AbstractRuntime 0.8.3__tar.gz → 0.8.5__tar.gz

{abstractruntime-0.8.3 → abstractruntime-0.8.5}/.github/workflows/ci.yml

@@ -60,6 +60,7 @@ jobs:
             tests/test_abstractcore_comms_facade.py \
             tests/test_abstractcore_discovery_facade.py \
             tests/test_automation_definition.py \
+            tests/test_automation_email_results.py \
             tests/test_automation_tool_approval.py \
             tests/test_default_tools_comms_gating.py \
             tests/test_every_path_bearing_tool_is_walled.py \

{abstractruntime-0.8.3 → abstractruntime-0.8.5}/CHANGELOG.md

@@ -9,6 +9,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 Nothing yet.
 
+## [0.8.5] - 2026-10-03
+
+- Hosts can serve AbstractCore ASGI requests through `integrations.abstractcore.server_facade.serve_core_request`, with independent request-scoped authentication preserved throughout streaming. Requires AbstractCore 2.24.0 or newer.
+
+## [0.8.4] - 2026-10-02
+
+- Automations accept `context.growing.max_tokens` at creation and revision, defaulting to 50,000 tokens. Whole-turn history and admitted retry inputs are preserved.
+- Email-enabled automations produce a result notification for every completed occurrence, with the full answer and configurable `notify.recipients`.
+
 ## [0.8.3] - 2026-10-01
 
 

{abstractruntime-0.8.3 → abstractruntime-0.8.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: AbstractRuntime
-Version: 0.8.3
+Version: 0.8.5
 Summary: AbstractRuntime: a durable graph runner designed to pair with AbstractCore.
 Project-URL: AbstractCore (website), https://www.abstractcore.ai/
 Project-URL: AbstractRuntime (GitHub), https://github.com/lpalbou/abstractruntime
@@ -20,7 +20,7 @@ Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Requires-Python: >=3.10
-Requires-Dist: abstractcore>=2.20.2
+Requires-Dist: abstractcore>=2.24.0
 Requires-Dist: abstractmemory>=0.3.0
 Requires-Dist: abstractsemantics>=0.0.5
 Requires-Dist: anyio<5.0.0,>=4.12.1
@@ -35,14 +35,14 @@ Requires-Dist: reportlab<5.0.0,>=4.0.0
 Requires-Dist: restrictedpython>=7.0
 Requires-Dist: unstructured[docx,odt,pptx,rtf,xlsx]<0.19.0,>=0.18.32
 Provides-Extra: apple
-Requires-Dist: abstractcore[apple]>=2.20.2; extra == 'apple'
+Requires-Dist: abstractcore[apple]>=2.24.0; extra == 'apple'
 Requires-Dist: setuptools<82.0.0,>=80.10.2; extra == 'apple'
 Provides-Extra: docs
 Requires-Dist: mkdocs-material>=9.0.0; extra == 'docs'
 Requires-Dist: mkdocs>=1.6.0; extra == 'docs'
 Requires-Dist: pymdown-extensions>=10.0; extra == 'docs'
 Provides-Extra: gpu
-Requires-Dist: abstractcore[gpu]>=2.20.2; extra == 'gpu'
+Requires-Dist: abstractcore[gpu]>=2.24.0; extra == 'gpu'
 Requires-Dist: setuptools<82.0.0,>=77.0.3; extra == 'gpu'
 Provides-Extra: test
 Requires-Dist: aiosmtpd<2.0.0,>=1.4.4; extra == 'test'
@@ -83,7 +83,7 @@ Remote-light runtime:
 pip install abstractruntime
 ```
 
-The base install includes AbstractCore 2.20.2 or newer (its light install:
+The base install includes AbstractCore 2.24.0 or newer (its light install:
 remote providers, tools, vision, voice, audio, and music integration), plus the
 `abstractruntime-mcp-worker` entry point. It keeps inference remote/light by
 default: local engines such as MLX, vLLM, HuggingFace/Torch, Diffusers, and

{abstractruntime-0.8.3 → abstractruntime-0.8.5}/README.md

@@ -32,7 +32,7 @@ Remote-light runtime:
 pip install abstractruntime
 ```
 
-The base install includes AbstractCore 2.20.2 or newer (its light install:
+The base install includes AbstractCore 2.24.0 or newer (its light install:
 remote providers, tools, vision, voice, audio, and music integration), plus the
 `abstractruntime-mcp-worker` entry point. It keeps inference remote/light by
 default: local engines such as MLX, vLLM, HuggingFace/Torch, Diffusers, and

{abstractruntime-0.8.3 → abstractruntime-0.8.5}/docs/api.md

@@ -302,7 +302,7 @@ from Core route resolution and persisted from `LLM_CALL` results.
 
 ### AbstractCore (LLM + tools)
 
-Requires: `pip install abstractruntime` (AbstractCore 2.20.2 or newer is part of the base install).
+Requires: `pip install abstractruntime` (AbstractCore 2.24.0 or newer is part of the base install).
 
 Implementation: `src/abstractruntime/integrations/abstractcore/*`.
 
