@fungi.computer/knapsack 0.2.0 → 0.2.1

package/README.md

@@ -98,7 +98,11 @@ invalidates its captured modules when that list changes.
 Computer calls preserve Mycelium's invocation context, including its execution
 identity, abort signal and deadline. Advertised Computer operations are marked
 unsafe to replay because their implementation can change external state. The
-host's provider remains responsible for admission on each call.
+host's provider remains responsible for admission on each call. An interactive
+host may set `confirmCalls: true` on its Computer connection to request Mycelium
+confirmation before every advertised call. The advertisement does not
+distinguish read-only from mutating operations, so this policy confirms both;
+other connections keep their existing approval policy.
 
 `Knapsack.files({ port })` builds a Files module and direct tools from one port.
 Text edits use `port.replace` with the expected original content; the host must

package/dist/index.d.ts

@@ -15,6 +15,9 @@ export type ComputerConnectionOptions = Readonly<{
     name: string;
     /** Logical parent namespace; the Computer name is its final segment. */
     namespace?: readonly string[];
+    /** Ask a person before each advertised call on this connection. The host
+     * chooses this for interactive MCP; Agent connections keep their own policy. */
+    confirmCalls?: boolean;
     /** Files scoped by the host to this Computer, under its own authority id. */
     files?: FilesConnectionOptions;
     /**

package/dist/index.js

@@ -57,6 +57,7 @@ function projectComputer(input, advertisement) {
         operations[advertised.id] = Mycelium.operation({
             // Computer advertisements may execute arbitrary host actions.
             replay: "unsafe",
+            confirm: input.confirmCalls === true,
             description: advertised.description,
             input: operationSchema(advertised.parameters),
             output,

package/dist/mcp.d.ts

@@ -1,4 +1,3 @@
-import type { FetchLike } from "@modelcontextprotocol/client";
 import { type CapabilitySource } from "@fungi.computer/mycelium";
 /** One remote MCP server a host has admitted for an Agent. */
 export type McpServerConnection = Readonly<{
@@ -28,7 +27,7 @@ export type McpServersConnectionOptions = Readonly<{
     /** Receives each server dropped from an acquisition and why. */
     onUnavailable: (error: McpServerUnavailableError) => void;
     /** Host egress for every MCP request; the host chooses where requests may go. */
-    fetch: FetchLike;
+    fetch: (url: string | URL, init?: RequestInit) => Promise<Response>;
     /** Parent namespace for every server module; defaults to `["mcp"]`. */
     namespace?: readonly string[];
     /** Bound on connecting and listing one server; defaults to 10 seconds. */

package/docs/api/index.md

@@ -343,6 +343,7 @@ type ComputerConnectionOptions = Readonly<{
   id: string;
   name: string;
   namespace?: readonly string[];
+  confirmCalls?: boolean;
   files?: FilesConnectionOptions;
   role?: string;
   computer: KnapsackComputer;
@@ -411,7 +412,7 @@ type McpServersConnectionOptions = Readonly<{
   >;
   subscribe: (invalidate) => () => void;
   onUnavailable: (error) => void;
-  fetch: FetchLike;
+  fetch: (url, init?) => Promise<Response>;
   namespace?: readonly string[];
   connectTimeoutMillis?: number;
 }>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fungi.computer/knapsack",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "author": "Levi <levi@technomancy.dev>",
   "description": "Agent tool connections projected into Mycelium capability sources",
   "type": "module",
@@ -47,8 +47,8 @@
   "dependencies": {
     "@fungi.computer/cairn": "0.1.0",
     "@fungi.computer/forage": "0.2.0",
-    "@fungi.computer/mule": "0.1.0",
-    "@fungi.computer/mycelium": "0.2.0",
+    "@fungi.computer/mule": "0.1.1",
+    "@fungi.computer/mycelium": "0.2.1",
     "@fungi.computer/whistle": "0.1.0",
     "@modelcontextprotocol/client": "2.0.0",
     "diff": "8.0.4",