@sema-agent/client-core 0.101.0 → 0.103.0

package/dist/generated/engineNoticeTables.js

@@ -25,6 +25,7 @@ export const CORE_ENGINE_NOTICE_CODES = Object.freeze([
     "config.peer_admission_out_of_range",
     "config.peer_lane_unmounted",
     "config.secret_env_scrubbed",
+    "inherit_env.names_withheld",
     "config.credential_not_withheld",
     "config.cross_boundary_posture_undeclared",
     "config.cross_boundary_record_unwritten",
@@ -50,6 +51,7 @@ export const CORE_ENGINE_NOTICE_CODES = Object.freeze([
     "mcp.injection_dropped",
     "mcp.revocation_probe_failed",
     "mcp.server_redialed",
+    "mcp.authorization_required",
     "workflow.governance_key_stripped",
     "workflow.agent_option_ignored",
     "memory.session_polluted",
@@ -72,12 +74,16 @@ export const CORE_ENGINE_NOTICE_CODES = Object.freeze([
     "route.seat_detached",
     "advisor.not_attached",
     "route.credential_origin_mismatch",
+    "route.credential_rebound",
     "route.response_model_mismatch",
     "route.tool_call_id_folded",
     "route.finish_reason_unknown",
     "route.stream_end_ignored",
     "route.extra_body_reserved_dropped",
+    "model.capability_downgraded",
+    "model.role_defaulted",
     "context.tool_turn_repaired",
+    "context.image_removed",
     "task.user_steer_undrained",
     "task.user_followup_undrained",
     "steering.parked_input_blocked",
@@ -127,6 +133,7 @@ export const CORE_NOTICE_AUDIENCE = Object.freeze({
     "config.peer_admission_out_of_range": "operator",
     "config.peer_lane_unmounted": "operator",
     "config.secret_env_scrubbed": "operator",
+    "inherit_env.names_withheld": "user",
     "config.credential_not_withheld": "operator",
     "config.cross_boundary_posture_undeclared": "operator",
     "config.cross_boundary_record_unwritten": "operator",
@@ -152,6 +159,7 @@ export const CORE_NOTICE_AUDIENCE = Object.freeze({
     "mcp.injection_dropped": "user",
     "mcp.revocation_probe_failed": "operator",
     "mcp.server_redialed": "operator",
+    "mcp.authorization_required": "user",
     "workflow.governance_key_stripped": "operator",
     "workflow.agent_option_ignored": "operator",
     "memory.session_polluted": "user",
@@ -174,12 +182,16 @@ export const CORE_NOTICE_AUDIENCE = Object.freeze({
     "route.seat_detached": "operator",
     "advisor.not_attached": "user",
     "route.credential_origin_mismatch": "user",
+    "route.credential_rebound": "operator",
     "route.response_model_mismatch": "operator",
     "route.tool_call_id_folded": "operator",
     "route.finish_reason_unknown": "user",
     "route.stream_end_ignored": "user",
     "route.extra_body_reserved_dropped": "operator",
+    "model.capability_downgraded": "user",
+    "model.role_defaulted": "operator",
     "context.tool_turn_repaired": "operator",
+    "context.image_removed": "user",
     "task.user_steer_undrained": "user",
     "task.user_followup_undrained": "user",
     "steering.parked_input_blocked": "user",
@@ -235,6 +247,7 @@ export const CORE_NOTICE_MINTER = Object.freeze({
     "config.peer_admission_out_of_range": "engine",
     "config.peer_lane_unmounted": "engine",
     "config.secret_env_scrubbed": "engine",
+    "inherit_env.names_withheld": "engine",
     "config.credential_not_withheld": "engine",
     "config.cross_boundary_posture_undeclared": "engine",
     "config.cross_boundary_record_unwritten": "engine",
@@ -260,6 +273,7 @@ export const CORE_NOTICE_MINTER = Object.freeze({
