@lambdacurry/arbor 0.20.10 → 0.20.12

package/dist/arbor.js

@@ -754,6 +754,33 @@ function alias(table, alias2) {
   return new Proxy(table, new TableAliasProxyHandler(alias2, false));
 }
 
+// ../../node_modules/.pnpm/drizzle-orm@0.38.4_@cloudflare+workers-types@4.20260529.1_@prisma+client@5.22.0_@types+_885285c61ee4b1c788385eea24f801ee/node_modules/drizzle-orm/sqlite-core/checks.js
+class CheckBuilder {
+  constructor(name, value) {
+    this.name = name;
+    this.value = value;
+  }
+  static [entityKind] = "SQLiteCheckBuilder";
+  brand;
+  build(table) {
+    return new Check(table, this);
+  }
+}
+
+class Check {
+  constructor(table, builder) {
+    this.table = table;
+    this.name = builder.name;
+    this.value = builder.value;
+  }
+  static [entityKind] = "SQLiteCheck";
+  name;
+  value;
+}
+function check(name, value) {
+  return new CheckBuilder(name, value);
+}
+
 // ../../node_modules/.pnpm/drizzle-orm@0.38.4_@cloudflare+workers-types@4.20260529.1_@prisma+client@5.22.0_@types+_885285c61ee4b1c788385eea24f801ee/node_modules/drizzle-orm/utils.js
 function getColumnNameAndConfig(a, b) {
   return {
@@ -1742,7 +1769,8 @@ var previewVersions = sqliteTable("preview_versions", {
   fileCount: integer("file_count").notNull(),
   byteCount: integer("byte_count").notNull(),
   computerSessionId: text("computer_session_id").notNull().references(() => computerSessions.id),
-  snapshotId: text("snapshot_id").notNull().references(() => computerSnapshots.id),
+  snapshotId: text("snapshot_id").references(() => computerSnapshots.id),
+  runId: text("run_id").references(() => computerRuns.id),
   publishedByProfileId: text("published_by_profile_id").notNull().references(() => profiles.id),
   idempotencyKey: text("idempotency_key"),
   idempotencyFingerprint: text("idempotency_fingerprint"),
@@ -1755,7 +1783,9 @@ var previewVersions = sqliteTable("preview_versions", {
   hostIdx: uniqueIndex("preview_versions_host_idx").on(t.hostLabel),
   sessionIdx: index("preview_versions_session_idx").on(t.computerSessionId, t.createdAt),
   idempotencyIdx: uniqueIndex("preview_versions_idempotency_idx").on(t.computerSessionId, t.publishedByProfileId, t.idempotencyKey),
-  snapshotIdx: index("preview_versions_snapshot_idx").on(t.snapshotId)
+  snapshotIdx: index("preview_versions_snapshot_idx").on(t.snapshotId),
+  runIdx: index("preview_versions_run_idx").on(t.runId),
+  sourceCheck: check("preview_versions_source_check", sql`(${t.snapshotId} is not null and ${t.runId} is null) or (${t.snapshotId} is null and ${t.runId} is not null)`)
 }));
 var previewVersionFiles = sqliteTable("preview_version_files", {
   versionId: text("version_id").notNull().references(() => previewVersions.id),
@@ -2532,7 +2562,7 @@ __export(exports_external, {
   clone: () => clone,
   cidrv6: () => cidrv62,
   cidrv4: () => cidrv42,
-  check: () => check,
+  check: () => check2,
   catch: () => _catch2,
   boolean: () => boolean2,
   bigint: () => bigint2,
@@ -14649,7 +14679,7 @@ __export(exports_schemas2, {
   codec: () => codec,
   cidrv6: () => cidrv62,
   cidrv4: () => cidrv42,
-  check: () => check,
+  check: () => check2,
   catch: () => _catch2,
   boolean: () => boolean2,
   bigint: () => bigint2,
@@ -14941,8 +14971,8 @@ var ZodType = /* @__PURE__ */ $constructor("ZodType", (inst, def) => {
       reg.add(this, meta2);
       return this;
     },
-    refine(check, params) {
-      return this.check(refine(check, params));
+    refine(check2, params) {
+      return this.check(refine(check2, params));
     },
     superRefine(refinement, params) {
       return this.check(superRefine(refinement, params));
@@ -16084,7 +16114,7 @@ var ZodCustom = /* @__PURE__ */ $constructor("ZodCustom", (inst, def) => {
   ZodType.init(inst, def);
   inst._zod.processJSONSchema = (ctx, json, params) => customProcessor(inst, ctx, json, params);
 });
-function check(fn) {
+function check2(fn) {
   const ch = new $ZodCheck({
     check: "custom"
   });
@@ -16765,6 +16795,60 @@ var computerProfile = exports_external.looseObject({
   tools: exports_external.array(exports_external.string()),
   recommendedEditingPrimitive: exports_external.string()
 });
+var computerRunPublicationState = exports_external.enum(["not-required", "durable", "not-durable", "unknown"]);
+var computerRunDurability = exports_external.looseObject({
+  workspace: exports_external.enum(["shared", "isolated"]),
+  parentMutation: exports_external.enum(["direct", "none"]),
