@lambdacurry/arbor 0.20.11 → 0.20.13

package/dist/arbor.js

@@ -1806,6 +1806,18 @@ var previewViewerGrantUses = sqliteTable("preview_viewer_grant_uses", {
   profileId: text("profile_id").notNull().references(() => profiles.id),
   consumedAt: ts("consumed_at").notNull()
 });
+var livePreviewViewerGrantUses = sqliteTable("live_preview_viewer_grant_uses", {
+  jti: text("jti").primaryKey(),
+  threadId: text("thread_id").notNull().references(() => threads.id),
+  profileId: text("profile_id").notNull().references(() => profiles.id),
+  consumedAt: ts("consumed_at").notNull()
+});
+var threadLivePreviewSessions = sqliteTable("thread_live_preview_sessions", {
+  threadId: text("thread_id").notNull().references(() => threads.id),
+  profileId: text("profile_id").notNull().references(() => profiles.id),
+  computerSessionId: text("computer_session_id").notNull().references(() => computerSessions.id),
+  updatedAt: ts("updated_at").notNull()
+}, (t) => ({ pk: primaryKey({ columns: [t.threadId, t.profileId] }) }));
 var threadInitiatives = sqliteTable("thread_initiatives", {
   threadId: text("thread_id").notNull().references(() => threads.id),
   initiativeId: text("initiative_id").notNull().references(() => initiatives.id)
@@ -16795,17 +16807,78 @@ var computerProfile = exports_external.looseObject({
   tools: exports_external.array(exports_external.string()),
   recommendedEditingPrimitive: exports_external.string()
 });
+var computerRunPublicationState = exports_external.enum(["not-required", "durable", "not-durable", "unknown"]);
+var computerRunGitState = exports_external.looseObject({
+  head: exports_external.string().nullable(),
+  branch: exports_external.string().nullable(),
+  upstream: exports_external.string().nullable(),
+  dirty: exports_external.boolean(),
+  remote: exports_external.looseObject({ name: exports_external.string(), repository: exports_external.string().nullable() }).nullable()
+});
+var computerRunPublication = exports_external.looseObject({
+  state: computerRunPublicationState,
+  reasonCode: exports_external.string(),
+  remoteRef: exports_external.string().optional()
+});
+var computerRunDurability = exports_external.looseObject({
+  workspace: exports_external.enum(["shared", "isolated"]),
+  parentMutation: exports_external.enum(["direct", "none"]),
+  providerExecution: exports_external.enum(["parent", "disposable"]),
+  finishDestroysExecution: exports_external.boolean(),
+  baseSnapshotId: id.nullable(),
+  gitPublication: exports_external.looseObject({
+    state: computerRunPublicationState,
+    reasonCode: exports_external.string()
+  })
+});
+var computerRunFinishAssessment = exports_external.looseObject({
+  state: exports_external.enum(["safe", "blocked", "unknown"]),
+  requiresDiscard: exports_external.boolean(),
+  repositories: exports_external.array(exports_external.looseObject({
+    repository: exports_external.string(),
+    path: exports_external.string(),
+    startHead: exports_external.string().nullable(),
+    currentHead: exports_external.string().nullable(),
+    currentDirty: exports_external.boolean().nullable(),
+    changedSinceStart: exports_external.boolean().nullable(),
+    publication: computerRunPublication
+  }))
+});
+var operatingGuidanceEntry = exports_external.looseObject({
+  class: exports_external.literal("guidance"),
+  scope: exports_external.enum(["space", "topic"]),
+  sourceId: id,
+  strength: exports_external.literal("recommended"),
+  message: exports_external.string()
+});
+var computerAgentBrief = exports_external.looseObject({
+  work: exports_external.looseObject({ threadId: id, title: exports_external.string(), objective: exports_external.string() }),
+  guidance: exports_external.array(operatingGuidanceEntry),
+  computer: exports_external.looseObject({
+    computerId: id,
+    backend: exports_external.enum(["worker-shell", "container"]),
+    containerProfile: exports_external.string().nullable(),
+    repositories: exports_external.array(exports_external.looseObject({ repository: exports_external.string(), path: exports_external.string() })),
+    durableSnapshotId: id.nullable(),
+    repositoryState: exports_external.looseObject({
+      source: exports_external.enum(["durable-snapshot", "workspace"]),
