@fungi.computer/oyster 0.1.0 → 0.2.0

package/dist/standalone/agents.js

@@ -19,6 +19,7 @@ import * as Schema from "effect/Schema";
 import { z } from "zod";
 import {} from "../cloudflare.js";
 import { AppInstanceError } from "../index.js";
+import { createAgentAvatarStore, } from "../agent-avatars.js";
 import { defineIdFamily } from "@fungi.computer/cairn";
 import { agentIds, createAgentDirectory, createFleetSessions, DirectoryError, } from "@fungi.computer/shiitake/fleet";
 import { appSurfaceCache, oysterAppMethods, } from "../mcp.js";
@@ -356,6 +357,7 @@ const counterRow = Schema.Struct({ value: Schema.Number });
 /** Names this Oyster's agents and remembers which Sessions the member opened. */
 export class AgentDirectory extends DurableObject {
     directory;
+    avatars;
     composedTenancy;
     grant() {
         return {
@@ -368,6 +370,7 @@ export class AgentDirectory extends DurableObject {
     constructor(ctx, env) {
         super(ctx, env);
         this.directory = createAgentDirectory(ctx.storage.sql);
+        this.avatars = createAgentAvatarStore(ctx.storage.sql);
         ctx.storage.sql.exec("CREATE TABLE IF NOT EXISTS visits (agent_id TEXT NOT NULL, session_id TEXT NOT NULL, visited_at INTEGER NOT NULL, PRIMARY KEY (agent_id, session_id)) STRICT");
         ctx.storage.sql.exec("CREATE TABLE IF NOT EXISTS counters (name TEXT PRIMARY KEY, value INTEGER NOT NULL) STRICT");
         ctx.storage.sql.exec("CREATE TABLE IF NOT EXISTS app_tool_policies (agent_id TEXT PRIMARY KEY, policy TEXT NOT NULL) STRICT");
@@ -376,7 +379,11 @@ export class AgentDirectory extends DurableObject {
         return this.directory
             .list(this.grant())
             .toReversed()
-            .map(({ agentId, name }) => ({ agentId, name }));
+            .map(({ agentId, name }) => ({
+            agentId,
+            name,
+            avatar: this.avatars.read(agentId),
+        }));
     }
     has(agentId) {
         const id = agentIds.agent.parse(agentId);
@@ -399,7 +406,11 @@ export class AgentDirectory extends DurableObject {
                     name,
                 });
                 this.bump();
-                return { agentId: renamed.agentId, name: renamed.name };
+                return {
+                    agentId: renamed.agentId,
+                    name: renamed.name,
+                    avatar: this.avatars.read(renamed.agentId),
+                };
             }
             catch (cause) {
                 if (cause instanceof DirectoryError && cause.code === "not_found")
@@ -410,7 +421,27 @@ export class AgentDirectory extends DurableObject {
             }
         });
     }
-    create(name, requestId, principal, actor) {
+    /** Owner-only avatar change; the Agent wears it in every App and list. */
+    setAvatar(agentId, avatar, principal) {
+        if (!oysterPrincipalIsOwner(principal))
+            return { error: "not_granted" };
+        const id = agentIds.agent.parse(agentId);
+        if (!id.ok)
+            return { error: "not_found" };
+        return this.ctx.storage.transactionSync(() => {
+            const agent = this.directory.read(this.grant(), id.value);
+            if (agent === null)
+                return { error: "not_found" };
+            this.avatars.write(agent.agentId, avatar);
+            this.bump();
+            return {
+                agentId: agent.agentId,
+                name: agent.name,
+                avatar: this.avatars.read(agent.agentId),
+            };
+        });
+    }
+    create(name, requestId, principal, actor, avatar) {
         if (!oysterPrincipalIsOwner(principal))
             throw new Error("Only the authenticated owner creates Agents");
         return this.ctx.storage.transactionSync(() => {
@@ -419,6 +450,8 @@ export class AgentDirectory extends DurableObject {
                 provenance: { actor: oysterPrincipalId(principal) },
             }, { name, requestId, configuration: "none" });
             if (fact !== null) {
+                if (avatar !== undefined)
+                    this.avatars.write(agent.agentId, avatar);
                 this.bump();
                 this.writePolicy(agent.agentId, {
                     status: "pending",
@@ -431,6 +464,7 @@ export class AgentDirectory extends DurableObject {
             return {
                 agentId: agent.agentId,
                 name: agent.name,
+                avatar: this.avatars.read(agent.agentId),
                 policyRevision: stored === null
                     ? null
                     : stored.status === "pending"
@@ -610,12 +644,13 @@ export function standaloneAgents(env, scope) {
     const toAgent = (entry) => ({
         agentId: entry.agentId,
         name: entry.name,
+        avatar: entry.avatar,
         sessionOperations: everyOperation,
     });
     return {
         list: async () => (await directory().list()).map(toAgent),
-        create: async (name, requestId, principal, actor) => {
-            const entry = await directory().create(name, requestId, principal, actor);
+        create: async (name, requestId, principal, actor, avatar) => {
+            const entry = await directory().create(name, requestId, principal, actor, avatar);
             await env.AGENTS.getByName(entry.agentId).usePolicyDirectory({
                 directoryName,
                 tenantId: scope?.tenantId ?? defaultTenant,
@@ -632,6 +667,10 @@ export function standaloneAgents(env, scope) {
             const result = await directory().rename(agentId, name, principal);
             return "error" in result ? result : toAgent(result);
         },
+        setAvatar: async (agentId, avatar, principal) => {
+            const result = await directory().setAvatar(agentId, avatar, principal);
+            return "error" in result ? result : toAgent(result);
+        },
         policyStatus: async (agentId) => directory().policyStatus(agentId),
         appToolPolicy: (actor) => directory().appToolPolicy(actor, scope?.tenantId ?? defaultTenant),
         policyRevision: (agentId) => directory().policyRevision(agentId),

