@lambdacurry/arbor 0.21.10 → 0.21.12

package/dist/arbor.js

@@ -17207,6 +17207,17 @@ function date4(params) {
 
 // ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/external.js
 config(en_default());
+// ../actions/src/external-read-defaults.ts
+var EXTERNAL_DEFAULT_PAGE_SIZE = 50;
+var EXTERNAL_DEFAULT_CONTRIB_LIMIT = 50;
+var EXTERNAL_DEFAULT_THREAD_VIEW = "compact";
+var EXTERNAL_READ_DEFAULTS_BY_OPERATION = {};
+function recordExternalReadDefaults(operation, defaults) {
+  if (!operation || !defaults)
+    return;
+  EXTERNAL_READ_DEFAULTS_BY_OPERATION[operation] = defaults;
+}
+
 // ../actions/src/output-schemas.ts
 var id = exports_external.string();
 var timestamp = exports_external.string();
@@ -18507,7 +18518,6 @@ var MCP_OUTPUT_SCHEMAS = {
 function outputSchemaFor(actionName) {
   return MCP_OUTPUT_SCHEMAS[actionName];
 }
-
 // ../actions/src/output-shaping.ts
 function record2(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
@@ -18935,7 +18945,15 @@ function isProseList(schema) {
   return PROSE_LISTS.has(schema);
 }
 function forward(operation) {
-  return (ex, input) => ex.call(operation, input);
+  const run = (ex, input) => ex.call(operation, input);
+  run.operation = operation;
+  return run;
+}
+function forwardedOperation(run) {
+  if (!("operation" in run))
+    return;
+  const value = run.operation;
+  return typeof value === "string" ? value : undefined;
 }
 function dispatch(map2, reshape) {
   return (ex, input) => {
@@ -18989,10 +19007,11 @@ function runAdminFeedback(ex, input) {
     return ex.call("feedback_admin.topic", rest);
   return Promise.reject(new Error(`unknown verb "${verb ?? ""}" — expected one of: ${ADMIN_FEEDBACK_VERB_HELP}`));
 }
-var NOTIFICATION_TRIAGE_DESCRIPTION = "READ ONLY: List your awareness feed newest first with unseen count and derived triage class: `settled-context` = settled Thread context; `owed-by-me` = an open request pointing to `inbox`; `judgment-available` = live engagement inviting judgment; `closed-loop` = your request completed; `room-motion` = ambient activity. Notifications are FYI, not a second obligation surface: `inbox` alone contains work owed by you; this cannot mark notifications read or modify inbox obligations.";
+var NOTIFICATION_TRIAGE_DESCRIPTION = "List your awareness feed newest first with unseen count and derived triage class: `settled-context` = settled Thread context; `owed-by-me` = an open request pointing to `inbox`; `judgment-available` = live engagement inviting judgment; `closed-loop` = your request completed; `room-motion` = ambient activity. Notifications are FYI, not a second obligation surface: `inbox` alone contains work owed by you; this cannot mark notifications read or modify inbox obligations.";
 var PAGINATION_INPUT = {
-  limit: exports_external.number().int().min(1).optional().describe("max items to return — enables pagination"),
-  cursor: exports_external.string().optional().describe("opaque cursor from a prior response's nextCursor (use with --limit)")
+  limit: exports_external.number().int().min(1).optional().describe(`max items to return. MCP/CLI/API default to ${EXTERNAL_DEFAULT_PAGE_SIZE} and return nextCursor when more remain; pass all=true/--all for the complete list. In-process web omit is still a compatibility full read`),
+  cursor: exports_external.string().optional().describe("opaque cursor from a prior response's nextCursor (use with --limit)"),
+  all: exports_external.boolean().optional().describe("explicit complete retrieval — skip the bounded default page. Prefer limit+cursor unless you need the whole collection")
 };
 var LIVE_PREVIEW_CONFIG_INPUT = {
   livePreview: exports_external.object({
@@ -19006,7 +19025,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "server_info",
     title: "Inspect Arbor server version",
-    description: "READ ONLY: Return the Arbor release version and current Cloudflare deployment identity so a client can distinguish a fresh server from a cached tool catalog. This cannot modify Arbor, Computer, App, access, or durable state.",
+    description: "Return the Arbor release version and current Cloudflare deployment identity so a client can distinguish a fresh server from a cached tool catalog. This cannot modify Arbor, Computer, App, access, or durable state.",
     inputSchema: {},
     surfaces: ["mcp", "cli", "computer-mcp", "computer-cli"],
     toolset: "structure",
@@ -19015,7 +19034,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "github_repositories",
     title: "List installed GitHub repositories",
-    description: "READ ONLY: List repositories covered by this organization's verified Arbor Computer GitHub App, returning ids and metadata but never credentials. Use github_connect_repository to authorize one at an Arbor scope; listing alone grants no Computer access.",
