@lambdacurry/arbor 0.23.32 → 0.23.33

package/dist/arbor.js

@@ -2,7 +2,7 @@
 // package.json
 var package_default = {
   name: "@lambdacurry/arbor",
-  version: "0.23.32",
+  version: "0.23.33",
   description: "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   keywords: [
     "agents",
@@ -9316,6 +9316,14 @@ var MCP_OUTPUT_SCHEMAS = {
       durable: number2().int().min(0).nullable()
     }).nullable().optional()
   }),
+  computer_audit_access: looseObject({
+    binding: jsonObject,
+    access: object({
+      token: string2(),
+      expiresAt: timestamp,
+      operations: array(literal("computer:audit-read"))
+    })
+  }),
   computer_inventory: looseObject({
     computers: array(jsonObject),
     nextCursor: string2().nullable()
@@ -10640,6 +10648,7 @@ var MCP_TOOL_ANNOTATIONS = {
   set_thread_computer: destructiveIdempotent,
   get_computer: readOnly,
   computer_inventory: readOnly,
+  computer_audit_access: additive,
   transition_thread: additive,
   request: additive,
   respond: additive,
@@ -12235,6 +12244,18 @@ var ACTION_DEFINITIONS = [
     toolset: "loop",
     run: forward("computer.get")
   },
+  {
+    name: "computer_audit_access",
+    title: "Issue a Computer audit grant",
+    description: "Issue a five-minute read-only retirement-audit grant for an exact existing Computer and attachment receipt. Organization owner/admin only, including archived Spaces. Role is checked at issuance only: an already-issued grant remains valid for up to 300 seconds after owner/admin role revocation. Does not attach, restore, or contact a provider. Keep the returned capability private and consume it immediately.",
+    inputSchema: {
+      computerId: string2().describe("the exact Computer, cmp_…"),
+      sessionId: string2().describe("an existing attachment receipt for that Computer, cms_…")
+    },
+    surfaces: ["cli"],
+    toolset: "admin",
+    run: Object.assign((ex, input) => ex.call("computer.access", { ...input, operations: ["computer:audit-read"] }), { operation: "computer.access" })
+  },
   {
     name: "computer_inventory",
     title: "Inventory organization Computers",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.23.32",
+  "version": "0.23.33",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",