@lambdacurry/arbor 0.24.24 → 0.24.26

package/dist/arbor.js

@@ -8666,6 +8666,29 @@ var githubUserAuthorizations = sqliteTable("github_user_authorizations", {
   githubUserIdx: index("github_user_authorizations_github_user_idx").on(t.githubUserId, t.status),
   orgIdx: index("github_user_authorizations_org_idx").on(t.orgId, t.status)
 }));
+var githubAgentConnections = sqliteTable("github_agent_connections", {
+  id: text("id").primaryKey(),
+  profileId: text("profile_id").notNull().references(() => profiles.id),
+  orgId: text("org_id").notNull().references(() => orgs.id),
+  status: text("status").$type().notNull().default("active"),
+  access: text("access").$type().notNull().default("read"),
+  app: text("app").$type().notNull().default("arbor"),
+  repositories: text("repositories", { mode: "json" }).$type().notNull().default([]),
+  githubAppId: text("github_app_id"),
+  githubInstallationId: text("github_installation_id"),
+  privateKeySecretId: text("private_key_secret_id").references(() => secrets.id),
+  githubAppSlug: text("github_app_slug"),
+  githubAccountLogin: text("github_account_login"),
+  createdByProfileId: text("created_by_profile_id").notNull().references(() => profiles.id),
+  updatedByProfileId: text("updated_by_profile_id").notNull().references(() => profiles.id),
+  createdExecutionContextId: text("created_execution_context_id").notNull().references(() => executionContexts.id),
+  updatedExecutionContextId: text("updated_execution_context_id").notNull().references(() => executionContexts.id),
+  createdAt: ts("created_at").notNull(),
+  updatedAt: ts("updated_at").notNull()
+}, (t) => ({
+  profileIdx: uniqueIndex("github_agent_connections_profile_idx").on(t.profileId),
+  orgIdx: index("github_agent_connections_org_idx").on(t.orgId, t.status)
+}));
 var githubRepositories = sqliteTable("github_repositories", {
   id: text("id").primaryKey(),
   installationId: text("installation_id").notNull().references(() => githubInstallations.id),
@@ -9460,6 +9483,7 @@ var secrets = sqliteTable("secrets", {
   ownerType: text("owner_type").$type().notNull().default("organization"),
   ownerId: text("owner_id"),
   lifecycle: text("lifecycle").$type().notNull().default("active"),
+  reservedFor: text("reserved_for").$type(),
   currentVersionId: text("current_version_id"),
   currentVersion: integer2("current_version").notNull().default(0),
   metadataRevision: integer2("metadata_revision").notNull().default(0),
@@ -10309,8 +10333,19 @@ var BASE_MS = Date.parse("2026-07-20T15:00:00.000Z");
 var PAIRING_TTL_MS = 15 * 60 * 1000;
 // ../core/src/ops/space-visit.ts
 var VISIT_THROTTLE_MS = 5 * 60 * 1000;
-// ../core/src/ops/computer-checkpoint-operations.ts
-var CHECKPOINT_OPERATION_TTL_SECONDS = 7 * 24 * 60 * 60;
+// ../core/src/retrieval/fts.ts
+var recallFts = sqliteTable("recall_fts", {
+  id: text("id"),
+  body: text("body"),
+  org: text("org"),
+  space: text("space"),
+  topic: text("topic"),
+  thread: text("thread")
+});
+
+// ../core/src/ops/quick-search.ts
+var QUICK_EXPAND_LIMIT = 20;
+var QUICK_CANDIDATE_LIMIT = QUICK_EXPAND_LIMIT + 2;
 // ../core/src/ops/package-cache.ts
 var PACKAGE_CACHE_PENDING_TTL_MS = 15 * 60 * 1000;
 var PACKAGE_CACHE_FINAL_TTL_MS = 30 * 24 * 60 * 60 * 1000;
@@ -10410,16 +10445,6 @@ function normalizeProtectedIngress(entries) {
 var STOP_WORDS = new Set("a an and are as at be by for from has have here how i in is it me of on or our the their they this to was what when where which who will with you your".split(" "));
 // ../core/src/queries/activity.ts
 var targetAuthor = alias(profiles, "target_author");
-// ../core/src/retrieval/fts.ts
-var recallFts = sqliteTable("recall_fts", {
-  id: text("id"),
-  body: text("body"),
-  org: text("org"),
-  space: text("space"),
-  topic: text("topic"),
-  thread: text("thread")
-});
-
 // ../core/src/retrieval/vector-lease.ts
 var LEASE_MS = 5 * 60000;
 
@@ -11451,6 +11476,16 @@ function buildOutputSchemas() {
       connected: boolean2(),
       inheritedBySiblingThreads: boolean2()
     }),
+    github_agent_connection: looseObject({
+      agentProfileId: id,
+      connected: boolean2(),
+      access: _enum(["read", "review", "write"]).nullable(),
+      app: looseObject({ kind: _enum(["arbor", "custom"]) }).nullable().describe("the signing App; custom adds its id, installation, slug, account, and key Secret id"),
