@byok-sdk/protocol 0.31.0 → 0.33.0

package/dist/messages.d.ts

@@ -1,4 +1,5 @@
 import { z } from 'zod';
+import { type RuntimeUnavailableCause } from './constants';
 import { ProviderProvisioningAvailablePayloadSchema } from './provider-provisioning';
 import { E2eeKeyPackageAvailablePayloadSchema } from './e2ee-member';
 import { type PlainJsonCheck } from './plain-json';
@@ -8,6 +9,14 @@ export declare const RuntimeIdSchema: z.ZodEnum<{
     pi: "pi";
 }>;
 export type RuntimeId = z.infer<typeof RuntimeIdSchema>;
+/** A runtime-unavailable cause as this version understands it; unknown reads as `unknown` with the raw token kept. */
+export type RuntimeUnavailableCauseReading = {
+    readonly cause: RuntimeUnavailableCause;
+} | {
+    readonly cause: 'unknown';
+    readonly reportedCause: string;
+};
+export declare function readRuntimeUnavailableCause(cause: string): RuntimeUnavailableCauseReading;
 /** Wire-safe protocol version number: bounded before JSON reaches a store or comparison. */
 export declare const ProtocolVersionNumberSchema: z.ZodNumber;
 /**
@@ -31,8 +40,31 @@ export declare const RuntimeCapabilitiesSchema: z.ZodObject<{
     approvalInteractive: z.ZodOptional<z.ZodBoolean>;
     mcpToolsets: z.ZodOptional<z.ZodBoolean>;
     messageDraft: z.ZodOptional<z.ZodBoolean>;
+    toolAuthorizationAuto: z.ZodOptional<z.ZodBoolean>;
+    durablePi: z.ZodOptional<z.ZodBoolean>;
+    preparedLane: z.ZodOptional<z.ZodBoolean>;
+    isolation: z.ZodOptional<z.ZodObject<{
+        userContext: z.ZodOptional<z.ZodBoolean>;
+        userMcpServers: z.ZodOptional<z.ZodBoolean>;
+        sessionPersistence: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 export type RuntimeCapabilities = z.infer<typeof RuntimeCapabilitiesSchema>;
+/**
+ * The effective version policy's verdict, projected for discovery (#1103 D8).
+ * Only `state` and the policy's qualified token travel: `matched` and the
+ * allow/warn/block spec lists stay local. Absence means **unknown**, never
+ * `allow`: an older daemon or an adapter without a policy omits the field.
+ */
+export declare const RuntimeVersionPolicyProjectionSchema: z.ZodObject<{
+    state: z.ZodEnum<{
+        allow: "allow";
+        block: "block";
+        warn: "warn";
+    }>;
+    qualifiedVersion: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type RuntimeVersionPolicyProjection = z.infer<typeof RuntimeVersionPolicyProjectionSchema>;
 /**
  * Runtime detection info reported in `conn.hello`. Supersedes the M0
  * `agents: unknown` field (M1 gap #4): typed, so the server no longer has to
@@ -52,6 +84,22 @@ export declare const RuntimeInfoSchema: z.ZodObject<{
         approvalInteractive: z.ZodOptional<z.ZodBoolean>;
         mcpToolsets: z.ZodOptional<z.ZodBoolean>;
         messageDraft: z.ZodOptional<z.ZodBoolean>;
+        toolAuthorizationAuto: z.ZodOptional<z.ZodBoolean>;
+        durablePi: z.ZodOptional<z.ZodBoolean>;
+        preparedLane: z.ZodOptional<z.ZodBoolean>;
+        isolation: z.ZodOptional<z.ZodObject<{
+            userContext: z.ZodOptional<z.ZodBoolean>;
+            userMcpServers: z.ZodOptional<z.ZodBoolean>;
+            sessionPersistence: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    versionPolicy: z.ZodOptional<z.ZodObject<{
+        state: z.ZodEnum<{
+            allow: "allow";
+            block: "block";
+            warn: "warn";
+        }>;
+        qualifiedVersion: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type RuntimeInfo = z.infer<typeof RuntimeInfoSchema>;
@@ -67,7 +115,23 @@ export declare const HarnessInfoSchema: z.ZodObject<{
         approvalInteractive: z.ZodOptional<z.ZodBoolean>;
         mcpToolsets: z.ZodOptional<z.ZodBoolean>;
         messageDraft: z.ZodOptional<z.ZodBoolean>;
+        toolAuthorizationAuto: z.ZodOptional<z.ZodBoolean>;
+        durablePi: z.ZodOptional<z.ZodBoolean>;
+        preparedLane: z.ZodOptional<z.ZodBoolean>;
+        isolation: z.ZodOptional<z.ZodObject<{
+            userContext: z.ZodOptional<z.ZodBoolean>;
+            userMcpServers: z.ZodOptional<z.ZodBoolean>;
