@fungi.computer/oyster 0.2.0 → 0.3.0

package/docs/site/agent-quickstart.mdx

@@ -22,9 +22,9 @@ read the "If it fails" notes under it before trying anything else.
 
 ## 1. Check prerequisites
 
-You need Node 24 or newer, pnpm, Git, curl and openssl. You do not need a
-Cloudflare account until step 7. Docker is needed only in step 7, where Wrangler
-builds the Computer's container image.
+You need Node 24 or newer, pnpm 11 or newer, Git, curl and openssl. You do not
+need a Cloudflare account until step 7. Docker is needed only in step 7, where
+Wrangler builds the Computer's container image.
 
 ```sh
 node --version
@@ -32,44 +32,58 @@ pnpm --version
 git --version
 ```
 
-Expected output: a `v24.` or later Node version, any pnpm version, then any
+Expected output: a `v24.` or later Node version, pnpm 11 or newer, then any
 `git version 2.x` line.
 
 If it fails:
 
 - Wrong Node: install Node 24 with your version manager, for example
   `mise use node@24` or `nvm install 24`.
-- No pnpm: run `corepack enable`, or use `npm install` wherever this guide says
-  `pnpm add`.
+- No pnpm, or an older version: install pnpm 11 with `npm install -g pnpm@11`.
 
 ## 2. Create a project
 
 Make a new directory, install Oyster, its Computer and Wrangler, and copy the
-example Worker out of the package:
+example Worker out of the package. The local pnpm policy allows esbuild and
+workerd to install their native binaries and disables unneeded optional
+dependency scripts. Write it before installing so neither command stops for
+unapproved build scripts:
 
 ```sh
 mkdir my-oyster
 cd my-oyster
-pnpm add @fungi.computer/oyster @fungi.computer/computer
+cat > pnpm-workspace.yaml <<'YAML'
+allowBuilds:
+  "@google/genai": false
+  "@mongodb-js/zstd": false
+  esbuild: true
+  exifreader: false
+  node-liblzma: false
+  protobufjs: false
+  workerd: true
+YAML
+pnpm add @fungi.computer/oyster @fungi.computer/computer react@^19.2.0 react-dom@^19.2.0
 pnpm add -D wrangler
 cp node_modules/@fungi.computer/oyster/examples/standalone/worker.ts .
 cp node_modules/@fungi.computer/oyster/examples/standalone/wrangler.jsonc .
 ```
 
 Expected output: pnpm lists the added package after each `add`, and `ls` now
-shows `node_modules`, `package.json`, `worker.ts` and `wrangler.jsonc`.
+shows `node_modules`, `package.json`, `pnpm-workspace.yaml`, `worker.ts` and
+`wrangler.jsonc`.
 
 Every later command runs from this `my-oyster` directory unless the step says
 otherwise.
 
 If it fails:
 
-- `ERR_PNPM_IGNORED_BUILDS` naming packages such as `esbuild`, `workerd` or
-  `protobufjs`: pnpm installed them without running their install scripts, and
-  nothing in this guide needs those scripts. Go on.
+- `ERR_PNPM_IGNORED_BUILDS`: check that the policy file above exists before
+  running `pnpm add`. If it names a new dependency not listed there, stop and
+  review that package before allowing its scripts; do not treat exit 1 as
+  success.
 - `cp: cannot stat …/examples/standalone/…`: the install did not finish. Run
-  `pnpm add @fungi.computer/oyster @fungi.computer/computer` again and read its
-  first error.
+  `pnpm add @fungi.computer/oyster @fungi.computer/computer react@^19.2.0 react-dom@^19.2.0`
+  again and read its first error.
 
