@fungi.computer/oyster 0.6.0 → 0.8.0

package/dist/standalone/worker.js

@@ -5,8 +5,9 @@
  */
 import { createOysterGitWorker, createOysterGitMcpOwner, oysterGitRoot, } from "../workers-git.js";
 import { defaultTenant, tenantScope } from "../tenant.js";
-import { oysterPrincipalIsOwner } from "../host.js";
+import { oysterPrincipalIsOwner } from "../authorization.js";
 import { standaloneComputerControl } from "./computer-control.js";
+import { standalonePermissionResources } from "./permission-resources.js";
 import { onBoxVmIngress } from "@fungi.computer/computer";
 import { WorkerEntrypoint } from "cloudflare:workers";
 import { installationWorkerEntrypoint } from "../installation-execution.js";
@@ -25,15 +26,13 @@ import { standalonePreviewRequest } from "./preview.js";
 import { standaloneMachineLinkRoutes, } from "./machine-link.js";
 export { MachineLinkDO } from "./machine-link.js";
 import { standaloneWorkflowControl } from "./workflow-control.js";
-import { standaloneWorkflowWebhookRoutes, standaloneWorkflowWebhookControls, } from "./workflow-webhooks.js";
-import { Hono } from "hono";
+import { standaloneWorkflowWebhookRoutes } from "./workflow-webhooks.js";
+import { serveDoors } from "../authorization.js";
+import { standaloneWorkerRoutes } from "./worker-routes.js";
 import { HTTPException } from "hono/http-exception";
-import { standaloneBuildRoutes } from "./builds.js";
-import { standaloneComputerFleetRoutes, standaloneComputerSelection, } from "./computer-fleet.js";
-import { standaloneAgentComputerRoutes } from "./agent-computers.js";
-import { agentDirectoryForScope } from "./agent-directory.js";
+import { standaloneOwnerRoutes } from "./owner-routes.js";
+import { standaloneComputerSelection } from "./computer-fleet.js";
 import { serveOysterComputerEgress, } from "./computer-egress.js";
-import { appSourceOwnerRoutes, } from "./app-source.js";
 export { StandaloneGraphWorkflow } from "./workflows.js";
 export { MediaOperationDO } from "@fungi.computer/darkroom/cloudflare";
 /** A tenant's registry: it owns that tenant's installations and App builds. */
@@ -68,13 +67,17 @@ const standaloneRoot = (selectComputer) => {
         }),
         homeInstallationId: (env) => env.OYSTER_HOME_INSTALLATION,
         agents: standaloneAgents,
+        permissionResources: (env, scope) => standalonePermissionResources({
+            // Acquire the registry stub only when owner inventory is requested.
+            computerFleet: (memberId, request) => tenantRegistry(env, scope).computerFleet(memberId, request),
+        }, standaloneAgents(env, scope)),
         workflows: standaloneWorkflowControl,
         computerControl: (env, scope) => (principal) => oysterPrincipalIsOwner(principal)
             ? standaloneComputerControl(tenantRegistry(env, scope), principal.actor.memberId)
             : null,
         workspace: async (env, keysLive, scope, request) => standaloneWorkspace(env, keysLive, await selectComputer(tenantRegistry(env, scope), request)),
-        capabilities: (env, workspace, keysLive) => [
-            ...standaloneComputerCapabilities(env, workspace, keysLive),
+        capabilities: (env, workspace) => [
+            ...standaloneComputerCapabilities(env, workspace),
             ...workersMedia(env, workspace),
         ],
         // A presented bearer names the library that issued it; only that
@@ -101,15 +104,7 @@ const standaloneRoot = (selectComputer) => {
                 };
         },
         // Operator source seeding and owner builds share the one owner guard.
-        ownerRoutes: (env, scope) => appSourceOwnerRoutes(env, scope)
-            .route("/", standaloneBuildRoutes(() => tenantRegistry(env, scope)))
-            .route("/", standaloneComputerFleetRoutes(() => tenantRegistry(env, scope)))
-            .route("/", standaloneAgentComputerRoutes({
-            attach: (principal, command) => agentDirectoryForScope(env, scope).attachComputer(command, principal, scope.tenantId),
-            detach: (principal, command) => agentDirectoryForScope(env, scope).detachComputer(command, principal, scope.tenantId),
-            read: (principal, agentId) => agentDirectoryForScope(env, scope).readAgentComputers(agentId, principal, scope.tenantId),
-        }))
-            .route("/", standaloneWorkflowWebhookControls(env, () => root.hostFor(env, scope))),
+        ownerRoutes: (env, scope) => standaloneOwnerRoutes(env, scope, () => root.hostFor(env, scope)),
     });
     return root;
 };
@@ -190,21 +185,18 @@ export default {
         const fetchOyster = oyster.fetch;
         if (fetchOyster === undefined)
             throw new Error("Oyster fetch handler is missing");
-        return new Hono()
-            .onError(standaloneWorkerErrorHandler)
-            .all("/local/mesh/join", () => standaloneMachineLinkRoutes(env)
-            .onError(standaloneWorkerErrorHandler)
-            .fetch(request, env, context))
-            .all("/api/teams/:teamId/local/mesh/:deviceId/connect", () => standaloneMachineLinkRoutes(env)
-            .onError(standaloneWorkerErrorHandler)
-            .fetch(request, env, context))
-            .route("/", standaloneWorkflowWebhookRoutes(env, async (incoming) => {
-            const admitted = await oysterRoot.admit(env, incoming);
-            return admitted === null
-                ? null
-                : oysterRoot.hostFor(env, admitted.scope);
-        }))
-            .all("*", () => fetchOyster(request, env, context))
-            .fetch(request, env, context);
+        // Doors before any tenant is selected; every other path reaches the
+        // tenant host's own declared table.
+        return serveDoors(standaloneWorkerRoutes({
+            machineLink: (incoming) => serveDoors(standaloneMachineLinkRoutes(env).onError(standaloneWorkerErrorHandler)).fetch(incoming, env, context),
+            workflowWebhooks: standaloneWorkflowWebhookRoutes(env, async (incoming) => {
+                const admitted = await oysterRoot.admit(env, incoming);
+                return admitted === null
+                    ? null
+                    : oysterRoot.hostFor(env, admitted.scope);
+            }),
+            // The tenant table answers the Worker's own incoming request.
+            tenant: async () => fetchOyster(request, env, context),
+        }).onError(standaloneWorkerErrorHandler)).fetch(request, env, context);
     },
 };

