@nylorun/runtime 0.25.0-beta → 0.26.0-beta

package/CHANGELOG.md

@@ -1,5 +1,44 @@
 # Changelog
 
+## 0.26.0-beta
+
+### Minor Changes
+
+- a0cf8b2: **HTTP tools take `GET` and `DELETE`, and URL path parameters.**
+
+  - `method` is `GET`, `POST` (default), `PUT`, `PATCH` or `DELETE`. `POST`, `PUT` and `PATCH` send the input as the JSON body, as before. `GET` and `DELETE` send no body: the input becomes the query string, after any query string written in the URL. An array repeats its name (`tag=a&tag=b`) and a `null` is left out.
+  - The URL's path may name input fields as `{field}`, as in `https://api.example.com/orders/{orderId}`. Each value is percent-encoded into the path and is not sent again in the body or query string. A value that is empty, `.` or `..`, or not a string, number or boolean is refused before the call is sent (`tool.invalid-input`).
+  - `http()` and the manifest contract check a tool against its input schema. Each `{field}` must be a required scalar property. For `GET` and `DELETE`, a property must not be an object and must not repeat a query parameter the URL already sets.
+  - An HTTP verifier still takes only `POST`, `PUT` or `PATCH` and a URL without `{field}` parameters, because it is sent `{ input, output, iteration }` as a body. A credential with `via` cannot serve a tool with `{field}` parameters (`http.credential`).
+  - core exports `httpToolRequest`, which maps a call's input to the request, and `httpPathParameters`. The Runtime's outbound `post()` is now `send()`, which can send a request without a body.
+
+### Patch Changes
+
+- 620072d: **Docs and schemas match what the CLI and the Runtime do.**
+
+  - `@nylorun/core`: the environment manifest's JSON Schema (`@nylorun/core/schemas/environment-manifest.json`) takes the CLI's `{ path, from }` `files` entry, so an editor no longer flags a manifest that `nylorun environments manifests save` accepts. The Runtime's own schema is unchanged: the CLI turns the folder into `{ path, files }` before saving. `manifest_changed` says to save without `If-Match` (`--if-match`, `ifMatch`); no command takes `--force`.
+  - Tool names, skill names and MCP server names are each unique within their kind, as the builder and the Runtime check; a tool, a skill and a server may share a name. The docs said they were unique across kinds.
+  - `harness_mismatch` is described as what it is since protocol 14: an Environment's harness is fixed for its life (fork onto a manifest version to run another), and a session's turn is refused when its Environment id was deleted and made again with another harness, or an Environment changed in place before protocol 14 applies that change.
+  - `@nylorun/agents`: the README names `nylorun environments list | delete`, not `nylorun local sandbox ls | rm`.
+  - MIGRATION.md no longer offers a tool's `approval`, removed in protocol 11, as a replacement for step middleware.
+
+- 71edf68: egress-gate's `environment.egress` names the turns its one read saw as the connection opened: the read starts as the name resolves and the tunnel never waits for it, as the docs now say. The egress-gate event test waits for that read before it moves a turn, so it no longer fails on a slow runner.
+- 000ff75: **READMEs and help text match protocol 14.**
+
+  - `nylorun --help` lists `environments fork`, `manifests` and `delete-version`. The package description no longer offers `nylo` as the Runtime client, and the README says nylorun depends on `@nylorun/agents` too.
+  - The READMEs name the current commands: `nylorun tenant keys`, `nylorun tenant mcp inspect`, `nylorun local logs` and `nylorun local reset`. `@nylorun/admin` says it speaks protocol 14.
+  - `@nylorun/agents`: a lost MCP or HTTP tool call is sent again with its key, then fails to the model as `tool.interrupted` (it is not left `uncertain`). Every manifest is v7. A2A takes `raw` files. A delegated agent cannot pause.
+  - `@nylorun/runtime`: the README describes protocol 14, `PUT /v1/sessions/{id}` says it answers an identical session (vaults are no longer attached), and the database-layout error names `nylorun local reset`.
+  - `@nylorun/create-agent`: `nylorun start` writes the project's keys (no key is derived any more).
+
+- Pin core to the tested release.
+- Pin harness to the tested release.
+- Updated dependencies [620072d]
+- Updated dependencies [a0cf8b2]
+- Updated dependencies
+  - @nylorun/core@0.22.0-beta
+  - @nylorun/harness@0.27.1-beta
+
 ## 0.25.0-beta
 
