@nylorun/runtime 0.27.0-beta → 0.29.0-beta

package/dist/management-openapi.json

@@ -2,20 +2,21 @@
   "openapi": "3.2.0",
   "info": {
     "title": "Nylorun Management API",
-    "version": "0.27.0-beta",
+    "version": "0.29.0-beta",
     "x-nylorun-protocol": {
-      "min": 15,
-      "max": 15,
+      "min": 16,
+      "max": 18,
       "features": [
         "studio-principal",
         "artifacts",
         "management-api",
         "resource-server",
-        "environments",
         "model-inputs",
         "flat-manifest",
-        "environment-manifests",
         "harness-boundary",
+        "agents",
+        "session-queue",
+        "usage-by-kind",
         "tenant-fixture-model",
         "transcript-events",
         "subject-headers",
@@ -96,12 +97,17 @@
               "request_rejected",
               "invalid_request",
               "subject_required",
-              "environment_not_granted",
-              "environment_busy",
-              "environment_unavailable",
+              "agent_not_granted",
+              "session_busy",
+              "queue_full",
+              "trigger_expired",
+              "trigger_paused",
+              "memory_conflict",
+              "agent_busy",
+              "agent_unavailable",
               "placement_refused",
-              "environment_lost",
-              "environment_owner_mismatch",
+              "agent_lost",
+              "agent_owner_mismatch",
               "harness_mismatch",
               "session_closed",
               "issuer_unavailable",
@@ -109,9 +115,9 @@
               "credential_rejected",
               "mcp_preview_failed",
               "credential_conflict",
-              "environment_immutable",
+              "agent_fixed_field",
               "secret_not_in_manifest",
-              "environment_unsuitable",
+              "manifest_inconsistent",
               "manifest_not_found",
               "manifest_in_use",
               "manifest_changed",
@@ -735,7 +741,7 @@
             "type": "string",
             "enum": [
               "sessions",
-              "environments",
+              "agents",
               "all"
             ]
           },
@@ -1367,6 +1373,66 @@
                 "type": "integer",
                 "exclusiveMinimum": 0
               },
+              "triggersPerAgent": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "triggerMinIntervalMs": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "triggerRunsPerHour": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "triggerJitterPercent": {
+                "type": "integer",
+                "minimum": 0
+              },
+              "triggerJitterMaxMs": {
+                "type": "integer",
+                "minimum": 0
+              },
+              "triggerPromptChars": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "triggerRunRetentionMs": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "webhookBodyBytes": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "wakeMaxAheadMs": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "wakeNoteChars": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "memoryBytes": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "memoriesPerAgent": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "memoryIndexLines": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "memoryIndexBytes": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "sessionQueuedMessages": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
               "flowConcurrency": {
                 "type": "integer",
                 "exclusiveMinimum": 0
@@ -1433,6 +1499,21 @@
               "toolRuleFieldChars",
               "toolRuleTextChars",
               "modelBudgets",
+              "triggersPerAgent",
+              "triggerMinIntervalMs",
+              "triggerRunsPerHour",
+              "triggerJitterPercent",
+              "triggerJitterMaxMs",
+              "triggerPromptChars",
+              "triggerRunRetentionMs",
+              "webhookBodyBytes",
+              "wakeMaxAheadMs",
+              "wakeNoteChars",
+              "memoryBytes",
+              "memoriesPerAgent",
+              "memoryIndexLines",
+              "memoryIndexBytes",
+              "sessionQueuedMessages",
               "flowConcurrency",
               "flowMapItems",
               "flowLoopIterations"
@@ -1659,6 +1740,66 @@
                 "type": "integer",
                 "exclusiveMinimum": 0
               },
+              "triggersPerAgent": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "triggerMinIntervalMs": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "triggerRunsPerHour": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "triggerJitterPercent": {
+                "type": "integer",
+                "minimum": 0
+              },
+              "triggerJitterMaxMs": {
+                "type": "integer",
+                "minimum": 0
+              },
+              "triggerPromptChars": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "triggerRunRetentionMs": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "webhookBodyBytes": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "wakeMaxAheadMs": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "wakeNoteChars": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "memoryBytes": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "memoriesPerAgent": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "memoryIndexLines": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "memoryIndexBytes": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
+              "sessionQueuedMessages": {
+                "type": "integer",
+                "exclusiveMinimum": 0
+              },
               "flowConcurrency": {
                 "type": "integer",
                 "exclusiveMinimum": 0
@@ -2010,7 +2151,7 @@
             "type": "string",
             "enum": [
               "tenant",
-              "agent",
+              "manifest",
               "turn"
             ]
           },
@@ -2062,7 +2203,7 @@
                   "type": "string",
                   "enum": [
                     "tenant",
-                    "agent",
+                    "manifest",
                     "turn"
                   ]
                 },
@@ -2114,7 +2255,7 @@
                   "type": "string",
                   "enum": [
                     "tenant",
-                    "agent",
+                    "manifest",
                     "turn"
                   ]
                 },
@@ -2168,11 +2309,13 @@
                 },
                 "tool": {
                   "type": "string",
-                  "minLength": 1
+                  "minLength": 1,
+                  "description": "The tool's identity: an MCP tool's own name on its `server`, or an HTTP tool's declared name, never the name the model calls it by. `*` matches any run of characters; a name with `__` in it is refused"
                 },
                 "server": {
                   "type": "string",
-                  "minLength": 1
+                  "minLength": 1,
+                  "description": "An MCP server's name; `*` matches any run of characters"
                 },
                 "kind": {
                   "type": "string",
@@ -2183,7 +2326,8 @@
                 },
                 "agent": {
                   "type": "string",
-                  "minLength": 1
+                  "minLength": 1,
+                  "description": "The agent that calls the tool: the agent manifest's name, or the id of an agent used as a tool or of a flow's agent, never an Agent's id. `*` matches any run of characters"
                 },
                 "when": {
                   "type": "object",
@@ -2218,7 +2362,8 @@
                       }
                     },
                     "additionalProperties": false
-                  }
+                  },
+                  "description": "Fields of the call's input by dotted path, each tested by every test its condition sets"
