@datalayer/agent-runtimes 1.5.9 → 1.5.11

package/lib/apps/apps/appspec.d.ts

@@ -106,9 +106,9 @@ export declare function uiProblems(app: Pick<AppSpec, 'ui' | 'enabled'>): string
  * What is wrong with the protocols an application says it speaks
  * (AGENT_PROTOCOLS PS-02), as agentspecs says it: an id the catalogue does not
  * know or said twice, a planned protocol while it is offered, and a `pap`,
- * `pact` or `a2a` block configuring a protocol it does not list.
+ * `pact`, `a2a` or `signed_fetch` block configuring a protocol it does not list.
  */
-export declare function protocolsProblems(app: Pick<AppSpec, 'protocols' | 'enabled' | 'pap' | 'pact' | 'a2a' | 'commerce'>): string[];
+export declare function protocolsProblems(app: Pick<AppSpec, 'protocols' | 'enabled' | 'pap' | 'pact' | 'a2a' | 'commerce' | 'signed_fetch'>): string[];
 /**
  * An application as the document its file holds.
  *

package/lib/apps/apps/appspec.js

@@ -205,6 +205,8 @@ const KNOWN_KEYS = [
     'pap',
     'pact',
     'commerce',
+    'signed_fetch',
+    'pair',
     'a2a',
     'rules',
     'permissions',
@@ -443,6 +445,35 @@ function dumpCommerce(commerce) {
         }
         : {}).data)).data;
 }
+/** Signed fetch (AGENT_PROTOCOLS EX-11): the exact sites it reads pages of, each request signed. */
+function parseSignedFetch(data) {
+    return {
+        sites: records(data.sites).map(site => ({
+            id: text(site.id),
+            site: text(site.site),
+        })),
+    };
+}
+/** Signed fetch as its document says it, nothing at its default. */
+function dumpSignedFetch(signedFetch) {
+    if (!signedFetch)
+        return {};
+    return new Writer().list('sites', signedFetch.sites.map(site => new Writer()
+        .text('id', site.id, '\u0000')
+        .text('site', site.site, '\u0000').data)).data;
+}
+/** One of a pair of examples (AGENT_PROTOCOLS PR-13): its id and its side, or a problem. */
+function parsePair(data) {
+    const id = text(data.id);
+    const role = text(data.role);
+    if (!/^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/.test(id)) {
+        return `A pair's id is lower-case letters, digits and hyphens: ${JSON.stringify(id)}.`;
+    }
+    if (role !== 'business' && role !== 'personal_agent') {
+        return `One of a pair is its business or its personal_agent, not ${JSON.stringify(role)}.`;
+    }
+    return { id, role };
+}
 /** PACT as its document says it, nothing at its default. */
 function dumpPact(pact) {
     if (!pact)
@@ -1047,6 +1078,18 @@ export function parseAppspec(document) {
     if (isData(data.commerce)) {
         app.commerce = parseCommerce(data.commerce);
     }
+    if (isData(data.signed_fetch)) {
+        app.signed_fetch = parseSignedFetch(data.signed_fetch);
+    }
+    if (isData(data.pair)) {
+        const pair = parsePair(data.pair);
+        if (typeof pair === 'string') {
+            problems.push(pair);
+        }
+        else {
+            app.pair = pair;
+        }
+    }
     if (isData(data.a2a)) {
         app.a2a = parseA2A(data.a2a);
     }
@@ -1081,7 +1124,7 @@ export function uiProblems(app) {
  * What is wrong with the protocols an application says it speaks
  * (AGENT_PROTOCOLS PS-02), as agentspecs says it: an id the catalogue does not
  * know or said twice, a planned protocol while it is offered, and a `pap`,
- * `pact` or `a2a` block configuring a protocol it does not list.
+ * `pact`, `a2a` or `signed_fetch` block configuring a protocol it does not list.
  */
 export function protocolsProblems(app) {
     const problems = [];
@@ -1105,6 +1148,7 @@ export function protocolsProblems(app) {
         pact: Boolean(app.pact &&
             (app.pact.connections.length > 0 || app.pact.business?.enabled)),
         a2a: Boolean(app.a2a && app.a2a.extensions.length > 0),
+        signed_fetch: Boolean(app.signed_fetch && app.signed_fetch.sites.length > 0),
     };
     for (const spec of Object.values(PROTOCOL_CATALOGUE)) {
         const block = spec.appspecBlock;
@@ -1386,6 +1430,8 @@ export function dumpAppspec(app) {
         .part('pap', dumpPap(app.pap))
         .part('pact', dumpPact(app.pact))
         .part('commerce', dumpCommerce(app.commerce))
+        .part('signed_fetch', dumpSignedFetch(app.signed_fetch))
+        .part('pair', app.pair ? { id: app.pair.id, role: app.pair.role } : {})
         .part('a2a', dumpA2A(app.a2a))
         .list('rules', app.rules.map(rule => ({
         action: rule.action,

