@nylorun/runtime 0.51.2-beta → 0.52.0-beta

package/dist/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.2.0",
   "info": {
     "title": "Nylorun Runtime API",
-    "version": "0.51.2-beta",
+    "version": "0.52.0-beta",
     "x-nylorun-protocol": {
       "min": 16,
       "max": 18,
@@ -44,6 +44,7 @@
         "secret-routing",
         "remove-tools",
         "agent-triggers",
+        "api-triggers",
         "steer",
         "queue-recovery",
         "a2a-steer"
@@ -23102,6 +23103,7 @@
                   "enum": [
                     "manifest",
                     "agent",
+                    "api",
                     "wake"
                   ]
                 },
@@ -23117,6 +23119,12 @@
                     "null"
                   ]
                 },
+                "principal": {
+                  "type": [
+                    "string",
+                    "null"
+                  ]
+                },
                 "status": {
                   "type": "string",
                   "enum": [
@@ -23186,6 +23194,152 @@
         ],
         "additionalProperties": false
       },
+      "TriggerView": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string"
+          },
+          "kind": {
+            "type": "string",
+            "enum": [
+              "schedule",
+              "at",
+              "webhook",
+              "wake"
+            ]
+          },
+          "origin": {
+            "type": "string",
+            "enum": [
+              "manifest",
+              "agent",
+              "api",
+              "wake"
+            ]
+          },
+          "title": {
+            "type": [
+              "string",
+              "null"
+            ]
+          },
+          "createdSessionId": {
+            "type": [
+              "string",
+              "null"
+            ]
+          },
+          "principal": {
+            "type": [
+              "string",
+              "null"
+            ]
+          },
+          "status": {
+            "type": "string",
+            "enum": [
+              "active",
+              "paused",
+              "completed"
+            ]
+          },
+          "pausedReason": {
+            "type": [
+              "string",
+              "null"
+            ]
+          },
+          "schedule": {
+            "type": "string"
+          },
+          "timezone": {
+            "type": "string"
+          },
+          "at": {
+            "type": "string"
+          },
+          "session": {
+            "type": "string"
+          },
+          "nextRunAt": {
+            "type": [
+              "string",
+              "null"
+            ]
+          },
+          "lastRunAt": {
+            "type": [
+              "string",
+              "null"
+            ]
+          },
+          "webhookUrl": {
+            "type": "string"
+          },
+          "secretSet": {
+            "type": "boolean"
+          },
+          "prompt": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "kind",
+          "origin",
+          "title",
+          "createdSessionId",
+          "status",
+          "pausedReason",
+          "session",
+          "nextRunAt",
+          "lastRunAt"
+        ],
+        "additionalProperties": false
+      },
+      "PutTriggerRequest": {
+        "type": "object",
+        "properties": {
+          "schedule": {
+            "type": "string",
+            "pattern": "^\\S+(\\s+\\S+){4}$"
+          },
+          "timezone": {
+            "type": "string",
+            "minLength": 1
+          },
+          "at": {
+            "type": "string",
+            "format": "date-time"
+          },
+          "webhook": {
+            "type": "string",
+            "enum": [
+              "standard-webhooks"
+            ]
+          },
+          "session": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 200
+          },
+          "prompt": {
+            "type": "string",
+            "minLength": 1
+          },
+          "title": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 80
+          }
+        },
+        "required": [
+          "session",
+          "prompt"
+        ],
+        "additionalProperties": false
+      },
       "RunTriggerResponse": {
         "type": "object",
         "properties": {
@@ -23440,6 +23594,7 @@
                 "enum": [
                   "manifest",
                   "agent",
+                  "api",
                   "wake"
                 ]
               },
@@ -31997,7 +32152,7 @@
           "Triggers"
         ],
         "summary": "List an Agent's triggers",
-        "description": "Each trigger its manifest declares, and each its agents made with the `triggers` tool (`origin: agent`, with the title and the session that made it), with what the Agent holds of it: its status (`active`, `paused` with a reason, `completed` for an `at` that ran), its prompt, when it runs next and last ran. A session's booked wake is not listed.",
+        "description": "Each trigger its manifest declares, each its agents made with the `triggers` tool (`origin: agent`, with the title and the session that made it), and each a client put over the API (`origin: api`, with the title and the `principal` that put it), with what the Agent holds of it: its status (`active`, `paused` with a reason, `completed` for an `at` that ran), its prompt, when it runs next and last ran. A session's booked wake is not listed.",
         "security": [
           {
             "applicationKey": []
@@ -32132,13 +32287,13 @@
         }
       }
     },
-    "/v1/agents/{agentId}/triggers/{triggerId}/pause": {
-      "post": {
+    "/v1/agents/{agentId}/triggers/{triggerId}": {
+      "put": {
         "tags": [
           "Triggers"
         ],
-        "summary": "Pause a trigger",
