@datalayer/agent-runtimes 1.5.88 → 1.5.90

package/lib/apps/embed/element.js

@@ -72,7 +72,7 @@ import { AppEmbed, embedAssistantCharacter } from './AppEmbed.js';
 import { WINDOW_NOT_YET } from './embedSession.js';
 import { EMBED_HOST_VARIABLES, EMBED_OBSERVED_ATTRIBUTES, EMBED_TAG, EMBED_TOKEN_NAMES_NO_DEPLOYMENT, EmbedAttributeError, adoptPropertiesSetEarly, embedLookOf, embedTokenDeployment, inlineHeightOf, languageOf, resumeOf, runnable, } from './embedConfig.js';
 import { embedShadowCss } from './embedTheme.js';
-import { DEFAULT_API, readVisitorApp } from './visitorApp.js';
+import { DEFAULT_API, DEFAULT_INFERENCE, readVisitorApp } from './visitorApp.js';
 export { runnable };
 /** What the framed run page and the element say to each other. */
 export const EMBED_MESSAGES = {
@@ -383,7 +383,11 @@ export function defineDatalayerAppElement(options = {}) {
                 // A public application, as a visitor without an account (D-07):
                 // an example kept warm or an address open to visitors, run on the
                 // visitors' runtime; a decision framed; a refusal said.
-                const visitor = await readVisitorApp({ api: this.agents(), app });
+                const visitor = await readVisitorApp({
+                    api: this.agents(),
+                    inference: this.inference(),
+                    app,
+                });
                 if (visitor.kind === 'decision') {
                     return { kind: 'frame', src: frameSrcOf(this.origin(), visitor.app) };
                 }
@@ -410,15 +414,26 @@ export function defineDatalayerAppElement(options = {}) {
         }
         /**
          * ai-agents, where a visitor's address is read and beside which the
-         * visitors' runtime and ai-inference answer: the `api` attribute, else
-         * the platform's, else r1's. Not Spacer's address (`api()`), which lives
-         * on another plane.
+         * visitors' runtime answers: the `api` attribute, else the platform's,
+         * else the AI plane's (`DEFAULT_API`). Not Spacer's address (`api()`),
+         * which lives on another plane.
          */
         agents() {
             return (this.getAttribute('api') ||
                 coreStore.getState().configuration?.aiAgentsUrl ||
                 DEFAULT_API).replace(/\/+$/, '');
         }
+        /**
+         * ai-inference, which mints a visitor's token: the `api` attribute, else
+         * the platform's, else the AI plane's (`DEFAULT_INFERENCE`) — never the
+         * control plane, where no ai-inference answers (28 October 2026: a bare
+         * `<datalayer-app app="…">` asked prod1 and got "Failed to fetch").
+         */
+        inference() {
+            return (this.getAttribute('api') ||
+                coreStore.getState().configuration?.aiInferenceUrl ||
+                DEFAULT_INFERENCE).replace(/\/+$/, '');
+        }
         /** Spacer, where an application is read with its embed token: the `api` attribute, else the platform's, else prod1's. */
         api() {
             return (this.getAttribute('api') ||

package/lib/apps/embed/visitorApp.d.ts

@@ -1,39 +1,3 @@
-/**
- * A public application in the element, for a visitor without an account
- * (D-07, R-30).
- *
- * `<datalayer-app app="…">` with no token names a public application. The
- * element reads what it is without anybody's credentials, as the landing's
- * hosted page does for whoever is signed out:
- *
- * - **an example Datalayer keeps warm for visitors** (`web-research`,
- *   `customer-interview`): its Appspec from the catalogue this bundle
- *   carries; the visitors' runtime answers its id;
- * - **an application at its address** (`demo-accounting`): ai-agents'
- *   `GET /apps/deployments/at/<slug>` without a token says what its page is
- *   drawn from — the Appspec of the version it runs — and whether somebody
- *   signed out may talk to it (`session.opens`); the visitors' runtime
- *   answers `at:<slug>`, making the address's agent when first talked to —
- *   or, for a version with code of its own (`runs_code`), the runtime its
- *   deployment is kept on (`kept.url`), which runs that code;
- * - **a decision**, named by its id (`01M…`): framed from Datalayer's run
- *   page, as before.
