nightshift-sdk 0.4.2__tar.gz → 0.4.3__tar.gz

{nightshift_sdk-0.4.2 → nightshift_sdk-0.4.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: nightshift-sdk
-Version: 0.4.2
+Version: 0.4.3
 Summary: Nightshift — autonomous agent orchestrator with Firecracker VMs
 Project-URL: Homepage, https://nightshift.sh
 Project-URL: Documentation, https://docs.nightshift.sh
@@ -56,7 +56,7 @@ Description-Content-Type: text/markdown
 
 # Nightshift
 
-Nightshift runs AI agents in isolated [Firecracker](https://firecracker-microvm.github.io/) microVMs on bare-metal infrastructure. 
+Nightshift runs AI agents in isolated [Firecracker](https://firecracker-microvm.github.io/) microVMs on bare-metal infrastructure.
 Each agent gets its own microVM with a dedicated filesystem, network, and resource limits; so agents can execute code, edit files, and make network calls without affecting the host or each other.
 
 ## Installation

{nightshift_sdk-0.4.2 → nightshift_sdk-0.4.3}/README.md

@@ -24,7 +24,7 @@
 
 # Nightshift
 
-Nightshift runs AI agents in isolated [Firecracker](https://firecracker-microvm.github.io/) microVMs on bare-metal infrastructure. 
+Nightshift runs AI agents in isolated [Firecracker](https://firecracker-microvm.github.io/) microVMs on bare-metal infrastructure.
 Each agent gets its own microVM with a dedicated filesystem, network, and resource limits; so agents can execute code, edit files, and make network calls without affecting the host or each other.
 
 ## Installation

{nightshift_sdk-0.4.2 → nightshift_sdk-0.4.3}/docs/administration/api-keys.mdx

@@ -15,7 +15,7 @@ There are two kinds of keys:
 
 ## Bootstrap key
 
-The bootstrap key is set via the `NIGHTSHIFT_API_KEY` environment variable. When the server starts, it hashes the value and stores it in the database. This is the only key that bypasses the API. 
+The bootstrap key is set via the `NIGHTSHIFT_API_KEY` environment variable. When the server starts, it hashes the value and stores it in the database. This is the only key that bypasses the API.
 
 The operator generates the key themselves:
 
@@ -90,7 +90,7 @@ Use the hash prefix from `api-key list`. Provide more characters if the prefix i
 
