@nylorun/runtime 0.51.2-beta → 0.53.0-beta

package/dist/host/stack-config.js

@@ -53,7 +53,7 @@ import { LOOPBACK_HOSTS } from "@nylorun/core/contracts";
 import { blockedAddresses } from "../sandbox/pods/network-gate.js";
 import { HostTuningError, parseHostTuning } from "../tuning.js";
 import { HOST_IDENTITY_PROVIDERS } from "../vault/host-identity.js";
-export const RUNTIME_SERVICES = ["core", "loop", "gates", "keys", "egress", "harness"];
+export const RUNTIME_SERVICES = ["core", "loop", "gates", "keys", "egress", "harness", "computer"];
 /**
  * Services that may share a process (D12): they hold the same secrets and parse the same
  * trust class of input. keys joins gates (F4.2), and egress joins them (F7.2). The harness
@@ -63,6 +63,7 @@ const SERVICE_GROUPS = [
     ["core", "loop"],
     ["gates", "keys", "egress"],
     ["harness"],
+    ["computer"],
 ];
 /** Where the gates service listens by default. */
 export const DEFAULT_GATES_LISTEN_PORT = 4100;
@@ -264,6 +265,8 @@ export function parseStackConfig(env, argv) {
     const tuning = parseTuning(env);
     if (services.has("harness"))
         return { services, harness: parseHarnessService(env), endpoints: {}, ...(tuning ? { tuning } : {}) };
+    if (services.has("computer"))
+        return { services, computer: parseComputerService(env), endpoints: {}, ...(tuning ? { tuning } : {}) };
     // The image sets NYLORUN_LISTEN_*: only the API's processes read them.
     const servesApi = services.has("core") || services.has("loop");
     const listen = servesApi ? parseListen(env) : undefined;
@@ -567,7 +570,16 @@ function parseSandboxes(env) {
     const harnessImage = read(env, "NYLORUN_SANDBOX_HARNESS_IMAGE");
     if (harnessImage === undefined || /\s/.test(harnessImage))
         throw new StackConfigError("NYLORUN_SANDBOX_HARNESS_IMAGE is required with NYLORUN_SANDBOXES_URL: the Runtime image sandbox pods copy the engine from (`nylorun start` sets it)");
-    return { url: url.replace(/\/+$/, ""), token, harnessImage };
+    const gatewayUrl = parseUrl(env, "NYLORUN_SANDBOX_GATEWAY_URL", ["http:", "https:"]);
+    const ticketKeyFile = read(env, "NYLORUN_COMPUTER_TICKET_KEY_FILE");
+    if ((gatewayUrl === undefined) !== (ticketKeyFile === undefined))
+        throw new StackConfigError("NYLORUN_SANDBOX_GATEWAY_URL and NYLORUN_COMPUTER_TICKET_KEY_FILE go together: computers need the sandbox gateway and the key core signs their tickets with");
+    return {
+        url: url.replace(/\/+$/, ""),
+        token,
+        harnessImage,
+        ...(gatewayUrl && ticketKeyFile ? { computer: { gatewayUrl: gatewayUrl.replace(/\/+$/, ""), ticketKeyFile } } : {}),
+    };
 }
 /**
  * `StackConfig.harnessListener` from `NYLORUN_HARNESS_LISTEN_*` and `NYLORUN_HARNESS_TOKEN`
@@ -585,6 +597,34 @@ function parseHarnessListener(env, tokenRequired = true) {
 }
 /** What a harness process must not hold: it runs next to agent code. */
 const HARNESS_REFUSED = ["NYLORUN_DATABASE_URL", "NYLORUN_GATES_TOKEN", "NYLORUN_KEYS_URL"];
+/**
+ * The engine in a computer (ADR-149), from the variables its template carries: the port, the
+ * ticket key's public half and the file with the actor's name. It holds no Runtime credential.
