@nylorun/runtime 0.16.0-beta → 0.17.0-beta

package/dist/api/ag-ui/routes.js

@@ -1,6 +1,6 @@
 /**
  * The Runtime's AG-UI endpoint (Host feature `ag-ui-endpoint`): the Tenant's agents served to
- * AG-UI clients, for a person named by a subject token (a browser or app) or by subject headers
+ * AG-UI clients, for a person named by a trusted issuer's token (a browser or app) or by subject headers
  * (an app server's `createAgUiHandler`, which forwards here). One implementation for both, so
  * a thread is the same session whichever way it is reached.
  *
@@ -15,8 +15,8 @@
  * idempotency key, approvals become interrupts resumed through `resume`, and the last AG-UI
  * event made from each Runtime event carries its cursor as the SSE id. A run's session is
  * created on its first run with the options in `forwardedProps.nylorun.session` and never
- * changed afterwards. A stream opened with a subject token ends at the token's expiry or
- * revocation with `CUSTOM nylorun.stream_closed`, and the client reattaches with a new token.
+ * changed afterwards. A stream opened with an issuer token ends at the token's expiry with
+ * `CUSTOM nylorun.stream_closed`, and the client reattaches with a new token.
  */
 import { randomUUID } from "node:crypto";
 import { EventType, } from "@ag-ui/core";
@@ -30,9 +30,9 @@ import { accessOf } from "../../tenant/auth.js";
 import { command } from "../../tenant/commands.js";
 import { loadSession, sessionOf, } from "../../tenant/context.js";
 import { fail, HttpError } from "../../tenant/http.js";
-import { observeSession, readHistory, StreamClosed, } from "../../tenant/session-streams.js";
+import { observeSession, readHistory, StreamClosed, streamHolderOf, } from "../../tenant/session-streams.js";
 import { putSession, sessionView } from "../../tenant/sessions.js";
-import { mayUseAgent } from "../../tenant/tokens.js";
+import { mayUseAgent } from "../../tenant/auth.js";
 import { sandboxGrantsOf } from "../../tenant/sandboxes.js";
 const HEARTBEAT_MS = 15_000;
 const TERMINAL = new Set([
@@ -41,16 +41,14 @@ const TERMINAL = new Set([
     "turn.failed",
     "turn.cancelled",
 ]);
-/** The person a request acts for: a subject token's subject, or `Nylorun-Subject`. */
+/** The person a request acts for: an issuer token's subject, or `Nylorun-Subject`. */
 function personOf(scope) {
     if (scope.kind === "token" || scope.kind === "subject")
         return scope.subject;
-    return fail(400, "AG-UI runs act for a person: send a subject token, or Nylorun-Subject with the application key", { code: "invalid_request" });
+    return fail(400, "AG-UI runs act for a person: send a trusted issuer's token, or Nylorun-Subject with the application key", { code: "invalid_request" });
 }
 function holderOf(scope) {
-    return scope.kind === "token"
-        ? { subject: scope.subject, epoch: scope.epoch, expiresAt: scope.expiresAt }
-        : undefined;
+    return streamHolderOf(scope);
 }
 /** A refusal a client can act on, streamed as `RUN_ERROR` rather than an HTTP error. */
 function runError(error) {
@@ -96,7 +94,7 @@ function sessionOptions(input, scope) {
         });
     // Agent code may trust `info`: only an app server sets it.
     if (scope.kind === "token" && parsed.data.info !== undefined)
-        return fail(403, "A subject token cannot set session info", {
+        return fail(403, "A token caller cannot set session info", {
             code: "scope_required",
         });
     return parsed.data;
@@ -220,7 +218,7 @@ async function historyFrom(ctx, id, cursor) {
     return items;
 }
 /**
- * Who an AG-UI request acts for, once its agent is known: a person (a subject token's subject,
+ * Who an AG-UI request acts for, once its agent is known: a person (an issuer token's subject,
  * or `Nylorun-Subject`), who may use the agent; else 400, or the 404 of a missing agent.
