@fungi.computer/oyster 0.3.2 → 0.4.0

package/dist/standalone/computer-control.d.ts

@@ -0,0 +1,4 @@
+import type { ComputerControlPort } from "../mcp.js";
+import type { StandaloneRegistryRpc } from "./registry.js";
+/** MCP control speaks to the same owner-admitted durable fleet as HTTP. */
+export declare function standaloneComputerControl(registry: Pick<StandaloneRegistryRpc, "computerFleet">, memberId: string): ComputerControlPort;

package/dist/standalone/computer-control.js

@@ -0,0 +1,62 @@
+import { z } from "zod";
+import { computerStateSchema, } from "@fungi.computer/computer/fleet";
+import { teamComputerDirectorySchema } from "@fungi.computer/nacre/workbench";
+const inventoryComputer = z.strictObject({
+    computerId: z.string(),
+    name: z.string(),
+    createdAt: z.number(),
+    updatedAt: z.number(),
+});
+const inventoryPage = z.strictObject({
+    computers: z.array(inventoryComputer),
+    nextOffset: z.number().int().nonnegative().nullable(),
+});
+const inventoryError = z.strictObject({
+    error: z.string(),
+});
+/** MCP control speaks to the same owner-admitted durable fleet as HTTP. */
+export function standaloneComputerControl(registry, memberId) {
+    const fleet = (request) => registry.computerFleet(memberId, request);
+    const available = (result) => {
+        if (result === null || inventoryError.safeParse(result).success)
+            throw new Error("Computer fleet refused the request");
+        return result;
+    };
+    return {
+        list: async (page) => teamComputerDirectorySchema.parse(inventoryPage.parse(available(await fleet({ operation: "list", page })))),
+        state: async (computerId) => computerStateSchema.parse(available(await fleet({ operation: "state", computerId }))),
+        start: async (computerId) => computerStateSchema.parse(available(await fleet({ operation: "start", computerId }))),
+        create: async (input) => {
+            let result;
+            try {
+                result = await fleet({ operation: "create", request: input });
+            }
+            catch {
+                // Creation may have persisted before the RPC failed. Surface its
+                // identity so the caller can retry, never silently mint another one.
+                return { kind: "uncertain" };
+            }
+            if (result === null)
+                return { kind: "denied" };
+            const error = inventoryError.safeParse(result);
+            if (error.success) {
+                switch (error.data.error) {
+                    case "owner_required":
+                        return { kind: "denied" };
+                    case "name_taken":
+                    case "request_conflict":
+                        return { kind: "conflict" };
+                    case "partial_init":
+                        return { kind: "uncertain" };
+                    default:
+                        return { kind: "invalid" };
+                }
+            }
+            const computer = inventoryComputer.parse(result);
+            return {
+                kind: "created",
+                computer: { computerId: computer.computerId, name: computer.name },
+            };
+        },
+    };
+}

package/dist/standalone/computer-fleet.d.ts

@@ -23,6 +23,7 @@ export declare const standaloneFleetRequestSchema: z.ZodDiscriminatedUnion<[z.Zo
         resolve: "resolve";
         select: "select";
         start: "start";
+        state: "state";
     }>;
     computerId: z.ZodString;
 }, z.core.$strict>, z.ZodObject<{

package/dist/standalone/computer-fleet.js

@@ -15,7 +15,7 @@ export const standaloneFleetRequestSchema = z.discriminatedUnion("operation", [
         page: computerPageSchema,
     }),
     z.strictObject({
-        operation: z.enum(["read", "resolve", "start", "select"]),
+        operation: z.enum(["read", "resolve", "state", "start", "select"]),
         computerId: fleetComputerId,
     }),
     z.strictObject({

