@datalayer/agent-runtimes 1.5.51 → 1.5.53

package/lib/apps/embed/AppEmbed.d.ts

@@ -27,7 +27,7 @@ export type AppEmbedProps = {
     font?: string;
     /**
      * The language the visitor reads it in, as BCP 47 tags it (`fr`, `pt-BR`):
-     * its translation into it and the chat's own words (LOOP P-26). The
+     * its translation into it and the chat's own words (P-26). The
      * visitor's browser's by default.
      */
     language?: string;
@@ -40,14 +40,14 @@ export type AppEmbedProps = {
     /** What its record is kept under, on Datalayer. */
     instance?: AppInstance;
     /**
-     * The embed token the host's server was issued for this visit (LOOP R-20):
+     * The embed token the host's server was issued for this visit (R-20):
      * what the chat speaks to the application's session with on the
      * agent-runtimes server that runs its deployment (`serverUrl`). It runs a
      * session of that deployment, and reaches nothing else.
      */
     embedToken?: string;
     /**
-     * A conversation without an account (STUDIO D-07, R-30): a public
+     * A conversation without an account (D-07, R-30): a public
      * application run on the visitors' runtime, which the chat speaks to with
      * a visitor's token it mints from ai-inference for that one application —
      * what the element gives a public `app` with no token. Nothing is launched
@@ -55,7 +55,7 @@ export type AppEmbedProps = {
      */
     visitors?: DatalayerVisitors;
     /**
-     * Where its voice runs (VOICE.md VO-18): Datalayer's speech service and
+     * Where its voice runs (VO-18): Datalayer's speech service and
      * the browser's models, in every mode, when its Appspec's `interface.voice`
      * is on — the microphone in its composer, its answers heard, asked with
      * the conversation's own token. None, it is drawn without a voice.
@@ -76,14 +76,14 @@ export type AppEmbedProps = {
      */
     plugins?: PluginRef[];
     /**
-     * What the page gives the application (LOOP D-10): the values it passes,
+     * What the page gives the application (D-10): the values it passes,
      * its functions, and what it is told — read for the names the Appspec
      * gives under `deployment.embedded.host`.
      */
     host?: AppEmbedHost;
     /**
      * Keep the visit's session in the host's storage, and pick it up again
-     * after the page reloads (LOOP D-13); on by default. Off, the session
+     * after the page reloads (D-13); on by default. Off, the session
      * lasts as long as the page.
      */
     resume?: boolean;
@@ -98,7 +98,7 @@ export type EmbedSession = {
     said?: string;
 };
 /**
- * The visit's session, kept and picked up again (LOOP D-13): on the host's
+ * The visit's session, kept and picked up again (D-13): on the host's
  * server with an embed token that names its visit, the session the chat
  * opens is kept under the application and the visit — in the host's
  * storage unless `resume` is off, in memory always — and, when the
@@ -114,7 +114,7 @@ export declare function useEmbedSession({ app, serverUrl, embedToken, resume, }:
     resume?: boolean;
 }): EmbedSession;
 /**
- * Window messages from the page (LOOP P-25): on the host's own server, the
+ * Window messages from the page (P-25): on the host's own server, the
  * page is handed how to post one to the application's session
  * (`host.onWindowPort`) — the session the chat goes on with, its uid known
  * from its first message — and what the code answers is raised on the page
@@ -128,7 +128,7 @@ export declare function useWindowPort({ serverUrl, embedToken, session, host, }:
     host?: AppEmbedHost;
 }): EmbedSession;
 /**
- * The page and the application talking (LOOP D-10): the tools of the host
+ * The page and the application talking (D-10): the tools of the host
  * the Appspec names, given to its agent through a chat-extras plugin made
  * once — the page's newest values and functions read at each call — and
  * `message` said to the page when an answer is done.

