@lambdacurry/arbor 0.21.4 → 0.21.6

package/dist/arbor.js

@@ -2247,6 +2247,7 @@ var attachments = sqliteTable("attachments", {
   r2Key: text("r2_key").notNull(),
   uploadedByProfileId: text("uploaded_by_profile_id").notNull().references(() => profiles.id),
   computerSessionId: text("computer_session_id").references(() => computerSessions.id),
+  computerPath: text("computer_path"),
   idempotencyKey: text("idempotency_key"),
   idempotencyFingerprint: text("idempotency_fingerprint"),
   sha256: text("sha256"),
@@ -2307,6 +2308,17 @@ var artifactLivePreviewSurfaces = sqliteTable("artifact_live_preview_surfaces",
 }, (t) => ({
   threadUq: uniqueIndex("artifact_live_preview_surfaces_thread_uniq").on(t.threadId)
 }));
+var artifactFileSnapshots = sqliteTable("artifact_file_snapshots", {
+  artifactId: text("artifact_id").primaryKey().references(() => artifacts.id, { onDelete: "cascade" }),
+  sourceAttachmentId: text("source_attachment_id").notNull().references(() => attachments.id),
+  previewAttachmentId: text("preview_attachment_id").notNull().references(() => attachments.id),
+  capturedByProfileId: text("captured_by_profile_id").notNull().references(() => profiles.id),
+  executionContextId: text("execution_context_id").notNull().references(() => executionContexts.id),
+  capturedAt: ts("captured_at").notNull()
+}, (t) => ({
+  sourceIdx: index("artifact_file_snapshots_source_attachment_idx").on(t.sourceAttachmentId),
+  previewIdx: index("artifact_file_snapshots_preview_attachment_idx").on(t.previewAttachmentId)
+}));
 var artifactVersions = sqliteTable("artifact_versions", {
   id: text("id").primaryKey(),
   artifactId: text("artifact_id").notNull().references(() => artifacts.id),
@@ -17783,6 +17795,8 @@ var MCP_OUTPUT_SCHEMAS = {
     type: exports_external.string(),
     status: exports_external.string(),
     private: exports_external.literal(true),
+    sharedThreadId: id,
+    sharedContributionId: id,
     replayed: exports_external.boolean(),
     association: jsonObject.nullable(),
     message: exports_external.string()
@@ -18042,6 +18056,8 @@ var MCP_OUTPUT_SCHEMAS = {
     appBundles: exports_external.array(jsonObject).optional(),
     usedByApps: exports_external.array(jsonObject).optional(),
     livePreview: artifactLivePreview.nullable().optional(),
+    snapshot: jsonObject.nullable().optional(),
+    sourceLivePreview: jsonObject.nullable().optional(),
     threadId: id.nullable().optional(),
     changed: exports_external.boolean().optional()
   }),
@@ -18056,6 +18072,8 @@ var MCP_OUTPUT_SCHEMAS = {
     appBundles: exports_external.array(jsonObject),
     usedByApps: exports_external.array(jsonObject),
     livePreview: artifactLivePreview.nullable(),
+    snapshot: jsonObject.nullable().optional(),
+    sourceLivePreview: jsonObject.nullable().optional(),
     watching: exports_external.boolean(),
     url: exports_external.string()
   }),
@@ -18814,7 +18832,7 @@ var CONTRIBUTION_ADD_LINK_RELS = [
   "tracked-as",
   "delivered-by"
 ];
-var ARBOR_FEEDBACK_GUIDANCE = `ARBOR-SPECIFIC FEEDBACK — Privately capture ONE bounded report through \`contribute_arbor_feedback\` when Arbor itself caused meaningful friction: confusing semantics; surprising Arbor UI/MCP/CLI behavior; a missing Arbor capability; repeated Arbor retries; an Arbor-specific workaround; or misleading state, recovery guidance, or ergonomics. Usually do NOT report an ordinary repository bug, a routine GitHub/Cloudflare/provider failure Arbor did not cause or obscure, your own mistake, or generic implementation difficulty. One incident = one report: use one stable idempotencyKey to retry that same logical submission rather than reporting every participating call. Never include raw prompts/transcripts, shell output, command contents, secrets, provider payloads, or arbitrary error dumps. The raw body remains private; \`feedback_status\` reads only a receipt you own, while \`feedback_tree\` → \`feedback_recall\` → \`feedback_thread_get\` browses deliberately shared, sanitized knowledge.`;
