@lambdacurry/arbor 0.22.34 → 0.22.36

package/dist/arbor.js

@@ -2,7 +2,7 @@
 // package.json
 var package_default = {
   name: "@lambdacurry/arbor",
-  version: "0.22.34",
+  version: "0.22.36",
   description: "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   keywords: [
     "agents",
@@ -6284,14 +6284,17 @@ var profiles = sqliteTable("profiles", {
   permissions: text("permissions", { mode: "json" }).$type().notNull().default([]),
   reputation: text("reputation", { mode: "json" }).$type().notNull().default({}),
   status: text("status").$type().notNull().default("active"),
-  betterAuthUserId: text("better_auth_user_id").unique(),
+  betterAuthUserId: text("better_auth_user_id"),
   managedByProfileId: text("managed_by_profile_id"),
   color: text("color").$type(),
   emoji: text("emoji"),
   description: text("description"),
   notificationPrefs: text("notification_prefs", { mode: "json" }).$type(),
   createdAt: ts("created_at").notNull()
-}, (t) => ({ orgIdx: index("profiles_org_idx").on(t.orgId) }));
+}, (t) => ({
+  orgIdx: index("profiles_org_idx").on(t.orgId),
+  baUserOrgUq: uniqueIndex("profiles_better_auth_user_org_unique").on(t.betterAuthUserId, t.orgId)
+}));
 var clients = sqliteTable("clients", {
   id: text("id").primaryKey(),
   kind: text("kind").$type().notNull(),
@@ -6360,6 +6363,17 @@ var invitations = sqliteTable("invitations", {
   emailIdx: index("invitations_email_idx").on(t.email, t.status),
   tokenIdx: uniqueIndex("invitations_token_idx").on(t.token)
 }));
+var humanSessionBindings = sqliteTable("human_session_bindings", {
+  sessionId: text("session_id").primaryKey(),
+  activeProfileId: text("active_profile_id").notNull(),
+  updatedAt: ts("updated_at").notNull()
+}, (t) => ({ profileIdx: index("human_session_bindings_profile_idx").on(t.activeProfileId) }));
+var oauthClientBindings = sqliteTable("oauth_client_bindings", {
+  userId: text("user_id").notNull(),
+  clientId: text("client_id").notNull(),
+  profileId: text("profile_id").notNull(),
+  createdAt: ts("created_at").notNull()
+}, (t) => ({ pk: primaryKey({ columns: [t.userId, t.clientId] }) }));
 var agentPairings = sqliteTable("agent_pairings", {
   id: text("id").primaryKey(),
   orgId: text("org_id").notNull().references(() => orgs.id),
@@ -8637,9 +8651,30 @@ var MCP_OUTPUT_SCHEMAS = {
     profile: profile2,
     client: looseObject({ id, kind: string2() }),
     platform: looseObject({ level: string2() }).optional(),
+    memberships: array(jsonObject).optional(),
+    pendingInvites: array(jsonObject).optional(),
     spaceCharters: array(jsonObject).optional(),
     completeness: jsonObject.optional()
   }),
+  org_switch: looseObject({
+    profile: jsonObject,
+    memberships: array(jsonObject)
+  }),
+  invitation_accept: looseObject({
+    profileId: id,
+    orgId: id,
+    orgName: string2().nullable(),
+    orgRole: string2()
+  }),
+  org_create: looseObject({
+    orgId: id,
+    profileId: id,
+    name: string2()
+  }),
+  org_leave: looseObject({
+    leftProfileId: id,
+    locked: boolean2()
+  }),
   introduce: profileMutation,
   thread_get: looseObject({
     threadId: id.optional(),
@@ -9264,10 +9299,10 @@ var MCP_OUTPUT_SCHEMAS = {
   computer_process_read: looseObject({
     processId: string2(),
     status: string2(),
-    outputRetention: object({ state: literal("preserved"), expiresAt: timestamp }).optional(),
+    outputRetention: object({ state: _enum(["preserved", "expired"]), expiresAt: timestamp }).optional(),
     timedOut: boolean2().optional(),
     endedAt: timestamp.nullable().optional(),
-    durationMs: number2().int().min(0).nullable().optional(),
+    durationMs: number2().int().min(0).nullable().optional().describe("process elapsed runtime, final at terminal; it is not read or RPC latency"),
     stdout: string2().optional(),
     stderr: string2().optional(),
     truncated: boolean2().optional(),
@@ -9807,6 +9842,10 @@ var MCP_TOOL_ANNOTATIONS = {
   inbox: readOnly,
   dismiss: destructive,
   whoami: readOnly,
+  org_switch: idempotent,
+  invitation_accept: additive,
+  org_create: additive,
+  org_leave: destructive,
   introduce: additive,
   thread_get: readOnly,
   tree: readOnly,
@@ -10151,7 +10190,7 @@ Arbor's MCP is the collaboration and durable-knowledge surface. Configure, autho
 
