@datalayer/agent-runtimes 1.5.8 → 1.5.10

package/lib/specs/appspecSchema.js

@@ -1114,6 +1114,24 @@ export const APPSPEC_SCHEMA = {
             title: 'AppPageOutput',
             type: 'object',
         },
+        AppPair: {
+            additionalProperties: false,
+            description: "One of a pair of examples, a PACT business and the personal agent that asks it\n(AGENT_PROTOCOLS PR-13, E-02; decided 2026-10-13).\n\nA personal agent's issuer is its own application's, known only once a copy\nexists: when a person has copied both of a pair, the Studio registers the\npersonal agent's copy with the business's copy (`pact.business.registered_agents`)\nand points the personal agent at the business's own domain.",
+            properties: {
+                id: {
+                    description: "The pair's id, the same on both of its applications",
+                    title: 'Id',
+                    type: 'string',
+                },
+                role: {
+                    $ref: '#/$defs/PairRole',
+                    description: '`business`, or `personal_agent`: the one that asks it',
+                },
+            },
+            required: ['id', 'role'],
+            title: 'AppPair',
+            type: 'object',
+        },
         AppPap: {
             additionalProperties: false,
             description: 'Personal Agent Protocol: the companies it works with, and whether it is one.\n\nA `pap` block names the profile it is written for (PAP_DATALAYER S-03): one\nDatalayer speaks, or it is refused in a sentence. An application without the\nblock has none.',
@@ -1276,7 +1294,7 @@ export const APPSPEC_SCHEMA = {
         },
         AppPapOperation: {
             additionalProperties: false,
-            description: "Something a personal agent may ask the application to do for the person,\ndone only once they confirm its exact terms (PAP_DATALAYER B-04, Operations v1).\n\nAsked by a personal agent, the application's agent does not call `tool`:\nthe call is proposed, its arguments the terms, and the person confirms\nthat revision before the tool runs, with those arguments and only once.",
+            description: "Something a personal agent may ask the application to do for the person,\ndone only once they confirm its exact terms (PAP_DATALAYER B-04, Operations v1).\n\nAsked by a personal agent, the application's agent does not call `tool`:\nthe call is proposed, its arguments the terms, and the person confirms\nthat revision before the tool runs, with those arguments and only once.\nAn operation that `allows` instead gives a standing permission once the\nperson confirms it (R-07): it calls no tool, and is asked for through the\napplication's API or its server for agents.",
             properties: {
                 action: {
                     description: "The action's name at this company, e.g. `orders.exchange`",
@@ -1284,9 +1302,29 @@ export const APPSPEC_SCHEMA = {
                     type: 'string',
                 },
                 tool: {
+                    anyOf: [
+                        {
+                            type: 'string',
+                        },
+                        {
+                            type: 'null',
+                        },
+                    ],
+                    default: null,
                     description: "The application's tool that does it, called with the terms",
                     title: 'Tool',
-                    type: 'string',
+                },
+                allows: {
+                    anyOf: [
+                        {
+                            $ref: '#/$defs/AppPapStanding',
+                        },
+                        {
+                            type: 'null',
+                        },
+                    ],
+                    default: null,
+                    description: 'Instead of a tool: the standing permission confirming it gives (R-07)',
                 },
                 summary: {
                     description: 'What the person is shown, with `{term}` for each term, e.g. `Exchange order {order_id} for size {size}`; never written by the model',
@@ -1300,10 +1338,86 @@ export const APPSPEC_SCHEMA = {
                     type: 'boolean',
                 },
             },
-            required: ['action', 'tool', 'summary'],
+            required: ['action', 'summary'],
             title: 'AppPapOperation',
             type: 'object',
         },
+        AppPapStanding: {
+            additionalProperties: false,
+            description: "An operation whose effect is a standing permission (PAP_DATALAYER R-07, the Ledgerly pattern).\n\nConfirmed by the person, it is recorded as the approval in advance they\nwould give in Datalayer: this application may confirm, at the company of\none of its own connections and in the person's account there, operations\nof that class whose terms stay within these limits, so many times, for so\nmany days — and the person reads it back and withdraws it there.",
+            properties: {
+                connection: {
+                    description: 'The id of its own company connection the permission is used at',
+                    title: 'Connection',
+                    type: 'string',
+                },
+                action: {
+                    $ref: '#/$defs/PapStandingAction',
+                    description: 'What confirming there does: `write`, or `buy`',
+                },
+                limits: {
+                    description: 'Every term bounded, 1 to 20',
+                    items: {
+                        $ref: '#/$defs/AppPapStandingLimit',
+                    },
+                    title: 'Limits',
+                    type: 'array',
+                },
+                uses: {
+                    description: 'The term of this operation giving how many times, at most',
+                    title: 'Uses',
+                    type: 'string',
+                },
+                days: {
+                    description: 'The term of this operation giving for how many days, at most 90',
+                    title: 'Days',
+                    type: 'string',
+                },
+            },
+            required: ['connection', 'action', 'limits', 'uses', 'days'],
+            title: 'AppPapStanding',
+            type: 'object',
+        },
+        AppPapStandingLimit: {
+            additionalProperties: false,
