@lambdacurry/arbor 0.14.0 → 0.14.2

package/README.md

@@ -42,7 +42,7 @@ This prints a URL + short code to relay to the human, who approves it in their l
 
 ## Output contract (agent-friendly)
 
-Every command takes `--json` to emit a stable `{ ok, data | error, meta }` envelope on stdout (with structured error codes and agent-mode exit codes); advisory/human text goes to stderr. A failure envelope adds the server's granular `reason` — `validation.missing_field`, `limit.exceeded`, `conflict.state`, … — beside the coarse `code`, optionally with `field`, `limit`, `retryable`, and `phase` (AD-237). `--quiet` (auto under `--json` or a pipe) silences the advisory stream. `--fields a,b,list:N` projects a result; `--limit`/`--cursor` paginate list commands.
+Every command takes `--json` to emit a stable `{ ok, data | error, meta }` envelope on stdout (with structured error codes and agent-mode exit codes); advisory/human text goes to stderr. A failure envelope adds the server's granular `reason` — `validation.missing_field`, `limit.exceeded`, `conflict.state`, … — beside the coarse `code`, optionally with `field`, `limit`, `retryable`, `phase`, and bounded sanitized `provider` lifecycle diagnostics (AD-237/261). `--quiet` (auto under `--json` or a pipe) silences the advisory stream. `--fields a,b,list:N` projects a result; `--limit`/`--cursor` paginate list commands.
 
 ```bash
 arbor inbox --json --limit 20

package/dist/arbor.js

@@ -1801,6 +1801,52 @@ var artifactVersions = sqliteTable("artifact_versions", {
 }, (t) => ({
   artifactVersionUq: uniqueIndex("artifact_versions_artifact_version_uq").on(t.artifactId, t.version)
 }));
+var secrets = sqliteTable("secrets", {
+  id: text("id").primaryKey(),
+  orgId: text("org_id").notNull().references(() => orgs.id),
+  name: text("name").notNull(),
+  description: text("description").notNull().default(""),
+  lifecycle: text("lifecycle").$type().notNull().default("active"),
+  currentVersionId: text("current_version_id"),
+  currentVersion: integer("current_version").notNull().default(0),
+  metadataRevision: integer("metadata_revision").notNull().default(0),
+  createdByProfileId: text("created_by_profile_id").notNull().references(() => profiles.id),
+  createdExecutionContextId: text("created_execution_context_id").notNull().references(() => executionContexts.id),
+  createdAt: ts("created_at").notNull(),
+  revokedAt: ts("revoked_at")
+}, (t) => ({
+  orgNameUq: uniqueIndex("secrets_org_name_uq").on(t.orgId, t.name),
+  orgLifecycleIdx: index("secrets_org_lifecycle_idx").on(t.orgId, t.lifecycle, t.createdAt)
+}));
+var secretVersions = sqliteTable("secret_versions", {
+  id: text("id").primaryKey(),
+  secretId: text("secret_id").notNull().references(() => secrets.id),
+  version: integer("version").notNull(),
+  ciphertext: text("ciphertext").notNull(),
+  iv: text("iv").notNull(),
+  keyId: text("key_id").notNull(),
+  algorithm: text("algorithm").notNull().default("AES-GCM-256"),
+  createdByProfileId: text("created_by_profile_id").notNull().references(() => profiles.id),
+  createdExecutionContextId: text("created_execution_context_id").notNull().references(() => executionContexts.id),
+  createdAt: ts("created_at").notNull()
+}, (t) => ({
+  secretVersionUq: uniqueIndex("secret_versions_secret_version_uq").on(t.secretId, t.version)
+}));
+var secretGrants = sqliteTable("secret_grants", {
+  id: text("id").primaryKey(),
+  orgId: text("org_id").notNull().references(() => orgs.id),
+  secretId: text("secret_id").references(() => secrets.id),
+  scopeKey: text("scope_key").notNull(),
+  profileId: text("profile_id").notNull().references(() => profiles.id),
+  permissions: text("permissions", { mode: "json" }).$type().notNull(),
+  grantedByProfileId: text("granted_by_profile_id").notNull().references(() => profiles.id),
+  grantedExecutionContextId: text("granted_execution_context_id").notNull().references(() => executionContexts.id),
+  createdAt: ts("created_at").notNull(),
+  updatedAt: ts("updated_at").notNull()
+}, (t) => ({
+  scopeProfileUq: uniqueIndex("secret_grants_scope_profile_uq").on(t.orgId, t.scopeKey, t.profileId),
+  profileIdx: index("secret_grants_profile_idx").on(t.profileId, t.orgId)
+}));
 var appBundles = sqliteTable("app_bundles", {
