agent-relay-server 0.11.8 → 0.11.9

package/docs/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "Agent Relay API",
-    "version": "0.11.4",
+    "version": "0.11.8",
     "description": "Real-time message bus for inter-agent communication. Agent-first: this spec is designed for machine consumption — agents can self-discover the full API surface via GET /api/spec.",
     "license": {
       "name": "MIT",
@@ -1859,6 +1859,9 @@
                   },
                   "reason": {
                     "type": "string"
+                  },
+                  "answers": {
+                    "type": "string"
                   }
                 }
               }
@@ -2718,6 +2721,90 @@
         ]
       }
     },
+    "/api/orchestrators/{id}/runner-token": {
+      "post": {
+        "operationId": "postOrchestratorRunnerToken",
+        "summary": "Re-mint a runner's runtime token",
+        "tags": [
+          "Orchestrators"
+        ],
+        "description": "Orchestrator-mediated runner-token self-heal. A live runner whose runtime token has expired (e.g. the relay was unreachable across the renewal window) cannot self-renew — its dead token can't authenticate. Its orchestrator proxies the runner's expired token here using its own long-lived credential. The relay verifies the presented token is a genuine, non-revoked runner token owned by this orchestrator (signature valid even past expiry; expiry must be within a 30-day window) and mints a fresh `provider-agent` token cloning its scope, revoking the old one. The orchestrator's standing authority is the authorization; the signed token is the identity — no auth is weakened. Requires `command:write` scoped to this orchestrator.",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "required": [
+                  "token"
+                ],
+                "properties": {
+                  "token": {
+                    "type": "string",
+                    "description": "The runner's current (possibly expired) runtime token."
+                  }
+                }
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {}
+            }
+          },
+          "201": {
+            "description": "Created",
+            "content": {
+              "application/json": {}
+            }
+          },
+          "403": {
+            "description": "Forbidden",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Error"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Error"
+                }
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "bearerAuth": []
+          },
+          {
+            "tokenHeader": []
+          },
+          {
+            "tokenQuery": []
+          }
+        ]
+      }
+    },
     "/api/orchestrators/{id}/actions": {
       "post": {
         "operationId": "postOrchestratorAction",
@@ -5756,6 +5843,100 @@
         ]
       }
     },
+    "/api/steward-config": {
+      "get": {
+        "operationId": "getStewardConfigRoute",
+        "summary": "Get global steward config",
+        "tags": [
+          "Other"
+        ],
+        "description": "Returns the global, provider-independent steward configuration `{ enabled, provider, model?, effort?, permissionMode, keepaliveSeconds }`. Stewards are auto-provisioned per repo from these settings when one is needed (issue #167). Disabled by default — falls back to merged defaults until set.",
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {}
+            }
+          },
+          "400": {
+            "description": "Bad request",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Error"
+                }
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "bearerAuth": []
+          },
+          {
+            "tokenHeader": []
+          },
+          {
+            "tokenQuery": []
+          }
+        ]
+      },
+      "put": {
+        "operationId": "putStewardConfigRoute",
+        "summary": "Set global steward config",
+        "tags": [
+          "Other"
+        ],
+        "description": "Updates the global steward configuration. Body fields: `enabled`, `provider` (required), optional `model`, `effort`, `permissionMode` (default `open`), `keepaliveSeconds` (default 300). Rejects a provider/model/effort combo the provider catalog can't resolve (400). Enabling here is the opt-in that gates per-repo steward auto-provisioning.",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "value": {
+                    "type": "string"
+                  },
+                  "updatedBy": {
+                    "type": "string"
+                  }
+                }
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {}
+            }
+          },
+          "400": {
+            "description": "Bad request",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Error"
+                }
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "bearerAuth": []
+          },
+          {
+            "tokenHeader": []
+          },
+          {
+            "tokenQuery": []
+          }
+        ]
+      }
+    },
     "/api/config/{namespace}": {
       "get": {
         "operationId": "getConfigNamespace",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-relay-server",
-  "version": "0.11.8",
+  "version": "0.11.9",
   "description": "Lightweight HTTP message relay for inter-agent communication across machines",
   "module": "src/index.ts",
   "type": "module",
@@ -32,7 +32,7 @@
     "CONTRIBUTING.md"
   ],
   "dependencies": {
-    "agent-relay-sdk": "0.2.4"
+    "agent-relay-sdk": "0.2.5"
   },
   "scripts": {
     "prepack": "bun run build:dashboard >&2",