+  providerExecution: exports_external.enum(["parent", "disposable"]),
+  finishDestroysExecution: exports_external.boolean(),
+  baseSnapshotId: id.nullable(),
+  gitPublication: exports_external.looseObject({
+    state: computerRunPublicationState,
+    reasonCode: exports_external.string()
+  })
+});
+var computerRunFinishAssessment = exports_external.looseObject({
+  state: exports_external.enum(["safe", "blocked", "unknown"]),
+  requiresDiscard: exports_external.boolean(),
+  repositories: exports_external.array(exports_external.looseObject({
+    repository: exports_external.string(),
+    path: exports_external.string(),
+    startHead: exports_external.string().nullable(),
+    currentHead: exports_external.string().nullable(),
+    currentDirty: exports_external.boolean().nullable(),
+    changedSinceStart: exports_external.boolean().nullable(),
+    publication: exports_external.looseObject({
+      state: computerRunPublicationState,
+      reasonCode: exports_external.string(),
+      remoteRef: exports_external.string().optional()
+    })
+  }))
+});
+var operatingGuidanceEntry = exports_external.looseObject({
+  class: exports_external.literal("guidance"),
+  scope: exports_external.enum(["space", "topic"]),
+  sourceId: id,
+  strength: exports_external.literal("recommended"),
+  message: exports_external.string()
+});
+var computerAgentBrief = exports_external.looseObject({
+  work: exports_external.looseObject({ threadId: id, title: exports_external.string(), objective: exports_external.string() }),
+  guidance: exports_external.array(operatingGuidanceEntry),
+  computer: exports_external.looseObject({
+    computerId: id,
+    backend: exports_external.enum(["worker-shell", "container"]),
+    containerProfile: exports_external.string().nullable(),
+    repositories: exports_external.array(exports_external.looseObject({ repository: exports_external.string(), path: exports_external.string() })),
+    durableSnapshotId: id.nullable()
+  }),
+  activeRuns: exports_external.array(exports_external.looseObject({
+    runId: id,
+    label: exports_external.string().nullable(),
+    mode: exports_external.enum(["read", "write"]),
+    execution: exports_external.enum(["shared", "isolated"]),
+    status: exports_external.enum(["active", "finished", "failed", "cancelled"])
+  }))
+});
 var computerRunGitStart = exports_external.looseObject({
   repositories: exports_external.array(exports_external.looseObject({
     repository: exports_external.string(),
@@ -16790,6 +16874,7 @@ var computerRun = exports_external.looseObject({
   workspaceDir: exports_external.string(),
   baseSnapshotId: id.nullable(),
   gitStart: computerRunGitStart.nullable().optional(),
+  durability: computerRunDurability,
   status: exports_external.enum(["active", "finished", "failed", "cancelled"]),
   label: exports_external.string().nullable(),
   reason: exports_external.string().nullable(),
@@ -16812,6 +16897,8 @@ var computerRunReceipt = exports_external.looseObject({
   workspace: exports_external.looseObject({ dir: exports_external.string() }),
   baseSnapshotId: id.nullable(),
   gitStart: computerRunGitStart.nullable().optional(),
+  durability: computerRunDurability,
+  finishAssessment: computerRunFinishAssessment.nullable(),
   status: exports_external.enum(["active", "finished", "failed", "cancelled"]),
   outcome: exports_external.enum(["finished", "failed", "cancelled"]).nullable(),
   reason: exports_external.string().nullable(),
@@ -17420,6 +17507,7 @@ var MCP_OUTPUT_SCHEMAS = {
     repositories: exports_external.array(exports_external.looseObject({ repository: exports_external.string(), path: exports_external.string() })),
     defaultCwd: exports_external.string(),
     capabilities: computerCapabilityCard,
+    agentBrief: computerAgentBrief,
     runtime: jsonObject,
     reconciliation: exports_external.looseObject({
       action: exports_external.literal("automatic_reprovision"),
@@ -17433,11 +17521,15 @@ var MCP_OUTPUT_SCHEMAS = {
     execution: exports_external.enum(["shared", "isolated"]),
     baseSnapshotId: id.nullable(),
     gitStart: computerRunGitStart.nullable().optional(),
+    durability: computerRunDurability,
+    guidance: exports_external.array(operatingGuidanceEntry),
     status: exports_external.string()
   }),
   computer_run_finish: exports_external.looseObject({
     status: exports_external.string(),
-    replayed: exports_external.boolean()
+    replayed: exports_external.boolean(),
