@datalayer/agent-runtimes 1.5.52 → 1.5.53

package/lib/apps/apps/appspec.js

@@ -9,7 +9,7 @@ import { UI_RENDERER_CATALOGUE } from '../../specs/uiRenderers';
 import { DEFAULT_MAX_FILES, DEFAULT_UPLOAD_MB } from './uploads';
 /** The version of the spec itself. */
 export const APP_SCHEMA = 'loop.app/v1';
-/** The language an application's own words are in, unless it says (LOOP P-26). */
+/** The language an application's own words are in, unless it says (P-26). */
 export const DEFAULT_LANGUAGE = 'en';
 /** The face of an application that has not chosen one. */
 export const DEFAULT_EMOJI = '\u{1F440}';
@@ -23,7 +23,7 @@ export const APP_ACCENTS = [
     'violet',
 ];
 /**
- * The themes an application may run in (LOOP T-30): Appearance's, as
+ * The themes an application may run in (T-30): Appearance's, as
  * primer-addons lists them (`themeVariants`), in its order.
  */
 export const APP_THEME_VARIANTS = [
@@ -39,7 +39,7 @@ export const APP_THEME_VARIANTS = [
 ];
 /** The colour modes a theme is worn in. */
 export const APP_THEME_MODES = ['light', 'dark', 'auto'];
-/** The four ways an application sits in another product's page (LOOP D-07). */
+/** The four ways an application sits in another product's page (D-07). */
 export const APP_EMBED_MODES = [
     'inline',
     'bubble',
@@ -47,7 +47,7 @@ export const APP_EMBED_MODES = [
     'assistant',
 ];
 /**
- * How an Appspec names the character of its floating assistant (LOOP T-24):
+ * How an Appspec names the character of its floating assistant (T-24):
  * the id a plugin contributes it under, `paperclip` or `acme-owl` — as
  * agentspecs' `ASSISTANT_CHARACTER_ID`. Which ids exist is what the enabled
  * plugins contribute (`assistantCharacterNamed`), not the spec's to say.
@@ -77,7 +77,7 @@ export const DEFAULT_LAYOUTS = {
 /** The media type of an answer drawn as A2UI surfaces. */
 export const A2UI_OUTPUT = 'application/json+a2ui';
 /**
- * The UI plugins an application is drawn with (AGENTIC_UI R8), as its `ui`
+ * The UI plugins an application is drawn with (R8), as its `ui`
  * lists them: what `appPreset` mounts for it. A decision: its page alone,
  * drawn by its host. Every other kind: the conversation — `chat`, which
  * stands for the conversation base the runtime mounts — then the A2UI
@@ -136,7 +136,7 @@ const texts = (value) => Array.isArray(value)
     : [];
 const records = (value) => Array.isArray(value) ? value.filter(isData) : [];
 /**
- * An application's UI plugins as its document says them (AGENTIC_UI R8):
+ * An application's UI plugins as its document says them (R8):
  * `{plugin, renderer}` each. Anything else — a bare id, the old shape — is
  * not read as a plugin: `parseAppspec` refuses it (`uiShapeProblems`).
  */
@@ -160,7 +160,7 @@ const uiShapeProblems = (value) => Array.isArray(value)
             : '.'))
     : [];
 /**
- * One turn of a test's conversation as its document says it (STUDIO E-01):
+ * One turn of a test's conversation as its document says it (E-01):
  * what it says, chooses or presses, with a press's payload; nothing it does
  * not say.
  */
@@ -202,7 +202,7 @@ export function emptyAppspec(kind = 'chat') {
         contents: [],
         connections: [],
         protocols: [],
-        // A blank application starts with its kind's UI plugins (AGENTIC_UI R8).
+        // A blank application starts with its kind's UI plugins (R8).
         ui: uiFor(kind),
         rules: [],
         permissions: {
@@ -299,9 +299,9 @@ const KNOWN_KEYS = [
     'avatar',
     'banner',
 ];
-/** Where a check of its code runs (LOOP P-06). */
+/** Where a check of its code runs (P-06). */
 const CHECK_STAGES = ['answer', 'tool_call'];
-/** A tool of its own, written in its code (LOOP P-06); a wrong one is said by the checks. */
+/** A tool of its own, written in its code (P-06); a wrong one is said by the checks. */
 function parseTool(data) {
     return {
         name: text(data.name),
@@ -320,7 +320,7 @@ function parseConnection(data) {
         only: texts(data.only),
     };
 }
-/** The Personal Agent Protocol profiles Datalayer speaks, as agentspecs' `PAP_PROFILES` (PAP_DATALAYER S-03). */
+/** The Personal Agent Protocol profiles Datalayer speaks, as agentspecs' `PAP_PROFILES` (S-03). */
 export const PAP_PROFILES = ['draft-01'];
 /** The profile a `pap` block is written for when the Studio or a builder starts one. */
 export const PAP_PROFILE = PAP_PROFILES[PAP_PROFILES.length - 1];
@@ -348,7 +348,7 @@ const enumsOf = (value, allowed, otherwise) => {
     return value.filter((item) => allowed.includes(item));
 };
 /**
- * Personal Agent Protocol (PAP_DATALAYER S-01): the companies the
+ * Personal Agent Protocol (S-01): the companies the
