@standardagents/spec 0.41.12 → 0.41.14

package/dist/index.d.ts

@@ -800,10 +800,25 @@ interface UserState {
         total: number;
     }>;
     /**
-     * Resolve a user-scoped environment property. Rejects when the property is
-     * not defined for this user.
+     * Resolve an environment property for this user: the user-account value
+     * first, then the runtime instance value (the instance's configured value,
+     * then the deployment's environment variable of that name). Rejects when
+     * none defines it.
+     * This is the tail of the thread resolution order (`ThreadState.env`), so
+     * a value configured once for the instance is visible to user endpoints
+     * and user hooks as it is to threads, and a user-account value overrides
+     * it for that user.
      */
     env(name: string): Promise<string>;
+    /**
+     * Optionally resolve only the runtime-instance value, never a user-account
+     * value, for trust anchors such as a service endpoint and the credential
+     * sent to it. Resolves `undefined` when the instance does not configure the
+     * key and rejects when the runtime cannot read its instance environment.
+     * Consumers that require this boundary must feature-detect the method and
+     * fail closed when it is absent.
+     */
+    instanceEnv?(name: string): Promise<string | undefined>;
     /**
      * Broadcast an event to every socket attached to this user's event stream
      * (`{runtime_prefix}/users/me/stream`) and to every room socket. Delivery