@byollm/protocol 0.1.0-alpha.98 → 0.1.0

package/dist/index.js

@@ -9,14 +9,45 @@ import {
   ConsoleStdout,
   ENVELOPE_BODY_VERSION,
   PublicIdentity,
+  consoleDataBytes,
   consoleEnvelope,
   consoleOrder,
+  decodeConsoleData,
   decodeEnvelopeInner,
+  encodeConsoleData,
   encodeEnvelopeInner,
   envelopeSignedBody,
   fromBase64Url,
   toBase64Url
-} from "./chunk-W7Q7DKQ6.js";
+} from "./chunk-J3HTAGMX.js";
+
+// src/hub-fence.ts
+var HUB_FENCE = "byollm.cloud sees only what routing and metering need: which devices and sites are connected, each job's kind, size, and outcome, and timestamps. Never prompts, never answers, never credentials.";
+var HUB_FENCE_CLAUSES = Object.freeze([
+  {
+    says: "which devices and sites are connected",
+    covers: Object.freeze(["owner_id", "site_id", "member_id"])
+  },
+  {
+    says: "each job's kind, size, and outcome",
+    covers: Object.freeze(["kind", "size_class", "disposition", "bytes"])
+  },
+  {
+    says: "and timestamps",
+    covers: Object.freeze(["at", "month", "updated_at"])
+  },
+  /*
+   * Ruled plumbing, not a new fact about a person — Todd, 2026-09-04.
+   *
+   * Named here rather than silently tolerated. A column exempted by a ruling
+   * and a column nobody noticed look identical to a check that just skips
+   * them, and only one of those is a decision.
+   */
+  {
+    says: "(metering plumbing, ruled unenumerated)",
+    covers: Object.freeze(["id", "job_id", "price_version"])
+  }
+]);
 
 // src/wire.ts
 import { z as z9 } from "zod";
@@ -885,6 +916,12 @@ var ClaimedJob = z7.object({
   deadlineAt: z7.number().int().positive().optional(),
   lease: Lease
 }).strict();
+var StopReasonSchema = z7.enum([
+  "end",
+  "length",
+  "stop-sequence",
+  "unknown"
+]);
 var ResultProvenance = z7.object({
   /** The audience the job ran under. */
   audience: Audience,
@@ -897,10 +934,33 @@ var ResultProvenance = z7.object({
   /** The model the runner reports having used. */
   model: z7.string().min(1),
   /**
-   * False only for `self` jobs. When true the app MUST treat `text` as
+   * False only for `private` jobs. When true the app MUST treat `text` as
    * untrusted third-party content.
    */
-  untrusted: z7.boolean()
+  untrusted: z7.boolean(),
+  /**
+   * Why generation stopped, carried from the sealed `ran` — B260.
+   *
+   * It was sealed by the device, opened at the site, used to build this
+   * object, and **dropped**: `provenanceFor` took five fields and `stop` was
+   * not one of them, on either lane. So no site could ever see it, and a
+   * `length` result — an answer cut off mid-thought — arrived
+   * indistinguishable from a complete one. Kevin's team found it on a
+   * book-translation pipeline, which is the difference between shipping a
+   * chapter and shipping half of one without knowing.
+   *
+   * Optional here because it is optional there, and for the same reason:
+   * absent exactly where it would be a fact about nothing.
+   */
+  stop: StopReasonSchema.optional(),
+  /**
+   * Whether the adapter could report a stop signal at all — carried for the
+   * reason {@link RunMetadata.stopReported} gives: `unknown` is two facts,
+   * and a site told only `unknown` says "we do not know why this stopped"
+   * for a `claude-cli` job forever, which is true, and for a
+   * `content_filter` result, which is not the same thing at all.
+   */
+  stopReported: z7.boolean().optional()
 }).strict();
 function provenanceFor(input) {
   return {
@@ -909,15 +969,14 @@ function provenanceFor(input) {
     runnerOwner: input.runnerOwner,
     backendClass: input.backendClass,
     model: input.model,
-    untrusted: input.audience !== "private"
+    untrusted: input.audience !== "private",
+    /* Spread rather than assigned: `exactOptionalPropertyTypes` makes an
+       explicit `undefined` a different thing from an absent key, and this
+       object is `.strict()`. */
+    ...input.stop === void 0 ? {} : { stop: input.stop },
+    ...input.stopReported === void 0 ? {} : { stopReported: input.stopReported }
   };
 }
-var StopReasonSchema = z7.enum([
-  "end",
-  "length",
-  "stop-sequence",
-  "unknown"
-]);
 var RunMetadata = z7.object({
   /** Which model actually served it. */
   model: z7.string().min(1),
@@ -1270,7 +1329,7 @@ async function open(input) {
 }
 
