@fungi.computer/puffball 0.0.0-stage → 0.0.1

package/dist/app-vocabulary.d.ts

@@ -0,0 +1,189 @@
+import type { AppDeclaredGill } from "@fungi.computer/gills";
+/**
+ * Roles a user may assign to an App: the shell routes "open my inbox", file
+ * navigation, media and Session conversations to the App the Team chose.
+ * `dashboard` marks an App that can open as a Team's dashboard; the Team's
+ * shell selection, not a role choice, picks among them.
+ * Extend this list here; the Hub role projection then requires the new role.
+ * A role's intent and payload wire format lives in `@fungi.computer/agar/roles`.
+ */
+export declare const appRoles: readonly ["dashboard", "inbox", "files", "media", "sessions", "terminal"];
+/** One assignable App role. */
+export type AppRole = (typeof appRoles)[number];
+/** The directory facts role resolution needs from one listed App. */
+export type RoleCandidate = Readonly<{
+    surfaceId: string;
+    availability: "available" | "unavailable";
+    roles: readonly AppRole[];
+}>;
+/** One role's effective App and whether the Team chose it. */
+export type EffectiveAppRole = Readonly<{
+    surfaceId: string | null;
+    chosen: boolean;
+}>;
+/**
+ * Project committed role choices onto the Apps a directory lists now. A
+ * choice is a routing preference, never a grant. When no choice exists, or
+ * the chosen App no longer declares the role or is unavailable, the
+ * effective holder is the first available listed App declaring that role
+ * (see ADR "no-privileged-apps-and-app-roles").
+ */
+export declare function resolveAppRoles(choices: ReadonlyMap<AppRole, string>, candidates: readonly RoleCandidate[]): {
+    dashboard: Readonly<{
+        surfaceId: string | null;
+        chosen: boolean;
+    }>;
+    inbox: Readonly<{
+        surfaceId: string | null;
+        chosen: boolean;
+    }>;
+    files: Readonly<{
+        surfaceId: string | null;
+        chosen: boolean;
+    }>;
+    media: Readonly<{
+        surfaceId: string | null;
+        chosen: boolean;
+    }>;
+    sessions: Readonly<{
+        surfaceId: string | null;
+        chosen: boolean;
+    }>;
+    terminal: Readonly<{
+        surfaceId: string | null;
+        chosen: boolean;
+    }>;
+};
+/**
+ * Host capabilities an App may request. A request is never authority; the
+ * Team's installation grants decide. Extend this list here.
+ */
+export declare const appCapabilityIds: readonly ["agent.list", "agent.manage", "agent.rename", "agent.toolPolicy", "agent.read", "agent.send", "computer.list", "computer.readFile", "computer.writeFile", "computer.execute", "llm.generation", "media.generation", "games:servers", "git.repository", "apps.open", "apps.call", "app.storage", "app.events.emit", "team.workbenchHost", "marketplace.browse", "marketplace.purchase", "workflow.run", "workflow.publish", "workflow.arm", "world", "channels.read", "channels.personal.manage"];
+/** One requestable host capability id. */
+export type AppCapabilityId = (typeof appCapabilityIds)[number];
+/** Backend requests are narrower than the App capabilities a Team approves. */
+export type { AppBackendBinding } from "./app-backend-binding-vocabulary.js";
+import type { AppBackendBinding } from "./app-backend-binding-vocabulary.js";
+/** Build-generated method and event metadata. This data-only projection grants no authority. */
+export type AppApi = Readonly<{
+    methods: Readonly<Record<string, Readonly<{
+        description: string;
+        input: object;
+        output: object;
+        effect: "read" | "write" | "external";
+        requires: readonly AppCapabilityId[];
+        /** This method may return Agar's shared Pending result while working. */
+        pending?: true | undefined;
+        /** Omit from Workflow and tool discovery, without changing direct-call authority. */
+        hidden?: true | undefined;
+        /** Request anonymous read admission; declaration alone grants no authority. */
+        anonymous?: true | undefined;
+    }>>>;
+    /** A signed dynamic tool namespace; its methods remain subject to ordinary admission. */
+    toolFamily?: Readonly<{
+        name: string;
+        list: string;
+        call: string;
+    }>;
+    /** Declared event payload schemas; hosts validate emits against the selected Release. */
+    events?: Readonly<Record<string, Readonly<{
+        description: string;
+        payload: object;
+    }>>>;
+}>;
+/** Navigation requests an App can handle for the shell. */
+export declare const appHandlers: readonly ["file.open"];
+/** One shell navigation request an App can handle. */
+export type AppHandler = (typeof appHandlers)[number];
+/**
+ * One command an App declares so the backend can advertise it before the App
+ * is open: the identity, labels and projections of a Whistle definition.
