glove-foundry 0.4.1 → 0.5.0

package/dist/cli.js

@@ -3,14 +3,16 @@ import {
   FoundryRuntime,
   FoundryServer,
   writeGeneratedTypes
-} from "./chunk-25BGNRJN.js";
+} from "./chunk-SGF3CFUR.js";
 import {
   DEFAULT_FOUNDRY_CONFIG
 } from "./chunk-ZFNMFE3T.js";
+import "./chunk-J7ZBJM54.js";
 import {
   EMPTY_FOUNDRY_APPLICATION,
   isFoundryApplication
-} from "./chunk-5LDW2N2E.js";
+} from "./chunk-KBMD4RYU.js";
+import "./chunk-5NFLGHOC.js";
 
 // src/cli.ts
 import { watch } from "node:fs";
@@ -318,7 +320,8 @@ export default defineConfig({
           private: true,
           // Foundry and the Glove packages are ESM. This scopes that to the
           // agents, so the surrounding app keeps its own module system.
-          type: "module"
+          type: "module",
+          engines: { node: ">=22" }
         },
         null,
         2
@@ -337,6 +340,7 @@ export default defineConfig({
           version: "0.1.0",
           private: true,
           type: "module",
+          engines: { node: ">=22" },
           scripts: {
             dev: "glove foundry dev",
             start: "glove foundry start",

package/dist/{client-D0-pKEZM.d.ts → client-DcsnudMI.d.ts}

@@ -13,6 +13,7 @@ import { FactAdapter, FactScope, FactStore, FactInput } from 'glove-facts';
 import { GoalAdapter, GoalScope, GoalProgram, GoalRunner } from 'glove-memory/goals';
 import { FormAdapter, FormRunner } from 'glove-memory/forms';
 import * as effect_Brand from 'effect/Brand';
+import { FoundryStationDaemonAdapter } from './station.js';
 import { FoundryConfig } from './config.js';
 
 declare const TransmissionId: Schema.brand<Schema.refine<string, typeof Schema.String>, "FoundryTransmissionId">;
@@ -1560,6 +1561,8 @@ type FoundryCall<TInputSchema extends z.ZodType = z.ZodType, TOutputSchema exten
 declare function defineCall<TInputSchema extends z.ZodType, TOutputSchema extends z.ZodType>(options: FoundryCallOptions<TInputSchema, TOutputSchema>): FoundryCall<TInputSchema, TOutputSchema>;
 interface FoundryExecutionContext<TInput = unknown> extends FoundrySurfaceContext<TInput>, FoundryGuidanceHandles {
     readonly installations: ReadonlyArray<AgentInstallation>;
+    /** Register run-scoped teardown for an explicitly mounted capability. Runs in reverse order, even if assembly fails. */
+    readonly onCleanup: (cleanup: () => void | Promise<void>) => void;
     /** Native persistent environment mounted for this run, when configured. */
     readonly workingEnvironment?: WorkingEnvironment;
     /** Guarded VFS handle for host-side handlers and layers. */
@@ -2011,6 +2014,8 @@ interface FoundryRequestAuthorizationAdapter<TError = never> {
 /** Process infrastructure only; agent files own runtime capabilities. */
 interface FoundryApplicationOptions {
     readonly name: string;
+    /** Optional configuration of the managed daemon; loaded from the application file in its process. */
+    readonly daemon?: FoundryStationDaemonAdapter;
     readonly accounts?: ReadonlyArray<AccountReference>;
     readonly routes?: ReadonlyArray<Route>;
     readonly bindings?: ReadonlyArray<AgentBinding>;
@@ -2188,12 +2193,12 @@ declare class FoundryRuntime {
     private readonly execution;
     private readonly observer;
     private readonly signalRunner;
-    private readonly envStore;
-    private readonly envProvider;
     private readonly scheduleAdapter;
     private readonly services;
     private readonly runnerLoops;
     private readonly materializedActivations;
+    private readonly activationTransitions;
+    private readonly activationDispatches;
     private readonly activationTimers;
     private readonly approvalDirectory;
     private readonly coreCommandDirectory;
@@ -2364,12 +2369,13 @@ declare class FoundryRuntime {
     private validatePlaybooks;
     private validateRoute;
     private validateBinding;
-    private executionSignal;
     private seedTopology;
     private runInBackground;
     private settleRunnerLoops;
     private enqueueCoreRequest;
+    private withActivationTransition;
     private executeCoreCommand;
+    private executeCoreCommandUnlocked;
     private syncAgentPlaybooks;
     private assertActivationOwnership;
     private backendScheduleId;

package/dist/client.d.ts

@@ -1,4 +1,4 @@
-export { bf as FoundryClient, bg as FoundryClientAuthorizationAdapter, bh as FoundryClientOptions, bu as FoundryHealth, c7 as FoundryRunHandle, ce as FoundrySteerHandleResult, db as WaitOptions, dk as createFoundryClient } from './client-D0-pKEZM.js';
+export { bf as FoundryClient, bg as FoundryClientAuthorizationAdapter, bh as FoundryClientOptions, bu as FoundryHealth, c7 as FoundryRunHandle, ce as FoundrySteerHandleResult, db as WaitOptions, dk as createFoundryClient } from './client-DcsnudMI.js';
 import 'glove-core';
 import 'effect';
 import 'zod';
@@ -14,4 +14,6 @@ import 'glove-facts';
 import 'glove-memory/goals';
 import 'glove-memory/forms';
 import 'effect/Brand';
+import './station.js';
+import 'station-daemon';
 import './config.js';

package/dist/config.d.ts

@@ -1,6 +1,7 @@
 /** Framework-level execution policy. The underlying runner is deliberately private. */
 interface FoundryExecutionConfig {
     readonly pollIntervalMs?: number;
+    /** @deprecated Station 3 daemon owns idle backoff; retained for source compatibility. */
     readonly idlePollIntervalMs?: number;
     readonly maxConcurrent?: number;
     readonly maxAttempts?: number;

package/dist/execution-agent.js

@@ -1,9 +1,14 @@
 import {
-  FOUNDRY_AGENT_FILE_ENV,
-  FOUNDRY_AGENT_ROUTE_ENV,
-  bindAgentLocalDefinitions,
   compileAgentModule
-} from "./chunk-5LDW2N2E.js";
+} from "./chunk-TH5ETCG2.js";
+import "./chunk-LW5PJ2FN.js";
+import {
+  bindAgentLocalDefinitions
+} from "./chunk-KBMD4RYU.js";
+import {
+  FOUNDRY_AGENT_FILE_ENV,
+  FOUNDRY_AGENT_ROUTE_ENV
+} from "./chunk-5NFLGHOC.js";
 