package/dist/standalone/workflow-binding.d.ts

@@ -48,7 +48,7 @@ export type TriggerArmTarget = z.output<typeof triggerArmTargetSchema>;
 export type ScheduleDisarmInput = z.output<typeof scheduleDisarmInputSchema>;
 export type EventDisarmInput = z.output<typeof eventDisarmInputSchema>;
 /** The frame gate needs only these run-owner calls; it re-decodes each reply with the method's owner schema. */
-export type WorkflowRunCalls = Pick<StandaloneWorkflowRunsBase, "admitWorkflowGit" | "catalog" | "start" | "status" | "cancel" | "answerReview" | "armSchedule" | "disarmSchedule" | "schedules" | "armEventTrigger" | "disarmEventTrigger" | "eventTriggers" | "runs">;
+export type WorkflowRunCalls = Pick<StandaloneWorkflowRunsBase, "admitWorkflowGit" | "catalog" | "start" | "status" | "cancel" | "answerReview" | "armSchedule" | "pauseSchedule" | "resumeSchedule" | "disarmSchedule" | "schedules" | "armEventTrigger" | "disarmEventTrigger" | "eventTriggers" | "runs">;
 export type WorkflowBindingEnv = Readonly<{
     WORKFLOW_RUNS: Readonly<{
         getByName(installationId: string): WorkflowRunCalls;
@@ -130,7 +130,14 @@ export declare const workflowFrameMethods: {
                 } | undefined;
             }]) | ((args: unknown) => [{
                 scheduleId: string;
-            }]) | ((args: unknown) => [Record<string, never>]) | ((args: unknown) => [{
+            }]) | ((args: unknown) => [{
+                scheduleId: string;
+            }]) | ((args: unknown) => [{
+                scheduleId: string;
+            }]) | ((args: unknown) => [{
+                limit: number;
+                after?: string | undefined;
+            }]) | ((args: unknown) => [{
                 digest: string & {
                     readonly appReleaseKind: "Sha256Digest";
                 };
@@ -150,7 +157,7 @@ export declare const workflowFrameMethods: {
                 workflowId?: string | undefined;
             }]);
             decodeResult: (value: unknown) => z.core.util.JSONType;
-            requiredOperations: () => ("catalog" | "runGraph" | "armSchedule" | "disarmSchedule" | "schedules" | "armEventTrigger" | "disarmEventTrigger" | "eventTriggers" | "cancel" | "answerReview" | "graphStatus" | "runs")[];
+            requiredOperations: () => ("catalog" | "runGraph" | "armSchedule" | "disarmSchedule" | "pauseSchedule" | "resumeSchedule" | "schedules" | "armEventTrigger" | "disarmEventTrigger" | "eventTriggers" | "cancel" | "answerReview" | "graphStatus" | "runs")[];
         };
     };
 };