+    durability: computerRunDurability,
+    finishAssessment: computerRunFinishAssessment.nullable()
   }),
   computer_run_receipt: exports_external.looseObject({
     receipt: computerRunReceipt
@@ -17489,6 +17581,7 @@ var MCP_OUTPUT_SCHEMAS = {
     backend: exports_external.enum(["worker-shell", "container"]),
     profile: computerProfile.nullable(),
     capabilities: computerCapabilityCard,
+    agentBrief: computerAgentBrief,
     runtime: jsonObject
   }),
   computer_verify: exports_external.looseObject({
@@ -17527,9 +17620,12 @@ var MCP_OUTPUT_SCHEMAS = {
     manifestDigest: exports_external.string(),
     fileCount: exports_external.number(),
     byteCount: exports_external.number(),
-    snapshotId: id,
+    snapshotId: id.optional(),
+    runId: id.optional(),
     published: exports_external.boolean(),
     replayed: exports_external.boolean()
+  }).refine((value) => Boolean(value.snapshotId) !== Boolean(value.runId), {
+    message: "Preview output requires exactly one provenance source: snapshotId or runId"
   }),
   computer_publish_app_bundle: exports_external.looseObject({
     bundleId: id,
@@ -17640,6 +17736,8 @@ var OUTPUT_SHAPERS = {
       ["execution", run.execution],
       ["baseSnapshotId", run.baseSnapshotId],
       ["gitStart", run.gitStart],
+      ["durability", run.durability],
+      ["guidance", result.guidance],
       ["status", run.status]
     ]);
   },
@@ -17647,7 +17745,9 @@ var OUTPUT_SHAPERS = {
     const run = record2(result.run) ?? {};
     return defined([
       ["status", run.status],
-      ["replayed", result.replayed]
+      ["replayed", result.replayed],
+      ["durability", run.durability],
+      ["finishAssessment", result.finishAssessment]
     ]);
   },
   computer_exec: (result, input) => defined([
@@ -18188,7 +18288,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_open",
     title: "Open a Thread computer",
-    description: "Open or resume this Thread's project environment for filesystem or command work. A safe living-profile revision drift is reconciled automatically by replacing the generation, restoring supported state, and returning reconciliation metadata; structural recipe changes still fail explicitly with computer_reprovision as the suggested action. Every configured repository is re-authorized through its explicit GitHub connection; a fresh reusable base clones it with a request-scoped contents:read credential before strict setup runs, while a restore receives no credential. Returns computerSessionId — pass it unchanged to later Computer tools and cited work — plus the selected profile contract (including GitHub CLI (gh) on bun-typescript-v1), a resolved capabilities card, workspaceRoot, each materialized repositories[].path, and defaultCwd. Omitted computer_exec.cwd uses defaultCwd: the single checkout when exactly one repository is configured, workspaceRoot otherwise.",
+    description: "Open or resume this Thread's project environment for filesystem or command work. A safe living-profile revision drift is reconciled automatically by replacing the generation, restoring supported state, and returning reconciliation metadata; structural recipe changes still fail explicitly with computer_reprovision as the suggested action. Every configured repository is re-authorized through its explicit GitHub connection; a fresh reusable base clones it with a request-scoped contents:read credential before strict setup runs, while a restore receives no credential. Returns computerSessionId — pass it unchanged to later Computer tools and cited work — plus a compact Agent Brief with Thread objective, scoped Space/Topic guidance and provenance, durable parent snapshot, repositories, and active Runs; the selected profile contract; a resolved capabilities card; workspaceRoot; each materialized repositories[].path; and defaultCwd. Omitted computer_exec.cwd uses defaultCwd: the single checkout when exactly one repository is configured, workspaceRoot otherwise.",
     inputSchema: {
       threadId: exports_external.string().describe("the Arbor Thread whose stable computer to open, thr_…"),
       vcpus: exports_external.number().int().min(1).max(4).optional().describe("optional container vCPU request"),
@@ -18214,7 +18314,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_run_start",
     title: "Start a run",
