@lambdacurry/arbor 0.22.22 → 0.22.24

package/dist/arbor.js

@@ -2,7 +2,7 @@
 // package.json
 var package_default = {
   name: "@lambdacurry/arbor",
-  version: "0.22.22",
+  version: "0.22.24",
   description: "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   keywords: [
     "agents",
@@ -6712,6 +6712,69 @@ var computerRunStarts = sqliteTable("computer_run_starts", {
   snapshotIdx: index("computer_run_starts_snapshot_idx").on(t.snapshotId),
   runIdx: uniqueIndex("computer_run_starts_run_idx").on(t.runId)
 }));
+var computerOutputCaptures = sqliteTable("computer_output_captures", {
+  id: text("id").primaryKey(),
+  runId: text("run_id").notNull().references(() => computerRuns.id),
+  processId: text("process_id").notNull(),
+  computerId: text("computer_id").notNull().references(() => threadComputers.id),
+  threadId: text("thread_id").notNull().references(() => threads.id),
+  computerSessionId: text("computer_session_id").notNull().references(() => computerSessions.id),
+  runProfileId: text("run_profile_id").notNull().references(() => profiles.id),
+  runExecutionContextId: text("run_execution_context_id").notNull().references(() => executionContexts.id),
+  sessionProfileId: text("session_profile_id").notNull().references(() => profiles.id),
+  sessionExecutionContextId: text("session_execution_context_id").notNull().references(() => executionContexts.id),
+  execution: text("execution").$type().notNull(),
+  processState: text("process_state").$type().notNull(),
+  processActivityKind: text("process_activity_kind").$type(),
+  processExecution: text("process_execution").$type(),
+  providerGeneration: integer2("provider_generation"),
+  workspaceGeneration: text("workspace_generation"),
+  expectedCurrentSnapshotId: text("expected_current_snapshot_id").references(() => computerSnapshots.id),
+  terminalOutcome: text("terminal_outcome").$type(),
+  exitCode: integer2("exit_code"),
+  timedOut: integer2("timed_out", { mode: "boolean" }),
+  durationMs: integer2("duration_ms"),
+  status: text("status").$type().notNull().default("pending"),
+  stdoutBytes: integer2("stdout_bytes").notNull().default(0),
+  stderrBytes: integer2("stderr_bytes").notNull().default(0),
+  requestedStdoutBytes: integer2("requested_stdout_bytes"),
+  requestedStderrBytes: integer2("requested_stderr_bytes"),
+  pageIntentDigest: text("page_intent_digest"),
+  intentStdoutBytes: integer2("intent_stdout_bytes"),
+  intentStderrBytes: integer2("intent_stderr_bytes"),
+  intentTerminalOutcome: text("intent_terminal_outcome").$type(),
+  intentExitCode: integer2("intent_exit_code"),
+  intentTimedOut: integer2("intent_timed_out", { mode: "boolean" }),
+  intentDurationMs: integer2("intent_duration_ms"),
+  lastPublishedIntentDigest: text("last_published_intent_digest"),
+  cleanupToken: text("cleanup_token"),
+  cleanupClaimedAt: ts("cleanup_claimed_at"),
+  completedAt: ts("completed_at"),
+  expiresAt: ts("expires_at"),
+  updatedAt: ts("updated_at").notNull(),
+  createdAt: ts("created_at").notNull()
+}, (t) => ({
+  runProcessIdx: uniqueIndex("computer_output_captures_run_process_idx").on(t.runId, t.processId),
+  computerIdx: index("computer_output_captures_computer_idx").on(t.computerId, t.status),
+  pendingIdx: index("computer_output_captures_pending_idx").on(t.status, t.updatedAt),
+  expiresIdx: index("computer_output_captures_expires_idx").on(t.status, t.expiresAt)
+}));
+var computerOutputChunks = sqliteTable("computer_output_chunks", {
+  id: text("id").primaryKey(),
+  captureId: text("capture_id").notNull().references(() => computerOutputCaptures.id),
+  stream: text("stream").$type().notNull(),
