@nylorun/agents 0.13.0-beta → 0.16.0-beta

package/dist/session-client.js

@@ -1,11 +1,13 @@
-import { SANDBOX_TOOL_NAMES, delegateOf, isBuiltWorkflow, isSandboxToolName, } from "@nylorun/core/define";
+import { SANDBOX_TOOL_NAMES, codeToolRefusal, delegateOf, isBuiltWorkflow, isSandboxToolName, } from "@nylorun/core/define";
 import { z } from "zod";
 import { SCOPES_HEADER, SUBJECT_HEADER } from "@nylorun/core/compatibility";
-import { parseSessionEvent, parseSubjectHeaders, } from "@nylorun/core/contracts";
-import { AccessClient, TokensClient } from "./access.js";
+import { SessionManifestViewSchema, SessionUsageTotalsSchema, ModelCallsPageSchema, parseSessionEvent, parseSubjectHeaders, } from "@nylorun/core/contracts";
+import { SessionsReadClient } from "./reads.js";
+import { AccessClient } from "./access.js";
 import { SandboxesClient } from "./sandboxes.js";
 import { ArtifactsClient } from "./artifacts.js";
-import { Transport, id, segment } from "./http.js";
+import { FilesClient } from "./files.js";
+import { Transport, env, id, segment } from "./http.js";
 import { observeSSE } from "./sse.js";
 function sessionSandboxOf(transport, sessionId) {
     const call = (tool, args) => transport.json(`/v1/sessions/${segment(sessionId)}/sandbox/${segment(tool)}`, "POST", args);
@@ -28,8 +30,8 @@ function linkedSessionId(event) {
         ? sessionId
         : undefined;
 }
-const middlewareClosure = "Hosted definitions support declarative capabilities and before/after hooks, not middleware closures";
-/** The agent's declarations, then those of each agent it uses as a tool, keyed `<child>/<capability>`. */
+const middlewareClosure = "Hosted definitions support declarative capabilities, not middleware closures";
+/** The agent's declarations, then those of each agent it uses as a tool. */
 function declarationsOf(agent) {
     if (isBuiltWorkflow(agent) || agent.manifest.kind === "workflow")
         return [];
@@ -39,30 +41,26 @@ function declarationsOf(agent) {
     const binding = built.getBinding?.();
     if (!binding || !("declarations" in binding))
         return [];
-    const found = (binding.declarations ?? []).map((item) => ({ key: item.id, item }));
+    const found = [...(binding.declarations ?? [])];
     for (const tool of binding.tools ?? []) {
         const delegate = delegateOf(tool);
-        const child = delegate?.agent;
-        for (const item of child?.getBinding().declarations ?? [])
-            found.push({ key: `${child.id}/${item.id}`, item });
-        // A flow agent used as a tool: its agents' declarations, keyed `<flow>/<agent>/<capability>`.
-        const flow = delegate?.workflow;
-        for (const leaf of Object.values(flow?.getBinding().agents ?? {}))
-            for (const item of leaf.declarations ?? [])
-                found.push({ key: `${flow.id}/${leaf.manifest.id}/${item.id}`, item });
+        found.push(...(delegate?.agent?.getBinding().declarations ?? []));
+        // A flow agent used as a tool: its agents' declarations.
+        for (const leaf of Object.values(delegate?.workflow?.getBinding().agents ?? {}))
+            found.push(...(leaf.declarations ?? []));
     }
     return found;
 }
-function pluginRootsOf(agent) {
-    const roots = {};
-    for (const { key, item } of declarationsOf(agent))
-        if (item.pluginRoot)
-            roots[key] = item.pluginRoot;
-    return Object.keys(roots).length === 0 ? undefined : roots;
+/** The bytes of every skill file the agent's definition names, by `sha256:<hex>`. */
+function skillFilesOf(agent, into = new Map()) {
+    for (const item of declarationsOf(agent))
+        for (const [sha256, source] of Object.entries(item.skillFiles ?? {}))
+            into.set(sha256, source);
+    return into;
 }
 /** Closures stay on the live binding. The published manifest cannot name them. */
 export function assertNoMiddlewareClosures(agent) {
-    if (declarationsOf(agent).some(({ item }) => item.hasMiddleware))
+    if (declarationsOf(agent).some((item) => item.hasMiddleware))
         throw new Error(middlewareClosure);
 }
 export class AgentsClient {
@@ -95,14 +93,7 @@ export class AgentsClient {
             subject,
         });
     }
-    /**
-     * Mints subject tokens for signed-in people (Host feature `subject-tokens`), so their
-     * browser or app calls the Runtime directly. Application key only.
-     */
-    get tokens() {
-        return new TokensClient(this.transport);
-    }
-    /** The access policy, signing keys and revocations (Host feature `subject-tokens`). */
+    /** The public keys that verify the tokens the Tenant signs. */
     get access() {
         return new AccessClient(this.transport);
     }
