@nylorun/runtime 0.17.0-beta → 0.19.1-beta

package/dist/tenant/types.d.ts

@@ -1,5 +1,5 @@
 import type { IncomingMessage, ServerResponse } from "node:http";
-import type { HarnessStatus, HostAggregate, HostTenant, TenantEnvelope } from "@nylorun/core/contracts";
+import type { HarnessStatus, HostTenant, TenantEnvelope } from "@nylorun/core/contracts";
 import type { HarnessChannel } from "@nylorun/core/harness-api";
 import type { FlowLimits } from "../core/limits.js";
 import type { HarnessPeer } from "../harness-api/server.js";
@@ -7,23 +7,20 @@ import type { HostAuthority } from "../sandbox/join.js";
 import type { SessionStore } from "../store/types.js";
 import type { SandboxBackend } from "../sandbox/types.js";
 import type { TenantCause } from "./cause.js";
-import type { OperatorKeys } from "./operator-keys.js";
 import type { OutboundPolicy } from "./outbound.js";
 import type { ResolverConfig } from "../vault/sources.js";
 import type { TenantWorker } from "./worker.js";
 export type TenantMode = "shared" | "ephemeral" | "test";
 /**
  * The Tenant directory on the Host root (`<Host root>/tenant/`). The Tenant's data lives in
- * its database; this holds what stays on the Host: the vault key, plugin data, logs, and the
- * private home, tmp and sandbox directories.
+ * its database; this holds what stays on the Host: the vault key, logs, and the private home
+ * and sandbox directories.
  */
 export interface TenantPaths {
     root: string;
     kek: string;
     home: string;
-    tmp: string;
     sandboxes: string;
-    pluginData: string;
     /** The `fs` BlobStore's directory, used when the Host has no Object store. */
     blobs: string;
     logs: string;
@@ -55,18 +52,14 @@ export interface TenantConfig {
         steps?: number;
         ms?: number;
     };
-    /**
-     * How long a run waits in its lease for a pending Action's outcome (F6.2): the turn goes on
-     * at once when the Action endpoint answers in time, and ends its segment as waiting (resumed
-     * by replay) otherwise. Default 5 minutes; 0 never waits.
-     */
-    actionHoldMs?: number;
     /** Retries and timeouts for model calls (Model Calls §5, §6). Defaults in `piModel`. */
     modelCall?: import("../gates/model-gate.js").ModelCallSettings;
-    childEnv: Readonly<Record<string, string>>;
-    /** Action claim lease. Default 30 s. */
-    /** How the Runtime may call Action endpoints (Host settings). Default: http and private addresses allowed. */
+    /**
+     * How the Runtime may call MCP servers and HTTP tools (Host settings). Default: http and
+     * private addresses allowed.
+     */
     delivery?: OutboundPolicy;
+    /** Bounds the default Tenant sweep interval (`sweepIntervalMs`). Default 30 s. */
     leaseMs?: number;
     /** Ownership lease of an advance (§10.6); renewed every third while it runs. Default 30 s. */
     ownerLeaseMs?: number;
@@ -110,9 +103,6 @@ export interface Logger {
 export interface TenantSummary {
     ready: boolean;
     runningSessions: number;
-    /** Deliveries to Action endpoints in flight on this process. */
-    inFlightDeliveries: number;
-    pendingActions: number;
     uncertainEffects: number;
     /** The Tenant's harnesses (F6.2). */
     harness?: HarnessStatus;
@@ -143,8 +133,8 @@ export interface TenantHandle {
     attachHarness?(channel: HarnessChannel, peer: HarnessPeer): () => void;
     /** The Tenant's side of a sandbox pod's join (F7.2); absent without sandbox pods. */
     hostAuthority?(): HostAuthority | undefined;
-    /** The Tenant's operator keys, for the Admin API (`/v1/admin/keys`, F9 I1). */
-    operatorKeys?(): OperatorKeys;
+    /** The Tenant's harnesses (F6.2), for `/ready`. */
+    harnessStatus?(): HarnessStatus;
 }
 /**
  * The Host's Tenant for a request: open, or unavailable. `cause` says why when opening it
@@ -183,9 +173,10 @@ export interface TenantModule {
      * Undefined otherwise, or once the module is closed.
      */
     worker(id: string): Promise<TenantWorker | undefined>;
-    /** The Tenant as `/v1/admin/status` reports it. */
+    /** The Tenant, open or why not. */
     tenant(): HostTenant;
-    summarize(): Promise<HostAggregate>;
+    /** The open Tenant's harnesses (`/ready`); undefined while it is not open. */
+    harnessStatus(): HarnessStatus | undefined;
     close(): Promise<void>;
 }
 /**
@@ -208,6 +199,8 @@ export declare class TenantUnavailableError extends Error {
 }
 /** What the Tenant opener hands the Tenant Runtime it opens. */
 export interface OpenedTenant {
+    /** The isolated read pool, owned and closed with the Tenant. */
+    reads?: import("../reads/types.js").ReadStore;
     /**
      * The Tenant's opened Session Store. The Tenant Runtime owns it from here on and closes it
      * on close or on a failed open.

