@cursor/bdk 0.2.3 → 0.2.5

package/src/internal/hosted-delivery-protocol.ts

@@ -1,824 +0,0 @@
-/**
- * Private control-plane/engine wire contract. Version 2 is unreleased and
- * intentionally strict: unknown fields and modes fail closed. After release,
- * any shape or semantic change must use a new version and a rolling
- * compatibility window. See `docs/agent-serve/hosted-delivery-protocol.md`.
- */
-export const HOSTED_DELIVERY_PROTOCOL_VERSION = 2;
-export const HOSTED_DELIVERY_HEADER = "x-agent-sdk-hosted-delivery";
-export const HOSTED_ADMISSION_PATH = "/v1/internal/hosted-admission";
-export const HOSTED_EXECUTION_PATH = "/v1/internal/hosted-execution";
-export const HOSTED_GUEST_RETRY_TRANSIENT = "transient";
-export const HOSTED_GUEST_RETRY_TERMINAL = "terminal";
-
-export type HostedGuestRetryDisposition =
-  | typeof HOSTED_GUEST_RETRY_TRANSIENT
-  | typeof HOSTED_GUEST_RETRY_TERMINAL;
-
-export const HOSTED_FAILURE_CLASSIFICATION_VERSION = 1;
-
-export type HostedFailureDomain =
-  | "configuration"
-  | "protocol"
-  | "platform"
-  | "agent"
-  | "dependency"
-  | "cancellation"
-  | "unknown";
-
-export type HostedFailureSource = "tas" | "factory" | "anyrun" | "engine" | "agent";
-
-export type HostedFailureClassification = {
-  v: typeof HOSTED_FAILURE_CLASSIFICATION_VERSION;
-  domain: HostedFailureDomain;
-  source: HostedFailureSource;
-};
-
-const HOSTED_FAILURE_DOMAINS = new Set<HostedFailureDomain>([
-  "configuration",
-  "protocol",
-  "platform",
-  "agent",
-  "dependency",
-  "cancellation",
-  "unknown",
-]);
-const HOSTED_FAILURE_SOURCES = new Set<HostedFailureSource>([
-  "tas",
-  "factory",
-  "anyrun",
-  "engine",
-  "agent",
-]);
-
-export type HostedFailureCode =
-  | "agent_admission_threw"
-  | "agent_dependency_failed"
-  | "background_dispatch_failed"
-  | "bound_secrets_not_consumed"
-  | "channel_dispatch_failed"
-  | "channel_kind_mismatch"
-  | "channel_not_found"
-  | "channel_outcome_missing"
-  | "forbidden"
-  | "guest_connect_stalled"
-  | "guest_network_unavailable"
-  | "hosted_admission_session_mismatch"
-  | "hosted_admission_unavailable"
-  | "hosted_deferred_session_unusable"
-  | "hosted_local_send_rejected"
-  | "hosted_send_limit_exceeded"
-  | "internal_error"
-  | "invalid_hosted_admission"
-  | "invalid_hosted_execution"
-  | "invalid_request"
-  | "method_not_allowed"
-  | "not_found"
-  | "session_busy"
-  | "turn_cancelled"
-  | "turn_failed"
-  | "unauthorized"
-  | "unpaid_invoice"
-  | "usage_limit"
-  | "v2_identity_conflict";
-
-export const HOSTED_FAILURE_CLASSIFICATIONS: Record<
-  HostedFailureCode,
-  Omit<HostedFailureClassification, "v">
-> = {
-  agent_admission_threw: { domain: "agent", source: "agent" },
-  agent_dependency_failed: { domain: "dependency", source: "factory" },
-  background_dispatch_failed: { domain: "agent", source: "agent" },
-  bound_secrets_not_consumed: { domain: "platform", source: "engine" },
-  channel_dispatch_failed: { domain: "agent", source: "agent" },
-  channel_kind_mismatch: { domain: "configuration", source: "engine" },
-  channel_not_found: { domain: "configuration", source: "engine" },
-  channel_outcome_missing: { domain: "protocol", source: "agent" },
-  forbidden: { domain: "configuration", source: "engine" },
-  guest_connect_stalled: { domain: "platform", source: "engine" },
-  guest_network_unavailable: { domain: "platform", source: "anyrun" },
-  hosted_admission_session_mismatch: { domain: "protocol", source: "engine" },
