@nylorun/runtime 0.27.0-beta → 0.29.0-beta

package/dist/tenant/sessions.js

@@ -1,118 +1,38 @@
 /**
- * Session and definition resources: `PUT/GET /v1/agents`, `PUT /v1/sessions/:id` (create, or
- * find an identical one), the session list and the session view. Reads use the store's typed
- * queries; `PUT /v1/sessions/:id` runs in one transaction with the Environment's checks.
+ * Session resources: `PUT /v1/sessions/:id` (create, or find an identical one), the session list
+ * and the session view. A session runs on one Agent (protocol 16) and pins the manifest version
+ * the Agent runs when it opens; each turn takes the version the Agent runs then
+ * (`agent-versions.ts`). Reads use the store's typed queries; `PUT /v1/sessions/:id` runs in
+ * one transaction with the Agent's checks.
  */
-import { DefinitionDocumentSchema, definitionFilesOf, } from "@nylorun/core/contracts";
-import { hashManifest } from "@nylorun/core/compatibility";
-import { approvalRefusal, codeToolRefusal } from "@nylorun/core/define";
+import {} from "@nylorun/core/contracts";
 import { aggregateWaits, isWorkflowManifest } from "../core/flow-host.js";
 import { canonical } from "../store/canonical.js";
-import { sandboxSpecOf } from "../sandbox/resolve.js";
-import { declaredSandboxes } from "../sandbox/share.js";
-import { effectiveSandboxConfig, readSandboxConfig } from "../sandbox/tenant-config.js";
-import { HARNESS_ID, checkPlacement, requirePods } from "../sandbox/placement.js";
-import { openEnvironment, recordAttachment } from "./environments.js";
-import { harnessOf, } from "./context.js";
+import { readSandboxConfig } from "../sandbox/tenant-config.js";
+import { checkPlacement, requirePods } from "../sandbox/placement.js";
+import { pinOf } from "./agent-versions.js";
+import { openAgent, recordAttachment } from "./agents.js";
+import { harnessOf, reachesAgent, } from "./context.js";
 import { fail } from "./http.js";
 import { definitionFileIssues } from "./definition-files.js";
-import { limitsInForce, readSkillLimits, readTenantLimits } from "./limits.js";
-import { readRuntimeLimits } from "./runtime-limits.js";
-import { httpToolTimeoutIssues } from "../gates/http-tool.js";
-import { requiresIssues } from "./limits.js";
+import { limitsInForce, readTenantLimits } from "./limits.js";
 /** A session's creation identity: everything but the request id. */
 const sessionIdentity = (value) => {
     const { requestId: _requestId, ...body } = value ?? {};
     return canonical(body);
 };
-export async function listDefinitions(ctx) {
-    const definitions = await ctx.store.tx((t) => t.listDefinitions());
-    return {
-        agents: definitions.map((d) => ({
-            agentId: d.manifest.id,
-            manifest: d.manifest,
-            manifestHash: d.manifestHash,
-            implementationVersion: d.implementationVersion,
-        })),
-    };
-}
-/**
- * The agents a token caller may see: id, name and description only, never
- * instructions, tools or MCP servers, and only the agents allowed.
- */
-export async function listAgentsPublic(ctx, agents) {
-    const definitions = await ctx.store.tx((t) => t.listDefinitions());
-    return {
-        agents: definitions
-            .filter((d) => agents === "*" || agents.has(d.manifest.id))
-            .map((d) => ({
-            agentId: d.manifest.id,
-            ...(typeof d.manifest.name === "string" ? { name: d.manifest.name } : {}),
-            ...(typeof d.manifest.description === "string"
-                ? { description: d.manifest.description }
-                : {}),
-        })),
-    };
-}
-export async function putDefinition(ctx, agentId, body, options = {}) {
-    if (body.manifest.id !== agentId)
-        fail(400, "Agent id mismatch");
-    DefinitionDocumentSchema.parse(body.manifest);
-    // The Runtime runs agents from their manifests alone (track R2): no tool may need it.
-    const code = codeToolRefusal(body.manifest);
-    if (code)
-        fail(400, code);
-    // Tool approvals are the Tenant's tool policy, decided at the Tool Gate (R5 step 2).
