@fungi.computer/oyster 0.0.1 → 0.2.0

package/dist/build/snapshot-programs/snapshot-path.d.ts

@@ -0,0 +1,2 @@
+/** Whether `path` names the captured snapshot root or a path inside it. */
+export declare function isInsideSnapshot(snapshot: string, path: string): boolean;

package/dist/build/snapshot-programs/snapshot-path.js

@@ -0,0 +1,6 @@
+import { isAbsolute, relative, resolve, sep } from "node:path";
+/** Whether `path` names the captured snapshot root or a path inside it. */
+export function isInsideSnapshot(snapshot, path) {
+    const suffix = relative(snapshot, resolve(path));
+    return (suffix !== ".." && !suffix.startsWith(`..${sep}`) && !isAbsolute(suffix));
+}

package/dist/build/submission-contract.d.ts

@@ -1,8 +1,212 @@
 import * as Schema from "effect/Schema";
-/** The largest Team App candidate submission request body, in bytes. */
-export declare const TEAM_APP_SUBMISSION_MAX_REQUEST_BYTES: number;
-/** Exact submitted output and provenance before the Team assigns a stable Release ID. */
-export declare const teamAppCandidateSubmissionSchema: Schema.Struct<{
+/**
+ * The largest candidate manifest request body, in bytes. A manifest names
+ * objects; their bytes are uploaded one at a time, never inside it.
+ */
+export declare const TEAM_APP_CANDIDATE_MANIFEST_MAX_BYTES: number;
+/** One content-addressed object a build uploaded before its manifest. */
+export declare const candidateObjectSchema: Schema.Struct<{
+    readonly digest: Schema.refine<import("@fungi.computer/puffball").Sha256Digest, Schema.String>;
+    readonly byteLength: Schema.Number;
+}>;
+/** One uploaded object, as a manifest names it. */
+export type CandidateObject = Schema.Schema.Type<typeof candidateObjectSchema>;
+/** A build's output by reference: the same surfaces as its bytes, sized. */
+export declare const candidateOutputManifestSchema: Schema.Union<readonly [Schema.Struct<{
+    readonly declaration: Schema.optionalKey<Schema.Codec<Readonly<{
+        api?: import("@fungi.computer/puffball").AppApi;
+        displayName?: string | undefined;
+        capabilities: readonly import("@fungi.computer/puffball").AppCapabilityId[];
+        calls?: readonly Readonly<{
+            appId: string;
+            methods: readonly string[];
+        }>[] | undefined;
+        guidance?: string | undefined;
+        handlers: readonly import("@fungi.computer/puffball").AppHandler[];
+        receives?: readonly "git.push"[] | undefined;
+        icon?: string;
+        roles: readonly import("@fungi.computer/puffball").AppRole[];
+        storage?: readonly import("@fungi.computer/puffball").AppStorageKey[] | undefined;
+        commands?: readonly import("@fungi.computer/puffball").AppDeclaredCommand[] | undefined;
+        gills?: readonly import("@fungi.computer/gills").AppDeclaredGill[] | undefined;
+        backend?: Readonly<{
+            bindings: readonly import("@fungi.computer/puffball").AppBackendBinding[];
+            sync?: Readonly<{
+                method: string;
+            }>;
+        }> | undefined;
+    }>, Readonly<{
+        api?: import("@fungi.computer/puffball").AppApi;
+        displayName?: string | undefined;
+        capabilities: readonly import("@fungi.computer/puffball").AppCapabilityId[];
+        calls?: readonly Readonly<{
+            appId: string;
+            methods: readonly string[];
+        }>[] | undefined;
+        guidance?: string | undefined;
+        handlers: readonly import("@fungi.computer/puffball").AppHandler[];
+        receives?: readonly "git.push"[] | undefined;
+        icon?: string;
+        roles: readonly import("@fungi.computer/puffball").AppRole[];
+        storage?: readonly import("@fungi.computer/puffball").AppStorageKey[] | undefined;
+        commands?: readonly import("@fungi.computer/puffball").AppDeclaredCommand[] | undefined;
