Expand description
Core agent abstractions for Everruns.
everruns-core is the shared contract crate for the
Everruns ecosystem. It defines the runtime-facing
types used by embedded hosts, workers, provider drivers, integrations, and
the control plane.
The crate is deliberately storage-agnostic. Agent execution is expressed in
terms of focused contracts such as MessageRetriever, ToolExecutor,
EventEmitter, and ProviderStore, while host crates decide whether
those traits are backed by memory, PostgreSQL, gRPC, or another system.
Per-turn contracts are grouped by concern in modules such as
tool_context, execution_loading, provider_resolution,
session_files, durability, and event_emitter; there is no
catch-all service-traits module.
§Main Surfaces
- Agent, harness, session, message, and event models
- Capability and tool traits for composing agent behavior
- Provider-neutral execution inputs and effect contracts
- Context assembly for the shared
input -> reason -> actexecution flow - Neutral storage, event, capability, and host-service contracts
Concrete Input/Reason/Act algorithms and their phase I/O values live in
everruns-engine. Core owns only concern-specific contracts such as
ExecutionContext and tool_hooks; it exposes no generic atom
extension trait or executor compatibility module.
Environment-backed implementations are intentionally separate: filesystem,
Bashkit, web fetch, and Lua live in everruns-integrations-*; MCP adaptation
lives in everruns-mcp; and concrete runtime HTTP transport lives in
everruns-host. Hosts select those edges explicitly instead of inheriting
them from this contract crate.
Hosted product capabilities — including Knowledge Bases and Indexes,
Memories, delegation, schedules/tasks, user hooks, and platform management
— live in everruns-platform. Backend-neutral first-party implementations
live in everruns-builtins. Core exposes only neutral collection hooks,
registry algorithms, and type-keyed extension seams.
Deterministic simulation lives in everruns-llmsim; the in-memory agentic
loop, writable test doubles, and demo fixture capabilities live in
everruns-test-support. Core carries neither implementation.
Composition is not core’s job either. The execution surface an embedder
assembles — capability registry, provider registry, egress, utility LLM and
the session filesystem factory — is everruns_host::HostComposition
(EVE-887); core owns the execution contracts, not the bundle that selects a
deployment’s shape. Provider identity, driver registration, typed IDs, and
LLM wire abstractions live in everruns-provider and are imported from
that crate directly.
§Example
use everruns_core::CapabilityRegistry;
use everruns_provider::DriverRegistry;
let capabilities = CapabilityRegistry::new();
assert!(capabilities.is_empty());
let drivers = DriverRegistry::new();
assert!(drivers.registered_providers().is_empty());Re-exports§
pub use command_host::CommandHost;pub use command_host::CommandTurnContext;pub use command_host::DisabledCommandHost;pub use command_host::SessionCompletion;pub use command_host::SessionCompletionError;pub use command_host::SessionCompletionRequest;pub use command_host::SessionCompletionStream;pub use config_layer::AgentConfigOverlay;pub use config_layer::merge_capabilities;pub use config_layer::merge_initial_files;pub use config_layer::normalize_initial_file_path;pub use connection_services::UserConnectionResolver;pub use delegation_services::SpawnClaimResult;pub use delegation_services::SubagentNestingPolicy;pub use delegation_services::SubagentSpawnStore;pub use durability::DurableToolResultStore;pub use durability::PartialStreamState;pub use durability::PartialStreamStore;pub