@nylorun/agents 0.6.0-beta → 0.7.0-beta

package/CHANGELOG.md

@@ -1,5 +1,30 @@
 # @nylorun/agents
 
+## 0.7.0-beta
+
+### Minor Changes
+
+- bf1c2da: **Tenants can register a Studio principal.** `CreateTenantRequest` gains optional `studioCredentialHash` behind the new protocol feature `studio-principal`; the Runtime stores it as application principal `studio`, and idempotent create compares it too. `@nylorun/admin` exports `deriveStudioToken(adminKey, tenantId)` (HMAC-SHA256 over `nylorun/studio/v1`, NUL, Tenant id) and `createTenant` sends the hash of that key, so Studio can reach any Tenant's API with a key derived from the admin key. Clients require the new feature, so upgrade the Runtime with them.
+
+### Patch Changes
+
+- ba1b239: **`nylorun` sets up the local stack; `@nylorun/cli` becomes the Runtime client `nylo` (breaking beta).**
+
+  - New unscoped package **`nylorun`**: `npx nylorun up` sets up the Docker stack on the first run and starts it after that, from any directory; `npx nylorun down` stops it (volumes are kept). `up` and `down` are aliases of `start` and `stop`. It also owns `status`, `logs`, `studio`, `reset` and `doctor`, pins the Runtime and Studio images (`package.json` `nylorun.runtime` / `nylorun.studio`), depends on `@nylorun/core` only, and never creates Tenants.
+  - **`@nylorun/cli`** is the Runtime client with the command **`nylo`**: `nylo tenant create [name]` (creates the Tenant; in a project, writes the Project link and seeds the model provider and sandbox from `.env`), `nylo tenant current|list|use|status|reset|delete`, `nylo configure`, `nylo env` (was `nylorun status --env`) and `nylo doctor sandbox`. It no longer provides the `nylorun` command or the stack commands.
+  - **Removed:** `nylorun dev` and `nylorun dev --ephemeral`. Link once with `nylo tenant create`, then run the project's own `npm run dev`. Moved commands exit 2 and name their replacement.
+  - **Starter:** the generated project depends on `@nylorun/agents` only (no Nylorun devDependency); `dev` is `tsx watch --env-file-if-exists=.env src/main.ts`. `npm create @nylorun/agent` installs the project and prints the next steps (`npx nylorun up`, `npx @nylorun/cli tenant create`, `npm run dev`) instead of starting development; `--no-open` is accepted and ignored.
+  - `connectAgents` names those steps when it finds no Runtime connection. Runtime repair hints, model errors and core's sandbox message name `nylo` and `nylorun up`.
+
+- bf1c2da: **The microsandbox backend is removed; the Runtime runs sandbox tools on the virtual backend only.** The optional `microsandbox` dependency is gone. `sandbox.backend` and `NYLORUN_SANDBOX` accept `auto` or `virtual`, and `auto` selects `virtual`. A Tenant that stored `microsandbox` reads it as `auto`. `nylorun doctor sandbox` and the `nylorun dev` banner report only the virtual shell.
+- Pin core to the tested release.
+- Updated dependencies [bf1c2da]
+- Updated dependencies [ba1b239]
+- Updated dependencies [bf1c2da]
+- Updated dependencies [bf1c2da]
+- Updated dependencies [bf1c2da]
+  - @nylorun/core@0.6.0-beta
+
 ## 0.6.0-beta
 
 ### Minor Changes

package/README.md

@@ -19,8 +19,10 @@ await connectAgents({ agents }).ready;
 Application mode saves definitions, registers **derived** executor credentials
 (HMAC of the application key + Tenant + agent id), and connects. Restarts and
 replicas re-register the same hashes; tokens are never stored in the Project.
-The same entry runs under `nylorun dev` and as `node dist/src/main.js`
-(`npm start`). See [MIGRATION.md](../MIGRATION.md#runtime-clients-and-admin-api-breaking-beta)
+The same entry runs under the project's `npm run dev` (`tsx watch`) and as
+`node dist/src/main.js` (`npm start`). It finds the Runtime through the three
+`NYLORUN_*` variables or the Project link that `npx @nylorun/cli tenant create`
+writes; with neither, it fails with `connection_missing` and names those steps. See [MIGRATION.md](../MIGRATION.md#runtime-clients-and-admin-api-breaking-beta)
 for upgrading from `nylorun serve`.
 