@@ -391,3 +391,7 @@ This provides handlers for `MEMORY_KG_*` effects (opt-in wiring layer).
 - `architecture.md` — component map + durability invariants
 - `faq.md` — common questions and gotchas
 - `integrations/abstractcore.md` — `LLM_CALL` / `TOOL_CALLS` wiring
+
+### Host ASGI serving
+
+`abstractruntime.integrations.abstractcore.server_facade.serve_core_request(scope, receive, send, *, token: str, allow_unauthenticated: bool = False)` delegates host-admitted ASGI requests with request-scoped Core authentication. See [host-managed serving](integrations/abstractcore.md#host-managed-serving) for network and credential responsibilities.

{abstractruntime-0.8.3 → abstractruntime-0.8.5}/docs/automations.md

@@ -318,7 +318,7 @@ controller is woken with `max_steps=0`; the host (or `drive_automation`) then ti
 | | Independent (default) | Growing |
 |---|---|---|
 | Session | a new session per occurrence, named after its attempt-1 run id | the automation's session, `automation:<automation_id>` |
-| History given to the occurrence | none | the automation's previous turns as `input_data.context.messages`: the most recent 50,000 tokens of whole turns (the session history window) |
+| History given to the occurrence | none | the automation's previous turns as `input_data.context.messages`: the most recent whole turns within the configured token budget (50,000 tokens by default) (the session history window) |
 | `use_context` given to the target | `false` | `true` |
 | `_meta.occurrence.session_kind` | `occurrence` | `automation` |
 
@@ -514,7 +514,7 @@ Automations are **quiet by default**. An occurrence creates an attention item on
 - its output carries `notify: true`: the item's title is the automation title and its body is the answer, cut to 280
   characters;
 - its output carries `notify: {title, body}`: title at most 120 characters (the automation title when empty), body at
-  most 2,000 characters. A missing, `false` or empty `notify` stays quiet;
+  most 2,000 characters. A missing, `false` or empty `notify` stays quiet unless result email is enabled;
 - it **failed after its last retry**: the title is "<automation title> failed" and the body is the error. A failure
   that a retry fixed is quiet, and so is a cancelled occurrence.
 
@@ -523,7 +523,7 @@ with its end-node values or `{success, result}`. An output with `success: false`
 must flag a result adds `notify` next to its answer.
 
 Each notify or final failure creates exactly one attention item per occurrence. The item is carried by the The item's `channels` repeats the definition's `notify.channels`; a host that delivers notifications by email
-mails the owner when `email` is listed.
+emails every completed result when `email` is listed. `notify.recipients` selects delivery addresses (default `["self"]`); the full answer is retained for email while console previews stay bounded.
 occurrence's `automation.completed` record with a per-automation sequence number.
 
 `list_attention(ledger_store, automation_id, *, after_seq=0, cursor=None, limit=50)` returns
@@ -685,7 +685,7 @@ receives its result directly.
   event source yet.
 - Occurrences run one at a time (`serial`), missed ticks coalesce, and a failed occurrence never stops the
   automation (`failure: "continue"`). These policies cannot be changed.
-- Growing history is the most recent 50,000 tokens of whole turns and is not summarized automatically; older turns
+- Growing history is the most recent whole turns within the configured token budget (50,000 tokens by default) and is not summarized automatically; older turns
   drop out of the replay (they stay in the store).
 - Tools outside `TOOL_EFFECT_CLASSES`, such as third-party MCP tools, still ask for approval under `auto`.
 - Retries repeat external effects.
@@ -701,3 +701,14 @@ receives its result directly.
 - [email.md](email.md): email accounts, the `email.received@1` trigger and the send-email action
 - [faq.md](faq.md): common questions
 - [troubleshooting.md](troubleshooting.md#an-automation-does-not-fire): symptom-oriented fixes
+
+## Growing context limit
+
+Choose **Growing** to set **Max growing context (tokens)** when creating or editing an
+automation. The default is 50,000; enter `30000` for a 30,000-token history budget.
+The limit is hidden for **Independent** runs. Changing it affects subsequent occurrences;
+already admitted occurrences retain their history for retries. History retains whole turns,
+including the newest turn even when that turn alone exceeds the budget.
+
+The API field is `context.growing.max_tokens`, a positive integer. Existing definitions
+that omit it retain the 50,000-token default.

{abstractruntime-0.8.3 → abstractruntime-0.8.5}/docs/getting-started.md

@@ -12,7 +12,7 @@ Remote-light runtime:
 pip install abstractruntime
 ```
 
-This installs AbstractCore 2.20.2 or newer with remote provider, vision,
+This installs AbstractCore 2.24.0 or newer with remote provider, vision,
 voice, audio, music, tool, and MCP-worker support. The base install is
 remote-light: it can route multimodal workflows to hosted or OpenAI-compatible
 endpoints, but it does not select local inferencer stacks such as MLX, vLLM,

{abstractruntime-0.8.3 → abstractruntime-0.8.5}/docs/integrations/abstractcore.md

@@ -16,7 +16,7 @@ Implementation pointers (this repo):
 pip install abstractruntime
 ```
 