package/dist/standalone/workflow-binding.js

@@ -2,7 +2,7 @@ import * as S from "effect/Schema";
 import { z } from "zod";
 import { graphReviewSchema, reviewAnswerSchema } from "@fungi.computer/braid";
 import { graphStartRequestSchema, workflowTriggerTargetSchema, } from "@fungi.computer/braid/runtime";
-import { runReply, answerReviewReply, catalogReplySchema, statusReply, cancelReplySchema, runsReplySchema, runsInputSchema, eventArmReplySchema, eventDisarmInputSchema, eventTriggersReplySchema, scheduleArmReplySchema, scheduleDisarmInputSchema, schedulesReplySchema, triggerDisarmReplySchema, triggerListInputSchema, } from "@fungi.computer/workflows-wire";
+import { runReply, answerReviewReply, catalogReplySchema, statusReply, cancelReplySchema, runsReplySchema, runsInputSchema, eventArmReplySchema, eventDisarmInputSchema, eventTriggersReplySchema, scheduleArmReplySchema, scheduleDisarmInputSchema, schedulePauseInputSchema, schedulePauseReplySchema, scheduleResumeInputSchema, scheduleResumeReplySchema, scheduleListInputSchema, schedulesReplySchema, triggerDisarmReplySchema, triggerListInputSchema, } from "@fungi.computer/workflows-wire";
 import { workflowAttestationSchema } from "@fungi.computer/puffball/app-method-runtime";
 import { appEventFactSchema, } from "@fungi.computer/puffball/app-event-facts";
 import { AppInstanceError } from "../index.js";
@@ -26,7 +26,9 @@ const workflowArgs = {
     answerReview: effectArgs(S.Tuple([reviewKey])),
     armSchedule: (args) => z.tuple([triggerArmTargetSchema]).parse(args),
     disarmSchedule: (args) => z.tuple([scheduleDisarmInputSchema]).parse(args),
-    schedules: (args) => z.tuple([triggerListInputSchema]).parse(args),
+    pauseSchedule: (args) => z.tuple([schedulePauseInputSchema]).parse(args),
+    resumeSchedule: (args) => z.tuple([scheduleResumeInputSchema]).parse(args),
+    schedules: (args) => z.tuple([scheduleListInputSchema]).parse(args),
     armEventTrigger: (args) => z.tuple([triggerArmTargetSchema]).parse(args),
     disarmEventTrigger: (args) => z.tuple([eventDisarmInputSchema]).parse(args),
     eventTriggers: (args) => z.tuple([triggerListInputSchema]).parse(args),
@@ -40,6 +42,8 @@ const workflowResults = {
     answerReview: answerReviewReply,
     armSchedule: scheduleArmReplySchema,
     disarmSchedule: triggerDisarmReplySchema,
+    pauseSchedule: schedulePauseReplySchema,
+    resumeSchedule: scheduleResumeReplySchema,
     schedules: schedulesReplySchema,
     armEventTrigger: eventArmReplySchema,
     disarmEventTrigger: triggerDisarmReplySchema,
@@ -53,6 +57,8 @@ const workflowMethod = z.enum([
     "cancel",
     "answerReview",
     "armSchedule",
+    "pauseSchedule",
+    "resumeSchedule",
     "disarmSchedule",
     "schedules",
     "armEventTrigger",
@@ -184,10 +190,21 @@ export async function dispatchWorkflowBinding(env, frame, props, method, args) {
             result = await runs.disarmSchedule(frame.facts, input);
             break;
         }
-        case "schedules":
-            workflowArgs.schedules(args);
-            result = await runs.schedules(frame.facts);
+        case "pauseSchedule": {
+            const [input] = workflowArgs.pauseSchedule(args);
+            result = await runs.pauseSchedule(frame.facts, input);
             break;
+        }
+        case "resumeSchedule": {
+            const [input] = workflowArgs.resumeSchedule(args);
+            result = await runs.resumeSchedule(frame.facts, input);
+            break;
+        }
+        case "schedules": {
+            const [input] = workflowArgs.schedules(args);
+            result = await runs.schedules(frame.facts, input);
+            break;
+        }
         case "armEventTrigger": {
             const [input] = workflowArgs.armEventTrigger(args);
             result = await runs.armEventTrigger(frame.facts, input);

