@fungi.computer/computer 0.3.2 → 0.4.0

package/dist/computerd.cjs

@@ -10280,6 +10280,7 @@ var ImportTableEntry = class {
         this.activePull.reject(error);
         this.activePull = void 0;
       }
+      if (this.onBrokenRegistrations) for (let i of this.onBrokenRegistrations) delete this.session.onBrokenCallbacks[i];
       this.onBrokenRegistrations = void 0;
     }
   }
@@ -10437,6 +10438,7 @@ var RpcSessionImpl = class {
         refcount: 1
       };
       this.reverseExports.set(hook, exportId);
+      this.watchExport(exportId, hook);
       return exportId;
     }
   }
@@ -10454,6 +10456,22 @@ var RpcSessionImpl = class {
   unexport(ids) {
     for (let id of ids) this.releaseExport(id, 1);
   }
+  watchExport(exportId, hook) {
+    hook.onBroken((error) => {
+      queueMicrotask(() => {
+        if (this.abortReason !== void 0 || this.exports[exportId]?.hook !== hook) return;
+        try {
+          this.send([
+            "reject",
+            exportId,
+            Devaluator.devaluate(error, void 0, this, void 0, this.encodingLevel)
+          ]);
+        } catch (err) {
+          this.abort(err);
+        }
+      });
+    });
+  }
   releaseExport(exportId, refcount) {
     let entry = this.exports[exportId];
     if (!entry) throw new Error(`no such export ID: ${exportId}`);
@@ -10720,8 +10738,8 @@ var RpcSessionImpl = class {
     } catch (err) {
       Promise.resolve(err);
     }
-    for (let i in this.onBrokenCallbacks) try {
-      this.onBrokenCallbacks[i](error);
+    for (let callback of Object.values(this.onBrokenCallbacks)) try {
+      callback(error);
     } catch (err) {
       Promise.resolve(err);
     }
@@ -10772,11 +10790,13 @@ var RpcSessionImpl = class {
         case "pipe": {
           let { readable, writable } = new TransformStream();
           let hook = streamImpl.createWritableStreamHook(writable);
+          let exportId = this.exports.length;
           this.exports.push({
             hook,
             refcount: 1,
             pipeReadable: readable
           });
+          this.watchExport(exportId, hook);
           continue;
         }
         case "pull": {
@@ -11279,6 +11299,7 @@ var WritableStreamStubHook = class WritableStreamStubHook2 extends StubHook {
     }
   }
   onBroken(callback) {
+    this.getState().writer.closed.then(void 0, callback);
   }
 };
 var INITIAL_WINDOW = 262144;
@@ -11373,6 +11394,20 @@ function createWritableStreamFromHook(hook) {
     }
   };
   return new WritableStream({
+    start(controller) {
+      hook.onBroken((err) => {
+        if (pendingError === void 0) {
+          pendingError = err;
+          controller.error(err);
+          disposeHook();
+        }
+        if (windowReject) {
+          windowReject(err);
+          windowResolve = void 0;
+          windowReject = void 0;
+        }
+      });
+    },
     write(chunk, controller) {
       if (pendingError !== void 0) throw pendingError;
       const payload = RpcPayload.fromAppParams([chunk]);

package/dist/execution-result.d.ts

@@ -1,3 +1,3 @@
-import type { WorkspaceRuntimeExecHandle } from "@fungi.computer/cloudflare-computer";
+import type { WorkspaceRuntimeExecHandle, WorkspaceRuntimeResultOptions } from "@fungi.computer/cloudflare-computer";
 /** A host deadline cancels the owned execution, rather than merely abandoning its result. */
-export declare function computerExecutionResult(run: WorkspaceRuntimeExecHandle<"utf8">, signal?: AbortSignal): Promise<import("@fungi.computer/cloudflare-computer").WorkspaceRuntimeResult<"utf8">>;
+export declare function computerExecutionResult(run: WorkspaceRuntimeExecHandle<"utf8">, signal?: AbortSignal, options?: WorkspaceRuntimeResultOptions): Promise<import("@fungi.computer/cloudflare-computer").WorkspaceRuntimeResult<"utf8">>;