+      remoteFreshness: exports_external.literal("unchecked"),
+      guidance: exports_external.string()
+    })
+  }),
+  activeRuns: exports_external.array(exports_external.looseObject({
+    runId: id,
+    label: exports_external.string().nullable(),
+    mode: exports_external.enum(["read", "write"]),
+    execution: exports_external.enum(["shared", "isolated"]),
+    status: exports_external.enum(["active", "finished", "failed", "cancelled"])
+  }))
+});
 var computerRunGitStart = exports_external.looseObject({
   repositories: exports_external.array(exports_external.looseObject({
     repository: exports_external.string(),
     path: exports_external.string(),
-    git: exports_external.looseObject({
-      head: exports_external.string().nullable(),
-      branch: exports_external.string().nullable(),
-      upstream: exports_external.string().nullable(),
-      dirty: exports_external.boolean(),
-      remote: exports_external.looseObject({ name: exports_external.string(), repository: exports_external.string().nullable() }).nullable()
-    }).nullable()
+    git: computerRunGitState.nullable()
   }))
 });
 var computerRun = exports_external.looseObject({
@@ -16820,6 +16893,7 @@ var computerRun = exports_external.looseObject({
   workspaceDir: exports_external.string(),
   baseSnapshotId: id.nullable(),
   gitStart: computerRunGitStart.nullable().optional(),
+  durability: computerRunDurability,
   status: exports_external.enum(["active", "finished", "failed", "cancelled"]),
   label: exports_external.string().nullable(),
   reason: exports_external.string().nullable(),
@@ -16842,6 +16916,8 @@ var computerRunReceipt = exports_external.looseObject({
   workspace: exports_external.looseObject({ dir: exports_external.string() }),
   baseSnapshotId: id.nullable(),
   gitStart: computerRunGitStart.nullable().optional(),
+  durability: computerRunDurability,
+  finishAssessment: computerRunFinishAssessment.nullable(),
   status: exports_external.enum(["active", "finished", "failed", "cancelled"]),
   outcome: exports_external.enum(["finished", "failed", "cancelled"]).nullable(),
   reason: exports_external.string().nullable(),
@@ -17155,6 +17231,19 @@ var MCP_OUTPUT_SCHEMAS = {
       effectiveRecipe: redactedComputerRecipe,
       materializedRecipe: redactedComputerRecipe.nullable()
     }),
+    livePreview: exports_external.looseObject({
+      url: exports_external.string(),
+      surface: exports_external.looseObject({
+        command: exports_external.string(),
+        cwd: exports_external.string(),
+        port: exports_external.number().int(),
+        healthPath: exports_external.string()
+      }),
+      configuredBy: exports_external.looseObject({
+        scope: exports_external.enum(["topic", "thread"]),
+        scopeId: id
+      })
+    }).nullable(),
     topicBase: jsonObject.nullable(),
     computer: jsonObject.nullable(),
     activeGenerationId: id.nullable(),
@@ -17450,6 +17539,7 @@ var MCP_OUTPUT_SCHEMAS = {
     repositories: exports_external.array(exports_external.looseObject({ repository: exports_external.string(), path: exports_external.string() })),
     defaultCwd: exports_external.string(),
     capabilities: computerCapabilityCard,
+    agentBrief: computerAgentBrief,
     runtime: jsonObject,
     reconciliation: exports_external.looseObject({
       action: exports_external.literal("automatic_reprovision"),
@@ -17463,11 +17553,72 @@ var MCP_OUTPUT_SCHEMAS = {
     execution: exports_external.enum(["shared", "isolated"]),
     baseSnapshotId: id.nullable(),
     gitStart: computerRunGitStart.nullable().optional(),
+    durability: computerRunDurability,
+    guidance: exports_external.array(operatingGuidanceEntry),
     status: exports_external.string()
   }),
   computer_run_finish: exports_external.looseObject({
     status: exports_external.string(),
-    replayed: exports_external.boolean()
+    replayed: exports_external.boolean(),
+    durability: computerRunDurability,
+    finishAssessment: computerRunFinishAssessment.nullable()
+  }),
+  computer_repo_work_status: exports_external.looseObject({
+    runId: id,
+    status: exports_external.enum(["blocked", "unknown", "reviewable", "in-progress"]),
+    canFinishRun: exports_external.boolean(),
+    durablyFinishable: exports_external.boolean(),
