@nylorun/runtime 0.37.0-beta → 0.39.0-beta

package/dist/management-openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.2.0",
   "info": {
     "title": "Nylorun Management API",
-    "version": "0.37.0-beta",
+    "version": "0.39.0-beta",
     "x-nylorun-protocol": {
       "min": 16,
       "max": 18,
@@ -40,7 +40,9 @@
         "model-host-identity",
         "credential-provider",
         "turns",
-        "agent-model"
+        "agent-model",
+        "secret-routing",
+        "remove-tools"
       ]
     },
     "description": "For operators: the Tenant's models, vaults, signing keys, settings and application keys, at `/v1/tenant/*` on the Tenant's URL, through `@nylorun/admin`. Every operation takes a management key, acting as itself: never for a subject and never from a browser. Management keys are issued only on the Tenant's machine (`nylorun tenant keys put <id> --management`) or from `NYLORUN_MANAGEMENT_KEY_FILE`."
@@ -931,6 +933,22 @@
                     },
                     "additionalProperties": false
                   },
+                  "engine": {
+                    "type": "object",
+                    "properties": {
+                      "images": {
+                        "type": "array",
+                        "items": {
+                          "type": "string",
+                          "minLength": 1,
+                          "maxLength": 256,
+                          "pattern": "^[a-z0-9]([a-z0-9._:/-]*[a-z0-9])?$"
+                        },
+                        "maxItems": 32
+                      }
+                    },
+                    "additionalProperties": false
+                  },
                   "placement": {
                     "type": "object",
                     "additionalProperties": {
@@ -2321,6 +2339,22 @@
             },
             "additionalProperties": false
           },
+          "engine": {
+            "type": "object",
+            "properties": {
+              "images": {
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "minLength": 1,
+                  "maxLength": 256,
+                  "pattern": "^[a-z0-9]([a-z0-9._:/-]*[a-z0-9])?$"
+                },
+                "maxItems": 32
+              }
+            },
+            "additionalProperties": false
+          },
           "placement": {
             "type": "object",
             "additionalProperties": {
@@ -2533,7 +2567,7 @@
                 "agent": {
                   "type": "string",
                   "minLength": 1,
-                  "description": "The agent that calls the tool: the agent manifest's name, or the id of an agent used as a tool or of a flow's agent, never an Agent's id. `*` matches any run of characters"
+                  "description": "The agent that calls the tool: the agent manifest's name, or the id of an agent used as a tool or of a flow's agent, never an Agent's id. The session's root agent's name also matches the calls of the agents it uses as tools. `*` matches any run of characters"
                 },
                 "when": {
                   "type": "object",
@@ -2635,7 +2669,7 @@
                 "agent": {
                   "type": "string",
                   "minLength": 1,
-                  "description": "The agent that calls the tool: the agent manifest's name, or the id of an agent used as a tool or of a flow's agent, never an Agent's id. `*` matches any run of characters"
+                  "description": "The agent that calls the tool: the agent manifest's name, or the id of an agent used as a tool or of a flow's agent, never an Agent's id. The session's root agent's name also matches the calls of the agents it uses as tools. `*` matches any run of characters"
                 },
                 "when": {
                   "type": "object",

package/dist/mcp/pool.d.ts

@@ -34,6 +34,11 @@ export declare class McpPool {
         manifestHash: string;
         maxInstructionBytes: number;
         signal?: AbortSignal;
+        /**
+         * Only these of its declared servers (default all): the ones a later turn tries again because
+         * they are not in the session's snapshot (`prepareMcp`).
+         */
+        servers?: readonly DeclaredServer[];
     }): Promise<{
         snapshot: McpSnapshot;
         diagnostics: McpDiagnostic[];

package/dist/mcp/pool.js

@@ -22,7 +22,7 @@ export class McpPool {
     async discover(input) {
         const servers = [];
         const diagnostics = [];
-        for (const declared of serversOf(input.manifest)) {
+        for (const declared of input.servers ?? serversOf(input.manifest)) {
             input.signal?.throwIfAborted();
             const opened = await this.connectDeclared(input, declared);
             if (!opened.ok) {

package/dist/mcp/snapshot.d.ts

@@ -49,7 +49,9 @@ export declare function manifestFor(manifest: AgentManifest, agent: HostEffect["
  * out, so the session never offers its tools, and its diagnostic says so (`failed`, replacing
  * the one it had). Unchanged when the whole snapshot fits.
  */
-export declare function fitSnapshot(snapshot: McpSnapshot, diagnostics: readonly McpDiagnostic[], limitBytes: number): {
+export declare function fitSnapshot(snapshot: McpSnapshot, diagnostics: readonly McpDiagnostic[], limitBytes: number, 
+/** How many of its first servers stay whatever their size: those the session pinned already. */
+keep?: number): {
     snapshot: McpSnapshot;
     diagnostics: McpDiagnostic[];
 };

package/dist/mcp/snapshot.js

@@ -86,17 +86,19 @@ export function manifestFor(manifest, agent) {
  * out, so the session never offers its tools, and its diagnostic says so (`failed`, replacing
  * the one it had). Unchanged when the whole snapshot fits.
  */
-export function fitSnapshot(snapshot, diagnostics, limitBytes) {
+export function fitSnapshot(snapshot, diagnostics, limitBytes, 
+/** How many of its first servers stay whatever their size: those the session pinned already. */
+keep = 0) {
     const bytes = (value) => Buffer.byteLength(JSON.stringify(value));
     if (bytes(snapshot) <= limitBytes)
         return { snapshot, diagnostics: [...diagnostics] };
     const kept = [];
     const dropped = new Map();
     const key = (agentId, serverName) => JSON.stringify([agentId ?? null, serverName]);
-    for (const server of snapshot.servers) {
+    for (const [index, server] of snapshot.servers.entries()) {
         const next = { ...snapshot, servers: [...kept, server] };
         const size = bytes(next);
-        if (size <= limitBytes)
+        if (index < keep || size <= limitBytes)
             kept.push(server);
         else
             dropped.set(key(server.agentId, server.name), bytes(server));