@byok-sdk/protocol 0.31.0 → 0.32.0

package/dist/messages.d.ts

@@ -1,4 +1,5 @@
 import { z } from 'zod';
+import { type RuntimeUnavailableCause } from './constants';
 import { ProviderProvisioningAvailablePayloadSchema } from './provider-provisioning';
 import { E2eeKeyPackageAvailablePayloadSchema } from './e2ee-member';
 import { type PlainJsonCheck } from './plain-json';
@@ -8,6 +9,14 @@ export declare const RuntimeIdSchema: z.ZodEnum<{
     pi: "pi";
 }>;
 export type RuntimeId = z.infer<typeof RuntimeIdSchema>;
+/** A runtime-unavailable cause as this version understands it; unknown reads as `unknown` with the raw token kept. */
+export type RuntimeUnavailableCauseReading = {
+    readonly cause: RuntimeUnavailableCause;
+} | {
+    readonly cause: 'unknown';
+    readonly reportedCause: string;
+};
+export declare function readRuntimeUnavailableCause(cause: string): RuntimeUnavailableCauseReading;
 /** Wire-safe protocol version number: bounded before JSON reaches a store or comparison. */
 export declare const ProtocolVersionNumberSchema: z.ZodNumber;
 /**
@@ -31,8 +40,31 @@ export declare const RuntimeCapabilitiesSchema: z.ZodObject<{
     approvalInteractive: z.ZodOptional<z.ZodBoolean>;
     mcpToolsets: z.ZodOptional<z.ZodBoolean>;
     messageDraft: z.ZodOptional<z.ZodBoolean>;
+    toolAuthorizationAuto: z.ZodOptional<z.ZodBoolean>;
+    durablePi: z.ZodOptional<z.ZodBoolean>;
+    preparedLane: z.ZodOptional<z.ZodBoolean>;
+    isolation: z.ZodOptional<z.ZodObject<{
+        userContext: z.ZodOptional<z.ZodBoolean>;
+        userMcpServers: z.ZodOptional<z.ZodBoolean>;
+        sessionPersistence: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 export type RuntimeCapabilities = z.infer<typeof RuntimeCapabilitiesSchema>;
+/**
+ * The effective version policy's verdict, projected for discovery (#1103 D8).
+ * Only `state` and the policy's qualified token travel: `matched` and the
+ * allow/warn/block spec lists stay local. Absence means **unknown**, never
+ * `allow`: an older daemon or an adapter without a policy omits the field.
+ */
+export declare const RuntimeVersionPolicyProjectionSchema: z.ZodObject<{
+    state: z.ZodEnum<{
+        allow: "allow";
+        block: "block";
+        warn: "warn";
+    }>;
+    qualifiedVersion: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type RuntimeVersionPolicyProjection = z.infer<typeof RuntimeVersionPolicyProjectionSchema>;
 /**
  * Runtime detection info reported in `conn.hello`. Supersedes the M0
  * `agents: unknown` field (M1 gap #4): typed, so the server no longer has to
@@ -52,6 +84,22 @@ export declare const RuntimeInfoSchema: z.ZodObject<{
         approvalInteractive: z.ZodOptional<z.ZodBoolean>;
         mcpToolsets: z.ZodOptional<z.ZodBoolean>;
         messageDraft: z.ZodOptional<z.ZodBoolean>;
+        toolAuthorizationAuto: z.ZodOptional<z.ZodBoolean>;
+        durablePi: z.ZodOptional<z.ZodBoolean>;
+        preparedLane: z.ZodOptional<z.ZodBoolean>;
+        isolation: z.ZodOptional<z.ZodObject<{
+            userContext: z.ZodOptional<z.ZodBoolean>;
+            userMcpServers: z.ZodOptional<z.ZodBoolean>;
+            sessionPersistence: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    versionPolicy: z.ZodOptional<z.ZodObject<{
+        state: z.ZodEnum<{
+            allow: "allow";
+            block: "block";
+            warn: "warn";
+        }>;
+        qualifiedVersion: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type RuntimeInfo = z.infer<typeof RuntimeInfoSchema>;
@@ -67,7 +115,23 @@ export declare const HarnessInfoSchema: z.ZodObject<{
         approvalInteractive: z.ZodOptional<z.ZodBoolean>;
         mcpToolsets: z.ZodOptional<z.ZodBoolean>;
         messageDraft: z.ZodOptional<z.ZodBoolean>;
+        toolAuthorizationAuto: z.ZodOptional<z.ZodBoolean>;