+var ARBOR_FEEDBACK_GUIDANCE = `ARBOR-SPECIFIC FEEDBACK — File ONE bounded report through \`contribute_arbor_feedback\` when Arbor itself caused meaningful friction: confusing semantics; surprising Arbor UI/MCP/CLI behavior; a missing Arbor capability; repeated Arbor retries; an Arbor-specific workaround; or misleading state, recovery guidance, or ergonomics. Usually do NOT report an ordinary repository bug, a routine GitHub/Cloudflare/provider failure Arbor did not cause or obscure, your own mistake, or generic implementation difficulty. One incident = one report: use one stable idempotencyKey to retry that same logical submission rather than reporting every participating call. Never include raw prompts/transcripts, shell output, command contents, secrets, provider payloads, or arbitrary error dumps. The report lands as its own visible shared Feedback Thread as submitted; the fbk receipt and reviewer-only metadata remain private. \`feedback_status\` reads only a receipt you own, while \`feedback_tree\` → \`feedback_recall\` → \`feedback_thread_get\` browses the shared forum.`;
 var ORIENTATION = `Arbor is your team's deliberation room and shared memory — people and agents settle typed work here, and Arbor remembers what's decided. To work well:
 
 ${ARBOR_FEEDBACK_GUIDANCE}
@@ -18841,10 +18859,10 @@ ${ARBOR_FEEDBACK_GUIDANCE}
 3. ONE RUN PER TASK. A write Run defaults to an isolated execution environment with its own filesystem, processes, ports, and /tmp while preserving /workspace paths; a read Run shares the parent. Pass runId to Run-aware tools. If a response is lost, recover the durable operation/process identity from computer_run_receipt and read it before retrying. Once every operation is settled, computer_run_suspend publishes the exact workspace and releases the provider during an external wait; the next Run-aware operation restores that checkpoint under the same runId automatically. Suspension refuses active processes or unsettled outcomes and never replays unknown work, so reconcile process and Git/publication evidence first. An isolated local commit or Preview is not Git publication; push coherent work and prove it with computer_repo_work_status before computer_run_finish destroys the final placement. discard=true is the explicit choice to destroy proven non-durable work.
 4. CHECKPOINT COMPLETE PARENT UNITS. computer_checkpoint advances immutable parent lineage after an intermediate complete unit; computer_stop performs the final checkpoint before teardown. An isolated Run Preview is durable review output, not adoption or a checkpoint. The internal provider-handle publication operations are not agent tools.
 5. GIT AND GITHUB ARE ORDINARY COMMANDS AFTER AUTHORIZATION. Clone, fetch, pull, push, and gh run through computer_exec using a connected human's just-in-time ambient GitHub identity. Credentials never enter argv, workspace files, Git config, checkpoints, Events, logs, or receipts. A restored Computer deliberately keeps the checkout age of its snapshot, so fetch/pull before trusting remote state.
-6. VERIFY, PREVIEW, AND EXPORT. computer_verify captures a public URL directly without opening a project runtime. computer_publish_preview preserves immutable static output from either the parent or an active isolated write Run. computer_export moves bounded files into durable Thread Attachments; place returned Markdown exactly where the media belongs and cite the matching attachment ids.
+6. VERIFY, PREVIEW, AND EXPORT. computer_verify captures a public URL directly without opening a project runtime. computer_publish_preview preserves immutable static output from either the parent or an active isolated write Run. computer_export moves bounded files into durable Thread Attachments; for a computer:// file Artifact asleep face, export the exact locator path .tldr and a same-Thread PNG, then use artifact set_snapshot. computer_export itself does not call set_snapshot; place returned Markdown exactly where the media belongs and cite the matching attachment ids.
