@fungi.computer/agar 0.1.0 → 0.3.0

package/dist/errors.d.ts

@@ -1,6 +1,44 @@
+import * as z from "zod";
+/** Declaration-safe projection of the canonical Media diagnostic grammar. */
+export type MediaProviderDiagnostic = Readonly<{
+    /** Allowlisted Workers AI category; never a provider message. */
+    category: "InferenceUpstreamError" | "AiInternalError" | "TypeError" | "AbortError" | "TimeoutError" | "Error";
+    /** Four- or five-digit provider prefix, or null when absent. */
+    code: number | null;
+}> | Readonly<{
+    /** A completed video result could not be downloaded. */
+    category: "result_download";
+    /** Native Response status, including zero. */
+    status: number;
+}>;
+/** Decode only safe provider facts, rejecting unmodeled private fields. */
+export declare function decodeMediaProviderDiagnostic(input: unknown): MediaProviderDiagnostic;
+/**
+ * Documentable wire projection of the canonical diagnostic grammar.
+ * Maintained converters preserve its closed objects and numeric bounds;
+ * decoding still returns the declaration-safe public diagnostic type.
+ */
+export declare const mediaProviderDiagnosticWireSchema: z.ZodPipe<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>, z.ZodTransform<Readonly<{
+    /** Allowlisted Workers AI category; never a provider message. */
+    category: "InferenceUpstreamError" | "AiInternalError" | "TypeError" | "AbortError" | "TimeoutError" | "Error";
+    /** Four- or five-digit provider prefix, or null when absent. */
+    code: number | null;
+}> | Readonly<{
+    /** A completed video result could not be downloaded. */
+    category: "result_download";
+    /** Native Response status, including zero. */
+    status: number;
+}>, unknown>>;
+/** Decode an ordinary Error name without retaining arbitrary upstream text. */
+export declare function decodeMediaProviderErrorCategory(input: string | undefined): Exclude<MediaProviderDiagnostic["category"], "result_download">;
 /** The closed set of reasons an AppError can state; every SDK and
  * host-reported failure is tagged with exactly one of these codes. */
-export type AppErrorCode = "CANCELLED" | "CAPABILITY_DENIED" | "CAPABILITY_REVOKED" | "COMMAND_NOT_DECLARED" | "CONFLICT" | "DISCONNECTED" | "FILE_TOO_LARGE" | "HOST_FAILURE" | "IDENTITY" | "INSUFFICIENT_CREDIT" | "INVALID_ARGUMENT" | "PROTOCOL" | "SAFETY_FILTER_REFUSED" | "SELECTION_CHANGED" | "TIMEOUT";
+export declare const appErrorCodes: readonly ["CANCELLED", "CAPABILITY_DENIED", "CAPABILITY_REVOKED", "COMMAND_NOT_DECLARED", "CONFLICT", "DELIVERY_PENDING", "DISCONNECTED", "FILE_TOO_LARGE", "HOST_FAILURE", "IDENTITY", "INSUFFICIENT_CREDIT", "INVALID_ARGUMENT", "PROTOCOL", "SAFETY_FILTER_REFUSED", "SELECTION_CHANGED", "TIMEOUT"];
+export type AppErrorCode = (typeof appErrorCodes)[number];
+/** One pending-delivery refusal shared by admission and the shell. */
+export type AppDeliveryPending = Readonly<{
+    code: Extract<AppErrorCode, "DELIVERY_PENDING">;
+}>;
 /** Required construction options for an AppError. */
 export type AppErrorOptions = {
     readonly cause?: unknown;

