@lambdacurry/arbor 0.22.40 → 0.23.0

package/dist/arbor.js

@@ -2,7 +2,7 @@
 // package.json
 var package_default = {
   name: "@lambdacurry/arbor",
-  version: "0.22.40",
+  version: "0.23.0",
   description: "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   keywords: [
     "agents",
@@ -4921,6 +4921,30 @@ var IDENTITY_COLORS = [
   "rose",
   "cyan"
 ];
+var LIFECYCLE_TYPES = [
+  "backlog",
+  "active",
+  "needs-review",
+  "stuck",
+  "standing",
+  "resolved",
+  "canceled",
+  "archived"
+];
+var LIFECYCLE_TYPE_DESCRIPTIONS = {
+  backlog: "accepted, not committed",
+  active: "committed and in flight",
+  "needs-review": "waiting on a read",
+  stuck: "in flight, blocked",
+  standing: "open-forever; never owed a conclusion (AD-200)",
+  resolved: "the objective was met",
+  canceled: "we decided not to",
+  archived: "left the record; refile with `thread_update`"
+};
+function transitionThreadActionDescription() {
+  const types = LIFECYCLE_TYPES.map((type) => `\`${type}\` ${LIFECYCLE_TYPE_DESCRIPTIONS[type]}`).join("; ");
+  return `Move a Thread by key, case-insensitive name, or type (\`--to resolved\` still works as a bare type); illegal jumps rejected. ${types}; live menu is \`thread_get.transitionsFrom\`.`;
+}
 var CONTRIBUTION_TYPES = [
   "comment",
   "question",
@@ -6427,6 +6451,24 @@ var agentPairings = sqliteTable("agent_pairings", {
   userCodeIdx: uniqueIndex("agent_pairings_user_code_idx").on(t.userCode),
   orgStatusIdx: index("agent_pairings_org_status_idx").on(t.orgId, t.status)
 }));
+var workflows = sqliteTable("workflows", {
+  id: text("id").primaryKey(),
+  orgId: text("org_id").notNull().references(() => orgs.id),
+  name: text("name").notNull(),
+  summary: text("summary").notNull(),
+  labels: text("labels", { mode: "json" }).$type().notNull(),
+  createdAt: ts("created_at").notNull(),
+  updatedAt: ts("updated_at").notNull()
+}, (t) => ({ orgIdx: index("workflows_org_idx").on(t.orgId) }));
+var spaceWorkflows = sqliteTable("space_workflows", {
+  spaceId: text("space_id").notNull().references(() => spaces.id),
+  workflowId: text("workflow_id").notNull().references(() => workflows.id),
+  isDefault: integer2("is_default", { mode: "boolean" }).notNull().default(false)
+}, (t) => ({
+  pk: primaryKey({ columns: [t.spaceId, t.workflowId] }),
+  workflowIdx: index("space_workflows_workflow_idx").on(t.workflowId),
+  oneDefaultUq: uniqueIndex("space_workflows_one_default_uq").on(t.spaceId).where(sql`${t.isDefault} = 1`)
+}));
 var topics = sqliteTable("topics", {
   id: text("id").primaryKey(),
   spaceId: text("space_id").notNull().references(() => spaces.id),
@@ -6434,9 +6476,13 @@ var topics = sqliteTable("topics", {
   purpose: text("purpose"),
   guidance: text("guidance", { mode: "json" }).$type().notNull().default([]),
   contributionLanes: text("contribution_lanes", { mode: "json" }).$type().notNull().default([]),
+  workflowId: text("workflow_id").references(() => workflows.id),
   archivedAt: ts("archived_at"),
   createdAt: ts("created_at").notNull()
-}, (t) => ({ spaceIdx: index("topics_space_idx").on(t.spaceId) }));
+}, (t) => ({
+  spaceIdx: index("topics_space_idx").on(t.spaceId),
+  workflowIdx: index("topics_workflow_idx").on(t.workflowId)
+}));
 var initiatives = sqliteTable("initiatives", {
   id: text("id").primaryKey(),
   orgId: text("org_id").notNull().references(() => orgs.id),
@@ -6464,13 +6510,16 @@ var threads = sqliteTable("threads", {
   title: text("title").notNull(),
   objective: text("objective").notNull(),
   status: text("status").$type().notNull().default("active"),
+  lifecycleType: text("lifecycle_type").$type().notNull().default("active"),
+  lifecycleLabel: text("lifecycle_label").notNull().default("active"),
   waysToHelp: text("ways_to_help", { mode: "json" }).$type().notNull().default([]),
   openQuestions: text("open_questions", { mode: "json" }).$type().notNull().default([]),
   expectedOutput: text("expected_output").notNull().default(""),
   createdAt: ts("created_at").notNull()
 }, (t) => ({
   topicIdx: index("threads_topic_idx").on(t.topicId),
-  spaceIdx: index("threads_space_idx").on(t.spaceId)
+  spaceIdx: index("threads_space_idx").on(t.spaceId),
+  lifecycleTypeIdx: index("threads_lifecycle_type_idx").on(t.lifecycleType)
 }));
 var computerConfigs = sqliteTable("computer_configs", {
   id: text("id").primaryKey(),
@@ -6699,6 +6748,60 @@ var computerRuns = sqliteTable("computer_runs", {
   statusIdx: index("computer_runs_status_idx").on(t.computerId, t.status),
   runtimeIdx: index("computer_runs_runtime_idx").on(t.computerId, t.runtimeState)
 }));
+var packageCacheObjects = sqliteTable("package_cache_objects", {
+  key: text("key").primaryKey(),
+  orgId: text("org_id").notNull().references(() => orgs.id),
+  project: text("project").notNull(),
+  ecosystem: text("ecosystem").notNull(),
+  originId: text("origin_id").notNull(),
+  integrityAlgorithm: text("integrity_algorithm").notNull(),
+  digest: text("digest").notNull(),
+  sri: text("sri").notNull(),
+  byteLength: integer2("byte_length").notNull(),
+  status: text("status").$type().notNull(),
+  uploadId: text("upload_id").notNull(),
+  producerRunId: text("producer_run_id").notNull().references(() => computerRuns.id),