+ * Availability, typed action schemas and slash argument grammars are runtime
+ * facts the mounted App registers, so they are not part of the declaration.
+ */
+export type AppDeclaredCommand = Readonly<{
+    id: string;
+    title: string;
+    category: string;
+    description?: string | undefined;
+    /** Optional Sigil to use in command rows. */
+    sigil?: string | undefined;
+    projections?: Readonly<{
+        bindings?: (Readonly<{
+            order?: number | undefined;
+        }> & Readonly<{
+            values: readonly string[];
+        }>) | undefined;
+        agent?: (Readonly<{
+            order?: number | undefined;
+        }> & Readonly<{
+            keybind?: string | undefined;
+        }>) | undefined;
+        help?: Readonly<{
+            order?: number | undefined;
+        }> | undefined;
+        menu?: Readonly<{
+            order?: number | undefined;
+        }> | undefined;
+        palette?: Readonly<{
+            order?: number | undefined;
+        }> | undefined;
+        slash?: (Readonly<{
+            order?: number | undefined;
+        }> & Readonly<{
+            aliases: readonly string[];
+        }>) | undefined;
+    }> | undefined;
+}>;
+/** A declared layer of the App's own JSON data; never a cross-Team scope. */
+export declare const appStorageScopes: readonly ["team", "member"];
+/** The shared Team default or the calling member's private override. */
+export type AppStorageScope = (typeof appStorageScopes)[number];
+/** One digest-covered key and the bounds its App agrees to use. */
+export type AppStorageKey = Readonly<{
+    key: string;
+    scopes: readonly AppStorageScope[];
+    maxBytes: number;
+}>;
+/**
+ * What an App asks of the host, covered by its Release digest. Every App,
+ * first-party or not, uses this same declaration; there is no other source.
+ */
+export type AppDeclaration = Readonly<{
+    /** Generated from the backend's typed method definitions during its build. */
+    api?: AppApi;
+    displayName?: string | undefined;
+    capabilities: readonly AppCapabilityId[];
+    /** Member-only calls to named Apps; a declaration never lends target grants. */
+    calls?: readonly Readonly<{
+        appId: string;
+        methods: readonly string[];
+    }>[] | undefined;
+    /**
+     * Instructions the App gives every Agent the Team has granted it. The Hub
+     * relays the text; it writes none of its own for any one App.
+     */
+    guidance?: string | undefined;
+    handlers: readonly AppHandler[];
+    /** Host-delivered lifecycle facts requested by this Release; never method names. */
+    receives?: readonly "git.push"[] | undefined;
+    icon?: string;
+    roles: readonly AppRole[];
+    /** Bounded, digest-covered keys for this installation’s own data. */
+    storage?: readonly AppStorageKey[] | undefined;
+    /** The App's command catalog; omitted when it declares none. */
+    commands?: readonly AppDeclaredCommand[] | undefined;
+    /** Compact data views are optional and remain bound to this Release digest. */
+    gills?: readonly AppDeclaredGill[] | undefined;
+    backend?: Readonly<{
+        bindings: readonly AppBackendBinding[];
+        /** Ordinary write continuation, freshly admitted as the retained member. */
+        sync?: Readonly<{
+            method: string;
+        }>;
+    }> | undefined;
+}>;
+/** The declaration of an App that asks for nothing. */
+export declare const emptyAppDeclaration: AppDeclaration;
+/** An empty declaration is omitted from the manifest to keep digests stable. */
+export declare const isEmptyAppDeclaration: (declaration: AppDeclaration) => boolean;

package/dist/app-vocabulary.js

@@ -0,0 +1,103 @@
+/**
+ * Roles a user may assign to an App: the shell routes "open my inbox", file
+ * navigation, media and Session conversations to the App the Team chose.
+ * `dashboard` marks an App that can open as a Team's dashboard; the Team's
+ * shell selection, not a role choice, picks among them.