package/dist/errors.js

@@ -1,3 +1,53 @@
+import * as Schema from "effect/Schema";
+import * as Option from "effect/Option";
+import * as z from "zod";
+import { mediaProviderDiagnosticSchema, mediaProviderErrorCategorySchema, } from "./internal/media-diagnostic.js";
+/** Decode only safe provider facts, rejecting unmodeled private fields. */
+export function decodeMediaProviderDiagnostic(input) {
+    // Bidirectional projection check, erased from the Promise declaration graph.
+    return Schema.decodeUnknownSync(mediaProviderDiagnosticSchema, {
+        onExcessProperty: "error",
+    })(input);
+}
+/**
+ * Documentable wire projection of the canonical diagnostic grammar.
+ * Maintained converters preserve its closed objects and numeric bounds;
+ * decoding still returns the declaration-safe public diagnostic type.
+ */
+export const mediaProviderDiagnosticWireSchema = z
+    .fromJSONSchema(Schema.toJsonSchemaDocument(mediaProviderDiagnosticSchema, {
+    onExcessProperty: "error",
+}).schema)
+    .transform(decodeMediaProviderDiagnostic);
+/** Decode an ordinary Error name without retaining arbitrary upstream text. */
+export function decodeMediaProviderErrorCategory(input) {
+    return (Option.getOrUndefined(Schema.decodeUnknownOption(mediaProviderErrorCategorySchema)(input)) ?? "Error");
+}
+/** The closed set of reasons an AppError can state; every SDK and
+ * host-reported failure is tagged with exactly one of these codes. */
+export const appErrorCodes = [
+    "CANCELLED",
+    "CAPABILITY_DENIED",
+    "CAPABILITY_REVOKED",
+    "COMMAND_NOT_DECLARED",
+    "CONFLICT",
+    "DELIVERY_PENDING",
+    "DISCONNECTED",
+    "FILE_TOO_LARGE",
+    "HOST_FAILURE",
+    "IDENTITY",
+    "INSUFFICIENT_CREDIT",
+    "INVALID_ARGUMENT",
+    "PROTOCOL",
+    "SAFETY_FILTER_REFUSED",
+    "SELECTION_CHANGED",
+    "TIMEOUT",
+];
+const describedAppErrorSchema = Schema.Struct({
+    name: Schema.Literal("AppError"),
+    code: Schema.Literals(appErrorCodes),
+    retryable: Schema.Boolean,
+});
 /** The SDK's one typed failure. Carries a closed `code` naming the failure
  * kind and an explicit `retryable` verdict, instead of leaving callers to
  * guess either from the message or exception shape. */
@@ -35,6 +85,10 @@ const errorCopy = {
         title: "File changed",
         message: "This file changed elsewhere. Review it before saving again.",
     },
+    DELIVERY_PENDING: {
+        title: "App delivery pending",
+        message: "The App hasn't finished getting ready. Try opening it again.",
+    },
     DISCONNECTED: {
         title: "Connection lost",
         message: "Reopen the App to connect again.",
@@ -90,15 +144,18 @@ const errorCopy = {
  * prerequisites, so they can accompany a non-retryable operation.
  */
 export function describeAppError(cause, overrides) {
-    if (!(cause instanceof AppError))
+    // The picked shell and host can be separate bundles of this same SDK.
+    const decoded = Schema.decodeUnknownOption(describedAppErrorSchema)(cause);
+    if (Option.isNone(decoded))
         return { ...errorCopy.UNKNOWN, retryable: false };
-    const entry = errorCopy[cause.code];
-    const copy = overrides?.[cause.code] ?? entry;
-    const action = entry.action ?? (cause.retryable ? "retry" : undefined);
+    const error = decoded.value;
+    const entry = errorCopy[error.code];
+    const copy = overrides?.[error.code] ?? entry;
+    const action = entry.action ?? (error.retryable ? "retry" : undefined);
     const description = {
         title: copy.title,
         message: copy.message,
-        retryable: cause.retryable,
+        retryable: error.retryable,
     };
     if (action)
         return { ...description, action };

package/dist/game-servers.js

@@ -221,7 +221,7 @@ export class GameServerRequestError extends Error {
         this.name = "GameServerRequestError";
     }
 }
-export const gamesServers = defineCapability("games:servers", 1, rpcHandleSchema({
+export const gamesServers = defineCapability("games:servers", 1, z.lazy(() => rpcHandleSchema({
     list: rpcMethod(rpcDataSchema(z.unknown().transform((value) => gameServerPageSchema.parse(value)))),
     catalog: rpcMethod(rpcDataSchema(z
         .unknown()
@@ -236,7 +236,7 @@ export const gamesServers = defineCapability("games:servers", 1, rpcHandleSchema
         .transform((value) => z.array(gameServerBackupSchema).parse(value)))),
     delete: rpcVoid,
     backupNow: rpcVoid,
-}));
+})));
 /** Decode the host's listing at the App boundary. */
 export async function listGameServers(capabilities, input) {
     const page = await capabilities.require(gamesServers).list(input);