- *
- * The conversation then runs as the landing's signed-out one does: the chat
- * mints the visitor's token itself from ai-inference (`useVisitorToken`,
- * `POST /anonymous/token {app}`), minted again before it runs out, and talks
- * to the visitors' runtime with it — in every mode, inline or floating.
- *
- * What a visitor may not have is said in one sentence, before anything is
- * drawn (fail fast): a private address (ai-agents answers *No application is
- * at this address*), one that acts through its owner's connections or
- * documents (ai-agents' own reason), an example the visitors' runtime does
- * not keep. Each says the embed token is what an embed of it takes.
- *
- * Pure but for the one request, given or `fetch`.
- *
- * @module apps/embed/visitorApp
- */
 import type { AppSpec } from '../../types/agentspecs';
 import type { DatalayerVisitors } from '../apps/visitorToken';
 /** Where the visitors' runtime is published, on ai-agents' host (its chart). */
@@ -45,12 +9,21 @@ export declare const AT_PREFIX = "at:";
 /**
  * Datalayer's services for a visitor, where the element names none (`api`)
  * and the platform's configuration says none: ai-agents, where an address is
- * read, and beside it the visitors' runtime and ai-inference, which mints the
- * visitor's token. Not Spacer's address, which reads an application with its
- * embed token: the two live on different planes (ai-agents on r1, Spacer on
- * prod1), found 15 October 2026 on datalayer.ai's embed.
+ * read, and beside it the visitors' runtime — the AI plane, as core's plane
+ * table says it, never a literal of this bundle's own. Not Spacer's address,
+ * which reads an application with its embed token: the two live on different
+ * planes (ai-agents on r1, Spacer on prod1), found 15 October 2026 on
+ * datalayer.ai's embed; a bundle whose literal still said prod1 failed to
+ * mint a visitor's token there on 28 October 2026 ("Failed to fetch"),
+ * ai-inference being on r1 with the agents that call it.
+ */
+export declare const DEFAULT_API: string;
+/**
+ * ai-inference, which mints a visitor's token, where the element names none
+ * (`api`) and the platform's configuration says none: the AI plane, as core's
+ * plane table says it.
  */
-export declare const DEFAULT_API = "https://r1.datalayer.run";
+export declare const DEFAULT_INFERENCE: string;
 /** An application's id on Datalayer: a ULID. */
 export declare const isAppUid: (value: string) => boolean;
 /** What `app` with no token resolves to. */
@@ -74,9 +47,10 @@ export type VisitorApp =
 /**
  * Where a visitor's conversation with `app` runs: the visitors' runtime beside
  * ai-agents — or `runtime`, the one a deployment with code of its own is
- * kept on (R-30) — its token from ai-inference.
+ * kept on (R-30) — its token from ai-inference, at `inference` when it is
+ * named, else beside ai-agents.
  */
-export declare function visitorsAt(api: string, app: string, runtime?: string): DatalayerVisitors;
+export declare function visitorsAt(api: string, app: string, runtime?: string, inference?: string): DatalayerVisitors;
 /** What an embed without a token is told it takes. */
 export declare const TOKEN_HINT = "Embedded for a visitor it refuses, it takes its embed token (the \"token\" attribute).";
 /** The sentence for an example the visitors' runtime does not keep. */
@@ -87,13 +61,17 @@ export declare const refusedSentence: (reason: string) => string;
  * Read what `app` is for a visitor without an account: a decision to frame,
  * an example or an address to run on the visitors' runtime, or a sentence.
  *
- * @param api - Datalayer's services (ai-agents, ai-inference): the `api` attribute.
+ * @param api - Datalayer's services (ai-agents, and ai-inference unless
+ *   `inference` names it): the `api` attribute; the AI plane unless given.
+ * @param inference - ai-inference, which mints the visitor's token: `api`
+ *   when that is given, else the AI plane.
  * @param app - The `app` attribute: a decision's id, an example's id or an address.
  * @param fetcher - What asks ai-agents; `fetch` unless given.
  * @param catalogue - The examples; the bundle's catalogue unless given.