 ### Minor Changes

package/README.md

@@ -172,7 +172,13 @@ are refused from browsers before they are looked up. The Runtime sends no CORS h
 `OPTIONS` with `204` and `Allow` only: the operator's reverse proxy answers preflights
 ([DEPLOYMENT.md](../../guides/DEPLOYMENT.md#calling-the-runtime-from-browsers-and-apps)). Missing or
 unsupported protocol → `426` before authentication, unless the request sends neither
-`Nylorun-Protocol` nor `Authorization` (the Host serves protocol 13 only; protocol 13 makes the
+`Nylorun-Protocol` nor `Authorization` (the Host serves protocol 14 only; protocol 14 adds
+environment manifests (`/v1/environment-manifests/{name}`): an Environment is made from one
+version and never changes what it runs (a new version reaches it through
+`POST /v1/environments/{id}/fork`), a manifest's `secrets` declare slots and an agent's
+`requires` is checked when a session opens; sessions on one Environment run their turns in
+parallel, and egress connections are `environment.egress` events on the Environment's stream,
+in no session log or trace; protocol 13 makes the
 manifest flat, manifest 7: no `capabilities`, tools known by name, the Runtime's own tools in the
 pinned manifest's `runtime` block and no `capabilityId` on events, tool call rows or the Harness
 API, now 3; it closes every session opened before it; protocol 12 adds
@@ -268,7 +274,7 @@ stage) is refused. Your services are reached as tools: HTTP tools, POSTed from t
 so their URLs must be reachable from it, and remote MCP servers. Each URL gets a
 credential in the vault of the Environment a session names (`PUT
 /v1/environments/{id}/secrets/{name}`), the operator previews an MCP server's tools
-(`nylorun mcp inspect --environment <id>`),
+(`nylorun tenant mcp inspect --environment <id>`),
 and the manifest says which tools are enabled or deferred
 ([DEPLOYMENT.md](../../guides/DEPLOYMENT.md#mcp-servers-and-http-tools)). Which calls wait for a
 person, or are refused, is the Tenant's tool policy
@@ -315,7 +321,7 @@ the Project link (outside a project it runs the Tenant `default`); the project's
 | `403 key_role_mismatch` | The key belongs to the other API: use a management key on `/v1/tenant/*` (`@nylorun/admin`) and an application key everywhere else (`@nylorun/agents`) |
 | `503` for a Tenant | Postgres or Restate is unreachable; `GET /ready` names which |
 | Port in use | Change `NYLORUN_PORT` in `~/.nylorun/tenants/<name>/docker/.env` and run `nylorun start` |
-| Logs | `nylorun logs runtime` |
+| Logs | `nylorun local logs runtime` |
 
 Definitions have no `agent.run()`; applications use `@nylorun/agents`.
 

package/dist/api/http/app.d.ts

@@ -1,5 +1,5 @@
 /**
- * The Tenant API as a Hono app: one for every open Tenant, which arrives with each request as
+ * The Runtime and Management APIs as one Hono app: one for every open Tenant, which arrives with each request as
  * the `tenant` binding. Every route is declared once (`define.ts`) in `routes/`, `../ag-ui/`
  * and `../a2a/`. A request no route matches exactly is authenticated like any other, then
  * answered `404 Route not found`.
@@ -18,7 +18,7 @@ export type TenantEnv = {
         scope: AuthScope;
     };
 };
-/** The Tenant API, built on first use. */
+/** The Runtime and Management APIs' app, built on first use. */
 export declare function tenantApi(): OpenAPIHono<TenantEnv>;
 /** Who may call `method` on a Tenant path (its decoded segments), if it is a route. */
 export declare function findTenantRoute(method: string, segments: readonly string[]): RouteAccess | undefined;

