@lambdacurry/arbor 0.13.9 → 0.13.10

package/dist/arbor.js

@@ -1810,6 +1810,9 @@ var appBundles = sqliteTable("app_bundles", {
   modules: text("modules", { mode: "json" }).$type().notNull(),
   staticAssets: text("static_assets", { mode: "json" }).$type().notNull(),
   buildProvenance: text("build_provenance", { mode: "json" }).$type(),
+  sourceProvenance: text("source_provenance", {
+    mode: "json"
+  }).$type(),
   runtimeEntrypoint: text("runtime_entrypoint").$type().notNull(),
   capabilityRequirements: text("capability_requirements", { mode: "json" }).$type().notNull().default([]),
   stateSchemaVersion: integer("state_schema_version").notNull().default(0),
@@ -16534,6 +16537,29 @@ var checkpoint = exports_external.looseObject({
   backup: exports_external.string(),
   published: jsonObject
 });
+var computerProfile = exports_external.looseObject({
+  id: exports_external.string(),
+  version: exports_external.number(),
+  shell: exports_external.string(),
+  runtimes: exports_external.looseObject({ bun: exports_external.string() }),
+  tools: exports_external.array(exports_external.string()),
+  recommendedEditingPrimitive: exports_external.string()
+});
+var appBundleSourceProvenance = exports_external.looseObject({
+  entryPath: exports_external.string(),
+  artifactVersionSha256: exports_external.string(),
+  entryPathSha256: exports_external.string(),
+  git: exports_external.looseObject({
+    repositoryRoot: exports_external.string(),
+    head: exports_external.string().nullable(),
+    branch: exports_external.string().nullable(),
+    dirty: exports_external.boolean(),
+    trackedChanges: exports_external.number().int().min(0),
+    untrackedFiles: exports_external.number().int().min(0),
+    entryPathTracked: exports_external.boolean()
+  }).nullable(),
+  warnings: exports_external.array(exports_external.string())
+});
 var profile2 = exports_external.looseObject({
   id,
   kind: exports_external.string(),
@@ -16720,6 +16746,10 @@ var paged = (key, item) => exports_external.looseObject({
   nextCursor: exports_external.string().optional()
 });
 var MCP_OUTPUT_SCHEMAS = {
+  server_info: exports_external.looseObject({
+    serverVersion: exports_external.string(),
+    deployment: exports_external.looseObject({ id: exports_external.string(), sourceRevision: exports_external.string().nullable(), deployedAt: timestamp }).nullable()
+  }),
   recall: exports_external.object({ result: exports_external.array(recallHit) }),
   contribute: exports_external.looseObject({
     contributionId: id,
@@ -17011,6 +17041,7 @@ var MCP_OUTPUT_SCHEMAS = {
     computerId: id,
     computerSessionId: id,
     backend: exports_external.enum(["worker-shell", "container"]),
+    profile: computerProfile.nullable(),
     startingSnapshot: snapshot.nullable(),
     materialized: checkpoint.nullable(),
     runtime: jsonObject
@@ -17020,13 +17051,15 @@ var MCP_OUTPUT_SCHEMAS = {
     stderr: exports_external.string().optional(),
     exitCode: exports_external.number().optional(),
     jobId: exports_external.string().optional(),
-    status: exports_external.string().optional()
+    status: exports_external.string().optional(),
+    strict: exports_external.boolean()
   }),
   computer_status: exports_external.looseObject({
     ok: exports_external.boolean().optional(),
     status: exports_external.string().optional(),
     backend: exports_external.string().optional(),
-    processes: exports_external.array(jsonObject).optional()
+    processes: exports_external.array(jsonObject).optional(),
+    profile: computerProfile.nullable()
   }),
   computer_verify: exports_external.looseObject({
     passed: exports_external.literal(true),
@@ -17125,6 +17158,8 @@ var MCP_OUTPUT_SCHEMAS = {
     assetCount: exports_external.number().optional(),
     byteCount: exports_external.number().optional(),
     buildProvenance: jsonObject,
+    sourceProvenance: appBundleSourceProvenance.nullable(),
+    warnings: exports_external.array(exports_external.string()),
     replayed: exports_external.boolean()
   }),
   computer_stop: exports_external.looseObject({ checkpoint, stopped: jsonObject })
@@ -17183,6 +17218,7 @@ var idempotentOpenWorld = {
   openWorldHint: true
 };
 var MCP_TOOL_ANNOTATIONS = {
+  server_info: readOnly,
   recall: readOnly,
   contribute: additive,
   edit: additive,
@@ -17319,6 +17355,15 @@ var PAGINATION_INPUT = {
   cursor: exports_external.string().optional().describe("opaque cursor from a prior response's nextCursor (use with --limit)")
 };
 var ACTION_DEFINITIONS = [
+  {
+    name: "server_info",
+    title: "Inspect Arbor server version",
+    description: "READ ONLY: Return the Arbor release version and current Cloudflare deployment identity so a client can distinguish a fresh server from a cached tool catalog. This cannot modify Arbor, Computer, App, access, or durable state.",
