@fungi.computer/truffle 0.3.0 → 0.4.0

package/dist/private-mcp-form-contract.d.ts

@@ -51,6 +51,7 @@ declare const answerResult: Schema.Union<readonly [Schema.Struct<{
                 readonly kind: Schema.Literal<"policy">;
             }>]>>;
             readonly reason: Schema.NullOr<Schema.Literals<readonly ["not-found", "not-eligible", "already-answered", "stale-revision", "expired", "declined", "fenced", "not-granted", "read-only", "pending", "in-flight", "outcome-unknown", "identity-conflict"]>>;
+            readonly denialNote: Schema.optionalKey<Schema.String>;
             readonly requestedAt: Schema.Int;
             readonly expiresAt: Schema.Int;
             readonly updatedAt: Schema.Int;
@@ -62,6 +63,7 @@ declare const answerResult: Schema.Union<readonly [Schema.Struct<{
 }>, Schema.Struct<{
     readonly kind: Schema.Literal<"refused">;
     readonly reason: Schema.Literals<readonly ["not-found", "not-eligible", "already-answered", "stale-revision", "expired", "declined", "fenced", "not-granted", "read-only", "pending", "in-flight", "outcome-unknown", "identity-conflict"]>;
+    readonly denialNote: Schema.optionalKey<Schema.String>;
 }>, Schema.Struct<{
     readonly kind: Schema.Literal<"submitted">;
 }>, Schema.Struct<{
@@ -79,6 +81,7 @@ export declare const mcpFormApprovalContract: {
                 readonly id: Schema.String;
                 readonly decision: Schema.Literals<readonly ["approve", "deny", "always-allow"]>;
                 readonly expectedRevision: Schema.Int;
+                readonly denialNote: Schema.optionalKey<Schema.String>;
             }>;
             output: Schema.Union<readonly [Schema.Struct<{
                 readonly kind: Schema.Literal<"answered">;
@@ -115,6 +118,7 @@ export declare const mcpFormApprovalContract: {
                             readonly kind: Schema.Literal<"policy">;
                         }>]>>;
                         readonly reason: Schema.NullOr<Schema.Literals<readonly ["not-found", "not-eligible", "already-answered", "stale-revision", "expired", "declined", "fenced", "not-granted", "read-only", "pending", "in-flight", "outcome-unknown", "identity-conflict"]>>;
+                        readonly denialNote: Schema.optionalKey<Schema.String>;
                         readonly requestedAt: Schema.Int;
                         readonly expiresAt: Schema.Int;
                         readonly updatedAt: Schema.Int;
@@ -126,6 +130,7 @@ export declare const mcpFormApprovalContract: {
             }>, Schema.Struct<{
                 readonly kind: Schema.Literal<"refused">;
                 readonly reason: Schema.Literals<readonly ["not-found", "not-eligible", "already-answered", "stale-revision", "expired", "declined", "fenced", "not-granted", "read-only", "pending", "in-flight", "outcome-unknown", "identity-conflict"]>;
+                readonly denialNote: Schema.optionalKey<Schema.String>;
             }>, Schema.Struct<{
                 readonly kind: Schema.Literal<"submitted">;
             }>, Schema.Struct<{
@@ -171,6 +176,7 @@ export declare const mcpFormApprovalContract: {
                             readonly kind: Schema.Literal<"policy">;
                         }>]>>;
                         readonly reason: Schema.NullOr<Schema.Literals<readonly ["not-found", "not-eligible", "already-answered", "stale-revision", "expired", "declined", "fenced", "not-granted", "read-only", "pending", "in-flight", "outcome-unknown", "identity-conflict"]>>;
+                        readonly denialNote: Schema.optionalKey<Schema.String>;
                         readonly requestedAt: Schema.Int;
                         readonly expiresAt: Schema.Int;
                         readonly updatedAt: Schema.Int;
@@ -183,8 +189,17 @@ export declare const mcpFormApprovalContract: {