@@ -117,10 +108,17 @@ export class AgentsClient {
     get artifacts() {
         return new ArtifactsClient(this.transport);
     }
+    /** Definition files: the skill files a definition names, by content hash. */
+    get files() {
+        return new FilesClient(this.transport);
+    }
     /** The Runtime's protocol features, including optional ones such as `transcript-events`. */
     hostFeatures(options = {}) {
         return this.transport.hostFeatures(options.signal);
     }
+    get sessions() {
+        return new SessionsReadClient(this.transport);
+    }
     listAgents(options = {}) {
         return this.transport.json("/v1/agents", "GET", undefined, options.signal);
     }
@@ -130,44 +128,35 @@ export class AgentsClient {
             : "";
         return this.transport.json(`/v1/sessions${query}`, "GET", undefined, options.signal);
     }
-    async saveAgent(agent, options) {
-        if (isBuiltWorkflow(agent) && agent.manifest.workflowSchemaVersion === 2) {
-            // A v2 workflow embeds its agents: one document, carrying their plugin roots.
-            const pluginRoots = {};
+    /**
+     * Registers the agent's definition (`PUT /v1/agents/{id}`), first uploading the skill files
+     * it names that the Runtime does not hold. A definition with a tool that runs your code
+     * (`tool({ run })`, a flow's tool stage) is refused before anything is sent: the Runtime runs
+     * no code of yours during a session. `implementationVersion` defaults to
+     * `NYLORUN_IMPLEMENTATION_VERSION`, else `dev`.
+     */
+    async saveAgent(agent, options = {}) {
+        const files = new Map();
+        if (isBuiltWorkflow(agent)) {
+            // A flow agent embeds its agents: one document, carrying their files.
             for (const binding of Object.values(agent.getBinding().agents)) {
                 const leaf = { id: binding.manifest.id, manifest: binding.manifest, getBinding: () => binding };
                 assertNoMiddlewareClosures(leaf);
-                for (const [key, root] of Object.entries(pluginRootsOf(leaf) ?? {}))
-                    pluginRoots[`${leaf.id}/${key}`] = root;
+                skillFilesOf(leaf, files);
             }
-            return this.transport.json(`/v1/agents/${segment(agent.id)}`, "PUT", {
-                requestId: options.requestId ?? id(),
-                manifest: agent.manifest,
-                implementationVersion: options.implementationVersion,
-                ...(Object.keys(pluginRoots).length === 0 ? {} : { pluginRoots }),
-            });
         }
-        if (isBuiltWorkflow(agent)) {
-            for (const binding of Object.values(agent.getBinding().agents)) {
-                await this.saveAgent({
-                    id: binding.manifest.id,
-                    manifest: binding.manifest,
-                    getBinding: () => binding,
-                }, options);
-            }
-            return this.transport.json(`/v1/agents/${segment(agent.id)}`, "PUT", {
-                requestId: options.requestId ?? id(),
-                manifest: agent.manifest,
-                implementationVersion: options.implementationVersion,
-            });
+        else {
+            assertNoMiddlewareClosures(agent);
+            skillFilesOf(agent, files);
         }
-        assertNoMiddlewareClosures(agent);
-        const pluginRoots = pluginRootsOf(agent);
+        const refusal = codeToolRefusal(agent.manifest);
+        if (refusal)
+            throw new Error(refusal);
+        await this.files.ensure(files);
         return this.transport.json(`/v1/agents/${segment(agent.id)}`, "PUT", {
             requestId: options.requestId ?? id(),
             manifest: agent.manifest,
-            implementationVersion: options.implementationVersion,
-            ...(pluginRoots === undefined ? {} : { pluginRoots }),
+            implementationVersion: options.implementationVersion ?? env("NYLORUN_IMPLEMENTATION_VERSION") ?? "dev",
         });
     }
     async createSession(options) {
@@ -185,48 +174,6 @@ export class AgentsClient {
         });
         return this.session(sessionId);
     }
-    createVault(options) {
-        return this.transport.json("/v1/vaults", "POST", {
-            requestId: options.requestId ?? id(),
-            idempotencyKey: options.idempotencyKey,
-            name: options.name,
-            ownerUserId: options.ownerUserId,
-            ...(options.metadata ? { metadata: options.metadata } : {}),
-        });
-    }
-    listVaults(ownerUserId, signal) {
-        return this.transport.json(`/v1/vaults?ownerUserId=${encodeURIComponent(ownerUserId)}`, "GET", undefined, signal);
-    }
-    getVault(vaultId, signal) {