package/dist/standalone/app-builds-binding.js

@@ -12,17 +12,17 @@ import { installationIdSchema } from "../apps/index.js";
 import { appIdSchema, releaseSchema } from "@fungi.computer/puffball/effect";
 /** The calling tenant's registry owns its App builds. */
 const buildRegistry = (env, scope) => env.REGISTRY.getByName(scope.durableName("registry"));
-const buildInput = z.strictObject({
+const buildInput = z.lazy(() => z.strictObject({
     appId: z.string().min(1).max(256),
     sourceRevision: z.string().min(1).max(256),
-});
-const buildStatusInput = z.strictObject({
+}));
+const buildStatusInput = z.lazy(() => z.strictObject({
     jobId: z.string().min(1).max(256),
-});
-const selectInput = z.strictObject({
+}));
+const selectInput = z.lazy(() => z.strictObject({
     installationId: z.string().min(1).max(256),
     release: z.unknown(),
-});
+}));
 /** The Instance gate and native guest entrypoint share these argument codecs. */
 export const appsFrameMethods = {
     APPS: {

package/dist/standalone/computer.js

@@ -18,7 +18,7 @@ import { computerSlots } from "../computer.js";
 import { oysterPrincipalId, oysterPrincipalIsOwner, } from "../host.js";
 import { keyAllowsComputerUse } from "../keys.js";
 import { oysterAppBuildTimeoutMs } from "../app-builds.js";
-const missingFile = z.object({ code: z.literal("ENOENT") });
+const missingFile = z.lazy(() => z.object({ code: z.literal("ENOENT") }));
 const workspaceId = computerGrantSchema.shape.computerId;
 const command = computerExecutionRequestSchema({ maximumTimeMs: 45_000 }).omit({
     requestId: true,
@@ -39,10 +39,10 @@ const processStart = processStartInputSchema.omit({
 const processStartHttpBody = processStartInputSchema.omit({
     requestScope: true,
 });
-const processStartReply = z.union([
+const processStartReply = z.lazy(() => z.union([
     computerProcessSchema,
     z.strictObject({ error: z.literal("conflict") }),
-]);
+]));
 const bindingWrite = writeInputSchema.extend({
     expectedContent: replaceInputSchema.shape.expectedContent.optional(),
 });

