@lambdacurry/arbor 0.22.15 → 0.22.16

package/dist/arbor.js

@@ -2,7 +2,7 @@
 // package.json
 var package_default = {
   name: "@lambdacurry/arbor",
-  version: "0.22.15",
+  version: "0.22.16",
   description: "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   keywords: [
     "agents",
@@ -4911,6 +4911,16 @@ function json(params) {
 // ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/external.js
 config(en_default());
 // ../core/src/objects/types.ts
+var IDENTITY_COLORS = [
+  "indigo",
+  "teal",
+  "terracotta",
+  "plum",
+  "steel",
+  "olive",
+  "rose",
+  "cyan"
+];
 var CONTRIBUTION_TYPES = [
   "comment",
   "question",
@@ -8300,6 +8310,37 @@ var paged = (key, item) => looseObject({
   total: number2().optional(),
   nextCursor: string2().optional()
 });
+var tldrawDocumentVersionRef = object({
+  artifactId: id,
+  artifactVersionId: id,
+  version: number2().int().min(1),
+  sourceAttachmentId: id,
+  sourceSha256: string2(),
+  documentClock: number2().int().min(0),
+  byteLength: number2().int().min(0)
+});
+var tldrawScriptAttempt = object({
+  revision: number2().int().min(0),
+  version: number2().int().min(1),
+  digest: string2(),
+  at: timestamp
+});
+var tldrawDesiredScript = object({
+  revision: number2().int().min(0),
+  version: number2().int().min(1),
+  digest: string2(),
+  approved: boolean2()
+}).nullable();
+var tldrawSessionScriptStatus = object({
+  sessionId: string2(),
+  profileId: id,
+  displayName: string2(),
+  connectedAt: timestamp,
+  desired: tldrawDesiredScript,
+  attempted: tldrawScriptAttempt.nullable(),
+  lastSuccessful: tldrawScriptAttempt.nullable(),
+  error: tldrawScriptAttempt.extend({ code: string2(), message: string2() }).nullable()
+});
 var MCP_OUTPUT_SCHEMAS = {
   server_info: looseObject({
     serverVersion: string2(),
@@ -8742,10 +8783,36 @@ var MCP_OUTPUT_SCHEMAS = {
     }),
     manifest: jsonObject
   }),
-  tldraw_status: looseObject({
+  tldraw_status: object({
     artifactId: id,
-    room: jsonObject,
-    script: jsonObject
+    room: object({
+      roomGeneration: number2().int().min(1),
+      instanceId: string2(),
+      instanceStartedAt: timestamp,
+      documentClock: number2().int().min(0),
+      documentSha256: string2(),
+      recordCount: number2().int().min(0),
+      databaseSizeBytes: number2().int().min(0),
+      connectedSessions: number2().int().min(0),
+      resumedSessions: number2().int().min(0),
+      dirtySince: timestamp.nullable(),
+      lastMutationProfileId: id.nullable(),
+      lastCheckpoint: tldrawDocumentVersionRef.nullable(),
+      lastCheckpointError: object({ code: string2(), message: string2(), at: timestamp }).nullable(),
+      autosave: object({
+        createdVersions: number2().int().min(0),
+        uploadedBytes: number2().int().min(0),
+        retryCount: number2().int().min(0)
+      })
+    }),
+    script: object({
+      artifactId: id,
+      revision: number2().int().min(0),
+      status: _enum(["absent", "approval-required", "enabled", "disabled"]),
+      source: jsonObject.nullable(),
+      approval: jsonObject.nullable(),
+      sessions: array(tldrawSessionScriptStatus)
+    })
   }),
   tldraw_checkpoint: looseObject({
     artifactId: id,
@@ -9166,7 +9233,7 @@ var MCP_OUTPUT_SCHEMAS = {
     recovery: object({
       state: literal("execution-unavailable"),
       reasonCode: _enum(["execution_session_unavailable", "provider_timeout"]),
-      nextAction: literal("computer_open")
+      nextAction: literal("computer_run_start")
     }).optional(),
     agentBrief: computerAgentBrief,
     runtime: jsonObject
@@ -9600,7 +9667,6 @@ var MCP_TOOL_ANNOTATIONS = {
   set_space_computer: destructiveIdempotent,
   set_topic_computer: destructiveIdempotent,
   set_thread_computer: destructiveIdempotent,
-  attach_computer: additive,
   get_computer: readOnly,
   computer_inventory: readOnly,
