@fungi.computer/knapsack 0.2.0 → 0.3.0

package/README.md

@@ -98,7 +98,11 @@ invalidates its captured modules when that list changes.
 Computer calls preserve Mycelium's invocation context, including its execution
 identity, abort signal and deadline. Advertised Computer operations are marked
 unsafe to replay because their implementation can change external state. The
-host's provider remains responsible for admission on each call.
+host's provider remains responsible for admission on each call. An interactive
+host may set `confirmCalls: true` on its Computer connection to request Mycelium
+confirmation before every advertised call. The advertisement does not
+distinguish read-only from mutating operations, so this policy confirms both;
+other connections keep their existing approval policy.
 
 `Knapsack.files({ port })` builds a Files module and direct tools from one port.
 Text edits use `port.replace` with the expected original content; the host must

package/dist/files.d.ts

@@ -5,7 +5,7 @@ import { z } from "zod";
 import { readInputSchema, readGuestOutputSchema, readOutputSchema } from "./files-read.js";
 export { readGuestOutputSchema, readInputSchema, readOutputSchema };
 /** Typed refusal from a bounded or conditional Files edit. */
-export type FilesEditErrorReason = "not-found" | "ambiguous" | "file-too-large" | "partial-character" | "unchanged" | "not-text" | "conflict";
+export type FilesEditErrorReason = "not-found" | "ambiguous" | "file-too-large" | "partial-character" | "unchanged" | "not-text" | "conflict" | "read-only";
 /** Expected Files edit refusal, kept distinct from unexpected host failures. */
 export declare class FilesEditError extends Error {
     readonly reason: FilesEditErrorReason;
@@ -68,6 +68,7 @@ export declare const filesEditFailureSchema: z.ZodLazy<z.ZodObject<{
             unchanged: "unchanged";
             "not-text": "not-text";
             conflict: "conflict";
+            "read-only": "read-only";
         }>;
         path: z.ZodLazy<z.ZodString>;
         message: z.ZodString;
@@ -95,6 +96,7 @@ export declare const editOutputSchema: z.ZodUnion<readonly [z.ZodLazy<z.ZodObjec
             unchanged: "unchanged";
             "not-text": "not-text";
             conflict: "conflict";
+            "read-only": "read-only";
         }>;
         path: z.ZodLazy<z.ZodString>;
         message: z.ZodString;
@@ -104,6 +106,8 @@ export declare const editOutputSchema: z.ZodUnion<readonly [z.ZodLazy<z.ZodObjec
 export type FilesPatch = (input: z.output<typeof patchInputSchema>, context: InvocationContext) => Promise<z.output<typeof patchOutputSchema>>;
 /** Captured host file authority; the host owns path confinement and atomic replacement. */
 export type FilesPort = Readonly<{
+    /** Host-selected mode gate, before an edit reads or computes a replacement. */
+    assertEditable?: (path: string) => void;
     /** Omitted when this Files host has no qualified native patch engine. */
     patch?: FilesPatch;
     /** Read a bounded text page. */

package/dist/files.js

@@ -97,6 +97,7 @@ export const filesEditFailureSchema = z.lazy(() => z.strictObject({
             "not-text",
             "unchanged",
             "conflict",
+            "read-only",
         ]),
         path: pathSchema,
         message: z.string(),
@@ -255,6 +256,7 @@ function generateDiffString(oldContent, newContent, context = 4) {
     return { diff: output.join("\n"), firstChangedLine };
 }
 async function applyEdit(port, input, context) {
+    port.assertEditable?.(input.path);
     const current = readOutputSchema.parse(await port.read({
         path: input.path,
         offset: 0,
@@ -321,9 +323,16 @@ export async function edit(port, input, context) {
     }
 }
 /** Cancellation does not finish until the Files owner has acknowledged cleanup. */
-function runFileOperation(invoke) {
+function runFileOperation(invoke, toolCallId) {
     return Effect.callback((resume, signal) => {
-        const pending = invoke({ executionId: nanoid(), deadlineAt: null, signal });
+        const context = {
+            executionId: toolCallId ?? nanoid(),
+            deadlineAt: null,
+            signal,
+        };
+        if (toolCallId !== undefined)
+            Object.assign(context, { toolCallId });
+        const pending = invoke(context);
         void pending.then((result) => {
             resume(Effect.succeed(result));
         }, (cause) => {
@@ -336,8 +345,8 @@ function runFileOperation(invoke) {
         return Effect.promise(() => pending.then(() => undefined, () => undefined));
     });
 }
-function runPatch(invoke, input) {
-    return runFileOperation((context) => invoke(input, context));
+function runPatch(invoke, input, toolCallId) {
+    return runFileOperation((context) => invoke(input, context), toolCallId);
 }
 /** Keep model parameters while omitting the decoder's schema-document marker. */
 function toolParameters(schema) {
@@ -369,7 +378,7 @@ function patchTool(invokePatch) {
                 message: cause instanceof Error ? cause.message : "Invalid patch input",
             }),
         }).pipe(Effect.map((value) => ({
-            execute: () => Stream.fromEffect(runPatch(invokePatch, value).pipe(Effect.map((result) => ({
+            execute: () => Stream.fromEffect(runPatch(invokePatch, value, call.id).pipe(Effect.map((result) => ({
                 type: "result",
                 result: {
                     content: [
@@ -378,7 +387,7 @@ function patchTool(invokePatch) {
                             text: JSON.stringify(result),
                         },
                     ],
-                    isError: result.status !== "completed",
+                    isError: "status" in result && result.status !== "completed",
                 },
             })))),
         }))),

