@datalayer/agent-runtimes 1.5.47 → 1.5.48

package/lib/portable/hosts/approvalRenderers.d.ts

@@ -5,8 +5,9 @@ import type { ApprovalPresentation } from './contracts';
  * tool proves that every material argument is shown: each argument the server
  * presented is named by the renderer, or the card fails closed. An unknown
  * tool, an argument the renderer does not know, an attachment, and every
- * destructive, financial or publishing action are reviewed in Datalayer
- * (SLACK §15, 5). They render ai-agents' presentation v1, a different input
+ * action that is not mail (reads, writes, other sends, destructive, financial,
+ * publishing, executing) are reviewed in Datalayer (SLACK §15, 5, decided by
+ * the user on 16 October 2026: mail only). They render ai-agents' presentation v1, a different input
  * from `../approvals.ts` and `../approvalCard.ts`. Moved from the Slack
  * service (plans/DISCORD.md DC-004).
  *
@@ -31,8 +32,14 @@ type Renderer = Readonly<{
     matches(presentation: ApprovalPresentation): boolean;
     render(presentation: ApprovalPresentation): RenderedAction;
 }>;
-/** Action classes that are decided in Datalayer only (§15, 5). */
+/**
+ * Action classes that are decided in Datalayer only: every class but `send`,
+ * since only mail is decided in a host (decided by the user on 16 October
+ * 2026, SLACK §15, 5).
+ */
 export declare const DATALAYER_ONLY: Set<"unknown" | "read" | "write" | "send" | "delete" | "publish" | "execute" | "financial">;
+/** The words of a tool's name that make a send mail: contracts.json `mail_words`. */
+export declare const MAIL_WORDS: ReadonlySet<string>;
 /** The renderers, the first that matches wins: Datalayer-only before any other. */
 export declare const RENDERERS: readonly Renderer[];
 /**

package/lib/portable/hosts/approvalRenderers.js

@@ -2,8 +2,14 @@
  * Copyright (c) 2025-2026 Datalayer, Inc.
  * Distributed under the terms of the Modified BSD License.
  */
-/** Action classes that are decided in Datalayer only (§15, 5). */
+/**
+ * Action classes that are decided in Datalayer only: every class but `send`,
+ * since only mail is decided in a host (decided by the user on 16 October
+ * 2026, SLACK §15, 5).
+ */
 export const DATALAYER_ONLY = new Set([
+    'read',
+    'write',
     'delete',
     'publish',
     'financial',
@@ -28,7 +34,19 @@ function rendered(name, presentation, fields, known, extra = []) {
     ];
     return { complete: reasons.length === 0, fields, reasons, renderer: name };
 }
-const MAIL_TOOL = /(^|[_.-])(send|draft)[_.-]?(e?mail|message)($|[_.-])|^gmail[_.-]send|^mail[_.-]send$/i;
+/** The words of a tool's name that make a send mail: contracts.json `mail_words`. */
+export const MAIL_WORDS = new Set([
+    'email',
+    'gmail',
+    'mail',
+]);
+/** A tool name's words, as ai-agents reads them (camelCase and separators split). */
+const wordsOf = (name) => name
+    .replace(/([a-z0-9])([A-Z])/g, '$1 $2')
+    .toLowerCase()
+    .split(/[^a-z0-9]+/)
+    .filter(Boolean);
+const isMail = (toolName) => wordsOf(toolName).some(word => MAIL_WORDS.has(word));
 const MAIL_KEYS = [
     'to',
     'cc',
@@ -42,8 +60,7 @@ const MAIL_KEYS = [
 /** Mail: every recipient, the subject, the whole body; an attachment goes to Datalayer. */
 const mail = {
     name: 'mail',
-    matches: presentation => presentation.action_class === 'send' &&
-        MAIL_TOOL.test(presentation.tool_name),
+    matches: presentation => presentation.action_class === 'send' && isMail(presentation.tool_name),
     render(presentation) {
         const args = presentation.arguments;
         const fields = [];
@@ -82,53 +99,14 @@ const mail = {
         return rendered('mail', presentation, fields, MAIL_KEYS, extra);
     },
 };
-const WRITE_TOOL = /(^|[_.-])(write|update|edit|append|create|save|set|rename|move)[_.-]?/i;
-const WRITE_KEYS = [
-    'path',
-    'file',
-    'filename',
-    'name',
-    'title',
-    'content',
-    'text',
-    'new_path',
-    'destination',
-    'mode',
-];
-/** A write: where, and the whole of what is written. */
-const write = {
-    name: 'write',
-    matches: presentation => presentation.action_class === 'write' &&
-        WRITE_TOOL.test(presentation.tool_name),
-    render(presentation) {
-        const args = presentation.arguments;
-        const fields = [];
-        for (const [key, label] of [
-            ['path', 'Where'],
-            ['file', 'Where'],
-            ['filename', 'Where'],
-            ['name', 'Name'],
-            ['title', 'Title'],
-            ['new_path', 'Moved to'],
-            ['destination', 'Moved to'],
-            ['mode', 'How'],
-            ['content', 'What is written'],
-            ['text', 'What is written'],
-        ])
-            if (args[key] !== undefined)
-                fields.push({ label, value: text(args[key]) });
-        const extra = fields.length === 0
-            ? ['The request does not say what it writes: review it in Datalayer.']
-            : [];
-        return rendered('write', presentation, fields, WRITE_KEYS, extra);
-    },
-};
-/** Delete, publish, money and running code: shown, decided only in Datalayer (§15, 5). */
+/** Everything but mail: shown, decided only in Datalayer (§15, 5). */
 const datalayerOnly = {
     name: 'datalayer-only',
     matches: presentation => DATALAYER_ONLY.has(presentation.action_class),
     render(presentation) {
         const words = {
+            read: 'Only mail is decided outside Datalayer: reading is decided in Datalayer.',
+            write: 'Only mail is decided outside Datalayer: writing is decided in Datalayer.',
             delete: 'Deleting is decided in Datalayer.',
             execute: 'Running code is decided in Datalayer.',
             financial: 'Moving money is decided in Datalayer.',
@@ -145,22 +123,8 @@ const datalayerOnly = {
         };
     },
 };
-/** A read: every argument, by its name, whole — nothing is changed or sent. */
-const read = {
-    name: 'read',
-    matches: presentation => presentation.action_class === 'read',
-    render(presentation) {
-        const fields = Object.entries(presentation.arguments).map(([key, value]) => ({ label: key, value: text(value) }));
-        return rendered('read', presentation, fields, Object.keys(presentation.arguments));
-    },
-};
 /** The renderers, the first that matches wins: Datalayer-only before any other. */
-export const RENDERERS = [
-    datalayerOnly,
-    mail,
-    write,
-    read,
-];
+export const RENDERERS = [datalayerOnly, mail];
 /**
  * How a host shows an approval, by the renderer that knows its tool; with
  * none, nothing is decided in the host.

