@lambdacurry/arbor 0.17.4 → 0.17.6

package/dist/arbor.js

@@ -16678,6 +16678,7 @@ var redactedComputerRecipe = exports_external.looseObject({
   provider: exports_external.string(),
   backend: exports_external.enum(["worker-shell", "container"]),
   containerProfile: nullableString,
+  containerProfileRevision: exports_external.number().int().nullable(),
   repositories: exports_external.array(exports_external.string()),
   setupScriptConfigured: exports_external.boolean(),
   configRevision: exports_external.string(),
@@ -17345,7 +17346,13 @@ var MCP_OUTPUT_SCHEMAS = {
     repositories: exports_external.array(exports_external.looseObject({ repository: exports_external.string(), path: exports_external.string() })),
     defaultCwd: exports_external.string(),
     capabilities: computerCapabilityCard,
-    runtime: jsonObject
+    runtime: jsonObject,
+    reconciliation: exports_external.looseObject({
+      action: exports_external.literal("automatic_reprovision"),
+      reason: exports_external.literal("container_profile_revision"),
+      fromContainerProfileRevision: exports_external.number().int().nullable(),
+      toContainerProfileRevision: exports_external.number().int().nullable()
+    }).optional()
   }),
   computer_reprovision: exports_external.looseObject({
     reprovisionId: id,
@@ -17415,11 +17422,6 @@ var MCP_OUTPUT_SCHEMAS = {
       sha256: exports_external.string()
     })
   }),
-  computer_read: exports_external.looseObject({
-    content: exports_external.string(),
-    size: exports_external.number().optional(),
-    encoding: exports_external.string().optional()
-  }),
   computer_export: exports_external.looseObject({
     computerSessionId: id,
     replayed: exports_external.boolean(),
@@ -17431,56 +17433,6 @@ var MCP_OUTPUT_SCHEMAS = {
     path: exports_external.string().optional(),
     size: exports_external.number().optional()
   }),
-  computer_clone: exports_external.looseObject({
-    ok: exports_external.literal(true),
-    operation: exports_external.literal("clone"),
-    repository: exports_external.string(),
-    dir: exports_external.string(),
-    credential: exports_external.literal("caller"),
-    branch: exports_external.string().optional(),
-    head: exports_external.string().optional(),
-    refs: exports_external.array(exports_external.string()).optional()
-  }),
-  computer_fetch: exports_external.looseObject({
-    ok: exports_external.literal(true),
-    operation: exports_external.literal("fetch"),
-    repository: exports_external.string(),
-    dir: exports_external.string(),
-    credential: exports_external.enum(["caller", "arbor-managed"]),
-    branch: exports_external.string().optional(),
-    head: exports_external.string().optional(),
-    fetchHead: exports_external.string().optional(),
-    refs: exports_external.array(exports_external.string()).optional()
-  }),
-  computer_pull: exports_external.looseObject({
-    ok: exports_external.literal(true),
-    operation: exports_external.literal("pull"),
-    repository: exports_external.string(),
-    dir: exports_external.string(),
-    credential: exports_external.enum(["caller", "arbor-managed"]),
-    branch: exports_external.string().optional(),
-    head: exports_external.string().optional(),
-    before: exports_external.string().optional(),
-    after: exports_external.string().optional(),
-    fetchHead: exports_external.string().optional(),
-    refs: exports_external.array(exports_external.string()).optional(),
-    remoteTracking: exports_external.union([
-      exports_external.looseObject({ updated: exports_external.literal(true), ref: exports_external.string(), head: exports_external.string() }),
-      exports_external.looseObject({ updated: exports_external.literal(false), reason: exports_external.literal("untracked_workspace") })
-    ])
-  }),
-  computer_push: exports_external.looseObject({
-    ok: exports_external.literal(true),
-    operation: exports_external.literal("push"),
-    repository: exports_external.string(),
-    dir: exports_external.string(),
-    credential: exports_external.enum(["caller", "github-user"]),
-    branch: exports_external.string().optional(),
-    head: exports_external.string().optional(),
-    before: exports_external.string().optional(),
-    after: exports_external.string().optional(),
-    refs: exports_external.array(exports_external.string()).optional()
-  }),
   computer_checkpoint: checkpoint,
   computer_publish_preview: exports_external.looseObject({
     previewId: id,
@@ -17595,12 +17547,6 @@ var destructiveOpenWorld = {
   idempotentHint: false,
   openWorldHint: true
 };
-var idempotentOpenWorld = {
-  readOnlyHint: false,
-  destructiveHint: false,
-  idempotentHint: true,
-  openWorldHint: true
-};
 var MCP_TOOL_ANNOTATIONS = {
   server_info: readOnly,
   recall: readOnly,
@@ -17684,13 +17630,8 @@ var MCP_TOOL_ANNOTATIONS = {
   code_implementations: readOnly,
   code_diagnostics: readOnly,
   computer_verify: openWorld,
-  computer_read: readOnly,
   computer_export: idempotent,
   computer_write: destructive,
-  computer_clone: idempotentOpenWorld,
-  computer_fetch: idempotentOpenWorld,
-  computer_pull: destructiveOpenWorld,
-  computer_push: destructiveOpenWorld,
   computer_checkpoint: additive,
   computer_publish_preview: idempotent,
   computer_publish_app_bundle: idempotent,
@@ -18056,7 +17997,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_open",
     title: "Open a Thread computer",
