@datalayer/agent-runtimes 1.5.7 → 1.5.8

package/lib/apps/apps/appspec.d.ts

@@ -24,7 +24,7 @@
  *
  * @module apps/apps/appspec
  */
-import type { AppAccent, AppThemeMode, AppThemeVariant, AppAssistantCharacter, AppEmbedMode, AppCustomComponentSpec, AppVoiceSpec, AppKind, AppLayout, AppPageOutputComponent, AppSpec } from '../../types/agentspecs';
+import type { AppAccent, AppThemeMode, AppThemeVariant, AppAssistantCharacter, AppEmbedMode, PapProfile, AppCustomComponentSpec, AppVoiceSpec, AppKind, AppLayout, AppPageOutputComponent, AppSpec } from '../../types/agentspecs';
 /** The version of the spec itself. */
 export declare const APP_SCHEMA = "loop.app/v1";
 /** The language an application's own words are in, unless it says (LOOP P-26). */
@@ -60,6 +60,15 @@ type Data = Record<string, unknown>;
 export declare function retentionDays(keepFor: string): number;
 /** An application with nothing said: what *Start blank* opens. */
 export declare function emptyAppspec(kind?: AppKind): AppSpec;
+/** The Personal Agent Protocol profiles Datalayer speaks, as agentspecs' `PAP_PROFILES` (PAP_DATALAYER S-03). */
+export declare const PAP_PROFILES: readonly PapProfile[];
+/** The profile a `pap` block is written for when the Studio or a builder starts one. */
+export declare const PAP_PROFILE: PapProfile;
+/**
+ * What is wrong with a `pap` block's profile, in agentspecs' sentence
+ * (`pap_profile_problem`); `undefined` when it is one Datalayer speaks.
+ */
+export declare function papProfileProblem(value: unknown): string | undefined;
 /** An application's voice (VOICE.md VO-41): off unless said. */
 export declare const DEFAULT_VOICE: AppVoiceSpec;
 /** What a page's output may be drawn with (LOOP P-05), and the property of each that shows its value. */

