nylorun 0.16.0-beta → 0.17.0-beta

package/dist/client/sessions.js

@@ -1,5 +1,6 @@
 /**
- * `nylorun sessions`: the Tenant's sessions (`/v1/sessions`, Runtime API): open one, send it a
+ * `nylorun sessions`: the Tenant's sessions (`/v1/sessions`, Runtime API): open one on an Agent
+ * (protocol 16: every session runs on one, and its id is the caller's to choose), send it a
  * message, answer what it waits for, watch its events, and read its history, usage, calls and
  * traces. `exec` runs a command in the session's sandbox, as an app's own tool would.
  */
@@ -10,13 +11,17 @@ export const sessionsUsage = `nylorun sessions <command>
 
 The Tenant's sessions, through the Runtime API with an application key (or NYLORUN_TOKEN).
 
-  list [--agent <id>] [--status <status>] [--environment <id>] [--owner <user>]
+  list [--agent <id>] [--manifest <name>] [--status <status>] [--owner <user>]
        [--limit <n>] [--cursor <c>] [--json]
-  create --agent <id> --owner <user> [--environment <id>] [--id <id>] [--info <json>]
-                                      open a session; prints its id
+                                      --agent: on that Agent; --manifest: on the Agents made
+                                      from that agent manifest
+  create --agent <id> --owner <user> [--id <id>] [--info <json>]
+                                      open a session on Agent <id>; prints its id
   get <id>                            the session: status, active turn, what it waits for
   send <id> [<text>] [--data <json>] [--file <artifact>[@<version>]]... [--idempotency-key <k>]
-                                      start a turn with text, JSON data or files (artifacts)
+       [--reject-if-busy]             start a turn with text, JSON data or files (artifacts); while
+                                      a turn runs the message waits in the session's queue, or is
+                                      refused with --reject-if-busy
   approve <id> <interaction> [--deny] approve (or deny) a held tool call
   respond <id> <interaction> <json>   answer a question the agent asked
   cancel <id> [--reason <text>]       cancel the running turn
@@ -33,9 +38,13 @@ The Tenant's sessions, through the Runtime API with an application key (or NYLOR
                                       its exit code
 
