@lambdacurry/arbor 0.16.4 → 0.17.1

package/dist/arbor.js

@@ -1880,6 +1880,8 @@ var secrets = sqliteTable("secrets", {
   orgId: text("org_id").notNull().references(() => orgs.id),
   name: text("name").notNull(),
   description: text("description").notNull().default(""),
+  ownerType: text("owner_type").$type().notNull().default("organization"),
+  ownerId: text("owner_id"),
   lifecycle: text("lifecycle").$type().notNull().default("active"),
   currentVersionId: text("current_version_id"),
   currentVersion: integer("current_version").notNull().default(0),
@@ -1889,7 +1891,9 @@ var secrets = sqliteTable("secrets", {
   createdAt: ts("created_at").notNull(),
   revokedAt: ts("revoked_at")
 }, (t) => ({
-  orgNameUq: uniqueIndex("secrets_org_name_uq").on(t.orgId, t.name),
+  orgNameUq: uniqueIndex("secrets_org_owner_name_uq").on(t.orgId, t.name).where(sql`${t.ownerType} = 'organization'`),
+  profileNameUq: uniqueIndex("secrets_profile_name_uq").on(t.orgId, t.ownerId, t.name).where(sql`${t.ownerType} = 'profile'`),
+  ownerIdx: index("secrets_owner_idx").on(t.orgId, t.ownerType, t.ownerId),
   orgLifecycleIdx: index("secrets_org_lifecycle_idx").on(t.orgId, t.lifecycle, t.createdAt)
 }));
 var secretVersions = sqliteTable("secret_versions", {
@@ -2183,6 +2187,24 @@ var EMOJI_RE = new RegExp("^\\p{RGI_Emoji}$", "v");
 var BASE_MS = Date.parse("2026-07-20T15:00:00.000Z");
 // ../core/src/ops/agent-pairing.ts
 var PAIRING_TTL_MS = 15 * 60 * 1000;
+// ../core/src/ops/secret.ts
+var SECRET_PERMISSIONS = [
+  "create",
+  "metadata:read",
+  "value:write",
+  "rotate",
+  "bind",
+  "unbind",
+  "revoke",
+  "delete",
+  "plaintext:read"
+];
+var SECRET_ADMIN_PERMISSIONS = SECRET_PERMISSIONS.filter((permission) => permission !== "create" && permission !== "plaintext:read");
+var ORG_ADMIN_CONTAINMENT_PERMISSIONS = new Set([
+  "metadata:read",
+  "unbind",
+  "revoke"
+]);
 // ../core/src/ops/preview.ts
 var PREVIEW_ENTRY_MIME = "text/html; charset=utf-8";
 var PREVIEW_MAX_BYTES = 2 * 1024 * 1024;
@@ -2203,20 +2225,6 @@ var PREVIEW_MIME_TYPES = new Set([
   "font/woff",
   "font/woff2"
 ]);
-// ../core/src/ops/secret.ts
-var SECRET_PERMISSIONS = [
-  "create",
-  "metadata:read",
-  "value:write",
-  "rotate",
-  "bind",
-  "unbind",
-  "revoke",
-  "delete",
-  "plaintext:read"
-];
-var SECRET_ADMIN_PERMISSIONS = SECRET_PERMISSIONS.filter((permission) => permission !== "create" && permission !== "plaintext:read");
-
 // ../core/src/ops/app.ts
 var APP_MAX_MODULE_BYTES = 10 * 1024 * 1024;
 var APP_MAX_ASSET_BYTES = 25 * 1024 * 1024;
@@ -17959,7 +17967,7 @@ var ACTION_DEFINITIONS = [
     description: "Replace your organization's sparse computer-default layer without allocating runtime state. Omitted/null values fall back to provider defaults; Space, Topic, and Thread layers may override individual fields.",
     inputSchema: {
       backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("default execution tier, or null to use worker-shell"),
-      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, Bun 1.3.3, Node 26.5.1, and pnpm 10.33.0, or null to clear"),
+      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, Bun 1.3.3, bunx, Node 26.5.1, pnpm 10.33.0, and ripgrep (rg), or null to clear"),
       setupScript: exports_external.string().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize, or null to clear"),
       repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
     },
@@ -17974,7 +17982,7 @@ var ACTION_DEFINITIONS = [
     inputSchema: {
       spaceId: exports_external.string().describe("the Space, spc_…"),
       backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
-      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, Bun 1.3.3, Node 26.5.1, and pnpm 10.33.0, or null to clear inherited profile"),
+      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, Bun 1.3.3, bunx, Node 26.5.1, pnpm 10.33.0, and ripgrep (rg), or null to clear inherited profile"),
       setupScript: exports_external.string().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize, or null to clear"),
       repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
     },
@@ -17989,7 +17997,7 @@ var ACTION_DEFINITIONS = [
     inputSchema: {
       topicId: exports_external.string().describe("the Topic, top_…"),
       backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
-      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, Bun 1.3.3, Node 26.5.1, and pnpm 10.33.0, or null to clear inherited profile"),
+      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, Bun 1.3.3, bunx, Node 26.5.1, pnpm 10.33.0, and ripgrep (rg), or null to clear inherited profile"),
       setupScript: exports_external.string().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize"),
       repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
     },
@@ -18004,7 +18012,7 @@ var ACTION_DEFINITIONS = [
     inputSchema: {
       threadId: exports_external.string().describe("the Thread, thr_…"),
       backend: exports_external.enum(["worker-shell", "container"]).nullable().optional().describe("override execution tier, or null to inherit"),
-      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, Bun 1.3.3, Node 26.5.1, and pnpm 10.33.0, or null to clear inherited profile"),
+      containerProfile: exports_external.string().nullable().optional().describe("logical container profile; bun-typescript-v1 guarantees Bash, Git, Bun 1.3.3, bunx, Node 26.5.1, pnpm 10.33.0, and ripgrep (rg), or null to clear inherited profile"),
       setupScript: exports_external.string().nullable().optional().describe("optional strict Bash setup run after connected repositories materialize"),
       repositories: exports_external.array(exports_external.string()).max(MAX_COMPUTER_REPOSITORIES).nullable().optional().describe("connected GitHub repositories to materialize into a fresh reusable base and allow for later Git calls; [] clears and null inherits")
     },
@@ -19317,7 +19325,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "secrets",
     title: "Manage encrypted Secrets",
