norns-sdk 0.1.0 → 0.3.0

package/CHANGELOG.md

@@ -2,6 +2,26 @@
 
 All notable changes to `norns-sdk` are documented in this file.
 
+## [0.3.0] - 2026-10-22
+
+### Added
+- A worker holding a scoped key (`nrnw_...`, issued for one gard's worker)
+  skips the agent registration on `start()`, since the key cannot reach the
+  REST API; the definitions are registered with a tenant key instead.
+  `isScopedKey()` is exported.
+- `KeyRevokedError`: `worker.stopped` rejects with it when Norns revokes the
+  key the worker joined on.
+
+## [0.2.0] - 2026-10-16
+
+### Added
+- The worker joins with `features: ["message_cache"]` and keeps the message
+  list Norns last sent it per run, so Norns can send later steps as
+  `messages_delta` (the change) instead of the whole history. A delta on a
+  base the worker no longer holds is answered with `message_cache_miss` and
+  Norns resends in full. Older Norns ignores the feature and sends the full
+  list as before.
+
 ## [0.1.0] - 2026-10-15
 
 ### Added

package/README.md

@@ -90,6 +90,12 @@ execute: async ({ port }, ctx) => {
 
 A fatally rejected claim (bad token, destroyed gard) rejects `start()` with `JoinError` instead of reconnect-looping. If the gard is destroyed while the worker is connected, `worker.stopped` rejects with `GardDestroyedError`.
 
+A worker inside a gard should hold a [scoped key](https://github.com/nornscode/norns/blob/main/docs/gards.md#scoped-worker-keys) (`nrnw_...`) rather than the tenant key: it can join the worker socket, claim its gard and serve tasks, and nothing else. With one, `start()` skips the agent registration, since the key cannot reach the REST API; register the definitions with a tenant key instead. Pass `capabilities: ["tools"]` for a worker with no LLM access, matching what the key allows. If the key is revoked while the worker is connected, `worker.stopped` rejects with `KeyRevokedError`.
+
+```ts
+const worker = new NornsWorker({ agents: [coder], gard: 3, claimToken: "tok_...", capabilities: ["tools"] });
+```
+
 ### Shutdown
 
 On SIGTERM or SIGINT the worker drains instead of dying mid-task: it tells Norns to stop sending it work, finishes the tasks it holds, reports their results, leaves the channel, and the process exits. Tasks still running after `shutdownTimeoutMs` (default 30 seconds, or `NORNS_SHUTDOWN_TIMEOUT` in seconds) are dropped and Norns re-dispatches them. A second signal exits at once.

package/dist/index.cjs

@@ -23,6 +23,7 @@ __export(index_exports, {
   DEFAULT_MODEL: () => DEFAULT_MODEL,
   GardDestroyedError: () => GardDestroyedError,
   JoinError: () => JoinError,
+  KeyRevokedError: () => KeyRevokedError,
   NornsApiError: () => NornsApiError,
   NornsClient: () => NornsClient,
   NornsError: () => NornsError,
@@ -33,6 +34,7 @@ __export(index_exports, {
   consoleLogger: () => consoleLogger,
   defineAgent: () => defineAgent,
   inferProvider: () => inferProvider,
+  isScopedKey: () => isScopedKey,
   jsonSchema: () => import_ai4.jsonSchema,
   silentLogger: () => silentLogger,
   tool: () => tool
@@ -245,6 +247,12 @@ var GardDestroyedError = class extends NornsError {
     this.name = "GardDestroyedError";
   }
 };
+var KeyRevokedError = class extends NornsError {
+  constructor() {
+    super("the worker's scoped key was revoked");
+    this.name = "KeyRevokedError";
+  }
+};
 var StreamClosedError = class extends NornsError {
   reason;
   constructor(reason) {
@@ -573,6 +581,9 @@ function resolveApiKey(apiKey) {
   if (!value) throw new NornsError("Norns API key missing: pass `apiKey` or set NORNS_API_KEY");
   return value;
 }
+function isScopedKey(apiKey) {
+  return apiKey.startsWith("nrnw_");
+}
 function wsBase(url) {
   return url.replace(/^http:\/\//, "ws://").replace(/^https:\/\//, "wss://");
 }
@@ -1149,6 +1160,51 @@ function neutralUsage(usage) {
   return out;
 }
 
