@abot-ai/runtime 1.5.0 → 1.7.0

package/plugins/system-probe/source/index.ts

@@ -27,10 +27,15 @@ function filesystemErrorCode(error: unknown): string | undefined {
 
 export default defineRuntimePlugin((context) => ({
   handlers: {
-    async system_probe(params) {
+    async system_probe(params, executionContext = undefined) {
       const explicitPath = readOptionalString(params.path);
+      const pathContext = {
+        ...context,
+        runtimePathResolver:
+          executionContext?.runtimePathResolver ?? context.runtimePathResolver,
+      };
       try {
-        const target = resolvePluginPath(context, explicitPath ?? "/", {
+        const target = resolvePluginPath(pathContext, explicitPath ?? "/", {
           requirePath: true,
           allowedLocations: ALLOWED_PATH_LOCATIONS,
         });

package/plugins/system-probe/src/index.cjs

@@ -96,8 +96,28 @@ function defineRuntimePlugin(definition) {
   return definition;
 }
 
+// src/capabilities/tool-context-text.ts
+function hasValidToolContextText(carrier) {
+  const fields = carrier.contextTextFields;
+  if (fields === void 0) return true;
+  if (!Array.isArray(fields) || fields.length === 0 || fields.length > 3)
+    return false;
+  if (new Set(fields).size !== fields.length) return false;
+  for (const field of fields) {
+    if (!isContextTextField(field)) return false;
+    if (typeof carrier[field] !== "string") return false;
+  }
+  return true;
+}
+function isContextTextField(value) {
+  return value === "output" || value === "stdout" || value === "stderr";
+}
+
+// src/capabilities/result-budget.ts
+var CAPABILITY_RESULT_ENVELOPE_MAX_BYTES = 256 * 1024;
+
 // src/plugin-sdk/results.ts
-var PLUGIN_RESULT_SERIALIZED_MAX_BYTES = 128 * 1024;
+var PLUGIN_RESULT_SERIALIZED_MAX_BYTES = CAPABILITY_RESULT_ENVELOPE_MAX_BYTES;
 function resultBoundsFailure(code, message) {
   return {
     ok: false,
@@ -107,9 +127,27 @@ function resultBoundsFailure(code, message) {
     errorCode: code
   };
 }
-function enforcePluginResultByteBudget(result) {
-  let serialized;
+function enforcePluginResultByteBudget(result, resultBudget) {
+  let requiresContextTextHost = false;
+  let serializedBytes;
+  let envelopeBytes;
+  let maxBytes = PLUGIN_RESULT_SERIALIZED_MAX_BYTES;
+  let fitsDeclaredBudget = true;
   try {
+    if (!hasValidToolContextText(result)) {
+      return resultBoundsFailure(
+        "plugin_context_text_invalid",
+        "The plugin declared invalid context text fields."
+      );
+    }
+    requiresContextTextHost = result.contextTextFields !== void 0;
+    const lacksContextTextHost = requiresContextTextHost && resultBudget?.acceptsContextText !== true;
+    if (lacksContextTextHost) {
+      return resultBoundsFailure(
+        "plugin_context_text_unavailable",
+        "The host does not support context-managed tool text."
+      );
+    }
     const candidate = JSON.stringify(result);
     if (candidate === void 0) {
       return resultBoundsFailure(
@@ -117,50 +155,60 @@ function enforcePluginResultByteBudget(result) {
         "The plugin produced a result that is not JSON-safe."
       );
     }
-    serialized = candidate;
+    const assessment = resultBudget?.assess(result);
+    serializedBytes = assessment?.serializedBytes ?? Buffer.byteLength(candidate, "utf8");
+    envelopeBytes = assessment?.envelopeBytes ?? serializedBytes;
+    maxBytes = Math.min(assessment?.maxBytes ?? maxBytes, maxBytes);
+    fitsDeclaredBudget = assessment?.fits ?? true;
   } catch {
     return resultBoundsFailure(
       "plugin_result_not_json_safe",
       "The plugin produced a result that is not JSON-safe."
     );
   }
-  if (Buffer.byteLength(serialized, "utf8") > PLUGIN_RESULT_SERIALIZED_MAX_BYTES) {
-    return resultBoundsFailure(
-      "plugin_result_too_large",
-      `The plugin result exceeds the ${PLUGIN_RESULT_SERIALIZED_MAX_BYTES}-byte safety limit.`
-    );
+  const hasResultDeliveryHeadroom = fitsDeclaredBudget && envelopeBytes <= maxBytes;
+  if (!hasResultDeliveryHeadroom) {