 7. PACKAGE, DEPLOY, ACTIVATE, AND OPERATE APPS HERE. computer_publish_app_bundle creates the immutable executable bundle from verified parent bytes. For short-lived public Artifact experiments use preview_app_create/get/retire; for published Space Apps use app_create, app_config_apply, app_deploy, app_deployment_get, app_activate, app_get, app_fetch/app_request, app_rollback, app_set_access, app_reset_state/app_restore_state, and app_archive as one workflow-closed release surface. First-class Organization/Profile Secrets remain on Arbor's collaboration MCP because they are broader identity-owned resources; App configuration here references existing Secret ids and never accepts or returns secret material.
 8. FINISH WHAT YOU START. Stop the parent after its final complete unit, finish every Run, and preserve evidence before teardown. When reporting collaboration conclusions through Arbor, pass the producing computerSessionId and attachmentIds to contribute or respond.
-9. CLOSE OUT ARBOR DOGFOOD. When developing Arbor through Arbor, ask: “Did Arbor itself create meaningful friction or require an Arbor-specific workaround?” If yes, apply the classifier above and privately capture one bounded report before closing the development loop; keep unrelated product friction out of the implementation Thread. If no, close normally without manufacturing feedback.`;
+9. CLOSE OUT ARBOR DOGFOOD. When developing Arbor through Arbor, ask: “Did Arbor itself create meaningful friction or require an Arbor-specific workaround?” If yes, apply the classifier above and file one bounded report before closing the development loop; keep unrelated product friction out of the implementation Thread. If no, close normally without manufacturing feedback.`;
 var PROSE_LISTS = exports_external.registry();
 function proseList(description) {
   const schema = exports_external.array(exports_external.string()).describe(description);
@@ -18958,7 +18976,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "feedback_tree",
     title: "Browse the shared Arbor Feedback forum",
-    description: "READ ONLY: Browse the global curated Arbor Feedback forum by Topic and optional Thread roster; the global scope is implied and no Space id is required. This returns deliberately shared, sanitized knowledge only and never private submissions or reporter metadata.",
+    description: "READ ONLY: Browse the global Arbor Feedback forum by Topic and optional Thread roster; the global scope is implied and no Space id is required. New reports appear as their own shared Threads as submitted; private receipt metadata and reviewer diagnostics are never returned.",
     inputSchema: {
       depth: exports_external.enum(["topics", "threads"]).optional().describe("topics (default) or threads to include each Topic's shared Thread roster"),
       includeArchived: exports_external.boolean().optional().describe("include archived Topics/Threads for historical moderation or lookup (default false)")
@@ -18970,7 +18988,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "feedback_recall",
     title: "Find known Arbor feedback",
-    description: "READ ONLY: Search the global shared Arbor Feedback forum for sanitized issues, workarounds, and decisions; scope to a Topic after feedback_tree when useful. Private feedback bodies, identities, diagnostics, and private record ids are never searched or returned.",
+    description: "READ ONLY: Search the global shared Arbor Feedback forum for reports, workarounds, and decisions; scope to a Topic after feedback_tree when useful. New report bodies are searchable as submitted; private receipt ids, reporter metadata, and reviewer diagnostics are never returned.",
     inputSchema: {
       query: exports_external.string().min(1).describe("the Arbor friction, issue, workaround, or idea to find"),
       topicId: exports_external.string().optional().describe("optional shared Feedback Topic id from feedback_tree"),
@@ -18983,7 +19001,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "feedback_thread_get",
     title: "Read a shared Arbor Feedback thread",
-    description: "READ ONLY: Read one curated shared Arbor Feedback Thread, following a merge redirect to its canonical destination while preserving shared provenance. This cannot traverse to private reports, reporter/customer metadata, diagnostics, or private associations.",
+    description: "READ ONLY: Read one shared Arbor Feedback Thread, following a merge redirect to its canonical destination while preserving shared provenance. A newly filed report appears here as submitted; private receipt ids, reporter organization metadata, diagnostics, and private associations are not projected.",