+  producerTrust: text("producer_trust").$type().notNull(),
+  createdAt: ts("created_at").notNull(),
+  readyAt: ts("ready_at"),
+  expiresAt: ts("expires_at").notNull()
+}, (t) => ({
+  uploadUq: uniqueIndex("package_cache_objects_upload_uniq").on(t.uploadId),
+  projectStatusExpiryIdx: index("package_cache_objects_project_status_expiry_idx").on(t.orgId, t.project, t.status, t.expiresAt)
+}));
+var packageCacheProjectUsage = sqliteTable("package_cache_project_usage", {
+  id: text("id").primaryKey(),
+  orgId: text("org_id").notNull().references(() => orgs.id),
+  project: text("project").notNull(),
+  maxStoredBytes: integer2("max_stored_bytes").notNull(),
+  maxObjects: integer2("max_objects").notNull(),
+  maxWriteBytesPerDay: integer2("max_write_bytes_per_day").notNull(),
+  writePeriod: text("write_period").notNull(),
+  writeBytesToday: integer2("write_bytes_today").notNull().default(0),
+  storedBytes: integer2("stored_bytes").notNull().default(0),
+  objectCount: integer2("object_count").notNull().default(0),
+  reservedBytes: integer2("reserved_bytes").notNull().default(0),
+  reservedObjects: integer2("reserved_objects").notNull().default(0),
+  writeBytes: integer2("write_bytes").notNull().default(0),
+  readBytes: integer2("read_bytes").notNull().default(0),
+  hits: integer2("hits").notNull().default(0),
+  misses: integer2("misses").notNull().default(0),
+  rejections: integer2("rejections").notNull().default(0),
+  classAOps: integer2("class_a_ops").notNull().default(0),
+  classBOps: integer2("class_b_ops").notNull().default(0),
+  publicationsNew: integer2("publications_new").notNull().default(0),
+  publicationsDuplicate: integer2("publications_duplicate").notNull().default(0),
+  publicationsConverged: integer2("publications_converged").notNull().default(0),
+  publicationsRejected: integer2("publications_rejected").notNull().default(0),
+  fallbacks: integer2("fallbacks").notNull().default(0),
+  updatedAt: ts("updated_at").notNull()
+}, (t) => ({
+  projectUq: uniqueIndex("package_cache_project_usage_project_uniq").on(t.orgId, t.project),
+  nonnegative: check("package_cache_project_usage_nonnegative", sql`${t.storedBytes} >= 0 AND ${t.objectCount} >= 0 AND ${t.reservedBytes} >= 0 AND ${t.reservedObjects} >= 0`),
+  byteBudget: check("package_cache_project_usage_byte_budget", sql`${t.storedBytes} + ${t.reservedBytes} <= ${t.maxStoredBytes}`),
+  objectBudget: check("package_cache_project_usage_object_budget", sql`${t.objectCount} + ${t.reservedObjects} <= ${t.maxObjects}`),
+  dailyWriteBudget: check("package_cache_project_usage_daily_write_budget", sql`${t.writeBytesToday} + ${t.reservedBytes} <= ${t.maxWriteBytesPerDay}`)
+}));
 var computerSnapshots = sqliteTable("computer_snapshots", {
   id: text("id").primaryKey(),
   ownerScope: text("owner_scope").$type().notNull(),
@@ -7064,6 +7167,22 @@ var artifactTldrawBoards = sqliteTable("artifact_tldraw_boards", {
 }, (t) => ({
   createKeyUq: uniqueIndex("artifact_tldraw_boards_create_key_uq").on(t.createActorProfileId, t.createThreadId, t.createIdempotencyKey)
 }));
+var artifactTldrawLatestPreviews = sqliteTable("artifact_tldraw_latest_previews", {
+  artifactId: text("artifact_id").primaryKey().references(() => artifacts.id, { onDelete: "cascade" }),
+  attachmentId: text("attachment_id").notNull().references(() => attachments.id),
+  documentDigest: text("document_digest").notNull(),
+  documentClock: integer2("document_clock").notNull(),
+  roomGeneration: integer2("room_generation").notNull(),
+  width: integer2("width").notNull(),
+  height: integer2("height").notNull(),
+  generatedAt: ts("generated_at").notNull(),
+  revision: integer2("revision").notNull().default(1),
+  storageSlot: integer2("storage_slot").notNull(),
+  retiredAttachmentId: text("retired_attachment_id"),
+  retiredStorageSlot: integer2("retired_storage_slot")
+}, (t) => ({
+  attachmentIdx: uniqueIndex("artifact_tldraw_latest_previews_attachment_uniq").on(t.attachmentId)
+}));
 var artifactTldrawCheckpoints = sqliteTable("artifact_tldraw_checkpoints", {
   id: text("id").primaryKey(),
   artifactId: text("artifact_id").notNull().references(() => artifacts.id, { onDelete: "cascade" }),
@@ -7589,6 +7708,163 @@ var threadAssignments = sqliteTable("thread_assignments", {
   assigneeUq: uniqueIndex("thread_assignments_thread_profile_uniq").on(t.threadId, t.profileId),
   profileIdx: index("thread_assignments_profile_idx").on(t.profileId, t.createdAt)
 }));
+// ../core/src/db/tldraw-preview-candidate-schema.ts
+var ts2 = (name) => text(name);
+var artifactTldrawPreviewCandidates = sqliteTable("artifact_tldraw_preview_candidates", {
+  artifactId: text("artifact_id").primaryKey().references(() => artifacts.id, { onDelete: "cascade" }),
+  generationToken: text("generation_token").notNull(),
+  slot: integer2("slot").notNull(),
+  attachmentId: text("attachment_id").notNull(),
+  r2Key: text("r2_key").notNull(),
+  targetDocumentDigest: text("target_document_digest").notNull(),
+  leaseExpiresAt: ts2("lease_expires_at").notNull(),
+  createdAt: ts2("created_at").notNull()
+}, (t) => ({
+  generationIdx: uniqueIndex("artifact_tldraw_preview_candidates_generation_uniq").on(t.generationToken),
