@nylorun/runtime 0.41.0-beta → 0.42.0-beta

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## 0.42.0-beta
+
+### Minor Changes
+
+- 2afa44d: The Runtime's primitives as its own Agent Plugins (ADR-106, D84). An `agent-folder/3` folder lists them under `plugins:` (`nylorun-memory`, `nylorun-triggers`, `nylorun-plan`, `nylorun-interactions`, `nylorun-artifacts`, `nylorun-sandbox`, which needs a computer), with no versions, and turns one of their tools off with `mcpServers.nylorun.tools.<tool>.enabled: false`. The compiler reads them as the `agent-folder/2` declarations they stand for (`memory`, `loop`, `engine.sandbox`, `engine.artifacts`, `engine.triggers`, which v3 refuses) and records them in `harness.engine.plugins`, each with its tools and the hash of its files. The engine presents their tools as the reserved server `nylorun`: the model reads `nylorun__memory` and the declared plugins' words as one text, with their skills (`memory`, `triggers`) in the catalog, served from the bundle; every effect keeps its target and `toolName`, so the record, tool policy (`kind: "runtime"` rules) and dispatch are unchanged. New: `ask` (`nylorun-interactions`, `harness.loop.ask`), a question that pauses the turn as an A2A `question`; `removeTools` takes `nylorun__<tool>`; `triggers` answers carry `now`; under `nylorun-triggers`, an agent-made trigger's run starts with a `[trigger <id> · <title> · nobody is watching]` line, and a turn a trigger started may set a one-off follow-up (`in` or `at`, `session: "this"`); the sandbox's instructions name the hosts `runtime.json` allows. `nylorun migrate folder <dir> --to 3` writes the plugins that keep an agent's tools and features, and `nylorun check --explain` names the plugin behind each. The JSON Schemas are republished as `agent-manifest/v8.4`, `harness-manifest/v1.4` and `agent-folder/v1/agent-md.4`.
+
+### Patch Changes
+
+- Pin core to the tested release.
+- Pin harness to the tested release.
+- Updated dependencies [2afa44d]
+- Updated dependencies
+  - @nylorun/core@0.36.0-beta
+  - @nylorun/harness@0.33.0-beta
+
 ## 0.41.0-beta
 
 ### Minor Changes

package/dist/management-openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.2.0",
   "info": {
     "title": "Nylorun Management API",
-    "version": "0.41.0-beta",
+    "version": "0.42.0-beta",
     "x-nylorun-protocol": {
       "min": 16,
       "max": 18,

package/dist/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.2.0",
   "info": {
     "title": "Nylorun Runtime API",
-    "version": "0.41.0-beta",
+    "version": "0.42.0-beta",
     "x-nylorun-protocol": {
       "min": 16,
       "max": 18,
@@ -8726,6 +8726,50 @@
               "additionalProperties": false
             },
             "description": "The engine text blocks the agent gets, with their hashes"
+          },
+          "plugins": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "enum": [
+                    "nylorun-memory",
+                    "nylorun-triggers",
+                    "nylorun-plan",
+                    "nylorun-interactions",
+                    "nylorun-artifacts",
+                    "nylorun-sandbox"
+                  ]
+                },
+                "tools": {
+                  "type": "array",
+                  "items": {
+                    "type": "string",
+                    "minLength": 1
+                  }
+                },
+                "sha256": {
+                  "type": "string",
+                  "pattern": "^sha256:[0-9a-f]{64}$"
+                },
+                "hosts": {
+                  "type": "array",
+                  "items": {
+                    "type": "string",
+                    "minLength": 1
+                  }
+                }
+              },
+              "required": [
+                "name",
+                "tools",
+                "sha256"
+              ],
+              "additionalProperties": false
+            },
+            "description": "The Runtime's plugins the agent declares (agent-folder/3, ADR-106): each with the tools left on and the hash of its files"
           }
         },
         "additionalProperties": false

package/dist/tenant/agent-triggers.js

@@ -45,6 +45,14 @@ function reaches(row, sessionId) {
         return false;
     return row.createdSessionId === sessionId || row.definition?.session === sessionId;
 }
+/** Whether the version session `s` runs declares the Runtime's `nylorun-triggers` plugin (ADR-106). */
+async function declaresTriggersPlugin(t, s) {
+    if (!s.definition)
+        return false;
+    const body = (await t.agentManifest(s.definition.name, s.definition.version))?.body;
+    const plugins = body?.harness?.engine?.plugins;
+    return Array.isArray(plugins) && plugins.some((plugin) => plugin?.name === "nylorun-triggers");
+}
 /** Whether the version session `s` runs declares `harness.engine.triggers`. */
 async function declaresTriggers(t, s) {
     if (!s.definition)
@@ -86,6 +94,7 @@ export async function serveTriggersTool(t, s, request) {
     if (input.command === "list") {
         const rows = (await t.agentTriggers(s.agentId)).filter((row) => reaches(row, s.id));
         return completed({
+            now: new Date().toISOString(),
             triggers: rows.map((row) => {
                 const trigger = row.definition;
                 return {
@@ -109,9 +118,17 @@ export async function serveTriggersTool(t, s, request) {
         await t.agentEvent(s.agentId, "agent.trigger_deleted", { triggerId: input.id, sessionId: s.id });
         return completed({ id: input.id, deleted: true });
     }
-    // create: never from a turn a trigger or a booked wake started.
-    if (s.turnCause !== undefined)
-        return failed("tool.forbidden", "A run can't create triggers: this turn was started by a trigger. It may list and delete them.");
+    // create: never from a turn a trigger or a booked wake started. Under the `nylorun-triggers`
+    // plugin (ADR-106) such a turn may still set a one-off follow-up in its own session, as a woken
+    // turn books the next wake: never a schedule, never a session of its own.
+    if (s.turnCause !== undefined) {
+        const plugin = await declaresTriggersPlugin(t, s);
+        const followUp = plugin && input.schedule === undefined && input.session === "this";
+        if (!followUp)
+            return failed("tool.forbidden", plugin
+                ? "A run can't create triggers other than a one-off follow-up here (in or at, with session: this): this turn was started by a trigger. It may list and delete them."
+                : "A run can't create triggers: this turn was started by a trigger. It may list and delete them.");
+    }
     const now = new Date();
     const stamp = now.toISOString();
     const session = triggerSessionOf(s.id, input.id, input.session);
@@ -175,5 +192,5 @@ export async function serveTriggersTool(t, s, request) {
         ...(row.title === null ? {} : { title: row.title }),
         nextRunAt: row.nextFireAt,
     });
-    return completed({ id: input.id, status: row.status, nextRunAt: row.nextFireAt, session }, [row]);
+    return completed({ id: input.id, status: row.status, nextRunAt: row.nextFireAt, session, now: stamp }, [row]);
 }

