@fungi.computer/oyster 0.3.0 → 0.3.2

package/README.md

@@ -124,7 +124,8 @@ npx wrangler deploy --var OYSTER_ORIGIN:$OYSTER_URL
 ```
 
 Set `OYSTER_ORIGIN` in `wrangler.jsonc` instead if you deploy again later; every
-deploy replaces the Worker's variables.
+deploy replaces the Worker's variables. If you rename the Worker's `name` in
+`wrangler.jsonc`, update `OYSTER_ORIGIN` to that Worker's URL at the same time.
 
 ### API-token permissions and teardown
 
@@ -172,6 +173,26 @@ repositories and namespace. Use the configured resource names and confirm each
 is gone through Cloudflare's dashboard or API. Capture teardown errors and the
 Wrangler version rather than silently adding unrelated token permissions.
 
+### Upgrading from Oyster 0.2 or earlier
+
+Oyster 0.3 does not read data created by Oyster 0.1 or 0.2, and it does not
+convert it. An Oyster deployed on 0.2 and redeployed on 0.3 answers every
+request with `409` and `{"error": "store_from_older_oyster", ...}` (a short
+explanation page in a browser), and `oyster install-apps` prints the same
+message. Old data is left untouched, so redeploying 0.2.x brings the Oyster back
+exactly as it was.
+
+To move to 0.3, start from a fresh store. The smallest way is to deploy under
+new names, leaving the old Oyster in place until you no longer need it. In
+`wrangler.jsonc`, rename `name`, both `bucket_name` values,
+`artifacts.namespace` and every `workflows[].name`; create the new release
+bucket; then run the quick start again. To reuse the names instead, tear the old
+Oyster down as in the teardown steps above (delete the Worker, which deletes its
+Durable Object data; empty and delete the release bucket; delete the Computer's
+container application, the Workflow, and the Artifacts repositories and
+namespace), then deploy 0.3 and reinstall the Apps. Data in the old Oyster, such
+as Apps' stored data, is not carried over.
+
 ### Set the Oyster owner key
 
 Choose an owner key (separate from the Cloudflare API token) and store it as a

package/dist/app-builds.d.ts

@@ -166,7 +166,7 @@ export type OysterAppBuildOptions = Readonly<{
     templates: Pick<PublisherTemplateSeedReceipts, "read">;
     now?: () => number;
 }>;
-/** Create the current build tables and index atomically; never convert old stores. */
+/** Create the current build tables and index atomically; an older store is refused, never converted. */
 export declare function migrateOysterAppBuilds(owner: WatchdogSqliteOwner): void;
 /** The build owner over one tenant's SQLite, Computer and artifact store. */
 export declare function createOysterAppBuilds(options: OysterAppBuildOptions): Readonly<{

package/dist/app-builds.js

@@ -29,6 +29,7 @@ import { writeArtifactRoot, } from "./build/artifact-writer.js";
 import { buildGitPassPrefix } from "./git-auth.js";
 import { defaultAssetPolicy, readVerified, verifyRelease, } from "./release.js";
 import { appForTemplateRepository, templateRepositoryForApp, } from "./source/template-repository.js";
+import { buildJobsFromOlderOyster, OlderOysterStoreError, } from "./older-oyster-store.js";
 /** A Computer's whole-build budget: a cold build on a 6 GiB Computer measured 185-270 s. */
 export const oysterAppBuildTimeoutMs = 900_000;
 /** The job, its clone admission and its upload grant end together. */
@@ -147,9 +148,11 @@ function sameDigest(left, right) {
         difference |= left.charCodeAt(index) ^ right.charCodeAt(index);
     return difference === 0;
 }
-/** Create the current build tables and index atomically; never convert old stores. */
+/** Create the current build tables and index atomically; an older store is refused, never converted. */
 export function migrateOysterAppBuilds(owner) {
     const { sql } = owner;
+    if (buildJobsFromOlderOyster(sql))
+        throw new OlderOysterStoreError();
     owner.transactionSync(() => {
         sql.exec("CREATE TABLE IF NOT EXISTS oyster_build_sources (app_id TEXT PRIMARY KEY, source TEXT NOT NULL) STRICT");
         const jobColumns = `

package/dist/boot-capability.d.ts

@@ -1,7 +1,7 @@
 import { z } from "zod";
 import { type BootUi, type UiBootCheckOutcome } from "./boot-gate.js";
 import type { BootPageResult, BootPageTarget } from "./browser/boot.js";
-export declare const BOOT_CAPABILITY_HEADER = "x-oyster-boot-capability";
+export declare const BOOT_CAPABILITY_HEADER = "x-oyster-boot-token";
 declare const bootCapabilityAssetSchema: z.ZodObject<{
     path: z.ZodString;
     contentType: z.ZodString;

package/dist/boot-capability.js

@@ -4,7 +4,7 @@ import { z } from "zod";
 import { parseArtifactRef, parseReleaseId, parseSha256Digest, } from "@fungi.computer/puffball";
 import { BOOT_DEADLINE_MS, BOOT_TRANSPORT_GRACE_MS, BootGateError, bootMountDiagnosticsSchema, } from "./boot-gate.js";
 import { defaultAssetPolicy } from "./release.js";
-export const BOOT_CAPABILITY_HEADER = "x-oyster-boot-capability";
+export const BOOT_CAPABILITY_HEADER = "x-oyster-boot-token";
 const bootCapabilityAssetSchema = z.strictObject({
     path: z.string().min(1).max(4096),
     contentType: z.string().min(1).max(256),

package/dist/mcp.d.ts

@@ -3,8 +3,15 @@ import type { DeclaredOperations, Installation } from "./apps/installation.js";
 import { type CapabilitySource, type Grants, type ModuleRegistration } from "@fungi.computer/mycelium";
 import { appToolSchemas } from "@fungi.computer/forage";
 import type { OysterHost, OysterPrincipal } from "./host.js";
-import type { McpPrincipal, McpCatalogSnapshot } from "@fungi.computer/mycelium/mcp";
+import type { TenantPrincipal } from "./tenant.js";
 import { type VerifiedRelease } from "./release.js";
+/** Captured capabilities and grants offered to one admitted MCP caller. */
+export type OysterMcpCatalogSnapshot = Readonly<{
+    instructions: string;
+    sources: readonly CapabilitySource[];
+    /** An omitted module has no grant. */
+    grants: Grants;
+}>;
 /** An installation ID as a guest binding name: `spawn-git` becomes `SPAWN_GIT`. */
 export declare function appBindingName(installationId: string): string;
 /** Why an App method call from the MCP catalog was refused. */
@@ -98,4 +105,4 @@ export declare function oysterComputerTools(host: Pick<OysterHost, "computerId"
  * still re-admits the key, rechecks that same stored approval, and passes
  * the App's gate.
