@lambdacurry/arbor 0.21.14 → 0.21.16

package/dist/arbor.js

@@ -17960,6 +17960,13 @@ var MCP_OUTPUT_SCHEMAS = {
     nextCursor: exports_external.string().nullable().optional(),
     hasMore: exports_external.boolean().optional()
   }),
+  github_refresh_installation: exports_external.looseObject({
+    installationId: id,
+    accountLogin: exports_external.string(),
+    repositorySelection: exports_external.enum(["all", "selected"]),
+    repositoryCount: exports_external.number().int().min(0),
+    lastSyncedAt: timestamp
+  }),
   github_connect_repository: exports_external.looseObject({
     repositoryId: id,
     scope: exports_external.enum(["organization", "space", "topic", "thread"]),
@@ -18010,7 +18017,11 @@ var MCP_OUTPUT_SCHEMAS = {
     unchanged: exports_external.boolean().optional()
   }),
   tree: exports_external.looseObject({ spaces: exports_external.array(treeSpace) }),
-  members: exports_external.looseObject({ members: exports_external.array(orgMember), total: exports_external.number().optional() }),
+  members: exports_external.looseObject({
+    members: exports_external.array(orgMember),
+    total: exports_external.number().optional(),
+    nextCursor: exports_external.string().optional()
+  }),
   space_create: exports_external.looseObject({ spaceId: id, visibility: exports_external.string() }),
   space_update: exports_external.looseObject({
     id,
@@ -18096,7 +18107,9 @@ var MCP_OUTPUT_SCHEMAS = {
     watching: exports_external.boolean()
   }),
   watch_list: exports_external.looseObject({
-    watches: exports_external.array(jsonObject).optional()
+    watches: exports_external.array(jsonObject).optional(),
+    total: exports_external.number().int().min(0),
+    nextCursor: exports_external.string().optional()
   }),
   curation: exports_external.looseObject({
     contributionId: id.optional(),
@@ -18206,7 +18219,11 @@ var MCP_OUTPUT_SCHEMAS = {
     url: exports_external.string(),
     replayed: exports_external.boolean()
   }),
-  app_list: exports_external.object({ result: exports_external.array(app2) }),
+  app_list: exports_external.looseObject({
+    apps: exports_external.array(app2),
+    total: exports_external.number().int().min(0),
+    nextCursor: exports_external.string().optional()
+  }),
   app_get: exports_external.looseObject({
     app: app2,
     deployments: exports_external.array(jsonObject),
@@ -18865,6 +18882,7 @@ var MCP_TOOL_ANNOTATIONS = {
   app_archive: additive,
   charter: destructive,
   github_repositories: readOnly,
+  github_refresh_installation: openWorld,
   github_connect_repository: idempotent,
   computer_open: additive,
   computer_reprovision: destructiveIdempotent,
@@ -18931,7 +18949,7 @@ Arbor Computer is the complete software execution platform attached to Arbor's d
 
