@datalayer/agent-runtimes 1.5.16 → 1.5.18

package/lib/apps/apps/appspec.d.ts

@@ -24,7 +24,7 @@
  *
  * @module apps/apps/appspec
  */
-import type { AppAccent, AppThemeMode, AppThemeVariant, AppAssistantCharacter, AppEmbedMode, PapProfile, AppCustomComponentSpec, AppVoiceSpec, AppKind, AppLayout, AppPageOutputComponent, AppSpec } from '../../types/agentspecs';
+import type { AppAccent, AppThemeMode, AppThemeVariant, AppAssistantCharacter, AppEmbedMode, PapProfile, AppCustomComponentSpec, AppVoiceSpec, AppKind, AppLayout, AppPageOutputComponent, AppSpec, UiChoice } from '../../types/agentspecs';
 /** The version of the spec itself. */
 export declare const APP_SCHEMA = "loop.app/v1";
 /** The language an application's own words are in, unless it says (LOOP P-26). */
@@ -53,6 +53,36 @@ export declare const APP_ASSISTANT_CHARACTER_ID: RegExp;
 export declare function isAssistantCharacterId(value: unknown): value is AppAssistantCharacter;
 /** The layout a kind starts with. */
 export declare const DEFAULT_LAYOUTS: Record<AppKind, AppLayout>;
+/** The media type of an answer drawn as A2UI surfaces. */
+export declare const A2UI_OUTPUT = "application/json+a2ui";
+/** What `uiFor` reads of an application besides its kind. */
+export interface AppUiFacts {
+    /** Its layout; its kind's own when unsaid. */
+    layout?: AppLayout;
+    /** The media types it answers in. */
+    outputs?: readonly string[];
+    /** It signs people in at companies (`pap.connections`). */
+    signsIn?: boolean;
+    /** It has components of its own (`interface.customComponents`). */
+    ownComponents?: boolean;
+}
+/**
+ * The UI plugins an application is drawn with (AGENTIC_UI R8), as its `ui`
+ * lists them: what `appPreset` mounts for it. A decision: its page alone,
+ * drawn by its host. Every other kind: the conversation — `chat`, which
+ * stands for the conversation base the runtime mounts — then the A2UI
+ * surfaces when it answers in `application/json+a2ui`, the sign-in card when
+ * it signs people in at companies, its page, its layout and the Canvas's
+ * blocks when its layout is not `chat`, and its own components when it has
+ * some. What a host adds (the Preview's sidebar, a frame) is not the
+ * application's.
+ *
+ * agentspecs' `ui_for` is the same function: both are held to
+ * `agent_runtimes/tests/fixtures/app_ui.json`.
+ */
+export declare function uiFor(kind: AppKind, facts?: AppUiFacts): UiChoice[];
+/** The UI plugins an application is drawn with, by what its spec says (`uiFor`). */
+export declare function uiOf(app: Pick<AppSpec, 'kind' | 'interface' | 'pap'>): UiChoice[];
 /** What an application keeps of what it did, when it does not say. */
 export declare const DEFAULT_RECORD_INCLUDE: string[];
 type Data = Record<string, unknown>;
@@ -97,9 +127,11 @@ export interface ParsedAppspec {
  */
 export declare function parseAppspec(document: unknown): ParsedAppspec;
 /**
- * What is wrong with the UI an application says its answers render in
- * (AGENT_PROTOCOLS PS-04), as agentspecs says it: an id the catalogue does not
- * know or said twice, one not enabled while it is offered.
+ * What is wrong with the UI plugins an application names (AGENTIC_UI R8), in
+ * the sentences agentspecs says (`ui_choices_problems`): a plugin the
+ * catalogue does not have or said twice — a renderer named as a plugin is
+ * refused —, a renderer the catalogue does not have or the plugin may not be
+ * exposed through, and one not enabled while the application is offered.
  */
 export declare function uiProblems(app: Pick<AppSpec, 'ui' | 'enabled'>): string[];
 /**