-    const approval = approvalRefusal(body.manifest);
-    if (approval)
-        fail(400, approval);
-    const declared = declaredSandboxes(body.manifest);
-    if (declared.length > 0)
-        fail(400, `${declared.join(", ")} declares a sandbox. Agents no longer declare one: remove .sandbox(), create an Environment with the sandbox (PUT /v1/environments/{id}) and open the session on it, createSession({ environment }). See MIGRATION.md.`);
-    const definition = {
-        ...body,
-        manifestHash: hashManifest(body.manifest),
-    };
-    const files = [...definitionFilesOf(body.manifest)];
-    await ctx.store.tx(async (t) => {
-        const limits = await readRuntimeLimits(t);
-        const issues = [
-            ...httpToolTimeoutIssues(body.manifest, limits.httpToolTimeoutMs),
-            ...requiresIssues(body.manifest.requires, limits),
-        ];
-        if (issues.length > 0)
-            fail(400, issues.join(" "));
-        const { totalBytes } = await readSkillLimits(t);
-        const { missing, oversized } = await definitionFileIssues(t, body.manifest, totalBytes);
-        if (missing.length > 0)
-            fail(400, `The definition names ${missing.length} file(s) the Runtime does not hold; upload each with PUT /v1/files/<sha256> first: ${missing.join(", ")}`, { code: "definition_files_missing", details: { missing } });
-        if (oversized.length > 0)
-            fail(413, `This Tenant allows a skill's files at most ${totalBytes} bytes together: ${oversized.map((skill) => `'${skill.name}' holds ${skill.bytes}`).join(", ")}`, { code: "limit_exceeded", details: { limitBytes: totalBytes, skills: oversized } });
-        if (options.dryRun)
-            return;
-        await t.put("definitions", agentId, definition);
-        await t.insertDefinitionFileUses(agentId, definition.manifestHash, files);
-    });
-    return {
-        agentId,
-        manifestHash: definition.manifestHash,
-        implementationVersion: body.implementationVersion,
-        ...(options.dryRun ? { dryRun: true } : {}),
-    };
-}
 /**
- * `access`, when the request acts for a person, limits the list to that person's sessions of
- * the agents they may use.
+ * `access`, when the request acts for a person, limits the list to that person's sessions on
+ * the Agents they may use.
  */
 export async function listSessions(ctx, agentId, access) {
     const sessions = await ctx.store.tx((t) => t.listSessions({
         ...(agentId === null ? {} : { agentId }),
         ...(access === undefined ? {} : { ownerUserId: access.owner }),
     }));
-    const allowed = access?.agents;
     return {
         sessions: sessions
-            .filter((s) => allowed === undefined || allowed.has(s.agentId))
+            .filter((s) => reachesAgent(access, s.agentId))
             .map((s) => ({
             id: s.id,
             agentId: s.agentId,
@@ -123,130 +43,90 @@ export async function listSessions(ctx, agentId, access) {
     };
 }
 /**
- * Create a session from its definition, or find an identical one. `access`, when the request
- * acts for a subject, must be the session's owner: another owner's session id is the 404 of a
- * missing one (not the 409 of a mismatch), and so is an Environment whose owner guard names
- * another owner.
+ * Create a session on an Agent, or find an identical one. `access`, when the request acts for a
+ * subject, must be the session's owner: another owner's session id is the 404 of a missing one
+ * (not the 409 of a mismatch), and so is an Agent whose owner guard names another owner.
  *
- * The session's Environment is fixed for its life: its sandbox (kinds `virtual` and `pod`) is
- * the session's, with the spec of the Environment's applied recipe pinned now, and its vault
- * holds the session's credentials. Without one the session has no sandbox and no credentials.
+ * The session runs on its Agent for its life: the Agent's sandbox (kinds `virtual` and `pod`) is
+ * the session's, with the spec of what the Agent runs pinned now, and the Agent's vault holds the
+ * session's credentials. It pins the manifest version the Agent runs (`definition`), as the loop
+ * manifest that version's harness section makes, and the harness that section names (`pinOf`);
+ * a turn's first segment pins the version the Agent runs then (`repinTurn`).
  */
 export async function putSession(ctx, id, body, access, options = {}) {
     const opaque = access !== undefined;
     if (opaque && body.ownerUserId !== access.owner)
         fail(403, "ownerUserId must be the subject");
-    // An agent the subject may not use is the 404 of a missing definition.