+        durablePi: z.ZodOptional<z.ZodBoolean>;
+        preparedLane: z.ZodOptional<z.ZodBoolean>;
+        isolation: z.ZodOptional<z.ZodObject<{
+            userContext: z.ZodOptional<z.ZodBoolean>;
+            userMcpServers: z.ZodOptional<z.ZodBoolean>;
+            sessionPersistence: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
     }, z.core.$strip>;
+    versionPolicy: z.ZodOptional<z.ZodObject<{
+        state: z.ZodEnum<{
+            allow: "allow";
+            block: "block";
+            warn: "warn";
+        }>;
+        qualifiedVersion: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 export type HarnessInfo = z.infer<typeof HarnessInfoSchema>;
 export declare const HarnessInventorySchema: z.ZodArray<z.ZodObject<{
@@ -79,8 +143,55 @@ export declare const HarnessInventorySchema: z.ZodArray<z.ZodObject<{
         approvalInteractive: z.ZodOptional<z.ZodBoolean>;
         mcpToolsets: z.ZodOptional<z.ZodBoolean>;
         messageDraft: z.ZodOptional<z.ZodBoolean>;
+        toolAuthorizationAuto: z.ZodOptional<z.ZodBoolean>;
+        durablePi: z.ZodOptional<z.ZodBoolean>;
+        preparedLane: z.ZodOptional<z.ZodBoolean>;
+        isolation: z.ZodOptional<z.ZodObject<{
+            userContext: z.ZodOptional<z.ZodBoolean>;
+            userMcpServers: z.ZodOptional<z.ZodBoolean>;
+            sessionPersistence: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
     }, z.core.$strip>;
+    versionPolicy: z.ZodOptional<z.ZodObject<{
+        state: z.ZodEnum<{
+            allow: "allow";
+            block: "block";
+            warn: "warn";
+        }>;
+        qualifiedVersion: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
 }, z.core.$strip>>;
+/**
+ * One non-available runtime or harness in `conn.hello.runtimeUnavailable`
+ * (#1103 D8). The id stays in the existing identity domain: a built-in
+ * runtime id or a custom harness id. The cause is the append-only
+ * vocabulary, and `retryable` carries the same per-cause default a
+ * `task.decline` reports. Absence of the whole array means unknown, never
+ * "everything is available".
+ */
+export declare const RuntimeUnavailableEntrySchema: z.ZodObject<{
+    id: z.ZodUnion<readonly [z.ZodEnum<{
+        claude: "claude";
+        codex: "codex";
+        pi: "pi";
+    }>, z.ZodString]>;
+    cause: z.ZodUnion<readonly [z.ZodEnum<{
+        acp_unavailable: "acp_unavailable";
+        app_server_unavailable: "app_server_unavailable";
+        environment_unavailable: "environment_unavailable";
+        none_available: "none_available";
+        not_executable: "not_executable";
+        not_installed: "not_installed";
+        platform_unsupported: "platform_unsupported";
+        probe_failed: "probe_failed";
+        probe_timeout: "probe_timeout";
+        runtime_not_allowed: "runtime_not_allowed";
+        runtime_not_configured: "runtime_not_configured";
+        version_blocked: "version_blocked";
+    }>, z.ZodString]>;
+    retryable: z.ZodBoolean;
+}, z.core.$strip>;
+export type RuntimeUnavailableEntry = z.infer<typeof RuntimeUnavailableEntrySchema>;
 /** Maximum logical toolsets one daemon may advertise as locally configured. */
 export declare const CONFIGURED_TOOLSETS_MAX_ITEMS = 64;
 /**
@@ -134,6 +245,22 @@ export declare const ConnHelloPayloadSchema: z.ZodObject<{
             approvalInteractive: z.ZodOptional<z.ZodBoolean>;
             mcpToolsets: z.ZodOptional<z.ZodBoolean>;
             messageDraft: z.ZodOptional<z.ZodBoolean>;
+            toolAuthorizationAuto: z.ZodOptional<z.ZodBoolean>;
+            durablePi: z.ZodOptional<z.ZodBoolean>;
+            preparedLane: z.ZodOptional<z.ZodBoolean>;
+            isolation: z.ZodOptional<z.ZodObject<{
+                userContext: z.ZodOptional<z.ZodBoolean>;
+                userMcpServers: z.ZodOptional<z.ZodBoolean>;
