@fungi.computer/tourtois 0.1.0 → 0.2.1

package/dist/SystemSettings.d.ts

@@ -1,6 +1,6 @@
 import { type AppDesktopSettingsApp } from "./AppDesktopSettings.js";
-import { type AppDirectoryEntry } from "@fungi.computer/oyster/shell/app-directory";
-import type { WorkbenchDesktopSettings } from "@fungi.computer/oyster/shell/workbench";
+import { type AppDirectoryEntry } from "@fungi.computer/nacre/app-directory";
+import type { WorkbenchDesktopSettings } from "@fungi.computer/nacre/workbench";
 import { type SettingsSectionPorts } from "./settings-sections.js";
 import type { SettingsLocation } from "./settings-routes.js";
 /** One system-settings surface. The menu only requests opening it. */

package/dist/SystemSettings.js

@@ -2,7 +2,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { AppCallPermissions } from "./AppCallPermissions.js";
 import { SectionHeading } from "@fungi.computer/caps/blocks/section-heading";
 import { AppDesktopSettings, } from "./AppDesktopSettings.js";
-import { addressKey, } from "@fungi.computer/oyster/shell/app-directory";
+import { addressKey, } from "@fungi.computer/nacre/app-directory";
 import { useCallback, useEffect, useMemo, useRef, useState } from "react";
 import { AgentMcpServers } from "./AgentMcpServers.js";
 import { Keys } from "./Keys.js";

package/dist/TeamDesktop.d.ts

@@ -3,7 +3,7 @@ import type { ComputerOption } from "./app-launch.js";
 import type { SettingsLocation } from "./settings-routes.js";
 import type { ReactNode } from "react";
 import type { AppBarItem } from "@fungi.computer/caps/blocks/app-bar";
-import type { WorkbenchDirectory } from "@fungi.computer/oyster/shell/workbench-directory";
+import type { WorkbenchDirectory } from "@fungi.computer/nacre/workbench-directory";
 import type { PlatformControls } from "./platform-controls.js";
 import type { AppStorage } from "@fungi.computer/agar/storage";
 import type { DesktopGillTransport } from "./desktop/row-gill.js";

