@cat-factory/contracts 0.296.0 → 0.298.0

package/dist/index.d.ts

@@ -131,6 +131,7 @@ export * from './public-decisions.js';
 export * from './notification-webhooks.js';
 export * from './personal-subscriptions.js';
 export * from './localModels.js';
+export * from './known-local-models.js';
 export * from './openrouter.js';
 export * from './sandbox.js';
 export * from './workspace-settings.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAA;AAC/B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,0BAA0B,CAAA;AACxC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,qBAAqB,CAAA;AACnC,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,qBAAqB,CAAA;AACnC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,0BAA0B,CAAA;AACxC,cAAc,eAAe,CAAA;AAC7B,cAAc,0BAA0B,CAAA;AACxC,cAAc,cAAc,CAAA;AAC5B,cAAc,mBAAmB,CAAA;AACjC,cAAc,2BAA2B,CAAA;AACzC,cAAc,sBAAsB,CAAA;AACpC,cAAc,sBAAsB,CAAA;AACpC,cAAc,uBAAuB,CAAA;AACrC,cAAc,oBAAoB,CAAA;AAClC,cAAc,eAAe,CAAA;AAC7B,cAAc,uBAAuB,CAAA;AACrC,cAAc,yBAAyB,CAAA;AACvC,cAAc,mBAAmB,CAAA;AACjC,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,wBAAwB,CAAA;AACtC,cAAc,0BAA0B,CAAA;AACxC,cAAc,wBAAwB,CAAA;AACtC,cAAc,wBAAwB,CAAA;AACtC,cAAc,wBAAwB,CAAA;AACtC,cAAc,6BAA6B,CAAA;AAC3C,cAAc,qBAAqB,CAAA;AACnC,cAAc,eAAe,CAAA;AAC7B,cAAc,wBAAwB,CAAA;AACtC,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,sBAAsB,CAAA;AACpC,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,YAAY,CAAA;AAC1B,cAAc,eAAe,CAAA;AAC7B,cAAc,mBAAmB,CAAA;AACjC,cAAc,8BAA8B,CAAA;AAC5C,cAAc,4BAA4B,CAAA;AAC1C,cAAc,iBAAiB,CAAA;AAC/B,cAAc,sBAAsB,CAAA;AACpC,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,0BAA0B,CAAA;AACxC,cAAc,gCAAgC,CAAA;AAC9C,cAAc,cAAc,CAAA;AAC5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,wBAAwB,CAAA;AACtC,cAAc,uBAAuB,CAAA;AACrC,cAAc,kBAAkB,CAAA;AAChC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,eAAe,CAAA;AAC7B,cAAc,UAAU,CAAA;AACxB,cAAc,iBAAiB,CAAA;AAC/B,cAAc,oBAAoB,CAAA;AAClC,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,eAAe,CAAA;AAC7B,cAAc,mBAAmB,CAAA;AACjC,cAAc,WAAW,CAAA;AACzB,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,cAAc,wBAAwB,CAAA;AACtC,cAAc,mBAAmB,CAAA;AACjC,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,qBAAqB,CAAA;AACnC,cAAc,mBAAmB,CAAA;AACjC,cAAc,cAAc,CAAA;AAC5B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,WAAW,CAAA;AACzB,cAAc,gBAAgB,CAAA;AAC9B,cAAc,YAAY,CAAA;AAC1B,cAAc,4BAA4B,CAAA;AAC1C,cAAc,uBAAuB,CAAA;AACrC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,mBAAmB,CAAA;AACjC,cAAc,qCAAqC,CAAA;AACnD,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,cAAc,CAAA;AAC5B,cAAc,yBAAyB,CAAA;AACvC,cAAc,mBAAmB,CAAA;AACjC,cAAc,mBAAmB,CAAA;AACjC,cAAc,yBAAyB,CAAA;AACvC,cAAc,kBAAkB,CAAA;AAChC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,wBAAwB,CAAA;AACtC,cAAc,cAAc,CAAA;AAC5B,cAAc,2BAA2B,CAAA;AACzC,cAAc,wBAAwB,CAAA;AACtC,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,qBAAqB,CAAA;AACnC,cAAc,kBAAkB,CAAA;AAChC,cAAc,gCAAgC,CAAA;AAC9C,cAAc,oBAAoB,CAAA;AAClC,cAAc,2BAA2B,CAAA;AACzC,cAAc,YAAY,CAAA;AAC1B,cAAc,oBAAoB,CAAA;AAClC,cAAc,cAAc,CAAA;AAC5B,cAAc,0BAA0B,CAAA;AACxC,cAAc,sBAAsB,CAAA;AACpC,cAAc,YAAY,CAAA;AAC1B,cAAc,oBAAoB,CAAA;AAClC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,cAAc,CAAA;AAC5B,cAAc,yBAAyB,CAAA;AACvC,cAAc,eAAe,CAAA;AAC7B,cAAc,sBAAsB,CAAA;AACpC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,mBAAmB,CAAA;AACjC,cAAc,0BAA0B,CAAA;AACxC,cAAc,sBAAsB,CAAA;AACpC,cAAc,kBAAkB,CAAA;AAChC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,mBAAmB,CAAA;AACjC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,uBAAuB,CAAA;AACrC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,6BAA6B,CAAA;AAC3C,cAAc,kBAAkB,CAAA;AAChC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,cAAc,CAAA;AAC5B,cAAc,yBAAyB,CAAA;AACvC,cAAc,qBAAqB,CAAA;AACnC,cAAc,eAAe,CAAA;AAC7B,cAAc,oBAAoB,CAAA;AAClC,cAAc,aAAa,CAAA;AAC3B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,wBAAwB,CAAA;AACtC,cAAc,mBAAmB,CAAA;AACjC,cAAc,wBAAwB,CAAA;AACtC,cAAc,mBAAmB,CAAA;AACjC,cAAc,mBAAmB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAA;AAC/B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,0BAA0B,CAAA;AACxC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,qBAAqB,CAAA;AACnC,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,qBAAqB,CAAA;AACnC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,0BAA0B,CAAA;AACxC,cAAc,eAAe,CAAA;AAC7B,cAAc,0BAA0B,CAAA;AACxC,cAAc,cAAc,CAAA;AAC5B,cAAc,mBAAmB,CAAA;AACjC,cAAc,2BAA2B,CAAA;AACzC,cAAc,sBAAsB,CAAA;AACpC,cAAc,sBAAsB,CAAA;AACpC,cAAc,uBAAuB,CAAA;AACrC,cAAc,oBAAoB,CAAA;AAClC,cAAc,eAAe,CAAA;AAC7B,cAAc,uBAAuB,CAAA;AACrC,cAAc,yBAAyB,CAAA;AACvC,cAAc,mBAAmB,CAAA;AACjC,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,wBAAwB,CAAA;AACtC,cAAc,0BAA0B,CAAA;AACxC,cAAc,wBAAwB,CAAA;AACtC,cAAc,wBAAwB,CAAA;AACtC,cAAc,wBAAwB,CAAA;AACtC,cAAc,6BAA6B,CAAA;AAC3C,cAAc,qBAAqB,CAAA;AACnC,cAAc,eAAe,CAAA;AAC7B,cAAc,wBAAwB,CAAA;AACtC,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,sBAAsB,CAAA;AACpC,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,YAAY,CAAA;AAC1B,cAAc,eAAe,CAAA;AAC7B,cAAc,mBAAmB,CAAA;AACjC,cAAc,8BAA8B,CAAA;AAC5C,cAAc,4BAA4B,CAAA;AAC1C,cAAc,iBAAiB,CAAA;AAC/B,cAAc,sBAAsB,CAAA;AACpC,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,0BAA0B,CAAA;AACxC,cAAc,gCAAgC,CAAA;AAC9C,cAAc,cAAc,CAAA;AAC5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,wBAAwB,CAAA;AACtC,cAAc,uBAAuB,CAAA;AACrC,cAAc,kBAAkB,CAAA;AAChC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,eAAe,CAAA;AAC7B,cAAc,UAAU,CAAA;AACxB,cAAc,iBAAiB,CAAA;AAC/B,cAAc,oBAAoB,CAAA;AAClC,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,eAAe,CAAA;AAC7B,cAAc,mBAAmB,CAAA;AACjC,cAAc,WAAW,CAAA;AACzB,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,cAAc,wBAAwB,CAAA;AACtC,cAAc,mBAAmB,CAAA;AACjC,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,qBAAqB,CAAA;AACnC,cAAc,mBAAmB,CAAA;AACjC,cAAc,cAAc,CAAA;AAC5B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,WAAW,CAAA;AACzB,cAAc,gBAAgB,CAAA;AAC9B,cAAc,YAAY,CAAA;AAC1B,cAAc,4BAA4B,CAAA;AAC1C,cAAc,uBAAuB,CAAA;AACrC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,mBAAmB,CAAA;AACjC,cAAc,qCAAqC,CAAA;AACnD,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,cAAc,CAAA;AAC5B,cAAc,yBAAyB,CAAA;AACvC,cAAc,mBAAmB,CAAA;AACjC,cAAc,mBAAmB,CAAA;AACjC,cAAc,yBAAyB,CAAA;AACvC,cAAc,kBAAkB,CAAA;AAChC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,wBAAwB,CAAA;AACtC,cAAc,cAAc,CAAA;AAC5B,cAAc,2BAA2B,CAAA;AACzC,cAAc,wBAAwB,CAAA;AACtC,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,qBAAqB,CAAA;AACnC,cAAc,kBAAkB,CAAA;AAChC,cAAc,gCAAgC,CAAA;AAC9C,cAAc,oBAAoB,CAAA;AAClC,cAAc,2BAA2B,CAAA;AACzC,cAAc,YAAY,CAAA;AAC1B,cAAc,oBAAoB,CAAA;AAClC,cAAc,cAAc,CAAA;AAC5B,cAAc,0BAA0B,CAAA;AACxC,cAAc,sBAAsB,CAAA;AACpC,cAAc,YAAY,CAAA;AAC1B,cAAc,oBAAoB,CAAA;AAClC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,cAAc,CAAA;AAC5B,cAAc,yBAAyB,CAAA;AACvC,cAAc,eAAe,CAAA;AAC7B,cAAc,sBAAsB,CAAA;AACpC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,mBAAmB,CAAA;AACjC,cAAc,0BAA0B,CAAA;AACxC,cAAc,sBAAsB,CAAA;AACpC,cAAc,kBAAkB,CAAA;AAChC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,mBAAmB,CAAA;AACjC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,uBAAuB,CAAA;AACrC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,6BAA6B,CAAA;AAC3C,cAAc,kBAAkB,CAAA;AAChC,cAAc,yBAAyB,CAAA;AACvC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,cAAc,CAAA;AAC5B,cAAc,yBAAyB,CAAA;AACvC,cAAc,qBAAqB,CAAA;AACnC,cAAc,eAAe,CAAA;AAC7B,cAAc,oBAAoB,CAAA;AAClC,cAAc,aAAa,CAAA;AAC3B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,wBAAwB,CAAA;AACtC,cAAc,mBAAmB,CAAA;AACjC,cAAc,wBAAwB,CAAA;AACtC,cAAc,mBAAmB,CAAA;AACjC,cAAc,mBAAmB,CAAA"}