package/dist/api/http/app.js

@@ -1,5 +1,5 @@
 /**
- * The Tenant API as a Hono app: one for every open Tenant, which arrives with each request as
+ * The Runtime and Management APIs as one Hono app: one for every open Tenant, which arrives with each request as
  * the `tenant` binding. Every route is declared once (`define.ts`) in `routes/`, `../ag-ui/`
  * and `../a2a/`. A request no route matches exactly is authenticated like any other, then
  * answered `404 Route not found`.
@@ -23,7 +23,7 @@ import { tenantRoutes } from "./routes/tenant.js";
 import { coverageRoutes } from "./routes/coverage.js";
 import { mcpRoutes } from "./routes/mcp.js";
 let app;
-/** The Tenant API, built on first use. */
+/** The Runtime and Management APIs' app, built on first use. */
 export function tenantApi() {
     return (app ??= build());
 }

package/dist/api/http/define.d.ts

@@ -1,5 +1,5 @@
 /**
- * How a Tenant API route is declared: once, with who may call it, for serving and for the
+ * How a Runtime or Management API route is declared: once, with who may call it, for serving and for the
  * OpenAPI document.
  *
  * `RouteAccess` says which credentials a route takes and which subject scopes reach it: the one

package/dist/api/http/respond.js

@@ -1,5 +1,5 @@
 /**
- * How the Tenant API answers: JSON with an explicit length, and the one mapping from what a
+ * How the Runtime and Management APIs answer: JSON with an explicit length, and the one mapping from what a
  * route throws to the rejection a client sees. The Hono routes and the router they replace
  * (`routes.ts`) both answer through here, so a route answers the same wherever it runs.
  */

package/dist/api/http/routes/sessions.js

@@ -121,7 +121,7 @@ export function sessionRoutes(api) {
         path: "/v1/sessions/{sessionId}",
         tags: ["Sessions"],
         summary: "Open a session",
-        description: "Creates the session, or re-attaches vaults to an identical one. Its sandbox is chosen now and fixed for its life.",
+        description: "Creates the session, or answers the one already opened with the same agent, owner, info and Environment. Its Environment (its sandbox and vault) is chosen now and fixed for its life.",
         request: { params: sessionId, body: body(PutSessionRequest) },
         responses: {
             200: json(SessionView, "The session"),

package/dist/gates/egress.js

@@ -27,8 +27,9 @@
  * Every connection to a named host on a live token is recorded once (R7.3, D67), when it closes
  * or at once when the gate refuses it, as `environment.egress` on the Environment's own stream:
  * the connection is the Environment's, since its token names the pod and turns run in parallel
- * (D66). `runningTurns` lists the turns active on the Environment as it opened (read as the name
- * resolves), as context and never as an owner. Host, port, outcome, bytes, duration and, for a
+ * (D66). `runningTurns` lists the turns active on the Environment as it opened, as context and
+ * never as an owner: one read, started as the name resolves and never waited for, so a turn that
+ * moves while it is in flight may show either way. Host, port, outcome, bytes, duration and, for a
  * credential host, the request count and credential ids; never a header value, a path or a body. A refusal
  * before that (no token, a stale one, no `host:port`) stays a log line, and a client that hangs up
  * before the gate answers leaves nothing. A write never holds the tunnel up, and a failed one is
@@ -260,7 +261,8 @@ export async function startEgressGate(options) {
             return refuse(403, "not_a_host_name", { sandboxId }, `${host} is not a host name; IP literals are refused`);
         if (!egressAllows(host, sandbox.allow))
             return refuse(403, "host_not_allowed", { sandboxId }, `${host} is not in this sandbox's network.allow`);
-        // The turns running on the Environment as the connection opens, read while the name resolves.
+        // The turns running on the Environment as the connection opens: the read starts as the
+        // name resolves, and the 200 does not wait for it.
         record.opened();
         let mine = open.get(sandboxId);
         if (!mine)

