@nylorun/runtime 0.26.0-beta → 0.28.0-beta

package/dist/api/openapi.js

@@ -110,21 +110,79 @@ function tenantSchemes(registry) {
 }
 const RUNTIME_TAGS = [
     {
-        name: "Agents",
+        name: "Agent manifests",
         group: "Agents",
-        description: "The agents a Tenant can run: put a definition, list what is there. In `@nylorun/agents`.",
-        operations: ["PUT /v1/agents/{agentId}", "GET /v1/agents"],
+        description: "Named, versioned agent manifests (protocol 16): one document with what runs inside an agent's loop (`harness`) and what the Runtime provides around it (`runtime`), checked against each other when it is saved. Save one with a plan first (`?dryRun=true`) and `If-Match`; an Agent is made from one version and keeps it, so a save changes no Agent. `client.agentManifests` in `@nylorun/agents`, and `nylorun apply`.",
+        operations: [
+            "PUT /v1/agent-manifests/{name}",
+            "GET /v1/agent-manifests",
+            "GET /v1/agent-manifests/{name}",
+            "GET /v1/agent-manifests/{name}/versions",
+            "GET /v1/agent-manifests/{name}/versions/{version}",
+            "DELETE /v1/agent-manifests/{name}",
+        ],
     },
     {
         name: "Definition files",
         group: "Agents",
-        description: "The files a definition names by the SHA-256 of their bytes (each skill's folder): upload each once before putting the definition, which is refused while it names one the Runtime does not hold (`definition_files_missing`). `saveAgent` in `@nylorun/agents` does both.",
+        description: "The files an agent manifest names by the SHA-256 of their bytes (each skill's folder, a runtime section's input files): upload each once before saving the manifest, which is refused while it names one the Runtime does not hold (`definition_files_missing`) or a skill whose files hold more than its skill limit together (`limit_exceeded`; `/v1/tenant/skills`, default 2 GiB). No file and no count of files has a limit of its own. `client.agentManifests.save` in `@nylorun/agents` does both.",
         operations: ["PUT /v1/files/{file}", "HEAD /v1/files/{file}"],
     },
+    {
+        name: "Agents",
+        group: "Agents",
+        description: "The live instances of agent manifests: an Agent has a stable id, its manifest version, one sandbox (a virtual workspace, a pod with its own volume, or none), one vault of secrets for its shell, MCP servers and HTTP tools, its disk versions, and its sessions. Its `state` says whether it is working, sleeping, needs a person (`input_required`), is failing or paused. Create or find one from a saved manifest, watch its lifecycle, stop, reset, fork or delete it, and write its secrets. In `@nylorun/agents`.",
+        operations: [
+            "PUT /v1/agents/{agentId}",
+            "GET /v1/agents",
+            "GET /v1/agents/{agentId}",
+            "GET /v1/agents/{agentId}/events",
+            "POST /v1/agents/{agentId}/stop",
+            "POST /v1/agents/{agentId}/reset",
+            "POST /v1/agents/{agentId}/restart",
+            "DELETE /v1/agents/{agentId}",
+            "GET /v1/agents/{agentId}/secrets",
+            "GET /v1/agents/{agentId}/secrets/{name}",
+            "PUT /v1/agents/{agentId}/secrets/{name}",
+            "DELETE /v1/agents/{agentId}/secrets/{name}",
+            "POST /v1/agents/{agentId}/snapshot",
+            "POST /v1/agents/{agentId}/restore",
+            "POST /v1/agents/{agentId}/fork",
+            "GET /v1/agents/{agentId}/versions",
+            "DELETE /v1/agents/{agentId}/versions/{version}",
+        ],
+    },
+    {
+        name: "Triggers",
+        group: "Agents",
+        description: "What starts an Agent's turns with no client connected (track T4, D74): the schedules, one-shot times and webhook endpoints its manifest's `runtime.triggers` declare. Each trigger's status is the Agent's: pause and resume it, run it now, make a webhook trigger's signing secret, and read its runs (`started`, `queued`, `skipped` or `failed`, with a reason). In `@nylorun/agents` and `nylorun agents triggers`.",