  */
-export declare function readVisitorApp({ api, app, fetcher, catalogue, }: {
+export declare function readVisitorApp({ api, inference, app, fetcher, catalogue, }: {
     api?: string;
+    inference?: string;
     app: string;
     fetcher?: typeof fetch;
     catalogue?: (ref: string) => AppSpec | undefined;

package/lib/apps/embed/visitorApp.js

@@ -2,6 +2,43 @@
  * Copyright (c) 2025-2026 Datalayer, Inc.
  * Distributed under the terms of the Modified BSD License.
  */
+/**
+ * A public application in the element, for a visitor without an account
+ * (D-07, R-30).
+ *
+ * `<datalayer-app app="…">` with no token names a public application. The
+ * element reads what it is without anybody's credentials, as the landing's
+ * hosted page does for whoever is signed out:
+ *
+ * - **an example Datalayer keeps warm for visitors** (`web-research`,
+ *   `customer-interview`): its Appspec from the catalogue this bundle
+ *   carries; the visitors' runtime answers its id;
+ * - **an application at its address** (`demo-accounting`): ai-agents'
+ *   `GET /apps/deployments/at/<slug>` without a token says what its page is
+ *   drawn from — the Appspec of the version it runs — and whether somebody
+ *   signed out may talk to it (`session.opens`); the visitors' runtime
+ *   answers `at:<slug>`, making the address's agent when first talked to —
+ *   or, for a version with code of its own (`runs_code`), the runtime its
+ *   deployment is kept on (`kept.url`), which runs that code;
+ * - **a decision**, named by its id (`01M…`): framed from Datalayer's run
+ *   page, as before.
+ *
+ * The conversation then runs as the landing's signed-out one does: the chat
+ * mints the visitor's token itself from ai-inference (`useVisitorToken`,
+ * `POST /anonymous/token {app}`), minted again before it runs out, and talks
+ * to the visitors' runtime with it — in every mode, inline or floating.
+ *
+ * What a visitor may not have is said in one sentence, before anything is
+ * drawn (fail fast): a private address (ai-agents answers *No application is
+ * at this address*), one that acts through its owner's connections or
+ * documents (ai-agents' own reason), an example the visitors' runtime does
+ * not keep. Each says the embed token is what an embed of it takes.
+ *
+ * Pure but for the one request, given or `fetch`.
+ *
+ * @module apps/embed/visitorApp
+ */
+import { DEFAULT_PLANE_URLS } from '@datalayer/core/lib/config/planes.js';
 import { getApp } from '../../specs/apps.js';
 import { parseAppspec } from '../apps/appspec.js';
 import { runnable } from './embedConfig.js';
@@ -17,12 +54,21 @@ export const AT_PREFIX = 'at:';
 /**
  * Datalayer's services for a visitor, where the element names none (`api`)
  * and the platform's configuration says none: ai-agents, where an address is
- * read, and beside it the visitors' runtime and ai-inference, which mints the
- * visitor's token. Not Spacer's address, which reads an application with its
- * embed token: the two live on different planes (ai-agents on r1, Spacer on
- * prod1), found 15 October 2026 on datalayer.ai's embed.
+ * read, and beside it the visitors' runtime — the AI plane, as core's plane
+ * table says it, never a literal of this bundle's own. Not Spacer's address,
+ * which reads an application with its embed token: the two live on different
+ * planes (ai-agents on r1, Spacer on prod1), found 15 October 2026 on
+ * datalayer.ai's embed; a bundle whose literal still said prod1 failed to
+ * mint a visitor's token there on 28 October 2026 ("Failed to fetch"),
+ * ai-inference being on r1 with the agents that call it.
+ */
+export const DEFAULT_API = DEFAULT_PLANE_URLS.aiAgentsUrl;
+/**
+ * ai-inference, which mints a visitor's token, where the element names none
+ * (`api`) and the platform's configuration says none: the AI plane, as core's
+ * plane table says it.