-        return this.transport.json(`/v1/vaults/${segment(vaultId)}`, "GET", undefined, signal);
-    }
-    deleteVault(vaultId) {
-        return this.transport.json(`/v1/vaults/${segment(vaultId)}`, "DELETE");
-    }
-    createCredential(vaultId, options) {
-        return this.transport.json(`/v1/vaults/${segment(vaultId)}/credentials`, "POST", {
-            requestId: options.requestId ?? id(),
-            idempotencyKey: options.idempotencyKey,
-            name: options.name,
-            auth: options.auth,
-        });
-    }
-    listCredentials(vaultId, signal) {
-        return this.transport.json(`/v1/vaults/${segment(vaultId)}/credentials`, "GET", undefined, signal);
-    }
-    getCredential(vaultId, credentialId, signal) {
-        return this.transport.json(`/v1/vaults/${segment(vaultId)}/credentials/${segment(credentialId)}`, "GET", undefined, signal);
-    }
-    rotateCredential(vaultId, credentialId, options) {
-        return this.transport.json(`/v1/vaults/${segment(vaultId)}/credentials/${segment(credentialId)}`, "POST", {
-            requestId: options.requestId ?? id(),
-            idempotencyKey: options.idempotencyKey,
-            auth: options.auth,
-        });
-    }
-    deleteCredential(vaultId, credentialId) {
-        return this.transport.json(`/v1/vaults/${segment(vaultId)}/credentials/${segment(credentialId)}`, "DELETE");
-    }
     session(sessionId) {
         return new SessionClient(this.transport, sessionId);
     }
@@ -307,19 +254,45 @@ export class SessionClient {
             ...(options.reason ? { reason: options.reason } : {}),
         }, options.signal);
     }
-    /** `agent` narrows to one agent used as a tool: its delegationId or its path. */
+    async manifest(options = {}) {
+        await this.transport.requireFeature("session-reads", options.signal);
+        return SessionManifestViewSchema.parse(await this.transport.json(`${this.path}/manifest`, "GET", undefined, options.signal));
+    }
+    async usage(options = {}) {
+        await this.transport.requireFeature("session-reads", options.signal);
+        const query = new URLSearchParams();
+        if (options.turnId !== undefined)
+            query.set("turnId", options.turnId);
+        return SessionUsageTotalsSchema.parse(await this.transport.json(`${this.path}/usage${query.size ? `?${query}` : ""}`, "GET", undefined, options.signal));
+    }
+    async modelCalls(options = {}) {
+        await this.transport.requireFeature("session-reads", options.signal);
+        const query = new URLSearchParams({ limit: String(options.limit ?? 50) });
+        if (options.turnId !== undefined)
+            query.set("turnId", options.turnId);
+        if (options.cursor !== undefined)
+            query.set("cursor", options.cursor);
+        return ModelCallsPageSchema.parse(await this.transport.json(`${this.path}/calls/model?${query}`, "GET", undefined, options.signal));
+    }
     async history(options = {}) {
         const query = new URLSearchParams();
         if (options.cursor)
             query.set("cursor", options.cursor);
         if (options.agent)
             query.set("agent", options.agent);
+        if (options.limit !== undefined) {
+            await this.transport.requireFeature("session-reads", options.signal);
+            query.set("limit", String(options.limit));
+        }
         const search = query.toString();
-        const page = z
-            .object({ items: z.array(z.unknown()), cursor: z.string().nullable() })
-            .parse(await this.transport.json(`${this.path}/items${search ? `?${search}` : ""}`, "GET", undefined, options.signal));
+        const schema = z.object({ items: z.array(z.unknown()), cursor: z.string().nullable() });
+        const page = (options.limit === undefined ? schema : schema.extend({ tail: z.boolean() })).parse(await this.transport.json(`${this.path}/items${search ? `?${search}` : ""}`, "GET", undefined, options.signal));
         // Typed when the catalog knows the type; a newer Runtime's type stays a bare envelope.
-        return { items: page.items.map(parseSessionEvent), cursor: page.cursor };
+        return {
+            items: page.items.map(parseSessionEvent),
+            cursor: page.cursor,
+            ...("tail" in page ? { tail: page.tail } : {}),
+        };
     }
     async *observe(options = {}) {
         if (!options.follow) {
@@ -398,5 +371,5 @@ export class SessionClient {
     }
 }
 export { RuntimeError, IncompatibleRuntimeError } from "./http.js";
-export { AccessClient, PublishableKeysClient, SigningKeysClient, TokensClient, } from "./access.js";
+export { AccessClient } from "./access.js";
 export { SandboxesClient } from "./sandboxes.js";