                     readonly command: Schema.String;
                     readonly cwd: Schema.String;
                     readonly justification: Schema.String;
+                    readonly form: Schema.Literals<readonly ["direct", "shell"]>;
+                    readonly kind: Schema.Literals<readonly ["exec", "extension-install"]>;
+                    readonly argv: Schema.optionalKey<Schema.$Array<Schema.String>>;
                     readonly prefix: Schema.optionalKey<Schema.$Array<Schema.String>>;
                     readonly warning: Schema.optionalKey<Schema.String>;
+                    readonly alwaysAllowCoverage: Schema.optionalKey<Schema.String>;
+                    readonly alwaysAllowUnavailableReason: Schema.optionalKey<Schema.String>;
+                    readonly risk: Schema.optionalKey<Schema.Struct<{
+                        readonly summary: Schema.String;
+                        readonly detail: Schema.String;
+                    }>>;
                 }>>;
             }>>;
         }>;

package/dist/private-mcp-form-contract.js

@@ -1,6 +1,6 @@
 import { ExtensionId, } from "@fungi.computer/shiitake/extensions";
 import * as Schema from "effect/Schema";
-import { ApprovalAnswerInputSchema, ApprovalRefusalSchema, ApprovalViewSchema, } from "@fungi.computer/approvals";
+import { ApprovalAnswerInputSchema, ApprovalDenialNoteSchema, ApprovalRefusalSchema, ApprovalViewSchema, } from "@fungi.computer/approvals";
 /** The actual MCP form, not a ledger record or an authorization decision. */
 export const McpFormApprovalRequestSchema = Schema.Struct({
     message: Schema.String,
@@ -36,8 +36,14 @@ const McpFormPendingSchema = Schema.Struct({
         command: Schema.String,
         cwd: Schema.String,
         justification: Schema.String,
+        form: Schema.Literals(["direct", "shell"]),
+        kind: Schema.Literals(["exec", "extension-install"]),
+        argv: Schema.optionalKey(Schema.Array(Schema.String)),
         prefix: Schema.optionalKey(Schema.Array(Schema.String)),
         warning: Schema.optionalKey(Schema.String),
+        alwaysAllowCoverage: Schema.optionalKey(Schema.String),
+        alwaysAllowUnavailableReason: Schema.optionalKey(Schema.String),
+        risk: Schema.optionalKey(Schema.Struct({ summary: Schema.String, detail: Schema.String })),
     })),
 });
 /** The existing Session extension slot carries only display-safe form data. */
@@ -50,6 +56,7 @@ export const mcpFormApprovalContract = {
                 id: Schema.String,
                 decision: Schema.Literals(["approve", "deny", "always-allow"]),
                 expectedRevision: ApprovalAnswerInputSchema.fields.expectedRevision,
+                denialNote: Schema.optionalKey(ApprovalDenialNoteSchema),
             }),
             output: answerResult,
         },

package/dist/private-mcp-form-session.d.ts

@@ -5,8 +5,17 @@ export type LocalApprovalReview = {
     command: string;
     cwd: string;
     justification: string;
+    form: "direct" | "shell";
+    kind: "exec" | "extension-install";
+    argv?: string[];
     prefix?: readonly string[];
     warning?: string;
+    alwaysAllowCoverage?: string;
+    alwaysAllowUnavailableReason?: string;
+    risk?: {
+        summary: string;
+        detail: string;
+    };
 };
 type Pending = {
     sessionId: string;
@@ -25,6 +34,7 @@ export declare function createMcpFormSession(): {
                 readonly id: import("effect/Schema").String;
                 readonly decision: import("effect/Schema").Literals<readonly ["approve", "deny", "always-allow"]>;
                 readonly expectedRevision: import("effect/Schema").Int;
+                readonly denialNote: import("effect/Schema").optionalKey<import("effect/Schema").String>;
             }>;
             output: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