 ${runtimeFlagsUsage}`;
+/** Protocol 16: a session runs on the Agent `--agent` names, which holds what an Environment did. */
+const ENVIRONMENT_REMOVED = "--environment was removed in protocol 16: a session runs on an Agent, its sandbox and vault included. Pass --agent <id> (nylorun agents list).";
 async function list(deps, args) {
-    const usage = "nylorun sessions list [--agent <id>] [--status <s>] [--environment <id>] [--owner <user>] [--limit <n>] [--cursor <c>] [--json]";
-    const flags = parseFlags(args, { booleans: ["--json"], values: ["--agent", "--status", "--environment", "--owner", "--limit", "--cursor"] }, usage);
+    const usage = "nylorun sessions list [--agent <id>] [--manifest <name>] [--status <s>] [--owner <user>] [--limit <n>] [--cursor <c>] [--json]";
+    if (args.includes("--environment"))
+        throw usageError(ENVIRONMENT_REMOVED);
+    const flags = parseFlags(args, { booleans: ["--json"], values: ["--agent", "--manifest", "--status", "--owner", "--limit", "--cursor"] }, usage);
     positional(flags, 0, usage);
     const { client } = await runtimeClient(deps, flags);
     const value = (name) => flags.values.get(name);
@@ -43,7 +52,7 @@ async function list(deps, args) {
     const page = await runtimeCall(() => client.sessions.page({
         ...(value("--agent") ? { agentId: value("--agent") } : {}),
         ...(value("--status") ? { status: value("--status") } : {}),
-        ...(value("--environment") ? { environmentId: value("--environment") } : {}),
+        ...(value("--manifest") ? { manifest: value("--manifest") } : {}),
         ...(value("--owner") ? { ownerUserId: value("--owner") } : {}),
         ...(limit === undefined ? {} : { limit }),
         ...(value("--cursor") ? { cursor: value("--cursor") } : {}),
@@ -56,13 +65,12 @@ async function list(deps, args) {
         deps.out("No sessions.");
     else
         printTable(deps, [
-            ["ID", "AGENT", "OWNER", "STATUS", "ENVIRONMENT", "LAST EVENT"],
+            ["ID", "AGENT", "OWNER", "STATUS", "LAST EVENT"],
             ...page.sessions.map((session) => [
                 session.id,
                 session.agentId,
                 session.ownerUserId,
                 session.status,
-                session.environmentId ?? "-",
                 session.lastEventAt ?? "-",
             ]),
         ]);
@@ -70,8 +78,10 @@ async function list(deps, args) {
     return 0;
 }
 async function create(deps, args) {
-    const usage = "nylorun sessions create --agent <id> --owner <user> [--environment <id>] [--id <id>] [--info <json>]";
-    const flags = parseFlags(args, { values: ["--agent", "--owner", "--environment", "--id", "--info"] }, usage);
+    const usage = "nylorun sessions create --agent <id> --owner <user> [--id <id>] [--info <json>]";
+    if (args.includes("--environment"))
+        throw usageError(ENVIRONMENT_REMOVED);
+    const flags = parseFlags(args, { values: ["--agent", "--owner", "--id", "--info"] }, usage);
     positional(flags, 0, usage);
     const agentId = flags.values.get("--agent");
     const ownerUserId = flags.values.get("--owner");
@@ -81,14 +91,12 @@ async function create(deps, args) {
     const parsedInfo = info === undefined ? undefined : parseJsonArgument(info, "--info");
     if (parsedInfo !== undefined && (!parsedInfo || typeof parsedInfo !== "object" || Array.isArray(parsedInfo)))
         throw usageError("--info must be a JSON object.");
-    const environment = flags.values.get("--environment");
     const id = flags.values.get("--id");
     const { client } = await runtimeClient(deps, flags);
     const session = await runtimeCall(() => client.createSession({
-        agentId,
+        agent: agentId,
         ownerUserId,
         ...(id ? { id } : {}),
-        ...(environment ? { environment } : {}),
         ...(parsedInfo ? { info: parsedInfo } : {}),
     }));
     deps.out(session.id);
@@ -113,8 +121,8 @@ function filePart(value) {
     return { type: "file", artifactId: value.slice(0, at), version: Number(version) };
 }
 async function send(deps, args) {
-    const usage = "nylorun sessions send <id> [<text>] [--data <json>] [--file <artifact>[@<version>]]... [--idempotency-key <k>]";
-    const flags = parseFlags(args, { values: ["--data", "--idempotency-key"], lists: ["--file"] }, usage);
+    const usage = "nylorun sessions send <id> [<text>] [--data <json>] [--file <artifact>[@<version>]]... [--idempotency-key <k>] [--reject-if-busy]";
+    const flags = parseFlags(args, { values: ["--data", "--idempotency-key"], lists: ["--file"], booleans: ["--reject-if-busy"] }, usage);
     if (flags.rest.length < 1 || flags.rest.length > 2)
         throw usageError(`Usage: ${usage}`);
     const [id, text] = flags.rest;
@@ -125,7 +133,10 @@ async function send(deps, args) {
     if (data === undefined && text === undefined && files.length === 0)
         throw usageError(`Nothing to send. Usage: ${usage}`);
     const parts = files.map(filePart);
-    const options = { idempotencyKey: flags.values.get("--idempotency-key") ?? randomUUID() };
+    const options = {
+        idempotencyKey: flags.values.get("--idempotency-key") ?? randomUUID(),
+        ...(flags.booleans.has("--reject-if-busy") ? { delivery: "reject" } : {}),
+    };
     const { client } = await runtimeClient(deps, flags);
     const session = client.session(id);
     const accepted = await runtimeCall(() => data !== undefined

