withruntime 0.18.0 → 0.20.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8f56235ff0ded4b64e55e171f42bcb42a245606418bd6b5499bbedf4b59a752d
-  data.tar.gz: b59c1d65b80d61e40def5d3d344bce735c9f5d33c962e15b7ca3f38b098ac6f6
+  metadata.gz: a7812f8e62878add0f508438d590167776350a52b7f9c213e77fee8447afadac
+  data.tar.gz: 84b04befc8a18f0420a1026fed88a7a29d4e10efc01dbad3b3632ea4ea515829
 SHA512:
-  metadata.gz: 522913ebac5b76ee0371ab29a24f6349c637120bb47ea964850f57ea2f97d3bab33fc99d041e7297231ebcf805625bc752435d518c37522e652449fd51d49182
-  data.tar.gz: 76210896a9229013f2a2912502d06befbdbf4e5f2c300433ca39efa8a8671097012facfd770b32717be4adce2cad050021537d015e349d235add5303fa772e0f
+  metadata.gz: ad569904e75cd01d9a9725a85a77cbdb0e5a44fa709e5bec3e6c40919a0db3675b94b2c8ad6fd8b8f99a50e666147667229f26814be9cdf142396ac6eee27db6
+  data.tar.gz: ba71b0cae765bfc87c8645587abd698643e96087452aa8e499630632e955df8f72cd0c961e37b798bd7dfa795827d498d84a1da455d4e742326f2aa5fad76cd8

data/lib/withruntime/agents.rb

@@ -10,13 +10,31 @@ module WithRuntime
   end
 
   # One entry of a session's log: +seq+, +kind+ (input, answer, reply, ask,
-  # status, result, error, note, or child: a child session's end, posted into
-  # its parent's log), +actor+, +body+ and +created_at+. +text+ is its words,
-  # +body.text+.
+  # status, result, error, note, child: a child session's end, posted into
+  # its parent's log, turn: a model turn, or tool: a tool call, the trace's
+  # spans with their fields in +body+), +actor+, +body+ and +created_at+.
+  # +text+ is its words, +body.text+.
   class AgentEvent < Record
     def text = self["body"].is_a?(Hash) ? self["body"]["text"] : nil
   end
 
+  # A session's trace (+AgentSession#trace+): +session_id+; +totals+ (turns,
+  # tool_calls, input_tokens (uncached), output_tokens, cache_read_tokens,
+  # cache_write_tokens, cost_usd at the provider's list price,
+  # unpriced_turns, failed_turns, failed_tool_calls, model_ms, tool_ms);
+  # +models+ and +tools+, the same by model and by tool; and +spans+, each
+  # turn and tool call in order. A turn has its +model+, +started_at+,
+  # +duration_ms+, +first_token_ms+, token counts, +cost_usd+ (nil for an
+  # unpriced model), +stop_reason+, +status+, +error+ and +tool_calls+; a
+  # tool call its +name+, +turn+, +started_at+, +duration_ms+, +input+,
+  # +output+ and +error+.
+  class AgentTrace < Record
+    def totals = Record.new(self["totals"])
+    def models = (self["models"] || []).map { |row| Record.new(row) }
+    def tools = (self["tools"] || []).map { |row| Record.new(row) }
+    def spans = (self["spans"] || []).map { |row| Record.new(row) }
+  end
+
   # A session as the API answers it. Times are ISO 8601 strings.
   #
   # +id+, +agent_id+, +agent_version+, +key+, +trigger+ (api, slack, github,
@@ -69,7 +87,9 @@ module WithRuntime
   # each an egress secret's name: each session takes the one with the most
   # usage left, and the review template moves to the next when one is out
   # of usage), +mcp+ ([{ name:, url: }]), +volumes+
-  # ([{ volume:, path: }]), +idle_pause_seconds+, +max_session_seconds+,
+  # ([{ volume:, path: }]), +network+ ({ internet:, allow: }: with allow,
+  # each session's sandbox reaches only those hosts), +idle_pause_seconds+,
+  # +max_session_seconds+,
   # +max_concurrent+, +max_session_dollars+ (more than 0, at most 10000, 5
   # unless set: the session and every session under it, the root's covering
   # its tree; a tree at it stops, reason "budget"), +max_day_dollars+ (more
@@ -89,6 +109,16 @@ module WithRuntime
       @asks = AgentAsks.new(transport)
     end
 
