@fungi.computer/oyster 0.1.0 → 0.3.0

package/dist/installation-operations.d.ts

@@ -0,0 +1,1437 @@
+import { z } from "zod";
+import { type WatchdogSqliteOwner } from "@fungi.computer/watchdog";
+import { type Installation } from "./apps/installation.js";
+import type { InstallationCommit } from "./host.js";
+import { type UiBootCheckOutcome } from "./boot-gate.js";
+export declare const installationRequestIdSchema: z.ZodString;
+/** Application evidence, never a classification of an edge's HTTP response. */
+declare const installationOutcomeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    state: z.ZodLiteral<"succeeded">;
+    installation: z.ZodObject<{
+        installationId: z.ZodLazy<z.ZodString>;
+        instanceId: z.ZodNullable<z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("./instance-id.js").InstanceId, unknown>>>;
+        appId: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("@fungi.computer/puffball").AppId, unknown>>;
+        release: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+            readonly releaseId: import("@fungi.computer/puffball").ReleaseId;
+            readonly appId: import("@fungi.computer/puffball").AppId;
+            readonly artifact: {
+                readonly artifactRef: import("@fungi.computer/puffball").ArtifactRef;
+                readonly artifactDigest: import("@fungi.computer/puffball").Sha256Digest;
+                readonly provenance: {
+                    readonly sourceRevision: import("@fungi.computer/puffball").SourceRevision;
+                    readonly sourceTreeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                    readonly buildRecipeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                };
+            };
+        }, unknown>>;
+        releasePin: z.ZodEnum<{
+            pinned: "pinned";
+            floating: "floating";
+        }>;
+        authority: z.ZodObject<{
+            authorityVersion: z.ZodLazy<z.ZodNumber>;
+            declaredOperationsDigest: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("@fungi.computer/puffball").Sha256Digest, unknown>>;
+            approvedGrants: z.ZodLazy<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                capability: z.ZodPipe<z.ZodUnknown, z.ZodTransform<"approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage", unknown>>;
+                capabilityApproved: z.ZodLiteral<true>;
+                operations: z.ZodLazy<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+                resources: z.ZodUnion<readonly [z.ZodLiteral<"tenant-scope">, z.ZodReadonly<z.ZodArray<z.ZodLazy<z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodString;
+                    id: z.ZodString;
+                }, z.core.$strict>>>>>]>;
+            }, z.core.$strict>>>>>;
+            approval: z.ZodNullable<z.ZodLazy<z.ZodReadonly<z.ZodObject<{
+                by: import("zod/mini").ZodMiniDiscriminatedUnion<[import("zod/mini").ZodMiniObject<{
+                    kind: import("zod/mini").ZodMiniLiteral<"member">;
+                    memberId: import("zod/mini").ZodMiniString<string>;
+                }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                    kind: import("zod/mini").ZodMiniLiteral<"agent">;
+                    agentId: import("zod/mini").ZodMiniString<string>;
+                }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                    kind: import("zod/mini").ZodMiniLiteral<"team-key">;
+                    keyId: import("zod/mini").ZodMiniString<string>;
+                }, z.core.$strip>], "kind">;
+                at: z.ZodNumber;
+                authorityVersion: z.ZodLazy<z.ZodNumber>;
+            }, z.core.$strict>>>>;
+        }, z.core.$strict>;
+        status: z.ZodEnum<{
+            enabled: "enabled";
+            disabled: "disabled";
+            deleted: "deleted";
+        }>;
+        visibility: z.ZodEnum<{
+            private: "private";
+            public: "public";
+        }>;
+        approvedAnonymousMethods: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+            name: z.ZodPipe<z.ZodUnknown, z.ZodTransform<string, unknown>>;
+            digest: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("@fungi.computer/puffball").Sha256Digest, unknown>>;
+        }, z.core.$strict>>>>;
+        anonymousApproval: z.ZodNullable<z.ZodLazy<z.ZodReadonly<z.ZodObject<{
+            by: import("zod/mini").ZodMiniDiscriminatedUnion<[import("zod/mini").ZodMiniObject<{
+                kind: import("zod/mini").ZodMiniLiteral<"member">;
+                memberId: import("zod/mini").ZodMiniString<string>;
+            }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                kind: import("zod/mini").ZodMiniLiteral<"agent">;
+                agentId: import("zod/mini").ZodMiniString<string>;
+            }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                kind: import("zod/mini").ZodMiniLiteral<"team-key">;
+                keyId: import("zod/mini").ZodMiniString<string>;
+            }, z.core.$strip>], "kind">;
+            at: z.ZodNumber;
+            authorityVersion: z.ZodLazy<z.ZodNumber>;
+        }, z.core.$strict>>>>;
+    }, z.core.$strict>;
+    creation: z.ZodEnum<{
+        fresh: "fresh";
+        replacement: "replacement";
+        reminted: "reminted";
+    }>;
+    uiCheck: z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"passed">;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"failed">;
+        code: z.ZodLiteral<"ui_mount_failed">;
+        diagnostics: z.ZodOptional<z.ZodObject<{
+            failedPredicate: z.ZodEnum<{
+                unexpected_candidate_request: "unexpected_candidate_request";
+                response_status: "response_status";
+                request_failed: "request_failed";
+                page_error: "page_error";
+                candidate_not_mounted: "candidate_not_mounted";
+            }>;
+            errorName: z.ZodOptional<z.ZodEnum<{
+                TypeError: "TypeError";
+                RangeError: "RangeError";
+                SyntaxError: "SyntaxError";
+                AbortError: "AbortError";
+                TimeoutError: "TimeoutError";
+                Other: "Other";
+                Error: "Error";
+            }>>;
+            finalUrlPath: z.ZodString;
+            consoleErrors: z.ZodArray<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+            pageErrors: z.ZodArray<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+            failedRequests: z.ZodArray<z.ZodObject<{
+                path: z.ZodString;
+                status: z.ZodOptional<z.ZodNumber>;
+                failureKind: z.ZodOptional<z.ZodEnum<{
+                    unexpected_candidate_request: "unexpected_candidate_request";
+                    response_status: "response_status";
+                    request_failed: "request_failed";
+                }>>;
+            }, z.core.$strict>>;
+            droppedCount: z.ZodNumber;
+        }, z.core.$strict>>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"not_checked">;
+        code: z.ZodEnum<{
+            boot_runner_unavailable: "boot_runner_unavailable";
+            boot_browser_binding_missing: "boot_browser_binding_missing";
+            boot_clone_unavailable: "boot_clone_unavailable";
+            boot_timeout: "boot_timeout";
+            boot_cleanup_failed: "boot_cleanup_failed";
+            ui_check_not_run_on_host: "ui_check_not_run_on_host";
+        }>;
+    }, z.core.$strict>], "kind">>;
+}, z.core.$strict>, z.ZodObject<{
+    state: z.ZodLiteral<"refused">;
+    status: z.ZodNumber;
+    code: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    state: z.ZodLiteral<"unconfirmed">;
+    outcome: z.ZodEnum<{
+        cancelled: "cancelled";
+        outcome_unknown: "outcome_unknown";
+        interrupted: "interrupted";
+    }>;
+}, z.core.$strict>], "state">;
+export type InstallationOutcome = z.output<typeof installationOutcomeSchema>;
+/** One wire contract for admission and subsequent authoritative observation. */
+export declare const installationOperationSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    state: z.ZodLiteral<"pending">;
+    requestId: z.ZodString;
+    requestedInstallationId: z.ZodLazy<z.ZodString>;
+    installationId: z.ZodLazy<z.ZodString>;
+    release: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+        readonly releaseId: import("@fungi.computer/puffball").ReleaseId;
+        readonly appId: import("@fungi.computer/puffball").AppId;
+        readonly artifact: {
+            readonly artifactRef: import("@fungi.computer/puffball").ArtifactRef;
+            readonly artifactDigest: import("@fungi.computer/puffball").Sha256Digest;
+            readonly provenance: {
+                readonly sourceRevision: import("@fungi.computer/puffball").SourceRevision;
+                readonly sourceTreeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                readonly buildRecipeDigest: import("@fungi.computer/puffball").Sha256Digest;
+            };
+        };
+    }, unknown>>;
+}, z.core.$strict>, z.ZodObject<{
+    state: z.ZodLiteral<"succeeded">;
+    reference: z.ZodObject<{
+        generation: z.ZodString;
+        instanceId: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("./instance-id.js").InstanceId, unknown>>;
+        authorityVersion: z.ZodNumber;
+        status: z.ZodEnum<{
+            enabled: "enabled";
+            disabled: "disabled";
+            deleted: "deleted";
+        }>;
+    }, z.core.$strict>;
+    creation: z.ZodEnum<{
+        fresh: "fresh";
+        replacement: "replacement";
+        reminted: "reminted";
+    }>;
+    uiCheck: z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"passed">;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"failed">;
+        code: z.ZodLiteral<"ui_mount_failed">;
+        diagnostics: z.ZodOptional<z.ZodObject<{
+            failedPredicate: z.ZodEnum<{
