@lambdacurry/arbor 0.20.11 → 0.20.12

package/dist/arbor.js

@@ -16795,6 +16795,60 @@ var computerProfile = exports_external.looseObject({
   tools: exports_external.array(exports_external.string()),
   recommendedEditingPrimitive: exports_external.string()
 });
+var computerRunPublicationState = exports_external.enum(["not-required", "durable", "not-durable", "unknown"]);
+var computerRunDurability = exports_external.looseObject({
+  workspace: exports_external.enum(["shared", "isolated"]),
+  parentMutation: exports_external.enum(["direct", "none"]),
+  providerExecution: exports_external.enum(["parent", "disposable"]),
+  finishDestroysExecution: exports_external.boolean(),
+  baseSnapshotId: id.nullable(),
+  gitPublication: exports_external.looseObject({
+    state: computerRunPublicationState,
+    reasonCode: exports_external.string()
+  })
+});
+var computerRunFinishAssessment = exports_external.looseObject({
+  state: exports_external.enum(["safe", "blocked", "unknown"]),
+  requiresDiscard: exports_external.boolean(),
+  repositories: exports_external.array(exports_external.looseObject({
+    repository: exports_external.string(),
+    path: exports_external.string(),
+    startHead: exports_external.string().nullable(),
+    currentHead: exports_external.string().nullable(),
+    currentDirty: exports_external.boolean().nullable(),
+    changedSinceStart: exports_external.boolean().nullable(),
+    publication: exports_external.looseObject({
+      state: computerRunPublicationState,
+      reasonCode: exports_external.string(),
+      remoteRef: exports_external.string().optional()
+    })
+  }))
+});
+var operatingGuidanceEntry = exports_external.looseObject({
+  class: exports_external.literal("guidance"),
+  scope: exports_external.enum(["space", "topic"]),
+  sourceId: id,
+  strength: exports_external.literal("recommended"),
+  message: exports_external.string()
+});
+var computerAgentBrief = exports_external.looseObject({
+  work: exports_external.looseObject({ threadId: id, title: exports_external.string(), objective: exports_external.string() }),
+  guidance: exports_external.array(operatingGuidanceEntry),
+  computer: exports_external.looseObject({
+    computerId: id,
+    backend: exports_external.enum(["worker-shell", "container"]),
+    containerProfile: exports_external.string().nullable(),
+    repositories: exports_external.array(exports_external.looseObject({ repository: exports_external.string(), path: exports_external.string() })),
+    durableSnapshotId: id.nullable()
+  }),
+  activeRuns: exports_external.array(exports_external.looseObject({
+    runId: id,
+    label: exports_external.string().nullable(),
+    mode: exports_external.enum(["read", "write"]),
+    execution: exports_external.enum(["shared", "isolated"]),
+    status: exports_external.enum(["active", "finished", "failed", "cancelled"])
+  }))
+});
 var computerRunGitStart = exports_external.looseObject({
   repositories: exports_external.array(exports_external.looseObject({
     repository: exports_external.string(),
@@ -16820,6 +16874,7 @@ var computerRun = exports_external.looseObject({
   workspaceDir: exports_external.string(),
   baseSnapshotId: id.nullable(),
   gitStart: computerRunGitStart.nullable().optional(),
+  durability: computerRunDurability,
   status: exports_external.enum(["active", "finished", "failed", "cancelled"]),
   label: exports_external.string().nullable(),
   reason: exports_external.string().nullable(),
@@ -16842,6 +16897,8 @@ var computerRunReceipt = exports_external.looseObject({
   workspace: exports_external.looseObject({ dir: exports_external.string() }),
   baseSnapshotId: id.nullable(),
   gitStart: computerRunGitStart.nullable().optional(),
+  durability: computerRunDurability,
+  finishAssessment: computerRunFinishAssessment.nullable(),
   status: exports_external.enum(["active", "finished", "failed", "cancelled"]),
   outcome: exports_external.enum(["finished", "failed", "cancelled"]).nullable(),
   reason: exports_external.string().nullable(),
@@ -17450,6 +17507,7 @@ var MCP_OUTPUT_SCHEMAS = {
     repositories: exports_external.array(exports_external.looseObject({ repository: exports_external.string(), path: exports_external.string() })),
     defaultCwd: exports_external.string(),
     capabilities: computerCapabilityCard,
+    agentBrief: computerAgentBrief,
     runtime: jsonObject,
     reconciliation: exports_external.looseObject({
       action: exports_external.literal("automatic_reprovision"),
@@ -17463,11 +17521,15 @@ var MCP_OUTPUT_SCHEMAS = {
