@byok-sdk/protocol 0.32.0 → 0.33.0

package/dist/agent-memory-projection.d.ts

@@ -34,7 +34,7 @@ export type AgentMemoryProjectionSnapshot = z.infer<typeof AgentMemoryProjection
  * The snapshot is a one-way copy of local `MEMORY.md` plus local `notes/`, not
  * a remote authoring, merge, import, history, or RAG contract.
  */
-export declare const AgentMemoryProjectionMutationSchema: z.ZodObject<{
+export declare const AgentMemoryProjectionPlainMutationSchema: z.ZodObject<{
     taskId: z.ZodString;
     agentRef: z.ZodObject<{
         agentId: z.ZodString;
@@ -56,7 +56,131 @@ export declare const AgentMemoryProjectionMutationSchema: z.ZodObject<{
         redactedByteCount: z.ZodNumber;
         redactedBytes: z.ZodString;
     }, z.core.$strict>;
+    sealed: z.ZodOptional<z.ZodNever>;
 }, z.core.$strict>;
+export type AgentMemoryProjectionPlainMutation = z.infer<typeof AgentMemoryProjectionPlainMutationSchema>;
+/**
+ * The mutation under a grant that names a sealing scope (#1045 C4). The
+ * redacted snapshot is sealed, inline only, under the Agent's memory scope;
+ * its plaintext hash and byte count are not carried. The AAD binds
+ * `{ agentId, writerEpoch, sourceSeq, mutationId }`, so the Host cannot move
+ * a snapshot to another Agent, epoch or position.
+ */
+export declare const AgentMemoryProjectionSealedMutationSchema: z.ZodObject<{
+    taskId: z.ZodString;
+    agentRef: z.ZodObject<{
+        agentId: z.ZodString;
+        profileRevision: z.ZodString;
+    }, z.core.$strict>;
+    sessionRef: z.ZodString;
+    runtimeId: z.ZodEnum<{
+        claude: "claude";
+        codex: "codex";
+        pi: "pi";
+    }>;
+    grantRef: z.ZodString;
+    writerEpoch: z.ZodNumber;
+    sourceSeq: z.ZodNumber;
+    mutationId: z.ZodUUID;
+    policyRevision: z.ZodString;
+    sealed: z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
+        category: z.ZodLiteral<"memory-projection">;
+        scope: z.ZodObject<{
+            id: z.ZodString;
+            epoch: z.ZodNumber;
+            keyId: z.ZodString;
+        }, z.core.$strict>;
+        chainHead: z.ZodObject<{
+            seq: z.ZodNumber;
+            hash: z.ZodString;
+        }, z.core.$strict>;
+        sender: z.ZodString;
+        salt: z.ZodString;
+        nonce: z.ZodString;
+        paddedLength: z.ZodNumber;
+        contentMac: z.ZodString;
+        ciphertext: z.ZodOptional<z.ZodString>;
+        ciphertextRef: z.ZodOptional<z.ZodObject<{
+            blobId: z.ZodString;
+            contentHash: z.ZodString;
+            size: z.ZodNumber;
+            contentType: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    snapshot: z.ZodOptional<z.ZodNever>;
+}, z.core.$strict>;
+export type AgentMemoryProjectionSealedMutation = z.infer<typeof AgentMemoryProjectionSealedMutationSchema>;
+/** Narrow with `mutation.sealed !== undefined`. */
+export declare const AgentMemoryProjectionMutationSchema: z.ZodUnion<readonly [z.ZodObject<{
+    taskId: z.ZodString;
+    agentRef: z.ZodObject<{
+        agentId: z.ZodString;
+        profileRevision: z.ZodString;
+    }, z.core.$strict>;
+    sessionRef: z.ZodString;
+    runtimeId: z.ZodEnum<{
+        claude: "claude";
+        codex: "codex";
+        pi: "pi";
+    }>;
+    grantRef: z.ZodString;
+    writerEpoch: z.ZodNumber;
+    sourceSeq: z.ZodNumber;
+    mutationId: z.ZodUUID;
+    policyRevision: z.ZodString;
+    snapshot: z.ZodObject<{
+        redactedHash: z.ZodString;
+        redactedByteCount: z.ZodNumber;
+        redactedBytes: z.ZodString;
+    }, z.core.$strict>;
+    sealed: z.ZodOptional<z.ZodNever>;
+}, z.core.$strict>, z.ZodObject<{
+    taskId: z.ZodString;
+    agentRef: z.ZodObject<{
+        agentId: z.ZodString;
+        profileRevision: z.ZodString;
+    }, z.core.$strict>;
+    sessionRef: z.ZodString;
+    runtimeId: z.ZodEnum<{
+        claude: "claude";
+        codex: "codex";
+        pi: "pi";
+    }>;
+    grantRef: z.ZodString;
+    writerEpoch: z.ZodNumber;
+    sourceSeq: z.ZodNumber;
+    mutationId: z.ZodUUID;
+    policyRevision: z.ZodString;
+    sealed: z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
+        category: z.ZodLiteral<"memory-projection">;
+        scope: z.ZodObject<{
+            id: z.ZodString;
+            epoch: z.ZodNumber;
+            keyId: z.ZodString;
+        }, z.core.$strict>;
+        chainHead: z.ZodObject<{
+            seq: z.ZodNumber;
+            hash: z.ZodString;
+        }, z.core.$strict>;
+        sender: z.ZodString;
+        salt: z.ZodString;
+        nonce: z.ZodString;
+        paddedLength: z.ZodNumber;
+        contentMac: z.ZodString;
+        ciphertext: z.ZodOptional<z.ZodString>;
+        ciphertextRef: z.ZodOptional<z.ZodObject<{
+            blobId: z.ZodString;
+            contentHash: z.ZodString;
+            size: z.ZodNumber;
+            contentType: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    snapshot: z.ZodOptional<z.ZodNever>;
+}, z.core.$strict>]>;
 export type AgentMemoryProjectionMutation = z.infer<typeof AgentMemoryProjectionMutationSchema>;
 /** Stable meter receipt for one accepted redacted snapshot; it never carries the snapshot body. */
 export declare const AgentMemoryProjectionMeteringReceiptSchema: z.ZodObject<{
@@ -66,13 +190,79 @@ export declare const AgentMemoryProjectionMeteringReceiptSchema: z.ZodObject<{
 }, z.core.$strict>;
 export type AgentMemoryProjectionMeteringReceipt = z.infer<typeof AgentMemoryProjectionMeteringReceiptSchema>;
 /** Immutable commit readback. It repeats identity and redacted metadata, never redacted bytes. */
-export declare const AgentMemoryProjectionReceiptSchema: z.ZodObject<{
+export declare const AgentMemoryProjectionPlainReceiptSchema: z.ZodObject<{
+    taskId: z.ZodString;
+    agentRef: z.ZodObject<{
+        agentId: z.ZodString;
+        profileRevision: z.ZodString;
+    }, z.core.$strict>;
+    sessionRef: z.ZodString;
+    runtimeId: z.ZodEnum<{
+        claude: "claude";
+        codex: "codex";
+        pi: "pi";
+    }>;
+    grantRef: z.ZodString;
+    writerEpoch: z.ZodNumber;
+    sourceSeq: z.ZodNumber;
+    mutationId: z.ZodUUID;
+    policyRevision: z.ZodString;
+    outcome: z.ZodEnum<{
+        accepted: "accepted";
+        idempotent: "idempotent";
+    }>;
+    tenantId: z.ZodString;
+    deviceId: z.ZodString;
+    redactedHash: z.ZodString;
+    redactedByteCount: z.ZodNumber;
+    metering: z.ZodObject<{
+        meteringReceiptId: z.ZodUUID;
+        acceptedRedactedBytes: z.ZodNumber;
+        recordedAt: z.ZodISODateTime;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type AgentMemoryProjectionPlainReceipt = z.infer<typeof AgentMemoryProjectionPlainReceiptSchema>;
+/** Stable meter receipt for one accepted sealed snapshot: the Host meters the padded length it stores. */
+export declare const AgentMemoryProjectionSealedMeteringReceiptSchema: z.ZodObject<{
+    meteringReceiptId: z.ZodUUID;
+    acceptedPaddedBytes: z.ZodNumber;
+    recordedAt: z.ZodISODateTime;
+}, z.core.$strict>;
+export type AgentMemoryProjectionSealedMeteringReceipt = z.infer<typeof AgentMemoryProjectionSealedMeteringReceiptSchema>;
+/** Immutable commit readback of a sealed snapshot: identity and the sealed member's `contentMac` and padded length. */
+export declare const AgentMemoryProjectionSealedReceiptSchema: z.ZodObject<{
+    taskId: z.ZodString;
+    agentRef: z.ZodObject<{
+        agentId: z.ZodString;
+        profileRevision: z.ZodString;
+    }, z.core.$strict>;
+    sessionRef: z.ZodString;
+    runtimeId: z.ZodEnum<{
+        claude: "claude";
+        codex: "codex";
+        pi: "pi";
+    }>;
+    grantRef: z.ZodString;
+    writerEpoch: z.ZodNumber;
+    sourceSeq: z.ZodNumber;
+    mutationId: z.ZodUUID;
+    policyRevision: z.ZodString;
     outcome: z.ZodEnum<{
         accepted: "accepted";
         idempotent: "idempotent";
     }>;
     tenantId: z.ZodString;
     deviceId: z.ZodString;
+    contentMac: z.ZodString;
+    paddedLength: z.ZodNumber;
+    metering: z.ZodObject<{
+        meteringReceiptId: z.ZodUUID;
+        acceptedPaddedBytes: z.ZodNumber;
+        recordedAt: z.ZodISODateTime;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type AgentMemoryProjectionSealedReceipt = z.infer<typeof AgentMemoryProjectionSealedReceiptSchema>;
+export declare const AgentMemoryProjectionReceiptSchema: z.ZodUnion<readonly [z.ZodObject<{
     taskId: z.ZodString;
     agentRef: z.ZodObject<{
         agentId: z.ZodString;
@@ -89,6 +279,12 @@ export declare const AgentMemoryProjectionReceiptSchema: z.ZodObject<{
     sourceSeq: z.ZodNumber;
     mutationId: z.ZodUUID;
     policyRevision: z.ZodString;
+    outcome: z.ZodEnum<{
+        accepted: "accepted";
+        idempotent: "idempotent";
+    }>;
+    tenantId: z.ZodString;
+    deviceId: z.ZodString;
     redactedHash: z.ZodString;
     redactedByteCount: z.ZodNumber;
     metering: z.ZodObject<{
@@ -96,7 +292,37 @@ export declare const AgentMemoryProjectionReceiptSchema: z.ZodObject<{
         acceptedRedactedBytes: z.ZodNumber;
         recordedAt: z.ZodISODateTime;
     }, z.core.$strict>;
-}, z.core.$strict>;
+}, z.core.$strict>, z.ZodObject<{
+    taskId: z.ZodString;
+    agentRef: z.ZodObject<{
+        agentId: z.ZodString;
+        profileRevision: z.ZodString;
+    }, z.core.$strict>;
+    sessionRef: z.ZodString;
+    runtimeId: z.ZodEnum<{
+        claude: "claude";
+        codex: "codex";
+        pi: "pi";
+    }>;
+    grantRef: z.ZodString;
+    writerEpoch: z.ZodNumber;
+    sourceSeq: z.ZodNumber;
+    mutationId: z.ZodUUID;
+    policyRevision: z.ZodString;
+    outcome: z.ZodEnum<{
+        accepted: "accepted";
+        idempotent: "idempotent";
+    }>;
+    tenantId: z.ZodString;
+    deviceId: z.ZodString;
+    contentMac: z.ZodString;
+    paddedLength: z.ZodNumber;
+    metering: z.ZodObject<{
+        meteringReceiptId: z.ZodUUID;
+        acceptedPaddedBytes: z.ZodNumber;
+        recordedAt: z.ZodISODateTime;
+    }, z.core.$strict>;
+}, z.core.$strict>]>;
 export type AgentMemoryProjectionReceipt = z.infer<typeof AgentMemoryProjectionReceiptSchema>;
 /**
  * Server-side erase result. The returned epoch is the minimum legal epoch for

package/dist/capability-constants.d.ts

@@ -49,6 +49,13 @@ export declare const AGENT_INPUT_PREPARATION_CAPABILITY: "agent-input-preparatio
  * `WIRE_ADDITIONS`.
  */
 export declare const SEALED_PAYLOAD_CAPABILITY: 'sealed-payload-v1';
+/**
+ * Sealed payload v2 (#1045): the `agent-message` and `memory-projection`
+ * categories. A device advertises it before a Host may send it an offer whose
+ * `sealing` names either category, or a sealed message disposition; a server
+ * advertises it before a device may send it a sealed `agent.message.publish`.
+ */
+export declare const SEALED_PAYLOAD_V2_CAPABILITY: 'sealed-payload-v2';
 /**
  * A server advertises it before a device may send a sealed task output that
  * names its ciphertext blob (`sealed.ciphertextRef`) instead of carrying it
@@ -60,6 +67,8 @@ export declare const SEALED_OUTPUT_CIPHERTEXT_REF_CAPABILITY: 'sealed-output-cip
  * machine-readable runtime failure class (#869).