+            sessionPersistence: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
     }, z.core.$strip>;
+    versionPolicy: z.ZodOptional<z.ZodObject<{
+        state: z.ZodEnum<{
+            allow: "allow";
+            block: "block";
+            warn: "warn";
+        }>;
+        qualifiedVersion: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 export type HarnessInfo = z.infer<typeof HarnessInfoSchema>;
 export declare const HarnessInventorySchema: z.ZodArray<z.ZodObject<{
@@ -79,8 +143,55 @@ export declare const HarnessInventorySchema: z.ZodArray<z.ZodObject<{
         approvalInteractive: z.ZodOptional<z.ZodBoolean>;
         mcpToolsets: z.ZodOptional<z.ZodBoolean>;
         messageDraft: z.ZodOptional<z.ZodBoolean>;
+        toolAuthorizationAuto: z.ZodOptional<z.ZodBoolean>;
+        durablePi: z.ZodOptional<z.ZodBoolean>;
+        preparedLane: z.ZodOptional<z.ZodBoolean>;
+        isolation: z.ZodOptional<z.ZodObject<{
+            userContext: z.ZodOptional<z.ZodBoolean>;
+            userMcpServers: z.ZodOptional<z.ZodBoolean>;
+            sessionPersistence: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
     }, z.core.$strip>;
+    versionPolicy: z.ZodOptional<z.ZodObject<{
+        state: z.ZodEnum<{
+            allow: "allow";
+            block: "block";
+            warn: "warn";
+        }>;
+        qualifiedVersion: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
 }, z.core.$strip>>;
+/**
+ * One non-available runtime or harness in `conn.hello.runtimeUnavailable`
+ * (#1103 D8). The id stays in the existing identity domain: a built-in
+ * runtime id or a custom harness id. The cause is the append-only
+ * vocabulary, and `retryable` carries the same per-cause default a
+ * `task.decline` reports. Absence of the whole array means unknown, never
+ * "everything is available".
+ */
+export declare const RuntimeUnavailableEntrySchema: z.ZodObject<{
+    id: z.ZodUnion<readonly [z.ZodEnum<{
+        claude: "claude";
+        codex: "codex";
+        pi: "pi";
+    }>, z.ZodString]>;
+    cause: z.ZodUnion<readonly [z.ZodEnum<{
+        acp_unavailable: "acp_unavailable";
+        app_server_unavailable: "app_server_unavailable";
+        environment_unavailable: "environment_unavailable";
+        none_available: "none_available";
+        not_executable: "not_executable";
+        not_installed: "not_installed";
+        platform_unsupported: "platform_unsupported";
+        probe_failed: "probe_failed";
+        probe_timeout: "probe_timeout";
+        runtime_not_allowed: "runtime_not_allowed";
+        runtime_not_configured: "runtime_not_configured";
+        version_blocked: "version_blocked";
+    }>, z.ZodString]>;
+    retryable: z.ZodBoolean;
+}, z.core.$strip>;
+export type RuntimeUnavailableEntry = z.infer<typeof RuntimeUnavailableEntrySchema>;
 /** Maximum logical toolsets one daemon may advertise as locally configured. */
 export declare const CONFIGURED_TOOLSETS_MAX_ITEMS = 64;
 /**
@@ -134,6 +245,22 @@ export declare const ConnHelloPayloadSchema: z.ZodObject<{
             approvalInteractive: z.ZodOptional<z.ZodBoolean>;
             mcpToolsets: z.ZodOptional<z.ZodBoolean>;
             messageDraft: z.ZodOptional<z.ZodBoolean>;
+            toolAuthorizationAuto: z.ZodOptional<z.ZodBoolean>;
+            durablePi: z.ZodOptional<z.ZodBoolean>;
+            preparedLane: z.ZodOptional<z.ZodBoolean>;
+            isolation: z.ZodOptional<z.ZodObject<{
+                userContext: z.ZodOptional<z.ZodBoolean>;
+                userMcpServers: z.ZodOptional<z.ZodBoolean>;
+                sessionPersistence: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        versionPolicy: z.ZodOptional<z.ZodObject<{
+            state: z.ZodEnum<{
+                allow: "allow";
+                block: "block";
+                warn: "warn";
+            }>;
+            qualifiedVersion: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>;
     }, z.core.$strip>>>;
     harnesses: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -145,7 +272,45 @@ export declare const ConnHelloPayloadSchema: z.ZodObject<{
