@fungi.computer/oyster 0.6.0 → 0.8.0

package/docs/api/keys.md

@@ -74,8 +74,7 @@ type LiveOysterKey = Readonly<{
 
 The minimal live facts `OysterHost`'s `keys.live` port returns: enough to gate
 one call, never the key's name or timestamps. `null` for an unknown, revoked,
-expired or suspended key -- the same closed set `keyAppAccess` and
-`keyAllowsComputerUse` already treat as no authority.
+expired or suspended key, which `authorization.ts` treats as no authority.
 
 ## Variables
 
@@ -122,99 +121,3 @@ A grant reaching every current and future installation for `capability`.
 #### Returns
 
 `Grant`\<[`OysterKeyCapability`](#oysterkeycapability)\>
-
----
-
-### keyAppAccess()
-
-```ts
-function keyAppAccess(
-  key,
-  installationId,
-): {
-  level: "read" | "write";
-  revision: string;
-  grantedBy: string;
-} | null;
-```
-
-One live key's access to one installation: `write` when its grants admit
-`apps.use` there, `read` when they admit `apps.read`, otherwise `null` --
-including for an installation added after the key was issued, unless the key
-holds "All Apps" (`targets: {kind: "all"}`). The same shape as an Agent's stored
-[AppToolPolicy](apps.md#apptoolpolicy); its caller adds `bindingName` (which
-varies by caller: the plain installation id for the gate, the uppercased binding
-name for MCP) to reach the full `AppToolAccess`.
-
-#### Parameters
-
-| Parameter        | Type                              |
-| ---------------- | --------------------------------- |
-| `key`            | [`LiveOysterKey`](#liveoysterkey) |
-| `installationId` | `string`                          |
-
-#### Returns
-
-\| \{ `level`: `"read"` \| `"write"`; `revision`: `string`; `grantedBy`:
-`string`; \} \| `null`
-
----
-
-### keyAgentAccess()
-
-```ts
-function keyAgentAccess(key, agentId): boolean;
-```
-
-Agent access is scoped to the granted Agent ids, never inferred from App grants.
-
-#### Parameters
-
-| Parameter | Type                              |
-| --------- | --------------------------------- |
-| `key`     | [`LiveOysterKey`](#liveoysterkey) |
-| `agentId` | `string`                          |
-
-#### Returns
-
-`boolean`
-
----
-
-### keyAllowsComputerUse()
-
-```ts
-function keyAllowsComputerUse(key): boolean;
-```
-
-Whether a live key's own grants turn its Computer access on. Off by default.
-
-#### Parameters
-
-| Parameter | Type                              |
-| --------- | --------------------------------- |
-| `key`     | [`LiveOysterKey`](#liveoysterkey) |
-
-#### Returns
-
-`boolean`
-
----
-
-### keyAllowsMachineEnroll()
-
-```ts
-function keyAllowsMachineEnroll(key): boolean;
-```
-
-Whether a live key's grants permit a one-use device enrollment.
-
-#### Parameters
-
-| Parameter | Type                              |
-| --------- | --------------------------------- |
-| `key`     | [`LiveOysterKey`](#liveoysterkey) |
-
-#### Returns
-
-`boolean`

package/docs/api/mcp.md

@@ -165,7 +165,7 @@ type OysterCallerAccess =
 The App-tool access one caller's catalog capture used, re-checked at call time
 against a fresh read. An Agent's policy is one blanket level for every
 installation (`host.appToolPolicy`); a key's is its own grants, resolved per
-installation (`keyAppAccess`) -- an installation the key has no grant for is
+installation (`appToolAccess`) -- an installation the key has no grant for is
 captured as absent, never merely refused, so it is never listed at all.
 
 ---
@@ -177,12 +177,11 @@ type ReleaseSurface = Readonly<{
   release: VerifiedRelease;
   api: NonNullable<VerifiedRelease["api"]>;
   declaredOperations: DeclaredOperations;
-  toolSchemas: ReturnType<typeof appToolSchemas>;
+  methods: NonNullable<VerifiedRelease["api"]>["methods"];
 }>;
 ```
 
-What one Release contributes to every MCP catalog: its verified build, its
-declared operations and its compiled tool schemas.
+Immutable Release data shared by captures; no validator graphs live here.
 
 ---
 
@@ -192,15 +191,9 @@ declared operations and its compiled tool schemas.
 type AppSurfaceCache = (release) => Promise<ReleaseSurface | null>;
 ```
 