package/dist/gates/http-tool.js

@@ -3,8 +3,10 @@
  * The loop names the tool; the gate finds its URL, method and credential in the session's pinned
  * manifest, as it finds a remote MCP server, so the loop never chooses a URL or a credential.
  *
- * `callHttpTarget` is the request and its answer, for any declared HTTP target: the input as a
- * JSON body under the Host's address policy (`tenant/outbound.ts`), a 2xx answer as the output
+ * `callHttpTarget` is the request and its answer, for any declared HTTP target: the input as
+ * core's `httpToolRequest` maps it (path parameters in the URL, the rest as a JSON body or, for
+ * `GET` and `DELETE`, the query string) under the Host's address policy (`tenant/outbound.ts`),
+ * a 2xx answer as the output
  * (JSON, or text when the answer is not JSON and no output schema asks for JSON), and every other
  * answer, a timeout or a refused address as a failed outcome the model sees. `runHttpTool` adds
  * what a tool call needs: the declaration, the vault credential and the identity headers.
@@ -14,9 +16,9 @@
  * `Nylorun-Agent-Id` is the flow agent's.
  */
 import { AGENT_ID_HEADER, SESSION_ID_HEADER, TURN_ID_HEADER, } from "@nylorun/core/compatibility";
-import { HTTP_TOOL_DEFAULT_TIMEOUT_MS, delegateManifest, flowHttpTarget, isWorkflowManifest, schemaFromJSON, } from "@nylorun/core/define";
+import { HTTP_TOOL_DEFAULT_TIMEOUT_MS, delegateManifest, flowHttpTarget, httpPathParameters, httpToolRequest, isWorkflowManifest, schemaFromJSON, } from "@nylorun/core/define";
 import { scrubValues } from "../redact.js";
-import { MAX_RESPONSE_BYTES, post } from "../tenant/outbound.js";
+import { MAX_RESPONSE_BYTES, send } from "../tenant/outbound.js";
 import { credentialSecrets } from "../vault/headers.js";
 /** How much of a failed answer's body the model sees. */
 export const HTTP_ERROR_BODY_CHARS = 2_000;
@@ -61,11 +63,14 @@ export function httpToolRefOf(request) {
  * the request is an outcome. Rejects only when `signal` aborts, with its reason.
  */
 export async function callHttpTarget(target, input, options) {
+    const request = httpToolRequest(target, input);
+    if ("issue" in request)
+        return failed("tool.invalid-input", request.issue);
     const timeoutMs = target.timeoutMs ?? HTTP_TOOL_DEFAULT_TIMEOUT_MS;
     const timeout = AbortSignal.timeout(timeoutMs);
-    const result = await post(target.url, JSON.stringify(input ?? {}), { ...options.headers }, {
+    const result = await send(request.url, request.body, { ...options.headers }, {
         policy: options.policy,
-        method: target.method ?? "POST",
+        method: request.method,
         signal: AbortSignal.any([options.signal, timeout]),
     });
     if (options.signal.aborted)
@@ -170,7 +175,10 @@ export async function runHttpTool(tenant, call, options) {
                 return failed("http.credential", `The session's Environment holds no credential '${http.credential}' for ${authorized.url}`);
             credential = authorized.headers;
             identity = authorized.identity;
-            // A credential with `via` sends the call there, a gateway (R2b C2, Q9).
+            // A credential with `via` sends the call there, a gateway (R2b C2, Q9): to its one URL, so
+            // it has no place for the tool's URL parameters.
+            if (authorized.via !== undefined && httpPathParameters(http.url).length > 0)
+                return failed("http.credential", `The credential '${http.credential}' sends calls to its via URL, which cannot take the tool's {field} URL parameters`);
             if (authorized.via !== undefined)
                 target = { ...http, url: authorized.via };
         }

package/dist/keys/contract.d.ts

@@ -4,7 +4,7 @@
  * gates token. Internal: only core calls it, so it is not in the published OpenAPI documents.
  *
  * `200 {result}` when the operation succeeded, `200 {error}` when it refused: a vault error or
- * a Tenant API error with its status, code and details, so the route that called it answers
+ * a Runtime or Management API error with its status, code and details, so the route that called it answers
  * exactly what it answered when the operation ran in its own process.
  */
 export declare const KEYS_PATH = "/nylorun/v1/keys";

package/dist/keys/contract.js

@@ -4,7 +4,7 @@
  * gates token. Internal: only core calls it, so it is not in the published OpenAPI documents.
  *
  * `200 {result}` when the operation succeeded, `200 {error}` when it refused: a vault error or
- * a Tenant API error with its status, code and details, so the route that called it answers
+ * a Runtime or Management API error with its status, code and details, so the route that called it answers
  * exactly what it answered when the operation ran in its own process.
  */
 export const KEYS_PATH = "/nylorun/v1/keys";

