@lambdacurry/arbor 0.11.0 → 0.11.5

package/dist/arbor.js

@@ -1465,6 +1465,121 @@ var threads = sqliteTable("threads", {
   topicIdx: index("threads_topic_idx").on(t.topicId),
   spaceIdx: index("threads_space_idx").on(t.spaceId)
 }));
+var computerConfigs = sqliteTable("computer_configs", {
+  id: text("id").primaryKey(),
+  scope: text("scope").$type().notNull(),
+  scopeId: text("scope_id").notNull(),
+  orgId: text("org_id").notNull().references(() => orgs.id),
+  spaceId: text("space_id").references(() => spaces.id),
+  topicId: text("topic_id").references(() => topics.id),
+  threadId: text("thread_id").references(() => threads.id),
+  config: text("config", { mode: "json" }).$type().notNull().default({}),
+  version: integer("version").notNull().default(1),
+  createdByProfileId: text("created_by_profile_id").notNull().references(() => profiles.id),
+  updatedByProfileId: text("updated_by_profile_id").notNull().references(() => profiles.id),
+  createdExecutionContextId: text("created_execution_context_id").notNull().references(() => executionContexts.id),
+  updatedExecutionContextId: text("updated_execution_context_id").notNull().references(() => executionContexts.id),
+  createdAt: ts("created_at").notNull(),
+  updatedAt: ts("updated_at").notNull()
+}, (t) => ({
+  scopeIdx: uniqueIndex("computer_configs_scope_idx").on(t.scope, t.scopeId),
+  orgIdx: index("computer_configs_org_idx").on(t.orgId),
+  spaceIdx: index("computer_configs_space_idx").on(t.spaceId),
+  topicIdx: index("computer_configs_topic_idx").on(t.topicId),
+  threadIdx: index("computer_configs_thread_idx").on(t.threadId)
+}));
+var threadComputers = sqliteTable("thread_computers", {
+  id: text("id").primaryKey(),
+  threadId: text("thread_id").notNull().references(() => threads.id),
+  provider: text("provider").$type().notNull(),
+  currentSnapshotId: text("current_snapshot_id"),
+  createdByProfileId: text("created_by_profile_id").notNull().references(() => profiles.id),
+  createdExecutionContextId: text("created_execution_context_id").notNull().references(() => executionContexts.id),
+  createdAt: ts("created_at").notNull()
+}, (t) => ({ threadIdx: uniqueIndex("thread_computers_thread_idx").on(t.threadId) }));
+var computerSessions = sqliteTable("computer_sessions", {
+  id: text("id").primaryKey(),
+  computerId: text("computer_id").notNull().references(() => threadComputers.id),
+  threadId: text("thread_id").notNull().references(() => threads.id),
+  profileId: text("profile_id").notNull().references(() => profiles.id),
+  executionContextId: text("execution_context_id").notNull().references(() => executionContexts.id),
+  configKey: text("config_key").notNull(),
+  startingSnapshotId: text("starting_snapshot_id"),
+  attachedAt: ts("attached_at").notNull()
+}, (t) => ({
+  computerIdx: index("computer_sessions_computer_idx").on(t.computerId, t.attachedAt),
+  threadIdx: index("computer_sessions_thread_idx").on(t.threadId, t.attachedAt)
+}));
+var computerSnapshots = sqliteTable("computer_snapshots", {
+  id: text("id").primaryKey(),
+  ownerScope: text("owner_scope").$type().notNull(),
+  topicId: text("topic_id").notNull().references(() => topics.id),
+  computerId: text("computer_id").references(() => threadComputers.id),
+  parentSnapshotId: text("parent_snapshot_id"),
+  lineageKey: text("lineage_key"),
+  configKey: text("config_key"),
+  provider: text("provider").$type().notNull(),
+  providerRef: text("provider_ref").notNull(),
+  producingSessionId: text("producing_session_id").references(() => computerSessions.id),
+  authorProfileId: text("author_profile_id").notNull().references(() => profiles.id),
+  executionContextId: text("execution_context_id").notNull().references(() => executionContexts.id),
+  contentDigest: text("content_digest"),
+  createdAt: ts("created_at").notNull()
+}, (t) => ({
+  providerRefIdx: uniqueIndex("computer_snapshots_provider_ref_idx").on(t.provider, t.providerRef),
+  topicBaseIdx: uniqueIndex("computer_snapshots_topic_base_idx").on(t.topicId, t.configKey),
+  lineageIdx: uniqueIndex("computer_snapshots_lineage_idx").on(t.lineageKey),
+  computerIdx: index("computer_snapshots_computer_idx").on(t.computerId, t.createdAt),
+  parentIdx: index("computer_snapshots_parent_idx").on(t.parentSnapshotId)
+}));
+var previews = sqliteTable("previews", {
+  id: text("id").primaryKey(),
+  threadId: text("thread_id").notNull().references(() => threads.id),
+  spaceId: text("space_id").notNull().references(() => spaces.id),
+  title: text("title").notNull(),
+  routing: text("routing").$type().notNull().default("static"),
+  currentVersionId: text("current_version_id"),
+  createdByProfileId: text("created_by_profile_id").notNull().references(() => profiles.id),
+  createdExecutionContextId: text("created_execution_context_id").notNull().references(() => executionContexts.id),
+  createdAt: ts("created_at").notNull()
+}, (t) => ({
+  threadIdx: index("previews_thread_idx").on(t.threadId, t.createdAt),
+  spaceIdx: index("previews_space_idx").on(t.spaceId)
+}));
+var previewVersions = sqliteTable("preview_versions", {
+  id: text("id").primaryKey(),
+  previewId: text("preview_id").notNull().references(() => previews.id),
+  version: integer("version").notNull(),
+  hostLabel: text("host_label").notNull(),
+  status: text("status").$type().notNull().default("pending"),
+  objectPrefix: text("object_prefix").notNull(),
+  manifest: text("manifest", { mode: "json" }).$type().notNull(),
