@fungi.computer/oyster 0.5.0 → 0.7.0

package/dist/host.d.ts

@@ -13,12 +13,14 @@ import { type AppGitPushFact, type GitPushQuestion, type GitPushVerdict, type Gi
 import { type GuestLimits } from "./guest-policy.js";
 import { type InvocationFacts } from "./invocation.js";
 export type { GuestLimits } from "./guest-policy.js";
-import { Hono } from "hono";
+import { type TimingVariables } from "hono/timing";
 import * as Schema from "effect/Schema";
 import { type BackgroundSyncRefusal } from "@fungi.computer/puffball/background-replay";
 import { type Installation, type InstallationReader } from "./apps/installation.js";
+import { type ResourceOption } from "./apps/permissions.js";
 import type { AppToolPolicy } from "./apps/tools.js";
-import { type LiveOysterKey } from "./keys.js";
+import type { LiveOysterKey } from "./keys.js";
+import { type ServedTable, type RouteDeclaration, type Routes } from "./authorization.js";
 import { type AppMethodReply } from "@fungi.computer/agar/backend";
 import type { AppCapabilityId, HostActor } from "@fungi.computer/puffball/app";
 import { type CapabilityDescriptor } from "./capability-descriptor.js";
@@ -26,32 +28,12 @@ export { capabilityDescriptorSchema, capabilityMethodKindSchema, capabilityMetho
 import type { Release } from "@fungi.computer/puffball";
 import type { UiBootCheckOutcome } from "./boot-gate.js";
 import { type Instance, type InstanceId, type OwnerState, type AppInstanceErrorCode } from "./index.js";
-import { type ArtifactStore } from "./release.js";
+import { type ArtifactStore, type VerifiedObjectCache } from "./release.js";
 import { type GitDoorTarget } from "./git.js";
 import type { AdmittedGit } from "./git-admission.js";
 import { type PageAssetLoader } from "./page-assets.js";
 import { type AppApi } from "@fungi.computer/puffball";
-export { ReleaseError, defaultAssetPolicy, parseRelease, resolveBackend, sha256, verifyRelease, type ArtifactStore, type VerifiedRelease, } from "./release.js";
-/**
- * The anonymous reader of a public installation. The host admits it only when
- * authentication refuses; it reaches that App's page and its `read` methods.
- */
-export type OysterVisitor = Readonly<{
-    actor: Readonly<{
-        kind: "visitor";
-    }>;
-}>;
-/** Who an admitted request acts for: an authenticated tenant principal or the visitor. */
-export type OysterPrincipal = TenantPrincipal | OysterVisitor;
-/** Narrow an admitted principal to the anonymous public reader. */
-export declare function oysterPrincipalIsVisitor(principal: OysterPrincipal): principal is OysterVisitor;
-/** True only for a member admitted with the owner role. */
-export declare function oysterPrincipalIsOwner(principal: OysterPrincipal): principal is Readonly<{
-    actor: Extract<HostActor, {
-        kind: "member";
-    }>;
-    role: "owner";
-}>;
+export { ReleaseError, defaultAssetPolicy, parseRelease, resolveBackend, sha256, verifyRelease, type ArtifactStore, type VerifiedObjectCache, type VerifiedRelease, } from "./release.js";
 /** Stable actor identity for host storage and backend attribution. */
 export declare function oysterPrincipalId(principal: TenantPrincipal): string;
 /** The outcome of authenticating one request. */
@@ -85,6 +67,8 @@ export type InstallationStore = InstallationReader & Readonly<{
     operations?: InstallationOperations;
     /** Opaque identity of this store incarnation; replacing the store mints another. */
     generation: () => Promise<string>;
+    /** Registry-backed stores retain their reset audit; other hosts have none. */
+    resetAt?: () => Promise<number | null>;
     /**
      * Atomically commit one reducer-produced record only over the version it
      * was computed from (0: no record). Every writer reads, may await
@@ -169,17 +153,13 @@ export type CapabilityEnv = {
 export type OysterCapability = Readonly<CapabilityDescriptor & {
     /** The permission declared by an App Release to use this contract. */
     permission: AppCapabilityId;
-    /** Routes relative to the descriptor's base path. */
-    routes: Hono<CapabilityEnv>;
+    /** Declared routes relative to the descriptor's base path; each names
+     * its own requirement beyond the App holding this capability. */
+    routes: Routes<CapabilityEnv>;
 }>;
-/** What the host stamps once per request; inner routes read it with `c.get`. */
-export type OysterVariables = {
-    principal: OysterPrincipal;
-    installation?: Installation;
-};
-/** Owner routes run after the host's owner guard and read `c.get("principal")`. */
+/** The host table's Hono env; every route receives its principal from its declared requirement. */
 export type OysterEnv = {
-    Variables: OysterVariables;
+    Variables: TimingVariables;
 };
 /** Everything a host supplies to run Oyster. */
 export type OysterHost = Readonly<{
@@ -192,15 +172,19 @@ export type OysterHost = Readonly<{
      * Host-bound Workflow control; absence exposes no Workflow authority.