+                unexpected_candidate_request: "unexpected_candidate_request";
+                response_status: "response_status";
+                request_failed: "request_failed";
+                page_error: "page_error";
+                candidate_not_mounted: "candidate_not_mounted";
+            }>;
+            errorName: z.ZodOptional<z.ZodEnum<{
+                TypeError: "TypeError";
+                RangeError: "RangeError";
+                SyntaxError: "SyntaxError";
+                AbortError: "AbortError";
+                TimeoutError: "TimeoutError";
+                Other: "Other";
+                Error: "Error";
+            }>>;
+            finalUrlPath: z.ZodString;
+            consoleErrors: z.ZodArray<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+            pageErrors: z.ZodArray<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+            failedRequests: z.ZodArray<z.ZodObject<{
+                path: z.ZodString;
+                status: z.ZodOptional<z.ZodNumber>;
+                failureKind: z.ZodOptional<z.ZodEnum<{
+                    unexpected_candidate_request: "unexpected_candidate_request";
+                    response_status: "response_status";
+                    request_failed: "request_failed";
+                }>>;
+            }, z.core.$strict>>;
+            droppedCount: z.ZodNumber;
+        }, z.core.$strict>>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"not_checked">;
+        code: z.ZodEnum<{
+            boot_runner_unavailable: "boot_runner_unavailable";
+            boot_browser_binding_missing: "boot_browser_binding_missing";
+            boot_clone_unavailable: "boot_clone_unavailable";
+            boot_timeout: "boot_timeout";
+            boot_cleanup_failed: "boot_cleanup_failed";
+            ui_check_not_run_on_host: "ui_check_not_run_on_host";
+        }>;
+    }, z.core.$strict>], "kind">>;
+    requestId: z.ZodString;
+    requestedInstallationId: z.ZodLazy<z.ZodString>;
+    installationId: z.ZodLazy<z.ZodString>;
+    release: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+        readonly releaseId: import("@fungi.computer/puffball").ReleaseId;
+        readonly appId: import("@fungi.computer/puffball").AppId;
+        readonly artifact: {
+            readonly artifactRef: import("@fungi.computer/puffball").ArtifactRef;
+            readonly artifactDigest: import("@fungi.computer/puffball").Sha256Digest;
+            readonly provenance: {
+                readonly sourceRevision: import("@fungi.computer/puffball").SourceRevision;
+                readonly sourceTreeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                readonly buildRecipeDigest: import("@fungi.computer/puffball").Sha256Digest;
+            };
+        };
+    }, unknown>>;
+    installation: z.ZodNullable<z.ZodObject<{
+        installationId: z.ZodLazy<z.ZodString>;
+        instanceId: z.ZodNullable<z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("./instance-id.js").InstanceId, unknown>>>;
+        appId: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("@fungi.computer/puffball").AppId, unknown>>;
+        release: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+            readonly releaseId: import("@fungi.computer/puffball").ReleaseId;
+            readonly appId: import("@fungi.computer/puffball").AppId;
+            readonly artifact: {
+                readonly artifactRef: import("@fungi.computer/puffball").ArtifactRef;
+                readonly artifactDigest: import("@fungi.computer/puffball").Sha256Digest;
+                readonly provenance: {
+                    readonly sourceRevision: import("@fungi.computer/puffball").SourceRevision;
+                    readonly sourceTreeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                    readonly buildRecipeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                };
+            };
+        }, unknown>>;
+        releasePin: z.ZodEnum<{
+            pinned: "pinned";
+            floating: "floating";
+        }>;
+        authority: z.ZodObject<{
+            authorityVersion: z.ZodLazy<z.ZodNumber>;
+            declaredOperationsDigest: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("@fungi.computer/puffball").Sha256Digest, unknown>>;
+            approvedGrants: z.ZodLazy<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                capability: z.ZodPipe<z.ZodUnknown, z.ZodTransform<"approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage", unknown>>;
+                capabilityApproved: z.ZodLiteral<true>;
+                operations: z.ZodLazy<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+                resources: z.ZodUnion<readonly [z.ZodLiteral<"tenant-scope">, z.ZodReadonly<z.ZodArray<z.ZodLazy<z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodString;
+                    id: z.ZodString;
+                }, z.core.$strict>>>>>]>;
+            }, z.core.$strict>>>>>;
+            approval: z.ZodNullable<z.ZodLazy<z.ZodReadonly<z.ZodObject<{
+                by: import("zod/mini").ZodMiniDiscriminatedUnion<[import("zod/mini").ZodMiniObject<{
+                    kind: import("zod/mini").ZodMiniLiteral<"member">;
+                    memberId: import("zod/mini").ZodMiniString<string>;
+                }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                    kind: import("zod/mini").ZodMiniLiteral<"agent">;
+                    agentId: import("zod/mini").ZodMiniString<string>;
+                }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                    kind: import("zod/mini").ZodMiniLiteral<"team-key">;
+                    keyId: import("zod/mini").ZodMiniString<string>;
+                }, z.core.$strip>], "kind">;
+                at: z.ZodNumber;
+                authorityVersion: z.ZodLazy<z.ZodNumber>;
+            }, z.core.$strict>>>>;
+        }, z.core.$strict>;
+        status: z.ZodEnum<{
+            enabled: "enabled";
+            disabled: "disabled";
+            deleted: "deleted";
+        }>;
+        visibility: z.ZodEnum<{
+            private: "private";
+            public: "public";
+        }>;
+        approvedAnonymousMethods: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+            name: z.ZodPipe<z.ZodUnknown, z.ZodTransform<string, unknown>>;
+            digest: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("@fungi.computer/puffball").Sha256Digest, unknown>>;
+        }, z.core.$strict>>>>;
+        anonymousApproval: z.ZodNullable<z.ZodLazy<z.ZodReadonly<z.ZodObject<{
+            by: import("zod/mini").ZodMiniDiscriminatedUnion<[import("zod/mini").ZodMiniObject<{
+                kind: import("zod/mini").ZodMiniLiteral<"member">;
+                memberId: import("zod/mini").ZodMiniString<string>;
+            }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                kind: import("zod/mini").ZodMiniLiteral<"agent">;
+                agentId: import("zod/mini").ZodMiniString<string>;
+            }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                kind: import("zod/mini").ZodMiniLiteral<"team-key">;
+                keyId: import("zod/mini").ZodMiniString<string>;
+            }, z.core.$strip>], "kind">;
+            at: z.ZodNumber;
+            authorityVersion: z.ZodLazy<z.ZodNumber>;
+        }, z.core.$strict>>>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>, z.ZodObject<{
+    state: z.ZodLiteral<"refused">;
+    status: z.ZodNumber;
+    code: z.ZodString;
+    requestId: z.ZodString;
+    requestedInstallationId: z.ZodLazy<z.ZodString>;
+    installationId: z.ZodLazy<z.ZodString>;
+    release: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+        readonly releaseId: import("@fungi.computer/puffball").ReleaseId;
+        readonly appId: import("@fungi.computer/puffball").AppId;
+        readonly artifact: {
+            readonly artifactRef: import("@fungi.computer/puffball").ArtifactRef;
+            readonly artifactDigest: import("@fungi.computer/puffball").Sha256Digest;
+            readonly provenance: {
+                readonly sourceRevision: import("@fungi.computer/puffball").SourceRevision;
+                readonly sourceTreeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                readonly buildRecipeDigest: import("@fungi.computer/puffball").Sha256Digest;
+            };
+        };
+    }, unknown>>;
+}, z.core.$strict>, z.ZodObject<{
+    state: z.ZodLiteral<"unconfirmed">;
+    outcome: z.ZodEnum<{
+        cancelled: "cancelled";
+        outcome_unknown: "outcome_unknown";
+        interrupted: "interrupted";
+    }>;
+    requestId: z.ZodString;
+    requestedInstallationId: z.ZodLazy<z.ZodString>;
+    installationId: z.ZodLazy<z.ZodString>;
+    release: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+        readonly releaseId: import("@fungi.computer/puffball").ReleaseId;
+        readonly appId: import("@fungi.computer/puffball").AppId;
+        readonly artifact: {
+            readonly artifactRef: import("@fungi.computer/puffball").ArtifactRef;
+            readonly artifactDigest: import("@fungi.computer/puffball").Sha256Digest;
+            readonly provenance: {
+                readonly sourceRevision: import("@fungi.computer/puffball").SourceRevision;
+                readonly sourceTreeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                readonly buildRecipeDigest: import("@fungi.computer/puffball").Sha256Digest;
+            };
+        };
+    }, unknown>>;
+}, z.core.$strict>], "state">;
+export type InstallationOperation = z.output<typeof installationOperationSchema>;
+declare const installationAdmissionSchema: z.ZodObject<{
+    requestId: z.ZodString;
+    installationId: z.ZodLazy<z.ZodString>;
+    release: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+        readonly releaseId: import("@fungi.computer/puffball").ReleaseId;
+        readonly appId: import("@fungi.computer/puffball").AppId;
+        readonly artifact: {