-    if (access?.agents !== undefined && !access.agents.has(body.agentId))
-        fail(404, "Definition not found");
-    return ctx.store.tx(async (t) => {
-        const prior = await t.lockSession(id);
-        if (opaque &&
-            prior &&
-            (prior.ownerUserId !== access.owner ||
-                (access.agents !== undefined && !access.agents.has(prior.agentId))))
-            fail(404, "Session not found");
-        if (prior && options.createOnly) {
-            if (prior.ownerUserId !== body.ownerUserId ||
-                prior.agentId !== body.agentId)
-                fail(404, "Session not found");
-            return prior;
-        }
-        if (prior) {
-            if (sessionIdentity(prior.creation) !== sessionIdentity(body))
-                fail(409, "Session already exists with different creation parameters");
-            return prior;
-        }
-        const definition = (await t.get("definitions", body.agentId)) ??
-            fail(404, "Definition not found");
-        const environment = body.environment === undefined
-            ? undefined
-            : await openEnvironment(t, body.environment, {
-                ...(options.environmentGrants === undefined ? {} : { grants: options.environmentGrants }),
-                ownerUserId: body.ownerUserId,
-                opaque,
-            });
-        if (!isWorkflowManifest(definition.manifest))
-            await checkRequirements(t, definition.manifest, environment);
-        if (environment !== undefined)
-            await checkSkillLimit(t, definition.manifest, environment);
-        const config = await readSandboxConfig(t);
-        // The harness the session runs for its life (R4.1): its Environment's, else ours. A flow
-        // runs in core and our engine, whatever its Environment names.
-        const harness = isWorkflowManifest(definition.manifest) || environment === undefined
-            ? HARNESS_ID
-            : environment.applied.harness;
-        // Placement (D38, D52): where this session's harness may run, decided now and kept.
-        checkPlacement(config, environment?.kind, harness);
-        if (environment?.kind === "pod")
-            await requirePods(ctx.pods, `Environment ${environment.id}`);
-        const spec = environment === undefined || environment.kind === "none"
-            ? undefined
-            : sandboxSpecOf(environment.applied, effectiveSandboxConfig(config).limits.idle);
-        // The session pins its definition as registered (protocol 15): the sandbox's spec stays on
-        // the session, and the harness words the facts and defines the tools.
-        const created = {
-            id,
-            agentId: body.agentId,
-            ownerUserId: body.ownerUserId,
-            manifest: definition.manifest,
-            manifestHash: definition.manifestHash,
-            definitionHash: definition.manifestHash,
-            implementationVersion: definition.implementationVersion,
-            info: body.info,
-            status: "idle",
-            activeTurnId: null,
-            creation: body,
-            harness,
-            ...(environment === undefined
-                ? {}
-                : { environmentId: environment.id, environmentVersion: environment.version }),
-            ...(spec === undefined ? {} : { sandbox: spec }),
-        };
-        await t.put("sessions", id, created);
-        if (environment !== undefined)
-            await recordAttachment(t, id, environment.id);
-        return created;
-    });
+    // An Agent the subject may not use is the 404 of a missing one.
+    if (!reachesAgent(access, body.agent))
+        fail(404, "Agent not found");
+    return ctx.store.tx((t) => openSessionIn(ctx, t, id, body, access, options));
 }
 /**
- * Refuses a session whose agent requires what its Environment lacks (protocol 14, D65): a
- * sandbox (`any`: kind `virtual` or `pod`), a pod, or a secret its vault does not hold. Every
- * gap is named in one `409 environment_unsuitable`.
+ * `putSession`'s work in transaction `t`: also how a trigger's first run opens the session it
+ * names (track T4), in the run's transaction.