      * @inlineType WorkflowControl
      */
-    workflows?: (principal: OysterPrincipal) => Promise<WorkflowControl | null>;
+    workflows?: (principal: TenantPrincipal) => Promise<WorkflowControl | null>;
     /** Owner-admitted durable Computer inventory, absent on hosts without a fleet. */
-    computerControl?: (principal: OysterPrincipal) => ComputerControlPort | null;
+    computerControl?: (principal: TenantPrincipal) => ComputerControlPort | null;
+    /** Owner-direct picker facts from the host's existing resource directories. */
+    permissionResources?: (principal: TenantPrincipal) => Promise<readonly ResourceOption[]>;
     auth: OysterAuth;
     /** Host-held sealing key for member writes; never exposed to the guest.
      * Absence refuses eligible named member writes, even when the App has no sync continuation.
      */
     backgroundOriginKey?: () => Promise<CryptoKey>;
     artifacts: ArtifactStore;
+    /** Digest-keyed copies of verified UI objects; absent, every read is verified from `artifacts`. */
+    uiCache?: VerifiedObjectCache;
     installations: InstallationStore;
     instances: InstanceDirectory;
     /** Report-only host UI check; backend construction remains Instance-owned and blocking. */
@@ -212,7 +196,7 @@ export type OysterHost = Readonly<{
      * `computer.use` grant). The Computer owner accepts each call against the
      * authority the host issued.
      */
-    computer?: (principal: OysterPrincipal) => KnapsackComputer | null | Promise<KnapsackComputer | null>;
+    computer?: (principal: TenantPrincipal) => KnapsackComputer | null | Promise<KnapsackComputer | null>;
     /** Host-attested Agent tool policy; absence grants no App tool access. A
      * key's App access is its own grants (Ear Tag), read through `keys.live`
      * and `keyAppAccess`, never this port. */
@@ -230,9 +214,9 @@ export type OysterHost = Readonly<{
     mcp?: OysterMcp;
     /** The git door for Apps that use GIT; mounted at `/git/*`. */
     git?: OysterGitHost;
-    /** Owner-only `/api/*` routes the host adds (keys, webhooks); they read the
-     * admitted owner with `c.get("principal")` and never authenticate again. */
-    ownerRoutes?: Hono<OysterEnv>;
+    /** Further routes the host adds (keys, webhooks, builds); each declares
+     * its own requirement and receives the admitted principal from it. */
+    ownerRoutes?: Routes<OysterEnv>;
     /** Adapters granted only when the Release declares them and admission passes. */
     capabilities?: readonly OysterCapability[];
     /**
@@ -263,11 +247,23 @@ export type OysterHost = Readonly<{
     title?: string;
 }>;
 /** Completed selection, without re-deriving or executing outside Watchdog. */
-export declare function installOrSelect(host: OysterHost, installationId: string, release: Release, principal: OysterPrincipal, intent: "install-or-select" | "install-or-remint" | "create-only", origin: "owner-direct" | "workflow" | "app", requestId?: string, signal?: AbortSignal): Promise<Response>;
+export declare function installOrSelect(host: OysterHost, installationId: string, release: Release, principal: TenantPrincipal, intent: "install-or-select" | "install-or-remint" | "create-only", origin: "owner-direct" | "workflow" | "app", requestId?: string, signal?: AbortSignal): Promise<Response>;
+/** One host's declared routes and the one way to serve them. */
+export type OysterRouteTable = Readonly<{
+    /** Every route this host serves, each with its declared requirement. */
+    declarations: () => readonly RouteDeclaration[];
+    /** Serve the table; only declared routes answer. */
+    serve: () => ServedTable<OysterEnv>;
+}>;
 /**
- * Create the Oyster App server: a Hono app that installs App Releases, serves
+ * Create the Oyster App server: a served route table that installs App Releases, serves
  * their UI, forwards their backend requests and methods to their Instances,
  * and mounts the host's MCP endpoint. The host's adapters decide where state
  * lives and who may sign in.
  */
-export declare function createOyster(host: OysterHost): Hono<OysterEnv>;
+export declare function createOyster(host: OysterHost): ServedTable<OysterEnv>;
+/**
+ * The Oyster host's declared route table: every route names its requirement
+ * (`authorization.ts`), so an undeclared route is never served.
+ */
+export declare function oysterRouteTable(host: OysterHost): OysterRouteTable;