package/lib/apps/apps/appspec.js

@@ -5,6 +5,7 @@
 import { BEHAVIOURS } from './rules';
 import { PROTOCOL_CATALOGUE } from '../../specs/protocols';
 import { UI_CATALOGUE } from '../../specs/ui';
+import { UI_RENDERER_CATALOGUE } from '../../specs/uiRenderers';
 import { DEFAULT_MAX_FILES, DEFAULT_UPLOAD_MB } from './uploads';
 /** The version of the spec itself. */
 export const APP_SCHEMA = 'loop.app/v1';
@@ -73,6 +74,50 @@ export const DEFAULT_LAYOUTS = {
     decision: 'page',
     worker: 'split',
 };
+/** The media type of an answer drawn as A2UI surfaces. */
+export const A2UI_OUTPUT = 'application/json+a2ui';
+/**
+ * The UI plugins an application is drawn with (AGENTIC_UI R8), as its `ui`
+ * lists them: what `appPreset` mounts for it. A decision: its page alone,
+ * drawn by its host. Every other kind: the conversation — `chat`, which
+ * stands for the conversation base the runtime mounts — then the A2UI
+ * surfaces when it answers in `application/json+a2ui`, the sign-in card when
+ * it signs people in at companies, its page, its layout and the Canvas's
+ * blocks when its layout is not `chat`, and its own components when it has
+ * some. What a host adds (the Preview's sidebar, a frame) is not the
+ * application's.
+ *
+ * agentspecs' `ui_for` is the same function: both are held to
+ * `agent_runtimes/tests/fixtures/app_ui.json`.
+ */
+export function uiFor(kind, facts = {}) {
+    if (kind === 'decision') {
+        return [{ plugin: 'app-page' }];
+    }
+    const drawn = [{ plugin: 'chat' }];
+    if (facts.outputs?.includes(A2UI_OUTPUT)) {
+        drawn.push({ plugin: 'a2ui-surface', renderer: 'a2ui' });
+    }
+    if (facts.signsIn) {
+        drawn.push({ plugin: 'pap-sign-in' });
+    }
+    if ((facts.layout ?? DEFAULT_LAYOUTS[kind]) !== 'chat') {
+        drawn.push({ plugin: 'page-layout' }, { plugin: 'app-page' }, { plugin: 'canvas-blocks' });
+    }
+    if (facts.ownComponents) {
+        drawn.push({ plugin: 'app-components' });
+    }
+    return drawn;
+}
+/** The UI plugins an application is drawn with, by what its spec says (`uiFor`). */
+export function uiOf(app) {
+    return uiFor(app.kind, {
+        layout: app.interface.layout,
+        outputs: app.interface.outputs,
+        signsIn: Boolean(app.pap?.connections.length),
+        ownComponents: Boolean(app.interface.customComponents?.length),
+    });
+}
 /** What an application keeps of what it did, when it does not say. */
 export const DEFAULT_RECORD_INCLUDE = ['conversations', 'actions', 'approvals'];
 const DEFAULT_KEEP_FOR = '1_years';
@@ -90,6 +135,30 @@ const texts = (value) => Array.isArray(value)
     ? value.filter((item) => typeof item === 'string')
     : [];
 const records = (value) => Array.isArray(value) ? value.filter(isData) : [];
+/**
+ * An application's UI plugins as its document says them (AGENTIC_UI R8):
+ * `{plugin, renderer}` each. Anything else — a bare id, the old shape — is
+ * not read as a plugin: `parseAppspec` refuses it (`uiShapeProblems`).
+ */
+const uiChoices = (value) => Array.isArray(value)
+    ? value.filter(isData).map(item => ({
+        plugin: text(item.plugin),
+        ...(text(item.renderer) ? { renderer: text(item.renderer) } : {}),
+    }))
+    : [];
+/**
+ * An entry of `ui` that is not `{plugin, renderer}`, in agentspecs' sentence
+ * (`ui_choices_problems`): a bare id is refused, never read as the plugin it
+ * names, and one naming a renderer says how to write it.
+ */
+const uiShapeProblems = (value) => Array.isArray(value)
+    ? value
+        .filter(item => !isData(item))
+        .map(item => `\`ui\` lists UI plugins, each as \`{plugin, renderer}\`: ${JSON.stringify(item)} is not one` +
+        (typeof item === 'string' && UI_RENDERER_CATALOGUE[item]
+            ? ` (${JSON.stringify(item)} is a UI renderer: name the plugin it renders, and say it as its \`renderer\`).`
+            : '.'))
+    : [];
 /**
  * One turn of a test's conversation as its document says it (STUDIO E-01):
  * what it says, chooses or presses, with a press's payload; nothing it does
@@ -133,7 +202,8 @@ export function emptyAppspec(kind = 'chat') {
         contents: [],
         connections: [],
