@lambdacurry/arbor 0.15.2 → 0.16.1

package/dist/arbor.js

@@ -16727,6 +16727,27 @@ var computerProfile = exports_external.looseObject({
   tools: exports_external.array(exports_external.string()),
   recommendedEditingPrimitive: exports_external.string()
 });
+var computerCapabilityCard = exports_external.looseObject({
+  capabilities: exports_external.array(exports_external.looseObject({
+    id: exports_external.string(),
+    state: exports_external.enum(["ready", "available"]),
+    surface: exports_external.array(exports_external.string()),
+    hint: exports_external.string().optional()
+  })),
+  diagnostics: exports_external.looseObject({
+    backend: exports_external.enum(["worker-shell", "container"]),
+    containerProfile: nullableString,
+    runtimeActive: exports_external.boolean()
+  })
+});
+var codeSymbol = exports_external.looseObject({
+  namePath: exports_external.string(),
+  kind: exports_external.string(),
+  path: exports_external.string(),
+  startLine: exports_external.number().optional(),
+  endLine: exports_external.number().optional(),
+  body: exports_external.string().optional()
+});
 var appBundleSourceProvenance = exports_external.looseObject({
   entryPath: exports_external.string(),
   artifactVersionSha256: exports_external.string(),
@@ -17002,6 +17023,12 @@ var MCP_OUTPUT_SCHEMAS = {
   get_computer: exports_external.looseObject({
     threadId: id,
     config: redactedComputerRecipe,
+    repositoryAuthorization: exports_external.array(exports_external.looseObject({
+      repository: exports_external.string(),
+      connected: exports_external.boolean(),
+      grantedByScope: exports_external.enum(["organization", "space", "topic", "thread"]).nullable(),
+      inheritedBySiblingThreads: exports_external.boolean()
+    })),
     compatibility: exports_external.looseObject({
       state: exports_external.enum(["ready", "stale_config", "backend_mismatch", "replacement_required"]),
       reason: exports_external.string(),
@@ -17016,6 +17043,19 @@ var MCP_OUTPUT_SCHEMAS = {
     lineage: exports_external.array(jsonObject),
     reprovisions: exports_external.array(jsonObject)
   }),
+  github_repositories: exports_external.looseObject({
+    repositories: exports_external.array(jsonObject),
+    nextCursor: exports_external.string().nullable().optional(),
+    hasMore: exports_external.boolean().optional()
+  }),
+  github_connect_repository: exports_external.looseObject({
+    repositoryId: id,
+    scope: exports_external.enum(["organization", "space", "topic", "thread"]),
+    scopeId: id,
+    status: exports_external.enum(["active", "disconnected"]),
+    connected: exports_external.boolean(),
+    inheritedBySiblingThreads: exports_external.boolean()
+  }),
   publish_topic_computer: exports_external.looseObject({
     published: exports_external.boolean(),
     snapshot
@@ -17292,6 +17332,7 @@ var MCP_OUTPUT_SCHEMAS = {
     profile: computerProfile.nullable(),
     startingSnapshot: snapshot.nullable(),
     materialized: checkpoint.nullable(),
+    capabilities: computerCapabilityCard,
     runtime: jsonObject
   }),
   computer_reprovision: exports_external.looseObject({
@@ -17316,11 +17357,13 @@ var MCP_OUTPUT_SCHEMAS = {
     strict: exports_external.boolean()
   }),
   computer_status: exports_external.looseObject({
-    ok: exports_external.boolean().optional(),
-    status: exports_external.string().optional(),
-    backend: exports_external.string().optional(),
-    processes: exports_external.array(jsonObject).optional(),
-    profile: computerProfile.nullable()
+    computerSessionId: id,
+    computerId: id,
+    status: exports_external.enum(["running", "dormant"]),
+    backend: exports_external.enum(["worker-shell", "container"]),
+    profile: computerProfile.nullable(),
+    capabilities: computerCapabilityCard,
+    runtime: jsonObject
   }),
   computer_verify: exports_external.looseObject({
     passed: exports_external.literal(true),
@@ -17427,7 +17470,47 @@ var MCP_OUTPUT_SCHEMAS = {
     warnings: exports_external.array(exports_external.string()),
     replayed: exports_external.boolean()
   }),
-  computer_stop: exports_external.looseObject({ checkpoint, stopped: jsonObject })
+  computer_stop: exports_external.looseObject({ checkpoint, stopped: jsonObject }),
+  code_symbols: exports_external.looseObject({
+    computerSessionId: id,
+    path: exports_external.string(),
+    symbols: exports_external.array(codeSymbol)
+  }),
+  code_find_symbol: exports_external.looseObject({
+    computerSessionId: id,
+    namePath: exports_external.string(),
+    symbols: exports_external.array(codeSymbol)
+  }),
+  code_references: exports_external.looseObject({
+    computerSessionId: id,
+    namePath: exports_external.string(),
+    path: exports_external.string(),
+    references: exports_external.array(exports_external.looseObject({
+      path: exports_external.string(),
+      namePath: exports_external.string().optional(),
+      startLine: exports_external.number().optional(),
+      snippet: exports_external.string().optional()
+    })),
+    truncated: exports_external.boolean()
+  }),
+  code_implementations: exports_external.looseObject({
+    computerSessionId: id,
+    namePath: exports_external.string(),
+    path: exports_external.string(),
+    symbols: exports_external.array(codeSymbol)
+  }),
+  code_diagnostics: exports_external.looseObject({
+    computerSessionId: id,
+    path: exports_external.string(),
+    diagnostics: exports_external.array(exports_external.looseObject({