package/dist/index.js

@@ -131,6 +131,7 @@ export * from './public-decisions.js';
 export * from './notification-webhooks.js';
 export * from './personal-subscriptions.js';
 export * from './localModels.js';
+export * from './known-local-models.js';
 export * from './openrouter.js';
 export * from './sandbox.js';
 export * from './workspace-settings.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAA;AAC/B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,0BAA0B,CAAA;AACxC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,qBAAqB,CAAA;AACnC,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,qBAAqB,CAAA;AACnC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,0BAA0B,CAAA;AACxC,cAAc,eAAe,CAAA;AAC7B,cAAc,0BAA0B,CAAA;AACxC,cAAc,cAAc,CAAA;AAC5B,cAAc,mBAAmB,CAAA;AACjC,cAAc,2BAA2B,CAAA;AACzC,cAAc,sBAAsB,CAAA;AACpC,cAAc,sBAAsB,CAAA;AACpC,cAAc,uBAAuB,CAAA;AACrC,cAAc,oBAAoB,CAAA;AAClC,cAAc,eAAe,CAAA;AAC7B,cAAc,uBAAuB,CAAA;AACrC,cAAc,yBAAyB,CAAA;AACvC,cAAc,mBAAmB,CAAA;AACjC,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,wBAAwB,CAAA;AACtC,cAAc,0BAA0B,CAAA;AACxC,cAAc,wBAAwB,CAAA;AACtC,cAAc,wBAAwB,CAAA;AACtC,cAAc,wBAAwB,CAAA;AACtC,cAAc,6BAA6B,CAAA;AAC3C,cAAc,qBAAqB,CAAA;AACnC,cAAc,eAAe,CAAA;AAC7B,cAAc,wBAAwB,CAAA;AACtC,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,sBAAsB,CAAA;AACpC,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,YAAY,CAAA;AAC1B,cAAc,eAAe,CAAA;AAC7B,cAAc,mBAAmB,CAAA;AACjC,cAAc,8BAA8B,CAAA;AAC5C,cAAc,4BAA4B,CAAA;AAC1C,cAAc,iBAAiB,CAAA;AAC/B,cAAc,sBAAsB,CAAA;AACpC,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,0BAA0B,CAAA;AACxC,cAAc,gCAAgC,CAAA;AAC9C,cAAc,cAAc,CAAA;AAC5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,wBAAwB,CAAA;AACtC,cAAc,uBAAuB,CAAA;AACrC,cAAc,kBAAkB,CAAA;AAChC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,eAAe,CAAA;AAC7B,cAAc,UAAU,CAAA;AACxB,cAAc,iBAAiB,CAAA;AAC/B,cAAc,oBAAoB,CAAA;AAClC,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,eAAe,CAAA;AAC7B,cAAc,mBAAmB,CAAA;AACjC,cAAc,WAAW,CAAA;AACzB,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,cAAc,wBAAwB,CAAA;AACtC,cAAc,mBAAmB,CAAA;AACjC,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,qBAAqB,CAAA;AACnC,cAAc,mBAAmB,CAAA;AACjC,cAAc,cAAc,CAAA;AAC5B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,WAAW,CAAA;AACzB,cAAc,gBAAgB,CAAA;AAC9B,cAAc,YAAY,CAAA;AAC1B,cAAc,4BAA4B,CAAA;AAC1C,cAAc,uBAAuB,CAAA;AACrC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,mBAAmB,CAAA;AACjC,cAAc,qCAAqC,CAAA;AACnD,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,cAAc,CAAA;AAC5B,cAAc,yBAAyB,CAAA;AACvC,cAAc,mBAAmB,CAAA;AACjC,cAAc,mBAAmB,CAAA;AACjC,cAAc,yBAAyB,CAAA;AACvC,cAAc,kBAAkB,CAAA;AAChC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,wBAAwB,CAAA;AACtC,cAAc,cAAc,CAAA;AAC5B,cAAc,2BAA2B,CAAA;AACzC,cAAc,wBAAwB,CAAA;AACtC,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,qBAAqB,CAAA;AACnC,cAAc,kBAAkB,CAAA;AAChC,cAAc,gCAAgC,CAAA;AAC9C,cAAc,oBAAoB,CAAA;AAClC,cAAc,2BAA2B,CAAA;AACzC,cAAc,YAAY,CAAA;AAC1B,cAAc,oBAAoB,CAAA;AAClC,cAAc,cAAc,CAAA;AAC5B,cAAc,0BAA0B,CAAA;AACxC,cAAc,sBAAsB,CAAA;AACpC,cAAc,YAAY,CAAA;AAC1B,cAAc,oBAAoB,CAAA;AAClC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,cAAc,CAAA;AAC5B,cAAc,yBAAyB,CAAA;AACvC,cAAc,eAAe,CAAA;AAC7B,cAAc,sBAAsB,CAAA;AACpC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,mBAAmB,CAAA;AACjC,cAAc,0BAA0B,CAAA;AACxC,cAAc,sBAAsB,CAAA;AACpC,cAAc,kBAAkB,CAAA;AAChC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,mBAAmB,CAAA;AACjC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,uBAAuB,CAAA;AACrC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,6BAA6B,CAAA;AAC3C,cAAc,kBAAkB,CAAA;AAChC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,cAAc,CAAA;AAC5B,cAAc,yBAAyB,CAAA;AACvC,cAAc,qBAAqB,CAAA;AACnC,cAAc,eAAe,CAAA;AAC7B,cAAc,oBAAoB,CAAA;AAClC,cAAc,aAAa,CAAA;AAC3B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,wBAAwB,CAAA;AACtC,cAAc,mBAAmB,CAAA;AACjC,cAAc,wBAAwB,CAAA;AACtC,cAAc,mBAAmB,CAAA;AACjC,cAAc,mBAAmB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAA;AAC/B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,0BAA0B,CAAA;AACxC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,qBAAqB,CAAA;AACnC,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,qBAAqB,CAAA;AACnC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,0BAA0B,CAAA;AACxC,cAAc,eAAe,CAAA;AAC7B,cAAc,0BAA0B,CAAA;AACxC,cAAc,cAAc,CAAA;AAC5B,cAAc,mBAAmB,CAAA;AACjC,cAAc,2BAA2B,CAAA;AACzC,cAAc,sBAAsB,CAAA;AACpC,cAAc,sBAAsB,CAAA;AACpC,cAAc,uBAAuB,CAAA;AACrC,cAAc,oBAAoB,CAAA;AAClC,cAAc,eAAe,CAAA;AAC7B,cAAc,uBAAuB,CAAA;AACrC,cAAc,yBAAyB,CAAA;AACvC,cAAc,mBAAmB,CAAA;AACjC,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,wBAAwB,CAAA;AACtC,cAAc,0BAA0B,CAAA;AACxC,cAAc,wBAAwB,CAAA;AACtC,cAAc,wBAAwB,CAAA;AACtC,cAAc,wBAAwB,CAAA;AACtC,cAAc,6BAA6B,CAAA;AAC3C,cAAc,qBAAqB,CAAA;AACnC,cAAc,eAAe,CAAA;AAC7B,cAAc,wBAAwB,CAAA;AACtC,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,sBAAsB,CAAA;AACpC,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,YAAY,CAAA;AAC1B,cAAc,eAAe,CAAA;AAC7B,cAAc,mBAAmB,CAAA;AACjC,cAAc,8BAA8B,CAAA;AAC5C,cAAc,4BAA4B,CAAA;AAC1C,cAAc,iBAAiB,CAAA;AAC/B,cAAc,sBAAsB,CAAA;AACpC,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,0BAA0B,CAAA;AACxC,cAAc,gCAAgC,CAAA;AAC9C,cAAc,cAAc,CAAA;AAC5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,wBAAwB,CAAA;AACtC,cAAc,uBAAuB,CAAA;AACrC,cAAc,kBAAkB,CAAA;AAChC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,eAAe,CAAA;AAC7B,cAAc,UAAU,CAAA;AACxB,cAAc,iBAAiB,CAAA;AAC/B,cAAc,oBAAoB,CAAA;AAClC,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,eAAe,CAAA;AAC7B,cAAc,mBAAmB,CAAA;AACjC,cAAc,WAAW,CAAA;AACzB,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,cAAc,wBAAwB,CAAA;AACtC,cAAc,mBAAmB,CAAA;AACjC,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,qBAAqB,CAAA;AACnC,cAAc,mBAAmB,CAAA;AACjC,cAAc,cAAc,CAAA;AAC5B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,WAAW,CAAA;AACzB,cAAc,gBAAgB,CAAA;AAC9B,cAAc,YAAY,CAAA;AAC1B,cAAc,4BAA4B,CAAA;AAC1C,cAAc,uBAAuB,CAAA;AACrC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,mBAAmB,CAAA;AACjC,cAAc,qCAAqC,CAAA;AACnD,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,cAAc,CAAA;AAC5B,cAAc,yBAAyB,CAAA;AACvC,cAAc,mBAAmB,CAAA;AACjC,cAAc,mBAAmB,CAAA;AACjC,cAAc,yBAAyB,CAAA;AACvC,cAAc,kBAAkB,CAAA;AAChC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,wBAAwB,CAAA;AACtC,cAAc,cAAc,CAAA;AAC5B,cAAc,2BAA2B,CAAA;AACzC,cAAc,wBAAwB,CAAA;AACtC,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,qBAAqB,CAAA;AACnC,cAAc,kBAAkB,CAAA;AAChC,cAAc,gCAAgC,CAAA;AAC9C,cAAc,oBAAoB,CAAA;AAClC,cAAc,2BAA2B,CAAA;AACzC,cAAc,YAAY,CAAA;AAC1B,cAAc,oBAAoB,CAAA;AAClC,cAAc,cAAc,CAAA;AAC5B,cAAc,0BAA0B,CAAA;AACxC,cAAc,sBAAsB,CAAA;AACpC,cAAc,YAAY,CAAA;AAC1B,cAAc,oBAAoB,CAAA;AAClC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,cAAc,CAAA;AAC5B,cAAc,yBAAyB,CAAA;AACvC,cAAc,eAAe,CAAA;AAC7B,cAAc,sBAAsB,CAAA;AACpC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,mBAAmB,CAAA;AACjC,cAAc,0BAA0B,CAAA;AACxC,cAAc,sBAAsB,CAAA;AACpC,cAAc,kBAAkB,CAAA;AAChC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,mBAAmB,CAAA;AACjC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,uBAAuB,CAAA;AACrC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,6BAA6B,CAAA;AAC3C,cAAc,kBAAkB,CAAA;AAChC,cAAc,yBAAyB,CAAA;AACvC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,cAAc,CAAA;AAC5B,cAAc,yBAAyB,CAAA;AACvC,cAAc,qBAAqB,CAAA;AACnC,cAAc,eAAe,CAAA;AAC7B,cAAc,oBAAoB,CAAA;AAClC,cAAc,aAAa,CAAA;AAC3B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,wBAAwB,CAAA;AACtC,cAAc,mBAAmB,CAAA;AACjC,cAAc,wBAAwB,CAAA;AACtC,cAAc,mBAAmB,CAAA;AACjC,cAAc,mBAAmB,CAAA"}