package/dist/tenant/worker.d.ts

@@ -1,6 +1,6 @@
 import type { AbortReason } from "@nylorun/core/harness-api";
 import { RunAbort } from "@nylorun/harness/api";
-import type { AdvanceResult, DeliverResult, SandboxResult, SandboxTrigger, DurableExecution, StuckInvocation, WorkerHandlers } from "../execution/types.js";
+import type { AdvanceResult, SandboxResult, SandboxTrigger, DurableExecution, StuckInvocation, WorkerHandlers } from "../execution/types.js";
 import type { Logger } from "./types.js";
 /** This process's Worker id: the `owner` it writes on the sessions it advances (§10.6). */
 export declare const WORKER_ID: string;
@@ -42,8 +42,6 @@ export interface TenantWorker {
     advance(sessionId: string, signal: AbortSignal): Promise<AdvanceResult>;
     /** One pass of the Tenant sweep. */
     sweep(): Promise<void>;
-    /** Delivers one Action to its endpoint. Only infrastructure errors throw. */
-    deliver?(actionId: string, signal: AbortSignal): Promise<DeliverResult>;
     /** Reconciles one pod sandbox (F7.2). Only infrastructure errors throw. */
     sandbox?(sandboxId: string, trigger: SandboxTrigger, signal: AbortSignal): Promise<SandboxResult>;
 }

package/dist/tenant/worker.js

@@ -4,15 +4,14 @@
  *
  * - `TenantWorker` is one open Tenant's handlers: `advance(sessionId, signal)` (§10.5, in
  *   `advance.ts`), `sweep()` (the Tenant sweep, in `sweep.ts`) and, optionally,
- *   `deliver(actionId, signal)` (one Action to its Action endpoint).
+ *   `sandbox(sandboxId, trigger, signal)` (one pod sandbox's reconcile).
  * - `TenantWorkers` is the registry. Its `handlers` are the `WorkerHandlers` an execution is
  *   started with; they dispatch by `tenantId` to the registered `TenantWorker`. A Tenant
  *   registers when it opens and unregisters when it closes. A call for a Tenant that is not
  *   open here asks the optional `resolve` hook (the Host's, which waits for its Tenant to
  *   open, and knows no other); without one,
- *   the advance and the delivery return `done` and the sweep does nothing. Nothing is lost:
- *   the Tenant's sweep re-wakes its orphaned sessions once it is open again, and an Action
- *   that was not delivered stays pending.
+ *   the advance returns `done` and the sweep does nothing. Nothing is lost: the Tenant's
+ *   sweep re-wakes its orphaned sessions once it is open again.
  * - `TenantExecution` pairs an execution with its registry. The Host creates one per process
  *   (`host/execution.ts`) and passes it to its Tenant; a Tenant opened without one
  *   (tests, ephemeral) gets its own in-process `MemoryExecution`.
@@ -136,10 +135,6 @@ export class TenantWorkers {
         sweep: async (tenantId) => {
             await (await this.find(tenantId))?.sweep();
         },
-        deliver: async (tenantId, actionId, signal) => {
-            const worker = await this.find(tenantId);
-            return worker?.deliver ? worker.deliver(actionId, signal) : DONE;
-        },
         sandbox: async (tenantId, sandboxId, trigger, signal) => {
             const worker = await this.find(tenantId);
             return worker?.sandbox ? worker.sandbox(sandboxId, trigger, signal) : {};

package/dist/vault/sources.d.ts

@@ -13,9 +13,15 @@ export interface CredentialSession {
     readonly vaultIds?: readonly string[];
     readonly credentialSelections?: readonly CredentialSelection[];
 }
-/** One MCP request: the declared server's URL, its name and the agent that declares it. */
+/**
+ * One MCP request: the declared server's URL, its name and the agent that declares it. Or, with
+ * `kind: "http"`, an HTTP tool's request: its URL and its `credential` name as `serverName`.
+ */
 export interface McpCredentialRequest {
+    /** Default `mcp`. */
+    readonly kind?: "mcp" | "http";
     readonly url: string;
+    /** The server's name, or the HTTP tool's `credential`: what a credential selection names. */
     readonly serverName?: string;
     /** The agent used as a tool that declares the server; absent for the session's root agent. */
     readonly agentId?: string;