+        gills?: readonly import("@fungi.computer/gills").AppDeclaredGill[] | undefined;
+        backend?: Readonly<{
+            bindings: readonly import("@fungi.computer/puffball").AppBackendBinding[];
+            sync?: Readonly<{
+                method: string;
+            }>;
+        }> | undefined;
+    }>, never, never>>;
+    readonly kind: Schema.Literal<"ui">;
+    readonly ui: Schema.Union<readonly [Schema.Struct<{
+        readonly mediaType: Schema.Literal<"text/html; charset=utf-8">;
+        readonly content: Schema.Struct<{
+            readonly digest: Schema.refine<import("@fungi.computer/puffball").Sha256Digest, Schema.String>;
+            readonly byteLength: Schema.Number;
+            readonly kind: Schema.Literal<"html">;
+        }>;
+    }>, Schema.Struct<{
+        readonly mediaType: Schema.Literal<"application/vnd.fungi.app-assets+json">;
+        readonly content: Schema.Struct<{
+            readonly kind: Schema.Literal<"assets">;
+            readonly base: Schema.String;
+            readonly assets: Schema.$Array<Schema.Struct<{
+                readonly digest: Schema.refine<import("@fungi.computer/puffball").Sha256Digest, Schema.String>;
+                readonly byteLength: Schema.Number;
+                readonly path: Schema.String;
+            }>>;
+        }>;
+    }>]>;
+}>, Schema.Struct<{
+    readonly declaration: Schema.optionalKey<Schema.Codec<Readonly<{
+        api?: import("@fungi.computer/puffball").AppApi;
+        displayName?: string | undefined;
+        capabilities: readonly import("@fungi.computer/puffball").AppCapabilityId[];
+        calls?: readonly Readonly<{
+            appId: string;
+            methods: readonly string[];
+        }>[] | undefined;
+        guidance?: string | undefined;
+        handlers: readonly import("@fungi.computer/puffball").AppHandler[];
+        receives?: readonly "git.push"[] | undefined;
+        icon?: string;
+        roles: readonly import("@fungi.computer/puffball").AppRole[];
+        storage?: readonly import("@fungi.computer/puffball").AppStorageKey[] | undefined;
+        commands?: readonly import("@fungi.computer/puffball").AppDeclaredCommand[] | undefined;
+        gills?: readonly import("@fungi.computer/gills").AppDeclaredGill[] | undefined;
+        backend?: Readonly<{
+            bindings: readonly import("@fungi.computer/puffball").AppBackendBinding[];
+            sync?: Readonly<{
+                method: string;
+            }>;
+        }> | undefined;
+    }>, Readonly<{
+        api?: import("@fungi.computer/puffball").AppApi;
+        displayName?: string | undefined;
+        capabilities: readonly import("@fungi.computer/puffball").AppCapabilityId[];
+        calls?: readonly Readonly<{
+            appId: string;
+            methods: readonly string[];
+        }>[] | undefined;
+        guidance?: string | undefined;
+        handlers: readonly import("@fungi.computer/puffball").AppHandler[];
+        receives?: readonly "git.push"[] | undefined;
+        icon?: string;
+        roles: readonly import("@fungi.computer/puffball").AppRole[];
+        storage?: readonly import("@fungi.computer/puffball").AppStorageKey[] | undefined;
+        commands?: readonly import("@fungi.computer/puffball").AppDeclaredCommand[] | undefined;
+        gills?: readonly import("@fungi.computer/gills").AppDeclaredGill[] | undefined;
+        backend?: Readonly<{
+            bindings: readonly import("@fungi.computer/puffball").AppBackendBinding[];
+            sync?: Readonly<{
+                method: string;
+            }>;
+        }> | undefined;
+    }>, never, never>>;
+    readonly kind: Schema.Literal<"backend">;
+    readonly backend: Schema.Struct<{
+        readonly digest: Schema.refine<import("@fungi.computer/puffball").Sha256Digest, Schema.String>;
