@datalayer/agent-runtimes 1.5.8 → 1.5.9

package/lib/specs/appspecSchema.js

@@ -1276,7 +1276,7 @@ export const APPSPEC_SCHEMA = {
         },
         AppPapOperation: {
             additionalProperties: false,
-            description: "Something a personal agent may ask the application to do for the person,\ndone only once they confirm its exact terms (PAP_DATALAYER B-04, Operations v1).\n\nAsked by a personal agent, the application's agent does not call `tool`:\nthe call is proposed, its arguments the terms, and the person confirms\nthat revision before the tool runs, with those arguments and only once.",
+            description: "Something a personal agent may ask the application to do for the person,\ndone only once they confirm its exact terms (PAP_DATALAYER B-04, Operations v1).\n\nAsked by a personal agent, the application's agent does not call `tool`:\nthe call is proposed, its arguments the terms, and the person confirms\nthat revision before the tool runs, with those arguments and only once.\nAn operation that `allows` instead gives a standing permission once the\nperson confirms it (R-07): it calls no tool, and is asked for through the\napplication's API or its server for agents.",
             properties: {
                 action: {
                     description: "The action's name at this company, e.g. `orders.exchange`",
@@ -1284,9 +1284,29 @@ export const APPSPEC_SCHEMA = {
                     type: 'string',
                 },
                 tool: {
+                    anyOf: [
+                        {
+                            type: 'string',
+                        },
+                        {
+                            type: 'null',
+                        },
+                    ],
+                    default: null,
                     description: "The application's tool that does it, called with the terms",
                     title: 'Tool',
-                    type: 'string',
+                },
+                allows: {
+                    anyOf: [
+                        {
+                            $ref: '#/$defs/AppPapStanding',
+                        },
+                        {
+                            type: 'null',
+                        },
+                    ],
+                    default: null,
+                    description: 'Instead of a tool: the standing permission confirming it gives (R-07)',
                 },
                 summary: {
                     description: 'What the person is shown, with `{term}` for each term, e.g. `Exchange order {order_id} for size {size}`; never written by the model',
@@ -1300,10 +1320,86 @@ export const APPSPEC_SCHEMA = {
                     type: 'boolean',
                 },
             },
-            required: ['action', 'tool', 'summary'],
+            required: ['action', 'summary'],
             title: 'AppPapOperation',
             type: 'object',
         },
+        AppPapStanding: {
+            additionalProperties: false,
+            description: "An operation whose effect is a standing permission (PAP_DATALAYER R-07, the Ledgerly pattern).\n\nConfirmed by the person, it is recorded as the approval in advance they\nwould give in Datalayer: this application may confirm, at the company of\none of its own connections and in the person's account there, operations\nof that class whose terms stay within these limits, so many times, for so\nmany days — and the person reads it back and withdraws it there.",
+            properties: {
+                connection: {
+                    description: 'The id of its own company connection the permission is used at',
+                    title: 'Connection',
+                    type: 'string',
+                },
+                action: {
+                    $ref: '#/$defs/PapStandingAction',
+                    description: 'What confirming there does: `write`, or `buy`',
+                },
+                limits: {
+                    description: 'Every term bounded, 1 to 20',
+                    items: {
+                        $ref: '#/$defs/AppPapStandingLimit',
+                    },
+                    title: 'Limits',
+                    type: 'array',
+                },
+                uses: {
+                    description: 'The term of this operation giving how many times, at most',
+                    title: 'Uses',
+                    type: 'string',
+                },
+                days: {
+                    description: 'The term of this operation giving for how many days, at most 90',
+                    title: 'Days',
+                    type: 'string',
+                },
+            },
+            required: ['connection', 'action', 'limits', 'uses', 'days'],
+            title: 'AppPapStanding',
+            type: 'object',
+        },
+        AppPapStandingLimit: {
+            additionalProperties: false,
+            description: "One bound of a standing permission: a term of the other company's operations,\nbounded by a term of this one — its maximum, or the one value allowed.",
+            properties: {
+                path: {
+                    description: "The other company's term, by its dotted path: `amount.amount`, `payee`",
+                    title: 'Path',
+                    type: 'string',
+                },
+                maximum: {
+                    anyOf: [
+                        {
+                            type: 'string',
+                        },
+                        {
+                            type: 'null',
+                        },
+                    ],
+                    default: null,
+                    description: 'The term of this operation giving its maximum',
+                    title: 'Maximum',
+                },
+                allowed: {
+                    anyOf: [
+                        {
+                            type: 'string',
+                        },
+                        {
+                            type: 'null',
+                        },
+                    ],
+                    default: null,
+                    description: 'The term of this operation giving the value allowed',
+                    title: 'Allowed',
+                },
+            },
+            required: ['path'],
+            title: 'AppPapStandingLimit',
+            type: 'object',
+        },
         AppPermissions: {
             additionalProperties: false,
             description: 'What the application may reach beside its connections. Nothing, unless said.',
@@ -2282,6 +2378,12 @@ export const APPSPEC_SCHEMA = {
             title: 'PapSignIn',
             type: 'string',
         },
+        PapStandingAction: {
+            description: "What a standing permission lets the application confirm at another company (R-02's classes).",
+            enum: ['write', 'buy'],
+            title: 'PapStandingAction',
+            type: 'string',
+        },
         RecordItem: {
             description: 'What an application may keep of what it did.',
             enum: [

