@lambdacurry/arbor 0.13.9 → 0.14.0

package/dist/arbor.js

@@ -1810,6 +1810,9 @@ var appBundles = sqliteTable("app_bundles", {
   modules: text("modules", { mode: "json" }).$type().notNull(),
   staticAssets: text("static_assets", { mode: "json" }).$type().notNull(),
   buildProvenance: text("build_provenance", { mode: "json" }).$type(),
+  sourceProvenance: text("source_provenance", {
+    mode: "json"
+  }).$type(),
   runtimeEntrypoint: text("runtime_entrypoint").$type().notNull(),
   capabilityRequirements: text("capability_requirements", { mode: "json" }).$type().notNull().default([]),
   stateSchemaVersion: integer("state_schema_version").notNull().default(0),
@@ -1835,6 +1838,7 @@ var apps = sqliteTable("apps", {
   orgId: text("org_id").notNull().references(() => orgs.id),
   spaceId: text("space_id").notNull().references(() => spaces.id),
   title: text("title").notNull(),
+  description: text("description").notNull().default(""),
   slug: text("slug").notNull(),
   lifecycle: text("lifecycle").$type().notNull().default("active"),
   access: text("access").$type().notNull(),
@@ -16534,6 +16538,29 @@ var checkpoint = exports_external.looseObject({
   backup: exports_external.string(),
   published: jsonObject
 });
+var computerProfile = exports_external.looseObject({
+  id: exports_external.string(),
+  version: exports_external.number(),
+  shell: exports_external.string(),
+  runtimes: exports_external.looseObject({ bun: exports_external.string() }),
+  tools: exports_external.array(exports_external.string()),
+  recommendedEditingPrimitive: exports_external.string()
+});
+var appBundleSourceProvenance = exports_external.looseObject({
+  entryPath: exports_external.string(),
+  artifactVersionSha256: exports_external.string(),
+  entryPathSha256: exports_external.string(),
+  git: exports_external.looseObject({
+    repositoryRoot: exports_external.string(),
+    head: exports_external.string().nullable(),
+    branch: exports_external.string().nullable(),
+    dirty: exports_external.boolean(),
+    trackedChanges: exports_external.number().int().min(0),
+    untrackedFiles: exports_external.number().int().min(0),
+    entryPathTracked: exports_external.boolean()
+  }).nullable(),
+  warnings: exports_external.array(exports_external.string())
+});
 var profile2 = exports_external.looseObject({
   id,
   kind: exports_external.string(),
@@ -16720,6 +16747,10 @@ var paged = (key, item) => exports_external.looseObject({
   nextCursor: exports_external.string().optional()
 });
 var MCP_OUTPUT_SCHEMAS = {
+  server_info: exports_external.looseObject({
+    serverVersion: exports_external.string(),
+    deployment: exports_external.looseObject({ id: exports_external.string(), sourceRevision: exports_external.string().nullable(), deployedAt: timestamp }).nullable()
+  }),
   recall: exports_external.object({ result: exports_external.array(recallHit) }),
   contribute: exports_external.looseObject({
     contributionId: id,
@@ -17011,6 +17042,7 @@ var MCP_OUTPUT_SCHEMAS = {
     computerId: id,
     computerSessionId: id,
     backend: exports_external.enum(["worker-shell", "container"]),
+    profile: computerProfile.nullable(),
     startingSnapshot: snapshot.nullable(),
     materialized: checkpoint.nullable(),
     runtime: jsonObject
@@ -17020,13 +17052,15 @@ var MCP_OUTPUT_SCHEMAS = {
     stderr: exports_external.string().optional(),
     exitCode: exports_external.number().optional(),
     jobId: exports_external.string().optional(),
-    status: exports_external.string().optional()
+    status: exports_external.string().optional(),
+    strict: exports_external.boolean()
   }),
   computer_status: exports_external.looseObject({
     ok: exports_external.boolean().optional(),
     status: exports_external.string().optional(),
     backend: exports_external.string().optional(),
-    processes: exports_external.array(jsonObject).optional()
+    processes: exports_external.array(jsonObject).optional(),
+    profile: computerProfile.nullable()
   }),
   computer_verify: exports_external.looseObject({
     passed: exports_external.literal(true),
@@ -17125,6 +17159,8 @@ var MCP_OUTPUT_SCHEMAS = {
     assetCount: exports_external.number().optional(),
     byteCount: exports_external.number().optional(),
     buildProvenance: jsonObject,
+    sourceProvenance: appBundleSourceProvenance.nullable(),
+    warnings: exports_external.array(exports_external.string()),
     replayed: exports_external.boolean()
   }),
   computer_stop: exports_external.looseObject({ checkpoint, stopped: jsonObject })
@@ -17183,6 +17219,7 @@ var idempotentOpenWorld = {
   openWorldHint: true
 };
 var MCP_TOOL_ANNOTATIONS = {
+  server_info: readOnly,
   recall: readOnly,
   contribute: additive,
   edit: additive,
@@ -17319,6 +17356,15 @@ var PAGINATION_INPUT = {
   cursor: exports_external.string().optional().describe("opaque cursor from a prior response's nextCursor (use with --limit)")
 };
 var ACTION_DEFINITIONS = [
+  {
+    name: "server_info",
+    title: "Inspect Arbor server version",
+    description: "READ ONLY: Return the Arbor release version and current Cloudflare deployment identity so a client can distinguish a fresh server from a cached tool catalog. This cannot modify Arbor, Computer, App, access, or durable state.",
+    inputSchema: {},
+    surfaces: ["mcp", "cli", "computer-mcp", "computer-cli"],
+    toolset: "structure",
+    run: forward("server.info")
+  },
   {
     name: "github_repositories",
     title: "List installed GitHub repositories",
@@ -17588,7 +17634,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_open",
     title: "Open a Thread computer",
-    description: "Open or resume this Thread's project environment for filesystem or command work. Returns computerSessionId; pass it unchanged to later Computer tools and to Contributions or responses produced from the work.",