  */
-export const DEFAULT_API = 'https://r1.datalayer.run';
+export const DEFAULT_INFERENCE = DEFAULT_PLANE_URLS.aiInferenceUrl;
 /** An application's id on Datalayer: a ULID. */
 export const isAppUid = (value) => /^[0-9A-HJKMNP-TV-Z]{26}$/.test(value);
 /** An address, as ai-agents spells one. */
@@ -30,14 +76,15 @@ const SLUG = /^[a-z0-9][a-z0-9-]{0,62}$/;
 /**
  * Where a visitor's conversation with `app` runs: the visitors' runtime beside
  * ai-agents — or `runtime`, the one a deployment with code of its own is
- * kept on (R-30) — its token from ai-inference.
+ * kept on (R-30) — its token from ai-inference, at `inference` when it is
+ * named, else beside ai-agents.
  */
-export function visitorsAt(api, app, runtime) {
+export function visitorsAt(api, app, runtime, inference) {
     const base = api.replace(/\/+$/, '');
     return {
         url: runtime ? runtime.replace(/\/+$/, '') : `${base}${VISITORS_PATH}`,
         app,
-        inferenceUrl: base,
+        inferenceUrl: (inference || base).replace(/\/+$/, ''),
     };
 }
 /** What an embed without a token is told it takes. */
@@ -50,12 +97,17 @@ export const refusedSentence = (reason) => `datalayer-app: ${reason.trim().repla
  * Read what `app` is for a visitor without an account: a decision to frame,
  * an example or an address to run on the visitors' runtime, or a sentence.
  *
- * @param api - Datalayer's services (ai-agents, ai-inference): the `api` attribute.
+ * @param api - Datalayer's services (ai-agents, and ai-inference unless
+ *   `inference` names it): the `api` attribute; the AI plane unless given.
+ * @param inference - ai-inference, which mints the visitor's token: `api`
+ *   when that is given, else the AI plane.
  * @param app - The `app` attribute: a decision's id, an example's id or an address.
  * @param fetcher - What asks ai-agents; `fetch` unless given.
  * @param catalogue - The examples; the bundle's catalogue unless given.
  */
-export async function readVisitorApp({ api = DEFAULT_API, app, fetcher = fetch, catalogue = getApp, }) {
+export async function readVisitorApp({ api, inference, app, fetcher = fetch, catalogue = getApp, }) {
+    const agents = api || DEFAULT_API;
+    const mints = inference || api || DEFAULT_INFERENCE;
     const named = app.trim();
     if (isAppUid(named)) {
         return { kind: 'decision', app: named };
@@ -71,7 +123,7 @@ export async function readVisitorApp({ api = DEFAULT_API, app, fetcher = fetch,
         return {
             kind: 'visitors',
             app: runnable({ app: example, problems: [] }),
-            visitors: visitorsAt(api, example.id),
+            visitors: visitorsAt(agents, example.id, undefined, mints),
         };
     }
     if (!SLUG.test(named)) {
@@ -82,7 +134,7 @@ export async function readVisitorApp({ api = DEFAULT_API, app, fetcher = fetch,
     }
     let response;
     try {
-        response = await fetcher(`${api.replace(/\/+$/, '')}/api/ai-agents/v1/apps/deployments/at/${encodeURIComponent(named)}`);
+        response = await fetcher(`${agents.replace(/\/+$/, '')}/api/ai-agents/v1/apps/deployments/at/${encodeURIComponent(named)}`);
     }
     catch (error) {
         return {
@@ -117,7 +169,7 @@ export async function readVisitorApp({ api = DEFAULT_API, app, fetcher = fetch,
     return {
         kind: 'visitors',
         app: runnable({ app: { ...parsed.app, name }, problems: parsed.problems }),
-        visitors: visitorsAt(api, `${AT_PREFIX}${named}`, runtime.url),
+        visitors: visitorsAt(agents, `${AT_PREFIX}${named}`, runtime.url, mints),
     };
 }
 /**

package/lib/apps/plugins/agent-outputs/sheets.d.ts

@@ -0,0 +1,76 @@
+/**
+ * The outputs agent's spreadsheets, drawn with Datalayer Cells — in the
+ * chat message itself, and wherever else the page shows them.
