@datalayer/agent-runtimes 1.5.14 → 1.5.16

package/lib/apps/apps/records.d.ts

@@ -48,6 +48,19 @@ export declare const RUN_END_WORDS: Record<string, string>;
 export declare function runEndOf(entry: RecordEntry): string;
 /** An entry in words: its summary, or how its run ended when its words are not kept. */
 export declare function entrySaid(entry: RecordEntry): string;
+/**
+ * The mark around what the runtime tells an application of a turn a personal
+ * agent asked over PAP or PACT, before the request (`asked_for_said`,
+ * `ASKED_FOR_TAG` in agent_runtimes.loop.apps.pap_company).
+ */
+export declare const ASKED_FOR_TAG = "asked-for";
+/**
+ * What a person asked, as they are shown it: without what the runtime told
+ * the application before their words (PAP_DATALAYER, decided 2026-10-14).
+ * The record keeps it for the application's builder; the person never wrote
+ * it, so *Your conversations* and a thread opened again leave it out.
+ */
+export declare function askedOf(text: string): string;
 /** A session in a sentence: how many calls, what stopped it, how it ended. */
 export declare function sessionSentence(entries: readonly RecordEntry[]): string;
 /**

package/lib/apps/apps/records.js

@@ -49,6 +49,30 @@ export function runEndOf(entry) {
 export function entrySaid(entry) {
     return entry.summary || RUN_END_WORDS[runEndOf(entry)] || '';
 }
+/**
+ * The mark around what the runtime tells an application of a turn a personal
+ * agent asked over PAP or PACT, before the request (`asked_for_said`,
+ * `ASKED_FOR_TAG` in agent_runtimes.loop.apps.pap_company).
+ */
+export const ASKED_FOR_TAG = 'asked-for';
+/**
+ * What a person asked, as they are shown it: without what the runtime told
+ * the application before their words (PAP_DATALAYER, decided 2026-10-14).
+ * The record keeps it for the application's builder; the person never wrote
+ * it, so *Your conversations* and a thread opened again leave it out.
+ */
+export function askedOf(text) {
+    const open = `<${ASKED_FOR_TAG}>`;
+    const close = `</${ASKED_FOR_TAG}>`;
+    if (!text.startsWith(open)) {
+        return text;
+    }
+    const end = text.indexOf(close);
+    if (end < 0) {
+        throw new Error(`What was asked opens <${ASKED_FOR_TAG}> and never closes it.`);
+    }
+    return text.slice(end + close.length).trimStart();
+}
 /** A session in a sentence: how many calls, what stopped it, how it ended. */
 export function sessionSentence(entries) {
     const calls = entries.filter(entry => entry.kind === 'tool_call').length;

package/lib/apps/embed/embedSession.js

@@ -4,6 +4,7 @@
  */
 import { windowTurnErrorOf } from '../../chat/base/loopWindow';
 import { AGUI_NAME } from '@datalayer/reactor/ui';
+import { askedOf } from '../apps/records';
 /** Where a visit's session is kept in the host's storage: `<prefix>:<app>:<visit>`. */
 export const EMBED_SESSION_KEY_PREFIX = 'datalayer-app:session';
 /**
@@ -115,7 +116,14 @@ export function messagesOfThread(messages) {
             typeof id === 'string' &&
             typeof content === 'string' &&
             content.trim()) {
-            drawn.push({ id, role, content, createdAt: new Date() });
+            // A turn a personal agent asked: what the runtime told the application
+            // before the person's words is never shown to them (decided 2026-10-14).
+            drawn.push({
+                id,
+                role,
+                content: role === 'user' ? askedOf(content) : content,
+                createdAt: new Date(),
+            });
         }
     }
     return drawn;