-  hosted_admission_unavailable: { domain: "platform", source: "engine" },
-  hosted_deferred_session_unusable: { domain: "agent", source: "agent" },
-  hosted_local_send_rejected: { domain: "agent", source: "agent" },
-  hosted_send_limit_exceeded: { domain: "agent", source: "agent" },
-  internal_error: { domain: "unknown", source: "engine" },
-  invalid_hosted_admission: { domain: "protocol", source: "engine" },
-  invalid_hosted_execution: { domain: "protocol", source: "engine" },
-  invalid_request: { domain: "protocol", source: "engine" },
-  method_not_allowed: { domain: "protocol", source: "engine" },
-  not_found: { domain: "protocol", source: "engine" },
-  session_busy: { domain: "platform", source: "engine" },
-  turn_cancelled: { domain: "cancellation", source: "agent" },
-  turn_failed: { domain: "agent", source: "agent" },
-  unauthorized: { domain: "configuration", source: "engine" },
-  unpaid_invoice: { domain: "configuration", source: "agent" },
-  usage_limit: { domain: "configuration", source: "agent" },
-  v2_identity_conflict: { domain: "protocol", source: "engine" },
-};
-
-export function hostedFailureClassification(code: string): HostedFailureClassification {
-  const known = HOSTED_FAILURE_CLASSIFICATIONS[code as HostedFailureCode];
-  return {
-    v: HOSTED_FAILURE_CLASSIFICATION_VERSION,
-    domain: known?.domain ?? "unknown",
-    source: known?.source ?? "engine",
-  };
-}
-
-export function parseHostedFailureClassification(
-  value: unknown,
-): HostedFailureClassification | undefined {
-  if (typeof value !== "object" || value === null || Array.isArray(value)) {
-    return undefined;
-  }
-  const body = value as Record<string, unknown>;
-  if (
-    body.v !== HOSTED_FAILURE_CLASSIFICATION_VERSION ||
-    typeof body.domain !== "string" ||
-    !HOSTED_FAILURE_DOMAINS.has(body.domain as HostedFailureDomain) ||
-    typeof body.source !== "string" ||
-    !HOSTED_FAILURE_SOURCES.has(body.source as HostedFailureSource)
-  ) {
-    return undefined;
-  }
-  return body as HostedFailureClassification;
-}
-
-export type HostedGuestError = {
-  ok: false;
-  error: string;
-  retry: HostedGuestRetryDisposition;
-  classification: HostedFailureClassification;
-  message?: string;
-  turnStatus?: string;
-  /** Runner/SDK code (`unknown`, `canceled`, …). Not the human message. */
-  errorCode?: string;
-};
-
-/**
- * Hosted delivery is the only HTTP surface whose failures drive Temporal
- * retries. Keep its retry disposition explicit instead of making the shared
- * HTTP error helper guess from a status code.
- */
-export function hostedGuestErrorResponse(input: {
-  status: number;
-  error: string;
-  retry: HostedGuestRetryDisposition;
-  message?: string;
-  turnStatus?: string;
-  errorCode?: string;
-}): Response {
-  const body: HostedGuestError = {
-    ok: false,
-    error: input.error,
-    retry: input.retry,
-    classification: hostedFailureClassification(input.error),
-    message: input.message,
-    turnStatus: input.turnStatus,
-    errorCode: input.errorCode,
-  };
-  return Response.json(body, { status: input.status });
-}
-
-/**
- * Filename under the serve `--state-root` (not the per-slug SessionEngine
- * dir). Hosted freeze uses `/workspace/.agent-serve`; the Temporal host
- * reads this path after hosted-execution and logs it on the activity span.
- * Must match `AGENT_SERVE_ENGINE_HOSTED_EXECUTION_DIAG_PATH` basename.