  */
-export declare function oysterMcpCatalogLoad(host: Pick<OysterHost, "installations" | "instances" | "artifacts" | "guestLimits" | "backgroundOriginKey" | "computerId" | "computer" | "capabilities" | "appToolPolicy" | "keys" | "workflows">): (principal: McpPrincipal) => Promise<McpCatalogSnapshot>;
+export declare function oysterMcpCatalogLoad(host: Pick<OysterHost, "installations" | "instances" | "artifacts" | "guestLimits" | "backgroundOriginKey" | "computerId" | "computer" | "capabilities" | "appToolPolicy" | "keys" | "workflows">): (principal: TenantPrincipal) => Promise<OysterMcpCatalogSnapshot>;

package/dist/mcp.js

@@ -388,6 +388,7 @@ export async function oysterComputerTools(host, principal) {
             id,
             name: "workspace",
             namespace: ["computers"],
+            confirmCalls: true,
             computer,
         }),
         grants: { [id]: "write" },

package/dist/older-oyster-store-refusal.d.ts

@@ -0,0 +1,4 @@
+import type { TenantScope } from "./tenant.js";
+import type { OysterWorkerEnv } from "./workers.js";
+/** Answer with the refusal when the request's registry holds an older store. */
+export declare function refuseOlderOysterStore(request: Request, env: Pick<OysterWorkerEnv, "REGISTRY">, scope: TenantScope): Promise<Response | null>;

package/dist/older-oyster-store-refusal.js

@@ -0,0 +1,18 @@
+import { olderOysterStoreResponse } from "./older-oyster-store.js";
+/** Scopes whose registry answered "not older" in this isolate; a refusal is never cached. */
+const cleanScopes = new WeakMap();
+/** Answer with the refusal when the request's registry holds an older store. */
+export async function refuseOlderOysterStore(request, env, scope) {
+    const name = scope.durableName("registry");
+    let clean = cleanScopes.get(env);
+    if (clean === undefined) {
+        clean = new Set();
+        cleanScopes.set(env, clean);
+    }
+    if (clean.has(name))
+        return null;
+    if (await env.REGISTRY.getByName(name).storeFromOlderOyster())
+        return olderOysterStoreResponse(request);
+    clean.add(name);
+    return null;
+}

package/dist/older-oyster-store.d.ts

@@ -0,0 +1,21 @@
+import type { WatchdogSqliteOwner } from "@fungi.computer/watchdog";
+/** The closed error code a refused request carries. */
+export declare const olderOysterStoreCode = "store_from_older_oyster";
+/** The one message every refusal shows. */
+export declare const olderOysterStoreMessage = "This Oyster's data was created by Oyster 0.2 or earlier, which this version cannot read. Reset it (https://github.com/fungi-computer/oyster#upgrading-from-oyster-02-or-earlier) or redeploy 0.2.x. Old data is left untouched.";
+/** Raised by a store owner that finds data written by Oyster 0.2 or earlier. */
+export declare class OlderOysterStoreError extends Error {
+    constructor();
+}
+/**
+ * Whether the registry holds an installation row written before 0.3, which
+ * kept its authority fields at the top level. Reads only.
+ */
+export declare function installationsFromOlderOyster(sql: WatchdogSqliteOwner["sql"]): boolean;
+/**
+ * Whether `oyster_build_jobs` was created before 0.3 added `request_id`. Reads
+ * the table's own definition, never a schema probe.
