glove-foundry 0.4.0 → 0.5.0

package/dist/cli.js

@@ -3,14 +3,16 @@ import {
   FoundryRuntime,
   FoundryServer,
   writeGeneratedTypes
-} from "./chunk-25BGNRJN.js";
+} from "./chunk-SGF3CFUR.js";
 import {
   DEFAULT_FOUNDRY_CONFIG
 } from "./chunk-ZFNMFE3T.js";
+import "./chunk-J7ZBJM54.js";
 import {
   EMPTY_FOUNDRY_APPLICATION,
   isFoundryApplication
-} from "./chunk-5LDW2N2E.js";
+} from "./chunk-KBMD4RYU.js";
+import "./chunk-5NFLGHOC.js";
 
 // src/cli.ts
 import { watch } from "node:fs";
@@ -318,7 +320,8 @@ export default defineConfig({
           private: true,
           // Foundry and the Glove packages are ESM. This scopes that to the
           // agents, so the surrounding app keeps its own module system.
-          type: "module"
+          type: "module",
+          engines: { node: ">=22" }
         },
         null,
         2
@@ -337,6 +340,7 @@ export default defineConfig({
           version: "0.1.0",
           private: true,
           type: "module",
+          engines: { node: ">=22" },
           scripts: {
             dev: "glove foundry dev",
             start: "glove foundry start",

package/dist/{client-D0-pKEZM.d.ts → client-DcsnudMI.d.ts}

@@ -13,6 +13,7 @@ import { FactAdapter, FactScope, FactStore, FactInput } from 'glove-facts';
 import { GoalAdapter, GoalScope, GoalProgram, GoalRunner } from 'glove-memory/goals';
 import { FormAdapter, FormRunner } from 'glove-memory/forms';
 import * as effect_Brand from 'effect/Brand';
+import { FoundryStationDaemonAdapter } from './station.js';
 import { FoundryConfig } from './config.js';
 
 declare const TransmissionId: Schema.brand<Schema.refine<string, typeof Schema.String>, "FoundryTransmissionId">;
@@ -1560,6 +1561,8 @@ type FoundryCall<TInputSchema extends z.ZodType = z.ZodType, TOutputSchema exten
 declare function defineCall<TInputSchema extends z.ZodType, TOutputSchema extends z.ZodType>(options: FoundryCallOptions<TInputSchema, TOutputSchema>): FoundryCall<TInputSchema, TOutputSchema>;
 interface FoundryExecutionContext<TInput = unknown> extends FoundrySurfaceContext<TInput>, FoundryGuidanceHandles {
     readonly installations: ReadonlyArray<AgentInstallation>;
+    /** Register run-scoped teardown for an explicitly mounted capability. Runs in reverse order, even if assembly fails. */
+    readonly onCleanup: (cleanup: () => void | Promise<void>) => void;
     /** Native persistent environment mounted for this run, when configured. */
     readonly workingEnvironment?: WorkingEnvironment;
     /** Guarded VFS handle for host-side handlers and layers. */
@@ -2011,6 +2014,8 @@ interface FoundryRequestAuthorizationAdapter<TError = never> {
 /** Process infrastructure only; agent files own runtime capabilities. */
 interface FoundryApplicationOptions {
     readonly name: string;
+    /** Optional configuration of the managed daemon; loaded from the application file in its process. */
+    readonly daemon?: FoundryStationDaemonAdapter;
     readonly accounts?: ReadonlyArray<AccountReference>;
     readonly routes?: ReadonlyArray<Route>;
     readonly bindings?: ReadonlyArray<AgentBinding>;
@@ -2188,12 +2193,12 @@ declare class FoundryRuntime {
     private readonly execution;
     private readonly observer;
     private readonly signalRunner;
-    private readonly envStore;
-    private readonly envProvider;
     private readonly scheduleAdapter;
     private readonly services;
     private readonly runnerLoops;
     private readonly materializedActivations;
+    private readonly activationTransitions;
+    private readonly activationDispatches;
     private readonly activationTimers;
     private readonly approvalDirectory;
     private readonly coreCommandDirectory;
@@ -2364,12 +2369,13 @@ declare class FoundryRuntime {
     private validatePlaybooks;
     private validateRoute;
     private validateBinding;
-    private executionSignal;
     private seedTopology;
     private runInBackground;
     private settleRunnerLoops;
     private enqueueCoreRequest;
+    private withActivationTransition;
     private executeCoreCommand;
+    private executeCoreCommandUnlocked;
     private syncAgentPlaybooks;
     private assertActivationOwnership;
     private backendScheduleId;

package/dist/client.d.ts

@@ -1,4 +1,4 @@
-export { bf as FoundryClient, bg as FoundryClientAuthorizationAdapter, bh as FoundryClientOptions, bu as FoundryHealth, c7 as FoundryRunHandle, ce as FoundrySteerHandleResult, db as WaitOptions, dk as createFoundryClient } from './client-D0-pKEZM.js';
+export { bf as FoundryClient, bg as FoundryClientAuthorizationAdapter, bh as FoundryClientOptions, bu as FoundryHealth, c7 as FoundryRunHandle, ce as FoundrySteerHandleResult, db as WaitOptions, dk as createFoundryClient } from './client-DcsnudMI.js';
 import 'glove-core';
 import 'effect';
 import 'zod';
@@ -14,4 +14,6 @@ import 'glove-facts';
 import 'glove-memory/goals';
 import 'glove-memory/forms';
 import 'effect/Brand';
+import './station.js';
+import 'station-daemon';
 import './config.js';

package/dist/config.d.ts

@@ -1,6 +1,7 @@
 /** Framework-level execution policy. The underlying runner is deliberately private. */
 interface FoundryExecutionConfig {
     readonly pollIntervalMs?: number;
+    /** @deprecated Station 3 daemon owns idle backoff; retained for source compatibility. */
     readonly idlePollIntervalMs?: number;
     readonly maxConcurrent?: number;
     readonly maxAttempts?: number;

package/dist/execution-agent.js

@@ -1,9 +1,14 @@
 import {
-  FOUNDRY_AGENT_FILE_ENV,
-  FOUNDRY_AGENT_ROUTE_ENV,
-  bindAgentLocalDefinitions,
   compileAgentModule
-} from "./chunk-5LDW2N2E.js";
+} from "./chunk-TH5ETCG2.js";
+import "./chunk-LW5PJ2FN.js";
+import {
+  bindAgentLocalDefinitions
+} from "./chunk-KBMD4RYU.js";
+import {
+  FOUNDRY_AGENT_FILE_ENV,
+  FOUNDRY_AGENT_ROUTE_ENV
+} from "./chunk-5NFLGHOC.js";
 
