  const tail = value.length % 4;
-  if (tail === 1) return void 0;
-  if (tail !== 0) {
-    const last = BASE64URL_ALPHABET.indexOf(value[value.length - 1]);
-    const unusedBits = tail === 2 ? 15 : 3;
-    if ((last & unusedBits) !== 0) return void 0;
-  }
-  return Math.floor(value.length / 4) * 3 + (tail === 0 ? 0 : tail - 1);
-}
-function base64UrlOf(bytes) {
-  return z.string().refine((value) => sealedBase64UrlByteLength(value) === bytes, `must be canonical unpadded base64url of ${bytes} bytes`);
-}
-var PositiveIntegerSchema = z.number().int().positive().max(Number.MAX_SAFE_INTEGER);
-function sealedPayloadSchema(category) {
-  return z.object({
-    v: z.literal(SEALED_PAYLOAD_VERSION),
-    suite: z.literal(SEALED_PAYLOAD_SUITE),
-    category,
-    scope: z.object({
-      id: z.string().min(1),
-      epoch: PositiveIntegerSchema,
-      keyId: z.string().regex(/^[A-Za-z0-9_-]{22}$/u)
-    }).strict(),
-    chainHead: z.object({
-      seq: PositiveIntegerSchema,
-      hash: z.string().regex(CONTENT_HASH_RE)
-    }).strict(),
-    sender: z.string().regex(/^[A-Za-z0-9_-]{43}$/u),
-    salt: base64UrlOf(SALT_BYTES),
-    nonce: base64UrlOf(NONCE_BYTES),
-    paddedLength: PositiveIntegerSchema.refine(isLegalPaddedLength, "must be a legal padded frame length within the v1 limit"),
-    contentMac: z.string().regex(/^hmac-sha256:[0-9a-f]{64}$/u),
-    ciphertext: z.string().optional(),
-    /** The ciphertext blob. A presigned `url` is transport detail and never part of a sealed member. */
-    ciphertextRef: BlobRefSchema.omit({ url: true }).strict().optional()
-  }).strict().superRefine((sealed, ctx) => {
-    const ciphertextLength = sealed.paddedLength + AEAD_TAG_BYTES;
-    const inline = sealed.paddedLength <= SEALED_INLINE_MAX_PADDED_LENGTH;
-    if (inline) {
-      if (sealed.ciphertextRef !== void 0 || sealed.ciphertext === void 0) {
-        ctx.addIssue({ code: "custom", path: ["ciphertext"], message: `a padded length up to ${SEALED_INLINE_MAX_PADDED_LENGTH} carries inline ciphertext only` });
-      } else if (sealedBase64UrlByteLength(sealed.ciphertext) !== ciphertextLength) {
-        ctx.addIssue({ code: "custom", path: ["ciphertext"], message: "ciphertext must be canonical base64url of paddedLength + 16 bytes" });
-      }
-      return;
-    }
-    if (sealed.ciphertext !== void 0 || sealed.ciphertextRef === void 0) {
-      ctx.addIssue({ code: "custom", path: ["ciphertextRef"], message: `a padded length above ${SEALED_INLINE_MAX_PADDED_LENGTH} carries ciphertextRef only` });
-    } else if (sealed.ciphertextRef.size !== ciphertextLength) {
-      ctx.addIssue({ code: "custom", path: ["ciphertextRef", "size"], message: "ciphertextRef size must equal paddedLength + 16" });
-    }
-  });
-}
-var SealedPayloadSchema = sealedPayloadSchema(z.enum(SEALED_PAYLOAD_V1_CATEGORIES));
-var SealedTaskInputSchema = sealedPayloadSchema(z.literal("task-input"));
-var SealedTaskOutputSchema = sealedPayloadSchema(z.literal("task-output"));
-function isCanonicalCategoryList(categories) {
-  return categories.every((category, index) => index === 0 || SEALED_PAYLOAD_CATEGORIES.indexOf(categories[index - 1]) < SEALED_PAYLOAD_CATEGORIES.indexOf(category));
-}
-var TaskSealingSchema = z.object({
-  scopeId: z.string().min(1),
-  epoch: PositiveIntegerSchema,
-  categories: z.array(z.enum(SEALED_PAYLOAD_V1_CATEGORIES)).min(1).refine(isCanonicalCategoryList, "categories must be unique and in canonical order")
-}).strict();
-var CanonicalInstantSchema = z.string().regex(/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u).refine((value) => {
-  const instant = Date.parse(value);
-  return Number.isFinite(instant) && new Date(instant).toISOString() === value;
-}, "must be a canonical UTC instant");
-var RoutineRefSchema = z.object({
-  routineId: z.string().min(1),
-  definitionVersion: z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER),
-  notAfter: CanonicalInstantSchema
-}).strict();
-function sealedOfferRule(payload, ctx) {
-  const { instruction, sealing, sealed, routineRef } = payload;
-  if (!sealing.categories.includes("task-input")) {
-    if (routineRef !== void 0) ctx.addIssue({ code: "custom", path: ["routineRef"], message: "a routine template is sealed task input, so routineRef needs a task that seals task-input" });
-    if (sealed !== void 0) ctx.addIssue({ code: "custom", path: ["sealed"], message: "a task that does not seal task-input carries no sealed member" });
-    if (instruction === void 0) ctx.addIssue({ code: "custom", path: ["instruction"], message: "a task that does not seal task-input carries a plaintext instruction" });
-    return;
-  }
-  if (sealed === void 0) {
-    ctx.addIssue({ code: "custom", path: ["sealed"], message: "a task that seals task-input carries the sealed instruction" });
-    return;
-  }
-  if (instruction !== void 0) ctx.addIssue({ code: "custom", path: ["instruction"], message: "a sealed instruction never travels in plaintext too" });
-  if (sealed.scope.id !== sealing.scopeId || sealed.scope.epoch !== sealing.epoch) {
-    ctx.addIssue({ code: "custom", path: ["sealed", "scope"], message: "the offer task-input must be sealed under the task scope at the task epoch" });
-  }
-}
-var ProviderProfileRefSchema = z.string().min(1).max(64).regex(/^[a-z0-9]+(?:[-_][a-z0-9]+)*$/u, "provider profile refs must be lowercase portable identifiers");
-var ProviderProfileRevisionSchema = z.string().regex(/^(?:0|[1-9][0-9]{0,19})$/u, "provider profile revision must be canonical decimal");
-var ProviderProfileHashSchema = z.string().regex(/^sha256:[0-9a-f]{64}$/u, "provider profile hash must be lowercase sha256");
-var PROVIDER_MODEL_CAPABILITIES = ["image-input"];
-var ProviderModelCapabilitySchema = z.enum(PROVIDER_MODEL_CAPABILITIES);
-var ProviderProfileBindingSchema = z.object({
-  profileRef: ProviderProfileRefSchema,
-  profileRevision: ProviderProfileRevisionSchema,
-  profileHash: ProviderProfileHashSchema,
-  modelId: z.string().min(1).max(160).regex(/^[^\u0000\r\n]+$/u),
-  requiredCapabilities: z.array(ProviderModelCapabilitySchema).max(8)
-}).strict().superRefine((binding, ctx) => {
-  if (new Set(binding.requiredCapabilities).size !== binding.requiredCapabilities.length) {
-    ctx.addIssue({ code: "custom", path: ["requiredCapabilities"], message: "duplicate provider capability" });
-  }
-});
-var PROVIDER_SECRET_SEALING_KEY_REGISTER_OPERATION = "provider-secret-sealing-key.register";
-var ProviderProvisioningAvailablePayloadSchema = z.object({
-  requestId: z.uuid()
-}).strict();
-var PROVIDER_PROVISIONING_OPERATIONS = ["configure", "update_model", "replace_secret", "delete"];
-var ProviderProvisioningOperationSchema = z.enum(PROVIDER_PROVISIONING_OPERATIONS);
-var PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM = "9223372036854775807";
-var ProviderProvisioningOperationGenerationSchema = z.string().regex(/^[1-9][0-9]{0,18}$/u, "operationGeneration must be a canonical positive decimal string").refine(
-  (value) => value.length < PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM.length || value <= PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM,
-  `operationGeneration must not exceed ${PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM}`
-);
-var ProviderProvisioningOperationDigestSchema = z.string().regex(/^sha256:[0-9a-f]{64}$/u, "operationDigest must be lowercase sha256");
-var PROVIDER_PROVISIONING_REJECTION_CODES = [
-  "request_invalid",
-  "request_conflict",
-  "request_expired",
-  "request_not_yet_valid",
-  "request_window_invalid",
-  "sealing_key_rotated",
-  "enrollment_mismatch",
-  "agent_not_placed",
-  "config_digest_mismatch",
-  "operation_generation_stale",
-  "profile_changed",
-  "profile_not_found",
-  "credential_scope_mismatch",
-  "provider_kind_unsupported",
-  "pi_model_invalid",
-  "capabilities_invalid",
-  "seal_open_failed",
-  "secret_invalid",
-  "local_commit_interrupted",
-  "secret_store_unavailable"
-];
-var ProviderProvisioningRejectionCodeSchema = z.enum(PROVIDER_PROVISIONING_REJECTION_CODES);
-var PROVIDER_PROVISIONING_HOST_TERMINAL_CODES = ["request_expired", "sealing_key_rotated"];
-var ProviderProvisioningProviderStatusSchema = z.object({
-  profileRef: ProviderProfileRefSchema,
-  providerKind: z.string().min(1).max(64).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/u, "providerKind must be a lowercase portable identifier"),
-  modelId: z.string().min(1).max(160).regex(/^[^\u0000\r\n]+$/u),
-  capabilities: z.array(ProviderModelCapabilitySchema).max(8),
-  secretConfigured: z.boolean()
-}).strict().superRefine((status, ctx) => {
-  if (new Set(status.capabilities).size !== status.capabilities.length) {
-    ctx.addIssue({ code: "custom", path: ["capabilities"], message: "duplicate provider capability" });
-  }
-});
-var PROVIDER_PROVISIONING_KEY_CHECK_RESULTS = [
-  "ok",
-  "credential_rejected",
-  "rate_limited",
-  "quota_or_billing",
-  "model_not_permitted",
-  "provider_error",
-  "unreachable",
-  "timeout",
-  "not_run"
-];
-var ProviderProvisioningKeyCheckResultSchema = z.enum(PROVIDER_PROVISIONING_KEY_CHECK_RESULTS);
-var ProviderProvisioningKeyCheckSchema = z.object({
-  result: ProviderProvisioningKeyCheckResultSchema
-}).strict();
-var completionIdentity = {
-  requestId: z.uuid(),
-  operation: ProviderProvisioningOperationSchema,
-  operationGeneration: ProviderProvisioningOperationGenerationSchema,
-  operationDigest: ProviderProvisioningOperationDigestSchema
-};
-var AppliedCompletionSchema = z.object({
-  outcome: z.literal("applied"),
-  ...completionIdentity,
-  providerStatus: ProviderProvisioningProviderStatusSchema.nullable(),
-  binding: ProviderProfileBindingSchema.nullable(),
-  keyCheck: ProviderProvisioningKeyCheckSchema
-}).strict();
-var RejectedCompletionSchema = z.object({
-  outcome: z.literal("rejected"),
-  ...completionIdentity,
-  code: ProviderProvisioningRejectionCodeSchema
-}).strict();
-var ProviderProvisioningCompletionSchema = z.discriminatedUnion("outcome", [AppliedCompletionSchema, RejectedCompletionSchema]).superRefine((completion, ctx) => {
-  if (completion.outcome !== "applied") return;
-  const { operation, providerStatus, binding } = completion;
-  if (operation === "delete") {
-    if (completion.keyCheck.result !== "not_run") {
-      ctx.addIssue({ code: "custom", path: ["keyCheck", "result"], message: "an applied delete must report keyCheck not_run" });
-    }
-    if (providerStatus !== null) {
-      ctx.addIssue({ code: "custom", path: ["providerStatus"], message: "an applied delete reports no provider status" });
-    }
-    if (binding !== null) {
-      ctx.addIssue({ code: "custom", path: ["binding"], message: "an applied delete reports no binding" });
-    }
-    return;
-  }
-  if (providerStatus === null) {
-    ctx.addIssue({ code: "custom", path: ["providerStatus"], message: `an applied ${operation} must report provider status` });
-  }
-  if (binding === null) {
-    ctx.addIssue({ code: "custom", path: ["binding"], message: `an applied ${operation} must report its exact binding` });
-  }
-  if (providerStatus === null || binding === null) return;
-  if (providerStatus.profileRef !== binding.profileRef) {
-    ctx.addIssue({ code: "custom", path: ["binding", "profileRef"], message: "binding profileRef must equal providerStatus profileRef" });
-  }
-  if (providerStatus.modelId !== binding.modelId) {
-    ctx.addIssue({ code: "custom", path: ["binding", "modelId"], message: "binding modelId must equal providerStatus modelId" });
-  }
-  if ((operation === "configure" || operation === "replace_secret") && !providerStatus.secretConfigured) {
-    ctx.addIssue({
-      code: "custom",
-      path: ["providerStatus", "secretConfigured"],
-      message: `an applied ${operation} must report a configured secret`
-    });
-  }
-});
-var PROVIDER_PROVISIONING_DISPOSITIONS = ["recorded", "idempotent", "conflict", "host_terminal"];
-var ProviderProvisioningDispositionSchema = z.enum(PROVIDER_PROVISIONING_DISPOSITIONS);
-var ProviderProvisioningReadbackSchema = z.object({
-  tenantId: z.string().min(1),
-  deviceId: z.string().min(1),
-  requestId: z.uuid(),
-  disposition: ProviderProvisioningDispositionSchema,
-  completion: ProviderProvisioningCompletionSchema,
-  completedAt: z.iso.datetime({ offset: true })
-}).strict().superRefine((readback, ctx) => {
-  if (readback.completion.requestId !== readback.requestId) {
-    ctx.addIssue({ code: "custom", path: ["completion", "requestId"], message: "completion requestId must equal readback requestId" });
-  }
-  if (readback.disposition === "host_terminal" && (readback.completion.outcome !== "rejected" || !PROVIDER_PROVISIONING_HOST_TERMINAL_CODES.includes(readback.completion.code))) {
-    ctx.addIssue({
-      code: "custom",
-      path: ["completion"],
-      message: `a host_terminal readback must carry a rejected completion with one of: ${PROVIDER_PROVISIONING_HOST_TERMINAL_CODES.join(", ")}`
-    });
-  }
-});
-
-// src/plain-json.ts
-function isSameJsonData(a, b) {
-  if (a === null || b === null) return a === b;
-  const typeOfA = typeof a;
-  if (typeOfA !== typeof b) return false;
-  if (typeOfA !== "object") {
-    return a === b;
-  }
-  const aIsArray = Array.isArray(a);
-  if (aIsArray !== Array.isArray(b)) return false;
-  if (aIsArray) {
-    const arrayA = a;
-    const arrayB = b;
-    if (arrayA.length !== arrayB.length) return false;
-    for (let index = 0; index < arrayA.length; index += 1) {
-      if (!isSameJsonData(arrayA[index], arrayB[index])) return false;
-    }
-    return true;
-  }
-  const objectA = a;
-  const objectB = b;
-  const keysA = Object.keys(objectA);
-  const keysB = Object.keys(objectB);
-  if (keysA.length === 0) {
-    const prototypeA = Object.getPrototypeOf(objectA);
-    if (prototypeA !== Object.prototype && prototypeA !== null) return false;
-  }
-  if (keysA.length !== keysB.length) return false;
-  for (const key of keysA) {
-    if (!Object.prototype.hasOwnProperty.call(objectB, key)) return false;
-    if (!isSameJsonData(objectA[key], objectB[key])) return false;
-  }
-  return true;
-}
-function jsonDepthExceeds(value, limit) {
-  const stack = [{ node: value, depth: 0 }];
-  while (stack.length > 0) {
-    const { node, depth } = stack.pop();
-    if (node === null || typeof node !== "object") continue;
-    const next = depth + 1;
-    if (next > limit) return true;
-    const children = Array.isArray(node) ? node : Object.values(node);
-    for (const child of children) stack.push({ node: child, depth: next });
-  }
-  return false;
-}
-function canonicalizePlainJson(value, maxBytes, maxDepth) {
-  let json;
-  try {
-    json = JSON.stringify(value);
-  } catch {
-    return { ok: false, reason: "not-serializable" };
-  }
-  if (json === void 0) return { ok: false, reason: "not-serializable" };
-  const bytes = new TextEncoder().encode(json).length;
-  if (bytes > maxBytes) return { ok: false, reason: "over-cap", bytes };
-  const canonical = JSON.parse(json);
-  if (maxDepth !== void 0 && jsonDepthExceeds(canonical, maxDepth)) return { ok: false, reason: "too-deep", bytes };
-  if (!isSameJsonData(value, canonical)) return { ok: false, reason: "not-plain-json" };
-  return { ok: true, bytes, canonical };
-}
-
-// src/result-schema.ts
-var RESULT_SCHEMA_MAX_BYTES = 16384;
-var RESULT_OUTCOME_MAX_BYTES = 65536;
-var RESULT_SCHEMA_MAX_DEPTH = 32;
-var RESULT_JSON_MAX_DEPTH = 128;
-var RESULT_ISSUES_MAX_COUNT = 20;
-var RESULT_ISSUES_MAX_BYTES = 4096;
-var ISSUE_STRING_MAX_LENGTH = 128;
-var RESULT_SCHEMA_KEYWORDS = Object.freeze([
-  "type",
-  "properties",
-  "required",
-  "additionalProperties",
-  "items",
-  "enum",
-  "const",
-  "oneOf",
-  "minLength",
-  "maxLength",
-  "minItems",
-  "maxItems",
-  "minimum",
-  "maximum",
-  "description"
-]);
-var RESULT_SCHEMA_INSTANCE_TYPES = Object.freeze([
-  "object",
-  "array",
-  "string",
-  "number",
-  "integer",
-  "boolean",
-  "null"
-]);
-var KEYWORDS = new Set(RESULT_SCHEMA_KEYWORDS);
-var INSTANCE_TYPES = new Set(RESULT_SCHEMA_INSTANCE_TYPES);
-var encoder = new TextEncoder();
-function cut(value) {
-  return value.length <= ISSUE_STRING_MAX_LENGTH ? value : `${value.slice(0, ISSUE_STRING_MAX_LENGTH - 1)}\u2026`;
-}
-var IssueSink = class {
-  issues = [];
-  truncated = false;
-  bytes = 2;
-  // "[]"
-  add(pointer, keyword, message) {
-    const issue = { pointer: cut(pointer), keyword: cut(keyword), message: cut(message) };
-    const size2 = encoder.encode(JSON.stringify(issue)).length + (this.issues.length === 0 ? 0 : 1);
-    if (this.issues.length >= RESULT_ISSUES_MAX_COUNT || this.bytes + size2 > RESULT_ISSUES_MAX_BYTES) {
-      this.truncated = true;
-      return;
-    }
-    this.issues.push(issue);
-    this.bytes += size2;
-  }
-  get empty() {
-    return this.issues.length === 0 && !this.truncated;
-  }
-};
-function pointerTo(base, token) {
-  return `${base}/${String(token).replace(/~/g, "~0").replace(/\//g, "~1")}`;
-}
-function isObject(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-function isNonNegativeInteger(value) {
-  return typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
-}
-var LONE_SURROGATE = /[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/u;
-function hasLoneSurrogate(value) {
-  const stack = [value];
-  while (stack.length > 0) {
-    const node = stack.pop();
-    if (typeof node === "string") {
-      if (LONE_SURROGATE.test(node)) return true;
-    } else if (Array.isArray(node)) {
-      for (const member of node) stack.push(member);
-    } else if (node !== null && typeof node === "object") {
-      for (const [key, member] of Object.entries(node)) {
-        if (LONE_SURROGATE.test(key)) return true;
-        stack.push(member);
-      }
-    }
-  }
-  return false;
-}
-function canonicalDocument(value, maxBytes) {
-  const check = canonicalizePlainJson(value, maxBytes, RESULT_JSON_MAX_DEPTH);
-  if (check.ok && hasLoneSurrogate(check.canonical)) return { ok: false, reason: "not-plain-json" };
-  return check;
-}
-function documentFailure(check, what, maxBytes) {
-  const sink = new IssueSink();
-  switch (check.reason) {
-    case "not-serializable":
-      sink.add("", check.reason, `${what} is not JSON-serializable`);
-      return { ok: false, reason: check.reason, issues: sink.issues, truncated: false };
-    case "not-plain-json":
-      sink.add("", check.reason, `${what} is not plain JSON data in well-formed Unicode`);
-      return { ok: false, reason: check.reason, issues: sink.issues, truncated: false };
-    case "over-cap":
-      sink.add("", check.reason, `${what} is ${check.bytes} bytes as canonical JSON (UTF-8); the cap is ${maxBytes}`);
-      return { ok: false, reason: check.reason, bytes: check.bytes, issues: sink.issues, truncated: false };
-    case "too-deep":
-      sink.add("", check.reason, `${what} nests JSON containers deeper than ${RESULT_JSON_MAX_DEPTH}`);
-      return { ok: false, reason: check.reason, bytes: check.bytes, issues: sink.issues, truncated: false };
-  }
-}
-function checkSubschema(node, pointer, depth, sink, requireObjectRoot = true) {
-  if (!isObject(node)) {
-    sink.add(pointer, "schema", "a subschema must be a JSON object");
-    return;
-  }
-  if (depth > RESULT_SCHEMA_MAX_DEPTH) {
-    sink.add(pointer, "depth", `subschemas nest deeper than ${RESULT_SCHEMA_MAX_DEPTH} levels`);
-    return;
-  }
-  for (const key of Object.keys(node)) {
-    if (!KEYWORDS.has(key)) sink.add(pointerTo(pointer, key), key, "keyword is outside the result schema subset");
-  }
-  if (requireObjectRoot && depth === 0 && node.type !== "object") {
-    sink.add(pointerTo(pointer, "type"), "type", "the root schema must declare type: 'object'");
-  }
-  if (Object.hasOwn(node, "type")) {
-    const type = node.type;
-    const valid = typeof type === "string" ? INSTANCE_TYPES.has(type) : Array.isArray(type) && type.length > 0 && type.every((member) => typeof member === "string" && INSTANCE_TYPES.has(member)) && new Set(type).size === type.length;
-    if (!valid) sink.add(pointerTo(pointer, "type"), "type", "must be a JSON type name or a non-empty array of unique type names");
-  }
-  if (Object.hasOwn(node, "properties")) {
-    const properties = node.properties;
-    const at = pointerTo(pointer, "properties");
-    if (!isObject(properties)) sink.add(at, "properties", "must be an object of subschemas");
-    else for (const [name, subschema] of Object.entries(properties)) checkSubschema(subschema, pointerTo(at, name), depth + 1, sink);
-  }
-  if (Object.hasOwn(node, "required")) {
-    const required = node.required;
-    if (!Array.isArray(required) || !required.every((name) => typeof name === "string") || new Set(required).size !== required.length) {
