@lambdacurry/arbor 0.13.2 → 0.13.3

package/dist/arbor.js

@@ -1809,6 +1809,7 @@ var appBundles = sqliteTable("app_bundles", {
   mainModule: text("main_module").notNull(),
   modules: text("modules", { mode: "json" }).$type().notNull(),
   staticAssets: text("static_assets", { mode: "json" }).$type().notNull(),
+  buildProvenance: text("build_provenance", { mode: "json" }).$type(),
   runtimeEntrypoint: text("runtime_entrypoint").$type().notNull(),
   capabilityRequirements: text("capability_requirements", { mode: "json" }).$type().notNull().default([]),
   stateSchemaVersion: integer("state_schema_version").notNull().default(0),
@@ -1839,14 +1840,17 @@ var apps = sqliteTable("apps", {
   access: text("access").$type().notNull(),
   discovery: text("discovery").$type(),
   activeDeploymentId: text("active_deployment_id"),
+  pendingActivationDeploymentId: text("pending_activation_deployment_id"),
   runtimeProvider: text("runtime_provider").$type().notNull(),
   runtimeHealth: text("runtime_health").$type().notNull().default("unknown"),
   runtimeHealthUpdatedAt: ts("runtime_health_updated_at"),
   stateMode: text("state_mode").$type().notNull(),
   stateIdentity: text("state_identity").notNull(),
   stateGeneration: integer("state_generation").notNull().default(0),
+  pendingStateResetId: text("pending_state_reset_id"),
   currentStateSchemaVersion: integer("current_state_schema_version").notNull().default(0),
   deploymentRevision: integer("deployment_revision").notNull().default(0),
+  metadataRevision: integer("metadata_revision").notNull().default(0),
   createdByProfileId: text("created_by_profile_id").notNull().references(() => profiles.id),
   createdExecutionContextId: text("created_execution_context_id").notNull().references(() => executionContexts.id),
   createdAt: ts("created_at").notNull(),
@@ -1889,9 +1893,15 @@ var appStateResets = sqliteTable("app_state_resets", {
   resetByProfileId: text("reset_by_profile_id").notNull().references(() => profiles.id),
   resetExecutionContextId: text("reset_execution_context_id").notNull().references(() => executionContexts.id),
   providerReceipt: text("provider_receipt", { mode: "json" }).$type().notNull(),
-  createdAt: ts("created_at").notNull()
+  status: text("status").$type().notNull().default("completed"),
+  activeDeploymentId: text("active_deployment_id"),
+  deploymentRevision: integer("deployment_revision"),
+  targetStateSchemaVersion: integer("target_state_schema_version"),
+  createdAt: ts("created_at").notNull(),
+  completedAt: ts("completed_at")
 }, (t) => ({
   idempotencyUq: uniqueIndex("app_state_resets_idempotency_uq").on(t.appId, t.resetByProfileId, t.idempotencyKey),
+  generationUq: uniqueIndex("app_state_resets_generation_uq").on(t.appId, t.fromGeneration),
   appIdx: index("app_state_resets_app_idx").on(t.appId, t.createdAt)
 }));
 var appViewerGrantUses = sqliteTable("app_viewer_grant_uses", {
@@ -1948,7 +1958,7 @@ var events = sqliteTable("events", {
   payload: text("payload", { mode: "json" }).$type().notNull().default({}),
   createdAt: ts("created_at").notNull()
 }, (t) => ({
-  objectIdx: index("events_object_idx").on(t.objectType, t.objectId),
+  objectIdx: index("events_object_idx").on(t.objectType, t.objectId, t.createdAt),
   createdIdx: index("events_created_idx").on(t.createdAt)
 }));
 var notifications = sqliteTable("notifications", {
@@ -17823,7 +17833,7 @@ var ACTIONS = [
   {
     name: "apps",
     title: "List visible Apps",
-    description: "List Apps available to you: every App in your Spaces plus listed public Apps across the organization. Lifecycle and runtime health are separate fields; unlisted public Apps appear only to their owning Space.",
+    description: "List Apps available to you: every App in your Spaces plus active listed public Apps across the organization. Lifecycle and last activation health are separate fields; unlisted public and archived Apps appear only to actors authorized for their owning Space.",
     inputSchema: {
       includeArchived: exports_external.boolean().optional().describe("include archived Apps you are authorized to inspect")
     },
@@ -17834,7 +17844,7 @@ var ACTIONS = [
   {
     name: "apps",
     title: "Publish and manage Apps",
-    description: "Manage stable Arbor Apps through one guarded lifecycle (AD-248). verb=list shows Apps visible across your Spaces; get reads the current active release, state generation, and history; create mints the Space-owned identity; deploy health-checks an immutable AppBundle without moving the URL; deployment inspects one candidate; activate and rollback health-check then compare-and-swap the active release; set_access changes Space/public and public discovery immediately; reset_state is the only durable SQLite deletion; archive stops serving but retains history. Read with get immediately before activate, rollback, access, or reset so expectedActiveDeploymentId/expectedGeneration are current; start public Apps as public+unlisted+none and private stateful Apps as space+durable.",
+    description: "Manage stable Arbor Apps through one guarded lifecycle (AD-248/249). verb=list shows Apps across the actor's Spaces plus active listed public Apps across the organization; get reads the active release, pending control intent, state generation, and history; create mints the Space-owned identity; deploy health-checks an immutable AppBundle without moving the URL; deployment inspects one candidate; activate and rollback reserve an attributed intent before provider health and compare-and-swap completion; set_access changes Space/public and public discovery immediately; reset_state is the only durable SQLite deletion and resumes partial failure with the same idempotency key; archive stops serving but retains history. Read with get immediately before activate, rollback, access, or reset. Public Apps must be public+(unlisted|listed)+none; durable Apps are space+durable.",
     inputSchema: {
       verb: exports_external.enum([
         "list",
@@ -17855,7 +17865,7 @@ var ACTIONS = [
       slug: exports_external.string().min(1).max(59).optional().describe("create: stable label in app-<slug>.arborthreads.dev"),