package/dist/app-authority.d.ts

@@ -1,47 +1,47 @@
 import * as z from "zod";
-import { type AppAddress } from "@fungi.computer/oyster/shell/app-directory";
+import { type AppAddress } from "@fungi.computer/nacre/app-directory";
 export declare const appPermissionChangesSchema: z.ZodObject<{
     computer: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodLazy<z.ZodObject<{
         kind: z.ZodLiteral<"selected-computers">;
         computers: z.ZodArray<z.ZodObject<{
             computerId: z.ZodString;
             operations: z.ZodArray<z.ZodEnum<{
-                "computer.list": "computer.list";
-                "computer.readFile": "computer.readFile";
-                "computer.writeFile": "computer.writeFile";
-                "computer.execute": "computer.execute";
+                readonly "computer.list": "computer.list";
+                readonly "computer.readFile": "computer.readFile";
+                readonly "computer.writeFile": "computer.writeFile";
+                readonly "computer.execute": "computer.execute";
             }>>;
         }, z.core.$strict>>;
     }, z.core.$strict>>, z.ZodLazy<z.ZodObject<{
         kind: z.ZodLiteral<"all-team-computers">;
         operations: z.ZodArray<z.ZodEnum<{
-            "computer.list": "computer.list";
-            "computer.readFile": "computer.readFile";
-            "computer.writeFile": "computer.writeFile";
-            "computer.execute": "computer.execute";
+            readonly "computer.list": "computer.list";
+            readonly "computer.readFile": "computer.readFile";
+            readonly "computer.writeFile": "computer.writeFile";
+            readonly "computer.execute": "computer.execute";
         }>>;
     }, z.core.$strict>>], "kind">>;
     agents: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"all-team-agents">;
         directoryOperations: z.ZodArray<z.ZodEnum<{
-            "agent.list": "agent.list";
+            readonly "agent.list": "agent.list";
         }>>;
         sessionOperations: z.ZodArray<z.ZodEnum<{
-            "agent.read": "agent.read";
-            "agent.send": "agent.send";
-            "agent.manage": "agent.manage";
+            readonly "agent.read": "agent.read";
+            readonly "agent.send": "agent.send";
+            readonly "agent.manage": "agent.manage";
         }>>;
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"selected-agents">;
         directoryOperations: z.ZodArray<z.ZodEnum<{
-            "agent.list": "agent.list";
+            readonly "agent.list": "agent.list";
         }>>;
         agents: z.ZodArray<z.ZodObject<{
             agentId: z.ZodString;
             sessionOperations: z.ZodArray<z.ZodEnum<{
-                "agent.read": "agent.read";
-                "agent.send": "agent.send";
-                "agent.manage": "agent.manage";
+                readonly "agent.read": "agent.read";
+                readonly "agent.send": "agent.send";
+                readonly "agent.manage": "agent.manage";
             }>>;
         }, z.core.$strict>>;
     }, z.core.$strict>], "kind">>;
@@ -63,42 +63,42 @@ export declare const appPermissionReceiptSchema: z.ZodObject<{
         computers: z.ZodArray<z.ZodObject<{
             computerId: z.ZodString;
             operations: z.ZodArray<z.ZodEnum<{
-                "computer.list": "computer.list";
-                "computer.readFile": "computer.readFile";
-                "computer.writeFile": "computer.writeFile";
-                "computer.execute": "computer.execute";
+                readonly "computer.list": "computer.list";
+                readonly "computer.readFile": "computer.readFile";
+                readonly "computer.writeFile": "computer.writeFile";
+                readonly "computer.execute": "computer.execute";
             }>>;
         }, z.core.$strict>>;
     }, z.core.$strict>>, z.ZodLazy<z.ZodObject<{
         kind: z.ZodLiteral<"all-team-computers">;
         operations: z.ZodArray<z.ZodEnum<{
-            "computer.list": "computer.list";
-            "computer.readFile": "computer.readFile";
-            "computer.writeFile": "computer.writeFile";
-            "computer.execute": "computer.execute";
+            readonly "computer.list": "computer.list";
+            readonly "computer.readFile": "computer.readFile";
+            readonly "computer.writeFile": "computer.writeFile";
+            readonly "computer.execute": "computer.execute";
         }>>;
     }, z.core.$strict>>], "kind">>;
     agentPermission: z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"all-team-agents">;
         directoryOperations: z.ZodArray<z.ZodEnum<{
-            "agent.list": "agent.list";
+            readonly "agent.list": "agent.list";
         }>>;
         sessionOperations: z.ZodArray<z.ZodEnum<{
-            "agent.read": "agent.read";
-            "agent.send": "agent.send";
-            "agent.manage": "agent.manage";
+            readonly "agent.read": "agent.read";
+            readonly "agent.send": "agent.send";
+            readonly "agent.manage": "agent.manage";
         }>>;
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"selected-agents">;
         directoryOperations: z.ZodArray<z.ZodEnum<{
-            "agent.list": "agent.list";
+            readonly "agent.list": "agent.list";
         }>>;
         agents: z.ZodArray<z.ZodObject<{
             agentId: z.ZodString;
             sessionOperations: z.ZodArray<z.ZodEnum<{
-                "agent.read": "agent.read";
-                "agent.send": "agent.send";
-                "agent.manage": "agent.manage";
+                readonly "agent.read": "agent.read";
+                readonly "agent.send": "agent.send";
+                readonly "agent.manage": "agent.manage";
             }>>;
         }, z.core.$strict>>;
     }, z.core.$strict>], "kind">;
@@ -140,10 +140,10 @@ export declare const appMutationResponseSchema: z.ZodObject<{
         }, z.core.$strict>]>>;
         authorityVersion: z.ZodNumber;
         state: z.ZodEnum<{
-            unaffected: "unaffected";
-            pending: "pending";
-            applied: "applied";
-            expired: "expired";
+            readonly unaffected: "unaffected";
+            readonly pending: "pending";
+            readonly applied: "applied";
+            readonly expired: "expired";
         }>;
         outstanding: z.ZodNumber;
     }, z.core.$strict>>>;

package/dist/app-authority.js

@@ -1,5 +1,5 @@
 import * as z from "zod";
-import { appAuthorityEnforcementSchema, appComputerPermissionSchema, appAgentPermissionSchema, appGenerationPermissionsSchema, appMarketplacePermissionsSchema, } from "@fungi.computer/oyster/shell/app-directory";
+import { appAuthorityEnforcementSchema, appComputerPermissionSchema, appAgentPermissionSchema, appGenerationPermissionsSchema, appMarketplacePermissionsSchema, } from "@fungi.computer/nacre/app-directory";
 export const appPermissionChangesSchema = z
     .strictObject({
     computer: appComputerPermissionSchema.optional(),

