@fungi.computer/oyster 0.6.0 → 0.8.0

package/dist/build/build-jobs.d.ts

@@ -87,7 +87,7 @@ export declare function createTeamBuildPublisher(options: Readonly<{
         readonly expiresAt: number;
         readonly remote: string;
         readonly reportUrl: string;
-        readonly status: "revoked" | "running" | "failed" | "succeeded" | "interrupted";
+        readonly status: "revoked" | "failed" | "running" | "succeeded" | "interrupted";
         readonly artifact: {
             readonly digest: string;
             readonly bytes: number;
@@ -103,7 +103,7 @@ export declare function createTeamBuildPublisher(options: Readonly<{
         readonly expiresAt: number;
         readonly remote: string;
         readonly reportUrl: string;
-        readonly status: "revoked" | "running" | "failed" | "succeeded" | "interrupted";
+        readonly status: "revoked" | "failed" | "running" | "succeeded" | "interrupted";
         readonly artifact: {
             readonly digest: string;
             readonly bytes: number;

package/dist/build/candidate-builder.d.ts

@@ -56,6 +56,8 @@ export declare function buildTeamCandidate(input: {
     outputPath: string;
     /** Trusted Computer-local cache; never part of customer configuration. */
     packageStoreDirectory?: string;
+    /** Host-owned observation of raw subprocess output; never source configuration. */
+    onOutput?: (stream: "stdout" | "stderr", bytes: Uint8Array) => void;
 }): Promise<Readonly<{
     digest: string;
     bytes: number;

package/dist/build/candidate-builder.js

@@ -48,15 +48,19 @@ export async function buildTeamCandidate(input) {
     const onPhase = (phase, milliseconds) => {
         phases[phase] += milliseconds;
     };
+    const onOutput = (stream, bytes) => {
+        input.onOutput?.(stream, bytes);
+    };
     const prepareStarted = performance.now();
     const candidate = await Effect.runPromise(createCapturedCandidatePreparer(config, {
         sourceCapture: createLocalCommitSourceCapture(input.repositoryPath, config.sourceRevision),
         buildExecutor: createLocalBuildExecutor(input.packageStoreDirectory === undefined
-            ? { packageScripts: "run", onPhase }
+            ? { packageScripts: "run", onPhase, onOutput }
             : {
                 packageScripts: "run",
                 packageStoreDirectory: input.packageStoreDirectory,
                 onPhase,
+                onOutput,
             }),
     }).prepareCandidate(parseReleaseId("rel_build")));
     const prepared = performance.now() - prepareStarted;

package/dist/build/candidate-cli.js

@@ -32,6 +32,9 @@ try {
         outputPath,
         // Computer scratch survives captured snapshot cleanup, without a global or durable Workspace store.
         packageStoreDirectory: "/var/tmp/fungi-app-package-store",
+        onOutput: (stream, bytes) => {
+            process[stream].write(bytes);
+        },
     });
     const reportUrl = process.env.TEAM_BUILD_REPORT;
     if (!reportUrl)

package/dist/build/candidate-cli.mjs

@@ -19518,6 +19518,16 @@ var appBackendBindingKinds = {
         requires: ["workflow.run", "workflow.arm"],
         effect: "write"
       },
+      pauseSchedule: {
+        cap: "app.workflow.run",
+        requires: ["workflow.run", "workflow.arm"],
+        effect: "write"
+      },
+      resumeSchedule: {
+        cap: "app.workflow.run",
+        requires: ["workflow.run", "workflow.arm"],
+        effect: "write"
+      },
       schedules: {
         cap: "app.workflow.read",
         requires: ["workflow.run"],
@@ -19659,7 +19669,27 @@ var appBackendBindingKinds = {
     name: "AGENTS",
     operations: {
       list: { cap: "agent.list", requires: ["agent.list"], effect: "read" },
-      send: { cap: "agent.send", requires: ["agent.send"], effect: "write" }
+      send: { cap: "agent.send", requires: ["agent.send"], effect: "write" },
+      schedules: {
+        cap: "agent.read",
+        requires: ["agent.read"],
+        effect: "read"
+      },
+      pauseSchedule: {
+        cap: "agent.manage",
+        requires: ["agent.manage"],
+        effect: "write"
+      },
+      resumeSchedule: {
+        cap: "agent.manage",
+        requires: ["agent.manage"],
+        effect: "write"
+      },
+      deleteSchedule: {
+        cap: "agent.manage",
+        requires: ["agent.manage"],
+        effect: "write"
+      }
     }
   }
 };
@@ -19714,13 +19744,17 @@ var emptyAppDeclaration = Object.freeze({
 
 // ../puffball/dist/app-api.js
 var appApiMethodNameSchema = String4.check(makeFilter2(isAppApiMethodName));
+function isJsonContainer(value) {
+  return value !== null && typeof value === "object";
+}
 function withinDepth(value, depth = 0) {
   if (depth > 16)
     return false;
-  if (is2(ArraySchema(Json2))(value))
-    return value.every((child) => withinDepth(child, depth + 1));
-  if (is2(JsonObject)(value))
-    return Object.values(value).every((child) => withinDepth(child, depth + 1));
+  if (isJsonContainer(value)) {
+    for (const child of Object.values(value))
+      if (!withinDepth(child, depth + 1))
+        return false;
+  }
   return true;
 }
 var projection = JsonObject.pipe(check(makeFilter2((value) => new TextEncoder().encode(JSON.stringify(value)).byteLength <= 2e4 && withinDepth(value), { message: "App API schema exceeds its byte or depth bound" })));
@@ -19731,15 +19765,12 @@ var method = Struct({
   output: projection,
   pending: optional2(Literal2(true)),
   hidden: optional2(Literal2(true)),
-  anonymous: optional2(Literal2(true)),
   present: optional2(Struct({
     verb: String4.check(isMinLength(1), isMaxLength(32))
   })),
   effect: Literals(["read", "write", "external"]),
   requires: ArraySchema(Literals(appCapabilityIds)).pipe(check(makeFilter2((values) => new Set(values).size === values.length)))
-}).check(makeFilter2((value) => value.anonymous !== true || value.effect === "read" && value.requires.length === 0, {
-  message: "Anonymous methods must be reads with no required capabilities"
-}));
+});
 var appApiSchema = Struct({
   methods: Record(String4, method).pipe(check(makeFilter2((methods) => Object.keys(methods).every(is2(appApiMethodNameSchema)), { message: "Invalid App API method name" })), check(makeFilter2((methods) => Object.keys(methods).length <= 64)), check(makeFilter2((methods) => {
     const names = Object.keys(methods);
@@ -21842,6 +21873,7 @@ var BirdDogAgentJobPayloadSchema = Struct({
 });
 var BirdDogAgentJobInputSchema = Struct({
   work: BirdDogAgentWorkSchema,
+  delivery: Literals(["steer", "followUp"]),
   mail: optional2(BirdDogMailSchema)
 });
 
