@nylorun/runtime 0.24.0-beta → 0.26.0-beta

package/dist/tenant/transcript.d.ts

@@ -4,6 +4,7 @@
  * Payload schemas: `@nylorun/core/contracts` (`parseTranscriptEvent`).
  */
 import type { HostEffect } from "@nylorun/harness/run";
+import type { PluginLabel } from "@nylorun/core/define";
 import type { TOOL_CALL_KINDS, TOOL_CALL_STATUSES } from "@nylorun/core/contracts";
 export type ToolCallStatus = (typeof TOOL_CALL_STATUSES)[number];
 export type ToolCallKind = (typeof TOOL_CALL_KINDS)[number];
@@ -136,6 +137,8 @@ export interface ToolCallFacts {
     readonly status: ToolCallStatus;
     readonly kind?: ToolCallKind;
     readonly server?: string;
+    readonly skill?: string;
+    readonly plugin?: PluginLabel;
     readonly attempts?: number;
     readonly durationMs?: number;
     readonly effectId?: string;
@@ -156,11 +159,12 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     };
     output?: undefined;
     redacted: number;
-    capabilityId: string;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "http" | "mcp" | "platform" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "platform" | "sandbox" | undefined;
     server?: string | undefined;
+    skill?: string | undefined;
+    plugin?: PluginLabel | undefined;
     attempts?: number | undefined;
     durationMs?: number | undefined;
     effectId?: string | undefined;
@@ -176,11 +180,12 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     };
     output?: undefined;
     redacted: number;
-    capabilityId: string;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "http" | "mcp" | "platform" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "platform" | "sandbox" | undefined;
     server?: string | undefined;
+    skill?: string | undefined;
+    plugin?: PluginLabel | undefined;
     attempts?: number | undefined;
     durationMs?: number | undefined;
     effectId?: string | undefined;
@@ -196,11 +201,12 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     };
     output?: undefined;
     redacted?: undefined;
-    capabilityId: string;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "http" | "mcp" | "platform" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "platform" | "sandbox" | undefined;
     server?: string | undefined;
+    skill?: string | undefined;
+    plugin?: PluginLabel | undefined;
     attempts?: number | undefined;
     durationMs?: number | undefined;
     effectId?: string | undefined;
@@ -216,11 +222,12 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     };
     output?: undefined;
     redacted?: undefined;
-    capabilityId: string;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "http" | "mcp" | "platform" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "platform" | "sandbox" | undefined;
     server?: string | undefined;
+    skill?: string | undefined;
+    plugin?: PluginLabel | undefined;
     attempts?: number | undefined;
     durationMs?: number | undefined;
     effectId?: string | undefined;
@@ -231,11 +238,12 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     error?: undefined;
     output: unknown;
     redacted: number;
-    capabilityId: string;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "http" | "mcp" | "platform" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "platform" | "sandbox" | undefined;
     server?: string | undefined;
+    skill?: string | undefined;
+    plugin?: PluginLabel | undefined;
     attempts?: number | undefined;
     durationMs?: number | undefined;
     effectId?: string | undefined;
@@ -246,11 +254,12 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     error?: undefined;
     output: unknown;
     redacted: number;
-    capabilityId: string;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "http" | "mcp" | "platform" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "platform" | "sandbox" | undefined;
     server?: string | undefined;
+    skill?: string | undefined;
+    plugin?: PluginLabel | undefined;
     attempts?: number | undefined;
     durationMs?: number | undefined;
     effectId?: string | undefined;
@@ -261,11 +270,12 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     error?: undefined;
     output: unknown;
     redacted?: undefined;
-    capabilityId: string;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "http" | "mcp" | "platform" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "platform" | "sandbox" | undefined;
     server?: string | undefined;
+    skill?: string | undefined;
+    plugin?: PluginLabel | undefined;
     attempts?: number | undefined;
     durationMs?: number | undefined;
     effectId?: string | undefined;
@@ -276,11 +286,12 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     error?: undefined;
     output: unknown;
     redacted?: undefined;