 Run \`arbor help\` (or read the MCP tool list) for the exact command/flags — those stay generated from the live action surface, so they're always current.`;
 var ARBOR_SKILL_MARKDOWN = renderArborSkill(ORIENTATION);
-var COMPUTER_ORIENTATION = `Long Computer work returns a processId handle — do not hold one tool call for a full test or build. \`computer_exec\` runs a command; if the result is still running, observe it with \`computer_process_read\`; read a truncated continuation only when you need more output. Finish and suspend preserve unread terminal output internally, with original process IDs/cursors recoverable for 30 days. Do not chain \`pnpm test && pnpm build\` in one exec; split steps or pass \`background:true\`. An explicit waitForTerminalMs uses one server wait and canonical output page; otherwise the CLI polls only while the process is silent unless \`--no-wait\`. It never concatenates continuation pages into one agent context.
+var COMPUTER_ORIENTATION = `Long Computer work returns a processId handle — do not hold one tool call for a full test or build. \`computer_exec\` runs a command; if the result is still running, observe it with \`computer_process_read\`; read a truncated continuation only when you need more output. Finish and suspend preserve unread terminal output internally, with original process IDs/cursors recoverable for 30 days. Do not chain \`pnpm test && pnpm build\` in one exec; split steps or pass \`background:true\`. An explicit waitForTerminalMs uses one server wait and canonical output page; includeOutput=false on process_read returns status/liveness/recovery without output delivery or cursor advancement. Otherwise the CLI polls only while the process is silent unless \`--no-wait\`. It never concatenates continuation pages into one agent context.
 
 Arbor Computer is the complete software execution platform attached to Arbor's durable collaboration graph. It configures project environments, executes and verifies work, packages and releases Apps, and preserves reviewable evidence; it does not schedule agents or replace Arbor collaboration.
 
