@lambdacurry/arbor 0.13.8 → 0.13.10

package/dist/arbor.js

@@ -1810,6 +1810,9 @@ var appBundles = sqliteTable("app_bundles", {
   modules: text("modules", { mode: "json" }).$type().notNull(),
   staticAssets: text("static_assets", { mode: "json" }).$type().notNull(),
   buildProvenance: text("build_provenance", { mode: "json" }).$type(),
+  sourceProvenance: text("source_provenance", {
+    mode: "json"
+  }).$type(),
   runtimeEntrypoint: text("runtime_entrypoint").$type().notNull(),
   capabilityRequirements: text("capability_requirements", { mode: "json" }).$type().notNull().default([]),
   stateSchemaVersion: integer("state_schema_version").notNull().default(0),
@@ -16534,6 +16537,29 @@ var checkpoint = exports_external.looseObject({
   backup: exports_external.string(),
   published: jsonObject
 });
+var computerProfile = exports_external.looseObject({
+  id: exports_external.string(),
+  version: exports_external.number(),
+  shell: exports_external.string(),
+  runtimes: exports_external.looseObject({ bun: exports_external.string() }),
+  tools: exports_external.array(exports_external.string()),
+  recommendedEditingPrimitive: exports_external.string()
+});
+var appBundleSourceProvenance = exports_external.looseObject({
+  entryPath: exports_external.string(),
+  artifactVersionSha256: exports_external.string(),
+  entryPathSha256: exports_external.string(),
+  git: exports_external.looseObject({
+    repositoryRoot: exports_external.string(),
+    head: exports_external.string().nullable(),
+    branch: exports_external.string().nullable(),
+    dirty: exports_external.boolean(),
+    trackedChanges: exports_external.number().int().min(0),
+    untrackedFiles: exports_external.number().int().min(0),
+    entryPathTracked: exports_external.boolean()
+  }).nullable(),
+  warnings: exports_external.array(exports_external.string())
+});
 var profile2 = exports_external.looseObject({
   id,
   kind: exports_external.string(),
@@ -16720,6 +16746,10 @@ var paged = (key, item) => exports_external.looseObject({
   nextCursor: exports_external.string().optional()
 });
 var MCP_OUTPUT_SCHEMAS = {
+  server_info: exports_external.looseObject({
+    serverVersion: exports_external.string(),
+    deployment: exports_external.looseObject({ id: exports_external.string(), sourceRevision: exports_external.string().nullable(), deployedAt: timestamp }).nullable()
+  }),
   recall: exports_external.object({ result: exports_external.array(recallHit) }),
   contribute: exports_external.looseObject({
     contributionId: id,
@@ -17011,6 +17041,7 @@ var MCP_OUTPUT_SCHEMAS = {
     computerId: id,
     computerSessionId: id,
     backend: exports_external.enum(["worker-shell", "container"]),
+    profile: computerProfile.nullable(),
     startingSnapshot: snapshot.nullable(),
     materialized: checkpoint.nullable(),
     runtime: jsonObject
@@ -17020,13 +17051,15 @@ var MCP_OUTPUT_SCHEMAS = {
     stderr: exports_external.string().optional(),
     exitCode: exports_external.number().optional(),
     jobId: exports_external.string().optional(),
-    status: exports_external.string().optional()
+    status: exports_external.string().optional(),
+    strict: exports_external.boolean()
   }),
   computer_status: exports_external.looseObject({
     ok: exports_external.boolean().optional(),
     status: exports_external.string().optional(),
     backend: exports_external.string().optional(),
-    processes: exports_external.array(jsonObject).optional()
+    processes: exports_external.array(jsonObject).optional(),
+    profile: computerProfile.nullable()
   }),
   computer_verify: exports_external.looseObject({
     passed: exports_external.literal(true),
@@ -17125,6 +17158,8 @@ var MCP_OUTPUT_SCHEMAS = {
     assetCount: exports_external.number().optional(),
     byteCount: exports_external.number().optional(),
     buildProvenance: jsonObject,
+    sourceProvenance: appBundleSourceProvenance.nullable(),
+    warnings: exports_external.array(exports_external.string()),
