runeward 0.2.0__tar.gz

runeward-0.2.0/.gitignore

@@ -0,0 +1,67 @@
+# Binaries (built at the repo root). Anchored with a leading slash so these do
+# NOT match the cmd/<name> source dirs or deploy/helm/runeward/.
+/bin/
+/dist/bin/
+/runeward
+/runeward-agent
+/runeward-browser
+/runeward-egress
+
+# Go
+*.test
+*.out
+/vendor/
+
+# Python
+__pycache__/
+*.pyc
+
+# Local scratch / runtime state
+/.tmp/
+/.runeward-fleet
+
+# Ledger / signing keys / runtime state (should only live under $RUNEWARD_STATE_DIR)
+*.key
+*.pem
+ledger.jsonl
+fleets.json
+.env
+.env.*
+
+# Editor/local config with machine-specific absolute paths
+/.cursor/
+
+# Release build outputs (produced in CI)
+/dist-bin/
+/dist-chart/
+/dist-release/
+*.tgz
+
+# Docs site build output (MkDocs)
+/site/
+
+# Local profiles carry secret references — never commit user-global ones.
+/.runeward/
+
+# Local scratch notes / runbooks (not part of the published docs)
+/NOTES-*.md
+
+# OS / editor
+.DS_Store
+*.swp
+
+ROADMAP.md
+
+# Node (TypeScript adapter) — installed deps + build output
+/adapters/typescript/node_modules/
+/adapters/typescript/dist/
+/adapters/python/dist/
+
+# Signed-profile artifacts produced by `profile sign` during testing
+*.toml.sig
+
+# Scratch profiles generated inline by the E2E walkthrough (see docs §33)
+/examples/budget-demo.toml
+/examples/limits-demo.toml
+/examples/loop-demo.toml
+/examples/secret-env.toml

runeward-0.2.0/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or Derivative
+          Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work, excluding
+          those notices that do not pertain to any part of the Derivative
+          Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and do
+          not modify the License. You may add Your own attribution notices
+          within Derivative Works that You distribute, alongside or as an
+          addendum to the NOTICE text from the Work, provided that such
+          additional attribution notices cannot be construed as modifying
+          the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 The runeward Authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