 ## 3. Run a local Oyster
 

package/examples/standalone/worker.ts

@@ -1,7 +1,9 @@
 // The whole Oyster: Apps installed from Releases, each with its own Durable
 // Object and SQLite; git through Artifacts; a Computer in a Cloudflare
 // Container that builds App sources and runs terminals and files; Agents on
-// Workers AI; Workflows; and media. Runs on Cloudflare Workers
+// Workers AI; Workflows; media; and Browser Rendering for UI boot checks.
+// wrangler.jsonc supplies BROWSER; Worker builds never fall back to localhost.
+// Runs on Cloudflare Workers
 // (`wrangler deploy`) and on celld from the same code.
 export * from "@fungi.computer/oyster/standalone";
 export { default } from "@fungi.computer/oyster/standalone";

package/examples/standalone/wrangler.jsonc

@@ -16,6 +16,8 @@
     },
   ],
   "worker_loaders": [{ "binding": "LOADER" }],
+  // Fresh, zero-grant UI boot checks run in Cloudflare Browser Rendering.
+  "browser": { "binding": "BROWSER" },
   "containers": [
     {
       "class_name": "ComputerDO",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fungi.computer/oyster",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "author": "Levi <levi@technomancy.dev>",
   "description": "Run your own Apps on Cloudflare Workers or celld: installable App Releases, each with its own Durable Object, SQLite database and declared bindings",
   "type": "module",
@@ -18,6 +18,10 @@
     "LICENSE"
   ],
   "imports": {
+    "#boot-host-script": {
+      "types": "./src/boot-host-script.d.ts",
+      "default": "./dist/boot-host-script.js"
+    },
     "#frame-binding-wire-script": {
       "types": "./src/frame-binding-wire-script.d.ts",
       "default": "./dist/frame-binding-wire-script.js"
@@ -40,6 +44,26 @@
       "types": "./dist/cloudflare.d.ts",
       "import": "./dist/cloudflare.js"
     },
+    "./boot-gate": {
+      "types": "./dist/boot-gate.d.ts",
+      "import": "./dist/boot-gate.js"
+    },
+    "./boot-capability": {
+      "types": "./dist/boot-capability.d.ts",
+      "import": "./dist/boot-capability.js"
+    },
+    "./boot-capability/route": {
+      "types": "./dist/boot-capability-route.d.ts",
+      "import": "./dist/boot-capability-route.js"
+    },
+    "./browser": {
+      "types": "./dist/browser/index.d.ts",
+      "import": "./dist/browser/index.js"
+    },
+    "./browser/boot": {
+      "types": "./dist/browser/boot.d.ts",
+      "import": "./dist/browser/boot.js"
+    },
     "./invocation": {
       "types": "./dist/invocation.d.ts",
       "import": "./dist/invocation.js"
@@ -80,42 +104,6 @@
       "types": "./dist/event-recipients.d.ts",
       "import": "./dist/event-recipients.js"
     },
-    "./shell": {
-      "types": "./dist/shell/index.d.ts",
-      "import": "./dist/shell/index.js"
-    },
-    "./shell/workbench": {
-      "types": "./dist/shell/workbench.d.ts",
-      "import": "./dist/shell/workbench.js"
-    },
-    "./shell/shell-module": {
-      "types": "./dist/shell/shell-module.d.ts",
-      "import": "./dist/shell/shell-module.js"
-    },
-    "./shell/command-host": {
-      "types": "./dist/shell/command-host.d.ts",
-      "import": "./dist/shell/command-host.js"
-    },
-    "./shell/keys": {
-      "types": "./dist/shell/keys.d.ts",
-      "import": "./dist/shell/keys.js"
-    },
-    "./shell/commands": {
-      "types": "./dist/shell/commands.d.ts",
-      "import": "./dist/shell/commands.js"
-    },
-    "./shell/window-manager": {
-      "types": "./dist/shell/window-manager.d.ts",
-      "import": "./dist/shell/window-manager.js"
-    },
-    "./shell/app-directory": {
-      "types": "./dist/shell/app-directory.d.ts",
-      "import": "./dist/shell/app-directory.js"
-    },
-    "./shell/workbench-directory": {
-      "types": "./dist/shell/workbench-directory.d.ts",
-      "import": "./dist/shell/workbench-directory.js"
-    },
     "./app-storage": {
