nylorun 0.29.4-beta → 0.29.6-beta

package/CHANGELOG.md

@@ -1,5 +1,38 @@
 # nylorun
 
+## 0.29.6-beta
+
+### Patch Changes
+
+- 3a8a080: Pods on Agent Substrate (preview): a crash that an idle suspend found now makes the Agent `failing`, and its `attention` names the crash (`compute crashed: Crashed: …`). Before, the crash appeared only in the Agent's events, and the Agent showed as sleeping. The entry stays until a turn starts the pod again, which reverts the sandbox to its last suspend.
+- Pin runtime to the tested release.
+
+## 0.29.5-beta
+
+### Patch Changes
+
+- 71c6741: Pods on Agent Substrate (preview): a crashed sandbox is now recorded in the Agent's events. A running pod whose sandbox crashed is `failed` at once, rather than after the 5-minute ready deadline. A crash that an idle suspend finds is also recorded, where before the Agent showed only `agent.suspended`. In both cases `agent.failed` gives Substrate's crash message and says that what the Agent wrote since its last suspend is lost. The next turn reverts the sandbox to that suspend, as before. The sandboxes service now reports the crash's own message in place of the whole crash record.
+- fe118db: A message's `removeTools` turns a Runtime plugin's tool off by its own name too: `memory` now does what `nylorun__memory` does, so the name events and `check --explain` showed no longer leaves the tool on without a word (#589). `nylorun check --explain` lists a plugin's tools by the names the model reads (`nylorun__memory`, `nylorun__update_plan`), the ones `removeTools` and tool policy take, and its memory note says the index is pinned again at a turn after a write from elsewhere (#590, #591).
+- fe118db: The Tenant's sandbox settings round-trip, and `engine.images` comes back (#588).
+
+  - **Breaking (`@nylorun/runtime`, `@nylorun/core`, `@nylorun/admin`): `config` is the settings as stored.** `GET` and `PUT /v1/tenant/sandbox` (`admin.settings.sandbox`) answer `config` as the Tenant set it, with no defaults, in exactly the shape `PUT` takes (`limits.resources.memory: "8GiB"`), so `put(get().config)` changes nothing and saves no default as a setting. The settings in force, every default filled in and sizes in MiB (`memoryMiB`), are `effective`, which is what `config` was. Before, `PUT` refused what `GET` answered (`unrecognized_keys "memoryMiB"`). Read the settings in force from `effective` (`view.effective.limits.resources.memoryMiB`), and build a `PUT` body from `view.config`. `TenantSandboxViewSchema` has `config: TenantEnvironmentsConfigSchema` and `effective: EffectiveSandboxConfigSchema`.
+  - **`engine.images` is answered.** A `PUT` with `engine.images` was stored and used, but left out of its answer and of the next `GET`. Both now carry it, in `config` as set and in `effective` (`[]` when unset).
+  - `@nylorun/studio`: Edit compute settings puts the stored settings with only the fields it changed, so it no longer erases `engine.images` set through the API, keeps `placement`, and saves no default as a setting; clearing idle, stop grace or most Agents puts back the default. The Compute tab lists the engine images.
+  - `nylorun`: `nylorun tenant settings sandbox put` takes what `get` printed and puts back its `config`. `nylorun doctor sandbox` reads the limits in force from `effective`, or from `config` on an older Runtime.
+
+- Pin core to the tested release.
+- Pin agents to the tested release.
+- Pin admin to the tested release.
+- Pin runtime to the tested release.
+- Pin studio to the tested release.
+- Updated dependencies [fe118db]
+- Updated dependencies [fe118db]
+- Updated dependencies
+- Updated dependencies
+  - @nylorun/core@0.41.0-beta
+  - @nylorun/agents@0.36.4-beta
+  - @nylorun/admin@0.20.0-beta
+
 ## 0.29.4-beta
 
 ### Patch Changes

package/README.md

@@ -420,7 +420,7 @@ runs, its kind, state, sessions, owner and labels; `nylorun agents rm <id>`
 deletes one, with its files and vault (refused while a turn runs on it). Neither
 starts a stopped Tenant (exit 3). The Tenant's limits for Agents
 (`limits.environments`, `idle`, resources, network) are `PUT /v1/tenant/sandbox`
-on the Management API.
