@datalayer/agent-runtimes 1.5.88 → 1.5.90

package/lib/examples/utils/agentOutputsPlugins.js

@@ -0,0 +1,27 @@
+/*
+ * Copyright (c) 2025-2026 Datalayer, Inc.
+ * Distributed under the terms of the Modified BSD License.
+ */
+/**
+ * The Loop plugins of the outputs example (`AgentOutputsExample`): the
+ * `example-output` agent, the chat's spreadsheet renderer, and the Cells
+ * agent tools on the last spreadsheet answered. The agent runs on a server,
+ * so the page names the bundle whose tools it hands it — `cells`, the grid's
+ * tools, run on this page's reactor — through the chat extras.
+ *
+ * Apart from the page, so a test reads the list without mounting the Loop.
+ *
+ * @module examples/utils/agentOutputsPlugins
+ */
+import { AgentOutputsPlugin } from '../../apps/plugins/agent-outputs/index.js';
+import { AgentOutputsSheetsPlugin, AgentOutputsSheetToolsPlugin, } from '../../apps/plugins/agent-outputs/sheets.js';
+import { createChatExtrasPlugin } from '../../apps/plugins/chat-extras/index.js';
+const SHEET_EXTRAS = createChatExtrasPlugin();
+SHEET_EXTRAS.setExtras({ agentToolBundles: ['cells'] });
+/** The Loop's plugins on the outputs page: the agent, the chat's grids, the grid's tools. */
+export const AGENT_OUTPUTS_LOOP_PLUGINS = [
+    AgentOutputsPlugin,
+    AgentOutputsSheetsPlugin,
+    AgentOutputsSheetToolsPlugin,
+    SHEET_EXTRAS.plugin,
+];

package/lib/portable/hosts/agentClient.d.ts

@@ -20,6 +20,12 @@ export type HostTurnRequest<P> = Readonly<{
      * another application): a new session's uid is derived with it.
      */
     sessionGeneration?: number;
+    /**
+     * The host user never linked: exchanged as a visitor, which ai-agents
+     * answers only when the installation's owner opened it to visitors and the
+     * deployment opens to somebody signed out (WHATSAPP WA-03).
+     */
+    visitor?: boolean;
 }>;
 export type TurnStream = Readonly<{
     /**
@@ -111,6 +117,8 @@ export declare class HostKeyCredentials<P> implements HostCredentials<P> {
         hostKey: string;
         /** Where the turn is asked from: Datalayer refuses a denied channel at once. */
         place?: Place;
+        /** As a visitor: the host user never linked (WHATSAPP WA-03). */
+        visitor?: boolean;
     }): Promise<HostExchange>;
     forTurn(request: HostTurnRequest<P>): Promise<HostSession>;
 }

package/lib/portable/hosts/agentClient.js

@@ -44,6 +44,7 @@ export class HostKeyCredentials {
             externalUserId: request.externalUserId,
             hostKey,
             place: this.shape.placeOf(request),
+            ...(request.visitor ? { visitor: true } : {}),
         });
     }
     /** The exchange for one host user and deployment, with a key in hand (a delivery, an action). */
@@ -53,6 +54,7 @@ export class HostKeyCredentials {
                 deployment_uid: input.deploymentUid,
                 external_user_id: input.externalUserId,
                 ...(input.place ? { place: input.place } : {}),
+                ...(input.visitor ? { visitor: true } : {}),
             }),
             headers: {
                 'content-type': 'application/json',