package/dist/git-rpc.d.ts

@@ -3,27 +3,27 @@ import { type GitBinding } from "./git.js";
 /** The native tuple and result grammar shared by the handle and frame entrypoint. */
 export declare const nativeGitCodecs: {
     create: {
-        args: z.ZodTuple<[z.ZodString, z.ZodOptional<z.ZodObject<{
+        args: z.ZodTuple<[z.ZodString, z.ZodLazy<z.ZodOptional<z.ZodObject<{
             description: z.ZodOptional<z.ZodString>;
             defaultBranch: z.ZodOptional<z.ZodString>;
-        }, z.core.$strict>>], null>;
-        result: z.ZodObject<{
+        }, z.core.$strict>>>], null>;
+        result: z.ZodLazy<z.ZodObject<{
             name: z.ZodString;
             defaultBranch: z.ZodString;
             lastPushAt: z.ZodNullable<z.ZodString>;
             source: z.ZodNullable<z.ZodString>;
-        }, z.core.$strict>;
+        }, z.core.$strict>>;
     };
     fork: {
-        args: z.ZodTuple<[z.ZodString, z.ZodString, z.ZodOptional<z.ZodObject<{
+        args: z.ZodTuple<[z.ZodString, z.ZodString, z.ZodLazy<z.ZodOptional<z.ZodObject<{
             description: z.ZodOptional<z.ZodString>;
-        }, z.core.$strict>>], null>;
-        result: z.ZodObject<{
+        }, z.core.$strict>>>], null>;
+        result: z.ZodLazy<z.ZodObject<{
             name: z.ZodString;
             defaultBranch: z.ZodString;
             lastPushAt: z.ZodNullable<z.ZodString>;
             source: z.ZodNullable<z.ZodString>;
-        }, z.core.$strict>;
+        }, z.core.$strict>>;
     };
     cloneUrl: {
         args: z.ZodTuple<[z.ZodString], null>;
@@ -31,24 +31,24 @@ export declare const nativeGitCodecs: {
     };
     info: {
         args: z.ZodTuple<[z.ZodString], null>;
-        result: z.ZodNullable<z.ZodObject<{
+        result: z.ZodNullable<z.ZodLazy<z.ZodObject<{
             name: z.ZodString;
             defaultBranch: z.ZodString;
             lastPushAt: z.ZodNullable<z.ZodString>;
             source: z.ZodNullable<z.ZodString>;
-        }, z.core.$strict>>;
+        }, z.core.$strict>>>;
     };
     delete: {
         args: z.ZodTuple<[z.ZodString], null>;
         result: z.ZodBoolean;
     };
     log: {
-        args: z.ZodTuple<[z.ZodString, z.ZodObject<{
+        args: z.ZodTuple<[z.ZodString, z.ZodLazy<z.ZodObject<{
             ref: z.ZodString;
             limit: z.ZodOptional<z.ZodNumber>;
             offset: z.ZodOptional<z.ZodNumber>;
-        }, z.core.$strict>], null>;
-        result: z.ZodArray<z.ZodObject<{
+        }, z.core.$strict>>], null>;
+        result: z.ZodArray<z.ZodLazy<z.ZodObject<{
             hash: z.ZodString;
             treeHash: z.ZodString;
             message: z.ZodString;
@@ -63,11 +63,11 @@ export declare const nativeGitCodecs: {
             parents: z.ZodArray<z.ZodString>;
             authoredAt: z.ZodNumber;
             committedAt: z.ZodNumber;
-        }, z.core.$strict>>;
+        }, z.core.$strict>>>;
     };
     readCommit: {
         args: z.ZodTuple<[z.ZodString, z.ZodString], null>;
-        result: z.ZodNullable<z.ZodObject<{
+        result: z.ZodNullable<z.ZodLazy<z.ZodObject<{
             hash: z.ZodString;
             treeHash: z.ZodString;
             message: z.ZodString;
@@ -82,11 +82,11 @@ export declare const nativeGitCodecs: {
             parents: z.ZodArray<z.ZodString>;
             authoredAt: z.ZodNumber;
             committedAt: z.ZodNumber;
-        }, z.core.$strict>>;
+        }, z.core.$strict>>>;
     };
     readTree: {
         args: z.ZodTuple<[z.ZodString, z.ZodString], null>;
-        result: z.ZodNullable<z.ZodArray<z.ZodObject<{
+        result: z.ZodNullable<z.ZodArray<z.ZodLazy<z.ZodObject<{
             name: z.ZodString;
             mode: z.ZodString;
             hash: z.ZodString;
@@ -95,11 +95,11 @@ export declare const nativeGitCodecs: {
                 tree: "tree";
                 commit: "commit";
             }>;
-        }, z.core.$strict>>>;
+        }, z.core.$strict>>>>;
     };
     readBlob: {
         args: z.ZodTuple<[z.ZodString, z.ZodString], null>;
-        result: z.ZodNullable<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+        result: z.ZodNullable<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
     };
     refs: {
         args: z.ZodTuple<[z.ZodString], null>;
@@ -118,13 +118,13 @@ export declare const nativeGitCodecs: {
                 advertise: "advertise";
                 exchange: "exchange";
             }>;
-            body: z.ZodNullable<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
-            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+            body: z.ZodNullable<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+            headers: z.ZodLazy<z.ZodRecord<z.ZodString, z.ZodString>>;
         }, z.core.$strict>], null>;
         result: z.ZodObject<{
             status: z.ZodNumber;
-            headers: z.ZodRecord<z.ZodString, z.ZodString>;
-            body: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+            headers: z.ZodLazy<z.ZodRecord<z.ZodString, z.ZodString>>;
+            body: z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
         }, z.core.$strict>;
     };
 };

