@lambdacurry/arbor 0.21.33 → 0.21.34

package/dist/arbor.js

@@ -16397,6 +16397,19 @@ var computerSnapshots = sqliteTable("computer_snapshots", {
   runIdx: index("computer_snapshots_run_idx").on(t.runId, t.createdAt),
   parentIdx: index("computer_snapshots_parent_idx").on(t.parentSnapshotId)
 }));
+var computerSnapshotEvidence = sqliteTable("computer_snapshot_evidence", {
+  snapshotId: text("snapshot_id").primaryKey().references(() => computerSnapshots.id),
+  purpose: text("purpose").$type().notNull(),
+  resumability: text("resumability").$type().notNull(),
+  captureQuality: text("capture_quality").$type().notNull(),
+  unresolvedOperationIds: text("unresolved_operation_ids", { mode: "json" }).$type().notNull(),
+  operationWatermark: integer2("operation_watermark").notNull(),
+  providerGeneration: integer2("provider_generation").notNull(),
+  evidenceKey: text("evidence_key").notNull(),
+  createdAt: ts("created_at").notNull()
+}, (t) => ({
+  evidenceKeyIdx: uniqueIndex("computer_snapshot_evidence_key_idx").on(t.evidenceKey)
+}));
 var computerRunStarts = sqliteTable("computer_run_starts", {
   id: text("id").primaryKey(),
   computerId: text("computer_id").notNull().references(() => threadComputers.id),
@@ -17146,6 +17159,8 @@ var EMOJI_RE = new RegExp("^\\p{RGI_Emoji}$", "v");
 var BASE_MS = Date.parse("2026-07-20T15:00:00.000Z");
 // ../core/src/ops/agent-pairing.ts
 var PAIRING_TTL_MS = 15 * 60 * 1000;
+// ../core/src/ops/computer-recovery.ts
+var COMPUTER_RECOVERY_GRANT_MAX_TTL_MS = 24 * 60 * 60 * 1000;
 // ../core/src/ops/preview.ts
 var PREVIEW_ENTRY_MIME = "text/html; charset=utf-8";
 var PREVIEW_MAX_BYTES = 2 * 1024 * 1024;
@@ -17505,7 +17520,7 @@ var computerRun = exports_external.looseObject({
   startedAt: exports_external.string(),
   endedAt: exports_external.string().nullable()
 });
-var computerRunReceipt = exports_external.looseObject({
+var computerRunReceipt2 = exports_external.looseObject({
   runId: id,
   threadId: id,
   computerId: id,
@@ -18463,7 +18478,7 @@ var MCP_OUTPUT_SCHEMAS = {
     })
   }),
   computer_run_receipt: exports_external.looseObject({
-    receipt: computerRunReceipt
+    receipt: computerRunReceipt2
   }),
   computer_runs: exports_external.looseObject({
     computerId: id,
@@ -21643,6 +21658,124 @@ function retentionAction(action) {
 }
 var ACTIONS2 = ACTIONS.map(retentionAction);
 
