@soat/sdk 0.26.0 → 0.27.0

package/dist/index.cjs

@@ -1198,7 +1198,7 @@ var AuditLog = class {
 	/**
 	* List audit entries
 	*
-	* Returns audit-log entries visible to the caller, newest first. All filters are optional and combine with AND. `resource_srn` is a prefix match (e.g. `soat:{project}:secret:` matches every secret action); every other filter is exact.
+	* Returns audit-log entries visible to the caller, newest first. All filters are optional and combine with AND. `resource_srn` is a prefix match (e.g. `srn:{project}:secret:` matches every secret action); every other filter is exact.
 	*/
 	static listAuditEntries(options) {
 		return (options?.client ?? client).get({
@@ -2246,7 +2246,7 @@ var Formations = class {
 	*
 	* Validates the template, creates the formation record, then provisions all declared resources in dependency order.
 	*
-	* A **template-shape** error is refused with `400`. A **deploy** failure is not: the operation ran, so the formation is returned with `201` and `status: "failed"`, and `error` explains why (the resources created before the failure are rolled back). Read `status` — a `2xx` here means the deploy was attempted, not that it worked. The `soat` CLI exits non-zero on that body so `create-formation && …` does not lie.
+	* A **template-shape** error is refused with `400`. A **deploy** failure is not: the operation ran, so the formation is returned with `201` and `status: "failed"`, and `error` explains why (the resources created before the failure are rolled back). Read `status` — a `2xx` here means the deploy was attempted, not that it worked. The `builtin` CLI exits non-zero on that body so `create-formation && …` does not lie.
 	*
 	*/
 	static createFormation(options) {
@@ -2291,7 +2291,7 @@ var Formations = class {
 	*
 	* Applies a new template to the formation. Resources are created, updated, or deleted to reconcile the current state with the desired state.
 	*
-	* A **template-shape** error is refused with `400`. A **deploy** failure is not: the operation ran, so the formation is returned with `200` and `status: "failed"`, and `error` explains why. Read `status` — a `2xx` here means the deploy was attempted, not that it worked. The `soat` CLI exits non-zero on that body so `update-formation && …` does not lie.
+	* A **template-shape** error is refused with `400`. A **deploy** failure is not: the operation ran, so the formation is returned with `200` and `status: "failed"`, and `error` explains why. Read `status` — a `2xx` here means the deploy was attempted, not that it worked. The `builtin` CLI exits non-zero on that body so `update-formation && …` does not lie.
 	*
 	*/
 	static updateFormation(options) {
@@ -2408,7 +2408,7 @@ var Guardrails = class {
 	/**
 	* Create a guardrail
 	*
-	* Creates a new guardrail in the project, archiving its document as version 1. The `document` is validated on write: `class` must be a literal (A/B/C/D) or a JSON Logic expression, and every variable it (and `guard`) reference must resolve to the `args.*` / `context.*` / `soat.*` namespaces — an out-of-catalog `soat.*` key is rejected with 400.
+	* Creates a new guardrail in the project, archiving its document as version 1. The `document` is validated on write: `class` must be a literal (A/B/C/D) or a JSON Logic expression, and every variable it (and `guard`) reference must resolve to the `args.*` / `context.*` / `runtime.*` namespaces — an out-of-catalog `runtime.*` key is rejected with 400.
 	*
 	*/
 	static createGuardrail(options) {
@@ -2504,7 +2504,7 @@ var Guardrails = class {
 	/**
 	* Dry-run evaluate a guardrail
 	*
-	* Runs the full evaluation pipeline — the `class` expression, the guard, the context tool per `context_mode`, live `soat.*` resolution — against caller-supplied `args` and `guardrail_context`, and returns the exact `guardrail_evaluation` record a real call would produce. Nothing executes, no approval item is filed, and no activity entry is written. This is the adoption path: preview a document's decisions against production-shaped calls before attaching it — or before editing a widely-attached one. Pass an optional `tool_id` to resolve `soat.tool.*`.
+	* Runs the full evaluation pipeline — the `class` expression, the guard, the context tool per `context_mode`, live `runtime.*` resolution — against caller-supplied `args` and `guardrail_context`, and returns the exact `guardrail_evaluation` record a real call would produce. Nothing executes, no approval item is filed, and no activity entry is written. This is the adoption path: preview a document's decisions against production-shaped calls before attaching it — or before editing a widely-attached one. Pass an optional `tool_id` to resolve `runtime.tool.*`.
 	*
 	*/
 	static evaluateGuardrail(options) {
@@ -3651,8 +3651,8 @@ var Tools = class {
 	/**
 	* Call a tool
 	*
-	* Directly invokes a tool and returns its output. Supported for `http`, `soat`, `mcp`, and `pipeline` tools. `client` tools cannot be invoked server-side and will return 422. A `pipeline` tool runs its declared steps in order and returns the mapped `output` (or the last step's output); `action` is ignored and `input` is the pipeline input.
-	* For `soat` and `mcp` tools the `action` field is required and identifies which action (SOAT) or tool name (MCP) to invoke. For `http` tools `action` is ignored. When a `soat` or `mcp` tool declares an `actions` allowlist, an action outside it is rejected with `400 VALIDATION_FAILED` ("not available on this tool") before any outbound request is made.
+	* Directly invokes a tool and returns its output. Supported for `http`, `builtin`, `mcp`, and `pipeline` tools. `client` tools cannot be invoked server-side and will return 422. A `pipeline` tool runs its declared steps in order and returns the mapped `output` (or the last step's output); `action` is ignored and `input` is the pipeline input.
+	* For `builtin` and `mcp` tools the `action` field is required and identifies which action (SOAT) or tool name (MCP) to invoke. For `http` tools `action` is ignored. When a `builtin` or `mcp` tool declares an `actions` allowlist, an action outside it is rejected with `400 VALIDATION_FAILED` ("not available on this tool") before any outbound request is made.
 	* `preset_parameters` stored on the tool are merged with the caller-supplied `input` before execution; preset keys take lower precedence.
 	*
 	*/

package/dist/index.d.cts

@@ -862,7 +862,7 @@ type CreateAgentGenerationRequest = {
    */
   max_call_depth?: number;
   /**
-   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `soat` tool call in this generation. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. An invalid or colliding key is rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
+   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call in this generation. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. An invalid or colliding key is rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
    */
   tool_context?: {
     [key: string]: string;
@@ -906,7 +906,7 @@ type ToolOutputMessageContent = {
    */
   tool_id: string;
   /**
-   * Optional action name for tools that require action selection (for example soat and mcp tools).
+   * Optional action name for tools that require action selection (for example builtin and mcp tools).
    */
   action?: string | null;
   /**
@@ -1205,7 +1205,7 @@ type ApprovalItem = {
   proposed_action?: {
     tool_id?: string;
     /**
-     * Resolved action name (the soat/mcp action) for `tool_call`-origin items — always present there, even for single-action tools. Omitted for `node`-origin items, whose downstream execution is wired by a separate `tool` node in the graph.
+     * Resolved action name (the builtin/mcp action) for `tool_call`-origin items — always present there, even for single-action tools. Omitted for `node`-origin items, whose downstream execution is wired by a separate `tool` node in the graph.
      */
     action?: string;
     arguments?: {
@@ -1303,7 +1303,7 @@ type AuditEntry = {
    */
   action?: string;
   /**
-   * SRN the action targeted (type-level `soat:{project}:{type}:*` on creates)
+   * SRN the action targeted (type-level `srn:{project}:{type}:*` on creates)
    */
   resource_srn?: string | null;
   /**
@@ -1733,11 +1733,11 @@ type ToolScorer = {
    */
   name: string;
   /**
-   * The tool that scores each item. It must belong to the eval's project and be server-callable (`http`, `mcp`, `soat`, or `pipeline` — a `client` tool pauses for a calling client an eval run does not have).