+ *
+ * A ```csv block in an answer (its first line `# filename: <name>.csv`) is
+ * a workbook: one model per block, read once and kept here, so the grid in
+ * the message and the one in a side panel are the same workbook. The message
+ * draws it read-only (a mirror that follows it), 240 px high, with a download
+ * button. {@link AgentOutputsSheetsPlugin} contributes that renderer to the
+ * chat's `ChatCodeBlock` point; {@link AgentOutputsSheetToolsPlugin} hands
+ * the Cells plugin's agent tools (the `cells` bundle) the last spreadsheet
+ * answered, so an agent asked to chart it inserts the chart into that
+ * workbook — and it appears on both grids.
+ *
+ * Kept out of the plugin's index, which the apps barrel re-exports: only a
+ * page that wants spreadsheets loads Cells.
+ *
+ * @module apps/plugins/agent-outputs/sheets
+ */
+import { type JSX } from 'react';
+import { type CellsModel } from '@datalayer/cells';
+import { type ChatCodeBlockProps } from '../../../chat/messages/codeBlocks';
+/** The fence languages a spreadsheet is written in. */
+export declare const SHEET_LANGUAGES: string[];
+/** A spreadsheet block: its file name, extension, and the rows' text. */
+export type SheetBlock = {
+    name: string;
+    extension: 'csv' | 'tsv';
+    /** The CSV or TSV itself, without the `# filename:` line. */
+    source: string;
+};
+/**
+ * The spreadsheet a fenced block holds, by its language or by a
+ * `# filename:` first line ending in .csv or .tsv; `null` for another block.
+ */
+export declare function parseSheetBlock(language: string, code: string): SheetBlock | null;
+/**
+ * The workbook of a spreadsheet block, read once: every grid showing the
+ * same block shows the same model. The block met last for the first time is
+ * the latest, which is the one the agent tools act on.
+ */
+export declare function sheetModel(block: SheetBlock): Promise<CellsModel>;
+/** The workbook of the last spreadsheet answered, once read. */
+export declare function latestSheetModel(): CellsModel | undefined;
+/** Forget every workbook (tests). */
+export declare function resetSheets(): void;
+/** A block's workbook, or the sentence why it could not be read. */
+export declare function useSheetModel(block: SheetBlock | null): {
+    model: CellsModel | null;
+    error: string;
+};
+/**
+ * A read-only copy of a workbook that follows it: the message's grid can
+ * neither be typed into nor lose the agent's chart.
+ */
+export declare function useReadOnlyMirror(model: CellsModel | null): CellsModel | null;
+/**
+ * The height that shows a workbook's active sheet whole — its data and its
+ * charts — between `min` and `max`, followed as the workbook changes: a chart
+ * the agent inserts below the data comes into view instead of sitting under
+ * a frame of fixed height (28 October 2026).
+ */
+export declare function useFitHeight(model: CellsModel | null, min?: number, max?: number): number;
+/** Save a block as its file. */
+export declare function downloadSheet(block: SheetBlock): void;
+/** A spreadsheet in a chat message: its grid, read-only, and a download button. */
+export declare function SheetCodeBlock({ language, code, }: ChatCodeBlockProps): JSX.Element;
+export declare const AGENT_OUTPUTS_SHEETS_PLUGIN_NAME = "@datalayer/loop-plugin-agent-outputs-sheets";
+/** A ```csv (or ```tsv) block of an answer, drawn as a Cells grid in the message. */
+export declare const AgentOutputsSheetsPlugin: import("@datalayer/reactor").ReactorPlugin<Record<string, never>, unknown, unknown>;
+/**
+ * The Cells agent tools (`cells_read_range`, `cells_insert_chart`, …) on the
+ * last spreadsheet answered. Its bundle id is `cells`, the frontend toolset
+ * the `example-output` spec names.
+ */
+export declare const AgentOutputsSheetToolsPlugin: import("@datalayer/reactor").ReactorPlugin<Record<string, never>, unknown, unknown>;

package/lib/apps/plugins/agent-outputs/sheets.js

@@ -0,0 +1,230 @@
+import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/*
+ * Copyright (c) 2025-2026 Datalayer, Inc.
+ * Distributed under the terms of the Modified BSD License.
