@datalayer/agent-runtimes 1.5.52 → 1.5.53

package/lib/portable/approvalCard.js

@@ -3,7 +3,7 @@
  * Distributed under the terms of the Modified BSD License.
  */
 /**
- * An approval as every card says it (MOBILE M-016): the shared controller
+ * An approval as every card says it (M-016): the shared controller
  * and prop contract under the web's *Waiting for you* and Datalayer Mobile's
  * Inbox and detail. A message to send is shown whole — its recipients,
  * subject and body — and anything else is every argument the tool gave,

package/lib/portable/approvals.d.ts

@@ -38,7 +38,7 @@ export type ApprovalArgs = {
     tool_args?: Record<string, unknown>;
     toolArgs?: Record<string, unknown>;
 };
-/** A message it asks to send, as the approval carries it, whole (LOOP W-05). */
+/** A message it asks to send, as the approval carries it, whole (W-05). */
 export type MessageAsked = {
     to: string;
     cc: string;
@@ -51,7 +51,7 @@ export type MessageAsked = {
     replies: boolean;
 };
 /**
- * The message a send asks for, to show whole before *Approve* (LOOP W-05):
+ * The message a send asks for, to show whole before *Approve* (W-05):
  * an approval whose arguments say to whom and what. `null` for anything else.
  */
 export declare function messageOfApproval(approval: ApprovalArgs): MessageAsked | null;

package/lib/portable/approvals.js

@@ -78,7 +78,7 @@ const addressed = (value) => Array.isArray(value)
         ? value
         : '';
 /**
- * The message a send asks for, to show whole before *Approve* (LOOP W-05):
+ * The message a send asks for, to show whole before *Approve* (W-05):
  * an approval whose arguments say to whom and what. `null` for anything else.
  */
 export function messageOfApproval(approval) {

package/lib/portable/conversation.d.ts

@@ -98,7 +98,7 @@ export type ConversationItem = {
     codeError: ToolCodeError | null;
     /** The exit code its code ended with (`sys.exit`), or `null`. */
     exitCode: number | null;
-    /** The protocol display its result carries, read strictly (`portable/displays`, MOBILE M-037). */
+    /** The protocol display its result carries, read strictly (`portable/displays`, M-037). */
     display: ProtocolDisplay | null;
 } | {
     kind: 'step';
@@ -154,7 +154,7 @@ export declare function questionOf(raw: unknown): ConversationQuestion | null;
 /**
  * A coding agent's row said again while it runs (the runtime's AG-UI
  * stream, `agent_runtimes.transports.agui_stream`): a terminal's output so
- * far rides it in `_meta["reactor.ui/display"]` (SHIELD SH-13, SH-16).
+ * far rides it in `_meta["reactor.ui/display"]` (SH-13, SH-16).
  */
 export declare const HARNESS_TOOL_CALL = "datalayer.harness.tool_call";
 /** The person's prompt, added before it is sent: its own row. */

package/lib/portable/conversation.js

@@ -162,7 +162,7 @@ function noted(state, event) {
 /**
  * A coding agent's row said again while it runs (the runtime's AG-UI
  * stream, `agent_runtimes.transports.agui_stream`): a terminal's output so
- * far rides it in `_meta["reactor.ui/display"]` (SHIELD SH-13, SH-16).
+ * far rides it in `_meta["reactor.ui/display"]` (SH-13, SH-16).
  */
 export const HARNESS_TOOL_CALL = 'datalayer.harness.tool_call';
 /** A running row given the display its update carries; `null` when it carries none. */

package/lib/portable/direct.d.ts

@@ -1,6 +1,6 @@
 /**
- * A Direct Conversation the person types in themselves (PAP_DATALAYER P-08,
- * MOBILE M-038): a linked sub-conversation under the one a company answered
+ * A Direct Conversation the person types in themselves (P-08,
+ * M-038): a linked sub-conversation under the one a company answered
  * in, where the person's own words go to the company as `sender: human`,
  * never through the application's model, until the company closes it.
  *