package/lib/apps/apps/appspec.js

@@ -248,6 +248,23 @@ function parseConnection(data) {
         only: texts(data.only),
     };
 }
+/** The Personal Agent Protocol profiles Datalayer speaks, as agentspecs' `PAP_PROFILES` (PAP_DATALAYER S-03). */
+export const PAP_PROFILES = ['draft-01'];
+/** The profile a `pap` block is written for when the Studio or a builder starts one. */
+export const PAP_PROFILE = PAP_PROFILES[PAP_PROFILES.length - 1];
+/**
+ * What is wrong with a `pap` block's profile, in agentspecs' sentence
+ * (`pap_profile_problem`); `undefined` when it is one Datalayer speaks.
+ */
+export function papProfileProblem(value) {
+    if (value === undefined || value === null || value === '') {
+        return `Its \`pap\` block names no Personal Agent Protocol profile: add \`profile: ${PAP_PROFILE}\`.`;
+    }
+    if (!PAP_PROFILES.includes(value)) {
+        return `This application asks for Personal Agent Protocol profile “${String(value)}”; Datalayer speaks ${PAP_PROFILES.join(' or ')}.`;
+    }
+    return undefined;
+}
 const PAP_INTERFACES = ['agent', 'openapi', 'mcp', 'web'];
 const PAP_SIGN_IN = ['direct', 'device', 'mediated'];
 const PAP_DEFAULT_INTERFACES = ['agent'];
@@ -265,6 +282,7 @@ const enumsOf = (value, allowed, otherwise) => {
 function parsePap(data) {
     const company = isData(data.company) ? data.company : {};
     return {
+        profile: data.profile,
         connections: records(data.connections).map(connection => ({
             id: text(connection.id),
             company: text(connection.company),
@@ -297,6 +315,7 @@ function dumpPap(pap) {
     if (!pap)
         return {};
     return new Writer()
+        .text('profile', pap.profile, '\u0000')
         .list('connections', pap.connections.map(connection => new Writer()
         .text('id', connection.id, '\u0000')
         .text('company', connection.company, '\u0000')
@@ -322,8 +341,15 @@ function dumpPap(pap) {
         .text('summary', operation.summary, '\u0000')
         .value('user_approval_required', operation.userApprovalRequired, true).data)).data).data;
 }
-/** PACT (AGENT_PROTOCOLS PI-01): the businesses it asks for each person. */
+/** PACT (AGENT_PROTOCOLS PI-01): the businesses it asks for each person, and as one (PR-13). */
 function parsePact(data) {
+    const business = isData(data.business) ? data.business : {};
+    const scopes = {};
+    if (isData(business.scopes)) {
+        for (const [scope, said] of Object.entries(business.scopes)) {
+            scopes[scope] = text(said);
+        }
+    }
     return {
         connections: records(data.connections).map(connection => ({
             id: text(connection.id),
@@ -332,6 +358,15 @@ function parsePact(data) {
             access: oneOf(connection.access, ['read', 'write'], 'read'),
             scopes: texts(connection.scopes),
         })),
+        business: {
+            enabled: flag(business.enabled, false),
+            brand: text(business.brand),
+            scopes,
+            registeredAgents: records(business.registered_agents).map(agent => ({
+                issuer: text(agent.issuer),
+                jwksUri: text(agent.jwks_uri),
+            })),
+        },
     };
 }
 /** Commerce (AGENT_PROTOCOLS PI-01): the merchants it shops at for each person. */
@@ -373,12 +408,26 @@ function dumpCommerce(commerce) {
 function dumpPact(pact) {
     if (!pact)
         return {};
-    return new Writer().list('connections', pact.connections.map(connection => new Writer()
+    const business = pact.business ?? {
+        enabled: false,
+        brand: '',
+        scopes: {},
+        registeredAgents: [],
+    };
+    return new Writer()
+        .list('connections', pact.connections.map(connection => new Writer()
         .text('id', connection.id, '\u0000')
         .text('brand', connection.brand, '\u0000')
         .text('audience', connection.audience, '\u0000')
         .value('access', connection.access, 'read')
-        .list('scopes', connection.scopes).data)).data;
+        .list('scopes', connection.scopes).data))
+        .part('business', new Writer()
+        .value('enabled', business.enabled, false)
+        .text('brand', business.brand)
+        .part('scopes', { ...business.scopes })
+        .list('registered_agents', business.registeredAgents.map(agent => new Writer()
+        .text('issuer', agent.issuer, '\u0000')
+        .text('jwks_uri', agent.jwksUri, '\u0000').data)).data).data;
 }
 /** A2A (AGENT_PROTOCOLS PR-02): the extensions its Agent Card advertises. */
 function parseA2A(data) {
@@ -942,8 +991,16 @@ export function parseAppspec(document) {
     if (isData(data.decision)) {
         app.decision = parseDecision(data.decision);
     }
-    if (isData(data.pap)) {
-        app.pap = parsePap(data.pap);
+    // A `pap` block names a profile Datalayer speaks, or it is refused and not
+    // read (PAP_DATALAYER S-03); a block saying nothing is no block.
+    if (isData(data.pap) && Object.keys(data.pap).length > 0) {
+        const problem = papProfileProblem(data.pap.profile);
+        if (problem) {
+            problems.push(problem);
+        }
+        else {
+            app.pap = parsePap(data.pap);
+        }
     }
     if (isData(data.pact)) {
         app.pact = parsePact(data.pact);
@@ -1006,7 +1063,8 @@ export function protocolsProblems(app) {
     }
     const configured = {
         pap: Boolean(app.pap && (app.pap.connections.length > 0 || app.pap.company.enabled)),
-        pact: Boolean(app.pact && app.pact.connections.length > 0),
+        pact: Boolean(app.pact &&
+            (app.pact.connections.length > 0 || app.pact.business?.enabled)),
         a2a: Boolean(app.a2a && app.a2a.extensions.length > 0),
     };
     for (const spec of Object.values(PROTOCOL_CATALOGUE)) {