       "types": "./dist/app-storage.d.ts",
       "import": "./dist/app-storage.js"
@@ -124,6 +112,10 @@
       "types": "./dist/mcp.d.ts",
       "import": "./dist/mcp.js"
     },
+    "./workflows": {
+      "types": "./dist/workflows.d.ts",
+      "import": "./dist/workflows.js"
+    },
     "./files": {
       "types": "./dist/files.d.ts",
       "import": "./dist/files.js"
@@ -239,46 +231,63 @@
     "./testing/worker": {
       "types": "./dist/testing/worker.d.ts",
       "import": "./dist/testing/worker.js"
+    },
+    "./machine-link": {
+      "types": "./dist/machine-link/index.d.ts",
+      "import": "./dist/machine-link/index.js"
+    },
+    "./machine-link/workers": {
+      "types": "./dist/machine-link/workers.d.ts",
+      "import": "./dist/machine-link/workers.js"
     }
   },
   "dependencies": {
-    "@fungi.computer/agar": "0.2.0",
-    "@fungi.computer/burrow": "0.0.2",
-    "@fungi.computer/cairn": "0.0.1",
-    "@fungi.computer/ear-tag": "0.0.2",
-    "@fungi.computer/caps": "0.1.0",
-    "@fungi.computer/carrier": "0.0.1",
-    "@fungi.computer/forage": "0.1.0",
-    "@fungi.computer/gills": "0.1.0",
-    "@fungi.computer/knapsack": "0.1.0",
-    "@fungi.computer/mycelium": "0.1.0",
-    "@fungi.computer/puffball": "0.1.0",
-    "@fungi.computer/sigils": "0.1.0",
-    "@fungi.computer/sprite": "0.1.0",
-    "@fungi.computer/sprite-zdog": "0.1.0",
-    "@fungi.computer/watchdog": "0.0.1",
-    "@fungi.computer/whistle": "0.0.2",
+    "@cfworker/json-schema": "4.1.1",
+    "@earendil-works/pi-ai": "1.3.0",
+    "@fungi.computer/agar": "0.3.0",
+    "@fungi.computer/bird-dog": "0.1.0",
+    "@fungi.computer/braid": "0.2.0",
+    "@fungi.computer/burrow": "0.1.0",
+    "@fungi.computer/cairn": "0.1.0",
+    "@fungi.computer/capnweb": "0.12.0",
+    "@fungi.computer/caps": "0.2.0",
+    "@fungi.computer/carrier": "0.1.0",
+    "@fungi.computer/computer": "0.2.0",
+    "@fungi.computer/computer-contract": "0.0.1",
+    "@fungi.computer/darkroom": "0.2.0",
+    "@fungi.computer/ear-tag": "0.1.0",
+    "@fungi.computer/forage": "0.2.0",
+    "@fungi.computer/gills": "0.2.0",
+    "@fungi.computer/knapsack": "0.2.0",
+    "@fungi.computer/mycelium": "0.2.0",
+    "@fungi.computer/nacre": "0.0.1",
+    "@fungi.computer/puffball": "0.2.0",
+    "@fungi.computer/seam": "0.1.0",
+    "@fungi.computer/shiitake": "0.3.0",
+    "@fungi.computer/shiitake-extensions": "0.1.0",
+    "@fungi.computer/sigils": "0.2.0",
+    "@fungi.computer/sprite": "0.2.0",
+    "@fungi.computer/sprite-zdog": "0.2.0",
+    "@fungi.computer/veil": "0.2.0",
+    "@fungi.computer/watchdog": "0.1.0",
+    "@fungi.computer/whistle": "0.1.0",
+    "@fungi.computer/workflows-wire": "0.2.0",
+    "@fungi.computer/zookeeper": "0.0.1",
     "@modelcontextprotocol/server": "2.0.0",
     "@pnpm/lockfile.fs": "1100.2.13",
     "@pnpm/lockfile.pruner": "1100.0.27",
-    "@fungi.computer/capnweb": "0.12.0",
     "effect": "4.0.2",
     "esbuild": "0.28.2",
+    "eventsource": "5.1.1",
     "fast-json-stable-stringify": "2.1.0",
     "hono": "4.13.5",
     "jose": "6.2.11",
     "mime": "4.1.0",
-    "path-to-regexp": "8.4.2",
-    "zod": "4.4.3",
     "oauth4webapi": "3.8.8",
-    "@cfworker/json-schema": "4.1.1",
-    "@earendil-works/pi-ai": "0.99.2",
-    "@fungi.computer/braid": "0.1.0",
-    "@fungi.computer/computer": "0.1.0",
-    "@fungi.computer/darkroom": "0.1.0",
-    "@fungi.computer/shiitake": "0.2.0",
-    "@fungi.computer/veil": "0.1.0",
-    "@fungi.computer/workflows-wire": "0.1.0"
+    "path-to-regexp": "8.4.2",
+    "strip-ansi": "7.2.0",
+    "parse5": "8.0.1",
+    "zod": "4.4.3"
   },
   "license": "MIT",
   "peerDependencies": {
@@ -294,12 +303,5 @@
   "repository": {
     "type": "git",
     "url": "git+https://github.com/fungi-computer/oyster.git"
-  },
-  "fungi": {
-    "build": {
-      "typescript": [
-        "src/shell/tsconfig.build.json"
-      ]
-    }
   }
 }

