@nylorun/runtime 0.22.0-beta → 0.24.0-beta

package/dist/api/openapi.js

@@ -135,6 +135,8 @@ const RUNTIME_TAGS = [
             "GET /v1/sessions/{sessionId}/manifest",
             "GET /v1/sessions/{sessionId}/usage",
             "GET /v1/sessions/{sessionId}/calls/model",
+            "GET /v1/sessions/{sessionId}/calls/tool",
+            "GET /v1/sessions/{sessionId}/turns/{turnId}/trace",
             "POST /v1/sessions/{sessionId}/sandbox/{tool}",
         ],
     },
@@ -156,17 +158,25 @@ const RUNTIME_TAGS = [
         operations: ["GET /v1/a2a/agents/{agentId}/card", "POST /v1/a2a/agents/{agentId}"],
     },
     {
-        name: "Sandboxes",
-        group: "Sandboxes",
-        description: "Isolated machines an agent works in: create or find one, watch its lifecycle, stop, reset or delete it. In `@nylorun/agents`.",
+        name: "Environments",
+        group: "Environments",
+        description: "Where sessions run: one sandbox (a virtual workspace, a pod with its own volume, or none) with a recipe that can change, and one vault of secrets for its shell, MCP servers and HTTP tools. Create, find or change one, watch its lifecycle, stop, reset or delete it, and write its secrets. In `@nylorun/agents`.",
         operations: [
-            "PUT /v1/sandboxes/{sandboxId}",
-            "GET /v1/sandboxes",
-            "GET /v1/sandboxes/{sandboxId}",
-            "GET /v1/sandboxes/{sandboxId}/events",
-            "POST /v1/sandboxes/{sandboxId}/stop",
-            "POST /v1/sandboxes/{sandboxId}/reset",
-            "DELETE /v1/sandboxes/{sandboxId}",
+            "PUT /v1/environments/{environmentId}",
+            "GET /v1/environments",
+            "GET /v1/environments/{environmentId}",
+            "GET /v1/environments/{environmentId}/events",
+            "POST /v1/environments/{environmentId}/stop",
+            "POST /v1/environments/{environmentId}/reset",
+            "DELETE /v1/environments/{environmentId}",
+            "GET /v1/environments/{environmentId}/secrets",
+            "GET /v1/environments/{environmentId}/secrets/{name}",
+            "PUT /v1/environments/{environmentId}/secrets/{name}",
+            "DELETE /v1/environments/{environmentId}/secrets/{name}",
+            "POST /v1/environments/{environmentId}/snapshot",
+            "POST /v1/environments/{environmentId}/restore",
+            "GET /v1/environments/{environmentId}/versions",
+            "DELETE /v1/environments/{environmentId}/versions/{version}",
         ],
     },
     {
@@ -235,23 +245,18 @@ const MANAGEMENT_TAGS = [
         ],
     },
     {
-        name: "Vaults",
-        description: "The installation's and each person's credentials for agents' tools: API keys, bound to the URL they are sent to. Sessions attach a vault by id. `admin.vaults`.",
-        operations: [
-            "POST /v1/tenant/vaults",
-            "GET /v1/tenant/vaults",
-            "GET /v1/tenant/vaults/{vaultId}",
-            "DELETE /v1/tenant/vaults/{vaultId}",
-            "POST /v1/tenant/vaults/{vaultId}/credentials",
-            "GET /v1/tenant/vaults/{vaultId}/credentials",
-            "GET /v1/tenant/vaults/{vaultId}/credentials/{credentialId}",
-            "POST /v1/tenant/vaults/{vaultId}/credentials/{credentialId}",
-            "DELETE /v1/tenant/vaults/{vaultId}/credentials/{credentialId}",
-        ],
+        name: "Tool policy",
+        description: "The rules the Tool Gate applies to every MCP and HTTP tool call of every harness: refuse it, hold it for a person's approval, or run it. `admin.toolPolicy`.",
+        operations: ["GET /v1/tenant/tool-policy", "PUT /v1/tenant/tool-policy"],
+    },
+    {
+        name: "Credential coverage",
+        description: "Which secret of an Environment each of an agent's MCP servers and HTTP tools would get, before a session opens. The secrets themselves are written on the Runtime API. `admin.coverage`.",
+        operations: ["POST /v1/tenant/credential-coverage"],
     },
     {
         name: "MCP servers",
-        description: "See a remote MCP server's tools before an agent names it, with the installation vault's credential for its URL: their model names, sizes and annotations, or that it needs a person's sign-in. `admin.mcp`.",
+        description: "See a remote MCP server's tools before an agent names it, with an Environment's credential for its URL: their model names, sizes and annotations, or that it needs a person's sign-in. `admin.mcp`.",
         operations: ["POST /v1/tenant/mcp/preview"],
     },
     {
@@ -265,7 +270,7 @@ const MANAGEMENT_TAGS = [
     },
     {
         name: "Settings",
-        description: "The Tenant's sandbox and artifact settings. `admin.settings`.",
+        description: "The Tenant's sandbox backend, Environment and artifact settings. `admin.settings`.",
         operations: [
             "GET /v1/tenant/sandbox",
             "PUT /v1/tenant/sandbox",
@@ -368,7 +373,7 @@ function documents() {
     built = {
         runtime: document(all, RUNTIME_TAGS, {
             title: "Nylorun Runtime API",
-            description: "For developers: agents, sessions (with AG-UI and A2A), sandboxes and artifacts, through `@nylorun/agents`. Every Tenant serves it on its one URL, beside the Management API (`/openapi/management.json`). Every request sends `Nylorun-Protocol`. Who may call each operation is its `security` and its `x-nylorun-credentials` and `x-nylorun-scopes` (the subject scopes that reach it) fields: an application key (servers) or a trusted issuer's token (browsers and apps).",
+            description: "For developers: agents, sessions (with AG-UI and A2A), Environments and artifacts, through `@nylorun/agents`. Every Tenant serves it on its one URL, beside the Management API (`/openapi/management.json`). Every request sends `Nylorun-Protocol`. Who may call each operation is its `security` and its `x-nylorun-credentials` and `x-nylorun-scopes` (the subject scopes that reach it) fields: an application key (servers) or a trusted issuer's token (browsers and apps).",
         }),
         management: document(all, MANAGEMENT_TAGS, {
             title: "Nylorun Management API",

