@fungi.computer/oyster 0.3.1 → 0.4.0

package/dist/standalone/workflow-host.d.ts

@@ -103,7 +103,7 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                 authorityVersion: number;
                 declaredOperationsDigest: import("@fungi.computer/puffball").Sha256Digest;
                 approvedGrants: readonly Readonly<{
-                    capability: "approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
+                    capability: "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
                     capabilityApproved: true;
                     operations: readonly string[];
                     resources: "tenant-scope" | readonly Readonly<{
@@ -239,7 +239,7 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                 authorityVersion: number;
                 declaredOperationsDigest: import("@fungi.computer/puffball").Sha256Digest;
                 approvedGrants: readonly Readonly<{
-                    capability: "approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
+                    capability: "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
                     capabilityApproved: true;
                     operations: readonly string[];
                     resources: "tenant-scope" | readonly Readonly<{
@@ -325,7 +325,7 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                 authorityVersion: number;
                 declaredOperationsDigest: import("@fungi.computer/puffball").Sha256Digest;
                 approvedGrants: readonly Readonly<{
-                    capability: "approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
+                    capability: "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
                     capabilityApproved: true;
                     operations: readonly string[];
                     resources: "tenant-scope" | readonly Readonly<{
@@ -444,7 +444,7 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                     authorityVersion: number;
                     declaredOperationsDigest: import("@fungi.computer/puffball").Sha256Digest;
                     approvedGrants: readonly Readonly<{
-                        capability: "approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
+                        capability: "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
                         capabilityApproved: true;
                         operations: readonly string[];
                         resources: "tenant-scope" | readonly Readonly<{
@@ -544,7 +544,7 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                     authorityVersion: number;
                     declaredOperationsDigest: import("@fungi.computer/puffball").Sha256Digest;
                     approvedGrants: readonly Readonly<{
-                        capability: "approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
+                        capability: "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
                         capabilityApproved: true;
                         operations: readonly string[];
                         resources: "tenant-scope" | readonly Readonly<{
@@ -678,9 +678,9 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                     readonly values: {
                         readonly [x: string]: import("@fungi.computer/braid").Mapping;
                     };
+                    readonly id: string;
                     readonly kind: "app";
                     readonly method: string;
-                    readonly id: string;
                     readonly app: string;
                     readonly methodDigest: string;
                     readonly retry?: {
@@ -696,8 +696,8 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                         access: "read";
                     } | undefined;
                 } | {
-                    readonly kind: "review";
                     readonly id: string;
+                    readonly kind: "review";
                     readonly timeout: number;
                     readonly title: string;
                     readonly reviewers: "runner" | "owners";
@@ -775,9 +775,9 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                             readonly values: {
                                 readonly [x: string]: import("@fungi.computer/braid").Mapping;
                             };
+                            readonly id: string;
                             readonly kind: "app";
                             readonly method: string;
-                            readonly id: string;
                             readonly app: string;
                             readonly methodDigest: string;
                             readonly retry?: {
@@ -793,8 +793,8 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                                 access: "read";
                             } | undefined;
                         } | {
-                            readonly kind: "review";
                             readonly id: string;
+                            readonly kind: "review";
                             readonly timeout: number;
                             readonly title: string;
                             readonly reviewers: "runner" | "owners";
@@ -900,9 +900,9 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                             readonly input: {
                                 readonly [x: string]: S.Json;
                             };
+                            readonly description: string;
                             readonly digest: string;
                             readonly approval: "queue" | "none" | "simulate";
-                            readonly description: string;
                             readonly effect: "read" | "write" | "external";
                             readonly requires: readonly string[];
                             readonly pending?: true | undefined;
@@ -935,10 +935,10 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                 readonly input: {
                     readonly [x: string]: S.Json;
                 };
+                readonly description: string;
                 readonly method: string;
                 readonly installationId: string;
                 readonly approval: "queue" | "none" | "simulate";
-                readonly description: string;
                 readonly effect: "read" | "write" | "external";
                 readonly requires: readonly string[];
                 readonly app: string;

