@datalayer/agent-runtimes 1.5.39 → 1.5.42

package/lib/specs/teams/teams.js

@@ -572,6 +572,77 @@ export const AUTOMATE_REGULATORY_REPORTING_TEAM_SPEC_0_0_1 = {
         storage: 's3://reports/regulatory-submissions/',
     },
 };
+export const CODING_AGENTS_TEAM_SPEC_0_0_1 = {
+    id: 'coding-agents',
+    version: '0.0.1',
+    name: 'Coding Agents',
+    description: `Claude Code writes the change and Codex reviews it, each behind the Shield: a supervisor delegates to them over ACP with a budget, a deadline and the files it may touch, and reads back their plans and their diffs.`,
+    tags: ['coding', 'harness', 'review'],
+    enabled: true,
+    icon: 'code',
+    emoji: '🛡️',
+    color: '#1F6FEB',
+    agentSpecId: '',
+    orchestrationProtocol: 'datalayer',
+    executionMode: 'sequential',
+    supervisor: {
+        name: 'Lead',
+        ref: '',
+        model: 'bedrock:us.anthropic.claude-sonnet-4-6',
+        goal: `Split the request into a change and its review: hand the change to the Coder with the files it may touch, then the diff to the Reviewer, and answer with the change and what the review found.`,
+        instructions: `You lead two coding agents. Hand the change to the Coder with the files it may touch and a deadline, wait for its diff, hand the diff to the Reviewer, and answer with the change and the review. Never edit a file yourself.`,
+        approval: 'auto',
+        canTerminate: true,
+    },
+    routingInstructions: ``,
+    suggestions: [
+        {
+            text: 'Add a test for the function in the open file, then review it.',
+            summary: 'A change and its review',
+            icon: 'code',
+            emoji: '🧪',
+        },
+    ],
+    delegation: {
+        maxDepth: 2,
+        allowPeerDelegation: false,
+        includeGeneralPurpose: false,
+    },
+    context: { sharing: 'shared' },
+    validation: undefined,
+    agents: [
+        {
+            id: 'coder',
+            name: 'Coder',
+            ref: '',
+            harness: 'claude-code',
+            role: 'contributor',
+            goal: `Make the change asked, inside the workspace, in the files the manifest names; answer with what changed and why.`,
+            dependsOn: [],
+            subagents: [],
+            model: '',
+            mcpServer: '',
+            tools: [],
+            trigger: '',
+            approval: 'auto',
+        },
+        {
+            id: 'reviewer',
+            name: 'Reviewer',
+            ref: '',
+            harness: 'codex',
+            role: 'reviewer',
+            goal: `Read the Coder's diff and say what is wrong with it, file by file; edit nothing.`,
+            dependsOn: ['coder'],
+            subagents: [],
+            model: '',
+            mcpServer: '',
+            tools: [],
+            trigger: '',
+            approval: 'auto',
+        },
+    ],
+};
 export const COMPREHENSIVE_SALES_ANALYTICS_TEAM_SPEC_0_0_1 = {
     id: 'comprehensive-sales-analytics',
     version: '0.0.1',
@@ -704,9 +775,9 @@ export const COMPREHENSIVE_SALES_ANALYTICS_TEAM_SPEC_0_0_1 = {
         storage: 's3://reports/sales-analytics/',
     },
 };
-export const CROP_MONITORING_TEAM_SPEC_0_0_1 = {
+export const CROP_MONITORING_TEAM_SPEC_0_0_2 = {
     id: 'crop-monitoring',
-    version: '0.0.1',
+    version: '0.0.2',
     name: 'Crop Monitoring',