@@ -22350,7 +22382,7 @@ var symbols = {
   // Oyster: the open shell that holds the Apps' pearl.
   oyster: (0, import_jsx_runtime4.jsxs)(import_jsx_runtime4.Fragment, { children: [(0, import_jsx_runtime4.jsx)("path", { fill: grape, d: "M35.5 6C33.7 6.3 32.3 7.6 31.4 9.4 30.9 10.3 30.4 10.3 29.5 10 25.5 9 20.6 11.6 19.6 15.9 19.4 16.6 19 17 18 17.1 14.5 17.6 12 20.6 12.1 24.2 12.2 25.4 12 25.9 11.5 26.5 7.5 30 10.5 34.5 17.5 34.4 15.3 32.6 16 31 19 29 26 24 37 19.5 43.5 19 46 19 46 22 43 25.5 46.5 23.5 51.5 18.5 53.5 15 55 11 50 7 45 9 43.8 9.4 43.3 9.2 42.5 8 40.7 6.3 38 5.6 35.5 6Z" }), (0, import_jsx_runtime4.jsx)("circle", { fill: cream, cx: "34.9", cy: "41.9", r: "11.3" }), (0, import_jsx_runtime4.jsxs)("g", { fill: ink, children: [(0, import_jsx_runtime4.jsx)("rect", { x: "29.9", y: "33.2", width: "3.2", height: "5.6", rx: "1.6" }), (0, import_jsx_runtime4.jsx)("rect", { x: "36.7", y: "33.2", width: "3.2", height: "5.6", rx: "1.6" })] }), (0, import_jsx_runtime4.jsx)("path", { fill: grape, d: "M49.5 39C47.9 39.3 46.5 40 46.1 41.6 45.8 43.2 45.5 43.5 44 43.5 38.5 43.5 35 48 39 49.5 40 50 39.5 50.5 38 51 35.5 52.5 32.5 52 30 51 29 50.5 28.5 50 29.5 50 33 47.5 30 43.5 24.5 43.5 23.3 43.5 22.9 43.3 22.5 43 20.5 40.5 19 40 17.5 39.5 13 39.5 13 44 17 47.5 18.3 48.4 18.6 48.7 19 49.5 20.5 53 23 55 26 55 26.8 55 27 55.3 27.5 56 31 58.5 36.5 58.5 40 56 40.8 55.2 41.2 55 42 55 45 55 47.5 53 49 49.5 49.6 48.5 50 48 50.5 47.5 56 43.5 55 38.5 49.5 39Z" }), (0, import_jsx_runtime4.jsx)("path", { fill: "none", stroke: yellow, strokeWidth: "3", strokeLinecap: "round", d: "M46.6 31.8 49.2 27.8 M49.4 35.5 52.8 33.7 M21.5 32.5 22.9 33.5 M19.3 37.5 21.1 38.1" })] }),
   // Tourtois: the desktop shell, a tortoise carrying window panes.
-  tourtois: (0, import_jsx_runtime4.jsxs)(import_jsx_runtime4.Fragment, { children: [(0, import_jsx_runtime4.jsx)("rect", { fill: cream, x: "11.07", y: "35.73", width: "26.8", height: "9.7", rx: "3.25", transform: "rotate(-5 24.47 40.58)" }), (0, import_jsx_runtime4.jsx)("path", { fill: yellow, d: "M14.8 16C19 14.6 23 13.5 26.5 12.6 28.4 12.1 29.6 13.4 30.1 15.3L31.6 21 17.4 37.6C13.8 38.2 10.6 37.8 10.1 35.4L9.2 27.8C9.1 26.1 10.1 24.7 11.6 24.1 11.4 22.4 11.4 20.6 11.8 19.1 12.3 17.4 13.3 16.5 14.8 16Z" }), (0, import_jsx_runtime4.jsx)("path", { fill: coral, d: "M14.0 24.1Q13.3 21.2 16.2 20.4L30.7 16.2Q33.6 15.4 34.6 18.2L36.0 22.7Q37.0 25.5 34.7 27.4L20.2 39.7Q17.9 41.6 17.2 38.7Z" }), (0, import_jsx_runtime4.jsx)("path", { fill: blue, d: "M21 23.4 35.5 20.6C37.3 20.2 38.6 21 38.9 22.6L40 34.5C40.1 36.2 39.1 37.3 37.5 37.7 32.6 39.9 26 41 21 41 16 41 12.2 40.2 11 38.8 10.4 37.6 10.8 36.4 12.4 37L19.6 38.4 18.4 27C18.2 25.2 19.3 23.7 21 23.4Z" }), (0, import_jsx_runtime4.jsx)("path", { fill: cream, d: "M22.8 29.6 34.8 26.9C36.2 26.6 37 27.3 37.2 28.6L37.9 33C38.1 34.2 37.5 35 36.3 35.3L24.3 37.8C23 38.1 22.3 37.5 22.1 36.3L21.3 31.6C21.1 30.6 21.7 29.8 22.8 29.6Z" }), (0, import_jsx_runtime4.jsxs)("g", { fill: cream, children: [(0, import_jsx_runtime4.jsx)("circle", { cx: "14.7", cy: "18.45", r: "1" }), (0, import_jsx_runtime4.jsx)("circle", { cx: "17.6", cy: "17.65", r: "1" }), (0, import_jsx_runtime4.jsx)("circle", { cx: "20.5", cy: "16.85", r: "1" }), (0, import_jsx_runtime4.jsx)("circle", { cx: "17.9", cy: "22.2", r: "1" }), (0, import_jsx_runtime4.jsx)("circle", { cx: "21", cy: "21.5", r: "1" }), (0, import_jsx_runtime4.jsx)("circle", { cx: "24.1", cy: "20.75", r: "1" }), (0, import_jsx_runtime4.jsx)("circle", { cx: "28.2", cy: "25.3", r: "1" })] }), (0, import_jsx_runtime4.jsx)("circle", { fill: coral, cx: "21.7", cy: "26.6", r: "1" }), (0, import_jsx_runtime4.jsx)("circle", { fill: yellow, cx: "24.9", cy: "25.9", r: "1.05" }), (0, import_jsx_runtime4.jsxs)("g", { fill: mint, children: [(0, import_jsx_runtime4.jsx)("ellipse", { cx: "8.8", cy: "36.6", rx: "3.6", ry: "1.9", transform: "rotate(22 8.8 36.6)" }), (0, import_jsx_runtime4.jsx)("path", { d: "M12 41C10 41.5 7.5 44.5 7 46.5 7 48 8.5 49.5 10.5 50 12.5 50.5 13.5 50 15 48 15.5 47 16.5 47.5 19 50 22 49.5 22 46.5 22 45.5 20.5 45.5 17 45 16.5 44.5 16.5 44 16.5 42 13.5 40.5 12 41Z" }), (0, import_jsx_runtime4.jsx)("path", { d: "M40 33C39 38 36 42 34.5 41.5 32.5 40.5 29.5 42 28.5 44 26 49 27.5 51.5 32.5 51 36 51 37 50 36 46.5 36 45 37 44.5 38 44.5 38.5 45.5 40.5 49 43.5 50 46.5 47.5 47.5 46.5 46 43.5 44 42 43 41.5 43.5 40.5 44.5 39.5 46 38 47 37.5L47 33Z" })] }), (0, import_jsx_runtime4.jsx)("ellipse", { fill: mint, cx: "46.4", cy: "30.6", rx: "8.1", ry: "8.3" }), (0, import_jsx_runtime4.jsxs)("g", { fill: ink, children: [(0, import_jsx_runtime4.jsx)("rect", { x: "45.05", y: "26.95", width: "2.25", height: "4.6", rx: "1.1", transform: "rotate(-6 46.2 29.3)" }), (0, import_jsx_runtime4.jsx)("rect", { x: "49.25", y: "26.4", width: "2.25", height: "4.6", rx: "1.1", transform: "rotate(-6 50.4 28.7)" })] }), (0, import_jsx_runtime4.jsx)("path", { fill: coral, d: "M46.8 32.2H51C51 34.3 50 35.4 48.9 35.4S46.8 34.3 46.8 32.2Z", transform: "rotate(-8 48.9 33.5)" }), (0, import_jsx_runtime4.jsx)("path", { fill: "none", stroke: yellow, strokeWidth: "3", strokeLinecap: "round", d: "M50.9 17.7 50.5 19.7 M55.2 20.1 53.4 21.9 M56.5 24.5 55.7 24.7" })] }),