+    const message = requiresContextTextHost ? `The plugin result envelope is ${envelopeBytes} bytes (${serializedBytes} total bytes) and exceeds the ${maxBytes}-byte delivery limit.` : `The plugin result is ${serializedBytes} bytes and exceeds the ${maxBytes}-byte delivery limit.`;
+    return resultBoundsFailure("plugin_result_too_large", message);
   }
   return result;
 }
-function successResult(input) {
-  return enforcePluginResultByteBudget({
-    ok: true,
-    ...input.media !== void 0 ? { media: input.media } : {},
-    output: input.output,
-    producedNewInformation: input.producedNewInformation ?? true,
-    ...input.progress !== void 0 ? { progress: input.progress } : {},
-    ...input.actions !== void 0 ? { actions: input.actions } : {},
-    ...input.exitCode !== void 0 ? { exitCode: input.exitCode } : {},
-    ...input.stdout !== void 0 ? { stdout: input.stdout } : {},
-    ...input.stderr !== void 0 ? { stderr: input.stderr } : {},
-    ...input.data !== void 0 ? { data: input.data } : {}
-  });
+function successResult(input, resultBudget) {
+  return enforcePluginResultByteBudget(
+    {
+      ok: true,
+      ...input.media !== void 0 ? { media: input.media } : {},
+      output: input.output,
+      producedNewInformation: input.producedNewInformation ?? true,
+      ...input.progress !== void 0 ? { progress: input.progress } : {},
+      ...input.actions !== void 0 ? { actions: input.actions } : {},
+      ...input.exitCode !== void 0 ? { exitCode: input.exitCode } : {},
+      ...input.stdout !== void 0 ? { stdout: input.stdout } : {},
+      ...input.stderr !== void 0 ? { stderr: input.stderr } : {},
+      ...input.data !== void 0 ? { data: input.data } : {}
+    },
+    resultBudget
+  );
 }
-function failureResult(input) {
-  return enforcePluginResultByteBudget({
-    ok: false,
-    ...input.media !== void 0 ? { media: input.media } : {},
-    output: input.output ?? input.message,
-    producedNewInformation: false,
-    ...input.progress !== void 0 ? { progress: input.progress } : {},
-    ...input.actions !== void 0 ? { actions: input.actions } : {},
-    ...input.exitCode !== void 0 ? { exitCode: input.exitCode } : {},
-    ...input.stdout !== void 0 ? { stdout: input.stdout } : {},
-    ...input.stderr !== void 0 ? { stderr: input.stderr } : {},
-    ...input.data !== void 0 ? { data: input.data } : {},
-    error: input.message,
-    errorCode: input.errorCode
-  });
+function failureResult(input, resultBudget) {
+  return enforcePluginResultByteBudget(
+    {
+      ok: false,
+      ...input.interruption ? { interruption: input.interruption } : {},
+      ...input.media !== void 0 ? { media: input.media } : {},
+      output: input.output ?? input.message,
+      producedNewInformation: false,
+      ...input.progress !== void 0 ? { progress: input.progress } : {},
+      ...input.actions !== void 0 ? { actions: input.actions } : {},
+      ...input.exitCode !== void 0 ? { exitCode: input.exitCode } : {},
+      ...input.stdout !== void 0 ? { stdout: input.stdout } : {},
+      ...input.stderr !== void 0 ? { stderr: input.stderr } : {},
+      ...input.data !== void 0 ? { data: input.data } : {},
+      error: input.message,
+      errorCode: input.errorCode
+    },
+    resultBudget
+  );
 }
 function failureFromError(error, options) {
   const pathCode = runtimeToolPathErrorCode(error);
@@ -226,10 +274,14 @@ function filesystemErrorCode(error) {
 }
 var index_default = defineRuntimePlugin((context) => ({
   handlers: {
-    async system_probe(params) {
+    async system_probe(params, executionContext = void 0) {
       const explicitPath = readOptionalString(params.path);
+      const pathContext = {
+        ...context,
+        runtimePathResolver: executionContext?.runtimePathResolver ?? context.runtimePathResolver
+      };
       try {
-        const target = resolvePluginPath(context, explicitPath ?? "/", {
+        const target = resolvePluginPath(pathContext, explicitPath ?? "/", {
           requirePath: true,
           allowedLocations: ALLOWED_PATH_LOCATIONS
         });

