@yaklabs-ai/plugin-sdk 0.14.0 → 0.15.0

package/README.md

@@ -13,7 +13,7 @@ it under the name your plugin code actually imports:
 ```json
 {
   "dependencies": {
-    "@bonsai/plugin-sdk": "npm:@yaklabs-ai/plugin-sdk@^0.14.0"
+    "@bonsai/plugin-sdk": "npm:@yaklabs-ai/plugin-sdk@^0.15.0"
   }
 }
 ```
@@ -62,7 +62,7 @@ Every tool the entrypoint registers is declared in the manifest too:
   "description": "Greets people by name.",
   "version": "0.1.0",
   "namespace": "widgets",
-  "compatibility": { "sdk": "^0.14.0" },
+  "compatibility": { "sdk": "^0.15.0" },
   "targets": {
     "kay": {
       "agent": {

package/THIRD-PARTY-INVENTORY.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "package": "@yaklabs-ai/plugin-sdk",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "target": "npm",
   "firstPartyLicense": "MIT",
   "bundled": [

package/dist/disclosure.d.ts

@@ -86,6 +86,8 @@ declare interface AgentToolResult<T = JsonValue_3 | undefined> {
      * error, but `details` and `structuredContent` are kept for the UI and programmatic callers.
      */
     isError?: boolean;
+    /** Classification for an `isError` result; the host validates it and stamps identity and attribution. */
+    failure?: ToolCallFailure;
     /**
      * Hint that the agent should stop after the current tool batch.
      * Early termination only happens when every finalized tool result in the batch sets this to true.
@@ -261,6 +263,12 @@ declare interface BackgroundTaskAdoptOptions {
     readonly ownerId?: string;
     readonly inspect?: BackgroundTaskInspector;
     readonly meta?: Readonly<Record<string, unknown>>;
+    /**
+     * The task's owner waits for its result: the work was meant to finish and report back (a build,
+     * a test run). Absent or false: nothing waits on it (a dev server, a watcher). The kernel only
+     * carries this fact on the task's snapshot; what waiting means is the host's to decide.
+     */
+    readonly awaitsResult?: boolean;
     /** Scoped settlement hook for the task created by this adoption only. */
     readonly onSettled?: (completion: BackgroundTaskCompletion) => void;
 }
@@ -310,6 +318,8 @@ declare interface BackgroundTaskSnapshot {
     readonly startedAtMs: number;
     readonly updatedAtMs: number;
     readonly meta?: Readonly<Record<string, unknown>>;
+    /** The owner waits for this task's result; see `BackgroundTaskAdoptOptions.awaitsResult`. */
+    readonly awaitsResult?: boolean;
 }
 
 declare type BackgroundTaskStatus = "queued" | "running" | "completed" | "failed" | "cancelled";
@@ -635,7 +645,7 @@ declare interface DecideChoiceQuestion<L extends string = string> {
 /** What a question asks: text, or a JSON object the client sends as its JSON text. */
 declare type DecideInstructions = string | object;
 
-declare type DecideModelId = "jev" | "clef" | "clef-flash";
+declare type DecideModelId = "jev" | "clef" | "clef-flash" | "gpt-6-luna";
 
 declare type DecideQuestion = DecideBoolQuestion | DecideChoiceQuestion | DecideScoreQuestion;
 
@@ -643,10 +653,10 @@ declare type DecideQuestion = DecideBoolQuestion | DecideChoiceQuestion | Decide
 declare type DecideQuestions = Readonly<Record<string, DecideQuestion>>;
 
 declare interface DecideRequest<Q extends DecideQuestions = DecideQuestions> {
-    /** Defaults to `jev`. */
-    readonly model?: DecideModelId;
+    readonly model: DecideModelId;
     readonly state: DecideState;
     readonly questions: Q;
+    readonly image?: SystemOneImage;
 }
 
 declare interface DecideScoreAnswer {
@@ -1003,7 +1013,10 @@ declare interface ExtensionAuthContext {
 
