npm - @sema-agent/settings-schema - Versions diffs - 12.3.0 → 13.0.1 - Mend

@sema-agent/settings-schema 12.3.0 → 13.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (60) hide show

package/CHANGELOG.md +188 -0
package/README.md +33 -4
package/conformance/VERSION +1 -1
package/conformance/cases/c01-entry-salvage-then-typo/expected.json +1 -3
package/conformance/cases/c03-literal-dotted-top-key/expected.json +4 -12
package/conformance/cases/c10-record-key-secret-redacted-twice/expected.json +1 -3
package/conformance/cases/c23-mixed-validity-models/expected.json +2 -6
package/conformance/cases/c24-valid-entries-with-unknown-keys/expected.json +2 -6
package/conformance/cases/c25-published-roundtrip-zero-warnings/expected.json +2 -6
package/conformance/cases/c30-version-triple-a-first/expected.json +2 -6
package/conformance/cases/c31-version-triple-b-changed/expected.json +2 -6
package/conformance/cases/c32-version-triple-a-restored/expected.json +2 -6
package/conformance/cases/c40-s712-identity-only-what-reads-out/expected.json +1 -3
package/conformance/cases/c41-s792-encoded-pem-identity/expected.json +1 -3
package/conformance/cases/c42-s792-unknown-key-secret-redacted/expected.json +2 -6
package/conformance/cases/c43-s792-form-and-deep-encoded-pem/expected.json +1 -3
package/conformance/cases/c44-s792-utf8-escape-glued-token/expected.json +1 -3
package/conformance/cases/c45-s792-identity-bounds-and-decode-depth/expected.json +1 -3
package/conformance/cases/c47-s811-roles-key-url-userinfo-withheld/expected.json +1 -3
package/conformance/cases/c48-s935-model-headers-transported/expected.json +6 -18
package/conformance/cases/c49-s935-model-headers-secret-entry-dropped/expected.json +1 -3
package/conformance/cases/c69-deep-encoded-token-past-every-reading/expected.json +1 -3
package/conformance/cases/c70-rewritten-token-in-front-of-encoded-pem-header/expected.json +1 -3
package/conformance/cases/c72-dangling-reference-write-seat-refuses/expected.json +1 -3
package/conformance/cases/cc03-model-compat-unknown-subkey/expected.json +2 -6
package/conformance/cases/cli01-model-name-nfc-vs-nfd/expected.json +1 -3
package/conformance/cases/cli02-control-and-zero-width-chars/expected.json +1 -3
package/conformance/cases/cli05-long-and-prefix-colliding-names/expected.json +6 -18
package/conformance/cases/t01-absent-domain-key-not-null/expected.json +1 -3
package/conformance/cases/t03-prototype-name-key-not-swallowed/expected.json +2 -6
package/conformance/cases/t04-secret-literal-never-in-warning-value/expected.json +1 -3
package/dist/hooks-config.d.ts +243 -0
package/dist/hooks-config.js +466 -0
package/dist/hooks.d.ts +16 -154
package/dist/hooks.js +17 -111
package/dist/http-hook-allowlists.d.ts +63 -0
package/dist/http-hook-allowlists.js +73 -0
package/dist/index.d.ts +5 -0
package/dist/index.js +6 -1
package/dist/mcp-server-policy.d.ts +75 -0
package/dist/mcp-server-policy.js +84 -0
package/dist/safety-merge-spec.d.ts +13 -3
package/dist/safety-merge-spec.js +10 -3
package/dist/settings-sources.d.ts +91 -0
package/dist/settings-sources.js +107 -0
package/dist/types.d.ts +6 -6
package/dist/types.js +9 -5
package/dist/ui-language.d.ts +40 -0
package/dist/ui-language.js +37 -0
package/dist/url-pattern.d.ts +33 -0
package/dist/url-pattern.js +239 -0
package/docs/API-SURFACE.md +1395 -0
package/docs/CC-DIVERGENCE.md +42 -0
package/docs/CONFORMANCE.md +344 -0
package/docs/CONSUMER-INTEGRATION.md +282 -0
package/docs/openapi-auth.yaml +357 -0
package/docs/openapi-scopes.yaml +281 -0
package/llms-full.txt +656 -0
package/llms.txt +174 -0
package/package.json +4 -1

package/docs/API-SURFACE.md ADDED Viewed

@@ -0,0 +1,1395 @@
+# 导出面登记表(API surface)
+> **生成物,别手改**:`npm run api:surface` 按 `src/` 与 `package.json` 的 exports 表重写本档;`test/api-surface.test.ts`
+> 每次全量重算并逐名比对 —— 加 / 删 / 改形一个导出而不重生成本档 ⇒ 红。导出面的每次变动因此以本档的 diff 出现在评审里。
+> 形:`value` = 运行期拿得到的值;`type` = 只在类型层;`value+type` = 同名的值与类型(zod schema 与它推出的类型)。
+子路径 24 条(资产出口 `./package.json` / `./fleet-paths.json` 不是模块,不列),导出名合计 1316 个(同名在多条子路径上各计一次)。
+## `.`(638)
+- `ABSOLUTE_HOST_PATH_MAX` — value
+- `ACCESS_TOKEN_TTL_SECONDS` — value
+- `ANY_INDEX` — value
+- `AT_MENTION_MODES` — value
+- `AUTH_BRIDGE_ALGS` — value
+- `AUTH_BRIDGE_ERROR_CODES` — value
+- `AUTH_V1_PATHS` — value
+- `AUTONOMY_MODES` — value
+- `AbsoluteHostPath` — value
+- `ActorAssertionWire` — value+type
+- `AgentHookEntry` — value+type
+- `AggregatedPrincipalUsage` — type
+- `ApprovePublishResult` — type
+- `AssistantTurnError` — value+type
+- `AsyncHookOutput` — value+type
+- `AtMention` — value+type
+- `AtMentionMode` — type
+- `AuthBridgeAlg` — type
+- `AuthBridgeErrorCode` — type
+- `AuthBridgeResult` — type
+- `AutonomyMode` — value+type
+- `BASE64_SHAPE` — value
+- `BaseHookInput` — value+type
+- `BudgetGroup` — value+type
+- `BudgetGroupMember` — value
+- `COMMAND_DECISIONS` — value
+- `CONFIG_CHANGE_SOURCES` — value
+- `CROSS_SESSION_INBOUND_UNSET` — value
+- `CROSS_SESSION_INBOUND_VALUES` — value
+- `CancelSource` — value+type
+- `CapabilityReading` — type
+- `CasWriteResult` — type
+- `CatalogDefaultModel` — type
+- `CatalogDefaultSource` — type
+- `CollabConfig` — value+type
+- `CollabEarlyStop` — value+type
+- `CollabFinalizerType` — value+type
+- `CollabPersistence` — value+type
+- `CollabTemplate` — type
+- `CollabTopology` — value+type
+- `CommandDecision` — value+type
+- `CommandHookEntry` — value+type
+- `ConfigChange` — type
+- `ConfigChangeHookInput` — value
+- `ConfigPath` — type
+- `ConfigReader` — type
+- `CrossSessionInboundSetting` — value
+- `CrossSessionInboundSettingValue` — type
+- `CrossSessionInboundValue` — type
+- `CrossSessionSettings` — value+type
+- `CwdChangedHookInput` — value
+- `DEFAULT_CANCEL_SOURCE` — value
+- `DEFAULT_CLOCK_SKEW_SEC` — value
+- `DEFAULT_DOMAIN_WRITE_ROLE` — value
+- `DEFAULT_DRAIN_GRACE_MS` — value