 // src/execution-agent.ts
 import { pathToFileURL } from "node:url";

package/dist/execution-daemon.d.ts

@@ -0,0 +1,2 @@
+
+export {  }

package/dist/execution-daemon.js

@@ -0,0 +1,157 @@
+import {
+  executionEvents
+} from "./chunk-J7ZBJM54.js";
+import {
+  FOUNDRY_APPLICATION_ENV,
+  internalAgentName
+} from "./chunk-5NFLGHOC.js";
+
+// src/execution-daemon.ts
+import { randomBytes } from "node:crypto";
+import { mkdir, writeFile } from "node:fs/promises";
+import { createServer } from "node:net";
+import { join } from "node:path";
+import { pathToFileURL } from "node:url";
+import { createStation, MemoryKeyStorage, MemoryLogStorage } from "station-daemon/server";
+import { resolveConfig } from "station-daemon";
+import { StationClient, StationApiError } from "station-client";
+import { MemoryAdapter, configure } from "station-signal";
+import { ScheduleMemoryAdapter } from "station-schedules";
+import { MemoryEnvStorage } from "station-env";
+var station;
+var client;
+var queue = new MemoryAdapter();
+var schedules = new ScheduleMemoryAdapter();
+var definitions = /* @__PURE__ */ new Map();
+var stopping;
+var resources;
+function send(message) {
+  if (process.connected) process.send?.(message);
+}
+async function stop() {
+  return stopping ??= (async () => {
+    if (station) await station.stop();
+    else await Promise.allSettled([resources?.browser?.close(), resources?.sandbox?.close()]);
+  })();
+}
+async function freePort() {
+  const server = createServer();
+  await new Promise((resolve, reject) => {
+    server.once("error", reject);
+    server.listen(0, "127.0.0.1", resolve);
+  });
+  const address = server.address();
+  if (!address || typeof address === "string") throw new Error("No daemon port available.");
+  await new Promise((resolve, reject) => server.close((error) => error ? reject(error) : resolve()));
+  return address.port;
+}
+process.on("message", (message) => {
+  void (async () => {
+    const command = message.command;
+    let value;
+    switch (command.method) {
+      case "init": {
+        if (station) throw new Error("Execution daemon is already initialized.");
+        const options = command.options;
+        const signals = join(options.directory, "signals");
+        await mkdir(signals, { recursive: true, mode: 448 });
+        await writeFile(join(signals, "package.json"), '{"type":"module"}', { mode: 384 });
+        for (const [index, agent] of options.agents.entries()) {
+          const entry = join(signals, `${index}.js`);
+          await writeFile(
+            entry,
+            `import { loadExecutionAgent } from ${JSON.stringify(pathToFileURL(options.loader).href)};
+export default await loadExecutionAgent(${JSON.stringify(agent.route)}, ${JSON.stringify(agent.filePath)});
+`,
+            { mode: 384 }
+          );
+          const signal = (await import(pathToFileURL(entry).href)).default;
+          definitions.set(signal.name, signal);
+        }
+        const subscribers = Object.fromEntries(executionEvents.map((event) => [event, (value2) => send({ event, value: value2 })]));
+        const applicationFile = process.env[FOUNDRY_APPLICATION_ENV];
+        const application = applicationFile ? (await import(pathToFileURL(applicationFile).href)).default : void 0;
+        const daemon = application?.daemon;
+        if (daemon && daemon.kind !== "station") throw new Error("Unsupported daemon adapter.");
+        const settings = daemon?.options;
+        resources = await settings?.resources?.();
+        const port = settings?.port ?? await freePort();
+        station = await createStation(resolveConfig({
+          host: "127.0.0.1",
+          port,
+          stationDir: join(options.directory, "station"),
+          signalsDir: signals,
+          adapter: queue,
+          scheduleAdapter: schedules,
+          ...settings ? { network: { stationId: settings.stationId, name: settings.name ?? settings.stationId } } : {},
+          ...resources ? { execution: { ...resources, token: randomBytes(32).toString("hex") } } : {},
+          envStorage: new MemoryEnvStorage(),
+          logStorage: new MemoryLogStorage(),
+          auth: { username: "foundry", password: randomBytes(32).toString("hex"), keyStorage: new MemoryKeyStorage() },
+          subscribers: { signal: [subscribers] },
+          runner: options.runner
+        }), options.rootDir);
+        const key = await station.keyStore.create("foundry-execution", ["trigger", "read", "cancel"]);
+        client = new StationClient({ url: `http://127.0.0.1:${port}`, token: key.key });
+        await station.start();
+        await client.connect();
+        for (const agent of options.agents) {
+          const name = internalAgentName(agent.route);
+          await client.request("GET", `/signals/${encodeURIComponent(name)}`);
+        }
+        if (settings?.onReady) {
+          const resourceKey = await station.keyStore.create("foundry-resources", ["admin"]);
+          await settings.onReady({ url: `http://127.0.0.1:${port}`, stationId: settings.stationId, token: resourceKey.key });
+        }
+        configure({ adapter: queue });
+        value = { pid: process.pid };
+        break;
+      }
+      case "trigger": {
+        const definition = definitions.get(command.name);
+        if (!definition) throw new Error("Unknown agent definition.");
+        value = await definition.trigger(command.input);
+        break;
+      }
+      case "get":
+        value = await queue.getRun(command.id);
+        break;
+      case "list":
+        value = await queue.listAllRuns({ signalName: command.signalName });
+        break;
+      case "cancel":
+        try {
+          await client.request("POST", `/runs/${encodeURIComponent(command.id)}/cancel`, {});
+          value = true;
+        } catch (error) {
+          if (error instanceof StationApiError && ["cannot_cancel", "not_found"].includes(error.code)) value = false;
+          else throw error;
+        }
+        break;
+      case "schedule.add":
+        await schedules.add(command.schedule);
+        value = null;
+        break;
+      case "schedule.delete":
+        value = await schedules.delete(command.id);
+        break;
+      case "ping":
+        value = Boolean(client && (await client.health()).ok);
+        break;
+      case "stop":
+        await stop();
+        value = null;
+        break;
+    }
+    send({ id: message.id, value });
+    if (command.method === "stop") process.disconnect?.();
+  })().catch(() => {
+    send({ id: message.id, error: `Execution daemon ${message.command.method} failed. Inspect daemon health before repeating mutations.` });
+  });
+});
+process.once("disconnect", () => {
+  void stop().finally(() => process.exit(0));
+});
+process.once("SIGTERM", () => {
+  void stop().finally(() => process.exit(0));
+});