package/dist/management-openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.2.0",
   "info": {
     "title": "Nylorun Management API",
-    "version": "0.25.0-beta",
+    "version": "0.26.0-beta",
     "x-nylorun-protocol": {
       "min": 14,
       "max": 14,

package/dist/mcp/preview.d.ts

@@ -1,6 +1,6 @@
 /**
  * A remote MCP server's tools before an agent names it (R2b C12, `POST /v1/tenant/mcp/preview`,
- * `nylorun mcp inspect`, an Environment's Secrets tab in Studio). It runs where plaintext credentials live:
+ * `nylorun tenant mcp inspect`, an Environment's Secrets tab in Studio). It runs where plaintext credentials live:
  * the keys service (`keys/keys.ts`, `previewMcp`), in the gateway or in process.
  *
  * One connection: `initialize` and `tools/list` with the Environment's credential for the

package/dist/mcp/preview.js

@@ -1,6 +1,6 @@
 /**
  * A remote MCP server's tools before an agent names it (R2b C12, `POST /v1/tenant/mcp/preview`,
- * `nylorun mcp inspect`, an Environment's Secrets tab in Studio). It runs where plaintext credentials live:
+ * `nylorun tenant mcp inspect`, an Environment's Secrets tab in Studio). It runs where plaintext credentials live:
  * the keys service (`keys/keys.ts`, `previewMcp`), in the gateway or in process.
  *
  * One connection: `initialize` and `tools/list` with the Environment's credential for the

package/dist/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.2.0",
   "info": {
     "title": "Nylorun Runtime API",
-    "version": "0.25.0-beta",
+    "version": "0.26.0-beta",
     "x-nylorun-protocol": {
       "min": 14,
       "max": 14,
@@ -6508,9 +6508,11 @@
                             "method": {
                               "type": "string",
                               "enum": [
+                                "GET",
                                 "POST",
                                 "PUT",
-                                "PATCH"
+                                "PATCH",
+                                "DELETE"
                               ]
                             },
                             "credential": {
@@ -6791,9 +6793,11 @@
                                 "method": {
                                   "type": "string",
                                   "enum": [
+                                    "GET",
                                     "POST",
                                     "PUT",
-                                    "PATCH"
+                                    "PATCH",
+                                    "DELETE"
                                   ]
                                 },
                                 "credential": {
@@ -6948,9 +6952,11 @@
                             "method": {
                               "type": "string",
                               "enum": [
+                                "GET",
                                 "POST",
                                 "PUT",
-                                "PATCH"
+                                "PATCH",
+                                "DELETE"
                               ]
                             },
                             "credential": {
@@ -7231,9 +7237,11 @@
                                 "method": {
                                   "type": "string",
                                   "enum": [
+                                    "GET",
                                     "POST",
                                     "PUT",
-                                    "PATCH"
+                                    "PATCH",
+                                    "DELETE"
                                   ]
                                 },
                                 "credential": {
@@ -7387,9 +7395,11 @@
                             "method": {
                               "type": "string",
                               "enum": [
+                                "GET",
                                 "POST",
                                 "PUT",
-                                "PATCH"
+                                "PATCH",
+                                "DELETE"
                               ]
                             },
                             "credential": {
@@ -7670,9 +7680,11 @@
                                 "method": {
                                   "type": "string",
                                   "enum": [
+                                    "GET",
                                     "POST",
                                     "PUT",
-                                    "PATCH"
+                                    "PATCH",
+                                    "DELETE"
                                   ]
                                 },
                                 "credential": {
@@ -7961,9 +7973,11 @@
                         "method": {
                           "type": "string",
                           "enum": [
+                            "GET",
                             "POST",
                             "PUT",
-                            "PATCH"
+                            "PATCH",
+                            "DELETE"
                           ]
                         },
                         "credential": {
@@ -8244,9 +8258,11 @@
                             "method": {
                               "type": "string",
                               "enum": [
+                                "GET",
                                 "POST",
                                 "PUT",
-                                "PATCH"
+                                "PATCH",
+                                "DELETE"
                               ]
                             },
                             "credential": {
@@ -8467,9 +8483,11 @@
                               "method": {
                                 "type": "string",
                                 "enum": [
+                                  "GET",
                                   "POST",
                                   "PUT",
-                                  "PATCH"
+                                  "PATCH",
+                                  "DELETE"
                                 ]
                               },
                               "credential": {
@@ -8750,9 +8768,11 @@
                                   "method": {
                                     "type": "string",
                                     "enum": [
+                                      "GET",
                                       "POST",
                                       "PUT",
-                                      "PATCH"
+                                      "PATCH",
+                                      "DELETE"
                                     ]
                                   },
                                   "credential": {
@@ -8872,9 +8892,11 @@
                       "method": {
                         "type": "string",
                         "enum": [
+                          "GET",
                           "POST",
                           "PUT",
-                          "PATCH"
+                          "PATCH",
+                          "DELETE"
                         ]
                       },
                       "credential": {
@@ -9055,9 +9077,11 @@
               "method": {
                 "type": "string",
                 "enum": [
+                  "GET",
                   "POST",
                   "PUT",
-                  "PATCH"
+                  "PATCH",
+                  "DELETE"
                 ]
               },
               "credential": {
@@ -9331,9 +9355,11 @@
                             "method": {
                               "type": "string",
                               "enum": [
+                                "GET",
                                 "POST",
                                 "PUT",
-                                "PATCH"
+                                "PATCH",
+                                "DELETE"
                               ]
                             },
                             "credential": {
@@ -9614,9 +9640,11 @@
                                 "method": {
                                   "type": "string",
                                   "enum": [
+                                    "GET",
                                     "POST",
                                     "PUT",
-                                    "PATCH"
+                                    "PATCH",
+                                    "DELETE"
                                   ]
                                 },
                                 "credential": {
@@ -23476,7 +23504,7 @@
           "Sessions API"
         ],
         "summary": "Open a session",
-        "description": "Creates the session, or re-attaches vaults to an identical one. Its sandbox is chosen now and fixed for its life.",
+        "description": "Creates the session, or answers the one already opened with the same agent, owner, info and Environment. Its Environment (its sandbox and vault) is chosen now and fixed for its life.",
         "security": [
           {
             "applicationKey": []

