@abot-ai/runtime 1.6.0 → 1.8.0

package/plugins/system-probe/plugin.json

@@ -4,6 +4,10 @@
   "version": "1.0.0",
   "description": "Inspect current machine health and disk capacity.",
   "extensions": {
+    "ai.abot.compatibility": {
+      "version": 1,
+      "runtimePlatforms": ["linux", "darwin", "win32"]
+    },
     "ai.abot.runtime": {
       "version": 1,
       "entrypoint": "./src/index.cjs",
@@ -17,9 +21,11 @@
             "metadata": {
               "path": {
                 "param": "path",
-                "kind": "string",
-                "default": "/"
+                "kind": "string"
               }
+            },
+            "resultMetadata": {
+              "path": { "path": "data.diskPath", "kind": "preview" }
             }
           },
           "skills": [],

package/plugins/system-probe/source/disk-path.ts

@@ -0,0 +1,8 @@
+/** The Windows default follows the runtime root's actual filesystem volume. */
+export function defaultDiskProbePath(
+  runtimeRoot: string,
+  platform: NodeJS.Platform = process.platform,
+): string {
+  if (platform === "win32") return runtimeRoot;
+  return "/";
+}

package/plugins/system-probe/source/index.ts

@@ -9,6 +9,7 @@ import {
   successResult,
 } from "../../../src/plugin-sdk/index.js";
 
+import { defaultDiskProbePath } from "./disk-path.js";
 import { bytesToGiB, formatDuration, readMachineMetrics } from "./metrics.js";
 
 const ALLOWED_PATH_LOCATIONS = Object.freeze([
@@ -35,10 +36,14 @@ export default defineRuntimePlugin((context) => ({
           executionContext?.runtimePathResolver ?? context.runtimePathResolver,
       };
       try {
-        const target = resolvePluginPath(pathContext, explicitPath ?? "/", {
-          requirePath: true,
-          allowedLocations: ALLOWED_PATH_LOCATIONS,
-        });
+        const target = resolvePluginPath(
+          pathContext,
+          explicitPath ?? defaultDiskProbePath(context.runtimePaths.rootDir),
+          {
+            requirePath: true,
+            allowedLocations: ALLOWED_PATH_LOCATIONS,
+          },
+        );
         let disk:
           | Readonly<{
               totalBytes: number;
@@ -90,7 +95,7 @@ export default defineRuntimePlugin((context) => ({
           `uptime: ${formatDuration(machine.uptimeSeconds)}`,
           `cpu_count: ${machine.cpuCount}`,
           `load_level: ${machine.loadLevel}`,
-          `load_average: ${machine.loadAverage.map((value) => value.toFixed(2)).join(" ")}`,
+          `load_average: ${machine.loadAverage?.map((value) => value.toFixed(2)).join(" ") ?? "unsupported"}`,
           `memory_used: ${bytesToGiB(machine.memoryUsedBytes)} / ${bytesToGiB(machine.memoryTotalBytes)}`,
           `memory_free: ${bytesToGiB(machine.memoryFreeBytes)}`,
           `disk_path: ${target.logicalPath}`,

package/plugins/system-probe/source/machine-load.ts

@@ -0,0 +1,33 @@
+import os from "node:os";
+
+type MachineLoad = Readonly<{
+  loadAverage: readonly number[] | null;
+  loadLevel: "low" | "moderate" | "high" | "unsupported";
+}>;
+
+function supportsLoadAverage(platform: NodeJS.Platform): boolean {
+  return platform !== "win32";
+}
+
+function classifyLoadPerCpu(loadAverage: readonly number[], cpuCount: number) {
+  const average = loadAverage[0] ?? 0;
+  const loadPerCpu = cpuCount > 0 ? average / cpuCount : average;
+  if (loadPerCpu < 0.5) return "low";
+  if (loadPerCpu < 1) return "moderate";
+  return "high";
+}
+
+export function readMachineLoad(
+  platform: NodeJS.Platform,
+  cpuCount: number,
+  readLoadAverage: () => number[] = () => os.loadavg(),
+): MachineLoad {
+  if (!supportsLoadAverage(platform)) {
+    return Object.freeze({ loadAverage: null, loadLevel: "unsupported" });
+  }
+  const loadAverage = Object.freeze(readLoadAverage());
+  return Object.freeze({
+    loadAverage,
+    loadLevel: classifyLoadPerCpu(loadAverage, cpuCount),
+  });
+}

package/plugins/system-probe/source/metrics.ts

@@ -1,5 +1,7 @@
 import os from "node:os";
 