package/dist/client/settings.d.ts

@@ -1,12 +1,12 @@
 import { type StackDeps } from "../stack/commands.js";
-export declare const settingsUsage = "  budgets [get | put <file|->] [--tenant <name>]\n                                      the model spend caps; put replaces them all\n  tool-policy [get | put <file|->] [--tenant <name>]\n                                      the Tool Gate's rules; put replaces them all\n  settings sandbox [get | put <file|->] [--tenant <name>]\n                                      the Environment settings: limits, stop grace, placement\n  settings artifacts [get | put <file|->] [--tenant <name>]\n                                      the artifact store's limits\n  settings skills [get | put <file|->] [--tenant <name>]\n                                      the most bytes one skill may hold\n  settings limits [get | put <file|->] [--tenant <name>]\n                                      the Runtime limits: sizes, counts and deadlines (record\n                                      entries, request bodies, Environments, model calls, tools)\n  coverage --agent <id> [--environment <id>] [--tenant <name>] [--json]\n                                      which secret of the Environment each of the agent's MCP\n                                      servers and HTTP tools would get";
+export declare const settingsUsage = "  budgets [get | put <file|->] [--tenant <name>]\n                                      the model spend caps (scope tenant, manifest with id an\n                                      agent manifest's name, or turn); put replaces them all\n  tool-policy [get | put <file|->] [--tenant <name>]\n                                      the Tool Gate's rules; put replaces them all\n  settings sandbox [get | put <file|->] [--tenant <name>]\n                                      the Agents' environments: limits, stop grace, placement\n  settings artifacts [get | put <file|->] [--tenant <name>]\n                                      the artifact store's limits\n  settings skills [get | put <file|->] [--tenant <name>]\n                                      the most bytes one skill may hold\n  settings limits [get | put <file|->] [--tenant <name>]\n                                      the Runtime limits: sizes, counts and deadlines (record\n                                      entries, request bodies, Agents, model calls, tools)\n  coverage --agent <id> [--tenant <name>] [--json]\n                                      which secret of Agent <id>'s vault each MCP server and\n                                      HTTP tool of its manifest would get";
 export declare const budgetsCommand: (deps: StackDeps, args: readonly string[]) => Promise<number>;
 export declare const toolPolicyCommand: (deps: StackDeps, args: readonly string[]) => Promise<number>;
 /** `nylorun tenant settings sandbox | artifacts | skills | limits ...` */
 export declare function settingsCommand(deps: StackDeps, args: readonly string[]): Promise<number>;
 /**
- * `nylorun tenant coverage`: which secret of `--environment` each remote MCP server and HTTP tool
- * of saved agent `--agent` would get in a session (none without an Environment). It reads no
- * secret and calls no server.
+ * `nylorun tenant coverage`: which secret of Agent `--agent`'s vault each remote MCP server and
+ * HTTP tool of the manifest version it runs would get in its sessions. It reads no secret and
+ * calls no server.
  */
 export declare function coverageCommand(deps: StackDeps, args: readonly string[]): Promise<number>;

package/dist/client/settings.js

@@ -4,21 +4,22 @@ import { parseStackFlags } from "../stack/commands.js";
 import { printJson, printTable, readBody } from "./io.js";
 import { connect, managementClient } from "./target.js";
 export const settingsUsage = `  budgets [get | put <file|->] [--tenant <name>]
-                                      the model spend caps; put replaces them all
+                                      the model spend caps (scope tenant, manifest with id an
+                                      agent manifest's name, or turn); put replaces them all
   tool-policy [get | put <file|->] [--tenant <name>]
                                       the Tool Gate's rules; put replaces them all
   settings sandbox [get | put <file|->] [--tenant <name>]
-                                      the Environment settings: limits, stop grace, placement
+                                      the Agents' environments: limits, stop grace, placement
   settings artifacts [get | put <file|->] [--tenant <name>]
                                       the artifact store's limits
   settings skills [get | put <file|->] [--tenant <name>]
                                       the most bytes one skill may hold
   settings limits [get | put <file|->] [--tenant <name>]
                                       the Runtime limits: sizes, counts and deadlines (record
-                                      entries, request bodies, Environments, model calls, tools)
-  coverage --agent <id> [--environment <id>] [--tenant <name>] [--json]
-                                      which secret of the Environment each of the agent's MCP
-                                      servers and HTTP tools would get`;
+                                      entries, request bodies, Agents, model calls, tools)
+  coverage --agent <id> [--tenant <name>] [--json]
+                                      which secret of Agent <id>'s vault each MCP server and
+                                      HTTP tool of its manifest would get`;
 const usageError = (message = `Usage:\n${settingsUsage}`) => new CliError(message, 2);
 /* The bodies' `requestId` is optional in the contracts; the client adds one when it is absent. */
 const budgets = {
@@ -86,29 +87,27 @@ export async function settingsCommand(deps, args) {
         return documentCommand(deps, limitSettings, rest);
     throw usageError();
 }
-const COVERAGE_USAGE = "nylorun tenant coverage --agent <id> [--environment <id>] [--tenant <name>] [--json]";
+const COVERAGE_USAGE = "nylorun tenant coverage --agent <id> [--tenant <name>] [--json]";
 /**
- * `nylorun tenant coverage`: which secret of `--environment` each remote MCP server and HTTP tool
- * of saved agent `--agent` would get in a session (none without an Environment). It reads no
- * secret and calls no server.
+ * `nylorun tenant coverage`: which secret of Agent `--agent`'s vault each remote MCP server and
+ * HTTP tool of the manifest version it runs would get in its sessions. It reads no secret and
+ * calls no server.
  */
 export async function coverageCommand(deps, args) {
-    const flags = parseStackFlags(args, { booleans: ["--json"], values: ["--tenant", "--agent", "--environment"] }, COVERAGE_USAGE);
+    if (args.includes("--environment"))
+        throw usageError("--environment was removed in protocol 16: pass the Agent, --agent <id>, whose vault its sessions use.");
+    const flags = parseStackFlags(args, { booleans: ["--json"], values: ["--tenant", "--agent"] }, COVERAGE_USAGE);
     const agentId = flags.values.get("--agent");
-    const environmentId = flags.values.get("--environment");
     if (flags.rest.length || agentId === undefined)
         throw usageError(`Usage: ${COVERAGE_USAGE}`);
     const admin = managementClient(deps, await connect(deps, "management", flags.values.get("--tenant")));
-    const coverage = await admin.coverage({
-        agentId,
-        ...(environmentId === undefined ? {} : { environmentId }),
-    });
+    const coverage = await admin.coverage({ agentId });
     if (flags.booleans.has("--json")) {
         printJson(deps, coverage);
         return 0;
     }
     const missing = coverage.entries.filter((entry) => entry.status === "missing").length;
-    deps.out(`${coverage.agentId} in ${coverage.environmentId ?? "no Environment"}: ${coverage.complete ? "every credential is covered" : `${missing} of ${coverage.entries.length} missing`}`);
+    deps.out(`Agent ${coverage.agentId}: ${coverage.complete ? "every credential is covered" : `${missing} of ${coverage.entries.length} missing`}`);
     if (coverage.entries.length)
         printTable(deps, [
             ["STATUS", "KIND", "NAME", "URL", "SECRET"],