+        readonly byteLength: Schema.Number;
+    }>;
+}>, Schema.Struct<{
+    readonly declaration: Schema.optionalKey<Schema.Codec<Readonly<{
+        api?: import("@fungi.computer/puffball").AppApi;
+        displayName?: string | undefined;
+        capabilities: readonly import("@fungi.computer/puffball").AppCapabilityId[];
+        calls?: readonly Readonly<{
+            appId: string;
+            methods: readonly string[];
+        }>[] | undefined;
+        guidance?: string | undefined;
+        handlers: readonly import("@fungi.computer/puffball").AppHandler[];
+        receives?: readonly "git.push"[] | undefined;
+        icon?: string;
+        roles: readonly import("@fungi.computer/puffball").AppRole[];
+        storage?: readonly import("@fungi.computer/puffball").AppStorageKey[] | undefined;
+        commands?: readonly import("@fungi.computer/puffball").AppDeclaredCommand[] | undefined;
+        gills?: readonly import("@fungi.computer/gills").AppDeclaredGill[] | undefined;
+        backend?: Readonly<{
+            bindings: readonly import("@fungi.computer/puffball").AppBackendBinding[];
+            sync?: Readonly<{
+                method: string;
+            }>;
+        }> | undefined;
+    }>, Readonly<{
+        api?: import("@fungi.computer/puffball").AppApi;
+        displayName?: string | undefined;
+        capabilities: readonly import("@fungi.computer/puffball").AppCapabilityId[];
+        calls?: readonly Readonly<{
+            appId: string;
+            methods: readonly string[];
+        }>[] | undefined;
+        guidance?: string | undefined;
+        handlers: readonly import("@fungi.computer/puffball").AppHandler[];
+        receives?: readonly "git.push"[] | undefined;
+        icon?: string;
+        roles: readonly import("@fungi.computer/puffball").AppRole[];
+        storage?: readonly import("@fungi.computer/puffball").AppStorageKey[] | undefined;
+        commands?: readonly import("@fungi.computer/puffball").AppDeclaredCommand[] | undefined;
+        gills?: readonly import("@fungi.computer/gills").AppDeclaredGill[] | undefined;
+        backend?: Readonly<{
+            bindings: readonly import("@fungi.computer/puffball").AppBackendBinding[];
+            sync?: Readonly<{
+                method: string;
+            }>;
+        }> | undefined;
+    }>, never, never>>;
+    readonly kind: Schema.Literal<"app">;
+    readonly ui: Schema.Union<readonly [Schema.Struct<{
+        readonly mediaType: Schema.Literal<"text/html; charset=utf-8">;
+        readonly content: Schema.Struct<{
+            readonly digest: Schema.refine<import("@fungi.computer/puffball").Sha256Digest, Schema.String>;
+            readonly byteLength: Schema.Number;
+            readonly kind: Schema.Literal<"html">;
+        }>;
+    }>, Schema.Struct<{
+        readonly mediaType: Schema.Literal<"application/vnd.fungi.app-assets+json">;
+        readonly content: Schema.Struct<{
+            readonly kind: Schema.Literal<"assets">;
+            readonly base: Schema.String;
+            readonly assets: Schema.$Array<Schema.Struct<{
+                readonly digest: Schema.refine<import("@fungi.computer/puffball").Sha256Digest, Schema.String>;
+                readonly byteLength: Schema.Number;
+                readonly path: Schema.String;
+            }>>;
+        }>;
+    }>]>;
+    readonly backend: Schema.Struct<{
+        readonly digest: Schema.refine<import("@fungi.computer/puffball").Sha256Digest, Schema.String>;
+        readonly byteLength: Schema.Number;
+    }>;
+}>]>;
+/** One build output by reference. */
+export type CandidateOutputManifest = Schema.Schema.Type<typeof candidateOutputManifestSchema>;
+/**
+ * A submitted Team App candidate: its output's objects by digest and size,
+ * and its provenance, before the Team assigns a stable Release ID.