+   * The tool that scores each item. It must belong to the eval's project and be server-callable (`http`, `mcp`, `builtin`, or `pipeline` — a `client` tool pauses for a calling client an eval run does not have).
    */
   tool_id: string;
   /**
-   * The operation to invoke; required when the tool type is `soat` or `mcp`.
+   * The operation to invoke; required when the tool type is `builtin` or `mcp`.
    */
   action?: string | null;
   /**
@@ -2381,7 +2381,7 @@ type ToolResourceProperties = {
    */
   name: string;
   /**
-   * Tool type hint (e.g. http, mcp, soat, pipeline)
+   * Tool type hint (e.g. http, mcp, builtin, pipeline)
    */
   type?: string | null;
   /**
@@ -2439,7 +2439,7 @@ type ToolResourceProperties = {
     } | null;
   } | null;
   /**
-   * Allowlist of actions the tool exposes. For `soat` tools: SOAT platform action names. For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface (`null` exposes every tool).
+   * Allowlist of actions the tool exposes. For `builtin` tools: SOAT platform action names. For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface (`null` exposes every tool).
    */
   actions?: Array<string> | null;
   /**
@@ -2700,7 +2700,7 @@ type TriggerResourceProperties = {
    */
   target_id: string;
   /**
-   * Tool targets only — the action for soat/mcp tools
+   * Tool targets only — the action for builtin/mcp tools
    */
   action?: string | null;
   /**
@@ -2911,7 +2911,7 @@ type IngestionRuleResourceProperties = {
    */
   agent_id?: string | null;
   /**
-   * Operation id, required for soat/mcp tool converters
+   * Operation id, required for builtin/mcp tool converters
    */
   action?: string | null;
   /**
@@ -3588,7 +3588,7 @@ type GenerationTranscript = {
   content_redacted_by_principal_id?: string | null;
 };
 /**
- * The action-class document. `class` maps a call to an action class; `guard` gates class-B autonomy. Both are single JSON Logic expressions over the `args.*` / `context.*` / `soat.*` namespaces.
+ * The action-class document. `class` maps a call to an action class; `guard` gates class-B autonomy. Both are single JSON Logic expressions over the `args.*` / `context.*` / `runtime.*` namespaces.
  *
  */
 type GuardrailDocument = {
@@ -4532,7 +4532,7 @@ type StartRunRequest = {
     [key: string]: unknown;
   };
   /**
-   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `soat` tool call made by an agent node of this run — including the agents of any child run a `loop` or `sub_orchestration` node starts. The header name is `X-Soat-Context-` plus the key verbatim; no character is re-cased.
+   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call made by an agent node of this run — including the agents of any child run a `loop` or `sub_orchestration` node starts. The header name is `X-Soat-Context-` plus the key verbatim; no character is re-cased.
    *
    * The bag is stored on the run and re-read on every step, so it survives an `awaiting_input` pause, a `sleeping` wait, a background worker drive and a crash redrive. A key that is not a valid HTTP header name, or two keys that map to the same header, are rejected with `400 INVALID_TOOL_CONTEXT_KEY` and no run is created.
    *
@@ -4734,7 +4734,7 @@ type SessionRecord = {
   created_at?: Date;
   updated_at?: Date;
   /**
-   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `soat` tool call in this session. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. A key that is not a valid HTTP header name, or two keys that map to the same header, are rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
+   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call in this session. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. A key that is not a valid HTTP header name, or two keys that map to the same header, are rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
    */
   tool_context?: {
     [key: string]: string;
@@ -4811,7 +4811,7 @@ type CreateSessionRequest = {
    */
   auto_generate?: boolean;
   /**
-   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `soat` tool call in this session. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. A key that is not a valid HTTP header name, or two keys that map to the same header, are rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
+   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call in this session. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. A key that is not a valid HTTP header name, or two keys that map to the same header, are rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
    */
   tool_context?: {
     [key: string]: string;
@@ -4840,7 +4840,7 @@ type UpdateSessionRequest = {
    */
   auto_generate?: boolean;
   /**
-   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `soat` tool call in this session. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. A key that is not a valid HTTP header name, or two keys that map to the same header, are rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
+   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call in this session. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. A key that is not a valid HTTP header name, or two keys that map to the same header, are rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
    */
   tool_context?: {
     [key: string]: string;
@@ -4862,7 +4862,7 @@ type AddSessionMessageRequest = {
    */
   message: string;
   /**
-   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `soat` tool call in this generation. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. An invalid or colliding key is rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
+   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call in this generation. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. An invalid or colliding key is rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
    */
   tool_context?: {
     [key: string]: string;
@@ -4878,7 +4878,7 @@ type AddSessionMessageRequest = {
    */
   document_id: string;
   /**
-   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `soat` tool call in this generation. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. An invalid or colliding key is rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
+   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call in this generation. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. An invalid or colliding key is rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
    */
   tool_context?: {
     [key: string]: string;
@@ -4904,7 +4904,7 @@ type GenerateSessionRequest = {
    */
   model?: string;
   /**
-   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `soat` tool call in this generation. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. An invalid or colliding key is rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
+   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call in this generation. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. An invalid or colliding key is rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
    */
   tool_context?: {
     [key: string]: string;
@@ -5056,7 +5056,7 @@ type CreateTaskRequest = {
    */
   state?: string;
   /**
-   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `soat` tool call made by this task's automation dispatches — the agent generations a state's `on_enter` starts, and the agent nodes of any orchestration run it starts. The header name is `X-Soat-Context-` plus the key verbatim; no character is re-cased.
+   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call made by this task's automation dispatches — the agent generations a state's `on_enter` starts, and the agent nodes of any orchestration run it starts. The header name is `X-Soat-Context-` plus the key verbatim; no character is re-cased.
    * Creation is the task's first move, so this is the bag the entry state's `on_enter` runs with. Each transition may replace it (see `TransitionTaskRequest.tool_context`).
    * The reserved identity keys (`sessionId`, `actorId`, `actorExternalId`) are stripped in any casing and re-derived server-side, so a task-dispatched generation cannot forge them. A key outside the HTTP header-name grammar is rejected with `INVALID_TOOL_CONTEXT_KEY` (400).
    * Write-only: the stored bag is never returned by any task read, and it is cleared when the task reaches a terminal state.
@@ -5104,7 +5104,7 @@ type Tool = {
   /**
    * Tool type
    */
-  type?: 'http' | 'client' | 'mcp' | 'soat' | 'pipeline';
+  type?: 'http' | 'client' | 'mcp' | 'builtin' | 'pipeline';
   /**
    * What the tool does (sent to the model)
    */
@@ -5138,7 +5138,7 @@ type Tool = {
     [key: string]: unknown;
   } | null;
   /**
-   * Allowlist of actions to expose. For `soat` tools: SOAT platform action names (required). For `mcp` tools: an optional allowlist of MCP tool names — when set, only those tools are exposed to the model and callable via `/call`; when `null`, the entire MCP server surface is exposed. Ignored for other tool types.
+   * Allowlist of actions to expose. For `builtin` tools: SOAT platform action names (required). For `mcp` tools: an optional allowlist of MCP tool names — when set, only those tools are exposed to the model and callable via `/call`; when `null`, the entire MCP server surface is exposed. Ignored for other tool types.
    */
   actions?: Array<string> | null;
   /**
@@ -5150,7 +5150,7 @@ type Tool = {
    */
   context_keys?: Array<string> | null;
   /**
-   * Fixed parameters merged into every soat tool call. Keys matching fields in the action's input schema are removed from the schema shown to the model and injected automatically at execution time.
+   * Fixed parameters merged into every builtin tool call. Keys matching fields in the action's input schema are removed from the schema shown to the model and injected automatically at execution time.