package/dist/vault/sources.js

@@ -1,10 +1,11 @@
 /**
- * Where a session's MCP credential comes from (F9 C1): the session's attached vaults first,
- * then the operator's credential resolver, an HTTP service on the operator's own network that
- * holds people's own credentials (OSS never stores them, F9-D7).
+ * Where a session's MCP or HTTP tool credential comes from (F9 C1): the session's attached
+ * vaults first, then the operator's credential resolver, an HTTP service on the operator's own
+ * network that holds people's own credentials (OSS never stores them, F9-D7).
  *
- * Both authorize sites call this: the gateway (`gates/tenant-vaults.ts`, remote MCP servers in
- * the gates service) and the Tenant (`tenant/effects.ts`, the in-process MCP pool).
+ * Both authorize sites call this: the gateway (`gates/tenant-vaults.ts`, remote MCP servers and
+ * HTTP tools in the gates service) and the Tenant (`tenant/effects.ts`, the in-process MCP pool
+ * and Tool Gate).
  *
  * ## The resolver contract
  *
@@ -22,6 +23,9 @@
  * anything else, a bad body, or no answer in 5 s → refused: credential_unavailable
  * ```
  *
+ * An HTTP tool's request (R2 M3) names its `credential` instead of a server:
+ * `"target": { "kind": "http", "credential": "billing", "agent"?: "support", "url": "https://…" }`.
+ *
  * `owner` and `turn` come from the session row, never from the harness. Because authorize runs
  * on every MCP HTTP request, answers (200 and 404) are cached per (owner, url): until
  * `expiresAt`, at most 5 minutes, and 60 s without one. Concurrent misses for one key share one
@@ -122,12 +126,19 @@ export class CredentialSources {
             owner: session.ownerUserId,
             session: session.id,
             turn: session.activeTurnId ?? null,
-            target: {
-                kind: "mcp",
-                ...(request.serverName ? { server: request.serverName } : {}),
-                ...(request.agentId ? { agent: request.agentId } : {}),
-                url,
-            },
+            target: request.kind === "http"
+                ? {
+                    kind: "http",
+                    ...(request.serverName ? { credential: request.serverName } : {}),
+                    ...(request.agentId ? { agent: request.agentId } : {}),
+                    url,
+                }
+                : {
+                    kind: "mcp",
+                    ...(request.serverName ? { server: request.serverName } : {}),
+                    ...(request.agentId ? { agent: request.agentId } : {}),
+                    url,
+                },
         };
         try {
             const response = await this.fetchImpl(resolver.url, {

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const RUNTIME_VERSION = "0.17.0-beta";
+export declare const RUNTIME_VERSION = "0.19.1-beta";

package/dist/version.js

@@ -1,3 +1,3 @@
 // Kept in step with package.json by runtime/scripts/check-package.mjs, which runs in npm run check.
 // release:prepare also rewrites this when it bumps @nylorun/runtime.
-export const RUNTIME_VERSION = "0.17.0-beta";
+export const RUNTIME_VERSION = "0.19.1-beta";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nylorun/runtime",
-  "version": "0.17.0-beta",
+  "version": "0.19.1-beta",
   "description": "Nylorun Runtime: the agent execution Host on Postgres, Restate and S2, and model providers.",
   "type": "module",
   "license": "Apache-2.0",
@@ -31,7 +31,7 @@
       "import": "./dist/configuration.js"
     },
     "./openapi.json": "./dist/openapi.json",
-    "./admin-openapi.json": "./dist/admin-openapi.json",
+    "./management-openapi.json": "./dist/management-openapi.json",
     "./package.json": "./package.json"
   },
   "files": [
@@ -65,8 +65,8 @@
     "@hono/node-server": "^2.1.3",
     "@hono/zod-openapi": "^1.6.3",
     "@modelcontextprotocol/sdk": "^1.31.0",
-    "@nylorun/core": "0.13.0-beta",
-    "@nylorun/harness": "0.22.1-beta",
+    "@nylorun/core": "0.15.0-beta",
+    "@nylorun/harness": "0.23.0-beta",
     "@restatedev/restate-sdk": "1.17.2",
     "@s2-dev/streamstore": "0.28.0",
     "aws4fetch": "1.0.20",