-      sink.add(pointerTo(pointer, "required"), "required", "must be an array of unique property names");
-    }
-  }
-  if (Object.hasOwn(node, "additionalProperties") && node.additionalProperties !== false) {
-    sink.add(pointerTo(pointer, "additionalProperties"), "additionalProperties", "only additionalProperties: false is allowed");
-  }
-  if (Object.hasOwn(node, "items")) {
-    if (!isObject(node.items)) sink.add(pointerTo(pointer, "items"), "items", "must be one subschema object");
-    else checkSubschema(node.items, pointerTo(pointer, "items"), depth + 1, sink);
-  }
-  if (Object.hasOwn(node, "enum") && (!Array.isArray(node.enum) || node.enum.length === 0)) {
-    sink.add(pointerTo(pointer, "enum"), "enum", "must be a non-empty array");
-  }
-  if (Object.hasOwn(node, "oneOf")) {
-    const oneOf = node.oneOf;
-    const at = pointerTo(pointer, "oneOf");
-    if (!Array.isArray(oneOf) || oneOf.length === 0) sink.add(at, "oneOf", "must be a non-empty array of subschemas");
-    else oneOf.forEach((subschema, index) => checkSubschema(subschema, pointerTo(at, index), depth + 1, sink));
-  }
-  for (const keyword of ["minLength", "maxLength", "minItems", "maxItems"]) {
-    if (Object.hasOwn(node, keyword) && !isNonNegativeInteger(node[keyword])) {
-      sink.add(pointerTo(pointer, keyword), keyword, "must be a non-negative integer");
-    }
-  }
-  for (const keyword of ["minimum", "maximum"]) {
-    if (Object.hasOwn(node, keyword) && typeof node[keyword] !== "number") {
-      sink.add(pointerTo(pointer, keyword), keyword, "must be a number");
-    }
-  }
-  if (Object.hasOwn(node, "description") && typeof node.description !== "string") {
-    sink.add(pointerTo(pointer, "description"), "description", "must be a string");
-  }
-}
-function checkResultSchema(schema) {
-  const document = canonicalDocument(schema, RESULT_SCHEMA_MAX_BYTES);
-  if (!document.ok) return documentFailure(document, "the result schema", RESULT_SCHEMA_MAX_BYTES);
-  const sink = new IssueSink();
-  checkSubschema(document.canonical, "", 0, sink);
-  if (!sink.empty) return { ok: false, reason: "not-subset", bytes: document.bytes, issues: sink.issues, truncated: sink.truncated };
-  return { ok: true, bytes: document.bytes, canonical: document.canonical };
-}
-function withoutPrototypes(value) {
-  if (value === null || typeof value !== "object") return value;
-  if (Array.isArray(value)) return value.map(withoutPrototypes);
-  const copy = /* @__PURE__ */ Object.create(null);
-  for (const [key, member] of Object.entries(value)) {
-    Object.defineProperty(copy, key, { value: withoutPrototypes(member), enumerable: true, writable: true, configurable: true });
-  }
-  return copy;
-}
-function fragmentToPointer(location) {
-  return decodeURI(location.startsWith("#") ? location.slice(1) : location);
-}
-function validateResultOutcome(schema, outcome) {
-  const admitted = checkResultSchema(schema);
-  if (!admitted.ok) {
-    return { ok: false, reason: "schema-not-admitted", bytes: admitted.bytes, issues: admitted.issues, truncated: admitted.truncated };
-  }
-  const document = canonicalDocument(outcome, RESULT_OUTCOME_MAX_BYTES);
-  if (!document.ok) return documentFailure(document, "the outcome", RESULT_OUTCOME_MAX_BYTES);
-  const validator = new Validator(withoutPrototypes(admitted.canonical), "2020-12", true);
-  const result = validator.validate(withoutPrototypes(document.canonical));
-  if (result.valid) return { ok: true, bytes: document.bytes, canonical: document.canonical };
-  const sink = new IssueSink();
-  for (const unit of result.errors) sink.add(fragmentToPointer(unit.instanceLocation), unit.keyword, unit.error);
-  return { ok: false, reason: "schema-mismatch", bytes: document.bytes, issues: sink.issues, truncated: sink.truncated };
-}
-var MAX_BYTES_PER_CODE_POINT = 6;
-var MAX_NUMBER_BYTES = 25;
-var MAX_INTEGER_BYTES = 24;
-var DECIMAL_LIMIT = 1e21;
-var enc = new TextEncoder();
-var size = (v) => enc.encode(JSON.stringify(v)).length;
-function typeBound(node, type) {
-  switch (type) {
-    case "null":
-      return 4;
-    case "boolean":
-      return 5;
-    case "integer": {
-      const lo = typeof node.minimum === "number" ? Math.ceil(node.minimum) : void 0;
-      const hi = typeof node.maximum === "number" ? Math.floor(node.maximum) : void 0;
-      if (lo === void 0 || hi === void 0 || !(Math.abs(lo) < DECIMAL_LIMIT) || !(Math.abs(hi) < DECIMAL_LIMIT)) return MAX_INTEGER_BYTES;
-      return Math.min(MAX_INTEGER_BYTES, Math.max(String(lo).length, String(hi).length));
-    }
-    case "number":
-      return MAX_NUMBER_BYTES;
-    case "string":
-      return typeof node.maxLength === "number" ? 2 + MAX_BYTES_PER_CODE_POINT * node.maxLength : null;
-    case "array": {
-      if (node.maxItems === 0) return 2;
-      if (typeof node.maxItems !== "number" || node.items === void 0) return null;
-      const item = outcomeBound(node.items);
-      return item === null ? null : 2 + node.maxItems * item + Math.max(0, node.maxItems - 1);
-    }
-    case "object": {
-      if (node.additionalProperties !== false) return null;
-      const entries = Object.entries(node.properties ?? {});
-      let total = 2 + Math.max(0, entries.length - 1);
-      for (const [name, sub] of entries) {
-        const b = outcomeBound(sub);
-        if (b === null) return null;
-        total += size(name) + 1 + b;
-      }
-      return total;
-    }
-    default:
-      return null;
-  }
-}
-function outcomeBound(schema) {
-  const node = schema;
-  const bounds = [];
-  if (Object.hasOwn(node, "const")) bounds.push(size(node.const));
-  if (Array.isArray(node.enum)) bounds.push(Math.max(...node.enum.map(size)));
-  if (Array.isArray(node.oneOf)) {
-    const branches = node.oneOf.map(outcomeBound);
-    if (branches.every((b) => b !== null)) bounds.push(Math.max(...branches));
-  }
-  if (node.type !== void 0) {
-    const types = Array.isArray(node.type) ? node.type : [node.type];
-    const each = types.map((t) => typeBound(node, t));
-    if (each.every((b) => b !== null)) bounds.push(Math.max(...each));
-  }
-  return bounds.length === 0 ? null : Math.min(...bounds);
-}
-function resultOutcomeMaxBytes(schema) {
-  const pending = [schema];
-  const seen = /* @__PURE__ */ new Set();
-  while (pending.length > 0) {
-    const value = pending.pop();
-    if (typeof value === "function") return null;
-    if (value === null || typeof value !== "object" || seen.has(value)) continue;
-    seen.add(value);
-    const prototype = Object.getPrototypeOf(value);
-    if (prototype !== null && prototype !== Object.prototype && prototype !== Array.prototype) return null;
-    for (const [name, descriptor] of Object.entries(Object.getOwnPropertyDescriptors(value))) {
-      if (name === "toJSON" && (!Object.hasOwn(descriptor, "value") || typeof descriptor.value === "function")) return null;
-      if (!descriptor.enumerable) continue;
-      if (!Object.hasOwn(descriptor, "value")) return null;
-      pending.push(descriptor.value);
-    }
-  }
-  const document = canonicalDocument(schema, RESULT_SCHEMA_MAX_BYTES);
-  if (!document.ok) return null;
-  const sink = new IssueSink();
-  checkSubschema(document.canonical, "", 0, sink, false);
-  if (!sink.empty) return null;
-  return outcomeBound(document.canonical);
-}
-
-// src/terminal-projection.ts
-var TerminalProjectionContractSchema = z.string().min(1).max(128).regex(/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/u, "terminal projection contracts must be opaque lowercase ids");
-var ResultDocumentSchemaSchema = z.custom().superRefine((value, ctx) => {
-  const check = checkResultSchema(value);
-  if (check.ok) return;
-  for (const issue of check.issues) {
-    ctx.addIssue({
-      code: "custom",
-      message: `result schema ${check.reason} at '${issue.pointer}' (${issue.keyword}): ${issue.message}`,
-      params: { reason: check.reason, pointer: issue.pointer, keyword: issue.keyword }
-    });
-  }
-  if (check.truncated) {
-    ctx.addIssue({ code: "custom", message: "result schema issues truncated", params: { reason: check.reason, truncated: true } });
-  }
-});
-var TerminalProjectionSelectionSchema = z.discriminatedUnion("mode", [
-  z.object({ mode: z.literal("none") }).strict(),
-  z.object({
-    mode: z.literal("result-document"),
-    contract: TerminalProjectionContractSchema,
-    schema: ResultDocumentSchemaSchema
-  }).strict()
-]);
-var POLICY_REVISION = z.string().min(1).max(160).regex(/^[^\u0000-\u001f\u007f\r\n]+$/u, "policyRevision must not contain control characters");
-var POSITIVE_LIMIT = z.number().int().positive().max(2147483647);
-var AGENT_MESSAGE_DRAFT_FRAME_MAX_BYTES = 16 * 1024;
-var AGENT_MESSAGE_MAX_BYTES = 256 * 1024;
-var AgentMessageContractSchema = z.string().min(1).max(160).regex(/^[A-Za-z0-9][A-Za-z0-9._:/-]*$/u, "message contract must be an opaque portable identifier");
-var AgentMessageContentTypeSchema = z.enum(["text/plain", "text/markdown"]);
-var AgentMessageDestinationBindingSchema = z.string().min(1).max(2048).regex(/^[^\u0000-\u001f\u007f\r\n]+$/u, "destination binding must not contain control characters");
-var AgentMessageFreshnessCursorSchema = z.string().min(1).max(512).regex(/^[^\u0000-\u001f\u007f\r\n]+$/u, "freshness cursor must not contain control characters");
-var AgentMessageServerContextSchema = z.object({
-  destinationBinding: AgentMessageDestinationBindingSchema,
-  freshnessCursor: AgentMessageFreshnessCursorSchema.optional()
-}).strict();
-var AgentMessageEgressRequirementSchema = z.object({
-  mode: z.literal("required"),
-  contract: AgentMessageContractSchema,
-  contentType: AgentMessageContentTypeSchema,
-  maxBytes: z.number().int().positive().max(AGENT_MESSAGE_MAX_BYTES)
-}).strict();
-var AgentContentMimeTypeSchema = z.string().min(3).max(255).regex(/^[a-z0-9!#$&^_.+-]+\/[a-z0-9!#$&^_.+-]+$/iu, "MIME types must be explicit type/subtype values");
-var ContentReadPolicySchema = z.object({
-  maxBytes: POSITIVE_LIMIT,
-  allowedMimeTypes: z.array(AgentContentMimeTypeSchema).min(1).max(32)
-}).strict();
-var AgentEgressActivityPolicySchema = z.object({
-  delivery: z.literal("latest-value"),
-  maxCoalesceMs: POSITIVE_LIMIT,
-  maxEventBytes: POSITIVE_LIMIT
-}).strict();
-var AgentReliableQuotaPolicySchema = z.object({
-  maxPendingEventsPerAgent: POSITIVE_LIMIT,
-  maxPendingBytesPerAgent: POSITIVE_LIMIT,
-  maxPendingBytesPerTenant: POSITIVE_LIMIT
-}).strict();
-var AgentEgressPolicySchema = z.object({
-  policyRevision: POLICY_REVISION,
-  activity: AgentEgressActivityPolicySchema,
-  reliable: AgentReliableQuotaPolicySchema,
-  transfers: z.object({
-    workspace: z.union([z.literal("disabled"), ContentReadPolicySchema]),
-    transcript: z.union([z.literal("disabled"), ContentReadPolicySchema]),
-    artifact: z.union([z.literal("disabled"), ContentReadPolicySchema])
-  }).strict()
-}).strict();
-var AgentEgressLaneSchema = z.enum(["reliable", "latest-value"]);
-var AgentEgressDropReasonSchema = z.enum([
-  "policy_denied",
-  "capability_missing",
-  "quota_exceeded",
-  "backpressure",
-  "coalesced",
-  "disconnected",
-  "invalid_envelope",
-  "ack_mismatch"
-]);
-var AgentContentReadSurfaceSchema = z.enum(["workspace", "transcript", "artifact"]);
-var AgentContentActorKindSchema = z.enum(["user", "agent", "system"]);
-var AgentContentActorSchema = z.object({
-  kind: AgentContentActorKindSchema,
-  id: z.string().min(1).max(512).regex(/^[^\u0000-\u001f\u007f]+$/u, "actor id must not contain control characters")
-}).strict();
-var AgentContentDecodeAsSchema = z.enum(["bytes", "utf8"]);
-var AgentContentReadDecisionSchema = z.enum(["allowed", "denied"]);
-var AgentContentReadDenialReasonSchema = z.enum([
-  "invalid-request",
-  "policy-disabled",
-  "capability-missing",
-  "policy-revision-mismatch",
-  "absolute-target",
-  "non-relative-target",
-  "dot-segment",
-  "sensitive-name",
-  "root-not-allowlisted",
-  "root-invalid",
-  "path-escape",
-  "target-missing",
-  "symlink",
-  "not-regular-file",
-  "byte-limit",
-  "mime-not-allowlisted",
-  "text-not-allowlisted",
-  "text-decode-failed",
-  "identity-mismatch"
-]);
-var AgentEgressContentHashSchema = z.string().regex(/^sha256:[a-f0-9]{64}$/u, "contentHash must be a lowercase SHA-256 digest");
-var AgentEgressPolicyRevisionSchema = POLICY_REVISION;
-
-// src/input-preparation.ts
-var InputPreparationContentHashSchema = AgentEgressContentHashSchema;
-var OPAQUE_ID = z.string().min(1).max(512).regex(/^[^\u0000-\u001f\u007f]+$/u, "control identifiers must not contain control characters");
-var OPAQUE_TEXT = z.string().min(1).max(2048).regex(/^[^\u0000-\u001f\u007f]+$/u, "control text must not contain control characters");
-var InputPreparationPolicyRevisionSchema = OPAQUE_ID;
-var InputPreparationProfileIdSchema = OPAQUE_ID;
-var PreparedAgentMemoryModeSchema = z.enum(PREPARED_AGENT_MEMORY_MODES);
-var InputPreparationSourceSchema = z.object({ revision: OPAQUE_ID, digest: OPAQUE_ID }).strict();
-var InputPreparationModelCostSchema = z.object({
-  input: z.number().finite(),
-  output: z.number().finite(),
-  cacheRead: z.number().finite(),
-  cacheWrite: z.number().finite()
-}).strict();
-var THINKING_EFFORT = z.string().min(1).max(64).regex(/^[a-zA-Z0-9_-]+$/u).nullable();
-var InputPreparationThinkingLevelMapSchema = z.object({
-  off: THINKING_EFFORT,
-  minimal: THINKING_EFFORT,
-  low: THINKING_EFFORT,
-  medium: THINKING_EFFORT,
-  high: THINKING_EFFORT,
-  xhigh: THINKING_EFFORT,
-  max: THINKING_EFFORT
-}).strict();
-var InputPreparationModelCompatSchema = z.object({
-  supportsStore: z.boolean().optional(),
-  supportsDeveloperRole: z.boolean().optional(),
-  supportsReasoningEffort: z.boolean().optional(),
-  supportsUsageInStreaming: z.boolean().optional(),
-  maxTokensField: z.enum(["max_completion_tokens", "max_tokens"]).optional(),
-  thinkingFormat: z.enum([
-    "openai",
-    "openrouter",
-    "deepseek",
-    "together",
-    "baseten",
-    "zai",
-    "qwen",
-    "chat-template",
-    "qwen-chat-template",
-    "string-thinking",
-    "ant-ling"
-  ]).optional(),
-  zaiToolStream: z.boolean().optional()
-}).strict();
-var InputPreparationModelSchema = z.object({
-  id: OPAQUE_ID,
-  name: OPAQUE_ID,
-  api: z.literal("openai-completions"),
-  provider: OPAQUE_ID,
-  baseUrl: OPAQUE_TEXT,
-  reasoning: z.boolean(),
-  input: z.array(z.enum(["text", "image"])).min(1).max(8),
-  cost: InputPreparationModelCostSchema,
-  contextWindow: z.number().int().positive(),
-  maxTokens: z.number().int().positive(),
-  thinkingLevelMap: InputPreparationThinkingLevelMapSchema.optional(),
-  compat: InputPreparationModelCompatSchema.optional()
-}).strict();
-var InputPreparationOptionsSchema = z.object({
-  cacheRetention: z.enum(["none", "short", "long"]),
-  maxTokens: z.number().int().positive(),
-  temperature: z.number().finite().optional(),
-  toolChoice: z.enum(["auto", "none"]).optional(),
-  reasoningEffort: z.enum(["minimal", "low", "medium", "high", "xhigh", "max"]).optional()
-}).strict();
-var InputPreparationSelectionSchema = z.object({ model: InputPreparationModelSchema, options: InputPreparationOptionsSchema }).strict();
-var InputPreparationPromptSnapshotSchema = z.object({ systemPrompt: z.string() }).strict();
-var InputPreparationUserMessageSchema = z.object({
-  role: z.literal("user"),
-  content: z.string(),
-  timestamp: z.number().int()
-}).strict();
-var InputPreparationHostCanonicalAssistantMessageSchema = z.object({
-  role: z.literal("assistant"),
-  origin: z.literal("host_canonical"),
-  content: z.string(),
-  timestamp: z.number().int()
-}).strict();
-var InputPreparationMessageSchema = z.discriminatedUnion("role", [
-  InputPreparationUserMessageSchema,
-  InputPreparationHostCanonicalAssistantMessageSchema
-]);
-var InputPreparationContextDocumentSchema = z.object({
-  prompt: InputPreparationPromptSnapshotSchema,
-  messages: z.array(InputPreparationMessageSchema).max(4096)
-}).strict();
-var InputPreparationStateSchema = z.enum([
-  "reserved",
-  "counting",
-  "prepared",
-  "cancelled",
-  "failed",
-  "counter_interrupted"
-]);
-var InputPreparationReadinessReasonSchema = z.enum([
-  /** The record has not reached `prepared` (it is `reserved` or `counting`). */
-  "not_prepared",
-  "counter_interrupted",
-  "cancelled",
-  "failed",
-  "artifact_expired",
-  /** A counter IS present and its authority is not `provider` (a fixture never reaches ready). */
-  "counter_authority_not_production",
-  /** A counter IS present and it reported its projection as not covered. */
-  "counter_coverage_incomplete",
-  /**
-   * D, the frozen provider request, carries a message content part whose
-   * `type` is not `text`. The first release admits text-only D; a multimodal
-   * part is not sized by `requestBytes` in any way the Host's ruling covers.
-   */
-  "request_content_not_text",
-  /** The native compiler's projection kind is not `content_complete`. */
-  "projection_unknown",
-  /** The artifact carries a residual key the accounting policy does not rule on. */
-  "residual_not_ruled",
-  /** The request named no accounting policy. There is no default. */
-  "accounting_policy_missing",
-  /** The named policy was ruled for a different runtime, endpoint or model. */
-  "accounting_policy_inapplicable",
-  /**
-   * The record was prepared against a runtime contract this build no longer
-   * speaks: its binding declares a prepared-compiler version other than the one
-   * this build prepares and consumes against. The artifact is not re-read
-   * through the current contract and is not translated — a projection frozen
-   * under another compiler's classification table is evidence about a request
-   * this build cannot re-derive.
-   */
-  "runtime_contract_superseded"
-]);
-var InputPreparationRuntimeIdentitySchema = z.object({
-  packageName: OPAQUE_ID,
-  packageVersion: OPAQUE_ID,
-  tarballIntegrity: z.string().regex(/^sha512-[A-Za-z0-9+/]+={0,2}$/u),
-  provenanceDigest: z.string().regex(/^[0-9a-f]{64}$/u),
-  closureDigest: z.string().regex(/^[0-9a-f]{64}$/u),
-  upstreamCommit: OPAQUE_ID,
-  envelopeFormat: OPAQUE_ID,
-  requestFormat: OPAQUE_ID,
-  compilerVersion: z.number().int().nonnegative()
-}).strict();
-var InputPreparationCounterTargetSchema = z.object({ endpoint: OPAQUE_TEXT, modelId: OPAQUE_ID }).strict();
-var InputPreparationAccountingPolicyRefSchema = z.object({
-  revision: OPAQUE_ID,
-  /** The runtime identity string this ruling was made for. */
-  ruledRuntime: OPAQUE_ID,
-  /** The endpoint/model this ruling was made for. */
-  ruledTarget: InputPreparationCounterTargetSchema,
-  /** Every residual key the Host's accounting already accounts for. */
-  ruledResidualKeys: z.array(OPAQUE_ID).max(64)
-}).strict();
-var InputPreparationCounterProviderEvidenceSchema = z.object({
-  projectionDigest: z.string().regex(/^[0-9a-f]{64}$/u, "a projection digest is lowercase sha-256 hex"),
-  endpoint: OPAQUE_TEXT,
-  modelId: OPAQUE_ID,
-  asserted: z.object({
-    httpStatus: z.number().int(),
-    usageFields: z.record(OPAQUE_ID, z.number().finite()),
-    responseDigest: OPAQUE_ID
-  }).strict()
-}).strict();
-var InputPreparationCounterEvidenceSchema = z.object({
-  method: OPAQUE_ID,
-  methodVersion: OPAQUE_ID,
-  authority: z.enum(["provider", "test_fixture"]),
-  value: z.number().int().nonnegative(),
-  coverage: z.object({ covered: z.boolean(), reason: z.string().max(512).optional() }).strict(),
-  providerEvidence: InputPreparationCounterProviderEvidenceSchema,
-  target: InputPreparationCounterTargetSchema,
-  calledAt: z.iso.datetime({ offset: true }),
-  completedAt: z.iso.datetime({ offset: true })
-}).strict();
-var InputPreparationResidualValueClassSchema = z.enum([
-  "constant",
-  "boolean",
-  "bounded_integer",
-  "bounded_number",
-  "finite_number",
-  "closed_enum",
-  "nonempty_string",
-  "object_shape"
-]);
-var InputPreparationResidualKeySchema = z.object({ key: OPAQUE_ID, valueClass: InputPreparationResidualValueClassSchema }).strict();
-var InputPreparationProjectionSchema = z.object({
-  version: z.literal(3),
-  kind: z.enum(["content_complete", "unknown"]),
-  digest: z.string().regex(/^[0-9a-f]{64}$/u, "a projection digest is lowercase sha-256 hex")
-}).strict();
-var InputPreparationArtifactSummarySchema = z.object({
-  requestDigest: OPAQUE_ID,
-  envelopeDigest: OPAQUE_ID,
-  toolManifestDigest: OPAQUE_ID,
-  /**
-   * The exact UTF-8 byte length of the frozen provider request D, measured
-   * by the device's own compiler. The ONE size evidence a receipt carries:
-   * the Host rules the budget (`requestBytes + C + max_tokens <= window`)
-   * against it. Never a token count and never an estimate.
