@fungi.computer/oyster 0.0.0-stage → 0.0.1

package/docs/api/workers-git.md

@@ -0,0 +1,1527 @@
+<!-- Generated by Botanical API docs (TypeDoc + typedoc-plugin-markdown). Do not edit. -->
+
+[**@fungi.computer/oyster**](README.md)
+
+---
+
+[@fungi.computer/oyster](modules.md) / workers-git
+
+# workers-git
+
+## Classes
+
+### OysterKeys
+
+Named keys an owner issues directly: an Ear Tag key store scoped to this tenant.
+A key's id is the name the owner chose for it, so forks and other name-derived
+identities (`service.ts:95`) stay stable across a reissue. Plaintext keys are
+never stored.
+
+#### Extends
+
+- `DurableObject`\<[`OysterKeysEnv`](#oysterkeysenv)\>
+
+#### Constructors
+
+##### Constructor
+
+```ts
+new OysterKeys(ctx, env): OysterKeys;
+```
+
+###### Parameters
+
+| Parameter | Type                              |
+| --------- | --------------------------------- |
+| `ctx`     | `DurableObjectState`              |
+| `env`     | [`OysterKeysEnv`](#oysterkeysenv) |
+
+###### Returns
+
+[`OysterKeys`](#oysterkeys)
+
+###### Overrides
+
+```ts
+DurableObject<OysterKeysEnv>.constructor
+```
+
+#### Methods
+
+##### issue()
+
+```ts
+issue(owner, input): Promise<KeyOutcome<Readonly<{
+  key: string;
+  record: KeyRecord<Capability>;
+}>>>;
+```
+
+Issue a key named `name`, its id too. Refuses `conflict` once a name has been
+used, including by a now-revoked key: a name is never reused.
+
+###### Parameters
+
+| Parameter | Type                                                                                                                                                |
+| --------- | --------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `owner`   | `string`                                                                                                                                            |
+| `input`   | `Readonly`\<\{ `name`: `string`; `grants`: readonly `Grant`\<[`OysterKeyCapability`](keys.md#oysterkeycapability)\>[]; `expiresAt?`: `number`; \}\> |
+
+###### Returns
+
+`Promise`\<`KeyOutcome`\<`Readonly`\<\{ `key`: `string`; `record`:
+`KeyRecord`\<`Capability`\>; \}\>\>\>
+
+##### revoke()
+
+```ts
+revoke(
+   owner,
+   requestId,
+   keyId
+): Promise<KeyOutcome<Readonly<{
+  keyId: string;
+  owner: string;
+  name: string;
+  scope:   | Readonly<{
+     grants: readonly Readonly<{
+        capability: OysterKeyCapability;
+        targets: GrantTargets;
+     }>[];
+   }>
+     | null;
+  grantVersion: number;
+  expiresAt: number | null;
+  revokedAt: number | null;
+  rateLimit:   | Readonly<{
+     limit: number;
+     windowSeconds: number;
+   }>
+     | null;
+  lastUsedAt: number | null;
+  createdAt: number;
+  updatedAt: number;
+}>>>;
+```
+
+Revoke a key by id; idempotent on repeat.
+
+###### Parameters
+
+| Parameter   | Type     |
+| ----------- | -------- |
+| `owner`     | `string` |
+| `requestId` | `string` |
+| `keyId`     | `string` |
+
+###### Returns
+
+`Promise`\<`KeyOutcome`\<`Readonly`\<\{ `keyId`: `string`; `owner`: `string`;
+`name`: `string`; `scope`: \| `Readonly`\<\{ `grants`: readonly `Readonly`\<\{
+`capability`: [`OysterKeyCapability`](keys.md#oysterkeycapability); `targets`:
+`GrantTargets`; \}\>[]; \}\> \| `null`; `grantVersion`: `number`; `expiresAt`:
+`number` \| `null`; `revokedAt`: `number` \| `null`; `rateLimit`: \|
+`Readonly`\<\{ `limit`: `number`; `windowSeconds`: `number`; \}\> \| `null`;
+`lastUsedAt`: `number` \| `null`; `createdAt`: `number`; `updatedAt`: `number`;
+\}\>\>\>
+
+##### list()
+
+```ts
+list(owner): Promise<KeyOutcome<readonly Readonly<{
+  keyId: string;
+  owner: string;
+  name: string;
+  scope:   | Readonly<{
+     grants: readonly Readonly<{
+        capability: ...;
+        targets: ...;
+     }>[];
+   }>
+     | null;
+  grantVersion: number;
+  expiresAt: number | null;
+  revokedAt: number | null;
+  rateLimit:   | Readonly<{
+     limit: number;
+     windowSeconds: number;
+   }>
+     | null;
+  lastUsedAt: number | null;
+  createdAt: number;
+  updatedAt: number;
+}>[]>>;
+```
+
+Every key this tenant has issued, newest first.
+
+###### Parameters
+
+| Parameter | Type     |
+| --------- | -------- |
+| `owner`   | `string` |
+
+###### Returns
+
+`Promise`\<`KeyOutcome`\<readonly `Readonly`\<\{ `keyId`: `string`; `owner`:
+`string`; `name`: `string`; `scope`: \| `Readonly`\<\{ `grants`: readonly
+`Readonly`\<\{ `capability`: ...; `targets`: ...; \}\>[]; \}\> \| `null`;
+`grantVersion`: `number`; `expiresAt`: `number` \| `null`; `revokedAt`: `number`
+\| `null`; `rateLimit`: \| `Readonly`\<\{ `limit`: `number`; `windowSeconds`:
+`number`; \}\> \| `null`; `lastUsedAt`: `number` \| `null`; `createdAt`:
+`number`; `updatedAt`: `number`; \}\>[]\>\>
+
+##### verify()
+
+```ts
+verify(secret): Promise<KeyOutcome<Readonly<{
+  keyId: string;
+  owner: string;
+  name: string;
+  scope: Scope<Capability>;
+  grantVersion: number;
+  expiresAt: number | null;
+}>>>;
+```
+
+Verify a bearer secret and return its current principal.
+
+###### Parameters
+
+| Parameter | Type     |
+| --------- | -------- |
+| `secret`  | `string` |
+
+###### Returns
+
+`Promise`\<`KeyOutcome`\<`Readonly`\<\{ `keyId`: `string`; `owner`: `string`;
+`name`: `string`; `scope`: `Scope`\<`Capability`\>; `grantVersion`: `number`;
+`expiresAt`: `number` \| `null`; \}\>\>\>
+
+##### live()
+
+```ts
+live(keyId): Promise<
+  | Readonly<{
+  keyId: string;
+  owner: string;
+  grantVersion: number;
+  grants: readonly Readonly<{
+     capability: OysterKeyCapability;
+     targets: GrantTargets;
+  }>[];
+}>
+| null>;
+```
+
+The live facts behind one key id, for the host's `keys.live` port; `null` for an
+unknown, revoked, expired or suspended key.
