@fungi.computer/oyster 0.1.0 → 0.2.0

package/dist/shell/app-directory.d.ts

@@ -2,23 +2,23 @@ import * as Schema from "effect/Schema";
 import { appDeclaredGillSchema } from "@fungi.computer/gills";
 import * as z from "zod";
 /** An App address selects a host default or a specific installation. */
-export declare const appAddressSchema: z.ZodUnion<readonly [z.ZodObject<{
+export declare const appAddressSchema: z.ZodLazy<z.ZodUnion<readonly [z.ZodObject<{
     kind: z.ZodLiteral<"default">;
     appId: z.ZodString;
 }, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"installation">;
     installationId: z.ZodString;
-}, z.core.$strict>]>;
+}, z.core.$strict>]>>;
 /** Host-reported progress of applying a revised App authority version. */
-export declare const appAuthorityEnforcementSchema: z.ZodObject<{
+export declare const appAuthorityEnforcementSchema: z.ZodLazy<z.ZodObject<{
     requestId: z.ZodString;
-    address: z.ZodUnion<readonly [z.ZodObject<{
+    address: z.ZodLazy<z.ZodUnion<readonly [z.ZodObject<{
         kind: z.ZodLiteral<"default">;
         appId: z.ZodString;
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"installation">;
         installationId: z.ZodString;
-    }, z.core.$strict>]>;
+    }, z.core.$strict>]>>;
     authorityVersion: z.ZodNumber;
     state: z.ZodEnum<{
         unaffected: "unaffected";
@@ -27,7 +27,7 @@ export declare const appAuthorityEnforcementSchema: z.ZodObject<{
         expired: "expired";
     }>;
     outstanding: z.ZodNumber;
-}, z.core.$strict>;
+}, z.core.$strict>>;
 /** Decoded address of a default App or an installation. */
 export type AppAddress = z.output<typeof appAddressSchema>;
 /** Stable identity of one App address across directory and settings views. */
@@ -43,13 +43,13 @@ export type AppDirectoryGill = {
 };
 /** Reusable App metadata supplied by an embedding host; it conveys no permissions. */
 export declare const appDirectoryEntrySchema: z.ZodObject<{
-    address: z.ZodUnion<readonly [z.ZodObject<{
+    address: z.ZodLazy<z.ZodUnion<readonly [z.ZodObject<{
         kind: z.ZodLiteral<"default">;
         appId: z.ZodString;
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"installation">;
         installationId: z.ZodString;
-    }, z.core.$strict>]>;
+    }, z.core.$strict>]>>;
     installationId: z.ZodNullable<z.ZodString>;
     surfaceId: z.ZodString;
     appId: z.ZodString;
@@ -57,15 +57,15 @@ export declare const appDirectoryEntrySchema: z.ZodObject<{
     icon: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     releaseId: z.ZodNullable<z.ZodString>;
     authorityVersion: z.ZodNumber;
-    enforcement: z.ZodNullable<z.ZodObject<{
+    enforcement: z.ZodNullable<z.ZodLazy<z.ZodObject<{
         requestId: z.ZodString;
-        address: z.ZodUnion<readonly [z.ZodObject<{
+        address: z.ZodLazy<z.ZodUnion<readonly [z.ZodObject<{
             kind: z.ZodLiteral<"default">;
             appId: z.ZodString;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"installation">;
             installationId: z.ZodString;
-        }, z.core.$strict>]>;
+        }, z.core.$strict>]>>;
         authorityVersion: z.ZodNumber;
         state: z.ZodEnum<{
             unaffected: "unaffected";
@@ -74,7 +74,7 @@ export declare const appDirectoryEntrySchema: z.ZodObject<{
             expired: "expired";
         }>;
         outstanding: z.ZodNumber;
-    }, z.core.$strict>>;
+    }, z.core.$strict>>>;
     handlers: z.ZodArray<z.ZodLiteral<"file.open">>;
     roles: z.ZodArray<z.ZodString>;
     declaredCapabilities: z.ZodArray<z.ZodString>;
@@ -133,7 +133,7 @@ export declare const appRoleSelectionSchema: z.ZodObject<{
     chosen: z.ZodBoolean;
 }, z.core.$strict>;
 /** App Computer permissions limited to selected Computers or the Team's Computers. */
-export declare const appComputerPermissionSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+export declare const appComputerPermissionSchema: z.ZodDiscriminatedUnion<[z.ZodLazy<z.ZodObject<{
     kind: z.ZodLiteral<"selected-computers">;
     computers: z.ZodArray<z.ZodObject<{
         computerId: z.ZodString;
@@ -144,7 +144,7 @@ export declare const appComputerPermissionSchema: z.ZodDiscriminatedUnion<[z.Zod
             "computer.execute": "computer.execute";
         }>>;
     }, z.core.$strict>>;
-}, z.core.$strict>, z.ZodObject<{
+}, z.core.$strict>>, z.ZodLazy<z.ZodObject<{
     kind: z.ZodLiteral<"all-team-computers">;