  */
 export declare const RUNTIME_FAILURE_CLASS_CAPABILITY: 'runtime-failure-class';
+/** A server advertises it before a device may send `task.fail.failure.scope` (#1271). */
+export declare const RUNTIME_QUOTA_SCOPE_CAPABILITY: 'runtime-quota-scope';
 /**
  * The connection understands the typed pre-claim runtime-unavailable cause
  * (#1103 D8): `task.decline.runtimeUnavailable`, `conn.hello.runtimeUnavailable`
@@ -76,6 +85,8 @@ export declare const RUNTIME_UNAVAILABLE_CAUSE_CAPABILITY: 'runtime-unavailable-
  * schema-free consumers.
  */
 export declare const RUNTIME_FAILURE_CLASSES: readonly ['auth', 'quota', 'rate_limited', 'billing', 'model_unavailable', 'input_too_large', 'invalid_request', 'overloaded', 'provider', 'runtime_exited', 'limit_reached', 'output_schema', 'unknown'];
+/** The values of a `quota` failure's `scope` (#1271), shared by schema and schema-free consumers. */
+export declare const RUNTIME_QUOTA_SCOPES: readonly ['account', 'model'];
 /** Single value authority shared by schema validation and schema-free consumers. */
 export declare const PREPARED_AGENT_MEMORY_MODES: readonly ['none', 'read', 'read-write'];
 export declare function isPreparedAgentMemoryMode(value: unknown): value is (typeof PREPARED_AGENT_MEMORY_MODES)[number];

package/dist/constants.js

@@ -1,5 +1,5 @@
-var INPUT_PREPARATION_WIRE_VERSION=9;var AGENT_EGRESS_POLICY_CAPABILITY="agent-egress-policy";var AGENT_EGRESS_RELIABLE_ACK_CAPABILITY="agent-egress-reliable-ack";var AGENT_EGRESS_FRESH_SESSION_CAPABILITY="agent-egress-fresh-session";var AGENT_MESSAGE_EGRESS_CAPABILITY="agent-message-egress";var AGENT_CONTENT_WORKSPACE_READ_CAPABILITY="agent-content-workspace-read";var AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY="agent-content-transcript-read";var AGENT_CONTENT_ARTIFACT_READ_CAPABILITY="agent-content-artifact-read";var AGENT_HOME_PROJECTION_CAPABILITY="agent-home-projection";var TERMINAL_PROJECTION_SELECTION_CAPABILITY="terminal-projection-selection";var HOST_MCP_TASK_CONTEXT_CAPABILITY="host-mcp-task-context";var PROVIDER_PROFILE_BINDING_CAPABILITY="provider-profile-binding";var PROVIDER_PROVISIONING_CAPABILITY="provider-provisioning.v1";var AGENT_MEMORY_INTENT_CAPABILITY="agent-memory-intent.v1";var AGENT_MEMORY_PROJECTION_CAPABILITY="agent.memory.projection";var AGENT_MEMORY_SELECTION_CAPABILITY="agent-memory-selection";var AGENT_MEMORY_READ_IF_ADMITTED_CAPABILITY="agent-memory-read-if-admitted";var AGENT_MEMORY_READ_WRITE_IF_ADMITTED_CAPABILITY="agent-memory-read-write-if-admitted";var AGENT_INPUT_PREPARATION_CAPABILITY=`agent-input-preparation-v${INPUT_PREPARATION_WIRE_VERSION}`;var SEALED_PAYLOAD_CAPABILITY="sealed-payload-v1";var SEALED_OUTPUT_CIPHERTEXT_REF_CAPABILITY="sealed-output-ciphertext-ref";var RUNTIME_FAILURE_CLASS_CAPABILITY="runtime-failure-class";var RUNTIME_UNAVAILABLE_CAUSE_CAPABILITY="runtime-unavailable-cause";var RUNTIME_FAILURE_CLASSES=["auth","quota","rate_limited","billing","model_unavailable","input_too_large","invalid_request","overloaded","provider","runtime_exited","limit_reached","output_schema","unknown"];var PREPARED_AGENT_MEMORY_MODES=["none","read","read-write"];function isPreparedAgentMemoryMode(value){return typeof value==="string"&&PREPARED_AGENT_MEMORY_MODES.some(mode=>mode===value)}var MAILBOX_READ_AHEAD_MAX_SEQS=4096;var MAILBOX_READ_AHEAD_CAPABILITY="mailbox-read-ahead";var PROTOCOL_VERSION=4;var AGENT_HOME_READERS_CAPABILITY="agent-home-readers";var CUSTOM_HARNESS_CAPABILITY="custom-harness";var CAPABILITY_FLAGS=["steer","blob-upload","dispatch-selection",PROVIDER_PROFILE_BINDING_CAPABILITY,"toolset-selection","agent-home-contract",AGENT_HOME_READERS_CAPABILITY,AGENT_EGRESS_POLICY_CAPABILITY,AGENT_EGRESS_RELIABLE_ACK_CAPABILITY,AGENT_MESSAGE_EGRESS_CAPABILITY,AGENT_EGRESS_FRESH_SESSION_CAPABILITY,AGENT_CONTENT_WORKSPACE_READ_CAPABILITY,AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY,AGENT_CONTENT_ARTIFACT_READ_CAPABILITY,AGENT_HOME_PROJECTION_CAPABILITY,AGENT_INPUT_PREPARATION_CAPABILITY,TERMINAL_PROJECTION_SELECTION_CAPABILITY,HOST_MCP_TASK_CONTEXT_CAPABILITY,CUSTOM_HARNESS_CAPABILITY,MAILBOX_READ_AHEAD_CAPABILITY,PROVIDER_PROVISIONING_CAPABILITY,AGENT_MEMORY_INTENT_CAPABILITY,AGENT_MEMORY_SELECTION_CAPABILITY,AGENT_MEMORY_READ_IF_ADMITTED_CAPABILITY,AGENT_MEMORY_READ_WRITE_IF_ADMITTED_CAPABILITY,"agent-message-draft",SEALED_PAYLOAD_CAPABILITY,SEALED_OUTPUT_CIPHERTEXT_REF_CAPABILITY,RUNTIME_FAILURE_CLASS_CAPABILITY,RUNTIME_UNAVAILABLE_CAUSE_CAPABILITY];var TASK_STATES=["Offered","Claimed","Running","AwaitApproval","Complete","Failed","Cancelled"];var TASK_TRANSITIONS={Offered:["Claimed","Cancelled","Failed"],Claimed:["Running","Failed","Cancelled"],Running:["AwaitApproval","Complete","Failed","Cancelled"],AwaitApproval:["Running","Failed","Cancelled"],Complete:[],Failed:[],Cancelled:[]};function canTransition(from,to){return TASK_TRANSITIONS[from].includes(to)}var TASK_FAIL_REASON_MAX_BYTES=2048;var REDACTED="[redacted]";var VALUE=String.raw`(?:"(?:\\[^\n]|[^"\\\n])*(?:\\)?"?|'(?:\\[^\n]|[^'\\\n])*(?:\\)?'?|[^\s"'\[\u2026,;&|][^\s"',;&|]*)`;var GAP="[ \\t]{0,16}";var RULES=[[new RegExp(String.raw`\b((?:proxy-)?authorization)(["']?${GAP}[:=]${GAP})(?:(?:bearer|basic|token|digest)[ \t]{1,16})?${VALUE}`,"gi"),`$1$2${REDACTED}`],[/\b(bearer)[ \t]{1,16}[A-Za-z0-9._~+/=-]{8,}/gi,`$1 ${REDACTED}`],[new RegExp(String.raw`(key|token|secret|passw(?:or)?d[\w.-]{0,64})(["']?${GAP}[:=]${GAP})${VALUE}`,"gi"),`$1$2${REDACTED}`],[/:\/\/[^\s/?#@]{1,256}@/g,`://${REDACTED}@`],[/\bsk-[A-Za-z0-9_-]{16,}/g,REDACTED],[/\bxai-[A-Za-z0-9_-]{16,}/g,REDACTED],[/\bAIza[0-9A-Za-z_-]{30,}/g,REDACTED],[/\bgh[pousr]_[A-Za-z0-9]{20,}/g,REDACTED],[/\bgithub_pat_[A-Za-z0-9_]{20,}/g,REDACTED],[/\bAKIA[0-9A-Z]{16}/g,REDACTED],[/\beyJ[A-Za-z0-9_-]{10,}(?:\.[A-Za-z0-9_-]*){0,2}/g,REDACTED]];var encoder=new TextEncoder;var decoder=new TextDecoder("utf-8");function redact(text){let out=text;for(const[pattern,replacement]of RULES)out=out.replace(pattern,replacement);return out}function boundFailureReason(reason){const redacted=redact(reason);const bytes=encoder.encode(redacted);if(bytes.length<=TASK_FAIL_REASON_MAX_BYTES)return redacted;let keep=TASK_FAIL_REASON_MAX_BYTES-encoder.encode(`\u2026[truncated ${bytes.length} bytes]`).length;while(keep>0&&((bytes[keep]??0)&192)===128)keep-=1;return `${decoder.decode(bytes.subarray(0,keep))}\u2026[truncated ${bytes.length-keep} bytes]`}var AGENT_MEMORY_MAX_SNAPSHOT_BYTES=1024*1024;var AGENT_MEMORY_MAX_SNAPSHOT_FILES=128;var RUNTIME_IDS=Object.freeze(["pi","claude","codex"]);var RUNTIME_UNAVAILABLE_CAUSES=Object.freeze(["not_installed","not_executable","probe_timeout","probe_failed","app_server_unavailable","acp_unavailable","platform_unsupported","environment_unavailable","version_blocked","runtime_not_configured","runtime_not_allowed","none_available"]);var TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH=160;
+var INPUT_PREPARATION_WIRE_VERSION=9;var AGENT_EGRESS_POLICY_CAPABILITY="agent-egress-policy";var AGENT_EGRESS_RELIABLE_ACK_CAPABILITY="agent-egress-reliable-ack";var AGENT_EGRESS_FRESH_SESSION_CAPABILITY="agent-egress-fresh-session";var AGENT_MESSAGE_EGRESS_CAPABILITY="agent-message-egress";var AGENT_CONTENT_WORKSPACE_READ_CAPABILITY="agent-content-workspace-read";var AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY="agent-content-transcript-read";var AGENT_CONTENT_ARTIFACT_READ_CAPABILITY="agent-content-artifact-read";var AGENT_HOME_PROJECTION_CAPABILITY="agent-home-projection";var TERMINAL_PROJECTION_SELECTION_CAPABILITY="terminal-projection-selection";var HOST_MCP_TASK_CONTEXT_CAPABILITY="host-mcp-task-context";var PROVIDER_PROFILE_BINDING_CAPABILITY="provider-profile-binding";var PROVIDER_PROVISIONING_CAPABILITY="provider-provisioning.v1";var AGENT_MEMORY_INTENT_CAPABILITY="agent-memory-intent.v1";var AGENT_MEMORY_PROJECTION_CAPABILITY="agent.memory.projection";var AGENT_MEMORY_SELECTION_CAPABILITY="agent-memory-selection";var AGENT_MEMORY_READ_IF_ADMITTED_CAPABILITY="agent-memory-read-if-admitted";var AGENT_MEMORY_READ_WRITE_IF_ADMITTED_CAPABILITY="agent-memory-read-write-if-admitted";var AGENT_INPUT_PREPARATION_CAPABILITY=`agent-input-preparation-v${INPUT_PREPARATION_WIRE_VERSION}`;var SEALED_PAYLOAD_CAPABILITY="sealed-payload-v1";var SEALED_PAYLOAD_V2_CAPABILITY="sealed-payload-v2";var SEALED_OUTPUT_CIPHERTEXT_REF_CAPABILITY="sealed-output-ciphertext-ref";var RUNTIME_FAILURE_CLASS_CAPABILITY="runtime-failure-class";var RUNTIME_QUOTA_SCOPE_CAPABILITY="runtime-quota-scope";var RUNTIME_UNAVAILABLE_CAUSE_CAPABILITY="runtime-unavailable-cause";var RUNTIME_FAILURE_CLASSES=["auth","quota","rate_limited","billing","model_unavailable","input_too_large","invalid_request","overloaded","provider","runtime_exited","limit_reached","output_schema","unknown"];var RUNTIME_QUOTA_SCOPES=["account","model"];var PREPARED_AGENT_MEMORY_MODES=["none","read","read-write"];function isPreparedAgentMemoryMode(value){return typeof value==="string"&&PREPARED_AGENT_MEMORY_MODES.some(mode=>mode===value)}var MAILBOX_READ_AHEAD_MAX_SEQS=4096;var MAILBOX_READ_AHEAD_CAPABILITY="mailbox-read-ahead";var PROTOCOL_VERSION=4;var AGENT_HOME_READERS_CAPABILITY="agent-home-readers";var CUSTOM_HARNESS_CAPABILITY="custom-harness";var CAPABILITY_FLAGS=["steer","blob-upload","dispatch-selection",PROVIDER_PROFILE_BINDING_CAPABILITY,"toolset-selection","agent-home-contract",AGENT_HOME_READERS_CAPABILITY,AGENT_EGRESS_POLICY_CAPABILITY,AGENT_EGRESS_RELIABLE_ACK_CAPABILITY,AGENT_MESSAGE_EGRESS_CAPABILITY,AGENT_EGRESS_FRESH_SESSION_CAPABILITY,AGENT_CONTENT_WORKSPACE_READ_CAPABILITY,AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY,AGENT_CONTENT_ARTIFACT_READ_CAPABILITY,AGENT_HOME_PROJECTION_CAPABILITY,AGENT_INPUT_PREPARATION_CAPABILITY,TERMINAL_PROJECTION_SELECTION_CAPABILITY,HOST_MCP_TASK_CONTEXT_CAPABILITY,CUSTOM_HARNESS_CAPABILITY,MAILBOX_READ_AHEAD_CAPABILITY,PROVIDER_PROVISIONING_CAPABILITY,AGENT_MEMORY_INTENT_CAPABILITY,AGENT_MEMORY_SELECTION_CAPABILITY,AGENT_MEMORY_READ_IF_ADMITTED_CAPABILITY,AGENT_MEMORY_READ_WRITE_IF_ADMITTED_CAPABILITY,"agent-message-draft",SEALED_PAYLOAD_CAPABILITY,SEALED_PAYLOAD_V2_CAPABILITY,SEALED_OUTPUT_CIPHERTEXT_REF_CAPABILITY,RUNTIME_FAILURE_CLASS_CAPABILITY,RUNTIME_QUOTA_SCOPE_CAPABILITY,RUNTIME_UNAVAILABLE_CAUSE_CAPABILITY];var TASK_STATES=["Offered","Claimed","Running","AwaitApproval","Complete","Failed","Cancelled"];var TASK_TRANSITIONS={Offered:["Claimed","Cancelled","Failed"],Claimed:["Running","Failed","Cancelled"],Running:["AwaitApproval","Complete","Failed","Cancelled"],AwaitApproval:["Running","Failed","Cancelled"],Complete:[],Failed:[],Cancelled:[]};function canTransition(from,to){return TASK_TRANSITIONS[from].includes(to)}var TASK_FAIL_REASON_MAX_BYTES=2048;var REDACTED="[redacted]";var VALUE=String.raw`(?:"(?:\\[^\n]|[^"\\\n])*(?:\\)?"