package/dist/app-directory-reconciliation.js

@@ -62,11 +62,16 @@ function appLaunchRequiresReplacement(current, next) {
 function appLaunchRequiresDirectoryUpdate(current, next) {
     return (next.appId !== current.appId ||
         next.surfaceId !== current.surfaceId ||
-        stableLaunchHref(next.href, true) !== stableLaunchHref(current.href, true));
+        stableLaunchHref(next.href, true, next.releaseId !== current.releaseId) !==
+            stableLaunchHref(current.href, true, next.releaseId !== current.releaseId));
 }
-function stableLaunchHref(href, ignoreReleaseId = false) {
+function stableLaunchHref(href, ignoreReleaseId = false, ignoreAuthorityVersion = false) {
     const url = new URL(href, "https://tourtois.invalid");
     if (ignoreReleaseId)
         url.searchParams.delete("releaseId");
+    // A promotion changes both selection facts. Leave the admitted mount alone
+    // until Reload; other authority/permission changes still reconcile normally.
+    if (ignoreAuthorityVersion)
+        url.searchParams.delete("authorityVersion");
     return url.pathname + url.search;
 }

package/dist/app-directory.d.ts

@@ -1,4 +1,4 @@
-import { type WorkbenchDirectory } from "@fungi.computer/oyster/shell/workbench-directory";
+import { type WorkbenchDirectory } from "@fungi.computer/nacre/workbench-directory";
 /** Shell composition keeps an unread directory distinct from an empty one. */
 export declare function useAppDirectory(teamId: string, directoryReader: () => Promise<WorkbenchDirectory>): {
     query: import("@tanstack/react-query").UseQueryResult<{
@@ -64,7 +64,7 @@ export declare function useAppDirectory(teamId: string, directoryReader: () => P
                     }>) | undefined;
                 }> | undefined;
             }>[];
-            gills: import("@fungi.computer/oyster/shell/app-directory").AppDirectoryGill[];
+            gills: import("@fungi.computer/nacre/app-directory").AppDirectoryGill[];
             availability: "available" | "unavailable";
             surface: {
                 stableRoute: string;
@@ -76,7 +76,7 @@ export declare function useAppDirectory(teamId: string, directoryReader: () => P
                 readonly appId: string;
                 readonly methods: readonly string[];
             }[] | undefined;
-            computer?: {
+            computer?: "owner-fleet" | {
                 computerId: string;
                 name: string;
             } | undefined;
@@ -99,6 +99,7 @@ export declare function useAppDirectory(teamId: string, directoryReader: () => P
             computerId: string;
             name: string;
         } | undefined;
+        computerContext?: "owner-fleet" | undefined;
         needsUpdate?: {
             installationId: string | null;
             appId: string | null;
@@ -167,7 +168,7 @@ export declare function useAppDirectory(teamId: string, directoryReader: () => P
                 }>) | undefined;
             }> | undefined;
         }>[];
-        gills: import("@fungi.computer/oyster/shell/app-directory").AppDirectoryGill[];
+        gills: import("@fungi.computer/nacre/app-directory").AppDirectoryGill[];
         availability: "available" | "unavailable";
         surface: {
             stableRoute: string;
@@ -179,7 +180,7 @@ export declare function useAppDirectory(teamId: string, directoryReader: () => P
             readonly appId: string;
             readonly methods: readonly string[];
         }[] | undefined;
-        computer?: {
+        computer?: "owner-fleet" | {
             computerId: string;
             name: string;
         } | undefined;

package/dist/app-directory.js

@@ -1,6 +1,6 @@
 import { tourtoisQueryKeys } from "./queries.js";
 import { useQuery } from "@tanstack/react-query";
-import { workbenchDirectorySchema, } from "@fungi.computer/oyster/shell/workbench-directory";
+import { workbenchDirectorySchema, } from "@fungi.computer/nacre/workbench-directory";
 const noRoles = {};
 /** Shell composition keeps an unread directory distinct from an empty one. */
 export function useAppDirectory(teamId, directoryReader) {
@@ -11,6 +11,9 @@ export function useAppDirectory(teamId, directoryReader) {
         // The host's selection read can finish before Tourtois mounts. Keep the
         // result fresh for that handoff; explicit mutations still invalidate it.
         staleTime: 5_000,
+        // Quiet open Apps need release availability too, not just after a request
+        // is refused. React Query pauses this polling while the page is hidden.
+        refetchInterval: 15_000,
     });
     return {
         query,

