@fungi.computer/oyster 0.0.0-stage → 0.0.1

package/docs/api/apps.md

@@ -0,0 +1,1375 @@
+<!-- Generated by Botanical API docs (TypeDoc + typedoc-plugin-markdown). Do not edit. -->
+
+[**@fungi.computer/oyster**](README.md)
+
+---
+
+[@fungi.computer/oyster](modules.md) / apps
+
+# apps
+
+## Type Aliases
+
+### HostPrincipal
+
+```ts
+type HostPrincipal = Readonly<{
+  actor:
+    | HostActor
+    | Readonly<{
+        kind: "visitor";
+      }>;
+  role: "owner" | "member" | null;
+}>;
+```
+
+Attested by the host, never authenticated by decoding request JSON.
+
+---
+
+### GateRequest
+
+```ts
+type GateRequest = z.output<typeof gateRequestSchema>;
+```
+
+One decoded method, route, binding or catalog admission request.
+
+---
+
+### GateFacts
+
+```ts
+type GateFacts = Readonly<{
+  principal: HostPrincipal;
+  installation: Installation;
+  declaration: AppDeclaration;
+  declaredOperations: DeclaredOperations;
+  api: AppApi | null;
+  access: AppToolAccess | null;
+  pins?: Readonly<{
+    authorityVersion: number;
+    artifactDigest: string;
+  }>;
+}>;
+```
+
+Immutable values the host already read; resource/grantor freshness remains
+host-owned.
+
+---
+
+### InvocationGrants
+
+```ts
+type InvocationGrants = z.output<typeof invocationGrantsSchema>;
+```
+
+The explicit binding ceiling passed to an invocation frame.
+
+---
+
+### AppMethodDeclaration
+
+```ts
+type AppMethodDeclaration = AppApi["methods"][string];
+```
+
+A declared method from the canonical Puffball API grammar.
+
+---
+
+### GateDecision
+
+```ts
+type GateDecision =
+  | Readonly<{
+      kind: "admitted";
+      grants: InvocationGrants;
+      method?: AppMethodDeclaration;
+    }>
+  | z.output<typeof gateRefusalSchema>;
+```
+
+Either an admitted scoped ceiling or one closed refusal code.
+
+---
+
+### AppMethodMetadataDecision
+
+```ts
+type AppMethodMetadataDecision =
+  | Readonly<{
+      kind: "admitted";
+      method: AppMethodDeclaration;
+    }>
+  | z.output<typeof gateRefusalSchema>;
+```
+
+Permission metadata only: this is neither an invocation grant nor input
+admission.
+
+---
+
+### ResourceRef
+
+```ts
+type ResourceRef = Exclude<ApprovedGrant["resources"], "tenant-scope">[number];
+```
+
+Installation records and pure admission rules; tenant state and commits stay
+host-owned.
+
+---
+
+### ApprovedGrant
+
+```ts
+type ApprovedGrant = Readonly<z.output<typeof approvedGrantSchema>>;
+```
+
+Installation records and pure admission rules; tenant state and commits stay
+host-owned.
+
+---
+
+### GrantRequest
+
+```ts
+type GrantRequest = Extract<
+  InstallationCommand,
+  {
+    kind: "install";
+  }
+>["grants"];
+```
+
+Installation records and pure admission rules; tenant state and commits stay
+host-owned.
+
+---
+
+### Approval
+
+```ts
+type Approval = NonNullable<Installation["approval"]>;
+```
+
+Installation records and pure admission rules; tenant state and commits stay
+host-owned.
+
+---
+
+### DeclaredOperations
+
+```ts
+type DeclaredOperations = Readonly<z.output<typeof declaredOperationsSchema>>;
+```
+
+Installation records and pure admission rules; tenant state and commits stay
+host-owned.
+
+---
+
+### CapabilityOperationDescriptor
+
+```ts
+type CapabilityOperationDescriptor = Pick<
+  CapabilityDescriptor,
+  "id" | "methods"
+> &
+  Readonly<{
+    permission: ApprovedGrant["capability"];
+  }>;
+```
+
+Use the existing adapter's permission and methods; hosts author no operation
+lists.
+
+---
+
+### Installation
+
+```ts
+type Installation = Readonly<z.output<typeof installationSchema>>;
+```
+
+Installation records and pure admission rules; tenant state and commits stay
+host-owned.
+
+---
+
+### InstallationCommand
+
+```ts
+type InstallationCommand = z.output<typeof installationCommandSchema>;
+```
+
+Installation records and pure admission rules; tenant state and commits stay
+host-owned.
+
+---
+
+### InstallationContext
+
+```ts
+type InstallationContext = Readonly<{
+  by: HostActor;
+  role: "owner" | "member" | null;
+  expectedVersion: number | null;
+  declaration: AppDeclaration;
+  declaredOperations: DeclaredOperations;
+  now: number;
+  identity: Pick<Installation, "installationId" | "instanceId">;
+  anonymousConsent?: Readonly<{
+    memberId: string;
+  }>;
+}>;
+```
+
+Values captured by the host; identities and time are never generated by the
+reducer.
+
+---
+
+### InstallationRefusal
+
+```ts
+type InstallationRefusal = z.output<typeof installationRefusalSchema>;
+```
+
+Installation records and pure admission rules; tenant state and commits stay
+host-owned.
+
+---
+
+### InstallationUpdate
+
+```ts
+type InstallationUpdate = Readonly<{
+  next: Installation;
+  authorityChanged: boolean;
+}>;
+```
+
+Installation records and pure admission rules; tenant state and commits stay
+host-owned.