-   */
-  requestBytes: z.number().int().nonnegative(),
-  projectionBytes: z.number().int().nonnegative(),
-  projection: InputPreparationProjectionSchema,
-  residual: z.array(InputPreparationResidualKeySchema).max(64),
-  observationDigest: OPAQUE_ID,
-  toolBindingDigest: OPAQUE_ID,
-  toolNames: z.array(OPAQUE_ID)
-}).strict();
-var InputPreparationBindingSchema = z.object({
-  terminalProjection: TerminalProjectionSelectionSchema.optional(),
-  agentMemory: PreparedAgentMemoryModeSchema,
-  scopeId: OPAQUE_ID,
-  deviceId: OPAQUE_ID,
-  agentRef: OPAQUE_ID,
-  profileId: OPAQUE_ID,
-  profileRevision: OPAQUE_ID,
-  source: InputPreparationSourceSchema,
-  target: InputPreparationCounterTargetSchema,
-  policyRevision: OPAQUE_ID,
-  runtime: InputPreparationRuntimeIdentitySchema,
-  requestDigest: OPAQUE_ID,
-  /**
-   * The Host's accounting ruling this preparation was requested under,
-   * copied verbatim. Absent when the request named none — never filled in,
-   * and never narrowed to one the device would have chosen.
-   */
-  accountingPolicyRef: InputPreparationAccountingPolicyRefSchema.optional()
-}).strict();
-var InputPreparationReceiptSummarySchema = z.object({
-  reference: OPAQUE_ID,
-  state: InputPreparationStateSchema,
-  binding: InputPreparationBindingSchema,
-  artifact: InputPreparationArtifactSummarySchema.optional(),
-  counter: InputPreparationCounterEvidenceSchema.optional(),
-  ready: z.boolean(),
-  readinessReasons: z.array(InputPreparationReadinessReasonSchema).max(16),
-  detail: OPAQUE_ID.optional(),
-  artifactExpiresAt: z.iso.datetime({ offset: true })
-}).strict().superRefine((value, ctx) => {
-  if (value.ready !== (value.readinessReasons.length === 0)) {
-    ctx.addIssue({
-      code: "custom",
-      path: ["ready"],
-      message: "ready must be true exactly when readinessReasons is empty"
-    });
-  }
-});
-var InputPreparationReferenceSchema = OPAQUE_ID;
-var InputPreparationOfferBindingSchema = z.object({
-  reference: InputPreparationReferenceSchema,
-  /** `InputPreparationBindingSchema.requestDigest`, as the receipt reported it. */
-  requestDigest: OPAQUE_ID,
-  /** `InputPreparationArtifactSummarySchema.envelopeDigest`, when the receipt carried one. */
-  artifactDigest: OPAQUE_ID.optional()
-}).strict();
-var InputPreparationRejectionReasonSchema = z.enum([
-  "input_preparation_unconfigured",
-  "bad_request",
-  "authority_unavailable",
-  "scope_denied",
-  "policy_revision_mismatch",
-  "runtime_identity_unavailable",
-  "unsupported_input",
-  "limit_exceeded",
-  "request_conflict",
-  "not_found",
-  "counter_unavailable",
-  "counter_interrupted",
-  "durable_write_failed",
-  "cancelled",
-  "context_unresolvable",
-  "context_hash_mismatch",
-  "toolsets_unobservable",
-  "deadline_elapsed",
-  /**
-   * A repeat of an already-recorded `requestId` arrived after the facts its
-   * executor fingerprints were frozen against changed — a toolset definition
-   * revision or a configured server argv. The recorded receipt is not re-derived and no
-   * server is re-probed; the repeat is refused so the caller mints a new
-   * preparation instead of silently receiving one bound to stale evidence.
-   */
-  "observation_drift",
-  /**
-   * The device compiled the input, then found that the `prompt_prepared` frame
-   * the runtime would have to be handed exceeds the single-frame byte cap that
-   * runtime enforces. The bound belongs to the runtime, not to the operator's
-   * retention policy, so it is decided first and nothing is retained: a
-   * preparation that could never be delivered is not a smaller preparation.
-   */
-  "rpc_frame_too_large",
-  /**
-   * The device's input-preparation lane is off because its durable record log
-   * holds a record from an older record schema version. The rest of the
-   * device runs; this lane refuses until an operator archives that log. No
-   * record is migrated, read forward or deleted.
-   */
-  "input_preparation_record_log_unsupported"
-]);
-var AGENT_EVENT_SPILL_UNSTORED_REASON_MAX_LENGTH = 512;
-var AgentEventSpillSchema = z.object({
-  /** Which field of the event was replaced by a preview. */
-  field: z.enum(["input", "output"]),
-  /** UTF-8 byte length of the full `JSON.stringify(<field>)` that was spilled. */
-  totalBytes: z.number().int().nonnegative(),
-  /** `totalBytes` minus the UTF-8 bytes of the retained preview head + tail. */
-  omittedBytes: z.number().int().nonnegative(),
-  /** Always the JSON serialization of the field — never the tool's own notion of a content type. */
-  contentType: z.literal("application/json"),
-  /** Where the omitted bytes are readable. Mutually exclusive with `unstoredReason`. */
-  blob: BlobRefSchema.optional(),
-  /** Why the omitted bytes are NOT readable. Mutually exclusive with `blob`. */
-  unstoredReason: z.string().min(1).max(AGENT_EVENT_SPILL_UNSTORED_REASON_MAX_LENGTH).optional()
-}).strict().refine(
-  (spill) => spill.blob === void 0 !== (spill.unstoredReason === void 0),
-  "spill must carry exactly one of blob (the omitted bytes are readable) or unstoredReason (they are not)"
-);
-var AgentEventSchema = z.discriminatedUnion("type", [
-  z.object({ type: z.literal("progress"), text: z.string() }),
-  z.object({
-    type: z.literal("tool_use"),
-    tool: z.string(),
-    /** Authoritative MCP identity, absent when the adapter cannot resolve it. */
-    mcp: z.object({ server: z.string().min(1), tool: z.string().min(1) }).strict().optional(),
-    input: z.unknown().optional(),
-    toolCallId: z.string().regex(/\S/, "toolCallId must contain a non-whitespace character").optional(),
-    /** Present only when `input` is a preview of a spilled value — see {@link AgentEventSpillSchema}. */
-    spill: AgentEventSpillSchema.optional()
-  }),
-  z.object({
-    type: z.literal("tool_result"),
-    tool: z.string(),
-    /** Authoritative MCP identity, absent when the adapter cannot resolve it. */
-    mcp: z.object({ server: z.string().min(1), tool: z.string().min(1) }).strict().optional(),
-    output: z.unknown().optional(),
-    toolCallId: z.string().regex(/\S/, "toolCallId must contain a non-whitespace character").optional(),
-    isError: z.boolean().optional(),
-    /** Present only when `output` is a preview of a spilled value — see {@link AgentEventSpillSchema}. */
-    spill: AgentEventSpillSchema.optional()
-  }),
-  z.object({ type: z.literal("artifact"), name: z.string(), contentType: z.string() }),
-  z.object({ type: z.literal("needs_approval"), summary: z.string() }),
-  z.object({ type: z.literal("turn_end") }),
-  z.object({ type: z.literal("error"), message: z.string() }),
-  /**
-   * Token usage reported by a runtime turn — maps from codex
-   * `turn.completed.usage` and claude `result` usage (adapters wired up in a
-   * later wave; this is just the variant + schema). All fields optional
-   * because runtimes report different subsets.
-   */
-  z.object({
-    type: z.literal("usage"),
-    inputTokens: z.number().int().nonnegative().optional(),
-    cachedInputTokens: z.number().int().nonnegative().optional(),
-    outputTokens: z.number().int().nonnegative().optional(),
-    reasoningTokens: z.number().int().nonnegative().optional(),
-    totalTokens: z.number().int().nonnegative().optional(),
-    // Context occupancy is independent of provider cost counters. Unknown stays absent.
-    contextTokens: z.number().int().nonnegative().optional(),
-    contextWindow: z.number().int().positive().optional(),
-    contextSource: z.enum(["provider", "estimate"]).optional()
-  })
-]);
-var KNOWN_AGENT_EVENT_TYPES = z.toJSONSchema(AgentEventSchema).oneOf.map((branch) => branch.properties.type.const);
-var UnknownAgentEventSchema = z.object({ type: z.string() }).passthrough().refine(
-  (event) => !KNOWN_AGENT_EVENT_TYPES.includes(event.type),
-  "type refers to a known AgentEvent variant; malformed known variants must fail through AgentEventSchema, not fall back to unknown-tolerance"
-);
-var AgentEventOrUnknownSchema = z.union([AgentEventSchema, UnknownAgentEventSchema]);
-function isKnownAgentEvent(event) {
-  return KNOWN_AGENT_EVENT_TYPES.includes(event.type);
-}
-function partitionAgentEvents(events) {
-  const known = [];
-  const unknown = [];
-  for (const event of events) {
-    if (isKnownAgentEvent(event)) {
-      known.push(event);
-    } else {
-      unknown.push(event);
-    }
-  }
-  return { known, unknown };
-}
-var AGENT_HOME_PROJECTION_MAX_BYTES = 64 * 1024;
-var AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM = "9223372036854775807";
-var AgentHomeProjectionProfileRevisionSchema = z.string().regex(/^[1-9][0-9]{0,18}$/u, "profileRevision must be a canonical positive decimal string").refine(
-  (value) => value.length < AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM.length || value <= AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM,
-  `profileRevision must not exceed PostgreSQL BIGINT maximum ${AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM}`
-);
-var AgentHomeProjectionHashSchema = AgentEgressContentHashSchema;
-var AgentHomeProjectionOutcomeSchema = z.enum(["applied", "idempotent", "stale", "conflict"]);
-var AgentHomeProjectionValueSchema = z.json().refine(
-  (value) => new TextEncoder().encode(JSON.stringify(value)).byteLength <= AGENT_HOME_PROJECTION_MAX_BYTES,
-  `projection must not exceed ${AGENT_HOME_PROJECTION_MAX_BYTES} UTF-8 JSON bytes`
-);
-var E2EE_MEMBER_CHAIN_APPEND_MAX_ENTRIES = 64;
-var E2EE_MEMBER_CHAIN_ENTRY_MAX_BYTES = 65536;
-var E2EE_MEMBER_CHAIN_READ_MAX_ENTRIES = 256;
-var E2EE_SCOPE_KEY_PACKAGE_PUT_MAX = 256;
-var E2EE_SCOPE_KEY_PACKAGE_PAGE_MAX = 16;
-var E2EE_SCOPE_ID_MAX_LENGTH = 512;
-var E2EE_MEMBER_KEY_REGISTER_OPERATION = "e2ee-member-key.register";
-var E2EE_MEMBER_CHAIN_APPEND_OPERATION = "e2ee-member-chain.append";
-var E2EE_SCOPE_KEY_PACKAGE_PUT_OPERATION = "e2ee-scope-key-package.put";
-function base64UrlBytes(bytes) {
-  const length = Math.ceil(bytes * 4 / 3);
-  const last = ["[A-Za-z0-9_-]", "[AQgw]", "[AEIMQUYcgkosw048]"][bytes % 3];
-  return z.string().regex(new RegExp(`^[A-Za-z0-9_-]{${length - 1}}${last}$`, "u"));
-}
-var MemberIdSchema = z.string().regex(/^[A-Za-z0-9_-]{43}$/u);
-var PositiveSafeIntegerSchema = z.number().int().positive().max(Number.MAX_SAFE_INTEGER);
-var SignatureSchema = base64UrlBytes(64);
-var P256PublicJwkSchema = z.strictObject({
-  kty: z.literal("EC"),
-  crv: z.literal("P-256"),
-  x: base64UrlBytes(32),
-  y: base64UrlBytes(32)
-});
-var E2eeMemberKeyBundleSchema = z.strictObject({
-  v: z.literal(1),
-  memberId: MemberIdSchema,
-  signingPublicJwk: P256PublicJwkSchema,
-  kemPublicJwk: P256PublicJwkSchema,
-  kemEpoch: PositiveSafeIntegerSchema,
-  kemSig: SignatureSchema,
-  deviceId: z.string().min(1).optional()
-});
-var E2EE_MEMBER_CHAIN_OPS = ["add", "remove", "rotate", "scope-policy", "shred"];
-var E2eeScopeShredSubjectSchema = z.strictObject({ scopeId: z.string().min(1) });
-var E2eeMemberRotateSubjectSchema = z.strictObject({
-  memberId: MemberIdSchema,
-  kemPublicJwk: P256PublicJwkSchema,
-  kemEpoch: PositiveSafeIntegerSchema,
-  kemSig: SignatureSchema
-});
-var E2eeMemberChainEntrySchema = z.strictObject({
-  v: z.literal(1),
-  tenantId: z.string().min(1),
-  seq: PositiveSafeIntegerSchema,
-  prev: z.union([z.null(), z.string().regex(CONTENT_HASH_RE)]),
-  op: z.enum(E2EE_MEMBER_CHAIN_OPS),
-  subject: z.custom(
-    (value) => value !== null && typeof value === "object" && !Array.isArray(value)
-  ),
-  signer: MemberIdSchema,
-  sig: SignatureSchema
-}).refine((entry) => entry.seq === 1 === (entry.prev === null), {
-  path: ["prev"],
-  message: "the first entry, and only the first, has no prev"
-}).refine((entry) => entry.op !== "shred" || E2eeScopeShredSubjectSchema.safeParse(entry.subject).success, {
-  path: ["subject"],
-  message: "a shred subject is exactly { scopeId }"
-}).refine((entry) => entry.op !== "rotate" || E2eeMemberRotateSubjectSchema.safeParse(entry.subject).success, {
-  path: ["subject"],
-  message: "a rotate subject is exactly { memberId, kemPublicJwk, kemEpoch, kemSig }"
-});
-var E2eeScopeKeyPackageV1Schema = z.strictObject({
-  v: z.literal(1),
-  tenantId: z.string().min(1),
-  scopeId: z.string().min(1),
-  epoch: PositiveSafeIntegerSchema,
-  keyId: z.string().regex(/^[A-Za-z0-9_-]{22}$/u),
-  recipient: MemberIdSchema,
-  sender: MemberIdSchema,
-  enc: base64UrlBytes(65),
-  ciphertext: base64UrlBytes(48),
-  sig: SignatureSchema
-});
-var E2eeScopeKeyPackageV2Schema = z.strictObject({
-  ...E2eeScopeKeyPackageV1Schema.shape,
-  v: z.literal(2),
-  recipientKemEpoch: PositiveSafeIntegerSchema
-});
-var E2eeScopeKeyPackageSchema = z.union([E2eeScopeKeyPackageV1Schema, E2eeScopeKeyPackageV2Schema]);
-var E2eePairingMacSchema = base64UrlBytes(32);
-var E2eeMemberKeyRegisterRequestSchema = z.strictObject({
-  member: E2eeMemberKeyBundleSchema.refine((member) => member.deviceId !== void 0, {
-    message: "a device member names its deviceId"
-  }),
-  mac: E2eePairingMacSchema
-});
-var E2eeClientPairingMacSchema = z.strictObject({
-  mac: E2eePairingMacSchema,
-  member: E2eeMemberKeyBundleSchema.refine((member) => member.deviceId === void 0, {
-    message: "a client member has no deviceId"
-  }),
-  chainHead: z.strictObject({ seq: PositiveSafeIntegerSchema, hash: z.string().regex(CONTENT_HASH_RE) })
-});
-var E2eeKeyPackageAvailablePayloadSchema = z.strictObject({
-  scopeId: z.string().min(1).max(E2EE_SCOPE_ID_MAX_LENGTH),
-  epoch: PositiveSafeIntegerSchema
-});
-
-// src/messages.ts
-var MAX_INLINE_BYTES = 64 * 1024;
-function isWithinInlineByteLimit(value) {
-  return new TextEncoder().encode(value).length <= MAX_INLINE_BYTES;
-}
-var RuntimeIdSchema = z.enum(RUNTIME_IDS);
-var ProtocolVersionNumberSchema = z.number().int().nonnegative().max(2147483647);
-var RuntimeCapabilitiesSchema = z.object({
-  steer: z.boolean().optional(),
-  resume: z.boolean().optional(),
-  approvalInteractive: z.boolean().optional(),
-  /** Whether this runtime can project a locally configured MCP toolset into one task. */
-  mcpToolsets: z.boolean().optional(),
-  messageDraft: z.boolean().optional()
-});
-var RuntimeInfoSchema = z.object({
-  id: RuntimeIdSchema,
-  version: z.string().optional(),
-  authPresent: z.boolean().optional(),
-  /** Optional: older daemons omit this entirely (pre-freeze addition). */
-  capabilities: RuntimeCapabilitiesSchema.optional()
-});
-var HarnessIdSchema = z.string().min(1).max(128).regex(/^[a-z][a-z0-9]*(?:[._-][a-z0-9]+)*$/).refine((value) => !RUNTIME_IDS.includes(value), "built-in runtime must use runtime");
-var HarnessInfoSchema = z.object({
-  id: HarnessIdSchema,
-  version: z.string().min(1).max(128).optional(),
-  capabilities: RuntimeCapabilitiesSchema
-});
-var HarnessInventorySchema = z.array(HarnessInfoSchema).max(64).refine((values) => new Set(values.map((value) => value.id)).size === values.length, "duplicate harness identity");
-var CONFIGURED_TOOLSETS_MAX_ITEMS = 64;
-var ToolsetIdSchema = z.string().min(1).max(128).regex(/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/u, "toolset ids must be lowercase logical identifiers");
-var AGENT_REF_MAX_BYTES = 160;
-var AGENT_REF_VALUE = z.string().min(1).max(AGENT_REF_MAX_BYTES).refine((value) => new TextEncoder().encode(value).byteLength <= AGENT_REF_MAX_BYTES, {
-  message: `AgentRef values must not exceed ${AGENT_REF_MAX_BYTES} UTF-8 bytes`
-}).regex(/^[^\u0000-\u001f\u007f\r\n]+$/u, "AgentRef values must not contain control characters");
-var WINDOWS_RESERVED_AGENT_SEGMENT = /^(?:con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\..*)?$/iu;
-var AgentRefSchema = z.object({
-  agentId: AGENT_REF_VALUE.regex(/^[^\\/:<>"|?*]+$/u, "agentId must be one portable pathname segment").refine(
-    (value) => value !== "." && value !== "..",
-    "agentId must not be a dot segment"
-  ).refine(
-    (value) => !/[. ]$/u.test(value) && !WINDOWS_RESERVED_AGENT_SEGMENT.test(value),
-    "agentId must be a portable Windows-safe pathname segment"
-  ),
-  profileRevision: AGENT_REF_VALUE
-}).strict();
-var AgentHomeProjectionAgentRefSchema = AgentRefSchema.extend({
-  profileRevision: AgentHomeProjectionProfileRevisionSchema
-}).strict();
-function rejectDuplicateToolsets(ids, ctx, label) {
-  const seen = /* @__PURE__ */ new Set();
-  for (const [index, id] of ids.entries()) {
-    if (seen.has(id)) {
-      ctx.addIssue({ code: "custom", path: [index], message: `duplicate ${label} toolset: ${id}` });
-    }
-    seen.add(id);
-  }
-}
-var ConfiguredToolsetsSchema = z.array(ToolsetIdSchema).max(CONFIGURED_TOOLSETS_MAX_ITEMS).superRefine((ids, ctx) => rejectDuplicateToolsets(ids, ctx, "configured"));
-var ConnHelloPayloadSchema = z.object({
-  protocolVersions: z.array(ProtocolVersionNumberSchema).max(16),
-  capabilities: z.array(z.string()),
-  deviceId: z.string(),
-  productId: z.string(),
-  /** U4a Local Agent release identity; this is the sole client-version authority. */
-  clientVersion: z.string().min(1).max(128).optional(),
-  /** Runtimes detected on this device (M1 gap #4; replaces `agents`). */
-  runtimes: z.array(RuntimeInfoSchema).optional(),
-  harnesses: HarnessInventorySchema.optional(),
-  /** Validated logical IDs configured on this device; definitions and secrets stay local. */
-  configuredToolsets: ConfiguredToolsetsSchema.optional(),
-  /**
-   * Last `seq` this device has seen from the server (M1 redelivery cursor).
-   * Omitted on a device's first-ever connection. The server replays any
-   * server->daemon envelopes with `seq > cursor` it still holds — see
-   * docs/protocol.md "At-least-once delivery".