package/dist/app-launch.d.ts

@@ -2,7 +2,7 @@ import type { AppOpenInput } from "@fungi.computer/agar/apps";
 import type { WhistleSnapshot } from "@fungi.computer/whistle";
 import { type TourtoisAppSurfaceHost } from "./app-surface.js";
 import { createAppWindowManager, type AppLaunchDescriptor, type AppWindowManager, type AppWindowProjection } from "./app-windows.js";
-import type { WorkbenchDirectory } from "@fungi.computer/oyster/shell/workbench-directory";
+import type { WorkbenchDirectory } from "@fungi.computer/nacre/workbench-directory";
 export type AppDirectoryApp = WorkbenchDirectory["apps"][number];
 export type AppDirectoryRoles = WorkbenchDirectory["roles"];
 /** The Team's effective App for a role when it can be launched now. */

package/dist/app-launch.js

@@ -114,10 +114,13 @@ export function sameOfferedComputers(left, right) {
         }));
 }
 function computersForApp(app, computers) {
-    // A standalone host supplies its fixed context, not fabricated Team grants.
+    // Standalone context is fixed or owner-fleet, never fabricated Team grants.
     // Only an offered inventory entry can become a window's Computer choice.
-    if (app.computer !== undefined)
-        return computers.filter((computer) => computer.computerId === app.computer?.computerId);
+    const context = app.computer;
+    if (context === "owner-fleet")
+        return computers;
+    if (context !== undefined)
+        return computers.filter((computer) => computer.computerId === context.computerId);
     const permission = app.computerPermission;
     if (!permission)
         return [];

package/dist/app-menus.d.ts

@@ -1,4 +1,4 @@
-import type { AppSurfaceCommandHost } from "@fungi.computer/oyster/shell/command-host";
+import type { AppSurfaceCommandHost } from "@fungi.computer/nacre/command-host";
 /** Render the focused App's Whistle commands in the desktop's system bar. */
 export declare function AppMenus({ host, container: popover, }: Readonly<{
     host: Pick<AppSurfaceCommandHost, "subscribe" | "menu" | "execute"> | null;

package/dist/app-surface.d.ts

@@ -4,8 +4,9 @@ import type { AgentSessionSelection, AppNavigationState, AppStatusItem, FileNavi
 import type { AppOpenInput, AppRoleChoice } from "@fungi.computer/agar/apps";
 import type { AppDeclaredCommand } from "@fungi.computer/puffball/app";
 import type { AppWindowMount } from "./app-windows.js";
+import type { WindowEvents } from "@fungi.computer/nacre/window-manager";
 /** What one mounted App may raise toward the shell. */
-export type TourtoisAppMountEvents = Readonly<{
+export type TourtoisAppMountEvents = Pick<WindowEvents, "onDeliveryPending"> & Readonly<{
     onComputerChoice?: () => Promise<void>;
     onAgentSessionSelection: (selection: AgentSessionSelection | null) => Promise<void>;
     /** A presentation-neutral file handoff to another App. */

package/dist/app-windows.d.ts

@@ -1,5 +1,5 @@
 import type { AppOpenRequest } from "@fungi.computer/agar";
-import { type WindowHost, type WindowEvents, type WindowProjection, type WindowMount, type WindowManager, type WindowManagerOptions } from "@fungi.computer/oyster/shell/window-manager";
+import { type WindowHost, type WindowEvents, type WindowProjection, type WindowMount, type WindowManager, type WindowManagerOptions } from "@fungi.computer/nacre/window-manager";
 export type AppLaunchDescriptor = Readonly<{
     windowId: string;
     /** Stable presentation identity across default inheritance/customization. */
@@ -92,7 +92,7 @@ export declare const hasVisibleAppWindows: (projection: Readonly<{
             }>[];
         }>;
         container: HTMLElement;
-        status: import("@fungi.computer/oyster/shell/window-manager").WindowStatus;
+        status: import("@fungi.computer/nacre/window-manager").WindowStatus;
         generation: number;
         error?: unknown;
         cleanupError?: unknown;
@@ -110,6 +110,7 @@ export declare const hasVisibleAppWindows: (projection: Readonly<{
             primary?: readonly Readonly<{
                 id: string;
                 label: string;
+                icon?: "play";
                 variant?: "primary" | "outline" | "ghost";
                 tone?: "destructive";
                 disabled?: boolean;
@@ -117,6 +118,7 @@ export declare const hasVisibleAppWindows: (projection: Readonly<{
             menu?: readonly Readonly<{
                 id: string;
                 label: string;
+                icon?: "play";
                 variant?: "primary" | "outline" | "ghost";
                 tone?: "destructive";
                 disabled?: boolean;
@@ -124,6 +126,7 @@ export declare const hasVisibleAppWindows: (projection: Readonly<{
             status?: readonly Readonly<{
                 id: string;
                 label: string;
+                presentation?: "bead";
                 tone?: "neutral" | "info" | "warning" | "success" | "error";
             }>[];
         }> | null;