-The base install includes AbstractCore 2.20.0 or newer. That is the supported baseline for the current server auth split (`Authorization` for server auth, `X-AbstractCore-Provider-API-Key` for provider overrides), generated-media contracts, image upscaling, capability catalog, prompt-cache control-plane endpoints (including session attribution via `/acore/prompt_cache/key_meta`), host memory snapshots, the host-wide loaded-model sweep used by residency listings, the process-wide MLX residency report and eject used by model unload, durable bloc prompt-cache helpers, bindings and lifecycle operations, task-aware model residency for text/image/video/TTS/STT, current tool catalog, AbstractCore's public output-selector contract, async/sync text-generation output-selector parity, video generation endpoints, the public local vision-cache catalog helper used by Runtime discovery, vision adapter discovery plus batch/LoRA media controls, and the released shared workspace/file-filter utility surface used by Runtime packaging and integration checks.
+The base install includes AbstractCore 2.24.0 or newer. That is the supported baseline for the current server auth split (`Authorization` for server auth, `X-AbstractCore-Provider-API-Key` for provider overrides), generated-media contracts, image upscaling, capability catalog, prompt-cache control-plane endpoints (including session attribution via `/acore/prompt_cache/key_meta`), host memory snapshots, the host-wide loaded-model sweep used by residency listings, the process-wide MLX residency report and eject used by model unload, durable bloc prompt-cache helpers, bindings and lifecycle operations, task-aware model residency for text/image/video/TTS/STT, current tool catalog, AbstractCore's public output-selector contract, async/sync text-generation output-selector parity, video generation endpoints, the public local vision-cache catalog helper used by Runtime discovery, vision adapter discovery plus batch/LoRA media controls, and the released shared workspace/file-filter utility surface used by Runtime packaging and integration checks.
 
 The base install also includes the remote-light media/capability plugins needed
 for AbstractCore's multimodal `generate(..., output=...)` path. Local
@@ -1168,3 +1168,19 @@ This is useful when building a `MappingToolExecutor` quickly.
 - `../architecture.md` — effect handler boundaries and durability invariants
 - `../tools-comms.md` — enabling email/WhatsApp/Telegram tools
 - `../adr/0002_execution_modes_local_remote_hybrid.md` — rationale for local/remote/hybrid
+
+## Host-managed serving
+
+Hosts that expose AbstractCore serving routes use
+`abstractruntime.integrations.abstractcore.server_facade.serve_core_request(scope, receive, send, *, token, allow_unauthenticated=False)`.
+The facade lazily loads the Core ASGI application and keeps the host's independent
+inbound authentication policy scoped to the entire response, including streamed
+bodies. Concurrent requests retain separate policies; cancellation and exceptions
+restore the previous policy.
+
+The host owns route admission, network exposure, origin checks, and token storage.
+Provide a nonempty token even for open access: absent Authorization is allowed when
+`allow_unauthenticated=True`, while any supplied Authorization must validate.
+Anonymous callers cannot use server-held cloud credentials; explicit provider
+keys use `X-AbstractCore-Provider-API-Key`. This serving facade does not create
+durable Runtime runs. The AbstractCore server dependencies must be installed.

{abstractruntime-0.8.3 → abstractruntime-0.8.5}/llms-full.txt

@@ -81,7 +81,7 @@ Remote-light runtime:
 pip install abstractruntime
 ```
 
-The base install includes AbstractCore 2.20.2 or newer (its light install:
+The base install includes AbstractCore 2.24.0 or newer (its light install:
 remote providers, tools, vision, voice, audio, and music integration), plus the
 `abstractruntime-mcp-worker` entry point. It keeps inference remote/light by
 default: local engines such as MLX, vLLM, HuggingFace/Torch, Diffusers, and
@@ -287,7 +287,7 @@ Remote-light runtime:
 pip install abstractruntime
 ```
 
-This installs AbstractCore 2.20.2 or newer with remote provider, vision,
+This installs AbstractCore 2.24.0 or newer with remote provider, vision,
 voice, audio, music, tool, and MCP-worker support. The base install is
 remote-light: it can route multimodal workflows to hosted or OpenAI-compatible
 endpoints, but it does not select local inferencer stacks such as MLX, vLLM,
@@ -1167,7 +1167,7 @@ from Core route resolution and persisted from `LLM_CALL` results.
 
 ### AbstractCore (LLM + tools)
 
-Requires: `pip install abstractruntime` (AbstractCore 2.20.2 or newer is part of the base install).
+Requires: `pip install abstractruntime` (AbstractCore 2.24.0 or newer is part of the base install).
 
 Implementation: `src/abstractruntime/integrations/abstractcore/*`.
 
@@ -1257,6 +1257,10 @@ This provides handlers for `MEMORY_KG_*` effects (opt-in wiring layer).
 - `faq.md` — common questions and gotchas
 - `integrations/abstractcore.md` — `LLM_CALL` / `TOOL_CALLS` wiring
 
+### Host ASGI serving
+
+`abstractruntime.integrations.abstractcore.server_facade.serve_core_request(scope, receive, send, *, token: str, allow_unauthenticated: bool = False)` delegates host-admitted ASGI requests with request-scoped Core authentication. See [host-managed serving](integrations/abstractcore.md#host-managed-serving) for network and credential responsibilities.
+
 