package/dist/tenant/triggers.d.ts

@@ -31,6 +31,11 @@ export declare function nextFireAt(agentId: string, triggerId: string, trigger:
 export declare function triggerIssues(triggers: Readonly<Record<string, Trigger>> | undefined, limits: RuntimeLimits, now?: Date, 
 /** How an issue names trigger `id`: its place in the manifest by default. */
 label?: (id: string) => string): string[];
+/**
+ * The line an agent-made trigger's run starts with under the `nylorun-triggers` plugin (ADR-106):
+ * which trigger woke the turn, and that nobody is watching.
+ */
+export declare function triggerFrame(triggerId: string, title: string | null | undefined): string;
 /** Where a row's definition comes from (D83): its origin, or `wake` for a booked wake written before origins. */
 export declare function originOf(row: Pick<AgentTriggerRow, "origin" | "kind">): AgentTriggerRow["origin"];
 /**

package/dist/tenant/triggers.js

@@ -152,7 +152,20 @@ async function triggersOf(t, agent) {
 async function pinnedOf(t, agent) {
     const body = (await t.agentManifest(agent.manifestName, agent.manifestVersion))?.body;
     const harness = body?.harness;
-    return { triggers: (body?.runtime?.triggers ?? {}), declared: harness?.engine?.triggers === true };
+    const plugins = harness?.engine?.plugins;
+    return {
+        triggers: (body?.runtime?.triggers ?? {}),
+        declared: harness?.engine?.triggers === true,
+        // The version declares the Runtime's `nylorun-triggers` plugin (ADR-106).
+        plugin: Array.isArray(plugins) && plugins.some((item) => item?.name === "nylorun-triggers"),
+    };
+}
+/**
+ * The line an agent-made trigger's run starts with under the `nylorun-triggers` plugin (ADR-106):
+ * which trigger woke the turn, and that nobody is watching.
+ */
+export function triggerFrame(triggerId, title) {
+    return `[trigger ${triggerId}${title ? ` · ${title}` : ""} · nobody is watching]`;
 }
 /** Where a row's definition comes from (D83): its origin, or `wake` for a booked wake written before origins. */
 export function originOf(row) {
@@ -431,7 +444,9 @@ export async function deliverRun(ctx, t, agent, triggerId, trigger, row, cause)
         title: row.title ?? null,
         streamedAt: null,
     };
-    const outcome = await runOutcome(ctx, t, agent, triggerId, trigger, row.kind, id, firedAt, cause.payload, row.createdSessionId ?? null);
+    // Under the `nylorun-triggers` plugin, an agent-made trigger's run is framed (ADR-106).
+    const framed = origin === "agent" && (await pinnedOf(t, agent)).plugin ? { ...trigger, prompt: `${triggerFrame(triggerId, row.title)}\n${trigger.prompt}` } : trigger;
+    const outcome = await runOutcome(ctx, t, agent, triggerId, framed, row.kind, id, firedAt, cause.payload, row.createdSessionId ?? null);
     Object.assign(run, outcome);
     await t.insertTriggerRun(run);
     await t.agentEvent(agent.id, "agent.run", {

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const RUNTIME_VERSION = "0.41.0-beta";
+export declare const RUNTIME_VERSION = "0.42.0-beta";

package/dist/version.js

@@ -1,3 +1,3 @@
 // Kept in step with package.json by runtime/server/scripts/check-package.mjs, which runs in npm run check.
 // release:prepare also rewrites this when it bumps @nylorun/runtime.
-export const RUNTIME_VERSION = "0.41.0-beta";
+export const RUNTIME_VERSION = "0.42.0-beta";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nylorun/runtime",
-  "version": "0.41.0-beta",
+  "version": "0.42.0-beta",
   "description": "Nylorun Runtime: the agent execution Host on Postgres, Restate and S2, and model providers.",
   "type": "module",
   "license": "Apache-2.0",
@@ -65,8 +65,8 @@
     "@hono/node-server": "^2.1.5",
     "@hono/zod-openapi": "^1.6.3",
     "@modelcontextprotocol/sdk": "^1.32.1",
-    "@nylorun/core": "0.35.0-beta",
-    "@nylorun/harness": "0.32.0-beta",
+    "@nylorun/core": "0.36.0-beta",
+    "@nylorun/harness": "0.33.0-beta",
     "@restatedev/restate-sdk": "1.17.3",
     "@restatedev/restate-sdk-clients": "1.17.3",
     "@s2-dev/streamstore": "0.28.0",