package/dist/standalone/workflow-git-capture.js

@@ -1,7 +1,8 @@
 import { repositoryRefSchema } from "@fungi.computer/agar/git";
 import { approvedBindingGrants } from "../apps/index.js";
 import { createInstallationGitAdmission } from "../git.js";
-import { oysterPrincipalIsOwner, resolveBackend } from "../host.js";
+import { resolveBackend } from "../host.js";
+import { oysterPrincipalIsOwner } from "../authorization.js";
 import { invocationCallerContext } from "../invocation.js";
 /** Installation Git only; Team-source needs its separate authoritative namespace owner. */
 export function createStandaloneWorkflowInstallationGitCapture(options) {

package/dist/standalone/workflow-host.d.ts

@@ -127,25 +127,6 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                 }> | null;
             };
             status: "enabled" | "disabled" | "deleted";
-            visibility: "private" | "public";
-            approvedAnonymousMethods: readonly Readonly<{
-                name: string;
-                digest: import("@fungi.computer/puffball").Sha256Digest;
-            }>[];
-            anonymousApproval: Readonly<{
-                by: {
-                    kind: "member";
-                    memberId: string;
-                } | {
-                    kind: "agent";
-                    agentId: string;
-                } | {
-                    kind: "team-key";
-                    keyId: string;
-                };
-                at: number;
-                authorityVersion: number;
-            }> | null;
         }>;
         verified: Readonly<{
             release: import("@fungi.computer/puffball").Release;
@@ -263,25 +244,6 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                 }> | null;
             };
             status: "enabled" | "disabled" | "deleted";
-            visibility: "private" | "public";
-            approvedAnonymousMethods: readonly Readonly<{
-                name: string;
-                digest: import("@fungi.computer/puffball").Sha256Digest;
-            }>[];
-            anonymousApproval: Readonly<{
-                by: {
-                    kind: "member";
-                    memberId: string;
-                } | {
-                    kind: "agent";
-                    agentId: string;
-                } | {
-                    kind: "team-key";
-                    keyId: string;
-                };
-                at: number;
-                authorityVersion: number;
-            }> | null;
         }>;
         verified: Readonly<{
             release: import("@fungi.computer/puffball").Release;
@@ -349,25 +311,6 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                 }> | null;
             };
             status: "enabled" | "disabled" | "deleted";
-            visibility: "private" | "public";
-            approvedAnonymousMethods: readonly Readonly<{
-                name: string;
-                digest: import("@fungi.computer/puffball").Sha256Digest;
-            }>[];
-            anonymousApproval: Readonly<{
-                by: {
-                    kind: "member";
-                    memberId: string;
-                } | {
-                    kind: "agent";
-                    agentId: string;
-                } | {
-                    kind: "team-key";
-                    keyId: string;
-                };
-                at: number;
-                authorityVersion: number;
-            }> | null;
         }>;
         pin: {
             selection: {
@@ -468,25 +411,6 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                     }> | null;
                 };
                 status: "enabled" | "disabled" | "deleted";
-                visibility: "private" | "public";
-                approvedAnonymousMethods: readonly Readonly<{
-                    name: string;
-                    digest: import("@fungi.computer/puffball").Sha256Digest;
-                }>[];
-                anonymousApproval: Readonly<{
-                    by: {
-                        kind: "member";
-                        memberId: string;
-                    } | {
-                        kind: "agent";
-                        agentId: string;
-                    } | {
-                        kind: "team-key";
-                        keyId: string;
-                    };
-                    at: number;
-                    authorityVersion: number;
-                }> | null;
             }>;
             verified: Readonly<{
                 release: import("@fungi.computer/puffball").Release;
@@ -568,25 +492,6 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                     }> | null;
                 };
                 status: "enabled" | "disabled" | "deleted";
-                visibility: "private" | "public";
-                approvedAnonymousMethods: readonly Readonly<{
-                    name: string;
-                    digest: import("@fungi.computer/puffball").Sha256Digest;
-                }>[];
-                anonymousApproval: Readonly<{
-                    by: {