   id: text("id").primaryKey(),
   artifactVersionId: text("artifact_version_id").notNull().references(() => artifactVersions.id),
@@ -1864,6 +1910,23 @@ var apps = sqliteTable("apps", {
   spaceIdx: index("apps_space_idx").on(t.spaceId, t.lifecycle, t.createdAt),
   orgIdx: index("apps_org_idx").on(t.orgId, t.access, t.discovery)
 }));
+var secretBindings = sqliteTable("secret_bindings", {
+  id: text("id").primaryKey(),
+  secretId: text("secret_id").notNull().references(() => secrets.id),
+  targetType: text("target_type").notNull().default("app"),
+  appId: text("app_id").notNull().references(() => apps.id),
+  bindingName: text("binding_name").notNull(),
+  status: text("status").$type().notNull().default("active"),
+  createdByProfileId: text("created_by_profile_id").notNull().references(() => profiles.id),
+  createdExecutionContextId: text("created_execution_context_id").notNull().references(() => executionContexts.id),
+  createdAt: ts("created_at").notNull(),
+  updatedByProfileId: text("updated_by_profile_id").notNull().references(() => profiles.id),
+  updatedExecutionContextId: text("updated_execution_context_id").notNull().references(() => executionContexts.id),
+  updatedAt: ts("updated_at").notNull()
+}, (t) => ({
+  appNameUq: uniqueIndex("secret_bindings_app_name_uq").on(t.appId, t.bindingName),
+  secretIdx: index("secret_bindings_secret_idx").on(t.secretId, t.status)
+}));
 var appDeployments = sqliteTable("app_deployments", {
   id: text("id").primaryKey(),
   appId: text("app_id").notNull().references(() => apps.id),
@@ -2015,6 +2078,9 @@ var watches = sqliteTable("watches", {
   watchUq: uniqueIndex("watches_watcher_target_uniq").on(t.watcherProfileId, t.targetType, t.targetId),
   watchTargetIdx: index("watches_target_idx").on(t.targetType, t.targetId)
 }));
+// ../core/src/ops/computer.ts
+var MAX_COMPUTER_REPOSITORIES = 10;
+
 // ../core/src/ops/request.ts
 var REQUEST_TTL_MS = 14 * 24 * 60 * 60 * 1000;
 
@@ -2049,6 +2115,19 @@ var PREVIEW_MIME_TYPES = new Set([
 // ../core/src/ops/app.ts
 var APP_MAX_MODULE_BYTES = 10 * 1024 * 1024;
 var APP_MAX_ASSET_BYTES = 25 * 1024 * 1024;
+// ../core/src/ops/secret.ts
+var SECRET_PERMISSIONS = [
+  "create",
+  "metadata:read",
+  "value:write",
+  "rotate",
+  "bind",
+  "unbind",
+  "revoke",
+  "delete",
+  "plaintext:read"
+];
+var SECRET_ADMIN_PERMISSIONS = SECRET_PERMISSIONS.filter((permission) => permission !== "create" && permission !== "plaintext:read");
 // ../core/src/queries/lane-match.ts
 var STOP_WORDS = new Set("a an and are as at be by for from has have here how i in is it me of on or our the their they this to was what when where which who will with you your".split(" "));
 // ../core/src/queries/activity.ts
@@ -16542,7 +16621,8 @@ var computerProfile = exports_external.looseObject({
   id: exports_external.string(),
   version: exports_external.number(),
   shell: exports_external.string(),
-  runtimes: exports_external.looseObject({ bun: exports_external.string() }),
+  runtimes: exports_external.looseObject({ bun: exports_external.string(), node: exports_external.string() }),
+  packageManagers: exports_external.looseObject({ pnpm: exports_external.string() }),
   tools: exports_external.array(exports_external.string()),
   recommendedEditingPrimitive: exports_external.string()
 });
@@ -16714,6 +16794,31 @@ var app2 = exports_external.looseObject({
   url: exports_external.string().optional()
 });
 var deployment = exports_external.looseObject({ id, appId: id, bundleId: id, status: exports_external.string() });
+var secretMetadata = exports_external.looseObject({
+  id,
+  orgId: id,
+  name: exports_external.string(),
+  description: exports_external.string(),
+  lifecycle: exports_external.enum(["active", "revoked"]),
+  currentVersionId: nullableString,
+  currentVersion: exports_external.number().int().min(0),
+  metadataRevision: exports_external.number().int().min(0),
+  createdByProfileId: id,
+  createdExecutionContextId: id,
+  createdAt: timestamp,
+  revokedAt: nullableString
+});
+var secretPermission = exports_external.enum([
+  "create",
+  "metadata:read",
+  "value:write",
+  "rotate",
+  "bind",
+  "unbind",
+  "revoke",
+  "delete",
+  "plaintext:read"
+]);
 var treeThread = exports_external.looseObject({
   id,