package/lib/portable/hosts/approvalRenderers.d.ts

@@ -6,7 +6,9 @@ import type { ApprovalPresentation } from './contracts';
  * presented is named by the renderer, or the card fails closed. An unknown
  * tool, an argument the renderer does not know, an attachment, and every
  * action that is not mail (reads, writes, other sends, destructive, financial,
- * publishing, executing) are reviewed in Datalayer (decided by the user on 16 October 2026: mail only).
+ * publishing, executing) are reviewed in Datalayer (decided by the user on 16 October 2026: mail only),
+ * but for a company's `pap_confirm`, decided in a host with the operation's
+ * exact revision since 28 October 2026 (the user, WHATSAPP WA-43).
  * They render ai-agents' presentation v1, a different input
  * from `../approvals.ts` and `../approvalCard.ts`. Moved from the Slack
  * service (DC-004).
@@ -39,7 +41,13 @@ type Renderer = Readonly<{
 export declare const DATALAYER_ONLY: Set<"unknown" | "read" | "write" | "send" | "delete" | "publish" | "execute" | "financial">;
 /** The words of a tool's name that make a send mail: contracts.json `mail_words`. */
 export declare const MAIL_WORDS: ReadonlySet<string>;
-/** The renderers, the first that matches wins: Datalayer-only before any other. */
+export declare const isPapConfirm: (toolName: string) => boolean;
+/** What a `pap_confirm` approval carries: contracts.json `presentation.pap_confirm_keys`. */
+export declare const PAP_CONFIRM_KEYS: readonly ["key", "company", "summary", "terms", "operation_ref", "revision", "digest", "class", "session", "only_the_person", "was"];
+/**
+ * The renderers, the first that matches wins: a company's `pap_confirm`
+ * (whose name says no class), then Datalayer-only before any other.
+ */
 export declare const RENDERERS: readonly Renderer[];
 /**
  * How a host shows an approval, by the renderer that knows its tool; with

package/lib/portable/hosts/approvalRenderers.js

@@ -98,6 +98,82 @@ const mail = {
         return rendered('mail', presentation, fields, MAIL_KEYS, extra);
     },
 };
+/** `pap_confirm`, as the gateway names it with or without a prefix. */
+const PAP_CONFIRM = /(^|[_.:\-/])pap_confirm$/;
+export const isPapConfirm = (toolName) => PAP_CONFIRM.test(toolName);
+/** What a `pap_confirm` approval carries: contracts.json `presentation.pap_confirm_keys`. */
+export const PAP_CONFIRM_KEYS = [
+    'key',
+    'company',
+    'summary',
+    'terms',
+    'operation_ref',
+    'revision',
+    'digest',
+    'class',
+    'session',
+    'only_the_person',
+    'was',
+];
+/**
+ * A company's operation the person confirms (WHATSAPP WA-43, decided by the
+ * user 28 October 2026): the company, its own summary, every term, the
+ * operation and its **exact revision** — a decision is on that revision and
+ * no other; a changed revision is another approval. A missing company,
+ * summary, operation, revision or digest fails the card closed.
+ */
+const papConfirm = {
+    name: 'pap-confirm',
+    matches: presentation => isPapConfirm(presentation.tool_name),
+    render(presentation) {
+        const args = presentation.arguments;
+        const fields = [];
+        const missing = [];
+        const extra = [];
+        const company = typeof args.company === 'string' ? args.company : '';
+        const summary = typeof args.summary === 'string' ? args.summary : '';
+        const operation = typeof args.operation_ref === 'string' ? args.operation_ref : '';
+        const revision = Number.isInteger(args.revision)
+            ? args.revision
+            : undefined;
+        if (!company)
+            missing.push('the company');
+        else
+            fields.push({ label: 'Company', value: company });
+        if (!summary)
+            missing.push('what it does, in its words');
+        else
+            fields.push({ label: 'Summary', value: summary });
+        const termsAreFields = args.terms === undefined ||
+            args.terms === null ||
+            (typeof args.terms === 'object' && !Array.isArray(args.terms));
+        if (!termsAreFields)
+            extra.push('Its terms are not named one by one: review it in Datalayer.');
+        else
+            for (const [name, value] of Object.entries((args.terms ?? {})))
+                fields.push({ label: name, value: text(value) });
+        if (!operation)
+            missing.push('the operation');
+        else
+            fields.push({ label: 'Operation', value: operation });
+        if (revision === undefined)
+            missing.push('its exact revision');
+        else
+            fields.push({ label: 'Revision', value: String(revision) });
+        if (typeof args.digest !== 'string' || !args.digest)
+            missing.push('the digest of its terms');
+        if (typeof args.class === 'string' && args.class)
+            fields.push({ label: 'What it does', value: args.class });
+        const was = args.was && typeof args.was === 'object'
+            ? args.was
+            : undefined;
+        if (was && was.revision !== undefined)
+            fields.push({ label: 'Replaces revision', value: text(was.revision) });
+        if (missing.length)
+            extra.push(`The request does not say ${missing.join(', ')}: review it in Datalayer.`);
+        return rendered('pap-confirm', presentation, fields, PAP_CONFIRM_KEYS, extra);
+    },
+};
 /** Everything but mail: shown, decided only in Datalayer. */
 const datalayerOnly = {
     name: 'datalayer-only',
@@ -122,8 +198,11 @@ const datalayerOnly = {
         };
     },
 };
-/** The renderers, the first that matches wins: Datalayer-only before any other. */
-export const RENDERERS = [datalayerOnly, mail];
+/**
+ * The renderers, the first that matches wins: a company's `pap_confirm`
+ * (whose name says no class), then Datalayer-only before any other.
+ */
+export const RENDERERS = [papConfirm, datalayerOnly, mail];
 /**
  * How a host shows an approval, by the renderer that knows its tool; with
  * none, nothing is decided in the host.