package/lib/chat/base/ChatBase.js

@@ -32,6 +32,8 @@ import { useCoreStore } from '@datalayer/core';
 import { DEFAULT_SERVICE_URLS } from '@datalayer/core/lib/api/constants';
 import { useChatStore } from '../../stores/chatStore';
 import { useConversationStore } from '../../stores/conversationStore';
+import { askedOf } from '../../apps/apps/records';
+import { extractChatMessagesFromFullContext } from './fullContextMessages';
 import { generateMessageId, createUserMessage, createAssistantMessage, } from '../../types/messages';
 import { AI_MODEL_CATALOGUE, DEFAULT_MODEL, isChatModel, } from '../../specs/models';
 import { internalQueryClient, isToolCallMessage, convertHistoryToDisplayItems, createProtocolAdapter, getApiBaseFromConfig, sanitizeAssistantContent, } from '../../utils';
@@ -315,99 +317,6 @@ function formatToolResultFallback(result) {
         return 'Tool completed successfully.';
     }
 }
-function extractChatMessagesFromFullContext(fullContext) {
-    if (!fullContext) {
-        return [];
-    }
-    const rawMessages = Array.isArray(fullContext.messages)
-        ? fullContext.messages
-        : [];
-    return rawMessages
-        .map((msg, index) => {
-        const role = String(msg.role || '').toLowerCase();
-        const timestampValue = typeof msg.timestamp === 'string' && msg.timestamp.length > 0
-            ? msg.timestamp
-            : new Date().toISOString();
-        const createdAtRaw = new Date(timestampValue);
-        const createdAt = Number.isNaN(createdAtRaw.getTime())
-            ? new Date()
-            : createdAtRaw;
-        const rawContent = typeof msg.content === 'string'
-            ? msg.content
-            : JSON.stringify(msg.content ?? '');
-        const isToolCall = Boolean(msg.isToolCall);
-        const isToolResult = Boolean(msg.isToolResult);
-        const toolCallId = typeof msg.toolCallId === 'string' && msg.toolCallId.length > 0
-            ? msg.toolCallId
-            : undefined;
-        const toolName = typeof msg.toolName === 'string' && msg.toolName.length > 0
-            ? msg.toolName
-            : undefined;
-        // Tool-call turns arrive as assistant messages whose `content` is the
-        // JSON-encoded tool arguments. Reconstruct a structured `toolCalls`
-        // entry so it renders as a tool card (matching the live stream) instead
-        // of leaking raw JSON into the transcript.
-        if (isToolCall) {
-            let args = {};
-            if (rawContent) {
-                try {
-                    const parsed = JSON.parse(rawContent);
-                    if (parsed &&
-                        typeof parsed === 'object' &&
-                        !Array.isArray(parsed)) {
-                        args = parsed;
-                    }
-                }
-                catch {
-                    args = {};
-                }
-            }
-            const resolvedToolCallId = toolCallId || `history-tc-${index}`;
-            return {
-                id: `history-toolcall-${index}-${timestampValue}`,
-                role: 'assistant',
-                content: '',
-                createdAt,
-                toolCalls: [
-                    {
-                        type: 'tool-call',
-                        toolCallId: resolvedToolCallId,
-                        toolName: toolName || 'tool',
-                        args,