package/dist/app-windows.js

@@ -1,4 +1,4 @@
-import { createWindowManager, hasVisibleWindows, } from "@fungi.computer/oyster/shell/window-manager";
+import { createWindowManager, hasVisibleWindows, } from "@fungi.computer/nacre/window-manager";
 export const hasVisibleAppWindows = (hasVisibleWindows);
 /** DOM attachment and App identity belong to the browser host. */
 export function createAppWindowManager(options) {

package/dist/command-dialogs.d.ts

@@ -1,7 +1,7 @@
 import { type ReactNode } from "react";
 import type { WhistleSnapshot } from "@fungi.computer/whistle";
 import type { AppDeclaredCommand } from "@fungi.computer/puffball/app";
-import { type AppSurfaceCommandHost } from "@fungi.computer/oyster/shell/command-host";
+import { type AppSurfaceCommandHost } from "@fungi.computer/nacre/command-host";
 /** Current command view and the host-owned dialog visibility. */
 export type ShellCommandState = Readonly<{
     active: WhistleSnapshot;

package/dist/command-dialogs.js

@@ -3,8 +3,8 @@ import { useCallback, useLayoutEffect, useMemo } from "react";
 import { CommandMenu } from "@fungi.computer/caps/blocks/command-menu";
 import { Combobox } from "@fungi.computer/caps/components/combobox";
 import { Dialog, DialogContent, DialogDescription, DialogTitle, } from "@fungi.computer/caps/components/dialog";
-import { appDirectorySourceId, } from "@fungi.computer/oyster/shell/command-host";
-import { leaderKeyMatches, leaderKeys, parseChord, } from "@fungi.computer/oyster/shell/keys";
+import { appDirectorySourceId, } from "@fungi.computer/nacre/command-host";
+import { leaderKeyMatches, leaderKeys, parseChord, } from "@fungi.computer/nacre/keys";
 function isMac() {
     return /Mac|iPhone|iPad/u.test(navigator.userAgent);
 }
@@ -37,9 +37,9 @@ function commandKeycaps(commandId, active, mac, declared) {
     if (leader !== undefined)
         return [mac ? "⌘ K" : "Ctrl K", "then", chordKey(leader.key)];
     const binding = active.bindings.find((row) => row.commandId === commandId);
-    const declaredBinding = declared?.projections?.bindings?.values.find((value) => value.startsWith("<leader> "));
+    const declaredBinding = declared?.projections?.bindings?.values.find((value) => value.startsWith("<leader>"));
     if (declaredBinding !== undefined)
-        return [mac ? "⌘ K" : "Ctrl K", "then", chordKey(declaredBinding.slice(9))];
+        return [mac ? "⌘ K" : "Ctrl K", "then", chordKey(declaredBinding.slice(8))];
     if (binding === undefined)
         return [];
     const chord = parseChord(binding.binding, mac);

package/dist/desktop/Desktop.d.ts

@@ -2,7 +2,7 @@ import type { AppOpenInput } from "@fungi.computer/agar/apps";
 import type { DesktopMethods } from "../desktop-api.js";
 import type { AppStorage } from "@fungi.computer/agar/storage";
 import type { AppBarItem } from "@fungi.computer/caps/blocks/app-bar";
-import type { WorkbenchDirectory } from "@fungi.computer/oyster/shell/workbench-directory";
+import type { WorkbenchDirectory } from "@fungi.computer/nacre/workbench-directory";
 import { type DesktopLayoutClient } from "../desktop-client.js";
 import { type DesktopGillTransport } from "./row-gill.js";
 export type DesktopProps = {