+    description: "List repositories covered by this organization's verified Arbor Computer GitHub App, returning ids and metadata but never credentials. Use github_connect_repository to authorize one at an Arbor scope; listing alone grants no Computer access.",
     inputSchema: { ...PAGINATION_INPUT },
     surfaces: ["computer-mcp", "cli"],
     toolset: "projects",
@@ -19065,7 +19084,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "recall",
     title: "Recall existing knowledge",
-    description: "READ ONLY: Search Arbor semantically for existing contributions, artifacts, and decisions. Use `tree` for lifecycle/attention routing; once you know the area, pass space/topic/thread to keep recall inside that working set before targeted reads.",
+    description: "Search Arbor semantically for existing contributions, artifacts, and decisions. Use `tree` for lifecycle/attention routing; once you know the area, pass space/topic/thread to keep recall inside that working set before targeted reads.",
     inputSchema: {
       query: exports_external.string().min(1).describe("what you want to recall, in natural language"),
       space: exports_external.string().optional().describe("optional space id to scope the search"),
@@ -19081,7 +19100,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "feedback_tree",
     title: "Browse the shared Arbor Feedback forum",
-    description: "READ ONLY: Browse the global Arbor Feedback forum by Topic and optional Thread roster; the global scope is implied and no Space id is required. New reports appear as their own shared Threads as submitted; private receipt metadata and reviewer diagnostics are never returned.",
+    description: "Browse the global Arbor Feedback forum by Topic and optional Thread roster; the global scope is implied and no Space id is required. New reports appear as their own shared Threads as submitted; private receipt metadata and reviewer diagnostics are never returned.",
     inputSchema: {
       depth: exports_external.enum(["topics", "threads"]).optional().describe("topics (default) or threads to include each Topic's shared Thread roster"),
       includeArchived: exports_external.boolean().optional().describe("include archived Topics/Threads for historical moderation or lookup (default false)")
@@ -19093,7 +19112,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "feedback_recall",
     title: "Find known Arbor feedback",
-    description: "READ ONLY: Search the global shared Arbor Feedback forum for reports, workarounds, and decisions; scope to a Topic after feedback_tree when useful. New report bodies are searchable as submitted; private receipt ids, reporter metadata, and reviewer diagnostics are never returned.",
+    description: "Search the global shared Arbor Feedback forum for reports, workarounds, and decisions; scope to a Topic after feedback_tree when useful. New report bodies are searchable as submitted; private receipt ids, reporter metadata, and reviewer diagnostics are never returned.",
     inputSchema: {
       query: exports_external.string().min(1).describe("the Arbor friction, issue, workaround, or idea to find"),
       topicId: exports_external.string().optional().describe("optional shared Feedback Topic id from feedback_tree"),
@@ -19106,7 +19125,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "feedback_thread_get",
     title: "Read a shared Arbor Feedback thread",
-    description: "READ ONLY: Read one shared Arbor Feedback Thread, following a merge redirect to its canonical destination while preserving shared provenance. A newly filed report appears here as submitted; private receipt ids, reporter organization metadata, diagnostics, and private associations are not projected.",
+    description: "Read one shared Arbor Feedback Thread, following a merge redirect to its canonical destination while preserving shared provenance. A newly filed report appears here as submitted; private receipt ids, reporter organization metadata, diagnostics, and private associations are not projected.",
     inputSchema: {
       threadId: exports_external.string().describe("the shared Feedback Thread id, thr_…")
     },
@@ -19135,7 +19154,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "feedback_status",
     title: "Check your Arbor feedback receipt",
-    description: "READ ONLY: Check triage metadata and the shared identity for one Arbor feedback receipt you own. Missing and not-owned receipts look identical; receiptPrivate=true covers reviewer metadata, while visibility/sharedThreadId describe the filed report, and no raw body, identities, diagnostics, or private association targets are returned.",