+ * Extend this list here; the Hub role projection then requires the new role.
+ * A role's intent and payload wire format lives in `@fungi.computer/agar/roles`.
+ */
+export const appRoles = [
+    "dashboard",
+    "inbox",
+    "files",
+    "media",
+    "sessions",
+    "terminal",
+];
+/**
+ * Project committed role choices onto the Apps a directory lists now. A
+ * choice is a routing preference, never a grant. When no choice exists, or
+ * the chosen App no longer declares the role or is unavailable, the
+ * effective holder is the first available listed App declaring that role
+ * (see ADR "no-privileged-apps-and-app-roles").
+ */
+export function resolveAppRoles(choices, candidates) {
+    const fills = (candidate, role) => candidate.availability === "available" && candidate.roles.includes(role);
+    const resolve = (role) => {
+        const chosen = choices.get(role);
+        const selected = chosen === undefined
+            ? undefined
+            : candidates.find((candidate) => candidate.surfaceId === chosen && fills(candidate, role));
+        const effective = selected ?? candidates.find((candidate) => fills(candidate, role));
+        return {
+            surfaceId: effective?.surfaceId ?? null,
+            chosen: selected !== undefined,
+        };
+    };
+    // A new role in the vocabulary fails here until the directory projects it.
+    return {
+        dashboard: resolve("dashboard"),
+        inbox: resolve("inbox"),
+        files: resolve("files"),
+        media: resolve("media"),
+        sessions: resolve("sessions"),
+        terminal: resolve("terminal"),
+    };
+}
+/**
+ * Host capabilities an App may request. A request is never authority; the
+ * Team's installation grants decide. Extend this list here.
+ */
+export const appCapabilityIds = [
+    "agent.list",
+    "agent.manage",
+    "agent.rename",
+    "agent.toolPolicy",
+    "agent.read",
+    "agent.send",
+    "computer.list",
+    "computer.readFile",
+    "computer.writeFile",
+    "computer.execute",
+    "llm.generation",
+    "media.generation",
+    "games:servers",
+    "git.repository",
+    "apps.open",
+    "apps.call",
+    "app.storage",
+    "app.events.emit",
+    "team.workbenchHost",
+    "marketplace.browse",
+    "marketplace.purchase",
+    "workflow.run",
+    "workflow.publish",
+    "workflow.arm",
+    "world",
+    "channels.read",
+    "channels.personal.manage",
+];
+/** Navigation requests an App can handle for the shell. */
+export const appHandlers = ["file.open"];
+/** A declared layer of the App's own JSON data; never a cross-Team scope. */
+export const appStorageScopes = ["team", "member"];
+/** The declaration of an App that asks for nothing. */
+export const emptyAppDeclaration = Object.freeze({
+    capabilities: [],
+    handlers: [],
+    roles: [],
+});
+/** An empty declaration is omitted from the manifest to keep digests stable. */
+export const isEmptyAppDeclaration = (declaration) => declaration.api === undefined &&
+    declaration.displayName === undefined &&
+    declaration.capabilities.length === 0 &&
+    (declaration.calls?.length ?? 0) === 0 &&
+    declaration.handlers.length === 0 &&
+    (declaration.receives?.length ?? 0) === 0 &&
+    declaration.roles.length === 0 &&
+    declaration.icon === undefined &&
+    declaration.guidance === undefined &&
+    (declaration.commands?.length ?? 0) === 0 &&
+    (declaration.gills?.length ?? 0) === 0 &&
+    (declaration.storage?.length ?? 0) === 0 &&
+    (declaration.backend?.bindings.length ?? 0) === 0;

package/dist/app.d.ts

@@ -0,0 +1,379 @@
+export { appMethodCallContextSchema, type AppMethodCallContext, type HostActor, type WorkflowAttestation, } from "./app-method-context.js";
+export { appBackendBindingKinds, appBackendBindingOperation, scopeOperationToMethod, appBackendBindingsSchema, appBackendShardBindingsSchema, } from "./app-backend-bindings.js";
+export type { AppBackendBindingMethod, AppBackendBindingName, AppBackendBindingOperation, } from "./app-backend-bindings.js";
+import * as Schema from "effect/Schema";