package/lib/apps/embed/embeddedSecrets.d.ts

@@ -0,0 +1,16 @@
+/**
+ * What no file the embed ships may hold (PAP_DATALAYER B-02): the PAP SDK's
+ * emitted-bundle test (`src/__tests__/canaries.test.mjs`, `EMBEDDED_SECRETS`)
+ * extended to the embed, a browser artifact anybody's page loads. Its build
+ * fails on a file holding one (`vite.embed.config.ts`), naming the kind and
+ * the file, never what matched.
+ *
+ * Found 2026-10-13: the embed then served at datalayer.ai held the builder's
+ * Datalayer API key, because `import.meta.env` read whole (`env?.VITE_…`) is
+ * every `VITE_` variable of the environment it was built in.
+ *
+ * @module apps/embed/embeddedSecrets
+ */
+export declare const EMBEDDED_SECRETS: ReadonlyArray<readonly [string, RegExp]>;
+/** The kinds of secret a file's text holds, by name: empty when none. */
+export declare function secretsIn(text: string): string[];

package/lib/apps/embed/embeddedSecrets.js

@@ -0,0 +1,34 @@
+/*
+ * Copyright (c) 2025-2026 Datalayer, Inc.
+ * Distributed under the terms of the Modified BSD License.
+ */
+/**
+ * What no file the embed ships may hold (PAP_DATALAYER B-02): the PAP SDK's
+ * emitted-bundle test (`src/__tests__/canaries.test.mjs`, `EMBEDDED_SECRETS`)
+ * extended to the embed, a browser artifact anybody's page loads. Its build
+ * fails on a file holding one (`vite.embed.config.ts`), naming the kind and
+ * the file, never what matched.
+ *
+ * Found 2026-10-13: the embed then served at datalayer.ai held the builder's
+ * Datalayer API key, because `import.meta.env` read whole (`env?.VITE_…`) is
+ * every `VITE_` variable of the environment it was built in.
+ *
+ * @module apps/embed/embeddedSecrets
+ */
+export const EMBEDDED_SECRETS = [
+    // Key material after the header: a library may name the header to refuse it.
+    [
+        'a PEM private key',
+        /-----BEGIN [A-Z ]*PRIVATE KEY-----(?:\\n|\s)*[A-Za-z0-9+/=]{40,}/,
+    ],
+    ['a private JWK member', /["']d["']\s*:\s*["'][A-Za-z0-9_-]{32,}["']/],
+    [
+        'a compact JWT',
+        /eyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/,
+    ],
+    ['a Bearer or DPoP token', /(?:Bearer|DPoP) [A-Za-z0-9_-]{20,}/],
+];
+/** The kinds of secret a file's text holds, by name: empty when none. */
+export function secretsIn(text) {
+    return EMBEDDED_SECRETS.filter(([, pattern]) => pattern.test(text)).map(([kind]) => kind);
+}