                 },
                 "reason": {
                   "type": "string",
@@ -2266,11 +2411,13 @@
                 },
                 "tool": {
                   "type": "string",
-                  "minLength": 1
+                  "minLength": 1,
+                  "description": "The tool's identity: an MCP tool's own name on its `server`, or an HTTP tool's declared name, never the name the model calls it by. `*` matches any run of characters; a name with `__` in it is refused"
                 },
                 "server": {
                   "type": "string",
-                  "minLength": 1
+                  "minLength": 1,
+                  "description": "An MCP server's name; `*` matches any run of characters"
                 },
                 "kind": {
                   "type": "string",
@@ -2281,7 +2428,8 @@
                 },
                 "agent": {
                   "type": "string",
-                  "minLength": 1
+                  "minLength": 1,
+                  "description": "The agent that calls the tool: the agent manifest's name, or the id of an agent used as a tool or of a flow's agent, never an Agent's id. `*` matches any run of characters"
                 },
                 "when": {
                   "type": "object",
@@ -2316,7 +2464,8 @@
                       }
                     },
                     "additionalProperties": false
-                  }
+                  },
+                  "description": "Fields of the call's input by dotted path, each tested by every test its condition sets"
                 },
                 "reason": {
                   "type": "string",
@@ -2777,12 +2926,6 @@
           "agentId": {
             "type": "string"
           },
-          "environmentId": {
-            "type": [
-              "string",
-              "null"
-            ]
-          },
           "complete": {
             "type": "boolean"
           },
@@ -2826,7 +2969,7 @@
                 "credential": {
                   "type": "object",
                   "properties": {
-                    "environmentId": {
+                    "agentId": {
                       "type": "string"
                     },
                     "name": {
@@ -2837,7 +2980,7 @@
                     }
                   },
                   "required": [
-                    "environmentId",
+                    "agentId",
                     "name"
                   ],
                   "additionalProperties": false
@@ -2861,7 +3004,6 @@
         },
         "required": [
           "agentId",
-          "environmentId",
           "complete",
           "entries"
         ],
@@ -2876,11 +3018,7 @@
           },
           "agentId": {
             "type": "string",
-            "minLength": 1
-          },
-          "environmentId": {
-            "type": "string",
-            "description": "An Environment id, such as `user-42` or `users/alice/web`"
+            "description": "An Agent id, such as `triage` or `users/alice/triage`"
           }
         },
         "required": [
@@ -3009,9 +3147,9 @@
             "type": "string",
             "pattern": "^[A-Za-z0-9_-]{1,64}$"
           },
-          "environmentId": {
+          "agentId": {
             "type": "string",
-            "description": "An Environment id, such as `user-42` or `users/alice/web`"
+            "description": "An Agent id, such as `triage` or `users/alice/triage`"
           }
         },
         "required": [
@@ -3281,7 +3419,7 @@
                 "agents:read",
                 "agents:write",
                 "sessions:own",
-                "environments:write",
+                "agent-manifests:write",
                 "studio"
               ]
             }
@@ -3303,13 +3441,6 @@
               }
             ]
           },
-          "environments": {
-            "type": "array",
-            "items": {
-              "type": "string"
-            },
-            "description": "A token caller's Environment grants (empty reaches none); absent when no grant limits the caller"
-          },
           "via": {
             "type": "string",
             "description": "How the caller authenticated: `application:<principalId>`, `management:<principalId>`, `subject` or `issuer:<name>`"
@@ -3337,7 +3468,7 @@
           "turnId": {
             "type": "string"
           },
-          "agentId": {
+          "manifestName": {
             "type": "string"
           },
           "provider": {
@@ -3355,6 +3486,18 @@
           "at": {
             "type": "string"
           },
+          "startedAt": {
+            "type": [
+              "string",
+              "null"
+            ]
+          },
+          "endedAt": {
+            "type": [
+              "string",
+              "null"
+            ]
+          },
           "outcome": {
             "type": "string",
             "enum": [
@@ -3410,6 +3553,37 @@
                   "boolean",
                   "null"
                 ]
+              },
+              "costSplit": {
+                "type": [
+                  "object",
+                  "null"
+                ],
+                "properties": {
+                  "input": {
+                    "type": "number",
+                    "minimum": 0
+                  },
+                  "cacheRead": {
+                    "type": "number",
+                    "minimum": 0
+                  },
+                  "cacheWrite": {
+                    "type": "number",
+                    "minimum": 0
+                  },
+                  "output": {
+                    "type": "number",
+                    "minimum": 0
+                  }
+                },
+                "required": [
+                  "input",
+                  "cacheRead",
+                  "cacheWrite",
+                  "output"
+                ],
+                "additionalProperties": false
               }
             },
             "required": [
@@ -3422,7 +3596,8 @@
               "costUsd",
               "duplicate",
               "tokensReported",
-              "costKnown"
+              "costKnown",
+              "costSplit"
             ],
             "additionalProperties": false
           }
@@ -3432,10 +3607,12 @@
           "effectId",
           "sessionId",
           "turnId",
-          "agentId",
+          "manifestName",
           "provider",
           "model",
           "at",
+          "startedAt",
+          "endedAt",
           "outcome",
           "usage"
         ],
@@ -3494,10 +3671,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -3596,10 +3773,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -3694,7 +3871,7 @@
           "Tenant"
         ],
         "summary": "Reset the Tenant",
-        "description": "Deletes its sessions, its Environments (with their vaults), or both, after draining or cancelling the turns in progress. The Tenant stays open.",
+        "description": "Deletes its sessions, its Agents (with their vaults), or both, after draining or cancelling the turns in progress. The Tenant stays open.",
         "security": [
           {
             "managementKey": []
@@ -3708,10 +3885,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -3806,7 +3983,7 @@
           "Tenant"
         ],
         "summary": "Get who the caller is",
-        "description": "The subject, scopes, agents and sandbox grants of the credential that sends it: an application key (alone or acting for a subject), a management key (`via: management:<principalId>`, no scopes, no agents), or a trusted issuer's token (`via: issuer:<name>`).",
+        "description": "The subject, scopes and Agent grants of the credential that sends it: an application key (alone or acting for a subject), a management key (`via: management:<principalId>`, no scopes, no agents), or a trusted issuer's token (`via: issuer:<name>`).",
         "security": [
           {
             "applicationKey": []
@@ -3829,10 +4006,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           },
