@wardby/cli 0.2.0 → 0.2.1

package/dist/generated/prisma/models/Webhook.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/prisma/models.d.ts

@@ -0,0 +1,32 @@
+export type * from './models/Agent.js';
+export type * from './models/AgentSubAgent.js';
+export type * from './models/BudgetGroup.js';
+export type * from './models/Tool.js';
+export type * from './models/AgentTool.js';
+export type * from './models/Datastore.js';
+export type * from './models/AgentDatastore.js';
+export type * from './models/DatastoreEntry.js';
+export type * from './models/AgentMemory.js';
+export type * from './models/Run.js';
+export type * from './models/CodingAgentProfile.js';
+export type * from './models/CodingRun.js';
+export type * from './models/CodingProxySession.js';
+export type * from './models/CodingProxyRequest.js';
+export type * from './models/SchedulerLease.js';
+export type * from './models/Principal.js';
+export type * from './models/Task.js';
+export type * from './models/Secret.js';
+export type * from './models/AgentSecret.js';
+export type * from './models/SecretElicitationOutcome.js';
+export type * from './models/Webhook.js';
+export type * from './models/OAuthClient.js';
+export type * from './models/OAuthGrant.js';
+export type * from './models/AuthUser.js';
+export type * from './models/AuthLoginKey.js';
+export type * from './models/AuthSession.js';
+export type * from './models/AuthFormChallenge.js';
+export type * from './models/OAuthAuthorizationRequest.js';
+export type * from './models/OAuthAuthorizationCode.js';
+export type * from './models/OAuthFamily.js';
+export type * from './models/AuthRateLimit.js';
+export type * from './commonInputTypes.js';

package/dist/generated/prisma/models.js

@@ -0,0 +1 @@
+export {};

package/dist/import/create.d.ts

@@ -3,7 +3,7 @@
  * attachments, secrets, datastores, webhooks, budget groups) to the database
  * from a validated bundle + reconciliation.
  */
-import type { PrismaClient } from "@prisma/client";
+import type { PrismaClient } from "#prisma";
 import type { KeyObject } from "node:crypto";
 import type { Bundle } from "./bundle.js";
 import type { Reconciliation } from "./preflight.js";

package/dist/import/create.js

@@ -3,7 +3,7 @@
  * attachments, secrets, datastores, webhooks, budget groups) to the database
  * from a validated bundle + reconciliation.
  */
-import { Prisma } from "@prisma/client";
+import { Prisma } from "#prisma";
 import { createSecret, attachSecret } from "../core/secrets.js";
 import { createDatastore, attachDatastore } from "../core/datastores.js";
 import { createWebhook } from "../core/webhooks.js";

package/dist/import/index.d.ts

@@ -2,7 +2,7 @@
  * Top-level orchestrator: opens a bundle, runs preflight reconciliation,
  * renders the report, and (unless dry-run or fatal collision) creates entities.
  */
-import type { PrismaClient } from "@prisma/client";
+import type { PrismaClient } from "#prisma";
 import type { ConflictPolicy } from "./preflight.js";
 import { type ImportResult } from "./create.js";
 export interface ImportOptions {