   transition_thread: additive,
@@ -9671,9 +9737,8 @@ var MCP_TOOL_ANNOTATIONS = {
   github_repositories: readOnly,
   github_refresh_installation: openWorld,
   github_connect_repository: idempotent,
-  computer_open: additive,
   computer_reprovision: destructiveIdempotent,
-  computer_run_start: additive,
+  computer_run_start: idempotent,
   computer_run_suspend: idempotent,
   computer_repo_work_status: readOnly,
   computer_run_finish: idempotent,
@@ -9691,10 +9756,8 @@ var MCP_TOOL_ANNOTATIONS = {
   computer_verify: openWorld,
   computer_export: idempotent,
   computer_write: destructive,
-  computer_checkpoint: additive,
   computer_publish_preview: idempotent,
-  computer_publish_app_bundle: idempotent,
-  computer_stop: additive
+  computer_publish_app_bundle: idempotent
 };
 function mcpAnnotationsFor(name) {
   const annotations = MCP_TOOL_ANNOTATIONS[name];
@@ -9867,10 +9930,10 @@ Arbor Computer is the complete software execution platform attached to Arbor's d
 
 ${ARBOR_FEEDBACK_GUIDANCE}
 
-1. ORIENT, CONFIGURE, AND AUTHORIZE. Start with provider-free get_computer(threadId) to inspect the effective inherited recipe, repository authorization, compatibility, recoverySafety, and durable lineage without contacting execution. Use set_organization_computer, set_space_computer, set_topic_computer, or set_thread_computer only when the corresponding complete sparse layer must be replaced; use github_repositories then github_connect_repository to authorize repositories at the narrowest scope that should inherit them. If github_repositories looks stale, github_refresh_installation reconciles the cached inventory from GitHub. computer_run_start(threadId, mode) is the front door: it attaches durable identity itself and starts an isolated write Run from the Thread's base snapshot without booting the parent; computer_open and attach_computer are deprecated aliases (AD-306). Each returned repository entry includes verified root instruction pointers when that repo has an AGENTS.md: read surfaced repository instructions before substantial edits or verification, then check for a nearer nested AGENTS.md once the target path is known. Repo-local instructions/scripts/config beat guessed formatter, test, lint, or build commands.
+1. ORIENT, CONFIGURE, AND AUTHORIZE. Start with provider-free get_computer(threadId) to inspect the effective inherited recipe, repository authorization, compatibility, recoverySafety, and durable lineage without contacting execution. Use set_organization_computer, set_space_computer, set_topic_computer, or set_thread_computer only when the corresponding complete sparse layer must be replaced; use github_repositories then github_connect_repository to authorize repositories at the narrowest scope that should inherit them. If github_repositories looks stale, github_refresh_installation reconciles the cached inventory from GitHub. computer_run_start(threadId, mode) is the front door: it attaches durable identity itself and starts an isolated write Run from the Thread's base snapshot without booting the parent. Each returned repository entry includes verified root instruction pointers when that repo has an AGENTS.md: read surfaced repository instructions before substantial edits or verification, then check for a nearer nested AGENTS.md once the target path is known. Repo-local instructions/scripts/config beat guessed formatter, test, lint, or build commands.
 2. READ THE CAPABILITIES CARD, NOT THE BACKEND. runId is the one address: every runtime tool takes it, and the computerSessionId a Run carries is legacy input. computer_status(runId) describes the live PARENT Thread Computer behind a shared Run; it does not establish isolated Run activity, so use computer_run_receipt(runId) and computer_process_read for Run-owned work. Command-line utilities, including Git and package managers, run through computer_exec; check unfamiliar binaries with command -v.
