feat(registry): push/pull + run agent/bundle from the registry (typed-artifact schema v2, mounts, filesets)

crates/lns-cli/Cargo.toml

@@ -42,9 +42,9 @@ reqwest = { version = "0.12", default-features = false, features = ["rustls-tls"
 futures-util = "0.3"
 flate2  = "1"
 tar     = "0.4"
+tempfile = "3"
 
 [dev-dependencies]
-tempfile = "3"
 cucumber = "0.23"
 tokio    = { version = "1", features = ["rt-multi-thread", "macros", "test-util"] }
 # `#[serial]` for tests that mutate process-wide env state (LNS_LOG /

crates/lns-cli/src/cli.rs

@@ -165,6 +165,12 @@ pub struct RunArgs {
     )]
     pub mounts: Vec<lns_ipc::MountSpec>,
 
+    #[arg(
+        long = "mount",
+        help = "Mount an application-layer artifact (fileset/model/tool/knowledge) by reference: `<ref>[:/guest-path]`. The path overrides the artifact's declared mount."
+    )]
+    pub mount: Vec<String>,
+
     #[arg(
         short = 'q',
         long = "quiet",
@@ -178,6 +184,10 @@ pub struct RunArgs {
         help = "Override entrypoint+cmd. Everything after `--` is the command."
     )]
     pub cmd: Vec<String>,
+
+    /// Application-layer artifact mounts resolved from a bundle/agent ref or `--mount`; not a direct CLI arg.
+    #[arg(skip)]
+    pub artifact_mounts: Vec<lns_ipc::ArtifactMount>,
 }
 
 pub const DEFAULT_CPUS: u8 = 1;
@@ -378,6 +388,41 @@ fn parse_port(s: &str) -> Option<u16> {
     s.parse::<u16>().ok().filter(|&p| p != 0)
 }
 
+#[derive(clap::Args)]
+pub struct PushArgs {
+    #[arg(
+        help = "A local file (pushed as a typed artifact) or a cached image reference (pushed as an image)."
+    )]
+    pub source: String,
+    #[arg(
+        help = "Target registry reference, e.g. registry.example.com/org/acme/agents/hermes:v1."
+    )]
+    pub reference: String,
+    #[arg(
+        long,
+        help = "Artifact family (agent, policy, tool, …); inferred from the reference path when omitted."
+    )]
+    pub family: Option<String>,
+    #[arg(
+        long,
+        value_name = "PATH",
+        help = "Pack a local file or directory into the artifact's OCI layer (for filesets and other content-bearing artifacts)."
+    )]
+    pub content: Option<PathBuf>,
+}
+
+#[derive(clap::Args)]
+pub struct PullArgs {
+    #[arg(help = "Registry reference, e.g. registry.example.com/org/acme/agents/hermes:v1.")]
+    pub reference: String,
+    #[arg(
+        short,
+        long,
+        help = "Write a pulled artifact here; defaults to stdout. Ignored for images (cached)."
+    )]
+    pub output: Option<PathBuf>,
+}
+
 #[cfg(test)]
 mod tests {
     use super::*;

crates/lns-cli/src/command.rs

@@ -59,6 +59,8 @@ pub fn registry() -> Vec<CommandSpec> {
         crate::config::SPEC,
         crate::login::LOGIN_SPEC,
         crate::login::LOGOUT_SPEC,
+        crate::registry::PUSH_SPEC,
+        crate::registry::PULL_SPEC,
     ]
 }
 

crates/lns-cli/src/config/mod.rs

@@ -744,6 +744,8 @@ mod tests {
             mounts: Vec::new(),
             quiet: false,
             cmd: Vec::new(),
+            mount: Vec::new(),
+            artifact_mounts: Vec::new(),
         }
     }
 

crates/lns-cli/src/lib.rs

@@ -9,6 +9,7 @@ pub mod log;
 pub mod login;
 pub mod policy;
 pub mod raw_mode;
+pub mod registry;
 pub mod run;
 pub mod sandbox;
 pub mod service;