package/dist/client/tenant.d.ts

@@ -6,7 +6,7 @@
 import type { ManagementClient } from "@nylorun/admin";
 import { type StackDeps } from "../stack/commands.js";
 import { type Connection } from "./target.js";
-export declare const tenantUsage = "nylorun tenant <command>\n\nThe Management API of the installation's one Tenant, with a management key: the local Tenant\n--tenant names (else the linked project's, else the default one), or the installation that\nNYLORUN_RUNTIME_URL and NYLORUN_MANAGEMENT_KEY name.\n\n  reset [--sessions|--environments|--all] [--yes] [--tenant <name>]\n                                      clear the Tenant's sessions, Environments or all its data\n                                      (the Project link and keys stay)\n  keys put <id> [--management] [--tenant <name>]\n                                      create the Tenant's application key <id> (--management: a\n                                      management key, on the Runtime's machine only), or rotate it\n                                      (the old key stops working); prints the key once\n  keys list [--tenant <name>] [--json]\n                                      the Tenant's keys: id, role, when issued (never the keys)\n  keys rm <id> [--tenant <name>]      delete key <id>: it stops working at once\n  signing-keys list [--tenant <name>]\n                                      the Tenant's token signing keys\n  signing-keys rotate [--force] [--tenant <name>]\n                                      rotate; --force ends outstanding links and run tokens\n  signing-keys revoke <kid> [--tenant <name>]\n                                      revoke a previous or standby key\n  models catalog [--tenant <name>] [--json]\n                                      every provider and model the Runtime knows\n  models providers [--tenant <name>] [--json]\n                                      the providers with a credential, and the one in use\n  models get [--tenant <name>] [--json]\n                                      the Tenant's model\n  models set [--tenant <name>]        sign in to a model provider and set the Tenant's model\n  models set --provider <id> --model <id> [--base-url <url>] [--tenant <name>]\n                                      the same with an API key piped in on stdin (CI)\n  models select <provider> [--model <id>] [--tenant <name>]\n                                      use a provider that has a credential (default: its model)\n  usage [--scope tenant|agent|turn] [--id <id>] [--period day|month|total] [--tenant <name>]\n                                      what the model calls used and cost (JSON)\n  calls [--after <cursor>] [--limit <n>] [--tenant <name>]\n                                      every recorded model call, one JSON line each, until\n                                      caught up; prints the cursor to resume from on stderr\n  budgets [get | put <file|->] [--tenant <name>]\n                                      the model spend caps; put replaces them all\n  tool-policy [get | put <file|->] [--tenant <name>]\n                                      the Tool Gate's rules; put replaces them all\n  settings sandbox [get | put <file|->] [--tenant <name>]\n                                      the Environment settings: limits, stop grace, placement\n  settings artifacts [get | put <file|->] [--tenant <name>]\n                                      the artifact store's limits\n  settings skills [get | put <file|->] [--tenant <name>]\n                                      the most bytes one skill may hold\n  settings limits [get | put <file|->] [--tenant <name>]\n                                      the Runtime limits: sizes, counts and deadlines (record\n                                      entries, request bodies, Environments, model calls, tools)\n  coverage --agent <id> [--environment <id>] [--tenant <name>] [--json]\n                                      which secret of the Environment each of the agent's MCP\n                                      servers and HTTP tools would get\n  mcp inspect <url> [--server <name>] [--environment <id>] [--sse] [--tenant <name>] [--json]\n                                      list a remote MCP server's tools, with Environment <id>'s\n                                      credential for <url> (none without it): model names, schema\n                                      sizes, renames, or that it needs a person's sign-in (the\n                                      Runtime calls no tool)\n\nA put reads a JSON body from a file, or from stdin for -, and replaces the whole document; what\nbudgets, tool-policy, settings artifacts, settings skills and settings limits get print, put takes back. An API key is read from\nstdin, never from the arguments.";