  */
 export function agUiCaller(scope, agentId) {

package/dist/api/components.d.ts

@@ -14,8 +14,12 @@ export declare const Rejected: z.ZodObject<{
         incompatible_host: "incompatible_host";
         internal_error: "internal_error";
         invalid_request: "invalid_request";
+        issuer_unavailable: "issuer_unavailable";
         limit_exceeded: "limit_exceeded";
         not_found: "not_found";
+        oauth_client_required: "oauth_client_required";
+        oauth_failed: "oauth_failed";
+        oauth_state_invalid: "oauth_state_invalid";
         origin_rejected: "origin_rejected";
         placement_refused: "placement_refused";
         protocol_unsupported: "protocol_unsupported";
@@ -114,6 +118,29 @@ export declare const AdminStatus: z.ZodObject<{
 export declare const HostShutdownResponse: z.ZodObject<{
     status: z.ZodLiteral<"shutting_down">;
 }, z.core.$strict>;
+export declare const OperatorKey: z.ZodObject<{
+    id: z.ZodString;
+    role: z.ZodString;
+    createdAt: z.ZodString;
+}, z.core.$strict>;
+export declare const ListOperatorKeysResponse: z.ZodObject<{
+    keys: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        role: z.ZodString;
+        createdAt: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const PutOperatorKeyResponse: z.ZodObject<{
+    id: z.ZodString;
+    role: z.ZodString;
+    createdAt: z.ZodString;
+    key: z.ZodString;
+    rotated: z.ZodBoolean;
+}, z.core.$strict>;
+export declare const DeleteOperatorKeyResponse: z.ZodObject<{
+    id: z.ZodString;
+    deleted: z.ZodLiteral<true>;
+}, z.core.$strict>;
 export declare const SandboxToolOutcome: z.ZodDiscriminatedUnion<[z.ZodObject<{
     kind: z.ZodLiteral<"completed">;
     output: z.ZodUnknown;
@@ -9373,7 +9400,6 @@ export declare const SessionItemsResponse: z.ZodObject<{
 }, z.core.$strip>;
 export declare const StreamClosedFrame: z.ZodObject<{
     reason: z.ZodEnum<{
-        revoked: "revoked";
         token_expired: "token_expired";
     }>;
 }, z.core.$strict>;
@@ -9805,7 +9831,11 @@ export declare const CreateVaultRequest: z.ZodObject<{
     requestId: z.ZodString;
     idempotencyKey: z.ZodString;
     name: z.ZodString;
-    ownerUserId: z.ZodString;
+    scope: z.ZodOptional<z.ZodEnum<{
+        installation: "installation";
+        user: "user";
+    }>>;
+    ownerUserId: z.ZodOptional<z.ZodString>;
     metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
 }, z.core.$strict>;
 export declare const VaultInfo: z.ZodObject<{
@@ -9897,6 +9927,15 @@ export declare const RotateCredentialRequest: z.ZodObject<{
         expiresAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     }, z.core.$strict>], "type">;
 }, z.core.$strict>;
+export declare const StartOAuthRequest: z.ZodObject<{
+    url: z.ZodString;
+    server: z.ZodString;
+    clientId: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const StartOAuthResponse: z.ZodObject<{
+    authorizeUrl: z.ZodString;
+    expiresAt: z.ZodString;
+}, z.core.$strict>;
 export declare const DeletedResponse: z.ZodObject<{
     id: z.ZodString;
 }, z.core.$strict>;
@@ -9911,86 +9950,6 @@ export declare const Jwks: z.ZodObject<{
         use: z.ZodLiteral<"sig">;
     }, z.core.$strict>>;
 }, z.core.$strict>;
-export declare const CreateTokenRequest: z.ZodObject<{
-    requestId: z.ZodString;
-    subject: z.ZodString & z.ZodType<string, string, z.core.$ZodTypeInternals<string, string>>;