package/lib/apps/embed/AppEmbed.js

@@ -4,8 +4,7 @@ import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-run
  * Distributed under the terms of the Modified BSD License.
  */
 /**
- * An application in another product's page, as a React component (LOOP
- * D-07, D-09, D-11): what the `<datalayer-app>` element draws, and what a
+ * An application in another product's page, as a React component (D-07, D-09, D-11): what the `<datalayer-app>` element draws, and what a
  * host that uses React mounts itself.
  *
  * Four modes, as the Appspec says (`deployment.embedded.mode`) or the host:
@@ -17,7 +16,7 @@ import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-run
  * - **panel** — the conversation at the right edge of the page, at full
  *   height;
  * - **assistant** — the application's character on the page, speaking in a
- *   balloon (§6.9): the one its Appspec names (`interface.assistant`), else
+ *   balloon: the one its Appspec names (`interface.assistant`), else
  *   the paper clip, looked up in what is contributed — Datalayer's four and
  *   the host's own plugins (T-24); an id nothing contributes is said, never
  *   replaced.
@@ -58,7 +57,7 @@ import { WINDOW_NOT_YET, embedSessionKey, postWindowMessage, reattachSession, se
 import { onLoopWindowMessage } from '../../chat/base/loopWindow';
 import { ChatLanguage, useChatWords } from '../../chat/ChatLanguage';
 /**
- * The visit's session, kept and picked up again (LOOP D-13): on the host's
+ * The visit's session, kept and picked up again (D-13): on the host's
  * server with an embed token that names its visit, the session the chat
  * opens is kept under the application and the visit — in the host's
  * storage unless `resume` is off, in memory always — and, when the
@@ -125,7 +124,7 @@ export function useEmbedSession({ app, serverUrl, embedToken, resume = true, })
     };
 }
 /**
- * Window messages from the page (LOOP P-25): on the host's own server, the
+ * Window messages from the page (P-25): on the host's own server, the
  * page is handed how to post one to the application's session
  * (`host.onWindowPort`) — the session the chat goes on with, its uid known
  * from its first message — and what the code answers is raised on the page
@@ -157,7 +156,7 @@ export function useWindowPort({ serverUrl, embedToken, session, host, }) {
                 throw new Error(WINDOW_NOT_YET);
             }
             // What its code answers comes on the ui socket, raised as any
-            // window message is (REACTOR_UI RU-W).
+            // window message is (RU-W).
             await postWindowMessage({
                 serverUrl,
                 uid: uid.current,
@@ -176,7 +175,7 @@ function SessionSaid({ said }) {
 /** No plugins for the renderer: one array, so that it never reads as a change. */
 const NO_HOST_PLUGINS = [];
 /**
- * The page and the application talking (LOOP D-10): the tools of the host
+ * The page and the application talking (D-10): the tools of the host
  * the Appspec names, given to its agent through a chat-extras plugin made
  * once — the page's newest values and functions read at each call — and
  * `message` said to the page when an answer is done.
@@ -186,7 +185,7 @@ export function useHostBridge(app, host) {
     hostRef.current = host;
     const bridge = app.deployment.embedded?.host;
     const key = JSON.stringify([bridge ?? null, app.rules, app.connections]);
-    // The host's plugin (REACTOR_UI RU-7): the page's functions as its
+    // The host's plugin (RU-7): the page's functions as its
     // commands, named for the agent by its agent tools bundle — made again
     // when what the Appspec names, or the rules that decide them, change.
     const hosting = useMemo(() => hostPlugin(app, () => hostRef.current ?? {}), 
@@ -215,7 +214,7 @@ export function useHostBridge(app, host) {
     const plugins = useMemo(() => hosting
         ? [hosting, ...(userPlugin ? [userPlugin] : [])]
         : NO_HOST_PLUGINS, [hosting, userPlugin]);
-    // What its code tells the page during a turn (LOOP P-25), raised on it.
+    // What its code tells the page during a turn (P-25), raised on it.
     useEffect(() => onLoopWindowMessage(data => hostRef.current?.onEvent?.({
         type: 'window-message',
         detail: { data },
@@ -258,7 +257,7 @@ export function embedAssistantCharacter(app, plugins = NO_PLUGINS) {
     return assistantCharacterFor(assistantCharactersFrom([AssistantCharactersPlugin, ...plugins]), { app: app.interface.assistant });
 }
 /** What a floating application says to a visitor Datalayer does not know. */
-export const signedOutSentence = (app) => `${app.name} runs on Datalayer, which needs you signed in. An application embedded for visitors who are not needs its embed token (LOOP D-14), or an agent-runtimes server of the host's own (the "server" attribute).`;
+export const signedOutSentence = (app) => `${app.name} runs on Datalayer, which needs you signed in. An application embedded for visitors who are not needs its embed token (D-14), or an agent-runtimes server of the host's own (the "server" attribute).`;
 /** The application's face, as the floating window's button and header draw it. */
 function Face({ emoji }) {
     // In Fluent Emoji, at a line's size (T-19, T-20).

