@nylorun/runtime 0.20.0-beta → 0.21.0-beta

package/dist/redact.d.ts

@@ -1 +1,19 @@
-export declare function scrub(value: unknown, secrets: readonly string[]): unknown;
+export interface ScrubOptions {
+    /**
+     * Replace only `secrets` (R2b C8, Q16): no value under a secret-looking key, and no inline
+     * image data. A tool's answer keeps fields such as `nextToken`.
+     */
+    readonly valuesOnly?: boolean;
+    /** Told how many times a secret was replaced. */
+    readonly counted?: (replacements: number) => void;
+}
+/**
+ * `value` with each of `secrets` (those of at least 8 characters) replaced by `[redacted]`. By
+ * default also any value under a key such as `token` or `secret`, and inline image data.
+ */
+export declare function scrub(value: unknown, secrets: readonly string[], options?: ScrubOptions): unknown;
+/** `value` with `secrets` alone replaced (`valuesOnly`), and how many replacements were made. */
+export declare function scrubValues<T>(value: T, secrets: readonly string[]): {
+    value: T;
+    redacted: number;
+};

package/dist/redact.js

@@ -1,14 +1,43 @@
-export function scrub(value, secrets) {
-    if (typeof value === "string")
-        return secrets.reduce((text, secret) => secret.length >= 8 ? text.split(secret).join("[redacted]") : text, value.replace(/data:image\/[a-z0-9.+-]+;base64,[A-Za-z0-9+/=]+/giu, "[inline image data redacted]"));
-    if (Array.isArray(value))
-        return value.map((item) => scrub(item, secrets));
-    if (value && typeof value === "object")
-        return Object.fromEntries(Object.entries(value).map(([key, item]) => [
-            key,
-            /^(authorization|api[_-]?key|(?:access|refresh|id|auth)[_-]?token|token|secret|password|cookie|credentials?)$/iu.test(key)
-                ? "[redacted]"
-                : scrub(item, secrets),
-        ]));
-    return value;
+/**
+ * `value` with each of `secrets` (those of at least 8 characters) replaced by `[redacted]`. By
+ * default also any value under a key such as `token` or `secret`, and inline image data.
+ */
+export function scrub(value, secrets, options = {}) {
+    // The longest first, so a header value goes whole before the token inside it.
+    const sorted = secrets.filter((secret) => secret.length >= 8).sort((a, b) => b.length - a.length);
+    let replaced = 0;
+    const walk = (item) => {
+        if (typeof item === "string") {
+            const text = options.valuesOnly
+                ? item
+                : item.replace(/data:image\/[a-z0-9.+-]+;base64,[A-Za-z0-9+/=]+/giu, "[inline image data redacted]");
+            return sorted.reduce((current, secret) => {
+                const parts = current.split(secret);
+                replaced += parts.length - 1;
+                return parts.join("[redacted]");
+            }, text);
+        }
+        if (Array.isArray(item))
+            return item.map(walk);
+        if (item && typeof item === "object")
+            return Object.fromEntries(Object.entries(item).map(([key, entry]) => [
+                key,
+                !options.valuesOnly &&
+                    /^(authorization|api[_-]?key|(?:access|refresh|id|auth)[_-]?token|token|secret|password|cookie|credentials?)$/iu.test(key)
+                    ? "[redacted]"
+                    : walk(entry),
+            ]));
+        return item;
+    };
+    const result = walk(value);
+    options.counted?.(replaced);
+    return result;
+}
+/** `value` with `secrets` alone replaced (`valuesOnly`), and how many replacements were made. */
+export function scrubValues(value, secrets) {
+    if (secrets.length === 0)
+        return { value, redacted: 0 };
+    let redacted = 0;
+    const scrubbed = scrub(value, secrets, { valuesOnly: true, counted: (count) => (redacted = count) });
+    return { value: redacted === 0 ? value : scrubbed, redacted };
 }