+    description: "Check triage metadata and the shared identity for one Arbor feedback receipt you own. Missing and not-owned receipts look identical; receiptPrivate=true covers reviewer metadata, while visibility/sharedThreadId describe the filed report, and no raw body, identities, diagnostics, or private association targets are returned.",
     inputSchema: {
       feedbackId: exports_external.string().describe("your Arbor feedback receipt id, fbk_…")
     },
@@ -19569,7 +19588,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_repo_work_status",
     title: "Inspect repository finish state",
-    description: "READ ONLY: Inspect an active isolated WRITE Run's Git publication, PR, CI, and review before retry, wait, or finish. Returns repository state (e.g. ci-pending) plus runDisposition.action computer_run_suspend when published work waits on CI/review/human authorization — the same runId resumes; dirty, unpublished, unknown-publication, failing, or changes-requested work keeps the local nextAction.",
+    description: "Inspect an active isolated WRITE Run's Git publication, PR, CI, and review before retry, wait, or finish. Returns repository state (e.g. ci-pending) plus runDisposition.action computer_run_suspend when published work waits on CI/review/human authorization — the same runId resumes; dirty, unpublished, unknown-publication, failing, or changes-requested work keeps the local nextAction.",
     inputSchema: {
       runId: exports_external.string().describe("the active isolated WRITE Run to inspect, run_…")
     },
@@ -19594,7 +19613,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_run_receipt",
     title: "Read a run receipt",
-    description: "READ ONLY: Inspect one Run's durable receipt during or after execution, including its Run-owned operation/activity state and a compact providerLifecycle journal (generation, last phase, typed reason) separate from command/process activity. Use this instead of parent computer_status; it returns compact history, not transcripts, and does not rewrite terminal reasonCode.",
+    description: "Inspect one Run's durable receipt during or after execution, including its Run-owned operation/activity state and a compact providerLifecycle journal (generation, last phase, typed reason) separate from command/process activity. Use this instead of parent computer_status; it returns compact history, not transcripts, and does not rewrite terminal reasonCode.",
     inputSchema: {
       runId: exports_external.string().describe("the run to read, run_… (from computer_run_start or computer_runs)")
     },
@@ -19605,7 +19624,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_runs",
     title: "List runs",
-    description: "READ ONLY: List active or recent Runs for this Thread Computer when deciding whether to resume existing work or start another unit. Returns each Run's mode, execution placement, workspace identity, and lifecycle status.",
+    description: "List active or recent Runs for this Thread Computer when deciding whether to resume existing work or start another unit. Returns each Run's mode, execution placement, workspace identity, and lifecycle status.",
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
       status: exports_external.enum(["active", "finished", "failed", "cancelled"]).optional().describe("filter to one lifecycle status"),
@@ -19637,7 +19656,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_process_read",
     title: "Read a background process",
-    description: "READ ONLY: Read a provider-owned process from computer_exec, including a foreground operation recovered from a Run receipt, and use nextCursor for incremental output. Returns compact activity or recovery state plus the final exit result when observable.",
+    description: "Read a provider-owned process from computer_exec, including a foreground operation recovered from a Run receipt, and use nextCursor for incremental output. Returns compact activity or recovery state plus the final exit result when observable.",
     inputSchema: {
       computerSessionId: exports_external.string().optional().describe("the computerSessionId returned by computer_open, cms_…; required unless runId is supplied"),
       runId: exports_external.string().optional().describe("the Run that owns this process, if it was started inside a Run"),
@@ -19665,7 +19684,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_status",
     title: "Inspect a computer",
-    description: "READ ONLY: Inspect the live PARENT Thread Computer's capabilities, execution readiness, processes, and profile. If its named command session is unavailable, command capabilities disappear and recovery points to computer_open; this does not report isolated Run command state, so use computer_run_receipt for Run state or get_computer for durable lineage.",
