@lambdacurry/arbor 0.15.2 → 0.16.0

package/dist/arbor.js

@@ -17002,6 +17002,12 @@ var MCP_OUTPUT_SCHEMAS = {
   get_computer: exports_external.looseObject({
     threadId: id,
     config: redactedComputerRecipe,
+    repositoryAuthorization: exports_external.array(exports_external.looseObject({
+      repository: exports_external.string(),
+      connected: exports_external.boolean(),
+      grantedByScope: exports_external.enum(["organization", "space", "topic", "thread"]).nullable(),
+      inheritedBySiblingThreads: exports_external.boolean()
+    })),
     compatibility: exports_external.looseObject({
       state: exports_external.enum(["ready", "stale_config", "backend_mismatch", "replacement_required"]),
       reason: exports_external.string(),
@@ -17016,6 +17022,19 @@ var MCP_OUTPUT_SCHEMAS = {
     lineage: exports_external.array(jsonObject),
     reprovisions: exports_external.array(jsonObject)
   }),
+  github_repositories: exports_external.looseObject({
+    repositories: exports_external.array(jsonObject),
+    nextCursor: exports_external.string().nullable().optional(),
+    hasMore: exports_external.boolean().optional()
+  }),
+  github_connect_repository: exports_external.looseObject({
+    repositoryId: id,
+    scope: exports_external.enum(["organization", "space", "topic", "thread"]),
+    scopeId: id,
+    status: exports_external.enum(["active", "disconnected"]),
+    connected: exports_external.boolean(),
+    inheritedBySiblingThreads: exports_external.boolean()
+  }),
   publish_topic_computer: exports_external.looseObject({
     published: exports_external.boolean(),
     snapshot
@@ -17551,6 +17570,8 @@ var MCP_TOOL_ANNOTATIONS = {
   app_restore_state: destructiveIdempotent,
   app_archive: additive,
   charter: destructive,
+  github_repositories: readOnly,
+  github_connect_repository: idempotent,
   computer_open: additive,
   computer_reprovision: destructiveIdempotent,
   computer_exec: destructiveOpenWorld,
@@ -17635,23 +17656,23 @@ var ACTION_DEFINITIONS = [
   {
     name: "github_repositories",
     title: "List installed GitHub repositories",
-    description: "List repositories projected from this organization's verified Arbor Computer GitHub App installation. This returns repository ids and metadata, never credentials; use the id with github_connect_repository.",
+    description: "READ ONLY: List repositories projected from this organization's verified Arbor Computer GitHub App installation. This returns repository ids and metadata, never credentials; use the id with github_connect_repository.",
     inputSchema: { ...PAGINATION_INPUT },
-    surfaces: ["cli"],
+    surfaces: ["mcp", "cli"],
     toolset: "admin",
     run: forward("github.repositories")
   },
   {
     name: "github_connect_repository",
     title: "Connect a GitHub repository",
-    description: "Connect or disconnect one installed GitHub repository at an Arbor organization, Space, Topic, or Thread. This explicit, recoverable connection is required before Arbor may use private repository context there; it does not grant an agent a Git credential.",
+    description: "Connect or disconnect one installed GitHub repository at an Arbor organization, Space, Topic, or Thread. This explicit, recoverable connection is required before Arbor may use private repository context there; it does not grant an agent a Git credential. THE SCOPE IS THE DECISION: a Computer recipe only NAMES repositories, and a Thread materializes one only when a connection at its own scope or an ANCESTOR authorizes it — so connect at the Topic that owns the project and every Thread opened under it inherits the environment, while connecting at a single Thread authorizes that Thread alone and no sibling. Read get_computer's repositoryAuthorization to see which scope currently grants each configured repository. Owner/admin only.",
     inputSchema: {
       repositoryId: exports_external.string().describe("installed repository id from github_repositories, ghr_…"),
-      scope: exports_external.enum(["organization", "space", "topic", "thread"]).describe("the Arbor scope that may use this repository's context"),
+      scope: exports_external.enum(["organization", "space", "topic", "thread"]).describe("the Arbor scope that may use this repository's context; topic is the durable choice for a project every Thread under it develops"),
       scopeId: exports_external.string().describe("id matching the selected scope"),
       connected: exports_external.boolean().describe("true to connect; false to disconnect recoverably")
     },
-    surfaces: ["cli"],
+    surfaces: ["mcp", "cli"],
     toolset: "admin",
     run: forward("github.set_repository_connection")
   },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.15.2",
+  "version": "0.16.0",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",