package/dist/execution-result.js

@@ -1,7 +1,7 @@
 /** A host deadline cancels the owned execution, rather than merely abandoning its result. */
-export async function computerExecutionResult(run, signal) {
+export async function computerExecutionResult(run, signal, options) {
     if (signal === undefined)
-        return await run.result();
+        return await run.result(options);
     let interrupt = () => undefined;
     const interrupted = new Promise((resolve) => {
         interrupt = () => {
@@ -13,7 +13,7 @@ export async function computerExecutionResult(run, signal) {
     });
     try {
         const result = await Promise.race([
-            run.result().then((value) => ({ kind: "result", value })),
+            run.result(options).then((value) => ({ kind: "result", value })),
             interrupted,
         ]);
         if (result.kind === "result")

package/dist/index.d.ts

@@ -1,5 +1,6 @@
+export type { WorkspaceRuntimeResultOptions } from "@fungi.computer/cloudflare-computer";
 export { createLocalBackendReplayStore } from "./local-backend-replay.js";
-import { Workspace, WorkspaceProxy, WorkspaceServiceProxy, type WorkspaceStub } from "@fungi.computer/cloudflare-computer";
+import { Workspace, WorkspaceProxy, WorkspaceServiceProxy, type WorkspaceStub, type WorkspaceRuntimeResultOptions } from "@fungi.computer/cloudflare-computer";
 import { type WorkerShellBackendOptions } from "@fungi.computer/cloudflare-computer/backends/worker-shell";
 import { type IWorkspaceContainerAPI } from "@fungi.computer/cloudflare-computer/backends/container";
 import { DurableObject } from "cloudflare:workers";
@@ -250,7 +251,7 @@ export declare class ComputerDO extends ContainerComputer implements ComputerFil
      * or the first available in the default order. Host-only `hosted` execution
      * excludes local backends, including an explicitly named local backend.
      */
-    protected executeOperationAfterAcceptance(input: ComputerExecRequest, accept: () => void, kind: "exec" | "bash" | "hosted", budget?: ComputerExecutionBudget, signal?: AbortSignal, executionContext?: ComputerValue): Promise<ComputerOperationResult>;
+    protected executeOperationAfterAcceptance(input: ComputerExecRequest, accept: () => void, kind: "exec" | "bash" | "hosted", budget?: ComputerExecutionBudget, signal?: AbortSignal, executionContext?: ComputerValue, resultOptions?: WorkspaceRuntimeResultOptions): Promise<ComputerOperationResult>;
     /**
      * Run one command on a routed backend. Owners admit and meter hosted
      * backends here; a member's own machine is neither reserved nor metered.

package/dist/index.js

@@ -131,7 +131,7 @@ async function write(workspace, input) {
         bytes: utf8.encode(content).byteLength,
     });
 }
-async function exec(workspace, input, backend, signal, execution) {
+async function exec(workspace, input, backend, signal, execution, resultOptions) {
     const env_1 = { stack: [], error: void 0, hasError: false };
     try {
         // The host request has already been decoded under its admitted budget.
@@ -149,7 +149,7 @@ async function exec(workspace, input, backend, signal, execution) {
         execution?.dispatch();
         const run = __addDisposableResource(env_1, await workspace.runtime.exec(command, nativeOptions), false);
         execution?.opened();
-        const result = await computerExecutionResult(run, signal);
+        const result = await computerExecutionResult(run, signal, resultOptions);
         const synchronizationFailure = result.sync.status === "pending"
             ? `Computer command filesystem synchronization failed: ${result.sync.error}`
             : null;
@@ -1009,7 +1009,7 @@ export class ComputerDO extends ContainerComputer {
      * or the first available in the default order. Host-only `hosted` execution
      * excludes local backends, including an explicitly named local backend.
      */
-    async executeOperationAfterAcceptance(input, accept, kind, budget = genericComputerExecutionBudget, signal, executionContext) {
+    async executeOperationAfterAcceptance(input, accept, kind, budget = genericComputerExecutionBudget, signal, executionContext, resultOptions) {
         const { requestId, ...command } = computerExecutionRequestSchema(budget).parse(input);
         const route = kind === "exec" && command.backend === undefined
             ? undefined
@@ -1067,7 +1067,7 @@ export class ComputerDO extends ContainerComputer {
                         },
                     };
                 }
-                const output = await exec(workspace, command, route?.id, signal, execution);
+                const output = await exec(workspace, command, route?.id, signal, execution, resultOptions);
                 completed = true;
                 operations.settle(requestId, output);
             }