 ## Multi-tenant isolation
 
-Agents and runs are scoped by tenant ID. One tenant cannot see or run another's agents. 
+Agents and runs are scoped by tenant ID. One tenant cannot see or run another's agents.
 
 ```bash
 nightshift api-key generate --tenant acme-corp --label "acme production"

{nightshift_sdk-0.4.2 → nightshift_sdk-0.4.3}/docs/administration/backups.mdx

@@ -28,7 +28,7 @@ Nightshift uses SQLite. The database is a single file at `/opt/nightshift/nights
     ```
 
     <Warning>
-    Do NOT `cp` the file while the server is running,SQLite may have uncommitted WAL data. Always use `sqlite3 .backup` or stop the server first.
+    Do NOT `cp` the file while the server is running, SQLite may have uncommitted WAL data. Always use `sqlite3 .backup` or stop the server first.
     </Warning>
   </Tab>
   <Tab title="Automated (cron)">

{nightshift_sdk-0.4.2 → nightshift_sdk-0.4.3}/docs/deployment/cost-management.mdx

@@ -25,7 +25,7 @@ bash cron.sh
     Creates `nightshift-lambda-role` with EC2 start/stop permissions scoped to instances tagged `nightshift-dev`.
   </Step>
   <Step title="Lambda functions">
-    Creates `nightshift-start` and `nightshift-stop` 
+    Creates `nightshift-start` and `nightshift-stop`
   </Step>
   <Step title="Scheduler IAM role">
     Creates `nightshift-scheduler-role` with `lambda:InvokeFunction` permission.

{nightshift_sdk-0.4.2 → nightshift_sdk-0.4.3}/docs/introduction.mdx

@@ -6,13 +6,13 @@ description: "Platform for scurely running agents in isolated sandboxes."
 
 <img src="/logo/kokapo.gif" alt="Nightshift mascot" width="200" style={{ margin: "0 auto", display: "block" }} />
 
-Nightshift runs Agents in microVMs using [Firecracker](https://firecracker-microvm.github.io/) for [hardware level isolation](https://linux-kvm.org/page/Main_Page). 
+Nightshift runs Agents in microVMs using [Firecracker](https://firecracker-microvm.github.io/) for [hardware level isolation](https://linux-kvm.org/page/Main_Page).
 Each agent gets its own isolated VM with dedicated vCPUs, memory, filesystem, and network and streams results back via Server-Sent Events.
 
 ## What is Nightshift?
 
-Nightshift is an open source platform for deploying and running Agents in secure, efficient, isolated environments. 
-You write an agent as a Python async generator, deploy it with a single CLI command, and run it on demand. 
+Nightshift is an open source platform for deploying and running Agents in secure, efficient, isolated environments.
+You write an agent as a Python async generator, deploy it with a single CLI command, and run it on demand.
 Each run spins up a dedicated Firecracker microVM with its own resources and network, executes your agent, and streams events back in real time.
 
 A hosted platform is available at `api.nightshift.sh` or you can self-host on any linux machine with KVM support.

{nightshift_sdk-0.4.2 → nightshift_sdk-0.4.3}/docs/sdk/quickstart.mdx

@@ -46,7 +46,7 @@ async def my_agent(prompt: str):
 
 - The function must be `async def` and use `yield` (async generator)
 - `prompt: str` is the only parameter it's what the user passes to your function at runtime
-- Each `yield` sends an SSE event back to the caller 
+- Each `yield` sends an SSE event back to the caller
 - Yielded values can be dicts, dataclasses, or Pydantic models; they're auto-serialized with a `type` field and `timestamp` added if missing
 - Inside the VM, the workspace is always at `/workspace`
     <Note>
@@ -58,7 +58,7 @@ async def my_agent(prompt: str):
     ```bash
     nightshift login --url https://api.nightshift.sh --api-key ns_<key>
     ```
-    Saves credentials to `~/.nightshift/config.toml`. 
+    Saves credentials to `~/.nightshift/config.toml`.
 
     <Note>
     If you're running a self-hosted platform, replace `api.nightshift.sh` with your server's hostname or `http://<IP>:3000`.
@@ -78,7 +78,7 @@ async def my_agent(prompt: str):
     ```
 
     This will show the agents you have deployed in Nightshift.
-    
+
   </Step>
   <Step title="Run an agent">
     ```bash

{nightshift_sdk-0.4.2 → nightshift_sdk-0.4.3}/examples/basic_agent.py

@@ -20,6 +20,7 @@ app = NightshiftApp()
         vcpu_count=2,
         mem_size_mib=2048,
         # max_concurrent_vms=2,
+        forward_secrets=["ANTHROPIC_API_KEY"],
