@abot-ai/runtime 1.6.0 → 1.7.0

package/dist/src/computer-access/process-runner.js

@@ -1,7 +1,7 @@
 import { spawn } from "node:child_process";
 const STREAM_MAX_CHARS = 16_000;
 /** Bounded process observation; exit zero proves command completion, not effects. */
-export function runSystemProcess(input) {
+export function runSystemProcess(input, capture) {
     if (input.abortSignal?.aborted)
         return Promise.resolve({
             exitCode: null,
@@ -29,6 +29,7 @@ export function runSystemProcess(input) {
             if (stopGrace)
                 clearTimeout(stopGrace);
             input.abortSignal?.removeEventListener("abort", abort);
+            capture?.end();
             resolve(Object.freeze({
                 exitCode,
                 stdout,
@@ -76,18 +77,25 @@ export function runSystemProcess(input) {
             stopGrace.unref();
         };
         const abort = () => stop("aborted");
-        child.stdout.setEncoding("utf8");
-        child.stderr.setEncoding("utf8");
-        child.stdout.on("data", (chunk) => {
-            const remaining = streamMaxChars - stdout.length;
-            truncated ||= chunk.length > remaining;
-            stdout += chunk.slice(0, remaining);
-        });
-        child.stderr.on("data", (chunk) => {
-            const remaining = streamMaxChars - stderr.length;
-            truncated ||= chunk.length > remaining;
-            stderr += chunk.slice(0, remaining);
-        });
+        const attachOutput = () => {
+            if (capture) {
+                capture.attach(child.stdout, child.stderr, () => stop("output_failed"));
+                return;
+            }
+            child.stdout.setEncoding("utf8");
+            child.stderr.setEncoding("utf8");
+            child.stdout.on("data", (chunk) => {
+                const remaining = streamMaxChars - stdout.length;
+                truncated ||= chunk.length > remaining;
+                stdout += chunk.slice(0, remaining);
+            });
+            child.stderr.on("data", (chunk) => {
+                const remaining = streamMaxChars - stderr.length;
+                truncated ||= chunk.length > remaining;
+                stderr += chunk.slice(0, remaining);
+            });
+        };
+        attachOutput();
         child.once("error", (error) => {
             status = "spawn_failed";
             stderr = error.message.slice(0, STREAM_MAX_CHARS);

package/dist/src/model-gateway/server/configuration.d.ts

@@ -1,4 +1,6 @@
 import type { ModelGatewayPolicyConfig } from "../types.js";
 import type { ModelGatewayHandlerOptions } from "./contracts.js";
 export declare function resolveModelGatewayPort(environment?: NodeJS.ProcessEnv): number;
+/** Captures gateway inputs without changing its loggers or retaining credentials. */
+export declare function captureModelGatewayConfiguration(options: ModelGatewayHandlerOptions): string | null;
 export declare function configureModelGateway(options: ModelGatewayHandlerOptions): ModelGatewayPolicyConfig;