package/dist/execution-loader.d.ts

@@ -0,0 +1,6 @@
+import * as station_signal from 'station-signal';
+
+/** Private Station signal module loader. Explicit identity avoids process-global discovery races. */
+declare function loadExecutionAgent(route: string, file: string): Promise<station_signal.AnySignal>;
+
+export { loadExecutionAgent };

package/dist/execution-loader.js

@@ -0,0 +1,20 @@
+import {
+  compileAgentModule
+} from "./chunk-TH5ETCG2.js";
+import "./chunk-LW5PJ2FN.js";
+import {
+  bindAgentLocalDefinitions
+} from "./chunk-KBMD4RYU.js";
+import "./chunk-5NFLGHOC.js";
+
+// src/execution-loader.ts
+import { dirname } from "node:path";
+import { pathToFileURL } from "node:url";
+async function loadExecutionAgent(route, file) {
+  const module = await import(pathToFileURL(file).href);
+  await bindAgentLocalDefinitions(dirname(file));
+  return compileAgentModule(route, module);
+}
+export {
+  loadExecutionAgent
+};

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { F as FoundryDataAdapter, E as EnvironmentValue, A as AgentInstance, C as Conversation, P as PlaybookSubscription, a as FoundryActivationRecord, b as ProvisionAgentOptions, I as InboundDeliveryClaim, W as WorkspaceEntry, c as FoundryWorkingEnvironmentSnapshotOwner, S as SharedInboxItem, d as FoundryTask, e as AgentPlaybook, f as FoundryRuntime, D as DiscoveredAgent, g as FoundryManifest, h as AnyFoundryTransmission, i as AccountReference, j as InferAccountMetadata, k as AgentBinding, l as FoundryAgentApplication, m as InboundRoute, O as OutboundRoute, n as CapabilityDefinition, o as InferInboundConfig, p as InferOutboundConfig } from './client-D0-pKEZM.js';
-export { q as AccountContract, r as AccountDirectory, s as AccountFilter, t as AccountId, u as AccountNotFound, v as AccountSessionAdapter, w as AccountSessionRequest, x as AccountSessionUnavailable, y as AccountSummary, z as AgentApplicationContribution, B as AgentApplicationInstallContext, G as AgentApplicationOptions, H as AgentAssemblyContext, J as AgentAssemblyOptions, K as AgentDefinitionId, L as AgentDefinitionSurfaceContext, M as AgentFactoryContext, N as AgentHandlerContext, Q as AgentId, R as AgentInstallContext, T as AgentInstallation, U as AgentInstallationKind, V as AgentPlaybookInput, X as AgentProvisioningPolicy, Y as AgentRuntimeControls, Z as AnyFoundryAgent, _ as ApplicationConnectionContext, $ as ApplicationConnectionState, a0 as ApplicationConnectionStatus, a1 as BindingFilter, a2 as BindingId, a3 as BindingNotFound, a4 as CapabilityId, a5 as ComposedAgentPlaybook, a6 as ComposedAgentPlaybookInput, a7 as ConnectionReceiveInput, a8 as CreateAgentInstanceOptions, a9 as CreateConversationOptions, aa as CustomProvisionedAgent, ab as CustomProvisioningContext, ac as DefineAgentOptions, ad as DefineConnectionOptions, ae as DefineFoundryReplOptions, af as DefineFoundryScheduleOptions, ag as DefineFoundrySubagentOptions, ah as DefineFoundryWorkingEnvironmentOptions, ai as DefinePlaybookSubscriptionOptions, aj as DefinitionConfigInput, ak as EMPTY_AGENT_COMPOSITION, al as EMPTY_CAPABILITY_REGISTRY, am as EMPTY_FOUNDRY_APPLICATION, an as EMPTY_NATIVE_REGISTRY, ao as EgressAdapter, ap as EgressContext, aq as EventFilter, ar as EventId, as as EventNotFound, at as EventReference, au as EventStore, av as FOUNDRY_AGENT_APPLICATION_BRAND, aw as FOUNDRY_AGENT_BRAND, ax as FOUNDRY_AGENT_DEFINITION_BRAND, ay as FOUNDRY_AGENT_FILE_ENV, az as FOUNDRY_AGENT_ROUTE_ENV, aA as FOUNDRY_APPLICATION_BRAND, aB as FOUNDRY_APPLICATION_ENV, aC as FOUNDRY_APPROVAL_DIRECTORY_ENV, aD as FOUNDRY_COMPOSED_PLAYBOOK_BRAND, aE as FOUNDRY_CONNECTION_BRAND, aF as FOUNDRY_CORE_COMMAND_EVENT, aG as FOUNDRY_EVENT_PREFIX, aH as FOUNDRY_EXECUTION_MARKER, aI as FOUNDRY_LAYER_BRAND, aJ as FOUNDRY_MCP_BRAND, aK as FOUNDRY_MEMORY_BRAND, aL as FOUNDRY_PLAYBOOK_ACTION_BRAND, aM as FOUNDRY_REPL_BRAND, aN as FOUNDRY_SCHEDULE_BRAND, aO as FOUNDRY_SHARED_TOOL_BRAND, aP as FOUNDRY_SUBSCRIBER_BRAND, aQ as FOUNDRY_TRANSMISSION_BRAND, aR as FOUNDRY_TRANSMISSION_EVENT_BRAND, aS as FOUNDRY_TRANSMISSION_PREDICATE_BRAND, aT as FOUNDRY_WORKING_ENVIRONMENT_BRAND, aU as FoundryAccountSessionAdapter, aV as FoundryAgent, aW as FoundryAgentComponent, aX as FoundryAgentComposition, aY as FoundryAgentConventionModule, aZ as FoundryAgentDefinition, a_ as FoundryAgentMode, a$ as FoundryApp, b0 as FoundryApplication, b1 as FoundryApplicationConnection, b2 as FoundryApplicationManifest, b3 as FoundryApplicationOptions, b4 as FoundryApproval, b5 as FoundryApprovalDecision, b6 as FoundryApprovalDisplayManager, b7 as FoundryApprovalStatus, b8 as FoundryCall, b9 as FoundryCallContext, ba as FoundryCallOptions, bb as FoundryCapabilityKind, bc as FoundryCapabilityManifest, bd as FoundryCapabilityManifestEntry, be as FoundryCapabilityRegistry, bf as FoundryClient, bg as FoundryClientAuthorizationAdapter, bh as FoundryClientOptions, bi as FoundryCompositionSource, bj as FoundryConversationTranscript, bk as FoundryCoreCommand, bl as