+ */
+export declare const teamAppCandidateManifestSchema: Schema.Struct<{
     appId: Schema.refine<import("@fungi.computer/puffball").AppId, Schema.String>;
     output: Schema.Union<readonly [Schema.Struct<{
         readonly declaration: Schema.optionalKey<Schema.Codec<Readonly<{
@@ -54,8 +258,9 @@ export declare const teamAppCandidateSubmissionSchema: Schema.Struct<{
         readonly ui: Schema.Union<readonly [Schema.Struct<{
             readonly mediaType: Schema.Literal<"text/html; charset=utf-8">;
             readonly content: Schema.Struct<{
+                readonly digest: Schema.refine<import("@fungi.computer/puffball").Sha256Digest, Schema.String>;
+                readonly byteLength: Schema.Number;
                 readonly kind: Schema.Literal<"html">;
-                readonly bytes: Schema.Uint8ArrayFromBase64;
             }>;
         }>, Schema.Struct<{
             readonly mediaType: Schema.Literal<"application/vnd.fungi.app-assets+json">;
@@ -63,8 +268,9 @@ export declare const teamAppCandidateSubmissionSchema: Schema.Struct<{
                 readonly kind: Schema.Literal<"assets">;
                 readonly base: Schema.String;
                 readonly assets: Schema.$Array<Schema.Struct<{
+                    readonly digest: Schema.refine<import("@fungi.computer/puffball").Sha256Digest, Schema.String>;
+                    readonly byteLength: Schema.Number;
                     readonly path: Schema.String;
-                    readonly bytes: Schema.Uint8ArrayFromBase64;
                 }>>;
             }>;
         }>]>;
@@ -115,7 +321,10 @@ export declare const teamAppCandidateSubmissionSchema: Schema.Struct<{
             }> | undefined;
         }>, never, never>>;
         readonly kind: Schema.Literal<"backend">;
-        readonly backend: Schema.Uint8ArrayFromBase64;
+        readonly backend: Schema.Struct<{
+            readonly digest: Schema.refine<import("@fungi.computer/puffball").Sha256Digest, Schema.String>;
+            readonly byteLength: Schema.Number;
+        }>;
     }>, Schema.Struct<{
         readonly declaration: Schema.optionalKey<Schema.Codec<Readonly<{
             api?: import("@fungi.computer/puffball").AppApi;
@@ -166,8 +375,9 @@ export declare const teamAppCandidateSubmissionSchema: Schema.Struct<{
         readonly ui: Schema.Union<readonly [Schema.Struct<{
             readonly mediaType: Schema.Literal<"text/html; charset=utf-8">;
             readonly content: Schema.Struct<{
+                readonly digest: Schema.refine<import("@fungi.computer/puffball").Sha256Digest, Schema.String>;
+                readonly byteLength: Schema.Number;
                 readonly kind: Schema.Literal<"html">;
-                readonly bytes: Schema.Uint8ArrayFromBase64;
             }>;
         }>, Schema.Struct<{
             readonly mediaType: Schema.Literal<"application/vnd.fungi.app-assets+json">;
@@ -175,12 +385,16 @@ export declare const teamAppCandidateSubmissionSchema: Schema.Struct<{
                 readonly kind: Schema.Literal<"assets">;
                 readonly base: Schema.String;
                 readonly assets: Schema.$Array<Schema.Struct<{
+                    readonly digest: Schema.refine<import("@fungi.computer/puffball").Sha256Digest, Schema.String>;
+                    readonly byteLength: Schema.Number;
                     readonly path: Schema.String;
-                    readonly bytes: Schema.Uint8ArrayFromBase64;
                 }>>;
             }>;
         }>]>;
-        readonly backend: Schema.Uint8ArrayFromBase64;
+        readonly backend: Schema.Struct<{
+            readonly digest: Schema.refine<import("@fungi.computer/puffball").Sha256Digest, Schema.String>;
+            readonly byteLength: Schema.Number;
+        }>;
     }>]>;
     provenance: Schema.Struct<{
         readonly sourceRevision: Schema.refine<import("@fungi.computer/puffball").SourceRevision, Schema.String>;
@@ -188,10 +402,216 @@ export declare const teamAppCandidateSubmissionSchema: Schema.Struct<{
         readonly buildRecipeDigest: Schema.refine<import("@fungi.computer/puffball").Sha256Digest, Schema.String>;
     }>;
 }>;
+/** One submitted Team App candidate manifest. */
+export type TeamAppCandidateManifest = Schema.Schema.Type<typeof teamAppCandidateManifestSchema>;
 /** Publisher persistence input after TeamDO reserves retry-stable identities. */
-export declare const preparedCandidateSchema: Schema.Struct<{
+export declare const preparedCandidateManifestSchema: Schema.Struct<{
     readonly releaseId: Schema.refine<import("@fungi.computer/puffball").ReleaseId, Schema.String>;
     readonly appId: Schema.refine<import("@fungi.computer/puffball").AppId, Schema.String>;
+    readonly output: Schema.Union<readonly [Schema.Struct<{
+        readonly declaration: Schema.optionalKey<Schema.Codec<Readonly<{
+            api?: import("@fungi.computer/puffball").AppApi;
+            displayName?: string | undefined;
+            capabilities: readonly import("@fungi.computer/puffball").AppCapabilityId[];
+            calls?: readonly Readonly<{
+                appId: string;
+                methods: readonly string[];
+            }>[] | undefined;