+  attachmentIdx: uniqueIndex("artifact_tldraw_preview_candidates_attachment_uniq").on(t.attachmentId),
+  r2KeyIdx: uniqueIndex("artifact_tldraw_preview_candidates_r2_key_uniq").on(t.r2Key)
+}));
+// ../core/src/lifecycle/thread.ts
+var STATUS_OPENNESS = {
+  backlog: { working: false, currentWork: false, closed: false },
+  active: { working: true, currentWork: true, closed: false },
+  "needs-review": { working: true, currentWork: true, closed: false },
+  stuck: { working: true, currentWork: true, closed: false },
+  standing: { working: true, currentWork: false, closed: false },
+  resolved: { working: false, currentWork: false, closed: true },
+  canceled: { working: false, currentWork: false, closed: true },
+  archived: { working: false, currentWork: false, closed: true }
+};
+var typesWhere = (sense) => Object.keys(STATUS_OPENNESS).filter((s) => STATUS_OPENNESS[s][sense]);
+var WORKING_THREAD_STATUSES = typesWhere("working");
+var CURRENT_WORK_THREAD_STATUSES = typesWhere("currentWork");
+// ../core/src/lifecycle/workflow.ts
+var WORKFLOW_SUMMARY_MAX = 500;
+var WORKFLOW_LABEL_DESCRIPTION_MAX = 200;
+var LIFECYCLE_TYPE_SET = new Set(LIFECYCLE_TYPES);
+// ../core/src/lifecycle/builtins.ts
+var BUILTIN_WORKFLOW_IDS = [
+  "standard",
+  "queue",
+  "content",
+  "experiment",
+  "funnel"
+];
+var col = (key, name, type, order, extra) => ({ key, name, type, order, ...extra });
+var STANDARD = {
+  id: "standard",
+  name: "Standard",
+  summary: "One label per type using the protocol's own words — the zero-config default and the only all-eight workflow.",
+  labels: [
+    col("backlog", "Backlog", "backlog", 0),
+    col("active", "Active", "active", 1),
+    col("needs-review", "Needs review", "needs-review", 2),
+    col("stuck", "Stuck", "stuck", 3),
+    col("standing", "Standing", "standing", 4),
+    col("resolved", "Resolved", "resolved", 5),
+    col("canceled", "Canceled", "canceled", 6),
+    col("archived", "Archived", "archived", 7)
+  ]
+};
+var QUEUE = {
+  id: "queue",
+  name: "Queue",
+  summary: "Arrivals are handled or refused; no review gate; stuck names an external requester.",
+  labels: [
+    col("triage", "Triage", "backlog", 0, {
+      description: "Arrived; not yet accepted or refused."
+    }),
+    col("accepted", "Accepted", "active", 1, { description: "Taken; being handled." }),
+    col("waiting-on-requester", "Waiting on requester", "stuck", 2, {
+      description: "Blocked on the person who sent it, not an internal blocker."
+    }),
+    col("handled", "Handled", "resolved", 3, { description: "The arrival was worked." }),
+    col("declined", "Declined", "canceled", 4, { description: "We decided not to take it." }),
+    col("duplicate", "Duplicate", "archived", 5, {
+      description: "Same as an existing thread; the original holds the work."
+    })
+  ]
+};
+var CONTENT = {
+  id: "content",
+  name: "Content",
+  summary: "Draft, edit, approve, publish — two review gates by two authorities, plus a named return path.",
+  labels: [
+    col("pitch", "Pitch", "backlog", 0, { description: "Proposed, not yet in draft." }),
+    col("drafting", "Drafting", "active", 1, {
+      isDefaultForType: true,
+      description: "Being written."
+    }),
+    col("changes-requested", "Changes requested", "active", 2, {
+      description: "Failed a review; the bounce is the work."
+    }),
+    col("in-edit", "In edit", "needs-review", 3, {
+      isDefaultForType: true,
+      description: "Editorial review."
+    }),
+    col("final-approval", "Final approval", "needs-review", 4, {
+      description: "Sign-off by a different authority than edit."
+    }),
+    col("waiting-on-assets", "Waiting on assets", "stuck", 5, {
+      description: "Blocked on material, not a reader."
+    }),
+    col("published", "Published", "resolved", 6, { description: "Out." }),
+    col("killed", "Killed", "canceled", 7, { description: "We decided not to ship it." })
+  ]
+};
+var EXPERIMENT = {
+  id: "experiment",
+  name: "Experiment",
+  summary: "A hypothesis is run and owes a readout; two honest endings — adopted, or not.",
+  labels: [
+    col("hypothesis", "Hypothesis", "backlog", 0, {
+      description: "Proposed trial, not yet running."
+    }),
+    col("running", "Running", "active", 1, {
+      description: "Finite trial in flight; owed a readout."
+    }),
+    col("readout", "Readout", "needs-review", 2, {
+      description: "Findings waiting on a reader."
+    }),
+    col("adopted", "Adopted", "resolved", 3, {
+      description: "The hypothesis won; we will keep it."
+    }),
+    col("rejected", "Rejected", "canceled", 4, {
+      description: "The hypothesis ran; we decided not to adopt."
+    })
+  ]
+};
+var FUNNEL = {
+  id: "funnel",
+  name: "Funnel",
+  summary: "A ladder of sequential stages against a counterparty, ending won or lost.",
+  labels: [
+    col("lead", "Lead", "backlog", 0, { description: "Not yet qualified." }),
+    col("qualified", "Qualified", "active", 1, {
+      isDefaultForType: true,
+      description: "In the ladder; not yet a proposal."
+    }),
+    col("proposal", "Proposal", "active", 2, {
+      description: "Proposal is out / submitted."