package/dist/known-local-models.d.ts

@@ -0,0 +1,59 @@
+/** One recognised local model family and what its weights can be given. */
+export interface KnownLocalModel {
+    /** Stable family key, for tests and for anything that wants to group by family. */
+    family: string;
+    /** Display name, shown to the user beside the modality it implies. */
+    label: string;
+    /**
+     * Id fragments that identify the family, ALREADY SQUASHED the way {@link squashModelId}
+     * squashes a runner's id (lowercase, alphanumerics only), and matched as substrings. That is
+     * what lets one entry cover every shape the ecosystem serves the same weights under:
+     * `gemma4:12b` (Ollama), `google/gemma-4-12b` (LM Studio), `Gemma-4-12B-it-GGUF` (llama.cpp),
+     * `mlx-community/Gemma-4-12B-4bit` (MLX).
+     */
+    match: readonly string[];
+    /**
+     * Whether the family's weights accept IMAGE input.
+     *
+     * Every entry today says `true`, and that is a rule rather than a coincidence: an entry earns
+     * its place only where the platform's SILENCE would cost a capability. A text-only model
+     * behaves identically whether this table calls it `false` or says nothing (both withhold the
+     * run's design renders), so listing one would add a maintenance surface, and a wrong `false`
+     * would silently withhold pictures from a model that could have read them. The field is
+     * explicit anyway so a future entry that genuinely needs to correct an assumption can.
+     */
+    acceptsImages: boolean;
+}
+/**
+ * The recognised families. Each is here because its publisher documents image input for the
+ * open weights, verified against that publisher's own release material rather than inferred
+ * from a family resemblance.
+ *
+ * A family whose modality depends on the SIZE is deliberately ABSENT rather than approximated:
+ * Gemma 3 is the worked example (its 1B is text-only while its 4B and up are not), and an entry
+ * matching the family name would have told every `gemma3:1b` user their model reads images. When
+ * in doubt, leave it out: the user's own declaration is right there, and an absence self-corrects
+ * where a wrong entry does not.
+ */
+export declare const KNOWN_LOCAL_MODELS: readonly KnownLocalModel[];
+/**
+ * Reduce a runner-reported model id to its comparable core: the last path segment, lowercased,
+ * split on every non-alphanumeric run, packaging tokens dropped, the rest joined.
+ *
+ * One normalisation rather than a set of per-runner regexes, because the SAME weights arrive under
+ * wildly different spellings and the differences are all punctuation and packaging: an org
+ * prefix (`google/`), a size tag (`:12b`), a quantisation suffix (`-q4_k_m`), a format
+ * (`-gguf`, `-mlx`, `.gguf`), a hyphen where another registry uses none. Squashing both sides
+ * and testing for a substring absorbs all of it, and it keeps VERSION digits significant, which
+ * is what stops a `gemma4` entry from claiming a `gemma3` id.
+ */
+export declare function squashModelId(id: string): string;
+/**
+ * The recognised family for a runner-reported model id, or undefined when the platform knows
+ * nothing about it (the normal case for a fine-tune or a private build).
+ *
+ * Callers must treat undefined as "nobody has said", NEVER as "text only": that distinction is
+ * the whole reason `LocalModelDeclaration.acceptsImages` is three-state.
+ */
+export declare function knownLocalModel(id: string | undefined | null): KnownLocalModel | undefined;
+//# sourceMappingURL=known-local-models.d.ts.map

package/dist/known-local-models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"known-local-models.d.ts","sourceRoot":"","sources":["../src/known-local-models.ts"],"names":[],"mappings":"AAoBA,2EAA2E;AAC3E,MAAM,WAAW,eAAe;IAC9B,mFAAmF;IACnF,MAAM,EAAE,MAAM,CAAA;IACd,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAA;IACb;;;;;;OAMG;IACH,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACxB;;;;;;;;;OASG;IACH,aAAa,EAAE,OAAO,CAAA;CACvB;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,eAAe,EAoDxD,CAAA;AAgBD;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAOhD;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,eAAe,GAAG,SAAS,CAK1F"}

