@springbrand/agent-runtime 0.3.0-alpha.7 → 0.3.0-alpha.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@springbrand/agent-runtime",
-  "version": "0.3.0-alpha.7",
+  "version": "0.3.0-alpha.9",
   "type": "module",
   "files": [
     "src",
@@ -13,7 +13,7 @@
     ".": "./src/index.ts",
     "./adapter/cloudflare": "./src/adapter/cloudflare/index.ts",
     "./contracts": "./src/config/public-contracts.ts",
-    "./declared-tool": "./src/tools/declared.ts",
+    "./declared-tool": "./src/tools/adapters/declared.ts",
     "./models": "./src/lib/model-catalog.ts"
   },
   "dependencies": {

package/src/adapter/cloudflare/agent.ts

@@ -36,7 +36,6 @@ import {
   type RuntimeUnattendedExecutionGrant,
 } from "../../submission";
 import type { ExecutionLevel } from "../../lib/execution-level";
-import { pinnedUnattendedExecutionGrant } from "../../submission/unattended";
 import {
   HarnessRuntimeConfig,
   activateRuntimeCandidate,
@@ -798,7 +797,7 @@ export abstract class AgentRuntimeKernel<
         requestId: submission.requestId,
         executionLevel: activeRuntime.snapshot.profile.executionLevel,
         origin: submission.origin,
-        unattendedExecutionGrant: submission.unattendedExecutionGrant,
+        scheduledMaxExecutionLevel: submission.scheduledMaxExecutionLevel ?? undefined,
       },
       candidates: harnessInput.candidates,
       telemetry: this.telemetry,
@@ -826,8 +825,6 @@ export abstract class AgentRuntimeKernel<
         }
       },
       gateTool: harnessInput.platform.gateTool,
-      authorizeUnattendedExecution:
-        harnessInput.platform.authorizeUnattendedExecution,
       onUnattendedFailure: (reason) => {
         this.db.submissions.recordUnattendedFailure(submissionId, reason);
       },
@@ -1431,6 +1428,8 @@ export abstract class AgentRuntimeKernel<
     prompt: string,
     options?: {
       idempotencyKey?: string;
+      scheduledMaxExecutionLevel?: ExecutionLevel;
+      /** @deprecated Retained for rolling upgrades; ignored by Runtime. */
       unattendedExecutionGrant?: RuntimeUnattendedExecutionGrant;
     },
   ): Promise<SubmissionReceipt> {
@@ -1445,9 +1444,7 @@ export abstract class AgentRuntimeKernel<
         requestId,
         idempotencyKey: options?.idempotencyKey,
         origin: "scheduled",
-        unattendedExecutionGrant: options?.unattendedExecutionGrant
-          ? pinnedUnattendedExecutionGrant(options.unattendedExecutionGrant)
-          : undefined,
+        scheduledMaxExecutionLevel: options?.scheduledMaxExecutionLevel,
       },
       SCHEDULED_STABLE_TIMEOUT_MS,
     );

package/src/adapter/cloudflare/define-agent.ts

@@ -264,6 +264,8 @@ export interface RuntimeAgentControls {
     prompt: string,
     opts?: {
       idempotencyKey?: string;
+      scheduledMaxExecutionLevel?: import("../../lib/execution-level").ExecutionLevel;
+      /** @deprecated Retained for rolling upgrades; ignored by Runtime. */
       unattendedExecutionGrant?: import("../../submission").RuntimeUnattendedExecutionGrant;
     },
   ): Promise<SubmissionReceipt>;

package/src/adapter/cloudflare/schema.ts

@@ -54,6 +54,9 @@ export function initializeSchema(sql: SqlTaggedTemplate): void {
   if (!submissionColumns.has("origin")) {
     sql`ALTER TABLE pi_submissions ADD COLUMN origin TEXT NOT NULL DEFAULT 'user'`;
   }
+  if (!submissionColumns.has("scheduled_max_execution_level")) {
+    sql`ALTER TABLE pi_submissions ADD COLUMN scheduled_max_execution_level TEXT`;
+  }
   if (!submissionColumns.has("unattended_execution_grant_json")) {
     sql`ALTER TABLE pi_submissions ADD COLUMN unattended_execution_grant_json TEXT`;
   }

