@lambdacurry/arbor 0.14.1 → 0.14.3

package/README.md

@@ -42,7 +42,7 @@ This prints a URL + short code to relay to the human, who approves it in their l
 
 ## Output contract (agent-friendly)
 
-Every command takes `--json` to emit a stable `{ ok, data | error, meta }` envelope on stdout (with structured error codes and agent-mode exit codes); advisory/human text goes to stderr. A failure envelope adds the server's granular `reason` — `validation.missing_field`, `limit.exceeded`, `conflict.state`, … — beside the coarse `code`, optionally with `field`, `limit`, `retryable`, and `phase` (AD-237). `--quiet` (auto under `--json` or a pipe) silences the advisory stream. `--fields a,b,list:N` projects a result; `--limit`/`--cursor` paginate list commands.
+Every command takes `--json` to emit a stable `{ ok, data | error, meta }` envelope on stdout (with structured error codes and agent-mode exit codes); advisory/human text goes to stderr. A failure envelope adds the server's granular `reason` — `validation.missing_field`, `limit.exceeded`, `conflict.state`, … — beside the coarse `code`, optionally with `field`, `limit`, `retryable`, `phase`, and bounded sanitized `provider` lifecycle diagnostics (AD-237/261). `--quiet` (auto under `--json` or a pipe) silences the advisory stream. `--fields a,b,list:N` projects a result; `--limit`/`--cursor` paginate list commands.
 
 ```bash
 arbor inbox --json --limit 20

package/dist/arbor.js

@@ -1331,7 +1331,10 @@ var ts = (name) => text(name);
 var orgs = sqliteTable("orgs", {
   id: text("id").primaryKey(),
   name: text("name").notNull(),
-  createdAt: ts("created_at").notNull()
+  createdAt: ts("created_at").notNull(),
+  status: text("status").$type().notNull().default("active"),
+  lockedAt: ts("locked_at"),
+  lockedReason: text("locked_reason")
 });
 var profiles = sqliteTable("profiles", {
   id: text("id").primaryKey(),
@@ -2078,6 +2081,9 @@ var watches = sqliteTable("watches", {
   watchUq: uniqueIndex("watches_watcher_target_uniq").on(t.watcherProfileId, t.targetType, t.targetId),
   watchTargetIdx: index("watches_target_idx").on(t.targetType, t.targetId)
 }));
+// ../core/src/ops/computer.ts
+var MAX_COMPUTER_REPOSITORIES = 10;
+
 // ../core/src/ops/request.ts
 var REQUEST_TTL_MS = 14 * 24 * 60 * 60 * 1000;
 
@@ -16618,7 +16624,8 @@ var computerProfile = exports_external.looseObject({
   id: exports_external.string(),
   version: exports_external.number(),
   shell: exports_external.string(),
-  runtimes: exports_external.looseObject({ bun: exports_external.string() }),
+  runtimes: exports_external.looseObject({ bun: exports_external.string(), node: exports_external.string() }),
+  packageManagers: exports_external.looseObject({ pnpm: exports_external.string() }),
   tools: exports_external.array(exports_external.string()),
   recommendedEditingPrimitive: exports_external.string()
 });
@@ -17072,7 +17079,8 @@ var MCP_OUTPUT_SCHEMAS = {
     watching: exports_external.boolean().optional(),
     url: exports_external.string().optional(),
     versions: exports_external.array(jsonObject).optional(),
-    appBundles: exports_external.array(jsonObject).optional()
+    appBundles: exports_external.array(jsonObject).optional(),
+    usedByApps: exports_external.array(jsonObject).optional()
   }),
   artifact_get: exports_external.looseObject({
     id,
@@ -17083,6 +17091,7 @@ var MCP_OUTPUT_SCHEMAS = {
     version: exports_external.number().optional(),
     versions: exports_external.array(jsonObject).optional(),
     appBundles: exports_external.array(jsonObject),
+    usedByApps: exports_external.array(jsonObject),
     watching: exports_external.boolean(),
     url: exports_external.string()
   }),
@@ -17693,9 +17702,9 @@ var ACTION_DEFINITIONS = [
     description: "Replace your organization's sparse computer-default layer without allocating runtime state. Omitted/null values fall back to provider defaults; Space, Topic, and Thread layers may override individual fields.",
     inputSchema: {
       backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("default execution tier, or null to use worker-shell"),
-      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; use bun-typescript-v1 for the pinned Bun monorepo toolchain, or null to clear"),
-      setupScript: exports_external.string().nullable().optional().describe("optional setup run when materializing a reusable base, or null to clear"),
-      repositories: exports_external.array(exports_external.string()).nullable().optional().describe("default repositories, repeated --repositories; [] clears and null inherits provider default")
+      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, Bun 1.3.3, Node 26.5.1, and pnpm 10.33.0, or null to clear"),
+      setupScript: exports_external.string().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize, or null to clear"),
+      repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
     },
     surfaces: ["mcp", "cli"],
     toolset: "structure",
@@ -17708,9 +17717,9 @@ var ACTION_DEFINITIONS = [
     inputSchema: {
       spaceId: exports_external.string().describe("the Space, spc_…"),
       backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
-      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; use bun-typescript-v1 for the pinned Bun monorepo toolchain, or null to clear inherited profile"),
