@datalayer/core 1.2.13 → 1.2.15

package/README.md

@@ -1,4 +1,4 @@
-[![Datalayer](https://assets.datalayer.tech/datalayer-25.svg)](https://datalayer.io)
+[![Datalayer](https://images.datalayer.io/legacy/datalayer-25.svg)](https://datalayer.ai)
 
 [![Become a Sponsor](https://img.shields.io/static/v1?label=Become%20a%20Sponsor&message=%E2%9D%A4&logo=GitHub&style=flat&color=1ABC9C)](https://github.com/sponsors/datalayer)
 

package/lib/api/contents/datasets.d.ts

@@ -1,20 +1,10 @@
-import type { DatasetPublication, DatasetPublicationCreate, DatasetPublicationList, DatasetRevision, DatasetRevisionCreate, DatasetRevisionList } from './generated';
+import type { DataServerAttachment, DatasetClone, DatasetPublication, DatasetPublicationCreate, DatasetPublicationList, DatasetRevision, DatasetRevisionCreate, DatasetRevisionList } from './generated';
 export declare const createDatasetRevision: (token: string, sourceUid: string, request: DatasetRevisionCreate, idempotencyKey: string, baseUrl?: string) => Promise<DatasetRevision>;
 export declare const listDatasetRevisions: (token: string, sourceUid: string, baseUrl?: string) => Promise<DatasetRevisionList>;
 export declare const getDatasetRevision: (token: string, sourceUid: string, revisionUid: string, baseUrl?: string) => Promise<DatasetRevision>;
 export declare const createDatasetPublication: (token: string, sourceUid: string, request: DatasetPublicationCreate, idempotencyKey: string, baseUrl?: string) => Promise<DatasetPublication>;
 export declare const listDatasetPublications: (token: string, sourceUid: string, baseUrl?: string) => Promise<DatasetPublicationList>;
 export declare const unpublishDataset: (token: string, sourceUid: string, publicationUid: string, baseUrl?: string) => Promise<DatasetPublication>;
-/** The Dataset a clone produced, and where it came from. */
-export type DatasetClone = {
-    uid: string;
-    name: string;
-    sourceUid: string;
-    publicationUid: string;
-    revisionUid: string;
-    fileCount: number;
-    totalSize: number;
-};
 /**
  * Take a published Dataset into your own catalog.
  *
@@ -32,27 +22,6 @@ export declare const cloneDatasetPublication: (token: string, sourceUid: string,
  * Any signed-in caller may read it — published means public.
  */
 export declare const listPublishedDatasets: (token: string, baseUrl?: string) => Promise<DatasetPublicationList>;
-/** A published Data Server's catalog, as the library shows it. */
-export type DataServerPublication = {
-    uid: string;
-    sourceUid: string;
-    actorUid: string;
-    ownerUid: string;
-    name: string;
-    description?: string | null;
-    tags: string[];
-    connectors: string[];
-    relations: string[];
-    status: string;
-    createdAt: string;
-};
-/** The Datasource an attach produced, naming the published Data Server. */
-export type DataServerAttachment = {
-    uid: string;
-    name: string;
-    sourceUid: string;
-    publicationUid: string;
-};
 /**
  * Attach a published Data Server as a Datasource of your own.
  *