+
+---
+
+### InstallationReader
+
+```ts
+type InstallationReader = Readonly<{
+  list: Promise<readonly Readonly<{
+     installationId: string;
+     instanceId: InstanceId | null;
+     appId: AppId;
+     release: {
+        releaseId: Schema.refine<ReleaseId, Schema.String>;
+        appId: Schema.refine<AppId, Schema.String>;
+        artifact: Schema.Struct<{
+           artifactRef: Schema.refine<ArtifactRef, Schema.String>;
+           artifactDigest: Schema.refine<Sha256Digest, Schema.String>;
+           provenance: Schema.Struct<{
+              sourceRevision: ...;
+              sourceTreeDigest: ...;
+              buildRecipeDigest: ...;
+           }>;
+        }>;
+     };
+     releasePin: "pinned" | "floating";
+     authorityVersion: number;
+     status: "enabled" | "disabled" | "deleted";
+     visibility: "private" | "public";
+     declaredOperationsDigest: Sha256Digest;
+     approvedGrants: readonly Readonly<{
+        capability:   | "agent.list"
+           | "agent.manage"
+           | "agent.rename"
+           | "agent.toolPolicy"
+           | "agent.read"
+           | "agent.send"
+           | "computer.list"
+           | "computer.readFile"
+           | "computer.writeFile"
+           | "computer.execute"
+           | "llm.generation"
+           | "media.generation"
+           | "games:servers"
+           | "git.repository"
+           | "apps.open"
+           | "apps.call"
+           | "app.storage"
+           | "app.events.emit"
+           | "team.workbenchHost"
+           | "marketplace.browse"
+           | "marketplace.purchase"
+           | "workflow.run"
+           | "workflow.publish"
+           | "workflow.arm"
+           | "world"
+           | "channels.read"
+           | "channels.personal.manage";
+        capabilityApproved: true;
+        operations: readonly string[];
+        resources: "tenant-scope" | readonly ...[];
+     }>[];
+     approval:   | Readonly<{
+        by:   | {
+           kind: ...;
+           memberId: ...;
+         }
+           | {
+           kind: ...;
+           agentId: ...;
+         }
+           | {
+           kind: ...;
+           keyId: ...;
+         };
+        at: number;
+        authorityVersion: number;
+      }>
+        | null;
+     approvedAnonymousMethods: readonly Readonly<{
+        name: string;
+        digest: Sha256Digest;
+     }>[];
+     anonymousApproval:   | Readonly<{
+        by:   | {
+           kind: ...;
+           memberId: ...;
+         }
+           | {
+           kind: ...;
+           agentId: ...;
+         }
+           | {
+           kind: ...;
+           keyId: ...;
+         };
+        at: number;
+        authorityVersion: number;
+      }>
+        | null;
+  }>[]>;
+  get: Promise<
+     | Readonly<{
+     installationId: string;
+     instanceId: InstanceId | null;
+     appId: AppId;
+     release: {
+        releaseId: Schema.refine<ReleaseId, Schema.String>;
+        appId: Schema.refine<AppId, Schema.String>;
+        artifact: Schema.Struct<{
+           artifactRef: Schema.refine<ArtifactRef, Schema.String>;
+           artifactDigest: Schema.refine<Sha256Digest, Schema.String>;
+           provenance: Schema.Struct<{
+              sourceRevision: ...;
+              sourceTreeDigest: ...;
+              buildRecipeDigest: ...;
+           }>;
+        }>;
+     };
+     releasePin: "pinned" | "floating";
+     authorityVersion: number;
+     status: "enabled" | "disabled" | "deleted";
+     visibility: "private" | "public";
+     declaredOperationsDigest: Sha256Digest;
+     approvedGrants: readonly Readonly<{
+        capability:   | "agent.list"
+           | "agent.manage"
+           | "agent.rename"
+           | "agent.toolPolicy"
+           | "agent.read"
+           | "agent.send"
+           | "computer.list"
+           | "computer.readFile"
+           | "computer.writeFile"
+           | "computer.execute"
+           | "llm.generation"
+           | "media.generation"
+           | "games:servers"
+           | "git.repository"
+           | "apps.open"
+           | "apps.call"
+           | "app.storage"
+           | "app.events.emit"
+           | "team.workbenchHost"
+           | "marketplace.browse"
+           | "marketplace.purchase"
+           | "workflow.run"
+           | "workflow.publish"
+           | "workflow.arm"
+           | "world"
+           | "channels.read"
+           | "channels.personal.manage";
+        capabilityApproved: true;
+        operations: readonly string[];
+        resources: "tenant-scope" | readonly ...[];
+     }>[];
+     approval:   | Readonly<{
+        by:   | {
+           kind: ...;
+           memberId: ...;
+         }
+           | {
+           kind: ...;
+           agentId: ...;
+         }
+           | {
+           kind: ...;
+           keyId: ...;
+         };
+        at: number;
+        authorityVersion: number;
+      }>
+        | null;
+     approvedAnonymousMethods: readonly Readonly<{
+        name: string;
+        digest: Sha256Digest;
+     }>[];
+     anonymousApproval:   | Readonly<{
+        by:   | {
+           kind: ...;
+           memberId: ...;
+         }
+           | {
+           kind: ...;
+           agentId: ...;
+         }
+           | {
+           kind: ...;
+           keyId: ...;
+         };
+        at: number;
+        authorityVersion: number;
+      }>
+        | null;
+   }>
+    | null>;
+}>;
+```
+
+Read port for one host tenant; commits, receipts and revocation stay with that
+host.
+
+---
+
+### AppToolPolicy
+
+```ts
+type AppToolPolicy = typeof appToolPolicySchema.Type;
+```
+
+The authenticated attaching member is recorded when this policy is approved.
+
+---
+
+### AppToolAccess
+
+```ts
+type AppToolAccess = typeof appToolAccessSchema.Type;
+```
+
+One installation binding constrained by an authenticated tool-policy approval.
+
+---
+
+### AppToolEntry
+
+```ts
+type AppToolEntry = Readonly<{
+  installation: Installation;
+  declaration: AppDeclaration;
+  declaredOperations: DeclaredOperations;
+  api: AppApi | null;
+  access: AppToolAccess | null;
+}>;
+```
+
+Pre-read entries: the catalog never resolves installations or calls back into a
+host.