-                        kind: "member";
-                        memberId: string;
-                    } | {
-                        kind: "agent";
-                        agentId: string;
-                    } | {
-                        kind: "team-key";
-                        keyId: string;
-                    };
-                    at: number;
-                    authorityVersion: number;
-                }> | null;
             }>;
             verified: Readonly<{
                 release: import("@fungi.computer/puffball").Release;
@@ -654,13 +559,13 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                 readonly input: {
                     readonly [x: string]: S.Json;
                 };
+                readonly title: string;
                 readonly apps: {
                     readonly [x: string]: {
                         readonly appId: string;
                         readonly role?: string | undefined;
                     };
                 };
-                readonly title: string;
                 readonly nodes: readonly ({
                     readonly id: string;
                     readonly kind: "code";
@@ -698,19 +603,19 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                 } | {
                     readonly id: string;
                     readonly kind: "review";
-                    readonly timeout: number;
                     readonly title: string;
+                    readonly timeout: number;
                     readonly reviewers: "runner" | "owners";
                     readonly show: readonly {
                         readonly node: string;
                         readonly port: string;
                     }[];
+                    readonly detail?: string | undefined;
                     readonly choices?: readonly {
                         readonly label: string;
                         readonly id: string;
                         readonly description?: string | undefined;
                     }[] | undefined;
-                    readonly detail?: string | undefined;
                 } | {
                     readonly id: string;
                     readonly kind: "condition";
@@ -795,19 +700,19 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                         } | {
                             readonly id: string;
                             readonly kind: "review";
-                            readonly timeout: number;
                             readonly title: string;
+                            readonly timeout: number;
                             readonly reviewers: "runner" | "owners";
                             readonly show: readonly {
                                 readonly node: string;
                                 readonly port: string;
                             }[];
+                            readonly detail?: string | undefined;
                             readonly choices?: readonly {
                                 readonly label: string;
                                 readonly id: string;
                                 readonly description?: string | undefined;
                             }[] | undefined;
-                            readonly detail?: string | undefined;
                         } | {
                             readonly id: string;
                             readonly kind: "condition";
@@ -860,10 +765,10 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                 readonly triggers?: readonly ({
                     readonly id: string;
                     readonly on: "webhook";
+                    readonly when?: import("@fungi.computer/braid").Predicate | undefined;
                     readonly input?: {
                         readonly [x: string]: import("@fungi.computer/braid").Mapping;
                     } | undefined;
-                    readonly when?: import("@fungi.computer/braid").Predicate | undefined;
                     readonly title?: string | undefined;
                 } | {
                     readonly id: string;
@@ -878,14 +783,14 @@ export declare function createStandaloneWorkflowHost(owner: WatchdogSqliteOwner,
                     readonly title?: string | undefined;
                 } | {
                     readonly id: string;
+                    readonly app: string;
                     readonly on: "event";
                     readonly event: string;
-                    readonly app: string;
                     readonly eventDigest: string;
+                    readonly when?: import("@fungi.computer/braid").Predicate | undefined;
                     readonly input?: {
                         readonly [x: string]: import("@fungi.computer/braid").Mapping;
                     } | undefined;
-                    readonly when?: import("@fungi.computer/braid").Predicate | undefined;
                     readonly repository?: import("@fungi.computer/braid").Mapping | undefined;
                     readonly title?: string | undefined;
                 })[] | undefined;