+// ../actions/src/recovery-entry.ts
+var grantOutput = exports_external.object({
+  grant: exports_external.object({
+    grantId: exports_external.string(),
+    requestId: exports_external.string(),
+    threadId: exports_external.string(),
+    runId: exports_external.string(),
+    computerId: exports_external.string(),
+    granteeProfileId: exports_external.string(),
+    grantedByProfileId: exports_external.string(),
+    expiresAt: exports_external.string(),
+    createdAt: exports_external.string(),
+    revokedAt: exports_external.string().nullable(),
+    revokedByProfileId: exports_external.string().nullable()
+  }),
+  replayed: exports_external.boolean()
+});
+var diagnosticOutput = exports_external.object({
+  grant: exports_external.object({
+    grantId: exports_external.string(),
+    requestId: exports_external.string(),
+    expiresAt: exports_external.string()
+  }),
+  diagnostic: exports_external.object({
+    runId: exports_external.string(),
+    computerId: exports_external.string(),
+    computerGeneration: exports_external.number().int().positive(),
+    status: exports_external.enum(["active", "finished", "failed", "cancelled"]),
+    outcome: exports_external.enum(["finished", "failed", "cancelled"]).nullable(),
+    reasonCode: exports_external.string().nullable(),
+    runtimeState: exports_external.enum(["shared", "live", "suspended", "releasing", "released"]),
+    snapshotLineage: exports_external.object({
+      baseSnapshotId: exports_external.string().nullable(),
+      currentSnapshotId: exports_external.string().nullable()
+    }),
+    providerState: exports_external.object({
+      generation: exports_external.number().int().min(0).nullable(),
+      lastPhase: exports_external.string().nullable(),
+      lastReasonCode: exports_external.string().nullable()
+    }),
+    operations: exports_external.array(exports_external.object({
+      operationId: exports_external.string(),
+      execution: exports_external.enum(["foreground", "background"]),
+      state: exports_external.enum([
+        "starting",
+        "running",
+        "completed",
+        "failed",
+        "cancelled",
+        "not-routed",
+        "provider-lost",
+        "unknown"
+      ]),
+      mutationRetrySafety: exports_external.enum(["not-needed", "safe", "unsafe", "unknown"]),
+      reasonCode: exports_external.string()
+    }))
+  }),
+  auditEventId: exports_external.string()
+});
+var additive2 = {
+  readOnlyHint: false,
+  destructiveHint: false,
+  idempotentHint: true,
+  openWorldHint: false
+};
+var auditedRead = {
+  readOnlyHint: false,
+  destructiveHint: false,
+  idempotentHint: false,
+  openWorldHint: false
+};
+var RECOVERY_ACTIONS = [
+  {
+    name: "computer_recovery_grant",
+    title: "Grant delegated Computer recovery",
+    description: "Issue one short-lived diagnostic grant for a profile explicitly targeted by the same open Request and exact Run. This grants no execution, file, environment, Secret, Git, checkpoint, or lifecycle capability.",
+    inputSchema: {
+      requestId: exports_external.string().describe("the targeted open Request authorizing this recovery scope, req_…"),
+      runId: exports_external.string().describe("the exact Run whose diagnostic state may be inspected, run_…"),
+      granteeProfileId: exports_external.string().describe("the exact targeted profile receiving diagnostic visibility"),
+      expiresAt: exports_external.string().describe("future ISO timestamp, at most 24 hours and never after Request expiry"),
+      idempotencyKey: exports_external.string().min(1).max(200).describe("stable key for this one logical grant")
+    },
+    outputSchema: grantOutput,
+    annotations: additive2,
+    surfaces: ["computer-mcp"],
+    toolset: "loop",
+    run: (ex, input) => ex.call("computer_recovery.grant", input)
+  },
+  {
+    name: "computer_recovery_revoke",
+    title: "Revoke delegated Computer recovery",
+    description: "Revoke one previously issued delegated diagnostic grant without touching the Computer or provider. Repeating the same revoke is an idempotent no-op.",
+    inputSchema: {
+      grantId: exports_external.string().describe("the delegated recovery grant, crg_…")
+    },
+    outputSchema: grantOutput,
+    annotations: additive2,
+    surfaces: ["computer-mcp"],
+    toolset: "loop",
+    run: (ex, input) => ex.call("computer_recovery.revoke", input)
+  },
+  {
+    name: "computer_recovery_inspect",
+    title: "Inspect delegated Computer recovery state",
+    description: "Read only the sanitized diagnostic projection authorized by one live delegated grant; every successful read records an attributed Arbor audit Event. It never calls the provider or exposes repository paths/heads, command output, environment, Secrets, sessions, or mutation controls.",
+    inputSchema: {
+      grantId: exports_external.string().describe("the delegated recovery grant, crg_…")
+    },
+    outputSchema: diagnosticOutput,
+    annotations: auditedRead,
+    surfaces: ["computer-mcp"],
+    toolset: "loop",
+    run: (ex, input) => ex.call("computer_recovery.inspect", input)
+  }
+];
+var ACTIONS3 = [...ACTIONS2, ...RECOVERY_ACTIONS];
+
 // src/config.ts
 import {
   chmodSync,
@@ -22044,7 +22177,7 @@ function emitDual(data, human, action, ctx) {
 // src/computer-exec-wait.ts
 var DEFAULT_PROCESS_DEADLINE_MS = 1800000;
 var POLL_MS = 400;
-var processRead = ACTIONS2.find((action) => action.name === "computer_process_read");
+var processRead = ACTIONS3.find((action) => action.name === "computer_process_read");
 function record3(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
@@ -22314,7 +22447,7 @@ var MCP_COMMAND_ALIASES = {
 function commandWords(action) {
   return COMMAND_WORD_OVERRIDES[action.name] ?? action.name.replace(/_/g, " ");
 }
-var CLI_ACTIONS = ACTIONS2.filter((a) => a.surfaces.includes("cli") || a.surfaces.includes("computer-cli"));
+var CLI_ACTIONS = ACTIONS3.filter((a) => a.surfaces.includes("cli") || a.surfaces.includes("computer-cli"));
 var BY_ACTION_NAME = new Map(CLI_ACTIONS.map((action) => [action.name, action]));
 var BY_COMMAND = new Map(CLI_ACTIONS.map((a) => [commandWords(a), a]));
 for (const [alias2, actionName] of Object.entries(MCP_COMMAND_ALIASES)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.21.33",
+  "version": "0.21.34",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",