+export declare const tenantUsage = "nylorun tenant <command>\n\nThe Management API of the installation's one Tenant, with a management key: the local Tenant\n--tenant names (else the linked project's, else the default one), or the installation that\nNYLORUN_RUNTIME_URL and NYLORUN_MANAGEMENT_KEY name.\n\n  reset [--sessions|--agents|--all] [--yes] [--tenant <name>]\n                                      clear the Tenant's sessions, its Agents (their vaults,\n                                      disks and sessions) or all its data (the Project link and\n                                      keys stay)\n  keys put <id> [--management] [--tenant <name>]\n                                      create the Tenant's application key <id> (--management: a\n                                      management key, on the Runtime's machine only), or rotate it\n                                      (the old key stops working); prints the key once\n  keys list [--tenant <name>] [--json]\n                                      the Tenant's keys: id, role, when issued (never the keys)\n  keys rm <id> [--tenant <name>]      delete key <id>: it stops working at once\n  signing-keys list [--tenant <name>]\n                                      the Tenant's token signing keys\n  signing-keys rotate [--force] [--tenant <name>]\n                                      rotate; --force ends outstanding links and run tokens\n  signing-keys revoke <kid> [--tenant <name>]\n                                      revoke a previous or standby key\n  models catalog [--tenant <name>] [--json]\n                                      every provider and model the Runtime knows\n  models providers [--tenant <name>] [--json]\n                                      the providers with a credential, and the one in use\n  models get [--tenant <name>] [--json]\n                                      the Tenant's model\n  models set [--tenant <name>]        sign in to a model provider and set the Tenant's model\n  models set --provider <id> --model <id> [--base-url <url>] [--tenant <name>]\n                                      the same with an API key piped in on stdin (CI)\n  models select <provider> [--model <id>] [--tenant <name>]\n                                      use a provider that has a credential (default: its model)\n  usage [--scope tenant|manifest|turn] [--id <id>] [--period day|month|total] [--tenant <name>]\n                                      what the model calls used and cost (JSON); --scope\n                                      manifest: the Agents made from agent manifest <id>\n  calls [--after <cursor>] [--limit <n>] [--tenant <name>]\n                                      every recorded model call, one JSON line each, until\n                                      caught up; prints the cursor to resume from on stderr\n  budgets [get | put <file|->] [--tenant <name>]\n                                      the model spend caps (scope tenant, manifest with id an\n                                      agent manifest's name, or turn); put replaces them all\n  tool-policy [get | put <file|->] [--tenant <name>]\n                                      the Tool Gate's rules; put replaces them all\n  settings sandbox [get | put <file|->] [--tenant <name>]\n                                      the Agents' environments: limits, stop grace, placement\n  settings artifacts [get | put <file|->] [--tenant <name>]\n                                      the artifact store's limits\n  settings skills [get | put <file|->] [--tenant <name>]\n                                      the most bytes one skill may hold\n  settings limits [get | put <file|->] [--tenant <name>]\n                                      the Runtime limits: sizes, counts and deadlines (record\n                                      entries, request bodies, Agents, model calls, tools)\n  coverage --agent <id> [--tenant <name>] [--json]\n                                      which secret of Agent <id>'s vault each MCP server and\n                                      HTTP tool of its manifest would get\n  mcp inspect <url> [--server <name>] [--agent <id>] [--sse] [--tenant <name>] [--json]\n                                      list a remote MCP server's tools, with Agent <id>'s\n                                      credential for <url> (none without it): model names, schema\n                                      sizes, renames, or that it needs a person's sign-in (the\n                                      Runtime calls no tool)\n\nA put reads a JSON body from a file, or from stdin for -, and replaces the whole document; what\nbudgets, tool-policy, settings artifacts, settings skills and settings limits get print, put takes back. An API key is read from\nstdin, never from the arguments.";
 /** The Management API client of the installation `--tenant` (or the environment) names. */
 export declare function tenantClient(deps: StackDeps, tenant: string | undefined): Promise<{
     connection: Connection;

package/dist/client/tenant.js

@@ -13,9 +13,10 @@ The Management API of the installation's one Tenant, with a management key: the
 --tenant names (else the linked project's, else the default one), or the installation that
 NYLORUN_RUNTIME_URL and NYLORUN_MANAGEMENT_KEY name.
 