package/src/adapter/cloudflare/subagent/definition.ts

@@ -11,8 +11,8 @@ import type { HarnessEvent } from "@earendil-works/pi-agent-core";
 import type { UIMessageChunk } from "ai";
 import {
   AGENT_TYPES,
-} from "../../../tools/subagent-types/registry";
-import type { AgentType } from "../../../tools/subagent-types/contract";
+} from "../../../tools/subagent/types/registry";
+import type { AgentType } from "../../../tools/subagent/types/contract";
 import type {
   RuntimeProviderPort,
   WorkspacePort,
@@ -30,8 +30,8 @@ import {
   decodeSubagentCompletion,
   emptySubagentUsage,
   encodeSubagentCompletion,
-} from "../../../tools/subagent-runtime";
-import type { RuntimeSubagentUsageMetrics } from "../../../tools/subagent-authority";
+} from "../../../tools/subagent/runtime";
+import type { RuntimeSubagentUsageMetrics } from "../../../tools/subagent/authority";
 import { createCloudflareSubAgentTools } from "./tools";
 
 type RunStatus =

package/src/adapter/cloudflare/subagent/runner.ts

@@ -12,7 +12,7 @@ import {
 import type { Api, AssistantMessage, Model, Models } from "@earendil-works/pi-ai";
 import { z } from "zod";
 import { assembleSubagentPrompt } from "../../../lib/prompt";
-import type { AgentType } from "../../../tools/subagent-types/contract";
+import type { AgentType } from "../../../tools/subagent/types/contract";
 import { structuredOutputStream } from "../../../models";
 import {
   openSessionHarness,

package/src/adapter/cloudflare/subagent/tools.ts

@@ -15,13 +15,13 @@ import type {
 } from "@earendil-works/pi-agent-core";
 import { Type } from "@earendil-works/pi-ai";
 import type { WorkspacePort } from "../../../config/ports";
-import type { AgentType } from "../../../tools/subagent-types/contract";
+import type { AgentType } from "../../../tools/subagent/types/contract";
 import {
   compileHarnessTools,
   type CompileHarnessToolsOptions,
   type PiToolCandidate,
 } from "../../../tools";
-import { workspacePiToolCandidates } from "../../../tools/workspace-sandbox";
+import { workspacePiToolCandidates } from "../../../tools/workspace";
 
 const READONLY_WORKSPACE_TOOLS = new Set([
   "read",

package/src/adapter/cloudflare/universal-agent/preparation.ts

@@ -9,16 +9,16 @@ import type {
   RuntimeSubagentPort,
   WorkspacePort,
 } from "../../../config/ports";
-import { decodeSubagentCompletion } from "../../../tools/subagent-runtime";
+import { decodeSubagentCompletion } from "../../../tools/subagent/runtime";
 import type { RuntimeDegradation } from "../../../config/degradation";
 import type { RuntimeMemoryProfile } from "../../../config/profile";
-import { AGENT_TYPES } from "../../../tools/subagent-types/registry";
+import { AGENT_TYPES } from "../../../tools/subagent/types/registry";
 import type { RuntimeAgentConfigContext } from "../../../config/agent-context";
 import {
   createBrowserExecutionFactory,
   createWorkspaceCodeExecutionFactory,
   type RuntimeBrowserBinding,
-} from "../../../tools/core-host";
+} from "../../../tools/codemode/adapter";
 import {
   createCloudflareSandboxAdapter,
   type SandboxAdmission,

