@nylorun/agents 0.33.0-beta → 0.35.0-beta

package/CHANGELOG.md

@@ -1,5 +1,29 @@
 # @nylorun/agents
 
+## 0.35.0-beta
+
+### Minor Changes
+
+- 2afa44d: The Runtime's primitives as its own Agent Plugins (ADR-106, D84). An `agent-folder/3` folder lists them under `plugins:` (`nylorun-memory`, `nylorun-triggers`, `nylorun-plan`, `nylorun-interactions`, `nylorun-artifacts`, `nylorun-sandbox`, which needs a computer), with no versions, and turns one of their tools off with `mcpServers.nylorun.tools.<tool>.enabled: false`. The compiler reads them as the `agent-folder/2` declarations they stand for (`memory`, `loop`, `engine.sandbox`, `engine.artifacts`, `engine.triggers`, which v3 refuses) and records them in `harness.engine.plugins`, each with its tools and the hash of its files. The engine presents their tools as the reserved server `nylorun`: the model reads `nylorun__memory` and the declared plugins' words as one text, with their skills (`memory`, `triggers`) in the catalog, served from the bundle; every effect keeps its target and `toolName`, so the record, tool policy (`kind: "runtime"` rules) and dispatch are unchanged. New: `ask` (`nylorun-interactions`, `harness.loop.ask`), a question that pauses the turn as an A2A `question`; `removeTools` takes `nylorun__<tool>`; `triggers` answers carry `now`; under `nylorun-triggers`, an agent-made trigger's run starts with a `[trigger <id> · <title> · nobody is watching]` line, and a turn a trigger started may set a one-off follow-up (`in` or `at`, `session: "this"`); the sandbox's instructions name the hosts `runtime.json` allows. `nylorun migrate folder <dir> --to 3` writes the plugins that keep an agent's tools and features, and `nylorun check --explain` names the plugin behind each. The JSON Schemas are republished as `agent-manifest/v8.4`, `harness-manifest/v1.4` and `agent-folder/v1/agent-md.4`.
+
+### Patch Changes
+
+- Pin core to the tested release.
+- Updated dependencies [2afa44d]
+  - @nylorun/core@0.36.0-beta
+
+## 0.34.0-beta
+
+### Minor Changes
+
+- 714bee2: The triggers capability (Host feature `agent-triggers`): an agent-folder/2 folder declares `engine: { triggers: true }` (the root agent's only; `engine.instructions.triggers` replaces its wording), which compiles to `harness.engine.triggers` and offers the root agent the `triggers` tool (`list`, `create`, `delete`) and the text block `triggers@1`. The Runtime serves each call as a `runtime` effect (operation `triggers`, `turn.start.agent.triggers`, Harness API v5.3): a trigger an agent makes is the Agent's (`origin: "agent"`, with its title and the session that made it), runs in the calling session (`session: "this"`) or one of its own (`"own"`, `<session>_t_<id>`), is checked against the limits in force (`runtime.limits.triggers` within the Tenant's), survives upgrades and waits paused while a version lacks the capability; a turn a trigger started can't create one. Tool rules take `kind: "runtime"`, so an `ask` rule can hold a `triggers` call (its interaction carries `metadata.input`); `DELETE /v1/agents/{id}/triggers/{triggerId}` deletes an agent's trigger (`409 trigger_from_manifest` for a manifest's); `GET /v1/runs/stream` serves the Tenant's runs as server-sent events from a cursor (`410 cursor_expired` across a reset). `client.agents.deleteTrigger`, `client.runs.stream` and `nylorun agents triggers rm` follow. The JSON Schemas are republished as `agent-manifest/v8.3`, `harness-manifest/v1.3`, `runtime-manifest/v1.2`, `agent-folder/v1/agent-md.3`, `agent-folder/v1/runtime.2` and `harness-api/v5.3`.
+
+### Patch Changes
+
+- Pin core to the tested release.
+- Updated dependencies [714bee2]
+  - @nylorun/core@0.35.0-beta
+
 ## 0.33.0-beta
 