package/lib/portable/displays.d.ts

@@ -1,6 +1,6 @@
 /**
  * The protocol displays a run's tool results carry, read strictly for any
- * renderer (MOBILE M-037, REACTOR_UI RU-1): the page's half of a tool result
+ * renderer (M-037, RU-1): the page's half of a tool result
  * — `_meta["reactor.ui/display"]`, as the runtime's AG-UI stream sends it
  * beside the model's view — decoded into what a card draws.
  *
@@ -18,7 +18,7 @@
  *   where the conversation stands — participation.
  * - **A handoff** (`pap_handoff`'s answer): handed to the company's people,
  *   or why not.
- * - **A diff** (`…shield.diff+json`, SHIELD §4.3): what a coding agent
+ * - **A diff** (`…shield.diff+json`): what a coding agent
  *   changed in one file — its path, what it held, what it holds now, the
  *   file's language — drawn as a unified diff (`unifiedDiffLines`).
  * - **A terminal** (`…shield.terminal+json`): what it ran — the command, the

package/lib/portable/displays.js

@@ -4,7 +4,7 @@
  */
 /**
  * The protocol displays a run's tool results carry, read strictly for any
- * renderer (MOBILE M-037, REACTOR_UI RU-1): the page's half of a tool result
+ * renderer (M-037, RU-1): the page's half of a tool result
  * — `_meta["reactor.ui/display"]`, as the runtime's AG-UI stream sends it
  * beside the model's view — decoded into what a card draws.
  *
@@ -22,7 +22,7 @@
  *   where the conversation stands — participation.
  * - **A handoff** (`pap_handoff`'s answer): handed to the company's people,
  *   or why not.
- * - **A diff** (`…shield.diff+json`, SHIELD §4.3): what a coding agent
+ * - **A diff** (`…shield.diff+json`): what a coding agent
  *   changed in one file — its path, what it held, what it holds now, the
  *   file's language — drawn as a unified diff (`unifiedDiffLines`).
  * - **A terminal** (`…shield.terminal+json`): what it ran — the command, the
@@ -321,7 +321,7 @@ const OUTCOME_LEADS = {
 export const replyAuthor = (company, sender) => sender === 'human'
     ? `${company}, one of its people`
     : `${company}, its agent`;
-// -- a diff and a terminal (SHIELD §4.3, SH-16) ------------------------------------
+// -- a diff and a terminal (SH-16) ------------------------------------
 const countLines = (value) => value === '' ? 0 : value.split('\n').length - (value.endsWith('\n') ? 1 : 0);
 /** A file's language from its suffix, the same table the runtime uses. */
 const LANGUAGES = {

package/lib/portable/fixtures.d.ts

@@ -1,7 +1,7 @@
 /**
  * A conversation with one row of every kind, and a question waiting: the
  * fixture every renderer of `portable/views` is tested against — the web's
- * and Datalayer Mobile's (MOBILE §4.2) — so that a change of a row's words or
+ * and Datalayer Mobile's — so that a change of a row's words or
  * states is caught once.
  *
  * @module portable/fixtures
@@ -10,8 +10,8 @@ import { type ConversationState } from './conversation';
 /** A fresh copy of the fixture conversation. */
 /**
  * A coding agent's diff and terminal, as the runtime sends them beside a tool
- * result (`_meta["reactor.ui/display"]`, SHIELD §4.3, SH-16): what the phone
- * draws for MOBILE M-037, read by `protocolDisplayOf`.
+ * result (`_meta["reactor.ui/display"]`, SH-16): what the phone
+ * draws for M-037, read by `protocolDisplayOf`.
  */
 export declare function shieldDisplayFixtures(): {
     diff: Record<string, unknown>;
@@ -21,7 +21,6 @@ export declare function conversationFixture(): ConversationState;
 /**
  * `GET /api/ai-agents/v1/apps/activity`'s answer for one application: a
  * session in progress, a scheduled run, a completed one ended by Stop, and a
- * next page — what the Studio's Activity and the phone's read alike (MOBILE
- * M-015b).
+ * next page — what the Studio's Activity and the phone's read alike (M-015b).
  */
 export declare function activityFixture(): Record<string, unknown>;