+ */
+export declare function buildJobsFromOlderOyster(sql: WatchdogSqliteOwner["sql"]): boolean;
+/** The refusal as the browser or API caller asked to see it. */
+export declare function olderOysterStoreResponse(request: Request): Response;

package/dist/older-oyster-store.js

@@ -0,0 +1,43 @@
+/** The closed error code a refused request carries. */
+export const olderOysterStoreCode = "store_from_older_oyster";
+/** Where the reset steps live. */
+const olderOysterStoreGuide = "https://github.com/fungi-computer/oyster#upgrading-from-oyster-02-or-earlier";
+/** The one message every refusal shows. */
+export const olderOysterStoreMessage = `This Oyster's data was created by Oyster 0.2 or earlier, which this version cannot read. Reset it (${olderOysterStoreGuide}) or redeploy 0.2.x. Old data is left untouched.`;
+/** Raised by a store owner that finds data written by Oyster 0.2 or earlier. */
+export class OlderOysterStoreError extends Error {
+    constructor() {
+        super(olderOysterStoreMessage);
+        this.name = "OlderOysterStoreError";
+    }
+}
+/**
+ * Whether the registry holds an installation row written before 0.3, which
+ * kept its authority fields at the top level. Reads only.
+ */
+export function installationsFromOlderOyster(sql) {
+    const table = sql
+        .exec("SELECT 1 AS found FROM sqlite_master WHERE name='installations'")
+        .toArray();
+    if (table.length === 0)
+        return false;
+    return (sql
+        .exec("SELECT 1 AS found FROM installations WHERE json_valid(record) AND json_type(record, '$.authority') IS NULL LIMIT 1")
+        .toArray().length > 0);
+}
+/**
+ * Whether `oyster_build_jobs` was created before 0.3 added `request_id`. Reads
+ * the table's own definition, never a schema probe.
+ */
+export function buildJobsFromOlderOyster(sql) {
+    return (sql
+        .exec("SELECT 1 AS found FROM sqlite_master WHERE type='table' AND name='oyster_build_jobs' AND sql NOT LIKE '%request_id%'")
+        .toArray().length > 0);
+}
+/** The refusal as the browser or API caller asked to see it. */
+export function olderOysterStoreResponse(request) {
+    const status = 409;
+    if (request.headers.get("accept")?.includes("text/html") === true)
+        return new Response(`<!doctype html><meta charset="utf-8"><title>Oyster data needs a reset</title><body style="font:16px/1.5 system-ui;max-width:40rem;margin:4rem auto;padding:0 1rem"><h1>Oyster data needs a reset</h1><p>This Oyster's data was created by Oyster 0.2 or earlier, which this version cannot read. Old data is left untouched.</p><p><a href="${olderOysterStoreGuide}">Reset it</a> or redeploy 0.2.x.</p></body>`, { status, headers: { "content-type": "text/html; charset=utf-8" } });
+    return Response.json({ error: olderOysterStoreCode, message: olderOysterStoreMessage }, { status });
+}

package/dist/standalone/agents.d.ts

@@ -2,11 +2,16 @@ import { type StandaloneTenancyEnv } from "./tenancy.js";
 import type { PostEnvelope } from "@fungi.computer/carrier/post";
 import { type StandaloneMachineLinkBindings, type StandaloneMachineJoinResult } from "./machine-link.js";
 import { type MachineAgentSettlementPrincipal, type MachineAgentHome, type MachineEnrollment, type MachineLinkCaller, type MachineLinkIdentity } from "../machine-link/index.js";
+/** Workers AI binding surface used by the standalone provider adapter. */
+export type AiBinding = {
+    aiGatewayLogId: string | null;
+    /** AI binding transport supplied by the Worker runtime. */
+    fetch?: (input: Request | string | URL, init?: RequestInit) => Promise<Response>;
+};
 import { DurableObject } from "cloudflare:workers";
 import type { StandaloneComputerEnv } from "./computer.js";
 import { ShiitakeDO } from "@fungi.computer/shiitake/cloudflare";
 import type { CloudflareShiitakeOptions } from "@fungi.computer/shiitake/cloudflare";
-import { type AiBinding } from "@earendil-works/pi-ai/api/cloudflare-ai-binding";
 import * as Schema from "effect/Schema";
 import { type FrameBindingProps } from "../cloudflare.js";
 import type { Avatar } from "@fungi.computer/sprite/avatar";

package/dist/standalone/agents.js

@@ -1,3 +1,4 @@
+import { normalizeModel, streamModel } from "@fungi.computer/mule/effect";
 import { observeProviderStatus } from "@fungi.computer/mule/effect";
 import { standaloneTenancy, } from "./tenancy.js";
 import { AcceptedSchema } from "@fungi.computer/shiitake/client";
@@ -41,18 +42,18 @@ const defaultAgentModel = "@cf/moonshotai/kimi-k2.6";
 /** Own transport evidence and exact-message decisions for one model lease. */
 function observedModels(model, defaults) {
     return {
-        acquire: async ({ signal }) => {
-            const streamSimple = await loadStreamSimple();
+        acquire: ({ signal }) => {
+            const streamSimple = streamModel;
             const retryableMessages = new WeakSet();
-            return {
+            return Promise.resolve({
                 model,
                 retryable: (message) => !signal.aborted &&
                     message.stopReason === "error" &&
                     retryableMessages.has(message),
-                stream: (selected, context, options) => {
+                stream: async (selected, context, options) => {
                     const upstream = { ...options, ...defaults };
                     const observed = observeProviderStatus(upstream);
-                    const response = streamSimple(selected, context, {
+                    const response = await streamSimple(selected, context, {
                         ...upstream,
                         fetch: observed.fetch,
                         onProviderStreamEvent: observed.onProviderStreamEvent,
@@ -69,7 +70,7 @@ function observedModels(model, defaults) {
                     return response;
                 },
                 release: () => Promise.resolve(),
-            };
+            });
         },
     };
 }
@@ -89,7 +90,7 @@ function workersAiModels(ai, options = {}) {
         baseUrl: `https://workers-binding.ai/ai-gateway/gateways/${options.gateway ?? "default"}/workers-ai/v1`,
     };
     const fetch = createAiBindingFetch(ai);
-    return observedModels(model, {
+    return observedModels(normalizeModel(model), {
         fetch,
         apiKey: CLOUDFLARE_GATEWAY_BINDING_AUTH_SENTINEL,
         headers: {
@@ -100,11 +101,6 @@ function workersAiModels(ai, options = {}) {
         },
     });
 }
-/**
- * Pi's dispatching `streamSimple` evaluates every provider's model catalog when
- * it loads; only a run needs it, so acquisition loads it instead of startup.