  * application works with, and whether it is one. Defaults are agentspecs'.
  */
 function parsePap(data) {
@@ -385,7 +385,7 @@ function parsePap(data) {
         },
     };
 }
-/** A standing permission an operation gives (PAP_DATALAYER R-07), as agentspecs reads it. */
+/** A standing permission an operation gives (R-07), as agentspecs reads it. */
 function parsePapStanding(data) {
     return {
         connection: text(data.connection),
@@ -452,7 +452,7 @@ function dumpPap(pap) {
         .text('summary', operation.summary, '\u0000')
         .value('user_approval_required', operation.userApprovalRequired, true).data)).data).data;
 }
-/** PACT (AGENT_PROTOCOLS PI-01): the businesses it asks for each person, and as one (PR-13). */
+/** PACT (PI-01): the businesses it asks for each person, and as one (PR-13). */
 function parsePact(data) {
     const business = isData(data.business) ? data.business : {};
     const scopes = {};
@@ -480,7 +480,7 @@ function parsePact(data) {
         },
     };
 }
-/** Commerce (AGENT_PROTOCOLS PI-01): the merchants it shops at for each person. */
+/** Commerce (PI-01): the merchants it shops at for each person. */
 function parseCommerce(data) {
     return {
         merchants: records(data.merchants).map(merchant => ({
@@ -515,7 +515,7 @@ function dumpCommerce(commerce) {
         }
         : {}).data)).data;
 }
-/** Signed fetch (AGENT_PROTOCOLS EX-11): the exact sites it reads pages of, each request signed. */
+/** Signed fetch (EX-11): the exact sites it reads pages of, each request signed. */
 function parseSignedFetch(data) {
     return {
         sites: records(data.sites).map(site => ({
@@ -532,7 +532,7 @@ function dumpSignedFetch(signedFetch) {
         .text('id', site.id, '\u0000')
         .text('site', site.site, '\u0000').data)).data;
 }
-/** One of a pair of examples (AGENT_PROTOCOLS PR-13): its id and its side, or a problem. */
+/** One of a pair of examples (PR-13): its id and its side, or a problem. */
 function parsePair(data) {
     const id = text(data.id);
     const role = text(data.role);
@@ -569,7 +569,7 @@ function dumpPact(pact) {
         .text('issuer', agent.issuer, '\u0000')
         .text('jwks_uri', agent.jwksUri, '\u0000').data)).data).data;
 }
-/** A2A (AGENT_PROTOCOLS PR-02): the extensions its Agent Card advertises. */
+/** A2A (PR-02): the extensions its Agent Card advertises. */
 function parseA2A(data) {
     return {
         extensions: records(data.extensions).map(extension => ({
@@ -599,8 +599,8 @@ function parseRule(data) {
         behaviour: oneOf(data.behaviour, BEHAVIOURS, 'ask_first'),
     };
 }
-/** A slash command (LOOP P-19); a wrong one is said by the checks. */
-/** An action of its code, typed (REACTOR_UI RU-5): its payload's schema kept as written. */
+/** A slash command (P-19); a wrong one is said by the checks. */
+/** An action of its code, typed (RU-5): its payload's schema kept as written. */
 function parseAction(data) {
     const action = { name: text(data.name) };
     if (text(data.description)) {
@@ -631,7 +631,7 @@ function parseModeOption(data) {
     }
     return option;
 }
-/** A mode switch (LOOP P-19). */
+/** A mode switch (P-19). */
 function parseMode(data) {
     const mode = {
         id: text(data.id),
@@ -643,7 +643,7 @@ function parseMode(data) {
     }
     return mode;
 }
-/** A starter, its category said only when it has one (LOOP P-20). */
+/** A starter, its category said only when it has one (P-20). */
 function parseStarter(data) {
     const starter = {
         label: text(data.label),
@@ -654,7 +654,7 @@ function parseStarter(data) {
     }
     return starter;
 }
-/** One of several assistants in one application (LOOP P-20). */
+/** One of several assistants in one application (P-20). */
 function parseProfile(data) {
     return {
         id: text(data.id),
@@ -674,7 +674,7 @@ function recordsBy(value) {
     return Object.fromEntries(Object.entries(isData(value) ? value : {}).filter((entry) => isData(entry[1])));
 }
 const mapValues = (value, map) => Object.fromEntries(Object.entries(value).map(([key, item]) => [key, map(item)]));
-/** An application's words in one other language (LOOP P-26), every key present. */
+/** An application's words in one other language (P-26), every key present. */
 function parseTranslation(data) {
     return {
         name: text(data.name),
@@ -713,7 +713,7 @@ function parseSurface(data) {
         composedAt: text(data.composed_at),
     };
 }
-/** An application's voice (VOICE.md VO-41): off unless said. */
+/** An application's voice (VO-41): off unless said. */
 export const DEFAULT_VOICE = {
     enabled: false,