-  reset [--sessions|--environments|--all] [--yes] [--tenant <name>]
-                                      clear the Tenant's sessions, Environments or all its data
-                                      (the Project link and keys stay)
+  reset [--sessions|--agents|--all] [--yes] [--tenant <name>]
+                                      clear the Tenant's sessions, its Agents (their vaults,
+                                      disks and sessions) or all its data (the Project link and
+                                      keys stay)
 ${keyUsage}
 ${signingKeysUsage}
 ${modelsUsage}
@@ -64,16 +65,18 @@ export async function remoteStatus(deps, args) {
     deps.out(`sandbox  ${body.sandbox.backend ?? "none"}`);
     return 0;
 }
-const RESET_USAGE = "nylorun tenant reset [--sessions|--environments|--all] [--yes] [--tenant <name>]";
-const SCOPES = { "--sessions": "sessions", "--environments": "environments", "--all": "all" };
+const RESET_USAGE = "nylorun tenant reset [--sessions|--agents|--all] [--yes] [--tenant <name>]";
+const SCOPES = { "--sessions": "sessions", "--agents": "agents", "--all": "all" };
 /** `nylorun tenant reset`; `--all` asks first. */
 async function reset(deps, args) {
+    if (args.includes("--environments"))
+        throw usageError("--environments is --agents in protocol 16: Environments are Agents. Pass --agents.");
     const flags = parseStackFlags(args, { booleans: ["--yes", ...Object.keys(SCOPES)], values: ["--tenant"], aliases: { "-y": "--yes" } }, RESET_USAGE);
     if (flags.rest.length)
         throw usageError(`Usage: ${RESET_USAGE}`);
     const chosen = Object.keys(SCOPES).filter((flag) => flags.booleans.has(flag));
     if (chosen.length > 1)
-        throw usageError("Pass only one of --sessions, --environments, --all.");
+        throw usageError("Pass only one of --sessions, --agents, --all.");
     const scope = chosen.length ? SCOPES[chosen[0]] : "sessions";
     const { connection, admin } = await tenantClient(deps, flags.values.get("--tenant"));
     if (scope === "all" && !flags.booleans.has("--yes")) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nylorun",
-  "version": "0.16.0-beta",
+  "version": "0.17.0-beta",
   "type": "module",
   "license": "Apache-2.0",
   "description": "Set up and run local Nylorun Tenants (Runtime and Studio) with Docker Compose, and act on a Tenant through its Runtime and Management APIs",
@@ -30,23 +30,23 @@
     "prepack": "npm run build"
   },
   "dependencies": {
-    "@nylorun/admin": "0.18.0-beta",
-    "@nylorun/agents": "0.23.0-beta",
-    "@nylorun/core": "0.23.0-beta"
+    "@nylorun/admin": "0.19.0-beta",
+    "@nylorun/agents": "0.24.0-beta",
+    "@nylorun/core": "0.24.0-beta"
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "0.99.1",
+    "@earendil-works/pi-ai": "1.2.0",
     "@nylorun/agents": "file:../../sdks/agents",
     "typescript": "npm:@typescript/typescript6@^6.0.2",
-    "@types/node": "^26.6.4",
-    "vitest": "^5.0.2"
+    "@types/node": "^26.6.5",
+    "vitest": "^5.0.4"
   },
   "bin": {
     "nylorun": "dist/cli.js",
     "nylo": "dist/nylo.js"
   },
   "nylorun": {
-    "runtime": "0.27.0-beta",
-    "studio": "0.26.0-beta"
+    "runtime": "0.28.0-beta",
+    "studio": "0.27.0-beta"
   }
 }