-    capabilityId: string;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "http" | "mcp" | "platform" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "platform" | "sandbox" | undefined;
     server?: string | undefined;
+    skill?: string | undefined;
+    plugin?: PluginLabel | undefined;
     attempts?: number | undefined;
     durationMs?: number | undefined;
     effectId?: string | undefined;
@@ -298,11 +309,12 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     };
     output?: undefined;
     redacted: number;
-    capabilityId: string;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "http" | "mcp" | "platform" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "platform" | "sandbox" | undefined;
     server?: string | undefined;
+    skill?: string | undefined;
+    plugin?: PluginLabel | undefined;
     attempts?: number | undefined;
     durationMs?: number | undefined;
     effectId?: string | undefined;
@@ -320,11 +332,12 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     };
     output?: undefined;
     redacted: number;
-    capabilityId: string;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "http" | "mcp" | "platform" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "platform" | "sandbox" | undefined;
     server?: string | undefined;
+    skill?: string | undefined;
+    plugin?: PluginLabel | undefined;
     attempts?: number | undefined;
     durationMs?: number | undefined;
     effectId?: string | undefined;
@@ -342,11 +355,12 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     };
     output?: undefined;
     redacted?: undefined;
-    capabilityId: string;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "http" | "mcp" | "platform" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "platform" | "sandbox" | undefined;
     server?: string | undefined;
+    skill?: string | undefined;
+    plugin?: PluginLabel | undefined;
     attempts?: number | undefined;
     durationMs?: number | undefined;
     effectId?: string | undefined;
@@ -364,11 +378,12 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     };
     output?: undefined;
     redacted?: undefined;
-    capabilityId: string;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "http" | "mcp" | "platform" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "platform" | "sandbox" | undefined;
     server?: string | undefined;
+    skill?: string | undefined;
+    plugin?: PluginLabel | undefined;
     attempts?: number | undefined;
     durationMs?: number | undefined;
     effectId?: string | undefined;
@@ -381,11 +396,12 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     error?: undefined;
     output: unknown;
     redacted: number;
-    capabilityId: string;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "http" | "mcp" | "platform" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "platform" | "sandbox" | undefined;
     server?: string | undefined;
+    skill?: string | undefined;
+    plugin?: PluginLabel | undefined;
     attempts?: number | undefined;
     durationMs?: number | undefined;
     effectId?: string | undefined;
@@ -398,11 +414,12 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     error?: undefined;
     output: unknown;
     redacted: number;
-    capabilityId: string;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "http" | "mcp" | "platform" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "platform" | "sandbox" | undefined;
     server?: string | undefined;
+    skill?: string | undefined;
+    plugin?: PluginLabel | undefined;
     attempts?: number | undefined;
     durationMs?: number | undefined;
     effectId?: string | undefined;
@@ -415,11 +432,12 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     error?: undefined;
     output: unknown;
     redacted?: undefined;
-    capabilityId: string;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "http" | "mcp" | "platform" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "platform" | "sandbox" | undefined;
     server?: string | undefined;
+    skill?: string | undefined;
+    plugin?: PluginLabel | undefined;
     attempts?: number | undefined;
     durationMs?: number | undefined;
     effectId?: string | undefined;
@@ -432,11 +450,12 @@ export declare function toolCompleted(request: HostEffect, value: unknown, facts
     error?: undefined;
     output: unknown;
     redacted?: undefined;
-    capabilityId: string;
     toolName: string;
     status?: "cancelled" | "completed" | "failed" | undefined;
-    kind?: "http" | "mcp" | "platform" | "sandbox" | undefined;
+    kind?: "harness" | "http" | "mcp" | "platform" | "sandbox" | undefined;
     server?: string | undefined;
+    skill?: string | undefined;
+    plugin?: PluginLabel | undefined;
     attempts?: number | undefined;
     durationMs?: number | undefined;
     effectId?: string | undefined;