+            description: "One bound of a standing permission: a term of the other company's operations,\nbounded by a term of this one — its maximum, or the one value allowed.",
+            properties: {
+                path: {
+                    description: "The other company's term, by its dotted path: `amount.amount`, `payee`",
+                    title: 'Path',
+                    type: 'string',
+                },
+                maximum: {
+                    anyOf: [
+                        {
+                            type: 'string',
+                        },
+                        {
+                            type: 'null',
+                        },
+                    ],
+                    default: null,
+                    description: 'The term of this operation giving its maximum',
+                    title: 'Maximum',
+                },
+                allowed: {
+                    anyOf: [
+                        {
+                            type: 'string',
+                        },
+                        {
+                            type: 'null',
+                        },
+                    ],
+                    default: null,
+                    description: 'The term of this operation giving the value allowed',
+                    title: 'Allowed',
+                },
+            },
+            required: ['path'],
+            title: 'AppPapStandingLimit',
+            type: 'object',
+        },
         AppPermissions: {
             additionalProperties: false,
             description: 'What the application may reach beside its connections. Nothing, unless said.',
@@ -1556,6 +1670,41 @@ export const APPSPEC_SCHEMA = {
             title: 'AppScenario',
             type: 'object',
         },
+        AppSignedFetch: {
+            additionalProperties: false,
+            description: 'Signed fetch: the sites it reads pages of, signed with its Web Bot Auth key (AGENT_PROTOCOLS EX-11).',
+            properties: {
+                sites: {
+                    description: 'Sites, each by its exact domain: read with GET only, every request signed',
+                    items: {
+                        $ref: '#/$defs/AppSignedFetchSite',
+                    },
+                    title: 'Sites',
+                    type: 'array',
+                },
+            },
+            title: 'AppSignedFetch',
+            type: 'object',
+        },
+        AppSignedFetchSite: {
+            additionalProperties: false,
+            description: "A website the application reads pages of, each request signed (AGENT_PROTOCOLS EX-11).\n\nDecided 2026-10-13: a *signed fetch* names exact sites, an allow-list.\nDatalayer's gateway reads a page there with `GET` only, on its safe\negress path (public addresses only), each request signed with the\napplication's own Web Bot Auth key and recorded; reading is under the\napplication's Rules like any read. Named by its domain: no other host is\nreached, and no credential is ever part of a spec.",
+            properties: {
+                id: {
+                    description: 'Stable within the application: `example-verifier`',
+                    title: 'Id',
+                    type: 'string',
+                },
+                site: {
+                    description: "The site's domain, exactly: `verify.examples.datalayer.run`",
+                    title: 'Site',
+                    type: 'string',
+                },
+            },
+            required: ['id', 'site'],
+            title: 'AppSignedFetchSite',
+            type: 'object',
+        },
         AppSpaceGrant: {
             additionalProperties: false,
             description: 'A Space the application may reach.',
@@ -2264,6 +2413,12 @@ export const APPSPEC_SCHEMA = {
             title: 'Layout',
             type: 'string',
         },
+        PairRole: {
+            description: 'Which side of a pair of examples an application is (AGENT_PROTOCOLS PR-13).',
+            enum: ['business', 'personal_agent'],
+            title: 'PairRole',
+            type: 'string',
+        },
         PapAgents: {
             description: 'Which personal agents a company application accepts.',
             enum: ['any', 'registered'],
@@ -2282,6 +2437,12 @@ export const APPSPEC_SCHEMA = {
             title: 'PapSignIn',
             type: 'string',
         },
+        PapStandingAction: {
+            description: "What a standing permission lets the application confirm at another company (R-02's classes).",
+            enum: ['write', 'buy'],
+            title: 'PapStandingAction',
+            type: 'string',
+        },
         RecordItem: {
             description: 'What an application may keep of what it did.',
             enum: [
@@ -2465,7 +2626,7 @@ export const APPSPEC_SCHEMA = {
             type: 'array',
         },
         protocols: {
-            description: 'The agent protocols it speaks, ids of the protocols catalogue (AGENT_PROTOCOLS PS-02): its `pap`, `pact` and `a2a` blocks, and each merchant of `commerce`, are refused unless their protocol is listed, and a planned protocol only while it is not offered',
+            description: 'The agent protocols it speaks, ids of the protocols catalogue (AGENT_PROTOCOLS PS-02): its `pap`, `pact`, `signed_fetch` and `a2a` blocks, and each merchant of `commerce`, are refused unless their protocol is listed, and a planned protocol only while it is not offered',
             items: {
                 type: 'string',
             },
@@ -2492,6 +2653,22 @@ export const APPSPEC_SCHEMA = {
             $ref: '#/$defs/AppCommerce',
             description: 'UCP and ACP: merchants it shops at for each person',
         },
+        signed_fetch: {
+            $ref: '#/$defs/AppSignedFetch',
+            description: 'Web Bot Auth: the sites it reads pages of, GET only, each request signed with its key',
+        },
+        pair: {
+            anyOf: [
+                {
+                    $ref: '#/$defs/AppPair',
+                },
+                {
+                    type: 'null',
+                },
+            ],
+            default: null,
+            description: 'One of a pair of examples: a PACT business, or the personal agent that asks it',
+        },
         a2a: {
             $ref: '#/$defs/AppA2A',
             description: 'A2A: the extensions its Agent Card advertises',