package/dist/artifacts/disk.d.ts

@@ -0,0 +1,59 @@
+import { type EnvironmentRestore, type EnvironmentSnapshot, type EnvironmentVersions } from "@nylorun/core/contracts";
+import type { Tx } from "../store/types.js";
+import type { TenantContext } from "../tenant/context.js";
+import { assertReaches } from "../tenant/environments.js";
+/** The most entries one version holds (R6 Q11). */
+export declare const DISK_MAX_ENTRIES = 200000;
+/** The most bytes one version's files hold. */
+export declare const DISK_MAX_BYTES: number;
+/** The name of an Environment's disk artifact. */
+export declare const DISK_ARTIFACT_NAME = "disk";
+/**
+ * `POST /v1/environments/{id}/snapshot`: a new version of the Environment's disk, between turns.
+ * A pod that is stopped is started first. An unchanged disk makes no version.
+ */
+export declare function snapshotEnvironment(ctx: TenantContext, id: string, scope: Parameters<typeof assertReaches>[0]): Promise<EnvironmentSnapshot>;
+/**
+ * `POST /v1/environments/{id}/restore`: puts disk version `version` back. A virtual
+ * Environment's workspace is rewritten at once; a pod gets a new volume, seeded from the version
+ * before any turn (`status: pending` until then).
+ */
+export declare function restoreEnvironment(ctx: TenantContext, id: string, scope: Parameters<typeof assertReaches>[0], version: number | "latest"): Promise<EnvironmentRestore>;
+/**
+ * Writes Environment `id`'s pending seed (`disk_seed`) into its disk, once its pod's engine is
+ * connected (or at once for a virtual one), then clears the seed and the lease. Started after a
+ * pod joins, after a virtual Environment is forked, and by the Tenant sweep for a seed whose
+ * lease lapsed. Best effort: a failure leaves the seed for the next try.
+ */
+export declare function runPendingSeed(ctx: TenantContext, id: string): Promise<void>;
+/** Starts the pending seeds whose engine is connected and whose lease lapsed (Tenant sweep). */
+export declare function sweepPendingSeeds(ctx: TenantContext): Promise<void>;
+/**
+ * After a pod Environment was found `lost`: when its disk has a version, it gets a new volume
+ * seeded from the latest one, instead of refusing turns until a reset (R6 Q9: eager).
+ */
+export declare function recoverLostVolume(ctx: TenantContext, id: string): Promise<boolean>;
+/** The disk version a fork starts from (`from` on a create), after the caller's checks. */
+export declare function forkSeedOf(t: Tx, from: {
+    environment: string;
+    version: number | "latest";
+}): Promise<{
+    artifactId: string;
+    version: number;
+}>;
+/** `GET /v1/environments/{id}/versions`: its disk versions, newest first. */
+export declare function environmentVersions(ctx: TenantContext, id: string, scope: Parameters<typeof assertReaches>[0]): Promise<EnvironmentVersions>;
+/**
+ * `DELETE /v1/environments/{id}/versions/{n}`: deletes one disk version, and the stored files no
+ * other version names. Refused while a seed reads it.
+ */
+export declare function deleteEnvironmentVersion(ctx: TenantContext, id: string, scope: Parameters<typeof assertReaches>[0], version: number): Promise<{
+    environmentId: string;
+    version: number;
+    deleted: boolean;
+}>;
+/**
+ * Deletes Environment `id`'s disk artifact with its versions, in the transaction that deletes the
+ * Environment (it holds the row's lock); returns the manifests' keys to delete after commit.
+ */
+export declare function deleteDiskArtifact(ctx: TenantContext, t: Tx, id: string): Promise<string[]>;