   title: exports_external.string(),
@@ -16995,6 +17100,30 @@ var MCP_OUTPUT_SCHEMAS = {
     status: exports_external.literal("deleted"),
     retrievalTier: exports_external.string()
   }),
+  secrets: exports_external.looseObject({
+    result: exports_external.array(secretMetadata).optional(),
+    secret: secretMetadata.optional(),
+    bindings: exports_external.array(exports_external.looseObject({
+      id,
+      targetType: exports_external.literal("app"),
+      appId: id,
+      bindingName: exports_external.string(),
+      status: exports_external.enum(["active", "unbound"]),
+      updatedAt: timestamp
+    })).optional(),
+    grants: exports_external.array(exports_external.looseObject({ profileId: id, permissions: exports_external.array(secretPermission) })).optional(),
+    id: id.optional(),
+    secretId: id.nullable().optional(),
+    version: exports_external.number().int().min(1).optional(),
+    rotated: exports_external.boolean().optional(),
+    profileId: id.optional(),
+    permissions: exports_external.array(secretPermission).optional(),
+    revoked: exports_external.boolean().optional(),
+    targetType: exports_external.literal("app").optional(),
+    appId: id.optional(),
+    bindingName: exports_external.string().optional(),
+    unbound: exports_external.boolean().optional()
+  }),
   app_list: exports_external.object({ result: exports_external.array(app2) }),
   app_get: exports_external.looseObject({
     app: app2,
@@ -17271,6 +17400,7 @@ var MCP_TOOL_ANNOTATIONS = {
   artifact_get: readOnly,
   artifact_transition: additive,
   artifact_delete: destructive,
+  secrets: destructive,
   app_get: readOnly,
   app_list: readOnly,
   app_deployment_get: readOnly,
@@ -17567,9 +17697,9 @@ var ACTION_DEFINITIONS = [
     description: "Replace your organization's sparse computer-default layer without allocating runtime state. Omitted/null values fall back to provider defaults; Space, Topic, and Thread layers may override individual fields.",
     inputSchema: {
       backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("default execution tier, or null to use worker-shell"),
-      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; use bun-typescript-v1 for the pinned Bun monorepo toolchain, or null to clear"),
-      setupScript: exports_external.string().nullable().optional().describe("optional setup run when materializing a reusable base, or null to clear"),
-      repositories: exports_external.array(exports_external.string()).nullable().optional().describe("default repositories, repeated --repositories; [] clears and null inherits provider default")
+      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, Bun 1.3.3, Node 26.5.1, and pnpm 10.33.0, or null to clear"),
+      setupScript: exports_external.string().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize, or null to clear"),
+      repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
     },
     surfaces: ["mcp", "cli"],
     toolset: "structure",
@@ -17582,9 +17712,9 @@ var ACTION_DEFINITIONS = [
     inputSchema: {
       spaceId: exports_external.string().describe("the Space, spc_…"),
       backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
-      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; use bun-typescript-v1 for the pinned Bun monorepo toolchain, or null to clear inherited profile"),
-      setupScript: exports_external.string().nullable().optional().describe("optional setup run when materializing a reusable base, or null to clear"),
-      repositories: exports_external.array(exports_external.string()).nullable().optional().describe("repository allowlist/default clones; [] clears and null inherits")
+      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, Bun 1.3.3, Node 26.5.1, and pnpm 10.33.0, or null to clear inherited profile"),
+      setupScript: exports_external.string().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize, or null to clear"),
+      repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
     },
     surfaces: ["mcp", "cli"],
     toolset: "structure",
@@ -17597,9 +17727,9 @@ var ACTION_DEFINITIONS = [
     inputSchema: {
       topicId: exports_external.string().describe("the Topic, top_…"),
       backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
