@datalayer/agent-runtimes 1.3.112 → 1.3.113

package/lib/protocols/pact/index.d.ts

@@ -133,6 +133,8 @@ export declare class PactPersonalAgent {
     }): Promise<Reply | StepUp>;
     private verifyReceipt;
     requestSignIn(user: string, scopes: string[]): Promise<SignIn>;
+    /** Ask once whether the person approved: the scopes granted, or `undefined` while pending. */
+    pollSignIn(user: string, signIn: SignIn): Promise<string[] | undefined>;
     /** Poll until the person approved; the scopes they actually granted. */
     finishSignIn(user: string, signIn: SignIn, intervalMs?: number, attempts?: number): Promise<string[]>;
 }

package/lib/protocols/pact/index.js

@@ -315,42 +315,48 @@ export class PactPersonalAgent {
             reference,
         };
     }
-    /** Poll until the person approved; the scopes they actually granted. */
-    async finishSignIn(user, signIn, intervalMs = 5000, attempts = 120) {
+    /** Ask once whether the person approved: the scopes granted, or `undefined` while pending. */
+    async pollSignIn(user, signIn) {
         const card = this.card;
         const deviceCode = this.pending.get(signIn.reference);
         if (!deviceCode) {
             throw new PactError('no sign-in pending under this reference');
         }
+        const answer = await this.fetch(card.delegation.tokenUrl, {
+            method: 'POST',
+            headers: {
+                Authorization: `Bearer ${await this.jwt(user)}`,
+                'Content-Type': 'application/x-www-form-urlencoded',
+            },
+            body: new URLSearchParams({
+                grant_type: DEVICE_CODE_GRANT,
+                device_code: deviceCode,
+                client_id: this.options.issuer,
+            }).toString(),
+        });
+        const body = await answer.json();
+        if (body.error === 'authorization_pending' || body.error === 'slow_down') {
+            return undefined;
+        }
+        if (body.error) {
+            this.pending.delete(signIn.reference);
+            throw new PactError(`the sign-in ended: ${body.error}`);
+        }
+        const granted = String(body.scope ?? '')
+            .split(' ')
+            .filter(Boolean);
+        await this.delegations().put(card.interfaceUrl, user, body.access_token, granted);
+        this.pending.delete(signIn.reference);
+        return granted;
+    }
+    /** Poll until the person approved; the scopes they actually granted. */
+    async finishSignIn(user, signIn, intervalMs = 5000, attempts = 120) {
         for (let i = 0; i < attempts; i++) {
-            const answer = await this.fetch(card.delegation.tokenUrl, {
-                method: 'POST',
-                headers: {
-                    Authorization: `Bearer ${await this.jwt(user)}`,
-                    'Content-Type': 'application/x-www-form-urlencoded',
-                },
-                body: new URLSearchParams({
-                    grant_type: DEVICE_CODE_GRANT,
-                    device_code: deviceCode,
-                    client_id: this.options.issuer,
-                }).toString(),
-            });
-            const body = await answer.json();
-            if (body.error === 'authorization_pending' ||
-                body.error === 'slow_down') {
-                await new Promise(resolve => setTimeout(resolve, intervalMs));
-                continue;
+            const granted = await this.pollSignIn(user, signIn);
+            if (granted) {
+                return granted;
             }
-            if (body.error) {
-                this.pending.delete(signIn.reference);
-                throw new PactError(`the sign-in ended: ${body.error}`);
-            }
-            const granted = String(body.scope ?? '')
-                .split(' ')
-                .filter(Boolean);
-            await this.delegations().put(card.interfaceUrl, user, body.access_token, granted);
-            this.pending.delete(signIn.reference);
-            return granted;
+            await new Promise(resolve => setTimeout(resolve, intervalMs));
         }
         throw new PactError('the person did not sign in in time');
     }

package/lib/protocols/web-bot-auth/index.js

@@ -122,7 +122,7 @@ export async function signRequest(request, signer, options) {
         label,
         nonce: options.nonce ?? generateNonce(),
         signatureAgentKey: label,
-        additionalComponents: (options.components ?? ['@method', '@path']).filter(name => name !== '@authority'),
+        additionalComponents: (options.components ?? ['@method', '@path', '@query']).filter(name => name !== '@authority'),
     });
     return {
         'Signature-Agent': agentHeader,

package/lib/types/agentspecs.d.ts

@@ -486,6 +486,27 @@ export interface AppPapSpec {
     connections: AppPapConnectionSpec[];
     company: AppPapCompanySpec;
 }
+/**
+ * A business the application asks for each person over PACT 1.0
+ * (AGENT_PROTOCOLS PI-01): its domain, and the audience its Provider
+ * assigned. Always in each person's own name; never a credential.
+ */
+export interface AppPactConnectionSpec {
+    /** Stable within the application: `support`. */
+    id: string;
+    /** The business's domain: `example.com`; its card is at `/.well-known/agent-card.json`. */
+    brand: string;
+    /** The audience the Brand's Provider assigned (PACT §3.1). */
+    audience: string;
+    /** `read`: asks as the application alone; `write`: also for the person, delegated. */
+    access: 'read' | 'write';
+    /** The Brand's scopes it may ask the person for: `orders:read`. */
+    scopes: string[];
+}
+/** PACT: the businesses it asks for each person. */
+export interface AppPactSpec {
+    connections: AppPactConnectionSpec[];
+}
 /** When an application acts alone, and when it asks. */
 export interface AppRuleSpec {
     /** The action, in the words a person reads. */
@@ -1044,6 +1065,8 @@ export interface AppSpec {
     connections: AppConnectionSpec[];
     /** Personal Agent Protocol; absent, the application has none. */
     pap?: AppPapSpec;
+    /** PACT: the businesses it asks for each person (AGENT_PROTOCOLS PI-01). */
+    pact?: AppPactSpec;
     rules: AppRuleSpec[];
     permissions: AppPermissionsSpec;
     interface: AppInterfaceSpec;

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@datalayer/agent-runtimes",
-    "version": "1.3.112",
+    "version": "1.3.113",
     "type": "module",
     "workspaces": [
         ".",