+  tourtois: (0, import_jsx_runtime4.jsxs)(import_jsx_runtime4.Fragment, { children: [(0, import_jsx_runtime4.jsx)("rect", { fill: cream, x: "11.07", y: "35.73", width: "26.8", height: "9.7", rx: "3.25", transform: "rotate(-5 24.47 40.58)" }), (0, import_jsx_runtime4.jsx)("path", { fill: yellow, d: "M14.8 16C19 14.6 23 13.5 26.5 12.6 28.4 12.1 29.6 13.4 30.1 15.3L31.6 21 17.4 37.6C13.8 38.2 10.6 37.8 10.1 35.4L9.2 27.8C9.1 26.1 10.1 24.7 11.6 24.1 11.4 22.4 11.4 20.6 11.8 19.1 12.3 17.4 13.3 16.5 14.8 16Z" }), (0, import_jsx_runtime4.jsx)("path", { fill: coral, d: "M14.0 24.1Q13.3 21.2 16.2 20.4L30.7 16.2Q33.6 15.4 34.6 18.2L36.0 22.7Q37.0 25.5 34.7 27.4L20.2 39.7Q17.9 41.6 17.2 38.7Z" }), (0, import_jsx_runtime4.jsx)("path", { fill: blue, d: "M21 23.4 35.5 20.6C37.3 20.2 38.6 21 38.9 22.6L40 34.5C40.1 36.2 39.1 37.3 37.5 37.7 32.6 39.9 26 41 21 41 16 41 12.2 40.2 11 38.8 10.4 37.6 10.8 36.4 12.4 37L19.6 38.4 18.4 27C18.2 25.2 19.3 23.7 21 23.4Z" }), (0, import_jsx_runtime4.jsx)("path", { fill: cream, d: "M22.8 29.6 34.8 26.9C36.2 26.6 37 27.3 37.2 28.6L37.9 33C38.1 34.2 37.5 35 36.3 35.3L24.3 37.8C23 38.1 22.3 37.5 22.1 36.3L21.3 31.6C21.1 30.6 21.7 29.8 22.8 29.6Z" }), (0, import_jsx_runtime4.jsxs)("g", { fill: cream, children: [(0, import_jsx_runtime4.jsx)("circle", { cx: "14.7", cy: "18.45", r: "1" }), (0, import_jsx_runtime4.jsx)("circle", { cx: "17.6", cy: "17.65", r: "1" }), (0, import_jsx_runtime4.jsx)("circle", { cx: "20.5", cy: "16.85", r: "1" }), (0, import_jsx_runtime4.jsx)("circle", { cx: "17.9", cy: "22.2", r: "1" }), (0, import_jsx_runtime4.jsx)("circle", { cx: "21", cy: "21.5", r: "1" }), (0, import_jsx_runtime4.jsx)("circle", { cx: "24.1", cy: "20.75", r: "1" }), (0, import_jsx_runtime4.jsx)("circle", { cx: "28.2", cy: "25.3", r: "1" })] }), (0, import_jsx_runtime4.jsx)("circle", { fill: coral, cx: "21.7", cy: "26.6", r: "1" }), (0, import_jsx_runtime4.jsx)("circle", { fill: yellow, cx: "24.9", cy: "25.9", r: "1.05" }), (0, import_jsx_runtime4.jsxs)("g", { fill: mint, children: [(0, import_jsx_runtime4.jsx)("ellipse", { cx: "8.8", cy: "36.6", rx: "3.6", ry: "1.9", transform: "rotate(22 8.8 36.6)" }), (0, import_jsx_runtime4.jsx)("path", { d: "M12 41C10 41.5 7.5 44.5 7 46.5 7 48 8.5 49.5 10.5 50 12.5 50.5 13.5 50 15 48 15.5 47 16.5 47.5 19 50 22 49.5 22 46.5 22 45.5 20.5 45.5 17 45 16.5 44.5 16.5 44 16.5 42 13.5 40.5L12 41Z" }), (0, import_jsx_runtime4.jsx)("path", { d: "M40 33C39 38 36 42 34.5 41.5 32.5 40.5 29.5 42 28.5 44 26 49 27.5 51.5 32.5 51 36 51 37 50 36 46.5 36 45 37 44.5 38 44.5 38.5 45.5 40.5 49 43.5 50 46.5 47.5 47.5 46.5 46 43.5 44 42 43 41.5 43.5 40.5 44.5 39.5 46 38 47 37.5L47 33Z" })] }), (0, import_jsx_runtime4.jsx)("ellipse", { fill: mint, cx: "46.4", cy: "30.6", rx: "8.1", ry: "8.3" }), (0, import_jsx_runtime4.jsxs)("g", { fill: ink, children: [(0, import_jsx_runtime4.jsx)("rect", { x: "45.05", y: "26.95", width: "2.25", height: "4.6", rx: "1.1", transform: "rotate(-6 46.2 29.3)" }), (0, import_jsx_runtime4.jsx)("rect", { x: "49.25", y: "26.4", width: "2.25", height: "4.6", rx: "1.1", transform: "rotate(-6 50.4 28.7)" })] }), (0, import_jsx_runtime4.jsx)("path", { fill: coral, d: "M46.8 32.2H51C51 34.3 50 35.4 48.9 35.4S46.8 34.3 46.8 32.2Z", transform: "rotate(-8 48.9 33.5)" }), (0, import_jsx_runtime4.jsx)("path", { fill: "none", stroke: yellow, strokeWidth: "3", strokeLinecap: "round", d: "M50.9 17.7 50.5 19.7 M55.2 20.1 53.4 21.9 M56.5 24.5 55.7 24.7" })] }),
   // The launcher's "All Apps": four App tiles, no install arrow.
   allApps: (0, import_jsx_runtime4.jsxs)(import_jsx_runtime4.Fragment, { children: [(0, import_jsx_runtime4.jsx)("rect", { fill: coral, x: "7", y: "7.25", width: "23.2", height: "22.7", rx: "4.6", transform: "rotate(-6.2 18.6 18.6)" }), (0, import_jsx_runtime4.jsx)("rect", { fill: blue, x: "33.9", y: "7.25", width: "23.2", height: "22.7", rx: "4.6", transform: "rotate(6.2 45.5 18.6)" }), (0, import_jsx_runtime4.jsx)("rect", { fill: mint, x: "7", y: "34.15", width: "23.2", height: "22.7", rx: "4.6", transform: "rotate(6.2 18.6 45.5)" }), (0, import_jsx_runtime4.jsx)("rect", { fill: yellow, x: "33.9", y: "34.15", width: "23.2", height: "22.7", rx: "4.6", transform: "rotate(-6.2 45.5 45.5)" })] }),
   // Search: a magnifying glass.
@@ -35641,7 +35673,7 @@ async function stopHtmlGroup(child) {
   }
   throw new Error("HTML process group survived its five-second cleanup bound");
 }
-function runHtmlCommand(args2, cwd, env, command = "pnpm") {
+function runHtmlCommand(args2, cwd, env, command = "pnpm", onOutput) {
   return acquireUseRelease2(
     sync2(() => {
       if (process.platform === "win32")
@@ -35656,11 +35688,13 @@ function runHtmlCommand(args2, cwd, env, command = "pnpm") {
         let stdout = "";