+    inputSchema: {},
+    surfaces: ["mcp", "cli", "computer-mcp", "computer-cli"],
+    toolset: "structure",
+    run: forward("server.info")
+  },
   {
     name: "github_repositories",
     title: "List installed GitHub repositories",
@@ -17588,7 +17633,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_open",
     title: "Open a Thread computer",
-    description: "Open or resume this Thread's project environment for filesystem or command work. Returns computerSessionId; pass it unchanged to later Computer tools and to Contributions or responses produced from the work.",
+    description: "Open or resume this Thread's project environment for filesystem or command work. Returns computerSessionId and, when a declared container profile is selected, its guaranteed shell/runtimes/tools/editing primitive; pass the session id unchanged to later Computer tools and to Contributions or responses produced from the work.",
     inputSchema: {
       threadId: exports_external.string().describe("the Arbor Thread whose stable computer to open, thr_…"),
       vcpus: exports_external.number().int().min(1).max(4).optional().describe("optional container vCPU request"),
@@ -17601,13 +17646,14 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_exec",
     title: "Run a command",
-    description: "Run a bounded command in an opened Thread computer, normally from /workspace. Use background only for the container backend; worker-shell deliberately serializes mutations and rejects long-lived processes.",
+    description: "Run one bounded logical operation in an opened Thread computer, normally from /workspace. Strict Bash semantics are ON by default: an early command failure or failed pipeline makes the execution nonzero, while explicit handling such as `cmd || fallback` still works. Set strict=false only for an intentional best-effort script. Use background only for the container backend; worker-shell deliberately serializes mutations and rejects long-lived processes.",
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
       command: exports_external.string().min(1).describe("the shell command to run"),
       cwd: exports_external.string().optional().describe("working directory under /workspace"),
       timeout: exports_external.number().int().min(1000).max(1800000).optional().describe("timeout in milliseconds, from 1,000 through 1,800,000"),
-      background: exports_external.boolean().optional().describe("start a container process and return its pid")
+      background: exports_external.boolean().optional().describe("start a container process and return its pid"),
+      strict: exports_external.boolean().optional().describe("fail on the first unhandled command or pipeline failure; defaults to true, set false only for intentional best-effort execution")
     },
     surfaces: ["computer-mcp", "computer-cli"],
     toolset: "loop",
@@ -17616,7 +17662,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_status",
     title: "Inspect a computer",
-    description: "Read live Currybox process and runtime status for an opened computer. This is ephemeral provider state; use get_computer on the Arbor surface for durable config and snapshot lineage.",
+    description: "READ ONLY: Read live Currybox process/runtime status and the declared container profile contract for an opened computer. This cannot modify files, processes, checkpoints, or Thread state; use get_computer on the Arbor surface for durable config and snapshot lineage.",
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…")
     },
@@ -17775,7 +17821,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_publish_app_bundle",
     title: "Publish an immutable AppBundle",
-    description: "After a Bun container build is green, freeze one Worker entry module plus optional static assets from this Thread computer into a content-addressed AppBundle sourced from an ArtifactVersion. Use the returned bundleId with app_deploy; uploads complete and verify before Arbor publishes the bundle manifest, and retries require the same idempotencyKey.",
+    description: "After a Bun container build is green, verify that entryPath bytes exactly match the referenced ArtifactVersion, capture source hashes plus Git/workspace provenance, then freeze the Worker module and optional static assets into a content-addressed AppBundle. A mismatch is rejected; dirty or untracked source is allowed but returned as an explicit warning. Use the returned bundleId with app_deploy; retries require the same idempotencyKey.",
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
       artifactVersionId: exports_external.string().describe("the source ArtifactVersion, artv_…"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.13.9",
+  "version": "0.13.10",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",