-    description: "Start one unit of work inside an opened Thread computer. Write Runs default to isolated execution restored from the Computer's current base snapshot, so independent work does not collide. For intentional live collaboration, pass execution='shared' and the Run works directly in the Thread Computer alongside other shared Runs. Read Runs always share. All placements present the same /workspace layout; pass runId to Run-aware Computer operations and Arbor routes them correctly. Finish every Run with computer_run_finish, which destroys its isolated environment. This creates no second Thread or durable Computer.",
+    description: "Start one unit of work inside an opened Thread computer. Write Runs default to isolated execution restored from the Computer's current base snapshot, so independent work does not collide. For intentional live collaboration, pass execution='shared' and the Run works directly in the Thread Computer alongside other shared Runs. Read Runs always share. All placements present the same /workspace layout; pass runId to Run-aware Computer operations and Arbor routes them correctly. An isolated WRITE Run does not mutate the parent Computer, its provider environment is disposable, and finish destroys that environment. The start result states those durability facts and returns the inherited scoped guidance; follow any durability-first project guidance before broad validation. Git publication remains unknown until Arbor can prove a clean changed HEAD exists on the configured remote; a local commit, isolated filesystem, or Preview is not that proof. This creates no second Thread or durable Computer.",
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
       mode: exports_external.enum(["read", "write"]).describe("write for mutable work; read for shared inspection"),
@@ -18228,11 +18328,12 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_run_finish",
     title: "Finish a run",
-    description: "Close a Run with its terminal outcome and the one line that explains it. Finishing an isolated write Run destroys its execution environment, so push or otherwise publish anything that must outlive the Run before finishing it. Repeating the same outcome is a safe no-op, and it keeps the reason the first caller settled — a different one conflicts. Say what happened in reason: it is what computer_run_receipt shows a reader who was not here.",
+    description: "Close a Run with its terminal outcome and the one line that explains it. Before destroying an isolated WRITE environment, Arbor inspects bounded Git state: newly dirty work or a live remote check proving the new HEAD is absent blocks ordinary finish. Publication uncertainty remains explicitly unknown. Pass discard=true only when intentionally destroying work Arbor proved non-durable. Repeating the same outcome is a safe no-op, and the terminal receipt preserves the durability assessment.",
     inputSchema: {
       runId: exports_external.string().describe("the runId returned by computer_run_start, run_…"),
       outcome: exports_external.enum(["finished", "failed", "cancelled"]).optional().describe("terminal outcome; defaults to finished"),
-      reason: exports_external.string().max(500).optional().describe("one factual line on how this unit of work ended, e.g. what shipped or what broke")
+      reason: exports_external.string().max(500).optional().describe("one factual line on how this unit of work ended, e.g. what shipped or what broke"),
+      discard: exports_external.boolean().optional().describe("explicitly allow teardown when Arbor proved current Run work is not durable")
     },
     surfaces: ["computer-mcp", "computer-cli"],
     toolset: "loop",
@@ -18241,7 +18342,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_run_receipt",
     title: "Read a run receipt",
-    description: "READ ONLY: read one run's compact receipt — its purpose, actor, computer session, base snapshot and starting Git projection, execution placement, meaningful activity, and terminal outcome. Background work may appear as distilled labels/outcomes, but Arbor keeps no raw command transcript or process output. The receipt stays readable after the Run is terminal.",
+    description: "READ ONLY: read one run's compact receipt — its purpose, actor, computer session, base snapshot and starting Git projection, explicit isolation/durability contract, pre-teardown durability assessment when available (including publication that remains unknown unless proven), meaningful activity, and terminal outcome. Background work may appear as distilled labels/outcomes, but Arbor keeps no raw command transcript or process output. The receipt stays readable after the Run is terminal.",