package/dist/skills/index.d.ts

@@ -1,5 +1,5 @@
 export { skills } from "./skills.js";
 export type { SkillsCapability, SkillsOptions } from "./skills.js";
 export { loadSkillsFromDirectory, resolveSkillsRoot, parseSkill, SkillsError, } from "./load.js";
-export type { SkillDiagnostic } from "./load.js";
+export type { LoadedSkill, SkillDiagnostic } from "./load.js";
 export { formatSkillCatalog, SKILLS_USAGE } from "./catalog.js";

package/dist/skills/load.d.ts

@@ -1,4 +1,4 @@
-import type { SkillRecord } from "@nylorun/core/define";
+import { type SkillFileSource } from "@nylorun/core/define";
 export interface SkillDiagnostic {
     readonly severity: "info" | "warning";
     readonly code: string;
@@ -10,16 +10,27 @@ export declare class SkillsError extends Error {
     readonly diagnostics: readonly SkillDiagnostic[];
     constructor(code: string, message: string, diagnostics?: readonly SkillDiagnostic[]);
 }
+/** One skill read from its folder: what the manifest names, and where each file's bytes are. */
+export interface LoadedSkill {
+    readonly name: string;
+    readonly description: string;
+    /** Every file of the folder by its `/`-separated path, as `sha256:<hex>`. */
+    readonly files: Readonly<Record<string, string>>;
+    /** Each file's bytes, by `sha256:<hex>`, for the client to upload. */
+    readonly sources: Readonly<Record<string, SkillFileSource>>;
+}
 /** Resolve a skills catalog directory; throws when missing or not a directory. */
 export declare function resolveSkillsRoot(directory: string): string;
 /**
  * Load Agent Skills (agentskills.io) from a catalog directory.
- * Each immediate subdirectory with a valid SKILL.md becomes one skill.
+ * Each immediate subdirectory with a valid SKILL.md becomes one skill, with every file of its
+ * folder (text or binary) hashed. Throws `SkillsError` for a skill the Runtime cannot hold: a
+ * file over 10 MiB, more than 500 files, or a path a manifest cannot name.
  */
 export declare function loadSkillsFromDirectory(directory: string, diagnostics: SkillDiagnostic[], options?: {
     readonly boundary?: string;
     readonly codePrefix?: string;
-}): Readonly<Record<string, SkillRecord>>;
+}): Readonly<Record<string, LoadedSkill>>;
 export declare function parseSkill(text: string, directoryName: string): {
     name: string;
     description: string;