         stateful=True,
     )
 )

{nightshift_sdk-0.4.2 → nightshift_sdk-0.4.3}/infra/deploy.sh

@@ -46,6 +46,10 @@ while [[ $# -gt 0 ]]; do
     esac
 done
 
+# Strip protocol prefix if provided (e.g. https://example.com -> example.com)
+HOSTNAME="${HOSTNAME#https://}"
+HOSTNAME="${HOSTNAME#http://}"
+
 if [ -z "$HOSTNAME" ]; then
     echo "Error: --hostname is required"
     echo "Usage: $0 --hostname <FQDN> --api-key <key> [--region <region>] [--version <tag>] [--port <port>]"

{nightshift_sdk-0.4.2 → nightshift_sdk-0.4.3}/infra/dev/production.sh

@@ -33,6 +33,10 @@ while [[ $# -gt 0 ]]; do
     esac
 done
 
+# Strip protocol prefix if provided (e.g. https://example.com -> example.com)
+HOSTNAME="${HOSTNAME#https://}"
+HOSTNAME="${HOSTNAME#http://}"
+
 if [ -z "$HOSTNAME" ]; then
     echo "Error: --hostname is required"
     echo "Usage: $0 --hostname <FQDN> --api-key <key> [--port <port>]"

{nightshift_sdk-0.4.2 → nightshift_sdk-0.4.3}/infra/dev/setup.sh

@@ -51,6 +51,10 @@ while [[ $# -gt 0 ]]; do
     esac
 done
 
+# Strip protocol prefix if provided (e.g. https://example.com -> example.com)
+PROD_HOSTNAME="${PROD_HOSTNAME#https://}"
+PROD_HOSTNAME="${PROD_HOSTNAME#http://}"
+
 if [ "$PRODUCTION" = true ] && [ -z "$PROD_HOSTNAME" ]; then
     echo "Error: --production requires --hostname"
     echo "Usage: $0 --production --hostname <FQDN> [--port <port>]"

{nightshift_sdk-0.4.2 → nightshift_sdk-0.4.3}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "nightshift-sdk"
-version = "0.4.2"
+version = "0.4.3"
 description = "Nightshift — autonomous agent orchestrator with Firecracker VMs"
 requires-python = ">=3.12"
 license = {text = "Apache-2.0"}
@@ -57,6 +57,7 @@ packages = ["src/nightshift"]
 [tool.pytest.ini_options]
 asyncio_mode = "auto"
 testpaths = ["tests"]
+pythonpath = ["src"]
 
 [tool.ruff]
 target-version = "py312"

nightshift_sdk-0.4.3/src/nightshift/cli/commands/agents.py

@@ -0,0 +1,101 @@
+"""nightshift agents — list and manage deployed agents."""
+
+from __future__ import annotations
+
+import click
+import httpx
+
+from nightshift.cli.config import get_auth_headers, get_url
+
+
+@click.group(invoke_without_command=True)
+@click.option("-v", "--verbose", is_flag=True, help="Show invoke/workspace URLs.")
+@click.pass_context
+def agents(ctx, verbose: bool) -> None:
+    """List deployed agents. Use 'agents rm' to delete one."""
+    if ctx.invoked_subcommand is not None:
+        return
+
+    url = get_url()
+    headers = get_auth_headers()
+
+    try:
+        r = httpx.get(f"{url}/api/agents", headers=headers, timeout=30)
+        r.raise_for_status()
+    except httpx.HTTPStatusError as e:
+        raise click.ClickException(f"{e.response.status_code}: {e.response.text}")
+    except httpx.HTTPError as e:
+        raise click.ClickException(str(e))
+
+    agent_list = r.json()
+    if not agent_list:
+        click.echo("No agents deployed.")
+        return
+
+    if verbose:
+        for i, a in enumerate(agent_list):
+            if i > 0:
+                click.echo()
+            click.echo(a["name"])
+            click.echo(f"  Source:    {a['source_filename']}")
+            click.echo(f"  Invoke:    {a['invoke_url']}")
+            if a.get("workspace_url"):
+                click.echo(f"  Workspace: {a['workspace_url']}")
+            click.echo(f"  Updated:   {a['updated_at']}")
+    else:
+        click.echo(f"{'NAME':<20} {'SOURCE':<25} {'UPDATED':<25}")
+        click.echo("-" * 70)
+        for a in agent_list:
+            click.echo(f"{a['name']:<20} {a['source_filename']:<25} {a['updated_at']:<25}")
+
+
+@agents.command()
+@click.argument("name")
+def info(name: str) -> None:
+    """Show details for a single agent."""
+    url = get_url()
+    headers = get_auth_headers()
+
+    try:
+        r = httpx.get(f"{url}/api/agents/{name}", headers=headers, timeout=30)
+        r.raise_for_status()
+    except httpx.HTTPStatusError as e:
+        raise click.ClickException(f"{e.response.status_code}: {e.response.text}")
+    except httpx.HTTPError as e:
+        raise click.ClickException(str(e))
+
+    a = r.json()
+    click.echo(a["name"])
+    click.echo(f"  ID:        {a['id']}")
+    click.echo(f"  Source:    {a['source_filename']}")
