@datalayer/agent-runtimes 1.5.89 → 1.5.90

package/lib/portable/hosts/agentClient.js

@@ -44,6 +44,7 @@ export class HostKeyCredentials {
             externalUserId: request.externalUserId,
             hostKey,
             place: this.shape.placeOf(request),
+            ...(request.visitor ? { visitor: true } : {}),
         });
     }
     /** The exchange for one host user and deployment, with a key in hand (a delivery, an action). */
@@ -53,6 +54,7 @@ export class HostKeyCredentials {
                 deployment_uid: input.deploymentUid,
                 external_user_id: input.externalUserId,
                 ...(input.place ? { place: input.place } : {}),
+                ...(input.visitor ? { visitor: true } : {}),
             }),
             headers: {
                 'content-type': 'application/json',

package/lib/portable/hosts/approvalRenderers.d.ts

@@ -6,7 +6,9 @@ import type { ApprovalPresentation } from './contracts';
  * presented is named by the renderer, or the card fails closed. An unknown
  * tool, an argument the renderer does not know, an attachment, and every
  * action that is not mail (reads, writes, other sends, destructive, financial,
- * publishing, executing) are reviewed in Datalayer (decided by the user on 16 October 2026: mail only).
+ * publishing, executing) are reviewed in Datalayer (decided by the user on 16 October 2026: mail only),
+ * but for a company's `pap_confirm`, decided in a host with the operation's
+ * exact revision since 28 October 2026 (the user, WHATSAPP WA-43).
  * They render ai-agents' presentation v1, a different input
  * from `../approvals.ts` and `../approvalCard.ts`. Moved from the Slack
  * service (DC-004).
@@ -39,7 +41,13 @@ type Renderer = Readonly<{
 export declare const DATALAYER_ONLY: Set<"unknown" | "read" | "write" | "send" | "delete" | "publish" | "execute" | "financial">;
 /** The words of a tool's name that make a send mail: contracts.json `mail_words`. */
 export declare const MAIL_WORDS: ReadonlySet<string>;
-/** The renderers, the first that matches wins: Datalayer-only before any other. */
+export declare const isPapConfirm: (toolName: string) => boolean;
+/** What a `pap_confirm` approval carries: contracts.json `presentation.pap_confirm_keys`. */
+export declare const PAP_CONFIRM_KEYS: readonly ["key", "company", "summary", "terms", "operation_ref", "revision", "digest", "class", "session", "only_the_person", "was"];
+/**
+ * The renderers, the first that matches wins: a company's `pap_confirm`
+ * (whose name says no class), then Datalayer-only before any other.
+ */
 export declare const RENDERERS: readonly Renderer[];
 /**
  * How a host shows an approval, by the renderer that knows its tool; with