+  manifestDigest: text("manifest_digest").notNull(),
+  fileCount: integer("file_count").notNull(),
+  byteCount: integer("byte_count").notNull(),
+  computerSessionId: text("computer_session_id").notNull().references(() => computerSessions.id),
+  snapshotId: text("snapshot_id").notNull().references(() => computerSnapshots.id),
+  publishedByProfileId: text("published_by_profile_id").notNull().references(() => profiles.id),
+  publishedExecutionContextId: text("published_execution_context_id").notNull().references(() => executionContexts.id),
+  failureCode: text("failure_code"),
+  createdAt: ts("created_at").notNull(),
+  readyAt: ts("ready_at")
+}, (t) => ({
+  previewVersionIdx: uniqueIndex("preview_versions_preview_version_idx").on(t.previewId, t.version),
+  hostIdx: uniqueIndex("preview_versions_host_idx").on(t.hostLabel),
+  sessionIdx: index("preview_versions_session_idx").on(t.computerSessionId, t.createdAt),
+  snapshotIdx: index("preview_versions_snapshot_idx").on(t.snapshotId)
+}));
+var previewVersionFinalizations = sqliteTable("preview_version_finalizations", {
+  versionId: text("version_id").primaryKey().references(() => previewVersions.id),
+  finalizedAt: ts("finalized_at").notNull()
+});
+var previewViewerGrantUses = sqliteTable("preview_viewer_grant_uses", {
+  jti: text("jti").primaryKey(),
+  versionId: text("version_id").notNull().references(() => previewVersions.id),
+  profileId: text("profile_id").notNull().references(() => profiles.id),
+  consumedAt: ts("consumed_at").notNull()
+});
 var threadInitiatives = sqliteTable("thread_initiatives", {
   threadId: text("thread_id").notNull().references(() => threads.id),
   initiativeId: text("initiative_id").notNull().references(() => initiatives.id)
@@ -1477,6 +1592,7 @@ var contributions = sqliteTable("contributions", {
   threadId: text("thread_id").notNull().references(() => threads.id),
   authorProfileId: text("author_profile_id").notNull().references(() => profiles.id),
   executionContextId: text("execution_context_id").notNull().references(() => executionContexts.id),
+  computerSessionId: text("computer_session_id").references(() => computerSessions.id),
   type: text("type").$type().notNull(),
   body: text("body").notNull(),
   summary: text("summary"),
@@ -1551,6 +1667,7 @@ var artifacts = sqliteTable("artifacts", {
   summary: text("summary"),
   ownerProfileId: text("owner_profile_id").notNull().references(() => profiles.id),
   sourceThreadId: text("source_thread_id").notNull().references(() => threads.id),
+  computerSessionId: text("computer_session_id").references(() => computerSessions.id),
   sourceContributionIds: text("source_contribution_ids", { mode: "json" }).$type(),
   topicIds: text("topic_ids", { mode: "json" }).$type().notNull().default([]),
   initiativeIds: text("initiative_ids", { mode: "json" }).$type().notNull().default([]),
@@ -1673,6 +1790,8 @@ var EMOJI_RE = new RegExp("^\\p{RGI_Emoji}$", "v");
 var BASE_MS = Date.parse("2026-07-20T15:00:00.000Z");
 // ../core/src/ops/agent-pairing.ts
 var PAIRING_TTL_MS = 15 * 60 * 1000;
+// ../core/src/ops/preview.ts
+var PREVIEW_MAX_BYTES = 2 * 1024 * 1024;
 // ../core/src/queries/lane-match.ts
 var STOP_WORDS = new Set("a an and are as at be by for from has have here how i in is it me of on or our the their they this to was what when where which who will with you your".split(" "));
 // ../core/src/queries/activity.ts
@@ -16113,7 +16232,7 @@ var ACTIONS = [
   {
     name: "contribute",
     title: "Contribute to a thread",
-    description: "Add your own typed contribution (proposal/critique/question/evidence/…) — ONE point per contribution, on the record. BEFORE ADDING, ask what the most additive move is — not just whether to say something (AD-205): if your reaction to a point already on the record fits in one line — agree OR disagree — STAMP it (vouch, or push back with your one-line why), don't restate it as a contribution; contribute what's genuinely NEW (a typed move — a developed critique counts — that advances THIS thread's objective); if you'd only be echoing, reviewing IS the contribution and staying out is fine. RECALL FIRST (recalling beats re-deriving), and put references IN THE BODY: URLs and inline [label](#con_…) refs become typed reference edges + smart pills automatically. Body refs are CITATIONS (AD-196) — they never change where your contribution sits in the thread, so cite freely. An artifact ref ([label](#art_…)) on its OWN LINE unfurls into a preview CARD (a peek of the doc/table); inline in a sentence it stays a compact pill (AD-204) — so put an artifact on its own line when you want the reader to SEE it. To thread your contribution UNDER a specific one (a reply), pass links: [{rel: 'inReplyTo', targetId}] — that deliberate edge is what nests it. To respond to a request, use `respond` or `mark_as_response`; `contribute` cannot create a `fulfills` link. AUTOMATED/RETRYABLE callers should pass a stable idempotencyKey for the one logical contribution; replay returns the original card without another event or fan-out.",