     operations: z.ZodArray<z.ZodEnum<{
         "computer.list": "computer.list";
@@ -152,7 +152,7 @@ export declare const appComputerPermissionSchema: z.ZodDiscriminatedUnion<[z.Zod
         "computer.writeFile": "computer.writeFile";
         "computer.execute": "computer.execute";
     }>>;
-}, z.core.$strict>], "kind">;
+}, z.core.$strict>>], "kind">;
 /** One operation an App may request for a Computer. */
 export type AppComputerOperation = Extract<z.output<typeof appComputerPermissionSchema>, {
     kind: "all-team-computers";
@@ -205,7 +205,7 @@ export type AppMarketplacePermissions = z.output<typeof appMarketplacePermission
  * A host's Team App directory with its permission projection, parsed strictly
  * by every consumer: an unknown field is a contract change both sides make.
  */
-export declare const appDirectoryResponseSchema: z.ZodObject<{
+export declare const appDirectoryResponseSchema: z.ZodLazy<z.ZodObject<{
     actorIsTeamOwner: z.ZodBoolean;
     needsUpdate: z.ZodOptional<z.ZodArray<z.ZodObject<{
         installationId: z.ZodNullable<z.ZodString>;
@@ -213,13 +213,13 @@ export declare const appDirectoryResponseSchema: z.ZodObject<{
         displayName: z.ZodString;
     }, z.core.$strict>>>;
     apps: z.ZodArray<z.ZodObject<{
-        address: z.ZodUnion<readonly [z.ZodObject<{
+        address: z.ZodLazy<z.ZodUnion<readonly [z.ZodObject<{
             kind: z.ZodLiteral<"default">;
             appId: z.ZodString;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"installation">;
             installationId: z.ZodString;
-        }, z.core.$strict>]>;
+        }, z.core.$strict>]>>;
         installationId: z.ZodNullable<z.ZodString>;
         surfaceId: z.ZodString;
         appId: z.ZodString;
@@ -227,15 +227,15 @@ export declare const appDirectoryResponseSchema: z.ZodObject<{
         icon: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         releaseId: z.ZodNullable<z.ZodString>;
         authorityVersion: z.ZodNumber;
-        enforcement: z.ZodNullable<z.ZodObject<{
+        enforcement: z.ZodNullable<z.ZodLazy<z.ZodObject<{
             requestId: z.ZodString;
-            address: z.ZodUnion<readonly [z.ZodObject<{
+            address: z.ZodLazy<z.ZodUnion<readonly [z.ZodObject<{
                 kind: z.ZodLiteral<"default">;
                 appId: z.ZodString;
             }, z.core.$strict>, z.ZodObject<{
                 kind: z.ZodLiteral<"installation">;
                 installationId: z.ZodString;
-            }, z.core.$strict>]>;
+            }, z.core.$strict>]>>;
             authorityVersion: z.ZodNumber;
             state: z.ZodEnum<{
                 unaffected: "unaffected";
@@ -244,7 +244,7 @@ export declare const appDirectoryResponseSchema: z.ZodObject<{
                 expired: "expired";
             }>;
             outstanding: z.ZodNumber;
-        }, z.core.$strict>>;
+        }, z.core.$strict>>>;
         handlers: z.ZodArray<z.ZodLiteral<"file.open">>;
         roles: z.ZodArray<z.ZodString>;
         declaredCapabilities: z.ZodArray<z.ZodString>;
@@ -303,7 +303,7 @@ export declare const appDirectoryResponseSchema: z.ZodObject<{
             operation: z.ZodString;
             resourceId: z.ZodString;
         }, z.core.$strict>>;
-        computerPermission: z.ZodOptional<z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        computerPermission: z.ZodOptional<z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodLazy<z.ZodObject<{
             kind: z.ZodLiteral<"selected-computers">;
             computers: z.ZodArray<z.ZodObject<{
                 computerId: z.ZodString;
@@ -314,7 +314,7 @@ export declare const appDirectoryResponseSchema: z.ZodObject<{
                     "computer.execute": "computer.execute";
                 }>>;
             }, z.core.$strict>>;
-        }, z.core.$strict>, z.ZodObject<{
+        }, z.core.$strict>>, z.ZodLazy<z.ZodObject<{
             kind: z.ZodLiteral<"all-team-computers">;
             operations: z.ZodArray<z.ZodEnum<{
                 "computer.list": "computer.list";
@@ -322,7 +322,7 @@ export declare const appDirectoryResponseSchema: z.ZodObject<{
                 "computer.writeFile": "computer.writeFile";
                 "computer.execute": "computer.execute";
             }>>;
-        }, z.core.$strict>], "kind">>>;
+        }, z.core.$strict>>], "kind">>>;
         generationPermissions: z.ZodObject<{
             llm: z.ZodBoolean;