?|'(?:\\[^\n]|[^'\\\n])*(?:\\)?'?|[^\s"'\[\u2026,;&|][^\s"',;&|]*)`;var GAP="[ \\t]{0,16}";var RULES=[[new RegExp(String.raw`\b((?:proxy-)?authorization)(["']?${GAP}[:=]${GAP})(?:(?:bearer|basic|token|digest)[ \t]{1,16})?${VALUE}`,"gi"),`$1$2${REDACTED}`],[/\b(bearer)[ \t]{1,16}[A-Za-z0-9._~+/=-]{8,}/gi,`$1 ${REDACTED}`],[new RegExp(String.raw`(key|token|secret|passw(?:or)?d[\w.-]{0,64})(["']?${GAP}[:=]${GAP})${VALUE}`,"gi"),`$1$2${REDACTED}`],[/:\/\/[^\s/?#@]{1,256}@/g,`://${REDACTED}@`],[/\bsk-[A-Za-z0-9_-]{16,}/g,REDACTED],[/\bxai-[A-Za-z0-9_-]{16,}/g,REDACTED],[/\bAIza[0-9A-Za-z_-]{30,}/g,REDACTED],[/\bgh[pousr]_[A-Za-z0-9]{20,}/g,REDACTED],[/\bgithub_pat_[A-Za-z0-9_]{20,}/g,REDACTED],[/\bAKIA[0-9A-Z]{16}/g,REDACTED],[/\beyJ[A-Za-z0-9_-]{10,}(?:\.[A-Za-z0-9_-]*){0,2}/g,REDACTED]];var encoder=new TextEncoder;var decoder=new TextDecoder("utf-8");function redact(text){let out=text;for(const[pattern,replacement]of RULES)out=out.replace(pattern,replacement);return out}function boundFailureReason(reason){const redacted=redact(reason);const bytes=encoder.encode(redacted);if(bytes.length<=TASK_FAIL_REASON_MAX_BYTES)return redacted;let keep=TASK_FAIL_REASON_MAX_BYTES-encoder.encode(`\u2026[truncated ${bytes.length} bytes]`).length;while(keep>0&&((bytes[keep]??0)&192)===128)keep-=1;return `${decoder.decode(bytes.subarray(0,keep))}\u2026[truncated ${bytes.length-keep} bytes]`}var AGENT_MEMORY_MAX_SNAPSHOT_BYTES=1024*1024;var AGENT_MEMORY_MAX_SNAPSHOT_FILES=128;var RUNTIME_IDS=Object.freeze(["pi","claude","codex"]);var RUNTIME_UNAVAILABLE_CAUSES=Object.freeze(["not_installed","not_executable","probe_timeout","probe_failed","app_server_unavailable","acp_unavailable","platform_unsupported","environment_unavailable","version_blocked","runtime_not_configured","runtime_not_allowed","none_available"]);var TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH=160;
 
-export { AGENT_CONTENT_ARTIFACT_READ_CAPABILITY, AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY, AGENT_CONTENT_WORKSPACE_READ_CAPABILITY, AGENT_EGRESS_FRESH_SESSION_CAPABILITY, AGENT_EGRESS_POLICY_CAPABILITY, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY, AGENT_HOME_PROJECTION_CAPABILITY, AGENT_HOME_READERS_CAPABILITY, AGENT_INPUT_PREPARATION_CAPABILITY, AGENT_MEMORY_INTENT_CAPABILITY, AGENT_MEMORY_MAX_SNAPSHOT_BYTES, AGENT_MEMORY_MAX_SNAPSHOT_FILES, AGENT_MEMORY_PROJECTION_CAPABILITY, AGENT_MEMORY_READ_IF_ADMITTED_CAPABILITY, AGENT_MEMORY_READ_WRITE_IF_ADMITTED_CAPABILITY, AGENT_MEMORY_SELECTION_CAPABILITY, AGENT_MESSAGE_EGRESS_CAPABILITY, CAPABILITY_FLAGS, CUSTOM_HARNESS_CAPABILITY, HOST_MCP_TASK_CONTEXT_CAPABILITY, INPUT_PREPARATION_WIRE_VERSION, MAILBOX_READ_AHEAD_CAPABILITY, MAILBOX_READ_AHEAD_MAX_SEQS, PREPARED_AGENT_MEMORY_MODES, PROTOCOL_VERSION, PROVIDER_PROFILE_BINDING_CAPABILITY, PROVIDER_PROVISIONING_CAPABILITY, RUNTIME_FAILURE_CLASSES, RUNTIME_FAILURE_CLASS_CAPABILITY, RUNTIME_IDS, RUNTIME_UNAVAILABLE_CAUSES, RUNTIME_UNAVAILABLE_CAUSE_CAPABILITY, SEALED_OUTPUT_CIPHERTEXT_REF_CAPABILITY, SEALED_PAYLOAD_CAPABILITY, TASK_FAIL_REASON_MAX_BYTES, TASK_STATES, TASK_TRANSITIONS, TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH, TERMINAL_PROJECTION_SELECTION_CAPABILITY, boundFailureReason, canTransition, isPreparedAgentMemoryMode };
+export { AGENT_CONTENT_ARTIFACT_READ_CAPABILITY, AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY, AGENT_CONTENT_WORKSPACE_READ_CAPABILITY, AGENT_EGRESS_FRESH_SESSION_CAPABILITY, AGENT_EGRESS_POLICY_CAPABILITY, AGENT_EGRESS_RELIABLE_ACK_CAPABILITY, AGENT_HOME_PROJECTION_CAPABILITY, AGENT_HOME_READERS_CAPABILITY, AGENT_INPUT_PREPARATION_CAPABILITY, AGENT_MEMORY_INTENT_CAPABILITY, AGENT_MEMORY_MAX_SNAPSHOT_BYTES, AGENT_MEMORY_MAX_SNAPSHOT_FILES, AGENT_MEMORY_PROJECTION_CAPABILITY, AGENT_MEMORY_READ_IF_ADMITTED_CAPABILITY, AGENT_MEMORY_READ_WRITE_IF_ADMITTED_CAPABILITY, AGENT_MEMORY_SELECTION_CAPABILITY, AGENT_MESSAGE_EGRESS_CAPABILITY, CAPABILITY_FLAGS, CUSTOM_HARNESS_CAPABILITY, HOST_MCP_TASK_CONTEXT_CAPABILITY, INPUT_PREPARATION_WIRE_VERSION, MAILBOX_READ_AHEAD_CAPABILITY, MAILBOX_READ_AHEAD_MAX_SEQS, PREPARED_AGENT_MEMORY_MODES, PROTOCOL_VERSION, PROVIDER_PROFILE_BINDING_CAPABILITY, PROVIDER_PROVISIONING_CAPABILITY, RUNTIME_FAILURE_CLASSES, RUNTIME_FAILURE_CLASS_CAPABILITY, RUNTIME_IDS, RUNTIME_QUOTA_SCOPES, RUNTIME_QUOTA_SCOPE_CAPABILITY, RUNTIME_UNAVAILABLE_CAUSES, RUNTIME_UNAVAILABLE_CAUSE_CAPABILITY, SEALED_OUTPUT_CIPHERTEXT_REF_CAPABILITY, SEALED_PAYLOAD_CAPABILITY, SEALED_PAYLOAD_V2_CAPABILITY, TASK_FAIL_REASON_MAX_BYTES, TASK_STATES, TASK_TRANSITIONS, TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH, TERMINAL_PROJECTION_SELECTION_CAPABILITY, boundFailureReason, canTransition, isPreparedAgentMemoryMode };
 //# sourceMappingURL=constants.js.map
 //# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/capability-constants.ts","../src/version.ts","../src/task-state.ts","../src/failure-reason.ts","../src/constants.ts"],"names":[],"mappings":"AAWO,IAAM,8BAAA,CAAiC,EAIvC,IAAM,8BAAA,CAAiC,sBAEvC,IAAM,oCAAA,CAAuC,4BAG7C,IAAM,qCAAA,CAAwC,iCAGxC,+BAAA,CAAkC,uBAExC,IAAM,uCAAA,CAA0C,+BAEhD,IAAM,yCAA2C,gCAEjD,IAAM,sCAAA,CAAyC,8BAG/C,IAAM,gCAAA,CAAmC,wBAGzC,IAAM,wCAAA,CAA2C,gCAGjD,IAAM,gCAAA,CAAmC,4BAGnC,mCAAA,CAAsC,2BAG5C,IAAM,gCAAA,CAAmC,2BAGzC,IAAM,+BAAiC,yBAGvC,IAAM,kCAAA,CAAqC,0BAG3C,IAAM,iCAAA,CAAoC,yBAG1C,IAAM,wCAAA,CAA2C,gCAGjD,IAAM,8CAAA,CAAiD,0CAGjD,kCAAA,CACX,CAAA,yBAAA,EAA4B,8BAA8B,CAAA,EAQrD,IAAM,0BAA4B,oBAOlC,IAAM,uCAAA,CAA0C,+BAMhD,IAAM,gCAAA,CAAmC,wBAUzC,IAAM,oCAAA,CAAuC,4BAO7C,IAAM,uBAAA,CAA0B,CACrC,OAAQ,OAAA,CAAS,cAAA,CAAgB,SAAA,CAAW,mBAAA,CAAqB,iBAAA,CAAmB,iBAAA,CACpF,aAAc,UAAA,CAAY,gBAAA,CAAkB,eAAA,CAAiB,eAAA,CAAiB,SAChF,MAGa,2BAAA,CAA8B,CAAC,MAAA,CAAQ,MAAA,CAAQ,YAAY,EAEjE,SAAS,yBAAA,CAA0B,KAAA,CAAuE,CAC/G,OAAO,OAAO,KAAA,GAAU,UAAY,2BAAA,CAA4B,IAAA,CAAK,IAAA,EAAQ,IAAA,GAAS,KAAK,CAC7F,CC9GO,IAAM,2BAAA,CAA8B,KACpC,IAAM,6BAAA,CAAgC,qBA2CtC,IAAM,gBAAA,CAAmB,EASzB,IAAM,6BAAA,CAAgC,yBAmBhC,yBAAA,CAA4B,iBAElC,IAAM,gBAAA,CAAmB,CAC9B,OAAA,CACA,cACA,oBAAA,CACA,mCAAA,CACA,mBAAA,CACA,qBAAA,CACA,6BAAA,CACA,8BAAA,CACA,qCACA,+BAAA,CACA,qCAAA,CACA,uCAAA,CACA,wCAAA,CACA,sCAAA,CACA,gCAAA,CACA,mCACA,wCAAA,CACA,gCAAA,CACA,yBAAA,CACA,6BAAA,CACA,gCAAA,CACA,8BAAA,CACA,kCACA,wCAAA,CACA,8CAAA,CACA,qBAAA,CACA,yBAAA,CACA,uCAAA,CACA,gCAAA,CACA,oCACF,EC1GO,IAAM,WAAA,CAAc,CACzB,SAAA,CACA,SAAA,CACA,UACA,eAAA,CACA,UAAA,CACA,QAAA,CACA,WACF,EAoBO,IAAM,iBAAsE,CACjF,OAAA,CAAS,CAAC,SAAA,CAAW,WAAA,CAAa,QAAQ,EAC1C,OAAA,CAAS,CAAC,SAAA,CAAW,QAAA,CAAU,WAAW,CAAA,CAC1C,QAAS,CAAC,eAAA,CAAiB,UAAA,CAAY,QAAA,CAAU,WAAW,CAAA,CAC5D,cAAe,CAAC,SAAA,CAAW,QAAA,CAAU,WAAW,CAAA,CAChD,QAAA,CAAU,EAAC,CACX,MAAA,CAAQ,EAAC,CACT,SAAA,CAAW,EACb,EAGO,SAAS,aAAA,CAAc,IAAA,CAAiB,EAAA,CAAwB,CACrE,OAAO,gBAAA,CAAiB,IAAI,CAAA,CAAE,QAAA,CAAS,EAAE,CAC3C,CCzBO,IAAM,0BAAA,CAA6B,KAE1C,IAAM,QAAA,CAAW,aAQjB,IAAM,KAAA,CAAQ,MAAA,CAAO,GAAA,CAAA,mGAAA,CAAA,CAGrB,IAAM,GAAA,CAAM,eAEZ,IAAM,KAAA,CAAkD,CAEtD,CAAC,IAAI,MAAA,CAAO,OAAO,GAAA,CAAA,kCAAA,EAAwC,GAAG,CAAA,IAAA,EAAO,GAAG,CAAA,8CAAA,EAAiD,KAAK,GAAI,IAAI,CAAA,CAAG,CAAA,IAAA,EAAO,QAAQ,CAAA,CAAE,CAAA,CAC1J,CAAC,+CAAA,CAAiD,CAAA,GAAA,EAAM,QAAQ,CAAA,CAAE,CAAA,CAElE,CAAC,IAAI,MAAA,CAAO,MAAA,CAAO,GAAA,CAAA,kDAAA,EAAwD,GAAG,CAAA,IAAA,EAAO,GAAG,IAAI,KAAK,CAAA,CAAA,CAAI,IAAI,CAAA,CAAG,CAAA,IAAA,EAAO,QAAQ,EAAE,CAAA,CAE7H,CAAC,yBAAA,CAA2B,CAAA,GAAA,EAAM,QAAQ,CAAA,CAAA,CAAG,EAE7C,CAAC,0BAAA,CAA4B,QAAQ,CAAA,CACrC,CAAC,2BAAA,CAA6B,QAAQ,CAAA,CACtC,CAAC,2BAAA,CAA6B,QAAQ,CAAA,CACtC,CAAC,gCAAiC,QAAQ,CAAA,CAC1C,CAAC,iCAAA,CAAmC,QAAQ,CAAA,CAC5C,CAAC,qBAAA,CAAuB,QAAQ,CAAA,CAEhC,CAAC,mDAAA,CAAqD,QAAQ,CAChE,CAAA,CAEA,IAAM,OAAA,CAAU,IAAI,WAAA,CACpB,IAAM,QAAU,IAAI,WAAA,CAAY,OAAO,CAAA,CAEvC,SAAS,MAAA,CAAO,KAAsB,CACpC,IAAI,GAAA,CAAM,IAAA,CACV,IAAA,KAAW,CAAC,QAAS,WAAW,CAAA,GAAK,MAAO,GAAA,CAAM,GAAA,CAAI,QAAQ,OAAA,CAAS,WAAW,CAAA,CAClF,OAAO,GACT,CAQO,SAAS,kBAAA,CAAmB,MAAA,CAAwB,CACzD,MAAM,QAAA,CAAW,MAAA,CAAO,MAAM,CAAA,CAC9B,MAAM,KAAA,CAAQ,OAAA,CAAQ,MAAA,CAAO,QAAQ,EACrC,GAAI,KAAA,CAAM,MAAA,EAAU,0BAAA,CAA4B,OAAO,QAAA,CAEvD,IAAI,IAAA,CAAO,0BAAA,CAA6B,OAAA,CAAQ,MAAA,CAAO,CAAA,iBAAA,EAAoB,KAAA,CAAM,MAAM,CAAA,OAAA,CAAS,CAAA,CAAE,MAAA,CAClG,MAAO,IAAA,CAAO,CAAA,EAAA,CAAA,CAAO,MAAM,IAAI,CAAA,EAAK,CAAA,EAAK,GAAA,IAAU,GAAA,CAAM,IAAA,EAAQ,EACjE,OAAO,CAAA,EAAG,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,QAAA,CAAS,EAAG,IAAI,CAAC,CAAC,CAAA,iBAAA,EAAoB,KAAA,CAAM,MAAA,CAAS,IAAI,CAAA,OAAA,CAC1F,CClEO,IAAM,+BAAA,CAAkC,IAAA,CAAO,SAEzC,+BAAA,CAAkC,IAGxC,IAAM,WAAA,CAAc,MAAA,CAAO,MAAA,CAAO,CAAC,IAAA,CAAM,QAAA,CAAU,OAAO,CAAU,EAUpE,IAAM,2BAA6B,MAAA,CAAO,MAAA,CAAO,CAEtD,eAAA,CAEA,gBAAA,CAEA,eAAA,CAEA,eAEA,wBAAA,CAEA,iBAAA,CAEA,sBAAA,CAEA,yBAAA,CAEA,iBAAA,CAEA,wBAAA,CAEA,sBAEA,gBACF,CAAU,EAMH,IAAM,yCAAA,CAA4C","file":"constants.js","sourcesContent":["/**\n * The ONE version of the input-preparation contract, shared by this relay wire\n * (the `agent.input.preparation` payload and the completion receipt summary)\n * and by the device-local request, receipt and artifact\n * (`@byok-sdk/client`'s `INPUT_PREPARATION_VERSION`, which is this value).