@nylorun/runtime 0.39.0-beta → 0.41.0-beta

package/CHANGELOG.md

@@ -1,5 +1,26 @@
 # Changelog
 
+## 0.41.0-beta
+
+### Minor Changes
+
+- 714bee2: The triggers capability (Host feature `agent-triggers`): an agent-folder/2 folder declares `engine: { triggers: true }` (the root agent's only; `engine.instructions.triggers` replaces its wording), which compiles to `harness.engine.triggers` and offers the root agent the `triggers` tool (`list`, `create`, `delete`) and the text block `triggers@1`. The Runtime serves each call as a `runtime` effect (operation `triggers`, `turn.start.agent.triggers`, Harness API v5.3): a trigger an agent makes is the Agent's (`origin: "agent"`, with its title and the session that made it), runs in the calling session (`session: "this"`) or one of its own (`"own"`, `<session>_t_<id>`), is checked against the limits in force (`runtime.limits.triggers` within the Tenant's), survives upgrades and waits paused while a version lacks the capability; a turn a trigger started can't create one. Tool rules take `kind: "runtime"`, so an `ask` rule can hold a `triggers` call (its interaction carries `metadata.input`); `DELETE /v1/agents/{id}/triggers/{triggerId}` deletes an agent's trigger (`409 trigger_from_manifest` for a manifest's); `GET /v1/runs/stream` serves the Tenant's runs as server-sent events from a cursor (`410 cursor_expired` across a reset). `client.agents.deleteTrigger`, `client.runs.stream` and `nylorun agents triggers rm` follow. The JSON Schemas are republished as `agent-manifest/v8.3`, `harness-manifest/v1.3`, `runtime-manifest/v1.2`, `agent-folder/v1/agent-md.3`, `agent-folder/v1/runtime.2` and `harness-api/v5.3`.
+
+### Patch Changes
+
+- Pin core to the tested release.
+- Pin harness to the tested release.
+- Updated dependencies [714bee2]
+- Updated dependencies
+  - @nylorun/core@0.35.0-beta
+  - @nylorun/harness@0.32.0-beta
+
+## 0.40.0-beta
+
+### Minor Changes
+
+- 78787e2: A2A `SendMessage` takes `message.metadata.removeTools` (Host feature `remove-tools`): the tools a new message's turn may not use, by name, as a session message's `removeTools`. `createA2aClient`'s `send` takes `removeTools`.
+
 ## 0.39.0-beta
 
 ### Minor Changes

package/dist/adapters/streams/s2.js

@@ -9,8 +9,9 @@
  *   `<basinPrefix>tn-<ulid>` for a Tenant id `tn_<ulid>`, `…-<g base36>` for generation g.
  * - The basin is created with `createStreamOnAppend` and `createStreamOnRead`, so
  *   `sessions/<id>` come into existence on first use. Its default stream config
- *   sets infinite retention, which session streams keep. There are no other
- *   streams: signals between processes go over Postgres (D48).
+ *   sets infinite retention, which session streams keep. The Tenant's `runs`
+ *   stream (D83) is ensured with 7 days' retention (`ensureStream`). There are
+ *   no other streams: signals between processes go over Postgres (D48).
  * - Bodies are JSON text in string records. Record timestamps are S2 arrival
  *   times.
  * - Appends use `appendRetryPolicy: "noSideEffects"`: the SDK retries only
@@ -203,6 +204,12 @@ class S2Streams {
                 throw error;
         }
     }
+    async ensureStream(tenantId, stream, options) {
+        this.checkOpen();
+        await this.s2
+            .basin(this.basinName(tenantId))
+            .streams.ensure({ stream, config: { retentionPolicy: { ageSecs: options.retentionSecs } } }, { signal: this.closing.signal });
+    }
     async listStreams(tenantId, prefix) {
         this.checkOpen();
         const names = [];