         let stderr = "";
         child.stdout.on("data", (chunk) => {
+          onOutput?.("stdout", chunk);
           stdout += chunk.toString();
           if (Buffer2.byteLength(stdout) > 1024 * 1024)
             reject(new Error("HTML command output exceeded its bound"));
         });
         child.stderr.on("data", (chunk) => {
+          onOutput?.("stderr", chunk);
           stderr += chunk.toString();
           if (Buffer2.byteLength(stderr) > 1024 * 1024)
             reject(new Error("HTML command diagnostics exceeded their bound"));
@@ -35701,10 +35735,10 @@ function snapshotBuildEnvironment(sourceSnapshotPath) {
 }
 function rebuildViteSnapshot(sourceSnapshotPath, recipe, options) {
   if (recipe.kind === "source-html")
-    return rebuildNpmSnapshot(sourceSnapshotPath, recipe);
+    return rebuildNpmSnapshot(sourceSnapshotPath, recipe, options);
   return gen2(function* () {
     const env = snapshotBuildEnvironment(sourceSnapshotPath);
-    const run2 = (args2, cwd = sourceSnapshotPath) => runHtmlCommand(args2, cwd, env);
+    const run2 = (args2, cwd = sourceSnapshotPath) => runHtmlCommand(args2, cwd, env, "pnpm", options.onOutput);
     if ((yield* run2(["--version"])).trim() !== "11.24.0") {
       return yield* fail5(new Error("Publisher requires pnpm 11.24.0"));
     }
@@ -35922,7 +35956,7 @@ function readHtmlBuildOutput(sourceSnapshotPath, recipe) {
     return Object.freeze({ kind: "bytes", bytes });
   });
 }
-function rebuildNpmSnapshot(sourceSnapshotPath, recipe) {
+function rebuildNpmSnapshot(sourceSnapshotPath, recipe, options) {
   return gen2(function* () {
     const env = snapshotBuildEnvironment(sourceSnapshotPath);
     const home = join5(sourceSnapshotPath, ".publisher-home");
@@ -35939,7 +35973,8 @@ function rebuildNpmSnapshot(sourceSnapshotPath, recipe) {
       ["--version"],
       sourceSnapshotPath,
       env,
-      "npm"
+      "npm",
+      options.onOutput
     )).trim() !== recipe.toolchain.npm)
       return yield* fail5(
         new Error("Captured npm version differs from the recipe")
@@ -35948,7 +35983,8 @@ function rebuildNpmSnapshot(sourceSnapshotPath, recipe) {
       ["ci", "--include=dev", "--ignore-scripts", "--no-audit", "--no-fund"],
       sourceSnapshotPath,
       env,
-      "npm"
+      "npm",
+      options.onOutput
     );
     const program = join5(sourceSnapshotPath, ".publisher-build.mjs");
     yield* tryPromise2(async () => {
@@ -35969,7 +36005,8 @@ function rebuildNpmSnapshot(sourceSnapshotPath, recipe) {
       ],
       sourceSnapshotPath,
       env,
-      "node"
+      "node",
+      options.onOutput
     );
     return yield* readHtmlBuildOutput(sourceSnapshotPath, recipe);
   });
@@ -36110,7 +36147,9 @@ function createLocalBuildExecutor(options = {}) {
               if ((yield* runHtmlCommand(
                 ["--version"],
                 source.snapshotPath,
-                environment
+                environment,
+                "pnpm",
+                options.onOutput
               )).trim() !== "11.24.0")
                 return yield* fail5(
                   new Error("Publisher requires pnpm 11.24.0")
@@ -36121,7 +36160,9 @@ function createLocalBuildExecutor(options = {}) {
                   options.packageCacheDirectory
                 ),
                 source.snapshotPath,
-                environment
+                environment,
+                "pnpm",
+                options.onOutput
               );
             }
           }
@@ -36272,6 +36313,9 @@ async function buildTeamCandidate(input) {
   const onPhase = (phase, milliseconds) => {
     phases[phase] += milliseconds;
   };
+  const onOutput = (stream, bytes2) => {
+    input.onOutput?.(stream, bytes2);
+  };
   const prepareStarted = performance.now();
   const candidate = await runPromise2(
     createCapturedCandidatePreparer(config2, {
@@ -36280,10 +36324,11 @@ async function buildTeamCandidate(input) {
         config2.sourceRevision
       ),
       buildExecutor: createLocalBuildExecutor(
-        input.packageStoreDirectory === void 0 ? { packageScripts: "run", onPhase } : {
+        input.packageStoreDirectory === void 0 ? { packageScripts: "run", onPhase, onOutput } : {
           packageScripts: "run",
           packageStoreDirectory: input.packageStoreDirectory,
-          onPhase
+          onPhase,
+          onOutput
         }
       )
     }).prepareCandidate(parseReleaseId("rel_build"))
@@ -36354,7 +36399,10 @@ try {
     repositoryPath,
     outputPath,
     // Computer scratch survives captured snapshot cleanup, without a global or durable Workspace store.
-    packageStoreDirectory: "/var/tmp/fungi-app-package-store"
+    packageStoreDirectory: "/var/tmp/fungi-app-package-store",
+    onOutput: (stream, bytes) => {
+      process[stream].write(bytes);
+    }
   });
   const reportUrl = process.env.TEAM_BUILD_REPORT;
   if (!reportUrl) throw new TeamCandidateBuildError("report_failed");