+  startOffset: integer2("start_offset").notNull(),
+  size: integer2("size").notNull(),
+  blobKey: text("blob_key").notNull(),
+  sha256: text("sha256").notNull(),
+  pageIntentDigest: text("page_intent_digest").notNull(),
+  verifiedAt: ts("verified_at"),
+  deletedAt: ts("deleted_at"),
+  createdAt: ts("created_at").notNull()
+}, (t) => ({
+  rangeIdx: uniqueIndex("computer_output_chunks_range_idx").on(t.captureId, t.stream, t.startOffset),
+  blobKeyIdx: uniqueIndex("computer_output_chunks_blob_key_idx").on(t.blobKey)
+}));
 var previews = sqliteTable("previews", {
   id: text("id").primaryKey(),
   threadId: text("thread_id").notNull().references(() => threads.id),
@@ -7548,6 +7611,8 @@ var assigneeColumns = {
   color: profiles.color,
   emoji: profiles.emoji
 };
+// ../core/src/ops/computer-output.ts
+var COMPUTER_OUTPUT_DEFAULT_STALE_MS = 24 * 60 * 60 * 1000;
 // ../core/src/ops/computer-recovery.ts
 var COMPUTER_RECOVERY_GRANT_MAX_TTL_MS = 24 * 60 * 60 * 1000;
 // ../core/src/ops/preview.ts
@@ -7844,7 +7909,7 @@ var computerRunFinishAssessment = looseObject({
   state: _enum(["safe", "blocked", "unknown"]),
   requiresDiscard: boolean2(),
   repositories: array(looseObject({
-    repository: string2(),
+    repository: string2().nullable(),
     path: string2(),
     startHead: string2().nullable(),
     currentHead: string2().nullable(),
@@ -7885,7 +7950,7 @@ var computerAgentBrief = looseObject({
 });
 var computerRunGitStart = looseObject({
   repositories: array(looseObject({
-    repository: string2(),
+    repository: string2().nullable(),
     path: string2(),
     git: computerRunGitState.nullable()
   }))
@@ -9071,7 +9136,7 @@ var MCP_OUTPUT_SCHEMAS = {
     durablyFinishable: boolean2(),
     finishAssessment: computerRunFinishAssessment,
     repositories: array(looseObject({
-      repository: string2(),
+      repository: string2().nullable(),
       path: string2(),
       start: computerRunGitState.nullable(),
       current: computerRunGitState.nullable(),
@@ -9163,6 +9228,7 @@ var MCP_OUTPUT_SCHEMAS = {
   computer_process_read: looseObject({
     processId: string2(),
     status: string2(),
+    outputRetention: object({ state: literal("preserved"), expiresAt: timestamp }).optional(),
     timedOut: boolean2().optional(),
     endedAt: timestamp.nullable().optional(),
     durationMs: number2().int().min(0).nullable().optional(),
@@ -9563,6 +9629,7 @@ var OUTPUT_SHAPERS = {
   computer_process_read: (result) => defined([
     ["processId", result.processId],
     ["status", result.status],
+    ["outputRetention", omitNull(result.outputRetention)],
     ["timedOut", omitNull(result.timedOut)],
     ["stdout", result.stdout],
     ["stderr", result.stderr],
@@ -9949,13 +10016,13 @@ Arbor's MCP is the collaboration and durable-knowledge surface. Configure, autho
 
 Run \`arbor help\` (or read the MCP tool list) for the exact command/flags — those stay generated from the live action surface, so they're always current.`;
 var ARBOR_SKILL_MARKDOWN = renderArborSkill(ORIENTATION);
-var COMPUTER_ORIENTATION = `Long Computer work returns a handle — do not hold one tool call for a full test or build. \`computer_exec\` runs a command; if the result is still running or output is truncated, take \`processId\`/\`nextCursor\` and continue with \`computer_process_read\`. Do not chain \`pnpm test && pnpm build\` in one exec; split steps or pass \`background:true\`. The CLI polls only while the process is silent unless \`--no-wait\`; it returns the first bounded output page instead of concatenating continuation pages into one agent context.