package/dist/api/a2a/endpoint.js

@@ -72,7 +72,7 @@ export function a2aRoutes(api) {
         path: "/v1/a2a/agents/{agentId}",
         tags: TAGS,
         summary: "Call an agent over A2A",
-        description: "A2A 1.0 JSON-RPC, for a subject, under the Nylorun profile v2 (Host feature `a2a-profile-v2`). `SendMessage` blocks up to the Runtime limit `a2aWaitMs` (5 minutes by default; then the task is answered still `WORKING`) unless `returnImmediately`; `GetTask` (with `historyLength`), `CancelTask` and `ListTasks`; and the four push notification config methods, plus `configuration.taskPushNotificationConfig` in `SendMessage`: each update is POSTed as one `StreamResponse`, signed with Standard Webhooks (`webhook-id`, `webhook-timestamp`, `webhook-signature` with the Runtime's `a2a.push.secret`) and `X-A2A-Notification-Token`, at least once, retried for up to 24 hours, to hosts the Runtime allows (`a2a.push.allowHosts` for private ones). A message to a busy context is queued and answered with the task that will take it (`TASK_STATE_SUBMITTED`); `message.metadata.delivery: \"reject\"` asks for `UnsupportedOperationError` (reason `CONTEXT_BUSY`) instead. A message is text, one data part, or text with `raw` files (stored as artifacts of the context's session) and `url` files (fetched by the Runtime), each at most the Runtime limit `inlineFileBytes` (20 MiB by default). An approval, question or connection the task waits for (`AUTH_REQUIRED` or `INPUT_REQUIRED`) is shown under `interactions/v1` and answered on the same task with `{ interactionId, approved }` or `{ interactionId, value }` under that URI in the message's `metadata`; text never approves. Artifacts carry the turn's output and the files it wrote, as `url` parts at `/v1/a2a/files/…` with `files/v1`; the task's metadata carries `progress/v1`, `telemetry/v1` and `effects/v1`. Extension data is answered only for the extensions activated with `A2A-Extensions`. A context is one session per subject, agent and `contextId`; a task is one turn. JSON-RPC errors are answered with 200; limits, scopes and unavailable streams stay HTTP errors. Not served: streaming, `GetExtendedAgentCard`.",
+        description: "A2A 1.0 JSON-RPC, for a subject, under the Nylorun profile v2 (Host feature `a2a-profile-v2`). `SendMessage` blocks up to the Runtime limit `a2aWaitMs` (5 minutes by default; then the task is answered still `WORKING`) unless `returnImmediately`; `GetTask` (with `historyLength`), `CancelTask` and `ListTasks`; and the four push notification config methods, plus `configuration.taskPushNotificationConfig` in `SendMessage`: each update is POSTed as one `StreamResponse`, signed with Standard Webhooks (`webhook-id`, `webhook-timestamp`, `webhook-signature` with the Runtime's `a2a.push.secret`) and `X-A2A-Notification-Token`, at least once, retried for up to 24 hours, to hosts the Runtime allows (`a2a.push.allowHosts` for private ones). A message to a busy context is queued and answered with the task that will take it (`TASK_STATE_SUBMITTED`); `message.metadata.delivery: \"reject\"` asks for `UnsupportedOperationError` (reason `CONTEXT_BUSY`) instead. `message.metadata.removeTools` (Host feature `remove-tools`) names the tools a new message's turn may not use, as a session message's `removeTools`. A message is text, one data part, or text with `raw` files (stored as artifacts of the context's session) and `url` files (fetched by the Runtime), each at most the Runtime limit `inlineFileBytes` (20 MiB by default). An approval, question or connection the task waits for (`AUTH_REQUIRED` or `INPUT_REQUIRED`) is shown under `interactions/v1` and answered on the same task with `{ interactionId, approved }` or `{ interactionId, value }` under that URI in the message's `metadata`; text never approves. Artifacts carry the turn's output and the files it wrote, as `url` parts at `/v1/a2a/files/…` with `files/v1`; the task's metadata carries `progress/v1`, `telemetry/v1` and `effects/v1`. Extension data is answered only for the extensions activated with `A2A-Extensions`. A context is one session per subject, agent and `contextId`; a task is one turn. JSON-RPC errors are answered with 200; limits, scopes and unavailable streams stay HTTP errors. Not served: streaming, `GetExtendedAgentCard`.",
         externalDocs: A2A_SPECIFICATION,
         request: {
             params: agentId,

package/dist/api/a2a/protocol.d.ts

@@ -226,6 +226,12 @@ export interface SendParams {
     push?: PushConfigInput;
     /** `metadata.delivery`; default `queue`. */
     delivery: Delivery;
+    /**
+     * `metadata.removeTools` (Host feature `remove-tools`): the tools the message's turn may not
+     * use, by name, as a session message's `removeTools`. A new message only: a reply answers an
+     * interaction of a turn already running.
+     */
+    removeTools?: readonly string[];
     /** The answer the message carries under `interactions/v1`. */
     answer?: InteractionAnswer;
 }

package/dist/api/a2a/protocol.js

@@ -223,6 +223,17 @@ export function parsePushConfig(value, field) {
         ...(authentication ? { authentication } : {}),
     };
 }
+/** `metadata.removeTools`: at most 256 names of 1 to 256 characters (a session message's `removeTools`). */
+function parseRemoveTools(metadata) {
+    const value = metadata.removeTools;
+    if (value === undefined || value === null)
+        return undefined;
+    if (!Array.isArray(value) ||
+        value.length > 256 ||
+        !value.every((name) => typeof name === "string" && name.length >= 1 && name.length <= 256))
+        return a2aFail("invalidParams", "message.metadata.removeTools must be at most 256 tool names of 1 to 256 characters", {}, "message.metadata.removeTools");
+    return value;
+}
 /** `metadata.delivery`: `queue` (the default) or `reject`. */
 function parseDelivery(metadata) {
     const delivery = metadata.delivery;
@@ -272,6 +283,7 @@ export function parseSendParams(params) {
     // On the message (the profile's place), or on the request's own metadata.
     const delivery = parseDelivery(metadata.delivery === undefined && isObject(params.metadata) ? params.metadata : metadata);
     const answer = parseAnswer(metadata);
+    const removeTools = parseRemoveTools(metadata.removeTools === undefined && isObject(params.metadata) ? params.metadata : metadata);
     const configuration = params.configuration;
     if (configuration !== undefined && configuration !== null && !isObject(configuration))
         a2aFail("invalidParams", "configuration must be an object", {}, "configuration");
@@ -315,6 +327,7 @@ export function parseSendParams(params) {
         ...(historyLength !== undefined ? { historyLength } : {}),
         ...(push ? { push } : {}),
         delivery,
+        ...(removeTools ? { removeTools } : {}),
         ...(answer ? { answer } : {}),
     };
 }

package/dist/api/a2a/routes.js

@@ -335,6 +335,7 @@ async function sendMessage(caller, params, signal) {
             requestId: randomUUID(),
             idempotencyKey,
             ...body,
+            ...(send.removeTools ? { removeTools: [...send.removeTools] } : {}),
         }, async () => {
             const active = (await contextSession(caller, sessionId))?.activeTurnId;
             const taskId = active ? taskIdOf(context, active) : undefined;