+    description: "Open or resume this Thread's project environment for filesystem or command work. Returns computerSessionId and, when a declared container profile is selected, its guaranteed shell/runtimes/tools/editing primitive; pass the session id unchanged to later Computer tools and to Contributions or responses produced from the work.",
     inputSchema: {
       threadId: exports_external.string().describe("the Arbor Thread whose stable computer to open, thr_…"),
       vcpus: exports_external.number().int().min(1).max(4).optional().describe("optional container vCPU request"),
@@ -17601,13 +17647,14 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_exec",
     title: "Run a command",
-    description: "Run a bounded command in an opened Thread computer, normally from /workspace. Use background only for the container backend; worker-shell deliberately serializes mutations and rejects long-lived processes.",
+    description: "Run one bounded logical operation in an opened Thread computer, normally from /workspace. Strict Bash semantics are ON by default: an early command failure or failed pipeline makes the execution nonzero, while explicit handling such as `cmd || fallback` still works. Set strict=false only for an intentional best-effort script. Use background only for the container backend; worker-shell deliberately serializes mutations and rejects long-lived processes.",
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
       command: exports_external.string().min(1).describe("the shell command to run"),
       cwd: exports_external.string().optional().describe("working directory under /workspace"),
       timeout: exports_external.number().int().min(1000).max(1800000).optional().describe("timeout in milliseconds, from 1,000 through 1,800,000"),
-      background: exports_external.boolean().optional().describe("start a container process and return its pid")
+      background: exports_external.boolean().optional().describe("start a container process and return its pid"),
+      strict: exports_external.boolean().optional().describe("fail on the first unhandled command or pipeline failure; defaults to true, set false only for intentional best-effort execution")
     },
     surfaces: ["computer-mcp", "computer-cli"],
     toolset: "loop",
@@ -17616,7 +17663,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_status",
     title: "Inspect a computer",
-    description: "Read live Currybox process and runtime status for an opened computer. This is ephemeral provider state; use get_computer on the Arbor surface for durable config and snapshot lineage.",
+    description: "READ ONLY: Read live Currybox process/runtime status and the declared container profile contract for an opened computer. This cannot modify files, processes, checkpoints, or Thread state; use get_computer on the Arbor surface for durable config and snapshot lineage.",
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…")
     },
@@ -17775,7 +17822,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_publish_app_bundle",
     title: "Publish an immutable AppBundle",
-    description: "After a Bun container build is green, freeze one Worker entry module plus optional static assets from this Thread computer into a content-addressed AppBundle sourced from an ArtifactVersion. Use the returned bundleId with app_deploy; uploads complete and verify before Arbor publishes the bundle manifest, and retries require the same idempotencyKey.",
+    description: "After a Bun container build is green, verify that entryPath bytes exactly match the referenced ArtifactVersion, capture source hashes plus Git/workspace provenance, then freeze the Worker module and optional static assets into a content-addressed AppBundle. A mismatch is rejected; dirty or untracked source is allowed but returned as an explicit warning. Use the returned bundleId with app_deploy; retries require the same idempotencyKey.",
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
       artifactVersionId: exports_external.string().describe("the source ArtifactVersion, artv_…"),
@@ -18834,6 +18881,7 @@ var ACTION_DEFINITIONS = [
     inputSchema: {
       spaceId: exports_external.string().describe("owning Space, spc_…"),
       title: exports_external.string().min(1).max(160).describe("short factual App title"),
+      description: exports_external.string().min(1).max(200).describe("one line of what this App is for, read by whoever is deciding whether to open it — not a changelog and not the source Artifact's summary"),
       slug: exports_external.string().min(1).max(59).describe("stable DNS label used by app-<slug>.arborthreads.dev"),
       access: exports_external.enum(["space", "public"]).describe("space requires membership; public is anonymous at the gateway"),
       discovery: exports_external.enum(["unlisted", "listed"]).nullable().optional().describe("public Apps only; default unlisted"),
@@ -18935,6 +18983,19 @@ var ACTION_DEFINITIONS = [
     toolset: "apps",
     run: forward("app.rollback")
   },
+  {
+    name: "app_update",
+    title: "Edit an App's title or description",
+    description: "Change the human-facing metadata a reader sees before opening an App. The description is the one line that answers 'what is this for'; keep it factual and current, because the directory and the App page both lead with it. Slug is deliberately not editable — the URL is the App's stable identity. Access, lifecycle, release, and state each have their own operation.",
+    inputSchema: {
+      appId: exports_external.string().describe("target App, app_…"),
+      title: exports_external.string().min(1).max(160).optional().describe("short factual App title"),
+      description: exports_external.string().min(1).max(200).optional().describe("one line of what this App is for")
+    },
+    surfaces: ["cli"],
+    toolset: "apps",
+    run: forward("app.update")
+  },
   {
     name: "app_set_access",
     title: "Change App access",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.13.9",
+  "version": "0.14.0",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",