@fungi.computer/oyster 0.2.0 → 0.3.1

package/docs/api/mcp.md

@@ -176,6 +176,54 @@ capabilities stay fixed.
 
 ---
 
+### oysterAppSnapshot()
+
+```ts
+function oysterAppSnapshot(
+  host,
+  surfaces,
+  principal,
+  installations,
+  access,
+  sessionId?,
+  familyListingCache?,
+): Promise<
+  Readonly<{
+    modules: Readonly<Record<string, ModuleRegistration>>;
+    levels: Readonly<Record<string, AppToolPolicy["level"]>>;
+    fences: Readonly<Record<string, string>>;
+    effects: Readonly<
+      Record<string, Readonly<Record<string, "read" | "write" | "external">>>
+    >;
+  }>
+>;
+```
+
+Derive the current principal's admitted App modules and grants.
+
+#### Parameters
+
+| Parameter             | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   | Description                                                                                                                                                                                                                                                                |
+| --------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `host`                | `Pick`\<[`OysterHost`](host.md#oysterhost), \| `"installations"` \| `"instances"` \| `"artifacts"` \| `"guestLimits"` \| `"backgroundOriginKey"` \| `"computerId"` \| `"capabilities"` \| `"appToolPolicy"` \| `"keys"`\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | -                                                                                                                                                                                                                                                                          |
+| `surfaces`            | [`AppSurfaceCache`](#appsurfacecache)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  | -                                                                                                                                                                                                                                                                          |
+| `principal`           | [`OysterPrincipal`](host.md#oysterprincipal)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | -                                                                                                                                                                                                                                                                          |
+| `installations`       | readonly `Readonly`\<\{ `installationId`: `string`; `instanceId`: [`InstanceId`](index.md#instanceid) \| `null`; `appId`: `AppId`; `release`: \{ `releaseId`: `ReleaseId`; `appId`: `AppId`; `artifact`: \{ `artifactRef`: `ArtifactRef`; `artifactDigest`: `Sha256Digest`; `provenance`: \{ `sourceRevision`: `SourceRevision`; `sourceTreeDigest`: `Sha256Digest`; `buildRecipeDigest`: `Sha256Digest`; \}; \}; \}; `releasePin`: `"pinned"` \| `"floating"`; `authority`: \{ `authorityVersion`: `number`; `declaredOperationsDigest`: `Sha256Digest`; `approvedGrants`: readonly `Readonly`\<\{ `capability`: \| `"approvals"` \| `"agent.list"` \| `"agent.manage"` \| `"agent.rename"` \| `"agent.avatar"` \| `"agent.toolPolicy"` \| `"agent.read"` \| `"agent.send"` \| `"computer.list"` \| `"computer.readFile"` \| `"computer.writeFile"` \| `"computer.execute"` \| `"llm.generation"` \| `"media.generation"` \| `"games:servers"` \| `"git.repository"` \| `"apps.open"` \| `"apps.call"` \| `"app.storage"` \| `"app.events.emit"` \| `"team.workbenchHost"` \| `"marketplace.browse"` \| `"marketplace.purchase"` \| `"workflow.run"` \| `"workflow.publish"` \| `"workflow.arm"` \| `"world"` \| `"channels.read"` \| `"channels.personal.manage"`; `capabilityApproved`: `true`; `operations`: readonly `string`[]; `resources`: \| `"tenant-scope"` \| readonly `Readonly`\<\{ `kind`: ...; `id`: ...; \}\>[]; \}\>[]; `approval`: \| `Readonly`\<\{ `by`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `at`: `number`; `authorityVersion`: `number`; \}\> \| `null`; \}; `status`: `"enabled"` \| `"disabled"` \| `"deleted"`; `visibility`: `"private"` \| `"public"`; `approvedAnonymousMethods`: readonly `Readonly`\<\{ `name`: `string`; `digest`: `Sha256Digest`; \}\>[]; `anonymousApproval`: \| `Readonly`\<\{ `by`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `at`: `number`; `authorityVersion`: `number`; \}\> \| `null`; \}\>[] | -                                                                                                                                                                                                                                                                          |
+| `access`              | [`OysterCallerAccess`](#oystercalleraccess)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            | -                                                                                                                                                                                                                                                                          |
+| `sessionId?`          | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               | -                                                                                                                                                                                                                                                                          |
+| `familyListingCache?` | `Map`\<`string`, `unknown`\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | Shares one tool-family listing per Instance across the two `appModules` passes one `oysterAppMethods` call can make (the eager grants/version pass, and a session-scoped re-derivation); never shared across separate calls, so it never serves another request's listing. |
+
+#### Returns
+
+`Promise`\<`Readonly`\<\{ `modules`: `Readonly`\<`Record`\<`string`,
+`ModuleRegistration`\>\>; `levels`: `Readonly`\<`Record`\<`string`,
+[`AppToolPolicy`](apps.md#apptoolpolicy)\[`"level"`\]\>\>; `fences`:
+`Readonly`\<`Record`\<`string`, `string`\>\>; `effects`:
+`Readonly`\<`Record`\<`string`, `Readonly`\<`Record`\<`string`, `"read"` \|
+`"write"` \| `"external"`\>\>\>\>; \}\>\>
+
+---
+
 ### oysterAppMethods()
 
 ```ts
@@ -210,13 +258,13 @@ Releases, installation authority or the caller's own grants.
 
 #### Parameters
 
-| Parameter                 | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
-| ------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `host`                    | `Pick`\<[`OysterHost`](host.md#oysterhost), \| `"installations"` \| `"instances"` \| `"artifacts"` \| `"guestLimits"` \| `"backgroundOriginKey"` \| `"computerId"` \| `"capabilities"` \| `"appToolPolicy"` \| `"keys"`\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
-| `principal`               | [`OysterPrincipal`](host.md#oysterprincipal)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
-| `access`                  | [`OysterCallerAccess`](#oystercalleraccess)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
-| `surfaces`                | [`AppSurfaceCache`](#appsurfacecache)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
-| `preloadedInstallations?` | readonly `Readonly`\<\{ `installationId`: `string`; `instanceId`: [`InstanceId`](index.md#instanceid) \| `null`; `appId`: `AppId`; `release`: \{ `releaseId`: `ReleaseId`; `appId`: `AppId`; `artifact`: \{ `artifactRef`: `ArtifactRef`; `artifactDigest`: `Sha256Digest`; `provenance`: \{ `sourceRevision`: `SourceRevision`; `sourceTreeDigest`: `Sha256Digest`; `buildRecipeDigest`: `Sha256Digest`; \}; \}; \}; `releasePin`: `"pinned"` \| `"floating"`; `authorityVersion`: `number`; `status`: `"enabled"` \| `"disabled"` \| `"deleted"`; `visibility`: `"private"` \| `"public"`; `declaredOperationsDigest`: `Sha256Digest`; `approvedGrants`: readonly `Readonly`\<\{ `capability`: \| `"agent.list"` \| `"agent.manage"` \| `"agent.rename"` \| `"agent.toolPolicy"` \| `"agent.read"` \| `"agent.send"` \| `"computer.list"` \| `"computer.readFile"` \| `"computer.writeFile"` \| `"computer.execute"` \| `"llm.generation"` \| `"media.generation"` \| `"games:servers"` \| `"git.repository"` \| `"apps.open"` \| `"apps.call"` \| `"app.storage"` \| `"app.events.emit"` \| `"team.workbenchHost"` \| `"marketplace.browse"` \| `"marketplace.purchase"` \| `"workflow.run"` \| `"workflow.publish"` \| `"workflow.arm"` \| `"world"` \| `"channels.read"` \| `"channels.personal.manage"`; `capabilityApproved`: `true`; `operations`: readonly `string`[]; `resources`: \| `"tenant-scope"` \| readonly `Readonly`\<\{ `kind`: ...; `id`: ...; \}\>[]; \}\>[]; `approval`: \| `Readonly`\<\{ `by`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `at`: `number`; `authorityVersion`: `number`; \}\> \| `null`; `approvedAnonymousMethods`: readonly `Readonly`\<\{ `name`: `string`; `digest`: `Sha256Digest`; \}\>[]; `anonymousApproval`: \| `Readonly`\<\{ `by`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `at`: `number`; `authorityVersion`: `number`; \}\> \| `null`; \}\>[] |
+| Parameter                 | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
+| ------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `host`                    | `Pick`\<[`OysterHost`](host.md#oysterhost), \| `"installations"` \| `"instances"` \| `"artifacts"` \| `"guestLimits"` \| `"backgroundOriginKey"` \| `"computerId"` \| `"capabilities"` \| `"appToolPolicy"` \| `"keys"` \| `"approvals"`\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
+| `principal`               | [`OysterPrincipal`](host.md#oysterprincipal)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
+| `access`                  | [`OysterCallerAccess`](#oystercalleraccess)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
+| `surfaces`                | [`AppSurfaceCache`](#appsurfacecache)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
+| `preloadedInstallations?` | readonly `Readonly`\<\{ `installationId`: `string`; `instanceId`: [`InstanceId`](index.md#instanceid) \| `null`; `appId`: `AppId`; `release`: \{ `releaseId`: `ReleaseId`; `appId`: `AppId`; `artifact`: \{ `artifactRef`: `ArtifactRef`; `artifactDigest`: `Sha256Digest`; `provenance`: \{ `sourceRevision`: `SourceRevision`; `sourceTreeDigest`: `Sha256Digest`; `buildRecipeDigest`: `Sha256Digest`; \}; \}; \}; `releasePin`: `"pinned"` \| `"floating"`; `authority`: \{ `authorityVersion`: `number`; `declaredOperationsDigest`: `Sha256Digest`; `approvedGrants`: readonly `Readonly`\<\{ `capability`: \| `"approvals"` \| `"agent.list"` \| `"agent.manage"` \| `"agent.rename"` \| `"agent.avatar"` \| `"agent.toolPolicy"` \| `"agent.read"` \| `"agent.send"` \| `"computer.list"` \| `"computer.readFile"` \| `"computer.writeFile"` \| `"computer.execute"` \| `"llm.generation"` \| `"media.generation"` \| `"games:servers"` \| `"git.repository"` \| `"apps.open"` \| `"apps.call"` \| `"app.storage"` \| `"app.events.emit"` \| `"team.workbenchHost"` \| `"marketplace.browse"` \| `"marketplace.purchase"` \| `"workflow.run"` \| `"workflow.publish"` \| `"workflow.arm"` \| `"world"` \| `"channels.read"` \| `"channels.personal.manage"`; `capabilityApproved`: `true`; `operations`: readonly `string`[]; `resources`: `"tenant-scope"` \| readonly `Readonly`\<...\>[]; \}\>[]; `approval`: \| `Readonly`\<\{ `by`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `at`: `number`; `authorityVersion`: `number`; \}\> \| `null`; \}; `status`: `"enabled"` \| `"disabled"` \| `"deleted"`; `visibility`: `"private"` \| `"public"`; `approvedAnonymousMethods`: readonly `Readonly`\<\{ `name`: `string`; `digest`: `Sha256Digest`; \}\>[]; `anonymousApproval`: \| `Readonly`\<\{ `by`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `at`: `number`; `authorityVersion`: `number`; \}\> \| `null`; \}\>[] |
 
 #### Returns
 
@@ -273,7 +321,6 @@ function oysterMcpCatalogLoad(host): (principal) => Promise<Readonly<{
      }>>;
   }>[];
   grants: Grants;
-  approvedWrites?: readonly string[];
 }>>;
 ```
 