package/dist/known-local-models.js

@@ -0,0 +1,130 @@
+// ---------------------------------------------------------------------------
+// What the platform KNOWS about the popular locally-run model families, so the common
+// case needs no declaration from the user.
+//
+// A local model has no `MODEL_CATALOG` entry: it lives on one person's machine, the runner's
+// OpenAI-compatible `/models` probe returns ids and nothing else, and the id itself is free
+// text. That is why `LocalModelDeclaration` exists. But most people run a handful of
+// well-known open-weights families, and asking each of them to hand-declare that Gemma 4
+// reads images is asking them to re-supply a fact this repo can simply carry.
+//
+// So there are two tiers, and the ESCAPE HATCH OUT-RANKS the table: a user's own declaration
+// always wins, because they are the one who knows which build they pulled (a text-only quant,
+// a fine-tune, a re-tagged local copy). This table only answers when they have said nothing.
+//
+// Lives in contracts, not kernel, because BOTH sides must agree about it: the SPA labels the
+// "not set" option with what the table will do, and the engine folds the same answer onto the
+// dispatched ref. A copy on either side would let the settings panel promise a model images
+// that the run then withholds.
+// ---------------------------------------------------------------------------
+/**
+ * The recognised families. Each is here because its publisher documents image input for the
+ * open weights, verified against that publisher's own release material rather than inferred
+ * from a family resemblance.
+ *
+ * A family whose modality depends on the SIZE is deliberately ABSENT rather than approximated:
+ * Gemma 3 is the worked example (its 1B is text-only while its 4B and up are not), and an entry
+ * matching the family name would have told every `gemma3:1b` user their model reads images. When
+ * in doubt, leave it out: the user's own declaration is right there, and an absence self-corrects
+ * where a wrong entry does not.
+ */
+export const KNOWN_LOCAL_MODELS = [
+    {
+        family: 'muse-glimmer',
+        label: 'Muse Glimmer',
+        // Meta's 30B agentic model: a dedicated perception encoder, interleaved text and images.
+        match: ['museglimmer'],
+        acceptsImages: true,
+    },
+    {
+        family: 'gemma4',
+        label: 'Gemma 4',
+        // Google ships native vision in EVERY Gemma 4 variant, 2B through 31B, which is what makes
+        // the bare family name safe to match here where `gemma3` is not.
+        match: ['gemma4'],
+        acceptsImages: true,
+    },
+    {
+        family: 'qwen-vl',
+        label: 'Qwen (VL)',
+        // Qwen's vision-language line, which is EXPLICIT in the id. The plain `qwen3.6` / `qwen3`
+        // builds are left unrecognised on purpose: the series is described as multimodal while
+        // vision is delivered by the `-VL` variants, and that ambiguity is not something to resolve
+        // by guessing on a user's behalf.
+        match: ['qwenvl', 'qwen2vl', 'qwen25vl', 'qwen3vl', 'qwen35vl', 'qwen36vl'],
+        acceptsImages: true,
+    },
+    {
+        family: 'llama4',
+        label: 'Llama 4',
+        // Natively multimodal across Scout and Maverick; the same fact `MODEL_CATALOG` already
+        // declares for the Workers AI flavour of Scout.
+        match: ['llama4'],
+        acceptsImages: true,
+    },
+    {
+        family: 'llava',
+        label: 'LLaVA',
+        match: ['llava'],
+        acceptsImages: true,
+    },
+    {
+        family: 'minicpm-v',
+        label: 'MiniCPM-V',
+        match: ['minicpmv'],
+        acceptsImages: true,
+    },
+    {
+        family: 'moondream',
+        label: 'Moondream',
+        match: ['moondream'],
+        acceptsImages: true,
+    },
+];
+/**
+ * A token that describes how a build was PACKAGED rather than which weights it holds: the
+ * parameter size (`12b`, `8x7b`, `500m`), the quantisation (`q4_k_m`, `4bit`, `fp16`, `int8`) and
+ * the serialisation format (`gguf`, `mlx`, `awq`, …).
+ *
+ * Dropped BEFORE the squash, and that order is the whole point: the squash deletes exactly the
+ * separators that keep a size tag apart from the family name, so `gemma-4b-it` squashed whole
+ * reads as `gemma4bit`, which CONTAINS the `gemma4` fragment and would hand a Gemma 1 4B build
+ * the run's design renders. Removing the packaging first cannot create that adjacency, where a
+ * boundary rule applied after the squash has no boundary left to test.
+ */
+const PACKAGING_TOKEN = /^(?:\d+(?:x\d+)?[bm]|\d+bits?|q\d\w*|fp\d+|bf\d+|int\d+|gguf|ggml|mlx|awq|gptq|exl\d+|safetensors)$/;
+/**
+ * Reduce a runner-reported model id to its comparable core: the last path segment, lowercased,
+ * split on every non-alphanumeric run, packaging tokens dropped, the rest joined.
+ *
+ * One normalisation rather than a set of per-runner regexes, because the SAME weights arrive under
+ * wildly different spellings and the differences are all punctuation and packaging: an org
+ * prefix (`google/`), a size tag (`:12b`), a quantisation suffix (`-q4_k_m`), a format
+ * (`-gguf`, `-mlx`, `.gguf`), a hyphen where another registry uses none. Squashing both sides
+ * and testing for a substring absorbs all of it, and it keeps VERSION digits significant, which
+ * is what stops a `gemma4` entry from claiming a `gemma3` id.
+ */
+export function squashModelId(id) {
+    const segment = id.split('/').pop() ?? id;
+    return segment
+        .toLowerCase()
+        .split(/[^a-z0-9]+/)
+        .filter((token) => token.length > 0 && !PACKAGING_TOKEN.test(token))
+        .join('');
+}
+/**
+ * The recognised family for a runner-reported model id, or undefined when the platform knows
+ * nothing about it (the normal case for a fine-tune or a private build).
+ *
+ * Callers must treat undefined as "nobody has said", NEVER as "text only": that distinction is
+ * the whole reason `LocalModelDeclaration.acceptsImages` is three-state.
+ */
+export function knownLocalModel(id) {
+    if (!id)
+        return undefined;
+    const squashed = squashModelId(id);
+    if (!squashed)
+        return undefined;
+    return KNOWN_LOCAL_MODELS.find((known) => known.match.some((m) => squashed.includes(m)));
+}
+//# sourceMappingURL=known-local-models.js.map

package/dist/known-local-models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"known-local-models.js","sourceRoot":"","sources":["../src/known-local-models.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,sFAAsF;AACtF,2CAA2C;AAC3C,EAAE;AACF,6FAA6F;AAC7F,4FAA4F;AAC5F,qFAAqF;AACrF,yFAAyF;AACzF,8EAA8E;AAC9E,EAAE;AACF,6FAA6F;AAC7F,8FAA8F;AAC9F,6FAA6F;AAC7F,EAAE;AACF,6FAA6F;AAC7F,8FAA8F;AAC9F,4FAA4F;AAC5F,+BAA+B;AAC/B,8EAA8E;AA6B9E;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA+B;IAC5D;QACE,MAAM,EAAE,cAAc;QACtB,KAAK,EAAE,cAAc;QACrB,yFAAyF;QACzF,KAAK,EAAE,CAAC,aAAa,CAAC;QACtB,aAAa,EAAE,IAAI;KACpB;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE,SAAS;QAChB,2FAA2F;QAC3F,iEAAiE;QACjE,KAAK,EAAE,CAAC,QAAQ,CAAC;QACjB,aAAa,EAAE,IAAI;KACpB;IACD;QACE,MAAM,EAAE,SAAS;QACjB,KAAK,EAAE,WAAW;QAClB,0FAA0F;QAC1F,uFAAuF;QACvF,4FAA4F;QAC5F,kCAAkC;QAClC,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC;QAC3E,aAAa,EAAE,IAAI;KACpB;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE,SAAS;QAChB,uFAAuF;QACvF,gDAAgD;QAChD,KAAK,EAAE,CAAC,QAAQ,CAAC;QACjB,aAAa,EAAE,IAAI;KACpB;IACD;QACE,MAAM,EAAE,OAAO;QACf,KAAK,EAAE,OAAO;QACd,KAAK,EAAE,CAAC,OAAO,CAAC;QAChB,aAAa,EAAE,IAAI;KACpB;IACD;QACE,MAAM,EAAE,WAAW;QACnB,KAAK,EAAE,WAAW;QAClB,KAAK,EAAE,CAAC,UAAU,CAAC;QACnB,aAAa,EAAE,IAAI;KACpB;IACD;QACE,MAAM,EAAE,WAAW;QACnB,KAAK,EAAE,WAAW;QAClB,KAAK,EAAE,CAAC,WAAW,CAAC;QACpB,aAAa,EAAE,IAAI;KACpB;CACF,CAAA;AAED;;;;;;;;;;GAUG;AACH,MAAM,eAAe,GACnB,qGAAqG,CAAA;AAEvG;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,EAAU;IACtC,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAA;IACzC,OAAO,OAAO;SACX,WAAW,EAAE;SACb,KAAK,CAAC,YAAY,CAAC;SACnB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACnE,IAAI,CAAC,EAAE,CAAC,CAAA;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,EAA6B;IAC3D,IAAI,CAAC,EAAE;QAAE,OAAO,SAAS,CAAA;IACzB,MAAM,QAAQ,GAAG,aAAa,CAAC,EAAE,CAAC,CAAA;IAClC,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAA;IAC/B,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAC1F,CAAC"}

