@fungi.computer/oyster 0.0.0-stage → 0.0.1

package/docs/api/workers.md

@@ -0,0 +1,1678 @@
+<!-- Generated by Botanical API docs (TypeDoc + typedoc-plugin-markdown). Do not edit. -->
+
+[**@fungi.computer/oyster**](README.md)
+
+---
+
+[@fungi.computer/oyster](modules.md) / workers
+
+# workers
+
+## Classes
+
+### OysterMcpOwner
+
+One tenant's live SDK transports; cold owners refuse old IDs without execution
+replay. The persisted origin is a lifetime pin. Changing the configured origin
+requires a fresh MCP namespace; an existing owner never retargets its retained
+pin.
+
+#### Extends
+
+- `DurableObject`\<`Env`\>
+
+#### Extended by
+
+- [`OysterMcp`](#oystermcp)
+
+#### Type Parameters
+
+| Type Parameter                                            | Default type                              |
+| --------------------------------------------------------- | ----------------------------------------- |
+| `Env` _extends_ [`OysterMcpOwnerEnv`](#oystermcpownerenv) | [`OysterMcpOwnerEnv`](#oystermcpownerenv) |
+
+#### Constructors
+
+##### Constructor
+
+```ts
+new OysterMcpOwner<Env>(
+   ctx,
+   env,
+   createHost
+): OysterMcpOwner<Env>;
+```
+
+###### Parameters
+
+| Parameter    | Type                                                   |
+| ------------ | ------------------------------------------------------ |
+| `ctx`        | `DurableObjectState`                                   |
+| `env`        | `Env`                                                  |
+| `createHost` | (`env`, `scope`) => [`OysterHost`](host.md#oysterhost) |
+
+###### Returns
+
+[`OysterMcpOwner`](#oystermcpowner)\<`Env`\>
+
+###### Overrides
+
+```ts
+DurableObject<Env>.constructor
+```
+
+#### Methods
+
+##### serve()
+
+```ts
+serve(request, tenant): Promise<Response>;
+```
+
+Trusted host RPC: the namespace and pin are never selected by guest headers.
+
+###### Parameters
+
+| Parameter | Type                                        |
+| --------- | ------------------------------------------- |
+| `request` | `Request`                                   |
+| `tenant`  | [`OysterMcpTenantPin`](#oystermcptenantpin) |
+
+###### Returns
+
+`Promise`\<`Response`\>
+
+---
+
+### OysterRegistry
+
+The installation registry: one SQLite-backed Durable Object per Oyster.
+
+#### Extends
+
+- `DurableObject`\<[`OysterWorkerEnv`](#oysterworkerenv)\>
+
+#### Constructors
+
+##### Constructor
+
+```ts
+new OysterRegistry(ctx, env): OysterRegistry;
+```
+
+###### Parameters
+
+| Parameter | Type                                  |
+| --------- | ------------------------------------- |
+| `ctx`     | `DurableObjectState`                  |
+| `env`     | [`OysterWorkerEnv`](#oysterworkerenv) |
+
+###### Returns
+
+[`OysterRegistry`](#oysterregistry)
+
+###### Overrides
+
+```ts
+DurableObject<OysterWorkerEnv>.constructor
+```
+
+#### Methods
+
+##### directory()
+
+```ts
+directory(): Promise<Readonly<{
+  apps: readonly object[];
+  roles: OysterRootRoles;
+  computer?: Readonly<{
+     computerId: string;
+     name: string;
+  }>;
+}>>;
+```
+
+Current desktop metadata; roles are the ADR's derived default, never Hub's
+stored choice.
+
+###### Returns
+
+`Promise`\<`Readonly`\<\{ `apps`: readonly `object`[]; `roles`:
+[`OysterRootRoles`](root-data.md#oysterrootroles); `computer?`: `Readonly`\<\{
+`computerId`: `string`; `name`: `string`; \}\>; \}\>\>
+
+##### storageRead()
+
+```ts
+storageRead(
+   installationId,
+   ownerId,
+   key
+): Promise<AppStorageResult<{
+  value: Json;
+  source: "team" | "member" | "none";
+  team:   | {
+     value: Json;
+     revision: number;
+   }
+     | null;
+  member:   | {
+     value: Json;
+     revision: number;
+   }
+     | null;
+  canWriteTeam: boolean;
+}>>;
+```
+
+Read one key for the authenticated root owner, under fresh App admission.
+
+###### Parameters
+
+| Parameter        | Type     |
+| ---------------- | -------- |
+| `installationId` | `string` |
+| `ownerId`        | `string` |
+| `key`            | `string` |
+
+###### Returns
+
+`Promise`\<`AppStorageResult`\<\{ `value`: `Json`; `source`: `"team"` \|
+`"member"` \| `"none"`; `team`: \| \{ `value`: `Json`; `revision`: `number`; \}
+\| `null`; `member`: \| \{ `value`: `Json`; `revision`: `number`; \} \| `null`;
+`canWriteTeam`: `boolean`; \}\>\>
+
+##### storageWrite()
+
+```ts
+storageWrite(
+   installationId,
+   ownerId,
+   input
+): Promise<AppStorageResult<{
+  revision: number;
+}>>;
+```
+
+Write one declared key for the authenticated root owner.
+
+###### Parameters
+
+| Parameter        | Type                                                                                                    |
+| ---------------- | ------------------------------------------------------------------------------------------------------- |
+| `installationId` | `string`                                                                                                |
+| `ownerId`        | `string`                                                                                                |
+| `input`          | \{ `value`: `Json`; `key`: `string`; `scope`: `"team"` \| `"member"`; `basedOn`: `number` \| `null`; \} |
+| `input.value`    | `Json`                                                                                                  |
+| `input.key`      | `string`                                                                                                |
+| `input.scope`    | `"team"` \| `"member"`                                                                                  |
+| `input.basedOn`  | `number` \| `null`                                                                                      |
+
+###### Returns
+
+`Promise`\<`AppStorageResult`\<\{ `revision`: `number`; \}\>\>
+
+##### storageReset()
+
+```ts
+storageReset(
+   installationId,
+   ownerId,
+   input
+): Promise<AppStorageResult<{
+  revision: number;
+}>>;
+```
+
+Reset one declared layer for the authenticated root owner.
+
+###### Parameters
+
+| Parameter        | Type                                                                                   |
+| ---------------- | -------------------------------------------------------------------------------------- |
+| `installationId` | `string`                                                                               |
+| `ownerId`        | `string`                                                                               |
+| `input`          | \{ `key`: `string`; `scope`: `"team"` \| `"member"`; `basedOn`: `number` \| `null`; \} |
+| `input.key`      | `string`                                                                               |
+| `input.scope`    | `"team"` \| `"member"`                                                                 |
+| `input.basedOn`  | `number` \| `null`                                                                     |
+
+###### Returns
+
+`Promise`\<`AppStorageResult`\<\{ `revision`: `number`; \}\>\>
+
+##### storageBackend()
+
+```ts
+storageBackend(
+   raw,
+   method,
+   args,
+   tenantId
+): Promise<OysterBindingResult>;
+```
+
+Storage for a live owner method frame; no guest-selected installation or member.
+
+###### Parameters
+
+| Parameter                        | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
+| -------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `raw`                            | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `selection`: \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}; `artifactDigest`: `Sha256Digest`; `subject`: \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}; `grants`: readonly `object`[]; `deadlineAt`: `number`; `ancestry`: readonly [`InstanceId`](index.md#instanceid)[]; \} |
+| `raw.instanceId`                 | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
+| `raw.selection`                  | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
+| `raw.selection.instanceId`       | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
+| `raw.selection.owner`            | \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
+| `raw.selection.owner.kind`       | `"installation"` \| `"deployment"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
+| `raw.selection.owner.id`         | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
+| `raw.selection.appId`            | `AppId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
+| `raw.selection.releaseId`        | `ReleaseId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
+| `raw.selection.authorityVersion` | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
+| `raw.artifactDigest`             | `Sha256Digest`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
+| `raw.subject`                    | \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
+| `raw.grants`                     | readonly `object`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
+| `raw.deadlineAt`                 | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
+| `raw.ancestry`                   | readonly [`InstanceId`](index.md#instanceid)[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
+| `method`                         | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
+| `args`                           | readonly `unknown`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
+| `tenantId`                       | `string` & `Brand`\<`"OysterTenantId"`\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
+
+###### Returns
+
+`Promise`\<[`OysterBindingResult`](#oysterbindingresult)\>
+
+##### storageEvents()
+
+```ts
+storageEvents(
+   installationId,
+   ownerId,
+   key
+): Promise<Response>;
+```
+
+Open the existing App-storage invalidation stream under fresh owner admission.
