@nylorun/runtime 0.27.0-beta → 0.28.0-beta

package/dist/management-openapi.json

@@ -2,20 +2,20 @@
   "openapi": "3.2.0",
   "info": {
     "title": "Nylorun Management API",
-    "version": "0.27.0-beta",
+    "version": "0.28.0-beta",
     "x-nylorun-protocol": {
-      "min": 15,
-      "max": 15,
+      "min": 16,
+      "max": 17,
       "features": [
         "studio-principal",
         "artifacts",
         "management-api",
         "resource-server",
-        "environments",
         "model-inputs",
         "flat-manifest",
-        "environment-manifests",
         "harness-boundary",
+        "agents",
+        "session-queue",
         "tenant-fixture-model",
         "transcript-events",
         "subject-headers",
@@ -96,12 +96,17 @@
               "request_rejected",
               "invalid_request",
               "subject_required",
-              "environment_not_granted",
-              "environment_busy",
-              "environment_unavailable",
+              "agent_not_granted",
+              "session_busy",
+              "queue_full",
+              "trigger_expired",
+              "trigger_paused",
+              "memory_conflict",
+              "agent_busy",
+              "agent_unavailable",
               "placement_refused",
-              "environment_lost",
-              "environment_owner_mismatch",
+              "agent_lost",
+              "agent_owner_mismatch",
               "harness_mismatch",
               "session_closed",
               "issuer_unavailable",
@@ -109,9 +114,9 @@
               "credential_rejected",
               "mcp_preview_failed",
               "credential_conflict",
-              "environment_immutable",
+              "agent_fixed_field",
               "secret_not_in_manifest",
-              "environment_unsuitable",
+              "manifest_inconsistent",
               "manifest_not_found",
               "manifest_in_use",
               "manifest_changed",
@@ -735,7 +740,7 @@
             "type": "string",
             "enum": [
               "sessions",
-              "environments",
+              "agents",
               "all"
             ]
           },
@@ -1367,6 +1372,66 @@
                 "type": "integer",
                 "exclusiveMinimum": 0
               },
+              "triggersPerAgent": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "triggerMinIntervalMs": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "triggerRunsPerHour": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "triggerJitterPercent": {
+                "type": "integer",
+                "minimum": 0
+              },
+              "triggerJitterMaxMs": {
+                "type": "integer",
+                "minimum": 0
+              },
+              "triggerPromptChars": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "triggerRunRetentionMs": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "webhookBodyBytes": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "wakeMaxAheadMs": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "wakeNoteChars": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "memoryBytes": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "memoriesPerAgent": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "memoryIndexLines": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "memoryIndexBytes": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "sessionQueuedMessages": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
               "flowConcurrency": {
                 "type": "integer",
                 "exclusiveMinimum": 0
@@ -1433,6 +1498,21 @@
               "toolRuleFieldChars",
               "toolRuleTextChars",
               "modelBudgets",
+              "triggersPerAgent",
+              "triggerMinIntervalMs",
+              "triggerRunsPerHour",
+              "triggerJitterPercent",
+              "triggerJitterMaxMs",
+              "triggerPromptChars",
+              "triggerRunRetentionMs",
+              "webhookBodyBytes",
+              "wakeMaxAheadMs",
+              "wakeNoteChars",
+              "memoryBytes",
+              "memoriesPerAgent",
+              "memoryIndexLines",
+              "memoryIndexBytes",
+              "sessionQueuedMessages",
               "flowConcurrency",
               "flowMapItems",
               "flowLoopIterations"
@@ -1659,6 +1739,66 @@
                 "type": "integer",
                 "exclusiveMinimum": 0
               },
+              "triggersPerAgent": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "triggerMinIntervalMs": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "triggerRunsPerHour": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "triggerJitterPercent": {
+                "type": "integer",
+                "minimum": 0
+              },
+              "triggerJitterMaxMs": {
+                "type": "integer",
+                "minimum": 0
+              },
+              "triggerPromptChars": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "triggerRunRetentionMs": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "webhookBodyBytes": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "wakeMaxAheadMs": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "wakeNoteChars": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "memoryBytes": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "memoriesPerAgent": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "memoryIndexLines": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "memoryIndexBytes": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "sessionQueuedMessages": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
               "flowConcurrency": {
                 "type": "integer",
                 "exclusiveMinimum": 0
@@ -2010,7 +2150,7 @@
             "type": "string",
             "enum": [
               "tenant",
-              "agent",
+              "manifest",
               "turn"
             ]
           },
@@ -2062,7 +2202,7 @@
                   "type": "string",
                   "enum": [
                     "tenant",
-                    "agent",
+                    "manifest",
                     "turn"
                   ]
                 },
@@ -2114,7 +2254,7 @@
                   "type": "string",
                   "enum": [
                     "tenant",
-                    "agent",
+                    "manifest",
                     "turn"
                   ]
                 },
@@ -2777,12 +2917,6 @@
           "agentId": {
             "type": "string"
           },
-          "environmentId": {
-            "type": [
-              "string",
-              "null"
-            ]
-          },
           "complete": {
             "type": "boolean"
           },
@@ -2826,7 +2960,7 @@
                 "credential": {
                   "type": "object",
                   "properties": {
-                    "environmentId": {
+                    "agentId": {
                       "type": "string"
                     },
                     "name": {