use durability::StreamHeartbeater;pub use durability::StreamProgress;pub use durability::ToolCallClaimResult;pub use event_emitter::EventEmitter;pub use execution_loading::HarnessStore;pub use execution_loading::SessionStore;pub use execution_snapshot::ResolvedExecutionSnapshot;pub use execution_snapshot::SnapshotMcpServer;pub use image_services::ImageResolver;pub use image_services::ResolvedImage;pub use llm_error_hook::LlmErrorContext;pub use llm_error_hook::LlmErrorHook;pub use llm_error_hook::LlmErrorHookOutcome;pub use llm_error_hook::LlmErrorHookServices;pub use message::AnnotationSource;pub use message::ContentPart;pub use message::ContentType;pub use message::Controls;pub use message::ExternalActor;pub use message::ImageContentPart;pub use message::ImageFileContentPart;pub use message::InputContentPart;pub use message::Message;pub use message::MessageRole;pub use message::ReasoningConfig;pub use message::TextAnnotation;pub use message::TextContentPart;pub use message::ToolCallContentPart;pub use message::ToolResultContentPart;pub use message::VerificationStatus;pub use message::VerificationVerdict;pub use message_filter::ExcludedNoticeTransform;pub use message_filter::FilterContext;pub use message_filter::InjectedMessage;pub use message_filter::InjectionPosition;pub use message_filter::MessageFilter;pub use message_filter::MessageFilterProvider;pub use message_filter::MessageQuery;pub use message_filter::PrependTransform;pub use message_retriever::InputMessage;pub use message_retriever::MessageHistory;pub use message_retriever::MessageRetriever;pub use mount_fs::DisplayPolicy;pub use mount_fs::MountFs;pub use mount_fs::WORKSPACE_MOUNT;pub use mount_fs::scoped_prompt_file_store;pub use provider_resolution::ProviderStore;pub use runtime_agent::RuntimeAgent;pub use runtime_agent::RuntimeAgentBuilder;pub use runtime_context::AssembledTurnContext;pub use runtime_context::ResolvedModelExecution;pub use runtime_context::ResolvedRuntimeCapabilities;pub use runtime_context::ResolvedTurnContextInput;pub use runtime_context::TurnContextRequest;pub use runtime_context::TurnContextResolver;pub use runtime_context::assemble_resolved_turn_context;pub use runtime_context::resolve_runtime_capabilities;pub use runtime_context::resolve_snapshot_capabilities;pub use session_files::SessionFileSystem;pub use session_files::WorkspaceScopedFileSystem;pub use session_services::KeyInfo;pub use session_services::LeasedResourceStore;pub use session_services::SecretInfo;pub use session_services::SessionResourceRegistry;pub use session_services::SessionStorageStore;pub use tool_context::ReasoningEffortHandle;pub use tool_context::ToolContext;pub use tool_execution::OutboundToolRateLimiter;pub use tool_execution::ToolExecutor;pub use workspace_policy::WorkspacePolicy;pub use workspace_policy::WorkspacePolicyBuilder;pub use workspace_policy::WorkspacePolicyError;pub use workspace_roots::ADDITIONAL_ROOTS_MOUNT;pub use workspace_roots::PRIMARY_WORKSPACE_ROOT_NAME;pub use workspace_roots::RelPath;pub use workspace_roots::ResolvedPath;pub use workspace_roots::WorkspaceRoot;pub use workspace_roots::WorkspaceRootSet;pub use channel::ChannelDeliveryAdapter;pub use channel::ChannelReplyMode;pub use channel::DeliveryContext as ChannelDeliveryContext;pub use channel::DeliveryResult as ChannelDeliveryResult;pub use channel::InboundAttachment;pub use channel::InboundChannelEvent;pub use channel::OutboundChannelMessage;pub use channel::Participant;pub use channel::SessionRoutingStrategy;pub use channel::ThreadContext;pub use resource_ownership::LEASED_RESOURCE_EXTERNAL_ID_KEY;pub use resource_ownership::LEASED_RESOURCE_ID_KEY;pub use