package/dist/client/environment-manifests.d.ts

@@ -1,10 +0,0 @@
-import { type EnvironmentManifestInput } from "@nylorun/agents";
-import type { StackDeps } from "../stack/commands.js";
-export declare const manifestsUsage = "  manifests list [--json]             each environment manifest's latest version\n  manifests get <name> [--version <n>]\n                                      a manifest's latest version (or version n), as JSON\n  manifests versions <name>           its versions, with the Environments made from each\n  manifests save <manifest.json>... [--if-match <n>] [--dry-run]\n                                      save each manifest's next version (a files entry with\n                                      \"from\": a folder beside the file, uploaded by hash);\n                                      --dry-run prints the plan and saves nothing\n  manifests rm <name>                 delete every version (refused while an Environment\n                                      was made from one)";
-/** The manifest in `path`, its `from` folders hashed: the body to save and the bytes to upload. */
-export declare function manifestFrom(path: string): Promise<{
-    manifest: EnvironmentManifestInput;
-    bytes: Record<string, Uint8Array>;
-}>;
-/** `nylorun environments manifests <command> ...` */
-export declare function manifestsCommand(deps: StackDeps, args: readonly string[], usage: string): Promise<number>;

package/dist/client/environment-manifests.js

@@ -1,173 +0,0 @@
-/**
- * `nylorun environments manifests`: the Tenant's environment manifests (protocol 14, D63), named
- * and versioned definitions of a kind of Environment, saved like agents. `save` reads each JSON
- * file (its `$schema` is dropped), turns a `files` entry with `from` (a folder, relative to the
- * file) into files by content hash and uploads those the Runtime lacks, then saves the next
- * version under `If-Match` when `--if-match` is given. `--dry-run` prints the plan and exits 1
- * when the Runtime would refuse the save.
- */
-import { readdir, readFile } from "node:fs/promises";
-import { dirname, join, relative, resolve, sep } from "node:path";
-import { environmentFiles } from "@nylorun/agents";
-import { CliError } from "../errors.js";
-import { integerFlag, parseFlags, positional, printJson, printTable, readJson, runtimeCall, runtimeClient, usageError, } from "./runtime.js";
-export const manifestsUsage = `  manifests list [--json]             each environment manifest's latest version
-  manifests get <name> [--version <n>]
-                                      a manifest's latest version (or version n), as JSON
-  manifests versions <name>           its versions, with the Environments made from each
-  manifests save <manifest.json>... [--if-match <n>] [--dry-run]
-                                      save each manifest's next version (a files entry with
-                                      "from": a folder beside the file, uploaded by hash);
-                                      --dry-run prints the plan and saves nothing
-  manifests rm <name>                 delete every version (refused while an Environment
-                                      was made from one)`;
-/** Each file under `dir`, by its path relative to it (`/`-separated). */
-async function folderOf(dir) {
-    const found = {};
-    const visit = async (at) => {
-        for (const entry of await readdir(at, { withFileTypes: true })) {
-            const path = join(at, entry.name);
-            if (entry.isDirectory())
-                await visit(path);
-            else if (entry.isFile())
-                found[relative(dir, path).split(sep).join("/")] = new Uint8Array(await readFile(path));
-        }
-    };
-    try {
-        await visit(dir);
-    }
-    catch (error) {
-        throw new CliError(`Cannot read ${dir}: ${error.message}`, 1);
-    }
-    if (Object.keys(found).length === 0)
-        throw new CliError(`${dir} holds no files.`, 1);
-    return found;
-}
-/** The manifest in `path`, its `from` folders hashed: the body to save and the bytes to upload. */
-export async function manifestFrom(path) {
-    const raw = await readJson(path, "The manifest");
-    if (typeof raw.name !== "string" || raw.name === "")
-        throw usageError(`${path}: the manifest has no name.`);
-    const bytes = {};
-    const files = Array.isArray(raw.files) ? raw.files : undefined;
-    const entries = [];
-    for (const entry of files ?? []) {
-        if (typeof entry?.from !== "string") {
-            entries.push(entry);
-            continue;
-        }
-        const { from, ...rest } = entry;
-        if (typeof rest.path !== "string")
-            throw usageError(`${path}: a files entry with from needs a path.`);
-        const folder = await environmentFiles(rest.path, await folderOf(resolve(dirname(path), from)));
-        Object.assign(bytes, folder.bytes);
-        entries.push({ ...rest, files: folder.entry.files });
-    }
-    const { $schema: _schema, ...manifest } = raw;
-    return {