+ */
+/**
+ * The outputs agent's spreadsheets, drawn with Datalayer Cells — in the
+ * chat message itself, and wherever else the page shows them.
+ *
+ * A ```csv block in an answer (its first line `# filename: <name>.csv`) is
+ * a workbook: one model per block, read once and kept here, so the grid in
+ * the message and the one in a side panel are the same workbook. The message
+ * draws it read-only (a mirror that follows it), 240 px high, with a download
+ * button. {@link AgentOutputsSheetsPlugin} contributes that renderer to the
+ * chat's `ChatCodeBlock` point; {@link AgentOutputsSheetToolsPlugin} hands
+ * the Cells plugin's agent tools (the `cells` bundle) the last spreadsheet
+ * answered, so an agent asked to chart it inserts the chart into that
+ * workbook — and it appears on both grids.
+ *
+ * Kept out of the plugin's index, which the apps barrel re-exports: only a
+ * page that wants spreadsheets loads Cells.
+ *
+ * @module apps/plugins/agent-outputs/sheets
+ */
+import { useEffect, useState } from 'react';
+import { Button, Text } from '@primer/react';
+import { DownloadIcon } from '@primer/octicons-react';
+import { Box } from '@datalayer/primer-addons';
+import { contribution, definePlugin } from '@datalayer/reactor';
+import { CellsProvider, createCellsModel, Spreadsheet, } from '@datalayer/cells';
+import { CellsChartsPlugin } from '@datalayer/cells/charts';
+import { chartRect } from '@datalayer/cells/core';
+import { importCsv, usedZone } from '@datalayer/cells/csv';
+import { cellsAgentToolsPlugin } from '@datalayer/cells/plugin';
+import { ChatCodeBlock, } from '../../../chat/messages/codeBlocks.js';
+/** The fence languages a spreadsheet is written in. */
+export const SHEET_LANGUAGES = ['csv', 'tsv', 'spreadsheet', 'cells'];
+const FILENAME = /^#\s*filename:\s*([\w.-]+)\s*(?:\n|$)/i;
+/**
+ * The spreadsheet a fenced block holds, by its language or by a
+ * `# filename:` first line ending in .csv or .tsv; `null` for another block.
+ */
+export function parseSheetBlock(language, code) {
+    const text = code.replace(/^\s*\n/, '');
+    const named = FILENAME.exec(text)?.[1];
+    const byName = /\.(csv|tsv)$/i.exec(named ?? '')?.[1]?.toLowerCase();
+    if (!SHEET_LANGUAGES.includes(language) && byName === undefined) {
+        return null;
+    }
+    const extension = byName === 'tsv' || (byName === undefined && language === 'tsv')
+        ? 'tsv'
+        : 'csv';
+    const source = (named ? text.replace(FILENAME, '') : text).replace(/\s+$/, '');
+    if (source === '') {
+        return null;
+    }
+    return { name: named ?? `output.${extension}`, extension, source };
+}
+const MAX_SHEETS = 40;
+const sheets = new Map();
+const ready = new Map();
+let latestKey;
+const keyOf = (block) => `${block.name}\n${block.source}`;
+/**
+ * The workbook of a spreadsheet block, read once: every grid showing the
+ * same block shows the same model. The block met last for the first time is
+ * the latest, which is the one the agent tools act on.
+ */
+export function sheetModel(block) {
+    const key = keyOf(block);
+    const known = sheets.get(key);
+    if (known) {
+        return known;
+    }
+    latestKey = key;
+    const model = createCellsModel({ plugins: [CellsChartsPlugin] });
+    const read = importCsv(model, block.source, { worker: false }).then(() => {
+        ready.set(key, model);
+        return model;
+    });
+    sheets.set(key, read);
+    read.catch(() => sheets.delete(key));
+    // Streaming makes a block per chunk: the oldest go, never the latest.