+            readonly artifactRef: import("@fungi.computer/puffball").ArtifactRef;
+            readonly artifactDigest: import("@fungi.computer/puffball").Sha256Digest;
+            readonly provenance: {
+                readonly sourceRevision: import("@fungi.computer/puffball").SourceRevision;
+                readonly sourceTreeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                readonly buildRecipeDigest: import("@fungi.computer/puffball").Sha256Digest;
+            };
+        };
+    }, unknown>>;
+    actor: import("zod/mini").ZodMiniDiscriminatedUnion<[import("zod/mini").ZodMiniObject<{
+        kind: import("zod/mini").ZodMiniLiteral<"member">;
+        memberId: import("zod/mini").ZodMiniString<string>;
+    }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+        kind: import("zod/mini").ZodMiniLiteral<"agent">;
+        agentId: import("zod/mini").ZodMiniString<string>;
+    }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+        kind: import("zod/mini").ZodMiniLiteral<"team-key">;
+        keyId: import("zod/mini").ZodMiniString<string>;
+    }, z.core.$strip>], "kind">;
+    intent: z.ZodEnum<{
+        "install-or-select": "install-or-select";
+        "install-or-remint": "install-or-remint";
+        "create-only": "create-only";
+    }>;
+    origin: z.ZodEnum<{
+        workflow: "workflow";
+        "owner-direct": "owner-direct";
+    }>;
+}, z.core.$strict>;
+export type InstallationAdmission = z.output<typeof installationAdmissionSchema>;
+/** Retained intent and exact baseline; recovery never re-reduces a newer row. */
+export declare const retainedInstallationCommandSchema: z.ZodObject<{
+    admission: z.ZodObject<{
+        requestId: z.ZodString;
+        installationId: z.ZodLazy<z.ZodString>;
+        release: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+            readonly releaseId: import("@fungi.computer/puffball").ReleaseId;
+            readonly appId: import("@fungi.computer/puffball").AppId;
+            readonly artifact: {
+                readonly artifactRef: import("@fungi.computer/puffball").ArtifactRef;
+                readonly artifactDigest: import("@fungi.computer/puffball").Sha256Digest;
+                readonly provenance: {
+                    readonly sourceRevision: import("@fungi.computer/puffball").SourceRevision;
+                    readonly sourceTreeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                    readonly buildRecipeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                };
+            };
+        }, unknown>>;
+        actor: import("zod/mini").ZodMiniDiscriminatedUnion<[import("zod/mini").ZodMiniObject<{
+            kind: import("zod/mini").ZodMiniLiteral<"member">;
+            memberId: import("zod/mini").ZodMiniString<string>;
+        }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+            kind: import("zod/mini").ZodMiniLiteral<"agent">;
+            agentId: import("zod/mini").ZodMiniString<string>;
+        }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+            kind: import("zod/mini").ZodMiniLiteral<"team-key">;
+            keyId: import("zod/mini").ZodMiniString<string>;
+        }, z.core.$strip>], "kind">;
+        intent: z.ZodEnum<{
+            "install-or-select": "install-or-select";
+            "install-or-remint": "install-or-remint";
+            "create-only": "create-only";
+        }>;
+        origin: z.ZodEnum<{
+            workflow: "workflow";
+            "owner-direct": "owner-direct";
+        }>;
+    }, z.core.$strict>;
+    scope: z.ZodObject<{
+        tenantId: z.ZodPipe<z.ZodUnknown, z.ZodTransform<string & import("effect/Brand").Brand<"OysterTenantId">, unknown>>;
+        origin: z.ZodURL;
+    }, z.core.$strict>;
+    installationId: z.ZodLazy<z.ZodString>;
+    instanceId: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("./instance-id.js").InstanceId, unknown>>;
+    generation: z.ZodString;
+    baseline: z.ZodNullable<z.ZodObject<{
+        installationId: z.ZodLazy<z.ZodString>;
+        instanceId: z.ZodNullable<z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("./instance-id.js").InstanceId, unknown>>>;
+        appId: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("@fungi.computer/puffball").AppId, unknown>>;
+        release: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+            readonly releaseId: import("@fungi.computer/puffball").ReleaseId;
+            readonly appId: import("@fungi.computer/puffball").AppId;
+            readonly artifact: {
+                readonly artifactRef: import("@fungi.computer/puffball").ArtifactRef;
+                readonly artifactDigest: import("@fungi.computer/puffball").Sha256Digest;
+                readonly provenance: {
+                    readonly sourceRevision: import("@fungi.computer/puffball").SourceRevision;
+                    readonly sourceTreeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                    readonly buildRecipeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                };
+            };
+        }, unknown>>;
+        releasePin: z.ZodEnum<{
+            pinned: "pinned";
+            floating: "floating";
+        }>;
+        authority: z.ZodObject<{
+            authorityVersion: z.ZodLazy<z.ZodNumber>;
+            declaredOperationsDigest: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("@fungi.computer/puffball").Sha256Digest, unknown>>;
+            approvedGrants: z.ZodLazy<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                capability: z.ZodPipe<z.ZodUnknown, z.ZodTransform<"approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage", unknown>>;
+                capabilityApproved: z.ZodLiteral<true>;
+                operations: z.ZodLazy<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+                resources: z.ZodUnion<readonly [z.ZodLiteral<"tenant-scope">, z.ZodReadonly<z.ZodArray<z.ZodLazy<z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodString;
+                    id: z.ZodString;
+                }, z.core.$strict>>>>>]>;
+            }, z.core.$strict>>>>>;
+            approval: z.ZodNullable<z.ZodLazy<z.ZodReadonly<z.ZodObject<{
+                by: import("zod/mini").ZodMiniDiscriminatedUnion<[import("zod/mini").ZodMiniObject<{
+                    kind: import("zod/mini").ZodMiniLiteral<"member">;
+                    memberId: import("zod/mini").ZodMiniString<string>;
+                }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                    kind: import("zod/mini").ZodMiniLiteral<"agent">;
+                    agentId: import("zod/mini").ZodMiniString<string>;
+                }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                    kind: import("zod/mini").ZodMiniLiteral<"team-key">;
+                    keyId: import("zod/mini").ZodMiniString<string>;
+                }, z.core.$strip>], "kind">;
+                at: z.ZodNumber;
+                authorityVersion: z.ZodLazy<z.ZodNumber>;
+            }, z.core.$strict>>>>;
+        }, z.core.$strict>;
+        status: z.ZodEnum<{
+            enabled: "enabled";
+            disabled: "disabled";
+            deleted: "deleted";
+        }>;
+        visibility: z.ZodEnum<{
+            private: "private";
+            public: "public";
+        }>;
+        approvedAnonymousMethods: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+            name: z.ZodPipe<z.ZodUnknown, z.ZodTransform<string, unknown>>;
+            digest: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("@fungi.computer/puffball").Sha256Digest, unknown>>;
+        }, z.core.$strict>>>>;
+        anonymousApproval: z.ZodNullable<z.ZodLazy<z.ZodReadonly<z.ZodObject<{
+            by: import("zod/mini").ZodMiniDiscriminatedUnion<[import("zod/mini").ZodMiniObject<{
+                kind: import("zod/mini").ZodMiniLiteral<"member">;
+                memberId: import("zod/mini").ZodMiniString<string>;
+            }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                kind: import("zod/mini").ZodMiniLiteral<"agent">;
+                agentId: import("zod/mini").ZodMiniString<string>;
+            }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                kind: import("zod/mini").ZodMiniLiteral<"team-key">;
+                keyId: import("zod/mini").ZodMiniString<string>;
+            }, z.core.$strip>], "kind">;
+            at: z.ZodNumber;
+            authorityVersion: z.ZodLazy<z.ZodNumber>;
+        }, z.core.$strict>>>>;
+    }, z.core.$strict>>;
+    acceptedAt: z.ZodNumber;
+    creation: z.ZodEnum<{
+        fresh: "fresh";
+        replacement: "replacement";
+        reminted: "reminted";
+    }>;
+    plan: z.ZodNullable<z.ZodObject<{
+        installation: z.ZodObject<{
+            installationId: z.ZodLazy<z.ZodString>;
+            instanceId: z.ZodNullable<z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("./instance-id.js").InstanceId, unknown>>>;
+            appId: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("@fungi.computer/puffball").AppId, unknown>>;
+            release: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+                readonly releaseId: import("@fungi.computer/puffball").ReleaseId;
+                readonly appId: import("@fungi.computer/puffball").AppId;
+                readonly artifact: {
+                    readonly artifactRef: import("@fungi.computer/puffball").ArtifactRef;
+                    readonly artifactDigest: import("@fungi.computer/puffball").Sha256Digest;
+                    readonly provenance: {
+                        readonly sourceRevision: import("@fungi.computer/puffball").SourceRevision;
+                        readonly sourceTreeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                        readonly buildRecipeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                    };
+                };
+            }, unknown>>;
+            releasePin: z.ZodEnum<{