+// src/history-cache.ts
+var HistoryCache = class {
+  #runs = /* @__PURE__ */ new Map();
+  #maxRuns;
+  constructor(maxRuns = 256) {
+    this.#maxRuns = maxRuns;
+  }
+  /** The task with `messages` filled in, or `undefined` on a miss. */
+  resolve(task) {
+    if (task.purpose === "compact") return task;
+    const runId = task.run_id;
+    const delta = task.messages_delta;
+    if (delta === void 0) {
+      if (runId !== void 0 && Array.isArray(task.messages)) this.#remember(runId, task.messages);
+      return task;
+    }
+    const previous = runId === void 0 ? void 0 : this.#runs.get(runId);
+    if (runId === void 0 || previous === void 0 || previous.length !== delta.base_count) {
+      return void 0;
+    }
+    const messages = [...previous.slice(delta.drop), ...delta.append];
+    this.#remember(runId, messages);
+    const resolved = { ...task, messages };
+    delete resolved.messages_delta;
+    return resolved;
+  }
+  /** Forget everything: a new connection gets the full history anyway. */
+  clear() {
+    this.#runs.clear();
+  }
+  /** How many runs are held; for tests. */
+  get size() {
+    return this.#runs.size;
+  }
+  #remember(runId, messages) {
+    this.#runs.delete(runId);
+    this.#runs.set(runId, messages);
+    while (this.#runs.size > this.#maxRuns) {
+      const oldest = this.#runs.keys().next().value;
+      if (oldest === void 0) break;
+      this.#runs.delete(oldest);
+    }
+  }
+};
+
 // src/worker.ts
 var TOPIC = "worker:lobby";
 var NornsWorker = class {
@@ -1169,6 +1225,7 @@ var NornsWorker = class {
   #client;
   #resolveModel;
   #inFlight = /* @__PURE__ */ new Set();
+  #history = new HistoryCache();
   #state = "idle";
   #socket;
   #channel;
@@ -1237,9 +1294,15 @@ var NornsWorker = class {
     return this.#starting;
   }
   async #start() {
-    for (const agent of this.#agents) {
-      const info = await this.#client.agents.ensure(agent);
-      this.#logger.info(`Registered agent '${agent.name}' (id=${info.id})`);
+    if (isScopedKey(this.#apiKey)) {
+      this.#logger.info(
+        "Worker key is scoped (nrnw_): skipping agent registration. Register the agent definitions with a tenant key."
+      );
+    } else {
+      for (const agent of this.#agents) {
+        const info = await this.#client.agents.ensure(agent);
+        this.#logger.info(`Registered agent '${agent.name}' (id=${info.id})`);
+      }
     }
     if (this.#capabilities.includes("llm")) {
       for (const model of new Set(this.#agents.map((a) => a.model))) {
@@ -1261,7 +1324,10 @@ var NornsWorker = class {
       ...this.#socketOptions
     });
     this.#socket = socket;
-    socket.onOpen(() => this.#logger.info(`Connected to ${this.url}`));
+    socket.onOpen(() => {
+      this.#logger.info(`Connected to ${this.url}`);
+      this.#history.clear();
+    });
     socket.onError((err) => {
       if (this.#state === "starting" || this.#state === "running") {
         this.#logger.warn(`Connection error (${errorMessage(err)}); retrying`);
@@ -1287,6 +1353,10 @@ var NornsWorker = class {
       this.#logger.error("This worker's gard was destroyed; shutting down");
       this.#fail(new GardDestroyedError(this.gard));
     });
+    channel.on("key_revoked", () => {
+      this.#logger.error("This worker's key was revoked; shutting down");
+      this.#fail(new KeyRevokedError());
+    });
     channel.onError((reason) => {
       if (this.#state === "running")
         this.#logger.warn(`Channel error (${errorMessage(reason)}); rejoining`);
@@ -1320,7 +1390,10 @@ var NornsWorker = class {
     const params = {
       worker_id: this.workerId,
       tools: [...this.#tools.values()].map(toolRegistration),
-      capabilities: this.#capabilities
+      capabilities: this.#capabilities,
+      // This worker keeps the history it was last sent per run, so Norns may
+      // send later steps as the change only (HistoryCache).
+      features: ["message_cache"]
     };
     if (this.gard !== void 0) {
       params.gard = this.gard;
@@ -1449,7 +1522,14 @@ var NornsWorker = class {
       (resp) => this.#logger.warn(`Server rejected result for ${taskId}: ${errorMessage(resp)}`)
     );
   }
-  async #runLlm(task, signal) {
+  async #runLlm(received, signal) {
+    const task = this.#history.resolve(received);
+    if (task === void 0) {
+      this.#logger.info(
+        "LLM task arrived as a delta on an unknown base; asking for the full history"
+      );
+      return { status: "error", error: "message_cache_miss" };
+    }
     const model = task.model ?? "?";
     const tools = task.tools ?? [];
     this.#logger.info(
@@ -1590,6 +1670,7 @@ var NornsWorker = class {
   DEFAULT_MODEL,
   GardDestroyedError,
   JoinError,
+  KeyRevokedError,
   NornsApiError,
   NornsClient,
   NornsError,
@@ -1600,6 +1681,7 @@ var NornsWorker = class {
   consoleLogger,
   defineAgent,
   inferProvider,
+  isScopedKey,
   jsonSchema,
   silentLogger,
   tool