-                        status: 'completed',
-                    },
-                ],
-            };
-        }
-        // Tool results arrive as `role: 'tool'` messages; keep them (with the
-        // matching toolCallId) so `convertHistoryToDisplayItems` can merge the
-        // result into its tool card.
-        if (isToolResult || role === 'tool') {
-            return {
-                id: `history-toolresult-${index}-${timestampValue}`,
-                role: 'tool',
-                content: rawContent,
-                createdAt,
-                metadata: {
-                    toolCallId,
-                    toolName,
-                },
-            };
-        }
-        // Only hydrate conversational turns in the visible history.
-        // System messages may contain internal prompts and metadata.
-        if (role !== 'user' && role !== 'assistant') {
-            return null;
-        }
-        return {
-            id: `history-${role}-${index}-${timestampValue}`,
-            role,
-            content: rawContent,
-            createdAt,
-        };
-    })
-        .filter((m) => m !== null);
-}
 function parseEnabledMcpToolsByServer(mcpStatusData) {
     if (!mcpStatusData || typeof mcpStatusData !== 'object') {
         return null;
@@ -3867,7 +3776,9 @@ showToolApprovalBanner = true, pendingApprovals: pendingApprovalsProp, onApprove
         typingSuggestions: resolvedSuggestions?.map(item => item.message || item.title), autoFocus: autoFocus, focusTrigger: focusTrigger, padding: padding, onSend: () => handleSend(), onStop: handleStop, disableInputPrompt: disableInputPrompt || disabled || !!overlay || launching, promptVariant: promptVariant, mentionableAgents: mentionableAgents, promptCommands: promptCommands, 
         // The runtime's memory of what was sent to this agent, for the arrow
         // keys — part of the same initial state as the models and tools.
-        promptHistory: configQuery.data?.promptHistory, showTokenUsage: showTokenUsage, showContextRing: showContextRing, agentUsage: agentUsage, showModelSelector: showModelSelector, showToolsMenu: showToolsMenu, showSkillsMenu: showSkillsMenu, codemodeEnabled: codemodeEnabled, onToggleCodemode: onToggleCodemode, isA2AProtocol: isA2AProtocol, showAgentsMenu: showAgentsMenu, agents: footerAgents, selectedAgentId: selectedAgentId ?? footerAgents[0]?.id, onSelectAgent: onSelectAgent, hasConfigData: !!configQuery.data, hasSkillsData: !!skillsQuery.data, 
+        // Without what the runtime told the application before a personal
+        // agent's request (`askedOf`): the person never wrote it.
+        promptHistory: configQuery.data?.promptHistory?.map(askedOf), showTokenUsage: showTokenUsage, showContextRing: showContextRing, agentUsage: agentUsage, showModelSelector: showModelSelector, showToolsMenu: showToolsMenu, showSkillsMenu: showSkillsMenu, codemodeEnabled: codemodeEnabled, onToggleCodemode: onToggleCodemode, isA2AProtocol: isA2AProtocol, showAgentsMenu: showAgentsMenu, agents: footerAgents, selectedAgentId: selectedAgentId ?? footerAgents[0]?.id, onSelectAgent: onSelectAgent, hasConfigData: !!configQuery.data, hasSkillsData: !!skillsQuery.data, 
         // So the bar can tell "not here yet" from "not coming": a chat whose
         // agent has no config endpoint waits for ever otherwise.
         configLoading: configQuery.isLoading, models: offeredModels, 

