@lambdacurry/arbor 0.23.37 → 0.23.39

package/dist/arbor.js

@@ -2,7 +2,7 @@
 // package.json
 var package_default = {
   name: "@lambdacurry/arbor",
-  version: "0.23.37",
+  version: "0.23.39",
   description: "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   keywords: [
     "agents",
@@ -7384,6 +7384,9 @@ var artifactVersions = sqliteTable("artifact_versions", {
   source: text("source").notNull(),
   sourceAttachmentId: text("source_attachment_id").references(() => attachments.id),
   sourceSha256: text("source_sha256"),
+  gitCommitSha: text("git_commit_sha"),
+  gitSourceSha256: text("git_source_sha256"),
+  gitRepositoryName: text("git_repository_name"),
   tldrawDocumentClock: integer2("tldraw_document_clock"),
   editorProfileId: text("editor_profile_id").notNull().references(() => profiles.id),
   executionContextId: text("execution_context_id").references(() => executionContexts.id),
@@ -7392,6 +7395,29 @@ var artifactVersions = sqliteTable("artifact_versions", {
 }, (t) => ({
   artifactVersionUq: uniqueIndex("artifact_versions_artifact_version_uq").on(t.artifactId, t.version)
 }));
+var artifactGitWriteIntents = sqliteTable("artifact_git_write_intents", {
+  artifactId: text("artifact_id").notNull(),
+  requestKey: text("request_key").notNull(),
+  fingerprint: text("fingerprint").notNull(),
+  baseVersion: integer2("base_version").notNull(),
+  expectedParentSha: text("expected_parent_sha"),
+  targetVersion: integer2("target_version").notNull(),
+  targetVersionId: text("target_version_id").notNull(),
+  targetSourceSha256: text("target_source_sha256").notNull(),
+  state: text("state").$type().notNull().default("pending"),
+  gitCommitSha: text("git_commit_sha"),
+  gitRepositoryName: text("git_repository_name"),
+  createdAt: ts("created_at").notNull(),
+  finalizedAt: ts("finalized_at"),
+  requestJson: text("request_json")
+}, (t) => ({
+  pk: primaryKey({ columns: [t.artifactId, t.requestKey] }),
+  pendingUq: uniqueIndex("artifact_git_write_intents_one_pending_uq").on(t.artifactId).where(sql`${t.state} = 'pending'`),
+  targetVersionIdx: index("artifact_git_write_intents_artifact_target_idx").on(t.artifactId, t.targetVersion),
+  stateCheck: check("artifact_git_write_intents_state_check", sql`(${t.state} = 'pending' AND ${t.finalizedAt} IS NULL)
+        OR (${t.state} = 'finalized' AND ${t.gitCommitSha} IS NOT NULL AND ${t.finalizedAt} IS NOT NULL)`),
+  versionCheck: check("artifact_git_write_intents_version_check", sql`${t.baseVersion} >= 0 AND ${t.targetVersion} > 0`)
+}));
 var artifactTldrawBoards = sqliteTable("artifact_tldraw_boards", {
   artifactId: text("artifact_id").primaryKey().references(() => artifacts.id, { onDelete: "cascade" }),
   roomGeneration: integer2("room_generation").notNull().default(1),
@@ -8245,6 +8271,12 @@ var SPACE_ARTIFACT_STATUSES = [
   "archived"
 ];
 var artifactUpdatedAt = sql`coalesce((select max(${events.createdAt}) from ${events} where ${events.objectType} = 'artifact' and ${events.objectId} = ${artifacts.id}), ${artifacts.createdAt})`;
+// ../core/src/ops/artifact-git-intent.ts
+var RETRYABLE_REPAIR = new Set([
+  "pending_push_unconfirmed",
+  "remote_unavailable",
+  "finalize_failed"
+]);
 // ../core/src/ops/request.ts
 var REQUEST_TTL_MS = 14 * 24 * 60 * 60 * 1000;
 
@@ -12414,7 +12446,8 @@ var ACTION_DEFINITIONS = [
       baseVersion: number2().describe("the version you READ (get_artifact) — stale is rejected"),
       source: string2().optional().describe("full replace: the complete new content"),
       patches: array(object({ old: string2(), new: string2() })).optional().describe("exact-match hunks applied in order; each old must match exactly once"),
-      note: string2().optional().describe("one-line summary of what changed")
+      note: string2().optional().describe("one-line summary of what changed"),
+      idempotencyKey: string2().min(1).max(200).optional().describe("stable retry key for this logical edit; the CLI derives one from the artifact, base version, and content when omitted")
     },
     surfaces: ["cli"],
     toolset: "artifacts",
@@ -13394,7 +13427,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "artifact",
     title: "Create or edit an Artifact",