- */
-const loadStreamSimple = async () => (await import("@earendil-works/pi-ai/compat")).streamSimple;
 const policyDirectorySchema = Schema.Struct({
     directoryName: Schema.NonEmptyString,
     tenantId: tenantIdSchema,
@@ -354,7 +350,7 @@ export class StandaloneAgentBase extends ShiitakeDO {
                     if (listed === undefined)
                         throw new Error("The OpenAI catalog has no Luna model");
                     const model = { ...listed, id: "openai/gpt-6-luna", baseUrl };
-                    return observedModels(model, {
+                    return observedModels(normalizeModel(model), {
                         apiKey: "oyster-provider-egress",
                         fetch: providerFetch(egress, "ai-gateway"),
                     }).acquire(input);

package/dist/standalone/app-builds-binding.js

@@ -203,7 +203,7 @@ export async function dispatchAppsBuildsBinding(env, scope, frame, props, method
         const registry = buildRegistry(env, scope);
         const build = "repo" in input
             ? await registry.readRepositoryBuild(frame.facts.selection.owner.id, input.repo)
-            : await registry.readBuild(input.jobId);
+            : await registry.readInstallationBuild(frame.facts.selection.owner.id, input.jobId);
         frame.signal.throwIfAborted();
         const missingJob = build === null && "jobId" in input;
         return Schema.decodeUnknownSync(Schema.Json)({

package/dist/standalone/app-set.js

@@ -2,7 +2,9 @@ import { execFile } from "node:child_process";
 import { mkdtemp, rm } from "node:fs/promises";
 import { join } from "node:path";
 import { setTimeout as sleep } from "node:timers/promises";
+import * as Option from "effect/Option";
 import * as Schema from "effect/Schema";
+import { olderOysterStoreCode } from "../older-oyster-store.js";
 import { publishSource } from "../pack.js";
 import { appBuildRecipe, readBuildManifest } from "../build/workspace-build.js";
 import { parseSourceRevision } from "@fungi.computer/puffball";
@@ -55,6 +57,11 @@ export const standaloneAppSet = [
         appId: "app_grove",
     },
 ];
+/** The host's refusal of a store written by Oyster 0.2 or earlier. */
+const olderOysterStoreRefusal = Schema.Struct({
+    error: Schema.Literal(olderOysterStoreCode),
+    message: Schema.String,
+});
 const publishedSchema = Schema.Struct({
     kind: Schema.Literals(["recorded", "existing"]),
     receipt: Schema.Struct({
@@ -285,8 +292,12 @@ export async function installStandaloneAppSet(options) {
         const publishStarted = performance.now();
         try {
             const published = await publish(app, located);
-            if (!published.ok)
+            if (!published.ok) {
+                const refusal = Schema.decodeUnknownOption(Schema.fromJsonString(olderOysterStoreRefusal))(await published.text());
+                if (Option.isSome(refusal))
+                    throw new Error(refusal.value.message);
                 throw new Error(`${name} source publish failed (${String(published.status)})`);
+            }
             const { kind, receipt } = Schema.decodeUnknownSync(publishedSchema)(await published.json());
             options.report(`${name} source ${kind} at ${receipt.seedRevision}`);
             const ready = performance.now();

package/dist/standalone/registry.d.ts

@@ -37,12 +37,15 @@ export type StandaloneRegistryRpc = {
     registerRepositoryApp(input: Parameters<StandaloneRegistry["registerRepositoryApp"]>[0]): ReturnType<StandaloneRegistry["registerRepositoryApp"]>;
     repositoryBuildSource(installationId: string, repository: string): ReturnType<StandaloneRegistry["repositoryBuildSource"]>;
     readRepositoryBuild(installationId: string, repository: string): ReturnType<StandaloneRegistry["readRepositoryBuild"]>;
+    readInstallationBuild(installationId: string, jobId: string): ReturnType<StandaloneRegistry["readInstallationBuild"]>;
     installWorkflowBuild(jobId: string, target: string, release: Release, memberId: string, callerInstallationId: string): ReturnType<StandaloneRegistry["installWorkflowBuild"]>;
 };
 export declare abstract class StandaloneRegistry extends OysterRegistry implements StandaloneRegistryRpc {
     #private;
     protected abstract hostFor(scope: TenantScope): Promise<OysterHost>;
     constructor(state: DurableObjectState, env: StandaloneRegistryEnv, git?: StandaloneRegistryGit);
+    /** Whether installations or build jobs were written by Oyster 0.2 or earlier. */
+    storeFromOlderOyster(): boolean;
     /** Re-admit the live owner before inventory access or a hosted start. */
     computerFleet(memberId: string, request: StandaloneFleetRequest): Promise<Readonly<{
         computerId: string;
@@ -167,6 +170,8 @@ export declare abstract class StandaloneRegistry extends OysterRegistry implemen
         appId: import("@fungi.computer/puffball").AppId;
     } | null>;