package/dist/localModels.d.ts

@@ -9,6 +9,30 @@ export declare function isLocalRunner(provider: string): boolean;
 export declare const LOCAL_RUNNER_DEFAULTS: Record<LocalRunner, string | null>;
 /** Short display label per runner, shown in the picker as the provider label. */
 export declare const LOCAL_RUNNER_LABELS: Record<LocalRunner, string>;
+/**
+ * One model a user has ENABLED on a runner, plus what they have DECLARED about it.
+ *
+ * The id alone is not enough, because a local model is not in the curated catalog: nothing
+ * upstream knows whether `muse-glimmer:30b` reads images the way a `MODEL_CATALOG` entry's
+ * flavour declares it. The OpenAI-compatible `/models` probe cannot answer it either (it
+ * returns ids and nothing else), so the person who pulled the weights is the only source
+ * there is, and this is where they say so.
+ *
+ * `acceptsImages` is deliberately THREE-STATE, mirroring `ModelRef.acceptsImages`:
+ * `true` (the runner serves it with image input), `false` (declared text-only) and ABSENT
+ * (nobody has said). The third is the default and is NOT a "no": a run withholds the design
+ * renders either way, but reports `unknown_model_image_input` rather than
+ * `model_no_image_input`, which is the difference between "declare it and this works" and
+ * "this model cannot". Collapsing them would let a multimodal local model read as text-only
+ * forever with nothing saying the platform never asked.
+ */
+export declare const localModelDeclarationSchema: v.ObjectSchema<{
+    /** The model id as the runner serves it (e.g. `muse-glimmer:30b`). */
+    readonly id: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+    /** Whether this runner serves the model with IMAGE input. Absent ⇒ not declared. */
+    readonly acceptsImages: v.OptionalSchema<v.BooleanSchema<undefined>, undefined>;
+}, undefined>;
+export type LocalModelDeclaration = v.InferOutput<typeof localModelDeclarationSchema>;
 /**
  * Why a runner base URL is refused by the deployment's local-runner policy. The SPA maps
  * each member to translated copy (`localModels.urlReason.*`), so the operator-facing
@@ -29,8 +53,20 @@ export declare const localModelEndpointSchema: v.ObjectSchema<{
     readonly baseUrl: v.StringSchema<undefined>;
     /** Whether a (write-only) API key is stored for this endpoint. */
     readonly hasApiKey: v.BooleanSchema<undefined>;
-    /** The model ids the user has enabled from this runner (surfaced in the picker). */
-    readonly models: v.ArraySchema<v.StringSchema<undefined>, undefined>;
+    /** The models the user has enabled from this runner, with what they declared about each. */
+    readonly models: v.ArraySchema<v.ObjectSchema<{
+        /** The model id as the runner serves it (e.g. `muse-glimmer:30b`). */
+        readonly id: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+        /** Whether this runner serves the model with IMAGE input. Absent ⇒ not declared. */
+        readonly acceptsImages: v.OptionalSchema<v.BooleanSchema<undefined>, undefined>;
+    }, undefined>, undefined>;
+    /**
+     * Whether part of this endpoint's stored model list could not be READ and was discarded (a row
+     * written before declarations existed held bare strings). Reported rather than swallowed because
+     * a discarded list and a runner nobody enabled a model on are the same `models: []` and opposite
+     * facts: only one of them is fixed by re-ticking, and nothing else anywhere would say so.
+     */
+    readonly unreadableModels: v.BooleanSchema<undefined>;
     /**
      * Why this stored endpoint is currently unusable under the deployment's runner-URL
      * policy, or `null` when it is fine. A row written while LAN hosts were permitted must
@@ -49,7 +85,12 @@ export declare const upsertLocalModelEndpointSchema: v.ObjectSchema<{
     readonly baseUrl: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 300, undefined>, v.UrlAction<string, undefined>]>;
     /** Optional bearer key (most local runners ignore it); stored encrypted at rest. */
     readonly apiKey: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 400, undefined>]>, undefined>;
-    readonly models: v.ArraySchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 200, undefined>]>, undefined>;
+    readonly models: v.ArraySchema<v.ObjectSchema<{
+        /** The model id as the runner serves it (e.g. `muse-glimmer:30b`). */
+        readonly id: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+        /** Whether this runner serves the model with IMAGE input. Absent ⇒ not declared. */
+        readonly acceptsImages: v.OptionalSchema<v.BooleanSchema<undefined>, undefined>;
+    }, undefined>, undefined>;
 }, undefined>;
 export type UpsertLocalModelEndpointInput = v.InferOutput<typeof upsertLocalModelEndpointSchema>;
 /** Probe a runner endpoint for reachability + the models it currently serves. */
@@ -62,7 +103,11 @@ export type TestLocalModelEndpointInput = v.InferOutput<typeof testLocalModelEnd
 /** The result of probing a runner endpoint's `/models`. */
 export declare const localModelEndpointTestResultSchema: v.ObjectSchema<{
     readonly reachable: v.BooleanSchema<undefined>;
-    /** Model ids the runner reports (empty when unreachable). */
+    /**
+     * Model ids the runner reports (empty when unreachable). Bare ids, NOT declarations: the
+     * probe reads an OpenAI-compatible `/models` list, which carries no modality, and inventing
+     * one here would put a guess where {@link localModelDeclarationSchema} keeps an absence.
+     */
     readonly models: v.ArraySchema<v.StringSchema<undefined>, undefined>;
     /** Human-readable failure reason when `reachable` is false. */
     readonly error: v.OptionalSchema<v.StringSchema<undefined>, undefined>;

package/dist/localModels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"localModels.d.ts","sourceRoot":"","sources":["../src/localModels.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAe5B,oFAAoF;AACpF,eAAO,MAAM,aAAa,YAAI,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAA;AAC1F,eAAO,MAAM,iBAAiB,4FAA4B,CAAA;AAC1D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAEjE,8DAA8D;AAC9D,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED,yFAAyF;AACzF,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAMpE,CAAA;AAED,iFAAiF;AACjF,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAM3D,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,YACnC,aAAa,EACb,oBAAoB,EACpB,yBAAyB,EACzB,+BAA+B,EAC/B,mBAAmB,EACnB,gBAAgB,CACR,CAAA;AACV,eAAO,MAAM,0BAA0B,gLAAuC,CAAA;AAC9E,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,0BAA0B,CAAC,CAAA;AAEnF;;;GAGG;AACH,eAAO,MAAM,wBAAwB;;;;IAInC,kEAAkE;;IAElE,oFAAoF;;IAEpF;;;;;OAKG;;;;aAIH,CAAA;AACF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,wBAAwB,CAAC,CAAA;AAO/E,qFAAqF;AACrF,eAAO,MAAM,8BAA8B;;;;IAIzC,oFAAoF;;;aAGpF,CAAA;AACF,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,8BAA8B,CAAC,CAAA;AAEhG,iFAAiF;AACjF,eAAO,MAAM,4BAA4B;;;;aAIvC,CAAA;AACF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,4BAA4B,CAAC,CAAA;AAE5F,2DAA2D;AAC3D,eAAO,MAAM,kCAAkC;;IAE7C,6DAA6D;;IAE7D,+DAA+D;;IAE/D;;;;OAIG;;aAEH,CAAA;AACF,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,kCAAkC,CAAC,CAAA"}
+{"version":3,"file":"localModels.d.ts","sourceRoot":"","sources":["../src/localModels.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAe5B,oFAAoF;AACpF,eAAO,MAAM,aAAa,YAAI,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAA;AAC1F,eAAO,MAAM,iBAAiB,4FAA4B,CAAA;AAC1D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAEjE,8DAA8D;AAC9D,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED,yFAAyF;AACzF,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAMpE,CAAA;AAED,iFAAiF;AACjF,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAM3D,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,2BAA2B;IACtC,sEAAsE;;IAEtE,oFAAoF;;aAEpF,CAAA;AACF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,2BAA2B,CAAC,CAAA;AAErF;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,YACnC,aAAa,EACb,oBAAoB,EACpB,yBAAyB,EACzB,+BAA+B,EAC/B,mBAAmB,EACnB,gBAAgB,CACR,CAAA;AACV,eAAO,MAAM,0BAA0B,gLAAuC,CAAA;AAC9E,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,0BAA0B,CAAC,CAAA;AAEnF;;;GAGG;AACH,eAAO,MAAM,wBAAwB;;;;IAInC,kEAAkE;;IAElE,4FAA4F;;QAnC5F,sEAAsE;;QAEtE,oFAAoF;;;IAmCpF;;;;;OAKG;;IAEH;;;;;OAKG;;;;aAIH,CAAA;AACF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,wBAAwB,CAAC,CAAA;AAM/E,qFAAqF;AACrF,eAAO,MAAM,8BAA8B;;;;IAIzC,oFAAoF;;;QAjEpF,sEAAsE;;QAEtE,oFAAoF;;;aAkEpF,CAAA;AACF,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,8BAA8B,CAAC,CAAA;AAEhG,iFAAiF;AACjF,eAAO,MAAM,4BAA4B;;;;aAIvC,CAAA;AACF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,4BAA4B,CAAC,CAAA;AAE5F,2DAA2D;AAC3D,eAAO,MAAM,kCAAkC;;IAE7C;;;;OAIG;;IAEH,+DAA+D;;IAE/D;;;;OAIG;;aAEH,CAAA;AACF,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,kCAAkC,CAAC,CAAA"}