@@ -2837,7 +2971,7 @@
                     }
                   },
                   "required": [
-                    "environmentId",
+                    "agentId",
                     "name"
                   ],
                   "additionalProperties": false
@@ -2861,7 +2995,6 @@
         },
         "required": [
           "agentId",
-          "environmentId",
           "complete",
           "entries"
         ],
@@ -2876,11 +3009,7 @@
           },
           "agentId": {
             "type": "string",
-            "minLength": 1
-          },
-          "environmentId": {
-            "type": "string",
-            "description": "An Environment id, such as `user-42` or `users/alice/web`"
+            "description": "An Agent id, such as `triage` or `users/alice/triage`"
           }
         },
         "required": [
@@ -3009,9 +3138,9 @@
             "type": "string",
             "pattern": "^[A-Za-z0-9_-]{1,64}$"
           },
-          "environmentId": {
+          "agentId": {
             "type": "string",
-            "description": "An Environment id, such as `user-42` or `users/alice/web`"
+            "description": "An Agent id, such as `triage` or `users/alice/triage`"
           }
         },
         "required": [
@@ -3281,7 +3410,7 @@
                 "agents:read",
                 "agents:write",
                 "sessions:own",
-                "environments:write",
+                "agent-manifests:write",
                 "studio"
               ]
             }
@@ -3303,13 +3432,6 @@
               }
             ]
           },
-          "environments": {
-            "type": "array",
-            "items": {
-              "type": "string"
-            },
-            "description": "A token caller's Environment grants (empty reaches none); absent when no grant limits the caller"
-          },
           "via": {
             "type": "string",
             "description": "How the caller authenticated: `application:<principalId>`, `management:<principalId>`, `subject` or `issuer:<name>`"
@@ -3337,7 +3459,7 @@
           "turnId": {
             "type": "string"
           },
-          "agentId": {
+          "manifestName": {
             "type": "string"
           },
           "provider": {
@@ -3432,7 +3554,7 @@
           "effectId",
           "sessionId",
           "turnId",
-          "agentId",
+          "manifestName",
           "provider",
           "model",
           "at",
@@ -3494,10 +3616,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -3596,10 +3718,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -3694,7 +3816,7 @@
           "Tenant"
         ],
         "summary": "Reset the Tenant",
-        "description": "Deletes its sessions, its Environments (with their vaults), or both, after draining or cancelling the turns in progress. The Tenant stays open.",
+        "description": "Deletes its sessions, its Agents (with their vaults), or both, after draining or cancelling the turns in progress. The Tenant stays open.",
         "security": [
           {
             "managementKey": []
@@ -3708,10 +3830,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -3806,7 +3928,7 @@
           "Tenant"
         ],
         "summary": "Get who the caller is",
-        "description": "The subject, scopes, agents and sandbox grants of the credential that sends it: an application key (alone or acting for a subject), a management key (`via: management:<principalId>`, no scopes, no agents), or a trusted issuer's token (`via: issuer:<name>`).",
+        "description": "The subject, scopes and Agent grants of the credential that sends it: an application key (alone or acting for a subject), a management key (`via: management:<principalId>`, no scopes, no agents), or a trusted issuer's token (`via: issuer:<name>`).",
         "security": [
           {
             "applicationKey": []
@@ -3829,10 +3951,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           },
@@ -3964,10 +4086,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -4076,10 +4198,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -4179,10 +4301,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -4274,10 +4396,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -4376,10 +4498,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -4487,10 +4609,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -4588,10 +4710,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -4687,10 +4809,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -4798,10 +4920,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -4912,7 +5034,7 @@
               "type": "string",
               "enum": [
                 "tenant",
-                "agent",
+                "manifest",
                 "turn"
               ],
               "default": "tenant"
@@ -4947,10 +5069,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -5067,10 +5189,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -5168,10 +5290,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -5268,10 +5390,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -5379,10 +5501,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -5479,10 +5601,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -5576,8 +5698,8 @@
         "tags": [
           "Credential coverage"
         ],
-        "summary": "Check an agent's credentials against an Environment",
-        "description": "For each remote MCP server and each HTTP tool with a `credential` that the saved agent `agentId` declares (its own, its agents used as tools' and a flow's), the credential a session that names `environmentId` would send: the Environment's secret bound to the URL (`covered`), or none (`missing`). No secret is read and no server is called.",
+        "summary": "Check an Agent's credentials",
+        "description": "For each remote MCP server and each HTTP tool with a `credential` that Agent `agentId`'s manifest version declares (its own, its agents used as tools' and a flow's), the credential its sessions would send: the Agent's secret bound to the URL (`covered`), or none (`missing`). No secret is read and no server is called.",
         "security": [
           {
             "managementKey": []
@@ -5591,10 +5713,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -5651,7 +5773,7 @@
             }
           },
           "404": {
-            "description": "No such agent, or no such Environment",
+            "description": "No such Agent",
             "content": {
               "application/json": {
                 "schema": {
@@ -5689,7 +5811,7 @@
           "MCP servers"
         ],
         "summary": "Preview an MCP server's tools",
-        "description": "Connects to the remote MCP server at `url` with the credential for that URL in the vault of `environmentId`, if given (its headers and `via`; never an identity header), under the Host's address policy, lists its tools within 15 s and closes the connection. It never calls a tool. Each tool comes with the name the model would call it (`modelName`, made with `name`), its annotations and its input schema's size. A server that answers `401` is `authRequired`, with its RFC 9728 protected-resource metadata when it publishes any: it needs a person's sign-in, so reach it through a gateway (`via`), or with a key. No credential value is in the answer.",