+      severity: exports_external.enum(["error", "warning", "information", "hint"]),
+      message: exports_external.string(),
+      path: exports_external.string(),
+      startLine: exports_external.number().optional(),
+      namePath: exports_external.string().optional()
+    })),
+    truncated: exports_external.boolean()
+  })
 };
 function outputSchemaFor(actionName) {
   return MCP_OUTPUT_SCHEMAS[actionName];
@@ -17551,10 +17634,17 @@ var MCP_TOOL_ANNOTATIONS = {
   app_restore_state: destructiveIdempotent,
   app_archive: additive,
   charter: destructive,
+  github_repositories: readOnly,
+  github_connect_repository: idempotent,
   computer_open: additive,
   computer_reprovision: destructiveIdempotent,
   computer_exec: destructiveOpenWorld,
   computer_status: readOnly,
+  code_symbols: readOnly,
+  code_find_symbol: readOnly,
+  code_references: readOnly,
+  code_implementations: readOnly,
+  code_diagnostics: readOnly,
   computer_verify: openWorld,
   computer_read: readOnly,
   computer_export: idempotent,
@@ -17635,23 +17725,23 @@ var ACTION_DEFINITIONS = [
   {
     name: "github_repositories",
     title: "List installed GitHub repositories",
-    description: "List repositories projected from this organization's verified Arbor Computer GitHub App installation. This returns repository ids and metadata, never credentials; use the id with github_connect_repository.",
+    description: "READ ONLY: List repositories projected from this organization's verified Arbor Computer GitHub App installation. This returns repository ids and metadata, never credentials; use the id with github_connect_repository.",
     inputSchema: { ...PAGINATION_INPUT },
-    surfaces: ["cli"],
+    surfaces: ["mcp", "cli"],
     toolset: "admin",
     run: forward("github.repositories")
   },
   {
     name: "github_connect_repository",
     title: "Connect a GitHub repository",
-    description: "Connect or disconnect one installed GitHub repository at an Arbor organization, Space, Topic, or Thread. This explicit, recoverable connection is required before Arbor may use private repository context there; it does not grant an agent a Git credential.",
+    description: "Connect or disconnect one installed GitHub repository at an Arbor organization, Space, Topic, or Thread. This explicit, recoverable connection is required before Arbor may use private repository context there; it does not grant an agent a Git credential. THE SCOPE IS THE DECISION: a Computer recipe only NAMES repositories, and a Thread materializes one only when a connection at its own scope or an ANCESTOR authorizes it — so connect at the Topic that owns the project and every Thread opened under it inherits the environment, while connecting at a single Thread authorizes that Thread alone and no sibling. Read get_computer's repositoryAuthorization to see which scope currently grants each configured repository. Owner/admin only.",
     inputSchema: {
       repositoryId: exports_external.string().describe("installed repository id from github_repositories, ghr_…"),
-      scope: exports_external.enum(["organization", "space", "topic", "thread"]).describe("the Arbor scope that may use this repository's context"),
+      scope: exports_external.enum(["organization", "space", "topic", "thread"]).describe("the Arbor scope that may use this repository's context; topic is the durable choice for a project every Thread under it develops"),
       scopeId: exports_external.string().describe("id matching the selected scope"),
       connected: exports_external.boolean().describe("true to connect; false to disconnect recoverably")
     },
-    surfaces: ["cli"],
+    surfaces: ["mcp", "cli"],
     toolset: "admin",
     run: forward("github.set_repository_connection")
   },
@@ -17928,7 +18018,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_open",
     title: "Open a Thread computer",
-    description: "Open or resume this Thread's project environment for filesystem or command work. Every configured repository is re-authorized through its explicit GitHub connection; a fresh reusable base clones it with a request-scoped contents:read credential before strict setup runs, while a restore receives no credential. Returns computerSessionId and the selected profile contract; pass the session id unchanged to later Computer tools and cited work.",
+    description: "Open or resume this Thread's project environment for filesystem or command work. Every configured repository is re-authorized through its explicit GitHub connection; a fresh reusable base clones it with a request-scoped contents:read credential before strict setup runs, while a restore receives no credential. Returns computerSessionId — pass it unchanged to later Computer tools and cited work — plus the selected profile contract and a resolved capabilities card naming what this computer can do, each entry ready (usable now) or available (starts on demand).",
     inputSchema: {
       threadId: exports_external.string().describe("the Arbor Thread whose stable computer to open, thr_…"),
       vcpus: exports_external.number().int().min(1).max(4).optional().describe("optional container vCPU request"),
@@ -17970,7 +18060,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_status",
     title: "Inspect a computer",
-    description: "READ ONLY: Read live Currybox process/runtime status and the declared container profile contract for an opened computer. This cannot modify files, processes, checkpoints, or Thread state; use get_computer on the Arbor surface for durable config and snapshot lineage.",
