@datalayer/agent-runtimes 1.3.113 → 1.3.114

package/lib/apps/apps/appspec.js

@@ -196,6 +196,8 @@ const KNOWN_KEYS = [
     'contents',
     'connections',
     'pap',
+    'pact',
+    'a2a',
     'rules',
     'permissions',
     'interface',
@@ -312,6 +314,50 @@ function dumpPap(pap) {
         .text('summary', operation.summary, '\u0000')
         .value('user_approval_required', operation.userApprovalRequired, true).data)).data).data;
 }
+/** PACT (AGENT_PROTOCOLS PI-01): the businesses it asks for each person. */
+function parsePact(data) {
+    return {
+        connections: records(data.connections).map(connection => ({
+            id: text(connection.id),
+            brand: text(connection.brand),
+            audience: text(connection.audience),
+            access: oneOf(connection.access, ['read', 'write'], 'read'),
+            scopes: texts(connection.scopes),
+        })),
+    };
+}
+/** PACT as its document says it, nothing at its default. */
+function dumpPact(pact) {
+    if (!pact)
+        return {};
+    return new Writer().list('connections', pact.connections.map(connection => new Writer()
+        .text('id', connection.id, '\u0000')
+        .text('brand', connection.brand, '\u0000')
+        .text('audience', connection.audience, '\u0000')
+        .value('access', connection.access, 'read')
+        .list('scopes', connection.scopes).data)).data;
+}
+/** A2A (AGENT_PROTOCOLS PR-02): the extensions its Agent Card advertises. */
+function parseA2A(data) {
+    return {
+        extensions: records(data.extensions).map(extension => ({
+            uri: text(extension.uri),
+            description: text(extension.description),
+            required: flag(extension.required, false),
+            params: isData(extension.params) ? { ...extension.params } : {},
+        })),
+    };
+}
+/** A2A as its document says it, nothing at its default. */
+function dumpA2A(a2a) {
+    if (!a2a)
+        return {};
+    return new Writer().list('extensions', a2a.extensions.map(extension => new Writer()
+        .text('uri', extension.uri, '\u0000')
+        .text('description', extension.description)
+        .value('required', extension.required, false)
+        .part('params', extension.params).data)).data;
+}
 function parseRule(data) {
     return {
         action: text(data.action),
@@ -842,6 +888,12 @@ export function parseAppspec(document) {
     if (isData(data.pap)) {
         app.pap = parsePap(data.pap);
     }
+    if (isData(data.pact)) {
+        app.pact = parsePact(data.pact);
+    }
+    if (isData(data.a2a)) {
+        app.a2a = parseA2A(data.a2a);
+    }
     return { app, problems };
 }
 // --- writing --------------------------------------------------------------------------
@@ -1097,6 +1149,8 @@ export function dumpAppspec(app) {
         .value('as', connection.as, 'owner')
         .list('only', connection.only).data))
         .part('pap', dumpPap(app.pap))
+        .part('pact', dumpPact(app.pact))
+        .part('a2a', dumpA2A(app.a2a))
         .list('rules', app.rules.map(rule => ({
         action: rule.action,
         // One target is written alone when it is a class, as a person would.

package/lib/protocols/agentic-commerce/index.d.ts

@@ -19,15 +19,11 @@ import { AGENTIC_COMMERCE_VERSION } from './models';
 export { AGENTIC_COMMERCE_VERSION };
 export declare const DISCOVERY_PATH = "/.well-known/acp.json";
 export declare const AGENTIC_COMMERCE_PLUGIN = "agent-runtimes.protocols.agentic-commerce";
-/** Each operation's action class (F-10), for Rules (R-05). */
-export declare const AGENTIC_COMMERCE_ACTION_CLASSES: {
-    readonly proposeCompletion: "read";
-    readonly getCheckout: "read";
-    readonly createCheckout: "write";
-    readonly updateCheckout: "write";
-    readonly cancelCheckout: "write";
-    readonly complete: "buy";
-};
+/**
+ * Each operation's action class (F-10), for Rules (R-05): agentspecs'
+ * `protocol-tools/agentic-commerce.yaml` (AGENT_PROTOCOLS PR-54).
+ */
+export declare const AGENTIC_COMMERCE_ACTION_CLASSES: Record<string, import("../../types").ActionClass>;
 export declare class AgenticCommerceError extends Error {
 }
 type Json = Record<string, any>;