+on the Management API (`nylorun tenant settings sandbox`).
 
 ### Pods on a cluster (preview)
 
@@ -843,8 +843,16 @@ nylorun tenant tool-policy get > tool-policy.json   # edit it, then
 nylorun tenant tool-policy put tool-policy.json
 ```
 
-`settings sandbox get` prints the effective settings and what the Host offers;
-its `put` takes the settings alone (`limits`, `lifecycle`, `placement`).
+`settings sandbox get` prints what the Host offers, the Tenant's settings as
+stored (`config`: only what it set, the body `put` takes) and the settings in
+force (`effective`: every default filled in, sizes in MiB). Its `put` takes the
+settings alone (`limits`, `lifecycle`, `engine`, `placement`), or what `get`
+printed, of which it puts back `config`, so no default becomes a setting:
+
+```sh
+nylorun tenant settings sandbox get > sandbox.json   # edit its config, then
+nylorun tenant settings sandbox put sandbox.json
+```
 
 `settings limits` is the Tenant's Runtime limits: the sizes, counts and
 deadlines the Runtime holds what crosses it to, such as `recordEntryBytes`,

package/dist/client/doctor.d.ts

@@ -1,4 +1,11 @@
 import type { StackDeps } from "../stack/commands.js";
+type EffectiveLimits = {
+    limits?: {
+        network?: readonly string[];
+        idle?: string;
+        environments?: number;
+    };
+};
 export type SandboxReport = {
     preference: string;
     backend: string | null;
@@ -12,14 +19,12 @@ export type SandboxReport = {
         version?: string;
     }[];
     defaultImage?: string;
-    /** The Tenant's settings for Agents' environments in force (`environments.config`). */
-    config?: {
-        limits?: {
-            network?: readonly string[];
-            idle?: string;
-            environments?: number;
-        };
-    };
+    /**
+     * The Tenant's settings for Agents' environments in force (`environments.config` with the
+     * defaults). A Runtime before #588 sends them as `config`, which now holds the stored settings.
+     */
+    effective?: EffectiveLimits;
+    config?: EffectiveLimits;
     /** The Tenant's cluster for pod Agents (`nylorun local sandbox enable`), when it has one. */
     cluster?: {
         namespace: string;
@@ -38,3 +43,4 @@ export declare function doctorSandbox(deps: StackDeps, options: {
     json: boolean;
     tenant?: string;
 }): Promise<void>;
+export {};

package/dist/client/doctor.js

@@ -47,7 +47,7 @@ export async function doctorSandbox(deps, options) {
         "sessions",
         "run on an Agent, with the sandbox its manifest's runtime.kind gives (createSession({ agent }))",
     ]);
-    const limits = report.config?.limits;
+    const limits = (report.effective ?? report.config)?.limits;
     if (limits)
         rows.push([
             "limits",

package/dist/client/io.d.ts

@@ -18,10 +18,11 @@ export interface BodySchema<T> {
 export declare function readText(deps: StackDeps, source: string): Promise<string>;
 /**
  * The JSON body in file `source`, or on standard input for `-`, as `schema` parses it. Fields
- * named in `readOnly` (a view's, so a `get` can be edited and put back) are dropped first. A
- * body that does not parse is a usage error, before any request.
+ * named in `readOnly` (a view's, so a `get` can be edited and put back) are dropped first. With
+ * `bodyField`, a view that holds the body in that field (`get`'s whole output) is read as that
+ * field. A body that does not parse is a usage error, before any request.
