@lambdacurry/arbor 0.14.0 → 0.14.1

package/dist/arbor.js

@@ -1801,6 +1801,52 @@ var artifactVersions = sqliteTable("artifact_versions", {
 }, (t) => ({
   artifactVersionUq: uniqueIndex("artifact_versions_artifact_version_uq").on(t.artifactId, t.version)
 }));
+var secrets = sqliteTable("secrets", {
+  id: text("id").primaryKey(),
+  orgId: text("org_id").notNull().references(() => orgs.id),
+  name: text("name").notNull(),
+  description: text("description").notNull().default(""),
+  lifecycle: text("lifecycle").$type().notNull().default("active"),
+  currentVersionId: text("current_version_id"),
+  currentVersion: integer("current_version").notNull().default(0),
+  metadataRevision: integer("metadata_revision").notNull().default(0),
+  createdByProfileId: text("created_by_profile_id").notNull().references(() => profiles.id),
+  createdExecutionContextId: text("created_execution_context_id").notNull().references(() => executionContexts.id),
+  createdAt: ts("created_at").notNull(),
+  revokedAt: ts("revoked_at")
+}, (t) => ({
+  orgNameUq: uniqueIndex("secrets_org_name_uq").on(t.orgId, t.name),
+  orgLifecycleIdx: index("secrets_org_lifecycle_idx").on(t.orgId, t.lifecycle, t.createdAt)
+}));
+var secretVersions = sqliteTable("secret_versions", {
+  id: text("id").primaryKey(),
+  secretId: text("secret_id").notNull().references(() => secrets.id),
+  version: integer("version").notNull(),
+  ciphertext: text("ciphertext").notNull(),
+  iv: text("iv").notNull(),
+  keyId: text("key_id").notNull(),
+  algorithm: text("algorithm").notNull().default("AES-GCM-256"),
+  createdByProfileId: text("created_by_profile_id").notNull().references(() => profiles.id),
+  createdExecutionContextId: text("created_execution_context_id").notNull().references(() => executionContexts.id),
+  createdAt: ts("created_at").notNull()
+}, (t) => ({
+  secretVersionUq: uniqueIndex("secret_versions_secret_version_uq").on(t.secretId, t.version)
+}));
+var secretGrants = sqliteTable("secret_grants", {
+  id: text("id").primaryKey(),
+  orgId: text("org_id").notNull().references(() => orgs.id),
+  secretId: text("secret_id").references(() => secrets.id),
+  scopeKey: text("scope_key").notNull(),
+  profileId: text("profile_id").notNull().references(() => profiles.id),
+  permissions: text("permissions", { mode: "json" }).$type().notNull(),
+  grantedByProfileId: text("granted_by_profile_id").notNull().references(() => profiles.id),
+  grantedExecutionContextId: text("granted_execution_context_id").notNull().references(() => executionContexts.id),
+  createdAt: ts("created_at").notNull(),
+  updatedAt: ts("updated_at").notNull()
+}, (t) => ({
+  scopeProfileUq: uniqueIndex("secret_grants_scope_profile_uq").on(t.orgId, t.scopeKey, t.profileId),
+  profileIdx: index("secret_grants_profile_idx").on(t.profileId, t.orgId)
+}));
 var appBundles = sqliteTable("app_bundles", {
   id: text("id").primaryKey(),
   artifactVersionId: text("artifact_version_id").notNull().references(() => artifactVersions.id),
@@ -1864,6 +1910,23 @@ var apps = sqliteTable("apps", {
   spaceIdx: index("apps_space_idx").on(t.spaceId, t.lifecycle, t.createdAt),
   orgIdx: index("apps_org_idx").on(t.orgId, t.access, t.discovery)
 }));
+var secretBindings = sqliteTable("secret_bindings", {
+  id: text("id").primaryKey(),
+  secretId: text("secret_id").notNull().references(() => secrets.id),
+  targetType: text("target_type").notNull().default("app"),
+  appId: text("app_id").notNull().references(() => apps.id),
+  bindingName: text("binding_name").notNull(),
+  status: text("status").$type().notNull().default("active"),
+  createdByProfileId: text("created_by_profile_id").notNull().references(() => profiles.id),
+  createdExecutionContextId: text("created_execution_context_id").notNull().references(() => executionContexts.id),
+  createdAt: ts("created_at").notNull(),
+  updatedByProfileId: text("updated_by_profile_id").notNull().references(() => profiles.id),
+  updatedExecutionContextId: text("updated_execution_context_id").notNull().references(() => executionContexts.id),