             media: z.ZodBoolean;
@@ -361,7 +361,7 @@ export declare const appDirectoryResponseSchema: z.ZodObject<{
         surfaceId: z.ZodNullable<z.ZodString>;
         chosen: z.ZodBoolean;
     }, z.core.$strict>>;
-}, z.core.$strict>;
+}, z.core.$strict>>;
 /** The host-resolved Team App directory and its permission projections. */
 export type AppDirectory = z.output<typeof appDirectoryResponseSchema>;
 /** Read-only catalog metadata for one App, without host-specific role policy. */
@@ -372,7 +372,7 @@ export declare const appCatalogEntrySchema: z.ZodObject<{
     gills: z.ZodArray<z.ZodObject<{
         id: z.ZodString;
         title: z.ZodString;
-        params: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        params: z.ZodOptional<z.ZodLazy<z.ZodArray<z.ZodObject<{
             key: z.ZodString;
             label: z.ZodString;
             kind: z.ZodEnum<{
@@ -406,7 +406,7 @@ export declare const appCatalogEntrySchema: z.ZodObject<{
             kind: "computer" | "repository" | "branch";
             required: boolean;
             options?: string | undefined;
-        }[]>>>;
+        }[]>>>>;
         desktop: z.ZodOptional<z.ZodObject<{
             sizes: z.ZodArray<z.ZodEnum<{
                 S: "S";
@@ -417,7 +417,7 @@ export declare const appCatalogEntrySchema: z.ZodObject<{
     }, z.core.$strict>>;
 }, z.core.$strict>;
 /** Read-only desktop metadata; identities are surface addresses, never launch authority. */
-export declare const appCatalogResponseSchema: z.ZodObject<{
+export declare const appCatalogResponseSchema: z.ZodLazy<z.ZodObject<{
     apps: z.ZodArray<z.ZodObject<{
         appId: z.ZodString;
         surfaceId: z.ZodString;
@@ -425,7 +425,7 @@ export declare const appCatalogResponseSchema: z.ZodObject<{
         gills: z.ZodArray<z.ZodObject<{
             id: z.ZodString;
             title: z.ZodString;
-            params: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            params: z.ZodOptional<z.ZodLazy<z.ZodArray<z.ZodObject<{
                 key: z.ZodString;
                 label: z.ZodString;
                 kind: z.ZodEnum<{
@@ -459,7 +459,7 @@ export declare const appCatalogResponseSchema: z.ZodObject<{
                 kind: "computer" | "repository" | "branch";
                 required: boolean;
                 options?: string | undefined;
-            }[]>>>;
+            }[]>>>>;
             desktop: z.ZodOptional<z.ZodObject<{
                 sizes: z.ZodArray<z.ZodEnum<{
                     S: "S";
@@ -475,11 +475,11 @@ export declare const appCatalogResponseSchema: z.ZodObject<{
             chosen: z.ZodBoolean;
         }, z.core.$strict>>;
     }, z.core.$strict>;
-}, z.core.$strict>;
+}, z.core.$strict>>;
 /** Parsed metadata returned by the read-only APPS.catalog binding. */
 export type AppCatalog = z.output<typeof appCatalogResponseSchema>;
 /** Complete APPS.catalog reply, including broker admission failures. */
-export declare const appCatalogBrokerResultSchema: z.ZodUnion<readonly [z.ZodObject<{
+export declare const appCatalogBrokerResultSchema: z.ZodLazy<z.ZodUnion<readonly [z.ZodLazy<z.ZodObject<{
     apps: z.ZodArray<z.ZodObject<{
         appId: z.ZodString;
         surfaceId: z.ZodString;
@@ -487,7 +487,7 @@ export declare const appCatalogBrokerResultSchema: z.ZodUnion<readonly [z.ZodObj
         gills: z.ZodArray<z.ZodObject<{
             id: z.ZodString;
             title: z.ZodString;
-            params: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            params: z.ZodOptional<z.ZodLazy<z.ZodArray<z.ZodObject<{
                 key: z.ZodString;
                 label: z.ZodString;
                 kind: z.ZodEnum<{
@@ -521,7 +521,7 @@ export declare const appCatalogBrokerResultSchema: z.ZodUnion<readonly [z.ZodObj
                 kind: "computer" | "repository" | "branch";
                 required: boolean;
                 options?: string | undefined;
-            }[]>>>;
+            }[]>>>>;
             desktop: z.ZodOptional<z.ZodObject<{
                 sizes: z.ZodArray<z.ZodEnum<{
                     S: "S";
@@ -537,6 +537,6 @@ export declare const appCatalogBrokerResultSchema: z.ZodUnion<readonly [z.ZodObj
             chosen: z.ZodBoolean;
         }, z.core.$strict>>;
     }, z.core.$strict>;
-}, z.core.$strict>, z.ZodObject<{
+}, z.core.$strict>>, z.ZodObject<{
     error: z.ZodString;
-}, z.core.$strict>]>;
+}, z.core.$strict>]>>;