+        operations: [
+            "GET /v1/agents/{agentId}/triggers",
+            "POST /v1/agents/{agentId}/triggers/{triggerId}/pause",
+            "POST /v1/agents/{agentId}/triggers/{triggerId}/resume",
+            "POST /v1/agents/{agentId}/triggers/{triggerId}/run",
+            "GET /v1/agents/{agentId}/runs",
+            "POST /v1/agents/{agentId}/triggers/{triggerId}/secret",
+            "POST /v1/webhooks/{endpointId}",
+        ],
+    },
+    {
+        name: "Memory",
+        group: "Agents",
+        description: "An Agent's memories (track T5, D72): Markdown files under `/memories` it keeps across sessions, wakes and upgrades, shaped like Anthropic's memory stores. List and read them, write one whole (with a `content_sha256` precondition), delete one or a folder, and read the version every change leaves, with who made it. In `@nylorun/agents` and `nylorun agents memories`.",
+        operations: [
+            "GET /v1/agents/{agentId}/memories",
+            "GET /v1/agents/{agentId}/memories/{path}",
+            "PUT /v1/agents/{agentId}/memories/{path}",
+            "DELETE /v1/agents/{agentId}/memories/{path}",
+            "GET /v1/agents/{agentId}/memory_versions",
+            "GET /v1/agents/{agentId}/memory_versions/{versionId}",
+        ],
+    },
     {
         name: "Sessions API",
         group: "Sessions",
-        description: "A conversation with an agent: open a session, send commands, follow its events, read its history. In `@nylorun/agents`.",
+        description: "A conversation with an Agent: open a session on it, send commands, follow its events, read its history. No session is special: an app that keeps one conversation going reuses its id. In `@nylorun/agents`.",
         operations: [
             "PUT /v1/sessions/{sessionId}",
             "GET /v1/sessions",
@@ -143,7 +201,7 @@ const RUNTIME_TAGS = [
     {
         name: "AG-UI",
         group: "Sessions",
-        description: "The same sessions through AG-UI: a thread is one session per person, agent and thread, and each run is a turn.",
+        description: "The same sessions through AG-UI: a thread is one session per person, Agent and thread, and each run is a turn.",
         operations: [
             "POST /v1/ag-ui/agents/{agentId}",
             "GET /v1/ag-ui/agents/{agentId}/threads/{threadId}/events",
@@ -154,45 +212,9 @@ const RUNTIME_TAGS = [
     {
         name: "A2A",
         group: "Sessions",
-        description: "The same sessions through Agent2Agent: a context is one session per subject, agent and `contextId`, and a task is one turn. The card is how an A2A client finds the agent.",
+        description: "The same sessions through Agent2Agent: a context is one session per subject, Agent and `contextId`, and a task is one turn; every caller's session runs on the Agent's disk and vault, so an app that serves several audiences makes an Agent for each. The card is how an A2A client finds the Agent.",
         operations: ["GET /v1/a2a/agents/{agentId}/card", "POST /v1/a2a/agents/{agentId}"],
     },
-    {
-        name: "Environments",
-        group: "Environments",
-        description: "Where sessions run: one sandbox (a virtual workspace, a pod with its own volume, or none) made from an environment manifest or inline fields and never changed after that, and one vault of secrets for its shell, MCP servers and HTTP tools. Create or find one, watch its lifecycle, stop, reset or delete it, and write its secrets. In `@nylorun/agents`.",
-        operations: [
-            "PUT /v1/environments/{environmentId}",
-            "GET /v1/environments",
-            "GET /v1/environments/{environmentId}",
-            "GET /v1/environments/{environmentId}/events",
-            "POST /v1/environments/{environmentId}/stop",