-    description: "Open or resume this Thread's project environment for filesystem or command work. Every configured repository is re-authorized through its explicit GitHub connection; a fresh reusable base clones it with a request-scoped contents:read credential before strict setup runs, while a restore receives no credential. Returns computerSessionId — pass it unchanged to later Computer tools and cited work — plus the selected profile contract (including GitHub CLI (gh) on bun-typescript-v1), a resolved capabilities card, workspaceRoot, each materialized repositories[].path, and defaultCwd. Omitted computer_exec.cwd uses defaultCwd: the single checkout when exactly one repository is configured, workspaceRoot otherwise.",
+    description: "Open or resume this Thread's project environment for filesystem or command work. A safe living-profile revision drift is reconciled automatically by replacing the generation, restoring supported state, and returning reconciliation metadata; structural recipe changes still fail explicitly with computer_reprovision as the suggested action. Every configured repository is re-authorized through its explicit GitHub connection; a fresh reusable base clones it with a request-scoped contents:read credential before strict setup runs, while a restore receives no credential. Returns computerSessionId — pass it unchanged to later Computer tools and cited work — plus the selected profile contract (including GitHub CLI (gh) on bun-typescript-v1), a resolved capabilities card, workspaceRoot, each materialized repositories[].path, and defaultCwd. Omitted computer_exec.cwd uses defaultCwd: the single checkout when exactly one repository is configured, workspaceRoot otherwise.",
     inputSchema: {
       threadId: exports_external.string().describe("the Arbor Thread whose stable computer to open, thr_…"),
       vcpus: exports_external.number().int().min(1).max(4).optional().describe("optional container vCPU request"),
@@ -18208,18 +18149,6 @@ var ACTION_DEFINITIONS = [
     toolset: "loop",
     run: forward("computer_code.diagnostics")
   },
-  {
-    name: "computer_read",
-    title: "Read a project file",
-    description: "Read one file from the opened computer when command output is the wrong shape. Paths must stay under /workspace.",
-    inputSchema: {
-      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
-      path: exports_external.string().describe("absolute path under /workspace")
-    },
-    surfaces: ["computer-mcp", "computer-cli"],
-    toolset: "loop",
-    run: forward("computer_runtime.read")
-  },
   {
     name: "computer_export",
     title: "Export a Thread file",
@@ -18248,81 +18177,10 @@ var ACTION_DEFINITIONS = [
     toolset: "loop",
     run: forward("computer_runtime.write")
   },
-  {
-    name: "computer_clone",
-    title: "Clone an allowed repository",
-    description: "Clone a repository named by the resolved computer recipe, supplying the working collaborator's GitHub token just in time. The token is spent only on this call and is neither returned nor persisted in the workspace.",
-    inputSchema: {
-      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
-      repository: exports_external.string().describe("allowed owner/repository slug"),
-      githubToken: exports_external.string().min(1).describe("short-lived GitHub token supplied by the caller"),
-      githubUsername: exports_external.string().optional().describe("GitHub username; defaults to x-access-token")
-    },
-    surfaces: ["computer-mcp", "computer-cli"],
-    toolset: "loop",
-    run: forward("computer_runtime.clone")
-  },
-  {
-    name: "computer_sync",
-    title: "Sync an allowed repository",
-    description: "Fetch, fast-forward pull, or push the checked-out branch of a cloned recipe repository. OMIT githubToken to refresh a repository named in this computer's effective recipe with Arbor's own managed credential — Arbor rechecks the repository connection and mints a request-scoped one-repository read credential server-side, so a restored computer can reach current history with no token of yours. Managed refresh covers fetch and pull; push writes to GitHub, so omit githubToken there to push as the signed-in human's GitHub identity connected in Account Settings, or supply your just-in-time collaborator token as an override. The lightweight Computer fixes the allowlisted GitHub URL, never force-pushes or deletes refs, and neither stores nor returns either credential.",
-    inputSchema: {
-      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
-      repository: exports_external.string().describe("allowed owner/repository slug already cloned by computer_clone"),
-      operation: exports_external.enum(["fetch", "pull", "push"]).describe("network operation to perform"),
-      githubToken: exports_external.string().min(1).optional().describe("short-lived collaborator GitHub token; omit for fetch/pull to use Arbor's managed read credential, or for push to use the signed-in human's connected GitHub identity"),
-      githubUsername: exports_external.string().optional().describe("GitHub username for a supplied githubToken; defaults to x-access-token")
-    },
-    surfaces: ["computer-cli"],
-    toolset: "loop",
-    run: forward("computer_runtime.sync")
-  },
-  {
-    name: "computer_fetch",
-    title: "Fetch an allowed repository",
-    description: `Fetch remote refs for a cloned recipe repository without changing its checked-out branch or any remote ref. OMIT githubToken and Arbor refreshes it for you: it rechecks that the repository is in this computer's effective recipe and still connected, mints a request-scoped one-repository read credential server-side, spends it on this fetch alone, and returns credential: "arbor-managed" — this is the way a RESTORED computer, which deliberately holds no credential, catches up with the remote. Supply githubToken instead to fetch as the collaborator. Neither credential is stored or returned.`,