+    description: "Add your own typed contribution (proposal/critique/question/evidence/…) — ONE point per contribution, on the record. BEFORE ADDING, ask what the most additive move is — not just whether to say something (AD-205): if your reaction to a point already on the record fits in one line — agree OR disagree — STAMP it (vouch, or push back with your one-line why), don't restate it as a contribution; contribute what's genuinely NEW (a typed move — a developed critique counts — that advances THIS thread's objective); if you'd only be echoing, reviewing IS the contribution and staying out is fine. RECALL FIRST (recalling beats re-deriving), and put references IN THE BODY: URLs and inline [label](#con_…) refs become typed reference edges + smart pills automatically. Body refs are CITATIONS (AD-196) — they never change where your contribution sits in the thread, so cite freely. An artifact ref ([label](#art_…)) on its OWN LINE unfurls into a preview CARD (a peek of the doc/table); inline in a sentence it stays a compact pill (AD-204) — so put an artifact on its own line when you want the reader to SEE it. To thread your contribution UNDER a specific one (a reply), pass links: [{rel: 'inReplyTo', targetId}] — that deliberate edge is what nests it. When the result came from a Thread computer, pass the computerSessionId returned by computer_open or computer_verify; Arbor accepts only your session on this Thread, making the claim re-provable. Pass attachmentIds returned by computer_verify to place its visual evidence inline. To respond to a request, use `respond` or `mark_as_response`; `contribute` cannot create a `fulfills` link. AUTOMATED/RETRYABLE callers should pass a stable idempotencyKey for the one logical contribution; replay returns the original card without another event or fan-out.",
     inputSchema: {
       threadId: exports_external.string().describe("the thread id, e.g. thr_…"),
       type: exports_external.enum(CONTRIBUTION_TYPES).describe("the contribution type (AD-066 taxonomy)"),
@@ -16121,6 +16240,8 @@ var ACTIONS = [
       idempotencyKey: exports_external.string().min(1).max(200).optional().describe("stable key for this ONE logical contribution (≤200 chars), e.g. cron-run/work-item + output slot; safe retries return the original contribution. Reusing it with different content is a conflict."),
       summary: exports_external.string().max(500).optional().describe("optional gist, 1-2 short sentences — HARD LIMIT 500 characters (the request is rejected past it, so keep well under). Becomes the recall snippet AND sharpens recall for long contributions (it's prepended to the embedded text); write one when the body is long"),
       confidence: exports_external.number().int().min(0).max(100).optional().describe("optional 0–100 confidence"),
+      computerSessionId: exports_external.string().optional().describe("the attached computer session that produced this result, cms_…"),
+      attachmentIds: exports_external.array(exports_external.string()).max(10).optional().describe("Thread-scoped file evidence to show inline, including attachmentIds returned by computer_verify"),
       mentions: exports_external.array(exports_external.object({
         kind: exports_external.enum(["person", "contribution", "artifact"]),
         id: exports_external.string(),
@@ -16265,6 +16386,240 @@ var ACTIONS = [
     toolset: "loop",
     run: forward("thread.create")
   },
+  {
+    name: "set_organization_computer",
+    title: "Set organization computer defaults",
+    description: "Replace your organization's sparse computer-default layer without allocating runtime state. Omitted/null values fall back to provider defaults; Space, Topic, and Thread layers may override individual fields.",
+    inputSchema: {
+      backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("default execution tier, or null to use worker-shell"),
+      containerProfile: exports_external.string().nullable().optional().describe("optional logical Currybox container profile, or null to clear"),
+      setupScript: exports_external.string().nullable().optional().describe("optional setup run when materializing a reusable base, or null to clear"),
+      repositories: exports_external.array(exports_external.string()).nullable().optional().describe("default repositories, repeated --repositories; [] clears and null inherits provider default")
+    },
+    surfaces: ["mcp", "cli"],
+    toolset: "structure",
+    run: forward("computer_config.set_organization")
+  },
+  {
+    name: "set_space_computer",
+    title: "Set a Space computer",
+    description: "Replace a Space's sparse computer override without allocating anything. Omitted/null fields inherit organization defaults; the default backend is image-free worker-shell, and a reusable base materializes lazily only when needed.",
+    inputSchema: {
+      spaceId: exports_external.string().describe("the Space, spc_…"),
+      backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
+      containerProfile: exports_external.string().nullable().optional().describe("optional logical Currybox container profile, or null to clear inherited profile"),
+      setupScript: exports_external.string().nullable().optional().describe("optional setup run when materializing a reusable base, or null to clear"),
+      repositories: exports_external.array(exports_external.string()).nullable().optional().describe("repository allowlist/default clones; [] clears and null inherits")
+    },
+    surfaces: ["mcp", "cli"],
+    toolset: "structure",
+    run: forward("computer_config.set_space")
+  },
+  {
+    name: "set_topic_computer",
+    title: "Override a Topic computer",
+    description: "Replace a Topic's sparse computer override; omitted/null fields inherit Space/organization policy, and no runtime is allocated. A material change gets a semantic config key so the next attachment materializes matching state lazily.",