@@ -289,13 +336,13 @@ stored approval, and passes the App's gate.
 
 #### Parameters
 
-| Parameter | Type                                                                                                                                                                                                                                      |
-| --------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `host`    | `Pick`\<[`OysterHost`](host.md#oysterhost), \| `"installations"` \| `"instances"` \| `"artifacts"` \| `"guestLimits"` \| `"backgroundOriginKey"` \| `"computerId"` \| `"computer"` \| `"capabilities"` \| `"appToolPolicy"` \| `"keys"`\> |
+| Parameter | Type                                                                                                                                                                                                                                                       |
+| --------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `host`    | `Pick`\<[`OysterHost`](host.md#oysterhost), \| `"installations"` \| `"instances"` \| `"artifacts"` \| `"guestLimits"` \| `"backgroundOriginKey"` \| `"computerId"` \| `"computer"` \| `"capabilities"` \| `"appToolPolicy"` \| `"keys"` \| `"workflows"`\> |
 
 #### Returns
 
 (`principal`) => `Promise`\<`Readonly`\<\{ `instructions`: `string`; `sources`:
 readonly `Readonly`\<\{ `id`: `string`; `acquire`: (`context`) =>
 `Promise`\<`Readonly`\<\{ `snapshot`: ...; `release`: ...; \}\>\>; \}\>[];
-`grants`: `Grants`; `approvedWrites?`: readonly `string`[]; \}\>\>
+`grants`: `Grants`; \}\>\>

package/docs/api/modules.md

@@ -8,43 +8,36 @@
 
 ## Modules
 
-| Module                                                    | Description |
-| --------------------------------------------------------- | ----------- |
-| [agents](agents.md)                                       | -           |
-| [app-storage](app-storage.md)                             | -           |
-| [apps](apps.md)                                           | -           |
-| [auth](auth.md)                                           | -           |
-| [build-contract](build-contract.md)                       | -           |
-| [build](build.md)                                         | -           |
-| [cloudflare](cloudflare.md)                               | -           |
-| [computer](computer.md)                                   | -           |
-| [files](files.md)                                         | -           |
-| [git](git.md)                                             | -           |
-| [host](host.md)                                           | -           |
-| [index](index.md)                                         | -           |
-| [invocation](invocation.md)                               | -           |
-| [keys](keys.md)                                           | -           |
-| [mcp](mcp.md)                                             | -           |
-| [media](media.md)                                         | -           |
-| [pack](pack.md)                                           | -           |
-| [page/mount](page/mount.md)                               | -           |
-| [root-data](root-data.md)                                 | -           |
-| [shell/app-directory](shell/app-directory.md)             | -           |
-| [shell/command-host](shell/command-host.md)               | -           |
-| [shell/commands](shell/commands.md)                       | -           |
-| [shell](shell.md)                                         | -           |
-| [shell/keys](shell/keys.md)                               | -           |
-| [shell/shell-module](shell/shell-module.md)               | -           |
-| [shell/window-manager](shell/window-manager.md)           | -           |
-| [shell/workbench-directory](shell/workbench-directory.md) | -           |
-| [shell/workbench](shell/workbench.md)                     | -           |
-| [tenancy/auth0](tenancy/auth0.md)                         | -           |
-| [tenancy/cloudflare](tenancy/cloudflare.md)               | -           |
-| [tenancy/cold-directory](tenancy/cold-directory.md)       | -           |
-| [tenancy](tenancy.md)                                     | -           |
-| [tenancy/owner-key](tenancy/owner-key.md)                 | -           |
-| [tenancy/registry](tenancy/registry.md)                   | -           |
-| [tenancy/resolve](tenancy/resolve.md)                     | -           |
-| [tenant](tenant.md)                                       | -           |
-| [workers-git](workers-git.md)                             | -           |
-| [workers](workers.md)                                     | -           |
+| Module                                              | Description |
+| --------------------------------------------------- | ----------- |
+| [agents](agents.md)                                 | -           |
+| [app-storage](app-storage.md)                       | -           |
+| [apps](apps.md)                                     | -           |
+| [auth](auth.md)                                     | -           |
+| [browser/boot](browser/boot.md)                     | -           |
+| [browser](browser.md)                               | -           |
+| [build-contract](build-contract.md)                 | -           |
+| [build](build.md)                                   | -           |
+| [cloudflare](cloudflare.md)                         | -           |
+| [computer](computer.md)                             | -           |
+| [files](files.md)                                   | -           |
+| [git](git.md)                                       | -           |
+| [host](host.md)                                     | -           |
+| [index](index.md)                                   | -           |
+| [invocation](invocation.md)                         | -           |
+| [keys](keys.md)                                     | -           |
+| [mcp](mcp.md)                                       | -           |
+| [media](media.md)                                   | -           |
+| [pack](pack.md)                                     | -           |
+| [page/mount](page/mount.md)                         | -           |
+| [root-data](root-data.md)                           | -           |
+| [tenancy/auth0](tenancy/auth0.md)                   | -           |
+| [tenancy/cloudflare](tenancy/cloudflare.md)         | -           |
+| [tenancy/cold-directory](tenancy/cold-directory.md) | -           |
+| [tenancy](tenancy.md)                               | -           |
+| [tenancy/owner-key](tenancy/owner-key.md)           | -           |
+| [tenancy/registry](tenancy/registry.md)             | -           |
+| [tenancy/resolve](tenancy/resolve.md)               | -           |
+| [tenant](tenant.md)                                 | -           |
+| [workers-git](workers-git.md)                       | -           |
+| [workers](workers.md)                               | -           |

package/docs/api/pack.md

@@ -8,6 +8,49 @@
 
 # pack
 
+## Classes
+
+### InstallationObservationError
+
+Observer failure supplies no installation outcome and never cancels its owner.
+
+#### Extends
+
+- `Error`
+
+#### Constructors
+
+##### Constructor
+
+```ts
+new InstallationObservationError(requestId, options?): InstallationObservationError;
+```
+
+###### Parameters
+
+| Parameter   | Type           |
+| ----------- | -------------- |
+| `requestId` | `string`       |
+| `options?`  | `ErrorOptions` |
+
+###### Returns
+
+[`InstallationObservationError`](#installationobservationerror)
+
+###### Overrides
+
+```ts
+Error.constructor;
+```
+
+#### Properties
+
+##### requestId
+
+```ts
+readonly requestId: string;
+```
+
 ## Type Aliases
 