     input: 'push_to_talk',
@@ -743,7 +743,7 @@ function parseUploads(data) {
         maxFiles: numberOf(data.max_files, DEFAULT_MAX_FILES),
     };
 }
-/** What a page's output may be drawn with (LOOP P-05), and the property of each that shows its value. */
+/** What a page's output may be drawn with (P-05), and the property of each that shows its value. */
 export const PAGE_OUTPUT_SHOWS = {
     Text: 'text',
     Image: 'url',
@@ -753,7 +753,7 @@ export const PAGE_OUTPUT_SHOWS = {
 /** The height of a component its developer wrote (P-17), unless it says. */
 export const DEFAULT_CUSTOM_HEIGHT = 240;
 /**
- * A component its developer wrote (LOOP P-17), as written: its schema and
+ * A component its developer wrote (P-17), as written: its schema and
  * example kept whole, so that the checks say what is wrong with them.
  */
 function parseCustomComponent(data) {
@@ -924,7 +924,7 @@ function parseDecision(data) {
         decisionModel: text(data.decision_model),
     };
 }
-/** What it is tried on before it is anybody's (STUDIO E-06, E-11): read only. */
+/** What it is tried on before it is anybody's (E-06, E-11): read only. */
 function parseSamples(data) {
     return {
         documents: records(data.documents).map(document => ({
@@ -1025,7 +1025,7 @@ export function parseAppspec(document) {
     const verified = isData(tests.verified) ? tests.verified : {};
     const record = isData(data.record) ? data.record : {};
     const checks = isData(data.checks) ? data.checks : {};
-    // A check of its code runs on an answer or a tool call (LOOP P-06).
+    // A check of its code runs on an answer or a tool call (P-06).
     for (const check of records(checks.code)) {
         if (!CHECK_STAGES.includes(check.on)) {
             problems.push(`The check \`${text(check.name)}\` of its code runs on answer or tool_call, not \`${String(check.on)}\`.`);
@@ -1074,12 +1074,12 @@ export function parseAppspec(document) {
             evalset: text(tests.evalset),
             cases: records(tests.cases).map(testCase => ({
                 ask: text(testCase.ask),
-                // A conversation, turn by turn, when it is one (STUDIO E-01).
+                // A conversation, turn by turn, when it is one (E-01).
                 ...(records(testCase.turns).length
                     ? { turns: records(testCase.turns).map(parseTestTurn) }
                     : {}),
                 expect: text(testCase.expect),
-                // Decided by its code (LOOP P-06), when it names the function.
+                // Decided by its code (P-06), when it names the function.
                 ...(text(testCase.code) ? { code: text(testCase.code) } : {}),
                 // Given files with what it is asked, when it is.
                 ...(records(testCase.files).length
@@ -1133,7 +1133,7 @@ export function parseAppspec(document) {
         app.decision = parseDecision(data.decision);
     }
     // A `pap` block names a profile Datalayer speaks, or it is refused and not
-    // read (PAP_DATALAYER S-03); a block saying nothing is no block.
+    // read (S-03); a block saying nothing is no block.
     if (isData(data.pap) && Object.keys(data.pap).length > 0) {
         const problem = papProfileProblem(data.pap.profile);
         if (problem) {
@@ -1168,7 +1168,7 @@ export function parseAppspec(document) {
     return { app, problems };
 }
 /**
- * What is wrong with the UI plugins an application names (AGENTIC_UI R8), in
+ * What is wrong with the UI plugins an application names (R8), in
  * the sentences agentspecs says (`ui_choices_problems`): a plugin the
  * catalogue does not have or said twice — a renderer named as a plugin is
  * refused —, a renderer the catalogue does not have or the plugin may not be
@@ -1213,7 +1213,7 @@ export function uiProblems(app) {
 }
 /**
  * What is wrong with the protocols an application says it speaks
- * (AGENT_PROTOCOLS PS-02), as agentspecs says it: an id the catalogue does not
+ * (PS-02), as agentspecs says it: an id the catalogue does not
  * know or said twice, a planned protocol while it is offered, and a `pap`,
  * `pact`, `a2a` or `signed_fetch` block configuring a protocol it does not list.
  */
@@ -1545,7 +1545,7 @@ export function dumpAppspec(app) {
         .value('ready_at', app.tests.readyAt, DEFAULT_READY_AT)
         .text('evalset', app.tests.evalset)
         .list('cases', app.tests.cases.map(testCase => ({
-        // One message, or a conversation in its place (STUDIO E-01).
+        // One message, or a conversation in its place (E-01).
         ...(testCase.turns?.length
             ? {
                 turns: testCase.turns.map(turn => parseTestTurn({ ...turn })),