@@ -3964,10 +4141,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -4076,10 +4253,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -4179,10 +4356,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -4274,10 +4451,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -4376,10 +4553,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -4487,10 +4664,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -4588,10 +4765,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -4687,10 +4864,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -4798,10 +4975,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -4912,7 +5089,7 @@
               "type": "string",
               "enum": [
                 "tenant",
-                "agent",
+                "manifest",
                 "turn"
               ],
               "default": "tenant"
@@ -4947,10 +5124,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -5067,10 +5244,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -5168,10 +5345,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -5268,10 +5445,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -5379,10 +5556,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -5438,6 +5615,9 @@
               }
             }
           },
+          "409": {
+            "description": "A stored rule names an MCP tool by its model-facing `server__tool` name: every call is refused until the policy is set again"
+          },
           "426": {
             "description": "`Nylorun-Protocol` missing or unsupported",
             "content": {
@@ -5465,7 +5645,7 @@
           "Tool policy"
         ],
         "summary": "Set the Tenant's tool policy",
-        "description": "Replaces every rule. The Tool Gate applies them to each MCP and HTTP tool call of every harness, before it sends the call: the strictest rule that matches decides. `deny` refuses the call (the model gets `tool.denied`), `ask` holds it and pauses the turn until a person answers it with an `approve` command on the session, `allow` runs it. A call no rule matches runs. A rule matches when every selector it sets matches: `tool` (the name the model calls it by; `*` matches any run of characters), `server` (an MCP server's name), `kind` (`mcp` or `http`), `agent` (the agent that calls it) and `when` (fields of the call's input by dotted path, each tested with `equals`, `in`, `gt`, `gte`, `lt`, `lte` or `matches`). Sandbox tools never cross the gate. An empty list allows every call.",
+        "description": "Replaces every rule. The Tool Gate applies them to each MCP and HTTP tool call of every harness, before it sends the call: the strictest rule that matches decides. `deny` refuses the call (the model gets `tool.denied`), `ask` holds it and pauses the turn until a person answers it with an `approve` command on the session, `allow` runs it. A call no rule matches runs. A rule matches when every selector it sets matches: `tool` (the tool's identity: an MCP tool's own name on its `server`, or an HTTP tool's declared name, never the name the model calls it by; `*` matches any run of characters), `server` (an MCP server's name), `kind` (`mcp` or `http`), `agent` (the agent that calls it: the agent manifest's name, or the id of an agent used as a tool or of a flow's agent, never an Agent's id) and `when` (fields of the call's input by dotted path, each tested with `equals`, `in`, `gt`, `gte`, `lt`, `lte` or `matches`). A `tool` with `__` in it, a model-facing `server__tool` name, is refused (`400`): name an MCP tool by `server` and `tool`. A stored policy with such a rule refuses every call until it is set again. Sandbox tools never cross the gate. An empty list allows every call.",
         "security": [
           {
             "managementKey": []
@@ -5479,10 +5659,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -5576,8 +5756,8 @@
         "tags": [
           "Credential coverage"
         ],
-        "summary": "Check an agent's credentials against an Environment",
-        "description": "For each remote MCP server and each HTTP tool with a `credential` that the saved agent `agentId` declares (its own, its agents used as tools' and a flow's), the credential a session that names `environmentId` would send: the Environment's secret bound to the URL (`covered`), or none (`missing`). No secret is read and no server is called.",
+        "summary": "Check an Agent's credentials",
+        "description": "For each remote MCP server and each HTTP tool with a `credential` that Agent `agentId`'s manifest version declares (its own, its agents used as tools' and a flow's), the credential its sessions would send: the Agent's secret bound to the URL (`covered`), or none (`missing`). No secret is read and no server is called.",
         "security": [
           {
             "managementKey": []
@@ -5591,10 +5771,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -5651,7 +5831,7 @@
             }
           },
           "404": {
-            "description": "No such agent, or no such Environment",
+            "description": "No such Agent",
             "content": {
               "application/json": {
                 "schema": {
@@ -5689,7 +5869,7 @@
           "MCP servers"
         ],
         "summary": "Preview an MCP server's tools",
-        "description": "Connects to the remote MCP server at `url` with the credential for that URL in the vault of `environmentId`, if given (its headers and `via`; never an identity header), under the Host's address policy, lists its tools within 15 s and closes the connection. It never calls a tool. Each tool comes with the name the model would call it (`modelName`, made with `name`), its annotations and its input schema's size. A server that answers `401` is `authRequired`, with its RFC 9728 protected-resource metadata when it publishes any: it needs a person's sign-in, so reach it through a gateway (`via`), or with a key. No credential value is in the answer.",
+        "description": "Connects to the remote MCP server at `url` with the credential for that URL in the vault of the Agent `agentId`, if given (its headers and `via`; never an identity header), under the Host's address policy, lists its tools within 15 s and closes the connection. It never calls a tool. Each tool comes with the name the model would call it (`modelName`, made with `name`), its annotations and its input schema's size. A server that answers `401` is `authRequired`, with its RFC 9728 protected-resource metadata when it publishes any: it needs a person's sign-in, so reach it through a gateway (`via`), or with a key. No credential value is in the answer.",
         "security": [
           {
             "managementKey": []
@@ -5703,10 +5883,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -5773,7 +5953,7 @@
             }
           },
           "409": {
-            "description": "The Environment's credential for the URL cannot be used",
+            "description": "The Agent's credential for the URL cannot be used",
             "content": {
               "application/json": {
                 "schema": {
@@ -5834,10 +6014,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -5936,10 +6116,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -6058,10 +6238,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -6158,7 +6338,7 @@
         "tags": [
           "Settings"
         ],
-        "summary": "Get the Tenant's sandbox backend and Environment settings",
+        "summary": "Get the Tenant's sandbox backend and Agent compute settings",
         "security": [
           {
             "managementKey": []
@@ -6172,10 +6352,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -6257,8 +6437,8 @@
         "tags": [
           "Settings"
         ],
-        "summary": "Set the Tenant's Environment settings",
-        "description": "The limits every Environment's recipe must fit, the pods' stop grace and where harnesses may run (Tenant setting `environments.config`).",
+        "summary": "Set the Tenant's Agent compute settings",