package/dist/src/model-gateway/server/configuration.js

@@ -1,10 +1,11 @@
+import { createHash } from "node:crypto";
 import { join } from "node:path";
 import { loadRuntimeConfig } from "../../runtime/config.js";
 import { RUNTIME_LOGS_DIR_NAME } from "../../runtime/config/layout.js";
 import { loadRequestRunnerConfig } from "../../runtime/config/runner/loader.js";
 import { createRequestModelPolicy } from "../../runtime/config/runner/model-policy.js";
 import { configureDebugLogger } from "../../runtime/observability/debug-logger.js";
-import { DEFAULT_MODEL_GATEWAY_URL } from "../../shared/constants.js";
+import { DEFAULT_MODEL_GATEWAY_URL, DEFAULT_OLLAMA_URL, } from "../../shared/constants.js";
 import { configureModelIoTrace } from "../model-io-trace.js";
 const MODEL_GATEWAY_TRACE_FILE_SEGMENTS = ["model-gateway.jsonl"];
 const MODEL_IO_TRACE_FILE_SEGMENTS = ["model-io.jsonl"];
@@ -26,7 +27,7 @@ export function resolveModelGatewayPort(environment = process.env) {
     const parsedUrl = new URL(configuredUrl);
     return Number(parsedUrl.port || "80");
 }
-export function configureModelGateway(options) {
+function resolveModelGatewayConfiguration(options) {
     const runtimeConfig = loadRuntimeConfig({
         rootDir: options.rootDir ?? process.cwd(),
         configPath: options.configPath,
@@ -38,23 +39,74 @@ export function configureModelGateway(options) {
                 configPath: runtimeConfig.requestRunner.configPath,
             }),
         });
-    configureDebugLogger({
-        traceFile: resolveTraceFile({
-            configuredPath: resolveConfiguredTraceFile("MODEL_GATEWAY_TRACE_FILE"),
-            sharedDir: runtimeConfig.paths.sharedDir,
-            segments: MODEL_GATEWAY_TRACE_FILE_SEGMENTS,
-        }),
-        enabled: runtimeConfig.logging?.enabled,
-        rotation: runtimeConfig.logging?.rotation,
-    });
-    configureModelIoTrace({
-        traceFile: resolveTraceFile({
-            configuredPath: resolveConfiguredTraceFile("MODEL_GATEWAY_MODEL_IO_TRACE_FILE"),
-            sharedDir: runtimeConfig.paths.sharedDir,
-            segments: MODEL_IO_TRACE_FILE_SEGMENTS,
-        }),
-        enabled: runtimeConfig.logging?.enabled,
-        rotation: runtimeConfig.logging?.rotation,
-    });
-    return modelPolicy;
+    return {
+        modelGatewayUrl: runtimeConfig.modelGatewayUrl,
+        modelPolicy,
+        debugLogging: {
+            traceFile: resolveTraceFile({
+                configuredPath: resolveConfiguredTraceFile("MODEL_GATEWAY_TRACE_FILE"),
+                sharedDir: runtimeConfig.paths.sharedDir,
+                segments: MODEL_GATEWAY_TRACE_FILE_SEGMENTS,
+            }),
+            enabled: runtimeConfig.logging?.enabled,
+            rotation: runtimeConfig.logging?.rotation,
+        },
+        modelIoLogging: {
+            traceFile: resolveTraceFile({
+                configuredPath: resolveConfiguredTraceFile("MODEL_GATEWAY_MODEL_IO_TRACE_FILE"),
+                sharedDir: runtimeConfig.paths.sharedDir,
+                segments: MODEL_IO_TRACE_FILE_SEGMENTS,
+            }),
+            enabled: runtimeConfig.logging?.enabled,
+            rotation: runtimeConfig.logging?.rotation,
+        },
+    };
+}
+function canonicalConfiguration(value) {
+    if (Array.isArray(value))
+        return value.map(canonicalConfiguration);
+    if (value && typeof value === "object")
+        return Object.fromEntries(Object.entries(value)
+            .sort(([left], [right]) => left.localeCompare(right))
+            .map(([key, entry]) => [key, canonicalConfiguration(entry)]));
+    return value;
+}
+function providerEnvironment(options, policy) {
+    const credentialNames = new Set(["OPENAI_API_KEY"]);
+    for (const provider of Object.values(policy.providers ?? {})) {
+        if (provider.type !== "openai")
+            continue;
+        const configuredName = provider.apiKeyEnv?.trim();
+        if (configuredName && /^[A-Za-z_][A-Za-z0-9_]*$/.test(configuredName))
+            credentialNames.add(configuredName);
+    }
+    const numPredict = Number(process.env.OLLAMA_NUM_PREDICT);
+    return {
+        ollamaUrl: options.ollamaUrl ?? (process.env.OLLAMA_URL || DEFAULT_OLLAMA_URL),
+        openAIBaseUrl: process.env.OPENAI_BASE_URL || "https://api.openai.com/v1",
+        ollamaNumPredict: Number.isFinite(numPredict) && numPredict > 0
+            ? Math.trunc(numPredict)
+            : null,
+        credentials: Object.fromEntries([...credentialNames].map((name) => [name, process.env[name] || null])),
+    };
+}
+/** Captures gateway inputs without changing its loggers or retaining credentials. */
+export function captureModelGatewayConfiguration(options) {
+    if (options.providerAdapters || options.additionalProviderAdapters?.length)
+        return null;
+    const configuration = resolveModelGatewayConfiguration(options);
+    const snapshot = {
+        ...configuration,
+        modelGatewayUrl: new URL(configuration.modelGatewayUrl).href,
+        providerEnvironment: providerEnvironment(options, configuration.modelPolicy),
+    };
+    return createHash("sha256")
+        .update(JSON.stringify(canonicalConfiguration(snapshot)))
+        .digest("hex");
+}
+export function configureModelGateway(options) {
+    const configuration = resolveModelGatewayConfiguration(options);
+    configureDebugLogger(configuration.debugLogging);
+    configureModelIoTrace(configuration.modelIoLogging);
+    return configuration.modelPolicy;
 }

package/dist/src/plugin-contract/install-source.d.ts

@@ -0,0 +1,13 @@
+/** Portable installation intent. A source never grants execution authority. */
+export type PluginInstallSource = Readonly<{
+    repository: string;
+    ref?: string;
+    path?: string;
+}>;
+export declare class PluginInstallError extends Error {
+    readonly code: string;
+    readonly statusCode: number;
+    constructor(code: string, message: string, statusCode?: number);
+}
+export declare function parsePluginInstallSource(input: unknown): PluginInstallSource;
+export declare function parsePluginInstallLink(value: string): PluginInstallSource;