         protocols: [],
-        ui: [],
+        // A blank application starts with its kind's UI plugins (AGENTIC_UI R8).
+        ui: uiFor(kind),
         rules: [],
         permissions: {
             spaces: [],
@@ -937,6 +1007,7 @@ export function parseAppspec(document) {
             problems.push(`\`${key}\` is not a field of the spec.`);
         }
     }
+    problems.push(...uiShapeProblems(data.ui));
     const schema = text(data.schema, APP_SCHEMA);
     if (schema !== APP_SCHEMA) {
         problems.push(`This reads ${APP_SCHEMA}; the application is written in ${schema}.`);
@@ -984,7 +1055,7 @@ export function parseAppspec(document) {
         contents: texts(data.contents),
         connections: records(data.connections).map(parseConnection),
         protocols: texts(data.protocols),
-        ui: texts(data.ui),
+        ui: uiChoices(data.ui),
         rules: records(data.rules).map(parseRule),
         permissions: {
             spaces: records(permissions.spaces).map(grant => ({
@@ -1097,25 +1168,45 @@ export function parseAppspec(document) {
     return { app, problems };
 }
 /**
- * What is wrong with the UI an application says its answers render in
- * (AGENT_PROTOCOLS PS-04), as agentspecs says it: an id the catalogue does not
- * know or said twice, one not enabled while it is offered.
+ * What is wrong with the UI plugins an application names (AGENTIC_UI R8), in
+ * the sentences agentspecs says (`ui_choices_problems`): a plugin the
+ * catalogue does not have or said twice — a renderer named as a plugin is
+ * refused —, a renderer the catalogue does not have or the plugin may not be
+ * exposed through, and one not enabled while the application is offered.
  */
 export function uiProblems(app) {
     const problems = [];
     const seen = [];
-    for (const id of app.ui) {
+    for (const choice of app.ui) {
+        const id = choice.plugin;
         if (seen.includes(id)) {
-            problems.push(`It lists the UI '${id}' twice.`);
+            problems.push(`It lists the UI plugin '${id}' twice.`);
             continue;
         }
         seen.push(id);
         const spec = UI_CATALOGUE[id];
         if (!spec) {
-            problems.push(`There is no UI named '${id}': one of ${Object.keys(UI_CATALOGUE).sort().join(', ')}.`);
+            problems.push(`There is no UI plugin named '${id}': one of ${Object.keys(UI_CATALOGUE).sort().join(', ')}.` +
+                (UI_RENDERER_CATALOGUE[id]
+                    ? ` '${id}' is a UI renderer: say it as a plugin's \`renderer\`.`
+                    : ''));
+            continue;
+        }
+        if (choice.renderer === undefined) {
+            continue;
+        }
+        const renderer = UI_RENDERER_CATALOGUE[choice.renderer];
+        if (!renderer) {
+            problems.push(`There is no UI renderer named '${choice.renderer}': one of ${Object.keys(UI_RENDERER_CATALOGUE).sort().join(', ')}.`);
+        }
+        else if (!spec.renderers.includes(renderer.id)) {
+            problems.push(`The UI plugin ${spec.name} ('${id}') is not exposed through ${renderer.name}: ` +
+                (spec.renderers.length > 0
+                    ? `through ${spec.renderers.join(', ')} only.`
+                    : 'through no renderer.'));
         }
-        else if (app.enabled && !spec.enabled) {
-            problems.push(`The UI ${spec.name} ('${id}') is not enabled: an application cannot render in it yet.`);
+        else if (app.enabled && !renderer.enabled) {
+            problems.push(`The UI renderer ${renderer.name} ('${renderer.id}') is not enabled: an application cannot be exposed through it yet.`);
         }
     }
     return problems;
@@ -1426,7 +1517,9 @@ export function dumpAppspec(app) {
         .value('as', connection.as, 'owner')
         .list('only', connection.only).data))
         .list('protocols', app.protocols)
-        .list('ui', app.ui)
+        .list('ui', app.ui.map(choice => choice.renderer
+        ? { plugin: choice.plugin, renderer: choice.renderer }
+        : { plugin: choice.plugin }))
         .part('pap', dumpPap(app.pap))
         .part('pact', dumpPact(app.pact))
         .part('commerce', dumpCommerce(app.commerce))