package/lib/apps/plugins/pap-sign-in/PapSignInCard.js

@@ -1,14 +1,38 @@
 import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { useState } from 'react';
+import { useEffect, useState } from 'react';
 import { Button, Flash, Heading, Text } from '@primer/react';
 import { CopyIcon, LinkExternalIcon } from '@primer/octicons-react';
 import { Box } from '@datalayer/primer-addons';
 import QRCode from 'react-qr-code';
-import { PAP_SIGN_IN_WORDS, readPapSignIn } from './signIn';
+import { PAP_SIGN_IN_CHANNEL, PAP_SIGN_IN_WORDS, readPapSignIn, signInReturnOf, } from './signIn';
 export function PapSignInCard({ context, send, }) {
     const [copied, setCopied] = useState(false);
     const [sent, setSent] = useState(false);
+    const [returned, setReturned] = useState(null);
     const read = context.status === 'complete' ? readPapSignIn(context.result) : null;
+    // A Direct Sign-In: Datalayer's `/pap/signed-in`, in the tab the company sent the person
+    // back to, says how it came back (PAP_DATALAYER P-04); the conversation goes on here.
+    const company = read && !('refused' in read) && read.mode === 'direct'
+        ? (read.company ?? '')
+        : '';
+    useEffect(() => {
+        if (!company || typeof BroadcastChannel === 'undefined') {
+            return;
+        }
+        const channel = new BroadcastChannel(PAP_SIGN_IN_CHANNEL);
+        channel.onmessage = (event) => {
+            const outcome = signInReturnOf(event.data, company);
+            if (outcome) {
+                setReturned(outcome);
+            }
+        };
+        return () => channel.close();
+    }, [company]);
+    useEffect(() => {
+        if (returned === 'signed_in' && send && !sent) {
+            setSent(send(PAP_SIGN_IN_WORDS.checkMessage(company)));
+        }
+    }, [returned, send, sent, company]);
     if (!read) {
         // Running, or another answer: the chat's own row says it.
         return _jsx(_Fragment, { children: context.defaultUI });
@@ -25,9 +49,11 @@ export function PapSignInCard({ context, send, }) {
             setCopied(false);
         }
     };
+    // Who the person signs in at: the company itself for a Direct Sign-In (P-04), the page's host otherwise.
+    const named = read.company ?? read.host;
     const title = read.mode === 'mediated'
         ? PAP_SIGN_IN_WORDS.mediatedTitle(read.host)
-        : PAP_SIGN_IN_WORDS.title(read.host);
+        : PAP_SIGN_IN_WORDS.title(named);
     return (_jsxs(Box, { as: "section", "aria-label": title, my: 2, p: 3, border: "1px solid", borderColor: "border.default", borderRadius: 2, bg: "canvas.subtle", maxWidth: 480, children: [_jsx(Heading, { as: "h4", sx: { fontSize: 2, mb: 1 }, children: title }), _jsx(Text, { as: "p", sx: { mt: 0, mb: 2, color: 'fg.muted', fontSize: 1 }, children: read.mode === 'device'
