@fungi.computer/shiitake 0.2.0 → 0.3.0

package/docs/api/index.md

@@ -36,13 +36,13 @@ Construct a sanitized boundary failure.
 
 ###### Parameters
 
-| Parameter    | Type                                                                                                                                                 | Description                                                                                                                        |
-| ------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------- |
-| `boundary`   | \| `"contract"` \| `"extensions"` \| `"instructions"` \| `"model"` \| `"runtime"` \| `"store"` \| `"tools"`                                          | Boundary that rejected the operation.                                                                                              |
-| `category`   | \| `"closed"` \| `"conflict"` \| `"incompatible"` \| `"invalid"` \| `"rejected"` \| `"unavailable"` \| `"storage_pressure"` \| `"context_too_large"` | Safe category describing why it was rejected.                                                                                      |
-| `message`    | `string`                                                                                                                                             | Human-readable message safe for callers to display.                                                                                |
-| `requestId?` | `string`                                                                                                                                             | Request identity recoverable when a send may have reached the owner.                                                               |
-| `cause?`     | `unknown`                                                                                                                                            | The original thrown value, kept for server-side diagnosis only. It is never serialized: the wire encoder copies named fields only. |
+| Parameter    | Type                                                                                                                                                    | Description                                                                                                                        |
+| ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------- |
+| `boundary`   | \| `"contract"` \| `"extensions"` \| `"instructions"` \| `"model"` \| `"runtime"` \| `"store"` \| `"tools"`                                             | Boundary that rejected the operation.                                                                                              |
+| `category`   | \| `"closed"` \| `"conflict"` \| `"incompatible"` \| `"invalid"` \| `"rejected"` \| `"unavailable"` \| `"state_reset_required"` \| `"storage_pressure"` | Safe category describing why it was rejected.                                                                                      |
+| `message`    | `string`                                                                                                                                                | Human-readable message safe for callers to display.                                                                                |
+| `requestId?` | `string`                                                                                                                                                | Request identity recoverable when a send may have reached the owner.                                                               |
+| `cause?`     | `unknown`                                                                                                                                               | The original thrown value, kept for server-side diagnosis only. It is never serialized: the wire encoder copies named fields only. |
 
 ###### Returns
 
@@ -74,8 +74,8 @@ readonly cause:
   | "invalid"
   | "rejected"
   | "unavailable"
-  | "storage_pressure"
-  | "context_too_large";
+  | "state_reset_required"
+  | "storage_pressure";
 ```
 
 Safe category describing why it was rejected.
@@ -119,6 +119,47 @@ Request identity recoverable when a send may have reached the owner.
 
 ## Type Aliases
 
+### ColdSessionRow
+
+```ts
+type ColdSessionRow = Readonly<{
+  sessionId: string;
+  bytes: number;
+  lastActivityAt: number;
+  idle: boolean;
+}>;
+```
+
+One Session as the store keeper sees it: what it holds and how cold it is.
+
+---
+
+### ColdSessionPage
+
+```ts
+type ColdSessionPage = Readonly<{
+  sessions: readonly ColdSessionRow[];
+  next?: string;
+}>;
+```
+
+One bounded page of Sessions, coldest first.
+
+---
+
+### ColdSessionPageRequest
+
+```ts
+type ColdSessionPageRequest = Readonly<{
+  limit?: number;
+  after?: string;
+}>;
+```
+
+A page request: `limit` is a whole number from 1 to 200 (default 50).
+
+---
+
 ### ShiitakeErrorBoundary
 
 ```ts
@@ -256,6 +297,21 @@ Public command that selects one complete entry as the active lineage leaf.
 
 ---
 
+### OperatorCommand
+
+```ts
+type OperatorCommand = Extract<
+  SessionCommand,
+  Readonly<{
+    type: "operator";
+  }>
+>;
+```
+
+Public command that records one operator or party line without a run.
+
+---
+
 ### CompactCommand
 
 ```ts
@@ -271,6 +327,21 @@ Public command that compacts the Session's context as queued work.
 
 ---
 
+### TitleCommand
+
+```ts
+type TitleCommand = Extract<
+  SessionCommand,
+  Readonly<{
+    type: "title";
+  }>
+>;
+```
+
+Public command that sets or clears the user's Session title.
+
+---
+
 ### ForkCommand
 