+        "description": "Connects to the remote MCP server at `url` with the credential for that URL in the vault of the Agent `agentId`, if given (its headers and `via`; never an identity header), under the Host's address policy, lists its tools within 15 s and closes the connection. It never calls a tool. Each tool comes with the name the model would call it (`modelName`, made with `name`), its annotations and its input schema's size. A server that answers `401` is `authRequired`, with its RFC 9728 protected-resource metadata when it publishes any: it needs a person's sign-in, so reach it through a gateway (`via`), or with a key. No credential value is in the answer.",
         "security": [
           {
             "managementKey": []
@@ -5703,10 +5825,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -5773,7 +5895,7 @@
             }
           },
           "409": {
-            "description": "The Environment's credential for the URL cannot be used",
+            "description": "The Agent's credential for the URL cannot be used",
             "content": {
               "application/json": {
                 "schema": {
@@ -5834,10 +5956,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -5936,10 +6058,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -6058,10 +6180,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -6158,7 +6280,7 @@
         "tags": [
           "Settings"
         ],
-        "summary": "Get the Tenant's sandbox backend and Environment settings",
+        "summary": "Get the Tenant's sandbox backend and Agent compute settings",
         "security": [
           {
             "managementKey": []
@@ -6172,10 +6294,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -6257,8 +6379,8 @@
         "tags": [
           "Settings"
         ],
-        "summary": "Set the Tenant's Environment settings",
-        "description": "The limits every Environment's recipe must fit, the pods' stop grace and where harnesses may run (Tenant setting `environments.config`).",
+        "summary": "Set the Tenant's Agent compute settings",
+        "description": "The limits every Agent's runtime must fit, the pods' stop grace and where harnesses may run (Tenant setting `environments.config`).",
         "security": [
           {
             "managementKey": []
@@ -6272,10 +6394,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -6383,10 +6505,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -6483,10 +6605,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -6594,10 +6716,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -6680,7 +6802,7 @@
           "Settings"
         ],
         "summary": "Set the Tenant's skill limit",
-        "description": "The most bytes one skill's files may hold together, for every agent the Tenant stores and every Environment, whose manifest may set a lower one (`limits.skills`). Unset, the limit takes the default (2 GiB). Agents already stored keep their skills; a session opens only while its agent's skills fit.",
+        "description": "The most bytes one skill's files may hold together, for every agent manifest the Tenant stores, whose runtime section may set a lower one (`limits.skills`). Unset, the limit takes the default (2 GiB). Manifests already saved keep their skills; a session opens only while its Agent's skills fit.",
         "security": [
           {
             "managementKey": []
@@ -6694,10 +6816,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -6792,7 +6914,7 @@
           "Settings"
         ],
         "summary": "Get the Tenant's Runtime limits",
-        "description": "The sizes, counts and deadlines the Runtime holds what crosses it to: the Tenant's (Tenant setting `limits.config`), with the default for each it leaves out. Harnesses get the ones they must respect in `turn.start.limits` (record entry, model call, model file, tool answer, custom harness state, Harness API chunk, folder entries). Defaults and ceilings: `recordEntryBytes` 983040 bytes, at most 983040 (S2 takes records of at most 1048576 bytes, and an event's envelope needs 65536 beside its payload); `modelCallBytes` 33554432 bytes, at most 536870888 (the Model Gate reads a call's body as one string, of at most 536870888 characters); `modelFileBytes` 8388608 bytes, at most 402653166 (a file goes to the provider as one base64 string, of at most 536870888 characters); `toolAnswerBytes` 8388608 bytes, at most 33554432 (a harness reports the answer to core in one Harness API frame (67108864 bytes), as JSON, whose escapes may double it); `harnessStateBytes` 262144 bytes, at most 33554432 (the state crosses in one Harness API frame (67108864 bytes) with the rest of its output or turn.start); `chunkBytes` 16777216 bytes, at most 50266112 (a chunk crosses in base64 in one Harness API frame (67108864 bytes), with room for the frame's own JSON); `folderEntries` 10000 entries, at most 4628197 (a folder's manifest is read as one string, of at most 536870888 characters, and each entry takes at least 116); `requestBodyBytes` 1048576 bytes, at most 536870888 (a body is read as one string, of at most 536870888 characters); `messageParts` 32 entries, at most 19884106 (parts arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 27); `pageItems` 200 entries, at most 178956962 (a page's items go in one response body, written as one string of at most 536870888 characters, and each takes at least 3); `exportPageItems` 1000 entries, at most 178956962 (a page's calls go in one response body, written as one string of at most 536870888 characters, and each takes at least 3); `environmentEventItems` 1000 entries, at most 178956962 (the events go in one response body, written as one string of at most 536870888 characters, and each takes at least 3); `inlineFileBytes` 20971520 bytes, at most 402653166 (a file sent inline arrives in base64 in a body read as one string, of at most 536870888 characters); `a2aWaitMs` 300000 milliseconds, at most 2147483647 (the wait is timed with a JavaScript timer, which waits at most 2147483647 ms); `errorExcerptChars` 2000 characters, at most 163840 (the excerpt is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `traceContentBytes` 8192 bytes, at most 983040 (span content is cut from one record entry, which holds at most 983040 bytes); `environmentLabels` 32 entries, at most 59652320 (labels arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 9); `artifactLabels` 32 entries, at most 59652320 (labels arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 9); `labelKeyChars` 63 characters, at most 536870888 (a label key arrives in one request body, read as one string of at most 536870888 characters); `labelValueChars` 256 characters, at most 536870888 (a label value arrives in one request body, read as one string of at most 536870888 characters); `environmentSetupCommands` 