+    inputSchema: {
+      topicId: exports_external.string().describe("the Topic, top_…"),
+      backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
+      containerProfile: exports_external.string().nullable().optional().describe("optional logical Currybox container profile, or null to clear inherited profile"),
+      setupScript: exports_external.string().nullable().optional().describe("optional setup run, or null to clear"),
+      repositories: exports_external.array(exports_external.string()).nullable().optional().describe("repository allowlist/default clones; [] clears and null inherits")
+    },
+    surfaces: ["mcp", "cli"],
+    toolset: "structure",
+    run: forward("computer_config.set_topic")
+  },
+  {
+    name: "set_thread_computer",
+    title: "Override a Thread computer",
+    description: "Replace one Thread's sparse computer override. This is config only: the stable computer is still created lazily on first authorized collaborator attachment, and an existing computer cannot switch provider.",
+    inputSchema: {
+      threadId: exports_external.string().describe("the Thread, thr_…"),
+      backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
+      containerProfile: exports_external.string().nullable().optional().describe("optional logical Currybox container profile, or null to clear inherited profile"),
+      setupScript: exports_external.string().nullable().optional().describe("optional setup run, or null to clear"),
+      repositories: exports_external.array(exports_external.string()).nullable().optional().describe("repository allowlist/default clones; [] clears and null inherits")
+    },
+    surfaces: ["mcp", "cli"],
+    toolset: "structure",
+    run: forward("computer_config.set_thread")
+  },
+  {
+    name: "attach_computer",
+    title: "Attach a Thread computer",
+    description: "Lazily attach the one stable computer identity to a Thread and mint an immutable, server-attributed session receipt. This protocol action allocates no runtime and returns no bearer secret; use the separate Arbor Computer MCP or `arbor computer open` for execution.",
+    inputSchema: {
+      threadId: exports_external.string().describe("the Thread whose computer you are attaching, thr_…")
+    },
+    surfaces: ["mcp", "cli"],
+    toolset: "loop",
+    run: forward("computer.attach")
+  },
+  {
+    name: "computer_open",
+    title: "Open a Thread computer",
+    description: "Open or resume this Thread's project environment for filesystem or command work. Returns computerSessionId; pass it unchanged to later Computer tools and to Contributions or responses produced from the work.",
+    inputSchema: {
+      threadId: exports_external.string().describe("the Arbor Thread whose stable computer to open, thr_…"),
+      vcpus: exports_external.number().int().min(1).max(4).optional().describe("optional container vCPU request"),
+      label: exports_external.string().optional().describe("short runtime label for operator diagnostics")
+    },
+    surfaces: ["computer-mcp", "computer-cli"],
+    toolset: "loop",
+    run: forward("computer_runtime.open")
+  },
+  {
+    name: "computer_exec",
+    title: "Run a command",
+    description: "Run a bounded command in an opened Thread computer, normally from /workspace. Use background only for the container backend; worker-shell deliberately serializes mutations and rejects long-lived processes.",
+    inputSchema: {
+      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
+      command: exports_external.string().min(1).describe("the shell command to run"),
+      cwd: exports_external.string().optional().describe("working directory under /workspace"),
+      timeout: exports_external.number().int().min(1000).max(1800000).optional().describe("timeout in milliseconds, from 1,000 through 1,800,000"),
+      background: exports_external.boolean().optional().describe("start a container process and return its pid")
+    },
+    surfaces: ["computer-mcp", "computer-cli"],
+    toolset: "loop",
+    run: forward("computer_runtime.exec")
+  },
+  {
+    name: "computer_status",
+    title: "Inspect a computer",
+    description: "Read live Currybox process and runtime status for an opened computer. This is ephemeral provider state; use get_computer on the Arbor surface for durable config and snapshot lineage.",
+    inputSchema: {
+      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…")
+    },
+    surfaces: ["computer-mcp", "computer-cli"],
+    toolset: "loop",
+    run: forward("computer_runtime.status")
+  },
+  {
+    name: "computer_verify",
+    title: "Capture public visual evidence",
+    description: "Capture the 1280×720 rendering of one public HTTPS URL without starting the Thread's project runtime. Returns computerSessionId, attachmentIds, capture metadata, and a gated downloadUrl; Computer MCP also emits the PNG as an inspectable image block. Pass the receipt and attachment ids to contribute or respond. It cannot reach localhost or authenticated pages and does not judge correctness.",
+    inputSchema: {
+      threadId: exports_external.string().describe("the Arbor Thread that will own the evidence, thr_…"),
+      targetUrl: exports_external.url().refine((value) => value.startsWith("https://"), "targetUrl must use HTTPS").describe("one public HTTPS URL to capture")
+    },
+    surfaces: ["computer-mcp", "computer-cli"],