 ==============================================================================
 # FILE: docs/faq.md
@@ -1978,7 +1982,7 @@ Implementation pointers (this repo):
 pip install abstractruntime
 ```
 
-The base install includes AbstractCore 2.20.0 or newer. That is the supported baseline for the current server auth split (`Authorization` for server auth, `X-AbstractCore-Provider-API-Key` for provider overrides), generated-media contracts, image upscaling, capability catalog, prompt-cache control-plane endpoints (including session attribution via `/acore/prompt_cache/key_meta`), host memory snapshots, the host-wide loaded-model sweep used by residency listings, the process-wide MLX residency report and eject used by model unload, durable bloc prompt-cache helpers, bindings and lifecycle operations, task-aware model residency for text/image/video/TTS/STT, current tool catalog, AbstractCore's public output-selector contract, async/sync text-generation output-selector parity, video generation endpoints, the public local vision-cache catalog helper used by Runtime discovery, vision adapter discovery plus batch/LoRA media controls, and the released shared workspace/file-filter utility surface used by Runtime packaging and integration checks.
+The base install includes AbstractCore 2.24.0 or newer. That is the supported baseline for the current server auth split (`Authorization` for server auth, `X-AbstractCore-Provider-API-Key` for provider overrides), generated-media contracts, image upscaling, capability catalog, prompt-cache control-plane endpoints (including session attribution via `/acore/prompt_cache/key_meta`), host memory snapshots, the host-wide loaded-model sweep used by residency listings, the process-wide MLX residency report and eject used by model unload, durable bloc prompt-cache helpers, bindings and lifecycle operations, task-aware model residency for text/image/video/TTS/STT, current tool catalog, AbstractCore's public output-selector contract, async/sync text-generation output-selector parity, video generation endpoints, the public local vision-cache catalog helper used by Runtime discovery, vision adapter discovery plus batch/LoRA media controls, and the released shared workspace/file-filter utility surface used by Runtime packaging and integration checks.
 
 The base install also includes the remote-light media/capability plugins needed
 for AbstractCore's multimodal `generate(..., output=...)` path. Local
@@ -3131,6 +3135,22 @@ This is useful when building a `MappingToolExecutor` quickly.
 - `../tools-comms.md` — enabling email/WhatsApp/Telegram tools
 - `../adr/0002_execution_modes_local_remote_hybrid.md` — rationale for local/remote/hybrid
 
+## Host-managed serving
+
+Hosts that expose AbstractCore serving routes use
+`abstractruntime.integrations.abstractcore.server_facade.serve_core_request(scope, receive, send, *, token, allow_unauthenticated=False)`.
+The facade lazily loads the Core ASGI application and keeps the host's independent
+inbound authentication policy scoped to the entire response, including streamed
+bodies. Concurrent requests retain separate policies; cancellation and exceptions
+restore the previous policy.
+
+The host owns route admission, network exposure, origin checks, and token storage.
+Provide a nonempty token even for open access: absent Authorization is allowed when
+`allow_unauthenticated=True`, while any supplied Authorization must validate.
+Anonymous callers cannot use server-held cloud credentials; explicit provider
+keys use `X-AbstractCore-Provider-API-Key`. This serving facade does not create
+durable Runtime runs. The AbstractCore server dependencies must be installed.
+
 
 ==============================================================================
 # FILE: docs/proposal.md
@@ -3839,7 +3859,7 @@ controller is woken with `max_steps=0`; the host (or `drive_automation`) then ti
 | | Independent (default) | Growing |
 |---|---|---|
 | Session | a new session per occurrence, named after its attempt-1 run id | the automation's session, `automation:<automation_id>` |
-| History given to the occurrence | none | the automation's previous turns as `input_data.context.messages`: the most recent 50,000 tokens of whole turns (the session history window) |
+| History given to the occurrence | none | the automation's previous turns as `input_data.context.messages`: the most recent whole turns within the configured token budget (50,000 tokens by default) (the session history window) |
 | `use_context` given to the target | `false` | `true` |
 | `_meta.occurrence.session_kind` | `occurrence` | `automation` |
 
@@ -4035,7 +4055,7 @@ Automations are **quiet by default**. An occurrence creates an attention item on
 - its output carries `notify: true`: the item's title is the automation title and its body is the answer, cut to 280
   characters;
 - its output carries `notify: {title, body}`: title at most 120 characters (the automation title when empty), body at
-  most 2,000 characters. A missing, `false` or empty `notify` stays quiet;
+  most 2,000 characters. A missing, `false` or empty `notify` stays quiet unless result email is enabled;
 - it **failed after its last retry**: the title is "<automation title> failed" and the body is the error. A failure
   that a retry fixed is quiet, and so is a cancelled occurrence.
 
@@ -4044,7 +4064,7 @@ with its end-node values or `{success, result}`. An output with `success: false`
 must flag a result adds `notify` next to its answer.
 