+import { readMachineLoad } from "./machine-load.js";
+
 export function bytesToGiB(bytes: number): string {
   return `${(bytes / 1024 / 1024 / 1024).toFixed(1)} GiB`;
 }
@@ -19,19 +21,15 @@ export function formatDuration(totalSeconds: number): string {
 export function readMachineMetrics() {
   const memoryTotalBytes = os.totalmem();
   const memoryFreeBytes = os.freemem();
-  const loadAverage = os.loadavg();
   const cpuCount = os.cpus().length;
-  const loadPerCpu =
-    cpuCount > 0 ? (loadAverage[0] ?? 0) / cpuCount : (loadAverage[0] ?? 0);
-  const loadLevel =
-    loadPerCpu < 0.5 ? "low" : loadPerCpu < 1 ? "moderate" : "high";
+  const platform = os.platform();
+  const load = readMachineLoad(platform, cpuCount);
   return Object.freeze({
-    platform: os.platform(),
+    platform,
     architecture: os.arch(),
     uptimeSeconds: os.uptime(),
     cpuCount,
-    loadAverage: Object.freeze(loadAverage),
-    loadLevel,
+    ...load,
     memoryTotalBytes,
     memoryFreeBytes,
     memoryUsedBytes: Math.max(0, memoryTotalBytes - memoryFreeBytes),

package/plugins/system-probe/src/index.cjs

@@ -225,8 +225,39 @@ function failureFromError(error, options) {
 // src/capabilities/tool-media.ts
 var TOOL_IMAGE_MAX_BYTES = 10 * 1024 * 1024;
 
+// plugins/system-probe/source/disk-path.ts
+function defaultDiskProbePath(runtimeRoot, platform = process.platform) {
+  if (platform === "win32") return runtimeRoot;
+  return "/";
+}
+
 // plugins/system-probe/source/metrics.ts
+var import_node_os2 = __toESM(require("node:os"), 1);
+
+// plugins/system-probe/source/machine-load.ts
 var import_node_os = __toESM(require("node:os"), 1);
+function supportsLoadAverage(platform) {
+  return platform !== "win32";
+}
+function classifyLoadPerCpu(loadAverage, cpuCount) {
+  const average = loadAverage[0] ?? 0;
+  const loadPerCpu = cpuCount > 0 ? average / cpuCount : average;
+  if (loadPerCpu < 0.5) return "low";
+  if (loadPerCpu < 1) return "moderate";
+  return "high";
+}
+function readMachineLoad(platform, cpuCount, readLoadAverage = () => import_node_os.default.loadavg()) {
+  if (!supportsLoadAverage(platform)) {
+    return Object.freeze({ loadAverage: null, loadLevel: "unsupported" });
+  }
+  const loadAverage = Object.freeze(readLoadAverage());
+  return Object.freeze({
+    loadAverage,
+    loadLevel: classifyLoadPerCpu(loadAverage, cpuCount)
+  });
+}
+
+// plugins/system-probe/source/metrics.ts
 function bytesToGiB(bytes) {
   return `${(bytes / 1024 / 1024 / 1024).toFixed(1)} GiB`;
 }
@@ -242,19 +273,17 @@ function formatDuration(totalSeconds) {
   return parts.join(" ");
 }
 function readMachineMetrics() {
-  const memoryTotalBytes = import_node_os.default.totalmem();
-  const memoryFreeBytes = import_node_os.default.freemem();
-  const loadAverage = import_node_os.default.loadavg();
-  const cpuCount = import_node_os.default.cpus().length;
-  const loadPerCpu = cpuCount > 0 ? (loadAverage[0] ?? 0) / cpuCount : loadAverage[0] ?? 0;
-  const loadLevel = loadPerCpu < 0.5 ? "low" : loadPerCpu < 1 ? "moderate" : "high";
+  const memoryTotalBytes = import_node_os2.default.totalmem();
+  const memoryFreeBytes = import_node_os2.default.freemem();
+  const cpuCount = import_node_os2.default.cpus().length;
+  const platform = import_node_os2.default.platform();
+  const load = readMachineLoad(platform, cpuCount);
   return Object.freeze({
-    platform: import_node_os.default.platform(),
-    architecture: import_node_os.default.arch(),
-    uptimeSeconds: import_node_os.default.uptime(),
+    platform,
+    architecture: import_node_os2.default.arch(),
+    uptimeSeconds: import_node_os2.default.uptime(),
     cpuCount,
-    loadAverage: Object.freeze(loadAverage),
-    loadLevel,
+    ...load,
     memoryTotalBytes,
     memoryFreeBytes,
     memoryUsedBytes: Math.max(0, memoryTotalBytes - memoryFreeBytes)
@@ -281,10 +310,14 @@ var index_default = defineRuntimePlugin((context) => ({
         runtimePathResolver: executionContext?.runtimePathResolver ?? context.runtimePathResolver
       };
       try {
-        const target = resolvePluginPath(pathContext, explicitPath ?? "/", {
-          requirePath: true,
-          allowedLocations: ALLOWED_PATH_LOCATIONS
-        });
+        const target = resolvePluginPath(
+          pathContext,
+          explicitPath ?? defaultDiskProbePath(context.runtimePaths.rootDir),
+          {
+            requirePath: true,
+            allowedLocations: ALLOWED_PATH_LOCATIONS
+          }
+        );
         let disk;
         let diskStatus = "available";
         try {
@@ -328,7 +361,7 @@ var index_default = defineRuntimePlugin((context) => ({
           `uptime: ${formatDuration(machine.uptimeSeconds)}`,
           `cpu_count: ${machine.cpuCount}`,
           `load_level: ${machine.loadLevel}`,
-          `load_average: ${machine.loadAverage.map((value) => value.toFixed(2)).join(" ")}`,
+          `load_average: ${machine.loadAverage?.map((value) => value.toFixed(2)).join(" ") ?? "unsupported"}`,
           `memory_used: ${bytesToGiB(machine.memoryUsedBytes)} / ${bytesToGiB(machine.memoryTotalBytes)}`,
           `memory_free: ${bytesToGiB(machine.memoryFreeBytes)}`,
           `disk_path: ${target.logicalPath}`,