+    finishAssessment: computerRunFinishAssessment,
+    repositories: exports_external.array(exports_external.looseObject({
+      repository: exports_external.string(),
+      path: exports_external.string(),
+      start: computerRunGitState.nullable(),
+      current: computerRunGitState.nullable(),
+      changedSinceRunStart: exports_external.boolean().nullable(),
+      publication: computerRunPublication,
+      pullRequest: exports_external.looseObject({
+        state: exports_external.enum(["none", "head-mismatch", "open", "merged", "closed", "unknown"]),
+        number: exports_external.number().int().positive().optional(),
+        url: exports_external.string().optional(),
+        headSha: exports_external.string().optional(),
+        baseRef: exports_external.string().optional(),
+        draft: exports_external.boolean().optional()
+      }),
+      ci: exports_external.looseObject({
+        state: exports_external.enum(["none", "pending", "passed", "failed", "unknown"]),
+        total: exports_external.number().int().min(0),
+        pending: exports_external.number().int().min(0),
+        passed: exports_external.number().int().min(0),
+        failed: exports_external.number().int().min(0)
+      }),
+      review: exports_external.looseObject({
+        state: exports_external.enum(["not-applicable", "none", "approved", "changes-requested", "unknown"]),
+        approvals: exports_external.number().int().min(0),
+        changesRequested: exports_external.number().int().min(0)
+      }),
+      githubProof: exports_external.looseObject({
+        state: exports_external.enum(["known", "unknown"]),
+        reasonCode: exports_external.string()
+      }),
+      state: exports_external.enum([
+        "unchanged",
+        "working",
+        "committed-local",
+        "publication-unknown",
+        "pushed-durable",
+        "github-unknown",
+        "pr-head-mismatch",
+        "pr-open",
+        "ci-pending",
+        "reviewable",
+        "merged"
+      ]),
+      retrySafety: exports_external.looseObject({
+        push: exports_external.enum(["not-needed", "safe", "unknown"]),
+        prCreate: exports_external.enum(["not-needed", "safe", "manual", "unknown"])
+      }),
+      nextAction: exports_external.string()
+    }))
   }),
   computer_run_receipt: exports_external.looseObject({
     receipt: computerRunReceipt
@@ -17506,7 +17657,15 @@ var MCP_OUTPUT_SCHEMAS = {
     stderr: exports_external.string().optional(),
     truncated: exports_external.boolean().optional(),
     nextCursor: exports_external.string().optional(),
-    exitCode: exports_external.number().int().nullable().optional()
+    exitCode: exports_external.number().int().nullable().optional(),
+    activity: exports_external.looseObject({
+      state: exports_external.enum(["output", "compute", "quiet", "terminal", "unknown"]),
+      observedAt: timestamp,
+      outputAdvanced: exports_external.boolean(),
+      cpuPercent: exports_external.number().min(0).nullable(),
+      processCount: exports_external.number().int().min(0).nullable(),
+      reasonCode: exports_external.string()
+    }).optional()
   }),
   computer_process_terminate: exports_external.looseObject({
     status: exports_external.string(),
@@ -17519,6 +17678,7 @@ var MCP_OUTPUT_SCHEMAS = {
     backend: exports_external.enum(["worker-shell", "container"]),
     profile: computerProfile.nullable(),
     capabilities: computerCapabilityCard,
+    agentBrief: computerAgentBrief,
     runtime: jsonObject
   }),
   computer_verify: exports_external.looseObject({
@@ -17673,6 +17833,8 @@ var OUTPUT_SHAPERS = {
       ["execution", run.execution],
       ["baseSnapshotId", run.baseSnapshotId],
       ["gitStart", run.gitStart],
+      ["durability", run.durability],
+      ["guidance", result.guidance],
       ["status", run.status]
     ]);
   },
@@ -17680,7 +17842,9 @@ var OUTPUT_SHAPERS = {
     const run = record2(result.run) ?? {};
     return defined([
       ["status", run.status],
-      ["replayed", result.replayed]
+      ["replayed", result.replayed],
+      ["durability", run.durability],
+      ["finishAssessment", result.finishAssessment]
     ]);
   },
   computer_exec: (result, input) => defined([
@@ -17699,7 +17863,8 @@ var OUTPUT_SHAPERS = {