  */
-export declare function readBody<T>(deps: StackDeps, source: string, schema: BodySchema<T>, readOnly?: readonly string[]): Promise<T>;
+export declare function readBody<T>(deps: StackDeps, source: string, schema: BodySchema<T>, readOnly?: readonly string[], bodyField?: string): Promise<T>;
 /**
  * A secret piped in on standard input (its trailing newline dropped), so it is never in the
  * arguments, the shell's history or the process list. `what` names it in the refusals.

package/dist/client/io.js

@@ -26,10 +26,11 @@ export async function readText(deps, source) {
 }
 /**
  * The JSON body in file `source`, or on standard input for `-`, as `schema` parses it. Fields
- * named in `readOnly` (a view's, so a `get` can be edited and put back) are dropped first. A
- * body that does not parse is a usage error, before any request.
+ * named in `readOnly` (a view's, so a `get` can be edited and put back) are dropped first. With
+ * `bodyField`, a view that holds the body in that field (`get`'s whole output) is read as that
+ * field. A body that does not parse is a usage error, before any request.
  */
-export async function readBody(deps, source, schema, readOnly = []) {
+export async function readBody(deps, source, schema, readOnly = [], bodyField) {
     let text;
     if (source === "-") {
         text = await readStdin(deps, "Pipe the JSON body in on standard input, or name a file.");
@@ -50,6 +51,9 @@ export async function readBody(deps, source, schema, readOnly = []) {
     catch (error) {
         throw usageError(`${where} is not JSON: ${error.message}.`);
     }
+    const isObject = (item) => Boolean(item) && typeof item === "object" && !Array.isArray(item);
+    if (bodyField && isObject(value) && isObject(value[bodyField]))
+        value = value[bodyField];
     if (value && typeof value === "object" && !Array.isArray(value))
         value = Object.fromEntries(Object.entries(value).filter(([key]) => !readOnly.includes(key)));
     const parsed = schema.safeParse(value);

package/dist/client/settings.d.ts

@@ -1,5 +1,5 @@
 import { type StackDeps } from "../stack/commands.js";
-export declare const settingsUsage = "  budgets [get | put <file|->] [--tenant <name>]\n                                      the model spend caps (scope tenant, manifest with id an\n                                      agent manifest's name, or turn); put replaces them all\n  tool-policy [get | put <file|->] [--tenant <name>]\n                                      the Tool Gate's rules; put replaces them all\n  settings sandbox [get | put <file|->] [--tenant <name>]\n                                      the Agents' environments: limits, stop grace, placement\n  settings artifacts [get | put <file|->] [--tenant <name>]\n                                      the artifact store's limits\n  settings skills [get | put <file|->] [--tenant <name>]\n                                      the most bytes one skill may hold\n  settings limits [get | put <file|->] [--tenant <name>]\n                                      the Runtime limits: sizes, counts and deadlines (record\n                                      entries, request bodies, Agents, model calls, tools)\n  coverage --agent <id> [--tenant <name>] [--json]\n                                      which secret of Agent <id>'s vault each MCP server and\n                                      HTTP tool of its manifest would get";
+export declare const settingsUsage = "  budgets [get | put <file|->] [--tenant <name>]\n                                      the model spend caps (scope tenant, manifest with id an\n                                      agent manifest's name, or turn); put replaces them all\n  tool-policy [get | put <file|->] [--tenant <name>]\n                                      the Tool Gate's rules; put replaces them all\n  settings sandbox [get | put <file|->] [--tenant <name>]\n                                      the Agents' environments: limits, stop grace, engine\n                                      images, placement; put takes get's output back\n  settings artifacts [get | put <file|->] [--tenant <name>]\n                                      the artifact store's limits\n  settings skills [get | put <file|->] [--tenant <name>]\n                                      the most bytes one skill may hold\n  settings limits [get | put <file|->] [--tenant <name>]\n                                      the Runtime limits: sizes, counts and deadlines (record\n                                      entries, request bodies, Agents, model calls, tools)\n  coverage --agent <id> [--tenant <name>] [--json]\n                                      which secret of Agent <id>'s vault each MCP server and\n                                      HTTP tool of its manifest would get";