package/lib/portable/hosts/contracts.d.ts

@@ -93,6 +93,7 @@ export declare const exchangeSchema: z.ZodObject<{
     expires_in: z.ZodNumber;
     exp: z.ZodNumber;
     principal_uid: z.ZodString;
+    visitor: z.ZodOptional<z.ZodBoolean>;
     host_uid: z.ZodString;
     deployment: z.ZodObject<{
         uid: z.ZodString;

package/lib/portable/hosts/contracts.js

@@ -104,6 +104,8 @@ export const exchangeSchema = z.object({
     expires_in: z.number().int().nonnegative(),
     exp: z.number().int(),
     principal_uid: z.string().min(1),
+    /** A person who never linked, answered as a visitor (WHATSAPP WA-03): `principal_uid` is `visitor:<hash>`. */
+    visitor: z.boolean().optional(),
     host_uid: z.string().min(1),
     deployment: z.object({
         uid: z.string().min(1),

package/lib/portable/hosts/contracts.json

@@ -114,6 +114,45 @@
       "direct"
     ]
   },
+  "visitor_exchange": {
+    "about": "WHATSAPP WA-03 (decided 28 October 2026): a host's user who never linked, answered as a visitor when the installation's owner turned its visitors switch on and the deployment opens to somebody signed out. sub is visitor:<hash of the host's id with the installation's salt>; no link; a daily cap per visitor at the exchange (429).",
+    "request": {
+      "external_user_id": "US.13491208655302741918",
+      "deployment_uid": "dep-1",
+      "visitor": true
+    },
+    "response_keys": [
+      "success",
+      "access_token",
+      "token_type",
+      "expires_in",
+      "exp",
+      "principal_uid",
+      "visitor",
+      "host_uid",
+      "deployment",
+      "session_api"
+    ],
+    "token_claims": [
+      "jti",
+      "iss",
+      "iat",
+      "exp",
+      "aud",
+      "sub",
+      "azp",
+      "host_kind",
+      "deployment_uid",
+      "app_uid",
+      "visitor",
+      "scope"
+    ],
+    "sub_prefix": "visitor:",
+    "refusals": {
+      "visitors_off": 403,
+      "capped": 429
+    }
+  },
   "whoami": {
     "response_keys": [
       "success",
@@ -124,7 +163,8 @@
       "app_uid",
       "link",
       "scope",
-      "expires_in"
+      "expires_in",
+      "visitor"
     ]
   },
   "bind_session": {
@@ -328,7 +368,21 @@
       "host_may_decide": true,
       "reasons": [],
       "digest": "0000000000000000000000000000000000000000000000000000000000000000"
-    }
+    },
+    "pap_confirm_keys": [
+      "key",
+      "company",
+      "summary",
+      "terms",
+      "operation_ref",
+      "revision",
+      "digest",
+      "class",
+      "session",
+      "only_the_person",
+      "was"
+    ],
+    "pap_confirm_about": "WHATSAPP WA-43 (decided 28 October 2026): a company's pap_confirm (any gateway prefix) is decided in a host, on its exact revision; every other non-mail action stays in Datalayer."
   },
   "decision": {
     "request": {