+                pinned: "pinned";
+                floating: "floating";
+            }>;
+            authority: z.ZodObject<{
+                authorityVersion: z.ZodLazy<z.ZodNumber>;
+                declaredOperationsDigest: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("@fungi.computer/puffball").Sha256Digest, unknown>>;
+                approvedGrants: z.ZodLazy<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    capability: z.ZodPipe<z.ZodUnknown, z.ZodTransform<"approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage", unknown>>;
+                    capabilityApproved: z.ZodLiteral<true>;
+                    operations: z.ZodLazy<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+                    resources: z.ZodUnion<readonly [z.ZodLiteral<"tenant-scope">, z.ZodReadonly<z.ZodArray<z.ZodLazy<z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodString;
+                        id: z.ZodString;
+                    }, z.core.$strict>>>>>]>;
+                }, z.core.$strict>>>>>;
+                approval: z.ZodNullable<z.ZodLazy<z.ZodReadonly<z.ZodObject<{
+                    by: import("zod/mini").ZodMiniDiscriminatedUnion<[import("zod/mini").ZodMiniObject<{
+                        kind: import("zod/mini").ZodMiniLiteral<"member">;
+                        memberId: import("zod/mini").ZodMiniString<string>;
+                    }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                        kind: import("zod/mini").ZodMiniLiteral<"agent">;
+                        agentId: import("zod/mini").ZodMiniString<string>;
+                    }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                        kind: import("zod/mini").ZodMiniLiteral<"team-key">;
+                        keyId: import("zod/mini").ZodMiniString<string>;
+                    }, z.core.$strip>], "kind">;
+                    at: z.ZodNumber;
+                    authorityVersion: z.ZodLazy<z.ZodNumber>;
+                }, z.core.$strict>>>>;
+            }, z.core.$strict>;
+            status: z.ZodEnum<{
+                enabled: "enabled";
+                disabled: "disabled";
+                deleted: "deleted";
+            }>;
+            visibility: z.ZodEnum<{
+                private: "private";
+                public: "public";
+            }>;
+            approvedAnonymousMethods: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                name: z.ZodPipe<z.ZodUnknown, z.ZodTransform<string, unknown>>;
+                digest: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("@fungi.computer/puffball").Sha256Digest, unknown>>;
+            }, z.core.$strict>>>>;
+            anonymousApproval: z.ZodNullable<z.ZodLazy<z.ZodReadonly<z.ZodObject<{
+                by: import("zod/mini").ZodMiniDiscriminatedUnion<[import("zod/mini").ZodMiniObject<{
+                    kind: import("zod/mini").ZodMiniLiteral<"member">;
+                    memberId: import("zod/mini").ZodMiniString<string>;
+                }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                    kind: import("zod/mini").ZodMiniLiteral<"agent">;
+                    agentId: import("zod/mini").ZodMiniString<string>;
+                }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                    kind: import("zod/mini").ZodMiniLiteral<"team-key">;
+                    keyId: import("zod/mini").ZodMiniString<string>;
+                }, z.core.$strip>], "kind">;
+                at: z.ZodNumber;
+                authorityVersion: z.ZodLazy<z.ZodNumber>;
+            }, z.core.$strict>>>>;
+        }, z.core.$strict>;
+        hasBackend: z.ZodBoolean;
+        prepared: z.ZodBoolean;
+        uiCheck: z.ZodOptional<z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"passed">;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"failed">;
+            code: z.ZodLiteral<"ui_mount_failed">;
+            diagnostics: z.ZodOptional<z.ZodObject<{
+                failedPredicate: z.ZodEnum<{
+                    unexpected_candidate_request: "unexpected_candidate_request";
+                    response_status: "response_status";
+                    request_failed: "request_failed";
+                    page_error: "page_error";
+                    candidate_not_mounted: "candidate_not_mounted";
+                }>;
+                errorName: z.ZodOptional<z.ZodEnum<{
+                    TypeError: "TypeError";
+                    RangeError: "RangeError";
+                    SyntaxError: "SyntaxError";
+                    AbortError: "AbortError";
+                    TimeoutError: "TimeoutError";
+                    Other: "Other";
+                    Error: "Error";
+                }>>;
+                finalUrlPath: z.ZodString;
+                consoleErrors: z.ZodArray<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                pageErrors: z.ZodArray<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                failedRequests: z.ZodArray<z.ZodObject<{
+                    path: z.ZodString;
+                    status: z.ZodOptional<z.ZodNumber>;
+                    failureKind: z.ZodOptional<z.ZodEnum<{
+                        unexpected_candidate_request: "unexpected_candidate_request";
+                        response_status: "response_status";
+                        request_failed: "request_failed";
+                    }>>;
+                }, z.core.$strict>>;
+                droppedCount: z.ZodNumber;
+            }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"not_checked">;
+            code: z.ZodEnum<{
+                boot_runner_unavailable: "boot_runner_unavailable";
+                boot_browser_binding_missing: "boot_browser_binding_missing";
+                boot_clone_unavailable: "boot_clone_unavailable";
+                boot_timeout: "boot_timeout";
+                boot_cleanup_failed: "boot_cleanup_failed";
+                ui_check_not_run_on_host: "ui_check_not_run_on_host";
+            }>;
+        }, z.core.$strict>], "kind">>>;
+    }, z.core.$strict>>;
+    operation: z.ZodObject<{
+        state: z.ZodLiteral<"pending">;
+        requestId: z.ZodString;
+        requestedInstallationId: z.ZodLazy<z.ZodString>;
+        installationId: z.ZodLazy<z.ZodString>;
+        release: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+            readonly releaseId: import("@fungi.computer/puffball").ReleaseId;
+            readonly appId: import("@fungi.computer/puffball").AppId;
+            readonly artifact: {
+                readonly artifactRef: import("@fungi.computer/puffball").ArtifactRef;
+                readonly artifactDigest: import("@fungi.computer/puffball").Sha256Digest;
+                readonly provenance: {
+                    readonly sourceRevision: import("@fungi.computer/puffball").SourceRevision;
+                    readonly sourceTreeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                    readonly buildRecipeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                };
+            };
+        }, unknown>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type RetainedInstallationCommand = z.output<typeof retainedInstallationCommandSchema>;
+/** Host-side port; RPC transport and tenant context belong to the adapter. */
+export type InstallationOperations = Readonly<{
+    /** Accept one command, or replay the retained operation for its request id. */
+    admit(input: InstallationAdmission): Promise<InstallationOperation>;
+    /** The operation's current state, when it names this installation. */
+    read(requestId: string, installationId: string): Promise<InstallationOperation | null>;
+    /** Only pending recovery is executable; terminal history returns null. */
+    load(requestId: string): Promise<RetainedInstallationCommand | null>;
+    /** Record the executor's one reduced installation for this command. */
+    plan(requestId: string, installation: Installation, hasBackend: boolean): Promise<RetainedInstallationCommand>;
+    /** Commit the planned installation against its exact baseline. */
+    commit(requestId: string, uiCheck: UiBootCheckOutcome | null): Promise<InstallationCommit>;
+}>;
+declare const installationOperationRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    action: z.ZodLiteral<"admit">;
+    scope: z.ZodObject<{
+        tenantId: z.ZodPipe<z.ZodUnknown, z.ZodTransform<string & import("effect/Brand").Brand<"OysterTenantId">, unknown>>;
+        origin: z.ZodURL;
+    }, z.core.$strict>;
+    input: z.ZodObject<{
+        requestId: z.ZodString;
+        installationId: z.ZodLazy<z.ZodString>;
+        release: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+            readonly releaseId: import("@fungi.computer/puffball").ReleaseId;
+            readonly appId: import("@fungi.computer/puffball").AppId;
+            readonly artifact: {
+                readonly artifactRef: import("@fungi.computer/puffball").ArtifactRef;
+                readonly artifactDigest: import("@fungi.computer/puffball").Sha256Digest;
+                readonly provenance: {
+                    readonly sourceRevision: import("@fungi.computer/puffball").SourceRevision;
+                    readonly sourceTreeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                    readonly buildRecipeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                };
+            };
+        }, unknown>>;
+        actor: import("zod/mini").ZodMiniDiscriminatedUnion<[import("zod/mini").ZodMiniObject<{
+            kind: import("zod/mini").ZodMiniLiteral<"member">;
+            memberId: import("zod/mini").ZodMiniString<string>;
+        }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+            kind: import("zod/mini").ZodMiniLiteral<"agent">;
+            agentId: import("zod/mini").ZodMiniString<string>;
+        }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+            kind: import("zod/mini").ZodMiniLiteral<"team-key">;