package/lib/portable/fixtures.js

@@ -5,7 +5,7 @@
 /**
  * A conversation with one row of every kind, and a question waiting: the
  * fixture every renderer of `portable/views` is tested against — the web's
- * and Datalayer Mobile's (MOBILE §4.2) — so that a change of a row's words or
+ * and Datalayer Mobile's — so that a change of a row's words or
  * states is caught once.
  *
  * @module portable/fixtures
@@ -15,8 +15,8 @@ import { RUN_END_WORDS } from './records';
 /** A fresh copy of the fixture conversation. */
 /**
  * A coding agent's diff and terminal, as the runtime sends them beside a tool
- * result (`_meta["reactor.ui/display"]`, SHIELD §4.3, SH-16): what the phone
- * draws for MOBILE M-037, read by `protocolDisplayOf`.
+ * result (`_meta["reactor.ui/display"]`, SH-16): what the phone
+ * draws for M-037, read by `protocolDisplayOf`.
  */
 export function shieldDisplayFixtures() {
     return {
@@ -121,8 +121,7 @@ export function conversationFixture() {
 /**
  * `GET /api/ai-agents/v1/apps/activity`'s answer for one application: a
  * session in progress, a scheduled run, a completed one ended by Stop, and a
- * next page — what the Studio's Activity and the phone's read alike (MOBILE
- * M-015b).
+ * next page — what the Studio's Activity and the phone's read alike (M-015b).
  */
 export function activityFixture() {
     return {

package/lib/portable/hosts/agentClient.d.ts

@@ -38,8 +38,7 @@ export interface AgentClient<P> {
 }
 /**
  * Maps a session to its host place again, once the place changed after the
- * turn started (plans/DISCORD.md §3.2: Discord's answer thread exists only
- * once the answer is shown, so the target is PUT again with it).
+ * turn started (Discord's answer thread exists only once the answer is shown, so the target is PUT again with it).
  */
 export interface SessionBinder<P> {
     /** Whether the session was mapped: `false` where nothing binds (development's credentials). */
@@ -52,7 +51,7 @@ export type Place = Readonly<{
 }>;
 /**
  * Where a turn comes from, as the session API takes it on the turn itself
- * (`provenance`, plans/DISCORD.md §4.3, §4.4; at most 1 KiB): the host's
+ * (`provenance`, at most 1 KiB): the host's
  * kind, the place, the thread and the message.
  */
 export type TurnProvenance = Readonly<{
@@ -94,7 +93,7 @@ export interface HostCredentials<P> {
 /** What the installation's key is, for a turn: `undefined` when it was never bound. */
 export type HostKeyLookup<P> = (request: HostTurnRequest<P>) => Promise<string | undefined>;
 /**
- * The host credential exchange (SLACK §4.3, 1): the installation's key and
+ * The host credential exchange: the installation's key and
  * the host user it speaks for, exchanged at ai-agents for a fifteen-minute
  * host token of the linked person and one deployment.
  */
@@ -138,7 +137,7 @@ export declare class DevelopmentCredentials<P> implements HostCredentials<P> {
     constructor(apiUrl: string, token: string, fetchImplementation?: typeof fetch);
     forTurn(request: HostTurnRequest<P>): Promise<HostSession>;
 }
-/** One of an application's starters (SLACK S-104): the words shown, and the message it suggests asking. */
+/** One of an application's starters (S-104): the words shown, and the message it suggests asking. */
 export type Starter = Readonly<{
     label: string;
     message: string;
@@ -148,7 +147,7 @@ export interface StarterSource<K> {
     startersOf(key: K, externalUserId: string, applicationId: string): Promise<readonly Starter[]>;
 }
 /**
- * An application's starters (SLACK S-104), read from its runtime as the
+ * An application's starters (S-104), read from its runtime as the
  * linked person: the host credential exchange (no place: what is suggested
  * is private to them), then `GET /api/v1/apps/current` beside the session
  * API it answers. A runtime that does not answer starters is refused.