+                sessionPersistence: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        versionPolicy: z.ZodOptional<z.ZodObject<{
+            state: z.ZodEnum<{
+                allow: "allow";
+                block: "block";
+                warn: "warn";
+            }>;
+            qualifiedVersion: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>;
     }, z.core.$strip>>>;
     harnesses: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -145,7 +272,45 @@ export declare const ConnHelloPayloadSchema: z.ZodObject<{
             approvalInteractive: z.ZodOptional<z.ZodBoolean>;
             mcpToolsets: z.ZodOptional<z.ZodBoolean>;
             messageDraft: z.ZodOptional<z.ZodBoolean>;
+            toolAuthorizationAuto: z.ZodOptional<z.ZodBoolean>;
+            durablePi: z.ZodOptional<z.ZodBoolean>;
+            preparedLane: z.ZodOptional<z.ZodBoolean>;
+            isolation: z.ZodOptional<z.ZodObject<{
+                userContext: z.ZodOptional<z.ZodBoolean>;
+                userMcpServers: z.ZodOptional<z.ZodBoolean>;
+                sessionPersistence: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>>;
         }, z.core.$strip>;
+        versionPolicy: z.ZodOptional<z.ZodObject<{
+            state: z.ZodEnum<{
+                allow: "allow";
+                block: "block";
+                warn: "warn";
+            }>;
+            qualifiedVersion: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>>;
+    runtimeUnavailable: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodUnion<readonly [z.ZodEnum<{
+            claude: "claude";
+            codex: "codex";
+            pi: "pi";
+        }>, z.ZodString]>;
+        cause: z.ZodUnion<readonly [z.ZodEnum<{
+            acp_unavailable: "acp_unavailable";
+            app_server_unavailable: "app_server_unavailable";
+            environment_unavailable: "environment_unavailable";
+            none_available: "none_available";
+            not_executable: "not_executable";
+            not_installed: "not_installed";
+            platform_unsupported: "platform_unsupported";
+            probe_failed: "probe_failed";
+            probe_timeout: "probe_timeout";
+            runtime_not_allowed: "runtime_not_allowed";
+            runtime_not_configured: "runtime_not_configured";
+            version_blocked: "version_blocked";
+        }>, z.ZodString]>;
+        retryable: z.ZodBoolean;
     }, z.core.$strip>>>;
     configuredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
     cursor: z.ZodOptional<z.ZodNumber>;
@@ -973,7 +1138,7 @@ export declare const AgentContentReceiptPayloadSchema: z.ZodDiscriminatedUnion<[
     }>;
     decision: z.ZodLiteral<"denied">;
     byteCount: z.ZodLiteral<0>;
-    reason: z.ZodEnum<{
+    reason: z.ZodUnion<readonly [z.ZodEnum<{
         "absolute-target": "absolute-target";
         "byte-limit": "byte-limit";
         "capability-missing": "capability-missing";
@@ -993,7 +1158,7 @@ export declare const AgentContentReceiptPayloadSchema: z.ZodDiscriminatedUnion<[
         "target-missing": "target-missing";
         "text-decode-failed": "text-decode-failed";
         "text-not-allowlisted": "text-not-allowlisted";
-    }>;
+    }>, z.ZodString]>;
 }, z.core.$strict>], "decision">;
 export type AgentContentReceiptPayload = z.infer<typeof AgentContentReceiptPayloadSchema>;
 /**
@@ -1295,6 +1460,14 @@ export declare const TaskClaimPayloadSchema: z.ZodObject<{
         approvalInteractive: z.ZodOptional<z.ZodBoolean>;
         mcpToolsets: z.ZodOptional<z.ZodBoolean>;
         messageDraft: z.ZodOptional<z.ZodBoolean>;
+        toolAuthorizationAuto: z.ZodOptional<z.ZodBoolean>;
+        durablePi: z.ZodOptional<z.ZodBoolean>;
+        preparedLane: z.ZodOptional<z.ZodBoolean>;