package/dist/shell/app-directory.js

@@ -3,7 +3,7 @@ import { appDeclaredCommandSchema, appCallsSchema, } from "@fungi.computer/puffb
 import { appDeclaredGillSchema, appGillParamsSchema, } from "@fungi.computer/gills";
 import * as z from "zod";
 /** An App address selects a host default or a specific installation. */
-export const appAddressSchema = z.union([
+export const appAddressSchema = z.lazy(() => z.union([
     z.strictObject({
         kind: z.literal("default"),
         appId: z.string().min(1),
@@ -12,15 +12,15 @@ export const appAddressSchema = z.union([
         kind: z.literal("installation"),
         installationId: z.string().min(1),
     }),
-]);
+]));
 /** Host-reported progress of applying a revised App authority version. */
-export const appAuthorityEnforcementSchema = z.strictObject({
+export const appAuthorityEnforcementSchema = z.lazy(() => z.strictObject({
     requestId: z.string().min(1),
     address: appAddressSchema,
     authorityVersion: z.number().int().positive(),
     state: z.enum(["unaffected", "pending", "applied", "expired"]),
     outstanding: z.number().int().nonnegative(),
-});
+}));
 /** Stable identity of one App address across directory and settings views. */
 export const addressKey = (address) => address.kind === "default"
     ? `default:${address.appId}`
@@ -69,17 +69,17 @@ const appComputerOperationSchema = z.enum([
     "computer.writeFile",
     "computer.execute",
 ]);
-const selectedComputerPermissionSchema = z.strictObject({
+const selectedComputerPermissionSchema = z.lazy(() => z.strictObject({
     kind: z.literal("selected-computers"),
     computers: z.array(z.strictObject({
         computerId: z.string().min(1),
         operations: z.array(appComputerOperationSchema),
     })),
-});
-const allTeamComputersPermissionSchema = z.strictObject({
+}));
+const allTeamComputersPermissionSchema = z.lazy(() => z.strictObject({
     kind: z.literal("all-team-computers"),
     operations: z.array(appComputerOperationSchema),
-});
+}));
 /** App Computer permissions limited to selected Computers or the Team's Computers. */
 export const appComputerPermissionSchema = z.discriminatedUnion("kind", [
     selectedComputerPermissionSchema,
@@ -122,7 +122,7 @@ export const appMarketplacePermissionsSchema = z.strictObject({
  * A host's Team App directory with its permission projection, parsed strictly
  * by every consumer: an unknown field is a contract change both sides make.
  */
-export const appDirectoryResponseSchema = z.strictObject({
+export const appDirectoryResponseSchema = z.lazy(() => z.strictObject({
     actorIsTeamOwner: z.boolean(),
     needsUpdate: z
         .array(z.strictObject({
@@ -150,9 +150,9 @@ export const appDirectoryResponseSchema = z.strictObject({
     })),
     /** The Team's effective App per role, owned and resolved by the host. */
     roles: z.record(z.string().min(1), appRoleSelectionSchema),
-});
+}));
 /** Desktop metadata is a method result, distinct from the full Release Gill declaration. */
-const catalogGillParamsSchema = z
+const catalogGillParamsSchema = z.lazy(() => z
     .array(z.strictObject({
     key: z.string().max(64),