     "mcp.injection_dropped": "engine",
     "mcp.revocation_probe_failed": "engine",
     "mcp.server_redialed": "engine",
+    "mcp.authorization_required": "engine",
     "workflow.governance_key_stripped": "engine",
     "workflow.agent_option_ignored": "engine",
     "memory.session_polluted": "engine",
@@ -282,12 +296,16 @@ export const CORE_NOTICE_MINTER = Object.freeze({
     "route.seat_detached": "engine",
     "advisor.not_attached": "engine",
     "route.credential_origin_mismatch": "engine",
+    "route.credential_rebound": "engine",
     "route.response_model_mismatch": "engine",
     "route.tool_call_id_folded": "engine",
     "route.finish_reason_unknown": "engine",
     "route.stream_end_ignored": "engine",
     "route.extra_body_reserved_dropped": "engine",
+    "model.capability_downgraded": "engine",
+    "model.role_defaulted": "engine",
     "context.tool_turn_repaired": "engine",
+    "context.image_removed": "engine",
     "task.user_steer_undrained": "engine",
     "task.user_followup_undrained": "engine",
     "steering.parked_input_blocked": "engine",

package/dist/generated/settingsSchemaDefaultModel.d.ts

@@ -8,4 +8,4 @@ export declare const SETTINGS_DEFAULT_MODEL_CLOSURE: (resolveActiveTiers: (model
     readonly activeTierGroup?: string | undefined;
 }) => {
     [tier: string]: string;
-} | undefined) => any;
+} | undefined, tierLadderFrom: (tier: string) => string[]) => any;

package/dist/generated/settingsSchemaDefaultModel.js

@@ -1,5 +1,5 @@
-export const SETTINGS_DEFAULT_MODEL_CLOSURE = (resolveActiveTiers) => {
-    const DEFAULT_ROLE_TIER_LADDER = ["pro", "flash", "lite"];
+export const SETTINGS_DEFAULT_MODEL_CLOSURE = (resolveActiveTiers, tierLadderFrom) => {
+    const DEFAULT_ROLE_TIER_LADDER = tierLadderFrom("pro");
     function resolveCatalogDefaultModel(models, has, fallback) {
         const target = models.roles?.default;
         const named = target !== undefined && "model" in target ? target.model : undefined;

package/dist/generated/settingsSchemaFns.d.ts

@@ -22,6 +22,18 @@ export declare const SETTINGS_CLASSIFY_HOOKS_CONFIG: (settingsDoc: unknown) => H
 export declare const SETTINGS_STRIP_CONTROL_AND_BIDI: (text: string) => string;
 export declare const SETTINGS_CONTROL_AND_BIDI_CHARS: string;
 export declare const SETTINGS_ECHO_CALLER_TEXT: (text: string) => string;
+export declare const SETTINGS_IS_JSON_ARRAY: (v: unknown) => v is unknown[];
+export declare const SETTINGS_JSON_SHAPE_OF: (v: unknown) => "plain" | "non_plain_object" | "array" | "null" | "primitive" | "uninspectable";
+export declare const SETTINGS_CAPTURE_STRING_ARRAY: (v: unknown, classification: "strict" | "wide") => string[] | undefined;
+export declare const SETTINGS_UNINSPECTABLE: "an object that could not be inspected (a proxy trap threw)";
+export declare const SETTINGS_DATA_DESCRIPTOR: (value: unknown) => PropertyDescriptor;
+export declare const SETTINGS_INSPECT: (read: () => unknown) => object;
+export declare const SETTINGS_OWN_FIELDS_OF: (record: object, keys: readonly string[]) => object;
+export declare const SETTINGS_OWN_VALUE_OF: (record: object, key: string) => object;
+export declare const SETTINGS_READ_KEY: (record: object, key: PropertyKey) => object;
+export declare const SETTINGS_IS_RESERVED_MCP_SERVER_NAME: (name: string) => boolean;
+export declare const SETTINGS_REMOTE_MCP_SERVER_NAME_PREFIX: "remote-";
+export declare const SETTINGS_RESERVED_MCP_SERVER_NAME_REASON: "the \"remote-\" prefix is reserved for the remote MCP servers a device executor offers";