FoundryDomainError, bm as FoundryEvent, bn as FoundryEventCategory, bo as FoundryExecutionContext, bp as FoundryFactsOptions, bq as FoundryFormsOptions, br as FoundryGoalsOptions, bs as FoundryGuidanceHandles, bt as FoundryGuidanceScope, bu as FoundryHealth, bv as FoundryHookDefinition, bw as FoundryInstallable, bx as FoundryInstanceProvisioner, by as FoundryJavaScriptReplDefinition, bz as FoundryLayer, bA as FoundryLayerOptions, bB as FoundryLayerReference, bC as FoundryLayerSelection, bD as FoundryLispReplDefinition, bE as FoundryListResolver, bF as FoundryManifestAgent, bG as FoundryManifestCapability, bH as FoundryManifestTransmission, bI as FoundryMcp, bJ as FoundryMcpOptions, bK as FoundryMemoryProfile, bL as FoundryMemoryProfileOptions, bM as FoundryMemoryReference, bN as FoundryMemorySelection, bO as FoundryMeshConfig, bP as FoundryMessageInput, bQ as FoundryMountedRepl, bR as FoundryNativeManifest, bS as FoundryNativeManifestEntry, bT as FoundryNativeRegistry, bU as FoundryObservabilityAdapter, bV as FoundryPlaybookAction, bW as FoundryProgrammaticToolContext, bX as FoundryProgrammaticToolSelection, bY as FoundryProgrammaticTools, bZ as FoundryPythonReplDefinition, b_ as FoundryReplDefinition, b$ as FoundryRequest, c0 as FoundryRequestAuthorizationAdapter, c1 as FoundryRequestAuthorizationInput, c2 as FoundryResolvedMcp, c3 as FoundryResolver, c4 as FoundryResult, c5 as FoundryRouteMap, c6 as FoundryRun, c7 as FoundryRunHandle, c8 as FoundryRuntimeError, c9 as FoundryRuntimeOptions, ca as FoundryScheduleDefinition, cb as FoundryScheduleTiming, cc as FoundryScheduleTimingInput, cd as FoundrySharedTool, ce as FoundrySteerHandleResult, cf as FoundrySteerResult, cg as FoundrySubagentToolContext, ch as FoundrySubscriber, ci as FoundrySubscriberOptions, cj as FoundrySubscriberSelection, ck as FoundrySurfaceContext, cl as FoundryToolBody, cm as FoundryTransmission, cn as FoundryTransmissionEvent, co as FoundryTransmissionPredicate, cp as FoundryVfs, cq as FoundryVfsHandle, cr as FoundryWorkingEnvironmentCreateContext, cs as FoundryWorkingEnvironmentDefinition, ct as FoundryWorkingEnvironmentPersistenceAdapter, cu as FoundryWorkingEnvironmentPersistenceContext, cv as GrantResolutionError, cw as GrantResolver, cx as InboundContract, cy as InferAgentInput, cz as InferAgentOutput, cA as InferInboundEvent, cB as InferOutboundInput, cC as InferOutboundOutput, cD as IngressAdapter, cE as IngressContext, cF as InstallationSelection, cG as ManifestCompilationError, cH as McpAdapterFactory, cI as MemoryFoundryDataAdapter, cJ as MemoryObservabilityAdapter, cK as OutboundContract, cL as PlaybookActionOptions, cM as PlaybookDirective, cN as PlaybookDirectiveInput, cO as PlaybookMatch, cP as PlaybookMatchInput, cQ as PlaybookOutboundDirective, cR as PlaybookOutboundInput, cS as PlaybookSubscriptionTarget, cT as PlaybookSubscriptionTargetInput, cU as ReplyPolicy, cV as ResolveGrantRequest, cW as Route, cX as RouteFilter, cY as RouteId, cZ as RouteNotFound, c_ as RunGrant, c$ as RunId, d0 as SharedToolOptions, d1 as TopologyConflict, d2 as TopologyStore, d3 as TransmissionEventDirection, d4 as TransmissionEventOptions, d5 as TransmissionId, d6 as TransmissionOptions, d7 as TransmissionPredicateOptions, d8 as TransmissionSerializationContext, d9 as UpdateAgentInstanceOptions, da as UpdateConversationOptions, db as WaitOptions, dc as compileApplicationManifest, dd as composeAgent, de as composePlaybook, df as configureLayer, dg as configureMemory, dh as createAgentInstance, di as createConversation, dj as createFoundryApproval, dk as createFoundryClient, dl as createFoundryCoreTools, dm as createInstalledApplicationTransmissionTools, dn as createManifest, dp as defineAgent, dq as defineAgentApplication, dr as defineAgentFromModule, ds as defineAgentInstance, dt as defineApp, du as defineApplication, dv as defineCall, dw as defineConnection, dx as defineFacts, dy as defineForms, dz as defineGoals, dA as defineLayer, dB as defineMcp, dC as defineMemory, dD as definePlaybookAction, dE as definePlaybookSubscription, dF as defineRepl, dG as defineRoutes, dH as defineSchedule, dI as defineSharedTool, dJ as defineSubagent, dK as defineSubscriber, dL as defineTransmission, dM as defineTransmissionEvent, dN as defineTransmissionPredicate, dO as defineWorkingEnvironment, dP as discoverAgents, dQ as findAgentFiles, dR as foundryDataEnvironmentPersistence, dS as foundryGuidanceSubject, dT as grantResolverLive, dU as install, dV as installRegistry, dW as installationKey, dX as installedApplicationTransmissionToolName, dY as internalAgentName, dZ as isFoundryAgent, d_ as isFoundryAgentDefinition, d$ as isFoundryApplication, e0 as isFoundryCapability, e1 as isFoundryLayer, e2 as isFoundrySchedule, e3 as isFoundrySubscriber, e4 as isFoundryTransmission, e5 as isInboxCapableStore, e6 as listFoundryApprovals, e7 as memoryAccountDirectory, e8 as memoryEventStore, e9 as memoryTopologyStore, ea as mountAgentDefinitionMemory, eb as mountFoundrySurfaces, ec as reconstructAgentInstance, ed as reconstructPlaybook, ee as reconstructPlaybookSubscription, ef as resolveFoundryApproval, eg as routeFromAgentFile, eh as routeFromInternalAgentName, ei as toGloveMessage, ej as toGloveRequestInput, ek as transmissionPredicate, el as withFoundryPermissions } from './client-D0-pKEZM.js';