\n *\n * The relay wire carries no version field of its own, so a version change is\n * made visible where admission actually happens: in the capability token\n * below. See `INPUT_PREPARATION_VERSION` in the client for what each version\n * changed.\n */\nexport const INPUT_PREPARATION_WIRE_VERSION = 9 as const;\n\n\n/** Additive daemon capability names. Server/cloud admission consumes these exactly. */\nexport const AGENT_EGRESS_POLICY_CAPABILITY = 'agent-egress-policy' as const;\n\nexport const AGENT_EGRESS_RELIABLE_ACK_CAPABILITY = 'agent-egress-reliable-ack' as const;\n\n/** Admits the distinct offer whose runtime mints its session only after start. */\nexport const AGENT_EGRESS_FRESH_SESSION_CAPABILITY = 'agent-egress-fresh-session' as const;\n\n/** Admits the distinct Agent-authored message lane; activity policy remains independent. */\nexport const AGENT_MESSAGE_EGRESS_CAPABILITY = 'agent-message-egress' as const;\n\nexport const AGENT_CONTENT_WORKSPACE_READ_CAPABILITY = 'agent-content-workspace-read' as const;\n\nexport const AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY = 'agent-content-transcript-read' as const;\n\nexport const AGENT_CONTENT_ARTIFACT_READ_CAPABILITY = 'agent-content-artifact-read' as const;\n\n/** Capability required before a task-free Agent-home projection is admitted. */\nexport const AGENT_HOME_PROJECTION_CAPABILITY = 'agent-home-projection' as const;\n\n/** Capability required before an offer may select terminal projection behavior. */\nexport const TERMINAL_PROJECTION_SELECTION_CAPABILITY = 'terminal-projection-selection' as const;\n\n/** Contract §8.1's capability gate for `byok-task-assertion-v1` tool authority. */\nexport const HOST_MCP_TASK_CONTEXT_CAPABILITY = 'host-mcp-task-context' as const;\n\n/** Daemon capability required before an exact local provider profile may be offered. */\nexport const PROVIDER_PROFILE_BINDING_CAPABILITY = 'provider-profile-binding' as const;\n\n/** Device capability required before a Host may enqueue `provider.provisioning.available`. */\nexport const PROVIDER_PROVISIONING_CAPABILITY = 'provider-provisioning.v1' as const;\n\n/** Device capability required before a Host may enqueue `agent.memory.intent.available`. */\nexport const AGENT_MEMORY_INTENT_CAPABILITY = 'agent-memory-intent.v1' as const;\n\n/** Capability required before the optional hosted Agent-memory projection can be used. */\nexport const AGENT_MEMORY_PROJECTION_CAPABILITY = 'agent.memory.projection' as const;\n\n/** Device capability required before an ordinary Agent offer may carry `agentMemory`. */\nexport const AGENT_MEMORY_SELECTION_CAPABILITY = 'agent-memory-selection' as const;\n\n/** Device capability required before an ordinary Agent offer may carry `agentMemory: 'read-if-admitted'`. */\nexport const AGENT_MEMORY_READ_IF_ADMITTED_CAPABILITY = 'agent-memory-read-if-admitted' as const;\n\n/** Device capability required before an ordinary Agent offer may carry `agentMemory: 'read-write-if-admitted'`. */\nexport const AGENT_MEMORY_READ_WRITE_IF_ADMITTED_CAPABILITY = 'agent-memory-read-write-if-admitted' as const;\n\n/** Exact capability of the single input-preparation wire authority. */\nexport const AGENT_INPUT_PREPARATION_CAPABILITY =\n  `agent-input-preparation-v${INPUT_PREPARATION_WIRE_VERSION}` as const;\n\n/**\n * Sealed payload v1 (#654). A device advertises it before a Host may send it\n * a sealed offer or steer; a server advertises it before a device may send it\n * sealed task output or a sealed decline code. Both gates read\n * `WIRE_ADDITIONS`.\n */\nexport const SEALED_PAYLOAD_CAPABILITY = 'sealed-payload-v1' as const;\n\n/**\n * A server advertises it before a device may send a sealed task output that\n * names its ciphertext blob (`sealed.ciphertextRef`) instead of carrying it\n * inline. The server then holds the blob for the life of the task.\n */\nexport const SEALED_OUTPUT_CIPHERTEXT_REF_CAPABILITY = 'sealed-output-ciphertext-ref' as const;\n\n/**\n * A server advertises it before a device may send `task.fail.failure`, the\n * machine-readable runtime failure class (#869).\n */\nexport const RUNTIME_FAILURE_CLASS_CAPABILITY = 'runtime-failure-class' as const;\n\n/**\n * The connection understands the typed pre-claim runtime-unavailable cause\n * (#1103 D8): `task.decline.runtimeUnavailable`, `conn.hello.runtimeUnavailable`\n * and the presence projection. A daemon declares it when it emits the cause.\n * Older peers ignore the unknown flag; absence means the peer may not read\n * the cause, so a Host falls back to `retryable` and treats the cause as\n * unknown. It never infers availability or allow from absence.\n */\nexport const RUNTIME_UNAVAILABLE_CAUSE_CAPABILITY = 'runtime-unavailable-cause' as const;\n/**\n * The closed classes of `task.fail.failure.class`: the vendored OAR\n * `FailureClass` values. `unknown` means the runtime gave no structured\n * evidence. Single value authority shared by schema validation and\n * schema-free consumers.\n */\nexport const RUNTIME_FAILURE_CLASSES = [\n  'auth', 'quota', 'rate_limited', 'billing', 'model_unavailable', 'input_too_large', 'invalid_request',\n  'overloaded', 'provider', 'runtime_exited', 'limit_reached', 'output_schema', 'unknown',\n] as const;\n\n/** Single value authority shared by schema validation and schema-free consumers. */\nexport const PREPARED_AGENT_MEMORY_MODES = ['none', 'read', 'read-write'] as const;\n\nexport function isPreparedAgentMemoryMode(value: unknown): value is (typeof PREPARED_AGENT_MEMORY_MODES)[number] {\n  return typeof value === 'string' && PREPARED_AGENT_MEMORY_MODES.some(mode => mode === value);\n}\n","/** Bounded volatile navigation; only cursor is a durable acknowledgement. */\nexport const MAILBOX_READ_AHEAD_MAX_SEQS = 4096;\nexport const MAILBOX_READ_AHEAD_CAPABILITY = 'mailbox-read-ahead';\n\n/**\n * Wire protocol version. Every v4 change is a version bump, a gated addition\n * or a strip-safe addition: see docs/protocol.md \"Freeze rule\", which is the\n * one statement of the rule, and `src/wire-additions.ts`, which declares the\n * receiver-capability gates and additions. No v4 release has been published\n * yet, so `src/__tests__/compat.test.ts` has no published v4 decoder to prove\n * additions against; cross-release gates stay unproven until one exists.\n *\n * v4 completes the ADR-034 cutover and retires the approval paths kept for\n * pre-M5 peers. It removes the v3 handshake answer, the runtime-only offers\n * (with and without toolsets) with their sealed twins, and the\n * `strict-agent-only` flag: every offer is Agent-bound. `approvalId` is\n * required on `task.await_approval`, `task.approve` and `task.reject`, so a\n * decision resolves only the approval it names. `task.approval_resolved` is\n * baseline: the daemon reports every locally resolved approval, and the\n * server no longer infers one from later task activity. The three approval\n * capability flags of v3 are gone. A v3 envelope is rejected; there is no v3 reader. Drain, then\n * upgrade server and client together.\n *\n * v3 made `schema` required on the `terminalProjection.mode:\n * 'result-document'` arm (`terminal-projection.ts`, `result-schema.ts`): the\n * offer freezes the outcome schema, and the outcome reaches the Host only as\n * `task.complete.document`. That narrows a strict shape, so it is a wire\n * major. A v2 envelope is rejected; there is no v2 reader and no capability\n * negotiation between the two result-document shapes. Drain, then upgrade\n * server and client together. Every addition v2 declared is part of the v3\n * baseline, and the v2 `result-document` capability flag is gone: every v3\n * server keeps `task.complete.document`.\n *\n * v2 removed the task offer's `policy` (`PermissionPolicy`), the runtime\n * capability `permissionModes` and the input-preparation `permissionMode`.\n * Sessions run without an SDK permission gate; each local agent keeps its\n * own guardrails. A v1 envelope is rejected; there is no v1 reader.\n * v2 also removed the egress policy's `metadata-status` activity mode, its\n * `activity.mode` field and the `sanitizer_rejected` drop reason. Agent\n * egress goes to the Host as the runtime produced it.\n * v2 also removed the input-preparation artifact's `toolImplementationKinds`\n * and the readiness reason `executor_identity_unproven`. The SDK does not\n * attest tool executables. The artifact names its counted tools in\n * `toolNames`.\n */\nexport const PROTOCOL_VERSION = 4;\n\n/**\n * The device runs `homeAccess: 'memory-reader'` Agent offers: each reader\n * Attempt gets its own run directory under the Agent home, and readers are\n * counted apart from the one writer. The Agent offers are strict, so a host\n * must refuse a reader offer to a device without this flag before it creates\n * the task.\n */\nexport const AGENT_HOME_READERS_CAPABILITY = 'agent-home-readers' as const;\n\n/**\n * Capability flags. The daemon sends its flags in `conn.hello`; the server\n * sends its own on every long-poll response (`EventsPollResponse`). Additional\n * flags may be introduced without a protocol version bump; unrecognized flags\n * must be ignored by both sides.\n *\n * `dispatch-selection` (additive-minor) is a correctness gate for the\n * optional offer `dispatchSelection` control field. An older v1 daemon\n * legally strips unknown optional fields, so a server must never send an\n * authoritative provider/model selection unless the target connection\n * advertises this flag. Absence means reject before task creation, not send\n * an offer that could reach a different provider.\n *\n * `toolset-selection` (additive-minor) means the daemon understands an\n * offer's `requiredToolsets` and can resolve its logical ids against local\n * MCP configuration.