package/dist/sandbox/session-sandbox.d.ts

@@ -9,3 +9,10 @@ export type SandboxedManifest = {
 };
 /** The agent's manifest with the sandbox capability added, or why it cannot take one. */
 export declare function withSandboxCapability(manifest: AgentManifest, spec: SandboxManifest): SandboxedManifest;
+/**
+ * The pinned manifest of an agent session without a sandbox: `read_artifact` for each agent of
+ * the tree with a remote MCP server or an HTTP tool (R2b C11), and `nylorun.tools` for each with
+ * a remote MCP server (R2b C10). Undefined when nothing is added, and the session pins its
+ * definition as it is.
+ */
+export declare function withPlatformTools(manifest: AgentManifest): SandboxedManifest | undefined;

package/dist/sandbox/session-sandbox.js

@@ -1,13 +1,23 @@
 /**
- * Gives a session the sandbox chosen when it was opened. An agent session's pinned manifest is
- * its definition plus the `nylorun.sandbox` capability (the six built-in tools, the sandbox
- * instructions and the resolved spec) and the `nylorun.artifacts` capability (`save_artifact`),
- * also added to each agent it uses as a tool, so the tree shares one spec. The sandbox's
- * instructions name the agent's skills' folders (`/skills/<name>/`). The definition in the
- * registry never changes.
+ * Gives a session the sandbox chosen when it was opened, and the platform tools its agents
+ * need. An agent session's pinned manifest is its definition plus:
+ *
+ * - with a sandbox, the `nylorun.sandbox` capability (the six built-in tools, the sandbox
+ *   instructions and the resolved spec) and the `nylorun.artifacts` capability
+ *   (`save_artifact`), also added to each agent it uses as a tool, so the tree shares one spec.
+ *   The sandbox's instructions name the agent's skills' folders (`/skills/<name>/`);
+ * - for each agent of the tree with a remote MCP server or an HTTP tool, `read_artifact` in its
+ *   `nylorun.artifacts` capability (R2b C11), with or without a sandbox: the Runtime stores a
+ *   result of those tools too large to show as an artifact, and the model reads it in pages.
+ *   An agent that declares a tool named `read_artifact` keeps its own, and sees previews only;
+ * - for each agent of the tree with a remote MCP server, the `nylorun.tools` capability (R2b
+ *   C10), empty: when the session defers some of the agent's MCP tools, its session tools put
+ *   `tool_search` and `tool_call` there. An agent that declares either name defers nothing.
+ *
+ * The definition in the registry never changes.
  */
 import { AgentManifestSchema } from "@nylorun/core/contracts";
-import { artifactsCapabilityManifest, hashManifest, sandboxCapabilityManifest, } from "@nylorun/core/define";
+import { READ_ARTIFACT_TOOL, TOOL_CALL_TOOL, TOOL_SEARCH_TOOL, TOOLS_CAPABILITY_ID, artifactsCapabilityManifest, hashManifest, sandboxCapabilityManifest, toolsCapabilityManifest, } from "@nylorun/core/define";
 import { sandboxSpecOf } from "./share.js";
 function isAgentManifest(value) {
     return (typeof value === "object" &&
@@ -19,35 +29,72 @@ function isAgentManifest(value) {
 function skillNamesOf(manifest) {
     return manifest.capabilities.flatMap((capability) => Object.keys(capability.skills ?? {})).sort();
 }
-function addCapability(manifest, spec) {
-    const capabilities = manifest.capabilities.map((capability) => capability.tools === undefined
-        ? capability
-        : {
-            ...capability,
-            tools: capability.tools.map((tool) => {
-                // Agents used as tools share the session's sandbox; flow agents used as tools run
-                // in linked sessions that inherit it.
-                if (tool.agent === undefined || !isAgentManifest(tool.agent))
-                    return tool;
-                if (sandboxSpecOf(tool.agent) !== undefined)
-                    return tool;
-                return { ...tool, agent: addCapability(tool.agent, spec) };
-            }),
+/**
+ * True when the agent itself declares a remote MCP server or an HTTP tool, whose results the
+ * Runtime may store as artifacts (R2b C11), and no tool of its own is named `read_artifact`.
+ */
+function readsStoredResults(manifest) {
+    const remote = manifest.capabilities.some((capability) => Object.keys(capability.mcpServers ?? {}).length > 0 ||
+        (capability.tools ?? []).some((tool) => tool.http !== undefined));
+    const taken = manifest.capabilities.some((capability) => (capability.tools ?? []).some((tool) => tool.name === READ_ARTIFACT_TOOL));
+    return remote && !taken;
+}
+/**
+ * True when the agent itself declares a remote MCP server, some of whose tools the session may