 ### PackOptions
@@ -81,13 +124,15 @@ function installFromSource(input): Promise<Response>;
 
 Capture an Artifacts Git commit, build its Release, upload it to an Oyster, and
 install it, or switch an existing installation to it
-([installRelease](#installrelease)).
+([installRelease](#installrelease)). `waitMs` starts with the upload/observation
+phase after packing; a supplied caller signal retains its original lifetime
+through that phase.
 
 #### Parameters
 
-| Parameter | Type                                                                                                                                                                                                                                                                                                                      |
-| --------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `input`   | `Readonly`\<\{ `appId`: `string`; `releaseId?`: `string`; `recipe`: [`PackOptions`](#packoptions)\[`"recipe"`\]; `source`: `Readonly`\<\{ `remote`: `string`; `token`: `string`; `sourceRevision`: `string`; \}\>; `packageStoreDirectory?`: `string`; `url`: `string`; `key`: `string`; `installationId`: `string`; \}\> |
+| Parameter | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
+| --------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `input`   | `Readonly`\<\{ `appId`: `string`; `releaseId?`: `string`; `recipe`: \{ `kind?`: `"bundled-html"` \| `"source-html"`; `entry`: `string`; `assets?`: \{ `maxManifestBytes`: `number`; `maxObjects`: `number`; `maxObjectBytes`: `number`; `maxTotalBytes`: `number`; \}; `assetBase?`: `string`; `backend`: \| \{ `entry?`: `string`; `runtime`: \{ `kind`: `"durable-facet"`; `stateSchema`: `number`; \}; `compatibilityDate`: `string`; `exportName`: `string`; \} \| `null`; `maxOutputBytes`: `number`; \}; `source`: `Readonly`\<\{ `remote`: `string`; `token`: `string`; `sourceRevision`: `string`; \}\>; `packageStoreDirectory?`: `string`; `url`: `string`; `key`: `string`; `installationId`: `string`; \}\> & `Readonly`\<\{ `waitMs?`: `number`; `signal?`: `AbortSignal`; \}\> |
 
 #### Returns
 
@@ -103,13 +148,17 @@ function installRelease(input): Promise<Response>;
 
 Upload a packed Release to an Oyster and install it. The host installs a new
 installation (201) or switches an existing one to this Release (200), keeping
-its state; both go through its one install-or-select owner.
+its state. Uploads precede admission; this helper then waits for the correlated
+terminal owner receipt, not merely the HTTP acknowledgement. Uploads and
+observation share the caller signal or explicit `waitMs`; absent either, the
+installer owns a twenty-minute default. Expiry does not cancel admitted work and
+is reported as an unconfirmed observation, not refusal.
 
 #### Parameters
 
-| Parameter | Type                                                                                                      |
-| --------- | --------------------------------------------------------------------------------------------------------- |
-| `input`   | `Readonly`\<\{ `directory`: `string`; `url`: `string`; `key`: `string`; `installationId?`: `string`; \}\> |
+| Parameter | Type                                                                                                                                                                                                                   |
+| --------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `input`   | `Readonly`\<\{ `directory`: `string`; `url`: `string`; `key`: `string`; `installationId?`: `string`; `onAdmitted?`: (`operation`) => `void`; \}\> & `Readonly`\<\{ `waitMs?`: `number`; `signal?`: `AbortSignal`; \}\> |
 