package/dist/src/plugin-contract/install-source.js

@@ -0,0 +1,99 @@
+export class PluginInstallError extends Error {
+    code;
+    statusCode;
+    constructor(code, message, statusCode = 400) {
+        super(message);
+        this.code = code;
+        this.statusCode = statusCode;
+    }
+}
+function invalidSource(message) {
+    throw new PluginInstallError("plugin_source_invalid", message);
+}
+function hasPublicGitHubOrigin(url) {
+    if (url.protocol !== "https:")
+        return false;
+    if (url.hostname !== "github.com")
+        return false;
+    if (url.port || url.username || url.password)
+        return false;
+    return !url.search && !url.hash;
+}
+function isPluginInstallEndpoint(url) {
+    if (url.protocol !== "abot:")
+        return false;
+    if (url.hostname !== "install")
+        return false;
+    if (!["", "/"].includes(url.pathname))
+        return false;
+    if (url.username || url.password || url.port)
+        return false;
+    return !url.hash;
+}
+function isRepositoryFolderComponent(part) {
+    if (part === "." || part === "..")
+        return false;
+    return /^[A-Za-z0-9_.-]+$/u.test(part);
+}
+export function parsePluginInstallSource(input) {
+    if (!input || typeof input !== "object" || Array.isArray(input))
+        return invalidSource("Enter a public GitHub repository URL.");
+    const value = input;
+    if (typeof value.repository !== "string" || value.repository.length > 512)
+        return invalidSource("Enter a public GitHub repository URL.");
+    let url;
+    try {
+        url = new URL(value.repository.trim());
+    }
+    catch {
+        return invalidSource("Enter a public GitHub repository URL.");
+    }
+    if (!hasPublicGitHubOrigin(url))
+        return invalidSource("Use an HTTPS repository URL on github.com.");
+    const match = /^\/([A-Za-z0-9][A-Za-z0-9-]{0,38})\/([A-Za-z0-9_.-]{1,100})\/?$/u.exec(url.pathname);
+    if (!match)
+        return invalidSource("Use the repository URL; enter its revision and folder separately.");
+    const repo = match[2].replace(/\.git$/u, "");
+    if (repo === "." || repo === ".." || !repo)
+        return invalidSource("Invalid repository name.");
+    const ref = value.ref === undefined ? "" : value.ref;
+    if (typeof ref !== "string" ||
+        ref.length > 200 ||
+        /[\u0000-\u0020\u007f\\?#]/u.test(ref))
+        return invalidSource("Enter a commit, tag or branch without spaces.");
+    const path = value.path === undefined ? "" : value.path;
+    if (typeof path !== "string" || path.length > 512)
+        return invalidSource("Enter a folder relative to the repository root.");
+    if (path && !path.split("/").every(isRepositoryFolderComponent))
+        return invalidSource("The plugin folder must be a relative path without traversal.");
+    return {
+        repository: `https://github.com/${match[1]}/${repo}`,
+        ...(ref ? { ref } : {}),
+        ...(path ? { path } : {}),
+    };
+}
+export function parsePluginInstallLink(value) {
+    if (value.length > 2048)
+        return invalidSource("The installation link is too long.");
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return invalidSource("Invalid ABot installation link.");
+    }
+    if (!isPluginInstallEndpoint(url))
+        return invalidSource("Unsupported ABot installation link.");
+    const allowed = ["kind", "repo", "ref", "path"];
+    for (const key of url.searchParams.keys()) {
+        if (!allowed.includes(key) || url.searchParams.getAll(key).length !== 1)
+            return invalidSource("Unsupported installation link fields.");
+    }
+    if (url.searchParams.get("kind") !== "plugin")
+        return invalidSource("This installation link must select a plugin.");
+    return parsePluginInstallSource({
+        repository: url.searchParams.get("repo"),
+        ref: url.searchParams.get("ref") ?? "",
+        path: url.searchParams.get("path") ?? "",
+    });
+}

package/dist/src/plugin-contract/manifest.d.ts

@@ -1,9 +1,10 @@
-import type { ToolCatalogGroup, ToolDevelopmentRole, ToolEventPresentation, ToolNormalInvocationApproval, ToolNormalInvocationAttachmentInput, ToolNormalInvocationEffect, ToolNormalInvocationFixedValue, ToolNormalInvocationInput, ToolNormalInvocationPayload, ToolPayloadChannelSpec, ToolRoutingCapability, ToolRuntimePathBinding } from "../capabilities/tool-types.js";
+import type { ToolCatalogGroup, ToolDevelopmentRole, ToolEventPresentation, ToolNormalInvocationApproval, ToolNormalInvocationAttachmentInput, ToolNormalInvocationEffect, ToolNormalInvocationFixedValue, ToolNormalInvocationInput, ToolNormalInvocationPayload, ToolNormalInvocationOutputChannels, ToolPayloadChannelSpec, ToolRoutingCapability, ToolRuntimePathBinding } from "../capabilities/tool-types.js";
 export declare const AGENT_PLUGIN_MANIFEST_SCHEMA = "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json";
 export declare const ABOT_RUNTIME_EXTENSION = "ai.abot.runtime";
 export declare const ABOT_RUNTIME_EXTENSION_VERSION: 1;
 export type AgentPluginOperationManifest = Readonly<{
     summary: string;
+    outputChannels?: ToolNormalInvocationOutputChannels;
     input: ToolNormalInvocationInput;
     selectionControlIds?: readonly string[];
     effect: ToolNormalInvocationEffect;

package/dist/src/plugin-sdk/computer-access.d.ts

@@ -11,3 +11,11 @@ export { SystemOperationError, type SystemTarget, type SystemTargetId, } from ".
 export { createSystemHandlers } from "../computer-access/handlers.js";
 export { type SystemTargetObservation, observeSystemTargets, } from "../computer-access/target-observation.js";
 export type { ComputerAccessConnection, CompanionTarget, } from "../computer-access/client.js";
+export { runSystemProcess } from "../computer-access/process-runner.js";
+export { buildSystemProcessResult } from "../computer-access/process-result.js";
+export type { SystemCommandOutputFactory } from "../computer-access/command-output.js";
+export type { SystemProcessCapture } from "../computer-access/process-capture.js";
+export type { SystemProcessResult } from "../computer-access/contracts.js";
+export { createSystemOutputCapture, type SystemOutputReceipt } from "../computer-access/command-output-capture.js";
+export { DEFAULT_SYSTEM_OUTPUT_RETENTION_MS, scheduleSystemOutputCleanup } from "../computer-access/command-output-retention.js";
+export { SYSTEM_OUTPUT_CAPABILITY, SYSTEM_OUTPUT_CHUNK_BYTES, readSystemOutputTransfer } from "../computer-access/companion/command-output-protocol.js";