             approvalInteractive: z.ZodOptional<z.ZodBoolean>;
             mcpToolsets: z.ZodOptional<z.ZodBoolean>;
             messageDraft: z.ZodOptional<z.ZodBoolean>;
+            toolAuthorizationAuto: z.ZodOptional<z.ZodBoolean>;
+            durablePi: z.ZodOptional<z.ZodBoolean>;
+            preparedLane: z.ZodOptional<z.ZodBoolean>;
+            isolation: z.ZodOptional<z.ZodObject<{
+                userContext: z.ZodOptional<z.ZodBoolean>;
+                userMcpServers: z.ZodOptional<z.ZodBoolean>;
+                sessionPersistence: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>>;
         }, z.core.$strip>;
+        versionPolicy: z.ZodOptional<z.ZodObject<{
+            state: z.ZodEnum<{
+                allow: "allow";
+                block: "block";
+                warn: "warn";
+            }>;
+            qualifiedVersion: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>>;
+    runtimeUnavailable: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodUnion<readonly [z.ZodEnum<{
+            claude: "claude";
+            codex: "codex";
+            pi: "pi";
+        }>, z.ZodString]>;
+        cause: z.ZodUnion<readonly [z.ZodEnum<{
+            acp_unavailable: "acp_unavailable";
+            app_server_unavailable: "app_server_unavailable";
+            environment_unavailable: "environment_unavailable";
+            none_available: "none_available";
+            not_executable: "not_executable";
+            not_installed: "not_installed";
+            platform_unsupported: "platform_unsupported";
+            probe_failed: "probe_failed";
+            probe_timeout: "probe_timeout";
+            runtime_not_allowed: "runtime_not_allowed";
+            runtime_not_configured: "runtime_not_configured";
+            version_blocked: "version_blocked";
+        }>, z.ZodString]>;
+        retryable: z.ZodBoolean;
     }, z.core.$strip>>>;
     configuredToolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
     cursor: z.ZodOptional<z.ZodNumber>;
@@ -461,6 +626,8 @@ export declare const TaskOfferSealedPayloadSchema: z.ZodObject<{
         scopeId: z.ZodString;
         epoch: z.ZodNumber;
         categories: z.ZodArray<z.ZodEnum<{
+            "agent-message": "agent-message";
+            "memory-projection": "memory-projection";
             "task-input": "task-input";
             "task-output": "task-output";
         }>>;
@@ -734,6 +901,8 @@ export declare const TaskOfferPayloadSchema: z.ZodUnion<readonly [z.ZodObject<{
         scopeId: z.ZodString;
         epoch: z.ZodNumber;
         categories: z.ZodArray<z.ZodEnum<{
+            "agent-message": "agent-message";
+            "memory-projection": "memory-projection";
             "task-input": "task-input";
             "task-output": "task-output";
         }>>;
@@ -813,7 +982,10 @@ export declare const AgentMessageDraftPayloadSchema: z.ZodObject<{
     overflow: z.ZodOptional<z.ZodLiteral<true>>;
 }, z.core.$strict>;
 export type AgentMessageDraftPayload = z.infer<typeof AgentMessageDraftPayloadSchema>;
-export declare const AgentMessagePublishPayloadSchema: z.ZodObject<{
+/** Daemon -> server: one Agent message in plaintext. */
+export declare const AgentMessagePublishPlainPayloadSchema: z.ZodObject<{
+    sealed: z.ZodOptional<z.ZodNever>;
+    sealing: z.ZodOptional<z.ZodNever>;
     agentRef: z.ZodObject<{
         agentId: z.ZodString;
         profileRevision: z.ZodString;
@@ -830,8 +1002,116 @@ export declare const AgentMessagePublishPayloadSchema: z.ZodObject<{
     contentHash: z.ZodString;
     byteCount: z.ZodNumber;
 }, z.core.$strict>;
+export type AgentMessagePublishPlainPayload = z.infer<typeof AgentMessagePublishPlainPayloadSchema>;
+/**
+ * Daemon -> server: one Agent message of a task whose `sealing` lists
+ * `agent-message` (#1045 C2). `body` is sealed; `contentHash` and
+ * `byteCount` are not carried, and `messageId` and `cursor` name the write in
+ * the AAD and the content MAC. Gated on `sealed-payload-v2`.