+
+###### Parameters
+
+| Parameter | Type     |
+| --------- | -------- |
+| `keyId`   | `string` |
+
+###### Returns
+
+`Promise`\< \| `Readonly`\<\{ `keyId`: `string`; `owner`: `string`;
+`grantVersion`: `number`; `grants`: readonly `Readonly`\<\{ `capability`:
+[`OysterKeyCapability`](keys.md#oysterkeycapability); `targets`: `GrantTargets`;
+\}\>[]; \}\> \| `null`\>
+
+---
+
+### OysterWebhooks
+
+Webhook subscriptions, their secrets and signed, retried deliveries.
+
+#### Extends
+
+- `DurableObject`\<[`OysterKeysEnv`](#oysterkeysenv)\>
+
+#### Constructors
+
+##### Constructor
+
+```ts
+new OysterWebhooks(ctx, env): OysterWebhooks;
+```
+
+###### Parameters
+
+| Parameter | Type                              |
+| --------- | --------------------------------- |
+| `ctx`     | `DurableObjectState`              |
+| `env`     | [`OysterKeysEnv`](#oysterkeysenv) |
+
+###### Returns
+
+[`OysterWebhooks`](#oysterwebhooks)
+
+###### Overrides
+
+```ts
+DurableObject<OysterKeysEnv>.constructor
+```
+
+#### Methods
+
+##### subscribe()
+
+```ts
+subscribe(input): SubscriptionCreated;
+```
+
+Subscribe `url` to an installation's events; returns the secret once.
+
+###### Parameters
+
+| Parameter              | Type                                                                                                  |
+| ---------------------- | ----------------------------------------------------------------------------------------------------- |
+| `input`                | \{ `installationId`: `string`; `url`: `string`; `types`: readonly `string`[]; `secret?`: `string`; \} |
+| `input.installationId` | `string`                                                                                              |
+| `input.url`            | `string`                                                                                              |
+| `input.types`          | readonly `string`[]                                                                                   |
+| `input.secret?`        | `string`                                                                                              |
+
+###### Returns
+
+[`SubscriptionCreated`](#subscriptioncreated)
+
+##### subscriptions()
+
+```ts
+subscriptions(): Readonly<{
+  id: string;
+  installationId: string;
+  url: string;
+  types: readonly string[];
+  createdAt: number;
+}>[];
+```
+
+Every subscription.
+
+###### Returns
+
+`Readonly`\<\{ `id`: `string`; `installationId`: `string`; `url`: `string`;
+`types`: readonly `string`[]; `createdAt`: `number`; \}\>[]
+
+##### unsubscribe()
+
+```ts
+unsubscribe(id): boolean;
+```
+
+Remove a subscription and its deliveries.
+
+###### Parameters
+
+| Parameter | Type     |
+| --------- | -------- |
+| `id`      | `string` |
+
+###### Returns
+
+`boolean`
+
+##### deliveries()
+
+```ts
+deliveries(subscription): Readonly<{
+  id: string;
+  subscription: string;
+  type: string;
+  state: "pending" | "failed" | "delivered";
+  attempts: number;
+  lastStatus: number | null;
+  updatedAt: number;
+}>[];
+```
+
+Recent deliveries for one subscription, newest first.
+
+###### Parameters
+
+| Parameter      | Type     |
+| -------------- | -------- |
+| `subscription` | `string` |
+
+###### Returns
+
+`Readonly`\<\{ `id`: `string`; `subscription`: `string`; `type`: `string`;
+`state`: `"pending"` \| `"failed"` \| `"delivered"`; `attempts`: `number`;
+`lastStatus`: `number` \| `null`; `updatedAt`: `number`; \}\>[]
+
+##### enqueue()
+
+```ts
+enqueue(
+   installationId,
+   payload,
+   eventId
+): number;
+```
+
+Queue an event for every matching subscription (idempotent per event id).
+
+###### Parameters
+
+| Parameter        | Type                                                      |
+| ---------------- | --------------------------------------------------------- |
+| `installationId` | `string`                                                  |
+| `payload`        | [`StandardWebhookPayload`](git.md#standardwebhookpayload) |
+| `eventId`        | `string`                                                  |
+
+###### Returns
+
+`number`
+
+##### alarm()
+
+```ts
+alarm(): Promise<void>;
+```
+
+Deliver due webhooks, then schedule the next retry.
+
+###### Returns
+
+`Promise`\<`void`\>
+
+###### Overrides
+
+```ts
+DurableObject.alarm;
+```
+
+---
+
+### OysterBinding
+
+A git Worker's one guest binding entrypoint, over `gitBindings`.
+
+#### Extends
+
+- `WorkerEntrypoint`\<[`OysterGitWorkerEnv`](#oystergitworkerenv),
+  `Readonly`\<\{ `instanceId`: `string`; `binding`: \| `"BACKGROUND"` \| `"GIT"`
+  \| `"EVENTS"` \| `"APPS"` \| `"WORKFLOWS"` \| `"APP_STORAGE"` \| `"MEDIA"` \|
+  `"COMPUTER"` \| `"INBOX"` \| `"AGENTS"`; `frameId`: `string`; \}\>, `this`\>
+
+#### Constructors
+
+##### Constructor
+
+```ts
+new OysterBinding(ctx, env): OysterBinding;
+```
+
+###### Parameters
+
+| Parameter | Type                                        |
+| --------- | ------------------------------------------- |
+| `ctx`     | `ExecutionContext`                          |
+| `env`     | [`OysterGitWorkerEnv`](#oystergitworkerenv) |
+
+###### Returns
+
+[`OysterBinding`](#oysterbinding)
+
+###### Inherited from
+
+```ts
+oysterBindingEntrypoint(gitBindings).constructor;
+```
+
+---
+
+### `abstract` OysterGitInstance
+
+An App Instance whose backend may also receive declared Git and Events bindings.
+Background wakes readmit members through the deployable root's `hostFor`, the
+same composition HTTP and MCP use.