+    click.echo(f"  Stateful:  {a['stateful']}")
+    click.echo(f"  Invoke:    {a['invoke_url']}")
+    if a.get("workspace_url"):
+        click.echo(f"  Workspace: {a['workspace_url']}")
+
+    cfg = a.get("config", {})
+    if cfg:
+        click.echo(f"  vCPU:      {cfg.get('vcpu_count')}")
+        click.echo(f"  Memory:    {cfg.get('mem_size_mib')} MiB")
+        click.echo(f"  Timeout:   {cfg.get('timeout_seconds')}s")
+
+    click.echo(f"  Created:   {a['created_at']}")
+    click.echo(f"  Updated:   {a['updated_at']}")
+
+
+@agents.command()
+@click.argument("name")
+def rm(name: str) -> None:
+    """Delete a deployed agent."""
+    url = get_url()
+    headers = get_auth_headers()
+
+    try:
+        r = httpx.delete(f"{url}/api/agents/{name}", headers=headers, timeout=30)
+        r.raise_for_status()
+    except httpx.HTTPStatusError as e:
+        raise click.ClickException(f"{e.response.status_code}: {e.response.text}")
+    except httpx.HTTPError as e:
+        raise click.ClickException(str(e))
+
+    click.echo(f"Deleted agent: {name}")

{nightshift_sdk-0.4.2 → nightshift_sdk-0.4.3}/src/nightshift/cli/commands/deploy.py

@@ -96,6 +96,15 @@ def _discover_agents(file_path: str) -> dict:
             raise click.ClickException(
                 f"Agent '{name}': workspace directory does not exist: {workspace}"
             )
+        # Resolve forward_secrets from the deployer's local environment
+        secrets: dict[str, str] = {}
+        for key in agent.config.forward_secrets:
+            val = os.environ.get(key)
+            if val is None:
+                click.echo(f"  Warning: forward_secrets key '{key}' not found in environment", err=True)
+            else:
+                secrets[key] = val
+
         agents[name] = {
             "function_name": agent.fn.__name__,
             "workspace": workspace,
@@ -108,6 +117,7 @@ def _discover_agents(file_path: str) -> dict:
                 "env": agent.config.env,
                 "max_concurrent_vms": agent.config.max_concurrent_vms,
                 "stateful": agent.config.stateful,
+                "secrets": secrets,
             },
         }
     return agents

{nightshift_sdk-0.4.2 → nightshift_sdk-0.4.3}/src/nightshift/events.py

@@ -11,7 +11,7 @@ import json
 import logging
 import time
 from dataclasses import asdict, dataclass, field
-from typing import AsyncIterator, Literal, Union
+from typing import AsyncIterator, Awaitable, Callable, Literal, Union
 
 logger = logging.getLogger(__name__)
 
@@ -62,14 +62,17 @@ class EventBuffer:
     (replay + live-tail) via an asyncio.Condition.
     """
 
-    def __init__(self) -> None:
+    def __init__(self, persist: Callable[[str, str, dict], Awaitable[None]] | None = None) -> None:
         self._runs: dict[str, list[tuple[str, dict]]] = {}
         self._cond: asyncio.Condition = asyncio.Condition()
         self._done: set[str] = set()
+        self._persist = persist
 
     async def append(self, run_id: str, event_type: str, payload: dict) -> None:
         """Append an event to a run's buffer and notify waiters."""
         self._runs.setdefault(run_id, []).append((event_type, payload))
+        if self._persist is not None:
+            await self._persist(run_id, event_type, payload)
         async with self._cond:
             self._cond.notify_all()
 
@@ -104,6 +107,10 @@ class EventBuffer:
         self._runs.pop(run_id, None)
         self._done.discard(run_id)
 
+    def has_run(self, run_id: str) -> bool:
+        """Check whether a run is currently held in the in-memory buffer."""
+        return run_id in self._runs
+
     # ── Convenience methods (used by task.py, vm/manager.py, agent/entry.py) ──
 
     async def publish(self, run_id: str, event: NightshiftEvent) -> None:
@@ -123,7 +130,7 @@ class EventBuffer:
         async for event_type, payload in self.stream(run_id):
             yield {
                 "event": event_type,
-                "data": json.dumps({"type": event_type, **payload}),
+                "data": json.dumps({"type": event_type, **payload}, default=str),
             }
             if event_type in TERMINAL_EVENTS:
                 return

nightshift_sdk-0.4.3/src/nightshift/protocol/events.py

@@ -0,0 +1,56 @@
+"""Serialize agent messages to JSON dicts for SSE transport."""
+
+from __future__ import annotations
+
+import json
+import time
+from dataclasses import asdict, is_dataclass
+from typing import Any
+
+
+def _make_json_safe(obj: Any) -> Any:
+    """Recursively convert non-JSON-serializable objects in a data structure."""
+    if obj is None or isinstance(obj, (str, int, float, bool)):
+        return obj
+    if isinstance(obj, dict):
+        return {k: _make_json_safe(v) for k, v in obj.items()}
+    if isinstance(obj, (list, tuple)):
+        return [_make_json_safe(item) for item in obj]
+    if hasattr(obj, "model_dump_json"):
+        return json.loads(obj.model_dump_json())
+    if hasattr(obj, "model_dump"):
+        return obj.model_dump(mode="json")
+    if is_dataclass(obj) and not isinstance(obj, type):
+        return _make_json_safe(asdict(obj))
+    if hasattr(obj, "__dict__"):
+        return _make_json_safe(vars(obj))
+    return str(obj)
+
+
+def serialize_message(message: Any) -> dict:
+    """Convert an agent message to a JSON-serializable dict.
+
+    Handles:
+    - dicts (passed through with defaults)
+    - dataclasses (converted via asdict, with nested pydantic models resolved)
+    - pydantic models (converted via model_dump_json for full JSON safety)
+    - objects with a __dict__ attribute
+    """
+    if isinstance(message, dict):
+        data = dict(message)
+    elif is_dataclass(message) and not isinstance(message, type):
+        data = _make_json_safe(asdict(message))
+    elif hasattr(message, "model_dump_json"):
+        data = json.loads(message.model_dump_json())
+    elif hasattr(message, "__dict__"):
+        data = _make_json_safe(vars(message))
+    else:
+        data = {"data": str(message)}
+
+    if "type" not in data:
+        data["type"] = type(message).__name__
+
+    if "timestamp" not in data:
+        data["timestamp"] = time.time()
+
+    return data

{nightshift_sdk-0.4.2 → nightshift_sdk-0.4.3}/src/nightshift/registry.py

@@ -3,6 +3,7 @@
 from __future__ import annotations
 
 import json
+import time
 import uuid
 from dataclasses import dataclass
 from datetime import datetime, timezone
@@ -86,6 +87,15 @@ class AgentRegistry:
                 label TEXT DEFAULT '',
                 created_at TEXT NOT NULL
             );
+
+            CREATE TABLE IF NOT EXISTS run_events (
+                id INTEGER PRIMARY KEY AUTOINCREMENT,
+                run_id TEXT NOT NULL,
+                event_type TEXT NOT NULL,
+                payload_json TEXT NOT NULL,
+                created_at REAL NOT NULL
+            );
+            CREATE INDEX IF NOT EXISTS idx_run_events_run_id ON run_events(run_id);
             """
         )
         await self._db.commit()
@@ -247,6 +257,22 @@ class AgentRegistry:
             status=r[4], created_at=r[5], completed_at=r[6], error=r[7],
         )
 
+    # ── Run Events ────────────────────────────────────────────────
+
+    async def save_event(self, run_id: str, event_type: str, payload: dict) -> None:
+        await self.db.execute(
+            "INSERT INTO run_events (run_id, event_type, payload_json, created_at) VALUES (?, ?, ?, ?)",
+            (run_id, event_type, json.dumps(payload, default=str), time.time()),
+        )
+        await self.db.commit()
+
+    async def get_run_events(self, run_id: str) -> list[tuple[str, dict]]:
+        rows = await self.db.execute_fetchall(
+            "SELECT event_type, payload_json FROM run_events WHERE run_id = ? ORDER BY id",
+            (run_id,),
+        )
+        return [(row[0], json.loads(row[1])) for row in rows]
+
     # ── API Keys ──────────────────────────────────────────────────
 
     async def store_api_key(self, key_hash: str, tenant_id: str, label: str = "") -> None:

{nightshift_sdk-0.4.2 → nightshift_sdk-0.4.3}/src/nightshift/sdk/config.py

@@ -12,6 +12,7 @@ class AgentConfig:
     mem_size_mib: int = 2048
     timeout_seconds: int = 1800
     forward_env: list[str] = field(default_factory=list)
+    forward_secrets: list[str] = field(default_factory=list)
     env: dict[str, str] = field(default_factory=dict)
     max_concurrent_vms: int = 0  # 0 = use platform default; >0 = explicit limit
     stateful: bool = False  # True = single VM, serial, workspace extracted on teardown