package/dist/mcp/auth/ownership.d.ts

@@ -10,7 +10,7 @@
  * this module instead of re-deriving the null-handling itself, so changing
  * the policy again later is a change here, not an N-file sweep.
  */
-import type { PrismaClient, Tool } from "@prisma/client";
+import type { PrismaClient, Tool } from "#prisma";
 export declare function canRead(ownerId: string | null, principalId: string): boolean;
 export declare function isOwner(ownerId: string | null, principalId: string): boolean;
 /** Same rule as canRead: a null owner is a mutation target for anyone, same as it's a read target for anyone. */
@@ -27,12 +27,12 @@ export declare function visibleToPrincipal(principalId: string): {
 export declare function requireOwnedAgent(db: PrismaClient, id: string, principalId: string): Promise<{
     name: string;
     model: string;
-    budgetUsd: import("@prisma/client/runtime/library").Decimal;
+    budgetUsd: import("@prisma/client-runtime-utils").Decimal;
     id: string;
     systemPrompt: string;
     createdAt: Date;
     updatedAt: Date;
-    kind: import("@prisma/client").$Enums.AgentKind;
+    kind: import("#prisma").AgentKind;
     schedule: string | null;
     timezone: string;
     scheduleEnabled: boolean;
@@ -45,12 +45,12 @@ export declare function requireOwnedAgent(db: PrismaClient, id: string, principa
 export declare function requireReadableAgent(db: PrismaClient, id: string, principalId: string): Promise<{
     name: string;
     model: string;
-    budgetUsd: import("@prisma/client/runtime/library").Decimal;
+    budgetUsd: import("@prisma/client-runtime-utils").Decimal;
     id: string;
     systemPrompt: string;
     createdAt: Date;
     updatedAt: Date;
-    kind: import("@prisma/client").$Enums.AgentKind;
+    kind: import("#prisma").AgentKind;
     schedule: string | null;
     timezone: string;
     scheduleEnabled: boolean;
@@ -66,10 +66,10 @@ export declare function requireOwnedBudgetGroup(db: PrismaClient, id: string, pr
     createdAt: Date;
     updatedAt: Date;
     ownerId: string | null;
-    dailyBudgetUsd: import("@prisma/client/runtime/library").Decimal | null;
-    weeklyBudgetUsd: import("@prisma/client/runtime/library").Decimal | null;
-    monthlyBudgetUsd: import("@prisma/client/runtime/library").Decimal | null;
-    warnThresholdRatio: import("@prisma/client/runtime/library").Decimal;
+    dailyBudgetUsd: import("@prisma/client-runtime-utils").Decimal | null;
+    weeklyBudgetUsd: import("@prisma/client-runtime-utils").Decimal | null;
+    monthlyBudgetUsd: import("@prisma/client-runtime-utils").Decimal | null;
+    warnThresholdRatio: import("@prisma/client-runtime-utils").Decimal;
 }>;
 export declare function requireReadableBudgetGroup(db: PrismaClient, id: string, principalId: string): Promise<{
     name: string;
@@ -77,10 +77,10 @@ export declare function requireReadableBudgetGroup(db: PrismaClient, id: string,
     createdAt: Date;
     updatedAt: Date;
     ownerId: string | null;
-    dailyBudgetUsd: import("@prisma/client/runtime/library").Decimal | null;
-    weeklyBudgetUsd: import("@prisma/client/runtime/library").Decimal | null;
-    monthlyBudgetUsd: import("@prisma/client/runtime/library").Decimal | null;
-    warnThresholdRatio: import("@prisma/client/runtime/library").Decimal;
+    dailyBudgetUsd: import("@prisma/client-runtime-utils").Decimal | null;
+    weeklyBudgetUsd: import("@prisma/client-runtime-utils").Decimal | null;
+    monthlyBudgetUsd: import("@prisma/client-runtime-utils").Decimal | null;
+    warnThresholdRatio: import("@prisma/client-runtime-utils").Decimal;
 }>;
 export declare function requireOwnedSecret(db: PrismaClient, id: string, principalId: string): Promise<void>;
 export declare function requireOwnedWebhook(db: PrismaClient, id: string, principalId: string): Promise<void>;
@@ -98,16 +98,16 @@ export declare function requireOwnedTool(db: Pick<PrismaClient, "tool">, id: str
  * triggered them. No canRead/null=public path exists here on purpose.
  */
 export declare function requireOwnedTask(db: PrismaClient, taskId: string, principalId: string): Promise<{
-    status: import("@prisma/client").$Enums.TaskStatus;
+    status: import("#prisma").TaskStatus;
     runId: string | null;
-    error: import("@prisma/client/runtime/library").JsonValue | null;
-    result: import("@prisma/client/runtime/library").JsonValue | null;
+    error: import("@prisma/client/runtime/client").JsonValue | null;
+    result: import("@prisma/client/runtime/client").JsonValue | null;
     id: string;
     createdAt: Date;
     updatedAt: Date;
-    kind: import("@prisma/client").$Enums.TaskKind;
+    kind: import("#prisma").TaskKind;
     principalId: string | null;
-    inputRequests: import("@prisma/client/runtime/library").JsonValue | null;
-    inputResponses: import("@prisma/client/runtime/library").JsonValue | null;
+    inputRequests: import("@prisma/client/runtime/client").JsonValue | null;
+    inputResponses: import("@prisma/client/runtime/client").JsonValue | null;
     ttlAt: Date;
 }>;

