@nylorun/runtime 0.28.0-beta → 0.30.0-beta

package/dist/vault/workload-token.d.ts

@@ -0,0 +1,16 @@
+export interface WorkloadTokenSettings {
+    /** The token's file (`NYLORUN_WORKLOAD_TOKEN_FILE`). */
+    readonly file?: string;
+    /** The origins a `workload` credential's `via` may name (`NYLORUN_WORKLOAD_TOKEN_ORIGINS`). */
+    readonly origins?: readonly string[];
+}
+/** Why the workload token could not be used: the message names the setting, never the token. */
+export declare class WorkloadTokenUnavailable extends Error {
+    constructor(message: string);
+}
+/** Sets where this process reads the workload token and where it may send it (at startup). */
+export declare function useWorkloadToken(next: WorkloadTokenSettings): void;
+/** The workload token, read from its file now. */
+export declare function workloadToken(): Promise<string>;
+/** Why the workload token may not go to `via`, or undefined when its origin is listed. */
+export declare function workloadOriginRefused(via: string): string | undefined;

package/dist/vault/workload-token.js

@@ -0,0 +1,58 @@
+/**
+ * The Runtime's workload token (#496): a short-lived token a platform gives each installation and
+ * rotates through a file, so a gateway trusts the workload instead of a stored key. The file
+ * (`NYLORUN_WORKLOAD_TOKEN_FILE`) is read on every use and nothing of it is kept, so a rotation
+ * applies to the next request with no restart. A missing, unreadable or empty file fails the
+ * request, never sends it unauthenticated.
+ *
+ * Only the gate side reads it: the model call and the MCP and HTTP tool requests a `workload`
+ * credential makes. It never reaches a sandbox (`NYLORUN_*` is not passed to one), the model, an
+ * event or a log, and requests scrub it like any credential value. An Agent's writer chooses a
+ * credential's `via`, so the token goes only to the origins the operator lists
+ * (`NYLORUN_WORKLOAD_TOKEN_ORIGINS`), checked on every use; the model's `baseUrl` is the
+ * operator's own.
+ */
+import { readFile } from "node:fs/promises";
+/** Why the workload token could not be used: the message names the setting, never the token. */
+export class WorkloadTokenUnavailable extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "WorkloadTokenUnavailable";
+    }
+}
+let settings = {};
+/** Sets where this process reads the workload token and where it may send it (at startup). */
+export function useWorkloadToken(next) {
+    settings = { ...next };
+}
+/** The workload token, read from its file now. */
+export async function workloadToken() {
+    const file = settings.file;
+    if (file === undefined)
+        throw new WorkloadTokenUnavailable("The Runtime has no workload token: set NYLORUN_WORKLOAD_TOKEN_FILE");
+    let text;
+    try {
+        text = await readFile(file, "utf8");
+    }
+    catch (error) {
+        const code = error.code ?? "unreadable";
+        throw new WorkloadTokenUnavailable(`The workload token file ${file} (NYLORUN_WORKLOAD_TOKEN_FILE) cannot be read: ${code}`);
+    }
+    const token = text.trim();
+    if (token.length === 0)
+        throw new WorkloadTokenUnavailable(`The workload token file ${file} (NYLORUN_WORKLOAD_TOKEN_FILE) is empty`);
+    return token;
+}
+/** Why the workload token may not go to `via`, or undefined when its origin is listed. */
+export function workloadOriginRefused(via) {
+    let origin;
+    try {
+        origin = new URL(via).origin;
+    }
+    catch {
+        return `${via} is not a URL`;
+    }
+    return (settings.origins ?? []).includes(origin)
+        ? undefined
+        : `The workload token may not go to ${origin}: list it in NYLORUN_WORKLOAD_TOKEN_ORIGINS`;
+}

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const RUNTIME_VERSION = "0.28.0-beta";
+export declare const RUNTIME_VERSION = "0.30.0-beta";

package/dist/version.js

@@ -1,3 +1,3 @@
 // Kept in step with package.json by runtime/server/scripts/check-package.mjs, which runs in npm run check.
 // release:prepare also rewrites this when it bumps @nylorun/runtime.
-export const RUNTIME_VERSION = "0.28.0-beta";
+export const RUNTIME_VERSION = "0.30.0-beta";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nylorun/runtime",
-  "version": "0.28.0-beta",
+  "version": "0.30.0-beta",
   "description": "Nylorun Runtime: the agent execution Host on Postgres, Restate and S2, and model providers.",
   "type": "module",
   "license": "Apache-2.0",
@@ -65,8 +65,8 @@
     "@hono/node-server": "^2.1.5",
     "@hono/zod-openapi": "^1.6.3",
     "@modelcontextprotocol/sdk": "^1.32.1",
-    "@nylorun/core": "0.24.0-beta",
-    "@nylorun/harness": "0.29.0-beta",
+    "@nylorun/core": "0.26.0-beta",
+    "@nylorun/harness": "0.29.2-beta",
     "@restatedev/restate-sdk": "1.17.3",
     "@restatedev/restate-sdk-clients": "1.17.3",
     "@s2-dev/streamstore": "0.28.0",