@lambdacurry/arbor 0.17.3 → 0.17.5

package/dist/arbor.js

@@ -16678,6 +16678,7 @@ var redactedComputerRecipe = exports_external.looseObject({
   provider: exports_external.string(),
   backend: exports_external.enum(["worker-shell", "container"]),
   containerProfile: nullableString,
+  containerProfileRevision: exports_external.number().int().nullable(),
   repositories: exports_external.array(exports_external.string()),
   setupScriptConfigured: exports_external.boolean(),
   configRevision: exports_external.string(),
@@ -17345,7 +17346,13 @@ var MCP_OUTPUT_SCHEMAS = {
     repositories: exports_external.array(exports_external.looseObject({ repository: exports_external.string(), path: exports_external.string() })),
     defaultCwd: exports_external.string(),
     capabilities: computerCapabilityCard,
-    runtime: jsonObject
+    runtime: jsonObject,
+    reconciliation: exports_external.looseObject({
+      action: exports_external.literal("automatic_reprovision"),
+      reason: exports_external.literal("container_profile_revision"),
+      fromContainerProfileRevision: exports_external.number().int().nullable(),
+      toContainerProfileRevision: exports_external.number().int().nullable()
+    }).optional()
   }),
   computer_reprovision: exports_external.looseObject({
     reprovisionId: id,
@@ -17365,10 +17372,29 @@ var MCP_OUTPUT_SCHEMAS = {
     stderr: exports_external.string().optional(),
     exitCode: exports_external.number().optional(),
     jobId: exports_external.string().optional(),
+    processId: exports_external.string().optional(),
     status: exports_external.string().optional(),
     cwd: exports_external.string(),
     strict: exports_external.boolean()
   }),
+  computer_process_read: exports_external.looseObject({
+    processId: id,
+    status: exports_external.string(),
+    command: exports_external.string().optional(),
+    cwd: exports_external.string().optional(),
+    startedAt: timestamp.nullable().optional(),
+    endedAt: timestamp.nullable().optional(),
+    durationMs: exports_external.number().int().min(0).nullable().optional(),
+    stdout: exports_external.string().optional(),
+    stderr: exports_external.string().optional(),
+    truncated: exports_external.boolean().optional(),
+    exitCode: exports_external.number().int().nullable().optional()
+  }),
+  computer_process_terminate: exports_external.looseObject({
+    processId: id,
+    status: exports_external.string(),
+    terminated: exports_external.boolean().optional()
+  }),
   computer_status: exports_external.looseObject({
     computerSessionId: id,
     computerId: id,
@@ -17656,6 +17682,8 @@ var MCP_TOOL_ANNOTATIONS = {
   computer_open: additive,
   computer_reprovision: destructiveIdempotent,
   computer_exec: destructiveOpenWorld,
+  computer_process_read: readOnly,
+  computer_process_terminate: destructiveOpenWorld,
   computer_status: readOnly,
   code_symbols: readOnly,
   code_find_symbol: readOnly,
@@ -17968,7 +17996,7 @@ var ACTION_DEFINITIONS = [
     description: "Replace your organization's sparse computer-default layer without allocating runtime state. Omitted/null values fall back to provider defaults; Space, Topic, and Thread layers may override individual fields.",
     inputSchema: {
       backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("default execution tier, or null to use worker-shell"),
-      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, Bun 1.3.3, bunx, Node 26.5.1, pnpm 10.33.0, and ripgrep (rg), or null to clear"),
+      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, GitHub CLI (gh), Bun 1.3.3, bunx, Node 26.5.1, pnpm 10.33.0, Python 3.13.15 (python/python3), jq, and ripgrep (rg), or null to clear"),
       setupScript: exports_external.string().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize, or null to clear"),
       repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
     },
@@ -17983,7 +18011,7 @@ var ACTION_DEFINITIONS = [
     inputSchema: {
       spaceId: exports_external.string().describe("the Space, spc_…"),
       backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
-      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, Bun 1.3.3, bunx, Node 26.5.1, pnpm 10.33.0, and ripgrep (rg), or null to clear inherited profile"),
+      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, GitHub CLI (gh), Bun 1.3.3, bunx, Node 26.5.1, pnpm 10.33.0, Python 3.13.15 (python/python3), jq, and ripgrep (rg), or null to clear inherited profile"),
       setupScript: exports_external.string().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize, or null to clear"),
       repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
     },
@@ -17998,7 +18026,7 @@ var ACTION_DEFINITIONS = [
     inputSchema: {
       topicId: exports_external.string().describe("the Topic, top_…"),
       backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
-      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, Bun 1.3.3, bunx, Node 26.5.1, pnpm 10.33.0, and ripgrep (rg), or null to clear inherited profile"),
+      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, GitHub CLI (gh), Bun 1.3.3, bunx, Node 26.5.1, pnpm 10.33.0, Python 3.13.15 (python/python3), jq, and ripgrep (rg), or null to clear inherited profile"),
       setupScript: exports_external.string().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize"),
       repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
     },
@@ -18013,7 +18041,7 @@ var ACTION_DEFINITIONS = [
     inputSchema: {
       threadId: exports_external.string().describe("the Thread, thr_…"),
       backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
-      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, Bun 1.3.3, bunx, Node 26.5.1, pnpm 10.33.0, and ripgrep (rg), or null to clear inherited profile"),
+      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, GitHub CLI (gh), Bun 1.3.3, bunx, Node 26.5.1, pnpm 10.33.0, Python 3.13.15 (python/python3), jq, and ripgrep (rg), or null to clear inherited profile"),
       setupScript: exports_external.string().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize"),
       repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
     },
@@ -18035,7 +18063,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_open",
     title: "Open a Thread computer",
-    description: "Open or resume this Thread's project environment for filesystem or command work. Every configured repository is re-authorized through its explicit GitHub connection; a fresh reusable base clones it with a request-scoped contents:read credential before strict setup runs, while a restore receives no credential. Returns computerSessionId — pass it unchanged to later Computer tools and cited work — plus the selected profile contract, a resolved capabilities card, workspaceRoot, each materialized repositories[].path, and defaultCwd. Omitted computer_exec.cwd uses defaultCwd: the single checkout when exactly one repository is configured, workspaceRoot otherwise.",
+    description: "Open or resume this Thread's project environment for filesystem or command work. A safe living-profile revision drift is reconciled automatically by replacing the generation, restoring supported state, and returning reconciliation metadata; structural recipe changes still fail explicitly with computer_reprovision as the suggested action. Every configured repository is re-authorized through its explicit GitHub connection; a fresh reusable base clones it with a request-scoped contents:read credential before strict setup runs, while a restore receives no credential. Returns computerSessionId — pass it unchanged to later Computer tools and cited work — plus the selected profile contract (including GitHub CLI (gh) on bun-typescript-v1), a resolved capabilities card, workspaceRoot, each materialized repositories[].path, and defaultCwd. Omitted computer_exec.cwd uses defaultCwd: the single checkout when exactly one repository is configured, workspaceRoot otherwise.",
     inputSchema: {
       threadId: exports_external.string().describe("the Arbor Thread whose stable computer to open, thr_…"),
       vcpus: exports_external.number().int().min(1).max(4).optional().describe("optional container vCPU request"),
@@ -18061,7 +18089,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_exec",
     title: "Run a command",
-    description: "Run one bounded logical operation in an opened Thread computer. Omitting cwd runs from the Computer's defaultCwd — the one materialized checkout when the recipe has exactly one repository, otherwise the workspace root — and the receipt echoes the cwd it ran in; pass cwd explicitly to override it. Strict Bash semantics are ON by default: an early command failure or failed pipeline makes the execution nonzero, while explicit handling such as `cmd || fallback` still works. Set strict=false only for an intentional best-effort script. For a connected human working inside a configured repository, Arbor supplies that human’s GitHub-linked author/committer identity ephemerally for the exec without writing it into the workspace; command-local Git environment overrides may still replace it. Use background only for the container backend; worker-shell deliberately serializes mutations and rejects long-lived processes.",