package/src/adapter/cloudflare/universal-agent/tools.ts

@@ -7,15 +7,13 @@ import type {
 } from "../../../config/ports";
 import type { RuntimeDegradation } from "../../../config/degradation";
 import type { RuntimeMemoryProfile } from "../../../config/profile";
-import type { WorkspaceRevisionRestorePort } from "../../../tools/workspace-versioning";
+import type { WorkspaceRevisionRestorePort } from "../../../tools/workspace/versioning";
 import { schedulePiToolCandidates } from "../../../tools/schedule";
-import { workspaceRevisionPiToolCandidate } from "../../../tools/workspace-revision";
-import {
-  sandboxPiToolCandidates,
-} from "../../../tools/workspace-sandbox";
+import { workspaceRevisionPiToolCandidate } from "../../../tools/workspace/revision";
+import { sandboxPiToolCandidates } from "../../../tools/sandbox";
 import type { RuntimeCodeExecutionFactory } from "../../../config/ports";
 import type { ToolAssemblyResult } from "../../../config/definition";
-import type { PiToolCandidate } from "../../../tools/compiler";
+import type { PiToolCandidate } from "../../../tools/runtime/contracts";
 
 export function assembleUniversalAgentTools(options: {
   hostTools?: readonly PiToolCandidate[];

package/src/adapter/cloudflare/workspace/version-control.ts

@@ -5,7 +5,7 @@ import {
   type WorkspaceRevision,
   type WorkspaceRevisionManifest,
   type WorkspaceVersionPort,
-} from "../../../tools/workspace-versioning";
+} from "../../../tools/workspace/versioning";
 import { createWorkspaceGitFs } from "./git-fs";
 
 const PAGE_SIZE = 256;

package/src/config/agent-context.ts

@@ -8,7 +8,7 @@ import type { RuntimeConfigUpdateResult } from "./runtime-config";
 import type {
   TemporaryAgentRequest,
   TemporaryAgentRunContext,
-} from "../tools/temporary-agent/core";
+} from "../tools/subagent/temporary/core";
 