+import { F as FoundryDataAdapter, E as EnvironmentValue, A as AgentInstance, C as Conversation, P as PlaybookSubscription, a as FoundryActivationRecord, b as ProvisionAgentOptions, I as InboundDeliveryClaim, W as WorkspaceEntry, c as FoundryWorkingEnvironmentSnapshotOwner, S as SharedInboxItem, d as FoundryTask, e as AgentPlaybook, f as FoundryRuntime, D as DiscoveredAgent, g as FoundryManifest, h as AnyFoundryTransmission, i as AccountReference, j as InferAccountMetadata, k as AgentBinding, l as FoundryAgentApplication, m as InboundRoute, O as OutboundRoute, n as CapabilityDefinition, o as InferInboundConfig, p as InferOutboundConfig } from './client-DcsnudMI.js';
+export { q as AccountContract, r as AccountDirectory, s as AccountFilter, t as AccountId, u as AccountNotFound, v as AccountSessionAdapter, w as AccountSessionRequest, x as AccountSessionUnavailable, y as AccountSummary, z as AgentApplicationContribution, B as AgentApplicationInstallContext, G as AgentApplicationOptions, H as AgentAssemblyContext, J as AgentAssemblyOptions, K as AgentDefinitionId, L as AgentDefinitionSurfaceContext, M as AgentFactoryContext, N as AgentHandlerContext, Q as AgentId, R as AgentInstallContext, T as AgentInstallation, U as AgentInstallationKind, V as AgentPlaybookInput, X as AgentProvisioningPolicy, Y as AgentRuntimeControls, Z as AnyFoundryAgent, _ as ApplicationConnectionContext, $ as ApplicationConnectionState, a0 as ApplicationConnectionStatus, a1 as BindingFilter, a2 as BindingId, a3 as BindingNotFound, a4 as CapabilityId, a5 as ComposedAgentPlaybook, a6 as ComposedAgentPlaybookInput, a7 as ConnectionReceiveInput, a8 as CreateAgentInstanceOptions, a9 as CreateConversationOptions, aa as CustomProvisionedAgent, ab as CustomProvisioningContext, ac as DefineAgentOptions, ad as DefineConnectionOptions, ae as DefineFoundryReplOptions, af as DefineFoundryScheduleOptions, ag as DefineFoundrySubagentOptions, ah as DefineFoundryWorkingEnvironmentOptions, ai as DefinePlaybookSubscriptionOptions, aj as DefinitionConfigInput, ak as EMPTY_AGENT_COMPOSITION, al as EMPTY_CAPABILITY_REGISTRY, am as EMPTY_FOUNDRY_APPLICATION, an as EMPTY_NATIVE_REGISTRY, ao as EgressAdapter, ap as EgressContext, aq as EventFilter, ar as EventId, as as EventNotFound, at as EventReference, au as EventStore, av as FOUNDRY_AGENT_APPLICATION_BRAND, aw as FOUNDRY_AGENT_BRAND, ax as FOUNDRY_AGENT_DEFINITION_BRAND, ay as FOUNDRY_AGENT_FILE_ENV, az as FOUNDRY_AGENT_ROUTE_ENV, aA as FOUNDRY_APPLICATION_BRAND, aB as FOUNDRY_APPLICATION_ENV, aC as FOUNDRY_APPROVAL_DIRECTORY_ENV, aD as FOUNDRY_COMPOSED_PLAYBOOK_BRAND, aE as FOUNDRY_CONNECTION_BRAND, aF as FOUNDRY_CORE_COMMAND_EVENT, aG as FOUNDRY_EVENT_PREFIX, aH as FOUNDRY_EXECUTION_MARKER, aI as FOUNDRY_LAYER_BRAND, aJ as FOUNDRY_MCP_BRAND, aK as FOUNDRY_MEMORY_BRAND, aL as FOUNDRY_PLAYBOOK_ACTION_BRAND, aM as FOUNDRY_REPL_BRAND, aN as FOUNDRY_SCHEDULE_BRAND, aO as FOUNDRY_SHARED_TOOL_BRAND, aP as FOUNDRY_SUBSCRIBER_BRAND, aQ as FOUNDRY_TRANSMISSION_BRAND, aR as FOUNDRY_TRANSMISSION_EVENT_BRAND, aS as FOUNDRY_TRANSMISSION_PREDICATE_BRAND, aT as FOUNDRY_WORKING_ENVIRONMENT_BRAND, aU as FoundryAccountSessionAdapter, aV as FoundryAgent, aW as FoundryAgentComponent, aX as FoundryAgentComposition, aY as FoundryAgentConventionModule, aZ as FoundryAgentDefinition, a_ as FoundryAgentMode, a$ as FoundryApp, b0 as FoundryApplication, b1 as FoundryApplicationConnection, b2 as FoundryApplicationManifest, b3 as FoundryApplicationOptions, b4 as FoundryApproval, b5 as FoundryApprovalDecision, b6 as FoundryApprovalDisplayManager, b7 as FoundryApprovalStatus, b8 as FoundryCall, b9 as FoundryCallContext, ba as FoundryCallOptions, bb as FoundryCapabilityKind, bc as FoundryCapabilityManifest, bd as FoundryCapabilityManifestEntry, be as FoundryCapabilityRegistry, bf as FoundryClient, bg as FoundryClientAuthorizationAdapter, bh as FoundryClientOptions, bi as FoundryCompositionSource, bj as FoundryConversationTranscript, bk as FoundryCoreCommand, bl as FoundryDomainError, bm as FoundryEvent, bn as FoundryEventCategory, bo as FoundryExecutionContext, bp as FoundryFactsOptions, bq as FoundryFormsOptions, br as FoundryGoalsOptions, bs as FoundryGuidanceHandles, bt as FoundryGuidanceScope, bu as FoundryHealth, bv as FoundryHookDefinition, bw as FoundryInstallable, bx as FoundryInstanceProvisioner, by as FoundryJavaScriptReplDefinition, bz as FoundryLayer, bA as FoundryLayerOptions, bB as FoundryLayerReference, bC as FoundryLayerSelection, bD as FoundryLispReplDefinition, bE as FoundryListResolver, bF as FoundryManifestAgent, bG as FoundryManifestCapability, bH as FoundryManifestTransmission, bI