-   */
-  cursor: z.number().int().optional()
-});
-var ConnAckPayloadSchema = z.object({
-  protocolVersion: z.number().int(),
-  capabilities: z.array(z.string()),
-  serverTime: z.iso.datetime({ offset: true })
-});
-var InstructionBlobRefSchema = z.object({ blobRef: BlobRefSchema }).strict();
-var DispatchTargetIdSchema = z.string().min(1).max(160).regex(/^[^\u0000\r\n]+$/u, "dispatch target ids must not contain control line breaks");
-var DispatchSelectionSchema = z.discriminatedUnion("lane", [
-  z.object({
-    lane: z.literal("subscription"),
-    runtimeId: z.enum(["claude", "codex"]),
-    providerId: z.null(),
-    modelId: DispatchTargetIdSchema
-  }).strict(),
-  z.object({
-    lane: z.literal("byok"),
-    runtimeId: z.literal("pi"),
-    providerId: DispatchTargetIdSchema,
-    modelId: DispatchTargetIdSchema
-  }).strict(),
-  z.object({
-    lane: z.literal("byok-profile"),
-    runtimeId: z.literal("pi"),
-    providerProfile: ProviderProfileBindingSchema
-  }).strict()
-]);
-var NO_SEALED_MEMBER = { sealed: z.never().optional(), sealing: z.never().optional() };
-var TaskOfferPayloadSchema = z.object({
-  ...NO_SEALED_MEMBER,
-  instruction: z.union([z.string(), InstructionBlobRefSchema]),
-  runtime: RuntimeIdSchema.optional(),
-  harnessId: HarnessIdSchema.optional(),
-  dispatchSelection: DispatchSelectionSchema.optional(),
-  sessionRef: z.string().optional(),
-  workspaceHint: z.string().optional(),
-  limits: z.object({
-    maxDurationMs: z.number().int().positive().optional(),
-    maxTokens: z.number().int().positive().optional()
-  }).optional()
-});
-var RequiredToolsetsSchema = z.array(ToolsetIdSchema).min(1).max(16).superRefine((ids, ctx) => rejectDuplicateToolsets(ids, ctx, "required"));
-var TaskOfferWithToolsetsPayloadSchema = TaskOfferPayloadSchema.extend({
-  requiredToolsets: RequiredToolsetsSchema
-}).strict();
-var AgentHomeAccessSchema = z.literal("memory-reader");
-var AgentMemorySelectionSchema = z.enum([
-  ...PreparedAgentMemoryModeSchema.options,
-  "read-if-admitted",
-  "read-write-if-admitted"
-]);
-var TaskOfferForAgentPayloadSchema = z.object({
-  ...NO_SEALED_MEMBER,
-  instruction: z.union([z.string(), InstructionBlobRefSchema]),
-  agentRef: AgentRefSchema,
-  homeAccess: AgentHomeAccessSchema.optional(),
-  agentMemory: AgentMemorySelectionSchema.optional(),
-  requiredToolsets: RequiredToolsetsSchema.optional(),
-  runtime: RuntimeIdSchema.optional(),
-  harnessId: HarnessIdSchema.optional(),
-  dispatchSelection: DispatchSelectionSchema.optional(),
-  terminalProjection: TerminalProjectionSelectionSchema.optional(),
-  sessionRef: z.string().optional(),
-  limits: z.object({
-    maxDurationMs: z.number().int().positive().optional(),
-    maxTokens: z.number().int().positive().optional()
-  }).optional()
-}).strict();
-var TaskOfferForAgentWithEgressPayloadSchema = TaskOfferForAgentPayloadSchema.extend({
-  sessionRef: z.string().min(1).max(512),
-  egressPolicy: AgentEgressPolicySchema,
-  messageEgress: AgentMessageEgressRequirementSchema.optional()
-}).strict();
-var TaskOfferForAgentWithEgressFreshPayloadSchema = TaskOfferForAgentPayloadSchema.omit({
-  sessionRef: true
-}).extend({
-  egressPolicy: AgentEgressPolicySchema,
-  messageEgress: AgentMessageEgressRequirementSchema.optional()
-}).strict();
-var TaskOfferPreparedPayloadSchema = TaskOfferForAgentPayloadSchema.omit({
-  instruction: true,
-  sessionRef: true,
-  agentMemory: true
-}).extend({
-  preparation: InputPreparationOfferBindingSchema,
-  agentMemory: PreparedAgentMemoryModeSchema,
-  egressPolicy: AgentEgressPolicySchema,
-  messageEgress: AgentMessageEgressRequirementSchema.optional()
-}).strict();
-var EGRESS_SAFE_VALUE = z.json().refine(
-  (value) => new TextEncoder().encode(JSON.stringify(value)).byteLength <= 256 * 1024,
-  "egress payload exceeds 256KiB"
-);
-var EGRESS_SESSION_REF = z.string().min(1).max(512);
-var AgentEgressReliablePayloadSchema = z.object({
-  agentRef: AgentRefSchema,
-  sessionRef: EGRESS_SESSION_REF,
-  policyRevision: AgentEgressPolicyRevisionSchema,
-  eventId: z.uuid(),
-  cursor: z.number().int().positive(),
-  payload: EGRESS_SAFE_VALUE,
-  contentHash: AgentEgressContentHashSchema,
-  byteCount: z.number().int().nonnegative().max(256 * 1024)
-}).strict();
-var AgentEgressAckPayloadSchema = z.object({
-  agentRef: AgentRefSchema,
-  sessionRef: EGRESS_SESSION_REF,
-  policyRevision: AgentEgressPolicyRevisionSchema,
-  eventId: z.uuid(),
-  cursor: z.number().int().positive(),
-  receiptId: z.uuid()
-}).strict();
-var AGENT_MESSAGE_BODY = z.string().min(1).refine(
-  (value) => new TextEncoder().encode(value).byteLength <= AGENT_MESSAGE_MAX_BYTES,
-  `Agent message body exceeds ${AGENT_MESSAGE_MAX_BYTES} bytes`
-);
-var AgentMessageDraftPayloadSchema = z.object({
-  agentRef: AgentRefSchema,
-  revision: z.number().int().min(1),
-  offset: z.number().int().nonnegative(),
-  text: z.string().refine(
-    (value) => new TextEncoder().encode(value).byteLength <= AGENT_MESSAGE_DRAFT_FRAME_MAX_BYTES,
-    `Agent message draft frame exceeds ${AGENT_MESSAGE_DRAFT_FRAME_MAX_BYTES} bytes`
-  ),
-  overflow: z.literal(true).optional()
-}).strict();
-var AgentMessagePublishPayloadSchema = z.object({
-  agentRef: AgentRefSchema,
-  sessionRef: EGRESS_SESSION_REF,
-  contract: AgentMessageContractSchema,
-  messageId: z.uuid(),
-  cursor: z.number().int().positive(),
-  contentType: AgentMessageContentTypeSchema,
-  body: AGENT_MESSAGE_BODY,
-  contentHash: AgentEgressContentHashSchema,
-  byteCount: z.number().int().positive().max(AGENT_MESSAGE_MAX_BYTES)
-}).strict().superRefine((value, context) => {
-  const actual = new TextEncoder().encode(value.body).byteLength;
-  if (actual !== value.byteCount) {
-    context.addIssue({ code: "custom", path: ["byteCount"], message: "byteCount must equal UTF-8 body bytes" });
-  }
-});
-var AgentMessageDispositionPayloadSchema = z.object({
-  agentRef: AgentRefSchema,
-  sessionRef: EGRESS_SESSION_REF,
-  contract: AgentMessageContractSchema,
-  messageId: z.uuid(),
-  cursor: z.number().int().positive(),
-  contentHash: AgentEgressContentHashSchema,
-  outcome: z.enum(["accepted", "held", "refused"]),
-  receiptId: z.uuid(),
-  reasonCode: z.string().min(1).max(160).regex(/^[A-Za-z0-9][A-Za-z0-9._:-]*$/u).optional()
-}).strict();
-var AGENT_CONTENT_TARGET = z.string().min(1).max(1024).regex(/^[^\u0000-\u001f\u007f]+$/u, "content target must not contain control characters").refine(
-  (value) => !value.startsWith("/") && !value.includes("\\") && value.split("/").every((segment) => segment.length > 0 && segment !== "." && segment !== ".."),
-  "content target must be a portable relative path without dot segments"
-);
-var AGENT_CONTENT_CWD = z.string().min(1).max(4096).regex(/^[^\u0000-\u001f\u007f]+$/u, "cwd must not contain control characters").regex(/^(?:\/|[A-Za-z]:[\\/])/u, "cwd must be absolute");
-var AgentContentReadPayloadSchema = z.object({
-  requestId: z.uuid(),
-  surface: AgentContentReadSurfaceSchema,
-  actor: AgentContentActorSchema,
-  agentRef: AgentRefSchema,
-  sessionRef: EGRESS_SESSION_REF,
-  runtime: RuntimeIdSchema,
-  cwd: AGENT_CONTENT_CWD,
-  policyRevision: AgentEgressPolicyRevisionSchema,
-  target: AGENT_CONTENT_TARGET,
-  mimeType: AgentContentMimeTypeSchema,
-  decodeAs: AgentContentDecodeAsSchema,
-  policy: ContentReadPolicySchema
-}).strict();
-var AgentContentReceiptPayloadSchema = z.discriminatedUnion("decision", [
-  z.object({
-    requestId: z.uuid(),
-    /** Stable reliable-delivery identity. Content receipts use their requestId. */
-    eventId: z.uuid(),
-    /** Stable positive cursor allocated by the durable Agent spool. */
-    cursor: z.number().int().positive(),
-    surface: AgentContentReadSurfaceSchema,
-    actor: AgentContentActorSchema,
-    agentRef: AgentRefSchema,
-    sessionRef: EGRESS_SESSION_REF,
-    runtime: RuntimeIdSchema,
-    cwd: AGENT_CONTENT_CWD,
-    policyRevision: AgentEgressPolicyRevisionSchema,
-    target: AGENT_CONTENT_TARGET,
-    mimeType: AgentContentMimeTypeSchema,
-    decodeAs: AgentContentDecodeAsSchema,
-    decision: z.literal("allowed"),
-    byteCount: z.number().int().nonnegative(),
-    contentHash: AgentEgressContentHashSchema,
-    blobRef: BlobRefSchema
-  }).strict(),
-  z.object({
-    requestId: z.uuid(),
-    eventId: z.uuid(),
-    cursor: z.number().int().positive(),
-    surface: AgentContentReadSurfaceSchema,
-    actor: AgentContentActorSchema,
-    agentRef: AgentRefSchema,
-    sessionRef: EGRESS_SESSION_REF,
-    runtime: RuntimeIdSchema,
-    cwd: AGENT_CONTENT_CWD,
-    policyRevision: AgentEgressPolicyRevisionSchema,
-    target: AGENT_CONTENT_TARGET,
-    mimeType: AgentContentMimeTypeSchema,
-    decodeAs: AgentContentDecodeAsSchema,
-    decision: z.literal("denied"),
-    byteCount: z.literal(0),
-    reason: AgentContentReadDenialReasonSchema
-  }).strict()
-]).superRefine((value, ctx) => {
-  if (value.decision !== "allowed") return;
-  if (value.blobRef.size !== value.byteCount) {
-    ctx.addIssue({ code: "custom", path: ["blobRef", "size"], message: "blobRef size must equal byteCount" });
-  }
-  if (value.blobRef.contentHash !== value.contentHash) {
-    ctx.addIssue({ code: "custom", path: ["blobRef", "contentHash"], message: "blobRef contentHash must equal contentHash" });
-  }
-  if (value.blobRef.contentType !== value.mimeType) {
-    ctx.addIssue({ code: "custom", path: ["blobRef", "contentType"], message: "blobRef contentType must equal mimeType" });
-  }
-});
-var AgentHomeProjectionPayloadSchema = z.object({
-  requestId: z.uuid(),
-  agentRef: AgentHomeProjectionAgentRefSchema,
-  projectionHash: AgentHomeProjectionHashSchema,
-  projection: AgentHomeProjectionValueSchema
-}).strict();
-var AgentMemoryIntentAvailablePayloadSchema = z.object({
-  intentId: z.uuid(),
-  agentRef: AgentHomeProjectionAgentRefSchema
-}).strict();
-var InputPreparationInlineContextSchema = z.object({
-  inline: z.string().refine(isWithinInlineByteLimit, `inline context must not exceed ${MAX_INLINE_BYTES} UTF-8 bytes`)
-}).strict();
-var InputPreparationBlobContextSchema = z.object({ blobRef: BlobRefSchema, contentHash: InputPreparationContentHashSchema }).strict().superRefine((value, ctx) => {
-  if (value.blobRef.contentHash !== value.contentHash) {
-    ctx.addIssue({
-      code: "custom",
-      path: ["blobRef", "contentHash"],
-      message: "blobRef contentHash must equal contentHash"
-    });
-  }
-});
-var AgentInputPreparationPayloadSchema = z.object({
-  agentMemory: PreparedAgentMemoryModeSchema,
-  requestId: z.uuid(),
-  agentRef: AgentRefSchema,
-  profileId: InputPreparationProfileIdSchema,
-  policyRevision: InputPreparationPolicyRevisionSchema,
-  source: InputPreparationSourceSchema,
-  selection: InputPreparationSelectionSchema,
-  deadlineAt: z.iso.datetime({ offset: true }),
-  context: z.union([InputPreparationInlineContextSchema, InputPreparationBlobContextSchema]),
-  requiredToolsets: z.array(ToolsetIdSchema).max(16).superRefine((ids, ctx) => rejectDuplicateToolsets(ids, ctx, "required")),
-  /**
-   * The Host's accounting ruling for this preparation, carried verbatim onto
-   * the receipt's binding. Optional and defaulted NOWHERE: a payload that
-   * omits it produces a receipt that says `accounting_policy_missing`, which
-   * is the honest answer — the device rules on no residual key by itself.
-   */
-  accountingPolicyRef: InputPreparationAccountingPolicyRefSchema.optional()
-}).strict();
-var TaskApprovePayloadSchema = z.object({
-  approvalId: z.string().optional()
-});
-var TaskRejectPayloadSchema = z.object({
-  reason: z.string().optional(),
-  approvalId: z.string().optional()
-});
-var TaskCancelPayloadSchema = z.object({
-  reason: z.string().optional()
-});
-var TaskSteerPayloadSchema = z.object({
-  ...NO_SEALED_MEMBER,
-  text: z.string()
-});
-var TaskClaimPayloadSchema = z.object({
-  deviceId: z.string(),
-  agentId: z.string().optional(),
-  agentRef: AgentRefSchema.optional(),
-  runtime: RuntimeIdSchema.optional(),
-  harnessId: HarnessIdSchema.optional(),
-  capabilities: RuntimeCapabilitiesSchema.optional()
-});
-var TaskStartedPayloadSchema = z.object({});
-var HOME_DECLINE_CODES = ["agent_home_writer_busy", "agent_home_reader_busy"];
-var DeclineFields = z.object({
-  ...NO_SEALED_MEMBER,
-  reason: z.string(),
-  retryable: z.boolean().optional(),
-  agentRef: AgentRefSchema.optional(),
-  code: z.enum([...HOME_DECLINE_CODES, ...SEALED_DECLINE_CODES]).optional()
-});
-var TaskDeclinePayloadSchema = DeclineFields.refine(
-  (p) => !SEALED_DECLINE_CODES.includes(p.code) || p.reason === p.code && p.retryable !== true,
-  { message: "a sealed code needs reason === code, not retryable" }
-);
-var TaskProgressPayloadSchema = z.object({
-  ...NO_SEALED_MEMBER,
-  seq: z.number().int(),
-  events: z.array(AgentEventOrUnknownSchema)
-});
-var TaskArtifactPayloadSchema = z.object({
-  ...NO_SEALED_MEMBER,
-  name: z.string(),
-  contentType: z.string(),
-  inline: z.string().refine(isWithinInlineByteLimit, {
-    message: "inline artifact payload exceeds 64KB limit"
-  }).optional(),
-  blobRef: BlobRefSchema.optional()
-});
-var TaskAwaitApprovalPayloadSchema = z.object({
-  ...NO_SEALED_MEMBER,
-  summary: z.string(),
-  approvalId: z.string().optional()
-});
-var RESULT_DOCUMENT_MAX_BYTES = 1048576;
-function checkResultDocument(document) {
-  return canonicalizePlainJson(document, RESULT_DOCUMENT_MAX_BYTES);
-}
-var TERMINAL_INFERENCE_USAGE_MAX_TOKENS = 1e9;
-var TERMINAL_INFERENCE_USAGE_MAX_DURATION_MS = 6048e5;
-var TERMINAL_INFERENCE_USAGE_PROVIDER_MAX_LENGTH = 160;
-var TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH = 160;
-var TERMINAL_INFERENCE_USAGE_CLIENT_VERSION_MAX_LENGTH = 128;
-var TerminalInferenceUsageNumberSchema = z.number().int().safe().nonnegative().max(TERMINAL_INFERENCE_USAGE_MAX_TOKENS);
-var TerminalInferenceUsageDurationSchema = z.number().int().safe().nonnegative().max(TERMINAL_INFERENCE_USAGE_MAX_DURATION_MS);
-var TerminalInferenceReportedAtSchema = z.iso.datetime({ offset: true, precision: 3 }).refine((value) => value.endsWith("Z"), "reportedAt must be canonical UTC (Z)");
-var TerminalInferenceUsageSchema = z.object({
-  /** The adapter that actually started this task, never a requested fallback. */
-  runtime: RuntimeIdSchema,
-  /** Omitted unless the adapter itself exposed this provider observation. */
-  provider: z.string().min(1).max(TERMINAL_INFERENCE_USAGE_PROVIDER_MAX_LENGTH).optional(),
-  /** Omitted unless the adapter itself exposed this model observation. */
-  model: z.string().min(1).max(TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH).optional(),
-  /** Direct projection of the runtime's final observed input token count. */
-  promptTokens: TerminalInferenceUsageNumberSchema.optional(),
-  /** Direct projection of the runtime's final observed output token count. */
-  completionTokens: TerminalInferenceUsageNumberSchema.optional(),
-  /** Device-observed elapsed duration for the started task. */
-  durationMs: TerminalInferenceUsageDurationSchema.optional(),
-  /** Process-immutable Local Agent release version, owned outside the protocol. */
-  clientVersion: z.string().min(1).max(TERMINAL_INFERENCE_USAGE_CLIENT_VERSION_MAX_LENGTH),
-  /** Device observation time, never server receipt time. */
-  reportedAt: TerminalInferenceReportedAtSchema
-});
-var TerminalPreparedObservationSchema = z.object({
-  requestDigest: InputPreparationArtifactSummarySchema.shape.requestDigest,
-  initialPromptTokens: TerminalInferenceUsageNumberSchema,
-  maxPromptTokens: TerminalInferenceUsageNumberSchema
-}).strict().refine((value) => value.maxPromptTokens >= value.initialPromptTokens, {
-  message: "maxPromptTokens must not be below initialPromptTokens",
-  path: ["maxPromptTokens"]
-});
-var TerminalAgentHomeProjectionSchema = z.object({
-  profileRevision: AgentHomeProjectionProfileRevisionSchema,
-  projectionHash: AgentHomeProjectionHashSchema
-}).strict();
-var AGENT_HOME_MEMORY_DIGEST_MAX_FILES = 256;
-var AGENT_HOME_MEMORY_DIGEST_MAX_BYTES = 16 * 1024 * 1024;
-var AGENT_HOME_MEMORY_PATH_MAX_LENGTH = 1024;
-var AgentHomeMemoryChangedPathsSchema = z.array(z.string().min(1).max(AGENT_HOME_MEMORY_PATH_MAX_LENGTH).regex(/^[^\u0000]+$/u)).min(1).max(AGENT_HOME_MEMORY_DIGEST_MAX_FILES * 2);
-var TerminalAgentHomeMemoryChangeSchema = z.discriminatedUnion("outcome", [
-  z.object({ outcome: z.literal("unchanged") }).strict(),
-  z.object({ outcome: z.literal("reader-attributed"), paths: AgentHomeMemoryChangedPathsSchema }).strict(),
-  z.object({ outcome: z.literal("unattributed"), paths: AgentHomeMemoryChangedPathsSchema }).strict(),
-  z.object({ outcome: z.literal("unmeasured") }).strict()
-]);
-var TaskCompletePayloadSchema = z.object({
-  ...NO_SEALED_MEMBER,
-  harnessId: HarnessIdSchema.optional(),
-  summary: z.string(),
-  /**
-   * The runtime's closing reply: the assistant text after the last tool
-   * interaction, or the last whole message for a runtime whose `progress`
-   * events are whole messages (Codex). `summary` keeps the whole run's text,
-   * so a host reads the final answer here without parsing commentary out of
-   * it. Absent when the run ended with no closing text. An older server strips
-   * this optional field; the host then sees it absent and keeps `summary`.