 export declare const budgetsCommand: (deps: StackDeps, args: readonly string[]) => Promise<number>;
 export declare const toolPolicyCommand: (deps: StackDeps, args: readonly string[]) => Promise<number>;
 /** `nylorun tenant settings sandbox | artifacts | skills | limits ...` */

package/dist/client/settings.js

@@ -9,7 +9,8 @@ export const settingsUsage = `  budgets [get | put <file|->] [--tenant <name>]
   tool-policy [get | put <file|->] [--tenant <name>]
                                       the Tool Gate's rules; put replaces them all
   settings sandbox [get | put <file|->] [--tenant <name>]
-                                      the Agents' environments: limits, stop grace, placement
+                                      the Agents' environments: limits, stop grace, engine
+                                      images, placement; put takes get's output back
   settings artifacts [get | put <file|->] [--tenant <name>]
                                       the artifact store's limits
   settings skills [get | put <file|->] [--tenant <name>]
@@ -38,6 +39,9 @@ const toolPolicy = {
 const sandbox = {
     name: "settings sandbox",
     schema: PutTenantEnvironmentsRequestSchema,
+    // `get` prints the backend report, the stored settings (`config`) and those in force
+    // (`effective`); `put` of that output puts its `config` back, so no default becomes an override.
+    bodyField: "config",
     get: (admin) => admin.settings.sandbox.get(),
     put: (admin, body) => admin.settings.sandbox.put(body),
 };
@@ -67,7 +71,9 @@ async function documentCommand(deps, document, args) {
     const [verb = "get", ...operands] = flags.rest;
     if (!((verb === "get" && !operands.length) || (verb === "put" && operands.length === 1)))
         throw usageError(`Usage: ${usage}`);
-    const body = verb === "put" ? await readBody(deps, operands[0], document.schema, document.readOnly) : undefined;
+    const body = verb === "put"
+        ? await readBody(deps, operands[0], document.schema, document.readOnly, document.bodyField)
+        : undefined;
     const admin = managementClient(deps, await connect(deps, "management", flags.values.get("--tenant")));
     printJson(deps, body === undefined ? await document.get(admin) : await document.put(admin, body));
     return 0;

package/dist/client/tenant.d.ts

@@ -6,7 +6,7 @@
 import type { ManagementClient } from "@nylorun/admin";
 import { type StackDeps } from "../stack/commands.js";
 import { type Connection } from "./target.js";
-export declare const tenantUsage = "nylorun tenant <command>\n\nThe Management API of the installation's one Tenant, with a management key: the local Tenant\n--tenant names (else the linked project's, else the default one), or the installation that\nNYLORUN_RUNTIME_URL and NYLORUN_MANAGEMENT_KEY name.\n\n  reset [--sessions|--agents|--all] [--yes] [--tenant <name>]\n                                      clear the Tenant's sessions, its Agents (their vaults,\n                                      disks and sessions) or all its data (the Project link and\n                                      keys stay)\n  keys put <id> [--management] [--tenant <name>]\n                                      create the Tenant's application key <id> (--management: a\n                                      management key, on the Runtime's machine only), or rotate it\n                                      (the old key stops working); prints the key once\n  keys list [--tenant <name>] [--json]\n                                      the Tenant's keys: id, role, when issued (never the keys)\n  keys rm <id> [--tenant <name>]      delete key <id>: it stops working at once\n  signing-keys list [--tenant <name>]\n                                      the Tenant's token signing keys\n  signing-keys rotate [--force] [--tenant <name>]\n                                      rotate; --force ends outstanding links and run tokens\n  signing-keys revoke <kid> [--tenant <name>]\n                                      revoke a previous or standby key\n  models catalog [--tenant <name>] [--json]\n                                      every provider and model the Runtime knows\n  models providers [--tenant <name>] [--json]\n                                      the providers with a credential, and the one in use\n  models get [--tenant <name>] [--json]\n                                      the Tenant's model\n  models set [--tenant <name>]        sign in to a model provider and set the Tenant's model\n  models set --provider <id> --model <id> [--base-url <url>] [--tenant <name>]\n                                      the same with an API key piped in on stdin (CI)\n  models set --provider google-vertex --model <id> --host-identity --project <id> --location <location> [--tenant <name>]\n                                      the same with the Host's Google identity, no key: on a Host\n                                      whose operator sets NYLORUN_MODEL_HOST_IDENTITY\n  models select <provider> [--model <id>] [--tenant <name>]\n                                      use a provider that has a credential (default: its model)\n  usage [--scope tenant|manifest|turn] [--id <id>] [--period day|month|total] [--tenant <name>]\n                                      what the model calls used and cost (JSON); --scope\n                                      manifest: the Agents made from agent manifest <id>\n  calls [--after <cursor>] [--limit <n>] [--tenant <name>]\n                                      every recorded model call, one JSON line each, until\n                                      caught up; prints the cursor to resume from on stderr\n  budgets [get | put <file|->] [--tenant <name>]\n                                      the model spend caps (scope tenant, manifest with id an\n                                      agent manifest's name, or turn); put replaces them all\n  tool-policy [get | put <file|->] [--tenant <name>]\n                                      the Tool Gate's rules; put replaces them all\n  settings sandbox [get | put <file|->] [--tenant <name>]\n                                      the Agents' environments: limits, stop grace, placement\n  settings artifacts [get | put <file|->] [--tenant <name>]\n                                      the artifact store's limits\n  settings skills [get | put <file|->] [--tenant <name>]\n                                      the most bytes one skill may hold\n  settings limits [get | put <file|->] [--tenant <name>]\n                                      the Runtime limits: sizes, counts and deadlines (record\n                                      entries, request bodies, Agents, model calls, tools)\n  coverage --agent <id> [--tenant <name>] [--json]\n                                      which secret of Agent <id>'s vault each MCP server and\n                                      HTTP tool of its manifest would get\n  mcp inspect <url> [--server <name>] [--agent <id>] [--sse] [--tenant <name>] [--json]\n                                      list a remote MCP server's tools, with Agent <id>'s\n                                      credential for <url> (none without it): model names, schema\n                                      sizes, renames, or that it needs a person's sign-in (the\n                                      Runtime calls no tool)\n\nA put reads a JSON body from a file, or from stdin for -, and replaces the whole document; what\nbudgets, tool-policy, settings artifacts, settings skills and settings limits get print, put takes back. An API key is read from\nstdin, never from the arguments.";
+export declare const tenantUsage = "nylorun tenant <command>\n\nThe Management API of the installation's one Tenant, with a management key: the local Tenant\n--tenant names (else the linked project's, else the default one), or the installation that\nNYLORUN_RUNTIME_URL and NYLORUN_MANAGEMENT_KEY name.\n\n  reset [--sessions|--agents|--all] [--yes] [--tenant <name>]\n                                      clear the Tenant's sessions, its Agents (their vaults,\n                                      disks and sessions) or all its data (the Project link and\n                                      keys stay)\n  keys put <id> [--management] [--tenant <name>]\n                                      create the Tenant's application key <id> (--management: a\n                                      management key, on the Runtime's machine only), or rotate it\n                                      (the old key stops working); prints the key once\n  keys list [--tenant <name>] [--json]\n                                      the Tenant's keys: id, role, when issued (never the keys)\n  keys rm <id> [--tenant <name>]      delete key <id>: it stops working at once\n  signing-keys list [--tenant <name>]\n                                      the Tenant's token signing keys\n  signing-keys rotate [--force] [--tenant <name>]\n                                      rotate; --force ends outstanding links and run tokens\n  signing-keys revoke <kid> [--tenant <name>]\n                                      revoke a previous or standby key\n  models catalog [--tenant <name>] [--json]\n                                      