package/dist/standalone/computer.d.ts

@@ -4,7 +4,8 @@ import { type PreviewSelector } from "./preview.js";
 import { type StandaloneTenancyEnv } from "./tenancy.js";
 import * as z from "zod";
 import { computerProcessSchema, computerToolResultSchema, readOutputSchema } from "@fungi.computer/computer-contract";
-import { ComputerDO as NativeComputerDO, type AttachedBackend, type ComputerEnv } from "@fungi.computer/computer";
+import { ComputerDO as NativeComputerDO, type AttachedBackend, type ComputerEnv, type ComputerFilesRpc } from "@fungi.computer/computer";
+import { patchInputSchema, patchOutputSchema } from "@fungi.computer/knapsack/files-patch";
 import { listOutputSchema, writeOutputSchema, mkdirOutputSchema, computerPortsOutputSchema, computerPortOutputSchema, computerPortRemovalOutputSchema, processListOutputSchema, processKillOutputSchema, computerOperationResultSchema, type ComputerExecutionHostHooks, type ComputerValue } from "@fungi.computer/computer-contract";
 import { type WorkflowGitCredential, type WorkflowGitPassGrant } from "@fungi.computer/braid/runtime";
 import { type ComputerAction, type ComputerGrant } from "@fungi.computer/computer/fleet";
@@ -66,8 +67,13 @@ export type StandaloneWorkflowGitIssuer = Readonly<{
 export type ComputerFetch = {
     fetch(request: Request): Promise<Response>;
 };
+/** The additional native doors an attached Agent may use on this Computer. */
+export type StandaloneAgentComputerRpc = ComputerFilesRpc & Readonly<{
+    tool(authority: ComputerGrant, capabilityId: string, input: ComputerValue): Promise<StandaloneComputerResult>;
+    filePatch(authority: ComputerGrant, input: z.output<typeof patchInputSchema>): Promise<z.output<typeof patchOutputSchema>>;
+}>;
 /** Durable workspace and existing backings, with fleet checks at native acceptance. */
-export declare class ComputerDO extends NativeComputerDO implements ComputerFetch {
+export declare class ComputerDO extends NativeComputerDO implements ComputerFetch, StandaloneAgentComputerRpc {
     #private;
     private readonly previewBindings;
     constructor(state: DurableObjectState, previewBindings: StandaloneComputerOwnerEnv);
@@ -77,6 +83,17 @@ export declare class ComputerDO extends NativeComputerDO implements ComputerFetc
     startHostedComputer(authority: ComputerGrant): Promise<{
         state: "running";
     }>;
+    /** Observe an admitted fleet Computer without starting its backend. */
+    readHostedComputerState(authority: ComputerGrant): Promise<{
+        state: "queued";
+        position: number;
+    } | {
+        state: "running" | "starting";
+        position?: never;
+    } | {
+        state: "running" | "sleeping";
+        position?: never;
+    }>;
     /** A read-only preflight over the maintained hosted-route selector. */
     buildBackend(): OysterBuildBackend;
     /**
@@ -120,6 +137,8 @@ export declare class ComputerDO extends NativeComputerDO implements ComputerFetc
     /** Binary files share the same native filesystem as commands and PTYs. */
     fileRead(authority: ComputerGrant, path: string): Promise<Uint8Array | null>;
     fileWrite(authority: ComputerGrant, path: string, bytes: Uint8Array): Promise<void>;
+    /** Patch is handled by the Computer's pinned native engine, not by the Agent. */
+    filePatch(authority: ComputerGrant, input: z.output<typeof patchInputSchema>): Promise<z.output<typeof patchOutputSchema>>;
     fileReplace(authority: ComputerGrant, path: string, expectedContent: string, content: string): Promise<{
         path: string;
         bytes: number;