 ${ARBOR_FEEDBACK_GUIDANCE}
 
-1. ORIENT, CONFIGURE, AND AUTHORIZE. Start with get_computer(threadId) to inspect the effective inherited recipe, repository authorization, compatibility, and durable lineage. Use set_organization_computer, set_space_computer, set_topic_computer, or set_thread_computer only when the corresponding complete sparse layer must be replaced; use github_repositories then github_connect_repository to authorize repositories at the narrowest scope that should inherit them. attach_computer mints durable protocol identity without starting a runtime; computer_open attaches as needed and starts or resumes the project environment. Each returned repository entry includes verified root instruction pointers when that repo has an AGENTS.md: read surfaced repository instructions before substantial edits or verification, then check for a nearer nested AGENTS.md once the target path is known. Repo-local instructions/scripts/config beat guessed formatter, test, lint, or build commands.
+1. ORIENT, CONFIGURE, AND AUTHORIZE. Start with get_computer(threadId) to inspect the effective inherited recipe, repository authorization, compatibility, and durable lineage. Use set_organization_computer, set_space_computer, set_topic_computer, or set_thread_computer only when the corresponding complete sparse layer must be replaced; use github_repositories then github_connect_repository to authorize repositories at the narrowest scope that should inherit them. If github_repositories looks stale, github_refresh_installation reconciles the cached inventory from GitHub. attach_computer mints durable protocol identity without starting a runtime; computer_open attaches as needed and starts or resumes the project environment. Each returned repository entry includes verified root instruction pointers when that repo has an AGENTS.md: read surfaced repository instructions before substantial edits or verification, then check for a nearer nested AGENTS.md once the target path is known. Repo-local instructions/scripts/config beat guessed formatter, test, lint, or build commands.
 2. READ THE CAPABILITIES CARD, NOT THE BACKEND. computer_open and computer_status describe the live PARENT Thread Computer and return the exact computerSessionId for parent filesystem, command, checkpoint, Preview, bundle, and stop operations. computer_status does not establish isolated Run activity; use computer_run_receipt(runId) and computer_process_read for Run-owned work. Command-line utilities, including Git and package managers, run through computer_exec; check unfamiliar binaries with command -v.
 3. ONE RUN PER TASK. A write Run defaults to an isolated execution environment with its own filesystem, processes, ports, and /tmp while preserving /workspace paths; a read Run shares the parent. Pass runId to Run-aware tools. If a response is lost, recover the durable operation/process identity from computer_run_receipt and read it before retrying. Once every operation is settled, computer_run_suspend publishes the exact workspace and releases the provider during an external wait; the next Run-aware operation restores that checkpoint under the same runId automatically. Suspension refuses active processes or unsettled outcomes and never replays unknown work, so reconcile process and Git/publication evidence first. An isolated local commit or Preview is not Git publication; push coherent work and prove it with computer_repo_work_status before computer_run_finish destroys the final placement. discard=true is the explicit choice to destroy proven non-durable work.
 4. CHECKPOINT COMPLETE PARENT UNITS. computer_checkpoint advances immutable parent lineage after an intermediate complete unit; computer_stop performs the final checkpoint before teardown. An isolated Run Preview is durable review output, not adoption or a checkpoint. The internal provider-handle publication operations are not agent tools.
@@ -19048,12 +19066,23 @@ var ACTION_DEFINITIONS = [
   {
     name: "github_repositories",
     title: "List installed GitHub repositories",
-    description: "List repositories covered by this organization's verified Arbor Computer GitHub App, returning ids and metadata but never credentials. Use github_connect_repository to authorize one at an Arbor scope; listing alone grants no Computer access.",
+    description: "List repositories covered by this organization's verified Arbor Computer GitHub App (ids and metadata, never credentials); listing alone grants no Computer access. Use github_connect_repository to authorize one at an Arbor scope, or github_refresh_installation when the cached inventory looks stale.",
     inputSchema: { ...PAGINATION_INPUT },
     surfaces: ["computer-mcp", "cli"],
     toolset: "projects",
     run: forward("github.repositories")
   },
+  {
+    name: "github_refresh_installation",
+    title: "Refresh a GitHub installation inventory",
+    description: "Reconcile one claimed GitHub App installation's cached repository inventory from GitHub without connecting repositories or changing App permissions. Org owner/admin only; pass installationId from github_repositories.",
+    inputSchema: {
+      installationId: exports_external.string().describe("claimed installation id from github_repositories, ghi_…")
+    },
+    surfaces: ["computer-mcp", "cli"],
+    toolset: "projects",
+    run: forward("github.refresh_installation")
+  },
   {
     name: "github_connect_repository",
     title: "Connect a GitHub repository",
@@ -20293,7 +20322,7 @@ var ACTION_DEFINITIONS = [
     name: "members",
     title: "List the people + agents in your org",
     description: "List everyone in your org with profile id, human/agent identity, role, charter, and capabilities needed for routing. Use it to resolve profile ids for mentions or targeted requests; it cannot modify membership.",
-    inputSchema: {},
+    inputSchema: { ...PAGINATION_INPUT },
     surfaces: ["mcp", "cli"],
     toolset: "loop",
     run: forward("org.members")
@@ -20779,7 +20808,7 @@ var ACTION_DEFINITIONS = [
     name: "watch_list",
     title: "List your watches",
     description: "List every Thread, Artifact, and Topic you currently watch. It cannot start or stop a watch or change notifications.",
-    inputSchema: {},
+    inputSchema: { ...PAGINATION_INPUT },
     surfaces: ["mcp"],
     toolset: "loop",
     run: forward("watch.list")
@@ -20812,7 +20841,7 @@ var ACTION_DEFINITIONS = [
     name: "watches",
     title: "List what you watch",
     description: "List every thread/artifact/topic you're watching (AD-202), newest first.",
-    inputSchema: {},
+    inputSchema: { ...PAGINATION_INPUT },
     surfaces: ["cli"],
     toolset: "loop",
     run: forward("watch.list")
@@ -21085,6 +21114,7 @@ var ACTION_DEFINITIONS = [
     title: "List visible Apps",
     description: "List Apps available to you: every App in your Spaces plus active listed public Apps across the organization. Lifecycle and last activation health are separate fields; unlisted public and archived Apps appear only to actors authorized for their owning Space.",
     inputSchema: {
+      ...PAGINATION_INPUT,
       includeArchived: exports_external.boolean().optional().describe("include archived Apps you are authorized to inspect")
     },
     surfaces: ["cli"],
@@ -21096,6 +21126,7 @@ var ACTION_DEFINITIONS = [
     title: "List visible Apps",
     description: "List Apps visible to you, including authorized archived Apps when requested. It cannot modify App state, deployment state, access, or durable SQLite.",
     inputSchema: {
+      ...PAGINATION_INPUT,
       includeArchived: exports_external.boolean().optional().describe("include archived Apps you are authorized to inspect")
     },
     surfaces: ["computer-mcp"],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.21.14",
+  "version": "0.21.16",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",