package/lib/api/contents/generated.d.ts

@@ -278,6 +278,12 @@ export interface CredentialDiagnostics {
 export interface CredentialRotation {
     credentialUid: string;
 }
+export interface DataServerAttachment {
+    name: string;
+    publicationUid: string;
+    sourceUid: string;
+    uid: string;
+}
 export interface DataServerConfiguration {
     connectors?: Array<DataServerConnector>;
     identityExpiresAt?: string | null;
@@ -332,6 +338,25 @@ export interface DataServerJobs {
     cancel: Array<string>;
     jobs: Array<DataServerJob>;
 }
+export interface DataServerPublication {
+    actorUid: string;
+    connectors?: Array<string>;
+    createdAt: string;
+    description?: string | null;
+    name: string;
+    ownerUid: string;
+    relations?: Array<string>;
+    sourceUid: string;
+    status: string;
+    tags?: Array<string>;
+    uid: string;
+    unpublishedAt?: string | null;
+    unpublishedBy?: string | null;
+}
+export interface DataServerPublicationList {
+    items: Array<DataServerPublication>;
+    nextOffset?: number | null;
+}
 export interface DataServerRegister {
     connectors?: Array<DataServerConnector>;
     registrationIdentity: string;
@@ -364,6 +389,15 @@ export interface DataServerStatus {
     queueDepth: number;
     state: 'registering' | 'ready' | 'degraded' | 'unavailable' | 'draining' | 'revoked';
 }
+export interface DatasetClone {
+    fileCount: number;
+    name: string;
+    publicationUid: string;
+    revisionUid: string;
+    sourceUid: string;
+    totalSize: number;
+    uid: string;
+}
 export interface DatasetConfiguration {
     currentRevisionUid?: string | null;
     kind: 'dataset';
@@ -395,6 +429,7 @@ export interface DatasetPublicationCreate {
 }
 export interface DatasetPublicationList {
     items: Array<DatasetPublication>;
+    nextOffset?: number | null;
 }
 export interface DatasetRevision {
     actorUid: string;
@@ -430,6 +465,7 @@ export interface DatasetRevisionFileCreate {
 }
 export interface DatasetRevisionList {
     items: Array<DatasetRevision>;
+    nextOffset?: number | null;
 }
 export interface DatasourceCapabilities {
     flight: boolean;
@@ -551,7 +587,7 @@ export interface FlightConnectivity {
 }
 export interface Grant {
     accessLevel: 'view' | 'update' | 'execute';
-    principalKind: 'user' | 'team' | 'organization';
+    principalKind: 'user' | 'team' | 'organization' | 'agent';
     principalUid: string;
     uid?: string | null;
 }
@@ -730,6 +766,7 @@ export interface McpToolManifest {
     tools: Array<McpToolView>;
 }
 export interface McpToolView {
+    annotations?: Record<string, unknown>;
     description?: string | null;
     inputSchema?: Record<string, unknown>;
     name: string;
@@ -777,6 +814,15 @@ export interface PartWritten {
     bytesWritten: number;
     part: string;
 }
+export interface PendingRevocation {
+    mountPath: string;
+    sandboxUid: string;
+    sourceUid: string;
+    uid: string;
+}
+export interface PendingRevocationList {
+    items: Array<PendingRevocation>;
+}
 export interface PingResponse {
     message?: 'Pong.';
     success?: true;
@@ -806,6 +852,7 @@ export interface PreparedAttachment {
     mode: 'ro' | 'rw';
     mountPath?: string | null;
     mountSession?: MountSession | null;
+    mountToken?: string | null;
     providerResourceId?: string | null;
     readyAt?: string | null;
     required?: boolean;
@@ -825,7 +872,7 @@ export interface PresignedAccess {
     path: string;
     url: string;
 }
-export type PrincipalKind = 'user' | 'team' | 'organization';
+export type PrincipalKind = 'user' | 'team' | 'organization' | 'agent';
 export interface PublishTableRequest {
     relation: string;
 }
@@ -1065,6 +1112,7 @@ export interface VolumeConfiguration {
     concurrentWriters: boolean;
     defaultMountPath: string;
     kind: 'volume';
+    managed?: boolean;
     scope: 'user' | 'space';
     storageClass?: string | null;
 }

package/lib/api/iam/organizationPlugins.d.ts

@@ -0,0 +1,8 @@
+/** The plugin ids the organization has turned off; none when it has decided nothing. */
+export declare const getOrganizationPluginsOff: (token: string, orgUid: string, baseUrl?: string) => Promise<string[]>;
+/**
+ * Replace the list: the plugins named are off, every other is on. An owner's,
+ * or a platform administrator's; IAM answers `422` with the reason for an id
+ * that is not one.
+ */
+export declare const setOrganizationPluginsOff: (token: string, orgUid: string, pluginsOff: readonly string[], baseUrl?: string) => Promise<string[]>;