+ */
+export declare const AgentMessagePublishSealedPayloadSchema: z.ZodObject<{
+    agentRef: z.ZodObject<{
+        agentId: z.ZodString;
+        profileRevision: z.ZodString;
+    }, z.core.$strict>;
+    sessionRef: z.ZodString;
+    contract: z.ZodString;
+    messageId: z.ZodUUID;
+    cursor: z.ZodNumber;
+    contentType: z.ZodEnum<{
+        "text/markdown": "text/markdown";
+        "text/plain": "text/plain";
+    }>;
+    sealed: z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
+        category: z.ZodLiteral<"agent-message">;
+        scope: z.ZodObject<{
+            id: z.ZodString;
+            epoch: z.ZodNumber;
+            keyId: z.ZodString;
+        }, z.core.$strict>;
+        chainHead: z.ZodObject<{
+            seq: z.ZodNumber;
+            hash: z.ZodString;
+        }, z.core.$strict>;
+        sender: z.ZodString;
+        salt: z.ZodString;
+        nonce: z.ZodString;
+        paddedLength: z.ZodNumber;
+        contentMac: z.ZodString;
+        ciphertext: z.ZodOptional<z.ZodString>;
+        ciphertextRef: z.ZodOptional<z.ZodObject<{
+            blobId: z.ZodString;
+            contentHash: z.ZodString;
+            size: z.ZodNumber;
+            contentType: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type AgentMessagePublishSealedPayload = z.infer<typeof AgentMessagePublishSealedPayloadSchema>;
+/** Narrow with `payload.sealed !== undefined`; the plaintext branch's `sealed` is `never`. */
+export declare const AgentMessagePublishPayloadSchema: z.ZodUnion<readonly [z.ZodObject<{
+    sealed: z.ZodOptional<z.ZodNever>;
+    sealing: z.ZodOptional<z.ZodNever>;
+    agentRef: z.ZodObject<{
+        agentId: z.ZodString;
+        profileRevision: z.ZodString;
+    }, z.core.$strict>;
+    sessionRef: z.ZodString;
+    contract: z.ZodString;
+    messageId: z.ZodUUID;
+    cursor: z.ZodNumber;
+    contentType: z.ZodEnum<{
+        "text/markdown": "text/markdown";
+        "text/plain": "text/plain";
+    }>;
+    body: z.ZodString;
+    contentHash: z.ZodString;
+    byteCount: z.ZodNumber;
+}, z.core.$strict>, z.ZodObject<{
+    agentRef: z.ZodObject<{
+        agentId: z.ZodString;
+        profileRevision: z.ZodString;
+    }, z.core.$strict>;
+    sessionRef: z.ZodString;
+    contract: z.ZodString;
+    messageId: z.ZodUUID;
+    cursor: z.ZodNumber;
+    contentType: z.ZodEnum<{
+        "text/markdown": "text/markdown";
+        "text/plain": "text/plain";
+    }>;
+    sealed: z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
+        category: z.ZodLiteral<"agent-message">;
+        scope: z.ZodObject<{
+            id: z.ZodString;
+            epoch: z.ZodNumber;
+            keyId: z.ZodString;
+        }, z.core.$strict>;
+        chainHead: z.ZodObject<{
+            seq: z.ZodNumber;
+            hash: z.ZodString;
+        }, z.core.$strict>;
+        sender: z.ZodString;
+        salt: z.ZodString;
+        nonce: z.ZodString;
+        paddedLength: z.ZodNumber;
+        contentMac: z.ZodString;
+        ciphertext: z.ZodOptional<z.ZodString>;
+        ciphertextRef: z.ZodOptional<z.ZodObject<{
+            blobId: z.ZodString;
+            contentHash: z.ZodString;
+            size: z.ZodNumber;
+            contentType: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strict>]>;
 export type AgentMessagePublishPayload = z.infer<typeof AgentMessagePublishPayloadSchema>;
-export declare const AgentMessageDispositionPayloadSchema: z.ZodObject<{
+/** Server -> daemon: the disposition of a plaintext message, naming its `contentHash`. */
+export declare const AgentMessageDispositionPlainPayloadSchema: z.ZodObject<{
     agentRef: z.ZodObject<{
         agentId: z.ZodString;
         profileRevision: z.ZodString;
@@ -840,7 +1120,31 @@ export declare const AgentMessageDispositionPayloadSchema: z.ZodObject<{
     contract: z.ZodString;
     messageId: z.ZodUUID;
     cursor: z.ZodNumber;
+    outcome: z.ZodEnum<{
+        accepted: "accepted";
+        held: "held";
+        refused: "refused";
+    }>;
+    receiptId: z.ZodUUID;
+    reasonCode: z.ZodOptional<z.ZodString>;
     contentHash: z.ZodString;
+    contentMac: z.ZodOptional<z.ZodNever>;
+}, z.core.$strict>;
+export type AgentMessageDispositionPlainPayload = z.infer<typeof AgentMessageDispositionPlainPayloadSchema>;
+/**
+ * Server -> daemon: the disposition of a sealed message (#1045 C2). It names
+ * the message by its sealed member's `contentMac`, because the sealed message
+ * carries no `contentHash`. Gated on `sealed-payload-v2`.