package/dist/store/postgres/migrate.js

@@ -96,7 +96,7 @@ export async function assertCurrentLayout(q) {
     if (row?.versioned)
         throw openError("database-layout-old", "The database was created by a pre-release build of one Tenant per database, whose " +
             "migrations this release replaces. It is never changed: point the Runtime at a new " +
-            "database (locally, `nylorun reset` and then `nylorun start`).");
+            "database (locally, `nylorun local reset` and then `nylorun start`).");
 }
 /**
  * The database's schema version: the number of migrations its journal records, or undefined

package/dist/tenant/environments.js

@@ -935,11 +935,14 @@ export async function checkEnvironmentTurn(t, session, scope, ctx) {
             code: "environment_owner_mismatch",
         });
     // The harness the turn would run on (R4.1, Q9): a pod about to wake runs its recipe's. A
-    // session never moves to another harness: its state is that harness's.
+    // session never moves to another harness: its state is that harness's. An Environment's
+    // harness never changes since protocol 14, so this refuses a session whose Environment id was
+    // deleted and made again with another harness, and an Environment changed in place before
+    // protocol 14 whose recipe (a pod's, at its wake) names another harness than it applied.
     const waking = environment.pod !== undefined && (environment.pod.desired !== "running" || environment.pod.observed === "failed");
     const runs = waking ? environment.recipe.harness : environment.applied.harness;
     if (!isWorkflowManifest(session.manifest) && runs !== harnessOf(session))
-        fail(409, `Environment ${id} now runs the ${runs} harness, and this session runs ${harnessOf(session)}: open a new session to run on it.`, {
+        fail(409, `Environment ${id} runs the ${runs} harness, and this session runs ${harnessOf(session)}: open a new session to run on it.`, {
             code: "harness_mismatch",
             details: { harness: harnessOf(session), environmentHarness: runs },
         });

package/dist/tenant/ephemeral.d.ts

@@ -31,7 +31,7 @@ export interface StartEphemeralRuntimeOptions {
     /** When true, close() leaves hostRoot on disk. */
     retainRoot?: boolean;
     /**
-     * Trusted issuers whose JWTs the Tenant API accepts (Host feature `trusted-issuers`): the
+     * Trusted issuers whose JWTs the Runtime API accepts (Host feature `trusted-issuers`): the
      * issuers of an identity file (`parseIdentityFile`), or ones already built with
      * `createTrustedIssuers`. Default none.
      */

