@datalayer/agent-runtimes 1.3.44 → 1.3.46

package/lib/api/runtimes/runtimes.d.ts

@@ -217,6 +217,34 @@ export declare const correctRuntimeMemory: (token: string, memoryId: string, tex
  * the service refuses (409) in a sentence (LOOP R-18).
  */
 export declare const forgetRuntimeMemories: (token: string, agentId: string, count: number, baseUrl?: string) => Promise<ForgetRuntimeMemoriesResponse>;
+/**
+ * One allowance of a person (LOOP R-35): `reader` uses what `source`
+ * remembers of them, both applications by their key `app:<uid>`.
+ */
+export interface RuntimeMemoryShare {
+    source: string;
+    reader: string;
+    /** When it was allowed (ISO). */
+    allowed_at: string | null;
+}
+/**
+ * The caller's allowances: who reads what one application remembers of them
+ * (`source`), or what one application reads besides its own (`reader`).
+ */
+export declare const listRuntimeMemoryShares: (token: string, filter: {
+    source?: string;
+    reader?: string;
+}, baseUrl?: string) => Promise<RuntimeMemoryShare[]>;
+/**
+ * Allow `reader` to use what `source` remembers of the caller (LOOP R-35).
+ * Allowed again, it is kept as it was.
+ */
+export declare const allowRuntimeMemoryShare: (token: string, source: string, reader: string, baseUrl?: string) => Promise<RuntimeMemoryShare>;
+/**
+ * Stop sharing what `source` remembers of the caller with `reader`
+ * (LOOP R-35); the service refuses (404) what was never allowed.
+ */
+export declare const stopRuntimeMemoryShare: (token: string, source: string, reader: string, baseUrl?: string) => Promise<void>;
 /**
  * Resume a paused runtime by restoring from a checkpoint (async).
  *

package/lib/api/runtimes/runtimes.js

@@ -325,6 +325,60 @@ export const forgetRuntimeMemories = async (token, agentId, count, baseUrl = DEF
         forgotten: Number(response?.forgotten ?? 0),
     };
 };
+/**
+ * The caller's allowances: who reads what one application remembers of them
+ * (`source`), or what one application reads besides its own (`reader`).
+ */
+export const listRuntimeMemoryShares = async (token, filter, baseUrl = DEFAULT_SERVICE_URLS.RUNTIMES) => {
+    validateToken(token);
+    const query = new URLSearchParams();
+    if (filter.source) {
+        query.set('source', filter.source.trim());
+    }
+    if (filter.reader) {
+        query.set('reader', filter.reader.trim());
+    }
+    const response = await requestDatalayerAPI({
+        url: `${baseUrl}${API_BASE_PATHS.RUNTIMES}/memory-shares?${query.toString()}`,
+        method: 'GET',
+        token,
+    });
+    return Array.isArray(response?.shares) ? response.shares : [];
+};
+/**
+ * Allow `reader` to use what `source` remembers of the caller (LOOP R-35).
+ * Allowed again, it is kept as it was.
+ */
+export const allowRuntimeMemoryShare = async (token, source, reader, baseUrl = DEFAULT_SERVICE_URLS.RUNTIMES) => {
+    validateToken(token);
+    validateRequiredString(source, 'The application remembering');
+    validateRequiredString(reader, 'The application reading');
+    const response = await requestDatalayerAPI({
+        url: `${baseUrl}${API_BASE_PATHS.RUNTIMES}/memory-shares`,
+        method: 'PUT',
+        body: { source: source.trim(), reader: reader.trim() },
+        token,
+    });
+    return response?.share;
+};
+/**
+ * Stop sharing what `source` remembers of the caller with `reader`
+ * (LOOP R-35); the service refuses (404) what was never allowed.
+ */
+export const stopRuntimeMemoryShare = async (token, source, reader, baseUrl = DEFAULT_SERVICE_URLS.RUNTIMES) => {
+    validateToken(token);
+    validateRequiredString(source, 'The application remembering');
+    validateRequiredString(reader, 'The application reading');
+    const query = new URLSearchParams({
+        source: source.trim(),
+        reader: reader.trim(),
+    });
+    await requestDatalayerAPI({
+        url: `${baseUrl}${API_BASE_PATHS.RUNTIMES}/memory-shares?${query.toString()}`,
+        method: 'DELETE',
+        token,
+    });
+};
 /**
  * Resume a paused runtime by restoring from a checkpoint (async).
  *