+- `DEFAULT_HEARTBEAT_MS` — value
+- `DEFAULT_HOOK_TIMEOUT_SECONDS` — value
+- `DEFAULT_JWKS_REFRESH_MIN_INTERVAL_SEC` — value
+- `DEFAULT_OFFLINE_GRACE_SEC` — value
+- `DEFAULT_ROLE_TIER_LADDER` — value
+- `DELIVER_DENYLIST` — value
+- `DEVICE_AUTH_STATUSES` — value
+- `DEVICE_CODE_TTL_SECONDS` — value
+- `DEVICE_GRANT_TYPE` — value
+- `DEVICE_POLL_INTERVAL_SECONDS` — value
+- `DIALOG_EXPIRY_DEFAULT` — value
+- `DIALOG_EXPIRY_VALUES` — value
+- `DIRECTORY_ADDED_SOURCES` — value
+- `DISCLOSABLE_IDENTITY_RE` — value
+- `DISPATCH_STRATEGIES` — value
+- `DOMAINS` — value
+- `DOMAIN_ENTRY_SALVAGE` — value
+- `DOMAIN_READ_FALLBACK` — value
+- `DOMAIN_SCHEMAS` — value
+- `DOMAIN_WRITE_ROLE` — value
+- `DRAIN_ACTION_ID` — value
+- `DRAIN_GRACE_FLOOR_MS` — value
+- `DRAIN_PHASES` — value
+- `DRAIN_RECEIPT_STATES` — value
+- `DRAIN_RETRY_AFTER_SECONDS` — value
+- `DROPPED_ENTRY_REASON_CODES` — value
+- `DeviceApproveLookupResponse` — value+type
+- `DeviceApproveRequest` — value+type
+- `DeviceApproveResponse` — value+type
+- `DeviceAuthStatus` — type
+- `DeviceCodeRequest` — value+type
+- `DeviceCodeResponse` — value+type
+- `DeviceTokenRequest` — value+type
+- `DialogExpirySetting` — value
+- `DialogExpirySettingValue` — type
+- `DialogExpiryValue` — type
+- `DirectoryAddedHookInput` — value+type
+- `DispatchCandidate` — type
+- `DispatchPolicy` — value+type
+- `DispatchStrategy` — type
+- `DomainConfig` — type
+- `DomainName` — type
+- `DrainPhase` — type
+- `DrainReceipt` — value+type
+- `DrainReceiptState` — value+type
+- `DrainRequest` — value+type
+- `DrainSnapshot` — type
+- `DrainVerdict` — type
+- `DroppedEntry` — type
+- `DroppedEntryIdentity` — type
+- `DroppedEntryReasonCode` — type
+- `ENGINE_OWNED_HOOK_EVENTS` — value
+- `ENGINE_SIGNAL_KEY` — value
+- `ENV_NAME` — value
+- `EXECUTION_LANES` — value
+- `EXECUTION_LANE_WORDS` — value
+- `EXTENSION_NAMESPACES` — value
+- `EffectiveConfig` — type
+- `EffectiveKey` — value+type
+- `EffectivePrompts` — value+type
+- `EffectivePromptsWire` — value+type
+- `EffectiveReadWarning` — type
+- `EffectiveWire` — type
+- `ElicitationHookInput` — value
+- `ElicitationResultHookInput` — value
+- `EngineDraining` — value+type
+- `EngineSignal` — value+type
+- `EntitlementBudget` — value+type
+- `EntitlementConfig` — value+type
+- `EntitlementGroupBinding` — value+type
+- `EntitlementOverride` — value+type
+- `EntitlementRuntimeCaps` — value+type
+- `EntitlementSubject` — value+type
+- `EntitlementTier` — value+type
+- `EntryKeptIndex` — type
+- `EntrySalvageResult` — type
+- `EnvRef` — type
+- `EnvRefUse` — type
+- `ExecutionLane` — type
+- `ExecutionLaneRow` — type
+- `ExecutionPolicy` — value+type
+- `ExecutionPublicKey` — value+type
+- `ExtensionNamespaceRule` — type
+- `FEEDBACK_DESCRIPTION_MAX_CHARS` — value
+- `FEEDBACK_TRANSCRIPT_MAX_JSON_CHARS` — value
+- `FEEDBACK_V1_PATH` — value
+- `FLEET_GENERATION_ENV` — value
+- `FLEET_LIVE_PATHS` — value
+- `FLEET_PATHS` — value
+- `FLEET_SCOPE_ENV` — value
+- `FailMode` — value+type
+- `FeedbackListResponse` — value+type
+- `FeedbackSubmitRequest` — value+type
+- `FeedbackWire` — value+type
+- `FileChangedHookInput` — value
+- `GIT_COMMIT_SHA` — value
+- `GLOBAL_SCOPE` — value
+- `GovernanceConfig` — value+type
+- `HEARTBEAT_REPLY_CAPABILITIES_KEY` — value
+- `HOOKS_CLASSIFICATION_OUTCOMES` — value
+- `HOOKS_DROPPED_PIECE_CODES` — value
+- `HOOKS_REJECTION_CODES` — value
+- `HOOK_ENTRY_TYPES` — value
+- `HOOK_EVENTS` — value
+- `HOOK_EVENT_MATCHER_FIELD` — value
+- `HOOK_EVENT_OWNER` — value
+- `HOOK_INJECTED_ENV` — value
+- `HOSTS_ARRAY_MAX` — value
+- `HOST_NAME_MAX` — value
+- `HTTP_HOOK_ALLOWLIST_KEYS` — value
+- `HTTP_URL_PARTS` — value
+- `HTTP_URL_SHAPE_RULE` — value
+- `HeldWorkerRow` — type
+- `HookDecision` — value+type
+- `HookEntry` — value+type
+- `HookEntryType` — type
+- `HookEnvBlank` — type
+- `HookEnvInterpolation` — type
+- `HookEventName` — value+type
+- `HookInput` — value+type
+- `HookMatcherEntry` — value+type
+- `HookMatcherForm` — type
+- `HookOutput` — value+type
+- `HookOwner` — value+type
+- `HookPermissionRequestDecision` — value+type
+- `HookSpecificOutput` — value+type
+- `HooksClassification` — type
+- `HooksClassificationOutcome` — type
+- `HooksConfig` — value+type
+- `HooksDroppedPiece` — type
+- `HooksDroppedPieceCode` — type
+- `HooksRejection` — type
+- `HooksRejectionCode` — type
+- `HooksSlotSemantics` — value+type
+- `HostEntry` — value+type
+- `HostProbes` — value+type
+- `HostStatus` — value+type
+- `HostsConfig` — value+type
+- `HttpHookAllowlistKey` — type
+- `HttpHookAllowlistLayer` — type
+- `HttpHookAllowlistLayerRead` — type
+- `HttpHookAllowlistSettings` — value+type
+- `HttpHookEntry` — value+type
+- `HttpHookUrlBlock` — type
+- `HttpUrlFlaw` — type
+- `HttpUrlPart` — type
+- `INSTRUCTIONS_LOAD_REASONS` — value
+- `INSTRUCTIONS_MEMORY_TYPES` — value
+- `InfraCostRates` — value+type
+- `InstanceAnnouncement` — value+type
+- `InstanceDeregistration` — value+type
+- `InstanceHealth` — value+type
+- `InstanceRegistration` — value+type
+- `InstructionsLoadedHookInput` — value
+- `JwksCacheSnapshot` — type
+- `K8S_QUANTITY` — value
+- `LAYER_ADMISSION_VERDICTS` — value
+- `LEASE_STATES` — value
+- `LaneTenancy` — type
+- `LayerAdmissionVerdict` — type
+- `LeaseState` — value+type
+- `LimitsConfig` — value+type
+- `LogoutRequest` — value+type
+- `LogoutResponse` — value+type
+- `MAX_EXTRA_BODY_DEPTH` — value
+- `MAX_HASH_DEPTH` — value
+- `MAX_HASH_WRAPPER_RESERVE` — value
+- `MCP_CONTENT_ORIGINS` — value
+- `MCP_POLICY_RULES` — value
+- `MCP_SERVER_LIST_KEYS` — value
+- `MEMORY_ENGINE_BACKENDS` — value
+- `MODEL_ENTRY_REFUSAL_CODES` — value
+- `MODEL_PLANE_REFUSAL_CODES` — value
+- `MODEL_SWITCH_SOURCES` — value
+- `McpConfig` — value+type
+- `McpContentOrigin` — type
+- `McpPolicyBlock` — type
+- `McpPolicyLayer` — type