package/dist/installation-consent.d.ts

@@ -1,81 +0,0 @@
-import * as Schema from "effect/Schema";
-/** Private view projection. The installation reducer decodes all submitted grants. */
-export declare const installationConsentSchema: Schema.Struct<{
-    readonly installationId: Schema.String;
-    readonly appId: Schema.String;
-    readonly appName: Schema.String;
-    readonly authorityVersion: Schema.Int;
-    readonly artifactDigest: Schema.refine<import("@fungi.computer/puffball").Sha256Digest, Schema.String>;
-    readonly capabilities: Schema.$Array<Schema.Struct<{
-        readonly request: Schema.Struct<{
-            readonly capability: Schema.Literals<readonly ["agent.list", "agent.manage", "agent.rename", "agent.avatar", "agent.toolPolicy", "agent.read", "agent.send", "computer.list", "computer.readFile", "computer.writeFile", "computer.execute", "llm.generation", "media.generation", "games:servers", "git.repository", "apps.open", "apps.call", "app.storage", "app.events.emit", "team.workbenchHost", "marketplace.browse", "marketplace.purchase", "workflow.run", "workflow.publish", "workflow.arm", "world", "channels.read", "channels.personal.manage"]>;
-            readonly operations: Schema.$Array<Schema.String>;
-            readonly resources: Schema.Codec<Schema.Json, Schema.Json, never, never>;
-        }>;
-        readonly approved: Schema.Boolean;
-        readonly description: Schema.String;
-        readonly scope: Schema.String;
-    }>>;
-}>;
-/** Human consent copy; these labels never decide authority or operation mappings. */
-export declare const capabilityLabels: {
-    "agent.list": string;
-    "agent.manage": string;
-    "agent.rename": string;
-    "agent.avatar": string;
-    "agent.toolPolicy": string;
-    "agent.read": string;
-    "agent.send": string;
-    "computer.list": string;
-    "computer.readFile": string;
-    "computer.writeFile": string;
-    "computer.execute": string;
-    "llm.generation": string;
-    "media.generation": string;
-    "games:servers": string;
-    "git.repository": string;
-    "apps.open": string;
-    "apps.call": string;
-    "app.storage": string;
-    "app.events.emit": string;
-    "team.workbenchHost": string;
-    "marketplace.browse": string;
-    "marketplace.purchase": string;
-    "workflow.run": string;
-    "workflow.publish": string;
-    "workflow.arm": string;
-    world: string;
-    "channels.read": string;
-    "channels.personal.manage": string;
-};
-/** Plain descriptions of the declared capability; copy never infers extra access. */
-export declare const capabilityDescriptions: {
-    "agent.list": string;
-    "agent.manage": string;
-    "agent.rename": string;
-    "agent.avatar": string;
-    "agent.toolPolicy": string;
-    "agent.read": string;
-    "agent.send": string;
-    "computer.list": string;
-    "computer.readFile": string;
-    "computer.writeFile": string;
-    "computer.execute": string;
-    "llm.generation": string;
-    "media.generation": string;
-    "games:servers": string;
-    "git.repository": string;
-    "apps.open": string;
-    "apps.call": string;
-    "app.storage": string;
-    "app.events.emit": string;
-    "team.workbenchHost": string;
-    "marketplace.browse": string;
-    "marketplace.purchase": string;
-    "workflow.run": string;
-    "workflow.publish": string;
-    "workflow.arm": string;
-    world: string;
-    "channels.read": string;
-    "channels.personal.manage": string;
-};