                 readonly kind: import("effect/Schema").Literal<"answered">;
@@ -61,6 +71,7 @@ export declare function createMcpFormSession(): {
                             readonly kind: import("effect/Schema").Literal<"policy">;
                         }>]>>;
                         readonly reason: import("effect/Schema").NullOr<import("effect/Schema").Literals<readonly ["not-found", "not-eligible", "already-answered", "stale-revision", "expired", "declined", "fenced", "not-granted", "read-only", "pending", "in-flight", "outcome-unknown", "identity-conflict"]>>;
+                        readonly denialNote: import("effect/Schema").optionalKey<import("effect/Schema").String>;
                         readonly requestedAt: import("effect/Schema").Int;
                         readonly expiresAt: import("effect/Schema").Int;
                         readonly updatedAt: import("effect/Schema").Int;
@@ -72,6 +83,7 @@ export declare function createMcpFormSession(): {
             }>, import("effect/Schema").Struct<{
                 readonly kind: import("effect/Schema").Literal<"refused">;
                 readonly reason: import("effect/Schema").Literals<readonly ["not-found", "not-eligible", "already-answered", "stale-revision", "expired", "declined", "fenced", "not-granted", "read-only", "pending", "in-flight", "outcome-unknown", "identity-conflict"]>;
+                readonly denialNote: import("effect/Schema").optionalKey<import("effect/Schema").String>;
             }>, import("effect/Schema").Struct<{
                 readonly kind: import("effect/Schema").Literal<"submitted">;
             }>, import("effect/Schema").Struct<{
@@ -113,6 +125,7 @@ export declare function createMcpFormSession(): {
                     readonly expiresAt: number;
                     readonly updatedAt: number;
                     readonly revision: number;
+                    readonly denialNote?: string;
                     readonly evidence?: readonly {
                         readonly kind: "artifact";
                         readonly ref: string;
@@ -124,11 +137,20 @@ export declare function createMcpFormSession(): {
                 readonly canSetAutoApprove: boolean;
             };
             readonly review?: {
+                readonly kind: "exec" | "extension-install";
+                readonly form: "direct" | "shell";
                 readonly command: string;
                 readonly cwd: string;
                 readonly justification: string;
+                readonly argv?: readonly string[];
                 readonly prefix?: readonly string[];
                 readonly warning?: string;
+                readonly alwaysAllowCoverage?: string;
+                readonly alwaysAllowUnavailableReason?: string;
+                readonly risk?: {
+                    readonly summary: string;
+                    readonly detail: string;
+                };
             };
         }[];
     }, {
@@ -165,6 +187,7 @@ export declare function createMcpFormSession(): {
                     readonly expiresAt: number;
                     readonly updatedAt: number;
                     readonly revision: number;
+                    readonly denialNote?: string;
                     readonly evidence?: readonly {
                         readonly kind: "artifact";
                         readonly ref: string;
@@ -176,11 +199,20 @@ export declare function createMcpFormSession(): {
                 readonly canSetAutoApprove: boolean;
             };
             readonly review?: {
+                readonly kind: "exec" | "extension-install";
+                readonly form: "direct" | "shell";
                 readonly command: string;
                 readonly cwd: string;
                 readonly justification: string;
+                readonly argv?: readonly string[];