package/dist/desktop/consent.d.ts

@@ -1,4 +1,4 @@
-import { type WorkbenchDesktopSettings } from "@fungi.computer/oyster/shell/workbench";
+import { type WorkbenchDesktopSettings } from "@fungi.computer/nacre/workbench";
 import type { DesktopLayoutClient } from "../desktop-client.js";
 /** Only the host's member-consent UI invokes this admitted dashboard callback. */
 export declare function desktopSettingsHandler(current: () => DesktopLayoutClient | null): WorkbenchDesktopSettings;

package/dist/desktop/consent.js

@@ -1,5 +1,5 @@
 import { AppError } from "@fungi.computer/agar";
-import { desktopGillAdditionSchema, desktopGillSelectionSchema, } from "@fungi.computer/oyster/shell/workbench";
+import { desktopGillAdditionSchema, desktopGillSelectionSchema, } from "@fungi.computer/nacre/workbench";
 /** Only the host's member-consent UI invokes this admitted dashboard callback. */
 export function desktopSettingsHandler(current) {
     const owner = () => {

package/dist/desktop/row-gill.d.ts

@@ -1,7 +1,7 @@
 import type { AppBarItem } from "@fungi.computer/caps/blocks/app-bar";
 import { type ReactNode } from "react";
 import { type GillResponse } from "@fungi.computer/gills";
-import type { TeamWorkbenchHostHandle } from "@fungi.computer/oyster/shell/workbench";
+import type { TeamWorkbenchHostHandle } from "@fungi.computer/nacre/workbench";
 import type { AppDeclaredGill, AppGillDesktopSize } from "@fungi.computer/gills";
 export type DesktopGillTransport = Pick<TeamWorkbenchHostHandle, "requestGill" | "watchGillChanges">;
 /** The host admits reads; opening a row navigates inside its App. */

package/dist/oyster-platform-controls.d.ts

@@ -1,4 +1,4 @@
 import "@fungi.computer/parakeet/styles.css";
 import "./shell.css";
-import type { MountPlatformControls } from "@fungi.computer/oyster/shell/shell-module";
+import type { MountPlatformControls } from "@fungi.computer/nacre/shell-module";
 export declare const mountPlatformControls: MountPlatformControls;