package/lib/specs/agents/agents.js

@@ -5,7 +5,7 @@
 import { ALPHAVANTAGE_MCP_SERVER_0_0_1, CHART_MCP_SERVER_0_0_1, EARTHDATA_MCP_SERVER_0_0_1, EURUS_MCP_SERVER_0_0_1, FILESYSTEM_MCP_SERVER_0_0_1, GITHUB_MCP_SERVER_0_0_1, GOOGLE_WORKSPACE_MCP_SERVER_0_0_1, HUGGINGFACE_MCP_SERVER_0_0_1, KAGGLE_MCP_SERVER_0_0_1, ODOO_MCP_SERVER_0_0_1, SALESFORCE_MCP_SERVER_0_0_1, SLACK_MCP_SERVER_0_0_1, TAVILY_MCP_SERVER_0_0_1, } from '../mcpServers.js';
 import { ACCOUNTING_SKILL_SPEC_0_0_1, CRAWL_SKILL_SPEC_0_0_1, EVENTS_SKILL_SPEC_0_0_1, GITHUB_SKILL_SPEC_0_0_1, JOKES_SKILL_SPEC_0_0_1, PDF_SKILL_SPEC_0_0_1, TEXT_SUMMARIZER_SKILL_SPEC_0_0_1, } from '../skills.js';
 import { DECIDE_BACKEND_TOOL_SPEC_0_0_1, EXAMPLE_CREATE_PLAN_BACKEND_TOOL_SPEC_0_0_1, EXAMPLE_CURRENT_TIME_BACKEND_TOOL_SPEC_0_0_1, EXAMPLE_DISPLAY_RECIPE_BACKEND_TOOL_SPEC_0_0_1, EXAMPLE_GENERATE_HAIKU_BACKEND_TOOL_SPEC_0_0_1, EXAMPLE_GENERATE_TASK_STEPS_BACKEND_TOOL_SPEC_0_0_1, EXAMPLE_GET_WEATHER_BACKEND_TOOL_SPEC_0_0_1, EXAMPLE_RENDER_A2UI_SURFACE_BACKEND_TOOL_SPEC_0_0_1, EXAMPLE_UPDATE_PLAN_STEP_BACKEND_TOOL_SPEC_0_0_1, RUNTIME_ECHO_BACKEND_TOOL_SPEC_0_0_1, RUNTIME_SEND_MAIL_BACKEND_TOOL_SPEC_0_0_1, RUNTIME_SENSITIVE_ECHO_BACKEND_TOOL_SPEC_0_0_1, } from '../backendTools.js';
-import { DECKS_FRONTEND_TOOL_SPEC_0_0_1, JUPYTER_NOTEBOOK_EDIT_FRONTEND_TOOL_SPEC_0_0_1, JUPYTER_NOTEBOOK_PROPOSE_FRONTEND_TOOL_SPEC_0_0_1, JUPYTER_NOTEBOOK_READ_FRONTEND_TOOL_SPEC_0_0_1, JUPYTER_NOTEBOOK_FRONTEND_TOOL_SPEC_0_0_1, LEXICAL_DOCUMENT_FRONTEND_TOOL_SPEC_0_0_1, } from '../frontendTools.js';
+import { CELLS_FRONTEND_TOOL_SPEC_0_0_1, DECKS_FRONTEND_TOOL_SPEC_0_0_1, JUPYTER_NOTEBOOK_EDIT_FRONTEND_TOOL_SPEC_0_0_1, JUPYTER_NOTEBOOK_PROPOSE_FRONTEND_TOOL_SPEC_0_0_1, JUPYTER_NOTEBOOK_READ_FRONTEND_TOOL_SPEC_0_0_1, JUPYTER_NOTEBOOK_FRONTEND_TOOL_SPEC_0_0_1, LEXICAL_DOCUMENT_FRONTEND_TOOL_SPEC_0_0_1, } from '../frontendTools.js';
 // ============================================================================
 // MCP Server Lookup
 // ============================================================================
@@ -100,6 +100,8 @@ const TOOL_MAP = {
  * Map frontend tool IDs to FrontendToolSpec objects.
  */
 const FRONTEND_TOOL_MAP = {
+    'cells:0.0.1': CELLS_FRONTEND_TOOL_SPEC_0_0_1,
+    cells: CELLS_FRONTEND_TOOL_SPEC_0_0_1,
     'decks:0.0.1': DECKS_FRONTEND_TOOL_SPEC_0_0_1,
     decks: DECKS_FRONTEND_TOOL_SPEC_0_0_1,
     'jupyter-notebook-edit:0.0.1': JUPYTER_NOTEBOOK_EDIT_FRONTEND_TOOL_SPEC_0_0_1,
@@ -3997,7 +3999,7 @@ export const EXAMPLE_OUTPUT_AGENTSPEC_0_0_1 = {
     id: 'example-output',
     version: '0.0.1',
     name: 'Example Output Agent',
-    description: `Demonstrates structured response rendering (table, json, chart, and file) for the AgentOutputsExample side panel, which detects the block in each answer and renders it.`,
+    description: `Demonstrates structured response rendering (table, json, chart, spreadsheet and file) for the AgentOutputsExample side panel, which detects the block in each answer and renders it; a spreadsheet is drawn with Datalayer Cells, in the chat and in the panel, and charted on the grid through the Cells frontend tools.`,
     tags: ['workflow', 'visualization', 'automation'],
     domain: undefined,
     enabled: false,
@@ -4006,7 +4008,7 @@ export const EXAMPLE_OUTPUT_AGENTSPEC_0_0_1 = {
     skills: [].filter(Boolean),
     backendTools: [],
     disableToolApprovals: true,
-    frontendTools: [],
+    frontendTools: [FRONTEND_TOOL_MAP['cells:0.0.1']],
     environmentName: 'ai-agents-env',
     icon: 'table',