+ */
+export declare const AgentMessageDispositionSealedPayloadSchema: z.ZodObject<{
+    agentRef: z.ZodObject<{
+        agentId: z.ZodString;
+        profileRevision: z.ZodString;
+    }, z.core.$strict>;
+    sessionRef: z.ZodString;
+    contract: z.ZodString;
+    messageId: z.ZodUUID;
+    cursor: z.ZodNumber;
     outcome: z.ZodEnum<{
         accepted: "accepted";
         held: "held";
@@ -848,7 +1152,48 @@ export declare const AgentMessageDispositionPayloadSchema: z.ZodObject<{
     }>;
     receiptId: z.ZodUUID;
     reasonCode: z.ZodOptional<z.ZodString>;
+    contentMac: z.ZodString;
+    contentHash: z.ZodOptional<z.ZodNever>;
 }, z.core.$strict>;
+export type AgentMessageDispositionSealedPayload = z.infer<typeof AgentMessageDispositionSealedPayloadSchema>;
+/** Narrow with `payload.contentMac !== undefined`. */
+export declare const AgentMessageDispositionPayloadSchema: z.ZodUnion<readonly [z.ZodObject<{
+    agentRef: z.ZodObject<{
+        agentId: z.ZodString;
+        profileRevision: z.ZodString;
+    }, z.core.$strict>;
+    sessionRef: z.ZodString;
+    contract: z.ZodString;
+    messageId: z.ZodUUID;
+    cursor: z.ZodNumber;
+    outcome: z.ZodEnum<{
+        accepted: "accepted";
+        held: "held";
+        refused: "refused";
+    }>;
+    receiptId: z.ZodUUID;
+    reasonCode: z.ZodOptional<z.ZodString>;
+    contentHash: z.ZodString;
+    contentMac: z.ZodOptional<z.ZodNever>;
+}, z.core.$strict>, z.ZodObject<{
+    agentRef: z.ZodObject<{
+        agentId: z.ZodString;
+        profileRevision: z.ZodString;
+    }, z.core.$strict>;
+    sessionRef: z.ZodString;
+    contract: z.ZodString;
+    messageId: z.ZodUUID;
+    cursor: z.ZodNumber;
+    outcome: z.ZodEnum<{
+        accepted: "accepted";
+        held: "held";
+        refused: "refused";
+    }>;
+    receiptId: z.ZodUUID;
+    reasonCode: z.ZodOptional<z.ZodString>;
+    contentMac: z.ZodString;
+    contentHash: z.ZodOptional<z.ZodNever>;
+}, z.core.$strict>]>;
 export type AgentMessageDispositionPayload = z.infer<typeof AgentMessageDispositionPayloadSchema>;
 /** Server -> daemon: one exact, independently-capability-gated content read. */
 export declare const AgentContentReadPayloadSchema: z.ZodObject<{
@@ -973,7 +1318,7 @@ export declare const AgentContentReceiptPayloadSchema: z.ZodDiscriminatedUnion<[
     }>;
     decision: z.ZodLiteral<"denied">;
     byteCount: z.ZodLiteral<0>;
-    reason: z.ZodEnum<{
+    reason: z.ZodUnion<readonly [z.ZodEnum<{
         "absolute-target": "absolute-target";
         "byte-limit": "byte-limit";
         "capability-missing": "capability-missing";
@@ -993,7 +1338,7 @@ export declare const AgentContentReceiptPayloadSchema: z.ZodDiscriminatedUnion<[
         "target-missing": "target-missing";
         "text-decode-failed": "text-decode-failed";
         "text-not-allowlisted": "text-not-allowlisted";
-    }>;
+    }>, z.ZodString]>;
 }, z.core.$strict>], "decision">;
 export type AgentContentReceiptPayload = z.infer<typeof AgentContentReceiptPayloadSchema>;
 /**
@@ -1295,6 +1640,14 @@ export declare const TaskClaimPayloadSchema: z.ZodObject<{
         approvalInteractive: z.ZodOptional<z.ZodBoolean>;
         mcpToolsets: z.ZodOptional<z.ZodBoolean>;
         messageDraft: z.ZodOptional<z.ZodBoolean>;
+        toolAuthorizationAuto: z.ZodOptional<z.ZodBoolean>;
+        durablePi: z.ZodOptional<z.ZodBoolean>;
+        preparedLane: z.ZodOptional<z.ZodBoolean>;
+        isolation: z.ZodOptional<z.ZodObject<{
+            userContext: z.ZodOptional<z.ZodBoolean>;
+            userMcpServers: z.ZodOptional<z.ZodBoolean>;
+            sessionPersistence: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
     }, z.core.$strip>>;
     admission: z.ZodOptional<z.ZodObject<{
         totalMs: z.ZodNumber;
@@ -1313,6 +1666,16 @@ export type TaskClaimPayload = z.infer<typeof TaskClaimPayloadSchema>;
  */
 export declare const TaskStartedPayloadSchema: z.ZodObject<{}, z.core.$strip>;
 export type TaskStartedPayload = z.infer<typeof TaskStartedPayloadSchema>;