\n */\nexport const CUSTOM_HARNESS_CAPABILITY = 'custom-harness' as const;\n\nexport const CAPABILITY_FLAGS = [\n  'steer',\n  'blob-upload',\n  'dispatch-selection',\n  PROVIDER_PROFILE_BINDING_CAPABILITY,\n  'toolset-selection',\n  'agent-home-contract',\n  AGENT_HOME_READERS_CAPABILITY,\n  AGENT_EGRESS_POLICY_CAPABILITY,\n  AGENT_EGRESS_RELIABLE_ACK_CAPABILITY,\n  AGENT_MESSAGE_EGRESS_CAPABILITY,\n  AGENT_EGRESS_FRESH_SESSION_CAPABILITY,\n  AGENT_CONTENT_WORKSPACE_READ_CAPABILITY,\n  AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY,\n  AGENT_CONTENT_ARTIFACT_READ_CAPABILITY,\n  AGENT_HOME_PROJECTION_CAPABILITY,\n  AGENT_INPUT_PREPARATION_CAPABILITY,\n  TERMINAL_PROJECTION_SELECTION_CAPABILITY,\n  HOST_MCP_TASK_CONTEXT_CAPABILITY,\n  CUSTOM_HARNESS_CAPABILITY,\n  MAILBOX_READ_AHEAD_CAPABILITY,\n  PROVIDER_PROVISIONING_CAPABILITY,\n  AGENT_MEMORY_INTENT_CAPABILITY,\n  AGENT_MEMORY_SELECTION_CAPABILITY,\n  AGENT_MEMORY_READ_IF_ADMITTED_CAPABILITY,\n  AGENT_MEMORY_READ_WRITE_IF_ADMITTED_CAPABILITY,\n  'agent-message-draft',\n  SEALED_PAYLOAD_CAPABILITY,\n  SEALED_OUTPUT_CIPHERTEXT_REF_CAPABILITY,\n  RUNTIME_FAILURE_CLASS_CAPABILITY,\n  RUNTIME_UNAVAILABLE_CAUSE_CAPABILITY,\n] as const;\n\nexport type CapabilityFlag = (typeof CAPABILITY_FLAGS)[number];\nimport {\n  AGENT_EGRESS_POLICY_CAPABILITY,\n  AGENT_EGRESS_RELIABLE_ACK_CAPABILITY,\n  AGENT_EGRESS_FRESH_SESSION_CAPABILITY,\n  AGENT_MESSAGE_EGRESS_CAPABILITY,\n  AGENT_CONTENT_WORKSPACE_READ_CAPABILITY,\n  AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY,\n  AGENT_CONTENT_ARTIFACT_READ_CAPABILITY,\n  AGENT_HOME_PROJECTION_CAPABILITY,\n  TERMINAL_PROJECTION_SELECTION_CAPABILITY,\n  HOST_MCP_TASK_CONTEXT_CAPABILITY,\n  PROVIDER_PROFILE_BINDING_CAPABILITY,\n  PROVIDER_PROVISIONING_CAPABILITY,\n  AGENT_MEMORY_INTENT_CAPABILITY,\n  AGENT_MEMORY_SELECTION_CAPABILITY,\n  AGENT_MEMORY_READ_IF_ADMITTED_CAPABILITY,\n  AGENT_MEMORY_READ_WRITE_IF_ADMITTED_CAPABILITY,\n  AGENT_INPUT_PREPARATION_CAPABILITY,\n  SEALED_PAYLOAD_CAPABILITY,\n  SEALED_OUTPUT_CIPHERTEXT_REF_CAPABILITY,\n  RUNTIME_FAILURE_CLASS_CAPABILITY,\n  RUNTIME_UNAVAILABLE_CAUSE_CAPABILITY,\n} from './capability-constants';\n","export const TASK_STATES = [\n  'Offered',\n  'Claimed',\n  'Running',\n  'AwaitApproval',\n  'Complete',\n  'Failed',\n  'Cancelled',\n] as const;\n\nexport type TaskState = (typeof TASK_STATES)[number];\n\n/**\n * Legal state transitions for a task. `Complete` / `Failed` / `Cancelled` are\n * terminal (no outgoing edges). `Running` and `AwaitApproval` form a loop:\n * the daemon can request approval mid-run and resume once the server\n * approves (or fail/cancel out of the approval wait).\n *\n * `Offered -> Failed` (M1 gap #5, \"Declined vs. Failed\"): a daemon that\n * declines an offer pre-claim (`task.decline`) reports it through the\n * existing `Failed` state rather than a new `Declined` state. A decline and\n * a post-claim failure are the same outcome from the dispatcher's point of\n * view — this attempt produced no result, `reason`/`retryable` say why and\n * whether retrying elsewhere makes sense — so reusing `Failed` keeps the\n * state machine minimal instead of forking every terminal-state consumer\n * into \"Failed or Declined, handle both\". See docs/protocol.md for the full\n * writeup.\n */\nexport const TASK_TRANSITIONS: Readonly<Record<TaskState, readonly TaskState[]>> = {\n  Offered: ['Claimed', 'Cancelled', 'Failed'],\n  Claimed: ['Running', 'Failed', 'Cancelled'],\n  Running: ['AwaitApproval', 'Complete', 'Failed', 'Cancelled'],\n  AwaitApproval: ['Running', 'Failed', 'Cancelled'],\n  Complete: [],\n  Failed: [],\n  Cancelled: [],\n};\n\n/** Whether `from -> to` is a legal transition per {@link TASK_TRANSITIONS}. */\nexport function canTransition(from: TaskState, to: TaskState): boolean {\n  return TASK_TRANSITIONS[from].includes(to);\n}\n","/**\n * The single authority for the display text of a `task.fail` `reason` (#1124).\n *\n * A runtime's stderr tail can carry credentials a runtime or proxy printed\n * while failing. The `task.fail` schema applies this to `reason` on every\n * parse, so `createEnvelope` bounds what a daemon sends (sealed or not) and\n * every decode bounds what a receiver holds. The raw tail stays local, on the\n * adapter's `RuntimeExecutionFailure`. The result is a fixed point: applying\n * it to its own output changes nothing, so a bounded envelope round-trips\n * byte-for-byte.\n *\n * Every pattern starts at a literal and its runs never backtrack into a\n * failure, so the cost stays linear in the input length.\n */\n\n/** Maximum UTF-8 bytes of a `task.fail` `reason` after normalization, truncation marker included. */\nexport const TASK_FAIL_REASON_MAX_BYTES = 2048;\n\nconst REDACTED = '[redacted]';\n\n// A secret value: a quoted string (an unclosed quote runs to the end of the\n// line), or an unquoted run. A backslash and its following character belong\n// to the value together, so an escaped quote cannot expose a secret suffix.\n// A dangling backslash in an unclosed value is consumed too. Every alternative\n// succeeds greedily without backtracking. An unquoted value never starts with `[` or `…`, so a\n// redaction or truncation marker is never mistaken for a value on a second pass.\nconst VALUE = String.raw`(?:\"(?:\\\\[^\\n]|[^\"\\\\\\n])*(?:\\\\)?\"?|'(?:\\\\[^\\n]|[^'\\\\\\n])*(?:\\\\)?'?|[^\\s\"'\\[\\u2026,;&|][^\\s\"',;&|]*)`;\n\n// Bounded runs keep a failed match from rescanning a long run at every literal.\nconst GAP = '[ \\\\t]{0,16}';\n\nconst RULES: ReadonlyArray<readonly [RegExp, string]> = [\n  // `Authorization: Bearer …`, `proxy-authorization=Basic …`, JSON `\"authorization\": \"…\"`.\n  [new RegExp(String.raw`\\b((?:proxy-)?authorization)([\"']?${GAP}[:=]${GAP})(?:(?:bearer|basic|token|digest)[ \\t]{1,16})?${VALUE}`, 'gi'), `$1$2${REDACTED}`],\n  [/\\b(bearer)[ \\t]{1,16}[A-Za-z0-9._~+/=-]{8,}/gi, `$1 ${REDACTED}`],\n  // `ANTHROPIC_API_KEY=…`, `x-api-key: …`, `GITHUB_TOKEN=…`, `client_secret: …`, `DB_PASSWORD_FILE=…`.\n  [new RegExp(String.raw`(key|token|secret|passw(?:or)?d[\\w.-]{0,64})([\"']?${GAP}[:=]${GAP})${VALUE}`, 'gi'), `$1$2${REDACTED}`],\n  // URL userinfo: `postgres://user:pass@host`, `https://token@host`.\n  [/:\\/\\/[^\\s/?#@]{1,256}@/g, `://${REDACTED}@`],\n  // Provider key shapes.\n  [/\\bsk-[A-Za-z0-9_-]{16,}/g, REDACTED],\n  [/\\bxai-[A-Za-z0-9_-]{16,}/g, REDACTED],\n  [/\\bAIza[0-9A-Za-z_-]{30,}/g, REDACTED],\n  [/\\bgh[pousr]_[A-Za-z0-9]{20,}/g, REDACTED],\n  [/\\bgithub_pat_[A-Za-z0-9_]{20,}/g, REDACTED],\n  [/\\bAKIA[0-9A-Z]{16}/g, REDACTED],\n  // JWT-like tokens.\n  [/\\beyJ[A-Za-z0-9_-]{10,}(?:\\.[A-Za-z0-9_-]*){0,2}/g, REDACTED],\n];\n\nconst encoder = new TextEncoder();\nconst decoder = new TextDecoder('utf-8');\n\nfunction redact(text: string): string {\n  let out = text;\n  for (const [pattern, replacement] of RULES) out = out.replace(pattern, replacement);\n  return out;\n}\n\n/**\n * Redact credentials from a failure reason, then cap it at\n * {@link TASK_FAIL_REASON_MAX_BYTES} UTF-8 bytes on a code-point boundary\n * with a `…[truncated N bytes]` marker, where N counts the dropped redacted\n * bytes.\n */\nexport function boundFailureReason(reason: string): string {\n  const redacted = redact(reason);\n  const bytes = encoder.encode(redacted);\n  if (bytes.length <= TASK_FAIL_REASON_MAX_BYTES) return redacted;\n  // Reserve the widest marker this input can need; the final one is no wider.\n  let keep = TASK_FAIL_REASON_MAX_BYTES - encoder.encode(`\\u2026[truncated ${bytes.length} bytes]`).length;\n  while (keep > 0 && ((bytes[keep] ?? 0) & 0xc0) === 0x80) keep -= 1;\n  return `${decoder.decode(bytes.subarray(0, keep))}\\u2026[truncated ${bytes.length - keep} bytes]`;\n}\n","/** Schema-free protocol values. Import this entry when runtime schemas are unnecessary. */\nexport * from './version';\nexport * from './task-state';\nexport * from './capability-constants';\nexport * from './failure-reason';\n\n/** Maximum raw UTF-8 content bytes in one local Host Agent-memory export; no truncation. */\nexport const AGENT_MEMORY_MAX_SNAPSHOT_BYTES = 1024 * 1024;\n/** Maximum memory files in one local Host export, including MEMORY.md. */\nexport const AGENT_MEMORY_MAX_SNAPSHOT_FILES = 128;\n\n/** The frozen wire runtime ids. Any other adapter id is a custom harness (`harnessId`). */\nexport const RUNTIME_IDS = Object.freeze(['pi', 'claude', 'codex'] as const);\n\n/**\n * Why a runtime is unavailable before claim (#1103 D6). Append-only: a cause is\n * never renamed, removed or given a new meaning. The wire reads an unknown\n * well-formed token as `unknown` and keeps it verbatim (#1121), so a newer\n * device can add one without a protocol bump. Names are snake_case, unlike the\n * kebab-case detection kinds, because the mapping is explicit and never a\n * string transformation.\n */\nexport const RUNTIME_UNAVAILABLE_CAUSES = Object.freeze([\n  /** Detection: `not-found`. */\n  'not_installed',\n  /** Detection: `not-executable`. */\n  'not_executable',\n  /** Detection: `timeout`. */\n  'probe_timeout',\n  /** Detection: `probe-failed`. */\n  'probe_failed',\n  /** Detection: `refused` / `app_server_unavailable`. */\n  'app_server_unavailable',\n  /** Detection: `refused` / `acp_unavailable`. */\n  'acp_unavailable',\n  /** Detection: `refused` / `platform_unsupported`. */\n  'platform_unsupported',\n  /** The login-shell environment capture failed (#1095). */\n  'environment_unavailable',\n  /** A Host-configured version policy blocked the installed token (#1103). */\n  'version_blocked',\n  /** The offer named an id this daemon has no adapter for. */\n  'runtime_not_configured',\n  /** The device runtime allowlist excludes the requested id. */\n  'runtime_not_allowed',\n  /** Automatic selection exhausted every candidate. */\n  'none_available',\n] as const);\n\n/** One append-only `runtime_unavailable` cause. */\nexport type RuntimeUnavailableCause = (typeof RUNTIME_UNAVAILABLE_CAUSES)[number];\n\n/** Maximum length of a served model name. */\nexport const TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH = 160;\n"]}