package/dist/standalone/workflows.d.ts

@@ -295,9 +295,9 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                     readonly values: {
                         readonly [x: string]: import("@fungi.computer/braid").Mapping;
                     };
+                    readonly id: string;
                     readonly kind: "app";
                     readonly method: string;
-                    readonly id: string;
                     readonly app: string;
                     readonly methodDigest: string;
                     readonly retry?: {
@@ -313,8 +313,8 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                         access: "read";
                     } | undefined;
                 } | {
-                    readonly kind: "review";
                     readonly id: string;
+                    readonly kind: "review";
                     readonly timeout: number;
                     readonly title: string;
                     readonly reviewers: "runner" | "owners";
@@ -392,9 +392,9 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                             readonly values: {
                                 readonly [x: string]: import("@fungi.computer/braid").Mapping;
                             };
+                            readonly id: string;
                             readonly kind: "app";
                             readonly method: string;
-                            readonly id: string;
                             readonly app: string;
                             readonly methodDigest: string;
                             readonly retry?: {
@@ -410,8 +410,8 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                                 access: "read";
                             } | undefined;
                         } | {
-                            readonly kind: "review";
                             readonly id: string;
+                            readonly kind: "review";
                             readonly timeout: number;
                             readonly title: string;
                             readonly reviewers: "runner" | "owners";
@@ -517,9 +517,9 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                             readonly input: {
                                 readonly [x: string]: S.Json;
                             };
+                            readonly description: string;
                             readonly digest: string;
                             readonly approval: "queue" | "none" | "simulate";
-                            readonly description: string;
                             readonly effect: "read" | "write" | "external";
                             readonly requires: readonly string[];
                             readonly pending?: true | undefined;
@@ -552,10 +552,10 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                 readonly input: {
                     readonly [x: string]: S.Json;
                 };
+                readonly description: string;
                 readonly method: string;
                 readonly installationId: string;
                 readonly approval: "queue" | "none" | "simulate";
-                readonly description: string;
                 readonly effect: "read" | "write" | "external";
                 readonly requires: readonly string[];
                 readonly app: string;
@@ -625,17 +625,23 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
         runId: string;
         planDigest: string;
         title: string;
-        outcome: "terminal" | "cancelled" | "active" | null;
+        outcome: "active" | "terminal" | "cancelled" | null;
         events: readonly {
             readonly runId: string;
-            readonly nodeId: string;
             readonly state: "skipped" | "queued" | "running" | "failed" | "complete" | "waiting";
+            readonly nodeId: string;
             readonly iteration: string;
             readonly attempt: number;
             readonly output?: {
                 readonly [x: string]: S.Json;
             } | undefined;
             readonly refusal?: string | undefined;
+            readonly position?: readonly {
+                readonly node: string;
+                readonly loop: "map" | "repeat";
+                readonly index: number;
+                readonly count: number;
+            }[] | undefined;
             readonly row?: {
                 readonly id: string;
                 readonly title: string;
@@ -658,12 +664,6 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
             } | undefined;
             readonly graphId?: string | undefined;
             readonly poll?: number | undefined;
-            readonly position?: readonly {
-                readonly node: string;
-                readonly loop: "map" | "repeat";
-                readonly index: number;
-                readonly count: number;
-            }[] | undefined;
             readonly recordedAt?: number | undefined;
             readonly durationMs?: number | undefined;
             readonly costMilliunits?: number | undefined;
@@ -716,17 +716,23 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
         runId: string;
         planDigest: string;
         title: string;
-        outcome: "terminal" | "cancelled" | "active" | null;
+        outcome: "active" | "terminal" | "cancelled" | null;
         events: readonly {
             readonly runId: string;
-            readonly nodeId: string;
             readonly state: "skipped" | "queued" | "running" | "failed" | "complete" | "waiting";
+            readonly nodeId: string;
             readonly iteration: string;
             readonly attempt: number;
             readonly output?: {
                 readonly [x: string]: S.Json;
             } | undefined;
             readonly refusal?: string | undefined;
+            readonly position?: readonly {
+                readonly node: string;
+                readonly loop: "map" | "repeat";
+                readonly index: number;
+                readonly count: number;
+            }[] | undefined;
             readonly row?: {
                 readonly id: string;
                 readonly title: string;
@@ -749,12 +755,6 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
             } | undefined;
             readonly graphId?: string | undefined;
             readonly poll?: number | undefined;
-            readonly position?: readonly {
-                readonly node: string;
-                readonly loop: "map" | "repeat";
-                readonly index: number;
-                readonly count: number;
-            }[] | undefined;
             readonly recordedAt?: number | undefined;
             readonly durationMs?: number | undefined;
             readonly costMilliunits?: number | undefined;