as FoundryMcp, bJ as FoundryMcpOptions, bK as FoundryMemoryProfile, bL as FoundryMemoryProfileOptions, bM as FoundryMemoryReference, bN as FoundryMemorySelection, bO as FoundryMeshConfig, bP as FoundryMessageInput, bQ as FoundryMountedRepl, bR as FoundryNativeManifest, bS as FoundryNativeManifestEntry, bT as FoundryNativeRegistry, bU as FoundryObservabilityAdapter, bV as FoundryPlaybookAction, bW as FoundryProgrammaticToolContext, bX as FoundryProgrammaticToolSelection, bY as FoundryProgrammaticTools, bZ as FoundryPythonReplDefinition, b_ as FoundryReplDefinition, b$ as FoundryRequest, c0 as FoundryRequestAuthorizationAdapter, c1 as FoundryRequestAuthorizationInput, c2 as FoundryResolvedMcp, c3 as FoundryResolver, c4 as FoundryResult, c5 as FoundryRouteMap, c6 as FoundryRun, c7 as FoundryRunHandle, c8 as FoundryRuntimeError, c9 as FoundryRuntimeOptions, ca as FoundryScheduleDefinition, cb as FoundryScheduleTiming, cc as FoundryScheduleTimingInput, cd as FoundrySharedTool, ce as FoundrySteerHandleResult, cf as FoundrySteerResult, cg as FoundrySubagentToolContext, ch as FoundrySubscriber, ci as FoundrySubscriberOptions, cj as FoundrySubscriberSelection, ck as FoundrySurfaceContext, cl as FoundryToolBody, cm as FoundryTransmission, cn as FoundryTransmissionEvent, co as FoundryTransmissionPredicate, cp as FoundryVfs, cq as FoundryVfsHandle, cr as FoundryWorkingEnvironmentCreateContext, cs as FoundryWorkingEnvironmentDefinition, ct as FoundryWorkingEnvironmentPersistenceAdapter, cu as FoundryWorkingEnvironmentPersistenceContext, cv as GrantResolutionError, cw as GrantResolver, cx as InboundContract, cy as InferAgentInput, cz as InferAgentOutput, cA as InferInboundEvent, cB as InferOutboundInput, cC as InferOutboundOutput, cD as IngressAdapter, cE as IngressContext, cF as InstallationSelection, cG as ManifestCompilationError, cH as McpAdapterFactory, cI as MemoryFoundryDataAdapter, cJ as MemoryObservabilityAdapter, cK as OutboundContract, cL as PlaybookActionOptions, cM as PlaybookDirective, cN as PlaybookDirectiveInput, cO as PlaybookMatch, cP as PlaybookMatchInput, cQ as PlaybookOutboundDirective, cR as PlaybookOutboundInput, cS as PlaybookSubscriptionTarget, cT as PlaybookSubscriptionTargetInput, cU as ReplyPolicy, cV as ResolveGrantRequest, cW as Route, cX as RouteFilter, cY as RouteId, cZ as RouteNotFound, c_ as RunGrant, c$ as RunId, d0 as SharedToolOptions, d1 as TopologyConflict, d2 as TopologyStore, d3 as TransmissionEventDirection, d4 as TransmissionEventOptions, d5 as TransmissionId, d6 as TransmissionOptions, d7 as TransmissionPredicateOptions, d8 as TransmissionSerializationContext, d9 as UpdateAgentInstanceOptions, da as UpdateConversationOptions, db as WaitOptions, dc as compileApplicationManifest, dd as composeAgent, de as composePlaybook, df as configureLayer, dg as configureMemory, dh as createAgentInstance, di as createConversation, dj as createFoundryApproval, dk as createFoundryClient, dl as createFoundryCoreTools, dm as createInstalledApplicationTransmissionTools, dn as createManifest, dp as defineAgent, dq as defineAgentApplication, dr as defineAgentFromModule, ds as defineAgentInstance, dt as defineApp, du as defineApplication, dv as defineCall, dw as defineConnection, dx as defineFacts, dy as defineForms, dz as defineGoals, dA as defineLayer, dB as defineMcp, dC as defineMemory, dD as definePlaybookAction, dE as definePlaybookSubscription, dF as defineRepl, dG as defineRoutes, dH as defineSchedule, dI as defineSharedTool, dJ as defineSubagent, dK as defineSubscriber, dL as defineTransmission, dM as defineTransmissionEvent, dN as defineTransmissionPredicate, dO as defineWorkingEnvironment, dP as discoverAgents, dQ as findAgentFiles, dR as foundryDataEnvironmentPersistence, dS as foundryGuidanceSubject, dT as grantResolverLive, dU as install, dV as installRegistry, dW as installationKey, dX as installedApplicationTransmissionToolName, dY as internalAgentName, dZ as isFoundryAgent, d_ as isFoundryAgentDefinition, d$ as isFoundryApplication, e0 as isFoundryCapability, e1 as isFoundryLayer, e2 as isFoundrySchedule, e3 as isFoundrySubscriber, e4 as isFoundryTransmission, e5 as isInboxCapableStore, e6 as listFoundryApprovals, e7 as memoryAccountDirectory, e8 as memoryEventStore, e9 as memoryTopologyStore, ea as mountAgentDefinitionMemory, eb as mountFoundrySurfaces, ec as reconstructAgentInstance, ed as reconstructPlaybook, ee as reconstructPlaybookSubscription, ef as resolveFoundryApproval, eg as routeFromAgentFile, eh as routeFromInternalAgentName, ei as toGloveMessage, ej as toGloveRequestInput, ek as transmissionPredicate, el as withFoundryPermissions } from './client-DcsnudMI.js';
 import { Effect } from 'effect';
 import { EnvSnapshot } from 'glove-working-environment';
 import { AddressInfo } from 'node:net';
@@ -18,6 +18,8 @@ import 'glove-facts';
 import 'glove-memory/goals';
 import 'glove-memory/forms';
 import 'effect/Brand';
+import './station.js';
+import 'station-daemon';
 