       access: exports_external.enum(["space", "public"]).optional().describe("create/set_access: gateway access"),
       discovery: exports_external.enum(["unlisted", "listed"]).nullable().optional().describe("create/set_access: public discovery; Space Apps use null"),
-      stateMode: exports_external.enum(["none", "durable"]).optional().describe("create: none or isolated durable SQLite"),
+      stateMode: exports_external.enum(["none", "durable"]).optional().describe("create: none or Space-only isolated durable SQLite"),
       bundleId: exports_external.string().optional().describe("deploy: verified immutable AppBundle, bnd_…"),
       deploymentId: exports_external.string().optional().describe("deployment/activate/rollback: deployment, dep_…"),
       expectedActiveDeploymentId: exports_external.string().nullable().optional().describe("activate/rollback: active deployment just read; null only for first activation"),
@@ -17880,7 +17890,7 @@ var ACTIONS = [
   {
     name: "app_get",
     title: "Read an App",
-    description: "Inspect one App's stable URL, active release, source AppBundle, deployment timeline, runtime health, state identity/generation, and reset history. Read this before deployment, rollback, access, or state changes so your compare-and-swap inputs are current.",
+    description: "Inspect one App's stable URL, active release, pending control intent, source AppBundle, attributed deployment timeline, last activation health, state identity/generation, and reset history. Read this before deployment, rollback, access, or state changes so compare-and-swap inputs are current.",
     inputSchema: { appId: exports_external.string().describe("the App, app_…") },
     surfaces: ["cli"],
     toolset: "apps",
@@ -17889,14 +17899,14 @@ var ACTIONS = [
   {
     name: "app_create",
     title: "Create an App",
-    description: "Create a stable first-class App identity in a Space before deploying code. Start small public Apps as public+unlisted+none; use space+durable only when the App needs membership authorization and isolated SQLite state.",
+    description: "Create a stable first-class App identity in a Space before deploying code. Public Apps are stateless and start public+unlisted+none; durable Apps are always space+durable with membership authorization and isolated SQLite state.",
     inputSchema: {
       spaceId: exports_external.string().describe("owning Space, spc_…"),
       title: exports_external.string().min(1).max(160).describe("short factual App title"),
       slug: exports_external.string().min(1).max(59).describe("stable DNS label used by app-<slug>.arborthreads.dev"),
       access: exports_external.enum(["space", "public"]).describe("space requires membership; public is anonymous at the gateway"),
       discovery: exports_external.enum(["unlisted", "listed"]).nullable().optional().describe("public Apps only; default unlisted"),
-      stateMode: exports_external.enum(["none", "durable"]).describe("durable allocates isolated facet SQLite; deployment never resets it")
+      stateMode: exports_external.enum(["none", "durable"]).describe("durable allocates Space-only isolated facet SQLite; deployment never resets it")
     },
     surfaces: ["cli"],
     toolset: "apps",
@@ -17930,7 +17940,7 @@ var ACTIONS = [
   {
     name: "app_activate",
     title: "Activate a verified deployment",
-    description: "Atomically advance an App's stable URL to a verified candidate after a fresh health check. Pass the active deployment id you just read (or null for the first release); a concurrent change is rejected instead of overwriting it.",
+    description: "Reserve an attributed activation intent, health-check the verified candidate, then atomically advance the stable URL. Pass the active deployment id just read (or null for the first release). A retry resumes the same pending release; a conflicting control change is rejected.",
     inputSchema: {
       appId: exports_external.string().describe("target App, app_…"),
       deploymentId: exports_external.string().describe("verified candidate, dep_…"),
@@ -17956,7 +17966,7 @@ var ACTIONS = [
   {
     name: "app_set_access",
     title: "Change App access",
-    description: "Change the gateway policy immediately and record who changed it: space requires a current Space member, while public permits anonymous requests and may be unlisted or listed. This does not redeploy code or pass an Arbor identity into App code.",
+    description: "Change the gateway policy immediately and record who changed it: space requires a current Space member, while public permits anonymous requests and may be unlisted or listed. Durable Apps cannot become public. This does not redeploy code or pass an Arbor identity into App code.",
     inputSchema: {
       appId: exports_external.string().describe("target App, app_…"),
       access: exports_external.enum(["space", "public"]).describe("new gateway access"),
@@ -17969,7 +17979,7 @@ var ACTIONS = [
   {
     name: "app_reset_state",
     title: "Reset durable App state",
-    description: "Permanently delete one durable App facet's isolated SQLite database as an explicit operation; deploying or rolling back never does this. Read app_get first, pass its expectedGeneration, and use a stable idempotencyKey so retries do not delete a later generation.",
+    description: "Permanently delete one durable App facet's isolated SQLite database as an explicit attributed transition; deploying or rolling back never does this. Read app_get first, pass its expectedGeneration, and keep the same idempotencyKey across retries. A provider interruption leaves a visible pending intent that the same call resumes; do not change release or archive while pending.",
     inputSchema: {
       appId: exports_external.string().describe("durable App, app_…"),
       expectedGeneration: exports_external.number().int().min(0).describe("state generation from app_get"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.13.2",
+  "version": "0.13.3",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",