package/dist/tenant/transcript.js

@@ -158,13 +158,14 @@ export function toolCompleted(request, value, facts) {
         : {};
     return {
         ...ids,
-        capabilityId: request.capabilityId,
         toolName: request.toolName,
         ...(facts
             ? {
                 status: facts.status,
                 ...(facts.kind === undefined ? {} : { kind: facts.kind }),
                 ...(facts.server === undefined ? {} : { server: facts.server }),
+                ...(facts.skill === undefined ? {} : { skill: facts.skill }),
+                ...(facts.plugin === undefined ? {} : { plugin: facts.plugin }),
                 ...(facts.attempts === undefined ? {} : { attempts: facts.attempts }),
                 ...(facts.durationMs === undefined ? {} : { durationMs: facts.durationMs }),
                 ...(facts.effectId === undefined ? {} : { effectId: facts.effectId }),

package/dist/tenant/types.d.ts

@@ -75,7 +75,7 @@ export interface TenantConfig {
      */
     flowEnv?: Readonly<Record<string, string | undefined>>;
     /**
-     * The trusted issuers whose JWTs the Tenant API accepts (Host feature `trusted-issuers`), from
+     * The trusted issuers whose JWTs the Runtime API accepts (Host feature `trusted-issuers`), from
      * the identity file (`NYLORUN_IDENTITY_FILE`). Absent: none.
      */
     issuers?: import("./issuers.js").TrustedIssuers;
@@ -107,7 +107,7 @@ export interface TenantHandle {
     /** The handlers Durable Session Execution calls for this Tenant (`worker.ts`). */
     readonly worker?: TenantWorker;
     /**
-     * A Tenant API request whose headers the Host has validated: authenticates, authorizes,
+     * A Runtime or Management API request whose headers the Host has validated: authenticates, authorizes,
      * dispatches. A response already written to `node.outgoing` is `RESPONSE_ALREADY_SENT`.
      */
     fetch(request: Request, node: NodeBindings): Promise<Response>;

package/dist/traces/ids.d.ts

@@ -3,7 +3,6 @@ export type TraceKey = Buffer;
 export declare function traceIdOf(key: TraceKey, tenantId: string, sessionId: string, turnId: string): string;
 export declare function turnSpanOf(key: TraceKey, turnId: string): string;
 export declare function effectSpanOf(key: TraceKey, effectId: string): string;
-export declare function egressSpanOf(key: TraceKey, sessionId: string, seq: number): string;
 export declare function eventSpanOf(key: TraceKey, sessionId: string, seq: number): string;
 /** W3C trace context (R7.4): `traceparent`, and `tracestate` when the caller sent one. */
 export interface TraceContext {

package/dist/traces/ids.js

@@ -8,7 +8,6 @@
  *   (R7.4): then that trace id.
  * - **turn span**: `span|turn|<turn>`; every crossing's span is its child.
  * - **effect span**: `span|effect|<effect id>`, for a model or tool call or a flow stage.
- * - **egress span**: `span|egress|<session>|<seq>`, for one `egress.connection` row.
  * - **event span**: `span|event|<session>|<seq>`, for a marker or a row without an effect id.
  */
 import { createHmac } from "node:crypto";
@@ -26,9 +25,6 @@ export function turnSpanOf(key, turnId) {
 export function effectSpanOf(key, effectId) {
     return hmacHex(key, `span|effect|${effectId}`, 8);
 }
-export function egressSpanOf(key, sessionId, seq) {
-    return hmacHex(key, `span|egress|${sessionId}|${seq}`, 8);
-}
 export function eventSpanOf(key, sessionId, seq) {
     return hmacHex(key, `span|event|${sessionId}|${seq}`, 8);
 }