package/dist/build/job-log.d.ts

@@ -0,0 +1,23 @@
+import * as Schema from "effect/Schema";
+/** Maximum retained combined stdout/stderr bytes, split equally into head and tail. */
+export declare const buildJobLogMaxBytes: number;
+/** Base64url preserves raw command bytes, including split UTF-8 and terminal control bytes. */
+export declare const buildJobLogSchema: Schema.Struct<{
+    readonly encoding: Schema.Literal<"base64url">;
+    readonly output: Schema.String;
+    readonly truncated: Schema.NullOr<Schema.Struct<{
+        readonly droppedBytes: Schema.Number;
+    }>>;
+}>;
+export type BuildJobLog = Schema.Schema.Type<typeof buildJobLogSchema>;
+/** The artifact-upload door cannot write this host-owned job-log namespace. */
+export declare const isBuildJobLogRef: (ref: string) => boolean;
+/** One bounded raw-event sink; event arrival order is the combined output order. */
+export declare function createBuildJobLog(): {
+    /** Retained buffer capacity, distinct from the transient encoded result. */
+    readonly allocatedBytes: number;
+    append(bytes: Uint8Array): void;
+    finish(): BuildJobLog;
+};
+/** Preserve BirdDog's redacted 200-character status/mail budget and name the full log. */
+export declare function buildJobDiagnostic(jobId: string, detail: string): string;