package/lib/api/iam/organizationPlugins.js

@@ -0,0 +1,41 @@
+/*
+ * Copyright (c) 2023-2026 Datalayer, Inc.
+ * Distributed under the terms of the Modified BSD License.
+ */
+/**
+ * The plugins an organization has turned off (LOOP C-12).
+ *
+ * One list of plugin ids of the catalogue (`agentspecs/ui-plugins`), kept by
+ * IAM on the organization. A member reads it; an owner replaces it. IAM checks
+ * an id's shape only: what an id means is the reader's — the Studio's Canvas
+ * leaves a plugin's blocks off its palette, and the checks of an application
+ * say which of its blocks are off.
+ *
+ * @module api/iam/organizationPlugins
+ */
+import { requestDatalayerAPI } from '../DatalayerApi.js';
+import { API_BASE_PATHS, DEFAULT_SERVICE_URLS } from '../constants.js';
+const pluginsOffUrl = (baseUrl, orgUid) => `${baseUrl}${API_BASE_PATHS.IAM}/organizations/${encodeURIComponent(orgUid)}/plugins-off`;
+/** The plugin ids the organization has turned off; none when it has decided nothing. */
+export const getOrganizationPluginsOff = async (token, orgUid, baseUrl = DEFAULT_SERVICE_URLS.IAM) => {
+    const response = await requestDatalayerAPI({
+        url: pluginsOffUrl(baseUrl, orgUid),
+        method: 'GET',
+        token,
+    });
+    return response.plugins_off;
+};
+/**
+ * Replace the list: the plugins named are off, every other is on. An owner's,
+ * or a platform administrator's; IAM answers `422` with the reason for an id
+ * that is not one.
+ */
+export const setOrganizationPluginsOff = async (token, orgUid, pluginsOff, baseUrl = DEFAULT_SERVICE_URLS.IAM) => {
+    const response = await requestDatalayerAPI({
+        url: pluginsOffUrl(baseUrl, orgUid),
+        method: 'PUT',
+        token,
+        body: { plugins_off: [...pluginsOff] },
+    });
+    return response.plugins_off;
+};

package/lib/api/iam/servicePrincipals.d.ts

@@ -0,0 +1,30 @@
+import type { ServiceAgent } from './serviceAgents';
+export interface ServicePrincipal extends ServiceAgent {
+    /** The application it is the principal of. */
+    appUid: string;
+    /** Whose it is: a person's uid, or an organization's. */
+    accountUid: string;
+    /** The organization, when an organization owns it; empty for a person's. */
+    orgUid: string;
+}
+/** A principal as it comes back from a write, with the key — that once. */
+export interface ServicePrincipalWithKey extends ServicePrincipal {
+    key: string;
+}
+/** The caller's service principals — or an organization's, for its owners. */
+export declare const listServicePrincipals: (token: string, options?: {
+    appUid?: string;
+    orgUid?: string;
+}, baseUrl?: string) => Promise<ServicePrincipal[]>;
+/** Make one. **The key is in this answer and in no other.** */
+export declare const createServicePrincipal: (token: string, principal: {
+    appUid: string;
+    name: string;
+    scopes: string[];
+    description?: string;
+    orgUid?: string;
+}, baseUrl?: string) => Promise<ServicePrincipalWithKey>;
+/** Replace its key. The old one stops working with this call. */
+export declare const rotateServicePrincipalKey: (token: string, uid: string, orgUid?: string, baseUrl?: string) => Promise<ServicePrincipalWithKey>;
+/** Stop it, keeping it readable for its audit. */
+export declare const revokeServicePrincipal: (token: string, uid: string, orgUid?: string, baseUrl?: string) => Promise<ServicePrincipal>;