+- `McpPolicyRule` — type
+- `McpPolicyServer` — type
+- `McpServerListEntry` — type
+- `McpServerListKey` — type
+- `McpServerSpec` — value+type
+- `McpServerTarget` — type
+- `McpToolHookEntry` — value+type
+- `McpTransport` — value+type
+- `MemberAdmission` — value+type
+- `MemberDirection` — value+type
+- `MemoryEngineBackend` — type
+- `MergeCategorySpec` — value+type
+- `MergeShape` — value+type
+- `MessageDisplayHookInput` — value
+- `MinTrust` — value+type
+- `ModelCost` — value
+- `ModelEntry` — value+type
+- `ModelEntryRefusalCode` — value+type
+- `ModelPlaneRefusalCode` — value+type
+- `ModelRefusalsSignal` — type
+- `ModelRefusalsWire` — value+type
+- `ModelRole` — value+type
+- `ModelTier` — value+type
+- `ModelsConfig` — value+type
+- `NON_SECRET_URL` — value
+- `NON_SECRET_URL_NO_MIGRATION` — value
+- `NOT_ROUTABLE_CODES` — value
+- `NotRoutableCode` — type
+- `NotificationHookInput` — value
+- `OAUTH_ERROR_CODES` — value
+- `OAuthErrorCode` — type
+- `OAuthErrorResponse` — value+type
+- `PARSE_TRANSPARENT_KEYS` — value
+- `PLUGIN_ORIGIN` — value
+- `PRINCIPAL_MAX_LENGTH` — value
+- `PRIVATE_KEY_PEM_HEADER` — value
+- `PROBE_CPU_CORES_MAX` — value
+- `PROBE_MEM_BYTES_MAX` — value
+- `PROJECT_COLOR_REGEX` — value
+- `PROJECT_CONTEXT_ITEM_KINDS` — value
+- `PROJECT_ICON_REGEX` — value
+- `PROJECT_ID_REGEX` — value
+- `PROJECT_LIMITS` — value
+- `PROMPT_ARTIFACT_LIMITS` — value
+- `PROMPT_PACK_ID_PREFIX` — value
+- `PROMPT_SLOTS` — value
+- `ParseTransparentKey` — type
+- `ParseTransparentValidator` — type
+- `PendingPublish` — type
+- `PermissionBehavior` — value+type
+- `PermissionDeniedHookInput` — value
+- `PermissionMode` — value+type
+- `PermissionRequestHookInput` — value
+- `PermissionRuleValue` — value+type
+- `PermissionUpdate` — value+type
+- `PermissionUpdateDestination` — value+type
+- `PluginSource` — value+type
+- `PluginSpec` — value+type
+- `PluginsConfig` — value+type
+- `PostCompactHookInput` — value
+- `PostModelSwitchHookInput` — value+type
+- `PostToolBatchHookInput` — value
+- `PostToolBatchToolCall` — value+type
+- `PostToolUseFailureHookInput` — value
+- `PostToolUseHookInput` — value
+- `PreCompactHookInput` — value
+- `PreModelSwitchHookInput` — value+type
+- `PreToolUseHookInput` — value
+- `PrincipalCapsWire` — value+type
+- `PrincipalOrgMemoryWire` — value+type
+- `ProjectContextItem` — value+type
+- `ProjectContextItemKind` — type
+- `ProjectRegistration` — value+type
+- `ProjectRegistrationPatch` — value+type
+- `ProjectsConfig` — value+type
+- `PromptArtifactSection` — value+type
+- `PromptBinding` — value+type
+- `PromptCatalogSnapshot` — value+type
+- `PromptEpochArtifactPayload` — value+type
+- `PromptHookEntry` — value+type
+- `PromptPackId` — value
+- `PromptSlot` — value+type
+- `PromptTextDeclaration` — value+type
+- `PromptsConfig` — value+type
+- `PublishedPromptArtifactEnvelope` — value+type
+- `PublishedSnapshot` — type
+- `QuotaLease` — value+type
+- `QuotaResetEvent` — value+type
+- `QuotedIssueParams` — type
+- `RBAC_AUDIT` — value
+- `REFRESH_TOKEN_TTL_SECONDS` — value
+- `REF_CHECKED_DOMAINS` — value
+- `REF_ISSUE_KINDS` — value
+- `REF_ISSUE_TARGET_DOMAIN` — value
+- `REF_REFERRER_DOMAINS` — value
+- `REMOTE_EXEC_DOCUMENT` — value
+- `RESERVED_SCOPE_IDS` — value
+- `RESERVED_WORKER_ENV` — value
+- `RETIRED_DOMAINS` — value
+- `RETIRED_ENVS` — value
+- `RETIRED_ENV_REFUSAL_CODE` — value
+- `RETIRED_LANE_WORDS` — value
+- `ROLE_RANK` — value
+- `ROSTER_CHEAP_ROLES` — value
+- `ROSTER_PRIMARY_ROLES` — value
+- `RUNTIME_CAP_STRICT` — value
+- `RefCheckedDomain` — type
+- `RefDocs` — type
+- `RefIssue` — type
+- `RefIssueKind` — type
+- `RefReferrer` — type
+- `RefReferrerDomain` — type
+- `RemoteExecSpec` — value+type
+- `ResolvedEffective` — type
+- `ResolvedMemberAdmission` — type
+- `ResolvedTokenScope` — type
+- `RestartSignal` — value+type
+- `RetiredDomainError` — value+type
+- `RetiredDomainName` — type
+- `RetiredEnv` — type
+- `RetiredEnvKind` — type
+- `RetiredEnvWire` — type
+- `RetiredLaneWord` — type
+- `RoleTarget` — value+type
+- `RosterEntry` — value+type
+- `RostersConfig` — value+type
+- `RoutingVerdict` — type
+- `SAFETY_MERGE_SPEC` — value
+- `SCOPES_V1_PATHS` — value
+- `SCOPE_CLAIM` — value
+- `SCOPE_ID_REGEX` — value
+- `SCOPE_SWITCH_TOKEN_TTL_SECONDS` — value
+- `SEALED_BOX_ALG` — value
+- `SECRETS_AUDIT` — value
+- `SECRET_LITERAL_RE` — value
+- `SERVING_LEASE_DENIED_REASONS` — value
+- `SERVING_LEASE_DRIFT_MARGIN_MS` — value
+- `SERVING_LEASE_TTL_DEFAULT_MS` — value
+- `SERVING_LEASE_TTL_FLOOR_MS` — value
+- `SERVING_LEASE_UNKNOWN_REASON` — value
+- `SERVING_LEASE_VERDICTS` — value
+- `SESSION_BACKENDS` — value
+- `SESSION_EXIT_REASONS` — value
+- `SESSION_MIRROR_ENGINE_URL` — value
+- `SETTINGS_SOURCES` — value
+- `SETTINGS_SOURCE_CONTRACT` — value
+- `SHA256_DIGEST_RE` — value
+- `STALE_HEARTBEAT_MULTIPLIER` — value
+- `STALE_SESSION_RECORD_MS` — value
+- `STORE_BACKENDS` — value
+- `SUBMIT_IDEMPOTENCY_KEY` — value
+- `SafetyMergeCategory` — type
+- `SafetyMergeMember` — type
+- `ScenarioAssignments` — value+type
+- `ScenarioConfig` — value+type
+- `ScenarioEntry` — value+type
+- `SchedulerParseWarning` — type
+- `SchedulerReadOptions` — type
+- `SchedulerRecord` — type
+- `SchedulerStore` — type
+- `SchedulerStoreRead` — type
+- `SchedulerWhen` — type
+- `Scope` — value+type
+- `ScopeCreateRequest` — value+type
+- `ScopeCreateResponse` — value+type
+- `ScopeId` — value+type
+- `ScopeListEntry` — value+type
+- `ScopeMember` — value+type
+- `ScopeMemberDeleteRequest` — value+type
+- `ScopeMemberDeleteResponse` — value+type
+- `ScopeMemberUpsertRequest` — value+type
+- `ScopeMemberUpsertResponse` — value+type
+- `ScopeMembershipInput` — type
+- `ScopeRole` — value+type
+- `ScopeSwitchRequest` — value+type
+- `ScopeSwitchResponse` — value+type
+- `ScopedTokenBinding` — type