-    role: z.ZodString;
-    scopes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
-        "agents:read": "agents:read";
-        "sandboxes:write": "sandboxes:write";
-        "sessions:own": "sessions:own";
-        "vaults:own": "vaults:own";
-    }>>>;
-    agents: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    sandboxes: z.ZodOptional<z.ZodArray<z.ZodString & z.ZodType<string, string, z.core.$ZodTypeInternals<string, string>>>>;
-    ttlSeconds: z.ZodOptional<z.ZodNumber>;
-}, z.core.$strict>;
-export declare const CreateTokenResponse: z.ZodObject<{
-    token: z.ZodString;
-    expiresAt: z.ZodString;
-    subject: z.ZodString;
-    role: z.ZodString;
-    scopes: z.ZodArray<z.ZodEnum<{
-        "agents:read": "agents:read";
-        "sandboxes:write": "sandboxes:write";
-        "sessions:own": "sessions:own";
-        "vaults:own": "vaults:own";
-    }>>;
-    agents: z.ZodUnion<readonly [z.ZodLiteral<"*">, z.ZodArray<z.ZodString>]>;
-    sandboxes: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    keyId: z.ZodString;
-}, z.core.$strict>;
-export declare const AccessPolicyResponse: z.ZodObject<{
-    policy: z.ZodObject<{
-        version: z.ZodLiteral<1>;
-        roles: z.ZodRecord<z.ZodString, z.ZodObject<{
-            scopes: z.ZodArray<z.ZodEnum<{
-                "agents:read": "agents:read";
-                "sandboxes:write": "sandboxes:write";
-                "sessions:own": "sessions:own";
-                "vaults:own": "vaults:own";
-            }>>;
-            agents: z.ZodUnion<readonly [z.ZodLiteral<"*">, z.ZodArray<z.ZodString>]>;
-            limits: z.ZodOptional<z.ZodObject<{
-                turnsPerHour: z.ZodOptional<z.ZodNumber>;
-                concurrentTurns: z.ZodOptional<z.ZodNumber>;
-            }, z.core.$strict>>;
-        }, z.core.$strict>>;
-        anon: z.ZodObject<{
-            scopes: z.ZodArray<z.ZodLiteral<"agents:read">>;
-            agents: z.ZodUnion<readonly [z.ZodLiteral<"*">, z.ZodArray<z.ZodString>]>;
-        }, z.core.$strict>;
-        tokens: z.ZodObject<{
-            maxTtlSeconds: z.ZodNumber;
-        }, z.core.$strict>;
-    }, z.core.$strict>;
-}, z.core.$strict>;
-export declare const PutAccessPolicyRequest: z.ZodObject<{
-    requestId: z.ZodString;
-    policy: z.ZodObject<{
-        version: z.ZodLiteral<1>;
-        roles: z.ZodRecord<z.ZodString, z.ZodObject<{
-            scopes: z.ZodArray<z.ZodEnum<{
-                "agents:read": "agents:read";
-                "sandboxes:write": "sandboxes:write";
-                "sessions:own": "sessions:own";
-                "vaults:own": "vaults:own";
-            }>>;
-            agents: z.ZodUnion<readonly [z.ZodLiteral<"*">, z.ZodArray<z.ZodString>]>;
-            limits: z.ZodOptional<z.ZodObject<{
-                turnsPerHour: z.ZodOptional<z.ZodNumber>;
-                concurrentTurns: z.ZodOptional<z.ZodNumber>;
-            }, z.core.$strict>>;
-        }, z.core.$strict>>;
-        anon: z.ZodObject<{
-            scopes: z.ZodArray<z.ZodLiteral<"agents:read">>;
-            agents: z.ZodUnion<readonly [z.ZodLiteral<"*">, z.ZodArray<z.ZodString>]>;
-        }, z.core.$strict>;
-        tokens: z.ZodObject<{
-            maxTtlSeconds: z.ZodNumber;
-        }, z.core.$strict>;
-    }, z.core.$strict>;
-}, z.core.$strict>;
 export declare const SigningKeyList: z.ZodObject<{
     keys: z.ZodArray<z.ZodObject<{
         id: z.ZodString;