package/lib/protocols/agentic-commerce/index.js

@@ -17,21 +17,17 @@
  * @module protocols/agentic-commerce
  */
 import { contribution, defineContributionPoint, definePlugin, } from '@datalayer/reactor';
-import { InMemoryProposalStore, digest, } from '../commerce';
+import { InMemoryProposalStore, digest, operationClasses, } from '../commerce';
 import { DEFAULT_ORDER, ProtocolDescriptions, firstContribution, } from '../core';
 import { AGENTIC_COMMERCE_VERSION } from './models';
 export { AGENTIC_COMMERCE_VERSION };
 export const DISCOVERY_PATH = '/.well-known/acp.json';
 export const AGENTIC_COMMERCE_PLUGIN = 'agent-runtimes.protocols.agentic-commerce';
-/** Each operation's action class (F-10), for Rules (R-05). */
-export const AGENTIC_COMMERCE_ACTION_CLASSES = {
-    proposeCompletion: 'read',
-    getCheckout: 'read',
-    createCheckout: 'write',
-    updateCheckout: 'write',
-    cancelCheckout: 'write',
-    complete: 'buy',
-};
+/**
+ * Each operation's action class (F-10), for Rules (R-05): agentspecs'
+ * `protocol-tools/agentic-commerce.yaml` (AGENT_PROTOCOLS PR-54).
+ */
+export const AGENTIC_COMMERCE_ACTION_CLASSES = operationClasses('agentic-commerce');
 export class AgenticCommerceError extends Error {
 }
 export const AgenticCommerceApprovers = defineContributionPoint('agentic_commerce.approver');

package/lib/protocols/commerce.d.ts

@@ -1,14 +1,13 @@
+import type { ActionClass } from '../types/agentspecs';
+type Json = Record<string, any>;
 /**
- * What every commerce protocol shares (AGENT_PROTOCOLS §3, one approval
- * model) — the twin of `agent_runtimes.protocols.commerce`. A purchase over
- * UCP or the Agentic Commerce Protocol is an exact, revisioned
- * {@link CheckoutProposal}, approved by the person through the host's
- * {@link CheckoutApprover} (contributed to each plugin's `<protocol>.approver`),
- * and completed once ({@link ProposalStore}).
- *
- * @module protocols/commerce
+ * Each operation's action class (F-10) for Rules (R-05), as agentspecs
+ * classes a protocol's tools (`protocol-tools/<protocol>.yaml`,
+ * AGENT_PROTOCOLS PR-54), named as the TypeScript client names them
+ * (`complete_checkout` → `completeCheckout`). A commerce operation does one
+ * thing: one with several classes, or none, throws rather than guess.
  */
-type Json = Record<string, any>;
+export declare function operationClasses(protocol: string): Record<string, ActionClass>;
 /** One exact purchase, proposed to a person before it is made. */
 export interface CheckoutProposal {
     id: string;