 Each notify or final failure creates exactly one attention item per occurrence. The item is carried by the The item's `channels` repeats the definition's `notify.channels`; a host that delivers notifications by email
-mails the owner when `email` is listed.
+emails every completed result when `email` is listed. `notify.recipients` selects delivery addresses (default `["self"]`); the full answer is retained for email while console previews stay bounded.
 occurrence's `automation.completed` record with a per-automation sequence number.
 
 `list_attention(ledger_store, automation_id, *, after_seq=0, cursor=None, limit=50)` returns
@@ -4206,7 +4226,7 @@ receives its result directly.
   event source yet.
 - Occurrences run one at a time (`serial`), missed ticks coalesce, and a failed occurrence never stops the
   automation (`failure: "continue"`). These policies cannot be changed.
-- Growing history is the most recent 50,000 tokens of whole turns and is not summarized automatically; older turns
+- Growing history is the most recent whole turns within the configured token budget (50,000 tokens by default) and is not summarized automatically; older turns
   drop out of the replay (they stay in the store).
 - Tools outside `TOOL_EFFECT_CLASSES`, such as third-party MCP tools, still ask for approval under `auto`.
 - Retries repeat external effects.
@@ -4223,6 +4243,17 @@ receives its result directly.
 - [faq.md](faq.md): common questions
 - [troubleshooting.md](troubleshooting.md#an-automation-does-not-fire): symptom-oriented fixes
 
+## Growing context limit
+
+Choose **Growing** to set **Max growing context (tokens)** when creating or editing an
+automation. The default is 50,000; enter `30000` for a 30,000-token history budget.
+The limit is hidden for **Independent** runs. Changing it affects subsequent occurrences;
+already admitted occurrences retain their history for retries. History retains whole turns,
+including the newest turn even when that turn alone exceeds the budget.
+
+The API field is `context.growing.max_tokens`, a positive integer. Existing definitions
+that omit it retain the 50,000-token default.
+
 
 ==============================================================================
 # FILE: docs/tool-approval.md

{abstractruntime-0.8.3 → abstractruntime-0.8.5}/llms.txt

@@ -3,10 +3,10 @@
 > Durable workflow runtime (interrupt → checkpoint → resume) with an append-only execution ledger.
 
 - Python: 3.10+ (see `pyproject.toml`)
-- Version: 0.8.2
+- Version: 0.8.5
 - Ecosystem: [AbstractFramework](https://github.com/lpalbou/AbstractFramework) umbrella, integrates with [AbstractCore](https://github.com/lpalbou/abstractcore)
 - Hard invariant: `RunState.vars` must be JSON-serializable (`src/abstractruntime/core/models.py`)
-- Current AbstractCore baseline: base `abstractruntime` requires AbstractCore 2.20.2 or newer with its light install (remote providers, tools and the MCP worker, media routing); `abstractruntime[apple]` and `abstractruntime[gpu]` require AbstractCore's `apple` and `gpu` settings (`pyproject.toml`)
+- Current AbstractCore baseline: base `abstractruntime` requires AbstractCore 2.24.0 or newer with its light install (remote providers, tools and the MCP worker, media routing); `abstractruntime[apple]` and `abstractruntime[gpu]` require AbstractCore's `apple` and `gpu` settings (`pyproject.toml`)
 - Install profiles: base `abstractruntime` is remote-light with MCP, generated media routing, and Runtime-owned permissive PDF read/write nodes; `abstractruntime[apple]` and `abstractruntime[gpu]` add local inferencer stacks.
 - Config boundary: Runtime does not read `ABSTRACTGATEWAY_*`; Gateway-owned config should be translated into explicit Runtime inputs or Runtime-owned env names. Hosts can attach `resolve_provider_endpoint_profile(provider_id)` to the LLM client; Runtime treats it as an optional resolver hook, injects transient provider/base URL/key params for the call, and redacts secret-like params from persisted observability.
 
@@ -57,7 +57,7 @@
 - [MCP worker](docs/mcp-worker.md): `abstractruntime-mcp-worker` CLI (stdio/HTTP)
 - [Comms toolset](docs/tools-comms.md): email enabled by the host (`email_enabled=True`, no env flag); WhatsApp/Telegram env gating
 - [Email](docs/email.md): one user, one runtime, one mailbox: `_runtime.email_account` binding resolved at call time through `Runtime.set_email_context_resolver` (credentials never in vars, ledger or results), `send_email_recipient@v2` (unattended only to self or to the definition's `policy.email_allowed_recipients`), the resolver's `use` (`agent_tool` / `action`) so a host's agent-tools switch gates agent tools only, large structured tool outputs offloaded to attachments, durable event inbox (`JsonFileEventInbox`, retention 90 days / 10,000 events via `prune_email_inbox`) filled by `EmailInboxFeeder.poll` (read-only, per-message cursor, UIDVALIDITY resync, typed failures with backoff), the `email.received@1` trigger (typed filters, batches every `every`, each message once, untrusted input: messages and framed prompt stored as artifacts (refs only in the controller's records), frame markers with a per-occurrence random boundary, and "allow all tools" granting by kind only (no network egress beyond configured services, no execution, no messaging, no writes outside the workspace (the memory-writing tools included), no delegation; anything else only when named in `policy.untrusted_input_tools`, sending tools never; under "ask" nothing runs unasked but the named tools, and the executor's static defaults never decide for an untrusted run or its children)) and the send-email action (fixed-placeholder templates)