 3. ONE RUN PER TASK. A write Run defaults to an isolated execution environment with its own filesystem, processes, ports, and /tmp while preserving /workspace paths; a read Run shares the parent. Pass runId to Run-aware tools. If a response is lost, recover the durable operation/process identity from computer_run_receipt and read it before retrying. computer_process_read and computer_process_terminate settle a provider-absent current-generation process from exact evidence; computer_run_suspend performs that bounded settlement internally and never replays unknown work. A still-active process returns a retryable busy state; an unknown current-generation mutation fail-closes. An isolated local commit or Preview is not Git publication; push coherent work and prove it with computer_repo_work_status before computer_run_finish destroys the final placement. discard=true with outcome failed or cancelled is the explicit choice to abandon unknown or proven non-durable work without replaying it.
-4. CHECKPOINT COMPLETE UNITS THROUGH THE RUN. computer_run_suspend(runId) checkpoints an intermediate complete unit — an isolated Run publishes its exact workspace and releases its Sandbox, a shared Run advances the parent lineage — and computer_run_finish(runId) makes the final one; finishing the last active shared Run also stops the parent. computer_checkpoint and computer_stop are deprecated aliases. An isolated Run Preview is durable review output, not adoption or a checkpoint. The internal provider-handle publication operations are not agent tools.
+4. CHECKPOINT COMPLETE UNITS THROUGH THE RUN. computer_run_suspend(runId) checkpoints an intermediate complete unit — an isolated Run publishes its exact workspace and releases its Sandbox, a shared Run advances the parent lineage — and computer_run_finish(runId) makes the final one; finishing the last active shared Run also stops the parent. An isolated Run Preview is durable review output, not adoption or a checkpoint. The internal provider-handle publication operations are not agent tools.
 5. GIT AND GITHUB ARE ORDINARY COMMANDS AFTER AUTHORIZATION. Clone, fetch, pull, push, and gh run through computer_exec using a connected human's just-in-time ambient GitHub identity. Credentials never enter argv, workspace files, Git config, checkpoints, Events, logs, or receipts. A restored Computer deliberately keeps the checkout age of its snapshot, so fetch/pull before trusting remote state.
 6. VERIFY, PREVIEW, AND EXPORT. computer_verify captures a public URL directly without opening a project runtime. computer_publish_preview preserves immutable static output from either the parent or an active isolated write Run. computer_export moves bounded files into durable Thread Attachments; for a computer:// file Artifact asleep face, export the exact locator path .tldr and a same-Thread PNG, then use artifact set_snapshot. computer_export itself does not call set_snapshot; place returned Markdown exactly where the media belongs and cite the matching attachment ids.
 7. PACKAGE, DEPLOY, ACTIVATE, AND OPERATE APPS HERE. computer_publish_app_bundle creates the immutable executable bundle from verified parent bytes through a shared write Run: push isolated work, computer_run_start with execution shared, pull, then publish. For short-lived public Artifact experiments use preview_app_create/get/retire; for published Space Apps use app_create, app_config_apply, app_deploy, app_deployment_get, app_activate, app_get, app_fetch/app_request, app_rollback, app_set_access, app_reset_state/app_restore_state, and app_archive as one workflow-closed release surface. First-class Organization/Profile Secrets remain on Arbor's collaboration MCP because they are broader identity-owned resources; App configuration here references existing Secret ids and never accepts or returns secret material.