runeward-0.2.0/PKG-INFO

@@ -0,0 +1,217 @@
+Metadata-Version: 2.4
+Name: runeward
+Version: 0.2.0
+Summary: Python SDK for governing AI agent execution with policy, approvals, isolation, budgets, and signed evidence.
+Project-URL: Homepage, https://github.com/Runewardd/runeward
+Project-URL: Repository, https://github.com/Runewardd/runeward
+Project-URL: Documentation, https://runewardd.github.io/runeward/
+Project-URL: Issues, https://github.com/Runewardd/runeward/issues
+Project-URL: Changelog, https://github.com/Runewardd/runeward/releases
+Author: Runeward contributors
+License-Expression: Apache-2.0
+License-File: LICENSE
+Keywords: agents,ai,crewai,governance,langchain,llamaindex,mcp,openai-agents,sandbox,strands
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Topic :: Software Development :: Libraries
+Classifier: Typing :: Typed
+Requires-Python: >=3.9
+Provides-Extra: crewai
+Requires-Dist: crewai>=0.30; extra == 'crewai'
+Requires-Dist: pydantic>=2; extra == 'crewai'
+Provides-Extra: langchain
+Requires-Dist: langchain-core>=0.2; extra == 'langchain'
+Provides-Extra: llamaindex
+Requires-Dist: llama-index-core>=0.11; extra == 'llamaindex'
+Provides-Extra: openai-agents
+Requires-Dist: openai-agents>=0.0.1; extra == 'openai-agents'
+Provides-Extra: strands
+Requires-Dist: strands-agents>=1.0; extra == 'strands'
+Description-Content-Type: text/markdown
+
+# runeward (Python)
+
+A dependency-light Python client and agent-framework adapters for the
+[Runeward](https://github.com/Runewardd/runeward) **agent governance harness**.
+Put policy, human approvals, isolated Citadels, Rationing, and signed Chronicles
+around an existing agent without replacing its model or framework.
+
+The core client uses **only the Python standard library** (`urllib`). The
+LangChain, CrewAI, LlamaIndex, OpenAI Agents SDK, and Strands helpers are
+optional extras and are imported lazily, so the base client works with nothing
+else installed.
+
+## Install
+
+```bash
+pip install runeward                    # core client only (no third-party deps)
+pip install "runeward[langchain]"       # + LangChain tools
+pip install "runeward[crewai]"          # + CrewAI tools
+pip install "runeward[llamaindex]"      # + LlamaIndex tools
+pip install "runeward[openai-agents]"   # + OpenAI Agents SDK tools
+pip install "runeward[strands]"         # + Strands Agents SDK tools
+```
+
+During local development from this directory:
+
+```bash
+pip install -e .
+```
+
+## Quick start
+
+Start the control plane first (`runeward serve`, default
+`http://localhost:8080`), then:
+
+```python
+from runeward import RunewardClient, RunewardDenied, RunewardApprovalRequired
+
+rw = RunewardClient("http://localhost:8080")
+
+sbx = rw.create_sandbox("dev")          # -> {"id": "sbx_...", "backend": "docker", ...}
+sid = sbx["id"]
+
+result = rw.shell(sid, ["python3", "--version"])
+print(result["stdout"])                 # "Python 3.11.2\n"
+
+rw.write_file(sid, "/workspace/main.py", "print(2 + 2)")
+print(rw.python(sid, "exec(open('/workspace/main.py').read())")["stdout"])  # "4\n"
+
+rw.kill_sandbox(sid)                    # always tear down when done
+```
+
+Use `allow_insecure=True` (or `RUNEWARD_ALLOW_INSECURE_HTTP=1`) only when you must call a non-loopback `http://` control-plane endpoint.
+
+### Handling governance verdicts
+
+The two governance outcomes are raised as typed exceptions. Handle them
+explicitly — a denial must **not** be blindly retried, and an approval gate must
+**pause** for a human:
+
+```python
+try:
+    rw.shell(sid, ["rm", "-rf", "/"])
+except RunewardDenied as e:
+    print("blocked by policy:", e.reason)     # do NOT retry the same action
+
+try:
+    rw.write_file(sid, "/etc/hosts", "127.0.0.1 example")
+except RunewardApprovalRequired as e:
+    print("needs a human:", e.approval_id)     # pause; ask an operator to approve/deny
+```
+
+### Approvals inbox
+
+```python
+for a in rw.list_approvals():
+    print(a["id"], a["tool"], a["action"], a["reason"])
+
+rw.approve("apr_31c")   # or rw.deny("apr_31c")
+```
+
+### Chronicle (audit ledger)
+
+```python
+events = rw.audit(sid)          # this Citadel's Chronicle events
+assert rw.verify_audit()        # verify the tamper-evident hash chain
+```
+
+## Client method surface
+
+| Method | REST endpoint |
+| --- | --- |
+| `healthz()` | `GET /healthz` |
+| `list_profiles()` | `GET /v1/charters` |
+| `create_sandbox(profile)` | `POST /v1/citadels` |
+| `list_sandboxes()` / `get_sandbox(id)` / `kill_sandbox(id)` | `GET`/`GET`/`DELETE /v1/citadels[/{id}]` |
+| `shell(sandbox, command, workdir="")` | `POST .../shell/exec` |
+| `python(sandbox, code)` / `node(sandbox, code)` | `POST .../code/{python,node}` |
+| `read_file` / `write_file` / `list_files` / `search_files` | `POST .../file/{read,write,list,search}` |
+| `audit(sandbox)` / `verify_audit()` | `GET .../chronicle`, `GET /v1/chronicle/verify` |
+| `list_approvals()` / `approve(id)` / `deny(id)` | `GET /v1/conclave`, `POST /v1/conclave/{id}/{approve,deny}` |
+
+## LangChain
+
+```python
+from runeward import RunewardClient
+from runeward.langchain_tools import make_runeward_tools
+
+tools = make_runeward_tools(RunewardClient("http://localhost:8080"))
+# Pass `tools` to any LangChain agent / AgentExecutor.
+```
+
+The Python framework tools are named `runeward_create_sandbox`,
+`runeward_shell`, …. Governance verdicts are returned as descriptive strings so
+the agent can reason about a denial or an approval gate. (Note: the standalone
+`runeward mcp` server now exposes the renamed `runeward_create_citadel` /
+`runeward_kill_citadel` / `runeward_list_conclave` tools; the Python framework
+tool names have not yet been updated to match.)
+
+## CrewAI
+
+```python
+from runeward import RunewardClient
+from runeward.crewai_tools import make_runeward_tools
+
+tools = make_runeward_tools(RunewardClient("http://localhost:8080"))
+# Attach `tools` to a crewai.Agent(tools=tools, ...).
+```
+
+## LlamaIndex
+
+```python
+from runeward import RunewardClient
+from runeward.llamaindex_tools import make_runeward_tools
+
+tools = make_runeward_tools(RunewardClient("http://localhost:8080"))
+# Pass `tools` to a FunctionAgent / ReActAgent / AgentRunner.
+```
+
+Returns `llama_index.core.tools.FunctionTool` instances; the tool schema is
+derived from each function's type hints and docstring.
+
+## OpenAI Agents SDK
+
+```python
+from agents import Agent, Runner
+from runeward import RunewardClient
+from runeward.openai_agents_tools import make_runeward_tools
+
+tools = make_runeward_tools(RunewardClient("http://localhost:8080"))
+agent = Agent(name="builder", instructions="Use the sandbox tools.", tools=tools)
+result = Runner.run_sync(agent, "Create a dev sandbox, run `node --version`, then tear it down.")
+```
+
+Returns `@function_tool`-built tools; the SDK derives each schema from the
+function's type hints and docstring.
+
+## Strands Agents SDK
+
+```python
+from strands import Agent
+from runeward import RunewardClient
+from runeward.strands_tools import make_runeward_tools
+
+tools = make_runeward_tools(RunewardClient("http://localhost:8080"))
+agent = Agent(tools=tools)
+agent("Create a dev sandbox, run `node --version`, then tear it down.")
+```
+
+Returns `@tool`-decorated functions; Strands derives each schema from the
+function's type hints and docstring.
+
+## Notes
+
+- **`deny` is a policy decision, not a transient error.** Don't retry the same
+  action; pick a different, allowed approach.
+- **`require-approval` is a hard pause.** Surface the `approval_id` to a human
+  and wait for the outcome.
+- Prefer the tightest profile that lets the task succeed.