  */
-async function checkRequirements(t, manifest, environment) {
-    const requires = manifest.requires;
-    if (requires === undefined)
-        return;
-    const missing = [];
-    const kind = environment?.kind;
-    if (requires.sandbox === "any" && kind !== "virtual" && kind !== "pod")
-        missing.push("sandbox");
-    if (requires.sandbox === "pod" && kind !== "pod")
-        missing.push("pod");
-    if (requires.secrets?.length) {
-        const vault = environment === undefined ? undefined : await t.vaultOfEnvironment(environment.id);
-        const held = new Set(vault ? (await t.credentialsForVault(vault.id)).map((row) => row.name) : []);
-        for (const name of requires.secrets)
-            if (!held.has(name))
-                missing.push(`secret:${name}`);
+export async function openSessionIn(ctx, t, id, body, access, options = {}) {
+    const opaque = access !== undefined;
+    const prior = await t.lockSession(id);
+    if (opaque && prior && (prior.ownerUserId !== access.owner || !reachesAgent(access, prior.agentId)))
+        fail(404, "Session not found");
+    if (prior && options.createOnly) {
+        if (prior.ownerUserId !== body.ownerUserId || prior.agentId !== body.agent)
+            fail(404, "Session not found");
+        return prior;
     }
-    if (missing.length === 0)
-        return;
-    const where = environment === undefined ? "the session names no Environment" : `Environment ${environment.id} lacks it`;
-    fail(409, `Agent ${manifest.id} requires ${missing.map((gap) => (gap.startsWith("secret:") ? `the secret ${gap.slice(7)}` : gap === "pod" ? "a pod Environment" : "a sandbox")).join(", ")}, and ${where}.`, { code: "environment_unsuitable", details: { missing } });
+    if (prior) {
+        if (sessionIdentity(prior.creation) !== sessionIdentity(body))
+            fail(409, "Session already exists with different creation parameters");
+        return prior;
+    }
+    const agent = await openAgent(t, body.agent, {
+        ...(options.agentGrants === undefined ? {} : { grants: options.agentGrants }),
+        ownerUserId: body.ownerUserId,
+        opaque,
+    });
+    // The version the Agent runs, both sections (T3): its loop manifest, harness and sandbox spec.
+    const { pin } = await pinOf(t, agent);
+    await checkSkillLimit(t, pin.manifest, agent);
+    const config = await readSandboxConfig(t);
+    // Placement (D38, D52): where this session's harness may run, decided now and kept.
+    checkPlacement(config, agent.kind, pin.harness);
+    if (agent.kind === "pod")
+        await requirePods(ctx.pods, `Agent ${agent.id}`);
+    const created = {
+        id,
+        agentId: agent.id,
+        ownerUserId: body.ownerUserId,
+        manifest: pin.manifest,
+        manifestHash: pin.manifestHash,
+        definition: { ...pin.definition },
+        ...(pin.loop === undefined ? {} : { loop: pin.loop }),
+        info: body.info,
+        status: "idle",
+        activeTurnId: null,
+        creation: body,
+        harness: pin.harness,
+        environmentId: agent.id,
+        environmentVersion: agent.version,
+        ...(pin.sandbox === undefined ? {} : { sandbox: pin.sandbox }),
+    };
+    await t.put("sessions", id, created);
+    await recordAttachment(t, id, agent.id);
+    return created;
 }
 /**
- * Refuses a session whose agent carries a skill larger than its Environment allows: its
- * manifest's `limits.skills.totalBytes`, else the Tenant's, never above the Tenant's.
- * `409 environment_unsuitable`, with each skill and its size in `details.skills`.
+ * Refuses a session whose Agent's manifest carries a skill larger than the Agent allows now: its
+ * manifest's `limits.skills.totalBytes`, else the Tenant's, never above the Tenant's, which may
+ * have been lowered since the manifest was saved. `413 limit_exceeded`, with each skill and its
+ * size in `details.skills`.