 // src/execution-agent.ts
 import { pathToFileURL } from "node:url";

package/dist/execution-daemon.d.ts

@@ -0,0 +1,2 @@
+
+export {  }

package/dist/execution-daemon.js

@@ -0,0 +1,157 @@
+import {
+  executionEvents
+} from "./chunk-J7ZBJM54.js";
+import {
+  FOUNDRY_APPLICATION_ENV,
+  internalAgentName
+} from "./chunk-5NFLGHOC.js";
+
+// src/execution-daemon.ts
+import { randomBytes } from "node:crypto";
+import { mkdir, writeFile } from "node:fs/promises";
+import { createServer } from "node:net";
+import { join } from "node:path";
+import { pathToFileURL } from "node:url";
+import { createStation, MemoryKeyStorage, MemoryLogStorage } from "station-daemon/server";
+import { resolveConfig } from "station-daemon";
+import { StationClient, StationApiError } from "station-client";
+import { MemoryAdapter, configure } from "station-signal";
+import { ScheduleMemoryAdapter } from "station-schedules";
+import { MemoryEnvStorage } from "station-env";
+var station;
+var client;
+var queue = new MemoryAdapter();
+var schedules = new ScheduleMemoryAdapter();
+var definitions = /* @__PURE__ */ new Map();
+var stopping;
+var resources;
+function send(message) {
+  if (process.connected) process.send?.(message);
+}
+async function stop() {
+  return stopping ??= (async () => {
+    if (station) await station.stop();
+    else await Promise.allSettled([resources?.browser?.close(), resources?.sandbox?.close()]);
+  })();
+}
+async function freePort() {
+  const server = createServer();
+  await new Promise((resolve, reject) => {
+    server.once("error", reject);
+    server.listen(0, "127.0.0.1", resolve);
+  });
+  const address = server.address();
+  if (!address || typeof address === "string") throw new Error("No daemon port available.");
+  await new Promise((resolve, reject) => server.close((error) => error ? reject(error) : resolve()));
+  return address.port;
+}
+process.on("message", (message) => {
+  void (async () => {
+    const command = message.command;
+    let value;
+    switch (command.method) {
+      case "init": {
+        if (station) throw new Error("Execution daemon is already initialized.");
+        const options = command.options;
+        const signals = join(options.directory, "signals");
+        await mkdir(signals, { recursive: true, mode: 448 });
+        await writeFile(join(signals, "package.json"), '{"type":"module"}', { mode: 384 });
+        for (const [index, agent] of options.agents.entries()) {
+          const entry = join(signals, `${index}.js`);
+          await writeFile(
+            entry,
+            `import { loadExecutionAgent } from ${JSON.stringify(pathToFileURL(options.loader).href)};
+export default await loadExecutionAgent(${JSON.stringify(agent.route)}, ${JSON.stringify(agent.filePath)});
+`,
+            { mode: 384 }
+          );
+          const signal = (await import(pathToFileURL(entry).href)).default;
+          definitions.set(signal.name, signal);
+        }
+        const subscribers = Object.fromEntries(executionEvents.map((event) => [event, (value2) => send({ event, value: value2 })]));
+        const applicationFile = process.env[FOUNDRY_APPLICATION_ENV];
+        const application = applicationFile ? (await import(pathToFileURL(applicationFile).href)).default : void 0;
+        const daemon = application?.daemon;
+        if (daemon && daemon.kind !== "station") throw new Error("Unsupported daemon adapter.");
+        const settings = daemon?.options;
+        resources = await settings?.resources?.();
+        const port = settings?.port ?? await freePort();
+        station = await createStation(resolveConfig({
+          host: "127.0.0.1",
+          port,
+          stationDir: join(options.directory, "station"),
+          signalsDir: signals,
+          adapter: queue,
+          scheduleAdapter: schedules,
+          ...settings ? { network: { stationId: settings.stationId, name: settings.name ?? settings.stationId } } : {},
+          ...resources ? { execution: { ...resources, token: randomBytes(32).toString("hex") } } : {},
+          envStorage: new MemoryEnvStorage(),
+          logStorage: new MemoryLogStorage(),
+          auth: { username: "foundry", password: randomBytes(32).toString("hex"), keyStorage: new MemoryKeyStorage() },
+          subscribers: { signal: [subscribers] },
+          runner: options.runner
+        }), options.rootDir);
+        const key = await station.keyStore.create("foundry-execution", ["trigger", "read", "cancel"]);
+        client = new StationClient({ url: `http://127.0.0.1:${port}`, token: key.key });
+        await station.start();
+        await client.connect();
+        for (const agent of options.agents) {
+          const name = internalAgentName(agent.route);
+          await client.request("GET", `/signals/${encodeURIComponent(name)}`);
+        }
+        if (settings?.onReady) {
+          const resourceKey = await station.keyStore.create("foundry-resources", ["admin"]);
+          await settings.onReady({ url: `http://127.0.0.1:${port}`, stationId: settings.stationId, token: resourceKey.key });
+        }
+        configure({ adapter: queue });
+        value = { pid: process.pid };
+        break;
+      }
+      case "trigger": {
+        const definition = definitions.get(command.name);
+        if (!definition) throw new Error("Unknown agent definition.");
+        value = await definition.trigger(command.input);
+        break;
+      }
+      case "get":
+        value = await queue.getRun(command.id);
+        break;
+      case "list":
+        value = await queue.listAllRuns({ signalName: command.signalName });
+        break;
+      case "cancel":
+        try {
+          await client.request("POST", `/runs/${encodeURIComponent(command.id)}/cancel`, {});
+          value = true;
+        } catch (error) {
+          if (error instanceof StationApiError && ["cannot_cancel", "not_found"].includes(error.code)) value = false;
+          else throw error;
+        }
+        break;
+      case "schedule.add":
+        await schedules.add(command.schedule);
+        value = null;
+        break;
+      case "schedule.delete":
+        value = await schedules.delete(command.id);
+        break;
+      case "ping":
+        value = Boolean(client && (await client.health()).ok);
+        break;
+      case "stop":
+        await stop();
+        value = null;
+        break;
+    }
+    send({ id: message.id, value });
+    if (command.method === "stop") process.disconnect?.();
+  })().catch(() => {
+    send({ id: message.id, error: `Execution daemon ${message.command.method} failed. Inspect daemon health before repeating mutations.` });
+  });
+});
+process.once("disconnect", () => {
+  void stop().finally(() => process.exit(0));
+});
+process.once("SIGTERM", () => {
+  void stop().finally(() => process.exit(0));
+});

package/dist/execution-loader.d.ts

@@ -0,0 +1,6 @@
+import * as station_signal from 'station-signal';
+
+/** Private Station signal module loader. Explicit identity avoids process-global discovery races. */
+declare function loadExecutionAgent(route: string, file: string): Promise<station_signal.AnySignal>;
+
+export { loadExecutionAgent };

package/dist/execution-loader.js

@@ -0,0 +1,20 @@
+import {
+  compileAgentModule
+} from "./chunk-TH5ETCG2.js";
+import "./chunk-LW5PJ2FN.js";
+import {
+  bindAgentLocalDefinitions
+} from "./chunk-KBMD4RYU.js";
+import "./chunk-5NFLGHOC.js";
+
+// src/execution-loader.ts
+import { dirname } from "node:path";
+import { pathToFileURL } from "node:url";
+async function loadExecutionAgent(route, file) {
+  const module = await import(pathToFileURL(file).href);
+  await bindAgentLocalDefinitions(dirname(file));
+  return compileAgentModule(route, module);
+}
+export {
+  loadExecutionAgent
+};