 interface FileFoundryDataAdapterOptions {
     /** JSON state file. Writes use a same-directory atomic rename. */

package/dist/index.js

@@ -43,7 +43,7 @@ import {
   memoryTopologyStore,
   serializeInboundTransmissionXml,
   writeGeneratedTypes
-} from "./chunk-25BGNRJN.js";
+} from "./chunk-SGF3CFUR.js";
 import {
   FoundryClient,
   FoundryRunHandle,
@@ -52,36 +52,39 @@ import {
 import {
   defineConfig
 } from "./chunk-ZFNMFE3T.js";
+import "./chunk-J7ZBJM54.js";
+import {
+  FOUNDRY_REPL_BRAND,
+  FOUNDRY_WORKING_ENVIRONMENT_BRAND,
+  defineFacts,
+  defineForms,
+  defineGoals,
+  defineRepl,
+  defineWorkingEnvironment,
+  foundryDataEnvironmentPersistence,
+  foundryGuidanceSubject
+} from "./chunk-LW5PJ2FN.js";
 import {
   EMPTY_AGENT_COMPOSITION,
   EMPTY_CAPABILITY_REGISTRY,
   EMPTY_FOUNDRY_APPLICATION,
   EMPTY_NATIVE_REGISTRY,
   FOUNDRY_AGENT_APPLICATION_BRAND,
-  FOUNDRY_AGENT_BRAND,
-  FOUNDRY_AGENT_DEFINITION_BRAND,
-  FOUNDRY_AGENT_FILE_ENV,
-  FOUNDRY_AGENT_ROUTE_ENV,
   FOUNDRY_APPLICATION_BRAND,
-  FOUNDRY_APPLICATION_ENV,
   FOUNDRY_APPROVAL_DIRECTORY_ENV,
   FOUNDRY_COMPOSED_PLAYBOOK_BRAND,
   FOUNDRY_CONNECTION_BRAND,
   FOUNDRY_CORE_COMMAND_EVENT,
-  FOUNDRY_EVENT_PREFIX,
-  FOUNDRY_EXECUTION_MARKER,
   FOUNDRY_LAYER_BRAND,
   FOUNDRY_MCP_BRAND,
   FOUNDRY_MEMORY_BRAND,
   FOUNDRY_PLAYBOOK_ACTION_BRAND,
-  FOUNDRY_REPL_BRAND,
   FOUNDRY_SCHEDULE_BRAND,
   FOUNDRY_SHARED_TOOL_BRAND,
   FOUNDRY_SUBSCRIBER_BRAND,
   FOUNDRY_TRANSMISSION_BRAND,
   FOUNDRY_TRANSMISSION_EVENT_BRAND,
   FOUNDRY_TRANSMISSION_PREDICATE_BRAND,
-  FOUNDRY_WORKING_ENVIRONMENT_BRAND,
   FoundryApprovalDisplayManager,
   MemoryFoundryDataAdapter,
   composeAgent,
@@ -94,43 +97,28 @@ import {
   createFoundryCoreTools,
   createInstalledApplicationTransmissionTools,
   createManifest,
-  defineAgent,
   defineAgentApplication,
-  defineAgentFromModule,
   defineAgentInstance,
   defineApp,
   defineApplication,
-  defineCall,
   defineConnection,
-  defineFacts,
-  defineForms,
-  defineGoals,
   defineLayer,
   defineMcp,
   defineMemory,
   definePlaybookAction,
   definePlaybookSubscription,
-  defineRepl,
-  defineRoutes,
   defineSchedule,
   defineSharedTool,
-  defineSubagent,
   defineSubscriber,
   defineTransmission,
   defineTransmissionEvent,
   defineTransmissionPredicate,
-  defineWorkingEnvironment,
   discoverAgents,
   findAgentFiles,
-  foundryDataEnvironmentPersistence,
-  foundryGuidanceSubject,
   install,
   installRegistry,
   installationKey,
   installedApplicationTransmissionToolName,
-  internalAgentName,
-  isFoundryAgent,
-  isFoundryAgentDefinition,
   isFoundryApplication,
   isFoundryCapability,
   isFoundryLayer,
@@ -146,12 +134,29 @@ import {
   reconstructPlaybookSubscription,
   resolveFoundryApproval,
   routeFromAgentFile,
-  routeFromInternalAgentName,
   toGloveMessage,
   toGloveRequestInput,
   transmissionPredicate,
   withFoundryPermissions
-} from "./chunk-5LDW2N2E.js";
+} from "./chunk-KBMD4RYU.js";
+import {
+  FOUNDRY_AGENT_BRAND,
+  FOUNDRY_AGENT_DEFINITION_BRAND,
+  FOUNDRY_AGENT_FILE_ENV,
+  FOUNDRY_AGENT_ROUTE_ENV,
+  FOUNDRY_APPLICATION_ENV,
+  FOUNDRY_EVENT_PREFIX,
+  FOUNDRY_EXECUTION_MARKER,
+  defineAgent,
+  defineAgentFromModule,
+  defineCall,
+  defineRoutes,
+  defineSubagent,
+  internalAgentName,
+  isFoundryAgent,
+  isFoundryAgentDefinition,
+  routeFromInternalAgentName
+} from "./chunk-5NFLGHOC.js";
 