 ```ts
@@ -327,6 +398,7 @@ type SqliteOwner = Omit<WatchdogSqliteOwner, "sql"> &
     sql: Readonly<{
       exec: (statement, ...bindings) => SqliteCursor;
     }>;
+    storeName?: string;
   }>;
 ```
 
@@ -340,7 +412,9 @@ Synchronous SQL and transactions held by the surrounding runtime.
 type ModelAcquisition = Readonly<{
   model: Model<Api>;
   stream?: MuleStreamFunction;
+  retryable: (message) => boolean;
   retryAfterMs?: (message) => number | undefined;
+  failureReason?: (message) => string | undefined;
   release: () => Promise<void>;
 }>;
 ```
@@ -448,18 +522,18 @@ Promise host for scheduling the opaque durable reconciler.
 
 ---
 
-### StorageBudget
+### StoragePressureCheck
 
 ```ts
-type StorageBudget = Readonly<{
-  usedBytes: () => number;
-  budgetBytes: number;
+type StoragePressureCheck = Readonly<{
+  underPressure: () => boolean;
 }>;
 ```
 
-A host's disk budget for owner storage, with the platform's own measure of it.
-Near the budget, Shiitake refuses new Sessions and new prompts with a typed
-`storage_pressure` error while admitted work finishes.
+A host's storage-pressure check. Shiitake owns the refusal door and the typed
+`storage_pressure` error; the host owns the numbers behind it, such as
+Zookeeper's budget and thresholds. While the check reports pressure, new
+Sessions and new prompts are refused and admitted work finishes.
 
