@nylorun/runtime 0.20.0-beta → 0.21.0-beta

package/dist/keys/keys.d.ts

@@ -1,7 +1,8 @@
-import type { CreateCredentialRequest, CredentialInfo, HostModelView, PutHostModelRequest, RotateCredentialRequest, SelectHostModelRequest, SigningKeyView } from "@nylorun/core/contracts";
+import type { CreateCredentialRequest, CredentialInfo, HostModelView, McpPreview, McpPreviewRequest, PutHostModelRequest, RotateCredentialRequest, SelectHostModelRequest, SigningKeyView } from "@nylorun/core/contracts";
 import type { SessionStore } from "../store/types.js";
+import type { OutboundPolicy } from "../tenant/outbound.js";
 import { type SigningKeys } from "../tenant/signing-keys.js";
-import type { FinishOAuthInput, StartOAuthInput, VaultService } from "../vault/service.js";
+import type { VaultService } from "../vault/service.js";
 /** One JWT to sign: its `typ` and every claim, `iss`, `aud`, `sub`, `iat`, `exp` and `jti` included. */
 export interface SignRequest {
     readonly typ: string;
@@ -26,19 +27,14 @@ export interface Keys {
     }): Promise<SigningKeyView[]>;
     /** Creates the current and standby keys when the Tenant has none. */
     ensureSigningKeys(): Promise<void>;
-    /** Starts an MCP OAuth connect into an installation vault (`VaultService.startOAuth`). */
-    startOAuth(input: StartOAuthInput): Promise<{
-        authorizeUrl: string;
-        expiresAt: string;
-    }>;
-    /** Finishes one from its callback (`VaultService.finishOAuth`). */
-    finishOAuth(input: FinishOAuthInput): Promise<{
-        vaultId: string;
-        credentialId: string;
-    }>;
+    /**
+     * Lists a remote MCP server's tools with the installation vault's credential for its URL
+     * (R2b C12, `mcp/preview.ts`); never calls a tool.
+     */
+    previewMcp(body: McpPreviewRequest): Promise<McpPreview>;
 }
 /** The operations, by the name the HTTP route carries. */
-export declare const KEYS_OPERATIONS: readonly ["createCredential", "rotateCredential", "putHostModel", "selectHostModel", "sign", "rotateSigningKeys", "ensureSigningKeys", "startOAuth", "finishOAuth"];
+export declare const KEYS_OPERATIONS: readonly ["createCredential", "rotateCredential", "putHostModel", "selectHostModel", "sign", "rotateSigningKeys", "ensureSigningKeys", "previewMcp"];
 export type KeysOperation = (typeof KEYS_OPERATIONS)[number];
 export interface InProcessKeysOptions {
     readonly store: SessionStore;
@@ -47,5 +43,7 @@ export interface InProcessKeysOptions {
     readonly signingKeys: SigningKeys;
     /** The vault key. */
     readonly kek: () => Buffer;
+    /** How a tool preview reaches the server (`TenantConfig.delivery`). Default: no limits. */
+    readonly policy?: OutboundPolicy;
 }
 export declare function inProcessKeys(options: InProcessKeysOptions): Keys;

package/dist/keys/keys.js

@@ -5,15 +5,15 @@
  * links, run and host tokens, signing-key rotation) run here, whole, so the process that calls them never
  * holds the key or a private signing key.
  *
- * MCP OAuth connect (F9-D14) runs here too: discovery, registration, the code exchange and the
- * credential it seals, so the plaintext tokens, the PKCE verifier and any client secret never
- * reach the runtime container; core only routes the start and the callback.
+ * A tool preview (R2b C12, `previewMcp`) runs here too: it sends an installation vault's
+ * credential to the server it lists, so the process that reads the plaintext makes the request.
  *
  * Two implementations: `inProcessKeys` (embedding, the ephemeral Runtime, tests, and the gates
  * service itself, which serves the HTTP routes with it), and `httpKeys` (`client.ts`), the
  * runtime container's client of the `keys` service in the gateway.
  */
 import { SignJWT } from "jose";
+import { previewMcpServer } from "../mcp/preview.js";
 import { signingKeyView } from "../tenant/signing-keys.js";
 /** The operations, by the name the HTTP route carries. */
 export const KEYS_OPERATIONS = [
@@ -24,8 +24,7 @@ export const KEYS_OPERATIONS = [
     "sign",
     "rotateSigningKeys",
     "ensureSigningKeys",
-    "startOAuth",
-    "finishOAuth",
+    "previewMcp",
 ];
 export function inProcessKeys(options) {
     const { store, vault, signingKeys, kek } = options;
@@ -34,8 +33,6 @@ export function inProcessKeys(options) {
         rotateCredential: (vaultId, id, body) => vault.rotateCredential(vaultId, id, body),
         putHostModel: (body) => vault.putHostModel(body),
         selectHostModel: (body) => vault.selectHostModel(body),
-        startOAuth: (input) => vault.startOAuth(input),
-        finishOAuth: (input) => vault.finishOAuth(input),
         async sign(request) {
             const key = kek();
             const row = await store.tx((t) => signingKeys.ensure(t, key));
@@ -54,5 +51,6 @@ export function inProcessKeys(options) {
             const key = kek();
             await store.tx((t) => signingKeys.ensure(t, key));
         },
+        previewMcp: (body) => previewMcpServer(body, { vault, policy: options.policy ?? {} }),
     };
 }