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { F as FoundryDataAdapter, E as EnvironmentValue, A as AgentInstance, C as Conversation, P as PlaybookSubscription, a as FoundryActivationRecord, b as ProvisionAgentOptions, I as InboundDeliveryClaim, W as WorkspaceEntry, c as FoundryWorkingEnvironmentSnapshotOwner, S as SharedInboxItem, d as FoundryTask, e as AgentPlaybook, f as FoundryRuntime, D as DiscoveredAgent, g as FoundryManifest, h as AnyFoundryTransmission, i as AccountReference, j as InferAccountMetadata, k as AgentBinding, l as FoundryAgentApplication, m as InboundRoute, O as OutboundRoute, n as CapabilityDefinition, o as InferInboundConfig, p as InferOutboundConfig } from './client-D0-pKEZM.js';
-export { q as AccountContract, r as AccountDirectory, s as AccountFilter, t as AccountId, u as AccountNotFound, v as AccountSessionAdapter, w as AccountSessionRequest, x as AccountSessionUnavailable, y as AccountSummary, z as AgentApplicationContribution, B as AgentApplicationInstallContext, G as AgentApplicationOptions, H as AgentAssemblyContext, J as AgentAssemblyOptions, K as AgentDefinitionId, L as AgentDefinitionSurfaceContext, M as AgentFactoryContext, N as AgentHandlerContext, Q as AgentId, R as AgentInstallContext, T as AgentInstallation, U as AgentInstallationKind, V as AgentPlaybookInput, X as AgentProvisioningPolicy, Y as AgentRuntimeControls, Z as AnyFoundryAgent, _ as ApplicationConnectionContext, $ as ApplicationConnectionState, a0 as ApplicationConnectionStatus, a1 as BindingFilter, a2 as BindingId, a3 as BindingNotFound, a4 as CapabilityId, a5 as ComposedAgentPlaybook, a6 as ComposedAgentPlaybookInput, a7 as ConnectionReceiveInput, a8 as CreateAgentInstanceOptions, a9 as CreateConversationOptions, aa as CustomProvisionedAgent, ab as CustomProvisioningContext, ac as DefineAgentOptions, ad as DefineConnectionOptions, ae as DefineFoundryReplOptions, af as DefineFoundryScheduleOptions, ag as DefineFoundrySubagentOptions, ah as DefineFoundryWorkingEnvironmentOptions, ai as DefinePlaybookSubscriptionOptions, aj as DefinitionConfigInput, ak as EMPTY_AGENT_COMPOSITION, al as EMPTY_CAPABILITY_REGISTRY, am as EMPTY_FOUNDRY_APPLICATION, an as EMPTY_NATIVE_REGISTRY, ao as EgressAdapter, ap as EgressContext, aq as EventFilter, ar as EventId, as as EventNotFound, at as EventReference, au as EventStore, av as FOUNDRY_AGENT_APPLICATION_BRAND, aw as FOUNDRY_AGENT_BRAND, ax as FOUNDRY_AGENT_DEFINITION_BRAND, ay as FOUNDRY_AGENT_FILE_ENV, az as FOUNDRY_AGENT_ROUTE_ENV, aA as FOUNDRY_APPLICATION_BRAND, aB as FOUNDRY_APPLICATION_ENV, aC as FOUNDRY_APPROVAL_DIRECTORY_ENV, aD as FOUNDRY_COMPOSED_PLAYBOOK_BRAND, aE as FOUNDRY_CONNECTION_BRAND, aF as FOUNDRY_CORE_COMMAND_EVENT, aG as FOUNDRY_EVENT_PREFIX, aH as FOUNDRY_EXECUTION_MARKER, aI as FOUNDRY_LAYER_BRAND, aJ as FOUNDRY_MCP_BRAND, aK as FOUNDRY_MEMORY_BRAND, aL as FOUNDRY_PLAYBOOK_ACTION_BRAND, aM as FOUNDRY_REPL_BRAND, aN as FOUNDRY_SCHEDULE_BRAND, aO as FOUNDRY_SHARED_TOOL_BRAND, aP as FOUNDRY_SUBSCRIBER_BRAND, aQ as FOUNDRY_TRANSMISSION_BRAND, aR as FOUNDRY_TRANSMISSION_EVENT_BRAND, aS as FOUNDRY_TRANSMISSION_PREDICATE_BRAND, aT as FOUNDRY_WORKING_ENVIRONMENT_BRAND, aU as FoundryAccountSessionAdapter, aV as FoundryAgent, aW as FoundryAgentComponent, aX as FoundryAgentComposition, aY as FoundryAgentConventionModule, aZ as FoundryAgentDefinition, a_ as FoundryAgentMode, a$ as FoundryApp, b0 as FoundryApplication, b1 as FoundryApplicationConnection, b2 as FoundryApplicationManifest, b3 as FoundryApplicationOptions, b4 as FoundryApproval, b5 as FoundryApprovalDecision, b6 as FoundryApprovalDisplayManager, b7 as FoundryApprovalStatus, b8 as FoundryCall, b9 as FoundryCallContext, ba as FoundryCallOptions, bb as FoundryCapabilityKind, bc as FoundryCapabilityManifest, bd as FoundryCapabilityManifestEntry, be as FoundryCapabilityRegistry, bf as FoundryClient, bg as FoundryClientAuthorizationAdapter, bh as FoundryClientOptions, bi as FoundryCompositionSource, bj as FoundryConversationTranscript, bk as FoundryCoreCommand, bl as FoundryDomainError, bm as FoundryEvent, bn as FoundryEventCategory, bo as FoundryExecutionContext, bp as FoundryFactsOptions, bq as FoundryFormsOptions, br as FoundryGoalsOptions, bs as FoundryGuidanceHandles, bt as FoundryGuidanceScope, bu as FoundryHealth, bv as FoundryHookDefinition, bw as FoundryInstallable, bx as FoundryInstanceProvisioner, by as FoundryJavaScriptReplDefinition, bz as FoundryLayer, bA as FoundryLayerOptions, bB as FoundryLayerReference, bC as FoundryLayerSelection, bD as FoundryLispReplDefinition, bE as FoundryListResolver, bF as FoundryManifestAgent, bG as FoundryManifestCapability, bH as FoundryManifestTransmission, bI as FoundryMcp, bJ as FoundryMcpOptions, bK as