+    description: "Inspect the live PARENT Thread Computer's capabilities, execution readiness, processes, and profile. If its named command session is unavailable, command capabilities disappear and recovery points to computer_open; this does not report isolated Run command state, so use computer_run_receipt for Run state or get_computer for durable lineage.",
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…")
     },
@@ -19688,7 +19707,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "code_symbols",
     title: "Outline a file's symbols",
-    description: "READ ONLY: Outline real declarations in a file or directory when you need structure without reading or searching the whole source. Uses the language server to return symbols and kinds, distinguishing declarations from textual matches.",
+    description: "Outline real declarations in a file or directory when you need structure without reading or searching the whole source. Uses the language server to return symbols and kinds, distinguishing declarations from textual matches.",
     inputSchema: {
       computerSessionId: exports_external.string().optional().describe("parent Computer target; optional when runId is supplied, otherwise required; if both are supplied they must agree"),
       runId: exports_external.string().optional().describe("Run target that resolves its owning Computer session, run_…"),
@@ -19701,7 +19720,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "code_find_symbol",
     title: "Find a symbol by name path",
-    description: "READ ONLY: Locate a declaration by name path when you need the definition rather than text matches. Uses the language server and can include the symbol body and bounded child depth.",
+    description: "Locate a declaration by name path when you need the definition rather than text matches. Uses the language server and can include the symbol body and bounded child depth.",
     inputSchema: {
       computerSessionId: exports_external.string().optional().describe("parent Computer target; optional when runId is supplied, otherwise required; if both are supplied they must agree"),
       runId: exports_external.string().optional().describe("Run target that resolves its owning Computer session, run_…"),
@@ -19717,7 +19736,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "code_references",
     title: "Find what references a symbol",
-    description: "READ ONLY: Find semantic references to a declaration when you need to know what actually depends on it before a change. Uses the language server to return resolved references with snippets, excluding unrelated textual matches.",
+    description: "Find semantic references to a declaration when you need to know what actually depends on it before a change. Uses the language server to return resolved references with snippets, excluding unrelated textual matches.",
     inputSchema: {
       computerSessionId: exports_external.string().optional().describe("parent Computer target; optional when runId is supplied, otherwise required; if both are supplied they must agree"),
       runId: exports_external.string().optional().describe("Run target that resolves its owning Computer session, run_…"),
@@ -19731,7 +19750,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "code_implementations",
     title: "Find implementations of a symbol",
-    description: "READ ONLY: Find concrete implementations or subtypes of an interface, abstract type, or method. Uses the language server to resolve type relationships that text search cannot follow.",
+    description: "Find concrete implementations or subtypes of an interface, abstract type, or method. Uses the language server to resolve type relationships that text search cannot follow.",
     inputSchema: {
       computerSessionId: exports_external.string().optional().describe("parent Computer target; optional when runId is supplied, otherwise required; if both are supplied they must agree"),
       runId: exports_external.string().optional().describe("Run target that resolves its owning Computer session, run_…"),
@@ -19745,7 +19764,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "code_diagnostics",
     title: "Read language-server diagnostics for a file",
-    description: "READ ONLY: Check live language-server errors and warnings for one file, especially after an edit. Returns diagnostics mapped to symbols for fast local feedback; it does not replace a whole-project build or typecheck.",
+    description: "Check live language-server errors and warnings for one file, especially after an edit. Returns diagnostics mapped to symbols for fast local feedback; it does not replace a whole-project build or typecheck.",