     description: `One agent, its data: Crop Monitoring follows crop vigour and growth over a season from the satellite imagery NASA Earthdata holds, and flags the fields that need attention.`,
     tags: [
@@ -780,9 +851,9 @@ export const CROP_MONITORING_TEAM_SPEC_0_0_1 = {
         },
     ],
 };
-export const DISASTER_ASSESSMENT_TEAM_SPEC_0_0_1 = {
+export const DISASTER_ASSESSMENT_TEAM_SPEC_0_0_2 = {
     id: 'disaster-assessment',
-    version: '0.0.1',
+    version: '0.0.2',
     name: 'Disaster Assessment',
     description: `An event desk in the browser that gets the area a disaster affected and the damage from Disaster Assessment, and what changed on the ground from Change detection, each on a runtime over A2A, each reading NASA Earthdata. Event response takes the event and reports; the two others read the imagery and answer.`,
     tags: [
@@ -1117,9 +1188,9 @@ export const JUPYTER_TEAM_SPEC_0_0_1 = {
         storage: '',
     },
 };
-export const MONTH_END_CLOSE_TEAM_SPEC_0_0_1 = {
+export const MONTH_END_CLOSE_TEAM_SPEC_0_0_2 = {
     id: 'month-end-close',
-    version: '0.0.1',
+    version: '0.0.2',
     name: 'Month-end Close',
     description: `One agent, its data: Month-end Close drives the close from the Odoo books, which it only reads — the checklist, the accruals to book, the reconciliation gaps that remain.`,
     tags: ['example', 'scene', 'accounting', 'finance', 'odoo', 'a2a'],
@@ -1719,9 +1790,9 @@ export const PROCESS_CLINICAL_TRIAL_DATA_TEAM_SPEC_0_0_1 = {
         storage: 's3://reports/clinical-trials/',
     },
 };
-export const SALES_AND_ACCOUNTING_TEAM_SPEC_0_0_1 = {
+export const SALES_AND_ACCOUNTING_TEAM_SPEC_0_0_2 = {
     id: 'sales-and-accounting',
-    version: '0.0.1',
+    version: '0.0.2',
     name: 'Sales and Accounting',
     description: `A sales desk in the browser that gets financial reports from an accounting application on a runtime, over A2A. Sales takes the request and reports the answer; Accounting reads the Odoo books and answers.`,
     tags: ['example', 'sales', 'accounting', 'finance', 'a2a', 'odoo'],
@@ -1940,16 +2011,17 @@ export const TEAM_SPECS = {
     'analyze-support-tickets': ANALYZE_SUPPORT_TICKETS_TEAM_SPEC_0_0_1,
     'audit-inventory-levels': AUDIT_INVENTORY_LEVELS_TEAM_SPEC_0_0_1,
     'automate-regulatory-reporting': AUTOMATE_REGULATORY_REPORTING_TEAM_SPEC_0_0_1,
+    'coding-agents': CODING_AGENTS_TEAM_SPEC_0_0_1,
     'comprehensive-sales-analytics': COMPREHENSIVE_SALES_ANALYTICS_TEAM_SPEC_0_0_1,
-    'crop-monitoring': CROP_MONITORING_TEAM_SPEC_0_0_1,
-    'disaster-assessment': DISASTER_ASSESSMENT_TEAM_SPEC_0_0_1,
+    'crop-monitoring': CROP_MONITORING_TEAM_SPEC_0_0_2,
+    'disaster-assessment': DISASTER_ASSESSMENT_TEAM_SPEC_0_0_2,
     jupyter: JUPYTER_TEAM_SPEC_0_0_1,
-    'month-end-close': MONTH_END_CLOSE_TEAM_SPEC_0_0_1,
+    'month-end-close': MONTH_END_CLOSE_TEAM_SPEC_0_0_2,
     'notebook-benchmark': NOTEBOOK_BENCHMARK_TEAM_SPEC_0_0_1,
     'optimize-grid-operations': OPTIMIZE_GRID_OPERATIONS_TEAM_SPEC_0_0_1,
     'process-citizen-requests': PROCESS_CITIZEN_REQUESTS_TEAM_SPEC_0_0_1,
     'process-clinical-trial-data': PROCESS_CLINICAL_TRIAL_DATA_TEAM_SPEC_0_0_1,
-    'sales-and-accounting': SALES_AND_ACCOUNTING_TEAM_SPEC_0_0_1,
+    'sales-and-accounting': SALES_AND_ACCOUNTING_TEAM_SPEC_0_0_2,
     'sync-crm-contacts': SYNC_CRM_CONTACTS_TEAM_SPEC_0_0_1,
 };
 function resolveTeamId(teamId) {