package/dist/standalone/preview.js

@@ -10,7 +10,7 @@ export const previewSelectorSchema = Schema.Struct({
     selection: selectionSchema,
     artifactDigest: sha256DigestSchema,
 });
-const originSchema = z
+const originSchema = z.lazy(() => z
     .url()
     .transform((input) => new URL(input))
     .refine((url) => url.protocol === "https:" &&
@@ -18,7 +18,7 @@ const originSchema = z
     !url.password &&
     url.pathname === "/" &&
     !url.search &&
-    !url.hash);
+    !url.hash));
 export function previewOrigins(env) {
     if (env.OYSTER_PREVIEW_ORIGIN === undefined)
         return null;

package/dist/standalone/worker.js

@@ -38,13 +38,13 @@ export { OysterKeys } from "../workers-git.js";
 export { StandaloneEventDelivery as OysterWebhooks } from "./instance.js";
 export { AgentDirectory } from "./agents.js";
 /** After Oyster's bearer prefix: `<library>.<pass>`, as the library minted it. */
-const workflowGitPassToken = z
+const workflowGitPassToken = z.lazy(() => z
     .string()
     .regex(/^([a-zA-Z0-9_-]{1,256})\.([0-9a-f]{64})$/u)
     .transform((token) => {
     const [libraryId = "", passId = ""] = token.split(".");
     return [libraryId, passId];
-});
+}));
 /** The one composition root: every door reaches a tenant's host through `hostFor`. */
 const oysterRoot = oysterGitRoot({
     tenancy: (env) => ({

package/dist/standalone/workflow-binding.d.ts

@@ -30,9 +30,9 @@ export declare const triggerArmTargetSchema: z.ZodObject<{
     }, string, z.core.$ZodTypeInternals<string & {
         readonly appReleaseKind: "Sha256Digest";
     }, string>>;
-    bindings: z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+    bindings: z.ZodRecord<z.ZodLazy<z.ZodString>, z.ZodUnion<readonly [z.ZodString, z.ZodLazy<z.ZodObject<{
         kind: z.ZodLiteral<"team-source">;
-    }, z.core.$strict>]>>;
+    }, z.core.$strict>>]>>;
     workflowId: z.ZodString;
     delivery: z.ZodOptional<z.ZodCustom<{
         readonly agentId: string;
@@ -69,12 +69,12 @@ export declare const workflowFrameMethods: {
             decodeArgs: ((input: unknown, options?: import("effect/SchemaAST").ParseOptions) => readonly [{
                 readonly installationId?: string | undefined;
             }]) | ((input: unknown, options?: import("effect/SchemaAST").ParseOptions) => readonly [{
-                readonly bindings: Record<string, string | {
-                    kind: "team-source";
-                }>;
                 readonly input: {
                     readonly [x: string]: S.Json;
                 };
+                readonly bindings: Record<string, string | {
+                    kind: "team-source";
+                }>;
                 readonly requestId: string;
                 readonly definition: unknown;
                 readonly delivery?: {
@@ -83,12 +83,12 @@ export declare const workflowFrameMethods: {
                 } | undefined;
                 readonly published?: undefined;
             } | {
-                readonly bindings: Record<string, string | {
-                    kind: "team-source";
-                }>;
                 readonly input: {
                     readonly [x: string]: S.Json;
                 };
+                readonly bindings: Record<string, string | {
+                    kind: "team-source";
+                }>;
                 readonly requestId: string;
                 readonly published: {
                     workflowId: string;
@@ -169,7 +169,7 @@ export declare function workflowEventRecipients(installations: Readonly<{
  */
 export declare function deliverWorkflowEvent(env: WorkflowEventEnv, libraryId: string, event: HostRecipientEvent): Promise<void>;
 /** What a Workflow node frame attests when it asks for its Git step's pass. */
-export declare const workflowGitPassRequestSchema: z.ZodObject<{
+export declare const workflowGitPassRequestSchema: z.ZodLazy<z.ZodObject<{
     installationId: z.ZodString;
     idempotencyKey: z.ZodString;
     workflow: import("zod/mini").ZodMiniObject<{
@@ -189,7 +189,7 @@ export declare const workflowGitPassRequestSchema: z.ZodObject<{
     }, z.core.$strip>;
     memberId: z.ZodString;
     computerId: z.ZodString;
-}, z.core.$strict>;
+}, z.core.$strict>>;
 export type WorkflowGitPassRequest = z.output<typeof workflowGitPassRequestSchema>;
 /** The library run owners a node frame's pass request may reach. */
 export type WorkflowGitPassEnv = Readonly<{