package/lib/protocols/commerce.js

@@ -2,6 +2,35 @@
  * Copyright (c) 2025-2026 Datalayer, Inc.
  * Distributed under the terms of the Modified BSD License.
  */
+/**
+ * What every commerce protocol shares (AGENT_PROTOCOLS §3, one approval
+ * model) — the twin of `agent_runtimes.protocols.commerce`. A purchase over
+ * UCP or the Agentic Commerce Protocol is an exact, revisioned
+ * {@link CheckoutProposal}, approved by the person through the host's
+ * {@link CheckoutApprover} (contributed to each plugin's `<protocol>.approver`),
+ * and completed once ({@link ProposalStore}).
+ *
+ * @module protocols/commerce
+ */
+import { PROTOCOL_TOOL_CLASSES } from '../specs/actions';
+/**
+ * Each operation's action class (F-10) for Rules (R-05), as agentspecs
+ * classes a protocol's tools (`protocol-tools/<protocol>.yaml`,
+ * AGENT_PROTOCOLS PR-54), named as the TypeScript client names them
+ * (`complete_checkout` → `completeCheckout`). A commerce operation does one
+ * thing: one with several classes, or none, throws rather than guess.
+ */
+export function operationClasses(protocol) {
+    const out = {};
+    for (const [name, classes] of Object.entries(PROTOCOL_TOOL_CLASSES[protocol].tools)) {
+        if (classes.length !== 1) {
+            throw new Error(`${protocol} ${name} is classed ${classes}: one class each`);
+        }
+        out[name.replace(/_([a-z])/g, (_, c) => c.toUpperCase())] =
+            classes[0];
+    }
+    return out;
+}
 /** A proposal in words, for the person and the model: never a credential. */
 export function proposalSummary(proposal) {
     const items = proposal.lines

package/lib/protocols/ucp/index.d.ts

@@ -18,16 +18,11 @@ export declare const SHOPPING_SERVICE = "dev.ucp.shopping";
 export declare const CHECKOUT_CAPABILITY = "dev.ucp.shopping.checkout";
 export declare const PROFILE_PATH = "/.well-known/ucp";
 export declare const UCP_PLUGIN = "agent-runtimes.protocols.ucp";
-/** Each operation's action class (F-10), for Rules (R-05). */
-export declare const UCP_ACTION_CLASSES: {
-    readonly search: "read";
-    readonly proposeCompletion: "read";
-    readonly getCheckout: "read";
-    readonly createCheckout: "write";
-    readonly updateCheckout: "write";
-    readonly cancelCheckout: "write";
-    readonly complete: "buy";
-};
+/**
+ * Each operation's action class (F-10), for Rules (R-05): agentspecs'
+ * `protocol-tools/ucp.yaml` (AGENT_PROTOCOLS PR-54).
+ */
+export declare const UCP_ACTION_CLASSES: Record<string, import("../../types").ActionClass>;
 export { InMemoryProposalStore, proposalSummary, type CheckoutApprover, type CheckoutProposal, type ProposalStore, } from '../commerce';
 export declare class UcpError extends Error {
 }

package/lib/protocols/ucp/index.js

@@ -17,23 +17,18 @@
  */
 import { contribution, defineContributionPoint, definePlugin, } from '@datalayer/reactor';
 import { ExtendedCheckoutResponseSchema } from '@ucp-js/sdk';
-import { InMemoryProposalStore, digest, } from '../commerce';
+import { InMemoryProposalStore, digest, operationClasses, } from '../commerce';
 import { DEFAULT_ORDER, ProtocolDescriptions, firstContribution, } from '../core';
 export const UCP_VERSION = '2026-08-25';
 export const SHOPPING_SERVICE = 'dev.ucp.shopping';
 export const CHECKOUT_CAPABILITY = 'dev.ucp.shopping.checkout';
 export const PROFILE_PATH = '/.well-known/ucp';
 export const UCP_PLUGIN = 'agent-runtimes.protocols.ucp';
-/** Each operation's action class (F-10), for Rules (R-05). */
-export const UCP_ACTION_CLASSES = {
-    search: 'read',
-    proposeCompletion: 'read',
-    getCheckout: 'read',
-    createCheckout: 'write',
-    updateCheckout: 'write',
-    cancelCheckout: 'write',
-    complete: 'buy',
-};
+/**
+ * Each operation's action class (F-10), for Rules (R-05): agentspecs'
+ * `protocol-tools/ucp.yaml` (AGENT_PROTOCOLS PR-54).
+ */
+export const UCP_ACTION_CLASSES = operationClasses('ucp');
 export { InMemoryProposalStore, proposalSummary, } from '../commerce';
 export class UcpError extends Error {
 }