-Per-host memo of each installed Release's catalog surface. A Release's artifacts
-are immutable and content-addressed, so verifying the build, deriving its
-operations and compiling its tool schemas happens once per Release ID and
-artifact digest, not on every catalog capture: an MCP call captures the catalog
-several times (refresh, session acquire, the pre-call authority check), and
-redoing this for every installed App on each one exhausted a Durable Object's
-CPU and memory. Only Release-derived facts are cached; installation authority,
-caller access and tool-family listings are still read fresh on every capture. A
-failed build is not cached.
+Per-host verified data, keyed by immutable Release ID and artifact digest.
+Authority, caller access and tool-family listings stay fresh per capture. Failed
+verification is not cached.
 
 #### Parameters
 
@@ -212,6 +205,16 @@ failed build is not cached.
 
 `Promise`\<[`ReleaseSurface`](#releasesurface) \| `null`\>
 
+## Variables
+
+### appApprovalInstructions
+
+```ts
+const appApprovalInstructions: string;
+```
+
+Shared host result guidance for Agent and MCP instructions, not per method.
+
 ## Functions
 
 ### computerControlSpecs()
@@ -258,8 +261,8 @@ One set of schemas and operations for MCP and direct broker invocation.
 | `create.replay`      | `"unsafe"`                                                                                                                                                                                                                                                                                                                                                                                                                      | -                                                                                                                                                                                                                              | -                                                                   |
 | `create.description` | `string`                                                                                                                                                                                                                                                                                                                                                                                                                        | `"Create a Computer with an optional friendly name. Request identity is generated automatically. If the outcome is uncertain, retry with its returned requestId and the original name input; do not start a second creation."` | -                                                                   |
 | `create.input`       | `ZodObject`\<\{ `name`: `ZodDefault`\<`ZodNullable`\<`ZodString`\>\>; `requestId`: `ZodDefault`\<`ZodNullable`\<`ZodString`\>\>; \}, `$strict`\>                                                                                                                                                                                                                                                                                | `fleetCreate`                                                                                                                                                                                                                  | -                                                                   |
-| `create.output`      | `ZodDiscriminatedUnion`\<\[`ZodObject`\<\{ `kind`: `ZodLiteral`\<`"created"`\>; `requestId`: `ZodString`; `computer`: `ZodObject`\<\{ `computerId`: `ZodString`; `name`: `ZodString`; \}, `$strict`\>; \}, `$strict`\>, `ZodObject`\<\{ `kind`: `ZodEnum`\<\{ `denied`: `"denied"`; `uncertain`: `"uncertain"`; `conflict`: `"conflict"`; `invalid`: `"invalid"`; \}\>; `requestId`: `ZodString`; \}, `$strict`\>\], `"kind"`\> | `fleetCreation`                                                                                                                                                                                                                | -                                                                   |
-| `create.execute()`   | (`input`, `context`) => `Promise`\< \| \{ `kind`: `"created"`; `requestId`: `string`; `computer`: \{ `computerId`: `string`; `name`: `string`; \}; \} \| \{ `kind`: `"denied"` \| `"uncertain"` \| `"conflict"` \| `"invalid"`; `requestId`: `string`; \}\>                                                                                                                                                                     | -                                                                                                                                                                                                                              | Mint one identity or preserve the requestId for an uncertain retry. |
+| `create.output`      | `ZodDiscriminatedUnion`\<\[`ZodObject`\<\{ `kind`: `ZodLiteral`\<`"created"`\>; `requestId`: `ZodString`; `computer`: `ZodObject`\<\{ `computerId`: `ZodString`; `name`: `ZodString`; \}, `$strict`\>; \}, `$strict`\>, `ZodObject`\<\{ `kind`: `ZodEnum`\<\{ `invalid`: `"invalid"`; `conflict`: `"conflict"`; `denied`: `"denied"`; `uncertain`: `"uncertain"`; \}\>; `requestId`: `ZodString`; \}, `$strict`\>\], `"kind"`\> | `fleetCreation`                                                                                                                                                                                                                | -                                                                   |
+| `create.execute()`   | (`input`, `context`) => `Promise`\< \| \{ `kind`: `"created"`; `requestId`: `string`; `computer`: \{ `computerId`: `string`; `name`: `string`; \}; \} \| \{ `kind`: `"invalid"` \| `"conflict"` \| `"denied"` \| `"uncertain"`; `requestId`: `string`; \}\>                                                                                                                                                                     | -                                                                                                                                                                                                                              | Mint one identity or preserve the requestId for an uncertain retry. |
 
 ---
 
@@ -313,8 +316,8 @@ function oysterAppSnapshot(
   principal,
   installations,
   access,
-  sessionId?,
-  familyListingCache?,
+  sessionId,
+  mode,
 ): Promise<
   Readonly<{
     modules: Readonly<Record<string, ModuleRegistration>>;
@@ -331,15 +334,15 @@ Derive the current principal's admitted App modules and grants.
 