package/lib/portable/hosts/agentClient.js

@@ -6,10 +6,10 @@
  * A chat host's turns on Datalayer: the host credential exchange, a turn
  * started or sent on the deployment's session API (idempotent by the host's
  * event id), its AG-UI stream reduced to semantic events, and its session
- * mapped to the host's thread so approvals and completions are delivered
- * (SLACK §4.3, DISCORD §4.3). What is the host's own (its thread key, the
+ * mapped to the host's thread so approvals and completions are delivered.
+ * What is the host's own (its thread key, the
  * session uid, the place, the delivery target, its words) is injected as a
- * `HostShape`. Moved from the Slack service (plans/DISCORD.md DC-004).
+ * `HostShape`. Moved from the Slack service (DC-004).
  *
  * @module portable/hosts/agentClient
  */
@@ -19,7 +19,7 @@ import { semanticOf, turnOf } from '../semanticOfAgUi';
 import { HostRefusedError } from './client';
 import { exchangeSchema, HOST_KEY_HEADER, IDEMPOTENCY_HEADER, } from './contracts';
 /**
- * The host credential exchange (SLACK §4.3, 1): the installation's key and
+ * The host credential exchange: the installation's key and
  * the host user it speaks for, exchanged at ai-agents for a fifteen-minute
  * host token of the linked person and one deployment.
  */
@@ -143,7 +143,7 @@ const currentAppSchema = z.object({
     starters: z.array(z.object({ label: z.string(), message: z.string() })),
 });
 /**
- * An application's starters (SLACK S-104), read from its runtime as the
+ * An application's starters (S-104), read from its runtime as the
  * linked person: the host credential exchange (no place: what is suggested
  * is private to them), then `GET /api/v1/apps/current` beside the session
  * API it answers. A runtime that does not answer starters is refused.
@@ -203,9 +203,9 @@ export async function* agUiEventsOf(body) {
 }
 /**
  * The host's Datalayer client: a turn is started or sent on the deployment's
- * session API (idempotent by the host's event id, SLACK §4.3, 2), its AG-UI
+ * session API (idempotent by the host's event id), its AG-UI
  * stream reduced to semantic events, and its session mapped to the host's
- * thread so that approvals and completions are delivered (§4.3, 3).
+ * thread so that approvals and completions are delivered.
  */
 /** A refusal's `detail` when the answer is FastAPI's JSON, its status alone otherwise. */
 async function refusalDetailOf(response) {

package/lib/portable/hosts/approvalRenderers.d.ts

@@ -1,15 +1,15 @@
 import type { ApprovalPresentation } from './contracts';
 /**
- * Typed approval renderers (plans/SLACK.md §2 rule 6, S-302; plans/DISCORD.md
- * §3.6). A host offers Approve and Reject only when a renderer that knows the
+ * Typed approval renderers (S-302).
+ * A host offers Approve and Reject only when a renderer that knows the
  * tool proves that every material argument is shown: each argument the server
  * presented is named by the renderer, or the card fails closed. An unknown
  * tool, an argument the renderer does not know, an attachment, and every
  * action that is not mail (reads, writes, other sends, destructive, financial,
- * publishing, executing) are reviewed in Datalayer (SLACK §15, 5, decided by
- * the user on 16 October 2026: mail only). They render ai-agents' presentation v1, a different input
+ * publishing, executing) are reviewed in Datalayer (decided by the user on 16 October 2026: mail only).
+ * They render ai-agents' presentation v1, a different input
  * from `../approvals.ts` and `../approvalCard.ts`. Moved from the Slack
- * service (plans/DISCORD.md DC-004).
+ * service (DC-004).
  *
  * @module portable/hosts/approvalRenderers
  */
@@ -34,8 +34,7 @@ type Renderer = Readonly<{
 }>;
 /**
  * Action classes that are decided in Datalayer only: every class but `send`,
- * since only mail is decided in a host (decided by the user on 16 October
- * 2026, SLACK §15, 5).
+ * since only mail is decided in a host (decided by the user on 16 October 2026).
  */
 export declare const DATALAYER_ONLY: Set<"unknown" | "read" | "write" | "send" | "delete" | "publish" | "execute" | "financial">;
 /** The words of a tool's name that make a send mail: contracts.json `mail_words`. */

package/lib/portable/hosts/approvalRenderers.js

@@ -4,8 +4,7 @@
  */
 /**
  * Action classes that are decided in Datalayer only: every class but `send`,
- * since only mail is decided in a host (decided by the user on 16 October
- * 2026, SLACK §15, 5).
+ * since only mail is decided in a host (decided by the user on 16 October 2026).
  */
 export const DATALAYER_ONLY = new Set([
     'read',
@@ -99,7 +98,7 @@ const mail = {
         return rendered('mail', presentation, fields, MAIL_KEYS, extra);
     },
 };
-/** Everything but mail: shown, decided only in Datalayer (§15, 5). */
+/** Everything but mail: shown, decided only in Datalayer. */
 const datalayerOnly = {
     name: 'datalayer-only',
     matches: presentation => DATALAYER_ONLY.has(presentation.action_class),