+    for (const old of sheets.keys()) {
+        if (sheets.size <= MAX_SHEETS) {
+            break;
+        }
+        if (old !== latestKey) {
+            sheets.delete(old);
+            ready.delete(old);
+        }
+    }
+    return read;
+}
+/** The workbook of the last spreadsheet answered, once read. */
+export function latestSheetModel() {
+    return latestKey === undefined ? undefined : ready.get(latestKey);
+}
+/** Forget every workbook (tests). */
+export function resetSheets() {
+    sheets.clear();
+    ready.clear();
+    latestKey = undefined;
+}
+/** A block's workbook, or the sentence why it could not be read. */
+export function useSheetModel(block) {
+    const [state, setState] = useState({ model: null, error: '' });
+    const key = block ? keyOf(block) : '';
+    useEffect(() => {
+        if (!block) {
+            return;
+        }
+        let cancelled = false;
+        sheetModel(block)
+            .then(model => !cancelled && setState({ model, error: '' }))
+            .catch((e) => !cancelled &&
+            setState({
+                model: null,
+                error: e instanceof Error ? e.message : String(e),
+            }));
+        return () => {
+            cancelled = true;
+        };
+        // The block is its key.
+        // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, [key]);
+    return state;
+}
+/**
+ * A read-only copy of a workbook that follows it: the message's grid can
+ * neither be typed into nor lose the agent's chart.
+ */
+export function useReadOnlyMirror(model) {
+    const [mirror, setMirror] = useState(null);
+    useEffect(() => {
+        if (!model) {
+            setMirror(null);
+            return;
+        }
+        const copy = createCellsModel({
+            readOnly: true,
+            plugins: [CellsChartsPlugin],
+        });
+        copy.replaceData(model.toJSON(), 'remote');
+        setMirror(copy);
+        return model.subscribe(() => copy.replaceData(model.toJSON(), 'remote'));
+    }, [model]);
+    return mirror;
+}
+/** The column header's height and a scrollbar's, in px, around the content. */
+const GRID_CHROME = 24 + 16;
+/**
+ * The height that shows a workbook's active sheet whole — its data and its
+ * charts — between `min` and `max`, followed as the workbook changes: a chart
+ * the agent inserts below the data comes into view instead of sitting under
+ * a frame of fixed height (28 October 2026).
+ */
+export function useFitHeight(model, min = 160, max = 560) {
+    const [height, setHeight] = useState(min);
+    useEffect(() => {
+        if (!model) {
+            return;
+        }
+        const measure = () => {
+            const sheet = model.sheet(model.selection.sheet);
+            let bottom = sheet.rows.offsetOf(usedZone(model, sheet.id).bottom + 1);
+            for (const spec of sheet.charts.values()) {
+                const rect = chartRect(sheet, spec);
+                bottom = Math.max(bottom, rect.y + rect.height);
+            }
+            setHeight(Math.min(max, Math.max(min, Math.ceil(bottom) + GRID_CHROME)));
+        };
+        measure();
+        return model.subscribe(measure);
+    }, [model, min, max]);
+    return height;
+}
+/** Save a block as its file. */
+export function downloadSheet(block) {
+    const type = block.extension === 'tsv' ? 'text/tab-separated-values' : 'text/csv';
+    const url = URL.createObjectURL(new Blob([block.source + '\n'], { type: `${type};charset=utf-8` }));
+    const a = document.createElement('a');
+    a.href = url;
+    a.download = block.name;
+    document.body.appendChild(a);
+    a.click();
+    document.body.removeChild(a);
+    URL.revokeObjectURL(url);
+}
+/** A spreadsheet in a chat message: its grid, read-only, and a download button. */
+export function SheetCodeBlock({ language, code, }) {
+    const block = parseSheetBlock(language, code);
+    const { model, error } = useSheetModel(block);
+    const mirror = useReadOnlyMirror(model);
+    const height = useFitHeight(mirror);
+    if (!block) {
+        return _jsx(_Fragment, {});
+    }
+    return (
+    // The whole measure of the message (the chat gives it to what declares
+    // `width: 100%`), and wide enough for a few columns even in a bubble that
+    // hugs its text: a grid has no width of its own, and showed one column.