package/dist/api/components.d.ts

@@ -214,6 +214,11 @@ export declare const AgentView: z.ZodObject<{
                 versionBytes: z.ZodOptional<z.ZodNumber>;
                 versionEntries: z.ZodOptional<z.ZodNumber>;
             }, z.core.$strict>>;
+            triggers: z.ZodOptional<z.ZodObject<{
+                count: z.ZodOptional<z.ZodNumber>;
+                minIntervalMs: z.ZodOptional<z.ZodNumber>;
+                runsPerHour: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>>;
         }, z.core.$strict>>;
         secrets: z.ZodOptional<z.ZodLazy<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
             required: z.ZodOptional<z.ZodBoolean>;
@@ -379,6 +384,11 @@ export declare const AgentManifest: z.ZodObject<{
                 versionBytes: z.ZodOptional<z.ZodNumber>;
                 versionEntries: z.ZodOptional<z.ZodNumber>;
             }, z.core.$strict>>;
+            triggers: z.ZodOptional<z.ZodObject<{
+                count: z.ZodOptional<z.ZodNumber>;
+                minIntervalMs: z.ZodOptional<z.ZodNumber>;
+                runsPerHour: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>>;
         }, z.core.$strict>>;
         secrets: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
             required: z.ZodOptional<z.ZodBoolean>;
@@ -477,6 +487,11 @@ export declare const PutAgentManifestRequest: z.ZodObject<{
                 versionBytes: z.ZodOptional<z.ZodNumber>;
                 versionEntries: z.ZodOptional<z.ZodNumber>;
             }, z.core.$strict>>;
+            triggers: z.ZodOptional<z.ZodObject<{
+                count: z.ZodOptional<z.ZodNumber>;
+                minIntervalMs: z.ZodOptional<z.ZodNumber>;
+                runsPerHour: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>>;
         }, z.core.$strict>>;
         secrets: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
             required: z.ZodOptional<z.ZodBoolean>;
@@ -630,6 +645,11 @@ export declare const AgentManifestView: z.ZodObject<{
                     versionBytes: z.ZodOptional<z.ZodNumber>;
                     versionEntries: z.ZodOptional<z.ZodNumber>;
                 }, z.core.$strict>>;
+                triggers: z.ZodOptional<z.ZodObject<{
+                    count: z.ZodOptional<z.ZodNumber>;
+                    minIntervalMs: z.ZodOptional<z.ZodNumber>;
+                    runsPerHour: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strict>>;
             }, z.core.$strict>>;
             secrets: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
                 required: z.ZodOptional<z.ZodBoolean>;
@@ -770,6 +790,11 @@ export declare const AgentManifestPlan: z.ZodObject<{
                     versionBytes: z.ZodOptional<z.ZodNumber>;
                     versionEntries: z.ZodOptional<z.ZodNumber>;
                 }, z.core.$strict>>;
+                triggers: z.ZodOptional<z.ZodObject<{
+                    count: z.ZodOptional<z.ZodNumber>;
+                    minIntervalMs: z.ZodOptional<z.ZodNumber>;
+                    runsPerHour: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strict>>;
             }, z.core.$strict>>;
             secrets: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
                 required: z.ZodOptional<z.ZodBoolean>;
@@ -905,6 +930,11 @@ export declare const SaveAgentManifestResponse: z.ZodObject<{
                         versionBytes: z.ZodOptional<z.ZodNumber>;
                         versionEntries: z.ZodOptional<z.ZodNumber>;
                     }, z.core.$strict>>;
+                    triggers: z.ZodOptional<z.ZodObject<{
+                        count: z.ZodOptional<z.ZodNumber>;
+                        minIntervalMs: z.ZodOptional<z.ZodNumber>;
+                        runsPerHour: z.ZodOptional<z.ZodNumber>;
+                    }, z.core.$strict>>;
                 }, z.core.$strict>>;
                 secrets: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
                     required: z.ZodOptional<z.ZodBoolean>;
@@ -1055,6 +1085,11 @@ export declare const ListAgentManifestsResponse: z.ZodObject<{
                         versionBytes: z.ZodOptional<z.ZodNumber>;
                         versionEntries: z.ZodOptional<z.ZodNumber>;
                     }, z.core.$strict>>;
+                    triggers: z.ZodOptional<z.ZodObject<{
+                        count: z.ZodOptional<z.ZodNumber>;
+                        minIntervalMs: z.ZodOptional<z.ZodNumber>;
+                        runsPerHour: z.ZodOptional<z.ZodNumber>;
+                    }, z.core.$strict>>;
                 }, z.core.$strict>>;
                 secrets: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
                     required: z.ZodOptional<z.ZodBoolean>;
@@ -1340,6 +1375,11 @@ export declare const ForkAgentResponse: z.ZodUnion<readonly [z.ZodObject<{
                     versionBytes: z.ZodOptional<z.ZodNumber>;
                     versionEntries: z.ZodOptional<z.ZodNumber>;
                 }, z.core.$strict>>;
+                triggers: z.ZodOptional<z.ZodObject<{
+                    count: z.ZodOptional<z.ZodNumber>;
+                    minIntervalMs: z.ZodOptional<z.ZodNumber>;
+                    runsPerHour: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strict>>;
             }, z.core.$strict>>;
             secrets: z.ZodOptional<z.ZodLazy<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
                 required: z.ZodOptional<z.ZodBoolean>;
@@ -1613,6 +1653,11 @@ export declare const ListAgentsResponse: z.ZodObject<{
                     versionBytes: z.ZodOptional<z.ZodNumber>;
                     versionEntries: z.ZodOptional<z.ZodNumber>;
                 }, z.core.$strict>>;
+                triggers: z.ZodOptional<z.ZodObject<{
+                    count: z.ZodOptional<z.ZodNumber>;
+                    minIntervalMs: z.ZodOptional<z.ZodNumber>;
+                    runsPerHour: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strict>>;
