@lambdacurry/arbor 0.24.19 → 0.24.22

package/dist/arbor.js

@@ -7900,8 +7900,7 @@ var computerRuns = sqliteTable("computer_runs", {
   threadIdx: index("computer_runs_thread_idx").on(t.threadId, t.startedAt),
   sessionIdx: index("computer_runs_session_idx").on(t.computerSessionId, t.startedAt),
   statusIdx: index("computer_runs_status_idx").on(t.computerId, t.status),
-  runtimeIdx: index("computer_runs_runtime_idx").on(t.computerId, t.runtimeState),
-  retentionDueIdx: index("computer_runs_retention_due_idx").on(t.retentionPolicy, t.status, t.retentionDeadlineAt)
+  runtimeIdx: index("computer_runs_runtime_idx").on(t.computerId, t.runtimeState)
 }));
 var packageCacheObjects = sqliteTable("package_cache_objects", {
   key: text("key").primaryKey(),
@@ -9323,6 +9322,7 @@ var COMPUTER_WORKSPACE_RECOVERY_ATTACH_DEADLINE_MS = 31 * 60 * 1000;
 var COMPUTER_WORKSPACE_RECOVERY_HEALTH_DEADLINE_MS = 2 * 60 * 1000;
 var COMPUTER_WORKSPACE_RECOVERY_HEADROOM_MS = 2 * 60 * 1000;
 var COMPUTER_WORKSPACE_RECOVERY_LEASE_MS = COMPUTER_WORKSPACE_RECOVERY_CHECKPOINT_DEADLINE_MS + COMPUTER_WORKSPACE_RECOVERY_ATTACH_DEADLINE_MS + COMPUTER_WORKSPACE_RECOVERY_HEALTH_DEADLINE_MS + COMPUTER_WORKSPACE_RECOVERY_HEADROOM_MS;
+
 // ../core/src/ops/artifact-git-intent.ts
 var RETRYABLE_REPAIR = new Set([
   "pending_push_unconfirmed",
@@ -9753,8 +9753,8 @@ function buildOutputSchemas() {
     git: computerRunGitState.nullable()
   }));
   const computerRunGitStart = looseObject({
-    repositories: computerRunGitStartRepositories.describe("the inherited base's repositories before any requested revision was checked out"),
-    materialized: looseObject({ repositories: computerRunGitStartRepositories }).optional().describe("the workspace as admitted, at each requested revision; read this, when present, for what the Run started on")
+    repositories: computerRunGitStartRepositories.describe("named recipe repositories at start; git facts are null unless a historical Run inspected them"),
+    materialized: looseObject({ repositories: computerRunGitStartRepositories }).optional().describe("historical isolated checkout after admission-managed Git; omitted on new Runs (ARB-584)")
   });
   const computerRunSource = object({ runId: id, snapshotId: id.nullable() }).optional().describe("this Run began at source.runId's durable checkpoint snapshotId");
   const computerRun = looseObject({
@@ -12503,6 +12503,15 @@ function verbatimList(description) {
 function isVerbatimList(schema) {
   return VERBATIM_LISTS.has(schema);
 }
+var FILE_BODIES = registry();
+function fileBody(description, base = string2()) {
+  const schema = base.describe(description);
+  FILE_BODIES.add(schema, { fileBody: true });
+  return schema;
+}
+function isFileBody(schema) {
+  return FILE_BODIES.has(schema);
+}
 var ATTACHMENT_DESCRIPTION_HINT = "durable summary and default alt text; defaults to the filename when omitted; permanent once bound; 1-500 chars; give each file its own";
 function forward(operation) {
   const run = (ex, input) => ex.call(operation, input);
@@ -13275,10 +13284,7 @@ var ACTION_DEFINITIONS = [
       mode: _enum(["read", "write"]).describe("write for mutable work; read for shared inspection"),
       execution: _enum(["shared", "isolated"]).optional().describe("write Run placement; defaults to isolated. Use shared only for intentional live collaboration on the Thread Computer"),
       label: string2().trim().max(120).optional().describe("required for a new Run: short actual intention, e.g. Fix CI; exact accepted legacy retries reuse their original text or omission"),
-      requestedRevisions: array(object({
-        repository: string2().describe("configured GitHub repository as canonical owner/name"),
-        head: string2().regex(/^[0-9a-fA-F]{40}(?:[0-9a-fA-F]{24})?$/).describe("exact 40- or 64-hex Git object id required before caller work")
-      })).max(32).optional().describe("optional exact repository revisions the isolated workspace must prove before caller work"),
+      requestedRevisions: array(unknown()).max(32).optional().describe("retired: omit or pass []. A non-empty value is rejected with 400; agents own Git inside isolated Computers"),
       sourceRunId: string2().optional().describe("fork: a new isolated write Run restored from YOUR same-Thread Run's last durable checkpoint (its last suspend or admission; edits since are not included), run_…; active, suspended, or ended within 14 days or Keep; requires threadId; the source Run is never changed"),
       sourceSnapshotId: string2().optional().describe("with sourceRunId: the exact checkpoint you expect (the source receipt's runtime.currentSnapshotId), cps_…; refused if it moved"),