+ * defer (R2b C10), and names no tool `tool_search` or `tool_call` (it then keeps every tool in
+ * its list).
+ */
+function defersTools(manifest) {
+    const servers = manifest.capabilities.some((capability) => Object.keys(capability.mcpServers ?? {}).length > 0);
+    const taken = manifest.capabilities.some((capability) => capability.id === TOOLS_CAPABILITY_ID ||
+        (capability.tools ?? []).some((tool) => tool.name === TOOL_SEARCH_TOOL || tool.name === TOOL_CALL_TOOL));
+    return servers && !taken;
+}
+/** `manifest` with the session's capabilities added; the same object when none are. */
+function addCapabilities(manifest, spec) {
+    let changed = false;
+    const capabilities = manifest.capabilities.map((capability) => {
+        if (capability.tools === undefined)
+            return capability;
+        let toolsChanged = false;
+        const tools = capability.tools.map((tool) => {
+            // Agents used as tools share the session's sandbox; flow agents used as tools run in
+            // linked sessions that inherit it. One that declares its own sandbox keeps it.
+            if (tool.agent === undefined || !isAgentManifest(tool.agent))
+                return tool;
+            const agent = addCapabilities(tool.agent, sandboxSpecOf(tool.agent) === undefined ? spec : undefined);
+            if (agent === tool.agent)
+                return tool;
+            toolsChanged = true;
+            return { ...tool, agent };
         });
+        if (!toolsChanged)
+            return capability;
+        changed = true;
+        return { ...capability, tools };
+    });
+    const save = spec !== undefined;
+    const read = readsStoredResults(manifest);
+    const defer = defersTools(manifest);
+    if (!save && !read && !defer && !changed)
+        return manifest;
     return {
         ...manifest,
         // With a sandbox comes `save_artifact`, so files the agent makes reach the user (F8.1). The
         // sandbox's instructions name where the agent's skills are (R2 M4).
         capabilities: [
             ...capabilities,
-            sandboxCapabilityManifest(spec, { skills: skillNamesOf(manifest) }),
-            artifactsCapabilityManifest(),
+            ...(spec === undefined
+                ? []
+                : [sandboxCapabilityManifest(spec, { skills: skillNamesOf(manifest) })]),
+            ...(save || read ? [artifactsCapabilityManifest({ save, read })] : []),
+            // Empty: when the session defers MCP tools, its tools put tool_search and tool_call here.
+            ...(defer ? [toolsCapabilityManifest()] : []),
         ],
     };
 }
-/** The agent's manifest with the sandbox capability added, or why it cannot take one. */
-export function withSandboxCapability(manifest, spec) {
-    const sandboxed = addCapability(manifest, spec);
+/** `sandboxed` checked as a manifest, with its hash. */
+function checked(original, sandboxed) {
     const parsed = AgentManifestSchema.safeParse(sandboxed);
     if (!parsed.success) {
         const issues = parsed.error.issues.map((issue) => issue.message);
@@ -55,9 +102,23 @@ export function withSandboxCapability(manifest, spec) {
         return {
             ok: false,
             message: clash
-                ? `'${manifest.id}' declares a tool named like a sandbox tool (bash, read, write, edit, grep, glob, save_artifact). Rename it, or open the session with sandbox: false.`
-                : `'${manifest.id}' cannot take this sandbox: ${[...new Set(issues)].join("; ")}`,
+                ? `'${original.id}' declares a tool named like a sandbox tool (bash, read, write, edit, grep, glob, save_artifact). Rename it, or open the session with sandbox: false.`
+                : `'${original.id}' cannot take this sandbox: ${[...new Set(issues)].join("; ")}`,
         };
     }
     return { ok: true, manifest: sandboxed, manifestHash: hashManifest(sandboxed) };
 }
+/** The agent's manifest with the sandbox capability added, or why it cannot take one. */
+export function withSandboxCapability(manifest, spec) {
+    return checked(manifest, addCapabilities(manifest, spec));
+}
+/**
+ * The pinned manifest of an agent session without a sandbox: `read_artifact` for each agent of
+ * the tree with a remote MCP server or an HTTP tool (R2b C11), and `nylorun.tools` for each with
+ * a remote MCP server (R2b C10). Undefined when nothing is added, and the session pins its
+ * definition as it is.
+ */
+export function withPlatformTools(manifest) {
+    const pinned = addCapabilities(manifest, undefined);
+    return pinned === manifest ? undefined : checked(manifest, pinned);
+}