-        "description": "It stops firing until it is resumed; a run already started or queued goes on.",
+        "summary": "Put a trigger on an Agent",
+        "description": "Creates or replaces the Agent's trigger `triggerId` of origin `api`: a `Trigger` exactly as a definition's `runtime.triggers` entry holds it (one of `schedule` with `timezone`, `at` or `webhook`; `session`; `prompt`), and an optional `title`. A new one is active with its next time; a replaced one gets its next time again and keeps its status, so a paused one stays paused. The same body again changes nothing and records no event. The checks and limits are a definition's; `runtime.limits.triggers.count` covers the triggers the Agent's agents made and those put here. Upgrades never touch it; `DELETE` removes it. Records `agent.trigger_created` or `agent.trigger_updated` (with `changed`) on the Agent's events. Host feature `api-triggers`.",
         "security": [
           {
             "applicationKey": []
@@ -32207,19 +32362,32 @@
             "in": "header"
           }
         ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PutTriggerRequest"
+              }
+            }
+          }
+        },
         "responses": {
           "200": {
-            "description": "The Agent's triggers",
+            "description": "The trigger, as the list shows it",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/TriggerList"
+                  "$ref": "#/components/schemas/TriggerView"
                 }
               }
             }
           },
           "400": {
-            "description": "Invalid headers, path, body or cursor",
+            "description": "Not a trigger, or one the checks refuse: a bad cron or time zone, runs closer than the minimum interval, an `at` not in the future, a prompt too long"
+          },
+          "401": {
+            "description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
             "content": {
               "application/json": {
                 "schema": {
@@ -32228,8 +32396,8 @@
               }
             }
           },
-          "401": {
-            "description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
+          "403": {
+            "description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
             "content": {
               "application/json": {
                 "schema": {
@@ -32238,8 +32406,27 @@
               }
             }
           },
-          "403": {
-            "description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
+          "404": {
+            "description": "No such Agent"
+          },
+          "409": {
+            "description": "The definition declares this id, or an agent's trigger or a booked wake holds it (`trigger_conflict`)"
+          },
+          "422": {
+            "description": "The Agent holds as many triggers its agents or clients made as `limits.triggers.count` allows (`trigger_limit`)"
+          },
+          "426": {
+            "description": "`Nylorun-Protocol` missing or unsupported",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ProtocolRejected"
+                }
+              }
+            }
+          },
+          "503": {
+            "description": "The Tenant's storage or streams are unavailable",
             "content": {
               "application/json": {
                 "schema": {
@@ -32247,9 +32434,96 @@
                 }
               }
             }
+          }
+        }
+      },
+      "delete": {
+        "tags": [
+          "Triggers"
+        ],
+        "summary": "Delete a trigger an agent made or a client put",
+        "description": "Deletes a trigger one of the Agent's agents made with the `triggers` tool (`origin: agent`) or a client put (`origin: api`), with `agent.trigger_deleted` on the Agent's events; its runs stay. A trigger its manifest declares is refused (`trigger_from_manifest`): save a version without it, or pause it.",
+        "security": [
+          {
+            "applicationKey": []
           },
-          "404": {
-            "description": "Not found (`not_found`)",
+          {
+            "issuerToken": []
+          }
+        ],
+        "x-nylorun-credentials": [
+          "application",
+          "subject",
+          "token"
+        ],
+        "x-nylorun-scopes": [
+          "agents:write"
+        ],
+        "parameters": [
+          {
+            "schema": {
+              "type": "string",
+              "description": "The Agent id, percent-encoded"
+            },
+            "required": true,
+            "description": "The Agent id, percent-encoded",
+            "name": "agentId",
+            "in": "path"
+          },
+          {
+            "schema": {
+              "type": "string",
+              "description": "The trigger's id: in the manifest's `runtime.triggers`, or the one its agent gave it"
+            },
+            "required": true,
+            "description": "The trigger's id: in the manifest's `runtime.triggers`, or the one its agent gave it",
+            "name": "triggerId",
+            "in": "path"
+          },
+          {
+            "schema": {
+              "type": "string",
+              "description": "The protocol version, `18`"
+            },
+            "required": true,
+            "description": "The protocol version, `18`",
+            "name": "Nylorun-Protocol",
+            "in": "header"
+          },
+          {
+            "schema": {
+              "type": "string",
+              "description": "The person an application key acts for"
+            },
+            "required": false,
+            "description": "The person an application key acts for",
+            "name": "Nylorun-Subject",
+            "in": "header"
+          },
+          {
+            "schema": {
+              "type": "string",
+              "description": "The subject's space-separated scopes; required with a subject"