-        manifest: (files === undefined ? manifest : { ...manifest, files: entries }),
-        bytes,
-    };
-}
-async function save(deps, args) {
-    const usage = "nylorun environments manifests save <manifest.json>... [--if-match <n>] [--dry-run]";
-    const flags = parseFlags(args, { booleans: ["--dry-run"], values: ["--if-match"] }, usage);
-    if (flags.rest.length === 0)
-        throw usageError(`Usage: ${usage}`);
-    const ifMatch = integerFlag(flags, "--if-match");
-    if (ifMatch !== undefined && flags.rest.length > 1)
-        throw usageError("--if-match takes one manifest.");
-    const { client, connection } = await runtimeClient(deps, flags);
-    let blocked = false;
-    for (const path of flags.rest) {
-        const { manifest, bytes } = await manifestFrom(path);
-        const options = { files: bytes, ...(ifMatch === undefined ? {} : { ifMatch }) };
-        if (flags.booleans.has("--dry-run")) {
-            const plan = await runtimeCall(() => client.environments.manifests.plan(manifest, options));
-            printJson(deps, plan);
-            if (plan.errors.length > 0)
-                blocked = true;
-            continue;
-        }
-        const saved = await runtimeCall(() => client.environments.manifests.save(manifest, options));
-        deps.err(saved.unchanged
-            ? `Environment manifest ${saved.manifest.name} is unchanged at version ${saved.manifest.version} on ${connection.label}.`
-            : `Saved environment manifest ${saved.manifest.name} version ${saved.manifest.version} on ${connection.label}.`);
-        for (const warning of saved.warnings)
-            deps.err(`  warning: ${warning.message}`);
-        printJson(deps, saved);
-    }
-    return blocked ? 1 : 0;
-}
-async function list(deps, args) {
-    const usage = "nylorun environments manifests list [--json]";
-    const flags = parseFlags(args, { booleans: ["--json"] }, usage);
-    positional(flags, 0, usage);
-    const { client, connection } = await runtimeClient(deps, flags);
-    const manifests = await runtimeCall(() => client.environments.manifests.list());
-    if (flags.booleans.has("--json")) {
-        printJson(deps, manifests);
-        return 0;
-    }
-    if (manifests.length === 0)
-        deps.out(`No environment manifests on ${connection.label}.`);
-    else
-        printTable(deps, [
-            ["NAME", "VERSION", "KIND", "ENVIRONMENTS", "SAVED BY"],
-            ...manifests.map((manifest) => [
-                manifest.name,
-                String(manifest.version),
-                manifest.manifest.kind ?? "virtual",
-                String(manifest.environments),
-                manifest.savedBy.actor,
-            ]),
-        ]);
-    return 0;
-}
-async function get(deps, args) {
-    const usage = "nylorun environments manifests get <name> [--version <n>]";
-    const flags = parseFlags(args, { values: ["--version"] }, usage);
-    const [name] = positional(flags, 1, usage);
-    const version = integerFlag(flags, "--version");
-    const { client } = await runtimeClient(deps, flags);
-    printJson(deps, await runtimeCall(() => client.environments.manifests.get(name, version === undefined ? {} : { version })));
-    return 0;
-}
-async function versions(deps, args) {
-    const usage = "nylorun environments manifests versions <name>";
-    const flags = parseFlags(args, {}, usage);
-    const [name] = positional(flags, 1, usage);
-    const { client } = await runtimeClient(deps, flags);
-    printJson(deps, await runtimeCall(() => client.environments.manifests.versions(name)));
-    return 0;
-}
-async function remove(deps, args) {
-    const usage = "nylorun environments manifests rm <name>";
-    const flags = parseFlags(args, {}, usage);
-    const [name] = positional(flags, 1, usage);
-    const { client, connection } = await runtimeClient(deps, flags);
-    const deleted = await runtimeCall(() => client.environments.manifests.delete(name));
-    if (!deleted.deleted) {
-        deps.err(`No environment manifest ${name} on ${connection.label}.`);
-        return 1;
-    }
-    deps.out(`Deleted environment manifest ${name}: every version.`);
-    return 0;
-}
-const COMMANDS = {
-    list,
-    ls: list,
-    get,
-    versions,
-    save,
-    rm: remove,
-    delete: remove,
-};
-/** `nylorun environments manifests <command> ...` */
-export async function manifestsCommand(deps, args, usage) {
-    const [sub, ...rest] = args;
-    const command = sub !== undefined && Object.hasOwn(COMMANDS, sub) ? COMMANDS[sub] : undefined;
-    if (!command)
-        throw usageError(`Usage: nylorun environments manifests <list|get|versions|save|rm> …\n\n${usage}`);
-    return command(deps, rest);
-}

package/dist/client/environments.d.ts

@@ -1,4 +0,0 @@
-import type { StackDeps } from "../stack/commands.js";
-export declare const environmentsUsage: string;
-/** `nylorun environments <command> ...` */
-export declare function environmentsCommand(deps: StackDeps, args: readonly string[]): Promise<number>;