@lambdacurry/arbor 0.24.25 → 0.24.26

package/dist/arbor.js

@@ -8666,6 +8666,29 @@ var githubUserAuthorizations = sqliteTable("github_user_authorizations", {
   githubUserIdx: index("github_user_authorizations_github_user_idx").on(t.githubUserId, t.status),
   orgIdx: index("github_user_authorizations_org_idx").on(t.orgId, t.status)
 }));
+var githubAgentConnections = sqliteTable("github_agent_connections", {
+  id: text("id").primaryKey(),
+  profileId: text("profile_id").notNull().references(() => profiles.id),
+  orgId: text("org_id").notNull().references(() => orgs.id),
+  status: text("status").$type().notNull().default("active"),
+  access: text("access").$type().notNull().default("read"),
+  app: text("app").$type().notNull().default("arbor"),
+  repositories: text("repositories", { mode: "json" }).$type().notNull().default([]),
+  githubAppId: text("github_app_id"),
+  githubInstallationId: text("github_installation_id"),
+  privateKeySecretId: text("private_key_secret_id").references(() => secrets.id),
+  githubAppSlug: text("github_app_slug"),
+  githubAccountLogin: text("github_account_login"),
+  createdByProfileId: text("created_by_profile_id").notNull().references(() => profiles.id),
+  updatedByProfileId: text("updated_by_profile_id").notNull().references(() => profiles.id),
+  createdExecutionContextId: text("created_execution_context_id").notNull().references(() => executionContexts.id),
+  updatedExecutionContextId: text("updated_execution_context_id").notNull().references(() => executionContexts.id),
+  createdAt: ts("created_at").notNull(),
+  updatedAt: ts("updated_at").notNull()
+}, (t) => ({
+  profileIdx: uniqueIndex("github_agent_connections_profile_idx").on(t.profileId),
+  orgIdx: index("github_agent_connections_org_idx").on(t.orgId, t.status)
+}));
 var githubRepositories = sqliteTable("github_repositories", {
   id: text("id").primaryKey(),
   installationId: text("installation_id").notNull().references(() => githubInstallations.id),
@@ -9460,6 +9483,7 @@ var secrets = sqliteTable("secrets", {
   ownerType: text("owner_type").$type().notNull().default("organization"),
   ownerId: text("owner_id"),
   lifecycle: text("lifecycle").$type().notNull().default("active"),
+  reservedFor: text("reserved_for").$type(),
   currentVersionId: text("current_version_id"),
   currentVersion: integer2("current_version").notNull().default(0),
   metadataRevision: integer2("metadata_revision").notNull().default(0),
@@ -10322,8 +10346,6 @@ var recallFts = sqliteTable("recall_fts", {
 // ../core/src/ops/quick-search.ts
 var QUICK_EXPAND_LIMIT = 20;
 var QUICK_CANDIDATE_LIMIT = QUICK_EXPAND_LIMIT + 2;
-// ../core/src/ops/computer-checkpoint-operations.ts
-var CHECKPOINT_OPERATION_TTL_SECONDS = 7 * 24 * 60 * 60;
 // ../core/src/ops/package-cache.ts
 var PACKAGE_CACHE_PENDING_TTL_MS = 15 * 60 * 1000;
 var PACKAGE_CACHE_FINAL_TTL_MS = 30 * 24 * 60 * 60 * 1000;
@@ -11454,6 +11476,16 @@ function buildOutputSchemas() {
       connected: boolean2(),
       inheritedBySiblingThreads: boolean2()
     }),
+    github_agent_connection: looseObject({
+      agentProfileId: id,
+      connected: boolean2(),
+      access: _enum(["read", "review", "write"]).nullable(),
+      app: looseObject({ kind: _enum(["arbor", "custom"]) }).nullable().describe("the signing App; custom adds its id, installation, slug, account, and key Secret id"),
+      githubActor: string2().nullable().describe("the GitHub bot account pushes and pull requests show, e.g. currybot[bot]"),
+      repositories: array(looseObject({ githubRepositoryId: string2(), fullName: string2() })).describe("the admin allowlist; empty when not connected"),
+      connectedAt: timestamp.nullable(),
+      updatedAt: timestamp.nullable()
+    }),
     transition_thread: looseObject({ status: string2() }),
     request: looseObject({
       requestId: id,
@@ -13058,6 +13090,7 @@ var MCP_TOOL_ANNOTATIONS = {
   github_repositories: readOnly,
   github_refresh_installation: openWorld,
   github_connect_repository: idempotent,
+  github_agent_connection: readOnly,
   computer_reprovision: destructiveIdempotent,
   computer_run_start: idempotent,
   computer_run_suspend: idempotent,
@@ -13438,7 +13471,7 @@ var COMPUTER_ORIENTATION_SECTIONS = [
   },
   {
     brief: "5. Git and gh run through `computer_exec` once authorized; fetch before trusting remote state.",
-    full: `5. GIT AND GITHUB ARE ORDINARY COMMANDS AFTER AUTHORIZATION. Clone, fetch, pull, push, and gh run through computer_exec using a connected human's just-in-time ambient GitHub identity. Credentials never enter argv, workspace files, Git config, checkpoints, Events, logs, or receipts. A restored Computer deliberately keeps the checkout age of its snapshot, so fetch/pull before trusting remote state.`