+      githubActor: string2().nullable().describe("the GitHub bot account pushes and pull requests show, e.g. currybot[bot]"),
+      repositories: array(looseObject({ githubRepositoryId: string2(), fullName: string2() })).describe("the admin allowlist; empty when not connected"),
+      connectedAt: timestamp.nullable(),
+      updatedAt: timestamp.nullable()
+    }),
     transition_thread: looseObject({ status: string2() }),
     request: looseObject({
       requestId: id,
@@ -13055,6 +13090,7 @@ var MCP_TOOL_ANNOTATIONS = {
   github_repositories: readOnly,
   github_refresh_installation: openWorld,
   github_connect_repository: idempotent,
+  github_agent_connection: readOnly,
   computer_reprovision: destructiveIdempotent,
   computer_run_start: idempotent,
   computer_run_suspend: idempotent,
@@ -13435,7 +13471,7 @@ var COMPUTER_ORIENTATION_SECTIONS = [
   },
   {
     brief: "5. Git and gh run through `computer_exec` once authorized; fetch before trusting remote state.",
-    full: `5. GIT AND GITHUB ARE ORDINARY COMMANDS AFTER AUTHORIZATION. Clone, fetch, pull, push, and gh run through computer_exec using a connected human's just-in-time ambient GitHub identity. Credentials never enter argv, workspace files, Git config, checkpoints, Events, logs, or receipts. A restored Computer deliberately keeps the checkout age of its snapshot, so fetch/pull before trusting remote state.`
+    full: `5. GIT AND GITHUB ARE ORDINARY COMMANDS AFTER AUTHORIZATION. Clone, fetch, pull, push, and gh run through computer_exec using just-in-time ambient GitHub credentials: a connected human's own GitHub identity, or for an agent an admin connected (github_agent_connection), a one-hour App token for repositories on the admin's allowlist that the Computer declares and the Thread connects — connecting another repository yourself adds nothing to it. Credentials never enter argv, workspace files, Git config, checkpoints, Events, logs, or receipts. A restored Computer deliberately keeps the checkout age of its snapshot, so fetch/pull before trusting remote state.`
   },
   {
     brief: "6. `computer_verify` captures a URL, `computer_publish_preview` keeps static output, `computer_export` saves files to the Thread.",
@@ -13675,6 +13711,35 @@ var ACTION_DEFINITIONS = [
     toolset: "admin",
     run: forward("github.user_disconnect")
   },
+  {
+    name: "github_agent_connection",
+    title: "Show an agent's GitHub connection",
+    description: "Show whether an agent profile is connected to GitHub for its own Git work — access, signing App (Arbor's or an existing custom App), and githubActor, the bot account its pushes and pull requests show. An agent reads its own; its manager and org admins may read any, and no key or token is ever returned.",
+    inputSchema: {
+      agentProfileId: string2().optional().describe("the agent, prof_…; an agent may omit it to read its own")
+    },
+    surfaces: ["computer-mcp", "cli"],
+    toolset: "projects",
+    run: forward("github.agent_connection_status")
+  },
+  {
+    name: "github_set_agent_connection",
+    title: "Connect an agent to GitHub",
+    description: "Org owner/admin only, from a web or CLI session (never a personal access token): connect, re-scope, or disconnect one agent profile's GitHub work. app=arbor signs with Arbor's GitHub App. app=custom keeps an App the agent already uses (for example a bot App): pass githubAppId, githubInstallationId, and privateKeySecretId — an organization-owned Arbor Secret that a human created and set with that App's private key (secret_set --value-file), never granted to an agent and never bound to an App. Arbor confirms the installation with GitHub, then reserves that Secret permanently for signing. Each Computer call then mints a one-hour token for repositories on this allowlist that the Computer declares and the Thread connects, at the chosen access; disconnecting stops renewal at the next call.",
+    inputSchema: {
+      agentProfileId: string2().describe("the agent profile, prof_…"),
+      connected: boolean2().describe("true to connect or re-scope; false to disconnect"),