     replayed: exports_external.boolean()
   }),
   computer_stop: exports_external.looseObject({ checkpoint, stopped: jsonObject })
@@ -17183,6 +17218,7 @@ var idempotentOpenWorld = {
   openWorldHint: true
 };
 var MCP_TOOL_ANNOTATIONS = {
+  server_info: readOnly,
   recall: readOnly,
   contribute: additive,
   edit: additive,
@@ -17319,6 +17355,15 @@ var PAGINATION_INPUT = {
   cursor: exports_external.string().optional().describe("opaque cursor from a prior response's nextCursor (use with --limit)")
 };
 var ACTION_DEFINITIONS = [
+  {
+    name: "server_info",
+    title: "Inspect Arbor server version",
+    description: "READ ONLY: Return the Arbor release version and current Cloudflare deployment identity so a client can distinguish a fresh server from a cached tool catalog. This cannot modify Arbor, Computer, App, access, or durable state.",
+    inputSchema: {},
+    surfaces: ["mcp", "cli", "computer-mcp", "computer-cli"],
+    toolset: "structure",
+    run: forward("server.info")
+  },
   {
     name: "github_repositories",
     title: "List installed GitHub repositories",
@@ -17588,7 +17633,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_open",
     title: "Open a Thread computer",
-    description: "Open or resume this Thread's project environment for filesystem or command work. Returns computerSessionId; pass it unchanged to later Computer tools and to Contributions or responses produced from the work.",
+    description: "Open or resume this Thread's project environment for filesystem or command work. Returns computerSessionId and, when a declared container profile is selected, its guaranteed shell/runtimes/tools/editing primitive; pass the session id unchanged to later Computer tools and to Contributions or responses produced from the work.",
     inputSchema: {
       threadId: exports_external.string().describe("the Arbor Thread whose stable computer to open, thr_…"),
       vcpus: exports_external.number().int().min(1).max(4).optional().describe("optional container vCPU request"),
@@ -17601,13 +17646,14 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_exec",
     title: "Run a command",
-    description: "Run a bounded command in an opened Thread computer, normally from /workspace. Use background only for the container backend; worker-shell deliberately serializes mutations and rejects long-lived processes.",
+    description: "Run one bounded logical operation in an opened Thread computer, normally from /workspace. Strict Bash semantics are ON by default: an early command failure or failed pipeline makes the execution nonzero, while explicit handling such as `cmd || fallback` still works. Set strict=false only for an intentional best-effort script. Use background only for the container backend; worker-shell deliberately serializes mutations and rejects long-lived processes.",
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
       command: exports_external.string().min(1).describe("the shell command to run"),
       cwd: exports_external.string().optional().describe("working directory under /workspace"),
       timeout: exports_external.number().int().min(1000).max(1800000).optional().describe("timeout in milliseconds, from 1,000 through 1,800,000"),
-      background: exports_external.boolean().optional().describe("start a container process and return its pid")
+      background: exports_external.boolean().optional().describe("start a container process and return its pid"),
+      strict: exports_external.boolean().optional().describe("fail on the first unhandled command or pipeline failure; defaults to true, set false only for intentional best-effort execution")
     },
     surfaces: ["computer-mcp", "computer-cli"],
     toolset: "loop",
@@ -17616,7 +17662,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_status",
     title: "Inspect a computer",
-    description: "Read live Currybox process and runtime status for an opened computer. This is ephemeral provider state; use get_computer on the Arbor surface for durable config and snapshot lineage.",