 #### Returns
 

package/docs/api/page/mount.md

@@ -8,6 +8,91 @@
 
 # page/mount
 
+## Classes
+
+### OysterAgentBrowserHost
+
+One page-wide selected Session, using only its reporting App's admitted view.
+
+#### Constructors
+
+##### Constructor
+
+```ts
+new OysterAgentBrowserHost(signal): OysterAgentBrowserHost;
+```
+
+End the selected connection with the page's own lifetime.
+
+###### Parameters
+
+| Parameter | Type          |
+| --------- | ------------- |
+| `signal`  | `AbortSignal` |
+
+###### Returns
+
+[`OysterAgentBrowserHost`](#oysteragentbrowserhost)
+
+#### Methods
+
+##### release()
+
+```ts
+release(frame): void;
+```
+
+A departing or deselecting mount cannot close a different active mount.
+
+###### Parameters
+
+| Parameter | Type                |
+| --------- | ------------------- |
+| `frame`   | `HTMLIFrameElement` |
+
+###### Returns
+
+`void`
+
+##### dispose()
+
+```ts
+dispose(): void;
+```
+
+Release the page's current selection; later reports cannot reconnect it.
+
+###### Returns
+
+`void`
+
+##### report()
+
+```ts
+report(
+   frame,
+   selection,
+   capabilities,
+   whistle
+): Promise<void>;
+```
+
+Bind the reporting mount's current command view to its explicitly selected
+Session.
+
+###### Parameters
+
+| Parameter      | Type                                                                         |
+| -------------- | ---------------------------------------------------------------------------- |
+| `frame`        | `HTMLIFrameElement`                                                          |
+| `selection`    | \| `Readonly`\<\{ `agentId`: `string`; `sessionId`: `string`; \}\> \| `null` |
+| `capabilities` | `CapabilityDirectory`                                                        |
+| `whistle`      | `Pick`\<`WhistleRuntime`, `"snapshot"` \| `"execute"`\>                      |
+
+###### Returns
+
+`Promise`\<`void`\>
+
 ## Type Aliases
 
 ### OysterAppOpenRouting
@@ -41,6 +126,9 @@ The host-admitted App configuration served by Oyster.
 ```ts
 type OysterAppConnectionOptions = Readonly<{
   config: OysterAppConfig;
+  agentBrowser: OysterAgentBrowserHost;
+  agentCommands: Pick<WhistleRuntime, "snapshot" | "execute">;
+  computerTarget?: string;
   frame: HTMLIFrameElement;
   signal: AbortSignal;
   handlers: AppHostHandlers;
@@ -218,7 +306,7 @@ would, without a frame between the shell and its host.
 
 | Name      | Type                                                                                                                                                                                                                                                                                                                                                                                                                                          | Description                                                                     |
 | --------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------- |
-| `storage` | \| `Readonly`\<\{ `read`: `Promise`\<\{ `value`: `Json`; `source`: `"team"` \| `"member"` \| `"none"`; `team`: \| \{ `value`: `Json`; `revision`: `number`; \} \| `null`; `member`: \| \{ `value`: `Json`; `revision`: `number`; \} \| `null`; `canWriteTeam`: `boolean`; \}\>; `write`: `Promise`\<\{ `revision`: `number`; \}\>; `reset`: `Promise`\<\{ `revision`: `number`; \}\>; `watch`: `Promise`\<`AppStorageWatch`\>; \}\> \| `null` | -                                                                               |
+| `storage` | \| `Readonly`\<\{ `read`: `Promise`\<\{ `value`: `Json`; `source`: `"member"` \| `"team"` \| `"none"`; `team`: \| \{ `value`: `Json`; `revision`: `number`; \} \| `null`; `member`: \| \{ `value`: `Json`; `revision`: `number`; \} \| `null`; `canWriteTeam`: `boolean`; \}\>; `write`: `Promise`\<\{ `revision`: `number`; \}\>; `reset`: `Promise`\<\{ `revision`: `number`; \}\>; `watch`: `Promise`\<`AppStorageWatch`\>; \}\> \| `null` | -                                                                               |
 | `methods` | `object`                                                                                                                                                                                                                                                                                                                                                                                                                                      | -                                                                               |
 | `call()`  | (`method`, `input`) => `Promise`\<`WhistleJsonValue`\>                                                                                                                                                                                                                                                                                                                                                                                        | Call the named method with JSON-encoded `input`; resolves with its JSON result. |
 
@@ -269,9 +357,9 @@ Resolve only the slots admitted for this installation by its current host.
 
 #### Parameters
 
-| Parameter | Type                                                                                                           |
-| --------- | -------------------------------------------------------------------------------------------------------------- |
-| `options` | `Pick`\<[`OysterAppConnectionOptions`](#oysterappconnectionoptions), `"config"` \| `"signal"` \| `"appOpen"`\> |
+| Parameter | Type                                                                                                                                 |
+| --------- | ------------------------------------------------------------------------------------------------------------------------------------ |
+| `options` | `Pick`\<[`OysterAppConnectionOptions`](#oysterappconnectionoptions), `"config"` \| `"signal"` \| `"appOpen"` \| `"computerTarget"`\> |
 
 #### Returns