16 entries, at most 33554430 (setup commands arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 16); `environmentFiles` 16 entries, at most 16268814 (input file entries arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 33); `environmentFilesPerEntry` 1000 entries, at most 6710886 (the files of an entry arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 80); `environmentSecretSlots` 64 entries, at most 14128181 (secret slots arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 38); `setupCommandChars` 4096 characters, at most 43690 (a command runs as one argument of /bin/sh -c, which Linux takes up to 131072 bytes long (MAX_ARG_STRLEN, with its NUL), and UTF-8 may take 3 bytes for a character); `setupCommandMs` 1800000 milliseconds, at most 2147483647 (the engine times a command with a JavaScript timer, which waits at most 2147483647 ms); `setupOutputChars` 4096 characters, at most 163840 (the output is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `setupReasonChars` 500 characters, at most 163840 (the reason is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `setupCommandExcerptChars` 80 characters, at most 163840 (the reason is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `manifestDescriptionChars` 1024 characters, at most 536870888 (a description arrives in one request body, read as one string of at most 536870888 characters); `secretDescriptionChars` 500 characters, at most 536870888 (a description arrives in one request body, read as one string of at most 536870888 characters); `secretValueChars` 8192 characters, at most 536870888 (a value arrives in one request body, read as one string of at most 536870888 characters); `secretHosts` 32 entries, at most 89478481 (hosts arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 6); `diskVersionEntries` 200000 entries, at most 1917396 (a disk is listed in one Harness API frame (67108864 bytes, each entry at least 35), and a version's manifest is read as one string of at most 536870888 characters); `diskVersionBytes` 10737418240 bytes, at most 9007199254740991 (the files' sizes are added up in a JavaScript number, exact up to 9007199254740991); `diskLeaseMs` 120000 milliseconds, at most 2147483647 (the lease is renewed with a JavaScript timer, which waits at most 2147483647 ms); `diskPodWaitMs` 60000 milliseconds, at most 9007199254740991 (the deadline is reckoned from the clock in a JavaScript number, exact up to 9007199254740991); `modelRequestMs` 600000 milliseconds, at most 2147483647 (the provider's SDK times the request with a JavaScript timer, which waits at most 2147483647 ms); `modelIdleMs` 300000 milliseconds, at most 2147483647 (the stream's silence is timed with a JavaScript timer, which waits at most 2147483647 ms); `modelAttempts` 3 attempts, at most 9007199254740991 (attempts are counted in a JavaScript number, exact up to 9007199254740991); `modelRetryDelayMs` 2000 milliseconds, at most 2147483647 (the delay is waited with a JavaScript timer, which waits at most 2147483647 ms); `modelProviderRetries` 2 retries, at most 9007199254740991 (retries are counted in a JavaScript number, exact up to 9007199254740991); `modelRetryDelayMaxMs` 60000 milliseconds, at most 2147483647 (the delay is waited with a JavaScript timer, which waits at most 2147483647 ms); `toolAttempts` 3 attempts, at most 9007199254740991 (sends are counted in a JavaScript number, exact up to 9007199254740991); `httpToolTimeoutMs` 300000 milliseconds, at most 2147483647 (the call is timed with a JavaScript timer, which waits at most 2147483647 ms); `mcpSnapshotBytes` 4194304 bytes, at most 16777216 (the facts cross in turn.start, one Harness API frame (67108864 bytes), beside the harness's state (at most half of it) and the rest); `mcpPreviewMs` 15000 milliseconds, at most 2147483647 (the preview is timed with a JavaScript timer, which waits at most 2147483647 ms); `mcpMetadataBytes` 65536 bytes, at most 536870888 (the document is read as one string, of at most 536870888 characters); `toolRules` 200 entries, at most 28256362 (rules arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 19); `toolRuleFieldChars` 200 characters, at most 536870888 (a selector arrives in one request body, read as one string of at most 536870888 characters); `toolRuleTextChars` 500 characters, at most 536870888 (a text arrives in one request body, read as one string of at most 536870888 characters); `modelBudgets` 100 entries, at most 28256362 (budgets arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 19); `flowConcurrency` 8 effects, at most 9007199254740991 (running effects are counted in a JavaScript number, exact up to 9007199254740991); `flowMapItems` 1000 entries, at most 9007199254740991 (items are counted in a JavaScript number, exact up to 9007199254740991); `flowLoopIterations` 100 iterations, at most 9007199254740991 (iterations are counted in a JavaScript number, exact up to 9007199254740991).",
+        "description": "The sizes, counts and deadlines the Runtime holds what crosses it to: the Tenant's (Tenant setting `limits.config`), with the default for each it leaves out. Harnesses get the ones they must respect in `turn.start.limits` (record entry, model call, model file, tool answer, custom harness state, Harness API chunk, folder entries). Defaults and ceilings: `recordEntryBytes` 983040 bytes, at most 983040 (S2 takes records of at most 1048576 bytes, and an event's envelope needs 65536 beside its payload); `modelCallBytes` 33554432 bytes, at most 536870888 (the Model Gate reads a call's body as one string, of at most 536870888 characters); `modelFileBytes` 8388608 bytes, at most 402653166 (a file goes to the provider as one base64 string, of at most 536870888 characters); `toolAnswerBytes` 8388608 bytes, at most 33554432 (a harness reports the answer to core in one Harness API frame (67108864 bytes), as JSON, whose escapes may double it); `harnessStateBytes` 262144 bytes, at most 33554432 (the state crosses in one Harness API frame (67108864 bytes) with the rest of its output or turn.start); `chunkBytes` 16777216 bytes, at most 50266112 (a chunk crosses in base64 in one Harness API frame (67108864 bytes), with room for the frame's own JSON); `folderEntries` 10000 entries, at most 4628197 (a folder's manifest is read as one string, of at most 536870888 characters, and each entry takes at least 116); `requestBodyBytes` 1048576 bytes, at most 536870888 (a body is read as one string, of at most 536870888 characters); `messageParts` 32 entries, at most 19884106 (parts arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 27); `pageItems` 200 entries, at most 178956962 (a page's items go in one response body, written as one string of at most 536870888 characters, and each takes at least 3); `exportPageItems` 1000 entries, at most 178956962 (a page's calls go in one response body, written as one string of at most 536870888 characters, and each takes at least 3); `environmentEventItems` 1000 entries, at most 178956962 (the events go in one response body, written as one string of at most 536870888 