package/plugins/web/README.md

@@ -130,5 +130,5 @@ discovery of a URL absent from the catalog. It does not require a search key,
 external network, or model invocation.
 
 Run `npm run build:plugins` followed by `npm run validate` from the repository
-root. Actual source availability is a separate bounded direct-HTTP check;
-model/client acceptance uses the maintained, separately authorized live smoke.
+root. These offline checks do not establish availability of external sources or
+model behavior in a live client session.

package/plugins/web/plugin.json

@@ -4,6 +4,10 @@
   "version": "0.1.0",
   "description": "Search the public web and fetch readable content from public URLs.",
   "extensions": {
+    "ai.abot.compatibility": {
+      "version": 1,
+      "runtimePlatforms": ["linux", "darwin", "win32"]
+    },
     "ai.abot.runtime": {
       "version": 1,
       "entrypoint": "./src/index.cjs",
@@ -48,6 +52,7 @@
           "operations": {
             "search_one": {
               "summary": "Search real public Internet domains for one current or external query; never use this operation for local files, configured work paths, or project state.",
+              "outputChannels": {"text": "content", "data": "metadata"},
               "input": {
                 "type": "object",
                 "additionalProperties": false,
@@ -65,6 +70,7 @@
             },
             "search_many": {
               "summary": "Search real public Internet domains for up to five distinct external queries in parallel; never use this operation for local files, configured work paths, or project state.",
+              "outputChannels": {"text": "content", "data": "metadata"},
               "input": {
                 "type": "object",
                 "additionalProperties": false,
@@ -101,6 +107,7 @@
           "operations": {
             "fetch_one": {
               "summary": "Fetch readable content from one real public http(s) domain URL; never use this operation for local files, configured work paths, localhost, or private-network targets.",
+              "outputChannels": {"text": "content", "data": "metadata"},
               "input": {
                 "type": "object",
                 "additionalProperties": false,
@@ -118,6 +125,7 @@
             },
             "fetch_many": {
               "summary": "Fetch readable content from up to three real public http(s) domain URLs; never use this operation for local files, configured work paths, localhost, or private-network targets.",
+              "outputChannels": {"text": "content", "data": "metadata"},
               "input": {
                 "type": "object",
                 "additionalProperties": false,