@@ -10995,14 +11034,15 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_process_read",
     title: "Read a background process",
-    description: "Read output with nextCursor, including repeated cursors for 30 days after preservation without provider wake. durationMs is process elapsed runtime (final at terminal), not RPC latency; waitForTerminalMs adds one bounded observation/page; expiry may leave work running; transport failure stays unknown/unsafe; only terminal or exact absence proof settles the durable operation.",
+    description: "Read output with nextCursor; includeOutput=false returns status/liveness/recovery without output or cursor delivery; durationMs is process runtime, not RPC latency; wait expiry does not stop work; transport failure stays unknown/unsafe; only terminal or exact absence proof settles the durable operation; preserved output stays readable for 30 days without provider wake.",
     inputSchema: {
       computerSessionId: string2().optional().describe("legacy alternative to runId: a computerSessionId on that Computer, cms_…; required unless runId is supplied"),
       runId: string2().optional().describe("the Run that owns this process, if it was started inside a Run"),
       processId: string2().min(1).describe("the processId returned by background exec, or matching computer_run_receipt.operations[].operationId for recovered foreground Run work, proc_…"),
       cursor: string2().optional().describe("continue after nextCursor from the prior result; omit to read from the beginning"),
       maxBytes: number2().int().min(1024).max(65536).optional().describe("maximum combined output bytes to return; default 4,096, opt up only when needed"),
-      waitForTerminalMs: number2().int().min(0).max(45000).optional().describe("use one native terminal-observation window up to this many milliseconds, then return one canonical output page; 0 is immediate, surviving descendants may remain running, and omission preserves the current read behavior")
+      waitForTerminalMs: number2().int().min(0).max(45000).optional().describe("use one native terminal-observation window up to this many milliseconds, then return one canonical output page when includeOutput is true; 0 is immediate, surviving descendants may remain running, and omission preserves the current read behavior"),
+      includeOutput: boolean2().optional().describe("include stdout, stderr, and paging cursors; set false to inspect status, liveness, and recovery without delivering output or marking it delivered")
     },
     surfaces: ["computer-mcp", "computer-cli"],
     toolset: "loop",
@@ -11543,7 +11583,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "whoami",
     title: "Who am I",
-    description: "Return your own Arbor identity (profile + source client) as resolved from your credential. Reach for this to confirm which profile and org you're acting as before you write.",
+    description: "Return your Arbor identity as resolved from your credential: which profile and org you're acting as, and which other orgs you can switch to on a human session.",
     inputSchema: {},
     surfaces: ["mcp", "cli"],
     toolset: "loop",
@@ -11871,6 +11911,50 @@ var ACTION_DEFINITIONS = [
     toolset: "admin",
     run: forward("service.register")
   },
+  {
+    name: "org_switch",
+    title: "Switch workspace",
+    description: "Act as your Profile in another org you already belong to (orgId from whoami's memberships). Session-only, not a PAT.",
+    inputSchema: {
+      orgId: string2().min(1).describe("the org to switch this session into")
+    },
+    surfaces: ["mcp", "cli"],
+    toolset: "loop",
+    run: forward("org.switch")
+  },
+  {
+    name: "invitation_accept",
+    title: "Accept an org invitation",
+    description: "Join another org from a pending invitation while already signed in (invitationId from whoami's pendingInvites). Session-only, not a PAT.",
+    inputSchema: {
+      invitationId: string2().min(1).describe("the pending invitation id")
+    },
+    surfaces: ["mcp", "cli"],
+    toolset: "loop",
+    run: forward("invitation.accept")
+  },
+  {
+    name: "org_create",
+    title: "Create a workspace",
+    description: "Create a new org you own (a personal workspace) and switch this session into it. Session-only, not a PAT.",
+    inputSchema: {
+      name: string2().min(1).optional().describe("workspace name; defaults to '{you}'s workspace'")
+    },
+    surfaces: ["mcp", "cli"],
+    toolset: "loop",
+    run: forward("org.create")
+  },
+  {
+    name: "org_leave",
+    title: "Leave a workspace",
+    description: "Leave an org you belong to, disabling that Profile — keep at least one workspace, and appoint another owner before leaving a multi-person org. Session-only, not a PAT.",
+    inputSchema: {
+      orgId: string2().min(1).optional().describe("org to leave; defaults to the current org")
+    },
+    surfaces: ["cli"],
+    toolset: "loop",
+    run: forward("org.leave")
+  },
   {
     name: "human_invite",
     title: "Invite a human",
@@ -14480,10 +14564,20 @@ async function renderMe(ctx, action) {
   const setCharters = me.spaceCharters ?? [];
   const charterLines = setCharters.length > 0 ? `  space charters:
 ` + setCharters.map((s) => `    • ${s.spaceTitle} — ${clamp(s.charter)}
+`).join("") : "";
+  const currentOrg = me.memberships?.find((m) => m.current);
+  const otherOrgs = (me.memberships ?? []).filter((m) => !m.current);
+  const orgLine = currentOrg ? `  org ${currentOrg.orgName} (${me.profile.orgId}) · resolved via ${me.client.kind}
+` : `  org ${me.profile.orgId} · resolved via ${me.client.kind}
+`;
+  const switchLines = otherOrgs.length > 0 ? `  other workspaces:
+` + otherOrgs.map((m) => `    • ${m.orgName} — \`org_switch --org-id ${m.orgId}\`
+`).join("") : "";
+  const inviteLines = (me.pendingInvites ?? []).length > 0 ? `  pending invites:
+` + (me.pendingInvites ?? []).map((i) => `    • ${i.orgName} — \`invitation_accept --invitation-id ${i.invitationId}\`
 `).join("") : "";
   const human = `${me.profile.displayName} · ${me.profile.kind} · org-role ${me.profile.orgRole}
-` + `  org ${me.profile.orgId} · resolved via ${me.client.kind}
-` + setLines + charterLines + (gaps.length > 0 ? `  to be more legible to your team, set: ${gaps.join("; ")} (\`introduce\`)
+` + orgLine + switchLines + inviteLines + setLines + charterLines + (gaps.length > 0 ? `  to be more legible to your team, set: ${gaps.join("; ")} (\`introduce\`)
 ` : "") + spaceLines;
   emitDual(me, human, action, ctx);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.22.34",
+  "version": "0.22.36",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",