 export declare const SETTINGS_READ_REQUEST_MCP_TRANSPORT: (t: unknown) => RequestMcpTransportRead;
 export declare const SETTINGS_READ_MCP_IDENTITY_HEADERS: (transport: Record<string, unknown>) => {
     principalHeader?: string;
@@ -29,6 +41,8 @@ export declare const SETTINGS_READ_MCP_IDENTITY_HEADERS: (transport: Record<stri
 };
 export declare const SETTINGS_IS_USABLE_WIRE_NAME: (v: unknown) => v is string;
 export declare const SETTINGS_DESCRIBE_BAD_WIRE_NAME: (v: unknown) => string;
+export declare const SETTINGS_IS_USABLE_MCP_SERVER_NAME: (v: unknown) => v is string;
+export declare const SETTINGS_DESCRIBE_BAD_MCP_SERVER_NAME: (v: unknown) => string;
 export declare const SETTINGS_IS_CONTENT_ORIGIN_WORD: (v: unknown) => v is McpContentOrigin;
 export declare const SETTINGS_DESCRIBE_BAD_CONTENT_ORIGIN: (v: unknown) => string;
 export declare const SETTINGS_TOOL_WIRE_NAME_MAX_CHARS: 128;
@@ -48,6 +62,7 @@ export declare const SETTINGS_RESOLVE_ACTIVE_TIERS: (models: {
 }) => {
     [tier: string]: string;
 } | undefined;
+export declare const SETTINGS_TIER_LADDER_FROM: (tier: string) => string[];
 export declare const SETTINGS_RESOLVE_CATALOG_DEFAULT_MODEL: (models: {
     readonly roles?: {
         readonly default?: {

package/dist/generated/settingsSchemaFns.js

@@ -1,6 +1,9 @@
 import { SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE } from './settingsSchemaHooksClassifier.js';
 import { SETTINGS_CONTROL_AND_BIDI_CLOSURE } from './settingsSchemaControlAndBidi.js';
 import { SETTINGS_CALLER_TEXT_ECHO_CLOSURE } from './settingsSchemaCallerTextEcho.js';
+import { SETTINGS_PLAIN_JSON_OBJECT_CLOSURE } from './settingsSchemaPlainJsonObject.js';
+import { SETTINGS_OWN_KEY_READ_CLOSURE } from './settingsSchemaOwnKeyRead.js';
+import { SETTINGS_MCP_SERVER_NAME_CLOSURE } from './settingsSchemaMcpServerName.js';
 import { SETTINGS_MCP_REQUEST_ENTRY_CLOSURE } from './settingsSchemaMcpRequestEntry.js';
 import { SETTINGS_MCP_CONTENT_ORIGINS } from './settingsSchemaTables.js';
 import { SETTINGS_URL_ALLOW_PATTERN_MATCHES_CLOSURE } from './settingsSchemaUrlPattern.js';
@@ -8,6 +11,7 @@ import { SETTINGS_SAFETY_MERGE_CLOSURE } from './settingsSchemaSafetyMergeSpec.j
 import { SETTINGS_MIN_TRUST_WORDS } from './settingsSchemaTables.js';
 import { SETTINGS_LAYER_SOURCES_CLOSURE } from './settingsSchemaSettingsSources.js';
 import { SETTINGS_ACTIVE_TIERS_CLOSURE } from './settingsSchemaActiveTiers.js';
+import { SETTINGS_TIER_WORDS_CLOSURE } from './settingsSchemaTierWords.js';
 import { SETTINGS_DEFAULT_MODEL_CLOSURE } from './settingsSchemaDefaultModel.js';
 export const SETTINGS_AT_MENTION_MODES = Object.freeze([
     "all",
@@ -148,11 +152,28 @@ export const SETTINGS_STRIP_CONTROL_AND_BIDI = SETTINGS_CONTROL_AND_BIDI.stripCo
 export const SETTINGS_CONTROL_AND_BIDI_CHARS = SETTINGS_CONTROL_AND_BIDI.CONTROL_AND_BIDI_CHARS;
 const SETTINGS_CALLER_TEXT_ECHO = SETTINGS_CALLER_TEXT_ECHO_CLOSURE(SETTINGS_STRIP_CONTROL_AND_BIDI);
 export const SETTINGS_ECHO_CALLER_TEXT = SETTINGS_CALLER_TEXT_ECHO.echoCallerText;
-const SETTINGS_MCP_REQUEST_ENTRY = SETTINGS_MCP_REQUEST_ENTRY_CLOSURE(SETTINGS_MCP_CONTENT_ORIGINS, SETTINGS_STARTS_WITH_HTTP_SCHEME, SETTINGS_ECHO_CALLER_TEXT);
+const SETTINGS_PLAIN_JSON_OBJECT = SETTINGS_PLAIN_JSON_OBJECT_CLOSURE();
+export const SETTINGS_IS_JSON_ARRAY = SETTINGS_PLAIN_JSON_OBJECT.isJsonArray;
+export const SETTINGS_JSON_SHAPE_OF = SETTINGS_PLAIN_JSON_OBJECT.jsonShapeOf;