+        isolation: z.ZodOptional<z.ZodObject<{
+            userContext: z.ZodOptional<z.ZodBoolean>;
+            userMcpServers: z.ZodOptional<z.ZodBoolean>;
+            sessionPersistence: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
     }, z.core.$strip>>;
     admission: z.ZodOptional<z.ZodObject<{
         totalMs: z.ZodNumber;
@@ -1313,6 +1486,16 @@ export type TaskClaimPayload = z.infer<typeof TaskClaimPayloadSchema>;
  */
 export declare const TaskStartedPayloadSchema: z.ZodObject<{}, z.core.$strip>;
 export type TaskStartedPayload = z.infer<typeof TaskStartedPayloadSchema>;
+declare const DECLINE_CODES: readonly ["agent_home_writer_busy", "agent_home_reader_busy", "sealed_key_unavailable", "sealed_open_failed", "sealed_content_mac_mismatch", "sealing_policy_mismatch"];
+export type TaskDeclineCode = (typeof DECLINE_CODES)[number];
+/** A decline code as this version understands it: one it does not know reads as `unknown`, its raw token kept. */
+export type TaskDeclineCodeReading = {
+    readonly code: TaskDeclineCode;
+} | {
+    readonly code: 'unknown';
+    readonly reportedCode: string;
+};
+export declare function readDeclineCode(code: string): TaskDeclineCodeReading;
 /**
  * Hard cap (1 MiB) on a single `task.complete.document` (see
  * {@link TaskCompletePayloadSchema}), measured as the UTF-8 byte length of
@@ -1498,7 +1681,7 @@ export declare const TerminalAgentHomeMemoryChangeSchema: z.ZodDiscriminatedUnio
     outcome: z.ZodLiteral<"unmeasured">;
 }, z.core.$strict>], "outcome">;
 export type TerminalAgentHomeMemoryChange = z.infer<typeof TerminalAgentHomeMemoryChangeSchema>;
-/** A closed runtime failure class (#869). `unknown` means the runtime gave no structured evidence. */
+/** A runtime failure class this version knows (#869). `unknown` means the runtime gave no structured evidence. */
 export declare const RuntimeFailureClassSchema: z.ZodEnum<{
     auth: "auth";
     billing: "billing";
@@ -1519,6 +1702,11 @@ export type RuntimeFailureClass = z.infer<typeof RuntimeFailureClassSchema>;
  * The machine-readable failure of a `task.fail` (#869); `reason` stays display
  * text. `resetsAt` (ISO 8601 UTC) exists only on `quota`, and only when the
  * runtime reported when the limit resets.
+ *
+ * The class is open (#1121): a well-formed class this version does not know,
+ * with whatever fields a newer device put beside it, is accepted and kept
+ * verbatim, so the terminal is still recorded. {@link readTaskFailure} is the
+ * typed reading.
  */
 export declare const TaskFailureSchema: z.ZodUnion<readonly [z.ZodObject<{
     class: z.ZodLiteral<"quota">;
@@ -1538,8 +1726,21 @@ export declare const TaskFailureSchema: z.ZodUnion<readonly [z.ZodObject<{
         runtime_exited: "runtime_exited";
         unknown: "unknown";
     }>;
-}, z.core.$strict>]>;
+}, z.core.$strict>, z.ZodObject<{
+    class: z.ZodString;
+}, z.core.$loose>]>;
 export type TaskFailure = z.infer<typeof TaskFailureSchema>;
+/** A {@link TaskFailure} as this version understands it: a class it does not know reads as `unknown`, its raw token kept. */
+export type TaskFailureReading = {
+    readonly class: 'quota';
+    readonly resetsAt?: string;
+} | {
+    readonly class: Exclude<RuntimeFailureClass, 'quota' | 'unknown'>;
+} | {
+    readonly class: 'unknown';
+    readonly reportedClass?: string;
+};
+export declare function readTaskFailure(failure: TaskFailure): TaskFailureReading;
 /**
  * daemon -> server: a pending `task.await_approval` was resolved entirely
  * LOCALLY on the device — the local control-socket `approvals.resolve` RPC,
@@ -1706,7 +1907,9 @@ export declare const TaskFailSealedPayloadSchema: z.ZodObject<{
             runtime_exited: "runtime_exited";
             unknown: "unknown";
         }>;
-    }, z.core.$strict>]>>;
+    }, z.core.$strict>, z.ZodObject<{