+- `ScopedTokenFamily` — type
+- `ScopesListResponse` — value+type
+- `SealedApiKey` — value+type
+- `ServingLeaseDeniedReason` — value+type
+- `ServingLeaseReading` — type
+- `ServingLeaseRequest` — value+type
+- `ServingLeaseResponse` — value+type
+- `SessionBackend` — type
+- `SessionEndHookInput` — value
+- `SessionExitReason` — value+type
+- `SessionMirrorPolicy` — value+type
+- `SessionStartHookInput` — value
+- `SettingLayerRead` — type
+- `SettingSource` — value+type
+- `SettingsSource` — type
+- `SettingsSourceContract` — type
+- `SetupHookInput` — value
+- `Sha256Digest` — value
+- `SiblingResolver` — type
+- `SkillManifestEntry` — type
+- `SkillSpec` — value+type
+- `SkillsConfig` — value+type
+- `SkillsManifest` — type
+- `SkillsManifestSchema` — value
+- `SpecEnforcement` — value+type
+- `StopFailureHookInput` — value
+- `StopHookInput` — value
+- `StoppedBy` — value+type
+- `StoreBackend` — type
+- `StoredDocumentReader` — type
+- `SubagentStartHookInput` — value
+- `SubagentStopHookInput` — value
+- `SyncHookOutput` — value+type
+- `SystemEntry` — value+type
+- `SystemStatusEntry` — value+type
+- `SystemsConfig` — value+type
+- `TCP_PORT` — value
+- `TENANT_SEPARATION_BASES` — value
+- `TENANT_SEPARATION_WORDS` — value
+- `TOKEN_SCOPE_REFUSALS` — value
+- `TaskCompletedHookInput` — value
+- `TaskCreatedHookInput` — value
+- `TeammateIdleHookInput` — value
+- `TenantSeparation` — type
+- `TenantSeparationBasis` — type
+- `TierBindings` — value+type
+- `TierGroup` — value+type
+- `TightenRule` — value+type
+- `TokenGrantResponse` — value+type
+- `TokenQuota` — value+type
+- `TokenRefreshRequest` — value+type
+- `TokenScopeRefusal` — type
+- `UI_LANGUAGE_SETTING` — value
+- `UI_LANGUAGE_VALUES` — value
+- `USER_ROLES` — value
+- `UiLanguageSetting` — value
+- `UiLanguageSettings` — value+type
+- `UiLanguageValue` — type
+- `UsageEntry` — value+type
+- `UsageReport` — value+type
+- `User` — type
+- `UserAuth` — type
+- `UserPromptExpansionHookInput` — value
+- `UserPromptSubmitHookInput` — value
+- `UserRole` — type
+- `VerifiedIdentity` — value+type
+- `VerifierConfig` — value+type
+- `VerifierConfigInput` — type
+- `WARNING_KINDS` — value
+- `WEB_ADMIN_CREDENTIALS` — value
+- `WEB_ADMIN_CREDENTIAL_ENVELOPE_KIND` — value
+- `WEB_ADMIN_ENV` — value
+- `WEB_ADMIN_JWKS_PATH` — value
+- `WORKER_NAME` — value
+- `WORKER_PULL_TOKEN` — value
+- `WORKER_RESOURCE_PRESETS` — value
+- `WORKSPACE_TRUST_STATES` — value
+- `WarningKind` — type
+- `WarningProjection` — type
+- `WebAdminCapabilities` — value+type
+- `WebAdminCredential` — type
+- `WebAdminCredentialDeclaration` — type
+- `WebAdminCredentialEnvelope` — value+type
+- `WebAdminCredentialFile` — type
+- `WebAdminJwk` — value+type
+- `WebAdminJwks` — value+type
+- `WebAdminSessionTarget` — type
+- `WorkerCondition` — value+type
+- `WorkerLifecycle` — value+type
+- `WorkerLifecycleRecord` — type
+- `WorkerResourcePreset` — type
+- `WorkerSpec` — value+type
+- `WorkerStatus` — value+type
+- `WorkersConfig` — value+type
+- `WorkersRowsRead` — type
+- `WorkspaceTrustState` — type
+- `WorktreeCreateHookInput` — value
+- `WorktreeRemoveHookInput` — value
+- `aggregateUsage` — value
+- `applyProjectPatch` — value
+- `buildEffective` — value
+- `buildRetiredEnvWire` — value
+- `canSwitchScope` — value
+- `clampServingLeaseTtlMs` — value
+- `classifyHooksConfig` — value
+- `classifyTimeClaims` — value
+- `collectEnvRefs` — value
+- `compareGeneration` — value
+- `containsSecretToken` — value
+- `createSiblingResolver` — value
+- `danglingRefs` — value
+- `domainWriteRole` — value
+- `drainVerdict` — value
+- `effectiveScopeRole` — value
+- `emptyEffective` — value
+- `extraBodyUnsafe` — value
+- `findSkillContent` — value
+- `fnv1a64` — value
+- `formatConfigPath` — value
+- `hasNul` — value
+- `hookMatcherForm` — value
+- `hookMatcherSelects` — value
+- `httpHookEnvVarsAllowed` — value
+- `httpHookUrlVerdict` — value
+- `httpUrlFlaws` — value
+- `httpUrlRule` — value
+- `interpolateHookEnvVars` — value
+- `isAbsoluteHostPath` — value
+- `isAtLeast` — value
+- `isCanonicalGeneration` — value
+- `isDisclosableIdentity` — value
+- `isDomainName` — value
+- `isHierarchicalUrl` — value
+- `isInstanceStale` — value
+- `isLoopbackAuthHost` — value
+- `isLoopbackRouteHost` — value
+- `isReadyForTraffic` — value
+- `isRefCheckedDomain` — value
+- `isReportableRefusalName` — value
+- `isReservedExtensionKey` — value
+- `isReservedScopeId` — value
+- `isRetiredDomainName` — value
+- `isRole` — value
+- `isRoutable` — value
+- `isSchedulerRecord` — value
+- `judgeReadiness` — value
+- `judgeRoutability` — value
+- `judgeWebAdminCredentialDeclaration` — value
+- `jwksWithinOfflineGrace` — value
+- `layerAdmission` — value
+- `leaseExhausted` — value
+- `leaseRemaining` — value
+- `looksLikeJwt` — value
+- `mcpServerPolicyVerdict` — value
+- `memberAdmission` — value
+- `memberMinTrust` — value
+- `membersOf` — value
+- `mintScopedToken` — value
+- `narrowAtMention` — value
+- `nextPollInterval` — value
+- `normalizeContentHash` — value
+- `normalizeUserCode` — value
+- `outgoingPath` — value
+- `parseDomain` — value
+- `parseDomainLoud` — value
+- `parseDomainSalvaged` — value
+- `parseSchedulerStore` — value
+- `parseWebAdminCredentialFile` — value
+- `parseWebAdminSessionUrl` — value
+- `pickInstance` — value
+- `projectWarning` — value
+- `readCapabilityReading` — value
+- `readCrossSessionInbound` — value
+- `readDialogExpiry` — value
+- `readDrainReceipt` — value
+- `readDrainRequest` — value
+- `readEffectiveWire` — value
+- `readEngineSignal` — value
+- `readHttpHookAllowlistLayer` — value
+- `readModelRefusals` — value
+- `readScopedTokenBinding` — value
+- `readServingLeaseRequest` — value
+- `readServingLeaseResponse` — value
+- `readTokenScope` — value
+- `readUiLanguage` — value
+- `readWorkersRows` — value