+ */
+function parseComputerService(env) {
+    const held = [...HARNESS_REFUSED, "NYLORUN_HARNESS_TOKEN", "NYLORUN_JOIN_TOKEN"].filter((name) => read(env, name) !== undefined);
+    if (held.length > 0)
+        throw new StackConfigError(`--service computer refuses to start with ${held.join(", ")} set: a computer holds no Runtime credential`);
+    const ticketKey = read(env, "NYLORUN_COMPUTER_TICKET_KEY");
+    if (ticketKey === undefined || !ticketKey.includes("PUBLIC KEY"))
+        throw new StackConfigError("NYLORUN_COMPUTER_TICKET_KEY is required for --service computer: the PEM public key tickets are checked with");
+    const nameFile = read(env, "NYLORUN_COMPUTER_NAME_FILE");
+    if (nameFile === undefined)
+        throw new StackConfigError("NYLORUN_COMPUTER_NAME_FILE is required for --service computer: the file holding the actor's name");
+    const rawPort = read(env, "NYLORUN_COMPUTER_PORT");
+    const root = read(env, "NYLORUN_HARNESS_ROOT") ?? "/harness";
+    if (!root.startsWith("/"))
+        throw new StackConfigError(`NYLORUN_HARNESS_ROOT must be an absolute path, not ${root}`);
+    const egressCaFile = read(env, "NYLORUN_SANDBOX_EGRESS_CA_FILE");
+    return {
+        port: rawPort === undefined ? 8080 : parsePort("NYLORUN_COMPUTER_PORT", rawPort),
+        ticketKey,
+        nameFile,
+        root,
+        ...(egressCaFile ? { egressCaFile } : {}),
+        substrate: read(env, "NYLORUN_SANDBOX_SUBSTRATE") === "1",
+    };
+}
 /** `StackConfig.harness` from `NYLORUN_HARNESS_*` and `NYLORUN_GATES_URL`. */
 function parseHarnessService(env) {
     const held = [

package/dist/management-openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.2.0",
   "info": {
     "title": "Nylorun Management API",
-    "version": "0.51.2-beta",
+    "version": "0.53.0-beta",
     "x-nylorun-protocol": {
       "min": 16,
       "max": 18,
@@ -44,6 +44,7 @@
         "secret-routing",
         "remove-tools",
         "agent-triggers",
+        "api-triggers",
         "steer",
         "queue-recovery",
         "a2a-steer"

package/dist/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.2.0",
   "info": {
     "title": "Nylorun Runtime API",
-    "version": "0.51.2-beta",
+    "version": "0.53.0-beta",
     "x-nylorun-protocol": {
       "min": 16,
       "max": 18,
@@ -44,6 +44,7 @@
         "secret-routing",
         "remove-tools",
         "agent-triggers",
+        "api-triggers",
         "steer",
         "queue-recovery",
         "a2a-steer"
@@ -23102,6 +23103,7 @@
                   "enum": [
                     "manifest",
                     "agent",
+                    "api",
                     "wake"
                   ]
                 },
@@ -23117,6 +23119,12 @@
                     "null"
                   ]
                 },
+                "principal": {
+                  "type": [
+                    "string",
+                    "null"
+                  ]
+                },
                 "status": {
                   "type": "string",
                   "enum": [
@@ -23186,6 +23194,152 @@
         ],
         "additionalProperties": false
       },
+      "TriggerView": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string"
+          },
+          "kind": {
+            "type": "string",
+            "enum": [
+              "schedule",
+              "at",
+              "webhook",
+              "wake"
+            ]
+          },
+          "origin": {
+            "type": "string",
+            "enum": [
+              "manifest",
+              "agent",
+              "api",
+              "wake"
+            ]
+          },
+          "title": {
+            "type": [
+              "string",
+              "null"
+            ]
+          },
+          "createdSessionId": {
+            "type": [
+              "string",
+              "null"
+            ]
+          },
+          "principal": {
+            "type": [
+              "string",
+              "null"
+            ]
+          },
+          "status": {
+            "type": "string",
+            "enum": [
+              "active",
+              "paused",
+              "completed"
+            ]
+          },
+          "pausedReason": {
+            "type": [
+              "string",
+              "null"
+            ]
+          },
+          "schedule": {
+            "type": "string"
+          },
+          "timezone": {
+            "type": "string"
+          },
+          "at": {
+            "type": "string"
+          },
+          "session": {
+            "type": "string"
+          },
+          "nextRunAt": {
+            "type": [
+              "string",
+              "null"
+            ]
+          },
+          "lastRunAt": {
+            "type": [
+              "string",
+              "null"
+            ]
+          },
+          "webhookUrl": {
+            "type": "string"
+          },
