@sema-agent/client-core 0.102.0 → 0.103.0

package/dist/generated/engineAskFaceTables.js

@@ -7,6 +7,6 @@ export const CORE_SHELL_FACE_TOOL_NAMES = Object.freeze([
     "Monitor",
 ]);
 export const CORE_RELEASABLE_ASK_CLASSES_BY_FACE = Object.freeze({
-    "shell": Object.freeze(["transcript_write", "target_unresolved", "probe", "write_protection", "tool_marks_mcp", "tool_marks_a2a", "artifact_shared_read", "mode", "unstated", "ordinary"]),
-    "other": Object.freeze(["transcript_write", "probe", "write_protection", "tool_marks_mcp", "tool_marks_a2a", "artifact_shared_read", "mode", "unstated", "ordinary"]),
+    "shell": Object.freeze(["transcript_write", "target_unresolved", "probe", "write_protection_on_disk", "write_protection", "tool_marks_mcp", "tool_marks_a2a", "artifact_shared_read", "mode", "unstated", "ordinary"]),
+    "other": Object.freeze(["transcript_write", "probe", "write_protection_on_disk", "write_protection", "tool_marks_mcp", "tool_marks_a2a", "artifact_shared_read", "mode", "unstated", "ordinary"]),
 });

package/dist/generated/engineFactTables.d.ts

@@ -14,7 +14,7 @@ export declare const CORE_ASK_EVIDENCE_ABSENCE_VALUES: readonly ["not_wired", "n
 export declare const CORE_SYSTEM_INJECTION_PRIORITIES: readonly ["now", "next", "later"];
 export declare const CORE_READ_DENY_BUILTIN_TIERS: readonly ["credentials", "shell-history", "browser", "wallet", "agent-config"];
 export declare const CORE_READ_DENY_DEFAULT_TIERS: readonly ["credentials", "agent-config"];
-export declare const CORE_ASK_CLASSES: readonly ["content_question", "hook", "ancestor", "dangerous_delete", "unverifiable_delete", "unverifiable_shell_text", "transcript_write", "org_rule", "rule_unreadable", "ask_rule", "denial_limit_fallback", "classifier_no_ruling", "requires_user_interaction", "cross_boundary", "operator_forced", "shell_floor", "target_unresolved", "probe", "write_protection", "tool_marks_mcp", "tool_marks_a2a", "policy_rra", "artifact_shared_read", "mode", "unstated", "ordinary"];
+export declare const CORE_ASK_CLASSES: readonly ["content_question", "hook", "ancestor", "dangerous_delete", "unverifiable_delete", "unverifiable_shell_text", "transcript_write", "org_rule", "rule_unreadable", "ask_rule", "denial_limit_fallback", "classifier_no_ruling", "requires_user_interaction", "cross_boundary", "operator_forced", "shell_floor", "target_unresolved", "probe", "write_protection_on_disk", "write_protection", "tool_marks_mcp", "tool_marks_a2a", "policy_rra", "artifact_shared_read", "mode", "unstated", "ordinary"];
 export interface CoreModeArbitrationRow {
     readonly bypassImmune: boolean;
     readonly classifierEligible: boolean;
@@ -22,7 +22,7 @@ export interface CoreModeArbitrationRow {
     readonly ruleMayClear: boolean;
     readonly hookAskFloor: boolean;
 }
-export declare const CORE_MODE_ARBITRATION: Readonly<Record<"content_question" | "hook" | "ancestor" | "dangerous_delete" | "unverifiable_delete" | "unverifiable_shell_text" | "transcript_write" | "org_rule" | "rule_unreadable" | "ask_rule" | "denial_limit_fallback" | "classifier_no_ruling" | "requires_user_interaction" | "cross_boundary" | "operator_forced" | "shell_floor" | "target_unresolved" | "probe" | "write_protection" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "mode" | "unstated" | "ordinary", CoreModeArbitrationRow>>;
+export declare const CORE_MODE_ARBITRATION: Readonly<Record<"content_question" | "hook" | "ancestor" | "dangerous_delete" | "unverifiable_delete" | "unverifiable_shell_text" | "transcript_write" | "org_rule" | "rule_unreadable" | "ask_rule" | "denial_limit_fallback" | "classifier_no_ruling" | "requires_user_interaction" | "cross_boundary" | "operator_forced" | "shell_floor" | "target_unresolved" | "probe" | "write_protection_on_disk" | "write_protection" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "mode" | "unstated" | "ordinary", CoreModeArbitrationRow>>;
 export declare const CORE_SKILL_GRANT_ORIGINS: readonly ["model", "user", "inherited"];
 export declare const CORE_ALLOW_ENTRY_INERT_REASONS: readonly ["wildcard_all", "namespace_wildcard", "content_unsupported", "grammar", "tool_name", "near_miss", "earlier_grammar"];
 export declare const CORE_ALLOW_RULE_MEMBERS: readonly ["hook", "deployment", "persisted", "skill", "request"];
@@ -48,6 +48,10 @@ export declare const CORE_RESUME_STARTUP_CAUSES: readonly ["environment", "sessi
 export declare const CORE_BUILTIN_SUBAGENT_TYPES: readonly ["Explore", "Plan", "fork", "general-purpose"];
 export declare const CORE_RULE_OFFERS_ABSENCES: readonly ["mandated", "allow_outranked", "ask_rule_matched", "lane_cannot_speak"];
 export declare const CORE_TOOL_APPROVAL_CARDS: readonly ["file-edit", "file-write", "notebook-edit", "shell", "fetch", "skill", "workflow", "plan", "question", "generic"];
+export declare const CORE_MCP_FAILURE_KINDS: readonly ["connect_refused", "connection_failed", "connection_closed", "unauthorized", "http_status", "not_mcp_response", "spawn_failed", "timeout", "protocol", "invalid_config", "credential_unavailable", "unknown"];
+export declare const CORE_MCP_AUTHORIZATION_REASONS: readonly ["rejected", "scope", "none"];
+export declare const CORE_PERSISTED_RULE_MATCHES: readonly ["exact", "prefix", "wildcard", "pattern", "subpath", "path", "name", "name_prefix", "host", "subdomain", "tool"];
+export declare const CORE_APPROVAL_REMEDY_KINDS: readonly ["approver", "permission_mode"];
 export declare const CORE_ASK_CLASSES_WITHOUT_REASON_ROW: readonly ["probe"];
 export declare const CORE_ASK_CLASS_REASONS: Readonly<Record<Exclude<(typeof CORE_ASK_CLASSES)[number], (typeof CORE_ASK_CLASSES_WITHOUT_REASON_ROW)[number]>, string>>;
 export declare const CORE_USER_ATTACHMENT_KINDS: readonly ["text", "notebook", "image", "pdf", "directory", "client_text", "client_image"];