+export { appApiSchema, appApiReservedMethodNames, appApiMethodNameSchema, } from "./app-api.js";
+export type { AppApi } from "./app-vocabulary.js";
+import { type AppDeclaration } from "./app-vocabulary.js";
+/** One immutable Release root binds every surface published by the App. */
+export declare const appMediaType: "application/vnd.fungi.app+json";
+declare const appUiBuildSchema: Schema.Struct<{
+    readonly mediaType: Schema.Literals<readonly ["text/html; charset=utf-8", "application/vnd.fungi.app-assets+json"]>;
+    readonly artifactRef: Schema.refine<import("./internal/app-release-contract.js").ArtifactRef, Schema.String>;
+    readonly digest: Schema.refine<import("./internal/app-release-contract.js").Sha256Digest, Schema.String>;
+    readonly version: Schema.String;
+    readonly byteLength: Schema.Number;
+}>;
+declare const appBackendBuildSchema: Schema.Struct<{
+    readonly mediaType: Schema.Literal<"application/vnd.fungi.app-backend+json">;
+    readonly artifactRef: Schema.refine<import("./internal/app-release-contract.js").ArtifactRef, Schema.String>;
+    readonly digest: Schema.refine<import("./internal/app-release-contract.js").Sha256Digest, Schema.String>;
+    readonly version: Schema.String;
+    readonly byteLength: Schema.Number;
+}>;
+/**
+ * Closed child formats prevent recursive manifests and independent selection.
+ * An App may be visual, headless, or both, but never empty.
+ */
+export declare const appBuildSchema: Schema.Union<readonly [Schema.Struct<{
+    readonly declaration: Schema.optionalKey<Schema.Codec<Readonly<{
+        api?: import("./app-vocabulary.js").AppApi;
+        displayName?: string | undefined;
+        capabilities: readonly import("./app-vocabulary.js").AppCapabilityId[];
+        calls?: readonly Readonly<{
+            appId: string;
+            methods: readonly string[];
+        }>[] | undefined;
+        guidance?: string | undefined;
+        handlers: readonly import("./app-vocabulary.js").AppHandler[];
+        receives?: readonly "git.push"[] | undefined;
+        icon?: string;
+        roles: readonly import("./app-vocabulary.js").AppRole[];
+        storage?: readonly import("./app-vocabulary.js").AppStorageKey[] | undefined;
+        commands?: readonly import("./app-vocabulary.js").AppDeclaredCommand[] | undefined;
+        gills?: readonly import("@fungi.computer/gills").AppDeclaredGill[] | undefined;
+        backend?: Readonly<{
+            bindings: readonly import("./app-backend-binding-vocabulary.js").AppBackendBinding[];
+            sync?: Readonly<{
+                method: string;
+            }>;
+        }> | undefined;
+    }>, Readonly<{
+        api?: import("./app-vocabulary.js").AppApi;
+        displayName?: string | undefined;
+        capabilities: readonly import("./app-vocabulary.js").AppCapabilityId[];
+        calls?: readonly Readonly<{
+            appId: string;
+            methods: readonly string[];
+        }>[] | undefined;
+        guidance?: string | undefined;
+        handlers: readonly import("./app-vocabulary.js").AppHandler[];
+        receives?: readonly "git.push"[] | undefined;
+        icon?: string;
+        roles: readonly import("./app-vocabulary.js").AppRole[];
+        storage?: readonly import("./app-vocabulary.js").AppStorageKey[] | undefined;
+        commands?: readonly import("./app-vocabulary.js").AppDeclaredCommand[] | undefined;
+        gills?: readonly import("@fungi.computer/gills").AppDeclaredGill[] | undefined;
+        backend?: Readonly<{
+            bindings: readonly import("./app-backend-binding-vocabulary.js").AppBackendBinding[];
+            sync?: Readonly<{
+                method: string;
+            }>;
+        }> | undefined;
+    }>, never, never>>;
+    readonly format: Schema.Literal<"fungi-app-v1">;
+    readonly ui: Schema.Struct<{
+        readonly mediaType: Schema.Literals<readonly ["text/html; charset=utf-8", "application/vnd.fungi.app-assets+json"]>;
+        readonly artifactRef: Schema.refine<import("./internal/app-release-contract.js").ArtifactRef, Schema.String>;