     inputSchema: {
       computerSessionId: exports_external.string().optional().describe("parent Computer target; optional when runId is supplied, otherwise required; if both are supplied they must agree"),
       runId: exports_external.string().optional().describe("Run target that resolves its owning Computer session, run_…"),
@@ -19862,7 +19881,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "get_computer",
     title: "Read a Thread computer",
-    description: "READ ONLY: Inspect a Thread's durable Computer recipe/materialization state, compatibility, snapshot lineage, recent receipts, Runs, and reprovision outcomes; setup content and credentials stay redacted. Use computer_open or computer_status for live execution state; this surface reports durable Arbor protocol state.",
+    description: "Inspect a Thread's durable Computer recipe/materialization state, compatibility, snapshot lineage, recent receipts, Runs, and reprovision outcomes; setup content and credentials stay redacted. Use computer_open or computer_status for live execution state; this surface reports durable Arbor protocol state.",
     inputSchema: {
       threadId: exports_external.string().describe("the Thread, thr_…"),
       lineageLimit: exports_external.number().int().min(1).max(100).optional().describe("recent receipts/lineage rows (default 20)")
@@ -19874,7 +19893,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_inventory",
     title: "Inventory organization Computers",
-    description: "READ ONLY: Inventory materialized Thread Computers in your organization, optionally scoped to a Topic, with active generation, compatibility, lifecycle counts, and factual anomaly flags. Organization owner/admin only; this is evidence, not a deletion recommendation.",
+    description: "Inventory materialized Thread Computers in your organization, optionally scoped to a Topic, with active generation, compatibility, lifecycle counts, and factual anomaly flags. Organization owner/admin only; this is evidence, not a deletion recommendation.",
     inputSchema: {
       topicId: exports_external.string().optional().describe("optional Topic to scope the inventory"),
       limit: exports_external.number().int().min(1).max(50).optional().describe("rows to return (default 25)"),
@@ -20216,14 +20235,19 @@ var ACTION_DEFINITIONS = [
   {
     name: "thread_get",
     title: "Read a thread",
-    description: "READ ONLY: Read one Thread; full view returns transcript, requests, and artifacts, while compact returns bounded decision-ready context with distillate/recent items and supports cursored unchanged checks. Read it before contributing so you can answer open requests correctly; use contribution pagination only for full history.",
+    description: "Read one Thread as compact current context (distillate, requests, artifacts, recent tail, cursored unchanged checks) — not the durable transcript; pass view=full to page history (contribLimit default 50) or all=true for the complete transcript. Read it before contributing so you can answer open requests correctly.",
     inputSchema: {
       threadId: exports_external.string().describe("the thread id, e.g. thr_…"),
-      view: exports_external.enum(["full", "compact"]).optional().describe("full (default) = complete transcript; compact = bounded decision-ready context packet for recurring checks"),
+      view: exports_external.enum(["full", "compact"]).optional().describe("MCP/CLI/API default compact = bounded decision-ready context; full = transcript page"),
       cursor: exports_external.string().optional().describe("compact reads only: cursor from the previous compact response; if context is unchanged the response collapses to a tiny unchanged envelope"),
       recentLimit: exports_external.number().int().min(1).max(20).optional().describe("compact reads only: latest contributions to include (default 6, max 20)"),
-      contribLimit: exports_external.number().int().positive().optional().describe("full reads only: max contributions to return (AD-151 keyset paging) — omit to load the whole thread"),
-      contribCursor: exports_external.string().optional().describe("full reads only: continuation cursor from a previous page's contributionPage.nextCursor")
+      contribLimit: exports_external.number().int().positive().optional().describe(`full reads only: max contributions to return (AD-151 keyset paging). MCP/CLI/API default to ${EXTERNAL_DEFAULT_CONTRIB_LIMIT}; pass all=true for the whole thread`),
+      contribCursor: exports_external.string().optional().describe("full reads only: continuation cursor from a previous page's contributionPage.nextCursor"),