package/lib/specs/protocols.js

@@ -128,16 +128,16 @@ export const TAP_PROTOCOL_0_0_1 = {
     id: 'tap',
     version: '0.0.1',
     name: 'Trusted Agent Protocol',
-    description: 'An agent-recognition profile over Web Bot Auth for merchants. Planned: nothing is built until its profile is confirmed.',
+    description: "An agent-recognition profile over Web Bot Auth for merchants: a signature tagged agent-browser-auth to browse or agent-payer-auth to pay. Built as a draft from Visa's public Merchant Specifications (2026-10-13) in agent-runtimes; planned for applications until Visa confirms it.",
     publisher: 'Visa',
     layer: 'identity',
-    specUrl: 'https://developer.visa.com',
-    specVersion: 'none yet',
+    specUrl: 'https://developer.visa.com/capabilities/trusted-agent-protocol/trusted-agent-protocol-specifications',
+    specVersion: 'draft (Merchant Specifications, read 2026-10-13)',
     status: 'planned',
     connects: 'Merchants that recognise an agent by its signature',
     packages: {
-        python: [],
-        typescript: [],
+        python: ['agent-runtimes'],
+        typescript: ['@datalayer/agent-runtimes', 'http-message-sig'],
     },
     protocolTools: [],
 };

package/lib/types/agentspecs.d.ts

@@ -499,16 +499,48 @@ export interface AppPapCompanySpec {
      */
     operations: AppPapOperationSpec[];
 }
+/**
+ * One bound of a standing permission (PAP_DATALAYER R-07): a term of the other
+ * company's operations, by its dotted path, bounded by a term of this one —
+ * its maximum, or the one value allowed (one of the two).
+ */
+export interface AppPapStandingLimitSpec {
+    path: string;
+    maximum?: string;
+    allowed?: string;
+}
+/**
+ * What an operation gives instead of calling a tool (PAP_DATALAYER R-07, the
+ * Ledgerly pattern): once the person confirms it, the application may confirm,
+ * at one of its own company connections and in their account there, what stays
+ * within these bounds — recorded as the approval in advance they would give in
+ * Datalayer.
+ */
+export interface AppPapStandingSpec {
+    /** The id of one of its own company connections (`as: user`, `write`). */
+    connection: string;
+    /** What confirming there does. */
+    action: 'write' | 'buy';
+    /** Every term bounded, 1 to 20. */
+    limits: AppPapStandingLimitSpec[];
+    /** The term of this operation giving how many times, at most. */
+    uses: string;
+    /** The term of this operation giving for how many days, at most 90. */
+    days: string;
+}
 /**
  * Something a personal agent may ask the application to do for the person,
  * done only once they confirm its exact terms (PAP_DATALAYER B-04): the call
- * of `tool` is proposed instead of made, its arguments the terms.
+ * of `tool` is proposed instead of made, its arguments the terms — or, for one
+ * that `allows`, a standing permission given (R-07).
  */
 export interface AppPapOperationSpec {
     /** The action's name at this company: `orders.exchange`. */
     action: string;
-    /** The application's tool that does it, called with the terms. */
+    /** The application's tool that does it, called with the terms; `''` for one that `allows`. */
     tool: string;
+    /** Instead of a tool: the standing permission confirming it gives (R-07). */
+    allows?: AppPapStandingSpec;
     /** What the person is shown, `{term}` for each term; never the model's. */
     summary: string;
     /** Whether only the person may confirm it, never an approval in advance. */

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@datalayer/agent-runtimes",
-    "version": "1.5.8",
+    "version": "1.5.9",
     "type": "module",
     "workspaces": [
         ".",
@@ -188,6 +188,7 @@
         "@lumino/widgets": "^2.7.3",
         "@mcp-ui/client": "^5.17.1",
         "@modelcontextprotocol/ext-apps": "^0.2.2",
+        "@modelcontextprotocol/sdk": "^1.32.1",
         "@primer/behaviors": "^1.8.4",
         "@primer/brand-primitives": "^0.51.0",
         "@primer/css": "^21.5.1",
@@ -242,6 +243,7 @@
         "embla-carousel-react": "^8.6.0",
         "fuse.js": "^7.0.0",
         "html2canvas": "^1.4.1",
+        "http-message-sig": "0.3.0",
         "input-otp": "^1.4.2",
         "jose": "^6.2.12",
         "jwt-decode": "^2.2.0",