@datalayer/agent-runtimes 1.3.104 → 1.3.105

package/lib/index.d.ts

@@ -3,6 +3,7 @@ export * from './client';
 export * from './collaboration';
 export * from './components';
 export * from './mcp';
+export * from './pap';
 export * from './stores';
 export * from './identity';
 export * from './config';

package/lib/index.js

@@ -7,6 +7,7 @@ export * from './client';
 export * from './collaboration';
 export * from './components';
 export * from './mcp';
+export * from './pap';
 export * from './stores';
 export * from './identity';
 export * from './config';

package/lib/pap/index.d.ts

@@ -0,0 +1,42 @@
+import { type DiscoveredCompany, type DiscoveryOptions, type JsonWebKeySet, type ClientMetadata, type IdentityRequestOptions } from '@datalayer/personal-agent-protocol';
+/** Verified public company capabilities safe for model and UI surfaces. */
+export interface PapCompanySummary {
+    readonly organization: string;
+    readonly domain: string;
+    readonly protocolVersion: string;
+    readonly issuer: string | null;
+    readonly signIn: readonly string[];
+    readonly interfaces: readonly string[];
+    readonly extensions: Readonly<Record<string, string>>;
+}
+/** Verified public personal-agent identity safe for model and UI surfaces. */
+export interface PapAgentIdentitySummary {
+    readonly clientId: string;
+    readonly clientName: string;
+    readonly redirectCount: number;
+    readonly signingAlgorithms: readonly string[];
+    readonly extensions: Readonly<Record<string, string>>;
+}
+type DiscoverCompany = (domain: string, options?: DiscoveryOptions) => Promise<DiscoveredCompany>;
+interface IdentityClient {
+    fetchMetadata(clientId: string, options?: IdentityRequestOptions): Promise<ClientMetadata>;
+    fetchJwks(clientId: string, options?: IdentityRequestOptions): Promise<JsonWebKeySet>;
+}
+export interface PapPersonalAgentCapabilityOptions {
+    readonly discover?: DiscoverCompany;
+    readonly identity?: IdentityClient;
+}
+/**
+ * Use PAP clients while enforcing Agent Runtimes' public-summary boundary.
+ *
+ * Authorization URLs, callback state, assertions, proofs, and tokens are not
+ * represented by this API. Those values remain in deterministic host
+ * services and cross runtime boundaries only as opaque references.
+ */
+export declare class PapPersonalAgentCapability {
+    #private;
+    constructor(options?: PapPersonalAgentCapabilityOptions);
+    discoverCompany(domain: string, options?: DiscoveryOptions): Promise<PapCompanySummary>;
+    inspectAgent(clientId: string, options?: IdentityRequestOptions): Promise<PapAgentIdentitySummary>;
+}
+export {};

package/lib/pap/index.js

@@ -0,0 +1,57 @@
+/*
+ * Copyright (c) 2025-2026 Datalayer, Inc.
+ * Distributed under the terms of the Modified BSD License.
+ */
+import { AgentIdentityClient, discoverCompany, } from '@datalayer/personal-agent-protocol';
+function extensionVersions(extensions) {
+    return Object.freeze(Object.fromEntries(Object.entries(extensions).map(([name, value]) => [name, value.version])));
+}
+/**
+ * Use PAP clients while enforcing Agent Runtimes' public-summary boundary.
+ *
+ * Authorization URLs, callback state, assertions, proofs, and tokens are not
+ * represented by this API. Those values remain in deterministic host
+ * services and cross runtime boundaries only as opaque references.
+ */
+export class PapPersonalAgentCapability {
+    #discover;
+    #identity;
+    constructor(options = {}) {
+        this.#discover = options.discover ?? discoverCompany;
+        this.#identity = options.identity ?? new AgentIdentityClient();
+    }
+    async discoverCompany(domain, options = {}) {
+        const company = await this.#discover(domain, options);
+        const { document } = company;
+        const signIn = ['direct', 'device', 'mediated'].filter(method => document.auth?.[method] !== undefined);
+        const interfaces = [
+            ...(document.agent?.protocols.map(protocol => `agent:${protocol.type}`) ??
+                []),
+            ...document.apis.map(api => `api:${api.type}`),
+            ...(document.web === undefined ? [] : ['web']),
+        ];
+        return Object.freeze({
+            organization: document.organization.name,
+            domain: document.organization.domain,
+            protocolVersion: document.protocol_version,
+            issuer: document.auth?.issuer ?? null,
+            signIn: Object.freeze(signIn),
+            interfaces: Object.freeze(interfaces),
+            extensions: extensionVersions(document.extensions),
+        });
+    }
+    async inspectAgent(clientId, options = {}) {
+        const metadata = await this.#identity.fetchMetadata(clientId, options);
+        const keys = await this.#identity.fetchJwks(clientId, options);
+        const signingAlgorithms = [
+            ...new Set(keys.keys.map(key => key.alg ?? (key.kty === 'EC' ? 'ES256' : 'RS256'))),
+        ].sort();
+        return Object.freeze({
+            clientId: metadata.client_id,
+            clientName: metadata.client_name,
+            redirectCount: metadata.redirect_uris.length,
+            signingAlgorithms: Object.freeze(signingAlgorithms),
+            extensions: extensionVersions(metadata.extensions),
+        });
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@datalayer/agent-runtimes",
-    "version": "1.3.104",
+    "version": "1.3.105",
     "type": "module",
     "workspaces": [
         ".",
@@ -160,6 +160,7 @@
         "@datalayer/lexical-loro": "^1.0.6",
         "@datalayer/primer-addons": "^1.0.39",
         "@datalayer/primer-rjsf": "^1.0.3",
+        "@datalayer/personal-agent-protocol": "^0.3.1",
         "@datalayer/reactor": "^1.0.4",
         "@datalayer/reactor-commands": "^1.0.4",
         "@datalayer/reactor-manager": "^1.0.4",