@@ -10046,38 +10005,17 @@ export declare const RotateSigningKeysRequest: z.ZodObject<{
 export declare const RevokeSigningKeyRequest: z.ZodObject<{
     requestId: z.ZodString;
 }, z.core.$strict>;
-export declare const ListPublishableKeysResponse: z.ZodObject<{
-    keys: z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        name: z.ZodString;
-        key: z.ZodString;
-        origins: z.ZodArray<z.ZodString>;
-        createdAt: z.ZodString;
-        revokedAt: z.ZodNullable<z.ZodString>;
-    }, z.core.$strict>>;
-}, z.core.$strict>;
-export declare const PublishableKey: z.ZodObject<{
-    id: z.ZodString;
-    name: z.ZodString;
-    key: z.ZodString;
-    origins: z.ZodArray<z.ZodString>;
-    createdAt: z.ZodString;
-    revokedAt: z.ZodNullable<z.ZodString>;
-}, z.core.$strict>;
-export declare const CreatePublishableKeyRequest: z.ZodObject<{
-    requestId: z.ZodString;
-    name: z.ZodString;
-    origins: z.ZodArray<z.ZodString>;
-}, z.core.$strict>;
-export declare const UpdatePublishableKeyRequest: z.ZodObject<{
-    requestId: z.ZodString;
-    origins: z.ZodArray<z.ZodString>;
-}, z.core.$strict>;
-export declare const RevokeSubjectRequest: z.ZodObject<{
-    requestId: z.ZodString;
-    subject: z.ZodString & z.ZodType<string, string, z.core.$ZodTypeInternals<string, string>>;
-}, z.core.$strict>;
-export declare const RevokeSubjectResponse: z.ZodObject<{
-    subject: z.ZodString;
-    epoch: z.ZodNumber;
+export declare const MeResponse: z.ZodObject<{
+    subject: z.ZodOptional<z.ZodString>;
+    scopes: z.ZodArray<z.ZodEnum<{
+        "agents:read": "agents:read";
+        "agents:write": "agents:write";
+        "sandboxes:write": "sandboxes:write";
+        "sessions:own": "sessions:own";
+        studio: "studio";
+        "tenant:settings": "tenant:settings";
+    }>>;
+    agents: z.ZodUnion<readonly [z.ZodLiteral<"*">, z.ZodArray<z.ZodString>]>;
+    sandboxes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    via: z.ZodString;
 }, z.core.$strict>;

package/dist/api/components.js

@@ -5,7 +5,7 @@
  * global registry.
  */
 import { z } from "zod";
-import { JwksSchema, CreateTokenRequestSchema, CreateTokenResponseSchema, AccessPolicyResponseSchema, PutAccessPolicyRequestSchema, SigningKeyListSchema, SigningKeyViewSchema, RotateSigningKeysRequestSchema, RevokeSigningKeyRequestSchema, ListPublishableKeysResponseSchema, PublishableKeySchema, CreatePublishableKeyRequestSchema, UpdatePublishableKeyRequestSchema, RevokeSubjectRequestSchema, RevokeSubjectResponseSchema, TenantStatusSchema, ResetTenantRequestSchema, ResetTenantResponseSchema, SeedTenantConfigRequestSchema, SeedTenantConfigResponseSchema, HostModelCatalogSchema, TenantSandboxViewSchema, ModelUsageTotalsSchema, ModelBudgetsSchema, PutModelBudgetsRequestSchema, PutTenantSandboxRequestSchema, ListProvidersResponseSchema, HostModelViewSchema, PutHostModelRequestSchema, SelectHostModelRequestSchema, CreateVaultRequestSchema, VaultInfoSchema, ListVaultsResponseSchema, CreateCredentialRequestSchema, CredentialInfoSchema, ListCredentialsResponseSchema, RotateCredentialRequestSchema, DeletedResponseSchema, ListAgentsResponseSchema, ListPublicAgentsResponseSchema, ListSessionsResponseSchema, LiveEventSchema, PutAgentRequestSchema, PutAgentResponseSchema, PutSessionRequestSchema, SessionItemsResponseSchema, SessionViewSchema, StreamClosedFrameSchema, AcceptedResponseSchema, ActionResultReceiptSchema, DeleteEndpointResponseSchema, DeliveryHeartbeatResponseSchema, ActionOutcomeSchema, EndpointPingResponseSchema, ListEndpointsResponseSchema, PutEndpointsRequestSchema, SandboxToolOutcomeSchema, PutSandboxRequestSchema, SandboxViewSchema, ListSandboxesResponseSchema, DeleteSandboxResponseSchema, ListSandboxEventsResponseSchema, ArtifactViewSchema, ArtifactVersionViewSchema, ListArtifactsResponseSchema, UploadArtifactResponseSchema, DeleteArtifactResponseSchema, CreateArtifactLinkRequestSchema, ArtifactLinkSchema, PutTenantArtifactsRequestSchema, TenantArtifactsViewSchema, ArtifactTreeSchema, ArtifactDiffSchema, SessionCommandSchema, AdminStatusSchema, HostShutdownResponseSchema, ProtocolRejectedResponseSchema, RejectedResponseSchema, EVENT_SCHEMAS, EVENT_TYPES, } from "@nylorun/core/contracts";
+import { JwksSchema, SigningKeyListSchema, SigningKeyViewSchema, RotateSigningKeysRequestSchema, RevokeSigningKeyRequestSchema, MeResponseSchema, TenantStatusSchema, ResetTenantRequestSchema, ResetTenantResponseSchema, SeedTenantConfigRequestSchema, SeedTenantConfigResponseSchema, HostModelCatalogSchema, TenantSandboxViewSchema, ModelUsageTotalsSchema, ModelBudgetsSchema, PutModelBudgetsRequestSchema, PutTenantSandboxRequestSchema, ListProvidersResponseSchema, HostModelViewSchema, PutHostModelRequestSchema, SelectHostModelRequestSchema, CreateVaultRequestSchema, VaultInfoSchema, ListVaultsResponseSchema, CreateCredentialRequestSchema, CredentialInfoSchema, ListCredentialsResponseSchema, RotateCredentialRequestSchema, StartOAuthRequestSchema, StartOAuthResponseSchema, DeletedResponseSchema, ListAgentsResponseSchema, ListPublicAgentsResponseSchema, ListSessionsResponseSchema, LiveEventSchema, PutAgentRequestSchema, PutAgentResponseSchema, PutSessionRequestSchema, SessionItemsResponseSchema, SessionViewSchema, StreamClosedFrameSchema, AcceptedResponseSchema, ActionResultReceiptSchema, DeleteEndpointResponseSchema, DeliveryHeartbeatResponseSchema, ActionOutcomeSchema, EndpointPingResponseSchema, ListEndpointsResponseSchema, PutEndpointsRequestSchema, SandboxToolOutcomeSchema, PutSandboxRequestSchema, SandboxViewSchema, ListSandboxesResponseSchema, DeleteSandboxResponseSchema, ListSandboxEventsResponseSchema, ArtifactViewSchema, ArtifactVersionViewSchema, ListArtifactsResponseSchema, UploadArtifactResponseSchema, DeleteArtifactResponseSchema, CreateArtifactLinkRequestSchema, ArtifactLinkSchema, PutTenantArtifactsRequestSchema, TenantArtifactsViewSchema, ArtifactTreeSchema, ArtifactDiffSchema, SessionCommandSchema, AdminStatusSchema, HostShutdownResponseSchema, ListOperatorKeysResponseSchema, PutOperatorKeyResponseSchema, DeleteOperatorKeyResponseSchema, OperatorKeySchema, ProtocolRejectedResponseSchema, RejectedResponseSchema, EVENT_SCHEMAS, EVENT_TYPES, } from "@nylorun/core/contracts";
 function named(id, schema) {
     return schema.meta({ id });
 }
@@ -13,6 +13,10 @@ export const Rejected = named("Rejected", RejectedResponseSchema);
 export const ProtocolRejected = named("ProtocolRejected", ProtocolRejectedResponseSchema);
 export const AdminStatus = named("AdminStatus", AdminStatusSchema);
 export const HostShutdownResponse = named("HostShutdownResponse", HostShutdownResponseSchema);
+export const OperatorKey = named("OperatorKey", OperatorKeySchema);
+export const ListOperatorKeysResponse = named("ListOperatorKeysResponse", ListOperatorKeysResponseSchema);