package/dist/standalone/workflow-host.js

@@ -10,7 +10,7 @@ import { appCapabilityIds } from "@fungi.computer/puffball";
 import { createGraphWorkflowRuns, createTriggerRunReservations, compileForMember, graphStartRequestSchema, preparationFromRun, planNodeCall, workflowRunContextSchema, } from "@fungi.computer/braid/runtime";
 import { appMethodCallContextSchema } from "@fungi.computer/puffball/app";
 import { appEventFactSchema, } from "@fungi.computer/puffball/app-event-facts";
-import { keyAppAccess } from "../keys.js";
+import { keyAppAccess } from "../authorization.js";
 import { Validator } from "@cfworker/json-schema";
 // Mirrors packages/oyster/src/cloudflare.ts's MAX_APP_REPLY_BYTES. That
 // module imports "cloudflare:workers" at the top level, so it cannot be

package/dist/standalone/workflow-node-capture.js

@@ -3,7 +3,8 @@ import { appBackendBindingsSchema } from "@fungi.computer/puffball/app";
 import { catalogMethods } from "@fungi.computer/braid";
 import { workflowMethodRequiresComputer, } from "@fungi.computer/braid/runtime";
 import { admitMethodMetadata, appInvocationCeiling, approvedBindingGrants, deriveDeclaredOperations, scopedBindings, } from "../apps/index.js";
-import { oysterPrincipalIsOwner, verifyRelease, } from "../host.js";
+import { verifyRelease } from "../host.js";
+import { oysterPrincipalIsOwner } from "../authorization.js";
 import { invocationCallerContext } from "../invocation.js";
 /** Capture one compiled node through the same metadata admission as ordinary App calls. */
 export function createStandaloneWorkflowNodeCapture(options) {
@@ -33,7 +34,6 @@ export function createStandaloneWorkflowNodeCapture(options) {
             principal: { actor: caller.actor, role: caller.role ?? null },
             installation: {
                 status: installation.status,
-                visibility: installation.visibility,
                 instanceId: installation.instanceId,
                 authority: installation.authority,
                 artifactDigest: installation.release.artifact.artifactDigest,

package/dist/standalone/workflow-root-authority.d.ts

@@ -1,7 +1,7 @@
 import { type WorkflowRunAuthority } from "@fungi.computer/braid/runtime";
 import type { RepositoryRef } from "@fungi.computer/agar/git";
 import type { AppToolPolicy } from "../apps/index.js";
-import { type LiveOysterKey } from "../keys.js";
+import type { LiveOysterKey } from "../keys.js";
 import type { StandaloneTenancy } from "./tenancy.js";
 import { type StandaloneWorkflowNodeCaptureOptions } from "./workflow-node-capture.js";
 import type { StandaloneWorkflowAuthorityReaderOptions } from "./workflow-authority-readers.js";

package/dist/standalone/workflow-root-authority.js

@@ -1,6 +1,6 @@
 import { createWorkflowRunAuthority, createWorkflowCeilingCapture, planInstallationLevels, } from "@fungi.computer/braid/runtime";
 import { AppInstanceError } from "../index.js";
-import { keyAppAccess } from "../keys.js";
+import { keyAppAccess } from "../authorization.js";
 import { createStandaloneWorkflowAuthorityReaders } from "./workflow-authority-readers.js";
 import { createStandaloneWorkflowNodeCapture, } from "./workflow-node-capture.js";
 import { createStandaloneWorkflowInstallationGitCapture } from "./workflow-git-capture.js";

