@nylorun/cli 0.9.0-beta → 0.10.0-beta

package/CHANGELOG.md

@@ -1,5 +1,33 @@
 # @nylorun/cli
 
+## 0.10.0-beta
+
+### Major Changes
+
+- bd478ee: **Subject tokens, browser keys and derived principals leave open source (F9 I3, protocol 7).** Upgrade these with the Runtime: they speak protocol 7, which this Runtime serves beside 4, 5 and 6; protocol 6 clients keep working on every route that remains. Browsers and apps present a trusted issuer's token (F9 I2), servers an operator key (F9 I1), and a person's own credentials come from the operator's credential resolver (F9 C1). See MIGRATION.md.
+
+  - **Breaking (`@nylorun/runtime`, `@nylorun/core`): subject tokens are gone.** `POST /v1/tokens`, `POST /v1/access/revocations`, subject-token verification, revocation epochs and the `subject.revoked` stream signal are removed; the routes answer `404`, and a JWT no trusted issuer signed is the opaque `404`. A stream opened with a token now ends only at its expiry (`event: nylorun.closed`, reason `token_expired`; `StreamClosedFrame` loses `revoked`). Migration `0010_oss_auth_removals` drops the `subject_epochs`, `subject_usage` and `publishable_keys` tables. The `token` caller is a trusted issuer's token only: it loses `role`, `limits` and `epoch`, and `issuer` is always set; `GET /v1/me` no longer reports `via: token`. Core drops `SUBJECT_TOKEN_TYPE`, `SUBJECT_TOKEN_AUDIENCE`, `subjectTokenIssuer` (the Runtime's own tokens use `tenantTokenIssuer`, same value), `CreateTokenRequest`/`Response`, `RevokeSubject*`, `SubjectTokenClaims`, `TOKEN_TTL_MIN_SECONDS` and `TOKEN_TTL_DEFAULT_SECONDS`; `TOKEN_SCOPES` is `agents:read`, `sessions:own`, `sandboxes:write`.
+  - **Breaking (`@nylorun/runtime`, `@nylorun/core`): the access policy and role limits are gone.** `GET`/`PUT /v1/access/policy` answer `404`, a turn is never refused with `429 limit_exceeded` for a role (limit requests at your proxy), and an existing `access.policy` setting is ignored. Core drops `AccessPolicy*`, `AccessRole*`, `RoleLimits*`, `DEFAULT_ACCESS_POLICY`, `PutAccessPolicyRequest` and `ROLE_NAME_PATTERN`.
+  - **Breaking (`@nylorun/runtime`, `@nylorun/core`): publishable keys and the Runtime's CORS are gone.** `/v1/access/publishable-keys*` answer `404`, `Nylorun-Key` is ignored, `NYLORUN_BROWSER_ACCESS` and `browserAccess` (host.json, `createHost`, `startEphemeralRuntime`) are removed, and the Runtime sends no CORS headers. A request with `Origin` reaches the Tenant routes of the public listener with no toggle: a trusted issuer's token is served, an application key or delivery token is `403 origin_rejected`; admin routes, `/health`, `/ready` and the operator listener still refuse `Origin`. Any `OPTIONS` request is `204` with `Allow` and no CORS header: the operator's proxy answers preflights. Route declarations lose `browser` (`x-nylorun-browser` leaves the OpenAPI document) and the `publishable` credential; the token security scheme is `issuerToken`. Core drops `PUBLISHABLE_KEY_HEADER`, `PUBLISHABLE_KEY_PATTERN`, `PUBLISHABLE_KEY_ID_PATTERN`, `tenantOfPublishableKey`, `newPublishableKey`, `newPublishableKeyId`, `PublishableKey*`, `OriginEntrySchema`, `originAllowed` and `LOOPBACK_ORIGIN_WILDCARDS`.
+  - **Breaking (`@nylorun/runtime`, `@nylorun/core`, `@nylorun/agents`): vault routes are application-only, and `vaults:own` is retired.** Every `/v1/vaults` route takes an application key acting for no one (operator keys, Studio); a request acting for a subject or a trusted issuer's token gets `403 scope_required`. `vaults:own` leaves `SUBJECT_SCOPES`, `TOKEN_SCOPES` and the issuer scopes; `Nylorun-Scopes` may still name it and it grants nothing. Existing user vaults stay attachable to their own owner's sessions. `client.createVault` takes `{ scope: "installation" }` or `ownerUserId`, and `client.listVaults()` takes an optional owner.
+  - **Breaking (`@nylorun/runtime`, `@nylorun/core`, `@nylorun/admin`, `nylorun`): derived principals are gone.** Only Studio's key is derived from the admin key. `NYLORUN_DERIVED_PRINCIPALS` is ignored and no longer written, `hostPrincipals` takes no `derived`, `startEphemeralRuntime` no `derivedPrincipals`, and `@nylorun/admin` drops `deriveTenantKey`, `PROJECT_PRINCIPAL_ID` and `admin.deriveTenantKey`. Keys an earlier Host derived stay in the database and keep working as ordinary keys; replace them with operator keys. Core renames `DERIVED_PRINCIPAL_ID_PATTERN` to `APPLICATION_KEY_ID_PATTERN`.
+  - **Breaking (`@nylorun/agents`):** `createTokenEndpoint`, `createBrowserClient` and the `@nylorun/agents/browser` entry, `client.tokens`, `TokensClient`, `PublishableKeysClient`, `client.access.getPolicy`/`putPolicy`/`revokeSubject`/`publishableKeys` and `Destination.publishableKey` are removed. `client.access.signingKeys` and `client.access.jwks()` stay, and `Destination.token` takes a trusted issuer's tokens.
+  - **Breaking (`@nylorun/cli`):** `nylo access policy|keys|revoke|token` are removed and name what replaces them; `nylo access signing-keys list|rotate|revoke` stays.
+  - **Breaking (`@nylorun/core`, `@nylorun/agents`, `@nylorun/studio`): the Studio embed message `open.babai` is now `open.session`** (`{ sessionId }`): it asks the embedding app to open that session in its own UI. Studio sends no such message itself.
+  - **Breaking (`nylorun`): Studio embedding is opt-in.** No origin may frame Studio by default; list your app's origins with `nylorun start --studio-embed-origin <origin>`. A Tenant's `.env` from an earlier nylorun keeps the origins it had until `--studio-embed-origin-reset`.
+  - `PROTOCOL_VERSION` is 7 and `HOST_PROTOCOL` 4–7; the Host features `subject-tokens`, `browser-access` and `derived-principals` are removed. `@nylorun/studio` and `@nylorun/create-agent` speak protocol 7.
+
+### Patch Changes
+
+- Pin agents to the tested release.
+- Pin admin to the tested release.
+- Updated dependencies [5cfaed9]
+- Updated dependencies [bd478ee]
+- Updated dependencies
+- Updated dependencies
+  - @nylorun/agents@0.14.0-beta
+  - @nylorun/admin@0.10.0-beta
+
 ## 0.9.0-beta
 
