@fungi.computer/tourtois 0.2.1 → 0.3.0

package/dist/OysterComputers.d.ts

@@ -2,19 +2,24 @@ import { teamComputerDirectorySchema, type TeamComputer } from "@fungi.computer/
 import * as z from "zod";
 /** One owner-fleet page returned by the public Computer controls port. */
 export type ComputerPage = z.output<typeof teamComputerDirectorySchema>;
-/** Owner controls over the existing standalone fleet, not a second inventory. */
+/** Host-supplied owner controls over the existing fleet, not a second inventory. */
 export type OysterComputersPort = Readonly<{
     list(offset: number): Promise<ComputerPage>;
-    selected(): Promise<string | null>;
     create(name: string | undefined, requestId: string): Promise<TeamComputer>;
     start(computerId: string): Promise<void>;
-    select(computerId: string): Promise<TeamComputer>;
     internetAccess(computerId: string): Promise<boolean>;
     setInternetAccess(computerId: string, enabled: boolean): Promise<boolean>;
+    /** Only hosts with a persisted default for new Apps supply selection. */
+    selection?: Readonly<{
+        selected(): Promise<string | null>;
+        select(computerId: string): Promise<TeamComputer>;
+    }>;
+    /** Operator policy readback, when the host exposes it. Unknown locks writes. */
+    egressPolicy?(): Promise<"enabled" | "globally-disabled" | "team-disabled">;
 }>;
 /** Bind owner-admitted fleet controls to this trusted shell's host origin. */
 export declare function createOysterComputersPort(origin: URL): OysterComputersPort;
-/** Owner Settings over the host's existing inventory and default selection. */
+/** Owner Settings over the host's existing inventory and optional default. */
 export declare function OysterComputers({ teamId, port, onChanged, }: {
     teamId: string;
     port: OysterComputersPort;