package/lib/apps/embed/LoopEmbed.d.ts

@@ -49,8 +49,7 @@ export type LoopEmbedProps = LoopPresetOptions & {
      */
     frameHeight?: number | string;
     /**
-     * The sidebar as a rail of line icons, one panel shown at a time (LOOP
-     * T-07). See `LoopWorkspaceProps.sidebarRail`.
+     * The sidebar as a rail of line icons, one panel shown at a time (T-07). See `LoopWorkspaceProps.sidebarRail`.
      */
     sidebarRail?: boolean;
     /**
@@ -60,7 +59,7 @@ export type LoopEmbedProps = LoopPresetOptions & {
      * window's title bar, a panel of its own, a command. Without this a host
      * would have to rebuild the plugin list to add one thing to it, which is the
      * assembly this component exists to save. An extension groups some of
-     * them, as an application's own plugins are (`AppRenderer`, LOOP F-15).
+     * them, as an application's own plugins are (`AppRenderer`, F-15).
      */
     plugins?: PlatformInput[];
 };

package/lib/apps/embed/datalayer-app.js

@@ -3,7 +3,7 @@
  * Distributed under the terms of the Modified BSD License.
  */
 /**
- * The element's module (LOOP D-08): it defines `<datalayer-app>` and nothing
+ * The element's module (D-08): it defines `<datalayer-app>` and nothing
  * else. Built on its own by `npm run build:embed` (`vite.embed.config.ts`)
  * into `dist-embed/datalayer-app-main.js`, with the chunks it imports under
  * `dist-embed/chunks/` and the stylesheet the element links into its shadow

package/lib/apps/embed/element.js

@@ -5,7 +5,7 @@ import { jsx as _jsx } from "react/jsx-runtime";
  */
 /**
  * `<datalayer-app>`: an application in another product's page, as one
- * script tag and one element (LOOP D-08), in the mode its Appspec says
+ * script tag and one element (D-08), in the mode its Appspec says
  * (D-07), its theme isolated from the host's and overridable in the three
  * ways that matter (T-13, D-11).
  *
@@ -19,7 +19,7 @@ import { jsx as _jsx } from "react/jsx-runtime";
  * 2. an Appspec at an address (`spec="https://…/support-desk.yaml"`);
  * 3. an application on Datalayer (`app`), read with its embed token
  *    (`token`), or — with no token — a public one read as a visitor
- *    without an account reads it (STUDIO D-07, R-30, `visitorApp`): an
+ *    without an account reads it (D-07, R-30, `visitorApp`): an
  *    example Datalayer keeps warm for visitors, or an application at its
  *    address that its owner lets anybody talk to. The conversation then
  *    runs on the visitors' runtime with a visitor's token the chat mints
@@ -36,19 +36,19 @@ import { jsx as _jsx } from "react/jsx-runtime";
  * drawn in it, so nothing of the application's styles reaches the page and
  * nothing of the page's reaches the application.
  *
- * The page and the application talk (LOOP D-10), for the names its Appspec
+ * The page and the application talk (D-10), for the names its Appspec
  * gives under `deployment.embedded.host`: the page sets `element.context`
  * (`{ user, page, …its own }`), which its agent reads with `host_context`,
  * and `element.functions` (`{ open_ticket: async args => … }`), which its
  * agent calls as `host_open_ticket`, each as the rule naming it decides; the
  * element raises `message` when the application has answered and `action`
  * when it called a function of the page, beside `decision` and
- * `token-expired`. Who its user is, when it matters (LOOP D-21): the page
+ * `token-expired`. Who its user is, when it matters (D-21): the page
  * sets `user-token` (or `element.userToken`) to the token its server signed
  * naming the user, sent with every run of an application that says
  * `user: signed`.
  *
- * Window messages (LOOP P-25), on the host's own server: the element raises
+ * Window messages (P-25), on the host's own server: the element raises
  * `window-message` (`detail.data`) when the application's code tells the page
  * something outside the conversation (`session.send_window_message`), and
  * `element.postWindowMessage(data)` hands the page's to its `@app.window`.
@@ -56,7 +56,7 @@ import { jsx as _jsx } from "react/jsx-runtime";
  * On the host's server (`server`) with the visit's embed token, the
  * session the application opens is kept in the page's `localStorage`, under
  * the application and the visit its token names, and picked up again after
- * the page reloads — its conversation drawn again (LOOP D-13); a token
+ * the page reloads — its conversation drawn again (D-13); a token
  * renewed for the visit redraws the application on the same session.
  * `resume="false"` keeps nothing in the page's storage.
  *
@@ -167,8 +167,8 @@ export async function readEmbeddedApp({ api, origin, app, token, fetcher = fetch
     if (spec.kind === 'decision') {
         return { kind: 'frame', src: frameSrcOf(origin, app, token) };
     }
-    // The visit runs the deployment its token names, and no other (VOICE.md
-    // decision 16): a token naming none is refused before anything is drawn.
+    // The visit runs the deployment its token names, and no other:
+    // a token naming none is refused before anything is drawn.
     if (!embedTokenDeployment(token)) {
         return { kind: 'said', text: EMBED_TOKEN_NAMES_NO_DEPLOYMENT };
     }
@@ -240,7 +240,7 @@ export function defineDatalayerAppElement(options = {}) {
             this.passed = { ...(value ?? {}) };
         }
         /**
-         * Post a window message to the application (LOOP P-25): its code's
+         * Post a window message to the application (P-25): its code's
          * `@app.window` reads it, and what it answers is raised as
          * `window-message` events. Refused, in a sentence, before its
          * conversation has started or off the host's own server.
@@ -281,7 +281,7 @@ export function defineDatalayerAppElement(options = {}) {
             }
         }
         /**
-         * The token the host's server signed naming its user (LOOP D-21), the
+         * The token the host's server signed naming its user (D-21), the
          * `user-token` attribute's: what an application that says `user: signed`
          * opens its session with. Set it to hand a new one over.
          */
@@ -544,7 +544,7 @@ export function defineDatalayerAppElement(options = {}) {
             this.root = createRoot(mount);
             const server = this.getAttribute('server') || undefined;
             this.root.render(_jsx(StyleSheetManager, { target: shadow, children: _jsx(AppEmbed, { app: source.app, mode: look.mode, accent: look.accent, colorMode: look.colorMode, font: look.font, serverUrl: server, ...(server && this.token ? { embedToken: this.token } : {}), ...(source.visitors ? { visitors: source.visitors } : {}), 
-                    // Its voice, when its Appspec says one (VOICE.md VO-18): ai-agents'
+                    // Its voice, when its Appspec says one (VO-18): ai-agents'
                     // speech service; the microphone needs the page's
                     // Permissions-Policy to allow it.
                     speech: this.speech, height: inlineHeightOf(this.getAttribute('height')), ownPortal: true, host: this.host, 