 ### Major Changes

package/README.md

@@ -18,7 +18,7 @@ npx @nylorun/cli status               # the linked Tenant
 nylo status [--json]                  # the Tenant, its checks and counts
 nylo reset [--sessions|--sandboxes|--all] [--yes]
 nylo endpoints [--json]|ping <agent>  # the registered Action endpoints and their health
-nylo access …                         # access policy, publishable and signing keys, subject tokens
+nylo access signing-keys …            # the Tenant's signing keys: list, rotate, revoke
 nylo configure                        # set or replace the Tenant's model provider
 nylo env                              # export lines for the linked Project
 nylo doctor sandbox [--json]          # sandbox backend via the Tenant API
@@ -55,8 +55,7 @@ not in a terminal. The Project link and credentials are kept.
 
 - `.nylorun/link.json`: `{ format: 3, tenant, hostUrl, hostId, tenantId }`
   (`tenant` is the local Tenant's name; `tenantId` is information)
-- `.nylorun/credentials.json`: the key of the derived principal `project` and
-  its id (0600)
+- `.nylorun/credentials.json`: the operator key `project` and its id (0600)
 - `.nylorun/.gitignore` containing `*`
 
 A link from an older nylorun (format 0 to 2): `nylo` refuses it and says to run

package/dist/access/commands.d.ts

@@ -1,24 +1,8 @@
+/**
+ * `nylo access`: the linked Tenant's signing keys, which sign delivery tokens and capability
+ * links. Uses the Project's application key, like every other Tenant command. (Subject tokens,
+ * the access policy, browser keys and revocations left the Runtime in protocol 7.)
+ */
 import { type AgentsClient } from "@nylorun/agents";
-export declare const accessUsage = "nylo access <policy|keys|signing-keys|revoke|token>\n\n  policy get                         print the access policy\n  policy set <file>                  replace it with a JSON file\n  policy init                        write a starter \"user\" role (sessions:own agents:read, every agent,\n                                     60 turns per hour, 2 at once)\n  signing-keys list                  list the signing keys\n  signing-keys rotate [--force]      rotate; --force signs outstanding tokens out\n  signing-keys revoke <kid>          revoke a previous or standby key\n  keys list                          list the publishable keys\n  keys create --name <n> [--origin <o>]\u2026\n                                     a publishable key for a web page or an app\n                                     (origins: https://app.example.com or http://localhost:*)\n  keys set-origins <id> [<o>\u2026]       replace a key's origins ([] for native apps only)\n  keys revoke <id>                   revoke a publishable key\n  revoke <subject>                   end a subject's tokens and open streams\n  token --subject <s> --role <r> [--ttl <seconds>]\n                                     mint a subject token (for trying the API with curl)";
-/** The starter policy `policy init` writes. */
-export declare const STARTER_POLICY: {
-    version: 1;
-    roles: {
-        user: {
-            scopes: ("agents:read" | "sessions:own")[];
-            agents: "*";
-            limits: {
-                turnsPerHour: number;
-                concurrentTurns: number;
-            };
-        };
-    };
-    anon: {
-        scopes: never[];
-        agents: never[];
-    };
-    tokens: {
-        maxTtlSeconds: number;
-    };
-};
+export declare const accessUsage = "nylo access signing-keys <list|rotate|revoke>\n\n  signing-keys list                  list the signing keys\n  signing-keys rotate [--force]      rotate; --force ends outstanding delivery tokens and links\n  signing-keys revoke <kid>          revoke a previous or standby key";
 export declare function accessCommand(input: readonly string[], client?: () => Promise<AgentsClient>): Promise<void>;

package/dist/access/commands.js

@@ -1,42 +1,15 @@
 /**
- * `nylo access`: the linked Tenant's access policy, signing keys and revocations, and a
- * development command that mints a subject token (Host feature `subject-tokens`). Uses the
- * Project's application key, like every other Tenant command.
+ * `nylo access`: the linked Tenant's signing keys, which sign delivery tokens and capability
+ * links. Uses the Project's application key, like every other Tenant command. (Subject tokens,
+ * the access policy, browser keys and revocations left the Runtime in protocol 7.)
  */
-import { readFile } from "node:fs/promises";
 import { createClient, resolveConnection, } from "@nylorun/agents";
 import { CliError } from "../errors.js";
-export const accessUsage = `nylo access <policy|keys|signing-keys|revoke|token>
+export const accessUsage = `nylo access signing-keys <list|rotate|revoke>
 