+  updatedAt: ts("updated_at").notNull()
+}, (t) => ({
+  appNameUq: uniqueIndex("secret_bindings_app_name_uq").on(t.appId, t.bindingName),
+  secretIdx: index("secret_bindings_secret_idx").on(t.secretId, t.status)
+}));
 var appDeployments = sqliteTable("app_deployments", {
   id: text("id").primaryKey(),
   appId: text("app_id").notNull().references(() => apps.id),
@@ -2049,6 +2112,19 @@ var PREVIEW_MIME_TYPES = new Set([
 // ../core/src/ops/app.ts
 var APP_MAX_MODULE_BYTES = 10 * 1024 * 1024;
 var APP_MAX_ASSET_BYTES = 25 * 1024 * 1024;
+// ../core/src/ops/secret.ts
+var SECRET_PERMISSIONS = [
+  "create",
+  "metadata:read",
+  "value:write",
+  "rotate",
+  "bind",
+  "unbind",
+  "revoke",
+  "delete",
+  "plaintext:read"
+];
+var SECRET_ADMIN_PERMISSIONS = SECRET_PERMISSIONS.filter((permission) => permission !== "create" && permission !== "plaintext:read");
 // ../core/src/queries/lane-match.ts
 var STOP_WORDS = new Set("a an and are as at be by for from has have here how i in is it me of on or our the their they this to was what when where which who will with you your".split(" "));
 // ../core/src/queries/activity.ts
@@ -16714,6 +16790,31 @@ var app2 = exports_external.looseObject({
   url: exports_external.string().optional()
 });
 var deployment = exports_external.looseObject({ id, appId: id, bundleId: id, status: exports_external.string() });
+var secretMetadata = exports_external.looseObject({
+  id,
+  orgId: id,
+  name: exports_external.string(),
+  description: exports_external.string(),
+  lifecycle: exports_external.enum(["active", "revoked"]),
+  currentVersionId: nullableString,
+  currentVersion: exports_external.number().int().min(0),
+  metadataRevision: exports_external.number().int().min(0),
+  createdByProfileId: id,
+  createdExecutionContextId: id,
+  createdAt: timestamp,
+  revokedAt: nullableString
+});
+var secretPermission = exports_external.enum([
+  "create",
+  "metadata:read",
+  "value:write",
+  "rotate",
+  "bind",
+  "unbind",
+  "revoke",
+  "delete",
+  "plaintext:read"
+]);
 var treeThread = exports_external.looseObject({
   id,
   title: exports_external.string(),
@@ -16995,6 +17096,30 @@ var MCP_OUTPUT_SCHEMAS = {
     status: exports_external.literal("deleted"),
     retrievalTier: exports_external.string()
   }),
+  secrets: exports_external.looseObject({
+    result: exports_external.array(secretMetadata).optional(),
+    secret: secretMetadata.optional(),
+    bindings: exports_external.array(exports_external.looseObject({
+      id,
+      targetType: exports_external.literal("app"),
+      appId: id,
+      bindingName: exports_external.string(),
+      status: exports_external.enum(["active", "unbound"]),
+      updatedAt: timestamp
+    })).optional(),
+    grants: exports_external.array(exports_external.looseObject({ profileId: id, permissions: exports_external.array(secretPermission) })).optional(),
+    id: id.optional(),
+    secretId: id.nullable().optional(),
+    version: exports_external.number().int().min(1).optional(),
+    rotated: exports_external.boolean().optional(),
+    profileId: id.optional(),
+    permissions: exports_external.array(secretPermission).optional(),
+    revoked: exports_external.boolean().optional(),
+    targetType: exports_external.literal("app").optional(),
+    appId: id.optional(),
+    bindingName: exports_external.string().optional(),
+    unbound: exports_external.boolean().optional()
+  }),
   app_list: exports_external.object({ result: exports_external.array(app2) }),
   app_get: exports_external.looseObject({
     app: app2,
@@ -17271,6 +17396,7 @@ var MCP_TOOL_ANNOTATIONS = {
   artifact_get: readOnly,
   artifact_transition: additive,
   artifact_delete: destructive,
+  secrets: destructive,
   app_get: readOnly,
   app_list: readOnly,
   app_deployment_get: readOnly,
@@ -18843,6 +18969,178 @@ var ACTION_DEFINITIONS = [
     toolset: "artifacts",
     run: (ex, input) => ex.call("artifact.transition", { ...input, to: "deleted" })
   },
+  {
+    name: "secrets",
+    title: "Manage encrypted Secrets",