package/lib/portable/hosts/client.d.ts

@@ -21,6 +21,8 @@ export type HostSelf = Readonly<{
     }>;
     directOnly: readonly string[];
     paused: boolean;
+    /** The installation's own uid: what its deliveries are addressed to. */
+    uid: string;
 }>;
 export type BoundHost = Readonly<{
     defaultDeployment?: string;
@@ -29,8 +31,7 @@ export type BoundHost = Readonly<{
     name?: string;
 }>;
 /**
- * The generic host routes of ai-agents (plans/SLACK.md §4.3, plans/DISCORD.md
- * §4.3) a host calls besides the credential exchange: as the installation,
+ * The generic host routes of ai-agents a host calls besides the credential exchange: as the installation,
  * with its key in `X-Datalayer-Host-Key`, or as a person, with the host token
  * the exchange answered. Any host speaks them.
  */
@@ -39,7 +40,7 @@ export declare class DatalayerHostClient {
     readonly apiUrl: string;
     readonly fetchImplementation: typeof fetch;
     constructor(apiUrl: string, fetchImplementation?: typeof fetch);
-    /** Bind the installation its owner set up, with the code their browser carried (§3.1). */
+    /** Bind the installation its owner set up, with the code their browser carried. */
     bind(input: {
         code: string;
         externalId: string;
@@ -50,12 +51,14 @@ export declare class DatalayerHostClient {
     /**
      * The installation as Datalayer keeps it: the deployments it allows (with
      * their application's name and whether each is kept on), the default, the
-     * channel policy and whether it is paused.
+     * channel policy, whether it is paused, and its uid (a host bound
+     * outside the install flow, such as a development app given its key,
+     * reads it here to poll its deliveries).
      */
     self(hostKey: string): Promise<HostSelf>;
     /**
-     * The host's own administration (plans/DISCORD.md DC-106,
-     * `/datalayer-admin`): pause, resume or one channel's rule, for the host
+     * The host's own administration (DC-106, `/datalayer-admin`):
+     * pause, resume or one channel's rule, for the host
      * user linked to the installation's owner; Datalayer refuses anyone else
      * (403), whatever their role in the host.
      */

package/lib/portable/hosts/client.js

@@ -3,8 +3,7 @@
  * Distributed under the terms of the Modified BSD License.
  */
 /**
- * The ai-agents host client every chat host calls (moved from the Slack
- * service, plans/DISCORD.md DC-004).
+ * The ai-agents host client every chat host calls (moved from the Slack service, DC-004).
  *
  * @module portable/hosts/client
  */
@@ -23,8 +22,7 @@ export class HostRefusedError extends Error {
     }
 }
 /**
- * The generic host routes of ai-agents (plans/SLACK.md §4.3, plans/DISCORD.md
- * §4.3) a host calls besides the credential exchange: as the installation,
+ * The generic host routes of ai-agents a host calls besides the credential exchange: as the installation,
  * with its key in `X-Datalayer-Host-Key`, or as a person, with the host token
  * the exchange answered. Any host speaks them.
  */
@@ -56,7 +54,7 @@ export class DatalayerHostClient {
             throw new HostRefusedError(response.status, typeof body.detail === 'string' ? body.detail : 'refused', what);
         return schema.parse(body);
     }
-    /** Bind the installation its owner set up, with the code their browser carried (§3.1). */
+    /** Bind the installation its owner set up, with the code their browser carried. */
     async bind(input) {
         const bound = await this.#call('Datalayer did not bind the installation', '/apps/hosts/bind', {
             body: {
@@ -80,7 +78,9 @@ export class DatalayerHostClient {
     /**
      * The installation as Datalayer keeps it: the deployments it allows (with
      * their application's name and whether each is kept on), the default, the
-     * channel policy and whether it is paused.
+     * channel policy, whether it is paused, and its uid (a host bound
+     * outside the install flow, such as a development app given its key,
+     * reads it here to poll its deliveries).
      */
     async self(hostKey) {
         const answered = await this.#call('Datalayer did not answer the installation', '/apps/hosts/self', { hostKey }, selfSchema);
@@ -100,11 +100,12 @@ export class DatalayerHostClient {
             })),
             directOnly: host.direct_only ?? [],
             paused: host.paused ?? false,
+            uid: host.uid,
         };
     }
     /**
-     * The host's own administration (plans/DISCORD.md DC-106,
-     * `/datalayer-admin`): pause, resume or one channel's rule, for the host
+     * The host's own administration (DC-106, `/datalayer-admin`):
+     * pause, resume or one channel's rule, for the host
      * user linked to the installation's owner; Datalayer refuses anyone else
      * (403), whatever their role in the host.
      */