 ## Connection resolution
@@ -84,7 +86,7 @@ await connection.close();
 ```
 
 ```sh
-eval "$(npx nylorun runtime status --env)"
+eval "$(npx @nylorun/cli env)"
 # → NYLORUN_RUNTIME_URL, NYLORUN_SERVER_KEY, NYLORUN_TENANT
 ```
 
@@ -143,7 +145,7 @@ const analyst = Agent({
 }).use(sandbox());
 ```
 
-The model gets `bash`, `read`, `write`, `edit`, `grep` and `glob` on a Linux machine with a persistent `/workspace`. These tools run in the Runtime, not in your process, so sandbox-only agents need no connected executor. The agent declares what it needs; the Runtime decides where it runs (a microsandbox VM where the machine supports it, otherwise an emulated shell). Every option is optional plain data:
+The model gets `bash`, `read`, `write`, `edit`, `grep` and `glob` on a Linux machine with a persistent `/workspace`. These tools run in the Runtime, not in your process, so sandbox-only agents need no connected executor. The agent declares what it needs; the Runtime decides where it runs (today an emulated shell in the Runtime process). Every option is optional plain data:
 
 ```ts
 .use(sandbox({
@@ -154,7 +156,7 @@ The model gets `bash`, `read`, `write`, `edit`, `grep` and `glob` on a Linux mac
 }))
 ```
 
-The `dev` preset allows package registries and code hosts. Private networks, loopback, the host and cloud metadata endpoints are always blocked. Options from the full design that are not in this version (`setup`, `files`, `secrets`, `mount`, `onStart`, …) throw a `SandboxError` that says so. See [the sandbox design](../docs/design/sandboxes.md).
+The `dev` preset allows package registries and code hosts. Private networks, loopback, the host and cloud metadata endpoints are always blocked. Options from the full design that are not in this version (`setup`, `files`, `secrets`, `mount`, `onStart`, …) throw a `SandboxError` that says so.
 
 Put an agent in another agent's `tools` to let the model delegate to it:
 

package/dist/connection.js

@@ -10,7 +10,9 @@ export class ConnectionError extends Error {
     }
 }
 function missing(tried) {
-    throw new ConnectionError(`connection_missing: no Runtime connection found (tried ${tried.join(", ")})`);
+    throw new ConnectionError(`connection_missing: no Runtime connection found (tried ${tried.join(", ")}). ` +
+        `Start the local stack with "npx nylorun up" and link this project with "npx @nylorun/cli tenant create", ` +
+        `or set NYLORUN_RUNTIME_URL, NYLORUN_TENANT and NYLORUN_SERVER_KEY.`);
 }
 function stripTrailingSlash(url) {
     return url.replace(/\/$/, "");

package/dist/sandbox/sandbox.d.ts

@@ -17,8 +17,7 @@ export declare class SandboxError extends Error {
  * Give the agent an isolated Linux machine with a persistent `/workspace`.
  *
  * Adds the built-in `bash`, `read`, `write`, `edit`, `grep` and `glob` tools. They run in the
- * Nylorun Runtime, which picks the backend (a microsandbox VM where available). Agent code
- * declares requirements only.
+ * Nylorun Runtime, which picks the backend. Agent code declares requirements only.
  *
  * ```ts
  * Agent({ id: "analyst", instructions: "..." }).use(sandbox())

package/dist/sandbox/sandbox.js

@@ -11,8 +11,7 @@ export class SandboxError extends Error {
  * Give the agent an isolated Linux machine with a persistent `/workspace`.
  *
  * Adds the built-in `bash`, `read`, `write`, `edit`, `grep` and `glob` tools. They run in the
- * Nylorun Runtime, which picks the backend (a microsandbox VM where available). Agent code
- * declares requirements only.
+ * Nylorun Runtime, which picks the backend. Agent code declares requirements only.
  *
  * ```ts
  * Agent({ id: "analyst", instructions: "..." }).use(sandbox())

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nylorun/agents",
-  "version": "0.6.0-beta",
+  "version": "0.7.0-beta",
   "description": "Nylorun agent definitions, session client and connected executor",
   "type": "module",
   "license": "Apache-2.0",
@@ -35,7 +35,7 @@
     "test": "vitest run --passWithNoTests"
   },
   "dependencies": {
-    "@nylorun/core": "0.5.0-beta",
+    "@nylorun/core": "0.6.0-beta",
     "gray-matter": "^4.0.3"
   },
   "peerDependencies": {