@lambdacurry/arbor 0.24.17 → 0.24.19

package/dist/arbor.js

@@ -9496,6 +9496,24 @@ var adminCloseOutputSchema = strictObject({
   reasonCode: literal("run.admin_closed_abandoned"),
   actorProfileId: string2()
 });
+var adminForceStopOutputSchema = strictObject({
+  mode: literal("admin_force"),
+  outcome: _enum(["stopped", "absent"]),
+  computerId: string2(),
+  computerSessionId: string2(),
+  reason: string2(),
+  generation: strictObject({
+    providerGeneration: number2().int().nonnegative(),
+    workspaceGeneration: string2().nullable()
+  }),
+  settledRunIds: array(string2()),
+  skippedRuns: array(strictObject({ runId: string2(), reason: string2() })),
+  stoppedAt: string2().optional(),
+  terminatedProcessIds: array(string2()).optional(),
+  recoveryRebased: boolean2().optional(),
+  replayed: boolean2().optional(),
+  note: string2().optional()
+});
 function buildOutputSchemas() {
   const id = string2();
   const timestamp = string2();
@@ -11578,6 +11596,8 @@ function prepare(action) {
   templates.set(action, result);
   return result;
 }
+var variantOnly = new WeakMap;
+var variantOnlyServed = new WeakSet;
 function projectActionVariants(action, tags) {
   action = origins.get(action) ?? action;
   if (!action.privilegedVariants?.length || tags.length === 0)
@@ -12069,6 +12089,7 @@ var MCP_TOOL_ANNOTATIONS = {
   computer_run_promote: idempotent,
   computer_repo_work_status: readOnly,
   computer_run_finish: destructive,
+  computer_stop: destructive,
   computer_run_receipt: readOnly,
   computer_run_retention: readOnly,
   computer_run_keep: idempotent,
@@ -13738,10 +13759,32 @@ var ACTION_DEFINITIONS = [
     description: "Deprecated by AD-306: finishing the last active shared Run with computer_run_finish performs the final checkpoint and stops the parent. Still checkpoints and stops the parent for a shared write Run (runId) or a legacy computerSessionId, refusing teardown when durability fails or a background process is running.",
     inputSchema: {
       runId: string2().optional().describe("an active shared write Run whose parent to checkpoint and stop, run_…"),
-      computerSessionId: string2().optional().describe("legacy alternative to runId: a computerSessionId on that Computer, cms_…")
+      computerSessionId: string2().optional().describe("legacy alternative to runId: a computerSessionId on that Computer, cms_…"),
+      mode: literal("save").optional().describe("save stop (checkpoint, then stop); omission preserves existing behavior")
     },
-    surfaces: ["computer-cli"],
+    surfaces: ["computer-cli", "computer-mcp"],
+    baseSurfaces: ["computer-cli"],
     toolset: "loop",
+    variantDiscriminator: "mode",
+    privilegedVariants: [
+      {
+        tag: "admin_force",
+        requires: "active-org-admin",
+        inputSchema: {
+          mode: literal("admin_force").describe("active same-org owner/admin only (AD-358): kill the parent's processes and release it WITHOUT saving; its last checkpoint stays the restore point"),
+          computerSessionId: string2().describe("admin_force: the exact computerSessionId of the Computer to stop, cms_…"),
+          acceptDataLoss: boolean2().refine((value) => value === true, {
+            message: "admin_force requires acceptDataLoss: true"
+          }).describe("admin_force: must be true; running processes and unsaved work are lost"),
+          reason: string2().trim().min(1).max(500).describe("admin_force: why the Computer is being force-stopped (recorded)"),
+          expectedProviderGeneration: number2().int().nonnegative().describe("admin_force: the exact provider generation to stop"),
+          expectedWorkspaceGeneration: string2().min(1).nullable().describe("admin_force: the exact workspace generation; null (CLI: the value null) for a Computer with none")
+        },
+        omitInputs: ["runId"],
+        description: "Organization owner/admin only: mode=admin_force kills a Computer's parent processes and releases it without saving, by exact computerSessionId and both expected generations, with acceptDataLoss and a reason; its shared Runs settle only on control's confirmed stop of that generation. The deprecated save stop (no mode, CLI only) checkpoints and stops the parent for a shared write Run.",
+        outputSchema: adminForceStopOutputSchema
+      }
+    ],
     run: forward("computer_runtime.stop")
   },
   {
@@ -15570,7 +15613,7 @@ var ACTIONS = ACTION_DEFINITIONS.map((action) => {
 });
 
 // ../actions/src/retention-entry.ts
-var ARBOR_VERSION = "0.24.17";
+var ARBOR_VERSION = "0.24.19";
 var historyPolicySchema = _enum(["full", "checkpoint"]).optional().describe("text Artifacts: future history retention policy; full retains every source snapshot, checkpoint keeps metadata for every revision and source only when explicitly retained");
 var retainSourceSchema = boolean2().optional().describe("edit: in checkpoint mode, retain this newly minted content revision's source");
 var checkpointSchema = boolean2().optional().describe("edit: retain the exact current version source without incrementing content version");
@@ -16454,7 +16497,7 @@ function dispositionFilename(value) {
 // package.json
 var package_default = {
   name: "@lambdacurry/arbor",
-  version: "0.24.17",
+  version: "0.24.19",
   description: "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   keywords: [
     "agents",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.24.17",
+  "version": "0.24.19",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",