             }, z.core.$strict>>;
             secrets: z.ZodOptional<z.ZodLazy<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
                 required: z.ZodOptional<z.ZodBoolean>;
@@ -1724,9 +1769,12 @@ export declare const ListAgentEventsResponse: z.ZodObject<{
             "agent.running": "agent.running";
             "agent.start_failed": "agent.start_failed";
             "agent.suspended": "agent.suspended";
+            "agent.trigger_created": "agent.trigger_created";
+            "agent.trigger_deleted": "agent.trigger_deleted";
             "agent.trigger_paused": "agent.trigger_paused";
             "agent.trigger_resumed": "agent.trigger_resumed";
             "agent.trigger_secret_rotated": "agent.trigger_secret_rotated";
+            "agent.trigger_updated": "agent.trigger_updated";
             "agent.version_changed": "agent.version_changed";
         }>;
         payload: z.ZodRecord<z.ZodString, z.ZodUnknown>;
@@ -2237,6 +2285,13 @@ export declare const TriggerList: z.ZodObject<{
             wake: "wake";
             webhook: "webhook";
         }>;
+        origin: z.ZodEnum<{
+            agent: "agent";
+            manifest: "manifest";
+            wake: "wake";
+        }>;
+        title: z.ZodNullable<z.ZodString>;
+        createdSessionId: z.ZodNullable<z.ZodString>;
         status: z.ZodEnum<{
             active: "active";
             completed: "completed";
@@ -2251,6 +2306,7 @@ export declare const TriggerList: z.ZodObject<{
         lastRunAt: z.ZodNullable<z.ZodString>;
         webhookUrl: z.ZodOptional<z.ZodString>;
         secretSet: z.ZodOptional<z.ZodBoolean>;
+        prompt: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>;
 }, z.core.$strict>;
 export declare const MemoryList: z.ZodObject<{
@@ -2345,6 +2401,69 @@ export declare const TriggerRunPage: z.ZodObject<{
     }, z.core.$strict>>;
     nextCursor: z.ZodNullable<z.ZodString>;
 }, z.core.$strict>;
+export declare const TenantRun: z.ZodObject<{
+    runId: z.ZodString;
+    agentId: z.ZodString;
+    triggerId: z.ZodString;
+    kind: z.ZodEnum<{
+        at: "at";
+        schedule: "schedule";
+        wake: "wake";
+        webhook: "webhook";
+    }>;
+    status: z.ZodEnum<{
+        failed: "failed";
+        queued: "queued";
+        skipped: "skipped";
+        started: "started";
+    }>;
+    reason: z.ZodNullable<z.ZodString>;
+    sessionId: z.ZodNullable<z.ZodString>;
+    turnId: z.ZodNullable<z.ZodString>;
+    queuedMessageId: z.ZodNullable<z.ZodString>;
+    dueAt: z.ZodString;
+    firedAt: z.ZodString;
+    late: z.ZodBoolean;
+    origin: z.ZodEnum<{
+        agent: "agent";
+        manifest: "manifest";
+        wake: "wake";
+    }>;
+    title: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export declare const TenantRunEvent: z.ZodObject<{
+    cursor: z.ZodString;
+    run: z.ZodObject<{
+        runId: z.ZodString;
+        agentId: z.ZodString;
+        triggerId: z.ZodString;
+        kind: z.ZodEnum<{
+            at: "at";
+            schedule: "schedule";
+            wake: "wake";
+            webhook: "webhook";
+        }>;
+        status: z.ZodEnum<{
+            failed: "failed";
+            queued: "queued";
+            skipped: "skipped";
+            started: "started";
+        }>;
+        reason: z.ZodNullable<z.ZodString>;
+        sessionId: z.ZodNullable<z.ZodString>;
+        turnId: z.ZodNullable<z.ZodString>;
+        queuedMessageId: z.ZodNullable<z.ZodString>;
+        dueAt: z.ZodString;
+        firedAt: z.ZodString;
+        late: z.ZodBoolean;
+        origin: z.ZodEnum<{
+            agent: "agent";
+            manifest: "manifest";
+            wake: "wake";
+        }>;
+        title: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
 export declare const RunTriggerResponse: z.ZodObject<{
     run: z.ZodObject<{
         id: z.ZodString;
@@ -15243,6 +15362,7 @@ export declare const ToolPolicy: z.ZodObject<{
         kind: z.ZodOptional<z.ZodEnum<{
             http: "http";
             mcp: "mcp";
+            runtime: "runtime";
         }>>;
         agent: z.ZodOptional<z.ZodString>;
         when: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -15271,6 +15391,7 @@ export declare const PutToolPolicyRequest: z.ZodObject<{
         kind: z.ZodOptional<z.ZodEnum<{
             http: "http";
             mcp: "mcp";
+            runtime: "runtime";
         }>>;
         agent: z.ZodOptional<z.ZodString>;
         when: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -22167,6 +22288,11 @@ export declare const AgentPage: z.ZodObject<{
                     versionBytes: z.ZodOptional<z.ZodNumber>;
                     versionEntries: z.ZodOptional<z.ZodNumber>;
                 }, z.core.$strict>>;
+                triggers: z.ZodOptional<z.ZodObject<{
+                    count: z.ZodOptional<z.ZodNumber>;
+                    minIntervalMs: z.ZodOptional<z.ZodNumber>;
+                    runsPerHour: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strict>>;
             }, z.core.$strict>>;
             secrets: z.ZodOptional<z.ZodLazy<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
                 required: z.ZodOptional<z.ZodBoolean>;
@@ -22355,6 +22481,11 @@ export declare const AgentPage: z.ZodObject<{
                     versionBytes: z.ZodOptional<z.ZodNumber>;
                     versionEntries: z.ZodOptional<z.ZodNumber>;
                 }, z.core.$strict>>;
+                triggers: z.ZodOptional<z.ZodObject<{
+                    count: z.ZodOptional<z.ZodNumber>;
+                    minIntervalMs: z.ZodOptional<z.ZodNumber>;
+                    runsPerHour: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strict>>;
             }, z.core.$strict>>;
             secrets: z.ZodOptional<z.ZodLazy<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
                 required: z.ZodOptional<z.ZodBoolean>;