+        "description": "The limits every Agent's runtime must fit, the pods' stop grace and where harnesses may run (Tenant setting `environments.config`).",
         "security": [
           {
             "managementKey": []
@@ -6272,10 +6452,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -6383,10 +6563,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -6483,10 +6663,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -6594,10 +6774,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -6680,7 +6860,7 @@
           "Settings"
         ],
         "summary": "Set the Tenant's skill limit",
-        "description": "The most bytes one skill's files may hold together, for every agent the Tenant stores and every Environment, whose manifest may set a lower one (`limits.skills`). Unset, the limit takes the default (2 GiB). Agents already stored keep their skills; a session opens only while its agent's skills fit.",
+        "description": "The most bytes one skill's files may hold together, for every agent manifest the Tenant stores, whose runtime section may set a lower one (`limits.skills`). Unset, the limit takes the default (2 GiB). Manifests already saved keep their skills; a session opens only while its Agent's skills fit.",
         "security": [
           {
             "managementKey": []
@@ -6694,10 +6874,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -6792,7 +6972,7 @@
           "Settings"
         ],
         "summary": "Get the Tenant's Runtime limits",
-        "description": "The sizes, counts and deadlines the Runtime holds what crosses it to: the Tenant's (Tenant setting `limits.config`), with the default for each it leaves out. Harnesses get the ones they must respect in `turn.start.limits` (record entry, model call, model file, tool answer, custom harness state, Harness API chunk, folder entries). Defaults and ceilings: `recordEntryBytes` 983040 bytes, at most 983040 (S2 takes records of at most 1048576 bytes, and an event's envelope needs 65536 beside its payload); `modelCallBytes` 33554432 bytes, at most 536870888 (the Model Gate reads a call's body as one string, of at most 536870888 characters); `modelFileBytes` 8388608 bytes, at most 402653166 (a file goes to the provider as one base64 string, of at most 536870888 characters); `toolAnswerBytes` 8388608 bytes, at most 33554432 (a harness reports the answer to core in one Harness API frame (67108864 bytes), as JSON, whose escapes may double it); `harnessStateBytes` 262144 bytes, at most 33554432 (the state crosses in one Harness API frame (67108864 bytes) with the rest of its output or turn.start); `chunkBytes` 16777216 bytes, at most 50266112 (a chunk crosses in base64 in one Harness API frame (67108864 bytes), with room for the frame's own JSON); `folderEntries` 10000 entries, at most 4628197 (a folder's manifest is read as one string, of at most 536870888 characters, and each entry takes at least 116); `requestBodyBytes` 1048576 bytes, at most 536870888 (a body is read as one string, of at most 536870888 characters); `messageParts` 32 entries, at most 19884106 (parts arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 27); `pageItems` 200 entries, at most 178956962 (a page's items go in one response body, written as one string of at most 536870888 characters, and each takes at least 3); `exportPageItems` 1000 entries, at most 178956962 (a page's calls go in one response body, written as one string of at most 536870888 characters, and each takes at least 3); `environmentEventItems` 1000 entries, at most 178956962 (the events go in one response body, written as one string of at most 536870888 characters, and each takes at least 3); `inlineFileBytes` 20971520 bytes, at most 402653166 (a file sent inline arrives in base64 in a body read as one string, of at most 536870888 characters); `a2aWaitMs` 300000 milliseconds, at most 2147483647 (the wait is timed with a JavaScript timer, which waits at most 2147483647 ms); `errorExcerptChars` 2000 characters, at most 163840 (the excerpt is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `traceContentBytes` 8192 bytes, at most 983040 (span content is cut from one record entry, which holds at most 983040 bytes); `environmentLabels` 32 entries, at most 59652320 (labels arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 9); `artifactLabels` 32 entries, at most 59652320 (labels arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 9); `labelKeyChars` 63 characters, at most 536870888 (a label key arrives in one request body, read as one string of at most 536870888 characters); `labelValueChars` 256 characters, at most 536870888 (a label value arrives in one request body, read as one string of at most 536870888 characters); `environmentSetupCommands` 16 entries, at most 33554430 (setup commands arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 16); `environmentFiles` 16 entries, at most 16268814 (input file entries arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 33); `environmentFilesPerEntry` 1000 entries, at most 6710886 (the files of an entry arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 80); `environmentSecretSlots` 64 entries, at most 14128181 (secret slots arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 38); `setupCommandChars` 4096 characters, at most 43690 (a command runs as one argument of /bin/sh -c, which Linux takes up to 131072 bytes long (MAX_ARG_STRLEN, with its NUL), and UTF-8 may take 3 bytes for a character); `setupCommandMs` 1800000 milliseconds, at most 2147483647 (the engine times a command with a JavaScript timer, which waits at most 2147483647 ms); `setupOutputChars` 4096 characters, at most 163840 (the output is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `setupReasonChars` 500 characters, at most 163840 (the reason is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `setupCommandExcerptChars` 80 characters, at most 163840 (the reason is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `manifestDescriptionChars` 1024 characters, at most 536870888 (a description arrives in one request body, read as one string of at most 536870888 characters); `secretDescriptionChars` 500 characters, at most 536870888 (a description arrives in one request body, read as one string of at most 536870888 characters); `secretValueChars` 8192 characters, at most 536870888 (a value arrives in one request body, read as one string of at most 536870888 characters); `secretHosts` 32 entries, at most 89478481 (hosts arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 6); `diskVersionEntries` 200000 entries, at most 1917396 (a disk is listed in one Harness API frame (67108864 bytes, each entry at least 35), and a version's manifest is read as one string of at most 536870888 characters); `diskVersionBytes` 10737418240 bytes, at most 9007199254740991 (the files' sizes are added up in a JavaScript number, exact up to 9007199254740991); `diskLeaseMs` 120000 milliseconds, at most 2147483647 (the lease is renewed with a JavaScript timer, which waits at most 2147483647 ms); `diskPodWaitMs` 60000 milliseconds, at most 9007199254740991 (the deadline is reckoned from the clock in a JavaScript number, exact up to 9007199254740991); `modelRequestMs` 600000 milliseconds, at most 2147483647 (the provider's SDK times the request with a JavaScript timer, which waits at most 2147483647 ms); `modelIdleMs` 300000 milliseconds, at most 2147483647 (the stream's silence is timed with a JavaScript timer, which waits at most 2147483647 ms); `modelAttempts` 3 attempts, at most 9007199254740991 (attempts are counted in a JavaScript number, exact up to 9007199254740991); `modelRetryDelayMs` 2000 milliseconds, at most 2147483647 (the delay is waited with a JavaScript timer, which waits at most 2147483647 ms); `modelProviderRetries` 2 retries, at most 9007199254740991 (retries are counted in a JavaScript number, exact up to 9007199254740991); `modelRetryDelayMaxMs` 60000 milliseconds, at most 2147483647 (the delay is waited with a JavaScript timer, which waits at most 2147483647 ms); `toolAttempts` 3 attempts, at most 9007199254740991 (sends are counted in a JavaScript