@lambdacurry/arbor 0.17.5 → 0.17.6

package/dist/arbor.js

@@ -17422,11 +17422,6 @@ var MCP_OUTPUT_SCHEMAS = {
       sha256: exports_external.string()
     })
   }),
-  computer_read: exports_external.looseObject({
-    content: exports_external.string(),
-    size: exports_external.number().optional(),
-    encoding: exports_external.string().optional()
-  }),
   computer_export: exports_external.looseObject({
     computerSessionId: id,
     replayed: exports_external.boolean(),
@@ -17438,56 +17433,6 @@ var MCP_OUTPUT_SCHEMAS = {
     path: exports_external.string().optional(),
     size: exports_external.number().optional()
   }),
-  computer_clone: exports_external.looseObject({
-    ok: exports_external.literal(true),
-    operation: exports_external.literal("clone"),
-    repository: exports_external.string(),
-    dir: exports_external.string(),
-    credential: exports_external.literal("caller"),
-    branch: exports_external.string().optional(),
-    head: exports_external.string().optional(),
-    refs: exports_external.array(exports_external.string()).optional()
-  }),
-  computer_fetch: exports_external.looseObject({
-    ok: exports_external.literal(true),
-    operation: exports_external.literal("fetch"),
-    repository: exports_external.string(),
-    dir: exports_external.string(),
-    credential: exports_external.enum(["caller", "arbor-managed"]),
-    branch: exports_external.string().optional(),
-    head: exports_external.string().optional(),
-    fetchHead: exports_external.string().optional(),
-    refs: exports_external.array(exports_external.string()).optional()
-  }),
-  computer_pull: exports_external.looseObject({
-    ok: exports_external.literal(true),
-    operation: exports_external.literal("pull"),
-    repository: exports_external.string(),
-    dir: exports_external.string(),
-    credential: exports_external.enum(["caller", "arbor-managed"]),
-    branch: exports_external.string().optional(),
-    head: exports_external.string().optional(),
-    before: exports_external.string().optional(),
-    after: exports_external.string().optional(),
-    fetchHead: exports_external.string().optional(),
-    refs: exports_external.array(exports_external.string()).optional(),
-    remoteTracking: exports_external.union([
-      exports_external.looseObject({ updated: exports_external.literal(true), ref: exports_external.string(), head: exports_external.string() }),
-      exports_external.looseObject({ updated: exports_external.literal(false), reason: exports_external.literal("untracked_workspace") })
-    ])
-  }),
-  computer_push: exports_external.looseObject({
-    ok: exports_external.literal(true),
-    operation: exports_external.literal("push"),
-    repository: exports_external.string(),
-    dir: exports_external.string(),
-    credential: exports_external.enum(["caller", "github-user"]),
-    branch: exports_external.string().optional(),
-    head: exports_external.string().optional(),
-    before: exports_external.string().optional(),
-    after: exports_external.string().optional(),
-    refs: exports_external.array(exports_external.string()).optional()
-  }),
   computer_checkpoint: checkpoint,
   computer_publish_preview: exports_external.looseObject({
     previewId: id,
@@ -17602,12 +17547,6 @@ var destructiveOpenWorld = {
   idempotentHint: false,
   openWorldHint: true
 };
-var idempotentOpenWorld = {
-  readOnlyHint: false,
-  destructiveHint: false,
-  idempotentHint: true,
-  openWorldHint: true
-};
 var MCP_TOOL_ANNOTATIONS = {
   server_info: readOnly,
   recall: readOnly,
@@ -17691,13 +17630,8 @@ var MCP_TOOL_ANNOTATIONS = {
   code_implementations: readOnly,
   code_diagnostics: readOnly,
   computer_verify: openWorld,
-  computer_read: readOnly,
   computer_export: idempotent,
   computer_write: destructive,
-  computer_clone: idempotentOpenWorld,
-  computer_fetch: idempotentOpenWorld,
-  computer_pull: destructiveOpenWorld,
-  computer_push: destructiveOpenWorld,
   computer_checkpoint: additive,
   computer_publish_preview: idempotent,
   computer_publish_app_bundle: idempotent,
@@ -18215,18 +18149,6 @@ var ACTION_DEFINITIONS = [
     toolset: "loop",
     run: forward("computer_code.diagnostics")
   },
-  {
-    name: "computer_read",
-    title: "Read a project file",
-    description: "Read one file from the opened computer when command output is the wrong shape. Paths must stay under /workspace.",
-    inputSchema: {
-      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
-      path: exports_external.string().describe("absolute path under /workspace")
-    },
-    surfaces: ["computer-mcp", "computer-cli"],
-    toolset: "loop",
-    run: forward("computer_runtime.read")
-  },
   {
     name: "computer_export",
     title: "Export a Thread file",
@@ -18255,77 +18177,6 @@ var ACTION_DEFINITIONS = [
     toolset: "loop",
     run: forward("computer_runtime.write")
   },
-  {
-    name: "computer_clone",
-    title: "Clone an allowed repository",
-    description: "Clone a repository named by the resolved computer recipe, supplying the working collaborator's GitHub token just in time. The token is spent only on this call and is neither returned nor persisted in the workspace.",
-    inputSchema: {
-      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
-      repository: exports_external.string().describe("allowed owner/repository slug"),
-      githubToken: exports_external.string().min(1).describe("short-lived GitHub token supplied by the caller"),
-      githubUsername: exports_external.string().optional().describe("GitHub username; defaults to x-access-token")
-    },
-    surfaces: ["computer-mcp", "computer-cli"],
-    toolset: "loop",
-    run: forward("computer_runtime.clone")
-  },
-  {
-    name: "computer_sync",
-    title: "Sync an allowed repository",