resource_ownership::LEASED_RESOURCE_PROVIDER_KEY;pub use resource_ownership::LEASED_RESOURCE_TYPE_KEY;pub use resource_ownership::list_owned_external_resource_ids;pub use resource_ownership::require_owned_external_resource;pub use resource_ownership::resource_not_owned_error;pub use resource_ownership::verify_owned_external_resource_if_available;pub use subagent_delegation::PlatformCreateSessionRequest;pub use subagent_delegation::PlatformMessage;pub use subagent_delegation::SubagentSessionDelegate;pub use background::BackgroundEventSink;pub use background::BackgroundExecutableTool;pub use background::BackgroundOutcome;pub use background::BackgroundProgress;pub use event_listeners::EventListener;pub use event_listeners::NoopEventListener;pub use error_reporter::ErrorReport;pub use error_reporter::ErrorReporter;pub use error_reporter::ErrorScope;pub use error_reporter::ErrorSeverity;pub use error_reporter::NoopErrorReporter;pub use egress::DisabledEgressService;pub use egress::EgressByteStream;pub use egress::EgressError;pub use egress::EgressRequest;pub use egress::EgressRequestKind;pub use egress::EgressResponse;pub use egress::EgressResult;pub use egress::EgressService;pub use egress::EgressSigning;pub use egress::EgressStreamResponse;pub use system_allowlist::AllowGroup;pub use system_allowlist::SYSTEM_ALLOWLIST_ENABLED_ENV;pub use system_allowlist::SystemAllowlist;pub use utility_llm::DisabledUtilityLlmService;pub use utility_llm::UTILITY_LLM_MODEL;pub use utility_llm::UtilityLlmReasoningEffort;pub use utility_llm::UtilityLlmRequest;pub use utility_llm::UtilityLlmService;pub use tools::Tool;pub use tools::ToolExecutionResult;pub use tools::ToolInternalError;pub use tools::ToolRegistry;pub use tools::ToolRegistryBuilder;pub use capabilities::SystemPromptContext;pub use capabilities::AgentBlueprint;pub use capabilities::AppliedCapabilities;pub use capabilities::BlueprintModel;pub use capabilities::Capability;pub use capabilities::CapabilityRegistry;pub use capabilities::CapabilityRegistryBuilder;pub use capabilities::CapabilityStatus;pub use capabilities::CollectedCapabilities;pub use capabilities::DECLARATIVE_CAPABILITY_PREFIX;pub use capabilities::DependencyError;pub use capabilities::IntegrationPlugin;pub use capabilities::MAX_RESOLVED_CAPABILITIES;pub use capabilities::MountAccess;pub use capabilities::MountDirectoryBuilder;pub use capabilities::MountEntry;pub use capabilities::MountPoint;pub use capabilities::MountSource;pub use capabilities::ResolvedCapabilities;pub use capabilities::RiskLevel;pub use capabilities::ToolCallHook;pub use capabilities::ToolDefinitionHook;pub use capabilities::apply_capabilities;pub use capabilities::collect_capabilities;pub use capabilities::collect_capabilities_with_configs;pub use capabilities::compute_features;pub use capabilities::declarative_capability_id;pub use capabilities::declarative_capability_info;pub use capabilities::get_dependencies;pub use capabilities::hydrate_declarative_capability_config;pub use capabilities::hydrate_plugin_capability_config;pub use capabilities::is_declarative_capability;pub use capabilities::parse_declarative_capability_id;pub use capabilities::plugin_capability_info;pub use capabilities::resolve_dependencies;pub use capabilities::validate_declarative_capability_definition;pub use capabilities::DeclarativeCapabilityDefinition;pub use capabilities::DeclarativeCapabilityFile;pub use capabilities::DeclarativeCapabilitySkill;pub use capabilities::SKILL_CAPABILITY_PREFIX;pub use capabilities::SKILLS_DISCOVERY_PATH;pub use capabilities::SkillCapabilityIdExt;pub use capabilities::SkillContribution;pub use capabilities::SkillInstructions;pub use capabilities::SkillMeta;pub