package/dist/oyster-platform-controls.js

@@ -7,12 +7,14 @@ import "@fungi.computer/parakeet/styles.css";
 import "./shell.css";
 import { AppError } from "@fungi.computer/agar";
 import { createQueryClient } from "@fungi.computer/agar/query";
-import { workbenchDirectorySchema } from "@fungi.computer/oyster/shell/workbench-directory";
+import { workbenchDirectorySchema } from "@fungi.computer/nacre/workbench-directory";
 import { QueryClientProvider } from "@tanstack/react-query";
 import * as S from "effect/Schema";
+import { z } from "zod";
 import { createRoot } from "react-dom/client";
-import { agentMcpServersViewSchema, createPlatformControls, keyIssueResultSchema, keyRecordSchema, keysViewSchema, PlatformControlsView, } from "./platform-controls.js";
+import { agentMcpServersViewSchema, createPlatformControls, PlatformControlsView, } from "./platform-controls.js";
 import { settingsLocationSchema } from "./settings-routes.js";
+import { OysterComputers, createOysterComputersPort, } from "./OysterComputers.js";
 async function json(path) {
     const response = await fetch(path, {
         credentials: "same-origin",
@@ -61,33 +63,72 @@ const agentMcpServers = {
     },
 };
 /** Owner-direct Keys custody; a plaintext secret comes back only once, on issue. */
-const keys = {
-    list: async () => keysViewSchema.parse(await json("/api/keys")),
-    issue: async (draft) => {
-        const response = await ownerRequest("/api/keys", {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: JSON.stringify(draft),
-        }, "The key request was refused");
-        return keyIssueResultSchema.parse(await response.json());
-    },
-    revoke: async (keyId, requestId) => {
-        const response = await ownerRequest("/api/keys/revoke", {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: JSON.stringify({ keyId, requestId }),
-        }, "The key request was refused");
-        return keyRecordSchema.parse(await response.json());
-    },
-};
+function createOysterKeysPort(oysterKeysWire) {
+    const oysterKeysView = z.strictObject({
+        keys: z.array(oysterKeysWire.summary),
+    });
+    const oysterKeyIssue = z.strictObject({
+        plaintext: z.string().min(1),
+        key: oysterKeysWire.summary,
+    });
+    const oysterKeyMutation = z.strictObject({ key: oysterKeysWire.summary });
+    return {
+        scope: "oyster",
+        expiry: "optional",
+        options: (apps) => {
+            const targets = apps.map((app) => ({
+                id: app.installationId,
+                name: app.displayName,
+            }));
+            return Promise.resolve([
+                { capability: "apps.read", label: "Read Apps", targets },
+                {
+                    capability: "apps.use",
+                    label: "Use Apps and run Workflows",
+                    targets,
+                },
+                { capability: "computer.use", label: "Use the Computer" },
+            ]);
+        },
+        list: async () => oysterKeysView.parse(await json("/api/keys")),
+        issue: async (draft) => {
+            const response = await ownerRequest("/api/keys", {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify(oysterKeysWire.issue.parse(draft)),
+            }, "The key request was refused");
+            return oysterKeyIssue.parse(await response.json());
+        },
+        revoke: async (keyId, requestId) => {
+            const response = await ownerRequest("/api/keys/revoke", {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify(oysterKeysWire.revoke.parse({ keyId, requestId })),
+            }, "The key request was refused");
+            const result = oysterKeyMutation.parse(await response.json());
+            return { key: result.key, notice: "Key revoked.", retry: false };
+        },
+    };
+}
 const directory = async () => workbenchDirectorySchema.parse(await json("/api/workbench/directory"));
 export const mountPlatformControls = (root, input) => {
+    const keys = createOysterKeysPort(input.keysWire);
+    const requestAppAccess = (target, request, dialog) => input.requestAppAccess(target, request, {
+        ask: dialog.ask,
+        customize: (installationId) => dialog.customize({
+            category: "apps",
+            appKey: installationId === null ? null : `installation:${installationId}`,
+            section: "desktop",
+        }),
+    });
     const controls = createPlatformControls({
-        sections: ["home", "apps", "connectors", "keys"],
+        sections: ["home", "apps", "connectors", "computers", "keys"],
     });
+    const computersPort = createOysterComputersPort(new URL(window.location.origin));
+    const computers = () => (_jsx(OysterComputers, { teamId: input.teamId, port: computersPort, onChanged: controls.changed }));
     const client = createQueryClient();
     const settings = createRoot(root);
-    settings.render(_jsx(QueryClientProvider, { client: client, children: _jsx(PlatformControlsView, { teamId: input.teamId, controls: controls, data: { directory, agentMcpServers, keys } }) }));
+    settings.render(_jsx(QueryClientProvider, { client: client, children: _jsx(PlatformControlsView, { teamId: input.teamId, controls: controls, data: { directory, agentMcpServers, computers, keys, requestAppAccess } }) }));
     return Promise.resolve({
         controls: {
             ...controls,