package/dist/traces/map.d.ts

@@ -10,7 +10,6 @@
  * | `tool.completed` | `execute_tool {toolName}` (INTERNAL) |
  * | `node.completed` | `execute_tool {key}`, a flow's HTTP stage (INTERNAL) |
  * | `effect.uncertain` | the call's span, with an error status |
- * | `egress.connection` | `CONNECT {host}` (CLIENT) |
  * | `turn.paused`, `command.approve`, `command.respond` | a marker with no length |
  *
  * Every other row, and every row without a turn, makes none. Every child's parent is the turn's
@@ -18,7 +17,8 @@
  *
  * Timing: a span with a gate's own measurement (`gate`, R7.1) is that measurement; any other ends
  * at the row's time and starts `durationMs` before it (the journal's window, exported as
- * `nylorun.effect.window_ms`). An egress span is the gate's: `startedAt` plus `durationMs`.
+ * `nylorun.effect.window_ms`). Egress has no span: a connection is the Environment's, not a
+ * turn's (D67), and is read from the Environment's events.
  *
  * Attribute names follow the OTel GenAI conventions at `GENAI_SEMCONV` (still in Development
  * status), recorded on the resource as `nylorun.semconv.genai`; the rest are `nylorun.*`. A span

package/dist/traces/map.js

@@ -1,4 +1,4 @@
-import { effectSpanOf, egressSpanOf, eventSpanOf, parseTraceparent, traceIdOf, turnSpanOf } from "./ids.js";
+import { effectSpanOf, eventSpanOf, parseTraceparent, traceIdOf, turnSpanOf } from "./ids.js";
 /** The commit of open-telemetry/semantic-conventions-genai whose attribute names spans use. */
 export const GENAI_SEMCONV = "open-telemetry/semantic-conventions-genai@6fd0d763a092db245a54104fc1124031eb3c51d2";
 /**
@@ -188,34 +188,6 @@ export function spanOf(row, turn, settings) {
                 status: errorStatus(content("errors", p.message)),
             };
         }
-        case "egress.connection": {
-            const refused = p.outcome === "refused";
-            const started = Date.parse(String(p.startedAt));
-            const attributes = base
-                .str("server.address", p.host)
-                .int("server.port", p.port)
-                .str("nylorun.environment.id", p.environmentId)
-                .str("nylorun.egress.outcome", p.outcome)
-                .str("nylorun.egress.mode", p.mode)
-                .bool("nylorun.egress.credential_bound", p.credentialBound)
-                .strings("nylorun.egress.credential_ids", p.credentialIds)
-                .int("nylorun.egress.requests", p.requests)
-                .int("nylorun.egress.bytes_up", p.bytesUp)
-                .int("nylorun.egress.bytes_down", p.bytesDown)
-                .int("nylorun.egress.status", p.status)
-                .str("error.type", refused ? (p.reason ?? "refused") : undefined);
-            const times = Number.isFinite(started)
-                ? { start: started, end: started + Math.max(0, Math.round(Number(p.durationMs) || 0)) }
-                : undefined;
-            return {
-                ...child(egressSpanOf(settings.key, row.sessionId, row.seq), `CONNECT ${String(p.host)}`, SPAN_KIND.client),
-                ...(times
-                    ? { startTimeUnixNano: nanos(times.start), endTimeUnixNano: nanos(times.end) }
-                    : window(row.time, undefined)),
-                attributes: attributes.list,
-                status: refused ? errorStatus(undefined) : { code: STATUS.unset },
-            };
-        }
         case "turn.paused":
         case "command.approve":
         case "command.respond": {