+
+###### Parameters
+
+| Parameter        | Type     |
+| ---------------- | -------- |
+| `installationId` | `string` |
+| `ownerId`        | `string` |
+| `key`            | `string` |
+
+###### Returns
+
+`Promise`\<`Response`\>
+
+##### list()
+
+```ts
+list(): Readonly<{
+  installationId: string;
+  instanceId: InstanceId | null;
+  appId: AppId;
+  release: {
+     releaseId: ReleaseId;
+     appId: AppId;
+     artifact: {
+        artifactRef: ArtifactRef;
+        artifactDigest: Sha256Digest;
+        provenance: {
+           sourceRevision: SourceRevision;
+           sourceTreeDigest: Sha256Digest;
+           buildRecipeDigest: Sha256Digest;
+        };
+     };
+  };
+  releasePin: "pinned" | "floating";
+  authorityVersion: number;
+  status: "enabled" | "disabled" | "deleted";
+  visibility: "private" | "public";
+  declaredOperationsDigest: Sha256Digest;
+  approvedGrants: readonly Readonly<{
+     capability:   | "agent.list"
+        | "agent.manage"
+        | "agent.rename"
+        | "agent.toolPolicy"
+        | "agent.read"
+        | "agent.send"
+        | "computer.list"
+        | "computer.readFile"
+        | "computer.writeFile"
+        | "computer.execute"
+        | "llm.generation"
+        | "media.generation"
+        | "games:servers"
+        | "git.repository"
+        | "apps.open"
+        | "apps.call"
+        | "app.storage"
+        | "app.events.emit"
+        | "team.workbenchHost"
+        | "marketplace.browse"
+        | "marketplace.purchase"
+        | "workflow.run"
+        | "workflow.publish"
+        | "workflow.arm"
+        | "world"
+        | "channels.read"
+        | "channels.personal.manage";
+     capabilityApproved: true;
+     operations: readonly string[];
+     resources:   | "tenant-scope"
+        | readonly Readonly<{
+        kind: string;
+        id: string;
+      }>[];
+  }>[];
+  approval:   | Readonly<{
+     by:   | {
+        kind: "member";
+        memberId: string;
+      }
+        | {
+        kind: "agent";
+        agentId: string;
+      }
+        | {
+        kind: "team-key";
+        keyId: string;
+      };
+     at: number;
+     authorityVersion: number;
+   }>
+     | null;
+  approvedAnonymousMethods: readonly Readonly<{
+     name: string;
+     digest: Sha256Digest;
+  }>[];
+  anonymousApproval:   | Readonly<{
+     by:   | {
+        kind: "member";
+        memberId: string;
+      }
+        | {
+        kind: "agent";
+        agentId: string;
+      }
+        | {
+        kind: "team-key";
+        keyId: string;
+      };
+     at: number;
+     authorityVersion: number;
+   }>
+     | null;
+}>[];
+```
+
+Every installation record.
+
+###### Returns
+
+`Readonly`\<\{ `installationId`: `string`; `instanceId`:
+[`InstanceId`](index.md#instanceid) \| `null`; `appId`: `AppId`; `release`: \{
+`releaseId`: `ReleaseId`; `appId`: `AppId`; `artifact`: \{ `artifactRef`:
+`ArtifactRef`; `artifactDigest`: `Sha256Digest`; `provenance`: \{
+`sourceRevision`: `SourceRevision`; `sourceTreeDigest`: `Sha256Digest`;
+`buildRecipeDigest`: `Sha256Digest`; \}; \}; \}; `releasePin`: `"pinned"` \|
+`"floating"`; `authorityVersion`: `number`; `status`: `"enabled"` \|
+`"disabled"` \| `"deleted"`; `visibility`: `"private"` \| `"public"`;
+`declaredOperationsDigest`: `Sha256Digest`; `approvedGrants`: readonly
+`Readonly`\<\{ `capability`: \| `"agent.list"` \| `"agent.manage"` \|
+`"agent.rename"` \| `"agent.toolPolicy"` \| `"agent.read"` \| `"agent.send"` \|
+`"computer.list"` \| `"computer.readFile"` \| `"computer.writeFile"` \|
+`"computer.execute"` \| `"llm.generation"` \| `"media.generation"` \|
+`"games:servers"` \| `"git.repository"` \| `"apps.open"` \| `"apps.call"` \|
+`"app.storage"` \| `"app.events.emit"` \| `"team.workbenchHost"` \|
+`"marketplace.browse"` \| `"marketplace.purchase"` \| `"workflow.run"` \|
+`"workflow.publish"` \| `"workflow.arm"` \| `"world"` \| `"channels.read"` \|
+`"channels.personal.manage"`; `capabilityApproved`: `true`; `operations`:
+readonly `string`[]; `resources`: \| `"tenant-scope"` \| readonly `Readonly`\<\{
+`kind`: `string`; `id`: `string`; \}\>[]; \}\>[]; `approval`: \| `Readonly`\<\{
+`by`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`:
+`"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`:
+`string`; \}; `at`: `number`; `authorityVersion`: `number`; \}\> \| `null`;
+`approvedAnonymousMethods`: readonly `Readonly`\<\{ `name`: `string`; `digest`:
+`Sha256Digest`; \}\>[]; `anonymousApproval`: \| `Readonly`\<\{ `by`: \| \{
+`kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`:
+`string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `at`: `number`;
+`authorityVersion`: `number`; \}\> \| `null`; \}\>[]
+
+##### get()
+
+```ts
+get(installationId):
+  | Readonly<{
+  installationId: string;
+  instanceId: InstanceId | null;
+  appId: AppId;
+  release: {
+     releaseId: ReleaseId;
+     appId: AppId;
+     artifact: {
+        artifactRef: ArtifactRef;
+        artifactDigest: Sha256Digest;
+        provenance: {
+           sourceRevision: SourceRevision;
+           sourceTreeDigest: Sha256Digest;
+           buildRecipeDigest: Sha256Digest;
+        };
+     };
+  };
+  releasePin: "pinned" | "floating";
+  authorityVersion: number;
+  status: "enabled" | "disabled" | "deleted";
+  visibility: "private" | "public";
+  declaredOperationsDigest: Sha256Digest;
+  approvedGrants: readonly Readonly<{
+     capability:   | "agent.list"
+        | "agent.manage"
+        | "agent.rename"
+        | "agent.toolPolicy"
+        | "agent.read"
+        | "agent.send"
+        | "computer.list"
+        | "computer.readFile"
+        | "computer.writeFile"
+        | "computer.execute"
+        | "llm.generation"
+        | "media.generation"
+        | "games:servers"
+        | "git.repository"
+        | "apps.open"
+        | "apps.call"
+        | "app.storage"
+        | "app.events.emit"
+        | "team.workbenchHost"
+        | "marketplace.browse"
+        | "marketplace.purchase"
+        | "workflow.run"
+        | "workflow.publish"
+        | "workflow.arm"
+        | "world"
+        | "channels.read"
+        | "channels.personal.manage";
+     capabilityApproved: true;
+     operations: readonly string[];
+     resources:   | "tenant-scope"
+        | readonly Readonly<{
+        kind: string;
+        id: string;
+      }>[];
+  }>[];
+  approval:   | Readonly<{
+     by:   | {
+        kind: "member";
+        memberId: string;
+      }
+        | {
+        kind: "agent";
+        agentId: string;
+      }
+        | {
+        kind: "team-key";
+        keyId: string;
+      };
+     at: number;
+     authorityVersion: number;
+   }>
+     | null;
+  approvedAnonymousMethods: readonly Readonly<{
+     name: string;
+     digest: Sha256Digest;
+  }>[];
+  anonymousApproval:   | Readonly<{
+     by:   | {
+        kind: "member";
+        memberId: string;
+      }
+        | {
+        kind: "agent";
+        agentId: string;
+      }
+        | {
+        kind: "team-key";
+        keyId: string;
+      };
+     at: number;
+     authorityVersion: number;
+   }>
+     | null;
+}>
+  | null;
+```
+
+One installation record, or `null`.