package/dist/store/postgres/drizzle/0016_mcp_oauth_removed.sql

@@ -0,0 +1,5 @@
+DROP TABLE "nylorun"."oauth_pending" CASCADE;--> statement-breakpoint
+INSERT INTO "nylorun"."vault_audit" ("id", "at", "actor", "action", "vault_id", "credential_id", "target", "outcome")
+SELECT gen_random_uuid()::text, to_char(now() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"'), 'migration', 'delete', "vault_id", "id", "binding_json"::jsonb ->> 'url', 'deleted'
+FROM "nylorun"."vault_credentials" WHERE "type" = 'oauth' ORDER BY "vault_id", "id";--> statement-breakpoint
+DELETE FROM "nylorun"."vault_credentials" WHERE "type" = 'oauth';

package/dist/store/postgres/drizzle/meta/_journal.json

@@ -113,6 +113,13 @@
       "when": 1791296131735,
       "tag": "0015_control_signals",
       "breakpoints": true
+    },
+    {
+      "idx": 16,
+      "version": "7",
+      "when": 1791395759051,
+      "tag": "0016_mcp_oauth_removed",
+      "breakpoints": true
     }
   ]
 }

package/dist/store/postgres/schema.d.ts

@@ -1048,14 +1048,14 @@ export declare const vaultCredentials: import("drizzle-orm/pg-core").PgTableWith
             tableName: "vault_credentials";
             dataType: "string";
             columnType: "PgText";
-            data: "bearer" | "model" | "oauth";
+            data: "bearer" | "headers" | "model";
             driverParam: string;
             notNull: true;
             hasDefault: false;
             isPrimaryKey: false;
             isAutoincrement: false;
             hasRuntimeDefault: false;
-            enumValues: ["bearer", "oauth", "model"];
+            enumValues: ["bearer", "headers", "model"];
             baseColumn: never;
             identity: undefined;
             generated: undefined;
@@ -1442,264 +1442,6 @@ export declare const vaultIdempotency: import("drizzle-orm/pg-core").PgTableWith
     };
     dialect: 'pg';
 }>;
-/**
- * An MCP OAuth connect between its start and its callback (F9 C2): found by the SHA-256 of its
- * `state`, used once, for ten minutes. The PKCE verifier and any client secret are sealed under
- * the vault key (`sealBytes`), which only the keys module holds.
- */
-export declare const oauthPending: import("drizzle-orm/pg-core").PgTableWithColumns<{
-    name: "oauth_pending";
-    schema: "nylorun";
-    columns: {
-        stateHash: import("drizzle-orm/pg-core").PgColumn<{
-            name: "stateHash";
-            tableName: "oauth_pending";
-            dataType: "string";
-            columnType: "PgText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: true;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        vaultId: import("drizzle-orm/pg-core").PgColumn<{
-            name: "vaultId";
-            tableName: "oauth_pending";
-            dataType: "string";
-            columnType: "PgText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        server: import("drizzle-orm/pg-core").PgColumn<{
-            name: "server";
-            tableName: "oauth_pending";
-            dataType: "string";
-            columnType: "PgText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        url: import("drizzle-orm/pg-core").PgColumn<{
-            name: "url";
-            tableName: "oauth_pending";
-            dataType: "string";
-            columnType: "PgText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        tokenEndpoint: import("drizzle-orm/pg-core").PgColumn<{
-            name: "tokenEndpoint";
-            tableName: "oauth_pending";
-            dataType: "string";
-            columnType: "PgText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        clientId: import("drizzle-orm/pg-core").PgColumn<{
-            name: "clientId";
-            tableName: "oauth_pending";
-            dataType: "string";
-            columnType: "PgText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        tokenEndpointAuth: import("drizzle-orm/pg-core").PgColumn<{