package/lib/types/agentspecs.d.ts

@@ -238,7 +238,7 @@ export interface PolicySpec {
     description: string;
     enabled: boolean;
     tags: string[];
-    /** The Shield's document: scope, version, rules, limits, network, mcp, harnesses. */
+    /** The Shield's document: scope, version, rules, limits, network, mcp, harnesses, authorize, authorizer. */
     policy: {
         scope: 'organization' | 'team' | 'session';
         version?: number;
@@ -267,6 +267,32 @@ export interface PolicySpec {
             admit?: string[];
             credentials?: 'account' | 'platform' | 'either';
         };
+        /** The classes that need an authorizer's allow beside the Rules (SHIELD §6.11). */
+        authorize?: Array<'read' | 'write' | 'send' | 'buy' | 'delete' | 'execute'>;
+        /** The standalone Shield's decision point: exactly one of these. */
+        authorizer?: {
+            local?: {
+                grants?: Array<{
+                    subject: string;
+                    relation: string;
+                    object: string;
+                }>;
+            };
+            openfga?: {
+                url: string;
+                store: string;
+                model?: string | null;
+            };
+            authzen?: {
+                url: string;
+                headers?: Record<string, string>;
+            };
+            opa?: {
+                url: string;
+                package?: string;
+                headers?: Record<string, string>;
+            };
+        } | null;
     };
 }
 /**
@@ -334,6 +360,26 @@ export interface StandardSpec {
     }>;
     controls: StandardControl[];
 }
+/**
+ * A harness of the register's *listed* tier (SHIELD SH-57): known to speak ACP,
+ * its documented command, licence, terms and credential read and cited; not
+ * drilled, so offered by nothing — naming one is refused *listed, not drilled yet*.
+ */
+export interface ListedHarness {
+    id: string;
+    name: string;
+    docs: string;
+    adapter: string;
+    version: string;
+    /** The launch command its project documents; null when undocumented. */
+    command: string | null;
+    licence: string;
+    licenceSource: string;
+    termsSource: string;
+    credential: string;
+    servedToThirdParties: 'api_key_only' | 'permitted' | 'refused' | 'unknown';
+    note: string;
+}
 export interface HarnessSpec {
     /** What `harness:` names (e.g. 'claude-code'). */
     id: string;

package/lib/types/teams.d.ts

@@ -66,7 +66,7 @@ export interface TeamLinkSpec {
     /** The member asked, by its id in the team. */
     member: string;
     /** The protocol: `a2a` to an agent or an application, `mcp` to a server member. */
-    over: 'a2a' | 'mcp';
+    over: 'a2a' | 'mcp' | 'acp';
 }
 export interface TeamAgentspec {
     /** Agent identifier within the team */
@@ -91,6 +91,12 @@ export interface TeamAgentspec {
      * (LOOP A-04). It asks nobody.
      */
     server?: string;
+    /**
+     * Harness catalogue id, in place of `ref`, `app` and `server`: the member is
+     * that agent program over ACP behind the Shield — Claude Code, Codex, an
+     * organization's own — asked over A2A or ACP (SHIELD SH-45).
+     */
+    harness?: string;
     /** Where its loop turns: in the person's `browser`, or on a `runtime`. */
     runsIn?: 'browser' | 'runtime';
     /** The members it asks directly while it works, and over what. */

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@datalayer/agent-runtimes",
-    "version": "1.5.39",
+    "version": "1.5.42",
     "type": "module",
     "workspaces": [
         ".",

package/scripts/codegen/generate_harnesses.py

@@ -209,7 +209,22 @@ def _t(value: Any) -> str:
     return json.dumps(" ".join(str(value or "").split()), ensure_ascii=False)
 