+            },
+            "required": false,
+            "description": "The subject's space-separated scopes; required with a subject",
+            "name": "Nylorun-Scopes",
+            "in": "header"
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Deleted",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/DeletedResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Invalid headers, path, body or cursor",
             "content": {
               "application/json": {
                 "schema": {
@@ -32258,8 +32532,31 @@
               }
             }
           },
+          "401": {
+            "description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Rejected"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Rejected"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "The Agent has no such trigger"
+          },
           "409": {
-            "description": "An `at` whose time has passed (`trigger_expired`)"
+            "description": "The manifest declares it (`trigger_from_manifest`)"
           },
           "426": {
             "description": "`Nylorun-Protocol` missing or unsupported",
@@ -32284,13 +32581,13 @@
         }
       }
     },
-    "/v1/agents/{agentId}/triggers/{triggerId}/resume": {
+    "/v1/agents/{agentId}/triggers/{triggerId}/pause": {
       "post": {
         "tags": [
           "Triggers"
         ],
-        "summary": "Resume a trigger",
-        "description": "It fires again from its next time after now; missed times are not run. An `at` whose time has passed is refused (`trigger_expired`).",
+        "summary": "Pause a trigger",
+        "description": "It stops firing until it is resumed; a run already started or queued goes on.",
         "security": [
           {
             "applicationKey": []
@@ -32436,13 +32733,13 @@
         }
       }
     },
-    "/v1/agents/{agentId}/triggers/{triggerId}/run": {
+    "/v1/agents/{agentId}/triggers/{triggerId}/resume": {
       "post": {
         "tags": [
           "Triggers"
         ],
-        "summary": "Run a trigger now",
-        "description": "Runs it once now, paused or not, as if it had fired: a turn on its session, or a queued message when a turn runs there. A retried request with the same `Idempotency-Key` answers the same run.",
+        "summary": "Resume a trigger",
+        "description": "It fires again from its next time after now; missed times are not run. An `at` whose time has passed is refused (`trigger_expired`).",
         "security": [
           {
             "applicationKey": []
@@ -32509,25 +32806,15 @@
             "description": "The subject's space-separated scopes; required with a subject",
             "name": "Nylorun-Scopes",
             "in": "header"
-          },
-          {
-            "schema": {
-              "type": "string",
-              "minLength": 1,
-              "maxLength": 200
-            },
-            "required": true,
-            "name": "Idempotency-Key",
-            "in": "header"
           }
         ],
         "responses": {
           "200": {
-            "description": "The run",
+            "description": "The Agent's triggers",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/RunTriggerResponse"
+                  "$ref": "#/components/schemas/TriggerList"
                 }
               }
             }
@@ -32572,6 +32859,9 @@
               }
             }
           },
+          "409": {
+            "description": "An `at` whose time has passed (`trigger_expired`)"
+          },
           "426": {
             "description": "`Nylorun-Protocol` missing or unsupported",
             "content": {
@@ -32595,13 +32885,13 @@
         }
       }
     },
-    "/v1/agents/{agentId}/triggers/{triggerId}": {
-      "delete": {
+    "/v1/agents/{agentId}/triggers/{triggerId}/run": {
+      "post": {
         "tags": [
           "Triggers"
         ],
-        "summary": "Delete a trigger an agent made",
-        "description": "Deletes a trigger one of the Agent's agents made with the `triggers` tool (`origin: agent`), with `agent.trigger_deleted` on the Agent's events; its runs stay. A trigger its manifest declares is refused (`trigger_from_manifest`): save a version without it, or pause it.",
+        "summary": "Run a trigger now",
+        "description": "Runs it once now, paused or not, as if it had fired: a turn on its session, or a queued message when a turn runs there. A retried request with the same `Idempotency-Key` answers the same run.",
         "security": [
           {
             "applicationKey": []
@@ -32668,15 +32958,25 @@
             "description": "The subject's space-separated scopes; required with a subject",
             "name": "Nylorun-Scopes",
             "in": "header"
+          },
+          {
+            "schema": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 200
+            },
+            "required": true,
+            "name": "Idempotency-Key",
+            "in": "header"
           }
         ],
         "responses": {
           "200": {
-            "description": "Deleted",
+            "description": "The run",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/DeletedResponse"
+                  "$ref": "#/components/schemas/RunTriggerResponse"
                 }
               }
             }
@@ -32712,10 +33012,14 @@
             }
           },
           "404": {
-            "description": "The Agent has no such trigger"
-          },
-          "409": {
-            "description": "The manifest declares it (`trigger_from_manifest`)"
+            "description": "Not found (`not_found`)",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Rejected"
+                }
+              }
+            }
           },
           "426": {
             "description": "`Nylorun-Protocol` missing or unsupported",