FoundryMemoryProfile, bL as FoundryMemoryProfileOptions, bM as FoundryMemoryReference, bN as FoundryMemorySelection, bO as FoundryMeshConfig, bP as FoundryMessageInput, bQ as FoundryMountedRepl, bR as FoundryNativeManifest, bS as FoundryNativeManifestEntry, bT as FoundryNativeRegistry, bU as FoundryObservabilityAdapter, bV as FoundryPlaybookAction, bW as FoundryProgrammaticToolContext, bX as FoundryProgrammaticToolSelection, bY as FoundryProgrammaticTools, bZ as FoundryPythonReplDefinition, b_ as FoundryReplDefinition, b$ as FoundryRequest, c0 as FoundryRequestAuthorizationAdapter, c1 as FoundryRequestAuthorizationInput, c2 as FoundryResolvedMcp, c3 as FoundryResolver, c4 as FoundryResult, c5 as FoundryRouteMap, c6 as FoundryRun, c7 as FoundryRunHandle, c8 as FoundryRuntimeError, c9 as FoundryRuntimeOptions, ca as FoundryScheduleDefinition, cb as FoundryScheduleTiming, cc as FoundryScheduleTimingInput, cd as FoundrySharedTool, ce as FoundrySteerHandleResult, cf as FoundrySteerResult, cg as FoundrySubagentToolContext, ch as FoundrySubscriber, ci as FoundrySubscriberOptions, cj as FoundrySubscriberSelection, ck as FoundrySurfaceContext, cl as FoundryToolBody, cm as FoundryTransmission, cn as FoundryTransmissionEvent, co as FoundryTransmissionPredicate, cp as FoundryVfs, cq as FoundryVfsHandle, cr as FoundryWorkingEnvironmentCreateContext, cs as FoundryWorkingEnvironmentDefinition, ct as FoundryWorkingEnvironmentPersistenceAdapter, cu as FoundryWorkingEnvironmentPersistenceContext, cv as GrantResolutionError, cw as GrantResolver, cx as InboundContract, cy as InferAgentInput, cz as InferAgentOutput, cA as InferInboundEvent, cB as InferOutboundInput, cC as InferOutboundOutput, cD as IngressAdapter, cE as IngressContext, cF as InstallationSelection, cG as ManifestCompilationError, cH as McpAdapterFactory, cI as MemoryFoundryDataAdapter, cJ as MemoryObservabilityAdapter, cK as OutboundContract, cL as PlaybookActionOptions, cM as PlaybookDirective, cN as PlaybookDirectiveInput, cO as PlaybookMatch, cP as PlaybookMatchInput, cQ as PlaybookOutboundDirective, cR as PlaybookOutboundInput, cS as PlaybookSubscriptionTarget, cT as PlaybookSubscriptionTargetInput, cU as ReplyPolicy, cV as ResolveGrantRequest, cW as Route, cX as RouteFilter, cY as RouteId, cZ as RouteNotFound, c_ as RunGrant, c$ as RunId, d0 as SharedToolOptions, d1 as TopologyConflict, d2 as TopologyStore, d3 as TransmissionEventDirection, d4 as TransmissionEventOptions, d5 as TransmissionId, d6 as TransmissionOptions, d7 as TransmissionPredicateOptions, d8 as TransmissionSerializationContext, d9 as UpdateAgentInstanceOptions, da as UpdateConversationOptions, db as WaitOptions, dc as compileApplicationManifest, dd as composeAgent, de as composePlaybook, df as configureLayer, dg as configureMemory, dh as createAgentInstance, di as createConversation, dj as createFoundryApproval, dk as createFoundryClient, dl as createFoundryCoreTools, dm as createInstalledApplicationTransmissionTools, dn as createManifest, dp as defineAgent, dq as defineAgentApplication, dr as defineAgentFromModule, ds as defineAgentInstance, dt as defineApp, du as defineApplication, dv as defineCall, dw as defineConnection, dx as defineFacts, dy as defineForms, dz as defineGoals, dA as defineLayer, dB as defineMcp, dC as defineMemory, dD as definePlaybookAction, dE as definePlaybookSubscription, dF as defineRepl, dG as defineRoutes, dH as defineSchedule, dI as defineSharedTool, dJ as defineSubagent, dK as defineSubscriber, dL as defineTransmission, dM as defineTransmissionEvent, dN as defineTransmissionPredicate, dO as defineWorkingEnvironment, dP as discoverAgents, dQ as findAgentFiles, dR as foundryDataEnvironmentPersistence, dS as foundryGuidanceSubject, dT as grantResolverLive, dU as install, dV as installRegistry, dW as installationKey, dX as installedApplicationTransmissionToolName, dY as internalAgentName, dZ as isFoundryAgent, d_ as isFoundryAgentDefinition, d$ as isFoundryApplication, e0 as isFoundryCapability, e1 as isFoundryLayer, e2 as isFoundrySchedule, e3 as isFoundrySubscriber, e4 as isFoundryTransmission, e5 as isInboxCapableStore, e6 as listFoundryApprovals, e7 as memoryAccountDirectory, e8 as memoryEventStore, e9 as memoryTopologyStore, ea as mountAgentDefinitionMemory, eb as mountFoundrySurfaces, ec as reconstructAgentInstance, ed as reconstructPlaybook, ee as reconstructPlaybookSubscription, ef as resolveFoundryApproval, eg as routeFromAgentFile, eh as routeFromInternalAgentName, ei as toGloveMessage, ej as toGloveRequestInput, ek as transmissionPredicate, el as withFoundryPermissions } from './client-D0-pKEZM.js';