package/lib/apps/apps/threads.d.ts

@@ -13,12 +13,32 @@
  *
  * @module apps/apps/threads
  */
+import type { ResumedThread } from '../../types/chat';
 import type { ChatMessage } from '../../types/messages';
 /** What opening a thread says, in a person's words. */
 export declare const THREAD_WORDS: {
     readonly opening: "Opening your conversation…";
     readonly notOpened: (detail: string) => string;
 };
+/**
+ * The deployment an application's agent is created for, as its create
+ * payload names it (`app_instance.deployment_uid`, `appDatalayerCreatePayload`),
+ * or `''` for a Preview, a test or no application.
+ */
+export declare function deploymentOfPayload(createPayload: Record<string, unknown> | undefined): string;
+/**
+ * The thread a deployment's chat opens on when its host gave none: a new one,
+ * `id` (PAP_DATALAYER's release gates, found on r1, 14 October 2026).
+ *
+ * A deployment's agent serves every visitor, and what its runtime holds in
+ * memory is the last run's, whoever ran it: drawn as the page's
+ * conversation, a second account opening the same link saw the first
+ * person's turns. A given thread is drawn as given and never replaced by the
+ * runtime's snapshot, so each visitor sees only their own conversation —
+ * this one, or one opened from their history. A Preview, or a chat that runs
+ * no deployment, keeps what it was given.
+ */
+export declare function threadOfVisit(given: ResumedThread | undefined, deploymentUid: string, id: string): ResumedThread | undefined;
 /** The AG-UI messages a session-API stream's `MESSAGES_SNAPSHOT` carries, if one does. */
 export declare function snapshotOfStream(text: string): unknown[] | undefined;
 /**

package/lib/apps/apps/threads.js

@@ -8,6 +8,37 @@ export const THREAD_WORDS = {
     opening: 'Opening your conversation…',
     notOpened: (detail) => `Your conversation could not be opened, so this is a new one: ${detail}`,
 };
+/**
+ * The deployment an application's agent is created for, as its create
+ * payload names it (`app_instance.deployment_uid`, `appDatalayerCreatePayload`),
+ * or `''` for a Preview, a test or no application.
+ */
+export function deploymentOfPayload(createPayload) {
+    const instance = createPayload?.app_instance;
+    if (!instance || typeof instance !== 'object') {
+        return '';
+    }
+    const uid = instance.deployment_uid;
+    return typeof uid === 'string' ? uid.trim() : '';
+}
+/**
+ * The thread a deployment's chat opens on when its host gave none: a new one,
+ * `id` (PAP_DATALAYER's release gates, found on r1, 14 October 2026).
+ *
+ * A deployment's agent serves every visitor, and what its runtime holds in
+ * memory is the last run's, whoever ran it: drawn as the page's
+ * conversation, a second account opening the same link saw the first
+ * person's turns. A given thread is drawn as given and never replaced by the
+ * runtime's snapshot, so each visitor sees only their own conversation —
+ * this one, or one opened from their history. A Preview, or a chat that runs
+ * no deployment, keeps what it was given.
+ */
+export function threadOfVisit(given, deploymentUid, id) {
+    if (given || !deploymentUid) {
+        return given;
+    }
+    return { id, messages: [] };
+}
 /** The AG-UI messages a session-API stream's `MESSAGES_SNAPSHOT` carries, if one does. */
 export function snapshotOfStream(text) {
     let found;

package/lib/apps/plugins/canvas-blocks/index.d.ts

@@ -1,7 +1,8 @@
 /**
- * The Canvas's palette as a contribution point (LOOP C-12): each UI of
- * the catalogue that renders components (`agentspecs/ui`, C-13) is a
- * Reactor plugin contributing its components to `loop.canvas.block`. The
+ * The Canvas's palette as a Contribution Point (LOOP C-12): each UI plugin
+ * of the catalogue that renders components (`agentspecs/ui`, C-13 — the
+ * A2UI surfaces, `a2ui-surface`) has its components contributed to
+ * `loop.canvas.block` by a Reactor plugin of its own, one per UI spec. The
  * palette lists what the enabled plugins contribute, and nothing else; a
  * plugin disabled takes its blocks off it, and an application that uses one
  * of them says so in its setup notes (`blockSetupNotes`).
@@ -24,10 +25,7 @@ type BlocksReader = {
 export declare const canvasBlocksPluginName: (ui: string) => string;
 /** A UI of the catalogue as the Reactor plugin contributing its components as blocks. */
 export declare function uiPluginBlocks(ui: UISpec): ReactorPlugin<Record<string, never>, unknown, unknown>;
-/**
- * The plugins of the catalogue's UI specs that render components and may
- * be named today (`enabled` in the catalogue).
- */
+/** The block plugins of the catalogue's UI plugins that render components. */
 export declare const CANVAS_BLOCK_PLUGINS: ReactorPlugin<Record<string, never>, unknown, unknown>[];
 /**
  * A reactor holding the block plugins given, started, with those named in
@@ -35,8 +33,8 @@ export declare const CANVAS_BLOCK_PLUGINS: ReactorPlugin<Record<string, never>,
  */
 export declare function canvasBlocksReactor(disabled?: readonly string[], plugins?: ReactorPlugin<any, any, any>[]): ReactorPlatform;
 /**
- * The palette of an organization: the block plugins of the UI specs it has
- * turned off (`plugins_off` in IAM, catalogue ids such as 'a2ui') switched
+ * The palette of an organization: the block plugins of the UI plugins it has
+ * turned off (`plugins_off` in IAM, ids of `agentspecs/ui` such as 'a2ui-surface') switched
  * off. A UI of the catalogue that contributes no block takes nothing
  * off; an id the catalogue does not have is said by `unknownPluginsOff`.
  */