package/dist/build/job-log.js

@@ -0,0 +1,88 @@
+import * as Schema from "effect/Schema";
+import { base64url } from "jose";
+import { boundedDiagnostic } from "@fungi.computer/bird-dog/effect";
+/** Maximum retained combined stdout/stderr bytes, split equally into head and tail. */
+export const buildJobLogMaxBytes = 2 * 1024 * 1024;
+/** Base64url preserves raw command bytes, including split UTF-8 and terminal control bytes. */
+export const buildJobLogSchema = Schema.Struct({
+    encoding: Schema.Literal("base64url"),
+    output: Schema.String.check(Schema.isMaxLength(Math.ceil(buildJobLogMaxBytes / 3) * 4)),
+    truncated: Schema.NullOr(Schema.Struct({
+        droppedBytes: Schema.Number.check(Schema.isInt(), Schema.isGreaterThan(0)),
+    })),
+});
+/** The artifact-upload door cannot write this host-owned job-log namespace. */
+export const isBuildJobLogRef = (ref) => ref.startsWith("artifact:build-log-");
+/** One bounded raw-event sink; event arrival order is the combined output order. */
+export function createBuildJobLog() {
+    const half = buildJobLogMaxBytes / 2;
+    let head = new Uint8Array(0);
+    let tail = new Uint8Array(0);
+    let headBytes = 0;
+    let tailBytes = 0;
+    let tailPosition = 0;
+    let total = 0;
+    const capacityFor = (current, needed) => Math.min(half, Math.max(needed, current === 0 ? 4096 : current * 2));
+    return {
+        /** Retained buffer capacity, distinct from the transient encoded result. */
+        get allocatedBytes() {
+            return head.byteLength + tail.byteLength;
+        },
+        append(bytes) {
+            total += bytes.byteLength;
+            const prefix = Math.min(half - headBytes, bytes.byteLength);
+            if (headBytes + prefix > head.byteLength) {
+                const next = new Uint8Array(capacityFor(head.byteLength, headBytes + prefix));
+                next.set(head.subarray(0, headBytes));
+                head = next;
+            }
+            head.set(bytes.subarray(0, prefix), headBytes);
+            headBytes += prefix;
+            const remaining = bytes.subarray(prefix);
+            if (remaining.byteLength === 0)
+                return;
+            const needed = Math.min(half, tailBytes + remaining.byteLength);
+            if (needed > tail.byteLength) {
+                const next = new Uint8Array(capacityFor(tail.byteLength, needed));
+                const start = tailBytes === tail.byteLength ? tailPosition : 0;
+                const first = Math.min(tailBytes, tail.byteLength - start);
+                next.set(tail.subarray(start, start + first));
+                next.set(tail.subarray(0, tailBytes - first), first);
+                tail = next;
+                tailPosition = tailBytes;
+            }
+            const suffix = remaining.subarray(Math.max(0, remaining.byteLength - half));
+            if (remaining.byteLength >= half) {
+                tailBytes = 0;
+                tailPosition = 0;
+            }
+            const first = Math.min(suffix.byteLength, tail.byteLength - tailPosition);
+            tail.set(suffix.subarray(0, first), tailPosition);
+            tail.set(suffix.subarray(first), 0);
+            tailPosition = (tailPosition + suffix.byteLength) % tail.byteLength;
+            tailBytes = Math.min(half, tailBytes + remaining.byteLength);
+        },
+        finish() {
+            const bytes = new Uint8Array(headBytes + tailBytes);
+            bytes.set(head.subarray(0, headBytes));
+            const start = tailBytes === tail.byteLength ? tailPosition : 0;
+            const first = Math.min(tailBytes, tail.byteLength - start);
+            bytes.set(tail.subarray(start, start + first), headBytes);
+            bytes.set(tail.subarray(0, tailBytes - first), headBytes + first);
+            const droppedBytes = total - bytes.byteLength;
+            return {
+                encoding: "base64url",
+                output: base64url.encode(bytes),
+                truncated: droppedBytes === 0 ? null : { droppedBytes },
+            };
+        },
+    };
+}
+/** The job read door, not an artifact-serving URL. */
+const buildJobLogReference = (jobId) => `/api/builds/${encodeURIComponent(jobId)}?log`;
+/** Preserve BirdDog's redacted 200-character status/mail budget and name the full log. */
+export function buildJobDiagnostic(jobId, detail) {
+    const reference = `Log: ${buildJobLogReference(jobId)}`;
+    const diagnostic = boundedDiagnostic(detail) ?? "Build finished";
+    return `${reference}\n${diagnostic.slice(0, 200 - reference.length - 1)}`;
+}