+
+#### Extends
+
+- [`OysterInstance`](workers.md#oysterinstance)\<`Env`\>
+
+#### Type Parameters
+
+| Type Parameter                                              | Default type                                |
+| ----------------------------------------------------------- | ------------------------------------------- |
+| `Env` _extends_ [`OysterGitWorkerEnv`](#oystergitworkerenv) | [`OysterGitWorkerEnv`](#oystergitworkerenv) |
+
+#### Constructors
+
+##### Constructor
+
+```ts
+new OysterGitInstance<Env>(ctx, env): OysterGitInstance<Env>;
+```
+
+###### Parameters
+
+| Parameter | Type                 |
+| --------- | -------------------- |
+| `ctx`     | `DurableObjectState` |
+| `env`     | `Env`                |
+
+###### Returns
+
+[`OysterGitInstance`](#abstract-oystergitinstance)\<`Env`\>
+
+###### Inherited from
+
+[`OysterInstance`](workers.md#oysterinstance).[`constructor`](workers.md#constructor-3)
+
+#### Methods
+
+##### bindingCall()
+
+```ts
+bindingCall(
+   raw,
+   method,
+   input
+): Promise<FrameBindingReply<OysterBindingResult>>;
+```
+
+Resolve each guest packet against its immutable frame before any host effect.
+
+###### Parameters
+
+| Parameter | Type                                                   |
+| --------- | ------------------------------------------------------ |
+| `raw`     | [`FrameBindingProps`](cloudflare.md#framebindingprops) |
+| `method`  | `string`                                               |
+| `input`   | readonly `unknown`[]                                   |
+
+###### Returns
+
+`Promise`\<[`FrameBindingReply`](cloudflare.md#framebindingreply)\<[`OysterBindingResult`](workers.md#oysterbindingresult)\>\>
+
+###### Inherited from
+
+[`OysterInstance`](workers.md#oysterinstance).[`bindingCall`](workers.md#bindingcall)
+
+##### gitTip()
+
+```ts
+gitTip(
+   installationId,
+   repository,
+   ref,
+   tenantId?
+): Promise<string | null>;
+```
+
+Last provider-accepted ref recorded by this installation's journal.
+
+###### Parameters
+
+| Parameter        | Type                                     | Default value   |
+| ---------------- | ---------------------------------------- | --------------- |
+| `installationId` | `string`                                 | `undefined`     |
+| `repository`     | `string`                                 | `undefined`     |
+| `ref`            | `string`                                 | `undefined`     |
+| `tenantId`       | `string` & `Brand`\<`"OysterTenantId"`\> | `defaultTenant` |
+
+###### Returns
+
+`Promise`\<`string` \| `null`\>
+
+###### Inherited from
+
+[`OysterInstance`](workers.md#oysterinstance).[`gitTip`](workers.md#gittip)
+
+##### recordGitPush()
+
+```ts
+recordGitPush(
+   installationId,
+   fact,
+   tenantId?
+): Promise<"duplicate" | "recorded">;
+```
+
+Join accepted fact identity and Carrier delivery in one local transaction.
+
+###### Parameters
+
+| Parameter           | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | Default value   |
+| ------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------- |
+| `installationId`    | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  | `undefined`     |
+| `fact`              | \{ `repository`: `string`; `writer`: \| \{ `kind`: `"actor"`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `role?`: `"member"` \| `"owner"`; `workflow?`: \{ `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `branches`: `string`[]; `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; \}; \} \| \{ `kind`: `"installation"`; `installationId`: `string`; `onBehalfOf`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \} \| `null`; \}; `updates`: `object`[]; `unexplained?`: `object`[]; `eventId`: `string`; \} | `undefined`     |
+| `fact.repository`   | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  | `undefined`     |
+| `fact.writer`       | \| \{ `kind`: `"actor"`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `role?`: `"member"` \| `"owner"`; `workflow?`: \{ `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `branches`: `string`[]; `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; \}; \} \| \{ `kind`: `"installation"`; `installationId`: `string`; `onBehalfOf`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \} \| `null`; \}                                                                                                                  | `undefined`     |
+| `fact.updates`      | `object`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`     |
+| `fact.unexplained?` | `object`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`     |
+| `fact.eventId`      | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  | `undefined`     |
+| `tenantId`          | `string` & `Brand`\<`"OysterTenantId"`\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  | `defaultTenant` |
+
+###### Returns
+
+`Promise`\<`"duplicate"` \| `"recorded"`\>
+
+###### Inherited from
+
+[`OysterInstance`](workers.md#oysterinstance).[`recordGitPush`](workers.md#recordgitpush)
+
+##### alarm()
+
+```ts
+alarm(): Promise<void>;
+```
+
+Carrier owns retries, dead letters and retained delivery receipts.
+
+###### Returns
+
+`Promise`\<`void`\>
+
+###### Inherited from
+
+[`OysterInstance`](workers.md#oysterinstance).[`alarm`](workers.md#alarm)
+
+##### revoke()
+
+```ts
+revoke(
+   installationId,
+   runId?,
+   tenantId?
+): Promise<void>;
+```
+
+Installation changes end guest work; a Workflow cancel targets only its run.
+
+###### Parameters
+
+| Parameter        | Type                                     | Default value   |
+| ---------------- | ---------------------------------------- | --------------- |
+| `installationId` | `string`                                 | `undefined`     |
+| `runId?`         | `string`                                 | `undefined`     |
+| `tenantId?`      | `string` & `Brand`\<`"OysterTenantId"`\> | `defaultTenant` |
+
+###### Returns
+
+`Promise`\<`void`\>
+
+###### Inherited from
+
+[`OysterInstance`](workers.md#oysterinstance).[`revoke`](workers.md#revoke)
+
+##### apply()
+
+```ts
+apply(
+   state,
+   release,
+   limits,
+   tenant
+): Promise<InstanceResult<{
+  instanceId: InstanceId;
+  owner: {
+     kind: "installation" | "deployment";
+     id: string;
+  };
+  appId: AppId;
+  releaseId: ReleaseId;
+  authorityVersion: number;
+  stateSchema: number | null;
+  desiredStatus: "enabled" | "disabled" | "deleted";
+  status: "disabled" | "deleted" | "active" | "deleting";
+}>>;
+```
+
+Remember `release`, then apply the owner state under the host's tenant pin.