package/dist/skills/load.js

@@ -1,7 +1,15 @@
+import { createHash } from "node:crypto";
 import { existsSync, readdirSync, readFileSync, realpathSync, statSync, } from "node:fs";
+import { readFile } from "node:fs/promises";
 import { isAbsolute, join, relative, resolve, sep } from "node:path";
+import { DEFINITION_FILE_MAX_BYTES, SKILL_ENTRY, SKILL_FILES_MAX, skillFilePathIssue, } from "@nylorun/core/define";
 import matter from "gray-matter";
 const SKILL_NAME = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+/** Version control and operating system files, never part of a skill. */
+const SKIPPED_DIRECTORIES = new Set([".git", ".hg", ".svn", "node_modules"]);
+const SKIPPED_FILES = new Set([".DS_Store", "Thumbs.db", "desktop.ini"]);
+/** Environment files hold secrets: never uploaded (`.env`, `.env.local`, …). */
+const isEnvFile = (name) => name === ".env" || name.startsWith(".env.");
 export class SkillsError extends Error {
     code;
     diagnostics;
@@ -24,7 +32,9 @@ export function resolveSkillsRoot(directory) {
 }
 /**
  * Load Agent Skills (agentskills.io) from a catalog directory.
- * Each immediate subdirectory with a valid SKILL.md becomes one skill.
+ * Each immediate subdirectory with a valid SKILL.md becomes one skill, with every file of its
+ * folder (text or binary) hashed. Throws `SkillsError` for a skill the Runtime cannot hold: a
+ * file over 10 MiB, more than 500 files, or a path a manifest cannot name.
  */
 export function loadSkillsFromDirectory(directory, diagnostics, options = {}) {
     const root = resolveSkillsRoot(directory);
@@ -34,7 +44,7 @@ export function loadSkillsFromDirectory(directory, diagnostics, options = {}) {
     for (const entry of readdirSync(root, { withFileTypes: true })) {
         if (!entry.isDirectory() || entry.name.startsWith("."))
             continue;
-        if (entry.name === "node_modules" || entry.name === ".git")
+        if (SKIPPED_DIRECTORIES.has(entry.name))
             continue;
         const skillDir = join(root, entry.name);
         const directoryReal = realInside(boundary, skillDir);
@@ -47,7 +57,7 @@ export function loadSkillsFromDirectory(directory, diagnostics, options = {}) {
             });
             continue;
         }
-        const skillFile = join(directoryReal, "SKILL.md");
+        const skillFile = join(directoryReal, SKILL_ENTRY);
         if (!existsSync(skillFile))
             continue;
         const skillReal = realInside(boundary, skillFile);
@@ -79,12 +89,10 @@ export function loadSkillsFromDirectory(directory, diagnostics, options = {}) {
             });
             continue;
         }
-        const resources = readResources(boundary, directoryReal, diagnostics, prefix);
         skills[parsed.name] = {
             name: parsed.name,
             description: parsed.description,
-            instructions: parsed.instructions,
-            ...(Object.keys(resources).length === 0 ? {} : { resources }),
+            ...readFiles(parsed.name, boundary, directoryReal, diagnostics, prefix),
         };
     }
     return skills;
@@ -112,47 +120,57 @@ export function parseSkill(text, directoryName) {
 function asTrimmedString(value) {
     return typeof value === "string" ? value.trim() : "";
 }
-function readResources(boundary, directory, diagnostics, prefix) {
-    const resources = {};
-    const walk = (current, depth) => {
-        if (depth > 6)
+/** Every file of the skill's folder, hashed, and where to read each one's bytes. */