-    description: "Create or edit a durable versioned Artifact, bind its executable Thread Live Preview, set a Computer-file asleep/share snapshot, or promote a Thread attachment into a separate file Artifact from a source Contribution. To reference an exported report within an existing baseline Artifact, use the Attachment's durable downloadUrl instead of promoting it into that artifactId. For a computer:// .tldr snapshot mint: computer_export the exact locator path and same-Thread PNG, then use set_snapshot. Board save and TLP do not mint snapshots. set_snapshot does not wake Computer or change the locator; read artifact_get before changing it, while lifecycle/removal stay in artifact_transition and artifact_delete.",
+    description: "Create/edit an Artifact, bind a Thread Live Preview, set a Computer snapshot, or promote a Thread attachment to a file Artifact. Git writes: stable key; same-key retry only after unknown outcome. To reference an exported report within an existing baseline Artifact, use the Attachment's durable downloadUrl instead of promoting it into that artifactId. For a computer:// .tldr snapshot mint: computer_export the exact locator path and same-Thread PNG, then use set_snapshot. Board save and TLP do not mint snapshots. set_snapshot does not wake Computer or change the locator; read artifact_get before changing it, while lifecycle/removal stay in artifact_transition and artifact_delete.",
     inputSchema: {
       verb: _enum(["create", "edit", "set_live_preview", "set_snapshot", "promote_attachment"]).describe("which artifact move"),
       title: string2().optional().describe("create: the artifact's title"),
@@ -13412,6 +13445,7 @@ var ACTION_DEFINITIONS = [
       baseVersion: number2().optional().describe("edit: the version you READ (from get/create) — stale base is rejected with the current source"),
       patches: array(object({ old: string2(), new: string2() })).optional().describe("edit: exact-match hunks applied in order, atomically; each old must match exactly once"),
       note: string2().optional().describe("edit: one-line summary of what changed"),
+      idempotencyKey: string2().min(1).max(200).optional().describe("create/edit for Git-backed text: stable key for one logical write; reuse unchanged only to recover an unknown outcome, never to start a new write"),
       sourceAttachmentId: string2().optional().describe("set_snapshot: computer_export of the exact computer:// locator path; MIME application/vnd.tldraw+json, computerPath stamped and matching defaultCwd + locator"),
       previewAttachmentId: string2().optional().describe("set_snapshot: same-Thread computer_export image/png Attachment, used as the asleep face preview"),
       attachmentId: string2().optional().describe("promote_attachment: the upload, att_…"),
@@ -14177,7 +14211,7 @@ function retentionAction(action) {
   if (action.name === "artifact") {
     return {
       ...action,
-      description: "Create/edit a durable versioned Artifact with bounded full|checkpoint retention or manage its Live Preview/snapshot/attachment surface; promote_attachment creates a separate file Artifact from a source Contribution, while exported reports in an existing baseline Artifact use the Attachment's durable downloadUrl instead of promotion into that artifactId. Content edits return artifactVersionId; byte-identical edits reuse current version, while policy changes/checkpoints preserve content version.",
+      description: "Create/edit a durable Artifact with full|checkpoint retention or manage Live Preview/snapshot/attachments. Git text writes require a stable idempotencyKey; retry the same key only after an unknown outcome; promote_attachment creates a separate file Artifact from a source Contribution; exported reports use the Attachment's durable downloadUrl; content edits return artifactVersionId; identical edits reuse the current version; policy/checkpoint changes do not mint content versions.",
       inputSchema: {
         ...action.inputSchema,
         historyPolicy: historyPolicySchema,
@@ -15220,6 +15254,159 @@ function buildInput(inputSchema, flags, command) {
 }
 
 // src/commands.ts
+var SHA256_K = [
+  1116352408,
+  1899447441,
+  3049323471,
+  3921009573,
+  961987163,
+  1508970993,
+  2453635748,
+  2870763221,
+  3624381080,
+  310598401,
+  607225278,
+  1426881987,
+  1925078388,
+  2162078206,
+  2614888103,
+  3248222580,
+  3835390401,
+  4022224774,
+  264347078,
+  604807628,
+  770255983,
+  1249150122,
+  1555081692,
+  1996064986,
+  2554220882,
+  2821834349,
+  2952996808,
+  3210313671,
+  3336571891,
+  3584528711,
+  113926993,
+  338241895,
+  666307205,
+  773529912,
+  1294757372,
+  1396182291,
+  1695183700,
+  1986661051,
+  2177026350,
