@nylorun/runtime 0.16.0-beta → 0.19.0-beta

package/dist/admin-openapi.json

@@ -1,604 +0,0 @@
-{
-  "openapi": "3.2.0",
-  "info": {
-    "title": "Nylorun Runtime: Admin API",
-    "version": "0.16.0-beta",
-    "description": "The Host's status, its Tenant's state and shutdown, with the admin key. Served on the operator listener when the Host has one; the public listener answers these routes with the opaque 404.",
-    "x-nylorun-protocol": {
-      "min": 4,
-      "max": 6,
-      "features": [
-        "runtime-tenants",
-        "admin-status",
-        "studio-principal",
-        "action-endpoints",
-        "artifacts",
-        "tenant-fixture-model",
-        "transcript-events",
-        "derived-principals",
-        "subject-headers",
-        "subject-tokens",
-        "browser-access",
-        "ag-ui-endpoint",
-        "a2a-endpoint",
-        "action-endpoints",
-        "sandboxes",
-        "sandbox-pods"
-      ]
-    }
-  },
-  "servers": [
-    {
-      "url": "{origin}",
-      "description": "The operator listener: a local Tenant's, or where yours runs",
-      "variables": {
-        "origin": {
-          "default": "http://localhost:8788"
-        }
-      }
-    }
-  ],
-  "components": {
-    "securitySchemes": {
-      "adminKey": {
-        "type": "http",
-        "scheme": "bearer",
-        "description": "The Host's admin key (`host-credentials.json`). Never a Tenant bearer."
-      }
-    },
-    "schemas": {
-      "AdminStatus": {
-        "type": "object",
-        "properties": {
-          "service": {
-            "type": "string",
-            "minLength": 1
-          },
-          "version": {
-            "type": "string",
-            "minLength": 1
-          },
-          "protocol": {
-            "type": "object",
-            "properties": {
-              "min": {
-                "type": "integer"
-              },
-              "max": {
-                "type": "integer"
-              },
-              "features": {
-                "type": "array",
-                "items": {
-                  "type": "string"
-                }
-              }
-            },
-            "required": [
-              "min",
-              "max",
-              "features"
-            ],
-            "additionalProperties": false
-          },
-          "tenant": {
-            "type": "object",
-            "properties": {
-              "id": {
-                "type": [
-                  "string",
-                  "null"
-                ],
-                "minLength": 1
-              },
-              "name": {
-                "type": [
-                  "string",
-                  "null"
-                ]
-              },
-              "state": {
-                "type": "string",
-                "enum": [
-                  "open",
-                  "unavailable"
-                ]
-              },
-              "envelope": {
-                "type": [
-                  "object",
-                  "null"
-                ],
-                "properties": {
-                  "id": {
-                    "type": "string",
-                    "minLength": 1
-                  },
-                  "name": {
-                    "type": "string",
-                    "minLength": 1
-                  },
-                  "createdAt": {
-                    "type": "string",
-                    "minLength": 1
-                  },
-                  "updatedAt": {
-                    "type": "string",
-                    "minLength": 1
-                  },
-                  "schemaVersion": {
-                    "type": "integer"
-                  }
-                },
-                "required": [
-                  "id",
-                  "name",
-                  "createdAt",
-                  "updatedAt",
-                  "schemaVersion"
-                ],
-                "additionalProperties": false
-              },
-              "cause": {
-                "type": "object",
-                "properties": {
-                  "code": {
-                    "type": "string",
-                    "enum": [
-                      "kek-missing",
-                      "corrupt",
-                      "schema-too-new",
-                      "migration-failed",
-                      "envelope-invalid",
-                      "open-timeout",
-                      "open-failed",
-                      "database-layout-old"
-                    ]
-                  },
-                  "message": {
-                    "type": "string"
-                  },
-                  "repair": {
-                    "type": "string"
-                  }
-                },
-                "required": [
-                  "code",
-                  "message",
-                  "repair"
-                ],
-                "additionalProperties": false
-              }
-            },
-            "required": [
-              "id",
-              "name",
-              "state",
-              "envelope"
-            ],
-            "additionalProperties": false
-          },
-          "aggregate": {
-            "type": "object",