package/lib/apps/embed/embedConfig.d.ts

@@ -1,6 +1,5 @@
 /**
- * An application in another product's page, as its host writes it (LOOP
- * D-07, D-08, D-11, T-13): one script tag and one element, `<datalayer-app>`,
+ * An application in another product's page, as its host writes it (D-07, D-08, D-11, T-13): one script tag and one element, `<datalayer-app>`,
  * whose attributes — or, for the theme, the host's CSS variables — say what
  * it shows and how it looks.
  *
@@ -40,13 +39,13 @@ export declare const EMBED_ATTRIBUTES: {
 };
 export type EmbedAttribute = keyof typeof EMBED_ATTRIBUTES;
 /**
- * The deployment an embed token names (VOICE.md decision 16): the embedded
+ * The deployment an embed token names: the embedded
  * deployment its owner's server asked it for. Read without vouching for it —
  * the services that take the token verify it — and the only place the
  * element learns its deployment: it takes no attribute for one.
  */
 export declare function embedTokenDeployment(token: string): string | undefined;
-/** What an embed token naming no deployment is told (VOICE.md decision 16). */
+/** What an embed token naming no deployment is told. */
 export declare const EMBED_TOKEN_NAMES_NO_DEPLOYMENT = "datalayer-app: the embed token names no deployment. Your server asks for one naming the application\u2019s embedded deployment: POST \u2026/api/spacer/v1/apps/<id>/embed-token with {\"deployment\": \"<its uid>\"}.";
 /** Every attribute the element watches. */
 export declare const EMBED_OBSERVED_ATTRIBUTES: EmbedAttribute[];
@@ -68,7 +67,7 @@ export type EmbedFloatingView = 'floating-small' | 'panel' | 'assistant';
  * The four modes (D-07), and the chat they float in: a **bubble** is the
  * round button that opens a popup — the copilot pattern; a **panel** is the
  * conversation at the page's right edge, at full height; the **assistant** is
- * the character that speaks in a balloon (§6.9). **Inline** has no chat of
+ * the character that speaks in a balloon. **Inline** has no chat of
  * its own to float: the application, its page and its conversation, sit in
  * the host's page where the element is.
  */
@@ -116,13 +115,12 @@ export type EmbedLook = {
  */
 export declare function embedLookOf(inputs: EmbedInputs, app?: Pick<AppSpec, 'interface' | 'deployment'>): EmbedLook;
 /**
- * Whether a visit's conversation is picked up again after a reload (LOOP
- * D-13): on unless the host writes `resume="false"`. Anything else is
+ * Whether a visit's conversation is picked up again after a reload (D-13): on unless the host writes `resume="false"`. Anything else is
  * refused in a sentence.
  */
 export declare function resumeOf(value: string | null | undefined): boolean;
 /**
- * The language a host says its visitor reads (LOOP P-26), checked: a BCP 47
+ * The language a host says its visitor reads (P-26), checked: a BCP 47
  * tag (`fr`, `pt-BR`), else refused in a sentence. Unsaid, none: the
  * visitor's browser's.
  */
@@ -142,7 +140,7 @@ export declare const EMBED_PROPERTIES: readonly ["context", "functions", "token"
  * element sets them on an element not yet upgraded: each becomes a property
  * of that object, which shadows the class's accessor once it is defined, and
  * the application was never offered the page's functions (seen 2026-10-10,
- * STUDIO D-10: the run sent no tool). Called as the element is constructed.
+ * D-10: the run sent no tool). Called as the element is constructed.
  */
 export declare function adoptPropertiesSetEarly(element: object, names?: readonly string[]): string[];
 /** What a snippet says beside the application's id. */
@@ -159,7 +157,7 @@ export type EmbedSnippetOptions = {
     theme?: EmbedColorMode;
     font?: string;
     /**
-     * Its voice listens (VOICE.md VO-18, `embedListens`): the snippet says that
+     * Its voice listens (VO-18, `embedListens`): the snippet says that
      * the page's `Permissions-Policy` must allow the microphone, which the
      * element asks for in the page itself.
      */