  */
-async function checkSkillLimit(t, manifest, environment) {
-    const limitBytes = limitsInForce(await readTenantLimits(t), environment.applied.limits).skills.totalBytes;
+async function checkSkillLimit(t, manifest, agent) {
+    const limitBytes = limitsInForce(await readTenantLimits(t), agent.applied.limits).skills.totalBytes;
     const { oversized } = await definitionFileIssues(t, manifest, limitBytes);
     if (oversized.length === 0)
         return;
-    fail(409, `Environment ${environment.id} allows a skill's files at most ${limitBytes} bytes together, and agent ${manifest.id} carries ${oversized.map((skill) => `'${skill.name}' (${skill.bytes})`).join(", ")}.`, { code: "environment_unsuitable", details: { limitBytes, skills: oversized } });
+    fail(413, `Agent ${agent.id} allows a skill's files at most ${limitBytes} bytes together, and its manifest carries ${oversized.map((skill) => `'${skill.name}' (${skill.bytes})`).join(", ")}.`, { code: "limit_exceeded", details: { limitBytes, skills: oversized } });
 }
 /** The session resource returned by `GET`/`PUT /v1/sessions/:id`. */
 export async function sessionView(t, s) {
@@ -270,14 +150,11 @@ export async function sessionView(t, s) {
         id: s.id,
         agentId: s.agentId,
         ownerUserId: s.ownerUserId,
+        manifest: s.definition ?? null,
         manifestHash: s.manifestHash,
-        ...(s.definitionHash === undefined ? {} : { definitionHash: s.definitionHash }),
-        implementationVersion: s.implementationVersion,
         status: s.status,
         activeTurnId: s.activeTurnId,
-        environment: s.environmentId === undefined
-            ? null
-            : { id: s.environmentId, version: s.environmentVersion ?? 1 },
+        queuedMessages: await t.countQueuedMessages(s.id),
         harness: harnessOf(s),
         ...(s.closedReason === undefined ? {} : { closedReason: s.closedReason }),
         mcpSnapshot: s.mcpSnapshot ?? null,

package/dist/tenant/status.js

@@ -47,9 +47,9 @@ async function executionStatus(stuckInvocations) {
 /** Build `TenantStatusSchema` with secrets redacted (A14). */
 export async function buildTenantStatus(ctx) {
     const health = await ctx.store.health();
-    const { counts, definitions } = await ctx.store.tx(async (t) => ({
+    const { counts, rows } = await ctx.store.tx(async (t) => ({
         counts: await t.counts(),
-        definitions: await t.listDefinitions(),
+        rows: await t.listEnvironments(),
     }));
     const [modelView, sandboxReport, execution, streams] = await Promise.all([
         ctx.vault.getHostModel(),
@@ -57,11 +57,10 @@ export async function buildTenantStatus(ctx) {
         ctx.stuckInvocations ? executionStatus(ctx.stuckInvocations) : undefined,
         ctx.streamsStatus?.(),
     ]);
-    const agents = [
-        ...new Set(definitions
-            .map((d) => d.manifest?.id)
-            .filter((id) => typeof id === "string")),
-    ]
+    // The Tenant's Agents; a pod Agent being deleted is none.
+    const agents = rows
+        .filter((row) => row.pod?.desired !== "deleted")
+        .map((row) => row.id)
         .sort()
         .map((agentId) => ({ agentId }));
     return {

package/dist/tenant/sweep.js

@@ -33,7 +33,9 @@
  *    workspaces). Idle MCP connections of the in-process harness are closed. As often as the
  *    orphan scan, pod Environments whose change stalled get a reconcile (`reconcileStalePods`).
  *    Environments unused for their `lifecycle.deleteAfter` are deleted
- *    (`sweepUnusedEnvironments`).
+ *    (`sweepUnusedAgents`).
+ *    Triggers (track T4, `triggers.ts`): on this process's first pass every active trigger's
+ *    timer is armed, later overdue ones only, and runs past `triggerRunRetentionMs` are deleted.
  * 5. **Control signals.** Signals on the control bus older than `sweep.signalRetentionMs` are
  *    deleted: followers read back only the last two minutes (`store/postgres/control.ts`).
  * 6. **Hooks.** Callbacks registered with `ctx.onSweep`.
@@ -43,10 +45,12 @@
  * step does not stop the others; the first error is rethrown at the end so the execution
  * reports it.
  */
-import { sweepUnusedEnvironments } from "./environments.js";
+import { sweepUnusedAgents } from "./agents.js";
+import { reconcileTriggers } from "./triggers.js";
 import { sweepPendingSeeds } from "../artifacts/disk.js";
 import { pendingAgentEffects, reconcilePendingAgentEffect, } from "../core/flow-host.js";
 import { hostTuning } from "../tuning.js";
+import { sweepStartChecks } from "./agent-versions.js";
 /*
  * The sweep's timings are the Host tuning's `sweep` group (`tuning.ts`):
  * - `outboxGraceMs`: how old an outbox row is before the sweep delivers it, unless its delivery
@@ -113,7 +117,12 @@ export async function sweep(ctx) {
             ]
             : []),
         // Environments unused for their `lifecycle.deleteAfter`: one query when none is due.
-        ["environments", () => sweepUnusedEnvironments(ctx, now.getTime())],
+        ["agents", () => sweepUnusedAgents(ctx, now.getTime())],
+        // Pods slower than `tenant.upgradeStartMs` to start on a new version go back (track T3).