     readBuild(jobId: string): Promise<OysterBuildView | null>;
+    /** A job ID alone never grants another installation access to its status. */
+    readInstallationBuild(installationId: string, jobId: string): Promise<OysterBuildView | null>;
     /** Repository status belongs to the same captured Git owner as registration. */
     readRepositoryBuild(installationId: string, repository: string): Promise<Readonly<{
         jobId: string;

package/dist/standalone/registry.js

@@ -12,6 +12,7 @@ import * as Schema from "effect/Schema";
 import { parseAppId } from "@fungi.computer/puffball";
 import { appIdSchema } from "@fungi.computer/puffball/effect";
 import { createOysterAppBuilds, OysterBuildStartError, } from "../app-builds.js";
+import { buildJobsFromOlderOyster } from "../older-oyster-store.js";
 import { readBuildManifest, appBuildRecipe } from "../build/workspace-build.js";
 import { standaloneTenancy } from "./tenancy.js";
 import { createFleetComputers, ComputerInventoryError, } from "@fungi.computer/computer/fleet";
@@ -44,6 +45,11 @@ export class StandaloneRegistry extends OysterRegistry {
         });
         this.#computers.ensure();
     }
+    /** Whether installations or build jobs were written by Oyster 0.2 or earlier. */
+    storeFromOlderOyster() {
+        return (super.storeFromOlderOyster() ||
+            buildJobsFromOlderOyster(this.ctx.storage.sql));
+    }
     /** Re-admit the live owner before inventory access or a hosted start. */
     async computerFleet(memberId, request) {
         const shared = await standaloneTenancy(this.#env);
@@ -357,6 +363,15 @@ export class StandaloneRegistry extends OysterRegistry {
     async readBuild(jobId) {
         return (await this.#appBuilds()).read(jobId);
     }
+    /** A job ID alone never grants another installation access to its status. */
+    async readInstallationBuild(installationId, jobId) {
+        const builds = await this.#appBuilds();
+        const build = builds.read(jobId);
+        return build !== null &&
+            sourceOwnedBy(builds.readSource(build.appId), installationId)
+            ? build
+            : null;
+    }
     /** Repository status belongs to the same captured Git owner as registration. */
     async readRepositoryBuild(installationId, repository) {
         const latest = (await this.#appBuilds()).latestRepositoryBuild(installationId, repository);

package/dist/standalone/tenancy.d.ts

@@ -7,12 +7,23 @@ export type StandaloneSeed = Readonly<{
     origin: string;
     owner: Identity;
 }>;
+export type StandaloneSeedRefusal = Readonly<{
+    kind: "refused";
+    code: "seed_configuration_changed";
+    seededOrigin: string;
+    configuredOrigin: string;
+    recovery: "fresh_worker_name_or_reset_worker_data";
+}>;
+export declare class StandaloneSeedConfigurationChanged extends Error {
+    readonly refusal: StandaloneSeedRefusal;
+    constructor(refusal: StandaloneSeedRefusal);
+}
 /** A fresh registry namespace with one host-provisioned standalone tenant. */
 export declare class StandaloneTenants extends TenancyRegistryDO {
     #private;
     constructor(state: DurableObjectState);
     /** Reuse only the exact configured tenant and its current canonical owner. */
-    seed(input: StandaloneSeed): Promise<Tenant>;
+    seed(input: StandaloneSeed): Promise<Tenant | StandaloneSeedRefusal>;
 }
 /** The same trusted bindings are used by HTTP, MCP and cold root readers. */
 export type StandaloneTenancyEnv = Pick<OysterGitWorkerEnv, "OYSTER_ORIGIN" | "OYSTER_OWNER_NAME" | "OYSTER_OWNER_KEY" | "KEYS"> & Readonly<{
@@ -38,5 +49,7 @@ export type StandaloneTenancy = Readonly<{
     oyster: OysterTenancy;
     owner(): Promise<StandaloneOwner | null>;
 }>;
+/** A request may seed the standalone tenant only at its configured origin. */
+export declare function standaloneTenancyForRequest(env: StandaloneTenancyEnv, request: Request): Promise<StandaloneTenancy>;
 /** Seed once per environment, then admit every entry from one fresh registry read. */
 export declare function standaloneTenancy(env: StandaloneTenancyEnv): Promise<StandaloneTenancy>;

package/dist/standalone/tenancy.js

@@ -3,6 +3,7 @@ import { createTenancy, } from "../tenancy/index.js";
 import { ownerKey } from "../tenancy/owner-key.js";
 import { hosts } from "../tenancy/resolve.js";
 import { ownerOrKeyAuth } from "../auth.js";
+import { HTTPException } from "hono/http-exception";
 import { defaultTenant, tenantScope, } from "../tenant.js";
 import * as Schema from "effect/Schema";
 const seedSchema = Schema.Struct({
@@ -13,6 +14,14 @@ const seedSchema = Schema.Struct({
     }),
 });
 const seedKey = "standalone-owner-seed";
+export class StandaloneSeedConfigurationChanged extends Error {
+    refusal;
+    constructor(refusal) {
+        super("Standalone seed configuration changed");
+        this.name = "StandaloneSeedConfigurationChanged";