+      all: exports_external.boolean().optional().describe("explicit complete transcript on view=full — skip the bounded contribLimit. Prefer contribLimit+contribCursor unless you need every contribution")
+    },
+    externalReadDefaults: {
+      view: EXTERNAL_DEFAULT_THREAD_VIEW,
+      contribLimit: EXTERNAL_DEFAULT_CONTRIB_LIMIT
     },
     surfaces: ["mcp", "cli"],
     toolset: "loop",
@@ -20243,7 +20267,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "tree",
     title: "Navigate the workspace tree",
-    description: "READ ONLY: Map Spaces to Topics to Threads for orientation; Topic `activeThreadCount` is the current working set (active/stuck/needs-review/standing), while `status` is area attention (`stuck`=any stuck, `attention`=needs-review or open request, `healthy`=neither), not personal obligation (`inbox`). In a large Space, choose the Topic here, scope recall to it, then read only the returned Thread/Artifact; expand tree or use topic_get only for explicit enumeration or Topic-wide context.",
+    description: "Map Spaces to Topics to Threads for orientation; Topic `activeThreadCount` is the current working set (active/stuck/needs-review/standing), while `status` is area attention (`stuck`=any stuck, `attention`=needs-review or open request, `healthy`=neither), not personal obligation (`inbox`). In a large Space, choose the Topic here, scope recall to it, then read only the returned Thread/Artifact; expand tree or use topic_get only for explicit enumeration or Topic-wide context.",
     inputSchema: {
       space: exports_external.string().optional().describe("scope to one space id (spc_…)"),
       topic: exports_external.string().optional().describe("scope to one topic id (top_…)"),
@@ -20256,7 +20280,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "members",
     title: "List the people + agents in your org",
-    description: "READ ONLY: List everyone in your org with profile id, human/agent identity, role, charter, and capabilities needed for routing. Use it to resolve profile ids for mentions or targeted requests; it cannot modify membership.",
+    description: "List everyone in your org with profile id, human/agent identity, role, charter, and capabilities needed for routing. Use it to resolve profile ids for mentions or targeted requests; it cannot modify membership.",
     inputSchema: {},
     surfaces: ["mcp", "cli"],
     toolset: "loop",
@@ -20512,7 +20536,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "space_get",
     title: "Read a space",
-    description: "READ ONLY: Read a Space's durable context: purpose, guidance, contribution lanes, Topics, and full member roster with roles, capabilities, and charters. Use it after tree when you need the room's full norms or collaborator context; it cannot modify membership or guidance.",
+    description: "Read a Space's durable context: purpose, guidance, contribution lanes, Topics, and full member roster with roles, capabilities, and charters. Use it after tree when you need the room's full norms or collaborator context; it cannot modify membership or guidance.",
     inputSchema: {
       spaceId: exports_external.string().min(1).describe("the space id")
     },
@@ -20523,7 +20547,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "topic_get",
     title: "Read a topic",
-    description: "READ ONLY: Read a Topic's full details, guidance, complete Thread roster, open requests, and promoted artifacts. Use it for intentional Topic-wide context or enumeration; for a concrete question in a large Topic, prefer Topic-scoped recall first.",
+    description: "Read a Topic's full details, guidance, complete Thread roster, open requests, and promoted artifacts. Use it for intentional Topic-wide context or enumeration; for a concrete question in a large Topic, prefer Topic-scoped recall first.",
     inputSchema: {
       topicId: exports_external.string().min(1).describe("the topic id")
     },
@@ -21058,7 +21082,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "app_list",
     title: "List visible Apps",
-    description: "READ ONLY: List Apps visible to you, including authorized archived Apps when requested. It cannot modify App state, deployment state, access, or durable SQLite.",
+    description: "List Apps visible to you, including authorized archived Apps when requested. It cannot modify App state, deployment state, access, or durable SQLite.",
     inputSchema: {
       includeArchived: exports_external.boolean().optional().describe("include archived Apps you are authorized to inspect")
     },
@@ -21069,7 +21093,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "app_get",
     title: "Read an App",