+const SETTINGS_OWN_KEY_READ = SETTINGS_OWN_KEY_READ_CLOSURE(SETTINGS_IS_JSON_ARRAY);
+export const SETTINGS_CAPTURE_STRING_ARRAY = SETTINGS_OWN_KEY_READ.captureStringArray;
+export const SETTINGS_UNINSPECTABLE = SETTINGS_OWN_KEY_READ.UNINSPECTABLE;
+export const SETTINGS_DATA_DESCRIPTOR = SETTINGS_OWN_KEY_READ.dataDescriptor;
+export const SETTINGS_INSPECT = SETTINGS_OWN_KEY_READ.inspect;
+export const SETTINGS_OWN_FIELDS_OF = SETTINGS_OWN_KEY_READ.ownFieldsOf;
+export const SETTINGS_OWN_VALUE_OF = SETTINGS_OWN_KEY_READ.ownValueOf;
+export const SETTINGS_READ_KEY = SETTINGS_OWN_KEY_READ.readKey;
+const SETTINGS_MCP_SERVER_NAME = SETTINGS_MCP_SERVER_NAME_CLOSURE();
+export const SETTINGS_IS_RESERVED_MCP_SERVER_NAME = SETTINGS_MCP_SERVER_NAME.isReservedMcpServerName;
+export const SETTINGS_REMOTE_MCP_SERVER_NAME_PREFIX = SETTINGS_MCP_SERVER_NAME.REMOTE_MCP_SERVER_NAME_PREFIX;
+export const SETTINGS_RESERVED_MCP_SERVER_NAME_REASON = SETTINGS_MCP_SERVER_NAME.RESERVED_MCP_SERVER_NAME_REASON;
+const SETTINGS_MCP_REQUEST_ENTRY = SETTINGS_MCP_REQUEST_ENTRY_CLOSURE(SETTINGS_MCP_CONTENT_ORIGINS, SETTINGS_STARTS_WITH_HTTP_SCHEME, SETTINGS_ECHO_CALLER_TEXT, SETTINGS_UNINSPECTABLE, SETTINGS_CAPTURE_STRING_ARRAY, SETTINGS_DATA_DESCRIPTOR, SETTINGS_INSPECT, SETTINGS_OWN_FIELDS_OF, SETTINGS_OWN_VALUE_OF, SETTINGS_READ_KEY, SETTINGS_IS_JSON_ARRAY, SETTINGS_JSON_SHAPE_OF, SETTINGS_IS_RESERVED_MCP_SERVER_NAME, SETTINGS_RESERVED_MCP_SERVER_NAME_REASON);
 export const SETTINGS_READ_REQUEST_MCP_TRANSPORT = SETTINGS_MCP_REQUEST_ENTRY.readRequestMcpTransport;
 export const SETTINGS_READ_MCP_IDENTITY_HEADERS = SETTINGS_MCP_REQUEST_ENTRY.readMcpIdentityHeaders;
 export const SETTINGS_IS_USABLE_WIRE_NAME = SETTINGS_MCP_REQUEST_ENTRY.isUsableWireName;
 export const SETTINGS_DESCRIBE_BAD_WIRE_NAME = SETTINGS_MCP_REQUEST_ENTRY.describeBadWireName;
+export const SETTINGS_IS_USABLE_MCP_SERVER_NAME = SETTINGS_MCP_REQUEST_ENTRY.isUsableMcpServerName;
+export const SETTINGS_DESCRIBE_BAD_MCP_SERVER_NAME = SETTINGS_MCP_REQUEST_ENTRY.describeBadMcpServerName;
 export const SETTINGS_IS_CONTENT_ORIGIN_WORD = SETTINGS_MCP_REQUEST_ENTRY.isContentOriginWord;
 export const SETTINGS_DESCRIBE_BAD_CONTENT_ORIGIN = SETTINGS_MCP_REQUEST_ENTRY.describeBadContentOrigin;
 export const SETTINGS_TOOL_WIRE_NAME_MAX_CHARS = SETTINGS_MCP_REQUEST_ENTRY.TOOL_WIRE_NAME_MAX_CHARS;
@@ -165,6 +186,8 @@ const SETTINGS_LAYER_SOURCES = SETTINGS_LAYER_SOURCES_CLOSURE(SETTINGS_SAFETY_ME
 export const SETTINGS_LAYER_ADMISSION = SETTINGS_LAYER_SOURCES.layerAdmission;
 const SETTINGS_ACTIVE_TIERS = SETTINGS_ACTIVE_TIERS_CLOSURE();
 export const SETTINGS_RESOLVE_ACTIVE_TIERS = SETTINGS_ACTIVE_TIERS.resolveActiveTiers;
-const SETTINGS_DEFAULT_MODEL = SETTINGS_DEFAULT_MODEL_CLOSURE(SETTINGS_RESOLVE_ACTIVE_TIERS);
+const SETTINGS_TIER_WORDS = SETTINGS_TIER_WORDS_CLOSURE();
+export const SETTINGS_TIER_LADDER_FROM = SETTINGS_TIER_WORDS.tierLadderFrom;
+const SETTINGS_DEFAULT_MODEL = SETTINGS_DEFAULT_MODEL_CLOSURE(SETTINGS_RESOLVE_ACTIVE_TIERS, SETTINGS_TIER_LADDER_FROM);
 export const SETTINGS_RESOLVE_CATALOG_DEFAULT_MODEL = SETTINGS_DEFAULT_MODEL.resolveCatalogDefaultModel;
 export const SETTINGS_DEFAULT_ROLE_TIER_LADDER = SETTINGS_DEFAULT_MODEL.DEFAULT_ROLE_TIER_LADDER;

package/dist/generated/settingsSchemaHooksClassifier.js

@@ -9,18 +9,64 @@ export const SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE = (HOOK_EVENTS) => {
         http: { url: "text", headers: "stringRecord?", allowedEnvVars: "stringList?", ...HOOK_ENTRY_COMMON_FIELDS },