+    }),
+    col("negotiation", "Negotiation", "active", 3, { description: "Terms being worked." }),
+    col("waiting-on-counterparty", "Waiting on counterparty", "stuck", 4, {
+      description: "Blocked on them, not on an internal read."
+    }),
+    col("won", "Won", "resolved", 5, { description: "Closed won." }),
+    col("lost", "Lost", "canceled", 6, {
+      description: "We did not win; keep the reason findable."
+    })
+  ]
+};
+var BUILTIN_WORKFLOWS = {
+  standard: STANDARD,
+  queue: QUEUE,
+  content: CONTENT,
+  experiment: EXPERIMENT,
+  funnel: FUNNEL
+};
+var STANDARD_WORKFLOW = BUILTIN_WORKFLOWS.standard;
 // ../core/src/ops/secret.ts
 var SECRET_PERMISSIONS = [
   "create",
@@ -7671,6 +7947,9 @@ var assigneeColumns = {
   color: profiles.color,
   emoji: profiles.emoji
 };
+// ../core/src/ops/package-cache.ts
+var PACKAGE_CACHE_PENDING_TTL_MS = 15 * 60 * 1000;
+var PACKAGE_CACHE_FINAL_TTL_MS = 30 * 24 * 60 * 60 * 1000;
 // ../core/src/ops/computer-output.ts
 var COMPUTER_OUTPUT_DEFAULT_STALE_MS = 24 * 60 * 60 * 1000;
 // ../core/src/ops/computer-recovery.ts
@@ -7830,6 +8109,20 @@ var recallHit = looseObject({
   url: nullableString,
   createdAt: timestamp
 });
+var tldrawLatestPreview = object({
+  status: _enum(["current", "stale", "missing"]),
+  representedDocumentDigest: string2().optional(),
+  representedDocumentClock: number2().int().min(0).optional(),
+  generatedAt: timestamp.optional(),
+  image: object({
+    attachmentId: id,
+    downloadUrl: string2(),
+    mimeType: literal("image/png"),
+    width: number2().int().positive(),
+    height: number2().int().positive(),
+    size: number2().int().positive()
+  }).strict().optional()
+});
 var artifactLivePreviewThread = looseObject({
   id,
   title: string2()
@@ -8284,8 +8577,26 @@ var thread3 = looseObject({
   title: string2(),
   objective: string2(),
   status: string2().optional(),
+  lifecycleType: string2().optional(),
+  lifecycleLabel: string2().optional(),
   url: string2().optional()
 });
+var workflowSummary = looseObject({
+  id,
+  name: string2(),
+  summary: string2(),
+  origin: string2().optional(),
+  isDefault: boolean2().optional(),
+  labels: array(jsonObject).optional(),
+  createdAt: string2().optional(),
+  updatedAt: string2().optional()
+});
+var transitionFrom = looseObject({
+  label: string2(),
+  name: string2(),
+  type: string2(),
+  description: string2().optional()
+});
 var topic2 = looseObject({
   id,
   spaceId: id.optional(),
@@ -8585,7 +8896,8 @@ var MCP_OUTPUT_SCHEMAS = {
   topic_update: looseObject({
     id,
     title: string2().optional(),
-    purpose: nullableString.optional()
+    purpose: nullableString.optional(),
+    workflowId: nullableString.optional()
   }),
   create_thread: looseObject({ threadId: id, url: string2().optional() }),
   thread_update: looseObject({
@@ -8739,7 +9051,8 @@ var MCP_OUTPUT_SCHEMAS = {
     distillate: array(jsonObject).optional(),
     watching: boolean2().optional(),
     cursor: string2().optional(),
-    unchanged: boolean2().optional()
+    unchanged: boolean2().optional(),
+    transitionsFrom: array(transitionFrom).optional()
   }),
   thread_assign: looseObject({
     threadId: id,
@@ -8785,7 +9098,10 @@ var MCP_OUTPUT_SCHEMAS = {
     title: string2().optional(),
     purpose: nullableString.optional(),
     visibility: string2().optional(),
-    stage: string2().optional()
+    stage: string2().optional(),
+    attached: jsonObject.optional(),
+    defaulted: jsonObject.optional(),
+    detached: jsonObject.optional()
   }),
   space_get: looseObject({
     space: space3,
@@ -8793,11 +9109,14 @@ var MCP_OUTPUT_SCHEMAS = {
     members: array(member).optional(),
     total: number2().int().min(0),
     nextCursor: string2().optional(),
-    computerConfig: resolvedComputerConfig.nullable().optional()
+    computerConfig: resolvedComputerConfig.nullable().optional(),
+    workflows: array(workflowSummary).optional(),
+    defaultWorkflow: workflowSummary.optional()
   }),
   topic_get: looseObject({
     topic: topic2,
     space: space3,
+    workflow: workflowSummary.optional(),
     threads: array(thread3).optional(),
     promotedArtifacts: array(artifact4).optional(),
     total: number2().int().min(0),
@@ -9000,6 +9319,7 @@ var MCP_OUTPUT_SCHEMAS = {
         retryCount: number2().int().min(0)
       })
     }),
+    preview: tldrawLatestPreview,
     script: object({
       artifactId: id,
       revision: number2().int().min(0),
@@ -9050,15 +9370,7 @@ var MCP_OUTPUT_SCHEMAS = {
         serializedByteLimit: number2().int().positive()
       })
     }),
-    image: object({
-      attachmentId: id,
-      downloadUrl: string2(),
-      mimeType: literal("image/png"),
-      width: number2().int().positive(),
-      height: number2().int().positive(),
-      size: number2().int().positive(),
-      sha256: string2()
-    }).strict()
+    preview: tldrawLatestPreview
   }),
   tldraw_exec: looseObject({
     executionId: id,
@@ -9538,6 +9850,22 @@ var MCP_OUTPUT_SCHEMAS = {
       namePath: string2().optional()
     })),
     truncated: boolean2()
+  }),
+  workflow_create: looseObject({
+    id,
+    name: string2(),
+    summary: string2(),
+    labels: array(jsonObject)
+  }),
+  workflow_update: looseObject({
+    id,
+    name: string2(),
+    summary: string2(),
+    labels: array(jsonObject)
+  }),
+  workflow_list: looseObject({
+    builtins: array(workflowSummary),
+    catalog: array(workflowSummary)
   })
 };
 function outputSchemaFor(actionName) {
@@ -9568,6 +9896,28 @@ function selectedArray(value, fields) {
     return;
   return value.map((entry) => selected(entry, fields) ?? {});
 }
+function compactTldrawPreview(value) {
+  const preview = record2(value);
+  if (!preview)
+    return;
+  return defined([
+    ["status", preview.status],
+    ["representedDocumentDigest", preview.representedDocumentDigest],
+    ["representedDocumentClock", preview.representedDocumentClock],
+    ["generatedAt", preview.generatedAt],