     label: z.string().max(256),
@@ -162,7 +162,7 @@ const catalogGillParamsSchema = z
 }))
     .max(4)
     // The wire shape is representable; Gill owns its domain refinements.
-    .refine(Schema.is(appGillParamsSchema), "Invalid Gill placement parameters");
+    .refine(Schema.is(appGillParamsSchema), "Invalid Gill placement parameters"));
 const catalogGillSchema = z.strictObject({
     id: z.string().trim().min(1).max(256),
     title: z.string().trim().min(1).max(256),
@@ -186,14 +186,11 @@ export const appCatalogEntrySchema = appDirectoryEntrySchema
 })
     .extend({ gills: z.array(catalogGillSchema).max(16) });
 /** Read-only desktop metadata; identities are surface addresses, never launch authority. */
-export const appCatalogResponseSchema = z.strictObject({
+export const appCatalogResponseSchema = z.lazy(() => z.strictObject({
     apps: z.array(appCatalogEntrySchema).max(50),
     roles: z.strictObject({
         inbox: appRoleSelectionSchema.optional(),
     }),
-});
+}));
 /** Complete APPS.catalog reply, including broker admission failures. */
-export const appCatalogBrokerResultSchema = z.union([
-    appCatalogResponseSchema,
-    z.strictObject({ error: z.string() }),
-]);
+export const appCatalogBrokerResultSchema = z.lazy(() => z.union([appCatalogResponseSchema, z.strictObject({ error: z.string() })]));

package/dist/shell/window-manager.d.ts

@@ -1,4 +1,4 @@
-import { type AppNavigationState, type AppStatusAction, type AppStatusItem } from "@fungi.computer/agar";
+import { type AppNavigationActivation, type AppNavigationState, type AppStatusAction, type AppStatusItem } from "@fungi.computer/agar";
 /** Minimum identity required to own a window across mount generations. */
 export type WindowLaunch = Readonly<{
     windowId: string;
@@ -15,6 +15,8 @@ export type WindowHost<Launch extends WindowLaunch> = Readonly<{
     requestClose?: () => boolean | Promise<boolean>;
     /** Ask the mounted App to go back in its own history; `true` when it did. */
     requestBack?: () => boolean | Promise<boolean>;
+    /** Deliver the person's use of a crumb or header command; `true` when the App acted. */
+    activateNavigation?: (activation: AppNavigationActivation) => boolean | Promise<boolean>;
     /** Deliver the person's use of a status item; `true` when the App acted. */
     activateStatus?: (action: AppStatusAction) => boolean | Promise<boolean>;
     /** Release the current mount and its host resources. */
@@ -79,6 +81,8 @@ export type WindowManager<Launch extends WindowLaunch, Container> = Readonly<{
     replace: (windowId: string, launch: Launch) => Promise<void>;
     /** Ask a ready window's App to go back; `false` when it cannot. */
     back: (windowId: string) => Promise<boolean>;
+    /** Deliver a crumb or header command to a ready window's App; `false` when it cannot. */
+    activateNavigation: (windowId: string, activation: AppNavigationActivation) => Promise<boolean>;
     /** Deliver a status item action to a ready window's App; `false` when it cannot. */
     activateStatus: (windowId: string, action: AppStatusAction) => Promise<boolean>;
     /** Register the current window generation's host-owned picker. */