package/lib/apps/plugins/canvas-blocks/index.js

@@ -3,9 +3,10 @@
  * Distributed under the terms of the Modified BSD License.
  */
 /**
- * The Canvas's palette as a contribution point (LOOP C-12): each UI of
- * the catalogue that renders components (`agentspecs/ui`, C-13) is a
- * Reactor plugin contributing its components to `loop.canvas.block`. The
+ * The Canvas's palette as a Contribution Point (LOOP C-12): each UI plugin
+ * of the catalogue that renders components (`agentspecs/ui`, C-13 — the
+ * A2UI surfaces, `a2ui-surface`) has its components contributed to
+ * `loop.canvas.block` by a Reactor plugin of its own, one per UI spec. The
  * palette lists what the enabled plugins contribute, and nothing else; a
  * plugin disabled takes its blocks off it, and an application that uses one
  * of them says so in its setup notes (`blockSetupNotes`).
@@ -30,12 +31,9 @@ export function uiPluginBlocks(ui) {
         contributes: ui.components.map(component => contribution(LoopCanvasBlock, { id: component.id, ui: ui.id, component }, { id: component.id })),
     });
 }
-/**
- * The plugins of the catalogue's UI specs that render components and may
- * be named today (`enabled` in the catalogue).
- */
+/** The block plugins of the catalogue's UI plugins that render components. */
 export const CANVAS_BLOCK_PLUGINS = listUI()
-    .filter(ui => ui.enabled && ui.components.length > 0)
+    .filter(ui => ui.components.length > 0)
     .map(uiPluginBlocks);
 /**
  * A reactor holding the block plugins given, started, with those named in
@@ -53,8 +51,8 @@ export function canvasBlocksReactor(disabled = [], plugins = CANVAS_BLOCK_PLUGIN
     return reactor;
 }
 /**
- * The palette of an organization: the block plugins of the UI specs it has
- * turned off (`plugins_off` in IAM, catalogue ids such as 'a2ui') switched
+ * The palette of an organization: the block plugins of the UI plugins it has
+ * turned off (`plugins_off` in IAM, ids of `agentspecs/ui` such as 'a2ui-surface') switched
  * off. A UI of the catalogue that contributes no block takes nothing
  * off; an id the catalogue does not have is said by `unknownPluginsOff`.
  */

package/lib/apps/plugins/canvas-parts/index.d.ts

@@ -32,7 +32,10 @@ export declare const TEST_PARTS: CanvasPartContribution[];
 export declare const EVENT_PARTS: CanvasPartContribution[];
 /** Each protocol of the catalogue (AGENT_PROTOCOLS PS-04): a planned one offered, not enabled. */
 export declare const PROTOCOL_PARTS: CanvasPartContribution[];
-/** Each UI of the catalogue its answers may render in (AGENT_PROTOCOLS PS-04). */
+/**
+ * Each UI plugin of the catalogue (AGENTIC_UI R8): a part of the agent's
+ * interface, dropped on it, then exposed through a renderer it may be.
+ */
 export declare const UI_PARTS: CanvasPartContribution[];
 /** Datalayer's characters for its floating assistant, dropped on the agent (AGENT_PROTOCOLS PS-05). */
 export declare const CHARACTER_PARTS: CanvasPartContribution[];

package/lib/apps/plugins/canvas-parts/index.js

@@ -187,14 +187,18 @@ export const PROTOCOL_PARTS = listProtocolSpecs().map(protocol => ({
     example: protocol.id,
     enabled: protocol.status === 'shipped',
 }));
-/** Each UI of the catalogue its answers may render in (AGENT_PROTOCOLS PS-04). */
+/**
+ * Each UI plugin of the catalogue (AGENTIC_UI R8): a part of the agent's
+ * interface, dropped on it, then exposed through a renderer it may be.
+ */
 export const UI_PARTS = listUI().map(ui => ({
     id: `ui:${ui.id}`,
     kind: 'ui',
     label: ui.name,
     says: ui.description,
-    example: ui.id,
-    enabled: ui.enabled,
+    // The Appspec's `ui` entry it adds: the plugin, its renderer chosen after.
+    example: { plugin: ui.id },
+    enabled: true,
 }));
 /** Datalayer's characters for its floating assistant, dropped on the agent (AGENT_PROTOCOLS PS-05). */
 export const CHARACTER_PARTS = ASSISTANT_CHARACTERS.map(character => ({