 /** Optional extension-facing APIs for background task orchestration. */
 declare interface ExtensionBackgroundTasksApi {
-    adopt(taskKind: BackgroundTaskKind, label: string, run: BackgroundTaskRun, options?: BackgroundTaskAdoptOptions): string;
+    adopt(taskKind: BackgroundTaskKind, label: string, run: BackgroundTaskRun, options?: BackgroundTaskAdoptOptions & {
+        readonly awaitsResult?: false;
+    }): string;
+    adopt(taskKind: BackgroundTaskKind, label: string, run: BackgroundTaskRun, options: BackgroundTaskAdoptOptions): string | Promise<string>;
     list(): readonly BackgroundTaskSnapshot[];
     get(taskId: string): BackgroundTaskSnapshot | undefined;
 }
@@ -1716,8 +1729,8 @@ declare type KayAgentActivate = (api: KayAgentPluginApi) => void;
  */
 declare interface KayAgentEvents {
     /**
-     * Publish one event the plugin declares in its `kay.app` `eventDefinitions`, with a payload that
-     * matches that definition's `payloadSchema`.
+     * Publish one event the plugin declares in its `kay.app` `eventDefinitions`, with its resource URI and optional
+     * payload matching that definition's `payloadSchema` when declared.
      *
      * The host stamps the publisher (this plugin) and the session this activation belongs to; the
      * plugin names neither. Fire-and-forget: it returns nothing and never throws. A publish the host
@@ -1725,7 +1738,7 @@ declare interface KayAgentEvents {
      * is reported to the host's diagnostics and dropped, so the work that raised the event never
      * fails because the event did not go out.
      */
-    publish(localId: string, payload: unknown): void;
+    publish(localId: string, input: PluginEventPublishInput): void;
 }
 
 /** This plugin's folder in the session family's shared Whiteboard. */
@@ -3353,6 +3366,20 @@ declare interface PluginDelegatedServiceEntry {
 /** One rule id from {@link PLUGIN_DISCLOSURE_RULES}. */
 export declare type PluginDisclosureRule = (typeof PLUGIN_DISCLOSURE_RULES)[number];
 
+declare const PluginEventPublishInput: z.ZodObject<{
+    uri: z.ZodString;
+    related: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>>;
+    key: z.ZodOptional<z.ZodString>;
+    occurredAt: z.ZodOptional<z.ZodISODateTime>;
+    source: z.ZodOptional<z.ZodObject<{
+        poller: z.ZodOptional<z.ZodString>;
+        runId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    payload: z.ZodOptional<z.ZodType<JsonValue_2, unknown, z.core.$ZodTypeInternals<JsonValue_2, unknown>>>;
+}, z.core.$strict>;
+
+declare type PluginEventPublishInput = z.infer<typeof PluginEventPublishInput>;
+
 /**
  * An external-CLI readiness scheme the plugin declares: a non-injectable marker for a
  * host-probed local binary (e.g. `osascript`, `gh`). Connecting runs `binary probeArgs`
@@ -4485,7 +4512,7 @@ declare interface SystemOneClient {
     decide<const Q extends DecideQuestions>(request: DecideRequest<Q>, options?: SystemOneCallOptions): Promise<Decision<Q>>;
     extract<const F extends ExtractFields>(request: ExtractRequest<F>, options?: SystemOneCallOptions): Promise<Extraction<F>>;
     /** Whether some provider in the current order can serve `(kind, model)`. Never rejects. */
-    availability(kind: SystemOneKind, model?: SystemOneModelId): Promise<Availability>;
+    availability(kind: SystemOneKind, model: SystemOneModelId): Promise<Availability>;
 }
 
 /**
@@ -4520,6 +4547,12 @@ declare type SystemOneFailureCause = {
     readonly kind: "invalid-answer";
 };
 
+/** One PNG attachment. `data` is padded base64, without a data-URL prefix. */
+declare interface SystemOneImage {
+    readonly mimeType: "image/png";
+    readonly data: string;
+}
+
 /**
  * ---
  * responsibility: The data shapes of the System One surface: models, the decide and extract
@@ -6683,6 +6716,14 @@ declare type TOmitDeferred<Type extends TSchema, Indexer extends TSchema> = (TDe
 
 declare type TOmitInstantiate<Context extends TProperties, State extends TState, Type extends TSchema, Indexer extends TSchema, InstantiatedType extends TSchema = TInstantiateType<Context, State, Type>, InstantiatedIndexer extends TSchema = TInstantiateType<Context, State, Indexer>> = TOmitAction<InstantiatedType, InstantiatedIndexer>;
 
