@lambdacurry/arbor 0.23.31 → 0.23.33

package/dist/arbor.js

@@ -2,7 +2,7 @@
 // package.json
 var package_default = {
   name: "@lambdacurry/arbor",
-  version: "0.23.31",
+  version: "0.23.33",
   description: "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   keywords: [
     "agents",
@@ -9316,6 +9316,14 @@ var MCP_OUTPUT_SCHEMAS = {
       durable: number2().int().min(0).nullable()
     }).nullable().optional()
   }),
+  computer_audit_access: looseObject({
+    binding: jsonObject,
+    access: object({
+      token: string2(),
+      expiresAt: timestamp,
+      operations: array(literal("computer:audit-read"))
+    })
+  }),
   computer_inventory: looseObject({
     computers: array(jsonObject),
     nextCursor: string2().nullable()
@@ -10640,6 +10648,7 @@ var MCP_TOOL_ANNOTATIONS = {
   set_thread_computer: destructiveIdempotent,
   get_computer: readOnly,
   computer_inventory: readOnly,
+  computer_audit_access: additive,
   transition_thread: additive,
   request: additive,
   respond: additive,
@@ -11962,8 +11971,8 @@ var ACTION_DEFINITIONS = [
     title: "List runs",
     description: "List active or recent Runs on the Computer that owns runId when deciding whether to resume existing work or start another unit. Returns each Run's mode, execution placement, workspace identity, and lifecycle status.",
     inputSchema: {
-      runId: string2().optional().describe("any Run on the Computer to list, run_…"),
-      computerSessionId: string2().optional().describe("legacy alternative to runId: a computerSessionId on that Computer, cms_…"),
+      runId: string2().optional().describe("any Run on the Computer to list, run_…; required unless computerSessionId is supplied"),
+      computerSessionId: string2().optional().describe("legacy alternative to runId: a computerSessionId on that Computer, cms_…; required unless runId is supplied"),
       status: _enum(["active", "finished", "failed", "cancelled"]).optional().describe("filter to one lifecycle status"),
       limit: number2().int().min(1).max(100).optional().describe("rows to return (default 20)")
     },
@@ -12235,6 +12244,18 @@ var ACTION_DEFINITIONS = [
     toolset: "loop",
     run: forward("computer.get")
   },
+  {
+    name: "computer_audit_access",
+    title: "Issue a Computer audit grant",
+    description: "Issue a five-minute read-only retirement-audit grant for an exact existing Computer and attachment receipt. Organization owner/admin only, including archived Spaces. Role is checked at issuance only: an already-issued grant remains valid for up to 300 seconds after owner/admin role revocation. Does not attach, restore, or contact a provider. Keep the returned capability private and consume it immediately.",
+    inputSchema: {
+      computerId: string2().describe("the exact Computer, cmp_…"),
+      sessionId: string2().describe("an existing attachment receipt for that Computer, cms_…")
+    },
+    surfaces: ["cli"],
+    toolset: "admin",
+    run: Object.assign((ex, input) => ex.call("computer.access", { ...input, operations: ["computer:audit-read"] }), { operation: "computer.access" })
+  },
   {
     name: "computer_inventory",
     title: "Inventory organization Computers",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.23.31",
+  "version": "0.23.33",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",