+    description: "Run one bounded logical operation in an opened Thread computer. Omitting cwd runs from the Computer's defaultCwd — the one materialized checkout when the recipe has exactly one repository, otherwise the workspace root — and the receipt echoes the cwd it ran in; pass cwd explicitly to override it. Strict Bash semantics are ON by default: an early command failure or failed pipeline makes the execution nonzero, while explicit handling such as `cmd || fallback` still works. Set strict=false only for an intentional best-effort script. For a connected human, Arbor supplies ambient GitHub authorization for normal gh/HTTPS Git commands and GitHub-linked author/committer identity ephemerally for every exec without writing credentials into the workspace; command-local Git environment overrides may still replace the identity. Use background only for the container backend; it returns a processId for computer_process_read / computer_process_terminate. worker-shell deliberately serializes mutations and rejects long-lived processes.",
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
       command: exports_external.string().min(1).describe("the shell command to run"),
@@ -18074,6 +18102,31 @@ var ACTION_DEFINITIONS = [
     toolset: "loop",
     run: forward("computer_runtime.exec")
   },
+  {
+    name: "computer_process_read",
+    title: "Read a background process",
+    description: "READ ONLY: Inspect one process returned by computer_exec(background=true). Returns provider-owned lifecycle metadata plus bounded latest stdout/stderr and, once terminal, the final exit result. Re-read the same processId for progress without sentinel files or shell process archaeology.",
+    inputSchema: {
+      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
+      processId: exports_external.string().min(1).describe("the opaque processId returned by computer_exec(background=true), proc_…"),
+      maxBytes: exports_external.number().int().min(1024).max(65536).optional().describe("maximum combined output bytes to return; default 16,384")
+    },
+    surfaces: ["computer-mcp", "computer-cli"],
+    toolset: "loop",
+    run: forward("computer_runtime.process_read")
+  },
+  {
+    name: "computer_process_terminate",
+    title: "Terminate a background process",
+    description: "Terminate one process returned by computer_exec(background=true), including its provider-owned process tree. Returns the observed terminal state so ChatGPT can stop long verification explicitly without shell PIDs or ps/kill workarounds.",
+    inputSchema: {
+      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
+      processId: exports_external.string().min(1).describe("the opaque processId returned by computer_exec(background=true), proc_…")
+    },
+    surfaces: ["computer-mcp", "computer-cli"],
+    toolset: "loop",
+    run: forward("computer_runtime.process_terminate")
+  },
   {
     name: "computer_status",
     title: "Inspect a computer",
@@ -18276,7 +18329,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_checkpoint",
     title: "Checkpoint completed work",
-    description: "Save an intermediate complete unit of project work into durable Thread lineage. For the final unit, call computer_stop instead; it performs the final checkpoint before teardown. No checkpoint is needed for computer_verify alone because remote visual capture starts no project runtime.",
+    description: "Save an intermediate complete unit of project work into durable Thread lineage. A running background process may still be writing the workspace, so checkpointing refuses until it is finished or explicitly terminated; use computer_status to inspect active processes. For the final unit, call computer_stop instead; it performs the final checkpoint before teardown. No checkpoint is needed for computer_verify alone because remote visual capture starts no project runtime.",
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…")
     },
@@ -18323,7 +18376,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_stop",
     title: "Checkpoint and stop",
-    description: "Finish an opened computer after a unit of work. Currybox checkpoints and Arbor publishes before teardown; any durability failure refuses the stop instead of silently discarding state.",
+    description: "Finish an opened computer after a unit of work. Currybox checkpoints and Arbor publishes before teardown; any durability failure refuses the stop instead of silently discarding state. A running background process also refuses the checkpoint; use computer_status to inspect it and computer_process_terminate when it should be stopped.",
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…")
     },
@@ -19875,6 +19928,9 @@ function parseErrorDetails(value) {
   if (typeof raw.compatibilityState === "string") {
     details.compatibilityState = raw.compatibilityState;
   }
+  if (typeof raw.compatibilityReason === "string") {
+    details.compatibilityReason = raw.compatibilityReason;
+  }
   if (typeof raw.suggestedAction === "string")
     details.suggestedAction = raw.suggestedAction;
   return details;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.17.3",
+  "version": "0.17.5",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",