package/dist/api/components.js

@@ -5,7 +5,7 @@
  * global registry.
  */
 import { z } from "zod";
-import { PutSessionModelRequestSchema, SessionModelViewSchema, QueuedResponseSchema, TriggerListSchema, MemoryListSchema, MemorySchema, PutMemoryRequestSchema, MemoryVersionPageSchema, MemoryVersionDetailSchema, TriggerRunPageSchema, RunTriggerResponseSchema, WebhookSecretResponseSchema, WebhookAcceptedResponseSchema, AgentManifestV8Schema, EnvironmentSecretSlotsSchema, DeleteAgentManifestResponseSchema, AgentManifestPlanSchema, AgentManifestVersionsSchema, AgentManifestViewSchema, ListAgentManifestsResponseSchema, PutAgentManifestRequestSchema, PutAgentFolderRequestSchema, AgentManifestSourceSchema, AgentManifestSourceDiffSchema, PutAgentSecretValueRequestSchema, SaveAgentManifestResponseSchema, SessionListItemSchema, ModelCallSchema, SessionPageSchema, SessionManifestViewSchema, HistoryPageSchema, SessionUsageTotalsSchema, ModelCallsPageSchema, ModelCallExportPageSchema, AgentPageSchema, ToolCallSchema, ToolCallsPageSchema, TurnTraceSchema, TurnChangesPageSchema, TurnSummarySchema, JwksSchema, SigningKeyListSchema, SigningKeyViewSchema, RotateSigningKeysRequestSchema, RevokeSigningKeyRequestSchema, MeResponseSchema, TenantStatusSchema, ResetTenantRequestSchema, ResetTenantResponseSchema, SeedTenantConfigRequestSchema, SeedTenantConfigResponseSchema, HostModelCatalogSchema, TenantSandboxViewSchema, ModelUsageTotalsSchema, ModelBudgetsSchema, PutModelBudgetsRequestSchema, ToolPolicySchema, PutToolPolicyRequestSchema, PutModelInputsRequestSchema, ModelInputsViewSchema, PutTenantEnvironmentsRequestSchema, ListProvidersResponseSchema, HostModelViewSchema, PutHostModelRequestSchema, SelectHostModelRequestSchema, PutAgentSecretRequestSchema, AgentSecretViewSchema, ListAgentSecretsResponseSchema, McpPreviewRequestSchema, McpPreviewSchema, CredentialCoverageRequestSchema, CredentialCoverageSchema, DeletedResponseSchema, ListSessionsResponseSchema, LiveEventSchema, PutAgentRequestSchema, PutSessionRequestSchema, SessionItemsResponseSchema, SessionViewSchema, StreamClosedFrameSchema, AcceptedResponseSchema, SandboxToolOutcomeSchema, AgentViewSchema, AgentSnapshotSchema, RestoreAgentRequestSchema, ForkAgentRequestSchema, AgentForkPlanSchema, ForkAgentResponseSchema, PutAgentDryRunResponseSchema, RestartAgentRequestSchema, AgentRestoreSchema, AgentDiskVersionsSchema, ListAgentsResponseSchema, DeleteAgentResponseSchema, ListAgentEventsResponseSchema, ArtifactViewSchema, ArtifactListItemSchema, ArtifactPageSchema, ArtifactVersionViewSchema, ListArtifactsResponseSchema, UploadArtifactResponseSchema, DefinitionFileViewSchema, DeleteArtifactResponseSchema, CreateArtifactLinkRequestSchema, ArtifactLinkSchema, PutTenantArtifactsRequestSchema, PutTenantSkillsRequestSchema, PutTenantLimitsRequestSchema, TenantLimitsViewSchema, TenantArtifactsViewSchema, TenantSkillsViewSchema, ArtifactTreeSchema, ArtifactDiffSchema, SessionCommandSchema, ListOperatorKeysResponseSchema, PutOperatorKeyResponseSchema, DeleteOperatorKeyResponseSchema, OperatorKeySchema, ProtocolRejectedResponseSchema, RejectedResponseSchema, EVENT_SCHEMAS, EVENT_TYPES, } from "@nylorun/core/contracts";
+import { PutSessionModelRequestSchema, SessionModelViewSchema, QueuedResponseSchema, TriggerListSchema, MemoryListSchema, MemorySchema, PutMemoryRequestSchema, MemoryVersionPageSchema, MemoryVersionDetailSchema, TriggerRunPageSchema, RunTriggerResponseSchema, WebhookSecretResponseSchema, WebhookAcceptedResponseSchema, AgentManifestV8Schema, EnvironmentSecretSlotsSchema, DeleteAgentManifestResponseSchema, AgentManifestPlanSchema, AgentManifestVersionsSchema, AgentManifestViewSchema, ListAgentManifestsResponseSchema, PutAgentManifestRequestSchema, PutAgentFolderRequestSchema, AgentManifestSourceSchema, AgentManifestSourceDiffSchema, PutAgentSecretValueRequestSchema, SaveAgentManifestResponseSchema, SessionListItemSchema, ModelCallSchema, SessionPageSchema, SessionManifestViewSchema, HistoryPageSchema, SessionUsageTotalsSchema, ModelCallsPageSchema, ModelCallExportPageSchema, AgentPageSchema, ToolCallSchema, ToolCallsPageSchema, TurnTraceSchema, TurnChangesPageSchema, TurnSummarySchema, JwksSchema, SigningKeyListSchema, SigningKeyViewSchema, RotateSigningKeysRequestSchema, RevokeSigningKeyRequestSchema, MeResponseSchema, TenantStatusSchema, ResetTenantRequestSchema, ResetTenantResponseSchema, SeedTenantConfigRequestSchema, SeedTenantConfigResponseSchema, HostModelCatalogSchema, TenantSandboxViewSchema, ModelUsageTotalsSchema, ModelBudgetsSchema, PutModelBudgetsRequestSchema, ToolPolicySchema, PutToolPolicyRequestSchema, PutModelInputsRequestSchema, ModelInputsViewSchema, PutTenantEnvironmentsRequestSchema, ListProvidersResponseSchema, HostModelViewSchema, PutHostModelRequestSchema, SelectHostModelRequestSchema, PutAgentSecretRequestSchema, AgentSecretViewSchema, ListAgentSecretsResponseSchema, McpPreviewRequestSchema, McpPreviewSchema, CredentialCoverageRequestSchema, CredentialCoverageSchema, DeletedResponseSchema, TenantRunEventSchema, TenantRunSchema, ListSessionsResponseSchema, LiveEventSchema, PutAgentRequestSchema, PutSessionRequestSchema, SessionItemsResponseSchema, SessionViewSchema, StreamClosedFrameSchema, AcceptedResponseSchema, SandboxToolOutcomeSchema, AgentViewSchema, AgentSnapshotSchema, RestoreAgentRequestSchema, ForkAgentRequestSchema, AgentForkPlanSchema, ForkAgentResponseSchema, PutAgentDryRunResponseSchema, RestartAgentRequestSchema, AgentRestoreSchema, AgentDiskVersionsSchema, ListAgentsResponseSchema, DeleteAgentResponseSchema, ListAgentEventsResponseSchema, ArtifactViewSchema, ArtifactListItemSchema, ArtifactPageSchema, ArtifactVersionViewSchema, ListArtifactsResponseSchema, UploadArtifactResponseSchema, DefinitionFileViewSchema, DeleteArtifactResponseSchema, CreateArtifactLinkRequestSchema, ArtifactLinkSchema, PutTenantArtifactsRequestSchema, PutTenantSkillsRequestSchema, PutTenantLimitsRequestSchema, TenantLimitsViewSchema, TenantArtifactsViewSchema, TenantSkillsViewSchema, ArtifactTreeSchema, ArtifactDiffSchema, SessionCommandSchema, ListOperatorKeysResponseSchema, PutOperatorKeyResponseSchema, DeleteOperatorKeyResponseSchema, OperatorKeySchema, ProtocolRejectedResponseSchema, RejectedResponseSchema, EVENT_SCHEMAS, EVENT_TYPES, } from "@nylorun/core/contracts";
 function named(id, schema) {
     return schema.meta({ id });
 }
@@ -71,6 +71,8 @@ export const PutMemoryRequest = named("PutMemoryRequest", PutMemoryRequestSchema
 export const MemoryVersionPage = named("MemoryVersionPage", MemoryVersionPageSchema);
 export const MemoryVersionDetail = named("MemoryVersionDetail", MemoryVersionDetailSchema);
 export const TriggerRunPage = named("TriggerRunPage", TriggerRunPageSchema);
+export const TenantRun = named("TenantRun", TenantRunSchema);
+export const TenantRunEvent = named("TenantRunEvent", TenantRunEventSchema);
 export const RunTriggerResponse = named("RunTriggerResponse", RunTriggerResponseSchema);
 export const WebhookSecretResponse = named("WebhookSecretResponse", WebhookSecretResponseSchema);
 export const WebhookAcceptedResponse = named("WebhookAcceptedResponse", WebhookAcceptedResponseSchema);