+    description: "READ ONLY: Read live Currybox process/runtime status and the declared container profile contract for an opened computer. This cannot modify files, processes, checkpoints, or Thread state; use get_computer on the Arbor surface for durable config and snapshot lineage.",
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…")
     },
@@ -17775,7 +17821,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_publish_app_bundle",
     title: "Publish an immutable AppBundle",
-    description: "After a Bun container build is green, freeze one Worker entry module plus optional static assets from this Thread computer into a content-addressed AppBundle sourced from an ArtifactVersion. Use the returned bundleId with app_deploy; uploads complete and verify before Arbor publishes the bundle manifest, and retries require the same idempotencyKey.",
+    description: "After a Bun container build is green, verify that entryPath bytes exactly match the referenced ArtifactVersion, capture source hashes plus Git/workspace provenance, then freeze the Worker module and optional static assets into a content-addressed AppBundle. A mismatch is rejected; dirty or untracked source is allowed but returned as an explicit warning. Use the returned bundleId with app_deploy; retries require the same idempotencyKey.",
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
       artifactVersionId: exports_external.string().describe("the source ArtifactVersion, artv_…"),
@@ -18889,7 +18935,7 @@ var ACTION_DEFINITIONS = [
       path: exports_external.string().min(1).max(2048).describe("relative App path beginning with /; may include a query string"),
       method: exports_external.enum(["GET", "HEAD"]).optional().describe("safe read method; default GET")
     },
-    surfaces: ["mcp"],
+    surfaces: ["mcp", "cli"],
     toolset: "apps",
     run: forward("app.fetch")
   },
@@ -18901,11 +18947,11 @@ var ACTION_DEFINITIONS = [
       appId: exports_external.string().describe("target App, app_…"),
       path: exports_external.string().min(1).max(2048).describe("relative App path beginning with /; may include a query string"),
       method: exports_external.enum(["POST", "PUT", "PATCH", "DELETE"]).describe("mutating HTTP method"),
-      json: exports_external.json().optional().describe("JSON request value; mutually exclusive with body and sets application/json"),
+      json: exports_external.json().optional().describe("JSON request value; mutually exclusive with body and sets application/json. On the CLI, pass serialized JSON after the command as --json '<value>'"),
       body: exports_external.string().optional().describe("UTF-8 request body; mutually exclusive with json"),
       contentType: exports_external.string().max(160).optional().describe("body media type; allowed only with body, default text/plain; charset=utf-8")
     },
-    surfaces: ["mcp"],
+    surfaces: ["mcp", "cli"],
     toolset: "apps",
     run: forward("app.request")
   },
@@ -19501,6 +19547,17 @@ function commandWords(action) {
 var CLI_ACTIONS = ACTIONS.filter((a) => a.surfaces.includes("cli") || a.surfaces.includes("computer-cli"));
 var BY_COMMAND = new Map(CLI_ACTIONS.map((a) => [commandWords(a), a]));
 var MAX_WORDS = Math.max(1, ...CLI_ACTIONS.map((a) => commandWords(a).split(" ").length));
+var POSITIONAL_FIELDS = {
+  app_fetch: ["appId", "path"],
+  app_request: ["appId", "path"]
+};
+function positionalSpecs(action) {
+  const fields = POSITIONAL_FIELDS[action.name];
+  if (!fields)
+    return [];
+  const specs = flagsForSchema(action.inputSchema);
+  return fields.map((field) => specs.find((spec) => spec.field === field));
+}
 var KNOWN_MISREACHES = [
   { tried: "thread list", use: "tree --depth threads", why: "threads are listed by the tree" },
   { tried: "threads", use: "tree --depth threads", why: "threads are listed by the tree" },
@@ -19559,12 +19616,15 @@ function toolNameAlias(action) {