     emoji: '📦',
@@ -4025,23 +4027,43 @@ export const EXAMPLE_OUTPUT_AGENTSPEC_0_0_1 = {
             summary: 'Sales chart',
         },
         {
-            text: 'Create a CSV file named sales.csv with sample sales for the last 7 days, in a ```csv fenced block whose first line is `# filename: sales.csv`.',
-            summary: 'CSV file',
+            text: 'Give me a spreadsheet of twelve months of sales by region (North, South, Online), with a Month column, as one ```csv fenced block whose first line is `# filename: sales.csv`.',
+            summary: 'Sales spreadsheet',
+        },
+        {
+            text: 'Chart the sales spreadsheet: a column chart of the three regions by month, titled Sales by region, inserted on the grid below the data.',
+            summary: 'Chart the spreadsheet',
+        },
+        {
+            text: 'Create a YAML file named config.yaml for a small web service (name, port, log level and two routes), in a ```yaml fenced block whose first line is `# filename: config.yaml`.',
+            summary: 'YAML file',
         },
     ],
-    welcomeMessage: 'Example output agent ready. Ask for a TABLE, JSON, a CHART or a FILE and I will answer with exactly one structured output block.',
+    welcomeMessage: 'Example output agent ready. Ask for a TABLE, JSON, a CHART, a SPREADSHEET or a FILE and I will answer with exactly one structured output block; once a spreadsheet is shown, ask me to chart it on its grid.',
     welcomeNotebook: undefined,
     welcomeDocument: undefined,
     sandboxVariant: 'jupyter-server',
     harness: 'pydantic-ai',
     systemPrompt: `You are the Example Output Agent.
-The user may request one of exactly four output modes: TABLE, JSON, CHART, or FILE. For each response, emit exactly one mode and nothing else: no prose before or after the block. Answer from what you know: do not run code or call tools to produce the block.
+The user may request one of exactly six output modes: TABLE, JSON, CHART, SPREADSHEET, FILE or SHEET CHART. For the first five, emit exactly one mode and nothing else: no prose before or after the block. Answer from what you know: do not run code or call tools to produce the block.
 Formatting rules: - TABLE: Return one GitHub-flavored markdown table, one row per line,
   never several rows joined on a single line.
 - JSON: Return exactly one fenced \`\`\`json code block. - CHART: Return exactly one fenced \`\`\`json code block whose first line is
   "// chart" and whose remaining body is valid ECharts option JSON.
+- SPREADSHEET: Return exactly one fenced \`\`\`csv code block whose first
+  line is "# filename: <name>.csv", then a header row, then one row per
+  line, comma-separated, numbers without thousands separators or units.
 - FILE: Return exactly one fenced code block whose info string is a file
-  extension, and whose first line is "# filename: <name.ext>".
+  extension other than csv or tsv, and whose first line is
+  "# filename: <name.ext>".
+- SHEET CHART: when asked to chart, plot or graph the spreadsheet already
+  shown (the last SPREADSHEET answer), do not write a block: work on the
+  grid with the Cells tools. Call cells_read_range with no range to find
+  the data, then cells_insert_chart over that range (headers included) with
+  the type and title asked for, at the first column two rows below the
+  data (for data in A1:D13, at A15), unless told where. Answer in one short
+  sentence naming the chart and its range. If the tools say no grid is
+  shown, ask for the spreadsheet first.
 