package/lib/apps/apps/browserSandbox.d.ts

@@ -1,5 +1,5 @@
 /**
- * An application's code, run in the page (STUDIO E-11).
+ * An application's code, run in the page (E-11).
  *
  * On a runtime, an application's agent runs its code in a sandbox of the
  * runtime's, through `execute_code` — what *Quote Calculator* and *Report

package/lib/apps/apps/checks.d.ts

@@ -10,34 +10,43 @@ export interface AppCheck {
     setup: string[];
 }
 /**
- * The component a layout names (LOOP C-13), from the catalogs of the enabled
+ * The component a layout names (C-13), from the catalogs of the enabled
  * UI specs, by the name a surface gives it.
  */
 export declare const componentNamed: (name: string) => ComponentSpec | undefined;
 /**
- * What its code declares that agentspecs refuses (LOOP P-06): its tools,
+ * What its code declares that agentspecs refuses (P-06): its tools,
  * its checks and the tests it decides, each by a Python name, each name
  * once; a tool says what it does, by class, each class once.
  */
 export declare function ownCodeProblems(app: AppSpec): string[];
 /**
- * What agentspecs refuses of a widget's page written in its code (LOOP
- * P-05): a page that is not a widget's, inputs that are not a form, outputs
+ * What agentspecs refuses of a widget's page written in its code (P-05): a page that is not a widget's, inputs that are not a form, outputs
  * of one name twice, drawn with another component, saying in their `props`
  * what their value fills or lacking what their component needs, and an input
  * named as a setting — both are on the page at `/inputs/<name>`.
  */
 export declare function pageProblems(app: AppSpec): string[];
+/** What the spec says of itself that the tolerant reader lets through. */
+/** What was said aloud is kept 30 days at most (VO-63): agentspecs' `AUDIO_KEPT_DAYS_AT_MOST`. */
+export declare const AUDIO_KEPT_DAYS_AT_MOST = 30;
+/**
+ * agentspecs' refusals of an application keeping audio (VO-42, VO-63),
+ * in its sentences: never public, only when it listens, and never
+ * kept longer than 30 days — by `record.keep_for`, or by the Track its
+ * `checks.track` names, whose retention wins.
+ */
+export declare function keptAudioProblems(app: AppSpec): string[];
 /** How an organization's own context is named: never a catalogue id (agentspecs' `ORGANIZATION_FRAME_PREFIX`). */
 /**
- * What stops a Form block from asking (LOOP C-16), in agentspecs'
+ * What stops a Form block from asking (C-16), in agentspecs'
  * `form_problems` sentences: its schema is an object of named fields, each
  * required one among them, so that the page draws it and the runtime checks
  * what it receives against the same schema.
  */
 export declare function formProblems(node: Record<string, unknown>): string[];
 export declare const ORGANIZATION_FRAME_PREFIX = "org-";
-/** Whether a reference names an organization's own context rather than the catalogue's (LOOP U-32). */
+/** Whether a reference names an organization's own context rather than the catalogue's (U-32). */
 export declare const isOrganizationFrame: (ref: string) => boolean;
 /**
  * The Guards the runtime executes (agent-runtimes `loop/apps/guards.py`): the
@@ -49,7 +58,7 @@ export declare const EXECUTED_GUARDS: readonly string[];
  * Where an application is checked: the plugins its organization has turned
  * off (catalogue ids, `plugins_off` in IAM), none when it has decided nothing
  * or the checks run with no organization; and the ids of its organization's
- * contexts (`frames` in IAM: its versions and its own, LOOP U-32), unsaid
+ * contexts (`frames` in IAM: its versions and its own, U-32), unsaid
  * when no organization is known — a context of an organization's own is then
  * refused.
  */