number, exact up to 9007199254740991); `httpToolTimeoutMs` 300000 milliseconds, at most 2147483647 (the call is timed with a JavaScript timer, which waits at most 2147483647 ms); `mcpSnapshotBytes` 4194304 bytes, at most 16777216 (the facts cross in turn.start, one Harness API frame (67108864 bytes), beside the harness's state (at most half of it) and the rest); `mcpPreviewMs` 15000 milliseconds, at most 2147483647 (the preview is timed with a JavaScript timer, which waits at most 2147483647 ms); `mcpMetadataBytes` 65536 bytes, at most 536870888 (the document is read as one string, of at most 536870888 characters); `toolRules` 200 entries, at most 28256362 (rules arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 19); `toolRuleFieldChars` 200 characters, at most 536870888 (a selector arrives in one request body, read as one string of at most 536870888 characters); `toolRuleTextChars` 500 characters, at most 536870888 (a text arrives in one request body, read as one string of at most 536870888 characters); `modelBudgets` 100 entries, at most 28256362 (budgets arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 19); `flowConcurrency` 8 effects, at most 9007199254740991 (running effects are counted in a JavaScript number, exact up to 9007199254740991); `flowMapItems` 1000 entries, at most 9007199254740991 (items are counted in a JavaScript number, exact up to 9007199254740991); `flowLoopIterations` 100 iterations, at most 9007199254740991 (iterations are counted in a JavaScript number, exact up to 9007199254740991).",
+        "description": "The sizes, counts and deadlines the Runtime holds what crosses it to: the Tenant's (Tenant setting `limits.config`), with the default for each it leaves out. Harnesses get the ones they must respect in `turn.start.limits` (record entry, model call, model file, tool answer, custom harness state, Harness API chunk, folder entries). Defaults and ceilings: `recordEntryBytes` 983040 bytes, at most 983040 (S2 takes records of at most 1048576 bytes, and an event's envelope needs 65536 beside its payload); `modelCallBytes` 33554432 bytes, at most 536870888 (the Model Gate reads a call's body as one string, of at most 536870888 characters); `modelFileBytes` 8388608 bytes, at most 402653166 (a file goes to the provider as one base64 string, of at most 536870888 characters); `toolAnswerBytes` 8388608 bytes, at most 33554432 (a harness reports the answer to core in one Harness API frame (67108864 bytes), as JSON, whose escapes may double it); `harnessStateBytes` 262144 bytes, at most 33554432 (the state crosses in one Harness API frame (67108864 bytes) with the rest of its output or turn.start); `chunkBytes` 16777216 bytes, at most 50266112 (a chunk crosses in base64 in one Harness API frame (67108864 bytes), with room for the frame's own JSON); `folderEntries` 10000 entries, at most 4628197 (a folder's manifest is read as one string, of at most 536870888 characters, and each entry takes at least 116); `requestBodyBytes` 1048576 bytes, at most 536870888 (a body is read as one string, of at most 536870888 characters); `messageParts` 32 entries, at most 19884106 (parts arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 27); `pageItems` 200 entries, at most 178956962 (a page's items go in one response body, written as one string of at most 536870888 characters, and each takes at least 3); `exportPageItems` 1000 entries, at most 178956962 (a page's calls go in one response body, written as one string of at most 536870888 characters, and each takes at least 3); `environmentEventItems` 1000 entries, at most 178956962 (the events go in one response body, written as one string of at most 536870888 characters, and each takes at least 3); `inlineFileBytes` 20971520 bytes, at most 402653166 (a file sent inline arrives in base64 in a body read as one string, of at most 536870888 characters); `a2aWaitMs` 300000 milliseconds, at most 2147483647 (the wait is timed with a JavaScript timer, which waits at most 2147483647 ms); `errorExcerptChars` 2000 characters, at most 163840 (the excerpt is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `traceContentBytes` 8192 bytes, at most 983040 (span content is cut from one record entry, which holds at most 983040 bytes); `environmentLabels` 32 entries, at most 59652320 (labels arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 9); `artifactLabels` 32 entries, at most 59652320 (labels arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 9); `labelKeyChars` 63 characters, at most 536870888 (a label key arrives in one request body, read as one string of at most 536870888 characters); `labelValueChars` 256 characters, at most 536870888 (a label value arrives in one request body, read as one string of at most 536870888 characters); `environmentSetupCommands` 16 entries, at most 33554430 (setup commands arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 16); `environmentFiles` 16 entries, at most 16268814 (input file entries arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 33); `environmentFilesPerEntry` 1000 entries, at most 6710886 (the files of an entry arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 80); `environmentSecretSlots` 64 entries, at most 14128181 (secret slots arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 38); `setupCommandChars` 4096 characters, at most 43690 (a command runs as one argument of /bin/sh -c, which Linux takes up to 131072 bytes long (MAX_ARG_STRLEN, with its NUL), and UTF-8 may take 3 bytes for a character); `setupCommandMs` 1800000 milliseconds, at most 2147483647 (the engine times a command with a JavaScript timer, which waits at most 2147483647 ms); `setupOutputChars` 4096 characters, at most 163840 (the output is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `setupReasonChars` 500 characters, at most 163840 (the reason is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `setupCommandExcerptChars` 80 characters, at most 163840 (the reason is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `manifestDescriptionChars` 1024 characters, at most 536870888 (a description arrives in one request body, read as one string of at most 536870888 characters); `secretDescriptionChars` 500 characters, at most 536870888 (a description arrives in one request body, read as one string of at most 536870888 characters); `secretValueChars` 8192 characters, at most 536870888 (a value arrives in one request body, read as one string of at most 536870888 characters); `secretHosts` 32 entries, at most 89478481 (hosts arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 6); `diskVersionEntries` 200000 entries, at most 1917396 (a disk is listed in one Harness API frame (67108864 bytes, each entry at least 35), and a version's manifest is read as one string of at most 536870888 characters); `diskVersionBytes` 10737418240 bytes, at most 9007199254740991 (the files' sizes are added up in a JavaScript number, exact up to 9007199254740991); `diskLeaseMs` 120000 milliseconds, at most 2147483647 (the lease is renewed with a JavaScript timer, which waits at most 2147483647 ms); `diskPodWaitMs` 60000 milliseconds, at most 9007199254740991 (the deadline is reckoned from the clock in a JavaScript number, exact up to 9007199254740991); `modelRequestMs` 600000 milliseconds, at most 2147483647 (the provider's SDK times the request with a JavaScript timer, which waits at most 2147483647 ms); `modelIdleMs` 300000 milliseconds, at most 2147483647 (the stream's silence is timed with a JavaScript timer, which waits at most 2147483647 ms); `modelAttempts` 3 attempts, at most 9007199254740991 (attempts are counted in a JavaScript number, exact up to 9007199254740991); `modelRetryDelayMs` 2000 milliseconds, at most 2147483647 (the delay is waited with a JavaScript timer, which waits at most 2147483647 ms); `modelProviderRetries` 2 retries, at most 9007199254740991 (retries are counted in a JavaScript number, exact up to 9007199254740991); `modelRetryDelayMaxMs` 60000 milliseconds, at most 2147483647 (the delay is waited with a JavaScript timer, which waits at