package/dist/vault/coverage.js

@@ -18,19 +18,17 @@ export function credentialNeeds(manifest) {
     };
     const owner = (agentId) => (agentId === undefined ? {} : { agentId });
     const agent = (manifest, agentId) => {
-        for (const capability of manifest.capabilities) {
-            for (const server of Object.values(capability.mcpServers ?? {}))
-                add({ kind: "mcp", ...owner(agentId), name: server.name, serverName: server.name, url: server.url });
-            for (const tool of capability.tools ?? [])
-                if (tool.http?.credential !== undefined)
-                    add({
-                        kind: "http",
-                        ...owner(agentId),
-                        name: tool.name,
-                        serverName: tool.http.credential,
-                        url: tool.http.url,
-                    });
-        }
+        for (const tool of manifest.tools ?? [])
+            if (tool.http?.credential !== undefined)
+                add({
+                    kind: "http",
+                    ...owner(agentId),
+                    name: tool.name,
+                    serverName: tool.http.credential,
+                    url: tool.http.url,
+                });
+        for (const server of Object.values(manifest.mcpServers ?? {}))
+            add({ kind: "mcp", ...owner(agentId), name: server.name, serverName: server.name, url: server.url });
         for (const child of delegatesOf(manifest))
             agent(child.manifest, child.manifest.id);
         for (const child of flowDelegatesOf(manifest))

package/dist/vault/host-model.d.ts

@@ -17,7 +17,10 @@ export declare class HostModelVault {
     private readonly store;
     private readonly kek;
     constructor(options: HostModelVaultOptions);
-    /** Reads the active host model secret. Decrypts after the read commits. */
+    /**
+     * Reads the active host model secret, with the inputs the operator added to catalog models
+     * (protocol 12). Decrypts after the read commits.
+     */
     readHostModel(): Promise<HostModelSecret | undefined>;
     /** Replaces the active host model's secret, keeping its binding. */
     updateHostCredential(credential: {

package/dist/vault/host-model.js

@@ -1,3 +1,4 @@
+import { readAddedInputs } from "../tenant/model-setting.js";
 import { encryptSecret } from "./crypto.js";
 import { VaultError } from "./error.js";
 import { activeHostCredentialRow, HOST_VAULT_ID, hostModelAad, modelBinding, readHostPayload, } from "./service.js";
@@ -8,9 +9,15 @@ export class HostModelVault {
         this.store = options.store;
         this.kek = options.kek;
     }
-    /** Reads the active host model secret. Decrypts after the read commits. */
+    /**
+     * Reads the active host model secret, with the inputs the operator added to catalog models
+     * (protocol 12). Decrypts after the read commits.
+     */
     async readHostModel() {
-        const row = await this.store.tx((t) => activeHostCredentialRow(t));
+        const { row, addedInputs } = await this.store.tx(async (t) => ({
+            row: await activeHostCredentialRow(t),
+            addedInputs: await readAddedInputs(t),
+        }));
         if (!row)
             return undefined;
         const binding = modelBinding(row);
@@ -27,6 +34,7 @@ export class HostModelVault {
             model: binding.model,
             ...(binding.baseUrl ? { baseUrl: binding.baseUrl } : {}),
             ...(binding.settings ? { settings: binding.settings } : {}),
+            addedInputs,
             authType: binding.authType,
             credential,
         };