every provider and model the Runtime knows\n  models providers [--tenant <name>] [--json]\n                                      the providers with a credential, and the one in use\n  models get [--tenant <name>] [--json]\n                                      the Tenant's model\n  models set [--tenant <name>]        sign in to a model provider and set the Tenant's model\n  models set --provider <id> --model <id> [--base-url <url>] [--tenant <name>]\n                                      the same with an API key piped in on stdin (CI)\n  models set --provider google-vertex --model <id> --host-identity --project <id> --location <location> [--tenant <name>]\n                                      the same with the Host's Google identity, no key: on a Host\n                                      whose operator sets NYLORUN_MODEL_HOST_IDENTITY\n  models select <provider> [--model <id>] [--tenant <name>]\n                                      use a provider that has a credential (default: its model)\n  usage [--scope tenant|manifest|turn] [--id <id>] [--period day|month|total] [--tenant <name>]\n                                      what the model calls used and cost (JSON); --scope\n                                      manifest: the Agents made from agent manifest <id>\n  calls [--after <cursor>] [--limit <n>] [--tenant <name>]\n                                      every recorded model call, one JSON line each, until\n                                      caught up; prints the cursor to resume from on stderr\n  budgets [get | put <file|->] [--tenant <name>]\n                                      the model spend caps (scope tenant, manifest with id an\n                                      agent manifest's name, or turn); put replaces them all\n  tool-policy [get | put <file|->] [--tenant <name>]\n                                      the Tool Gate's rules; put replaces them all\n  settings sandbox [get | put <file|->] [--tenant <name>]\n                                      the Agents' environments: limits, stop grace, engine\n                                      images, placement; put takes get's output back\n  settings artifacts [get | put <file|->] [--tenant <name>]\n                                      the artifact store's limits\n  settings skills [get | put <file|->] [--tenant <name>]\n                                      the most bytes one skill may hold\n  settings limits [get | put <file|->] [--tenant <name>]\n                                      the Runtime limits: sizes, counts and deadlines (record\n                                      entries, request bodies, Agents, model calls, tools)\n  coverage --agent <id> [--tenant <name>] [--json]\n                                      which secret of Agent <id>'s vault each MCP server and\n                                      HTTP tool of its manifest would get\n  mcp inspect <url> [--server <name>] [--agent <id>] [--sse] [--tenant <name>] [--json]\n                                      list a remote MCP server's tools, with Agent <id>'s\n                                      credential for <url> (none without it): model names, schema\n                                      sizes, renames, or that it needs a person's sign-in (the\n                                      Runtime calls no tool)\n\nA put reads a JSON body from a file, or from stdin for -, and replaces the whole document; what\nbudgets, tool-policy, settings artifacts, settings skills and settings limits get print, put takes back. An API key is read from\nstdin, never from the arguments.";
 /** The Management API client of the installation `--tenant` (or the environment) names. */
 export declare function tenantClient(deps: StackDeps, tenant: string | undefined): Promise<{
     connection: Connection;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nylorun",
-  "version": "0.29.4-beta",
+  "version": "0.29.6-beta",
   "type": "module",
   "license": "Apache-2.0",
   "description": "Set up and run local Nylorun Tenants (Runtime and Studio) with Docker Compose, and act on a Tenant through its Runtime and Management APIs",
@@ -30,9 +30,9 @@
     "prepack": "npm run build"
   },
   "dependencies": {
-    "@nylorun/admin": "0.19.16-beta",
-    "@nylorun/agents": "0.36.3-beta",
-    "@nylorun/core": "0.40.0-beta"
+    "@nylorun/admin": "0.20.0-beta",
+    "@nylorun/agents": "0.36.4-beta",
+    "@nylorun/core": "0.41.0-beta"
   },
   "devDependencies": {
     "@earendil-works/pi-ai": "1.3.0",
@@ -46,7 +46,7 @@
     "nylo": "dist/nylo.js"
   },
   "nylorun": {
-    "runtime": "0.46.2-beta",
-    "studio": "0.35.9-beta"
+    "runtime": "0.47.1-beta",
+    "studio": "0.35.10-beta"
   }
 }