package/dist/mcp/auth/principal.d.ts

@@ -5,5 +5,5 @@
  * always carries an owner, so a deployment that later moves from stdio to
  * HTTP+OAuth doesn't orphan locally-authored agents.
  */
-import type { PrismaClient, Principal } from "@prisma/client";
+import type { PrismaClient, Principal } from "#prisma";
 export declare function resolvePrincipal(subject: string, db: PrismaClient): Promise<Principal>;

package/dist/mcp/auth/resource-server.d.ts

@@ -4,7 +4,7 @@
  * AuthProvider (delegating | self-hosted) is active — both implement
  * verifyBearer, so this file never branches on auth mode.
  */
-import type { PrismaClient } from "@prisma/client";
+import type { PrismaClient } from "#prisma";
 import type { AuthProvider } from "../../providers/auth/types.js";
 import { McpError } from "../errors.js";
 import type { McpRequestContext, McpProviders } from "../context.js";

package/dist/mcp/auth/self-hosted/browser.js

@@ -1,6 +1,7 @@
 import { randomUUID, randomBytes } from "node:crypto";
 import { PostgresRateLimiter, RateLimitError } from "./rate-limit.js";
 import { logger } from "../../../core/logger.js";
+import { PAGE_STYLE } from "../../shared/page-style.js";
 const authLog = logger.child({ module: "self-hosted-oauth" });
 const paths = new Set([
     "/login",
@@ -29,12 +30,21 @@ const FORM_SCRIPT = `document.addEventListener('submit', async (event) => {
 });`;
 function html(res, content) {
     const nonce = randomBytes(18).toString("base64");
-    res.setHeader("content-security-policy", `default-src 'none'; script-src 'nonce-${nonce}'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'`);
+    res.setHeader("content-security-policy", 
+    // style-src reuses the same per-request nonce as script-src rather than
+    // 'unsafe-inline', so the one inline <style> stays as tightly scoped as
+    // the inline <script>.
+    `default-src 'none'; script-src 'nonce-${nonce}'; style-src 'nonce-${nonce}'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'`);
     res
         .writeHead(200, { "content-type": "text/html; charset=utf-8" })
-        .end('<!doctype html><html lang="en"><meta charset="utf-8"><title>wardby authorization</title><body>' +
+        .end('<!doctype html><html lang="en"><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1">' +
+        '<title>wardby authorization</title><style nonce="' +
+        nonce +
+        '">' +
+        PAGE_STYLE +
+        '</style><body><div class="card"><div class="kicker">wardby</div>' +
         content +
-        '<p id="auth-error" role="alert"></p><noscript>JavaScript is required for secure form submission.</noscript><script nonce="' +
+        '<p id="auth-error" role="alert"></p></div><noscript>JavaScript is required for secure form submission.</noscript><script nonce="' +
         nonce +
         '">' +
         FORM_SCRIPT +
@@ -155,7 +165,7 @@ export function browserHandler(provider) {
                 html(res, '<h1>Sign in to wardby</h1><form method="post" action="/login">' +
                     hidden("interaction", interaction) +
                     hidden("csrf", challenge) +
-                    '<label>Login key <input type="password" name="login_key" required autocomplete="off"></label><button>Sign in</button></form>');
+                    '<label>Login key<input type="password" name="login_key" required autocomplete="off"></label><button>Sign in</button></form>');
                 return true;
             }
             if (req.method === "POST" &&
@@ -198,7 +208,8 @@ export function browserHandler(provider) {
                     '</p><form action="/consent" method="post">' +
                     hidden("interaction", id) +
                     hidden("csrf", challenge) +
-                    '<button name="decision" value="approve">Approve</button><button name="decision" value="deny">Deny</button></form>');
+                    '<div class="actions"><button name="decision" value="approve">Approve</button>' +
+                    '<button name="decision" value="deny">Deny</button></div></form>');
                 return true;
             }
             if (req.method === "POST" && url.pathname === "/consent") {
@@ -210,7 +221,10 @@ export function browserHandler(provider) {
             if (req.method === "GET" && url.pathname === "/logout") {
                 const session = await provider.sessions.get(cookies.get(sessionName) ?? "");
                 const challenge = await provider.sessions.challenge("logout", session.sessionId, "logout");
-                html(res, '<form action="/logout" method="post">' + hidden("csrf", challenge) + "<button>Sign out</button></form>");
+                html(res, "<h1>Sign out</h1>" +
+                    '<form action="/logout" method="post">' +
+                    hidden("csrf", challenge) +
+                    "<button>Sign out</button></form>");
                 return true;
             }
             if (req.method === "POST" && url.pathname === "/logout") {