+var COMPUTER_ORIENTATION = `Long Computer work returns a processId handle — do not hold one tool call for a full test or build. \`computer_exec\` runs a command; if the result is still running, observe it with \`computer_process_read\`; read a truncated continuation only when you need more output. Finish and suspend preserve unread terminal output internally, with original process IDs/cursors recoverable for 30 days. Do not chain \`pnpm test && pnpm build\` in one exec; split steps or pass \`background:true\`. The CLI polls only while the process is silent unless \`--no-wait\`; it returns the first bounded output page instead of concatenating continuation pages into one agent context.
 
 Arbor Computer is the complete software execution platform attached to Arbor's durable collaboration graph. It configures project environments, executes and verifies work, packages and releases Apps, and preserves reviewable evidence; it does not schedule agents or replace Arbor collaboration.
 
 ${ARBOR_FEEDBACK_GUIDANCE}
 
-1. ORIENT, CONFIGURE, AND AUTHORIZE. Start with provider-free get_computer(threadId) to inspect the effective inherited recipe, repository authorization, compatibility, recoverySafety, and durable lineage without contacting execution. Use set_organization_computer, set_space_computer, set_topic_computer, or set_thread_computer only when the corresponding complete sparse layer must be replaced; use github_repositories then github_connect_repository to authorize repositories at the narrowest scope that should inherit them. If github_repositories looks stale, github_refresh_installation reconciles the cached inventory from GitHub. computer_run_start(threadId, mode) is the front door: it attaches durable identity itself and starts an isolated write Run from the Thread's base snapshot without booting the parent. Each returned repository entry includes verified root instruction pointers when that repo has an AGENTS.md: read surfaced repository instructions before substantial edits or verification, then check for a nearer nested AGENTS.md once the target path is known. Repo-local instructions/scripts/config beat guessed formatter, test, lint, or build commands.
+1. ORIENT, CONFIGURE, AND AUTHORIZE. Start with provider-free get_computer(threadId) to inspect the effective inherited recipe, repository authorization, compatibility, recoverySafety, and durable lineage without contacting execution. Use set_organization_computer, set_space_computer, set_topic_computer, or set_thread_computer only when the corresponding complete sparse layer must be replaced; use github_connect_repository with a known installed id, exact owner/name, or canonical GitHub URL, or use github_repositories when browsing, to authorize repositories at the narrowest scope that should inherit them. If github_repositories looks stale, github_refresh_installation reconciles the cached inventory from GitHub. computer_run_start(threadId, mode) is the front door: it attaches durable identity itself and starts an isolated write Run from the Thread's base snapshot without booting the parent. Each returned repository entry includes verified root instruction pointers when that repo has an AGENTS.md: read surfaced repository instructions before substantial edits or verification, then check for a nearer nested AGENTS.md once the target path is known. Repo-local instructions/scripts/config beat guessed formatter, test, lint, or build commands.
 2. READ THE CAPABILITIES CARD, NOT THE BACKEND. runId is the one address: every runtime tool takes it, and the computerSessionId a Run carries is legacy input. computer_status(runId) describes the live PARENT Thread Computer behind a shared Run; it does not establish isolated Run activity, so use computer_run_receipt(runId) and computer_process_read for Run-owned work. Command-line utilities, including Git and package managers, run through computer_exec; check unfamiliar binaries with command -v.
 3. ONE RUN PER TASK. A write Run defaults to an isolated execution environment with its own filesystem, processes, ports, and /tmp while preserving /workspace paths; a read Run shares the parent. Pass runId to Run-aware tools. If a response is lost, recover the durable operation/process identity from computer_run_receipt and read it before retrying. computer_process_read and computer_process_terminate settle a provider-absent current-generation process from exact evidence; computer_run_suspend performs that bounded settlement internally and never replays unknown work. A still-active process returns a retryable busy state; an unknown current-generation mutation fail-closes. An isolated local commit or Preview is not Git publication; push coherent work and prove it with computer_repo_work_status before computer_run_finish destroys the final placement. discard=true with outcome failed or cancelled is the explicit choice to abandon unknown or proven non-durable work without replaying it.