+declare const DECLINE_CODES: readonly ["agent_home_writer_busy", "agent_home_reader_busy", "sealed_key_unavailable", "sealed_open_failed", "sealed_content_mac_mismatch", "sealing_policy_mismatch"];
+export type TaskDeclineCode = (typeof DECLINE_CODES)[number];
+/** A decline code as this version understands it: one it does not know reads as `unknown`, its raw token kept. */
+export type TaskDeclineCodeReading = {
+    readonly code: TaskDeclineCode;
+} | {
+    readonly code: 'unknown';
+    readonly reportedCode: string;
+};
+export declare function readDeclineCode(code: string): TaskDeclineCodeReading;
 /**
  * Hard cap (1 MiB) on a single `task.complete.document` (see
  * {@link TaskCompletePayloadSchema}), measured as the UTF-8 byte length of
@@ -1498,7 +1861,7 @@ export declare const TerminalAgentHomeMemoryChangeSchema: z.ZodDiscriminatedUnio
     outcome: z.ZodLiteral<"unmeasured">;
 }, z.core.$strict>], "outcome">;
 export type TerminalAgentHomeMemoryChange = z.infer<typeof TerminalAgentHomeMemoryChangeSchema>;
-/** A closed runtime failure class (#869). `unknown` means the runtime gave no structured evidence. */
+/** A runtime failure class this version knows (#869). `unknown` means the runtime gave no structured evidence. */
 export declare const RuntimeFailureClassSchema: z.ZodEnum<{
     auth: "auth";
     billing: "billing";
@@ -1515,14 +1878,30 @@ export declare const RuntimeFailureClassSchema: z.ZodEnum<{
     unknown: "unknown";
 }>;
 export type RuntimeFailureClass = z.infer<typeof RuntimeFailureClassSchema>;
+/** Whether a `quota` limit covers the whole account or one model (#1271). */
+export declare const RuntimeQuotaScopeSchema: z.ZodEnum<{
+    account: "account";
+    model: "model";
+}>;
+export type RuntimeQuotaScope = z.infer<typeof RuntimeQuotaScopeSchema>;
 /**
  * The machine-readable failure of a `task.fail` (#869); `reason` stays display
- * text. `resetsAt` (ISO 8601 UTC) exists only on `quota`, and only when the
- * runtime reported when the limit resets.
+ * text. `resetsAt` (ISO 8601 UTC) and `scope` exist only on `quota`, and only
+ * when the runtime reported them. `scope` is gated on the server's
+ * `runtime-quota-scope` flag (#1271).
+ *
+ * The class is open (#1121): a well-formed class this version does not know,
+ * with whatever fields a newer device put beside it, is accepted and kept
+ * verbatim, so the terminal is still recorded. {@link readTaskFailure} is the
+ * typed reading.
  */
 export declare const TaskFailureSchema: z.ZodUnion<readonly [z.ZodObject<{
     class: z.ZodLiteral<"quota">;
     resetsAt: z.ZodOptional<z.ZodISODateTime>;
+    scope: z.ZodOptional<z.ZodEnum<{
+        account: "account";
+        model: "model";
+    }>>;
 }, z.core.$strict>, z.ZodObject<{
     class: z.ZodEnum<{
         auth: "auth";
@@ -1538,8 +1917,22 @@ export declare const TaskFailureSchema: z.ZodUnion<readonly [z.ZodObject<{
         runtime_exited: "runtime_exited";
         unknown: "unknown";
     }>;
-}, z.core.$strict>]>;
+}, z.core.$strict>, z.ZodObject<{
+    class: z.ZodString;
+}, z.core.$loose>]>;
 export type TaskFailure = z.infer<typeof TaskFailureSchema>;
+/** A {@link TaskFailure} as this version understands it: a class it does not know reads as `unknown`, its raw token kept. */
+export type TaskFailureReading = {
+    readonly class: 'quota';
+    readonly resetsAt?: string;
+    readonly scope?: RuntimeQuotaScope;
+} | {
+    readonly class: Exclude<RuntimeFailureClass, 'quota' | 'unknown'>;
+} | {
+    readonly class: 'unknown';
+    readonly reportedClass?: string;
+};
+export declare function readTaskFailure(failure: TaskFailure): TaskFailureReading;
 /**
  * daemon -> server: a pending `task.await_approval` was resolved entirely
  * LOCALLY on the device — the local control-socket `approvals.resolve` RPC,
@@ -1691,6 +2084,10 @@ export declare const TaskFailSealedPayloadSchema: z.ZodObject<{
     failure: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
         class: z.ZodLiteral<"quota">;
         resetsAt: z.ZodOptional<z.ZodISODateTime>;
+        scope: z.ZodOptional<z.ZodEnum<{
+            account: "account";