+
+###### Parameters
+
+| Parameter        | Type     |
+| ---------------- | -------- |
+| `installationId` | `string` |
+
+###### Returns
+
+\| `Readonly`\<\{ `installationId`: `string`; `instanceId`:
+[`InstanceId`](index.md#instanceid) \| `null`; `appId`: `AppId`; `release`: \{
+`releaseId`: `ReleaseId`; `appId`: `AppId`; `artifact`: \{ `artifactRef`:
+`ArtifactRef`; `artifactDigest`: `Sha256Digest`; `provenance`: \{
+`sourceRevision`: `SourceRevision`; `sourceTreeDigest`: `Sha256Digest`;
+`buildRecipeDigest`: `Sha256Digest`; \}; \}; \}; `releasePin`: `"pinned"` \|
+`"floating"`; `authorityVersion`: `number`; `status`: `"enabled"` \|
+`"disabled"` \| `"deleted"`; `visibility`: `"private"` \| `"public"`;
+`declaredOperationsDigest`: `Sha256Digest`; `approvedGrants`: readonly
+`Readonly`\<\{ `capability`: \| `"agent.list"` \| `"agent.manage"` \|
+`"agent.rename"` \| `"agent.toolPolicy"` \| `"agent.read"` \| `"agent.send"` \|
+`"computer.list"` \| `"computer.readFile"` \| `"computer.writeFile"` \|
+`"computer.execute"` \| `"llm.generation"` \| `"media.generation"` \|
+`"games:servers"` \| `"git.repository"` \| `"apps.open"` \| `"apps.call"` \|
+`"app.storage"` \| `"app.events.emit"` \| `"team.workbenchHost"` \|
+`"marketplace.browse"` \| `"marketplace.purchase"` \| `"workflow.run"` \|
+`"workflow.publish"` \| `"workflow.arm"` \| `"world"` \| `"channels.read"` \|
+`"channels.personal.manage"`; `capabilityApproved`: `true`; `operations`:
+readonly `string`[]; `resources`: \| `"tenant-scope"` \| readonly `Readonly`\<\{
+`kind`: `string`; `id`: `string`; \}\>[]; \}\>[]; `approval`: \| `Readonly`\<\{
+`by`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`:
+`"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`:
+`string`; \}; `at`: `number`; `authorityVersion`: `number`; \}\> \| `null`;
+`approvedAnonymousMethods`: readonly `Readonly`\<\{ `name`: `string`; `digest`:
+`Sha256Digest`; \}\>[]; `anonymousApproval`: \| `Readonly`\<\{ `by`: \| \{
+`kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`:
+`string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `at`: `number`;
+`authorityVersion`: `number`; \}\> \| `null`; \}\> \| `null`
+
+##### put()
+
+```ts
+put(installation, tenantId?): Promise<void>;
+```
+
+Create or replace one installation record.
+
+###### Parameters
+
+| Parameter      | Type                                     | Default value   |
+| -------------- | ---------------------------------------- | --------------- |
+| `installation` | [`Installation`](apps.md#installation)   | `undefined`     |
+| `tenantId`     | `string` & `Brand`\<`"OysterTenantId"`\> | `defaultTenant` |
+
+###### Returns
+
+`Promise`\<`void`\>
+
+##### compareAndPut()
+
+```ts
+compareAndPut(
+   installation,
+   expectedAuthorityVersion,
+   tenantId?
+): Promise<InstallationCommit>;
+```
+
+Native RPC returns a closed result; callers never classify a transported Error.
+
+###### Parameters
+
+| Parameter                  | Type                                     | Default value   |
+| -------------------------- | ---------------------------------------- | --------------- |
+| `installation`             | [`Installation`](apps.md#installation)   | `undefined`     |
+| `expectedAuthorityVersion` | `number`                                 | `undefined`     |
+| `tenantId`                 | `string` & `Brand`\<`"OysterTenantId"`\> | `defaultTenant` |
+
+###### Returns
+
+`Promise`\<[`InstallationCommit`](host.md#installationcommit)\>
+
+---
+
+### OysterBinding
+
+The plain Oyster Worker's guest binding entrypoint.
+
+#### Extends
+
+- `WorkerEntrypoint`\<`Readonly`\<\{ `OYSTER_OWNER_KEY`: `string`;
+  `OYSTER_OWNER_NAME?`: `string`; `AGENT_DIRECTORY?`: `Readonly`\<\{
+  `getByName`: `Readonly`\<\{ `readCreator`: `Promise`\<... \| ...\>; \}\>;
+  \}\>; `OYSTER_ORIGIN`: `string`; `MCP`:
+  `DurableObjectNamespace`\<[`OysterMcpOwner`](#oystermcpowner)\<`Readonly`\<\{
+  `LOADER`: `WorkerLoader`; \}\>\>\>; `RELEASES`: `R2Bucket`; `REGISTRY`:
+  `DurableObjectNamespace`\<[`OysterRegistry`](#oysterregistry)\>; `INSTANCES`:
+  `DurableObjectNamespace`\<[`OysterInstance`](#oysterinstance)\<`Readonly`\<\{
+  OYSTER\_OWNER\_KEY: string; OYSTER\_OWNER\_NAME?: string \| undefined;
+  AGENT\_DIRECTORY?: Readonly\<\{ getByName(name: string): Readonly\<\{
+  readCreator(agentId: string): Promise\<string \| null\>; \}\>; \}\> \|
+  undefined; ... 5 more ...; LOADER: WorkerLoader; \}\>\>\>; `LOADER`:
+  `WorkerLoader`; \}\>, `Readonly`\<\{ `instanceId`: `string`; `binding`: \|
+  `"BACKGROUND"` \| `"GIT"` \| `"EVENTS"` \| `"APPS"` \| `"WORKFLOWS"` \|
+  `"APP_STORAGE"` \| `"MEDIA"` \| `"COMPUTER"` \| `"INBOX"` \| `"AGENTS"`;
+  `frameId`: `string`; \}\>, `this`\>
+
+#### Constructors
+
+##### Constructor
+
+```ts
+new OysterBinding(ctx, env): OysterBinding;
+```
+
+###### Parameters
+
+| Parameter | Type               |
+| --------- | ------------------ |
+| `ctx`     | `ExecutionContext` |
+| `env`     | `Env`              |
+
+###### Returns
+
+[`OysterBinding`](#oysterbinding)
+
+###### Inherited from
+
+```ts
+oysterBindingEntrypoint(oysterBindings).constructor;
+```
+
+---
+
+### OysterInstance
+
+One App Instance: Oyster's lifecycle supervisor in this Durable Object's SQLite
+and the App backend in its `app` facet.
+
+#### Extends
+
+- `DurableObject`\<`Env`\>
+
+#### Extended by
+
+- [`OysterGitInstance`](workers-git.md#abstract-oystergitinstance)
+
+#### Type Parameters
+
+| Type Parameter                                        | Default type                          |
+| ----------------------------------------------------- | ------------------------------------- |
+| `Env` _extends_ [`OysterWorkerEnv`](#oysterworkerenv) | [`OysterWorkerEnv`](#oysterworkerenv) |
+
+#### Constructors
+
+##### Constructor
+
+```ts
+new OysterInstance<Env>(ctx, env): OysterInstance<Env>;
+```
+
+###### Parameters
+
+| Parameter | Type                 |
+| --------- | -------------------- |
+| `ctx`     | `DurableObjectState` |
+| `env`     | `Env`                |
+
+###### Returns
+
+[`OysterInstance`](#oysterinstance)\<`Env`\>
+
+###### Overrides
+
+```ts
+DurableObject<Env>.constructor
+```
+
+#### Methods
+
+##### bindingCall()
+
+```ts
+bindingCall(
+   raw,
+   method,
+   input
+): Promise<FrameBindingReply<OysterBindingResult>>;
+```
+
+Resolve each guest packet against its immutable frame before any host effect.
+
+###### Parameters
+
+| Parameter | Type                                                   |
+| --------- | ------------------------------------------------------ |
+| `raw`     | [`FrameBindingProps`](cloudflare.md#framebindingprops) |
+| `method`  | `string`                                               |
+| `input`   | readonly `unknown`[]                                   |
+
+###### Returns
+
+`Promise`\<[`FrameBindingReply`](cloudflare.md#framebindingreply)\<[`OysterBindingResult`](#oysterbindingresult)\>\>
+
+##### gitTip()
+
+```ts
+gitTip(
+   installationId,
+   repository,
+   ref,
+   tenantId?
+): Promise<string | null>;
+```
+
+Last provider-accepted ref recorded by this installation's journal.
+
+###### Parameters
+
+| Parameter        | Type                                     | Default value   |
+| ---------------- | ---------------------------------------- | --------------- |
+| `installationId` | `string`                                 | `undefined`     |
+| `repository`     | `string`                                 | `undefined`     |
+| `ref`            | `string`                                 | `undefined`     |
+| `tenantId`       | `string` & `Brand`\<`"OysterTenantId"`\> | `defaultTenant` |
+
+###### Returns
+
+`Promise`\<`string` \| `null`\>
+
+##### recordGitPush()
+
+```ts
+recordGitPush(
+   installationId,
+   fact,
+   tenantId?