package/dist/installation-consent.js

@@ -1,84 +0,0 @@
-import * as Schema from "effect/Schema";
-import { sha256DigestSchema } from "@fungi.computer/puffball/effect";
-import { appCapabilityIdSchema, } from "@fungi.computer/puffball/app";
-/** Private view projection. The installation reducer decodes all submitted grants. */
-export const installationConsentSchema = Schema.Struct({
-    installationId: Schema.String,
-    appId: Schema.String,
-    appName: Schema.String,
-    authorityVersion: Schema.Int,
-    artifactDigest: sha256DigestSchema,
-    capabilities: Schema.Array(Schema.Struct({
-        request: Schema.Struct({
-            capability: appCapabilityIdSchema,
-            operations: Schema.Array(Schema.String),
-            // Preserve the owner's resource selector as JSON; this view cannot mint authority.
-            resources: Schema.Json,
-        }),
-        approved: Schema.Boolean,
-        description: Schema.String,
-        scope: Schema.String,
-    })),
-});
-/** Human consent copy; these labels never decide authority or operation mappings. */
-export const capabilityLabels = {
-    "agent.list": "List Agents",
-    "agent.manage": "Create and manage Agents",
-    "agent.rename": "Rename Agents",
-    "agent.avatar": "Change Agent avatars",
-    "agent.toolPolicy": "Allow Agents to use Apps",
-    "agent.read": "Read Agent conversations",
-    "agent.send": "Send messages to Agents",
-    "computer.list": "List Computers",
-    "computer.readFile": "Read files",
-    "computer.writeFile": "Change files",
-    "computer.execute": "Run commands",
-    "llm.generation": "Generate text",
-    "media.generation": "Generate images and videos",
-    "games:servers": "Use game servers",
-    "git.repository": "Use Git repositories",
-    "apps.open": "Open Apps",
-    "apps.call": "Call declared App methods",
-    "app.storage": "Store App data",
-    "app.events.emit": "Send events",
-    "team.workbenchHost": "Arrange the workbench",
-    "marketplace.browse": "Browse the marketplace",
-    "marketplace.purchase": "Purchase from the marketplace",
-    "workflow.run": "Run Workflows",
-    "workflow.publish": "Publish Workflows",
-    "workflow.arm": "Arm Workflow triggers",
-    world: "Connect to external services",
-    "channels.read": "Read channels",
-    "channels.personal.manage": "Manage personal channels",
-};
-/** Plain descriptions of the declared capability; copy never infers extra access. */
-export const capabilityDescriptions = {
-    "agent.list": "see which Agents are available.",
-    "agent.manage": "create Agents and manage their sessions.",
-    "agent.rename": "rename Agents you created.",
-    "agent.avatar": "change the avatars of Agents you created.",
-    "agent.toolPolicy": "approve Agents to use your installed Apps.",
-    "agent.read": "read Agent conversations.",
-    "agent.send": "send messages to Agents.",
-    "computer.list": "see which Computers are available.",
-    "computer.readFile": "read files on your Computers.",
-    "computer.writeFile": "create and change files on your Computers.",
-    "computer.execute": "run commands on your Computers.",
-    "llm.generation": "ask AI models to generate text.",
-    "media.generation": "ask AI models to generate images and videos.",
-    "games:servers": "connect to game servers.",
-    "git.repository": "work with Git repositories.",
-    "apps.open": "open other Apps.",
-    "apps.call": "call the listed methods in other Apps as you. Renamed target methods need approval again.",
-    "app.storage": "save its App data on your Oyster.",
-    "app.events.emit": "tell your Workflows when something happens.",
-    "team.workbenchHost": "arrange Apps on your workbench.",
-    "marketplace.browse": "browse Apps in the marketplace.",
-    "marketplace.purchase": "purchase Apps from the marketplace.",
-    "workflow.run": "start Workflows.",
-    "workflow.publish": "publish Workflow definitions.",
-    "workflow.arm": "enable Workflow triggers.",
-    world: "connect to external services.",
-    "channels.read": "read messages from channels.",
-    "channels.personal.manage": "manage personal channels.",
-};