                     ? PAP_SIGN_IN_WORDS.device
                     : read.mode === 'mediated'
@@ -37,6 +63,6 @@ export function PapSignInCard({ context, send, }) {
                                     fontSize: 5,
                                     fontWeight: 'bold',
                                     letterSpacing: '0.15em',
-                                }, children: read.code }), _jsx(Button, { size: "small", leadingVisual: CopyIcon, onClick: () => void copy(), children: copied ? PAP_SIGN_IN_WORDS.copied : PAP_SIGN_IN_WORDS.copy })] }), _jsx(Box, { bg: "#ffffff", p: 2, borderRadius: 2, lineHeight: 0, children: _jsx(QRCode, { value: read.open, size: 112, title: PAP_SIGN_IN_WORDS.qr(read.host) }) })] })) : null, _jsxs(Box, { display: "flex", gap: 2, flexWrap: "wrap", alignItems: "center", children: [_jsx(Button, { as: "a", href: read.open, target: "_blank", rel: "noopener noreferrer", variant: "primary", trailingVisual: LinkExternalIcon, children: PAP_SIGN_IN_WORDS.open(read.host) }), send ? (_jsx(Button, { disabled: sent, onClick: () => setSent(send(PAP_SIGN_IN_WORDS.checkMessage(read.host))), children: PAP_SIGN_IN_WORDS.checkAgain })) : null] }), read.expiresAt ? (_jsx(Text, { as: "p", sx: { mt: 2, mb: 0, fontSize: 0, color: 'fg.muted' }, children: PAP_SIGN_IN_WORDS.until(read.expiresAt) })) : null, send ? null : (_jsx(Text, { as: "p", sx: { mt: 1, mb: 0, fontSize: 1 }, children: PAP_SIGN_IN_WORDS.tellMe }))] }));
+                                }, children: read.code }), _jsx(Button, { size: "small", leadingVisual: CopyIcon, onClick: () => void copy(), children: copied ? PAP_SIGN_IN_WORDS.copied : PAP_SIGN_IN_WORDS.copy })] }), _jsx(Box, { bg: "#ffffff", p: 2, borderRadius: 2, lineHeight: 0, children: _jsx(QRCode, { value: read.open, size: 112, title: PAP_SIGN_IN_WORDS.qr(read.host) }) })] })) : null, _jsxs(Box, { display: "flex", gap: 2, flexWrap: "wrap", alignItems: "center", children: [_jsx(Button, { as: "a", href: read.open, target: "_blank", rel: "noopener noreferrer", variant: "primary", trailingVisual: LinkExternalIcon, children: PAP_SIGN_IN_WORDS.open(named) }), send ? (_jsx(Button, { disabled: sent, onClick: () => setSent(send(PAP_SIGN_IN_WORDS.checkMessage(named))), children: PAP_SIGN_IN_WORDS.checkAgain })) : null] }), returned ? (_jsx(Text, { as: "p", role: "status", sx: { mt: 2, mb: 0, fontSize: 1 }, children: PAP_SIGN_IN_WORDS.returned[returned](named) })) : null, read.expiresAt ? (_jsx(Text, { as: "p", sx: { mt: 2, mb: 0, fontSize: 0, color: 'fg.muted' }, children: PAP_SIGN_IN_WORDS.until(read.expiresAt) })) : null, send ? null : (_jsx(Text, { as: "p", sx: { mt: 1, mb: 0, fontSize: 1 }, children: PAP_SIGN_IN_WORDS.tellMe }))] }));
 }
 export default PapSignInCard;

