@lambdacurry/arbor 0.20.12 → 0.20.14

package/dist/arbor.js

@@ -1806,6 +1806,18 @@ var previewViewerGrantUses = sqliteTable("preview_viewer_grant_uses", {
   profileId: text("profile_id").notNull().references(() => profiles.id),
   consumedAt: ts("consumed_at").notNull()
 });
+var livePreviewViewerGrantUses = sqliteTable("live_preview_viewer_grant_uses", {
+  jti: text("jti").primaryKey(),
+  threadId: text("thread_id").notNull().references(() => threads.id),
+  profileId: text("profile_id").notNull().references(() => profiles.id),
+  consumedAt: ts("consumed_at").notNull()
+});
+var threadLivePreviewSessions = sqliteTable("thread_live_preview_sessions", {
+  threadId: text("thread_id").notNull().references(() => threads.id),
+  profileId: text("profile_id").notNull().references(() => profiles.id),
+  computerSessionId: text("computer_session_id").notNull().references(() => computerSessions.id),
+  updatedAt: ts("updated_at").notNull()
+}, (t) => ({ pk: primaryKey({ columns: [t.threadId, t.profileId] }) }));
 var threadInitiatives = sqliteTable("thread_initiatives", {
   threadId: text("thread_id").notNull().references(() => threads.id),
   initiativeId: text("initiative_id").notNull().references(() => initiatives.id)
@@ -16796,6 +16808,18 @@ var computerProfile = exports_external.looseObject({
   recommendedEditingPrimitive: exports_external.string()
 });
 var computerRunPublicationState = exports_external.enum(["not-required", "durable", "not-durable", "unknown"]);
+var computerRunGitState = exports_external.looseObject({
+  head: exports_external.string().nullable(),
+  branch: exports_external.string().nullable(),
+  upstream: exports_external.string().nullable(),
+  dirty: exports_external.boolean(),
+  remote: exports_external.looseObject({ name: exports_external.string(), repository: exports_external.string().nullable() }).nullable()
+});
+var computerRunPublication = exports_external.looseObject({
+  state: computerRunPublicationState,
+  reasonCode: exports_external.string(),
+  remoteRef: exports_external.string().optional()
+});
 var computerRunDurability = exports_external.looseObject({
   workspace: exports_external.enum(["shared", "isolated"]),
   parentMutation: exports_external.enum(["direct", "none"]),
@@ -16817,11 +16841,7 @@ var computerRunFinishAssessment = exports_external.looseObject({
     currentHead: exports_external.string().nullable(),
     currentDirty: exports_external.boolean().nullable(),
     changedSinceStart: exports_external.boolean().nullable(),
-    publication: exports_external.looseObject({
-      state: computerRunPublicationState,
-      reasonCode: exports_external.string(),
-      remoteRef: exports_external.string().optional()
-    })
+    publication: computerRunPublication
   }))
 });
 var operatingGuidanceEntry = exports_external.looseObject({
@@ -16839,7 +16859,12 @@ var computerAgentBrief = exports_external.looseObject({
     backend: exports_external.enum(["worker-shell", "container"]),
     containerProfile: exports_external.string().nullable(),
     repositories: exports_external.array(exports_external.looseObject({ repository: exports_external.string(), path: exports_external.string() })),
-    durableSnapshotId: id.nullable()
+    durableSnapshotId: id.nullable(),
+    repositoryState: exports_external.looseObject({
+      source: exports_external.enum(["durable-snapshot", "workspace"]),
+      remoteFreshness: exports_external.literal("unchecked"),
+      guidance: exports_external.string()
+    })
   }),
   activeRuns: exports_external.array(exports_external.looseObject({
     runId: id,
@@ -16853,13 +16878,7 @@ var computerRunGitStart = exports_external.looseObject({
   repositories: exports_external.array(exports_external.looseObject({
     repository: exports_external.string(),
     path: exports_external.string(),
-    git: exports_external.looseObject({
-      head: exports_external.string().nullable(),
-      branch: exports_external.string().nullable(),
-      upstream: exports_external.string().nullable(),
-      dirty: exports_external.boolean(),
-      remote: exports_external.looseObject({ name: exports_external.string(), repository: exports_external.string().nullable() }).nullable()
-    }).nullable()
+    git: computerRunGitState.nullable()
   }))
 });
 var computerRun = exports_external.looseObject({
@@ -16902,6 +16921,25 @@ var computerRunReceipt = exports_external.looseObject({
   status: exports_external.enum(["active", "finished", "failed", "cancelled"]),
   outcome: exports_external.enum(["finished", "failed", "cancelled"]).nullable(),