+): Promise<"duplicate" | "recorded">;
+```
+
+Join accepted fact identity and Carrier delivery in one local transaction.
+
+###### Parameters
+
+| Parameter           | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | Default value   |
+| ------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------- |
+| `installationId`    | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  | `undefined`     |
+| `fact`              | \{ `repository`: `string`; `writer`: \| \{ `kind`: `"actor"`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `role?`: `"member"` \| `"owner"`; `workflow?`: \{ `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `branches`: `string`[]; `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; \}; \} \| \{ `kind`: `"installation"`; `installationId`: `string`; `onBehalfOf`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \} \| `null`; \}; `updates`: `object`[]; `unexplained?`: `object`[]; `eventId`: `string`; \} | `undefined`     |
+| `fact.repository`   | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  | `undefined`     |
+| `fact.writer`       | \| \{ `kind`: `"actor"`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `role?`: `"member"` \| `"owner"`; `workflow?`: \{ `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `branches`: `string`[]; `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; \}; \} \| \{ `kind`: `"installation"`; `installationId`: `string`; `onBehalfOf`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \} \| `null`; \}                                                                                                                  | `undefined`     |
+| `fact.updates`      | `object`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`     |
+| `fact.unexplained?` | `object`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`     |
+| `fact.eventId`      | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  | `undefined`     |
+| `tenantId`          | `string` & `Brand`\<`"OysterTenantId"`\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  | `defaultTenant` |
+
+###### Returns
+
+`Promise`\<`"duplicate"` \| `"recorded"`\>
+
+##### alarm()
+
+```ts
+alarm(): Promise<void>;
+```
+
+Carrier owns retries, dead letters and retained delivery receipts.
+
+###### Returns
+
+`Promise`\<`void`\>
+
+###### Overrides
+
+```ts
+DurableObject.alarm;
+```
+
+##### revoke()
+
+```ts
+revoke(
+   installationId,
+   runId?,
+   tenantId?
+): Promise<void>;
+```
+
+Installation changes end guest work; a Workflow cancel targets only its run.
+
+###### Parameters
+
+| Parameter        | Type                                     | Default value   |
+| ---------------- | ---------------------------------------- | --------------- |
+| `installationId` | `string`                                 | `undefined`     |
+| `runId?`         | `string`                                 | `undefined`     |
+| `tenantId?`      | `string` & `Brand`\<`"OysterTenantId"`\> | `defaultTenant` |
+
+###### Returns
+
+`Promise`\<`void`\>
+
+##### apply()
+
+```ts
+apply(
+   state,
+   release,
+   limits,
+   tenant
+): Promise<InstanceResult<{
+  instanceId: InstanceId;
+  owner: {
+     kind: "installation" | "deployment";
+     id: string;
+  };
+  appId: AppId;
+  releaseId: ReleaseId;
+  authorityVersion: number;
+  stateSchema: number | null;
+  desiredStatus: "enabled" | "disabled" | "deleted";
+  status: "disabled" | "deleted" | "active" | "deleting";
+}>>;
+```
+
+Remember `release`, then apply the owner state under the host's tenant pin.
+
+###### Parameters
+
+| Parameter                | Type                                                                                                                                                                                                                                                                 |
+| ------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `state`                  | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; `status`: `"enabled"` \| `"disabled"` \| `"deleted"`; \} |
+| `state.instanceId`       | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                  |
+| `state.owner`            | \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}                                                                                                                                                                                                    |
+| `state.owner.kind`       | `"installation"` \| `"deployment"`                                                                                                                                                                                                                                   |
+| `state.owner.id`         | `string`                                                                                                                                                                                                                                                             |
+| `state.appId`            | `AppId`                                                                                                                                                                                                                                                              |
+| `state.releaseId`        | `ReleaseId`                                                                                                                                                                                                                                                          |
+| `state.authorityVersion` | `number`                                                                                                                                                                                                                                                             |
+| `state.status`           | `"enabled"` \| `"disabled"` \| `"deleted"`                                                                                                                                                                                                                           |
+| `release`                | `Release`                                                                                                                                                                                                                                                            |
+| `limits`                 | \| `Readonly`\<\{ `cpuMs`: `number`; `subRequests`: `number`; \}\> \| `undefined`                                                                                                                                                                                    |
+| `tenant`                 | `Pick`\<[`TenantScope`](tenant.md#tenantscope), `"tenantId"` \| `"origin"`\>                                                                                                                                                                                         |
+
+###### Returns
+
+`Promise`\<[`InstanceResult`](host.md#instanceresult)\<\{ `instanceId`:
+[`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \|
+`"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`;
+`authorityVersion`: `number`; `stateSchema`: `number` \| `null`;
+`desiredStatus`: `"enabled"` \| `"disabled"` \| `"deleted"`; `status`:
+`"disabled"` \| `"deleted"` \| `"active"` \| `"deleting"`; \}\>\>
+
+##### backend()
+
+```ts
+backend(
+   facts,
+   request,
+   limits?,
+   tenantId?
+): Promise<Response>;
+```
+
+Forward an admitted HTTP request to the App backend.
+
+###### Parameters
+
+| Parameter                           | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | Default value           |
+| ----------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------- |
+| `facts`                             | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `selection`: \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}; `artifactDigest`: `Sha256Digest`; `subject`: \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}; `grants`: readonly `object`[]; `deadlineAt`: `number`; `ancestry`: readonly [`InstanceId`](index.md#instanceid)[]; \} | `undefined`             |
+| `facts.instanceId`                  | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `instanceIdSchema`      |
+| `facts.selection`                   | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `selectionSchema`       |
+| `facts.selection.instanceId?`       | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `instanceIdSchema`      |
+| `facts.selection.owner?`            | \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       | `ownerSchema`           |
+| `facts.selection.owner.kind?`       | `"installation"` \| `"deployment"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | `...`                   |
+| `facts.selection.owner.id?`         | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `Schema.NonEmptyString` |
+| `facts.selection.appId?`            | `AppId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | `appIdSchema`           |
+| `facts.selection.releaseId?`        | `ReleaseId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             | `releaseIdSchema`       |
+| `facts.selection.authorityVersion?` | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `...`                   |
+| `facts.artifactDigest?`             | `Sha256Digest`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `sha256DigestSchema`    |
+| `facts.subject?`                    | \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                        | `...`                   |
+| `facts.grants?`                     | readonly `object`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `grantsSchema`          |
+| `facts.deadlineAt?`                 | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `...`                   |
+| `facts.ancestry?`                   | readonly [`InstanceId`](index.md#instanceid)[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `...`                   |
+| `request?`                          | `Request`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               | `undefined`             |
+| `limits?`                           | `Readonly`\<\{ `cpuMs`: `number`; `subRequests`: `number`; \}\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         | `undefined`             |
+| `tenantId?`                         | `string` & `Brand`\<`"OysterTenantId"`\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `defaultTenant`         |
+
+###### Returns
+
+`Promise`\<`Response`\>
+
+##### onGitPush()
+
+```ts
+onGitPush(
+   facts,
+   fact,
+   limits?,
+   tenantId?
+): Promise<void>;
+```
+
+Deliver a Git push through the same selected-Instance admission as methods.