-            "POST /v1/environments/{environmentId}/reset",
-            "DELETE /v1/environments/{environmentId}",
-            "GET /v1/environments/{environmentId}/secrets",
-            "GET /v1/environments/{environmentId}/secrets/{name}",
-            "PUT /v1/environments/{environmentId}/secrets/{name}",
-            "DELETE /v1/environments/{environmentId}/secrets/{name}",
-            "POST /v1/environments/{environmentId}/snapshot",
-            "POST /v1/environments/{environmentId}/restore",
-            "POST /v1/environments/{environmentId}/fork",
-            "GET /v1/environments/{environmentId}/versions",
-            "DELETE /v1/environments/{environmentId}/versions/{version}",
-        ],
-    },
-    {
-        name: "Environment manifests",
-        group: "Environments",
-        description: "Named, versioned definitions of a kind of Environment, saved like agents (protocol 14). Save one with a plan first (`?dryRun=true`) and `If-Match`; an Environment is made from one version and keeps it, so a save changes no Environment. In `@nylorun/agents`.",
-        operations: [
-            "PUT /v1/environment-manifests/{name}",
-            "GET /v1/environment-manifests",
-            "GET /v1/environment-manifests/{name}",
-            "GET /v1/environment-manifests/{name}/versions",
-            "GET /v1/environment-manifests/{name}/versions/{version}",
-            "DELETE /v1/environment-manifests/{name}",
-        ],
-    },
     {
         name: "Artifacts",
         group: "Artifacts",
@@ -266,12 +288,12 @@ const MANAGEMENT_TAGS = [
     },
     {
         name: "Credential coverage",
-        description: "Which secret of an Environment each of an agent's MCP servers and HTTP tools would get, before a session opens. The secrets themselves are written on the Runtime API. `admin.coverage`.",
+        description: "Which secret of an Agent's vault each of its manifest's MCP servers and HTTP tools would get, before a session opens. The secrets themselves are written on the Runtime API. `admin.coverage`.",
         operations: ["POST /v1/tenant/credential-coverage"],
     },
     {
         name: "MCP servers",
-        description: "See a remote MCP server's tools before an agent names it, with an Environment's credential for its URL: their model names, sizes and annotations, or that it needs a person's sign-in. `admin.mcp`.",
+        description: "See a remote MCP server's tools before an agent names it, with an Agent's credential for its URL: their model names, sizes and annotations, or that it needs a person's sign-in. `admin.mcp`.",
         operations: ["POST /v1/tenant/mcp/preview"],
     },
     {
@@ -285,12 +307,16 @@ const MANAGEMENT_TAGS = [
     },
     {
         name: "Settings",
-        description: "The Tenant's sandbox backend, Environment and artifact settings. `admin.settings`.",
+        description: "The Tenant's sandbox backend, Agent compute, artifact and skill settings, and its Runtime limits. `admin.settings`.",
         operations: [
             "GET /v1/tenant/sandbox",
             "PUT /v1/tenant/sandbox",
             "GET /v1/tenant/artifacts",
             "PUT /v1/tenant/artifacts",
+            "GET /v1/tenant/skills",
+            "PUT /v1/tenant/skills",
+            "GET /v1/tenant/limits",
+            "PUT /v1/tenant/limits",
         ],
     },
 ];
@@ -388,7 +414,7 @@ function documents() {
     built = {
         runtime: document(all, RUNTIME_TAGS, {
             title: "Nylorun Runtime API",
-            description: "For developers: agents, sessions (with AG-UI and A2A), Environments and artifacts, through `@nylorun/agents`. Every Tenant serves it on its one URL, beside the Management API (`/openapi/management.json`). Every request sends `Nylorun-Protocol`. Who may call each operation is its `security` and its `x-nylorun-credentials` and `x-nylorun-scopes` (the subject scopes that reach it) fields: an application key (servers) or a trusted issuer's token (browsers and apps).",