+
+###### Parameters
+
+| Parameter                | Type                                                                                                                                                                                                                                                                 |
+| ------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `state`                  | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; `status`: `"enabled"` \| `"disabled"` \| `"deleted"`; \} |
+| `state.instanceId`       | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                  |
+| `state.owner`            | \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}                                                                                                                                                                                                    |
+| `state.owner.kind`       | `"installation"` \| `"deployment"`                                                                                                                                                                                                                                   |
+| `state.owner.id`         | `string`                                                                                                                                                                                                                                                             |
+| `state.appId`            | `AppId`                                                                                                                                                                                                                                                              |
+| `state.releaseId`        | `ReleaseId`                                                                                                                                                                                                                                                          |
+| `state.authorityVersion` | `number`                                                                                                                                                                                                                                                             |
+| `state.status`           | `"enabled"` \| `"disabled"` \| `"deleted"`                                                                                                                                                                                                                           |
+| `release`                | `Release`                                                                                                                                                                                                                                                            |
+| `limits`                 | \| `Readonly`\<\{ `cpuMs`: `number`; `subRequests`: `number`; \}\> \| `undefined`                                                                                                                                                                                    |
+| `tenant`                 | `Pick`\<[`TenantScope`](tenant.md#tenantscope), `"tenantId"` \| `"origin"`\>                                                                                                                                                                                         |
+
+###### Returns
+
+`Promise`\<[`InstanceResult`](host.md#instanceresult)\<\{ `instanceId`:
+[`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \|
+`"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`;
+`authorityVersion`: `number`; `stateSchema`: `number` \| `null`;
+`desiredStatus`: `"enabled"` \| `"disabled"` \| `"deleted"`; `status`:
+`"disabled"` \| `"deleted"` \| `"active"` \| `"deleting"`; \}\>\>
+
+###### Inherited from
+
+[`OysterInstance`](workers.md#oysterinstance).[`apply`](workers.md#apply)
+
+##### backend()
+
+```ts
+backend(
+   facts,
+   request,
+   limits?,
+   tenantId?
+): Promise<Response>;
+```
+
+Forward an admitted HTTP request to the App backend.
+
+###### Parameters
+
+| Parameter                           | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | Default value           |
+| ----------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------- |
+| `facts`                             | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `selection`: \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}; `artifactDigest`: `Sha256Digest`; `subject`: \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}; `grants`: readonly `object`[]; `deadlineAt`: `number`; `ancestry`: readonly [`InstanceId`](index.md#instanceid)[]; \} | `undefined`             |
+| `facts.instanceId`                  | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `instanceIdSchema`      |
+| `facts.selection`                   | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `selectionSchema`       |
+| `facts.selection.instanceId?`       | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `instanceIdSchema`      |
+| `facts.selection.owner?`            | \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       | `ownerSchema`           |
+| `facts.selection.owner.kind?`       | `"installation"` \| `"deployment"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | `...`                   |
+| `facts.selection.owner.id?`         | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `Schema.NonEmptyString` |
+| `facts.selection.appId?`            | `AppId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | `appIdSchema`           |
+| `facts.selection.releaseId?`        | `ReleaseId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             | `releaseIdSchema`       |
+| `facts.selection.authorityVersion?` | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `...`                   |
+| `facts.artifactDigest?`             | `Sha256Digest`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `sha256DigestSchema`    |
+| `facts.subject?`                    | \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                        | `...`                   |
+| `facts.grants?`                     | readonly `object`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `grantsSchema`          |
+| `facts.deadlineAt?`                 | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `...`                   |
+| `facts.ancestry?`                   | readonly [`InstanceId`](index.md#instanceid)[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `...`                   |
+| `request?`                          | `Request`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               | `undefined`             |
+| `limits?`                           | `Readonly`\<\{ `cpuMs`: `number`; `subRequests`: `number`; \}\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         | `undefined`             |
+| `tenantId?`                         | `string` & `Brand`\<`"OysterTenantId"`\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `defaultTenant`         |
+
+###### Returns
+
+`Promise`\<`Response`\>
+
+###### Inherited from
+
+[`OysterInstance`](workers.md#oysterinstance).[`backend`](workers.md#backend)
+
+##### onGitPush()
+
+```ts
+onGitPush(
+   facts,
+   fact,
+   limits?,
+   tenantId?
+): Promise<void>;
+```
+
+Deliver a Git push through the same selected-Instance admission as methods.
+
+###### Parameters
+
+| Parameter                           | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | Default value           |
+| ----------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------- |
+| `facts`                             | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `selection`: \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}; `artifactDigest`: `Sha256Digest`; `subject`: \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}; `grants`: readonly `object`[]; `deadlineAt`: `number`; `ancestry`: readonly [`InstanceId`](index.md#instanceid)[]; \} | `undefined`             |
+| `facts.instanceId`                  | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `instanceIdSchema`      |
+| `facts.selection`                   | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `selectionSchema`       |
+| `facts.selection.instanceId?`       | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `instanceIdSchema`      |
+| `facts.selection.owner?`            | \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       | `ownerSchema`           |
+| `facts.selection.owner.kind?`       | `"installation"` \| `"deployment"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | `...`                   |
+| `facts.selection.owner.id?`         | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `Schema.NonEmptyString` |
+| `facts.selection.appId?`            | `AppId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | `appIdSchema`           |
+| `facts.selection.releaseId?`        | `ReleaseId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             | `releaseIdSchema`       |
+| `facts.selection.authorityVersion?` | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `...`                   |
+| `facts.artifactDigest?`             | `Sha256Digest`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `sha256DigestSchema`    |
+| `facts.subject?`                    | \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                        | `...`                   |
+| `facts.grants?`                     | readonly `object`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `grantsSchema`          |
+| `facts.deadlineAt?`                 | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `...`                   |
+| `facts.ancestry?`                   | readonly [`InstanceId`](index.md#instanceid)[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `...`                   |
+| `fact?`                             | \{ `repository`: `string`; `writer`: \| \{ `kind`: `"actor"`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `role?`: `"member"` \| `"owner"`; `workflow?`: \{ `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `branches`: `string`[]; `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; \}; \} \| \{ `kind`: `"installation"`; `installationId`: `string`; `onBehalfOf`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \} \| `null`; \}; `updates`: `object`[]; `unexplained?`: `object`[]; `eventId`: `string`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               | `undefined`             |
+| `fact.repository?`                  | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `fact.writer?`                      | \| \{ `kind`: `"actor"`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `role?`: `"member"` \| `"owner"`; `workflow?`: \{ `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `branches`: `string`[]; `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; \}; \} \| \{ `kind`: `"installation"`; `installationId`: `string`; `onBehalfOf`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \} \| `null`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `fact.updates?`                     | `object`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | `undefined`             |
+| `fact.unexplained?`                 | `object`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | `undefined`             |
+| `fact.eventId?`                     | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `limits?`                           | `Readonly`\<\{ `cpuMs`: `number`; `subRequests`: `number`; \}\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         | `undefined`             |
+| `tenantId?`                         | `string` & `Brand`\<`"OysterTenantId"`\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `defaultTenant`         |
+
+###### Returns
+
+`Promise`\<`void`\>
+
+###### Inherited from
+
+[`OysterInstance`](workers.md#oysterinstance).[`onGitPush`](workers.md#ongitpush)
+
+##### authorizeGitPush()
+
+```ts
+authorizeGitPush(
+   facts,
+   question,
+   limits?,
+   tenantId?