     ["nextCursor", result.nextCursor],
     ["endedAt", result.endedAt],
     ["durationMs", result.durationMs],
-    ["exitCode", result.exitCode]
+    ["exitCode", result.exitCode],
+    ["activity", result.activity]
   ]),
   computer_process_terminate: (result) => defined([
     ["status", result.status],
@@ -17841,6 +18006,7 @@ var MCP_TOOL_ANNOTATIONS = {
   computer_open: additive,
   computer_reprovision: destructiveIdempotent,
   computer_run_start: additive,
+  computer_repo_work_status: readOnly,
   computer_run_finish: idempotent,
   computer_run_receipt: readOnly,
   computer_runs: readOnly,
@@ -17915,6 +18081,14 @@ var PAGINATION_INPUT = {
   limit: exports_external.number().int().min(1).optional().describe("max items to return — enables pagination"),
   cursor: exports_external.string().optional().describe("opaque cursor from a prior response's nextCursor (use with --limit)")
 };
+var LIVE_PREVIEW_CONFIG_INPUT = {
+  livePreview: exports_external.object({
+    command: exports_external.string().min(1).max(4000).describe("explicit project preview command"),
+    cwd: exports_external.string().startsWith("/workspace/").describe("workspace directory containing the project"),
+    port: exports_external.number().int().min(1).max(65535).describe("local HTTP/WebSocket port"),
+    healthPath: exports_external.string().startsWith("/").describe("HTTP health path checked before proxying")
+  }).nullable().optional().describe("one inherited Thread Live Preview startup surface; null disables an inherited surface. This is runtime policy and does not change Computer recipe identity")
+};
 var ACTION_DEFINITIONS = [
   {
     name: "server_info",
@@ -18186,7 +18360,8 @@ var ACTION_DEFINITIONS = [
       backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
       containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, GitHub CLI (gh), Bun 1.3.3, bunx, Node 26.5.1, pnpm 10.33.0, Python 3.13.15 (python/python3), jq, and ripgrep (rg), or null to clear inherited profile"),
       setupScript: exports_external.string().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize"),
-      repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
+      repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits"),
+      ...LIVE_PREVIEW_CONFIG_INPUT
     },
     surfaces: ["mcp", "cli"],
     toolset: "structure",
@@ -18201,7 +18376,8 @@ var ACTION_DEFINITIONS = [
       backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
       containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, GitHub CLI (gh), Bun 1.3.3, bunx, Node 26.5.1, pnpm 10.33.0, Python 3.13.15 (python/python3), jq, and ripgrep (rg), or null to clear inherited profile"),
       setupScript: exports_external.string().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize"),
-      repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
+      repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits"),
+      ...LIVE_PREVIEW_CONFIG_INPUT
     },
     surfaces: ["mcp", "cli"],
     toolset: "structure",
@@ -18221,7 +18397,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_open",
     title: "Open a Thread computer",
-    description: "Open or resume this Thread's project environment for filesystem or command work. A safe living-profile revision drift is reconciled automatically by replacing the generation, restoring supported state, and returning reconciliation metadata; structural recipe changes still fail explicitly with computer_reprovision as the suggested action. Every configured repository is re-authorized through its explicit GitHub connection; a fresh reusable base clones it with a request-scoped contents:read credential before strict setup runs, while a restore receives no credential. Returns computerSessionId — pass it unchanged to later Computer tools and cited work — plus the selected profile contract (including GitHub CLI (gh) on bun-typescript-v1), a resolved capabilities card, workspaceRoot, each materialized repositories[].path, and defaultCwd. Omitted computer_exec.cwd uses defaultCwd: the single checkout when exactly one repository is configured, workspaceRoot otherwise.",