+- `rebaseWarningPaths` — value
+- `reconcileLease` — value
+- `redactSecrets` — value
+- `refIntegrityIssues` — value
+- `refuseRetiredDomain` — value
+- `renderQuotedSentence` — value
+- `renderRefIssue` — value
+- `resolveActiveTiers` — value
+- `resolveCatalogDefaultModel` — value
+- `resolveEffectiveForWorker` — value
+- `resolveMemberAdmission` — value
+- `resolveTokenScope` — value
+- `retiredDomainSentence` — value
+- `retiredEnvRefusal` — value
+- `retiredLaneWordRefusal` — value
+- `roleAtLeast` — value
+- `rosterMarkerRoles` — value
+- `routableInstances` — value
+- `salvageEntries` — value
+- `sanitizeZodError` — value
+- `scopeMembersPath` — value
+- `serializeSchedulerStore` — value
+- `settingsSourceContract` — value
+- `sha256Hex` — value
+- `shouldForceJwksRefresh` — value
+- `shouldRenewLease` — value
+- `skillContentHash` — value
+- `stableHash` — value
+- `stableStringify` — value
+- `statusRowsToPrune` — value
+- `stopAttributionText` — value
+- `toSkillsManifest` — value
+- `toVerifiedIdentity` — value
+- `trustRank` — value
+- `urlAllowPatternMatches` — value
+- `urlDenyPatternMatches` — value
+- `urlQueryFragmentHasSecret` — value
+- `verifyScopedToken` — value
+- `webAdminSessionUrl` — value
+- `withheldNameToken` — value
+- `workerRouteKey` — value
+- `workersReferencingSecret` — value
+## `./types`(147)
+- `ABSOLUTE_HOST_PATH_MAX` — value
+- `AT_MENTION_MODES` — value
+- `AUTONOMY_MODES` — value
+- `AbsoluteHostPath` — value
+- `ActorAssertionWire` — value+type
+- `AtMention` — value+type
+- `AtMentionMode` — type
+- `AutonomyMode` — value+type
+- `BASE64_SHAPE` — value
+- `BudgetGroup` — value+type
+- `BudgetGroupMember` — value
+- `COMMAND_DECISIONS` — value
+- `CollabConfig` — value+type
+- `CollabEarlyStop` — value+type
+- `CollabFinalizerType` — value+type
+- `CollabPersistence` — value+type
+- `CollabTemplate` — type
+- `CollabTopology` — value+type
+- `CommandDecision` — value+type
+- `ConfigChange` — type
+- `DELIVER_DENYLIST` — value
+- `DOMAINS` — value
+- `DOMAIN_SCHEMAS` — value
+- `DomainConfig` — type
+- `DomainName` — type
+- `ENV_NAME` — value
+- `EffectiveConfig` — type
+- `EffectiveKey` — value+type
+- `EffectivePrompts` — value+type
+- `EffectivePromptsWire` — value+type
+- `EffectiveWire` — type
+- `EntitlementBudget` — value+type
+- `EntitlementConfig` — value+type
+- `EntitlementGroupBinding` — value+type
+- `EntitlementOverride` — value+type
+- `EntitlementRuntimeCaps` — value+type
+- `EntitlementSubject` — value+type
+- `EntitlementTier` — value+type
+- `ExecutionPolicy` — value+type
+- `ExecutionPublicKey` — value+type
+- `GIT_COMMIT_SHA` — value
+- `GovernanceConfig` — value+type
+- `HOSTS_ARRAY_MAX` — value
+- `HOST_NAME_MAX` — value
+- `HostEntry` — value+type
+- `HostProbes` — value+type
+- `HostStatus` — value+type
+- `HostsConfig` — value+type
+- `InfraCostRates` — value+type
+- `K8S_QUANTITY` — value
+- `LimitsConfig` — value+type
+- `MCP_CONTENT_ORIGINS` — value
+- `McpConfig` — value+type
+- `McpContentOrigin` — type
+- `McpServerSpec` — value+type
+- `McpTransport` — value+type
+- `ModelCost` — value
+- `ModelEntry` — value+type
+- `ModelRole` — value+type
+- `ModelTier` — value+type
+- `ModelsConfig` — value+type
+- `NON_SECRET_URL` — value
+- `NON_SECRET_URL_NO_MIGRATION` — value
+- `PARSE_TRANSPARENT_KEYS` — value
+- `PLUGIN_ORIGIN` — value
+- `PRIVATE_KEY_PEM_HEADER` — value
+- `PROBE_CPU_CORES_MAX` — value
+- `PROBE_MEM_BYTES_MAX` — value
+- `PROJECT_COLOR_REGEX` — value
+- `PROJECT_CONTEXT_ITEM_KINDS` — value
+- `PROJECT_ICON_REGEX` — value
+- `PROJECT_ID_REGEX` — value
+- `PROJECT_LIMITS` — value
+- `PROMPT_ARTIFACT_LIMITS` — value
+- `PROMPT_PACK_ID_PREFIX` — value
+- `PROMPT_SLOTS` — value
+- `ParseTransparentKey` — type
+- `ParseTransparentValidator` — type
+- `PluginSource` — value+type
+- `PluginSpec` — value+type
+- `PluginsConfig` — value+type
+- `PrincipalCapsWire` — value+type
+- `PrincipalOrgMemoryWire` — value+type
+- `ProjectContextItem` — value+type
+- `ProjectContextItemKind` — type
+- `ProjectRegistration` — value+type
+- `ProjectRegistrationPatch` — value+type
+- `ProjectsConfig` — value+type
+- `PromptArtifactSection` — value+type
+- `PromptBinding` — value+type
+- `PromptCatalogSnapshot` — value+type
+- `PromptEpochArtifactPayload` — value+type
+- `PromptPackId` — value
+- `PromptSlot` — value+type
+- `PromptTextDeclaration` — value+type
+- `PromptsConfig` — value+type
+- `PublishedPromptArtifactEnvelope` — value+type
+- `QuotedIssueParams` — type
+- `RBAC_AUDIT` — value
+- `RESERVED_WORKER_ENV` — value
+- `RETIRED_DOMAINS` — value
+- `RUNTIME_CAP_STRICT` — value
+- `RetiredDomainName` — type
+- `RoleTarget` — value+type
+- `RosterEntry` — value+type
+- `RostersConfig` — value+type
+- `SEALED_BOX_ALG` — value
+- `SECRETS_AUDIT` — value
+- `SECRET_LITERAL_RE` — value
+- `SESSION_MIRROR_ENGINE_URL` — value
+- `ScenarioAssignments` — value+type
+- `ScenarioConfig` — value+type
+- `ScenarioEntry` — value+type
+- `SealedApiKey` — value+type
+- `SessionMirrorPolicy` — value+type
+- `SettingSource` — value+type
+- `SkillManifestEntry` — type
+- `SkillSpec` — value+type
+- `SkillsConfig` — value+type
+- `SkillsManifest` — type
+- `SkillsManifestSchema` — value
+- `SystemEntry` — value+type
+- `SystemStatusEntry` — value+type
+- `SystemsConfig` — value+type
+- `TCP_PORT` — value
+- `TierBindings` — value+type
+- `TierGroup` — value+type
+- `TokenQuota` — value+type
+- `WORKER_NAME` — value
+- `WORKER_RESOURCE_PRESETS` — value
+- `WorkerCondition` — value+type
+- `WorkerLifecycle` — value+type
+- `WorkerResourcePreset` — type
+- `WorkerSpec` — value+type
+- `WorkerStatus` — value+type
+- `WorkersConfig` — value+type
+- `applyProjectPatch` — value
+- `containsSecretToken` — value
+- `extraBodyUnsafe` — value
+- `hasNul` — value
+- `isAbsoluteHostPath` — value
+- `isDomainName` — value