+): Promise<
+  | {
+  allowed: true;
+}
+  | {
+  allowed: false;
+  refused: object[];
+}>;
+```
+
+Ask the App's declared authorizer through the same frame-bound connection.
+
+###### Parameters
+
+| Parameter                              | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | Default value           |
+| -------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------- |
+| `facts`                                | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `selection`: \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}; `artifactDigest`: `Sha256Digest`; `subject`: \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}; `grants`: readonly `object`[]; `deadlineAt`: `number`; `ancestry`: readonly [`InstanceId`](index.md#instanceid)[]; \} | `undefined`             |
+| `facts.instanceId`                     | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `instanceIdSchema`      |
+| `facts.selection`                      | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `selectionSchema`       |
+| `facts.selection.instanceId?`          | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `instanceIdSchema`      |
+| `facts.selection.owner?`               | \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       | `ownerSchema`           |
+| `facts.selection.owner.kind?`          | `"installation"` \| `"deployment"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | `...`                   |
+| `facts.selection.owner.id?`            | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `Schema.NonEmptyString` |
+| `facts.selection.appId?`               | `AppId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | `appIdSchema`           |
+| `facts.selection.releaseId?`           | `ReleaseId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             | `releaseIdSchema`       |
+| `facts.selection.authorityVersion?`    | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `...`                   |
+| `facts.artifactDigest?`                | `Sha256Digest`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `sha256DigestSchema`    |
+| `facts.subject?`                       | \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                        | `...`                   |
+| `facts.grants?`                        | readonly `object`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `grantsSchema`          |
+| `facts.deadlineAt?`                    | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `...`                   |
+| `facts.ancestry?`                      | readonly [`InstanceId`](index.md#instanceid)[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `...`                   |
+| `question?`                            | \{ `repository`: `string`; `writer`: \{ `kind`: `"actor"`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `role?`: `"member"` \| `"owner"`; `workflow?`: \{ `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `branches`: `string`[]; `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; \}; \}; `updates`: `object`[]; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | `undefined`             |
+| `question.repository?`                 | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `question.writer?`                     | \{ `kind`: `"actor"`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `role?`: `"member"` \| `"owner"`; `workflow?`: \{ `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `branches`: `string`[]; `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; \}; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | `undefined`             |
+| `question.writer.kind?`                | `"actor"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               | `undefined`             |
+| `question.writer.actor?`               | \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   | `undefined`             |
+| `question.writer.role?`                | `"member"` \| `"owner"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | `undefined`             |
+| `question.writer.workflow?`            | \{ `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `branches`: `string`[]; `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `undefined`             |
+| `question.writer.workflow.armedBy?`    | \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   | `undefined`             |
+| `question.writer.workflow.branches?`   | `string`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | `undefined`             |
+| `question.writer.workflow.workflowId?` | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `question.writer.workflow.runId?`      | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `question.writer.workflow.nodeId?`     | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `question.updates?`                    | `object`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | `undefined`             |
+| `limits?`                              | `Readonly`\<\{ `cpuMs`: `number`; `subRequests`: `number`; \}\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         | `undefined`             |
+| `tenantId?`                            | `string` & `Brand`\<`"OysterTenantId"`\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `defaultTenant`         |
+
+###### Returns
+
+`Promise`\< \| \{ `allowed`: `true`; \} \| \{ `allowed`: `false`; `refused`:
+`object`[]; \}\>
+
+###### Inherited from
+
+[`OysterInstance`](workers.md#oysterinstance).[`authorizeGitPush`](workers.md#authorizegitpush)
+
+##### syncRefused()
+
+```ts
+syncRefused(
+   facts,
+   refusal,
+   limits?,
+   tenantId?
+): Promise<void>;
+```
+
+An available lane settles a refusal under an active frame with no binding
+grants.
+
+###### Parameters
+
+| Parameter                           | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | Default value           |
+| ----------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------- |
+| `facts`                             | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `selection`: \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}; `artifactDigest`: `Sha256Digest`; `subject`: \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}; `grants`: readonly `object`[]; `deadlineAt`: `number`; `ancestry`: readonly [`InstanceId`](index.md#instanceid)[]; \} | `undefined`             |
+| `facts.instanceId`                  | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `instanceIdSchema`      |
+| `facts.selection`                   | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `selectionSchema`       |
+| `facts.selection.instanceId?`       | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `instanceIdSchema`      |
+| `facts.selection.owner?`            | \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       | `ownerSchema`           |
+| `facts.selection.owner.kind?`       | `"installation"` \| `"deployment"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | `...`                   |
+| `facts.selection.owner.id?`         | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `Schema.NonEmptyString` |
+| `facts.selection.appId?`            | `AppId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | `appIdSchema`           |
+| `facts.selection.releaseId?`        | `ReleaseId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             | `releaseIdSchema`       |
+| `facts.selection.authorityVersion?` | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `...`                   |
+| `facts.artifactDigest?`             | `Sha256Digest`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `sha256DigestSchema`    |
+| `facts.subject?`                    | \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                        | `...`                   |
+| `facts.grants?`                     | readonly `object`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `grantsSchema`          |
+| `facts.deadlineAt?`                 | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `...`                   |
+| `facts.ancestry?`                   | readonly [`InstanceId`](index.md#instanceid)[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `...`                   |
+| `refusal?`                          | \{ `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `undefined`             |
+| `refusal.lane?`                     | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `refusal.code?`                     | `"access_changed"` \| `"installation_unavailable"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | `undefined`             |
+| `limits?`                           | `Readonly`\<\{ `cpuMs`: `number`; `subRequests`: `number`; \}\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         | `undefined`             |
+| `tenantId?`                         | `string` & `Brand`\<`"OysterTenantId"`\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `defaultTenant`         |
+
+###### Returns
+
+`Promise`\<`void`\>
+
+###### Inherited from
+
+[`OysterInstance`](workers.md#oysterinstance).[`syncRefused`](workers.md#syncrefused)
+
+##### gill()
+
+```ts
+gill(
+   facts,
+   _api,
+   source,
+   input,
+   limits?,
+   tenantId?
+): Promise<InstanceResult<
+  | {
+  viewId: string;
+  title: string;
+  state: "empty";
+  rows: readonly [];
+  next?: string;
+}
+  | {
+  viewId: string;
+  title: string;
+  state: "error";
+  rows: readonly [];
+  reason?: "exec_isolation_required" | "params_required";
+  error: string;
+  recovery?:   | {
+     kind: "configure";
+     param: string;
+   }
+     | {
+     kind: "open";
+   };
+}
+  | {
+  viewId: string;
+  title: string;
+  state: "full";
+  rows: readonly object[];
+  next?: string;
+}
+  | {
+  options: readonly object[];
+  next?: string;
+}>>;
+```
+
+Invoke a Release-declared Gill in a fresh immutable frame.