+    toolset: "loop",
+    run: forward("computer_runtime.verify")
+  },
+  {
+    name: "computer_read",
+    title: "Read a project file",
+    description: "Read one file from the opened computer when command output is the wrong shape. Paths must stay under /workspace.",
+    inputSchema: {
+      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
+      path: exports_external.string().describe("absolute path under /workspace")
+    },
+    surfaces: ["computer-mcp", "computer-cli"],
+    toolset: "loop",
+    run: forward("computer_runtime.read")
+  },
+  {
+    name: "computer_write",
+    title: "Write a project file",
+    description: "Write one file under /workspace. Prefer normal editing tools for code changes; reach for this when the MCP/CLI computer surface is the only filesystem path.",
+    inputSchema: {
+      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
+      path: exports_external.string().describe("absolute path under /workspace"),
+      content: exports_external.string().describe("complete UTF-8 file content")
+    },
+    surfaces: ["computer-mcp", "computer-cli"],
+    toolset: "loop",
+    run: forward("computer_runtime.write")
+  },
+  {
+    name: "computer_clone",
+    title: "Clone an allowed repository",
+    description: "Clone a repository named by the resolved computer recipe, supplying the working collaborator's GitHub token just in time. The token is spent only on this call and is neither returned nor persisted in the workspace.",
+    inputSchema: {
+      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
+      repository: exports_external.string().describe("allowed owner/repository slug"),
+      githubToken: exports_external.string().min(1).describe("short-lived GitHub token supplied by the caller"),
+      githubUsername: exports_external.string().optional().describe("GitHub username; defaults to x-access-token")
+    },
+    surfaces: ["computer-mcp", "computer-cli"],
+    toolset: "loop",
+    run: forward("computer_runtime.clone")
+  },
+  {
+    name: "computer_checkpoint",
+    title: "Checkpoint completed work",
+    description: "Save an intermediate complete unit of project work into durable Thread lineage. For the final unit, call computer_stop instead; it performs the final checkpoint before teardown. No checkpoint is needed for computer_verify alone because remote visual capture starts no project runtime.",
+    inputSchema: {
+      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…")
+    },
+    surfaces: ["computer-mcp", "computer-cli"],
+    toolset: "loop",
+    run: forward("computer_runtime.checkpoint")
+  },
+  {
+    name: "computer_publish_preview",
+    title: "Publish an immutable static Preview",
+    description: "Publish one checked HTML prototype as a private immutable Preview after checkpointing its source. The returned arborthreads.dev URL survives computer teardown; this first slice rejects directories, server code, and non-HTML files.",
+    inputSchema: {
+      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
+      path: exports_external.string().describe("absolute path to one HTML file under /workspace"),
+      title: exports_external.string().min(1).max(160).describe("short factual Preview title")
+    },
+    surfaces: ["computer-mcp", "computer-cli"],
+    toolset: "loop",
+    run: forward("computer_runtime.publish_preview")
+  },
+  {
+    name: "computer_stop",
+    title: "Checkpoint and stop",
+    description: "Finish an opened computer after a unit of work. Currybox checkpoints and Arbor publishes before teardown; any durability failure refuses the stop instead of silently discarding state.",
+    inputSchema: {
+      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…")
+    },
+    surfaces: ["computer-mcp", "computer-cli"],
+    toolset: "loop",
+    run: forward("computer_runtime.stop")
+  },
+  {
+    name: "get_computer",
+    title: "Read a Thread computer",
+    description: "Read a Thread's effective recipe, stable computer identity, current Topic/Thread snapshot refs, recent attachment receipts, and bounded lineage. This is durable Arbor protocol state, not live process/presence status; use Currybox for ephemeral runtime observations.",
+    inputSchema: {
+      threadId: exports_external.string().describe("the Thread, thr_…"),
+      lineageLimit: exports_external.number().int().min(1).max(100).optional().describe("recent receipts/lineage rows (default 20)")
+    },
+    surfaces: ["mcp", "cli"],
+    toolset: "loop",
+    run: forward("computer.get")
+  },
+  {
+    name: "publish_topic_computer",
+    title: "Publish a Topic computer base",
+    description: "After the first attached collaborator finishes the Topic setup recipe and Currybox checkpoints `/workspace`, publish that opaque restore handle as the reusable Topic base. Arbor verifies it server-to-server and publication is first-writer-wins; a losing concurrent backup is an orphan for Currybox GC.",
+    inputSchema: {
+      sessionId: exports_external.string().describe("the Arbor computer session that materialized the base, cms_…"),
+      providerRef: exports_external.string().describe("the opaque restore handle returned by `currybox checkpoint`")
+    },
+    surfaces: ["mcp", "cli"],
+    toolset: "loop",
+    run: forward("computer.publish_topic_base")
+  },
+  {
+    name: "checkpoint_computer",
+    title: "Checkpoint a Thread computer",