+- `isRetiredDomainName` — value
+- `renderQuotedSentence` — value
+- `retiredDomainSentence` — value
+- `urlQueryFragmentHasSecret` — value
+- `workerRouteKey` — value
+## `./hash`(6)
+- `MAX_EXTRA_BODY_DEPTH` — value
+- `MAX_HASH_DEPTH` — value
+- `MAX_HASH_WRAPPER_RESERVE` — value
+- `fnv1a64` — value
+- `stableHash` — value
+- `stableStringify` — value
+## `./sha256`(3)
+- `SHA256_DIGEST_RE` — value
+- `Sha256Digest` — value
+- `sha256Hex` — value
+## `./skills-manifest`(4)
+- `findSkillContent` — value
+- `normalizeContentHash` — value
+- `skillContentHash` — value
+- `toSkillsManifest` — value
+## `./secret-refs`(4)
+- `EnvRef` — type
+- `EnvRefUse` — type
+- `collectEnvRefs` — value
+- `workersReferencingSecret` — value
+## `./execution-lanes`(18)
+- `EXECUTION_LANES` — value
+- `EXECUTION_LANE_WORDS` — value
+- `ExecutionLane` — type
+- `ExecutionLaneRow` — type
+- `LaneTenancy` — type
+- `MEMORY_ENGINE_BACKENDS` — value
+- `MemoryEngineBackend` — type
+- `RETIRED_LANE_WORDS` — value
+- `RetiredLaneWord` — type
+- `SESSION_BACKENDS` — value
+- `STORE_BACKENDS` — value
+- `SessionBackend` — type
+- `StoreBackend` — type
+- `TENANT_SEPARATION_BASES` — value
+- `TENANT_SEPARATION_WORDS` — value
+- `TenantSeparation` — type
+- `TenantSeparationBasis` — type
+- `retiredLaneWordRefusal` — value
+## `./resolve-roster`(6)
+- `ROSTER_CHEAP_ROLES` — value
+- `ROSTER_PRIMARY_ROLES` — value
+- `ResolvedEffective` — type
+- `narrowAtMention` — value
+- `resolveEffectiveForWorker` — value
+- `rosterMarkerRoles` — value
+## `./config-fns`(54)
+- `ANY_INDEX` — value
+- `ApprovePublishResult` — type
+- `CasWriteResult` — type
+- `ConfigPath` — type
+- `DEFAULT_DOMAIN_WRITE_ROLE` — value
+- `DISCLOSABLE_IDENTITY_RE` — value
+- `DOMAIN_ENTRY_SALVAGE` — value
+- `DOMAIN_READ_FALLBACK` — value
+- `DOMAIN_WRITE_ROLE` — value
+- `DROPPED_ENTRY_REASON_CODES` — value
+- `DroppedEntry` — type
+- `DroppedEntryIdentity` — type
+- `DroppedEntryReasonCode` — type
+- `EXTENSION_NAMESPACES` — value
+- `EffectiveReadWarning` — type
+- `EntryKeptIndex` — type
+- `EntrySalvageResult` — type
+- `ExtensionNamespaceRule` — type
+- `PendingPublish` — type
+- `PublishedSnapshot` — type
+- `ROLE_RANK` — value
+- `RetiredDomainError` — value+type
+- `StoredDocumentReader` — type
+- `USER_ROLES` — value
+- `User` — type
+- `UserAuth` — type
+- `UserRole` — type
+- `WARNING_KINDS` — value
+- `WarningKind` — type
+- `WarningProjection` — type
+- `WorkerLifecycleRecord` — type
+- `buildEffective` — value
+- `domainWriteRole` — value
+- `emptyEffective` — value
+- `formatConfigPath` — value
+- `isDisclosableIdentity` — value
+- `isReportableRefusalName` — value
+- `isReservedExtensionKey` — value
+- `isRole` — value
+- `outgoingPath` — value
+- `parseDomain` — value
+- `parseDomainLoud` — value
+- `parseDomainSalvaged` — value
+- `projectWarning` — value
+- `readEffectiveWire` — value
+- `rebaseWarningPaths` — value
+- `redactSecrets` — value
+- `refuseRetiredDomain` — value
+- `resolveActiveTiers` — value
+- `roleAtLeast` — value
+- `salvageEntries` — value
+- `sanitizeZodError` — value
+- `statusRowsToPrune` — value
+- `withheldNameToken` — value
+## `./conformance`(70)
+- `CaseInput` — type
+- `CaseMeta` — type
+- `ConformanceAdapter` — type
+- `ConformanceCase` — type
+- `ConformanceLeg` — type
+- `ConformanceMode` — type
+- `ConformanceNormalizer` — type
+- `ConformanceOptions` — type
+- `ConformanceProvenance` — type
+- `ConformanceReport` — type
+- `ConformanceResult` — type
+- `ConformanceStatus` — type
+- `ContractAdapterOptions` — type
+- `ContractModule` — type
+- `Corpus` — type
+- `DEFAULT_CORPUS_DIR` — value
+- `DERIVATION_TRANSFORMS` — value
+- `DerivationTransform` — type
+- `DomainDocsInput` — type
+- `EPOCH_ISO` — value
+- `JsonPatchOp` — type
+- `KnownDivergence` — type
+- `LEDGER_REF_RULE` — value
+- `LEG_DECLINE_REASONS` — value
+- `LEG_EXPECTATION` — value
+- `LEG_NAMES` — value
+- `LedgerRow` — type
+- `LegDeclineReason` — type
+- `LegDeclined` — type
+- `LegEntry` — type
+- `LegExpectation` — type
+- `LegExpectationJson` — type
+- `LegInput` — type
+- `LegName` — type
+- `LegOutcome` — type
+- `LegStance` — type
+- `NON_PORTABLE_DOMAINS` — value
+- `OutcomeDivergence` — type
+- `PACKAGE_ROOT` — value
+- `PathDivergence` — type
+- `REF_INTEGRITY_REJECT_CODE` — value
+- `REJECT_STAGES` — value
+- `RefIssueCoordinate` — type
+- `RejectStage` — type
+- `WARNING_KINDS` — value
+- `WarningKind` — type
+- `WarningProjection` — type
+- `canonicalize` — value
+- `createContractAdapter` — value
+- `deepEqual` — value
+- `deriveLocalExpectation` — value
+- `deriveLocalInput` — value
+- `deriveWireExpectation` — value
+- `deriveWireInput` — value
+- `diffJson` — value
+- `diffWarningMultiset` — value
+- `findSecretLeaks` — value
+- `foreignKeysOf` — value
+- `kitIdentity` — value
+- `loadCase` — value
+- `loadCorpus` — value
+- `materializeLocalRoot` — value
+- `normalizeProjection` — value
+- `projectWarning` — value
+- `projectionKey` — value
+- `projectionValue` — value
+- `resolveLegExpectation` — value
+- `runConformance` — value
+- `stableKey` — value
+- `toManifestDoc` — value
+## `./reader`(1)
+- `ConfigReader` — type
+## `./cross-domain`(16)
+- `REF_CHECKED_DOMAINS` — value
+- `REF_ISSUE_KINDS` — value
+- `REF_ISSUE_TARGET_DOMAIN` — value
+- `REF_REFERRER_DOMAINS` — value
+- `RefCheckedDomain` — type
+- `RefDocs` — type
+- `RefIssue` — type
+- `RefIssueKind` — type
+- `RefReferrer` — type
+- `RefReferrerDomain` — type
+- `SiblingResolver` — type
+- `createSiblingResolver` — value
+- `danglingRefs` — value
+- `isRefCheckedDomain` — value
+- `refIntegrityIssues` — value
+- `renderRefIssue` — value
+## `./remote-exec`(2)
+- `REMOTE_EXEC_DOCUMENT` — value
+- `RemoteExecSpec` — value+type
+## `./safety-merge-spec`(18)
+- `FailMode` — value+type
+- `MemberAdmission` — value+type