- */
-export const HOSTED_EXECUTION_DIAG_FILENAME = "hosted-execution.json";
-
-/**
- * Reserved hosted-admission `channelKind` for durable reminder fires.
- * Bypasses authored channel admission and invokes ReminderRunner.dispatch.
- * Backend builds envelopes with this constant + {@link HOSTED_REMINDER_EVENT_TYPE}.
- */
-export const HOSTED_REMINDER_CHANNEL_KIND = "agent-sdk:reminder";
-
-/**
- * Reserved hosted-admission `eventType` for durable reminder fires.
- * Payload is {@link HostedReminderFirePayload}.
- */
-export const HOSTED_REMINDER_EVENT_TYPE = "agent-sdk.reminder/fire";
-
-/** Compact reminder-fire payload on the reserved hosted-admission path. */
-export type HostedReminderFirePayload = {
-  reminderId: string;
-  fireCount: number;
-};
-
-/** Protocol v1 immutable fire descriptor (architecture v2 CP path). */
-export type HostedReminderFireDescriptorPayload = {
-  protocolVersion: 1;
-  id: string;
-  fireCount: number;
-  generation: number;
-  purpose: string;
-  channelId: string;
-  continuationToken: string;
-  target?: Record<string, unknown>;
-  scheduleKind: "every" | "cron" | "delay" | "at";
-  scheduleValue: string;
-  intervalMs?: number;
-  prompt?: string;
-  handler?: string;
-  args?: Record<string, unknown>;
-  hasRunHandler: boolean;
-  hasUntilFn: boolean;
-  untilPrompt?: string;
-  busyPolicy: "skipIfBusy" | "queueBehindTurn";
-  nextFireAtMs: number;
-  claimedAtMs: number;
-};
-
-export type HostedAdmissionManagedAutomation = {
-  automationUuid: string;
-  mcpServerNames: string[];
-  /**
-   * Slack channel ids the automation's "Send to Slack" action targets,
-   * posted through the control-plane Slack relay. Omitted when the action
-   * is toggled off (never empty).
-   */
-  slackChannels?: string[];
-};
-
-/**
- * Trusted control-plane handoff for a Slack placeholder posted at ingress
- * before the Temporal signal. Omitted when no placeholder was posted.
- */
-export type HostedAdmissionPlatformHandoff = {
-  v: 1;
-  slackPlaceholder: {
-    messageTs: string;
-    channelId: string;
-    threadTs: string;
-    streamed: false;
-  };
-};
-
-export type HostedAdmissionInput = {
-  v: 2;
-  channelId: string;
-  /**
-   * Mailbox / subscription channel kind (`github`, `origin`, …). The guest
-   * resolves dispatch from the mounted definition's hosted-admission
-   * adapter; this field is not an allowlist.
-   */
-  channelKind: string;
-  eventType: string;
-  deliveryId: string;
-  sessionMode: "event" | "continuation";
-  mailboxContinuationKey: string;
-  payload: unknown;
-  managedAutomation?: HostedAdmissionManagedAutomation;
-  /** Present only when control-plane Slack fast-act posted a placeholder. */
-  platformHandoff?: HostedAdmissionPlatformHandoff;
-};
-
-export type HostedAdmissionStart = HostedAdmissionInput & { mode: "start" };
-
-export type HostedAdmissionStatus = {
-  v: 2;
-  mode: "status";
-  deliveryId: string;
-};
-
-export type HostedAdmission = HostedAdmissionStart | HostedAdmissionStatus;
-
-export type HostedAdmissionOutcome =
-  | { ok: true; v: 2; outcome: "skip" | "task" }
-  | { ok: true; v: 2; outcome: "send"; admissionToken: string }
-  | { ok: true; v: 2; outcome: "started" | "running" };
-
-/**
- * Cap on delivery IDs an owner execute may report as consumed (primary +
- * accepted active-guest enqueues). Enqueue requests beyond this return
- * `not_active`.