package/lib/apps/apps/checks.js

@@ -3,7 +3,7 @@
  * Distributed under the terms of the Modified BSD License.
  */
 /**
- * The instant checks of an application (LOOP V-01 to V-04): what an editor
+ * The instant checks of an application (V-01 to V-04): what an editor
  * shows on every change, with no model call.
  *
  * The same checks `loop apps validate` runs with agentspecs, in the words it
@@ -57,7 +57,7 @@ const idOf = (ref) => {
     return at > 0 && ref.slice(at + 1).includes('.') ? ref.slice(0, at) : ref;
 };
 /**
- * The component a layout names (LOOP C-13), from the catalogs of the enabled
+ * The component a layout names (C-13), from the catalogs of the enabled
  * UI specs, by the name a surface gives it.
  */
 export const componentNamed = (name) => getComponent(name);
@@ -88,7 +88,7 @@ const matches = (name, pattern) => new RegExp('^' +
 /** The name of a function of an application's code (agentspecs' `CODE_NAME`). */
 const CODE_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
 /**
- * What its code declares that agentspecs refuses (LOOP P-06): its tools,
+ * What its code declares that agentspecs refuses (P-06): its tools,
  * its checks and the tests it decides, each by a Python name, each name
  * once; a tool says what it does, by class, each class once.
  */
@@ -137,8 +137,7 @@ export function ownCodeProblems(app) {
     return problems;
 }
 /**
- * What agentspecs refuses of a widget's page written in its code (LOOP
- * P-05): a page that is not a widget's, inputs that are not a form, outputs
+ * What agentspecs refuses of a widget's page written in its code (P-05): a page that is not a widget's, inputs that are not a form, outputs
  * of one name twice, drawn with another component, saying in their `props`
  * what their value fills or lacking what their component needs, and an input
  * named as a setting — both are on the page at `/inputs/<name>`.
@@ -210,6 +209,45 @@ export function pageProblems(app) {
     return problems;
 }
 /** What the spec says of itself that the tolerant reader lets through. */
+/** What was said aloud is kept 30 days at most (VO-63): agentspecs' `AUDIO_KEPT_DAYS_AT_MOST`. */
+export const AUDIO_KEPT_DAYS_AT_MOST = 30;
+/**
+ * agentspecs' refusals of an application keeping audio (VO-42, VO-63),
+ * in its sentences: never public, only when it listens, and never
+ * kept longer than 30 days — by `record.keep_for`, or by the Track its
+ * `checks.track` names, whose retention wins.
+ */
+export function keptAudioProblems(app) {
+    if (!app.record.include.includes('audio')) {
+        return [];
+    }
+    if (app.deployment.hosted?.visibility === 'public') {
+        return [
+            'A public application keeps no audio: remove `audio` from `record.include`, or open it to fewer people.',
+        ];
+    }
+    const voice = app.interface.voice;
+    if (!voice?.enabled || voice.input === 'off') {
+        return [
+            'An application keeps audio only when it listens: turn `interface.voice` on.',
+        ];
+    }
+    let days = app.record.retentionDays;
+    let keeper = `\`record.keep_for\` (${app.record.keepFor})`;
+    const track = app.checks.track.trim()
+        ? getTrack(app.checks.track)
+        : undefined;
+    if (track) {
+        days = track.retentionDays;
+        keeper = `its Track ${track.id} (${track.retainFor})`;
+    }
+    if (days > AUDIO_KEPT_DAYS_AT_MOST) {
+        return [
+            `Audio is kept ${AUDIO_KEPT_DAYS_AT_MOST} days at most, and ${keeper} keeps the record ${days} days: keep it \`${AUDIO_KEPT_DAYS_AT_MOST}_days\` or less, or remove \`audio\` from \`record.include\`.`,
+        ];
+    }
+    return [];
+}
 function shapeProblems(app) {
     const problems = [];
     if (!app.id.trim()) {
@@ -224,7 +262,7 @@ function shapeProblems(app) {
     if (Boolean(app.agent) === Boolean(app.team)) {
         problems.push('An application names who does the work: an `agent`, or a `team`, and not both.');
     }
-    // agentspecs refuses either way round (LOOP E-01): off says why, on says nothing.
+    // agentspecs refuses either way round (E-01): off says why, on says nothing.
     const because = (app.unavailable_because ?? '').trim();
     if (!app.enabled && !because) {
         problems.push('An application that is not offered says why, under `unavailable_because`.');
@@ -249,7 +287,8 @@ function shapeProblems(app) {
     else if (app.triggers.length > 0) {
         problems.push(`A ${app.kind} application starts when somebody opens it: \`triggers\` are a worker's.`);
     }
-    // Its profiles (LOOP P-20): two at least, or none; each id slash-safe and
+    problems.push(...keptAudioProblems(app));
+    // Its profiles (P-20): two at least, or none; each id slash-safe and
     // said once, each with a label.
     const profiles = app.interface.profiles ?? [];
     if (profiles.length === 1) {
@@ -317,7 +356,7 @@ function shapeProblems(app) {
             }
         }
     }
-    // What its code declares (LOOP P-06), as agentspecs refuses it.
+    // What its code declares (P-06), as agentspecs refuses it.
     problems.push(...ownCodeProblems(app));
     const servers = app.connections.map(connection => idOf(connection.server));
     if (new Set(servers).size !== servers.length) {
@@ -345,7 +384,7 @@ function shapeProblems(app) {
 }
 /** How an organization's own context is named: never a catalogue id (agentspecs' `ORGANIZATION_FRAME_PREFIX`). */
 /**
- * What stops a Form block from asking (LOOP C-16), in agentspecs'
+ * What stops a Form block from asking (C-16), in agentspecs'
  * `form_problems` sentences: its schema is an object of named fields, each
  * required one among them, so that the page draws it and the runtime checks
  * what it receives against the same schema.
@@ -385,7 +424,7 @@ export function formProblems(node) {
 }
 const isPlainRecord = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
 export const ORGANIZATION_FRAME_PREFIX = 'org-';
-/** Whether a reference names an organization's own context rather than the catalogue's (LOOP U-32). */
+/** Whether a reference names an organization's own context rather than the catalogue's (U-32). */
 export const isOrganizationFrame = (ref) => idOf(ref).startsWith(ORGANIZATION_FRAME_PREFIX);
 /**
  * Every reference that does not resolve, in sentences. A context of an
@@ -399,7 +438,7 @@ function referenceProblems(app, organizationFrames) {
         missing('agent or Cog', app.agent);
     }
     // An agent on a catalogue harness is served by the runtime's ACP adapter
-    // (SHIELD SH-10); `custom` and a harness that is none are refused, not run
+    // (SH-10); `custom` and a harness that is none are refused, not run
     // on pydantic-ai in their place (SH-01).
     const agent = app.agent ? getAgentspecs(idOf(app.agent)) : undefined;
     const unserved = agent ? unservedHarnessProblem(agent) : undefined;
@@ -455,13 +494,13 @@ function referenceProblems(app, organizationFrames) {
     if (app.model && !getModel(app.model)) {
         missing('model', app.model);
     }
-    // The model a profile runs on is the catalogue's (LOOP P-20).
+    // The model a profile runs on is the catalogue's (P-20).
     for (const profile of app.interface.profiles ?? []) {
         if (profile.model && !getModel(profile.model)) {
             problems.push(`The profile “${profile.id}” runs on “${profile.model}”, which is no model.`);
         }
     }
-    // The model a mode runs on is the catalogue's (LOOP P-19).
+    // The model a mode runs on is the catalogue's (P-19).
     for (const mode of app.interface.modes ?? []) {
         for (const option of mode.options) {
             if (option.model && !getModel(option.model)) {
@@ -527,7 +566,7 @@ function referenceProblems(app, organizationFrames) {
             if (server === undefined) {
                 if (hostTools.includes(target))
                     continue;
-                // A tool of its own, written in its code (LOOP P-06).
+                // A tool of its own, written in its code (P-06).
                 if ((app.tools ?? []).some(tool => tool.name === target))
                     continue;
                 if (!getBackendToolSpec(name)) {
@@ -579,7 +618,7 @@ function attentionNotes(app) {
     if (app.record.include.length === 0) {
         notes.push('It keeps no record of what it did.');
     }
-    // A Guard the runtime does not run checks nothing (LOOP R-06): said here,
+    // A Guard the runtime does not run checks nothing (R-06): said here,
     // where the builder decides, rather than found out in production.
     for (const ref of app.checks.guards) {
         const guard = own(GUARD_CATALOGUE, idOf(ref));
@@ -690,6 +729,11 @@ const ENUMS = {
         'sources',
         'outputs',
         'feedback',
+        // agentspecs' RecordItem whole: audio (VO-42, VO-63, refused by keptAudioProblems unless allowed),
+        // a harness's diffs and terminals.
+        'audio',
+        'diffs',
+        'terminals',
     ],
     visibility: ['private', 'invited', 'organization', 'link', 'public'],
     mode: ['inline', 'bubble', 'panel', 'assistant'],
@@ -852,7 +896,7 @@ export function documentShapeProblems(document) {
         if (ui.assistant !== undefined && !isAssistantCharacterId(ui.assistant)) {
             at('interface.assistant', 'names a character by the id a plugin contributes it under, lowercase words joined by a hyphen: `paperclip`, `acme-owl`');
         }
-        // Its voice (VOICE.md VO-41, VO-12).
+        // Its voice (VO-41, VO-12).
         mapping(ui.voice, 'interface.voice', voice => {
             oneOf(voice.input, ENUMS.voiceInput, 'interface.voice.input');
             oneOf(voice.output, ENUMS.voiceOutput, 'interface.voice.output');
@@ -867,7 +911,7 @@ export function documentShapeProblems(document) {
             unknownKeys(item, ['label', 'message', 'category'], where, 'a starter');
         };
         records(ui.starters, 'interface.starters', starter);
-        // Its profiles (LOOP P-20), as agentspecs refuses them: no key unknown.
+        // Its profiles (P-20), as agentspecs refuses them: no key unknown.
         records(ui.profiles, 'interface.profiles', (profile, where) => {
             required(profile, 'id', where);
             required(profile, 'label', where);
@@ -899,7 +943,7 @@ export function documentShapeProblems(document) {
                 ], `interface.translations.${tag}`, 'a translation'));
             }
         });
-        // Its commands and modes in the composer (LOOP P-19), as agentspecs
+        // Its commands and modes in the composer (P-19), as agentspecs
         // refuses them: names and ids slash-safe and said once, no key unknown.
         const named = new Set();
         records(ui.commands, 'interface.commands', (item, where) => {
@@ -980,14 +1024,14 @@ export function documentShapeProblems(document) {
         // Its settings are the JSON Schema of a form (C-16), checked as a Form's
         // schema is; the list of settings of earlier versions is refused.
         if (Array.isArray(ui.settings)) {
-            at('interface.settings', 'is the JSON Schema of a form, an object of named fields (LOOP C-16), not a list of settings: say each one as a property, its title and its default');
+            at('interface.settings', 'is the JSON Schema of a form, an object of named fields (C-16), not a list of settings: say each one as a property, its title and its default');
         }
         else {
             mapping(ui.settings, 'interface.settings', settings => {
                 problems.push(...formProblems({ id: 'settings', schema: settings }));
             });
         }
-        // What a person may send without being asked (LOOP P-21), as agentspecs
+        // What a person may send without being asked (P-21), as agentspecs
         // refuses it: a kind at least, each a type said once, sizes it takes.
         mapping(ui.uploads, 'interface.uploads', uploads => {
             unknownKeys(uploads, ['kinds', 'max_files'], 'interface.uploads', 'uploads');
@@ -1030,7 +1074,7 @@ export function documentShapeProblems(document) {
                 required(item, 'id', where);
                 required(item, 'component', where);
             });
-        }); // A widget's page written in its code (LOOP P-05), as agentspecs reads it.
+        }); // A widget's page written in its code (P-05), as agentspecs reads it.
         mapping(ui.page, 'interface.page', page => {
             unknownKeys(page, ['function', 'inputs', 'inputs_ui', 'outputs', 'live'], 'interface.page', 'a page');
             required(page, 'function', 'interface.page');