+        ["starts", () => sweepStartChecks(ctx, now.getTime())],
+        // Triggers (track T4): every active one armed on this process's first pass, overdue ones after;
+        // runs past their retention deleted.
+        ["triggers", () => reconcileTriggers(ctx, first)],
         // Seeds of new volumes whose engine is connected and no process copies (R2d step 3).
         ["seeds", () => sweepPendingSeeds(ctx)],
         // A harness elsewhere closes its own idle MCP connections.

package/dist/tenant/transcript.d.ts

@@ -192,7 +192,7 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     redacted: number;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "harness" | "http" | "mcp" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "runtime" | "sandbox" | undefined;
     server?: string | undefined;
     tool?: string | undefined;
     skill?: string | undefined;
@@ -214,7 +214,7 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     redacted: number;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "harness" | "http" | "mcp" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "runtime" | "sandbox" | undefined;
     server?: string | undefined;
     tool?: string | undefined;
     skill?: string | undefined;
@@ -236,7 +236,7 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     redacted?: undefined;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "harness" | "http" | "mcp" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "runtime" | "sandbox" | undefined;
     server?: string | undefined;
     tool?: string | undefined;
     skill?: string | undefined;
@@ -258,7 +258,7 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     redacted?: undefined;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "harness" | "http" | "mcp" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "runtime" | "sandbox" | undefined;
     server?: string | undefined;
     tool?: string | undefined;
     skill?: string | undefined;
@@ -275,7 +275,7 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     redacted: number;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "harness" | "http" | "mcp" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "runtime" | "sandbox" | undefined;
     server?: string | undefined;
     tool?: string | undefined;
     skill?: string | undefined;
@@ -292,7 +292,7 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     redacted: number;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "harness" | "http" | "mcp" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "runtime" | "sandbox" | undefined;
     server?: string | undefined;
     tool?: string | undefined;
     skill?: string | undefined;
@@ -309,7 +309,7 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     redacted?: undefined;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "harness" | "http" | "mcp" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "runtime" | "sandbox" | undefined;
     server?: string | undefined;
     tool?: string | undefined;
     skill?: string | undefined;
@@ -326,7 +326,7 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     redacted?: undefined;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "harness" | "http" | "mcp" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "runtime" | "sandbox" | undefined;
     server?: string | undefined;
     tool?: string | undefined;
     skill?: string | undefined;
@@ -350,7 +350,7 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     redacted: number;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "harness" | "http" | "mcp" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "runtime" | "sandbox" | undefined;
     server?: string | undefined;
     tool?: string | undefined;
     skill?: string | undefined;
@@ -374,7 +374,7 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     redacted: number;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "harness" | "http" | "mcp" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "runtime" | "sandbox" | undefined;
     server?: string | undefined;
     tool?: string | undefined;
     skill?: string | undefined;
@@ -398,7 +398,7 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     redacted?: undefined;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "harness" | "http" | "mcp" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "runtime" | "sandbox" | undefined;
     server?: string | undefined;
     tool?: string | undefined;
     skill?: string | undefined;
@@ -422,7 +422,7 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     redacted?: undefined;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "harness" | "http" | "mcp" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "runtime" | "sandbox" | undefined;
     server?: string | undefined;
     tool?: string | undefined;
     skill?: string | undefined;
@@ -441,7 +441,7 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     redacted: number;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "harness" | "http" | "mcp" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "runtime" | "sandbox" | undefined;
     server?: string | undefined;
     tool?: string | undefined;
     skill?: string | undefined;
@@ -460,7 +460,7 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     redacted: number;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "harness" | "http" | "mcp" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "runtime" | "sandbox" | undefined;
     server?: string | undefined;
     tool?: string | undefined;
     skill?: string | undefined;
@@ -479,7 +479,7 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     redacted?: undefined;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "harness" | "http" | "mcp" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "runtime" | "sandbox" | undefined;
     server?: string | undefined;
     tool?: string | undefined;
     skill?: string | undefined;
@@ -498,7 +498,7 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     redacted?: undefined;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "harness" | "http" | "mcp" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "runtime" | "sandbox" | undefined;
     server?: string | undefined;
     tool?: string | undefined;
     skill?: string | undefined;