use capabilities::SkillSource;pub use capabilities::discover_skills_from_entries;pub use capabilities::is_skill_capability;pub use capabilities::parse_skill_capability_id;pub use capabilities::reconstruct_skill_md;pub use capabilities::skill_capability_id;pub use compaction_checkpoint::COMPACTION_CHECKPOINT_FORMAT_VERSION;pub use compaction_checkpoint::CompactionCheckpoint;pub use compaction_checkpoint::CompactionCheckpointPayload;pub use compaction_checkpoint::CompactionCheckpointStore;pub use compaction_checkpoint::ProactiveCompactionAttempt;pub use compaction_checkpoint::ProactiveCompactionAttemptTracker;pub use execution_context::ExecutionContext;pub use agent_definition::AgentDefinition;pub use agent_identity::AgentIdentity;pub use agent_identity::AgentIdentityStatus;pub use ard_attachment::ARD_ATTACHMENT_KV_PREFIX;pub use ard_attachment::ARD_ATTACHMENT_RESOURCE_KIND;pub use ard_attachment::ARD_DISCOVERY_KV_PREFIX;pub use ard_attachment::ArdAttachment;pub use ard_attachment::ArdAttachmentTarget;pub use ard_attachment::apply_session_attachments;pub use ard_attachment::attachment_kv_key;pub use ard_attachment::load_session_attachments;pub use ard_attachment::merge_attachment_into_session;pub use ard_attachment::urn_slug;pub use capability_dto::AgentCapability;pub use capability_dto::CapabilityInfo;pub use compaction_policy::CompactionPolicy;pub use compaction_policy::CompactionSettings;pub use compaction_policy::CompactionStrategy as PolicyCompactionStrategy;pub use compaction_policy::ObservationMaskingResult as PolicyObservationMaskingResult;pub use context_report::ContextReportContribution;pub use context_report::ContextReportSection;pub use context_report::SessionContextReport;pub use context_report::build_session_context_report;pub use context_report::build_session_context_report_from_generation;pub use events::ACT_COMPLETED;pub use events::ACT_STARTED;pub use events::ActCompletedData;pub use events::ActStartedData;pub use events::CONTEXT_COMPACTED;pub use events::CONTEXT_COMPACTING;pub use events::CONTEXT_COMPACTION_FAILED;pub use events::CONTEXT_COMPACTION_SKIPPED;pub use events::CompactionFailStage;pub use events::CompactionReason;pub use events::CompactionSkipReason;pub use events::CompactionStepData;pub use events::CompactionTrigger;pub use events::ContextCompactedData;pub use events::ContextCompactingData;pub use events::ContextCompactionFailedData;pub use events::ContextCompactionSkippedData;pub use events::Event;pub use events::EventBuilder;pub use events::EventContext;pub use events::EventData;pub use events::EventRequest;pub use events::FILE_WRITTEN;pub use events::FileWrittenData;pub use events::INPUT_MESSAGE;pub use events::InputMessageData;pub use events::LLM_GENERATION;pub use events::LlmCompactionInfo;pub use events::LlmGenerationData;pub use events::LlmGenerationMetadata;pub use events::LlmGenerationOutput;pub use events::LlmRetryInfo;pub use events::ModelMetadata;pub use events::OUTPUT_MESSAGE_COMPLETED;pub use events::OUTPUT_MESSAGE_DELTA;pub use events::OUTPUT_MESSAGE_REPLACED;pub use events::OUTPUT_MESSAGE_STARTED;pub use events::OutputMessageCompletedData;pub use events::OutputMessageDeltaData;pub use events::OutputMessageReplacedData;pub use events::OutputMessageStartedData;pub use events::REASON_COMPLETED;pub use events::REASON_ITEM;pub use events::REASON_RECOVERED;pub use events::REASON_STARTED;pub use events::REASON_THINKING_COMPLETED;pub use events::REASON_THINKING_DELTA;pub use events::REASON_THINKING_STARTED;pub use events::ReasonCompletedData;pub use events::ReasonItemData;pub use events::ReasonRecoveredData;pub use events::ReasonStartedData;pub use events::ReasonThinkingCompletedData;pub