    */
   preset_parameters?: {
     [key: string]: unknown;
@@ -5162,7 +5162,7 @@ type Tool = {
     [key: string]: unknown;
   } | null;
   /**
-   * Universal JSON Logic mapping applied to the tool's raw result, for every tool type (`http`, `mcp`, `soat`, `pipeline`, `client`). Evaluated over `{ output: <raw result>, input: <merged input> }`, so `{ "var": "output.text" }` extracts a bare scalar field instead of requiring a wrapping `pipeline` tool, and `{ "var": "input.title" }` echoes back a field of the request that produced the response. For `pipeline` tools this runs *after* the pipeline's own `output` mapping, over that mapping's result.
+   * Universal JSON Logic mapping applied to the tool's raw result, for every tool type (`http`, `mcp`, `builtin`, `pipeline`, `client`). Evaluated over `{ output: <raw result>, input: <merged input> }`, so `{ "var": "output.text" }` extracts a bare scalar field instead of requiring a wrapping `pipeline` tool, and `{ "var": "input.title" }` echoes back a field of the request that produced the response. For `pipeline` tools this runs *after* the pipeline's own `output` mapping, over that mapping's result.
    */
   output_mapping?: {
     [key: string]: unknown;
@@ -5186,7 +5186,7 @@ type CreateToolRequest = {
   /**
    * Tool type (default http)
    */
-  type?: 'http' | 'client' | 'mcp' | 'soat' | 'pipeline';
+  type?: 'http' | 'client' | 'mcp' | 'builtin' | 'pipeline';
   /**
    * What the tool does
    */
@@ -5220,7 +5220,7 @@ type CreateToolRequest = {
     [key: string]: unknown;
   };
   /**
-   * Allowlist of actions. For `soat` tools: SOAT platform action names (required). For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface — omit or set `null` to expose every tool the MCP server offers. Ignored for other tool types.
+   * Allowlist of actions. For `builtin` tools: SOAT platform action names (required). For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface — omit or set `null` to expose every tool the MCP server offers. Ignored for other tool types.
    */
   actions?: Array<string>;
   /**
@@ -5232,7 +5232,7 @@ type CreateToolRequest = {
    */
   context_keys?: Array<string> | null;
   /**
-   * Fixed parameters merged into every soat tool call. Keys matching fields in the action's input schema are removed from the schema shown to the model and injected automatically at execution time.
+   * Fixed parameters merged into every builtin tool call. Keys matching fields in the action's input schema are removed from the schema shown to the model and injected automatically at execution time.
    */
   preset_parameters?: {
     [key: string]: unknown;
@@ -5256,7 +5256,7 @@ type CreateToolRequest = {
 };
 type UpdateToolRequest = {
   name?: string;
-  type?: 'http' | 'client' | 'mcp' | 'soat' | 'pipeline';
+  type?: 'http' | 'client' | 'mcp' | 'builtin' | 'pipeline';
   description?: string | null;
   parameters?: {
     [key: string]: unknown;
@@ -5284,7 +5284,7 @@ type UpdateToolRequest = {
     [key: string]: unknown;
   } | null;
   /**
-   * Allowlist of actions. For `soat` tools: SOAT platform action names. For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface (`null` exposes every tool). Ignored for other tool types.
+   * Allowlist of actions. For `builtin` tools: SOAT platform action names. For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface (`null` exposes every tool). Ignored for other tool types.
    */
   actions?: Array<string> | null;
   /**
@@ -5296,7 +5296,7 @@ type UpdateToolRequest = {
    */
   context_keys?: Array<string> | null;
   /**
-   * Fixed parameters merged into every soat tool call. Keys matching fields in the action's input schema are removed from the schema shown to the model and injected automatically at execution time.
+   * Fixed parameters merged into every builtin tool call. Keys matching fields in the action's input schema are removed from the schema shown to the model and injected automatically at execution time.
    */
   preset_parameters?: {
     [key: string]: unknown;
@@ -5320,7 +5320,7 @@ type UpdateToolRequest = {
 };
 type CallToolRequest = {
   /**
-   * For `soat` tools: the action name (must be in the tool's `actions` list). For `mcp` tools: the MCP tool name to invoke (must be in the tool's `actions` allowlist when one is set, and must not be in its `denied_actions` denylist). Ignored for `http` tools.
+   * For `builtin` tools: the action name (must be in the tool's `actions` list). For `mcp` tools: the MCP tool name to invoke (must be in the tool's `actions` allowlist when one is set, and must not be in its `denied_actions` denylist). Ignored for `http` tools.
    *
    */
   action?: string;
@@ -5448,7 +5448,7 @@ type Trigger = {
    */
   target_id?: string;
   /**
-   * Tool targets only — the action for soat/mcp tools
+   * Tool targets only — the action for builtin/mcp tools
    */
   action?: string | null;
   /**
@@ -5490,7 +5490,7 @@ type CreateTriggerRequest = {
   target_type: 'orchestration' | 'agent' | 'tool' | 'eval';
   target_id: string;
   /**
-   * Tool targets only — the action for soat/mcp tools
+   * Tool targets only — the action for builtin/mcp tools
    */
   action?: string;
   input?: {
@@ -6809,7 +6809,7 @@ type CreateAgentGenerationData = {
   };
   query?: {
     /**
-     * When omitted or `false` (default), the generation runs in the background and `202 Accepted` is returned immediately with a `generation_id` to poll. Pass `true` to block until the generation settles and receive the result. Mutually exclusive with `stream: true`. A `soat` tool call always waits.
+     * When omitted or `false` (default), the generation runs in the background and `202 Accepted` is returned immediately with a `generation_id` to poll. Pass `true` to block until the generation settles and receive the result. Mutually exclusive with `stream: true`. A `builtin` tool call always waits.
      */
     wait?: boolean;
   };
@@ -7921,7 +7921,7 @@ type ListAuditEntriesData = {
      */
     resource_public_id?: string;
     /**
-     * SRN prefix match, e.g. `soat:{project}:secret:`
+     * SRN prefix match, e.g. `srn:{project}:secret:`. Entries written before the `soat:` → `srn:` rename keep their original SRN (the log is append-only), so an `srn:` prefix also matches the equivalent `soat:` one and history stays reachable.
      */
     resource_srn?: string;
     /**
@@ -7994,7 +7994,7 @@ type ExportAuditEntriesData = {
      */
     resource_public_id?: string;
     /**
-     * SRN prefix match, e.g. `soat:{project}:secret:`
+     * SRN prefix match, e.g. `srn:{project}:secret:`. Entries written before the `soat:` → `srn:` rename keep their original SRN (the log is append-only), so an `srn:` prefix also matches the equivalent `soat:` one and history stays reachable.
      */
     resource_srn?: string;
     /**
@@ -8549,7 +8549,7 @@ type GenerateConversationMessageData = {
      */
     stream?: boolean;
     /**
-     * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `soat` tool call in this generation. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased and keys are never case-converted, so they round-trip exactly as sent. An invalid or colliding key is rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
+     * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call in this generation. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased and keys are never case-converted, so they round-trip exactly as sent. An invalid or colliding key is rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
      */
     tool_context?: {
       [key: string]: string;
@@ -8560,7 +8560,7 @@ type GenerateConversationMessageData = {
   };
   query?: {
     /**
-     * When omitted or `false` (default), the generation runs in the background and `202 Accepted` is returned immediately. Pass `true` to block until the generation settles and receive the result. A `soat` tool call always waits.
+     * When omitted or `false` (default), the generation runs in the background and `202 Accepted` is returned immediately. Pass `true` to block until the generation settles and receive the result. A `builtin` tool call always waits.
      */
     wait?: boolean;
   };
@@ -11719,7 +11719,7 @@ type EvaluateGuardrailData = {
       [key: string]: unknown;
     };
     /**
-     * Optional tool to resolve `soat.tool.*` against.