@@ -10570,7 +10633,7 @@ var ACTION_DEFINITIONS = [
     inputSchema: {
       threadId: string2().describe("the Thread whose computer you are attaching, thr_…")
     },
-    surfaces: ["computer-mcp", "cli"],
+    surfaces: ["cli"],
     toolset: "loop",
     run: forward("computer.attach")
   },
@@ -10584,7 +10647,7 @@ var ACTION_DEFINITIONS = [
       vcpus: number2().int().min(1).max(4).optional().describe("optional container vCPU request"),
       label: string2().optional().describe("short runtime label for operator diagnostics")
     },
-    surfaces: ["computer-mcp", "computer-cli"],
+    surfaces: ["computer-cli"],
     toolset: "loop",
     run: forward("computer_runtime.open")
   },
@@ -10604,10 +10667,10 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_run_start",
     title: "Start a run",
-    description: `Start one bounded unit of work by threadId, no computer_open first: write defaults to an isolated Run from the Thread snapshot without booting the parent; shared/read Runs use the live parent; idempotencyKey recovers zero-or-one Run after response loss, and failures return runId for computer_run_receipt. First use: read the Computer guide at ${AGENT_GUIDE_URLS.computer}.`,
+    description: `Start one bounded unit of work by threadId: write defaults to an isolated Run from the Thread snapshot without booting the parent; shared/read Runs use the live parent; idempotencyKey recovers zero-or-one Run after response loss, and failures return runId for computer_run_receipt. First use: read the Computer guide at ${AGENT_GUIDE_URLS.computer}.`,
     inputSchema: {
-      threadId: string2().optional().describe("the Thread whose Computer this Run works in, thr_…; the front door — no computer_open first"),
-      computerSessionId: string2().optional().describe("alternative to threadId: an existing computerSessionId from computer_open, cms_… (parent already open)"),
+      threadId: string2().optional().describe("the Thread whose Computer this Run works in, thr_…; the canonical Run-first front door"),
+      computerSessionId: string2().optional().describe("legacy compatibility alternative to threadId: an existing parent computerSessionId, cms_…"),
       mode: _enum(["read", "write"]).describe("write for mutable work; read for shared inspection"),
       execution: _enum(["shared", "isolated"]).optional().describe("write Run placement; defaults to isolated. Use shared only for intentional live collaboration on the Thread Computer"),
       label: string2().max(120).optional().describe("short factual label for this unit of work"),
@@ -10861,7 +10924,7 @@ var ACTION_DEFINITIONS = [
       runId: string2().optional().describe("an active shared write Run whose parent lineage to checkpoint, run_…"),
       computerSessionId: string2().optional().describe("legacy alternative to runId: a computerSessionId on that Computer, cms_…")
     },
-    surfaces: ["computer-mcp", "computer-cli"],
+    surfaces: ["computer-cli"],
     toolset: "loop",
     run: forward("computer_runtime.checkpoint")
   },
@@ -10927,7 +10990,7 @@ var ACTION_DEFINITIONS = [
       runId: string2().optional().describe("an active shared write Run whose parent to checkpoint and stop, run_…"),
       computerSessionId: string2().optional().describe("legacy alternative to runId: a computerSessionId on that Computer, cms_…")
     },
-    surfaces: ["computer-mcp", "computer-cli"],
+    surfaces: ["computer-cli"],
     toolset: "loop",
     run: forward("computer_runtime.stop")
   },
@@ -10974,7 +11037,7 @@ var ACTION_DEFINITIONS = [
     description: "Move a Thread among active, needs-review, stuck, standing, resolved, or archived with an optional reason; illegal lifecycle jumps are rejected. Resolve finite Decide/Deliver/Investigate/Manage work once its outcome is in, archive retired work (refile misfiled work with `thread_update` instead), use standing only for intentionally open-ended concerns, and curate standout outputs separately.",
     inputSchema: {
       threadId: string2().describe("the thread to move, thr_…"),
-      to: string2().describe("target status: active|needs-review|stuck|standing|resolved|archived"),
+      to: _enum(["active", "needs-review", "stuck", "standing", "resolved", "archived"]).describe("target Thread lifecycle status"),
       reason: string2().optional().describe("optional one-line why, recorded on the event")
     },
     surfaces: ["mcp", "cli"],
@@ -10984,7 +11047,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "create_artifact",
     title: "Create an artifact",
-    description: "Promote durable output — a decision, summary, plan, or research brief — into a first-class artifact you own. Give it a concise summary of what the Artifact is or accomplishes; this is the skim and retrieval description, not a repeat of its title. Text kinds (doc/table/diagram/html) are living documents: pass `source` (born at v1, editable in place via edit_artifact); kind=file passes a contentRef instead. The artifact is AUTOMATICALLY listed on its source thread (no link post needed). When it came from an attached Thread computer, pass that attach_computer receipt as computerSessionId so the artifact cites the reproducible session. Reach for this when a thread has produced something worth retaining and citing beyond the conversation — especially a table or doc the team will UPDATE, which beats pasting it into a prose contribution.",