package/dist/storage-frame.d.ts

@@ -21,7 +21,7 @@ export declare const storageFrameMethods: {
                 };
             } | {
                 readonly kind: "rejected";
-                readonly code: "unavailable" | "invalid" | "conflict" | "undeclared_key" | "scope_not_declared" | "owner_required" | "too_large" | "quota_exceeded";
+                readonly code: "unavailable" | "conflict" | "invalid" | "undeclared_key" | "scope_not_declared" | "owner_required" | "too_large" | "quota_exceeded";
             };
             requiredOperations: () => string[];
         };
@@ -39,7 +39,7 @@ export declare const storageFrameMethods: {
                 };
             } | {
                 readonly kind: "rejected";
-                readonly code: "unavailable" | "invalid" | "conflict" | "undeclared_key" | "scope_not_declared" | "owner_required" | "too_large" | "quota_exceeded";
+                readonly code: "unavailable" | "conflict" | "invalid" | "undeclared_key" | "scope_not_declared" | "owner_required" | "too_large" | "quota_exceeded";
             };
             requiredOperations: () => string[];
         };
@@ -56,7 +56,7 @@ export declare const storageFrameMethods: {
                 };
             } | {
                 readonly kind: "rejected";
-                readonly code: "unavailable" | "invalid" | "conflict" | "undeclared_key" | "scope_not_declared" | "owner_required" | "too_large" | "quota_exceeded";
+                readonly code: "unavailable" | "conflict" | "invalid" | "undeclared_key" | "scope_not_declared" | "owner_required" | "too_large" | "quota_exceeded";
             };
             requiredOperations: () => string[];
         };

package/dist/workers-git.d.ts

@@ -191,6 +191,8 @@ export declare abstract class OysterGitInstance<Env extends OysterGitWorkerEnv =
  * `oysterGitRoot(options).hostFor`.
  */
 export type OysterGitWorkerOptions<Env extends OysterGitWorkerEnv> = Readonly<{
+    /** Host-owned fleet control, admitted on every invocation by its durable owner. */
+    computerControl?: (env: Env, scope: TenantScope) => NonNullable<OysterHost["computerControl"]>;
     /** Workflow controls supplied by the host's existing run owner. */
     workflows?: (env: Env, host: OysterGitWorkerHost) => NonNullable<OysterHost["workflows"]>;
     /** Resolve one host-selected tenant before authentication; unknown origins refuse.

package/dist/workers-git.js

@@ -889,7 +889,15 @@ export function createOysterGitWorker(root) {
                 hosts = new Map();
                 environments.set(env, hosts);
             }
-            const resolved = await root.admit(env, request);
+            let resolved;
+            try {
+                resolved = await root.admit(env, request);
+            }
+            catch (error) {
+                if (error instanceof HTTPException)
+                    return error.getResponse();
+                throw error;
+            }
             if (resolved === null)
                 return new Response("Not found", { status: 404 });
             const { scope } = resolved;
@@ -1137,6 +1145,8 @@ export async function oysterGitWorkerHost(env, options, selected, request) {
         host = { ...host, pageScript: options.pageScript };
     if (options.workflows !== undefined)
         host = { ...host, workflows: options.workflows(env, host) };
+    if (options.computerControl !== undefined)
+        host = { ...host, computerControl: options.computerControl(env, scope) };
     if (options.homeInstallationId !== undefined)
         host = { ...host, homeInstallationId: options.homeInstallationId(env) };
     return host;