package/dist/standalone/workflow-binding.js

@@ -99,13 +99,13 @@ export async function deliverWorkflowEvent(env, libraryId, event) {
     await env.WORKFLOW_RUNS.getByName(libraryId).deliverEvent(fact);
 }
 /** What a Workflow node frame attests when it asks for its Git step's pass. */
-export const workflowGitPassRequestSchema = z.strictObject({
+export const workflowGitPassRequestSchema = z.lazy(() => z.strictObject({
     installationId: z.string().min(1).max(256),
     idempotencyKey: z.string().min(1).max(128),
     workflow: workflowAttestationSchema,
     memberId: z.string().min(1).max(256),
     computerId: z.string().min(1).max(256),
-});
+}));
 /**
  * COMPUTER.workflowGitPass from a published Workflow node frame. Only the
  * frame's host-attested Workflow, call key, member and pinned Computer cross;

package/dist/standalone/workflow-host.d.ts

@@ -53,6 +53,26 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                 readonly iteration: string;
                 readonly instanceId: string;
                 readonly eventType: string;
+                readonly position
+                /**
+                 * The key's own catalog view: an installation it cannot reach at all drops
+                 * out, and a read-only installation keeps only its read methods. A node
+                 * that reaches past the key then fails to compile with the engine's own
+                 * "Installation is not available to you" or unknown-method issue -- never a
+                 * live grant computed here.
+                 */
+                ? /**
+                 * The key's own catalog view: an installation it cannot reach at all drops
+                 * out, and a read-only installation keeps only its read methods. A node
+                 * that reaches past the key then fails to compile with the engine's own
+                 * "Installation is not available to you" or unknown-method issue -- never a
+                 * live grant computed here.
+                 */: readonly {
+                    readonly node: string;
+                    readonly loop: "repeat" | "map";
+                    readonly index: number;
+                    readonly count: number;
+                }[];
                 readonly choices?: readonly string[];
             };
             status: "closed" | "pending" | "answered" | "delivered" | "timed_out";
@@ -93,7 +113,7 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
             visibility: "private" | "public";
             declaredOperationsDigest: import("@fungi.computer/puffball").Sha256Digest;
             approvedGrants: readonly Readonly<{
-                capability: "agent.list" | "agent.manage" | "agent.rename" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
+                capability: "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
                 capabilityApproved: true;
                 operations: readonly string[];
                 resources: "tenant-scope" | readonly Readonly<{
@@ -227,7 +247,7 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
             visibility: "private" | "public";
             declaredOperationsDigest: import("@fungi.computer/puffball").Sha256Digest;
             approvedGrants: readonly Readonly<{
-                capability: "agent.list" | "agent.manage" | "agent.rename" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
+                capability: "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
                 capabilityApproved: true;
                 operations: readonly string[];
                 resources: "tenant-scope" | readonly Readonly<{
@@ -311,7 +331,7 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
             visibility: "private" | "public";
             declaredOperationsDigest: import("@fungi.computer/puffball").Sha256Digest;
             approvedGrants: readonly Readonly<{
-                capability: "agent.list" | "agent.manage" | "agent.rename" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
+                capability: "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
                 capabilityApproved: true;
                 operations: readonly string[];
                 resources: "tenant-scope" | readonly Readonly<{
@@ -428,7 +448,7 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                 visibility: "private" | "public";
                 declaredOperationsDigest: import("@fungi.computer/puffball").Sha256Digest;
                 approvedGrants: readonly Readonly<{
-                    capability: "agent.list" | "agent.manage" | "agent.rename" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
+                    capability: "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
                     capabilityApproved: true;
                     operations: readonly string[];
                     resources: "tenant-scope" | readonly Readonly<{
@@ -526,7 +546,7 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                 visibility: "private" | "public";