- */
-export const HOSTED_MAX_CONSUMED_DELIVERY_IDS = 16;
-
-/** Hosted-execution is unary: start/status for owners, enqueue for guests. */
-export type HostedExecutionMode = "enqueue" | "start" | "status";
-
-export type HostedExecution = {
-  v: 2;
-  admissionToken: string;
-  sessionPublicId: string;
-  /**
-   * `enqueue` injects into an accepting owner or returns `not_active`.
-   * `start` launches the owner turn and returns `started` immediately.
-   * `status` returns `running` or replays the terminal response.
-   */
-  mode: HostedExecutionMode;
-};
-
-export type HostedExecutionOutcome =
-  | {
-      ok: true;
-      v: 2;
-      outcome: "send";
-      /**
-       * Primary delivery id then accepted enqueue ids; length 1..16.
-       */
-      consumedDeliveryIds: string[];
-    }
-  | { ok: true; v: 2; outcome: "enqueued" }
-  | { ok: true; v: 2; outcome: "not_active" }
-  | { ok: true; v: 2; outcome: "started" }
-  | { ok: true; v: 2; outcome: "running" };
-
-const DELIVERY_KEYS = new Set([
-  "v",
-  "mode",
-  "channelId",
-  "channelKind",
-  "eventType",
-  "deliveryId",
-  "sessionMode",
-  "mailboxContinuationKey",
-  "payload",
-  "managedAutomation",
-  "platformHandoff",
-]);
-const MANAGED_AUTOMATION_KEYS = new Set(["automationUuid", "mcpServerNames", "slackChannels"]);
-export const HOSTED_PLATFORM_HANDOFF_KEYS: ReadonlySet<string> = new Set(["v", "slackPlaceholder"]);
-export const HOSTED_SLACK_PLACEHOLDER_HANDOFF_KEYS: ReadonlySet<string> = new Set([
-  "messageTs",
-  "channelId",
-  "threadTs",
-  "streamed",
-]);
-/** More names than any real automation configures is a malformed envelope. */
-const MANAGED_AUTOMATION_MAX_SERVERS = 64;
-/** More channels than the dashboard picker allows is a malformed envelope. */
-const MANAGED_AUTOMATION_MAX_SLACK_CHANNELS = 64;
-const EXECUTION_KEYS = new Set(["v", "admissionToken", "sessionPublicId", "mode"]);
-
-function boundedString(value: unknown, max: number): value is string {
-  return typeof value === "string" && value.length > 0 && value.length <= max;
-}
-
-/**
- * Parse the optional managed-automation slice. Absent → valid (undefined);
- * present-but-malformed → invalid (the whole admission fails closed, the
- * strict posture the rest of the envelope already takes).
- */
-function parseManagedAutomation(
-  value: unknown,
-): { managedAutomation?: HostedAdmissionManagedAutomation } | undefined {
-  if (value === undefined) {
-    return {};
-  }
-  if (typeof value !== "object" || value === null || Array.isArray(value)) {
-    return undefined;
-  }
-  const body = value as Record<string, unknown>;
-  if (
-    Object.keys(body).some(key => !MANAGED_AUTOMATION_KEYS.has(key)) ||
-    !boundedString(body.automationUuid, 128) ||
-    !Array.isArray(body.mcpServerNames) ||
-    body.mcpServerNames.length > MANAGED_AUTOMATION_MAX_SERVERS ||
-    !body.mcpServerNames.every(name => boundedString(name, 256))
-  ) {
-    return undefined;
-  }
-  if (body.slackChannels !== undefined) {
-    if (
-      !Array.isArray(body.slackChannels) ||
-      body.slackChannels.length === 0 ||
-      body.slackChannels.length > MANAGED_AUTOMATION_MAX_SLACK_CHANNELS ||
-      !body.slackChannels.every(channel => boundedString(channel, 64))
-    ) {
-      return undefined;
-    }
-  }
-  return {
-    managedAutomation: {
-      automationUuid: body.automationUuid,
-      mcpServerNames: body.mcpServerNames,
-      ...(body.slackChannels === undefined
-        ? {}
-        : { slackChannels: body.slackChannels as string[] }),
-    },
-  };
-}
-
-/**
- * Parse optional control-plane Slack placeholder handoff. Absent → valid;
- * present-but-malformed → invalid (fail closed like managedAutomation).