package/lib/portable/hosts/contracts.json

@@ -239,9 +239,12 @@
       "unknown"
     ],
     "host_decidable": [
-      "read",
-      "send",
-      "write"
+      "send"
+    ],
+    "mail_words": [
+      "email",
+      "gmail",
+      "mail"
     ],
     "example": {
       "version": 1,

package/lib/portable/hosts/index.d.ts

@@ -24,7 +24,7 @@ export * from './contracts';
 export { DatalayerHostClient, HostRefusedError, type BoundHost, type HostSelf, } from './client';
 export { agUiEventsOf, assertTrustedStreamUrl, DevelopmentCredentials, HostKeyCredentials, hostSessionOf, HostStarters, HttpAgentClient, InstallationCredentials, lastAnswer, type AgentClient, type HostCredentials, type HostKeyLookup, type HostSession, type HostShape, type HostTurnRequest, type Place, type Starter, type StarterSource, type TurnStream, } from './agentClient';
 export { hostSessionUid } from './sessionUid';
-export { DATALAYER_ONLY, RENDERERS, renderApproval, type RenderedAction, type RenderedField, } from './approvalRenderers';
+export { DATALAYER_ONLY, MAIL_WORDS, RENDERERS, renderApproval, type RenderedAction, type RenderedField, } from './approvalRenderers';
 export { DELIVERY_PATH, DELIVERY_ROUTE, DeliveryPoller, deliveryRoute, receiveDelivery, type BoundHostKey, type DeliveryClaimStore, type DeliveryJob, type DeliverySink, } from './deliveries';
 export { TurnState, type TurnEnding, type TurnFile, type TurnTool, } from './turnState';
 export { resolveApplication, usableAllowances, type AllowanceView, type ApplicationRefusal, type ApplicationResolution, type ChannelRule, } from './resolution';

package/lib/portable/hosts/index.js

@@ -29,7 +29,7 @@ export * from './contracts';
 export { DatalayerHostClient, HostRefusedError, } from './client';
 export { agUiEventsOf, assertTrustedStreamUrl, DevelopmentCredentials, HostKeyCredentials, hostSessionOf, HostStarters, HttpAgentClient, InstallationCredentials, lastAnswer, } from './agentClient';
 export { hostSessionUid } from './sessionUid';
-export { DATALAYER_ONLY, RENDERERS, renderApproval, } from './approvalRenderers';
+export { DATALAYER_ONLY, MAIL_WORDS, RENDERERS, renderApproval, } from './approvalRenderers';
 export { DELIVERY_PATH, DELIVERY_ROUTE, DeliveryPoller, deliveryRoute, receiveDelivery, } from './deliveries';
 export { TurnState, } from './turnState';
 export { resolveApplication, usableAllowances, } from './resolution';

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@datalayer/agent-runtimes",
-    "version": "1.5.47",
+    "version": "1.5.48",
     "type": "module",
     "workspaces": [
         ".",