package/plugins/web/README.md

@@ -5,6 +5,15 @@ providers. A trimmed, non-empty `braveSearchApiKey` selects Brave. An absent or
 blank key selects Light. Provider selection happens when the plugin loads;
 Brave failures never trigger a second search through Light.
 
+## Brave source retrieval
+
+Brave results remain available when an optional source-page fetch times out.
+The failed page is recorded in `sourceFetchErrors` and its source receipt;
+coverage reports the evidence actually retrieved, including weak coverage when
+only search snippets are available. Caller cancellation and the overall search
+deadline still fail the request. Brave API timeouts and direct `web_fetch`
+timeouts remain failures; no retry or provider fallback is added.
+
 ## Light search
 
 Light retrieves public origin pages, publisher feeds, and sitemaps from a
@@ -121,5 +130,5 @@ discovery of a URL absent from the catalog. It does not require a search key,
 external network, or model invocation.
 
 Run `npm run build:plugins` followed by `npm run validate` from the repository
-root. Actual source availability is a separate bounded direct-HTTP check;
-model/client acceptance uses the maintained, separately authorized live smoke.
+root. These offline checks do not establish availability of external sources or
+model behavior in a live client session.

package/plugins/web/plugin.json

@@ -48,6 +48,7 @@
           "operations": {
             "search_one": {
               "summary": "Search real public Internet domains for one current or external query; never use this operation for local files, configured work paths, or project state.",
+              "outputChannels": {"text": "content", "data": "metadata"},
               "input": {
                 "type": "object",
                 "additionalProperties": false,
@@ -65,6 +66,7 @@
             },
             "search_many": {
               "summary": "Search real public Internet domains for up to five distinct external queries in parallel; never use this operation for local files, configured work paths, or project state.",
+              "outputChannels": {"text": "content", "data": "metadata"},
               "input": {
                 "type": "object",
                 "additionalProperties": false,
@@ -101,6 +103,7 @@
           "operations": {
             "fetch_one": {
               "summary": "Fetch readable content from one real public http(s) domain URL; never use this operation for local files, configured work paths, localhost, or private-network targets.",
+              "outputChannels": {"text": "content", "data": "metadata"},
               "input": {
                 "type": "object",
                 "additionalProperties": false,
@@ -118,6 +121,7 @@
             },
             "fetch_many": {
               "summary": "Fetch readable content from up to three real public http(s) domain URLs; never use this operation for local files, configured work paths, localhost, or private-network targets.",
+              "outputChannels": {"text": "content", "data": "metadata"},
               "input": {
                 "type": "object",
                 "additionalProperties": false,

package/plugins/web/source/plugin.ts

@@ -29,11 +29,13 @@ export type WebPluginDependencies = Readonly<{
   httpClient?: PublicHttpClient;
 }>;
 
-function failure(error: unknown, operation: string) {
+function failure(error: unknown, operation: string, signal?: AbortSignal) {
   const lightFailure = lightSearchFailureResult(error);
   if (lightFailure) return lightFailure;
   if (isWebPluginError(error)) {
+    const abortedByCaller = signal?.aborted === true && error.code === "web_request_aborted";
     return failureResult({
+      ...(abortedByCaller ? { interruption: "aborted" as const } : {}),
       errorCode: error.code,
       message: error.message,
       output: `${operation} failed: ${error.message}`,
@@ -99,7 +101,7 @@ export function createWebPlugin(
           { version: 1, operation: "fetch", sources: presentation.sources },
         );
       } catch (error) {
-        return failure(error, "web_fetch");
+        return failure(error, "web_fetch", executionContext?.abortSignal);
       }
     },
     async web_search(params, executionContext) {
@@ -151,7 +153,7 @@ export function createWebPlugin(
           search.webSources,
         );
       } catch (error) {
-        return failure(error, "web_search");
+        return failure(error, "web_search", executionContext?.abortSignal);
       }
     },
   };