     execution: exports_external.enum(["shared", "isolated"]),
     baseSnapshotId: id.nullable(),
     gitStart: computerRunGitStart.nullable().optional(),
+    durability: computerRunDurability,
+    guidance: exports_external.array(operatingGuidanceEntry),
     status: exports_external.string()
   }),
   computer_run_finish: exports_external.looseObject({
     status: exports_external.string(),
-    replayed: exports_external.boolean()
+    replayed: exports_external.boolean(),
+    durability: computerRunDurability,
+    finishAssessment: computerRunFinishAssessment.nullable()
   }),
   computer_run_receipt: exports_external.looseObject({
     receipt: computerRunReceipt
@@ -17519,6 +17581,7 @@ var MCP_OUTPUT_SCHEMAS = {
     backend: exports_external.enum(["worker-shell", "container"]),
     profile: computerProfile.nullable(),
     capabilities: computerCapabilityCard,
+    agentBrief: computerAgentBrief,
     runtime: jsonObject
   }),
   computer_verify: exports_external.looseObject({
@@ -17673,6 +17736,8 @@ var OUTPUT_SHAPERS = {
       ["execution", run.execution],
       ["baseSnapshotId", run.baseSnapshotId],
       ["gitStart", run.gitStart],
+      ["durability", run.durability],
+      ["guidance", result.guidance],
       ["status", run.status]
     ]);
   },
@@ -17680,7 +17745,9 @@ var OUTPUT_SHAPERS = {
     const run = record2(result.run) ?? {};
     return defined([
       ["status", run.status],
-      ["replayed", result.replayed]
+      ["replayed", result.replayed],
+      ["durability", run.durability],
+      ["finishAssessment", result.finishAssessment]
     ]);
   },
   computer_exec: (result, input) => defined([
@@ -18221,7 +18288,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_open",
     title: "Open a Thread computer",
-    description: "Open or resume this Thread's project environment for filesystem or command work. A safe living-profile revision drift is reconciled automatically by replacing the generation, restoring supported state, and returning reconciliation metadata; structural recipe changes still fail explicitly with computer_reprovision as the suggested action. Every configured repository is re-authorized through its explicit GitHub connection; a fresh reusable base clones it with a request-scoped contents:read credential before strict setup runs, while a restore receives no credential. Returns computerSessionId — pass it unchanged to later Computer tools and cited work — plus the selected profile contract (including GitHub CLI (gh) on bun-typescript-v1), a resolved capabilities card, workspaceRoot, each materialized repositories[].path, and defaultCwd. Omitted computer_exec.cwd uses defaultCwd: the single checkout when exactly one repository is configured, workspaceRoot otherwise.",
+    description: "Open or resume this Thread's project environment for filesystem or command work. A safe living-profile revision drift is reconciled automatically by replacing the generation, restoring supported state, and returning reconciliation metadata; structural recipe changes still fail explicitly with computer_reprovision as the suggested action. Every configured repository is re-authorized through its explicit GitHub connection; a fresh reusable base clones it with a request-scoped contents:read credential before strict setup runs, while a restore receives no credential. Returns computerSessionId — pass it unchanged to later Computer tools and cited work — plus a compact Agent Brief with Thread objective, scoped Space/Topic guidance and provenance, durable parent snapshot, repositories, and active Runs; the selected profile contract; a resolved capabilities card; workspaceRoot; each materialized repositories[].path; and defaultCwd. Omitted computer_exec.cwd uses defaultCwd: the single checkout when exactly one repository is configured, workspaceRoot otherwise.",
     inputSchema: {
       threadId: exports_external.string().describe("the Arbor Thread whose stable computer to open, thr_…"),
       vcpus: exports_external.number().int().min(1).max(4).optional().describe("optional container vCPU request"),
@@ -18247,7 +18314,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_run_start",
     title: "Start a run",
-    description: "Start one unit of work inside an opened Thread computer. Write Runs default to isolated execution restored from the Computer's current base snapshot, so independent work does not collide. For intentional live collaboration, pass execution='shared' and the Run works directly in the Thread Computer alongside other shared Runs. Read Runs always share. All placements present the same /workspace layout; pass runId to Run-aware Computer operations and Arbor routes them correctly. Finish every Run with computer_run_finish, which destroys its isolated environment. This creates no second Thread or durable Computer.",