- */
-function parsePlatformHandoff(
-  value: unknown,
-): { platformHandoff?: HostedAdmissionPlatformHandoff } | undefined {
-  if (value === undefined) {
-    return {};
-  }
-  if (typeof value !== "object" || value === null || Array.isArray(value)) {
-    return undefined;
-  }
-  const body = value as Record<string, unknown>;
-  if (Object.keys(body).some(key => !HOSTED_PLATFORM_HANDOFF_KEYS.has(key)) || body.v !== 1) {
-    return undefined;
-  }
-  const placeholder = body.slackPlaceholder;
-  if (typeof placeholder !== "object" || placeholder === null || Array.isArray(placeholder)) {
-    return undefined;
-  }
-  const slot = placeholder as Record<string, unknown>;
-  if (
-    Object.keys(slot).some(key => !HOSTED_SLACK_PLACEHOLDER_HANDOFF_KEYS.has(key)) ||
-    !boundedString(slot.messageTs, 64) ||
-    !boundedString(slot.channelId, 64) ||
-    !boundedString(slot.threadTs, 64) ||
-    slot.streamed !== false
-  ) {
-    return undefined;
-  }
-  return {
-    platformHandoff: {
-      v: 1,
-      slackPlaceholder: {
-        messageTs: slot.messageTs,
-        channelId: slot.channelId,
-        threadTs: slot.threadTs,
-        streamed: slot.streamed,
-      },
-    },
-  };
-}
-
-export function parseHostedAdmission(value: unknown): HostedAdmission | undefined {
-  if (typeof value !== "object" || value === null || Array.isArray(value)) {
-    return undefined;
-  }
-  const body = value as Record<string, unknown>;
-  if (body.mode === "status") {
-    return Object.keys(body).every(key => key === "v" || key === "mode" || key === "deliveryId") &&
-      body.v === HOSTED_DELIVERY_PROTOCOL_VERSION &&
-      boundedString(body.deliveryId, 256)
-      ? (body as HostedAdmissionStatus)
-      : undefined;
-  }
-  if (
-    Object.keys(body).some(key => !DELIVERY_KEYS.has(key)) ||
-    !Object.hasOwn(body, "payload") ||
-    body.v !== HOSTED_DELIVERY_PROTOCOL_VERSION ||
-    body.mode !== "start" ||
-    !boundedString(body.channelId, 128) ||
-    !boundedString(body.channelKind, 128) ||
-    !boundedString(body.eventType, 128) ||
-    !boundedString(body.deliveryId, 256) ||
-    (body.sessionMode !== "event" && body.sessionMode !== "continuation") ||
-    !boundedString(body.mailboxContinuationKey, 512) ||
-    parseManagedAutomation(body.managedAutomation) === undefined ||
-    parsePlatformHandoff(body.platformHandoff) === undefined
-  ) {
-    return undefined;
-  }
-  const prefix = body.sessionMode === "event" ? "evt:" : "cont:";
-  return body.mailboxContinuationKey.startsWith(prefix) ? (body as HostedAdmission) : undefined;
-}
-
-export function parseHostedExecution(value: unknown): HostedExecution | undefined {
-  if (typeof value !== "object" || value === null || Array.isArray(value)) {
-    return undefined;
-  }
-  const body = value as Record<string, unknown>;
-  if (
-    Object.keys(body).some(key => !EXECUTION_KEYS.has(key)) ||
-    body.v !== HOSTED_DELIVERY_PROTOCOL_VERSION ||
-    !boundedString(body.admissionToken, 128) ||
-    typeof body.sessionPublicId !== "string" ||
-    !/^ses_[a-f0-9]{24}$/.test(body.sessionPublicId)
-  ) {
-    return undefined;
-  }
-  if (body.mode !== "enqueue" && body.mode !== "start" && body.mode !== "status") {
-    return undefined;
-  }
-  return body as HostedExecution;
-}
-