 ### Minor Changes

package/dist/agents.d.ts

@@ -17,9 +17,11 @@
  * write-only: no call reads one back.
  *
  * Triggers: what its manifest's `runtime.triggers` declares starts its turns with
- * no client connected. `triggers(id)` lists them with their status and next run, `pauseTrigger`,
- * `resumeTrigger` and `runTrigger` change or run one, `rotateWebhookSecret` makes a webhook
- * trigger's signing secret, and `runs(id)` pages what each fire came to.
+ * no client connected, and so do the triggers its agents set up with the `triggers` tool
+ * (`engine.triggers`, origin `agent`). `triggers(id)` lists them with their status and next run,
+ * `pauseTrigger`, `resumeTrigger` and `runTrigger` change or run one, `deleteTrigger` deletes one
+ * an agent made, `rotateWebhookSecret` makes a webhook trigger's signing secret, and `runs(id)`
+ * pages what each fire came to. `client.runs.stream()` follows every Agent's runs.
  *
  * Memory: an Agent whose manifest sets `harness.memory` keeps Markdown files under
  * `/memories` across sessions. `agents.memories` lists, reads, writes (to seed it), deletes and
@@ -275,6 +277,11 @@ export declare class AgentInstancesClient {
                         versionBytes?: number | undefined;
                         versionEntries?: number | undefined;
                     } | undefined;
+                    triggers?: {
+                        count?: number | undefined;
+                        minIntervalMs?: number | undefined;
+                        runsPerHour?: number | undefined;
+                    } | undefined;
                 } | undefined;
                 secrets?: Record<string, {
                     required?: boolean | undefined;
@@ -435,6 +442,14 @@ export declare class AgentInstancesClient {
     triggers(agentId: string, options?: {
         signal?: AbortSignal;
     }): Promise<TriggerView[]>;
+    /**
+     * Deletes trigger `triggerId`, one of the Agent's agents made with the `triggers` tool (origin
+     * `agent`; Host feature `agent-triggers`). One its manifest declares is refused
+     * (`409 trigger_from_manifest`): save a version without it, or pause it.
+     */
+    deleteTrigger(agentId: string, triggerId: string, options?: {
+        signal?: AbortSignal;
+    }): Promise<void>;
     /** Pauses trigger `triggerId`: it stops firing until it is resumed. Answers the Agent's triggers. */
     pauseTrigger(agentId: string, triggerId: string, options?: {
         signal?: AbortSignal;

package/dist/agents.js

@@ -17,9 +17,11 @@
  * write-only: no call reads one back.
  *
  * Triggers: what its manifest's `runtime.triggers` declares starts its turns with
- * no client connected. `triggers(id)` lists them with their status and next run, `pauseTrigger`,
- * `resumeTrigger` and `runTrigger` change or run one, `rotateWebhookSecret` makes a webhook
- * trigger's signing secret, and `runs(id)` pages what each fire came to.
+ * no client connected, and so do the triggers its agents set up with the `triggers` tool
+ * (`engine.triggers`, origin `agent`). `triggers(id)` lists them with their status and next run,
+ * `pauseTrigger`, `resumeTrigger` and `runTrigger` change or run one, `deleteTrigger` deletes one
+ * an agent made, `rotateWebhookSecret` makes a webhook trigger's signing secret, and `runs(id)`
+ * pages what each fire came to. `client.runs.stream()` follows every Agent's runs.
  *
  * Memory: an Agent whose manifest sets `harness.memory` keeps Markdown files under
  * `/memories` across sessions. `agents.memories` lists, reads, writes (to seed it), deletes and
@@ -292,6 +294,15 @@ export class AgentInstancesClient {
         const reply = await this.transport.json(`${this.path(agentId)}/triggers`, "GET", undefined, options.signal);
         return reply.triggers;
     }
+    /**
+     * Deletes trigger `triggerId`, one of the Agent's agents made with the `triggers` tool (origin
+     * `agent`; Host feature `agent-triggers`). One its manifest declares is refused
+     * (`409 trigger_from_manifest`): save a version without it, or pause it.
+     */
+    async deleteTrigger(agentId, triggerId, options = {}) {
+        await this.transport.requireFeature("agent-triggers", options.signal);
+        await this.transport.json(`${this.path(agentId)}/triggers/${segment(triggerId)}`, "DELETE", undefined, options.signal);
+    }
     /** Pauses trigger `triggerId`: it stops firing until it is resumed. Answers the Agent's triggers. */
     async pauseTrigger(agentId, triggerId, options = {}) {
         const reply = await this.transport.json(`${this.path(agentId)}/triggers/${segment(triggerId)}/pause`, "POST", {}, options.signal);