+     * Optional tool to resolve `runtime.tool.*` against.
      */
     tool_id?: string;
   };
@@ -11815,7 +11815,7 @@ type CreateIngestionRuleData = {
      */
     agent_id?: string;
     /**
-     * Operation id, required for soat/mcp tool converters
+     * Operation id, required for builtin/mcp tool converters
      */
     action?: string;
     /**
@@ -15109,7 +15109,7 @@ type CallToolErrors = {
 type CallToolError = CallToolErrors[keyof CallToolErrors];
 type CallToolResponses = {
   /**
-   * The raw output returned by the tool — any JSON value (object, array, string, number, boolean). `null` when the tool produced no output — a `soat` action answering `204 No Content`, for instance.
+   * The raw output returned by the tool — any JSON value (object, array, string, number, boolean). `null` when the tool produced no output — a `builtin` action answering `204 No Content`, for instance.
    */
   200: unknown;
 };
@@ -17030,7 +17030,7 @@ declare class AuditLog {
   /**
    * List audit entries
    *
-   * Returns audit-log entries visible to the caller, newest first. All filters are optional and combine with AND. `resource_srn` is a prefix match (e.g. `soat:{project}:secret:` matches every secret action); every other filter is exact.
+   * Returns audit-log entries visible to the caller, newest first. All filters are optional and combine with AND. `resource_srn` is a prefix match (e.g. `srn:{project}:secret:` matches every secret action); every other filter is exact.
    */
   static listAuditEntries<ThrowOnError extends boolean = false>(options?: Options<ListAuditEntriesData, ThrowOnError>): RequestResult<ListAuditEntriesResponses, ListAuditEntriesErrors, ThrowOnError>;
   /**
@@ -17567,7 +17567,7 @@ declare class Formations {
    *
    * Validates the template, creates the formation record, then provisions all declared resources in dependency order.
    *
-   * A **template-shape** error is refused with `400`. A **deploy** failure is not: the operation ran, so the formation is returned with `201` and `status: "failed"`, and `error` explains why (the resources created before the failure are rolled back). Read `status` — a `2xx` here means the deploy was attempted, not that it worked. The `soat` CLI exits non-zero on that body so `create-formation && …` does not lie.
+   * A **template-shape** error is refused with `400`. A **deploy** failure is not: the operation ran, so the formation is returned with `201` and `status: "failed"`, and `error` explains why (the resources created before the failure are rolled back). Read `status` — a `2xx` here means the deploy was attempted, not that it worked. The `builtin` CLI exits non-zero on that body so `create-formation && …` does not lie.
    *
    */
   static createFormation<ThrowOnError extends boolean = false>(options: Options<CreateFormationData, ThrowOnError>): RequestResult<CreateFormationResponses, CreateFormationErrors, ThrowOnError>;
@@ -17593,7 +17593,7 @@ declare class Formations {
    *
    * Applies a new template to the formation. Resources are created, updated, or deleted to reconcile the current state with the desired state.
    *
-   * A **template-shape** error is refused with `400`. A **deploy** failure is not: the operation ran, so the formation is returned with `200` and `status: "failed"`, and `error` explains why. Read `status` — a `2xx` here means the deploy was attempted, not that it worked. The `soat` CLI exits non-zero on that body so `update-formation && …` does not lie.
+   * A **template-shape** error is refused with `400`. A **deploy** failure is not: the operation ran, so the formation is returned with `200` and `status: "failed"`, and `error` explains why. Read `status` — a `2xx` here means the deploy was attempted, not that it worked. The `builtin` CLI exits non-zero on that body so `update-formation && …` does not lie.
    *
    */
   static updateFormation<ThrowOnError extends boolean = false>(options: Options<UpdateFormationData, ThrowOnError>): RequestResult<UpdateFormationResponses, UpdateFormationErrors, ThrowOnError>;
@@ -17662,7 +17662,7 @@ declare class Guardrails {
   /**
    * Create a guardrail
    *
-   * Creates a new guardrail in the project, archiving its document as version 1. The `document` is validated on write: `class` must be a literal (A/B/C/D) or a JSON Logic expression, and every variable it (and `guard`) reference must resolve to the `args.*` / `context.*` / `soat.*` namespaces — an out-of-catalog `soat.*` key is rejected with 400.
+   * Creates a new guardrail in the project, archiving its document as version 1. The `document` is validated on write: `class` must be a literal (A/B/C/D) or a JSON Logic expression, and every variable it (and `guard`) reference must resolve to the `args.*` / `context.*` / `runtime.*` namespaces — an out-of-catalog `runtime.*` key is rejected with 400.
    *
    */
   static createGuardrail<ThrowOnError extends boolean = false>(options: Options<CreateGuardrailData, ThrowOnError>): RequestResult<CreateGuardrailResponses, CreateGuardrailErrors, ThrowOnError>;
@@ -17711,7 +17711,7 @@ declare class Guardrails {
   /**
    * Dry-run evaluate a guardrail
    *
-   * Runs the full evaluation pipeline — the `class` expression, the guard, the context tool per `context_mode`, live `soat.*` resolution — against caller-supplied `args` and `guardrail_context`, and returns the exact `guardrail_evaluation` record a real call would produce. Nothing executes, no approval item is filed, and no activity entry is written. This is the adoption path: preview a document's decisions against production-shaped calls before attaching it — or before editing a widely-attached one. Pass an optional `tool_id` to resolve `soat.tool.*`.
+   * Runs the full evaluation pipeline — the `class` expression, the guard, the context tool per `context_mode`, live `runtime.*` resolution — against caller-supplied `args` and `guardrail_context`, and returns the exact `guardrail_evaluation` record a real call would produce. Nothing executes, no approval item is filed, and no activity entry is written. This is the adoption path: preview a document's decisions against production-shaped calls before attaching it — or before editing a widely-attached one. Pass an optional `tool_id` to resolve `runtime.tool.*`.
    *
    */
   static evaluateGuardrail<ThrowOnError extends boolean = false>(options: Options<EvaluateGuardrailData, ThrowOnError>): RequestResult<EvaluateGuardrailResponses, EvaluateGuardrailErrors, ThrowOnError>;
@@ -18273,8 +18273,8 @@ declare class Tools {
   /**
    * Call a tool
    *
-   * Directly invokes a tool and returns its output. Supported for `http`, `soat`, `mcp`, and `pipeline` tools. `client` tools cannot be invoked server-side and will return 422. A `pipeline` tool runs its declared steps in order and returns the mapped `output` (or the last step's output); `action` is ignored and `input` is the pipeline input.
-   * For `soat` and `mcp` tools the `action` field is required and identifies which action (SOAT) or tool name (MCP) to invoke. For `http` tools `action` is ignored. When a `soat` or `mcp` tool declares an `actions` allowlist, an action outside it is rejected with `400 VALIDATION_FAILED` ("not available on this tool") before any outbound request is made.
+   * Directly invokes a tool and returns its output. Supported for `http`, `builtin`, `mcp`, and `pipeline` tools. `client` tools cannot be invoked server-side and will return 422. A `pipeline` tool runs its declared steps in order and returns the mapped `output` (or the last step's output); `action` is ignored and `input` is the pipeline input.
+   * For `builtin` and `mcp` tools the `action` field is required and identifies which action (SOAT) or tool name (MCP) to invoke. For `http` tools `action` is ignored. When a `builtin` or `mcp` tool declares an `actions` allowlist, an action outside it is rejected with `400 VALIDATION_FAILED` ("not available on this tool") before any outbound request is made.
    * `preset_parameters` stored on the tool are merged with the caller-supplied `input` before execution; preset keys take lower precedence.