 /**
  * 描述 Agent 寻址路径中的一级父子节点。

package/src/config/assembler.ts

@@ -37,10 +37,7 @@ import {
   type PiRuntimeAssembly,
 } from "./assembly-snapshot";
 import type { AgentTool } from "@earendil-works/pi-agent-core";
-import type {
-  PiToolCandidate,
-  ToolExposureMode,
-} from "../tools/compiler";
+import type { PiToolCandidate, ToolExposureMode } from "../tools/runtime/contracts";
 import type {
   AssembleRuntimeSnapshotInput,
   RuntimeSettings,
@@ -51,17 +48,11 @@ import type {
   RuntimeToolSurfacePolicy,
 } from "./definition";
 import type { RuntimeCodeExecutionFactory } from "./ports";
-import {
-  basePiToolCandidates,
-  memoryPiToolCandidate,
-} from "../tools/base";
-import {
-  BROWSER_EXECUTE_TOOL_NAME,
-  browserExecutionPiToolCandidate,
-  codeExecutionPiToolCandidate,
-} from "../tools/core";
+import { basePiToolCandidates } from "../tools/assistant";
+import { memoryPiToolCandidate } from "../tools/assistant/memory";
+import { BROWSER_EXECUTE_TOOL_NAME, browserExecutionPiToolCandidate, codeExecutionPiToolCandidate } from "../tools/codemode";
 import { skillPiToolCandidates } from "../tools/skill";
-import { createWebSearch, WEB_SEARCH_MODEL } from "../tools/web-search";
+import { createWebSearch, WEB_SEARCH_MODEL } from "../tools/web/search";
 import { subagentPiToolCandidates } from "../tools/subagent";
 import { resolvePiModel } from "../models";
 import {
@@ -305,17 +296,12 @@ async function createToolSurface(
             typeof candidate.tool.execute === "function",
         );
         const codeExecutionCandidates = Object.freeze([...mergeable]);
-        const codeExecutionToolNames = new Set(
-          codeExecutionCandidates.map(({ tool }) => tool.name),
-        );
         const codeExecution = input.codeExecution.create(
           codeExecutionCandidates,
         );
-        const topLevelOnly = directVisible.filter(
-          ({ tool }) => !codeExecutionToolNames.has(tool.name),
-        );
+        const directToolNames = new Set(directVisible.map(({ tool }) => tool.name));
         const routeList = (deferred: boolean) => {
-          const matches = topLevelOnly.filter((candidate) =>
+          const matches = directVisible.filter((candidate) =>
             (defersTool?.(candidate.tool.name) === true) === deferred
           );
           return matches.length > 0
@@ -327,8 +313,9 @@ async function createToolSurface(
         };
         const routeGuidance = [
           "## Tool routing",
-          "Top-level deferred Tools are not callable through `tools.*`. Use Provider Tool Search with their exact name, then call them directly.",
+          "For top-level deferred Tools, use Provider Tool Search with their exact name, then call them directly.",
           "Top-level immediate Tools are already available outside execute; call them directly.",
+          "Only Code Mode Tools listed below are callable inside execute through tools.<name>. Tools marked execute-only are not registered as top-level Tools.",
           "",
           "## Top-level deferred Tools",
           routeList(true),
@@ -336,21 +323,20 @@ async function createToolSurface(
           "## Top-level immediate Tools",
           routeList(false),
           "",
+          "## Code Mode Tools",
+          codeExecutionCandidates.length > 0
+            ? codeExecutionCandidates.map(({ tool }) =>
+                `- \`tools.${tool.name}\` — ${directToolNames.has(tool.name) ? "also available as a top-level Tool" : "execute-only"}`
+              ).join("\n")
+            : "- None.",
+          "",
         ].join("\n");
-        const materializeGuidance = codeExecutionCandidates.some(
-            ({ tool }) => tool.name === "materialize_skill_resource",
-          )
-          ? "Skill resource copying is available only inside execute through " +
-            "`tools.materialize_skill_resource({ name, path, destination })`; " +
-            "no Direct Tool is registered for it. " +
-            "Copy multiple resources sequentially in one execute so durable replay preserves call order.\n\n"
-          : "";
         return Object.freeze({
           candidates: Object.freeze([
             classify(codeExecutionPiToolCandidate({
               ...codeExecution,
               description:
-                routeGuidance + "\n" + materializeGuidance + codeExecution.description,
+                routeGuidance + "\n" + codeExecution.description,
             })),
             ...directVisible.map(classify),
           ]),

package/src/config/assembly-snapshot.ts

@@ -18,7 +18,7 @@ import type {
 import type { RuntimeProviderPort } from "./ports";
 import { assembleSystemPrompt } from "../lib/prompt";
 import { resolvePiModel } from "../models";
-import type { PiToolCandidate } from "../tools/compiler";
+import type { PiToolCandidate } from "../tools/runtime/contracts";
 
 /**
  * 收集完动态 Extension/MCP 候选后，一次性生成最终 Tool Surface。

package/src/config/definition.ts

@@ -17,7 +17,7 @@ import type {
 } from "./profile";
 import type { RuntimeExtensionConfig } from "../context/extension/contracts";
 import type { RuntimeDegradation } from "./degradation";
-import type { PiToolCandidate } from "../tools/compiler";
+import type { PiToolCandidate } from "../tools/runtime/contracts";
 import type {
   RuntimeAgentContext,
   RuntimeAgentPlanningContext,

package/src/config/model-guidance.ts

@@ -1,5 +1,5 @@
 import type { Context } from "@earendil-works/pi-ai";
-import type { PiToolCandidate } from "../tools/compiler";
+import type { PiToolCandidate } from "../tools/runtime/contracts";
 