package/dist/standalone/computer.js

@@ -11,6 +11,7 @@ import { Base64 } from "effect/encoding";
 import * as z from "zod";
 import { ComputerPortConflictError, computerByteReadReplySchema, computerProcessSchema, installationProcessScope, processStartInputSchema, processStartToolInputSchema, computerCapabilities, computerToolResultSchema, readOutputSchema, } from "@fungi.computer/computer-contract";
 import { ComputerDO as NativeComputerDO, ComputerOperationConflictError, } from "@fungi.computer/computer";
+import { patchInputSchema, patchOutputSchema, } from "@fungi.computer/knapsack/files-patch";
 import { ComputerFileConflict, computerExecutionRequestSchema, computerValueSchema, computerPortInputSchema, listInputSchema, listOutputSchema, readBytesInputSchema, writeInputSchema, replaceInputSchema, writeOutputSchema, mkdirOutputSchema, computerPortsOutputSchema, computerPortOutputSchema, computerPortRemovalOutputSchema, processListOutputSchema, processKillOutputSchema, computerOperationResultSchema, mintComputerRequestId, processIdInputSchema, } from "@fungi.computer/computer-contract";
 import { workflowGitExecutionEnvironment, workflowGitPassGrantSchema, } from "@fungi.computer/braid/runtime";
 import { checkComputerGrant, computerActionSchema, computerGrantSchema, createFleetBacking, FleetGrantRefused, FleetLifecycle, } from "@fungi.computer/computer/fleet";
@@ -173,6 +174,11 @@ export class ComputerDO extends NativeComputerDO {
             await run();
         });
     }
+    /** Observe an admitted fleet Computer without starting its backend. */
+    readHostedComputerState(authority) {
+        this.#accept(authority, "start");
+        return this.#fleetLifecycle().readComputerState();
+    }
     #previewGrant(ownerId) {
         return {
             computerId: this.#id(),
@@ -455,6 +461,12 @@ export class ComputerDO extends NativeComputerDO {
             this.#accept(authority, "files.writeBytes");
         });
     }
+    /** Patch is handled by the Computer's pinned native engine, not by the Agent. */
+    async filePatch(authority, input) {
+        return this.applyPatchAfterAcceptance(input, () => {
+            this.#accept(authority, "files.edit");
+        });
+    }
     async fileReplace(authority, path, expectedContent, content) {
         try {
             const result = await this.replaceFileIfUnchangedAfterAcceptance({ path, expectedContent, content }, () => {

package/dist/standalone/machine-link.d.ts

@@ -265,6 +265,7 @@ export declare function standaloneMachineLinkRoutes(env: StandaloneMachineLinkEn
 /** One device's link; directory, credentials and owner state remain elsewhere. */
 export declare class MachineLinkDO extends DurableObject<StandaloneMachineLinkEnv> {
     private readonly link;
+    alarm(): Promise<void>;
     fetch(request: Request): Promise<Response>;
     deliver(id: MachineLinkIdentity, caller: MachineLinkCaller, agentId: string, envelope: PostEnvelope): Promise<PostDeliveryResult>;
     operation(id: MachineLinkIdentity, caller: MachineLinkCaller, agentId: string, operation: MachineAgentOperation): Promise<import("effect/Schema").Json>;
@@ -276,6 +277,15 @@ export declare class MachineLinkDO extends DurableObject<StandaloneMachineLinkEn
     readErasure(): Promise<{
         erased: boolean;
     }>;
+    deadLetters(id: MachineLinkIdentity, afterKey?: string): Promise<Readonly<{
+        letters: readonly Readonly<{
+            key: string;
+            reason: "refused" | "exhausted" | "expired";
+            envelope: PostEnvelope;
+            attempts: number;
+        }>[];
+        nextCursor: string | undefined;
+    }>>;
     webSocketMessage(socket: WebSocket, message: string | ArrayBuffer): Promise<void>;
     webSocketClose(socket: WebSocket, code: number, reason: string): void;
     webSocketError(socket: WebSocket): void;

package/dist/standalone/machine-link.js

@@ -176,6 +176,9 @@ export class MachineLinkDO extends DurableObject {
             console.error(operation, cause);
         },
     });
+    alarm() {
+        return this.link.alarm();
+    }
     fetch(request) {
         return this.link.fetch(request);
     }
@@ -197,6 +200,9 @@ export class MachineLinkDO extends DurableObject {
     readErasure() {
         return this.link.readErasure();
     }
+    deadLetters(id, afterKey) {
+        return this.link.deadLetters(id, afterKey);
+    }
     webSocketMessage(socket, message) {
         return this.link.webSocketMessage(socket, message);
     }