   reason: exports_external.string().nullable(),
+  reasonCode: exports_external.string().nullable(),
+  operations: exports_external.array(exports_external.looseObject({
+    operationId: exports_external.string(),
+    kind: exports_external.literal("exec"),
+    execution: exports_external.enum(["foreground", "background"]),
+    state: exports_external.enum([
+      "starting",
+      "running",
+      "completed",
+      "failed",
+      "cancelled",
+      "provider-lost",
+      "unknown"
+    ]),
+    mutationRetrySafety: exports_external.enum(["not-needed", "unsafe", "unknown"]),
+    reasonCode: exports_external.string(),
+    startedAt: exports_external.string(),
+    endedAt: exports_external.string().nullable()
+  })),
   startedAt: exports_external.string(),
   endedAt: exports_external.string().nullable(),
   durationMs: exports_external.number().nullable(),
@@ -16910,7 +16948,8 @@ var computerRunReceipt = exports_external.looseObject({
     at: exports_external.string(),
     label: exports_external.string().optional(),
     detail: exports_external.string().optional(),
-    targetId: exports_external.string().optional()
+    targetId: exports_external.string().optional(),
+    reasonCode: exports_external.string().optional()
   })),
   lifecycle: exports_external.array(exports_external.looseObject({ type: exports_external.string(), at: exports_external.string() }))
 });
@@ -17212,6 +17251,19 @@ var MCP_OUTPUT_SCHEMAS = {
       effectiveRecipe: redactedComputerRecipe,
       materializedRecipe: redactedComputerRecipe.nullable()
     }),
+    livePreview: exports_external.looseObject({
+      url: exports_external.string(),
+      surface: exports_external.looseObject({
+        command: exports_external.string(),
+        cwd: exports_external.string(),
+        port: exports_external.number().int(),
+        healthPath: exports_external.string()
+      }),
+      configuredBy: exports_external.looseObject({
+        scope: exports_external.enum(["topic", "thread"]),
+        scopeId: id
+      })
+    }).nullable(),
     topicBase: jsonObject.nullable(),
     computer: jsonObject.nullable(),
     activeGenerationId: id.nullable(),
@@ -17531,6 +17583,63 @@ var MCP_OUTPUT_SCHEMAS = {
     durability: computerRunDurability,
     finishAssessment: computerRunFinishAssessment.nullable()
   }),
+  computer_repo_work_status: exports_external.looseObject({
+    runId: id,
+    status: exports_external.enum(["blocked", "unknown", "reviewable", "in-progress"]),
+    canFinishRun: exports_external.boolean(),
+    durablyFinishable: exports_external.boolean(),
+    finishAssessment: computerRunFinishAssessment,
+    repositories: exports_external.array(exports_external.looseObject({
+      repository: exports_external.string(),
+      path: exports_external.string(),
+      start: computerRunGitState.nullable(),
+      current: computerRunGitState.nullable(),
+      changedSinceRunStart: exports_external.boolean().nullable(),
+      publication: computerRunPublication,
+      pullRequest: exports_external.looseObject({
+        state: exports_external.enum(["none", "head-mismatch", "open", "merged", "closed", "unknown"]),
+        number: exports_external.number().int().positive().optional(),
+        url: exports_external.string().optional(),
+        headSha: exports_external.string().optional(),
+        baseRef: exports_external.string().optional(),
+        draft: exports_external.boolean().optional()
+      }),
+      ci: exports_external.looseObject({
+        state: exports_external.enum(["none", "pending", "passed", "failed", "unknown"]),
+        total: exports_external.number().int().min(0),
+        pending: exports_external.number().int().min(0),
+        passed: exports_external.number().int().min(0),
+        failed: exports_external.number().int().min(0)
+      }),
+      review: exports_external.looseObject({
+        state: exports_external.enum(["not-applicable", "none", "approved", "changes-requested", "unknown"]),
+        approvals: exports_external.number().int().min(0),
+        changesRequested: exports_external.number().int().min(0)
+      }),
+      githubProof: exports_external.looseObject({
+        state: exports_external.enum(["known", "unknown"]),
+        reasonCode: exports_external.string()
+      }),
+      state: exports_external.enum([
+        "unchanged",
+        "working",
+        "committed-local",
+        "publication-unknown",
+        "pushed-durable",
+        "github-unknown",
+        "pr-head-mismatch",
+        "pr-open",
+        "ci-pending",
+        "reviewable",
+        "merged"
