Crate orchestral_runtime 

Orchestral Runtime

Agent Protocol control plane, Generic Agent, guarded tools, and context.

Re-exports

pub use agent_control::AgentControlError;

pub use agent_control::AgentControlEvent;

pub use agent_control::AgentController;

pub use agent_directory::AgentDirectory;

pub use agent_directory::AgentDirectoryError;

pub use agent_sdk::AgentClient;

pub use agent_sdk::AgentRunHandle;

pub use agent_sdk::AgentSdkError;

pub use agent_sdk::AgentTurn;

pub use approval_bridge::AgentApprovalBridge;

pub use approval_bridge::ApprovalBridgeError;

pub use approval_bridge::InMemoryHostApprovalBroker;

pub use exec_process::ExecPollResult;

pub use exec_process::ExecProcessError;

pub use exec_process::ExecSessionEvent;

pub use exec_process::ExecSessionId;

pub use exec_process::ExecSessionSnapshot;

pub use exec_process::ExecSessionStatus;

pub use exec_process::ExecSpawnSpec;

pub use exec_process::ExecWaitMode;

pub use exec_process::ExecWaitOptions;

pub use exec_process::ProcessSupervisor;

pub use generic_agent::ContinuationPolicy;

pub use generic_agent::GenericAgentConfig;

pub use generic_agent::InternalGenericAgentProvider;

pub use generic_agent::ModelCostPolicy;

pub use generic_agent_checkpoint::replay_generic_agent_checkpoint;

pub use generic_agent_checkpoint::AppendGenericCheckpointOutcome;

pub use generic_agent_checkpoint::CommandCheckpoint;

pub use generic_agent_checkpoint::CreateGenericRunOutcome;

pub use generic_agent_checkpoint::GenericAgentCheckpointProjection;

pub use generic_agent_checkpoint::GenericAgentCheckpointStore;

pub use generic_agent_checkpoint::GenericAgentRunRegistration;

pub use generic_agent_checkpoint::GenericCheckpointDraft;

pub use generic_agent_checkpoint::GenericCheckpointError;

pub use generic_agent_checkpoint::GenericCheckpointEvent;

pub use generic_agent_checkpoint::GenericCheckpointEventId;

pub use generic_agent_checkpoint::GenericCheckpointPhase;

pub use generic_agent_checkpoint::GenericCheckpointRecord;

pub use generic_agent_checkpoint::GenericLoopBoundary;

pub use generic_agent_checkpoint::GenericModelContextTrace;

pub use generic_agent_checkpoint::GenericModelObservation;

pub use generic_agent_checkpoint::GenericObservedToolCall;

pub use generic_agent_checkpoint::InMemoryGenericAgentCheckpointStore;

pub use generic_agent_checkpoint::StoredGenericAgentRun;

pub use pty_process::PtyProcessError;

pub use pty_process::PtyProcessId;

pub use pty_process::PtyProcessManager;

pub use pty_process::PtyReadResult;

pub use pty_process::PtySpawnSpec;

pub use session_context::AgentSessionCompactor;

pub use session_context::AgentSessionContextEngine;

pub use session_context::AgentSessionSummarizer;

pub use session_context::DeterministicExtractiveSessionSummarizer;

pub use session_context::JsonSizeTokenMeter;

pub use session_context::SessionCompactionGroup;

pub use session_context::SessionCompactionInput;

pub use session_context::SessionCompactionPolicy;

pub use session_context::SessionContextError;

pub use session_context::SessionContextProjection;

pub use session_context::SessionContextRequest;

pub use session_context::SessionSummarizerDescriptor;

pub use skill::LoadedSkillSet;

pub use skill::SkillConflict;

pub use skill::SkillLoadOutcome;

pub use skill::SkillRoot;

pub use skill::SkillRuntime;

pub use skill::SkillRuntimeError;

pub use tool_runtime::tool_permission_decision_digest;

pub use tool_runtime::AgentToolRuntime;

pub use tool_runtime::DescriptorPermissionPolicy;

pub use tool_runtime::GuardedToolExecution;

pub use tool_runtime::GuardedToolExecutor;

pub use tool_runtime::GuardedToolResult;

pub use tool_runtime::GuardedToolRuntime;

pub use tool_runtime::ToolArtifactError;

pub use tool_runtime::ToolArtifactStore;

pub use tool_runtime::ToolOutcomeRecoveryError;

pub use tool_runtime::ToolPermissionDecision;

pub use tool_runtime::ToolPermissionPolicy;

pub use tool_runtime::ToolRuntimeError;

pub use tool_runtime::WorkspacePermissionPolicy;

pub use tools::GuardedMcpServerConfig;

pub use tools::McpServerConnectionManager;

pub use tools::McpServerHealth;

pub use tools::McpToolsAdapterError;

pub use tools::McpToolsAdapterRegistry;

pub use tools::StdioMcpSandboxPolicy;

pub use tools::StdioMcpTransportFactory;

pub use tools::MCP_STDIO_SANDBOX_PROFILE;

pub use workflow_strategy::workflow_plan_digest;

pub use workflow_strategy::workflow_step_call_id;

pub use workflow_strategy::RunBoundGuardedToolPort;

pub use workflow_strategy::WorkflowExecutionError;

pub use workflow_strategy::WorkflowExecutionRequest;

pub use workflow_strategy::WorkflowExecutionSnapshot;

pub use workflow_strategy::WorkflowExecutionStrategy;