 /** Only descriptions and guidance may vary inside a pinned Submission. */
 export async function refreshModelGuidance(

package/src/config/ports.ts

@@ -5,14 +5,13 @@ import type { ScheduleSpec, RuntimeSchedulePreparation } from "../submission/con
 import type { RuntimeActivityProjection } from "../conversation/state";
 import type { ExecutionLevel } from "../lib/execution-level";
 import type { AgentToolResult } from "@earendil-works/pi-agent-core";
-import type { PiToolCandidate } from "../tools/compiler";
-import type { RuntimeUnattendedExecutionGrant } from "../submission/contracts";
+import type { PiToolCandidate } from "../tools/runtime/contracts";
 import type {
   RuntimeEventConfirmation,
   RuntimeLifecycleFact,
   RuntimeSubagentUsageEvent,
   RuntimeSubagentUsageMetrics,
-} from "../tools/subagent-authority";
+} from "../tools/subagent/authority";
 export type { RuntimeModelInputModality } from "./profile";
 export type {
   RuntimeEventConfirmation,
@@ -23,7 +22,7 @@ export type {
   RuntimeSubmissionAdmissionHook,
   RuntimeSubmissionAdmissionInput,
   RuntimeSubmissionAdmissionResult,
-} from "../tools/subagent-authority";
+} from "../tools/subagent/authority";
 
 // #region Workspace 端口
 
@@ -1039,17 +1038,8 @@ export interface RuntimePlatformPort {
    * It is called before dispatch and again at the effect boundary so a grant
    * revocation cannot be hidden by an earlier decision.
    */
-  authorizeUnattendedExecution?(request: {
-    grant: RuntimeUnattendedExecutionGrant;
-    capability: string;
-    operation: string;
-    object?: unknown;
-    toolCallId: string;
-    toolName: string;
-    input: unknown;
-    requiredExecutionLevel: ExecutionLevel;
-    signal: AbortSignal;
-  }): Promise<void>;
+  /** @deprecated Scheduled execution is authorized locally by execution level. */
+  authorizeUnattendedExecution?(request: unknown): Promise<void>;
 }
 
 /**

package/src/config/public-contracts.ts

@@ -17,7 +17,7 @@ export * from "../conversation/message";
 export * from "../submission/contracts";
 export * from "../conversation/state";
 export * from "../lib/execution-level";
-export type { WorkspaceRevision, WorkspaceRevisionManifest } from "../tools/workspace-versioning";
+export type { WorkspaceRevision, WorkspaceRevisionManifest } from "../tools/workspace/versioning";
 export type {
   RuntimeEventConfirmation,
   RuntimeLifecycleFact,
@@ -27,4 +27,4 @@ export type {
   RuntimeSubmissionAdmissionHook,
   RuntimeSubmissionAdmissionInput,
   RuntimeSubmissionAdmissionResult,
-} from "../tools/subagent-authority";
+} from "../tools/subagent/authority";

package/src/context/extension/assembly.ts

@@ -12,8 +12,8 @@ import type {
 import type { RuntimeDegradation } from "../../config/degradation";
 import { withRuntimeLoadTimeout } from "../../config/runtime-load";
 import { sanitizeExtensionName } from "../../lib/extension-name";
-import type { PiToolCandidate } from "../../tools/compiler";
-import { createPiDeclaredToolCandidate } from "../../tools/declared";
+import type { PiToolCandidate } from "../../tools/runtime/contracts";
+import { createPiDeclaredToolCandidate } from "../../tools/adapters/declared";
 
 export interface PiExtensionContextContribution {
   readonly extensionName: string;

package/src/context/memory/budget/gate.ts

@@ -29,7 +29,7 @@ import {
 /**
  * 持久化单个字符串叶子的上限。
  *
- * MUST ≥ 单页 read 的上限（见 `workspace-sandbox.ts` 的 `READ_PAGE_MAX_CHARS`），
+ * MUST ≥ 单页 read 的上限（见 `tools/workspace/index.ts` 的 `READ_PAGE_MAX_CHARS`），
  * 否则持久记录会比模型当轮看到的内容还少，会话恢复后出现凭空缺页。
  */
 export const STORAGE_LEAF_MAX_CHARS = 64 * 1024;