package/dist/shell/window-manager.js

@@ -1,5 +1,5 @@
 import * as Redacted from "effect/Redacted";
-import { AppError, statusActionAllowed, } from "@fungi.computer/agar";
+import { AppError, navigationActivationAllowed, statusActionAllowed, } from "@fungi.computer/agar";
 /**
  * Shared window lifetime owner for browser and terminal shells.
  *
@@ -18,7 +18,14 @@ function sameStatusItems(current, next) {
 function sameNavigation(current, next) {
     if (current === null || next === null)
         return current === next;
-    return current.canGoBack === next.canGoBack && current.title === next.title;
+    return (current.canGoBack === next.canGoBack &&
+        current.title === next.title &&
+        JSON.stringify([
+            current.crumbs,
+            current.primary,
+            current.menu,
+            current.status,
+        ]) === JSON.stringify([next.crumbs, next.primary, next.menu, next.status]));
 }
 /** Whether any projected App window is still visible in the workspace. */
 export function hasVisibleWindows(projection) {
@@ -626,6 +633,17 @@ export function createWindowManager(options) {
         const requestBack = record.host?.requestBack;
         return requestBack ? await requestBack() : false;
     };
+    const activateNavigation = async (windowId, activation) => {
+        const record = records.get(windowId);
+        if (!record || !isActive(record) || record.status !== "ready")
+            return false;
+        // Only a crumb or enabled command the App currently publishes.
+        if (record.navigation === null ||
+            !navigationActivationAllowed(record.navigation, activation))
+            return false;
+        const deliver = record.host?.activateNavigation;
+        return deliver ? await deliver(activation) : false;
+    };
     const activateStatus = async (windowId, action) => {
         const record = records.get(windowId);
         if (!record || !isActive(record) || record.status !== "ready")
@@ -697,6 +715,7 @@ export function createWindowManager(options) {
         close,
         reconfigure,
         update,
+        activateNavigation,
         activateStatus,
         registerComputerChoice,
         replace,