-- [Automations](docs/automations.md): an automation is a durable controller run that starts its target as deterministic child runs (occurrences) on `schedule@1` (fixed UTC intervals, coalesced missed ticks) or `manual@1`; `create_automation`, `apply_automation_command` (pause, resume, run_now, revise, stop_current, archive; idempotent per `command_id`), independent or growing context, `start_discussion` (fork at any occurrence N, seeded with the timeline 1..N, own writable workspace, the automation's workspace mounted read-only via `_runtime.workspace_read_only_paths`: file writes refused inside, reads and commands allowed), `policy.tool_approval` (`auto` or `ask`), `policy.email_allowed_recipients`, `notify.channels`, the `email.received@1` trigger, typed `pending_waits`, `notify` attention items and retries; storage guarantees: `create_if_absent`, `run_mutation_lock`, turn roots and `session_kind` in the run index, one writer process per store, `Runtime.start` refusing session starts it cannot attribute
+- [Automations](docs/automations.md): configurable growing-context budgets and result email; an automation is a durable controller run that starts its target as deterministic child runs (occurrences) on `schedule@1` (fixed UTC intervals, coalesced missed ticks) or `manual@1`; `create_automation`, `apply_automation_command` (pause, resume, run_now, revise, stop_current, archive; idempotent per `command_id`), independent or growing context, `start_discussion` (fork at any occurrence N, seeded with the timeline 1..N, own writable workspace, the automation's workspace mounted read-only via `_runtime.workspace_read_only_paths`: file writes refused inside, reads and commands allowed), `policy.tool_approval` (`auto` or `ask`), `policy.email_allowed_recipients`, `notify.channels`, the `email.received@1` trigger, typed `pending_waits`, `notify` attention items and retries; storage guarantees: `create_if_absent`, `run_mutation_lock`, turn roots and `session_kind` in the run index, one writer process per store, `Runtime.start` refusing session starts it cannot attribute
 - [Tool approval](docs/tool-approval.md): tool risk tiers, the run-policy rank ceiling, and per-call refiners
 - [Entity runtime](docs/entity-runtime.md): per-entity runtimes, homes, the one-writer lease, act-only diary privacy, and durable visit waits
 - [Models, engines and host jobs](docs/integrations/abstractcore.md#models-engines-and-host-jobs-config-facade): `config_facade` passthroughs for hosts; `host_job_cancel(job_id, *, by="api", user=None)` records who cancelled a job

{abstractruntime-0.8.3 → abstractruntime-0.8.5}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "AbstractRuntime"
-version = "0.8.3"
+version = "0.8.5"
 description = "AbstractRuntime: a durable graph runner designed to pair with AbstractCore."
 readme = "README.md"
 requires-python = ">=3.10"
@@ -53,7 +53,7 @@ dependencies = [
   # plugins) without selecting local inference engines. 2.19.2 floors
   # abstractvision>=0.3.33, whose resident loads report `loaded_new` and whose
   # unload frees the pipeline (the resident media path relies on both).
-  "abstractcore>=2.20.2",
+  "abstractcore>=2.24.0",
   "openai<3.0.0,>=1.109.1",
   "httpx<1.0.0,>=0.28.1",
   "anyio<5.0.0,>=4.12.1",
@@ -70,12 +70,12 @@ dependencies = [
 
 [project.optional-dependencies]
 apple = [
-  "abstractcore[apple]>=2.20.2",
+  "abstractcore[apple]>=2.24.0",
   "setuptools<82.0.0,>=80.10.2",
 ]
 
 gpu = [
-  "abstractcore[gpu]>=2.20.2",
+  "abstractcore[gpu]>=2.24.0",
   # vLLM 0.9-0.19 caps setuptools below 80; 77.0.3 is still a modern floor.
   "setuptools<82.0.0,>=77.0.3",
 ]

abstractruntime-0.8.5/release-notes.md

@@ -0,0 +1 @@
+- Hosts can serve AbstractCore ASGI requests through `integrations.abstractcore.server_facade.serve_core_request`, with independent request-scoped authentication preserved throughout streaming. Requires AbstractCore 2.24.0 or newer.

{abstractruntime-0.8.3 → abstractruntime-0.8.5}/src/abstractruntime/automation_queries.py

@@ -23,6 +23,7 @@ from .automations.controller import current_occurrence as _current_occurrence
 from .automations.controller import next_fire_at as _next_fire_at
 from .automations.models import AUTOMATION_STATUSES, automation_status
 from .core.models import RunState, RunStatus, WaitReason
+from .session_history import HISTORY_REPLAY_MAX_TOKENS
 
 # Upper bound for one automation's index scan (occurrence rows, controllers).
 # Rows are column-only and cheap; a bound keeps a runaway store from turning a
@@ -116,6 +117,7 @@ def automation_summary(controller: RunState) -> Dict[str, Any]:
         "revision": definition.get("revision"),
         "trigger": definition.get("trigger"),
         "context_mode": context.get("mode", "independent"),
+        "growing_max_tokens": context.get("growing", {}).get("max_tokens", HISTORY_REPLAY_MAX_TOKENS),
         "target": definition.get("target"),
         "session_id": controller.session_id,
         "workspace_root": definition.get("workspace_root"),

{abstractruntime-0.8.3 → abstractruntime-0.8.5}/src/abstractruntime/automations/attention.py

@@ -289,6 +289,9 @@ def list_attention(
             item["body"] = att["body"]
         # Delivery channels (definition schema v2 `notify.channels`; absent on older records).
         item["channels"] = list(att.get("channels") or ["console"])
+        if "email_result" in att:
+            item["email_result"] = att["email_result"]
+            item["recipients"] = list(att.get("recipients") or ["self"])
         items.append(item)
     items.sort(key=lambda it: it["seq"])
     page = items[:limit]