+export const PutOperatorKeyResponse = named("PutOperatorKeyResponse", PutOperatorKeyResponseSchema);
+export const DeleteOperatorKeyResponse = named("DeleteOperatorKeyResponse", DeleteOperatorKeyResponseSchema);
 export const SandboxToolOutcome = named("SandboxToolOutcome", SandboxToolOutcomeSchema);
 export const PutSandboxRequest = named("PutSandboxRequest", PutSandboxRequestSchema);
 export const SandboxView = named("SandboxView", SandboxViewSchema);
@@ -80,19 +84,12 @@ export const CreateCredentialRequest = named("CreateCredentialRequest", CreateCr
 export const CredentialInfo = named("CredentialInfo", CredentialInfoSchema);
 export const ListCredentialsResponse = named("ListCredentialsResponse", ListCredentialsResponseSchema);
 export const RotateCredentialRequest = named("RotateCredentialRequest", RotateCredentialRequestSchema);
+export const StartOAuthRequest = named("StartOAuthRequest", StartOAuthRequestSchema);
+export const StartOAuthResponse = named("StartOAuthResponse", StartOAuthResponseSchema);
 export const DeletedResponse = named("DeletedResponse", DeletedResponseSchema);
 export const Jwks = named("Jwks", JwksSchema);
-export const CreateTokenRequest = named("CreateTokenRequest", CreateTokenRequestSchema);
-export const CreateTokenResponse = named("CreateTokenResponse", CreateTokenResponseSchema);
-export const AccessPolicyResponse = named("AccessPolicyResponse", AccessPolicyResponseSchema);
-export const PutAccessPolicyRequest = named("PutAccessPolicyRequest", PutAccessPolicyRequestSchema);
 export const SigningKeyList = named("SigningKeyList", SigningKeyListSchema);
 export const SigningKeyView = named("SigningKeyView", SigningKeyViewSchema);
 export const RotateSigningKeysRequest = named("RotateSigningKeysRequest", RotateSigningKeysRequestSchema);
 export const RevokeSigningKeyRequest = named("RevokeSigningKeyRequest", RevokeSigningKeyRequestSchema);
-export const ListPublishableKeysResponse = named("ListPublishableKeysResponse", ListPublishableKeysResponseSchema);
-export const PublishableKey = named("PublishableKey", PublishableKeySchema);
-export const CreatePublishableKeyRequest = named("CreatePublishableKeyRequest", CreatePublishableKeyRequestSchema);
-export const UpdatePublishableKeyRequest = named("UpdatePublishableKeyRequest", UpdatePublishableKeyRequestSchema);
-export const RevokeSubjectRequest = named("RevokeSubjectRequest", RevokeSubjectRequestSchema);
-export const RevokeSubjectResponse = named("RevokeSubjectResponse", RevokeSubjectResponseSchema);
+export const MeResponse = named("MeResponse", MeResponseSchema);

package/dist/api/http/app.js

@@ -7,6 +7,7 @@ import { authenticateCaller, declaredRoute, pathSegments } from "./define.js";
 import { jsonResponse, rejectionOf } from "./respond.js";
 import { accessRoutes } from "./routes/access.js";
 import { endpointRoutes } from "./routes/endpoints.js";
+import { meRoutes } from "./routes/me.js";
 import { actionRoutes } from "./routes/actions.js";
 import { sandboxRoutes } from "./routes/sandboxes.js";
 import { artifactRoutes } from "./routes/artifacts.js";
@@ -45,6 +46,7 @@ function build() {
     tenantRoutes(api);
     vaultRoutes(api);
     accessRoutes(api);
+    meRoutes(api);
     agUiRoutes(api);
     a2aRoutes(api);
     api.notFound(notFound);

package/dist/api/http/define.d.ts

@@ -2,12 +2,12 @@
  * How a Tenant API route is declared: once, with who may call it, for serving and for the
  * OpenAPI document.
