@lambdacurry/arbor 0.14.6 → 0.15.0

package/dist/arbor.js

@@ -1625,6 +1625,7 @@ var computerReprovisions = sqliteTable("computer_reprovisions", {
   restorationOutcome: text("restoration_outcome").$type().notNull().default("not_needed"),
   restoredSnapshotId: text("restored_snapshot_id"),
   failureCode: text("failure_code"),
+  failureDetail: text("failure_detail"),
   createdAt: ts("created_at").notNull(),
   completedAt: ts("completed_at")
 }, (t) => ({
@@ -17328,6 +17329,7 @@ var MCP_OUTPUT_SCHEMAS = {
     operation: exports_external.literal("clone"),
     repository: exports_external.string(),
     dir: exports_external.string(),
+    credential: exports_external.enum(["caller", "arbor-managed"]),
     branch: exports_external.string().optional(),
     head: exports_external.string().optional(),
     refs: exports_external.array(exports_external.string()).optional()
@@ -17337,6 +17339,7 @@ var MCP_OUTPUT_SCHEMAS = {
     operation: exports_external.literal("fetch"),
     repository: exports_external.string(),
     dir: exports_external.string(),
+    credential: exports_external.enum(["caller", "arbor-managed"]),
     branch: exports_external.string().optional(),
     head: exports_external.string().optional(),
     fetchHead: exports_external.string().optional(),
@@ -17347,6 +17350,7 @@ var MCP_OUTPUT_SCHEMAS = {
     operation: exports_external.literal("pull"),
     repository: exports_external.string(),
     dir: exports_external.string(),
+    credential: exports_external.enum(["caller", "arbor-managed"]),
     branch: exports_external.string().optional(),
     head: exports_external.string().optional(),
     before: exports_external.string().optional(),
@@ -17359,6 +17363,7 @@ var MCP_OUTPUT_SCHEMAS = {
     operation: exports_external.literal("push"),
     repository: exports_external.string(),
     dir: exports_external.string(),
+    credential: exports_external.enum(["caller", "arbor-managed"]),
     branch: exports_external.string().optional(),
     head: exports_external.string().optional(),
     before: exports_external.string().optional(),
@@ -17983,13 +17988,13 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_sync",
     title: "Sync an allowed repository",
-    description: "Fetch, fast-forward pull, or push the checked-out branch of a cloned recipe repository using the working collaborator's GitHub token just in time. The lightweight Computer fixes the allowlisted GitHub URL, never force-pushes or deletes refs, and neither stores nor returns the token.",
+    description: "Fetch, fast-forward pull, or push the checked-out branch of a cloned recipe repository. OMIT githubToken to refresh a repository named in this computer's effective recipe with Arbor's own managed credential — Arbor rechecks the repository connection and mints a request-scoped one-repository read credential server-side, so a restored computer can reach current history with no token of yours. Managed refresh covers fetch and pull; push writes to GitHub and still takes your just-in-time collaborator token. The lightweight Computer fixes the allowlisted GitHub URL, never force-pushes or deletes refs, and neither stores nor returns either credential.",
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
       repository: exports_external.string().describe("allowed owner/repository slug already cloned by computer_clone"),
       operation: exports_external.enum(["fetch", "pull", "push"]).describe("network operation to perform"),
-      githubToken: exports_external.string().min(1).describe("short-lived GitHub token supplied by the caller"),
-      githubUsername: exports_external.string().optional().describe("GitHub username; defaults to x-access-token")
+      githubToken: exports_external.string().min(1).optional().describe("short-lived collaborator GitHub token; omit for fetch/pull to use Arbor's managed recipe credential, required for push"),
+      githubUsername: exports_external.string().optional().describe("GitHub username for a supplied githubToken; defaults to x-access-token")
     },
     surfaces: ["computer-cli"],
     toolset: "loop",
@@ -17998,12 +18003,12 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_fetch",
     title: "Fetch an allowed repository",
-    description: "Fetch remote refs for a cloned recipe repository without changing its checked-out branch or any remote ref. The collaborator's GitHub token is spent only on this call and is neither stored nor returned.",
+    description: `Fetch remote refs for a cloned recipe repository without changing its checked-out branch or any remote ref. OMIT githubToken and Arbor refreshes it for you: it rechecks that the repository is in this computer's effective recipe and still connected, mints a request-scoped one-repository read credential server-side, spends it on this fetch alone, and returns credential: "arbor-managed" — this is the way a RESTORED computer, which deliberately holds no credential, catches up with the remote. Supply githubToken instead to fetch as the collaborator. Neither credential is stored or returned.`,
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
       repository: exports_external.string().describe("allowed owner/repository slug already cloned"),
-      githubToken: exports_external.string().min(1).describe("short-lived GitHub token supplied by the caller"),
-      githubUsername: exports_external.string().optional().describe("GitHub username; defaults to x-access-token")
+      githubToken: exports_external.string().min(1).optional().describe("short-lived collaborator GitHub token; omit to use Arbor's managed recipe credential"),
+      githubUsername: exports_external.string().optional().describe("GitHub username for a supplied githubToken; defaults to x-access-token")
     },
     surfaces: ["computer-mcp"],
     toolset: "loop",
@@ -18012,12 +18017,12 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_pull",
     title: "Fast-forward an allowed repository",
-    description: "Fetch and fast-forward the checked-out branch of a cloned recipe repository; divergent history is rejected. The collaborator's GitHub token is spent only on this call and is neither stored nor returned.",
+    description: "Fetch and fast-forward the checked-out branch of a cloned recipe repository; divergent history, a dirty working tree, and anything needing a merge are rejected rather than forced. OMIT githubToken and Arbor pulls with its own managed recipe credential after rechecking the repository connection — the way a restored computer reaches current history. Supply githubToken instead to pull as the collaborator. Neither credential is stored or returned.",
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
       repository: exports_external.string().describe("allowed owner/repository slug already cloned"),
-      githubToken: exports_external.string().min(1).describe("short-lived GitHub token supplied by the caller"),
-      githubUsername: exports_external.string().optional().describe("GitHub username; defaults to x-access-token")
+      githubToken: exports_external.string().min(1).optional().describe("short-lived collaborator GitHub token; omit to use Arbor's managed recipe credential"),
+      githubUsername: exports_external.string().optional().describe("GitHub username for a supplied githubToken; defaults to x-access-token")
     },
     surfaces: ["computer-mcp"],
     toolset: "loop",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.14.6",
+  "version": "0.15.0",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",