@lambdacurry/arbor 0.21.22 → 0.21.23

package/dist/arbor.js

@@ -1720,7 +1720,8 @@ var orgs = sqliteTable("orgs", {
   status: text("status").$type().notNull().default("active"),
   lockedAt: ts("locked_at"),
   lockedReason: text("locked_reason"),
-  systemKind: text("system_kind").unique()
+  systemKind: text("system_kind").unique(),
+  memberSpaceCreation: text("member_space_creation").$type().notNull().default("admins")
 });
 var profiles = sqliteTable("profiles", {
   id: text("id").primaryKey(),
@@ -2322,7 +2323,8 @@ var artifacts = sqliteTable("artifacts", {
 }, (t) => ({
   statusIdx: index("artifacts_status_idx").on(t.status),
   tierIdx: index("artifacts_tier_idx").on(t.retrievalTier),
-  ownerIdx: index("artifacts_owner_idx").on(t.ownerProfileId)
+  ownerIdx: index("artifacts_owner_idx").on(t.ownerProfileId),
+  sourceThreadIdx: index("artifacts_source_thread_idx").on(t.sourceThreadId)
 }));
 var artifactLivePreviewSurfaces = sqliteTable("artifact_live_preview_surfaces", {
   artifactId: text("artifact_id").primaryKey().references(() => artifacts.id),
@@ -2796,6 +2798,25 @@ var watches = sqliteTable("watches", {
   watchUq: uniqueIndex("watches_watcher_target_uniq").on(t.watcherProfileId, t.targetType, t.targetId),
   watchTargetIdx: index("watches_target_idx").on(t.targetType, t.targetId)
 }));
+// ../core/src/ops/secret.ts
+var SECRET_PERMISSIONS = [
+  "create",
+  "metadata:read",
+  "value:write",
+  "rotate",
+  "bind",
+  "unbind",
+  "revoke",
+  "delete",
+  "plaintext:read"
+];
+var SECRET_ADMIN_PERMISSIONS = SECRET_PERMISSIONS.filter((permission) => permission !== "create" && permission !== "plaintext:read");
+var ORG_ADMIN_CONTAINMENT_PERMISSIONS = new Set([
+  "metadata:read",
+  "unbind",
+  "revoke"
+]);
+
 // ../core/src/ops/computer-run.ts
 var COMPUTER_RUN_START_CHECKPOINT_RESERVATION_STALE_MS = 12 * 60 * 1000;
 var TERMINAL = new Set(["finished", "failed", "cancelled"]);
@@ -2832,24 +2853,6 @@ var EMOJI_RE = new RegExp("^\\p{RGI_Emoji}$", "v");
 var BASE_MS = Date.parse("2026-07-20T15:00:00.000Z");
 // ../core/src/ops/agent-pairing.ts
 var PAIRING_TTL_MS = 15 * 60 * 1000;
-// ../core/src/ops/secret.ts
-var SECRET_PERMISSIONS = [
-  "create",
-  "metadata:read",
-  "value:write",
-  "rotate",
-  "bind",
-  "unbind",
-  "revoke",
-  "delete",
-  "plaintext:read"
-];
-var SECRET_ADMIN_PERMISSIONS = SECRET_PERMISSIONS.filter((permission) => permission !== "create" && permission !== "plaintext:read");
-var ORG_ADMIN_CONTAINMENT_PERMISSIONS = new Set([
-  "metadata:read",
-  "unbind",
-  "revoke"
-]);
 // ../core/src/ops/preview.ts
 var PREVIEW_ENTRY_MIME = "text/html; charset=utf-8";
 var PREVIEW_MAX_BYTES = 2 * 1024 * 1024;
@@ -20612,7 +20615,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "space_create",
     title: "Create a space",
-    description: "Create a top-level Space for a new collaboration area; org owner/admin only, with open/private visibility and optional seeded members (agents join directly, humans receive invites). After creation set Space guidance, contribution lanes, and Goals so the room has an operating model.",
+    description: "Create a top-level Space for a new collaboration area — open/private visibility plus optional seeded members (agents join directly, humans get invites); you become its first admin. Org owner/admins always can; other members only when their org enables member space creation.",
     inputSchema: {
       title: exports_external.string().min(1).describe("the space title"),
       purpose: exports_external.string().optional().describe("optional one-line purpose"),
@@ -20673,6 +20676,17 @@ var ACTION_DEFINITIONS = [
     toolset: "admin",
     run: forward("human.invite")
   },
+  {
+    name: "set_member_space_creation",
+    title: "Set who may create spaces",
+    description: "Set your org's space-creation policy (AD-052 rev): 'admins' (default — org owner/admin only) or 'members' (every active org member may create spaces they administer). Owner/admin only. Spaces remain visible/membership-governed exactly as before; this only moves who may stand one up.",
+    inputSchema: {
+      value: exports_external.enum(["admins", "members"]).describe("the new creation policy for the org")
+    },
+    surfaces: ["cli"],
+    toolset: "admin",
+    run: forward("org.setMemberSpaceCreation")
+  },
   {
     name: "space_get",
     title: "Read a space",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.21.22",
+  "version": "0.21.23",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",