         mcp_tool: { server: "string", tool: "string", input: "record?", ...HOOK_ENTRY_COMMON_FIELDS },
     };
-    function hookIsRecord(value) {
-        if (value === null || typeof value !== "object" || Array.isArray(value))
+    function hookShapeOf(v) {
+        try {
+            if (v === null)
+                return "null";
+            if (Array.isArray(v))
+                return "array";
+            if (typeof v === "function")
+                return "non_plain_object";
+            if (typeof v !== "object")
+                return "primitive";
+            const proto = Object.getPrototypeOf(v);
+            return proto === null || Object.getPrototypeOf(proto) === null ? "plain" : "non_plain_object";
+        }
+        catch {
+            return "uninspectable";
+        }
+    }
+    function hookIsRecord(v) {
+        const shape = hookShapeOf(v);
+        return shape === "plain";
+    }
+    function hookIsObjectLike(v) {
+        const shape = hookShapeOf(v);
+        switch (shape) {
+            case "null":
+            case "primitive":
+                return false;
+            case "plain":
+            case "non_plain_object":
+            case "array":
+            case "uninspectable":
+                return true;
+            default: {
+                const unhandled = shape;
+                throw new Error(`hookIsObjectLike: unhandled shape ${String(unhandled)}`);
+            }
+        }
+    }
+    function hookIsArray(v) {
+        try {
+            return Array.isArray(v);
+        }
+        catch {
             return false;
-        const proto = Object.getPrototypeOf(value);
-        return proto === Object.prototype || proto === null;
+        }
     }
+    const HOOK_ITERATOR_SYMBOL = (() => {
+        const found = Object.getOwnPropertySymbols(Array.prototype).find((s) => s.description === "Symbol.iterator");
+        if (found === undefined)
+            throw new Error("hooks classifier: Array.prototype has no Symbol.iterator");
+        return found;
+    })();
     function hookGuardKeyOf(node) {
         for (const key of Object.keys(node)) {
             if (!HOOK_GUARD_EVENTS.includes(key))
                 continue;
             const value = node[key];
-            if (value !== null && value !== undefined && !(Array.isArray(value) && value.length === 0))
+            if (value !== null && value !== undefined && !(hookIsArray(value) && value.length === 0))
                 return key;
         }
         return undefined;
@@ -29,9 +75,9 @@ export const SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE = (HOOK_EVENTS) => {
         if (!hookIsRecord(value))
             return false;
         const inner = Object.hasOwn(value, "hooks") ? value.hooks : undefined;
-        if (Array.isArray(inner))
+        if (hookIsArray(inner))
             return inner.length > 0;
-        return hookIsRecord(inner) && (Object.hasOwn(value, "matcher") || typeof inner.type === "string");
+        return hookIsRecord(inner) && (Object.hasOwn(value, "matcher") || (Object.hasOwn(inner, "type") && typeof inner.type === "string"));
     }
     function hookGuardSignIn(root, rootPath, place) {
         const frames = [];
@@ -45,25 +91,49 @@ export const SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE = (HOOK_EVENTS) => {
         };
         while (pending.length > 0) {
             const [node, frame, at] = pending.pop();