package/dist/generated/engineFactTables.js

@@ -59,6 +59,7 @@ export const CORE_ENGINE_CARD_TYPES = Object.freeze([
     "read_path_denied",
     "readonly_out_of_root",
     "read_unestablished",
+    "bash_self_kill_refused",
     "text",
     "notebook",
     "file_unchanged",
@@ -160,6 +161,7 @@ export const CORE_ASK_CLASSES = Object.freeze([
     "shell_floor",
     "target_unresolved",
     "probe",
+    "write_protection_on_disk",
     "write_protection",
     "tool_marks_mcp",
     "tool_marks_a2a",
@@ -188,6 +190,7 @@ export const CORE_MODE_ARBITRATION = Object.freeze({
     "shell_floor": Object.freeze({ bypassImmune: true, classifierEligible: true, sandboxAdmission: true, ruleMayClear: false, hookAskFloor: false }),
     "target_unresolved": Object.freeze({ bypassImmune: true, classifierEligible: false, sandboxAdmission: true, ruleMayClear: false, hookAskFloor: true }),
     "probe": Object.freeze({ bypassImmune: false, classifierEligible: true, sandboxAdmission: false, ruleMayClear: false, hookAskFloor: false }),
+    "write_protection_on_disk": Object.freeze({ bypassImmune: false, classifierEligible: false, sandboxAdmission: true, ruleMayClear: false, hookAskFloor: true }),
     "write_protection": Object.freeze({ bypassImmune: false, classifierEligible: true, sandboxAdmission: true, ruleMayClear: false, hookAskFloor: true }),
     "tool_marks_mcp": Object.freeze({ bypassImmune: false, classifierEligible: true, sandboxAdmission: true, ruleMayClear: false, hookAskFloor: false }),
     "tool_marks_a2a": Object.freeze({ bypassImmune: false, classifierEligible: true, sandboxAdmission: true, ruleMayClear: false, hookAskFloor: false }),
@@ -349,12 +352,48 @@ export const CORE_TOOL_APPROVAL_CARDS = Object.freeze([
     "question",
     "generic",
 ]);
+export const CORE_MCP_FAILURE_KINDS = Object.freeze([
+    "connect_refused",
+    "connection_failed",
+    "connection_closed",
+    "unauthorized",
+    "http_status",
+    "not_mcp_response",
+    "spawn_failed",
+    "timeout",
+    "protocol",
+    "invalid_config",
+    "credential_unavailable",
+    "unknown",
+]);
+export const CORE_MCP_AUTHORIZATION_REASONS = Object.freeze([
+    "rejected",
+    "scope",
+    "none",
+]);
+export const CORE_PERSISTED_RULE_MATCHES = Object.freeze([
+    "exact",
+    "prefix",
+    "wildcard",
+    "pattern",
+    "subpath",
+    "path",
+    "name",
+    "name_prefix",
+    "host",
+    "subdomain",
+    "tool",
+]);
+export const CORE_APPROVAL_REMEDY_KINDS = Object.freeze([
+    "approver",
+    "permission_mode",
+]);
 export const CORE_ASK_CLASSES_WITHOUT_REASON_ROW = Object.freeze([
     "probe",
 ]);
 export const CORE_ASK_CLASS_REASONS = Object.freeze({
     "content_question": "the call is the engine's own question to a person",
-    "hook": "a PreToolUse hook asks about this call — the deployment's own screening is answered by a person",
+    "hook": "an extension's screening asks about this call (a PreToolUse hook or a tool.check station) — the deployment's own screening is answered by a person",
     "ancestor": "the task that delegated this one owns this question",
     "dangerous_delete": "this removal targets a protected location (the filesystem root, a top-level directory, a home directory, or a workspace directory or one of its ancestors) — it is cleared by confirming this call, never by an allow rule",
     "unverifiable_delete": "this removal could not be verified safe — it is cleared by confirming this call, never by an allow rule",
@@ -370,6 +409,7 @@ export const CORE_ASK_CLASS_REASONS = Object.freeze({
     "operator_forced": "this call arrived already marked as requiring confirmation (an earlier layer of this run, or the task that delegated it, judged it so) — it is cleared by confirming this call, never by a standing allow rule",
     "shell_floor": "this deployment mandates per-call confirmation for shell commands (shellGate: always)",
     "target_unresolved": "where this write leads on disk could not be determined (a link on the way could not be examined, or the environment could not resolve the target), so whether it lands on a guarded path is unknown — it is cleared by confirming this call: no standing rule and no automatic decider answers for it, though a wired approver seat can",
+    "write_protection_on_disk": "this write's target is on the deployment's write-protection table (the agent's own configuration is guarded one look per write) — it is cleared by confirming this call, never by a standing allow rule",
     "write_protection": "this write's target is on the deployment's write-protection table (the agent's own configuration is guarded one look per write) — it is cleared by confirming this call, never by a standing allow rule",
     "tool_marks_mcp": "this tool carries egress/irreversibility/interaction marks (a mandated confirmation a rule cannot clear)",
     "tool_marks_a2a": "this tool carries egress/irreversibility/interaction marks (a mandated confirmation a rule cannot clear)",