-            name: "tokenEndpointAuth";
-            tableName: "oauth_pending";
-            dataType: "string";
-            columnType: "PgText";
-            data: "client_secret_basic" | "client_secret_post" | "none";
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: ["none", "client_secret_basic", "client_secret_post"];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        resource: import("drizzle-orm/pg-core").PgColumn<{
-            name: "resource";
-            tableName: "oauth_pending";
-            dataType: "string";
-            columnType: "PgText";
-            data: string;
-            driverParam: string;
-            notNull: false;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        kekId: import("drizzle-orm/pg-core").PgColumn<{
-            name: "kekId";
-            tableName: "oauth_pending";
-            dataType: "string";
-            columnType: "PgText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        clientSecret: import("drizzle-orm/pg-core").PgColumn<{
-            name: "clientSecret";
-            tableName: "oauth_pending";
-            dataType: "custom";
-            columnType: "PgCustomColumn";
-            data: Uint8Array<ArrayBufferLike>;
-            driverParam: Buffer<ArrayBufferLike>;
-            notNull: false;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: undefined;
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            pgColumnBuilderBrand: 'PgCustomColumnBuilderBrand';
-        }>;
-        codeVerifier: import("drizzle-orm/pg-core").PgColumn<{
-            name: "codeVerifier";
-            tableName: "oauth_pending";
-            dataType: "custom";
-            columnType: "PgCustomColumn";
-            data: Uint8Array<ArrayBufferLike>;
-            driverParam: Buffer<ArrayBufferLike>;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: undefined;
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            pgColumnBuilderBrand: 'PgCustomColumnBuilderBrand';
-        }>;
-        redirectUri: import("drizzle-orm/pg-core").PgColumn<{
-            name: "redirectUri";
-            tableName: "oauth_pending";
-            dataType: "string";
-            columnType: "PgText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        expiresAt: import("drizzle-orm/pg-core").PgColumn<{
-            name: "expiresAt";
-            tableName: "oauth_pending";
-            dataType: "custom";
-            columnType: "PgCustomColumn";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: undefined;
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            pgColumnBuilderBrand: 'PgCustomColumnBuilderBrand';
-        }>;
-        createdAt: import("drizzle-orm/pg-core").PgColumn<{
-            name: "createdAt";
-            tableName: "oauth_pending";
-            dataType: "custom";
-            columnType: "PgCustomColumn";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: undefined;
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            pgColumnBuilderBrand: 'PgCustomColumnBuilderBrand';
-        }>;
-    };
-    dialect: 'pg';
-}>;
 export declare const tenantSettings: import("drizzle-orm/pg-core").PgTableWithColumns<{
     name: "tenant_settings";
     schema: "nylorun";
@@ -3924,7 +3666,6 @@ export type VaultRow = typeof vaults.$inferSelect;
 export type VaultCredentialRow = typeof vaultCredentials.$inferSelect;
 export type VaultAuditRow = Omit<typeof vaultAudit.$inferSelect, "ord">;
 export type VaultIdempotencyRow = typeof vaultIdempotency.$inferSelect;
-export type OAuthPendingRow = typeof oauthPending.$inferSelect;
 export type SigningKeyRow = typeof signingKeys.$inferSelect;
 export type ModelUsageRow = typeof modelUsage.$inferSelect;
 export type ModelBudgetRow = typeof modelBudgets.$inferSelect;