 4. CHECKPOINT COMPLETE UNITS THROUGH THE RUN. computer_run_suspend(runId) checkpoints an intermediate complete unit — an isolated Run publishes its exact workspace and releases its Sandbox, a shared Run advances the parent lineage — and computer_run_finish(runId) makes the final one; finishing the last active shared Run also stops the parent. An isolated Run Preview is durable review output, not adoption or a checkpoint. The internal provider-handle publication operations are not agent tools.
@@ -10109,9 +10176,9 @@ var ACTION_DEFINITIONS = [
   {
     name: "github_connect_repository",
     title: "Connect a GitHub repository",
-    description: "Connect or disconnect a listed GitHub repository at organization, Space, Topic, or Thread scope so matching descendant Computers may materialize it. The caller must manage that scope, GitHub installation coverage remains a separate gate, and get_computer shows the effective grant.",
+    description: "Connect or disconnect an installed GitHub repository at organization, Space, Topic, or Thread scope; pass its installed id, exact owner/name, or canonical GitHub URL, so browsing the inventory is optional. The caller must manage that scope, GitHub installation coverage remains a separate gate, and get_computer shows the effective grant.",
     inputSchema: {
-      repositoryId: string2().describe("installed repository id from github_repositories, ghr_…"),
+      repositoryId: string2().describe("installed repository id from github_repositories (ghr_…), exact owner/name, or canonical https://github.com/owner/name URL"),
       scope: _enum(["organization", "space", "topic", "thread"]).describe("the Arbor scope that may use this repository's context; topic is the durable choice for a project every Thread under it develops"),
       scopeId: string2().describe("id matching the selected scope"),
       connected: boolean2().describe("true to connect; false to disconnect recoverably")
@@ -10597,7 +10664,7 @@ var ACTION_DEFINITIONS = [
     inputSchema: {
       backend: _enum(["worker-shell", "container"]).nullable().optional().describe("default execution tier, or null to use worker-shell"),
       containerProfile: string2().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, GitHub CLI (gh), Bun 1.4.2, bunx, Node 26.5.1, pnpm 10.33.0, Python 3.13.15 (python/python3), jq, and ripgrep (rg), or null to clear"),
-      setupScript: string2().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize, or null to clear"),
+      setupScript: string2().nullable().optional().describe("optional strict Bash setup for a fresh base after repositories materialize; install scoped tools in /workspace/.local/bin so exec finds them and snapshots retain them; null clears"),
       repositories: array(string2()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
     },
     surfaces: ["computer-mcp", "cli"],
@@ -10612,7 +10679,7 @@ var ACTION_DEFINITIONS = [
       spaceId: string2().describe("the Space, spc_…"),
       backend: _enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
       containerProfile: string2().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, GitHub CLI (gh), Bun 1.4.2, bunx, Node 26.5.1, pnpm 10.33.0, Python 3.13.15 (python/python3), jq, and ripgrep (rg), or null to clear inherited profile"),
-      setupScript: string2().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize, or null to clear"),
+      setupScript: string2().nullable().optional().describe("optional strict Bash setup for a fresh base after repositories materialize; install scoped tools in /workspace/.local/bin so exec finds them and snapshots retain them; null clears"),
       repositories: array(string2()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
     },
     surfaces: ["computer-mcp", "cli"],
@@ -10627,7 +10694,7 @@ var ACTION_DEFINITIONS = [
       topicId: string2().describe("the Topic, top_…"),
       backend: _enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
       containerProfile: string2().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, GitHub CLI (gh), Bun 1.4.2, bunx, Node 26.5.1, pnpm 10.33.0, Python 3.13.15 (python/python3), jq, and ripgrep (rg), or null to clear inherited profile"),
-      setupScript: string2().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize"),
+      setupScript: string2().nullable().optional().describe("optional strict Bash setup for a fresh base after repositories materialize; install scoped tools in /workspace/.local/bin so exec finds them and snapshots retain them"),
       repositories: array(string2()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits"),
       ...LIVE_PREVIEW_CONFIG_INPUT
     },
@@ -10643,7 +10710,7 @@ var ACTION_DEFINITIONS = [
       threadId: string2().describe("the Thread, thr_…"),