most 2147483647 ms); `toolAttempts` 3 attempts, at most 9007199254740991 (sends are counted in a JavaScript number, exact up to 9007199254740991); `httpToolTimeoutMs` 300000 milliseconds, at most 2147483647 (the call is timed with a JavaScript timer, which waits at most 2147483647 ms); `mcpSnapshotBytes` 4194304 bytes, at most 16777216 (the facts cross in turn.start, one Harness API frame (67108864 bytes), beside the harness's state (at most half of it) and the rest); `mcpPreviewMs` 15000 milliseconds, at most 2147483647 (the preview is timed with a JavaScript timer, which waits at most 2147483647 ms); `mcpMetadataBytes` 65536 bytes, at most 536870888 (the document is read as one string, of at most 536870888 characters); `toolRules` 200 entries, at most 28256362 (rules arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 19); `toolRuleFieldChars` 200 characters, at most 536870888 (a selector arrives in one request body, read as one string of at most 536870888 characters); `toolRuleTextChars` 500 characters, at most 536870888 (a text arrives in one request body, read as one string of at most 536870888 characters); `modelBudgets` 100 entries, at most 28256362 (budgets arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 19); `triggersPerAgent` 20 entries, at most 8521760 (triggers arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 63); `triggerMinIntervalMs` 60000 milliseconds, at most 9007199254740991 (the gap is reckoned from the clock in a JavaScript number, exact up to 9007199254740991); `triggerRunsPerHour` 60 runs, at most 9007199254740991 (runs are counted in a JavaScript number, exact up to 9007199254740991); `triggerJitterPercent` 10 percent, at most 50 (an offset past half the interval could move a run past the next one); `triggerJitterMaxMs` 300000 milliseconds, at most 2147483647 (the offset is waited with a JavaScript timer, which waits at most 2147483647 ms); `triggerPromptChars` 8000 characters, at most 163840 (the prompt is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `triggerRunRetentionMs` 2592000000 milliseconds, at most 9007199254740991 (the age is reckoned from the clock in a JavaScript number, exact up to 9007199254740991); `wakeMaxAheadMs` 2592000000 milliseconds, at most 9007199254740991 (the time is reckoned from the clock in a JavaScript number, exact up to 9007199254740991); `wakeNoteChars` 2000 characters, at most 163840 (the note is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `memoryBytes` 102400 bytes, at most 33554432 (a memory reaches a harness in one Harness API frame (67108864 bytes), as JSON, whose escapes may double it); `memoriesPerAgent` 10000 entries, at most 9007199254740991 (memories are counted in a JavaScript number, exact up to 9007199254740991); `memoryIndexLines` 200 entries, at most 9007199254740991 (the lines are counted in a JavaScript number, exact up to 9007199254740991); `memoryIndexBytes` 25600 bytes, at most 16777216 (the index crosses in turn.start, one Harness API frame (67108864 bytes), beside the harness's state and the rest); `webhookBodyBytes` 262144 bytes, at most 983040 (the payload goes into one record entry, which holds at most 983040 bytes); `sessionQueuedMessages` 100 entries, at most 9007199254740991 (queued messages are counted in a JavaScript number, exact up to 9007199254740991); `flowConcurrency` 8 effects, at most 9007199254740991 (running effects are counted in a JavaScript number, exact up to 9007199254740991); `flowMapItems` 1000 entries, at most 9007199254740991 (items are counted in a JavaScript number, exact up to 9007199254740991); `flowLoopIterations` 100 iterations, at most 9007199254740991 (iterations are counted in a JavaScript number, exact up to 9007199254740991).",
         "security": [
           {
             "managementKey": []
@@ -6806,10 +6986,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -6892,7 +7072,7 @@
           "Settings"
         ],
         "summary": "Set the Tenant's Runtime limits",
-        "description": "Replaces the Tenant's Runtime limits: a limit left out takes its default. A limit above its ceiling, which a dependency sets, is `400` naming the ceiling, and nothing is written. Each is read where it is checked, so a new value holds for the next request, write, call or segment. Defaults and ceilings: `recordEntryBytes` 983040 bytes, at most 983040 (S2 takes records of at most 1048576 bytes, and an event's envelope needs 65536 beside its payload); `modelCallBytes` 33554432 bytes, at most 536870888 (the Model Gate reads a call's body as one string, of at most 536870888 characters); `modelFileBytes` 8388608 bytes, at most 402653166 (a file goes to the provider as one base64 string, of at most 536870888 characters); `toolAnswerBytes` 8388608 bytes, at most 33554432 (a harness reports the answer to core in one Harness API frame (67108864 bytes), as JSON, whose escapes may double it); `harnessStateBytes` 262144 bytes, at most 33554432 (the state crosses in one Harness API frame (67108864 bytes) with the rest of its output or turn.start); `chunkBytes` 16777216 bytes, at most 50266112 (a chunk crosses in base64 in one Harness API frame (67108864 bytes), with room for the frame's own JSON); `folderEntries` 10000 entries, at most 4628197 (a folder's manifest is read as one string, of at most 536870888 characters, and each entry takes at least 116); `requestBodyBytes` 1048576 bytes, at most 536870888 (a body is read as one string, of at most 536870888 characters); `messageParts` 32 entries, at most 19884106 (parts arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 27); `pageItems` 200 entries, at most 178956962 (a page's items go in one response body, written as one string of at most 536870888 characters, and each takes at least 3); `exportPageItems` 1000 entries, at most 178956962 (a page's calls go in one response body, written as one string of at most 536870888 characters, and each takes at least 3); `environmentEventItems` 1000 entries, at most 178956962 (the events go in one response body, written as one string of at most 536870888 characters, and each takes at least 3); `inlineFileBytes` 20971520 bytes, at most 402653166 (a file sent inline arrives in base64 in a body read as one string, of at most 536870888 characters); `a2aWaitMs` 300000 milliseconds, at most 2147483647 (the wait is timed with a JavaScript timer, which waits at most 2147483647 ms); `errorExcerptChars` 2000 characters, at most 163840 (the excerpt is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `traceContentBytes` 8192 bytes, at most 983040 (span content is cut from one record entry, which holds at most 983040 bytes); `environmentLabels` 32 entries, at most 59652320 (labels arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 9); `artifactLabels` 32 entries, at most 59652320 (labels arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 9); `labelKeyChars` 63 characters, at most 536870888 (a label key arrives in one request body, read as one string of at most 536870888 characters); `labelValueChars` 256 characters, at most 536870888 (a label value arrives in one request body, read as one string of at most 536870888 characters); `environmentSetupCommands` 16 entries, at most 33554430 (setup commands arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 16); `environmentFiles` 16 entries, at most 16268814 (input file entries arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 33); `environmentFilesPerEntry` 1000 entries, at most 6710886 (the files of an entry arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 80); `environmentSecretSlots` 64 entries, at most 14128181 (secret slots arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 38); `setupCommandChars` 4096 characters, at most 43690 (a command runs as one argument of /bin/sh -c, which Linux takes up to 131072 bytes long (MAX_ARG_STRLEN, with its NUL), and UTF-8 may take 3 bytes for a character); `setupCommandMs` 1800000 milliseconds, at most 2147483647 (the engine times a command with a JavaScript timer, which waits at most 2147483647 ms); `setupOutputChars` 4096 characters, at