package/dist/generated/engineNoticeTables.js

@@ -25,6 +25,7 @@ export const CORE_ENGINE_NOTICE_CODES = Object.freeze([
     "config.peer_admission_out_of_range",
     "config.peer_lane_unmounted",
     "config.secret_env_scrubbed",
+    "inherit_env.names_withheld",
     "config.credential_not_withheld",
     "config.cross_boundary_posture_undeclared",
     "config.cross_boundary_record_unwritten",
@@ -50,6 +51,7 @@ export const CORE_ENGINE_NOTICE_CODES = Object.freeze([
     "mcp.injection_dropped",
     "mcp.revocation_probe_failed",
     "mcp.server_redialed",
+    "mcp.authorization_required",
     "workflow.governance_key_stripped",
     "workflow.agent_option_ignored",
     "memory.session_polluted",
@@ -72,12 +74,16 @@ export const CORE_ENGINE_NOTICE_CODES = Object.freeze([
     "route.seat_detached",
     "advisor.not_attached",
     "route.credential_origin_mismatch",
+    "route.credential_rebound",
     "route.response_model_mismatch",
     "route.tool_call_id_folded",
     "route.finish_reason_unknown",
     "route.stream_end_ignored",
     "route.extra_body_reserved_dropped",
+    "model.capability_downgraded",
+    "model.role_defaulted",
     "context.tool_turn_repaired",
+    "context.image_removed",
     "task.user_steer_undrained",
     "task.user_followup_undrained",
     "steering.parked_input_blocked",
@@ -127,6 +133,7 @@ export const CORE_NOTICE_AUDIENCE = Object.freeze({
     "config.peer_admission_out_of_range": "operator",
     "config.peer_lane_unmounted": "operator",
     "config.secret_env_scrubbed": "operator",
+    "inherit_env.names_withheld": "user",
     "config.credential_not_withheld": "operator",
     "config.cross_boundary_posture_undeclared": "operator",
     "config.cross_boundary_record_unwritten": "operator",
@@ -152,6 +159,7 @@ export const CORE_NOTICE_AUDIENCE = Object.freeze({
     "mcp.injection_dropped": "user",
     "mcp.revocation_probe_failed": "operator",
     "mcp.server_redialed": "operator",
+    "mcp.authorization_required": "user",
     "workflow.governance_key_stripped": "operator",
     "workflow.agent_option_ignored": "operator",
     "memory.session_polluted": "user",
@@ -174,12 +182,16 @@ export const CORE_NOTICE_AUDIENCE = Object.freeze({
     "route.seat_detached": "operator",
     "advisor.not_attached": "user",
     "route.credential_origin_mismatch": "user",
+    "route.credential_rebound": "operator",
     "route.response_model_mismatch": "operator",
     "route.tool_call_id_folded": "operator",
     "route.finish_reason_unknown": "user",
     "route.stream_end_ignored": "user",
     "route.extra_body_reserved_dropped": "operator",
+    "model.capability_downgraded": "user",
+    "model.role_defaulted": "operator",
     "context.tool_turn_repaired": "operator",
+    "context.image_removed": "user",
     "task.user_steer_undrained": "user",
     "task.user_followup_undrained": "user",
     "steering.parked_input_blocked": "user",
@@ -235,6 +247,7 @@ export const CORE_NOTICE_MINTER = Object.freeze({
     "config.peer_admission_out_of_range": "engine",
     "config.peer_lane_unmounted": "engine",
     "config.secret_env_scrubbed": "engine",
+    "inherit_env.names_withheld": "engine",
     "config.credential_not_withheld": "engine",
     "config.cross_boundary_posture_undeclared": "engine",
     "config.cross_boundary_record_unwritten": "engine",
@@ -260,6 +273,7 @@ export const CORE_NOTICE_MINTER = Object.freeze({
     "mcp.injection_dropped": "engine",
     "mcp.revocation_probe_failed": "engine",
     "mcp.server_redialed": "engine",
+    "mcp.authorization_required": "engine",
     "workflow.governance_key_stripped": "engine",
     "workflow.agent_option_ignored": "engine",
     "memory.session_polluted": "engine",
@@ -282,12 +296,16 @@ export const CORE_NOTICE_MINTER = Object.freeze({
     "route.seat_detached": "engine",
     "advisor.not_attached": "engine",
     "route.credential_origin_mismatch": "engine",
+    "route.credential_rebound": "engine",
     "route.response_model_mismatch": "engine",
     "route.tool_call_id_folded": "engine",
     "route.finish_reason_unknown": "engine",
     "route.stream_end_ignored": "engine",
     "route.extra_body_reserved_dropped": "engine",
+    "model.capability_downgraded": "engine",
+    "model.role_defaulted": "engine",
     "context.tool_turn_repaired": "engine",
+    "context.image_removed": "engine",
     "task.user_steer_undrained": "engine",
     "task.user_followup_undrained": "engine",
     "steering.parked_input_blocked": "engine",