+function readFiles(name, boundary, directory, diagnostics, prefix) {
+    const files = {};
+    const sources = {};
+    const visited = new Set();
+    // `at` is the folder's path in the skill: symbolic links inside the package are followed.
+    const walk = (current, at) => {
+        if (visited.has(current))
             return;
+        visited.add(current);
         for (const entry of readdirSync(current, { withFileTypes: true })) {
-            if (entry.name.startsWith(".") || entry.name === "node_modules")
-                continue;
             const full = join(current, entry.name);
-            if (entry.isDirectory()) {
-                const real = realInside(boundary, full);
-                if (!real)
-                    continue;
-                walk(real, depth + 1);
-                continue;
-            }
-            if (!entry.isFile() && !entry.isSymbolicLink())
-                continue;
-            if (depth === 0 && entry.name === "SKILL.md")
-                continue;
             const real = realInside(boundary, full);
-            if (!real || !statSync(real).isFile()) {
+            if (!real) {
                 diagnostics.push({
                     severity: "warning",
                     code: `${prefix}.resource-denied`,
-                    message: `Denied resource outside the package: ${entry.name}`,
+                    message: `Denied a file of skill '${name}' outside the package: ${entry.name}`,
                     path: full,
                 });
                 continue;
             }
-            const bytes = readFileSync(real);
-            if (bytes.includes(0))
+            const stats = statSync(real);
+            const path = at === "" ? entry.name : `${at}/${entry.name}`;
+            if (stats.isDirectory()) {
+                if (!SKIPPED_DIRECTORIES.has(entry.name))
+                    walk(real, path);
                 continue;
-            const rel = relative(directory, real).split(sep).join("/");
-            if (!rel || rel.startsWith(".."))
+            }
+            if (!stats.isFile() || SKIPPED_FILES.has(entry.name) || isEnvFile(entry.name))
                 continue;
-            resources[rel] = bytes.toString("utf8");
+            const issue = skillFilePathIssue(path);
+            if (issue)
+                throw new SkillsError(`${prefix}.invalid-path`, `Skill '${name}' has a file whose path ${issue}: ${path}`);
+            if (stats.size > DEFINITION_FILE_MAX_BYTES)
+                throw new SkillsError(`${prefix}.file-too-large`, `Skill '${name}' file ${path} is ${stats.size} bytes; a skill file may be at most ${DEFINITION_FILE_MAX_BYTES} (10 MiB)`);
+            const hash = `sha256:${createHash("sha256").update(readFileSync(real)).digest("hex")}`;
+            files[path] = hash;
+            sources[hash] = {
+                size: stats.size,
+                read: async () => new Uint8Array(await readFile(real)),
+            };
+            if (Object.keys(files).length > SKILL_FILES_MAX)
+                throw new SkillsError(`${prefix}.too-many-files`, `Skill '${name}' has more than ${SKILL_FILES_MAX} files; a skill may have at most ${SKILL_FILES_MAX}`);
         }
     };
-    walk(directory, 0);
-    return resources;
+    walk(directory, "");
+    return { files: sorted(files), sources };
+}
+function sorted(files) {
+    return Object.fromEntries(Object.entries(files).sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0)));
 }
 function realInside(root, candidate) {
     if (!existsSync(candidate))