+import { F as FoundryDataAdapter, E as EnvironmentValue, A as AgentInstance, C as Conversation, P as PlaybookSubscription, a as FoundryActivationRecord, b as ProvisionAgentOptions, I as InboundDeliveryClaim, W as WorkspaceEntry, c as FoundryWorkingEnvironmentSnapshotOwner, S as SharedInboxItem, d as FoundryTask, e as AgentPlaybook, f as FoundryRuntime, D as DiscoveredAgent, g as FoundryManifest, h as AnyFoundryTransmission, i as AccountReference, j as InferAccountMetadata, k as AgentBinding, l as FoundryAgentApplication, m as InboundRoute, O as OutboundRoute, n as CapabilityDefinition, o as InferInboundConfig, p as InferOutboundConfig } from './client-DcsnudMI.js';
+export { q as AccountContract, r as AccountDirectory, s as AccountFilter, t as AccountId, u as AccountNotFound, v as AccountSessionAdapter, w as AccountSessionRequest, x as AccountSessionUnavailable, y as AccountSummary, z as AgentApplicationContribution, B as AgentApplicationInstallContext, G as AgentApplicationOptions, H as AgentAssemblyContext, J as AgentAssemblyOptions, K as AgentDefinitionId, L as AgentDefinitionSurfaceContext, M as AgentFactoryContext, N as AgentHandlerContext, Q as AgentId, R as AgentInstallContext, T as AgentInstallation, U as AgentInstallationKind, V as AgentPlaybookInput, X as AgentProvisioningPolicy, Y as AgentRuntimeControls, Z as AnyFoundryAgent, _ as ApplicationConnectionContext, $ as ApplicationConnectionState, a0 as ApplicationConnectionStatus, a1 as BindingFilter, a2 as BindingId, a3 as BindingNotFound, a4 as CapabilityId, a5 as ComposedAgentPlaybook, a6 as ComposedAgentPlaybookInput, a7 as ConnectionReceiveInput, a8 as CreateAgentInstanceOptions, a9 as CreateConversationOptions, aa as CustomProvisionedAgent, ab as CustomProvisioningContext, ac as DefineAgentOptions, ad as DefineConnectionOptions, ae as DefineFoundryReplOptions, af as DefineFoundryScheduleOptions, ag as DefineFoundrySubagentOptions, ah as DefineFoundryWorkingEnvironmentOptions, ai as DefinePlaybookSubscriptionOptions, aj as DefinitionConfigInput, ak as EMPTY_AGENT_COMPOSITION, al as EMPTY_CAPABILITY_REGISTRY, am as EMPTY_FOUNDRY_APPLICATION, an as EMPTY_NATIVE_REGISTRY, ao as EgressAdapter, ap as EgressContext, aq as EventFilter, ar as EventId, as as EventNotFound, at as EventReference, au as EventStore, av as FOUNDRY_AGENT_APPLICATION_BRAND, aw as FOUNDRY_AGENT_BRAND, ax as FOUNDRY_AGENT_DEFINITION_BRAND, ay as FOUNDRY_AGENT_FILE_ENV, az as FOUNDRY_AGENT_ROUTE_ENV, aA as FOUNDRY_APPLICATION_BRAND, aB as FOUNDRY_APPLICATION_ENV, aC as FOUNDRY_APPROVAL_DIRECTORY_ENV, aD as FOUNDRY_COMPOSED_PLAYBOOK_BRAND, aE as FOUNDRY_CONNECTION_BRAND, aF as FOUNDRY_CORE_COMMAND_EVENT, aG as FOUNDRY_EVENT_PREFIX, aH as FOUNDRY_EXECUTION_MARKER, aI as FOUNDRY_LAYER_BRAND, aJ as FOUNDRY_MCP_BRAND, aK as FOUNDRY_MEMORY_BRAND, aL as FOUNDRY_PLAYBOOK_ACTION_BRAND, aM as FOUNDRY_REPL_BRAND, aN as FOUNDRY_SCHEDULE_BRAND, aO as FOUNDRY_SHARED_TOOL_BRAND, aP as FOUNDRY_SUBSCRIBER_BRAND, aQ as FOUNDRY_TRANSMISSION_BRAND, aR as FOUNDRY_TRANSMISSION_EVENT_BRAND, aS as FOUNDRY_TRANSMISSION_PREDICATE_BRAND, aT as FOUNDRY_WORKING_ENVIRONMENT_BRAND, aU as FoundryAccountSessionAdapter, aV as FoundryAgent, aW as FoundryAgentComponent, aX as FoundryAgentComposition, aY as FoundryAgentConventionModule, aZ as FoundryAgentDefinition, a_ as FoundryAgentMode, a$ as FoundryApp, b0 as FoundryApplication, b1 as FoundryApplicationConnection, b2 as FoundryApplicationManifest, b3 as FoundryApplicationOptions, b4 as FoundryApproval, b5 as FoundryApprovalDecision, b6 as FoundryApprovalDisplayManager, b7 as FoundryApprovalStatus, b8 as FoundryCall, b9 as FoundryCallContext, ba as FoundryCallOptions, bb as FoundryCapabilityKind, bc as FoundryCapabilityManifest, bd as FoundryCapabilityManifestEntry, be as FoundryCapabilityRegistry, bf as FoundryClient, bg as FoundryClientAuthorizationAdapter, bh as FoundryClientOptions, bi as FoundryCompositionSource, bj as FoundryConversationTranscript, bk as FoundryCoreCommand, bl as FoundryDomainError, bm as FoundryEvent, bn as FoundryEventCategory, bo as FoundryExecutionContext, bp as FoundryFactsOptions, bq as FoundryFormsOptions, br as FoundryGoalsOptions, bs as FoundryGuidanceHandles, bt as FoundryGuidanceScope, bu as FoundryHealth, bv as FoundryHookDefinition, bw as FoundryInstallable, bx as FoundryInstanceProvisioner, by as FoundryJavaScriptReplDefinition, bz as FoundryLayer, bA as FoundryLayerOptions, bB as FoundryLayerReference, bC as FoundryLayerSelection, bD as FoundryLispReplDefinition, bE as FoundryListResolver, bF as FoundryManifestAgent, bG as FoundryManifestCapability, bH as FoundryManifestTransmission, bI as FoundryMcp, bJ as FoundryMcpOptions, bK as FoundryMemoryProfile, bL as FoundryMemoryProfileOptions, bM as FoundryMemoryReference, bN as FoundryMemorySelection, bO as FoundryMeshConfig, bP as FoundryMessageInput, bQ as FoundryMountedRepl, bR