-      setupScript: exports_external.string().nullable().optional().describe("optional setup run when materializing a reusable base, or null to clear"),
-      repositories: exports_external.array(exports_external.string()).nullable().optional().describe("repository allowlist/default clones; [] clears and null inherits")
+      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, Bun 1.3.3, Node 26.5.1, and pnpm 10.33.0, or null to clear inherited profile"),
+      setupScript: exports_external.string().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize, or null to clear"),
+      repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
     },
     surfaces: ["mcp", "cli"],
     toolset: "structure",
@@ -17723,9 +17732,9 @@ var ACTION_DEFINITIONS = [
     inputSchema: {
       topicId: exports_external.string().describe("the Topic, top_…"),
       backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
-      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; use bun-typescript-v1 for the pinned Bun monorepo toolchain, or null to clear inherited profile"),
-      setupScript: exports_external.string().nullable().optional().describe("optional setup run, or null to clear"),
-      repositories: exports_external.array(exports_external.string()).nullable().optional().describe("repository allowlist/default clones; [] clears and null inherits")
+      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, Bun 1.3.3, Node 26.5.1, and pnpm 10.33.0, or null to clear inherited profile"),
+      setupScript: exports_external.string().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize"),
+      repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
     },
     surfaces: ["mcp", "cli"],
     toolset: "structure",
@@ -17738,9 +17747,9 @@ var ACTION_DEFINITIONS = [
     inputSchema: {
       threadId: exports_external.string().describe("the Thread, thr_…"),
       backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
-      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; use bun-typescript-v1 for the pinned Bun monorepo toolchain, or null to clear inherited profile"),
-      setupScript: exports_external.string().nullable().optional().describe("optional setup run, or null to clear"),
-      repositories: exports_external.array(exports_external.string()).nullable().optional().describe("repository allowlist/default clones; [] clears and null inherits")
+      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, Bun 1.3.3, Node 26.5.1, and pnpm 10.33.0, or null to clear inherited profile"),
+      setupScript: exports_external.string().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize"),
+      repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
     },
     surfaces: ["mcp", "cli"],
     toolset: "structure",
@@ -17760,7 +17769,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_open",
     title: "Open a Thread computer",
-    description: "Open or resume this Thread's project environment for filesystem or command work. Returns computerSessionId and, when a declared container profile is selected, its guaranteed shell/runtimes/tools/editing primitive; pass the session id unchanged to later Computer tools and to Contributions or responses produced from the work.",
+    description: "Open or resume this Thread's project environment for filesystem or command work. Every configured repository is re-authorized through its explicit GitHub connection; a fresh reusable base clones it with a request-scoped contents:read credential before strict setup runs, while a restore receives no credential. Returns computerSessionId and the selected profile contract; pass the session id unchanged to later Computer tools and cited work.",
     inputSchema: {
       threadId: exports_external.string().describe("the Arbor Thread whose stable computer to open, thr_…"),
       vcpus: exports_external.number().int().min(1).max(4).optional().describe("optional container vCPU request"),
@@ -19483,6 +19492,20 @@ function parseErrorDetails(value) {
     details.retryable = raw.retryable;
   if (typeof raw.phase === "string")
     details.phase = raw.phase;
+  if (raw.provider && typeof raw.provider === "object" && !Array.isArray(raw.provider)) {
+    const provider = raw.provider;
+    if (typeof provider.stage === "string" && provider.stage !== "") {
+      details.provider = {
+        stage: provider.stage,
+        ...typeof provider.command === "string" ? { command: provider.command } : {},
+        ...typeof provider.exitCode === "number" ? { exitCode: provider.exitCode } : {},
+        ...typeof provider.stdout === "string" ? { stdout: provider.stdout } : {},
+        ...typeof provider.stderr === "string" ? { stderr: provider.stderr } : {},
+        ...typeof provider.containerStarted === "boolean" ? { containerStarted: provider.containerStarted } : {},
+        ...typeof provider.repositoryMaterialized === "boolean" ? { repositoryMaterialized: provider.repositoryMaterialized } : {}
+      };
+    }
+  }
   return details;
 }
 function detailsForError(err) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.14.1",
+  "version": "0.14.3",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",
@@ -36,7 +36,7 @@
   "devDependencies": {
     "@arbor/actions": "workspace:*",
     "@arbor/core": "workspace:*",
-    "@types/node": "^22.19.19",
+    "@types/node": "^26.2.0",
     "tsx": "^4.20.6",
     "typescript": "^5.8.0",
     "vitest": "^4.1.4",