package/dist/generated/settingsSchemaDefaultModel.d.ts

@@ -8,4 +8,4 @@ export declare const SETTINGS_DEFAULT_MODEL_CLOSURE: (resolveActiveTiers: (model
     readonly activeTierGroup?: string | undefined;
 }) => {
     [tier: string]: string;
-} | undefined) => any;
+} | undefined, tierLadderFrom: (tier: string) => string[]) => any;

package/dist/generated/settingsSchemaDefaultModel.js

@@ -1,5 +1,5 @@
-export const SETTINGS_DEFAULT_MODEL_CLOSURE = (resolveActiveTiers) => {
-    const DEFAULT_ROLE_TIER_LADDER = ["pro", "flash", "lite"];
+export const SETTINGS_DEFAULT_MODEL_CLOSURE = (resolveActiveTiers, tierLadderFrom) => {
+    const DEFAULT_ROLE_TIER_LADDER = tierLadderFrom("pro");
     function resolveCatalogDefaultModel(models, has, fallback) {
         const target = models.roles?.default;
         const named = target !== undefined && "model" in target ? target.model : undefined;

package/dist/generated/settingsSchemaFns.d.ts

@@ -22,6 +22,18 @@ export declare const SETTINGS_CLASSIFY_HOOKS_CONFIG: (settingsDoc: unknown) => H
 export declare const SETTINGS_STRIP_CONTROL_AND_BIDI: (text: string) => string;
 export declare const SETTINGS_CONTROL_AND_BIDI_CHARS: string;
 export declare const SETTINGS_ECHO_CALLER_TEXT: (text: string) => string;
+export declare const SETTINGS_IS_JSON_ARRAY: (v: unknown) => v is unknown[];
+export declare const SETTINGS_JSON_SHAPE_OF: (v: unknown) => "plain" | "non_plain_object" | "array" | "null" | "primitive" | "uninspectable";
+export declare const SETTINGS_CAPTURE_STRING_ARRAY: (v: unknown, classification: "strict" | "wide") => string[] | undefined;
+export declare const SETTINGS_UNINSPECTABLE: "an object that could not be inspected (a proxy trap threw)";
+export declare const SETTINGS_DATA_DESCRIPTOR: (value: unknown) => PropertyDescriptor;
+export declare const SETTINGS_INSPECT: (read: () => unknown) => object;
+export declare const SETTINGS_OWN_FIELDS_OF: (record: object, keys: readonly string[]) => object;
+export declare const SETTINGS_OWN_VALUE_OF: (record: object, key: string) => object;
+export declare const SETTINGS_READ_KEY: (record: object, key: PropertyKey) => object;
+export declare const SETTINGS_IS_RESERVED_MCP_SERVER_NAME: (name: string) => boolean;
+export declare const SETTINGS_REMOTE_MCP_SERVER_NAME_PREFIX: "remote-";
+export declare const SETTINGS_RESERVED_MCP_SERVER_NAME_REASON: "the \"remote-\" prefix is reserved for the remote MCP servers a device executor offers";
 export declare const SETTINGS_READ_REQUEST_MCP_TRANSPORT: (t: unknown) => RequestMcpTransportRead;
 export declare const SETTINGS_READ_MCP_IDENTITY_HEADERS: (transport: Record<string, unknown>) => {
     principalHeader?: string;
@@ -29,6 +41,8 @@ export declare const SETTINGS_READ_MCP_IDENTITY_HEADERS: (transport: Record<stri
 };
 export declare const SETTINGS_IS_USABLE_WIRE_NAME: (v: unknown) => v is string;
 export declare const SETTINGS_DESCRIBE_BAD_WIRE_NAME: (v: unknown) => string;
+export declare const SETTINGS_IS_USABLE_MCP_SERVER_NAME: (v: unknown) => v is string;
+export declare const SETTINGS_DESCRIBE_BAD_MCP_SERVER_NAME: (v: unknown) => string;
 export declare const SETTINGS_IS_CONTENT_ORIGIN_WORD: (v: unknown) => v is McpContentOrigin;
 export declare const SETTINGS_DESCRIBE_BAD_CONTENT_ORIGIN: (v: unknown) => string;
 export declare const SETTINGS_TOOL_WIRE_NAME_MAX_CHARS: 128;
@@ -48,6 +62,7 @@ export declare const SETTINGS_RESOLVE_ACTIVE_TIERS: (models: {
 }) => {
     [tier: string]: string;
 } | undefined;
+export declare const SETTINGS_TIER_LADDER_FROM: (tier: string) => string[];
 export declare const SETTINGS_RESOLVE_CATALOG_DEFAULT_MODEL: (models: {
     readonly roles?: {
         readonly default?: {