+    [
+      "image",
+      selected(preview.image, [
+        "attachmentId",
+        "downloadUrl",
+        "mimeType",
+        "width",
+        "height",
+        "size"
+      ])
+    ]
+  ]);
+}
 function omitNull(value) {
   return value === null ? undefined : value;
 }
@@ -9796,18 +10146,7 @@ var OUTPUT_SHAPERS = {
     ["documentClock", result.documentClock],
     ["documentDigest", result.documentDigest],
     ["scene", result.scene],
-    [
-      "image",
-      selected(result.image, [
-        "attachmentId",
-        "downloadUrl",
-        "mimeType",
-        "width",
-        "height",
-        "size",
-        "sha256"
-      ])
-    ]
+    ["preview", compactTldrawPreview(result.preview)]
   ]),
   computer_write: (result) => defined([
     ["ok", result.ok],
@@ -9896,6 +10235,9 @@ var MCP_TOOL_ANNOTATIONS = {
   topic_update: additive,
   create_thread: additive,
   thread_update: additive,
+  workflow_create: additive,
+  workflow_update: additive,
+  workflow_list: readOnly,
   thread_assign: idempotent,
   thread_list: readOnly,
   set_organization_computer: destructiveIdempotent,
@@ -10254,7 +10596,7 @@ Arbor's MCP is the collaboration and durable-knowledge surface. Configure, autho
 3. ANSWER through requests. When \`inbox\` or a thread shows an open request you can meet, answer THROUGH it — \`respond\` to it, or \`stamp\` the contribution a review request is about — so it completes and the requester is notified. WHY: a plain reply that merely happens to answer leaves their request hanging (the most common failure). Requests are what you OWE; the Threads you are RESPONSIBLE for moving are \`thread_list\` (assign yourself or a teammate with \`thread_assign\` when responsibility is real, not to delegate one action — that is a request).
 4. REVIEW honestly; promote the standout, sparingly. \`stamp\` to vouch or push back with a one-line why (you can't stamp your own work — request a review via \`request\`). PROMOTE a contribution/artifact only when it's the standout the org should find FIRST (the \uD83C\uDF96️). One deliberate exception (AD-200): in a STANDING thread, periodically promoting a distilling synthesis IS the job — it's how an open-forever lane compresses for newcomers and recall, not applause inflation; promoting your own synthesis there is fine (only stamps bar self-review). WHY: promotion is curation, not applause — and it's about an OUTPUT, never a whole thread (a thread RESOLVES; it is never "promoted").
 5. EDIT, don't repost. \`edit\` your own contribution to sharpen it; the record stays audited. A genuinely different point is a NEW contribution.
-6. FIT STRUCTURE TO THE WORK — one thread settles one objective, one topic holds one area — and CLOSE it when done. Before adding to a thread, ask whether your point serves ITS objective or starts a new one: a genuinely new question deserves its own thread (check \`tree\`, name it by its objective, make the first contribution); a distinct area that's accumulating threads deserves its own topic. When several threads (often across topics) ladder up to one outcome, link or create a GOAL — that's the cross-cut; don't rely on recall alone or fold them into one mega-thread (prefer linking an existing goal over minting a near-duplicate; complete it when the outcome is reached). When a thread reaches its conclusion, \`transition_thread --to resolved\`; opened in the wrong place → \`--to archived\` and reopen where it belongs. A thread DESIGNED to stay open — a journal, ops log, or standing lane — is \`--to standing\` (AD-200): it is never owed a conclusion, and its distillation is PROMOTION (\uD83C\uDF96️ a synthesis), not closure; "close it when done" applies to deliberations, not standing lanes. CLOSING IS MEMBER WORK: any member of the space can resolve a thread whose objective is met — you do not need its author's permission, and you do not need to be the one who did the work. Asking a human to perform the close is not deference; it is an open thread with extra steps. If the objective is met, close it and say why. WHY: structure should mirror the work so each thread settles one findable question — a thread crammed with many objectives is as unreadable as a litter of one-off topics, and open threads no one closes bury the live ones.
+6. FIT STRUCTURE TO THE WORK — one thread settles one objective, one topic holds one area — and CLOSE it when done. Before adding to a thread, ask whether your point serves ITS objective or starts a new one: a genuinely new question deserves its own thread (check \`tree\`, name it by its objective, make the first contribution); a distinct area that's accumulating threads deserves its own topic. When several threads (often across topics) ladder up to one outcome, link or create a GOAL — that's the cross-cut; don't rely on recall alone or fold them into one mega-thread (prefer linking an existing goal over minting a near-duplicate; complete it when the outcome is reached). When a thread reaches its conclusion, \`transition_thread --to resolved\`; opened in the wrong place → \`--to archived\` and reopen where it belongs (branch on type, never the room's label name). A thread DESIGNED to stay open — a journal, ops log, or standing lane — is \`--to standing\` (AD-200): it is never owed a conclusion, and its distillation is PROMOTION (\uD83C\uDF96️ a synthesis), not closure; "close it when done" applies to deliberations, not standing lanes. CLOSING IS MEMBER WORK: any member of the space can resolve a thread whose objective is met — you do not need its author's permission, and you do not need to be the one who did the work. Asking a human to perform the close is not deference; it is an open thread with extra steps. If the objective is met, close it and say why. WHY: structure should mirror the work so each thread settles one findable question — a thread crammed with many objectives is as unreadable as a litter of one-off topics, and open threads no one closes bury the live ones.