       backend: _enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
       containerProfile: string2().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, GitHub CLI (gh), Bun 1.4.2, bunx, Node 26.5.1, pnpm 10.33.0, Python 3.13.15 (python/python3), jq, and ripgrep (rg), or null to clear inherited profile"),
-      setupScript: string2().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize"),
+      setupScript: string2().nullable().optional().describe("optional strict Bash setup for a fresh base after repositories materialize; install scoped tools in /workspace/.local/bin so exec finds them and snapshots retain them"),
       repositories: array(string2()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits"),
       ...LIVE_PREVIEW_CONFIG_INPUT
     },
@@ -10712,9 +10779,9 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_run_suspend",
     title: "Suspend a run",
-    description: "Checkpoint an active WRITE Run for an external wait (the same runId resumes next): an isolated Run publishes its exact workspace and releases its Sandbox, a shared Run checkpoints the parent lineage. Performs bounded process read/terminate/settlement internally: suspends when settled, returns retryable busy if a process is active, or fail-closes on unknown mutation and never replays unknown work.",
+    description: "Checkpoint an active WRITE Run for an external wait: isolated Runs publish their exact workspace and release the Sandbox; shared Runs checkpoint the parent, and the same runId resumes next. Preserves unread terminal output internally for 30 days; no caller drain is required, larger captures use bounded same-Run retries, and active/unknown work or failed preservation blocks release without replay.",
     inputSchema: {
-      runId: string2().describe("the active isolated WRITE Run to suspend, run_…")
+      runId: string2().describe("the active WRITE Run to suspend, run_…")
     },
     surfaces: ["computer-mcp", "computer-cli"],
     toolset: "loop",
@@ -10723,7 +10790,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_repo_work_status",
     title: "Inspect repository finish state",
-    description: "Inspect an active isolated WRITE Run's Git publication, PR, CI, and review before retry, wait, or finish. Returns repository state (e.g. ci-pending) plus runDisposition.action computer_run_suspend when published work waits on CI/review/human authorization — the same runId resumes; dirty, unpublished, unknown-publication, failing, or changes-requested work keeps the local nextAction.",
+    description: "Inspect workspace Git worktrees, including manual clones, for publication, PR, CI, and review in an active isolated WRITE Run. Returns repository state and runDisposition.action computer_run_suspend when published work waits on CI/review/human authorization, resuming the same runId; dirty, missing, unpublished, or unverified work keeps a local nextAction.",
     inputSchema: {
       runId: string2().describe("the active isolated WRITE Run to inspect, run_…")
     },
@@ -10734,7 +10801,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_run_finish",
     title: "Finish a run",
-    description: "Finish a Run with an explicit terminal outcome; ordinary finish refuses unsettled operations and proven non-durable isolated WRITE work, and the last shared Run's finish also stops the parent. To abandon an unknown or non-durable disposable Run without replaying it, pass discard=true with outcome failed or cancelled; the receipt keeps the evidence and repeating the outcome is a safe no-op.",
+    description: "Finish a Run with unread terminal output preserved for 30 days without caller drain; active/unknown work, failed preservation, incomplete Git discovery, or unsafe worktrees block release. The last shared Run stops the parent; to abandon an unknown or non-durable disposable Run, pass discard=true with outcome failed or cancelled and retry safely from its receipt.",
     inputSchema: {
       runId: string2().describe("the runId returned by computer_run_start, run_…"),
       outcome: _enum(["finished", "failed", "cancelled"]).optional().describe("terminal outcome; defaults to finished"),
@@ -10773,7 +10840,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_exec",
     title: "Run a command",
-    description: "Run one bounded shell operation in a Run (pass runId) with ambient GitHub authorization; timeout kills the process. If the command is running or a truncated output page is returned, use processId with computer_process_read and nextCursor when present; after a missed isolated response use computer_run_receipt.operations[].operationId with computer_process_read instead of repeating the mutation.",