-            if (node === null || typeof node !== "object" || seen[at].has(node))
+            const shape = hookShapeOf(node);
+            let isList = false;
+            switch (shape) {
+                case "null":
+                case "primitive":
+                    continue;
+                case "uninspectable":
+                    return pathTo(frame, []);
+                case "array":
+                    isList = true;
+                    break;
+                case "plain":
+                    break;
+                case "non_plain_object":
+                    if (HOOK_ITERATOR_SYMBOL in node)
+                        return pathTo(frame, []);
+                    break;
+                default: {
+                    const unhandled = shape;
+                    throw new Error(`hookGuardSignIn: unhandled shape ${String(unhandled)}`);
+                }
+            }
+            const visited = node;
+            if (seen[at].has(visited))
                 continue;
-            seen[at].add(node);
-            if (Array.isArray(node)) {
-                for (let i = node.length - 1; i >= 0; i--) {
+            seen[at].add(visited);
+            if (isList) {
+                const list = node;
+                for (let i = list.length - 1; i >= 0; i--) {
                     frames.push({ key: i, parent: frame });
-                    pending.push([node[i], frames.length - 1, at === "matcherList" ? "matcher" : "other"]);
+                    pending.push([list[i], frames.length - 1, at === "matcherList" ? "matcher" : "other"]);
                 }
                 continue;
             }
-            const guardKey = hookGuardKeyOf(node);
+            const guardKey = hookGuardKeyOf(visited);
             if (guardKey !== undefined)
                 return pathTo(frame, [guardKey]);
-            if (at !== "matcher" && hookLooksLikeMatcher(node))
+            if (at !== "matcher" && hookLooksLikeMatcher(visited))
                 return pathTo(frame, []);
-            const keys = Object.keys(node);
+            const keys = Object.keys(visited);
             for (let i = keys.length - 1; i >= 0; i--) {
                 frames.push({ key: keys[i], parent: frame });
-                pending.push([node[keys[i]], frames.length - 1, "other"]);
+                pending.push([visited[keys[i]], frames.length - 1, "other"]);
             }
         }
         return undefined;
@@ -87,7 +157,7 @@ export const SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE = (HOOK_EVENTS) => {
             case "stringRecord":
                 return hookIsRecord(value) && Object.values(value).every((v) => typeof v === "string");
             case "stringList":
-                if (!Array.isArray(value))
+                if (!hookIsArray(value))
                     return false;
                 for (let i = 0; i < value.length; i++)
                     if (typeof value[i] !== "string")
@@ -121,7 +191,7 @@ export const SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE = (HOOK_EVENTS) => {
             const base = (optional ? kind.slice(0, -1) : kind);
             if (!hookFieldFits(base, value))
                 return { field };
-            out[field] = Array.isArray(value) ? value.slice() : hookIsRecord(value) ? Object.fromEntries(Object.entries(value)) : value;
+            out[field] = hookIsArray(value) ? value.slice() : hookIsRecord(value) ? Object.fromEntries(Object.entries(value)) : value;
         }
         return { entry: out };