as FoundryNativeManifest, bS as FoundryNativeManifestEntry, bT as FoundryNativeRegistry, bU as FoundryObservabilityAdapter, bV as FoundryPlaybookAction, bW as FoundryProgrammaticToolContext, bX as FoundryProgrammaticToolSelection, bY as FoundryProgrammaticTools, bZ as FoundryPythonReplDefinition, b_ as FoundryReplDefinition, b$ as FoundryRequest, c0 as FoundryRequestAuthorizationAdapter, c1 as FoundryRequestAuthorizationInput, c2 as FoundryResolvedMcp, c3 as FoundryResolver, c4 as FoundryResult, c5 as FoundryRouteMap, c6 as FoundryRun, c7 as FoundryRunHandle, c8 as FoundryRuntimeError, c9 as FoundryRuntimeOptions, ca as FoundryScheduleDefinition, cb as FoundryScheduleTiming, cc as FoundryScheduleTimingInput, cd as FoundrySharedTool, ce as FoundrySteerHandleResult, cf as FoundrySteerResult, cg as FoundrySubagentToolContext, ch as FoundrySubscriber, ci as FoundrySubscriberOptions, cj as FoundrySubscriberSelection, ck as FoundrySurfaceContext, cl as FoundryToolBody, cm as FoundryTransmission, cn as FoundryTransmissionEvent, co as FoundryTransmissionPredicate, cp as FoundryVfs, cq as FoundryVfsHandle, cr as FoundryWorkingEnvironmentCreateContext, cs as FoundryWorkingEnvironmentDefinition, ct as FoundryWorkingEnvironmentPersistenceAdapter, cu as FoundryWorkingEnvironmentPersistenceContext, cv as GrantResolutionError, cw as GrantResolver, cx as InboundContract, cy as InferAgentInput, cz as InferAgentOutput, cA as InferInboundEvent, cB as InferOutboundInput, cC as InferOutboundOutput, cD as IngressAdapter, cE as IngressContext, cF as InstallationSelection, cG as ManifestCompilationError, cH as McpAdapterFactory, cI as MemoryFoundryDataAdapter, cJ as MemoryObservabilityAdapter, cK as OutboundContract, cL as PlaybookActionOptions, cM as PlaybookDirective, cN as PlaybookDirectiveInput, cO as PlaybookMatch, cP as PlaybookMatchInput, cQ as PlaybookOutboundDirective, cR as PlaybookOutboundInput, cS as PlaybookSubscriptionTarget, cT as PlaybookSubscriptionTargetInput, cU as ReplyPolicy, cV as ResolveGrantRequest, cW as Route, cX as RouteFilter, cY as RouteId, cZ as RouteNotFound, c_ as RunGrant, c$ as RunId, d0 as SharedToolOptions, d1 as TopologyConflict, d2 as TopologyStore, d3 as TransmissionEventDirection, d4 as TransmissionEventOptions, d5 as TransmissionId, d6 as TransmissionOptions, d7 as TransmissionPredicateOptions, d8 as TransmissionSerializationContext, d9 as UpdateAgentInstanceOptions, da as UpdateConversationOptions, db as WaitOptions, dc as compileApplicationManifest, dd as composeAgent, de as composePlaybook, df as configureLayer, dg as configureMemory, dh as createAgentInstance, di as createConversation, dj as createFoundryApproval, dk as createFoundryClient, dl as createFoundryCoreTools, dm as createInstalledApplicationTransmissionTools, dn as createManifest, dp as defineAgent, dq as defineAgentApplication, dr as defineAgentFromModule, ds as defineAgentInstance, dt as defineApp, du as defineApplication, dv as defineCall, dw as defineConnection, dx as defineFacts, dy as defineForms, dz as defineGoals, dA as defineLayer, dB as defineMcp, dC as defineMemory, dD as definePlaybookAction, dE as definePlaybookSubscription, dF as defineRepl, dG as defineRoutes, dH as defineSchedule, dI as defineSharedTool, dJ as defineSubagent, dK as defineSubscriber, dL as defineTransmission, dM as defineTransmissionEvent, dN as defineTransmissionPredicate, dO as defineWorkingEnvironment, dP as discoverAgents, dQ as findAgentFiles, dR as foundryDataEnvironmentPersistence, dS as foundryGuidanceSubject, dT as grantResolverLive, dU as install, dV as installRegistry, dW as installationKey, dX as installedApplicationTransmissionToolName, dY as internalAgentName, dZ as isFoundryAgent, d_ as isFoundryAgentDefinition, d$ as isFoundryApplication, e0 as isFoundryCapability, e1 as isFoundryLayer, e2 as isFoundrySchedule, e3 as isFoundrySubscriber, e4 as isFoundryTransmission, e5 as isInboxCapableStore, e6 as listFoundryApprovals, e7 as memoryAccountDirectory, e8 as memoryEventStore, e9 as memoryTopologyStore, ea as mountAgentDefinitionMemory, eb as mountFoundrySurfaces, ec as reconstructAgentInstance, ed as reconstructPlaybook, ee as reconstructPlaybookSubscription, ef as resolveFoundryApproval, eg as routeFromAgentFile, eh as routeFromInternalAgentName, ei as toGloveMessage, ej as toGloveRequestInput, ek as transmissionPredicate, el as withFoundryPermissions } from './client-DcsnudMI.js';
 import { Effect } from 'effect';
 import { EnvSnapshot } from 'glove-working-environment';
 import { AddressInfo } from 'node:net';
@@ -18,6 +18,8 @@ import 'glove-facts';
 import 'glove-memory/goals';
 import 'glove-memory/forms';
 import 'effect/Brand';
+import './station.js';
+import 'station-daemon';
 