 // src/file-data.ts
 import { randomUUID } from "node:crypto";

package/dist/station.d.ts

@@ -0,0 +1,35 @@
+import { ExecutionConfig } from 'station-daemon';
+
+/** Private host connection. Never put this value in agent context or manifests. */
+interface FoundryStationConnection {
+    readonly url: string;
+    readonly stationId: string;
+    readonly token: string;
+}
+interface FoundryStationResources {
+    readonly browser?: ExecutionConfig["browser"];
+    readonly sandbox?: ExecutionConfig["sandbox"];
+}
+interface FoundryStationDaemonOptions {
+    /** Stable identity when exposing resource capabilities. */
+    readonly stationId: string;
+    readonly name?: string;
+    /** Optional loopback port; omitted means an automatically allocated port. */
+    readonly port?: number;
+    /** Runs once inside the managed daemon, never during agent assembly. */
+    readonly resources?: () => FoundryStationResources | Promise<FoundryStationResources>;
+    /** Host-only callback after startup. The application owns connection storage. */
+    readonly onReady?: (connection: FoundryStationConnection) => void | Promise<void>;
+}
+interface FoundryStationDaemonAdapter {
+    readonly kind: "station";
+    readonly options: FoundryStationDaemonOptions;
+}
+/**
+ * Configure the Station instance Foundry already owns. Provider adapters remain
+ * application dependencies. Successfully returned resources belong to Station;
+ * a factory that fails partway through acquisition must release its own resources.
+ */
+declare function stationDaemon(options: FoundryStationDaemonOptions): FoundryStationDaemonAdapter;
+
+export { type FoundryStationConnection, type FoundryStationDaemonAdapter, type FoundryStationDaemonOptions, type FoundryStationResources, stationDaemon };

package/dist/station.js

@@ -0,0 +1,9 @@
+// src/station.ts
+function stationDaemon(options) {
+  if (!/^[a-zA-Z0-9_-]{1,128}$/.test(options.stationId)) throw new Error("A valid Station identity is required.");
+  if (options.port !== void 0 && (!Number.isInteger(options.port) || options.port < 1 || options.port > 65535)) throw new Error("Station port must be between 1 and 65535.");
+  return Object.freeze({ kind: "station", options: Object.freeze({ ...options }) });
+}
+export {
+  stationDaemon
+};

package/docs/architecture.md

@@ -2,7 +2,7 @@
 
 ## Boundary rule
 
-Foundry exposes concepts that belong to an agentic application. Its execution engine is private and replaceable.
+Foundry exposes concepts that belong to an agentic application. Its execution engine is private and replaceable. Agent jobs run in a separate managed Station 3 daemon process; the Foundry control process does not construct a runner. See [execution](execution.md) for the process boundary and lifecycle.
 
 ```text
 file-routed code definitions           durable data

package/docs/building-with-foundry.md

@@ -4,7 +4,7 @@ Foundry uses the filesystem for code identity and imported values for code relat
 
 ## Create and run
 
-Use Node 20.12 or newer; Node 22.13+ is recommended and required by optional SQLite memory adapters. In a terminal, `init` opens a guided wizard: choose a directory, standalone or Next.js integration, guided or minimal starter, package manager, and dependency installation. Review the plan before any files are written. Arrow keys select, Enter confirms, and Ctrl+C cancels without creating the project. The wizard never requests credentials.
+Use Node 22 or newer; Node 22.13+ is recommended and required by optional SQLite memory adapters. In a terminal, `init` opens a guided wizard: choose a directory, standalone or Next.js integration, guided or minimal starter, package manager, and dependency installation. Review the plan before any files are written. Arrow keys select, Enter confirms, and Ctrl+C cancels without creating the project. The wizard never requests credentials.
 
 For CI or repeatable setup, use explicit choices:
 
@@ -261,6 +261,12 @@ servers from stalling a run indefinitely.
 Stdio-only idle and lifetime limits can recycle memory-heavy children without
 interrupting in-flight calls; adapter environment values are resolved again on reopen.
 
+## Mount optional capabilities
+
+Use `configure(agent, context)` to call capability packages' mount functions on the assembled agent. Register resource teardown with `context.onCleanup(() => handle.close())`; callbacks run in reverse order after execution, including failed setup or cancellation. Register cleanup as soon as you acquire a resource, before any later setup can fail.
+
+Browser and persistent sandbox capabilities follow this pattern through the optional `glove-execution` package and its `mountBrowser` / `mountSandbox` functions. See the [execution guide](./execution.md#optional-capability-mounts) for Station adapter examples. These capabilities add no browser or sandbox API to `glove-core` or Foundry agent definitions.
+
 ## Mount a working environment, VFS, and REPL
 
 Foundry mounts the native Glove packages; it does not reimplement their sandboxes. A working environment supplies a persistent virtual filesystem, named scripts, checkpoints, history, artifact export, and a closed model-facing verb set. A REPL is a separate computation surface over registered functions.
@@ -725,12 +731,23 @@ host. Delegate substantive work to a persisted Foundry instance and conversation
 through the native client or `/v1/responses`; the resulting run stays durable and
 observable.
 
-Use `glove-voice-s2s` for Gemini Live or OpenAI Realtime and `glove-voice` for a
+Use `glove-voice-s2s` for Gemini Live, OpenAI Realtime, or GPT-Live and `glove-voice` for a
 speech-to-text / Glove / text-to-speech pipeline. A realtime host can expose a
 delegation tool backed by the typed Foundry client, or mount `RealtimeAgent` against
 the assembled Glove in a scoped layer. Stop the voice session in the layer's
 cleanup. Keep provider credentials and audio device access in the host adapter.
 
+GPT-Live selects `provider: "openai-live"` in `s2sDrivenModel` or
+`createS2SAdapter`. Its Responses backend chooses the exposed Glove tools; this
+does not turn a voice session into a durable Foundry run. For durable work, expose
+a delegation tool that calls the target instance/conversation through the Foundry
+client. The host owns continuous PCM pacing (including silence), timestamped
+transcript fragments, playback and avatar utterance boundaries, and awaited
+shutdown for final usage. The adapter does not implement Live client delegation
+or browser WebRTC. Read the [GPT-Live guide](../../glove-voice-s2s/README.md#gpt-live)
+before adapting an existing room example; Realtime VAD and final-turn assumptions
+do not apply.
+
 `examples/foundry-braind-storm` demonstrates a voice lead delegating durable work
 to Foundry agents. Phone bridges, LiveKit rooms and native audio hosts can use the
 same instance/conversation boundary. Messenger-specific voice gateways and codecs