 // src/wire.ts
-var PROTOCOL_VERSION = "1";
+var PROTOCOL_VERSION = "2";
 var SUPPORTED_PROTOCOL_VERSIONS = Object.freeze([
   PROTOCOL_VERSION
 ]);
@@ -1507,9 +1566,7 @@ var HeartbeatRequest = z9.object({
    * Lease ids rather than job ids, so a replayed heartbeat cannot renew a
    * grant the runner no longer holds — see {@link Lease.id}.
    */
-  activeLeases: z9.array(GrantRef),
-  /** True while the owner has the daemon paused; the server stops offering work. */
-  paused: z9.boolean()
+  activeLeases: z9.array(GrantRef)
 }).strict();
 var HeartbeatResponse = z9.object({
   /**
@@ -2178,6 +2235,15 @@ var PurposeKey = z11.string().regex(
   /^[a-z0-9][a-z0-9-]*$/,
   "a purpose key is a lowercase slug \u2014 letters, digits and hyphens"
 ).max(64);
+var PurposeRouting = z11.enum([
+  "user-choice",
+  "site-fixed",
+  "user-first-with-fallback"
+]);
+var DEFAULT_ROUTING = "user-choice";
+function routingOf(purpose) {
+  return purpose.routing ?? DEFAULT_ROUTING;
+}
 var Purpose = z11.object({
   /**
    * What a person reads on the consent screen. The only rendered field.
@@ -2198,7 +2264,16 @@ var Purpose = z11.object({
    */
   kinds: z11.array(JobKind).min(1).max(JOB_KINDS.length).refine((kinds) => new Set(kinds).size === kinds.length, {
     message: "a purpose lists each kind once"
-  })
+  }),
+  /**
+   * How this purpose is routed — RESERVED, validated, not acted on (B236).
+   *
+   * Optional rather than defaulted, so that a manifest without it parses to
+   * a manifest without it. See {@link PurposeRouting} for why a key nothing
+   * reads is worth adding before launch, and {@link routingOf} for the one
+   * place "not stated" is answered.
+   */
+  routing: PurposeRouting.optional()
 }).strict();
 var MAX_PURPOSES = 32;
 var Manifest = z11.record(PurposeKey, Purpose).refine((manifest) => Object.keys(manifest).length > 0, {
@@ -2680,6 +2755,7 @@ export {
   ConsoleResize,
   ConsoleStdin,
   ConsoleStdout,
+  DEFAULT_ROUTING,
   DeliveredResult,
   ENCRYPTION_KEY_CONTEXT,
   ENDPOINTS,
@@ -2694,6 +2770,8 @@ export {
   GRANT_SIGNED_FIELDS,
   GeneratePayload,
   GrantRef,
+  HUB_FENCE,
+  HUB_FENCE_CLAUSES,
   HeartbeatRequest,
   HeartbeatResponse,
   JOB_KINDS,
@@ -2729,6 +2807,7 @@ export {
   PairStartResponse,
   PublicIdentity,
   Purpose,
+  PurposeRouting,
   REFUSAL_MESSAGES,
   REFUSAL_TEXT,
   RESERVED_PURPOSE,
@@ -2767,13 +2846,16 @@ export {
   checkProtocolVersion,
   classifyCost,
   compareVersions,
+  consoleDataBytes,
   consoleEnvelope,
   consoleOrder,
   cryptoReady,
   declaredVersion,
+  decodeConsoleData,
   decodeEnvelopeInner,
   describeBytes,
   effectiveOfferScope,
+  encodeConsoleData,
   encodeEnvelopeInner,
   envelopeBytes,
   envelopeSignedBody,
@@ -2797,6 +2879,7 @@ export {
   provenanceFor,
   publicIdentityOf,
   resolveCost,
+  routingOf,
   seal,
   signGrant,
   signRequest,