runeward-0.2.0/README.md

@@ -0,0 +1,178 @@
+# runeward (Python)
+
+A dependency-light Python client and agent-framework adapters for the
+[Runeward](https://github.com/Runewardd/runeward) **agent governance harness**.
+Put policy, human approvals, isolated Citadels, Rationing, and signed Chronicles
+around an existing agent without replacing its model or framework.
+
+The core client uses **only the Python standard library** (`urllib`). The
+LangChain, CrewAI, LlamaIndex, OpenAI Agents SDK, and Strands helpers are
+optional extras and are imported lazily, so the base client works with nothing
+else installed.
+
+## Install
+
+```bash
+pip install runeward                    # core client only (no third-party deps)
+pip install "runeward[langchain]"       # + LangChain tools
+pip install "runeward[crewai]"          # + CrewAI tools
+pip install "runeward[llamaindex]"      # + LlamaIndex tools
+pip install "runeward[openai-agents]"   # + OpenAI Agents SDK tools
+pip install "runeward[strands]"         # + Strands Agents SDK tools
+```
+
+During local development from this directory:
+
+```bash
+pip install -e .
+```
+
+## Quick start
+
+Start the control plane first (`runeward serve`, default
+`http://localhost:8080`), then:
+
+```python
+from runeward import RunewardClient, RunewardDenied, RunewardApprovalRequired
+
+rw = RunewardClient("http://localhost:8080")
+
+sbx = rw.create_sandbox("dev")          # -> {"id": "sbx_...", "backend": "docker", ...}
+sid = sbx["id"]
+
+result = rw.shell(sid, ["python3", "--version"])
+print(result["stdout"])                 # "Python 3.11.2\n"
+
+rw.write_file(sid, "/workspace/main.py", "print(2 + 2)")
+print(rw.python(sid, "exec(open('/workspace/main.py').read())")["stdout"])  # "4\n"
+
+rw.kill_sandbox(sid)                    # always tear down when done
+```
+
+Use `allow_insecure=True` (or `RUNEWARD_ALLOW_INSECURE_HTTP=1`) only when you must call a non-loopback `http://` control-plane endpoint.
+
+### Handling governance verdicts
+
+The two governance outcomes are raised as typed exceptions. Handle them
+explicitly — a denial must **not** be blindly retried, and an approval gate must
+**pause** for a human:
+
+```python
+try:
+    rw.shell(sid, ["rm", "-rf", "/"])
+except RunewardDenied as e:
+    print("blocked by policy:", e.reason)     # do NOT retry the same action
+
+try:
+    rw.write_file(sid, "/etc/hosts", "127.0.0.1 example")
+except RunewardApprovalRequired as e:
+    print("needs a human:", e.approval_id)     # pause; ask an operator to approve/deny
+```
+
+### Approvals inbox
+
+```python
+for a in rw.list_approvals():
+    print(a["id"], a["tool"], a["action"], a["reason"])
+
+rw.approve("apr_31c")   # or rw.deny("apr_31c")
+```
+
+### Chronicle (audit ledger)
+
+```python
+events = rw.audit(sid)          # this Citadel's Chronicle events
+assert rw.verify_audit()        # verify the tamper-evident hash chain
+```
+
+## Client method surface
+
+| Method | REST endpoint |
+| --- | --- |
+| `healthz()` | `GET /healthz` |
+| `list_profiles()` | `GET /v1/charters` |
+| `create_sandbox(profile)` | `POST /v1/citadels` |
+| `list_sandboxes()` / `get_sandbox(id)` / `kill_sandbox(id)` | `GET`/`GET`/`DELETE /v1/citadels[/{id}]` |
+| `shell(sandbox, command, workdir="")` | `POST .../shell/exec` |
+| `python(sandbox, code)` / `node(sandbox, code)` | `POST .../code/{python,node}` |
+| `read_file` / `write_file` / `list_files` / `search_files` | `POST .../file/{read,write,list,search}` |
+| `audit(sandbox)` / `verify_audit()` | `GET .../chronicle`, `GET /v1/chronicle/verify` |
+| `list_approvals()` / `approve(id)` / `deny(id)` | `GET /v1/conclave`, `POST /v1/conclave/{id}/{approve,deny}` |
+
+## LangChain
+
+```python
+from runeward import RunewardClient
+from runeward.langchain_tools import make_runeward_tools
+
+tools = make_runeward_tools(RunewardClient("http://localhost:8080"))
+# Pass `tools` to any LangChain agent / AgentExecutor.
+```
+
+The Python framework tools are named `runeward_create_sandbox`,
+`runeward_shell`, …. Governance verdicts are returned as descriptive strings so
+the agent can reason about a denial or an approval gate. (Note: the standalone
+`runeward mcp` server now exposes the renamed `runeward_create_citadel` /
+`runeward_kill_citadel` / `runeward_list_conclave` tools; the Python framework
+tool names have not yet been updated to match.)
+
+## CrewAI
+
+```python
+from runeward import RunewardClient
+from runeward.crewai_tools import make_runeward_tools
+
+tools = make_runeward_tools(RunewardClient("http://localhost:8080"))
+# Attach `tools` to a crewai.Agent(tools=tools, ...).
+```
+
+## LlamaIndex
+
+```python
+from runeward import RunewardClient
+from runeward.llamaindex_tools import make_runeward_tools
+
+tools = make_runeward_tools(RunewardClient("http://localhost:8080"))
+# Pass `tools` to a FunctionAgent / ReActAgent / AgentRunner.
+```
+
+Returns `llama_index.core.tools.FunctionTool` instances; the tool schema is
+derived from each function's type hints and docstring.
+
+## OpenAI Agents SDK
+
+```python
+from agents import Agent, Runner
+from runeward import RunewardClient
+from runeward.openai_agents_tools import make_runeward_tools
+
+tools = make_runeward_tools(RunewardClient("http://localhost:8080"))
+agent = Agent(name="builder", instructions="Use the sandbox tools.", tools=tools)
+result = Runner.run_sync(agent, "Create a dev sandbox, run `node --version`, then tear it down.")
+```
+
+Returns `@function_tool`-built tools; the SDK derives each schema from the
+function's type hints and docstring.
+
+## Strands Agents SDK
+
+```python
+from strands import Agent
+from runeward import RunewardClient
+from runeward.strands_tools import make_runeward_tools
+
+tools = make_runeward_tools(RunewardClient("http://localhost:8080"))
+agent = Agent(tools=tools)
+agent("Create a dev sandbox, run `node --version`, then tear it down.")
+```
+
+Returns `@tool`-decorated functions; Strands derives each schema from the
+function's type hints and docstring.
+
+## Notes
+
+- **`deny` is a policy decision, not a transient error.** Don't retry the same
+  action; pick a different, allowed approach.
+- **`require-approval` is a hard pause.** Surface the `approval_id` to a human
+  and wait for the outcome.
+- Prefer the tightest profile that lets the task succeed.