package/dist/api/http/app.js

@@ -19,6 +19,7 @@ import { agentManifestRoutes } from "./routes/agent-manifests.js";
 import { artifactRoutes } from "./routes/artifacts.js";
 import { readRoutes } from "./routes/reads.js";
 import { turnRoutes } from "./routes/turns.js";
+import { runRoutes } from "./routes/runs.js";
 import { sessionRoutes } from "./routes/sessions.js";
 import { fileRoutes } from "./routes/files.js";
 import { keyRoutes } from "./routes/keys.js";
@@ -50,6 +51,7 @@ function build() {
     fileRoutes(api);
     agentRoutes(api);
     triggerRoutes(api);
+    runRoutes(api);
     memoryRoutes(api);
     webhookRoutes(api);
     agentManifestRoutes(api);

package/dist/api/http/routes/runs.d.ts

@@ -0,0 +1,8 @@
+/**
+ * `GET /v1/runs/stream` (D83): the Tenant's runs stream, every run of every Agent's triggers as
+ * server-sent events from a cursor (`tenant/runs-stream.ts`). For an application credential that
+ * reads Agents; a run may arrive twice, and a reader drops a run id it has seen.
+ */
+import type { OpenAPIHono } from "@hono/zod-openapi";
+import type { TenantEnv } from "../app.js";
+export declare function runRoutes(api: OpenAPIHono<TenantEnv>): void;

package/dist/api/http/routes/runs.js

@@ -0,0 +1,30 @@
+import { RESPONSE_ALREADY_SENT } from "@hono/node-server/utils/response";
+import { z } from "zod";
+import { TenantRunEvent } from "../../components.js";
+import { streamRuns } from "../../../tenant/runs-stream.js";
+import { requestCursor } from "../../../tenant/session-streams.js";
+import { tenantRoute } from "../define.js";
+const READ = { credentials: ["application"], scopes: ["agents:read", "agents:write"] };
+export function runRoutes(api) {
+    tenantRoute(api, READ, {
+        method: "get",
+        path: "/v1/runs/stream",
+        tags: ["Triggers"],
+        summary: "Follow the Tenant's runs",
+        description: "Server-sent events, one `event: run` per run of any Agent's triggers, with its cursor as `id`, from the cursor on (`?cursor=` or `Last-Event-ID`; none reads from the oldest run the stream keeps, 7 days). The data is `{cursor, run}`: the run as the Agent's runs list it, with its Agent and its trigger's origin and title. A run may arrive twice: drop a `runId` you have seen. A cursor from before the Tenant's reset is refused (`cursor_expired`): read again without one. A `: keepalive` comment every 15 seconds.",
+        request: {
+            query: z.object({
+                cursor: z.string().optional().meta({ description: "The cursor of the last run read: the stream goes on after it" }),
+            }),
+        },
+        responses: {
+            200: { description: "The runs", content: { "text/event-stream": { itemSchema: TenantRunEvent } } },
+            400: { description: "Not a cursor of the runs stream (`invalid_cursor`)" },
+            410: { description: "A cursor from before the Tenant's reset (`cursor_expired`)" },
+        },
+    }, async (c) => {
+        const url = new URL(c.req.url);
+        await streamRuns(c.env.tenant, c.env.incoming, c.env.outgoing, requestCursor(c.env.incoming, url));
+        return RESPONSE_ALREADY_SENT;
+    });
+}