package/lib/portable/hosts/contracts.d.ts

@@ -1,7 +1,6 @@
 import { z } from 'zod';
 /**
- * The generic Datalayer host contracts (plans/SLACK.md §4.3, plans/DISCORD.md
- * §4.3), as ai-agents answers them, for every chat host (Slack, Discord).
+ * The generic Datalayer host contracts, as ai-agents answers them, for every chat host (Slack, Discord).
  * These shapes are shared with ai-agents through `contracts.json`, beside
  * this file and byte-identical to ai-agents' `tests/fixtures/hosts/`, which
  * both sides test. A delivery's `target` stays opaque here: each host
@@ -178,8 +177,7 @@ export declare function deliveryOfOutbox(item: unknown): HostDelivery;
 /**
  * Whether a host may offer Approve and Reject: only what the server says a
  * host may decide, in a version the hosts render, shown whole, pending, with
- * no secret field. Anything else gets *Review in Datalayer* (SLACK §2 rule 6,
- * DISCORD §2 rule 6). Each host also checks the card fits its own limits.
+ * no secret field. Anything else gets *Review in Datalayer*. Each host also checks the card fits its own limits.
  */
 export declare function hostMayDecide(presentation: ApprovalPresentation): boolean;
 /** `v1=` HMAC-SHA256 of `"<timestamp>.<raw body>"`, as ai-agents signs a push. */

package/lib/portable/hosts/contracts.js

@@ -5,8 +5,7 @@
 import { createHmac, timingSafeEqual } from 'node:crypto';
 import { z } from 'zod';
 /**
- * The generic Datalayer host contracts (plans/SLACK.md §4.3, plans/DISCORD.md
- * §4.3), as ai-agents answers them, for every chat host (Slack, Discord).
+ * The generic Datalayer host contracts, as ai-agents answers them, for every chat host (Slack, Discord).
  * These shapes are shared with ai-agents through `contracts.json`, beside
  * this file and byte-identical to ai-agents' `tests/fixtures/hosts/`, which
  * both sides test. A delivery's `target` stays opaque here: each host
@@ -197,8 +196,7 @@ export function deliveryOfOutbox(item) {
 /**
  * Whether a host may offer Approve and Reject: only what the server says a
  * host may decide, in a version the hosts render, shown whole, pending, with
- * no secret field. Anything else gets *Review in Datalayer* (SLACK §2 rule 6,
- * DISCORD §2 rule 6). Each host also checks the card fits its own limits.
+ * no secret field. Anything else gets *Review in Datalayer*. Each host also checks the card fits its own limits.
  */
 export function hostMayDecide(presentation) {
     return (presentation.version === PRESENTATION_VERSION &&

package/lib/portable/hosts/contracts.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "about": "The generic host contracts of plans/SLACK.md §4.3 and plans/DISCORD.md §4.3, as ai-agents and the runtime's session API answer them. Shared verbatim by ai-agents (tests/fixtures/hosts) and agent-runtimes (src/portable/hosts, read by the Slack and Discord adapters from lib/portable/hosts): each side's tests check its half against this file.",
+  "about": "The generic host contracts of the chat hosts, as ai-agents and the runtime's session API answer them. Shared verbatim by ai-agents (tests/fixtures/hosts) and agent-runtimes (src/portable/hosts, read by the Slack and Discord adapters from lib/portable/hosts): each side's tests check its half against this file.",
   "headers": {
     "host_key": "X-Datalayer-Host-Key",
     "signature": "X-Datalayer-Signature",
@@ -416,7 +416,7 @@
     }
   },
   "discord": {
-    "about": "Discord's forms of the generic contracts (plans/DISCORD.md §4.3): the installation is <application_id>:<guild_id>, a member is their snowflake, a thread is sent as its parent channel, the session uid is hostSessionUid(\"discord\", [application, guild, channel, thread]).",
+    "about": "Discord's forms of the generic contracts: the installation is <application_id>:<guild_id>, a member is their snowflake, a thread is sent as its parent channel, the session uid is hostSessionUid(\"discord\", [application, guild, channel, thread]).",
     "application_id": "123456789012345678",
     "guild_id": "234567890123456789",
     "bind_request": {

