@app-vitals/agent-lib 0.4.0 → 0.6.0

package/admin-types.ts

@@ -281,7 +281,7 @@ export interface paths {
         head?: never;
         /**
          * Update an agent
-         * @description Admin-only. Updates `selfHosted`, `repos`, `reviewAuthorAllowlist`, `patchAuthorAllowlist`, `restrictSlackToMembers`, `slackId`, `trialExpiresAt`, and/or `accountId` (platform admin only — 403 for session members; `null` clears it; reconciles the workload of in-cluster agents; does not move historical task-store rows). `typeName` and `trialExpiryWarnedAt` are not updatable via this route. `repos` here REPLACES the whole list; for incremental changes use `POST /agents/{id}/repos` (add) and `DELETE /agents/{id}/repos/{owner}/{name}` (remove). Returns the updated agent, including a `warning` field when `restrictSlackToMembers` is set true on an agent with zero members.
+         * @description Admin-only. Updates `selfHosted`, `repos`, `reviewAuthorAllowlist`, `patchAuthorAllowlist`, `restrictSlackToMembers`, `slackId`, `trialExpiresAt`, `accountId` (platform admin only — 403 for session members; `null` clears it; reconciles the workload of in-cluster agents; does not move historical task-store rows), and/or `podServiceAccountName` (platform admin only — 403 otherwise; `null` clears it; 409 unless SHIPWRIGHT_K8S_AGENT_POD_SERVICE_ACCOUNT_ENABLED is on; 422 for agents with a per-agent federated identity; reconciles the workload so the pod is recreated under the new ServiceAccount). `typeName` and `trialExpiryWarnedAt` are not updatable via this route. `repos` here REPLACES the whole list; for incremental changes use `POST /agents/{id}/repos` (add) and `DELETE /agents/{id}/repos/{owner}/{name}` (remove). Returns the updated agent, including a `warning` field when `restrictSlackToMembers` is set true on an agent with zero members.
          */
         patch: {
             parameters: {
@@ -334,6 +334,24 @@ export interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
+                /** @description podServiceAccountName supplied while the pod ServiceAccount flag is off */
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description podServiceAccountName supplied for an agent with a per-agent federated identity */
+                422: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
             };
         };
         trace?: never;
@@ -3158,6 +3176,7 @@ export interface components {
             patchAuthorAllowlist: string[];
             restrictSlackToMembers: boolean;
             typeName: string;
+            podServiceAccountName: string | null;
             accountId: string | null;
             /** Format: date-time */
             createdAt: string;
@@ -3217,6 +3236,8 @@ export interface components {
             restrictSlackToMembers?: boolean;
             /** @example acct_123 */
             accountId?: string | null;
+            /** @example agent-pod-sa */
+            podServiceAccountName?: string | null;
             /**
              * Format: date-time
              * @example 2026-12-01T00:00:00.000Z
@@ -4143,6 +4164,8 @@ export interface components {
              */
             reportedAt: string;
             installations: components["schemas"]["GitHubInstallation"][];
+            /** @description Latest per-repo access probe result; null until a runtime with the repo-access check enabled reports one. */
+            repoAccess: components["schemas"]["RepoAccessEntry"][] | null;
             /**
              * Format: date-time
              * @example 2026-01-01T00:00:00.000Z
@@ -4162,6 +4185,27 @@ export interface components {
              */
             lastError?: string | null;
         };
+        RepoAccessEntry: {
+            /** @example agent */
+            repo: string;
+            /** @example app-vitals */
+            owner: string;
+            /** @example true */
+            read: boolean;
+            /** @example false */
+            write: boolean;
+            /**
+             * Format: date-time
+             * @example 2026-01-01T00:00:00.000Z
+             */
+            checkedAt: string;
+            /**
+             * @description Why the probe could not read the repo; absent when the probe succeeded.
+             * @example not_found
+             * @enum {string}
+             */
+            error?: "not_found" | "forbidden" | "rate_limited" | "network";
+        };
         PutGitHubInstallationsBody: {
             /**
              * Format: date-time
@@ -4169,6 +4213,8 @@ export interface components {
              */
             reportedAt: string;
             installations: components["schemas"]["GitHubInstallation"][];
+            /** @description Per-repo access probe result (COS-44.1). Omit to leave the stored result unchanged; send [] to clear it. */
+            repos?: components["schemas"]["RepoAccessEntry"][];
         };
         AgentConfigResponse: {
             /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@app-vitals/agent-lib",
-  "version": "0.4.0",
+  "version": "0.6.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/app-vitals/agent.git",