package/dist/api/http/routes/triggers.d.ts

@@ -2,7 +2,8 @@
  * An Agent's triggers and their runs (track T4, D74): read them, pause and resume one, run one now
  * (keyed by `Idempotency-Key`), and page the runs; make a webhook trigger's signing secret, and
  * take a sender's delivery at its endpoint (D75), an anonymous, unversioned route. What a trigger is lives in the Agent's manifest
- * (`runtime.triggers`); these routes change only what the Agent owns, its status.
+ * (`runtime.triggers`), or, for one its agents made with the `triggers` tool (D83), on the Agent:
+ * these routes change only what the Agent owns, its status, and delete an agent's trigger.
  */
 import type { OpenAPIHono } from "@hono/zod-openapi";
 import type { TenantEnv } from "../app.js";

package/dist/api/http/routes/triggers.js

@@ -1,9 +1,9 @@
 import { z } from "zod";
 import { isAgentId } from "@nylorun/core/contracts";
-import { RunTriggerResponse, TriggerList, TriggerRunPage, WebhookAcceptedResponse, WebhookSecretResponse, } from "../../components.js";
+import { DeletedResponse, RunTriggerResponse, TriggerList, TriggerRunPage, WebhookAcceptedResponse, WebhookSecretResponse, } from "../../components.js";
 import { assertReaches } from "../../../tenant/agents.js";
 import { fail } from "../../../tenant/http.js";
-import { listRuns, listTriggers, receiveWebhook, rotateWebhookSecret, runTriggerNow, setTriggerStatus, } from "../../../tenant/triggers.js";
+import { deleteTrigger, listRuns, listTriggers, receiveWebhook, rotateWebhookSecret, runTriggerNow, setTriggerStatus, } from "../../../tenant/triggers.js";
 import { readRuntimeLimits } from "../../../tenant/runtime-limits.js";
 import { readBytes } from "../body.js";
 import { tenantRoute } from "../define.js";
@@ -25,8 +25,16 @@ const agentId = z.object({
     agentId: z.string().meta({ description: "The Agent id, percent-encoded" }),
 });
 const triggerPath = agentId.extend({
-    triggerId: z.string().meta({ description: "The trigger's id in the manifest's `runtime.triggers`" }),
+    triggerId: z.string().meta({ description: "The trigger's id: in the manifest's `runtime.triggers`, or the one its agent gave it" }),
 });
+/** Who a route call acts as, for the Agent's events: the principal (its subject), or the token's subject. */
+function principalOf(scope) {
+    if (scope.kind === "token")
+        return `${scope.issuer}:${scope.subject}`;
+    if (scope.kind === "subject")
+        return `${scope.principalId}:${scope.subject}`;
+    return "principalId" in scope ? scope.principalId : undefined;
+}
 function idOf(value) {
     if (!isAgentId(value))
         return fail(400, "An Agent id is up to 200 characters: /-separated segments of letters, digits, '.', '_' and '-'");
@@ -38,7 +46,7 @@ export function triggerRoutes(api) {
         path: "/v1/agents/{agentId}/triggers",
         tags: ["Triggers"],
         summary: "List an Agent's triggers",
-        description: "Each trigger its manifest declares, with what the Agent holds of it: its status (`active`, `paused` with a reason, `completed` for an `at` that ran), when it runs next and last ran.",
+        description: "Each trigger its manifest declares, and each its agents made with the `triggers` tool (`origin: agent`, with the title and the session that made it), with what the Agent holds of it: its status (`active`, `paused` with a reason, `completed` for an `at` that ran), its prompt, when it runs next and last ran. A session's booked wake is not listed.",
         request: { params: agentId },
         responses: { 200: json(TriggerList, "The triggers") },
     }, async (c) => {
@@ -65,6 +73,26 @@ export function triggerRoutes(api) {
             assertReaches(c.get("scope"), id);
             return jsonResponse(200, await setTriggerStatus(c.env.tenant, id, c.req.param("triggerId"), action, originOf(c)));
         });
+    tenantRoute(api, WRITE, {
+        method: "delete",
+        path: "/v1/agents/{agentId}/triggers/{triggerId}",
+        tags: ["Triggers"],
+        summary: "Delete a trigger an agent made",
+        description: "Deletes a trigger one of the Agent's agents made with the `triggers` tool (`origin: agent`), with `agent.trigger_deleted` on the Agent's events; its runs stay. A trigger its manifest declares is refused (`trigger_from_manifest`): save a version without it, or pause it.",
+        request: { params: triggerPath },
+        responses: {
+            200: json(DeletedResponse, "Deleted"),
+            404: { description: "The Agent has no such trigger" },
+            409: { description: "The manifest declares it (`trigger_from_manifest`)" },
+        },
+    }, async (c) => {
+        const id = idOf(c.req.param("agentId"));
+        const scope = c.get("scope");
+        assertReaches(scope, id);
+        const triggerId = c.req.param("triggerId");
+        await deleteTrigger(c.env.tenant, id, triggerId, principalOf(scope));
+        return jsonResponse(200, { id: triggerId });
+    });
     tenantRoute(api, WRITE, {
         method: "post",
         path: "/v1/agents/{agentId}/triggers/{triggerId}/run",