package/lib/portable/hosts/deadLetters.js

@@ -3,14 +3,14 @@
  * Distributed under the terms of the Modified BSD License.
  */
 /**
- * Dead letters (SLACK §9, S-405; DISCORD DC-403): jobs that failed five
+ * Dead letters (S-405, DC-403): jobs that failed five
  * times. By default an operator sees their metadata and a hash of their
  * payload — never the words of a prompt or a delivery. Replaying puts one
  * back to work, once. Reading a payload is privileged: a dead job's only, it
  * needs a reason, is recorded in `<prefix>_payload_access` and audited, and
  * its credentials are still redacted. Every replay is kept in
  * `<prefix>_job_replays` with who asked. Moved from the Slack service
- * (plans/DISCORD.md DC-004); each service keeps only the bin that opens its
+ * (DC-004); each service keeps only the bin that opens its
  * database and calls `runDeadLettersCli`.
  *
  * @module portable/hosts/deadLetters

package/lib/portable/hosts/deliveries.d.ts

@@ -1,11 +1,10 @@
 /**
- * Datalayer's deliveries to a chat host (SLACK §4.3, 3; DISCORD §3.8): the
+ * Datalayer's deliveries to a chat host: the
  * signed webhook ai-agents pushes to, the outbox read when a push was
  * missed, and each delivery handled once then acknowledged. What a delivery
  * shows is the host's own (its `DeliveryHandler`); where its installations
  * and claims are kept is its store, seen here as a `DeliverySink` and a
- * `DeliveryClaimStore`. Moved from the Slack service (plans/DISCORD.md
- * DC-004).
+ * `DeliveryClaimStore`. Moved from the Slack service (DC-004).
  *
  * @module portable/hosts/deliveries
  */

package/lib/portable/hosts/forbiddenGraph.d.ts

@@ -1,12 +1,12 @@
 /**
- * What may never reach a host service's production code (SLACK §4.2, S-005;
- * DISCORD §4.2): Jupyter, JupyterLab, Lumino, Datalayer's Jupyter packages,
+ * What may never reach a host service's production code (S-005):
+ * Jupyter, JupyterLab, Lumino, Datalayer's Jupyter packages,
  * React, Primer, Reactor and the other host services. Checked over the
  * service's source imports, its esbuild bundle's module graph
  * (`forbiddenInBundle`, over the metafile) and the installed graph of the
  * bundle's externals (`npm ls --omit=dev --omit=peer --all`). Pure functions:
  * each service reads its files and runs them. Moved from the Slack service
- * (plans/DISCORD.md DC-004).
+ * (DC-004).
  *
  * @module portable/hosts/forbiddenGraph
  */
@@ -66,7 +66,7 @@ export type BundleMetafile = {
     }>;
 };
 /**
- * What a service's esbuild bundle may hold (DISCORD §4.2): its own sources,
+ * What a service's esbuild bundle may hold: its own sources,
  * and agent-runtimes' `lib/portable` (by its real path: the monorepo's
  * workspace link resolves to `ai/agent-runtimes/lib/portable/…`). Every
  * other module is a package's, and refused; every external is a `node:`