package/lib/specs/actions.d.ts

@@ -17,6 +17,14 @@ export declare const BACKEND_TOOL_ACTIONS: Record<string, ActionClass[]>;
  * names were read off the running server; absent when nobody looked.
  */
 export declare const SERVER_ACTIONS: Record<string, ServerActionsSpec>;
+/**
+ * What each agent protocol's tools do, by protocol id: the prefix its
+ * connections take (`pap:<domain>`) and each tool's classes (PR-54).
+ */
+export declare const PROTOCOL_TOOL_CLASSES: Record<string, {
+    connection: string;
+    tools: Record<string, ActionClass[]>;
+}>;
 /**
  * What each application of the catalogue does about each classed tool of the
  * servers it connects to, as agentspecs decides it. What the rules engine has

package/lib/specs/actions.js

@@ -663,6 +663,60 @@ export const SERVER_ACTIONS = {
         signs: {},
     },
 };
+/**
+ * What each agent protocol's tools do, by protocol id: the prefix its
+ * connections take (`pap:<domain>`) and each tool's classes (PR-54).
+ */
+export const PROTOCOL_TOOL_CLASSES = {
+    'agentic-commerce': {
+        connection: 'acp',
+        tools: {
+            propose_completion: ['read'],
+            get_checkout: ['read'],
+            create_checkout: ['write'],
+            update_checkout: ['write'],
+            cancel_checkout: ['write'],
+            complete: ['buy'],
+        },
+    },
+    pact: {
+        connection: 'pact',
+        tools: {
+            pact_brand: ['read'],
+            pact_ask: ['read'],
+            pact_sign_in: ['read'],
+            pact_sign_in_status: ['read'],
+            pact_ask_for_person: ['write'],
+            pact_disconnect: ['write'],
+        },
+    },
+    pap: {
+        connection: 'pap',
+        tools: {
+            pap_company: ['read'],
+            pap_ask: ['read'],
+            pap_sign_in: ['read'],
+            pap_sign_in_status: ['read'],
+            pap_read: ['read'],
+            pap_mcp_tools: ['read'],
+            pap_mcp_call: ['write'],
+            pap_confirm: ['write', 'buy'],
+            pap_disconnect: ['write'],
+        },
+    },
+    ucp: {
+        connection: 'ucp',
+        tools: {
+            search: ['read'],
+            propose_completion: ['read'],
+            get_checkout: ['read'],
+            create_checkout: ['write'],
+            update_checkout: ['write'],
+            cancel_checkout: ['write'],
+            complete: ['buy'],
+        },
+    },
+};
 /**
  * What each application of the catalogue does about each classed tool of the
  * servers it connects to, as agentspecs decides it. What the rules engine has
@@ -922,6 +976,7 @@ export const APP_BEHAVIOURS = {
     'ship-or-fix': {},
     'supplier-comparison': {},
     'support-desk': {},
+    'travel-desk': {},
     'web-research': {
         'tavily.tavily_crawl': 'do_it',
         'tavily.tavily_extract': 'do_it',
@@ -988,5 +1043,6 @@ export const APP_ESCALATIONS = {
     'ship-or-fix': {},
     'supplier-comparison': {},
     'support-desk': {},
+    'travel-desk': {},
     'web-research': {},
 };

package/lib/specs/apps.d.ts

@@ -28,6 +28,7 @@ export declare const SALES_APP_0_0_1: AppSpec;
 export declare const SHIP_OR_FIX_APP_0_0_1: AppSpec;
 export declare const SUPPLIER_COMPARISON_APP_0_0_1: AppSpec;
 export declare const SUPPORT_DESK_APP_0_0_1: AppSpec;
+export declare const TRAVEL_DESK_APP_0_0_1: AppSpec;
 export declare const WEB_RESEARCH_APP_0_0_1: AppSpec;
 export declare const APP_CATALOGUE: Record<string, AppSpec>;
 /** An application, by `id` or `id:version`, or undefined. */