package/lib/apps/plugins/pap-sign-in/signIn.d.ts

@@ -19,6 +19,12 @@ export type PapSignInWaiting = {
     open: string;
     /** The page's domain, read from its address: what the person can trust. */
     host: string;
+    /**
+     * The company's domain, when the gateway names it: for a bound `direct`
+     * sign-in the page opened is Datalayer's start link (PAP_DATALAYER P-04),
+     * which sends the person on to the company and takes them back only from it.
+     */
+    company?: string;
     /** The code to enter, for `device`. */
     code?: string;
     /** Where the company sent a code, for `mediated`, when it did. */
@@ -29,7 +35,7 @@ export type PapSignInWaiting = {
 /** What the card says. */
 export declare const PAP_SIGN_IN_WORDS: {
     readonly title: (host: string) => string;
-    readonly direct: "Open the company’s page, sign in there, and come back here.";
+    readonly direct: "Open the company’s page through Datalayer, sign in there, and this conversation goes on once you are back.";
     readonly device: "Open the company’s page and enter this code there.";
     /** `mediated`: the page is Datalayer's, which names the company and asks what it asks. */
     readonly mediatedTitle: (host: string) => string;
@@ -45,7 +51,23 @@ export declare const PAP_SIGN_IN_WORDS: {
     readonly checkMessage: (host: string) => string;
     readonly refused: "This sign-in link cannot be opened safely, so it is not shown.";
     readonly qr: (host: string) => string;
+    /** Once the person's browser came back from the company (P-04), said under the card. */
+    readonly returned: {
+        readonly signed_in: (company: string) => string;
+        readonly denied: (company: string) => string;
+        readonly refused: (company: string) => string;
+    };
 };
+/**
+ * Where Datalayer's `/pap/signed-in` page says a Direct Sign-In came back
+ * (PAP_DATALAYER P-04): the card waiting for that company hears it in the
+ * person's tab, so the conversation goes on there.
+ */
+export declare const PAP_SIGN_IN_CHANNEL = "datalayer-pap-sign-in";
+/** How a Direct Sign-In came back. */
+export type PapSignInReturn = keyof typeof PAP_SIGN_IN_WORDS.returned;
+/** What a message on the channel says of this company's sign-in, or `null`: another company's, or not one. */
+export declare function signInReturnOf(message: unknown, company: string): PapSignInReturn | null;
 /**
  * `pap_sign_in` — or a business's `pact_sign_in` (PI-56) — as the gateway
  * names it with or without a prefix.

package/lib/apps/plugins/pap-sign-in/signIn.js

@@ -5,7 +5,7 @@
 /** What the card says. */
 export const PAP_SIGN_IN_WORDS = {
     title: (host) => `Sign in at ${host}`,
-    direct: 'Open the company’s page, sign in there, and come back here.',
+    direct: 'Open the company’s page through Datalayer, sign in there, and this conversation goes on once you are back.',
     device: 'Open the company’s page and enter this code there.',
     /** `mediated`: the page is Datalayer's, which names the company and asks what it asks. */
     mediatedTitle: (host) => `Sign in through ${host}`,
@@ -21,7 +21,32 @@ export const PAP_SIGN_IN_WORDS = {
     checkMessage: (host) => `I have signed in at ${host}. Please check again.`,
     refused: 'This sign-in link cannot be opened safely, so it is not shown.',
     qr: (host) => `A code to scan to open ${host} on your phone`,
+    /** Once the person's browser came back from the company (P-04), said under the card. */
+    returned: {
+        signed_in: (company) => `Signed in at ${company}: checking again.`,
+        denied: (company) => `You did not sign in at ${company}: ask again when you want to.`,
+        refused: (company) => `That sign-in at ${company} was refused, and nothing was kept: start it again here.`,
+    },
 };
+/**
+ * Where Datalayer's `/pap/signed-in` page says a Direct Sign-In came back
+ * (PAP_DATALAYER P-04): the card waiting for that company hears it in the
+ * person's tab, so the conversation goes on there.
+ */
+export const PAP_SIGN_IN_CHANNEL = 'datalayer-pap-sign-in';
+const DOMAIN = /^(?=.{1,253}$)([a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z]{2,63}$/;
+/** What a message on the channel says of this company's sign-in, or `null`: another company's, or not one. */
+export function signInReturnOf(message, company) {
+    if (!message || typeof message !== 'object' || Array.isArray(message)) {
+        return null;
+    }
+    const said = message;
+    const outcome = said.outcome;
+    return said.company === company &&
+        (outcome === 'signed_in' || outcome === 'denied' || outcome === 'refused')
+        ? outcome
+        : null;
+}
 /**
  * `pap_sign_in` — or a business's `pact_sign_in` (PI-56) — as the gateway
  * names it with or without a prefix.
@@ -92,10 +117,16 @@ export function readPapSignIn(result) {
     if (data.mode === 'device' && (typeof data.code !== 'string' || !data.code)) {
         return null;
     }
+    // A bound Direct Sign-In opens Datalayer's start link: the card names the company the gateway
+    // names (`PapSignIn.company`); without one, the page's own domain is the company's.
+    const company = typeof data.company === 'string' && DOMAIN.test(data.company)
+        ? data.company
+        : '';
     return {
         mode: data.mode,
         open: url.toString(),
         host: url.hostname,
+        ...(company ? { company } : {}),
         ...(typeof data.code === 'string' && data.code ? { code: data.code } : {}),
         ...(data.mode === 'mediated' &&
             typeof data.sent_to === 'string' &&