    *
    */

package/dist/index.d.mts

@@ -862,7 +862,7 @@ type CreateAgentGenerationRequest = {
    */
   max_call_depth?: number;
   /**
-   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `soat` tool call in this generation. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. An invalid or colliding key is rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
+   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call in this generation. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. An invalid or colliding key is rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
    */
   tool_context?: {
     [key: string]: string;
@@ -906,7 +906,7 @@ type ToolOutputMessageContent = {
    */
   tool_id: string;
   /**
-   * Optional action name for tools that require action selection (for example soat and mcp tools).
+   * Optional action name for tools that require action selection (for example builtin and mcp tools).
    */
   action?: string | null;
   /**
@@ -1205,7 +1205,7 @@ type ApprovalItem = {
   proposed_action?: {
     tool_id?: string;
     /**
-     * Resolved action name (the soat/mcp action) for `tool_call`-origin items — always present there, even for single-action tools. Omitted for `node`-origin items, whose downstream execution is wired by a separate `tool` node in the graph.
+     * Resolved action name (the builtin/mcp action) for `tool_call`-origin items — always present there, even for single-action tools. Omitted for `node`-origin items, whose downstream execution is wired by a separate `tool` node in the graph.
      */
     action?: string;
     arguments?: {
@@ -1303,7 +1303,7 @@ type AuditEntry = {
    */
   action?: string;
   /**
-   * SRN the action targeted (type-level `soat:{project}:{type}:*` on creates)
+   * SRN the action targeted (type-level `srn:{project}:{type}:*` on creates)
    */
   resource_srn?: string | null;
   /**
@@ -1733,11 +1733,11 @@ type ToolScorer = {
    */
   name: string;
   /**
-   * The tool that scores each item. It must belong to the eval's project and be server-callable (`http`, `mcp`, `soat`, or `pipeline` — a `client` tool pauses for a calling client an eval run does not have).
+   * The tool that scores each item. It must belong to the eval's project and be server-callable (`http`, `mcp`, `builtin`, or `pipeline` — a `client` tool pauses for a calling client an eval run does not have).
    */
   tool_id: string;
   /**
-   * The operation to invoke; required when the tool type is `soat` or `mcp`.
+   * The operation to invoke; required when the tool type is `builtin` or `mcp`.
    */
   action?: string | null;
   /**
@@ -2381,7 +2381,7 @@ type ToolResourceProperties = {
    */
   name: string;
   /**
-   * Tool type hint (e.g. http, mcp, soat, pipeline)
+   * Tool type hint (e.g. http, mcp, builtin, pipeline)
    */
   type?: string | null;
   /**
@@ -2439,7 +2439,7 @@ type ToolResourceProperties = {
     } | null;
   } | null;
   /**
-   * Allowlist of actions the tool exposes. For `soat` tools: SOAT platform action names. For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface (`null` exposes every tool).
+   * Allowlist of actions the tool exposes. For `builtin` tools: SOAT platform action names. For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface (`null` exposes every tool).
    */
   actions?: Array<string> | null;
   /**
@@ -2700,7 +2700,7 @@ type TriggerResourceProperties = {
    */
   target_id: string;
   /**
-   * Tool targets only — the action for soat/mcp tools
+   * Tool targets only — the action for builtin/mcp tools
    */
   action?: string | null;
   /**
@@ -2911,7 +2911,7 @@ type IngestionRuleResourceProperties = {
    */
   agent_id?: string | null;
   /**
-   * Operation id, required for soat/mcp tool converters
+   * Operation id, required for builtin/mcp tool converters
    */
   action?: string | null;
   /**
@@ -3588,7 +3588,7 @@ type GenerationTranscript = {
   content_redacted_by_principal_id?: string | null;
 };
 /**
- * The action-class document. `class` maps a call to an action class; `guard` gates class-B autonomy. Both are single JSON Logic expressions over the `args.*` / `context.*` / `soat.*` namespaces.
+ * The action-class document. `class` maps a call to an action class; `guard` gates class-B autonomy. Both are single JSON Logic expressions over the `args.*` / `context.*` / `runtime.*` namespaces.
  *
  */
 type GuardrailDocument = {
@@ -4532,7 +4532,7 @@ type StartRunRequest = {
     [key: string]: unknown;
   };
   /**
-   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `soat` tool call made by an agent node of this run — including the agents of any child run a `loop` or `sub_orchestration` node starts. The header name is `X-Soat-Context-` plus the key verbatim; no character is re-cased.
+   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call made by an agent node of this run — including the agents of any child run a `loop` or `sub_orchestration` node starts. The header name is `X-Soat-Context-` plus the key verbatim; no character is re-cased.
    *
    * The bag is stored on the run and re-read on every step, so it survives an `awaiting_input` pause, a `sleeping` wait, a background worker drive and a crash redrive. A key that is not a valid HTTP header name, or two keys that map to the same header, are rejected with `400 INVALID_TOOL_CONTEXT_KEY` and no run is created.
    *
@@ -4734,7 +4734,7 @@ type SessionRecord = {
   created_at?: Date;
   updated_at?: Date;
   /**
-   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `soat` tool call in this session. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. A key that is not a valid HTTP header name, or two keys that map to the same header, are rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
+   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call in this session. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. A key that is not a valid HTTP header name, or two keys that map to the same header, are rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
    */
   tool_context?: {
     [key: string]: string;
@@ -4811,7 +4811,7 @@ type CreateSessionRequest = {
    */
   auto_generate?: boolean;
   /**
-   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `soat` tool call in this session. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. A key that is not a valid HTTP header name, or two keys that map to the same header, are rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
+   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call in this session. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. A key that is not a valid HTTP header name, or two keys that map to the same header, are rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
    */
   tool_context?: {
     [key: string]: string;
@@ -4840,7 +4840,7 @@ type UpdateSessionRequest = {
    */
   auto_generate?: boolean;
   /**
-   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `soat` tool call in this session. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. A key that is not a valid HTTP header name, or two keys that map to the same header, are rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
+   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call in this session. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. A key that is not a valid HTTP header name, or two keys that map to the same header, are rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
    */
   tool_context?: {
     [key: string]: string;
@@ -4862,7 +4862,7 @@ type AddSessionMessageRequest = {
    */
   message: string;
   /**
-   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `soat` tool call in this generation. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. An invalid or colliding key is rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
+   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call in this generation. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. An invalid or colliding key is rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
    */
   tool_context?: {
     [key: string]: string;
@@ -4878,7 +4878,7 @@ type AddSessionMessageRequest = {
    */
   document_id: string;
   /**
-   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `soat` tool call in this generation. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. An invalid or colliding key is rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
+   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call in this generation. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. An invalid or colliding key is rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
    */
   tool_context?: {
     [key: string]: string;
@@ -4904,7 +4904,7 @@ type GenerateSessionRequest = {
    */
   model?: string;
   /**
-   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `soat` tool call in this generation. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. An invalid or colliding key is rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
+   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call in this generation. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. An invalid or colliding key is rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
    */
   tool_context?: {
     [key: string]: string;
@@ -5056,7 +5056,7 @@ type CreateTaskRequest = {
    */
   state?: string;
   /**
-   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `soat` tool call made by this task's automation dispatches — the agent generations a state's `on_enter` starts, and the agent nodes of any orchestration run it starts. The header name is `X-Soat-Context-` plus the key verbatim; no character is re-cased.
+   * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call made by this task's automation dispatches — the agent generations a state's `on_enter` starts, and the agent nodes of any orchestration run it starts. The header name is `X-Soat-Context-` plus the key verbatim; no character is re-cased.
    * Creation is the task's first move, so this is the bag the entry state's `on_enter` runs with. Each transition may replace it (see `TransitionTaskRequest.tool_context`).
    * The reserved identity keys (`sessionId`, `actorId`, `actorExternalId`) are stripped in any casing and re-derived server-side, so a task-dispatched generation cannot forge them. A key outside the HTTP header-name grammar is rejected with `INVALID_TOOL_CONTEXT_KEY` (400).
