Summary

• Move session restore/load request, timing, and storage-path facts into runtime ports/services while keeping the core session-store adapter as the concrete bridge.
• Move local Write/Edit/Delete/Glob filesystem and search execution primitives into tool-runtime; core keeps the agent-facing Tool adapters, freshness checks, permission admission, checkpoint hooks, and product assembly boundaries.
• Keep the runtime-ports API minimal by avoiding delivery-shape policy helpers in the shared contracts; desktop keeps its own 16-turn restore-view clamp.
• Update the core decomposition plan/completed docs to mark PR-2 as complete without changing the target architecture design.

Behavior / Risk

• Preserves desktop restore response shape, session-view tail clamp behavior, tool-result preview compacting, and startup timing recording.
• Preserves tool names, schemas, prompt-visible exposure, file-read freshness, workspace-search preference, remote shell fallback, and MCP/ACP catalog behavior.
• Local blocking filesystem/search primitives run behind blocking tasks when entered from async tool paths.
• Glob local fallback now matches rg --files --glob files-only behavior for wildcard basename patterns, covering CI environments that take the fallback path.
• Does not move Bash/terminal lifecycle, indexed workspace search service, remote shell execution, permission Tool handler, checkpoint orchestration, session manager lifecycle, or persistence file IO.

Verification

• cargo test -p tool-runtime
• cargo test -p bitfun-runtime-ports
• cargo test -p bitfun-runtime-services
• cargo test -p bitfun-agent-tools
• cargo test --locked -p bitfun-core
• node scripts/check-core-boundaries.mjs
• cargo check -p bitfun-core --no-default-features
• cargo check -p bitfun-core --features product-full
• cargo check -p bitfun-desktop
• git diff --check