@lambdacurry/arbor 0.22.23 → 0.22.25

package/dist/arbor.js

@@ -2,7 +2,7 @@
 // package.json
 var package_default = {
   name: "@lambdacurry/arbor",
-  version: "0.22.23",
+  version: "0.22.25",
   description: "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   keywords: [
     "agents",
@@ -6636,6 +6636,7 @@ var computerRuns = sqliteTable("computer_runs", {
   runtimeState: text("runtime_state").$type().notNull().default("shared"),
   runtimeUpdatedAt: ts("runtime_updated_at"),
   gitStart: text("git_start", { mode: "json" }).$type(),
+  finishRequest: text("finish_request", { mode: "json" }).$type(),
   status: text("status").$type().notNull().default("active"),
   label: text("label"),
   reason: text("reason"),
@@ -7909,7 +7910,7 @@ var computerRunFinishAssessment = looseObject({
   state: _enum(["safe", "blocked", "unknown"]),
   requiresDiscard: boolean2(),
   repositories: array(looseObject({
-    repository: string2(),
+    repository: string2().nullable(),
     path: string2(),
     startHead: string2().nullable(),
     currentHead: string2().nullable(),
@@ -7950,7 +7951,7 @@ var computerAgentBrief = looseObject({
 });
 var computerRunGitStart = looseObject({
   repositories: array(looseObject({
-    repository: string2(),
+    repository: string2().nullable(),
     path: string2(),
     git: computerRunGitState.nullable()
   }))
@@ -7995,6 +7996,21 @@ var computerRunReceipt2 = looseObject({
   gitStart: computerRunGitStart.nullable().optional(),
   durability: computerRunDurability,
   finishAssessment: computerRunFinishAssessment.nullable(),
+  finishRequest: looseObject({
+    intentId: id,
+    outcome: _enum(["finished", "failed", "cancelled"]),
+    reason: string2().nullable(),
+    discard: boolean2(),
+    expectedCurrentSnapshotId: id,
+    requestedAt: timestamp,
+    updatedAt: timestamp,
+    state: _enum(["pending", "rejected", "completed"]),
+    phase: _enum(["quiescence", "git", "checkpoint", "release", "rejected"]),
+    reasonCode: string2().nullable(),
+    finishAssessment: computerRunFinishAssessment.nullable(),
+    providerGeneration: number2().int().nonnegative().nullable(),
+    releasedSnapshotId: id.nullable()
+  }).nullable(),
   status: _enum(["active", "finished", "failed", "cancelled"]),
   outcome: _enum(["finished", "failed", "cancelled"]).nullable(),
   reason: string2().nullable(),
@@ -9136,7 +9152,7 @@ var MCP_OUTPUT_SCHEMAS = {
     durablyFinishable: boolean2(),
     finishAssessment: computerRunFinishAssessment,
     repositories: array(looseObject({
-      repository: string2(),
+      repository: string2().nullable(),
       path: string2(),
       start: computerRunGitState.nullable(),
       current: computerRunGitState.nullable(),
@@ -10022,7 +10038,7 @@ Arbor Computer is the complete software execution platform attached to Arbor's d
 
 ${ARBOR_FEEDBACK_GUIDANCE}
 
-1. ORIENT, CONFIGURE, AND AUTHORIZE. Start with provider-free get_computer(threadId) to inspect the effective inherited recipe, repository authorization, compatibility, recoverySafety, and durable lineage without contacting execution. Use set_organization_computer, set_space_computer, set_topic_computer, or set_thread_computer only when the corresponding complete sparse layer must be replaced; use github_repositories then github_connect_repository to authorize repositories at the narrowest scope that should inherit them. If github_repositories looks stale, github_refresh_installation reconciles the cached inventory from GitHub. computer_run_start(threadId, mode) is the front door: it attaches durable identity itself and starts an isolated write Run from the Thread's base snapshot without booting the parent. Each returned repository entry includes verified root instruction pointers when that repo has an AGENTS.md: read surfaced repository instructions before substantial edits or verification, then check for a nearer nested AGENTS.md once the target path is known. Repo-local instructions/scripts/config beat guessed formatter, test, lint, or build commands.
+1. ORIENT, CONFIGURE, AND AUTHORIZE. Start with provider-free get_computer(threadId) to inspect the effective inherited recipe, repository authorization, compatibility, recoverySafety, and durable lineage without contacting execution. Use set_organization_computer, set_space_computer, set_topic_computer, or set_thread_computer only when the corresponding complete sparse layer must be replaced; use github_connect_repository with a known installed id, exact owner/name, or canonical GitHub URL, or use github_repositories when browsing, to authorize repositories at the narrowest scope that should inherit them. If github_repositories looks stale, github_refresh_installation reconciles the cached inventory from GitHub. computer_run_start(threadId, mode) is the front door: it attaches durable identity itself and starts an isolated write Run from the Thread's base snapshot without booting the parent. Each returned repository entry includes verified root instruction pointers when that repo has an AGENTS.md: read surfaced repository instructions before substantial edits or verification, then check for a nearer nested AGENTS.md once the target path is known. Repo-local instructions/scripts/config beat guessed formatter, test, lint, or build commands.