+        this.refusal = refusal;
+    }
+}
 /** A fresh registry namespace with one host-provisioned standalone tenant. */
 export class StandaloneTenants extends TenancyRegistryDO {
     #state;
@@ -31,8 +40,15 @@ export class StandaloneTenants extends TenancyRegistryDO {
                 const marker = Schema.decodeUnknownSync(seedSchema)(raw);
                 if (marker.origin !== scope.origin ||
                     marker.owner.provider !== input.owner.provider ||
-                    marker.owner.subject !== input.owner.subject)
-                    throw new Error("Standalone seed configuration changed");
+                    marker.owner.subject !== input.owner.subject) {
+                    return {
+                        kind: "refused",
+                        code: "seed_configuration_changed",
+                        seededOrigin: marker.origin,
+                        configuredOrigin: scope.origin,
+                        recovery: "fresh_worker_name_or_reset_worker_data",
+                    };
+                }
             }
             let tenant = await this.get(defaultTenant);
             if (tenant === null) {
@@ -69,6 +85,22 @@ export class StandaloneTenants extends TenancyRegistryDO {
         });
     }
 }
+/** A request may seed the standalone tenant only at its configured origin. */
+export async function standaloneTenancyForRequest(env, request) {
+    const configuredOrigin = tenantScope(defaultTenant, env.OYSTER_ORIGIN).origin;
+    const requestOrigin = new URL(request.url).origin;
+    if (requestOrigin !== configuredOrigin)
+        throw new HTTPException(404, {
+            res: Response.json({
+                kind: "refused",
+                code: "origin_mismatch",
+                configuredOrigin,
+                requestOrigin,
+                message: `Request origin ${requestOrigin} does not match configured OYSTER_ORIGIN ${configuredOrigin}. Set OYSTER_ORIGIN to this Worker's URL.`,
+            }, { status: 404 }),
+        });
+    return standaloneTenancy(env);
+}
 const environments = new WeakMap();
 /** Seed once per environment, then admit every entry from one fresh registry read. */
 export function standaloneTenancy(env) {
@@ -90,10 +122,12 @@ async function composeTenancy(env) {
         provider: "standalone-owner",
         subject: env.OYSTER_OWNER_NAME ?? "owner",
     };
-    await env.TENANTS.getByName("registry").seed({
+    const seeded = await env.TENANTS.getByName("registry").seed({
         origin: scope.origin,
         owner: identity,
     });
+    if ("kind" in seeded)
+        throw new StandaloneSeedConfigurationChanged(seeded);
     const registry = durableObjectRegistry(env.TENANTS, { readonly: true });
     /** The canonical owner, only while the one admitted record still proves it. */
     const ownerOf = ({ tenant, membership, }) => tenant.id !== defaultTenant ||

package/dist/standalone/worker.js

@@ -17,7 +17,7 @@ import { StandaloneInstance as ComputerInstance } from "./instance.js";
 // Every guest binding in every frame is this one entrypoint, routed by props.
 export { OysterBinding } from "./instance.js";
 import { StandaloneWorkflowRunsBase, } from "./workflows.js";
-import { standaloneTenancy } from "./tenancy.js";
+import { standaloneTenancyForRequest, StandaloneSeedConfigurationChanged, } from "./tenancy.js";
 export { StandaloneTenants } from "./tenancy.js";
 import { standalonePreviewRequest } from "./preview.js";
 import { standaloneMachineLinkRoutes, } from "./machine-link.js";
@@ -25,6 +25,7 @@ export { MachineLinkDO } from "./machine-link.js";
 import { standaloneWorkflowControl } from "./workflow-control.js";
 import { standaloneWorkflowWebhookRoutes, standaloneWorkflowWebhookControls, } from "./workflow-webhooks.js";
 import { Hono } from "hono";
+import { HTTPException } from "hono/http-exception";
 import { standaloneBuildRoutes } from "./builds.js";
 import { standaloneComputerFleetRoutes, standaloneComputerSelection, } from "./computer-fleet.js";
 import { serveOysterComputerEgress, } from "./computer-egress.js";
@@ -59,7 +60,7 @@ export { AgentDirectory } from "./agents.js";
 const standaloneRoot = (selectComputer) => {
     const root = oysterGitRoot({
         tenancy: (env) => ({
-            resolve: async (request) => (await standaloneTenancy(env)).oyster.resolve(request),
+            resolve: async (request) => (await standaloneTenancyForRequest(env, request)).oyster.resolve(request),
         }),
         homeInstallationId: (env) => env.OYSTER_HOME_INSTALLATION,
         agents: standaloneAgents,
@@ -153,14 +154,21 @@ export class OysterComputerEgress extends WorkerEntrypoint {
         });
     }
 }
+const standaloneWorkerErrorHandler = (error, context) => {
+    if (error instanceof StandaloneSeedConfigurationChanged) {
+        const { refusal } = error;
+        return context.json({