-            "properties": {
-              "runningSessions": {
-                "type": "integer",
-                "minimum": 0
-              },
-              "inFlightDeliveries": {
-                "type": "integer",
-                "minimum": 0
-              },
-              "pendingActions": {
-                "type": "integer",
-                "minimum": 0
-              },
-              "uncertainEffects": {
-                "type": "integer",
-                "minimum": 0
-              },
-              "relay": {
-                "type": "object",
-                "properties": {
-                  "active": {
-                    "type": "boolean"
-                  },
-                  "pendingTxs": {
-                    "type": "integer",
-                    "minimum": 0
-                  },
-                  "pendingRows": {
-                    "type": "integer",
-                    "minimum": 0
-                  },
-                  "confirmed": {
-                    "type": [
-                      "string",
-                      "null"
-                    ]
-                  },
-                  "reconciliations": {
-                    "type": "integer",
-                    "minimum": 0
-                  },
-                  "lastError": {
-                    "type": [
-                      "string",
-                      "null"
-                    ]
-                  },
-                  "lagBytes": {
-                    "type": "number",
-                    "minimum": 0
-                  }
-                },
-                "required": [
-                  "active",
-                  "pendingTxs",
-                  "pendingRows",
-                  "confirmed",
-                  "reconciliations",
-                  "lastError"
-                ],
-                "additionalProperties": false
-              },
-              "harness": {
-                "type": "object",
-                "properties": {
-                  "mode": {
-                    "type": "string",
-                    "enum": [
-                      "in-process",
-                      "remote"
-                    ]
-                  },
-                  "connected": {
-                    "type": "integer",
-                    "minimum": 0
-                  },
-                  "workspace": {
-                    "type": "boolean"
-                  }
-                },
-                "required": [
-                  "mode",
-                  "connected",
-                  "workspace"
-                ],
-                "additionalProperties": false
-              }
-            },
-            "required": [
-              "runningSessions",
-              "inFlightDeliveries",
-              "pendingActions",
-              "uncertainEffects"
-            ],
-            "additionalProperties": false
-          },
-          "host": {
-            "type": "object",
-            "properties": {
-              "hostId": {
-                "type": "string",
-                "minLength": 1
-              },
-              "url": {
-                "type": "string",
-                "minLength": 1
-              },
-              "pid": {
-                "type": "integer"
-              }
-            },
-            "required": [
-              "hostId",
-              "url",
-              "pid"
-            ],
-            "additionalProperties": false
-          }
-        },
-        "required": [
-          "service",
-          "version",
-          "protocol",
-          "tenant",
-          "aggregate"
-        ],
-        "additionalProperties": false
-      },
-      "Rejected": {
-        "type": "object",
-        "properties": {
-          "status": {
-            "type": "string",
-            "enum": [
-              "rejected"
-            ]
-          },
-          "code": {
-            "type": "string",
-            "enum": [
-              "not_found",
-              "protocol_unsupported",
-              "host_rejected",
-              "origin_rejected",
-              "unsupported_media_type",
-              "connection_missing",
-              "incompatible_host",
-              "subject_invalid",
-              "scope_required",
-              "token_expired",
-              "limit_exceeded",
-              "request_rejected",
-              "invalid_request",
-              "subject_required",
-              "sandbox_not_granted",
-              "sandbox_busy",
-              "sandbox_unavailable",
-              "placement_refused",
-              "sandbox_lost",
-              "sandbox_expired",
-              "internal_error"
-            ]
-          },
-          "message": {
-            "type": "string"
-          },
-          "details": {},
-          "activeTurnId": {
-            "type": "string"
-          },
-          "requestId": {
-            "type": "string"
-          }
-        },
-        "required": [
-          "status",
-          "code",
-          "message"
-        ]
-      },
-      "ProtocolRejected": {
-        "type": "object",
-        "properties": {
-          "status": {
-            "type": "string",