package/dist/generated/settingsSchemaFns.js

@@ -1,6 +1,9 @@
 import { SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE } from './settingsSchemaHooksClassifier.js';
 import { SETTINGS_CONTROL_AND_BIDI_CLOSURE } from './settingsSchemaControlAndBidi.js';
 import { SETTINGS_CALLER_TEXT_ECHO_CLOSURE } from './settingsSchemaCallerTextEcho.js';
+import { SETTINGS_PLAIN_JSON_OBJECT_CLOSURE } from './settingsSchemaPlainJsonObject.js';
+import { SETTINGS_OWN_KEY_READ_CLOSURE } from './settingsSchemaOwnKeyRead.js';
+import { SETTINGS_MCP_SERVER_NAME_CLOSURE } from './settingsSchemaMcpServerName.js';
 import { SETTINGS_MCP_REQUEST_ENTRY_CLOSURE } from './settingsSchemaMcpRequestEntry.js';
 import { SETTINGS_MCP_CONTENT_ORIGINS } from './settingsSchemaTables.js';
 import { SETTINGS_URL_ALLOW_PATTERN_MATCHES_CLOSURE } from './settingsSchemaUrlPattern.js';
@@ -8,6 +11,7 @@ import { SETTINGS_SAFETY_MERGE_CLOSURE } from './settingsSchemaSafetyMergeSpec.j
 import { SETTINGS_MIN_TRUST_WORDS } from './settingsSchemaTables.js';
 import { SETTINGS_LAYER_SOURCES_CLOSURE } from './settingsSchemaSettingsSources.js';
 import { SETTINGS_ACTIVE_TIERS_CLOSURE } from './settingsSchemaActiveTiers.js';
+import { SETTINGS_TIER_WORDS_CLOSURE } from './settingsSchemaTierWords.js';
 import { SETTINGS_DEFAULT_MODEL_CLOSURE } from './settingsSchemaDefaultModel.js';
 export const SETTINGS_AT_MENTION_MODES = Object.freeze([
     "all",
@@ -148,11 +152,28 @@ export const SETTINGS_STRIP_CONTROL_AND_BIDI = SETTINGS_CONTROL_AND_BIDI.stripCo
 export const SETTINGS_CONTROL_AND_BIDI_CHARS = SETTINGS_CONTROL_AND_BIDI.CONTROL_AND_BIDI_CHARS;
 const SETTINGS_CALLER_TEXT_ECHO = SETTINGS_CALLER_TEXT_ECHO_CLOSURE(SETTINGS_STRIP_CONTROL_AND_BIDI);
 export const SETTINGS_ECHO_CALLER_TEXT = SETTINGS_CALLER_TEXT_ECHO.echoCallerText;
-const SETTINGS_MCP_REQUEST_ENTRY = SETTINGS_MCP_REQUEST_ENTRY_CLOSURE(SETTINGS_MCP_CONTENT_ORIGINS, SETTINGS_STARTS_WITH_HTTP_SCHEME, SETTINGS_ECHO_CALLER_TEXT);
+const SETTINGS_PLAIN_JSON_OBJECT = SETTINGS_PLAIN_JSON_OBJECT_CLOSURE();
+export const SETTINGS_IS_JSON_ARRAY = SETTINGS_PLAIN_JSON_OBJECT.isJsonArray;
+export const SETTINGS_JSON_SHAPE_OF = SETTINGS_PLAIN_JSON_OBJECT.jsonShapeOf;
+const SETTINGS_OWN_KEY_READ = SETTINGS_OWN_KEY_READ_CLOSURE(SETTINGS_IS_JSON_ARRAY);
+export const SETTINGS_CAPTURE_STRING_ARRAY = SETTINGS_OWN_KEY_READ.captureStringArray;
+export const SETTINGS_UNINSPECTABLE = SETTINGS_OWN_KEY_READ.UNINSPECTABLE;
+export const SETTINGS_DATA_DESCRIPTOR = SETTINGS_OWN_KEY_READ.dataDescriptor;
+export const SETTINGS_INSPECT = SETTINGS_OWN_KEY_READ.inspect;
+export const SETTINGS_OWN_FIELDS_OF = SETTINGS_OWN_KEY_READ.ownFieldsOf;
+export const SETTINGS_OWN_VALUE_OF = SETTINGS_OWN_KEY_READ.ownValueOf;
+export const SETTINGS_READ_KEY = SETTINGS_OWN_KEY_READ.readKey;
+const SETTINGS_MCP_SERVER_NAME = SETTINGS_MCP_SERVER_NAME_CLOSURE();
+export const SETTINGS_IS_RESERVED_MCP_SERVER_NAME = SETTINGS_MCP_SERVER_NAME.isReservedMcpServerName;
+export const SETTINGS_REMOTE_MCP_SERVER_NAME_PREFIX = SETTINGS_MCP_SERVER_NAME.REMOTE_MCP_SERVER_NAME_PREFIX;
+export const SETTINGS_RESERVED_MCP_SERVER_NAME_REASON = SETTINGS_MCP_SERVER_NAME.RESERVED_MCP_SERVER_NAME_REASON;
+const SETTINGS_MCP_REQUEST_ENTRY = SETTINGS_MCP_REQUEST_ENTRY_CLOSURE(SETTINGS_MCP_CONTENT_ORIGINS, SETTINGS_STARTS_WITH_HTTP_SCHEME, SETTINGS_ECHO_CALLER_TEXT, SETTINGS_UNINSPECTABLE, SETTINGS_CAPTURE_STRING_ARRAY, SETTINGS_DATA_DESCRIPTOR, SETTINGS_INSPECT, SETTINGS_OWN_FIELDS_OF, SETTINGS_OWN_VALUE_OF, SETTINGS_READ_KEY, SETTINGS_IS_JSON_ARRAY, SETTINGS_JSON_SHAPE_OF, SETTINGS_IS_RESERVED_MCP_SERVER_NAME, SETTINGS_RESERVED_MCP_SERVER_NAME_REASON);
 export const SETTINGS_READ_REQUEST_MCP_TRANSPORT = SETTINGS_MCP_REQUEST_ENTRY.readRequestMcpTransport;
 export const SETTINGS_READ_MCP_IDENTITY_HEADERS = SETTINGS_MCP_REQUEST_ENTRY.readMcpIdentityHeaders;
 export const SETTINGS_IS_USABLE_WIRE_NAME = SETTINGS_MCP_REQUEST_ENTRY.isUsableWireName;
 export const SETTINGS_DESCRIBE_BAD_WIRE_NAME = SETTINGS_MCP_REQUEST_ENTRY.describeBadWireName;
+export const SETTINGS_IS_USABLE_MCP_SERVER_NAME = SETTINGS_MCP_REQUEST_ENTRY.isUsableMcpServerName;
+export const SETTINGS_DESCRIBE_BAD_MCP_SERVER_NAME = SETTINGS_MCP_REQUEST_ENTRY.describeBadMcpServerName;
 export const SETTINGS_IS_CONTENT_ORIGIN_WORD = SETTINGS_MCP_REQUEST_ENTRY.isContentOriginWord;
 export const SETTINGS_DESCRIBE_BAD_CONTENT_ORIGIN = SETTINGS_MCP_REQUEST_ENTRY.describeBadContentOrigin;
 export const SETTINGS_TOOL_WIRE_NAME_MAX_CHARS = SETTINGS_MCP_REQUEST_ENTRY.TOOL_WIRE_NAME_MAX_CHARS;
@@ -165,6 +186,8 @@ const SETTINGS_LAYER_SOURCES = SETTINGS_LAYER_SOURCES_CLOSURE(SETTINGS_SAFETY_ME
 export const SETTINGS_LAYER_ADMISSION = SETTINGS_LAYER_SOURCES.layerAdmission;
 const SETTINGS_ACTIVE_TIERS = SETTINGS_ACTIVE_TIERS_CLOSURE();
 export const SETTINGS_RESOLVE_ACTIVE_TIERS = SETTINGS_ACTIVE_TIERS.resolveActiveTiers;
-const SETTINGS_DEFAULT_MODEL = SETTINGS_DEFAULT_MODEL_CLOSURE(SETTINGS_RESOLVE_ACTIVE_TIERS);
+const SETTINGS_TIER_WORDS = SETTINGS_TIER_WORDS_CLOSURE();
+export const SETTINGS_TIER_LADDER_FROM = SETTINGS_TIER_WORDS.tierLadderFrom;
+const SETTINGS_DEFAULT_MODEL = SETTINGS_DEFAULT_MODEL_CLOSURE(SETTINGS_RESOLVE_ACTIVE_TIERS, SETTINGS_TIER_LADDER_FROM);
 export const SETTINGS_RESOLVE_CATALOG_DEFAULT_MODEL = SETTINGS_DEFAULT_MODEL.resolveCatalogDefaultModel;
 export const SETTINGS_DEFAULT_ROLE_TIER_LADDER = SETTINGS_DEFAULT_MODEL.DEFAULT_ROLE_TIER_LADDER;