+{"version":3,"sources":["../src/capability-constants.ts","../src/version.ts","../src/task-state.ts","../src/failure-reason.ts","../src/constants.ts"],"names":[],"mappings":"AAWO,IAAM,8BAAA,CAAiC,EAIvC,IAAM,8BAAA,CAAiC,0BAEjC,oCAAA,CAAuC,4BAG7C,IAAM,qCAAA,CAAwC,6BAG9C,IAAM,gCAAkC,uBAExC,IAAM,uCAAA,CAA0C,+BAEhD,IAAM,wCAAA,CAA2C,gCAEjD,IAAM,sCAAA,CAAyC,8BAG/C,IAAM,gCAAA,CAAmC,4BAGnC,wCAAA,CAA2C,gCAGjD,IAAM,gCAAA,CAAmC,wBAGzC,IAAM,oCAAsC,2BAG5C,IAAM,gCAAA,CAAmC,2BAGzC,IAAM,8BAAA,CAAiC,yBAGvC,IAAM,kCAAA,CAAqC,0BAG3C,IAAM,iCAAA,CAAoC,yBAG1C,IAAM,wCAAA,CAA2C,gCAGjD,IAAM,8CAAA,CAAiD,sCAGvD,IAAM,kCAAA,CACX,4BAA4B,8BAA8B,CAAA,EAQrD,IAAM,yBAAA,CAA4B,oBAQlC,IAAM,6BAA+B,oBAOrC,IAAM,uCAAA,CAA0C,+BAMhD,IAAM,gCAAA,CAAmC,wBAGzC,IAAM,8BAAA,CAAiC,sBAUvC,IAAM,oCAAA,CAAuC,gCAOvC,uBAAA,CAA0B,CACrC,MAAA,CAAQ,OAAA,CAAS,cAAA,CAAgB,SAAA,CAAW,oBAAqB,iBAAA,CAAmB,iBAAA,CACpF,YAAA,CAAc,UAAA,CAAY,gBAAA,CAAkB,eAAA,CAAiB,gBAAiB,SAChF,EAGO,IAAM,oBAAA,CAAuB,CAAC,SAAA,CAAW,OAAO,EAGhD,IAAM,2BAAA,CAA8B,CAAC,MAAA,CAAQ,MAAA,CAAQ,YAAY,EAEjE,SAAS,yBAAA,CAA0B,KAAA,CAAuE,CAC/G,OAAO,OAAO,QAAU,QAAA,EAAY,2BAAA,CAA4B,IAAA,CAAK,IAAA,EAAQ,IAAA,GAAS,KAAK,CAC7F,CC5HO,IAAM,2BAAA,CAA8B,KACpC,IAAM,6BAAA,CAAgC,qBA2CtC,IAAM,gBAAA,CAAmB,EASzB,IAAM,6BAAA,CAAgC,yBAmBhC,yBAAA,CAA4B,iBAElC,IAAM,gBAAA,CAAmB,CAC9B,OAAA,CACA,cACA,oBAAA,CACA,mCAAA,CACA,mBAAA,CACA,qBAAA,CACA,6BAAA,CACA,8BAAA,CACA,qCACA,+BAAA,CACA,qCAAA,CACA,uCAAA,CACA,wCAAA,CACA,sCAAA,CACA,gCAAA,CACA,mCACA,wCAAA,CACA,gCAAA,CACA,yBAAA,CACA,6BAAA,CACA,gCAAA,CACA,8BAAA,CACA,iCAAA,CACA,wCAAA,CACA,8CAAA,CACA,qBAAA,CACA,yBAAA,CACA,4BAAA,CACA,uCAAA,CACA,gCAAA,CACA,+BACA,oCACF,EC5GO,IAAM,WAAA,CAAc,CACzB,SAAA,CACA,UACA,SAAA,CACA,eAAA,CACA,UAAA,CACA,QAAA,CACA,WACF,MAoBa,gBAAA,CAAsE,CACjF,OAAA,CAAS,CAAC,SAAA,CAAW,WAAA,CAAa,QAAQ,CAAA,CAC1C,OAAA,CAAS,CAAC,SAAA,CAAW,QAAA,CAAU,WAAW,EAC1C,OAAA,CAAS,CAAC,eAAA,CAAiB,UAAA,CAAY,QAAA,CAAU,WAAW,EAC5D,aAAA,CAAe,CAAC,SAAA,CAAW,QAAA,CAAU,WAAW,CAAA,CAChD,SAAU,EAAC,CACX,MAAA,CAAQ,EAAC,CACT,SAAA,CAAW,EACb,EAGO,SAAS,aAAA,CAAc,IAAA,CAAiB,EAAA,CAAwB,CACrE,OAAO,gBAAA,CAAiB,IAAI,CAAA,CAAE,QAAA,CAAS,EAAE,CAC3C,CCzBO,IAAM,0BAAA,CAA6B,KAE1C,IAAM,QAAA,CAAW,YAAA,CAQjB,IAAM,KAAA,CAAQ,MAAA,CAAO,GAAA,CAAA,mGAAA,CAAA,CAGrB,IAAM,GAAA,CAAM,cAAA,CAEZ,IAAM,KAAA,CAAkD,CAEtD,CAAC,IAAI,MAAA,CAAO,MAAA,CAAO,wCAAwC,GAAG,CAAA,IAAA,EAAO,GAAG,CAAA,8CAAA,EAAiD,KAAK,CAAA,CAAA,CAAI,IAAI,CAAA,CAAG,CAAA,IAAA,EAAO,QAAQ,CAAA,CAAE,CAAA,CAC1J,CAAC,gDAAiD,CAAA,GAAA,EAAM,QAAQ,CAAA,CAAE,CAAA,CAElE,CAAC,IAAI,MAAA,CAAO,MAAA,CAAO,GAAA,CAAA,kDAAA,EAAwD,GAAG,CAAA,IAAA,EAAO,GAAG,CAAA,CAAA,EAAI,KAAK,GAAI,IAAI,CAAA,CAAG,CAAA,IAAA,EAAO,QAAQ,CAAA,CAAE,CAAA,CAE7H,CAAC,yBAAA,CAA2B,CAAA,GAAA,EAAM,QAAQ,CAAA,CAAA,CAAG,CAAA,CAE7C,CAAC,2BAA4B,QAAQ,CAAA,CACrC,CAAC,2BAAA,CAA6B,QAAQ,CAAA,CACtC,CAAC,2BAAA,CAA6B,QAAQ,CAAA,CACtC,CAAC,+BAAA,CAAiC,QAAQ,EAC1C,CAAC,iCAAA,CAAmC,QAAQ,CAAA,CAC5C,CAAC,qBAAA,CAAuB,QAAQ,CAAA,CAEhC,CAAC,mDAAA,CAAqD,QAAQ,CAChE,CAAA,CAEA,IAAM,OAAA,CAAU,IAAI,WAAA,CACpB,IAAM,OAAA,CAAU,IAAI,WAAA,CAAY,OAAO,CAAA,CAEvC,SAAS,MAAA,CAAO,IAAA,CAAsB,CACpC,IAAI,IAAM,IAAA,CACV,IAAA,KAAW,CAAC,OAAA,CAAS,WAAW,CAAA,GAAK,MAAO,GAAA,CAAM,GAAA,CAAI,OAAA,CAAQ,OAAA,CAAS,WAAW,CAAA,CAClF,OAAO,GACT,CAQO,SAAS,kBAAA,CAAmB,MAAA,CAAwB,CACzD,MAAM,QAAA,CAAW,MAAA,CAAO,MAAM,CAAA,CAC9B,MAAM,KAAA,CAAQ,QAAQ,MAAA,CAAO,QAAQ,CAAA,CACrC,GAAI,KAAA,CAAM,MAAA,EAAU,2BAA4B,OAAO,QAAA,CAEvD,IAAI,IAAA,CAAO,0BAAA,CAA6B,OAAA,CAAQ,OAAO,CAAA,iBAAA,EAAoB,KAAA,CAAM,MAAM,CAAA,OAAA,CAAS,CAAA,CAAE,MAAA,CAClG,MAAO,IAAA,CAAO,CAAA,EAAA,CAAA,CAAO,KAAA,CAAM,IAAI,CAAA,EAAK,CAAA,EAAK,GAAA,IAAU,IAAM,IAAA,EAAQ,CAAA,CACjE,OAAO,CAAA,EAAG,OAAA,CAAQ,MAAA,CAAO,MAAM,QAAA,CAAS,CAAA,CAAG,IAAI,CAAC,CAAC,CAAA,iBAAA,EAAoB,MAAM,MAAA,CAAS,IAAI,CAAA,OAAA,CAC1F,CClEO,IAAM,+BAAA,CAAkC,IAAA,CAAO,KAE/C,IAAM,+BAAA,CAAkC,IAGxC,IAAM,WAAA,CAAc,MAAA,CAAO,OAAO,CAAC,IAAA,CAAM,QAAA,CAAU,OAAO,CAAU,MAU9D,0BAAA,CAA6B,MAAA,CAAO,MAAA,CAAO,CAEtD,eAAA,CAEA,gBAAA,CAEA,gBAEA,cAAA,CAEA,wBAAA,CAEA,iBAAA,CAEA,sBAAA,CAEA,yBAAA,CAEA,iBAAA,CAEA,wBAAA,CAEA,qBAAA,CAEA,gBACF,CAAU,EAMH,IAAM,yCAAA,CAA4C","file":"constants.js","sourcesContent":["/**\n * The ONE version of the input-preparation contract, shared by this relay wire\n * (the `agent.input.preparation` payload and the completion receipt summary)\n * and by the device-local request, receipt and artifact\n * (`@byok-sdk/client`'s `INPUT_PREPARATION_VERSION`, which is this value).\n *\n * The relay wire carries no version field of its own, so a version change is\n * made visible where admission actually happens: in the capability token\n * below. See `INPUT_PREPARATION_VERSION` in the client for what each version\n * changed.\n */\nexport const INPUT_PREPARATION_WIRE_VERSION = 9 as const;\n\n\n/** Additive daemon capability names. Server/cloud admission consumes these exactly. */\nexport const AGENT_EGRESS_POLICY_CAPABILITY = 'agent-egress-policy' as const;\n\nexport const AGENT_EGRESS_RELIABLE_ACK_CAPABILITY = 'agent-egress-reliable-ack' as const;\n\n/** Admits the distinct offer whose runtime mints its session only after start. */\nexport const AGENT_EGRESS_FRESH_SESSION_CAPABILITY = 'agent-egress-fresh-session' as const;\n\n/** Admits the distinct Agent-authored message lane; activity policy remains independent. */\nexport const AGENT_MESSAGE_EGRESS_CAPABILITY = 'agent-message-egress' as const;\n\nexport const AGENT_CONTENT_WORKSPACE_READ_CAPABILITY = 'agent-content-workspace-read' as const;\n\nexport const AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY = 'agent-content-transcript-read' as const;\n\nexport const AGENT_CONTENT_ARTIFACT_READ_CAPABILITY = 'agent-content-artifact-read' as const;\n\n/** Capability required before a task-free Agent-home projection is admitted. */\nexport const AGENT_HOME_PROJECTION_CAPABILITY = 'agent-home-projection' as const;\n\n/** Capability required before an offer may select terminal projection behavior. */\nexport const TERMINAL_PROJECTION_SELECTION_CAPABILITY = 'terminal-projection-selection' as const;\n\n/** Contract §8.1's capability gate for `byok-task-assertion-v1` tool authority. */\nexport const HOST_MCP_TASK_CONTEXT_CAPABILITY = 'host-mcp-task-context' as const;\n\n/** Daemon capability required before an exact local provider profile may be offered. */\nexport const PROVIDER_PROFILE_BINDING_CAPABILITY = 'provider-profile-binding' as const;\n\n/** Device capability required before a Host may enqueue `provider.provisioning.available`. */\nexport const PROVIDER_PROVISIONING_CAPABILITY = 'provider-provisioning.v1' as const;\n\n/** Device capability required before a Host may enqueue `agent.memory.intent.available`. */\nexport const AGENT_MEMORY_INTENT_CAPABILITY = 'agent-memory-intent.v1' as const;\n\n/** Capability required before the optional hosted Agent-memory projection can be used. */\nexport const AGENT_MEMORY_PROJECTION_CAPABILITY = 'agent.memory.projection' as const;\n\n/** Device capability required before an ordinary Agent offer may carry `agentMemory`. */\nexport const AGENT_MEMORY_SELECTION_CAPABILITY = 'agent-memory-selection' as const;\n\n/** Device capability required before an ordinary Agent offer may carry `agentMemory: 'read-if-admitted'`. */\nexport const AGENT_MEMORY_READ_IF_ADMITTED_CAPABILITY = 'agent-memory-read-if-admitted' as const;\n\n/** Device capability required before an ordinary Agent offer may carry `agentMemory: 'read-write-if-admitted'`. */\nexport const AGENT_MEMORY_READ_WRITE_IF_ADMITTED_CAPABILITY = 'agent-memory-read-write-if-admitted' as const;\n\n/** Exact capability of the single input-preparation wire authority. */\nexport const AGENT_INPUT_PREPARATION_CAPABILITY =\n  `agent-input-preparation-v${INPUT_PREPARATION_WIRE_VERSION}` as const;\n\n/**\n * Sealed payload v1 (#654). A device advertises it before a Host may send it\n * a sealed offer or steer; a server advertises it before a device may send it\n * sealed task output or a sealed decline code. Both gates read\n * `WIRE_ADDITIONS`.\n */\nexport const SEALED_PAYLOAD_CAPABILITY = 'sealed-payload-v1' as const;\n\n/**\n * Sealed payload v2 (#1045): the `agent-message` and `memory-projection`\n * categories. A device advertises it before a Host may send it an offer whose\n * `sealing` names either category, or a sealed message disposition; a server\n * advertises it before a device may send it a sealed `agent.message.publish`.\n */\nexport const SEALED_PAYLOAD_V2_CAPABILITY = 'sealed-payload-v2' as const;\n\n/**\n * A server advertises it before a device may send a sealed task output that\n * names its ciphertext blob (`sealed.ciphertextRef`) instead of carrying it\n * inline. The server then holds the blob for the life of the task.\n */\nexport const SEALED_OUTPUT_CIPHERTEXT_REF_CAPABILITY = 'sealed-output-ciphertext-ref' as const;\n\n/**\n * A server advertises it before a device may send `task.fail.failure`, the\n * machine-readable runtime failure class (#869).\n */\nexport const RUNTIME_FAILURE_CLASS_CAPABILITY = 'runtime-failure-class' as const;\n\n/** A server advertises it before a device may send `task.fail.failure.scope` (#1271). */\nexport const RUNTIME_QUOTA_SCOPE_CAPABILITY = 'runtime-quota-scope' as const;\n\n/**\n * The connection understands the typed pre-claim runtime-unavailable cause\n * (#1103 D8): `task.decline.runtimeUnavailable`, `conn.hello.runtimeUnavailable`\n * and the presence projection. A daemon declares it when it emits the cause.\n * Older peers ignore the unknown flag; absence means the peer may not read\n * the cause, so a Host falls back to `retryable` and treats the cause as\n * unknown. It never infers availability or allow from absence.\n */\nexport const RUNTIME_UNAVAILABLE_CAUSE_CAPABILITY = 'runtime-unavailable-cause' as const;\n/**\n * The closed classes of `task.fail.failure.class`: the vendored OAR\n * `FailureClass` values. `unknown` means the runtime gave no structured\n * evidence. Single value authority shared by schema validation and\n * schema-free consumers.