+        class: z.ZodString;
+    }, z.core.$loose>]>>;
     usage: z.ZodOptional<z.ZodObject<{
         runtime: z.ZodEnum<{
             claude: "claude";
@@ -1780,6 +1983,23 @@ export declare const TaskDeclineSealedPayloadSchema: z.ZodObject<{
         agentId: z.ZodString;
         profileRevision: z.ZodString;
     }, z.core.$strict>>;
+    runtimeUnavailable: z.ZodOptional<z.ZodObject<{
+        cause: z.ZodUnion<readonly [z.ZodEnum<{
+            acp_unavailable: "acp_unavailable";
+            app_server_unavailable: "app_server_unavailable";
+            environment_unavailable: "environment_unavailable";
+            none_available: "none_available";
+            not_executable: "not_executable";
+            not_installed: "not_installed";
+            platform_unsupported: "platform_unsupported";
+            probe_failed: "probe_failed";
+            probe_timeout: "probe_timeout";
+            runtime_not_allowed: "runtime_not_allowed";
+            runtime_not_configured: "runtime_not_configured";
+            version_blocked: "version_blocked";
+        }>, z.ZodString]>;
+        code: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
     admission: z.ZodOptional<z.ZodObject<{
         totalMs: z.ZodNumber;
         agentHomeWaitMs: z.ZodOptional<z.ZodNumber>;
@@ -1788,10 +2008,10 @@ export declare const TaskDeclineSealedPayloadSchema: z.ZodObject<{
         toolsetProbeMs: z.ZodOptional<z.ZodNumber>;
         runtimeLaunchMs: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>;
-    code: z.ZodOptional<z.ZodEnum<{
+    code: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
         agent_home_reader_busy: "agent_home_reader_busy";
         agent_home_writer_busy: "agent_home_writer_busy";
-    }>>;
+    }>, z.ZodString]>>;
     sealed: z.ZodObject<{
         v: z.ZodLiteral<1>;
         suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
@@ -2030,14 +2250,31 @@ export declare const TaskDeclinePayloadSchema: z.ZodUnion<readonly [z.ZodObject<
         agentId: z.ZodString;
         profileRevision: z.ZodString;
     }, z.core.$strict>>;
-    code: z.ZodOptional<z.ZodEnum<{
+    code: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
         agent_home_reader_busy: "agent_home_reader_busy";
         agent_home_writer_busy: "agent_home_writer_busy";
         sealed_content_mac_mismatch: "sealed_content_mac_mismatch";
         sealed_key_unavailable: "sealed_key_unavailable";
         sealed_open_failed: "sealed_open_failed";
         sealing_policy_mismatch: "sealing_policy_mismatch";
-    }>>;
+    }>, z.ZodString]>>;
+    runtimeUnavailable: z.ZodOptional<z.ZodObject<{
+        cause: z.ZodUnion<readonly [z.ZodEnum<{
+            acp_unavailable: "acp_unavailable";
+            app_server_unavailable: "app_server_unavailable";
+            environment_unavailable: "environment_unavailable";
+            none_available: "none_available";
+            not_executable: "not_executable";
+            not_installed: "not_installed";
+            platform_unsupported: "platform_unsupported";
+            probe_failed: "probe_failed";
+            probe_timeout: "probe_timeout";
+            runtime_not_allowed: "runtime_not_allowed";
+            runtime_not_configured: "runtime_not_configured";
+            version_blocked: "version_blocked";
+        }>, z.ZodString]>;
+        code: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
     admission: z.ZodOptional<z.ZodObject<{
         totalMs: z.ZodNumber;
         agentHomeWaitMs: z.ZodOptional<z.ZodNumber>;
@@ -2053,6 +2290,23 @@ export declare const TaskDeclinePayloadSchema: z.ZodUnion<readonly [z.ZodObject<
         agentId: z.ZodString;
         profileRevision: z.ZodString;
     }, z.core.$strict>>;
+    runtimeUnavailable: z.ZodOptional<z.ZodObject<{
+        cause: z.ZodUnion<readonly [z.ZodEnum<{
