@nylorun/runtime 0.24.0-beta → 0.25.0-beta

package/dist/keys/keys.d.ts

@@ -2,7 +2,7 @@ import type { EnvironmentSecretView, HostModelView, McpPreview, McpPreviewReques
 import type { SessionStore } from "../store/types.js";
 import type { OutboundPolicy } from "../tenant/outbound.js";
 import { type SigningKeys } from "../tenant/signing-keys.js";
-import type { VaultService } from "../vault/service.js";
+import type { SealedSecretCopies, VaultService } from "../vault/service.js";
 /** One JWT to sign: its `typ` and every claim, `iss`, `aud`, `sub`, `iat`, `exp` and `jti` included. */
 export interface SignRequest {
     readonly typ: string;
@@ -18,6 +18,13 @@ export interface Keys {
     putEnvironmentSecret(environmentId: string, name: string, body: PutEnvironmentSecretRequest, actor: string): Promise<EnvironmentSecretView>;
     putHostModel(body: PutHostModelRequest): Promise<HostModelView>;
     selectHostModel(body: SelectHostModelRequest): Promise<HostModelView>;
+    /**
+     * Environment `from`'s secrets sealed again for a fork's new vault `vaultId`, limited to
+     * `slots` when given (`VaultService.sealEnvironmentSecretCopies`, Q15). Writes nothing: the
+     * fork's transaction inserts the copies; call it before that transaction opens. `null`, not
+     * `undefined`, crosses the wire.
+     */
+    sealEnvironmentSecretCopies(from: string, vaultId: string, slots: Readonly<Record<string, Record<string, unknown>>> | null): Promise<SealedSecretCopies>;
     /** Signs with the current key, creating the Tenant's keys if it has none. */
     sign(request: SignRequest): Promise<Signed>;
     /** Rotates the signing keys (`SigningKeys.rotate`); 409 while the previous key may verify live tokens. */
@@ -41,7 +48,7 @@ export interface Keys {
     signEgressLeaf(host: string, publicKey: string): Promise<string>;
 }
 /** The operations, by the name the HTTP route carries. */
-export declare const KEYS_OPERATIONS: readonly ["putEnvironmentSecret", "putHostModel", "selectHostModel", "sign", "rotateSigningKeys", "ensureSigningKeys", "previewMcp", "egressCa", "signEgressLeaf"];
+export declare const KEYS_OPERATIONS: readonly ["putEnvironmentSecret", "putHostModel", "selectHostModel", "sealEnvironmentSecretCopies", "sign", "rotateSigningKeys", "ensureSigningKeys", "previewMcp", "egressCa", "signEgressLeaf"];
 export type KeysOperation = (typeof KEYS_OPERATIONS)[number];
 export interface InProcessKeysOptions {
     readonly store: SessionStore;

package/dist/keys/keys.js

@@ -1,7 +1,8 @@
 /**
  * The keys seam (blueprint §14, F4.2): everything that needs the vault key. Vault writes that
  * touch a secret (writing an Environment's secret, setting and selecting the host model;
- * rotation and selection decrypt the old secret first) and all token signing (capability
+ * rotation and selection decrypt the old secret first; sealing a fork's copies of its source's
+ * secrets, which the fork's transaction then inserts) and all token signing (capability
  * links, run and host tokens, signing-key rotation) run here, whole, so the process that calls them never
  * holds the key or a private signing key.
  *
@@ -21,6 +22,7 @@ export const KEYS_OPERATIONS = [
     "putEnvironmentSecret",
     "putHostModel",
     "selectHostModel",
+    "sealEnvironmentSecretCopies",
     "sign",
     "rotateSigningKeys",
     "ensureSigningKeys",
@@ -35,6 +37,7 @@ export function inProcessKeys(options) {
         putEnvironmentSecret: (environmentId, name, body, actor) => vault.putEnvironmentSecret(environmentId, name, body, actor),
         putHostModel: (body) => vault.putHostModel(body),
         selectHostModel: (body) => vault.selectHostModel(body),
+        sealEnvironmentSecretCopies: (from, vaultId, slots) => vault.sealEnvironmentSecretCopies(from, vaultId, slots),
         async sign(request) {
             const key = kek();
             const row = await store.tx((t) => signingKeys.ensure(t, key));