@nylorun/runtime 0.15.2-beta → 0.17.0-beta

package/dist/api/ag-ui/routes.d.ts

@@ -2,7 +2,7 @@ import type { ServerResponse } from "node:http";
 import { type Message } from "@ag-ui/core";
 import { type AuthScope, type SessionAccess, type TenantContext } from "../../tenant/context.js";
 /**
- * Who an AG-UI request acts for, once its agent is known: a person (a subject token's subject,
+ * Who an AG-UI request acts for, once its agent is known: a person (an issuer token's subject,
  * or `Nylorun-Subject`), who may use the agent; else 400, or the 404 of a missing agent.
  */
 export declare function agUiCaller(scope: AuthScope, agentId: string): {

package/dist/api/ag-ui/routes.js

@@ -1,6 +1,6 @@
 /**
  * The Runtime's AG-UI endpoint (Host feature `ag-ui-endpoint`): the Tenant's agents served to
- * AG-UI clients, for a person named by a subject token (a browser or app) or by subject headers
+ * AG-UI clients, for a person named by a trusted issuer's token (a browser or app) or by subject headers
  * (an app server's `createAgUiHandler`, which forwards here). One implementation for both, so
  * a thread is the same session whichever way it is reached.
  *
@@ -15,8 +15,8 @@
  * idempotency key, approvals become interrupts resumed through `resume`, and the last AG-UI
  * event made from each Runtime event carries its cursor as the SSE id. A run's session is
  * created on its first run with the options in `forwardedProps.nylorun.session` and never
- * changed afterwards. A stream opened with a subject token ends at the token's expiry or
- * revocation with `CUSTOM nylorun.stream_closed`, and the client reattaches with a new token.
+ * changed afterwards. A stream opened with an issuer token ends at the token's expiry with
+ * `CUSTOM nylorun.stream_closed`, and the client reattaches with a new token.
  */
 import { randomUUID } from "node:crypto";
 import { EventType, } from "@ag-ui/core";
@@ -30,9 +30,10 @@ import { accessOf } from "../../tenant/auth.js";
 import { command } from "../../tenant/commands.js";
 import { loadSession, sessionOf, } from "../../tenant/context.js";
 import { fail, HttpError } from "../../tenant/http.js";
-import { observeSession, readHistory, StreamClosed, } from "../../tenant/session-streams.js";
+import { observeSession, readHistory, StreamClosed, streamHolderOf, } from "../../tenant/session-streams.js";
 import { putSession, sessionView } from "../../tenant/sessions.js";
-import { mayUseAgent } from "../../tenant/tokens.js";
+import { mayUseAgent } from "../../tenant/auth.js";
+import { sandboxGrantsOf } from "../../tenant/sandboxes.js";
 const HEARTBEAT_MS = 15_000;
 const TERMINAL = new Set([
     "turn.completed",
@@ -40,16 +41,14 @@ const TERMINAL = new Set([
     "turn.failed",
     "turn.cancelled",
 ]);
-/** The person a request acts for: a subject token's subject, or `Nylorun-Subject`. */
+/** The person a request acts for: an issuer token's subject, or `Nylorun-Subject`. */
 function personOf(scope) {
     if (scope.kind === "token" || scope.kind === "subject")
         return scope.subject;
-    return fail(400, "AG-UI runs act for a person: send a subject token, or Nylorun-Subject with the application key", { code: "invalid_request" });
+    return fail(400, "AG-UI runs act for a person: send a trusted issuer's token, or Nylorun-Subject with the application key", { code: "invalid_request" });
 }
 function holderOf(scope) {
-    return scope.kind === "token"
-        ? { subject: scope.subject, epoch: scope.epoch, expiresAt: scope.expiresAt }
-        : undefined;
+    return streamHolderOf(scope);
 }
 /** A refusal a client can act on, streamed as `RUN_ERROR` rather than an HTTP error. */
 function runError(error) {
@@ -95,7 +94,7 @@ function sessionOptions(input, scope) {
         });
     // Agent code may trust `info`: only an app server sets it.
     if (scope.kind === "token" && parsed.data.info !== undefined)
-        return fail(403, "A subject token cannot set session info", {
+        return fail(403, "A token caller cannot set session info", {
             code: "scope_required",
         });
     return parsed.data;
@@ -219,7 +218,7 @@ async function historyFrom(ctx, id, cursor) {
     return items;
 }
 /**
- * Who an AG-UI request acts for, once its agent is known: a person (a subject token's subject,
+ * Who an AG-UI request acts for, once its agent is known: a person (an issuer token's subject,
  * or `Nylorun-Subject`), who may use the agent; else 400, or the 404 of a missing agent.
  */
 export function agUiCaller(scope, agentId) {
@@ -244,7 +243,10 @@ export async function startRun(ctx, scope, agentId, caller, body, response) {
         agentId,
         ownerUserId: caller.subject,
         ...sessionOptions(input, scope),
-    }, caller.access, { createOnly: true });
+    }, caller.access, {
+        createOnly: true,
+        ...(sandboxGrantsOf(scope) === undefined ? {} : { sandboxGrants: sandboxGrantsOf(scope) }),
+    });
     const translator = new RunTranslator(input.threadId, input.runId);
     let cursor;
     try {