package/dist/git-rpc.js

@@ -1,18 +1,18 @@
 import * as z from "zod";
 import {} from "./git.js";
 import { gitRepositoryNameSchema, gitSha1Schema, } from "@fungi.computer/puffball/git-representation";
-const bytes = z
+const bytes = z.lazy(() => z
     .instanceof(Uint8Array)
-    .refine((value) => value.byteLength <= 32 * 1024 * 1024);
-const headers = z.record(z.string().max(256), z.string().max(8192));
+    .refine((value) => value.byteLength <= 32 * 1024 * 1024));
+const headers = z.lazy(() => z.record(z.string().max(256), z.string().max(8192)));
 const identity = z.strictObject({ name: z.string(), email: z.string() });
-const info = z.strictObject({
+const info = z.lazy(() => z.strictObject({
     name: gitRepositoryNameSchema,
     defaultBranch: z.string(),
     lastPushAt: z.string().nullable(),
     source: gitRepositoryNameSchema.nullable(),
-});
-const commit = z.strictObject({
+}));
+const commit = z.lazy(() => z.strictObject({
     hash: gitSha1Schema,
     treeHash: gitSha1Schema,
     message: z.string(),
@@ -21,13 +21,13 @@ const commit = z.strictObject({
     parents: z.array(gitSha1Schema),
     authoredAt: z.number().int(),
     committedAt: z.number().int(),
-});
-const tree = z.strictObject({
+}));
+const tree = z.lazy(() => z.strictObject({
     name: z.string(),
     mode: z.string(),
     hash: gitSha1Schema,
     type: z.enum(["blob", "tree", "commit"]),
-});
+}));
 const request = z.strictObject({
     service: z.enum(["upload-pack", "receive-pack"]),
     phase: z.enum(["advertise", "exchange"]),
@@ -39,20 +39,18 @@ const response = z.strictObject({
     headers,
     body: bytes,
 });
-const createOptions = z
+const createOptions = z.lazy(() => z
     .strictObject({
     description: z.string().max(8192).optional(),
     defaultBranch: z.string().min(1).max(1024).optional(),
 })
-    .optional();
-const forkOptions = z
-    .strictObject({ description: z.string().max(8192).optional() })
-    .optional();
-const logOptions = z.strictObject({
+    .optional());
+const forkOptions = z.lazy(() => z.strictObject({ description: z.string().max(8192).optional() }).optional());
+const logOptions = z.lazy(() => z.strictObject({
     ref: z.string().min(1).max(1024),
     limit: z.number().int().min(1).max(1000).optional(),
     offset: z.number().int().nonnegative().optional(),
-});
+}));
 /** The native tuple and result grammar shared by the handle and frame entrypoint. */
 export const nativeGitCodecs = {
     create: {