package/lib/apps/apps/composer.d.ts

@@ -1,5 +1,5 @@
 /**
- * Commands, modes and profiles in the composer (LOOP P-19, P-20), as rules:
+ * Commands, modes and profiles in the composer (P-19, P-20), as rules:
  * what a command sends, which option of each mode a run is in, which profile
  * a conversation is with and what it offers. agentspecs' own
  * (`command_prompt`, `AppInterface.mode_choice`, `mode_effect`,
@@ -30,7 +30,7 @@ export declare function modeDefaults(app: Pick<AppSpec, 'interface'>): Record<st
  */
 export declare function modeChoice(app: Pick<AppSpec, 'name' | 'interface'>, chosen?: Record<string, string>): Record<string, string>;
 /**
- * The profile a conversation is with (LOOP P-20): the one chosen, else the
+ * The profile a conversation is with (P-20): the one chosen, else the
  * first; undefined for an application without profiles. One it does not have
  * is refused, in a sentence, as the runtime refuses it.
  */

package/lib/apps/apps/composer.js

@@ -44,7 +44,7 @@ export function modeChoice(app, chosen = {}) {
     return { ...modeDefaults(app), ...chosen };
 }
 /**
- * The profile a conversation is with (LOOP P-20): the one chosen, else the
+ * The profile a conversation is with (P-20): the one chosen, else the
  * first; undefined for an application without profiles. One it does not have
  * is refused, in a sentence, as the runtime refuses it.
  */

package/lib/apps/apps/computer.d.ts

@@ -1,5 +1,5 @@
 /**
- * An application's computer (LOOP R-23, I-01): the sandbox its agent runs on,
+ * An application's computer (R-23, I-01): the sandbox its agent runs on,
  * as the computer view shows it — its three parts, each off until it is
  * turned on; what its agent ran on it, from the conversation's tool calls;
  * its files, read-only; its browser's page, live; and *Take over* and
@@ -138,7 +138,7 @@ export type ComputerContext = {
     /** The person's token; none on the machine itself. */
     token?: string;
     /**
-     * Where what an application serves a person is served from (STUDIO D-22):
+     * Where what an application serves a person is served from (D-22):
      * `user-apps.datalayer.run`, the same runtime behind another name. A file
      * fetched from the runtimes' host would be same-origin with every other
      * runtime; from this one it is origin of its own. Unset, the runtime's own
@@ -149,7 +149,7 @@ export type ComputerContext = {
 /** The computer's routes, for an agent. */
 export declare const computerUrl: (context: ComputerContext, tail?: string) => string;
 /**
- * Where a file of its computer is read (STUDIO D-22): the same path, on the
+ * Where a file of its computer is read (D-22): the same path, on the
  * host kept for what applications serve when there is one. Only the origin
  * changes — the runtime is the same, and its prefix is answered there too.
  */

package/lib/apps/apps/computer.js

@@ -156,7 +156,7 @@ export function terminalEntries(conversation) {
 /** The computer's routes, for an agent. */
 export const computerUrl = (context, tail = '') => `${context.serverUrl.replace(/\/+$/, '')}/api/v1/apps/agents/${encodeURIComponent(context.agentId)}/computer${tail}`;
 /**
- * Where a file of its computer is read (STUDIO D-22): the same path, on the
+ * Where a file of its computer is read (D-22): the same path, on the
  * host kept for what applications serve when there is one. Only the origin
  * changes — the runtime is the same, and its prefix is answered there too.
  */