+    description: "After a complete unit of work, checkpoint `/workspace` through Currybox, then publish its opaque handle here to append immutable Thread lineage and advance the current pointer atomically. Pass the current snapshot id you read (or null before the first Thread checkpoint); stale writers get a structured conflict instead of overwriting work.",
+    inputSchema: {
+      computerId: exports_external.string().describe("the stable Thread computer, cmp_…"),
+      sessionId: exports_external.string().optional().describe("the producing agent session, cms_…; Currybox service sweeps omit it"),
+      providerRef: exports_external.string().describe("the opaque restore handle returned by `currybox checkpoint`"),
+      expectedCurrentSnapshotId: exports_external.string().nullable().describe("the current Thread snapshot id you read, or null before its first checkpoint"),
+      parentSnapshotId: exports_external.string().optional().describe("first checkpoint only: the Topic base parent when the session cannot supply it")
+    },
+    surfaces: ["mcp", "cli"],
+    toolset: "loop",
+    run: forward("computer.checkpoint")
+  },
   {
     name: "set_ways_to_help",
     title: "Set a thread's ways to help",
@@ -16293,7 +16648,7 @@ var ACTIONS = [
   {
     name: "create_artifact",
     title: "Create an artifact",
-    description: "Promote durable output — a decision, summary, plan, or research brief — into a first-class artifact you own. Text kinds (doc/table/diagram/html) are living documents: pass `source` (born at v1, editable in place via edit_artifact); kind=file passes a contentRef instead. The artifact is AUTOMATICALLY listed on its source thread (no link post needed). Reach for this when a thread has produced something worth retaining and citing beyond the conversation — especially a table or doc the team will UPDATE, which beats pasting it into a prose contribution.",
+    description: "Promote durable output — a decision, summary, plan, or research brief — into a first-class artifact you own. Text kinds (doc/table/diagram/html) are living documents: pass `source` (born at v1, editable in place via edit_artifact); kind=file passes a contentRef instead. The artifact is AUTOMATICALLY listed on its source thread (no link post needed). When it came from an attached Thread computer, pass that attach_computer receipt as computerSessionId so the artifact cites the reproducible session. Reach for this when a thread has produced something worth retaining and citing beyond the conversation — especially a table or doc the team will UPDATE, which beats pasting it into a prose contribution.",
     inputSchema: {
       type: exports_external.string().describe("semantic type, e.g. decision|summary|plan|markdown|table|research-brief"),
       kind: exports_external.enum(["doc", "table", "diagram", "html", "file"]).optional().describe("structural kind (default file). doc/table/diagram/html are editable, versioned text"),
@@ -16303,7 +16658,8 @@ var ACTIONS = [
       editPolicy: exports_external.enum(["owner", "members", "anyone"]).optional().describe("who may edit (default members)"),
       summary: exports_external.string().optional(),
       sourceThreadId: exports_external.string().optional(),
-      sourceContributionIds: exports_external.array(exports_external.string()).optional()
+      sourceContributionIds: exports_external.array(exports_external.string()).optional(),
+      computerSessionId: exports_external.string().optional().describe("the attached computer session that produced this artifact, cms_…")
     },
     surfaces: ["cli"],
     toolset: "artifacts",
@@ -16444,12 +16800,14 @@ var ACTIONS = [
   {
     name: "respond",
     title: "Respond to a request",
-    description: "Fulfill a request addressed to you by posting the contribution that responds to it (AD-048 respond-not-claim). Reach for this after `inbox` surfaces an obligation — each open request carries a `respondWith` line telling you the exact call. NOTE: a review request is met by `stamp` (AD-130), not `respond`. If you ALREADY posted a response as a plain contribution, use `mark_as_response` to bind it. Returns the request's recomputed status (open | completed | expired).",
+    description: "Fulfill a request addressed to you by posting the contribution that responds to it (AD-048 respond-not-claim). Include `computerSessionId` and `attachmentIds` when computer work produced the evidence; files become durable artifacts automatically. Reach for this after `inbox` surfaces an obligation. NOTE: a review request is met by `stamp` (AD-130), not `respond`. If you ALREADY posted a response as a plain contribution, use `mark_as_response` to bind it. Returns the request's recomputed status (open | completed | expired).",
     inputSchema: {
       requestId: exports_external.string().describe("the request id, req_…"),
       type: exports_external.enum(CONTRIBUTION_TYPES).describe("the contribution type"),
       body: exports_external.string().min(1).describe("your response"),
-      confidence: exports_external.number().int().min(0).max(100).optional()
+      confidence: exports_external.number().int().min(0).max(100).optional(),
+      computerSessionId: exports_external.string().optional().describe("computer receipt to cite when the response came from computer work, cms_…"),
+      attachmentIds: exports_external.array(exports_external.string()).max(10).optional().describe("Thread-scoped evidence shown inline on the response; each attachment also becomes a durable artifact")