+            keyId: import("zod/mini").ZodMiniString<string>;
+        }, z.core.$strip>], "kind">;
+        intent: z.ZodEnum<{
+            "install-or-select": "install-or-select";
+            "install-or-remint": "install-or-remint";
+            "create-only": "create-only";
+        }>;
+        origin: z.ZodEnum<{
+            workflow: "workflow";
+            "owner-direct": "owner-direct";
+        }>;
+    }, z.core.$strict>;
+}, z.core.$strict>, z.ZodObject<{
+    action: z.ZodLiteral<"read">;
+    scope: z.ZodObject<{
+        tenantId: z.ZodPipe<z.ZodUnknown, z.ZodTransform<string & import("effect/Brand").Brand<"OysterTenantId">, unknown>>;
+        origin: z.ZodURL;
+    }, z.core.$strict>;
+    requestId: z.ZodString;
+    installationId: z.ZodLazy<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    action: z.ZodLiteral<"load">;
+    scope: z.ZodObject<{
+        tenantId: z.ZodPipe<z.ZodUnknown, z.ZodTransform<string & import("effect/Brand").Brand<"OysterTenantId">, unknown>>;
+        origin: z.ZodURL;
+    }, z.core.$strict>;
+    requestId: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    action: z.ZodLiteral<"plan">;
+    scope: z.ZodObject<{
+        tenantId: z.ZodPipe<z.ZodUnknown, z.ZodTransform<string & import("effect/Brand").Brand<"OysterTenantId">, unknown>>;
+        origin: z.ZodURL;
+    }, z.core.$strict>;
+    requestId: z.ZodString;
+    installation: z.ZodObject<{
+        installationId: z.ZodLazy<z.ZodString>;
+        instanceId: z.ZodNullable<z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("./instance-id.js").InstanceId, unknown>>>;
+        appId: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("@fungi.computer/puffball").AppId, unknown>>;
+        release: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+            readonly releaseId: import("@fungi.computer/puffball").ReleaseId;
+            readonly appId: import("@fungi.computer/puffball").AppId;
+            readonly artifact: {
+                readonly artifactRef: import("@fungi.computer/puffball").ArtifactRef;
+                readonly artifactDigest: import("@fungi.computer/puffball").Sha256Digest;
+                readonly provenance: {
+                    readonly sourceRevision: import("@fungi.computer/puffball").SourceRevision;
+                    readonly sourceTreeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                    readonly buildRecipeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                };
+            };
+        }, unknown>>;
+        releasePin: z.ZodEnum<{
+            pinned: "pinned";
+            floating: "floating";
+        }>;
+        authority: z.ZodObject<{
+            authorityVersion: z.ZodLazy<z.ZodNumber>;
+            declaredOperationsDigest: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("@fungi.computer/puffball").Sha256Digest, unknown>>;
+            approvedGrants: z.ZodLazy<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                capability: z.ZodPipe<z.ZodUnknown, z.ZodTransform<"approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage", unknown>>;
+                capabilityApproved: z.ZodLiteral<true>;
+                operations: z.ZodLazy<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+                resources: z.ZodUnion<readonly [z.ZodLiteral<"tenant-scope">, z.ZodReadonly<z.ZodArray<z.ZodLazy<z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodString;
+                    id: z.ZodString;
+                }, z.core.$strict>>>>>]>;
+            }, z.core.$strict>>>>>;
+            approval: z.ZodNullable<z.ZodLazy<z.ZodReadonly<z.ZodObject<{
+                by: import("zod/mini").ZodMiniDiscriminatedUnion<[import("zod/mini").ZodMiniObject<{
+                    kind: import("zod/mini").ZodMiniLiteral<"member">;
+                    memberId: import("zod/mini").ZodMiniString<string>;
+                }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                    kind: import("zod/mini").ZodMiniLiteral<"agent">;
+                    agentId: import("zod/mini").ZodMiniString<string>;
+                }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                    kind: import("zod/mini").ZodMiniLiteral<"team-key">;
+                    keyId: import("zod/mini").ZodMiniString<string>;
+                }, z.core.$strip>], "kind">;
+                at: z.ZodNumber;
+                authorityVersion: z.ZodLazy<z.ZodNumber>;
+            }, z.core.$strict>>>>;
+        }, z.core.$strict>;
+        status: z.ZodEnum<{
+            enabled: "enabled";
+            disabled: "disabled";
+            deleted: "deleted";
+        }>;
+        visibility: z.ZodEnum<{
+            private: "private";
+            public: "public";
+        }>;
+        approvedAnonymousMethods: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+            name: z.ZodPipe<z.ZodUnknown, z.ZodTransform<string, unknown>>;
+            digest: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("@fungi.computer/puffball").Sha256Digest, unknown>>;
+        }, z.core.$strict>>>>;
+        anonymousApproval: z.ZodNullable<z.ZodLazy<z.ZodReadonly<z.ZodObject<{
+            by: import("zod/mini").ZodMiniDiscriminatedUnion<[import("zod/mini").ZodMiniObject<{
+                kind: import("zod/mini").ZodMiniLiteral<"member">;
+                memberId: import("zod/mini").ZodMiniString<string>;
+            }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                kind: import("zod/mini").ZodMiniLiteral<"agent">;
+                agentId: import("zod/mini").ZodMiniString<string>;
+            }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                kind: import("zod/mini").ZodMiniLiteral<"team-key">;
+                keyId: import("zod/mini").ZodMiniString<string>;
+            }, z.core.$strip>], "kind">;
+            at: z.ZodNumber;
+            authorityVersion: z.ZodLazy<z.ZodNumber>;
+        }, z.core.$strict>>>>;
+    }, z.core.$strict>;
+    hasBackend: z.ZodBoolean;
+}, z.core.$strict>, z.ZodObject<{
+    action: z.ZodLiteral<"commit">;
+    scope: z.ZodObject<{
+        tenantId: z.ZodPipe<z.ZodUnknown, z.ZodTransform<string & import("effect/Brand").Brand<"OysterTenantId">, unknown>>;
+        origin: z.ZodURL;
+    }, z.core.$strict>;
+    requestId: z.ZodString;
+    uiCheck: z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"passed">;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"failed">;
+        code: z.ZodLiteral<"ui_mount_failed">;
+        diagnostics: z.ZodOptional<z.ZodObject<{
+            failedPredicate: z.ZodEnum<{
+                unexpected_candidate_request: "unexpected_candidate_request";
+                response_status: "response_status";
+                request_failed: "request_failed";
+                page_error: "page_error";
+                candidate_not_mounted: "candidate_not_mounted";
+            }>;
+            errorName: z.ZodOptional<z.ZodEnum<{
+                TypeError: "TypeError";
+                RangeError: "RangeError";
+                SyntaxError: "SyntaxError";
+                AbortError: "AbortError";
+                TimeoutError: "TimeoutError";
+                Other: "Other";
+                Error: "Error";
+            }>>;
+            finalUrlPath: z.ZodString;
+            consoleErrors: z.ZodArray<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+            pageErrors: z.ZodArray<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+            failedRequests: z.ZodArray<z.ZodObject<{
+                path: z.ZodString;
+                status: z.ZodOptional<z.ZodNumber>;
+                failureKind: z.ZodOptional<z.ZodEnum<{
+                    unexpected_candidate_request: "unexpected_candidate_request";
+                    response_status: "response_status";
+                    request_failed: "request_failed";
+                }>>;
+            }, z.core.$strict>>;
+            droppedCount: z.ZodNumber;
+        }, z.core.$strict>>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"not_checked">;
+        code: z.ZodEnum<{
+            boot_runner_unavailable: "boot_runner_unavailable";
+            boot_browser_binding_missing: "boot_browser_binding_missing";
+            boot_clone_unavailable: "boot_clone_unavailable";
+            boot_timeout: "boot_timeout";
+            boot_cleanup_failed: "boot_cleanup_failed";
+            ui_check_not_run_on_host: "ui_check_not_run_on_host";
+        }>;
+    }, z.core.$strict>], "kind">>;
+}, z.core.$strict>], "action">;
+export type InstallationOperationRequest = z.output<typeof installationOperationRequestSchema>;
+declare const installationOperationReplySchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"refused">;
+    code: z.ZodEnum<{
+        unavailable: "unavailable";
+        stale_authority: "stale_authority";
+        request_conflict: "request_conflict";
+        needs_consent: "needs_consent";
+        stored_operation_invalid: "stored_operation_invalid";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"operation">;
+    operation: z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        state: z.ZodLiteral<"pending">;
+        requestId: z.ZodString;
+        requestedInstallationId: z.ZodLazy<z.ZodString>;
+        installationId: z.ZodLazy<z.ZodString>;
+        release: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+            readonly releaseId: import("@fungi.computer/puffball").ReleaseId;
+            readonly appId: import("@fungi.computer/puffball").AppId;
+            readonly artifact: {
+                readonly artifactRef: import("@fungi.computer/puffball").ArtifactRef;
+                readonly artifactDigest: import("@fungi.computer/puffball").Sha256Digest;
+                readonly provenance: {
+                    readonly sourceRevision: import("@fungi.computer/puffball").SourceRevision;
+                    readonly sourceTreeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                    readonly buildRecipeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                };