 7. ACT, THEN REPORT — escalate by exception (AD-197). Before routing a decision to a human, do the CHEAP CHECK that would let you act yourself — the registry lookup, the live-state read, the policy check; the blocker is usually fictional. Then: recoverable + conclusive evidence → act and say why. Recoverable but uncertain → state your intent WITH a deadline ("resolving Thursday unless someone objects") and act at the deadline. Irreversible, outward-facing, or a genuine taste/priority call → escalate; that's what humans are for. Reversibility is the test you can always answer in the moment — a wrong resolve costs one click to undo (\`resolved\` → \`active\`), while waiting costs days. WHY: a room where every met condition waits for a human keystroke makes the human the bottleneck and the agents decorative at exactly the moments they're most useful.
 
 8. DURABLE OUTPUT IS AN ARTIFACT, NOT A LONG CONTRIBUTION (AD-201). A contribution is one point in a conversation; an ARTIFACT is a first-class output the room holds and keeps CURRENT — a doc, a table, a diagram, a spec, or an uploaded file. When your point is really a deliverable the team will read or UPDATE later — a table of options, a reference doc, a plan, a rubric — make it an artifact (\`artifact\` verb=create with kind doc/table/diagram/html + \`source\`, or promote a file) instead of pasting it into prose. Text-kind artifacts are LIVING: \`artifact_get\` it, then \`artifact\` verb=edit naming the \`baseVersion\` you read — patches apply exact-match and atomically, one version per call, every version attributed. An artifact created FROM a thread is listed on that thread automatically (no link post needed); cite it inline with [label](#art_…) wherever it's relevant. WHY: a thread remembers what was SAID; an artifact holds what is TRUE NOW — a 40-row table pasted into a contribution is frozen the instant it's posted and unreadable the moment it's edited, while the same table as an artifact stays live, diffable, and findable by its content.
@@ -10380,6 +10722,14 @@ var PAGINATION_INPUT = {
   cursor: string2().optional().describe("opaque cursor from a prior response's nextCursor (use with --limit)"),
   all: boolean2().optional().describe("explicit complete retrieval — skip the bounded default page. Prefer limit+cursor unless you need the whole collection")
 };
+var WORKFLOW_LABEL_INPUT = object({
+  key: string2().min(1).describe("stable id within this workflow"),
+  name: string2().min(1).describe("room-facing column name"),
+  type: _enum(LIFECYCLE_TYPES).describe("protocol type this column occupies"),
+  order: number2().int().describe("column order, 0-based"),
+  isDefaultForType: boolean2().optional().describe("required when this type has more than one label"),
+  description: string2().max(WORKFLOW_LABEL_DESCRIPTION_MAX).optional().describe("optional teaching prose; no consumer branches on it")
+});
 var LIVE_PREVIEW_CONFIG_INPUT = {
   livePreview: object({
     command: string2().min(1).max(4000).describe("explicit project preview command"),
@@ -10608,7 +10958,7 @@ var ACTION_DEFINITIONS = [
       sourceThreadId: string2().optional().describe("merge: duplicate source Thread id"),
       targetThreadId: string2().optional().describe("merge: canonical destination Thread id"),
       objective: string2().min(1).optional().describe("create/update: Thread objective"),
-      status: _enum(["active", "needs-review", "stuck", "standing", "resolved", "archived"]).optional().describe("transition/update: target Thread status"),
+      status: _enum(LIFECYCLE_TYPES).optional().describe("transition/update: target Thread lifecycle type"),
       reason: string2().optional().describe("merge: concise auditable rationale")
     },
     surfaces: ["mcp"],
@@ -10642,7 +10992,7 @@ var ACTION_DEFINITIONS = [
       topicId: string2().optional().describe("create/move/update: destination Feedback Topic id"),
       title: string2().min(1).optional().describe("create/update: Thread title"),
       objective: string2().min(1).optional().describe("create/update: Thread objective"),
-      status: _enum(["active", "needs-review", "stuck", "standing", "resolved", "archived"]).optional().describe("transition/update: target Thread status"),
+      status: _enum(LIFECYCLE_TYPES).optional().describe("transition/update: target Thread lifecycle type"),
       reason: string2().optional().describe("merge: concise auditable rationale")
     },
     surfaces: ["cli"],
@@ -10764,11 +11114,12 @@ var ACTION_DEFINITIONS = [
   {
     name: "create_topic",
     title: "Create a topic",
-    description: "Create a Topic for a durable sub-area that will hold multiple Threads (check tree first so structure stays scarce); otherwise keep the work in a Thread. Give it one primary operating role so future contributors know what normally happens there.",
+    description: "Create a Topic for a durable sub-area that will hold multiple Threads (check tree first so structure stays scarce); otherwise keep the work in a Thread. Give it one primary operating role, and pick `--workflow` from `space_get.workflows` by summary or omit to inherit the Space default.",
     inputSchema: {
       spaceId: string2().describe("the space to create the topic in, spc_…"),
       title: string2().min(1).describe("the topic's name — an area of work, not a question"),
-      purpose: string2().optional().describe("what this Topic accomplishes and what belongs here, leading with its primary role — Direction, Delivery, Operations, Intake, Coordination, or Learning; name an external or split source of truth or a handoff boundary only when it materially matters")
+      purpose: string2().optional().describe("what this Topic accomplishes and what belongs here, leading with its primary role — Direction, Delivery, Operations, Intake, Coordination, or Learning; name an external or split source of truth or a handoff boundary only when it materially matters"),
+      workflow: string2().optional().describe("catalog id from `space_get.workflows` (pick by summary); must already be attached to this Space")
     },
     surfaces: ["mcp", "cli"],
     toolset: "structure",
@@ -10777,11 +11128,12 @@ var ACTION_DEFINITIONS = [
   {
     name: "topic_update",
     title: "Edit a topic's title or purpose",
-    description: "Edit a Topic's title or purpose facts, patching only supplied fields. Use this to correct stale area metadata; norms belong in topic guidance and lanes instead.",