     },
     surfaces: ["mcp", "cli"],
     toolset: "loop",
@@ -16837,6 +17195,18 @@ var ACTIONS = [
     toolset: "admin",
     run: forward("agent.register")
   },
+  {
+    name: "service_register",
+    title: "Register a checkpoint service",
+    description: "Register a persistent service identity for Currybox checkpoint sweeps and mint its API key (shown ONCE). Human owner/admin CLI setup only. The credential is restricted to computer.get + computer.checkpoint and to the Spaces listed here; store it as the Currybox control plane's Arbor credential.",
+    inputSchema: {
+      displayName: exports_external.string().min(1).describe("the service display name, e.g. Currybox checkpoint sweep"),
+      spaceIds: exports_external.array(exports_external.string().min(1)).min(1).describe("Spaces whose Thread computers the service may checkpoint")
+    },
+    surfaces: ["cli"],
+    toolset: "admin",
+    run: forward("service.register")
+  },
   {
     name: "human_invite",
     title: "Invite a human",
@@ -17084,7 +17454,7 @@ var ACTIONS = [
   {
     name: "artifact",
     title: "Durable artifacts",
-    description: "Durable, versioned artifacts — the team's living documents (AD-201). Kinds: doc (markdown), table (CSV), diagram (Mermaid), html — all versioned text you edit in place — plus file (a contentRef: URL/inline/blob). " + "verb=create (kind+type+title, source for text kinds / contentRef for file; a text artifact is born at v1 and is AUTOMATICALLY listed on its sourceThreadId thread — no link post needed). " + "verb=get (artifactId — the current source + version + history; pass version to read an old snapshot). " + "verb=edit — READ FIRST via get, then pass baseVersion (the version you read): either source (full replace) or patches [{old,new},…] (exact-match hunks, applied in order, ATOMIC — all land or none, and one call mints ONE version, so batch related row-edits into one call). A stale baseVersion returns {ok:false, currentSource} — reconcile and retry against the returned source; a failed patch names the culprit index. " + "verb=transition (artifactId + to: active|promoted|needs-review|superseded|deprecated|archived|deleted), promote_attachment (attachmentId — lift an uploaded file into an artifact).",
+    description: "Durable, versioned artifacts — the team's living documents (AD-201). Kinds: doc (markdown), table (CSV), diagram (Mermaid), html — all versioned text you edit in place — plus file (a contentRef: URL/inline/blob). " + "verb=create (kind+type+title, source for text kinds / contentRef for file; a text artifact is born at v1 and is AUTOMATICALLY listed on its sourceThreadId thread — no link post needed). " + "For computer-produced output, create with the computerSessionId returned by attach_computer so the artifact cites the reproducible session. " + "verb=get (artifactId — the current source + version + history; pass version to read an old snapshot). " + "verb=edit — READ FIRST via get, then pass baseVersion (the version you read): either source (full replace) or patches [{old,new},…] (exact-match hunks, applied in order, ATOMIC — all land or none, and one call mints ONE version, so batch related row-edits into one call). A stale baseVersion returns {ok:false, currentSource} — reconcile and retry against the returned source; a failed patch names the culprit index. " + "verb=transition (artifactId + to: active|promoted|needs-review|superseded|deprecated|archived|deleted), promote_attachment (attachmentId — lift an uploaded file into an artifact).",
     inputSchema: {
       verb: exports_external.enum(["create", "get", "edit", "transition", "promote_attachment"]).describe("which artifact move"),
       title: exports_external.string().optional().describe("create: the artifact's title"),
@@ -17095,6 +17465,7 @@ var ACTIONS = [
       editPolicy: exports_external.enum(["owner", "members", "anyone"]).optional().describe("create: who may edit (default members)"),
       summary: exports_external.string().optional().describe("create: a short summary"),
       sourceThreadId: exports_external.string().optional().describe("create: the thread it came from"),
+      computerSessionId: exports_external.string().optional().describe("create: the attached computer session that produced it, cms_…"),
       sourceContributionIds: exports_external.array(exports_external.string()).optional().describe("create: contributions it distills"),
       artifactId: exports_external.string().optional().describe("get/edit/transition: the artifact, art_…"),
       version: exports_external.number().optional().describe("get: read this old snapshot instead of the current"),
@@ -17563,7 +17934,7 @@ function buildInput(inputSchema, flags, command) {
 function commandWords(action) {
   return action.name.replace(/_/g, " ");
 }
-var CLI_ACTIONS = ACTIONS.filter((a) => a.surfaces.includes("cli"));
+var CLI_ACTIONS = ACTIONS.filter((a) => a.surfaces.includes("cli") || a.surfaces.includes("computer-cli"));
 var BY_COMMAND = new Map(CLI_ACTIONS.map((a) => [commandWords(a), a]));
 var MAX_WORDS = Math.max(1, ...CLI_ACTIONS.map((a) => commandWords(a).split(" ").length));
 var KNOWN_MISREACHES = [
@@ -17604,6 +17975,13 @@ function suggestCommand(positionals) {
   }
   return "run `arbor help` for the command list";
 }
+function listFileHint(action, unknownFlag) {
+  const target = flagsForSchema(action.inputSchema).find((f) => f.kind === "array" && unknownFlag === `${f.flag}-file`);
