@lambdacurry/arbor 0.17.2 → 0.17.4

package/dist/arbor.js

@@ -1930,6 +1930,7 @@ var appBundles = sqliteTable("app_bundles", {
   artifactVersionId: text("artifact_version_id").notNull().references(() => artifactVersions.id),
   spaceId: text("space_id").notNull().references(() => spaces.id),
   compatibilityDate: text("compatibility_date").notNull(),
+  compatibilityFlags: text("compatibility_flags", { mode: "json" }).$type().notNull().default([]),
   mainModule: text("main_module").notNull(),
   modules: text("modules", { mode: "json" }).$type().notNull(),
   staticAssets: text("static_assets", { mode: "json" }).$type().notNull(),
@@ -17364,10 +17365,29 @@ var MCP_OUTPUT_SCHEMAS = {
     stderr: exports_external.string().optional(),
     exitCode: exports_external.number().optional(),
     jobId: exports_external.string().optional(),
+    processId: exports_external.string().optional(),
     status: exports_external.string().optional(),
     cwd: exports_external.string(),
     strict: exports_external.boolean()
   }),
+  computer_process_read: exports_external.looseObject({
+    processId: id,
+    status: exports_external.string(),
+    command: exports_external.string().optional(),
+    cwd: exports_external.string().optional(),
+    startedAt: timestamp.nullable().optional(),
+    endedAt: timestamp.nullable().optional(),
+    durationMs: exports_external.number().int().min(0).nullable().optional(),
+    stdout: exports_external.string().optional(),
+    stderr: exports_external.string().optional(),
+    truncated: exports_external.boolean().optional(),
+    exitCode: exports_external.number().int().nullable().optional()
+  }),
+  computer_process_terminate: exports_external.looseObject({
+    processId: id,
+    status: exports_external.string(),
+    terminated: exports_external.boolean().optional()
+  }),
   computer_status: exports_external.looseObject({
     computerSessionId: id,
     computerId: id,
@@ -17655,6 +17675,8 @@ var MCP_TOOL_ANNOTATIONS = {
   computer_open: additive,
   computer_reprovision: destructiveIdempotent,
   computer_exec: destructiveOpenWorld,
+  computer_process_read: readOnly,
+  computer_process_terminate: destructiveOpenWorld,
   computer_status: readOnly,
   code_symbols: readOnly,
   code_find_symbol: readOnly,
@@ -17967,7 +17989,7 @@ var ACTION_DEFINITIONS = [
     description: "Replace your organization's sparse computer-default layer without allocating runtime state. Omitted/null values fall back to provider defaults; Space, Topic, and Thread layers may override individual fields.",
     inputSchema: {
       backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("default execution tier, or null to use worker-shell"),
-      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, Bun 1.3.3, bunx, Node 26.5.1, pnpm 10.33.0, and ripgrep (rg), or null to clear"),
+      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, GitHub CLI (gh), Bun 1.3.3, bunx, Node 26.5.1, pnpm 10.33.0, Python 3.13.15 (python/python3), jq, and ripgrep (rg), or null to clear"),
       setupScript: exports_external.string().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize, or null to clear"),
       repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
     },
@@ -17982,7 +18004,7 @@ var ACTION_DEFINITIONS = [
     inputSchema: {
       spaceId: exports_external.string().describe("the Space, spc_…"),
       backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
-      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, Bun 1.3.3, bunx, Node 26.5.1, pnpm 10.33.0, and ripgrep (rg), or null to clear inherited profile"),
+      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, GitHub CLI (gh), Bun 1.3.3, bunx, Node 26.5.1, pnpm 10.33.0, Python 3.13.15 (python/python3), jq, and ripgrep (rg), or null to clear inherited profile"),
       setupScript: exports_external.string().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize, or null to clear"),
       repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
     },
@@ -17997,7 +18019,7 @@ var ACTION_DEFINITIONS = [
     inputSchema: {
       topicId: exports_external.string().describe("the Topic, top_…"),
       backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
-      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, Bun 1.3.3, bunx, Node 26.5.1, pnpm 10.33.0, and ripgrep (rg), or null to clear inherited profile"),
+      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, GitHub CLI (gh), Bun 1.3.3, bunx, Node 26.5.1, pnpm 10.33.0, Python 3.13.15 (python/python3), jq, and ripgrep (rg), or null to clear inherited profile"),
       setupScript: exports_external.string().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize"),
       repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
     },
@@ -18012,7 +18034,7 @@ var ACTION_DEFINITIONS = [
     inputSchema: {
       threadId: exports_external.string().describe("the Thread, thr_…"),
       backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
-      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, Bun 1.3.3, bunx, Node 26.5.1, pnpm 10.33.0, and ripgrep (rg), or null to clear inherited profile"),
+      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, GitHub CLI (gh), Bun 1.3.3, bunx, Node 26.5.1, pnpm 10.33.0, Python 3.13.15 (python/python3), jq, and ripgrep (rg), or null to clear inherited profile"),
       setupScript: exports_external.string().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize"),
       repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
     },
@@ -18034,7 +18056,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_open",
     title: "Open a Thread computer",
-    description: "Open or resume this Thread's project environment for filesystem or command work. Every configured repository is re-authorized through its explicit GitHub connection; a fresh reusable base clones it with a request-scoped contents:read credential before strict setup runs, while a restore receives no credential. Returns computerSessionId — pass it unchanged to later Computer tools and cited work — plus the selected profile contract, a resolved capabilities card, workspaceRoot, each materialized repositories[].path, and defaultCwd. Omitted computer_exec.cwd uses defaultCwd: the single checkout when exactly one repository is configured, workspaceRoot otherwise.",