 #### Parameters
 
-| Parameter             | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   | Description                                                                                                                                                                                                                                                                |
-| --------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `host`                | `Pick`\<[`OysterHost`](host.md#oysterhost), \| `"installations"` \| `"instances"` \| `"artifacts"` \| `"guestLimits"` \| `"backgroundOriginKey"` \| `"computerId"` \| `"capabilities"` \| `"appToolPolicy"` \| `"keys"`\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | -                                                                                                                                                                                                                                                                          |
-| `surfaces`            | [`AppSurfaceCache`](#appsurfacecache)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  | -                                                                                                                                                                                                                                                                          |
-| `principal`           | [`OysterPrincipal`](host.md#oysterprincipal)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | -                                                                                                                                                                                                                                                                          |
-| `installations`       | readonly `Readonly`\<\{ `installationId`: `string`; `instanceId`: [`InstanceId`](index.md#instanceid) \| `null`; `appId`: `AppId`; `release`: \{ `releaseId`: `ReleaseId`; `appId`: `AppId`; `artifact`: \{ `artifactRef`: `ArtifactRef`; `artifactDigest`: `Sha256Digest`; `provenance`: \{ `sourceRevision`: `SourceRevision`; `sourceTreeDigest`: `Sha256Digest`; `buildRecipeDigest`: `Sha256Digest`; \}; \}; \}; `releasePin`: `"pinned"` \| `"floating"`; `authority`: \{ `authorityVersion`: `number`; `declaredOperationsDigest`: `Sha256Digest`; `approvedGrants`: readonly `Readonly`\<\{ `capability`: \| `"computer.list"` \| `"computer.readFile"` \| `"computer.writeFile"` \| `"computer.execute"` \| `"approvals"` \| `"agent.list"` \| `"agent.manage"` \| `"agent.rename"` \| `"agent.avatar"` \| `"agent.toolPolicy"` \| `"agent.read"` \| `"agent.send"` \| `"llm.generation"` \| `"media.generation"` \| `"games:servers"` \| `"git.repository"` \| `"apps.open"` \| `"apps.call"` \| `"app.storage"` \| `"app.events.emit"` \| `"team.workbenchHost"` \| `"marketplace.browse"` \| `"marketplace.purchase"` \| `"workflow.run"` \| `"workflow.publish"` \| `"workflow.arm"` \| `"world"` \| `"channels.read"` \| `"channels.personal.manage"`; `capabilityApproved`: `true`; `operations`: readonly `string`[]; `resources`: \| `"tenant-scope"` \| readonly `Readonly`\<\{ `kind`: ...; `id`: ...; \}\>[]; \}\>[]; `approval`: \| `Readonly`\<\{ `by`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `at`: `number`; `authorityVersion`: `number`; \}\> \| `null`; \}; `status`: `"enabled"` \| `"disabled"` \| `"deleted"`; `visibility`: `"private"` \| `"public"`; `approvedAnonymousMethods`: readonly `Readonly`\<\{ `name`: `string`; `digest`: `Sha256Digest`; \}\>[]; `anonymousApproval`: \| `Readonly`\<\{ `by`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `at`: `number`; `authorityVersion`: `number`; \}\> \| `null`; \}\>[] | -                                                                                                                                                                                                                                                                          |
-| `access`              | [`OysterCallerAccess`](#oystercalleraccess)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            | -                                                                                                                                                                                                                                                                          |
-| `sessionId?`          | `string`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               | -                                                                                                                                                                                                                                                                          |
-| `familyListingCache?` | `Map`\<`string`, `unknown`\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | Shares one tool-family listing per Instance across the two `appModules` passes one `oysterAppMethods` call can make (the eager grants/version pass, and a session-scoped re-derivation); never shared across separate calls, so it never serves another request's listing. |
+| Parameter       | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
+| --------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `host`          | `Pick`\<[`OysterHost`](host.md#oysterhost), \| `"installations"` \| `"instances"` \| `"artifacts"` \| `"guestLimits"` \| `"backgroundOriginKey"` \| `"computerId"` \| `"capabilities"` \| `"appToolPolicy"` \| `"keys"` \| `"approvals"`\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
+| `surfaces`      | [`AppSurfaceCache`](#appsurfacecache)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
+| `principal`     | [`TenantPrincipal`](tenant.md#tenantprincipal)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
+| `installations` | readonly `Readonly`\<\{ `installationId`: `string`; `instanceId`: [`InstanceId`](index.md#instanceid) \| `null`; `appId`: `AppId`; `release`: \{ `releaseId`: `ReleaseId`; `appId`: `AppId`; `artifact`: \{ `artifactRef`: `ArtifactRef`; `artifactDigest`: `Sha256Digest`; `provenance`: \{ `sourceRevision`: `SourceRevision`; `sourceTreeDigest`: `Sha256Digest`; `buildRecipeDigest`: `Sha256Digest`; \}; \}; \}; `releasePin`: `"pinned"` \| `"floating"`; `authority`: \{ `authorityVersion`: `number`; `declaredOperationsDigest`: `Sha256Digest`; `approvedGrants`: readonly `Readonly`\<\{ `capability`: \| `"computer.list"` \| `"computer.readFile"` \| `"computer.writeFile"` \| `"computer.execute"` \| `"approvals"` \| `"agent.list"` \| `"agent.manage"` \| `"agent.rename"` \| `"agent.avatar"` \| `"agent.toolPolicy"` \| `"agent.read"` \| `"agent.send"` \| `"llm.generation"` \| `"media.generation"` \| `"games:servers"` \| `"git.repository"` \| `"apps.open"` \| `"apps.call"` \| `"app.storage"` \| `"app.events.emit"` \| `"team.workbenchHost"` \| `"marketplace.browse"` \| `"marketplace.purchase"` \| `"workflow.run"` \| `"workflow.publish"` \| `"workflow.arm"` \| `"world"` \| `"channels.read"` \| `"channels.personal.manage"`; `capabilityApproved`: `true`; `operations`: readonly `string`[]; `resources`: \| `"tenant-scope"` \| readonly `Readonly`\<\{ `kind`: ...; `id`: ...; \}\>[]; \}\>[]; `approval`: \| `Readonly`\<\{ `by`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `at`: `number`; `authorityVersion`: `number`; \}\> \| `null`; \}; `status`: `"enabled"` \| `"disabled"` \| `"deleted"`; \}\>[] |
+| `access`        | [`OysterCallerAccess`](#oystercalleraccess)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
+| `sessionId`     | `string` \| `null`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
+| `mode`          | `"approval"` \| `"direct"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
 