package/lib/apps/plugins/chat/ChatView.js

@@ -48,7 +48,7 @@ import { isInactiveSurfaceContribution, orderToolContributions, toolsForChatView
 import { agentBundleToolDefinitions, useAgentCommandTools, } from '../../../tools/adapters/commands';
 import { NONE_EDITOR, seedEditorChoice, setEditorOptions, } from '../shell/editorChoice';
 import { generateMessageId } from '../../../types/messages';
-import { openThread, THREAD_WORDS } from '../../apps/threads';
+import { deploymentOfPayload, openThread, THREAD_WORDS, threadOfVisit, } from '../../apps/threads';
 import { FaceDrawing, PresenceFace, PresenceLine, } from '../../../chat/presence/Presence';
 import { presenceState, presenceToolOf, } from '../../../chat/presence/presenceStatus';
 import { latestSaying, newestIsAnswer, } from '../../../chat/assistant/state';
@@ -1280,9 +1280,10 @@ export default function ChatView({ workspace }) {
      * not published (STUDIO D-15). It speaks to the application's session API,
      * whose refusal says why.
      */
-    const runsApp = Boolean(blueprintTurn?.createPayload?.app_spec ||
-        reactor.getConfig(AGENTS_PLUGIN_NAME)?.datalayerCreatePayload
-            ?.app_spec);
+    const hostCreatePayload = reactor.getConfig(AGENTS_PLUGIN_NAME)?.datalayerCreatePayload;
+    const runsApp = Boolean(blueprintTurn?.createPayload?.app_spec || hostCreatePayload?.app_spec);
+    // The deployment its host runs, if it runs one: its agent is every visitor's.
+    const deploymentUid = deploymentOfPayload(hostCreatePayload);
     const memberToken = useIAMStore(state => state.token);
     /*
      * Without an account (LOOP R-30) the application runs on the visitors'
@@ -1294,13 +1295,28 @@ export default function ChatView({ workspace }) {
     // not know (LOOP R-20): it runs a session of its deployment, and no more.
     const embedToken = reactor.getConfig(AGENTS_PLUGIN_NAME)?.embedToken;
     const iamToken = visitors ? visitor.token : embedToken || memberToken;
+    /*
+     * A deployment's runtime, and the visitors', answer only the application's
+     * own routes (OwnRoutesOnly, PAP_DATALAYER's release gates): its chat calls
+     * nothing else — Stop is its session's, no monitoring stream, no sandbox
+     * socket, no runtime-wide model switch. A Preview runs on the Maker's.
+     */
+    const ownRoutesOnly = Boolean(deploymentUid || visitors);
+    if (ownRoutesOnly && !runsApp) {
+        throw new Error('A deployment’s page runs its application: its host gave no app_spec.');
+    }
     /*
      * A thread opened from the person's history (LOOP P-24): its conversation
      * read from the runtime once it answers — held there, else resumed from
      * its record — then drawn and gone on with on the same thread. One that
      * cannot be opened is said, and a new one starts.
      */
-    const givenThread = config?.thread;
+    /*
+     * A deployment's visit with no thread given opens a new one: its runtime's
+     * agent holds every visitor's turns, never drawn as this person's.
+     */
+    const [visitThreadId] = useState(generateMessageId);
+    const givenThread = useMemo(() => threadOfVisit(config?.thread, deploymentUid, visitThreadId), [config?.thread, deploymentUid, visitThreadId]);
     const [openedThread, setOpenedThread] = useState(null);
     const opening = Boolean(givenThread?.fromRuntime && openedThread?.given !== givenThread.id);
     useEffect(() => {
@@ -1414,6 +1430,9 @@ export default function ChatView({ workspace }) {
                         uiSocket: `${agentServerUrl.replace(/^http/, 'ws')}/api/v1/apps/ui`,
                         // Its files, uploaded before what names them (RU-6).
                         uiFiles: `${agentServerUrl}/api/v1/apps/agents/${encodeURIComponent(agentId)}/files`,
+                        // Each thread a session: Stop is its session's.
+                        appSessions: `${agentServerUrl}/api/v1/apps/sessions`,
+                        ...(ownRoutesOnly ? { ownRoutesOnly: true } : {}),
                     }
                     : {}),
                 agentId,
@@ -1436,6 +1455,7 @@ export default function ChatView({ workspace }) {
         agentServerUrl,
         runsApp,
         iamToken,
+        ownRoutesOnly,
     ]);
     /*
      * The model catalogue, and the builtin tools and skills the agent reports.
@@ -1550,6 +1570,10 @@ export default function ChatView({ workspace }) {
      * to agree.
      */
     const selectModel = useCallback(async (model) => {
+        if (ownRoutesOnly) {
+            // Runtime-wide, and not the application's own: never offered here.
+            throw new Error('A deployment’s chat does not switch its runtime’s model.');
+        }
         setPickedModel(model);
         if (inPage || agentServerUrl === undefined) {
             return;
@@ -1559,7 +1583,7 @@ export default function ChatView({ workspace }) {
             headers: { 'content-type': 'application/json' },
             body: JSON.stringify({ model }),
         }).catch(() => undefined);
-    }, [agentServerUrl, inPage]);
+    }, [agentServerUrl, inPage, ownRoutesOnly]);
     /* `bottom-chat` keeps the prompt in the chat column; `bottom`, the default,
        spans the workspace. */
     const besideChat = config?.promptPlacement === 'bottom-chat';
@@ -1654,7 +1678,8 @@ export default function ChatView({ workspace }) {
         showTokenUsage: chatExtras.showTokenUsage ?? config?.showTokenUsage ?? true,
         showContextRing: true,
         agentUsage: contextUsage ?? undefined,
-        showModelSelector: !presence,
+        // Nor on a deployment's page: the model is its runtime's, for everyone.
+        showModelSelector: !presence && !ownRoutesOnly,
         models: offeredModels,
         decisions,
         selectedModel: activeModel,