package/dist/store/postgres/drizzle/0049_agent_triggers_api.sql

@@ -0,0 +1,3 @@
+ALTER TABLE "nylorun"."agent_triggers" DROP CONSTRAINT "agent_triggers_origin_check";--> statement-breakpoint
+ALTER TABLE "nylorun"."agent_triggers" ADD COLUMN "principal" text;--> statement-breakpoint
+ALTER TABLE "nylorun"."agent_triggers" ADD CONSTRAINT "agent_triggers_origin_check" CHECK ("nylorun"."agent_triggers"."origin" IN ('manifest', 'agent', 'api', 'wake'));

package/dist/store/postgres/drizzle/meta/_journal.json

@@ -344,6 +344,13 @@
       "when": 1794635246579,
       "tag": "0048_sandbox_pod_drained_at",
       "breakpoints": true
+    },
+    {
+      "idx": 49,
+      "version": "7",
+      "when": 1794674884188,
+      "tag": "0049_agent_triggers_api",
+      "breakpoints": true
     }
   ]
 }

package/dist/store/postgres/schema.d.ts

@@ -1793,14 +1793,31 @@ export declare const agentTriggers: import("drizzle-orm/pg-core").PgTableWithCol
             tableName: "agent_triggers";
             dataType: "string";
             columnType: "PgText";
-            data: "agent" | "manifest" | "wake";
+            data: "agent" | "api" | "manifest" | "wake";
             driverParam: string;
             notNull: true;
             hasDefault: true;
             isPrimaryKey: false;
             isAutoincrement: false;
             hasRuntimeDefault: false;
-            enumValues: ["manifest", "agent", "wake"];
+            enumValues: ["manifest", "agent", "api", "wake"];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        principal: import("drizzle-orm/pg-core").PgColumn<{
+            name: "principal";
+            tableName: "agent_triggers";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
             baseColumn: never;
             identity: undefined;
             generated: undefined;
@@ -2580,14 +2597,14 @@ export declare const triggerRuns: import("drizzle-orm/pg-core").PgTableWithColum
             tableName: "trigger_runs";
             dataType: "string";
             columnType: "PgText";
-            data: "agent" | "manifest" | "wake";
+            data: "agent" | "api" | "manifest" | "wake";
             driverParam: string;
             notNull: true;
             hasDefault: true;
             isPrimaryKey: false;
             isAutoincrement: false;
             hasRuntimeDefault: false;
-            enumValues: ["manifest", "agent", "wake"];
+            enumValues: ["manifest", "agent", "api", "wake"];
             baseColumn: never;
             identity: undefined;
             generated: undefined;