@springbrand/agent-runtime 0.3.0-alpha.2 → 0.3.0-alpha.20

package/src/config/pinning.ts

@@ -157,6 +157,11 @@ export interface PreparedPiRuntime {
 export interface PinPiRuntimeOptions {
   readonly prepared: PreparedPiRuntime;
   readonly baseRevision: string;
+  /**
+   * Whether this Submission may inherit automatic hot and cold Memory context.
+   * Scheduled task input is intentionally isolated from those sources.
+   */
+  readonly includeMemory?: boolean;
   /**
    * 读取一个扩展要写入固定系统提示词的上下文。
    *
@@ -249,9 +254,20 @@ function describeTools(candidates: readonly PiToolCandidate[]) {
       description: candidate.tool.description ?? candidate.tool.label,
       parameters: candidate.tool.parameters,
       requiredExecutionLevel: candidate.requiredExecutionLevel,
+      ...(candidate.confirmation ? { confirmation: true } : {}),
       ...(candidate.alwaysRequiresApproval
         ? { alwaysRequiresApproval: true }
         : {}),
+      ...(candidate.unattendedExecution
+        ? {
+            unattendedExecution: {
+              capability: candidate.unattendedExecution.capability,
+              operation: candidate.unattendedExecution.operation,
+              objectConstrained:
+                candidate.unattendedExecution.objectForInput !== undefined,
+            },
+          }
+        : {}),
       ...(candidate.deferLoading ? { deferLoading: true } : {}),
       ...(candidate.source ? { source: candidate.source } : {}),
       retry: piToolRetryPolicy(candidate),
@@ -267,10 +283,25 @@ function describeRuntime(
   candidates: readonly PiToolCandidate[],
   loadedExtensions: readonly PiLoadedExtension[],
 ): string {
+  const model = snapshot.pi.model;
+  const openRouterRouting = model.compat && "openRouterRouting" in model.compat
+    ? model.compat.openRouterRouting
+    : undefined;
   return JSON.stringify({
     version: 1,
-    model: snapshot.pi.model.id,
-    provider: snapshot.pi.model.provider,
+    model: model.id,
+    provider: model.provider,
+    modelConfig: {
+      api: model.api,
+      name: model.name,
+      reasoning: model.reasoning,
+      input: model.input,
+      contextWindow: model.contextWindow,
+      maxTokens: model.maxTokens,
+      cost: model.cost,
+      ...(model.thinkingLevelMap ? { thinkingLevelMap: model.thinkingLevelMap } : {}),
+      ...(openRouterRouting ? { openRouterRouting } : {}),
+    },
     thinking: snapshot.pi.thinkingLevel,
     systemPrompt: snapshot.pi.systemPrompt,
     executionLevel: snapshot.profile.executionLevel,
@@ -481,11 +512,14 @@ export async function pinPiRuntime(
 ): Promise<PinnedPiRuntime> {
   const state = readPreparedPiRuntime(options.prepared, owner);
   const { snapshot, assembly } = state;
+  const includeMemory = options.includeMemory !== false;
   const context = await assemblePiSystemContext({
     baseSystemPrompt: snapshot.pi.systemPrompt,
-    memory: snapshot.profile.memory,
-    memoryPort: snapshot.bindings.memory,
-    workspace: snapshot.bindings.workspace,
+    memory: includeMemory
+      ? snapshot.profile.memory
+      : { ...snapshot.profile.memory, enabled: false },
+    memoryPort: includeMemory ? snapshot.bindings.memory : undefined,
+    workspace: includeMemory ? snapshot.bindings.workspace : undefined,
     skills: snapshot.bindings.skills.sources,
     extensionContexts: assembly.context,
     readExtensionContext: options.readExtensionContext,

package/src/config/ports.ts

@@ -1,16 +1,17 @@
+export type { RuntimeSchedulePreparation } from "../submission/contracts";
 import type { RuntimeModelInputModality } from "./profile";
 import type { SkillSource } from "agents/skills";
-import type { ScheduleSpec } from "../submission/contracts";
+import type { ScheduleSpec, RuntimeSchedulePreparation } from "../submission/contracts";
 import type { RuntimeActivityProjection } from "../conversation/state";
 import type { ExecutionLevel } from "../lib/execution-level";
 import type { AgentToolResult } from "@earendil-works/pi-agent-core";
-import type { PiToolCandidate } from "../tools/compiler";
+import type { PiToolCandidate } from "../tools/runtime/contracts";
 import type {
   RuntimeEventConfirmation,
   RuntimeLifecycleFact,
   RuntimeSubagentUsageEvent,
   RuntimeSubagentUsageMetrics,
-} from "../tools/subagent-authority";
+} from "../tools/subagent/authority";
 export type { RuntimeModelInputModality } from "./profile";
 export type {
   RuntimeEventConfirmation,
@@ -21,7 +22,7 @@ export type {
   RuntimeSubmissionAdmissionHook,
   RuntimeSubmissionAdmissionInput,
   RuntimeSubmissionAdmissionResult,
-} from "../tools/subagent-authority";
+} from "../tools/subagent/authority";
 