package/plugins/web/source/research.ts

@@ -24,6 +24,12 @@ export function uniqueHits(
   );
 }
 
+function isSourceRetrievalInterrupted(error: unknown, abortSignal: AbortSignal): boolean {
+  if (!isWebPluginError(error)) return false;
+  if (error.code === "web_request_aborted") return true;
+  return error.code === "web_request_timed_out" && abortSignal.aborted;
+}
+
 export async function fetchSources(
   hits: readonly SearchHit[],
   fetchService: WebFetchService,
@@ -52,13 +58,7 @@ export async function fetchSources(
             page: await fetchService.fetchPage(hit.url, abortSignal),
           });
         } catch (error) {
-          if (
-            isWebPluginError(error) &&
-            (error.code === "web_request_aborted" ||
-              error.code === "web_request_timed_out")
-          ) {
-            throw error;
-          }
+          if (isSourceRetrievalInterrupted(error, abortSignal)) throw error;
           return Object.freeze({
             hit,
             errorCode: isWebPluginError(error)

package/plugins/web/src/index.cjs

@@ -170,8 +170,28 @@ function defineRuntimePlugin(definition) {
   return definition;
 }
 
+// src/capabilities/tool-context-text.ts
+function hasValidToolContextText(carrier) {
+  const fields = carrier.contextTextFields;
+  if (fields === void 0) return true;
+  if (!Array.isArray(fields) || fields.length === 0 || fields.length > 3)
+    return false;
+  if (new Set(fields).size !== fields.length) return false;
+  for (const field of fields) {
+    if (!isContextTextField(field)) return false;
+    if (typeof carrier[field] !== "string") return false;
+  }
+  return true;
+}
+function isContextTextField(value) {
+  return value === "output" || value === "stdout" || value === "stderr";
+}
+
+// src/capabilities/result-budget.ts
+var CAPABILITY_RESULT_ENVELOPE_MAX_BYTES = 256 * 1024;
+
 // src/plugin-sdk/results.ts
-var PLUGIN_RESULT_SERIALIZED_MAX_BYTES = 128 * 1024;
+var PLUGIN_RESULT_SERIALIZED_MAX_BYTES = CAPABILITY_RESULT_ENVELOPE_MAX_BYTES;
 function resultBoundsFailure(code, message) {
   return {
     ok: false,
@@ -181,9 +201,27 @@ function resultBoundsFailure(code, message) {
     errorCode: code
   };
 }
-function enforcePluginResultByteBudget(result) {
-  let serialized;
+function enforcePluginResultByteBudget(result, resultBudget) {
+  let requiresContextTextHost = false;
+  let serializedBytes;
+  let envelopeBytes;
+  let maxBytes = PLUGIN_RESULT_SERIALIZED_MAX_BYTES;
+  let fitsDeclaredBudget = true;
   try {
+    if (!hasValidToolContextText(result)) {
+      return resultBoundsFailure(
+        "plugin_context_text_invalid",
+        "The plugin declared invalid context text fields."
+      );
+    }
+    requiresContextTextHost = result.contextTextFields !== void 0;
+    const lacksContextTextHost = requiresContextTextHost && resultBudget?.acceptsContextText !== true;
+    if (lacksContextTextHost) {
+      return resultBoundsFailure(
+        "plugin_context_text_unavailable",
+        "The host does not support context-managed tool text."
+      );
+    }
     const candidate = JSON.stringify(result);
     if (candidate === void 0) {
       return resultBoundsFailure(
@@ -191,50 +229,60 @@ function enforcePluginResultByteBudget(result) {
         "The plugin produced a result that is not JSON-safe."
       );
     }
-    serialized = candidate;
+    const assessment = resultBudget?.assess(result);
+    serializedBytes = assessment?.serializedBytes ?? Buffer.byteLength(candidate, "utf8");
+    envelopeBytes = assessment?.envelopeBytes ?? serializedBytes;
+    maxBytes = Math.min(assessment?.maxBytes ?? maxBytes, maxBytes);
+    fitsDeclaredBudget = assessment?.fits ?? true;
   } catch {
     return resultBoundsFailure(
       "plugin_result_not_json_safe",
       "The plugin produced a result that is not JSON-safe."
     );
   }
-  if (Buffer.byteLength(serialized, "utf8") > PLUGIN_RESULT_SERIALIZED_MAX_BYTES) {
-    return resultBoundsFailure(
-      "plugin_result_too_large",
-      `The plugin result exceeds the ${PLUGIN_RESULT_SERIALIZED_MAX_BYTES}-byte safety limit.`
-    );
+  const hasResultDeliveryHeadroom = fitsDeclaredBudget && envelopeBytes <= maxBytes;
+  if (!hasResultDeliveryHeadroom) {