package/dist/index.d.ts

@@ -6,7 +6,7 @@ export { Agent, AgentBuilder } from "./builder.js";
 export { AgentBuildError, AgentLifecycleError, VerdictSchema, isVerdict, WorkflowBuildError, isBuiltWorkflow, flow, tool, http, defineSchema, ToolError, harnessSectionOf, sectionGaps, } from "@nylorun/core/define";
 export type { FlowAgentBuilder, Flow, Named, LoopOptions, StageOptions, HttpTarget, } from "@nylorun/core/define";
 export type { AgentOptions, AgentManifest, BuiltAgent, BuiltWorkflow, Verdict, WorkflowBinding, WorkflowManifest, ToolDefinition, ToolExecutionContext, ToolOutcome, JsonValue, JsonObject, } from "@nylorun/core/define";
-export type { SessionPage, SessionListItem, SessionManifestView, HistoryPage, SessionUsageTotals, SessionModelChoice, SessionModelView, SessionModelRecord, CostSplit, ModelCall, ModelCallsPage, AgentPage, ToolCall, ToolCallsPage, LiveEvent, SessionEvent, SessionEventOf, EventType, SessionCommand, SubjectScope, AgentView, AgentState, AgentAttention, AgentEvent, AgentEventType, EgressRunningTurn, EnvironmentKind, EnvironmentRecipe, EnvironmentSecretSlot, AgentSecretView, AgentSnapshot, AgentRestore, AgentDiskVersions, RestoreAgentRequest, AgentForkPlan, AgentMovePlan, RestartAgentRequest, ForkAgentRequest, ForkAgentResponse, DeleteAgentResponse, PutAgentRequest, PutAgentSecretRequest, PutAgentSecretValueRequest, AgentManifestV8, AgentManifestFile, HarnessManifestFile, RuntimeManifestFile, RuntimeSection, AgentManifestChange, AgentManifestWarning, AgentManifestPlan, AgentManifestSource, AgentManifestSourceDiff, AgentManifestSourceSummary, AgentFolderDiagnostic, AgentManifestView, AgentManifestVersions, SaveAgentManifestResponse, DeleteAgentManifestResponse, MessagePart, ArtifactView, ArtifactKind, ArtifactListItem, ArtifactPage, ArtifactVersionView, ArtifactLink, UploadArtifactResponse, DefinitionFileView, ArtifactTree, ArtifactDiff, FolderEntry, } from "@nylorun/core/contracts";
+export type { SessionPage, SessionListItem, SessionManifestView, HistoryPage, SessionUsageTotals, SessionModelChoice, SessionModelView, SessionModelRecord, CostSplit, ModelCall, ModelCallsPage, AgentPage, ToolCall, ToolCallsPage, LiveEvent, SessionEvent, SessionEventOf, EventType, SessionCommand, SubjectScope, AgentView, AgentState, AgentAttention, AgentEvent, AgentEventType, EgressRunningTurn, EnvironmentKind, EnvironmentRecipe, EnvironmentSecretSlot, AgentSecretView, AgentSnapshot, AgentRestore, AgentDiskVersions, RestoreAgentRequest, AgentForkPlan, AgentMovePlan, RestartAgentRequest, ForkAgentRequest, ForkAgentResponse, DeleteAgentResponse, PutAgentRequest, PutAgentSecretRequest, PutAgentSecretValueRequest, AgentManifestV8, AgentManifestFile, HarnessManifestFile, RuntimeManifestFile, RuntimeSection, AgentManifestChange, AgentManifestWarning, AgentManifestPlan, AgentManifestSource, AgentManifestSourceDiff, AgentManifestSourceSummary, AgentFolderDiagnostic, AgentManifestView, AgentManifestVersions, SaveAgentManifestResponse, DeleteAgentManifestResponse, MessagePart, ArtifactView, ArtifactKind, ArtifactListItem, ArtifactPage, ArtifactVersionView, ArtifactLink, UploadArtifactResponse, DefinitionFileView, ArtifactTree, ArtifactDiff, FolderEntry, TriggerView, TriggerOrigin, TriggerRun, TriggerRunPage, TriggerToolInput, TriggerToolOutput, TenantRun, } from "@nylorun/core/contracts";
 export { AGENT_EVENT_TYPES, AGENT_FOLDER_MEDIA_TYPE, AGENT_STATES, COMPUTE_STATES, RUNTIME_LIMIT_DEFAULTS, SUBJECT_SCOPES, } from "@nylorun/core/contracts";
 export type { AgentHarnessSection, HarnessSection, HarnessSkill, HarnessMcpServer, WorkflowHarnessSection, } from "@nylorun/core";
 export { AgentsClient, SessionClient, createClient } from "./client.js";
@@ -23,6 +23,8 @@ export type { PackedFolder } from "./folder.js";
 export { packFolder, isAgentFolder, FOLDER_IGNORE_FILE } from "./folder-pack.js";
 export { ignoreMatcher } from "./folder-ignore.js";
 export { AccessClient } from "./access.js";
+export { RunsClient } from "./runs.js";
+export type { TenantRunEvent } from "./runs.js";
 export { resolveConnection, ConnectionError } from "./connection.js";
 export type { ResolvedConnection } from "./connection.js";
 export { RuntimeError, IncompatibleRuntimeError } from "./http.js";