+    description: "Start one unit of work inside an opened Thread computer. Write Runs default to isolated execution restored from the Computer's current base snapshot, so independent work does not collide. For intentional live collaboration, pass execution='shared' and the Run works directly in the Thread Computer alongside other shared Runs. Read Runs always share. All placements present the same /workspace layout; pass runId to Run-aware Computer operations and Arbor routes them correctly. An isolated WRITE Run does not mutate the parent Computer, its provider environment is disposable, and finish destroys that environment. The start result states those durability facts and returns the inherited scoped guidance; follow any durability-first project guidance before broad validation. Git publication remains unknown until Arbor can prove a clean changed HEAD exists on the configured remote; a local commit, isolated filesystem, or Preview is not that proof. This creates no second Thread or durable Computer.",
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
       mode: exports_external.enum(["read", "write"]).describe("write for mutable work; read for shared inspection"),
@@ -18261,11 +18328,12 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_run_finish",
     title: "Finish a run",
-    description: "Close a Run with its terminal outcome and the one line that explains it. Finishing an isolated write Run destroys its execution environment, so push or otherwise publish anything that must outlive the Run before finishing it. Repeating the same outcome is a safe no-op, and it keeps the reason the first caller settled — a different one conflicts. Say what happened in reason: it is what computer_run_receipt shows a reader who was not here.",
+    description: "Close a Run with its terminal outcome and the one line that explains it. Before destroying an isolated WRITE environment, Arbor inspects bounded Git state: newly dirty work or a live remote check proving the new HEAD is absent blocks ordinary finish. Publication uncertainty remains explicitly unknown. Pass discard=true only when intentionally destroying work Arbor proved non-durable. Repeating the same outcome is a safe no-op, and the terminal receipt preserves the durability assessment.",
     inputSchema: {
       runId: exports_external.string().describe("the runId returned by computer_run_start, run_…"),
       outcome: exports_external.enum(["finished", "failed", "cancelled"]).optional().describe("terminal outcome; defaults to finished"),
-      reason: exports_external.string().max(500).optional().describe("one factual line on how this unit of work ended, e.g. what shipped or what broke")
+      reason: exports_external.string().max(500).optional().describe("one factual line on how this unit of work ended, e.g. what shipped or what broke"),
+      discard: exports_external.boolean().optional().describe("explicitly allow teardown when Arbor proved current Run work is not durable")
     },
     surfaces: ["computer-mcp", "computer-cli"],
     toolset: "loop",
@@ -18274,7 +18342,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_run_receipt",
     title: "Read a run receipt",
-    description: "READ ONLY: read one run's compact receipt — its purpose, actor, computer session, base snapshot and starting Git projection, execution placement, meaningful activity, and terminal outcome. Background work may appear as distilled labels/outcomes, but Arbor keeps no raw command transcript or process output. The receipt stays readable after the Run is terminal.",
+    description: "READ ONLY: read one run's compact receipt — its purpose, actor, computer session, base snapshot and starting Git projection, explicit isolation/durability contract, pre-teardown durability assessment when available (including publication that remains unknown unless proven), meaningful activity, and terminal outcome. Background work may appear as distilled labels/outcomes, but Arbor keeps no raw command transcript or process output. The receipt stays readable after the Run is terminal.",
     inputSchema: {
       runId: exports_external.string().describe("the run to read, run_… (from computer_run_start or computer_runs)")
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.20.11",
+  "version": "0.20.12",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",