package/dist/workers.d.ts

@@ -110,23 +110,24 @@ export declare class OysterRegistry<Env extends OysterWorkerEnv = OysterWorkerEn
     }>): Promise<{
         readonly record: {
             readonly revision: number;
+            readonly expiresAt: number;
+            readonly operation: string;
+            readonly description: {
+                readonly title: string;
+                readonly inputBytes: number;
+                readonly inputSha256: string;
+            };
             readonly by: {
                 readonly kind: "human";
                 readonly memberId: string;
             } | {
                 readonly kind: "policy";
             } | null;
-            readonly description: {
-                readonly title: string;
-                readonly inputBytes: number;
-                readonly inputSha256: string;
-            };
-            readonly operation: string;
             readonly access: "write" | "external";
-            readonly expiresAt: number;
             readonly reason: "pending" | "expired" | "not-found" | "not-eligible" | "already-answered" | "stale-revision" | "declined" | "fenced" | "not-granted" | "read-only" | "in-flight" | "outcome-unknown" | "identity-conflict" | null;
             readonly updatedAt: number;
             readonly module: string;
+            readonly state: "pending" | "expired" | "denied" | "applied" | "requested" | "approved" | "claimed" | "outcome_unknown";
             readonly recordId: string;
             readonly authorityFence: string;
             readonly requester: {
@@ -136,7 +137,6 @@ export declare class OysterRegistry<Env extends OysterWorkerEnv = OysterWorkerEn
                 readonly displayName: string;
             };
             readonly reversibility: "reversible" | "irreversible-external";
-            readonly state: "pending" | "expired" | "denied" | "applied" | "requested" | "approved" | "claimed" | "outcome_unknown";
             readonly requestedAt: number;
             readonly evidence?: readonly {
                 readonly kind: "artifact";

package/docs/api/agents.md

@@ -203,6 +203,47 @@ type OysterAgents = Readonly<{
         error: "not_found" | "not_granted";
       }>
   >;
+  readModelChoice: Promise<{
+    keySource: "workers-ai" | "ai-gateway" | "byok";
+    model: {
+      providerId: Schema.String;
+      modelId: Schema.String;
+      reasoning?: Schema.optional<
+        Schema.Literals<
+          readonly ["minimal", "low", "medium", "high", "xhigh", "max"]
+        >
+      >;
+    };
+  } | null>;
+  decodeModelChoice: {
+    keySource: "workers-ai" | "ai-gateway" | "byok";
+    model: {
+      providerId: Schema.String;
+      modelId: Schema.String;
+      reasoning?: Schema.optional<
+        Schema.Literals<
+          readonly ["minimal", "low", "medium", "high", "xhigh", "max"]
+        >
+      >;
+    };
+  } | null;
+  setModelChoice: Promise<
+    | {
+        keySource: "workers-ai" | "ai-gateway" | "byok";
+        model: {
+          providerId: Schema.String;
+          modelId: Schema.String;
+          reasoning?: Schema.optional<
+            Schema.Literals<
+              readonly ["minimal", "low", "medium", "high", "xhigh", "max"]
+            >
+          >;
+        };
+      }
+    | Readonly<{
+        error: "not_found" | "not_granted" | AgentModelRefusal;
+      }>
+  >;
   policyStatus: Promise<Readonly<{
     status: "pending" | "approved";
     revision: string;
@@ -262,6 +303,31 @@ type OysterAgents = Readonly<{
 
 Where an Oyster's agents live and run.
 
+---
+
+### AgentModelChoice
+
+```ts
+type AgentModelChoice = typeof agentModelChoiceSchema.Type;
+```
+
+The Agent's model preference and source reference, never credential material.
+
+---
+
+### AgentModelRefusal
+
+```ts
+type AgentModelRefusal =
+  | "invalid_model_choice"
+  | "unsupported_key_source"
+  | "key_source_mismatch"
+  | "model_unavailable"
+  | "key_not_connected";
+```
+
+Stable reason for rejecting a model or credential source before a run.
+
 ## Variables
 
 ### maxAgentMcpServers