 2. READ THE CAPABILITIES CARD, NOT THE BACKEND. runId is the one address: every runtime tool takes it, and the computerSessionId a Run carries is legacy input. computer_status(runId) describes the live PARENT Thread Computer behind a shared Run; it does not establish isolated Run activity, so use computer_run_receipt(runId) and computer_process_read for Run-owned work. Command-line utilities, including Git and package managers, run through computer_exec; check unfamiliar binaries with command -v.
 3. ONE RUN PER TASK. A write Run defaults to an isolated execution environment with its own filesystem, processes, ports, and /tmp while preserving /workspace paths; a read Run shares the parent. Pass runId to Run-aware tools. If a response is lost, recover the durable operation/process identity from computer_run_receipt and read it before retrying. computer_process_read and computer_process_terminate settle a provider-absent current-generation process from exact evidence; computer_run_suspend performs that bounded settlement internally and never replays unknown work. A still-active process returns a retryable busy state; an unknown current-generation mutation fail-closes. An isolated local commit or Preview is not Git publication; push coherent work and prove it with computer_repo_work_status before computer_run_finish destroys the final placement. discard=true with outcome failed or cancelled is the explicit choice to abandon unknown or proven non-durable work without replaying it.
 4. CHECKPOINT COMPLETE UNITS THROUGH THE RUN. computer_run_suspend(runId) checkpoints an intermediate complete unit — an isolated Run publishes its exact workspace and releases its Sandbox, a shared Run advances the parent lineage — and computer_run_finish(runId) makes the final one; finishing the last active shared Run also stops the parent. An isolated Run Preview is durable review output, not adoption or a checkpoint. The internal provider-handle publication operations are not agent tools.
@@ -10176,9 +10192,9 @@ var ACTION_DEFINITIONS = [
   {
     name: "github_connect_repository",
     title: "Connect a GitHub repository",
-    description: "Connect or disconnect a listed GitHub repository at organization, Space, Topic, or Thread scope so matching descendant Computers may materialize it. The caller must manage that scope, GitHub installation coverage remains a separate gate, and get_computer shows the effective grant.",
+    description: "Connect or disconnect an installed GitHub repository at organization, Space, Topic, or Thread scope; pass its installed id, exact owner/name, or canonical GitHub URL, so browsing the inventory is optional. The caller must manage that scope, GitHub installation coverage remains a separate gate, and get_computer shows the effective grant.",
     inputSchema: {
-      repositoryId: string2().describe("installed repository id from github_repositories, ghr_…"),
+      repositoryId: string2().describe("installed repository id from github_repositories (ghr_…), exact owner/name, or canonical https://github.com/owner/name URL"),
       scope: _enum(["organization", "space", "topic", "thread"]).describe("the Arbor scope that may use this repository's context; topic is the durable choice for a project every Thread under it develops"),
       scopeId: string2().describe("id matching the selected scope"),
       connected: boolean2().describe("true to connect; false to disconnect recoverably")
@@ -10664,7 +10680,7 @@ var ACTION_DEFINITIONS = [
     inputSchema: {
       backend: _enum(["worker-shell", "container"]).nullable().optional().describe("default execution tier, or null to use worker-shell"),
       containerProfile: string2().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, GitHub CLI (gh), Bun 1.4.2, bunx, Node 26.5.1, pnpm 10.33.0, Python 3.13.15 (python/python3), jq, and ripgrep (rg), or null to clear"),
-      setupScript: string2().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize, or null to clear"),
+      setupScript: string2().nullable().optional().describe("optional strict Bash setup for a fresh base after repositories materialize; install scoped tools in /workspace/.local/bin so exec finds them and snapshots retain them; null clears"),
       repositories: array(string2()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
     },
     surfaces: ["computer-mcp", "cli"],
@@ -10679,7 +10695,7 @@ var ACTION_DEFINITIONS = [
       spaceId: string2().describe("the Space, spc_…"),
       backend: _enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
       containerProfile: string2().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, GitHub CLI (gh), Bun 1.4.2, bunx, Node 26.5.1, pnpm 10.33.0, Python 3.13.15 (python/python3), jq, and ripgrep (rg), or null to clear inherited profile"),
-      setupScript: string2().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize, or null to clear"),
+      setupScript: string2().nullable().optional().describe("optional strict Bash setup for a fresh base after repositories materialize; install scoped tools in /workspace/.local/bin so exec finds them and snapshots retain them; null clears"),
       repositories: array(string2()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
     },
     surfaces: ["computer-mcp", "cli"],
@@ -10694,7 +10710,7 @@ var ACTION_DEFINITIONS = [
       topicId: string2().describe("the Topic, top_…"),
       backend: _enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
       containerProfile: string2().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, GitHub CLI (gh), Bun 1.4.2, bunx, Node 26.5.1, pnpm 10.33.0, Python 3.13.15 (python/python3), jq, and ripgrep (rg), or null to clear inherited profile"),
-      setupScript: string2().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize"),