most 163840 (the output is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `setupReasonChars` 500 characters, at most 163840 (the reason is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `setupCommandExcerptChars` 80 characters, at most 163840 (the reason is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `manifestDescriptionChars` 1024 characters, at most 536870888 (a description arrives in one request body, read as one string of at most 536870888 characters); `secretDescriptionChars` 500 characters, at most 536870888 (a description arrives in one request body, read as one string of at most 536870888 characters); `secretValueChars` 8192 characters, at most 536870888 (a value arrives in one request body, read as one string of at most 536870888 characters); `secretHosts` 32 entries, at most 89478481 (hosts arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 6); `diskVersionEntries` 200000 entries, at most 1917396 (a disk is listed in one Harness API frame (67108864 bytes, each entry at least 35), and a version's manifest is read as one string of at most 536870888 characters); `diskVersionBytes` 10737418240 bytes, at most 9007199254740991 (the files' sizes are added up in a JavaScript number, exact up to 9007199254740991); `diskLeaseMs` 120000 milliseconds, at most 2147483647 (the lease is renewed with a JavaScript timer, which waits at most 2147483647 ms); `diskPodWaitMs` 60000 milliseconds, at most 9007199254740991 (the deadline is reckoned from the clock in a JavaScript number, exact up to 9007199254740991); `modelRequestMs` 600000 milliseconds, at most 2147483647 (the provider's SDK times the request with a JavaScript timer, which waits at most 2147483647 ms); `modelIdleMs` 300000 milliseconds, at most 2147483647 (the stream's silence is timed with a JavaScript timer, which waits at most 2147483647 ms); `modelAttempts` 3 attempts, at most 9007199254740991 (attempts are counted in a JavaScript number, exact up to 9007199254740991); `modelRetryDelayMs` 2000 milliseconds, at most 2147483647 (the delay is waited with a JavaScript timer, which waits at most 2147483647 ms); `modelProviderRetries` 2 retries, at most 9007199254740991 (retries are counted in a JavaScript number, exact up to 9007199254740991); `modelRetryDelayMaxMs` 60000 milliseconds, at most 2147483647 (the delay is waited with a JavaScript timer, which waits at most 2147483647 ms); `toolAttempts` 3 attempts, at most 9007199254740991 (sends are counted in a JavaScript number, exact up to 9007199254740991); `httpToolTimeoutMs` 300000 milliseconds, at most 2147483647 (the call is timed with a JavaScript timer, which waits at most 2147483647 ms); `mcpSnapshotBytes` 4194304 bytes, at most 16777216 (the facts cross in turn.start, one Harness API frame (67108864 bytes), beside the harness's state (at most half of it) and the rest); `mcpPreviewMs` 15000 milliseconds, at most 2147483647 (the preview is timed with a JavaScript timer, which waits at most 2147483647 ms); `mcpMetadataBytes` 65536 bytes, at most 536870888 (the document is read as one string, of at most 536870888 characters); `toolRules` 200 entries, at most 28256362 (rules arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 19); `toolRuleFieldChars` 200 characters, at most 536870888 (a selector arrives in one request body, read as one string of at most 536870888 characters); `toolRuleTextChars` 500 characters, at most 536870888 (a text arrives in one request body, read as one string of at most 536870888 characters); `modelBudgets` 100 entries, at most 28256362 (budgets arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 19); `flowConcurrency` 8 effects, at most 9007199254740991 (running effects are counted in a JavaScript number, exact up to 9007199254740991); `flowMapItems` 1000 entries, at most 9007199254740991 (items are counted in a JavaScript number, exact up to 9007199254740991); `flowLoopIterations` 100 iterations, at most 9007199254740991 (iterations are counted in a JavaScript number, exact up to 9007199254740991).",
+        "description": "Replaces the Tenant's Runtime limits: a limit left out takes its default. A limit above its ceiling, which a dependency sets, is `400` naming the ceiling, and nothing is written. Each is read where it is checked, so a new value holds for the next request, write, call or segment. Defaults and ceilings: `recordEntryBytes` 983040 bytes, at most 983040 (S2 takes records of at most 1048576 bytes, and an event's envelope needs 65536 beside its payload); `modelCallBytes` 33554432 bytes, at most 536870888 (the Model Gate reads a call's body as one string, of at most 536870888 characters); `modelFileBytes` 8388608 bytes, at most 402653166 (a file goes to the provider as one base64 string, of at most 536870888 characters); `toolAnswerBytes` 8388608 bytes, at most 33554432 (a harness reports the answer to core in one Harness API frame (67108864 bytes), as JSON, whose escapes may double it); `harnessStateBytes` 262144 bytes, at most 33554432 (the state crosses in one Harness API frame (67108864 bytes) with the rest of its output or turn.start); `chunkBytes` 16777216 bytes, at most 50266112 (a chunk crosses in base64 in one Harness API frame (67108864 bytes), with room for the frame's own JSON); `folderEntries` 10000 entries, at most 4628197 (a folder's manifest is read as one string, of at most 536870888 characters, and each entry takes at least 116); `requestBodyBytes` 1048576 bytes, at most 536870888 (a body is read as one string, of at most 536870888 characters); `messageParts` 32 entries, at most 19884106 (parts arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 27); `pageItems` 200 entries, at most 178956962 (a page's items go in one response body, written as one string of at most 536870888 characters, and each takes at least 3); `exportPageItems` 1000 entries, at most 178956962 (a page's calls go in one response body, written as one string of at most 536870888 characters, and each takes at least 3); `environmentEventItems` 1000 entries, at most 178956962 (the events go in one response body, written as one string of at most 536870888 characters, and each takes at least 3); `inlineFileBytes` 20971520 bytes, at most 402653166 (a file sent inline arrives in base64 in a body read as one string, of at most 536870888 characters); `a2aWaitMs` 300000 milliseconds, at most 2147483647 (the wait is timed with a JavaScript timer, which waits at most 2147483647 ms); `errorExcerptChars` 2000 characters, at most 163840 (the excerpt is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `traceContentBytes` 8192 bytes, at most 983040 (span content is cut from one record entry, which holds at most 983040 bytes); `environmentLabels` 32 entries, at most 59652320 (labels arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 9); `artifactLabels` 32 entries, at most 59652320 (labels arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 9); `labelKeyChars` 63 characters, at most 536870888 (a label key arrives in one request body, read as one string of at most 536870888 characters); `labelValueChars` 256 characters, at most 536870888 (a label value arrives in one request body, read as one string of at most 536870888 characters); `environmentSetupCommands` 16 entries, at most 33554430 (setup commands arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 16); `environmentFiles` 16 entries, at most 16268814 (input file entries arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 33); `environmentFilesPerEntry` 1000 entries, at most 6710886 (the files of an entry arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 80); `environmentSecretSlots` 64 entries, at most 14128181 (secret slots arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 38); `setupCommandChars` 4096 characters, at most 43690 (a command runs as one argument of /bin/sh -c, which Linux takes up to 131072 bytes long (MAX_ARG_STRLEN, with its NUL), and UTF-8 may take 3 bytes for a character); `setupCommandMs` 1800000 milliseconds, at most 2147483647 (the engine times a command with a JavaScript timer, which waits at most 2147483647 