Move secrets between users and computers without the model seeing them

A new personal env scope (paradigm user: one user's secret for one bot)
beats every other scope, reaches only that user's runs of that bot, and
is redacted like any secret. Bots take secrets in with request_secret,
which puts a [secret-request:ID] card in the chat: the user types the
value into a masked input there, never into a message, and the bot is
told only the key. Bots show secrets with capture_secret (a task's
computer tool that saves a file or a command's output straight to a
personal env, then redacts it from the rest of the run) and show_secret
(an env by key): both give a [secret:ID] chip whose Reveal and Copy fetch
the value on click, for its own user (personal) or a super admin
(anything else), logged by key. Values never go into messages, page
props, history, Copy chat or logs. Users manage their own secrets on
Settings > Secrets; the Environment page lists everyone's, remove only.
Deleting a bot or user removes its personal secrets, and SecretsNote
tells bots never to ask for or print secrets in chat.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/functions/backend/db/users/delete-user.ts

@@ -4,6 +4,7 @@ import AppError from "@/src/utils/app-error";
 import type { BUN_SQLITE_COBBLE_USER_TYPES } from "@/db/types/db";
 import parseUserTypes from "@/src/utils/parse-user-types";
 import canRevokeUser from "@/src/utils/rbac/can-revoke-user";
+import { clearEnvCache } from "../envs/grab-all-envs";
 import grabUsers from "./grab-users";
 
 type Params = {
@@ -20,8 +21,8 @@ type Params = {
 
 /**
  * Deletes a user with everything that's theirs (their conversations,
- * routines, access, what bots remember about them, user types, password,
- * media and its files). Bots, workspaces and computers belong to the
+ * routines, access, what bots remember about them, personal secrets, user
+ * types, password, media and its files). Bots, workspaces and computers belong to the
  * install and stay, pictures they uploaded for them too. Their audit log
  * entries stay as well. The super admin can't be deleted, and nobody
  * deletes themselves.
@@ -70,9 +71,16 @@ export default async function deleteUser({ actor_user_id, actor_user_types, user
     /**
      * These point at the user without a foreign key, so nothing cascades.
      */
-    for (const table of ["user_types", "user_passwords", "sso_login_codes"]) {
+    for (const table of ["user_types", "user_passwords", "sso_login_codes", "secret_requests"]) {
         await BunSQLite.sql({ sql: `DELETE FROM ${table} WHERE user_id = ?`, values: [user.id] });
     }
 
+    /**
+     * Their personal secrets, explicitly: foreign keys are off outside the
+     * server process.
+     */
+    await BunSQLite.sql({ sql: `DELETE FROM envs WHERE paradigm = 'user' AND user_id = ?`, values: [user.id] });
+    clearEnvCache();
+
     return user;
 }