+
+## Variables
+
+### gateRequestSchema
+
+```ts
+const gateRequestSchema: ZodDiscriminatedUnion<
+  [
+    ZodObject<
+      {
+        kind: ZodLiteral<"method">;
+        name: ZodString;
+        input: ZodUnknown;
+        via: ZodEnum<{
+          ui: "ui";
+          agent: "agent";
+          mcp: "mcp";
+          workflow: "workflow";
+        }>;
+      },
+      $strict
+    >,
+    ZodObject<
+      {
+        kind: ZodLiteral<"capability-route">;
+        capability: ZodPipe<
+          ZodUnknown,
+          ZodTransform<
+            | "agent.list"
+            | "agent.manage"
+            | "agent.rename"
+            | "agent.toolPolicy"
+            | "agent.read"
+            | "agent.send"
+            | "computer.list"
+            | "computer.readFile"
+            | "computer.writeFile"
+            | "computer.execute"
+            | "llm.generation"
+            | "media.generation"
+            | "games:servers"
+            | "git.repository"
+            | "apps.open"
+            | "apps.call"
+            | "app.storage"
+            | "app.events.emit"
+            | "team.workbenchHost"
+            | "marketplace.browse"
+            | "marketplace.purchase"
+            | "workflow.run"
+            | "workflow.publish"
+            | "workflow.arm"
+            | "world"
+            | "channels.read"
+            | "channels.personal.manage",
+            unknown
+          >
+        >;
+        operation: ZodString;
+      },
+      $strict
+    >,
+    ZodObject<
+      {
+        kind: ZodLiteral<"binding">;
+        binding: ZodPipe<
+          ZodUnknown,
+          ZodTransform<
+            | "BACKGROUND"
+            | "GIT"
+            | "EVENTS"
+            | "APPS"
+            | "WORKFLOWS"
+            | "APP_STORAGE"
+            | "MEDIA"
+            | "COMPUTER"
+            | "INBOX"
+            | "AGENTS",
+            unknown
+          >
+        >;
+        operation: ZodString;
+      },
+      $strict
+    >,
+    ZodObject<
+      {
+        kind: ZodLiteral<"list-tools">;
+      },
+      $strict
+    >,
+    ZodObject<
+      {
+        kind: ZodLiteral<"backend">;
+      },
+      $strict
+    >,
+  ],
+  "kind"
+>;
+```
+
+Requests select existing SDK methods, opaque backend calls and derived operation
+identities.
+
+---
+
+### invocationGrantsSchema
+
+```ts
+const invocationGrantsSchema: ZodReadonly<
+  ZodArray<
+    ZodObject<
+      {
+        binding: ZodPipe<
+          ZodUnknown,
+          ZodTransform<
+            | "BACKGROUND"
+            | "GIT"
+            | "EVENTS"
+            | "APPS"
+            | "WORKFLOWS"
+            | "APP_STORAGE"
+            | "MEDIA"
+            | "COMPUTER"
+            | "INBOX"
+            | "AGENTS",
+            unknown
+          >
+        >;
+        operations: ZodReadonly<ZodArray<ZodString>>;
+      },
+      $strict
+    >
+  >
+>;
+```
+
+Binding grants have the exact S2 InvocationFacts shape and its maintained
+registry grammar.
+
+---
+
+### gateRefusalSchema
+
+```ts
+const gateRefusalSchema: ZodObject<
+  {
+    kind: ZodLiteral<"refused">;
+    code: ZodEnum<{
+      unavailable: "unavailable";
+      stale_authority: "stale_authority";
+      not_declared: "not_declared";
+      not_approved: "not_approved";
+      level_too_low: "level_too_low";
+      approval_required: "approval_required";
+      requires_not_granted: "requires_not_granted";
+      invalid_input: "invalid_input";
+      visitor_read_only: "visitor_read_only";
+    }>;
+  },
+  $strict
+>;
+```
+
+Ordered, closed refusal vocabulary; external methods always require approval.
+
+---
+
+### installationIdSchema
+
+```ts
+const installationIdSchema: ZodString;
+```
+
+Installation names cannot contain the tenant separator.
+
+---
+
+### approvedGrantSchema
+
+```ts
+const approvedGrantSchema: ZodReadonly<
+  ZodObject<
+    {
+      capability: ZodPipe<
+        ZodUnknown,
+        ZodTransform<
+          | "agent.list"
+          | "agent.manage"
+          | "agent.rename"
+          | "agent.toolPolicy"
+          | "agent.read"
+          | "agent.send"
+          | "computer.list"
+          | "computer.readFile"
+          | "computer.writeFile"
+          | "computer.execute"
+          | "llm.generation"
+          | "media.generation"
+          | "games:servers"
+          | "git.repository"
+          | "apps.open"
+          | "apps.call"
+          | "app.storage"
+          | "app.events.emit"
+          | "team.workbenchHost"
+          | "marketplace.browse"
+          | "marketplace.purchase"
+          | "workflow.run"
+          | "workflow.publish"
+          | "workflow.arm"
+          | "world"
+          | "channels.read"
+          | "channels.personal.manage",
+          unknown
+        >
+      >;
+      capabilityApproved: ZodLiteral<true>;
+      operations: ZodReadonly<ZodArray<ZodString>>;
+      resources: ZodUnion<
+        readonly [
+          ZodLiteral<"tenant-scope">,
+          ZodReadonly<
+            ZodArray<
+              ZodReadonly<
+                ZodObject<
+                  {
+                    kind: ZodString;
+                    id: ZodString;
+                  },
+                  $strict
+                >
+              >
+            >
+          >,
+        ]
+      >;
+    },
+    $strict
+  >
+>;
+```
+
+Consent approves capabilities, with explicit operation and resource ceilings. A
+Release adding a method that requires an already-approved capability needs no
+new consent; a new capability does. Release selection intersects stored
+operations instead of adding approvals. Each Worker call is still restricted to
+that method's declared requires, never the App's complete capability set. Only
+an approved install or set-grants command mints capabilityApproved. Empty
+operation rows retain that consent; removing the capability revokes it.
+route:app.methods rows record approval detail, not a method allowlist: narrowing
+them in set-grants does not restrict methods using an approved capability. Exact
+operation rows are enforced for capability routes and backend bindings.