+    # Claude Managed Agents' API on Runtime: the options Anthropic's Ruby SDK
+    # takes, so code written for it runs here unchanged:
+    #
+    #   client = Anthropic::Client.new(**runtime.agents.anthropic)
+    #
+    # Sessions call the model with the account's own Anthropic key, the egress
+    # secret ANTHROPIC_API_KEY (runtime secrets set ANTHROPIC_API_KEY --host
+    # api.anthropic.com).
+    def anthropic = { base_url: "#{@t.base_url}/anthropic", api_key: @t.api_key }
+
     # Makes an agent at version 1. A name already used is a ConflictError
     # (name_taken); the names sessions, triggers, templates and approvals are
     # refused, since they are paths beside the agents.
@@ -241,6 +271,22 @@ module WithRuntime
       end
     end
 
+    # A page of its trace, an AgentTrace: every model turn and tool call its
+    # harness made, with timing, tokens and cost. Its totals cover the whole
+    # session; its spans are up to +limit+ (200 by default, 500 at most)
+    # after +after+: call again with +after: page.next_after+ until it is nil.
+    # +format: "otlp"+ returns the same page as OpenTelemetry traces instead,
+    # OTLP/JSON (GenAI semantic conventions) as a Hash with "nextAfter", to
+    # POST without it to any collector's /v1/traces.
+    def trace(format: "json", after: 0, limit: nil)
+      raise ArgumentError, "format is json or otlp" unless %w[json otlp].include?(format.to_s)
+
+      query = { "format" => format.to_s, "after" => after }
+      query["limit"] = limit if limit
+      body = @t.json("GET", path("/trace"), query: query)
+      format.to_s == "otlp" ? body : AgentTrace.new(body)
+    end
+
     # Asks the session to stop and keeps the answer. A running session ends
     # once its sandbox is deleted; this does not wait for that (+wait+ does).
     def stop
@@ -371,6 +417,11 @@ module WithRuntime
   # one agent's sessions sharing a memory, with the same +step+, are one
   # row while it is open, and one answer reaches every session asking. +state+: open, answered,
   # withdrawn, expired (no pick) or closed (every asking session ended).
+  #
+  # A tool call the agent's +permissions+ hold is an ask too, with the
+  # options Allow and Deny and the call in +toolCall+ ({tool, input,
+  # toolUseId, seq, policy, reasonCode}): +approve+ lets it run, +deny+ keeps
+  # it from running.
   class AgentAsks < Product
     # The first page, newest first: open asks unless +state+ (one or a list)
     # says otherwise; of one +agent+; carrying every one of +labels+ (who sees
@@ -393,6 +444,13 @@ module WithRuntime
       Record.new(@t.json("POST", "/v1/agents/asks/#{seg(id)}/answer", body: body, key: idempotency_key))
     end
 
+    # Lets a tool call the agent's permissions held run (its ask's Allow).
+    def approve(id, idempotency_key: nil) = answer(id, "Allow", idempotency_key: idempotency_key)
+
+    # Keeps a held tool call from running (its ask's Deny); +message+ is told
+    # to the agent as the reason.
+    def deny(id, message = nil, idempotency_key: nil) = answer(id, "Deny", text: message, idempotency_key: idempotency_key)
+
     private
 
     def asks_page(query, cursor)

data/lib/withruntime/ci.rb

@@ -32,7 +32,8 @@ module WithRuntime
   class CIRepositories < Product
     # Connects +repository+ ("owner/name"), read through Runtime's GitHub App.
     # Pushes and pull requests then run the checks written in +config_path:+
-    # (runtime.yml). Optional: production_branch (main), config_path,
+    # (runtime.yml; a cloudbuild.yaml or buildspec.yml runs as Cloud Build or
+    # CodeBuild runs it). Optional: production_branch (main), config_path,
     # installation (the GitHub App installation to read it through; the newest
     # when left out), name and labels.
     def connect(repository, production_branch: nil, config_path: nil, installation: nil, name: nil, labels: nil,
@@ -97,6 +98,10 @@ module WithRuntime
     # has its +review+: the verdict (pass or block), summary, findings (kind,
     # file, line, what, fix), notes, and the agent, the model the step asked
     # for (nil when none) and the session that gave it; nil otherwise.
+    # +annotations+ are the lines of the repository's files its log reports
+    # (path, start_line, end_line, start_column, level: notice, warning or
+    # failure, message, title), at most 50, failures first, as its own GitHub
+    # check run (+github_check_run+, "runtime / <name>") shows them.
     def get(id) = Record.new(@t.json("GET", "/v1/ci/jobs/#{seg(id)}"))
   end
 

