@fungi.computer/oyster 0.1.0 → 0.3.0

package/dist/approval-home.js

@@ -0,0 +1,226 @@
+import { z } from "zod";
+import * as Schema from "effect/Schema";
+import { hostActorSchema } from "@fungi.computer/puffball/app-method-runtime";
+import { ApprovalLedger, } from "@fungi.computer/approvals";
+import { invokeModuleOperation } from "@fungi.computer/mycelium/remote";
+import { oysterPrincipalIsOwner } from "./host.js";
+import { sha256 } from "./release.js";
+import { keyAppAccess } from "./keys.js";
+const identity = z.string().min(1).max(256);
+const targetSchema = z.strictObject({
+    actor: hostActorSchema,
+    installationId: identity,
+    sessionId: identity.nullable(),
+});
+const callSchema = targetSchema.extend({
+    operation: identity,
+    access: z.enum(["write", "external"]),
+    authorityFence: identity,
+    idempotencyKey: identity,
+    input: z.json(),
+});
+const decodeJson = Schema.decodeUnknownSync(Schema.fromJsonString(Schema.Json));
+const intentRow = Schema.decodeUnknownSync(Schema.Struct({ target_json: Schema.String }));
+/** The registry's durable App effect home. Mycelium still owns operation/schema invocation. */
+export class OysterApprovalHome {
+    host;
+    ledger;
+    constructor(host) {
+        this.host = host;
+        host.owner.sql.exec("CREATE TABLE IF NOT EXISTS oyster_approval_targets (record_id TEXT PRIMARY KEY, target_json TEXT NOT NULL) STRICT");
+        this.ledger = this.createLedger();
+        // A new native home represents boot, not a live per-call ledger facade.
+        this.ledger.recoverClaims();
+    }
+    createLedger(persistIntent) {
+        const home = { kind: "oyster", id: this.host.scope.tenantId };
+        const host = { owner: this.host.owner, home, now: Date.now };
+        if (persistIntent === undefined)
+            return new ApprovalLedger(host);
+        return new ApprovalLedger({ ...host, persistIntent });
+    }
+    async submit(raw) {
+        // Maintained decoder snapshots the host's serialized call before any await.
+        const call = callSchema.parse(raw);
+        const actor = call.actor;
+        const target = targetSchema.parse({
+            actor: call.actor,
+            installationId: call.installationId,
+            sessionId: call.sessionId,
+        });
+        const principalId = await sha256(new TextEncoder().encode(JSON.stringify(target.actor)));
+        const ledger = this.createLedger((record) => {
+            this.host.owner.sql.exec("INSERT INTO oyster_approval_targets VALUES (?, ?)", record.recordId, JSON.stringify(target));
+        });
+        const staged = await this.host.commit(() => ledger.request({
+            requester: {
+                principalId,
+                agentId: actor.kind === "agent" ? actor.agentId : null,
+                sessionId: target.sessionId,
+                displayName: actor.kind === "member"
+                    ? actor.memberId
+                    : actor.kind === "agent"
+                        ? actor.agentId
+                        : actor.keyId,
+            },
+            module: "oyster-app:" + target.installationId,
+            operation: call.operation,
+            access: call.access,
+            reversibility: call.access === "external" ? "irreversible-external" : "reversible",
+            authorityFence: call.authorityFence,
+            idempotencyKey: call.idempotencyKey,
+            inputJson: JSON.stringify(call.input),
+        }), () => ledger.nextWakeAt());
+        if (staged.kind === "refused")
+            return staged;
+        // Only this call's own policy approval applies inline; a retry reports
+        // status and leaves every other approved record to the home's work loop.
+        if (!staged.created || staged.record.state !== "approved")
+            return ledger.outcome(staged.record);
+        // The native commit is complete before any external effect can run.
+        return ledger.applyInline(staged.record.recordId, this.execution());
+    }
+    /** Bind each read/decision to current membership, not the renderer's actor bytes. */
+    capability(rawActor) {
+        const actor = hostActorSchema.parse(rawActor);
+        return this.ledger.capability({
+            actor: async (record) => {
+                if (actor.kind === "agent")
+                    return { kind: "agent" };
+                if (actor.kind === "team-key")
+                    return { kind: "key" };
+                const host = await this.host.current();
+                const principal = await host.auth.resolve(actor);
+                if (principal === null ||
+                    !("role" in principal) ||
+                    principal.actor.memberId !== actor.memberId)
+                    return null;
+                return {
+                    kind: "human",
+                    memberId: actor.memberId,
+                    role: principal.role,
+                    actingForAgent: false,
+                    mayUseOperation: record === null ||
+                        (await this.resolve(record, actor)).kind === "authorized",
+                };
+            },
+            decision: async (recordId) => {