package/dist/mcp/auth/self-hosted/cli.d.ts

@@ -1,2 +1,2 @@
-import type { PrismaClient } from "@prisma/client";
+import type { PrismaClient } from "#prisma";
 export declare function authCommand(args: string[], db: PrismaClient, hashKey: string, output?: (value: string) => void): Promise<void>;

package/dist/mcp/auth/self-hosted/credentials.d.ts

@@ -1,4 +1,4 @@
-import type { Prisma, PrismaClient } from "@prisma/client";
+import type { Prisma, PrismaClient } from "#prisma";
 export type AuthDb = Prisma.TransactionClient;
 export declare const DAY = 86400000;
 export declare function decodeKey(value: string, name: string): Buffer;

package/dist/mcp/auth/self-hosted/rate-limit.d.ts

@@ -1,4 +1,4 @@
-import type { PrismaClient } from "@prisma/client";
+import type { PrismaClient } from "#prisma";
 import type { Credentials } from "./credentials.js";
 export interface RateLimiter {
     check(bucket: string, identity: string, limit: number): Promise<void>;

package/dist/mcp/auth/self-hosted/session.d.ts

@@ -1,4 +1,4 @@
-import type { PrismaClient } from "@prisma/client";
+import type { PrismaClient } from "#prisma";
 import type { Credentials } from "./credentials.js";
 import { type AuthDb } from "./credentials.js";
 export declare class Sessions {

package/dist/mcp/context.d.ts

@@ -7,7 +7,7 @@
  * registry also carries jobs/email/auth/storage seams no Phase 4 tool
  * needs and this plan never builds real adapters for.
  */
-import type { Principal, PrismaClient } from "@prisma/client";
+import type { Principal, PrismaClient } from "#prisma";
 import type { RequestStateAccessor } from "@modelcontextprotocol/server";
 import type { ProviderRegistry } from "../providers/index.js";
 export type McpProviders = Pick<ProviderRegistry, "llm" | "engine" | "datastore" | "secrets" | "executor" | "memory">;

package/dist/mcp/server.d.ts

@@ -23,7 +23,7 @@
  * whole connection.
  */
 import { type McpServerFactory, type InputRequiredResult } from "@modelcontextprotocol/server";
-import type { PrismaClient } from "@prisma/client";
+import type { PrismaClient } from "#prisma";
 import type { McpRequestContext, McpProviders } from "./context.js";
 export interface ToolSpec<Args = Record<string, unknown>> {
     name: string;