-   */
-  finalMessage: z.string().optional(),
-  sessionRef: z.string(),
-  artifactRefs: z.array(BlobRefSchema).optional(),
-  document: z.unknown().optional().refine((value) => value === void 0 || checkResultDocument(value).ok, {
-    message: `task.complete.document must be plain JSON data (equal to its own JSON round trip) and at most ${RESULT_DOCUMENT_MAX_BYTES} bytes as canonical JSON (UTF-8)`
-  }),
-  usage: TerminalInferenceUsageSchema.optional(),
-  /** Present on a prepared Execution only — see {@link TerminalPreparedObservationSchema}. */
-  preparedObservation: TerminalPreparedObservationSchema.optional(),
-  agentRef: AgentRefSchema.optional(),
-  agentHomeProjection: TerminalAgentHomeProjectionSchema.optional(),
-  agentHomeMemoryChange: TerminalAgentHomeMemoryChangeSchema.optional()
-});
-var RuntimeFailureClassSchema = z.enum(RUNTIME_FAILURE_CLASSES);
-var TaskFailureSchema = z.union([
-  z.object({ class: z.literal("quota"), resetsAt: z.iso.datetime().optional() }).strict(),
-  z.object({ class: RuntimeFailureClassSchema.exclude(["quota"]) }).strict()
-]);
-var TaskFailPayloadSchema = z.object({
-  ...NO_SEALED_MEMBER,
-  /** Local interruption observation bound to the immutable offer; does not assert a cloud claim. */
-  recovery: z.object({ kind: z.literal("daemon_interrupted"), offerId: z.uuid() }).strict().optional(),
-  harnessId: HarnessIdSchema.optional(),
-  reason: z.string(),
-  retryable: z.boolean().optional(),
-  /** Gated on the server's `runtime-failure-class` flag. Plaintext on `task.fail_sealed`. */
-  failure: TaskFailureSchema.optional(),
-  usage: TerminalInferenceUsageSchema.optional(),
-  /** Present on a prepared Execution that observed provider usage before failing. */
-  preparedObservation: TerminalPreparedObservationSchema.optional(),
-  agentRef: AgentRefSchema.optional(),
-  agentHomeProjection: TerminalAgentHomeProjectionSchema.optional(),
-  agentHomeMemoryChange: TerminalAgentHomeMemoryChangeSchema.optional()
-});
-var TaskCancelledPayloadSchema = z.object({
-  ...NO_SEALED_MEMBER,
-  harnessId: HarnessIdSchema.optional(),
-  reason: z.string().optional(),
-  usage: TerminalInferenceUsageSchema.optional(),
-  agentRef: AgentRefSchema.optional(),
-  agentHomeProjection: TerminalAgentHomeProjectionSchema.optional(),
-  agentHomeMemoryChange: TerminalAgentHomeMemoryChangeSchema.optional()
-});
-var TaskApprovalResolvedPayloadSchema = z.object({
-  approvalId: z.string(),
-  decision: z.enum(["approve", "reject"]),
-  resolvedBy: z.enum(["local"]),
-  at: z.iso.datetime({ offset: true })
-});
-var SEALED_OFFER_FIELDS = {
-  instruction: z.union([z.string(), InstructionBlobRefSchema]).optional(),
-  sealing: TaskSealingSchema,
-  sealed: SealedTaskInputSchema.optional()
-};
-var TaskOfferSealedPayloadSchema = TaskOfferPayloadSchema.extend(SEALED_OFFER_FIELDS).strict().superRefine(sealedOfferRule);
-var TaskOfferWithToolsetsSealedPayloadSchema = TaskOfferWithToolsetsPayloadSchema.extend(SEALED_OFFER_FIELDS).strict().superRefine(sealedOfferRule);
-var TaskOfferForAgentSealedPayloadSchema = TaskOfferForAgentPayloadSchema.extend(SEALED_OFFER_FIELDS).strict().superRefine(sealedOfferRule);
-var TaskOfferForAgentWithEgressSealedPayloadSchema = TaskOfferForAgentWithEgressPayloadSchema.extend(SEALED_OFFER_FIELDS).strict().superRefine(sealedOfferRule);
-var TaskOfferForAgentWithEgressFreshSealedPayloadSchema = TaskOfferForAgentWithEgressFreshPayloadSchema.extend({ ...SEALED_OFFER_FIELDS, routineRef: RoutineRefSchema.optional() }).strict().superRefine(sealedOfferRule);
-var TaskSteerSealedPayloadSchema = z.object({ steerId: z.uuid(), sealed: SealedTaskInputSchema }).strict();
-var TaskCompleteSealedPayloadSchema = TaskCompletePayloadSchema.omit({
-  summary: true,
-  finalMessage: true,
-  document: true,
-  artifactRefs: true,
-  preparedObservation: true
-}).extend({ sealed: SealedTaskOutputSchema }).strict();
-var TaskFailSealedPayloadSchema = TaskFailPayloadSchema.omit({ reason: true, preparedObservation: true }).extend({ sealed: SealedTaskOutputSchema }).strict();
-var TaskDeclineSealedPayloadSchema = DeclineFields.omit({ reason: true }).extend({ code: z.enum(HOME_DECLINE_CODES).optional(), sealed: SealedTaskOutputSchema }).strict();
-var TaskCancelledSealedPayloadSchema = TaskCancelledPayloadSchema.omit({ reason: true }).extend({ sealed: SealedTaskOutputSchema }).strict();
-var TaskProgressSealedPayloadSchema = TaskProgressPayloadSchema.omit({ events: true }).extend({ sealed: SealedTaskOutputSchema }).strict();
-var TaskArtifactSealedPayloadSchema = TaskArtifactPayloadSchema.omit({ inline: true, blobRef: true }).extend({ artifactId: z.uuid(), sealed: SealedTaskOutputSchema }).strict();
-var TaskAwaitApprovalSealedPayloadSchema = TaskAwaitApprovalPayloadSchema.omit({ summary: true }).extend({ approvalId: z.string().min(1), sealed: SealedTaskOutputSchema }).strict();
-var TASK_OFFER_PAYLOAD_SCHEMAS = {
-  "task.offer": TaskOfferPayloadSchema,
-  "task.offer_with_toolsets": TaskOfferWithToolsetsPayloadSchema,
-  "task.offer_for_agent": TaskOfferForAgentPayloadSchema,
-  "task.offer_for_agent_with_egress": TaskOfferForAgentWithEgressPayloadSchema,
-  "task.offer_for_agent_with_egress_fresh": TaskOfferForAgentWithEgressFreshPayloadSchema,
-  "task.offer_prepared": TaskOfferPreparedPayloadSchema,
-  "task.offer_sealed": TaskOfferSealedPayloadSchema,
-  "task.offer_with_toolsets_sealed": TaskOfferWithToolsetsSealedPayloadSchema,
-  "task.offer_for_agent_sealed": TaskOfferForAgentSealedPayloadSchema,
-  "task.offer_for_agent_with_egress_sealed": TaskOfferForAgentWithEgressSealedPayloadSchema,
-  "task.offer_for_agent_with_egress_fresh_sealed": TaskOfferForAgentWithEgressFreshSealedPayloadSchema
-};
-var TASK_OFFER_TYPES = Object.freeze(
-  Object.keys(TASK_OFFER_PAYLOAD_SCHEMAS)
-);
-function isTaskOfferType(type) {
-  return Object.hasOwn(TASK_OFFER_PAYLOAD_SCHEMAS, type);
-}
-var MESSAGE_PAYLOAD_SCHEMAS = {
-  "conn.hello": ConnHelloPayloadSchema,
-  "conn.ack": ConnAckPayloadSchema,
-  ...TASK_OFFER_PAYLOAD_SCHEMAS,
-  "agent.egress.reliable": AgentEgressReliablePayloadSchema,
-  "agent.egress.ack": AgentEgressAckPayloadSchema,
-  "agent.message.draft": AgentMessageDraftPayloadSchema,
-  "agent.message.publish": AgentMessagePublishPayloadSchema,
-  "agent.message.disposition": AgentMessageDispositionPayloadSchema,
-  "agent.content.read": AgentContentReadPayloadSchema,
-  "agent.content.receipt": AgentContentReceiptPayloadSchema,
-  "agent.home.projection": AgentHomeProjectionPayloadSchema,
-  "agent.input.preparation": AgentInputPreparationPayloadSchema,
-  "provider.provisioning.available": ProviderProvisioningAvailablePayloadSchema,
-  "agent.memory.intent.available": AgentMemoryIntentAvailablePayloadSchema,
-  "task.approve": TaskApprovePayloadSchema,
-  "task.reject": TaskRejectPayloadSchema,
-  "task.cancel": TaskCancelPayloadSchema,
-  "task.steer": TaskSteerPayloadSchema,
-  "task.claim": TaskClaimPayloadSchema,
-  "task.started": TaskStartedPayloadSchema,
-  "task.decline": TaskDeclinePayloadSchema,
-  "task.progress": TaskProgressPayloadSchema,
-  "task.artifact": TaskArtifactPayloadSchema,
-  "task.await_approval": TaskAwaitApprovalPayloadSchema,
-  "task.complete": TaskCompletePayloadSchema,
-  "task.fail": TaskFailPayloadSchema,
-  "task.cancelled": TaskCancelledPayloadSchema,
-  "task.approval_resolved": TaskApprovalResolvedPayloadSchema,
-  "task.steer_sealed": TaskSteerSealedPayloadSchema,
-  "task.complete_sealed": TaskCompleteSealedPayloadSchema,
-  "task.fail_sealed": TaskFailSealedPayloadSchema,
-  "task.decline_sealed": TaskDeclineSealedPayloadSchema,
-  "task.cancelled_sealed": TaskCancelledSealedPayloadSchema,
-  "task.progress_sealed": TaskProgressSealedPayloadSchema,
-  "task.artifact_sealed": TaskArtifactSealedPayloadSchema,
-  "task.await_approval_sealed": TaskAwaitApprovalSealedPayloadSchema,
-  "e2ee.key_package.available": E2eeKeyPackageAvailablePayloadSchema
-};
-var MESSAGE_TYPES = Object.keys(MESSAGE_PAYLOAD_SCHEMAS);
-var SERVER_TO_DAEMON_TYPES = [
-  "conn.ack",
-  "task.offer",
-  "task.offer_with_toolsets",
-  "task.offer_for_agent",
-  "task.offer_for_agent_with_egress",
-  "task.offer_for_agent_with_egress_fresh",
-  "task.offer_prepared",
-  "agent.egress.ack",
-  "agent.message.disposition",
-  "agent.content.read",
-  "agent.home.projection",
-  "agent.input.preparation",
-  "provider.provisioning.available",
-  "agent.memory.intent.available",
-  "task.approve",
-  "task.reject",
-  "task.cancel",
-  "task.steer",
-  "task.offer_sealed",
-  "task.offer_with_toolsets_sealed",
-  "task.offer_for_agent_sealed",
-  "task.offer_for_agent_with_egress_sealed",
-  "task.offer_for_agent_with_egress_fresh_sealed",
-  "task.steer_sealed",
-  "e2ee.key_package.available"
-];
-var DAEMON_TO_SERVER_TYPES = [
-  "task.claim",
-  "task.started",
-  "task.decline",
-  "task.progress",
-  "task.artifact",
-  "task.await_approval",
-  "task.complete",
-  "task.fail",
-  "task.cancelled",
-  "task.approval_resolved",
-  "agent.egress.reliable",
-  "agent.message.draft",
-  "agent.message.publish",
-  "agent.content.receipt",
-  "task.complete_sealed",
-  "task.fail_sealed",
-  "task.decline_sealed",
-  "task.cancelled_sealed",
-  "task.progress_sealed",
-  "task.artifact_sealed",
-  "task.await_approval_sealed"
-];
-
-// src/agent-memory-intent.ts
-var AGENT_MEMORY_INTENT_CONTENT_MAX_BYTES = 262144;
-var AGENT_MEMORY_INTENT_PATH_MAX_BYTES = 1024;
-var AGENT_MEMORY_INTENT_APPROVAL_REF_MAX_BYTES = 128;
-var SHA256_REVISION = /^sha256:[0-9a-f]{64}$/u;
-var AgentMemoryIntentRevisionSchema = z.string().regex(SHA256_REVISION, "revision must be lowercase sha256:<64 hex>");
-var AgentMemoryIntentOperationDigestSchema = z.string().regex(SHA256_REVISION, "operationDigest must be lowercase sha256:<64 hex>");
-var AgentMemoryIntentPathSchema = z.string().min(1).max(AGENT_MEMORY_INTENT_PATH_MAX_BYTES).regex(/^[\x20\x21\x23-\x5b\x5d-\x7e]+$/u, "path must be printable ASCII without quote or backslash");
-var AgentMemoryIntentApprovalRefSchema = z.string().regex(
-  new RegExp(`^[A-Za-z0-9._:-]{1,${AGENT_MEMORY_INTENT_APPROVAL_REF_MAX_BYTES}}$`, "u"),
-  `approvalRef must be 1..${AGENT_MEMORY_INTENT_APPROVAL_REF_MAX_BYTES} characters of [A-Za-z0-9._:-]`
-);
-var LONE_SURROGATE2 = /[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/u;
-var utf8 = new TextEncoder();
-var AgentMemoryIntentContentSchema = z.string().refine((value) => !LONE_SURROGATE2.test(value), "content must be well-formed Unicode (encodable as UTF-8)").refine(
-  (value) => utf8.encode(value).byteLength <= AGENT_MEMORY_INTENT_CONTENT_MAX_BYTES,
-  `content must not exceed ${AGENT_MEMORY_INTENT_CONTENT_MAX_BYTES} UTF-8 bytes`
-);
-var AGENT_MEMORY_INTENT_OPERATIONS = ["replace", "delete"];
-var AgentMemoryIntentOperationSchema = z.enum(AGENT_MEMORY_INTENT_OPERATIONS);
-var AgentMemoryIntentV1Schema = z.object({
-  intentId: z.uuid(),
-  agentRef: AgentHomeProjectionAgentRefSchema,
-  path: AgentMemoryIntentPathSchema,
-  operation: AgentMemoryIntentOperationSchema,
-  baseRevision: AgentMemoryIntentRevisionSchema,
-  targetRevision: AgentMemoryIntentRevisionSchema.nullable(),
-  content: AgentMemoryIntentContentSchema.optional(),
-  approvalRef: AgentMemoryIntentApprovalRefSchema,
-  operationDigest: AgentMemoryIntentOperationDigestSchema
-}).strict().superRefine((intent, ctx) => {
-  if (intent.operation === "delete") {
-    if (intent.targetRevision !== null) {
-      ctx.addIssue({ code: "custom", path: ["targetRevision"], message: "a delete intent has a null targetRevision" });
-    }
-    if (intent.content !== void 0) {
-      ctx.addIssue({ code: "custom", path: ["content"], message: "a delete intent never carries content" });
-    }
-    return;
-  }
-  if (intent.targetRevision === null) {
-    ctx.addIssue({ code: "custom", path: ["targetRevision"], message: "a replace intent requires a targetRevision" });
-  } else if (intent.targetRevision === intent.baseRevision) {
-    ctx.addIssue({ code: "custom", path: ["targetRevision"], message: "targetRevision must differ from baseRevision" });
-  }
-});
-var AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES = [
-  "intent_revoked",
-  "intent_expired",
-  "placement_changed",
-  "profile_revision_changed"
-];
-var AgentMemoryIntentHostTerminalCodeSchema = z.enum(AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES);
-var AGENT_MEMORY_INTENT_REJECTION_CODES = [
-  "intent_invalid",
-  "path_invalid",
-  "memory_md_not_deletable",
-  "content_invalid",
-  "intent_digest_mismatch",
-  "agent_ref_mismatch",
-  "agent_home_unavailable",
-  ...AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES
-];
-var AgentMemoryIntentRejectionCodeSchema = z.enum(AGENT_MEMORY_INTENT_REJECTION_CODES);
-var AgentMemoryIntentFileObservationSchema = z.object({
-  exists: z.boolean(),
-  revision: AgentMemoryIntentRevisionSchema
-}).strict();
-var completionIdentity2 = {
-  intentId: z.uuid(),
-  agentRef: AgentHomeProjectionAgentRefSchema,
-  path: AgentMemoryIntentPathSchema,
-  operation: AgentMemoryIntentOperationSchema,
-  operationDigest: AgentMemoryIntentOperationDigestSchema
-};
-var AppliedCompletionSchema2 = z.object({ ...completionIdentity2, outcome: z.literal("applied"), result: AgentMemoryIntentFileObservationSchema }).strict();
-var ConflictCompletionSchema = z.object({ ...completionIdentity2, outcome: z.literal("conflict"), observed: AgentMemoryIntentFileObservationSchema }).strict();
-var RejectedCompletionSchema2 = z.object({ ...completionIdentity2, outcome: z.literal("rejected"), code: AgentMemoryIntentRejectionCodeSchema }).strict();
-var UncertainCompletionSchema = z.object({ ...completionIdentity2, outcome: z.literal("uncertain"), observed: AgentMemoryIntentFileObservationSchema }).strict();
-var AgentMemoryIntentCompletionSchema = z.discriminatedUnion("outcome", [
-  AppliedCompletionSchema2,
-  ConflictCompletionSchema,
-  RejectedCompletionSchema2,
-  UncertainCompletionSchema
-]);
-var AGENT_MEMORY_INTENT_READBACK_DISPOSITIONS = ["recorded", "idempotent", "conflict", "host_terminal"];
-var AgentMemoryIntentReadbackDispositionSchema = z.enum(AGENT_MEMORY_INTENT_READBACK_DISPOSITIONS);
-var AgentMemoryIntentReadbackSchema = z.object({
-  tenantId: z.string().min(1),
-  deviceId: z.string().min(1),
-  intentId: z.uuid(),
-  disposition: AgentMemoryIntentReadbackDispositionSchema,
-  completion: AgentMemoryIntentCompletionSchema,
-  recordedAt: z.iso.datetime({ offset: true })
-}).strict().superRefine((readback, ctx) => {
-  if (readback.completion.intentId !== readback.intentId) {
-    ctx.addIssue({ code: "custom", path: ["completion", "intentId"], message: "completion intentId must equal readback intentId" });
-  }
-  if (readback.disposition === "host_terminal" && (readback.completion.outcome !== "rejected" || !AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES.includes(readback.completion.code))) {
-    ctx.addIssue({
-      code: "custom",
-      path: ["completion"],
-      message: `a host_terminal readback must carry a rejected completion with one of: ${AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES.join(", ")}`
-    });
-  }
-});
-var AGENT_MEMORY_INTENT_RESERVATIONS = ["held", "none"];
-var AgentMemoryIntentReservationSchema = z.enum(AGENT_MEMORY_INTENT_RESERVATIONS);
-var AgentMemoryIntentFetchRequestSchema = z.object({
-  intentId: z.uuid(),
-  reservation: AgentMemoryIntentReservationSchema
-}).strict();
-var AGENT_MEMORY_INTENT_FETCH_DISPOSITIONS = ["release", "withheld", "terminal", "deferred"];
-var AGENT_MEMORY_INTENT_FETCH_DISPOSITIONS_BY_RESERVATION = {
-  held: ["release", "withheld", "terminal"],
-  none: ["terminal", "deferred"]
-};
-function requireNoContent(intent, ctx, disposition) {
-  if (intent.content !== void 0) {
-    ctx.addIssue({ code: "custom", path: ["intent", "content"], message: `a ${disposition} fetch response never carries content` });
-  }
-}
-var ReleaseFetchResponseSchema = z.object({ disposition: z.literal("release"), intent: AgentMemoryIntentV1Schema }).strict().superRefine((response, ctx) => {
-  if (response.intent.operation === "replace" && response.intent.content === void 0) {
-    ctx.addIssue({ code: "custom", path: ["intent", "content"], message: "a replace release must carry content" });
-  }
-});
-var WithheldFetchResponseSchema = z.object({ disposition: z.literal("withheld"), intent: AgentMemoryIntentV1Schema, code: AgentMemoryIntentHostTerminalCodeSchema }).strict().superRefine((response, ctx) => requireNoContent(response.intent, ctx, "withheld"));
-var TerminalFetchResponseSchema = z.object({ disposition: z.literal("terminal"), intent: AgentMemoryIntentV1Schema, readback: AgentMemoryIntentReadbackSchema }).strict().superRefine((response, ctx) => {
-  requireNoContent(response.intent, ctx, "terminal");
-  const { intent, readback } = response;
-  if (readback.intentId !== intent.intentId) {
-    ctx.addIssue({ code: "custom", path: ["readback", "intentId"], message: "readback intentId must equal intent intentId" });
-  }
-  const completion = readback.completion;
-  if (completion.agentRef.agentId !== intent.agentRef.agentId || completion.agentRef.profileRevision !== intent.agentRef.profileRevision || completion.path !== intent.path || completion.operation !== intent.operation || completion.operationDigest !== intent.operationDigest) {
-    ctx.addIssue({
-      code: "custom",
-      path: ["readback", "completion"],
-      message: "readback completion identity must equal the intent identity and operationDigest"
-    });
-  }
-});
-var DeferredFetchResponseSchema = z.object({ disposition: z.literal("deferred"), intent: AgentMemoryIntentV1Schema }).strict().superRefine((response, ctx) => requireNoContent(response.intent, ctx, "deferred"));
-var AgentMemoryIntentFetchResponseSchema = z.discriminatedUnion("disposition", [
-  ReleaseFetchResponseSchema,
-  WithheldFetchResponseSchema,
-  TerminalFetchResponseSchema,
-  DeferredFetchResponseSchema
-]);
-function agentMemoryIntentFetchResponseSchemaFor(reservation) {
-  const allowed = AGENT_MEMORY_INTENT_FETCH_DISPOSITIONS_BY_RESERVATION[AgentMemoryIntentReservationSchema.parse(reservation)];
-  return AgentMemoryIntentFetchResponseSchema.superRefine((response, ctx) => {
-    if (!allowed.includes(response.disposition)) {
-      ctx.addIssue({
-        code: "custom",
-        path: ["disposition"],
-        message: `a ${reservation} reservation allows only: ${allowed.join(", ")}`
-      });
-    }
-  });
-}
-var AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES = 512 * 1024;
-var AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE = 2147483647;
-var OPAQUE_REFERENCE_MAX_BYTES = 512;
-var opaqueReference = (field) => z.string().min(1).max(OPAQUE_REFERENCE_MAX_BYTES).refine((value) => new TextEncoder().encode(value).byteLength <= OPAQUE_REFERENCE_MAX_BYTES, {
-  message: `${field} must not exceed ${OPAQUE_REFERENCE_MAX_BYTES} UTF-8 bytes`
-}).regex(/^[^\u0000-\u001f\u007f\r\n]+$/u, `${field} must not contain control characters`);
-var AgentMemoryProjectionGrantRefSchema = opaqueReference("grantRef");
-var AgentMemoryProjectionSessionRefSchema = opaqueReference("sessionRef");
-var AgentMemoryProjectionWriterEpochSchema = z.number().int().positive().max(AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE);
-var AgentMemoryProjectionSourceSeqSchema = z.number().int().positive().max(AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE);
-function agentMemoryProjectionBase64UrlByteLength(value) {
-  if (!/^[A-Za-z0-9_-]*$/u.test(value) || value.length % 4 === 1) return void 0;
-  const complete = Math.floor(value.length / 4) * 3;
-  const tail = value.length % 4;
-  return complete + (tail === 0 ? 0 : tail - 1);
-}
-var AgentMemoryProjectionSnapshotSchema = z.object({
-  redactedHash: AgentEgressContentHashSchema,
-  redactedByteCount: z.number().int().nonnegative().max(AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES),
-  redactedBytes: z.string().max(Math.ceil(AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES / 3) * 4)
-}).strict().superRefine((snapshot, ctx) => {
-  const actual = agentMemoryProjectionBase64UrlByteLength(snapshot.redactedBytes);
-  if (actual === void 0) {
-    ctx.addIssue({ code: "custom", path: ["redactedBytes"], message: "redactedBytes must be unpadded base64url" });
-    return;
-  }
-  if (actual !== snapshot.redactedByteCount) {
-    ctx.addIssue({
-      code: "custom",
-      path: ["redactedByteCount"],
-      message: "redactedByteCount must equal the decoded redactedBytes length"
-    });
-  }
-});
-var AgentMemoryProjectionMutationSchema = z.object({
-  taskId: z.string().min(1).max(512),
-  agentRef: AgentRefSchema,
-  sessionRef: AgentMemoryProjectionSessionRefSchema,
-  runtimeId: RuntimeIdSchema,
-  grantRef: AgentMemoryProjectionGrantRefSchema,
-  writerEpoch: AgentMemoryProjectionWriterEpochSchema,
-  sourceSeq: AgentMemoryProjectionSourceSeqSchema,
-  mutationId: z.uuid(),
-  policyRevision: AgentEgressPolicyRevisionSchema,
-  snapshot: AgentMemoryProjectionSnapshotSchema
-}).strict();
-var AgentMemoryProjectionMeteringReceiptSchema = z.object({
-  meteringReceiptId: z.uuid(),
-  acceptedRedactedBytes: z.number().int().nonnegative().max(AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES),
-  recordedAt: z.iso.datetime({ offset: true })
-}).strict();
-var AgentMemoryProjectionReceiptSchema = z.object({
-  outcome: z.enum(["accepted", "idempotent"]),
-  tenantId: z.string().min(1),
-  deviceId: z.string().min(1),
-  taskId: z.string().min(1).max(512),
-  agentRef: AgentRefSchema,
-  sessionRef: AgentMemoryProjectionSessionRefSchema,
-  runtimeId: RuntimeIdSchema,
-  grantRef: AgentMemoryProjectionGrantRefSchema,
-  writerEpoch: AgentMemoryProjectionWriterEpochSchema,
-  sourceSeq: AgentMemoryProjectionSourceSeqSchema,
-  mutationId: z.uuid(),
-  policyRevision: AgentEgressPolicyRevisionSchema,
-  redactedHash: AgentEgressContentHashSchema,
-  redactedByteCount: z.number().int().nonnegative().max(AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES),
-  metering: AgentMemoryProjectionMeteringReceiptSchema
-}).strict();
-var AgentMemoryProjectionEraseResultSchema = z.object({ nextWriterEpoch: AgentMemoryProjectionWriterEpochSchema }).strict();
-var REQUIRED_TASK_ID = z.string().min(1);
-var OPTIONAL_TASK_ID = REQUIRED_TASK_ID.optional();
-var FORBIDDEN_TASK_ID = z.never().optional();
-var REQUIRED_SEQ = z.number().int();
-var OPTIONAL_SEQ = REQUIRED_SEQ.optional();
-function envelopeShape(type, taskId, seq) {
-  return z.object({
-    // A known payload shape does not authorize interpreting another wire major
-    // as v1. Keep the public number type and all supported v1 bytes unchanged.