+
+###### Parameters
+
+| Parameter                           | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | Default value           |
+| ----------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------- |
+| `facts`                             | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `selection`: \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}; `artifactDigest`: `Sha256Digest`; `subject`: \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}; `grants`: readonly `object`[]; `deadlineAt`: `number`; `ancestry`: readonly [`InstanceId`](index.md#instanceid)[]; \} | `undefined`             |
+| `facts.instanceId`                  | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `instanceIdSchema`      |
+| `facts.selection`                   | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `selectionSchema`       |
+| `facts.selection.instanceId`        | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `instanceIdSchema`      |
+| `facts.selection.owner`             | \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       | `ownerSchema`           |
+| `facts.selection.owner.kind?`       | `"installation"` \| `"deployment"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | `...`                   |
+| `facts.selection.owner.id?`         | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `Schema.NonEmptyString` |
+| `facts.selection.appId?`            | `AppId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | `appIdSchema`           |
+| `facts.selection.releaseId?`        | `ReleaseId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             | `releaseIdSchema`       |
+| `facts.selection.authorityVersion?` | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `...`                   |
+| `facts.artifactDigest?`             | `Sha256Digest`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `sha256DigestSchema`    |
+| `facts.subject?`                    | \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                        | `...`                   |
+| `facts.grants?`                     | readonly `object`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `grantsSchema`          |
+| `facts.deadlineAt?`                 | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `...`                   |
+| `facts.ancestry?`                   | readonly [`InstanceId`](index.md#instanceid)[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `...`                   |
+| `_api?`                             | `AppApi`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `source?`                           | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `input?`                            | \{ `id`: `string`; `params?`: \{ \[`key`: `string`\]: `string`; \}; `after?`: `string`; `options?`: `string`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        | `undefined`             |
+| `input.id?`                         | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `input.params?`                     | \{ \[`key`: `string`\]: `string`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | `undefined`             |
+| `input.after?`                      | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `input.options?`                    | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `limits?`                           | `Readonly`\<\{ `cpuMs`: `number`; `subRequests`: `number`; \}\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         | `undefined`             |
+| `tenantId?`                         | `string` & `Brand`\<`"OysterTenantId"`\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `defaultTenant`         |
+
+###### Returns
+
+`Promise`\<[`InstanceResult`](host.md#instanceresult)\< \| \{ `viewId`:
+`string`; `title`: `string`; `state`: `"empty"`; `rows`: readonly \[\]; `next?`:
+`string`; \} \| \{ `viewId`: `string`; `title`: `string`; `state`: `"error"`;
+`rows`: readonly \[\]; `reason?`: `"exec_isolation_required"` \|
+`"params_required"`; `error`: `string`; `recovery?`: \| \{ `kind`:
+`"configure"`; `param`: `string`; \} \| \{ `kind`: `"open"`; \}; \} \| \{
+`viewId`: `string`; `title`: `string`; `state`: `"full"`; `rows`: readonly
+`object`[]; `next?`: `string`; \} \| \{ `options`: readonly `object`[]; `next?`:
+`string`; \}\>\>
+
+###### Inherited from
+
+[`OysterInstance`](workers.md#oysterinstance).[`gill`](workers.md#gill)
+
+##### call()
+
+```ts
+call(
+   facts,
+   _api,
+   name,
+   input,
+   limits?,
+   tenantId?
+): Promise<InstanceResult<Json>>;
+```
+
+Invoke one declared App method; the value is its AppMethodReply wire, which the
+host handle decodes.
+
+###### Parameters
+
+| Parameter                           | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | Default value           |
+| ----------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------- |
+| `facts`                             | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `selection`: \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}; `artifactDigest`: `Sha256Digest`; `subject`: \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}; `grants`: readonly `object`[]; `deadlineAt`: `number`; `ancestry`: readonly [`InstanceId`](index.md#instanceid)[]; \} | `undefined`             |
+| `facts.instanceId`                  | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `instanceIdSchema`      |
+| `facts.selection`                   | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `selectionSchema`       |
+| `facts.selection.instanceId`        | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `instanceIdSchema`      |
+| `facts.selection.owner`             | \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       | `ownerSchema`           |
+| `facts.selection.owner.kind?`       | `"installation"` \| `"deployment"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | `...`                   |
+| `facts.selection.owner.id?`         | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `Schema.NonEmptyString` |
+| `facts.selection.appId?`            | `AppId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | `appIdSchema`           |
+| `facts.selection.releaseId?`        | `ReleaseId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             | `releaseIdSchema`       |
+| `facts.selection.authorityVersion?` | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `...`                   |
+| `facts.artifactDigest?`             | `Sha256Digest`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `sha256DigestSchema`    |
+| `facts.subject?`                    | \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                        | `...`                   |
+| `facts.grants?`                     | readonly `object`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `grantsSchema`          |
+| `facts.deadlineAt?`                 | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `...`                   |
+| `facts.ancestry?`                   | readonly [`InstanceId`](index.md#instanceid)[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `...`                   |
+| `_api?`                             | `AppApi`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `name?`                             | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `input?`                            | `Json`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  | `undefined`             |
+| `limits?`                           | `Readonly`\<\{ `cpuMs`: `number`; `subRequests`: `number`; \}\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         | `undefined`             |
+| `tenantId?`                         | `string` & `Brand`\<`"OysterTenantId"`\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `defaultTenant`         |
+
+###### Returns
+
+`Promise`\<[`InstanceResult`](host.md#instanceresult)\<`Json`\>\>
+
+###### Inherited from
+
+[`OysterInstance`](workers.md#oysterinstance).[`call`](workers.md#call)
+
+## Type Aliases
+
+### ArtifactsGit
+
+```ts
+type ArtifactsGit = Omit<GitBinding, "cloneUrl"> &
+  Readonly<{
+    credential: Promise<
+      Readonly<{
+        remote: string;
+        token: string;
+      }>
+    >;
+  }>;
+```
+
+The GIT binding plus the credential only the host's git door may use.
+
+---
+
+### OysterKeysEnv
+
+```ts
+type OysterKeysEnv = Readonly<Record<never, never>>;
+```
+
+Bindings the keys and webhook objects need: none of their own.
+
+---
+
+### WebhookSubscription
+
+```ts
+type WebhookSubscription = Readonly<{
+  id: string;
+  installationId: string;
+  url: string;
+  types: readonly string[];
+  createdAt: number;
+}>;
+```
+
+One webhook subscription for an installation's events.