+            acp_unavailable: "acp_unavailable";
+            app_server_unavailable: "app_server_unavailable";
+            environment_unavailable: "environment_unavailable";
+            none_available: "none_available";
+            not_executable: "not_executable";
+            not_installed: "not_installed";
+            platform_unsupported: "platform_unsupported";
+            probe_failed: "probe_failed";
+            probe_timeout: "probe_timeout";
+            runtime_not_allowed: "runtime_not_allowed";
+            runtime_not_configured: "runtime_not_configured";
+            version_blocked: "version_blocked";
+        }>, z.ZodString]>;
+        code: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
     admission: z.ZodOptional<z.ZodObject<{
         totalMs: z.ZodNumber;
         agentHomeWaitMs: z.ZodOptional<z.ZodNumber>;
@@ -2061,10 +2315,10 @@ export declare const TaskDeclinePayloadSchema: z.ZodUnion<readonly [z.ZodObject<
         toolsetProbeMs: z.ZodOptional<z.ZodNumber>;
         runtimeLaunchMs: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>;
-    code: z.ZodOptional<z.ZodEnum<{
+    code: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
         agent_home_reader_busy: "agent_home_reader_busy";
         agent_home_writer_busy: "agent_home_writer_busy";
-    }>>;
+    }>, z.ZodString]>>;
     sealed: z.ZodObject<{
         v: z.ZodLiteral<1>;
         suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
@@ -2418,7 +2672,7 @@ export declare const TaskFailPayloadSchema: z.ZodUnion<readonly [z.ZodObject<{
         offerId: z.ZodUUID;
     }, z.core.$strict>>;
     harnessId: z.ZodOptional<z.ZodString>;
-    reason: z.ZodString;
+    reason: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
     retryable: z.ZodOptional<z.ZodBoolean>;
     failure: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
         class: z.ZodLiteral<"quota">;
@@ -2438,7 +2692,9 @@ export declare const TaskFailPayloadSchema: z.ZodUnion<readonly [z.ZodObject<{
             runtime_exited: "runtime_exited";
             unknown: "unknown";
         }>;
-    }, z.core.$strict>]>>;
+    }, z.core.$strict>, z.ZodObject<{
+        class: z.ZodString;
+    }, z.core.$loose>]>>;
     usage: z.ZodOptional<z.ZodObject<{
         runtime: z.ZodEnum<{
             claude: "claude";
@@ -2503,7 +2759,9 @@ export declare const TaskFailPayloadSchema: z.ZodUnion<readonly [z.ZodObject<{
             runtime_exited: "runtime_exited";
             unknown: "unknown";
         }>;
-    }, z.core.$strict>]>>;
+    }, z.core.$strict>, z.ZodObject<{
+        class: z.ZodString;
+    }, z.core.$loose>]>>;
     usage: z.ZodOptional<z.ZodObject<{
         runtime: z.ZodEnum<{
             claude: "claude";
@@ -2724,3 +2982,4 @@ export declare const SERVER_TO_DAEMON_TYPES: readonly ["task.offer", "agent.egre
  * handler or counted `accepted` on the `/byok/messages` wire.
  */
 export declare const DAEMON_TO_SERVER_TYPES: readonly ["task.claim", "task.started", "task.decline", "task.progress", "task.artifact", "task.await_approval", "task.complete", "task.fail", "task.cancelled", "task.approval_resolved", "agent.egress.reliable", "agent.message.draft", "agent.message.publish", "agent.content.receipt"];
+export {};

package/dist/open-vocabulary.d.ts

@@ -0,0 +1,5 @@
+import { z } from 'zod';
+/** Any well-formed open-vocabulary token, without a membership rule. */
+export declare function openVocabularyToken(): z.ZodString;
+/** A well-formed token that is none of `known`: the raw value a receiver keeps as `reported<Field>`. */
+export declare function unrecognizedToken(known: readonly string[]): z.ZodString;

package/dist/version.d.ts

@@ -69,5 +69,5 @@ export declare const AGENT_HOME_READERS_CAPABILITY: 'agent-home-readers';
  * MCP configuration.