+- `MemberDirection` — value+type
+- `MergeCategorySpec` — value+type
+- `MergeShape` — value+type
+- `MinTrust` — value+type
+- `ResolvedMemberAdmission` — type
+- `SAFETY_MERGE_SPEC` — value
+- `SafetyMergeCategory` — type
+- `SafetyMergeMember` — type
+- `SpecEnforcement` — value+type
+- `TightenRule` — value+type
+- `isAtLeast` — value
+- `memberAdmission` — value
+- `memberMinTrust` — value
+- `membersOf` — value
+- `resolveMemberAdmission` — value
+- `trustRank` — value
+## `./node`(38)
+- `ConfigBundle` — type
+- `ConfigDirectoryDocument` — type
+- `ConfigDirectoryIo` — type
+- `ConfigDirectoryMigration` — type
+- `ConfigDirectoryRefusal` — type
+- `DomainReadError` — type
+- `FileConfigStore` — value+type
+- `LocalConfig` — type
+- `MigrateConfigDirectoryOptions` — type
+- `NON_DOMAIN_CONFIG_FILES` — value
+- `NON_PORTABLE_DOMAIN_REASONS` — value
+- `PORTABLE_DOMAINS` — value
+- `PortableDomain` — type
+- `RequiredEnvName` — type
+- `SchedulerStoreMutation` — type
+- `TolerantEffective` — type
+- `ValidateResult` — type
+- `createFileSchedulerStore` — value
+- `domainFilePath` — value
+- `exportBundle` — value
+- `listRequiredEnvNames` — value
+- `loadEnvFile` — value
+- `loadLocalConfig` — value
+- `loadRemoteExec` — value
+- `loadSchedulerStore` — value
+- `migrateConfigDirectory` — value
+- `mutateSchedulerStore` — value
+- `nodeConfigDirectoryIo` — value
+- `promptsContentDigest` — value
+- `readBundle` — value
+- `remoteExecPath` — value
+- `saveSchedulerStore` — value
+- `sectionContentHash` — value
+- `validateDomain` — value
+- `validateRemoteExec` — value
+- `writeBundle` — value
+- `writeDomainFile` — value
+- `writeRemoteExec` — value
+## `./one-time-migrations`(18)
+- `DocumentCoverage` — type
+- `MIGRATION_APPLIED_AS` — value
+- `MigrationAppliedAs` — type
+- `MigrationDocument` — type
+- `MigrationPath` — type
+- `MigrationReceipt` — type
+- `ONE_TIME_MIGRATIONS` — value
+- `ONE_TIME_MIGRATION_IDS` — value
+- `OneTimeMigrationId` — type
+- `OneTimeMigrationWindow` — type
+- `StoredDocuments` — type
+- `StoredDocumentsMigration` — type
+- `WIRE_RETIREMENT_IDS` — value
+- `WireRetirementId` — type
+- `migrateEffectiveSnapshot` — value
+- `migrateSchedulerRecords` — value
+- `migrateStoredDocuments` — value
+- `urlSeatPatterns` — value
+## `./scheduler-store`(10)
+- `STALE_SESSION_RECORD_MS` — value
+- `SchedulerParseWarning` — type
+- `SchedulerReadOptions` — type
+- `SchedulerRecord` — type
+- `SchedulerStore` — type
+- `SchedulerStoreRead` — type
+- `SchedulerWhen` — type
+- `isSchedulerRecord` — value
+- `parseSchedulerStore` — value
+- `serializeSchedulerStore` — value
+## `./hooks`(94)
+- `AgentHookEntry` — value+type
+- `AssistantTurnError` — value+type
+- `AsyncHookOutput` — value+type
+- `BaseHookInput` — value+type
+- `CONFIG_CHANGE_SOURCES` — value
+- `CancelSource` — value+type
+- `CommandHookEntry` — value+type
+- `ConfigChangeHookInput` — value
+- `CwdChangedHookInput` — value
+- `DEFAULT_CANCEL_SOURCE` — value
+- `DEFAULT_HOOK_TIMEOUT_SECONDS` — value
+- `DIRECTORY_ADDED_SOURCES` — value
+- `DirectoryAddedHookInput` — value+type
+- `ENGINE_OWNED_HOOK_EVENTS` — value
+- `ElicitationHookInput` — value
+- `ElicitationResultHookInput` — value
+- `FileChangedHookInput` — value
+- `HOOKS_CLASSIFICATION_OUTCOMES` — value
+- `HOOKS_DROPPED_PIECE_CODES` — value
+- `HOOKS_REJECTION_CODES` — value
+- `HOOK_ENTRY_TYPES` — value
+- `HOOK_EVENTS` — value
+- `HOOK_EVENT_MATCHER_FIELD` — value
+- `HOOK_EVENT_OWNER` — value
+- `HOOK_INJECTED_ENV` — value
+- `HookDecision` — value+type
+- `HookEntry` — value+type
+- `HookEntryType` — type
+- `HookEnvBlank` — type
+- `HookEnvInterpolation` — type
+- `HookEventName` — value+type
+- `HookInput` — value+type
+- `HookMatcherEntry` — value+type
+- `HookMatcherForm` — type
+- `HookOutput` — value+type
+- `HookOwner` — value+type
+- `HookPermissionRequestDecision` — value+type
+- `HookSpecificOutput` — value+type
+- `HooksClassification` — type
+- `HooksClassificationOutcome` — type
+- `HooksConfig` — value+type
+- `HooksDroppedPiece` — type
+- `HooksDroppedPieceCode` — type
+- `HooksRejection` — type
+- `HooksRejectionCode` — type
+- `HooksSlotSemantics` — value+type
+- `HttpHookEntry` — value+type
+- `INSTRUCTIONS_LOAD_REASONS` — value
+- `INSTRUCTIONS_MEMORY_TYPES` — value
+- `InstructionsLoadedHookInput` — value
+- `MODEL_SWITCH_SOURCES` — value
+- `McpToolHookEntry` — value+type
+- `MessageDisplayHookInput` — value
+- `NotificationHookInput` — value
+- `PermissionBehavior` — value+type
+- `PermissionDeniedHookInput` — value
+- `PermissionMode` — value+type
+- `PermissionRequestHookInput` — value
+- `PermissionRuleValue` — value+type
+- `PermissionUpdate` — value+type
+- `PermissionUpdateDestination` — value+type
+- `PostCompactHookInput` — value
+- `PostModelSwitchHookInput` — value+type
+- `PostToolBatchHookInput` — value
+- `PostToolBatchToolCall` — value+type
+- `PostToolUseFailureHookInput` — value
+- `PostToolUseHookInput` — value
+- `PreCompactHookInput` — value
+- `PreModelSwitchHookInput` — value+type
+- `PreToolUseHookInput` — value
+- `PromptHookEntry` — value+type
+- `SESSION_EXIT_REASONS` — value
+- `SessionEndHookInput` — value
+- `SessionExitReason` — value+type
+- `SessionStartHookInput` — value
+- `SetupHookInput` — value
+- `StopFailureHookInput` — value
+- `StopHookInput` — value
+- `StoppedBy` — value+type
+- `SubagentStartHookInput` — value
+- `SubagentStopHookInput` — value
+- `SyncHookOutput` — value+type
+- `TaskCompletedHookInput` — value
+- `TaskCreatedHookInput` — value
+- `TeammateIdleHookInput` — value
+- `UserPromptExpansionHookInput` — value
+- `UserPromptSubmitHookInput` — value
+- `WorktreeCreateHookInput` — value
+- `WorktreeRemoveHookInput` — value
+- `classifyHooksConfig` — value
+- `hookMatcherForm` — value
+- `hookMatcherSelects` — value