data/lib/withruntime/client.rb

@@ -23,7 +23,7 @@ module WithRuntime
   RENAME_RETIRES = nil
 
   class Client
-    attr_reader :transport, :sandboxes, :snapshots, :images, :volumes, :secrets, :reservations, :limits, :emails, :referrals, :plans,
+    attr_reader :transport, :sandboxes, :snapshots, :images, :volumes, :secrets, :reservations, :limits, :jobs, :emails, :referrals, :plans,
                 :switching, :events, :webhooks, :otel, :audit, :feedback, :support, :domains, :ports, :ips, :networks, :sso, :mcp, :agents,
                 :apps, :functions, :builds, :ci, :containers
 
@@ -58,6 +58,7 @@ module WithRuntime
       @secrets = Secrets.new(@transport)
       @reservations = Reservations.new(@transport)
       @limits = Limits.new(@transport)
+      @jobs = Jobs.new(@transport)
       @emails = Emails.new(@transport)
       @referrals = Referrals.new(@transport)
       @plans = Plans.new(@transport)

data/lib/withruntime/errors.rb

@@ -19,7 +19,7 @@ module WithRuntime
     # account without credit stops.
     PASSING = %w[no_capacity no_credit_running_limit no_credit_total_limit].freeze
     # Refusals of a create that clear when a sandbox stops or a host frees room.
-    WAITS_FOR_ROOM = %w[no_credit_running_limit no_credit_total_limit no_credit_domain_limit no_credit_capacity_full quota_exceeded no_capacity volume_releasing].freeze
+    WAITS_FOR_ROOM = %w[no_credit_running_limit no_credit_total_limit no_credit_domain_limit no_credit_capacity_full quota_exceeded account_share_full no_capacity volume_releasing].freeze
     # Refusals that say nothing ran (a guest still busy, the API briefly
     # busy, the caller's rate): sent again past max_retries, with growing
     # waits, until the call's deadline.

data/lib/withruntime/products.rb

@@ -186,6 +186,24 @@ module WithRuntime
     def get = Record.new(@t.json("GET", "/v1/limits"))
   end
 
+  # +runtime.jobs+: other platforms' jobs read into Runtime jobs. Create and manage
+  # jobs with the CLI (+runtime jobs+), the TypeScript or Python SDK, or the HTTP API.
+  class Jobs < Product
+    # Reads a Google Cloud Run job's YAML (with the Cloud Scheduler job that runs it)
+    # or an AWS Batch job definition (API JSON, describe-job-definitions output or a
+    # CloudFormation template, with the EventBridge schedule or rule that submits it)
+    # into the Runtime jobs that run the same container. +files+ is
+    # <tt>[{ "path" => "job.yaml", "text" => ... }]</tt>; +from+ is "cloud-run" or
+    # "aws-batch" (found from the files when nil); +parameters+ are a CloudFormation
+    # template's values. Changes nothing: +runtime jobs import+ builds and creates it.
+    def import_plan(files, from: nil, parameters: nil)
+      body = { "files" => files }
+      body["from"] = from if from
+      body["parameters"] = parameters if parameters && !parameters.empty?
+      Record.new(@t.json("POST", "/v1/job-imports", body: body))
+    end
+  end
+
   # +runtime.referrals+: the account's referral link and what it earned. Money is
   # integer microdollars in strings.
   class Referrals < Product

data/lib/withruntime/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module WithRuntime
-  VERSION = "0.18.0"
+  VERSION = "0.20.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: withruntime
 version: !ruby/object:Gem::Version
-  version: 0.18.0
+  version: 0.20.0
 platform: ruby
 authors:
 - Runtime
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-10-25 00:00:00.000000000 Z
+date: 2026-10-26 00:00:00.000000000 Z
 dependencies: []
 description: 'Linux sandboxes for agents, and every other Runtime Cloud product: streaming
   commands and terminals, files and watches, images, durable volumes and backups,