 #### Returns
 
@@ -377,22 +380,22 @@ function oysterAppMethods(
 
 Capture installed App methods for MCP or agents as one principal-scoped source.
 Enabled installations become `env.<APP>` modules using the Instance call path; a
-dotted method such as `repos.list` is `env.<APP>.repos.list()`. Visitors see
-only public read methods; owners see every discoverable method. A key sees only
-the installations its own grants admit, each at the level (`read`/`write`) those
-grants give it; Mycelium itself refuses a write call up front when the module's
-own grant is `read` (`mycelium/src/access.ts`). Call again to capture changes to
-Releases, installation authority or the caller's own grants.
+dotted method such as `repos.list` is `env.<APP>.repos.list()`. Owners see every
+discoverable method. A key sees only the installations its own grants admit,
+each at the level (`read`/`write`) those grants give it; Mycelium itself refuses
+a write call up front when the module's own grant is `read`
+(`mycelium/src/access.ts`). Call again to capture changes to Releases,
+installation authority or the caller's own grants.
 
 #### Parameters
 
-| Parameter                 | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
-| ------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `host`                    | `Pick`\<[`OysterHost`](host.md#oysterhost), \| `"installations"` \| `"instances"` \| `"artifacts"` \| `"guestLimits"` \| `"backgroundOriginKey"` \| `"computerId"` \| `"capabilities"` \| `"appToolPolicy"` \| `"keys"` \| `"approvals"`\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
-| `principal`               | [`OysterPrincipal`](host.md#oysterprincipal)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
-| `access`                  | [`OysterCallerAccess`](#oystercalleraccess)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
-| `surfaces`                | [`AppSurfaceCache`](#appsurfacecache)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
-| `preloadedInstallations?` | readonly `Readonly`\<\{ `installationId`: `string`; `instanceId`: [`InstanceId`](index.md#instanceid) \| `null`; `appId`: `AppId`; `release`: \{ `releaseId`: `ReleaseId`; `appId`: `AppId`; `artifact`: \{ `artifactRef`: `ArtifactRef`; `artifactDigest`: `Sha256Digest`; `provenance`: \{ `sourceRevision`: `SourceRevision`; `sourceTreeDigest`: `Sha256Digest`; `buildRecipeDigest`: `Sha256Digest`; \}; \}; \}; `releasePin`: `"pinned"` \| `"floating"`; `authority`: \{ `authorityVersion`: `number`; `declaredOperationsDigest`: `Sha256Digest`; `approvedGrants`: readonly `Readonly`\<\{ `capability`: \| `"computer.list"` \| `"computer.readFile"` \| `"computer.writeFile"` \| `"computer.execute"` \| `"approvals"` \| `"agent.list"` \| `"agent.manage"` \| `"agent.rename"` \| `"agent.avatar"` \| `"agent.toolPolicy"` \| `"agent.read"` \| `"agent.send"` \| `"llm.generation"` \| `"media.generation"` \| `"games:servers"` \| `"git.repository"` \| `"apps.open"` \| `"apps.call"` \| `"app.storage"` \| `"app.events.emit"` \| `"team.workbenchHost"` \| `"marketplace.browse"` \| `"marketplace.purchase"` \| `"workflow.run"` \| `"workflow.publish"` \| `"workflow.arm"` \| `"world"` \| `"channels.read"` \| `"channels.personal.manage"`; `capabilityApproved`: `true`; `operations`: readonly `string`[]; `resources`: `"tenant-scope"` \| readonly `Readonly`\<...