+
+###### Parameters
+
+| Parameter                           | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | Default value           |
+| ----------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------- |
+| `facts`                             | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `selection`: \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}; `artifactDigest`: `Sha256Digest`; `subject`: \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}; `grants`: readonly `object`[]; `deadlineAt`: `number`; `ancestry`: readonly [`InstanceId`](index.md#instanceid)[]; \} | `undefined`             |
+| `facts.instanceId`                  | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `instanceIdSchema`      |
+| `facts.selection`                   | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `selectionSchema`       |
+| `facts.selection.instanceId?`       | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `instanceIdSchema`      |
+| `facts.selection.owner?`            | \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       | `ownerSchema`           |
+| `facts.selection.owner.kind?`       | `"installation"` \| `"deployment"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | `...`                   |
+| `facts.selection.owner.id?`         | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `Schema.NonEmptyString` |
+| `facts.selection.appId?`            | `AppId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | `appIdSchema`           |
+| `facts.selection.releaseId?`        | `ReleaseId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             | `releaseIdSchema`       |
+| `facts.selection.authorityVersion?` | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `...`                   |
+| `facts.artifactDigest?`             | `Sha256Digest`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `sha256DigestSchema`    |
+| `facts.subject?`                    | \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                        | `...`                   |
+| `facts.grants?`                     | readonly `object`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `grantsSchema`          |
+| `facts.deadlineAt?`                 | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `...`                   |
+| `facts.ancestry?`                   | readonly [`InstanceId`](index.md#instanceid)[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `...`                   |
+| `fact?`                             | \{ `repository`: `string`; `writer`: \| \{ `kind`: `"actor"`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `role?`: `"member"` \| `"owner"`; `workflow?`: \{ `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `branches`: `string`[]; `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; \}; \} \| \{ `kind`: `"installation"`; `installationId`: `string`; `onBehalfOf`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \} \| `null`; \}; `updates`: `object`[]; `unexplained?`: `object`[]; `eventId`: `string`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               | `undefined`             |
+| `fact.repository?`                  | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `fact.writer?`                      | \| \{ `kind`: `"actor"`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `role?`: `"member"` \| `"owner"`; `workflow?`: \{ `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `branches`: `string`[]; `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; \}; \} \| \{ `kind`: `"installation"`; `installationId`: `string`; `onBehalfOf`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \} \| `null`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `fact.updates?`                     | `object`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | `undefined`             |
+| `fact.unexplained?`                 | `object`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | `undefined`             |
+| `fact.eventId?`                     | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `limits?`                           | `Readonly`\<\{ `cpuMs`: `number`; `subRequests`: `number`; \}\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         | `undefined`             |
+| `tenantId?`                         | `string` & `Brand`\<`"OysterTenantId"`\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `defaultTenant`         |
+
+###### Returns
+
+`Promise`\<`void`\>
+
+##### authorizeGitPush()
+
+```ts
+authorizeGitPush(
+   facts,
+   question,
+   limits?,
+   tenantId?
+): Promise<
+  | {
+  allowed: true;
+}
+  | {
+  allowed: false;
+  refused: object[];
+}>;
+```
+
+Ask the App's declared authorizer through the same frame-bound connection.
+
+###### Parameters
+
+| Parameter                              | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | Default value           |
+| -------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------- |
+| `facts`                                | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `selection`: \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}; `artifactDigest`: `Sha256Digest`; `subject`: \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}; `grants`: readonly `object`[]; `deadlineAt`: `number`; `ancestry`: readonly [`InstanceId`](index.md#instanceid)[]; \} | `undefined`             |
+| `facts.instanceId`                     | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `instanceIdSchema`      |
+| `facts.selection`                      | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `selectionSchema`       |
+| `facts.selection.instanceId?`          | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `instanceIdSchema`      |
+| `facts.selection.owner?`               | \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       | `ownerSchema`           |
+| `facts.selection.owner.kind?`          | `"installation"` \| `"deployment"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | `...`                   |
+| `facts.selection.owner.id?`            | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `Schema.NonEmptyString` |
+| `facts.selection.appId?`               | `AppId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | `appIdSchema`           |
+| `facts.selection.releaseId?`           | `ReleaseId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             | `releaseIdSchema`       |
+| `facts.selection.authorityVersion?`    | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `...`                   |
+| `facts.artifactDigest?`                | `Sha256Digest`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `sha256DigestSchema`    |
+| `facts.subject?`                       | \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                        | `...`                   |
+| `facts.grants?`                        | readonly `object`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `grantsSchema`          |
+| `facts.deadlineAt?`                    | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `...`                   |
+| `facts.ancestry?`                      | readonly [`InstanceId`](index.md#instanceid)[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `...`                   |
+| `question?`                            | \{ `repository`: `string`; `writer`: \{ `kind`: `"actor"`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `role?`: `"member"` \| `"owner"`; `workflow?`: \{ `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `branches`: `string`[]; `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; \}; \}; `updates`: `object`[]; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | `undefined`             |
+| `question.repository?`                 | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `question.writer?`                     | \{ `kind`: `"actor"`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `role?`: `"member"` \| `"owner"`; `workflow?`: \{ `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `branches`: `string`[]; `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; \}; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | `undefined`             |
+| `question.writer.kind?`                | `"actor"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               | `undefined`             |
+| `question.writer.actor?`               | \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   | `undefined`             |
+| `question.writer.role?`                | `"member"` \| `"owner"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | `undefined`             |
+| `question.writer.workflow?`            | \{ `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `branches`: `string`[]; `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `undefined`             |
+| `question.writer.workflow.armedBy?`    | \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   | `undefined`             |
+| `question.writer.workflow.branches?`   | `string`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | `undefined`             |
+| `question.writer.workflow.workflowId?` | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `question.writer.workflow.runId?`      | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `question.writer.workflow.nodeId?`     | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `question.updates?`                    | `object`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | `undefined`             |
+| `limits?`                              | `Readonly`\<\{ `cpuMs`: `number`; `subRequests`: `number`; \}\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         | `undefined`             |
+| `tenantId?`                            | `string` & `Brand`\<`"OysterTenantId"`\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `defaultTenant`         |
+
+###### Returns
+
+`Promise`\< \| \{ `allowed`: `true`; \} \| \{ `allowed`: `false`; `refused`:
+`object`[]; \}\>
+
+##### syncRefused()
+
+```ts
+syncRefused(
+   facts,
+   refusal,
+   limits?,
+   tenantId?
+): Promise<void>;
+```
+
+An available lane settles a refusal under an active frame with no binding
+grants.
+
+###### Parameters
+
+| Parameter                           | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | Default value           |
+| ----------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------- |
+| `facts`                             | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `selection`: \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}; `artifactDigest`: `Sha256Digest`; `subject`: \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}; `grants`: readonly `object`[]; `deadlineAt`: `number`; `ancestry`: readonly [`InstanceId`](index.md#instanceid)[]; \} | `undefined`             |
+| `facts.instanceId`                  | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `instanceIdSchema`      |
+| `facts.selection`                   | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `selectionSchema`       |
+| `facts.selection.instanceId?`       | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `instanceIdSchema`      |
+| `facts.selection.owner?`            | \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       | `ownerSchema`           |
+| `facts.selection.owner.kind?`       | `"installation"` \| `"deployment"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | `...`                   |
+| `facts.selection.owner.id?`         | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `Schema.NonEmptyString` |
+| `facts.selection.appId?`            | `AppId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | `appIdSchema`           |
+| `facts.selection.releaseId?`        | `ReleaseId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             | `releaseIdSchema`       |
+| `facts.selection.authorityVersion?` | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `...`                   |
+| `facts.artifactDigest?`             | `Sha256Digest`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `sha256DigestSchema`    |
+| `facts.subject?`                    | \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                        | `...`                   |
+| `facts.grants?`                     | readonly `object`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `grantsSchema`          |
+| `facts.deadlineAt?`                 | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `...`                   |
+| `facts.ancestry?`                   | readonly [`InstanceId`](index.md#instanceid)[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `...`                   |
+| `refusal?`                          | \{ `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `undefined`             |
+| `refusal.lane?`                     | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `refusal.code?`                     | `"access_changed"` \| `"installation_unavailable"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | `undefined`             |
+| `limits?`                           | `Readonly`\<\{ `cpuMs`: `number`; `subRequests`: `number`; \}\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         | `undefined`             |
+| `tenantId?`                         | `string` & `Brand`\<`"OysterTenantId"`\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `defaultTenant`         |
+
+###### Returns
+
+`Promise`\<`void`\>
+
+##### gill()
+
+```ts
+gill(
+   facts,
+   _api,
+   source,
+   input,
+   limits?,
+   tenantId?
+): Promise<InstanceResult<
+  | {
+  viewId: string;
+  title: string;
+  state: "empty";
+  rows: readonly [];
+  next?: string;
+}
+  | {
+  viewId: string;
+  title: string;
+  state: "error";
+  rows: readonly [];
+  reason?: "exec_isolation_required" | "params_required";
+  error: string;
+  recovery?:   | {
+     kind: "configure";
+     param: string;
+   }
+     | {
+     kind: "open";
+   };
+}
+  | {
+  viewId: string;
+  title: string;
+  state: "full";
+  rows: readonly object[];
+  next?: string;
+}
+  | {
+  options: readonly object[];
+  next?: string;
+}>>;
+```
+
+Invoke a Release-declared Gill in a fresh immutable frame.