-            "enum": [
-              "rejected"
-            ]
-          },
-          "code": {
-            "type": "string",
-            "enum": [
-              "protocol_unsupported"
-            ]
-          },
-          "protocol": {
-            "type": "object",
-            "properties": {
-              "min": {
-                "type": "integer"
-              },
-              "max": {
-                "type": "integer"
-              },
-              "features": {
-                "type": "array",
-                "items": {
-                  "type": "string"
-                }
-              }
-            },
-            "required": [
-              "min",
-              "max",
-              "features"
-            ],
-            "additionalProperties": false
-          }
-        },
-        "required": [
-          "status",
-          "code",
-          "protocol"
-        ],
-        "additionalProperties": false
-      },
-      "HostShutdownResponse": {
-        "type": "object",
-        "properties": {
-          "status": {
-            "type": "string",
-            "enum": [
-              "shutting_down"
-            ]
-          }
-        },
-        "required": [
-          "status"
-        ],
-        "additionalProperties": false
-      }
-    },
-    "parameters": {}
-  },
-  "paths": {
-    "/v1/admin/status": {
-      "get": {
-        "summary": "Get the Host's status",
-        "tags": [
-          "Admin"
-        ],
-        "security": [
-          {
-            "adminKey": []
-          }
-        ],
-        "responses": {
-          "200": {
-            "description": "Version, protocol, the Tenant and the Host",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/AdminStatus"
-                }
-              }
-            }
-          },
-          "404": {
-            "description": "Not found: an unknown admin key, or the public listener",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/Rejected"
-                }
-              }
-            }
-          },
-          "426": {
-            "description": "`Nylorun-Protocol` missing or unsupported",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ProtocolRejected"
-                }
-              }
-            }
-          }
-        }
-      }
-    },
-    "/v1/admin/host": {
-      "get": {
-        "summary": "Get the Host's status (alias)",
-        "tags": [
-          "Admin"
-        ],
-        "security": [
-          {
-            "adminKey": []
-          }
-        ],
-        "responses": {
-          "200": {
-            "description": "Version, protocol, the Tenant and the Host",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/AdminStatus"
-                }
-              }
-            }
-          },
-          "404": {
-            "description": "Not found: an unknown admin key, or the public listener",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/Rejected"
-                }
-              }
-            }
-          },
-          "426": {
-            "description": "`Nylorun-Protocol` missing or unsupported",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ProtocolRejected"
-                }
-              }
-            }
-          }
-        }
-      }
-    },
-    "/v1/admin/host/shutdown": {
-      "post": {
-        "summary": "Shut the Host down",
-        "description": "Answers, then stops the Host. Served by a self-hosted Runtime only.",
-        "tags": [
-          "Admin"
-        ],
-        "security": [
-          {
-            "adminKey": []
-          }
-        ],
-        "responses": {
-          "200": {
-            "description": "The Host is stopping",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/HostShutdownResponse"
-                }
-              }
-            }
-          },
-          "404": {
-            "description": "Not found: an unknown admin key, or the public listener",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/Rejected"
-                }
-              }
-            }
-          },
-          "426": {
-            "description": "`Nylorun-Protocol` missing or unsupported",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ProtocolRejected"
-                }
-              }
-            }
-          }
-        }
-      }
-    },
-    "/v1/admin/openapi.json": {
-      "get": {
-        "summary": "Get this document",
-        "tags": [
-          "Admin"
-        ],
-        "security": [
-          {
-            "adminKey": []
-          }
-        ],
-        "responses": {
-          "200": {
-            "description": "The Admin API's OpenAPI document"
-          },
-          "404": {
-            "description": "Not found: an unknown admin key, or the public listener",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/Rejected"
-                }
-              }
-            }
-          },
-          "426": {
-            "description": "`Nylorun-Protocol` missing or unsupported",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ProtocolRejected"
-                }
-              }
-            }
-          }
-        }
-      }
-    }
-  },
-  "webhooks": {}
-}