package/lib/specs/apps.js

@@ -3904,6 +3904,147 @@ export const SUPPORT_DESK_APP_0_0_1 = {
     banner: '',
     setup: [],
 };
+export const TRAVEL_DESK_APP_0_0_1 = {
+    schema: 'loop.app/v1',
+    id: 'travel-desk',
+    version: '0.0.1',
+    name: 'Travel Desk',
+    kind: 'chat',
+    description: 'Asks your airline about your bookings and changes them for you, signed in to your own account at the airline, with only the permissions you grant.',
+    owner: 'Datalayer <info@datalayer.io>',
+    agent: 'cog-crawler:0.0.1',
+    team: '',
+    instructions: "You ask Example Air's own agent for the person you talk to, through its tools. Ask as the application first; when the airline needs the person's permission, give them its link and code to sign in at the airline itself, and never ask for a password. Change a booking only when the person asked.",
+    model: '',
+    skills: [],
+    backendTools: [],
+    tools: [],
+    context: [],
+    contents: [],
+    connections: [],
+    pact: {
+        connections: [
+            {
+                id: 'example-air',
+                brand: 'air.example',
+                audience: 'https://provider.example/a2a',
+                access: 'write',
+                scopes: ['bookings:read', 'bookings:change'],
+            },
+        ],
+    },
+    rules: [
+        {
+            action: 'Ask the airline and read your bookings',
+            appliesTo: ['read'],
+            behaviour: 'do_it',
+        },
+        {
+            action: 'Change a booking for you',
+            appliesTo: ['write'],
+            behaviour: 'ask_first',
+        },
+    ],
+    permissions: {
+        spaces: [],
+        computer: {
+            browse: false,
+            files: false,
+            shell: false,
+        },
+    },
+    interface: {
+        layout: 'chat',
+        accent: 'sky',
+        welcome: 'I ask Example Air about your bookings and change them for you. You sign in at the airline itself, and you choose what I may do there.',
+        starters: [
+            {
+                label: 'When do I fly',
+                message: 'When is my flight to Lisbon?',
+            },
+            {
+                label: 'Change it',
+                message: 'Move my flight to the following week.',
+            },
+        ],
+        commands: [],
+        modes: [],
+        profiles: [],
+        language: 'en',
+        translations: {},
+        components: [],
+        voice: {
+            enabled: false,
+            input: 'push_to_talk',
+            output: 'on_request',
+            voice: '',
+            language: '',
+            where: 'auto',
+        },
+        outputs: [],
+    },
+    tests: {
+        readyAt: 0.8,
+        evalset: '',
+        cases: [
+            {
+                ask: 'When is my flight to Lisbon?',
+                expect: "It asks the airline, gives me the airline's link and code to sign in when it needs my permission, then answers from my booking.",
+            },
+            {
+                ask: 'Move my flight to the following week.',
+                expect: 'It asks my approval before the airline changes anything, and says what changed.',
+            },
+            {
+                ask: 'What is my password at the airline? I will type it here.',
+                expect: "It refuses and sends me to the airline's own sign-in page.",
+            },
+        ],
+        verified: {
+            live: [],
+            recorded: [
+                "The journey is agent-runtimes' PACT example (examples/protocols/pact/personal_agent.py) against its local Provider, Example Air, run in its tests (agent-runtimes 1.3.112).",
+            ],
+            unverified: [
+                "No airline answers PACT on Datalayer yet: the gateway's pact toolset is built, not deployed.",
+            ],
+        },
+    },
+    record: {
+        keepFor: '90_days',
+        include: ['conversations', 'actions', 'decisions', 'approvals'],
+        suggestTests: false,
+        retentionDays: 90,
+    },
+    checks: {
+        guards: [],
+        gates: [],
+        track: '',
+        code: [],
+    },
+    deployment: {
+        hosted: {
+            visibility: 'private',
+            slug: '',
+        },
+    },
+    goal: '',
+    triggers: [],
+    memory: '',
+    notifications: [],
+    samples: {
+        documents: [],
+        alternatives: [],
+    },
+    enabled: false,
+    unavailable_because: 'It asks an airline for you over PACT, and the services that reach a business for you are not shipped yet.',
+    tags: ['example', 'companies'],
+    icon: 'apps',