 ---
 
@@ -469,6 +543,7 @@ Near the budget, Shiitake refuses new Sessions and new prompts with a typed
 type CompactionBudget = Readonly<{
   reserveTokens?: number;
   keepRecentTokens?: number;
+  backgroundTokens?: number;
 }>;
 ```
 
@@ -488,8 +563,8 @@ type CompactionOptions = CompactionBudget &
 
 Pi's compaction settings. Each budget resolves through the exact
 `provider/modelId` override, then the ordinary value, then Pi's default (16384
-reserve, 20000 kept). `enabled` is global and governs automatic compaction only;
-a manual compaction always runs.
+reserve, 20000 kept, 32768 background). `enabled` is global and governs
+automatic compaction only; a manual compaction always runs.
 
 ---
 
@@ -499,7 +574,7 @@ a manual compaction always runs.
 type ShiitakeOptions = Readonly<{
   meta?: HostMetaOptions;
   store: SqliteOwner;
-  storageBudget?: StorageBudget;
+  storagePressure?: StoragePressureCheck;
   compaction?: CompactionOptions;
   runtime: RuntimeHost;
   model: ModelSource;
@@ -533,6 +608,12 @@ full access, so a first-time host writes no permission code.
 ```ts
 type ShiitakeOwnerAgent = ShiitakeAgent &
   Readonly<{
+    prepareConfiguration: (configuration) => Promise<
+      Readonly<{
+        commit: () => void;
+        discard: () => Promise<void>;
+      }>
+    >;
     grants: Readonly<{
       deliver: (sessionId, delivery) => GrantsDeliveryResult;
       read: (sessionId) => GrantsDelivery | null;
@@ -551,6 +632,7 @@ can.
 
 ```ts
 type CommandSettlement = Readonly<{
+  acceptedSender: string | null;
   terminal: SessionTerminal;
   content: string;
   usage: readonly Pick<AssistantMessage, "provider" | "model" | "usage">[];
@@ -602,6 +684,7 @@ One Standard Schema validation outcome; only acceptance matters here.
 ```ts
 type HostMetaOptions = Readonly<{
   schema: Schema.Codec<unknown, Json> | StandardHostMetaSchema;
+  identityPath?: string;
 }>;
 ```
 
@@ -840,6 +923,7 @@ Parse one serialized frame using Shiitake's public client grammar.
 function makeHost(options, mailRoom): Promise<Readonly<{
   readSettlement: (sessionId, commandId) => Promise<
      | Readonly<{
+     acceptedSender: string | null;
      terminal: SessionTerminal;
      content: string;
      usage: readonly Pick<AssistantMessage, ... | ... | ...>[];
@@ -866,7 +950,7 @@ Construct the host-only Promise facade over the canonical Effect program.
 #### Returns
 
 `Promise`\<`Readonly`\<\{ `readSettlement`: (`sessionId`, `commandId`) =>
-`Promise`\< \| `Readonly`\<\{ `terminal`:
+`Promise`\< \| `Readonly`\<\{ `acceptedSender`: `string` \| `null`; `terminal`:
 [`SessionTerminal`](client.md#sessionterminal); `content`: `string`; `usage`:
 readonly `Pick`\<`AssistantMessage`, ... \| ... \| ...\>[]; `toolCalls`:
 `number`; \}\> \| `undefined`\>; `agent`:
@@ -948,6 +1032,12 @@ Re-exports [SessionProgress](client.md#sessionprogress)
 
 ---
 
+### SessionToolOutput
+
+Re-exports [SessionToolOutput](client.md#sessiontooloutput)
+
+---
+
 ### SessionContext
 
 Re-exports [SessionContext](client.md#sessioncontext)
@@ -1057,6 +1147,12 @@ Re-exports [TooLate](client.md#toolate)
 
 ---
 
+### UnknownRequest
+
+Re-exports [UnknownRequest](client.md#unknownrequest)
+
+---
+
 ### WatchOptions
 
 Re-exports [WatchOptions](client.md#watchoptions)

package/docs/api/internal/woodstock/storage-conformance.md

@@ -0,0 +1,81 @@
+<!-- Generated by Botanical API docs (TypeDoc + typedoc-plugin-markdown). Do not edit. -->
+
+[**@fungi.computer/shiitake**](../../README.md)
+
+---
+
+[@fungi.computer/shiitake](../../README.md) /
+internal/woodstock/storage-conformance
+
+# internal/woodstock/storage-conformance
+
+Runner-independent conformance cases for one Woodstock Session storage host.
+
+Adapted from Pi Durable's `src/testing/storage-conformance.ts`
+(`earendil-works/pi` at 8efd314f): every host that backs Woodstock with a
+[SqliteOwner](../../index.md#sqliteowner) — the local `node:sqlite` owner and
+the Durable Object's `ctx.storage` — runs the same cases through Woodstock's own
+writers and readers. Fungi delta: Pi's suite checks a generic record store (ID
+minting, task and document tables); Woodstock's store is the parent-pointer
+Session tree, so these cases check atomic admission, request-ID replay, bounded
+lineage reads, branch, fork, placeholder completion, deletion and the inbox. The
+cases import no test runner, only `node:assert`, so they run inside a Worker
+with `nodejs_compat` too.
+
+## Type Aliases
+
+### WoodstockStorageProvider
+
+```ts
+type WoodstockStorageProvider = (use) => Promise<void>;
+```
+
+Calls `use` exactly once with an empty, writable owner of the host under test,
+then releases the owner. It resolves after `use` returns.
+
+#### Parameters
+
+| Parameter | Type                |
+| --------- | ------------------- |
+| `use`     | (`owner`) => `void` |
+
+#### Returns
+
+`Promise`\<`void`\>
+
+---
+
+### WoodstockConformanceCase
+
+```ts
+type WoodstockConformanceCase = Readonly<{
+  name: string;
+  run: () => Promise<void>;
+}>;
+```
+
+One named case.
+
+## Functions
+
+### createWoodstockStorageConformance()
+
+```ts
+function createWoodstockStorageConformance(withOwner): readonly Readonly<{
+  name: string;
+  run: () => Promise<void>;
+}>[];
+```
+
+Create the runner-independent cases for one Woodstock storage host.
+
+#### Parameters
+
+| Parameter   | Type                                                    |
+| ----------- | ------------------------------------------------------- |
+| `withOwner` | [`WoodstockStorageProvider`](#woodstockstorageprovider) |
+
+#### Returns
+
+readonly `Readonly`\<\{ `name`: `string`; `run`: () => `Promise`\<`void`\>;
+\}\>[]

package/docs/api/model-preference.md

@@ -10,6 +10,23 @@
 
 ## Variables
 
+### modelReasoningLevels
+
+```ts
+const modelReasoningLevels: readonly [
+  "minimal",
+  "low",
+  "medium",
+  "high",
+  "xhigh",
+  "max",
+];
+```
+
+The thinking levels a model choice may name, shared by every model path.
+
+---
+
 ### ModelPreferenceSchema
 