use events::ReasonThinkingDeltaData;pub use events::ReasonThinkingStartedData;pub use events::RecoveryMode;pub use events::SESSION_ACTIVATED;pub use events::SESSION_IDLED;pub use events::SESSION_MODEL_CHANGED;pub use events::SESSION_STARTED;pub use events::SESSION_TITLE_UPDATED;pub use events::SessionActivatedData;pub use events::SessionIdledData;pub use events::SessionModelChangedData;pub use events::SessionStartedData;pub use events::SessionTitleUpdatedData;pub use events::TOOL_CALL_REQUESTED;pub use events::TOOL_COMPLETED;pub use events::TOOL_OUTPUT_DELTA;pub use events::TOOL_PROGRESS;pub use events::TOOL_STARTED;pub use events::TURN_CANCELLED;pub use events::TURN_COMPLETED;pub use events::TURN_FAILED;pub use events::TURN_SEALED;pub use events::TURN_STARTED;pub use events::TokenUsage;pub use events::ToolCallRequestedData;pub use events::ToolCallSummary;pub use events::ToolCompletedData;pub use events::ToolOutputDeltaData;pub use events::ToolProgressData;pub use events::ToolStartedData;pub use events::TurnCancelledData;pub use events::TurnCompletedData;pub use events::TurnFailedData;pub use events::TurnSealedData;pub use events::TurnStartedData;pub use events::VALID_EVENT_TYPES;pub use finalized_tool_calls::FinalizedToolCallsContext;pub use finalized_tool_calls::FinalizedToolCallsHook;pub use guardrail_checks::CompiledJudgeCheck;pub use guardrail_checks::GuardrailAction;pub use guardrail_checks::GuardrailHit;pub use guardrail_checks::GuardrailMode;pub use guardrail_checks::GuardrailOnFail;pub use guardrail_checks::GuardrailRule;pub use guardrail_checks::GuardrailStage;pub use guardrail_checks::GuardrailsConfig;pub use guardrail_checks::MAX_JUDGE_PROMPT_LEN;pub use guardrail_gallery::DataEgress;pub use guardrail_gallery::GuardrailGalleryItem;pub use guardrail_gallery::find_guardrail_gallery_item;pub use guardrail_gallery::guardrail_gallery;pub use harness_definition::HarnessDefinition;pub use leased_resource::LEASED_RESOURCES_FEATURE;pub use leased_resource::LeasedResource;pub use leased_resource::LeasedResourceStatus;pub use leased_resource::UpsertLeasedResource;pub use mcp_proxy::McpProxyTool;pub use mcp_proxy::McpToolInvoker;pub use mcp_proxy::ScopedMcpToolInvoker;pub use mcp_proxy::build_mcp_proxy_tools;pub use mcp_server::MCP_PROTOCOL_VERSION_2025_03;pub use mcp_server::MCP_PROTOCOL_VERSION_2025_06;pub use mcp_server::MCP_PROTOCOL_VERSION_2026_07;pub use mcp_server::McpContent;pub use mcp_server::McpError;pub use mcp_server::McpProtocolMode;pub use mcp_server::McpSecretBindingMetadata;pub use mcp_server::McpServer;pub use mcp_server::McpServerAuthMode;pub use mcp_server::McpServerStatus;pub use mcp_server::McpServerTransportType;pub use mcp_server::McpToolAnnotations;pub use mcp_server::McpToolCallParams;pub use mcp_server::McpToolCallRequest;pub use mcp_server::McpToolCallResponse;pub use mcp_server::McpToolCallResult;pub use mcp_server::McpToolDefinition;pub use mcp_server::McpToolsListRequest;pub use mcp_server::McpToolsListResponse;pub use mcp_server::McpToolsListResult;pub use mcp_server::ScopedMcpServer;pub use mcp_server::ScopedMcpServers;pub use mcp_server::apply_mcp_secret_binding_schemas;pub use mcp_server::is_mcp_tool;pub use mcp_server::mcp_oauth_provider_id_for_uuid;pub use mcp_server::mcp_oauth_session_secret_name;pub use mcp_server::mcp_tool_name;pub use mcp_server::merge_scoped_mcp_servers;pub use mcp_server::normalize_mcp_error_code;pub use mcp_server::parse_mcp_tool_name;pub use mcp_server::sanitize_mcp_server_name;pub use mcp_server::scoped_mcp_servers_is_empty;pub use organization::DEFAULT_ORG_ID;pub use organization::DEFAULT_ORG_PUBLIC_ID;pub use organization::OrgRole;pub use