+      setupScript: string2().nullable().optional().describe("optional strict Bash setup for a fresh base after repositories materialize; install scoped tools in /workspace/.local/bin so exec finds them and snapshots retain them"),
       repositories: array(string2()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits"),
       ...LIVE_PREVIEW_CONFIG_INPUT
     },
@@ -10710,7 +10726,7 @@ var ACTION_DEFINITIONS = [
       threadId: string2().describe("the Thread, thr_…"),
       backend: _enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
       containerProfile: string2().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, GitHub CLI (gh), Bun 1.4.2, bunx, Node 26.5.1, pnpm 10.33.0, Python 3.13.15 (python/python3), jq, and ripgrep (rg), or null to clear inherited profile"),
-      setupScript: string2().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize"),
+      setupScript: string2().nullable().optional().describe("optional strict Bash setup for a fresh base after repositories materialize; install scoped tools in /workspace/.local/bin so exec finds them and snapshots retain them"),
       repositories: array(string2()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits"),
       ...LIVE_PREVIEW_CONFIG_INPUT
     },
@@ -10790,7 +10806,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_repo_work_status",
     title: "Inspect repository finish state",
-    description: "Inspect an active isolated WRITE Run's Git publication, PR, CI, and review before retry, wait, or finish. Returns repository state (e.g. ci-pending) plus runDisposition.action computer_run_suspend when published work waits on CI/review/human authorization — the same runId resumes; dirty, unpublished, unknown-publication, failing, or changes-requested work keeps the local nextAction.",
+    description: "Inspect workspace Git worktrees, including manual clones, for publication, PR, CI, and review in an active isolated WRITE Run. Returns repository state and runDisposition.action computer_run_suspend when published work waits on CI/review/human authorization, resuming the same runId; dirty, missing, unpublished, or unverified work keeps a local nextAction.",
     inputSchema: {
       runId: string2().describe("the active isolated WRITE Run to inspect, run_…")
     },
@@ -10801,7 +10817,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_run_finish",
     title: "Finish a run",
-    description: "Finish a Run, preserving unread terminal output for 30 days without caller drain; active/unknown operations, failed preservation, and proven non-durable isolated WRITE work block release, and the last shared Run stops the parent. To abandon an unknown or non-durable disposable Run, pass discard=true with outcome failed or cancelled; the receipt keeps evidence and repeating that outcome is safe.",
+    description: "Finish a Run with unread terminal output preserved for 30 days without caller drain; active/unknown work, failed preservation, incomplete Git discovery, or unsafe worktrees block release. The last shared Run stops the parent; to abandon an unknown or non-durable disposable Run, pass discard=true with outcome failed or cancelled and retry safely from its receipt.",
     inputSchema: {
       runId: string2().describe("the runId returned by computer_run_start, run_…"),
       outcome: _enum(["finished", "failed", "cancelled"]).optional().describe("terminal outcome; defaults to finished"),
@@ -10815,7 +10831,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_run_receipt",
     title: "Read a run receipt",
-    description: "Inspect one Run's durable receipt during or after execution, including its Run-owned operation/activity state and a compact providerLifecycle journal (generation, last phase, typed reason) separate from command/process activity. Use this instead of parent computer_status; it returns compact history, not transcripts, and does not rewrite terminal reasonCode.",
+    description: "Inspect one Run's durable receipt during or after execution, including its finishRequest, Run-owned operation/activity state, and a compact providerLifecycle journal (generation, last phase, typed reason) separate from command/process activity. Use this instead of parent computer_status; it returns compact history, not transcripts, and does not rewrite terminal reasonCode.",
     inputSchema: {
       runId: string2().describe("the run to read, run_… (from computer_run_start or computer_runs)")
     },
@@ -10840,7 +10856,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_exec",
     title: "Run a command",
-    description: "Run one bounded shell command in runId with ambient GitHub authorization; timeout kills the process. Observe running work with computer_process_read; use nextCursor for a truncated output page only when needed and finish without draining; after a missed response use computer_run_receipt.operations[].operationId with computer_process_read instead of repeating the mutation.",
+    description: "Run a shell command in runId with ambient GitHub authorization and /workspace/.local/bin on PATH; timeout kills the process. Observe running work with computer_process_read, use nextCursor for a truncated output page when needed, and finish without draining; after a missed response use computer_run_receipt.operations[].operationId with computer_process_read instead of repeating the mutation.",
     inputSchema: {
       computerSessionId: string2().optional().describe("legacy alternative to runId: a computerSessionId on that Computer, cms_…; required unless runId is supplied"),
       command: string2().min(1).describe("the shell command to run"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.22.23",
+  "version": "0.22.25",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",