+                await this.ledger.apply(recordId, this.execution());
+            },
+        });
+    }
+    /** One native alarm quantum; apply owns the fresh grant/fence check and single claim. */
+    async reconcile() {
+        this.ledger.expirePending();
+        for (const recordId of this.ledger.pendingApplications())
+            await this.ledger.apply(recordId, this.execution());
+        return this.ledger.nextWakeAt();
+    }
+    async resolve(record, answerer) {
+        const raw = this.host.owner.sql
+            .exec("SELECT target_json FROM oyster_approval_targets WHERE record_id = ?", record.recordId)
+            .toArray()[0];
+        if (raw === undefined)
+            throw new Error("Native approval target is missing");
+        const target = targetSchema.parse(decodeJson(intentRow(raw).target_json));
+        const actor = answerer ?? target.actor;
+        const host = await this.host.current();
+        // resolve() admits background humans only. Non-human callers retain their
+        // tag and prove their own current grant below, never a member role.
+        const principal = actor.kind === "member" ? await host.auth.resolve(actor) : { actor };
+        if (principal === null)
+            return {
+                kind: "refused",
+                reason: "not-granted",
+            };
+        const installation = await host.installations.get(target.installationId);
+        if (installation?.status !== "enabled")
+            return {
+                kind: "refused",
+                reason: "not-granted",
+            };
+        const { oysterAppSnapshot, appSurfaceCache } = await import("./mcp.js");
+        let access = null;
+        if (actor.kind === "agent") {
+            const policy = await host.appToolPolicy?.(actor);
+            if (policy === null || policy === undefined)
+                return {
+                    kind: "refused",
+                    reason: "not-granted",
+                };
+            access = { kind: "agent", policy };
+        }
+        else if (actor.kind === "team-key") {
+            const key = await host.keys?.live(actor.keyId);
+            if (key === null || key === undefined)
+                return {
+                    kind: "refused",
+                    reason: "not-granted",
+                };
+            const owner = await host.auth.resolve({
+                kind: "member",
+                memberId: key.owner,
+            });
+            if (owner?.actor.kind !== "member" ||
+                owner.actor.memberId !== key.owner ||
+                !oysterPrincipalIsOwner(owner))
+                return {
+                    kind: "refused",
+                    reason: "not-granted",
+                };
+            const policy = keyAppAccess(key, target.installationId);
+            if (policy === null)
+                return {
+                    kind: "refused",
+                    reason: "not-granted",
+                };
+            access = {
+                kind: "key",
+                keyId: actor.keyId,
+                byInstallation: new Map([[target.installationId, policy]]),
+            };
+        }
+        const snapshot = await oysterAppSnapshot(host, appSurfaceCache(host), principal, [installation], access, target.sessionId ?? undefined);
+        const module = snapshot.modules[record.module];
+        const fence = snapshot.fences[record.module];
+        const effect = snapshot.effects[record.module]?.[record.operation];
+        if (module === undefined || fence === undefined || effect === undefined)
+            return {
+                kind: "refused",
+                reason: "not-granted",
+            };
+        if (snapshot.levels[record.module] !== "write" || effect !== record.access)
+            return {
+                kind: "refused",
+                reason: "read-only",
+            };
+        return { kind: "authorized", module, fence };
+    }
+    execution() {
+        return {
+            recheck: async (record) => {
+                const current = await this.resolve(record);
+                return current.kind === "refused"
+                    ? current
+                    : { kind: "authorized", authorityFence: current.fence };
+            },
+            dispatch: async ({ record, input }) => {
+                // Reconstruct again at dispatch; never widen a captured operation or fence.
+                const current = await this.resolve(record);
+                if (current.kind === "refused")
+                    return current;
+                if (current.fence !== record.authorityFence)
+                    return { kind: "refused", reason: "not-granted" };
+                const deadlineAt = Date.now() + 30_000;
+                const signal = AbortSignal.timeout(30_000);
+                const output = await invokeModuleOperation(current.module, record.operation, input, {
+                    executionId: "approval:" + record.recordId,
+                    toolCallId: "approval:" + record.recordId,
+                    deadlineAt,
+                    signal,
+                });
+                return { kind: "completed", output };
+            },
+        };
+    }
+}