+/**
+ * The closed vocabulary of tool call failure codes. The engine and the tools
+ * mint only these; a returned failure with a code outside it is not a
+ * classification (the engine records the rejection on an unexplained failure),
+ * and a stored record with one reads as none.
+ */
+declare const TOOL_CALL_FAILURE_CODES: readonly ["tool.invalid_input", "tool.blocked", "tool.cancelled", "tool.timeout", "tool.not_found", "tool.unavailable", "tool.execution_failed", "provider.http", "provider.api", "provider.transport", "uri.not_found", "uri.unsupported_operation", "uri.not_connected", "uri.auth_unavailable", "permission.denied", "edit.empty_edits", "edit.text_not_found", "edit.text_not_unique", "edit.empty_old_text", "edit.overlapping_edits", "edit.no_change"];
+
 /**
  * ---
  * responsibility: The declarative permission classification a tool carries on its definition
@@ -6712,6 +6753,56 @@ declare interface ToolAvailability {
     description: string;
 }
 
+/**
+ * The lane's classification of why one tool invocation failed: a searchable
+ * machine code and the cause the tool or engine classified at execution.
+ */
+declare interface ToolCallFailure extends ToolCallFailureCause {
+    readonly code: ToolCallFailureCode;
+}
+
+declare type ToolCallFailureCause = z.infer<typeof toolCallFailureCauseSchema>;
+
+declare const toolCallFailureCauseSchema: z.ZodObject<{
+    category: z.ZodEnum<{
+        cancelled: "cancelled";
+        timeout: "timeout";
+        unknown: "unknown";
+        provider: "provider";
+        "invalid-input": "invalid-input";
+        "not-connected": "not-connected";
+        "unsupported-operation": "unsupported-operation";
+        "not-found": "not-found";
+        permission: "permission";
+        unavailable: "unavailable";
+    }>;
+    retryable: z.ZodBoolean;
+    action: z.ZodEnum<{
+        unknown: "unknown";
+        none: "none";
+        retry: "retry";
+        "correct-input": "correct-input";
+        connect: "connect";
+    }>;
+    details: z.ZodOptional<z.ZodObject<{
+        moduleId: z.ZodOptional<z.ZodString>;
+        toolOwnerId: z.ZodOptional<z.ZodString>;
+        operation: z.ZodOptional<z.ZodString>;
+        uri: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+        validationField: z.ZodOptional<z.ZodString>;
+        errorName: z.ZodOptional<z.ZodString>;
+        errorCode: z.ZodOptional<z.ZodString>;
+        providerCode: z.ZodOptional<z.ZodString>;
+        status: z.ZodOptional<z.ZodNumber>;
+        editIndex: z.ZodOptional<z.ZodNumber>;
+        occurrences: z.ZodOptional<z.ZodNumber>;
+        retryAfterMs: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+
+declare type ToolCallFailureCode = (typeof TOOL_CALL_FAILURE_CODES)[number];
+
 /**
  * The neutral around-execution hook: return `next()`'s result (possibly transformed) to run the
  * real tool, or return a result without calling `next()` to substitute one — the tool then never

package/dist/disclosure.js

@@ -763,20 +763,6 @@ function describe(init) {
   return `System One ${init.kind} on ${init.model}${where} failed: ${init.cause.kind}${detail}.`;
 }
 
-// packages/system-one/dist/models.js
-var DEFAULT_DECIDE_MODEL = "jev";
-var SYSTEM_ONE_LIMITS = {
-  /** The serialized request body, in bytes. */
-  maxBodyBytes: 64 * 1024,
-  maxQuestions: 64,
-  maxFields: 32,
-  minChoiceOptions: 2,
-  maxChoiceOptions: 255,
-  minScoreLevels: 2,
-  maxScoreLevels: 10,
-  maxForecastHorizon: 64
-};
-
 // packages/system-one/dist/unavailable.js
 var NOT_SERVED = {
   available: false,
@@ -788,7 +774,7 @@ function createUnavailableSystemOneClient() {
     decide(request) {
       return Promise.reject(new SystemOneError({
         kind: "decide",
-        model: request.model ?? DEFAULT_DECIDE_MODEL,
+        model: request.model,
         cause: { kind: "not-served" }
       }));
     },
@@ -803,6 +789,22 @@ function createUnavailableSystemOneClient() {
   };
 }
 