characters, and each takes at least 3); `inlineFileBytes` 20971520 bytes, at most 402653166 (a file sent inline arrives in base64 in a body read as one string, of at most 536870888 characters); `a2aWaitMs` 300000 milliseconds, at most 2147483647 (the wait is timed with a JavaScript timer, which waits at most 2147483647 ms); `errorExcerptChars` 2000 characters, at most 163840 (the excerpt is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `traceContentBytes` 8192 bytes, at most 983040 (span content is cut from one record entry, which holds at most 983040 bytes); `environmentLabels` 32 entries, at most 59652320 (labels arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 9); `artifactLabels` 32 entries, at most 59652320 (labels arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 9); `labelKeyChars` 63 characters, at most 536870888 (a label key arrives in one request body, read as one string of at most 536870888 characters); `labelValueChars` 256 characters, at most 536870888 (a label value arrives in one request body, read as one string of at most 536870888 characters); `environmentSetupCommands` 16 entries, at most 33554430 (setup commands arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 16); `environmentFiles` 16 entries, at most 16268814 (input file entries arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 33); `environmentFilesPerEntry` 1000 entries, at most 6710886 (the files of an entry arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 80); `environmentSecretSlots` 64 entries, at most 14128181 (secret slots arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 38); `setupCommandChars` 4096 characters, at most 43690 (a command runs as one argument of /bin/sh -c, which Linux takes up to 131072 bytes long (MAX_ARG_STRLEN, with its NUL), and UTF-8 may take 3 bytes for a character); `setupCommandMs` 1800000 milliseconds, at most 2147483647 (the engine times a command with a JavaScript timer, which waits at most 2147483647 ms); `setupOutputChars` 4096 characters, at most 163840 (the output is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `setupReasonChars` 500 characters, at most 163840 (the reason is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `setupCommandExcerptChars` 80 characters, at most 163840 (the reason is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `manifestDescriptionChars` 1024 characters, at most 536870888 (a description arrives in one request body, read as one string of at most 536870888 characters); `secretDescriptionChars` 500 characters, at most 536870888 (a description arrives in one request body, read as one string of at most 536870888 characters); `secretValueChars` 8192 characters, at most 536870888 (a value arrives in one request body, read as one string of at most 536870888 characters); `secretHosts` 32 entries, at most 89478481 (hosts arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 6); `diskVersionEntries` 200000 entries, at most 1917396 (a disk is listed in one Harness API frame (67108864 bytes, each entry at least 35), and a version's manifest is read as one string of at most 536870888 characters); `diskVersionBytes` 10737418240 bytes, at most 9007199254740991 (the files' sizes are added up in a JavaScript number, exact up to 9007199254740991); `diskLeaseMs` 120000 milliseconds, at most 2147483647 (the lease is renewed with a JavaScript timer, which waits at most 2147483647 ms); `diskPodWaitMs` 60000 milliseconds, at most 9007199254740991 (the deadline is reckoned from the clock in a JavaScript number, exact up to 9007199254740991); `modelRequestMs` 600000 milliseconds, at most 2147483647 (the provider's SDK times the request with a JavaScript timer, which waits at most 2147483647 ms); `modelIdleMs` 300000 milliseconds, at most 2147483647 (the stream's silence is timed with a JavaScript timer, which waits at most 2147483647 ms); `modelAttempts` 3 attempts, at most 9007199254740991 (attempts are counted in a JavaScript number, exact up to 9007199254740991); `modelRetryDelayMs` 2000 milliseconds, at most 2147483647 (the delay is waited with a JavaScript timer, which waits at most 2147483647 ms); `modelProviderRetries` 2 retries, at most 9007199254740991 (retries are counted in a JavaScript number, exact up to 9007199254740991); `modelRetryDelayMaxMs` 60000 milliseconds, at most 2147483647 (the delay is waited with a JavaScript timer, which waits at most 2147483647 ms); `toolAttempts` 3 attempts, at most 9007199254740991 (sends are counted in a JavaScript number, exact up to 9007199254740991); `httpToolTimeoutMs` 300000 milliseconds, at most 2147483647 (the call is timed with a JavaScript timer, which waits at most 2147483647 ms); `mcpSnapshotBytes` 4194304 bytes, at most 16777216 (the facts cross in turn.start, one Harness API frame (67108864 bytes), beside the harness's state (at most half of it) and the rest); `mcpPreviewMs` 15000 milliseconds, at most 2147483647 (the preview is timed with a JavaScript timer, which waits at most 2147483647 ms); `mcpMetadataBytes` 65536 bytes, at most 536870888 (the document is read as one string, of at most 536870888 characters); `toolRules` 200 entries, at most 28256362 (rules arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 19); `toolRuleFieldChars` 200 characters, at most 536870888 (a selector arrives in one request body, read as one string of at most 536870888 characters); `toolRuleTextChars` 500 characters, at most 536870888 (a text arrives in one request body, read as one string of at most 536870888 characters); `modelBudgets` 100 entries, at most 28256362 (budgets arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 19); `triggersPerAgent` 20 entries, at most 8521760 (triggers arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 63); `triggerMinIntervalMs` 60000 milliseconds, at most 9007199254740991 (the gap is reckoned from the clock in a JavaScript number, exact up to 9007199254740991); `triggerRunsPerHour` 60 runs, at most 9007199254740991 (runs are counted in a JavaScript number, exact up to 9007199254740991); `triggerJitterPercent` 10 percent, at most 50 (an offset past half the interval could move a run past the next one); `triggerJitterMaxMs` 300000 milliseconds, at most 2147483647 (the offset is waited with a JavaScript timer, which waits at most 2147483647 ms); `triggerPromptChars` 8000 characters, at most 163840 (the prompt is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `triggerRunRetentionMs` 2592000000 milliseconds, at most 9007199254740991 (the age is reckoned from the clock in a JavaScript number, exact up to 9007199254740991); `wakeMaxAheadMs` 2592000000 milliseconds, at most 9007199254740991 (the time is reckoned from the clock in a JavaScript number, exact up to 9007199254740991); `wakeNoteChars` 2000 characters, at most 163840 (the note is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `memoryBytes` 102400 bytes, at most 33554432 (a memory reaches a harness in one Harness API frame (67108864 bytes), as JSON, whose escapes may double it); `memoriesPerAgent` 10000 entries, at most 9007199254740991 (memories are counted in a JavaScript number, exact up to 9007199254740991); `memoryIndexLines` 200 entries, at most 9007199254740991 (the lines are counted in a JavaScript number, exact up to 9007199254740991); `memoryIndexBytes` 25600 bytes, at most 16777216 (the index crosses in turn.start, one Harness API frame (67108864 bytes), beside the harness's state and the rest); `webhookBodyBytes` 262144 bytes, at most 983040 (the payload goes into one record entry, which holds at most 983040 bytes); `sessionQueuedMessages` 100 entries, at most 9007199254740991 (queued messages are counted in a JavaScript number, exact up to 9007199254740991); `flowConcurrency` 8 effects, at most 9007199254740991 (running effects are counted in a JavaScript number, exact up to 9007199254740991); `flowMapItems` 1000 entries, at most 9007199254740991 (items are counted in a JavaScript number, exact up to 9007199254740991); `flowLoopIterations` 100 iterations, at most 9007199254740991 (iterations are counted in a JavaScript number, exact up to 9007199254740991).",
