@foldrun/core 7.0.2 → 8.0.0

package/dist/src/mail.js

@@ -197,7 +197,7 @@ export async function mailWanted(tenant, email, category, workspace = null) {
 // on dev let anyone send ~86k invites a day from hello@foldrun.io).
 const UNCAPPED = new Set(["security", "billing", "account"]);
 const PLATFORM_MAX_RECIPIENTS = 10;
-const platformDayCap = (category) => Number(process.env[category === "invites" ? "FOLDRUN_PLATFORM_INVITES_PER_DAY" : "FOLDRUN_PLATFORM_MAIL_PER_DAY"]) ||
+const platformDayCap = (category) => Number(platform.setting(category === "invites" ? "FOLDRUN_PLATFORM_INVITES_PER_DAY" : "FOLDRUN_PLATFORM_MAIL_PER_DAY")) ||
     (category === "invites" ? 25 : 200);
 const platformSent = new Map();
 /** Recipients this account may still send to today on the platform's key. */

package/dist/src/notify.js

@@ -58,7 +58,7 @@ export function platformMail(tenant) {
         return own;
     const key = process.env.FOLDRUN_RESEND_API_KEY;
     if (key)
-        return { key, from: process.env.FOLDRUN_EMAIL_FROM || "foldrun <hello@foldrun.io>" };
+        return { key, from: platform.setting("FOLDRUN_EMAIL_FROM") || "foldrun <hello@foldrun.io>" };
     return own;
 }
 /** The account's own Resend key and sender, or null when it has none. */

package/dist/src/platform.d.ts

@@ -142,6 +142,15 @@ export interface PlatformHooks {
      *  operator's accounts do so; every customer brings their own API key.
      *  Default: yes — a laptop or a self-hosted install is its own operator. */
     platformKeyAllowed(tenant: string): boolean;
+    /**
+     * An operator setting, by the environment variable that used to hold it
+     * (30 Oct 2026): the platform answers with the operator's value where one
+     * is set (its settings store) and the variable otherwise, spelled as the
+     * variable would be. Read where core reads FOLDRUN_EMAIL_FROM, the
+     * platform mail caps and the step sizes. Default: the variable itself —
+     * a laptop or the CLI reads its environment as before.
+     */
+    setting(env: string): string | undefined;
     /**
      * Where the platform's built-in tools sit on disk, materialised at boot —
      * a shelf every account reads, beneath its own library. A name found in

package/dist/src/platform.js

@@ -42,6 +42,7 @@ const local = {
     workspaceChanged() { },
     sandboxResumable: () => false,
     platformKeyAllowed: () => true,
+    setting: (env) => process.env[env],
     galleryDir: () => null,
     noteOAuthRefresh: async () => undefined,
     fetchUntrusted: Object.assign((url, init) => fetch(url, init), { [LAPTOP_FETCH]: true }),

package/dist/src/run-container.js

@@ -18,6 +18,7 @@
 // The runner image bundles @foldrun/core itself, so the driver runs the same
 // executeStep the server would — one implementation, two homes.
 import { isHookRecord } from "./hooks.js";
+import { platform } from "./platform.js";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
@@ -1451,8 +1452,8 @@ export function k8sMemory(value) {
 export function sizeLimits(size) {
     if (size === "small") {
         return {
-            cpus: process.env.FOLDRUN_RUNNER_CPUS_SMALL ?? "1",
-            memory: process.env.FOLDRUN_RUNNER_MEMORY_SMALL ?? "1Gi",
+            cpus: platform.setting("FOLDRUN_RUNNER_CPUS_SMALL") ?? "1",
+            memory: platform.setting("FOLDRUN_RUNNER_MEMORY_SMALL") ?? "1Gi",
         };
     }
     if (size === "heavy") {
@@ -1462,13 +1463,13 @@ export function sizeLimits(size) {
         // cpus figure is both the rate its seconds are priced at and, since
         // 26 Oct 2026, the cores the sandbox is capped at.
         return {
-            cpus: process.env.FOLDRUN_RUNNER_CPUS_HEAVY ?? "4",
-            memory: process.env.FOLDRUN_RUNNER_MEMORY_HEAVY ?? "8Gi",
+            cpus: platform.setting("FOLDRUN_RUNNER_CPUS_HEAVY") ?? "4",
+            memory: platform.setting("FOLDRUN_RUNNER_MEMORY_HEAVY") ?? "8Gi",
         };
     }
     return {
-        cpus: process.env.FOLDRUN_RUNNER_CPUS ?? "2",
-        memory: process.env.FOLDRUN_RUNNER_MEMORY ?? "2g",
+        cpus: platform.setting("FOLDRUN_RUNNER_CPUS") ?? "2",
+        memory: platform.setting("FOLDRUN_RUNNER_MEMORY") ?? "2g",
     };
 }
 /**