+// packages/system-one/dist/models.js
+var SYSTEM_ONE_LIMITS = {
+  /** The serialized state and questions, in bytes; images have a separate budget. */
+  maxBodyBytes: 64 * 1024,
+  maxImageBytes: 4 * 1024 * 1024,
+  maxImagePixels: 16e6,
+  maxImageBodyBytes: 6 * 1024 * 1024,
+  maxQuestions: 64,
+  maxFields: 32,
+  minChoiceOptions: 2,
+  maxChoiceOptions: 255,
+  minScoreLevels: 2,
+  maxScoreLevels: 10,
+  maxForecastHorizon: 64
+};
+
 // packages/plugin-sdk/dist/disclosure/probe-kay-agent-capabilities.js
 var inertResult = () => new Promise(() => {
 });

package/dist/kay-agent-testing.d.ts

@@ -86,6 +86,8 @@ declare interface AgentToolResult<T = JsonValue_3 | undefined> {
      * error, but `details` and `structuredContent` are kept for the UI and programmatic callers.
      */
     isError?: boolean;
+    /** Classification for an `isError` result; the host validates it and stamps identity and attribution. */
+    failure?: ToolCallFailure;
     /**
      * Hint that the agent should stop after the current tool batch.
      * Early termination only happens when every finalized tool result in the batch sets this to true.
@@ -215,6 +217,12 @@ declare interface BackgroundTaskAdoptOptions {
     readonly ownerId?: string;
     readonly inspect?: BackgroundTaskInspector;
     readonly meta?: Readonly<Record<string, unknown>>;
+    /**
+     * The task's owner waits for its result: the work was meant to finish and report back (a build,
+     * a test run). Absent or false: nothing waits on it (a dev server, a watcher). The kernel only
+     * carries this fact on the task's snapshot; what waiting means is the host's to decide.
+     */
+    readonly awaitsResult?: boolean;
     /** Scoped settlement hook for the task created by this adoption only. */
     readonly onSettled?: (completion: BackgroundTaskCompletion) => void;
 }
@@ -264,6 +272,8 @@ declare interface BackgroundTaskSnapshot {
     readonly startedAtMs: number;
     readonly updatedAtMs: number;
     readonly meta?: Readonly<Record<string, unknown>>;
+    /** The owner waits for this task's result; see `BackgroundTaskAdoptOptions.awaitsResult`. */
+    readonly awaitsResult?: boolean;
 }
 
 declare type BackgroundTaskStatus = "queued" | "running" | "completed" | "failed" | "cancelled";
@@ -546,7 +556,7 @@ declare interface DecideChoiceQuestion<L extends string = string> {
 /** What a question asks: text, or a JSON object the client sends as its JSON text. */
 declare type DecideInstructions = string | object;
 
-declare type DecideModelId = "jev" | "clef" | "clef-flash";
+declare type DecideModelId = "jev" | "clef" | "clef-flash" | "gpt-6-luna";
 
 declare type DecideQuestion = DecideBoolQuestion | DecideChoiceQuestion | DecideScoreQuestion;
 
@@ -554,10 +564,10 @@ declare type DecideQuestion = DecideBoolQuestion | DecideChoiceQuestion | Decide
 declare type DecideQuestions = Readonly<Record<string, DecideQuestion>>;
 
 declare interface DecideRequest<Q extends DecideQuestions = DecideQuestions> {
-    /** Defaults to `jev`. */
-    readonly model?: DecideModelId;
+    readonly model: DecideModelId;
     readonly state: DecideState;
     readonly questions: Q;
+    readonly image?: SystemOneImage;
 }
 
 declare interface DecideScoreAnswer {
@@ -886,7 +896,10 @@ declare interface ExtensionAuthContext {
 