package/dist/apps/catalog.d.ts

@@ -0,0 +1,335 @@
+import type { SigilName } from "@fungi.computer/sigils";
+/** Consent and resource semantics belong to the grant owner, not its UI. */
+export type PermissionCatalogEntry = Readonly<{
+    group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+    label: string;
+    caption: string;
+    description: string;
+    sigil: SigilName;
+    /** Presentation class only; invocation authority always comes from stored grants. */
+    consent: "affordance" | "install" | "ask";
+    scope: "computer" | "agent" | null;
+    warning: string | null;
+}>;
+/** Every capability selects one consent class and one resource grammar. */
+export declare const permissionCatalog: {
+    approvals: Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "agent.list": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "agent.manage": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "agent.rename": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "agent.avatar": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "agent.toolPolicy": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "agent.read": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "agent.send": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "computer.list": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "computer.readFile": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "computer.writeFile": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "computer.execute": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "llm.generation": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "media.generation": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "games:servers": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "git.repository": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "apps.open": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "apps.call": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "app.storage": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "app.events.emit": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "team.workbenchHost": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "marketplace.browse": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "marketplace.purchase": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "workflow.run": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "workflow.publish": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "workflow.arm": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    world: Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "channels.read": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+    "channels.personal.manage": Readonly<{
+        group: "computers" | "agents" | "generation" | "bazaar" | "data" | "workflows" | "git" | "channels" | "apps" | "shell" | "other";
+        label: string;
+        caption: string;
+        description: string;
+        sigil: SigilName;
+        /** Presentation class only; invocation authority always comes from stored grants. */
+        consent: "affordance" | "install" | "ask";
+        scope: "computer" | "agent" | null;
+        warning: string | null;
+    }>;
+};

package/dist/apps/catalog.js

@@ -0,0 +1,46 @@
+function entry(group, label, description, sigil, consent, scope = null, warning = null) {
+    return {
+        group,
+        label,
+        caption: label,
+        description,
+        sigil,
+        consent,
+        scope,
+        warning,
+    };
+}
+/** Every capability selects one consent class and one resource grammar. */
+export const permissionCatalog = {
+    approvals: entry("apps", "Review approvals", 
+    // Interim plain consent; the product decision on approvals stays with Levi.
+    "This App can approve or deny your Agents' pending actions as you, and turn on automatic approval.", "list", "ask"),
+    "agent.list": entry("agents", "List Agents", "see which Agents are available.", "listAgents", "install"),
+    "agent.manage": entry("agents", "Create and manage Agents", "create Agents and manage their sessions.", "createAgents", "install", "agent"),
+    "agent.rename": entry("agents", "Rename Agents", "rename Agents you created.", "createAgents", "install"),
+    "agent.avatar": entry("agents", "Change Agent avatars", "change the avatars of Agents you created.", "createAgents", "install"),
+    "agent.toolPolicy": entry("agents", "Allow Agents to use Apps", "approve Agents to use your installed Apps.", "createAgents", "install"),
+    "agent.read": entry("agents", "Read Agent conversations", "read Agent conversations.", "readConversations", "install", "agent"),
+    "agent.send": entry("agents", "Send messages to Agents", "send messages to Agents.", "sendPrompts", "install", "agent"),
+    "computer.list": entry("computers", "List Computers", "see which Computers are available.", "list", "install", "computer"),
+    "computer.readFile": entry("computers", "Read files", "read files on your Computers.", "read", "install", "computer"),
+    "computer.writeFile": entry("computers", "Change files", "create and change files on your Computers.", "write", "install", "computer"),
+    "computer.execute": entry("computers", "Run commands", "run commands on your Computers.", "run", "install", "computer"),
+    "llm.generation": entry("generation", "Generate text", "ask AI models to generate text.", "generateText", "install"),
+    "media.generation": entry("generation", "Generate images and videos", "ask AI models to generate images and videos.", "generateMedia", "install"),
+    "games:servers": entry("other", "Use game servers", "connect to game servers.", "list", "install"),
+    "git.repository": entry("git", "Use Git repositories", "work with Git repositories.", "read", "ask"),
+    "apps.open": entry("apps", "Open Apps", "open other Apps.", "list", "affordance"),
+    "apps.call": entry("apps", "Call declared App methods", "call the listed methods in other Apps as you. Renamed target methods need approval again.", "run", "install"),
+    "app.storage": entry("data", "Store App data", "save its App data.", "write", "install"),
+    "app.events.emit": entry("workflows", "Send events", "tell your Workflows when something happens.", "sendPrompts", "ask"),
+    "team.workbenchHost": entry("shell", "Arrange the workbench", "arrange Apps on your workbench.", "list", "ask", null, "The shell runs with full access to your Team and every App inside it. Only pick a shell you trust."),
+    "marketplace.browse": entry("bazaar", "Browse the marketplace", "browse Apps in the marketplace.", "browseBazaar", "install"),
+    "marketplace.purchase": entry("bazaar", "Purchase from the marketplace", "purchase Apps from the marketplace.", "buyApps", "install"),
+    "workflow.run": entry("workflows", "Run Workflows", "start Workflows.", "run", "install"),
+    "workflow.publish": entry("workflows", "Publish Workflows", "publish Workflow definitions.", "write", "ask"),
+    "workflow.arm": entry("workflows", "Arm Workflow triggers", "enable Workflow triggers.", "run", "ask"),
+    world: entry("other", "Connect to external services", "connect to external services.", "list", "install"),
+    "channels.read": entry("channels", "Read channels", "read messages from channels.", "read", "ask"),
+    "channels.personal.manage": entry("channels", "Manage personal channels", "manage personal channels.", "write", "ask"),
+};