@fungi.computer/oyster 0.2.0 → 0.3.1

package/dist/standalone/workflows.d.ts

@@ -6,16 +6,25 @@ import { type GraphReview, type GraphParams, type NodeCall, type NodeEvent, type
 import { type StandaloneTenancyEnv } from "./tenancy.js";
 import type { AppEventFact } from "@fungi.computer/puffball/app-event-facts";
 import type { InvocationFacts } from "../invocation.js";
+import type { OysterPrincipal } from "../host.js";
 import type { OysterGitWorkerEnv, OysterGitWorkerHost } from "../workers-git.js";
 import { type TenantScope } from "../tenant.js";
 import type { GitWriter, RepositoryRef } from "@fungi.computer/agar/git";
-import type { WorkflowGitPassResult } from "@fungi.computer/agar/computer-contracts";
+import { type WorkflowGitCredential, type WorkflowGitPassGrant } from "@fungi.computer/braid/runtime";
 import { reviewKey, type EventDisarmInput, type WorkflowGitPassRequest, type TriggerArmTarget, type ScheduleDisarmInput } from "./workflow-binding.js";
 import type { StandaloneComputerEnv } from "./computer.js";
 import type { StandaloneAgentsEnv } from "./agents.js";
 import type { OysterMediaEnv } from "./media.js";
+import { createWorkflowWebhooks } from "../webhooks.js";
 export type StandaloneWorkflowEnv = OysterGitWorkerEnv & StandaloneComputerEnv & StandaloneAgentsEnv & OysterMediaEnv & StandaloneTenancyEnv & GraphWorkflowBindings & {
     WORKFLOW_RUNS: DurableObjectNamespace<StandaloneWorkflowRunsBase>;
+    WORKFLOW_WEBHOOK_HOST_RATE?: Pick<RateLimit, "limit">;
+    WORKFLOW_WEBHOOK_BINDING_RATE?: Pick<RateLimit, "limit">;
+    /** Trusted configuration; absent admission closes the new webhook surface. */
+    WORKFLOW_WEBHOOK_POLICY?: {
+        limits: Parameters<typeof createWorkflowWebhooks>[0]["limits"];
+        concurrency: Parameters<typeof createWorkflowWebhooks>[0]["abuse"]["concurrency"];
+    };
 };
 /** Schedule time and the native alarm instant that delivers a due time. */
 export type StandaloneScheduleClock = Readonly<{
@@ -24,23 +33,31 @@ export type StandaloneScheduleClock = Readonly<{
 }>;
 /** SQLite and the native Workflow binding belong to this standalone host; its root supplies `hostFor`. */
 export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneWorkflowEnv = StandaloneWorkflowEnv> extends DurableObject<Env> {
+    #private;
     private readonly composed;
     /** Schedule time and its native alarm instant; production is the wall clock. */
     protected readonly scheduleClock: StandaloneScheduleClock;
     private readonly owner;
     /** The deployable root's host for one tenant; Workflow runs use the default tenant. */
-    protected abstract hostFor(scope: TenantScope): OysterGitWorkerHost;
+    protected abstract hostFor(scope: TenantScope): Promise<OysterGitWorkerHost>;
     constructor(ctx: DurableObjectState, env: Env);
     /** Record the library this object serves; another name is a revocation. */
     private nameLibrary;
     /**
-     * Mint (or renew) the Git pass for the Git step a node frame is executing.
-     * Null when this library dispatched no such step; a step that does not match
-     * the frame's attested Workflow, member and Computer is a revocation.
+     * Admit the Git step a node frame is executing: its public grant, never a
+     * credential. Null when this library dispatched no such step; a step that
+     * does not match the frame's attested Workflow, member and Computer is a
+     * revocation. Only NEW native admission then issues, through issueWorkflowGit.