package/dist/standalone/registry.d.ts

@@ -61,6 +61,15 @@ export declare abstract class StandaloneRegistry extends OysterRegistry implemen
         }>[];
         readonly nextOffset: number | null;
     } | ({
+        state: "queued";
+        position: number;
+    } & Disposable) | ({
+        state: "running" | "starting";
+        position?: never | undefined;
+    } & Disposable) | ({
+        state: "running" | "sleeping";
+        position?: never | undefined;
+    } & Disposable) | ({
         state: "running";
     } & Disposable) | {
         error: string;

package/dist/standalone/registry.js

@@ -129,6 +129,15 @@ export class StandaloneRegistry extends OysterRegistry {
                 await this.#fleetStorage.put("selected-computer", input.computerId);
                 return computer;
             }
+            case "state":
+                if (this.#computers.read(input.computerId) === null)
+                    return null;
+                return this.#env.COMPUTER.getByName(input.computerId).readHostedComputerState({
+                    computerId: input.computerId,
+                    actions: new Set(["start"]),
+                    expiresAt: Date.now() + 60_000,
+                    provenance: { actor: memberId },
+                });
             case "start":
                 if (this.#computers.read(input.computerId) === null)
                     return null;

package/dist/standalone/worker.js

@@ -5,6 +5,8 @@
  */
 import { createOysterGitWorker, createOysterGitMcpOwner, oysterGitRoot, } from "../workers-git.js";
 import { defaultTenant, tenantScope } from "../tenant.js";
+import { oysterPrincipalIsOwner } from "../host.js";
+import { standaloneComputerControl } from "./computer-control.js";
 import { onBoxVmIngress } from "@fungi.computer/computer";
 import { WorkerEntrypoint } from "cloudflare:workers";
 import { installationWorkerEntrypoint } from "../installation-execution.js";
@@ -28,6 +30,8 @@ import { Hono } from "hono";
 import { HTTPException } from "hono/http-exception";
 import { standaloneBuildRoutes } from "./builds.js";
 import { standaloneComputerFleetRoutes, standaloneComputerSelection, } from "./computer-fleet.js";
+import { standaloneAgentComputerRoutes } from "./agent-computers.js";
+import { agentDirectoryForScope } from "./agent-directory.js";
 import { serveOysterComputerEgress, } from "./computer-egress.js";
 import { appSourceOwnerRoutes, } from "./app-source.js";
 export { StandaloneGraphWorkflow } from "./workflows.js";
@@ -65,6 +69,9 @@ const standaloneRoot = (selectComputer) => {
         homeInstallationId: (env) => env.OYSTER_HOME_INSTALLATION,
         agents: standaloneAgents,
         workflows: standaloneWorkflowControl,
+        computerControl: (env, scope) => (principal) => oysterPrincipalIsOwner(principal)
+            ? standaloneComputerControl(tenantRegistry(env, scope), principal.actor.memberId)
+            : null,
         workspace: async (env, keysLive, scope, request) => standaloneWorkspace(env, keysLive, await selectComputer(tenantRegistry(env, scope), request)),
         capabilities: (env, workspace, keysLive) => [
             ...standaloneComputerCapabilities(env, workspace, keysLive),
@@ -97,6 +104,11 @@ const standaloneRoot = (selectComputer) => {
         ownerRoutes: (env, scope) => appSourceOwnerRoutes(env, scope)
             .route("/", standaloneBuildRoutes(() => tenantRegistry(env, scope)))
             .route("/", standaloneComputerFleetRoutes(() => tenantRegistry(env, scope)))
+            .route("/", standaloneAgentComputerRoutes({
+            attach: (principal, command) => agentDirectoryForScope(env, scope).attachComputer(command, principal, scope.tenantId),
+            detach: (principal, command) => agentDirectoryForScope(env, scope).detachComputer(command, principal, scope.tenantId),
+            read: (principal, agentId) => agentDirectoryForScope(env, scope).readAgentComputers(agentId, principal, scope.tenantId),
+        }))
             .route("/", standaloneWorkflowWebhookControls(env, () => root.hostFor(env, scope))),
     });
     return root;