       idempotencyKey: string2().min(1).max(200).describe("stable key for this ONE logical Run-start request; reuse it unchanged for retries")
@@ -13680,7 +13686,7 @@ var ACTION_DEFINITIONS = [
       computerSessionId: string2().optional().describe("legacy alternative to runId: a computerSessionId on that Computer, cms_…; required unless runId is supplied"),
       path: string2().describe("absolute path under /workspace, or a path inside the run"),
       runId: string2().optional().describe("route this write according to this Run execution placement, run_… (from computer_run_start)"),
-      content: string2().describe("complete UTF-8 content, or base64 bytes when encoding=base64"),
+      content: fileBody("complete UTF-8 content, or base64 bytes when encoding=base64"),
       encoding: _enum(["utf8", "base64"]).optional().describe("content encoding; defaults to utf8, use base64 for binary files")
     },
     surfaces: ["computer-mcp", "computer-cli"],
@@ -13858,7 +13864,7 @@ var ACTION_DEFINITIONS = [
       type: _enum(ARTIFACT_TYPES).describe(ARTIFACT_TYPE_DESCRIPTION),
       kind: _enum(["doc", "table", "diagram", "html", "file"]).optional().describe("structural kind (default file). doc/table/diagram/html are editable, versioned text"),
       title: string2().min(1),
-      source: string2().optional().describe("text kinds: the initial content (v1)"),
+      source: fileBody("text kinds: the initial content (v1)").optional(),
       contentRef: string2().optional().describe("kind=file: where the content lives, e.g. inline://… or a URL"),
       editPolicy: _enum(["owner", "members", "anyone"]).optional().describe("who may edit (default members)"),
       summary: string2().min(1).max(500).describe("required one-line description of what this durable Artifact is or accomplishes"),
@@ -13896,7 +13902,7 @@ var ACTION_DEFINITIONS = [
     inputSchema: {
       artifactId: string2().describe("the artifact, art_…"),
       baseVersion: number2().describe("the version you READ (get_artifact) — stale is rejected"),
-      source: string2().optional().describe("full replace: the complete new content"),
+      source: fileBody("full replace: the complete new content").optional(),
       patches: array(object({ old: string2(), new: string2() })).optional().describe("exact-match hunks applied in order; each old must match exactly once"),
       note: string2().optional().describe("one-line summary of what changed"),
       idempotencyKey: string2().min(1).max(200).optional().describe("stable retry key for this logical edit; the CLI derives one from the artifact, base version, and content when omitted")
@@ -14889,7 +14895,7 @@ var ACTION_DEFINITIONS = [
       title: string2().optional().describe("create: the artifact's title"),
       kind: _enum(["doc", "table", "diagram", "html", "file"]).optional().describe("create: structural kind (default file). doc/table/diagram/html are editable text"),
       type: _enum(ARTIFACT_TYPES).optional().describe(`create: ${ARTIFACT_TYPE_DESCRIPTION}`),
-      source: string2().optional().describe("create (text kinds): the initial content · edit verb=replace: the full new content"),
+      source: fileBody("create (text kinds): the initial content · edit verb=replace: the full new content").optional(),
       contentRef: string2().optional().describe("create (kind=file): where the content lives, e.g. inline://… or a URL"),
       editPolicy: _enum(["owner", "members", "anyone"]).optional().describe("create: who may edit (default members)"),
       summary: string2().min(1).max(500).optional().describe("create: REQUIRED one-line description of what this Artifact is or accomplishes"),
@@ -15143,7 +15149,7 @@ var ACTION_DEFINITIONS = [
       description: string2().max(500).optional().describe("create: non-sensitive purpose"),
       owner: _enum(["organization", "profile"]).optional().describe("create: who owns the Secret (default organization). profile keeps administration with one identity; names are unique per owner"),
       ownerProfileId: string2().optional().describe("create + owner=profile: the owning identity, defaulting to you; assigning another Profile is an Org owner/admin action"),
-      value: string2().min(1).optional().describe("set/rotate: plaintext submitted once and never returned or recorded"),
+      value: fileBody("set/rotate: plaintext submitted once and never returned or recorded; --value-file is sent byte-exact (printf, not echo)", string2().min(1)).optional(),
       profileId: string2().optional().describe("grant/revoke_grant: authorized human or agent"),
       permissions: array(_enum([
         "create",