     }
@@ -135,18 +205,18 @@ export const SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE = (HOOK_EVENTS) => {
         }
         const entries = Object.hasOwn(matcher, "hooks") ? matcher.hooks : undefined;
         const signField = hookGuardKeyOf(matcher) ??
-            Object.keys(matcher).find((key) => !(key === "hooks" && Array.isArray(entries)) && hookGuardSignIn(matcher[key], [...at, key], "other") !== undefined);
+            Object.keys(matcher).find((key) => !(key === "hooks" && hookIsArray(entries)) && hookGuardSignIn(matcher[key], [...at, key], "other") !== undefined);
         if (signField !== undefined) {
             reject("guard-matcher-invalid", at, signField);
             return undefined;
         }
         const entrySigns = [];
-        if (Array.isArray(entries))
+        if (hookIsArray(entries))
             for (let j = 0; j < entries.length; j++)
                 entrySigns.push(hookGuardSignIn(entries[j], [...at, "hooks", j], "other"));
         const name = Object.hasOwn(matcher, "matcher") ? matcher.matcher : undefined;
-        const badField = name !== undefined && typeof name !== "string" ? "matcher" : !Array.isArray(entries) ? "hooks" : undefined;
-        if (badField !== undefined || !Array.isArray(entries)) {
+        const badField = name !== undefined && typeof name !== "string" ? "matcher" : !hookIsArray(entries) ? "hooks" : undefined;
+        if (badField !== undefined || !hookIsArray(entries)) {
             if (guardEvent || entrySigns.some((sign) => sign !== undefined))
                 reject("guard-matcher-invalid", at, badField);
             else
@@ -173,13 +243,15 @@ export const SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE = (HOOK_EVENTS) => {
     }
     function hookBlockRead(hooks, reject, drop) {
         if (!hookIsRecord(hooks)) {
-            if (Array.isArray(hooks) && hooks.some((x) => x !== null && typeof x === "object"))
+            if (hookIsArray(hooks) && hooks.some(hookIsObjectLike))
+                reject("hooks-is-matcher", ["hooks"]);
+            else if (hookGuardSignIn(hooks, ["hooks"], "other") !== undefined)
                 reject("hooks-is-matcher", ["hooks"]);
             else
                 drop("hooks-not-object", ["hooks"]);
             return undefined;
         }
-        if (hookLooksLikeMatcher(hooks) || typeof hooks.type === "string") {
+        if (hookLooksLikeMatcher(hooks) || (Object.hasOwn(hooks, "type") && typeof hooks.type === "string")) {
             reject("hooks-is-matcher", ["hooks"]);
             return undefined;
         }
@@ -188,14 +260,14 @@ export const SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE = (HOOK_EVENTS) => {
             const value = hooks[event];
             const at = ["hooks", event];
             if (!HOOK_EVENTS.includes(event)) {
-                if (hookGuardSignIn(value, at, Array.isArray(value) ? "matcherList" : "other") !== undefined)
+                if (hookGuardSignIn(value, at, hookIsArray(value) ? "matcherList" : "other") !== undefined)
                     reject("guard-under-unknown-event", at);
                 else
                     drop("unknown-event", at);
                 continue;
             }
             const guardEvent = HOOK_GUARD_EVENTS.includes(event);
-            if (!Array.isArray(value)) {
+            if (!hookIsArray(value)) {
                 if ((guardEvent && value !== null) || hookGuardSignIn(value, at, "other") !== undefined)