package/dist/OysterComputers.js

@@ -40,11 +40,6 @@ export function createOysterComputersPort(origin) {
             const response = await read(`/api/computers?${new URLSearchParams({ limit: "100", offset: String(offset) })}`);
             return teamComputerDirectorySchema.parse(await response.json());
         },
-        selected: async () => {
-            const response = await read("/api/workbench/directory");
-            return (workbenchDirectorySchema.parse(await response.json()).computer
-                ?.computerId ?? null);
-        },
         create: async (name, requestId) => {
             const response = await read("/api/computers", {
                 method: "POST",
@@ -59,12 +54,19 @@ export function createOysterComputersPort(origin) {
             });
             await response.json();
         },
-        select: async (computerId) => {
-            const response = await read("/api/computers/selected", {
-                method: "PUT",
-                body: JSON.stringify({ computerId }),
-            });
-            return teamComputerSchema.parse(await response.json());
+        selection: {
+            selected: async () => {
+                const response = await read("/api/workbench/directory");
+                return (workbenchDirectorySchema.parse(await response.json()).computer
+                    ?.computerId ?? null);
+            },
+            select: async (computerId) => {
+                const response = await read("/api/computers/selected", {
+                    method: "PUT",
+                    body: JSON.stringify({ computerId }),
+                });
+                return teamComputerSchema.parse(await response.json());
+            },
         },
         internetAccess: async (computerId) => {
             const response = await read(`/api/computers/${encodeURIComponent(computerId)}/internet-access`);
@@ -76,7 +78,7 @@ export function createOysterComputersPort(origin) {
         },
     };
 }
-function InternetAccess({ teamId, computer, port, }) {
+function InternetAccess({ teamId, computer, port, policy, }) {
     const queryKey = tourtoisQueryKeys.oysterInternetAccess(teamId, computer.computerId);
     const current = useQuery({
         queryKey,
@@ -87,13 +89,15 @@ function InternetAccess({ teamId, computer, port, }) {
         apply: (_previous, enabled) => enabled,
         mutationFn: (enabled) => port.setInternetAccess(computer.computerId, enabled),
     }));
-    return (_jsxs("div", { className: "grid gap-sm", children: [_jsxs("label", { className: "flex gap-sm", children: ["Internet access", _jsx(Switch, { "aria-label": `Internet access for ${computer.name}`, checked: current.data ?? false, disabled: current.data === undefined || update.isPending, onCheckedChange: (enabled) => {
+    return (_jsxs("div", { className: "grid gap-sm", children: [_jsxs("label", { className: "flex gap-sm", children: ["Internet access", _jsx(Switch, { "aria-label": `Internet access for ${computer.name}`, checked: current.data ?? false, disabled: policy !== "enabled" ||
+                            current.data === undefined ||
+                            update.isPending, onCheckedChange: (enabled) => {
                             update.mutate(enabled);
                         } })] }), current.isPending ? (_jsx("p", { role: "status", children: "Checking Internet access\u2026" })) : null, current.isError ? (_jsxs("div", { role: "alert", children: [_jsxs("p", { children: ["Could not check Internet access for ", computer.name, "."] }), _jsx(Button, { onClick: () => {
                             void current.refetch();
-                        }, children: "Retry Internet access" })] })) : null, update.isError ? (_jsxs("p", { role: "alert", children: ["Could not save Internet access for ", computer.name, "."] })) : null] }));
+                        }, children: "Retry Internet access" })] })) : null, update.isError ? (_jsxs("p", { role: "alert", children: ["Could not save Internet access for ", computer.name, "."] })) : null, policy === "globally-disabled" ? (_jsx("p", { children: "Internet access is locked by the global off switch." })) : null, policy === "team-disabled" ? (_jsx("p", { children: "Internet access is locked for this Team." })) : null] }));
 }
-/** Owner Settings over the host's existing inventory and default selection. */
+/** Owner Settings over the host's existing inventory and optional default. */
 export function OysterComputers({ teamId, port, onChanged, }) {
     const client = useQueryClient();
     const [offset, setOffset] = useState(0);
@@ -101,13 +105,24 @@ export function OysterComputers({ teamId, port, onChanged, }) {
     const intent = useRef(null);
     const inventoryKey = tourtoisQueryKeys.oysterComputers(teamId);
     const selectionKey = tourtoisQueryKeys.oysterSelectedComputer(teamId);
+    const selection = port.selection;
     const inventory = useQuery({
         queryKey: tourtoisQueryKeys.oysterComputerPage(teamId, offset),
         queryFn: () => port.list(offset),
     });
     const selected = useQuery({
         queryKey: selectionKey,
-        queryFn: () => port.selected(),
+        enabled: selection !== undefined,
+        queryFn: () => selection === undefined
+            ? Promise.reject(new Error("This host has no default Computer"))
+            : selection.selected(),
+    });
+    const policy = useQuery({
+        queryKey: tourtoisQueryKeys.oysterEgressPolicy(teamId),
+        enabled: port.egressPolicy !== undefined,
+        queryFn: () => port.egressPolicy === undefined
+            ? Promise.reject(new Error("This host has no egress policy readback"))
+            : port.egressPolicy(),
     });
     const action = useMutation({
         mutationFn: async (input) => {
@@ -119,7 +134,9 @@ export function OysterComputers({ teamId, port, onChanged, }) {
                     await port.start(input.computerId);
                     return;
                 case "select":
-                    await port.select(input.computerId);
+                    if (selection === undefined)
+                        throw new Error("This host has no default Computer");
+                    await selection.select(input.computerId);
             }
         },
         onSuccess: async (_result, input) => {
@@ -130,32 +147,42 @@ export function OysterComputers({ teamId, port, onChanged, }) {
             }
             await Promise.all([
                 client.invalidateQueries({ queryKey: inventoryKey }),
-                client.invalidateQueries({ queryKey: selectionKey }),