package/dist/src/store.d.ts

@@ -1397,6 +1397,13 @@ export interface StepRecord {
         txBytes: number | null;
     } | null;
 }
+/** A run's prices as they stood when it was admitted: the operator
+ *  settings' version and the figures themselves, by name. */
+export interface PriceSnapshot {
+    version: number;
+    at: string;
+    values: Record<string, number>;
+}
 export interface RunRecord {
     id: string;
     flow: string;
@@ -1405,6 +1412,12 @@ export interface RunRecord {
     status: "queued" | "running" | "awaiting-approval" | "completed" | "failed";
     startedAt: string;
     finishedAt: string | null;
+    /** The prices the run was admitted under — the platform's run-start
+     *  snapshot of its operator settings (30 Oct 2026). Its settlement and
+     *  its `budget:` read these, never a price changed while it ran. Opaque
+     *  to core; absent on a laptop, and on runs from before snapshots (those
+     *  price at the live figures). */
+    pricing?: PriceSnapshot | null;
     /** Set when a worker parked this run at an approval gate and returned its
      *  slot to the queue. The approval API re-enqueues exactly when this is
      *  set — without the marker it would also re-enqueue runs whose starting

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@foldrun/core",
-  "version": "7.0.2",
+  "version": "8.0.0",
   "description": "Agents are just folders. The format, the runner, the checks.",
   "license": "FSL-1.1-ALv2",
   "type": "module",

package/src/mail.ts

@@ -268,7 +268,7 @@ export async function mailWanted(tenant: string, email: string, category: MailCa
 const UNCAPPED = new Set<string>(["security", "billing", "account"]);
 const PLATFORM_MAX_RECIPIENTS = 10;
 const platformDayCap = (category: string) =>
-  Number(process.env[category === "invites" ? "FOLDRUN_PLATFORM_INVITES_PER_DAY" : "FOLDRUN_PLATFORM_MAIL_PER_DAY"]) ||
+  Number(platform.setting(category === "invites" ? "FOLDRUN_PLATFORM_INVITES_PER_DAY" : "FOLDRUN_PLATFORM_MAIL_PER_DAY")) ||
   (category === "invites" ? 25 : 200);
 const platformSent = new Map<string, number>();
 

package/src/notify.ts

@@ -58,7 +58,7 @@ export function platformMail(tenant: string): { key: string; from: string } | nu
   const own = accountMail(tenant);
   if (own && getSecret(tenant, "EMAIL_FROM")?.value?.trim()) return own;
   const key = process.env.FOLDRUN_RESEND_API_KEY;
-  if (key) return { key, from: process.env.FOLDRUN_EMAIL_FROM || "foldrun <hello@foldrun.io>" };
+  if (key) return { key, from: platform.setting("FOLDRUN_EMAIL_FROM") || "foldrun <hello@foldrun.io>" };
   return own;
 }
 