package/dist/standalone/workflow-binding.d.ts

@@ -72,10 +72,10 @@ export declare const workflowFrameMethods: {
                 readonly input: {
                     readonly [x: string]: S.Json;
                 };
+                readonly requestId: string;
                 readonly bindings: Record<string, string | {
                     kind: "team-source";
                 }>;
-                readonly requestId: string;
                 readonly definition: unknown;
                 readonly delivery?: {
                     readonly agentId: string;
@@ -86,10 +86,10 @@ export declare const workflowFrameMethods: {
                 readonly input: {
                     readonly [x: string]: S.Json;
                 };
+                readonly requestId: string;
                 readonly bindings: Record<string, string | {
                     kind: "team-source";
                 }>;
-                readonly requestId: string;
                 readonly definition: S.Json;
                 readonly published: {
                     workflowId: string;

package/dist/standalone/workflow-host.d.ts

@@ -103,7 +103,7 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                 authorityVersion: number;
                 declaredOperationsDigest: import("@fungi.computer/puffball").Sha256Digest;
                 approvedGrants: readonly Readonly<{
-                    capability: "approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
+                    capability: "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
                     capabilityApproved: true;
                     operations: readonly string[];
                     resources: "tenant-scope" | readonly Readonly<{
@@ -239,7 +239,7 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                 authorityVersion: number;
                 declaredOperationsDigest: import("@fungi.computer/puffball").Sha256Digest;
                 approvedGrants: readonly Readonly<{
-                    capability: "approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
+                    capability: "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
                     capabilityApproved: true;
                     operations: readonly string[];
                     resources: "tenant-scope" | readonly Readonly<{
@@ -325,7 +325,7 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                 authorityVersion: number;
                 declaredOperationsDigest: import("@fungi.computer/puffball").Sha256Digest;
                 approvedGrants: readonly Readonly<{
-                    capability: "approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
+                    capability: "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
                     capabilityApproved: true;
                     operations: readonly string[];
                     resources: "tenant-scope" | readonly Readonly<{
@@ -444,7 +444,7 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                     authorityVersion: number;
                     declaredOperationsDigest: import("@fungi.computer/puffball").Sha256Digest;
                     approvedGrants: readonly Readonly<{
-                        capability: "approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
+                        capability: "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
                         capabilityApproved: true;
                         operations: readonly string[];
                         resources: "tenant-scope" | readonly Readonly<{
@@ -544,7 +544,7 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                     authorityVersion: number;
                     declaredOperationsDigest: import("@fungi.computer/puffball").Sha256Digest;
                     approvedGrants: readonly Readonly<{
-                        capability: "approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
+                        capability: "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage";
                         capabilityApproved: true;
                         operations: readonly string[];
                         resources: "tenant-scope" | readonly Readonly<{
@@ -678,9 +678,9 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                     readonly values: {
                         readonly [x: string]: import("@fungi.computer/braid").Mapping;
                     };
+                    readonly id: string;
                     readonly kind: "app";
                     readonly method: string;
-                    readonly id: string;
                     readonly app: string;
                     readonly methodDigest: string;
                     readonly retry?: {
@@ -696,8 +696,8 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                         access: "read";
                     } | undefined;
                 } | {
-                    readonly kind: "review";
                     readonly id: string;
+                    readonly kind: "review";
                     readonly timeout: number;
                     readonly title: string;
                     readonly reviewers: "runner" | "owners";
@@ -775,9 +775,9 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                             readonly values: {
                                 readonly [x: string]: import("@fungi.computer/braid").Mapping;
                             };
+                            readonly id: string;
                             readonly kind: "app";
                             readonly method: string;
-                            readonly id: string;
                             readonly app: string;
                             readonly methodDigest: string;
                             readonly retry?: {
@@ -793,8 +793,8 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                                 access: "read";
                             } | undefined;
                         } | {
-                            readonly kind: "review";
                             readonly id: string;
+                            readonly kind: "review";
                             readonly timeout: number;
                             readonly title: string;
                             readonly reviewers: "runner" | "owners";
@@ -900,9 +900,9 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                             readonly input: {
                                 readonly [x: string]: S.Json;
                             };
+                            readonly description: string;
                             readonly digest: string;
                             readonly approval: "queue" | "none" | "simulate";
-                            readonly description: string;
                             readonly effect: "read" | "write" | "external";
                             readonly requires: readonly string[];
                             readonly pending?: true | undefined;
@@ -935,10 +935,10 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                 readonly input: {
                     readonly [x: string]: S.Json;
                 };
+                readonly description: string;
                 readonly method: string;
                 readonly installationId: string;
                 readonly approval: "queue" | "none" | "simulate";
-                readonly description: string;
                 readonly effect: "read" | "write" | "external";
                 readonly requires: readonly string[];
                 readonly app: string;