+      access: _enum(["read", "review", "write"]).optional().describe("connect: read; review (PR reviews and comments, no push — Pull requests write also lets it approve, dismiss, or close PRs; branch rules decide what an approval counts for); or write (push and PRs). A read Run always caps at read"),
+      app: _enum(["arbor", "custom"]).optional().describe("connect: which GitHub App signs; omitted means arbor, except that an agent already on a custom App must name it, so a re-scope never swaps its bot identity"),
+      githubAppId: string2().optional().describe("app=custom: the existing App's numeric id"),
+      githubInstallationId: string2().optional().describe("app=custom: that App's installation id on the repositories' account"),
+      privateKeySecretId: string2().optional().describe("app=custom: the org-owned Secret holding the App's private key, sec_…"),
+      repositories: array(string2()).optional().describe("connect: the admin allowlist — installed repository ids (ghr_…), owner/name, or GitHub URLs; a token only ever reaches these")
+    },
+    surfaces: ["cli"],
+    toolset: "admin",
+    run: forward("github.agent_connection_set")
+  },
   {
     name: "recall",
     title: "Recall existing knowledge",
@@ -15173,6 +15238,18 @@ var ACTION_DEFINITIONS = [
     toolset: "loop",
     run: forward("reference.resolve")
   },
+  {
+    name: "quick_search",
+    title: "Quick search places",
+    description: "Jump to a place or person by name or short id: the Spaces, Topics, Threads and Artifacts you can open whose title (or objective, purpose, summary) contains every word, the people in your org whose name matches, best name match first, and an exact Thread short id (BUD-34) as `exact`. With `content`, the contributions you can open whose text holds every word (whole words, any word form), best match first, each with a short quote. The web ⌘K palette's two lookups: lexical, no embedding, no scope. To search what was said by meaning, use `recall`.",
+    inputSchema: {
+      q: string2().min(2).max(200).describe("a place or person name to look up, or a Thread short id such as BUD-34"),
+      content: boolean2().optional().describe("search what contributions said instead of place names")
+    },
+    surfaces: ["cli"],
+    toolset: "loop",
+    run: Object.assign((ex, { content, ...input }) => ex.call(content === true ? "search.content" : "search.quick", input), { operations: ["search.quick", "search.content"] })
+  },
   {
     name: "tree",
     title: "Navigate the workspace tree",
@@ -16591,7 +16668,7 @@ var ACTIONS = ACTION_DEFINITIONS.map((action) => {
 });
 
 // ../actions/src/retention-entry.ts
-var ARBOR_VERSION = "0.24.24";
+var ARBOR_VERSION = "0.24.26";
 var historyPolicySchema = _enum(["full", "checkpoint"]).optional().describe("text Artifacts: future history retention policy; full retains every source snapshot, checkpoint keeps metadata for every revision and source only when explicitly retained");
 var retainSourceSchema = boolean2().optional().describe("edit: in checkpoint mode, retain this newly minted content revision's source");
 var checkpointSchema = boolean2().optional().describe("edit: retain the exact current version source without incrementing content version");
@@ -16999,7 +17076,7 @@ function dispositionFilename(value) {
 // package.json
 var package_default = {
   name: "@lambdacurry/arbor",
-  version: "0.24.24",
+  version: "0.24.26",
   description: "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   keywords: [
     "agents",
@@ -17878,7 +17955,11 @@ var KNOWN_MISREACHES = [
   { tried: "spaces", use: "tree", why: "the tree lists spaces" },
   { tried: "space list", use: "tree", why: "the tree lists spaces" },
   { tried: "topics", use: "tree --depth topics", why: "topics are a tree depth" },
-  { tried: "search", use: "recall <query>", why: "recall is the search surface" },
+  {
+    tried: "search",
+    use: "recall <query>",
+    why: "recall searches what was said; `quick search <name>` jumps to a place or person by name"
+  },
   { tried: "update topic", use: "topic update --topic-id top_…", why: "this command is noun-verb" },
   { tried: "update space", use: "space update --space-id spc_…", why: "this command is noun-verb" },
   {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.24.24",
+  "version": "0.24.26",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",