+    const message = requiresContextTextHost ? `The plugin result envelope is ${envelopeBytes} bytes (${serializedBytes} total bytes) and exceeds the ${maxBytes}-byte delivery limit.` : `The plugin result is ${serializedBytes} bytes and exceeds the ${maxBytes}-byte delivery limit.`;
+    return resultBoundsFailure("plugin_result_too_large", message);
   }
   return result;
 }
-function successResult(input) {
-  return enforcePluginResultByteBudget({
-    ok: true,
-    ...input.media !== void 0 ? { media: input.media } : {},
-    output: input.output,
-    producedNewInformation: input.producedNewInformation ?? true,
-    ...input.progress !== void 0 ? { progress: input.progress } : {},
-    ...input.actions !== void 0 ? { actions: input.actions } : {},
-    ...input.exitCode !== void 0 ? { exitCode: input.exitCode } : {},
-    ...input.stdout !== void 0 ? { stdout: input.stdout } : {},
-    ...input.stderr !== void 0 ? { stderr: input.stderr } : {},
-    ...input.data !== void 0 ? { data: input.data } : {}
-  });
+function successResult(input, resultBudget) {
+  return enforcePluginResultByteBudget(
+    {
+      ok: true,
+      ...input.media !== void 0 ? { media: input.media } : {},
+      output: input.output,
+      producedNewInformation: input.producedNewInformation ?? true,
+      ...input.progress !== void 0 ? { progress: input.progress } : {},
+      ...input.actions !== void 0 ? { actions: input.actions } : {},
+      ...input.exitCode !== void 0 ? { exitCode: input.exitCode } : {},
+      ...input.stdout !== void 0 ? { stdout: input.stdout } : {},
+      ...input.stderr !== void 0 ? { stderr: input.stderr } : {},
+      ...input.data !== void 0 ? { data: input.data } : {}
+    },
+    resultBudget
+  );
 }
-function failureResult(input) {
-  return enforcePluginResultByteBudget({
-    ok: false,
-    ...input.media !== void 0 ? { media: input.media } : {},
-    output: input.output ?? input.message,
-    producedNewInformation: false,
-    ...input.progress !== void 0 ? { progress: input.progress } : {},
-    ...input.actions !== void 0 ? { actions: input.actions } : {},
-    ...input.exitCode !== void 0 ? { exitCode: input.exitCode } : {},
-    ...input.stdout !== void 0 ? { stdout: input.stdout } : {},
-    ...input.stderr !== void 0 ? { stderr: input.stderr } : {},
-    ...input.data !== void 0 ? { data: input.data } : {},
-    error: input.message,
-    errorCode: input.errorCode
-  });
+function failureResult(input, resultBudget) {
+  return enforcePluginResultByteBudget(
+    {
+      ok: false,
+      ...input.interruption ? { interruption: input.interruption } : {},
+      ...input.media !== void 0 ? { media: input.media } : {},
+      output: input.output ?? input.message,
+      producedNewInformation: false,
+      ...input.progress !== void 0 ? { progress: input.progress } : {},
+      ...input.actions !== void 0 ? { actions: input.actions } : {},
+      ...input.exitCode !== void 0 ? { exitCode: input.exitCode } : {},
+      ...input.stdout !== void 0 ? { stdout: input.stdout } : {},
+      ...input.stderr !== void 0 ? { stderr: input.stderr } : {},
+      ...input.data !== void 0 ? { data: input.data } : {},
+      error: input.message,
+      errorCode: input.errorCode
+    },
+    resultBudget
+  );
 }
 function failureFromError(error, options) {
   const pathCode = runtimeToolPathErrorCode(error);
@@ -1594,6 +1642,11 @@ function uniqueHits(results) {
     })
   );
 }
+function isSourceRetrievalInterrupted(error, abortSignal) {
+  if (!isWebPluginError(error)) return false;
+  if (error.code === "web_request_aborted") return true;
+  return error.code === "web_request_timed_out" && abortSignal.aborted;
+}
 async function fetchSources(hits, fetchService, abortSignal) {
   const candidates = hits.slice(0, WEB_LIMITS.searchSourceFetches);
   const results = [];
@@ -1612,9 +1665,7 @@ async function fetchSources(hits, fetchService, abortSignal) {
             page: await fetchService.fetchPage(hit.url, abortSignal)
           });
         } catch (error) {
-          if (isWebPluginError(error) && (error.code === "web_request_aborted" || error.code === "web_request_timed_out")) {
-            throw error;
-          }
+          if (isSourceRetrievalInterrupted(error, abortSignal)) throw error;
           return Object.freeze({
             hit,
             errorCode: isWebPluginError(error) ? error.code : "web_response_invalid",
@@ -4770,11 +4821,13 @@ function successWithSourceReceipts(input, receipt) {
 }
 