-  policy get                         print the access policy
-  policy set <file>                  replace it with a JSON file
-  policy init                        write a starter "user" role (sessions:own agents:read, every agent,
-                                     60 turns per hour, 2 at once)
   signing-keys list                  list the signing keys
-  signing-keys rotate [--force]      rotate; --force signs outstanding tokens out
-  signing-keys revoke <kid>          revoke a previous or standby key
-  keys list                          list the publishable keys
-  keys create --name <n> [--origin <o>]…
-                                     a publishable key for a web page or an app
-                                     (origins: https://app.example.com or http://localhost:*)
-  keys set-origins <id> [<o>…]       replace a key's origins ([] for native apps only)
-  keys revoke <id>                   revoke a publishable key
-  revoke <subject>                   end a subject's tokens and open streams
-  token --subject <s> --role <r> [--ttl <seconds>]
-                                     mint a subject token (for trying the API with curl)`;
-/** The starter policy `policy init` writes. */
-export const STARTER_POLICY = {
-    version: 1,
-    roles: {
-        user: {
-            scopes: ["sessions:own", "agents:read"],
-            agents: "*",
-            limits: { turnsPerHour: 60, concurrentTurns: 2 },
-        },
-    },
-    anon: { scopes: [], agents: [] },
-    tokens: { maxTtlSeconds: 600 },
-};
+  signing-keys rotate [--force]      rotate; --force ends outstanding delivery tokens and links
+  signing-keys revoke <kid>          revoke a previous or standby key`;
 const usageError = (message = accessUsage) => new CliError(message, 2);
 async function linkedClient() {
     let connection;
@@ -49,41 +22,8 @@ async function linkedClient() {
     return createClient({ url: connection.url, key: connection.key });
 }
 const print = (value) => console.log(JSON.stringify(value, null, 2));
-function option(args, name) {
-    const index = args.indexOf(name);
-    if (index === -1)
-        return undefined;
-    const value = args[index + 1];
-    if (!value || value.startsWith("--"))
-        throw usageError(`${name} requires a value.`);
-    args.splice(index, 2);
-    return value;
-}
 export async function accessCommand(input, client = linkedClient) {
-    const [topic, action, ...rest] = input;
-    const args = [...rest];
-    if (topic === "policy") {
-        if (action === "get" && args.length === 0)
-            return print(await (await client()).access.getPolicy());
-        if (action === "init" && args.length === 0)
-            return print(await (await client()).access.putPolicy(STARTER_POLICY));
-        if (action === "set" && args.length === 1) {
-            let parsed;
-            try {
-                parsed = JSON.parse(await readFile(args[0], "utf8"));
-            }
-            catch (error) {
-                throw new CliError(`Could not read ${args[0]}: ${error instanceof Error ? error.message : String(error)}`, 1);
-            }
-            // Accept the file as the policy itself or as `{ policy }`, as `policy get` prints it.
-            const candidate = parsed && typeof parsed === "object" && "policy" in parsed
-                ? parsed.policy
-                : parsed;
-            // The Runtime validates it and names what is wrong.
-            return print(await (await client()).access.putPolicy(candidate));
-        }
-        throw usageError();
-    }
+    const [topic, action, ...args] = input;
     if (topic === "signing-keys") {
         const keys = async () => (await client()).access.signingKeys;
         if (action === "list" && args.length === 0)
@@ -98,47 +38,7 @@ export async function accessCommand(input, client = linkedClient) {
             return print(await (await keys()).revoke(args[0]));
         throw usageError();
     }
-    if (topic === "keys") {