    * Write-only: the stored bag is never returned by any task read, and it is cleared when the task reaches a terminal state.
@@ -5104,7 +5104,7 @@ type Tool = {
   /**
    * Tool type
    */
-  type?: 'http' | 'client' | 'mcp' | 'soat' | 'pipeline';
+  type?: 'http' | 'client' | 'mcp' | 'builtin' | 'pipeline';
   /**
    * What the tool does (sent to the model)
    */
@@ -5138,7 +5138,7 @@ type Tool = {
     [key: string]: unknown;
   } | null;
   /**
-   * Allowlist of actions to expose. For `soat` tools: SOAT platform action names (required). For `mcp` tools: an optional allowlist of MCP tool names — when set, only those tools are exposed to the model and callable via `/call`; when `null`, the entire MCP server surface is exposed. Ignored for other tool types.
+   * Allowlist of actions to expose. For `builtin` tools: SOAT platform action names (required). For `mcp` tools: an optional allowlist of MCP tool names — when set, only those tools are exposed to the model and callable via `/call`; when `null`, the entire MCP server surface is exposed. Ignored for other tool types.
    */
   actions?: Array<string> | null;
   /**
@@ -5150,7 +5150,7 @@ type Tool = {
    */
   context_keys?: Array<string> | null;
   /**
-   * Fixed parameters merged into every soat tool call. Keys matching fields in the action's input schema are removed from the schema shown to the model and injected automatically at execution time.
+   * Fixed parameters merged into every builtin tool call. Keys matching fields in the action's input schema are removed from the schema shown to the model and injected automatically at execution time.
    */
   preset_parameters?: {
     [key: string]: unknown;
@@ -5162,7 +5162,7 @@ type Tool = {
     [key: string]: unknown;
   } | null;
   /**
-   * Universal JSON Logic mapping applied to the tool's raw result, for every tool type (`http`, `mcp`, `soat`, `pipeline`, `client`). Evaluated over `{ output: <raw result>, input: <merged input> }`, so `{ "var": "output.text" }` extracts a bare scalar field instead of requiring a wrapping `pipeline` tool, and `{ "var": "input.title" }` echoes back a field of the request that produced the response. For `pipeline` tools this runs *after* the pipeline's own `output` mapping, over that mapping's result.
+   * Universal JSON Logic mapping applied to the tool's raw result, for every tool type (`http`, `mcp`, `builtin`, `pipeline`, `client`). Evaluated over `{ output: <raw result>, input: <merged input> }`, so `{ "var": "output.text" }` extracts a bare scalar field instead of requiring a wrapping `pipeline` tool, and `{ "var": "input.title" }` echoes back a field of the request that produced the response. For `pipeline` tools this runs *after* the pipeline's own `output` mapping, over that mapping's result.
    */
   output_mapping?: {
     [key: string]: unknown;
@@ -5186,7 +5186,7 @@ type CreateToolRequest = {
   /**
    * Tool type (default http)
    */
-  type?: 'http' | 'client' | 'mcp' | 'soat' | 'pipeline';
+  type?: 'http' | 'client' | 'mcp' | 'builtin' | 'pipeline';
   /**
    * What the tool does
    */
@@ -5220,7 +5220,7 @@ type CreateToolRequest = {
     [key: string]: unknown;
   };
   /**
-   * Allowlist of actions. For `soat` tools: SOAT platform action names (required). For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface — omit or set `null` to expose every tool the MCP server offers. Ignored for other tool types.
+   * Allowlist of actions. For `builtin` tools: SOAT platform action names (required). For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface — omit or set `null` to expose every tool the MCP server offers. Ignored for other tool types.
    */
   actions?: Array<string>;
   /**
@@ -5232,7 +5232,7 @@ type CreateToolRequest = {
    */
   context_keys?: Array<string> | null;
   /**
-   * Fixed parameters merged into every soat tool call. Keys matching fields in the action's input schema are removed from the schema shown to the model and injected automatically at execution time.
+   * Fixed parameters merged into every builtin tool call. Keys matching fields in the action's input schema are removed from the schema shown to the model and injected automatically at execution time.
    */
   preset_parameters?: {
     [key: string]: unknown;
@@ -5256,7 +5256,7 @@ type CreateToolRequest = {
 };
 type UpdateToolRequest = {
   name?: string;
-  type?: 'http' | 'client' | 'mcp' | 'soat' | 'pipeline';
+  type?: 'http' | 'client' | 'mcp' | 'builtin' | 'pipeline';
   description?: string | null;
   parameters?: {
     [key: string]: unknown;
@@ -5284,7 +5284,7 @@ type UpdateToolRequest = {
     [key: string]: unknown;
   } | null;
   /**
-   * Allowlist of actions. For `soat` tools: SOAT platform action names. For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface (`null` exposes every tool). Ignored for other tool types.
+   * Allowlist of actions. For `builtin` tools: SOAT platform action names. For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface (`null` exposes every tool). Ignored for other tool types.
    */
   actions?: Array<string> | null;
   /**
@@ -5296,7 +5296,7 @@ type UpdateToolRequest = {
    */
   context_keys?: Array<string> | null;
   /**
-   * Fixed parameters merged into every soat tool call. Keys matching fields in the action's input schema are removed from the schema shown to the model and injected automatically at execution time.
+   * Fixed parameters merged into every builtin tool call. Keys matching fields in the action's input schema are removed from the schema shown to the model and injected automatically at execution time.
    */
   preset_parameters?: {
     [key: string]: unknown;
@@ -5320,7 +5320,7 @@ type UpdateToolRequest = {
 };
 type CallToolRequest = {
   /**
-   * For `soat` tools: the action name (must be in the tool's `actions` list). For `mcp` tools: the MCP tool name to invoke (must be in the tool's `actions` allowlist when one is set, and must not be in its `denied_actions` denylist). Ignored for `http` tools.
+   * For `builtin` tools: the action name (must be in the tool's `actions` list). For `mcp` tools: the MCP tool name to invoke (must be in the tool's `actions` allowlist when one is set, and must not be in its `denied_actions` denylist). Ignored for `http` tools.
    *
    */
   action?: string;
@@ -5448,7 +5448,7 @@ type Trigger = {
    */
   target_id?: string;
   /**
-   * Tool targets only — the action for soat/mcp tools
+   * Tool targets only — the action for builtin/mcp tools
    */
   action?: string | null;
   /**
@@ -5490,7 +5490,7 @@ type CreateTriggerRequest = {
   target_type: 'orchestration' | 'agent' | 'tool' | 'eval';
   target_id: string;
   /**
-   * Tool targets only — the action for soat/mcp tools
+   * Tool targets only — the action for builtin/mcp tools
    */
   action?: string;
   input?: {
@@ -6809,7 +6809,7 @@ type CreateAgentGenerationData = {
   };
   query?: {
     /**
-     * When omitted or `false` (default), the generation runs in the background and `202 Accepted` is returned immediately with a `generation_id` to poll. Pass `true` to block until the generation settles and receive the result. Mutually exclusive with `stream: true`. A `soat` tool call always waits.
+     * When omitted or `false` (default), the generation runs in the background and `202 Accepted` is returned immediately with a `generation_id` to poll. Pass `true` to block until the generation settles and receive the result. Mutually exclusive with `stream: true`. A `builtin` tool call always waits.
      */
     wait?: boolean;
   };
@@ -7921,7 +7921,7 @@ type ListAuditEntriesData = {
      */
     resource_public_id?: string;
     /**
-     * SRN prefix match, e.g. `soat:{project}:secret:`
+     * SRN prefix match, e.g. `srn:{project}:secret:`. Entries written before the `soat:` → `srn:` rename keep their original SRN (the log is append-only), so an `srn:` prefix also matches the equivalent `soat:` one and history stays reachable.