 interface FileFoundryDataAdapterOptions {
     /** JSON state file. Writes use a same-directory atomic rename. */

package/dist/index.js

@@ -43,7 +43,7 @@ import {
   memoryTopologyStore,
   serializeInboundTransmissionXml,
   writeGeneratedTypes
-} from "./chunk-25BGNRJN.js";
+} from "./chunk-SGF3CFUR.js";
 import {
   FoundryClient,
   FoundryRunHandle,
@@ -52,36 +52,39 @@ import {
 import {
   defineConfig
 } from "./chunk-ZFNMFE3T.js";
+import "./chunk-J7ZBJM54.js";
+import {
+  FOUNDRY_REPL_BRAND,
+  FOUNDRY_WORKING_ENVIRONMENT_BRAND,
+  defineFacts,
+  defineForms,
+  defineGoals,
+  defineRepl,
+  defineWorkingEnvironment,
+  foundryDataEnvironmentPersistence,
+  foundryGuidanceSubject
+} from "./chunk-LW5PJ2FN.js";
 import {
   EMPTY_AGENT_COMPOSITION,
   EMPTY_CAPABILITY_REGISTRY,
   EMPTY_FOUNDRY_APPLICATION,
   EMPTY_NATIVE_REGISTRY,
   FOUNDRY_AGENT_APPLICATION_BRAND,
-  FOUNDRY_AGENT_BRAND,
-  FOUNDRY_AGENT_DEFINITION_BRAND,
-  FOUNDRY_AGENT_FILE_ENV,
-  FOUNDRY_AGENT_ROUTE_ENV,
   FOUNDRY_APPLICATION_BRAND,
-  FOUNDRY_APPLICATION_ENV,
   FOUNDRY_APPROVAL_DIRECTORY_ENV,
   FOUNDRY_COMPOSED_PLAYBOOK_BRAND,
   FOUNDRY_CONNECTION_BRAND,
   FOUNDRY_CORE_COMMAND_EVENT,
-  FOUNDRY_EVENT_PREFIX,
-  FOUNDRY_EXECUTION_MARKER,
   FOUNDRY_LAYER_BRAND,
   FOUNDRY_MCP_BRAND,
   FOUNDRY_MEMORY_BRAND,
   FOUNDRY_PLAYBOOK_ACTION_BRAND,
-  FOUNDRY_REPL_BRAND,
   FOUNDRY_SCHEDULE_BRAND,
   FOUNDRY_SHARED_TOOL_BRAND,
   FOUNDRY_SUBSCRIBER_BRAND,
   FOUNDRY_TRANSMISSION_BRAND,
   FOUNDRY_TRANSMISSION_EVENT_BRAND,
   FOUNDRY_TRANSMISSION_PREDICATE_BRAND,
-  FOUNDRY_WORKING_ENVIRONMENT_BRAND,
   FoundryApprovalDisplayManager,
   MemoryFoundryDataAdapter,
   composeAgent,
@@ -94,43 +97,28 @@ import {
   createFoundryCoreTools,
   createInstalledApplicationTransmissionTools,
   createManifest,
-  defineAgent,
   defineAgentApplication,
-  defineAgentFromModule,
   defineAgentInstance,
   defineApp,
   defineApplication,
-  defineCall,
   defineConnection,
-  defineFacts,
-  defineForms,
-  defineGoals,
   defineLayer,
   defineMcp,
   defineMemory,
   definePlaybookAction,
   definePlaybookSubscription,
-  defineRepl,
-  defineRoutes,
   defineSchedule,
   defineSharedTool,
-  defineSubagent,
   defineSubscriber,
   defineTransmission,
   defineTransmissionEvent,
   defineTransmissionPredicate,
-  defineWorkingEnvironment,
   discoverAgents,
   findAgentFiles,
-  foundryDataEnvironmentPersistence,
-  foundryGuidanceSubject,
   install,
   installRegistry,
   installationKey,
   installedApplicationTransmissionToolName,
-  internalAgentName,
-  isFoundryAgent,
-  isFoundryAgentDefinition,
   isFoundryApplication,
   isFoundryCapability,
   isFoundryLayer,
@@ -146,12 +134,29 @@ import {
   reconstructPlaybookSubscription,
   resolveFoundryApproval,
   routeFromAgentFile,
-  routeFromInternalAgentName,
   toGloveMessage,
   toGloveRequestInput,
   transmissionPredicate,
   withFoundryPermissions
-} from "./chunk-5LDW2N2E.js";
+} from "./chunk-KBMD4RYU.js";
+import {
+  FOUNDRY_AGENT_BRAND,
+  FOUNDRY_AGENT_DEFINITION_BRAND,
+  FOUNDRY_AGENT_FILE_ENV,
+  FOUNDRY_AGENT_ROUTE_ENV,
+  FOUNDRY_APPLICATION_ENV,
+  FOUNDRY_EVENT_PREFIX,
+  FOUNDRY_EXECUTION_MARKER,
+  defineAgent,
+  defineAgentFromModule,
+  defineCall,
+  defineRoutes,
+  defineSubagent,
+  internalAgentName,
+  isFoundryAgent,
+  isFoundryAgentDefinition,
+  routeFromInternalAgentName
+} from "./chunk-5NFLGHOC.js";
 
 // src/file-data.ts
 import { randomUUID } from "node:crypto";

package/dist/station.d.ts

@@ -0,0 +1,35 @@
+import { ExecutionConfig } from 'station-daemon';
+
+/** Private host connection. Never put this value in agent context or manifests. */
+interface FoundryStationConnection {
+    readonly url: string;
+    readonly stationId: string;
+    readonly token: string;
+}
+interface FoundryStationResources {
+    readonly browser?: ExecutionConfig["browser"];
+    readonly sandbox?: ExecutionConfig["sandbox"];
+}
+interface FoundryStationDaemonOptions {
+    /** Stable identity when exposing resource capabilities. */
+    readonly stationId: string;
+    readonly name?: string;
+    /** Optional loopback port; omitted means an automatically allocated port. */
+    readonly port?: number;
+    /** Runs once inside the managed daemon, never during agent assembly. */
+    readonly resources?: () => FoundryStationResources | Promise<FoundryStationResources>;
+    /** Host-only callback after startup. The application owns connection storage. */
+    readonly onReady?: (connection: FoundryStationConnection) => void | Promise<void>;
+}
+interface FoundryStationDaemonAdapter {
+    readonly kind: "station";
+    readonly options: FoundryStationDaemonOptions;
+}
+/**
+ * Configure the Station instance Foundry already owns. Provider adapters remain
+ * application dependencies. Successfully returned resources belong to Station;
+ * a factory that fails partway through acquisition must release its own resources.
+ */
+declare function stationDaemon(options: FoundryStationDaemonOptions): FoundryStationDaemonAdapter;
+
+export { type FoundryStationConnection, type FoundryStationDaemonAdapter, type FoundryStationDaemonOptions, type FoundryStationResources, stationDaemon };

package/dist/station.js

@@ -0,0 +1,9 @@
+// src/station.ts
+function stationDaemon(options) {
+  if (!/^[a-zA-Z0-9_-]{1,128}$/.test(options.stationId)) throw new Error("A valid Station identity is required.");
+  if (options.port !== void 0 && (!Number.isInteger(options.port) || options.port < 1 || options.port > 65535)) throw new Error("Station port must be between 1 and 65535.");
+  return Object.freeze({ kind: "station", options: Object.freeze({ ...options }) });
+}
+export {
+  stationDaemon
+};