+            model: "model";
+        }>>;
     }, z.core.$strict>, z.ZodObject<{
         class: z.ZodEnum<{
             auth: "auth";
@@ -1706,7 +2103,9 @@ export declare const TaskFailSealedPayloadSchema: z.ZodObject<{
             runtime_exited: "runtime_exited";
             unknown: "unknown";
         }>;
-    }, z.core.$strict>]>>;
+    }, z.core.$strict>, z.ZodObject<{
+        class: z.ZodString;
+    }, z.core.$loose>]>>;
     usage: z.ZodOptional<z.ZodObject<{
         runtime: z.ZodEnum<{
             claude: "claude";
@@ -1780,6 +2179,23 @@ export declare const TaskDeclineSealedPayloadSchema: z.ZodObject<{
         agentId: z.ZodString;
         profileRevision: z.ZodString;
     }, z.core.$strict>>;
+    runtimeUnavailable: z.ZodOptional<z.ZodObject<{
+        cause: z.ZodUnion<readonly [z.ZodEnum<{
+            acp_unavailable: "acp_unavailable";
+            app_server_unavailable: "app_server_unavailable";
+            environment_unavailable: "environment_unavailable";
+            none_available: "none_available";
+            not_executable: "not_executable";
+            not_installed: "not_installed";
+            platform_unsupported: "platform_unsupported";
+            probe_failed: "probe_failed";
+            probe_timeout: "probe_timeout";
+            runtime_not_allowed: "runtime_not_allowed";
+            runtime_not_configured: "runtime_not_configured";
+            version_blocked: "version_blocked";
+        }>, z.ZodString]>;
+        code: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
     admission: z.ZodOptional<z.ZodObject<{
         totalMs: z.ZodNumber;
         agentHomeWaitMs: z.ZodOptional<z.ZodNumber>;
@@ -1788,10 +2204,10 @@ export declare const TaskDeclineSealedPayloadSchema: z.ZodObject<{
         toolsetProbeMs: z.ZodOptional<z.ZodNumber>;
         runtimeLaunchMs: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>;
-    code: z.ZodOptional<z.ZodEnum<{
+    code: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
         agent_home_reader_busy: "agent_home_reader_busy";
         agent_home_writer_busy: "agent_home_writer_busy";
-    }>>;
+    }>, z.ZodString]>>;
     sealed: z.ZodObject<{
         v: z.ZodLiteral<1>;
         suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
@@ -2030,14 +2446,31 @@ export declare const TaskDeclinePayloadSchema: z.ZodUnion<readonly [z.ZodObject<
         agentId: z.ZodString;
         profileRevision: z.ZodString;
     }, z.core.$strict>>;
-    code: z.ZodOptional<z.ZodEnum<{
+    code: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
         agent_home_reader_busy: "agent_home_reader_busy";
         agent_home_writer_busy: "agent_home_writer_busy";
         sealed_content_mac_mismatch: "sealed_content_mac_mismatch";
         sealed_key_unavailable: "sealed_key_unavailable";
         sealed_open_failed: "sealed_open_failed";
         sealing_policy_mismatch: "sealing_policy_mismatch";
-    }>>;
+    }>, z.ZodString]>>;
+    runtimeUnavailable: z.ZodOptional<z.ZodObject<{
+        cause: z.ZodUnion<readonly [z.ZodEnum<{
+            acp_unavailable: "acp_unavailable";
+            app_server_unavailable: "app_server_unavailable";
+            environment_unavailable: "environment_unavailable";
+            none_available: "none_available";
+            not_executable: "not_executable";
+            not_installed: "not_installed";
+            platform_unsupported: "platform_unsupported";
+            probe_failed: "probe_failed";
+            probe_timeout: "probe_timeout";
+            runtime_not_allowed: "runtime_not_allowed";
+            runtime_not_configured: "runtime_not_configured";
+            version_blocked: "version_blocked";
+        }>, z.ZodString]>;
+        code: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
     admission: z.ZodOptional<z.ZodObject<{
         totalMs: z.ZodNumber;
         agentHomeWaitMs: z.ZodOptional<z.ZodNumber>;
@@ -2053,6 +2486,23 @@ export declare const TaskDeclinePayloadSchema: z.ZodUnion<readonly [z.ZodObject<
         agentId: z.ZodString;
         profileRevision: z.ZodString;
     }, z.core.$strict>>;