package/dist/mcp/shared/page-style.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Shared CSS for wardby's server-rendered pages: the self-hosted OAuth
+ * browser flow (auth/self-hosted/browser.ts) and the secret-entry form
+ * (tools/secret-elicitation-form.ts). Both are publicly reachable,
+ * dependency-free surfaces — no CDN fonts, no external stylesheets, no
+ * external images — so this module is the one inline stylesheet each page
+ * embeds in its own `<style>` tag rather than a `<link>`.
+ *
+ * Tokens follow the naming used by wardby's marketing/dashboard page so this
+ * corner of the product reads as the same system: --cream --gold --ink
+ * --line --mint --mint-deep --muted --paper --red --shadow --sky --white.
+ * Dark mode redefines the same token names under `prefers-color-scheme` —
+ * the source page itself has no dark mode, but these pages already did
+ * (the secret form's previous inline styles supported it), so it's kept.
+ */
+export declare const PAGE_STYLE = "\n:root {\n  color-scheme: light dark;\n  --cream: #fffaf0;\n  --paper: #f7f4ec;\n  --white: #ffffff;\n  --ink: #12243c;\n  --muted: #657287;\n  --line: #dce3e8;\n  --mint: #43e6b1;\n  --mint-deep: #15b982;\n  --gold: #c9aa70;\n  --red: #e33d37;\n  --sky: #75d4ff;\n  --shadow: 0 24px 70px rgba(6, 23, 47, 0.12);\n}\n@media (prefers-color-scheme: dark) {\n  :root {\n    --paper: #0b1524;\n    --white: #142238;\n    --ink: #f2f6fa;\n    --muted: #9fb0c2;\n    --line: #263a52;\n    --shadow: 0 24px 70px rgba(0, 0, 0, 0.5);\n  }\n}\n* { box-sizing: border-box; }\nbody {\n  margin: 0;\n  min-height: 100vh;\n  display: flex;\n  align-items: center;\n  justify-content: center;\n  padding: 24px;\n  color: var(--ink);\n  background:\n    radial-gradient(circle at 12% 0%, rgba(67, 230, 177, 0.14), transparent 26rem),\n    radial-gradient(circle at 100% 20%, rgba(117, 212, 255, 0.12), transparent 30rem),\n    var(--paper);\n  font-family: \"Avenir Next\", Avenir, \"Trebuchet MS\", sans-serif;\n  -webkit-font-smoothing: antialiased;\n}\n.card {\n  width: 100%;\n  max-width: 420px;\n  padding: 38px 34px;\n  border: 1px solid var(--line);\n  border-radius: 20px;\n  background: var(--white);\n  box-shadow: var(--shadow);\n}\n.kicker {\n  margin: 0 0 12px;\n  color: var(--mint-deep);\n  font-size: 11px;\n  font-weight: 800;\n  letter-spacing: 0.15em;\n  text-transform: uppercase;\n}\nh1 {\n  margin: 0 0 10px;\n  font-family: Futura, \"Avenir Next\", Avenir, sans-serif;\n  font-size: 23px;\n  line-height: 1.2;\n  letter-spacing: -0.02em;\n}\np { margin: 0 0 22px; color: var(--muted); font-size: 14px; line-height: 1.55; }\np:last-child { margin-bottom: 0; }\np strong { color: var(--ink); }\nlabel { display: block; margin-bottom: 18px; font-size: 13px; font-weight: 700; color: var(--muted); }\ninput[type=\"password\"] {\n  display: block;\n  width: 100%;\n  margin-top: 8px;\n  padding: 14px 16px;\n  font-size: 16px;\n  letter-spacing: 0.02em;\n  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;\n  color: var(--ink);\n  background: var(--paper);\n  border: 1px solid var(--line);\n  border-radius: 10px;\n}\ninput[type=\"password\"]:focus {\n  outline: none;\n  border-color: var(--mint-deep);\n  box-shadow: 0 0 0 3px rgba(21, 185, 130, 0.18);\n}\nbutton {\n  width: 100%;\n  margin-top: 4px;\n  padding: 15px;\n  font: inherit;\n  font-size: 15px;\n  font-weight: 700;\n  color: var(--cream);\n  background: var(--ink);\n  border: none;\n  border-radius: 10px;\n  cursor: pointer;\n  transition: background 140ms ease;\n}\nbutton:hover { background: var(--mint-deep); }\nbutton:focus-visible { outline: 3px solid var(--mint-deep); outline-offset: 2px; }\n.actions { display: flex; gap: 10px; margin-top: 4px; }\n.actions button { margin-top: 0; }\n.actions button[value=\"deny\"] {\n  color: var(--ink);\n  background: var(--paper);\n  border: 1px solid var(--line);\n}\n.actions button[value=\"deny\"]:hover { background: var(--line); }\n#auth-error { margin: 16px 0 0; color: var(--red); font-size: 13px; min-height: 1em; }\n";