package/lib/portable/hosts/forbiddenGraph.js

@@ -3,14 +3,14 @@
  * Distributed under the terms of the Modified BSD License.
  */
 /**
- * What may never reach a host service's production code (SLACK §4.2, S-005;
- * DISCORD §4.2): Jupyter, JupyterLab, Lumino, Datalayer's Jupyter packages,
+ * What may never reach a host service's production code (S-005):
+ * Jupyter, JupyterLab, Lumino, Datalayer's Jupyter packages,
  * React, Primer, Reactor and the other host services. Checked over the
  * service's source imports, its esbuild bundle's module graph
  * (`forbiddenInBundle`, over the metafile) and the installed graph of the
  * bundle's externals (`npm ls --omit=dev --omit=peer --all`). Pure functions:
  * each service reads its files and runs them. Moved from the Slack service
- * (plans/DISCORD.md DC-004).
+ * (DC-004).
  *
  * @module portable/hosts/forbiddenGraph
  */
@@ -134,7 +134,7 @@ export function forbiddenInGraph(lock) {
 /** Where agent-runtimes' portable code lies, by the real path esbuild reads it from. */
 const PORTABLE = /(^|\/)agent-runtimes\/lib\/portable\//;
 /**
- * What a service's esbuild bundle may hold (DISCORD §4.2): its own sources,
+ * What a service's esbuild bundle may hold: its own sources,
  * and agent-runtimes' `lib/portable` (by its real path: the monorepo's
  * workspace link resolves to `ai/agent-runtimes/lib/portable/…`). Every
  * other module is a package's, and refused; every external is a `node:`

package/lib/portable/hosts/health.d.ts

@@ -1,11 +1,10 @@
 /**
- * Liveness and readiness (SLACK §10, S-101; DISCORD §10): `/healthz` says the
+ * Liveness and readiness (S-101): `/healthz` says the
  * process answers; `/readyz` says it can take durable work now — its store
  * and its queue answer — and never asks the host or Datalayer, so a
  * transient outage of either does not take the pods out of service: accepted
  * work waits in the queue instead. And the window a signed host request's
- * timestamp must fall in. Moved from the Slack service (plans/DISCORD.md
- * DC-004).
+ * timestamp must fall in. Moved from the Slack service (DC-004).
  *
  * @module portable/hosts/health
  */
@@ -25,7 +24,7 @@ export declare const HEALTH_PATHS: readonly ["/healthz", "/readyz"];
 export declare function answerHealth(checks: ReadinessChecks, request: IncomingMessage, response: ServerResponse): boolean;
 /** A worker's own server: its health and readiness only (no host route). */
 export declare function healthServer(checks: ReadinessChecks): Server;
-/** How far a signed host request's timestamp may be from now, either way (SLACK §7.1, 1; DISCORD §7.1, 1). */
+/** How far a signed host request's timestamp may be from now, either way. */
 export declare const REQUEST_WINDOW_SECONDS: number;
 /**
  * Whether a request's timestamp header (Slack's `X-Slack-Request-Timestamp`,

package/lib/portable/hosts/health.js

@@ -3,13 +3,12 @@
  * Distributed under the terms of the Modified BSD License.
  */
 /**
- * Liveness and readiness (SLACK §10, S-101; DISCORD §10): `/healthz` says the
+ * Liveness and readiness (S-101): `/healthz` says the
  * process answers; `/readyz` says it can take durable work now — its store
  * and its queue answer — and never asks the host or Datalayer, so a
  * transient outage of either does not take the pods out of service: accepted
  * work waits in the queue instead. And the window a signed host request's
- * timestamp must fall in. Moved from the Slack service (plans/DISCORD.md
- * DC-004).
+ * timestamp must fall in. Moved from the Slack service (DC-004).
  *
  * @module portable/hosts/health
  */
@@ -78,7 +77,7 @@ export function healthServer(checks) {
         }
     });
 }
-/** How far a signed host request's timestamp may be from now, either way (SLACK §7.1, 1; DISCORD §7.1, 1). */
+/** How far a signed host request's timestamp may be from now, either way. */
 export const REQUEST_WINDOW_SECONDS = 5 * 60;
 /**
  * Whether a request's timestamp header (Slack's `X-Slack-Request-Timestamp`,

package/lib/portable/hosts/index.d.ts

@@ -4,7 +4,7 @@
  * semantic events a turn is reduced to, approval renderers, deliveries, the
  * turn's state, application resolution, the durable queue, quotas, secrets
  * at rest, observability, dead letters, health, the shared schema and the
- * forbidden-graph gate (plans/DISCORD.md §4.2, DC-004, DC-005).
+ * forbidden-graph gate (DC-004, DC-005).
  *
  * Imported as `@datalayer/agent-runtimes/lib/portable/hosts`, and only by a
  * Node service, which bundles it with esbuild. It reaches `src/portable/` and