package/dist/src/plugin-sdk/computer-access.js

@@ -9,3 +9,8 @@ export { COMPUTER_CAPABILITY, readNativeComputerResult, } from "../computer-acce
 export { SystemOperationError, } from "../computer-access/contracts.js";
 export { createSystemHandlers } from "../computer-access/handlers.js";
 export { observeSystemTargets, } from "../computer-access/target-observation.js";
+export { runSystemProcess } from "../computer-access/process-runner.js";
+export { buildSystemProcessResult } from "../computer-access/process-result.js";
+export { createSystemOutputCapture } from "../computer-access/command-output-capture.js";
+export { DEFAULT_SYSTEM_OUTPUT_RETENTION_MS, scheduleSystemOutputCleanup } from "../computer-access/command-output-retention.js";
+export { SYSTEM_OUTPUT_CAPABILITY, SYSTEM_OUTPUT_CHUNK_BYTES, readSystemOutputTransfer } from "../computer-access/companion/command-output-protocol.js";

package/dist/src/runtime/adapters/in-memory-session-store.js

@@ -1,7 +1,8 @@
 import { randomUUID } from "node:crypto";
 import { assertSessionProjectUnchanged, copySessionProject, } from "../../sessions/project-binding.js";
 import { assertValidSessionArtifactPathInputs, upsertSessionArtifactPaths, } from "../../sessions/artifact-paths.js";
-import { clientVisibleMessages, compactRequestEvents, filterMessagesAfter, getRequestFinalState, getSessionRequest, isSameMessageId, normalizeAfterSeq, normalizeCursor, normalizeLimit, normalizeSessionTitle, toClientReplayEvent, toEpochMs, toSessionListItem, toSnapshotMessage, toSnapshotRequest, } from "../../sessions/record/projection.js";
+import { compactRequestEvents, getRequestFinalState, getSessionRequest, isSameMessageId, normalizeAfterSeq, normalizeCursor, normalizeLimit, normalizeSessionTitle, toClientReplayEvent, toEpochMs, toSessionListItem, } from "../../sessions/record/projection.js";
+import { projectSessionSnapshot } from "../../sessions/snapshot.js";
 import { assertValidRequestId, assertValidSessionId, createContextEntryId, defaultCreateMessageId, pruneSupersededContextEntries, } from "../../sessions/record/rules.js";
 import { resolveSessionMemoryCheckpointCommit } from "../../sessions/memory/rules.js";
 import { assertSessionKindUnchanged, sessionKindCreationFields } from "../../sessions/spark-session.js";
@@ -99,21 +100,10 @@ class InMemorySessionStore {
         return session ? cloneSession(session) : null;
     }
     async getSessionSnapshot(sessionId, options = {}) {
-        const session = await this.getSessionById(sessionId);
-        if (!session) {
-            return null;
-        }
-        return {
-            sessionId,
-            ...(session.kind ? { kind: session.kind } : {}),
-            ...(session.project ? { project: session.project } : {}),
-            title: session.title,
-            messages: filterMessagesAfter(clientVisibleMessages(session.messages), options.afterMessageId).map((message) => toSnapshotMessage(sessionId, message, session.requests ?? [])),
-            requests: options.includeRequests === false
-                ? []
-                : (session.requests ?? []).map(toSnapshotRequest),
-            nextCursor: null,
-        };
+        assertValidSessionId(sessionId);
+        const session = this.sessions.get(sessionId);
+        // Copy only the projection; identities-only reads never clone history bodies/events.
+        return session ? structuredClone(projectSessionSnapshot(session, options)) : null;
     }
     async getRequestReplayById(requestId, afterSeq = 0) {
         assertValidRequestId(requestId);

package/dist/src/runtime/admin/config-control.js

@@ -5,6 +5,7 @@ import { loadRuntimeConfig } from "../config.js";
 import { DEFAULT_RUNTIME_CONFIG_FILE } from "../config/constants.js";
 import { loadRuntimeConfigFile } from "../config/loader.js";
 import { RUNTIME_CONFIG_JSON_SCHEMA } from "../config/schema.js";
+import { resolveRuntimePath } from "../config/utils.js";
 import { RuntimeConfigValidationError, validateRuntimeConfigFile, } from "../config/validation.js";
 const NON_SECRET_TOKEN_CONFIG_KEYS = new Set([
     "contextwindowtokens",
@@ -23,7 +24,7 @@ function isRecord(value) {
 }
 function resolveConfigPath(rootDir, configPath) {
     return configPath
-        ? join(rootDir, configPath)
+        ? resolveRuntimePath(rootDir, configPath)
         : join(rootDir, DEFAULT_RUNTIME_CONFIG_FILE);
 }
 function redactConfigValue(value) {