-    description: "Fetch, fast-forward pull, or push the checked-out branch of a cloned recipe repository. OMIT githubToken to refresh a repository named in this computer's effective recipe with Arbor's own managed credential — Arbor rechecks the repository connection and mints a request-scoped one-repository read credential server-side, so a restored computer can reach current history with no token of yours. Managed refresh covers fetch and pull; push writes to GitHub, so omit githubToken there to push as the signed-in human's GitHub identity connected in Account Settings, or supply your just-in-time collaborator token as an override. The lightweight Computer fixes the allowlisted GitHub URL, never force-pushes or deletes refs, and neither stores nor returns either credential.",
-    inputSchema: {
-      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
-      repository: exports_external.string().describe("allowed owner/repository slug already cloned by computer_clone"),
-      operation: exports_external.enum(["fetch", "pull", "push"]).describe("network operation to perform"),
-      githubToken: exports_external.string().min(1).optional().describe("short-lived collaborator GitHub token; omit for fetch/pull to use Arbor's managed read credential, or for push to use the signed-in human's connected GitHub identity"),
-      githubUsername: exports_external.string().optional().describe("GitHub username for a supplied githubToken; defaults to x-access-token")
-    },
-    surfaces: ["computer-cli"],
-    toolset: "loop",
-    run: forward("computer_runtime.sync")
-  },
-  {
-    name: "computer_fetch",
-    title: "Fetch an allowed repository",
-    description: `Fetch remote refs for a cloned recipe repository without changing its checked-out branch or any remote ref. OMIT githubToken and Arbor refreshes it for you: it rechecks that the repository is in this computer's effective recipe and still connected, mints a request-scoped one-repository read credential server-side, spends it on this fetch alone, and returns credential: "arbor-managed" — this is the way a RESTORED computer, which deliberately holds no credential, catches up with the remote. Supply githubToken instead to fetch as the collaborator. Neither credential is stored or returned.`,
-    inputSchema: {
-      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
-      repository: exports_external.string().describe("allowed owner/repository slug already cloned"),
-      githubToken: exports_external.string().min(1).optional().describe("short-lived collaborator GitHub token; omit to use Arbor's managed recipe credential"),
-      githubUsername: exports_external.string().optional().describe("GitHub username for a supplied githubToken; defaults to x-access-token")
-    },
-    surfaces: ["computer-mcp"],
-    toolset: "loop",
-    run: (ex, input) => ex.call("computer_runtime.sync", { ...input, operation: "fetch" })
-  },
-  {
-    name: "computer_pull",
-    title: "Fast-forward an allowed repository",
-    description: "Fetch and fast-forward the checked-out branch of a cloned recipe repository; divergent history, a dirty working tree, and anything needing a merge are rejected rather than forced. A returned pull also PROVES the branch's remote-tracking ref reached the fetched tip and reports it as remoteTracking, so ordinary `git status` and `git log origin/<branch>` stay true instead of showing a level checkout as ahead; if that cannot be proven the call fails as retryable with the landed fast-forward attached, rather than reporting a truthful pull it did not verify. remoteTracking.updated is false only when the checked-out branch does not track this repository at all. OMIT githubToken and Arbor pulls with its own managed recipe credential after rechecking the repository connection — the way a restored computer reaches current history. Supply githubToken instead to pull as the collaborator. Neither credential is stored or returned.",
-    inputSchema: {
-      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
-      repository: exports_external.string().describe("allowed owner/repository slug already cloned"),
-      githubToken: exports_external.string().min(1).optional().describe("short-lived collaborator GitHub token; omit to use Arbor's managed recipe credential"),
-      githubUsername: exports_external.string().optional().describe("GitHub username for a supplied githubToken; defaults to x-access-token")
-    },
-    surfaces: ["computer-mcp"],
-    toolset: "loop",
-    run: (ex, input) => ex.call("computer_runtime.sync", { ...input, operation: "pull" })
-  },
-  {
-    name: "computer_push",
-    title: "Push an allowed repository",
-    description: "Push the checked-out branch to its fixed allowlisted GitHub repository without force-pushing or deleting refs. OMIT githubToken to use the signed-in human's GitHub connection from Account Settings; Arbor refreshes that GitHub App user credential server-side and never returns or persists it in the Computer. Supply githubToken only for an explicit caller credential override.",
-    inputSchema: {
-      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
-      repository: exports_external.string().describe("allowed owner/repository slug already cloned"),
-      githubToken: exports_external.string().min(1).optional().describe("optional short-lived GitHub token override; omit to use your connected GitHub identity"),
-      githubUsername: exports_external.string().optional().describe("GitHub username for a supplied githubToken; omit for your connected GitHub identity")
-    },
-    surfaces: ["computer-mcp"],
-    toolset: "loop",
-    run: (ex, input) => ex.call("computer_runtime.sync", { ...input, operation: "push" })
-  },
   {
     name: "computer_checkpoint",
     title: "Checkpoint completed work",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.17.5",
+  "version": "0.17.6",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",