package/lib/specs/protocols.js

@@ -128,16 +128,16 @@ export const TAP_PROTOCOL_0_0_1 = {
     id: 'tap',
     version: '0.0.1',
     name: 'Trusted Agent Protocol',
-    description: 'An agent-recognition profile over Web Bot Auth for merchants. Planned: nothing is built until its profile is confirmed.',
+    description: "An agent-recognition profile over Web Bot Auth for merchants: a signature tagged agent-browser-auth to browse or agent-payer-auth to pay. Built as a draft from Visa's public Merchant Specifications (2026-10-13) in agent-runtimes; planned for applications until Visa confirms it.",
     publisher: 'Visa',
     layer: 'identity',
-    specUrl: 'https://developer.visa.com',
-    specVersion: 'none yet',
+    specUrl: 'https://developer.visa.com/capabilities/trusted-agent-protocol/trusted-agent-protocol-specifications',
+    specVersion: 'draft (Merchant Specifications, read 2026-10-13)',
     status: 'planned',
     connects: 'Merchants that recognise an agent by its signature',
     packages: {
-        python: [],
-        typescript: [],
+        python: ['agent-runtimes'],
+        typescript: ['@datalayer/agent-runtimes', 'http-message-sig'],
     },
     protocolTools: [],
 };
@@ -162,7 +162,7 @@ export const WEB_BOT_AUTH_PROTOCOL_0_0_1 = {
     id: 'web-bot-auth',
     version: '0.0.1',
     name: 'Web Bot Auth',
-    description: 'Signed outbound requests (RFC 9421) and the key directory a website checks them against.',
+    description: 'Signed outbound requests (RFC 9421) and the key directory a website checks them against. In applications, every request to a company, business or merchant is signed, and a signed fetch reads pages at the sites an application names, GET only (decided 2026-10-13).',
     publisher: 'Cloudflare (IETF draft)',
     layer: 'identity',
     specUrl: 'https://datatracker.ietf.org/doc/draft-ietf-webbotauth-httpsig-protocol/',
@@ -173,7 +173,8 @@ export const WEB_BOT_AUTH_PROTOCOL_0_0_1 = {
         python: ['agent-runtimes'],
         typescript: ['@datalayer/agent-runtimes', 'web-bot-auth'],
     },
-    protocolTools: [],
+    protocolTools: ['signed-fetch'],
+    appspecBlock: 'signed_fetch',
 };
 export const PROTOCOL_CATALOGUE = {
     a2a: A2A_PROTOCOL_0_0_1,