package/dist/src/runtime/automations/catalog.d.ts

@@ -8,6 +8,7 @@ export type AutomationCatalogOperation = Readonly<{
     operationId: string;
     contractVersion: number;
     label: string;
+    outputChannels?: ToolNormalInvocationOperation["outputChannels"];
     pluginName?: string;
     catalogGroups: readonly ToolCatalogGroup[];
     toolDescription?: string;
@@ -32,6 +33,7 @@ export declare function readAutomationCatalog(input: {
         operationId: string;
         contractVersion: number;
         label: string;
+        outputChannels?: ToolNormalInvocationOperation["outputChannels"];
         pluginName?: string;
         catalogGroups: readonly ToolCatalogGroup[];
         toolDescription?: string;
@@ -49,6 +51,7 @@ export declare function readAutomationCatalog(input: {
         operationId: string;
         contractVersion: number;
         label: string;
+        outputChannels?: ToolNormalInvocationOperation["outputChannels"];
         pluginName?: string;
         catalogGroups: readonly ToolCatalogGroup[];
         toolDescription?: string;

package/dist/src/runtime/automations/catalog.js

@@ -16,6 +16,7 @@ export async function readAutomationCatalog(input) {
                 operationId: operation.operationId,
                 contractVersion: registration.contract.version,
                 label: operation.summary,
+                ...(operation.outputChannels ? { outputChannels: operation.outputChannels } : {}),
                 ...(registration.definition.pluginName
                     ? { pluginName: registration.definition.pluginName }
                     : {}),

package/dist/src/runtime/automations/model-dependency-projection.d.ts

@@ -10,11 +10,13 @@ export declare function projectAutomationModelDependencies(config: RuntimeConfig
         admission: Readonly<{
             policy: RequestExecutionPolicyId;
             primaryProfileId?: string;
+            plugins?: import("../config/model-plugin-config.js").RuntimeModelPluginConfig;
             source: "model_profile" | "default";
         }>;
         execution: Readonly<{
             policy: RequestExecutionPolicyId;
             primaryProfileId?: string;
+            plugins?: import("../config/model-plugin-config.js").RuntimeModelPluginConfig;
             source: "model_profile" | "default";
         }>;
         invocations: ({

package/dist/src/runtime/automations/service.d.ts

@@ -122,6 +122,7 @@ export declare function createAutomationService(options: {
             operationId: string;
             contractVersion: number;
             label: string;
+            outputChannels?: import("../../capabilities/tool-types.js").ToolNormalInvocationOperation["outputChannels"];
             pluginName?: string;
             catalogGroups: readonly import("../../capabilities/tool-types.js").ToolCatalogGroup[];
             toolDescription?: string;
@@ -139,6 +140,7 @@ export declare function createAutomationService(options: {
             operationId: string;
             contractVersion: number;
             label: string;
+            outputChannels?: import("../../capabilities/tool-types.js").ToolNormalInvocationOperation["outputChannels"];
             pluginName?: string;
             catalogGroups: readonly import("../../capabilities/tool-types.js").ToolCatalogGroup[];
             toolDescription?: string;

package/dist/src/runtime/capabilities/automation-builder/authoring-reference.d.ts

@@ -47,7 +47,7 @@ export declare const AUTOMATION_AUTHORING_REFERENCE: {
         readonly steps: readonly [{
             readonly key: "evidence";
             readonly kind: "tool";
-            readonly title: "Read structured evidence";
+            readonly title: "Read text evidence";
             readonly operation: {
                 readonly toolName: "catalog_tool";
                 readonly operationId: "catalog_operation";
@@ -63,7 +63,7 @@ export declare const AUTOMATION_AUTHORING_REFERENCE: {
                 readonly evidence: {
                     readonly kind: "node_result";
                     readonly nodeId: "$evidence";
-                    readonly select: "data";
+                    readonly select: "text";
                 };
             };
         }];
@@ -326,10 +326,15 @@ export declare const AUTOMATION_AUTHORING_REFERENCE: {
             };
         };
         readonly channels: {
-            readonly text: "Tool display output; may be counts/status only, not serialized data.";
-            readonly data: "Structured tool output, when provided. Omit pointer to pass it whole, without knowing field names.";
+            readonly text: "Saved text.";
+            readonly data: "Separate optional JSON; no implicit Text channel.";
         };
-        readonly policy: "Use literal for constants, run_input for definition.inputs. node_result needs a succeeded earlier node; no implicit output. Select the operation's documented channel: data for records/ids, text when sufficient. Optional data-only RFC6901 pointer: /field, /items/0; escape ~ as ~0 and / as ~1. Never invent fields or execute future steps to inspect output.";
+        readonly outputChannels: {
+            content: string;
+            metadata: string;
+            conditional: string;
+        };
+        readonly policy: "literal=constants; run_input=definition.inputs; node_result needs prior success. Follow operation.outputChannels; absent=unknown. Whole data needs no pointer. RFC6901 pointers need documented fields (/items/0; ~ as ~0, / as ~1). Never execute steps for output discovery.";
         readonly files: "run_file resolves a new file for each run under its working directory; fileName is one portable filename, no path. source_files requires a configured source and an agent consumer. source_file index selects the frozen batch entry; field=snapshot_path|original_path|version.";
         readonly parallel: "branch_results is agent-only after the referenced parallel join; it supplies each branch's settled tail output/status. A failed/skipped source has no successful node_result for downstream bindings.";
     };