package/dist/standalone/workflow-schedules.d.ts

@@ -1,6 +1,7 @@
 import { createWorkflowSchedules, type WorkflowInstallationAuthority } from "@fungi.computer/braid/runtime";
 import type { AppMethodCallContext } from "@fungi.computer/puffball/app-method-runtime";
 import type { workflowAgentAuthority } from "../workflow-agent-authority.js";
+import { type ScheduleListInput } from "@fungi.computer/workflows-wire";
 import { type TriggerArmTarget, type ScheduleDisarmInput } from "./workflow-binding.js";
 /** The host supplies this result only after reopening the protected invocation. */
 export type TriggerAdmission = Readonly<{
@@ -10,7 +11,7 @@ export type TriggerAdmission = Readonly<{
     /** The admitted frame's selection and verified artifact, pinned on arm. */
     installationAuthority: WorkflowInstallationAuthority;
 }>;
-export type ScheduleOperation = "armSchedule" | "disarmSchedule" | "schedules";
+export type ScheduleOperation = "armSchedule" | "pauseSchedule" | "resumeSchedule" | "disarmSchedule" | "schedules";
 /** Host controls and alarm delivery compose the shared schedule owner unchanged. */
 export declare function createStandaloneWorkflowSchedules<Frame>(options: Parameters<typeof createWorkflowSchedules>[0] & {
     admitInvocation(frame: Frame, operation: ScheduleOperation): Promise<TriggerAdmission>;
@@ -37,19 +38,45 @@ export declare function createStandaloneWorkflowSchedules<Frame>(options: Parame
     } | {
         error: string;
     }>;
-    list(frame: Frame): Promise<{
+    pause(frame: Frame, raw: {
+        scheduleId: string;
+    }): Promise<{
+        kind: "not_found";
+    } | {
+        kind: "paused";
+    } | {
         error: string;
-        schedules?: undefined;
+    }>;
+    resume(frame: Frame, raw: {
+        scheduleId: string;
+    }): Promise<{
+        kind: "not_found";
+        reason?: never;
+    } | {
+        kind: "refused";
+        reason: string;
     } | {
+        kind: "resumed";
+        reason?: never;
+    } | {
+        error: string;
+    }>;
+    list(frame: Frame, raw: ScheduleListInput): Promise<{
         schedules: {
             scheduleId: string;
             installationId: string;
             workflowId: string;
             triggerId: string;
+            cron: {
+                expression: string;
+                timeZone: string;
+            };
             nextDueAt: number;
             state: "active" | "finished" | "paused" | "cancelled";
             lastError: string | null;
         }[];
-        error?: undefined;
+        nextCursor: string | null;
+    } | {
+        error: string;
     }>;
 };

package/dist/standalone/workflow-schedules.js

@@ -1,5 +1,5 @@
 import { createWorkflowSchedules, } from "@fungi.computer/braid/runtime";
-import { scheduleDisarmInputSchema } from "@fungi.computer/workflows-wire";
+import { scheduleDisarmInputSchema, schedulePauseInputSchema, scheduleResumeInputSchema, scheduleListInputSchema, } from "@fungi.computer/workflows-wire";
 import { triggerArmTargetSchema, } from "./workflow-binding.js";
 /** Host controls and alarm delivery compose the shared schedule owner unchanged. */
 export function createStandaloneWorkflowSchedules(options) {
@@ -27,13 +27,26 @@ export function createStandaloneWorkflowSchedules(options) {
                 return { error: "not_granted" };
             return schedules.disarm(authority.principal, libraryId, scheduleId);
         },
-        async list(frame) {
+        async pause(frame, raw) {
+            const { scheduleId } = schedulePauseInputSchema.parse(raw);
+            const { libraryId, authority } = await options.admitInvocation(frame, "pauseSchedule");
+            if (authority === null)
+                return { error: "not_granted" };
+            return schedules.pause(authority.principal, libraryId, scheduleId);
+        },
+        async resume(frame, raw) {
+            const { scheduleId } = scheduleResumeInputSchema.parse(raw);
+            const { libraryId, authority } = await options.admitInvocation(frame, "resumeSchedule");
+            if (authority === null)
+                return { error: "not_granted" };
+            return schedules.resume(authority.principal, libraryId, scheduleId);
+        },
+        async list(frame, raw) {
+            const input = scheduleListInputSchema.parse(raw);
             const { libraryId, authority } = await options.admitInvocation(frame, "schedules");
             if (authority === null)
                 return { error: "not_granted" };
-            return {
-                schedules: await schedules.list(authority.principal, libraryId),
-            };
+            return schedules.list(authority.principal, libraryId, input);
         },
     };
 }