  *
- * `RouteAccess` says which credentials a route takes, which subject scopes reach it and
- * whether browsers may call it: the one statement of who may call a route. The document shows
- * it as the operation's `security`, its `Nylorun-*` headers and `x-nylorun-*` fields; the Host
- * answers browser preflights from it (`findTenantRoute`). Serving runs the Tenant's checks in
- * order: the browser client, the bearer, the subject's scopes, then the handler, which parses
- * its body.
+ * `RouteAccess` says which credentials a route takes and which subject scopes reach it: the one
+ * statement of who may call a route. The document shows it as the operation's `security`, its
+ * `Nylorun-*` headers and `x-nylorun-*` fields. Serving runs the Tenant's checks in order: the
+ * bearer, the subject's scopes, then the handler, which parses its body. The Runtime sends no
+ * CORS headers: a browser reaches it through the operator's proxy, with a trusted issuer's
+ * token.
  */
 import type { IncomingMessage } from "node:http";
 import type { OpenAPIHono, RouteConfig } from "@hono/zod-openapi";
@@ -15,16 +15,13 @@ import type { Context, Handler } from "hono";
 import type { SubjectScope } from "@nylorun/core/contracts";
 import type { AuthScope } from "../../tenant/context.js";
 import type { TenantEnv } from "./app.js";
-export type Credential = "application" | "subject" | "token" | "publishable" | "delivery";
+export type Credential = "application" | "subject" | "token" | "delivery";
 export interface RouteAccess {
     readonly credentials: readonly Credential[];
     /** The subject scopes that reach the route: any one of them, none (`never`), or all (`any`). */
     readonly scopes: readonly SubjectScope[] | "never" | "any";
-    /** A browser page may call it: its preflight is allowed. */
-    readonly browser?: boolean;
     /**
-     * Public data: a request with no credential at all (no `Authorization`, no `Nylorun-Key`) is
-     * served too. A credential that is sent is still checked, so a wrong one stays the opaque 404.
+     * Public data: a request with no credential at all (no `Authorization`) is served too. A credential that is sent is still checked, so a wrong one stays the opaque 404.
      */
     readonly anonymous?: boolean;
     /**
@@ -40,7 +37,7 @@ export interface RouteAccess {
 }
 /** The route's path segments, decoded, as the Tenant's checks read them. */
 export declare function pathSegments(incoming: IncomingMessage): string[];
-/** Who is calling: the browser client and the bearer, as every Tenant request checks them. */
+/** Who is calling: the bearer, as every Tenant request checks it. */
 export declare function authenticateCaller(c: Context<TenantEnv>, 
 /** The route serves public data (`RouteAccess.anonymous`): no credential is needed. */
 anonymous?: boolean): Promise<AuthScope>;

package/dist/api/http/define.js

@@ -1,14 +1,12 @@
 import { z } from "zod";
 import { PROTOCOL_VERSION } from "@nylorun/core/compatibility";
 import { authenticate, requireScopes } from "../../tenant/auth.js";
-import { identifyClient } from "../../tenant/browser.js";
 import { fail } from "../../tenant/http.js";
 import { ProtocolRejected, Rejected } from "../components.js";
 const SCHEMES = {
     application: "applicationKey",
     subject: "applicationKey",
-    token: "subjectToken",
-    publishable: "publishableKey",
+    token: "issuerToken",
     delivery: "deliveryToken",
 };
 const rejected = (description) => ({
@@ -29,17 +27,14 @@ export function pathSegments(incoming) {
         }
     });
 }
-/** Who is calling: the browser client and the bearer, as every Tenant request checks them. */
+/** Who is calling: the bearer, as every Tenant request checks it. */
 export async function authenticateCaller(c, 
 /** The route serves public data (`RouteAccess.anonymous`): no credential is needed. */
 anonymous = false) {
-    const { tenant, incoming, outgoing } = c.env;
-    // The client app first: a browser's origin is checked, and CORS headers set, before the
-    // bearer is looked at, so every answer from here on is readable by an allowed page.