+    description: "Promote durable output — a decision, summary, plan, or research brief — into a first-class artifact you own. Give it a concise summary of what the Artifact is or accomplishes; this is the skim and retrieval description, not a repeat of its title. Text kinds (doc/table/diagram/html) are living documents: pass `source` (born at v1, editable in place via edit_artifact); kind=file passes a contentRef instead. The artifact is AUTOMATICALLY listed on its source thread (no link post needed). When it came from a Thread Computer, pass its producing computerSessionId when available so the artifact cites the reproducible session. Reach for this when a thread has produced something worth retaining and citing beyond the conversation — especially a table or doc the team will UPDATE, which beats pasting it into a prose contribution.",
     inputSchema: {
       type: string2().describe("semantic type, e.g. decision|summary|plan|markdown|table|research-brief"),
       kind: _enum(["doc", "table", "diagram", "html", "file"]).optional().describe("structural kind (default file). doc/table/diagram/html are editable, versioned text"),
@@ -11263,7 +11326,7 @@ var ACTION_DEFINITIONS = [
     description: "Set your own identity charter, emoji, color, and capabilities so teammates can understand and route work to you; change them anytime. Write the charter ROLE-FIRST (what you are/do, not your name); display name remains human-managed and capabilities are free-form skill tags.",
     inputSchema: {
       emoji: string2().optional().describe("exactly one emoji that represents you, e.g. \uD83D\uDD2D"),
-      color: string2().optional().describe("an identity color key from the curated palette"),
+      color: _enum(IDENTITY_COLORS).optional().describe("an identity color key from the curated palette"),
       description: string2().optional().describe("your charter (≤500 chars): ROLE-FIRST — what you are + do, NOT 'I'm {Name}' (it renders after 'You are {Name}'). Read back in your orientation. Empty clears it."),
       capabilities: array(string2()).optional().describe("free-form skill tags (≤20, each ≤60 chars) for what you can do — e.g. ['market-research','data-viz']; how teammates route work to you. An empty array clears them.")
     },
@@ -12002,7 +12065,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "tldraw_status",
     title: "Check tldraw board status",
-    description: "Read the current room status and separately reported script sessions for a tldraw board. Session reports remain per-session observations and are never collapsed into global success.",
+    description: "Read compact operational room health and separately reported script sessions for a tldraw board; board geometry/document content stays on tldraw_observe and tldraw_get. Session reports remain per-session observations and are never collapsed into global success.",
     inputSchema: { artifactId: string2().describe("the tldraw Artifact, art_…") },
     surfaces: ["mcp", "cli"],
     toolset: "artifacts",
@@ -12060,7 +12123,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "tldraw_observe",
     title: "Observe a tldraw board",
-    description: `Capture a fresh bounded tldraw scene, lint result, document clock and digest, plus a PNG attachment for visual review; observe before editing. First use: read the tldraw guide at ${AGENT_GUIDE_URLS.tldraw}.`,
+    description: `Capture a fresh bounded tldraw scene, lint result, document clock and digest, plus a PNG attachment for visual review; observe before editing and after context compaction to reacquire authoritative shape IDs/geometry. First use: read the tldraw guide at ${AGENT_GUIDE_URLS.tldraw}.`,
     inputSchema: {
       artifactId: string2().describe("the tldraw Artifact, art_…"),
       pageId: string2().min(1).max(200).optional().describe("optional page to observe"),
@@ -12074,7 +12137,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "tldraw_exec",
     title: "Run a one-shot tldraw program",
-    description: `Modify the current live tldraw board with preferred declarative operations or bounded JavaScript, then return a durable execution receipt; observe first, and never replay an unknown result automatically. First use: read the tldraw guide at ${AGENT_GUIDE_URLS.tldraw}.`,
+    description: `Modify the current live tldraw board with preferred declarative operations or bounded JavaScript, then return a durable execution receipt; use IDs from a fresh observe, reacquire this current schema after compaction, and never replay an unknown result. First use: read the tldraw guide at ${AGENT_GUIDE_URLS.tldraw}.`,
     inputSchema: {
       artifactId: string2().describe("the tldraw Artifact, art_…"),
       code: string2().min(1).max(1e5).optional().describe("advanced script source; mutually exclusive with operations"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.22.15",
+  "version": "0.22.16",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",