package/dist/skills/skills.d.ts

@@ -1,5 +1,5 @@
 import type { CapabilityDeclaration } from "@nylorun/core/define";
-import { type SkillDiagnostic } from "./load.js";
+import { type LoadedSkill, type SkillDiagnostic } from "./load.js";
 export interface SkillsOptions {
     /** Capability id. Defaults to the catalog directory basename. */
     readonly id?: string;
@@ -21,8 +21,10 @@ export interface SkillsCapability extends CapabilityDeclaration {
  *     references/policy.md
  * ```
  *
- * Sets both `skills` (manifest names/descriptions) and `skillRecords` (bodies +
- * resources) so callers do not duplicate content. The harness injects
- * `load_skill` / `read_skill_resource` from the records.
+ * Sets `skills`: each skill's name, description and files (every file of its folder, binary
+ * included, by content hash). The client uploads the files the Runtime lacks when it registers
+ * the agent, and the Runtime serves `load_skill` / `read_skill_resource` from them.
  */
 export declare function skills(directory: string, options?: SkillsOptions): SkillsCapability;
+/** The manifest's skills and the bytes behind their files, for a capability declaration. */
+export declare function skillsDeclaration(listed: readonly LoadedSkill[]): Required<Pick<CapabilityDeclaration, "skills" | "skillFiles">>;

package/dist/skills/skills.js

@@ -13,23 +13,20 @@ import { loadSkillsFromDirectory, resolveSkillsRoot, } from "./load.js";
  *     references/policy.md
  * ```
  *
- * Sets both `skills` (manifest names/descriptions) and `skillRecords` (bodies +
- * resources) so callers do not duplicate content. The harness injects
- * `load_skill` / `read_skill_resource` from the records.
+ * Sets `skills`: each skill's name, description and files (every file of its folder, binary
+ * included, by content hash). The client uploads the files the Runtime lacks when it registers
+ * the agent, and the Runtime serves `load_skill` / `read_skill_resource` from them.
  */
 export function skills(directory, options = {}) {
     const root = resolveSkillsRoot(directory);
     const diagnostics = [];
-    const records = loadSkillsFromDirectory(root, diagnostics);
-    const listed = Object.values(records);
+    const loaded = loadSkillsFromDirectory(root, diagnostics);
+    const listed = Object.values(loaded);
     const id = options.id ?? basename(root);
     if (listed.length === 0) {
         return { id, root, diagnostics };
     }
-    const skillManifest = Object.fromEntries(listed.map((skill) => [
-        skill.name,
-        { name: skill.name, description: skill.description },
-    ]));
+    const { skills: skillManifest, skillFiles } = skillsDeclaration(listed);
     return {
         id,
         root,
@@ -41,7 +38,17 @@ export function skills(directory, options = {}) {
             }))),
         ],
         skills: skillManifest,
-        skillRecords: records,
+        skillFiles,
         diagnostics,
     };
 }
+/** The manifest's skills and the bytes behind their files, for a capability declaration. */
+export function skillsDeclaration(listed) {
+    return {
+        skills: Object.fromEntries(listed.map((skill) => [
+            skill.name,
+            { name: skill.name, description: skill.description, files: skill.files },
+        ])),
+        skillFiles: Object.assign({}, ...listed.map((skill) => skill.sources)),
+    };
+}

package/dist/sse.js

@@ -65,7 +65,7 @@ export async function* observeSSE(transport, path, options = {}) {
     const signal = options.signal ?? controller.signal;
     let cursor = options.cursor;
     let retry = 250;
-    // The Runtime ended the stream because its subject token expired or was revoked: reconnect
+    // The Runtime ended the stream because its token expired: reconnect
     // at once (the transport fetches a new token), but only once in a row.
     let closedByRuntime = 0;
     while (!signal.aborted) {

package/dist/studio-embed.d.ts

@@ -1,6 +1,6 @@
 /**
  * `@nylorun/agents/studio-embed`: the contract between Studio and an app that embeds it in an
- * iframe (Studio design §8). Studio's web app and embedders such as Babai import it from here,
+ * iframe (Studio design §8). Studio's web app and the apps that embed it import it from here,
  * because Studio may not depend on `@nylorun/core` directly.
  *
  * No Node-only module is imported here or below.

package/dist/studio-embed.js

@@ -1,6 +1,6 @@
 /**
  * `@nylorun/agents/studio-embed`: the contract between Studio and an app that embeds it in an
- * iframe (Studio design §8). Studio's web app and embedders such as Babai import it from here,
+ * iframe (Studio design §8). Studio's web app and the apps that embed it import it from here,
  * because Studio may not depend on `@nylorun/core` directly.
  *
  * No Node-only module is imported here or below.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nylorun/agents",
-  "version": "0.13.0-beta",
-  "description": "Nylorun agent definitions, session client and Action endpoint",
+  "version": "0.16.0-beta",
+  "description": "Nylorun agent definitions and session client",
   "type": "module",
   "license": "Apache-2.0",
   "files": [
@@ -28,10 +28,6 @@
       "types": "./dist/ag-ui/index.d.ts",
       "import": "./dist/ag-ui/index.js"
     },
-    "./browser": {
-      "types": "./dist/browser.d.ts",
-      "import": "./dist/browser.js"
-    },
     "./a2a": {
       "types": "./dist/a2a/index.d.ts",
       "import": "./dist/a2a/index.js"
@@ -47,7 +43,7 @@
     "test": "vitest run --passWithNoTests"
   },
   "dependencies": {
-    "@nylorun/core": "0.12.0-beta",
+    "@nylorun/core": "0.15.0-beta",
     "gray-matter": "^4.0.3"
   },
   "peerDependencies": {