-    inputSchema: {
-      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
-      repository: exports_external.string().describe("allowed owner/repository slug already cloned"),
-      githubToken: exports_external.string().min(1).optional().describe("short-lived collaborator GitHub token; omit to use Arbor's managed recipe credential"),
-      githubUsername: exports_external.string().optional().describe("GitHub username for a supplied githubToken; defaults to x-access-token")
-    },
-    surfaces: ["computer-mcp"],
-    toolset: "loop",
-    run: (ex, input) => ex.call("computer_runtime.sync", { ...input, operation: "fetch" })
-  },
-  {
-    name: "computer_pull",
-    title: "Fast-forward an allowed repository",
-    description: "Fetch and fast-forward the checked-out branch of a cloned recipe repository; divergent history, a dirty working tree, and anything needing a merge are rejected rather than forced. A returned pull also PROVES the branch's remote-tracking ref reached the fetched tip and reports it as remoteTracking, so ordinary `git status` and `git log origin/<branch>` stay true instead of showing a level checkout as ahead; if that cannot be proven the call fails as retryable with the landed fast-forward attached, rather than reporting a truthful pull it did not verify. remoteTracking.updated is false only when the checked-out branch does not track this repository at all. OMIT githubToken and Arbor pulls with its own managed recipe credential after rechecking the repository connection — the way a restored computer reaches current history. Supply githubToken instead to pull as the collaborator. Neither credential is stored or returned.",
-    inputSchema: {
-      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
-      repository: exports_external.string().describe("allowed owner/repository slug already cloned"),
-      githubToken: exports_external.string().min(1).optional().describe("short-lived collaborator GitHub token; omit to use Arbor's managed recipe credential"),
-      githubUsername: exports_external.string().optional().describe("GitHub username for a supplied githubToken; defaults to x-access-token")
-    },
-    surfaces: ["computer-mcp"],
-    toolset: "loop",
-    run: (ex, input) => ex.call("computer_runtime.sync", { ...input, operation: "pull" })
-  },
-  {
-    name: "computer_push",
-    title: "Push an allowed repository",
-    description: "Push the checked-out branch to its fixed allowlisted GitHub repository without force-pushing or deleting refs. OMIT githubToken to use the signed-in human's GitHub connection from Account Settings; Arbor refreshes that GitHub App user credential server-side and never returns or persists it in the Computer. Supply githubToken only for an explicit caller credential override.",
-    inputSchema: {
-      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
-      repository: exports_external.string().describe("allowed owner/repository slug already cloned"),
-      githubToken: exports_external.string().min(1).optional().describe("optional short-lived GitHub token override; omit to use your connected GitHub identity"),
-      githubUsername: exports_external.string().optional().describe("GitHub username for a supplied githubToken; omit for your connected GitHub identity")
-    },
-    surfaces: ["computer-mcp"],
-    toolset: "loop",
-    run: (ex, input) => ex.call("computer_runtime.sync", { ...input, operation: "push" })
-  },
   {
     name: "computer_checkpoint",
     title: "Checkpoint completed work",
-    description: "Save an intermediate complete unit of project work into durable Thread lineage. For the final unit, call computer_stop instead; it performs the final checkpoint before teardown. No checkpoint is needed for computer_verify alone because remote visual capture starts no project runtime.",
+    description: "Save an intermediate complete unit of project work into durable Thread lineage. A running background process may still be writing the workspace, so checkpointing refuses until it is finished or explicitly terminated; use computer_status to inspect active processes. For the final unit, call computer_stop instead; it performs the final checkpoint before teardown. No checkpoint is needed for computer_verify alone because remote visual capture starts no project runtime.",
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…")
     },
@@ -18369,7 +18227,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_stop",
     title: "Checkpoint and stop",
-    description: "Finish an opened computer after a unit of work. Currybox checkpoints and Arbor publishes before teardown; any durability failure refuses the stop instead of silently discarding state.",
+    description: "Finish an opened computer after a unit of work. Currybox checkpoints and Arbor publishes before teardown; any durability failure refuses the stop instead of silently discarding state. A running background process also refuses the checkpoint; use computer_status to inspect it and computer_process_terminate when it should be stopped.",
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…")
     },
@@ -19921,6 +19779,9 @@ function parseErrorDetails(value) {
   if (typeof raw.compatibilityState === "string") {
     details.compatibilityState = raw.compatibilityState;
   }
+  if (typeof raw.compatibilityReason === "string") {
+    details.compatibilityReason = raw.compatibilityReason;
+  }
   if (typeof raw.suggestedAction === "string")
     details.suggestedAction = raw.suggestedAction;
   return details;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.17.4",
+  "version": "0.17.6",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",