   return action.name.includes("_") ? action.name : "";
 }
 function helpLine(action) {
-  const flags = flagsForSchema(action.inputSchema).map((f) => {
+  const positionals = positionalSpecs(action);
+  const positionalFlags = new Set(positionals.map((spec) => spec.flag));
+  const args = positionals.map((spec) => ` <${spec.field}>`).join("");
+  const flags = flagsForSchema(action.inputSchema).filter((spec) => !positionalFlags.has(spec.flag)).map((f) => {
     const token = f.kind === "boolean" ? `--${f.flag}` : `--${f.flag} <>`;
     return f.required ? token : `[${token}]`;
   }).join(" ");
   const alias2 = toolNameAlias(action);
-  const head = `  ${commandWords(action)}${alias2 ? ` (${alias2})` : ""}${flags ? `  ${flags}` : ""}`;
+  const head = `  ${commandWords(action)}${alias2 ? ` (${alias2})` : ""}${args}${flags ? `  ${flags}` : ""}`;
   return `${head}
       ${action.description}`;
 }
@@ -19576,12 +19636,15 @@ function commandHelp(positionals) {
     return;
   const { action } = match;
   const specs = flagsForSchema(action.inputSchema);
-  const primary = primaryPositionalField(action.inputSchema);
-  const usageFlags = specs.map((f) => {
+  const explicitPositionals = positionalSpecs(action);
+  const primary = explicitPositionals.length === 0 ? primaryPositionalField(action.inputSchema) : undefined;
+  const positionalFlags = new Set(explicitPositionals.map((spec) => spec.flag));
+  const usageFlags = specs.filter((spec) => !positionalFlags.has(spec.flag)).map((f) => {
     const token = f.kind === "boolean" ? `--${f.flag}` : `--${f.flag} <${f.kind}>`;
     return f.required ? token : `[${token}]`;
   }).join(" ");
-  const usage = `Usage: arbor ${commandWords(action)}${primary ? ` [<${primary.field}>]` : ""}${usageFlags ? ` ${usageFlags}` : ""}`;
+  const explicitArgs = explicitPositionals.map((spec) => ` <${spec.field}>`).join("");
+  const usage = `Usage: arbor ${commandWords(action)}${explicitArgs}${primary ? ` [<${primary.field}>]` : ""}${usageFlags ? ` ${usageFlags}` : ""}`;
   const lines = specs.map((f) => {
     const req = f.required ? "required" : "optional";
     const fileNote = f.kind === "string" ? ` (or --${f.flag}-file <path|->)` : "";
@@ -19594,6 +19657,9 @@ function commandHelp(positionals) {
   const primaryNote = primary ? `
 
 A single bare argument fills --${primary.flag} (e.g. \`arbor ${commandWords(action)} <${primary.field}>\`).` : "";
+  const explicitNote = explicitPositionals.length > 0 ? `
+
+Bare arguments fill ${explicitPositionals.map((spec) => `--${spec.flag}`).join(" then ")}; the equivalent flags remain accepted.` : "";
   const alias2 = toolNameAlias(action);
   const aliasNote = alias2 ? `
 
@@ -19604,7 +19670,7 @@ Alias: \`arbor ${alias2}\` (the tool-name form) resolves to this same command.`
 ${usage}
 
 ${lines.join(`
-`)}${primaryNote}${aliasNote}
+`)}${primaryNote}${explicitNote}${aliasNote}
 `;
 }
 function commandCatalog() {
@@ -19630,17 +19696,21 @@ async function runObjectVerb(positionals, flags, ctx) {
   const { action, words } = match;
   const extras = positionals.slice(words);
   if (extras.length > 0) {
-    const primary = primaryPositionalField(action.inputSchema);
-    if (!primary) {
+    const explicitPositionals = positionalSpecs(action);
+    const positionalTargets = explicitPositionals.length > 0 ? explicitPositionals : [primaryPositionalField(action.inputSchema)].filter((spec) => spec !== undefined);
+    if (positionalTargets.length === 0) {
       throw new UsageError(`unexpected argument: ${extras[0]} (\`${commandWords(action)}\` takes no positional — use flags)`);
     }
-    if (extras.length > 1) {
-      throw new UsageError(`too many arguments: \`${commandWords(action)}\` takes one positional (--${primary.flag}); pass the rest as flags`);
+    if (extras.length > positionalTargets.length) {
+      throw new UsageError(`too many arguments: \`${commandWords(action)}\` takes ${positionalTargets.length === 1 ? "one positional" : `${positionalTargets.length} positionals`}; pass the rest as flags`);