+            };
+        }, unknown>>;
+    }, z.core.$strict>, z.ZodObject<{
+        state: z.ZodLiteral<"succeeded">;
+        reference: z.ZodObject<{
+            generation: z.ZodString;
+            instanceId: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("./instance-id.js").InstanceId, unknown>>;
+            authorityVersion: z.ZodNumber;
+            status: z.ZodEnum<{
+                enabled: "enabled";
+                disabled: "disabled";
+                deleted: "deleted";
+            }>;
+        }, z.core.$strict>;
+        creation: z.ZodEnum<{
+            fresh: "fresh";
+            replacement: "replacement";
+            reminted: "reminted";
+        }>;
+        uiCheck: z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"passed">;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"failed">;
+            code: z.ZodLiteral<"ui_mount_failed">;
+            diagnostics: z.ZodOptional<z.ZodObject<{
+                failedPredicate: z.ZodEnum<{
+                    unexpected_candidate_request: "unexpected_candidate_request";
+                    response_status: "response_status";
+                    request_failed: "request_failed";
+                    page_error: "page_error";
+                    candidate_not_mounted: "candidate_not_mounted";
+                }>;
+                errorName: z.ZodOptional<z.ZodEnum<{
+                    TypeError: "TypeError";
+                    RangeError: "RangeError";
+                    SyntaxError: "SyntaxError";
+                    AbortError: "AbortError";
+                    TimeoutError: "TimeoutError";
+                    Other: "Other";
+                    Error: "Error";
+                }>>;
+                finalUrlPath: z.ZodString;
+                consoleErrors: z.ZodArray<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                pageErrors: z.ZodArray<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                failedRequests: z.ZodArray<z.ZodObject<{
+                    path: z.ZodString;
+                    status: z.ZodOptional<z.ZodNumber>;
+                    failureKind: z.ZodOptional<z.ZodEnum<{
+                        unexpected_candidate_request: "unexpected_candidate_request";
+                        response_status: "response_status";
+                        request_failed: "request_failed";
+                    }>>;
+                }, z.core.$strict>>;
+                droppedCount: z.ZodNumber;
+            }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"not_checked">;
+            code: z.ZodEnum<{
+                boot_runner_unavailable: "boot_runner_unavailable";
+                boot_browser_binding_missing: "boot_browser_binding_missing";
+                boot_clone_unavailable: "boot_clone_unavailable";
+                boot_timeout: "boot_timeout";
+                boot_cleanup_failed: "boot_cleanup_failed";
+                ui_check_not_run_on_host: "ui_check_not_run_on_host";
+            }>;
+        }, z.core.$strict>], "kind">>;
+        requestId: z.ZodString;
+        requestedInstallationId: z.ZodLazy<z.ZodString>;
+        installationId: z.ZodLazy<z.ZodString>;
+        release: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+            readonly releaseId: import("@fungi.computer/puffball").ReleaseId;
+            readonly appId: import("@fungi.computer/puffball").AppId;
+            readonly artifact: {
+                readonly artifactRef: import("@fungi.computer/puffball").ArtifactRef;
+                readonly artifactDigest: import("@fungi.computer/puffball").Sha256Digest;
+                readonly provenance: {
+                    readonly sourceRevision: import("@fungi.computer/puffball").SourceRevision;
+                    readonly sourceTreeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                    readonly buildRecipeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                };
+            };
+        }, unknown>>;
+        installation: z.ZodNullable<z.ZodObject<{
+            installationId: z.ZodLazy<z.ZodString>;
+            instanceId: z.ZodNullable<z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("./instance-id.js").InstanceId, unknown>>>;
+            appId: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("@fungi.computer/puffball").AppId, unknown>>;
+            release: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+                readonly releaseId: import("@fungi.computer/puffball").ReleaseId;
+                readonly appId: import("@fungi.computer/puffball").AppId;
+                readonly artifact: {
+                    readonly artifactRef: import("@fungi.computer/puffball").ArtifactRef;
+                    readonly artifactDigest: import("@fungi.computer/puffball").Sha256Digest;
+                    readonly provenance: {
+                        readonly sourceRevision: import("@fungi.computer/puffball").SourceRevision;
+                        readonly sourceTreeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                        readonly buildRecipeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                    };
+                };
+            }, unknown>>;
+            releasePin: z.ZodEnum<{
+                pinned: "pinned";
+                floating: "floating";
+            }>;
+            authority: z.ZodObject<{
+                authorityVersion: z.ZodLazy<z.ZodNumber>;
+                declaredOperationsDigest: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("@fungi.computer/puffball").Sha256Digest, unknown>>;
+                approvedGrants: z.ZodLazy<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    capability: z.ZodPipe<z.ZodUnknown, z.ZodTransform<"approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage", unknown>>;
+                    capabilityApproved: z.ZodLiteral<true>;
+                    operations: z.ZodLazy<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+                    resources: z.ZodUnion<readonly [z.ZodLiteral<"tenant-scope">, z.ZodReadonly<z.ZodArray<z.ZodLazy<z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodString;
+                        id: z.ZodString;
+                    }, z.core.$strict>>>>>]>;
+                }, z.core.$strict>>>>>;
+                approval: z.ZodNullable<z.ZodLazy<z.ZodReadonly<z.ZodObject<{
+                    by: import("zod/mini").ZodMiniDiscriminatedUnion<[import("zod/mini").ZodMiniObject<{
+                        kind: import("zod/mini").ZodMiniLiteral<"member">;
+                        memberId: import("zod/mini").ZodMiniString<string>;
+                    }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                        kind: import("zod/mini").ZodMiniLiteral<"agent">;
+                        agentId: import("zod/mini").ZodMiniString<string>;
+                    }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                        kind: import("zod/mini").ZodMiniLiteral<"team-key">;
+                        keyId: import("zod/mini").ZodMiniString<string>;
+                    }, z.core.$strip>], "kind">;
+                    at: z.ZodNumber;
+                    authorityVersion: z.ZodLazy<z.ZodNumber>;
+                }, z.core.$strict>>>>;
+            }, z.core.$strict>;
+            status: z.ZodEnum<{
+                enabled: "enabled";
+                disabled: "disabled";
+                deleted: "deleted";
+            }>;
+            visibility: z.ZodEnum<{
+                private: "private";
+                public: "public";
+            }>;
+            approvedAnonymousMethods: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                name: z.ZodPipe<z.ZodUnknown, z.ZodTransform<string, unknown>>;
+                digest: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("@fungi.computer/puffball").Sha256Digest, unknown>>;
+            }, z.core.$strict>>>>;
+            anonymousApproval: z.ZodNullable<z.ZodLazy<z.ZodReadonly<z.ZodObject<{
+                by: import("zod/mini").ZodMiniDiscriminatedUnion<[import("zod/mini").ZodMiniObject<{
+                    kind: import("zod/mini").ZodMiniLiteral<"member">;
+                    memberId: import("zod/mini").ZodMiniString<string>;
+                }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                    kind: import("zod/mini").ZodMiniLiteral<"agent">;
+                    agentId: import("zod/mini").ZodMiniString<string>;
+                }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                    kind: import("zod/mini").ZodMiniLiteral<"team-key">;
+                    keyId: import("zod/mini").ZodMiniString<string>;
+                }, z.core.$strip>], "kind">;
+                at: z.ZodNumber;
+                authorityVersion: z.ZodLazy<z.ZodNumber>;
+            }, z.core.$strict>>>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>, z.ZodObject<{
+        state: z.ZodLiteral<"refused">;
+        status: z.ZodNumber;
+        code: z.ZodString;
+        requestId: z.ZodString;
+        requestedInstallationId: z.ZodLazy<z.ZodString>;
+        installationId: z.ZodLazy<z.ZodString>;
+        release: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+            readonly releaseId: import("@fungi.computer/puffball").ReleaseId;
+            readonly appId: import("@fungi.computer/puffball").AppId;
+            readonly artifact: {
+                readonly artifactRef: import("@fungi.computer/puffball").ArtifactRef;
+                readonly artifactDigest: import("@fungi.computer/puffball").Sha256Digest;
+                readonly provenance: {
+                    readonly sourceRevision: import("@fungi.computer/puffball").SourceRevision;
+                    readonly sourceTreeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                    readonly buildRecipeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                };