+  2456956037,
+  2730485921,
+  2820302411,
+  3259730800,
+  3345764771,
+  3516065817,
+  3600352804,
+  4094571909,
+  275423344,
+  430227734,
+  506948616,
+  659060556,
+  883997877,
+  958139571,
+  1322822218,
+  1537002063,
+  1747873779,
+  1955562222,
+  2024104815,
+  2227730452,
+  2361852424,
+  2428436474,
+  2756734187,
+  3204031479,
+  3329325298
+];
+function rotateRight(value, bits) {
+  return value >>> bits | value << 32 - bits;
+}
+function sha256Hex(value) {
+  const bytes = new TextEncoder().encode(value);
+  const bitLength = bytes.length * 8;
+  const paddedLength = bytes.length + 9 + 63 >> 6 << 6;
+  const padded = new Uint8Array(paddedLength);
+  padded.set(bytes);
+  padded[bytes.length] = 128;
+  const highLength = Math.floor(bitLength / 4294967296);
+  const lowLength = bitLength >>> 0;
+  for (let i = 0;i < 4; i++) {
+    padded[paddedLength - 8 + i] = highLength >>> 24 - i * 8;
+    padded[paddedLength - 4 + i] = lowLength >>> 24 - i * 8;
+  }
+  const hash = [
+    1779033703,
+    3144134277,
+    1013904242,
+    2773480762,
+    1359893119,
+    2600822924,
+    528734635,
+    1541459225
+  ];
+  const words = new Uint32Array(64);
+  for (let offset = 0;offset < padded.length; offset += 64) {
+    for (let i = 0;i < 16; i++) {
+      const index = offset + i * 4;
+      words[i] = padded[index] << 24 | padded[index + 1] << 16 | padded[index + 2] << 8 | padded[index + 3];
+    }
+    for (let i = 16;i < 64; i++) {
+      const x = words[i - 15];
+      const y = words[i - 2];
+      const sigma0 = rotateRight(x, 7) ^ rotateRight(x, 18) ^ x >>> 3;
+      const sigma1 = rotateRight(y, 17) ^ rotateRight(y, 19) ^ y >>> 10;
+      words[i] = words[i - 16] + sigma0 + words[i - 7] + sigma1 >>> 0;
+    }
+    let [a, b, c, d, e, f, g, h] = hash;
+    for (let i = 0;i < 64; i++) {
+      const sigma1 = rotateRight(e, 6) ^ rotateRight(e, 11) ^ rotateRight(e, 25);
+      const choice = e & f ^ ~e & g;
+      const temp1 = h + sigma1 + choice + SHA256_K[i] + words[i] >>> 0;
+      const sigma0 = rotateRight(a, 2) ^ rotateRight(a, 13) ^ rotateRight(a, 22);
+      const majority = a & b ^ a & c ^ b & c;
+      const temp2 = sigma0 + majority >>> 0;
+      h = g;
+      g = f;
+      f = e;
+      e = d + temp1 >>> 0;
+      d = c;
+      c = b;
+      b = a;
+      a = temp1 + temp2 >>> 0;
+    }
+    hash[0] = hash[0] + a >>> 0;
+    hash[1] = hash[1] + b >>> 0;
+    hash[2] = hash[2] + c >>> 0;
+    hash[3] = hash[3] + d >>> 0;
+    hash[4] = hash[4] + e >>> 0;
+    hash[5] = hash[5] + f >>> 0;
+    hash[6] = hash[6] + g >>> 0;
+    hash[7] = hash[7] + h >>> 0;
+  }
+  return hash.map((word) => word.toString(16).padStart(8, "0")).join("");
+}
+function artifactEditIdempotencyKey(input) {
+  const artifactId = input.artifactId;
+  const baseVersion = input.baseVersion;
+  const hasSource = typeof input.source === "string";
+  const hasPatches = Array.isArray(input.patches);
+  if (typeof artifactId !== "string" || !Number.isInteger(baseVersion) || !hasSource && !hasPatches) {
+    return;
+  }
+  const version = baseVersion;
+  const payload = JSON.stringify({
+    artifactId,
+    baseVersion: version,
+    source: hasSource ? input.source : undefined,
+    patches: hasPatches ? input.patches : undefined,
+    note: typeof input.note === "string" ? input.note : undefined,
+    retainSource: typeof input.retainSource === "boolean" ? input.retainSource : undefined
+  });
+  const digest = sha256Hex(payload);
+  return `cli-artifact-edit:${artifactId}:${version}:${digest}`;
+}
 var COMMAND_WORD_OVERRIDES = {
   contribute_arbor_feedback: "feedback",
   feedback_recall: "feedback find",
@@ -15502,6 +15689,11 @@ async function runObjectVerb(positionals, flags, ctx) {
     delete inputFlags.json;
   }
   const input = buildInput(action.inputSchema, inputFlags, commandWords(action));
+  if (action.name === "edit_artifact" && input.idempotencyKey === undefined) {
+    const idempotencyKey = artifactEditIdempotencyKey(input);
+    if (idempotencyKey !== undefined)
+      input.idempotencyKey = idempotencyKey;
+  }
   if (action.name === "computer_exec" && flags["no-wait"] !== undefined && input.waitForTerminalMs !== undefined) {
     throw new UsageError("--no-wait and --wait-for-terminal-ms are mutually exclusive", {
       reason: "validation.invalid_value",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.23.37",
+  "version": "0.23.39",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",