package/dist/index.js

@@ -20,6 +20,7 @@ export { ENGINE_BLOCK_NAMES, previewTurn, } from "@nylorun/core/engine";
 export { packFolder, isAgentFolder, FOLDER_IGNORE_FILE } from "./folder-pack.js";
 export { ignoreMatcher } from "./folder-ignore.js";
 export { AccessClient } from "./access.js";
+export { RunsClient } from "./runs.js";
 export { resolveConnection, ConnectionError } from "./connection.js";
 export { RuntimeError, IncompatibleRuntimeError } from "./http.js";
 export { loadMcpServers, loadPlugin, PluginError } from "./plugins/load.js";

package/dist/runs.d.ts

@@ -0,0 +1,27 @@
+/**
+ * The Tenant's runs (D83, Host feature `agent-triggers`): `client.runs.stream()` follows every
+ * run of every Agent's triggers, from a cursor, as `GET /v1/runs/stream` serves them. For an
+ * application key that reads Agents (`agents:read`).
+ */
+import type { TenantRun } from "@nylorun/core/contracts";
+import type { Transport } from "./http.js";
+/** One run on the stream, and the cursor to resume after it. */
+export interface TenantRunEvent {
+    readonly cursor: string;
+    readonly run: TenantRun;
+}
+export declare class RunsClient {
+    private readonly transport;
+    constructor(transport: Transport);
+    /**
+     * The Tenant's runs from `cursor` (the last one a reader kept; none reads from the oldest the
+     * stream keeps, 7 days), following the stream until `signal` aborts. It reconnects from the
+     * last run on its own. A run may arrive twice: drop a `runId` already seen. A cursor from before
+     * the Tenant's reset throws a `RuntimeError` with status 410 and code `cursor_expired`: read
+     * again without one.
+     */
+    stream(options?: {
+        cursor?: string;
+        signal?: AbortSignal;
+    }): AsyncIterable<TenantRunEvent>;
+}

package/dist/runs.js

@@ -0,0 +1,26 @@
+import { observeSSE } from "./sse.js";
+export class RunsClient {
+    transport;
+    constructor(transport) {
+        this.transport = transport;
+    }
+    /**
+     * The Tenant's runs from `cursor` (the last one a reader kept; none reads from the oldest the
+     * stream keeps, 7 days), following the stream until `signal` aborts. It reconnects from the
+     * last run on its own. A run may arrive twice: drop a `runId` already seen. A cursor from before
+     * the Tenant's reset throws a `RuntimeError` with status 410 and code `cursor_expired`: read
+     * again without one.
+     */
+    async *stream(options = {}) {
+        await this.transport.requireFeature("agent-triggers", options.signal);
+        for await (const event of observeSSE(this.transport, "/v1/runs/stream", {
+            ...(options.signal ? { signal: options.signal } : {}),
+            ...(options.cursor === undefined ? {} : { cursor: options.cursor }),
+        })) {
+            if (event.event !== "run")
+                continue;
+            const data = JSON.parse(event.data);
+            yield { cursor: data.cursor, run: data.run };
+        }
+    }
+}