package/dist/standalone/workflows.d.ts

@@ -295,9 +295,9 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                     readonly values: {
                         readonly [x: string]: import("@fungi.computer/braid").Mapping;
                     };
+                    readonly id: string;
                     readonly kind: "app";
                     readonly method: string;
-                    readonly id: string;
                     readonly app: string;
                     readonly methodDigest: string;
                     readonly retry?: {
@@ -313,8 +313,8 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                         access: "read";
                     } | undefined;
                 } | {
-                    readonly kind: "review";
                     readonly id: string;
+                    readonly kind: "review";
                     readonly timeout: number;
                     readonly title: string;
                     readonly reviewers: "runner" | "owners";
@@ -392,9 +392,9 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                             readonly values: {
                                 readonly [x: string]: import("@fungi.computer/braid").Mapping;
                             };
+                            readonly id: string;
                             readonly kind: "app";
                             readonly method: string;
-                            readonly id: string;
                             readonly app: string;
                             readonly methodDigest: string;
                             readonly retry?: {
@@ -410,8 +410,8 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                                 access: "read";
                             } | undefined;
                         } | {
-                            readonly kind: "review";
                             readonly id: string;
+                            readonly kind: "review";
                             readonly timeout: number;
                             readonly title: string;
                             readonly reviewers: "runner" | "owners";
@@ -517,9 +517,9 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                             readonly input: {
                                 readonly [x: string]: S.Json;
                             };
+                            readonly description: string;
                             readonly digest: string;
                             readonly approval: "queue" | "none" | "simulate";
-                            readonly description: string;
                             readonly effect: "read" | "write" | "external";
                             readonly requires: readonly string[];
                             readonly pending?: true | undefined;
@@ -552,10 +552,10 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                 readonly input: {
                     readonly [x: string]: S.Json;
                 };
+                readonly description: string;
                 readonly method: string;
                 readonly installationId: string;
                 readonly approval: "queue" | "none" | "simulate";
-                readonly description: string;
                 readonly effect: "read" | "write" | "external";
                 readonly requires: readonly string[];
                 readonly app: string;
@@ -625,17 +625,23 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
         runId: string;
         planDigest: string;
         title: string;
-        outcome: "terminal" | "cancelled" | "active" | null;
+        outcome: "active" | "terminal" | "cancelled" | null;
         events: readonly {
             readonly runId: string;
-            readonly nodeId: string;
             readonly state: "skipped" | "queued" | "running" | "failed" | "complete" | "waiting";
+            readonly nodeId: string;
             readonly iteration: string;
             readonly attempt: number;
             readonly output?: {
                 readonly [x: string]: S.Json;
             } | undefined;
             readonly refusal?: string | undefined;
+            readonly position?: readonly {
+                readonly node: string;
+                readonly loop: "map" | "repeat";
+                readonly index: number;
+                readonly count: number;
+            }[] | undefined;
             readonly row?: {
                 readonly id: string;
                 readonly title: string;
@@ -658,12 +664,6 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
             } | undefined;
             readonly graphId?: string | undefined;
             readonly poll?: number | undefined;
-            readonly position?: readonly {
-                readonly node: string;
-                readonly loop: "map" | "repeat";
-                readonly index: number;
-                readonly count: number;
-            }[] | undefined;
             readonly recordedAt?: number | undefined;
             readonly durationMs?: number | undefined;
             readonly costMilliunits?: number | undefined;
@@ -716,17 +716,23 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
         runId: string;
         planDigest: string;
         title: string;
-        outcome: "terminal" | "cancelled" | "active" | null;
+        outcome: "active" | "terminal" | "cancelled" | null;
         events: readonly {
             readonly runId: string;
-            readonly nodeId: string;
             readonly state: "skipped" | "queued" | "running" | "failed" | "complete" | "waiting";
+            readonly nodeId: string;
             readonly iteration: string;
             readonly attempt: number;
             readonly output?: {
                 readonly [x: string]: S.Json;
             } | undefined;
             readonly refusal?: string | undefined;
+            readonly position?: readonly {
+                readonly node: string;
+                readonly loop: "map" | "repeat";
+                readonly index: number;
+                readonly count: number;
+            }[] | undefined;
             readonly row?: {
                 readonly id: string;
                 readonly title: string;
@@ -749,12 +755,6 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
             } | undefined;
             readonly graphId?: string | undefined;
             readonly poll?: number | undefined;
-            readonly position?: readonly {
-                readonly node: string;
-                readonly loop: "map" | "repeat";
-                readonly index: number;
-                readonly count: number;
-            }[] | undefined;
             readonly recordedAt?: number | undefined;
             readonly durationMs?: number | undefined;
             readonly costMilliunits?: number | undefined;