+- `interpolateHookEnvVars` — value
+- `stopAttributionText` — value
+## `./fleet`(83)
+- `AggregatedPrincipalUsage` — type
+- `CapabilityReading` — type
+- `DEFAULT_DRAIN_GRACE_MS` — value
+- `DEFAULT_HEARTBEAT_MS` — value
+- `DISPATCH_STRATEGIES` — value
+- `DRAIN_ACTION_ID` — value
+- `DRAIN_GRACE_FLOOR_MS` — value
+- `DRAIN_PHASES` — value
+- `DRAIN_RECEIPT_STATES` — value
+- `DRAIN_RETRY_AFTER_SECONDS` — value
+- `DispatchCandidate` — type
+- `DispatchPolicy` — value+type
+- `DispatchStrategy` — type
+- `DrainPhase` — type
+- `DrainReceipt` — value+type
+- `DrainReceiptState` — value+type
+- `DrainRequest` — value+type
+- `DrainSnapshot` — type
+- `DrainVerdict` — type
+- `ENGINE_SIGNAL_KEY` — value
+- `EngineDraining` — value+type
+- `EngineSignal` — value+type
+- `FLEET_GENERATION_ENV` — value
+- `FLEET_LIVE_PATHS` — value
+- `FLEET_PATHS` — value
+- `FLEET_SCOPE_ENV` — value
+- `HEARTBEAT_REPLY_CAPABILITIES_KEY` — value
+- `InstanceAnnouncement` — value+type
+- `InstanceDeregistration` — value+type
+- `InstanceHealth` — value+type
+- `InstanceRegistration` — value+type
+- `LEASE_STATES` — value
+- `LeaseState` — value+type
+- `MODEL_ENTRY_REFUSAL_CODES` — value
+- `MODEL_PLANE_REFUSAL_CODES` — value
+- `ModelEntryRefusalCode` — value+type
+- `ModelPlaneRefusalCode` — value+type
+- `ModelRefusalsSignal` — type
+- `ModelRefusalsWire` — value+type
+- `NOT_ROUTABLE_CODES` — value
+- `NotRoutableCode` — type
+- `QuotaLease` — value+type
+- `QuotaResetEvent` — value+type
+- `RestartSignal` — value+type
+- `RoutingVerdict` — type
+- `SERVING_LEASE_DENIED_REASONS` — value
+- `SERVING_LEASE_DRIFT_MARGIN_MS` — value
+- `SERVING_LEASE_TTL_DEFAULT_MS` — value
+- `SERVING_LEASE_TTL_FLOOR_MS` — value
+- `SERVING_LEASE_UNKNOWN_REASON` — value
+- `SERVING_LEASE_VERDICTS` — value
+- `STALE_HEARTBEAT_MULTIPLIER` — value
+- `SUBMIT_IDEMPOTENCY_KEY` — value
+- `ServingLeaseDeniedReason` — value+type
+- `ServingLeaseReading` — type
+- `ServingLeaseRequest` — value+type
+- `ServingLeaseResponse` — value+type
+- `UsageEntry` — value+type
+- `UsageReport` — value+type
+- `WebAdminCapabilities` — value+type
+- `aggregateUsage` — value
+- `clampServingLeaseTtlMs` — value
+- `compareGeneration` — value
+- `drainVerdict` — value
+- `isCanonicalGeneration` — value
+- `isInstanceStale` — value
+- `isReadyForTraffic` — value
+- `isRoutable` — value
+- `judgeReadiness` — value
+- `judgeRoutability` — value
+- `leaseExhausted` — value
+- `leaseRemaining` — value
+- `pickInstance` — value
+- `readCapabilityReading` — value
+- `readDrainReceipt` — value
+- `readDrainRequest` — value
+- `readEngineSignal` — value
+- `readModelRefusals` — value
+- `readServingLeaseRequest` — value
+- `readServingLeaseResponse` — value
+- `reconcileLease` — value
+- `routableInstances` — value
+- `shouldRenewLease` — value
+## `./api/auth`(23)
+- `ACCESS_TOKEN_TTL_SECONDS` — value
+- `AUTH_V1_PATHS` — value
+- `DEVICE_AUTH_STATUSES` — value
+- `DEVICE_CODE_TTL_SECONDS` — value
+- `DEVICE_GRANT_TYPE` — value
+- `DEVICE_POLL_INTERVAL_SECONDS` — value
+- `DeviceApproveLookupResponse` — value+type
+- `DeviceApproveRequest` — value+type
+- `DeviceApproveResponse` — value+type
+- `DeviceAuthStatus` — type
+- `DeviceCodeRequest` — value+type
+- `DeviceCodeResponse` — value+type
+- `DeviceTokenRequest` — value+type
+- `LogoutRequest` — value+type
+- `LogoutResponse` — value+type
+- `OAUTH_ERROR_CODES` — value
+- `OAuthErrorCode` — type
+- `OAuthErrorResponse` — value+type
+- `REFRESH_TOKEN_TTL_SECONDS` — value
+- `TokenGrantResponse` — value+type
+- `TokenRefreshRequest` — value+type
+- `nextPollInterval` — value
+- `normalizeUserCode` — value
+## `./api/auth-bridge`(21)
+- `AUTH_BRIDGE_ALGS` — value
+- `AUTH_BRIDGE_ERROR_CODES` — value
+- `AuthBridgeAlg` — type
+- `AuthBridgeErrorCode` — type
+- `AuthBridgeResult` — type
+- `DEFAULT_CLOCK_SKEW_SEC` — value
+- `DEFAULT_JWKS_REFRESH_MIN_INTERVAL_SEC` — value
+- `DEFAULT_OFFLINE_GRACE_SEC` — value
+- `JwksCacheSnapshot` — type
+- `PRINCIPAL_MAX_LENGTH` — value
+- `VerifiedIdentity` — value+type
+- `VerifierConfig` — value+type
+- `VerifierConfigInput` — type
+- `WEB_ADMIN_JWKS_PATH` — value
+- `WebAdminJwk` — value+type
+- `WebAdminJwks` — value+type
+- `classifyTimeClaims` — value
+- `jwksWithinOfflineGrace` — value
+- `looksLikeJwt` — value
+- `shouldForceJwksRefresh` — value
+- `toVerifiedIdentity` — value
+## `./api/scopes`(30)
+- `GLOBAL_SCOPE` — value
+- `RESERVED_SCOPE_IDS` — value
+- `ResolvedTokenScope` — type
+- `SCOPES_V1_PATHS` — value
+- `SCOPE_CLAIM` — value
+- `SCOPE_ID_REGEX` — value
+- `SCOPE_SWITCH_TOKEN_TTL_SECONDS` — value
+- `Scope` — value+type
+- `ScopeCreateRequest` — value+type
+- `ScopeCreateResponse` — value+type
+- `ScopeId` — value+type
+- `ScopeListEntry` — value+type
+- `ScopeMember` — value+type
+- `ScopeMemberDeleteRequest` — value+type
+- `ScopeMemberDeleteResponse` — value+type
+- `ScopeMemberUpsertRequest` — value+type
+- `ScopeMemberUpsertResponse` — value+type
+- `ScopeMembershipInput` — type
+- `ScopeRole` — value+type
+- `ScopeSwitchRequest` — value+type
+- `ScopeSwitchResponse` — value+type
+- `ScopesListResponse` — value+type
+- `TOKEN_SCOPE_REFUSALS` — value
+- `TokenScopeRefusal` — type
+- `canSwitchScope` — value
+- `effectiveScopeRole` — value
+- `isReservedScopeId` — value
+- `readTokenScope` — value
+- `resolveTokenScope` — value
+- `scopeMembersPath` — value
+## `./api/pull-token`(6)
+- `ScopedTokenBinding` — type
+- `ScopedTokenFamily` — type
+- `WORKER_PULL_TOKEN` — value
+- `mintScopedToken` — value
+- `readScopedTokenBinding` — value
+- `verifyScopedToken` — value
+## `./api/feedback`(6)
+- `FEEDBACK_DESCRIPTION_MAX_CHARS` — value
+- `FEEDBACK_TRANSCRIPT_MAX_JSON_CHARS` — value
+- `FEEDBACK_V1_PATH` — value
+- `FeedbackListResponse` — value+type
+- `FeedbackSubmitRequest` — value+type
+- `FeedbackWire` — value+type