package/dist/mcp/shared/page-style.js

@@ -0,0 +1,129 @@
+/**
+ * Shared CSS for wardby's server-rendered pages: the self-hosted OAuth
+ * browser flow (auth/self-hosted/browser.ts) and the secret-entry form
+ * (tools/secret-elicitation-form.ts). Both are publicly reachable,
+ * dependency-free surfaces — no CDN fonts, no external stylesheets, no
+ * external images — so this module is the one inline stylesheet each page
+ * embeds in its own `<style>` tag rather than a `<link>`.
+ *
+ * Tokens follow the naming used by wardby's marketing/dashboard page so this
+ * corner of the product reads as the same system: --cream --gold --ink
+ * --line --mint --mint-deep --muted --paper --red --shadow --sky --white.
+ * Dark mode redefines the same token names under `prefers-color-scheme` —
+ * the source page itself has no dark mode, but these pages already did
+ * (the secret form's previous inline styles supported it), so it's kept.
+ */
+export const PAGE_STYLE = `
+:root {
+  color-scheme: light dark;
+  --cream: #fffaf0;
+  --paper: #f7f4ec;
+  --white: #ffffff;
+  --ink: #12243c;
+  --muted: #657287;
+  --line: #dce3e8;
+  --mint: #43e6b1;
+  --mint-deep: #15b982;
+  --gold: #c9aa70;
+  --red: #e33d37;
+  --sky: #75d4ff;
+  --shadow: 0 24px 70px rgba(6, 23, 47, 0.12);
+}
+@media (prefers-color-scheme: dark) {
+  :root {
+    --paper: #0b1524;
+    --white: #142238;
+    --ink: #f2f6fa;
+    --muted: #9fb0c2;
+    --line: #263a52;
+    --shadow: 0 24px 70px rgba(0, 0, 0, 0.5);
+  }
+}
+* { box-sizing: border-box; }
+body {
+  margin: 0;
+  min-height: 100vh;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  padding: 24px;
+  color: var(--ink);
+  background:
+    radial-gradient(circle at 12% 0%, rgba(67, 230, 177, 0.14), transparent 26rem),
+    radial-gradient(circle at 100% 20%, rgba(117, 212, 255, 0.12), transparent 30rem),
+    var(--paper);
+  font-family: "Avenir Next", Avenir, "Trebuchet MS", sans-serif;
+  -webkit-font-smoothing: antialiased;
+}
+.card {
+  width: 100%;
+  max-width: 420px;
+  padding: 38px 34px;
+  border: 1px solid var(--line);
+  border-radius: 20px;
+  background: var(--white);
+  box-shadow: var(--shadow);
+}
+.kicker {
+  margin: 0 0 12px;
+  color: var(--mint-deep);
+  font-size: 11px;
+  font-weight: 800;
+  letter-spacing: 0.15em;
+  text-transform: uppercase;
+}
+h1 {
+  margin: 0 0 10px;
+  font-family: Futura, "Avenir Next", Avenir, sans-serif;
+  font-size: 23px;
+  line-height: 1.2;
+  letter-spacing: -0.02em;
+}
+p { margin: 0 0 22px; color: var(--muted); font-size: 14px; line-height: 1.55; }
+p:last-child { margin-bottom: 0; }
+p strong { color: var(--ink); }
+label { display: block; margin-bottom: 18px; font-size: 13px; font-weight: 700; color: var(--muted); }
+input[type="password"] {
+  display: block;
+  width: 100%;
+  margin-top: 8px;
+  padding: 14px 16px;
+  font-size: 16px;
+  letter-spacing: 0.02em;
+  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
+  color: var(--ink);
+  background: var(--paper);
+  border: 1px solid var(--line);
+  border-radius: 10px;
+}
+input[type="password"]:focus {
+  outline: none;
+  border-color: var(--mint-deep);
+  box-shadow: 0 0 0 3px rgba(21, 185, 130, 0.18);
+}
+button {
+  width: 100%;
+  margin-top: 4px;
+  padding: 15px;
+  font: inherit;
+  font-size: 15px;
+  font-weight: 700;
+  color: var(--cream);
+  background: var(--ink);
+  border: none;
+  border-radius: 10px;
+  cursor: pointer;
+  transition: background 140ms ease;
+}
+button:hover { background: var(--mint-deep); }
+button:focus-visible { outline: 3px solid var(--mint-deep); outline-offset: 2px; }
+.actions { display: flex; gap: 10px; margin-top: 4px; }
+.actions button { margin-top: 0; }
+.actions button[value="deny"] {
+  color: var(--ink);
+  background: var(--paper);
+  border: 1px solid var(--line);
+}
+.actions button[value="deny"]:hover { background: var(--line); }
+#auth-error { margin: 16px 0 0; color: var(--red); font-size: 13px; min-height: 1em; }
+`;