+        readonly digest: Schema.refine<import("./internal/app-release-contract.js").Sha256Digest, Schema.String>;
+        readonly version: Schema.String;
+        readonly byteLength: Schema.Number;
+    }>;
+    readonly backend: Schema.Struct<{
+        readonly mediaType: Schema.Literal<"application/vnd.fungi.app-backend+json">;
+        readonly artifactRef: Schema.refine<import("./internal/app-release-contract.js").ArtifactRef, Schema.String>;
+        readonly digest: Schema.refine<import("./internal/app-release-contract.js").Sha256Digest, Schema.String>;
+        readonly version: Schema.String;
+        readonly byteLength: Schema.Number;
+    }>;
+}>, Schema.Struct<{
+    readonly declaration: Schema.optionalKey<Schema.Codec<Readonly<{
+        api?: import("./app-vocabulary.js").AppApi;
+        displayName?: string | undefined;
+        capabilities: readonly import("./app-vocabulary.js").AppCapabilityId[];
+        calls?: readonly Readonly<{
+            appId: string;
+            methods: readonly string[];
+        }>[] | undefined;
+        guidance?: string | undefined;
+        handlers: readonly import("./app-vocabulary.js").AppHandler[];
+        receives?: readonly "git.push"[] | undefined;
+        icon?: string;
+        roles: readonly import("./app-vocabulary.js").AppRole[];
+        storage?: readonly import("./app-vocabulary.js").AppStorageKey[] | undefined;
+        commands?: readonly import("./app-vocabulary.js").AppDeclaredCommand[] | undefined;
+        gills?: readonly import("@fungi.computer/gills").AppDeclaredGill[] | undefined;
+        backend?: Readonly<{
+            bindings: readonly import("./app-backend-binding-vocabulary.js").AppBackendBinding[];
+            sync?: Readonly<{
+                method: string;
+            }>;
+        }> | undefined;
+    }>, Readonly<{
+        api?: import("./app-vocabulary.js").AppApi;
+        displayName?: string | undefined;
+        capabilities: readonly import("./app-vocabulary.js").AppCapabilityId[];
+        calls?: readonly Readonly<{
+            appId: string;
+            methods: readonly string[];
+        }>[] | undefined;
+        guidance?: string | undefined;
+        handlers: readonly import("./app-vocabulary.js").AppHandler[];
+        receives?: readonly "git.push"[] | undefined;
+        icon?: string;
+        roles: readonly import("./app-vocabulary.js").AppRole[];
+        storage?: readonly import("./app-vocabulary.js").AppStorageKey[] | undefined;
+        commands?: readonly import("./app-vocabulary.js").AppDeclaredCommand[] | undefined;
+        gills?: readonly import("@fungi.computer/gills").AppDeclaredGill[] | undefined;
+        backend?: Readonly<{
+            bindings: readonly import("./app-backend-binding-vocabulary.js").AppBackendBinding[];
+            sync?: Readonly<{
+                method: string;
+            }>;
+        }> | undefined;
+    }>, never, never>>;
+    readonly format: Schema.Literal<"fungi-app-v1">;
+    readonly ui: Schema.Struct<{
+        readonly mediaType: Schema.Literals<readonly ["text/html; charset=utf-8", "application/vnd.fungi.app-assets+json"]>;
+        readonly artifactRef: Schema.refine<import("./internal/app-release-contract.js").ArtifactRef, Schema.String>;
+        readonly digest: Schema.refine<import("./internal/app-release-contract.js").Sha256Digest, Schema.String>;
+        readonly version: Schema.String;
+        readonly byteLength: Schema.Number;
+    }>;
+}>, Schema.Struct<{
+    readonly declaration: Schema.optionalKey<Schema.Codec<Readonly<{
+        api?: import("./app-vocabulary.js").AppApi;
+        displayName?: string | undefined;
+        capabilities: readonly import("./app-vocabulary.js").AppCapabilityId[];
+        calls?: readonly Readonly<{
+            appId: string;
+            methods: readonly string[];
+        }>[] | undefined;
+        guidance?: string | undefined;
+        handlers: readonly import("./app-vocabulary.js").AppHandler[];
+        receives?: readonly "git.push"[] | undefined;
+        icon?: string;
+        roles: readonly import("./app-vocabulary.js").AppRole[];