      */
-    openWorkflowGitPass(raw: WorkflowGitPassRequest): Promise<WorkflowGitPassResult | null>;
-    /** The tenant Git door's per-request admission of a presented pass. */
-    admitWorkflowGitPass(passId: string, repository: RepositoryRef, scope: "read" | "write"): Promise<Extract<GitWriter, {
+    admitWorkflowGit(raw: WorkflowGitPassRequest): Promise<WorkflowGitPassGrant | null>;
+    /** One fresh credential for a NEW native invocation of an admitted step. */
+    issueWorkflowGit(invocationId: string, grant: WorkflowGitPassGrant): Promise<WorkflowGitCredential>;
+    /** A live native replay extends its lease; it never issues another. */
+    renewWorkflowGit(invocationId: string, grant: WorkflowGitPassGrant): Promise<void>;
+    /** Close an invocation's credential, even before its issue arrives. */
+    closeWorkflowGit(invocationId: string, grant: WorkflowGitPassGrant): Promise<void>;
+    /** The tenant Git door's per-request admission of a presented bearer. */
+    admitWorkflowGitPass(bearer: string, repository: RepositoryRef, scope: "read" | "write"): Promise<Extract<GitWriter, {
         kind: "actor";
     }> | null>;
     /** A finished run's passes and recorded Git steps end with it. */
@@ -60,7 +77,7 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
     } | {
         kind: "refused";
         reason: string;
-        readonly error?: undefined;
+        error?: undefined;
     }>;
     disarmSchedule(facts: InvocationFacts, input: ScheduleDisarmInput): Promise<{
         kind: "not_found";
@@ -75,13 +92,14 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
     } | {
         schedules: {
             scheduleId: string;
+            installationId: string;
             workflowId: string;
             triggerId: string;
             nextDueAt: number;
             state: "active" | "finished" | "paused" | "cancelled";
             lastError: string | null;
         }[];
-        readonly error?: undefined;
+        error?: undefined;
     }>;
     armEventTrigger(facts: InvocationFacts, input: TriggerArmTarget): Promise<{
         kind: "armed";
@@ -93,7 +111,7 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
     } | {
         kind: "refused";
         reason: string;
-        readonly error?: undefined;
+        error?: undefined;
     }>;
     disarmEventTrigger(facts: InvocationFacts, input: EventDisarmInput): Promise<{
         kind: "disarmed";
@@ -115,7 +133,7 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
             state: "active" | "paused";
             lastError: string | null;
         }[];
-        readonly error?: undefined;
+        error?: undefined;
     }>;
     /** Up to 50 runs of this library, newest first; this host has no per-member rule. */
     runs(facts: InvocationFacts, input: {
@@ -162,6 +180,10 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
     }>;
     /** Native alarm delivery: fire every due schedule of this library. */
     alarm(): Promise<void>;
+    /** Signed traffic uses the native fetch interface; no sender principal is accepted. */
+    fetch(request: Request): Promise<Response>;
+    /** Root-authenticated owner RPC; command data cannot nominate an actor or pin. */
+    webhookControl(principal: OysterPrincipal, installationId: string, raw: unknown): Promise<Response>;
     /**
      * The emitting App's Instance delivers each accepted event here. The
      * emitter's live Release must declare the event and its payload schema
@@ -230,10 +252,10 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
         runId?: undefined;
         planDigest?: undefined;
     } | {
-        kind: "conflict" | "replay" | "started";
+        kind: "replay" | "conflict" | "started";
         runId: string;
         planDigest: string;
-        readonly error?: undefined;
+        error?: undefined;
     }>;
     loadRun(installationId: string, runId: string): Promise<{
         plan: {
@@ -249,13 +271,13 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                 readonly input: {
                     readonly [x: string]: S.Json;
                 };
-                readonly title: string;
                 readonly apps: {
                     readonly [x: string]: {
                         readonly appId: string;
                         readonly role?: string | undefined;
                     };
                 };
+                readonly title: string;
                 readonly nodes: readonly ({
                     readonly id: string;
                     readonly kind: "code";
@@ -273,8 +295,8 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                     readonly values: {
                         readonly [x: string]: import("@fungi.computer/braid").Mapping;
                     };
-                    readonly method: string;
                     readonly kind: "app";
+                    readonly method: string;
                     readonly id: string;
                     readonly app: string;
                     readonly methodDigest: string;
@@ -293,19 +315,19 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                 } | {
                     readonly kind: "review";
                     readonly id: string;
+                    readonly timeout: number;
                     readonly title: string;
                     readonly reviewers: "runner" | "owners";
                     readonly show: readonly {
                         readonly node: string;
                         readonly port: string;
                     }[];
-                    readonly timeout: number;
-                    readonly detail?: string | undefined;
                     readonly choices?: readonly {