package/dist/store/postgres/schema.js

@@ -129,8 +129,8 @@ export const vaultCredentials = nylorun.table("vault_credentials", {
     id: textC().primaryKey(),
     vaultId: text().notNull(),
     name: text().notNull(),
-    type: text({ enum: ["bearer", "oauth", "model"] }).notNull(),
-    /** JSON text of the non-secret binding (url, or provider and model). */
+    type: text({ enum: ["bearer", "headers", "model"] }).notNull(),
+    /** JSON text of the non-secret binding: url (and via, identity, header names), or provider and model. */
     bindingJson: text().notNull(),
     expiresAt: text(),
     createdAt: textC().notNull(),
@@ -165,40 +165,6 @@ export const vaultIdempotency = nylorun.table("vault_idempotency", {
     /** JSON text of the original response. */
     response: text().notNull(),
 });
-/**
- * An MCP OAuth connect between its start and its callback (F9 C2): found by the SHA-256 of its
- * `state`, used once, for ten minutes. The PKCE verifier and any client secret are sealed under
- * the vault key (`sealBytes`), which only the keys module holds.
- */
-export const oauthPending = nylorun.table("oauth_pending", {
-    stateHash: text().primaryKey(),
-    vaultId: text().notNull(),
-    /** The MCP server's name in the agent, the credential's name. */
-    server: text().notNull(),
-    /** The MCP server's URL (normalized): the credential's binding. */
-    url: text().notNull(),
-    tokenEndpoint: text().notNull(),
-    clientId: text().notNull(),
-    /** How the client authenticates at the token endpoint: `none`, `client_secret_basic` or `client_secret_post`. */
-    tokenEndpointAuth: text({ enum: ["none", "client_secret_basic", "client_secret_post"] }).notNull(),
-    /** The RFC 8707 resource indicator sent with the authorization request, if any. */
-    resource: text(),
-    kekId: text().notNull(),
-    /** Sealed; null for a public client. */
-    clientSecret: bytes(),
-    /** Sealed. */
-    codeVerifier: bytes().notNull(),
-    redirectUri: text().notNull(),
-    expiresAt: textC().notNull(),
-    createdAt: textC().notNull(),
-}, (t) => [
-    foreignKey({
-        name: "oauth_pending_vault_id_fkey",
-        columns: [t.vaultId],
-        foreignColumns: [vaults.id],
-    }).onDelete("cascade"),
-    index("oauth_pending_expires").on(t.expiresAt),
-]);
 export const tenantSettings = nylorun.table("tenant_settings", {
     key: text().primaryKey(),
     value: text().notNull(),

package/dist/store/postgres/store.js

@@ -57,7 +57,7 @@ import { database, driverError } from "./db.js";
 import { expectedSchemaVersion, readSchemaVersion } from "./migrate.js";
 import { createPostgresRecordReader } from "./record.js";
 import { postgresRecordWriter, postgresSandboxRecordWriter } from "./record-writer.js";
-import { artifacts, artifactVersions, artifactContent, definitionFiles, definitionFileUses, commands, definitions, effects, links, modelBudgets, modelUsage, principals, sandboxes, sandboxEvents, sandboxResources, sessionEvents, sessionLogHeads, sessions, toJson, toolCrossings, signingKeys, tenant, tenantSettings, vaultAudit, vaultCredentials, vaultIdempotency, vaults, oauthPending, } from "./schema.js";
+import { artifacts, artifactVersions, artifactContent, definitionFiles, definitionFileUses, commands, definitions, effects, links, modelBudgets, modelUsage, principals, sandboxes, sandboxEvents, sandboxResources, sessionEvents, sessionLogHeads, sessions, toJson, toolCrossings, signingKeys, tenant, tenantSettings, vaultAudit, vaultCredentials, vaultIdempotency, vaults, } from "./schema.js";
 export function createPostgresSessionStore(options) {
     return new PostgresSessionStore(options);
 }
@@ -765,23 +765,6 @@ class PostgresTx {
         this.check();
         await this.db.insert(vaultIdempotency).values(row);
     }
-    async insertOAuthPending(row) {
-        this.check();
-        await this.db.insert(oauthPending).values(row);
-    }
-    async takeOAuthPending(stateHash) {
-        this.check();
-        const [row] = await this.db
-            .delete(oauthPending)
-            .where(eq(oauthPending.stateHash, stateHash))
-            .returning();
-        return row;
-    }
-    async deleteExpiredOAuthPending(now) {
-        this.check();
-        const result = await this.db.delete(oauthPending).where(lt(oauthPending.expiresAt, now));
-        return result.count;
-    }
     // --- signing keys --------------------------------------------------------
     async lockSigningKeys() {
         this.check();