+        storage?: readonly import("./app-vocabulary.js").AppStorageKey[] | undefined;
+        commands?: readonly import("./app-vocabulary.js").AppDeclaredCommand[] | undefined;
+        gills?: readonly import("@fungi.computer/gills").AppDeclaredGill[] | undefined;
+        backend?: Readonly<{
+            bindings: readonly import("./app-backend-binding-vocabulary.js").AppBackendBinding[];
+            sync?: Readonly<{
+                method: string;
+            }>;
+        }> | undefined;
+    }>, Readonly<{
+        api?: import("./app-vocabulary.js").AppApi;
+        displayName?: string | undefined;
+        capabilities: readonly import("./app-vocabulary.js").AppCapabilityId[];
+        calls?: readonly Readonly<{
+            appId: string;
+            methods: readonly string[];
+        }>[] | undefined;
+        guidance?: string | undefined;
+        handlers: readonly import("./app-vocabulary.js").AppHandler[];
+        receives?: readonly "git.push"[] | undefined;
+        icon?: string;
+        roles: readonly import("./app-vocabulary.js").AppRole[];
+        storage?: readonly import("./app-vocabulary.js").AppStorageKey[] | undefined;
+        commands?: readonly import("./app-vocabulary.js").AppDeclaredCommand[] | undefined;
+        gills?: readonly import("@fungi.computer/gills").AppDeclaredGill[] | undefined;
+        backend?: Readonly<{
+            bindings: readonly import("./app-backend-binding-vocabulary.js").AppBackendBinding[];
+            sync?: Readonly<{
+                method: string;
+            }>;
+        }> | undefined;
+    }>, never, never>>;
+    readonly format: Schema.Literal<"fungi-app-v1">;
+    readonly backend: Schema.Struct<{
+        readonly mediaType: Schema.Literal<"application/vnd.fungi.app-backend+json">;
+        readonly artifactRef: Schema.refine<import("./internal/app-release-contract.js").ArtifactRef, Schema.String>;
+        readonly digest: Schema.refine<import("./internal/app-release-contract.js").Sha256Digest, Schema.String>;
+        readonly version: Schema.String;
+        readonly byteLength: Schema.Number;
+    }>;
+}>]>;
+/** Digest-covered App description, not mutable selection or permission. */
+export type AppBuild = Schema.Schema.Type<typeof appBuildSchema>;
+export type AppUiBuild = Schema.Schema.Type<typeof appUiBuildSchema>;
+export type AppBackendBuild = Schema.Schema.Type<typeof appBackendBuildSchema>;
+/** Maintained codec shared by artifact producers and consumers. */
+export declare const appBuildJsonSchema: Schema.fromJsonString<Schema.Union<readonly [Schema.Struct<{
+    readonly declaration: Schema.optionalKey<Schema.Codec<Readonly<{
+        api?: import("./app-vocabulary.js").AppApi;
+        displayName?: string | undefined;
+        capabilities: readonly import("./app-vocabulary.js").AppCapabilityId[];
+        calls?: readonly Readonly<{
+            appId: string;
+            methods: readonly string[];
+        }>[] | undefined;
+        guidance?: string | undefined;
+        handlers: readonly import("./app-vocabulary.js").AppHandler[];
+        receives?: readonly "git.push"[] | undefined;
+        icon?: string;
+        roles: readonly import("./app-vocabulary.js").AppRole[];
+        storage?: readonly import("./app-vocabulary.js").AppStorageKey[] | undefined;
+        commands?: readonly import("./app-vocabulary.js").AppDeclaredCommand[] | undefined;
+        gills?: readonly import("@fungi.computer/gills").AppDeclaredGill[] | undefined;
+        backend?: Readonly<{
+            bindings: readonly import("./app-backend-binding-vocabulary.js").AppBackendBinding[];
+            sync?: Readonly<{
+                method: string;
+            }>;
+        }> | undefined;
+    }>, Readonly<{
+        api?: import("./app-vocabulary.js").AppApi;
+        displayName?: string | undefined;
+        capabilities: readonly import("./app-vocabulary.js").AppCapabilityId[];
+        calls?: readonly Readonly<{
+            appId: string;
+            methods: readonly string[];
+        }>[] | undefined;
+        guidance?: string | undefined;
+        handlers: readonly import("./app-vocabulary.js").AppHandler[];