+    description: "Edit a Topic's title or purpose facts, or select `--workflow` from `space_get.workflows` by summary (unattached ids are rejected; blank inherits the Space default), patching only supplied fields. Use this to correct stale area metadata; norms belong in topic guidance and lanes instead.",
     inputSchema: {
       topicId: string2().describe("the topic to edit, top_…"),
       title: string2().min(1).optional().describe("a new title — an area of work, not a question"),
-      purpose: string2().optional().describe("a new purpose — what this Topic accomplishes and what belongs here, leading with its primary role (Direction, Delivery, Operations, Intake, Coordination, or Learning); name an external or split source of truth or a handoff boundary only when it materially matters")
+      purpose: string2().optional().describe("a new purpose — what this Topic accomplishes and what belongs here, leading with its primary role (Direction, Delivery, Operations, Intake, Coordination, or Learning); name an external or split source of truth or a handoff boundary only when it materially matters"),
+      workflow: string2().nullable().optional().describe("catalog id from `space_get.workflows` (pick by summary); must be attached to the Space; blank or null inherits the Space default")
     },
     surfaces: ["mcp", "cli"],
     toolset: "spaces",
@@ -10852,12 +11204,13 @@ var ACTION_DEFINITIONS = [
   {
     name: "thread_update",
     title: "Edit a thread's title, objective, or topic",
-    description: "Correct a Thread's title or objective, or move it under another Topic of the same Space, patching only supplied fields; use it to make done clear or refile misfiled work instead of archiving and reopening. Status moves stay with `transition_thread`, and the temporary help list with `charter` ways_to_help.",
+    description: "Correct a Thread's title or objective, or move it under another Topic of the same Space, patching only supplied fields; use it to make done clear or refile misfiled work instead of archiving and reopening. Status moves stay with `transition_thread`, column order with `--rank` (not stored yet), and the temporary help list with `charter` ways_to_help.",
     inputSchema: {
       threadId: string2().describe("the thread to edit, thr_…"),
       title: string2().min(1).optional().describe("a new title — the question, outcome, investigation, instance, or standing concern"),
       objective: string2().min(1).optional().describe("a new objective — what this Thread should accomplish; for finite work, what done means"),
-      topicId: string2().optional().describe("move the thread under this topic of the same space, top_…")
+      topicId: string2().optional().describe("move the thread under this topic of the same space, top_…"),
+      rank: string2().optional().describe("LexoRank string for card order inside one lifecycle column; not stored yet (returns 400 until S6)")
     },
     surfaces: ["mcp", "cli"],
     toolset: "loop",
@@ -10888,13 +11241,15 @@ var ACTION_DEFINITIONS = [
       status: _enum([
         "current",
         "all",
+        "backlog",
         "active",
         "needs-review",
         "stuck",
         "standing",
         "resolved",
+        "canceled",
         "archived"
-      ]).optional().describe("default current = active + needs-review + stuck; all includes standing/resolved/archived"),
+      ]).optional().describe("default current = active + needs-review + stuck; all includes backlog/standing/resolved/canceled/archived"),
       limit: number2().int().min(1).max(100).optional().describe("page size (default 20, max 100)"),
       cursor: string2().optional().describe("keyset cursor from a prior page's nextCursor")
     },
@@ -11375,10 +11730,10 @@ var ACTION_DEFINITIONS = [
   {
     name: "transition_thread",
     title: "Move a thread's lifecycle",
-    description: "Move a Thread among active, needs-review, stuck, standing, resolved, or archived with an optional reason; illegal lifecycle jumps are rejected. Resolve finite Decide/Deliver/Investigate/Manage work once its outcome is in, archive retired work (refile misfiled work with `thread_update` instead), use standing only for intentionally open-ended concerns, and curate standout outputs separately.",
+    description: transitionThreadActionDescription(),
     inputSchema: {
       threadId: string2().describe("the thread to move, thr_…"),
-      to: _enum(["active", "needs-review", "stuck", "standing", "resolved", "archived"]).describe("target Thread lifecycle status"),
+      to: string2().min(1).describe("label key, case-insensitive label name, or bare type (`resolved` still works as a type name)"),
       reason: string2().optional().describe("optional one-line why, recorded on the event")
     },
     surfaces: ["mcp", "cli"],
@@ -11949,17 +12304,57 @@ var ACTION_DEFINITIONS = [
   {
     name: "space_update",
     title: "Edit a space's config",
-    description: "Edit a Space's purpose, title, or visibility; org owner/admin or that Space's admin only, and only supplied fields are patched. Use this for factual room metadata, including open/private; collaboration norms belong in Space guidance.",
+    description: "Edit a Space's purpose, title, or visibility; org owner/admin or that Space's admin only, and only supplied fields are patched. Use this for factual room metadata, including open/private, or org-admin `--attach-workflow` / `--detach-workflow` / `--default-workflow`; collaboration norms belong in Space guidance.",
     inputSchema: {
       spaceId: string2().describe("the space, spc_…"),
       purpose: string2().optional().describe("why this boundary exists and what it is around — commonly a Product/System, Program/Function, Portfolio/Network, or Practice/Community — plus its dominant work modes (Build, Operate, Coordinate, Discuss, Share) when that helps; plain prose, not metadata syntax"),
       title: string2().optional().describe("a new title for the space"),
-      visibility: _enum(["open", "private"]).optional().describe("open or private (invite-only)")
+      visibility: _enum(["open", "private"]).optional().describe("open or private (invite-only)"),
+      attachWorkflow: string2().optional().describe("org-admin: attach this catalog workflow id to the Space allowlist"),
+      detachWorkflow: string2().optional().describe("org-admin: detach this catalog workflow; rejected if a Topic still selects it"),
+      defaultWorkflow: string2().optional().describe("org-admin: name which attached workflow new Topics inherit")