package/lib/apps/core/index.d.ts

@@ -710,7 +710,33 @@ export type LoopChatExtrasValue = {
      * every snapshot the chat receives, `undefined` included.
      */
     onUsage?: (snapshot: ContextSnapshotData | undefined) => void;
+    /**
+     * What the person types goes somewhere else than the agent, live.
+     *
+     * While set, the composer's placeholder is `says` and sending hands the
+     * words to `send`, never to the model or the runtime: a person talking with
+     * a company themselves in a Direct Conversation (PAP_DATALAYER P-08), their
+     * own words sent as theirs. A refusal `send` throws is said under the
+     * composer and the words stay where they were typed. Unset, the composer
+     * talks to the agent again.
+     */
+    sendInstead?: {
+        /** Where the words go, in the person's words, in place of the placeholder. */
+        says: string;
+        send: (text: string) => Promise<void>;
+    };
 };
+/**
+ * The words sent where the extras say instead of to the agent
+ * (`sendInstead`): `null` when they go to the agent as usual; else whether
+ * they were taken, and the refusal in a sentence when they were not.
+ */
+export declare function sendInstead(extras: Pick<LoopChatExtrasValue, 'sendInstead'>, message: string): Promise<{
+    sent: true;
+} | {
+    sent: false;
+    refused: string;
+} | null>;
 export type ChatExtrasContribution = {
     /** Stable id, for the registry and the graph. */
     id: string;

package/lib/apps/core/index.js

@@ -181,6 +181,26 @@ export { LoopA2uiComponent, } from './a2uiComponents';
 // Where the files of an application's folder are served (LOOP P-29): said
 // by the page side its package carries.
 export { LoopAppFiles } from './appFiles';
+/**
+ * The words sent where the extras say instead of to the agent
+ * (`sendInstead`): `null` when they go to the agent as usual; else whether
+ * they were taken, and the refusal in a sentence when they were not.
+ */
+export async function sendInstead(extras, message) {
+    if (!extras.sendInstead) {
+        return null;
+    }
+    try {
+        await extras.sendInstead.send(message);
+        return { sent: true };
+    }
+    catch (error) {
+        return {
+            sent: false,
+            refused: error instanceof Error ? error.message : String(error),
+        };
+    }
+}
 export const LoopChatExtras = defineContributionPoint('loop.chat.extras');
 export const LoopOpeningNotebook = defineContributionPoint('loop.notebook.opening');
 export const LoopOpeningDocument = defineContributionPoint('loop.document.opening');

package/lib/apps/plugins/chat/ChatView.js

@@ -42,7 +42,7 @@ import { BROWSER_CODE_TOOL, dataUrlBase64, givenFilesSentence, sandboxFileName,
 import { useConfig } from '../../../hooks/useConfig';
 import { useSkills, useSkillActions } from '../../../hooks/useSkills';
 import { AI_MODEL_CATALOGUE, isChatModel } from '../../../specs/models';
-import { LoopAgentBlueprint, LoopAgentGate, LoopChatComposer, LoopChatExtras, LoopChatHeader, LoopChatLayout, LoopChatSuggestion, LoopChatSurface, LoopChatTurn, LoopCommand, LoopFrontendTool, LoopRunProps, LoopSlots, agentServerOf, noRuntimeSaid, canOpenView, runForwardedProps, onPromptFocusRequest, onSurfaceRequest, useLoopPromptStore, } from '../../core';
+import { LoopAgentBlueprint, LoopAgentGate, LoopChatComposer, sendInstead, LoopChatExtras, LoopChatHeader, LoopChatLayout, LoopChatSuggestion, LoopChatSurface, LoopChatTurn, LoopCommand, LoopFrontendTool, LoopRunProps, LoopSlots, agentServerOf, noRuntimeSaid, canOpenView, runForwardedProps, onPromptFocusRequest, onSurfaceRequest, useLoopPromptStore, } from '../../core';
 import { messageText, turnWritersOf } from './turnState';
 import { isInactiveSurfaceContribution, orderToolContributions, toolsForChatView, } from './chatViewTools';
 import { agentBundleToolDefinitions, useAgentCommandTools, } from '../../../tools/adapters/commands';
@@ -486,11 +486,27 @@ export default function ChatView({ workspace }) {
          * place "the first prompt" means the same thing regardless of which one
          * a person or a host used.
          */
+        setTransient(null);
+        /*
+         * Words that go elsewhere than the agent (`sendInstead`, PAP_DATALAYER
+         * P-08): a Direct Conversation with a company, the person's own words
+         * sent as theirs. Neither a command nor a turn, and never the model's;
+         * refused, the words stay where they were typed and the reason is said.
+         */
+        const elsewhere = await sendInstead(chatExtrasRef.current, message);
+        if (elsewhere) {
+            if (elsewhere.sent) {
+                setDraft('');
+            }
+            else {
+                setTransient(elsewhere.refused);
+            }
+            return;
+        }
         if (!firstPromptFired.current) {
             firstPromptFired.current = true;
             inputPromptConfig?.firstPromptHook?.();
         }
-        setTransient(null);
         // The turn begins where the message goes out (`sendNow`): a command
         // the workspace runs is not one.
         const outcome = await workspace.submit(message);
@@ -1594,8 +1610,9 @@ export default function ChatView({ workspace }) {
         // send button into a stop — the person keeps a way out.
         isLoading: busy,
         onStop: () => workspace.viewControls.stop?.(),
-        // The reason where the typing would go, read before the person types.
-        placeholder: disabledReason ?? placeholder,
+        // The reason where the typing would go, read before the person types;
+        // where it goes when it goes elsewhere than the agent (P-08).
+        placeholder: disabledReason ?? chatExtras.sendInstead?.says ?? placeholder,
         typingSuggestions: suggestions.map(item => item.text),
         // The same openers behind the composer's suggestions control.
         suggestions: chatSuggestions,