package/dist/team-candidate-builder.mjs

@@ -19518,6 +19518,11 @@ var appBackendBindingKinds = {
         requires: ["workflow.run", "workflow.arm"],
         effect: "write"
       },
+      pauseSchedule: {
+        cap: "app.workflow.run",
+        requires: ["workflow.run", "workflow.arm"],
+        effect: "write"
+      },
       schedules: {
         cap: "app.workflow.read",
         requires: ["workflow.run"],
@@ -19659,7 +19664,22 @@ var appBackendBindingKinds = {
     name: "AGENTS",
     operations: {
       list: { cap: "agent.list", requires: ["agent.list"], effect: "read" },
-      send: { cap: "agent.send", requires: ["agent.send"], effect: "write" }
+      send: { cap: "agent.send", requires: ["agent.send"], effect: "write" },
+      schedules: {
+        cap: "agent.read",
+        requires: ["agent.read"],
+        effect: "read"
+      },
+      pauseSchedule: {
+        cap: "agent.manage",
+        requires: ["agent.manage"],
+        effect: "write"
+      },
+      deleteSchedule: {
+        cap: "agent.manage",
+        requires: ["agent.manage"],
+        effect: "write"
+      }
     }
   }
 };
@@ -19714,13 +19734,17 @@ var emptyAppDeclaration = Object.freeze({
 
 // ../puffball/dist/app-api.js
 var appApiMethodNameSchema = String4.check(makeFilter2(isAppApiMethodName));
+function isJsonContainer(value) {
+  return value !== null && typeof value === "object";
+}
 function withinDepth(value, depth = 0) {
   if (depth > 16)
     return false;
-  if (is2(ArraySchema(Json2))(value))
-    return value.every((child) => withinDepth(child, depth + 1));
-  if (is2(JsonObject)(value))
-    return Object.values(value).every((child) => withinDepth(child, depth + 1));
+  if (isJsonContainer(value)) {
+    for (const child of Object.values(value))
+      if (!withinDepth(child, depth + 1))
+        return false;
+  }
   return true;
 }
 var projection = JsonObject.pipe(check(makeFilter2((value) => new TextEncoder().encode(JSON.stringify(value)).byteLength <= 2e4 && withinDepth(value), { message: "App API schema exceeds its byte or depth bound" })));
@@ -19731,15 +19755,12 @@ var method = Struct({
   output: projection,
   pending: optional2(Literal2(true)),
   hidden: optional2(Literal2(true)),
-  anonymous: optional2(Literal2(true)),
   present: optional2(Struct({
     verb: String4.check(isMinLength(1), isMaxLength(32))
   })),
   effect: Literals(["read", "write", "external"]),
   requires: ArraySchema(Literals(appCapabilityIds)).pipe(check(makeFilter2((values) => new Set(values).size === values.length)))
-}).check(makeFilter2((value) => value.anonymous !== true || value.effect === "read" && value.requires.length === 0, {
-  message: "Anonymous methods must be reads with no required capabilities"
-}));
+});
 var appApiSchema = Struct({
   methods: Record(String4, method).pipe(check(makeFilter2((methods) => Object.keys(methods).every(is2(appApiMethodNameSchema)), { message: "Invalid App API method name" })), check(makeFilter2((methods) => Object.keys(methods).length <= 64)), check(makeFilter2((methods) => {
     const names = Object.keys(methods);
@@ -21842,6 +21863,7 @@ var BirdDogAgentJobPayloadSchema = Struct({
 });
 var BirdDogAgentJobInputSchema = Struct({
   work: BirdDogAgentWorkSchema,
+  delivery: Literals(["steer", "followUp"]),
   mail: optional2(BirdDogMailSchema)
 });
 