-const HOSTED_EXECUTION_OUTCOME_KEYS = new Set(["ok", "v", "outcome", "consumedDeliveryIds"]);
-
-function parseConsumedDeliveryIds(value: unknown): string[] | undefined {
-  if (!Array.isArray(value) || value.length === 0) {
-    return undefined;
-  }
-  if (value.length > HOSTED_MAX_CONSUMED_DELIVERY_IDS) {
-    return undefined;
-  }
-  if (!value.every(id => boundedString(id, 256))) {
-    return undefined;
-  }
-  return value as string[];
-}
-
-export function parseHostedExecutionOutcome(value: unknown): HostedExecutionOutcome | undefined {
-  if (typeof value !== "object" || value === null || Array.isArray(value)) {
-    return undefined;
-  }
-  const body = value as Record<string, unknown>;
-  if (
-    Object.keys(body).some(key => !HOSTED_EXECUTION_OUTCOME_KEYS.has(key)) ||
-    body.ok !== true ||
-    body.v !== HOSTED_DELIVERY_PROTOCOL_VERSION
-  ) {
-    return undefined;
-  }
-  if (
-    body.outcome === "enqueued" ||
-    body.outcome === "not_active" ||
-    body.outcome === "started" ||
-    body.outcome === "running"
-  ) {
-    if (body.consumedDeliveryIds !== undefined) {
-      return undefined;
-    }
-    return body as HostedExecutionOutcome;
-  }
-  if (body.outcome !== "send") {
-    return undefined;
-  }
-  const consumedDeliveryIds = parseConsumedDeliveryIds(body.consumedDeliveryIds);
-  if (consumedDeliveryIds === undefined) {
-    return undefined;
-  }
-  return {
-    ok: true,
-    v: 2,
-    outcome: "send",
-    consumedDeliveryIds,
-  };
-}
-
-/**
- * True when the admission envelope is the reserved internal reminder fire
- * path (not an authored channel event).
- */
-export function isHostedReminderAdmission(delivery: HostedAdmissionInput): boolean {
-  return (
-    delivery.channelKind === HOSTED_REMINDER_CHANNEL_KIND &&
-    delivery.eventType === HOSTED_REMINDER_EVENT_TYPE
-  );
-}
-
-/**
- * Parse `{ reminderId, fireCount }` from a reserved reminder admission
- * payload. Rejects unknown keys and non-integer fireCount.
- */
-export function parseHostedReminderFirePayload(
-  value: unknown,
-): HostedReminderFirePayload | undefined {
-  if (typeof value !== "object" || value === null || Array.isArray(value)) {
-    return undefined;
-  }
-  const body = value as Record<string, unknown>;
-  const keys = Object.keys(body);
-  if (
-    keys.length !== 2 ||
-    !Object.hasOwn(body, "reminderId") ||
-    !Object.hasOwn(body, "fireCount") ||
-    !boundedString(body.reminderId, 128) ||
-    typeof body.fireCount !== "number" ||
-    !Number.isInteger(body.fireCount) ||
-    body.fireCount < 0
-  ) {
-    return undefined;
-  }
-  return {
-    reminderId: body.reminderId,
-    fireCount: body.fireCount,
-  };
-}
-
-const HOSTED_REMINDER_FIRE_DESCRIPTOR_KEYS = new Set([
-  "protocolVersion",
-  "id",
-  "fireCount",
-  "generation",
-  "purpose",
-  "channelId",
-  "continuationToken",
-  "target",
-  "scheduleKind",
-  "scheduleValue",
-  "intervalMs",
-  "prompt",
-  "handler",
-  "args",
-  "hasRunHandler",
-  "hasUntilFn",
-  "untilPrompt",
-  "busyPolicy",
-  "nextFireAtMs",
-  "claimedAtMs",
-]);
-
-const HOSTED_REMINDER_SCHEDULE_KINDS = new Set(["every", "cron", "delay", "at"]);
-const HOSTED_REMINDER_BUSY_POLICIES = new Set(["skipIfBusy", "queueBehindTurn"]);
-
-const HOSTED_REMINDER_JSON_MAX_DEPTH = 8;
-
-/** Reject non-JSON values (NaN/Infinity/undefined/bigint/function/symbol). */