+    description: "Run a shell command in runId with ambient GitHub authorization and /workspace/.local/bin on PATH; timeout kills the process. Observe running work with computer_process_read, use nextCursor for a truncated output page when needed, and finish without draining; after a missed response use computer_run_receipt.operations[].operationId with computer_process_read instead of repeating the mutation.",
     inputSchema: {
       computerSessionId: string2().optional().describe("legacy alternative to runId: a computerSessionId on that Computer, cms_…; required unless runId is supplied"),
       command: string2().min(1).describe("the shell command to run"),
@@ -10792,12 +10859,12 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_process_read",
     title: "Read a background process",
-    description: "Read one provider-owned process from computer_exec, including a recovered Run operation, using nextCursor for incremental output. Successful Run reads durably retain the latest provider observation; a later timeout stays unknown and unsafe while returning it with age, and Arbor settles the durable operation only from terminal or exact provider-absence proof.",
+    description: "Read original process output using nextCursor; preserved output stays readable for 30 days after preservation, including repeated cursors after finish/suspend, without provider wake. Live reads retain the latest observation; a later timeout remains unknown/unsafe with its age, and Arbor settles the durable operation only from terminal or exact provider-absence proof.",
     inputSchema: {
       computerSessionId: string2().optional().describe("legacy alternative to runId: a computerSessionId on that Computer, cms_…; required unless runId is supplied"),
       runId: string2().optional().describe("the Run that owns this process, if it was started inside a Run"),
       processId: string2().min(1).describe("the processId returned by background exec, or matching computer_run_receipt.operations[].operationId for recovered foreground Run work, proc_…"),
-      cursor: string2().optional().describe("continue after nextCursor from the prior process read; omit for a small latest tail"),
+      cursor: string2().optional().describe("continue after nextCursor from the prior result; omit to read from the beginning"),
       maxBytes: number2().int().min(1024).max(65536).optional().describe("maximum combined output bytes to return; default 4,096, opt up only when needed")
     },
     surfaces: ["computer-mcp", "computer-cli"],
@@ -11658,7 +11725,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "service_register",
     title: "Register a Computer lifecycle service",
-    description: "Register a persistent service identity for Currybox Computer lifecycle maintenance and mint its API key (shown ONCE). Human owner/admin CLI setup only. The credential is restricted to computer.get + computer.lifecycle_runs + computer.append_run_lifecycle + computer.checkpoint + computer.suspend_run + computer.resume_run + computer.reconcile_runs and to the Spaces listed here; store it as the Currybox control plane's Arbor credential.",
+    description: "Register a persistent service identity for Currybox Computer lifecycle maintenance and mint its API key (shown ONCE). Human owner/admin CLI setup only. The credential is restricted to computer.get + computer.lifecycle_runs + computer.append_run_lifecycle + computer.checkpoint + computer.preserve_run_output + computer.suspend_run + computer.resume_run + computer.reconcile_runs and to the Spaces listed here; store it as the Currybox control plane's Arbor credential.",
     inputSchema: {
       displayName: string2().min(1).describe("the service display name, e.g. Currybox lifecycle service"),
       spaceIds: array(string2().min(1)).min(1).describe("Spaces whose Thread computers the service may maintain")
@@ -12918,6 +12985,7 @@ function codeForStatus(status) {
     case 403:
       return "FORBIDDEN";
     case 404:
+    case 410:
       return "NOT_FOUND";
     case 409:
       return "CONFLICT";
@@ -12978,6 +13046,12 @@ function parseErrorDetails(value) {
     details.operationId = raw.operationId;
   if (typeof raw.processId === "string")
     details.processId = raw.processId;
+  if (raw.outputRetention && typeof raw.outputRetention === "object") {
+    const retention = raw.outputRetention;
+    if (retention.state === "expired" && typeof retention.expiresAt === "string") {
+      details.outputRetention = { state: "expired", expiresAt: retention.expiresAt };
+    }
+  }
   if (raw.commandExecution === "not-routed" || raw.commandExecution === "unknown") {
     details.commandExecution = raw.commandExecution;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.22.22",
+  "version": "0.22.24",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",