package/dist/git.d.ts

@@ -9,14 +9,14 @@ export type GitRepositoryName = z.output<typeof gitRepositoryNameSchema>;
  * Host-selected repository namespace. Team identity comes from the host;
  * decoding this reference never grants access to either namespace.
  */
-export declare const repositoryRefSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+export declare const repositoryRefSchema: z.ZodLazy<z.ZodDiscriminatedUnion<[z.ZodObject<{
     kind: z.ZodLiteral<"installation">;
     installationId: z.ZodString;
     repository: z.ZodString;
 }, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"team-source">;
     repository: z.ZodString;
-}, z.core.$strict>], "kind">;
+}, z.core.$strict>], "kind">>;
 /** Installation-local repository or registered Team source, selected by its host. */
 export type RepositoryRef = z.output<typeof repositoryRefSchema>;
 /** Stable namespace identity, serialized through the canonical repository decoder. */
@@ -84,7 +84,7 @@ export declare const gitWriterSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     }, z.core.$strict>], "kind">>;
 }, z.core.$strict>], "kind">;
 /** The App's question covers the whole push, under host-held attribution. */
-export declare const gitPushQuestionSchema: z.ZodObject<{
+export declare const gitPushQuestionSchema: z.ZodLazy<z.ZodObject<{
     repository: z.ZodString;
     writer: z.ZodObject<{
         kind: z.ZodLiteral<"actor">;
@@ -124,9 +124,9 @@ export declare const gitPushQuestionSchema: z.ZodObject<{
         before: z.ZodString;
         after: z.ZodString;
     }, z.core.$strict>>;
-}, z.core.$strict>;
+}, z.core.$strict>>;
 /** A whole push verdict; refusal messages are shown by ordinary Git clients. */
-export declare const gitPushVerdictSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+export declare const gitPushVerdictSchema: z.ZodLazy<z.ZodDiscriminatedUnion<[z.ZodObject<{
     allowed: z.ZodLiteral<true>;
 }, z.core.$strict>, z.ZodObject<{
     allowed: z.ZodLiteral<false>;
@@ -134,13 +134,13 @@ export declare const gitPushVerdictSchema: z.ZodDiscriminatedUnion<[z.ZodObject<
         ref: z.ZodString;
         message: z.ZodString;
     }, z.core.$strict>>;
-}, z.core.$strict>], "allowed">;
+}, z.core.$strict>], "allowed">>;
 /** Ref question sent only after host grant and Workflow branch admission. */
 export type GitPushQuestion = z.output<typeof gitPushQuestionSchema>;
 /** Explicit permission or bounded per-ref refusal for the whole push. */
 export type GitPushVerdict = z.output<typeof gitPushVerdictSchema>;
 /** One accepted push, with host attribution and no remote or credential. */
-export declare const appGitPushFactSchema: z.ZodObject<{
+export declare const appGitPushFactSchema: z.ZodLazy<z.ZodObject<{
     repository: z.ZodString;
     writer: z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"actor">;
@@ -197,8 +197,8 @@ export declare const appGitPushFactSchema: z.ZodObject<{
         ref: z.ZodString;
         journaled: z.ZodNullable<z.ZodString>;
     }, z.core.$strict>>>;
-    eventId: z.ZodString;
-}, z.core.$strict>;
+    eventId: z.ZodLazy<z.ZodString>;
+}, z.core.$strict>>;
 /** One bounded ref update, shared by push questions and accepted facts. */
 export type GitRefUpdate = z.output<typeof appGitPushFactSchema>["updates"][number];
 /** Host-delivered push fact; retries retain the same event ID. */

package/dist/git.js

@@ -7,7 +7,7 @@ export const gitRepositoryCapability = "git.repository";
  * Host-selected repository namespace. Team identity comes from the host;
  * decoding this reference never grants access to either namespace.
  */
-export const repositoryRefSchema = z.discriminatedUnion("kind", [
+export const repositoryRefSchema = z.lazy(() => z.discriminatedUnion("kind", [
     z.strictObject({
         kind: z.literal("installation"),
         installationId: z.string().min(1).max(256),
@@ -17,7 +17,7 @@ export const repositoryRefSchema = z.discriminatedUnion("kind", [
         kind: z.literal("team-source"),
         repository: gitRepositoryNameSchema,
     }),
-]);
+]));
 /** Stable namespace identity, serialized through the canonical repository decoder. */
 export function repositoryRefKey(repository) {
     return JSON.stringify(repositoryRefSchema.parse(repository));
@@ -55,13 +55,13 @@ export const gitWriterSchema = z.discriminatedUnion("kind", [
     }),
 ]);
 /** The App's question covers the whole push, under host-held attribution. */
-export const gitPushQuestionSchema = z.strictObject({
+export const gitPushQuestionSchema = z.lazy(() => z.strictObject({
     repository: gitRepositoryNameSchema,
     writer: gitWriterSchema.options[0],
     updates: z.array(gitRefUpdateSchema).min(1).max(256),
-});
+}));
 /** A whole push verdict; refusal messages are shown by ordinary Git clients. */
-export const gitPushVerdictSchema = z.discriminatedUnion("allowed", [
+export const gitPushVerdictSchema = z.lazy(() => z.discriminatedUnion("allowed", [
     z.strictObject({ allowed: z.literal(true) }),
     z.strictObject({
         allowed: z.literal(false),
@@ -73,9 +73,9 @@ export const gitPushVerdictSchema = z.discriminatedUnion("allowed", [
             .min(1)
             .max(256),
     }),
-]);
+]));
 /** One accepted push, with host attribution and no remote or credential. */
-export const appGitPushFactSchema = z.strictObject({
+export const appGitPushFactSchema = z.lazy(() => z.strictObject({
     repository: gitRepositoryNameSchema,
     writer: gitWriterSchema,
     updates: z.array(gitRefUpdateSchema).min(1).max(256),
@@ -88,7 +88,7 @@ export const appGitPushFactSchema = z.strictObject({
         .optional(),
     // Host event IDs may include a Computer ID as well as its local event ID.
     eventId: gitPushEventIdSchema,
-});
+}));
 /** Parse a host-admitted fact and invoke its lifecycle handler, preserving rejection. */
 export async function dispatchAppGitPush(lifecycle, raw) {
     const fact = appGitPushFactSchema.parse(raw);