+            };
+        }, unknown>>;
+    }, z.core.$strict>, z.ZodObject<{
+        state: z.ZodLiteral<"unconfirmed">;
+        outcome: z.ZodEnum<{
+            cancelled: "cancelled";
+            outcome_unknown: "outcome_unknown";
+            interrupted: "interrupted";
+        }>;
+        requestId: z.ZodString;
+        requestedInstallationId: z.ZodLazy<z.ZodString>;
+        installationId: z.ZodLazy<z.ZodString>;
+        release: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+            readonly releaseId: import("@fungi.computer/puffball").ReleaseId;
+            readonly appId: import("@fungi.computer/puffball").AppId;
+            readonly artifact: {
+                readonly artifactRef: import("@fungi.computer/puffball").ArtifactRef;
+                readonly artifactDigest: import("@fungi.computer/puffball").Sha256Digest;
+                readonly provenance: {
+                    readonly sourceRevision: import("@fungi.computer/puffball").SourceRevision;
+                    readonly sourceTreeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                    readonly buildRecipeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                };
+            };
+        }, unknown>>;
+    }, z.core.$strict>], "state">>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"command">;
+    command: z.ZodNullable<z.ZodObject<{
+        admission: z.ZodObject<{
+            requestId: z.ZodString;
+            installationId: z.ZodLazy<z.ZodString>;
+            release: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+                readonly releaseId: import("@fungi.computer/puffball").ReleaseId;
+                readonly appId: import("@fungi.computer/puffball").AppId;
+                readonly artifact: {
+                    readonly artifactRef: import("@fungi.computer/puffball").ArtifactRef;
+                    readonly artifactDigest: import("@fungi.computer/puffball").Sha256Digest;
+                    readonly provenance: {
+                        readonly sourceRevision: import("@fungi.computer/puffball").SourceRevision;
+                        readonly sourceTreeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                        readonly buildRecipeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                    };
+                };
+            }, unknown>>;
+            actor: import("zod/mini").ZodMiniDiscriminatedUnion<[import("zod/mini").ZodMiniObject<{
+                kind: import("zod/mini").ZodMiniLiteral<"member">;
+                memberId: import("zod/mini").ZodMiniString<string>;
+            }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                kind: import("zod/mini").ZodMiniLiteral<"agent">;
+                agentId: import("zod/mini").ZodMiniString<string>;
+            }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                kind: import("zod/mini").ZodMiniLiteral<"team-key">;
+                keyId: import("zod/mini").ZodMiniString<string>;
+            }, z.core.$strip>], "kind">;
+            intent: z.ZodEnum<{
+                "install-or-select": "install-or-select";
+                "install-or-remint": "install-or-remint";
+                "create-only": "create-only";
+            }>;
+            origin: z.ZodEnum<{
+                workflow: "workflow";
+                "owner-direct": "owner-direct";
+            }>;
+        }, z.core.$strict>;
+        scope: z.ZodObject<{
+            tenantId: z.ZodPipe<z.ZodUnknown, z.ZodTransform<string & import("effect/Brand").Brand<"OysterTenantId">, unknown>>;
+            origin: z.ZodURL;
+        }, z.core.$strict>;
+        installationId: z.ZodLazy<z.ZodString>;
+        instanceId: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("./instance-id.js").InstanceId, unknown>>;
+        generation: z.ZodString;
+        baseline: z.ZodNullable<z.ZodObject<{
+            installationId: z.ZodLazy<z.ZodString>;
+            instanceId: z.ZodNullable<z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("./instance-id.js").InstanceId, unknown>>>;
+            appId: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("@fungi.computer/puffball").AppId, unknown>>;
+            release: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+                readonly releaseId: import("@fungi.computer/puffball").ReleaseId;
+                readonly appId: import("@fungi.computer/puffball").AppId;
+                readonly artifact: {
+                    readonly artifactRef: import("@fungi.computer/puffball").ArtifactRef;
+                    readonly artifactDigest: import("@fungi.computer/puffball").Sha256Digest;
+                    readonly provenance: {
+                        readonly sourceRevision: import("@fungi.computer/puffball").SourceRevision;
+                        readonly sourceTreeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                        readonly buildRecipeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                    };
+                };
+            }, unknown>>;
+            releasePin: z.ZodEnum<{
+                pinned: "pinned";
+                floating: "floating";
+            }>;
+            authority: z.ZodObject<{
+                authorityVersion: z.ZodLazy<z.ZodNumber>;
+                declaredOperationsDigest: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("@fungi.computer/puffball").Sha256Digest, unknown>>;
+                approvedGrants: z.ZodLazy<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    capability: z.ZodPipe<z.ZodUnknown, z.ZodTransform<"approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage", unknown>>;
+                    capabilityApproved: z.ZodLiteral<true>;
+                    operations: z.ZodLazy<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+                    resources: z.ZodUnion<readonly [z.ZodLiteral<"tenant-scope">, z.ZodReadonly<z.ZodArray<z.ZodLazy<z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodString;
+                        id: z.ZodString;
+                    }, z.core.$strict>>>>>]>;
+                }, z.core.$strict>>>>>;
+                approval: z.ZodNullable<z.ZodLazy<z.ZodReadonly<z.ZodObject<{
+                    by: import("zod/mini").ZodMiniDiscriminatedUnion<[import("zod/mini").ZodMiniObject<{
+                        kind: import("zod/mini").ZodMiniLiteral<"member">;
+                        memberId: import("zod/mini").ZodMiniString<string>;
+                    }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                        kind: import("zod/mini").ZodMiniLiteral<"agent">;
+                        agentId: import("zod/mini").ZodMiniString<string>;
+                    }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                        kind: import("zod/mini").ZodMiniLiteral<"team-key">;
+                        keyId: import("zod/mini").ZodMiniString<string>;
+                    }, z.core.$strip>], "kind">;
+                    at: z.ZodNumber;
+                    authorityVersion: z.ZodLazy<z.ZodNumber>;
+                }, z.core.$strict>>>>;
+            }, z.core.$strict>;
+            status: z.ZodEnum<{
+                enabled: "enabled";
+                disabled: "disabled";
+                deleted: "deleted";
+            }>;
+            visibility: z.ZodEnum<{
+                private: "private";
+                public: "public";
+            }>;
+            approvedAnonymousMethods: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                name: z.ZodPipe<z.ZodUnknown, z.ZodTransform<string, unknown>>;
+                digest: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("@fungi.computer/puffball").Sha256Digest, unknown>>;
+            }, z.core.$strict>>>>;
+            anonymousApproval: z.ZodNullable<z.ZodLazy<z.ZodReadonly<z.ZodObject<{
+                by: import("zod/mini").ZodMiniDiscriminatedUnion<[import("zod/mini").ZodMiniObject<{
+                    kind: import("zod/mini").ZodMiniLiteral<"member">;
+                    memberId: import("zod/mini").ZodMiniString<string>;
+                }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                    kind: import("zod/mini").ZodMiniLiteral<"agent">;
+                    agentId: import("zod/mini").ZodMiniString<string>;
+                }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                    kind: import("zod/mini").ZodMiniLiteral<"team-key">;
+                    keyId: import("zod/mini").ZodMiniString<string>;
+                }, z.core.$strip>], "kind">;
+                at: z.ZodNumber;
+                authorityVersion: z.ZodLazy<z.ZodNumber>;
+            }, z.core.$strict>>>>;
+        }, z.core.$strict>>;
+        acceptedAt: z.ZodNumber;
+        creation: z.ZodEnum<{
+            fresh: "fresh";
+            replacement: "replacement";
+            reminted: "reminted";
+        }>;
+        plan: z.ZodNullable<z.ZodObject<{
+            installation: z.ZodObject<{
+                installationId: z.ZodLazy<z.ZodString>;
+                instanceId: z.ZodNullable<z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("./instance-id.js").InstanceId, unknown>>>;
+                appId: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("@fungi.computer/puffball").AppId, unknown>>;
+                release: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+                    readonly releaseId: import("@fungi.computer/puffball").ReleaseId;
+                    readonly appId: import("@fungi.computer/puffball").AppId;
+                    readonly artifact: {
+                        readonly artifactRef: import("@fungi.computer/puffball").ArtifactRef;
+                        readonly artifactDigest: import("@fungi.computer/puffball").Sha256Digest;
+                        readonly provenance: {
+                            readonly sourceRevision: import("@fungi.computer/puffball").SourceRevision;