+  if (!target)
+    return "";
+  const commaForm = target.literal ? "" : `, or one comma-separated value (--${target.flag} a,b,c)`;
+  return `--${target.flag} is a list: repeat it per item (--${target.flag} "…" --${target.flag} "…")${commaForm}, or pass a whole JSON array`;
+}
 function matchCommand(positionals) {
   for (let n = Math.min(MAX_WORDS, positionals.length);n >= 1; n--) {
     const key = positionals.slice(0, n).join(" ");
@@ -17703,7 +18081,8 @@ async function runObjectVerb(positionals, flags, ctx) {
   const accepted = acceptedFlags(action.inputSchema);
   const unknown2 = Object.keys(flags).filter((f) => !accepted.has(f) && !RESERVED_FLAGS.has(f));
   if (unknown2.length > 0) {
-    throw new UsageError(`unknown flag${unknown2.length > 1 ? "s" : ""}: ${unknown2.map((f) => `--${f}`).join(", ")}`);
+    const hints = unknown2.map((f) => listFileHint(action, f)).filter(Boolean);
+    throw new UsageError(`unknown flag${unknown2.length > 1 ? "s" : ""}: ${unknown2.map((f) => `--${f}`).join(", ")}${hints.length > 0 ? ` — ${hints.join("; ")}` : ""}`);
   }
   const input = buildInput(action.inputSchema, flags, commandWords(action));
   if (action.name === "agent_register") {
@@ -17882,7 +18261,7 @@ async function renderMe(ctx, action) {
 ` : "") + spaceLines;
   emitDual(me, human, action, ctx);
 }
-var CLI_NOTE = `On this CLI, before your first write: commands are NOUN-VERB (\`thread get\`, \`space get\`, not \`get thread\`). The underscore tool-names you see in MCP, recall, and docs (\`set_space_charter\`, \`transition_thread\`) work as CLI commands VERBATIM too — \`set_space_charter …\` and \`set space charter …\` are the same command, either form. A single-argument command also takes a bare positional — \`recall "your question"\`, \`thread get thr_…\` — so you don't have to name the obvious flag. Flag names are kebab-derived from the inputs (\`--thread-id\`, \`--request-id\`, \`--contribution-id\` — not \`--thread\`/\`--request\`), so check \`arbor help\` or \`arbor <command> --help\` (now focused on that command's flags) instead of guessing. Pass long/markdown bodies via \`--body-file -\` (stdin), never shell-quoted; a one-line \`--summary\` (1-2 short sentences, hard limit 500 chars) on a long contribution becomes its recall snippet. List inputs always accept a REPEATED flag, one item each (\`--guidance "…" --guidance "…"\`) — the form that works everywhere. A single value additionally comma-splits for TOKEN lists (\`--capabilities a,b,c\`), but stays one literal item for PROSE lists (\`--guidance\`, \`--ways-to-help\`, \`--contribution-lanes\`) so a comma inside a sentence can't shred it; \`arbor <command> --help\` names which form each list flag takes. \`tree\` is a glanceable map (default depth \`topics\`); drill down with \`space get\`/\`topic get\`/\`thread get\` rather than expanding the whole tree. If \`inbox\` is empty, that's "nothing needs you" — but if you're unsure your auth resolved, \`whoami\` confirms it.`;
+var CLI_NOTE = `On this CLI, before your first write: commands are NOUN-VERB (\`thread get\`, \`space get\`, not \`get thread\`). The underscore tool-names you see in MCP, recall, and docs (\`set_space_charter\`, \`transition_thread\`) work as CLI commands VERBATIM too — \`set_space_charter …\` and \`set space charter …\` are the same command, either form. Computer work is one parallel family: start project work with \`arbor computer open --thread-id thr_…\`, keep its cms_… receipt, then pass it as \`--computer-session-id\` to later tools. Checkpoint intermediate complete units; \`computer stop\` performs the final checkpoint before teardown. Internal Currybox grants are exchanged per call and never printed. A public screenshot is lighter: \`arbor computer verify --thread-id thr_… --target-url https://…\` runs directly, with no open/checkpoint/stop ceremony, and returns a gated download URL. A single-argument command also takes a bare positional — \`recall "your question"\`, \`thread get thr_…\` — so you don't have to name the obvious flag. Flag names are kebab-derived from the inputs (\`--thread-id\`, \`--request-id\`, \`--contribution-id\` — not \`--thread\`/\`--request\`), so check \`arbor help\` or \`arbor <command> --help\` (now focused on that command's flags) instead of guessing. Pass long/markdown bodies via \`--body-file -\` (stdin), never shell-quoted; a one-line \`--summary\` (1-2 short sentences, hard limit 500 chars) on a long contribution becomes its recall snippet. List inputs always accept a REPEATED flag, one item each (\`--guidance "…" --guidance "…"\`) — the form that works everywhere. A single value additionally comma-splits for TOKEN lists (\`--capabilities a,b,c\`), but stays one literal item for PROSE lists (\`--guidance\`, \`--ways-to-help\`, \`--contribution-lanes\`) so a comma inside a sentence can't shred it; \`arbor <command> --help\` names which form each list flag takes. \`tree\` is a glanceable map (default depth \`topics\`); drill down with \`space get\`/\`topic get\`/\`thread get\` rather than expanding the whole tree. If \`inbox\` is empty, that's "nothing needs you" — but if you're unsure your auth resolved, \`whoami\` confirms it.`;
 function renderOrient(ctx) {
   emitDual({ orientation: ORIENTATION, cliNote: CLI_NOTE }, `${ORIENTATION}
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.11.0",
+  "version": "0.11.5",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",