package/lib/apps/embed/embedConfig.js

@@ -30,7 +30,7 @@ export const EMBED_ATTRIBUTES = {
     'user-token': 'A token your server signed with the deployment’s secret, naming your user (HS256: sub, name, exp at most an hour away): what an application that says user: signed opens its session with.',
 };
 /**
- * The deployment an embed token names (VOICE.md decision 16): the embedded
+ * The deployment an embed token names: the embedded
  * deployment its owner's server asked it for. Read without vouching for it —
  * the services that take the token verify it — and the only place the
  * element learns its deployment: it takes no attribute for one.
@@ -51,7 +51,7 @@ export function embedTokenDeployment(token) {
         return undefined;
     }
 }
-/** What an embed token naming no deployment is told (VOICE.md decision 16). */
+/** What an embed token naming no deployment is told. */
 export const EMBED_TOKEN_NAMES_NO_DEPLOYMENT = 'datalayer-app: the embed token names no deployment. Your server asks for one naming the application’s embedded deployment: POST …/api/spacer/v1/apps/<id>/embed-token with {"deployment": "<its uid>"}.';
 /** Every attribute the element watches. */
 export const EMBED_OBSERVED_ATTRIBUTES = Object.keys(EMBED_ATTRIBUTES);
@@ -70,7 +70,7 @@ export const EMBED_COLOR_MODES = ['light', 'dark', 'auto'];
  * The four modes (D-07), and the chat they float in: a **bubble** is the
  * round button that opens a popup — the copilot pattern; a **panel** is the
  * conversation at the page's right edge, at full height; the **assistant** is
- * the character that speaks in a balloon (§6.9). **Inline** has no chat of
+ * the character that speaks in a balloon. **Inline** has no chat of
  * its own to float: the application, its page and its conversation, sit in
  * the host's page where the element is.
  */
@@ -153,15 +153,14 @@ export function embedLookOf(inputs, app) {
     return { mode, accent, colorMode, font, variant };
 }
 /**
- * Whether a visit's conversation is picked up again after a reload (LOOP
- * D-13): on unless the host writes `resume="false"`. Anything else is
+ * Whether a visit's conversation is picked up again after a reload (D-13): on unless the host writes `resume="false"`. Anything else is
  * refused in a sentence.
  */
 export function resumeOf(value) {
     return (oneOf(value, ['true', 'false'], 'a value of resume') !== 'false');
 }
 /**
- * The language a host says its visitor reads (LOOP P-26), checked: a BCP 47
+ * The language a host says its visitor reads (P-26), checked: a BCP 47
  * tag (`fr`, `pt-BR`), else refused in a sentence. Unsaid, none: the
  * visitor's browser's.
  */
@@ -198,7 +197,7 @@ export const EMBED_PROPERTIES = ['context', 'functions', 'token'];
  * element sets them on an element not yet upgraded: each becomes a property
  * of that object, which shadows the class's accessor once it is defined, and
  * the application was never offered the page's functions (seen 2026-10-10,
- * STUDIO D-10: the run sent no tool). Called as the element is constructed.
+ * D-10: the run sent no tool). Called as the element is constructed.
  */
 export function adoptPropertiesSetEarly(element, names = EMBED_PROPERTIES) {
     const adopted = [];