package/lib/types/agentspecs.d.ts

@@ -156,7 +156,7 @@ export interface ProtocolSpec {
     /** Its tools' action-class tables (`agentspecs/protocol-tools`). */
     protocolTools: string[];
     /** The Appspec block it configures, if any: refused unless `protocols` lists it. */
-    appspecBlock?: 'pap' | 'pact' | 'a2a';
+    appspecBlock?: 'pap' | 'pact' | 'a2a' | 'signed_fetch';
 }
 /** A check a Frame requires of the output of work done under it. */
 export interface FrameGuardSpec {
@@ -499,16 +499,48 @@ export interface AppPapCompanySpec {
      */
     operations: AppPapOperationSpec[];
 }
+/**
+ * One bound of a standing permission (PAP_DATALAYER R-07): a term of the other
+ * company's operations, by its dotted path, bounded by a term of this one —
+ * its maximum, or the one value allowed (one of the two).
+ */
+export interface AppPapStandingLimitSpec {
+    path: string;
+    maximum?: string;
+    allowed?: string;
+}
+/**
+ * What an operation gives instead of calling a tool (PAP_DATALAYER R-07, the
+ * Ledgerly pattern): once the person confirms it, the application may confirm,
+ * at one of its own company connections and in their account there, what stays
+ * within these bounds — recorded as the approval in advance they would give in
+ * Datalayer.
+ */
+export interface AppPapStandingSpec {
+    /** The id of one of its own company connections (`as: user`, `write`). */
+    connection: string;
+    /** What confirming there does. */
+    action: 'write' | 'buy';
+    /** Every term bounded, 1 to 20. */
+    limits: AppPapStandingLimitSpec[];
+    /** The term of this operation giving how many times, at most. */
+    uses: string;
+    /** The term of this operation giving for how many days, at most 90. */
+    days: string;
+}
 /**
  * Something a personal agent may ask the application to do for the person,
  * done only once they confirm its exact terms (PAP_DATALAYER B-04): the call
- * of `tool` is proposed instead of made, its arguments the terms.
+ * of `tool` is proposed instead of made, its arguments the terms — or, for one
+ * that `allows`, a standing permission given (R-07).
  */
 export interface AppPapOperationSpec {
     /** The action's name at this company: `orders.exchange`. */
     action: string;
-    /** The application's tool that does it, called with the terms. */
+    /** The application's tool that does it, called with the terms; `''` for one that `allows`. */
     tool: string;
+    /** Instead of a tool: the standing permission confirming it gives (R-07). */
+    allows?: AppPapStandingSpec;
     /** What the person is shown, `{term}` for each term; never the model's. */
     summary: string;
     /** Whether only the person may confirm it, never an approval in advance. */
@@ -598,6 +630,34 @@ export interface AppCommerceMerchantSpec {
 export interface AppCommerceSpec {
     merchants: AppCommerceMerchantSpec[];
 }
+/**
+ * A website the application reads pages of, each request signed with its
+ * own Web Bot Auth key (AGENT_PROTOCOLS EX-11, decided 2026-10-13): the
+ * gateway's `signed-fetch` toolset reads there with GET only. Never a
+ * credential.
+ */
+export interface AppSignedFetchSiteSpec {
+    /** Stable within the application: `example-verifier`. */
+    id: string;
+    /** The site's domain, exactly: `verify.examples.datalayer.run`. */
+    site: string;
+}
+/** Signed fetch: the exact sites it reads pages of, an allow-list. */
+export interface AppSignedFetchSpec {
+    sites: AppSignedFetchSiteSpec[];
+}
+/**
+ * One of a pair of examples, a PACT business and the personal agent that
+ * asks it (AGENT_PROTOCOLS PR-13; decided 2026-10-13): when a person has
+ * copied both, the Studio registers the personal agent's copy with the
+ * business's copy and points the personal agent there.
+ */
+export interface AppPairSpec {
+    /** The pair's id, the same on both of its applications. */
+    id: string;
+    /** Which side of the pair it is. */
+    role: 'business' | 'personal_agent';
+}
 /**
  * An A2A extension the application's Agent Card advertises, beside the
  * runtime's own (AGENT_PROTOCOLS PR-02). Its params are public: never a
@@ -1205,6 +1265,10 @@ export interface AppSpec {
     pact?: AppPactSpec;
     /** UCP and ACP: the merchants it shops at for each person (AGENT_PROTOCOLS PI-01). */
     commerce?: AppCommerceSpec;
+    /** Signed fetch: the sites it reads pages of, each request signed (AGENT_PROTOCOLS EX-11). */
+    signed_fetch?: AppSignedFetchSpec;
+    /** One of a pair of examples: a PACT business, or the personal agent that asks it (PR-13). */
+    pair?: AppPairSpec;
     /** A2A: the extensions its Agent Card advertises (AGENT_PROTOCOLS PR-02). */
     a2a?: AppA2ASpec;
     rules: AppRuleSpec[];