-    const client = await identifyClient(tenant, incoming, outgoing);
-    if (anonymous && !client && incoming.headers.authorization === undefined)
+    const { tenant, incoming } = c.env;
+    if (anonymous && incoming.headers.authorization === undefined)
         return { kind: "anonymous" };
-    return await authenticate(tenant, incoming, client);
+    return await authenticate(tenant, incoming);
 }
 const declared = [];
 /** The declared route `method path` is, if any. `{param}` segments match any one segment. */
@@ -53,10 +48,6 @@ function authenticated(access) {
     return async (c, next) => {
         const scope = await authenticateCaller(c, access.anonymous === true);
         requireScopes(scope, access.scopes);
-        if (scope.kind === "publishable" && !access.credentials.includes("publishable"))
-            fail(403, "A publishable key alone reaches only the agent list", {
-                code: "scope_required",
-            });
         // Handlers tell callers apart by kind, and a delivery token is none of theirs: only the
         // routes that list it may see one.
         if (scope.kind === "delivery" && !access.credentials.includes("delivery"))
@@ -83,14 +74,6 @@ export function tenantRoute(api, access, route, handler) {
                     .meta({ description: "The subject's space-separated scopes; required with a subject" }),
             }
             : {}),
-        ...(takes("publishable")
-            ? {
-                "Nylorun-Key": z
-                    .string()
-                    .optional()
-                    .meta({ description: "A publishable key, from a browser page on an allowed origin" }),
-            }
-            : {}),
     });
     api.openAPIRegistry.registerPath({
         ...route,
@@ -102,17 +85,19 @@ export function tenantRoute(api, access, route, handler) {
         request: { ...route.request, headers },
         responses: {
             400: rejected("Invalid headers, path, body or cursor"),
-            ...(takes("token") ? { 401: rejected("The subject token expired or was revoked (`token_expired`)") } : {}),
-            403: rejected("Not allowed for this credential, subject scope or origin"),
+            ...(takes("token")
+                ? {
+                    401: rejected("The token expired (`token_expired`), or its issuer's keys cannot be fetched now (`issuer_unavailable`)"),
+                }
+                : {}),
+            403: rejected("Not allowed for this credential or subject scope, or an application key from a browser (`origin_rejected`)"),
             404: rejected("Not found, or a credential the Tenant does not know (`not_found`)"),
             426: { description: "`Nylorun-Protocol` missing or unsupported", content: { "application/json": { schema: ProtocolRejected } } },
-            ...(takes("token") ? { 429: rejected("The subject's turn limits are reached (`limit_exceeded`)") } : {}),
             503: rejected("The Tenant's storage or streams are unavailable"),
             ...route.responses,
         },
         "x-nylorun-credentials": access.credentials,
         "x-nylorun-scopes": access.scopes,
-        "x-nylorun-browser": access.browser === true,
     });
     declared.push({
         method: route.method.toUpperCase(),

package/dist/api/http/routes/access.d.ts

@@ -1,24 +1,8 @@
 /**
- * Access management (Host feature `subject-tokens`), for the application key only: subject
- * tokens, the access policy, signing keys, publishable keys and subject revocation; and the
- * public keys, for any caller that reached the Tenant.
- *
- * Subjects travel in bodies, not paths, because they may be email addresses and request paths
- * are logged.
+ * Signing keys, for the application key only, and the public keys, for any caller that reached
+ * the Tenant: the Runtime signs delivery tokens and capability links with them (protocol 7 has
+ * no subject tokens, access policy, browser keys or revocations).
  */
 import type { OpenAPIHono } from "@hono/zod-openapi";
-import type { PublishableKey as PublishableKeyBody } from "@nylorun/core/contracts";
-import type { PublishableKeyRow } from "../../../store/types.js";
-import type { TenantContext } from "../../../tenant/context.js";
 import type { TenantEnv } from "../app.js";
 export declare function accessRoutes(api: OpenAPIHono<TenantEnv>): void;
-/** A publishable key as the API shows it. */
-export declare function publishableKeyView(row: PublishableKeyRow): PublishableKeyBody;
-/**
- * Ends every token of `subject` minted so far: bumps its epoch, then ends its open streams
- * here and, through `tenant/control`, on every other process. Running turns continue.
- */
-export declare function revokeSubject(ctx: TenantContext, subject: string): Promise<{
-    subject: string;
-    epoch: number;
-}>;