         "security": [
           {
             "managementKey": []
@@ -6806,10 +6928,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -6892,7 +7014,7 @@
           "Settings"
         ],
         "summary": "Set the Tenant's Runtime limits",
-        "description": "Replaces the Tenant's Runtime limits: a limit left out takes its default. A limit above its ceiling, which a dependency sets, is `400` naming the ceiling, and nothing is written. Each is read where it is checked, so a new value holds for the next request, write, call or segment. Defaults and ceilings: `recordEntryBytes` 983040 bytes, at most 983040 (S2 takes records of at most 1048576 bytes, and an event's envelope needs 65536 beside its payload); `modelCallBytes` 33554432 bytes, at most 536870888 (the Model Gate reads a call's body as one string, of at most 536870888 characters); `modelFileBytes` 8388608 bytes, at most 402653166 (a file goes to the provider as one base64 string, of at most 536870888 characters); `toolAnswerBytes` 8388608 bytes, at most 33554432 (a harness reports the answer to core in one Harness API frame (67108864 bytes), as JSON, whose escapes may double it); `harnessStateBytes` 262144 bytes, at most 33554432 (the state crosses in one Harness API frame (67108864 bytes) with the rest of its output or turn.start); `chunkBytes` 16777216 bytes, at most 50266112 (a chunk crosses in base64 in one Harness API frame (67108864 bytes), with room for the frame's own JSON); `folderEntries` 10000 entries, at most 4628197 (a folder's manifest is read as one string, of at most 536870888 characters, and each entry takes at least 116); `requestBodyBytes` 1048576 bytes, at most 536870888 (a body is read as one string, of at most 536870888 characters); `messageParts` 32 entries, at most 19884106 (parts arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 27); `pageItems` 200 entries, at most 178956962 (a page's items go in one response body, written as one string of at most 536870888 characters, and each takes at least 3); `exportPageItems` 1000 entries, at most 178956962 (a page's calls go in one response body, written as one string of at most 536870888 characters, and each takes at least 3); `environmentEventItems` 1000 entries, at most 178956962 (the events go in one response body, written as one string of at most 536870888 characters, and each takes at least 3); `inlineFileBytes` 20971520 bytes, at most 402653166 (a file sent inline arrives in base64 in a body read as one string, of at most 536870888 characters); `a2aWaitMs` 300000 milliseconds, at most 2147483647 (the wait is timed with a JavaScript timer, which waits at most 2147483647 ms); `errorExcerptChars` 2000 characters, at most 163840 (the excerpt is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `traceContentBytes` 8192 bytes, at most 983040 (span content is cut from one record entry, which holds at most 983040 bytes); `environmentLabels` 32 entries, at most 59652320 (labels arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 9); `artifactLabels` 32 entries, at most 59652320 (labels arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 9); `labelKeyChars` 63 characters, at most 536870888 (a label key arrives in one request body, read as one string of at most 536870888 characters); `labelValueChars` 256 characters, at most 536870888 (a label value arrives in one request body, read as one string of at most 536870888 characters); `environmentSetupCommands` 16 entries, at most 33554430 (setup commands arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 16); `environmentFiles` 16 entries, at most 16268814 (input file entries arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 33); `environmentFilesPerEntry` 1000 entries, at most 6710886 (the files of an entry arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 80); `environmentSecretSlots` 64 entries, at most 14128181 (secret slots arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 38); `setupCommandChars` 4096 characters, at most 43690 (a command runs as one argument of /bin/sh -c, which Linux takes up to 131072 bytes long (MAX_ARG_STRLEN, with its NUL), and UTF-8 may take 3 bytes for a character); `setupCommandMs` 1800000 milliseconds, at most 2147483647 (the engine times a command with a JavaScript timer, which waits at most 2147483647 ms); `setupOutputChars` 4096 characters, at most 163840 (the output is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `setupReasonChars` 500 characters, at most 163840 (the reason is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `setupCommandExcerptChars` 80 characters, at most 163840 (the reason is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `manifestDescriptionChars` 1024 characters, at most 536870888 (a description arrives in one request body, read as one string of at most 536870888 characters); `secretDescriptionChars` 500 characters, at most 536870888 (a description arrives in one request body, read as one string of at most 536870888 characters); `secretValueChars` 8192 characters, at most 536870888 (a value arrives in one request body, read as one string of at most 536870888 characters); `secretHosts` 32 entries, at most 89478481 (hosts arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 6); `diskVersionEntries` 200000 entries, at most 1917396 (a disk is listed in one Harness API frame (67108864 bytes, each entry at least 35), and a version's manifest is read as one string of at most 536870888 characters); `diskVersionBytes` 10737418240 bytes, at most 9007199254740991 (the files' sizes are added up in a JavaScript number, exact up to 9007199254740991); `diskLeaseMs` 120000 milliseconds, at most 2147483647 (the lease is renewed with a JavaScript timer, which waits at most 2147483647 ms); `diskPodWaitMs` 60000 milliseconds, at most 9007199254740991 (the deadline is reckoned from the clock in a JavaScript number, exact up to 9007199254740991); `modelRequestMs` 600000 milliseconds, at most 2147483647 (the provider's SDK times the request with a JavaScript timer, which waits at most 2147483647 