organization::org_public_id_from_internal;pub use payment::MachinePaymentRequest;pub use payment::MachinePaymentResponse;pub use payment::PaymentMethod;pub use payment::PaymentRail;pub use principal::PrincipalKind;pub use principal::PrincipalSummary;pub use session::ExecutionSession;pub use session::SessionExecutionState;pub use session::SessionSeedMode;pub use session::SubagentStatus;pub use session_file::FileInfo;pub use session_file::FileStat;pub use session_file::GREP_MAX_CONTEXT_LINES;pub use session_file::GREP_MAX_RETURN_BYTES;pub use session_file::GrepContextBlock;pub use session_file::GrepContextLine;pub use session_file::GrepMatch;pub use session_file::GrepOptions;pub use session_file::GrepResult;pub use session_file::GrepSearchResult;pub use session_file::InitialFile;pub use session_file::SessionFile;pub use session_resource::RegisterSessionResource;pub use session_resource::SessionResourceEntry;pub use session_resource::SessionResourceFilter;pub use session_resource::SessionResourceStatus;pub use session_task::CreateSessionTask;pub use session_task::NewTaskMessage;pub use session_task::SessionTask;pub use session_task::SessionTaskFilter;pub use session_task::SessionTaskRegistry;pub use session_task::SessionTaskState;pub use session_task::SessionTaskUpdate;pub use session_task::TASK_KIND_AGENT_HANDOFF;pub use session_task::TASK_KIND_BACKGROUND_TOOL;pub use session_task::TASK_KIND_EXTERNAL_AGENT;pub use session_task::TASK_KIND_MONITOR;pub use session_task::TASK_KIND_SESSION;pub use session_task::TASK_KIND_SUBAGENT;pub use session_task::TaskArtifact;pub use session_task::TaskError;pub use session_task::TaskExecutor;pub use session_task::TaskExecutorPlugin;pub use session_task::TaskInputRequest;pub use session_task::TaskLinks;pub use session_task::TaskMessage;pub use session_task::TaskMessageDirection;pub use session_task::TaskMessagePart;pub use session_task::TaskProgress;pub use session_task::TaskSink;pub use session_task::TaskWakePolicy;pub use session_task::apply_task_update;pub use session_task::find_task_executor;pub use skill::ParsedSkillMd;pub use skill::Skill;pub use skill::SkillContent;pub use skill::SkillFileEntry;pub use skill::SkillSourceType;pub use skill::SkillStatus;pub use skill::SkillUsage;pub use skill::SkillValidationResult;pub use skill::parse_skill_md;pub use skill::validate_skill_md;pub use skill::validate_skill_name;pub use task_observer::ObservingTaskRegistry;pub use task_observer::TaskTransition;pub use task_observer::TaskTransitionObserver;pub use wake_queue::PendingWake;pub use wake_queue::SessionWakeQueue;pub use wake_queue::wake_text_for;pub use permissions::Caller;pub use permissions::DefaultPermissionResolver;pub use permissions::Permission;pub use permissions::PermissionResolver;pub use permissions::Policy;pub use permissions::PolicyConfigResponse;pub use permissions::PolicyError;pub use permissions::ResourceConfigResponse;pub use permissions::Rule;pub use permissions::SkillPermissionAction;pub use permissions::SkillPermissionPattern;pub use permissions::SkillPermissionRule;pub use permissions::check_skill_permission;pub use permissions::evaluate_policies;pub use permissions::evaluate_policies_with;pub use permissions::parse_skill_permission_rule;pub use permissions::role_has_permission;pub use permissions::role_permissions;pub use dependency_blocker::DependencyBlocker;pub use deployment::DeploymentGrade;pub use execution_features::ExecutionFeatureDecisions;pub use execution_features::InternalFeatureFlags;
Modules§
- agent_
definition - agent_
identity - annotation_
hook - End-of-message citation annotation seam.
- ard_
attachment - Runtime ARD (Agentic Resource Discovery) attachments.
