@lambdacurry/arbor 0.23.7 → 0.23.9

package/dist/arbor.js

@@ -2,7 +2,7 @@
 // package.json
 var package_default = {
   name: "@lambdacurry/arbor",
-  version: "0.23.7",
+  version: "0.23.9",
   description: "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   keywords: [
     "agents",
@@ -8438,6 +8438,19 @@ var computerRunFinishRequest = looseObject({
   providerGeneration: number2().int().nonnegative().nullable(),
   releasedSnapshotId: id.nullable()
 });
+var computerExecOutput = looseObject({
+  stdout: string2().optional(),
+  stderr: string2().optional(),
+  exitCode: number2().optional(),
+  processId: string2().optional(),
+  status: string2().optional(),
+  timedOut: boolean2().optional(),
+  truncated: boolean2().optional().describe("true when returned stdout/stderr is partial and more output remains"),
+  nextCursor: string2().optional().describe("opaque cursor for continuing partial output with computer_process_read"),
+  cwd: string2().optional(),
+  execution: _enum(["completed", "running"]).optional(),
+  nextAction: literal("computer_process_read").optional()
+});
 var computerRunReceipt2 = looseObject({
   runId: id,
   threadId: id,
@@ -9768,19 +9781,8 @@ var MCP_OUTPUT_SCHEMAS = {
     failureCode: string2().nullable(),
     reason: string2()
   }),
-  computer_exec: looseObject({
-    stdout: string2().optional(),
-    stderr: string2().optional(),
-    exitCode: number2().optional(),
-    processId: string2().optional(),
-    status: string2().optional(),
-    timedOut: boolean2().optional(),
-    truncated: boolean2().optional().describe("true when returned stdout/stderr is partial and more output remains"),
-    nextCursor: string2().optional().describe("opaque cursor for continuing partial output with computer_process_read"),
-    cwd: string2().optional(),
-    execution: _enum(["completed", "running"]).optional(),
-    nextAction: literal("computer_process_read").optional()
-  }),
+  computer_exec: computerExecOutput,
+  computer_run_setup: computerExecOutput,
   computer_process_read: looseObject({
     processId: string2(),
     status: string2(),
@@ -10308,6 +10310,12 @@ var openWorld = {
   idempotentHint: false,
   openWorldHint: true
 };
+var destructiveIdempotentOpenWorld = {
+  readOnlyHint: false,
+  destructiveHint: true,
+  idempotentHint: true,
+  openWorldHint: true
+};
 var destructiveOpenWorld = {
   readOnlyHint: false,
   destructiveHint: true,
@@ -10429,6 +10437,7 @@ var MCP_TOOL_ANNOTATIONS = {
   computer_run_receipt: readOnly,
   computer_runs: readOnly,
   computer_exec: destructiveOpenWorld,
+  computer_run_setup: destructiveIdempotentOpenWorld,
   computer_process_read: readOnly,
   computer_process_terminate: destructiveOpenWorld,
   computer_status: readOnly,
@@ -10694,6 +10703,8 @@ ${ARBOR_FEEDBACK_GUIDANCE}
 
 Arbor's MCP is the collaboration and durable-knowledge surface. Configure, authorize, open, run, verify, package, deploy, and operate software through the separate Arbor Computer MCP at \`/computer/mcp\`; first-class Organization/Profile Secret administration stays here in Arbor, while App runtime configuration on Arbor Computer references those Secret ids without exposing material.
 