@@ -35641,7 +35663,7 @@ async function stopHtmlGroup(child) {
   }
   throw new Error("HTML process group survived its five-second cleanup bound");
 }
-function runHtmlCommand(args2, cwd, env, command = "pnpm") {
+function runHtmlCommand(args2, cwd, env, command = "pnpm", onOutput) {
   return acquireUseRelease2(
     sync2(() => {
       if (process.platform === "win32")
@@ -35656,11 +35678,13 @@ function runHtmlCommand(args2, cwd, env, command = "pnpm") {
         let stdout = "";
         let stderr = "";
         child.stdout.on("data", (chunk) => {
+          onOutput?.("stdout", chunk);
           stdout += chunk.toString();
           if (Buffer2.byteLength(stdout) > 1024 * 1024)
             reject(new Error("HTML command output exceeded its bound"));
         });
         child.stderr.on("data", (chunk) => {
+          onOutput?.("stderr", chunk);
           stderr += chunk.toString();
           if (Buffer2.byteLength(stderr) > 1024 * 1024)
             reject(new Error("HTML command diagnostics exceeded their bound"));
@@ -35701,10 +35725,10 @@ function snapshotBuildEnvironment(sourceSnapshotPath) {
 }
 function rebuildViteSnapshot(sourceSnapshotPath, recipe, options) {
   if (recipe.kind === "source-html")
-    return rebuildNpmSnapshot(sourceSnapshotPath, recipe);
+    return rebuildNpmSnapshot(sourceSnapshotPath, recipe, options);
   return gen2(function* () {
     const env = snapshotBuildEnvironment(sourceSnapshotPath);
-    const run2 = (args2, cwd = sourceSnapshotPath) => runHtmlCommand(args2, cwd, env);
+    const run2 = (args2, cwd = sourceSnapshotPath) => runHtmlCommand(args2, cwd, env, "pnpm", options.onOutput);
     if ((yield* run2(["--version"])).trim() !== "11.24.0") {
       return yield* fail5(new Error("Publisher requires pnpm 11.24.0"));
     }
@@ -35922,7 +35946,7 @@ function readHtmlBuildOutput(sourceSnapshotPath, recipe) {
     return Object.freeze({ kind: "bytes", bytes });
   });
 }
-function rebuildNpmSnapshot(sourceSnapshotPath, recipe) {
+function rebuildNpmSnapshot(sourceSnapshotPath, recipe, options) {
   return gen2(function* () {
     const env = snapshotBuildEnvironment(sourceSnapshotPath);
     const home = join5(sourceSnapshotPath, ".publisher-home");
@@ -35939,7 +35963,8 @@ function rebuildNpmSnapshot(sourceSnapshotPath, recipe) {
       ["--version"],
       sourceSnapshotPath,
       env,
-      "npm"
+      "npm",
+      options.onOutput
     )).trim() !== recipe.toolchain.npm)
       return yield* fail5(
         new Error("Captured npm version differs from the recipe")
@@ -35948,7 +35973,8 @@ function rebuildNpmSnapshot(sourceSnapshotPath, recipe) {
       ["ci", "--include=dev", "--ignore-scripts", "--no-audit", "--no-fund"],
       sourceSnapshotPath,
       env,
-      "npm"
+      "npm",
+      options.onOutput
     );
     const program = join5(sourceSnapshotPath, ".publisher-build.mjs");
     yield* tryPromise2(async () => {
@@ -35969,7 +35995,8 @@ function rebuildNpmSnapshot(sourceSnapshotPath, recipe) {
       ],
       sourceSnapshotPath,
       env,
-      "node"
+      "node",
+      options.onOutput
     );
     return yield* readHtmlBuildOutput(sourceSnapshotPath, recipe);
   });
@@ -36110,7 +36137,9 @@ function createLocalBuildExecutor(options = {}) {
               if ((yield* runHtmlCommand(
                 ["--version"],
                 source.snapshotPath,
-                environment
+                environment,
+                "pnpm",
+                options.onOutput
               )).trim() !== "11.24.0")
                 return yield* fail5(
                   new Error("Publisher requires pnpm 11.24.0")
@@ -36121,7 +36150,9 @@ function createLocalBuildExecutor(options = {}) {
                   options.packageCacheDirectory
                 ),
                 source.snapshotPath,
-                environment
+                environment,
+                "pnpm",
+                options.onOutput
               );
             }
           }
@@ -36272,6 +36303,9 @@ async function buildTeamCandidate(input) {