package/lib/specs/apps.js

@@ -194,6 +194,7 @@ export const BOOKKEEPING_DESK_APP_0_0_1 = {
     protocols: ['pap'],
     ui: [],
     pap: {
+        profile: 'draft-01',
         connections: [
             {
                 id: 'northwind',
@@ -1570,6 +1571,7 @@ export const EXCHANGE_DESK_APP_0_0_1 = {
     protocols: ['pap'],
     ui: [],
     pap: {
+        profile: 'draft-01',
         connections: [],
         company: {
             enabled: true,
@@ -1902,6 +1904,7 @@ export const LIVE_SHOP_CHAT_APP_0_0_1 = {
     protocols: ['pap'],
     ui: [],
     pap: {
+        profile: 'draft-01',
         connections: [
             {
                 id: 'manzanita',
@@ -2474,10 +2477,11 @@ export const ORDER_DESK_APP_0_0_1 = {
     protocols: ['pap'],
     ui: [],
     pap: {
+        profile: 'draft-01',
         connections: [
             {
                 id: 'manzanita',
-                company: 'manzanita.example',
+                company: 'manzanita.examples.datalayer.run',
                 access: 'write',
                 as: 'user',
                 scopes: ['orders:read', 'orders:write'],
@@ -2582,7 +2586,7 @@ export const ORDER_DESK_APP_0_0_1 = {
                 "The journey is the Personal Agent Protocol SDK's recorded journey user-with-a-company (Datalayer's protocol examples, personal-agent-protocol 0.16.0), shown as recorded data, not live.",
             ],
             unverified: [
-                'No company answers on Datalayer yet: no test company is served on r1, so it has not run in the Studio against one.',
+                'It has not run in the Studio against the hosted Manzanita (manzanita.examples.datalayer.run) from this example yet.',
             ],
         },
     },
@@ -2642,6 +2646,7 @@ export const ORDER_TRACKER_APP_0_0_1 = {
     protocols: ['pap'],
     ui: [],
     pap: {
+        profile: 'draft-01',
         connections: [
             {
                 id: 'manzanita',
@@ -3650,6 +3655,7 @@ export const RETURNS_DESK_APP_0_0_1 = {
     protocols: ['pap'],
     ui: [],
     pap: {
+        profile: 'draft-01',
         connections: [
             {
                 id: 'manzanita',
@@ -4175,6 +4181,7 @@ export const SHOP_CONCIERGE_APP_0_0_1 = {
     protocols: ['pap'],
     ui: [],
     pap: {
+        profile: 'draft-01',
         connections: [
             {
                 id: 'manzanita',
@@ -4340,7 +4347,7 @@ export const SHOPPING_DESK_APP_0_0_1 = {
             {
                 id: 'example-store',
                 protocol: 'ucp',
-                merchant: 'store.example',
+                merchant: 'store.examples.datalayer.run',
                 access: 'write',
                 limit: {
                     amount: '50',
@@ -4350,7 +4357,7 @@ export const SHOPPING_DESK_APP_0_0_1 = {
             {
                 id: 'example-outfitters',
                 protocol: 'acp',
-                merchant: 'outfitters.example',
+                merchant: 'outfitters.examples.datalayer.run',
                 access: 'write',
                 limit: {
                     amount: '150',
@@ -4443,7 +4450,7 @@ export const SHOPPING_DESK_APP_0_0_1 = {
                 "The checkout at Example Outfitters is the developers' ACP example (examples/protocols/agentic_commerce/checkout.py), run in its own tests.",
             ],
             unverified: [
-                "No shop answers UCP or ACP on Datalayer yet: the gateway's ucp and acp toolsets are built, not deployed.",
+                'It has not run in the Studio against the hosted Example Store and Example Outfitters (store.examples.datalayer.run, outfitters.examples.datalayer.run) from this example yet.',
             ],
         },
     },
@@ -4503,6 +4510,7 @@ export const SIGN_IN_DESK_APP_0_0_1 = {
     protocols: ['pap'],
     ui: [],
     pap: {
+        profile: 'draft-01',
         connections: [
             {
                 id: 'manzanita',
@@ -5191,12 +5199,18 @@ export const TRAVEL_DESK_APP_0_0_1 = {
         connections: [
             {
                 id: 'example-air',