package/lib/client/AgentRuntimesClient.d.ts

@@ -14,7 +14,7 @@ import type { SpaceDTO, UpdateSpaceRequest } from '../models/SpaceDTO';
 import type { NotebookDTO } from '../models/NotebookDTO';
 import type { LexicalDTO } from '../models/LexicalDTO';
 import type { ProjectDTO, ProjectDefaultItems } from '../models/ProjectDTO';
-import type { RuntimeMemory, ListRuntimeMemoriesOptions } from '../api/runtimes/runtimes';
+import type { RuntimeMemory, RuntimeMemoryShare, ListRuntimeMemoriesOptions } from '../api/runtimes/runtimes';
 declare const AgentRuntimesClientWithMixins: {
     new (...args: any[]): {
         getMySpaces(): Promise<SpaceDTO[]>;
@@ -61,6 +61,12 @@ declare const AgentRuntimesClientWithMixins: {
         forgetRuntimeMemory(memoryId: string): Promise<number>;
         correctRuntimeMemory(memoryId: string, text: string): Promise<RuntimeMemory>;
         forgetRuntimeMemories(agentId: string, count: number): Promise<number>;
+        listRuntimeMemoryShares(filter: {
+            source?: string;
+            reader?: string;
+        }): Promise<RuntimeMemoryShare[]>;
+        allowRuntimeMemoryShare(source: string, reader: string): Promise<RuntimeMemoryShare>;
+        stopRuntimeMemoryShare(source: string, reader: string): Promise<void>;
         terminateAllRuntimes(): Promise<PromiseSettledResult<void>[]>;
         createSnapshot(runtimeName: string, name: string, description: string, stop?: boolean): Promise<CodeSandboxSnapshotDTO>;
         listSnapshots(): Promise<CodeSandboxSnapshotDTO[]>;
@@ -98,6 +104,12 @@ export interface AgentRuntimesClient extends DatalayerCoreClient {
     forgetRuntimeMemory(memoryId: string): Promise<number>;
     correctRuntimeMemory(memoryId: string, text: string): Promise<RuntimeMemory>;
     forgetRuntimeMemories(agentId: string, count: number): Promise<number>;
+    listRuntimeMemoryShares(filter: {
+        source?: string;
+        reader?: string;
+    }): Promise<RuntimeMemoryShare[]>;
+    allowRuntimeMemoryShare(source: string, reader: string): Promise<RuntimeMemoryShare>;
+    stopRuntimeMemoryShare(source: string, reader: string): Promise<void>;
     getRuntime(runtimeName: string): Promise<RuntimeDTO>;
     deleteRuntime(runtimeName: string): Promise<void>;
     terminateAllRuntimes(): Promise<PromiseSettledResult<void>[]>;

package/lib/client/mixins/RuntimesMixin.d.ts

@@ -1,4 +1,4 @@
-import type { RuntimeMemory, ListRuntimeMemoriesOptions } from '../../api/runtimes/runtimes';
+import type { RuntimeMemory, RuntimeMemoryShare, ListRuntimeMemoriesOptions } from '../../api/runtimes/runtimes';
 import type { Constructor } from '@datalayer/core/lib/client/utils/mixins';
 import { EnvironmentDTO } from '../../models/EnvironmentDTO';
 import { RuntimeDTO } from '../../models/RuntimeDTO';
@@ -106,6 +106,18 @@ export declare function RuntimesMixin<TBase extends Constructor>(Base: TBase): {
          * the caller, no more than the `count` confirmed.
          */
         forgetRuntimeMemories(agentId: string, count: number): Promise<number>;
+        /**
+         * The caller's allowances to share what an application remembers of
+         * them with another (LOOP R-35), by `source` or by `reader`.
+         */
+        listRuntimeMemoryShares(filter: {
+            source?: string;
+            reader?: string;
+        }): Promise<RuntimeMemoryShare[]>;
+        /** Allow `reader` to use what `source` remembers of the caller. */
+        allowRuntimeMemoryShare(source: string, reader: string): Promise<RuntimeMemoryShare>;
+        /** Stop sharing what `source` remembers of the caller with `reader`. */
+        stopRuntimeMemoryShare(source: string, reader: string): Promise<void>;
         /**
          * Terminate all runtimes.
          * Lists all runtimes and deletes them in parallel.

package/lib/client/mixins/RuntimesMixin.js

@@ -198,6 +198,27 @@ export function RuntimesMixin(Base) {
             const response = await runtimes.forgetRuntimeMemories(token, agentId, count, runtimesUrl);
             return response.forgotten;
         }
+        /**
+         * The caller's allowances to share what an application remembers of
+         * them with another (LOOP R-35), by `source` or by `reader`.
+         */
+        async listRuntimeMemoryShares(filter) {
+            const token = this.getToken();
+            const runtimesUrl = this.getRuntimesUrl();
+            return runtimes.listRuntimeMemoryShares(token, filter, runtimesUrl);
+        }
+        /** Allow `reader` to use what `source` remembers of the caller. */
+        async allowRuntimeMemoryShare(source, reader) {
+            const token = this.getToken();
+            const runtimesUrl = this.getRuntimesUrl();
+            return runtimes.allowRuntimeMemoryShare(token, source, reader, runtimesUrl);
+        }
+        /** Stop sharing what `source` remembers of the caller with `reader`. */
+        async stopRuntimeMemoryShare(source, reader) {
+            const token = this.getToken();
+            const runtimesUrl = this.getRuntimesUrl();
+            await runtimes.stopRuntimeMemoryShare(token, source, reader, runtimesUrl);
+        }
         /**
          * Terminate all runtimes.
          * Lists all runtimes and deletes them in parallel.