   const onPhase = (phase, milliseconds) => {
     phases[phase] += milliseconds;
   };
+  const onOutput = (stream, bytes2) => {
+    input.onOutput?.(stream, bytes2);
+  };
   const prepareStarted = performance.now();
   const candidate = await runPromise2(
     createCapturedCandidatePreparer(config2, {
@@ -36280,10 +36314,11 @@ async function buildTeamCandidate(input) {
         config2.sourceRevision
       ),
       buildExecutor: createLocalBuildExecutor(
-        input.packageStoreDirectory === void 0 ? { packageScripts: "run", onPhase } : {
+        input.packageStoreDirectory === void 0 ? { packageScripts: "run", onPhase, onOutput } : {
           packageScripts: "run",
           packageStoreDirectory: input.packageStoreDirectory,
-          onPhase
+          onPhase,
+          onOutput
         }
       )
     }).prepareCandidate(parseReleaseId("rel_build"))
@@ -36354,7 +36389,10 @@ try {
     repositoryPath,
     outputPath,
     // Computer scratch survives captured snapshot cleanup, without a global or durable Workspace store.
-    packageStoreDirectory: "/var/tmp/fungi-app-package-store"
+    packageStoreDirectory: "/var/tmp/fungi-app-package-store",
+    onOutput: (stream, bytes) => {
+      process[stream].write(bytes);
+    }
   });
   const reportUrl = process.env.TEAM_BUILD_REPORT;
   if (!reportUrl) throw new TeamCandidateBuildError("report_failed");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fungi.computer/computer",
-  "version": "0.3.2",
+  "version": "0.4.0",
   "author": "Levi <levi@technomancy.dev>",
   "description": "Cloudflare Computer host for one durable Fungi Computer",
   "type": "module",
@@ -60,10 +60,10 @@
     "@fungi.computer/capnweb": "0.12.0",
     "@fungi.computer/cloudflare-computer": "0.2.1-fungi.2",
     "@fungi.computer/cordyceps": "0.4.0",
-    "@fungi.computer/knapsack": "0.4.0",
+    "@fungi.computer/knapsack": "0.4.1",
     "@fungi.computer/seam": "0.2.0",
     "@fungi.computer/watchdog": "0.1.0",
-    "@fungi.computer/computer-contract": "0.0.5",
+    "@fungi.computer/computer-contract": "0.0.6",
     "effect": "4.0.2",
     "just-bash": "3.4.2",
     "zod": "4.4.3"
@@ -118,7 +118,7 @@
     "test:nightly": "bash ../../.agents/skills/orchestrate-multi-lane-work/scripts/run-proof.sh node test/egress-proof.mjs",
     "test:app-method-execution": "node test/app-method-execution-proof.mjs",
     "test:execution-lifecycle": "node test/execution-lifecycle-proof.mjs",
-    "test:unit": "node --test test/egress-policy.test.mjs test/preview.test.mjs test/fleet.test.mjs test/proof-worker.test.mjs test/workspace-sync.test.mjs test/files-patch.test.mjs test/exec-output.test.mjs && node --test test/seam-signature.test.mjs test/local-backend-replay.test.mjs test/machine-link-reopen-replay.test.mjs test/computer-backends.test.mjs test/terminal-welcome.test.mjs test/on-box-vm.test.mjs && node test/terminal-protocol.test.mjs && node test/container-policy.test.mjs && node test/files-adapter-proof.mjs && node test/operation-record-proof.mjs && node test/process-inventory-proof.mjs",
+    "test:unit": "node --test --test-concurrency=${BOTANICAL_TEST_WORKERS:-4} test/egress-policy.test.mjs test/preview.test.mjs test/fleet.test.mjs test/proof-worker.test.mjs test/workspace-sync.test.mjs test/runtime-observer.test.mjs test/files-patch.test.mjs test/exec-output.test.mjs && node --test --test-concurrency=${BOTANICAL_TEST_WORKERS:-4} test/seam-signature.test.mjs test/local-backend-replay.test.mjs test/machine-link-reopen-replay.test.mjs test/computer-backends.test.mjs test/terminal-welcome.test.mjs test/on-box-vm.test.mjs && node test/terminal-protocol.test.mjs && node test/container-policy.test.mjs && node test/files-adapter-proof.mjs && node test/operation-record-proof.mjs && node test/process-inventory-proof.mjs",
     "test:fleet-native": "node test/fleet.native.mjs",
     "test:light-shell:native": "node --import tsx test/light-shell.native.mjs --state",
     "assemble:image": "node scripts/assemble-image.mjs"