@nocobase/app-plugin-agents 0.1.0-beta.11 → 0.1.0-beta.13

package/package.json

@@ -2,7 +2,7 @@
   "name": "@nocobase/app-plugin-agents",
   "displayName": "Agents",
   "description": "Agents for NocoBase applications: agents, the model services online agents call, their runs and conversations, and the runners people connect to run them (registration, the long-poll claim, slots, the sweeper, build jobs, and the runner and CLI tarballs the application serves).",
-  "version": "0.1.0-beta.11",
+  "version": "0.1.0-beta.13",
   "type": "module",
   "prettier": "@nocobase/dev-config/prettier",
   "engines": {
@@ -143,8 +143,8 @@
     "sqlite-vec": "^0.1.9",
     "yaml": "^2.9.0",
     "zod": "^4.6.5",
-    "@nocobase/agent-protocol": "^0.1.0-beta.8",
-    "@nocobase/app-cli-client": "^0.1.0-beta.7",
+    "@nocobase/agent-protocol": "^0.1.0-beta.10",
+    "@nocobase/app-cli-client": "^0.1.0-beta.10",
     "@nocobase/cli-envelope": "^0.1.0-beta.1"
   },
   "peerDependencies": {
@@ -160,14 +160,14 @@
     "react-router": "^7.0.2",
     "recharts": "^3.8.0",
     "remark-gfm": "^4.0.1",
-    "@nocobase/app-cli": "^1.0.0-beta.22",
-    "@nocobase/app-client": "^3.0.0-beta.1",
-    "@nocobase/app-plugin-authentication": "^2.0.0-beta.9",
-    "@nocobase/app-plugin-authorization": "^1.0.0-beta.27",
-    "@nocobase/app-plugin-file": "^1.0.0-beta.23",
-    "@nocobase/app-server": "^2.0.0-beta.7",
-    "@nocobase/authorization": "^1.0.0-beta.13",
-    "@nocobase/db": "^1.0.0-beta.20",
+    "@nocobase/app-cli": "^1.0.0-beta.24",
+    "@nocobase/app-client": "^3.0.0-beta.2",
+    "@nocobase/app-plugin-authentication": "^2.0.0-beta.10",
+    "@nocobase/app-plugin-authorization": "^1.0.0-beta.28",
+    "@nocobase/app-plugin-file": "^1.0.0-beta.24",
+    "@nocobase/app-server": "^2.0.0-beta.9",
+    "@nocobase/authorization": "^1.0.0-beta.14",
+    "@nocobase/db": "^1.0.0-beta.21",
     "@nocobase/i18n": "^1.0.0-beta.7",
     "@nocobase/markdown-mermaid": "^0.1.0-beta.2",
     "@nocobase/service-provider": "^0.0.2-beta.2"
@@ -184,9 +184,9 @@
     "typescript": "^6.0.3",
     "vitest": "^4.1.10",
     "@nocobase/app-testing": "0.1.0-beta.4",
-    "@nocobase/db-postgres": "0.1.0-beta.4",
-    "@nocobase/db-sqlite": "0.1.0-beta.5",
-    "@nocobase/dev-config": "0.1.0-beta.22",
+    "@nocobase/db-postgres": "0.1.0-beta.5",
+    "@nocobase/db-sqlite": "0.1.0-beta.6",
+    "@nocobase/dev-config": "0.1.0-beta.23",
     "@nocobase/jobs": "0.1.0-beta.3"
   },
   "scripts": {

package/skills/nocobase-app-plugin-agents/references/runners.md

@@ -18,6 +18,12 @@ A runner registers once per App with a one-time registration token (10 minutes):
 
 Then on the runner's machine: `nocobase-runner register --server <App URL> --token <token>`, and `nocobase-runner start` or `nocobase-runner service install` (launchd on macOS, a systemd user unit on Linux). The install script does all of this in one line; see [Distribution](distribution.md).
 
+Registering again with the same owner, name and hostname revokes previous registrations and their keys atomically. Old runtimes take no more work, and the sweeper requeues what they held; historical records retain their ids. Hostnames are self-reported, so another owner's matching runtime is preserved. Agent configurations limited to a previous runtime id need to select the new runtime.
+
+`runtime token list` (`GET /api/agents/runners/registrationTokens`, paged with `page` and `pageSize`) lists unused, unexpired token metadata. Signed-in callers see their own tokens; managers of runners see all. Tokens and hashes are never returned: create a fresh token if the original secret is lost. To delete a runtime, run `runtime revoke <runtime>` and then `runtime delete <runtime>`; deleting a live runtime returns `RUNNER_NOT_REVOKED` with those steps.
+
+The install script requires an explicit `--server <App URL>` with `--runner` and rejects a missing or empty value before downloading or installing anything. CLI-only installation still defaults to the application that served the script.
+
 A runner authenticates afterwards with its own key. Personal runners (`ownerOnly`) run only work their owner started, and receive its variables like any runner, except those marked "Team runtimes only" (`teamRunnersOnly`): a run that gets one goes to a team runner. Their owner may share them with the team. `nocobase-runner unregister --server <url>` or "Revoke" on the Runtimes page ends a registration.
 
 ## How work reaches a runner
@@ -44,3 +50,9 @@ Run lists and details expose `executions`, one claim snapshot per attempt, with
 `effort` is requested; `actualEffort` is only a tool report, with `actualEffortSource`, `actualEffortAt` and per-attempt `effortReports`. Show unreported actual values explicitly, never infer from requests or token counts. Import `runForViewer`/`executionForViewer` from `@nocobase/app-plugin-agents/server/tokens` and apply them to custom user-facing run/workload/CLI outputs, using the runner machine rights; `machineHidden` means a generic runtime label, not a fallback to the hostname/id. A projects viewer may provide `seesExecutionMachine` from those same rights. See `docs/execution-history.md` for the report and projection contracts.
 
 The runner finds each coding tool on its PATH and reports whether it is signed in. A tool not found, or not signed in, is offered no runs: sign in on the runner's machine as the runner's user (for example `claude` and its login), then wait for the next heartbeat. Which tools a runner is offered work for is chosen on the Runtimes page (`enabledTools`). A model the tool's account cannot use fails the run `modelUnavailable`.
+
+## Quota recovery
+
+Quota exhaustion is scoped to the runtime and a tool, provider prefix or model. Known resets restore claim eligibility automatically; unknown resets require the runtime owner or an administrator to clear the selected mark after restoring quota. This never restarts failed, withdrawn or expired work. Runtime Overview, Workspaces and Runs load separately; the list contains summaries. Use runtime workspaces for directories and runtime quota clear with structured tool/scope/target/window fields for unknown-reset marks (no client revision); known resets clear automatically. Upgrade runners for usage/reset reporting; old runners only report the failure. See the package README for fields, endpoint contracts and read/write costs.
+
+For application-owned system agents, `useAgentOption(id)` in the client kit reads the same viewer-scoped agent detail endpoint and includes quota; `useAgentOptions()` lists discovered runner agents only. A final failure reuses accepted event metadata for quota deduplication, while new event sequences remain new observations. The failure snapshot is retained even when its windows were already applied.