+          "secretSet": {
+            "type": "boolean"
+          },
+          "prompt": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "kind",
+          "origin",
+          "title",
+          "createdSessionId",
+          "status",
+          "pausedReason",
+          "session",
+          "nextRunAt",
+          "lastRunAt"
+        ],
+        "additionalProperties": false
+      },
+      "PutTriggerRequest": {
+        "type": "object",
+        "properties": {
+          "schedule": {
+            "type": "string",
+            "pattern": "^\\S+(\\s+\\S+){4}$"
+          },
+          "timezone": {
+            "type": "string",
+            "minLength": 1
+          },
+          "at": {
+            "type": "string",
+            "format": "date-time"
+          },
+          "webhook": {
+            "type": "string",
+            "enum": [
+              "standard-webhooks"
+            ]
+          },
+          "session": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 200
+          },
+          "prompt": {
+            "type": "string",
+            "minLength": 1
+          },
+          "title": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 80
+          }
+        },
+        "required": [
+          "session",
+          "prompt"
+        ],
+        "additionalProperties": false
+      },
       "RunTriggerResponse": {
         "type": "object",
         "properties": {
@@ -23440,6 +23594,7 @@
                 "enum": [
                   "manifest",
                   "agent",
+                  "api",
                   "wake"
                 ]
               },
@@ -31997,7 +32152,7 @@
           "Triggers"
         ],
         "summary": "List an Agent's triggers",
-        "description": "Each trigger its manifest declares, and each its agents made with the `triggers` tool (`origin: agent`, with the title and the session that made it), with what the Agent holds of it: its status (`active`, `paused` with a reason, `completed` for an `at` that ran), its prompt, when it runs next and last ran. A session's booked wake is not listed.",
+        "description": "Each trigger its manifest declares, each its agents made with the `triggers` tool (`origin: agent`, with the title and the session that made it), and each a client put over the API (`origin: api`, with the title and the `principal` that put it), with what the Agent holds of it: its status (`active`, `paused` with a reason, `completed` for an `at` that ran), its prompt, when it runs next and last ran. A session's booked wake is not listed.",
         "security": [
           {
             "applicationKey": []
@@ -32132,13 +32287,13 @@
         }
       }
     },
-    "/v1/agents/{agentId}/triggers/{triggerId}/pause": {
-      "post": {
+    "/v1/agents/{agentId}/triggers/{triggerId}": {
+      "put": {
         "tags": [
           "Triggers"
         ],
-        "summary": "Pause a trigger",
-        "description": "It stops firing until it is resumed; a run already started or queued goes on.",
+        "summary": "Put a trigger on an Agent",
+        "description": "Creates or replaces the Agent's trigger `triggerId` of origin `api`: a `Trigger` exactly as a definition's `runtime.triggers` entry holds it (one of `schedule` with `timezone`, `at` or `webhook`; `session`; `prompt`), and an optional `title`. A new one is active with its next time; a replaced one gets its next time again and keeps its status, so a paused one stays paused. The same body again changes nothing and records no event. The checks and limits are a definition's; `runtime.limits.triggers.count` covers the triggers the Agent's agents made and those put here. Upgrades never touch it; `DELETE` removes it. Records `agent.trigger_created` or `agent.trigger_updated` (with `changed`) on the Agent's events. Host feature `api-triggers`.",
         "security": [
           {
             "applicationKey": []
@@ -32207,19 +32362,32 @@
             "in": "header"
           }
         ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PutTriggerRequest"
+              }
+            }
+          }
+        },
         "responses": {
           "200": {
-            "description": "The Agent's triggers",
+            "description": "The trigger, as the list shows it",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/TriggerList"
+                  "$ref": "#/components/schemas/TriggerView"
                 }
               }
             }
           },
           "400": {
-            "description": "Invalid headers, path, body or cursor",
+            "description": "Not a trigger, or one the checks refuse: a bad cron or time zone, runs closer than the minimum interval, an `at` not in the future, a prompt too long"
+          },
+          "401": {
+            "description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
             "content": {