-                brand: 'air.example',
-                audience: 'https://provider.example/a2a',
+                brand: 'air.examples.datalayer.run',
+                audience: 'https://air.examples.datalayer.run/a2a',
                 access: 'write',
                 scopes: ['bookings:read', 'bookings:change'],
             },
         ],
+        business: {
+            enabled: false,
+            brand: '',
+            scopes: {},
+            registeredAgents: [],
+        },
     },
     rules: [
         {
@@ -5272,7 +5286,7 @@ export const TRAVEL_DESK_APP_0_0_1 = {
                 "The journey is the developers' PACT example (examples/protocols/pact/personal_agent.py) against its local Provider, Example Air, run in its own tests (version 1.3.112).",
             ],
             unverified: [
-                "No airline answers PACT on Datalayer yet: the gateway's pact toolset is built, not deployed.",
+                'It has not run in the Studio against the hosted Example Air (air.examples.datalayer.run) from this example yet; the hosted Example Air keeps registrations in memory, so an application is registered there again after each restart.',
             ],
         },
     },
@@ -5621,6 +5635,7 @@ export const APP_SOURCES = {
         ],
         protocols: ['pap'],
         pap: {
+            profile: 'draft-01',
             connections: [
                 {
                     id: 'northwind',
@@ -6460,6 +6475,7 @@ export const APP_SOURCES = {
         ],
         protocols: ['pap'],
         pap: {
+            profile: 'draft-01',
             company: {
                 enabled: true,
                 interfaces: ['agent', 'openapi'],
@@ -6662,6 +6678,7 @@ export const APP_SOURCES = {
         instructions: "You relay the person's questions to Manzanita Outfitters' own agent, through its tools, and show what the shop writes as it arrives, as the shop's words. Never finish the shop's sentences for it.",
         protocols: ['pap'],
         pap: {
+            profile: 'draft-01',
             connections: [
                 {
                     id: 'manzanita',
@@ -7013,10 +7030,11 @@ export const APP_SOURCES = {
         instructions: 'You work with Manzanita Outfitters for the person you talk to, through its tools. Ask the shop before saying anything about an order; when it asks the person to sign in, say so and wait. Never confirm what the shop proposes on your own: the person approves it, word for word, on Waiting for you.',
         protocols: ['pap'],
         pap: {
+            profile: 'draft-01',
             connections: [
                 {
                     id: 'manzanita',
-                    company: 'manzanita.example',
+                    company: 'manzanita.examples.datalayer.run',
                     access: 'write',
                     scopes: ['orders:read', 'orders:write'],
                     extensions: ['operations'],
@@ -7080,7 +7098,7 @@ export const APP_SOURCES = {
                     "The journey is the Personal Agent Protocol SDK's recorded journey user-with-a-company (Datalayer's protocol examples, personal-agent-protocol 0.16.0), shown as recorded data, not live.",
                 ],
                 unverified: [
-                    'No company answers on Datalayer yet: no test company is served on r1, so it has not run in the Studio against one.',
+                    'It has not run in the Studio against the hosted Manzanita (manzanita.examples.datalayer.run) from this example yet.',
                 ],
             },
         },
@@ -7107,6 +7125,7 @@ export const APP_SOURCES = {
         instructions: "You read the person's orders at Manzanita Outfitters, through its tools, and change nothing. When the shop asks the person to sign in, say so and wait. If they ask to stop, tell them Disconnect under In your name ends the sign-in.",
         protocols: ['pap'],
         pap: {
+            profile: 'draft-01',
             connections: [
                 {
                     id: 'manzanita',