+
+---
+
+### declaredOperationsSchema
+
+```ts
+const declaredOperationsSchema: ZodObject<
+  {
+    artifactDigest: ZodPipe<ZodUnknown, ZodTransform<Sha256Digest, unknown>>;
+    digest: ZodPipe<ZodUnknown, ZodTransform<Sha256Digest, unknown>>;
+    anonymousMethods: ZodReadonly<
+      ZodArray<
+        ZodReadonly<
+          ZodObject<
+            {
+              name: ZodPipe<ZodUnknown, ZodTransform<string, unknown>>;
+              digest: ZodPipe<ZodUnknown, ZodTransform<Sha256Digest, unknown>>;
+            },
+            $strict
+          >
+        >
+      >
+    >;
+    capabilities: ZodReadonly<
+      ZodArray<
+        ZodReadonly<
+          ZodObject<
+            {
+              capability: ZodPipe<
+                ZodUnknown,
+                ZodTransform<
+                  | "agent.list"
+                  | "agent.manage"
+                  | "agent.rename"
+                  | "agent.toolPolicy"
+                  | "agent.read"
+                  | "agent.send"
+                  | "computer.list"
+                  | "computer.readFile"
+                  | "computer.writeFile"
+                  | "computer.execute"
+                  | "llm.generation"
+                  | "media.generation"
+                  | "games:servers"
+                  | "git.repository"
+                  | "apps.open"
+                  | "apps.call"
+                  | "app.storage"
+                  | "app.events.emit"
+                  | "team.workbenchHost"
+                  | "marketplace.browse"
+                  | "marketplace.purchase"
+                  | "workflow.run"
+                  | "workflow.publish"
+                  | "workflow.arm"
+                  | "world"
+                  | "channels.read"
+                  | "channels.personal.manage",
+                  unknown
+                >
+              >;
+              operations: ZodReadonly<ZodArray<ZodString>>;
+            },
+            $strict
+          >
+        >
+      >
+    >;
+  },
+  $strict
+>;
+```
+
+Immutable operation facts derived from descriptor methods and the binding
+registry.
+
+---
+
+### installationSchema
+
+```ts
+const installationSchema: ZodObject<{
+  installationId: ZodString;
+  instanceId: ZodNullable<ZodPipe<ZodUnknown, ZodTransform<InstanceId, unknown>>>;
+  appId: ZodPipe<ZodUnknown, ZodTransform<AppId, unknown>>;
+  release: ZodPipe<ZodUnknown, ZodTransform<{
+     releaseId: ReleaseId;
+     appId: AppId;
+     artifact: {
+        artifactRef: ArtifactRef;
+        artifactDigest: Sha256Digest;
+        provenance: {
+           sourceRevision: SourceRevision;
+           sourceTreeDigest: Sha256Digest;
+           buildRecipeDigest: Sha256Digest;
+        };
+     };
+  }, unknown>>;
+  releasePin: ZodEnum<{
+     pinned: "pinned";
+     floating: "floating";
+  }>;
+  authorityVersion: ZodNumber;
+  status: ZodEnum<{
+     enabled: "enabled";
+     disabled: "disabled";
+     deleted: "deleted";
+  }>;
+  visibility: ZodEnum<{
+     private: "private";
+     public: "public";
+  }>;
+  declaredOperationsDigest: ZodPipe<ZodUnknown, ZodTransform<Sha256Digest, unknown>>;
+  approvedGrants: ZodReadonly<ZodArray<ZodReadonly<ZodObject<{
+     capability: ZodPipe<ZodUnknown, ZodTransform<
+        | "agent.list"
+        | "agent.manage"
+        | "agent.rename"
+        | "agent.toolPolicy"
+        | "agent.read"
+        | "agent.send"
+        | "computer.list"
+        | "computer.readFile"
+        | "computer.writeFile"
+        | "computer.execute"
+        | "llm.generation"
+        | "media.generation"
+        | "games:servers"
+        | "git.repository"
+        | "apps.open"
+        | "apps.call"
+        | "app.storage"
+        | "app.events.emit"
+        | "team.workbenchHost"
+        | "marketplace.browse"
+        | "marketplace.purchase"
+        | "workflow.run"
+        | "workflow.publish"
+        | "workflow.arm"
+        | "world"
+        | "channels.read"
+       | "channels.personal.manage", unknown>>;
+     capabilityApproved: ZodLiteral<true>;
+     operations: ZodReadonly<ZodArray<ZodString>>;
+     resources: ZodUnion<readonly [ZodLiteral<"tenant-scope">, ZodReadonly<ZodArray<...>>]>;
+  }, $strict>>>>;
+  approval: ZodNullable<ZodReadonly<ZodObject<{
+     by: ZodMiniDiscriminatedUnion<[ZodMiniObject<{
+        kind: ZodMiniLiteral<...>;
+        memberId: ZodMiniString<...>;
+      }, $strip>, ZodMiniObject<{
+        kind: ZodMiniLiteral<...>;
+        agentId: ZodMiniString<...>;
+      }, $strip>, ZodMiniObject<{
+        kind: ZodMiniLiteral<...>;
+        keyId: ZodMiniString<...>;
+     }, $strip>], "kind">;
+     at: ZodNumber;
+     authorityVersion: ZodNumber;
+  }, $strict>>>;
+  approvedAnonymousMethods: ZodReadonly<ZodArray<ZodReadonly<ZodObject<{
+     name: ZodPipe<ZodUnknown, ZodTransform<string, unknown>>;
+     digest: ZodPipe<ZodUnknown, ZodTransform<Sha256Digest, unknown>>;
+  }, $strict>>>>;
+  anonymousApproval: ZodNullable<ZodReadonly<ZodObject<{
+     by: ZodMiniDiscriminatedUnion<[ZodMiniObject<{
+        kind: ZodMiniLiteral<...>;
+        memberId: ZodMiniString<...>;
+      }, $strip>, ZodMiniObject<{
+        kind: ZodMiniLiteral<...>;
+        agentId: ZodMiniString<...>;
+      }, $strip>, ZodMiniObject<{
+        kind: ZodMiniLiteral<...>;
+        keyId: ZodMiniString<...>;
+     }, $strip>], "kind">;
+     at: ZodNumber;
+     authorityVersion: ZodNumber;
+  }, $strict>>>;
+}, $strict>;
+```
+
+Resolved immutable Release plus host-owned installation and approval state.