+    full: `5. GIT AND GITHUB ARE ORDINARY COMMANDS AFTER AUTHORIZATION. Clone, fetch, pull, push, and gh run through computer_exec using just-in-time ambient GitHub credentials: a connected human's own GitHub identity, or for an agent an admin connected (github_agent_connection), a one-hour App token for repositories on the admin's allowlist that the Computer declares and the Thread connects — connecting another repository yourself adds nothing to it. Credentials never enter argv, workspace files, Git config, checkpoints, Events, logs, or receipts. A restored Computer deliberately keeps the checkout age of its snapshot, so fetch/pull before trusting remote state.`
   },
   {
     brief: "6. `computer_verify` captures a URL, `computer_publish_preview` keeps static output, `computer_export` saves files to the Thread.",
@@ -13678,6 +13711,35 @@ var ACTION_DEFINITIONS = [
     toolset: "admin",
     run: forward("github.user_disconnect")
   },
+  {
+    name: "github_agent_connection",
+    title: "Show an agent's GitHub connection",
+    description: "Show whether an agent profile is connected to GitHub for its own Git work — access, signing App (Arbor's or an existing custom App), and githubActor, the bot account its pushes and pull requests show. An agent reads its own; its manager and org admins may read any, and no key or token is ever returned.",
+    inputSchema: {
+      agentProfileId: string2().optional().describe("the agent, prof_…; an agent may omit it to read its own")
+    },
+    surfaces: ["computer-mcp", "cli"],
+    toolset: "projects",
+    run: forward("github.agent_connection_status")
+  },
+  {
+    name: "github_set_agent_connection",
+    title: "Connect an agent to GitHub",
+    description: "Org owner/admin only, from a web or CLI session (never a personal access token): connect, re-scope, or disconnect one agent profile's GitHub work. app=arbor signs with Arbor's GitHub App. app=custom keeps an App the agent already uses (for example a bot App): pass githubAppId, githubInstallationId, and privateKeySecretId — an organization-owned Arbor Secret that a human created and set with that App's private key (secret_set --value-file), never granted to an agent and never bound to an App. Arbor confirms the installation with GitHub, then reserves that Secret permanently for signing. Each Computer call then mints a one-hour token for repositories on this allowlist that the Computer declares and the Thread connects, at the chosen access; disconnecting stops renewal at the next call.",
+    inputSchema: {
+      agentProfileId: string2().describe("the agent profile, prof_…"),
+      connected: boolean2().describe("true to connect or re-scope; false to disconnect"),
+      access: _enum(["read", "review", "write"]).optional().describe("connect: read; review (PR reviews and comments, no push — Pull requests write also lets it approve, dismiss, or close PRs; branch rules decide what an approval counts for); or write (push and PRs). A read Run always caps at read"),
+      app: _enum(["arbor", "custom"]).optional().describe("connect: which GitHub App signs; omitted means arbor, except that an agent already on a custom App must name it, so a re-scope never swaps its bot identity"),
+      githubAppId: string2().optional().describe("app=custom: the existing App's numeric id"),
+      githubInstallationId: string2().optional().describe("app=custom: that App's installation id on the repositories' account"),
+      privateKeySecretId: string2().optional().describe("app=custom: the org-owned Secret holding the App's private key, sec_…"),
+      repositories: array(string2()).optional().describe("connect: the admin allowlist — installed repository ids (ghr_…), owner/name, or GitHub URLs; a token only ever reaches these")
+    },
+    surfaces: ["cli"],
+    toolset: "admin",
+    run: forward("github.agent_connection_set")
+  },
   {
     name: "recall",
     title: "Recall existing knowledge",
@@ -16606,7 +16668,7 @@ var ACTIONS = ACTION_DEFINITIONS.map((action) => {
 });
 
 // ../actions/src/retention-entry.ts
-var ARBOR_VERSION = "0.24.25";
+var ARBOR_VERSION = "0.24.26";
 var historyPolicySchema = _enum(["full", "checkpoint"]).optional().describe("text Artifacts: future history retention policy; full retains every source snapshot, checkpoint keeps metadata for every revision and source only when explicitly retained");
 var retainSourceSchema = boolean2().optional().describe("edit: in checkpoint mode, retain this newly minted content revision's source");
 var checkpointSchema = boolean2().optional().describe("edit: retain the exact current version source without incrementing content version");
@@ -17014,7 +17076,7 @@ function dispositionFilename(value) {
 // package.json
 var package_default = {
   name: "@lambdacurry/arbor",
-  version: "0.24.25",
+  version: "0.24.26",
   description: "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   keywords: [
     "agents",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.24.25",
+  "version": "0.24.26",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",