-    v: z.number().int().refine((version) => version === PROTOCOL_VERSION, {
-      message: "unsupported protocol version"
-    }),
-    id: z.uuid(),
-    ts: z.iso.datetime({ offset: true }),
-    type: z.literal(type),
-    task_id: taskId,
-    session_ref: z.string().optional(),
-    seq,
-    payload: MESSAGE_PAYLOAD_SCHEMAS[type]
-  });
-}
-var EnvelopeSchema = z.discriminatedUnion("type", [
-  // conn.* — task_id stays optional (no task routing). conn.hello is
-  // daemon -> server (no cursor to satisfy on this leg); conn.ack is
-  // server -> daemon and therefore carries the required redelivery `seq`.
-  envelopeShape("conn.hello", OPTIONAL_TASK_ID, OPTIONAL_SEQ),
-  envelopeShape("conn.ack", OPTIONAL_TASK_ID, REQUIRED_SEQ),
-  // task.* server -> daemon: task_id required (routing key) + seq required
-  // (per-device redelivery cursor).
-  envelopeShape("task.offer", REQUIRED_TASK_ID, REQUIRED_SEQ),
-  envelopeShape("task.offer_with_toolsets", REQUIRED_TASK_ID, REQUIRED_SEQ),
-  envelopeShape("task.offer_for_agent", REQUIRED_TASK_ID, REQUIRED_SEQ),
-  envelopeShape("task.offer_for_agent_with_egress", REQUIRED_TASK_ID, REQUIRED_SEQ),
-  envelopeShape("task.offer_for_agent_with_egress_fresh", REQUIRED_TASK_ID, REQUIRED_SEQ),
-  envelopeShape("task.offer_prepared", REQUIRED_TASK_ID, REQUIRED_SEQ),
-  envelopeShape("agent.egress.ack", OPTIONAL_TASK_ID, REQUIRED_SEQ),
-  envelopeShape("agent.message.disposition", REQUIRED_TASK_ID, REQUIRED_SEQ),
-  envelopeShape("agent.content.read", OPTIONAL_TASK_ID, REQUIRED_SEQ),
-  envelopeShape("agent.home.projection", FORBIDDEN_TASK_ID, REQUIRED_SEQ),
-  envelopeShape("agent.input.preparation", FORBIDDEN_TASK_ID, REQUIRED_SEQ),
-  envelopeShape("provider.provisioning.available", FORBIDDEN_TASK_ID, REQUIRED_SEQ),
-  envelopeShape("agent.memory.intent.available", FORBIDDEN_TASK_ID, REQUIRED_SEQ),
-  envelopeShape("task.approve", REQUIRED_TASK_ID, REQUIRED_SEQ),
-  envelopeShape("task.reject", REQUIRED_TASK_ID, REQUIRED_SEQ),
-  envelopeShape("task.cancel", REQUIRED_TASK_ID, REQUIRED_SEQ),
-  envelopeShape("task.steer", REQUIRED_TASK_ID, REQUIRED_SEQ),
-  // task.* daemon -> server: task_id required (routing key); envelope-level
-  // seq is not required in this direction in M1 (no daemon->server
-  // redelivery cursor yet — see docs/protocol.md).
-  envelopeShape("task.claim", REQUIRED_TASK_ID, OPTIONAL_SEQ),
-  envelopeShape("task.started", REQUIRED_TASK_ID, OPTIONAL_SEQ),
-  envelopeShape("task.decline", REQUIRED_TASK_ID, OPTIONAL_SEQ),
-  envelopeShape("task.progress", REQUIRED_TASK_ID, OPTIONAL_SEQ),
-  envelopeShape("task.artifact", REQUIRED_TASK_ID, OPTIONAL_SEQ),
-  envelopeShape("task.await_approval", REQUIRED_TASK_ID, OPTIONAL_SEQ),
-  envelopeShape("task.complete", REQUIRED_TASK_ID, OPTIONAL_SEQ),
-  envelopeShape("task.fail", REQUIRED_TASK_ID, OPTIONAL_SEQ),
-  envelopeShape("task.cancelled", REQUIRED_TASK_ID, OPTIONAL_SEQ),
-  envelopeShape("task.approval_resolved", REQUIRED_TASK_ID, OPTIONAL_SEQ),
-  envelopeShape("agent.egress.reliable", OPTIONAL_TASK_ID, OPTIONAL_SEQ),
-  envelopeShape("agent.message.draft", REQUIRED_TASK_ID, OPTIONAL_SEQ),
-  envelopeShape("agent.message.publish", REQUIRED_TASK_ID, OPTIONAL_SEQ),
-  envelopeShape("agent.content.receipt", OPTIONAL_TASK_ID, OPTIONAL_SEQ),
-  // Sealed payload v1 (#654). Appended last, so every released branch keeps
-  // its position in the union.
-  envelopeShape("task.offer_sealed", REQUIRED_TASK_ID, REQUIRED_SEQ),
-  envelopeShape("task.offer_with_toolsets_sealed", REQUIRED_TASK_ID, REQUIRED_SEQ),
-  envelopeShape("task.offer_for_agent_sealed", REQUIRED_TASK_ID, REQUIRED_SEQ),
-  envelopeShape("task.offer_for_agent_with_egress_sealed", REQUIRED_TASK_ID, REQUIRED_SEQ),
-  envelopeShape("task.offer_for_agent_with_egress_fresh_sealed", REQUIRED_TASK_ID, REQUIRED_SEQ),
-  envelopeShape("task.steer_sealed", REQUIRED_TASK_ID, REQUIRED_SEQ),
-  envelopeShape("task.complete_sealed", REQUIRED_TASK_ID, OPTIONAL_SEQ),
-  envelopeShape("task.fail_sealed", REQUIRED_TASK_ID, OPTIONAL_SEQ),
-  envelopeShape("task.decline_sealed", REQUIRED_TASK_ID, OPTIONAL_SEQ),
-  envelopeShape("task.cancelled_sealed", REQUIRED_TASK_ID, OPTIONAL_SEQ),
-  envelopeShape("task.progress_sealed", REQUIRED_TASK_ID, OPTIONAL_SEQ),
-  envelopeShape("task.artifact_sealed", REQUIRED_TASK_ID, OPTIONAL_SEQ),
-  envelopeShape("task.await_approval_sealed", REQUIRED_TASK_ID, OPTIONAL_SEQ),
-  // E2EE key package notice (#654 E2c-3), appended for the same reason.
-  envelopeShape("e2ee.key_package.available", FORBIDDEN_TASK_ID, REQUIRED_SEQ)
-]);
-function isServerToDaemonType(type) {
-  return SERVER_TO_DAEMON_TYPES.includes(type);
-}
-
-// src/errors.ts
-var ProtocolError = class extends Error {
-  constructor(message, options) {
-    super(message, options);
-    this.name = "ProtocolError";
-  }
-};
-var EnvelopeParseError = class extends ProtocolError {
-  constructor(message, cause) {
-    super(message, { cause });
-    this.name = "EnvelopeParseError";
-  }
-};
-var UnknownMessageTypeError = class extends ProtocolError {
-  type;
-  constructor(type) {
-    super(`Unknown message type: ${String(type)}`);
-    this.name = "UnknownMessageTypeError";
-    this.type = type;
-  }
-};
-var EnvelopeValidationError = class extends ProtocolError {
-  issues;
-  constructor(message, issues) {
-    super(message, { cause: issues });
-    this.name = "EnvelopeValidationError";
-    this.issues = issues;
-  }
-};
-
-// src/codec.ts
-var MESSAGE_TYPE_SET = new Set(MESSAGE_TYPES);
-function decodeText(input) {
-  return typeof input === "string" ? input : new TextDecoder("utf-8").decode(input);
-}
-function parseMessage(data) {
-  const result = EnvelopeSchema.safeParse(data);
-  if (result.success) {
-    return result.data;
-  }
-  const typeValue = typeof data === "object" && data !== null && !Array.isArray(data) ? data.type : void 0;
-  if (typeof typeValue !== "string" || !MESSAGE_TYPE_SET.has(typeValue)) {
-    throw new UnknownMessageTypeError(typeValue);
-  }
-  throw new EnvelopeValidationError(
-    `Envelope failed validation for type "${typeValue}"`,
-    result.error
-  );
-}
-function decodeEnvelope(line) {
-  const text2 = decodeText(line).replace(/[\r\n]+$/, "");
-  let json;
-  try {
-    json = JSON.parse(text2);
-  } catch (cause) {
-    throw new EnvelopeParseError("Envelope line is not valid JSON", cause);
-  }
-  return parseMessage(json);
-}
-function encodeEnvelope(env) {
-  return `${JSON.stringify(env)}
-`;
-}
-function createEnvelope(type, payload, ...rest) {
-  const opts = rest[0] ?? {};
-  const envelope = {
-    v: opts.v ?? PROTOCOL_VERSION,
-    id: opts.id ?? crypto.randomUUID(),
-    ts: opts.ts ?? (/* @__PURE__ */ new Date()).toISOString(),
-    type,
-    ...opts.taskId !== void 0 ? { task_id: opts.taskId } : {},
-    ...opts.sessionRef !== void 0 ? { session_ref: opts.sessionRef } : {},
-    ...opts.seq !== void 0 ? { seq: opts.seq } : {},
-    payload
-  };
-  const result = EnvelopeSchema.safeParse(envelope);
-  if (!result.success) {
-    throw new EnvelopeValidationError(`createEnvelope built an invalid envelope for type "${type}"`, result.error);
-  }
-  return result.data;
-}
-var PairRequestSchema = z.object({
-  pairingCode: z.string(),
-  deviceName: z.string(),
-  /** Ed25519 public key, base64url-encoded. Private key stays device-local (OS keychain or 0600 file). */
-  devicePublicKey: z.string(),
-  /**
-   * Optional client-hashed physical machine identity: lowercase hex SHA-256 of
-   * the product id and an OS-provided machine identifier, never the raw
-   * identifier itself. It names no tenant and no product — those still come
-   * only from the redeemed pairing code's claims — so it can only ever
-   * supersede the SAME tenant/product's prior active device rows carrying this
-   * exact digest. A client that cannot resolve one omits the field entirely.
-   */
-  machineId: z.string().regex(/^[0-9a-f]{64}$/u).optional()
-});
-var PAIR_RESPONSE_TENANT_ID_MAX_LENGTH = 200;
-var PairResponseTenantIdSchema = z.string().min(1).max(PAIR_RESPONSE_TENANT_ID_MAX_LENGTH).refine((value) => value.trim() === value, {
-  message: "tenantId must not have leading or trailing whitespace"
-}).refine((value) => !value.includes("\0"), {
-  message: "tenantId must not contain a NUL character"
-});
-var PairResponseSchema = z.object({
-  deviceId: z.string(),
-  /** JWT, ~1h lifetime. */
-  accessToken: z.string(),
-  /** Opaque hint for when/how to renew (e.g. an ISO timestamp); not itself a credential. */
-  refreshHint: z.string().optional(),
-  /** Exact opaque, non-secret tenant binding from the authenticated device row. */
-  tenantId: PairResponseTenantIdSchema
-});
-var ChallengeRequestSchema = z.object({
-  deviceId: z.string()
-});
-var ChallengeResponseSchema = z.object({
-  /** One-time value the client must sign with its device private key. */
-  nonce: z.string()
-});
-var TokenRequestSchema = z.object({
-  deviceId: z.string(),
-  nonce: z.string(),
-  /** Ed25519 signature over `nonce`, base64url-encoded. */
-  signature: z.string()
-});
-var TokenResponseSchema = z.object({
-  accessToken: z.string(),
-  expiresAt: z.iso.datetime({ offset: true })
-});
-var PRESENCE_DETAIL_MAX_LENGTH = 512;
-var PRESENCE_RUNTIME_VERSION_MAX_LENGTH = 128;
-var PresenceRuntimeFactSchema = z.object({
-  id: RuntimeIdSchema,
-  version: z.string().min(1).max(PRESENCE_RUNTIME_VERSION_MAX_LENGTH).optional(),
-  authPresent: z.boolean().optional()
-});
-var PresencePublishRequestSchema = z.object({
-  level: z.enum(["online", "thinking", "working", "error", "offline"]),
-  detail: z.string().max(PRESENCE_DETAIL_MAX_LENGTH).optional(),
-  configuredToolsets: ConfiguredToolsetsSchema.optional(),
-  /** U4a Local Agent release version; never inferred from a host package. */
-  clientVersion: z.string().min(1).max(128).optional(),
-  protocolVersions: z.array(ProtocolVersionNumberSchema).max(16).optional(),
-  /** Runtime version/auth facts from the same real probe as conn.hello. */
-  runtimes: z.array(PresenceRuntimeFactSchema).max(16).optional()
-});
-var CreateBlobRequestSchema = z.object({
-  size: z.number().int().nonnegative(),
-  contentType: z.string(),
-  contentHash: z.string().regex(CONTENT_HASH_RE, 'contentHash must be "sha256:<64 lowercase hex>"')
-});
-var CreateBlobResponseSchema = z.object({
-  blobId: z.string(),
-  uploadUrl: z.string()
-});
-var BlobDownloadUrlResponseSchema = z.object({
-  downloadUrl: z.string()
-});
-var EventsPollQuerySchema = z.object({
-  /** Volatile navigation within the advertised read-ahead window; never acknowledges work. */
-  afterSeq: z.number().int().nonnegative().optional(),
-  /** Last reliably processed seq; the only acknowledgement. Omitted on the first poll. */
-  cursor: z.number().int().nonnegative().optional()
-});
-var ActivityIngressSchema = z.object({
-  activityMaxEvents: z.number().int().positive(),
-  activityMaxBytes: z.number().int().min(2)
-});
-var OUTBOUND_REFUSAL_REASONS = ["payload_invalid", "not_permitted", "limit_exceeded", "state_conflict", "unsupported"];
-function isOutboundRefusalCode(value) {
-  return OUTBOUND_REFUSAL_REASONS.includes(value);
-}
-var MessageSendOutcomeSchema = z.object({
-  id: z.uuid(),
-  outcome: z.enum(["accepted", "duplicate", "rejected"]),
-  /** Decodes to an {@link OutboundRefusalReason}; an unrecognized string becomes `unknown`. */
-  reason: z.string().max(64).transform((value) => isOutboundRefusalCode(value) ? value : "unknown").optional()
-});
-var EventsPollResponseSchema = z.object({
-  /**
-   * Not-yet-decoded entries (#386). This schema decodes the page only; each
-   * entry is decoded on its own with `parseMessage`, so one unknown or invalid
-   * entry stalls its own sequence instead of failing every entry in the page.
-   */
-  events: z.array(z.unknown()),
-  cursor: z.number().int(),
-  /**
-   * Required in v3: the server capabilities for THIS long-poll response, the
-   * HTTP transport's equivalent of `conn.ack.capabilities`. Each page replaces
-   * the daemon's advertisement; an empty list advertises nothing.