-    description: "READ ONLY: Inspect one App's stable URL, active deployment, pending control intent, deployment history, provider health, deployment-aware redacted configuration readiness for the active release, and durable state generation. It cannot modify App state, deployment state, access, or durable SQLite; use its activeDeploymentId as app_activate's expectedActiveDeploymentId.",
+    description: "Inspect one App's stable URL, active deployment, pending control intent, deployment history, provider health, deployment-aware redacted configuration readiness for the active release, and durable state generation. It cannot modify App state, deployment state, access, or durable SQLite; use its activeDeploymentId as app_activate's expectedActiveDeploymentId.",
     inputSchema: { appId: exports_external.string().describe("the App, app_…") },
     surfaces: ["computer-mcp", "cli"],
     toolset: "apps",
@@ -21093,7 +21117,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "preview_app_get",
     title: "Read a Preview App",
-    description: "READ ONLY: Inspect one Preview App's public URL, pinned ArtifactVersion/AppBundle lineage, absolute expiry, Thread status, and bounded WebSocket room contract. It is not a Space App catalog read.",
+    description: "Inspect one Preview App's public URL, pinned ArtifactVersion/AppBundle lineage, absolute expiry, Thread status, and bounded WebSocket room contract. It is not a Space App catalog read.",
     inputSchema: { previewAppId: exports_external.string().describe("the Preview App, papp_…") },
     surfaces: ["computer-mcp", "cli"],
     toolset: "apps",
@@ -21169,7 +21193,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "app_deployment_get",
     title: "Inspect an App deployment",
-    description: "READ ONLY: Inspect one deployment's state, source bundle, provider receipt, phased redacted health (load|activation|runtime), and config readiness. It cannot modify App state, deployment state, access, or durable SQLite.",
+    description: "Inspect one deployment's state, source bundle, provider receipt, phased redacted health (load|activation|runtime), and config readiness. It cannot modify App state, deployment state, access, or durable SQLite.",
     inputSchema: {
       appId: exports_external.string().describe("owning App, app_…"),
       deploymentId: exports_external.string().describe("deployment, dep_…")
@@ -21181,7 +21205,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "app_fetch",
     title: "Fetch from an App",
-    description: "READ ONLY: Invoke GET or HEAD on one relative path of an App using your current Arbor identity; for Space Apps, current Space membership is rechecked on every call. It cannot modify App lifecycle, deployments, access, or durable SQLite; browser grants, cookies, credentials, and reserved /__arbor paths are never exposed to App code.",
+    description: "Invoke GET or HEAD on one relative path of an App using your current Arbor identity; for Space Apps, current Space membership is rechecked on every call. It cannot modify App lifecycle, deployments, access, or durable SQLite; browser grants, cookies, credentials, and reserved /__arbor paths are never exposed to App code.",
     inputSchema: {
       appId: exports_external.string().describe("target App, app_…"),
       path: exports_external.string().min(1).max(2048).describe("relative App path beginning with /; may include a query string"),
@@ -21333,15 +21357,16 @@ var ACTIONS = ACTION_DEFINITIONS.map((action) => {
   if (action.requiresCapability && !action.surfaces.includes("mcp")) {
     throw new Error(`${action.name}: requiresCapability is an MCP catalog gate`);
   }
+  const externalReadDefaults = action.inputSchema.limit === PAGINATION_INPUT.limit ? { ...action.externalReadDefaults, limit: EXTERNAL_DEFAULT_PAGE_SIZE } : action.externalReadDefaults;
+  recordExternalReadDefaults(forwardedOperation(action.run), externalReadDefaults);
   if (!action.surfaces.some((surface) => surface === "mcp" || surface === "computer-mcp")) {
-    return action;
+    return externalReadDefaults ? { ...action, externalReadDefaults } : action;
   }
   const outputSchema = outputSchemaFor(action.name);
   if (!outputSchema)
     throw new Error(`${action.name}: MCP action is missing an output schema`);
   const annotations = mcpAnnotationsFor(action.name);
-  const description = annotations.readOnlyHint && !action.description.startsWith("READ ONLY") ? `READ ONLY: ${action.description}` : action.description;
-  return { ...action, description, outputSchema, annotations };
+  return { ...action, externalReadDefaults, outputSchema, annotations };
 });
 
 // src/config.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.21.10",
+  "version": "0.21.12",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",