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@datalayer/agent-runtimes",
-    "version": "1.5.8",
+    "version": "1.5.10",
     "type": "module",
     "workspaces": [
         ".",
@@ -188,6 +188,7 @@
         "@lumino/widgets": "^2.7.3",
         "@mcp-ui/client": "^5.17.1",
         "@modelcontextprotocol/ext-apps": "^0.2.2",
+        "@modelcontextprotocol/sdk": "^1.32.1",
         "@primer/behaviors": "^1.8.4",
         "@primer/brand-primitives": "^0.51.0",
         "@primer/css": "^21.5.1",
@@ -242,6 +243,7 @@
         "embla-carousel-react": "^8.6.0",
         "fuse.js": "^7.0.0",
         "html2canvas": "^1.4.1",
+        "http-message-sig": "0.3.0",
         "input-otp": "^1.4.2",
         "jose": "^6.2.12",
         "jwt-decode": "^2.2.0",

package/scripts/codegen/generate_apps.py

@@ -156,8 +156,8 @@ def load_specs(specs_dir: Path) -> tuple[list[dict[str, Any]], dict[str, Any]]:
             mode="json", by_alias=True
         ):
             spec.pop("pap")
-        # PACT, commerce and A2A's extensions the same way (AGENT_PROTOCOLS PI-01, PR-02).
-        for block in ("pact", "commerce", "a2a"):
+        # PACT, commerce, signed fetch and A2A's extensions the same way (AGENT_PROTOCOLS PI-01, PR-02, EX-11).
+        for block in ("pact", "commerce", "signed_fetch", "a2a"):
             if block in spec and spec[block] == type(getattr(app, block))().model_dump(
                 mode="json", by_alias=True
             ):

package/scripts/codegen/generate_protocols.py

@@ -26,7 +26,7 @@ from versioning import ensure_spec_version, version_suffix
 
 LAYERS = ("transport", "consent", "identity", "commerce", "ui")
 STATUSES = ("shipped", "planned")
-BLOCKS = ("pap", "pact", "a2a")
+BLOCKS = ("pap", "pact", "a2a", "signed_fetch")
 
 
 def load_protocol_specs(specs_dir: Path) -> list[dict[str, Any]]: