@datalayer/agent-runtimes 1.5.6 → 1.5.8

package/lib/specs/appspecSchema.js

@@ -921,7 +921,7 @@ export const APPSPEC_SCHEMA = {
         },
         AppPact: {
             additionalProperties: false,
-            description: 'PACT: the businesses it asks for each person (AGENT_PROTOCOLS PI-01).',
+            description: 'PACT: the businesses it asks for each person (AGENT_PROTOCOLS PI-01), and\nwhether it answers as one (PR-13).',
             properties: {
                 connections: {
                     description: 'Businesses, over PACT',
@@ -931,10 +931,50 @@ export const APPSPEC_SCHEMA = {
                     title: 'Connections',
                     type: 'array',
                 },
+                business: {
+                    $ref: '#/$defs/AppPactBusiness',
+                    description: 'As a business',
+                },
             },
             title: 'AppPact',
             type: 'object',
         },
+        AppPactBusiness: {
+            additionalProperties: false,
+            description: "The application answers as a PACT business (AGENT_PROTOCOLS PR-13, PI-32; decided 2026-10-13).\n\nPublished at its deployment's own address: its A2A Agent Card names\nDatalayer as the Provider and the application's owner as the Brand; its\nA2A interface verifies each personal-agent JWT against a registered\nissuer's keys (§3.1); with `scopes`, a person delegates to a personal agent\nthrough the Provider's device-code sign-in — their Datalayer sign-in — and\nevery answer under their delegation carries a signed receipt (§5).",
+            properties: {
+                enabled: {
+                    default: false,
+                    description: 'Whether it is published as a business at Ship',
+                    title: 'Enabled',
+                    type: 'boolean',
+                },
+                brand: {
+                    default: '',
+                    description: "The Brand's name on its card: the application's `owner` when unsaid",
+                    title: 'Brand',
+                    type: 'string',
+                },
+                scopes: {
+                    additionalProperties: {
+                        type: 'string',
+                    },
+                    description: 'What a person may let a personal agent do, `{scope: what the person is shown}`: `bookings:read: See your bookings`; none, it answers personal agents alone',
+                    title: 'Scopes',
+                    type: 'object',
+                },
+                registered_agents: {
+                    description: 'The personal agents it accepts, each its issuer and its keys',
+                    items: {
+                        $ref: '#/$defs/AppPactRegisteredAgent',
+                    },
+                    title: 'Registered Agents',
+                    type: 'array',
+                },
+            },
+            title: 'AppPactBusiness',
+            type: 'object',
+        },
         AppPactConnection: {
             additionalProperties: false,
             description: "A business the application asks for each person, over PACT 1.0 (AGENT_PROTOCOLS PI-01).\n\nThe Brand is named by its domain — its Agent Card is at\n`https://<brand>/.well-known/agent-card.json` (PACT §2.1) — and its\nProvider's `audience`, which the Provider assigns at registration and\nthe personal-agent JWT carries (§3.1). Always in each person's own name:\nPACT acts for a person. No credential is ever part of a spec.",
@@ -972,6 +1012,25 @@ export const APPSPEC_SCHEMA = {
             title: 'AppPactConnection',
             type: 'object',
         },
+        AppPactRegisteredAgent: {
+            additionalProperties: false,
+            description: 'A personal agent the business accepts (PACT 1.0 §3.1): its issuer, and where its keys are.\n\nRegistered by the Maker, as `pap.company.registered_agents` (AGENT_PROTOCOLS PR-13,\ndecided 2026-10-13): a personal-agent JWT is verified against the keys of a registered\nissuer only, and any other is refused.',
+            properties: {
+                issuer: {
+                    description: "The personal agent's `iss`, an HTTPS URL",
+                    title: 'Issuer',
+                    type: 'string',
+                },
+                jwks_uri: {
+                    description: 'Where its public keys are (a JWKS), an HTTPS URL',
+                    title: 'Jwks Uri',
+                    type: 'string',
+                },
+            },
+            required: ['issuer', 'jwks_uri'],
+            title: 'AppPactRegisteredAgent',
+            type: 'object',
+        },
         AppPage: {
             additionalProperties: false,
             description: "A widget's page written in its code (LOOP P-05): `@app.page`.\n\nIts inputs are a form, drawn on the page; as one changes, the function\nof its code runs again on them and the page shows what it returned, in\nplace. Without its file nothing runs it, and validation says so.",
@@ -1057,8 +1116,22 @@ export const APPSPEC_SCHEMA = {
         },
         AppPap: {
             additionalProperties: false,
-            description: 'Personal Agent Protocol: the companies it works with, and whether it is one.',
+            description: 'Personal Agent Protocol: the companies it works with, and whether it is one.\n\nA `pap` block names the profile it is written for (PAP_DATALAYER S-03): one\nDatalayer speaks, or it is refused in a sentence. An application without the\nblock has none.',
             properties: {
+                profile: {
+                    anyOf: [
+                        {
+                            const: 'draft-01',
+                            type: 'string',
+                        },
+                        {
+                            type: 'null',
+                        },
+                    ],
+                    default: null,
+                    description: 'The Personal Agent Protocol profile it is written for: `draft-01`',
+                    title: 'Profile',
+                },
                 connections: {
                     description: 'Companies, as a personal agent',
                     items: {

package/lib/specs/scenes.d.ts

@@ -11,11 +11,13 @@ import type { SceneSpec } from '../types/scenes';
 export declare const CROP_MONITORING_SCENE_0_0_1: SceneSpec;
 export declare const DISASTER_ASSESSMENT_SCENE_0_0_1: SceneSpec;
 export declare const MONTH_END_CLOSE_SCENE_0_0_1: SceneSpec;
+export declare const PACT_A_PERSONAL_AGENT_AT_A_BUSINESS_SCENE_0_0_1: SceneSpec;
 export declare const PAP_A_PERSON_AND_A_COMPANY_SCENE_0_0_1: SceneSpec;
 export declare const PAP_APPROVE_ONCE_SCENE_0_0_1: SceneSpec;
 export declare const PAP_TWO_COMPANIES_SCENE_0_0_1: SceneSpec;
 export declare const PAP_YOUR_APPLICATION_A_COMPANY_SCENE_0_0_1: SceneSpec;
 export declare const SALES_AND_ACCOUNTING_SCENE_0_0_1: SceneSpec;
+export declare const UCP_A_PURCHASE_APPROVED_SCENE_0_0_1: SceneSpec;
 export declare const SCENE_CATALOGUE: Record<string, SceneSpec>;
 /** A scene, by `id` or `id:version`, or undefined. */
 export declare function getSceneSpec(ref: string): SceneSpec | undefined;

