@runuai/host 0.9.120 → 0.9.121

package/src/protocol.ts

@@ -1074,6 +1074,9 @@ export interface HostCapabilities {
    * Present when the host is configured for them; the cloud shows the
    * provider/region on the host page and, eventually, per-task backing
    * choice keys off it. */
+  /** ADR-133 sidecar mode: this host IS the task's machine — exactly one
+   *  task, no container runtime, tunnels on loopback. */
+  sidecar?: { taskId: string };
   machineTasks?: {
     provider: string;
     region?: string;
@@ -1695,9 +1698,32 @@ export type CloudToHost =
   // only entries it never transmitted, replaying nothing.
   | { kind: "event.resume"; afterSeq: number | null }
   // ADR-103: cumulative — the host trims outbox entries with seq <= seq.
-  | { kind: "event.ack"; seq: number };
+  | { kind: "event.ack"; seq: number }
+  // ADR-133 leases: the cloud's answer to a sidecar's `lease.request`.
+  | { kind: "lease.grant"; opId: string; lease: TaskLease }
+  | { kind: "lease.deny"; opId: string; error: string };
 
 /** One MCP-connection operation (ADR-057), executed by the host. */
+/**
+ * ADR-133: the short-lived AWS credentials a task machine runs on — an STS
+ * session tagged with the task's workspace and owner, issued by the cloud
+ * over the bridge and held in the sidecar's memory only. `expiresAt` is the
+ * session expiry (epoch ms); the sidecar re-requests before it.
+ */
+export interface TaskLease {
+  accessKeyId: string;
+  secretAccessKey: string;
+  sessionToken: string;
+  expiresAt: number;
+  region: string;
+  /** Files bucket and this task's prefixes inside it (S3 shared files). */
+  files: {
+    bucket: string;
+    orgPrefix: string | null;
+    userPrefix: string;
+  };
+}
+
 export type McpOp =
   // Probe `url` (MCP initialize). No auth → connected. 401 → walk the OAuth
   // discovery chain (RFC 9728 → 8414 → 7591), prepare PKCE, and ack
@@ -1751,6 +1777,8 @@ export type HostToCloud =
   // a task's containers, so the cloud mirrors the status (currently "stopped").
   | { kind: "task.status"; taskId: string; status: string }
   | { kind: "ping"; ts: number }
+  // ADR-133: a sidecar asks for (or refreshes) its task-scoped AWS lease.
+  | { kind: "lease.request"; opId: string; taskId: string }
   | {
       kind: "tunnel.ack";
       tunnelId: string;