+            description: "For developers: agent manifests, Agents, sessions (with AG-UI and A2A) and artifacts, through `@nylorun/agents`. Every Tenant serves it on its one URL, beside the Management API (`/openapi/management.json`). Every request sends `Nylorun-Protocol`. Who may call each operation is its `security` and its `x-nylorun-credentials` and `x-nylorun-scopes` (the subject scopes that reach it) fields: an application key (servers) or a trusted issuer's token (browsers and apps).",
         }),
         management: document(all, MANAGEMENT_TAGS, {
             title: "Nylorun Management API",

package/dist/artifacts/disk.d.ts

@@ -1,24 +1,20 @@
-import { type EnvironmentRestore, type EnvironmentSnapshot, type EnvironmentVersions } from "@nylorun/core/contracts";
+import { type AgentRestore, type AgentSnapshot, type AgentDiskVersions } from "@nylorun/core/contracts";
 import type { Tx } from "../store/types.js";
 import type { TenantContext } from "../tenant/context.js";
-import { assertReaches } from "../tenant/environments.js";
-/** The most entries one version holds (R6 Q11). */
-export declare const DISK_MAX_ENTRIES = 200000;
-/** The most bytes one version's files hold. */
-export declare const DISK_MAX_BYTES: number;
+import { assertReaches } from "../tenant/agents.js";
 /** The name of an Environment's disk artifact. */
 export declare const DISK_ARTIFACT_NAME = "disk";
 /**
- * `POST /v1/environments/{id}/snapshot`: a new version of the Environment's disk, between turns.
+ * `POST /v1/agents/{id}/snapshot`: a new version of the Environment's disk, between turns.
  * A pod that is stopped is started first. An unchanged disk makes no version.
  */
-export declare function snapshotEnvironment(ctx: TenantContext, id: string, scope: Parameters<typeof assertReaches>[0]): Promise<EnvironmentSnapshot>;
+export declare function snapshotEnvironment(ctx: TenantContext, id: string, scope: Parameters<typeof assertReaches>[0]): Promise<AgentSnapshot>;
 /**
- * `POST /v1/environments/{id}/restore`: puts disk version `version` back. A virtual
+ * `POST /v1/agents/{id}/restore`: puts disk version `version` back. A virtual
  * Environment's workspace is rewritten at once; a pod gets a new volume, seeded from the version
  * before any turn (`status: pending` until then).
  */
-export declare function restoreEnvironment(ctx: TenantContext, id: string, scope: Parameters<typeof assertReaches>[0], version: number | "latest"): Promise<EnvironmentRestore>;
+export declare function restoreEnvironment(ctx: TenantContext, id: string, scope: Parameters<typeof assertReaches>[0], version: number | "latest"): Promise<AgentRestore>;
 /**
  * Writes Environment `id`'s pending seed (`disk_seed`) into its disk, once its pod's engine is
  * connected (or at once for a virtual one), then clears the seed and the lease. Started after a
@@ -41,14 +37,14 @@ export declare function forkSeedOf(t: Tx, from: {
     artifactId: string;
     version: number;
 }>;
-/** `GET /v1/environments/{id}/versions`: its disk versions, newest first. */
-export declare function environmentVersions(ctx: TenantContext, id: string, scope: Parameters<typeof assertReaches>[0]): Promise<EnvironmentVersions>;
+/** `GET /v1/agents/{id}/versions`: its disk versions, newest first. */
+export declare function environmentVersions(ctx: TenantContext, id: string, scope: Parameters<typeof assertReaches>[0]): Promise<AgentDiskVersions>;
 /**
- * `DELETE /v1/environments/{id}/versions/{n}`: deletes one disk version, and the stored files no
+ * `DELETE /v1/agents/{id}/versions/{n}`: deletes one disk version, and the stored files no
  * other version names. Refused while a seed reads it.
  */
 export declare function deleteEnvironmentVersion(ctx: TenantContext, id: string, scope: Parameters<typeof assertReaches>[0], version: number): Promise<{
-    environmentId: string;
+    agentId: string;
     version: number;
     deleted: boolean;
 }>;