package/dist/index.d.ts

@@ -15,6 +15,9 @@ export type ComputerConnectionOptions = Readonly<{
     name: string;
     /** Logical parent namespace; the Computer name is its final segment. */
     namespace?: readonly string[];
+    /** Ask a person before each advertised call on this connection. The host
+     * chooses this for interactive MCP; Agent connections keep their own policy. */
+    confirmCalls?: boolean;
     /** Files scoped by the host to this Computer, under its own authority id. */
     files?: FilesConnectionOptions;
     /**

package/dist/index.js

@@ -57,6 +57,7 @@ function projectComputer(input, advertisement) {
         operations[advertised.id] = Mycelium.operation({
             // Computer advertisements may execute arbitrary host actions.
             replay: "unsafe",
+            confirm: input.confirmCalls === true,
             description: advertised.description,
             input: operationSchema(advertised.parameters),
             output,

package/dist/mcp.d.ts

@@ -1,4 +1,3 @@
-import type { FetchLike } from "@modelcontextprotocol/client";
 import { type CapabilitySource } from "@fungi.computer/mycelium";
 /** One remote MCP server a host has admitted for an Agent. */
 export type McpServerConnection = Readonly<{
@@ -28,7 +27,7 @@ export type McpServersConnectionOptions = Readonly<{
     /** Receives each server dropped from an acquisition and why. */
     onUnavailable: (error: McpServerUnavailableError) => void;
     /** Host egress for every MCP request; the host chooses where requests may go. */
-    fetch: FetchLike;
+    fetch: (url: string | URL, init?: RequestInit) => Promise<Response>;
     /** Parent namespace for every server module; defaults to `["mcp"]`. */
     namespace?: readonly string[];
     /** Bound on connecting and listing one server; defaults to 10 seconds. */

package/docs/api/index.md

@@ -343,6 +343,7 @@ type ComputerConnectionOptions = Readonly<{
   id: string;
   name: string;
   namespace?: readonly string[];
+  confirmCalls?: boolean;
   files?: FilesConnectionOptions;
   role?: string;
   computer: KnapsackComputer;
@@ -411,7 +412,7 @@ type McpServersConnectionOptions = Readonly<{
   >;
   subscribe: (invalidate) => () => void;
   onUnavailable: (error) => void;
-  fetch: FetchLike;
+  fetch: (url, init?) => Promise<Response>;
   namespace?: readonly string[];
   connectTimeoutMillis?: number;
 }>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fungi.computer/knapsack",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "author": "Levi <levi@technomancy.dev>",
   "description": "Agent tool connections projected into Mycelium capability sources",
   "type": "module",
@@ -47,8 +47,8 @@
   "dependencies": {
     "@fungi.computer/cairn": "0.1.0",
     "@fungi.computer/forage": "0.2.0",
-    "@fungi.computer/mule": "0.1.0",
-    "@fungi.computer/mycelium": "0.2.0",
+    "@fungi.computer/mule": "0.2.0",
+    "@fungi.computer/mycelium": "0.2.2",
     "@fungi.computer/whistle": "0.1.0",
     "@modelcontextprotocol/client": "2.0.0",
     "diff": "8.0.4",