package/dist/shell/workbench-directory.d.ts

@@ -2,13 +2,13 @@ import * as z from "zod";
 /** Desktop metadata shared by hosts; hosted administration stays in Settings. */
 export declare const workbenchDirectorySchema: z.ZodPipe<z.ZodObject<{
     apps: z.ZodArray<z.ZodObject<{
-        address: z.ZodUnion<readonly [z.ZodObject<{
+        address: z.ZodLazy<z.ZodUnion<readonly [z.ZodObject<{
             kind: z.ZodLiteral<"default">;
             appId: z.ZodString;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"installation">;
             installationId: z.ZodString;
-        }, z.core.$strict>]>;
+        }, z.core.$strict>]>>;
         installationId: z.ZodNullable<z.ZodString>;
         surfaceId: z.ZodString;
         appId: z.ZodString;
@@ -16,15 +16,15 @@ export declare const workbenchDirectorySchema: z.ZodPipe<z.ZodObject<{
         icon: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         releaseId: z.ZodNullable<z.ZodString>;
         authorityVersion: z.ZodNumber;
-        enforcement: z.ZodNullable<z.ZodObject<{
+        enforcement: z.ZodNullable<z.ZodLazy<z.ZodObject<{
             requestId: z.ZodString;
-            address: z.ZodUnion<readonly [z.ZodObject<{
+            address: z.ZodLazy<z.ZodUnion<readonly [z.ZodObject<{
                 kind: z.ZodLiteral<"default">;
                 appId: z.ZodString;
             }, z.core.$strict>, z.ZodObject<{
                 kind: z.ZodLiteral<"installation">;
                 installationId: z.ZodString;
-            }, z.core.$strict>]>;
+            }, z.core.$strict>]>>;
             authorityVersion: z.ZodNumber;
             state: z.ZodEnum<{
                 unaffected: "unaffected";
@@ -33,7 +33,7 @@ export declare const workbenchDirectorySchema: z.ZodPipe<z.ZodObject<{
                 expired: "expired";
             }>;
             outstanding: z.ZodNumber;
-        }, z.core.$strict>>;
+        }, z.core.$strict>>>;
         handlers: z.ZodArray<z.ZodLiteral<"file.open">>;
         roles: z.ZodArray<z.ZodString>;
         declaredCapabilities: z.ZodArray<z.ZodString>;
@@ -87,7 +87,7 @@ export declare const workbenchDirectorySchema: z.ZodPipe<z.ZodObject<{
             computerId: z.ZodString;
             name: z.ZodString;
         }, z.core.$strip>>;
-        computerPermission: z.ZodOptional<z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        computerPermission: z.ZodOptional<z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodLazy<z.ZodObject<{
             kind: z.ZodLiteral<"selected-computers">;
             computers: z.ZodArray<z.ZodObject<{
                 computerId: z.ZodString;
@@ -98,7 +98,7 @@ export declare const workbenchDirectorySchema: z.ZodPipe<z.ZodObject<{
                     "computer.execute": "computer.execute";
                 }>>;
             }, z.core.$strict>>;
-        }, z.core.$strict>, z.ZodObject<{
+        }, z.core.$strict>>, z.ZodLazy<z.ZodObject<{
             kind: z.ZodLiteral<"all-team-computers">;
             operations: z.ZodArray<z.ZodEnum<{
                 "computer.list": "computer.list";
@@ -106,7 +106,7 @@ export declare const workbenchDirectorySchema: z.ZodPipe<z.ZodObject<{
                 "computer.writeFile": "computer.writeFile";
                 "computer.execute": "computer.execute";
             }>>;
-        }, z.core.$strict>], "kind">>>;
+        }, z.core.$strict>>], "kind">>>;
     }, z.core.$strip>>;
     computer: z.ZodOptional<z.ZodObject<{
         computerId: z.ZodString;

package/dist/shell/workbench-host-types.d.ts

@@ -9,7 +9,7 @@ export type WorkbenchResolvedChild = Readonly<{
     title?: string;
 }>;
 /** The host's real mounted App; selection and lease replacement stay with it. */
-export type WorkbenchChildSurface = Pick<WorkbenchChildHandle, "setVisibility" | "requestClose" | "requestBack" | "activateStatus"> & {
+export type WorkbenchChildSurface = Pick<WorkbenchChildHandle, "setVisibility" | "requestClose" | "requestBack" | "activateStatus" | "activateNavigation"> & {
     /** Release the mounted child or host-owned observations. */
     dispose(): void;
     /** Replace the host-admitted selection while retaining the child document. */

package/dist/shell/workbench-host.js

@@ -109,6 +109,11 @@ class MountedChildHandle {
         // The shell relays the person's click; parse it at the host's edge.
         return this.surface.activateStatus(parseAppStatusAction(action));
     }
+    async activateNavigation(activation) {
+        if (this.#disposed)
+            return false;
+        return this.surface.activateNavigation(activation);
+    }
     async invokeCommand(commandId, input) {
         const invoke = this.commands.invoke;
         if (this.#disposed || invoke === undefined)