package/runtime.config.schema.json

@@ -172,8 +172,14 @@
     },
     "webUi": {
       "type": "object",
-      "description": "Local Web UI startup behavior.",
+      "description": "Local Web UI behavior.",
       "properties": {
+        "pageSize": {
+          "type": "integer",
+          "minimum": 1,
+          "default": 20,
+          "description": "Sessions and messages per Web UI history page, including SPARK."
+        },
         "openOnRuntimeServiceStart": {
           "type": "boolean",
           "default": false,
@@ -329,6 +335,12 @@
           "default": [],
           "description": "Installed plugin or capability ids denied after applying the allow-list.",
           "items": { "type": "string" }
+        },
+        "disabledPluginIds": {
+          "type": "array",
+          "default": [],
+          "description": "Exact plugin ids disabled independently of tool selectors. Entries are literal ids, not wildcards.",
+          "items": { "type": "string" }
         }
       },
       "additionalProperties": false
@@ -501,6 +513,18 @@
                   }
                 }
               },
+              "plugins": {
+                "type": "object",
+                "description": "Runtime-only restrictions applied to the entire request selected by this model profile. Global plugin restrictions still apply.",
+                "properties": {
+                  "deny": {
+                    "type": "array",
+                    "items": { "type": "string" },
+                    "description": "Denied plugin IDs, capability names, plugin.capability selectors, or *. These restrictions do not depend on per-step model overrides."
+                  }
+                },
+                "additionalProperties": false
+              },
               "execution": {
                 "type": "object",
                 "description": "Runtime-only request execution policy for this model profile. Omission selects supervisor-worker-v1; execution-agent-v1 is an explicit per-profile opt-in. This metadata is not forwarded to the model gateway.",

package/src/runtime/README.md

@@ -459,12 +459,22 @@ context admission before a new checkpoint is committed. Controls and payload
 authors do not receive this current supervision capsule.
 
 Every tool and skill binding is declared once by a package under root
-`plugins/`. Runtime config only applies `plugins.enabled`, `plugins.allow`, and
-`plugins.deny`. The request-scoped capability provider projects the effective
+`plugins/`. Runtime config applies `plugins.enabled`, `plugins.allow`,
+`plugins.deny`, and the exact-ID `plugins.disabledPluginIds` block list.
+Exact disabled plugin IDs do not match capability names or qualified selectors. The request-scoped capability provider projects the effective
 registered operations generically for an authorized Worker or root. Adding,
 removing, or renaming a tool must not require a request-runner or role prompt
 branch.
 
+
+A model profile may further narrow this catalog through `plugins.deny`.
+The request captures these selectors from its effective primary profile in the
+existing execution selection, including the saved approval continuation.
+The shared request Tool Registry applies them alongside permission-mode
+restrictions to discovery and execution for both root policies. Per-step model
+overrides cannot change the captured restriction; other requests retain their
+own profile selection. The metadata is not projected to the model gateway.
+
 ABot Studio draft authoring uses the same capability engine. The
 `automation_builder` capability creates a draft from optional `settings` and
 ordered `steps`. Each step has a local `key`; explicit `$key` result bindings

package/dist/src/web-ui/system-host-setup/companion-windows.d.ts

@@ -1,2 +0,0 @@
-import { type CompanionInstallerInput } from "./installer-contract.js";
-export declare function renderWindowsCompanionScript(input: CompanionInstallerInput): string;