+
+---
+
+### SubscriptionCreated
+
+```ts
+type SubscriptionCreated = Readonly<{
+  subscription: WebhookSubscription;
+  secret: string;
+}>;
+```
+
+A new subscription and its signing secret, shown once.
+
+---
+
+### WebhookDelivery
+
+```ts
+type WebhookDelivery = Readonly<{
+  id: string;
+  subscription: string;
+  type: string;
+  state: "pending" | "delivered" | "failed";
+  attempts: number;
+  lastStatus: number | null;
+  updatedAt: number;
+}>;
+```
+
+One delivery attempt record.
+
+---
+
+### OysterGitEnv
+
+```ts
+type OysterGitEnv = Readonly<{
+  ARTIFACTS?: ArtifactsNamespace;
+  ARTIFACTS_ACCOUNT_ID?: string;
+  ARTIFACTS_NAMESPACE?: string;
+  ARTIFACTS_API_TOKEN?: string;
+  KEYS: DurableObjectNamespace<OysterKeys>;
+  WEBHOOKS: DurableObjectNamespace<OysterWebhooks>;
+}>;
+```
+
+Bindings the git adapters read from a standalone Oyster Worker.
+
+---
+
+### OysterKeySummary
+
+```ts
+type OysterKeySummary = Readonly<{
+  keyId: string;
+  name: string;
+  grants: readonly Grant<OysterKeyCapability>[];
+  expiresAt: number | null;
+  createdAt: number;
+  lastUsedAt: number | null;
+  revokedAt: number | null;
+}>;
+```
+
+One listed or issued key's owner-facing summary; never its secret or owner id.
+
+---
+
+### OysterGitWorkerEnv
+
+```ts
+type OysterGitWorkerEnv = OysterWorkerEnv &
+  OysterGitEnv &
+  Readonly<{
+    OYSTER_ORIGIN: string;
+    OYSTER_OWNER_NAME?: string;
+  }>;
+```
+
+A standalone Oyster Worker that also hosts git Apps.
+
+---
+
+### OysterGitWorkerOptions
+
+```ts
+type OysterGitWorkerOptions<Env> = Readonly<{
+  tenancy: (env) => OysterTenancy;
+  homeInstallationId?: (env) => string;
+  pageScript?: string;
+  agents?: (env, scope) => OysterAgents;
+  workspace?: (env, keysLive) => OysterWorkspace;
+  capabilities?: (env, workspace, keysLive) => readonly OysterCapability[];
+  workflowGitPass?: (
+    env,
+    scope,
+    pass,
+    target,
+  ) => Promise<Extract<
+    GitWriter,
+    {
+      kind: "actor";
+    }
+  > | null>;
+  buildGitPass?: (
+    env,
+    scope,
+    pass,
+    target,
+  ) => Promise<Extract<
+    GitWriter,
+    {
+      kind: "actor";
+    }
+  > | null>;
+  ownerRoutes?: (env, scope) => Hono<OysterEnv>;
+}>;
+```
+
+One deployable Git root's options. Every door (HTTP, MCP, Agents, Workflows,
+background wakes) composes its tenant host from this one value through
+`oysterGitRoot(options).hostFor`.
+
+#### Type Parameters
+
+| Type Parameter                                              |
+| ----------------------------------------------------------- |
+| `Env` _extends_ [`OysterGitWorkerEnv`](#oystergitworkerenv) |
+
+---
+
+### OysterGitWorkerHost
+
+```ts
+type OysterGitWorkerHost = OysterHost &
+  Readonly<{
+    git: OysterGitHost;
+  }>;
+```
+
+A tenant's whole Git host: the App server, `host.git` and the owner routes.
+
+---
+
+### OysterKeysLivePort
+
+```ts
+type OysterKeysLivePort = (keyId) => Promise<LiveOysterKey | null>;
+```
+
+`host.keys.live`'s own shape: the live facts behind a key id, re-checked against
+the tenant's current owner on every read; null for an unknown, revoked, expired,
+suspended key, or one a since-reassigned tenant's former owner held. The one
+path every caller -- the HTTP/MCP host, a workspace's own Computer admission --
+reaches a key's liveness through.
+
+#### Parameters
+
+| Parameter | Type     |
+| --------- | -------- |
+| `keyId`   | `string` |
+
+#### Returns
+
+`Promise`\<[`LiveOysterKey`](keys.md#liveoysterkey) \| `null`\>
+
+---
+
+### OysterGitRoot
+
+```ts
+type OysterGitRoot<Env> = Readonly<{
+  admit: Promise<Readonly<{
+    scope: TenantScope;
+    auth: OysterAuth;
+  }> | null>;
+  hostFor: OysterGitWorkerHost;
+}>;
+```
+
+The one composition root of a Git Worker; build it once from its options.
+
+#### Type Parameters
+
+| Type Parameter                                              |
+| ----------------------------------------------------------- |
+| `Env` _extends_ [`OysterGitWorkerEnv`](#oystergitworkerenv) |
+
+---
+
+### OysterWorkerGitOptions
+
+```ts
+type OysterWorkerGitOptions<Env> = Pick<
+  OysterGitWorkerOptions<Env>,
+  "workflowGitPass" | "buildGitPass"
+> &
+  Readonly<{
+    scope: TenantScope;
+  }>;
+```
+
+What `oysterWorkerGit` needs beyond the Worker's bindings.
+
+#### Type Parameters
+
+| Type Parameter                                              |
+| ----------------------------------------------------------- |
+| `Env` _extends_ [`OysterGitWorkerEnv`](#oystergitworkerenv) |
+
+---
+
+### OysterGitFrame
+
+```ts
+type OysterGitFrame = Readonly<{
+  invocation: InvocationFrame<OysterInvocationHost>;
+  store?: ArtifactsGit;
+}>;
+```
+
+One live guest frame's Git custody; never a guest argument.
+
+## Variables
+
+### eventsBinding
+
+```ts
+const eventsBinding: OysterBindingRow<OysterGitWorkerEnv>;
+```
+
+EVENTS: signed webhook delivery in this Instance's tenant namespace.
+
+---
+
+### gitBindings
+
+```ts
+const gitBindings: OysterBindingTable<OysterGitWorkerEnv>;
+```
+
+The plain host's bindings plus native GIT over Artifacts and signed EVENTS.
+
+## Functions
+
+### createArtifactsGit()
+
+```ts
+function createArtifactsGit(binding, prefix, grant): ArtifactsGit;
+```
+
+The GIT binding over Artifacts for one installation (`prefix` scopes its names).
+Credentials remain host-held and are reused until thirty seconds before the
+provider expiry or eight minutes, whichever comes first. Every operation still
+checks its captured grant. Provider 401/403 discards the credential for remint.