{abstractruntime-0.8.3 → abstractruntime-0.8.5}/src/abstractruntime/automations/controller.py

@@ -537,7 +537,7 @@ def build_prepared(
         )
     apply_context_mode(input_data, mode=definition["context"]["mode"])
     if definition["context"]["mode"] == "growing":
-        from ..session_history import session_chat_messages
+        from ..session_history import HISTORY_REPLAY_MAX_TOKENS, session_chat_messages
 
         messages = session_chat_messages(
             run_store=turn.run_store,
@@ -545,6 +545,7 @@ def build_prepared(
             artifact_store=turn.artifact_store,
             session_id=definition["session_id"],
             automation_id=turn.automation_id,
+            max_tokens=definition["context"].get("growing", {}).get("max_tokens", HISTORY_REPLAY_MAX_TOKENS),
             strict=True,
         )
         context = input_data.get("context") if isinstance(input_data.get("context"), dict) else {}
@@ -809,8 +810,10 @@ def complete_occurrence(turn: Turn, *, status: str, outcome: Optional[Dict[str,
     attention = None
     notify = None
     seq = int(state.get("attention_seq") or 0)
+    delivery = definition_notify(definition)
+    email_result = "email" in delivery["channels"] and status == "completed"
     if status == "completed" and outcome is not None:
-        notify = notify_payload(outcome.get("notify"), title=definition["title"], answer=outcome.get("answer") or "")
+        notify = notify_payload(True if email_result else outcome.get("notify"), title=definition["title"], answer=outcome.get("answer") or "")
         if notify is not None:
             seq += 1
             attention = {"kind": "notify", "seq": seq, **notify}
@@ -821,7 +824,10 @@ def complete_occurrence(turn: Turn, *, status: str, outcome: Optional[Dict[str,
     if attention is not None:
         # Where the item is delivered (schema v2 `notify.channels`): "email" asks the host's
         # notification dispatcher to mail the owner (framework backlog 0992 B5/C5).
-        attention["channels"] = list(definition_notify(definition)["channels"])
+        attention["channels"] = list(delivery["channels"])
+        if email_result:
+            attention["email_result"] = str((outcome or {}).get("answer") or "")
+            attention["recipients"] = list(delivery.get("recipients", ["self"]))
     last_outcome = {
         "run_id": pending["run_id"],
         "index": int(pending["index"]),

{abstractruntime-0.8.3 → abstractruntime-0.8.5}/src/abstractruntime/automations/models.py

@@ -254,14 +254,18 @@ def validate_context(value: Any) -> Dict[str, Any]:
     if mode not in CONTEXT_MODES:
         raise _invalid(f"context.mode must be one of {list(CONTEXT_MODES)}", "context.mode")
     growing = _require_mapping(ctx.get("growing", {}), "context.growing")
-    _reject_unknown(growing, ("summary",), "context.growing")
+    _reject_unknown(growing, ("summary", "max_tokens"), "context.growing")
     if "summary" in growing:
         raise _invalid(
             "automatic growing-mode summaries are not supported in v1",
             "context.growing.summary",
             reason_code="unsupported_feature",
         )
-    return {"mode": mode, "growing": {}}
+    if "max_tokens" in growing:
+        limit = growing["max_tokens"]
+        if isinstance(limit, bool) or not isinstance(limit, int) or limit <= 0:
+            raise _invalid("Max growing context must be a positive whole number of tokens", "context.growing.max_tokens")
+    return {"mode": mode, "growing": dict(growing)}
 
 
 def _duration(value: Any, field: str) -> str:
@@ -272,13 +276,12 @@ def _duration(value: Any, field: str) -> str:
     return value
 
 
-def validate_email_allowed_recipients(value: Any) -> list:
+def validate_email_allowed_recipients(value: Any, *, field: str = "policy.email_allowed_recipients") -> list:
     """`["self" | "name@example.test", ...]`, lower-cased and de-duplicated (order kept).
 
     Exact addresses only: no display names, groups, domains or patterns (a pre-authorisation
     must name the person). Empty list = nobody, not even self, runs unattended.
     """
-    field = "policy.email_allowed_recipients"
     if not isinstance(value, list):
         raise _invalid(f"{field} must be a list of 'self' or email addresses", field)
     if len(value) > MAX_EMAIL_ALLOWED_RECIPIENTS:
@@ -332,7 +335,7 @@ def validate_notify(value: Any) -> Dict[str, Any]:
     dispatcher mails the owner's registered address).
     """
     notify = _require_mapping(value if value is not None else {}, "notify")
-    _reject_unknown(notify, ("channels",), "notify")
+    _reject_unknown(notify, ("channels", "recipients"), "notify")
     channels = notify.get("channels", DEFAULT_NOTIFY["channels"])
     if not isinstance(channels, list) or not channels:
         raise _invalid(f"notify.channels must be a non-empty list of {list(NOTIFY_CHANNELS)}", "notify.channels")
@@ -342,7 +345,13 @@ def validate_notify(value: Any) -> Dict[str, Any]:
             raise _invalid(f"notify.channels[{i}] must be one of {list(NOTIFY_CHANNELS)}", f"notify.channels[{i}]")
         if ch not in out:
             out.append(ch)
-    return {"channels": [c for c in NOTIFY_CHANNELS if c in out]}
+    result = {"channels": [c for c in NOTIFY_CHANNELS if c in out]}
+    if "recipients" in notify:
+        recipients = validate_email_allowed_recipients(notify["recipients"], field="notify.recipients")
+        if not recipients:
+            raise _invalid("Choose at least one result recipient", "notify.recipients")
+        result["recipients"] = recipients