package/lib/specs/scenes.js

@@ -1053,6 +1053,174 @@ export const MONTH_END_CLOSE_SCENE_0_0_1 = {
         runtime: '1.3.93',
     },
 };
+export const PACT_A_PERSONAL_AGENT_AT_A_BUSINESS_SCENE_0_0_1 = {
+    schema: 'loop.scene/v1',
+    id: 'pact-a-personal-agent-at-a-business',
+    version: '0.0.1',
+    name: 'A Personal Agent at a Business',
+    description: 'Ada’s Travel Desk asks an airline about her flight, and she allows it to read her bookings, not to change them.',
+    tags: ['stage', 'pact'],
+    icon: 'people',
+    emoji: '✈️',
+    kind: 'scripted',
+    team: '',
+    entry: '',
+    cast: [],
+    setting: {
+        systems: [],
+        period: '',
+        language: '',
+        assumes: '',
+    },
+    script: [],
+    stage: {
+        positions: {},
+        opensFirst: '',
+        transcript: {
+            tools: true,
+            narration: true,
+        },
+        inspectors: [],
+        restsAfter: '',
+        pace: 'steady',
+    },
+    audience: {
+        who: 'signed-in',
+        ceilingPerAsk: 0.0,
+        asksADay: 0,
+    },
+    rehearsal: {
+        beats: [],
+        within: '',
+        verified: {
+            live: [],
+            recorded: [],
+            unverified: [],
+        },
+    },
+    deployment: {
+        account: '',
+        page: '',
+        addresses: {},
+    },
+    actors: [
+        {
+            id: 'ada',
+            name: 'Ada',
+            face: '🧑',
+            is: 'the person',
+        },
+        {
+            id: 'agent',
+            name: 'Travel Desk',
+            face: '🤖',
+            is: 'an application on Datalayer, working for Ada',
+        },
+        {
+            id: 'air',
+            name: 'Example Air Support',
+            face: '🛫',
+            is: 'a business, at air.examples.datalayer.run',
+        },
+    ],
+    lines: [
+        {
+            from: 'ada',
+            to: 'agent',
+            says: '“When is my flight?”',
+            how: '',
+        },
+        {
+            from: 'agent',
+            to: '',
+            says: 'Finds Example Air Support by its domain and checks who answers for it.',
+            card: {
+                kind: 'found',
+                title: 'Example Air Support',
+                rows: [
+                    ['Its domain', 'air.examples.datalayer.run'],
+                    ['Answered for it by', 'Example Provider'],
+                    ['How a person signs in', 'With a code, on the airline’s page'],
+                    [
+                        'It may ask',
+                        'See your bookings and their status · Change the date of a booking',
+                    ],
+                ],
+                lines: [],
+            },
+            how: 'The application reads the card the business publishes for agents, at its own domain.',
+        },
+        {
+            from: 'agent',
+            to: 'air',
+            says: 'Asks the airline’s agent about Ada’s bookings, as Travel Desk.',
+            how: 'Each request says which application asks, signed by Datalayer; nobody is signed in yet.',
+        },
+        {
+            from: 'air',
+            to: 'agent',
+            says: '“Happy to help. Please sign in so I can see your bookings.”',
+            how: 'The business asks for a sign-in and names what it may ask for.',
+        },
+        {
+            from: 'agent',
+            to: 'ada',
+            says: 'Asks Ada to sign in at Example Air, on the airline’s own page.',
+            card: {
+                kind: 'sign-in',
+                title: 'Sign in at Example Air',
+                rows: [],
+                lines: [
+                    'Travel Desk asks for: See your bookings and their status; Change the date of a booking.',
+                    'You sign in on the airline’s page, and choose what it may do there.',
+                    'You can allow fewer permissions than it asks for.',
+                ],
+            },
+            how: '',
+            turn: {
+                yes: 'Sign in, and allow only “See your bookings”',
+                no: '',
+                declined: '',
+            },
+        },
+        {
+            from: 'ada',
+            to: 'air',
+            says: 'Signs in on the airline’s page and allows “See your bookings and their status” only.',
+            how: 'The airline gives Travel Desk a permission of its own, for Ada and for this application only; Datalayer keeps it, out of the agent’s reach.',
+        },
+        {
+            from: 'air',
+            to: 'agent',
+            says: '“Your booking AB123 flies on 2026-11-02.”',
+            how: 'The airline signs a receipt of what it did with the permission.',
+        },
+        {
+            from: 'agent',
+            to: 'ada',
+            says: '“Your flight, booking AB123, is on 2 November 2026.”',
+            how: '',
+        },
+        {
+            from: 'agent',
+            to: '',
+            says: 'Keeps the airline’s receipt with its record, for Ada and for whoever built it.',
+            card: {
+                kind: 'record',
+                title: 'Activity',
+                rows: [
+                    ['Signed in at', 'Example Air, for Ada'],
+                    ['Allowed', 'See your bookings and their status'],
+                    ['Receipt', 'Looked up booking AB123, signed by the airline'],
+                ],
+                lines: [],
+            },
+            how: 'Ada sees the permission under In your name, and ends it there with Disconnect.',
+        },
+    ],
+    live: 'Working with a business over PACT is built in the Studio and its services; asking a business through Datalayer waits for them to be shipped.',
+    setup: [],
+};
 export const PAP_A_PERSON_AND_A_COMPANY_SCENE_0_0_1 = {
     schema: 'loop.scene/v1',
     id: 'pap-a-person-and-a-company',
@@ -2108,15 +2276,185 @@ export const SALES_AND_ACCOUNTING_SCENE_0_0_1 = {
         runtime: '1.3.93',
     },
 };
+export const UCP_A_PURCHASE_APPROVED_SCENE_0_0_1 = {
+    schema: 'loop.scene/v1',