package/lib/apps/embed/embedSession.d.ts

@@ -1,6 +1,6 @@
 /**
  * An embedded application's conversation, picked up again after the host's
- * page reloads (LOOP D-13).
+ * page reloads (D-13).
  *
  * The session an embed opened is kept by its uid in the host page's own
  * storage, under the application and the visit its embed token names —
@@ -72,9 +72,9 @@ export declare function reattachSession({ serverUrl, uid, token, fetcher, }: {
 /** Said when a window message is posted before the conversation has started. */
 export declare const WINDOW_NOT_YET = "The application takes a window message once its conversation has started, on its own server (the \"server\" attribute).";
 /**
- * Post a window message to a session (LOOP P-25): its code's `@app.window`
+ * Post a window message to a session (P-25): its code's `@app.window`
  * runs on it. What the code tells the page back arrives on the
- * conversation's ui socket (REACTOR_UI RU-W), raised as any window message
+ * conversation's ui socket (RU-W), raised as any window message
  * is; refused — the runtime's sentence — when the session or its code takes
  * none.
  */

package/lib/apps/embed/embedSession.js

@@ -113,9 +113,9 @@ export async function reattachSession({ serverUrl, uid, token, fetcher = fetch,
 /** Said when a window message is posted before the conversation has started. */
 export const WINDOW_NOT_YET = 'The application takes a window message once its conversation has started, on its own server (the "server" attribute).';
 /**
- * Post a window message to a session (LOOP P-25): its code's `@app.window`
+ * Post a window message to a session (P-25): its code's `@app.window`
  * runs on it. What the code tells the page back arrives on the
- * conversation's ui socket (REACTOR_UI RU-W), raised as any window message
+ * conversation's ui socket (RU-W), raised as any window message
  * is; refused — the runtime's sentence — when the session or its code takes
  * none.
  */

package/lib/apps/embed/embeddedSecrets.d.ts

@@ -1,5 +1,5 @@
 /**
- * What no file the embed ships may hold (PAP_DATALAYER B-02): the PAP SDK's
+ * What no file the embed ships may hold (B-02): the PAP SDK's
  * emitted-bundle test (`src/__tests__/canaries.test.mjs`, `EMBEDDED_SECRETS`)
  * extended to the embed, a browser artifact anybody's page loads. Its build
  * fails on a file holding one (`vite.embed.config.ts`), naming the kind and

package/lib/apps/embed/embeddedSecrets.js

@@ -3,7 +3,7 @@
  * Distributed under the terms of the Modified BSD License.
  */
 /**
- * What no file the embed ships may hold (PAP_DATALAYER B-02): the PAP SDK's
+ * What no file the embed ships may hold (B-02): the PAP SDK's
  * emitted-bundle test (`src/__tests__/canaries.test.mjs`, `EMBEDDED_SECRETS`)
  * extended to the embed, a browser artifact anybody's page loads. Its build
  * fails on a file holding one (`vite.embed.config.ts`), naming the kind and