package/src/conversation/state.ts

@@ -1,6 +1,6 @@
 import type { ApprovalReceipt } from "../submission/contracts";
 import type { StoredSubmission } from "../submission/repository";
-import type { PendingApprovalSummary } from "../tools/approval/repository";
+import type { PendingApprovalSummary } from "../tools/runtime/approval/repository";
 import type { PiCanonicalUserInput } from "./message/contract";
 
 export type RuntimeLoadPhase = "config" | "assembly" | "mcp" | "pi";

package/src/index.ts

@@ -51,7 +51,7 @@ export type { RuntimeAssemblyView } from "./config/assembly-view";
 export * from "./adapter/cloudflare/define-agent";
 export type { ToolInteractionResponsePreparation } from "./adapter/cloudflare/agent";
 export * from "./conversation/state";
-export * from "./tools/workspace-versioning";
+export * from "./tools/workspace/versioning";
 export * from "./lib/execution-level";
 export type {
   RuntimeAssemblyInput,
@@ -84,10 +84,10 @@ export type {
 } from "./lib/host-actions";
 export {
   AGENT_TYPES,
-} from "./tools/subagent-types/registry";
+} from "./tools/subagent/types/registry";
 export type {
   AgentType,
-} from "./tools/subagent-types/contract";
+} from "./tools/subagent/types/contract";
 export type {
   PiToolCandidate,
   ToolExposureMode,
@@ -129,15 +129,15 @@ export type {
   TemporaryAgentLaunch,
   TemporaryAgentRequest,
   TemporaryAgentRunContext,
-} from "./tools/temporary-agent/core";
-export { TEMPORARY_AGENT_LAUNCH_KEY } from "./tools/temporary-agent/core";
+} from "./tools/subagent/temporary/core";
+export { TEMPORARY_AGENT_LAUNCH_KEY } from "./tools/subagent/temporary/core";
 export {
   temporaryAgentExtensionIsSafe,
   temporaryAgentToolAllowed,
-} from "./tools/temporary-agent/runner";
+} from "./tools/subagent/temporary/runner";
 export {
   createTemporaryAgentWorkspace,
-} from "./tools/temporary-agent/workspace";
+} from "./tools/subagent/temporary/workspace";
 export {
   createPiModels,
   modelRequestUrl,

package/src/lib/execution-level.ts

@@ -25,3 +25,16 @@ export function maxExecutionLevel(
     )
   ]!;
 }
+
+/** The most permissive level shared by an Agent and a Scheduled Task ceiling. */
+export function minExecutionLevel(
+  left: ExecutionLevel,
+  right: ExecutionLevel,
+): ExecutionLevel {
+  return EXECUTION_LEVELS[
+    Math.min(
+      EXECUTION_LEVELS.indexOf(left),
+      EXECUTION_LEVELS.indexOf(right),
+    )
+  ]!;
+}

package/src/lib/prompt.ts

@@ -17,9 +17,8 @@ export const PERSONA =
 // Names the stable runtime environment.
 export const RUNTIME =
   "Runtime: this agent runs on Cloudflare Workers. When execute is present, its Code Mode Dynamic Worker is your " +
-  "instrument — code there runs with outbound network access (fetch), your " +
-  "workspace filesystem (state.*), and the tools.* methods listed in its own description. Use it for raw or customized HTTP " +
-  "requests, parsing a payload, hitting several known endpoints, or computing over a file. Write plain " +
+  "instrument — code there runs with your workspace filesystem (state.*) and the tools.* methods listed in its own description. " +
+  "Use it for tool composition, parsing a payload, or computing over a file. Write plain " +
   "JavaScript — the sandbox evaluates " +
   "it directly, so TypeScript type annotations (`: number`, `as Type`) are a syntax error, and there " +
   "is no Python interpreter or package manager to invoke. Use the JS/Workers equivalent of what you " +
@@ -58,8 +57,7 @@ export const TOOLS =
   "use state.* for workspace file operations, tools.* for other host capabilities, and sequential calls for repeated or durable operations. " +
   "Top-level-only Tools remain Direct even when called repeatedly. " +
   "For web tasks, use web_search for web discovery, current facts, cited research, " +
-  "and public URL analysis. For web access specifically, use execute Code Mode only for raw or customized network requests, structured " +
-  "API calls, or when web_search cannot retrieve the required content; do not use execute for ordinary web " +
+  "and public URL analysis; do not use execute for ordinary web " +
   "searches. When execute is absent, use the actually exposed Direct Tools. When sandbox_* tools are present, use that isolated Linux environment for Python/Node, " +
   "package managers, system commands, builds, tests and background processes; its filesystem is temporary, " +
   "persistent inputs are copied in automatically on first use, /userspace is read-only, and only explicitly " +