package/dist/src/web-ui/system-host-setup/companion-windows.js

@@ -1,108 +0,0 @@
-import { installerMetadataBase64, } from "./installer-contract.js";
-import { COMPANION_NODE_DISTRIBUTIONS, COMPANION_NODE_VERSION, } from "./node-distribution.js";
-import { wrapWindowsSetupScript } from "./windows-script-wrapper.js";
-export function renderWindowsCompanionScript(input) {
-    const metadata = installerMetadataBase64({
-        ...input,
-        nodeVersion: COMPANION_NODE_VERSION,
-        distributions: COMPANION_NODE_DISTRIBUTIONS,
-    });
-    return wrapWindowsSetupScript(String.raw `
-$ErrorActionPreference = 'Stop'
-$ProgressPreference = 'SilentlyContinue'
-$OutputEncoding = New-Object System.Text.UTF8Encoding($false)
-$Metadata = [Text.Encoding]::UTF8.GetString([Convert]::FromBase64String('${metadata}')) | ConvertFrom-Json
-$Temporary = $null
-function Assert-CompanionDirectory {
-  if ((Get-Item -LiteralPath $Base).Attributes -band [IO.FileAttributes]::ReparsePoint) { throw 'The companion installation directory must not be a link.' }
-}
-function Invoke-VerifiedCompanionSetup {
-  if (-not (Test-Path -LiteralPath $Node -PathType Leaf)) { throw 'The cached Node.js runtime is missing. Restore this installation before resuming setup.' }
-  if (-not (Test-Path -LiteralPath $Bundle -PathType Leaf)) { throw 'The cached companion bundle is missing. Restore this installation before resuming setup.' }
-  Assert-CompanionDirectory
-  if ((& $Node --version) -ne $Metadata.nodeVersion -or $LASTEXITCODE -ne 0) { throw 'The dedicated Node.js runtime could not be verified.' }
-  if ((Get-FileHash -LiteralPath $Bundle -Algorithm SHA256).Hash -ne $Metadata.bundleSha256) { throw 'The existing companion bundle does not match its recorded checksum.' }
-  Write-Host 'Connecting this computer and enabling startup at sign-in...'
-  $Setup = @{ url = $Metadata.url; code = $Metadata.code }
-  if ($Metadata.upgradeHostId) { $Setup.upgradeHostId = $Metadata.upgradeHostId }
-  $Payload = $Setup | ConvertTo-Json -Compress
-  $Payload | & $Node $Bundle setup
-  if ($LASTEXITCODE -ne 0) { throw 'Companion setup did not complete. Check the message above before resuming setup.' }
-  Write-Host 'Companion setup completed. Return to ABot to check the computer connection.'
-}
-function Get-VerifiedDownload([string]$Url, [string]$Destination, [string]$ExpectedHash, [string]$Bearer = '') {
-  $Original = [Uri]$Url
-  $Address = $Original
-  if ($Original.Host -eq 'localhost' -or $Original.Host.EndsWith('.localhost')) {
-    $Builder = New-Object UriBuilder($Original)
-    $Builder.Host = '127.0.0.1'
-    $Address = $Builder.Uri
-  }
-  $Request = [Net.HttpWebRequest]::Create($Address)
-  $Request.Host = $Original.Authority
-  $Request.AllowAutoRedirect = $false
-  $Request.Timeout = 300000
-  $Request.ReadWriteTimeout = 300000
-  $Request.Proxy = $null
-  if ($Bearer) { $Request.Headers['Authorization'] = 'Bearer ' + $Bearer }
-  $Response = $null
-  $File = $null
-  try {
-    $Response = $Request.GetResponse()
-    if ([int]$Response.StatusCode -ne 200) { throw 'The download endpoint did not return a file.' }
-    $File = [IO.File]::Open($Destination, [IO.FileMode]::CreateNew)
-    $Response.GetResponseStream().CopyTo($File)
-  } finally {