ms); `modelIdleMs` 300000 milliseconds, at most 2147483647 (the stream's silence is timed with a JavaScript timer, which waits at most 2147483647 ms); `modelAttempts` 3 attempts, at most 9007199254740991 (attempts are counted in a JavaScript number, exact up to 9007199254740991); `modelRetryDelayMs` 2000 milliseconds, at most 2147483647 (the delay is waited with a JavaScript timer, which waits at most 2147483647 ms); `modelProviderRetries` 2 retries, at most 9007199254740991 (retries are counted in a JavaScript number, exact up to 9007199254740991); `modelRetryDelayMaxMs` 60000 milliseconds, at most 2147483647 (the delay is waited with a JavaScript timer, which waits at most 2147483647 ms); `toolAttempts` 3 attempts, at most 9007199254740991 (sends are counted in a JavaScript number, exact up to 9007199254740991); `httpToolTimeoutMs` 300000 milliseconds, at most 2147483647 (the call is timed with a JavaScript timer, which waits at most 2147483647 ms); `mcpSnapshotBytes` 4194304 bytes, at most 16777216 (the facts cross in turn.start, one Harness API frame (67108864 bytes), beside the harness's state (at most half of it) and the rest); `mcpPreviewMs` 15000 milliseconds, at most 2147483647 (the preview is timed with a JavaScript timer, which waits at most 2147483647 ms); `mcpMetadataBytes` 65536 bytes, at most 536870888 (the document is read as one string, of at most 536870888 characters); `toolRules` 200 entries, at most 28256362 (rules arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 19); `toolRuleFieldChars` 200 characters, at most 536870888 (a selector arrives in one request body, read as one string of at most 536870888 characters); `toolRuleTextChars` 500 characters, at most 536870888 (a text arrives in one request body, read as one string of at most 536870888 characters); `modelBudgets` 100 entries, at most 28256362 (budgets arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 19); `flowConcurrency` 8 effects, at most 9007199254740991 (running effects are counted in a JavaScript number, exact up to 9007199254740991); `flowMapItems` 1000 entries, at most 9007199254740991 (items are counted in a JavaScript number, exact up to 9007199254740991); `flowLoopIterations` 100 iterations, at most 9007199254740991 (iterations are counted in a JavaScript number, exact up to 9007199254740991).",
+        "description": "Replaces the Tenant's Runtime limits: a limit left out takes its default. A limit above its ceiling, which a dependency sets, is `400` naming the ceiling, and nothing is written. Each is read where it is checked, so a new value holds for the next request, write, call or segment. Defaults and ceilings: `recordEntryBytes` 983040 bytes, at most 983040 (S2 takes records of at most 1048576 bytes, and an event's envelope needs 65536 beside its payload); `modelCallBytes` 33554432 bytes, at most 536870888 (the Model Gate reads a call's body as one string, of at most 536870888 characters); `modelFileBytes` 8388608 bytes, at most 402653166 (a file goes to the provider as one base64 string, of at most 536870888 characters); `toolAnswerBytes` 8388608 bytes, at most 33554432 (a harness reports the answer to core in one Harness API frame (67108864 bytes), as JSON, whose escapes may double it); `harnessStateBytes` 262144 bytes, at most 33554432 (the state crosses in one Harness API frame (67108864 bytes) with the rest of its output or turn.start); `chunkBytes` 16777216 bytes, at most 50266112 (a chunk crosses in base64 in one Harness API frame (67108864 bytes), with room for the frame's own JSON); `folderEntries` 10000 entries, at most 4628197 (a folder's manifest is read as one string, of at most 536870888 characters, and each entry takes at least 116); `requestBodyBytes` 1048576 bytes, at most 536870888 (a body is read as one string, of at most 536870888 characters); `messageParts` 32 entries, at most 19884106 (parts arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 27); `pageItems` 200 entries, at most 178956962 (a page's items go in one response body, written as one string of at most 536870888 characters, and each takes at least 3); `exportPageItems` 1000 entries, at most 178956962 (a page's calls go in one response body, written as one string of at most 536870888 characters, and each takes at least 3); `environmentEventItems` 1000 entries, at most 178956962 (the events go in one response body, written as one string of at most 536870888 characters, and each takes at least 3); `inlineFileBytes` 20971520 bytes, at most 402653166 (a file sent inline arrives in base64 in a body read as one string, of at most 536870888 characters); `a2aWaitMs` 300000 milliseconds, at most 2147483647 (the wait is timed with a JavaScript timer, which waits at most 2147483647 ms); `errorExcerptChars` 2000 characters, at most 163840 (the excerpt is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `traceContentBytes` 8192 bytes, at most 983040 (span content is cut from one record entry, which holds at most 983040 bytes); `environmentLabels` 32 entries, at most 59652320 (labels arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 9); `artifactLabels` 32 entries, at most 59652320 (labels arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 9); `labelKeyChars` 63 characters, at most 536870888 (a label key arrives in one request body, read as one string of at most 536870888 characters); `labelValueChars` 256 characters, at most 536870888 (a label value arrives in one request body, read as one string of at most 536870888 characters); `environmentSetupCommands` 16 entries, at most 33554430 (setup commands arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 16); `environmentFiles` 16 entries, at most 16268814 (input file entries arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 33); `environmentFilesPerEntry` 1000 entries, at most 6710886 (the files of an entry arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 80); `environmentSecretSlots` 64 entries, at most 14128181 (secret slots arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 38); `setupCommandChars` 4096 characters, at most 43690 (a command runs as one argument of /bin/sh -c, which Linux takes up to 131072 bytes long (MAX_ARG_STRLEN, with its NUL), and UTF-8 may take 3 bytes for a character); `setupCommandMs` 1800000 milliseconds, at most 2147483647 (the engine times a command with a JavaScript timer, which waits at most 2147483647 ms); `setupOutputChars` 4096 characters, at most 163840 (the output is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `setupReasonChars` 500 characters, at most 163840 (the reason is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `setupCommandExcerptChars` 80 characters, at most 163840 (the reason is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `manifestDescriptionChars` 1024 characters, at most 536870888 (a description arrives in one request body, read as one string of at most 536870888 characters); `secretDescriptionChars` 500 characters, at most 536870888 (a description arrives in one request body, read as one string of at most 536870888 characters); `secretValueChars` 