@@ -7852,6 +7871,7 @@ export const APP_SOURCES = {
         instructions: 'You arrange returns and repairs at Manzanita Outfitters for the person, through its tools. The shop proposes each one with its terms: show them, word for word, and never confirm on your own; the person approves it on Waiting for you.',
         protocols: ['pap'],
         pap: {
+            profile: 'draft-01',
             connections: [
                 {
                     id: 'manzanita',
@@ -8157,6 +8177,7 @@ export const APP_SOURCES = {
         instructions: "You talk with Manzanita Outfitters' own agent for the person, through its tools, in one conversation. When they ask for a person at the shop, ask the shop for one of its people and say who answers. Every message to the shop goes out in their name: send it only once they agreed.",
         protocols: ['pap'],
         pap: {
+            profile: 'draft-01',
             connections: [
                 {
                     id: 'manzanita',
@@ -8247,7 +8268,7 @@ export const APP_SOURCES = {
                 {
                     id: 'example-store',
                     protocol: 'ucp',
-                    merchant: 'store.example',
+                    merchant: 'store.examples.datalayer.run',
                     access: 'write',
                     limit: {
                         amount: '50',
@@ -8257,7 +8278,7 @@ export const APP_SOURCES = {
                 {
                     id: 'example-outfitters',
                     protocol: 'acp',
-                    merchant: 'outfitters.example',
+                    merchant: 'outfitters.examples.datalayer.run',
                     access: 'write',
                     limit: {
                         amount: '150',
@@ -8322,7 +8343,7 @@ export const APP_SOURCES = {
                     "The checkout at Example Outfitters is the developers' ACP example (examples/protocols/agentic_commerce/checkout.py), run in its own tests.",
                 ],
                 unverified: [
-                    "No shop answers UCP or ACP on Datalayer yet: the gateway's ucp and acp toolsets are built, not deployed.",
+                    'It has not run in the Studio against the hosted Example Store and Example Outfitters (store.examples.datalayer.run, outfitters.examples.datalayer.run) from this example yet.',
                 ],
             },
         },
@@ -8349,6 +8370,7 @@ export const APP_SOURCES = {
         instructions: 'You help the person at Manzanita Outfitters, through its tools. When the shop needs them signed in, show its protected form and wait. Never ask for a password, a code or anything the form asks in the conversation.',
         protocols: ['pap'],
         pap: {
+            profile: 'draft-01',
             connections: [
                 {
                     id: 'manzanita',
@@ -8812,8 +8834,8 @@ export const APP_SOURCES = {
             connections: [
                 {
                     id: 'example-air',
-                    brand: 'air.example',
-                    audience: 'https://provider.example/a2a',
+                    brand: 'air.examples.datalayer.run',
+                    audience: 'https://air.examples.datalayer.run/a2a',
                     access: 'write',
                     scopes: ['bookings:read', 'bookings:change'],
                 },
@@ -8865,7 +8887,7 @@ export const APP_SOURCES = {
                     "The journey is the developers' PACT example (examples/protocols/pact/personal_agent.py) against its local Provider, Example Air, run in its own tests (version 1.3.112).",
                 ],
                 unverified: [
-                    "No airline answers PACT on Datalayer yet: the gateway's pact toolset is built, not deployed.",
+                    'It has not run in the Studio against the hosted Example Air (air.examples.datalayer.run) from this example yet; the hosted Example Air keeps registrations in memory, so an application is registered there again after each restart.',
                 ],
             },
         },