                 readonly prefix?: readonly string[];
                 readonly warning?: string;
+                readonly alwaysAllowCoverage?: string;
+                readonly alwaysAllowUnavailableReason?: string;
+                readonly risk?: {
+                    readonly summary: string;
+                    readonly detail: string;
+                };
             };
         }[];
     }>;

package/dist/private-mcp-form-session.js

@@ -49,15 +49,18 @@ export function createMcpFormSession() {
                             if (input.decision === "always-allow" &&
                                 entry.alwaysAllow === undefined)
                                 return { kind: "refused", reason: "not-pending" };
+                            if (input.denialNote !== undefined && input.decision !== "deny")
+                                return { kind: "refused", reason: "not-pending" };
                             if (input.decision === "always-allow")
                                 entry.alwaysAllow?.("prefix");
-                            const result = await entry.approvals.answer({
+                            const answer = {
                                 recordId: entry.approval.record.recordId,
-                                decision: input.decision === "always-allow"
-                                    ? "approve"
-                                    : input.decision,
+                                decision: input.decision === "deny" ? "deny" : "approve",
                                 expectedRevision: input.expectedRevision,
-                            });
+                            };
+                            const result = await entry.approvals.answer(input.denialNote === undefined
+                                ? answer
+                                : { ...answer, denialNote: input.denialNote });
                             return result;
                         }
                         finally {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fungi.computer/truffle",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "private": false,
   "description": "Truffle: Fungi's local Agent runtime, bundled into the fungi command",
   "type": "module",
@@ -50,6 +50,10 @@
       "types": "./dist/local-extensions.d.ts",
       "import": "./dist/local-extensions.js"
     },
+    "./upgrade": {
+      "types": "./dist/local-upgrade.d.ts",
+      "import": "./dist/local-upgrade.js"
+    },
     "./rules": {
       "types": "./dist/private-local-exec-rules.d.ts",
       "import": "./dist/private-local-exec-rules.js"
@@ -65,26 +69,26 @@
     "@cf-wasm/photon": "0.4.0",
     "@earendil-works/pi-ai": "1.3.0",
     "@effect/platform-node": "4.0.2",
-    "@fungi.computer/agar": "0.3.1",
-    "@fungi.computer/approvals": "0.1.0",
-    "@fungi.computer/bird-dog": "0.2.0",
+    "@fungi.computer/agar": "0.4.0",
+    "@fungi.computer/approvals": "0.2.0",
+    "@fungi.computer/bird-dog": "0.2.1",
     "@fungi.computer/cairn": "0.1.0",
     "@fungi.computer/capnweb": "0.12.0",
     "@fungi.computer/carrier": "0.2.0",
     "@fungi.computer/cordyceps": "0.4.0",
     "@fungi.computer/gills": "0.2.0",
-    "@fungi.computer/graft": "0.1.2",
-    "@fungi.computer/knapsack": "0.3.0",
+    "@fungi.computer/graft": "0.1.3",
+    "@fungi.computer/knapsack": "0.3.1",
     "@fungi.computer/lantern": "0.3.0",
     "@fungi.computer/mycelium": "0.2.2",
-    "@fungi.computer/nacre": "0.0.2",
+    "@fungi.computer/nacre": "0.0.3",
     "@fungi.computer/seam": "0.2.0",
-    "@fungi.computer/shiitake": "0.4.0",
-    "@fungi.computer/shiitake-extensions": "0.2.0",
-    "@fungi.computer/veil": "0.2.0",
+    "@fungi.computer/shiitake": "0.5.0",
+    "@fungi.computer/shiitake-extensions": "0.3.0",
+    "@fungi.computer/veil": "0.2.1",
     "@fungi.computer/watchdog": "0.1.0",