-function isJsonSafeValue(value: unknown, depth: number): boolean {
-  if (depth > HOSTED_REMINDER_JSON_MAX_DEPTH) {
-    return false;
-  }
-  if (value === null) {
-    return true;
-  }
-  const type = typeof value;
-  if (type === "string" || type === "boolean") {
-    return true;
-  }
-  if (type === "number") {
-    return Number.isFinite(value);
-  }
-  if (type !== "object") {
-    return false;
-  }
-  if (Array.isArray(value)) {
-    return value.every(entry => isJsonSafeValue(entry, depth + 1));
-  }
-  const proto = Object.getPrototypeOf(value);
-  if (proto !== Object.prototype && proto !== null) {
-    return false;
-  }
-  for (const entry of Object.values(value as Record<string, unknown>)) {
-    if (!isJsonSafeValue(entry, depth + 1)) {
-      return false;
-    }
-  }
-  return true;
-}
-
-function parseOptionalJsonObjectField(
-  value: unknown,
-  maxBytes: number,
-): Record<string, unknown> | undefined {
-  if (value === undefined) {
-    return undefined;
-  }
-  if (typeof value !== "object" || value === null || Array.isArray(value)) {
-    return undefined;
-  }
-  if (!isJsonSafeValue(value, 0)) {
-    return undefined;
-  }
-  try {
-    const encoded = JSON.stringify(value);
-    if (encoded === undefined || Buffer.byteLength(encoded, "utf8") > maxBytes) {
-      return undefined;
-    }
-    const roundTrip = JSON.parse(encoded) as unknown;
-    if (typeof roundTrip !== "object" || roundTrip === null || Array.isArray(roundTrip)) {
-      return undefined;
-    }
-    return roundTrip as Record<string, unknown>;
-  } catch {
-    return undefined;
-  }
-}
-
-/**
- * Parse the immutable CP fire descriptor. Rejects unknown keys, non-enum
- * schedule/busy values, and non-JSON-safe optional object fields.
- */
-export function parseHostedReminderFireDescriptorPayload(
-  value: unknown,
-): HostedReminderFireDescriptorPayload | undefined {
-  if (typeof value !== "object" || value === null || Array.isArray(value)) {
-    return undefined;
-  }
-  const body = value as Record<string, unknown>;
-  if (Object.keys(body).some(key => !HOSTED_REMINDER_FIRE_DESCRIPTOR_KEYS.has(key))) {
-    return undefined;
-  }
-  if (
-    body.protocolVersion !== 1 ||
-    typeof body.id !== "string" ||
-    body.id.length === 0 ||
-    body.id.length > 128 ||
-    typeof body.fireCount !== "number" ||
-    !Number.isInteger(body.fireCount) ||
-    body.fireCount < 0 ||
-    typeof body.generation !== "number" ||
-    !Number.isInteger(body.generation) ||
-    body.generation < 0 ||
-    typeof body.purpose !== "string" ||
-    body.purpose.length === 0 ||
-    body.purpose.length > 512 ||
-    typeof body.channelId !== "string" ||
-    body.channelId.length === 0 ||
-    body.channelId.length > 128 ||
-    typeof body.continuationToken !== "string" ||
-    body.continuationToken.length === 0 ||
-    body.continuationToken.length > 512 ||
-    typeof body.scheduleKind !== "string" ||
-    !HOSTED_REMINDER_SCHEDULE_KINDS.has(body.scheduleKind) ||
-    typeof body.scheduleValue !== "string" ||
-    body.scheduleValue.length === 0 ||
-    body.scheduleValue.length > 512 ||
-    typeof body.hasRunHandler !== "boolean" ||
-    typeof body.hasUntilFn !== "boolean" ||
-    typeof body.busyPolicy !== "string" ||
-    !HOSTED_REMINDER_BUSY_POLICIES.has(body.busyPolicy) ||