     inputSchema: {
       threadId: exports_external.string().describe("the shared Feedback Thread id, thr_…")
     },
@@ -18993,16 +19011,16 @@ var ACTION_DEFINITIONS = [
   },
   {
     name: "contribute_arbor_feedback",
-    title: "Privately contribute feedback about Arbor",
-    description: "Privately capture one bounded report when Arbor itself caused meaningful product or ergonomics friction; do not use this for ordinary repository bugs, routine un-obscured provider failures, agent mistakes, or generic implementation difficulty. The body is never posted into the current Thread or shared forum; one incident should produce one report, with a stable idempotencyKey used only to retry that same submission.",
+    title: "Contribute feedback about Arbor",
+    description: "File one bounded report when Arbor itself caused meaningful product or ergonomics friction; do not use this for ordinary repository bugs, routine un-obscured provider failures, agent mistakes, or generic implementation difficulty. The body lands as the first contribution in its own visible shared Feedback Thread; one incident should produce one report, with a stable idempotencyKey used only to retry that same submission.",
     inputSchema: {
       type: exports_external.enum(ARBOR_FEEDBACK_TYPES).optional().describe("the contribution move (default comment); decision is reserved for shared forum curation"),
-      body: exports_external.string().min(1).describe("the private feedback body"),
-      summary: exports_external.string().max(500).optional().describe("optional private gist, at most 500 characters"),
+      body: exports_external.string().min(1).describe("the feedback body, shared as submitted in its own Thread"),
+      summary: exports_external.string().max(500).optional().describe("optional gist, at most 500 characters; also seeds the shared Thread title"),
       confidence: exports_external.number().int().min(0).max(100).optional().describe("optional 0–100 confidence"),
-      idempotencyKey: exports_external.string().min(1).max(200).optional().describe("stable key for this ONE private submission; safe retries return the same receipt"),
-      threadId: exports_external.string().optional().describe("optional shared Feedback Thread this private evidence relates to; not a write destination"),
-      topicId: exports_external.string().optional().describe("optional shared Feedback Topic this private evidence relates to; not a write destination"),
+      idempotencyKey: exports_external.string().min(1).max(200).optional().describe("stable key for this ONE report; safe retries return the same receipt and shared Thread"),
+      threadId: exports_external.string().optional().describe("optional related shared Feedback Thread; its Topic becomes the new report Thread's Topic"),
+      topicId: exports_external.string().optional().describe("optional destination shared Feedback Topic for the new report Thread"),
       computerSessionId: exports_external.string().optional().describe("optional Arbor Computer session you own; only its id is attached, never shell output or files")
     },
     surfaces: ["mcp", "cli"],
@@ -19011,7 +19029,7 @@ var ACTION_DEFINITIONS = [
   },
   {
     name: "feedback_status",
-    title: "Check your private Arbor feedback receipt",
+    title: "Check your Arbor feedback receipt",
     description: "READ ONLY: Check the useful lifecycle of one private Arbor feedback receipt you own. Missing and not-owned receipts look identical, and this returns no raw body, identities, moderator diagnostics, or shared association targets.",
     inputSchema: {
       feedbackId: exports_external.string().describe("your private Arbor feedback receipt id, fbk_…")
@@ -19023,7 +19041,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "admin_feedback_capability",
     title: "Manage Arbor Feedback capabilities",
-    description: "Privileged: list or set explicit shared-moderation and private-review grants. These capabilities are deliberately separate; granting moderation does not grant access to raw private feedback.",
+    description: "Privileged: list or set explicit shared-moderation and receipt-review grants. These capabilities are deliberately separate; granting moderation does not grant access to reporter/reviewer receipt metadata.",
     inputSchema: {
       verb: exports_external.enum(["list", "set"]).describe("list grants, or set one profile capability"),
       profileId: exports_external.string().optional().describe("set: the profile receiving or losing the grant"),
@@ -19037,7 +19055,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "admin_feedback_evidence",