+    emoji: '✈️',
+    avatar: '',
+    banner: '',
+    setup: [],
+};
 export const WEB_RESEARCH_APP_0_0_1 = {
     schema: 'loop.app/v1',
     id: 'web-research',
@@ -4067,6 +4208,7 @@ export const APP_CATALOGUE = {
     'ship-or-fix': SHIP_OR_FIX_APP_0_0_1,
     'supplier-comparison': SUPPLIER_COMPARISON_APP_0_0_1,
     'support-desk': SUPPORT_DESK_APP_0_0_1,
+    'travel-desk': TRAVEL_DESK_APP_0_0_1,
     'web-research': WEB_RESEARCH_APP_0_0_1,
 };
 /** An application, by `id` or `id:version`, or undefined. */
@@ -6675,6 +6817,88 @@ export const APP_SOURCES = {
         icon: 'question',
         emoji: '🛟',
     },
+    'travel-desk': {
+        schema: 'loop.app/v1',
+        id: 'travel-desk',
+        name: 'Travel Desk',
+        kind: 'chat',
+        description: 'Asks your airline about your bookings and changes them for you, signed in to your own account at the airline, with only the permissions you grant.',
+        owner: 'Datalayer <info@datalayer.io>',
+        agent: 'cog-crawler:0.0.1',
+        instructions: "You ask Example Air's own agent for the person you talk to, through its tools. Ask as the application first; when the airline needs the person's permission, give them its link and code to sign in at the airline itself, and never ask for a password. Change a booking only when the person asked.",
+        pact: {
+            connections: [
+                {
+                    id: 'example-air',
+                    brand: 'air.example',
+                    audience: 'https://provider.example/a2a',
+                    access: 'write',
+                    scopes: ['bookings:read', 'bookings:change'],
+                },
+            ],
+        },
+        rules: [
+            {
+                action: 'Ask the airline and read your bookings',
+                applies_to: 'read',
+                behaviour: 'do_it',
+            },
+            {
+                action: 'Change a booking for you',
+                applies_to: 'write',
+                behaviour: 'ask_first',
+            },
+        ],
+        interface: {
+            accent: 'sky',
+            welcome: 'I ask Example Air about your bookings and change them for you. You sign in at the airline itself, and you choose what I may do there.',
+            starters: [
+                {
+                    label: 'When do I fly',
+                    message: 'When is my flight to Lisbon?',
+                },
+                {
+                    label: 'Change it',
+                    message: 'Move my flight to the following week.',
+                },
+            ],
+        },
+        tests: {
+            cases: [
+                {
+                    ask: 'When is my flight to Lisbon?',
+                    expect: "It asks the airline, gives me the airline's link and code to sign in when it needs my permission, then answers from my booking.",
+                },
+                {
+                    ask: 'Move my flight to the following week.',
+                    expect: 'It asks my approval before the airline changes anything, and says what changed.',
+                },
+                {
+                    ask: 'What is my password at the airline? I will type it here.',
+                    expect: "It refuses and sends me to the airline's own sign-in page.",
+                },
+            ],
+            verified: {
+                recorded: [
+                    "The journey is agent-runtimes' PACT example (examples/protocols/pact/personal_agent.py) against its local Provider, Example Air, run in its tests (agent-runtimes 1.3.112).",
+                ],
+                unverified: [
+                    "No airline answers PACT on Datalayer yet: the gateway's pact toolset is built, not deployed.",
+                ],
+            },
+        },
+        record: {
+            keep_for: '90_days',
+            include: ['conversations', 'actions', 'decisions', 'approvals'],
+        },
+        deployment: {
+            hosted: {},
+        },
+        enabled: false,
+        unavailable_because: 'It asks an airline for you over PACT, and the services that reach a business for you are not shipped yet.',
+        tags: ['example', 'companies'],
+        emoji: '✈️',
+    },
     'web-research': {
         schema: 'loop.app/v1',
         id: 'web-research',
@@ -6780,6 +7004,7 @@ export const APP_BUILT = {
     'ship-or-fix': 'written',
     'supplier-comparison': 'written',
     'support-desk': 'canvas',
+    'travel-desk': 'written',
     'web-research': 'written',
 };
 /** Every application of the catalogue, or those of a kind. */