package/lib/loop/apps/AppRenderer.d.ts

@@ -71,6 +71,12 @@ export type AppInstance = {
     deploymentUid?: string;
     /** The version that runs. */
     version?: number;
+    /**
+     * The organization it belongs to: its agent keeps to that organization's
+     * contexts, read by the runtime from IAM (LOOP U-31); unsaid for an
+     * application of nobody's organization.
+     */
+    organizationUid?: string;
 };
 export type AppRendererProps = Omit<LoopEmbedProps, 'agentId'> & {
     /** The application to render. */

package/lib/loop/apps/AppRenderer.js

@@ -212,6 +212,9 @@ export function appDatalayerCreatePayload(app, instance) {
                     app_uid: instance.appUid ?? '',
                     deployment_uid: instance.deploymentUid ?? '',
                     version: instance.version ?? 0,
+                    ...(instance.organizationUid
+                        ? { organization_uid: instance.organizationUid }
+                        : {}),
                 },
             }
             : {}),

package/lib/loop/apps/checks.d.ts

@@ -14,15 +14,23 @@ export interface AppCheck {
  * UI plugins, by the name a surface gives it.
  */
 export declare const componentNamed: (name: string) => ComponentSpec | undefined;
+/** How an organization's own context is named: never a catalogue id (agentspecs' `ORGANIZATION_FRAME_PREFIX`). */
+export declare const ORGANIZATION_FRAME_PREFIX = "org-";
+/** Whether a reference names an organization's own context rather than the catalogue's (LOOP U-32). */
+export declare const isOrganizationFrame: (ref: string) => boolean;
 /** The Guards the runtime executes (agent-runtimes `loop/apps/guards.py`). */
 export declare const EXECUTED_GUARDS: readonly string[];
 /**
  * Where an application is checked: the plugins its organization has turned
  * off (catalogue ids, `plugins_off` in IAM), none when it has decided nothing
- * or the checks run with no organization.
+ * or the checks run with no organization; and the ids of its organization's
+ * contexts (`frames` in IAM: its versions and its own, LOOP U-32), unsaid
+ * when no organization is known — a context of an organization's own is then
+ * refused.
  */
 export interface CheckContext {
     pluginsOff: readonly string[];
+    organizationFrames?: readonly string[];
 }
 /** The instant checks of an application as an editor holds it. */
 export declare function checkApp(app: AppSpec, read?: string[], context?: CheckContext): AppCheck;

package/lib/loop/apps/checks.js

@@ -134,8 +134,16 @@ function shapeProblems(app) {
     }
     return problems;
 }
-/** Every reference that does not resolve, in sentences. */
-function referenceProblems(app) {
+/** How an organization's own context is named: never a catalogue id (agentspecs' `ORGANIZATION_FRAME_PREFIX`). */
+export const ORGANIZATION_FRAME_PREFIX = 'org-';
+/** Whether a reference names an organization's own context rather than the catalogue's (LOOP U-32). */
+export const isOrganizationFrame = (ref) => idOf(ref).startsWith(ORGANIZATION_FRAME_PREFIX);
+/**
+ * Every reference that does not resolve, in sentences. A context of an
+ * organization's own resolves among `organizationFrames`, the contexts of the
+ * organization the application belongs to; with none known, it is refused.
+ */
+function referenceProblems(app, organizationFrames) {
     const problems = [];
     const missing = (what, ref) => problems.push(`There is no ${what} named “${ref}”.`);
     if (app.agent && !getAgentspecs(idOf(app.agent)) && !getCog(app.agent)) {
@@ -145,8 +153,16 @@ function referenceProblems(app) {
         missing('team', app.team);
     }
     for (const ref of app.context) {
-        if (!getFrame(idOf(ref)))
-            missing('Frame', ref);
+        if (!isOrganizationFrame(ref)) {
+            if (!getFrame(idOf(ref)))
+                missing('Frame', ref);
+        }
+        else if (organizationFrames === undefined) {
+            problems.push(`“${ref}” is a context of an organization’s own: it is checked with the organization the application belongs to, which was not said.`);
+        }
+        else if (!organizationFrames.includes(idOf(ref))) {
+            problems.push(`Its organization has no context named “${ref}”.`);
+        }
     }
     for (const connection of app.connections) {
         if (!own(MCP_SERVER_LIBRARY, idOf(connection.server))) {
@@ -340,7 +356,11 @@ function setupNotes(app) {
 const NO_ORGANIZATION = { pluginsOff: [] };
 /** The instant checks of an application as an editor holds it. */
 export function checkApp(app, read = [], context = NO_ORGANIZATION) {
-    const problems = [...read, ...shapeProblems(app), ...referenceProblems(app)];
+    const problems = [
+        ...read,
+        ...shapeProblems(app),
+        ...referenceProblems(app, context.organizationFrames),
+    ];
     // A block its page uses from a plugin its organization turned off is said
     // with the rest of what is not enabled today (C-12).
     const setup = [