+
+###### Parameters
+
+| Parameter                           | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | Default value           |
+| ----------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------- |
+| `facts`                             | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `selection`: \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}; `artifactDigest`: `Sha256Digest`; `subject`: \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}; `grants`: readonly `object`[]; `deadlineAt`: `number`; `ancestry`: readonly [`InstanceId`](index.md#instanceid)[]; \} | `undefined`             |
+| `facts.instanceId`                  | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `instanceIdSchema`      |
+| `facts.selection`                   | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `selectionSchema`       |
+| `facts.selection.instanceId`        | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `instanceIdSchema`      |
+| `facts.selection.owner`             | \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       | `ownerSchema`           |
+| `facts.selection.owner.kind?`       | `"installation"` \| `"deployment"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | `...`                   |
+| `facts.selection.owner.id?`         | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `Schema.NonEmptyString` |
+| `facts.selection.appId?`            | `AppId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | `appIdSchema`           |
+| `facts.selection.releaseId?`        | `ReleaseId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             | `releaseIdSchema`       |
+| `facts.selection.authorityVersion?` | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `...`                   |
+| `facts.artifactDigest?`             | `Sha256Digest`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `sha256DigestSchema`    |
+| `facts.subject?`                    | \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                        | `...`                   |
+| `facts.grants?`                     | readonly `object`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `grantsSchema`          |
+| `facts.deadlineAt?`                 | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `...`                   |
+| `facts.ancestry?`                   | readonly [`InstanceId`](index.md#instanceid)[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `...`                   |
+| `_api?`                             | `AppApi`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `source?`                           | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `input?`                            | \{ `id`: `string`; `params?`: \{ \[`key`: `string`\]: `string`; \}; `after?`: `string`; `options?`: `string`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        | `undefined`             |
+| `input.id?`                         | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `input.params?`                     | \{ \[`key`: `string`\]: `string`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | `undefined`             |
+| `input.after?`                      | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `input.options?`                    | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `limits?`                           | `Readonly`\<\{ `cpuMs`: `number`; `subRequests`: `number`; \}\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         | `undefined`             |
+| `tenantId?`                         | `string` & `Brand`\<`"OysterTenantId"`\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `defaultTenant`         |
+
+###### Returns
+
+`Promise`\<[`InstanceResult`](host.md#instanceresult)\< \| \{ `viewId`:
+`string`; `title`: `string`; `state`: `"empty"`; `rows`: readonly \[\]; `next?`:
+`string`; \} \| \{ `viewId`: `string`; `title`: `string`; `state`: `"error"`;
+`rows`: readonly \[\]; `reason?`: `"exec_isolation_required"` \|
+`"params_required"`; `error`: `string`; `recovery?`: \| \{ `kind`:
+`"configure"`; `param`: `string`; \} \| \{ `kind`: `"open"`; \}; \} \| \{
+`viewId`: `string`; `title`: `string`; `state`: `"full"`; `rows`: readonly
+`object`[]; `next?`: `string`; \} \| \{ `options`: readonly `object`[]; `next?`:
+`string`; \}\>\>
+
+##### call()
+
+```ts
+call(
+   facts,
+   _api,
+   name,
+   input,
+   limits?,
+   tenantId?
+): Promise<InstanceResult<Json>>;
+```
+
+Invoke one declared App method; the value is its AppMethodReply wire, which the
+host handle decodes.
+
+###### Parameters
+
+| Parameter                           | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | Default value           |
+| ----------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------- |
+| `facts`                             | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `selection`: \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}; `artifactDigest`: `Sha256Digest`; `subject`: \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}; `grants`: readonly `object`[]; `deadlineAt`: `number`; `ancestry`: readonly [`InstanceId`](index.md#instanceid)[]; \} | `undefined`             |
+| `facts.instanceId`                  | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `instanceIdSchema`      |
+| `facts.selection`                   | \{ `instanceId`: [`InstanceId`](index.md#instanceid); `owner`: \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}; `appId`: `AppId`; `releaseId`: `ReleaseId`; `authorityVersion`: `number`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `selectionSchema`       |
+| `facts.selection.instanceId`        | [`InstanceId`](index.md#instanceid)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `instanceIdSchema`      |
+| `facts.selection.owner`             | \{ `kind`: `"installation"` \| `"deployment"`; `id`: `string`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       | `ownerSchema`           |
+| `facts.selection.owner.kind?`       | `"installation"` \| `"deployment"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | `...`                   |
+| `facts.selection.owner.id?`         | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `Schema.NonEmptyString` |
+| `facts.selection.appId?`            | `AppId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | `appIdSchema`           |
+| `facts.selection.releaseId?`        | `ReleaseId`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             | `releaseIdSchema`       |
+| `facts.selection.authorityVersion?` | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `...`                   |
+| `facts.artifactDigest?`             | `Sha256Digest`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `sha256DigestSchema`    |
+| `facts.subject?`                    | \| \{ `kind`: `"call"`; `context`: \{ `computerId`: `string` \| `null`; `actor`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `backgroundLane?`: `string`; `backgroundOrigin?`: \{ `method`: `string`; `seal`: `string`; \}; `role?`: `"member"` \| `"owner"`; `soleMember?`: `true`; `workflow?`: \{ `workflowId`: `string`; `runId`: `string`; `nodeId`: `string`; `armedBy`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; \}; `idempotencyKey?`: `string`; \}; `sessionId?`: `string`; `agentPolicy?`: \{ `policyRevision`: `string`; `grantorMemberId`: `string`; \}; `method?`: \{ `name`: `string`; `effect`: `"read"` \| `"write"` \| `"external"`; \}; `replay?`: \{ `lane`: `string`; `epoch`: `number`; `admitted`: readonly `string`[]; \}; \} \| \{ `kind`: `"lifecycle"`; `name`: `"onGitPush"`; `eventId`: `string`; \} \| \{ `kind`: `"lifecycle"`; `name`: `"syncRefused"`; `lane`: `string`; `code`: `"access_changed"` \| `"installation_unavailable"`; \}                                                                                                                                                                                                                                                                                                                                                                                                                                                        | `...`                   |
+| `facts.grants?`                     | readonly `object`[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `grantsSchema`          |
+| `facts.deadlineAt?`                 | `number`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `...`                   |
+| `facts.ancestry?`                   | readonly [`InstanceId`](index.md#instanceid)[]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `...`                   |
+| `_api?`                             | `AppApi`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `name?`                             | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `undefined`             |
+| `input?`                            | `Json`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  | `undefined`             |
+| `limits?`                           | `Readonly`\<\{ `cpuMs`: `number`; `subRequests`: `number`; \}\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         | `undefined`             |
+| `tenantId?`                         | `string` & `Brand`\<`"OysterTenantId"`\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | `defaultTenant`         |
+
+###### Returns
+
+`Promise`\<[`InstanceResult`](host.md#instanceresult)\<`Json`\>\>
+
+---
+
+### OysterMcp
+
+The non-git standalone root's MCP owner.
+
+#### Extends
+
+- [`OysterMcpOwner`](#oystermcpowner)\<`Readonly`\<\{ `OYSTER_OWNER_KEY`:
+  `string`; `OYSTER_OWNER_NAME?`: `string`; `AGENT_DIRECTORY?`: `Readonly`\<\{
+  `getByName`: `Readonly`\<\{ `readCreator`: `Promise`\<... \| ...\>; \}\>;
+  \}\>; `OYSTER_ORIGIN`: `string`; `MCP`:
+  `DurableObjectNamespace`\<[`OysterMcpOwner`](#oystermcpowner)\<`Readonly`\<\{
+  `LOADER`: `WorkerLoader`; \}\>\>\>; `RELEASES`: `R2Bucket`; `REGISTRY`:
+  `DurableObjectNamespace`\<[`OysterRegistry`](#oysterregistry)\>; `INSTANCES`:
+  `DurableObjectNamespace`\<[`OysterInstance`](#oysterinstance)\<`Readonly`\<\{
+  OYSTER\_OWNER\_KEY: string; OYSTER\_OWNER\_NAME?: string \| undefined;
+  AGENT\_DIRECTORY?: Readonly\<\{ getByName(name: string): Readonly\<\{
+  readCreator(agentId: string): Promise\<string \| null\>; \}\>; \}\> \|
+  undefined; ... 5 more ...; LOADER: WorkerLoader; \}\>\>\>; `LOADER`:
+  `WorkerLoader`; \}\>, `this`\>
+
+#### Constructors
+
+##### Constructor
+
+```ts
+new OysterMcp(ctx, env): OysterMcp;
+```
+
+###### Parameters
+
+| Parameter | Type                 |
+| --------- | -------------------- |
+| `ctx`     | `DurableObjectState` |
+| `env`     | `Env`                |
+
+###### Returns
+
+[`OysterMcp`](#oystermcp)
+
+###### Inherited from
+
+[`OysterMcpOwner`](#oystermcpowner).[`constructor`](#constructor)
+
+#### Methods
+
+##### serve()
+
+```ts
+serve(request, tenant): Promise<Response>;
+```
+
+Trusted host RPC: the namespace and pin are never selected by guest headers.