- background
- budget
- capabilities
- Capabilities Module for Agent Loop
- capability_
dto - capability_
types - channel
- command
- command_
host - Neutral command execution contracts.
- compaction_
checkpoint - Durable replacement context for compacted model history.
- compaction_
policy - Neutral execution seam for capability-owned context-compaction policy.
- config
- Shared configuration helpers for Everruns crates.
- config_
layer - connection_
services - Neutral contracts for provider credentials and user connections.
- context_
report - delegation_
services - Neutral delegation governance and durable spawn contracts.
- dependency_
blocker - deployment
- Deployment grade configuration
- durability
- Neutral contracts for durable tool results and stream recovery.
- egress
- Host-owned outbound network boundary.
- error_
reporter - event_
emitter - Neutral event emission contract.
- event_
listeners - events
- exec_
tool_ result - Shared shaping helpers for human-facing exec tool results.
- execution_
context - Transport-neutral context shared by execution phases and emitted events.
- execution_
features - execution_
loading - Neutral contracts for loading turn execution inputs.
- execution_
snapshot - file_
services - File attachment services (PDFs and other model-input files).
- finalized_
tool_ calls - Neutral hook seam for capability-owned transforms after model tool calls have been finalized and before the assistant message is persisted.
- guardrail_
checks - guardrail_
gallery - harness_
definition - hook_
adapter - hook_
executor - image_
services - Neutral contracts for image artifacts and model image resolution.
- leased_
resource - lifecycle_
hooks - llm_
conversions - Conversions between core agent-loop domain types and the provider driver
types in
everruns-provider. - llm_
error_ hook - localization
- Backend localization helpers for deterministic platform-authored strings.
- mcp_
proxy - mcp_
server - message
- message_
filter - Message Filter Abstraction
- message_
retriever - model_
router - mount_
fs - native_
async_ store - Shared lease and persistence contracts for native asynchronous tools. Shared ownership and checkpoint persistence for native tool conversations. The lease token fences every read/write; a worker must renew before expiry.
- network_
access - organization
- outline
- output_
guardrail - path_
identity - payment
- Machine payment execution contract.
- permissions
- plugins
- principal
- progress_
reporting - provider_
resolution - Neutral host effects for resolving model identity and provider configuration.
- resource_
names - Shared helpers for naming external resources created from user-visible titles.
- resource_
ownership - runtime_
agent - runtime_
context - Pure turn-context transformations over host-resolved execution inputs.
- session
- session_
file - session_
files - Neutral session filesystem contract and execution-scoping adapter.
- session_
path - session_
resource - session_
schedule - session_
services - Neutral session-scoped storage, schedule, and resource contracts.
- session_
task - skill
- subagent_
delegation - Narrow child-session delegation contract: core owns the host-neutral interface and a host adapter supplies the implementation. Narrow, host-neutral session-delegation contract.
- system_
allowlist - System-wide outbound allowlist (“green list”).
- task_
observer - telemetry
- tool_
context - Tool context assembly, extension services, and availability validation.
- tool_
execution - Neutral contracts for tool execution and tool-scoped authorities.
- tool_
fingerprint - Stable tool call/result fingerprints for recent-window loop detection.
- tool_
hooks - Neutral contracts for capability-contributed per-tool execution hooks.
- tool_
narration - Tool narration: backend-authored, human-readable lines for tool calls.
- tool_
output_ sanitizer - tools
- truncation_
info - turn
- Provider-neutral turn completion semantics.
- turn_
completion - Did the turn finish the user’s request, or just stop?
- user_
hook_ types - utility_
llm - System utility LLM service.
- wake_
queue - workspace_
policy - Backend-independent policy for session workspace access.
- workspace_
roots
Functions§
- retain_
complete_ llm_ tool_ exchanges - Keep only complete tool-call/result exchanges in a reduced
LlmMessageview. - retain_
complete_ llm_ tool_ exchanges_ for_ request - Enforce tool exchange integrity at the final runtime boundary.
- retain_
complete_ message_ tool_ exchanges - Keep only complete tool-call/result exchanges in a prompt-facing
Messageview.