 ```ts

package/docs/api/testing.md

@@ -160,12 +160,14 @@ function memoryHost(options?): Promise<Readonly<{
      hasMore: boolean;
      oldestCursor?: string | null;
      messages: readonly Readonly<{
+        requestId?: ... | ...;
         meta?: ... | ...;
+        data?: ... | ...;
         origin?: ... | ...;
         id: string;
         sequence: number;
         commandId: ... | ...;
-        value: Message;
+        value: ModelMessage;
      }>[];
      terminals: readonly Readonly<{
         commandId: string;
@@ -202,6 +204,13 @@ function memoryHost(options?): Promise<Readonly<{
         thinkingTruncated: boolean;
       }>
         | null;
+     toolOutput: readonly Readonly<{
+        toolCallId: string;
+        revision: number;
+        tail: string;
+        droppedBytes: number;
+        totalBytes: number;
+     }>[];
      extensions: SessionExtensionSlots;
      attention: readonly object[];
      context?: Readonly<{
@@ -231,8 +240,9 @@ privileges. No submitted JavaScript is evaluated by this helper.
 `Promise`\<`void`\>; `settle`: (`sessionId`, `maxTicks?`) =>
 `Promise`\<`Readonly`\<\{ `sessionId`: `string`; `cursor`: `string` \| `null`;
 `hasMore`: `boolean`; `oldestCursor?`: `string` \| `null`; `messages`: readonly
-`Readonly`\<\{ `meta?`: ... \| ...; `origin?`: ... \| ...; `id`: `string`;
-`sequence`: `number`; `commandId`: ... \| ...; `value`: `Message`; \}\>[];
+`Readonly`\<\{ `requestId?`: ... \| ...; `meta?`: ... \| ...; `data?`: ... \|
+...; `origin?`: ... \| ...; `id`: `string`; `sequence`: `number`; `commandId`:
+... \| ...; `value`: [`ModelMessage`](client.md#modelmessage); \}\>[];
 `terminals`: readonly `Readonly`\<\{ `commandId`: `string`; `outcome`: ... \|
 ... \| ... \| ...; `sequence`: `number`; `diagnostic`: ... \| ...; `meta?`: ...
 \| ...; \}\>[]; `compactions?`: readonly `Readonly`\<\{ `id`: ...; `sequence`:
@@ -244,7 +254,9 @@ privileges. No submitted JavaScript is evaluated by this helper.
 [`SessionActivity`](client.md#sessionactivity); `progress`: \| `Readonly`\<\{
 `messageId`: `string`; `revision`: `number`; `text`: `string`; `thinking`:
 `string`; `textTruncated`: `boolean`; `thinkingTruncated`: `boolean`; \}\> \|
-`null`; `extensions`:
+`null`; `toolOutput`: readonly `Readonly`\<\{ `toolCallId`: `string`;
+`revision`: `number`; `tail`: `string`; `droppedBytes`: `number`; `totalBytes`:
+`number`; \}\>[]; `extensions`:
 [`SessionExtensionSlots`](client.md#sessionextensionslots); `attention`:
 readonly `object`[]; `context?`: `Readonly`\<\{ `tokens`: `number`; `window`:
 ... \| ...; \}\>; \}\>\>; `close`: () => `Promise`\<`void`\>; \}\>\>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fungi.computer/shiitake",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "author": "Levi <levi@technomancy.dev>",
   "description": "Effect-native durable Session acceptance and bounded run orchestration",
   "type": "module",
@@ -51,6 +51,10 @@
       "types": "./dist/testing.d.ts",
       "import": "./dist/testing.js"
     },
+    "./storage-conformance": {
+      "types": "./dist/internal/woodstock/storage-conformance.d.ts",
+      "import": "./dist/internal/woodstock/storage-conformance.js"
+    },
     "./node": {
       "types": "./dist/node.d.ts",
       "import": "./dist/node.js"
@@ -62,6 +66,10 @@
     "./fleet": {
       "types": "./dist/fleet.d.ts",
       "import": "./dist/fleet.js"
+    },
+    "./delegation": {
+      "types": "./dist/delegation.d.ts",
+      "import": "./dist/delegation.js"
     }
   },
   "files": [
@@ -74,26 +82,27 @@
     "node": ">=22.13"
   },
   "dependencies": {
-    "@fungi.computer/bird-dog": "0.0.1",
-    "@fungi.computer/cairn": "0.0.1",
-    "@fungi.computer/knapsack": "0.1.0",
-    "@fungi.computer/mule": "0.0.2",
-    "@fungi.computer/mycelium": "0.1.0",
-    "@fungi.computer/watchdog": "0.0.1",
+    "@fungi.computer/bird-dog": "0.1.0",
+    "@fungi.computer/cairn": "0.1.0",
+    "@fungi.computer/carrier": "0.1.0",
+    "@fungi.computer/knapsack": "0.2.0",
+    "@fungi.computer/mule": "0.1.0",
+    "@fungi.computer/mycelium": "0.2.0",
+    "@fungi.computer/seam": "0.1.0",
+    "@fungi.computer/watchdog": "0.1.0",
     "effect": "4.0.2",
-    "hono": "4.13.5",
     "zod": "4.4.3",
-    "@earendil-works/pi-ai": "0.99.2",
-    "@fungi.computer/gills": "0.1.0",
-    "@fungi.computer/agar": "0.2.0"
+    "@earendil-works/pi-ai": "1.3.0",
+    "@fungi.computer/gills": "0.2.0",
+    "@fungi.computer/agar": "0.3.0"
   },
   "devDependencies": {
     "@cloudflare/workers-types": "5.20260828.1",
     "@types/node": "24.13.3",
     "typescript": "5.9.3",
     "vitest": "4.1.11",
-    "@fungi.computer/carrier": "0.0.1",
-    "@astrojs/starlight": "0.42.4"
+    "@astrojs/starlight": "0.42.4",
+    "hono": "4.13.5"
   },
   "botanical": {
     "role": "package",
@@ -113,6 +122,9 @@
     "type": "git",
     "url": "git+https://github.com/fungi-computer/shiitake.git"
   },
+  "peerDependencies": {
+    "hono": "^4.13.5"
+  },
   "scripts": {
     "lint": "eslint src test examples --max-warnings=0 && ../../node_modules/.bin/oxlint --config ../../oxlint.config.ts --deny-warnings src test examples",
     "typecheck": "tsc -p tsconfig.json --noEmit",
@@ -120,7 +132,7 @@
     "clean": "node --input-type=module --eval \"import { rm } from 'node:fs/promises'; await rm('dist', { recursive: true, force: true });\"",
     "test": "pnpm run test:unit && pnpm run test:merge",
     "test:unit": "vitest run",
-    "test:merge": "node test/cloudflare-durable-wake.native.mjs && pnpm run test:docs",
+    "test:merge": "node test/cloudflare-durable-wake.native.mjs && node test/woodstock-storage-conformance.native.mjs && pnpm run test:docs",
     "test:docs": "node --import tsx --test examples/bookmarks/checks.ts",
     "docs": "tsx ../../tooling/repository/src/docs/cli.ts check --root ../..",
     "docs:write": "tsx ../../tooling/repository/src/docs/cli.ts write --root ../..",