-      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; use bun-typescript-v1 for the pinned Bun monorepo toolchain, or null to clear inherited profile"),
-      setupScript: exports_external.string().nullable().optional().describe("optional setup run, or null to clear"),
-      repositories: exports_external.array(exports_external.string()).nullable().optional().describe("repository allowlist/default clones; [] clears and null inherits")
+      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, Bun 1.3.3, Node 26.5.1, and pnpm 10.33.0, or null to clear inherited profile"),
+      setupScript: exports_external.string().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize"),
+      repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
     },
     surfaces: ["mcp", "cli"],
     toolset: "structure",
@@ -17612,9 +17742,9 @@ var ACTION_DEFINITIONS = [
     inputSchema: {
       threadId: exports_external.string().describe("the Thread, thr_…"),
       backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
-      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; use bun-typescript-v1 for the pinned Bun monorepo toolchain, or null to clear inherited profile"),
-      setupScript: exports_external.string().nullable().optional().describe("optional setup run, or null to clear"),
-      repositories: exports_external.array(exports_external.string()).nullable().optional().describe("repository allowlist/default clones; [] clears and null inherits")
+      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, Bun 1.3.3, Node 26.5.1, and pnpm 10.33.0, or null to clear inherited profile"),
+      setupScript: exports_external.string().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize"),
+      repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
     },
     surfaces: ["mcp", "cli"],
     toolset: "structure",
@@ -17634,7 +17764,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_open",
     title: "Open a Thread computer",
-    description: "Open or resume this Thread's project environment for filesystem or command work. Returns computerSessionId and, when a declared container profile is selected, its guaranteed shell/runtimes/tools/editing primitive; pass the session id unchanged to later Computer tools and to Contributions or responses produced from the work.",
+    description: "Open or resume this Thread's project environment for filesystem or command work. Every configured repository is re-authorized through its explicit GitHub connection; a fresh reusable base clones it with a request-scoped contents:read credential before strict setup runs, while a restore receives no credential. Returns computerSessionId and the selected profile contract; pass the session id unchanged to later Computer tools and cited work.",
     inputSchema: {
       threadId: exports_external.string().describe("the Arbor Thread whose stable computer to open, thr_…"),
       vcpus: exports_external.number().int().min(1).max(4).optional().describe("optional container vCPU request"),
@@ -18843,6 +18973,178 @@ var ACTION_DEFINITIONS = [
     toolset: "artifacts",
     run: (ex, input) => ex.call("artifact.transition", { ...input, to: "deleted" })
   },
+  {
+    name: "secrets",
+    title: "Manage encrypted Secrets",
+    description: "Create, authorize, version, rotate, bind, and revoke first-class Arbor Secrets without revealing plaintext. set and rotate never echo submitted values; bind exposes the current version only to the named App runtime binding, while identity administration and runtime consumption remain separate. Plaintext reveal is not shipped in v1.",
+    inputSchema: {
+      verb: exports_external.enum([
+        "list",
+        "get",
+        "create",
+        "set",
+        "rotate",
+        "grant",
+        "revoke_grant",
+        "bind",
+        "unbind",
+        "revoke"
+      ]).describe("which Secret operation to perform"),
+      secretId: exports_external.string().optional().describe("Secret id; omit only when granting/revoking org-scoped create permission"),
+      name: exports_external.string().optional().describe("create: lowercase Secret name"),
+      description: exports_external.string().max(500).optional().describe("create: non-sensitive purpose"),