package/lib/portable/hosts/approvalRenderers.js

@@ -98,6 +98,82 @@ const mail = {
         return rendered('mail', presentation, fields, MAIL_KEYS, extra);
     },
 };
+/** `pap_confirm`, as the gateway names it with or without a prefix. */
+const PAP_CONFIRM = /(^|[_.:\-/])pap_confirm$/;
+export const isPapConfirm = (toolName) => PAP_CONFIRM.test(toolName);
+/** What a `pap_confirm` approval carries: contracts.json `presentation.pap_confirm_keys`. */
+export const PAP_CONFIRM_KEYS = [
+    'key',
+    'company',
+    'summary',
+    'terms',
+    'operation_ref',
+    'revision',
+    'digest',
+    'class',
+    'session',
+    'only_the_person',
+    'was',
+];
+/**
+ * A company's operation the person confirms (WHATSAPP WA-43, decided by the
+ * user 28 October 2026): the company, its own summary, every term, the
+ * operation and its **exact revision** — a decision is on that revision and
+ * no other; a changed revision is another approval. A missing company,
+ * summary, operation, revision or digest fails the card closed.
+ */
+const papConfirm = {
+    name: 'pap-confirm',
+    matches: presentation => isPapConfirm(presentation.tool_name),
+    render(presentation) {
+        const args = presentation.arguments;
+        const fields = [];
+        const missing = [];
+        const extra = [];
+        const company = typeof args.company === 'string' ? args.company : '';
+        const summary = typeof args.summary === 'string' ? args.summary : '';
+        const operation = typeof args.operation_ref === 'string' ? args.operation_ref : '';
+        const revision = Number.isInteger(args.revision)
+            ? args.revision
+            : undefined;
+        if (!company)
+            missing.push('the company');
+        else
+            fields.push({ label: 'Company', value: company });
+        if (!summary)
+            missing.push('what it does, in its words');
+        else
+            fields.push({ label: 'Summary', value: summary });
+        const termsAreFields = args.terms === undefined ||
+            args.terms === null ||
+            (typeof args.terms === 'object' && !Array.isArray(args.terms));
+        if (!termsAreFields)
+            extra.push('Its terms are not named one by one: review it in Datalayer.');
+        else
+            for (const [name, value] of Object.entries((args.terms ?? {})))
+                fields.push({ label: name, value: text(value) });
+        if (!operation)
+            missing.push('the operation');
+        else
+            fields.push({ label: 'Operation', value: operation });
+        if (revision === undefined)
+            missing.push('its exact revision');
+        else
+            fields.push({ label: 'Revision', value: String(revision) });
+        if (typeof args.digest !== 'string' || !args.digest)
+            missing.push('the digest of its terms');
+        if (typeof args.class === 'string' && args.class)
+            fields.push({ label: 'What it does', value: args.class });
+        const was = args.was && typeof args.was === 'object'
+            ? args.was
+            : undefined;
+        if (was && was.revision !== undefined)
+            fields.push({ label: 'Replaces revision', value: text(was.revision) });
+        if (missing.length)
+            extra.push(`The request does not say ${missing.join(', ')}: review it in Datalayer.`);
+        return rendered('pap-confirm', presentation, fields, PAP_CONFIRM_KEYS, extra);
+    },
+};
 /** Everything but mail: shown, decided only in Datalayer. */
 const datalayerOnly = {
     name: 'datalayer-only',
@@ -122,8 +198,11 @@ const datalayerOnly = {
         };
     },
 };
-/** The renderers, the first that matches wins: Datalayer-only before any other. */
-export const RENDERERS = [datalayerOnly, mail];
+/**
+ * The renderers, the first that matches wins: a company's `pap_confirm`
+ * (whose name says no class), then Datalayer-only before any other.
+ */
+export const RENDERERS = [papConfirm, datalayerOnly, mail];
 /**
  * How a host shows an approval, by the renderer that knows its tool; with
  * none, nothing is decided in the host.

package/lib/portable/hosts/contracts.d.ts

@@ -93,6 +93,7 @@ export declare const exchangeSchema: z.ZodObject<{
     expires_in: z.ZodNumber;
     exp: z.ZodNumber;
     principal_uid: z.ZodString;
+    visitor: z.ZodOptional<z.ZodBoolean>;
     host_uid: z.ZodString;
     deployment: z.ZodObject<{
         uid: z.ZodString;

package/lib/portable/hosts/contracts.js

@@ -104,6 +104,8 @@ export const exchangeSchema = z.object({
     expires_in: z.number().int().nonnegative(),
     exp: z.number().int(),
     principal_uid: z.string().min(1),
+    /** A person who never linked, answered as a visitor (WHATSAPP WA-03): `principal_uid` is `visitor:<hash>`. */
+    visitor: z.boolean().optional(),
     host_uid: z.string().min(1),
     deployment: z.object({
         uid: z.string().min(1),