 If mode is ambiguous, default to JSON.`,
     systemPromptCodemodeAddons: undefined,

package/lib/specs/frontendTools.d.ts

@@ -7,6 +7,7 @@
  * DO NOT EDIT MANUALLY - run 'make specs' to regenerate.
  */
 import type { FrontendToolSpec } from '../types';
+export declare const CELLS_FRONTEND_TOOL_SPEC_0_0_1: FrontendToolSpec;
 export declare const DECKS_FRONTEND_TOOL_SPEC_0_0_1: FrontendToolSpec;
 export declare const JUPYTER_NOTEBOOK_EDIT_FRONTEND_TOOL_SPEC_0_0_1: FrontendToolSpec;
 export declare const JUPYTER_NOTEBOOK_PROPOSE_FRONTEND_TOOL_SPEC_0_0_1: FrontendToolSpec;

package/lib/specs/frontendTools.js

@@ -5,6 +5,23 @@
 // ============================================================================
 // Frontend Tool Definitions
 // ============================================================================
+export const CELLS_FRONTEND_TOOL_SPEC_0_0_1 = {
+    id: 'cells',
+    version: '0.0.1',
+    name: 'Cells',
+    description: "Read and write the spreadsheet on the person's screen, and chart it — the grid drawn by Datalayer Cells.",
+    tags: ['frontend', 'cells', 'spreadsheets'],
+    enabled: true,
+    toolset: [
+        'cells_read_range',
+        'cells_write_range',
+        'cells_insert_chart',
+        'cells_list_charts',
+        'cells_select_range',
+    ],
+    icon: '@primer/octicons-react:table',
+    emoji: '🧮',
+};
 export const DECKS_FRONTEND_TOOL_SPEC_0_0_1 = {
     id: 'decks',
     version: '0.0.1',
@@ -101,6 +118,7 @@ export const LEXICAL_DOCUMENT_FRONTEND_TOOL_SPEC_0_0_1 = {
 // Frontend Tool Catalog
 // ============================================================================
 export const FRONTEND_TOOL_CATALOG = {
+    cells: CELLS_FRONTEND_TOOL_SPEC_0_0_1,
     decks: DECKS_FRONTEND_TOOL_SPEC_0_0_1,
     'jupyter-notebook-edit': JUPYTER_NOTEBOOK_EDIT_FRONTEND_TOOL_SPEC_0_0_1,
     'jupyter-notebook-propose': JUPYTER_NOTEBOOK_PROPOSE_FRONTEND_TOOL_SPEC_0_0_1,