package/dist/generated/settingsSchemaHooksClassifier.js

@@ -9,18 +9,64 @@ export const SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE = (HOOK_EVENTS) => {
         http: { url: "text", headers: "stringRecord?", allowedEnvVars: "stringList?", ...HOOK_ENTRY_COMMON_FIELDS },
         mcp_tool: { server: "string", tool: "string", input: "record?", ...HOOK_ENTRY_COMMON_FIELDS },
     };
-    function hookIsRecord(value) {
-        if (value === null || typeof value !== "object" || Array.isArray(value))
+    function hookShapeOf(v) {
+        try {
+            if (v === null)
+                return "null";
+            if (Array.isArray(v))
+                return "array";
+            if (typeof v === "function")
+                return "non_plain_object";
+            if (typeof v !== "object")
+                return "primitive";
+            const proto = Object.getPrototypeOf(v);
+            return proto === null || Object.getPrototypeOf(proto) === null ? "plain" : "non_plain_object";
+        }
+        catch {
+            return "uninspectable";
+        }
+    }
+    function hookIsRecord(v) {
+        const shape = hookShapeOf(v);
+        return shape === "plain";
+    }
+    function hookIsObjectLike(v) {
+        const shape = hookShapeOf(v);
+        switch (shape) {
+            case "null":
+            case "primitive":
+                return false;
+            case "plain":
+            case "non_plain_object":
+            case "array":
+            case "uninspectable":
+                return true;
+            default: {
+                const unhandled = shape;
+                throw new Error(`hookIsObjectLike: unhandled shape ${String(unhandled)}`);
+            }
+        }
+    }
+    function hookIsArray(v) {
+        try {
+            return Array.isArray(v);
+        }
+        catch {
             return false;
-        const proto = Object.getPrototypeOf(value);
-        return proto === Object.prototype || proto === null;
+        }
     }
+    const HOOK_ITERATOR_SYMBOL = (() => {
+        const found = Object.getOwnPropertySymbols(Array.prototype).find((s) => s.description === "Symbol.iterator");
+        if (found === undefined)
+            throw new Error("hooks classifier: Array.prototype has no Symbol.iterator");
+        return found;
+    })();
     function hookGuardKeyOf(node) {
         for (const key of Object.keys(node)) {
             if (!HOOK_GUARD_EVENTS.includes(key))
                 continue;
             const value = node[key];
-            if (value !== null && value !== undefined && !(Array.isArray(value) && value.length === 0))
+            if (value !== null && value !== undefined && !(hookIsArray(value) && value.length === 0))
                 return key;
         }
         return undefined;
@@ -29,9 +75,9 @@ export const SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE = (HOOK_EVENTS) => {
         if (!hookIsRecord(value))
             return false;
         const inner = Object.hasOwn(value, "hooks") ? value.hooks : undefined;
-        if (Array.isArray(inner))
+        if (hookIsArray(inner))
             return inner.length > 0;
-        return hookIsRecord(inner) && (Object.hasOwn(value, "matcher") || typeof inner.type === "string");
+        return hookIsRecord(inner) && (Object.hasOwn(value, "matcher") || (Object.hasOwn(inner, "type") && typeof inner.type === "string"));
     }
     function hookGuardSignIn(root, rootPath, place) {
         const frames = [];
@@ -45,25 +91,49 @@ export const SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE = (HOOK_EVENTS) => {
         };
         while (pending.length > 0) {
             const [node, frame, at] = pending.pop();
-            if (node === null || typeof node !== "object" || seen[at].has(node))
+            const shape = hookShapeOf(node);
+            let isList = false;
+            switch (shape) {
+                case "null":
+                case "primitive":
+                    continue;
+                case "uninspectable":
+                    return pathTo(frame, []);
+                case "array":
+                    isList = true;
+                    break;
+                case "plain":
+                    break;
+                case "non_plain_object":
+                    if (HOOK_ITERATOR_SYMBOL in node)
+                        return pathTo(frame, []);
+                    break;
+                default: {
+                    const unhandled = shape;
+                    throw new Error(`hookGuardSignIn: unhandled shape ${String(unhandled)}`);
+                }
+            }
+            const visited = node;
+            if (seen[at].has(visited))
                 continue;
-            seen[at].add(node);
-            if (Array.isArray(node)) {
-                for (let i = node.length - 1; i >= 0; i--) {
+            seen[at].add(visited);
+            if (isList) {
+                const list = node;
+                for (let i = list.length - 1; i >= 0; i--) {
                     frames.push({ key: i, parent: frame });
-                    pending.push([node[i], frames.length - 1, at === "matcherList" ? "matcher" : "other"]);
+                    pending.push([list[i], frames.length - 1, at === "matcherList" ? "matcher" : "other"]);
                 }
                 continue;
             }
-            const guardKey = hookGuardKeyOf(node);
+            const guardKey = hookGuardKeyOf(visited);
             if (guardKey !== undefined)
                 return pathTo(frame, [guardKey]);
-            if (at !== "matcher" && hookLooksLikeMatcher(node))
+            if (at !== "matcher" && hookLooksLikeMatcher(visited))
                 return pathTo(frame, []);
-            const keys = Object.keys(node);
+            const keys = Object.keys(visited);
             for (let i = keys.length - 1; i >= 0; i--) {
                 frames.push({ key: keys[i], parent: frame });
-                pending.push([node[keys[i]], frames.length - 1, "other"]);
+                pending.push([visited[keys[i]], frames.length - 1, "other"]);
             }
         }
         return undefined;
@@ -87,7 +157,7 @@ export const SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE = (HOOK_EVENTS) => {
             case "stringRecord":
                 return hookIsRecord(value) && Object.values(value).every((v) => typeof v === "string");
             case "stringList":