package/lib/chat/base/fullContextMessages.d.ts

@@ -0,0 +1,2 @@
+import type { ChatMessage } from '../../types/messages';
+export declare function extractChatMessagesFromFullContext(fullContext: Record<string, unknown> | null): ChatMessage[];

package/lib/chat/base/fullContextMessages.js

@@ -0,0 +1,110 @@
+/*
+ * Copyright (c) 2025-2026 Datalayer, Inc.
+ * Distributed under the terms of the Modified BSD License.
+ */
+/**
+ * A chat's conversation as the runtime's agent holds it (`fullContext`, from
+ * the `agent.snapshot` it sends), drawn as messages — kept out of `ChatBase`
+ * so it can be read and tested without rendering a chat.
+ *
+ * A shipped application's page opens on this conversation, so a turn a
+ * personal agent asked over PAP or PACT is drawn through `askedOf`: the
+ * preamble the runtime told the application (`<asked-for>…</asked-for>`) is
+ * kept in the record for the builder and never shown to the person.
+ */
+import { askedOf } from '../../apps/apps/records';
+export function extractChatMessagesFromFullContext(fullContext) {
+    if (!fullContext) {
+        return [];
+    }
+    const rawMessages = Array.isArray(fullContext.messages)
+        ? fullContext.messages
+        : [];
+    return rawMessages
+        .map((msg, index) => {
+        const role = String(msg.role || '').toLowerCase();
+        const timestampValue = typeof msg.timestamp === 'string' && msg.timestamp.length > 0
+            ? msg.timestamp
+            : new Date().toISOString();
+        const createdAtRaw = new Date(timestampValue);
+        const createdAt = Number.isNaN(createdAtRaw.getTime())
+            ? new Date()
+            : createdAtRaw;
+        const rawContent = typeof msg.content === 'string'
+            ? msg.content
+            : JSON.stringify(msg.content ?? '');
+        const isToolCall = Boolean(msg.isToolCall);
+        const isToolResult = Boolean(msg.isToolResult);
+        const toolCallId = typeof msg.toolCallId === 'string' && msg.toolCallId.length > 0
+            ? msg.toolCallId
+            : undefined;
+        const toolName = typeof msg.toolName === 'string' && msg.toolName.length > 0
+            ? msg.toolName
+            : undefined;
+        // Tool-call turns arrive as assistant messages whose `content` is the
+        // JSON-encoded tool arguments. Reconstruct a structured `toolCalls`
+        // entry so it renders as a tool card (matching the live stream) instead
+        // of leaking raw JSON into the transcript.
+        if (isToolCall) {
+            let args = {};
+            if (rawContent) {
+                try {
+                    const parsed = JSON.parse(rawContent);
+                    if (parsed &&
+                        typeof parsed === 'object' &&
+                        !Array.isArray(parsed)) {
+                        args = parsed;
+                    }
+                }
+                catch {
+                    args = {};
+                }
+            }
+            const resolvedToolCallId = toolCallId || `history-tc-${index}`;
+            return {
+                id: `history-toolcall-${index}-${timestampValue}`,
+                role: 'assistant',
+                content: '',
+                createdAt,
+                toolCalls: [
+                    {
+                        type: 'tool-call',
+                        toolCallId: resolvedToolCallId,
+                        toolName: toolName || 'tool',
+                        args,
+                        status: 'completed',
+                    },
+                ],
+            };
+        }
+        // Tool results arrive as `role: 'tool'` messages; keep them (with the
+        // matching toolCallId) so `convertHistoryToDisplayItems` can merge the
+        // result into its tool card.
+        if (isToolResult || role === 'tool') {
+            return {
+                id: `history-toolresult-${index}-${timestampValue}`,
+                role: 'tool',
+                content: rawContent,
+                createdAt,
+                metadata: {
+                    toolCallId,
+                    toolName,
+                },
+            };
+        }
+        // Only hydrate conversational turns in the visible history.
+        // System messages may contain internal prompts and metadata.
+        if (role !== 'user' && role !== 'assistant') {
+            return null;
+        }
+        // A turn a personal agent asked: what the runtime told the application
+        // before the person's words is never shown to them (decided 2026-10-14).
+        return {
+            id: `history-${role}-${index}-${timestampValue}`,
+            role,
+            content: role === 'user' ? askedOf(rawContent) : rawContent,
+            createdAt,
+        };
+    })
+        .filter((m) => m !== null);
+}