package/dist/mcp/tasks/manager.d.ts

@@ -10,7 +10,7 @@
  * cancellation is cooperative and eventually consistent, per the
  * extension's own spec language).
  */
-import type { PrismaClient, Task } from "@prisma/client";
+import type { PrismaClient, Task } from "#prisma";
 export type TaskStatus = "working" | "input_required" | "completed" | "failed" | "cancelled";
 export interface JsonRpcErrorObject {
     code: number;

package/dist/mcp/tools/agents.js

@@ -1,5 +1,5 @@
 /** Agent CRUD with scope checks in server.ts and ownership checks here. */
-import { Prisma } from "@prisma/client";
+import { Prisma } from "#prisma";
 import { z } from "zod";
 import { CodingProfilePatchSchema, CodingProfileSchema } from "../../coding/profile.js";
 import { codingProviderSupportsModel } from "../../coding/provider.js";

package/dist/mcp/tools/datastore.js

@@ -1,4 +1,4 @@
-import { Prisma } from "@prisma/client";
+import { Prisma } from "#prisma";
 import { requireOwnedAgent, requireReadableAgent, requireOwnedDatastore, canRead, assertCanMutate, } from "../auth/ownership.js";
 import { createDatastore, listDatastores, deleteDatastore, attachDatastore, detachDatastore, buildSharedDatastoreAccessor, } from "../../core/datastores.js";
 import { McpError } from "../errors.js";

package/dist/mcp/tools/scheduling.js

@@ -1,4 +1,4 @@
-import { Prisma } from "@prisma/client";
+import { Prisma } from "#prisma";
 import { validateCronExpression } from "../../core/cron.js";
 import { McpError } from "../errors.js";
 import { assertCanMutate, requireOwnedAgent } from "../auth/ownership.js";

package/dist/mcp/tools/secret-elicitation-form.d.ts

@@ -6,7 +6,7 @@
  * CSP can forbid scripts outright rather than needing a nonce.
  */
 import type { IncomingMessage, ServerResponse } from "node:http";
-import type { PrismaClient } from "@prisma/client";
+import type { PrismaClient } from "#prisma";
 import type { SecretCipher } from "../../providers/secrets/types.js";
 import { type SecretElicitationPayload } from "./secret-elicitation.js";
 /** The HTTP-transport route path this form is mounted at (see streamable-http.ts). */