+
+---
+
+### installationCommandSchema
+
+```ts
+const installationCommandSchema: ZodDiscriminatedUnion<[ZodObject<{
+  release: ZodPipe<ZodUnknown, ZodTransform<{
+     releaseId: ReleaseId;
+     appId: AppId;
+     artifact: {
+        artifactRef: ArtifactRef;
+        artifactDigest: Sha256Digest;
+        provenance: {
+           sourceRevision: SourceRevision;
+           sourceTreeDigest: Sha256Digest;
+           buildRecipeDigest: Sha256Digest;
+        };
+     };
+  }, unknown>>;
+  releasePin: ZodEnum<{
+     pinned: "pinned";
+     floating: "floating";
+  }>;
+  kind: ZodLiteral<"install">;
+  grants: ZodUnion<readonly [ZodLiteral<"none">, ZodLiteral<"declared">, ZodReadonly<ZodArray<ZodReadonly<ZodObject<{
+     capability: ...;
+     operations: ...;
+     resources: ...;
+  }, $strict>>>>]>;
+}, $strict>, ZodObject<{
+  release: ZodPipe<ZodUnknown, ZodTransform<{
+     releaseId: ReleaseId;
+     appId: AppId;
+     artifact: {
+        artifactRef: ArtifactRef;
+        artifactDigest: Sha256Digest;
+        provenance: {
+           sourceRevision: SourceRevision;
+           sourceTreeDigest: Sha256Digest;
+           buildRecipeDigest: Sha256Digest;
+        };
+     };
+  }, unknown>>;
+  releasePin: ZodEnum<{
+     pinned: "pinned";
+     floating: "floating";
+  }>;
+  kind: ZodLiteral<"select-release">;
+}, $strict>, ZodObject<{
+  kind: ZodLiteral<"set-status">;
+  status: ZodEnum<{
+     enabled: "enabled";
+     disabled: "disabled";
+     deleted: "deleted";
+  }>;
+}, $strict>], "kind">;
+```
+
+Host commands; floating targets have already been resolved to immutable
+Releases.
+
+---
+
+### installationRefusalSchema
+
+```ts
+const installationRefusalSchema: ZodObject<
+  {
+    kind: ZodLiteral<"refused">;
+    code: ZodEnum<{
+      unavailable: "unavailable";
+      stale_authority: "stale_authority";
+      not_declared: "not_declared";
+      release_app_mismatch: "release_app_mismatch";
+      not_owner: "not_owner";
+      invalid_command: "invalid_command";
+    }>;
+  },
+  $strict
+>;
+```
+
+Closed refusals: failed commands produce no installation update.
+
+---
+
+### appToolPolicySchema
+
+```ts
+const appToolPolicySchema: Struct<{
+  level: Literals<readonly ["read", "write"]>;
+  revision: NonEmptyString;
+  grantedBy: NonEmptyString;
+}>;
+```
+
+One App-tool access level, with its own freshness pin. An Agent's comes from the
+owner's stored direct approval; a key's is computed fresh from its own Ear Tag
+grants (`keyAppAccess`), never stored as this shape -- only read through it, for
+one call or one installation at a time.
+
+## Functions
+
+### grantsFor()
+
+```ts
+function grantsFor(
+  installation,
+  declaration,
+  snapshot,
+  capability,
+): Readonly<
+  Readonly<{
+    capability:
+      | "agent.list"
+      | "agent.manage"
+      | "agent.rename"
+      | "agent.toolPolicy"
+      | "agent.read"
+      | "agent.send"
+      | "computer.list"
+      | "computer.readFile"
+      | "computer.writeFile"
+      | "computer.execute"
+      | "llm.generation"
+      | "media.generation"
+      | "games:servers"
+      | "git.repository"
+      | "apps.open"
+      | "apps.call"
+      | "app.storage"
+      | "app.events.emit"
+      | "team.workbenchHost"
+      | "marketplace.browse"
+      | "marketplace.purchase"
+      | "workflow.run"
+      | "workflow.publish"
+      | "workflow.arm"
+      | "world"
+      | "channels.read"
+      | "channels.personal.manage";
+    capabilityApproved: true;
+    operations: readonly string[];
+    resources:
+      | "tenant-scope"
+      | readonly Readonly<{
+          kind: string;
+          id: string;
+        }>[];
+  }>
+> | null;
+```
+
+Intersect stored approvals with the current verified Release without widening
+resource selectors.
+
+#### Parameters
+
+| Parameter      | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
+| -------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| `installation` | [`Installation`](#installation)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
+| `declaration`  | `AppDeclaration`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
+| `snapshot`     | [`DeclaredOperations`](#declaredoperations)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
+| `capability`   | \| `"agent.list"` \| `"agent.manage"` \| `"agent.rename"` \| `"agent.toolPolicy"` \| `"agent.read"` \| `"agent.send"` \| `"computer.list"` \| `"computer.readFile"` \| `"computer.writeFile"` \| `"computer.execute"` \| `"llm.generation"` \| `"media.generation"` \| `"games:servers"` \| `"git.repository"` \| `"apps.open"` \| `"apps.call"` \| `"app.storage"` \| `"app.events.emit"` \| `"team.workbenchHost"` \| `"marketplace.browse"` \| `"marketplace.purchase"` \| `"workflow.run"` \| `"workflow.publish"` \| `"workflow.arm"` \| `"world"` \| `"channels.read"` \| `"channels.personal.manage"` |
+
+#### Returns
+
+\| `Readonly`\<`Readonly`\<\{ `capability`: \| `"agent.list"` \|
+`"agent.manage"` \| `"agent.rename"` \| `"agent.toolPolicy"` \| `"agent.read"`
+\| `"agent.send"` \| `"computer.list"` \| `"computer.readFile"` \|
+`"computer.writeFile"` \| `"computer.execute"` \| `"llm.generation"` \|
+`"media.generation"` \| `"games:servers"` \| `"git.repository"` \| `"apps.open"`
+\| `"apps.call"` \| `"app.storage"` \| `"app.events.emit"` \|
+`"team.workbenchHost"` \| `"marketplace.browse"` \| `"marketplace.purchase"` \|
+`"workflow.run"` \| `"workflow.publish"` \| `"workflow.arm"` \| `"world"` \|
+`"channels.read"` \| `"channels.personal.manage"`; `capabilityApproved`: `true`;
+`operations`: readonly `string`[]; `resources`: \| `"tenant-scope"` \| readonly
+`Readonly`\<\{ `kind`: `string`; `id`: `string`; \}\>[]; \}\>\> \| `null`
+
+---
+
+### approvedBindingGrants()
+
+```ts
+function approvedBindingGrants(installation, declaration): readonly object[];
+```
+
+Approved binding operations from an already verified declaration. Hosts still
+pin the selection/version/artifact and compare running frame grants as a subset.