package/lib/api/iam/servicePrincipals.js

@@ -0,0 +1,87 @@
+/*
+ * Copyright (c) 2023-2026 Datalayer, Inc.
+ * Distributed under the terms of the Modified BSD License.
+ */
+/**
+ * Service principals: a deployed LOOP application as a principal of its
+ * own (plans/LOOP.md, I-02).
+ *
+ * The service agents' kin — a key that is exchanged for an hour's token, an
+ * audit that names it — with two differences: a person may own one, not only
+ * an organization, and it is the principal of one application. Its token says
+ * whose it is (`account_uid`) and which application (`app_uid`). ai-agents
+ * makes one at the application's first deploy; these calls are for reading,
+ * rotating and revoking it.
+ *
+ * @module api/iam/servicePrincipals
+ */
+import { requestDatalayerAPI } from '../DatalayerApi.js';
+import { API_BASE_PATHS, DEFAULT_SERVICE_URLS } from '../constants.js';
+const fromWire = (principal) => ({
+    uid: principal.uid,
+    name: principal.name ?? '',
+    description: principal.description ?? '',
+    teamUid: principal.team_uid ?? '',
+    scopes: principal.scopes ?? '',
+    revoked: Boolean(principal.revoked),
+    createdBy: principal.created_by ?? '',
+    createdAt: principal.created_at ?? null,
+    keyRotatedAt: principal.key_rotated_at ?? null,
+    appUid: principal.app_uid ?? '',
+    accountUid: principal.account_uid ?? '',
+    orgUid: principal.org_uid ?? '',
+});
+const withKey = (principal) => ({
+    ...fromWire(principal),
+    key: principal.key ?? '',
+});
+const principalsUrl = (baseUrl, suffix = '', orgUid) => `${baseUrl}${API_BASE_PATHS.IAM}/service-principals${suffix}` +
+    (orgUid ? `?org_uid=${encodeURIComponent(orgUid)}` : '');
+/** The caller's service principals — or an organization's, for its owners. */
+export const listServicePrincipals = async (token, options = {}, baseUrl = DEFAULT_SERVICE_URLS.IAM) => {
+    const query = new URLSearchParams();
+    if (options.appUid)
+        query.set('app_uid', options.appUid);
+    if (options.orgUid)
+        query.set('org_uid', options.orgUid);
+    const suffix = query.toString() ? `?${query.toString()}` : '';
+    const response = await requestDatalayerAPI({
+        url: `${baseUrl}${API_BASE_PATHS.IAM}/service-principals${suffix}`,
+        method: 'GET',
+        token,
+    });
+    return (response.principals ?? []).map(fromWire);
+};
+/** Make one. **The key is in this answer and in no other.** */
+export const createServicePrincipal = async (token, principal, baseUrl = DEFAULT_SERVICE_URLS.IAM) => {
+    const response = await requestDatalayerAPI({
+        url: principalsUrl(baseUrl, '', principal.orgUid),
+        method: 'POST',
+        token,
+        body: {
+            app_uid: principal.appUid,
+            name: principal.name,
+            scopes: principal.scopes,
+            description: principal.description ?? '',
+        },
+    });
+    return withKey(response.principal ?? { uid: '' });
+};
+/** Replace its key. The old one stops working with this call. */
+export const rotateServicePrincipalKey = async (token, uid, orgUid, baseUrl = DEFAULT_SERVICE_URLS.IAM) => {
+    const response = await requestDatalayerAPI({
+        url: principalsUrl(baseUrl, `/${encodeURIComponent(uid)}/rotate`, orgUid),
+        method: 'POST',
+        token,
+    });
+    return withKey(response.principal ?? { uid });
+};
+/** Stop it, keeping it readable for its audit. */
+export const revokeServicePrincipal = async (token, uid, orgUid, baseUrl = DEFAULT_SERVICE_URLS.IAM) => {
+    const response = await requestDatalayerAPI({
+        url: principalsUrl(baseUrl, `/${encodeURIComponent(uid)}/revoke`, orgUid),
+        method: 'POST',
+        token,
+    });
+    return fromWire(response.principal ?? { uid });
+};