package/lib/specs/actions.js

@@ -704,6 +704,12 @@ export const PROTOCOL_TOOL_CLASSES = {
             pap_disconnect: ['write'],
         },
     },
+    'signed-fetch': {
+        connection: 'signed-fetch',
+        tools: {
+            signed_fetch: ['read'],
+        },
+    },
     ucp: {
         connection: 'ucp',
         tools: {
@@ -793,8 +799,10 @@ export const APP_BEHAVIOURS = {
         'earthdata.search_earth_datagranules': 'do_it',
         'earthdata.search_earth_datasets': 'do_it',
     },
+    'errand-runner': {},
     'event-response': {},
     'exchange-desk': {},
+    'guest-desk': {},
     'inbox-triage': {
         'google-workspace.append_table_rows': 'leave_to_me',
         'google-workspace.batch_modify_gmail_message_labels': 'do_it',
@@ -981,6 +989,7 @@ export const APP_BEHAVIOURS = {
     'shop-concierge': {},
     'shopping-desk': {},
     'sign-in-desk': {},
+    'signed-reader': {},
     'supplier-comparison': {},
     'support-desk': {},
     'travel-desk': {},
@@ -1005,8 +1014,10 @@ export const APP_ESCALATIONS = {
     'data-quality': {},
     decide: {},
     'disaster-assessment': {},
+    'errand-runner': {},
     'event-response': {},
     'exchange-desk': {},
+    'guest-desk': {},
     'inbox-triage': {
         'google-workspace.batch_modify_gmail_message_labels': [
             {
@@ -1055,6 +1066,7 @@ export const APP_ESCALATIONS = {
     'shop-concierge': {},
     'shopping-desk': {},
     'sign-in-desk': {},
+    'signed-reader': {},
     'supplier-comparison': {},
     'support-desk': {},
     'travel-desk': {},

package/lib/specs/apps.d.ts

@@ -16,8 +16,10 @@ export declare const CUSTOMER_INTERVIEW_APP_0_0_1: AppSpec;
 export declare const DATA_QUALITY_APP_0_0_1: AppSpec;
 export declare const DECIDE_APP_0_0_1: AppSpec;
 export declare const DISASTER_ASSESSMENT_APP_0_0_1: AppSpec;
+export declare const ERRAND_RUNNER_APP_0_0_1: AppSpec;
 export declare const EVENT_RESPONSE_APP_0_0_1: AppSpec;
 export declare const EXCHANGE_DESK_APP_0_0_1: AppSpec;
+export declare const GUEST_DESK_APP_0_0_1: AppSpec;
 export declare const INBOX_TRIAGE_APP_0_0_1: AppSpec;
 export declare const LIVE_SHOP_CHAT_APP_0_0_1: AppSpec;
 export declare const MODEL_CHOICE_APP_0_0_1: AppSpec;
@@ -33,6 +35,7 @@ export declare const SHIP_OR_FIX_APP_0_0_1: AppSpec;
 export declare const SHOP_CONCIERGE_APP_0_0_1: AppSpec;
 export declare const SHOPPING_DESK_APP_0_0_1: AppSpec;
 export declare const SIGN_IN_DESK_APP_0_0_1: AppSpec;
+export declare const SIGNED_READER_APP_0_0_1: AppSpec;
 export declare const SUPPLIER_COMPARISON_APP_0_0_1: AppSpec;
 export declare const SUPPORT_DESK_APP_0_0_1: AppSpec;
 export declare const TRAVEL_DESK_APP_0_0_1: AppSpec;