@@ -15213,7 +15219,7 @@ var ACTION_DEFINITIONS = [
     description: "Write the first encrypted SecretVersion. The submitted value is never echoed, logged, audited, or placed in provenance; use secret_rotate after the first version.",
     inputSchema: {
       secretId: string2().describe("the empty Secret, sec_…"),
-      value: string2().min(1).describe("plaintext submitted once and never returned")
+      value: fileBody("plaintext submitted once and never returned; --value-file is sent byte-exact (printf, not echo)", string2().min(1))
     },
     surfaces: ["cli"],
     toolset: "apps",
@@ -15225,7 +15231,7 @@ var ACTION_DEFINITIONS = [
     description: "Append a new encrypted SecretVersion and make every active App binding consume it. Rotation permission is independent of value-write, bind, and plaintext-read permission; the submitted value is never returned.",
     inputSchema: {
       secretId: string2().describe("the active Secret, sec_…"),
-      value: string2().min(1).describe("new plaintext submitted once and never returned")
+      value: fileBody("new plaintext submitted once and never returned; --value-file is sent byte-exact (printf, not echo)", string2().min(1))
     },
     surfaces: ["cli"],
     toolset: "apps",
@@ -15457,7 +15463,7 @@ var ACTION_DEFINITIONS = [
       path: string2().min(1).max(2048).describe("relative App path beginning with /; may include a query string"),
       method: _enum(["POST", "PUT", "PATCH", "DELETE"]).describe("mutating HTTP method"),
       json: json().optional().describe("JSON request value; mutually exclusive with body and sets application/json. On the CLI, pass serialized JSON after the command as --json '<value>'"),
-      body: string2().optional().describe("UTF-8 request body; mutually exclusive with json"),
+      body: fileBody("UTF-8 request body; mutually exclusive with json").optional(),
       contentType: string2().max(160).optional().describe("body media type; allowed only with body, default text/plain; charset=utf-8")
     },
     surfaces: ["computer-mcp", "cli"],
@@ -15613,7 +15619,7 @@ var ACTIONS = ACTION_DEFINITIONS.map((action) => {
 });
 
 // ../actions/src/retention-entry.ts
-var ARBOR_VERSION = "0.24.19";
+var ARBOR_VERSION = "0.24.22";
 var historyPolicySchema = _enum(["full", "checkpoint"]).optional().describe("text Artifacts: future history retention policy; full retains every source snapshot, checkpoint keeps metadata for every revision and source only when explicitly retained");
 var retainSourceSchema = boolean2().optional().describe("edit: in checkpoint mode, retain this newly minted content revision's source");
 var checkpointSchema = boolean2().optional().describe("edit: retain the exact current version source without incrementing content version");
@@ -16497,7 +16503,7 @@ function dispositionFilename(value) {
 // package.json
 var package_default = {
   name: "@lambdacurry/arbor",
-  version: "0.24.19",
+  version: "0.24.22",
   description: "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   keywords: [
     "agents",
@@ -16995,7 +17001,7 @@ function acceptedFlags(inputSchema) {
   }
   return out;
 }
-function readTextSource(src) {
+function readTextSource(src, verbatim) {
   let text;
   try {
     text = readFileSync2(src === "-" ? 0 : src, "utf8");
@@ -17003,7 +17009,7 @@ function readTextSource(src) {
     const where = src === "-" ? "stdin" : src;
     throw new UsageError(`could not read ${where}: ${e instanceof Error ? e.message : String(e)}`);
   }
-  return text.replace(/[\r\n]+$/, "");
+  return verbatim ? text : text.replace(/[\r\n]+$/, "");
 }
 function primaryPositionalField(inputSchema) {
   return flagsForSchema(inputSchema).find((f) => f.required && (f.kind === "string" || f.kind === "number"));
@@ -17019,7 +17025,8 @@ function flagsForSchema(inputSchema) {
       nullable,
       description: description(inner) ?? description(raw),
       literal: isProseList(inner),
-      verbatim: isVerbatimList(inner)
+      verbatim: isVerbatimList(inner),
+      fileBody: isFileBody(inner)
     };
   });
 }
@@ -17035,7 +17042,7 @@ function buildInput(inputSchema, flags, command) {
         }
         if (fileSrc === true)
           throw new UsageError(`--${spec.flag}-file expects a path (or - for stdin)`);
-        const sourced = readTextSource(String(fileSrc));
+        const sourced = readTextSource(String(fileSrc), spec.fileBody === true);
         if (spec.kind === "json") {
           try {
             input[spec.field] = JSON.parse(sourced);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.24.19",
+  "version": "0.24.22",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",