@lambdacurry/arbor 0.21.21 → 0.21.23

package/dist/arbor.js

@@ -1720,7 +1720,8 @@ var orgs = sqliteTable("orgs", {
   status: text("status").$type().notNull().default("active"),
   lockedAt: ts("locked_at"),
   lockedReason: text("locked_reason"),
-  systemKind: text("system_kind").unique()
+  systemKind: text("system_kind").unique(),
+  memberSpaceCreation: text("member_space_creation").$type().notNull().default("admins")
 });
 var profiles = sqliteTable("profiles", {
   id: text("id").primaryKey(),
@@ -2112,6 +2113,32 @@ var computerSnapshots = sqliteTable("computer_snapshots", {
   runIdx: index("computer_snapshots_run_idx").on(t.runId, t.createdAt),
   parentIdx: index("computer_snapshots_parent_idx").on(t.parentSnapshotId)
 }));
+var computerRunStarts = sqliteTable("computer_run_starts", {
+  id: text("id").primaryKey(),
+  computerId: text("computer_id").notNull().references(() => threadComputers.id),
+  threadId: text("thread_id").notNull().references(() => threads.id),
+  originatingSessionId: text("originating_session_id").notNull().references(() => computerSessions.id),
+  profileId: text("profile_id").notNull().references(() => profiles.id),
+  executionContextId: text("execution_context_id").notNull().references(() => executionContexts.id),
+  idempotencyKey: text("idempotency_key").notNull(),
+  idempotencyFingerprint: text("idempotency_fingerprint").notNull(),
+  mode: text("mode").$type().notNull(),
+  execution: text("execution").$type().notNull(),
+  label: text("label"),
+  checkpointLineageKey: text("checkpoint_lineage_key"),
+  checkpointExpectedCurrentSnapshotId: text("checkpoint_expected_current_snapshot_id").references(() => computerSnapshots.id),
+  checkpointParentSnapshotId: text("checkpoint_parent_snapshot_id").references(() => computerSnapshots.id),
+  snapshotId: text("snapshot_id").references(() => computerSnapshots.id),
+  runId: text("run_id").references(() => computerRuns.id),
+  createdAt: ts("created_at").notNull(),
+  updatedAt: ts("updated_at").notNull()
+}, (t) => ({
+  idempotencyIdx: uniqueIndex("computer_run_starts_idempotency_idx").on(t.threadId, t.profileId, t.idempotencyKey),
+  threadIdx: index("computer_run_starts_thread_idx").on(t.threadId, t.createdAt),
+  checkpointLineageIdx: uniqueIndex("computer_run_starts_checkpoint_lineage_idx").on(t.checkpointLineageKey),
+  snapshotIdx: index("computer_run_starts_snapshot_idx").on(t.snapshotId),
+  runIdx: uniqueIndex("computer_run_starts_run_idx").on(t.runId)
+}));
 var previews = sqliteTable("previews", {
   id: text("id").primaryKey(),
   threadId: text("thread_id").notNull().references(() => threads.id),
@@ -2296,7 +2323,8 @@ var artifacts = sqliteTable("artifacts", {
 }, (t) => ({
   statusIdx: index("artifacts_status_idx").on(t.status),
   tierIdx: index("artifacts_tier_idx").on(t.retrievalTier),
-  ownerIdx: index("artifacts_owner_idx").on(t.ownerProfileId)
+  ownerIdx: index("artifacts_owner_idx").on(t.ownerProfileId),
+  sourceThreadIdx: index("artifacts_source_thread_idx").on(t.sourceThreadId)
 }));
 var artifactLivePreviewSurfaces = sqliteTable("artifact_live_preview_surfaces", {
   artifactId: text("artifact_id").primaryKey().references(() => artifacts.id),
@@ -2770,7 +2798,27 @@ var watches = sqliteTable("watches", {
   watchUq: uniqueIndex("watches_watcher_target_uniq").on(t.watcherProfileId, t.targetType, t.targetId),
   watchTargetIdx: index("watches_target_idx").on(t.targetType, t.targetId)
 }));
+// ../core/src/ops/secret.ts
+var SECRET_PERMISSIONS = [
+  "create",
+  "metadata:read",
+  "value:write",
+  "rotate",
+  "bind",
+  "unbind",
+  "revoke",
+  "delete",
+  "plaintext:read"
+];
+var SECRET_ADMIN_PERMISSIONS = SECRET_PERMISSIONS.filter((permission) => permission !== "create" && permission !== "plaintext:read");
+var ORG_ADMIN_CONTAINMENT_PERMISSIONS = new Set([
+  "metadata:read",
+  "unbind",
+  "revoke"
+]);
+
 // ../core/src/ops/computer-run.ts
+var COMPUTER_RUN_START_CHECKPOINT_RESERVATION_STALE_MS = 12 * 60 * 1000;
 var TERMINAL = new Set(["finished", "failed", "cancelled"]);
 var RUN_LIFECYCLE_TYPES = new Set(["run.started", "run.finished", "run.failed", "run.cancelled"]);
 var COMPUTER_RUN_ACTIVITY_LABEL_MAX = 120;
@@ -2805,24 +2853,6 @@ var EMOJI_RE = new RegExp("^\\p{RGI_Emoji}$", "v");
 var BASE_MS = Date.parse("2026-07-20T15:00:00.000Z");
 // ../core/src/ops/agent-pairing.ts
 var PAIRING_TTL_MS = 15 * 60 * 1000;
-// ../core/src/ops/secret.ts
-var SECRET_PERMISSIONS = [
-  "create",
-  "metadata:read",
-  "value:write",
-  "rotate",
-  "bind",
-  "unbind",
-  "revoke",
-  "delete",
-  "plaintext:read"