package/dist/shell/workbench-model.d.ts

@@ -1,6 +1,6 @@
 import * as z from "zod";
 import * as Schema from "effect/Schema";
-import type { AppCommand, AppOpenRequest, FileNavigationInput, AppNavigationState, AppStatusAction, AppStatusItem } from "@fungi.computer/agar";
+import type { AppCommand, AppOpenRequest, FileNavigationInput, AppNavigationActivation, AppNavigationState, AppStatusAction, AppStatusItem } from "@fungi.computer/agar";
 import type { AppOpenInput, AppRoleChoice } from "@fungi.computer/agar/apps";
 import type { WhistleExecutionOrigin, WhistleJsonValue } from "@fungi.computer/whistle";
 /** A request to resolve and mount one child App, by its own identity. */
@@ -68,6 +68,8 @@ export type WorkbenchChildHandle = {
     requestBack(): Promise<boolean>;
     /** Deliver the person's use of a child's status item; `true` when it acted. */
     activateStatus(action: AppStatusAction): Promise<boolean>;
+    /** Deliver the person's use of a child's crumb or header command; `true` when it acted. */
+    activateNavigation(activation: AppNavigationActivation): Promise<boolean>;
     /** Run one of the child's currently presented commands. */
     invokeCommand(commandId: string, input: WorkbenchCommandInvocation): Promise<WhistleJsonValue | undefined>;
     /** Release the child mount and its resources. */

package/dist/standalone/agents.d.ts

@@ -6,6 +6,7 @@ import type { CloudflareShiitakeOptions } from "@fungi.computer/shiitake/cloudfl
 import { type AiBinding } from "@earendil-works/pi-ai/api/cloudflare-ai-binding";
 import * as Schema from "effect/Schema";
 import { type FrameBindingProps } from "../cloudflare.js";
+import type { Avatar } from "@fungi.computer/sprite/avatar";
 import type { InvocationFrame } from "../invocation.js";
 import type { OysterJson } from "../host.js";
 import { type FleetMessage } from "@fungi.computer/shiitake/fleet";
@@ -19,10 +20,11 @@ import { type AgentMcpServer, type AgentMcpServerInput, type AgentMcpServerRefus
 import type { AgentPolicyActor, OysterAgents, OysterSessionRow } from "../agents.js";
 /** The model door an agent runs on; Shiitake's own contract. */
 export type StandaloneModelSource = CloudflareShiitakeOptions["model"];
-/** One directory entry: an agent's id and display name. */
+/** One directory entry: an agent's id, display name and own avatar. */
 export type AgentEntry = Readonly<{
     agentId: string;
     name: string;
+    avatar: Avatar;
 }>;
 /** Bindings the agent host reads. */
 export type StandaloneAgentsEnv = Readonly<{
@@ -100,6 +102,7 @@ export declare abstract class StandaloneAgentBase<Env extends StandaloneAgentEnv
 /** Names this Oyster's agents and remembers which Sessions the member opened. */
 export declare class AgentDirectory extends DurableObject<StandaloneAgentEnv> {
     private readonly directory;
+    private readonly avatars;
     private composedTenancy;
     private grant;
     constructor(ctx: DurableObjectState, env: StandaloneAgentEnv);
@@ -111,7 +114,11 @@ export declare class AgentDirectory extends DurableObject<StandaloneAgentEnv> {
     rename(agentId: string, name: string, principal: OysterPrincipal): AgentEntry | Readonly<{
         error: "not_found" | "name_taken" | "not_granted";
     }>;
-    create(name: string, requestId: string, principal: OysterPrincipal, actor: AgentPolicyActor): AgentEntry & {
+    /** Owner-only avatar change; the Agent wears it in every App and list. */
+    setAvatar(agentId: string, avatar: Avatar, principal: OysterPrincipal): AgentEntry | Readonly<{
+        error: "not_found" | "not_granted";
+    }>;
+    create(name: string, requestId: string, principal: OysterPrincipal, actor: AgentPolicyActor, avatar?: Avatar): AgentEntry & {
         policyRevision: string | null;
     };
     private writePolicy;
@@ -166,13 +173,13 @@ export declare const agentFrameMethods: {
                     readonly sessionId: string;
                     readonly state: "unavailable";
                 } | {
-                    readonly kind: "workflow-review";
-                    readonly installationId: string;
                     readonly key: {
                         readonly runId: string;
                         readonly nodeId: string;
                         readonly iteration: string;
                     };
+                    readonly kind: "workflow-review";
+                    readonly installationId: string;
                     readonly state: "pending" | "delivered" | "answered" | "timed_out" | "closed";
                     readonly workflowId: string | null;
                     readonly workflowTitle: string;