-    description: "Create, authorize, version, rotate, bind, and revoke first-class Arbor Secrets without revealing plaintext. set and rotate never echo submitted values; bind exposes the current version only to the named App runtime binding, while identity administration and runtime consumption remain separate. Plaintext reveal is not shipped in v1.",
+    description: "Create, authorize, version, rotate, bind, and revoke first-class Arbor Secrets without revealing plaintext. set and rotate never echo submitted values; bind exposes the current version only to the named App runtime binding, while identity administration and runtime consumption remain separate. A Secret is owned by the Organization or by one Profile; ownership carries administration authority and never implies runtime access, which always needs an explicit grant or binding. Deactivating an owning Profile revokes what it owns, so bound App workloads fail closed. Plaintext reveal is not shipped in v1.",
     inputSchema: {
       verb: exports_external.enum([
         "list",
@@ -19334,6 +19342,8 @@ var ACTION_DEFINITIONS = [
       secretId: exports_external.string().optional().describe("Secret id; omit only when granting/revoking org-scoped create permission"),
       name: exports_external.string().optional().describe("create: lowercase Secret name"),
       description: exports_external.string().max(500).optional().describe("create: non-sensitive purpose"),
+      owner: exports_external.enum(["organization", "profile"]).optional().describe("create: who owns the Secret (default organization). profile keeps administration with one identity; names are unique per owner"),
+      ownerProfileId: exports_external.string().optional().describe("create + owner=profile: the owning identity, defaulting to you; assigning another Profile is an Org owner/admin action"),
       value: exports_external.string().min(1).optional().describe("set/rotate: plaintext submitted once and never returned or recorded"),
       profileId: exports_external.string().optional().describe("grant/revoke_grant: authorized human or agent"),
       permissions: exports_external.array(exports_external.enum([
@@ -19387,10 +19397,12 @@ var ACTION_DEFINITIONS = [
   {
     name: "secret_create",
     title: "Create a Secret",
-    description: "Create first-class Secret metadata without material; an Org owner/admin or identity with org-scoped create permission may do this. Follow with secret_set to write its first encrypted version.",
+    description: "Create first-class Secret metadata without material; an Org owner/admin or identity with org-scoped create permission may do this. Owner defaults to the Organization; owner=profile keeps administration with one identity, and an Org owner/admin then holds only metadata read, unbind, and revoke over it. Ownership never grants runtime access. Follow with secret_set to write its first encrypted version.",
     inputSchema: {
-      name: exports_external.string().min(1).max(63).describe("lowercase stable name"),
-      description: exports_external.string().max(500).optional().describe("non-sensitive purpose")
+      name: exports_external.string().min(1).max(63).describe("lowercase stable name, unique per owner"),
+      description: exports_external.string().max(500).optional().describe("non-sensitive purpose"),
+      owner: exports_external.enum(["organization", "profile"]).optional().describe("who owns it (default organization); deactivating a profile owner revokes what it owns"),
+      ownerProfileId: exports_external.string().optional().describe("owner=profile: the owning identity, defaulting to you; assigning another Profile is an Org owner/admin action")
     },
     surfaces: ["cli"],
     toolset: "apps",
@@ -19423,7 +19435,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "secret_grant",
     title: "Grant Secret access",
-    description: "Replace one human or agent's explicit Secret permissions; omit secretId only to grant org-scoped create. Plaintext-read is reserved for a future dedicated reveal path and this command rejects it; runtime App consumption is controlled by bindings, not this identity grant.",
+    description: "Replace one human or agent's explicit Secret permissions; omit secretId only to grant org-scoped create. An Organization-owned Secret is administered by an Org owner/admin or its creator; a profile-owned Secret is administered only by its owner, so no one else can grant themselves access to it. Plaintext-read is reserved for a future dedicated reveal path and this command rejects it; runtime App consumption is controlled by bindings, not this identity grant.",
     inputSchema: {
       secretId: exports_external.string().optional().describe("Secret scope; omit only for org-scoped create permission"),
       profileId: exports_external.string().describe("authorized human or agent profile"),
@@ -19458,7 +19470,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "secret_bind",
     title: "Bind a Secret to an App",
-    description: "Authorize one App workload to consume the active Secret version through a provider-native Dynamic Worker env binding. The actor needs Secret bind authority and access to the App's Space. Binding permission never grants plaintext read to the acting identity, and no material enters bundles, deployments, receipts, or Events.",
+    description: "Authorize one App workload to consume the active Secret version through a provider-native Dynamic Worker env binding. The actor needs Secret bind authority — ownership of a profile-owned Secret, or an explicit bind grant — plus access to the App's Space. Binding permission never grants plaintext read to the acting identity, and no material enters bundles, deployments, receipts, or Events; it does put the value in reach of that App's code, so bind your own Secret only into an App whose deployers you trust.",
     inputSchema: {
       secretId: exports_external.string().describe("active Secret with a value, sec_…"),
       appId: exports_external.string().describe("target App, app_…"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.16.4",
+  "version": "0.17.1",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",