-    if ($File) { $File.Dispose() }
-    if ($Response) { $Response.Dispose() }
-  }
-  if ((Get-FileHash -LiteralPath $Destination -Algorithm SHA256).Hash -ne $ExpectedHash) {
-    throw 'Checksum verification failed. The downloaded file will not be executed.'
-  }
-}
-try {
-  $Base = Join-Path ([Environment]::GetFolderPath('LocalApplicationData')) 'ABot\HostCompanion'
-  $Architecture = $env:PROCESSOR_ARCHITECTURE
-  if ($env:PROCESSOR_ARCHITEW6432) { $Architecture = $env:PROCESSOR_ARCHITEW6432 }
-  $Key = switch ($Architecture.ToUpperInvariant()) { 'AMD64' { 'win-x64' }; 'ARM64' { 'win-arm64' }; default { throw 'This Windows architecture is not supported by companion setup.' } }
-  $Distribution = $Metadata.distributions.$Key
-  $NodeDirectory = Join-Path $Base ([IO.Path]::GetFileNameWithoutExtension($Distribution.archive))
-  $Node = Join-Path $NodeDirectory 'node.exe'
-  $Bundle = Join-Path $Base ('companion-' + $Metadata.bundleSha256 + '.mjs')
-  $ExistingConnection = Join-Path ([Environment]::GetFolderPath('UserProfile')) '.abot\host-companion\connection.json'
-  $CanResumeCached = (Test-Path -LiteralPath $ExistingConnection -PathType Leaf) -and (Test-Path -LiteralPath $Node -PathType Leaf) -and (Test-Path -LiteralPath $Bundle -PathType Leaf)
-  if ($CanResumeCached) {
-    Invoke-VerifiedCompanionSetup
-    exit 0
-  }
-  if ([DateTimeOffset]::UtcNow -ge [DateTimeOffset]::Parse($Metadata.expiresAt)) { throw 'This setup invitation expired. Download a fresh setup file in ABot.' }
-  [Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol -bor [Net.SecurityProtocolType]::Tls12
-  [IO.Directory]::CreateDirectory($Base) | Out-Null
-  Assert-CompanionDirectory
-  $Temporary = Join-Path $Base ('setup-' + [Guid]::NewGuid().ToString('N'))
-  [IO.Directory]::CreateDirectory($Temporary) | Out-Null
-  if (-not (Test-Path -LiteralPath $Node -PathType Leaf)) {
-    Write-Host 'Downloading the verified per-user Node.js runtime...'
-    $Archive = Join-Path $Temporary 'node.zip'
-    Get-VerifiedDownload ('https://nodejs.org/dist/' + $Metadata.nodeVersion + '/' + $Distribution.archive) $Archive $Distribution.sha256
-    $Extracted = Join-Path $Temporary 'node'
-    Expand-Archive -LiteralPath $Archive -DestinationPath $Extracted
-    Move-Item -LiteralPath (Join-Path $Extracted ([IO.Path]::GetFileNameWithoutExtension($Distribution.archive))) -Destination $NodeDirectory
-  }
-  Write-Host 'Downloading and verifying the ABot companion...'
-  $Candidate = Join-Path $Temporary 'companion.mjs'
-  Get-VerifiedDownload ($Metadata.url + '/web-api/runtime/system-host/bundle') $Candidate $Metadata.bundleSha256 $Metadata.code
-  if (-not (Test-Path -LiteralPath $Bundle)) { Move-Item -LiteralPath $Candidate -Destination $Bundle }
-  Invoke-VerifiedCompanionSetup
-} catch {
-  Write-Host ('Setup failed: ' + $_.Exception.Message) -ForegroundColor Red
-  exit 1
-} finally {
-  if ($Temporary -and (Test-Path -LiteralPath $Temporary)) {
-    $ResolvedBase = [IO.Path]::GetFullPath($Base).TrimEnd('\') + '\'
-    $ResolvedTemporary = [IO.Path]::GetFullPath($Temporary)
-    if ($ResolvedTemporary.StartsWith($ResolvedBase, [StringComparison]::OrdinalIgnoreCase)) { Remove-Item -LiteralPath $ResolvedTemporary -Recurse -Force }
-  }
-}
-`);
-}