     inputSchema: {
       runId: exports_external.string().describe("the run to read, run_… (from computer_run_start or computer_runs)")
     },
@@ -18446,9 +18547,10 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_publish_preview",
     title: "Publish an immutable static Preview",
-    description: "Publish one checked HTML file or bounded static build directory from the live parent Thread Computer as a private immutable Preview after checkpointing its source. This is intentionally not Run-scoped yet; an isolated Run must not silently publish stale parent files or imply integration. The returned arborthreads.dev URL survives computer teardown; put it on its own line to show the interactive Preview card. A directory must contain index.html, use relative local asset URLs, and cannot include dotfiles, source maps, secrets, symlinks, or server code. Supply one stable idempotencyKey per logical publication: safe retries return the original immutable URL, while reusing the key for another path/title conflicts.",
+    description: "Publish one checked HTML file or bounded static build directory as a private immutable Preview. Parent publication uses computerSessionId, checkpoints the source into Thread lineage, then publishes it. Isolated Run publication uses runId, freezes that Run's exact static bytes without checkpointing, adopting the Run, or advancing parent lineage, and remains durable after the Run is destroyed. The returned arborthreads.dev URL survives teardown; put it on its own line to show the interactive Preview card. A directory must contain index.html, use relative local asset URLs, and cannot include dotfiles, source maps, secrets, symlinks, or server code. Supply one stable idempotencyKey per logical publication: safe retries return the original immutable URL, while reusing the key for another path/title or Run fork conflicts.",
     inputSchema: {
-      computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
+      computerSessionId: exports_external.string().optional().describe("the computerSessionId returned by computer_open, cms_…; required for parent publication, optional when runId is supplied"),
+      runId: exports_external.string().optional().describe("active isolated write Run whose static workspace bytes should be published as review output"),
       path: exports_external.string().describe("absolute path to one HTML file or static build directory under /workspace"),
       title: exports_external.string().min(1).max(160).describe("short factual Preview title"),
       idempotencyKey: exports_external.string().min(1).max(200).describe("stable key for this ONE logical publication (≤200 chars); reuse it only to retry the same path and title")
@@ -18460,7 +18562,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_publish_app_bundle",
     title: "Publish an immutable AppBundle",
-    description: "From the live parent Thread Computer, after a Bun container build is green, verify that entryPath bytes exactly match the referenced ArtifactVersion. This is intentionally not Run-scoped yet; isolated Run publication requires a separate integration/provenance decision. Then capture source hashes plus Git/workspace provenance, then freeze the Worker module and optional static assets into a content-addressed AppBundle. A mismatch is rejected; dirty or untracked source is allowed but returned as an explicit warning. Use the returned bundleId with app_deploy; retries require the same idempotencyKey.",
+    description: "From the live parent Thread Computer, after a Bun container build is green, verify that entryPath bytes exactly match the referenced ArtifactVersion, then capture source hashes plus Git/workspace provenance, then freeze the Worker module and optional static assets into a content-addressed AppBundle. A mismatch is rejected; dirty or untracked source is allowed but returned as an explicit warning. Use the returned bundleId with app_deploy; retries require the same idempotencyKey. AppBundle publication remains intentionally parent-only; an isolated Run Preview is review output and does not adopt the Run.",
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
       artifactVersionId: exports_external.string().describe("the source ArtifactVersion, artv_…"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.20.10",
+  "version": "0.20.12",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",