+      ]),
+      retrySafety: exports_external.looseObject({
+        push: exports_external.enum(["not-needed", "safe", "unknown"]),
+        prCreate: exports_external.enum(["not-needed", "safe", "manual", "unknown"])
+      }),
+      nextAction: exports_external.string()
+    }))
+  }),
   computer_run_receipt: exports_external.looseObject({
     receipt: computerRunReceipt
   }),
@@ -17568,7 +17677,21 @@ var MCP_OUTPUT_SCHEMAS = {
     stderr: exports_external.string().optional(),
     truncated: exports_external.boolean().optional(),
     nextCursor: exports_external.string().optional(),
-    exitCode: exports_external.number().int().nullable().optional()
+    exitCode: exports_external.number().int().nullable().optional(),
+    activity: exports_external.looseObject({
+      state: exports_external.enum(["output", "compute", "quiet", "terminal", "unknown"]),
+      observedAt: timestamp,
+      outputAdvanced: exports_external.boolean(),
+      cpuPercent: exports_external.number().min(0).nullable(),
+      processCount: exports_external.number().int().min(0).nullable(),
+      reasonCode: exports_external.string()
+    }).optional(),
+    recovery: exports_external.looseObject({
+      state: exports_external.enum(["provider-timeout", "provider-lost", "unknown"]),
+      reasonCode: exports_external.string(),
+      mutationRetrySafety: exports_external.enum(["unsafe", "unknown"]),
+      nextAction: exports_external.enum(["computer_process_read", "computer_run_receipt"])
+    }).optional()
   }),
   computer_process_terminate: exports_external.looseObject({
     status: exports_external.string(),
@@ -17766,7 +17889,9 @@ var OUTPUT_SHAPERS = {
     ["nextCursor", result.nextCursor],
     ["endedAt", result.endedAt],
     ["durationMs", result.durationMs],
-    ["exitCode", result.exitCode]
+    ["exitCode", result.exitCode],
+    ["activity", result.activity],
+    ["recovery", result.recovery]
   ]),
   computer_process_terminate: (result) => defined([
     ["status", result.status],
@@ -17908,6 +18033,7 @@ var MCP_TOOL_ANNOTATIONS = {
   computer_open: additive,
   computer_reprovision: destructiveIdempotent,
   computer_run_start: additive,
+  computer_repo_work_status: readOnly,
   computer_run_finish: idempotent,
   computer_run_receipt: readOnly,
   computer_runs: readOnly,
@@ -17982,6 +18108,14 @@ var PAGINATION_INPUT = {
   limit: exports_external.number().int().min(1).optional().describe("max items to return — enables pagination"),
   cursor: exports_external.string().optional().describe("opaque cursor from a prior response's nextCursor (use with --limit)")
 };
+var LIVE_PREVIEW_CONFIG_INPUT = {
+  livePreview: exports_external.object({
+    command: exports_external.string().min(1).max(4000).describe("explicit project preview command"),
+    cwd: exports_external.string().startsWith("/workspace/").describe("workspace directory containing the project"),
+    port: exports_external.number().int().min(1).max(65535).describe("local HTTP/WebSocket port"),
+    healthPath: exports_external.string().startsWith("/").describe("HTTP health path checked before proxying")
+  }).nullable().optional().describe("one inherited Thread Live Preview startup surface; null disables an inherited surface. This is runtime policy and does not change Computer recipe identity")
+};
 var ACTION_DEFINITIONS = [
   {
     name: "server_info",
@@ -18253,7 +18387,8 @@ var ACTION_DEFINITIONS = [
       backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
       containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, GitHub CLI (gh), Bun 1.3.3, bunx, Node 26.5.1, pnpm 10.33.0, Python 3.13.15 (python/python3), jq, and ripgrep (rg), or null to clear inherited profile"),
       setupScript: exports_external.string().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize"),
-      repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
+      repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits"),
+      ...LIVE_PREVIEW_CONFIG_INPUT
     },
     surfaces: ["mcp", "cli"],
     toolset: "structure",
@@ -18268,7 +18403,8 @@ var ACTION_DEFINITIONS = [
       backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
       containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, GitHub CLI (gh), Bun 1.3.3, bunx, Node 26.5.1, pnpm 10.33.0, Python 3.13.15 (python/python3), jq, and ripgrep (rg), or null to clear inherited profile"),
       setupScript: exports_external.string().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize"),
-      repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