+                            readonly sourceTreeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                            readonly buildRecipeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                        };
+                    };
+                }, unknown>>;
+                releasePin: z.ZodEnum<{
+                    pinned: "pinned";
+                    floating: "floating";
+                }>;
+                authority: z.ZodObject<{
+                    authorityVersion: z.ZodLazy<z.ZodNumber>;
+                    declaredOperationsDigest: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("@fungi.computer/puffball").Sha256Digest, unknown>>;
+                    approvedGrants: z.ZodLazy<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                        capability: z.ZodPipe<z.ZodUnknown, z.ZodTransform<"approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage", unknown>>;
+                        capabilityApproved: z.ZodLiteral<true>;
+                        operations: z.ZodLazy<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+                        resources: z.ZodUnion<readonly [z.ZodLiteral<"tenant-scope">, z.ZodReadonly<z.ZodArray<z.ZodLazy<z.ZodReadonly<z.ZodObject<{
+                            kind: z.ZodString;
+                            id: z.ZodString;
+                        }, z.core.$strict>>>>>]>;
+                    }, z.core.$strict>>>>>;
+                    approval: z.ZodNullable<z.ZodLazy<z.ZodReadonly<z.ZodObject<{
+                        by: import("zod/mini").ZodMiniDiscriminatedUnion<[import("zod/mini").ZodMiniObject<{
+                            kind: import("zod/mini").ZodMiniLiteral<"member">;
+                            memberId: import("zod/mini").ZodMiniString<string>;
+                        }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                            kind: import("zod/mini").ZodMiniLiteral<"agent">;
+                            agentId: import("zod/mini").ZodMiniString<string>;
+                        }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                            kind: import("zod/mini").ZodMiniLiteral<"team-key">;
+                            keyId: import("zod/mini").ZodMiniString<string>;
+                        }, z.core.$strip>], "kind">;
+                        at: z.ZodNumber;
+                        authorityVersion: z.ZodLazy<z.ZodNumber>;
+                    }, z.core.$strict>>>>;
+                }, z.core.$strict>;
+                status: z.ZodEnum<{
+                    enabled: "enabled";
+                    disabled: "disabled";
+                    deleted: "deleted";
+                }>;
+                visibility: z.ZodEnum<{
+                    private: "private";
+                    public: "public";
+                }>;
+                approvedAnonymousMethods: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    name: z.ZodPipe<z.ZodUnknown, z.ZodTransform<string, unknown>>;
+                    digest: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("@fungi.computer/puffball").Sha256Digest, unknown>>;
+                }, z.core.$strict>>>>;
+                anonymousApproval: z.ZodNullable<z.ZodLazy<z.ZodReadonly<z.ZodObject<{
+                    by: import("zod/mini").ZodMiniDiscriminatedUnion<[import("zod/mini").ZodMiniObject<{
+                        kind: import("zod/mini").ZodMiniLiteral<"member">;
+                        memberId: import("zod/mini").ZodMiniString<string>;
+                    }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                        kind: import("zod/mini").ZodMiniLiteral<"agent">;
+                        agentId: import("zod/mini").ZodMiniString<string>;
+                    }, z.core.$strip>, import("zod/mini").ZodMiniObject<{
+                        kind: import("zod/mini").ZodMiniLiteral<"team-key">;
+                        keyId: import("zod/mini").ZodMiniString<string>;
+                    }, z.core.$strip>], "kind">;
+                    at: z.ZodNumber;
+                    authorityVersion: z.ZodLazy<z.ZodNumber>;
+                }, z.core.$strict>>>>;
+            }, z.core.$strict>;
+            hasBackend: z.ZodBoolean;
+            prepared: z.ZodBoolean;
+            uiCheck: z.ZodOptional<z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"passed">;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"failed">;
+                code: z.ZodLiteral<"ui_mount_failed">;
+                diagnostics: z.ZodOptional<z.ZodObject<{
+                    failedPredicate: z.ZodEnum<{
+                        unexpected_candidate_request: "unexpected_candidate_request";
+                        response_status: "response_status";
+                        request_failed: "request_failed";
+                        page_error: "page_error";
+                        candidate_not_mounted: "candidate_not_mounted";
+                    }>;
+                    errorName: z.ZodOptional<z.ZodEnum<{
+                        TypeError: "TypeError";
+                        RangeError: "RangeError";
+                        SyntaxError: "SyntaxError";
+                        AbortError: "AbortError";
+                        TimeoutError: "TimeoutError";
+                        Other: "Other";
+                        Error: "Error";
+                    }>>;
+                    finalUrlPath: z.ZodString;
+                    consoleErrors: z.ZodArray<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    pageErrors: z.ZodArray<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    failedRequests: z.ZodArray<z.ZodObject<{
+                        path: z.ZodString;
+                        status: z.ZodOptional<z.ZodNumber>;
+                        failureKind: z.ZodOptional<z.ZodEnum<{
+                            unexpected_candidate_request: "unexpected_candidate_request";
+                            response_status: "response_status";
+                            request_failed: "request_failed";
+                        }>>;
+                    }, z.core.$strict>>;
+                    droppedCount: z.ZodNumber;
+                }, z.core.$strict>>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"not_checked">;
+                code: z.ZodEnum<{
+                    boot_runner_unavailable: "boot_runner_unavailable";
+                    boot_browser_binding_missing: "boot_browser_binding_missing";
+                    boot_clone_unavailable: "boot_clone_unavailable";
+                    boot_timeout: "boot_timeout";
+                    boot_cleanup_failed: "boot_cleanup_failed";
+                    ui_check_not_run_on_host: "ui_check_not_run_on_host";
+                }>;
+            }, z.core.$strict>], "kind">>>;
+        }, z.core.$strict>>;
+        operation: z.ZodObject<{
+            state: z.ZodLiteral<"pending">;
+            requestId: z.ZodString;
+            requestedInstallationId: z.ZodLazy<z.ZodString>;
+            installationId: z.ZodLazy<z.ZodString>;
+            release: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+                readonly releaseId: import("@fungi.computer/puffball").ReleaseId;
+                readonly appId: import("@fungi.computer/puffball").AppId;
+                readonly artifact: {
+                    readonly artifactRef: import("@fungi.computer/puffball").ArtifactRef;
+                    readonly artifactDigest: import("@fungi.computer/puffball").Sha256Digest;
+                    readonly provenance: {
+                        readonly sourceRevision: import("@fungi.computer/puffball").SourceRevision;
+                        readonly sourceTreeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                        readonly buildRecipeDigest: import("@fungi.computer/puffball").Sha256Digest;
+                    };
+                };
+            }, unknown>>;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"commit">;
+    commit: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        ok: z.ZodLiteral<true>;
+    }, z.core.$strict>, z.ZodObject<{
+        ok: z.ZodLiteral<false>;
+        code: z.ZodLiteral<"stale_authority">;
+    }, z.core.$strict>], "ok">;
+}, z.core.$strict>], "kind">;
+export type InstallationOperationReply = z.output<typeof installationOperationReplySchema>;
+export declare class InstallationOperationError extends Error {
+    readonly code: Extract<InstallationOperationReply, {
+        kind: "refused";
+    }>["code"];
+    constructor(code: Extract<InstallationOperationReply, {
+        kind: "refused";
+    }>["code"]);
+}
+/** Decode ordinary RPC replies and rehydrate only the owner's closed refusal. */
+export declare function installationOperationsPort(send: (request: InstallationOperationRequest) => Promise<InstallationOperationReply>, scope: RetainedInstallationCommand["scope"]): InstallationOperations;
+export declare const installationCommandIds: Readonly<{
+    readonly installation: import("@fungi.computer/cairn").IdCodec<"app-installation", "installation", 1>;
+    readonly request: import("@fungi.computer/cairn").IdCodec<"app-installation", "request", 1>;
+}>;
+/**
+ * One registry-owned command journal joined to maintained Watchdog transactions.
+ * The executor runs outside this owner. No release bytes or guest work enter it.
+ */
+export declare function createInstallationOperations(ports: Readonly<{
+    owner: WatchdogSqliteOwner;
+    registryName: string;
+    generation(): string;
+    get(installationId: string): Installation | null;
+    compareAndPut(installation: Installation, expectedVersion: number, generation: string, scope: RetainedInstallationCommand["scope"]): Promise<InstallationCommit>;
+    execute(command: RetainedInstallationCommand): Promise<InstallationOutcome>;
+    scheduleWake(at: number): Promise<void>;
+}>): Promise<{
+    dispatch(raw: InstallationOperationRequest): Promise<InstallationOperationReply>;
+    tick(): Promise<import("@fungi.computer/watchdog").WatchdogTickResult>;
+}>;
+export {};