package/src/models/index.ts

@@ -790,6 +790,7 @@ function configuredModel(
       ? {
           compat: {
             ...anthropicMessagesCompat,
+            // OpenRouter rejects Anthropic's mid-conversation effort messages and block binding.
             supportsMidConvoEffort: false,
             supportsEagerToolInputStreaming: false,
             supportsStrictTools:

package/src/session/cloudflare/migration.ts

@@ -716,6 +716,20 @@ export function migrateLegacyPiSession(
               .map((row) => [row.message_id, row.submission_id] as const)
           : [],
       );
+      const submissionStatuses = new Map(
+        hasTable(sql, "pi_submissions")
+          ? sql
+              .exec<{ submission_id: string; status: string }>(
+                "SELECT submission_id, status FROM pi_submissions",
+              )
+              .toArray()
+              .map((row) => [row.submission_id, row.status] as const)
+          : [],
+      );
+      const terminalSubmission = (submissionId: string): boolean =>
+        LEGACY_TERMINAL_SUBMISSION_STATUSES.has(
+          submissionStatuses.get(submissionId) ?? "",
+        );
       const results = new Map<string, ToolResultMessage>();
       for (const entry of converted.values()) {
         if (entry.type !== "message" || entry.message.role !== "toolResult")
@@ -797,9 +811,6 @@ export function migrateLegacyPiSession(
         const knownSubmissions = new Set(
           submissions.map((row) => row.submission_id),
         );
-        const submissionStatuses = new Map(
-          submissions.map((row) => [row.submission_id, row.status]),
-        );
         for (const submission of submissions) {
           if (submission.status !== "pending" || !submission.queued_input_json)
             continue;
@@ -862,8 +873,12 @@ export function migrateLegacyPiSession(
                 .canonicalToolResults) {
                 const key = `${row.submission_id}:${result.toolCallId}`;
                 const previous = results.get(key);
-                if (previous) assertSameToolResult(previous, result);
-                results.set(key, result);
+                if (previous && !terminalSubmission(row.submission_id)) {
+                  assertSameToolResult(previous, result);
+                }
+                if (!previous || !terminalSubmission(row.submission_id)) {
+                  results.set(key, result);
+                }
               }
             }
           }
@@ -875,8 +890,12 @@ export function migrateLegacyPiSession(
               if (call.result) {
                 const key = `${submissionId}:${call.toolCallId}`;
                 const previous = results.get(key);
-                if (previous) assertSameToolResult(previous, call.result);
-                results.set(key, call.result);
+                if (previous && !terminalSubmission(submissionId)) {
+                  assertSameToolResult(previous, call.result);
+                }
+                if (!previous || !terminalSubmission(submissionId)) {
+                  results.set(key, call.result);
+                }
               }
             }
           }
@@ -944,7 +963,9 @@ export function migrateLegacyPiSession(
           const recorded = results.get(
             `${row.submission_id}:${row.tool_call_id}`,
           );
-          if (recorded) assertSameToolResult(recorded, expected);
+          if (recorded && !terminalSubmission(row.submission_id)) {
+            assertSameToolResult(recorded, expected);
+          }
         }
       }
       // The old table remains an inert backup. Failure rolls back DDL, data and the version together.