      */
     resource_srn?: string;
     /**
@@ -7994,7 +7994,7 @@ type ExportAuditEntriesData = {
      */
     resource_public_id?: string;
     /**
-     * SRN prefix match, e.g. `soat:{project}:secret:`
+     * SRN prefix match, e.g. `srn:{project}:secret:`. Entries written before the `soat:` → `srn:` rename keep their original SRN (the log is append-only), so an `srn:` prefix also matches the equivalent `soat:` one and history stays reachable.
      */
     resource_srn?: string;
     /**
@@ -8549,7 +8549,7 @@ type GenerateConversationMessageData = {
      */
     stream?: boolean;
     /**
-     * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `soat` tool call in this generation. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased and keys are never case-converted, so they round-trip exactly as sent. An invalid or colliding key is rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
+     * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call in this generation. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased and keys are never case-converted, so they round-trip exactly as sent. An invalid or colliding key is rejected with `400 INVALID_TOOL_CONTEXT_KEY`.
      */
     tool_context?: {
       [key: string]: string;
@@ -8560,7 +8560,7 @@ type GenerateConversationMessageData = {
   };
   query?: {
     /**
-     * When omitted or `false` (default), the generation runs in the background and `202 Accepted` is returned immediately. Pass `true` to block until the generation settles and receive the result. A `soat` tool call always waits.
+     * When omitted or `false` (default), the generation runs in the background and `202 Accepted` is returned immediately. Pass `true` to block until the generation settles and receive the result. A `builtin` tool call always waits.
      */
     wait?: boolean;
   };
@@ -11719,7 +11719,7 @@ type EvaluateGuardrailData = {
       [key: string]: unknown;
     };
     /**
-     * Optional tool to resolve `soat.tool.*` against.
+     * Optional tool to resolve `runtime.tool.*` against.
      */
     tool_id?: string;
   };
@@ -11815,7 +11815,7 @@ type CreateIngestionRuleData = {
      */
     agent_id?: string;
     /**
-     * Operation id, required for soat/mcp tool converters
+     * Operation id, required for builtin/mcp tool converters
      */
     action?: string;
     /**
@@ -15109,7 +15109,7 @@ type CallToolErrors = {
 type CallToolError = CallToolErrors[keyof CallToolErrors];
 type CallToolResponses = {
   /**
-   * The raw output returned by the tool — any JSON value (object, array, string, number, boolean). `null` when the tool produced no output — a `soat` action answering `204 No Content`, for instance.
+   * The raw output returned by the tool — any JSON value (object, array, string, number, boolean). `null` when the tool produced no output — a `builtin` action answering `204 No Content`, for instance.
    */
   200: unknown;
 };
@@ -17030,7 +17030,7 @@ declare class AuditLog {
   /**
    * List audit entries
    *
-   * Returns audit-log entries visible to the caller, newest first. All filters are optional and combine with AND. `resource_srn` is a prefix match (e.g. `soat:{project}:secret:` matches every secret action); every other filter is exact.
+   * Returns audit-log entries visible to the caller, newest first. All filters are optional and combine with AND. `resource_srn` is a prefix match (e.g. `srn:{project}:secret:` matches every secret action); every other filter is exact.
    */
   static listAuditEntries<ThrowOnError extends boolean = false>(options?: Options<ListAuditEntriesData, ThrowOnError>): RequestResult<ListAuditEntriesResponses, ListAuditEntriesErrors, ThrowOnError>;
   /**
@@ -17567,7 +17567,7 @@ declare class Formations {
    *
    * Validates the template, creates the formation record, then provisions all declared resources in dependency order.
    *
-   * A **template-shape** error is refused with `400`. A **deploy** failure is not: the operation ran, so the formation is returned with `201` and `status: "failed"`, and `error` explains why (the resources created before the failure are rolled back). Read `status` — a `2xx` here means the deploy was attempted, not that it worked. The `soat` CLI exits non-zero on that body so `create-formation && …` does not lie.
+   * A **template-shape** error is refused with `400`. A **deploy** failure is not: the operation ran, so the formation is returned with `201` and `status: "failed"`, and `error` explains why (the resources created before the failure are rolled back). Read `status` — a `2xx` here means the deploy was attempted, not that it worked. The `builtin` CLI exits non-zero on that body so `create-formation && …` does not lie.
    *
    */
   static createFormation<ThrowOnError extends boolean = false>(options: Options<CreateFormationData, ThrowOnError>): RequestResult<CreateFormationResponses, CreateFormationErrors, ThrowOnError>;
@@ -17593,7 +17593,7 @@ declare class Formations {
    *
    * Applies a new template to the formation. Resources are created, updated, or deleted to reconcile the current state with the desired state.
    *
-   * A **template-shape** error is refused with `400`. A **deploy** failure is not: the operation ran, so the formation is returned with `200` and `status: "failed"`, and `error` explains why. Read `status` — a `2xx` here means the deploy was attempted, not that it worked. The `soat` CLI exits non-zero on that body so `update-formation && …` does not lie.
+   * A **template-shape** error is refused with `400`. A **deploy** failure is not: the operation ran, so the formation is returned with `200` and `status: "failed"`, and `error` explains why. Read `status` — a `2xx` here means the deploy was attempted, not that it worked. The `builtin` CLI exits non-zero on that body so `update-formation && …` does not lie.
    *
    */
   static updateFormation<ThrowOnError extends boolean = false>(options: Options<UpdateFormationData, ThrowOnError>): RequestResult<UpdateFormationResponses, UpdateFormationErrors, ThrowOnError>;
@@ -17662,7 +17662,7 @@ declare class Guardrails {
   /**
    * Create a guardrail
    *
-   * Creates a new guardrail in the project, archiving its document as version 1. The `document` is validated on write: `class` must be a literal (A/B/C/D) or a JSON Logic expression, and every variable it (and `guard`) reference must resolve to the `args.*` / `context.*` / `soat.*` namespaces — an out-of-catalog `soat.*` key is rejected with 400.
+   * Creates a new guardrail in the project, archiving its document as version 1. The `document` is validated on write: `class` must be a literal (A/B/C/D) or a JSON Logic expression, and every variable it (and `guard`) reference must resolve to the `args.*` / `context.*` / `runtime.*` namespaces — an out-of-catalog `runtime.*` key is rejected with 400.
    *
    */
   static createGuardrail<ThrowOnError extends boolean = false>(options: Options<CreateGuardrailData, ThrowOnError>): RequestResult<CreateGuardrailResponses, CreateGuardrailErrors, ThrowOnError>;
@@ -17711,7 +17711,7 @@ declare class Guardrails {
   /**
    * Dry-run evaluate a guardrail
    *
-   * Runs the full evaluation pipeline — the `class` expression, the guard, the context tool per `context_mode`, live `soat.*` resolution — against caller-supplied `args` and `guardrail_context`, and returns the exact `guardrail_evaluation` record a real call would produce. Nothing executes, no approval item is filed, and no activity entry is written. This is the adoption path: preview a document's decisions against production-shaped calls before attaching it — or before editing a widely-attached one. Pass an optional `tool_id` to resolve `soat.tool.*`.
+   * Runs the full evaluation pipeline — the `class` expression, the guard, the context tool per `context_mode`, live `runtime.*` resolution — against caller-supplied `args` and `guardrail_context`, and returns the exact `guardrail_evaluation` record a real call would produce. Nothing executes, no approval item is filed, and no activity entry is written. This is the adoption path: preview a document's decisions against production-shaped calls before attaching it — or before editing a widely-attached one. Pass an optional `tool_id` to resolve `runtime.tool.*`.