package/dist/vault/service.d.ts

@@ -1,4 +1,4 @@
-import type { CredentialCoverage, CredentialCoverageRequest, CredentialIdentity, EnvironmentSecretView, HostModelProviderInfo, HostModelView, PutEnvironmentSecretRequest, PutHostModelRequest, CustomModelSettings, SelectHostModelRequest } from "@nylorun/core/contracts";
+import type { CredentialCoverage, CredentialCoverageRequest, CredentialIdentity, EnvironmentSecretView, HostModelProviderInfo, HostModelView, PutEnvironmentSecretRequest, PutHostModelRequest, CustomModelSettings, ModelInput, SelectHostModelRequest } from "@nylorun/core/contracts";
 import type { AgentManifest, WorkflowManifest } from "@nylorun/core/define";
 import type { SessionStore, Tx, VaultCredentialRow } from "../store/types.js";
 export declare const HOST_VAULT_ID = "host";
@@ -6,8 +6,10 @@ export type HostModelSecret = {
     provider: string;
     model: string;
     baseUrl?: string;
-    /** A custom endpoint's window, output limit, reasoning and pi-ai compat (Model Calls §7). */
+    /** A custom endpoint's window, output limit, reasoning, inputs and pi-ai compat (Model Calls §7). */
     settings?: CustomModelSettings;
+    /** The inputs the operator added to catalog models, by `<provider>/<model>` (protocol 12). */
+    addedInputs?: Readonly<Record<string, readonly ModelInput[]>>;
     authType: "api_key" | "oauth";
     credential: {
         type: "api_key" | "oauth";
@@ -19,6 +21,28 @@ export type HostModelSecret = {
         [key: string]: unknown;
     };
 };
+type UserCredentialRow = VaultCredentialRow & {
+    type: "bearer" | "headers" | "environment_secret" | "environment_variable";
+};
+/**
+ * A fork's secrets sealed for its new vault (`sealEnvironmentSecretCopies`): each copy's
+ * ciphertext, base64 so it crosses the keys service's JSON, and what about it is not secret.
+ */
+export interface SealedSecretCopies {
+    readonly copies: readonly {
+        readonly id: string;
+        readonly name: string;
+        readonly type: UserCredentialRow["type"];
+        readonly bindingJson: string;
+        readonly expiresAt: string | null;
+        readonly kekId: string;
+        readonly nonce: string;
+        readonly ciphertext: string;
+        readonly wrappedDek: string;
+    }[];
+    /** Names left behind: no slot of the fork declares them, or their slot cannot take the value. */
+    readonly dropped: readonly string[];
+}
 export type AuthorizeResult = {
     status: "unauthenticated";
     url: string;
@@ -47,14 +71,35 @@ export declare class VaultService {
     private readonly store;
     private readonly kek;
     constructor(options: VaultServiceOptions);
-    /** Creates Environment `environmentId`'s vault (D56), in the transaction that creates it. */
-    createEnvironmentVault(t: Tx, environmentId: string, actor: string): Promise<void>;
+    /**
+     * Creates Environment `environmentId`'s vault (D56), in the transaction that creates it; answers
+     * its id, `id` when given (a fork's, whose secrets were sealed for it first).
+     */
+    createEnvironmentVault(t: Tx, environmentId: string, actor: string, id?: string): Promise<string>;
     /**
      * Deletes Environment `environmentId`'s vault and its credentials, with their audit rows, in
      * the transaction that deletes the Environment: no release or tool call finds them after it
      * commits.
      */
     deleteEnvironmentVault(t: Tx, environmentId: string, actor: string): Promise<void>;
+    /**
+     * Seals Environment `from`'s secrets again for vault `vaultId`, a fork's new vault (Q15): each
+     * value is unsealed and sealed under the new vault's and credential's ids, which its AAD binds.
+     * Needs the vault key, so callers reach it through `Keys`; it reads `from` in its own
+     * transaction and writes nothing. With `slots` (what the fork runs declares secret slots, D64),
+     * only the names it declares are sealed, each with its slot's binding; a value the slot's type
+     * cannot take is left behind. The fork's transaction inserts the copies
+     * (`insertEnvironmentSecretCopies`).
+     */
+    sealEnvironmentSecretCopies(from: string, vaultId: string, slots?: Readonly<Record<string, Record<string, unknown>>> | null): Promise<SealedSecretCopies>;
+    /**
+     * Inserts a fork's sealed copies (`sealEnvironmentSecretCopies`) into vault `vaultId`, in the
+     * transaction that creates the fork, with an audit row each naming `from`. Reads no secret.
+     */
+    insertEnvironmentSecretCopies(t: Tx, vaultId: string, from: string, actor: string, sealed: SealedSecretCopies): Promise<{
+        copied: string[];
+        dropped: string[];
+    }>;
     /**
      * `PUT /v1/environments/{id}/secrets/{name}`: creates or replaces one credential. The same
      * name and type keeps the credential's id and re-seals its value and binding; another type