+      repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits"),
+      ...LIVE_PREVIEW_CONFIG_INPUT
     },
     surfaces: ["mcp", "cli"],
     toolset: "structure",
@@ -18288,7 +18424,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_open",
     title: "Open a Thread computer",
-    description: "Open or resume this Thread's project environment for filesystem or command work. A safe living-profile revision drift is reconciled automatically by replacing the generation, restoring supported state, and returning reconciliation metadata; structural recipe changes still fail explicitly with computer_reprovision as the suggested action. Every configured repository is re-authorized through its explicit GitHub connection; a fresh reusable base clones it with a request-scoped contents:read credential before strict setup runs, while a restore receives no credential. Returns computerSessionId — pass it unchanged to later Computer tools and cited work — plus a compact Agent Brief with Thread objective, scoped Space/Topic guidance and provenance, durable parent snapshot, repositories, and active Runs; the selected profile contract; a resolved capabilities card; workspaceRoot; each materialized repositories[].path; and defaultCwd. Omitted computer_exec.cwd uses defaultCwd: the single checkout when exactly one repository is configured, workspaceRoot otherwise.",
+    description: "Open or resume this Thread's project environment for filesystem or command work. A safe living-profile revision drift is reconciled automatically by replacing the generation, restoring supported state, and returning reconciliation metadata; structural recipe changes still fail explicitly with computer_reprovision as the suggested action. Every configured repository is re-authorized through its explicit GitHub connection; a fresh reusable base clones it with a request-scoped contents:read credential before strict setup runs, while a restore receives no credential. Returns computerSessionId — pass it unchanged to later Computer tools and cited work — plus a compact Agent Brief with Thread objective, scoped Space/Topic guidance and provenance, durable parent snapshot, repositories, explicit unchecked remote-freshness guidance, and active Runs; the selected profile contract; a resolved capabilities card; workspaceRoot; each materialized repositories[].path; and defaultCwd. Omitted computer_exec.cwd uses defaultCwd: the single checkout when exactly one repository is configured, workspaceRoot otherwise.",
     inputSchema: {
       threadId: exports_external.string().describe("the Arbor Thread whose stable computer to open, thr_…"),
       vcpus: exports_external.number().int().min(1).max(4).optional().describe("optional container vCPU request"),
@@ -18325,6 +18461,17 @@ var ACTION_DEFINITIONS = [
     toolset: "loop",
     run: forward("computer_runtime.run_start")
   },
+  {
+    name: "computer_repo_work_status",
+    title: "Inspect repository finish state",
+    description: "READ ONLY: resolve repository-finish state for an active isolated WRITE Run from authoritative Git remote proof plus GitHub PR, CI, and review reads; the bounded inspection uses three batched provider exec phases and at most four GitHub REST calls per eligible repository. It reports durable state, explicit push/PR retrySafety, known PR-head mismatches versus unavailable GitHub proof, the next action, and Run finishability; it never commits, pushes, creates a PR, merges, or deploys.",
+    inputSchema: {
+      runId: exports_external.string().describe("the active isolated WRITE Run to inspect, run_…")
+    },
+    surfaces: ["computer-mcp", "computer-cli"],
+    toolset: "loop",
+    run: forward("computer_runtime.repo_work_status")
+  },
   {
     name: "computer_run_finish",
     title: "Finish a run",
@@ -18342,7 +18489,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_run_receipt",
     title: "Read a run receipt",
-    description: "READ ONLY: read one run's compact receipt — its purpose, actor, computer session, base snapshot and starting Git projection, explicit isolation/durability contract, pre-teardown durability assessment when available (including publication that remains unknown unless proven), meaningful activity, and terminal outcome. Background work may appear as distilled labels/outcomes, but Arbor keeps no raw command transcript or process output. The receipt stays readable after the Run is terminal.",