+            ...refusal,
+            message: `Standalone seed/origin mismatch: existing data was seeded for ${refusal.seededOrigin}, but OYSTER_ORIGIN is ${refusal.configuredOrigin}. Deploy under a fresh Worker name or reset this Worker's data.`,
+        }, 409);
+    }
+    if (error instanceof HTTPException)
+        return error.getResponse();
+    console.error(error);
+    return context.text("Internal Server Error", 500);
+};
 export default {
     async fetch(request, env, context) {
-        const path = new URL(request.url).pathname;
-        if (path === "/local/mesh/join" ||
-            new URLPattern({
-                pathname: "/api/teams/:teamId/local/mesh/:deviceId/connect",
-            }).test(request.url))
-            return standaloneMachineLinkRoutes(env).fetch(request);
         const preview = await standalonePreviewRequest(request, env, (computerId) => computerRegistry(env).ownsComputer(computerId), (computerId, signature, port, service) => env.COMPUTER.getByName(computerId).portPreview(signature, port, service));
         if (preview !== null)
             return preview;
@@ -171,6 +179,13 @@ export default {
         if (fetchOyster === undefined)
             throw new Error("Oyster fetch handler is missing");
         return new Hono()
+            .onError(standaloneWorkerErrorHandler)
+            .all("/local/mesh/join", () => standaloneMachineLinkRoutes(env)
+            .onError(standaloneWorkerErrorHandler)
+            .fetch(request, env, context))
+            .all("/api/teams/:teamId/local/mesh/:deviceId/connect", () => standaloneMachineLinkRoutes(env)
+            .onError(standaloneWorkerErrorHandler)
+            .fetch(request, env, context))
             .route("/", standaloneWorkflowWebhookRoutes(env, async (incoming) => {
             const admitted = await oysterRoot.admit(env, incoming);
             return admitted === null
@@ -178,6 +193,6 @@ export default {
                 : oysterRoot.hostFor(env, admitted.scope);
         }))
             .all("*", () => fetchOyster(request, env, context))
-            .fetch(request);
+            .fetch(request, env, context);
     },
 };

package/dist/workers-git.js

@@ -29,6 +29,7 @@ import { createRecipientDeliveries, } from "./event-recipients.js";
 import { createOyster, oysterPrincipalIsOwner, } from "./host.js";
 import { OysterInstance, oysterBindingEntrypoint, oysterBindings, oysterWorkerHost, r2FileSource, r2ArtifactStore, serveOysterBootCapability, } from "./workers.js";
 import { registryInstallations } from "./internal/registry-installations.js";
+import { refuseOlderOysterStore } from "./older-oyster-store-refusal.js";
 const infoSchema = Schema.Struct({
     name: Schema.String,
     defaultBranch: Schema.String,
@@ -888,10 +889,21 @@ export function createOysterGitWorker(root) {
                 hosts = new Map();
                 environments.set(env, hosts);
             }
-            const resolved = await root.admit(env, request);
+            let resolved;
+            try {
+                resolved = await root.admit(env, request);
+            }
+            catch (error) {
+                if (error instanceof HTTPException)
+                    return error.getResponse();
+                throw error;
+            }
             if (resolved === null)
                 return new Response("Not found", { status: 404 });
             const { scope } = resolved;
+            const refused = await refuseOlderOysterStore(request, env, scope);
+            if (refused !== null)
+                return refused;
             const boot = await serveOysterBootCapability(request, env, scope);
             if (boot !== null)
                 return boot;

package/dist/workers.d.ts

@@ -211,6 +211,8 @@ export declare class OysterRegistry<Env extends OysterWorkerEnv = OysterWorkerEn
      */
     protected currentOwner(memberId: string, tenantId: TenantId): Promise<string | null>;
     private storageView;
+    /** Whether this registry's data was written by Oyster 0.2 or earlier; hosts refuse it. */
+    storeFromOlderOyster(): boolean;
     /** Every installation record. */
     list(): Installation[];
     /** One installation record, or `null`. */

package/dist/workers.js

@@ -10,6 +10,8 @@ import { BOOT_DEADLINE_MS, BOOT_TRANSPORT_GRACE_MS, readBootUi, } from "./boot-g
 import { checkBootPage } from "./browser/boot.js";
 import { bindingSessions } from "./browser/sessions.js";
 import { registryInstallations } from "./internal/registry-installations.js";
+import { installationsFromOlderOyster } from "./older-oyster-store.js";
+import { refuseOlderOysterStore } from "./older-oyster-store-refusal.js";
 import { createInstallationOperations, } from "./installation-operations.js";
 import { installationWorkerEntrypoint } from "./installation-execution.js";
 export { installationWorkerEntrypoint };