 
-def generate_typescript_code(specs: list[dict[str, Any]]) -> str:
+def load_listed(specs_dir: Path) -> list[dict[str, Any]]:
+    """The register's listed tier (SH-57): known to speak ACP, not drilled, offered by nothing."""
+    register = yaml.safe_load((specs_dir / REGISTER).read_text()) or {}
+    return sorted(
+        (
+            entry
+            for entry in register.get("entries") or []
+            if entry.get("tier") == "listed"
+        ),
+        key=lambda entry: str(entry["harness"]),
+    )
+
+
+def generate_typescript_code(
+    specs: list[dict[str, Any]], listed: list[dict[str, Any]] = ()
+) -> str:
     lines = [
         "/*",
         " * Copyright (c) 2025-2026 Datalayer, Inc.",
@@ -225,7 +240,7 @@ def generate_typescript_code(specs: list[dict[str, Any]]) -> str:
         " * DO NOT EDIT MANUALLY - run 'make specs' to regenerate.",
         " */",
         "",
-        "import type { HarnessSpec } from '../types/agentspecs';",
+        "import type { HarnessSpec, ListedHarness } from '../types/agentspecs';",
     ]
     for spec in specs:
         acp = spec.get("acp")
@@ -307,6 +322,27 @@ def generate_typescript_code(specs: list[dict[str, Any]]) -> str:
         "  return Object.values(HARNESS_CATALOGUE);",
         "}",
         "",
+        "/**",
+        " * The register's listed tier (SH-57): agents known to speak ACP, registered",
+        " * with their documented command and their terms, not drilled — offered by",
+        " * nothing until moved to the catalogue.",
+        " */",
+        "export const LISTED_HARNESSES: ListedHarness[] = [",
+        *[
+            "  {"
+            + f" id: {_t(entry['harness'])}, name: {_t(entry.get('name'))}, docs: {_t(entry.get('docs'))},"
+            + f" adapter: {_t(entry.get('adapter'))}, version: {_t(entry.get('version'))},"
+            + f" command: {_t(entry['command']) if entry.get('command') else 'null'},"
+            + f" licence: {_t(entry.get('licence'))}, licenceSource: {_t(entry.get('licence_source'))},"
+            + f" termsSource: {_t(entry.get('terms_source'))}, credential: {_t(entry.get('credential'))},"
+            + f" servedToThirdParties: {_t(entry.get('served_to_third_parties'))}, note: {_t(entry.get('note'))} }},"
+            for entry in listed
+        ],
+        "];",
+        "",
+        "/** The sentence a listed harness is refused in (agentspecs' LISTED_NOT_DRILLED). */",
+        "export const LISTED_NOT_DRILLED = 'listed, not drilled yet';",
+        "",
     ]
     return "\n".join(lines)
 
@@ -319,7 +355,9 @@ def main() -> None:
     args = parser.parse_args()
     specs = load_harness_specs(args.specs_dir)
     args.python_output.write_text(generate_python_code(specs))
-    args.typescript_output.write_text(generate_typescript_code(specs))
+    args.typescript_output.write_text(
+        generate_typescript_code(specs, load_listed(args.specs_dir))
+    )
     print(
         f"Generated {len(specs)} harnesses: {args.python_output}, {args.typescript_output}"
     )

package/scripts/codegen/generate_teams.py

@@ -153,6 +153,8 @@ def _generate_team_agent_py(agent: Dict[str, Any]) -> str:
         lines.append(f'            app="{agent["app"]}",')
     if agent.get("server"):
         lines.append(f'            server="{agent["server"]}",')
+    if agent.get("harness"):
+        lines.append(f'            harness="{agent["harness"]}",')
     if agent.get("runs_in"):
         lines.append(f'            runs_in="{agent["runs_in"]}",')
     links = agent.get("talks_to") or []
@@ -223,6 +225,7 @@ def _generate_team_agent_ts(agent: Dict[str, Any]) -> str:
     application = (
         (f"\n      app: '{agent['app']}'," if agent.get("app") else "")
         + (f"\n      server: '{agent['server']}'," if agent.get("server") else "")
+        + (f"\n      harness: '{agent['harness']}'," if agent.get("harness") else "")
         + (f"\n      runsIn: '{agent['runs_in']}'," if agent.get("runs_in") else "")
         + (
             "\n      talksTo: ["