package/dist/src/runtime/capabilities/automation-builder/authoring-reference.js

@@ -61,10 +61,10 @@ export const AUTOMATION_AUTHORING_REFERENCE = {
     },
     bounds: { batch: AUTOMATION_DRAFT_BATCH_LIMITS, recipe: AUTOMATION_CREATION_RECIPE_LIMITS, graph: AUTOMATION_GRAPH_LIMITS },
     createPlanExample: { version: 1, settings: { objective: "Requested workflow outcome" }, steps: [
-            { key: "evidence", kind: "tool", title: "Read structured evidence", operation },
+            { key: "evidence", kind: "tool", title: "Read text evidence", operation },
             { key: "analysis", kind: "agent", title: "Analyze evidence", modelProfileId: "catalog_model_id",
                 prompt: "Analyze the supplied evidence.",
-                inputs: { evidence: { kind: "node_result", nodeId: "$evidence", select: "data" } } },
+                inputs: { evidence: { kind: "node_result", nodeId: "$evidence", select: "text" } } },
         ] },
     creationRules: "New drafts use settings + ordered steps with unique keys and node shapes below. Runtime fills IDs, parents, indices and commands. Defaults: onFailure=stop; tool controls={}; agentMode=fast, roleInstructions='', inputs={}, tools=[], result={kind:'text'}. Override explicitly. Bind earlier results via $key. Parallel: {key,kind:'parallel',branches:[[steps],[steps]]}; branches are ordered and nonempty. Edit with commands; never mix commands and steps.",
     creationCapacity: `Budget ${AUTOMATION_CREATION_RECIPE_LIMITS.compiledCommands}: leaf=1, parallel group=1, nonempty settings=1; total across all branches. With settings, max ${AUTOMATION_CREATION_RECIPE_LIMITS.compiledCommands - 1} flat steps. Oversize rejects atomically: automation_recipe_capacity_exceeded. Expand with later draft edits.`,
@@ -107,12 +107,13 @@ export const AUTOMATION_AUTHORING_REFERENCE = {
         acceptanceExample: [{ field: "ready", equals: true }],
         acceptancePolicy: "Optional acceptance compares required scalar JSON fields to string/number/boolean values of the same type. A mismatch fails the step under onFailure, not a conditional branch. Use [] to clear. No if/else graph construct exists.", },
     bindings: { examples: bindings,
-        channels: { text: "Tool display output; may be counts/status only, not serialized data.",
-            data: "Structured tool output, when provided. Omit pointer to pass it whole, without knowing field names." },
-        policy: "Use literal for constants, run_input for definition.inputs. node_result needs a succeeded earlier node; no implicit output. Select the operation's documented channel: data for records/ids, text when sufficient. Optional data-only RFC6901 pointer: /field, /items/0; escape ~ as ~0 and / as ~1. Never invent fields or execute future steps to inspect output.",
+        channels: { text: "Saved text.", data: "Separate optional JSON; no implicit Text channel." },
+        outputChannels: { content: "Substantive output; may be bounded/summarized.",
+            metadata: "IDs, status, counts or receipts; no content body.",
+            conditional: "Depends on operation inputs; do not assume content." },
+        policy: "literal=constants; run_input=definition.inputs; node_result needs prior success. Follow operation.outputChannels; absent=unknown. Whole data needs no pointer. RFC6901 pointers need documented fields (/items/0; ~ as ~0, / as ~1). Never execute steps for output discovery.",
         files: "run_file resolves a new file for each run under its working directory; fileName is one portable filename, no path. source_files requires a configured source and an agent consumer. source_file index selects the frozen batch entry; field=snapshot_path|original_path|version.",
-        parallel: "branch_results is agent-only after the referenced parallel join; it supplies each branch's settled tail output/status. A failed/skipped source has no successful node_result for downstream bindings.",
-    },
+        parallel: "branch_results is agent-only after the referenced parallel join; it supplies each branch's settled tail output/status. A failed/skipped source has no successful node_result for downstream bindings.", },
     definition: {
         editableFields: ["title", "objective", "workingDirectory", "trigger", "source", "inputs", "limits"],
         replacement: "A patch merges top-level fields only; inputs, controls, tools, result, acceptance, source, trigger and limits replace their entire field. Keep existing entries when changing part. Limits require all seven keys.",

package/dist/src/runtime/capabilities/automation-builder/payload-instructions.d.ts

@@ -1,6 +1,6 @@
 /** Complete grammar is supplied as bounded passive evidence by prepare_draft. */
-export declare const AUTOMATION_BUILDER_PAYLOAD_INSTRUCTIONS = "Return only JSON following authoringReference from prepare_draft. Use version:1 with commands:[{as,mutation}] for existing drafts. Save all related changes together; new nodes omit id and use earlier aliases in bindings. Outputs never pass implicitly. Agent inputs and tool controls are binding maps; payload is a separate binding. Match exact operation schemas and model IDs. Choose each tool's documented output channel: text may be counts/status only; data without pointer passes the whole structured result when provided. Use data pointers only for known fields; agents need declared JSON output for data bindings. Inputs, limits, controls and selected tools replace their entire field. Never invent schedules or execute future steps.";
+export declare const AUTOMATION_BUILDER_PAYLOAD_INSTRUCTIONS = "Return only JSON following authoringReference from prepare_draft. Use version:1 with commands:[{as,mutation}] for existing drafts. Save all related changes together; new nodes omit id and use earlier aliases in bindings. Outputs never pass implicitly. Agent inputs and tool controls are binding maps; payload is a separate binding. Match exact operation schemas and model IDs. Choose output channels using the selected operation.outputChannels and authoringReference.bindings. Agents need declared JSON results for data. Inputs, limits, controls and selected tools replace their entire field. Never invent schedules or execute future steps.";
 export declare const AUTOMATION_BUILDER_CREATE_SUMMARY = "Create the entire connected automation from settings and ordered steps in one write; Runtime generates IDs and positions. Discover with browse_catalog, then prepare_draft for exact schemas and the authoring reference for planJson. Returns revision 1, generated IDs and the exact saved draft for inspection; no empty draft or separate step edits are needed. Saves only a draft; the user grants permissions, publishes and runs it.";
 export declare const AUTOMATION_BUILDER_APPLY_SUMMARY = "Save related edits atomically. Use the saved draft from read_draft or a builder receipt, with its revision as expectedRevision. operationRefs is the full inventory: select refs needed within preparation.operationRefLimit; use separate prepare_draft reads if needed. Returns the saved draft without another read. Invalid/stale plans save nothing. Single-field edits use this operation too. Users retain permission, publication and run control.";
 /** Creation describes workflow content; the capability compiles mechanical mutation structure. */
-export declare const AUTOMATION_BUILDER_CREATION_INSTRUCTIONS = "Return only JSON using {\"version\":1,\"settings\":{...},\"steps\":[{\"key\":\"first\",\"kind\":\"tool\"|\"agent\",...}]}. Follow authoringReference.createPlanExample and creationRules. settings is optional; steps are ordered with unique keys. Runtime generates IDs, parents, indices and mutation wrappers. Bind prior $key results explicitly. Tool steps need title and exact operation; agent steps need title, exact modelProfileId and prompt. Use documented defaults and tool schemas. Choose each operation's output channel: text may be a count/status summary; data without pointer passes its whole structured result when provided. Field pointers require known fields. Result and acceptance are sibling agent fields. A parallel step is {key,kind:parallel,branches:[stepArrays]}. Leave unspecified timing to the user. Save only an inactive draft; never execute future steps.";
+export declare const AUTOMATION_BUILDER_CREATION_INSTRUCTIONS = "Return only JSON using {\"version\":1,\"settings\":{...},\"steps\":[{\"key\":\"first\",\"kind\":\"tool\"|\"agent\",...}]}. Follow authoringReference.createPlanExample and creationRules. settings is optional; steps are ordered with unique keys. Runtime generates IDs, parents, indices and mutation wrappers. Bind prior $key results explicitly. Tool steps need title and exact operation; agent steps need title, exact modelProfileId and prompt. Use documented defaults and tool schemas. Choose output channels using the selected operation.outputChannels and authoringReference.bindings. Agents need declared JSON results for data. Result and acceptance are sibling agent fields. A parallel step is {key,kind:parallel,branches:[stepArrays]}. Leave unspecified timing to the user. Save only an inactive draft; never execute future steps.";

package/dist/src/runtime/capabilities/automation-builder/payload-instructions.js

@@ -1,6 +1,6 @@
 /** Complete grammar is supplied as bounded passive evidence by prepare_draft. */
-export const AUTOMATION_BUILDER_PAYLOAD_INSTRUCTIONS = "Return only JSON following authoringReference from prepare_draft. Use version:1 with commands:[{as,mutation}] for existing drafts. Save all related changes together; new nodes omit id and use earlier aliases in bindings. Outputs never pass implicitly. Agent inputs and tool controls are binding maps; payload is a separate binding. Match exact operation schemas and model IDs. Choose each tool's documented output channel: text may be counts/status only; data without pointer passes the whole structured result when provided. Use data pointers only for known fields; agents need declared JSON output for data bindings. Inputs, limits, controls and selected tools replace their entire field. Never invent schedules or execute future steps.";
+export const AUTOMATION_BUILDER_PAYLOAD_INSTRUCTIONS = "Return only JSON following authoringReference from prepare_draft. Use version:1 with commands:[{as,mutation}] for existing drafts. Save all related changes together; new nodes omit id and use earlier aliases in bindings. Outputs never pass implicitly. Agent inputs and tool controls are binding maps; payload is a separate binding. Match exact operation schemas and model IDs. Choose output channels using the selected operation.outputChannels and authoringReference.bindings. Agents need declared JSON results for data. Inputs, limits, controls and selected tools replace their entire field. Never invent schedules or execute future steps.";
 export const AUTOMATION_BUILDER_CREATE_SUMMARY = "Create the entire connected automation from settings and ordered steps in one write; Runtime generates IDs and positions. Discover with browse_catalog, then prepare_draft for exact schemas and the authoring reference for planJson. Returns revision 1, generated IDs and the exact saved draft for inspection; no empty draft or separate step edits are needed. Saves only a draft; the user grants permissions, publishes and runs it.";
 export const AUTOMATION_BUILDER_APPLY_SUMMARY = "Save related edits atomically. Use the saved draft from read_draft or a builder receipt, with its revision as expectedRevision. operationRefs is the full inventory: select refs needed within preparation.operationRefLimit; use separate prepare_draft reads if needed. Returns the saved draft without another read. Invalid/stale plans save nothing. Single-field edits use this operation too. Users retain permission, publication and run control.";
 /** Creation describes workflow content; the capability compiles mechanical mutation structure. */
-export const AUTOMATION_BUILDER_CREATION_INSTRUCTIONS = "Return only JSON using {\"version\":1,\"settings\":{...},\"steps\":[{\"key\":\"first\",\"kind\":\"tool\"|\"agent\",...}]}. Follow authoringReference.createPlanExample and creationRules. settings is optional; steps are ordered with unique keys. Runtime generates IDs, parents, indices and mutation wrappers. Bind prior $key results explicitly. Tool steps need title and exact operation; agent steps need title, exact modelProfileId and prompt. Use documented defaults and tool schemas. Choose each operation's output channel: text may be a count/status summary; data without pointer passes its whole structured result when provided. Field pointers require known fields. Result and acceptance are sibling agent fields. A parallel step is {key,kind:parallel,branches:[stepArrays]}. Leave unspecified timing to the user. Save only an inactive draft; never execute future steps.";
+export const AUTOMATION_BUILDER_CREATION_INSTRUCTIONS = "Return only JSON using {\"version\":1,\"settings\":{...},\"steps\":[{\"key\":\"first\",\"kind\":\"tool\"|\"agent\",...}]}. Follow authoringReference.createPlanExample and creationRules. settings is optional; steps are ordered with unique keys. Runtime generates IDs, parents, indices and mutation wrappers. Bind prior $key results explicitly. Tool steps need title and exact operation; agent steps need title, exact modelProfileId and prompt. Use documented defaults and tool schemas. Choose output channels using the selected operation.outputChannels and authoringReference.bindings. Agents need declared JSON results for data. Result and acceptance are sibling agent fields. A parallel step is {key,kind:parallel,branches:[stepArrays]}. Leave unspecified timing to the user. Save only an inactive draft; never execute future steps.";