+
+#### Parameters
+
+| Parameter      | Type                            |
+| -------------- | ------------------------------- |
+| `installation` | [`Installation`](#installation) |
+| `declaration`  | `AppDeclaration`                |
+
+#### Returns
+
+readonly `object`[]
+
+---
+
+### scopedBindings()
+
+```ts
+function scopedBindings(captured, method?, ceiling?): readonly object[];
+```
+
+Narrow captured binding operations to the method's verified requirements and
+effect. The captured set is the ceiling; this never adds an operation or
+resource authority.
+
+#### Parameters
+
+| Parameter  | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | Default value |
+| ---------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------- |
+| `captured` | readonly `object`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       | `undefined`   |
+| `method?`  | `Readonly`\<\{ `description`: `string`; `input`: `object`; `output`: `object`; `effect`: `"read"` \| `"write"` \| `"external"`; `requires`: readonly ( \| `"agent.list"` \| `"agent.manage"` \| `"agent.rename"` \| `"agent.toolPolicy"` \| `"agent.read"` \| `"agent.send"` \| `"computer.list"` \| `"computer.readFile"` \| `"computer.writeFile"` \| `"computer.execute"` \| `"llm.generation"` \| `"media.generation"` \| `"games:servers"` \| `"git.repository"` \| `"apps.open"` \| `"apps.call"` \| `"app.storage"` \| `"app.events.emit"` \| `"team.workbenchHost"` \| `"marketplace.browse"` \| `"marketplace.purchase"` \| `"workflow.run"` \| `"workflow.publish"` \| `"workflow.arm"` \| `"world"` \| `"channels.read"` \| `"channels.personal.manage"`)[]; `pending?`: `true`; `hidden?`: `true`; `anonymous?`: `true`; \}\> | `undefined`   |
+| `ceiling?` | `"read"` \| `"write"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `"write"`     |
+
+#### Returns
+
+readonly `object`[]
+
+---
+
+### appInvocationCeiling()
+
+```ts
+function appInvocationCeiling(facts): "read" | "write";
+```
+
+Principal ceiling for invocation and metadata capture. Captures must pass this
+to scopedBindings; its default write ceiling does not encode caller access.
+
+#### Parameters
+
+| Parameter | Type                                                             |
+| --------- | ---------------------------------------------------------------- |
+| `facts`   | `Pick`\<[`GateFacts`](#gatefacts), `"principal"` \| `"access"`\> |
+
+#### Returns
+
+`"read"` \| `"write"`
+
+---
+
+### admitMethodMetadata()
+
+```ts
+function admitMethodMetadata(facts, name): AppMethodMetadataDecision;
+```
+
+Check a verified method's Release, principal, effect and real capability
+consent. Captures have no mapped runtime input yet. This result cannot authorize
+execution: dispatch must still use admits, including its ordinary input
+validation. Input schemas are not compiled here; execution may still refuse
+invalid_input. Project captured bindings with appInvocationCeiling(facts).
+
+#### Parameters
+
+| Parameter | Type                      |
+| --------- | ------------------------- |
+| `facts`   | [`GateFacts`](#gatefacts) |
+| `name`    | `string`                  |
+
+#### Returns
+
+[`AppMethodMetadataDecision`](#appmethodmetadatadecision)
+
+---
+
+### admits()
+
+```ts
+function admits(facts, rawRequest): GateDecision;
+```
+
+Ordered admission only. Host freshness/resource admission and effect execution
+stay outside this pure gate.
+
+#### Parameters
+
+| Parameter    | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
+| ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| `facts`      | [`GateFacts`](#gatefacts)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
+| `rawRequest` | \| \{ `kind`: `"method"`; `name`: `string`; `input`: `unknown`; `via`: `"ui"` \| `"agent"` \| `"mcp"` \| `"workflow"`; \} \| \{ `kind`: `"capability-route"`; `capability`: \| `"agent.list"` \| `"agent.manage"` \| `"agent.rename"` \| `"agent.toolPolicy"` \| `"agent.read"` \| `"agent.send"` \| `"computer.list"` \| `"computer.readFile"` \| `"computer.writeFile"` \| `"computer.execute"` \| `"llm.generation"` \| `"media.generation"` \| `"games:servers"` \| `"git.repository"` \| `"apps.open"` \| `"apps.call"` \| `"app.storage"` \| `"app.events.emit"` \| `"team.workbenchHost"` \| `"marketplace.browse"` \| `"marketplace.purchase"` \| `"workflow.run"` \| `"workflow.publish"` \| `"workflow.arm"` \| `"world"` \| `"channels.read"` \| `"channels.personal.manage"`; `operation`: `string`; \} \| \{ `kind`: `"binding"`; `binding`: \| `"BACKGROUND"` \| `"GIT"` \| `"EVENTS"` \| `"APPS"` \| `"WORKFLOWS"` \| `"APP_STORAGE"` \| `"MEDIA"` \| `"COMPUTER"` \| `"INBOX"` \| `"AGENTS"`; `operation`: `string`; \} \| \{ `kind`: `"list-tools"`; \} \| \{ `kind`: `"backend"`; \} |
+
+#### Returns
+
+[`GateDecision`](#gatedecision)
+
+---
+
+### applyInstallationCommand()
+
+```ts
+function applyInstallationCommand(
+  current,
+  rawCommand,
+  context,
+): Result<
+  Readonly<{
+    next: Installation;
+    authorityChanged: boolean;
+  }>,
+  {
+    kind: "refused";
+    code:
+      | "unavailable"
+      | "stale_authority"
+      | "not_declared"
+      | "release_app_mismatch"
+      | "not_owner"
+      | "invalid_command";
+  }
+>;
+```
+
+Pure transition; hosts retain transactions, receipts, epochs and delivery.