package/lib/specs/apps.js

@@ -1779,12 +1779,14 @@ export const EXCHANGE_DESK_APP_0_0_2 = {
             },
         ],
         verified: {
-            live: [],
+            live: [
+                "Drilled on r1 on 14 October 2026 (runtime image 0.0.34): shipped at its own domain, asked by a person's own agent signed in through Datalayer with orders:read and orders:write, asked to exchange order ord_7Hk2 for size L, it proposed the exchange (Exchange order ord_7Hk2 for size L., awaiting the person's approval) and went on to tell them in its own words that nothing was done yet.",
+            ],
             recorded: [
                 "Its exchange_order runs in process in Datalayer's own tests against a stand-in for Manzanita's back office: one exchange per confirmed operation, a retry answered as already done.",
             ],
             unverified: [
-                "Drilled on r1 on 13 October 2026, twice: shipped at its own domain, it answered a personal agent signed out, and a person signed in through Datalayer granted orders:read and orders:write. The second time it knew who had signed in, but asked to exchange, it looked for the order first and proposed nothing; it now proposes the exchange at once, and Manzanita checks the order when it is done. Drilled a third time the same evening: signed in, asked to exchange, it said it could not — asked by a person's own agent, it was not given its exchange_order (fixed). Drilled a fourth time the same night, given it: proposing the exchange ended its answer, and the personal agent was told it could not answer just now (fixed, not yet released).",
+                "Drilled on r1 on 13 October 2026, twice: shipped at its own domain, it answered a personal agent signed out, and a person signed in through Datalayer granted orders:read and orders:write. The second time it knew who had signed in, but asked to exchange, it looked for the order first and proposed nothing; it now proposes the exchange at once, and Manzanita checks the order when it is done. Drilled a third time the same evening: signed in, asked to exchange, it said it could not — asked by a person's own agent, it was not given its exchange_order (fixed). Drilled a fourth time the same night, given it: proposing the exchange ended its answer, and the personal agent was told it could not answer just now (fixed, released in runtime image 0.0.34).",
             ],
         },
     },
@@ -1814,8 +1816,8 @@ export const EXCHANGE_DESK_APP_0_0_2 = {
         documents: [],
         alternatives: [],
     },
-    enabled: false,
-    unavailable_because: "Asked by a person's own agent, proposing an exchange ends its answer until a fix is released.",
+    enabled: true,
+    unavailable_because: '',
     tags: ['example', 'companies', 'python'],
     icon: 'apps',
     emoji: '🏪',
@@ -7029,11 +7031,14 @@ export const APP_SOURCES = {
                 },
             ],
             verified: {
+                live: [
+                    "Drilled on r1 on 14 October 2026 (runtime image 0.0.34): shipped at its own domain, asked by a person's own agent signed in through Datalayer with orders:read and orders:write, asked to exchange order ord_7Hk2 for size L, it proposed the exchange (Exchange order ord_7Hk2 for size L., awaiting the person's approval) and went on to tell them in its own words that nothing was done yet.",
+                ],
                 recorded: [
                     "Its exchange_order runs in process in Datalayer's own tests against a stand-in for Manzanita's back office: one exchange per confirmed operation, a retry answered as already done.",
                 ],
                 unverified: [
-                    "Drilled on r1 on 13 October 2026, twice: shipped at its own domain, it answered a personal agent signed out, and a person signed in through Datalayer granted orders:read and orders:write. The second time it knew who had signed in, but asked to exchange, it looked for the order first and proposed nothing; it now proposes the exchange at once, and Manzanita checks the order when it is done. Drilled a third time the same evening: signed in, asked to exchange, it said it could not — asked by a person's own agent, it was not given its exchange_order (fixed). Drilled a fourth time the same night, given it: proposing the exchange ended its answer, and the personal agent was told it could not answer just now (fixed, not yet released).",
+                    "Drilled on r1 on 13 October 2026, twice: shipped at its own domain, it answered a personal agent signed out, and a person signed in through Datalayer granted orders:read and orders:write. The second time it knew who had signed in, but asked to exchange, it looked for the order first and proposed nothing; it now proposes the exchange at once, and Manzanita checks the order when it is done. Drilled a third time the same evening: signed in, asked to exchange, it said it could not — asked by a person's own agent, it was not given its exchange_order (fixed). Drilled a fourth time the same night, given it: proposing the exchange ended its answer, and the personal agent was told it could not answer just now (fixed, released in runtime image 0.0.34).",
                 ],
             },
         },
@@ -7044,8 +7049,6 @@ export const APP_SOURCES = {
         deployment: {
             hosted: {},
         },
-        enabled: false,
-        unavailable_because: "Asked by a person's own agent, proposing an exchange ends its answer until a fix is released.",
         tags: ['example', 'companies', 'python'],
         emoji: '🏪',
     },

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@datalayer/agent-runtimes",
-    "version": "1.5.14",
+    "version": "1.5.16",
     "type": "module",
     "workspaces": [
         ".",