package/lib/chat/ChatFloating.js

@@ -35,6 +35,7 @@ import { decisionsAskerAt } from './assistant/decisions';
 import { DecisionAsk } from './assistant/DecisionAsk';
 import { ServerSpeaker } from '../voice/speaker';
 import { useSpokenAnswers } from '../voice/useSpokenAnswers';
+import { readAloud } from '../voice/ReadAloud';
 import { BalloonApprovalMessage, CONVERSATION_BALLOON_WIDTH, ConversationBalloonClose, balloonTailAt, conversationBalloonHeight, conversationBalloonSx, CURRENT_BALLOON_HEIGHT, peekLine, } from './assistant/ConversationBalloon';
 import { ConversationBalloonHeader, CurrentBalloonBody, } from './assistant/BalloonParts';
 import { DEFAULT_BALLOON_DISPLAY, conversationCount, newestToolLine, toolLineText, } from './assistant/toolLine';
@@ -165,7 +166,7 @@ export function ChatFloating({ endpoint, protocol: protocolProp, useStore: useSt
     const [speakerState, setSpeakerState] = useState({
         speaking: false,
     });
-    const speaker = useMemo(() => voice && voice.output === 'always' && voice.speechUrl
+    const speaker = useMemo(() => voice && voice.output !== 'off' && voice.speechUrl
         ? new ServerSpeaker({
             speechUrl: voice.speechUrl,
             voice: voice.voice,
@@ -195,8 +196,15 @@ export function ChatFloating({ endpoint, protocol: protocolProp, useStore: useSt
             window.removeEventListener('keydown', unlock);
         };
     }, [speaker]);
-    useSpokenAnswers(voiceItems, chatBusy, !!speaker && !speechMuted, speaker);
+    // `always`: each answer heard as it is written; `on_request`: a *Read
+    // aloud* under each (VO-21).
+    useSpokenAnswers(voiceItems, chatBusy, !!speaker && voice?.output === 'always' && !speechMuted, speaker);
     const stopSpeaking = useCallback(() => speaker?.stop(), [speaker]);
+    const readAnswerAloud = useCallback((answer) => {
+        if (speaker) {
+            readAloud(speaker, answer);
+        }
+    }, [speaker]);
     const mouthLevel = useMemo(() => (speaker ? () => speaker.level() : undefined), [speaker]);
     const [arriving, setArriving] = useState(false);
     const [leaving, setLeaving] = useState(false);
@@ -1057,7 +1065,7 @@ export function ChatFloating({ endpoint, protocol: protocolProp, useStore: useSt
                     ...poweredByProps,
                 }, description: description, onStateUpdate: onStateUpdate, onNewChat: onNewChat, suggestions: suggestions, submitOnSuggestionClick: submitOnSuggestionClick, hideMessagesAfterToolUI: hideMessagesAfterToolUI, avatarConfig: {
                     showAvatars: true,
-                }, placeholder: "Type a message...", backgroundColor: "canvas.subtle", frontendTools: frontendTools, showModelSelector: showModelSelector, availableModels: availableModels, showToolsMenu: showToolsMenu, showSkillsMenu: showSkillsMenu, showTokenUsage: showTokenUsage, showContextRing: showContextRing, runtimeId: runtimeId, historyEndpoint: historyEndpoint, historyAuthToken: historyAuthToken, pendingPrompt: pendingPrompt ?? suggestionPrompt, inspector: inspector, showInformation: showInformation, onInformationClick: onInformationClick, onToolCallStart: onToolCallStart, onToolCallComplete: onToolCallComplete, showToolApprovalBanner: showToolApprovalBanner, pendingApprovals: pendingApprovals, onApproveApproval: onApproveApproval, onRejectApproval: onRejectApproval, voice: voice, voiceSpeaking: speakerState.speaking, onStopSpeaking: speaker ? stopSpeaking : undefined, ...panelProps, ...assistantChat, onLoadingChange: handleLoadingChange, onDisplayItemsChange: handleDisplayItemsChange, onSendReady: handleSendReady, children: conversationBalloon && currentOpen ? (