+HUMAN-FACING LINKS — When communicating an Arbor object to a human, prefer the human-facing clickable URL Arbor returned. Keep raw IDs primarily for tool calls, debugging, exact references, and agent-to-agent handoffs. Never invent or manually construct Arbor URLs.
+
 1. RECALL FIRST — but Arbor is MEMORY, NOT TRUTH. Run \`recall\` before re-deriving or restating anything — it may already be settled; cite prior work ([label](#con_…)) and build on it. Phrase the query in PROBLEM-LANGUAGE (a natural-language question — "how do agents handle X"), not extracted keywords; it ranks better. Empty recall is itself worth noting. In a large Space, don't search the whole org by habit: use \`tree\` to choose the room, then scope \`recall\` with \`space\`/\`topic\`/\`thread\` before deeper reads. External tree reads page four roots; follow \`nextCursor\`, use \`all=true\` only for deliberate complete enumeration, and scope \`depth=threads\` to one Space or Topic. On that map, \`activeThreadCount\` is the current working set (active/stuck/needs-review/standing), while \`status\` is the Topic attention rollup: \`stuck\` means any stuck Thread; \`attention\` means needs-review or an open request; \`healthy\` means neither. A contribution records what was true when it was WRITTEN, so before you assert the CURRENT state of anything outside Arbor — a PR, a build, a deploy, a config — check the live source; another contribution is not evidence of the present, and neither is a local copy of something whose home is elsewhere. And when you DO check, post the RECEIPT with the claim (AD-209): attach the actual output/screenshot (an attached file becomes a durable artifact carrying who-captured-it and when, citable as #art_… forever) or name exactly what you checked and when ("CI run #841, green, checked just now") — a "verified" with no receipt is a claim the next reader must take on faith or re-derive. When a receipted claim has AGED and matters again, don't re-trust it and don't silently re-argue it: \`request\` a re-check ("re-run this check"), and whoever runs it answers through the request with fresh evidence. WHY: a room where everyone re-derives is just a chat log — but a room that mistakes its own memory for the world confidently reports blockers that no longer exist, and this week's failures were exactly that: stale claims re-asserted as current because nothing distinguished a receipted observation from confident prose. And orient to the ROOM the way you orient to the record: \`tree\` is the map AND the way in — it carries each room's \`lanesForYou\`, the durable contribution lanes that match what you said you do; follow one into \`space_get\`/\`topic_get\`, where the room's purpose, guidance, goals, and full lane list live. A lane is an invitation, never an obligation: what you OWE is only ever in \`inbox\`.
 2. CONTRIBUTE typed points — but ADD ONLY WHAT'S ADDITIVE (AD-205). Ask what the most additive move is, not whether to say something: if your reaction to a point already on the record fits in one line — agree OR disagree — STAMP it (vouch, or push back with a one-line why), don't restate it; if you'd only echo consensus, reviewing IS the contribution and staying out is fine. When you DO contribute, it's ONE point, with the type that names your move (proposal / critique / question / evidence / risk / correction / assertion / decision). Markdown welcome; put references IN your prose (a URL or [label](#con_…) becomes a navigable reference). Prose refs are CITATIONS — they never move your contribution in the thread, so cite freely; to REPLY under a specific contribution, pass links: [{rel: 'inReplyTo', targetId}] (AD-196). WHY: a thread where every agent restates the consensus is noise — the record is strongest when each point appears ONCE and gets vouched (or contested) with a stamp, not re-said; and one typed point is reviewable on its own, so a synthesis citing five points should read as the most top-level thing in the thread, not as a reply to the first one it mentions.
 3. ANSWER through requests. When \`inbox\` or a thread shows an open request you can meet, answer THROUGH it — \`respond\` to it, or \`stamp\` the contribution a review request is about — so it completes and the requester is notified. WHY: a plain reply that merely happens to answer leaves their request hanging (the most common failure). Requests are what you OWE; the Threads you are RESPONSIBLE for moving are \`thread_list\` (assign yourself or a teammate with \`thread_assign\` when responsibility is real, not to delegate one action — that is a request).
@@ -11519,7 +11530,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_run_receipt",
     title: "Read a run receipt",
-    description: "Read with exactly one of runId or runStartId: observe pending admission, finish continuation, Run-owned operation/activity state, and providerLifecycle instead of parent computer_status. Reads never drive admission or finish; the existing lifecycle owner continues independently.",
+    description: "Read with exactly one of runId or runStartId: observe pending admission, finish continuation, Run-owned operation/activity state, and providerLifecycle instead of parent computer_status. Reads never drive admission or finish; the existing lifecycle owner continues independently. setupReadiness says whether declared setup still matches this workspace; computer_run_setup is what makes it ready.",
     inputSchema: {
       runId: string2().optional().describe("the Run to read, run_…; provide exactly one of runId or runStartId"),
       runStartId: string2().optional().describe("the pending or linked RunStart to read, rsr_…; alternative to runId")
@@ -11528,6 +11539,20 @@ var ACTION_DEFINITIONS = [
     toolset: "loop",
     run: forward("computer_runtime.run_receipt")
   },
+  {
+    name: "computer_run_setup",
+    title: "Run the declared setup",
+    description: "Run this Run's own declared project setup once, explicitly — Arbor resolves the authoritative recipe internally, so you neither supply nor see the command, and reusing the same idempotencyKey recovers a lost response instead of installing twice. Nothing runs it for you: a successful run is what makes setupReadiness ready, and it is refused unless the Run is isolated and a setup is declared.",
+    inputSchema: {
+      runId: string2().describe("the Run whose declared setup should run, run_…"),
+      idempotencyKey: string2().describe("stable key for this ONE logical setup request; reuse it unchanged for retries"),
+      background: boolean2().optional().describe("return a processId immediately instead of waiting; read it with computer_process_read"),
+      timeout: number2().int().optional().describe("process kill deadline in milliseconds")
+    },
+    surfaces: ["computer-mcp", "computer-cli"],
+    toolset: "loop",
+    run: forward("computer_runtime.run_setup")
+  },
   {
     name: "computer_runs",
     title: "List runs",
@@ -12936,7 +12961,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "tldraw_get",
     title: "Read a tldraw board",
-    description: "Read the current or one historical tldraw board version, its immutable source references, version list, edit access, and document-script state. Historical versions are read-only.",
+    description: "Read current/historical tldraw versions: immutable source refs, versions, edit access, doc/script state; historical read-only; `liveHref` opens the live board; `url` opens the Arbor Artifact details/history page",
     inputSchema: {
       artifactId: string2().describe("the tldraw Artifact, art_…"),
       version: number2().int().min(1).optional().describe("optional historical version number")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.23.7",
+  "version": "0.23.9",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",