+        receives?: readonly "git.push"[] | undefined;
+        icon?: string;
+        roles: readonly import("./app-vocabulary.js").AppRole[];
+        storage?: readonly import("./app-vocabulary.js").AppStorageKey[] | undefined;
+        commands?: readonly import("./app-vocabulary.js").AppDeclaredCommand[] | undefined;
+        gills?: readonly import("@fungi.computer/gills").AppDeclaredGill[] | undefined;
+        backend?: Readonly<{
+            bindings: readonly import("./app-backend-binding-vocabulary.js").AppBackendBinding[];
+            sync?: Readonly<{
+                method: string;
+            }>;
+        }> | undefined;
+    }>, never, never>>;
+    readonly format: Schema.Literal<"fungi-app-v1">;
+    readonly ui: Schema.Struct<{
+        readonly mediaType: Schema.Literals<readonly ["text/html; charset=utf-8", "application/vnd.fungi.app-assets+json"]>;
+        readonly artifactRef: Schema.refine<import("./internal/app-release-contract.js").ArtifactRef, Schema.String>;
+        readonly digest: Schema.refine<import("./internal/app-release-contract.js").Sha256Digest, Schema.String>;
+        readonly version: Schema.String;
+        readonly byteLength: Schema.Number;
+    }>;
+    readonly backend: Schema.Struct<{
+        readonly mediaType: Schema.Literal<"application/vnd.fungi.app-backend+json">;
+        readonly artifactRef: Schema.refine<import("./internal/app-release-contract.js").ArtifactRef, Schema.String>;
+        readonly digest: Schema.refine<import("./internal/app-release-contract.js").Sha256Digest, Schema.String>;
+        readonly version: Schema.String;
+        readonly byteLength: Schema.Number;
+    }>;
+}>, Schema.Struct<{
+    readonly declaration: Schema.optionalKey<Schema.Codec<Readonly<{
+        api?: import("./app-vocabulary.js").AppApi;
+        displayName?: string | undefined;
+        capabilities: readonly import("./app-vocabulary.js").AppCapabilityId[];
+        calls?: readonly Readonly<{
+            appId: string;
+            methods: readonly string[];
+        }>[] | undefined;
+        guidance?: string | undefined;
+        handlers: readonly import("./app-vocabulary.js").AppHandler[];
+        receives?: readonly "git.push"[] | undefined;
+        icon?: string;
+        roles: readonly import("./app-vocabulary.js").AppRole[];
+        storage?: readonly import("./app-vocabulary.js").AppStorageKey[] | undefined;
+        commands?: readonly import("./app-vocabulary.js").AppDeclaredCommand[] | undefined;
+        gills?: readonly import("@fungi.computer/gills").AppDeclaredGill[] | undefined;
+        backend?: Readonly<{
+            bindings: readonly import("./app-backend-binding-vocabulary.js").AppBackendBinding[];
+            sync?: Readonly<{
+                method: string;
+            }>;
+        }> | undefined;
+    }>, Readonly<{
+        api?: import("./app-vocabulary.js").AppApi;
+        displayName?: string | undefined;
+        capabilities: readonly import("./app-vocabulary.js").AppCapabilityId[];
+        calls?: readonly Readonly<{
+            appId: string;
+            methods: readonly string[];
+        }>[] | undefined;
+        guidance?: string | undefined;
+        handlers: readonly import("./app-vocabulary.js").AppHandler[];
+        receives?: readonly "git.push"[] | undefined;
+        icon?: string;
+        roles: readonly import("./app-vocabulary.js").AppRole[];
+        storage?: readonly import("./app-vocabulary.js").AppStorageKey[] | undefined;
+        commands?: readonly import("./app-vocabulary.js").AppDeclaredCommand[] | undefined;
+        gills?: readonly import("@fungi.computer/gills").AppDeclaredGill[] | undefined;
+        backend?: Readonly<{
+            bindings: readonly import("./app-backend-binding-vocabulary.js").AppBackendBinding[];
+            sync?: Readonly<{
+                method: string;
+            }>;
+        }> | undefined;
+    }>, never, never>>;
+    readonly format: Schema.Literal<"fungi-app-v1">;
+    readonly ui: Schema.Struct<{