+      value: exports_external.string().min(1).optional().describe("set/rotate: plaintext submitted once and never returned or recorded"),
+      profileId: exports_external.string().optional().describe("grant/revoke_grant: authorized human or agent"),
+      permissions: exports_external.array(exports_external.enum([
+        "create",
+        "metadata:read",
+        "value:write",
+        "rotate",
+        "bind",
+        "unbind",
+        "revoke",
+        "delete",
+        "plaintext:read"
+      ])).optional().describe("grant: explicit permissions; plaintext:read is reserved for a future dedicated reveal path and normal grants reject it"),
+      appId: exports_external.string().optional().describe("bind: target App, app_…"),
+      bindingName: exports_external.string().optional().describe("bind: uppercase Dynamic Worker env binding, e.g. API_TOKEN"),
+      bindingId: exports_external.string().optional().describe("unbind: binding id, sbd_…")
+    },
+    surfaces: ["mcp"],
+    toolset: "apps",
+    run: dispatch({
+      list: "secret.list",
+      get: "secret.get",
+      create: "secret.create",
+      set: "secret.set",
+      rotate: "secret.rotate",
+      grant: "secret.grant",
+      revoke_grant: "secret.revoke_grant",
+      bind: "secret.bind",
+      unbind: "secret.unbind",
+      revoke: "secret.revoke"
+    })
+  },
+  {
+    name: "secret_list",
+    title: "List authorized Secrets",
+    description: "List only Secret metadata the current identity may read. Values, ciphertext, and encryption metadata are never projected.",
+    inputSchema: {},
+    surfaces: ["cli"],
+    toolset: "apps",
+    run: forward("secret.list")
+  },
+  {
+    name: "secret_get",
+    title: "Read Secret metadata",
+    description: "Read one Secret's lifecycle, current version number, identity grants, and App bindings. This never returns plaintext, ciphertext, IVs, or key identifiers.",
+    inputSchema: { secretId: exports_external.string().describe("the Secret, sec_…") },
+    surfaces: ["cli"],
+    toolset: "apps",
+    run: forward("secret.get")
+  },
+  {
+    name: "secret_create",
+    title: "Create a Secret",
+    description: "Create first-class Secret metadata without material; an Org owner/admin or identity with org-scoped create permission may do this. Follow with secret_set to write its first encrypted version.",
+    inputSchema: {
+      name: exports_external.string().min(1).max(63).describe("lowercase stable name"),
+      description: exports_external.string().max(500).optional().describe("non-sensitive purpose")
+    },
+    surfaces: ["cli"],
+    toolset: "apps",
+    run: forward("secret.create")
+  },
+  {
+    name: "secret_set",
+    title: "Set a Secret value",
+    description: "Write the first encrypted SecretVersion. The submitted value is never echoed, logged, audited, or placed in provenance; use secret_rotate after the first version.",
+    inputSchema: {
+      secretId: exports_external.string().describe("the empty Secret, sec_…"),
+      value: exports_external.string().min(1).describe("plaintext submitted once and never returned")
+    },
+    surfaces: ["cli"],
+    toolset: "apps",
+    run: forward("secret.set")
+  },
+  {
+    name: "secret_rotate",
+    title: "Rotate a Secret value",
+    description: "Append a new encrypted SecretVersion and make every active App binding consume it. Rotation permission is independent of value-write, bind, and plaintext-read permission; the submitted value is never returned.",
+    inputSchema: {
+      secretId: exports_external.string().describe("the active Secret, sec_…"),
+      value: exports_external.string().min(1).describe("new plaintext submitted once and never returned")
+    },
+    surfaces: ["cli"],
+    toolset: "apps",
+    run: forward("secret.rotate")
+  },
+  {
+    name: "secret_grant",
+    title: "Grant Secret access",
+    description: "Replace one human or agent's explicit Secret permissions; omit secretId only to grant org-scoped create. Plaintext-read is reserved for a future dedicated reveal path and this command rejects it; runtime App consumption is controlled by bindings, not this identity grant.",
+    inputSchema: {
+      secretId: exports_external.string().optional().describe("Secret scope; omit only for org-scoped create permission"),