+    runtimeUnavailable: z.ZodOptional<z.ZodObject<{
+        cause: z.ZodUnion<readonly [z.ZodEnum<{
+            acp_unavailable: "acp_unavailable";
+            app_server_unavailable: "app_server_unavailable";
+            environment_unavailable: "environment_unavailable";
+            none_available: "none_available";
+            not_executable: "not_executable";
+            not_installed: "not_installed";
+            platform_unsupported: "platform_unsupported";
+            probe_failed: "probe_failed";
+            probe_timeout: "probe_timeout";
+            runtime_not_allowed: "runtime_not_allowed";
+            runtime_not_configured: "runtime_not_configured";
+            version_blocked: "version_blocked";
+        }>, z.ZodString]>;
+        code: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
     admission: z.ZodOptional<z.ZodObject<{
         totalMs: z.ZodNumber;
         agentHomeWaitMs: z.ZodOptional<z.ZodNumber>;
@@ -2061,10 +2511,10 @@ export declare const TaskDeclinePayloadSchema: z.ZodUnion<readonly [z.ZodObject<
         toolsetProbeMs: z.ZodOptional<z.ZodNumber>;
         runtimeLaunchMs: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>;
-    code: z.ZodOptional<z.ZodEnum<{
+    code: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
         agent_home_reader_busy: "agent_home_reader_busy";
         agent_home_writer_busy: "agent_home_writer_busy";
-    }>>;
+    }>, z.ZodString]>>;
     sealed: z.ZodObject<{
         v: z.ZodLiteral<1>;
         suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
@@ -2418,11 +2868,15 @@ export declare const TaskFailPayloadSchema: z.ZodUnion<readonly [z.ZodObject<{
         offerId: z.ZodUUID;
     }, z.core.$strict>>;
     harnessId: z.ZodOptional<z.ZodString>;
-    reason: z.ZodString;
+    reason: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
     retryable: z.ZodOptional<z.ZodBoolean>;
     failure: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
         class: z.ZodLiteral<"quota">;
         resetsAt: z.ZodOptional<z.ZodISODateTime>;
+        scope: z.ZodOptional<z.ZodEnum<{
+            account: "account";
+            model: "model";
+        }>>;
     }, z.core.$strict>, z.ZodObject<{
         class: z.ZodEnum<{
             auth: "auth";
@@ -2438,7 +2892,9 @@ export declare const TaskFailPayloadSchema: z.ZodUnion<readonly [z.ZodObject<{
             runtime_exited: "runtime_exited";
             unknown: "unknown";
         }>;
-    }, z.core.$strict>]>>;
+    }, z.core.$strict>, z.ZodObject<{
+        class: z.ZodString;
+    }, z.core.$loose>]>>;
     usage: z.ZodOptional<z.ZodObject<{
         runtime: z.ZodEnum<{
             claude: "claude";
@@ -2488,6 +2944,10 @@ export declare const TaskFailPayloadSchema: z.ZodUnion<readonly [z.ZodObject<{
     failure: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
         class: z.ZodLiteral<"quota">;
         resetsAt: z.ZodOptional<z.ZodISODateTime>;
+        scope: z.ZodOptional<z.ZodEnum<{
+            account: "account";
+            model: "model";
+        }>>;
     }, z.core.$strict>, z.ZodObject<{
         class: z.ZodEnum<{
             auth: "auth";
@@ -2503,7 +2963,9 @@ export declare const TaskFailPayloadSchema: z.ZodUnion<readonly [z.ZodObject<{
             runtime_exited: "runtime_exited";
             unknown: "unknown";
         }>;
-    }, z.core.$strict>]>>;
+    }, z.core.$strict>, z.ZodObject<{
+        class: z.ZodString;
+    }, z.core.$loose>]>>;
     usage: z.ZodOptional<z.ZodObject<{
         runtime: z.ZodEnum<{
             claude: "claude";
@@ -2724,3 +3186,4 @@ export declare const SERVER_TO_DAEMON_TYPES: readonly ["task.offer", "agent.egre
  * handler or counted `accepted` on the `/byok/messages` wire.
  */
 export declare const DAEMON_TO_SERVER_TYPES: readonly ["task.claim", "task.started", "task.decline", "task.progress", "task.artifact", "task.await_approval", "task.complete", "task.fail", "task.cancelled", "task.approval_resolved", "agent.egress.reliable", "agent.message.draft", "agent.message.publish", "agent.content.receipt"];
+export {};