+    description: "Open or resume this Thread's project environment for filesystem or command work. Every configured repository is re-authorized through its explicit GitHub connection; a fresh reusable base clones it with a request-scoped contents:read credential before strict setup runs, while a restore receives no credential. Returns computerSessionId — pass it unchanged to later Computer tools and cited work — plus the selected profile contract (including GitHub CLI (gh) on bun-typescript-v1), a resolved capabilities card, workspaceRoot, each materialized repositories[].path, and defaultCwd. Omitted computer_exec.cwd uses defaultCwd: the single checkout when exactly one repository is configured, workspaceRoot otherwise.",
     inputSchema: {
       threadId: exports_external.string().describe("the Arbor Thread whose stable computer to open, thr_…"),
       vcpus: exports_external.number().int().min(1).max(4).optional().describe("optional container vCPU request"),
@@ -18060,7 +18082,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_exec",
     title: "Run a command",
-    description: "Run one bounded logical operation in an opened Thread computer. Omitting cwd runs from the Computer's defaultCwd — the one materialized checkout when the recipe has exactly one repository, otherwise the workspace root — and the receipt echoes the cwd it ran in; pass cwd explicitly to override it. Strict Bash semantics are ON by default: an early command failure or failed pipeline makes the execution nonzero, while explicit handling such as `cmd || fallback` still works. Set strict=false only for an intentional best-effort script. For a connected human working inside a configured repository, Arbor supplies that human’s GitHub-linked author/committer identity ephemerally for the exec without writing it into the workspace; command-local Git environment overrides may still replace it. Use background only for the container backend; worker-shell deliberately serializes mutations and rejects long-lived processes.",
+    description: "Run one bounded logical operation in an opened Thread computer. Omitting cwd runs from the Computer's defaultCwd — the one materialized checkout when the recipe has exactly one repository, otherwise the workspace root — and the receipt echoes the cwd it ran in; pass cwd explicitly to override it. Strict Bash semantics are ON by default: an early command failure or failed pipeline makes the execution nonzero, while explicit handling such as `cmd || fallback` still works. Set strict=false only for an intentional best-effort script. For a connected human, Arbor supplies ambient GitHub authorization for normal gh/HTTPS Git commands and GitHub-linked author/committer identity ephemerally for every exec without writing credentials into the workspace; command-local Git environment overrides may still replace the identity. Use background only for the container backend; it returns a processId for computer_process_read / computer_process_terminate. worker-shell deliberately serializes mutations and rejects long-lived processes.",
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
       command: exports_external.string().min(1).describe("the shell command to run"),
@@ -18073,6 +18095,31 @@ var ACTION_DEFINITIONS = [
     toolset: "loop",
     run: forward("computer_runtime.exec")
   },
+  {
+    name: "computer_process_read",
+    title: "Read a background process",
+    description: "READ ONLY: Inspect one process returned by computer_exec(background=true). Returns provider-owned lifecycle metadata plus bounded latest stdout/stderr and, once terminal, the final exit result. Re-read the same processId for progress without sentinel files or shell process archaeology.",
+    inputSchema: {
+      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
+      processId: exports_external.string().min(1).describe("the opaque processId returned by computer_exec(background=true), proc_…"),
+      maxBytes: exports_external.number().int().min(1024).max(65536).optional().describe("maximum combined output bytes to return; default 16,384")
+    },
+    surfaces: ["computer-mcp", "computer-cli"],
+    toolset: "loop",
+    run: forward("computer_runtime.process_read")
+  },
+  {
+    name: "computer_process_terminate",
+    title: "Terminate a background process",
+    description: "Terminate one process returned by computer_exec(background=true), including its provider-owned process tree. Returns the observed terminal state so ChatGPT can stop long verification explicitly without shell PIDs or ps/kill workarounds.",
+    inputSchema: {
+      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
+      processId: exports_external.string().min(1).describe("the opaque processId returned by computer_exec(background=true), proc_…")
+    },
+    surfaces: ["computer-mcp", "computer-cli"],
+    toolset: "loop",
+    run: forward("computer_runtime.process_terminate")
+  },
   {
     name: "computer_status",
     title: "Inspect a computer",
@@ -18308,6 +18355,7 @@ var ACTION_DEFINITIONS = [
       assetsPath: exports_external.string().optional().describe("optional absolute static-asset directory under /workspace"),
       runtimeEntrypoint: exports_external.enum(["fetch", "durable-object"]).describe("fetch for stateless Apps; durable-object must export class App"),
       compatibilityDate: exports_external.string().describe("Cloudflare compatibility date, YYYY-MM-DD"),
+      compatibilityFlags: exports_external.array(exports_external.enum(["nodejs_compat"])).max(1).optional().describe("allowlisted Cloudflare compatibility flags required by this Worker"),
       stateSchemaVersion: exports_external.number().int().min(0).optional().describe("durable schema this release writes; default 0"),
       stateCompatibleFrom: exports_external.number().int().min(0).optional().describe("oldest durable schema this code can open"),
       stateCompatibleThrough: exports_external.number().int().min(0).optional().describe("newest durable schema this code can open"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.17.2",
+  "version": "0.17.4",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",