package/src/platform.ts

@@ -149,6 +149,15 @@ export interface PlatformHooks {
    *  operator's accounts do so; every customer brings their own API key.
    *  Default: yes — a laptop or a self-hosted install is its own operator. */
   platformKeyAllowed(tenant: string): boolean;
+  /**
+   * An operator setting, by the environment variable that used to hold it
+   * (30 Oct 2026): the platform answers with the operator's value where one
+   * is set (its settings store) and the variable otherwise, spelled as the
+   * variable would be. Read where core reads FOLDRUN_EMAIL_FROM, the
+   * platform mail caps and the step sizes. Default: the variable itself —
+   * a laptop or the CLI reads its environment as before.
+   */
+  setting(env: string): string | undefined;
   /**
    * Where the platform's built-in tools sit on disk, materialised at boot —
    * a shelf every account reads, beneath its own library. A name found in
@@ -250,6 +259,7 @@ const local: PlatformHooks = {
   workspaceChanged() {},
   sandboxResumable: () => false,
   platformKeyAllowed: () => true,
+  setting: (env) => process.env[env],
   galleryDir: () => null,
   noteOAuthRefresh: async () => undefined,
   fetchUntrusted: Object.assign((url: string, init?: RequestInit) => fetch(url, init), { [LAPTOP_FETCH]: true }),

package/src/run-container.ts

@@ -21,6 +21,7 @@
 import type { RoomLevel } from "./store.ts";
 import type { PeerInfo } from "./operator.ts";
 import { isHookRecord, type HookRecord } from "./hooks.ts";
+import { platform } from "./platform.ts";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
@@ -1730,8 +1731,8 @@ export function k8sMemory(value: string): string {
 export function sizeLimits(size?: "small" | "large" | "heavy"): { cpus: string; memory: string } {
   if (size === "small") {
     return {
-      cpus: process.env.FOLDRUN_RUNNER_CPUS_SMALL ?? "1",
-      memory: process.env.FOLDRUN_RUNNER_MEMORY_SMALL ?? "1Gi",
+      cpus: platform.setting("FOLDRUN_RUNNER_CPUS_SMALL") ?? "1",
+      memory: platform.setting("FOLDRUN_RUNNER_MEMORY_SMALL") ?? "1Gi",
     };
   }
   if (size === "heavy") {
@@ -1741,13 +1742,13 @@ export function sizeLimits(size?: "small" | "large" | "heavy"): { cpus: string;
     // cpus figure is both the rate its seconds are priced at and, since
     // 26 Oct 2026, the cores the sandbox is capped at.
     return {
-      cpus: process.env.FOLDRUN_RUNNER_CPUS_HEAVY ?? "4",
-      memory: process.env.FOLDRUN_RUNNER_MEMORY_HEAVY ?? "8Gi",
+      cpus: platform.setting("FOLDRUN_RUNNER_CPUS_HEAVY") ?? "4",
+      memory: platform.setting("FOLDRUN_RUNNER_MEMORY_HEAVY") ?? "8Gi",
     };
   }
   return {
-    cpus: process.env.FOLDRUN_RUNNER_CPUS ?? "2",
-    memory: process.env.FOLDRUN_RUNNER_MEMORY ?? "2g",
+    cpus: platform.setting("FOLDRUN_RUNNER_CPUS") ?? "2",
+    memory: platform.setting("FOLDRUN_RUNNER_MEMORY") ?? "2g",
   };
 }
 

package/src/store.ts

@@ -3674,6 +3674,14 @@ export interface StepRecord {
   } | null;
 }
 
+/** A run's prices as they stood when it was admitted: the operator
+ *  settings' version and the figures themselves, by name. */
+export interface PriceSnapshot {
+  version: number;
+  at: string;
+  values: Record<string, number>;
+}
+
 export interface RunRecord {
   id: string;
   flow: string; // flow name, or "adhoc:<agent>" for direct agent runs
@@ -3682,6 +3690,12 @@ export interface RunRecord {
   status: "queued" | "running" | "awaiting-approval" | "completed" | "failed";
   startedAt: string;
   finishedAt: string | null;
+  /** The prices the run was admitted under — the platform's run-start
+   *  snapshot of its operator settings (30 Oct 2026). Its settlement and
+   *  its `budget:` read these, never a price changed while it ran. Opaque
+   *  to core; absent on a laptop, and on runs from before snapshots (those
+   *  price at the live figures). */
+  pricing?: PriceSnapshot | null;
   /** Set when a worker parked this run at an approval gate and returned its
    *  slot to the queue. The approval API re-enqueues exactly when this is
    *  set — without the marker it would also re-enqueue runs whose starting