-    typeof body.nextFireAtMs !== "number" ||
-    !Number.isFinite(body.nextFireAtMs) ||
-    typeof body.claimedAtMs !== "number" ||
-    !Number.isFinite(body.claimedAtMs) ||
-    !Number.isInteger(body.claimedAtMs) ||
-    body.claimedAtMs < 0
-  ) {
-    return undefined;
-  }
-  if (body.intervalMs !== undefined) {
-    if (
-      typeof body.intervalMs !== "number" ||
-      !Number.isFinite(body.intervalMs) ||
-      !Number.isInteger(body.intervalMs) ||
-      body.intervalMs <= 0
-    ) {
-      return undefined;
-    }
-  }
-  if (body.prompt !== undefined) {
-    if (typeof body.prompt !== "string" || body.prompt.length > 8192) {
-      return undefined;
-    }
-  }
-  if (body.handler !== undefined) {
-    if (
-      typeof body.handler !== "string" ||
-      body.handler.length === 0 ||
-      body.handler.length > 128
-    ) {
-      return undefined;
-    }
-  }
-  if (body.untilPrompt !== undefined) {
-    if (typeof body.untilPrompt !== "string" || body.untilPrompt.length > 8192) {
-      return undefined;
-    }
-  }
-  const target = parseOptionalJsonObjectField(body.target, 16 * 1024);
-  if (body.target !== undefined && target === undefined) {
-    return undefined;
-  }
-  const args = parseOptionalJsonObjectField(body.args, 32 * 1024);
-  if (body.args !== undefined && args === undefined) {
-    return undefined;
-  }
-  return {
-    protocolVersion: 1,
-    id: body.id,
-    fireCount: body.fireCount,
-    generation: body.generation,
-    purpose: body.purpose,
-    channelId: body.channelId,
-    continuationToken: body.continuationToken,
-    ...(target === undefined ? {} : { target }),
-    scheduleKind: body.scheduleKind as HostedReminderFireDescriptorPayload["scheduleKind"],
-    scheduleValue: body.scheduleValue,
-    ...(body.intervalMs === undefined ? {} : { intervalMs: body.intervalMs }),
-    ...(body.prompt === undefined ? {} : { prompt: body.prompt }),
-    ...(body.handler === undefined ? {} : { handler: body.handler }),
-    ...(args === undefined ? {} : { args }),
-    hasRunHandler: body.hasRunHandler,
-    hasUntilFn: body.hasUntilFn,
-    ...(body.untilPrompt === undefined ? {} : { untilPrompt: body.untilPrompt }),
-    busyPolicy: body.busyPolicy as HostedReminderFireDescriptorPayload["busyPolicy"],
-    nextFireAtMs: body.nextFireAtMs,
-    claimedAtMs: body.claimedAtMs,
-  };
-}
-
-const HOSTED_ADMISSION_OUTCOME_KEYS = new Set(["ok", "v", "outcome", "admissionToken"]);
-
-export function parseHostedAdmissionOutcome(value: unknown): HostedAdmissionOutcome | undefined {
-  if (typeof value !== "object" || value === null || Array.isArray(value)) {
-    return undefined;
-  }
-  const body = value as Record<string, unknown>;
-  if (
-    Object.keys(body).some(key => !HOSTED_ADMISSION_OUTCOME_KEYS.has(key)) ||
-    body.ok !== true ||
-    body.v !== HOSTED_DELIVERY_PROTOCOL_VERSION ||
-    (body.outcome !== "skip" &&
-      body.outcome !== "send" &&
-      body.outcome !== "task" &&
-      body.outcome !== "started" &&
-      body.outcome !== "running")
-  ) {
-    return undefined;
-  }
-  if (body.outcome === "send" && !boundedString(body.admissionToken, 128)) {
-    return undefined;
-  }
-  if (body.outcome !== "send" && Object.hasOwn(body, "admissionToken")) {
-    return undefined;
-  }
-  return body as HostedAdmissionOutcome;
-}