@@ -62,6 +64,8 @@ const approvalHomePinRow = Schema.Struct({
 /** The installation registry: one SQLite-backed Durable Object per Oyster. */
 export class OysterRegistry extends DurableObject {
     #generation;
+    /** Decided once, before this version writes anything, and never revised. */
+    #installationsFromOlderOyster;
     #approval;
     #installationOperations;
     /** The plain root has the same single owner-key host as OysterInstance. */
@@ -150,6 +154,7 @@ export class OysterRegistry extends DurableObject {
     artifactsRepositories;
     constructor(ctx, env) {
         super(ctx, env);
+        this.#installationsFromOlderOyster = installationsFromOlderOyster(ctx.storage.sql);
         ctx.storage.sql.exec("CREATE TABLE IF NOT EXISTS oyster_approval_home (id INTEGER PRIMARY KEY CHECK (id = 1), tenant_id TEXT NOT NULL, origin TEXT NOT NULL) STRICT");
         ctx.storage.sql.exec("CREATE TABLE IF NOT EXISTS installations (installation_id TEXT PRIMARY KEY, record TEXT NOT NULL) STRICT");
         this.#generation = createInstallationStoreGeneration(ctx.storage.sql);
@@ -347,6 +352,10 @@ export class OysterRegistry extends DurableObject {
                 : new AppStorageError("unavailable", { cause }),
         }));
     }
+    /** Whether this registry's data was written by Oyster 0.2 or earlier; hosts refuse it. */
+    storeFromOlderOyster() {
+        return this.#installationsFromOlderOyster;
+    }
     /** Every installation record. */
     list() {
         return this.ctx.storage.sql
@@ -1151,6 +1160,9 @@ export function createOysterWorker(options = {}) {
     return {
         async fetch(request, env) {
             const scope = tenantScope(defaultTenant, env.OYSTER_ORIGIN);
+            const refused = await refuseOlderOysterStore(request, env, scope);
+            if (refused !== null)
+                return refused;
             const boot = await serveOysterBootCapability(request, env, scope);
             if (boot !== null)
                 return boot;

package/docs/api/mcp.md

@@ -67,6 +67,20 @@ readonly code: string;
 
 ## Type Aliases
 
+### OysterMcpCatalogSnapshot
+
+```ts
+type OysterMcpCatalogSnapshot = Readonly<{
+  instructions: string;
+  sources: readonly CapabilitySource[];
+  grants: Grants;
+}>;
+```
+
+Captured capabilities and grants offered to one admitted MCP caller.
+
+---
+
 ### OysterCallerAccess
 
 ```ts

package/docs/api/workers.md

@@ -1188,6 +1188,19 @@ Open the existing App-storage invalidation stream under fresh owner admission.
 
 `Promise`\<`Response`\>
 
+##### storeFromOlderOyster()
+
+```ts
+storeFromOlderOyster(): boolean;
+```
+
+Whether this registry's data was written by Oyster 0.2 or earlier; hosts refuse
+it.
+
+###### Returns
+
+`boolean`
+
 ##### list()
 
 ```ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fungi.computer/oyster",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "author": "Levi <levi@technomancy.dev>",
   "description": "Run your own Apps on Cloudflare Workers or celld: installable App Releases, each with its own Durable Object, SQLite database and declared bindings",
   "type": "module",
@@ -246,33 +246,33 @@
     "@earendil-works/pi-ai": "1.3.0",
     "@fungi.computer/agar": "0.3.0",
     "@fungi.computer/bird-dog": "0.1.0",
-    "@fungi.computer/braid": "0.2.0",
+    "@fungi.computer/braid": "0.2.1",
     "@fungi.computer/burrow": "0.1.0",
     "@fungi.computer/cairn": "0.1.0",
     "@fungi.computer/capnweb": "0.12.0",
     "@fungi.computer/caps": "0.2.0",
     "@fungi.computer/carrier": "0.1.0",
-    "@fungi.computer/computer": "0.2.0",
-    "@fungi.computer/computer-contract": "0.0.1",
+    "@fungi.computer/computer": "0.2.2",
+    "@fungi.computer/computer-contract": "0.0.2",
     "@fungi.computer/darkroom": "0.2.0",
     "@fungi.computer/ear-tag": "0.1.0",
     "@fungi.computer/forage": "0.2.0",
     "@fungi.computer/gills": "0.2.0",
-    "@fungi.computer/knapsack": "0.2.0",
-    "@fungi.computer/mycelium": "0.2.0",
+    "@fungi.computer/knapsack": "0.2.1",
+    "@fungi.computer/mycelium": "0.2.1",
     "@fungi.computer/nacre": "0.0.1",
     "@fungi.computer/puffball": "0.2.0",
     "@fungi.computer/seam": "0.1.0",
-    "@fungi.computer/shiitake": "0.3.0",
-    "@fungi.computer/shiitake-extensions": "0.1.0",
+    "@fungi.computer/shiitake": "0.3.1",
+    "@fungi.computer/shiitake-extensions": "0.1.1",
     "@fungi.computer/sigils": "0.2.0",
     "@fungi.computer/sprite": "0.2.0",
     "@fungi.computer/sprite-zdog": "0.2.0",
     "@fungi.computer/veil": "0.2.0",
     "@fungi.computer/watchdog": "0.1.0",
     "@fungi.computer/whistle": "0.1.0",
-    "@fungi.computer/workflows-wire": "0.2.0",
-    "@fungi.computer/zookeeper": "0.0.1",
+    "@fungi.computer/workflows-wire": "0.2.1",
+    "@fungi.computer/zookeeper": "0.0.2",
     "@modelcontextprotocol/server": "2.0.0",
     "@pnpm/lockfile.fs": "1100.2.13",
     "@pnpm/lockfile.pruner": "1100.0.27",