+
+#### Parameters
+
+| Parameter    | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
+| ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `current`    | \| `Readonly`\<\{ `installationId`: `string`; `instanceId`: [`InstanceId`](index.md#instanceid) \| `null`; `appId`: `AppId`; `release`: \{ `releaseId`: `ReleaseId`; `appId`: `AppId`; `artifact`: \{ `artifactRef`: `ArtifactRef`; `artifactDigest`: `Sha256Digest`; `provenance`: \{ `sourceRevision`: `SourceRevision`; `sourceTreeDigest`: `Sha256Digest`; `buildRecipeDigest`: `Sha256Digest`; \}; \}; \}; `releasePin`: `"pinned"` \| `"floating"`; `authorityVersion`: `number`; `status`: `"enabled"` \| `"disabled"` \| `"deleted"`; `visibility`: `"private"` \| `"public"`; `declaredOperationsDigest`: `Sha256Digest`; `approvedGrants`: readonly `Readonly`\<\{ `capability`: \| `"agent.list"` \| `"agent.manage"` \| `"agent.rename"` \| `"agent.toolPolicy"` \| `"agent.read"` \| `"agent.send"` \| `"computer.list"` \| `"computer.readFile"` \| `"computer.writeFile"` \| `"computer.execute"` \| `"llm.generation"` \| `"media.generation"` \| `"games:servers"` \| `"git.repository"` \| `"apps.open"` \| `"apps.call"` \| `"app.storage"` \| `"app.events.emit"` \| `"team.workbenchHost"` \| `"marketplace.browse"` \| `"marketplace.purchase"` \| `"workflow.run"` \| `"workflow.publish"` \| `"workflow.arm"` \| `"world"` \| `"channels.read"` \| `"channels.personal.manage"`; `capabilityApproved`: `true`; `operations`: readonly `string`[]; `resources`: \| `"tenant-scope"` \| readonly `Readonly`\<\{ `kind`: `string`; `id`: `string`; \}\>[]; \}\>[]; `approval`: \| `Readonly`\<\{ `by`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `at`: `number`; `authorityVersion`: `number`; \}\> \| `null`; `approvedAnonymousMethods`: readonly `Readonly`\<\{ `name`: `string`; `digest`: `Sha256Digest`; \}\>[]; `anonymousApproval`: \| `Readonly`\<\{ `by`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `at`: `number`; `authorityVersion`: `number`; \}\> \| `null`; \}\> \| `null`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
+| `rawCommand` | \| \{ `release`: \{ `releaseId`: `ReleaseId`; `appId`: `AppId`; `artifact`: \{ `artifactRef`: `ArtifactRef`; `artifactDigest`: `Sha256Digest`; `provenance`: \{ `sourceRevision`: `SourceRevision`; `sourceTreeDigest`: `Sha256Digest`; `buildRecipeDigest`: `Sha256Digest`; \}; \}; \}; `releasePin`: `"pinned"` \| `"floating"`; `kind`: `"install"`; `grants`: \| `"none"` \| `"declared"` \| readonly `Readonly`\<\{ `capability`: \| `"agent.list"` \| `"agent.manage"` \| `"agent.rename"` \| `"agent.toolPolicy"` \| `"agent.read"` \| `"agent.send"` \| `"computer.list"` \| `"computer.readFile"` \| `"computer.writeFile"` \| `"computer.execute"` \| `"llm.generation"` \| `"media.generation"` \| `"games:servers"` \| `"git.repository"` \| `"apps.open"` \| `"apps.call"` \| `"app.storage"` \| `"app.events.emit"` \| `"team.workbenchHost"` \| `"marketplace.browse"` \| `"marketplace.purchase"` \| `"workflow.run"` \| `"workflow.publish"` \| `"workflow.arm"` \| `"world"` \| `"channels.read"` \| `"channels.personal.manage"`; `operations`: readonly `string`[]; `resources`: \| `"tenant-scope"` \| readonly `Readonly`\<\{ `kind`: `string`; `id`: `string`; \}\>[]; \}\>[]; \} \| \{ `release`: \{ `releaseId`: `ReleaseId`; `appId`: `AppId`; `artifact`: \{ `artifactRef`: `ArtifactRef`; `artifactDigest`: `Sha256Digest`; `provenance`: \{ `sourceRevision`: `SourceRevision`; `sourceTreeDigest`: `Sha256Digest`; `buildRecipeDigest`: `Sha256Digest`; \}; \}; \}; `releasePin`: `"pinned"` \| `"floating"`; `kind`: `"select-release"`; \} \| \{ `kind`: `"set-status"`; `status`: `"enabled"` \| `"disabled"` \| `"deleted"`; \} \| \{ `kind`: `"set-visibility"`; `visibility`: `"private"` \| `"public"`; \} \| \{ `kind`: `"set-grants"`; `grants`: \| `"none"` \| `"declared"` \| readonly `Readonly`\<\{ `capability`: \| `"agent.list"` \| `"agent.manage"` \| `"agent.rename"` \| `"agent.toolPolicy"` \| `"agent.read"` \| `"agent.send"` \| `"computer.list"` \| `"computer.readFile"` \| `"computer.writeFile"` \| `"computer.execute"` \| `"llm.generation"` \| `"media.generation"` \| `"games:servers"` \| `"git.repository"` \| `"apps.open"` \| `"apps.call"` \| `"app.storage"` \| `"app.events.emit"` \| `"team.workbenchHost"` \| `"marketplace.browse"` \| `"marketplace.purchase"` \| `"workflow.run"` \| `"workflow.publish"` \| `"workflow.arm"` \| `"world"` \| `"channels.read"` \| `"channels.personal.manage"`; `operations`: readonly `string`[]; `resources`: \| `"tenant-scope"` \| readonly `Readonly`\<\{ `kind`: `string`; `id`: `string`; \}\>[]; \}\>[]; \} \| \{ `kind`: `"approve-anonymous"`; `methods`: readonly `Readonly`\<\{ `name`: `string`; `digest`: `Sha256Digest`; \}\>[]; \} |
+| `context`    | [`InstallationContext`](#installationcontext)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
+
+#### Returns
+
+`Result`\<`Readonly`\<\{ `next`: [`Installation`](#installation);
+`authorityChanged`: `boolean`; \}\>, \{ `kind`: `"refused"`; `code`: \|
+`"unavailable"` \| `"stale_authority"` \| `"not_declared"` \|
+`"release_app_mismatch"` \| `"not_owner"` \| `"invalid_command"`; \}\>
+
+---
+
+### appCallOperation()
+
+```ts
+function appCallOperation(appId, method): string;
+```
+
+Approval identity for one UI-side target method; upgrades intersect these exact
+pairs.