ms); `setupOutputChars` 4096 characters, at most 163840 (the output is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `setupReasonChars` 500 characters, at most 163840 (the reason is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `setupCommandExcerptChars` 80 characters, at most 163840 (the reason is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `manifestDescriptionChars` 1024 characters, at most 536870888 (a description arrives in one request body, read as one string of at most 536870888 characters); `secretDescriptionChars` 500 characters, at most 536870888 (a description arrives in one request body, read as one string of at most 536870888 characters); `secretValueChars` 8192 characters, at most 536870888 (a value arrives in one request body, read as one string of at most 536870888 characters); `secretHosts` 32 entries, at most 89478481 (hosts arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 6); `diskVersionEntries` 200000 entries, at most 1917396 (a disk is listed in one Harness API frame (67108864 bytes, each entry at least 35), and a version's manifest is read as one string of at most 536870888 characters); `diskVersionBytes` 10737418240 bytes, at most 9007199254740991 (the files' sizes are added up in a JavaScript number, exact up to 9007199254740991); `diskLeaseMs` 120000 milliseconds, at most 2147483647 (the lease is renewed with a JavaScript timer, which waits at most 2147483647 ms); `diskPodWaitMs` 60000 milliseconds, at most 9007199254740991 (the deadline is reckoned from the clock in a JavaScript number, exact up to 9007199254740991); `modelRequestMs` 600000 milliseconds, at most 2147483647 (the provider's SDK times the request with a JavaScript timer, which waits at most 2147483647 ms); `modelIdleMs` 300000 milliseconds, at most 2147483647 (the stream's silence is timed with a JavaScript timer, which waits at most 2147483647 ms); `modelAttempts` 3 attempts, at most 9007199254740991 (attempts are counted in a JavaScript number, exact up to 9007199254740991); `modelRetryDelayMs` 2000 milliseconds, at most 2147483647 (the delay is waited with a JavaScript timer, which waits at most 2147483647 ms); `modelProviderRetries` 2 retries, at most 9007199254740991 (retries are counted in a JavaScript number, exact up to 9007199254740991); `modelRetryDelayMaxMs` 60000 milliseconds, at most 2147483647 (the delay is waited with a JavaScript timer, which waits at most 2147483647 ms); `toolAttempts` 3 attempts, at most 9007199254740991 (sends are counted in a JavaScript number, exact up to 9007199254740991); `httpToolTimeoutMs` 300000 milliseconds, at most 2147483647 (the call is timed with a JavaScript timer, which waits at most 2147483647 ms); `mcpSnapshotBytes` 4194304 bytes, at most 16777216 (the facts cross in turn.start, one Harness API frame (67108864 bytes), beside the harness's state (at most half of it) and the rest); `mcpPreviewMs` 15000 milliseconds, at most 2147483647 (the preview is timed with a JavaScript timer, which waits at most 2147483647 ms); `mcpMetadataBytes` 65536 bytes, at most 536870888 (the document is read as one string, of at most 536870888 characters); `toolRules` 200 entries, at most 28256362 (rules arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 19); `toolRuleFieldChars` 200 characters, at most 536870888 (a selector arrives in one request body, read as one string of at most 536870888 characters); `toolRuleTextChars` 500 characters, at most 536870888 (a text arrives in one request body, read as one string of at most 536870888 characters); `modelBudgets` 100 entries, at most 28256362 (budgets arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 19); `triggersPerAgent` 20 entries, at most 8521760 (triggers arrive in one request body, read as one string of at most 536870888 characters, and each takes at least 63); `triggerMinIntervalMs` 60000 milliseconds, at most 9007199254740991 (the gap is reckoned from the clock in a JavaScript number, exact up to 9007199254740991); `triggerRunsPerHour` 60 runs, at most 9007199254740991 (runs are counted in a JavaScript number, exact up to 9007199254740991); `triggerJitterPercent` 10 percent, at most 50 (an offset past half the interval could move a run past the next one); `triggerJitterMaxMs` 300000 milliseconds, at most 2147483647 (the offset is waited with a JavaScript timer, which waits at most 2147483647 ms); `triggerPromptChars` 8000 characters, at most 163840 (the prompt is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `triggerRunRetentionMs` 2592000000 milliseconds, at most 9007199254740991 (the age is reckoned from the clock in a JavaScript number, exact up to 9007199254740991); `wakeMaxAheadMs` 2592000000 milliseconds, at most 9007199254740991 (the time is reckoned from the clock in a JavaScript number, exact up to 9007199254740991); `wakeNoteChars` 2000 characters, at most 163840 (the note is kept in one record entry (at most 983040 bytes), where JSON may escape a character to 6); `memoryBytes` 102400 bytes, at most 33554432 (a memory reaches a harness in one Harness API frame (67108864 bytes), as JSON, whose escapes may double it); `memoriesPerAgent` 10000 entries, at most 9007199254740991 (memories are counted in a JavaScript number, exact up to 9007199254740991); `memoryIndexLines` 200 entries, at most 9007199254740991 (the lines are counted in a JavaScript number, exact up to 9007199254740991); `memoryIndexBytes` 25600 bytes, at most 16777216 (the index crosses in turn.start, one Harness API frame (67108864 bytes), beside the harness's state and the rest); `webhookBodyBytes` 262144 bytes, at most 983040 (the payload goes into one record entry, which holds at most 983040 bytes); `sessionQueuedMessages` 100 entries, at most 9007199254740991 (queued messages are counted in a JavaScript number, exact up to 9007199254740991); `flowConcurrency` 8 effects, at most 9007199254740991 (running effects are counted in a JavaScript number, exact up to 9007199254740991); `flowMapItems` 1000 entries, at most 9007199254740991 (items are counted in a JavaScript number, exact up to 9007199254740991); `flowLoopIterations` 100 iterations, at most 9007199254740991 (iterations are counted in a JavaScript number, exact up to 9007199254740991).",
         "security": [
           {
             "managementKey": []
@@ -6906,10 +7086,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "The protocol version, `15`"
+              "description": "The protocol version, `18`"
             },
             "required": true,
-            "description": "The protocol version, `15`",
+            "description": "The protocol version, `18`",
             "name": "Nylorun-Protocol",
             "in": "header"
           }
@@ -7012,11 +7192,11 @@
     },
     {
       "name": "Credential coverage",
-      "description": "Which secret of an Environment each of an agent's MCP servers and HTTP tools would get, before a session opens. The secrets themselves are written on the Runtime API. `admin.coverage`."
+      "description": "Which secret of an Agent's vault each of its manifest's MCP servers and HTTP tools would get, before a session opens. The secrets themselves are written on the Runtime API. `admin.coverage`."
     },
     {
       "name": "MCP servers",
-      "description": "See a remote MCP server's tools before an agent names it, with an Environment's credential for its URL: their model names, sizes and annotations, or that it needs a person's sign-in. `admin.mcp`."
+      "description": "See a remote MCP server's tools before an agent names it, with an Agent's credential for its URL: their model names, sizes and annotations, or that it needs a person's sign-in. `admin.mcp`."
     },
     {
       "name": "Signing keys",
@@ -7024,7 +7204,7 @@
     },
     {
       "name": "Settings",
-      "description": "The Tenant's sandbox backend, Environment, artifact and skill settings, and its Runtime limits. `admin.settings`."
+      "description": "The Tenant's sandbox backend, Agent compute, artifact and skill settings, and its Runtime limits. `admin.settings`."
     }
   ]
 }