+
+###### Parameters
+
+| Parameter | Type                                        |
+| --------- | ------------------------------------------- |
+| `request` | `Request`                                   |
+| `tenant`  | [`OysterMcpTenantPin`](#oystermcptenantpin) |
+
+###### Returns
+
+`Promise`\<`Response`\>
+
+###### Inherited from
+
+[`OysterMcpOwner`](#oystermcpowner).[`serve`](#serve)
+
+## Type Aliases
+
+### OysterMcpOwnerEnv
+
+```ts
+type OysterMcpOwnerEnv = Readonly<{
+  LOADER: WorkerLoader;
+}>;
+```
+
+Worker Loader used by the existing Mycelium sandbox.
+
+---
+
+### OysterMcpTenantPin
+
+```ts
+type OysterMcpTenantPin = Readonly<{
+  tenantId: string;
+  origin: string;
+}>;
+```
+
+Serialized trusted tenant pin supplied by the selected host.
+
+---
+
+### OysterBindingResult
+
+```ts
+type OysterBindingResult =
+  Awaited<ReturnType<GitBinding[keyof GitBinding]>> | Schema.Json | undefined;
+```
+
+Native values returned by the standalone Git, event and JSON binding owners.
+
+---
+
+### OysterInvocationHost
+
+```ts
+type OysterInvocationHost = BackgroundFrameState &
+  Readonly<{
+    artifact: Backend;
+    declaration: AppDeclaration | null;
+    method?: Readonly<{
+      name: string;
+    }>;
+  }>;
+```
+
+Verified backend custody is captured in the frame, never in a current-context
+field.
+
+---
+
+### OysterStorageAgentDirectory
+
+```ts
+type OysterStorageAgentDirectory = Readonly<{
+  getByName: Readonly<{
+    readCreator: Promise<string | null>;
+  }>;
+}>;
+```
+
+Existing fleet directory owner records, resolved by the host rather than App
+input.
+
+---
+
+### OysterWorkerEnv
+
+```ts
+type OysterWorkerEnv = Readonly<{
+  OYSTER_OWNER_KEY: string;
+  OYSTER_OWNER_NAME?: string;
+  AGENT_DIRECTORY?: OysterStorageAgentDirectory;
+  OYSTER_ORIGIN: string;
+  MCP: DurableObjectNamespace<OysterMcpOwner>;
+  RELEASES: R2Bucket;
+  REGISTRY: DurableObjectNamespace<OysterRegistry>;
+  INSTANCES: DurableObjectNamespace<OysterInstance>;
+  LOADER: WorkerLoader;
+}>;
+```
+
+Bindings a standalone Oyster Worker declares in its Wrangler config.
+
+---
+
+### OysterBindingContext
+
+```ts
+type OysterBindingContext<Env> = Readonly<{
+  env: Env;
+  scope: TenantScope;
+  backgroundHost: Promise<
+     | Readonly<{
+     auth: OysterAuth;
+     backgroundOriginKey?: () => Promise<CryptoKey>;
+     artifacts: ArtifactStore;
+     installations: InstallationStore;
+     instances: InstanceDirectory;
+     computerId?: string;
+     computer?: (principal) => KnapsackComputer | null | Promise<KnapsackComputer | null>;
+     appToolPolicy?: (actor) =>
+        | AppToolPolicy
+        | null
+       | Promise<AppToolPolicy | null>;
+     keys?: Readonly<{
+        live: Promise<Readonly<...> | null>;
+     }>;
+     guestLimits?: Partial<GuestLimits>;
+     mcp?: OysterMcp;
+     git?: OysterGitHost;
+     ownerRoutes?: Hono<OysterEnv>;
+     capabilities?: readonly OysterCapability[];
+     workbench?: Readonly<{
+        directory: Promise<Readonly<{
+           apps: ...;
+           roles: ...;
+           computer?: ...;
+        }>>;
+        storage: Pick<AppStorageWire, ... | ... | ...> & Readonly<{
+           events: ...;
+        }>;
+     }>;
+     homeInstallationId?: string;
+     pageScript?: string;
+     title?: string;
+   }>
+    | null>;
+}>;
+```
+
+What a binding row may read from the Instance that owns the frame.
+
+#### Type Parameters
+
+| Type Parameter |
+| -------------- |
+| `Env`          |
+
+---
+
+### OysterBindingRow
+
+```ts
+type OysterBindingRow<Env> = Readonly<{
+  methods: Readonly<Record<string, FrameBindingMethod<OysterBindingResult>>>;
+  dispatch: Promise<OysterBindingResult>;
+}>;
+```
+
+One guest binding: the frame codecs both sides of the RPC share, and the host
+owner that serves a decoded, granted packet under its captured frame.
+
+#### Type Parameters
+
+| Type Parameter |
+| -------------- |
+| `Env`          |
+
+---
+
+### OysterBindingTable
+
+```ts
+type OysterBindingTable<Env> = Readonly<{
+  APP_STORAGE?: OysterBindingRow<Env>;
+  APPS?: OysterBindingRow<Env>;
+  BACKGROUND?: OysterBindingRow<Env>;
+  GIT?: OysterBindingRow<Env>;
+  EVENTS?: OysterBindingRow<Env>;
+  INBOX?: OysterBindingRow<Env>;
+  AGENTS?: OysterBindingRow<Env>;
+  COMPUTER?: OysterBindingRow<Env>;
+  MEDIA?: OysterBindingRow<Env>;
+  WORKFLOWS?: OysterBindingRow<Env>;
+}>;
+```
+
+The bindings an Instance serves, keyed by the closed App binding vocabulary; a
+missing row is `binding_unavailable`.
+
+#### Type Parameters
+
+| Type Parameter |
+| -------------- |
+| `Env`          |
+
+---
+
+### OysterWorkspace
+
+```ts
+type OysterWorkspace = Readonly<{
+  computerId: string;
+  files: FileSource;
+  computer?: OysterHost["computer"];
+}>;
+```
+
+One host-selected workspace shared by App context and capability adapters.
+
+## Variables
+
+### oysterBindings
+
+```ts
+const oysterBindings: OysterBindingTable<OysterWorkerEnv>;
+```
+
+The plain Oyster host's bindings: App storage, the read-only catalog and replay
+admission.
+
+## Functions
+
+### createOysterMcpOwner()
+
+```ts
+function createOysterMcpOwner<Env>(host): (ctx, env) => OysterMcpOwner<Env>;
+```
+
+Bind the owner to the deployment's existing host factory and options.
+
+#### Type Parameters
+
+| Type Parameter                                                |
+| ------------------------------------------------------------- |
+| `Env` _extends_ `Readonly`\<\{ `LOADER`: `WorkerLoader`; \}\> |
+
+#### Parameters
+
+| Parameter | Type                                                   |
+| --------- | ------------------------------------------------------ |
+| `host`    | (`env`, `scope`) => [`OysterHost`](host.md#oysterhost) |
+
+#### Returns
+
+(`ctx`, `env`) => [`OysterMcpOwner`](#oystermcpowner)\<`Env`\>
+
+---
+
+### r2FileSource()
+
+```ts
+function r2FileSource(bucket, prefix): FileSource;
+```
+
+Files in an R2 bucket under `prefix` (one workspace per prefix).
+
+#### Parameters
+
+| Parameter | Type       |
+| --------- | ---------- |
+| `bucket`  | `R2Bucket` |
+| `prefix`  | `string`   |
+
+#### Returns
+
+[`FileSource`](files.md#filesource)
+
+---
+
+### r2ArtifactStore()
+
+```ts
+function r2ArtifactStore(bucket): ArtifactStore;
+```
+
+Store Release artifacts in an R2 bucket.
+
+#### Parameters
+
+| Parameter | Type       |
+| --------- | ---------- |
+| `bucket`  | `R2Bucket` |
+
+#### Returns
+
+[`ArtifactStore`](host.md#artifactstore)
+
+---
+
+### oysterBindingEntrypoint()
+
+```ts
+function oysterBindingEntrypoint<Env>(table): typeof WorkerEntrypoint;
+```
+
+The one guest binding entrypoint over `table`. Every binding in a frame is this
+export with its own props; each packet returns to its originating Instance,
+which serves it from the same table.