+      profileId: exports_external.string().describe("authorized human or agent profile"),
+      permissions: exports_external.array(exports_external.enum([
+        "create",
+        "metadata:read",
+        "value:write",
+        "rotate",
+        "bind",
+        "unbind",
+        "revoke",
+        "delete",
+        "plaintext:read"
+      ]))
+    },
+    surfaces: ["cli"],
+    toolset: "apps",
+    run: forward("secret.grant")
+  },
+  {
+    name: "secret_revoke_grant",
+    title: "Revoke Secret access",
+    description: "Remove one human or agent's explicit Secret grant. This changes administration authority only; an App binding remains a separate runtime-consumption grant.",
+    inputSchema: {
+      secretId: exports_external.string().optional().describe("Secret scope; omit for org create permission"),
+      profileId: exports_external.string().describe("human or agent profile")
+    },
+    surfaces: ["cli"],
+    toolset: "apps",
+    run: forward("secret.revoke_grant")
+  },
+  {
+    name: "secret_bind",
+    title: "Bind a Secret to an App",
+    description: "Authorize one App workload to consume the active Secret version through a provider-native Dynamic Worker env binding. The actor needs Secret bind authority and access to the App's Space. Binding permission never grants plaintext read to the acting identity, and no material enters bundles, deployments, receipts, or Events.",
+    inputSchema: {
+      secretId: exports_external.string().describe("active Secret with a value, sec_…"),
+      appId: exports_external.string().describe("target App, app_…"),
+      bindingName: exports_external.string().describe("uppercase runtime name, e.g. API_TOKEN")
+    },
+    surfaces: ["cli"],
+    toolset: "apps",
+    run: forward("secret.bind")
+  },
+  {
+    name: "secret_unbind",
+    title: "Unbind an App Secret",
+    description: "Remove one App workload's runtime consumption binding without revoking the Secret or changing identity administration grants. Read secret_get for the binding id.",
+    inputSchema: { bindingId: exports_external.string().describe("the App binding, sbd_…") },
+    surfaces: ["cli"],
+    toolset: "apps",
+    run: forward("secret.unbind")
+  },
+  {
+    name: "secret_revoke",
+    title: "Revoke a Secret",
+    description: "Move a Secret to revoked so every active workload binding fails closed while durable metadata, encrypted versions, attribution, and audit history remain. Permanent deletion and plaintext reveal are not shipped in v1.",
+    inputSchema: { secretId: exports_external.string().describe("the Secret, sec_…") },
+    surfaces: ["cli"],
+    toolset: "apps",
+    run: forward("secret.revoke")
+  },
   {
     name: "apps",
     title: "List visible Apps",
@@ -19185,6 +19487,20 @@ function parseErrorDetails(value) {
     details.retryable = raw.retryable;
   if (typeof raw.phase === "string")
     details.phase = raw.phase;
+  if (raw.provider && typeof raw.provider === "object" && !Array.isArray(raw.provider)) {
+    const provider = raw.provider;
+    if (typeof provider.stage === "string" && provider.stage !== "") {
+      details.provider = {
+        stage: provider.stage,
+        ...typeof provider.command === "string" ? { command: provider.command } : {},
+        ...typeof provider.exitCode === "number" ? { exitCode: provider.exitCode } : {},
+        ...typeof provider.stdout === "string" ? { stdout: provider.stdout } : {},
+        ...typeof provider.stderr === "string" ? { stderr: provider.stderr } : {},
+        ...typeof provider.containerStarted === "boolean" ? { containerStarted: provider.containerStarted } : {},
+        ...typeof provider.repositoryMaterialized === "boolean" ? { repositoryMaterialized: provider.repositoryMaterialized } : {}
+      };
+    }
+  }
   return details;
 }
 function detailsForError(err) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.14.0",
+  "version": "0.14.2",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",
@@ -36,7 +36,7 @@
   "devDependencies": {
     "@arbor/actions": "workspace:*",
     "@arbor/core": "workspace:*",
-    "@types/node": "^22.19.19",
+    "@types/node": "^26.2.0",
     "tsx": "^4.20.6",
     "typescript": "^5.8.0",
     "vitest": "^4.1.4",