+
+#### Parameters
+
+| Parameter | Type     |
+| --------- | -------- |
+| `appId`   | `string` |
+| `method`  | `string` |
+
+#### Returns
+
+`string`
+
+---
+
+### deriveDeclaredOperations()
+
+```ts
+function deriveDeclaredOperations(
+  release,
+  declaration,
+  descriptors,
+): Promise<
+  Readonly<{
+    artifactDigest: Sha256Digest;
+    digest: Sha256Digest;
+    anonymousMethods: readonly Readonly<{
+      name: string;
+      digest: Sha256Digest;
+    }>[];
+    capabilities: readonly Readonly<{
+      capability:
+        | "agent.list"
+        | "agent.manage"
+        | "agent.rename"
+        | "agent.toolPolicy"
+        | "agent.read"
+        | "agent.send"
+        | "computer.list"
+        | "computer.readFile"
+        | "computer.writeFile"
+        | "computer.execute"
+        | "llm.generation"
+        | "media.generation"
+        | "games:servers"
+        | "git.repository"
+        | "apps.open"
+        | "apps.call"
+        | "app.storage"
+        | "app.events.emit"
+        | "team.workbenchHost"
+        | "marketplace.browse"
+        | "marketplace.purchase"
+        | "workflow.run"
+        | "workflow.publish"
+        | "workflow.arm"
+        | "world"
+        | "channels.read"
+        | "channels.personal.manage";
+      operations: readonly string[];
+    }>[];
+  }>
+>;
+```
+
+Sole derivation owner. Inputs are the verified Release declaration and existing
+host adapters.
+
+#### Parameters
+
+| Parameter                                       | Type                                                                                                                                                                                                                                                                   |
+| ----------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `release`                                       | \{ `releaseId`: `ReleaseId`; `appId`: `AppId`; `artifact`: \{ `artifactRef`: `ArtifactRef`; `artifactDigest`: `Sha256Digest`; `provenance`: \{ `sourceRevision`: `SourceRevision`; `sourceTreeDigest`: `Sha256Digest`; `buildRecipeDigest`: `Sha256Digest`; \}; \}; \} |
+| `release.releaseId`                             | `ReleaseId`                                                                                                                                                                                                                                                            |
+| `release.appId`                                 | `AppId`                                                                                                                                                                                                                                                                |
+| `release.artifact`                              | \{ `artifactRef`: `ArtifactRef`; `artifactDigest`: `Sha256Digest`; `provenance`: \{ `sourceRevision`: `SourceRevision`; `sourceTreeDigest`: `Sha256Digest`; `buildRecipeDigest`: `Sha256Digest`; \}; \}                                                                |
+| `release.artifact.artifactRef`                  | `ArtifactRef`                                                                                                                                                                                                                                                          |
+| `release.artifact.artifactDigest`               | `Sha256Digest`                                                                                                                                                                                                                                                         |
+| `release.artifact.provenance`                   | \{ `sourceRevision`: `SourceRevision`; `sourceTreeDigest`: `Sha256Digest`; `buildRecipeDigest`: `Sha256Digest`; \}                                                                                                                                                     |
+| `release.artifact.provenance.sourceRevision`    | `SourceRevision`                                                                                                                                                                                                                                                       |
+| `release.artifact.provenance.sourceTreeDigest`  | `Sha256Digest`                                                                                                                                                                                                                                                         |
+| `release.artifact.provenance.buildRecipeDigest` | `Sha256Digest`                                                                                                                                                                                                                                                         |
+| `declaration`                                   | `AppDeclaration`                                                                                                                                                                                                                                                       |
+| `descriptors`                                   | readonly [`CapabilityOperationDescriptor`](#capabilityoperationdescriptor)[]                                                                                                                                                                                           |
+
+#### Returns
+
+`Promise`\<`Readonly`\<\{ `artifactDigest`: `Sha256Digest`; `digest`:
+`Sha256Digest`; `anonymousMethods`: readonly `Readonly`\<\{ `name`: `string`;
+`digest`: `Sha256Digest`; \}\>[]; `capabilities`: readonly `Readonly`\<\{
+`capability`: \| `"agent.list"` \| `"agent.manage"` \| `"agent.rename"` \|
+`"agent.toolPolicy"` \| `"agent.read"` \| `"agent.send"` \| `"computer.list"` \|
+`"computer.readFile"` \| `"computer.writeFile"` \| `"computer.execute"` \|
+`"llm.generation"` \| `"media.generation"` \| `"games:servers"` \|
+`"git.repository"` \| `"apps.open"` \| `"apps.call"` \| `"app.storage"` \|
+`"app.events.emit"` \| `"team.workbenchHost"` \| `"marketplace.browse"` \|
+`"marketplace.purchase"` \| `"workflow.run"` \| `"workflow.publish"` \|
+`"workflow.arm"` \| `"world"` \| `"channels.read"` \|
+`"channels.personal.manage"`; `operations`: readonly `string`[]; \}\>[]; \}\>\>