@nylorun/runtime 0.32.0-beta → 0.34.0-beta

package/dist/management-openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.2.0",
   "info": {
     "title": "Nylorun Management API",
-    "version": "0.32.0-beta",
+    "version": "0.34.0-beta",
     "x-nylorun-protocol": {
       "min": 16,
       "max": 18,
@@ -34,7 +34,10 @@
         "traces",
         "artifact-reads",
         "gateway-credentials",
-        "agent-folders"
+        "agent-folders",
+        "session-model",
+        "model-host-identity",
+        "credential-provider"
       ]
     },
     "description": "For operators: the Tenant's models, vaults, signing keys, settings and application keys, at `/v1/tenant/*` on the Tenant's URL, through `@nylorun/admin`. Every operation takes a management key, acting as itself: never for a subject and never from a browser. Management keys are issued only on the Tenant's machine (`nylorun tenant keys put <id> --management`) or from `NYLORUN_MANAGEMENT_KEY_FILE`."
@@ -427,7 +430,8 @@
                     "enum": [
                       "api_key",
                       "oauth",
-                      "workload"
+                      "workload",
+                      "host_identity"
                     ]
                   },
                   "baseUrl": {
@@ -1137,6 +1141,31 @@
                       "type"
                     ],
                     "additionalProperties": false
+                  },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "type": {
+                        "type": "string",
+                        "enum": [
+                          "host_identity"
+                        ]
+                      },
+                      "project": {
+                        "type": "string",
+                        "pattern": "^[a-z][a-z0-9-]{4,28}[a-z0-9]$"
+                      },
+                      "location": {
+                        "type": "string",
+                        "pattern": "^[a-z][a-z0-9-]*$"
+                      }
+                    },
+                    "required": [
+                      "type",
+                      "project",
+                      "location"
+                    ],
+                    "additionalProperties": false
                   }
                 ]
               }
@@ -2680,7 +2709,8 @@
                   "enum": [
                     "api_key",
                     "oauth",
-                    "workload"
+                    "workload",
+                    "host_identity"
                   ]
                 },
                 "baseUrl": {
@@ -2860,7 +2890,8 @@
                 "enum": [
                   "api_key",
                   "oauth",
-                  "workload"
+                  "workload",
+                  "host_identity"
                 ]
               },
               "baseUrl": {
@@ -3170,6 +3201,31 @@
                   "type"
                 ],
                 "additionalProperties": false
+              },
+              {
+                "type": "object",
+                "properties": {
+                  "type": {
+                    "type": "string",
+                    "enum": [
+                      "host_identity"
+                    ]
+                  },
+                  "project": {
+                    "type": "string",
+                    "pattern": "^[a-z][a-z0-9-]{4,28}[a-z0-9]$"
+                  },
+                  "location": {
+                    "type": "string",
+                    "pattern": "^[a-z][a-z0-9-]*$"
+                  }
+                },
+                "required": [
+                  "type",
+                  "project",
+                  "location"
+                ],
+                "additionalProperties": false
               }
             ]
           }

package/dist/model/descriptor.d.ts

@@ -7,7 +7,7 @@
  * gate takes cannot disagree.
  */
 import type { Api, Model } from "@earendil-works/pi-ai";
-import { type CustomModelSettings, type HostModelView, type ModelInput } from "@nylorun/core/contracts";
+import { type CustomModelSettings, type HostModelView, type ModelInput, type SessionModelChoice } from "@nylorun/core/contracts";
 import type { ModelDescriptor } from "@nylorun/core/harness-api";
 import type { SessionStore } from "../store/types.js";
 import { type Selection } from "./models.js";
@@ -36,14 +36,15 @@ export declare const FIXTURE_DESCRIPTOR: ModelDescriptor;
 export declare function hostModelDescriptor(binding: ModelBindingView, added?: Readonly<Record<string, readonly ModelInput[]>>): ModelDescriptor | undefined;
 /**
  * The model the Tenant's turns use now: the fixture model's descriptor when the Tenant uses it,
- * else its active model's; undefined when none is configured (a test's scripted provider, say).
+ * else a session's own model's (`choice`, while its provider is connected), else its active
+ * model's; undefined when none is configured (a test's scripted provider, say).
  */
 export declare function currentModelDescriptor(ctx: {
     readonly store: SessionStore;
     readonly vault: {
-        getHostModel(): Promise<HostModelView>;
+        getHostModel(choice?: SessionModelChoice): Promise<HostModelView>;
     };
-}): Promise<ModelDescriptor | undefined>;
+}, choice?: SessionModelChoice): Promise<ModelDescriptor | undefined>;
 /**
  * The context window, in tokens, of the Tenant's model now; without one, or one the catalog does
  * not know, it is assumed small (`CUSTOM_MODEL_SETTING_DEFAULTS`), as for a custom endpoint.