package/dist/host.d.ts

@@ -1,7 +1,7 @@
 import type { AppCommand } from "./commands.js";
 import type { WhistleExecutionOrigin, WhistleJsonValue } from "@fungi.computer/whistle";
 import type { AppContext, AppIdentity, FocusState } from "./lifecycle.js";
-import type { AppNavigationState } from "./window.js";
+import type { AppNavigationActivation, AppNavigationState } from "./window.js";
 import type { AppBrowserAction, AppBrowserActionOutcome, AgentSessionSelection, AppPermissionOutcome, AppPermissionRequest, AppStatusAction, AppStatusItem, FileNavigationInput, ToastInput } from "./ui.js";
 import { AppError } from "./errors.js";
 import { type AppConnectMessage } from "./internal/protocol.js";
@@ -11,6 +11,8 @@ export type AppHost = {
     requestClose(): Promise<boolean>;
     /** Ask the App to go back one step in its own history; `true` when it did. */
     requestBack(): Promise<boolean>;
+    /** Deliver the person's use of a crumb or header command; `true` when the App acted. */
+    activateNavigation(activation: AppNavigationActivation): Promise<boolean>;
     /** Deliver the person's use of a status item; `true` when the App acted. */
     activateStatus(action: AppStatusAction): Promise<boolean>;
     updateContext(fact: AppHostFact<AppContext>): Promise<void>;

package/dist/host.js

@@ -12,7 +12,7 @@ import { disposeRpcValue } from "./internal/capabilities.js";
 import { disconnectHost } from "./internal/disconnect-host.js";
 import { APP_CONNECT_TYPE, APP_PROTOCOL_VERSION, APP_READY_TYPE, } from "./internal/protocol.js";
 import { callRpc, rpcFailure, rpcSuccess, } from "./internal/result.js";
-import { parseBrowserAction, parseChordInvocation, parseCommandResultRpc, parseBackDecisionResult, parseCloseDecisionResult, parseCommand, parseCommandId, parseConnectRequest, parseContextFact, parseFocus, parseAgentSessionSelection, parseLocalHostBootstrap, parseHostLifecycleFact, parseNavigation, parseNavigationState, parseStatusAction, parseStatusItems, parsePermissionRequest, parseReady, parseReservedChordsFact, parseThemeFact, parseToast, parseVoidResult, } from "./internal/schemas.js";
+import { parseBrowserAction, parseChordInvocation, parseCommandResultRpc, parseBackDecisionResult, parseCloseDecisionResult, parseCommand, parseCommandId, parseConnectRequest, parseContextFact, parseFocus, parseAgentSessionSelection, parseLocalHostBootstrap, parseHostLifecycleFact, parseNavigation, parseNavigationActivation, parseNavigationState, parseStatusAction, parseStatusItems, parsePermissionRequest, parseReady, parseReservedChordsFact, parseThemeFact, parseToast, parseVoidResult, } from "./internal/schemas.js";
 import { createTerminalGate, } from "./internal/terminal-gate.js";
 /** One pending or live mount belongs to each iframe WindowProxy. */
 const liveMounts = new WeakMap();
@@ -639,6 +639,10 @@ function createHost(options) {
             assertLive();
             return await callRpc(options.client.requestBack(), parseBackDecisionResult);
         },
+        activateNavigation: async (activation) => {
+            assertLive();
+            return await callRpc(options.client.activateNavigation(parseNavigationActivation(activation)), parseBackDecisionResult);
+        },
         activateStatus: async (action) => {
             assertLive();
             return await callRpc(options.client.activateStatus(parseStatusAction(action)), parseBackDecisionResult);