package/dist/localModels.js

@@ -34,6 +34,29 @@ export const LOCAL_RUNNER_LABELS = {
     vllm: 'vLLM',
     custom: 'Custom',
 };
+/**
+ * One model a user has ENABLED on a runner, plus what they have DECLARED about it.
+ *
+ * The id alone is not enough, because a local model is not in the curated catalog: nothing
+ * upstream knows whether `muse-glimmer:30b` reads images the way a `MODEL_CATALOG` entry's
+ * flavour declares it. The OpenAI-compatible `/models` probe cannot answer it either (it
+ * returns ids and nothing else), so the person who pulled the weights is the only source
+ * there is, and this is where they say so.
+ *
+ * `acceptsImages` is deliberately THREE-STATE, mirroring `ModelRef.acceptsImages`:
+ * `true` (the runner serves it with image input), `false` (declared text-only) and ABSENT
+ * (nobody has said). The third is the default and is NOT a "no": a run withholds the design
+ * renders either way, but reports `unknown_model_image_input` rather than
+ * `model_no_image_input`, which is the difference between "declare it and this works" and
+ * "this model cannot". Collapsing them would let a multimodal local model read as text-only
+ * forever with nothing saying the platform never asked.
+ */
+export const localModelDeclarationSchema = v.object({
+    /** The model id as the runner serves it (e.g. `muse-glimmer:30b`). */
+    id: v.pipe(v.string(), v.trim(), v.minLength(1), v.maxLength(200)),
+    /** Whether this runner serves the model with IMAGE input. Absent ⇒ not declared. */
+    acceptsImages: v.optional(v.boolean()),
+});
 /**
  * Why a runner base URL is refused by the deployment's local-runner policy. The SPA maps
  * each member to translated copy (`localModels.urlReason.*`), so the operator-facing
@@ -60,8 +83,15 @@ export const localModelEndpointSchema = v.object({
     baseUrl: v.string(),
     /** Whether a (write-only) API key is stored for this endpoint. */
     hasApiKey: v.boolean(),
-    /** The model ids the user has enabled from this runner (surfaced in the picker). */
-    models: v.array(v.string()),
+    /** The models the user has enabled from this runner, with what they declared about each. */
+    models: v.array(localModelDeclarationSchema),
+    /**
+     * Whether part of this endpoint's stored model list could not be READ and was discarded (a row
+     * written before declarations existed held bare strings). Reported rather than swallowed because
+     * a discarded list and a runner nobody enabled a model on are the same `models: []` and opposite
+     * facts: only one of them is fixed by re-ticking, and nothing else anywhere would say so.
+     */
+    unreadableModels: v.boolean(),
     /**
      * Why this stored endpoint is currently unusable under the deployment's runner-URL
      * policy, or `null` when it is fine. A row written while LAN hosts were permitted must
@@ -75,7 +105,6 @@ export const localModelEndpointSchema = v.object({
 const baseUrlSchema = v.pipe(v.string(), v.trim(), v.minLength(1), v.maxLength(300), v.url());
 const labelSchema = v.pipe(v.string(), v.trim(), v.maxLength(60));
 const apiKeySchema = v.pipe(v.string(), v.maxLength(400));
-const modelIdSchema = v.pipe(v.string(), v.trim(), v.minLength(1), v.maxLength(200));
 /** Create or replace the signed-in user's endpoint for a runner (one per runner). */
 export const upsertLocalModelEndpointSchema = v.object({
     provider: localRunnerSchema,
@@ -83,7 +112,7 @@ export const upsertLocalModelEndpointSchema = v.object({
     baseUrl: baseUrlSchema,
     /** Optional bearer key (most local runners ignore it); stored encrypted at rest. */
     apiKey: v.optional(apiKeySchema),
-    models: v.array(modelIdSchema),
+    models: v.array(localModelDeclarationSchema),
 });
 /** Probe a runner endpoint for reachability + the models it currently serves. */
 export const testLocalModelEndpointSchema = v.object({
@@ -94,7 +123,11 @@ export const testLocalModelEndpointSchema = v.object({
 /** The result of probing a runner endpoint's `/models`. */
 export const localModelEndpointTestResultSchema = v.object({
     reachable: v.boolean(),
-    /** Model ids the runner reports (empty when unreachable). */
+    /**
+     * Model ids the runner reports (empty when unreachable). Bare ids, NOT declarations: the
+     * probe reads an OpenAI-compatible `/models` list, which carries no modality, and inventing
+     * one here would put a guess where {@link localModelDeclarationSchema} keeps an absence.
+     */
     models: v.array(v.string()),
     /** Human-readable failure reason when `reachable` is false. */
     error: v.optional(v.string()),

package/dist/localModels.js.map

@@ -1 +1 @@
-{"version":3,"file":"localModels.js","sourceRoot":"","sources":["../src/localModels.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAE5B,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,2EAA2E;AAC3E,wEAAwE;AACxE,EAAE;AACF,8EAA8E;AAC9E,iFAAiF;AACjF,+EAA+E;AAC/E,2EAA2E;AAC3E,8EAA8E;AAE9E,oFAAoF;AACpF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAA;AAC1F,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAA;AAG1D,8DAA8D;AAC9D,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,OAAQ,aAAmC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;AAChE,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,MAAM,qBAAqB,GAAuC;IACvE,MAAM,EAAE,2BAA2B;IACnC,QAAQ,EAAE,0BAA0B;IACpC,QAAQ,EAAE,0BAA0B;IACpC,IAAI,EAAE,0BAA0B;IAChC,MAAM,EAAE,IAAI;CACb,CAAA;AAED,iFAAiF;AACjF,MAAM,CAAC,MAAM,mBAAmB,GAAgC;IAC9D,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,WAAW;IACrB,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;CACjB,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,aAAa;IACb,oBAAoB;IACpB,yBAAyB;IACzB,+BAA+B;IAC/B,mBAAmB;IACnB,gBAAgB;CACR,CAAA;AACV,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAA;AAG9E;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,QAAQ,EAAE,iBAAiB;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,kEAAkE;IAClE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,oFAAoF;IACpF,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B;;;;;OAKG;IACH,gBAAgB,EAAE,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IACxD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAA;AAGF,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAA;AAC7F,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAA;AACjE,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;AACzD,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;AAEpF,qFAAqF;AACrF,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,QAAQ,EAAE,iBAAiB;IAC3B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;IAC9B,OAAO,EAAE,aAAa;IACtB,oFAAoF;IACpF,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;CAC/B,CAAC,CAAA;AAGF,iFAAiF;AACjF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,QAAQ,EAAE,iBAAiB;IAC3B,OAAO,EAAE,aAAa;IACtB,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;CACjC,CAAC,CAAA;AAGF,2DAA2D;AAC3D,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,6DAA6D;IAC7D,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,+DAA+D;IAC/D,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7B;;;;OAIG;IACH,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC;CACpD,CAAC,CAAA"}
+{"version":3,"file":"localModels.js","sourceRoot":"","sources":["../src/localModels.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAE5B,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,2EAA2E;AAC3E,wEAAwE;AACxE,EAAE;AACF,8EAA8E;AAC9E,iFAAiF;AACjF,+EAA+E;AAC/E,2EAA2E;AAC3E,8EAA8E;AAE9E,oFAAoF;AACpF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAA;AAC1F,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAA;AAG1D,8DAA8D;AAC9D,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,OAAQ,aAAmC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;AAChE,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,MAAM,qBAAqB,GAAuC;IACvE,MAAM,EAAE,2BAA2B;IACnC,QAAQ,EAAE,0BAA0B;IACpC,QAAQ,EAAE,0BAA0B;IACpC,IAAI,EAAE,0BAA0B;IAChC,MAAM,EAAE,IAAI;CACb,CAAA;AAED,iFAAiF;AACjF,MAAM,CAAC,MAAM,mBAAmB,GAAgC;IAC9D,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,WAAW;IACrB,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;CACjB,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,sEAAsE;IACtE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAClE,oFAAoF;IACpF,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;CACvC,CAAC,CAAA;AAGF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,aAAa;IACb,oBAAoB;IACpB,yBAAyB;IACzB,+BAA+B;IAC/B,mBAAmB;IACnB,gBAAgB;CACR,CAAA;AACV,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAA;AAG9E;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,QAAQ,EAAE,iBAAiB;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,kEAAkE;IAClE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,4FAA4F;IAC5F,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC;IAC5C;;;;;OAKG;IACH,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC7B;;;;;OAKG;IACH,gBAAgB,EAAE,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IACxD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAA;AAGF,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAA;AAC7F,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAA;AACjE,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;AAEzD,qFAAqF;AACrF,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,QAAQ,EAAE,iBAAiB;IAC3B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;IAC9B,OAAO,EAAE,aAAa;IACtB,oFAAoF;IACpF,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC;CAC7C,CAAC,CAAA;AAGF,iFAAiF;AACjF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,QAAQ,EAAE,iBAAiB;IAC3B,OAAO,EAAE,aAAa;IACtB,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;CACjC,CAAC,CAAA;AAGF,2DAA2D;AAC3D,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB;;;;OAIG;IACH,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,+DAA+D;IAC/D,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7B;;;;OAIG;IACH,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC;CACpD,CAAC,CAAA"}