+    id: 'ucp-a-purchase-approved',
+    version: '0.0.1',
+    name: 'A Purchase, Approved',
+    description: 'Ada’s Shopping Desk fills a basket at a test shop, and buys only once she approves the exact purchase.',
+    tags: ['stage', 'ucp', 'commerce'],
+    icon: 'people',
+    emoji: '🛍️',
+    kind: 'scripted',
+    team: '',
+    entry: '',
+    cast: [],
+    setting: {
+        systems: [],
+        period: '',
+        language: '',
+        assumes: '',
+    },
+    script: [],
+    stage: {
+        positions: {},
+        opensFirst: '',
+        transcript: {
+            tools: true,
+            narration: true,
+        },
+        inspectors: [],
+        restsAfter: '',
+        pace: 'steady',
+    },
+    audience: {
+        who: 'signed-in',
+        ceilingPerAsk: 0.0,
+        asksADay: 0,
+    },
+    rehearsal: {
+        beats: [],
+        within: '',
+        verified: {
+            live: [],
+            recorded: [],
+            unverified: [],
+        },
+    },
+    deployment: {
+        account: '',
+        page: '',
+        addresses: {},
+    },
+    actors: [
+        {
+            id: 'ada',
+            name: 'Ada',
+            face: '🧑',
+            is: 'the person',
+        },
+        {
+            id: 'agent',
+            name: 'Shopping Desk',
+            face: '🤖',
+            is: 'an application on Datalayer, shopping for Ada',
+        },
+        {
+            id: 'store',
+            name: 'Example Store',
+            face: '🍵',
+            is: 'a test shop, at store.examples.datalayer.run',
+        },
+    ],
+    lines: [
+        {
+            from: 'ada',
+            to: 'agent',
+            says: '“Buy me a stoneware mug.”',
+            how: '',
+        },
+        {
+            from: 'agent',
+            to: 'store',
+            says: 'Searches the shop for a mug.',
+            how: 'The application reads the page every shop publishes for agents, then its catalogue; reading changes nothing, so its rule lets it do it.',
+        },
+        {
+            from: 'store',
+            to: 'agent',
+            says: '“Stoneware mug: USD 24.00.”',
+            how: '',
+        },
+        {
+            from: 'agent',
+            to: 'store',
+            says: 'Fills a checkout with one stoneware mug, for Ada.',
+            how: 'A checkout the shop can cancel; nothing is bought yet.',
+        },
+        {
+            from: 'store',
+            to: 'agent',
+            says: '“Your checkout is ready to complete.”',
+            how: '',
+        },
+        {
+            from: 'agent',
+            to: 'ada',
+            says: 'Every purchase is asked first, whatever its rule says: it waits for Ada.',
+            card: {
+                kind: 'approval',
+                title: 'Shopping Desk asks you to approve a purchase',
+                rows: [
+                    ['Shop', 'Example Store'],
+                    ['What', 'Stoneware mug × 1'],
+                    ['Tax', 'USD 1.92'],
+                    ['Total', 'USD 25.92'],
+                    ['The most one purchase may cost', 'USD 50.00'],
+                ],
+                lines: ['Buy 1 Stoneware mug at Example Store for USD 25.92.'],
+            },
+            how: 'The purchase is the shop’s own checkout, read again before it is shown; approving this one never approves a changed basket.',
+            turn: {
+                yes: 'Approve',
+                no: 'Decline',
+                declined: 'Ada declined: the checkout is cancelled, and nothing is bought.',
+            },
+        },
+        {
+            from: 'agent',
+            to: 'store',
+            says: 'Completes the checkout, exactly as Ada approved it, with a test payment.',
+            how: 'Datalayer writes down that it buys before it does: asked again, it reads the order back instead of paying twice. No card is ever in the conversation.',
+        },
+        {
+            from: 'store',
+            to: 'agent',
+            says: '“Your order is placed.”',
+            how: '',
+        },
+        {
+            from: 'agent',
+            to: 'ada',
+            says: 'Tells Ada what the shop says it did.',
+            card: {
+                kind: 'done',
+                title: 'Bought, once',
+                rows: [],
+                lines: ['1 Stoneware mug, USD 25.92, at Example Store.'],
+            },
+            how: '',
+        },
+        {
+            from: 'agent',
+            to: '',
+            says: 'Keeps a record of the purchase, for Ada and for whoever built it.',
+            card: {
+                kind: 'record',
+                title: 'Activity',
+                rows: [
+                    ['Bought at', 'Example Store, for Ada'],
+                    ['Amount', 'USD 25.92'],
+                    ['Approved by', 'Ada, once'],
+                ],
+                lines: [],
+            },
+            how: 'The purchase shows in the application’s Activity with its amount.',
+        },
+    ],
+    live: 'Buying at a test shop is built in the Studio and its services, always asked first, under a limit, with no real payment; the test shops answering on Datalayer wait for them to be shipped.',
+    setup: [],
+};
 export const SCENE_CATALOGUE = {
     'crop-monitoring': CROP_MONITORING_SCENE_0_0_1,
     'disaster-assessment': DISASTER_ASSESSMENT_SCENE_0_0_1,
     'month-end-close': MONTH_END_CLOSE_SCENE_0_0_1,
+    'pact-a-personal-agent-at-a-business': PACT_A_PERSONAL_AGENT_AT_A_BUSINESS_SCENE_0_0_1,
     'pap-a-person-and-a-company': PAP_A_PERSON_AND_A_COMPANY_SCENE_0_0_1,
     'pap-approve-once': PAP_APPROVE_ONCE_SCENE_0_0_1,
     'pap-two-companies': PAP_TWO_COMPANIES_SCENE_0_0_1,
     'pap-your-application-a-company': PAP_YOUR_APPLICATION_A_COMPANY_SCENE_0_0_1,
     'sales-and-accounting': SALES_AND_ACCOUNTING_SCENE_0_0_1,
+    'ucp-a-purchase-approved': UCP_A_PURCHASE_APPROVED_SCENE_0_0_1,
 };
 /** A scene, by `id` or `id:version`, or undefined. */
 export function getSceneSpec(ref) {