+                }, placeholder: "Type a message...", backgroundColor: "canvas.subtle", frontendTools: frontendTools, showModelSelector: showModelSelector, availableModels: availableModels, showToolsMenu: showToolsMenu, showSkillsMenu: showSkillsMenu, showTokenUsage: showTokenUsage, showContextRing: showContextRing, runtimeId: runtimeId, historyEndpoint: historyEndpoint, historyAuthToken: historyAuthToken, pendingPrompt: pendingPrompt ?? suggestionPrompt, inspector: inspector, showInformation: showInformation, onInformationClick: onInformationClick, onToolCallStart: onToolCallStart, onToolCallComplete: onToolCallComplete, showToolApprovalBanner: showToolApprovalBanner, pendingApprovals: pendingApprovals, onApproveApproval: onApproveApproval, onRejectApproval: onRejectApproval, voice: voice, voiceSpeaking: speakerState.speaking, onStopSpeaking: speaker ? stopSpeaking : undefined, onReadAloud: speaker ? readAnswerAloud : undefined, ...panelProps, ...assistantChat, onLoadingChange: handleLoadingChange, onDisplayItemsChange: handleDisplayItemsChange, onSendReady: handleSendReady, children: conversationBalloon && currentOpen ? (
                 // Current: the one thing said or done now, over the composer.
                 _jsx(Box, { px: 3, pt: 3, pb: 2, overflow: "hidden", children: _jsx(CurrentBalloonBody, { text: toolSaid ? undefined : (currentWords ?? description), fullText: toolSaid ? undefined : currentWhole, tool: toolSaid, busy: atWork, speaking: answering && atWork, waiting: atWork && !answering }) })) : (children) }))] }));
     /*
@@ -1109,7 +1117,7 @@ export function ChatFloating({ endpoint, protocol: protocolProp, useStore: useSt
                     }
                     : getPositionStyles(), stageRef: stageRef, onDragStart: stageDrag.onHandlePointerDown, open: isOpen, onToggle: handleToggle, balloon: assistantBalloon, balloonDisplay: balloonDisplay, expandTarget: expandTarget, insist: balloonInsists, onDismiss: dismissAssistant, ownRef: popupRef, mouthLevel: mouthLevel, suggestions: balloonSuggestions, onSuggestion: sendSuggestion, inspector: inspector, onBalloonDisplayChange: changeBalloonDisplay, onStop: chatBusy && chatControls.current
                     ? () => chatControls.current?.stop()
-                    : undefined, onNewChat: !conversation && showNewChatButton ? handleNewChat : undefined, onClear: !conversation && useStoreMode ? handleClear : undefined, onChangeCharacter: onChangeCharacter, speech: speaker
+                    : undefined, onNewChat: !conversation && showNewChatButton ? handleNewChat : undefined, onClear: !conversation && useStoreMode ? handleClear : undefined, onChangeCharacter: onChangeCharacter, speech: speaker && voice?.output === 'always'
                     ? {
                         muted: speechMuted,
                         onToggle: () => {