+            guidance?: string | undefined;
+            handlers: readonly import("@fungi.computer/puffball").AppHandler[];
+            receives?: readonly "git.push"[] | undefined;
+            icon?: string;
+            roles: readonly import("@fungi.computer/puffball").AppRole[];
+            storage?: readonly import("@fungi.computer/puffball").AppStorageKey[] | undefined;
+            commands?: readonly import("@fungi.computer/puffball").AppDeclaredCommand[] | undefined;
+            gills?: readonly import("@fungi.computer/gills").AppDeclaredGill[] | undefined;
+            backend?: Readonly<{
+                bindings: readonly import("@fungi.computer/puffball").AppBackendBinding[];
+                sync?: Readonly<{
+                    method: string;
+                }>;
+            }> | undefined;
+        }>, Readonly<{
+            api?: import("@fungi.computer/puffball").AppApi;
+            displayName?: string | undefined;
+            capabilities: readonly import("@fungi.computer/puffball").AppCapabilityId[];
+            calls?: readonly Readonly<{
+                appId: string;
+                methods: readonly string[];
+            }>[] | undefined;
+            guidance?: string | undefined;
+            handlers: readonly import("@fungi.computer/puffball").AppHandler[];
+            receives?: readonly "git.push"[] | undefined;
+            icon?: string;
+            roles: readonly import("@fungi.computer/puffball").AppRole[];
+            storage?: readonly import("@fungi.computer/puffball").AppStorageKey[] | undefined;
+            commands?: readonly import("@fungi.computer/puffball").AppDeclaredCommand[] | undefined;
+            gills?: readonly import("@fungi.computer/gills").AppDeclaredGill[] | undefined;
+            backend?: Readonly<{
+                bindings: readonly import("@fungi.computer/puffball").AppBackendBinding[];
+                sync?: Readonly<{
+                    method: string;
+                }>;
+            }> | undefined;
+        }>, never, never>>;
+        readonly kind: Schema.Literal<"ui">;
+        readonly ui: Schema.Union<readonly [Schema.Struct<{
+            readonly mediaType: Schema.Literal<"text/html; charset=utf-8">;
+            readonly content: Schema.Struct<{
+                readonly digest: Schema.refine<import("@fungi.computer/puffball").Sha256Digest, Schema.String>;
+                readonly byteLength: Schema.Number;
+                readonly kind: Schema.Literal<"html">;
+            }>;
+        }>, Schema.Struct<{
+            readonly mediaType: Schema.Literal<"application/vnd.fungi.app-assets+json">;
+            readonly content: Schema.Struct<{
+                readonly kind: Schema.Literal<"assets">;
+                readonly base: Schema.String;
+                readonly assets: Schema.$Array<Schema.Struct<{
+                    readonly digest: Schema.refine<import("@fungi.computer/puffball").Sha256Digest, Schema.String>;
+                    readonly byteLength: Schema.Number;
+                    readonly path: Schema.String;
+                }>>;
+            }>;
+        }>]>;
+    }>, Schema.Struct<{
+        readonly declaration: Schema.optionalKey<Schema.Codec<Readonly<{
+            api?: import("@fungi.computer/puffball").AppApi;
+            displayName?: string | undefined;
+            capabilities: readonly import("@fungi.computer/puffball").AppCapabilityId[];
+            calls?: readonly Readonly<{
+                appId: string;
+                methods: readonly string[];
+            }>[] | undefined;
+            guidance?: string | undefined;
+            handlers: readonly import("@fungi.computer/puffball").AppHandler[];
+            receives?: readonly "git.push"[] | undefined;
+            icon?: string;
+            roles: readonly import("@fungi.computer/puffball").AppRole[];
+            storage?: readonly import("@fungi.computer/puffball").AppStorageKey[] | undefined;
+            commands?: readonly import("@fungi.computer/puffball").AppDeclaredCommand[] | undefined;
+            gills?: readonly import("@fungi.computer/gills").AppDeclaredGill[] | undefined;
+            backend?: Readonly<{
+                bindings: readonly import("@fungi.computer/puffball").AppBackendBinding[];
+                sync?: Readonly<{
+                    method: string;
+                }>;
+            }> | undefined;
+        }>, Readonly<{
+            api?: import("@fungi.computer/puffball").AppApi;
+            displayName?: string | undefined;
+            capabilities: readonly import("@fungi.computer/puffball").AppCapabilityId[];
+            calls?: readonly Readonly<{
+                appId: string;
+                methods: readonly string[];
+            }>[] | undefined;
+            guidance?: string | undefined;
+            handlers: readonly import("@fungi.computer/puffball").AppHandler[];
+            receives?: readonly "git.push"[] | undefined;
+            icon?: string;
+            roles: readonly import("@fungi.computer/puffball").AppRole[];
+            storage?: readonly import("@fungi.computer/puffball").AppStorageKey[] | undefined;
+            commands?: readonly import("@fungi.computer/puffball").AppDeclaredCommand[] | undefined;