 // plugins/web/source/plugin.ts
-function failure(error, operation) {
+function failure(error, operation, signal) {
   const lightFailure = lightSearchFailureResult(error);
   if (lightFailure) return lightFailure;
   if (isWebPluginError(error)) {
+    const abortedByCaller = signal?.aborted === true && error.code === "web_request_aborted";
     return failureResult({
+      ...abortedByCaller ? { interruption: "aborted" } : {},
       errorCode: error.code,
       message: error.message,
       output: `${operation} failed: ${error.message}`
@@ -4833,7 +4886,7 @@ function createWebPlugin(context, dependencies = {}) {
           { version: 1, operation: "fetch", sources: presentation.sources }
         );
       } catch (error) {
-        return failure(error, "web_fetch");
+        return failure(error, "web_fetch", executionContext?.abortSignal);
       }
     },
     async web_search(params, executionContext) {
@@ -4882,7 +4935,7 @@ function createWebPlugin(context, dependencies = {}) {
           search.webSources
         );
       } catch (error) {
-        return failure(error, "web_search");
+        return failure(error, "web_search", executionContext?.abortSignal);
       }
     }
   };

package/runtime.config.schema.json

@@ -172,8 +172,14 @@
     },
     "webUi": {
       "type": "object",
-      "description": "Local Web UI startup behavior.",
+      "description": "Local Web UI behavior.",
       "properties": {
+        "pageSize": {
+          "type": "integer",
+          "minimum": 1,
+          "default": 20,
+          "description": "Sessions and messages per Web UI history page, including SPARK."
+        },
         "openOnRuntimeServiceStart": {
           "type": "boolean",
           "default": false,
@@ -329,6 +335,12 @@
           "default": [],
           "description": "Installed plugin or capability ids denied after applying the allow-list.",
           "items": { "type": "string" }
+        },
+        "disabledPluginIds": {
+          "type": "array",
+          "default": [],
+          "description": "Exact plugin ids disabled independently of tool selectors. Entries are literal ids, not wildcards.",
+          "items": { "type": "string" }
         }
       },
       "additionalProperties": false
@@ -501,6 +513,18 @@
                   }
                 }
               },
+              "plugins": {
+                "type": "object",
+                "description": "Runtime-only restrictions applied to the entire request selected by this model profile. Global plugin restrictions still apply.",
+                "properties": {
+                  "deny": {
+                    "type": "array",
+                    "items": { "type": "string" },
+                    "description": "Denied plugin IDs, capability names, plugin.capability selectors, or *. These restrictions do not depend on per-step model overrides."
+                  }
+                },
+                "additionalProperties": false
+              },
               "execution": {
                 "type": "object",
                 "description": "Runtime-only request execution policy for this model profile. Omission selects supervisor-worker-v1; execution-agent-v1 is an explicit per-profile opt-in. This metadata is not forwarded to the model gateway.",