8192 characters, at most 536870888 (a value arrives in one request body, read as one string of at most 536870888 characters); `secretHosts` 32 entries, at most 89478481 (hosts arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 6); `diskVersionEntries` 200000 entries, at most 1917396 (a disk is listed in one Harness API frame (67108864 bytes, each entry at least 35), and a version's manifest is read as one string of at most 536870888 characters); `diskVersionBytes` 10737418240 bytes, at most 9007199254740991 (the files' sizes are added up in a JavaScript number, exact up to 9007199254740991); `diskLeaseMs` 120000 milliseconds, at most 2147483647 (the lease is renewed with a JavaScript timer, which waits at most 2147483647 ms); `diskPodWaitMs` 60000 milliseconds, at most 9007199254740991 (the deadline is reckoned from the clock in a JavaScript number, exact up to 9007199254740991); `modelRequestMs` 600000 milliseconds, at most 2147483647 (the provider's SDK times the request with a JavaScript timer, which waits at most 2147483647 ms); `modelIdleMs` 300000 milliseconds, at most 2147483647 (the stream's silence is timed with a JavaScript timer, which waits at most 2147483647 ms); `modelAttempts` 3 attempts, at most 9007199254740991 (attempts are counted in a JavaScript number, exact up to 9007199254740991); `modelRetryDelayMs` 2000 milliseconds, at most 2147483647 (the delay is waited with a JavaScript timer, which waits at most 2147483647 ms); `modelProviderRetries` 2 retries, at most 9007199254740991 (retries are counted in a JavaScript number, exact up to 9007199254740991); `modelRetryDelayMaxMs` 60000 milliseconds, at most 2147483647 (the delay is waited with a JavaScript timer, which waits at most 2147483647 ms); `toolAttempts` 3 attempts, at most 9007199254740991 (sends are counted in a JavaScript number, exact up to 9007199254740991); `httpToolTimeoutMs` 300000 milliseconds, at most 2147483647 (the call is timed with a JavaScript timer, which waits at most 2147483647 ms); `mcpSnapshotBytes` 4194304 bytes, at most 16777216 (the facts cross in turn.start, one Harness API frame (67108864 bytes), beside the harness's state (at most half of it) and the rest); `mcpPreviewMs` 15000 milliseconds, at most 2147483647 (the preview is timed with a JavaScript timer, which waits at most 2147483647 ms); `mcpMetadataBytes` 65536 bytes, at most 536870888 (the document is read as one string, of at most 536870888 characters); `toolRules` 200 entries, at most 28256362 (rules arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 19); `toolRuleFieldChars` 200 characters, at most 536870888 (a selector arrives in one request body, read as one string of at most 536870888 characters); `toolRuleTextChars` 500 characters, at most 536870888 (a text arrives in one request body, read as one string of at most 536870888 characters); `modelBudgets` 100 entries, at most 28256362 (budgets arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 19); `triggersPerAgent` 20 entries, at most 8521760 (triggers arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 63); `triggerMinIntervalMs` 60000 milliseconds, at most 9007199254740991 (the gap is reckoned from the clock in a JavaScript number, exact up to 9007199254740991); `triggerRunsPerHour` 60 runs, at most 9007199254740991 (runs are counted in a JavaScript number, exact up to 9007199254740991); `triggerJitterPercent` 10 percent, at most 50 (an offset past half the interval could move a run past the next one); `triggerJitterMaxMs` 300000 milliseconds, at most 2147483647 (the offset is waited with a JavaScript timer, which waits at most 2147483647 ms); `triggerPromptChars` 8000 characters, at most 163840 (the prompt is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `triggerRunRetentionMs` 2592000000 milliseconds, at most 9007199254740991 (the age is reckoned from the clock in a JavaScript number, exact up to 9007199254740991); `wakeMaxAheadMs` 2592000000 milliseconds, at most 9007199254740991 (the time is reckoned from the clock in a JavaScript number, exact up to 9007199254740991); `wakeNoteChars` 2000 characters, at most 163840 (the note is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `memoryBytes` 102400 bytes, at most 33554432 (a memory reaches a harness in one Harness API frame (67108864 bytes), as JSON, whose escapes may double it); `memoriesPerAgent` 10000 entries, at most 9007199254740991 (memories are counted in a JavaScript number, exact up to 9007199254740991); `memoryIndexLines` 200 entries, at most 9007199254740991 (the lines are counted in a JavaScript number, exact up to 9007199254740991); `memoryIndexBytes` 25600 bytes, at most 16777216 (the index crosses in turn.start, one Harness API frame (67108864 bytes), beside the harness's state and the rest); `webhookBodyBytes` 262144 bytes, at most 983040 (the payload goes into one record entry, which holds at most 983040 bytes); `sessionQueuedMessages` 100 entries, at most 9007199254740991 (queued messages are counted in a JavaScript number, exact up to 9007199254740991); `flowConcurrency` 8 effects, at most 9007199254740991 (running effects are counted in a JavaScript number, exact up to 9007199254740991); `flowMapItems` 1000 entries, at most 9007199254740991 (items are counted in a JavaScript number, exact up to 9007199254740991); `flowLoopIterations` 100 iterations, at most 9007199254740991 (iterations are counted in a JavaScript number, exact up to 9007199254740991).",
         "security": [
           {
             "managementKey": []
@@ -6906,10 +7028,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `17`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `17`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -7012,11 +7134,11 @@
     },
     {
       "name": "Credential coverage",
-      "description": "Which secret of an Environment each of an agent's MCP servers and HTTP tools would get, before a session opens. The secrets themselves are written on the Runtime API. `admin.coverage`."
+      "description": "Which secret of an Agent's vault each of its manifest's MCP servers and HTTP tools would get, before a session opens. The secrets themselves are written on the Runtime API. `admin.coverage`."
     },
     {
       "name": "MCP servers",
-      "description": "See a remote MCP server's tools before an agent names it, with an Environment's credential for its URL: their model names, sizes and annotations, or that it needs a person's sign-in. `admin.mcp`."
+      "description": "See a remote MCP server's tools before an agent names it, with an Agent's credential for its URL: their model names, sizes and annotations, or that it needs a person's sign-in. `admin.mcp`."
     },
     {
       "name": "Signing keys",
@@ -7024,7 +7146,7 @@
     },
     {
       "name": "Settings",
-      "description": "The Tenant's sandbox backend, Environment, artifact and skill settings, and its Runtime limits. `admin.settings`."
+      "description": "The Tenant's sandbox backend, Agent compute, artifact and skill settings, and its Runtime limits. `admin.settings`."
     }
   ]
 }