-    "@fungi.computer/whistle": "0.1.0",
-    "@fungi.computer/zookeeper": "0.0.3",
+    "@fungi.computer/whistle": "0.2.0",
+    "@fungi.computer/zookeeper": "0.0.4",
     "@jellybrick/dbus-next": "0.11.4",
     "@modelcontextprotocol/client": "2.0.0",
     "@napi-rs/keyring": "2.1.2",
@@ -97,6 +101,8 @@
     "miniflare": "5.20260828.0-alpha",
     "proper-lockfile": "4.1.2",
     "re2js": "1.3.3",
+    "semver": "7.8.5",
+    "shell-quote": "1.10.0",
     "write-file-atomic": "8.0.0",
     "yaml": "2.9.0",
     "zod": "4.4.3"
@@ -107,6 +113,7 @@
     "@modelcontextprotocol/server": "2.0.0",
     "@types/node": "24.13.3",
     "@types/proper-lockfile": "4.1.4",
+    "@types/semver": "7.8.0",
     "@types/write-file-atomic": "4.0.3",
     "bun": "1.4.2",
     "bun-types": "1.4.1",
@@ -154,7 +161,7 @@
     "test:node": "../../node_modules/.bin/vitest run",
     "test:bun": "pnpm run test:mesh-link && pnpm run test:bun:batch && bun test ./test/private-workerd-deadline.bun.test.ts",
     "test:mesh-link": "bun test ./test/private-local-mesh-links.bun.test.ts",
-    "test:bun:batch": "bun test ./test/private-sqlite-approval-driver.bun.test.ts ./test/mcp-form-service.bun.test.ts ./test/private-local-service-discovery.bun.test.ts ./test/private-local-service-listener.bun.test.ts ./test/private-local-service-manager.bun.test.ts ./test/private-local-service-rebind.bun.test.ts ./test/private-local-service-stop.bun.test.ts ./test/private-local-service-ensure.bun.test.ts ./test/private-local-service-identity.bun.test.ts ./test/private-local-service-kill-resume.bun.test.ts ./test/private-local-service-idle-owners.bun.test.ts ./test/private-local-service-idle-delegation.bun.test.ts ./test/private-local-mail-retry.bun.test.ts ./test/private-local-service-log-native.bun.test.ts ./test/private-local-service-log.bun.test.ts ./test/private-local-sqlite-lifetime.bun.test.ts ./test/private-sqlite-driver.bun.test.ts ./test/private-local-reload.bun.test.ts ./test/private-local-auth-rpc.bun.test.ts ./test/private-workerd-forage.bun.test.ts ./test/local-extensions.bun.test.ts ./test/local-zookeeper-slot.bun.test.ts ./test/local-extension-skills.bun.test.ts ./test/private-local-sandbox-service.bun.test.ts ./test/private-local-native-service.bun.test.ts",
+    "test:bun:batch": "bun test ./test/private-sqlite-approval-driver.bun.test.ts ./test/mcp-form-service.bun.test.ts ./test/private-local-service-discovery.bun.test.ts ./test/private-local-service-listener.bun.test.ts ./test/private-local-service-manager.bun.test.ts ./test/private-local-service-rebind.bun.test.ts ./test/private-local-service-stop.bun.test.ts ./test/private-local-service-ensure.bun.test.ts ./test/private-local-service-identity.bun.test.ts ./test/private-local-service-kill-resume.bun.test.ts ./test/private-local-service-idle-owners.bun.test.ts ./test/private-local-service-idle-delegation.bun.test.ts ./test/private-local-mail-retry.bun.test.ts ./test/private-local-service-log-native.bun.test.ts ./test/private-local-service-log.bun.test.ts ./test/private-local-sqlite-lifetime.bun.test.ts ./test/private-sqlite-driver.bun.test.ts ./test/private-local-reload.bun.test.ts ./test/private-local-auth-rpc.bun.test.ts ./test/private-workerd-forage.bun.test.ts ./test/local-extensions.bun.test.ts ./test/local-extension-archive.bun.test.ts ./test/local-zookeeper-slot.bun.test.ts ./test/local-extension-skills.bun.test.ts ./test/private-local-sandbox-service.bun.test.ts ./test/private-local-native-service.bun.test.ts",
     "build:native": "fungi-apply-patch-build --out native/bin && node scripts/build-bwrap.mjs --out native/bin && node scripts/generate-native-digests.mjs",
     "test:patch": "node --test --test-timeout=30000 test/apply-patch.native.mjs",
     "test:sandbox:linux": "node --import tsx test/fixtures/local-sandbox-proof.mts",