-        const keys = async () => (await client()).access.publishableKeys;
-        if (action === "list" && args.length === 0)
-            return print(await (await keys()).list());
-        if (action === "create") {
-            const name = option(args, "--name");
-            const origins = [];
-            for (let origin = option(args, "--origin"); origin; origin = option(args, "--origin"))
-                origins.push(origin);
-            if (!name || args.length > 0)
-                throw usageError();
-            return print(await (await keys()).create({ name, origins }));
-        }
-        if (action === "set-origins" && args.length >= 1) {
-            const [keyId, ...origins] = args;
-            return print(await (await keys()).update(keyId, { origins }));
-        }
-        if (action === "revoke" && args.length === 1)
-            return print(await (await keys()).revoke(args[0]));
-        throw usageError();
-    }
-    if (topic === "revoke") {
-        if (!action || args.length > 0)
-            throw usageError();
-        return print(await (await client()).access.revokeSubject(action));
-    }
-    if (topic === "token") {
-        const all = [action, ...args].filter((arg) => arg !== undefined);
-        const subject = option(all, "--subject");
-        const role = option(all, "--role");
-        const ttl = option(all, "--ttl");
-        if (!subject || !role || all.length > 0)
-            throw usageError();
-        const ttlSeconds = ttl === undefined ? undefined : Number(ttl);
-        if (ttlSeconds !== undefined && !Number.isInteger(ttlSeconds))
-            throw usageError("--ttl must be a whole number of seconds.");
-        return print(await (await client()).tokens.create({
-            subject,
-            role,
-            ...(ttlSeconds === undefined ? {} : { ttlSeconds }),
-        }));
-    }
+    if (topic === "policy" || topic === "keys" || topic === "revoke" || topic === "token")
+        throw usageError(`nylo access ${topic} was removed: the Runtime no longer mints subject tokens or keeps an access policy, browser keys or revocations (protocol 7). Trust your identity provider's tokens with an identity file, and give servers an operator key (nylorun key put <id>).`);
     throw usageError();
 }

package/dist/cli.js

@@ -16,11 +16,7 @@ npx nylorun start writes, or NYLORUN_RUNTIME_URL and NYLORUN_SERVER_KEY):
   reset [--sessions|--sandboxes|--all] [--yes]
                                           clear the Tenant's sessions, sandboxes or all its data
   endpoints [--json]|ping <agent>         the registered Action endpoints and their health
-  access policy get|set <file>|init       the access policy for subject tokens (nylo access --help)
-  access keys list|create|set-origins|revoke  publishable keys for web pages and apps
-  access signing-keys list|rotate|revoke  the Tenant's token signing keys
-  access revoke <subject>                 end a subject's tokens and open streams
-  access token --subject <s> --role <r>   mint a subject token for trying the API
+  access signing-keys list|rotate|revoke  the Tenant's token signing keys (nylo access --help)
   configure                               set the linked Tenant's model provider
   env                                     print the linked Project's NYLORUN_* variables as exports
   doctor sandbox [--json]                 show which sandbox backend this Tenant's Host offers

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nylorun/cli",
-  "version": "0.9.0-beta",
+  "version": "0.10.0-beta",
   "type": "module",
   "license": "Apache-2.0",
   "description": "Nylorun Runtime client: the linked installation's Tenant, its access and its model provider",
@@ -30,8 +30,8 @@
     "prepack": "npm run build"
   },
   "dependencies": {
-    "@nylorun/agents": "0.13.0-beta",
-    "@nylorun/admin": "0.9.0-beta",
+    "@nylorun/agents": "0.14.0-beta",
+    "@nylorun/admin": "0.10.0-beta",
     "@earendil-works/pi-ai": "0.99.1"
   },
   "devDependencies": {