\n */\nexport const RUNTIME_FAILURE_CLASSES = [\n  'auth', 'quota', 'rate_limited', 'billing', 'model_unavailable', 'input_too_large', 'invalid_request',\n  'overloaded', 'provider', 'runtime_exited', 'limit_reached', 'output_schema', 'unknown',\n] as const;\n\n/** The values of a `quota` failure's `scope` (#1271), shared by schema and schema-free consumers. */\nexport const RUNTIME_QUOTA_SCOPES = ['account', 'model'] as const;\n\n/** Single value authority shared by schema validation and schema-free consumers. */\nexport const PREPARED_AGENT_MEMORY_MODES = ['none', 'read', 'read-write'] as const;\n\nexport function isPreparedAgentMemoryMode(value: unknown): value is (typeof PREPARED_AGENT_MEMORY_MODES)[number] {\n  return typeof value === 'string' && PREPARED_AGENT_MEMORY_MODES.some(mode => mode === value);\n}\n","/** Bounded volatile navigation; only cursor is a durable acknowledgement. */\nexport const MAILBOX_READ_AHEAD_MAX_SEQS = 4096;\nexport const MAILBOX_READ_AHEAD_CAPABILITY = 'mailbox-read-ahead';\n\n/**\n * Wire protocol version. Every v4 change is a version bump, a gated addition\n * or a strip-safe addition: see docs/protocol.md \"Freeze rule\", which is the\n * one statement of the rule, and `src/wire-additions.ts`, which declares the\n * receiver-capability gates and additions. No v4 release has been published\n * yet, so `src/__tests__/compat.test.ts` has no published v4 decoder to prove\n * additions against; cross-release gates stay unproven until one exists.\n *\n * v4 completes the ADR-034 cutover and retires the approval paths kept for\n * pre-M5 peers. It removes the v3 handshake answer, the runtime-only offers\n * (with and without toolsets) with their sealed twins, and the\n * `strict-agent-only` flag: every offer is Agent-bound. `approvalId` is\n * required on `task.await_approval`, `task.approve` and `task.reject`, so a\n * decision resolves only the approval it names. `task.approval_resolved` is\n * baseline: the daemon reports every locally resolved approval, and the\n * server no longer infers one from later task activity. The three approval\n * capability flags of v3 are gone. A v3 envelope is rejected; there is no v3 reader. Drain, then\n * upgrade server and client together.\n *\n * v3 made `schema` required on the `terminalProjection.mode:\n * 'result-document'` arm (`terminal-projection.ts`, `result-schema.ts`): the\n * offer freezes the outcome schema, and the outcome reaches the Host only as\n * `task.complete.document`. That narrows a strict shape, so it is a wire\n * major. A v2 envelope is rejected; there is no v2 reader and no capability\n * negotiation between the two result-document shapes. Drain, then upgrade\n * server and client together. Every addition v2 declared is part of the v3\n * baseline, and the v2 `result-document` capability flag is gone: every v3\n * server keeps `task.complete.document`.\n *\n * v2 removed the task offer's `policy` (`PermissionPolicy`), the runtime\n * capability `permissionModes` and the input-preparation `permissionMode`.\n * Sessions run without an SDK permission gate; each local agent keeps its\n * own guardrails. A v1 envelope is rejected; there is no v1 reader.\n * v2 also removed the egress policy's `metadata-status` activity mode, its\n * `activity.mode` field and the `sanitizer_rejected` drop reason. Agent\n * egress goes to the Host as the runtime produced it.\n * v2 also removed the input-preparation artifact's `toolImplementationKinds`\n * and the readiness reason `executor_identity_unproven`. The SDK does not\n * attest tool executables. The artifact names its counted tools in\n * `toolNames`.\n */\nexport const PROTOCOL_VERSION = 4;\n\n/**\n * The device runs `homeAccess: 'memory-reader'` Agent offers: each reader\n * Attempt gets its own run directory under the Agent home, and readers are\n * counted apart from the one writer. The Agent offers are strict, so a host\n * must refuse a reader offer to a device without this flag before it creates\n * the task.\n */\nexport const AGENT_HOME_READERS_CAPABILITY = 'agent-home-readers' as const;\n\n/**\n * Capability flags. The daemon sends its flags in `conn.hello`; the server\n * sends its own on every long-poll response (`EventsPollResponse`). Additional\n * flags may be introduced without a protocol version bump; unrecognized flags\n * must be ignored by both sides.\n *\n * `dispatch-selection` (additive-minor) is a correctness gate for the\n * optional offer `dispatchSelection` control field. An older v1 daemon\n * legally strips unknown optional fields, so a server must never send an\n * authoritative provider/model selection unless the target connection\n * advertises this flag. Absence means reject before task creation, not send\n * an offer that could reach a different provider.\n *\n * `toolset-selection` (additive-minor) means the daemon understands an\n * offer's `requiredToolsets` and can resolve its logical ids against local\n * MCP configuration.\n */\nexport const CUSTOM_HARNESS_CAPABILITY = 'custom-harness' as const;\n\nexport const CAPABILITY_FLAGS = [\n  'steer',\n  'blob-upload',\n  'dispatch-selection',\n  PROVIDER_PROFILE_BINDING_CAPABILITY,\n  'toolset-selection',\n  'agent-home-contract',\n  AGENT_HOME_READERS_CAPABILITY,\n  AGENT_EGRESS_POLICY_CAPABILITY,\n  AGENT_EGRESS_RELIABLE_ACK_CAPABILITY,\n  AGENT_MESSAGE_EGRESS_CAPABILITY,\n  AGENT_EGRESS_FRESH_SESSION_CAPABILITY,\n  AGENT_CONTENT_WORKSPACE_READ_CAPABILITY,\n  AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY,\n  AGENT_CONTENT_ARTIFACT_READ_CAPABILITY,\n  AGENT_HOME_PROJECTION_CAPABILITY,\n  AGENT_INPUT_PREPARATION_CAPABILITY,\n  TERMINAL_PROJECTION_SELECTION_CAPABILITY,\n  HOST_MCP_TASK_CONTEXT_CAPABILITY,\n  CUSTOM_HARNESS_CAPABILITY,\n  MAILBOX_READ_AHEAD_CAPABILITY,\n  PROVIDER_PROVISIONING_CAPABILITY,\n  AGENT_MEMORY_INTENT_CAPABILITY,\n  AGENT_MEMORY_SELECTION_CAPABILITY,\n  AGENT_MEMORY_READ_IF_ADMITTED_CAPABILITY,\n  AGENT_MEMORY_READ_WRITE_IF_ADMITTED_CAPABILITY,\n  'agent-message-draft',\n  SEALED_PAYLOAD_CAPABILITY,\n  SEALED_PAYLOAD_V2_CAPABILITY,\n  SEALED_OUTPUT_CIPHERTEXT_REF_CAPABILITY,\n  RUNTIME_FAILURE_CLASS_CAPABILITY,\n  RUNTIME_QUOTA_SCOPE_CAPABILITY,\n  RUNTIME_UNAVAILABLE_CAUSE_CAPABILITY,\n] as const;\n\nexport type CapabilityFlag = (typeof CAPABILITY_FLAGS)[number];\nimport {\n  AGENT_EGRESS_POLICY_CAPABILITY,\n  AGENT_EGRESS_RELIABLE_ACK_CAPABILITY,\n  AGENT_EGRESS_FRESH_SESSION_CAPABILITY,\n  AGENT_MESSAGE_EGRESS_CAPABILITY,\n  AGENT_CONTENT_WORKSPACE_READ_CAPABILITY,\n  AGENT_CONTENT_TRANSCRIPT_READ_CAPABILITY,\n  AGENT_CONTENT_ARTIFACT_READ_CAPABILITY,\n  AGENT_HOME_PROJECTION_CAPABILITY,\n  TERMINAL_PROJECTION_SELECTION_CAPABILITY,\n  HOST_MCP_TASK_CONTEXT_CAPABILITY,\n  PROVIDER_PROFILE_BINDING_CAPABILITY,\n  PROVIDER_PROVISIONING_CAPABILITY,\n  AGENT_MEMORY_INTENT_CAPABILITY,\n  AGENT_MEMORY_SELECTION_CAPABILITY,\n  AGENT_MEMORY_READ_IF_ADMITTED_CAPABILITY,\n  AGENT_MEMORY_READ_WRITE_IF_ADMITTED_CAPABILITY,\n  AGENT_INPUT_PREPARATION_CAPABILITY,\n  SEALED_PAYLOAD_CAPABILITY,\n  SEALED_PAYLOAD_V2_CAPABILITY,\n  SEALED_OUTPUT_CIPHERTEXT_REF_CAPABILITY,\n  RUNTIME_FAILURE_CLASS_CAPABILITY,\n  RUNTIME_QUOTA_SCOPE_CAPABILITY,\n  RUNTIME_UNAVAILABLE_CAUSE_CAPABILITY,\n} from './capability-constants';\n","export const TASK_STATES = [\n  'Offered',\n  'Claimed',\n  'Running',\n  'AwaitApproval',\n  'Complete',\n  'Failed',\n  'Cancelled',\n] as const;\n\nexport type TaskState = (typeof TASK_STATES)[number];\n\n/**\n * Legal state transitions for a task. `Complete` / `Failed` / `Cancelled` are\n * terminal (no outgoing edges). `Running` and `AwaitApproval` form a loop:\n * the daemon can request approval mid-run and resume once the server\n * approves (or fail/cancel out of the approval wait).\n *\n * `Offered -> Failed` (M1 gap #5, \"Declined vs. Failed\"): a daemon that\n * declines an offer pre-claim (`task.decline`) reports it through the\n * existing `Failed` state rather than a new `Declined` state. A decline and\n * a post-claim failure are the same outcome from the dispatcher's point of\n * view — this attempt produced no result, `reason`/`retryable` say why and\n * whether retrying elsewhere makes sense — so reusing `Failed` keeps the\n * state machine minimal instead of forking every terminal-state consumer\n * into \"Failed or Declined, handle both\". See docs/protocol.md for the full\n * writeup.\n */\nexport const TASK_TRANSITIONS: Readonly<Record<TaskState, readonly TaskState[]>> = {\n  Offered: ['Claimed', 'Cancelled', 'Failed'],\n  Claimed: ['Running', 'Failed', 'Cancelled'],\n  Running: ['AwaitApproval', 'Complete', 'Failed', 'Cancelled'],\n  AwaitApproval: ['Running', 'Failed', 'Cancelled'],\n  Complete: [],\n  Failed: [],\n  Cancelled: [],\n};\n\n/** Whether `from -> to` is a legal transition per {@link TASK_TRANSITIONS}. */\nexport function canTransition(from: TaskState, to: TaskState): boolean {\n  return TASK_TRANSITIONS[from].includes(to);\n}\n","/**\n * The single authority for the display text of a `task.fail` `reason` (#1124).\n *\n * A runtime's stderr tail can carry credentials a runtime or proxy printed\n * while failing. The `task.fail` schema applies this to `reason` on every\n * parse, so `createEnvelope` bounds what a daemon sends (sealed or not) and\n * every decode bounds what a receiver holds. The raw tail stays local, on the\n * adapter's `RuntimeExecutionFailure`. The result is a fixed point: applying\n * it to its own output changes nothing, so a bounded envelope round-trips\n * byte-for-byte.\n *\n * Every pattern starts at a literal and its runs never backtrack into a\n * failure, so the cost stays linear in the input length.