 // #region Workspace 端口
 
@@ -669,16 +670,25 @@ export interface RuntimeScheduleAgentSummary {
  * 让 Runtime 通过 Host 管理当前用户的定时任务。
  *
  * @remarks
- * Schedule Plugin 在装配时把它交给基础工具，模型在用户要求创建、查询或取消时调用。
+ * Host 提供准备与提交操作；Runtime 在现有持久化审批中固定候选并等待用户确认。
  *
- * 任务归属和持久化留在 Host，Runtime 只传递 `ScheduleSpec` 和窄结果。
+ * 任务事实、候选版本、授权检查和保存幂等由 Host 持有，不存放凭据。
  */
+export interface RuntimeScheduleConfirmationPort {
+  /** Read-only preparation; bind the full candidate and authorization to this stable intent. */
+  prepare(request: RuntimeScheduleUpdate & { intentId: string; id?: string }): Promise<RuntimeSchedulePreparation>;
+  /** Atomically check candidate/version, live authorization and quotas. Replay must return the same task. */
+  commit(prepared: RuntimeSchedulePreparation, context: { intentId: string; signal: AbortSignal }): Promise<{ id: string }>;
+}
+
 export interface RuntimeSchedulePort {
+  /** Required for chat creation/editing. Legacy management callers retain their CRUD contract. */
+  confirmation?: RuntimeScheduleConfirmationPort;
   /**
    * 创建一条定时任务并返回它的 ID。
    *
    * @remarks
-   * `schedule` 工具在把用户的时间与提示词组成 `ScheduleSpec` 后调用。
+   * 保留给既有宿主管理调用者；聊天 `schedule` 只经 confirmation.commit 保存。
    *
    * Host 在该边界内绑定用户与会话，Runtime 不携带业务归属 ID。
    */
@@ -940,6 +950,8 @@ export interface RuntimeBrowserPort {
 export type RuntimeModelProtocol =
   | "openai-chat"
   | "openrouter-messages"
+  | "openrouter-chat"
+  | "openrouter-responses"
   | "anthropic-messages"
   | "google-generative-ai"
   | "openai-codex-responses";
@@ -953,6 +965,31 @@ export type RuntimeModelProtocol =
  *
  * 凭据只留在 Port 对象，不进入 `RuntimeProfile` 或持久状态；术语见 `../index.ts`。
  */
+export type RuntimeModelThinkingLevel =
+  | "off"
+  | "minimal"
+  | "low"
+  | "medium"
+  | "high"
+  | "xhigh"
+  | "max";
+
+export interface RuntimeModelMetadata {
+  readonly name: string;
+  readonly reasoning: boolean;
+  readonly contextWindow: number;
+  readonly maxTokens: number;
+  readonly cost: Readonly<{
+    input: number;
+    output: number;
+    cacheRead: number;
+    cacheWrite: number;
+  }>;
+  readonly thinkingLevelMap?: Readonly<
+    Partial<Record<RuntimeModelThinkingLevel, string | null>>
+  >;
+}
+
 export interface RuntimeModelEndpoint {
   protocol: RuntimeModelProtocol;
   /** Resolved credential; never enters RuntimeProfile or persisted state. */
@@ -967,6 +1004,9 @@ export interface RuntimeModelEndpoint {
   >;
   /** OpenRouter upstream provider pins keyed by model ID; pinned requests never fall back. */
   openRouterProviderPins?: Readonly<Record<string, string>>;
+  /** OpenRouter provider ordering; omitted keeps OpenRouter's default routing. */
+  openRouterProviderSort?: "price" | "throughput" | "latency";
+  modelMetadata?: Readonly<Record<string, RuntimeModelMetadata>>;
 }
 