package/dist/personal-subscriptions.d.ts

@@ -1,11 +1,31 @@
 import * as v from 'valibot';
+/** The personal password's length bounds, named so a message about them cannot drift from it. */
+export declare const PERSONAL_PASSWORD_MIN_LENGTH = 6;
+export declare const PERSONAL_PASSWORD_MAX_LENGTH = 256;
 /**
  * The personal password that gates the second encryption layer (6–256 chars). Restricted
  * to printable ASCII so the same value can ride **raw** in the `X-Personal-Password`
  * request header (see below) when unlocking a run — HTTP header values must be Latin-1, so
  * a non-ASCII password could not be sent without encoding. Never stored server-side.
+ *
+ * A SPACE is printable, so a leading or trailing one is part of a legal password. Anything that
+ * collects this value must therefore not trim it: see {@link personalPasswordProblem}.
  */
 export declare const personalPasswordSchema: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 6, undefined>, v.MaxLengthAction<string, 256, undefined>, v.RegexAction<string, "Password must use printable ASCII characters (no tabs/newlines).">]>;
+/**
+ * Why a candidate personal password would be refused, in words for a human, or `null` when it
+ * would be accepted.
+ *
+ * It exists because more than one surface has to STATE this rule while collecting the value (the
+ * acceptance suite's terminal prompt today, any local check a form adds tomorrow), and a
+ * hand-written "must be at least 6 characters" beside the schema is the copy that goes stale the
+ * day the schema moves. Checked with the schema itself and worded from the same constants.
+ *
+ * Deliberately no trimming, here or in the callers: a space is printable ASCII, so `" hunter2"` is
+ * a legal stored password, and a collector that trimmed it would send a DIFFERENT password than the
+ * one typed and report the deployment's `wrong_password` as if the operator had mistyped.
+ */
+export declare function personalPasswordProblem(candidate: string): string | null;
 /**
  * HTTP header carrying the personal password to unlock a run's individual-usage
  * credential(s). It is an AMBIENT credential — like the bearer token, the client attaches

package/dist/personal-subscriptions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"personal-subscriptions.d.ts","sourceRoot":"","sources":["../src/personal-subscriptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAwB5B;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,uOAKlC,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,wBAAwB,CAAA;AAE7D,kFAAkF;AAClF,eAAO,MAAM,+BAA+B;;;IAG1C,sFAAsF;;IAEtF,8EAA8E;;IAE9E;;;OAGG;;aAEH,CAAA;AACF,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,+BAA+B,CAAC,CAAA;AAElG,uFAAuF;AACvF,eAAO,MAAM,gCAAgC;;;;;;IAM3C,4DAA4D;;IAE5D,gFAAgF;;IAEhF,4DAA4D;;IAE5D,iFAAiF;;aAEjF,CAAA;AACF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,gCAAgC,CAAC,CAAA;AAE/F,eAAO,MAAM,8BAA8B;;;;;;IAXzC,4DAA4D;;IAE5D,gFAAgF;;IAEhF,4DAA4D;;IAE5D,iFAAiF;;yBAKI,CAAA;AACvF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,8BAA8B,CAAC,CAAA"}
+{"version":3,"file":"personal-subscriptions.d.ts","sourceRoot":"","sources":["../src/personal-subscriptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAwB5B,iGAAiG;AACjG,eAAO,MAAM,4BAA4B,IAAI,CAAA;AAC7C,eAAO,MAAM,4BAA4B,MAAM,CAAA;AAE/C;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,uOAKlC,CAAA;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAWxE;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,wBAAwB,CAAA;AAE7D,kFAAkF;AAClF,eAAO,MAAM,+BAA+B;;;IAG1C,sFAAsF;;IAEtF,8EAA8E;;IAE9E;;;OAGG;;aAEH,CAAA;AACF,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,+BAA+B,CAAC,CAAA;AAElG,uFAAuF;AACvF,eAAO,MAAM,gCAAgC;;;;;;IAM3C,4DAA4D;;IAE5D,gFAAgF;;IAEhF,4DAA4D;;IAE5D,iFAAiF;;aAEjF,CAAA;AACF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,gCAAgC,CAAC,CAAA;AAE/F,eAAO,MAAM,8BAA8B;;;;;;IAXzC,4DAA4D;;IAE5D,gFAAgF;;IAEhF,4DAA4D;;IAE5D,iFAAiF;;yBAKI,CAAA;AACvF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,8BAA8B,CAAC,CAAA"}

package/dist/personal-subscriptions.js

@@ -20,13 +20,45 @@ import { subscriptionVendorSchema } from './vendor-credentials.js';
 // the primary at-rest protection. See docs/individual-subscription-usage.md §3 for the
 // honest threat model + the full safeguards.
 // ---------------------------------------------------------------------------
+/** The personal password's length bounds, named so a message about them cannot drift from it. */
+export const PERSONAL_PASSWORD_MIN_LENGTH = 6;
+export const PERSONAL_PASSWORD_MAX_LENGTH = 256;
 /**
  * The personal password that gates the second encryption layer (6–256 chars). Restricted
  * to printable ASCII so the same value can ride **raw** in the `X-Personal-Password`
  * request header (see below) when unlocking a run — HTTP header values must be Latin-1, so
  * a non-ASCII password could not be sent without encoding. Never stored server-side.
+ *
+ * A SPACE is printable, so a leading or trailing one is part of a legal password. Anything that
+ * collects this value must therefore not trim it: see {@link personalPasswordProblem}.
  */
-export const personalPasswordSchema = v.pipe(v.string(), v.minLength(6), v.maxLength(256), v.regex(/^[\x20-\x7e]+$/, 'Password must use printable ASCII characters (no tabs/newlines).'));
+export const personalPasswordSchema = v.pipe(v.string(), v.minLength(PERSONAL_PASSWORD_MIN_LENGTH), v.maxLength(PERSONAL_PASSWORD_MAX_LENGTH), v.regex(/^[\x20-\x7e]+$/, 'Password must use printable ASCII characters (no tabs/newlines).'));
+/**
+ * Why a candidate personal password would be refused, in words for a human, or `null` when it
+ * would be accepted.
+ *
+ * It exists because more than one surface has to STATE this rule while collecting the value (the
+ * acceptance suite's terminal prompt today, any local check a form adds tomorrow), and a
+ * hand-written "must be at least 6 characters" beside the schema is the copy that goes stale the
+ * day the schema moves. Checked with the schema itself and worded from the same constants.
+ *
+ * Deliberately no trimming, here or in the callers: a space is printable ASCII, so `" hunter2"` is
+ * a legal stored password, and a collector that trimmed it would send a DIFFERENT password than the
+ * one typed and report the deployment's `wrong_password` as if the operator had mistyped.
+ */
+export function personalPasswordProblem(candidate) {
+    if (candidate.length === 0)
+        return 'No password entered.';
+    if (candidate.length < PERSONAL_PASSWORD_MIN_LENGTH) {
+        return `A personal password is at least ${PERSONAL_PASSWORD_MIN_LENGTH} characters; this one is ${candidate.length}.`;
+    }
+    if (candidate.length > PERSONAL_PASSWORD_MAX_LENGTH) {
+        return `A personal password is at most ${PERSONAL_PASSWORD_MAX_LENGTH} characters; this one is ${candidate.length}.`;
+    }
+    return v.is(personalPasswordSchema, candidate)
+        ? null
+        : 'A personal password must use printable ASCII only (it travels as an HTTP header, which is Latin-1).';
+}
 /**
  * HTTP header carrying the personal password to unlock a run's individual-usage
  * credential(s). It is an AMBIENT credential — like the bearer token, the client attaches