                     reject("guard-event-not-array", at);
                 else
@@ -212,7 +284,7 @@ export const SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE = (HOOK_EVENTS) => {
         }
         return loaded;
     }
-    function classifyHooksConfig(settingsDoc) {
+    function hookClassify(settingsDoc) {
         const rejections = [];
         const dropped = [];
         const reject = (code, path, field) => {
@@ -222,7 +294,7 @@ export const SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE = (HOOK_EVENTS) => {
             dropped.push(field === undefined ? { code, path } : { code, path, field });
         };
         let hooks;
-        if (settingsDoc !== null && typeof settingsDoc === "object" && !Array.isArray(settingsDoc)) {
+        if (hookIsRecord(settingsDoc)) {
             const doc = settingsDoc;
             for (const key of Object.keys(doc)) {
                 const value = doc[key];
@@ -232,7 +304,7 @@ export const SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE = (HOOK_EVENTS) => {
                 }
                 const sign = key === "matcher" && hookLooksLikeMatcher(doc)
                     ? [key]
-                    : HOOK_GUARD_EVENTS.includes(key) && value !== null && value !== undefined && !(Array.isArray(value) && value.length === 0)
+                    : HOOK_GUARD_EVENTS.includes(key) && value !== null && value !== undefined && !(hookIsArray(value) && value.length === 0)
                         ? [key]
                         : hookGuardSignIn(value, [key], "other");
                 if (sign !== undefined)
@@ -250,5 +322,13 @@ export const SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE = (HOOK_EVENTS) => {
             return { outcome: "loaded-partial", hooks, dropped, rejections: [] };
         return { outcome: "loaded", hooks, dropped: [], rejections: [] };
     }
+    function classifyHooksConfig(settingsDoc) {
+        try {
+            return hookClassify(settingsDoc);
+        }
+        catch {
+            return { outcome: "rejected", hooks: undefined, dropped: [], rejections: [{ code: "guard-outside-hooks", path: [] }] };
+        }
+    }
     return classifyHooksConfig;
 };

package/dist/generated/settingsSchemaMcpRequestEntry.d.ts

@@ -1 +1 @@
-export declare const SETTINGS_MCP_REQUEST_ENTRY_CLOSURE: (MCP_CONTENT_ORIGINS: readonly ["local", "execution", "external"], startsWithHttpScheme: (raw: string) => boolean, echoCallerText: (text: string) => string) => any;
+export declare const SETTINGS_MCP_REQUEST_ENTRY_CLOSURE: (MCP_CONTENT_ORIGINS: readonly ["local", "execution", "external"], startsWithHttpScheme: (raw: string) => boolean, echoCallerText: (text: string) => string, UNINSPECTABLE: "an object that could not be inspected (a proxy trap threw)", captureStringArray: (v: unknown, classification: "strict" | "wide") => string[] | undefined, dataDescriptor: (value: unknown) => PropertyDescriptor, inspect: (read: () => unknown) => object, ownFieldsOf: (record: object, keys: readonly string[]) => object, ownValueOf: (record: object, key: string) => object, readKey: (record: object, key: PropertyKey) => object, isJsonArray: (v: unknown) => v is unknown[], jsonShapeOf: (v: unknown) => "plain" | "non_plain_object" | "array" | "null" | "primitive" | "uninspectable", isReservedMcpServerName: (name: string) => boolean, RESERVED_MCP_SERVER_NAME_REASON: "the \"remote-\" prefix is reserved for the remote MCP servers a device executor offers") => any;