package/dist/tenant/host-token.js

@@ -16,7 +16,7 @@
  *
  * The host token is accepted only by the Harness API listener (a connection serving that one
  * sandbox, and `host.renew`); the egress token only by egress-gate, as the proxy credential
- * (`Proxy-Authorization`). Neither is a bearer anywhere else: the Tenant API's bearer check
+ * (`Proxy-Authorization`). Neither is a bearer anywhere else: the Runtime API's bearer check
  * accepts trusted issuers' tokens only, and the gates run tokens only.
  *
  * Verification reads the key row on every call (a revoked key refuses at once) and, with

package/dist/tenant/identity-file.d.ts

@@ -1,6 +1,6 @@
 /**
  * The identity file (Host feature `trusted-issuers`, F9 I2): the YAML file
- * `NYLORUN_IDENTITY_FILE` names, listing the issuers whose JWTs the Tenant API accepts as
+ * `NYLORUN_IDENTITY_FILE` names, listing the issuers whose JWTs the Runtime API accepts as
  * bearers. Read once at boot (`host/main.ts`); a change takes a restart. A malformed file stops
  * the boot with a message naming the issuer and the field. A key the file does not define is
  * ignored with a warning (`maxLifetime`, gone in protocol 9, among them), so an older file

package/dist/tenant/identity-file.js

@@ -1,6 +1,6 @@
 /**
  * The identity file (Host feature `trusted-issuers`, F9 I2): the YAML file
- * `NYLORUN_IDENTITY_FILE` names, listing the issuers whose JWTs the Tenant API accepts as
+ * `NYLORUN_IDENTITY_FILE` names, listing the issuers whose JWTs the Runtime API accepts as
  * bearers. Read once at boot (`host/main.ts`); a change takes a restart. A malformed file stops
  * the boot with a message naming the issuer and the field. A key the file does not define is
  * ignored with a warning (`maxLifetime`, gone in protocol 9, among them), so an older file

package/dist/tenant/outbound.d.ts

@@ -37,14 +37,15 @@ export declare function isPrivateAddress(address: string): boolean;
 /** Why the Host refuses `url`, or `undefined` when it may be called. */
 export declare function refusal(url: URL, policy: OutboundPolicy): string | undefined;
 /**
- * POSTs (or, with `method`, PUTs or PATCHes) the JSON `body` to `url` under `policy`. Never
+ * Sends one request to `url` under `policy`: with `method` (default `POST`) and the JSON `body`,
+ * or with no body (and no `content-type`) when `body` is undefined, as for a `GET`. Never
  * throws; `signal` aborts the request.
  */
-export declare function post(target: string, body: string, headers: Record<string, string>, options: {
+export declare function send(target: string, body: string | undefined, headers: Record<string, string>, options: {
     policy: OutboundPolicy;
     signal: AbortSignal;
     maxResponseBytes?: number;
-    method?: "POST" | "PUT" | "PATCH";
+    method?: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
 }): Promise<OutboundResult>;
 /**
  * A refusal of `guardedFetch`: the Host's policy forbids the URL or every address it resolves
@@ -59,13 +60,13 @@ export declare class OutboundRefused extends Error {
 export declare class OutboundFailed extends Error {
     readonly code: string;
     /**
-     * The request was sent in full before it failed, as `post()`'s `lost` (R2b C7): the server
+     * The request was sent in full before it failed, as `send()`'s `lost` (R2b C7): the server
      * may have acted on it. False for a failure to resolve or connect.
      */
     readonly sent: boolean;
     constructor(message: string, code: string, 
     /**
-     * The request was sent in full before it failed, as `post()`'s `lost` (R2b C7): the server
+     * The request was sent in full before it failed, as `send()`'s `lost` (R2b C7): the server
      * may have acted on it. False for a failure to resolve or connect.
      */
     sent?: boolean);