package/dist/api/openapi.js

@@ -158,13 +158,15 @@ const RUNTIME_TAGS = [
     {
         name: "Triggers",
         group: "Agents",
-        description: "What starts an Agent's turns with no client connected: the schedules, one-shot times and webhook endpoints its manifest's `runtime.triggers` declare. Each trigger's status is the Agent's: pause and resume it, run it now, make a webhook trigger's signing secret, and read its runs (`started`, `queued`, `skipped` or `failed`, with a reason). In `@nylorun/agents` and `nylorun agents triggers`.",
+        description: "What starts an Agent's turns with no client connected: the schedules, one-shot times and webhook endpoints its manifest's `runtime.triggers` declare, and the schedules and follow-ups its agents set up with the `triggers` tool (`engine.triggers`). Each trigger's status is the Agent's: pause and resume it, run it now, delete one an agent made, make a webhook trigger's signing secret, and read its runs (`started`, `queued`, `skipped` or `failed`, with a reason), an Agent's or the whole Tenant's as a stream. In `@nylorun/agents` and `nylorun agents triggers`.",
         operations: [
             "GET /v1/agents/{agentId}/triggers",
             "POST /v1/agents/{agentId}/triggers/{triggerId}/pause",
             "POST /v1/agents/{agentId}/triggers/{triggerId}/resume",
             "POST /v1/agents/{agentId}/triggers/{triggerId}/run",
+            "DELETE /v1/agents/{agentId}/triggers/{triggerId}",
             "GET /v1/agents/{agentId}/runs",
+            "GET /v1/runs/stream",
             "POST /v1/agents/{agentId}/triggers/{triggerId}/secret",
             "POST /v1/webhooks/{endpointId}",
         ],

package/dist/gates/policy.d.ts

@@ -16,7 +16,9 @@
  * for an agent covers the agents it uses as tools.
  *
  * A rule's `tool` matches the tool's identity (protocol 15): an MCP tool's own name on its
- * server (`server` names the server), an HTTP tool's declared name, a flow stage's key. The name
+ * server (`server` names the server), an HTTP tool's declared name, a flow stage's key, an
+ * operation the Runtime serves (`triggers`, `memory`, `schedule_wake`; D83), which only a rule of
+ * `kind: "runtime"` matches. The name
  * a harness gave the model never matches. A stored rule whose `tool` has `__` in it (an MCP tool
  * named by its old model-facing `server__tool` name) makes the policy unreadable, so every call
  * is refused until the policy names it by `server` and `tool`: a rule never silently stops
@@ -31,7 +33,7 @@ import type { Session } from "../tenant/context.js";
 export declare const TOOL_POLICY_SETTING = "tool-policy";
 /** A call as the policy reads it. */
 export interface PolicyCall {
-    readonly kind: "mcp" | "http";
+    readonly kind: "mcp" | "http" | "runtime";
     /**
      * The tool's identity: an MCP tool's own name on its server, an HTTP tool's declared name, a
      * flow stage's key.
@@ -69,7 +71,7 @@ export declare function readToolPolicy(t: Pick<Tx, "getSetting">): Promise<ToolP
  * The decision for `request`, a session's MCP or HTTP tool call: the Tenant's rules and the
  * pinned manifest's `approval`. A policy that cannot be read refuses the call.
  */
-export declare function toolCallDecision(t: Pick<Tx, "getSetting">, s: Session, request: HostEffect, kind: "mcp" | "http"): Promise<PolicyDecision>;
+export declare function toolCallDecision(t: Pick<Tx, "getSetting">, s: Session, request: HostEffect, kind: "mcp" | "http" | "runtime"): Promise<PolicyDecision>;
 /**
  * `request` as the policy reads it: by its target's identity (protocol 15), and by the agent that
  * calls it: an agent used as a tool by its id, with the session's root agent as its `root`, and
@@ -77,7 +79,7 @@ export declare function toolCallDecision(t: Pick<Tx, "getSetting">, s: Session,
  * session's Agent id (`s.agentId`), which protocol 16 made the Agent the session runs on
  * (`users/ada/desk` for the manifest `desk`).
  */
-export declare function policyCallOf(s: Pick<Session, "manifest">, request: HostEffect, kind: "mcp" | "http"): PolicyCall;
+export declare function policyCallOf(s: Pick<Session, "manifest">, request: HostEffect, kind: "mcp" | "http" | "runtime"): PolicyCall;
 /** Decides `call` by `rules`; `pinnedAsk` adds the ask of a manifest saved before R5 step 2. */
 export declare function decide(rules: readonly ToolRule[], call: PolicyCall, pinnedAsk?: boolean): PolicyDecision;
 /**

package/dist/gates/policy.js

@@ -16,7 +16,9 @@
  * for an agent covers the agents it uses as tools.
  *
  * A rule's `tool` matches the tool's identity (protocol 15): an MCP tool's own name on its
- * server (`server` names the server), an HTTP tool's declared name, a flow stage's key. The name
+ * server (`server` names the server), an HTTP tool's declared name, a flow stage's key, an
+ * operation the Runtime serves (`triggers`, `memory`, `schedule_wake`; D83), which only a rule of
+ * `kind: "runtime"` matches. The name
  * a harness gave the model never matches. A stored rule whose `tool` has `__` in it (an MCP tool
  * named by its old model-facing `server__tool` name) makes the policy unreadable, so every call
  * is refused until the policy names it by `server` and `tool`: a rule never silently stops
@@ -85,7 +87,9 @@ export function policyCallOf(s, request, kind) {
         kind,
         tool: target?.kind === "mcp" || target?.kind === "http"
             ? target.tool
-            : (request.key ?? request.effectId),
+            : target?.kind === "runtime"
+                ? target.operation
+                : (request.key ?? request.effectId),
         ...(target?.kind === "mcp" ? { server: target.server } : {}),
         agent: request.agent?.id ?? s.manifest.id,
         ...(request.agent === undefined ? {} : { root: s.manifest.id }),
@@ -127,6 +131,10 @@ export function pinnedApproval(manifest, request) {
 function matches(rule, call) {
     if (rule.kind !== undefined && rule.kind !== call.kind)
         return false;
+    // A runtime operation matches only a rule that names kind `runtime` (D83): rules written for
+    // MCP and HTTP tools keep their meaning.
+    if (call.kind === "runtime" && rule.kind !== "runtime")
+        return false;
     if (rule.tool !== undefined && !glob(rule.tool).test(call.tool))
         return false;
     if (rule.server !== undefined && (call.server === undefined || !glob(rule.server).test(call.server)))