  */
 export declare const CUSTOM_HARNESS_CAPABILITY: 'custom-harness';
-export declare const CAPABILITY_FLAGS: readonly ['steer', 'blob-upload', 'dispatch-selection', "provider-profile-binding", 'toolset-selection', 'agent-home-contract', "agent-home-readers", "agent-egress-policy", "agent-egress-reliable-ack", "agent-message-egress", "agent-egress-fresh-session", "agent-content-workspace-read", "agent-content-transcript-read", "agent-content-artifact-read", "agent-home-projection", "agent-input-preparation-v9", "terminal-projection-selection", "host-mcp-task-context", "custom-harness", "mailbox-read-ahead", "provider-provisioning.v1", "agent-memory-intent.v1", "agent-memory-selection", "agent-memory-read-if-admitted", "agent-memory-read-write-if-admitted", 'agent-message-draft', "sealed-payload-v1", "sealed-output-ciphertext-ref", "runtime-failure-class"];
+export declare const CAPABILITY_FLAGS: readonly ['steer', 'blob-upload', 'dispatch-selection', "provider-profile-binding", 'toolset-selection', 'agent-home-contract', "agent-home-readers", "agent-egress-policy", "agent-egress-reliable-ack", "agent-message-egress", "agent-egress-fresh-session", "agent-content-workspace-read", "agent-content-transcript-read", "agent-content-artifact-read", "agent-home-projection", "agent-input-preparation-v9", "terminal-projection-selection", "host-mcp-task-context", "custom-harness", "mailbox-read-ahead", "provider-provisioning.v1", "agent-memory-intent.v1", "agent-memory-selection", "agent-memory-read-if-admitted", "agent-memory-read-write-if-admitted", 'agent-message-draft', "sealed-payload-v1", "sealed-output-ciphertext-ref", "runtime-failure-class", "runtime-unavailable-cause"];
 export type CapabilityFlag = (typeof CAPABILITY_FLAGS)[number];

package/dist/wire-additions.d.ts

@@ -36,7 +36,7 @@
  */
 import type { MessageType } from './messages';
 import type { CapabilityFlag } from './version';
-type HttpWireSurface = 'ChallengeRequest' | 'ChallengeResponse' | 'TokenRequest' | 'TokenResponse' | 'EventsPollQuery' | 'EventsPollResponse' | 'MessagesSendRequest' | 'MessagesSendResponse';
+type HttpWireSurface = 'ChallengeRequest' | 'ChallengeResponse' | 'TokenRequest' | 'TokenResponse' | 'PairRequest' | 'PairResponse' | 'EventsPollQuery' | 'EventsPollResponse' | 'MessagesSendRequest' | 'MessagesSendResponse' | 'PresencePublishRequest';
 export type WireAddition = {
     readonly kind: 'envelope';
     readonly rule: 'gated';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@byok-sdk/protocol",
-  "version": "0.31.0",
+  "version": "0.32.0",
   "description": "BYOK SDK wire protocol: envelope schema, message types, and codec helpers",
   "type": "module",
   "license": "MIT",
@@ -29,6 +29,10 @@
     "./constants": {
       "types": "./dist/constants.d.ts",
       "import": "./dist/constants.js"
+    },
+    "./agent-memory": {
+      "types": "./dist/agent-memory.d.ts",
+      "import": "./dist/agent-memory.js"
     }
   },
   "files": [
@@ -49,7 +53,7 @@
   },
   "dependencies": {
     "@cfworker/json-schema": "4.1.1",
-    "zod": "^4.4.3"
+    "zod": "^4.6.6"
   },
   "devDependencies": {
     "byok-protocol-previous": "https://registry.npmjs.org/@byok-sdk/protocol/-/protocol-0.30.2.tgz"

package/dist/task-assertion.d.ts

@@ -1,28 +0,0 @@
-/**
- * The device-level half of the task lane's capability gate (contract §8.1).
- *
- * Contract §8.1 fixes ONE name, `host-mcp-task-context`, carried on two
- * independent channels that must both be in place before a host may route a
- * tool invocation through the task lane:
- *
- * 1. **Deployment level** — the ADR-010 `CapabilityDeclarationSchema` a
- *    deployment serves (`@byok-sdk/cloud`'s `CLOUD_CAPABILITIES`). §8.2(1)
- *    governs it: a deployment declares the capability only once it is
- *    completely implemented.
- * 2. **Device level** — this constant: a `conn.hello` capability string a host
- *    consumes through `declaresCapabilities`. §8.3 governs it: a device whose
- *    build cannot serve the lane simply does not advertise it, and the host
- *    answers `unavailable` rather than reaching for the device assertion the
- *    task lane does not accept.
- *
- * It lives in `@byok-sdk/protocol` for the same reason every other daemon
- * capability flag does: this package is the wire vocabulary both sides compile
- * against, and a name spelled twice is a name that can drift. It is registered
- * in `CAPABILITY_FLAGS` (`./version`), which is what makes it a value a daemon
- * can actually send.
- *
- * The spelling satisfies `@byok-sdk/core`'s `CAPABILITY_NAME_PATTERN`
- * (`/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/`) on purpose: the deployment-level channel
- * carries this exact literal, so a name legal in only one of the two channels
- * would leave them naming different things.
- */