package/dist/model/descriptor.js

@@ -62,16 +62,17 @@ export function hostModelDescriptor(binding, added = {}) {
 }
 /**
  * The model the Tenant's turns use now: the fixture model's descriptor when the Tenant uses it,
- * else its active model's; undefined when none is configured (a test's scripted provider, say).
+ * else a session's own model's (`choice`, while its provider is connected), else its active
+ * model's; undefined when none is configured (a test's scripted provider, say).
  */
-export async function currentModelDescriptor(ctx) {
+export async function currentModelDescriptor(ctx, choice) {
     const { fixture, added } = await ctx.store.tx(async (t) => ({
         fixture: await usesFixtureModel(t),
         added: await readAddedInputs(t),
     }));
     if (fixture)
         return FIXTURE_DESCRIPTOR;
-    const view = await ctx.vault.getHostModel();
+    const view = await ctx.vault.getHostModel(choice);
     return view.configured ? hostModelDescriptor(view, added) : undefined;
 }
 /**

package/dist/model/pi-model.js

@@ -8,6 +8,7 @@ import { classifyAssistantError, failure } from "./classify.js";
 import { addedInputsOf, describeModel, selectionOf } from "./descriptor.js";
 import { modelsFor } from "./models.js";
 import { callHeaders } from "./call-headers.js";
+import { hostIdentityRefused, VERTEX_ADC_MARKER } from "../vault/host-identity.js";
 import { workloadToken, WorkloadTokenUnavailable } from "../vault/workload-token.js";
 import { NativeBlocks, nativeKindsOf } from "./native-blocks.js";
 import { projectSecrets } from "./settings.js";
@@ -67,6 +68,12 @@ export function piModel(options = {}) {
                 throw error;
             }
         }
+        // The Host's identity (ADR-71): only while its operator still lends it.
+        if (stored.authType === "host_identity") {
+            const refused = hostIdentityRefused(stored.provider);
+            if (refused)
+                return failure("auth", refused, false);
+        }
         const secrets = [
             ...projectSecrets(root),
             ...credentialSecrets(stored.credential),
@@ -119,6 +126,8 @@ export function piModel(options = {}) {
             sessionId: call.executionId,
             cacheRetention: "short",
             ...(Object.keys(perCall).length > 0 ? { headers: perCall } : {}),
+            // With the Host's identity: where Agent Platform runs the call (ADR-71).
+            ...(stored.authType === "host_identity" && stored.credential.env ? { env: stored.credential.env } : {}),
             timeoutMs: settings.requestTimeoutMs,
             maxRetries: settings.providerRetries,
             maxRetryDelayMs: settings.maxRetryDelayMs,
@@ -504,7 +513,11 @@ function idleTimeout(selected, idleTimeoutMs) {
     };
 }
 function hostCredentialStore(stored, write) {
-    let current = stored.credential;
+    // The Host's identity (ADR-71): pi-ai's Vertex AI client uses Application Default Credentials
+    // for this marker in place of a key.
+    let current = stored.authType === "host_identity"
+        ? { type: "api_key", key: VERTEX_ADC_MARKER }
+        : stored.credential;
     // A workload model stores no credential: pi-ai then asks the provider's `resolve` (`modelsFor`).
     const stores = stored.authType !== "workload";
     return {
@@ -532,6 +545,9 @@ function hostCredentialStore(stored, write) {
     };
 }
 function credentialSecrets(credential) {
+    // The Host's identity keeps no secret: its project and location stay readable in messages.
+    if (credential.type === "host_identity")
+        return [];
     const values = [credential.key, credential.access, credential.refresh];
     if (credential.env)
         values.push(...Object.values(credential.env));