package/src/skills/springbrand-worker-website/index.ts

@@ -163,7 +163,7 @@ export const SPRINGBRAND_WORKER_WEBSITE_SKILL = {
     "5. Call `get_browser_console_logs` for the home page and for every primary internal page. Check navigation responses, missing assets, exceptions, CSP or CORS failures, and client fetch failures.",
     "6. Open the Website with the available browser evidence tools. For a multi-page Website, follow real links from the home page to every primary internal page and verify navigation back to the home page. Check at least the normal desktop viewport and one narrow viewport; capture and inspect a screenshot when visual appearance matters.",
     "7. Fix every failure, redeploy, and repeat the same checks. A clean home page does not prove a multi-page Website works.",
-    "8. After browser verification succeeds, call `save_creation` exactly once with the existing entry HTML Working Copy path. For the recommended layout, that is `/creations/<website-name>/public/index.html`.",
+    "8. After browser verification succeeds, call `save_creation` exactly once with a user-visible title and the existing entry HTML Working Copy path. For the recommended layout, that path is `/creations/<website-name>/public/index.html`.",
     "9. Do not call the Website complete until `save_creation` returns an `artifactId`. Do not save referenced assets as separate Creations.",
     "",
     "## Publication contract",

package/src/submission/admission.ts

@@ -14,6 +14,7 @@ import {
 } from "./lifecycle";
 import { isTerminalSubmissionStatus, submissionAbortReason, type StoredSubmission, type SubmissionOrigin, type SubmissionRepository } from "./repository";
 import type { RuntimeUnattendedExecutionGrant } from "./contracts";
+import type { ExecutionLevel } from "../lib/execution-level";
 
 // Pending records retain identity indefinitely; only recent attempts reserve capacity.
 const ADMISSION_ATTEMPT_WINDOW_MS = 60_000;
@@ -26,6 +27,8 @@ export interface SubmitMessageOptions {
   regenerate?: boolean;
   /** `scheduled` marks a Run injection that locks ordinary input until it ends. */
   origin?: SubmissionOrigin;
+  /** Maximum execution level allowed by the Schedule Definition. */
+  scheduledMaxExecutionLevel?: ExecutionLevel;
   /** Trusted Host grant; accepted only for a scheduled Submission. */
   unattendedExecutionGrant?: RuntimeUnattendedExecutionGrant;
   /** Internal transfer of a durable accepted steer; never a public message option. */
@@ -188,6 +191,7 @@ export class SubmissionAdmission {
               : null,
             runId,
             origin: options.origin,
+            scheduledMaxExecutionLevel: options.scheduledMaxExecutionLevel,
             unattendedExecutionGrant: options.unattendedExecutionGrant,
           });
           const admitted = this.options.submissions.find(runId)!;

package/src/submission/delivery.ts

@@ -2,7 +2,7 @@ import type { UIMessage } from "ai";
 import type { PiCanonicalUserInput } from "../conversation/message/contract";
 import type { RuntimeTelemetryCoordinator } from "../telemetry/coordinator";
 import type { RuntimeTurnEvents } from "../telemetry/turn-events";
-import type { HarnessHumanDecisions } from "../tools/human-decisions";
+import type { HarnessHumanDecisions } from "../tools/runtime/human-decisions";
 import type { SubmitMessageOptions } from "./admission";
 import {
   projectSubmissionReceipt,

package/src/submission/finalization.ts

@@ -4,7 +4,7 @@ import type { ConversationHistory } from "../conversation/history";
 import type { MessageUiRepository } from "../conversation/repository";
 import type { RuntimeTelemetryCoordinator } from "../telemetry/coordinator";
 import type { RuntimeTurnEvents } from "../telemetry/turn-events";
-import type { HarnessHumanDecisions } from "../tools/human-decisions";
+import type { HarnessHumanDecisions } from "../tools/runtime/human-decisions";
 import { USER_STOP_REASON } from "./contracts";
 import type { SubmissionOutcome } from "./lifecycle";
 import { isTerminalSubmissionStatus, type StoredSubmission, type SubmissionRepository } from "./repository";