+                ...(selection === undefined
+                    ? []
+                    : [client.invalidateQueries({ queryKey: selectionKey })]),
             ]);
             onChanged();
         },
     });
     const unavailable = inventory.isError ||
-        selected.isError ||
+        (selection !== undefined && selected.isError) ||
         inventory.isFetching ||
-        selected.isFetching ||
+        (selection !== undefined && selected.isFetching) ||
         action.isPending;
-    return (_jsxs("section", { className: "grid gap-sm", "aria-label": "Computers", children: [_jsx(SectionHeading, { children: "Computers" }), _jsx("p", { children: "Choose the default Computer used for new App configurations." }), inventory.isPending ? _jsx("p", { role: "status", children: "Loading Computers\u2026" }) : null, inventory.isError || selected.isError ? (_jsxs("div", { role: "alert", children: [_jsx("p", { children: "Computer inventory or selection could not be loaded." }), _jsx(Button, { onClick: () => {
+    const policyStatus = port.egressPolicy === undefined
+        ? "enabled"
+        : (policy.data ?? "unavailable");
+    return (_jsxs("section", { className: "grid gap-sm", "aria-label": "Computers", children: [_jsx(SectionHeading, { children: "Computers" }), _jsx("p", { children: selection === undefined
+                    ? "Manage your Team's Computers."
+                    : "Choose the default Computer used for new App configurations." }), port.egressPolicy !== undefined && policyStatus === "unavailable" ? (_jsxs("div", { role: "alert", children: [_jsx("p", { children: "Internet access policy is unavailable; switches are locked." }), _jsx(Button, { onClick: () => void policy.refetch(), children: "Retry policy" })] })) : null, inventory.isPending ? _jsx("p", { role: "status", children: "Loading Computers\u2026" }) : null, inventory.isError || (selection !== undefined && selected.isError) ? (_jsxs("div", { role: "alert", children: [_jsx("p", { children: "Computer inventory or selection could not be loaded." }), _jsx(Button, { onClick: () => {
                             void inventory.refetch();
-                            void selected.refetch();
-                        }, children: "Retry" })] })) : null, inventory.isSuccess && inventory.data.computers.length === 0 ? (_jsx("p", { children: "No Computers on this page." })) : null, inventory.data !== undefined ? (_jsx(DataList, { "aria-label": "Computer inventory", children: inventory.data.computers.map((computer) => (_jsxs(DataRow, { className: "p-0", children: [_jsx(ActionRow, { label: computer.name, description: selected.isSuccess && selected.data === computer.computerId
-                                ? "Default for new Apps"
-                                : computer.computerId, trailing: _jsxs("div", { className: "flex gap-sm", children: [_jsx(Button, { "aria-label": `Start ${computer.name}`, disabled: unavailable, onClick: () => {
-                                            action.mutate({
-                                                kind: "start",
-                                                computerId: computer.computerId,
-                                            });
-                                        }, children: "Start" }), _jsx(Button, { "aria-label": `Use ${computer.name} for new Apps`, disabled: unavailable || selected.data === computer.computerId, onClick: () => {
-                                            action.mutate({
-                                                kind: "select",
-                                                computerId: computer.computerId,
-                                            });
-                                        }, children: "Use for new Apps" })] }) }), _jsx(InternetAccess, { teamId: teamId, computer: computer, port: port })] }, computer.computerId))) })) : null, _jsxs("div", { className: "flex gap-sm", "aria-label": "Computer pages", children: [_jsx(Button, { disabled: unavailable || offset === 0, onClick: () => {
+                            if (selection !== undefined)
+                                void selected.refetch();
+                        }, children: "Retry" })] })) : null, inventory.isSuccess && inventory.data.computers.length === 0 ? (_jsx("p", { children: "No Computers on this page." })) : null, inventory.data !== undefined ? (_jsx(DataList, { "aria-label": "Computer inventory", children: inventory.data.computers.map((computer) => (_jsx(DataRow, { className: "p-0", children: _jsxs("div", { className: "grid min-w-0 gap-sm", children: [_jsx(ActionRow, { label: computer.name, description: selection !== undefined &&
+                                    selected.isSuccess &&
+                                    selected.data === computer.computerId
+                                    ? "Default for new Apps"
+                                    : computer.computerId, trailing: _jsxs("div", { className: "flex flex-wrap gap-sm", children: [_jsx(Button, { "aria-label": `Start ${computer.name}`, disabled: unavailable, onClick: () => {
+                                                action.mutate({
+                                                    kind: "start",
+                                                    computerId: computer.computerId,
+                                                });
+                                            }, children: "Start" }), selection !== undefined ? (_jsx(Button, { "aria-label": `Use ${computer.name} for new Apps`, disabled: unavailable || selected.data === computer.computerId, onClick: () => {
+                                                action.mutate({
+                                                    kind: "select",
+                                                    computerId: computer.computerId,
+                                                });
+                                            }, children: "Use for new Apps" })) : null] }) }), _jsx(InternetAccess, { teamId: teamId, computer: computer, port: port, policy: policyStatus })] }) }, computer.computerId))) })) : null, _jsxs("div", { className: "flex gap-sm", "aria-label": "Computer pages", children: [_jsx(Button, { disabled: unavailable || offset === 0, onClick: () => {
                             setOffset(Math.max(0, offset - 100));
                         }, children: "Previous" }), _jsx(Button, { disabled: unavailable || inventory.data?.nextOffset == null, onClick: () => {
                             const next = inventory.data?.nextOffset;