package/lib/loop/index.d.ts

@@ -72,4 +72,4 @@ export { EMBED_ATTRIBUTES, EMBED_HOST_VARIABLES, EMBED_TAG, embedLookOf, embedSn
 export { SubagentActivityPlugin, SubagentPulse, SUBAGENT_ACTIVITY_PLUGIN_NAME, } from './plugins/subagent-activity';
 export { loopPlugins, type LoopPresetOptions } from './presets';
 export { DocumentExtension, NotebookExtension } from './extensions';
-export { BEHAVIOURS as APP_BEHAVIOUR_ORDER, DEFAULT_BEHAVIOURS as APP_DEFAULT_BEHAVIOURS, behaviourFor, classesOf, isReadOnly, toolBehaviours, toolEscalations, type BehaviourOptions, type ToolArguments, APP_SCHEMA, APPSPEC_KEY_ORDER, DEFAULT_LAYOUTS as APP_DEFAULT_LAYOUTS, dumpAppspec, emptyAppspec, parseAppspec, AppRenderer, checkApp, checkAppspec, type AppCheck, type CheckContext, defineAppPlugin, type AppRendererProps, type AppInstance, appLayoutOptions, readAppspecYaml, writeAppspecYaml, type ParsedAppspec, } from './apps';
+export { BEHAVIOURS as APP_BEHAVIOUR_ORDER, DEFAULT_BEHAVIOURS as APP_DEFAULT_BEHAVIOURS, behaviourFor, classesOf, isReadOnly, toolBehaviours, toolEscalations, type BehaviourOptions, type ToolArguments, APP_SCHEMA, APPSPEC_KEY_ORDER, DEFAULT_LAYOUTS as APP_DEFAULT_LAYOUTS, dumpAppspec, emptyAppspec, parseAppspec, AppRenderer, checkApp, checkAppspec, isOrganizationFrame, ORGANIZATION_FRAME_PREFIX, type AppCheck, type CheckContext, defineAppPlugin, type AppRendererProps, type AppInstance, appLayoutOptions, readAppspecYaml, writeAppspecYaml, type ParsedAppspec, } from './apps';

package/lib/loop/index.js

@@ -98,4 +98,4 @@ export { loopPlugins } from './presets';
 export { DocumentExtension, NotebookExtension } from './extensions';
 // Applications: what one does when its agent calls a tool — the rules a
 // person wrote, decided on what the tool does.
-export { BEHAVIOURS as APP_BEHAVIOUR_ORDER, DEFAULT_BEHAVIOURS as APP_DEFAULT_BEHAVIOURS, behaviourFor, classesOf, isReadOnly, toolBehaviours, toolEscalations, APP_SCHEMA, APPSPEC_KEY_ORDER, DEFAULT_LAYOUTS as APP_DEFAULT_LAYOUTS, dumpAppspec, emptyAppspec, parseAppspec, AppRenderer, checkApp, checkAppspec, defineAppPlugin, appLayoutOptions, readAppspecYaml, writeAppspecYaml, } from './apps';
+export { BEHAVIOURS as APP_BEHAVIOUR_ORDER, DEFAULT_BEHAVIOURS as APP_DEFAULT_BEHAVIOURS, behaviourFor, classesOf, isReadOnly, toolBehaviours, toolEscalations, APP_SCHEMA, APPSPEC_KEY_ORDER, DEFAULT_LAYOUTS as APP_DEFAULT_LAYOUTS, dumpAppspec, emptyAppspec, parseAppspec, AppRenderer, checkApp, checkAppspec, isOrganizationFrame, ORGANIZATION_FRAME_PREFIX, defineAppPlugin, appLayoutOptions, readAppspecYaml, writeAppspecYaml, } from './apps';

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@datalayer/agent-runtimes",
-    "version": "1.3.44",
+    "version": "1.3.46",
     "type": "module",
     "workspaces": [
         ".",