package/dist/index.d.ts

@@ -4,8 +4,8 @@ export { createCapabilityRegistry, defineCapability } from "./capabilities.js";
 export { pending, pendingSchema } from "./pending.js";
 export type { Pending } from "./pending.js";
 export type { CapabilityContract, CapabilityDirectory, CapabilityRegistry, } from "./capabilities.js";
-export { agentList, agentManage, agentRename, agentSessionRead, agentSessionWrite, agentToolPolicy, createAppAgent, renameAppAgent, appAgentCreateInputSchema, appAgentRenameInputSchema, appAgentSchema, appAgentToolPolicyResultSchema, appAgentToolPolicyStatusSchema, listAppAgents, openAppAgent, } from "./agents.js";
-export type { AppAgent, AppAgentCreateHandle, AppAgentCreateInput, AppAgentDirectoryHandle, AppAgentListHandle, AppAgentRenameHandle, AppAgentRenameInput, AppAgentToolPolicyHandle, AppAgentToolPolicyResult, AppAgentToolPolicyStatus, AppAgentTransport, AppAgentTransportHandle, } from "./agents.js";
+export { agentAvatar, agentList, agentManage, agentRename, agentSessionRead, agentSessionWrite, agentToolPolicy, createAppAgent, renameAppAgent, setAppAgentAvatar, appAgentAvatarInputSchema, appAgentAvatarSchema, appAgentCreateInputSchema, appAgentRenameInputSchema, appAgentSchema, appAgentToolPolicyResultSchema, appAgentToolPolicyStatusSchema, listAppAgents, openAppAgent, } from "./agents.js";
+export type { AppAgent, AppAgentAvatarHandle, AppAgentAvatarInput, AppAgentCreateHandle, AppAgentCreateInput, AppAgentDirectoryHandle, AppAgentListHandle, AppAgentRenameHandle, AppAgentRenameInput, AppAgentToolPolicyHandle, AppAgentToolPolicyResult, AppAgentToolPolicyStatus, AppAgentTransport, AppAgentTransportHandle, } from "./agents.js";
 export { mediaGeneration, mediaGenerationFailureSchema, mediaGenerationReferenceSchema, mediaGenerationSelectionSchema, mediaModelSchema, openMediaGeneration, } from "./media.js";
 export type { MediaGenerationHandle, MediaGenerationAttempt, MediaGenerationAttemptHandle, MediaGenerationFailure, MediaGenerationInput, MediaGenerationOutcome, MediaGenerationReference, MediaGenerationResult, MediaGenerationSelection, MediaModel, MediaOutputFormat, MediaGenerationSession, } from "./media.js";
 export type { AppCommand, AppCommandHandler, AppCommandInvocation, AppCommands, } from "./commands.js";
@@ -16,6 +16,8 @@ export type { ConnectAppOptions } from "./connect.js";
 export { APP_CONNECT_TYPE, APP_PROTOCOL_VERSION, APP_READY_TYPE, } from "./internal/protocol.js";
 export type { AppConnectMessage, AppReadyMessage, } from "./internal/protocol.js";
 export { AppError } from "./errors.js";
+export { appDeliveryPendingSchema } from "./internal/schemas.js";
+export type { AppDeliveryPending } from "./errors.js";
 export { statusActionAllowed, statusText } from "./status.js";
 export { APP_BROWSER_SAVE_MAX_BYTES, APP_BROWSER_COPY_MAX_BYTES, APP_STATUS_ITEMS_MAX, APP_STATUS_OPTIONS_MAX, APP_STATUS_TEXT_MAX, } from "./ui.js";
 export { parseStatusAction as parseAppStatusAction, parseStatusItems as parseAppStatusItems, } from "./internal/schemas.js";
@@ -25,7 +27,9 @@ export type { AppRoot } from "./root.js";
 export type { AgentSessionSelection } from "./ui.js";
 export type { Disposer, ReadonlyStore } from "./store.js";
 export type { AppBrowserAction, AppBrowserActionOutcome, AppBrowserActionRefusal, AgentAccessOperation, AppPermissionOutcome, AppPermissionRequest, AppStatusAction, AppStatusActionHandler, AppStatusIcon, AppStatusItem, AppStatusOption, AppStatusTone, ComputerAccessOperation, FileNavigationInput, HostUi, ToastInput, } from "./ui.js";
-export { APP_NAVIGATION_CONTRACT_VERSION, APP_NAVIGATION_TITLE_MAX, inertHostNavigation, } from "./window.js";
-export type { AppBackHandler, AppNavigationState, AppWindow, BeforeAppClose, HostNavigation, } from "./window.js";
+export { resultRowSchemaV1, type ResultRow } from "@fungi.computer/gills";
+export { APP_NAVIGATION_CONTRACT_VERSION, APP_NAVIGATION_CRUMBS_MAX, APP_NAVIGATION_LABEL_MAX, APP_NAVIGATION_MENU_MAX, APP_NAVIGATION_PRIMARY_MAX, APP_NAVIGATION_SIBLINGS_MAX, APP_NAVIGATION_STATUS_MAX, APP_NAVIGATION_TITLE_MAX, inertHostNavigation, navigationActivationAllowed, } from "./window.js";
+export type { AppBackHandler, AppCrumb, AppHeaderCommand, AppHeaderStatus, AppNavigationActivation, AppNavigationActivationHandler, AppNavigationState, AppWindow, BeforeAppClose, HostNavigation, } from "./window.js";
 export { appStorage, AppStorageError } from "./storage.js";
 export type { AppStorage, AppStorageWatch, AppStorageWrite, AppStorageReset, ResolvedAppStorage, } from "./storage.js";
+export { approvals } from "./approvals.js";