     title: "Review private Arbor feedback evidence",
-    description: "Privileged private-review surface: list/get private reports, associate or disassociate them with shared Topics/Threads, and mark review state. This never changes a raw body's visibility and does not grant shared-forum moderation.",
+    description: "Privileged receipt-review surface: list/get fbk receipt metadata, associate or disassociate receipts with shared Topics/Threads, and mark review state. Report bodies are already filed in their own shared Threads; this surface additionally exposes reporter/reviewer metadata and does not grant shared-forum moderation.",
     inputSchema: {
       verb: exports_external.enum(["list", "get", "associate", "disassociate", "status"]).describe("the private-evidence review action"),
       feedbackId: exports_external.string().optional().describe("get/associate/disassociate/status: private feedback id"),
@@ -19074,7 +19092,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "admin_feedback_thread",
     title: "Maintain and merge shared Feedback Threads",
-    description: "Privileged shared-forum moderation: create/update/move/transition/archive/restore Threads or merge a duplicate into a canonical destination with redirect and provenance. Merge safely repoints private associations but never copies raw evidence into shared content.",
+    description: "Privileged shared-forum moderation: create/update/move/transition/archive/restore Threads or merge a duplicate into a canonical destination with redirect and provenance. Merge safely repoints receipt associations without duplicating report bodies.",
     inputSchema: {
       action: exports_external.enum(["create", "update", "move", "transition", "archive", "restore", "merge"]).describe("the Thread lifecycle or merge action"),
       threadId: exports_external.string().optional().describe("update/move/transition/archive/restore: Thread id"),
@@ -19605,7 +19623,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_export",
     title: "Export a Thread file",
-    description: "Export one bounded file from the parent Computer or a Run into a durable Thread Attachment when the file itself is evidence. Returns attachment ids and ready-to-place attachments[].markdown; put that Markdown exactly where the media belongs and bind the matching ids, while idempotencyKey controls safe retry identity.",
+    description: "Export one bounded file from the parent Computer or a Run as a durable Thread Attachment, with ready-to-place attachments[].markdown to put exactly where the media belongs and bind by attachment id. For a Layer 1 snapshot, export the exact computer:// .tldr locator path (stamping computerPath) and a same-Thread PNG, then use artifact set_snapshot; this command never mints.",
     inputSchema: {
       computerSessionId: exports_external.string().optional().describe("the computerSessionId returned by computer_open, cms_…; required unless runId is supplied"),
       runId: exports_external.string().optional().describe("route this export according to this Run execution placement, run_…"),
@@ -19806,6 +19824,19 @@ var ACTION_DEFINITIONS = [
       verb: Array.isArray(input.patches) ? "patch" : "replace"
     })
   },
+  {
+    name: "set_artifact_snapshot",
+    title: "Set an Artifact's stored file snapshot",
+    description: "After computer_export of the exact computer:// .tldr locator path and a same-Thread PNG, use this command (the artifact verb=set_snapshot move) to pin those exported bytes as the Computer-backed file Artifact's asleep/share face. This does not change its locator or create runtime.",
+    inputSchema: {
+      artifactId: exports_external.string().describe("the Computer-backed file Artifact, art_…"),
+      sourceAttachmentId: exports_external.string().describe("exported .tldr Attachment, att_…"),
+      previewAttachmentId: exports_external.string().describe("exported PNG Attachment, att_…")
+    },
+    surfaces: ["cli"],
+    toolset: "artifacts",
+    run: forward("artifact.setSnapshot")
+  },
   {
     name: "set_artifact_live_preview",
     title: "Set an Artifact's live Thread surface",
@@ -20633,9 +20664,9 @@ var ACTION_DEFINITIONS = [
   {
     name: "artifact",
     title: "Create or edit an Artifact",
-    description: "Create or edit a durable versioned Artifact, bind its executable Thread Live Preview, or promote a Thread attachment; read artifact_get before changing it, while lifecycle/removal stay in artifact_transition and artifact_delete. Live-surface binding changes Artifact identity metadata, not source/version content.",