+
+#### Type Parameters
+
+| Type Parameter                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
+| ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `Env` _extends_ `Readonly`\<\{ `OYSTER_OWNER_KEY`: `string`; `OYSTER_OWNER_NAME?`: `string`; `AGENT_DIRECTORY?`: `Readonly`\<\{ `getByName`: `Readonly`\<\{ `readCreator`: `Promise`\<`string` \| `null`\>; \}\>; \}\>; `OYSTER_ORIGIN`: `string`; `MCP`: `DurableObjectNamespace`\<[`OysterMcpOwner`](#oystermcpowner)\<`Readonly`\<\{ `LOADER`: `WorkerLoader`; \}\>\>\>; `RELEASES`: `R2Bucket`; `REGISTRY`: `DurableObjectNamespace`\<[`OysterRegistry`](#oysterregistry)\>; `INSTANCES`: `DurableObjectNamespace`\<[`OysterInstance`](#oysterinstance)\<`Readonly`\<\{ OYSTER\_OWNER\_KEY: string; OYSTER\_OWNER\_NAME?: string \| undefined; AGENT\_DIRECTORY?: Readonly\<\{ getByName(name: string): Readonly\<\{ readCreator(agentId: string): Promise\<string \| null\>; \}\>; \}\> \| undefined; ... 5 more ...; LOADER: WorkerLoader; \}\>\>\>; `LOADER`: `WorkerLoader`; \}\> |
+
+#### Parameters
+
+| Parameter | Type                                                 |
+| --------- | ---------------------------------------------------- |
+| `table`   | [`OysterBindingTable`](#oysterbindingtable)\<`Env`\> |
+
+#### Returns
+
+_typeof_ `WorkerEntrypoint`
+
+---
+
+### oysterWorkerHost()
+
+```ts
+function oysterWorkerHost(env, auth, options?): OysterHost;
+```
+
+Host adapters for a standalone Oyster Worker over its own bindings.
+
+#### Parameters
+
+| Parameter | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
+| --------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `env`     | [`OysterWorkerEnv`](#oysterworkerenv)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
+| `auth`    | [`OysterAuth`](host.md#oysterauth)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
+| `options` | `Pick`\<`Readonly`\<\{ `auth`: [`OysterAuth`](host.md#oysterauth); `backgroundOriginKey?`: () => `Promise`\<`CryptoKey`\>; `artifacts`: [`ArtifactStore`](host.md#artifactstore); `installations`: [`InstallationStore`](host.md#installationstore); `instances`: [`InstanceDirectory`](host.md#instancedirectory); `computerId?`: `string`; `computer?`: (`principal`) => \| `Readonly`\<\{ `getCapabilities`: (`signal`) => `Promise`\<...\>; `call`: (`capabilityId`, `input`, `context`) => `Promise`\<...\>; \}\> \| `Promise`\< \| `Readonly`\<\{ `getCapabilities`: ...; `call`: ...; \}\> \| `null`\> \| `null`; `appToolPolicy?`: (`actor`) => \| \{ `level`: `"read"` \| `"write"`; `revision`: `string`; `grantedBy`: `string`; \} \| `Promise`\< \| \{ `level`: ... \| ...; `revision`: `string`; `grantedBy`: `string`; \} \| `null`\> \| `null`; `keys?`: `Readonly`\<\{ `live`: `Promise`\< \| `Readonly`\<\{ `keyId`: ...; `owner`: ...; `grantVersion`: ...; `grants`: ...; \}\> \| `null`\>; \}\>; `guestLimits?`: `Partial`\<`Readonly`\<\{ `cpuMs`: `number`; `subRequests`: `number`; \}\>\>; `mcp?`: `Readonly`\<\{ `handleRequest`: (`request`) => `Promise`\<`Response`\>; `close?`: () => `Promise`\<`void`\>; \}\>; `git?`: `Readonly`\<\{ `writerOf`: `Extract`\<`GitWriter`, \{ `kind`: `"actor"`; \}\>; `workflowPass?`: `Promise`\< \| `Readonly`\<\{ `kind`: ...; `actor`: ...; `role?`: ...; `workflow?`: ...; \}\> \| `null`\>; `buildPass?`: `Promise`\< \| `Readonly`\<\{ `kind`: ...; `actor`: ...; `role?`: ...; `workflow?`: ...; \}\> \| `null`\>; `git`: `Promise`\<`Readonly`\<\{ `push`: `Promise`\<...\>; `read`: `Promise`\<...\>; `binding`: `GitBinding`; \}\>\>; \}\>; `ownerRoutes?`: `Hono`\<[`OysterEnv`](host.md#oysterenv), `BlankSchema`, `"/"`\>; `capabilities?`: readonly `Readonly`\<`object` & `object`\>[]; `workbench?`: `Readonly`\<\{ `directory`: `Promise`\<`Readonly`\<\{ `apps`: readonly ...[]; `roles`: [`OysterRootRoles`](root-data.md#oysterrootroles); `computer?`: ... \| ...; \}\>\>; `storage`: `Pick`\<`AppStorageWire`, `"read"` \| `"write"` \| `"reset"`\> & `Readonly`\<\{ `events`: `Promise`\<...\>; \}\>; \}\>; `homeInstallationId?`: `string`; `pageScript?`: `string`; `title?`: `string`; \}\>, `"appToolPolicy"` \| `"guestLimits"`\> & `Readonly`\<\{ `workspace?`: `Readonly`\<\{ `computerId`: `string`; `files`: [`FileSource`](files.md#filesource); `computer?`: (`principal`) => \| `Readonly`\<\{ `getCapabilities`: ...; `call`: ...; \}\> \| `Promise`\<... \| ...\> \| `null`; \}\>; `scope?`: `Readonly`\<\{ `tenantId`: `string` & `Brand`\<`"OysterTenantId"`\>; `origin`: `string`; `durableName`: `string`; `computerName`: `string`; `workspacePrefix`: `string`; `repositoryPrefix`: `string`; \}\>; \}\> |
+
+#### Returns
+
+[`OysterHost`](host.md#oysterhost)
+
+---
+
+### createOysterWorker()
+
+```ts
+function createOysterWorker(options?): ExportedHandler<Readonly<{
+  OYSTER_OWNER_KEY: string;
+  OYSTER_OWNER_NAME?: string;
+  AGENT_DIRECTORY?: Readonly<{
+     getByName: Readonly<{
+        readCreator: Promise<string | null>;
+     }>;
+  }>;
+  OYSTER_ORIGIN: string;
+  MCP: DurableObjectNamespace<OysterMcpOwner<Readonly<{
+     LOADER: WorkerLoader;
+  }>>>;
+  RELEASES: R2Bucket;
+  REGISTRY: DurableObjectNamespace<OysterRegistry>;
+  INSTANCES: DurableObjectNamespace<OysterInstance<Readonly<{ OYSTER_OWNER_KEY: string; OYSTER_OWNER_NAME?: string | undefined; AGENT_DIRECTORY?: Readonly<{ getByName(name: string): Readonly<{ readCreator(agentId: string): Promise<string | null>; }>; }> | undefined; ... 5 more ...; LOADER: WorkerLoader; }>>>;
+  LOADER: WorkerLoader;
+}>>;
+```
+
+The standalone Worker's `fetch` handler; frontend hosts are cached per env. MCP
+transports belong to the tenant Durable Object, independent of that cache.
+
+#### Parameters
+
+| Parameter | Type                                                          |
+| --------- | ------------------------------------------------------------- |
+| `options` | `Pick`\<[`OysterHost`](host.md#oysterhost), `"guestLimits"`\> |
+
+#### Returns
+
+`ExportedHandler`\<`Readonly`\<\{ `OYSTER_OWNER_KEY`: `string`;
+`OYSTER_OWNER_NAME?`: `string`; `AGENT_DIRECTORY?`: `Readonly`\<\{ `getByName`:
+`Readonly`\<\{ `readCreator`: `Promise`\<`string` \| `null`\>; \}\>; \}\>;
+`OYSTER_ORIGIN`: `string`; `MCP`:
+`DurableObjectNamespace`\<[`OysterMcpOwner`](#oystermcpowner)\<`Readonly`\<\{
+`LOADER`: `WorkerLoader`; \}\>\>\>; `RELEASES`: `R2Bucket`; `REGISTRY`:
+`DurableObjectNamespace`\<[`OysterRegistry`](#oysterregistry)\>; `INSTANCES`:
+`DurableObjectNamespace`\<[`OysterInstance`](#oysterinstance)\<`Readonly`\<\{
+OYSTER\_OWNER\_KEY: string; OYSTER\_OWNER\_NAME?: string \| undefined;
+AGENT\_DIRECTORY?: Readonly\<\{ getByName(name: string): Readonly\<\{
+readCreator(agentId: string): Promise\<string \| null\>; \}\>; \}\> \|
+undefined; ... 5 more ...; LOADER: WorkerLoader; \}\>\>\>; `LOADER`:
+`WorkerLoader`; \}\>\>
+
+## References
+
+### ownerKeyAuth
+
+Re-exports [ownerKeyAuth](auth.md#ownerkeyauth)