 /**
@@ -1020,6 +1060,16 @@ export interface RuntimePlatformPort {
     requiredExecutionLevel: ExecutionLevel;
     signal: AbortSignal;
   }): Promise<void>;
+  /**
+   * Match a pinned scheduled-task grant against the concrete Tool operation
+   * and recheck the Host-owned live account authorization.
+   *
+   * This callback must fail closed by throwing a user-safe, specific reason.
+   * It is called before dispatch and again at the effect boundary so a grant
+   * revocation cannot be hidden by an earlier decision.
+   */
+  /** @deprecated Scheduled execution is authorized locally by execution level. */
+  authorizeUnattendedExecution?(request: unknown): Promise<void>;
 }
 
 /**

package/src/config/public-contracts.ts

@@ -17,7 +17,7 @@ export * from "../conversation/message";
 export * from "../submission/contracts";
 export * from "../conversation/state";
 export * from "../lib/execution-level";
-export type { WorkspaceRevision, WorkspaceRevisionManifest } from "../tools/workspace-versioning";
+export type { WorkspaceRevision, WorkspaceRevisionManifest } from "../tools/workspace/versioning";
 export type {
   RuntimeEventConfirmation,
   RuntimeLifecycleFact,
@@ -27,4 +27,4 @@ export type {
   RuntimeSubmissionAdmissionHook,
   RuntimeSubmissionAdmissionInput,
   RuntimeSubmissionAdmissionResult,
-} from "../tools/subagent-authority";
+} from "../tools/subagent/authority";

package/src/context/assembly.ts

@@ -1,4 +1,4 @@
-import { estimateStringTokens } from "agents/experimental/memory/utils";
+import { estimateStringTokens } from "../lib/token-estimate";
 import type { RuntimeMemoryPort } from "../config/ports";
 import type { RuntimeDegradation } from "../config/degradation";
 import type { RuntimeMemoryProfile } from "../config/profile";

package/src/context/extension/assembly.ts

@@ -12,8 +12,8 @@ import type {
 import type { RuntimeDegradation } from "../../config/degradation";
 import { withRuntimeLoadTimeout } from "../../config/runtime-load";
 import { sanitizeExtensionName } from "../../lib/extension-name";
-import type { PiToolCandidate } from "../../tools/compiler";
-import { createPiDeclaredToolCandidate } from "../../tools/declared";
+import type { PiToolCandidate } from "../../tools/runtime/contracts";
+import { createPiDeclaredToolCandidate } from "../../tools/adapters/declared";
 
 export interface PiExtensionContextContribution {
   readonly extensionName: string;

package/src/context/memory/budget/gate.ts

@@ -1,4 +1,5 @@
 import {
+  artifactId,
   type ArtifactRef,
   serializeOutput,
   sha256Hex,
@@ -29,7 +30,7 @@ import {
 /**
  * 持久化单个字符串叶子的上限。
  *
- * MUST ≥ 单页 read 的上限（见 `workspace-sandbox.ts` 的 `READ_PAGE_MAX_CHARS`），
+ * MUST ≥ 单页 read 的上限（见 `tools/workspace/index.ts` 的 `READ_PAGE_MAX_CHARS`），
  * 否则持久记录会比模型当轮看到的内容还少，会话恢复后出现凭空缺页。
  */
 export const STORAGE_LEAF_MAX_CHARS = 64 * 1024;
@@ -161,11 +162,26 @@ export async function spillDurableToolOutput(
       text,
       ext === "json" ? "application/json" : "text/plain",
     );
+    if (!options.workspace.stat || !options.workspace.readFileBytes) {
+      throw new Error("Workspace artifact verification is unavailable");
+    }
+    const stat = await options.workspace.stat(path);
+    const expectedBytes = new TextEncoder().encode(text).byteLength;
+    if (!stat || stat.type !== "file" || stat.size !== expectedBytes) {
+      throw new Error("Workspace artifact failed size verification");
+    }
+    const stored = await options.workspace.readFileBytes(path);
+    if (!stored || new TextDecoder().decode(stored) !== text) {
+      throw new Error("Workspace artifact failed content verification");
+    }
     return {
       kind: "artifact_ref",
+      artifactId: artifactId(hash),
       path,
-      bytes: new TextEncoder().encode(text).byteLength,
-      hash: hash.slice(0, 16),
+      bytes: expectedBytes,
+      hash,
+      workspaceRevision: stat.contentVersion ?? `${stat.updatedAt}:${stat.size}`,
+      availability: "available",
       preview: text.slice(0, PREVIEW_CHARS),
       // 出口指令必须是可执行的：只说“去 read 这个路径”会诱导模型整读，而整读一个
       // 刚刚因为过大被外置的文件毫无意义。这里明确要求分页，并告知 read 会返回