+    description: "Create, authorize, version, rotate, bind, and revoke first-class Arbor Secrets without revealing plaintext. set and rotate never echo submitted values; bind exposes the current version only to the named App runtime binding, while identity administration and runtime consumption remain separate. Plaintext reveal is not shipped in v1.",
+    inputSchema: {
+      verb: exports_external.enum([
+        "list",
+        "get",
+        "create",
+        "set",
+        "rotate",
+        "grant",
+        "revoke_grant",
+        "bind",
+        "unbind",
+        "revoke"
+      ]).describe("which Secret operation to perform"),
+      secretId: exports_external.string().optional().describe("Secret id; omit only when granting/revoking org-scoped create permission"),
+      name: exports_external.string().optional().describe("create: lowercase Secret name"),
+      description: exports_external.string().max(500).optional().describe("create: non-sensitive purpose"),
+      value: exports_external.string().min(1).optional().describe("set/rotate: plaintext submitted once and never returned or recorded"),
+      profileId: exports_external.string().optional().describe("grant/revoke_grant: authorized human or agent"),
+      permissions: exports_external.array(exports_external.enum([
+        "create",
+        "metadata:read",
+        "value:write",
+        "rotate",
+        "bind",
+        "unbind",
+        "revoke",
+        "delete",
+        "plaintext:read"
+      ])).optional().describe("grant: explicit permissions; plaintext:read is reserved for a future dedicated reveal path and normal grants reject it"),
+      appId: exports_external.string().optional().describe("bind: target App, app_…"),
+      bindingName: exports_external.string().optional().describe("bind: uppercase Dynamic Worker env binding, e.g. API_TOKEN"),
+      bindingId: exports_external.string().optional().describe("unbind: binding id, sbd_…")
+    },
+    surfaces: ["mcp"],
+    toolset: "apps",
+    run: dispatch({
+      list: "secret.list",
+      get: "secret.get",
+      create: "secret.create",
+      set: "secret.set",
+      rotate: "secret.rotate",
+      grant: "secret.grant",
+      revoke_grant: "secret.revoke_grant",
+      bind: "secret.bind",
+      unbind: "secret.unbind",
+      revoke: "secret.revoke"
+    })
+  },
+  {
+    name: "secret_list",
+    title: "List authorized Secrets",
+    description: "List only Secret metadata the current identity may read. Values, ciphertext, and encryption metadata are never projected.",
+    inputSchema: {},
+    surfaces: ["cli"],
+    toolset: "apps",
+    run: forward("secret.list")
+  },
+  {
+    name: "secret_get",
+    title: "Read Secret metadata",
+    description: "Read one Secret's lifecycle, current version number, identity grants, and App bindings. This never returns plaintext, ciphertext, IVs, or key identifiers.",
+    inputSchema: { secretId: exports_external.string().describe("the Secret, sec_…") },
+    surfaces: ["cli"],
+    toolset: "apps",
+    run: forward("secret.get")
+  },
+  {
+    name: "secret_create",
+    title: "Create a Secret",
+    description: "Create first-class Secret metadata without material; an Org owner/admin or identity with org-scoped create permission may do this. Follow with secret_set to write its first encrypted version.",
+    inputSchema: {
+      name: exports_external.string().min(1).max(63).describe("lowercase stable name"),
+      description: exports_external.string().max(500).optional().describe("non-sensitive purpose")
+    },
+    surfaces: ["cli"],
+    toolset: "apps",
+    run: forward("secret.create")
+  },
+  {
+    name: "secret_set",
+    title: "Set a Secret value",
+    description: "Write the first encrypted SecretVersion. The submitted value is never echoed, logged, audited, or placed in provenance; use secret_rotate after the first version.",
+    inputSchema: {
+      secretId: exports_external.string().describe("the empty Secret, sec_…"),
+      value: exports_external.string().min(1).describe("plaintext submitted once and never returned")
+    },