                 declaredOperationsDigest: import("@fungi.computer/puffball").Sha256Digest;
                 approvedGrants: readonly Readonly<{
-                    capability: "agent.list" | "agent.manage" | "agent.rename" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
+                    capability: "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
                     capabilityApproved: true;
                     operations: readonly string[];
                     resources: "tenant-scope" | readonly Readonly<{
@@ -684,9 +704,11 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                         readonly port: string;
                     }[];
                     readonly timeout: number;
+                    readonly detail?: string | undefined;
                     readonly choices?: readonly {
-                        readonly id: string;
                         readonly label: string;
+                        readonly id: string;
+                        readonly description?: string | undefined;
                     }[] | undefined;
                 } | {
                     readonly id: string;
@@ -779,9 +801,11 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                                 readonly port: string;
                             }[];
                             readonly timeout: number;
+                            readonly detail?: string | undefined;
                             readonly choices?: readonly {
-                                readonly id: string;
                                 readonly label: string;
+                                readonly id: string;
+                                readonly description?: string | undefined;
                             }[] | undefined;
                         } | {
                             readonly id: string;
@@ -835,10 +859,10 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                 readonly triggers?: readonly ({
                     readonly id: string;
                     readonly on: "webhook";
-                    readonly when?: import("@fungi.computer/braid").Predicate | undefined;
                     readonly input?: {
                         readonly [x: string]: import("@fungi.computer/braid").Mapping;
                     } | undefined;
+                    readonly when?: import("@fungi.computer/braid").Predicate | undefined;
                     readonly title?: string | undefined;
                 } | {
                     readonly id: string;
@@ -857,11 +881,11 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                     readonly on: "event";
                     readonly app: string;
                     readonly eventDigest: string;
-                    readonly repository?: import("@fungi.computer/braid").Mapping | undefined;
-                    readonly when?: import("@fungi.computer/braid").Predicate | undefined;
                     readonly input?: {
                         readonly [x: string]: import("@fungi.computer/braid").Mapping;
                     } | undefined;
+                    readonly when?: import("@fungi.computer/braid").Predicate | undefined;
+                    readonly repository?: import("@fungi.computer/braid").Mapping | undefined;
                     readonly title?: string | undefined;
                 })[] | undefined;
             };
@@ -869,13 +893,13 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                 readonly [x: string]: {
                     readonly methods: {
                         readonly [x: string]: {
-                            readonly digest: string;
                             readonly output: {
                                 readonly [x: string]: S.Json;
                             };
                             readonly input: {
                                 readonly [x: string]: S.Json;
                             };
+                            readonly digest: string;
                             readonly approval: "none" | "queue" | "simulate";
                             readonly description: string;
                             readonly effect: "read" | "write" | "external";
@@ -904,14 +928,14 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
             };
             readonly estimatedSteps: number;
             readonly requiredBindings: readonly {
-                readonly method: string;
-                readonly installationId: string;
                 readonly output: {
                     readonly [x: string]: S.Json;
                 };
                 readonly input: {
                     readonly [x: string]: S.Json;
                 };
+                readonly method: string;
+                readonly installationId: string;
                 readonly approval: "none" | "queue" | "simulate";
                 readonly description: string;
                 readonly effect: "read" | "write" | "external";