+    description: "READ ONLY: read one run's compact receipt — its purpose, actor, computer session, base snapshot and starting Git projection, explicit isolation/durability contract, pre-teardown durability assessment when available (including publication that remains unknown unless proven), durable operation receipts with stable state/reason/retry-safety, meaningful activity, and terminal outcome. Foreground and background work may appear as distilled process identities/labels/outcomes, but Arbor keeps no raw command transcript or process output. The receipt stays readable after the Run is terminal.",
     inputSchema: {
       runId: exports_external.string().describe("the run to read, run_… (from computer_run_start or computer_runs)")
     },
@@ -18366,7 +18513,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_exec",
     title: "Run a command",
-    description: "Run one bounded logical operation in an opened Thread computer. Omitting cwd uses the environment's defaultCwd; pass cwd explicitly to override it. Pass runId to route the command according to that Run's execution placement; without runId the command executes in the parent Computer. Strict Bash semantics are ON by default. For tests, builds, installs, or any command likely to run long, prefer background=true so the call returns a processId immediately; follow it with computer_process_read using the returned cursor for small incremental tails. For a labeled run-scoped verification check, pass activityKind=verification so the terminal exit becomes a distilled verification outcome. For a connected human, Arbor supplies ambient GitHub authorization and Git identity ephemerally without writing credentials into the workspace. Background processes stay in the environment where they were started.",
+    description: "Run one bounded logical operation in an opened Thread computer. Omitting cwd uses the environment's defaultCwd; pass cwd explicitly to override it. Pass runId to route the command according to that Run's execution placement; without runId the command executes in the parent Computer. Strict Bash semantics are ON by default. For explicit asynchronous work, background=true returns a processId immediately. On an isolated container Run, foreground exec also establishes a durable operation/process identity before Arbor waits; a missed foreground response can be recovered from computer_run_receipt.operations and computer_process_read without repeating the mutation. For a labeled run-scoped verification check, pass activityKind=verification so the terminal exit becomes a distilled verification outcome. For a connected human, Arbor supplies ambient GitHub authorization and Git identity ephemerally without writing credentials into the workspace. Provider-owned processes stay in the environment where they were started.",
     inputSchema: {
       computerSessionId: exports_external.string().optional().describe("the computerSessionId returned by computer_open, cms_…; required unless runId is supplied"),
       command: exports_external.string().min(1).describe("the shell command to run"),
@@ -18385,7 +18532,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_process_read",
     title: "Read a background process",
-    description: "READ ONLY: Tail one process returned by computer_exec(background=true). With no cursor, returns only the latest small output window; pass nextCursor on the next read to receive only newer output. Defaults to 4 KB total and allows an explicit larger read up to 64 KB. Once terminal, also returns the final exit result.",
+    description: "READ ONLY: Read one provider-owned process from computer_exec, including a recoverable foreground operation discovered through computer_run_receipt.operations. With no cursor, returns only the latest small output window; pass nextCursor on the next read to receive only newer output. Defaults to 4 KB total and allows an explicit larger read up to 64 KB. Returns the existing compact activity receipt that distinguishes fresh output, active CPU work, quiet running, terminal state, and unavailable telemetry without exposing raw process tables. For a known foreground recovery handle whose provider state cannot be observed, returns structured recovery state/reason/retry-safety instead of guessing. Once terminal, also returns the final exit result.",
     inputSchema: {
       computerSessionId: exports_external.string().optional().describe("the computerSessionId returned by computer_open, cms_…; required unless runId is supplied"),
       runId: exports_external.string().optional().describe("the Run that owns this process, if it was started inside a Run"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.20.12",
+  "version": "0.20.14",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",