\>[]; \}\>[]; `approval`: \| `Readonly`\<\{ `by`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `at`: `number`; `authorityVersion`: `number`; \}\> \| `null`; \}; `status`: `"enabled"` \| `"disabled"` \| `"deleted"`; `visibility`: `"private"` \| `"public"`; `approvedAnonymousMethods`: readonly `Readonly`\<\{ `name`: `string`; `digest`: `Sha256Digest`; \}\>[]; `anonymousApproval`: \| `Readonly`\<\{ `by`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `at`: `number`; `authorityVersion`: `number`; \}\> \| `null`; \}\>[] |
+| Parameter                 | Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
+| ------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `host`                    | `Pick`\<[`OysterHost`](host.md#oysterhost), \| `"installations"` \| `"instances"` \| `"artifacts"` \| `"guestLimits"` \| `"backgroundOriginKey"` \| `"computerId"` \| `"capabilities"` \| `"appToolPolicy"` \| `"keys"` \| `"approvals"`\>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
+| `principal`               | [`TenantPrincipal`](tenant.md#tenantprincipal)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
+| `access`                  | [`OysterCallerAccess`](#oystercalleraccess)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
+| `surfaces`                | [`AppSurfaceCache`](#appsurfacecache)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
+| `preloadedInstallations?` | readonly `Readonly`\<\{ `installationId`: `string`; `instanceId`: [`InstanceId`](index.md#instanceid) \| `null`; `appId`: `AppId`; `release`: \{ `releaseId`: `ReleaseId`; `appId`: `AppId`; `artifact`: \{ `artifactRef`: `ArtifactRef`; `artifactDigest`: `Sha256Digest`; `provenance`: \{ `sourceRevision`: `SourceRevision`; `sourceTreeDigest`: `Sha256Digest`; `buildRecipeDigest`: `Sha256Digest`; \}; \}; \}; `releasePin`: `"pinned"` \| `"floating"`; `authority`: \{ `authorityVersion`: `number`; `declaredOperationsDigest`: `Sha256Digest`; `approvedGrants`: readonly `Readonly`\<\{ `capability`: \| `"computer.list"` \| `"computer.readFile"` \| `"computer.writeFile"` \| `"computer.execute"` \| `"approvals"` \| `"agent.list"` \| `"agent.manage"` \| `"agent.rename"` \| `"agent.avatar"` \| `"agent.toolPolicy"` \| `"agent.read"` \| `"agent.send"` \| `"llm.generation"` \| `"media.generation"` \| `"games:servers"` \| `"git.repository"` \| `"apps.open"` \| `"apps.call"` \| `"app.storage"` \| `"app.events.emit"` \| `"team.workbenchHost"` \| `"marketplace.browse"` \| `"marketplace.purchase"` \| `"workflow.run"` \| `"workflow.publish"` \| `"workflow.arm"` \| `"world"` \| `"channels.read"` \| `"channels.personal.manage"`; `capabilityApproved`: `true`; `operations`: readonly `string`[]; `resources`: `"tenant-scope"` \| readonly `Readonly`\<...\>[]; \}\>[]; `approval`: \| `Readonly`\<\{ `by`: \| \{ `kind`: `"member"`; `memberId`: `string`; \} \| \{ `kind`: `"agent"`; `agentId`: `string`; \} \| \{ `kind`: `"team-key"`; `keyId`: `string`; \}; `at`: `number`; `authorityVersion`: `number`; \}\> \| `null`; \}; `status`: `"enabled"` \| `"disabled"` \| `"deleted"`; \}\>[] |
 