package/lib/components/avatars/UserAvatar.d.ts

@@ -18,7 +18,8 @@ export type UserAvatarProps = {
     /**
      * A literal emoji, checked before `avatarIcon`/`avatarUrl` — an agent's
      * face is its emoji, not a photograph or a chosen icon standing in for
-     * one.
+     * one. Drawn in Fluent Emoji, the same on every platform (LOOP T-20); the
+     * system's, as text, only for one Datalayer ships no drawing of.
      */
     avatarEmoji?: string;
     /** Avatar edge length in pixels. Defaults to 100. */

package/lib/components/avatars/UserAvatar.js

@@ -3,6 +3,7 @@ import { AlienIcon } from '@datalayer/icons-react';
 import { Box, useColorPalette } from '@datalayer/primer-addons';
 import { DLAvatar } from './DLAvatar.js';
 import { getPrincipalAvatarIcon } from '../principal/PrincipalAppearance.js';
+import { FluentEmoji } from '../emoji/FluentEmoji.js';
 /**
  * Returns `true` when the given URL points to a real user avatar (i.e. not a
  * Gravatar default placeholder).
@@ -37,10 +38,8 @@ export const UserAvatar = ({ avatarUrl, avatarIcon, avatarEmoji, size = 100, squ
                 alignItems: 'center',
                 justifyContent: 'center',
                 bg: fallbackBackground || 'canvas.default',
-                fontSize: Math.round(size * 0.5),
-                lineHeight: 1,
                 ...ringSx,
-            }, children: avatarEmoji }));
+            }, children: _jsx(FluentEmoji, { emoji: avatarEmoji, size: iconSize ?? Math.round(size * 0.6), label: "" }) }));
     }
     const SelectedIcon = getPrincipalAvatarIcon(avatarIcon);
     if (SelectedIcon) {

package/lib/components/emoji/FluentEmoji.d.ts

@@ -0,0 +1,33 @@
+/**
+ * An emoji, drawn in Fluent Emoji (LOOP T-20): the same drawing on every
+ * platform, from Datalayer's own bundle — no request leaves for anyone
+ * else's. The drawing is a module of its own, fetched the first time the
+ * emoji is drawn, and kept; until it lands, an empty box of its size holds
+ * its place, so nothing moves when it does. An emoji Datalayer ships no
+ * drawing of (`FACE_EMOJIS` lists the ones it does) is drawn by the system,
+ * as text, at the same size.
+ *
+ * @module components/emoji/FluentEmoji
+ */
+import type { CSSProperties, JSX } from 'react';
+/** Whether Datalayer ships a Fluent drawing of the emoji. */
+export declare function hasFluentEmoji(emoji: string | undefined): boolean;
+/**
+ * The emoji's drawing, as a `data:` URL an `<img>` takes, or `undefined` when
+ * Datalayer ships none.
+ */
+export declare function loadFluentEmoji(emoji: string): Promise<string | undefined>;
+export type FluentEmojiProps = {
+    emoji: string;
+    /** Its edge, in pixels. */
+    size: number;
+    /**
+     * What it is called, for a screen reader; the emoji itself by default.
+     * Empty, it is decoration: whatever it sits in names it.
+     */
+    label?: string;
+    className?: string;
+    style?: CSSProperties;
+};
+export declare function FluentEmoji({ emoji, size, label, className, style, }: FluentEmojiProps): JSX.Element;
+export default FluentEmoji;