+            gills?: readonly import("@fungi.computer/gills").AppDeclaredGill[] | undefined;
+            backend?: Readonly<{
+                bindings: readonly import("@fungi.computer/puffball").AppBackendBinding[];
+                sync?: Readonly<{
+                    method: string;
+                }>;
+            }> | undefined;
+        }>, never, never>>;
+        readonly kind: Schema.Literal<"backend">;
+        readonly backend: Schema.Struct<{
+            readonly digest: Schema.refine<import("@fungi.computer/puffball").Sha256Digest, Schema.String>;
+            readonly byteLength: Schema.Number;
+        }>;
+    }>, Schema.Struct<{
+        readonly declaration: Schema.optionalKey<Schema.Codec<Readonly<{
+            api?: import("@fungi.computer/puffball").AppApi;
+            displayName?: string | undefined;
+            capabilities: readonly import("@fungi.computer/puffball").AppCapabilityId[];
+            calls?: readonly Readonly<{
+                appId: string;
+                methods: readonly string[];
+            }>[] | undefined;
+            guidance?: string | undefined;
+            handlers: readonly import("@fungi.computer/puffball").AppHandler[];
+            receives?: readonly "git.push"[] | undefined;
+            icon?: string;
+            roles: readonly import("@fungi.computer/puffball").AppRole[];
+            storage?: readonly import("@fungi.computer/puffball").AppStorageKey[] | undefined;
+            commands?: readonly import("@fungi.computer/puffball").AppDeclaredCommand[] | undefined;
+            gills?: readonly import("@fungi.computer/gills").AppDeclaredGill[] | undefined;
+            backend?: Readonly<{
+                bindings: readonly import("@fungi.computer/puffball").AppBackendBinding[];
+                sync?: Readonly<{
+                    method: string;
+                }>;
+            }> | undefined;
+        }>, Readonly<{
+            api?: import("@fungi.computer/puffball").AppApi;
+            displayName?: string | undefined;
+            capabilities: readonly import("@fungi.computer/puffball").AppCapabilityId[];
+            calls?: readonly Readonly<{
+                appId: string;
+                methods: readonly string[];
+            }>[] | undefined;
+            guidance?: string | undefined;
+            handlers: readonly import("@fungi.computer/puffball").AppHandler[];
+            receives?: readonly "git.push"[] | undefined;
+            icon?: string;
+            roles: readonly import("@fungi.computer/puffball").AppRole[];
+            storage?: readonly import("@fungi.computer/puffball").AppStorageKey[] | undefined;
+            commands?: readonly import("@fungi.computer/puffball").AppDeclaredCommand[] | undefined;
+            gills?: readonly import("@fungi.computer/gills").AppDeclaredGill[] | undefined;
+            backend?: Readonly<{
+                bindings: readonly import("@fungi.computer/puffball").AppBackendBinding[];
+                sync?: Readonly<{
+                    method: string;
+                }>;
+            }> | undefined;
+        }>, never, never>>;
+        readonly kind: Schema.Literal<"app">;
+        readonly ui: Schema.Union<readonly [Schema.Struct<{
+            readonly mediaType: Schema.Literal<"text/html; charset=utf-8">;
+            readonly content: Schema.Struct<{
+                readonly digest: Schema.refine<import("@fungi.computer/puffball").Sha256Digest, Schema.String>;
+                readonly byteLength: Schema.Number;
+                readonly kind: Schema.Literal<"html">;
+            }>;
+        }>, Schema.Struct<{
+            readonly mediaType: Schema.Literal<"application/vnd.fungi.app-assets+json">;
+            readonly content: Schema.Struct<{
+                readonly kind: Schema.Literal<"assets">;
+                readonly base: Schema.String;
+                readonly assets: Schema.$Array<Schema.Struct<{
+                    readonly digest: Schema.refine<import("@fungi.computer/puffball").Sha256Digest, Schema.String>;
+                    readonly byteLength: Schema.Number;
+                    readonly path: Schema.String;
+                }>>;
+            }>;
+        }>]>;
+        readonly backend: Schema.Struct<{
+            readonly digest: Schema.refine<import("@fungi.computer/puffball").Sha256Digest, Schema.String>;
+            readonly byteLength: Schema.Number;
+        }>;
+    }>]>;
+    readonly provenance: Schema.Struct<{
+        readonly sourceRevision: Schema.refine<import("@fungi.computer/puffball").SourceRevision, Schema.String>;
+        readonly sourceTreeDigest: Schema.refine<import("@fungi.computer/puffball").Sha256Digest, Schema.String>;
+        readonly buildRecipeDigest: Schema.refine<import("@fungi.computer/puffball").Sha256Digest, Schema.String>;
+    }>;
+}>;
+/** One Team App candidate manifest with its reserved Release ID. */
+export type PreparedTeamAppCandidateManifest = Schema.Schema.Type<typeof preparedCandidateManifestSchema>;
+/**
+ * A platform App candidate the trusted operator built and packed itself,
+ * with its bytes inline: the operator's platform publication request only.