               "application/json": {
                 "schema": {
@@ -32228,8 +32396,8 @@
               }
             }
           },
-          "401": {
-            "description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
+          "403": {
+            "description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
             "content": {
               "application/json": {
                 "schema": {
@@ -32238,8 +32406,27 @@
               }
             }
           },
-          "403": {
-            "description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
+          "404": {
+            "description": "No such Agent"
+          },
+          "409": {
+            "description": "The definition declares this id, or an agent's trigger or a booked wake holds it (`trigger_conflict`)"
+          },
+          "422": {
+            "description": "The Agent holds as many triggers its agents or clients made as `limits.triggers.count` allows (`trigger_limit`)"
+          },
+          "426": {
+            "description": "`Nylorun-Protocol` missing or unsupported",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ProtocolRejected"
+                }
+              }
+            }
+          },
+          "503": {
+            "description": "The Tenant's storage or streams are unavailable",
             "content": {
               "application/json": {
                 "schema": {
@@ -32247,9 +32434,96 @@
                 }
               }
             }
+          }
+        }
+      },
+      "delete": {
+        "tags": [
+          "Triggers"
+        ],
+        "summary": "Delete a trigger an agent made or a client put",
+        "description": "Deletes a trigger one of the Agent's agents made with the `triggers` tool (`origin: agent`) or a client put (`origin: api`), with `agent.trigger_deleted` on the Agent's events; its runs stay. A trigger its manifest declares is refused (`trigger_from_manifest`): save a version without it, or pause it.",
+        "security": [
+          {
+            "applicationKey": []
           },
-          "404": {
-            "description": "Not found (`not_found`)",
+          {
+            "issuerToken": []
+          }
+        ],
+        "x-nylorun-credentials": [
+          "application",
+          "subject",
+          "token"
+        ],
+        "x-nylorun-scopes": [
+          "agents:write"
+        ],
+        "parameters": [
+          {
+            "schema": {
+              "type": "string",
+              "description": "The Agent id, percent-encoded"
+            },
+            "required": true,
+            "description": "The Agent id, percent-encoded",
+            "name": "agentId",
+            "in": "path"
+          },
+          {
+            "schema": {
+              "type": "string",
+              "description": "The trigger's id: in the manifest's `runtime.triggers`, or the one its agent gave it"
+            },
+            "required": true,
+            "description": "The trigger's id: in the manifest's `runtime.triggers`, or the one its agent gave it",
+            "name": "triggerId",
+            "in": "path"
+          },
+          {
+            "schema": {
+              "type": "string",
+              "description": "The protocol version, `18`"
+            },
+            "required": true,
+            "description": "The protocol version, `18`",
+            "name": "Nylorun-Protocol",
+            "in": "header"
+          },
+          {
+            "schema": {
+              "type": "string",
+              "description": "The person an application key acts for"
+            },
+            "required": false,
+            "description": "The person an application key acts for",
+            "name": "Nylorun-Subject",
+            "in": "header"
+          },
+          {
+            "schema": {
+              "type": "string",
+              "description": "The subject's space-separated scopes; required with a subject"
+            },
+            "required": false,
+            "description": "The subject's space-separated scopes; required with a subject",
+            "name": "Nylorun-Scopes",
+            "in": "header"
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Deleted",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/DeletedResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Invalid headers, path, body or cursor",
             "content": {
               "application/json": {
                 "schema": {
@@ -32258,8 +32532,31 @@
               }
             }
           },
+          "401": {
+            "description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Rejected"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Rejected"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "The Agent has no such trigger"
+          },
           "409": {
-            "description": "An `at` whose time has passed (`trigger_expired`)"