package/lib/components/emoji/FluentEmoji.js

@@ -0,0 +1,66 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { useEffect, useState } from 'react';
+import { emojiKey } from './faceEmojis.js';
+import { FLUENT_EMOJI_LOADERS } from './fluent/loaders.js';
+/** The drawings fetched so far, by key, as `data:` URLs. */
+const DRAWN = new Map();
+/** Whether Datalayer ships a Fluent drawing of the emoji. */
+export function hasFluentEmoji(emoji) {
+    return (!!emoji &&
+        Object.prototype.hasOwnProperty.call(FLUENT_EMOJI_LOADERS, emojiKey(emoji)));
+}
+/**
+ * The emoji's drawing, as a `data:` URL an `<img>` takes, or `undefined` when
+ * Datalayer ships none.
+ */
+export async function loadFluentEmoji(emoji) {
+    const key = emojiKey(emoji);
+    const known = DRAWN.get(key);
+    if (known) {
+        return known;
+    }
+    if (!Object.prototype.hasOwnProperty.call(FLUENT_EMOJI_LOADERS, key)) {
+        return undefined;
+    }
+    const svg = (await FLUENT_EMOJI_LOADERS[key]()).default;
+    const url = `data:image/svg+xml;charset=utf-8,${encodeURIComponent(svg)}`;
+    DRAWN.set(key, url);
+    return url;
+}
+export function FluentEmoji({ emoji, size, label, className, style, }) {
+    const key = emojiKey(emoji);
+    const shipped = hasFluentEmoji(emoji);
+    const [url, setUrl] = useState(() => DRAWN.get(key));
+    useEffect(() => {
+        let live = true;
+        setUrl(DRAWN.get(key));
+        if (shipped && !DRAWN.has(key)) {
+            loadFluentEmoji(emoji).then(drawn => live && setUrl(drawn), 
+            // A chunk that fails to load leaves the box empty rather than the page
+            // broken; the next draw tries again.
+            () => undefined);
+        }
+        return () => {
+            live = false;
+        };
+    }, [key, shipped, emoji]);
+    const name = label ?? emoji;
+    const box = {
+        display: 'inline-flex',
+        alignItems: 'center',
+        justifyContent: 'center',
+        flex: 'none',
+        width: size,
+        height: size,
+        ...style,
+    };
+    if (!shipped) {
+        // The system's emoji, the only drawing there is of this one.
+        return (_jsx("span", { className: className, role: name ? 'img' : undefined, "aria-label": name || undefined, "aria-hidden": name ? undefined : true, "data-emoji": "system", style: { ...box, fontSize: Math.round(size * 0.85), lineHeight: 1 }, children: emoji }));
+    }
+    if (!url) {
+        return (_jsx("span", { className: className, "aria-hidden": "true", "data-emoji": "loading", style: box }));
+    }
+    return (_jsx("img", { className: className, src: url, alt: name, "aria-hidden": name ? undefined : true, width: size, height: size, draggable: false, "data-emoji": "fluent", style: { ...box, display: 'inline-block' } }));
+}
+export default FluentEmoji;

package/lib/components/emoji/faceEmojis.d.ts

@@ -0,0 +1,24 @@
+/**
+ * The emojis a face is offered in, each drawn in Fluent Emoji (LOOP T-20).
+ *
+ * A native emoji is a different drawing on every platform, and missing on
+ * some: an application's face has to be the same face for its builder and
+ * its users. These are the ones Datalayer ships a drawing of, served from its
+ * own bundle — the face every new application starts with (the eyes), every
+ * example's, the emoji of each avatar of the profile's set that has one, and
+ * the ones *Describe it* chooses from. Any other emoji is still accepted, and
+ * is drawn by the system, as text.
+ *
+ * `scripts/generate-fluent-emoji.py` reads this list, between the two
+ * markers, and writes a drawing for each: adding an emoji here means running
+ * it again. `faceEmojis.unit.test.ts` fails when one has none.
+ *
+ * @module components/emoji/faceEmojis
+ */
+export declare const FACE_EMOJIS: ReadonlyArray<string>;
+/**
+ * The key a drawing is filed under: the emoji's code points, in lower-case
+ * hexadecimal, joined by `-` — without the variation selector (U+FE0F), which
+ * one keyboard types and another does not, for the same emoji.
+ */
+export declare function emojiKey(emoji: string): string;