+    description: "Open or resume this Thread's project environment for filesystem or command work. A safe living-profile revision drift is reconciled automatically by replacing the generation, restoring supported state, and returning reconciliation metadata; structural recipe changes still fail explicitly with computer_reprovision as the suggested action. Every configured repository is re-authorized through its explicit GitHub connection; a fresh reusable base clones it with a request-scoped contents:read credential before strict setup runs, while a restore receives no credential. Returns computerSessionId — pass it unchanged to later Computer tools and cited work — plus a compact Agent Brief with Thread objective, scoped Space/Topic guidance and provenance, durable parent snapshot, repositories, explicit unchecked remote-freshness guidance, and active Runs; the selected profile contract; a resolved capabilities card; workspaceRoot; each materialized repositories[].path; and defaultCwd. Omitted computer_exec.cwd uses defaultCwd: the single checkout when exactly one repository is configured, workspaceRoot otherwise.",
     inputSchema: {
       threadId: exports_external.string().describe("the Arbor Thread whose stable computer to open, thr_…"),
       vcpus: exports_external.number().int().min(1).max(4).optional().describe("optional container vCPU request"),
@@ -18247,7 +18423,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_run_start",
     title: "Start a run",
-    description: "Start one unit of work inside an opened Thread computer. Write Runs default to isolated execution restored from the Computer's current base snapshot, so independent work does not collide. For intentional live collaboration, pass execution='shared' and the Run works directly in the Thread Computer alongside other shared Runs. Read Runs always share. All placements present the same /workspace layout; pass runId to Run-aware Computer operations and Arbor routes them correctly. Finish every Run with computer_run_finish, which destroys its isolated environment. This creates no second Thread or durable Computer.",
+    description: "Start one unit of work inside an opened Thread computer. Write Runs default to isolated execution restored from the Computer's current base snapshot, so independent work does not collide. For intentional live collaboration, pass execution='shared' and the Run works directly in the Thread Computer alongside other shared Runs. Read Runs always share. All placements present the same /workspace layout; pass runId to Run-aware Computer operations and Arbor routes them correctly. An isolated WRITE Run does not mutate the parent Computer, its provider environment is disposable, and finish destroys that environment. The start result states those durability facts and returns the inherited scoped guidance; follow any durability-first project guidance before broad validation. Git publication remains unknown until Arbor can prove a clean changed HEAD exists on the configured remote; a local commit, isolated filesystem, or Preview is not that proof. This creates no second Thread or durable Computer.",
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
       mode: exports_external.enum(["read", "write"]).describe("write for mutable work; read for shared inspection"),
@@ -18258,14 +18434,26 @@ var ACTION_DEFINITIONS = [
     toolset: "loop",
     run: forward("computer_runtime.run_start")
   },
+  {
+    name: "computer_repo_work_status",
+    title: "Inspect repository finish state",
+    description: "READ ONLY: resolve repository-finish state for an active isolated WRITE Run from authoritative Git remote proof plus GitHub PR, CI, and review reads; the bounded inspection uses three batched provider exec phases and at most four GitHub REST calls per eligible repository. It reports durable state, explicit push/PR retrySafety, known PR-head mismatches versus unavailable GitHub proof, the next action, and Run finishability; it never commits, pushes, creates a PR, merges, or deploys.",
+    inputSchema: {
+      runId: exports_external.string().describe("the active isolated WRITE Run to inspect, run_…")
+    },
+    surfaces: ["computer-mcp", "computer-cli"],
+    toolset: "loop",
+    run: forward("computer_runtime.repo_work_status")
+  },
   {
     name: "computer_run_finish",
     title: "Finish a run",