-];
-var SECRET_ADMIN_PERMISSIONS = SECRET_PERMISSIONS.filter((permission) => permission !== "create" && permission !== "plaintext:read");
-var ORG_ADMIN_CONTAINMENT_PERMISSIONS = new Set([
-  "metadata:read",
-  "unbind",
-  "revoke"
-]);
 // ../core/src/ops/preview.ts
 var PREVIEW_ENTRY_MIME = "text/html; charset=utf-8";
 var PREVIEW_MAX_BYTES = 2 * 1024 * 1024;
@@ -18324,7 +18354,9 @@ var MCP_OUTPUT_SCHEMAS = {
     ]).optional()
   }),
   computer_run_start: exports_external.object({
+    runStartId: id,
     runId: id,
+    replayed: exports_external.boolean(),
     execution: exports_external.enum(["shared", "isolated"]),
     durability: computerRunDurabilitySummary,
     status: exports_external.string()
@@ -18718,7 +18750,9 @@ var OUTPUT_SHAPERS = {
     const run = record2(result.run) ?? {};
     const durability = record2(run.durability) ?? {};
     return defined([
+      ["runStartId", result.runStartId],
       ["runId", run.runId],
+      ["replayed", result.replayed],
       ["execution", run.execution],
       [
         "durability",
@@ -19670,12 +19704,13 @@ var ACTION_DEFINITIONS = [
   {
     name: "computer_run_start",
     title: "Start a run",
-    description: "Start one bounded unit of work inside an opened Thread Computer. Write Runs default to isolated; if isolated provisioning fails after the durable Run exists, the error returns its runId and points to computer_run_receipt so the caller can inspect the terminal reason without listing or guessing.",
+    description: "Start one bounded unit of work inside an opened Thread Computer with a caller-owned idempotency key so response loss can recover zero-or-one Run creation without listing. Write Runs default isolated; post-creation provisioning failures keep returning the exact runId and computer_run_receipt recovery.",
     inputSchema: {
       computerSessionId: exports_external.string().describe("the computerSessionId returned by computer_open, cms_…"),
       mode: exports_external.enum(["read", "write"]).describe("write for mutable work; read for shared inspection"),
       execution: exports_external.enum(["shared", "isolated"]).optional().describe("write Run placement; defaults to isolated. Use shared only for intentional live collaboration on the Thread Computer"),
-      label: exports_external.string().max(120).optional().describe("short factual label for this unit of work")
+      label: exports_external.string().max(120).optional().describe("short factual label for this unit of work"),
+      idempotencyKey: exports_external.string().min(1).max(200).describe("stable key for this ONE logical Run-start request; reuse it unchanged for retries")
     },
     surfaces: ["computer-mcp", "computer-cli"],
     toolset: "loop",
@@ -20580,7 +20615,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "space_create",
     title: "Create a space",
-    description: "Create a top-level Space for a new collaboration area; org owner/admin only, with open/private visibility and optional seeded members (agents join directly, humans receive invites). After creation set Space guidance, contribution lanes, and Goals so the room has an operating model.",
+    description: "Create a top-level Space for a new collaboration area — open/private visibility plus optional seeded members (agents join directly, humans get invites); you become its first admin. Org owner/admins always can; other members only when their org enables member space creation.",
     inputSchema: {
       title: exports_external.string().min(1).describe("the space title"),
       purpose: exports_external.string().optional().describe("optional one-line purpose"),
@@ -20641,6 +20676,17 @@ var ACTION_DEFINITIONS = [
     toolset: "admin",
     run: forward("human.invite")
   },
+  {
+    name: "set_member_space_creation",
+    title: "Set who may create spaces",
+    description: "Set your org's space-creation policy (AD-052 rev): 'admins' (default — org owner/admin only) or 'members' (every active org member may create spaces they administer). Owner/admin only. Spaces remain visible/membership-governed exactly as before; this only moves who may stand one up.",
+    inputSchema: {
+      value: exports_external.enum(["admins", "members"]).describe("the new creation policy for the org")
+    },
+    surfaces: ["cli"],
+    toolset: "admin",
+    run: forward("org.setMemberSpaceCreation")
+  },
   {
     name: "space_get",
     title: "Read a space",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.21.21",
+  "version": "0.21.23",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",