package/dist/session-client.d.ts

@@ -10,6 +10,7 @@ import { AgentInstancesClient } from "./agents.js";
 import { AgentManifestsClient } from "./agent-manifests.js";
 import { ArtifactsClient } from "./artifacts.js";
 import { FilesClient } from "./files.js";
+import { RunsClient } from "./runs.js";
 import { Transport, type Destination } from "./http.js";
 /** Application-principal access to a session's sandbox built-ins (workflows.md §8). */
 export type SessionSandbox = {
@@ -77,6 +78,8 @@ export declare class AgentsClient {
     get artifacts(): ArtifactsClient;
     /** Definition files: the skill files a definition names, by content hash. */
     get files(): FilesClient;
+    /** The Tenant's runs (Host feature `agent-triggers`): `stream()` follows every Agent's trigger runs. */
+    get runs(): RunsClient;
     /** The Runtime's protocol features, including optional ones such as `transcript-events`. */
     hostFeatures(options?: {
         signal?: AbortSignal;
@@ -505,6 +508,8 @@ export { RuntimeError, IncompatibleRuntimeError } from "./http.js";
 export type { Destination, IncompatibleReason } from "./http.js";
 export type { LiveEvent } from "@nylorun/core/contracts";
 export { AccessClient } from "./access.js";
+export { RunsClient } from "./runs.js";
+export type { TenantRunEvent } from "./runs.js";
 export { AgentInstancesClient, AgentMemoriesClient, AgentSecretsClient, runtimeFiles } from "./agents.js";
 export type { AgentFilter, AgentInput, AgentSecretInput, AgentSecretRouting, RuntimeFileBytes } from "./agents.js";
 export { AgentManifestsClient, ManifestGapsError, agentManifest, requirementGaps } from "./agent-manifests.js";

package/dist/session-client.js

@@ -8,6 +8,7 @@ import { AgentInstancesClient } from "./agents.js";
 import { AgentManifestsClient } from "./agent-manifests.js";
 import { ArtifactsClient } from "./artifacts.js";
 import { FilesClient } from "./files.js";
+import { RunsClient } from "./runs.js";
 import { Transport, id, segment } from "./http.js";
 import { observeSSE } from "./sse.js";
 function sessionSandboxOf(transport, sessionId) {
@@ -88,6 +89,10 @@ export class AgentsClient {
     get files() {
         return new FilesClient(this.transport);
     }
+    /** The Tenant's runs (Host feature `agent-triggers`): `stream()` follows every Agent's trigger runs. */
+    get runs() {
+        return new RunsClient(this.transport);
+    }
     /** The Runtime's protocol features, including optional ones such as `transcript-events`. */
     hostFeatures(options = {}) {
         return this.transport.hostFeatures(options.signal);
@@ -374,6 +379,7 @@ export class SessionClient {
 }
 export { RuntimeError, IncompatibleRuntimeError } from "./http.js";
 export { AccessClient } from "./access.js";
+export { RunsClient } from "./runs.js";
 export { AgentInstancesClient, AgentMemoriesClient, AgentSecretsClient, runtimeFiles } from "./agents.js";
 export { AgentManifestsClient, ManifestGapsError, agentManifest, requirementGaps } from "./agent-manifests.js";
 export { AGENT_FOLDER_FILE, FolderError, FolderInvalidError, diagnosticLine } from "./folder.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nylorun/agents",
-  "version": "0.33.0-beta",
+  "version": "0.35.0-beta",
   "description": "Nylorun agent definitions and session client",
   "type": "module",
   "license": "Apache-2.0",
@@ -43,7 +43,7 @@
     "test": "vitest run --passWithNoTests"
   },
   "dependencies": {
-    "@nylorun/core": "0.34.0-beta",
+    "@nylorun/core": "0.36.0-beta",
     "gray-matter": "^4.0.3"
   },
   "peerDependencies": {