+    return result
 
 
 def validate_policy(value: Any) -> Dict[str, Any]:

abstractruntime-0.8.5/src/abstractruntime/integrations/abstractcore/server_facade.py

@@ -0,0 +1,32 @@
+"""Host-facing ASGI delegation to AbstractCore's serving application.
+
+Hosts own route admission, network policy, and token storage. This facade keeps
+Core imports behind Runtime's integration boundary and scopes authentication to
+one complete ASGI response, including streamed bodies.
+"""
+from __future__ import annotations
+
+import asyncio
+import importlib
+from typing import Any, Awaitable, Callable, MutableMapping
+
+
+async def serve_core_request(
+    scope: MutableMapping[str, Any],
+    receive: Callable[[], Awaitable[dict[str, Any]]],
+    send: Callable[[dict[str, Any]], Awaitable[None]],
+    *,
+    token: str,
+    allow_unauthenticated: bool = False,
+) -> None:
+    """Serve a host-admitted request using an independent inbound auth policy.
+
+    Requires the AbstractCore server dependencies. Importing this module does
+    not load Core or its application. The host must provide a nonempty token,
+    even when allowing anonymous requests; supplied credentials still validate.
+    """
+    module = await asyncio.to_thread(importlib.import_module, "abstractcore.server.app")
+    from abstractcore.server.auth_policy import ServerAuthPolicy, use_server_auth_policy
+
+    with use_server_auth_policy(ServerAuthPolicy(token, allow_unauthenticated)):
+        await module.app(scope, receive, send)

abstractruntime-0.8.5/tests/test_abstractcore_server_facade.py

@@ -0,0 +1,72 @@
+"""The host facade preserves ASGI streaming and request-local auth."""
+import asyncio
+import importlib
+import threading
+from types import SimpleNamespace
+
+import pytest
+
+from abstractruntime.integrations.abstractcore import server_facade
+from abstractcore.server.auth_policy import current_server_auth_policy
+
+pytestmark = pytest.mark.basic
+
+
+def test_concurrent_streams_keep_separate_auth_and_import_off_loop(monkeypatch):
+    main_thread = threading.get_ident()
+    imports = []
+    barrier = None
+    seen = []
+
+    async def app(scope, receive, send):
+        policy = current_server_auth_policy()
+        assert policy.token == scope["token"]
+        await send({"type": "http.response.start", "status": 200, "headers": []})
+        await send({"type": "http.response.body", "body": b"first", "more_body": True})
+        await barrier.wait()
+        assert current_server_auth_policy() is policy
+        seen.append((policy.token, policy.allow_unauthenticated))
+        await send({"type": "http.response.body", "body": b"last"})
+
+    def load(name):
+        imports.append((name, threading.get_ident()))
+        return SimpleNamespace(app=app)
+
+    monkeypatch.setattr(server_facade.importlib, "import_module", load)
+
+    async def run():
+        nonlocal barrier
+        barrier = asyncio.Event()
+        bodies = {"one": [], "two": []}
+        async def receive():
+            return {"type": "http.disconnect"}
+        async def invoke(token, anonymous):
+            async def send(message):
+                bodies[token].append(message)
+                if all(any(m.get("more_body") for m in messages) for messages in bodies.values()):
+                    barrier.set()
+            await server_facade.serve_core_request({"token": token}, receive, send, token=token, allow_unauthenticated=anonymous)
+            assert current_server_auth_policy() is None
+        await asyncio.gather(invoke("one", False), invoke("two", True))
+        assert all(messages[-1]["body"] == b"last" for messages in bodies.values())
+    asyncio.run(run())
+    assert sorted(seen) == [("one", False), ("two", True)]
+    assert all(name == "abstractcore.server.app" and thread != main_thread for name, thread in imports)
+
+
+@pytest.mark.parametrize("error", [RuntimeError("stream failed"), asyncio.CancelledError()])
+def test_policy_resets_on_failure_or_cancellation(monkeypatch, error):
+    async def app(scope, receive, send):
+        assert current_server_auth_policy().token == "managed"
+        await asyncio.sleep(0)
+        raise error
+    monkeypatch.setattr(server_facade.importlib, "import_module", lambda name: SimpleNamespace(app=app))
+    async def run():
+        async def receive():
+            return {"type": "http.disconnect"}
+        async def send(message):
+            pass
+        with pytest.raises(type(error)):
+            await server_facade.serve_core_request({}, receive, send, token="managed")
+        assert current_server_auth_policy() is None
+    asyncio.run(run())

{abstractruntime-0.8.3 → abstractruntime-0.8.5}/tests/test_automation_definition.py

@@ -166,3 +166,16 @@ def test_the_longest_accepted_interval_runs():
     binding = {"binding_id": "b", "source_id": "schedule", "source_version": 1, "config": cfg}
     state = a.admit(binding, state=a.initial_state(cfg), now=NOW)["state"]
     assert a.prepare(binding, state=state, now=NOW)["until"] == "2027-01-02T00:00:00+00:00"
+
+
+@pytest.mark.parametrize("limit", [0, -1, True, False, 1.5, "30000", None])
+def test_growing_context_rejects_invalid_token_limit(limit):
+    with pytest.raises(AutomationError) as exc:
+        _build(context={"mode": "growing", "growing": {"max_tokens": limit}})
+    assert exc.value.field == "context.growing.max_tokens"
+
+
+def test_growing_context_keeps_custom_token_limit():
+    assert _build(context={"mode": "growing", "growing": {"max_tokens": 30_000}})["context"] == {
+        "mode": "growing", "growing": {"max_tokens": 30_000},
+    }