package/dist/storage-frame.d.ts

@@ -21,7 +21,7 @@ export declare const storageFrameMethods: {
                 };
             } | {
                 readonly kind: "rejected";
-                readonly code: "unavailable" | "invalid" | "conflict" | "undeclared_key" | "scope_not_declared" | "owner_required" | "too_large" | "quota_exceeded";
+                readonly code: "unavailable" | "conflict" | "invalid" | "undeclared_key" | "scope_not_declared" | "owner_required" | "too_large" | "quota_exceeded";
             };
             requiredOperations: () => string[];
         };
@@ -39,7 +39,7 @@ export declare const storageFrameMethods: {
                 };
             } | {
                 readonly kind: "rejected";
-                readonly code: "unavailable" | "invalid" | "conflict" | "undeclared_key" | "scope_not_declared" | "owner_required" | "too_large" | "quota_exceeded";
+                readonly code: "unavailable" | "conflict" | "invalid" | "undeclared_key" | "scope_not_declared" | "owner_required" | "too_large" | "quota_exceeded";
             };
             requiredOperations: () => string[];
         };
@@ -56,7 +56,7 @@ export declare const storageFrameMethods: {
                 };
             } | {
                 readonly kind: "rejected";
-                readonly code: "unavailable" | "invalid" | "conflict" | "undeclared_key" | "scope_not_declared" | "owner_required" | "too_large" | "quota_exceeded";
+                readonly code: "unavailable" | "conflict" | "invalid" | "undeclared_key" | "scope_not_declared" | "owner_required" | "too_large" | "quota_exceeded";
             };
             requiredOperations: () => string[];
         };

package/dist/workers-git.d.ts

@@ -191,6 +191,8 @@ export declare abstract class OysterGitInstance<Env extends OysterGitWorkerEnv =
  * `oysterGitRoot(options).hostFor`.
  */
 export type OysterGitWorkerOptions<Env extends OysterGitWorkerEnv> = Readonly<{
+    /** Host-owned fleet control, admitted on every invocation by its durable owner. */
+    computerControl?: (env: Env, scope: TenantScope) => NonNullable<OysterHost["computerControl"]>;
     /** Workflow controls supplied by the host's existing run owner. */
     workflows?: (env: Env, host: OysterGitWorkerHost) => NonNullable<OysterHost["workflows"]>;
     /** Resolve one host-selected tenant before authentication; unknown origins refuse.

package/dist/workers-git.js

@@ -1145,6 +1145,8 @@ export async function oysterGitWorkerHost(env, options, selected, request) {
         host = { ...host, pageScript: options.pageScript };
     if (options.workflows !== undefined)
         host = { ...host, workflows: options.workflows(env, host) };
+    if (options.computerControl !== undefined)
+        host = { ...host, computerControl: options.computerControl(env, scope) };
     if (options.homeInstallationId !== undefined)
         host = { ...host, homeInstallationId: options.homeInstallationId(env) };
     return host;