package/dist/build/local-build.d.ts

@@ -40,7 +40,13 @@ export declare function createFirstPartyAppSourceDistribution(options: {
     readonly source: CapturedSource;
     readonly entry: string;
 }): Effect.Effect<FirstPartyAppSourceDistribution, unknown>;
-/** How one build executor is composed; never part of a recipe or request. */
+/**
+ * How one build executor is composed; never part of a recipe or request.
+ * Build-log stdout/stderr are interleaved in arrival order and unlabelled.
+ * The job log is credential-bearing by design; it must never flow to
+ * diagnostics, Releases, agent surfaces, or support bundles without a
+ * recorded decision.
+ */
 export type LocalBuildExecutorOptions = Readonly<{
     packageStoreDirectory?: string;
     /** Host-hydrated metadata; supplied only for a cache-only pnpm install. */
@@ -53,6 +59,8 @@ export type LocalBuildExecutorOptions = Readonly<{
     packageScripts?: "run";
     /** Hears how long the dependency install and the compile each took. */
     onPhase?: (phase: "install" | "build", milliseconds: number) => void;
+    /** Forward raw install/build output to the admitted Computer's job log. */
+    onOutput?: (stream: "stdout" | "stderr", bytes: Uint8Array) => void;
 }>;
 /** Exact pinned esbuild options shared by local builds and artifact-budget proofs. */
 export declare function localSnapshotBuildOptions(source: CapturedSource, recipe: PinnedRecipe, emission: DefinitionEmission): esbuild.BuildOptions;

package/dist/build/local-build.js

@@ -571,7 +571,7 @@ async function stopHtmlGroup(child) {
     }
     throw new Error("HTML process group survived its five-second cleanup bound");
 }
-function runHtmlCommand(args, cwd, env, command = "pnpm") {
+function runHtmlCommand(args, cwd, env, command = "pnpm", onOutput) {
     return Effect.acquireUseRelease(Effect.sync(() => {
         if (process.platform === "win32")
             throw new Error("HTML builds require POSIX process groups");
@@ -585,11 +585,13 @@ function runHtmlCommand(args, cwd, env, command = "pnpm") {
             let stdout = "";
             let stderr = "";
             child.stdout.on("data", (chunk) => {
+                onOutput?.("stdout", chunk);
                 stdout += chunk.toString();
                 if (Buffer.byteLength(stdout) > 1024 * 1024)
                     reject(new Error("HTML command output exceeded its bound"));
             });
             child.stderr.on("data", (chunk) => {
+                onOutput?.("stderr", chunk);
                 stderr += chunk.toString();
                 if (Buffer.byteLength(stderr) > 1024 * 1024)
                     reject(new Error("HTML command diagnostics exceeded their bound"));
@@ -632,10 +634,10 @@ function snapshotBuildEnvironment(sourceSnapshotPath) {
 }
 function rebuildViteSnapshot(sourceSnapshotPath, recipe, options) {
     if (recipe.kind === "source-html")
-        return rebuildNpmSnapshot(sourceSnapshotPath, recipe);
+        return rebuildNpmSnapshot(sourceSnapshotPath, recipe, options);
     return Effect.gen(function* () {
         const env = snapshotBuildEnvironment(sourceSnapshotPath);
-        const run = (args, cwd = sourceSnapshotPath) => runHtmlCommand(args, cwd, env);
+        const run = (args, cwd = sourceSnapshotPath) => runHtmlCommand(args, cwd, env, "pnpm", options.onOutput);
         if ((yield* run(["--version"])).trim() !== "11.24.0") {
             return yield* Effect.fail(new Error("Publisher requires pnpm 11.24.0"));
         }
@@ -827,7 +829,7 @@ function readHtmlBuildOutput(sourceSnapshotPath, recipe) {
         return Object.freeze({ kind: "bytes", bytes });
     });
 }
-function rebuildNpmSnapshot(sourceSnapshotPath, recipe) {
+function rebuildNpmSnapshot(sourceSnapshotPath, recipe, options) {
     return Effect.gen(function* () {
         const env = snapshotBuildEnvironment(sourceSnapshotPath);
         const home = join(sourceSnapshotPath, ".publisher-home");
@@ -840,9 +842,9 @@ function rebuildNpmSnapshot(sourceSnapshotPath, recipe) {
             await writeFile(userConfig, "", { flag: "wx" });
             await writeFile(globalConfig, "", { flag: "wx" });
         });
-        if ((yield* runHtmlCommand(["--version"], sourceSnapshotPath, env, "npm")).trim() !== recipe.toolchain.npm)
+        if ((yield* runHtmlCommand(["--version"], sourceSnapshotPath, env, "npm", options.onOutput)).trim() !== recipe.toolchain.npm)
             return yield* Effect.fail(new Error("Captured npm version differs from the recipe"));
-        yield* runHtmlCommand(["ci", "--include=dev", "--ignore-scripts", "--no-audit", "--no-fund"], sourceSnapshotPath, env, "npm");
+        yield* runHtmlCommand(["ci", "--include=dev", "--ignore-scripts", "--no-audit", "--no-fund"], sourceSnapshotPath, env, "npm", options.onOutput);
         const program = join(sourceSnapshotPath, ".publisher-build.mjs");
         yield* Effect.tryPromise(async () => {
             const { htmlBuildProgram } = await snapshotPrograms();
@@ -858,7 +860,7 @@ function rebuildNpmSnapshot(sourceSnapshotPath, recipe) {
             dirname(recipe.entry),
             "true",
             "",
-        ], sourceSnapshotPath, env, "node");
+        ], sourceSnapshotPath, env, "node", options.onOutput);
         return yield* readHtmlBuildOutput(sourceSnapshotPath, recipe);
     });
 }
@@ -982,9 +984,9 @@ export function createLocalBuildExecutor(options = {}) {
                                 })))(await readFile(join(source.snapshotPath, "package.json"), "utf8"));
                             });
                             const environment = snapshotBuildEnvironment(source.snapshotPath);
-                            if ((yield* runHtmlCommand(["--version"], source.snapshotPath, environment)).trim() !== "11.24.0")
+                            if ((yield* runHtmlCommand(["--version"], source.snapshotPath, environment, "pnpm", options.onOutput)).trim() !== "11.24.0")
                                 return yield* Effect.fail(new Error("Publisher requires pnpm 11.24.0"));
-                            yield* runHtmlCommand(frozenSnapshotInstallArguments(options.packageStoreDirectory, options.packageCacheDirectory), source.snapshotPath, environment);
+                            yield* runHtmlCommand(frozenSnapshotInstallArguments(options.packageStoreDirectory, options.packageCacheDirectory), source.snapshotPath, environment, "pnpm", options.onOutput);
                         }
                     }
                     const ui = yield* recipe.kind === "bundled-html"