-                if (!Array.isArray(value))
+                if (!hookIsArray(value))
                     return false;
                 for (let i = 0; i < value.length; i++)
                     if (typeof value[i] !== "string")
@@ -121,7 +191,7 @@ export const SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE = (HOOK_EVENTS) => {
             const base = (optional ? kind.slice(0, -1) : kind);
             if (!hookFieldFits(base, value))
                 return { field };
-            out[field] = Array.isArray(value) ? value.slice() : hookIsRecord(value) ? Object.fromEntries(Object.entries(value)) : value;
+            out[field] = hookIsArray(value) ? value.slice() : hookIsRecord(value) ? Object.fromEntries(Object.entries(value)) : value;
         }
         return { entry: out };
     }
@@ -135,18 +205,18 @@ export const SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE = (HOOK_EVENTS) => {
         }
         const entries = Object.hasOwn(matcher, "hooks") ? matcher.hooks : undefined;
         const signField = hookGuardKeyOf(matcher) ??
-            Object.keys(matcher).find((key) => !(key === "hooks" && Array.isArray(entries)) && hookGuardSignIn(matcher[key], [...at, key], "other") !== undefined);
+            Object.keys(matcher).find((key) => !(key === "hooks" && hookIsArray(entries)) && hookGuardSignIn(matcher[key], [...at, key], "other") !== undefined);
         if (signField !== undefined) {
             reject("guard-matcher-invalid", at, signField);
             return undefined;
         }
         const entrySigns = [];
-        if (Array.isArray(entries))
+        if (hookIsArray(entries))
             for (let j = 0; j < entries.length; j++)
                 entrySigns.push(hookGuardSignIn(entries[j], [...at, "hooks", j], "other"));
         const name = Object.hasOwn(matcher, "matcher") ? matcher.matcher : undefined;
-        const badField = name !== undefined && typeof name !== "string" ? "matcher" : !Array.isArray(entries) ? "hooks" : undefined;
-        if (badField !== undefined || !Array.isArray(entries)) {
+        const badField = name !== undefined && typeof name !== "string" ? "matcher" : !hookIsArray(entries) ? "hooks" : undefined;
+        if (badField !== undefined || !hookIsArray(entries)) {
             if (guardEvent || entrySigns.some((sign) => sign !== undefined))
                 reject("guard-matcher-invalid", at, badField);
             else
@@ -173,13 +243,15 @@ export const SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE = (HOOK_EVENTS) => {
     }
     function hookBlockRead(hooks, reject, drop) {
         if (!hookIsRecord(hooks)) {
-            if (Array.isArray(hooks) && hooks.some((x) => x !== null && typeof x === "object"))
+            if (hookIsArray(hooks) && hooks.some(hookIsObjectLike))
+                reject("hooks-is-matcher", ["hooks"]);
+            else if (hookGuardSignIn(hooks, ["hooks"], "other") !== undefined)
                 reject("hooks-is-matcher", ["hooks"]);
             else
                 drop("hooks-not-object", ["hooks"]);
             return undefined;
         }
-        if (hookLooksLikeMatcher(hooks) || typeof hooks.type === "string") {
+        if (hookLooksLikeMatcher(hooks) || (Object.hasOwn(hooks, "type") && typeof hooks.type === "string")) {
             reject("hooks-is-matcher", ["hooks"]);
             return undefined;
         }
@@ -188,14 +260,14 @@ export const SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE = (HOOK_EVENTS) => {
             const value = hooks[event];
             const at = ["hooks", event];
             if (!HOOK_EVENTS.includes(event)) {
-                if (hookGuardSignIn(value, at, Array.isArray(value) ? "matcherList" : "other") !== undefined)
+                if (hookGuardSignIn(value, at, hookIsArray(value) ? "matcherList" : "other") !== undefined)
                     reject("guard-under-unknown-event", at);
                 else
                     drop("unknown-event", at);
                 continue;
             }
             const guardEvent = HOOK_GUARD_EVENTS.includes(event);
-            if (!Array.isArray(value)) {
+            if (!hookIsArray(value)) {
                 if ((guardEvent && value !== null) || hookGuardSignIn(value, at, "other") !== undefined)
                     reject("guard-event-not-array", at);
                 else
@@ -212,7 +284,7 @@ export const SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE = (HOOK_EVENTS) => {
         }
         return loaded;
     }
-    function classifyHooksConfig(settingsDoc) {
+    function hookClassify(settingsDoc) {
         const rejections = [];
         const dropped = [];
         const reject = (code, path, field) => {
@@ -222,7 +294,7 @@ export const SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE = (HOOK_EVENTS) => {
             dropped.push(field === undefined ? { code, path } : { code, path, field });
         };
         let hooks;
-        if (settingsDoc !== null && typeof settingsDoc === "object" && !Array.isArray(settingsDoc)) {
+        if (hookIsRecord(settingsDoc)) {
             const doc = settingsDoc;
             for (const key of Object.keys(doc)) {
                 const value = doc[key];
@@ -232,7 +304,7 @@ export const SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE = (HOOK_EVENTS) => {
                 }
                 const sign = key === "matcher" && hookLooksLikeMatcher(doc)
                     ? [key]
-                    : HOOK_GUARD_EVENTS.includes(key) && value !== null && value !== undefined && !(Array.isArray(value) && value.length === 0)
+                    : HOOK_GUARD_EVENTS.includes(key) && value !== null && value !== undefined && !(hookIsArray(value) && value.length === 0)
                         ? [key]
                         : hookGuardSignIn(value, [key], "other");
                 if (sign !== undefined)
@@ -250,5 +322,13 @@ export const SETTINGS_CLASSIFY_HOOKS_CONFIG_CLOSURE = (HOOK_EVENTS) => {
             return { outcome: "loaded-partial", hooks, dropped, rejections: [] };
         return { outcome: "loaded", hooks, dropped: [], rejections: [] };
     }
+    function classifyHooksConfig(settingsDoc) {
+        try {
+            return hookClassify(settingsDoc);
+        }
+        catch {
+            return { outcome: "rejected", hooks: undefined, dropped: [], rejections: [{ code: "guard-outside-hooks", path: [] }] };
+        }
+    }
     return classifyHooksConfig;
 };