package/dist/tenant/outbound.js

@@ -76,10 +76,11 @@ function guardedLookup(policy) {
     });
 }
 /**
- * POSTs (or, with `method`, PUTs or PATCHes) the JSON `body` to `url` under `policy`. Never
+ * Sends one request to `url` under `policy`: with `method` (default `POST`) and the JSON `body`,
+ * or with no body (and no `content-type`) when `body` is undefined, as for a `GET`. Never
  * throws; `signal` aborts the request.
  */
-export async function post(target, body, headers, options) {
+export async function send(target, body, headers, options) {
     const { policy, signal } = options;
     const limit = options.maxResponseBytes ?? MAX_RESPONSE_BYTES;
     const url = new URL(target);
@@ -108,8 +109,9 @@ export async function post(target, body, headers, options) {
             headers: {
                 ...headers,
                 host: originalHost,
-                "content-type": "application/json",
-                "content-length": String(Buffer.byteLength(body)),
+                ...(body === undefined
+                    ? {}
+                    : { "content-type": "application/json", "content-length": String(Buffer.byteLength(body)) }),
             },
             lookup: lookup,
             signal,
@@ -156,7 +158,7 @@ export class OutboundFailed extends Error {
     sent;
     constructor(message, code, 
     /**
-     * The request was sent in full before it failed, as `post()`'s `lost` (R2b C7): the server
+     * The request was sent in full before it failed, as `send()`'s `lost` (R2b C7): the server
      * may have acted on it. False for a failure to resolve or connect.
      */
     sent = false) {
@@ -223,7 +225,7 @@ export function guardedFetch(policy, options = {}) {
             outgoing["content-length"] = String(body.byteLength);
         return await new Promise((resolve, reject) => {
             let settled = false;
-            // Set when the request is fully sent, as `post()` does: a failure after it may follow
+            // Set when the request is fully sent, as `send()` does: a failure after it may follow
             // the server acting on the request.
             let delivered = false;
             const settle = (fn) => {

package/dist/tenant/types.d.ts

@@ -75,7 +75,7 @@ export interface TenantConfig {
      */
     flowEnv?: Readonly<Record<string, string | undefined>>;
     /**
-     * The trusted issuers whose JWTs the Tenant API accepts (Host feature `trusted-issuers`), from
+     * The trusted issuers whose JWTs the Runtime API accepts (Host feature `trusted-issuers`), from
      * the identity file (`NYLORUN_IDENTITY_FILE`). Absent: none.
      */
     issuers?: import("./issuers.js").TrustedIssuers;
@@ -107,7 +107,7 @@ export interface TenantHandle {
     /** The handlers Durable Session Execution calls for this Tenant (`worker.ts`). */
     readonly worker?: TenantWorker;
     /**
-     * A Tenant API request whose headers the Host has validated: authenticates, authorizes,
+     * A Runtime or Management API request whose headers the Host has validated: authenticates, authorizes,
      * dispatches. A response already written to `node.outgoing` is `RESPONSE_ALREADY_SENT`.
      */
     fetch(request: Request, node: NodeBindings): Promise<Response>;

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const RUNTIME_VERSION = "0.25.0-beta";
+export declare const RUNTIME_VERSION = "0.26.0-beta";

package/dist/version.js

@@ -1,3 +1,3 @@
 // Kept in step with package.json by runtime/server/scripts/check-package.mjs, which runs in npm run check.
 // release:prepare also rewrites this when it bumps @nylorun/runtime.
-export const RUNTIME_VERSION = "0.25.0-beta";
+export const RUNTIME_VERSION = "0.26.0-beta";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nylorun/runtime",
-  "version": "0.25.0-beta",
+  "version": "0.26.0-beta",
   "description": "Nylorun Runtime: the agent execution Host on Postgres, Restate and S2, and model providers.",
   "type": "module",
   "license": "Apache-2.0",
@@ -65,8 +65,8 @@
     "@hono/node-server": "^2.1.3",
     "@hono/zod-openapi": "^1.6.3",
     "@modelcontextprotocol/sdk": "^1.32.1",
-    "@nylorun/core": "0.21.0-beta",
-    "@nylorun/harness": "0.27.0-beta",
+    "@nylorun/core": "0.22.0-beta",
+    "@nylorun/harness": "0.27.1-beta",
     "@restatedev/restate-sdk": "1.17.2",
     "@restatedev/restate-sdk-clients": "1.17.2",
     "@s2-dev/streamstore": "0.28.0",