package/dist/cloudflare.d.ts

@@ -9,6 +9,7 @@ import { type AppBackendBindingName } from "@fungi.computer/puffball/app";
 import { type InvocationFrame, type InvocationGate } from "./invocation.js";
 import * as Schema from "effect/Schema";
 import { z } from "zod";
+import type { ResourceRef } from "./apps/installation.js";
 import type { Release } from "@fungi.computer/puffball";
 import { type UiBootCheckOutcome } from "./boot-gate.js";
 export { checkBackendConstruction } from "./boot-construction.js";
@@ -39,6 +40,8 @@ export type FrameBindingMethod<Result> = Readonly<{
     decodeResult: z.ZodType<Result>["parse"];
     /** Determine the declared operations needed for these decoded arguments. */
     requiredOperations: (args: readonly unknown[]) => readonly string[];
+    /** Select a concrete host resource after decoding, before provider dispatch. */
+    requestedResource?: (args: readonly unknown[]) => ResourceRef;
 }>;
 /** Method descriptors for the closed App binding vocabulary. */
 export type FrameBindingMethods<Result> = Readonly<Partial<Record<AppBackendBindingName, Readonly<Record<string, FrameBindingMethod<Result>>>>>>;
@@ -119,7 +122,7 @@ export type AppInstanceLoader<FacetClass> = Readonly<{
         getDurableObjectClass: (exportName: string) => FacetClass;
     }>;
 }>;
-/** End the native App facet when live authority closes early, before the gate admits again. */
+/** Stop the shared native App facet at cohort drain or revocation. */
 export declare function createCloudflareInvocationGate<Host, FacetClass>(ctx: Pick<AppInstanceContext<FacetClass>, "facets">, close: (frame: InvocationFrame<Host>) => Promise<void>): InvocationGate<Host>;
 /**
  * Run an App Instance inside a SQLite-backed Durable Object on workerd, celld

package/dist/cloudflare.js

@@ -267,7 +267,7 @@ const facetInvocationSchema = rpcHandleSchema({
     invoke: rpcMethod(z.union([z.json(), z.undefined()])).input(z.tuple([z.string(), z.array(z.unknown()), z.unknown()])),
     http: rpcMethod(facetHttpReplySchema).input(z.tuple([facetHttpInputSchema, z.unknown()])),
 });
-/** End the native App facet when live authority closes early, before the gate admits again. */
+/** Stop the shared native App facet at cohort drain or revocation. */
 export function createCloudflareInvocationGate(ctx, close) {
     return createInvocationGate({
         abortGuest: () => {

package/dist/files.js

@@ -6,7 +6,7 @@
  * the Oyster's workspace unchanged. Other sources (a git repository) implement
  * the same `FileSource`.
  */
-import { Hono } from "hono";
+import { computer, routes } from "./authorization.js";
 import * as Schema from "effect/Schema";
 import { computerList, computerReadFile, computerWriteFile, } from "@fungi.computer/agar/computer";
 const MAX_FILE_BYTES = 25 * 1024 * 1024;
@@ -66,10 +66,11 @@ export function fileCapabilities(source) {
         },
     ];
 }
+/** The workspace is the Computer's: a key needs `computer.use` (see `authorization.ts`). */
 function createFileRoutes(source) {
-    const routes = new Hono();
+    const table = routes();
     const pathOf = (raw) => normalizeFilePath(raw ?? "");
-    routes.get("/list", async (context) => {
+    table.get("/list", computer(), async (context) => {
         const path = pathOf(context.req.query("path"));
         if (path === null)
             return refusal(400, "Invalid path");
@@ -80,7 +81,7 @@ function createFileRoutes(source) {
             ? refusal(404, "No such directory")
             : Response.json(listing);
     });
-    routes.get("/content", async (context) => {
+    table.get("/content", computer(), async (context) => {
         const path = pathOf(context.req.query("path"));
         if (path === null)
             return refusal(400, "Invalid path");
@@ -91,7 +92,7 @@ function createFileRoutes(source) {
                 headers: { "Content-Type": "application/octet-stream" },
             });
     });
-    routes.put("/content", async (context) => {
+    table.put("/content", computer(), async (context) => {
         const path = pathOf(context.req.query("path"));
         if (path === null || path === "/")
             return refusal(400, "Invalid path");
@@ -104,7 +105,7 @@ function createFileRoutes(source) {
         await source.write(path, bytes);
         return new Response(null, { status: 204 });
     });
-    routes.post("/mkdir", async (context) => {
+    table.post("/mkdir", computer(), async (context) => {
         const body = Schema.decodeUnknownOption(mkdirSchema)(await context.req.json());
         const path = body._tag === "Some" ? normalizeFilePath(body.value.path) : null;
         if (path === null || path === "/")
@@ -112,12 +113,12 @@ function createFileRoutes(source) {
         await source.mkdir(path);
         return new Response(null, { status: 204 });
     });
-    routes.post("/replace", async (context) => {
+    table.post("/replace", computer(), async (context) => {
         const body = Schema.decodeUnknownOption(replaceSchema)(await context.req.json());
         const path = body._tag === "Some" ? normalizeFilePath(body.value.path) : null;
         if (body._tag === "None" || path === null)
             return refusal(400, "Invalid request");
         return Response.json(await source.replace(path, body.value.expectedContent, body.value.content));
     });
-    return routes;
+    return table;
 }