                         readonly label: string;
                         readonly id: string;
                         readonly description?: string | undefined;
                     }[] | undefined;
+                    readonly detail?: string | undefined;
                 } | {
                     readonly id: string;
                     readonly kind: "condition";
@@ -370,8 +392,8 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                             readonly values: {
                                 readonly [x: string]: import("@fungi.computer/braid").Mapping;
                             };
-                            readonly method: string;
                             readonly kind: "app";
+                            readonly method: string;
                             readonly id: string;
                             readonly app: string;
                             readonly methodDigest: string;
@@ -390,19 +412,19 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                         } | {
                             readonly kind: "review";
                             readonly id: string;
+                            readonly timeout: number;
                             readonly title: string;
                             readonly reviewers: "runner" | "owners";
                             readonly show: readonly {
                                 readonly node: string;
                                 readonly port: string;
                             }[];
-                            readonly timeout: number;
-                            readonly detail?: string | undefined;
                             readonly choices?: readonly {
                                 readonly label: string;
                                 readonly id: string;
                                 readonly description?: string | undefined;
                             }[] | undefined;
+                            readonly detail?: string | undefined;
                         } | {
                             readonly id: string;
                             readonly kind: "condition";
@@ -473,8 +495,8 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                     readonly title?: string | undefined;
                 } | {
                     readonly id: string;
-                    readonly event: string;
                     readonly on: "event";
+                    readonly event: string;
                     readonly app: string;
                     readonly eventDigest: string;
                     readonly input?: {
@@ -496,7 +518,7 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                                 readonly [x: string]: S.Json;
                             };
                             readonly digest: string;
-                            readonly approval: "none" | "queue" | "simulate";
+                            readonly approval: "queue" | "none" | "simulate";
                             readonly description: string;
                             readonly effect: "read" | "write" | "external";
                             readonly requires: readonly string[];
@@ -532,7 +554,7 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                 };
                 readonly method: string;
                 readonly installationId: string;
-                readonly approval: "none" | "queue" | "simulate";
+                readonly approval: "queue" | "none" | "simulate";
                 readonly description: string;
                 readonly effect: "read" | "write" | "external";
                 readonly requires: readonly string[];
@@ -559,7 +581,7 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
             readonly title: string;
             readonly status?: {
                 readonly label: string;
-                readonly tone: "success" | "error" | "info" | "neutral" | "primary" | "secondary" | "accent" | "warning";
+                readonly tone: "success" | "error" | "info" | "warning" | "neutral" | "primary" | "secondary" | "accent";
             } | undefined;
             readonly media?: {
                 readonly path: string;
@@ -600,35 +622,26 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
     status(facts: InvocationFacts, raw: {
         runId: string;
     }): Promise<{
-        error: string;
-        runId?: undefined;
-        planDigest?: undefined;
-        title?: undefined;
-        outcome?: undefined;
-        events?: undefined;
-        reviews?: undefined;
-        status?: undefined;
-        output?: undefined;
-    } | {
         runId: string;
         planDigest: string;
         title: string;
         outcome: "terminal" | "cancelled" | "active" | null;
         events: readonly {
-            readonly state: "running" | "queued" | "failed" | "complete" | "waiting" | "skipped";
             readonly runId: string;
             readonly nodeId: string;
+            readonly state: "skipped" | "queued" | "running" | "failed" | "complete" | "waiting";
             readonly iteration: string;
             readonly attempt: number;
             readonly output?: {
                 readonly [x: string]: S.Json;
             } | undefined;
+            readonly refusal?: string | undefined;
             readonly row?: {
                 readonly id: string;
                 readonly title: string;
                 readonly status?: {
                     readonly label: string;
-                    readonly tone: "success" | "error" | "info" | "neutral" | "primary" | "secondary" | "accent" | "warning";
+                    readonly tone: "success" | "error" | "info" | "warning" | "neutral" | "primary" | "secondary" | "accent";