package/dist/personal-subscriptions.js.map

@@ -1 +1 @@
-{"version":3,"file":"personal-subscriptions.js","sourceRoot":"","sources":["../src/personal-subscriptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAA;AAElE,8EAA8E;AAC9E,2DAA2D;AAC3D,EAAE;AACF,gFAAgF;AAChF,+EAA+E;AAC/E,+EAA+E;AAC/E,4EAA4E;AAC5E,wEAAwE;AACxE,6EAA6E;AAC7E,gFAAgF;AAChF,6EAA6E;AAC7E,uFAAuF;AACvF,0FAA0F;AAC1F,uEAAuE;AACvE,EAAE;AACF,sFAAsF;AACtF,yFAAyF;AACzF,uFAAuF;AACvF,6CAA6C;AAC7C,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAC1C,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EACd,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAChB,CAAC,CAAC,KAAK,CAAC,gBAAgB,EAAE,kEAAkE,CAAC,CAC9F,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAA;AAE7D,kFAAkF;AAClF,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,MAAM,EAAE,wBAAwB;IAChC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACrE,sFAAsF;IACtF,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACnD,8EAA8E;IAC9E,QAAQ,EAAE,sBAAsB;IAChC;;;OAGG;IACH,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;CAC9C,CAAC,CAAA;AAGF,uFAAuF;AACvF,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,MAAM,EAAE,wBAAwB;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAClC,4DAA4D;IAC5D,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,gFAAgF;IAChF,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACrC,4DAA4D;IAC5D,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,iFAAiF;IACjF,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;CACvB,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAA"}
+{"version":3,"file":"personal-subscriptions.js","sourceRoot":"","sources":["../src/personal-subscriptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAA;AAElE,8EAA8E;AAC9E,2DAA2D;AAC3D,EAAE;AACF,gFAAgF;AAChF,+EAA+E;AAC/E,+EAA+E;AAC/E,4EAA4E;AAC5E,wEAAwE;AACxE,6EAA6E;AAC7E,gFAAgF;AAChF,6EAA6E;AAC7E,uFAAuF;AACvF,0FAA0F;AAC1F,uEAAuE;AACvE,EAAE;AACF,sFAAsF;AACtF,yFAAyF;AACzF,uFAAuF;AACvF,6CAA6C;AAC7C,8EAA8E;AAE9E,iGAAiG;AACjG,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAA;AAC7C,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAA;AAE/C;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAC1C,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,EACzC,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,EACzC,CAAC,CAAC,KAAK,CAAC,gBAAgB,EAAE,kEAAkE,CAAC,CAC9F,CAAA;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAiB;IACvD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,sBAAsB,CAAA;IACzD,IAAI,SAAS,CAAC,MAAM,GAAG,4BAA4B,EAAE,CAAC;QACpD,OAAO,mCAAmC,4BAA4B,4BAA4B,SAAS,CAAC,MAAM,GAAG,CAAA;IACvH,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,4BAA4B,EAAE,CAAC;QACpD,OAAO,kCAAkC,4BAA4B,4BAA4B,SAAS,CAAC,MAAM,GAAG,CAAA;IACtH,CAAC;IACD,OAAO,CAAC,CAAC,EAAE,CAAC,sBAAsB,EAAE,SAAS,CAAC;QAC5C,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,qGAAqG,CAAA;AAC3G,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAA;AAE7D,kFAAkF;AAClF,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,MAAM,EAAE,wBAAwB;IAChC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACrE,sFAAsF;IACtF,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACnD,8EAA8E;IAC9E,QAAQ,EAAE,sBAAsB;IAChC;;;OAGG;IACH,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;CAC9C,CAAC,CAAA;AAGF,uFAAuF;AACvF,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,MAAM,EAAE,wBAAwB;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAClC,4DAA4D;IAC5D,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,gFAAgF;IAChF,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACrC,4DAA4D;IAC5D,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,iFAAiF;IACjF,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;CACvB,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAA"}

package/dist/public-api-keys.d.ts

@@ -61,6 +61,16 @@ export declare const publicApiKeySchema: v.ObjectSchema<{
      * value that could move would retro-attribute every run it already started.
      */
     readonly externalIdentity: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+    /**
+     * The user (`usr_*`) whose PERSONAL subscriptions this key may unlock, or `null` for a key that
+     * did not opt in (the default, and every headlessly-minted key).
+     *
+     * Always equal to {@link publicApiKeySchema.entries.createdByUserId} when set: a person binds
+     * their OWN key, and there is no way to name anyone else. Reading it as "this key can act as
+     * this user" overstates it — it admits the per-run personal-credential unlock and nothing more,
+     * and only on a call that also carries that user's personal password.
+     */
+    readonly actsAsUserId: v.NullableSchema<v.StringSchema<undefined>, undefined>;
     readonly createdAt: v.NumberSchema<undefined>;
     readonly lastUsedAt: v.NullableSchema<v.NumberSchema<undefined>, undefined>;
     /** Set when the key was revoked (tombstone); a revoked key never authenticates. */
@@ -94,6 +104,16 @@ export declare const publicApiKeyListResultSchema: v.ObjectSchema<{
          * value that could move would retro-attribute every run it already started.
          */
         readonly externalIdentity: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+        /**
+         * The user (`usr_*`) whose PERSONAL subscriptions this key may unlock, or `null` for a key that
+         * did not opt in (the default, and every headlessly-minted key).
+         *
+         * Always equal to {@link publicApiKeySchema.entries.createdByUserId} when set: a person binds
+         * their OWN key, and there is no way to name anyone else. Reading it as "this key can act as
+         * this user" overstates it — it admits the per-run personal-credential unlock and nothing more,
+         * and only on a call that also carries that user's personal password.
+         */
+        readonly actsAsUserId: v.NullableSchema<v.StringSchema<undefined>, undefined>;
         readonly createdAt: v.NumberSchema<undefined>;
         readonly lastUsedAt: v.NullableSchema<v.NumberSchema<undefined>, undefined>;
         /** Set when the key was revoked (tombstone); a revoked key never authenticates. */
@@ -111,6 +131,25 @@ export type PublicApiKeyListResult = v.InferOutput<typeof publicApiKeyListResult
 export declare const createPublicApiKeySchema: v.ObjectSchema<{
     readonly label: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>]>;
     readonly scope: v.OptionalSchema<v.PicklistSchema<readonly ["read", "write", "decide", "admin"], undefined>, "write">;
+    /**
+     * Which of the two IDENTITIES this key runs as. The default, `false`, is a SYSTEM key: its runs
+     * are attributed to nobody and it can reach no personal (individual-usage) subscription at all,
+     * so a task pinned to such a model is refused rather than charged to a person who is not there.
+     * `true` binds the key to the person minting it, so a run it starts is theirs and may unlock
+     * THEIR subscription with the password supplied on that same call.
+     *
+     * Both are first-class, and an integration should hold the narrower one unless it specifically
+     * needs the other: a shared CI credential wants system, and a developer driving their own
+     * headless runs wants self. That is also why the field is not merely a capability toggle — it
+     * decides whose credentials, spend and merge-policy role a run answers to.
+     *
+     * A boolean rather than a user id, and that is the safety property rather than an ergonomic
+     * one: the only value the server will write is the caller's own id, so the wire shape cannot
+     * express minting a key onto someone else's subscription. Refused outright when there is no
+     * signed-in user to bind (a dev-open mint), because a key bound to nobody would silently behave
+     * like a system one at the moment a run needed the credential.
+     */
+    readonly actsAsSelf: v.OptionalSchema<v.BooleanSchema<undefined>, false>;
 }, undefined>;
 export type CreatePublicApiKeyInput = v.InferOutput<typeof createPublicApiKeySchema>;
 /**
@@ -190,6 +229,16 @@ export declare const createdPublicApiKeySchema: v.ObjectSchema<{
          * value that could move would retro-attribute every run it already started.
          */
         readonly externalIdentity: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+        /**
+         * The user (`usr_*`) whose PERSONAL subscriptions this key may unlock, or `null` for a key that
+         * did not opt in (the default, and every headlessly-minted key).
+         *
+         * Always equal to {@link publicApiKeySchema.entries.createdByUserId} when set: a person binds
+         * their OWN key, and there is no way to name anyone else. Reading it as "this key can act as
+         * this user" overstates it — it admits the per-run personal-credential unlock and nothing more,
+         * and only on a call that also carries that user's personal password.
+         */
+        readonly actsAsUserId: v.NullableSchema<v.StringSchema<undefined>, undefined>;
         readonly createdAt: v.NumberSchema<undefined>;
         readonly lastUsedAt: v.NullableSchema<v.NumberSchema<undefined>, undefined>;
         /** Set when the key was revoked (tombstone); a revoked key never authenticates. */