\n */\n\n/** Maximum UTF-8 bytes of a `task.fail` `reason` after normalization, truncation marker included. */\nexport const TASK_FAIL_REASON_MAX_BYTES = 2048;\n\nconst REDACTED = '[redacted]';\n\n// A secret value: a quoted string (an unclosed quote runs to the end of the\n// line), or an unquoted run. A backslash and its following character belong\n// to the value together, so an escaped quote cannot expose a secret suffix.\n// A dangling backslash in an unclosed value is consumed too. Every alternative\n// succeeds greedily without backtracking. An unquoted value never starts with `[` or `…`, so a\n// redaction or truncation marker is never mistaken for a value on a second pass.\nconst VALUE = String.raw`(?:\"(?:\\\\[^\\n]|[^\"\\\\\\n])*(?:\\\\)?\"?|'(?:\\\\[^\\n]|[^'\\\\\\n])*(?:\\\\)?'?|[^\\s\"'\\[\\u2026,;&|][^\\s\"',;&|]*)`;\n\n// Bounded runs keep a failed match from rescanning a long run at every literal.\nconst GAP = '[ \\\\t]{0,16}';\n\nconst RULES: ReadonlyArray<readonly [RegExp, string]> = [\n  // `Authorization: Bearer …`, `proxy-authorization=Basic …`, JSON `\"authorization\": \"…\"`.\n  [new RegExp(String.raw`\\b((?:proxy-)?authorization)([\"']?${GAP}[:=]${GAP})(?:(?:bearer|basic|token|digest)[ \\t]{1,16})?${VALUE}`, 'gi'), `$1$2${REDACTED}`],\n  [/\\b(bearer)[ \\t]{1,16}[A-Za-z0-9._~+/=-]{8,}/gi, `$1 ${REDACTED}`],\n  // `ANTHROPIC_API_KEY=…`, `x-api-key: …`, `GITHUB_TOKEN=…`, `client_secret: …`, `DB_PASSWORD_FILE=…`.\n  [new RegExp(String.raw`(key|token|secret|passw(?:or)?d[\\w.-]{0,64})([\"']?${GAP}[:=]${GAP})${VALUE}`, 'gi'), `$1$2${REDACTED}`],\n  // URL userinfo: `postgres://user:pass@host`, `https://token@host`.\n  [/:\\/\\/[^\\s/?#@]{1,256}@/g, `://${REDACTED}@`],\n  // Provider key shapes.\n  [/\\bsk-[A-Za-z0-9_-]{16,}/g, REDACTED],\n  [/\\bxai-[A-Za-z0-9_-]{16,}/g, REDACTED],\n  [/\\bAIza[0-9A-Za-z_-]{30,}/g, REDACTED],\n  [/\\bgh[pousr]_[A-Za-z0-9]{20,}/g, REDACTED],\n  [/\\bgithub_pat_[A-Za-z0-9_]{20,}/g, REDACTED],\n  [/\\bAKIA[0-9A-Z]{16}/g, REDACTED],\n  // JWT-like tokens.\n  [/\\beyJ[A-Za-z0-9_-]{10,}(?:\\.[A-Za-z0-9_-]*){0,2}/g, REDACTED],\n];\n\nconst encoder = new TextEncoder();\nconst decoder = new TextDecoder('utf-8');\n\nfunction redact(text: string): string {\n  let out = text;\n  for (const [pattern, replacement] of RULES) out = out.replace(pattern, replacement);\n  return out;\n}\n\n/**\n * Redact credentials from a failure reason, then cap it at\n * {@link TASK_FAIL_REASON_MAX_BYTES} UTF-8 bytes on a code-point boundary\n * with a `…[truncated N bytes]` marker, where N counts the dropped redacted\n * bytes.\n */\nexport function boundFailureReason(reason: string): string {\n  const redacted = redact(reason);\n  const bytes = encoder.encode(redacted);\n  if (bytes.length <= TASK_FAIL_REASON_MAX_BYTES) return redacted;\n  // Reserve the widest marker this input can need; the final one is no wider.\n  let keep = TASK_FAIL_REASON_MAX_BYTES - encoder.encode(`\\u2026[truncated ${bytes.length} bytes]`).length;\n  while (keep > 0 && ((bytes[keep] ?? 0) & 0xc0) === 0x80) keep -= 1;\n  return `${decoder.decode(bytes.subarray(0, keep))}\\u2026[truncated ${bytes.length - keep} bytes]`;\n}\n","/** Schema-free protocol values. Import this entry when runtime schemas are unnecessary. */\nexport * from './version';\nexport * from './task-state';\nexport * from './capability-constants';\nexport * from './failure-reason';\n\n/** Maximum raw UTF-8 content bytes in one local Host Agent-memory export; no truncation. */\nexport const AGENT_MEMORY_MAX_SNAPSHOT_BYTES = 1024 * 1024;\n/** Maximum memory files in one local Host export, including MEMORY.md. */\nexport const AGENT_MEMORY_MAX_SNAPSHOT_FILES = 128;\n\n/** The frozen wire runtime ids. Any other adapter id is a custom harness (`harnessId`). */\nexport const RUNTIME_IDS = Object.freeze(['pi', 'claude', 'codex'] as const);\n\n/**\n * Why a runtime is unavailable before claim (#1103 D6). Append-only: a cause is\n * never renamed, removed or given a new meaning. The wire reads an unknown\n * well-formed token as `unknown` and keeps it verbatim (#1121), so a newer\n * device can add one without a protocol bump. Names are snake_case, unlike the\n * kebab-case detection kinds, because the mapping is explicit and never a\n * string transformation.\n */\nexport const RUNTIME_UNAVAILABLE_CAUSES = Object.freeze([\n  /** Detection: `not-found`. */\n  'not_installed',\n  /** Detection: `not-executable`. */\n  'not_executable',\n  /** Detection: `timeout`. */\n  'probe_timeout',\n  /** Detection: `probe-failed`. */\n  'probe_failed',\n  /** Detection: `refused` / `app_server_unavailable`. */\n  'app_server_unavailable',\n  /** Detection: `refused` / `acp_unavailable`. */\n  'acp_unavailable',\n  /** Detection: `refused` / `platform_unsupported`. */\n  'platform_unsupported',\n  /** The login-shell environment capture failed (#1095). */\n  'environment_unavailable',\n  /** A Host-configured version policy blocked the installed token (#1103). */\n  'version_blocked',\n  /** The offer named an id this daemon has no adapter for. */\n  'runtime_not_configured',\n  /** The device runtime allowlist excludes the requested id. */\n  'runtime_not_allowed',\n  /** Automatic selection exhausted every candidate. */\n  'none_available',\n] as const);\n\n/** One append-only `runtime_unavailable` cause. */\nexport type RuntimeUnavailableCause = (typeof RUNTIME_UNAVAILABLE_CAUSES)[number];\n\n/** Maximum length of a served model name. */\nexport const TERMINAL_INFERENCE_USAGE_MODEL_MAX_LENGTH = 160;\n"]}

package/dist/http-api.d.ts

@@ -691,7 +691,7 @@ export declare const InputPreparationStatusQuerySchema: z.ZodObject<{
     profileRevision: z.ZodString;
 }, z.core.$strict>;
 export type InputPreparationStatusQuery = z.infer<typeof InputPreparationStatusQuerySchema>;
-export declare const AgentMemoryProjectionCommitRequestSchema: z.ZodObject<{
+export declare const AgentMemoryProjectionCommitRequestSchema: z.ZodUnion<readonly [z.ZodObject<{
     taskId: z.ZodString;
     agentRef: z.ZodObject<{
         agentId: z.ZodString;
@@ -713,15 +713,84 @@ export declare const AgentMemoryProjectionCommitRequestSchema: z.ZodObject<{
         redactedByteCount: z.ZodNumber;
         redactedBytes: z.ZodString;
     }, z.core.$strict>;
-}, z.core.$strict>;
+    sealed: z.ZodOptional<z.ZodNever>;
+}, z.core.$strict>, z.ZodObject<{
+    taskId: z.ZodString;
+    agentRef: z.ZodObject<{
+        agentId: z.ZodString;
+        profileRevision: z.ZodString;
+    }, z.core.$strict>;
+    sessionRef: z.ZodString;
+    runtimeId: z.ZodEnum<{
+        claude: "claude";
+        codex: "codex";
+        pi: "pi";
+    }>;
+    grantRef: z.ZodString;
+    writerEpoch: z.ZodNumber;
+    sourceSeq: z.ZodNumber;
+    mutationId: z.ZodUUID;
+    policyRevision: z.ZodString;
+    sealed: z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        suite: z.ZodLiteral<"byok-sealed-v1.hkdf-sha256.aes-256-gcm">;
+        category: z.ZodLiteral<"memory-projection">;
+        scope: z.ZodObject<{
+            id: z.ZodString;
+            epoch: z.ZodNumber;
+            keyId: z.ZodString;
+        }, z.core.$strict>;
+        chainHead: z.ZodObject<{
+            seq: z.ZodNumber;
+            hash: z.ZodString;
+        }, z.core.$strict>;
+        sender: z.ZodString;
+        salt: z.ZodString;
+        nonce: z.ZodString;
+        paddedLength: z.ZodNumber;
+        contentMac: z.ZodString;
+        ciphertext: z.ZodOptional<z.ZodString>;
+        ciphertextRef: z.ZodOptional<z.ZodObject<{
+            blobId: z.ZodString;
+            contentHash: z.ZodString;
+            size: z.ZodNumber;
+            contentType: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    snapshot: z.ZodOptional<z.ZodNever>;
+}, z.core.$strict>]>;
 export type AgentMemoryProjectionCommitRequest = z.infer<typeof AgentMemoryProjectionCommitRequestSchema>;
-export declare const AgentMemoryProjectionCommitResponseSchema: z.ZodObject<{
+export declare const AgentMemoryProjectionCommitResponseSchema: z.ZodUnion<readonly [z.ZodObject<{
+    taskId: z.ZodString;
+    agentRef: z.ZodObject<{
+        agentId: z.ZodString;
+        profileRevision: z.ZodString;
+    }, z.core.$strict>;
+    sessionRef: z.ZodString;
+    runtimeId: z.ZodEnum<{
+        claude: "claude";
+        codex: "codex";
+        pi: "pi";
+    }>;
+    grantRef: z.ZodString;
+    writerEpoch: z.ZodNumber;
+    sourceSeq: z.ZodNumber;
+    mutationId: z.ZodUUID;
+    policyRevision: z.ZodString;
     outcome: z.ZodEnum<{
         accepted: "accepted";
         idempotent: "idempotent";
     }>;
     tenantId: z.ZodString;
     deviceId: z.ZodString;
+    redactedHash: z.ZodString;
+    redactedByteCount: z.ZodNumber;
+    metering: z.ZodObject<{
+        meteringReceiptId: z.ZodUUID;
+        acceptedRedactedBytes: z.ZodNumber;
+        recordedAt: z.ZodISODateTime;
+    }, z.core.$strict>;
+}, z.core.$strict>, z.ZodObject<{
     taskId: z.ZodString;
     agentRef: z.ZodObject<{
         agentId: z.ZodString;
@@ -738,14 +807,20 @@ export declare const AgentMemoryProjectionCommitResponseSchema: z.ZodObject<{
     sourceSeq: z.ZodNumber;
     mutationId: z.ZodUUID;
     policyRevision: z.ZodString;
-    redactedHash: z.ZodString;
-    redactedByteCount: z.ZodNumber;
+    outcome: z.ZodEnum<{
+        accepted: "accepted";
+        idempotent: "idempotent";
+    }>;
+    tenantId: z.ZodString;
+    deviceId: z.ZodString;
+    contentMac: z.ZodString;
+    paddedLength: z.ZodNumber;
     metering: z.ZodObject<{
         meteringReceiptId: z.ZodUUID;
-        acceptedRedactedBytes: z.ZodNumber;
+        acceptedPaddedBytes: z.ZodNumber;
         recordedAt: z.ZodISODateTime;
     }, z.core.$strict>;
-}, z.core.$strict>;
+}, z.core.$strict>]>;
 export type AgentMemoryProjectionCommitResponse = z.infer<typeof AgentMemoryProjectionCommitResponseSchema>;
 /** `POST /byok/pair` — one-time device pairing (§6). */
 export declare const BYOK_PAIR_PATH = "/byok/pair";