package/lib/apps/embed/hostBridge.d.ts

@@ -1,5 +1,5 @@
 /**
- * The host page and an embedded application, talking (LOOP D-10).
+ * The host page and an embedded application, talking (D-10).
  *
  * In: the values the page passes — `user`, `page`, or names of its own —
  * read by the application's agent with the tool `host_context`, only those
@@ -8,7 +8,7 @@
  * Out: what the application does, as events — `message` when it has said
  * something, `action` when it called a function of the page,
  * `window-message` when its code told the page something outside the
- * conversation (LOOP P-25, `session.send_window_message`) — beside the
+ * conversation (P-25, `session.send_window_message`) — beside the
  * `decision` and `token-expired` the element raises already.
  *
  * Window messages, in (P-25): the page posts one with
@@ -16,7 +16,7 @@
  * the host's own server (`server`), and what it answers comes back as
  * `window-message` events.
  *
- * Who its user is (LOOP D-21): what the page says as `user` is a claim.
+ * Who its user is (D-21): what the page says as `user` is a claim.
  * An application whose Appspec says `deployment.embedded.host.user: signed`
  * takes only a token the host's **server** signed with the deployment's
  * secret (HS256: `sub`, `name`, `exp` at most an hour away), which the page
@@ -28,7 +28,7 @@
  *
  * Offered: the functions of the page its Appspec names
  * (`deployment.embedded.host.functions`), as Reactor has a plugin offer
- * what it does (REACTOR_UI RU-7): each a **command** of the host's plugin,
+ * what it does (RU-7): each a **command** of the host's plugin,
  * `host.<name>` (`host.context` for the values it passes), and the plugin's
  * **agent tools** bundle (`AgentTools`, id `host`) naming them for its agent
  * as the tools `host_<name>` and `host_context` — which the chat turns into
@@ -68,21 +68,21 @@ export type HostEvent = {
     };
 } | {
     type: 'window-message';
-    /** What its code told the page (LOOP P-25): anything JSON writes. */
+    /** What its code told the page (P-25): anything JSON writes. */
     detail: {
         data: unknown;
     };
 };
-/** Posts a window message to the application's session (LOOP P-25). */
+/** Posts a window message to the application's session (P-25). */
 export type WindowPost = (data: unknown) => Promise<void>;
 /** A function of the page, as the page gives it. */
 export type HostFunction = (args: Record<string, unknown>) => unknown | Promise<unknown>;
-/** What the page gives an embedded application (LOOP D-10). */
+/** What the page gives an embedded application (D-10). */
 export type AppEmbedHost = {
     /** What the page passes now: its visitor (`user`), itself (`page`), values of its own. */
     context?: () => Record<string, unknown>;
     /**
-     * The token the host's server signed naming its user (LOOP D-21), read as
+     * The token the host's server signed naming its user (D-21), read as
      * each run is sent: what an application that says `user: signed` opens its
      * session with. Never the deployment's secret.
      */
@@ -98,7 +98,7 @@ export type AppEmbedHost = {
     ask?: (question: HostQuestion) => boolean | Promise<boolean>;
     /**
      * Handed how a window message is posted to the application's session once
-     * the embed can (LOOP P-25) — on the host's own server, its conversation
+     * the embed can (P-25) — on the host's own server, its conversation
      * started — and `null` when it no longer can.
      */
     onWindowPort?: (post: WindowPost | null) => void;
@@ -131,26 +131,26 @@ export type HostAnswer = {
 };
 type HostCommand = ReactorCommand<Record<string, unknown> | undefined, HostAnswer>;
 /**
- * The host plugin's commands (REACTOR_UI RU-7): `host.context` when the
+ * The host plugin's commands (RU-7): `host.context` when the
  * Appspec names values, and `host.<name>` for each function it names, each
  * decided by the rule naming its tool before the page is called. `host` is
  * read at each call, so that what the page passes is the newest.
  */
 export declare function hostCommands(app: Pick<AppSpec, 'name' | 'connections' | 'rules' | 'deployment'>, host: () => AppEmbedHost): HostCommand[];
 /**
- * The host plugin's agent tools (REACTOR_UI RU-7): `host_context` and
+ * The host plugin's agent tools (RU-7): `host_context` and
  * `host_<name>`, each running its command; `null` for an application the
  * Appspec embeds with no host bridge.
  */
 export declare function hostAgentTools(app: Pick<AppSpec, 'name' | 'deployment'>): AgentToolBundle | null;
 /**
- * The host's plugin (REACTOR_UI RU-7): its commands, its agent tools bundle,
+ * The host's plugin (RU-7): its commands, its agent tools bundle,
  * and the chat extras that hand the bundle to the chat's agent wherever it
  * runs. `null` for an application with no host bridge.
  */
 export declare function hostPlugin(app: Pick<AppSpec, 'id' | 'name' | 'connections' | 'rules' | 'deployment'>, host: () => AppEmbedHost): ReactorPlugin<Record<string, never>, unknown, unknown> | null;
 /**
- * What goes with every run for the host's user (LOOP D-21): the token the
+ * What goes with every run for the host's user (D-21): the token the
  * host's server signed, as `forwardedProps.loop.user_token`, for an
  * application that says `user: signed` — read at each run, so that the
  * newest is sent; nothing when the page gives none, and the runtime refuses
@@ -165,7 +165,7 @@ export type SignedUserToken = {
 };
 /**
  * Asks ai-agents to sign the person signed in to Datalayer as a deployment's
- * user (LOOP D-21; STUDIO A-18 to A-20), with their own token: what a
+ * user (D-21; A-18 to A-20), with their own token: what a
  * surface that has no host server holding the deployment's secret — the
  * VS Code extension, Jupyter AI Agents, Datalayer Desktop — sends as
  * `forwardedProps.loop.user_token` with the runs of an application that