package/lib/specs/mcpServers.js

@@ -44,16 +44,10 @@ export const DATALAYER_MCP_SERVER_0_0_1 = {
     description: 'Read, edit and run Jupyter notebooks on Datalayer, with sandboxes and data',
     icon: '@datalayer/icons-react:datalayer',
     emoji: '🚀',
-    url: '',
-    command: 'npx',
-    args: [
-        '-y',
-        'mcp-remote',
-        'https://mcp.datalayer.run/mcp',
-        '--header',
-        'Authorization: Bearer ${DATALAYER_API_KEY}',
-    ],
-    transport: 'stdio',
+    url: 'https://mcp.datalayer.run/mcp',
+    args: [],
+    headers: { Authorization: 'Bearer ${DATALAYER_API_KEY}' },
+    transport: 'streamable-http',
     enabled: false,
     isAvailable: false,
     tools: [],
@@ -66,16 +60,10 @@ export const EARTHDATA_MCP_SERVER_0_0_1 = {
     description: 'Access NASA Earthdata search and metadata capabilities',
     icon: '@datalayer/icons-react:globe-americas',
     emoji: '🌍',
-    url: '',
-    command: 'npx',
-    args: [
-        '-y',
-        'mcp-remote',
-        'https://mcp.datalayer.run/mcp?only=earthdata',
-        '--header',
-        'Authorization: Bearer ${DATALAYER_API_KEY}',
-    ],
-    transport: 'stdio',
+    url: 'https://mcp.datalayer.run/mcp?only=earthdata',
+    args: [],
+    headers: { Authorization: 'Bearer ${DATALAYER_API_KEY}' },
+    transport: 'streamable-http',
     enabled: true,
     isAvailable: false,
     tools: [],
@@ -165,16 +153,10 @@ export const HUGGINGFACE_MCP_SERVER_0_0_1 = {
     description: 'Hugging Face models, datasets, spaces, and papers access',
     icon: '@primer/octicons-react:hubot',
     emoji: '🤗',
-    url: '',
-    command: 'npx',
-    args: [
-        '-y',
-        'mcp-remote',
-        'https://huggingface.co/mcp',
-        '--header',
-        'Authorization: Bearer ${HF_TOKEN}',
-    ],
-    transport: 'stdio',
+    url: 'https://huggingface.co/mcp',
+    args: [],
+    headers: { Authorization: 'Bearer ${HF_TOKEN}' },
+    transport: 'streamable-http',
     enabled: false,
     isAvailable: false,
     tools: [],
@@ -187,16 +169,10 @@ export const KAGGLE_MCP_SERVER_0_0_1 = {
     description: 'Kaggle datasets, models, competitions, and notebooks access',
     icon: '@datalayer/icons-react:kaggle',
     emoji: '🏆',
-    url: '',
-    command: 'npx',
-    args: [
-        '-y',
-        'mcp-remote',
-        'https://www.kaggle.com/mcp',
-        '--header',
-        'Authorization: Bearer ${KAGGLE_API_TOKEN}',
-    ],
-    transport: 'stdio',
+    url: 'https://www.kaggle.com/mcp',
+    args: [],
+    headers: { Authorization: 'Bearer ${KAGGLE_API_TOKEN}' },
+    transport: 'streamable-http',
     enabled: false,
     isAvailable: false,
     tools: [],
@@ -209,16 +185,10 @@ export const ODOO_ACCOUNTING_MCP_SERVER_0_0_1 = {
     description: "An accountant's day in Odoo — invoices, bills, journal entries, reconciliations, bank lines and tax returns — through the Datalayer MCP server",
     icon: '@datalayer/icons-react:odoo',
     emoji: '🧮',
-    url: '',
-    command: 'npx',
-    args: [
-        '-y',
-        'mcp-remote',
-        'https://mcp.datalayer.run/mcp?only=odoo-accounting',
-        '--header',
-        'Authorization: Bearer ${DATALAYER_API_KEY}',
-    ],
-    transport: 'stdio',
+    url: 'https://mcp.datalayer.run/mcp?only=odoo-accounting',
+    args: [],
+    headers: { Authorization: 'Bearer ${DATALAYER_API_KEY}' },
+    transport: 'streamable-http',
     enabled: false,
     isAvailable: false,
     tools: [],

package/lib/types/mcp.d.ts

@@ -29,13 +29,15 @@ export interface MCPServer {
     enabled: boolean;
     /** List of available tools */
     tools: MCPServerTool[];
-    /** Command to run the MCP server (e.g., 'npx', 'uvx') */
+    /** Command to run a local MCP server (e.g., 'npx', 'uvx'); a remote one names none and is reached at `url` */
     command?: string;
     /** Command arguments for the MCP server */
     args: string[];
+    /** The headers a remote server is sent with every request, `${VAR}` expanded as it starts: the bearer among them */
+    headers?: Record<string, string>;
     /** Whether the server is available (based on tool discovery) */
     isAvailable: boolean;
-    /** Transport type: 'stdio', 'http', or 'streamable-http' for a server its command runs as a local HTTP process at `url` */
+    /** Transport type: 'stdio', 'http', or 'streamable-http' — a remote server reached at `url` with its `headers` when it has no `command`, a command run as a local HTTP process at `url` when it has one */
     transport: 'stdio' | 'http' | 'streamable-http';
     /** Environment variables required by this server (e.g., API keys) */
     requiredEnvVars?: string[];

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@datalayer/agent-runtimes",
-    "version": "1.5.88",
+    "version": "1.5.90",
     "type": "module",
     "workspaces": [
         ".",
@@ -154,6 +154,7 @@
         "@anthropic-ai/sdk": "^0.52.0",
         "@datalayer/agent-teams": "^1.0.0",
         "@datalayer/core": "^1.2.18",
+        "@datalayer/cells": "^1.0.0",
         "@datalayer/decks": "^1.0.4",
         "@datalayer/design": "^1.0.10",
         "@datalayer/icons-react": "^1.0.16",