+
+#### Parameters
+
+| Parameter | Type                                                                                    |
+| --------- | --------------------------------------------------------------------------------------- |
+| `binding` | `ArtifactsNamespace`                                                                    |
+| `prefix`  | `string`                                                                                |
+| `grant`   | `Readonly`\<\{ `operations`: readonly `string`[]; `beforeProvider?`: () => `void`; \}\> |
+
+#### Returns
+
+[`ArtifactsGit`](#artifactsgit)
+
+---
+
+### artifactsOf()
+
+```ts
+function artifactsOf(env): ArtifactsNamespace;
+```
+
+The Artifacts namespace: the binding when present, else the REST API.
+
+#### Parameters
+
+| Parameter | Type                            |
+| --------- | ------------------------------- |
+| `env`     | [`OysterGitEnv`](#oystergitenv) |
+
+#### Returns
+
+`ArtifactsNamespace`
+
+---
+
+### gitAdminRoutes()
+
+```ts
+function gitAdminRoutes(env, scope): Hono<OysterEnv>;
+```
+
+Owner routes for keys and webhooks; `createOyster` mounts them owner-only.
+
+#### Parameters
+
+| Parameter | Type                                   |
+| --------- | -------------------------------------- |
+| `env`     | [`OysterGitEnv`](#oystergitenv)        |
+| `scope`   | [`TenantScope`](tenant.md#tenantscope) |
+
+#### Returns
+
+`Hono`\<[`OysterEnv`](host.md#oysterenv)\>
+
+---
+
+### oysterGitRoot()
+
+```ts
+function oysterGitRoot<Env>(options): OysterGitRoot<Env>;
+```
+
+Compose a Git Worker's root from its one options value.
+
+#### Type Parameters
+
+| Type Parameter                                              |
+| ----------------------------------------------------------- |
+| `Env` _extends_ [`OysterGitWorkerEnv`](#oystergitworkerenv) |
+
+#### Parameters
+
+| Parameter | Type                                                         |
+| --------- | ------------------------------------------------------------ |
+| `options` | [`OysterGitWorkerOptions`](#oystergitworkeroptions)\<`Env`\> |
+
+#### Returns
+
+[`OysterGitRoot`](#oystergitroot)\<`Env`\>
+
+---
+
+### ownerOrKeyTenancy()
+
+```ts
+function ownerOrKeyTenancy(env): OysterTenancy;
+```
+
+The single-owner root's tenancy: the owner key or a named key, at the configured
+origin only.
+
+#### Parameters
+
+| Parameter | Type                                        |
+| --------- | ------------------------------------------- |
+| `env`     | [`OysterGitWorkerEnv`](#oystergitworkerenv) |
+
+#### Returns
+
+[`OysterTenancy`](tenant.md#oystertenancy)
+
+---
+
+### createOysterGitWorker()
+
+```ts
+function createOysterGitWorker<Env>(root): ExportedHandler<Env>;
+```
+
+The standalone Worker's `fetch` handler with the git door and owner routes.
+
+#### Type Parameters
+
+| Type Parameter                                              |
+| ----------------------------------------------------------- |
+| `Env` _extends_ [`OysterGitWorkerEnv`](#oystergitworkerenv) |
+
+#### Parameters
+
+| Parameter | Type                                       |
+| --------- | ------------------------------------------ |
+| `root`    | [`OysterGitRoot`](#oystergitroot)\<`Env`\> |
+
+#### Returns
+
+`ExportedHandler`\<`Env`\>
+
+---
+
+### oysterWorkerGit()
+
+```ts
+function oysterWorkerGit<Env>(env, options, frame?): OysterGitHost;
+```
+
+`host.git` for an Oyster Worker: the git door's writer projection and the
+admitted, installation-scoped Artifacts path with the App's push policy and the
+Instance journal. Set it on your own `createOyster` host; the full standalone
+composition (`oysterGitWorkerHost`) uses this same builder.
+
+#### Type Parameters
+
+| Type Parameter                                              |
+| ----------------------------------------------------------- |
+| `Env` _extends_ [`OysterGitWorkerEnv`](#oystergitworkerenv) |
+
+#### Parameters
+
+| Parameter | Type                                                                                                                                                                                          |
+| --------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `env`     | `Env`                                                                                                                                                                                         |
+| `options` | [`OysterWorkerGitOptions`](#oysterworkergitoptions)\<`Env`\>                                                                                                                                  |
+| `frame?`  | `Readonly`\<\{ `invocation`: [`InvocationFrame`](invocation.md#invocationframe)\<[`OysterInvocationHost`](workers.md#oysterinvocationhost)\>; `store?`: [`ArtifactsGit`](#artifactsgit); \}\> |
+
+#### Returns
+
+[`OysterGitHost`](host.md#oystergithost)
+
+---
+
+### oysterGitWorkerHost()
+
+```ts
+function oysterGitWorkerHost<Env>(env, options, selected): OysterGitWorkerHost;
+```
+
+One selected tenant's whole host from a root's options. Roots reach it through
+`oysterGitRoot(options).hostFor`; a cold directory passes its own resolved
+tenant.
+
+#### Type Parameters
+
+| Type Parameter                                              |
+| ----------------------------------------------------------- |
+| `Env` _extends_ [`OysterGitWorkerEnv`](#oystergitworkerenv) |
+
+#### Parameters
+
+| Parameter  | Type                                                         |
+| ---------- | ------------------------------------------------------------ |
+| `env`      | `Env`                                                        |
+| `options`  | [`OysterGitWorkerOptions`](#oystergitworkeroptions)\<`Env`\> |
+| `selected` | [`ResolvedTenant`](tenant.md#resolvedtenant)                 |
+
+#### Returns
+
+[`OysterGitWorkerHost`](#oystergitworkerhost)
+
+---
+
+### createOysterGitMcpOwner()
+
+```ts
+function createOysterGitMcpOwner<Env>(root): (ctx, env) => OysterMcpOwner<Env>;
+```
+
+Deploy the MCP owner from the same root as createOysterGitWorker.
+
+#### Type Parameters
+
+| Type Parameter                                              |
+| ----------------------------------------------------------- |
+| `Env` _extends_ [`OysterGitWorkerEnv`](#oystergitworkerenv) |
+
+#### Parameters
+
+| Parameter | Type                                       |
+| --------- | ------------------------------------------ |
+| `root`    | [`OysterGitRoot`](#oystergitroot)\<`Env`\> |
+
+#### Returns
+
+(`ctx`, `env`) => [`OysterMcpOwner`](workers.md#oystermcpowner)\<`Env`\>