package/lib/apps/embed/hostBridge.js

@@ -3,7 +3,7 @@
  * Distributed under the terms of the Modified BSD License.
  */
 /**
- * The host page and an embedded application, talking (LOOP D-10).
+ * The host page and an embedded application, talking (D-10).
  *
  * In: the values the page passes — `user`, `page`, or names of its own —
  * read by the application's agent with the tool `host_context`, only those
@@ -12,7 +12,7 @@
  * Out: what the application does, as events — `message` when it has said
  * something, `action` when it called a function of the page,
  * `window-message` when its code told the page something outside the
- * conversation (LOOP P-25, `session.send_window_message`) — beside the
+ * conversation (P-25, `session.send_window_message`) — beside the
  * `decision` and `token-expired` the element raises already.
  *
  * Window messages, in (P-25): the page posts one with
@@ -20,7 +20,7 @@
  * the host's own server (`server`), and what it answers comes back as
  * `window-message` events.
  *
- * Who its user is (LOOP D-21): what the page says as `user` is a claim.
+ * Who its user is (D-21): what the page says as `user` is a claim.
  * An application whose Appspec says `deployment.embedded.host.user: signed`
  * takes only a token the host's **server** signed with the deployment's
  * secret (HS256: `sub`, `name`, `exp` at most an hour away), which the page
@@ -32,7 +32,7 @@
  *
  * Offered: the functions of the page its Appspec names
  * (`deployment.embedded.host.functions`), as Reactor has a plugin offer
- * what it does (REACTOR_UI RU-7): each a **command** of the host's plugin,
+ * what it does (RU-7): each a **command** of the host's plugin,
  * `host.<name>` (`host.context` for the values it passes), and the plugin's
  * **agent tools** bundle (`AgentTools`, id `host`) naming them for its agent
  * as the tools `host_<name>` and `host_context` — which the chat turns into
@@ -70,7 +70,7 @@ export const hostCommand = (name) => `host.${name}`;
 /** The id of the host plugin's agent tools bundle. */
 export const HOST_TOOLS_BUNDLE = 'host';
 /**
- * The host plugin's commands (REACTOR_UI RU-7): `host.context` when the
+ * The host plugin's commands (RU-7): `host.context` when the
  * Appspec names values, and `host.<name>` for each function it names, each
  * decided by the rule naming its tool before the page is called. `host` is
  * read at each call, so that what the page passes is the newest.
@@ -159,7 +159,7 @@ export function hostCommands(app, host) {
     return commands;
 }
 /**
- * The host plugin's agent tools (REACTOR_UI RU-7): `host_context` and
+ * The host plugin's agent tools (RU-7): `host_context` and
  * `host_<name>`, each running its command; `null` for an application the
  * Appspec embeds with no host bridge.
  */
@@ -193,7 +193,7 @@ export function hostAgentTools(app) {
     });
 }
 /**
- * The host's plugin (REACTOR_UI RU-7): its commands, its agent tools bundle,
+ * The host's plugin (RU-7): its commands, its agent tools bundle,
  * and the chat extras that hand the bundle to the chat's agent wherever it
  * runs. `null` for an application with no host bridge.
  */
@@ -220,7 +220,7 @@ export function hostPlugin(app, host) {
     });
 }
 /**
- * What goes with every run for the host's user (LOOP D-21): the token the
+ * What goes with every run for the host's user (D-21): the token the
  * host's server signed, as `forwardedProps.loop.user_token`, for an
  * application that says `user: signed` — read at each run, so that the
  * newest is sent; nothing when the page gives none, and the runtime refuses
@@ -241,7 +241,7 @@ export function hostUserRunProps(app, host) {
 }
 /**
  * Asks ai-agents to sign the person signed in to Datalayer as a deployment's
- * user (LOOP D-21; STUDIO A-18 to A-20), with their own token: what a
+ * user (D-21; A-18 to A-20), with their own token: what a
  * surface that has no host server holding the deployment's secret — the
  * VS Code extension, Jupyter AI Agents, Datalayer Desktop — sends as
  * `forwardedProps.loop.user_token` with the runs of an application that