+    _jsxs(Box, { "data-sheet-block": block.name, my: 2, width: "100%", minWidth: "min(560px, 90vw)", children: [error ? (_jsxs(Text, { sx: { color: 'danger.fg', fontSize: 0 }, children: ["Could not read the spreadsheet: ", error] })) : mirror ? (_jsx(CellsProvider, { model: mirror, children: _jsx(Box, { height: height, border: "1px solid", borderColor: "border.muted", borderRadius: 2, overflow: "hidden", children: _jsx(Spreadsheet, { model: mirror, "aria-label": block.name }) }) })) : (_jsx(Text, { sx: { color: 'fg.muted', fontSize: 0 }, children: "Reading\u2026" })), _jsx(Box, { mt: 1, children: _jsxs(Button, { size: "small", variant: "invisible", leadingVisual: DownloadIcon, onClick: () => downloadSheet(block), children: ["Download ", block.name] }) })] }));
+}
+export const AGENT_OUTPUTS_SHEETS_PLUGIN_NAME = '@datalayer/loop-plugin-agent-outputs-sheets';
+/** A ```csv (or ```tsv) block of an answer, drawn as a Cells grid in the message. */
+export const AgentOutputsSheetsPlugin = definePlugin({
+    name: AGENT_OUTPUTS_SHEETS_PLUGIN_NAME,
+    displayName: 'Agent Outputs: spreadsheets',
+    description: 'A CSV the agent writes, drawn as a Datalayer Cells grid in the chat.',
+    octicon: 'table',
+    emoji: '🧮',
+    contributes: [
+        contribution(ChatCodeBlock, {
+            id: 'cells-sheet',
+            languages: SHEET_LANGUAGES,
+            match: block => parseSheetBlock(block.language, block.code) !== null,
+            Component: SheetCodeBlock,
+        }, { id: 'cells-sheet' }),
+    ],
+});
+/**
+ * The Cells agent tools (`cells_read_range`, `cells_insert_chart`, …) on the
+ * last spreadsheet answered. Its bundle id is `cells`, the frontend toolset
+ * the `example-output` spec names.
+ */
+export const AgentOutputsSheetToolsPlugin = cellsAgentToolsPlugin({
+    model: latestSheetModel,
+    name: '@datalayer/loop-plugin-agent-outputs-sheet-tools',
+});

package/lib/chat/messages/ChatMarkdown.d.ts

@@ -2,7 +2,9 @@
  * An agent's words, as markdown: what the chat's messages draw them with
  * (`ChatMessageList`), and what the floating assistant's balloon draws its
  * current line with — one renderer, so a code block, a table or a list
- * looks the same wherever the words are read.
+ * looks the same wherever the words are read. A fenced block whose language
+ * a plugin contributed a renderer for (`ChatCodeBlock`, a ```csv block drawn
+ * as a spreadsheet) is drawn by that renderer, in the message.
  *
  * @module chat/messages/ChatMarkdown
  */

package/lib/chat/messages/ChatMarkdown.js

@@ -4,6 +4,9 @@ import { Streamdown } from 'streamdown';
 import { REHYPE_PLUGINS_WITHOUT_HTML } from './markdownWithoutHtml.js';
 import { streamdownMarkdownStyles } from '../styles/streamdownStyles.js';
 import { normalizeAssistantMarkdown } from './assistantMarkdown.js';
+import { ChatCodePre } from './codeBlocks.js';
+/** The markdown elements the chat draws itself: a `pre` that hands its block to a contributed renderer. */
+const COMPONENTS = { pre: ChatCodePre };
 export function ChatMarkdown({ text, density = 'comfortable', }) {
     return (_jsx(Box, { "data-chat-markdown": "", sx: {
             ...streamdownMarkdownStyles,
@@ -14,6 +17,6 @@ export function ChatMarkdown({ text, density = 'comfortable', }) {
                     '& p:last-child': { marginBottom: 0 },
                 }
                 : {}),
-        }, children: _jsx(Streamdown, { rehypePlugins: REHYPE_PLUGINS_WITHOUT_HTML, children: normalizeAssistantMarkdown(text) }) }));
+        }, children: _jsx(Streamdown, { rehypePlugins: REHYPE_PLUGINS_WITHOUT_HTML, components: COMPONENTS, children: normalizeAssistantMarkdown(text) }) }));
 }
 export default ChatMarkdown;