package/dist/src/runtime/capabilities/automation-builder/tool-contract.d.ts

@@ -22,7 +22,7 @@ export declare const automationBuilderToolContract: {
         };
         readonly selectionControlIds: readonly ["title"];
         readonly payload: {
-            readonly instructions: "Return only JSON using {\"version\":1,\"settings\":{...},\"steps\":[{\"key\":\"first\",\"kind\":\"tool\"|\"agent\",...}]}. Follow authoringReference.createPlanExample and creationRules. settings is optional; steps are ordered with unique keys. Runtime generates IDs, parents, indices and mutation wrappers. Bind prior $key results explicitly. Tool steps need title and exact operation; agent steps need title, exact modelProfileId and prompt. Use documented defaults and tool schemas. Choose each operation's output channel: text may be a count/status summary; data without pointer passes its whole structured result when provided. Field pointers require known fields. Result and acceptance are sibling agent fields. A parallel step is {key,kind:parallel,branches:[stepArrays]}. Leave unspecified timing to the user. Save only an inactive draft; never execute future steps.";
+            readonly instructions: "Return only JSON using {\"version\":1,\"settings\":{...},\"steps\":[{\"key\":\"first\",\"kind\":\"tool\"|\"agent\",...}]}. Follow authoringReference.createPlanExample and creationRules. settings is optional; steps are ordered with unique keys. Runtime generates IDs, parents, indices and mutation wrappers. Bind prior $key results explicitly. Tool steps need title and exact operation; agent steps need title, exact modelProfileId and prompt. Use documented defaults and tool schemas. Choose output channels using the selected operation.outputChannels and authoringReference.bindings. Agents need declared JSON results for data. Result and acceptance are sibling agent fields. A parallel step is {key,kind:parallel,branches:[stepArrays]}. Leave unspecified timing to the user. Save only an inactive draft; never execute future steps.";
             readonly kind: "raw_text";
             readonly param: "planJson";
             readonly minBytes: 2;
@@ -59,7 +59,7 @@ export declare const automationBuilderToolContract: {
             readonly param: "planJson";
             readonly minBytes: 2;
             readonly maxBytes: number;
-            readonly instructions: "Return only JSON following authoringReference from prepare_draft. Use version:1 with commands:[{as,mutation}] for existing drafts. Save all related changes together; new nodes omit id and use earlier aliases in bindings. Outputs never pass implicitly. Agent inputs and tool controls are binding maps; payload is a separate binding. Match exact operation schemas and model IDs. Choose each tool's documented output channel: text may be counts/status only; data without pointer passes the whole structured result when provided. Use data pointers only for known fields; agents need declared JSON output for data bindings. Inputs, limits, controls and selected tools replace their entire field. Never invent schedules or execute future steps.";
+            readonly instructions: "Return only JSON following authoringReference from prepare_draft. Use version:1 with commands:[{as,mutation}] for existing drafts. Save all related changes together; new nodes omit id and use earlier aliases in bindings. Outputs never pass implicitly. Agent inputs and tool controls are binding maps; payload is a separate binding. Match exact operation schemas and model IDs. Choose output channels using the selected operation.outputChannels and authoringReference.bindings. Agents need declared JSON results for data. Inputs, limits, controls and selected tools replace their entire field. Never invent schedules or execute future steps.";
         };
     }];
 };

package/dist/src/runtime/capabilities/automations/authoring-catalog.js

@@ -147,7 +147,7 @@ export async function readAutomationAuthoringCatalogOperation(service, automatio
     const selected = catalog.grantableOperations.find(matchesReference);
     if (!selected)
         throw new Error("automation_catalog_operation_not_found");
-    const { fixedParams: _fixedParams, ...operation } = selected;
+    const { fixedParams: _fixedParams, outputChannels: _outputChannels, ...operation } = selected;
     return {
         kind: "automation_authoring_catalog_operation_v1",
         catalogScope: automationAuthoringCatalogScope(automationId),