package/dist/internal/browser-sessions.d.ts

@@ -1,31 +0,0 @@
-import type { ModuleRegistration } from "@fungi.computer/mycelium";
-/** The maintained browser transport and its Session-bound tool descriptors. */
-export type BrowserHost = Readonly<{
-    /** Mycelium tools bound to this host's Session and call-time gates. */
-    modules: readonly ModuleRegistration[];
-    /** Forward one browser events, claims or results request to the maintained host. */
-    fetch: (request: Request) => Promise<Response>;
-}>;
-export type BrowserLease = Readonly<{
-    host: BrowserHost;
-    release: () => void;
-}>;
-/** One ephemeral browser host per Session, borrowed by run and SSE scopes. */
-export declare class BrowserSessions {
-    private readonly open;
-    private readonly hasSession;
-    private generation;
-    private closed;
-    private readonly hosts;
-    constructor(open: (sessionId: string) => BrowserHost, hasSession: (sessionId: string) => Promise<boolean>);
-    clear(): Promise<void>;
-    close(): Promise<void>;
-    fetch(request: Request): Promise<Response>;
-    /** Own the async transport opening until its stream joins the connection scope. */
-    private openEvents;
-    private createHost;
-    acquire(sessionId: string): BrowserLease;
-    private releaseBrowserConnection;
-    private releaseIdleHost;
-    private trackBrowserConnection;
-}