package/dist/standalone/workflow-host.js

@@ -1,7 +1,8 @@
 import * as S from "effect/Schema";
 import { admitRunInput, accepts, catalogEvents, catalogMethods, catalogSchema, contentDigest, canonicalJson, parseProjection, nodeEventSchema, } from "@fungi.computer/braid";
 import { deriveDeclaredOperations, approvedBindingGrants, grantsFor, } from "../apps/index.js";
-import { pendingSchema } from "@fungi.computer/agar/backend-definition";
+import { pendingSchema, presentMethodName, } from "@fungi.computer/agar/backend-definition";
+import { resultRowSchemaV1 } from "@fungi.computer/gills";
 import { verifyRelease, } from "../host.js";
 import { APP_INVOCATION_CEILING_MS, invocationAuthorityOf, invocationFacts, invocationFactsSchema, } from "../invocation.js";
 import { AppInstanceError } from "../index.js";
@@ -653,11 +654,8 @@ export function createStandaloneWorkflowHost(owner, host, options) {
             };
             const deadlineAt = Date.now() + APP_INVOCATION_CEILING_MS;
             const deadline = { deadlineAt, grantExpiresAt: deadlineAt };
-            const facts = run.publication === undefined
-                ? invocationFacts.fromCaller(authority, {
-                    ...savedCaller,
-                    idempotencyKey: call.idempotencyKey,
-                }, deadline)
+            const factsFor = (idempotencyKey) => run.publication === undefined
+                ? invocationFacts.fromCaller(authority, { ...savedCaller, idempotencyKey }, deadline)
                 : invocationFacts.fromWorkflowNode(authority, {
                     ...savedCaller,
                     workflow: {
@@ -666,8 +664,9 @@ export function createStandaloneWorkflowHost(owner, host, options) {
                         nodeId: resolved.nodeId,
                         armedBy: savedCaller.actor,
                     },
-                    idempotencyKey: call.idempotencyKey,
+                    idempotencyKey,
                 }, deadline);
+            const facts = factsFor(call.idempotencyKey);
             if (resolved.gitAccess !== undefined)
                 recordGitNode(call.idempotencyKey, {
                     teamId: run.teamId,
@@ -741,11 +740,39 @@ export function createStandaloneWorkflowHost(owner, host, options) {
                 return pending.data;
             if (!accepts(parseProjection(pinned.output), value))
                 return { kind: "refused", code: "invalid_output" };
-            return {
+            const output = S.decodeUnknownSync(S.Json)(value);
+            const row = verified.api.methods[resolved.method]?.present === undefined
+                ? undefined
+                : await presentedRow(resolved.method, host.instances
+                    .get(authority.instanceId)
+                    .call(factsFor(`${call.idempotencyKey}:present`), verified.api, presentMethodName, { method: resolved.method, input: resolved.input, output }));
+            const complete = {
                 kind: "complete",
-                output: S.decodeUnknownSync(S.Json)(value),
+                output,
                 costMilliunits: 0,
             };
+            return row === undefined ? complete : { ...complete, row };
         },
     };
 }
+/**
+ * A failed or malformed projection costs the step only its row: the step stays
+ * complete, Trellis reads it as "<App> ran <method>" with the raw view, and
+ * the operator log records why.
+ */
+async function presentedRow(method, reply) {
+    try {
+        const result = await reply;
+        if (!result.ok || result.value.kind !== "ok") {
+            console.error("Workflow step presentation was refused", method);
+            return undefined;
+        }
+        return S.decodeUnknownSync(resultRowSchemaV1, {
+            onExcessProperty: "error",
+        })(result.value.value);
+    }
+    catch (cause) {
+        console.error("Workflow step presentation failed", method, cause);
+        return undefined;
+    }
+}