package/docs/architecture.md

@@ -2,7 +2,7 @@
 
 ## Boundary rule
 
-Foundry exposes concepts that belong to an agentic application. Its execution engine is private and replaceable.
+Foundry exposes concepts that belong to an agentic application. Its execution engine is private and replaceable. Agent jobs run in a separate managed Station 3 daemon process; the Foundry control process does not construct a runner. See [execution](execution.md) for the process boundary and lifecycle.
 
 ```text
 file-routed code definitions           durable data

package/docs/building-with-foundry.md

@@ -4,7 +4,7 @@ Foundry uses the filesystem for code identity and imported values for code relat
 
 ## Create and run
 
-Use Node 20.12 or newer; Node 22.13+ is recommended and required by optional SQLite memory adapters. In a terminal, `init` opens a guided wizard: choose a directory, standalone or Next.js integration, guided or minimal starter, package manager, and dependency installation. Review the plan before any files are written. Arrow keys select, Enter confirms, and Ctrl+C cancels without creating the project. The wizard never requests credentials.
+Use Node 22 or newer; Node 22.13+ is recommended and required by optional SQLite memory adapters. In a terminal, `init` opens a guided wizard: choose a directory, standalone or Next.js integration, guided or minimal starter, package manager, and dependency installation. Review the plan before any files are written. Arrow keys select, Enter confirms, and Ctrl+C cancels without creating the project. The wizard never requests credentials.
 
 For CI or repeatable setup, use explicit choices:
 
@@ -261,6 +261,12 @@ servers from stalling a run indefinitely.
 Stdio-only idle and lifetime limits can recycle memory-heavy children without
 interrupting in-flight calls; adapter environment values are resolved again on reopen.
 
+## Mount optional capabilities
+
+Use `configure(agent, context)` to call capability packages' mount functions on the assembled agent. Register resource teardown with `context.onCleanup(() => handle.close())`; callbacks run in reverse order after execution, including failed setup or cancellation. Register cleanup as soon as you acquire a resource, before any later setup can fail.
+
+Browser and persistent sandbox capabilities follow this pattern through the optional `glove-execution` package and its `mountBrowser` / `mountSandbox` functions. See the [execution guide](./execution.md#optional-capability-mounts) for Station adapter examples. These capabilities add no browser or sandbox API to `glove-core` or Foundry agent definitions.
+
 ## Mount a working environment, VFS, and REPL
 
 Foundry mounts the native Glove packages; it does not reimplement their sandboxes. A working environment supplies a persistent virtual filesystem, named scripts, checkpoints, history, artifact export, and a closed model-facing verb set. A REPL is a separate computation surface over registered functions.

package/docs/execution-release.md

@@ -0,0 +1,57 @@
+# Station 3 and execution mounts — release handoff
+
+Verified on 23 September 2026 with Node 22.18 and pnpm 10.28.2. The complete pending Changesets plan has been applied, including package versions and changelogs. npm publication and production documentation deployment have not been performed.
+
+## What ships
+
+- `glove-execution`: optional, adapter-backed browser and sandbox mounts. The default entrypoint is portable; Station adapters live under `glove-execution/station`. Mounts attach tools and transient screenshot context without taking or replacing the agent model.
+- `glove-core`: runtime context providers accept native content parts alongside text. Browser and sandbox implementation dependencies remain outside core. Runtime-context telemetry omits media payloads and URLs.
+- `glove-foundry`: agent jobs run in a managed local Station 3 daemon. Optional `stationDaemon` application configuration starts browser/sandbox providers in that same daemon. Generic mount cleanup handles success, failure and cancellation. Scheduled activation transitions are serialized so delayed daemon acknowledgements cannot overwrite a pause or cancellation.
+- Foundry Operator: a general-purpose example with Steel proxy sessions, Docker sandboxes and server previews, native per-conversation memory, application-owned continuity/compaction prompts, and native Foundry sleep. Telegram is a user request, not a preloaded workflow.
+- Existing Station room examples use Station 3's daemon and separate dashboard rather than the retired `station-kit` entrypoint.
+
+The versioned candidate contains `glove-core` 4.2.0, `glove-foundry` 0.5.0 and the initial `glove-execution` 0.2.0 publication. It also applies the existing VFS changesets and the dependency-driven version bumps computed by Changesets. The pending notes have been consumed into package changelogs; no second Version Packages PR is needed for this candidate. The workspace lockfile was validated after versioning.
+
+## Documentation and illustrations
+
+- [Execution architecture and migration](./execution.md)
+- [Package guide](../../glove-execution/README.md)
+- [Operator setup and verification](../../../examples/foundry-operator/README.md)
+- Site guide: `/docs/execution`
+- Illustrated walkthrough: `/foundry/docs/browser-and-sandbox`
+- Blog: `/blog/agents-with-browsers-and-sandboxes`
+- Updated package catalog, Foundry landing page, documentation navigation and repository agent skills.
+- Both `/llms.txt` and `/llms-full.txt`, and both `/foundry/llms.txt` and `/foundry/llms-full.txt`, include the new package and shared Station configuration. The full references include the Operator documentation once, including ownership and lifecycle limits.
+
+The family diagram explains core, Foundry, mounts and adapters. The architecture diagram shows jobs and optional resources sharing one Station daemon. Public demo screenshots illustrate browser scripting and a sandbox-hosted server without exposing credentials or private conversations.
+
+## Verification
+
+The repository's complete publish build graph (legacy dependency first), package typechecks and site production build passed. The affected suites passed: core 25, execution 11 (one separately verified real-browser integration is opt-in), Foundry 97 and Operator 5. Delayed-acknowledgement regressions exercise pause and cancel while a real daemon run is already visible; existing tests cover updates, recurrence, overdue reconstruction and resumption.
+
+Additional checks cover:
+
+- Registry version preflight and the complete Changesets version plan. After applying that plan, all planned publishable releases are ahead of npm or first publications; the frozen lockfile check and full publish build passed again. Versioned tarballs have valid exports and reference the new dependency versions.
+- Tarball contents, declared export/type targets, daemon/loader entrypoints, packaged imports and CLI scaffolding using the tested workspace dependency closure. This is not a fresh registry install of unpublished versions.
+- Desktop and mobile views of both guides, the blog, package catalog, Foundry landing page and blog index: no JavaScript errors, horizontal overflow or broken images.
+- HTTP 200 responses and new API coverage in all four LLM reference endpoints.
+- Real Chromium integration, and a live Operator run creating a proxied Steel browser, reading a public page, taking a screenshot, closing the browser and checking an existing Docker-hosted server over HTTP.
+- An earlier isolated memory verifier checked compaction and recall. Memory is per agent conversation by default; cross-conversation retrieval and continuity policy belong to the application.
+
+Telegram authentication is **not verified**: its login page remained on a loading state and no QR login completed. Public browser and sandbox verification must not be represented as successful Telegram account control.
+
+## Operational boundaries
+
+Foundry owns the managed local daemon process. Its current job queue is in memory; interrupted live jobs are not restored after process loss. Durable conversation, activation and memory adapters have their own persistence behavior. This release does not add distributed execution or high availability.
+
+Application resource factories run once per daemon and must release partially acquired resources if they throw before returning. Foundry closes returned providers on shutdown and startup failure. Retention across turns is an explicit adapter/application policy; choose scope identities, resource grants, credentials and expiration accordingly.
+
+The private `onReady` connection has Station 3 operator/admin authority. Keep it in trusted host code, never in model context or public UI responses. Steel proxy configuration is an application/provider setting, and still depends on account availability. Foundry requires Node 22+; the portable mount entrypoint does not acquire that requirement.
+
+## Release procedure
+
+1. Review and merge the versioned PR, including generated changelogs and dependent-package bumps.
+2. Pull the merged `main` and run `pnpm install --frozen-lockfile`.
+3. With maintainer npm authentication available, run `pnpm release` from the repository root. This runs the registry preflight, builds the publishable packages and invokes Changesets publication. Version application is already complete.
+4. Verify the published exports and a clean consumer installation.
+5. Deploy the site and verify the new guide, blog, diagrams and four LLM endpoints at their production URLs.