                 } | undefined;
                 readonly media?: {
                     readonly path: string;
@@ -643,7 +656,6 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                 readonly detail?: string | undefined;
                 readonly tone?: "error" | "running" | "settled" | "attention" | "muted" | undefined;
             } | undefined;
-            readonly costMilliunits?: number | undefined;
             readonly graphId?: string | undefined;
             readonly poll?: number | undefined;
             readonly position?: readonly {
@@ -654,9 +666,9 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
             }[] | undefined;
             readonly recordedAt?: number | undefined;
             readonly durationMs?: number | undefined;
+            readonly costMilliunits?: number | undefined;
             readonly outputDigest?: string | undefined;
             readonly errorMessage?: string | undefined;
-            readonly refusal?: string | undefined;
         }[];
         reviews: {
             review: {
@@ -681,22 +693,107 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
             openedAt: number;
             expiresAt: number;
         }[];
-        status: "unknown" | "running" | "queued" | "errored" | "complete" | "waiting" | "paused" | "terminated" | "waitingForPause";
+        status: "unknown" | "paused" | "queued" | "running" | "errored" | "terminated" | "complete" | "waiting" | "waitingForPause";
         output: {} | null;
         error: {
             name: string;
             message: string;
         } | null;
-    }>;
+    } | {
+        error: string;
+    } | null>;
+    private runStatus;
     cancel(facts: InvocationFacts, raw: {
         runId: string;
     }): Promise<{
         kind: string;
-        reason: string;
     } | {
         kind: string;
-        reason?: undefined;
+        reason: string;
     }>;
+    /** Host-only MCP control reopens the configured owner's authority on every call. */
+    control(principal: OysterPrincipal, operation: "status" | "cancel", runId: string): Promise<{
+        runId: string;
+        planDigest: string;
+        title: string;
+        outcome: "terminal" | "cancelled" | "active" | null;
+        events: readonly {
+            readonly runId: string;
+            readonly nodeId: string;
+            readonly state: "skipped" | "queued" | "running" | "failed" | "complete" | "waiting";
+            readonly iteration: string;
+            readonly attempt: number;
+            readonly output?: {
+                readonly [x: string]: S.Json;
+            } | undefined;
+            readonly refusal?: string | undefined;
+            readonly row?: {
+                readonly id: string;
+                readonly title: string;
+                readonly status?: {
+                    readonly label: string;
+                    readonly tone: "success" | "error" | "info" | "warning" | "neutral" | "primary" | "secondary" | "accent";
+                } | undefined;
+                readonly media?: {
+                    readonly path: string;
+                    readonly format: "fungi:image" | "fungi:video";
+                } | undefined;
+                readonly open?: {
+                    readonly params: readonly {
+                        readonly key: string;
+                        readonly value: string;
+                    }[];
+                } | undefined;
+                readonly detail?: string | undefined;
+                readonly tone?: "error" | "running" | "settled" | "attention" | "muted" | undefined;
+            } | undefined;
+            readonly graphId?: string | undefined;
+            readonly poll?: number | undefined;
+            readonly position?: readonly {
+                readonly node: string;
+                readonly loop: "map" | "repeat";
+                readonly index: number;
+                readonly count: number;
+            }[] | undefined;
+            readonly recordedAt?: number | undefined;
+            readonly durationMs?: number | undefined;
+            readonly costMilliunits?: number | undefined;
+            readonly outputDigest?: string | undefined;
+            readonly errorMessage?: string | undefined;
+        }[];
+        reviews: {
+            review: {
+                readonly show: readonly S.Json[];
+                readonly title: string;
+                readonly timeout: number;
+                readonly runId: string;
+                readonly nodeId: string;
+                readonly reviewers: "runner" | "owners";
+                readonly iteration: string;
+                readonly instanceId: string;
+                readonly eventType: string;
+                readonly position?: readonly {
+                    readonly node: string;
+                    readonly loop: "repeat" | "map";
+                    readonly index: number;
+                    readonly count: number;
+                }[];
+                readonly choices?: readonly string[];
+            };
+            status: "closed" | "pending" | "answered" | "delivered" | "timed_out";
+            openedAt: number;
+            expiresAt: number;
+        }[];
+        status: "unknown" | "paused" | "queued" | "running" | "errored" | "terminated" | "complete" | "waiting" | "waitingForPause";
+        output: {} | null;
+        error: {
+            name: string;
+            message: string;
+        } | null;
+    } | {
+        kind: string;
+    } | null>;
+    private cancelRun;
 }
 /** The SAME extracted interpreter as Hub, with this host's owned ports. */
 export declare class StandaloneGraphWorkflow extends GraphWorkflow<StandaloneWorkflowEnv> {