package/dist/platform-controls.d.ts

@@ -1,5 +1,6 @@
-import type { WorkbenchDirectory } from "@fungi.computer/oyster/shell/workbench-directory";
-import { type WorkbenchDesktopSettings, type WorkbenchDesktopRegistration } from "@fungi.computer/oyster/shell/workbench";
+import type { WorkbenchHostControls } from "@fungi.computer/nacre/workbench";
+import type { WorkbenchDirectory } from "@fungi.computer/nacre/workbench-directory";
+import { type WorkbenchDesktopSettings, type WorkbenchDesktopRegistration } from "@fungi.computer/nacre/workbench";
 import type { AppPermissionOutcome, AppPermissionRequest } from "@fungi.computer/agar";
 import { type AppAccessRequest } from "./AppAccessConsent.js";
 import { createSettingsRouter, type SettingsLocation } from "./settings-routes.js";
@@ -7,7 +8,7 @@ export { parseSettingsLocation } from "./settings-routes.js";
 import type { SettingsSectionPorts } from "./settings-sections.js";
 export type { SettingsSectionPorts, TeamAdministrationPort, } from "./settings-sections.js";
 export { agentMcpServersViewSchema, type AgentMcpServerDraft, type AgentMcpServersPort, type AgentMcpServersView, } from "./AgentMcpServers.js";
-export { keyGrantSchema, keyGrantTargetSchema, keyIssueResultSchema, keyRecordSchema, keysViewSchema, type KeyAppAccessLevel, type KeyAppOption, type KeyGrant, type KeyGrantTarget, type KeyIssueDraft, type KeyIssueResult, type KeyRecord, type KeysPort, type KeysView, } from "./Keys.js";
+export { type KeyAppOption, type KeyGrantOption, type KeyGrantPreviewProps, type KeyTargetOption, type KeyChange, type KeyIssueDraft, type KeyIssueResult, type KeysPort, type KeysView, } from "./Keys.js";
 /**
  * Team administration a dashboard may ask for but never performs itself:
  * System Settings (App permissions, forks, default Apps, Team Git, sprite)
@@ -36,7 +37,7 @@ export type PlatformControlsHost = PlatformControls & Readonly<{
     desktopConsentReadyAt: () => number;
     /** A child App can suggest Settings; only the member's Review opens them. */
     suggestDesktopSettings: (target: AppAccessTarget) => void;
-    requestAppAccess: (target: AppAccessTarget, input: AppPermissionRequest) => Promise<AppPermissionOutcome>;
+    requestAppAccess: WorkbenchHostControls["requestAppAccess"];
     /** View wiring: current location, navigation and the consent handler. */
     /** Settings the embedding host backs with real data and actions. */
     sections?: readonly SettingsLocation["category"][] | undefined;
@@ -74,7 +75,7 @@ export type PlatformControlsData = SettingsSectionPorts & Readonly<{
      * capabilities; the owner's click in this trusted shell is the only grant
      * a host without a separate per-App ceiling needs.
      */
-    requestAppAccess?(target: AppAccessTarget, input: AppPermissionRequest, dialog: AppAccessDialog): Promise<AppPermissionOutcome>;
+    requestAppAccess?(target: Parameters<WorkbenchHostControls["requestAppAccess"]>[0], input: AppPermissionRequest, dialog: AppAccessDialog): Promise<AppPermissionOutcome>;
 }>;
 /** Tourtois owns the same Settings renderer on every embedding host. */
 export declare function PlatformControlsView({ teamId, controls, data, }: {

package/dist/platform-controls.js

@@ -2,8 +2,8 @@ import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-run
 import { AppError } from "@fungi.computer/agar";
 import { Button } from "@fungi.computer/caps/components/button";
 import { toast } from "@fungi.computer/caps/components/toaster";
-import { desktopGillAdditionSchema, desktopGillSelectionSchema, } from "@fungi.computer/oyster/shell/workbench";
-import { addressKey } from "@fungi.computer/oyster/shell/app-directory";
+import { desktopGillAdditionSchema, desktopGillSelectionSchema, } from "@fungi.computer/nacre/workbench";
+import { addressKey } from "@fungi.computer/nacre/app-directory";
 import { tourtoisQueryKeys } from "./queries.js";
 import { useQuery } from "@tanstack/react-query";
 import { lazy, Suspense, useEffect, useState, useSyncExternalStore, } from "react";
@@ -13,7 +13,7 @@ import { createSettingsRouter, navigateSettings, settingsLocationSchema, } from
 export { parseSettingsLocation } from "./settings-routes.js";
 import { MemberAvatarSource } from "./member-avatar.js";
 export { agentMcpServersViewSchema, } from "./AgentMcpServers.js";
-export { keyGrantSchema, keyGrantTargetSchema, keyIssueResultSchema, keyRecordSchema, keysViewSchema, } from "./Keys.js";
+export {} from "./Keys.js";
 /** One host's platform controls; render them with `PlatformControlsView`. */
 export function createPlatformControls(options) {
     const sections = options?.sections.slice();

package/dist/queries.d.ts

@@ -1,5 +1,9 @@
 /** Keep host and isolated-workbench reads in distinct cache entries. */
 export declare const tourtoisQueryKeys: {
+    oysterComputers: (teamId: string) => readonly ["tourtois", "oyster-computers", string];
+    oysterComputerPage: (teamId: string, offset: number) => readonly ["tourtois", "oyster-computers", string, number];
+    oysterSelectedComputer: (teamId: string) => readonly ["tourtois", "oyster-selected-computer", string];
+    oysterInternetAccess: (teamId: string, computerId: string) => readonly ["tourtois", "oyster-internet-access", string, string];
     hostSettings: (workspaceId: string) => readonly ["tourtois", "host-settings", string];
     workbench: () => readonly ["tourtois", "workbench"];
     workbenchComputers: (teamId: string) => readonly ["tourtois", "workbench-computers", string];