package/docs/publishing.md

@@ -1,167 +0,0 @@
-# Publishing
-
-This checklist covers the repo state expected before opening `abot` as a
-public Git repository or publishing a package artifact.
-
-The private development checkout is the canonical product source. Its
-`package.json` sets `private: true`, so direct `npm publish` is blocked. Every
-public Git and npm release must be created from a freshly built and verified
-public snapshot of one exact private commit. Never copy or publish the private
-checkout directly, and never develop or hotfix product changes in the public
-repository.
-
-## 1. Public Metadata
-
-Keep `package.json` metadata current:
-
-- `description`
-- `license`
-- `keywords`
-- `engines.node`
-- public `exports`
-- package `files`
-
-Add the real public repository URL after the new public repository exists. Do
-not publish placeholder repository, bugs, or homepage URLs.
-
-## 2. Local Init Flow
-
-A fresh source checkout should be able to start with:
-
-```bash
-npm install
-npm run init -- --provider ollama --model <model-id>
-```
-
-`npm run init` must create only local ignored files:
-
-- `.env`
-- `local/runtime.config.json`
-- `local/request-runner.config.json`
-- `local/models/default.config.json`
-- `.runtime/compiled`
-- `.runtime/shared/logs`
-- `.runtime/prod`
-- `.runtime/dev`
-
-It must not commit or generate secrets. The provider and model are explicit;
-use `npm run init -- --provider openai --model <model-id>` for OpenAI.
-
-## 3. Secrets And Generated State
-
-Before publishing, confirm the repository does not include:
-
-- `.env`
-- `runtime.config.json`
-- `local/runtime.config.json`
-- `.runtime/`
-- `logs/`
-- `sessions/`
-- `dist/`
-- `memory/`
-- `*.bak`
-- `*:Zone.Identifier`
-
-Secrets are referenced by environment variable name only, for example
-`OPENAI_API_KEY` and `AGENT_BRIDGE_TOKEN`.
-
-## 4. Package Surface
-
-The public library surface is the package `exports` map. Hosts should not import
-internal runtime files directly. The installed command surface is the `abot`
-binary with its documented `init`, `add-model`, and `start` commands.
-
-Source-checkout scripts such as `npm run dev`, `npm run model-gateway`, and
-`npm run web-ui` are repository tooling; they are not installed CLI commands.
-Package consumers should use `npx abot`.
-
-Inside the verified public snapshot, run:
-
-```bash
-npm run check:runtime-package
-npm run check:publication
-npm run check:public-snapshot
-```
-
-`check:runtime-package` validates the packed artifact. `check:publication`
-validates public repo hygiene. `check:public-snapshot` verifies every payload
-file against `PUBLIC-SNAPSHOT.json`; the public `npm run validate` chain runs
-all three checks. For a public package, the packed-artifact check also rejects
-any plugin set other than the exact public allowlist.
-
-## 5. Examples And Docs
-
-Keep these public onboarding files in sync:
-
-- `README.md`
-- `docs/installation.md`
-- `docs/configuration.md`
-- `docs/running-locally.md`
-- `docs/architecture.md`
-- `docs/bridge-compatibility.md`
-- `docs/known-limitations.md`
-- `docs/plugins.md`
-- `docs/troubleshooting.md`
-- `src/runtime/README.md`
-- `examples/minimal-runtime-composition.ts`
-- `examples/runtime.config.example.json`
-- `examples/request-runner.config.example.json`
-- `plugins/`
-
-Example config must stay sanitized and must not include host-specific URLs
-except local development defaults.
-
-## 6. Build A Fresh Snapshot For Every Release
-
-Select one clean, synchronized, fully tracked private commit. Validate it, then
-build a new snapshot into a fresh empty directory:
-
-```bash
-npm run validate
-npm run build:public-snapshot -- --output /absolute/path/to/empty/public-snapshot
-```
-
-`build:public-snapshot` is a private-source export command. It is intentionally
-absent from the exported public package. Run it again for every release; do not
-reuse or edit an older snapshot.
-
-The generated `PUBLIC-SNAPSHOT.json` records the exact exported tree. Validate
-the snapshot itself before producing a package artifact:
-
-```bash
-cd /absolute/path/to/empty/public-snapshot
-npm ci --ignore-scripts
-npm run validate
-npm pack
-```
-
-If validation finds a defect or an incomplete dependency closure, stop and fix
-it in the private canonical repository. Validate that change there and generate
-a completely new snapshot. Do not patch the generated snapshot in place.
-
-## 7. Validate And Promote The Frozen Artifacts
-
-Install the exact tarball from the verified snapshot into a fresh consumer
-project. Exercise the installed binary, not a source-tree fallback:
-
-```bash
-npm install /absolute/path/to/abot-ai-runtime-<version>.tgz
-npx --no-install abot --help
-```
-
-Also verify empty-config Web UI onboarding, non-destructive provider/profile
-addition, default-profile selection, and the packaged Web UI. For an upgrade,
-install the candidate tarball over a real prior-version consumer without
-rerunning init and confirm that its local config remains unchanged.
-
-The public repository is a generated distribution projection, not an
-independent maintenance branch. Promote only the contents of the verified
-snapshot. Any proposed public-repository fix must first return to the private
-canonical repository and pass the complete flow again.
-
-Publishing the frozen snapshot, running `npm publish`, pushing a public tag, and
-creating a GitHub Release are separate external mutations. Perform them only
-after explicit authorization names the exact private commit, snapshot tree,
-tarball, and version. Never overwrite a version already published to npm; a
-post-release defect ships from a new private commit under a new semantic
-version.