     }
-    if (flags[primary.flag] !== undefined || flags[`${primary.flag}-file`] !== undefined) {
-      throw new UsageError(`pass --${primary.flag} either as a flag or as the positional argument, not both`);
+    for (const [index2, value] of extras.entries()) {
+      const target = positionalTargets[index2];
+      if (flags[target.flag] !== undefined || flags[`${target.flag}-file`] !== undefined) {
+        throw new UsageError(`pass --${target.flag} either as a flag or as the positional argument, not both`);
+      }
+      flags[target.flag] = value;
     }
-    flags[primary.flag] = extras[0];
   }
   const accepted = acceptedFlags(action.inputSchema);
   const unknown2 = Object.keys(flags).filter((f) => !accepted.has(f) && !RESERVED_FLAGS.has(f));
@@ -19648,7 +19718,27 @@ async function runObjectVerb(positionals, flags, ctx) {
     const hints = unknown2.map((f) => listFileHint(action, f)).filter(Boolean);
     throw new UsageError(`unknown flag${unknown2.length > 1 ? "s" : ""}: ${unknown2.map((f) => `--${f}`).join(", ")}${hints.length > 0 ? ` — ${hints.join("; ")}` : ""}`);
   }
-  const input = buildInput(action.inputSchema, flags, commandWords(action));
+  const inputFlags = { ...flags };
+  if (action.name === "app_request" && lastValue(inputFlags.json) === true) {
+    delete inputFlags.json;
+  }
+  const input = buildInput(action.inputSchema, inputFlags, commandWords(action));
+  if (action.name === "app_request" && input.json !== undefined) {
+    if (input.body !== undefined) {
+      throw new UsageError("--json and --body are mutually exclusive", {
+        reason: "validation.invalid_value",
+        field: "body"
+      });
+    }
+    try {
+      input.json = JSON.parse(String(input.json));
+    } catch {
+      throw new UsageError("--json expects a valid serialized JSON value", {
+        reason: "validation.invalid_value",
+        field: "json"
+      });
+    }
+  }
   if (action.name === "agent_register") {
     advise(`Agent registered. Save its apiKey now — it is shown only once:
 `, ctx);
@@ -19761,6 +19851,11 @@ async function login(opts) {
 }
 
 // src/index.ts
+function resolveCommandOutput(positionals, flags, opts) {
+  const actionName = matchCommand(positionals)?.action.name;
+  const resolved = resolveOutput(flags, opts);
+  return actionName === "app_fetch" || actionName === "app_request" ? { ...resolved, json: true, quiet: true } : resolved;
+}
 function setFlag(flags, key, value) {
   const prev = flags[key];
   if (prev === undefined || typeof value === "boolean" || typeof prev === "boolean") {
@@ -19777,9 +19872,11 @@ function parseArgs(argv) {
     if (arg.startsWith("--")) {
       const body = arg.slice(2);
       const eq = body.indexOf("=");
+      const appRequestWords = positionals[0] === "app" && positionals[1] === "request" ? 2 : positionals[0] === "app_request" ? 1 : 0;
+      const hasAppRequestTarget = appRequestWords > 0 && (positionals.length >= appRequestWords + 2 || flags["app-id"] !== undefined && flags.path !== undefined);
       if (eq !== -1) {
         setFlag(flags, body.slice(0, eq), body.slice(eq + 1));
-      } else if (!GLOBAL_BOOLEAN_FLAGS.has(body) && i + 1 < argv.length && !argv[i + 1].startsWith("--")) {
+      } else if ((!GLOBAL_BOOLEAN_FLAGS.has(body) || body === "json" && hasAppRequestTarget) && i + 1 < argv.length && !argv[i + 1].startsWith("--")) {
         setFlag(flags, body, argv[++i]);
       } else {
         setFlag(flags, body, true);
@@ -19909,7 +20006,7 @@ async function renderHealth(ctx) {
 }
 async function main() {
   const { positionals, flags } = parseArgs(process.argv.slice(2));
-  const ctx = resolveOutput(flags);
+  const ctx = resolveCommandOutput(positionals, flags);
   const [cmd] = positionals;
   try {
     if (flags.version !== undefined && positionals.length === 0 || cmd === "version") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.13.8",
+  "version": "0.13.10",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",