-    description: "Close a Run with its terminal outcome and the one line that explains it. Finishing an isolated write Run destroys its execution environment, so push or otherwise publish anything that must outlive the Run before finishing it. Repeating the same outcome is a safe no-op, and it keeps the reason the first caller settled — a different one conflicts. Say what happened in reason: it is what computer_run_receipt shows a reader who was not here.",
+    description: "Close a Run with its terminal outcome and the one line that explains it. Before destroying an isolated WRITE environment, Arbor inspects bounded Git state: newly dirty work or a live remote check proving the new HEAD is absent blocks ordinary finish. Publication uncertainty remains explicitly unknown. Pass discard=true only when intentionally destroying work Arbor proved non-durable. Repeating the same outcome is a safe no-op, and the terminal receipt preserves the durability assessment.",
     inputSchema: {
       runId: exports_external.string().describe("the runId returned by computer_run_start, run_…"),
       outcome: exports_external.enum(["finished", "failed", "cancelled"]).optional().describe("terminal outcome; defaults to finished"),
-      reason: exports_external.string().max(500).optional().describe("one factual line on how this unit of work ended, e.g. what shipped or what broke")
+      reason: exports_external.string().max(500).optional().describe("one factual line on how this unit of work ended, e.g. what shipped or what broke"),
+      discard: exports_external.boolean().optional().describe("explicitly allow teardown when Arbor proved current Run work is not durable")
     },
     surfaces: ["computer-mcp", "computer-cli"],
     toolset: "loop",
@@ -18274,7 +18462,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_run_receipt",
     title: "Read a run receipt",
-    description: "READ ONLY: read one run's compact receipt — its purpose, actor, computer session, base snapshot and starting Git projection, execution placement, meaningful activity, and terminal outcome. Background work may appear as distilled labels/outcomes, but Arbor keeps no raw command transcript or process output. The receipt stays readable after the Run is terminal.",
+    description: "READ ONLY: read one run's compact receipt — its purpose, actor, computer session, base snapshot and starting Git projection, explicit isolation/durability contract, pre-teardown durability assessment when available (including publication that remains unknown unless proven), meaningful activity, and terminal outcome. Background work may appear as distilled labels/outcomes, but Arbor keeps no raw command transcript or process output. The receipt stays readable after the Run is terminal.",
     inputSchema: {
       runId: exports_external.string().describe("the run to read, run_… (from computer_run_start or computer_runs)")
     },
@@ -18317,7 +18505,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_process_read",
     title: "Read a background process",
-    description: "READ ONLY: Tail one process returned by computer_exec(background=true). With no cursor, returns only the latest small output window; pass nextCursor on the next read to receive only newer output. Defaults to 4 KB total and allows an explicit larger read up to 64 KB. Once terminal, also returns the final exit result.",
+    description: "READ ONLY: Tail one process returned by computer_exec(background=true). With no cursor, returns only the latest small output window; pass nextCursor on the next read to receive only newer output. Defaults to 4 KB total and allows an explicit larger read up to 64 KB. Returns a compact activity receipt that distinguishes fresh output, active CPU work, quiet running, terminal state, and unavailable telemetry without exposing raw process tables. Once terminal, also returns the final exit result.",
     inputSchema: {
       computerSessionId: exports_external.string().optional().describe("the computerSessionId returned by computer_open, cms_…; required unless runId is supplied"),
       runId: exports_external.string().optional().describe("the Run that owns this process, if it was started inside a Run"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.20.11",
+  "version": "0.20.13",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",