Modules

agent_control

Host-side control plane for one provider binding.

agent_directory

Runtime registry for provider-neutral Agent session connectors.

agent_sdk

Provider-neutral SDK surface over the Agent Protocol control plane.

api

approval_bridge

Host-owned bridge from Agent approval requests to Tool capabilities.

exec_process

Run-scoped process sessions behind the model-visible unified exec Tools.

generic_agent

Provider-neutral Generic Agent implementation.

generic_agent_checkpoint

Provider-private write-ahead journal for the in-process Generic Agent.

pty_process

Run-scoped PTY process ownership for guarded Agent Tools.

session_context

Replay-derived model context for the Generic Agent.

session_history

Read-only session discovery derived from authoritative journals.

skill

Skill Context Plane for the Generic Agent.

tool_runtime

Guarded, provider-neutral Tool execution boundary.

tools

Host-guarded Tool implementations and MCP-to-Tool adapter.

workflow_strategy

Guarded workflow execution built on the existing Plan/DAG/Executor assets.

Structs

ArtifactPublishRequest

A Host-local file selected by an Agent for publication to remote users. workspace_root is an authorization boundary, not merely a path hint.

BlobHead

Blob metadata fetched from physical backend.

BlobId

Strongly-typed blob id.

BlobMeta

Blob metadata.

BlobRead

Read result.

BlobWriteRequest

Write request.

ComponentRegistry

ContextRecoveryPolicy

Recovery after a definite context-capacity rejection, separate from transport retries. Recovery first reduces output reservation to its floor, then reprojects/compacts whole exchanges under a smaller input ceiling. Zero disables recovery. Rejections consume model steps; successful generation resets this count.

DagNode

A node in the execution DAG

ExecutionDag

Execution DAG - supports dynamic modification

ExecutionProgressEvent

Realtime execution progress event.

Executor

Deterministic DAG scheduler. Side effects remain owned by the injected port.

ExecutorContext

Executor context

HookDispatchError

HookError

HookExecutionPolicy

HookRegistry

InMemoryBlobStore

ModelRetryPolicy

Host-owned retries within one logical model step. A zero retry count disables retries. Once an attempt has produced text, a Tool call, or Finish, it cannot be retried by this policy. Usage-only failures retain their reported usage; strict token or cost ceilings still prohibit retrying incomplete accounting.

ModelTokenMeterDescriptor

Immutable identity of the token accounting strategy used to build model context. The descriptor is bound into the Generic Agent configuration digest so recovery cannot silently select history with a different meter.

NormalizedPlan

Normalized plan ready for execution

Plan

Execution plan - the primary asset of the system

PlanNormalizer

Plan normalizer - the stability core

ResolvedArtifact

Short-lived, provider-consumable access to one immutable Artifact.

RuntimeBuildRequest

RuntimeHookContext

RuntimeHookEventEnvelope

SpiMeta

Step

A single step in the execution plan

StepExecutionRequest

Fully resolved request presented to a run-scoped step execution boundary.

StepId

Strongly-typed Step ID.

StepIoBinding

Data binding from an upstream task key to this step’s input key.

WorkflowId

Identity of one concrete Plan/DAG execution.

WorkingSet

Weakly typed, bounded data plane for DAG step bindings.

Enums

ArtifactPublishError

ArtifactResolveError

BlobIoError

Storage-neutral blob errors.

ExecutionResult

Execution result

FixError

Fix errors

HookDispatchMode

HookFailurePolicy

NodeState

Node state in the execution DAG

NormalizeError

Normalization errors

Scope

Scope of a working-set value.

SpiError

StepKind

Step type - distinguishes control semantics

StepOutcome

Result returned by the mandatory run-scoped StepExecutionPort. Input and approval remain Agent control-plane concerns, not DAG outcomes.

ValidationError

Validation errors

Traits

ArtifactPublisher

Storage-neutral publication capability that Agent adapters can expose through their native tool/function mechanism.

ArtifactResolver

Storage-neutral bridge from durable Artifact identity to temporary Agent access. Concrete R2/S3/filesystem implementations belong in plugins.

BlobStore

Blob store abstraction.

ExecutionProgressReporter

Sink interface for execution progress reporting.

ModelTokenMeter

Model-family token accounting boundary. A production adapter must provide either its exact tokenizer or a documented conservative upper bound over the provider-specific serialized request input.

PlanFixer

Plan fixer trait

PlanValidator

Plan validator trait

RuntimeComponentFactory

RuntimeHook

StepExecutionPort

The mandatory run-scoped execution seam for every executable DAG Step.

Type Aliases

BlobStream

Streaming blob body.