+    surfaces: ["cli"],
+    toolset: "apps",
+    run: forward("secret.set")
+  },
+  {
+    name: "secret_rotate",
+    title: "Rotate a Secret value",
+    description: "Append a new encrypted SecretVersion and make every active App binding consume it. Rotation permission is independent of value-write, bind, and plaintext-read permission; the submitted value is never returned.",
+    inputSchema: {
+      secretId: exports_external.string().describe("the active Secret, sec_…"),
+      value: exports_external.string().min(1).describe("new plaintext submitted once and never returned")
+    },
+    surfaces: ["cli"],
+    toolset: "apps",
+    run: forward("secret.rotate")
+  },
+  {
+    name: "secret_grant",
+    title: "Grant Secret access",
+    description: "Replace one human or agent's explicit Secret permissions; omit secretId only to grant org-scoped create. Plaintext-read is reserved for a future dedicated reveal path and this command rejects it; runtime App consumption is controlled by bindings, not this identity grant.",
+    inputSchema: {
+      secretId: exports_external.string().optional().describe("Secret scope; omit only for org-scoped create permission"),
+      profileId: exports_external.string().describe("authorized human or agent profile"),
+      permissions: exports_external.array(exports_external.enum([
+        "create",
+        "metadata:read",
+        "value:write",
+        "rotate",
+        "bind",
+        "unbind",
+        "revoke",
+        "delete",
+        "plaintext:read"
+      ]))
+    },
+    surfaces: ["cli"],
+    toolset: "apps",
+    run: forward("secret.grant")
+  },
+  {
+    name: "secret_revoke_grant",
+    title: "Revoke Secret access",
+    description: "Remove one human or agent's explicit Secret grant. This changes administration authority only; an App binding remains a separate runtime-consumption grant.",
+    inputSchema: {
+      secretId: exports_external.string().optional().describe("Secret scope; omit for org create permission"),
+      profileId: exports_external.string().describe("human or agent profile")
+    },
+    surfaces: ["cli"],
+    toolset: "apps",
+    run: forward("secret.revoke_grant")
+  },
+  {
+    name: "secret_bind",
+    title: "Bind a Secret to an App",
+    description: "Authorize one App workload to consume the active Secret version through a provider-native Dynamic Worker env binding. The actor needs Secret bind authority and access to the App's Space. Binding permission never grants plaintext read to the acting identity, and no material enters bundles, deployments, receipts, or Events.",
+    inputSchema: {
+      secretId: exports_external.string().describe("active Secret with a value, sec_…"),
+      appId: exports_external.string().describe("target App, app_…"),
+      bindingName: exports_external.string().describe("uppercase runtime name, e.g. API_TOKEN")
+    },
+    surfaces: ["cli"],
+    toolset: "apps",
+    run: forward("secret.bind")
+  },
+  {
+    name: "secret_unbind",
+    title: "Unbind an App Secret",
+    description: "Remove one App workload's runtime consumption binding without revoking the Secret or changing identity administration grants. Read secret_get for the binding id.",
+    inputSchema: { bindingId: exports_external.string().describe("the App binding, sbd_…") },
+    surfaces: ["cli"],
+    toolset: "apps",
+    run: forward("secret.unbind")
+  },
+  {
+    name: "secret_revoke",
+    title: "Revoke a Secret",
+    description: "Move a Secret to revoked so every active workload binding fails closed while durable metadata, encrypted versions, attribution, and audit history remain. Permanent deletion and plaintext reveal are not shipped in v1.",
+    inputSchema: { secretId: exports_external.string().describe("the Secret, sec_…") },
+    surfaces: ["cli"],
+    toolset: "apps",
+    run: forward("secret.revoke")
+  },
   {
     name: "apps",
     title: "List visible Apps",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.14.0",
+  "version": "0.14.1",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",