package/dist/index.js

@@ -1,15 +1,18 @@
 export { FungiAuthorSchema, FungiDelegationReplySchema, FungiMessageMetaSchema, messageAuthor, messageDelegationReply, authorMeta, } from "./agent-message-meta.js";
 export { createCapabilityRegistry, defineCapability } from "./capabilities.js";
 export { pending, pendingSchema } from "./pending.js";
-export { agentList, agentManage, agentRename, agentSessionRead, agentSessionWrite, agentToolPolicy, createAppAgent, renameAppAgent, appAgentCreateInputSchema, appAgentRenameInputSchema, appAgentSchema, appAgentToolPolicyResultSchema, appAgentToolPolicyStatusSchema, listAppAgents, openAppAgent, } from "./agents.js";
+export { agentAvatar, agentList, agentManage, agentRename, agentSessionRead, agentSessionWrite, agentToolPolicy, createAppAgent, renameAppAgent, setAppAgentAvatar, appAgentAvatarInputSchema, appAgentAvatarSchema, appAgentCreateInputSchema, appAgentRenameInputSchema, appAgentSchema, appAgentToolPolicyResultSchema, appAgentToolPolicyStatusSchema, listAppAgents, openAppAgent, } from "./agents.js";
 export { mediaGeneration, mediaGenerationFailureSchema, mediaGenerationReferenceSchema, mediaGenerationSelectionSchema, mediaModelSchema, openMediaGeneration, } from "./media.js";
 export { registerCatalog } from "./commands.js";
 export { connectApp } from "./connect.js";
 /** Data exchanged by iframe and host before the RPC MessagePort takes over. */
 export { APP_CONNECT_TYPE, APP_PROTOCOL_VERSION, APP_READY_TYPE, } from "./internal/protocol.js";
 export { AppError } from "./errors.js";
+export { appDeliveryPendingSchema } from "./internal/schemas.js";
 export { statusActionAllowed, statusText } from "./status.js";
 export { APP_BROWSER_SAVE_MAX_BYTES, APP_BROWSER_COPY_MAX_BYTES, APP_STATUS_ITEMS_MAX, APP_STATUS_OPTIONS_MAX, APP_STATUS_TEXT_MAX, } from "./ui.js";
 export { parseStatusAction as parseAppStatusAction, parseStatusItems as parseAppStatusItems, } from "./internal/schemas.js";
-export { APP_NAVIGATION_CONTRACT_VERSION, APP_NAVIGATION_TITLE_MAX, inertHostNavigation, } from "./window.js";
+export { resultRowSchemaV1 } from "@fungi.computer/gills";
+export { APP_NAVIGATION_CONTRACT_VERSION, APP_NAVIGATION_CRUMBS_MAX, APP_NAVIGATION_LABEL_MAX, APP_NAVIGATION_MENU_MAX, APP_NAVIGATION_PRIMARY_MAX, APP_NAVIGATION_SIBLINGS_MAX, APP_NAVIGATION_STATUS_MAX, APP_NAVIGATION_TITLE_MAX, inertHostNavigation, navigationActivationAllowed, } from "./window.js";
 export { appStorage, AppStorageError } from "./storage.js";
+export { approvals } from "./approvals.js";

package/dist/inference.js

@@ -1,9 +1,10 @@
 import { defineCapability } from "./capabilities.js";
 import { rpcFetchHandleSchema, rpcHandleSchema, rpcMethod, } from "./internal/rpc-contract.js";
+import * as z from "zod";
 import * as Schema from "effect/Schema";
 import { AppError } from "./errors.js";
 import { reportCatchFailure } from "./failure.js";
-export const llmGeneration = defineCapability("llm.generation", 1, rpcHandleSchema({ open: rpcMethod(rpcFetchHandleSchema) }));
+export const llmGeneration = defineCapability("llm.generation", 1, z.lazy(() => rpcHandleSchema({ open: rpcMethod(rpcFetchHandleSchema) })));
 const baseURL = "https://inference.fungi.invalid/v1";
 const decodeResponse = Schema.decodeUnknownSync(Schema.instanceOf(Response));
 /** OpenAI-compatible transport; no Agent, Session, host URL or credentials are exposed. */