    *
    */
   static evaluateGuardrail<ThrowOnError extends boolean = false>(options: Options<EvaluateGuardrailData, ThrowOnError>): RequestResult<EvaluateGuardrailResponses, EvaluateGuardrailErrors, ThrowOnError>;
@@ -18273,8 +18273,8 @@ declare class Tools {
   /**
    * Call a tool
    *
-   * Directly invokes a tool and returns its output. Supported for `http`, `soat`, `mcp`, and `pipeline` tools. `client` tools cannot be invoked server-side and will return 422. A `pipeline` tool runs its declared steps in order and returns the mapped `output` (or the last step's output); `action` is ignored and `input` is the pipeline input.
-   * For `soat` and `mcp` tools the `action` field is required and identifies which action (SOAT) or tool name (MCP) to invoke. For `http` tools `action` is ignored. When a `soat` or `mcp` tool declares an `actions` allowlist, an action outside it is rejected with `400 VALIDATION_FAILED` ("not available on this tool") before any outbound request is made.
+   * Directly invokes a tool and returns its output. Supported for `http`, `builtin`, `mcp`, and `pipeline` tools. `client` tools cannot be invoked server-side and will return 422. A `pipeline` tool runs its declared steps in order and returns the mapped `output` (or the last step's output); `action` is ignored and `input` is the pipeline input.
+   * For `builtin` and `mcp` tools the `action` field is required and identifies which action (SOAT) or tool name (MCP) to invoke. For `http` tools `action` is ignored. When a `builtin` or `mcp` tool declares an `actions` allowlist, an action outside it is rejected with `400 VALIDATION_FAILED` ("not available on this tool") before any outbound request is made.
    * `preset_parameters` stored on the tool are merged with the caller-supplied `input` before execution; preset keys take lower precedence.
    *
    */

package/dist/index.mjs

@@ -1197,7 +1197,7 @@ var AuditLog = class {
 	/**
 	* List audit entries
 	*
-	* Returns audit-log entries visible to the caller, newest first. All filters are optional and combine with AND. `resource_srn` is a prefix match (e.g. `soat:{project}:secret:` matches every secret action); every other filter is exact.
+	* Returns audit-log entries visible to the caller, newest first. All filters are optional and combine with AND. `resource_srn` is a prefix match (e.g. `srn:{project}:secret:` matches every secret action); every other filter is exact.
 	*/
 	static listAuditEntries(options) {
 		return (options?.client ?? client).get({
@@ -2245,7 +2245,7 @@ var Formations = class {
 	*
 	* Validates the template, creates the formation record, then provisions all declared resources in dependency order.
 	*
-	* A **template-shape** error is refused with `400`. A **deploy** failure is not: the operation ran, so the formation is returned with `201` and `status: "failed"`, and `error` explains why (the resources created before the failure are rolled back). Read `status` — a `2xx` here means the deploy was attempted, not that it worked. The `soat` CLI exits non-zero on that body so `create-formation && …` does not lie.
+	* A **template-shape** error is refused with `400`. A **deploy** failure is not: the operation ran, so the formation is returned with `201` and `status: "failed"`, and `error` explains why (the resources created before the failure are rolled back). Read `status` — a `2xx` here means the deploy was attempted, not that it worked. The `builtin` CLI exits non-zero on that body so `create-formation && …` does not lie.
 	*
 	*/
 	static createFormation(options) {
@@ -2290,7 +2290,7 @@ var Formations = class {
 	*
 	* Applies a new template to the formation. Resources are created, updated, or deleted to reconcile the current state with the desired state.
 	*
-	* A **template-shape** error is refused with `400`. A **deploy** failure is not: the operation ran, so the formation is returned with `200` and `status: "failed"`, and `error` explains why. Read `status` — a `2xx` here means the deploy was attempted, not that it worked. The `soat` CLI exits non-zero on that body so `update-formation && …` does not lie.
+	* A **template-shape** error is refused with `400`. A **deploy** failure is not: the operation ran, so the formation is returned with `200` and `status: "failed"`, and `error` explains why. Read `status` — a `2xx` here means the deploy was attempted, not that it worked. The `builtin` CLI exits non-zero on that body so `update-formation && …` does not lie.
 	*
 	*/
 	static updateFormation(options) {
@@ -2407,7 +2407,7 @@ var Guardrails = class {
 	/**
 	* Create a guardrail
 	*
-	* Creates a new guardrail in the project, archiving its document as version 1. The `document` is validated on write: `class` must be a literal (A/B/C/D) or a JSON Logic expression, and every variable it (and `guard`) reference must resolve to the `args.*` / `context.*` / `soat.*` namespaces — an out-of-catalog `soat.*` key is rejected with 400.
+	* Creates a new guardrail in the project, archiving its document as version 1. The `document` is validated on write: `class` must be a literal (A/B/C/D) or a JSON Logic expression, and every variable it (and `guard`) reference must resolve to the `args.*` / `context.*` / `runtime.*` namespaces — an out-of-catalog `runtime.*` key is rejected with 400.
 	*
 	*/
 	static createGuardrail(options) {
@@ -2503,7 +2503,7 @@ var Guardrails = class {
 	/**
 	* Dry-run evaluate a guardrail
 	*
-	* Runs the full evaluation pipeline — the `class` expression, the guard, the context tool per `context_mode`, live `soat.*` resolution — against caller-supplied `args` and `guardrail_context`, and returns the exact `guardrail_evaluation` record a real call would produce. Nothing executes, no approval item is filed, and no activity entry is written. This is the adoption path: preview a document's decisions against production-shaped calls before attaching it — or before editing a widely-attached one. Pass an optional `tool_id` to resolve `soat.tool.*`.
+	* Runs the full evaluation pipeline — the `class` expression, the guard, the context tool per `context_mode`, live `runtime.*` resolution — against caller-supplied `args` and `guardrail_context`, and returns the exact `guardrail_evaluation` record a real call would produce. Nothing executes, no approval item is filed, and no activity entry is written. This is the adoption path: preview a document's decisions against production-shaped calls before attaching it — or before editing a widely-attached one. Pass an optional `tool_id` to resolve `runtime.tool.*`.
 	*
 	*/
 	static evaluateGuardrail(options) {
@@ -3650,8 +3650,8 @@ var Tools = class {
 	/**
 	* Call a tool
 	*
-	* Directly invokes a tool and returns its output. Supported for `http`, `soat`, `mcp`, and `pipeline` tools. `client` tools cannot be invoked server-side and will return 422. A `pipeline` tool runs its declared steps in order and returns the mapped `output` (or the last step's output); `action` is ignored and `input` is the pipeline input.
-	* For `soat` and `mcp` tools the `action` field is required and identifies which action (SOAT) or tool name (MCP) to invoke. For `http` tools `action` is ignored. When a `soat` or `mcp` tool declares an `actions` allowlist, an action outside it is rejected with `400 VALIDATION_FAILED` ("not available on this tool") before any outbound request is made.
+	* Directly invokes a tool and returns its output. Supported for `http`, `builtin`, `mcp`, and `pipeline` tools. `client` tools cannot be invoked server-side and will return 422. A `pipeline` tool runs its declared steps in order and returns the mapped `output` (or the last step's output); `action` is ignored and `input` is the pipeline input.
+	* For `builtin` and `mcp` tools the `action` field is required and identifies which action (SOAT) or tool name (MCP) to invoke. For `http` tools `action` is ignored. When a `builtin` or `mcp` tool declares an `actions` allowlist, an action outside it is rejected with `400 VALIDATION_FAILED` ("not available on this tool") before any outbound request is made.
 	* `preset_parameters` stored on the tool are merged with the caller-supplied `input` before execution; preset keys take lower precedence.
 	*
 	*/

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@soat/sdk",
-  "version": "0.26.0",
+  "version": "0.27.0",
   "description": "TypeScript SDK for the SOAT API",
   "license": "Apache-2.0",
   "type": "module",