+            "description": "The manifest declares it (`trigger_from_manifest`)"
           },
           "426": {
             "description": "`Nylorun-Protocol` missing or unsupported",
@@ -32284,13 +32581,13 @@
         }
       }
     },
-    "/v1/agents/{agentId}/triggers/{triggerId}/resume": {
+    "/v1/agents/{agentId}/triggers/{triggerId}/pause": {
       "post": {
         "tags": [
           "Triggers"
         ],
-        "summary": "Resume a trigger",
-        "description": "It fires again from its next time after now; missed times are not run. An `at` whose time has passed is refused (`trigger_expired`).",
+        "summary": "Pause a trigger",
+        "description": "It stops firing until it is resumed; a run already started or queued goes on.",
         "security": [
           {
             "applicationKey": []
@@ -32436,13 +32733,13 @@
         }
       }
     },
-    "/v1/agents/{agentId}/triggers/{triggerId}/run": {
+    "/v1/agents/{agentId}/triggers/{triggerId}/resume": {
       "post": {
         "tags": [
           "Triggers"
         ],
-        "summary": "Run a trigger now",
-        "description": "Runs it once now, paused or not, as if it had fired: a turn on its session, or a queued message when a turn runs there. A retried request with the same `Idempotency-Key` answers the same run.",
+        "summary": "Resume a trigger",
+        "description": "It fires again from its next time after now; missed times are not run. An `at` whose time has passed is refused (`trigger_expired`).",
         "security": [
           {
             "applicationKey": []
@@ -32509,25 +32806,15 @@
             "description": "The subject's space-separated scopes; required with a subject",
             "name": "Nylorun-Scopes",
             "in": "header"
-          },
-          {
-            "schema": {
-              "type": "string",
-              "minLength": 1,
-              "maxLength": 200
-            },
-            "required": true,
-            "name": "Idempotency-Key",
-            "in": "header"
           }
         ],
         "responses": {
           "200": {
-            "description": "The run",
+            "description": "The Agent's triggers",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/RunTriggerResponse"
+                  "$ref": "#/components/schemas/TriggerList"
                 }
               }
             }
@@ -32572,6 +32859,9 @@
               }
             }
           },
+          "409": {
+            "description": "An `at` whose time has passed (`trigger_expired`)"
+          },
           "426": {
             "description": "`Nylorun-Protocol` missing or unsupported",
             "content": {
@@ -32595,13 +32885,13 @@
         }
       }
     },
-    "/v1/agents/{agentId}/triggers/{triggerId}": {
-      "delete": {
+    "/v1/agents/{agentId}/triggers/{triggerId}/run": {
+      "post": {
         "tags": [
           "Triggers"
         ],
-        "summary": "Delete a trigger an agent made",
-        "description": "Deletes a trigger one of the Agent's agents made with the `triggers` tool (`origin: agent`), with `agent.trigger_deleted` on the Agent's events; its runs stay. A trigger its manifest declares is refused (`trigger_from_manifest`): save a version without it, or pause it.",
+        "summary": "Run a trigger now",
+        "description": "Runs it once now, paused or not, as if it had fired: a turn on its session, or a queued message when a turn runs there. A retried request with the same `Idempotency-Key` answers the same run.",
         "security": [
           {
             "applicationKey": []
@@ -32668,15 +32958,25 @@
             "description": "The subject's space-separated scopes; required with a subject",
             "name": "Nylorun-Scopes",
             "in": "header"
+          },
+          {
+            "schema": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 200
+            },
+            "required": true,
+            "name": "Idempotency-Key",
+            "in": "header"
           }
         ],
         "responses": {
           "200": {
-            "description": "Deleted",
+            "description": "The run",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/DeletedResponse"
+                  "$ref": "#/components/schemas/RunTriggerResponse"
                 }
               }
             }
@@ -32712,10 +33012,14 @@
             }
           },
           "404": {
-            "description": "The Agent has no such trigger"
-          },
-          "409": {
-            "description": "The manifest declares it (`trigger_from_manifest`)"
+            "description": "Not found (`not_found`)",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Rejected"
+                }
+              }
+            }
           },
           "426": {
             "description": "`Nylorun-Protocol` missing or unsupported",