package/lib/specs/appspecSchema.js

@@ -921,7 +921,7 @@ export const APPSPEC_SCHEMA = {
         },
         AppPact: {
             additionalProperties: false,
-            description: 'PACT: the businesses it asks for each person (AGENT_PROTOCOLS PI-01).',
+            description: 'PACT: the businesses it asks for each person (AGENT_PROTOCOLS PI-01), and\nwhether it answers as one (PR-13).',
             properties: {
                 connections: {
                     description: 'Businesses, over PACT',
@@ -931,10 +931,50 @@ export const APPSPEC_SCHEMA = {
                     title: 'Connections',
                     type: 'array',
                 },
+                business: {
+                    $ref: '#/$defs/AppPactBusiness',
+                    description: 'As a business',
+                },
             },
             title: 'AppPact',
             type: 'object',
         },
+        AppPactBusiness: {
+            additionalProperties: false,
+            description: "The application answers as a PACT business (AGENT_PROTOCOLS PR-13, PI-32; decided 2026-10-13).\n\nPublished at its deployment's own address: its A2A Agent Card names\nDatalayer as the Provider and the application's owner as the Brand; its\nA2A interface verifies each personal-agent JWT against a registered\nissuer's keys (§3.1); with `scopes`, a person delegates to a personal agent\nthrough the Provider's device-code sign-in — their Datalayer sign-in — and\nevery answer under their delegation carries a signed receipt (§5).",
+            properties: {
+                enabled: {
+                    default: false,
+                    description: 'Whether it is published as a business at Ship',
+                    title: 'Enabled',
+                    type: 'boolean',
+                },
+                brand: {
+                    default: '',
+                    description: "The Brand's name on its card: the application's `owner` when unsaid",
+                    title: 'Brand',
+                    type: 'string',
+                },
+                scopes: {
+                    additionalProperties: {
+                        type: 'string',
+                    },
+                    description: 'What a person may let a personal agent do, `{scope: what the person is shown}`: `bookings:read: See your bookings`; none, it answers personal agents alone',
+                    title: 'Scopes',
+                    type: 'object',
+                },
+                registered_agents: {
+                    description: 'The personal agents it accepts, each its issuer and its keys',
+                    items: {
+                        $ref: '#/$defs/AppPactRegisteredAgent',
+                    },
+                    title: 'Registered Agents',
+                    type: 'array',
+                },
+            },
+            title: 'AppPactBusiness',
+            type: 'object',
+        },
         AppPactConnection: {
             additionalProperties: false,
             description: "A business the application asks for each person, over PACT 1.0 (AGENT_PROTOCOLS PI-01).\n\nThe Brand is named by its domain — its Agent Card is at\n`https://<brand>/.well-known/agent-card.json` (PACT §2.1) — and its\nProvider's `audience`, which the Provider assigns at registration and\nthe personal-agent JWT carries (§3.1). Always in each person's own name:\nPACT acts for a person. No credential is ever part of a spec.",
@@ -972,6 +1012,25 @@ export const APPSPEC_SCHEMA = {
             title: 'AppPactConnection',
             type: 'object',
         },
+        AppPactRegisteredAgent: {
+            additionalProperties: false,
+            description: 'A personal agent the business accepts (PACT 1.0 §3.1): its issuer, and where its keys are.\n\nRegistered by the Maker, as `pap.company.registered_agents` (AGENT_PROTOCOLS PR-13,\ndecided 2026-10-13): a personal-agent JWT is verified against the keys of a registered\nissuer only, and any other is refused.',
+            properties: {
+                issuer: {
+                    description: "The personal agent's `iss`, an HTTPS URL",
+                    title: 'Issuer',
+                    type: 'string',
+                },
+                jwks_uri: {
+                    description: 'Where its public keys are (a JWKS), an HTTPS URL',
+                    title: 'Jwks Uri',
+                    type: 'string',
+                },
+            },
+            required: ['issuer', 'jwks_uri'],
+            title: 'AppPactRegisteredAgent',
+            type: 'object',
+        },
         AppPage: {
             additionalProperties: false,
             description: "A widget's page written in its code (LOOP P-05): `@app.page`.\n\nIts inputs are a form, drawn on the page; as one changes, the function\nof its code runs again on them and the page shows what it returned, in\nplace. Without its file nothing runs it, and validation says so.",
@@ -1057,8 +1116,22 @@ export const APPSPEC_SCHEMA = {
         },
         AppPap: {
             additionalProperties: false,
-            description: 'Personal Agent Protocol: the companies it works with, and whether it is one.',
+            description: 'Personal Agent Protocol: the companies it works with, and whether it is one.\n\nA `pap` block names the profile it is written for (PAP_DATALAYER S-03): one\nDatalayer speaks, or it is refused in a sentence. An application without the\nblock has none.',
             properties: {
+                profile: {
+                    anyOf: [
+                        {
+                            const: 'draft-01',
+                            type: 'string',
+                        },
+                        {
+                            type: 'null',
+                        },
+                    ],
+                    default: null,
+                    description: 'The Personal Agent Protocol profile it is written for: `draft-01`',
+                    title: 'Profile',
+                },
                 connections: {
                     description: 'Companies, as a personal agent',
                     items: {