 /** Optional extension-facing APIs for background task orchestration. */
 declare interface ExtensionBackgroundTasksApi {
-    adopt(taskKind: BackgroundTaskKind, label: string, run: BackgroundTaskRun, options?: BackgroundTaskAdoptOptions): string;
+    adopt(taskKind: BackgroundTaskKind, label: string, run: BackgroundTaskRun, options?: BackgroundTaskAdoptOptions & {
+        readonly awaitsResult?: false;
+    }): string;
+    adopt(taskKind: BackgroundTaskKind, label: string, run: BackgroundTaskRun, options: BackgroundTaskAdoptOptions): string | Promise<string>;
     list(): readonly BackgroundTaskSnapshot[];
     get(taskId: string): BackgroundTaskSnapshot | undefined;
 }
@@ -1630,8 +1643,8 @@ declare type JsonValue_3 = null | boolean | number | string | JsonValue_3[] | {
  */
 declare interface KayAgentEvents {
     /**
-     * Publish one event the plugin declares in its `kay.app` `eventDefinitions`, with a payload that
-     * matches that definition's `payloadSchema`.
+     * Publish one event the plugin declares in its `kay.app` `eventDefinitions`, with its resource URI and optional
+     * payload matching that definition's `payloadSchema` when declared.
      *
      * The host stamps the publisher (this plugin) and the session this activation belongs to; the
      * plugin names neither. Fire-and-forget: it returns nothing and never throws. A publish the host
@@ -1639,7 +1652,7 @@ declare interface KayAgentEvents {
      * is reported to the host's diagnostics and dropped, so the work that raised the event never
      * fails because the event did not go out.
      */
-    publish(localId: string, payload: unknown): void;
+    publish(localId: string, input: PluginEventPublishInput): void;
 }
 
 /** This plugin's folder in the session family's shared Whiteboard. */
@@ -3231,6 +3244,20 @@ declare interface PluginDelegatedServiceEntry {
     readonly scheme: PluginDelegatedScheme;
 }
 
+declare const PluginEventPublishInput: z.ZodObject<{
+    uri: z.ZodString;
+    related: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>>;
+    key: z.ZodOptional<z.ZodString>;
+    occurredAt: z.ZodOptional<z.ZodISODateTime>;
+    source: z.ZodOptional<z.ZodObject<{
+        poller: z.ZodOptional<z.ZodString>;
+        runId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    payload: z.ZodOptional<z.ZodType<JsonValue_2, unknown, z.core.$ZodTypeInternals<JsonValue_2, unknown>>>;
+}, z.core.$strict>;
+
+declare type PluginEventPublishInput = z.infer<typeof PluginEventPublishInput>;
+
 /**
  * An external-CLI readiness scheme the plugin declares: a non-injectable marker for a
  * host-probed local binary (e.g. `osascript`, `gh`). Connecting runs `binary probeArgs`
@@ -4396,7 +4423,7 @@ declare interface SystemOneClient {
     decide<const Q extends DecideQuestions>(request: DecideRequest<Q>, options?: SystemOneCallOptions): Promise<Decision<Q>>;
     extract<const F extends ExtractFields>(request: ExtractRequest<F>, options?: SystemOneCallOptions): Promise<Extraction<F>>;
     /** Whether some provider in the current order can serve `(kind, model)`. Never rejects. */
-    availability(kind: SystemOneKind, model?: SystemOneModelId): Promise<Availability>;
+    availability(kind: SystemOneKind, model: SystemOneModelId): Promise<Availability>;
 }
 
 /**
@@ -4431,6 +4458,12 @@ declare type SystemOneFailureCause = {
     readonly kind: "invalid-answer";
 };
 
+/** One PNG attachment. `data` is padded base64, without a data-URL prefix. */
+declare interface SystemOneImage {
+    readonly mimeType: "image/png";
+    readonly data: string;
+}
+
 /**
  * ---
  * responsibility: The data shapes of the System One surface: models, the decide and extract
@@ -6606,6 +6639,14 @@ declare type TOmitDeferred<Type extends TSchema, Indexer extends TSchema> = (TDe
 
 declare type TOmitInstantiate<Context extends TProperties, State extends TState, Type extends TSchema, Indexer extends TSchema, InstantiatedType extends TSchema = TInstantiateType<Context, State, Type>, InstantiatedIndexer extends TSchema = TInstantiateType<Context, State, Indexer>> = TOmitAction<InstantiatedType, InstantiatedIndexer>;
 
+/**
+ * The closed vocabulary of tool call failure codes. The engine and the tools
+ * mint only these; a returned failure with a code outside it is not a
+ * classification (the engine records the rejection on an unexplained failure),
+ * and a stored record with one reads as none.
+ */
+declare const TOOL_CALL_FAILURE_CODES: readonly ["tool.invalid_input", "tool.blocked", "tool.cancelled", "tool.timeout", "tool.not_found", "tool.unavailable", "tool.execution_failed", "provider.http", "provider.api", "provider.transport", "uri.not_found", "uri.unsupported_operation", "uri.not_connected", "uri.auth_unavailable", "permission.denied", "edit.empty_edits", "edit.text_not_found", "edit.text_not_unique", "edit.empty_old_text", "edit.overlapping_edits", "edit.no_change"];
+
 /**
  * ---
  * responsibility: The declarative permission classification a tool carries on its definition
@@ -6635,6 +6676,56 @@ declare interface ToolAvailability {
     description: string;
 }
 