package/lib/types/agentspecs.d.ts

@@ -514,8 +514,15 @@ export interface AppPapOperationSpec {
     /** Whether only the person may confirm it, never an approval in advance. */
     userApprovalRequired: boolean;
 }
+/**
+ * A Personal Agent Protocol profile Datalayer speaks: a draft the PAP SDK
+ * implements (`draft-01` is its `PROTOCOL_PROFILE` 0.1; PAP_DATALAYER S-03).
+ */
+export type PapProfile = 'draft-01';
 /** Personal Agent Protocol: the companies it works with, and whether it is one. */
 export interface AppPapSpec {
+    /** The profile its `pap` block is written for: one Datalayer speaks, or the block is refused. */
+    profile: PapProfile;
     connections: AppPapConnectionSpec[];
     company: AppPapCompanySpec;
 }
@@ -536,9 +543,33 @@ export interface AppPactConnectionSpec {
     /** The Brand's scopes it may ask the person for: `orders:read`. */
     scopes: string[];
 }
-/** PACT: the businesses it asks for each person. */
+/** A personal agent a PACT business accepts (PACT 1.0 §3.1): its issuer and its keys. */
+export interface AppPactRegisteredAgentSpec {
+    /** The personal agent's `iss`, an HTTPS URL. */
+    issuer: string;
+    /** Where its public keys are (a JWKS), an HTTPS URL. */
+    jwksUri: string;
+}
+/**
+ * The application as a PACT business (AGENT_PROTOCOLS PR-13, PI-32): its card
+ * names Datalayer as the Provider and its owner as the Brand; it accepts the
+ * personal agents its Maker registered, and a person delegates the scopes it
+ * offers through their Datalayer sign-in.
+ */
+export interface AppPactBusinessSpec {
+    /** Whether it is published as a business at Ship. */
+    enabled: boolean;
+    /** The Brand's name on its card: the application's `owner` when empty. */
+    brand: string;
+    /** What a person may let a personal agent do, `{scope: what the person is shown}`. */
+    scopes: Record<string, string>;
+    registeredAgents: AppPactRegisteredAgentSpec[];
+}
+/** PACT: the businesses it asks for each person, and whether it answers as one. */
 export interface AppPactSpec {
     connections: AppPactConnectionSpec[];
+    /** As a business (PR-13): absent or not `enabled`, it is none. Read, it is always said. */
+    business?: AppPactBusinessSpec;
 }
 /** The most one purchase may cost at a merchant (AGENT_PROTOCOLS PI-22). */
 export interface AppSpendLimitSpec {

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@datalayer/agent-runtimes",
-    "version": "1.5.6",
+    "version": "1.5.8",
     "type": "module",
     "workspaces": [
         ".",