+ * A Team candidate never carries bytes; it is a manifest.
+ */
+export declare const preparedCandidateSchema: Schema.Struct<{
+    readonly appId: Schema.refine<import("@fungi.computer/puffball").AppId, Schema.String>;
+    readonly releaseId: Schema.refine<import("@fungi.computer/puffball").ReleaseId, Schema.String>;
     readonly output: Schema.Union<readonly [Schema.Struct<{
         readonly declaration: Schema.optionalKey<Schema.Codec<Readonly<{
             api?: import("@fungi.computer/puffball").AppApi;
@@ -376,9 +796,33 @@ export declare const preparedCandidateSchema: Schema.Struct<{
         readonly buildRecipeDigest: Schema.refine<import("@fungi.computer/puffball").Sha256Digest, Schema.String>;
     }>;
 }>;
-/** One submitted Team App candidate. */
-export type TeamAppCandidateSubmission = Schema.Schema.Type<typeof teamAppCandidateSubmissionSchema>;
-/** One Team App candidate with its reserved Release ID. */
-export type PreparedTeamAppCandidate = Schema.Schema.Type<typeof preparedCandidateSchema>;
-/** Canonical wire bytes make TeamDO's same-request digest independent of JSON spacing. */
-export declare function encodeTeamAppCandidateSubmission(input: TeamAppCandidateSubmission): string;
+/** Canonical manifest bytes, so a digest is independent of JSON spacing. */
+export declare function encodeTeamAppCandidateManifest(manifest: TeamAppCandidateManifest): string;
+/** The hex SHA-256 of a manifest's canonical bytes: its App root's name. */
+export declare function digestTeamAppCandidateManifest(manifest: TeamAppCandidateManifest): Promise<string>;
+/**
+ * The media type an uploaded object is stored with. A store that reads an
+ * HTML document or backend descriptor by its stored type (the Publisher's)
+ * needs it; an asset's type is its manifest's, so it is an octet stream.
+ */
+export declare const candidateObjectMediaTypes: readonly ["text/html; charset=utf-8", "application/vnd.fungi.app-backend+json", "application/octet-stream"];
+/** One of {@link candidateObjectMediaTypes}. */
+export type CandidateObjectMediaType = (typeof candidateObjectMediaTypes)[number];
+/** The stored media type a request names, if it is one an object may carry. */
+export declare function candidateObjectMediaType(value: string | null): CandidateObjectMediaType | null;
+/** One object a build uploads, with the media type it is stored under. */
+export type CandidateUpload = CandidateObject & Readonly<{
+    mediaType: CandidateObjectMediaType;
+}>;
+/** Every distinct object a manifest names, each once, in manifest order. */
+export declare function candidateManifestObjects(output: CandidateOutputManifest): readonly CandidateUpload[];
+/** Decode a stored backend descriptor; a manifest's backend must be one. */
+export declare function decodeCandidateBackend(bytes: Uint8Array): {
+    readonly runtime: {
+        readonly kind: "durable-facet";
+        readonly stateSchema: number;
+    };
+    readonly compatibilityDate: string;
+    readonly exportName: string;
+    readonly code: string;
+};