package/dist/queries.d.ts

@@ -4,6 +4,7 @@ export declare const tourtoisQueryKeys: {
     oysterComputerPage: (teamId: string, offset: number) => readonly ["tourtois", "oyster-computers", string, number];
     oysterSelectedComputer: (teamId: string) => readonly ["tourtois", "oyster-selected-computer", string];
     oysterInternetAccess: (teamId: string, computerId: string) => readonly ["tourtois", "oyster-internet-access", string, string];
+    oysterEgressPolicy: (teamId: string) => readonly ["tourtois", "oyster-egress-policy", string];
     hostSettings: (workspaceId: string) => readonly ["tourtois", "host-settings", string];
     workbench: () => readonly ["tourtois", "workbench"];
     workbenchComputers: (teamId: string) => readonly ["tourtois", "workbench-computers", string];

package/dist/queries.js

@@ -4,6 +4,7 @@ export const tourtoisQueryKeys = {
     oysterComputerPage: (teamId, offset) => [...tourtoisQueryKeys.oysterComputers(teamId), offset],
     oysterSelectedComputer: (teamId) => ["tourtois", "oyster-selected-computer", teamId],
     oysterInternetAccess: (teamId, computerId) => ["tourtois", "oyster-internet-access", teamId, computerId],
+    oysterEgressPolicy: (teamId) => ["tourtois", "oyster-egress-policy", teamId],
     hostSettings: (workspaceId) => ["tourtois", "host-settings", workspaceId],
     workbench: () => ["tourtois", "workbench"],
     workbenchComputers: (teamId) => ["tourtois", "workbench-computers", teamId],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fungi.computer/tourtois",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "author": "Levi <levi@technomancy.dev>",
   "description": "Tourtois: the trusted desktop shell for Oyster and Fungi, with host-supplied Settings sections",
   "type": "module",
@@ -34,6 +34,10 @@
       "types": "./dist/platform-controls.d.ts",
       "import": "./dist/platform-controls.js"
     },
+    "./oyster-computers": {
+      "types": "./dist/OysterComputers.d.ts",
+      "import": "./dist/OysterComputers.js"
+    },
     "./settings-routes": {
       "types": "./dist/settings-routes.d.ts",
       "import": "./dist/settings-routes.js"
@@ -69,15 +73,15 @@
     "LICENSE"
   ],
   "dependencies": {
-    "@fungi.computer/agar": "0.3.0",
+    "@fungi.computer/agar": "0.3.1",
     "@fungi.computer/cairn": "0.1.0",
-    "@fungi.computer/caps": "0.2.0",
+    "@fungi.computer/caps": "0.3.0",
     "@fungi.computer/ear-tag": "0.1.0",
     "@fungi.computer/gills": "0.2.0",
     "@fungi.computer/maosaico": "0.1.0",
-    "@fungi.computer/parakeet": "0.2.1",
+    "@fungi.computer/parakeet": "0.3.0",
     "@fungi.computer/puffball": "0.2.0",
-    "@fungi.computer/shiitake": "0.3.1",
+    "@fungi.computer/shiitake": "0.4.0",
     "@fungi.computer/sigils": "0.2.0",
     "@fungi.computer/sprite": "0.2.0",
     "@fungi.computer/sprite-zdog": "0.2.0",
@@ -92,16 +96,16 @@
     "lucide-react": "0.460.0",
     "react-dom": "18.3.1",
     "zod": "4.4.3",
-    "@fungi.computer/nacre": "0.0.1"
+    "@fungi.computer/nacre": "0.0.2"
   },
   "peerDependencies": {
     "react": "^18.3.1 || ^19.2.0"
   },
   "devDependencies": {
-    "@fungi.computer/oyster": "0.3.2",
+    "@fungi.computer/oyster": "0.4.0",
     "@cloudflare/workers-types": "5.20260828.1",
     "@fungi.computer/forage": "0.2.0",
-    "@fungi.computer/mycelium": "0.2.1",
+    "@fungi.computer/mycelium": "0.2.2",
     "@ladle/react": "5.1.1",
     "@types/react": "18.3.3",
     "@vitejs/plugin-react": "6.1.1",