package/dist/standalone/workflow-webhooks.d.ts

@@ -1,22 +1,8 @@
-import { Hono } from "hono";
+import type { BlankEnv } from "hono/types";
+import { type Routes } from "../authorization.js";
 import type { OysterEnv, OysterHost } from "../host.js";
 import type { StandaloneWorkflowEnv } from "./workflows.js";
 /** The root resolves the origin before this unauthenticated signed-delivery path. */
-export declare function standaloneWorkflowWebhookRoutes(env: Pick<StandaloneWorkflowEnv, "WORKFLOW_RUNS">, hostFor: (request: Request) => Promise<Pick<OysterHost, "installations"> | null>): import("hono/hono-base").HonoBase<import("hono/types").BlankEnv, {
-    "/api/installations/:installationId/workflows/webhooks/:bindingId": {
-        $all: {
-            input: {
-                param: {
-                    installationId: string;
-                } & {
-                    bindingId: string;
-                };
-            };
-            output: {};
-            outputFormat: string;
-            status: import("hono/utils/http-status").StatusCode;
-        };
-    };
-}, "/", "/api/installations/:installationId/workflows/webhooks/:bindingId">;
+export declare function standaloneWorkflowWebhookRoutes(env: Pick<StandaloneWorkflowEnv, "WORKFLOW_RUNS">, hostFor: (request: Request) => Promise<Pick<OysterHost, "installations"> | null>): Routes<BlankEnv>;
 /** Mounted only under the root's authenticated owner routes; the DO re-admits. */
-export declare function standaloneWorkflowWebhookControls(env: Pick<StandaloneWorkflowEnv, "WORKFLOW_RUNS">, hostFor: () => Promise<Pick<OysterHost, "installations">>): Hono<OysterEnv>;
+export declare function standaloneWorkflowWebhookControls(env: Pick<StandaloneWorkflowEnv, "WORKFLOW_RUNS">, hostFor: () => Promise<Pick<OysterHost, "installations">>): Routes<OysterEnv>;

package/dist/standalone/workflow-webhooks.js

@@ -1,4 +1,4 @@
-import { Hono } from "hono";
+import { door, owner, routes } from "../authorization.js";
 import { bodyLimit } from "hono/body-limit";
 import * as Schema from "effect/Schema";
 import { workflowWebhookCommandSchema } from "../webhooks.js";
@@ -11,7 +11,7 @@ async function libraryExists(host, installationId) {
 }
 /** The root resolves the origin before this unauthenticated signed-delivery path. */
 export function standaloneWorkflowWebhookRoutes(env, hostFor) {
-    return new Hono().all("/api/installations/:installationId/workflows/webhooks/:bindingId", async (context) => {
+    return routes().all("/api/installations/:installationId/workflows/webhooks/:bindingId", door("a signed delivery; the library's run owner verifies its signature"), async (context) => {
         const host = await hostFor(context.req.raw);
         const installationId = context.req.param("installationId");
         if (host === null || !(await libraryExists(host, installationId)))
@@ -24,7 +24,7 @@ export function standaloneWorkflowWebhookRoutes(env, hostFor) {
 }
 /** Mounted only under the root's authenticated owner routes; the DO re-admits. */
 export function standaloneWorkflowWebhookControls(env, hostFor) {
-    return new Hono().post("/api/installations/:installationId/workflows/webhooks", bodyLimit({ maxSize: 64 * 1024, onError: refused }), async (context) => {
+    return routes().post("/api/installations/:installationId/workflows/webhooks", owner("direct-or-app"), async (context, { principal }) => {
         const installationId = context.req.param("installationId");
         if (!(await libraryExists(await hostFor(), installationId)))
             return refused();
@@ -34,6 +34,6 @@ export function standaloneWorkflowWebhookControls(env, hostFor) {
         const command = workflowWebhookCommandSchema.safeParse(body.success);
         if (!command.success)
             return refused();
-        return env.WORKFLOW_RUNS.getByName(installationId).webhookControl(context.get("principal"), installationId, command.data);
-    });
+        return env.WORKFLOW_RUNS.getByName(installationId).webhookControl(principal, installationId, command.data);
+    }, { middleware: [bodyLimit({ maxSize: 64 * 1024, onError: refused })] });
 }