package/dist/api/http/routes/actions.d.ts

@@ -1,8 +0,0 @@
-/**
- * Session commands, and the callbacks an Action endpoint makes about the Action it was
- * delivered: heartbeats and sandbox tools, with the Action's delivery token (Action endpoints).
- * The background result is in `endpoints.ts`.
- */
-import type { OpenAPIHono } from "@hono/zod-openapi";
-import type { TenantEnv } from "../app.js";
-export declare function actionRoutes(api: OpenAPIHono<TenantEnv>): void;

package/dist/api/http/routes/actions.js

@@ -1,76 +0,0 @@
-import { z } from "zod";
-import { SessionCommandSchema } from "@nylorun/core/contracts";
-import { AcceptedResponse, DeliveryHeartbeatResponse, SandboxToolOutcome, SessionCommand, } from "../../components.js";
-import { actionSandboxTool } from "../../../tenant/actions.js";
-import { command } from "../../../tenant/commands.js";
-import { deliveryHeartbeat } from "../../../tenant/delivery.js";
-import { fail } from "../../../tenant/http.js";
-import { readJson } from "../body.js";
-import { tenantRoute } from "../define.js";
-import { jsonResponse } from "../respond.js";
-/** An Action's callbacks: only the delivery token of its current delivery. */
-const CALLBACK = { credentials: ["delivery"], scopes: "never" };
-const json = (schema, description) => ({
-    description,
-    content: { "application/json": { schema } },
-});
-const body = (schema) => ({
-    required: true,
-    content: { "application/json": { schema } },
-});
-const actionId = z.object({ actionId: z.string() });
-const SANDBOX_TOOLS = ["bash", "read", "write", "edit", "grep", "glob"];
-function deliveryOf(scope) {
-    if (scope.kind !== "delivery")
-        return fail(403, "A delivery token is required");
-    return scope;
-}
-export function actionRoutes(api) {
-    tenantRoute(api, CALLBACK, {
-        method: "post",
-        path: "/v1/actions/{actionId}/sandbox/{tool}",
-        tags: ["Action endpoints"],
-        summary: "Run a sandbox tool for an Action being delivered",
-        description: "Called by the Action endpoint with the Action's delivery token. The body is the tool's input.",
-        request: {
-            params: actionId.extend({ tool: z.enum(SANDBOX_TOOLS) }),
-            body: body(z.looseObject({}).meta({ description: "The tool's input" })),
-        },
-        responses: {
-            200: json(SandboxToolOutcome, "The tool's output, or why it failed"),
-            409: { description: "The delivery was cancelled, lost or sent again" },
-        },
-    }, async (c) => jsonResponse(200, await actionSandboxTool(c.env.tenant, deliveryOf(c.get("scope")), c.req.param("actionId"), c.req.param("tool"), () => readJson(c.req.raw), c.req.raw.signal)));
-    tenantRoute(api, CALLBACK, {
-        method: "post",
-        path: "/v1/actions/{actionId}/heartbeat",
-        tags: ["Action endpoints"],
-        summary: "Keep a background delivery alive",
-        description: "Called by an Action endpoint that answered a delivery with 202: extends the delivery by a " +
-            "lease and returns a fresh delivery token.",
-        request: { params: actionId },
-        responses: {
-            200: json(DeliveryHeartbeatResponse, "The delivery's new deadline, and a fresh token"),
-            409: { description: "The delivery was cancelled, lost or sent again" },
-        },
-    }, async (c) => jsonResponse(200, await deliveryHeartbeat(c.env.tenant, deliveryOf(c.get("scope")), c.req.param("actionId"))));
-    tenantRoute(api, {
-        credentials: ["application", "subject", "token"],
-        scopes: ["sessions:own"],
-        browser: true,
-    }, {
-        method: "post",
-        path: "/v1/sessions/{sessionId}/commands",
-        tags: ["Sessions"],
-        summary: "Send a command to a session",
-        description: "A message starts a turn; the others answer what the session waits on, or cancel. Idempotent on the command's `idempotencyKey`.",
-        request: {
-            params: z.object({ sessionId: z.string() }),
-            body: body(SessionCommand),
-        },
-        responses: {
-            200: json(AcceptedResponse, "The command, accepted"),
-            409: { description: "A turn is running, or the session does not wait on this" },
-        },
-    }, async (c) => jsonResponse(200, await command(c.env.tenant, c.req.param("sessionId"), SessionCommandSchema.parse(await readJson(c.req.raw)), c.get("scope"))));
-}

package/dist/api/http/routes/endpoints.d.ts

@@ -1,7 +0,0 @@
-/**
- * Action endpoints: where the Runtime delivers each agent's Actions (design: Action endpoints
- * §4.2). Registered, listed and removed with the application key; no subject reaches them.
- */
-import type { OpenAPIHono } from "@hono/zod-openapi";
-import type { TenantEnv } from "../app.js";
-export declare function endpointRoutes(api: OpenAPIHono<TenantEnv>): void;