+    description: "READ ONLY: Read what this computer can do right now — the same resolved capabilities card computer_open returns, each entry ready or available — plus live Currybox process/runtime status and the declared container profile contract. Reach for it when you are unsure whether a capability — background processes, semantic code intelligence, Preview publication — is usable on this session. This cannot modify files, processes, checkpoints, or Thread state; use get_computer on the Arbor surface for durable config and snapshot lineage.",
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…")
     },
@@ -17990,6 +18080,71 @@ var ACTION_DEFINITIONS = [
     toolset: "loop",
     run: forward("computer_runtime.verify")
   },
+  {
+    name: "code_symbols",
+    title: "Outline a file's symbols",
+    description: "Outline the symbols a file or directory defines, resolved by the project's language server. Reach for this before reading a large unfamiliar file — unlike a grep through `computer_exec`, it returns the real declarations with their kinds rather than every textual match. Needs the semantic-code capability shown on the computer_status card.",
+    inputSchema: {
+      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
+      path: exports_external.string().max(512).describe("file or directory, absolute under /workspace or workspace-relative")
+    },
+    surfaces: ["computer-mcp", "computer-cli"],
+    toolset: "loop",
+    run: forward("computer_code.symbols")
+  },
+  {
+    name: "code_find_symbol",
+    title: "Find a symbol by name path",
+    description: "Locate a declaration by its name path (`ClassName/methodName`) and optionally return its body. Use it instead of a `computer_exec` grep when you want THE definition rather than every line mentioning the name; the language server distinguishes the declaration from its call sites and its string occurrences. Needs the semantic-code capability shown on the computer_status card.",
+    inputSchema: {
+      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
+      namePath: exports_external.string().min(1).max(200).describe("symbol name path within a file, e.g. MyClass/myMethod"),
+      path: exports_external.string().max(512).optional().describe("optional file or directory to restrict the search to"),
+      includeBody: exports_external.boolean().optional().describe("include each symbol's source body"),
+      depth: exports_external.number().int().min(0).max(3).optional().describe("how many levels of children to include (default 0)")
+    },
+    surfaces: ["computer-mcp", "computer-cli"],
+    toolset: "loop",
+    run: forward("computer_code.find_symbol")
+  },
+  {
+    name: "code_references",
+    title: "Find what references a symbol",
+    description: 'List the places that actually reference a symbol, each with a short snippet. This is the operation `computer_exec` cannot do: a text search finds the same identifier in comments, unrelated modules, and shadowed scopes, while the language server resolves real references — so it answers "is this safe to change". Needs the semantic-code capability shown on the computer_status card.',
+    inputSchema: {
+      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
+      namePath: exports_external.string().min(1).max(200).describe("name path of the symbol to trace"),
+      path: exports_external.string().max(512).describe("the file declaring that symbol, absolute under /workspace or workspace-relative")
+    },
+    surfaces: ["computer-mcp", "computer-cli"],
+    toolset: "loop",
+    run: forward("computer_code.references")
+  },
+  {
+    name: "code_implementations",
+    title: "Find implementations of a symbol",
+    description: "List the concrete implementations or subtypes of an interface, abstract type, or method. A `computer_exec` search cannot follow a type relationship — only the language server knows which declarations satisfy this one. Needs the semantic-code capability shown on the computer_status card.",
+    inputSchema: {
+      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
+      namePath: exports_external.string().min(1).max(200).describe("name path of the interface, type, or method"),
+      path: exports_external.string().max(512).describe("the file declaring that symbol, absolute under /workspace or workspace-relative")
+    },
+    surfaces: ["computer-mcp", "computer-cli"],
+    toolset: "loop",
+    run: forward("computer_code.implementations")
+  },
+  {
+    name: "code_diagnostics",
+    title: "Read language-server diagnostics for a file",
+    description: "Return the language server's live errors and warnings for one file, mapped to symbols. Reach for it on a file you just edited: it answers in seconds without the whole-project build a `computer_exec` typecheck runs, though a green result here is not a substitute for that build. Needs the semantic-code capability shown on the computer_status card.",
+    inputSchema: {
+      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
+      path: exports_external.string().max(512).describe("the file to inspect, absolute under /workspace or workspace-relative")
+    },
+    surfaces: ["computer-mcp", "computer-cli"],
+    toolset: "loop",
+    run: forward("computer_code.diagnostics")
+  },
   {
     name: "computer_read",
     title: "Read a project file",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.15.2",
+  "version": "0.16.1",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",