+/**
+ * The lane's classification of why one tool invocation failed: a searchable
+ * machine code and the cause the tool or engine classified at execution.
+ */
+declare interface ToolCallFailure extends ToolCallFailureCause {
+    readonly code: ToolCallFailureCode;
+}
+
+declare type ToolCallFailureCause = z.infer<typeof toolCallFailureCauseSchema>;
+
+declare const toolCallFailureCauseSchema: z.ZodObject<{
+    category: z.ZodEnum<{
+        cancelled: "cancelled";
+        timeout: "timeout";
+        unknown: "unknown";
+        provider: "provider";
+        "invalid-input": "invalid-input";
+        "not-connected": "not-connected";
+        "unsupported-operation": "unsupported-operation";
+        "not-found": "not-found";
+        permission: "permission";
+        unavailable: "unavailable";
+    }>;
+    retryable: z.ZodBoolean;
+    action: z.ZodEnum<{
+        unknown: "unknown";
+        none: "none";
+        retry: "retry";
+        "correct-input": "correct-input";
+        connect: "connect";
+    }>;
+    details: z.ZodOptional<z.ZodObject<{
+        moduleId: z.ZodOptional<z.ZodString>;
+        toolOwnerId: z.ZodOptional<z.ZodString>;
+        operation: z.ZodOptional<z.ZodString>;
+        uri: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+        validationField: z.ZodOptional<z.ZodString>;
+        errorName: z.ZodOptional<z.ZodString>;
+        errorCode: z.ZodOptional<z.ZodString>;
+        providerCode: z.ZodOptional<z.ZodString>;
+        status: z.ZodOptional<z.ZodNumber>;
+        editIndex: z.ZodOptional<z.ZodNumber>;
+        occurrences: z.ZodOptional<z.ZodNumber>;
+        retryAfterMs: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+
+declare type ToolCallFailureCode = (typeof TOOL_CALL_FAILURE_CODES)[number];
+
 /**
  * The neutral around-execution hook: return `next()`'s result (possibly transformed) to run the
  * real tool, or return a result without calling `next()` to substitute one — the tool then never

package/dist/kay-agent-testing.js

@@ -56,20 +56,6 @@ function describe(init) {
   return `System One ${init.kind} on ${init.model}${where} failed: ${init.cause.kind}${detail}.`;
 }
 
-// packages/system-one/dist/models.js
-var DEFAULT_DECIDE_MODEL = "jev";
-var SYSTEM_ONE_LIMITS = {
-  /** The serialized request body, in bytes. */
-  maxBodyBytes: 64 * 1024,
-  maxQuestions: 64,
-  maxFields: 32,
-  minChoiceOptions: 2,
-  maxChoiceOptions: 255,
-  minScoreLevels: 2,
-  maxScoreLevels: 10,
-  maxForecastHorizon: 64
-};
-
 // packages/system-one/dist/unavailable.js
 var NOT_SERVED = {
   available: false,
@@ -81,7 +67,7 @@ function createUnavailableSystemOneClient() {
     decide(request) {
       return Promise.reject(new SystemOneError({
         kind: "decide",
-        model: request.model ?? DEFAULT_DECIDE_MODEL,
+        model: request.model,
         cause: { kind: "not-served" }
       }));
     },
@@ -96,6 +82,22 @@ function createUnavailableSystemOneClient() {
   };
 }
 
+// packages/system-one/dist/models.js
+var SYSTEM_ONE_LIMITS = {
+  /** The serialized state and questions, in bytes; images have a separate budget. */
+  maxBodyBytes: 64 * 1024,
+  maxImageBytes: 4 * 1024 * 1024,
+  maxImagePixels: 16e6,
+  maxImageBodyBytes: 6 * 1024 * 1024,
+  maxQuestions: 64,
+  maxFields: 32,
+  minChoiceOptions: 2,
+  maxChoiceOptions: 255,
+  minScoreLevels: 2,
+  maxScoreLevels: 10,
+  maxForecastHorizon: 64
+};
+
 // packages/plugin-primitives/dist/is-object.js
 function isObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);