     },
     surfaces: ["mcp", "cli"],
     toolset: "spaces",
     run: forward("space.update")
   },
+  {
+    name: "workflow_create",
+    title: "Create a catalog workflow",
+    description: "Copy a built-in into the org catalog (`--from-builtin`) or author name, summary, and labels. Org-admin; copy-then-edit — the built-in constant is never mutated in place.",
+    inputSchema: {
+      fromBuiltin: _enum(BUILTIN_WORKFLOW_IDS).optional().describe("copy this built-in template into the catalog"),
+      name: string2().min(1).optional().describe("catalog name; defaults from the built-in"),
+      summary: string2().max(WORKFLOW_SUMMARY_MAX).optional().describe("required unless `--from-builtin`; how an agent picks this workflow"),
+      labels: array(WORKFLOW_LABEL_INPUT).optional().describe("required unless `--from-builtin`; ordered columns")
+    },
+    surfaces: ["mcp", "cli"],
+    toolset: "structure",
+    run: forward("workflow.create")
+  },
+  {
+    name: "workflow_update",
+    title: "Edit a catalog workflow",
+    description: "Replace a catalog workflow's summary and labels (optional name); org-admin. A switch that would retype a live thread is rejected with the blocking threads enumerated.",
+    inputSchema: {
+      workflowId: string2().describe("the catalog workflow, wfl_…"),
+      name: string2().min(1).optional().describe("a new catalog name"),
+      summary: string2().min(1).max(WORKFLOW_SUMMARY_MAX).describe("required summary — how an agent picks this workflow"),
+      labels: array(WORKFLOW_LABEL_INPUT).min(1).describe("the full replacement label set")
+    },
+    surfaces: ["mcp", "cli"],
+    toolset: "structure",
+    run: forward("workflow.update")
+  },
+  {
+    name: "workflow_list",
+    title: "List org workflows",
+    description: "List built-in templates and this org's catalog copies, each with its required summary. Org-admin; members read the Space allowlist on `space_get`.",
+    inputSchema: {},
+    surfaces: ["mcp", "cli"],
+    toolset: "structure",
+    run: forward("workflow.list")
+  },
   {
     name: "agent_register",
     title: "Register an agent",
@@ -12054,7 +12449,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "space_get",
     title: "Read a space",
-    description: "Read a Space's durable context—purpose, guidance, contribution lanes, Topics—and a paged member roster with roles, capabilities, and charters (default 50; `total` is the full roster size). Continue with `cursor`, or use `all=true` / `--all` only when you need every member; it cannot modify membership or guidance.",
+    description: "Read a Space's durable context—purpose, guidance, contribution lanes, attached workflows with summaries, Topics—and a paged member roster with roles, capabilities, and charters (default 50; `total` is the full roster size). Continue with `cursor`, or use `all=true` / `--all` only when you need every member; it cannot modify membership or guidance.",
     inputSchema: {
       spaceId: string2().min(1).describe("the space id"),
       ...PAGINATION_INPUT
@@ -12066,7 +12461,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "topic_get",
     title: "Read a topic",
-    description: "Read a Topic's durable context, guidance, open requests, promoted artifacts, and a paged Thread roster (default 50; `total` is the full roster size). Continue with `cursor`, or use `all=true` / `--all` only for intentional complete enumeration; for a concrete question in a large Topic, prefer Topic-scoped `recall`.",
+    description: "Read a Topic's durable context, guidance, selected workflow summary, open requests, promoted artifacts, and a paged Thread roster (default 50; `total` is the full roster size). Continue with `cursor`, or use `all=true` / `--all` only for intentional complete enumeration; for a concrete question in a large Topic, prefer Topic-scoped `recall`.",
     inputSchema: {
       topicId: string2().min(1).describe("the topic id"),
       ...PAGINATION_INPUT
@@ -12451,7 +12846,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "tldraw_status",
     title: "Check tldraw board status",
-    description: "Read compact operational room health and separately reported script sessions for a tldraw board; board geometry/document content stays on tldraw_observe and tldraw_get. Session reports remain per-session observations and are never collapsed into global success.",
+    description: "Read compact operational room health, current latest-preview freshness, and separately reported script sessions for a tldraw board without rendering an image; board geometry/document content stays on tldraw_observe and tldraw_get. Session reports remain per-session observations and are never collapsed into global success.",
     inputSchema: { artifactId: string2().describe("the tldraw Artifact, art_…") },
     surfaces: ["mcp", "cli"],
     toolset: "artifacts",
@@ -12509,12 +12904,13 @@ var ACTION_DEFINITIONS = [
   {
     name: "tldraw_observe",
     title: "Observe a tldraw board",
-    description: `Capture a fresh bounded tldraw scene, lint result, document clock and digest, plus a PNG attachment for visual review; observe before editing and after context compaction to reacquire authoritative shape IDs/geometry. First use: read the tldraw guide at ${AGENT_GUIDE_URLS.tldraw}.`,
+    description: `Read a fresh bounded tldraw scene, lint result, document clock/digest, and latest-preview freshness; preview defaults to metadata-only with no screenshot/storage write, while preview=ensure reuses a same-digest preview or explicitly renders the canonical latest PNG when visual composition matters, and lint remains advisory rather than ownership/intent evidence. First use: read the tldraw guide at ${AGENT_GUIDE_URLS.tldraw}.`,
     inputSchema: {
       artifactId: string2().describe("the tldraw Artifact, art_…"),
       pageId: string2().min(1).max(200).optional().describe("optional page to observe"),
       viewportWidth: number2().int().min(320).max(1920).optional(),
-      viewportHeight: number2().int().min(240).max(1080).optional()
+      viewportHeight: number2().int().min(240).max(1080).optional(),
+      preview: _enum(["metadata", "ensure"]).optional().describe("preview behavior; defaults to metadata, while ensure explicitly refreshes only when stale/missing")
     },
     surfaces: ["mcp", "cli"],
     toolset: "artifacts",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.22.40",
+  "version": "0.23.0",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",