package/lib/portable/hosts/contracts.json

@@ -114,6 +114,45 @@
       "direct"
     ]
   },
+  "visitor_exchange": {
+    "about": "WHATSAPP WA-03 (decided 28 October 2026): a host's user who never linked, answered as a visitor when the installation's owner turned its visitors switch on and the deployment opens to somebody signed out. sub is visitor:<hash of the host's id with the installation's salt>; no link; a daily cap per visitor at the exchange (429).",
+    "request": {
+      "external_user_id": "US.13491208655302741918",
+      "deployment_uid": "dep-1",
+      "visitor": true
+    },
+    "response_keys": [
+      "success",
+      "access_token",
+      "token_type",
+      "expires_in",
+      "exp",
+      "principal_uid",
+      "visitor",
+      "host_uid",
+      "deployment",
+      "session_api"
+    ],
+    "token_claims": [
+      "jti",
+      "iss",
+      "iat",
+      "exp",
+      "aud",
+      "sub",
+      "azp",
+      "host_kind",
+      "deployment_uid",
+      "app_uid",
+      "visitor",
+      "scope"
+    ],
+    "sub_prefix": "visitor:",
+    "refusals": {
+      "visitors_off": 403,
+      "capped": 429
+    }
+  },
   "whoami": {
     "response_keys": [
       "success",
@@ -124,7 +163,8 @@
       "app_uid",
       "link",
       "scope",
-      "expires_in"
+      "expires_in",
+      "visitor"
     ]
   },
   "bind_session": {
@@ -328,7 +368,21 @@
       "host_may_decide": true,
       "reasons": [],
       "digest": "0000000000000000000000000000000000000000000000000000000000000000"
-    }
+    },
+    "pap_confirm_keys": [
+      "key",
+      "company",
+      "summary",
+      "terms",
+      "operation_ref",
+      "revision",
+      "digest",
+      "class",
+      "session",
+      "only_the_person",
+      "was"
+    ],
+    "pap_confirm_about": "WHATSAPP WA-43 (decided 28 October 2026): a company's pap_confirm (any gateway prefix) is decided in a host, on its exact revision; every other non-mail action stays in Datalayer."
   },
   "decision": {
     "request": {

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@datalayer/agent-runtimes",
-    "version": "1.5.89",
+    "version": "1.5.90",
     "type": "module",
     "workspaces": [
         ".",

package/scripts/codegen/generate_mcp_servers.py

@@ -356,18 +356,6 @@ def generate_typescript_code(specs: list[dict[str, Any]]) -> str:
 
 def update_init_file(specs: list[dict[str, Any]], init_file: Path) -> None:
     """Update the __init__.py file with correct imports based on generated specs."""
-    # Generate list of MCP server constant names
-    server_constants = []
-    for spec in specs:
-        server_id = spec["id"]
-        version = spec.get("version", "0.0.1")
-        const_name = (
-            server_id.upper().replace("-", "_")
-            + "_MCP_SERVER"
-            + version_suffix(version)
-        )
-        server_constants.append(const_name)
-
     # Read the current __init__.py
     init_content = init_file.read_text()
 
@@ -386,9 +374,12 @@ def update_init_file(specs: list[dict[str, Any]], init_file: Path) -> None:
         return
 
     # Generate new import lines - all names sorted alphabetically (ruff/isort order)
+    # Only the catalogue and its readers are re-exported: entries are read by
+    # id, never by a version-named constant (decided 14 October 2026), so the
+    # *_MCP_SERVER_<version> constants stay in catalog_mcp_servers alone and a
+    # version bump touches no caller (test_catalogue_by_id.py holds it).
     all_names = sorted(
-        server_constants
-        + [
+        [
             "MCP_SERVER_CATALOG",
             "check_env_vars_available",
             "get_catalog_server",
@@ -423,8 +414,6 @@ def update_init_file(specs: list[dict[str, Any]], init_file: Path) -> None:
             '    "get_catalog_server",',
             '    "list_catalog_servers",',
         ]
-        for const in sorted(server_constants):
-            all_entries.append(f'    "{const}",')
         all_entries.append("]")
 
         # Replace the section