+    description: "Create or edit a durable versioned Artifact, bind its executable Thread Live Preview, set a Computer-file asleep/share snapshot, or promote a Thread attachment; for a computer:// .tldr snapshot mint: computer_export the exact locator path and same-Thread PNG, then use set_snapshot. Board save and TLP do not mint snapshots. set_snapshot does not wake Computer or change the locator; read artifact_get before changing it, while lifecycle/removal stay in artifact_transition and artifact_delete.",
     inputSchema: {
-      verb: exports_external.enum(["create", "edit", "set_live_preview", "promote_attachment"]).describe("which artifact move"),
+      verb: exports_external.enum(["create", "edit", "set_live_preview", "set_snapshot", "promote_attachment"]).describe("which artifact move"),
       title: exports_external.string().optional().describe("create: the artifact's title"),
       kind: exports_external.enum(["doc", "table", "diagram", "html", "file"]).optional().describe("create: structural kind (default file). doc/table/diagram/html are editable text"),
       type: exports_external.string().optional().describe("create: semantic type, e.g. decision|summary|plan|markdown|table|research-brief"),
@@ -20646,11 +20677,13 @@ var ACTION_DEFINITIONS = [
       sourceThreadId: exports_external.string().optional().describe("create: the thread it came from"),
       computerSessionId: exports_external.string().optional().describe("create: the attached computer session that produced it, cms_…"),
       sourceContributionIds: exports_external.array(exports_external.string()).optional().describe("create: contributions it distills"),
-      artifactId: exports_external.string().optional().describe("edit/set_live_preview: the Artifact, art_…"),
+      artifactId: exports_external.string().optional().describe("edit/set_live_preview/set_snapshot: the Artifact, art_…"),
       threadId: exports_external.string().optional().describe("set_live_preview: the configured Thread Live Preview, thr_…; omit to clear the binding"),
       baseVersion: exports_external.number().optional().describe("edit: the version you READ (from get/create) — stale base is rejected with the current source"),
       patches: exports_external.array(exports_external.object({ old: exports_external.string(), new: exports_external.string() })).optional().describe("edit: exact-match hunks applied in order, atomically; each old must match exactly once"),
       note: exports_external.string().optional().describe("edit: one-line summary of what changed"),
+      sourceAttachmentId: exports_external.string().optional().describe("set_snapshot: computer_export of the exact computer:// locator path; MIME application/vnd.tldraw+json, computerPath stamped and matching defaultCwd + locator"),
+      previewAttachmentId: exports_external.string().optional().describe("set_snapshot: same-Thread computer_export image/png Attachment, used as the asleep face preview"),
       attachmentId: exports_external.string().optional().describe("promote_attachment: the upload, att_…")
     },
     surfaces: ["mcp"],
@@ -20659,13 +20692,14 @@ var ACTION_DEFINITIONS = [
       create: "artifact.create",
       edit: "artifact.edit",
       set_live_preview: "artifact.setLivePreview",
+      set_snapshot: "artifact.setSnapshot",
       promote_attachment: "attachment.promote"
     }, (verb, input) => verb === "edit" ? { ...input, verb: Array.isArray(input.patches) ? "patch" : "replace" } : input)
   },
   {
     name: "artifact_get",
     title: "Read an Artifact",
-    description: "Read an Artifact's current source, version, immutable history, AppBundle references, and current executable Live Preview surface, or pass version for an older content snapshot. It cannot edit content, bind a surface, change lifecycle, promote an attachment, or delete an Artifact.",
+    description: "Read an Artifact's current source, version, immutable history, AppBundle references, and current executable Live Preview surface, or pass version for an older content snapshot. Computer-file Artifacts return snapshot state from set_snapshot (null until set_snapshot, meaning the asleep face is not checkable); this read cannot edit content, bind a surface, change lifecycle, promote an attachment, or delete an Artifact.",
     inputSchema: {
       artifactId: exports_external.string().describe("the Artifact, art_…"),
       version: exports_external.number().optional().describe("read this old snapshot instead of the current")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.21.4",
+  "version": "0.21.6",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",