-   */
-  capabilities: z.array(z.string()),
-  /** Required in v3: the activity limits that apply to new progress pushes. */
-  ingress: ActivityIngressSchema
-});
-var MAX_MESSAGES_PER_BATCH = 256;
-var MESSAGES_SEND_MAX_BODY_BYTES = 2 * 1024 * 1024;
-var MessagesSendRequestSchema = z.object({
-  messages: z.array(EnvelopeSchema).max(MAX_MESSAGES_PER_BATCH)
-});
-var MessagesSendResponseSchema = z.object({
-  accepted: z.number().int().nonnegative(),
-  rejected: z.number().int().nonnegative().optional(),
-  capabilities: z.array(z.string()).optional(),
-  ingress: ActivityIngressSchema.optional(),
-  outcomes: z.array(MessageSendOutcomeSchema).max(MAX_MESSAGES_PER_BATCH)
-});
-var AgentHomeProjectionCompletionRequestSchema = z.object({
-  requestId: z.uuid(),
-  agentRef: AgentHomeProjectionAgentRefSchema,
-  projectionHash: AgentHomeProjectionHashSchema,
-  outcome: AgentHomeProjectionOutcomeSchema
-}).strict();
-var AgentHomeProjectionStatusSchema = z.enum([
-  "pending",
-  "applied",
-  "idempotent",
-  "stale",
-  "conflict"
-]);
-var AgentHomeProjectionReadbackSchema = z.object({
-  tenantId: z.string().min(1),
-  deviceId: z.string().min(1),
-  requestId: z.uuid(),
-  agentRef: AgentHomeProjectionAgentRefSchema,
-  projectionHash: AgentHomeProjectionHashSchema,
-  status: AgentHomeProjectionStatusSchema,
-  completedAt: z.iso.datetime({ offset: true }).optional()
-}).strict();
-var InputPreparationCompletionRequestSchema = z.discriminatedUnion("outcome", [
-  z.object({
-    outcome: z.literal("prepared"),
-    requestId: z.uuid(),
-    agentRef: AgentRefSchema,
-    profileId: InputPreparationProfileIdSchema,
-    policyRevision: InputPreparationPolicyRevisionSchema,
-    receipt: InputPreparationReceiptSummarySchema
-  }).strict(),
-  z.object({
-    outcome: z.literal("rejected"),
-    requestId: z.uuid(),
-    agentRef: AgentRefSchema,
-    profileId: InputPreparationProfileIdSchema,
-    policyRevision: InputPreparationPolicyRevisionSchema,
-    reason: InputPreparationRejectionReasonSchema
-  }).strict()
-]);
-var InputPreparationStatusSchema = z.enum(["pending", "prepared", "rejected"]);
-var InputPreparationReadbackSchema = z.object({
-  tenantId: z.string().min(1),
-  deviceId: z.string().min(1),
-  requestId: z.uuid(),
-  agentRef: AgentRefSchema,
-  profileId: InputPreparationProfileIdSchema,
-  policyRevision: InputPreparationPolicyRevisionSchema,
-  status: InputPreparationStatusSchema,
-  receipt: InputPreparationReceiptSummarySchema.optional(),
-  reason: InputPreparationRejectionReasonSchema.optional(),
-  completedAt: z.iso.datetime({ offset: true }).optional()
-}).strict().superRefine((value, ctx) => {
-  const expectsReceipt = value.status === "prepared";
-  const expectsReason = value.status === "rejected";
-  if (expectsReceipt !== (value.receipt !== void 0)) {
-    ctx.addIssue({ code: "custom", path: ["receipt"], message: 'receipt is present exactly when status is "prepared"' });
-  }
-  if (expectsReason !== (value.reason !== void 0)) {
-    ctx.addIssue({ code: "custom", path: ["reason"], message: 'reason is present exactly when status is "rejected"' });
-  }
-  if (value.status !== "pending" !== (value.completedAt !== void 0)) {
-    ctx.addIssue({ code: "custom", path: ["completedAt"], message: "completedAt is present exactly when the status is terminal" });
-  }
-});
-var InputPreparationStatusQuerySchema = z.object({
-  agentId: z.string().min(1),
-  profileRevision: z.string().min(1)
-}).strict();
-var AgentMemoryProjectionCommitRequestSchema = AgentMemoryProjectionMutationSchema;
-var AgentMemoryProjectionCommitResponseSchema = AgentMemoryProjectionReceiptSchema;
-var BYOK_PAIR_PATH = "/byok/pair";
-var BYOK_CHALLENGE_PATH = "/byok/challenge";
-var BYOK_TOKEN_PATH = "/byok/token";
-var BYOK_CAPABILITIES_PATH = "/byok/capabilities";
-var BYOK_EVENTS_PATH = "/byok/events";
-var BYOK_MESSAGES_PATH = "/byok/messages";
-var BYOK_AGENT_HOME_PROJECTIONS_PATH = "/byok/agent-home-projections";
-var BYOK_AGENT_HOME_PROJECTION_COMPLETION_ROUTE = "/byok/agent-home-projections/:requestId/completion";
-function byokAgentHomeProjectionCompletionPath(requestId) {
-  return `${BYOK_AGENT_HOME_PROJECTIONS_PATH}/${encodeURIComponent(requestId)}/completion`;
-}
-var BYOK_INPUT_PREPARATIONS_PATH = "/byok/input-preparations";
-var BYOK_INPUT_PREPARATION_COMPLETION_ROUTE = "/byok/input-preparations/:requestId/completion";
-var BYOK_INPUT_PREPARATION_STATUS_ROUTE = "/byok/input-preparations/:requestId";
-function byokInputPreparationCompletionPath(requestId) {
-  return `${BYOK_INPUT_PREPARATIONS_PATH}/${encodeURIComponent(requestId)}/completion`;
-}
-function byokInputPreparationStatusPath(requestId) {
-  return `${BYOK_INPUT_PREPARATIONS_PATH}/${encodeURIComponent(requestId)}`;
-}
-var BYOK_AGENT_MEMORY_PROJECTIONS_PATH = "/byok/agent-memory-projections";
-var BYOK_PRESENCE_PATH = "/byok/presence";
-var BYOK_ACTIVITY_PATH = "/byok/activity";
-var BYOK_BOARD_PATH = "/byok/board";
-var BYOK_BOARD_STREAM_PATH = "/byok/board/stream";
-var BYOK_BOARD_CLAIM_ROUTE = "/byok/board/:id/claim";
-var BYOK_BOARD_UNCLAIM_ROUTE = "/byok/board/:id/unclaim";
-var BYOK_BOARD_STATUS_ROUTE = "/byok/board/:id/status";
-var BYOK_RECORDS_PATH = "/byok/records";
-var BYOK_RECORD_ROUTE = "/byok/records/:kind/:key";
-function byokRecordPath(kind, key) {
-  return `/byok/records/${encodeURIComponent(kind)}/${encodeURIComponent(key)}`;
-}
-var BYOK_E2EE_MEMBER_KEY_PATH = "/byok/e2ee/member-key";
-var BYOK_E2EE_CHAIN_PATH = "/byok/e2ee/chain";
-var BYOK_E2EE_KEY_PACKAGES_PATH = "/byok/e2ee/key-packages";
-var BYOK_E2EE_PAIRING_MAC_PATH = "/byok/e2ee/pairing-mac";
-var BYOK_SKILL_PACKS_PATH = "/byok/skill-packs";
-var BYOK_SKILL_PACK_FILE_ROUTE = "/byok/skill-packs/:name/files/:path";
-function byokSkillPackFilePath(name, path) {
-  return `/byok/skill-packs/${encodeURIComponent(name)}/files/${encodeURIComponent(path)}`;
-}
-var BYOK_BLOBS_PATH = "/byok/blobs";
-var BYOK_BLOB_FINALIZE_ROUTE = "/byok/blobs/:id/finalize";
-var BYOK_BLOB_URL_ROUTE = "/byok/blobs/:id/url";
-var BYOK_BLOB_CONTENT_ROUTE = "/byok/blobs/:id/content";
-function byokBlobFinalizePath(blobId) {
-  return `/byok/blobs/${encodeURIComponent(blobId)}/finalize`;
-}
-function byokBlobUrlPath(blobId) {
-  return `/byok/blobs/${encodeURIComponent(blobId)}/url`;
-}
-function byokBlobContentPath(blobId) {
-  return `/byok/blobs/${blobId}/content`;
-}
-
-// src/bot-turn-outcome.ts
-var BOT_TURN_OUTCOME_CONTRACT = "bot-turn-outcome.v1";
-var BOT_TURN_OUTCOME_LIMITS = Object.freeze({
-  delegateMaxItems: 2,
-  delegateRequestMaxLength: 1e3,
-  cancelDelegationMaxItems: 2,
-  askUserQuestionMaxLength: 400,
-  askUserOptionsMaxItems: 6,
-  askUserOptionIdMaxLength: 24,
-  askUserOptionLabelMaxLength: 80,
-  confirmableActionMaxItems: 1,
-  confirmableSummaryMaxLength: 300,
-  confirmableDraftMaxBytes: 16384,
-  createRoutineMaxItems: 1,
-  updateRoutineMaxItems: 1,
-  cancelRoutineMaxItems: 2,
-  routinePromptMaxLength: 500,
-  postTextMaxLength: 2730,
-  roomCallMembersMaxItems: 4,
-  createBotMaxItems: 3,
-  updateBotMaxItems: 1,
-  deleteBotMaxItems: 1,
-  botNameMaxLength: 40,
-  botRoleMaxLength: 80,
-  botPersonaMaxLength: 300,
-  createRoomMaxItems: 1,
-  updateRoomMaxItems: 1,
-  roomNameMaxLength: 40,
-  roomMembersMaxItems: 12,
-  roomAnnouncementMaxLength: 300,
-  teamNoteMaxLength: 300
-});
-var L = BOT_TURN_OUTCOME_LIMITS;
-var text = (maxLength) => ({ type: "string", minLength: 1, maxLength });
-var oneOfIds = (ids) => ({ enum: [...ids] });
-var closed = (properties, required) => ({ type: "object", additionalProperties: false, required, properties });
-var list = (items, maxItems) => ({ type: "array", minItems: 1, maxItems, items });
-var ROUTINE_DAYS_OF_WEEK = Object.freeze(["mon", "tue", "wed", "thu", "fri", "sat", "sun"]);
-var integer = (minimum, maximum) => ({ type: "integer", minimum, maximum });
-var BotTurnOutcomeSchemaError = class extends Error {
-  constructor(code, message) {
-    super(message);
-    this.code = code;
-    this.name = "BotTurnOutcomeSchemaError";
-  }
-  code;
-};
-function schedule(timeZones, shape) {
-  const fields = {
-    minute: integer(0, 59),
-    hour: integer(0, 23),
-    daysOfWeek: { type: "array", minItems: 1, maxItems: 7, items: { enum: [...ROUTINE_DAYS_OF_WEEK] } },
-    dayOfMonth: integer(1, 31),
-    month: integer(1, 12),
-    tz: oneOfIds(timeZones)
-  };
-  const outer = {
-    description: "Local time in tz. No day field: every day. daysOfWeek: those days only. dayOfMonth: that day of each month, or of month only.",
-    ...closed(fields, ["minute", "hour", "tz"])
-  };
-  if (shape === "flat") return outer;
-  const only = (names, required) => ({ additionalProperties: false, ...required.length ? { required } : {}, properties: Object.fromEntries(names.map((n) => [n, {}])) });
-  return { ...outer, oneOf: [
-    only(["minute", "hour", "tz"], []),
-    only(["minute", "hour", "daysOfWeek", "tz"], ["daysOfWeek"]),
-    only(["minute", "hour", "dayOfMonth", "month", "tz"], ["dayOfMonth"])
-  ] };
-}
-function roomFields(members) {
-  return {
-    name: text(L.roomNameMaxLength),
-    members: { type: "array", minItems: 1, maxItems: L.roomMembersMaxItems, items: oneOfIds(members) },
-    admin: oneOfIds(members),
-    mode: { enum: ["mention", "admin"] },
-    announcement: text(L.roomAnnouncementMaxLength)
-  };
-}
-var botTurnOutcomeFragments = {
-  /** `to` lists this Bot first: delegating to yourself is a continuation. */
-  delegate(o) {
-    return list(closed({ to: oneOfIds(o.to), request: text(L.delegateRequestMaxLength) }, ["to", "request"]), L.delegateMaxItems);
-  },
-  /** Owner-authorized Main Bot turns only. The Host lists open delegations. */
-  cancelDelegation(o) {
-    return list(closed({ delegationId: oneOfIds(o.delegationIds) }, ["delegationId"]), L.cancelDelegationMaxItems);
-  },
-  askUser() {
-    const question = text(L.askUserQuestionMaxLength);
-    const option = closed({ id: text(L.askUserOptionIdMaxLength), label: text(L.askUserOptionLabelMaxLength) }, ["id", "label"]);
-    return { oneOf: [
-      closed({ question, answerKind: { const: "text" } }, ["question", "answerKind"]),
-      closed({
-        question,
-        answerKind: { const: "single_choice" },
-        options: { type: "array", minItems: 2, maxItems: L.askUserOptionsMaxItems, items: option }
-      }, ["question", "answerKind", "options"])
-    ] };
-  },
-  /** One branch per Host action; each draft needs a finite bound of at most confirmableDraftMaxBytes. */
-  confirmableAction(o) {
-    for (const { action, draft } of o.actions) {
-      const bound = resultOutcomeMaxBytes(draft);
-      if (bound === null || bound > L.confirmableDraftMaxBytes) {
-        throw new BotTurnOutcomeSchemaError("draft-over-budget", `draft for ${action} is ${bound ?? "unbounded"}; cap ${L.confirmableDraftMaxBytes}`);
-      }
-    }
-    const branches = o.actions.map(({ action, draft }) => closed({ action: { const: action }, summary: text(L.confirmableSummaryMaxLength), draft }, ["action", "summary", "draft"]));
-    return list(branches.length === 1 ? branches[0] : { oneOf: branches }, L.confirmableActionMaxItems);
-  },
-  /** `targets` only for a Main Bot: the Bot itself first, then team Bots. Omitted means the Bot itself. */
-  createRoutine(o) {
-    return list(closed({
-      localId: oneOfIds(o.localIds),
-      schedule: schedule(o.timeZones, o.scheduleShape ?? "checked"),
-      prompt: text(L.routinePromptMaxLength),
-      ...o.targets ? { target: oneOfIds(o.targets) } : {}
-    }, ["localId", "schedule", "prompt"]), L.createRoutineMaxItems);
-  },
-  updateRoutine(o) {
-    return list(closed(
-      { routineId: oneOfIds(o.routineIds), schedule: schedule(o.timeZones, o.scheduleShape ?? "checked"), prompt: text(L.routinePromptMaxLength) },
-      ["routineId"]
-    ), L.updateRoutineMaxItems);
-  },
-  cancelRoutine(o) {
-    return list(closed({ routineId: oneOfIds(o.routineIds) }, ["routineId"]), L.cancelRoutineMaxItems);
-  },
-  /** Room turns only. Exactly one of post or pass. */
-  speech() {
-    return { oneOf: [
-      closed({ kind: { const: "post" }, text: text(L.postTextMaxLength) }, ["kind", "text"]),
-      closed({ kind: { const: "pass" } }, ["kind"])
-    ] };
-  },
-  roomCall(o) {
-    return closed({ members: { type: "array", minItems: 1, maxItems: L.roomCallMembersMaxItems, items: oneOfIds(o.members) } }, ["members"]);
-  },
-  createBot(o) {
-    return list(closed({
-      localId: oneOfIds(o.localIds),
-      name: text(L.botNameMaxLength),
-      role: text(L.botRoleMaxLength),
-      persona: text(L.botPersonaMaxLength),
-      model: oneOfIds(o.models)
-    }, ["localId", "name", "role", "persona", "model"]), L.createBotMaxItems);
-  },
-  updateBot(o) {
-    return list(closed({
-      botId: oneOfIds(o.botIds),
-      name: text(L.botNameMaxLength),
-      role: text(L.botRoleMaxLength),
-      persona: text(L.botPersonaMaxLength),
-      model: oneOfIds(o.models)
-    }, ["botId"]), L.updateBotMaxItems);
-  },
-  deleteBot(o) {
-    return list(closed({ botId: oneOfIds(o.botIds) }, ["botId"]), L.deleteBotMaxItems);
-  },
-  /** `members`: team Bot ids plus the create_bot localId slots of this outcome. */
-  createRoom(o) {
-    return list(closed({ localId: oneOfIds(o.localIds), ...roomFields(o.members) }, ["localId", "name", "members"]), L.createRoomMaxItems);
-  },
-  updateRoom(o) {
-    return list(closed({ roomId: oneOfIds(o.roomIds), ...roomFields(o.members) }, ["roomId"]), L.updateRoomMaxItems);
-  },
-  teamNote() {
-    return closed({ text: text(L.teamNoteMaxLength) }, ["text"]);
-  }
-};
-function composeBotTurnOutcomeSchema(fragments, required = []) {
-  const schema = {
-    type: "object",
-    additionalProperties: false,
-    description: `${BOT_TURN_OUTCOME_CONTRACT}: actions for the Host. Omit a field for no action of that kind; {} means no actions.`,
-    ...required.length ? { required: [...required] } : {},
-    properties: fragments
-  };
-  const admitted = checkResultSchema(schema);
-  if (!admitted.ok && admitted.reason === "over-cap") {
-    throw new BotTurnOutcomeSchemaError("schema-over-budget", `schema is ${admitted.bytes} bytes; cap ${RESULT_SCHEMA_MAX_BYTES}`);
-  }
-  if (!admitted.ok) throw new BotTurnOutcomeSchemaError("not-subset", JSON.stringify(admitted.issues));
-  const bound = resultOutcomeMaxBytes(admitted.canonical);
-  if (bound === null || bound > RESULT_OUTCOME_MAX_BYTES) {
-    throw new BotTurnOutcomeSchemaError("over-budget", `largest outcome is ${bound ?? "unbounded"} bytes; cap ${RESULT_OUTCOME_MAX_BYTES}`);
-  }
-  return admitted.canonical;
-}
-
-export { AGENT_CONTENT_ARTIFACT_READ_CAPABILITY, AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY, AGENT_CONTENT_WORKSPACE_READ_CAPABILITY, AGENT_EGRESS_FRESH_SESSION_CAPABILITY, AGENT_EGRESS_POLICY_CAPABILITY, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY, AGENT_EVENT_SPILL_UNSTORED_REASON_MAX_LENGTH, AGENT_HOME_MEMORY_DIGEST_MAX_BYTES, AGENT_HOME_MEMORY_DIGEST_MAX_FILES, AGENT_HOME_MEMORY_PATH_MAX_LENGTH, AGENT_HOME_PROJECTION_CAPABILITY, AGENT_HOME_PROJECTION_MAX_BYTES, AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM, AGENT_HOME_READERS_CAPABILITY, AGENT_INPUT_PREPARATION_CAPABILITY, AGENT_MEMORY_INTENT_APPROVAL_REF_MAX_BYTES, AGENT_MEMORY_INTENT_CAPABILITY, AGENT_MEMORY_INTENT_CONTENT_MAX_BYTES, AGENT_MEMORY_INTENT_FETCH_DISPOSITIONS, AGENT_MEMORY_INTENT_FETCH_DISPOSITIONS_BY_RESERVATION, AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES, AGENT_MEMORY_INTENT_OPERATIONS, AGENT_MEMORY_INTENT_PATH_MAX_BYTES, AGENT_MEMORY_INTENT_READBACK_DISPOSITIONS, AGENT_MEMORY_INTENT_REJECTION_CODES, AGENT_MEMORY_INTENT_RESERVATIONS, AGENT_MEMORY_MAX_SNAPSHOT_BYTES, AGENT_MEMORY_MAX_SNAPSHOT_FILES, AGENT_MEMORY_PROJECTION_CAPABILITY, AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE, AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES, AGENT_MEMORY_READ_IF_ADMITTED_CAPABILITY, AGENT_MEMORY_READ_WRITE_IF_ADMITTED_CAPABILITY, AGENT_MEMORY_SELECTION_CAPABILITY, AGENT_MESSAGE_DRAFT_FRAME_MAX_BYTES, AGENT_MESSAGE_EGRESS_CAPABILITY, AGENT_MESSAGE_MAX_BYTES, AGENT_REF_MAX_BYTES, ActivityIngressSchema, AgentContentActorKindSchema, AgentContentActorSchema, AgentContentDecodeAsSchema, AgentContentMimeTypeSchema, AgentContentReadDecisionSchema, AgentContentReadDenialReasonSchema, AgentContentReadPayloadSchema, AgentContentReadSurfaceSchema, AgentContentReceiptPayloadSchema, AgentEgressAckPayloadSchema, AgentEgressActivityPolicySchema, AgentEgressContentHashSchema, AgentEgressDropReasonSchema, AgentEgressLaneSchema, AgentEgressPolicyRevisionSchema, AgentEgressPolicySchema, AgentEgressReliablePayloadSchema, AgentEventOrUnknownSchema, AgentEventSchema, AgentEventSpillSchema, AgentHomeAccessSchema, AgentHomeProjectionAgentRefSchema, AgentHomeProjectionCompletionRequestSchema, AgentHomeProjectionHashSchema, AgentHomeProjectionOutcomeSchema, AgentHomeProjectionPayloadSchema, AgentHomeProjectionProfileRevisionSchema, AgentHomeProjectionReadbackSchema, AgentHomeProjectionStatusSchema, AgentHomeProjectionValueSchema, AgentInputPreparationPayloadSchema, AgentMemoryIntentApprovalRefSchema, AgentMemoryIntentAvailablePayloadSchema, AgentMemoryIntentCompletionSchema, AgentMemoryIntentContentSchema, AgentMemoryIntentFetchRequestSchema, AgentMemoryIntentFetchResponseSchema, AgentMemoryIntentFileObservationSchema, AgentMemoryIntentHostTerminalCodeSchema, AgentMemoryIntentOperationDigestSchema, AgentMemoryIntentOperationSchema, AgentMemoryIntentPathSchema, AgentMemoryIntentReadbackDispositionSchema, AgentMemoryIntentReadbackSchema, AgentMemoryIntentRejectionCodeSchema, AgentMemoryIntentReservationSchema, AgentMemoryIntentRevisionSchema, AgentMemoryIntentV1Schema, AgentMemoryProjectionCommitRequestSchema, AgentMemoryProjectionCommitResponseSchema, AgentMemoryProjectionEraseResultSchema, AgentMemoryProjectionGrantRefSchema, AgentMemoryProjectionMeteringReceiptSchema, AgentMemoryProjectionMutationSchema, AgentMemoryProjectionReceiptSchema, AgentMemoryProjectionSessionRefSchema, AgentMemoryProjectionSnapshotSchema, AgentMemoryProjectionSourceSeqSchema, AgentMemoryProjectionWriterEpochSchema, AgentMemorySelectionSchema, AgentMessageContentTypeSchema, AgentMessageContractSchema, AgentMessageDestinationBindingSchema, AgentMessageDispositionPayloadSchema, AgentMessageDraftPayloadSchema, AgentMessageEgressRequirementSchema, AgentMessageFreshnessCursorSchema, AgentMessagePublishPayloadSchema, AgentMessageServerContextSchema, AgentRefSchema, AgentReliableQuotaPolicySchema, BOT_TURN_OUTCOME_CONTRACT, BOT_TURN_OUTCOME_LIMITS, BYOK_ACTIVITY_PATH, BYOK_AGENT_HOME_PROJECTIONS_PATH, BYOK_AGENT_HOME_PROJECTION_COMPLETION_ROUTE, BYOK_AGENT_MEMORY_PROJECTIONS_PATH, BYOK_BLOBS_PATH, BYOK_BLOB_CONTENT_ROUTE, BYOK_BLOB_FINALIZE_ROUTE, BYOK_BLOB_URL_ROUTE, BYOK_BOARD_CLAIM_ROUTE, BYOK_BOARD_PATH, BYOK_BOARD_STATUS_ROUTE, BYOK_BOARD_STREAM_PATH, BYOK_BOARD_UNCLAIM_ROUTE, BYOK_CAPABILITIES_PATH, BYOK_CHALLENGE_PATH, BYOK_E2EE_CHAIN_PATH, BYOK_E2EE_KEY_PACKAGES_PATH, BYOK_E2EE_MEMBER_KEY_PATH, BYOK_E2EE_PAIRING_MAC_PATH, BYOK_EVENTS_PATH, BYOK_INPUT_PREPARATIONS_PATH, BYOK_INPUT_PREPARATION_COMPLETION_ROUTE, BYOK_INPUT_PREPARATION_STATUS_ROUTE, BYOK_MESSAGES_PATH, BYOK_PAIR_PATH, BYOK_PRESENCE_PATH, BYOK_RECORDS_PATH, BYOK_RECORD_ROUTE, BYOK_SKILL_PACKS_PATH, BYOK_SKILL_PACK_FILE_ROUTE, BYOK_TOKEN_PATH, BlobDownloadUrlResponseSchema, BlobRefSchema, BotTurnOutcomeSchemaError, CAPABILITY_FLAGS, CONFIGURED_TOOLSETS_MAX_ITEMS, CONTENT_HASH_RE, CUSTOM_HARNESS_CAPABILITY, ChallengeRequestSchema, ChallengeResponseSchema, ConfiguredToolsetsSchema, ConnAckPayloadSchema, ConnHelloPayloadSchema, ContentReadPolicySchema, CreateBlobRequestSchema, CreateBlobResponseSchema, DAEMON_TO_SERVER_TYPES, DispatchSelectionSchema, E2EE_MEMBER_CHAIN_APPEND_MAX_ENTRIES, E2EE_MEMBER_CHAIN_APPEND_OPERATION, E2EE_MEMBER_CHAIN_ENTRY_MAX_BYTES, E2EE_MEMBER_CHAIN_OPS, E2EE_MEMBER_CHAIN_READ_MAX_ENTRIES, E2EE_MEMBER_KEY_REGISTER_OPERATION, E2EE_SCOPE_ID_MAX_LENGTH, E2EE_SCOPE_KEY_PACKAGE_PAGE_MAX, E2EE_SCOPE_KEY_PACKAGE_PUT_MAX, E2EE_SCOPE_KEY_PACKAGE_PUT_OPERATION, E2eeClientPairingMacSchema, E2eeKeyPackageAvailablePayloadSchema, E2eeMemberChainEntrySchema, E2eeMemberKeyBundleSchema, E2eeMemberKeyRegisterRequestSchema, E2eePairingMacSchema, E2eeScopeKeyPackageSchema, E2eeScopeKeyPackageV2Schema, EnvelopeParseError, EnvelopeSchema, EnvelopeValidationError, EventsPollQuerySchema, EventsPollResponseSchema, HOST_MCP_TASK_CONTEXT_CAPABILITY, HarnessIdSchema, HarnessInfoSchema, HarnessInventorySchema, INPUT_PREPARATION_WIRE_VERSION, InputPreparationAccountingPolicyRefSchema, InputPreparationArtifactSummarySchema, InputPreparationBindingSchema, InputPreparationCompletionRequestSchema, InputPreparationContentHashSchema, InputPreparationContextDocumentSchema, InputPreparationCounterEvidenceSchema, InputPreparationCounterProviderEvidenceSchema, InputPreparationCounterTargetSchema, InputPreparationHostCanonicalAssistantMessageSchema, InputPreparationMessageSchema, InputPreparationModelCostSchema, InputPreparationModelSchema, InputPreparationOfferBindingSchema, InputPreparationOptionsSchema, InputPreparationPolicyRevisionSchema, InputPreparationProfileIdSchema, InputPreparationProjectionSchema, InputPreparationPromptSnapshotSchema, InputPreparationReadbackSchema, InputPreparationReadinessReasonSchema, InputPreparationReceiptSummarySchema, InputPreparationReferenceSchema, InputPreparationRejectionReasonSchema, InputPreparationResidualKeySchema, InputPreparationResidualValueClassSchema, InputPreparationRuntimeIdentitySchema, InputPreparationSelectionSchema, InputPreparationSourceSchema, InputPreparationStateSchema, InputPreparationStatusQuerySchema, InputPreparationStatusSchema, InputPreparationUserMessageSchema, KNOWN_AGENT_EVENT_TYPES, MAILBOX_READ_AHEAD_CAPABILITY, MAILBOX_READ_AHEAD_MAX_SEQS, MAX_MESSAGES_PER_BATCH, MESSAGES_SEND_MAX_BODY_BYTES, MESSAGE_PAYLOAD_SCHEMAS, MESSAGE_TYPES, MessageSendOutcomeSchema, MessagesSendRequestSchema, MessagesSendResponseSchema, OUTBOUND_REFUSAL_REASONS, PAIR_RESPONSE_TENANT_ID_MAX_LENGTH, PREPARED_AGENT_MEMORY_MODES, PROTOCOL_VERSION, PROVIDER_MODEL_CAPABILITIES, PROVIDER_PROFILE_BINDING_CAPABILITY, PROVIDER_PROVISIONING_CAPABILITY, PROVIDER_PROVISIONING_DISPOSITIONS, PROVIDER_PROVISIONING_HOST_TERMINAL_CODES, PROVIDER_PROVISIONING_KEY_CHECK_RESULTS, PROVIDER_PROVISIONING_OPERATIONS, PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM, PROVIDER_PROVISIONING_REJECTION_CODES, PROVIDER_SECRET_SEALING_KEY_REGISTER_OPERATION, PairRequestSchema, PairResponseSchema, PairResponseTenantIdSchema, PreparedAgentMemoryModeSchema, PresencePublishRequestSchema, ProtocolError, ProtocolVersionNumberSchema, ProviderModelCapabilitySchema, ProviderProfileBindingSchema, ProviderProfileHashSchema, ProviderProfileRefSchema, ProviderProfileRevisionSchema, ProviderProvisioningAvailablePayloadSchema, ProviderProvisioningCompletionSchema, ProviderProvisioningDispositionSchema, ProviderProvisioningKeyCheckResultSchema, ProviderProvisioningKeyCheckSchema, ProviderProvisioningOperationDigestSchema, ProviderProvisioningOperationGenerationSchema, ProviderProvisioningOperationSchema, ProviderProvisioningProviderStatusSchema, ProviderProvisioningReadbackSchema, ProviderProvisioningRejectionCodeSchema, RESULT_DOCUMENT_MAX_BYTES, RESULT_ISSUES_MAX_BYTES, RESULT_ISSUES_MAX_COUNT, RESULT_JSON_MAX_DEPTH, RESULT_OUTCOME_MAX_BYTES, RESULT_SCHEMA_INSTANCE_TYPES, RESULT_SCHEMA_KEYWORDS, RESULT_SCHEMA_MAX_BYTES, RESULT_SCHEMA_MAX_DEPTH, ROUTINE_DAYS_OF_WEEK, RUNTIME_FAILURE_CLASSES, RUNTIME_FAILURE_CLASS_CAPABILITY, RUNTIME_IDS, RequiredToolsetsSchema, ResultDocumentSchemaSchema, RuntimeCapabilitiesSchema, RuntimeFailureClassSchema, RuntimeIdSchema, RuntimeInfoSchema, SEALED_DECLINE_CODES, SEALED_INLINE_MAX_PADDED_LENGTH, SEALED_OUTPUT_CIPHERTEXT_REF_CAPABILITY, SEALED_PAYLOAD_CAPABILITY, SEALED_PAYLOAD_CATEGORIES, SEALED_PAYLOAD_MAX_CONTENT_LENGTH, SEALED_PAYLOAD_MAX_PADDED_LENGTH, SEALED_PAYLOAD_SUITE, SEALED_PAYLOAD_V1_CATEGORIES, SEALED_PAYLOAD_VERSION, SEALED_SPLIT_TABLE, SEALED_TASK_PLAIN_CODES, SERVER_TO_DAEMON_TYPES, STRICT_AGENT_ONLY_CAPABILITY, SealedPayloadSchema, SealedTaskInputSchema, SealedTaskOutputSchema, TASK_OFFER_TYPES, TASK_STATES, TASK_TRANSITIONS, TERMINAL_INFERENCE_USAGE_CLIENT_VERSION_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_MAX_DURATION_MS, TERMINAL_INFERENCE_USAGE_MAX_TOKENS, TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_PROVIDER_MAX_LENGTH, TERMINAL_PROJECTION_SELECTION_CAPABILITY, TaskApprovalResolvedPayloadSchema, TaskApprovePayloadSchema, TaskArtifactPayloadSchema, TaskAwaitApprovalPayloadSchema, TaskCancelPayloadSchema, TaskCancelledPayloadSchema, TaskClaimPayloadSchema, TaskCompletePayloadSchema, TaskDeclinePayloadSchema, TaskFailPayloadSchema, TaskFailureSchema, TaskOfferForAgentPayloadSchema, TaskOfferForAgentWithEgressFreshPayloadSchema, TaskOfferForAgentWithEgressPayloadSchema, TaskOfferPayloadSchema, TaskOfferPreparedPayloadSchema, TaskOfferWithToolsetsPayloadSchema, TaskProgressPayloadSchema, TaskRejectPayloadSchema, TaskSealingSchema, TaskStartedPayloadSchema, TaskSteerPayloadSchema, TerminalAgentHomeMemoryChangeSchema, TerminalAgentHomeProjectionSchema, TerminalInferenceUsageSchema, TerminalPreparedObservationSchema, TerminalProjectionContractSchema, TerminalProjectionSelectionSchema, TokenRequestSchema, TokenResponseSchema, ToolsetIdSchema, UnknownAgentEventSchema, UnknownMessageTypeError, WIRE_ADDITIONS, agentMemoryIntentFetchResponseSchemaFor, agentMemoryProjectionBase64UrlByteLength, botTurnOutcomeFragments, byokAgentHomeProjectionCompletionPath, byokBlobContentPath, byokBlobFinalizePath, byokBlobUrlPath, byokInputPreparationCompletionPath, byokInputPreparationStatusPath, byokRecordPath, byokSkillPackFilePath, canTransition, checkResultDocument, checkResultSchema, composeBotTurnOutcomeSchema, createEnvelope, decodeEnvelope, encodeEnvelope, isKnownAgentEvent, isPreparedAgentMemoryMode, isSealedMessageType, isSealedTaskPlainOutput, isServerToDaemonType, isTaskOfferType, parseMessage, partitionAgentEvents, requiredReceiverCapabilities, resultOutcomeMaxBytes, sealedBase64UrlByteLength, sealedPayloadPaddedLength, validateResultOutcome };
+export { AGENT_CONTENT_ARTIFACT_READ_CAPABILITY, AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY, AGENT_CONTENT_WORKSPACE_READ_CAPABILITY, AGENT_EGRESS_FRESH_SESSION_CAPABILITY, AGENT_EGRESS_POLICY_CAPABILITY, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY, AGENT_EVENT_SPILL_UNSTORED_REASON_MAX_LENGTH, AGENT_HOME_MEMORY_DIGEST_MAX_BYTES, AGENT_HOME_MEMORY_DIGEST_MAX_FILES, AGENT_HOME_MEMORY_PATH_MAX_LENGTH, AGENT_HOME_PROJECTION_CAPABILITY, AGENT_HOME_PROJECTION_MAX_BYTES, AGENT_HOME_PROJECTION_PROFILE_REVISION_MAXIMUM, AGENT_HOME_READERS_CAPABILITY, AGENT_INPUT_PREPARATION_CAPABILITY, AGENT_MEMORY_INTENT_APPROVAL_REF_MAX_BYTES, AGENT_MEMORY_INTENT_CAPABILITY, AGENT_MEMORY_INTENT_CONTENT_MAX_BYTES, AGENT_MEMORY_INTENT_FETCH_DISPOSITIONS, AGENT_MEMORY_INTENT_FETCH_DISPOSITIONS_BY_RESERVATION, AGENT_MEMORY_INTENT_HOST_TERMINAL_CODES, AGENT_MEMORY_INTENT_OPERATIONS, AGENT_MEMORY_INTENT_PATH_MAX_BYTES, AGENT_MEMORY_INTENT_READBACK_DISPOSITIONS, AGENT_MEMORY_INTENT_REJECTION_CODES, AGENT_MEMORY_INTENT_RESERVATIONS, AGENT_MEMORY_MAX_SNAPSHOT_BYTES, AGENT_MEMORY_MAX_SNAPSHOT_FILES, AGENT_MEMORY_PROJECTION_CAPABILITY, AGENT_MEMORY_PROJECTION_MAX_ORDERING_VALUE, AGENT_MEMORY_PROJECTION_MAX_REDACTED_BYTES, AGENT_MEMORY_READ_IF_ADMITTED_CAPABILITY, AGENT_MEMORY_READ_WRITE_IF_ADMITTED_CAPABILITY, AGENT_MEMORY_SELECTION_CAPABILITY, AGENT_MESSAGE_DRAFT_FRAME_MAX_BYTES, AGENT_MESSAGE_EGRESS_CAPABILITY, AGENT_MESSAGE_MAX_BYTES, AGENT_REF_MAX_BYTES, ActivityIngressSchema, AgentContentActorKindSchema, AgentContentActorSchema, AgentContentDecodeAsSchema, AgentContentMimeTypeSchema, AgentContentReadDecisionSchema, AgentContentReadDenialReasonSchema, AgentContentReadPayloadSchema, AgentContentReadSurfaceSchema, AgentContentReceiptPayloadSchema, AgentEgressAckPayloadSchema, AgentEgressActivityPolicySchema, AgentEgressContentHashSchema, AgentEgressDropReasonSchema, AgentEgressLaneSchema, AgentEgressPolicyRevisionSchema, AgentEgressPolicySchema, AgentEgressReliablePayloadSchema, AgentEventOrUnknownSchema, AgentEventSchema, AgentEventSpillSchema, AgentHomeAccessSchema, AgentHomeProjectionAgentRefSchema, AgentHomeProjectionCompletionRequestSchema, AgentHomeProjectionHashSchema, AgentHomeProjectionOutcomeSchema, AgentHomeProjectionPayloadSchema, AgentHomeProjectionProfileRevisionSchema, AgentHomeProjectionReadbackSchema, AgentHomeProjectionStatusSchema, AgentHomeProjectionValueSchema, AgentInputPreparationPayloadSchema, AgentMemoryIntentApprovalRefSchema, AgentMemoryIntentAvailablePayloadSchema, AgentMemoryIntentCompletionSchema, AgentMemoryIntentContentSchema, AgentMemoryIntentFetchRequestSchema, AgentMemoryIntentFetchResponseSchema, AgentMemoryIntentFileObservationSchema, AgentMemoryIntentHostTerminalCodeSchema, AgentMemoryIntentOperationDigestSchema, AgentMemoryIntentOperationSchema, AgentMemoryIntentPathSchema, AgentMemoryIntentReadbackDispositionSchema, AgentMemoryIntentReadbackSchema, AgentMemoryIntentRejectionCodeSchema, AgentMemoryIntentReservationSchema, AgentMemoryIntentRevisionSchema, AgentMemoryIntentV1Schema, AgentMemoryProjectionCommitRequestSchema, AgentMemoryProjectionCommitResponseSchema, AgentMemoryProjectionEraseResultSchema, AgentMemoryProjectionGrantRefSchema, AgentMemoryProjectionMeteringReceiptSchema, AgentMemoryProjectionMutationSchema, AgentMemoryProjectionReceiptSchema, AgentMemoryProjectionSessionRefSchema, AgentMemoryProjectionSnapshotSchema, AgentMemoryProjectionSourceSeqSchema, AgentMemoryProjectionWriterEpochSchema, AgentMemorySelectionSchema, AgentMessageContentTypeSchema, AgentMessageContractSchema, AgentMessageDestinationBindingSchema, AgentMessageDispositionPayloadSchema, AgentMessageDraftPayloadSchema, AgentMessageEgressRequirementSchema, AgentMessageFreshnessCursorSchema, AgentMessagePublishPayloadSchema, AgentMessageServerContextSchema, AgentRefSchema, AgentReliableQuotaPolicySchema, BOT_TURN_OUTCOME_CONTRACT, BOT_TURN_OUTCOME_LIMITS, BYOK_AGENT_HOME_PROJECTIONS_PATH, BYOK_AGENT_HOME_PROJECTION_COMPLETION_ROUTE, BYOK_AGENT_MEMORY_PROJECTIONS_PATH, BYOK_BLOBS_PATH, BYOK_BLOB_CONTENT_ROUTE, BYOK_BLOB_FINALIZE_ROUTE, BYOK_BLOB_URL_ROUTE, BYOK_BOARD_CLAIM_ROUTE, BYOK_BOARD_PATH, BYOK_BOARD_STATUS_ROUTE, BYOK_BOARD_STREAM_PATH, BYOK_BOARD_UNCLAIM_ROUTE, BYOK_CAPABILITIES_PATH, BYOK_CHALLENGE_PATH, BYOK_E2EE_CHAIN_PATH, BYOK_E2EE_KEY_PACKAGES_PATH, BYOK_E2EE_MEMBER_KEY_PATH, BYOK_E2EE_PAIRING_MAC_PATH, BYOK_EVENTS_PATH, BYOK_INPUT_PREPARATIONS_PATH, BYOK_INPUT_PREPARATION_COMPLETION_ROUTE, BYOK_INPUT_PREPARATION_STATUS_ROUTE, BYOK_MESSAGES_PATH, BYOK_PAIR_PATH, BYOK_PRESENCE_PATH, BYOK_RECORDS_PATH, BYOK_RECORD_ROUTE, BYOK_SKILL_PACKS_PATH, BYOK_SKILL_PACK_FILE_ROUTE, BYOK_TOKEN_PATH, BlobDownloadUrlResponseSchema, BlobRefSchema, BotTurnOutcomeSchemaError, CAPABILITY_FLAGS, CONFIGURED_TOOLSETS_MAX_ITEMS, CONTENT_HASH_RE, CUSTOM_HARNESS_CAPABILITY, ChallengeRequestSchema, ChallengeResponseSchema, ConfiguredToolsetsSchema, ConnHelloPayloadSchema, ContentReadPolicySchema, CreateBlobRequestSchema, CreateBlobResponseSchema, DAEMON_TO_SERVER_TYPES, DEVICE_NOT_REGISTERED_CODE, DeviceNotRegisteredResponseSchema, DispatchSelectionSchema, E2EE_MEMBER_CHAIN_APPEND_MAX_ENTRIES, E2EE_MEMBER_CHAIN_APPEND_OPERATION, E2EE_MEMBER_CHAIN_ENTRY_MAX_BYTES, E2EE_MEMBER_CHAIN_OPS, E2EE_MEMBER_CHAIN_READ_MAX_ENTRIES, E2EE_MEMBER_KEY_REGISTER_OPERATION, E2EE_SCOPE_ID_MAX_LENGTH, E2EE_SCOPE_KEY_PACKAGE_PAGE_MAX, E2EE_SCOPE_KEY_PACKAGE_PUT_MAX, E2EE_SCOPE_KEY_PACKAGE_PUT_OPERATION, E2eeClientPairingMacSchema, E2eeKeyPackageAvailablePayloadSchema, E2eeMemberChainEntrySchema, E2eeMemberKeyBundleSchema, E2eeMemberKeyRegisterRequestSchema, E2eePairingMacSchema, E2eeScopeKeyPackageSchema, E2eeScopeKeyPackageV2Schema, EnvelopeParseError, EnvelopeSchema, EnvelopeValidationError, EventsPollQuerySchema, EventsPollResponseSchema, HOST_MCP_TASK_CONTEXT_CAPABILITY, HarnessIdSchema, HarnessInfoSchema, HarnessInventorySchema, INPUT_PREPARATION_WIRE_VERSION, InputPreparationAccountingPolicyRefSchema, InputPreparationArtifactSummarySchema, InputPreparationBindingSchema, InputPreparationCompletionRequestSchema, InputPreparationContentHashSchema, InputPreparationContextDocumentSchema, InputPreparationCounterEvidenceSchema, InputPreparationCounterProviderEvidenceSchema, InputPreparationCounterTargetSchema, InputPreparationHostCanonicalAssistantMessageSchema, InputPreparationMessageSchema, InputPreparationModelCostSchema, InputPreparationModelSchema, InputPreparationOfferBindingSchema, InputPreparationOptionsSchema, InputPreparationPolicyRevisionSchema, InputPreparationProfileIdSchema, InputPreparationProjectionSchema, InputPreparationPromptSnapshotSchema, InputPreparationReadbackSchema, InputPreparationReadinessReasonSchema, InputPreparationReceiptSummarySchema, InputPreparationReferenceSchema, InputPreparationRejectionReasonSchema, InputPreparationResidualKeySchema, InputPreparationResidualValueClassSchema, InputPreparationRuntimeIdentitySchema, InputPreparationSelectionSchema, InputPreparationSourceSchema, InputPreparationStateSchema, InputPreparationStatusQuerySchema, InputPreparationStatusSchema, InputPreparationUserMessageSchema, KNOWN_AGENT_EVENT_TYPES, MAILBOX_READ_AHEAD_CAPABILITY, MAILBOX_READ_AHEAD_MAX_SEQS, MAX_MESSAGES_PER_BATCH, MESSAGES_SEND_MAX_BODY_BYTES, MESSAGE_PAYLOAD_SCHEMAS, MESSAGE_TYPES, MessageSendOutcomeSchema, MessagesSendRequestSchema, MessagesSendResponseSchema, OFFER_ADMISSION_MAX_DURATION_MS, OUTBOUND_REFUSAL_REASONS, OfferAdmissionTimingsSchema, PAIR_RESPONSE_TENANT_ID_MAX_LENGTH, PREPARED_AGENT_MEMORY_MODES, PROTOCOL_VERSION, PROVIDER_MODEL_CAPABILITIES, PROVIDER_PROFILE_BINDING_CAPABILITY, PROVIDER_PROVISIONING_CAPABILITY, PROVIDER_PROVISIONING_DISPOSITIONS, PROVIDER_PROVISIONING_HOST_TERMINAL_CODES, PROVIDER_PROVISIONING_KEY_CHECK_RESULTS, PROVIDER_PROVISIONING_OPERATIONS, PROVIDER_PROVISIONING_OPERATION_GENERATION_MAXIMUM, PROVIDER_PROVISIONING_REJECTION_CODES, PROVIDER_SECRET_SEALING_KEY_REGISTER_OPERATION, PairRequestSchema, PairResponseSchema, PairResponseTenantIdSchema, PreparedAgentMemoryModeSchema, PresencePublishRequestSchema, ProtocolError, ProtocolVersionNumberSchema, ProviderModelCapabilitySchema, ProviderProfileBindingSchema, ProviderProfileHashSchema, ProviderProfileRefSchema, ProviderProfileRevisionSchema, ProviderProvisioningAvailablePayloadSchema, ProviderProvisioningCompletionSchema, ProviderProvisioningDispositionSchema, ProviderProvisioningKeyCheckResultSchema, ProviderProvisioningKeyCheckSchema, ProviderProvisioningOperationDigestSchema, ProviderProvisioningOperationGenerationSchema, ProviderProvisioningOperationSchema, ProviderProvisioningProviderStatusSchema, ProviderProvisioningReadbackSchema, ProviderProvisioningRejectionCodeSchema, RESULT_DOCUMENT_MAX_BYTES, RESULT_ISSUES_MAX_BYTES, RESULT_ISSUES_MAX_COUNT, RESULT_JSON_MAX_DEPTH, RESULT_OUTCOME_MAX_BYTES, RESULT_SCHEMA_INSTANCE_TYPES, RESULT_SCHEMA_KEYWORDS, RESULT_SCHEMA_MAX_BYTES, RESULT_SCHEMA_MAX_DEPTH, ROUTINE_DAYS_OF_WEEK, RUNTIME_FAILURE_CLASSES, RUNTIME_FAILURE_CLASS_CAPABILITY, RUNTIME_IDS, RUNTIME_UNAVAILABLE_CAUSES, RUNTIME_UNAVAILABLE_CAUSE_CAPABILITY, RequiredToolsetsSchema, ResultDocumentSchemaSchema, RuntimeCapabilitiesSchema, RuntimeFailureClassSchema, RuntimeIdSchema, RuntimeInfoSchema, RuntimeUnavailableEntrySchema, RuntimeVersionPolicyProjectionSchema, SEALED_DECLINE_CODES, SEALED_INLINE_MAX_PADDED_LENGTH, SEALED_OUTPUT_CIPHERTEXT_REF_CAPABILITY, SEALED_PAYLOAD_CAPABILITY, SEALED_PAYLOAD_CATEGORIES, SEALED_PAYLOAD_MAX_CONTENT_LENGTH, SEALED_PAYLOAD_MAX_PADDED_LENGTH, SEALED_PAYLOAD_SUITE, SEALED_PAYLOAD_V1_CATEGORIES, SEALED_PAYLOAD_VERSION, SEALED_SPLIT_TABLE, SEALED_TASK_PLAIN_CODES, SERVER_TO_DAEMON_TYPES, SealedPayloadSchema, SealedTaskInputSchema, SealedTaskOutputSchema, SessionSelectionSchema, TASK_FAIL_REASON_MAX_BYTES, TASK_STATES, TASK_TRANSITIONS, TERMINAL_INFERENCE_USAGE_CLIENT_VERSION_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_MAX_DURATION_MS, TERMINAL_INFERENCE_USAGE_MAX_TOKENS, TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH, TERMINAL_INFERENCE_USAGE_PROVIDER_MAX_LENGTH, TERMINAL_PROJECTION_SELECTION_CAPABILITY, TaskApprovalResolvedPayloadSchema, TaskApprovePayloadSchema, TaskArtifactPayloadSchema, TaskAwaitApprovalPayloadSchema, TaskCancelPayloadSchema, TaskCancelledPayloadSchema, TaskClaimPayloadSchema, TaskCompletePayloadSchema, TaskDeclinePayloadSchema, TaskFailPayloadSchema, TaskFailureSchema, TaskOfferPayloadSchema, TaskOfferPlainPayloadSchema, TaskOfferSealedPayloadSchema, TaskProgressPayloadSchema, TaskRejectPayloadSchema, TaskSealingSchema, TaskStartedPayloadSchema, TaskSteerPayloadSchema, TaskSteerSealedPayloadSchema, TerminalAgentHomeMemoryChangeSchema, TerminalAgentHomeProjectionSchema, TerminalInferenceUsageSchema, TerminalPreparedObservationSchema, TerminalProjectionContractSchema, TerminalProjectionSelectionSchema, TokenRequestSchema, TokenResponseSchema, ToolsetIdSchema, UnknownAgentEventSchema, UnknownMessageTypeError, WIRE_ADDITIONS, agentMemoryIntentFetchResponseSchemaFor, agentMemoryProjectionBase64UrlByteLength, botTurnOutcomeFragments, boundFailureReason, byokAgentHomeProjectionCompletionPath, byokBlobContentPath, byokBlobFinalizePath, byokBlobUrlPath, byokInputPreparationCompletionPath, byokInputPreparationStatusPath, byokRecordPath, byokSkillPackFilePath, canTransition, checkResultDocument, checkResultSchema, composeBotTurnOutcomeSchema, createEnvelope, decodeEnvelope, encodeEnvelope, isKnownAgentEvent, isPreparedAgentMemoryMode, isSealableMessageType, isSealedPayload, isSealedTaskPlainOutput, isServerToDaemonType, parseMessage, partitionAgentEvents, readDeclineCode, readRuntimeUnavailableCause, readTaskFailure, requiredReceiverCapabilities, resultOutcomeMaxBytes, sealedBase64UrlByteLength, sealedPayloadPaddedLength, validateResultOutcome };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map