 #### Returns
 
@@ -426,7 +429,7 @@ caller has no access. Grants name the captured module.
 | Parameter   | Type                                                                         |
 | ----------- | ---------------------------------------------------------------------------- |
 | `host`      | `Pick`\<[`OysterHost`](host.md#oysterhost), `"computerId"` \| `"computer"`\> |
-| `principal` | [`OysterPrincipal`](host.md#oysterprincipal)                                 |
+| `principal` | [`TenantPrincipal`](tenant.md#tenantprincipal)                               |
 
 #### Returns
 

package/docs/api/modules.md

@@ -10,10 +10,12 @@
 
 | Module                                              | Description |
 | --------------------------------------------------- | ----------- |
+| [agent-schedules](agent-schedules.md)               | -           |
 | [agents](agents.md)                                 | -           |
 | [app-storage](app-storage.md)                       | -           |
 | [apps](apps.md)                                     | -           |
 | [auth](auth.md)                                     | -           |
+| [authorization](authorization.md)                   | -           |
 | [browser/boot](browser/boot.md)                     | -           |
 | [browser](browser.md)                               | -           |
 | [build-contract](build-contract.md)                 | -           |

package/docs/api/page/mount.md

@@ -8,33 +8,33 @@
 
 # page/mount
 
-## Classes
+## Interfaces
 
 ### OysterAgentBrowserHost
 
-One page-wide selected Session, using only its reporting App's admitted view.
+One admitted page's live windows and selected Agent Session, never a global
+catalog.
 
-#### Constructors
+#### Methods
 
-##### Constructor
+##### mount()
 
 ```ts
-new OysterAgentBrowserHost(signal): OysterAgentBrowserHost;
+mount(frame, commands): () => void;
 ```
 
-End the selected connection with the page's own lifetime.
+Borrow a Release-validated window view only for this exact frame lifetime.
 
 ###### Parameters
 
-| Parameter | Type          |
-| --------- | ------------- |
-| `signal`  | `AbortSignal` |
+| Parameter  | Type                                                    |
+| ---------- | ------------------------------------------------------- |
+| `frame`    | `HTMLIFrameElement`                                     |
+| `commands` | `Pick`\<`WhistleRuntime`, `"snapshot"` \| `"execute"`\> |
 
 ###### Returns
 
-[`OysterAgentBrowserHost`](#oysteragentbrowserhost)
-
-#### Methods
+() => `void`
 
 ##### release()
 
@@ -42,7 +42,7 @@ End the selected connection with the page's own lifetime.
 release(frame): void;
 ```
 
-A departing or deselecting mount cannot close a different active mount.
+A departing or deselecting window cannot close a different selection.
 
 ###### Parameters
 
@@ -60,7 +60,7 @@ A departing or deselecting mount cannot close a different active mount.
 dispose(): void;
 ```
 
-Release the page's current selection; later reports cannot reconnect it.
+Release this page's window registrations and selected Agent connection.
 
 ###### Returns
 
@@ -72,13 +72,11 @@ Release the page's current selection; later reports cannot reconnect it.
 report(
    frame,
    selection,
-   capabilities,
-   whistle
+   capabilities
 ): Promise<void>;
 ```
 
-Bind the reporting mount's current command view to its explicitly selected
-Session.
+Admit the selected Agent through the reporting App's existing write door.
 
 ###### Parameters
 
@@ -87,7 +85,6 @@ Session.
 | `frame`        | `HTMLIFrameElement`                                                          |
 | `selection`    | \| `Readonly`\<\{ `agentId`: `string`; `sessionId`: `string`; \}\> \| `null` |
 | `capabilities` | `CapabilityDirectory`                                                        |
-| `whistle`      | `Pick`\<`WhistleRuntime`, `"snapshot"` \| `"execute"`\>                      |
 
 ###### Returns