package/dist/generated/settingsSchemaMcpRequestEntry.d.ts

@@ -1 +1 @@
-export declare const SETTINGS_MCP_REQUEST_ENTRY_CLOSURE: (MCP_CONTENT_ORIGINS: readonly ["local", "execution", "external"], startsWithHttpScheme: (raw: string) => boolean, echoCallerText: (text: string) => string) => any;
+export declare const SETTINGS_MCP_REQUEST_ENTRY_CLOSURE: (MCP_CONTENT_ORIGINS: readonly ["local", "execution", "external"], startsWithHttpScheme: (raw: string) => boolean, echoCallerText: (text: string) => string, UNINSPECTABLE: "an object that could not be inspected (a proxy trap threw)", captureStringArray: (v: unknown, classification: "strict" | "wide") => string[] | undefined, dataDescriptor: (value: unknown) => PropertyDescriptor, inspect: (read: () => unknown) => object, ownFieldsOf: (record: object, keys: readonly string[]) => object, ownValueOf: (record: object, key: string) => object, readKey: (record: object, key: PropertyKey) => object, isJsonArray: (v: unknown) => v is unknown[], jsonShapeOf: (v: unknown) => "plain" | "non_plain_object" | "array" | "null" | "primitive" | "uninspectable", isReservedMcpServerName: (name: string) => boolean, RESERVED_MCP_SERVER_NAME_REASON: "the \"remote-\" prefix is reserved for the remote MCP servers a device executor offers") => any;