Module command 

Host control plane (spec §7.5).

Structs

ApplyCapabilityPatchCommand

ApplyKnowledgeMutationCommand

ApplyPolicyPatchCommand

Optimistic policy update. The revision is mandatory: a patch without one silently overwrites whatever another writer just installed.

ApplySkillActivationCommand

§13.2 · skill activation state. Both directions in one command so a swap is atomic.

CancelCommand

Cancellation. The operation id lives in the envelope and is not repeated here: the historical duplicate field forced every SDK to special-case cancel when building an input.

CapabilityPatch

EnumParam

ForceCompactCommand

Empty payload rather than a unit variant so deny_unknown_fields still applies.

GovernancePolicy

Syscall-gate policy — the complete posture, replaced atomically.

KnowledgeMutation

LivePolicyState

The kernel-side live policy state: the resolved configuration plus the revision that guards mutations of it.

PolicyRule

RangeParam

RateLimitSpec

Per-tool rolling-window rate limit.

RecoveryPolicy

Semantic recovery ladders the kernel owns. Host transport retry/backoff stays host-side.

ReplaceGovernancePolicy

ReplaceRecoveryPolicy

ReplaceSignalPolicy

RequiredParam

SeedKnowledgeCommand

SignalPolicy

Signal routing policy. Replaced atomically — a partial signal policy is not a thing.

SkillActivation

TailBoundsPolicy

Sparse override of TailBounds. Each axis is independent: a host that only wants to shorten the record watermark keeps the kernel’s byte bounds.

TaskUpdate

A partial edit of the task state. Every field is optional; absent ⇒ unchanged.

TightenResourceQuota

Quotas only ever shrink at runtime. Growing one is a reservation fact, not a policy patch, and needs its own contract before it exists.

UpdateDeadlineCommand

Absolute deadline for the operation. None clears it.

UpdateTaskCommand

Enums

CancellationReason

HostCommand

Live commands a host may issue against a running operation.

LivePolicyPatch

The closed set of policies that may change while an operation runs (§13.2).

ParamConstraint

Structural constraint on a tool call’s parameters. Pattern/predicate matching stays in the host execution layer — the kernel only enforces shapes it can replay identically.

PolicyAction