+        readonly mediaType: Schema.Literals<readonly ["text/html; charset=utf-8", "application/vnd.fungi.app-assets+json"]>;
+        readonly artifactRef: Schema.refine<import("./internal/app-release-contract.js").ArtifactRef, Schema.String>;
+        readonly digest: Schema.refine<import("./internal/app-release-contract.js").Sha256Digest, Schema.String>;
+        readonly version: Schema.String;
+        readonly byteLength: Schema.Number;
+    }>;
+}>, Schema.Struct<{
+    readonly declaration: Schema.optionalKey<Schema.Codec<Readonly<{
+        api?: import("./app-vocabulary.js").AppApi;
+        displayName?: string | undefined;
+        capabilities: readonly import("./app-vocabulary.js").AppCapabilityId[];
+        calls?: readonly Readonly<{
+            appId: string;
+            methods: readonly string[];
+        }>[] | undefined;
+        guidance?: string | undefined;
+        handlers: readonly import("./app-vocabulary.js").AppHandler[];
+        receives?: readonly "git.push"[] | undefined;
+        icon?: string;
+        roles: readonly import("./app-vocabulary.js").AppRole[];
+        storage?: readonly import("./app-vocabulary.js").AppStorageKey[] | undefined;
+        commands?: readonly import("./app-vocabulary.js").AppDeclaredCommand[] | undefined;
+        gills?: readonly import("@fungi.computer/gills").AppDeclaredGill[] | undefined;
+        backend?: Readonly<{
+            bindings: readonly import("./app-backend-binding-vocabulary.js").AppBackendBinding[];
+            sync?: Readonly<{
+                method: string;
+            }>;
+        }> | undefined;
+    }>, Readonly<{
+        api?: import("./app-vocabulary.js").AppApi;
+        displayName?: string | undefined;
+        capabilities: readonly import("./app-vocabulary.js").AppCapabilityId[];
+        calls?: readonly Readonly<{
+            appId: string;
+            methods: readonly string[];
+        }>[] | undefined;
+        guidance?: string | undefined;
+        handlers: readonly import("./app-vocabulary.js").AppHandler[];
+        receives?: readonly "git.push"[] | undefined;
+        icon?: string;
+        roles: readonly import("./app-vocabulary.js").AppRole[];
+        storage?: readonly import("./app-vocabulary.js").AppStorageKey[] | undefined;
+        commands?: readonly import("./app-vocabulary.js").AppDeclaredCommand[] | undefined;
+        gills?: readonly import("@fungi.computer/gills").AppDeclaredGill[] | undefined;
+        backend?: Readonly<{
+            bindings: readonly import("./app-backend-binding-vocabulary.js").AppBackendBinding[];
+            sync?: Readonly<{
+                method: string;
+            }>;
+        }> | undefined;
+    }>, never, never>>;
+    readonly format: Schema.Literal<"fungi-app-v1">;
+    readonly backend: Schema.Struct<{
+        readonly mediaType: Schema.Literal<"application/vnd.fungi.app-backend+json">;
+        readonly artifactRef: Schema.refine<import("./internal/app-release-contract.js").ArtifactRef, Schema.String>;
+        readonly digest: Schema.refine<import("./internal/app-release-contract.js").Sha256Digest, Schema.String>;
+        readonly version: Schema.String;
+        readonly byteLength: Schema.Number;
+    }>;
+}>]>>;
+/** Construct one non-empty App root without leaking union mechanics to adapters. */
+export declare function createAppBuild(ui: AppUiBuild | null, backend: AppBackendBuild | null, appDeclaration?: AppDeclaration): AppBuild;
+export { appCapabilityIdSchema, appDeclarationSchema, appDeclaredCommandSchema, appHandlerSchema, appRoleSchema, appStorageKeySchema, appStorageKeyNameSchema, } from "./app-declaration.js";
+export { appCapabilityIds, appHandlers, appRoles, appStorageScopes, emptyAppDeclaration, isEmptyAppDeclaration, resolveAppRoles, } from "./app-vocabulary.js";
+export type { AppBackendBinding, AppCapabilityId, AppDeclaration, AppDeclaredCommand, AppHandler, AppRole, AppStorageScope, AppStorageKey, EffectiveAppRole, RoleCandidate, } from "./app-vocabulary.js";
+export type { AppDescription, AppUi, ResolvedApp, } from "./internal/app-release-contract.js";
+export { appCallsSchema } from "./app-declaration.js";