package/dist/mcp/tools/secret-elicitation-form.js

@@ -1,43 +1,24 @@
 import { fulfillSecretElicitation } from "./secret-elicitation.js";
+import { PAGE_STYLE } from "../shared/page-style.js";
 /** The HTTP-transport route path this form is mounted at (see streamable-http.ts). */
 export const SECRET_ELICITATION_PATH = "/elicit/secret";
 function escape(value) {
     return value.replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
 }
-const STYLE = `
-:root { color-scheme: light dark; }
-* { box-sizing: border-box; }
-body { margin: 0; min-height: 100vh; display: flex; align-items: center; justify-content: center; padding: 24px;
-  background: #f5f5f7; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; }
-.card { background: #fff; border-radius: 14px; box-shadow: 0 1px 3px rgba(0,0,0,.1), 0 8px 24px rgba(0,0,0,.08);
-  padding: 36px; max-width: 480px; width: 100%; }
-h1 { margin: 0 0 10px; font-size: 21px; }
-p { margin: 0 0 24px; color: #555; font-size: 14px; line-height: 1.5; }
-p strong { color: #111; }
-input[type=password] { display: block; width: 100%; padding: 16px 18px; font-size: 17px; letter-spacing: .02em;
-  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; border: 1px solid #d1d1d6; border-radius: 10px;
-  margin-bottom: 18px; }
-input[type=password]:focus { outline: none; border-color: #0071e3; box-shadow: 0 0 0 3px rgba(0,113,227,.15); }
-button { width: 100%; padding: 15px; font-size: 15px; font-weight: 600; color: #fff; background: #0071e3;
-  border: none; border-radius: 10px; cursor: pointer; }
-button:hover { background: #0077ed; }
-@media (prefers-color-scheme: dark) {
-  body { background: #1c1c1e; }
-  .card { background: #2c2c2e; box-shadow: none; }
-  h1 { color: #f5f5f7; }
-  p { color: #a1a1a6; }
-  p strong { color: #f5f5f7; }
-  input[type=password] { background: #1c1c1e; border-color: #48484a; color: #f5f5f7; }
-}`;
 function html(res, status, body) {
     res.setHeader("content-security-policy", "default-src 'none'; script-src 'none'; style-src 'unsafe-inline'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'");
     res.setHeader("cache-control", "no-store");
     res.setHeader("x-content-type-options", "nosniff");
-    res.setHeader("referrer-policy", "no-referrer");
+    // Not no-referrer: under it a browser sends `Origin: null` on this page's native
+    // form POST, even to the same origin, and the HTTP transport rejects that as
+    // invalid_origin. same-origin keeps the Origin and still sends nothing,
+    // token-bearing URL included, to any other site. (The login page solves the
+    // same problem with a fetch() instead; this page runs no script at all.)
+    res.setHeader("referrer-policy", "same-origin");
     res
         .writeHead(status, { "content-type": "text/html; charset=utf-8" })
         .end(`<!doctype html><html lang="en"><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1">` +
-        `<title>wardby secret entry</title><style>${STYLE}</style><body><div class="card">${body}</div></body></html>`);
+        `<title>wardby secret entry</title><style>${PAGE_STYLE}</style><body><div class="card"><div class="kicker">wardby</div>${body}</div></body></html>`);
 }
 /** Handles one GET (render) or POST (submit) for the secret-entry form at the given token. */
 export async function handleSecretElicitationForm(method, token, readFormBody, res, deps) {
@@ -53,7 +34,8 @@ export async function handleSecretElicitationForm(method, token, readFormBody, r
     }
     if (method === "GET") {
         html(res, 200, `<h1>Enter secret value</h1><p>Name: <strong>${escape(payload.secretName)}</strong></p>` +
-            `<form method="post"><input type="password" name="value" autocomplete="off" required autofocus placeholder="Paste the value here">` +
+            `<form method="post"><label>Secret value` +
+            `<input type="password" name="value" autocomplete="off" required autofocus placeholder="Paste the value here"></label>` +
             `<button type="submit">Save</button></form>`);
         return;
     }

package/dist/mcp/tools/secret-elicitation.d.ts

@@ -15,7 +15,7 @@
  * Expiry is swept lazily on every read and write via a `deleteMany` rather
  * than a timer, so an idle process holds no interval.
  */
-import type { PrismaClient } from "@prisma/client";
+import type { PrismaClient } from "#prisma";
 import { type SecretMetadata } from "../../core/secrets.js";
 import type { SecretCipher } from "../../providers/secrets/types.js";
 export interface SecretElicitationPayload {

package/dist/mcp/tools/subagents.js

@@ -6,7 +6,7 @@
  * graph (§7 of the design doc) — cycles are not something Postgres can
  * enforce natively.
  */
-import { Prisma } from "@prisma/client";
+import { Prisma } from "#prisma";
 import { requireOwnedAgent } from "../auth/ownership.js";
 import { McpError } from "../errors.js";
 import { textResult } from "./text-result.js";

package/dist/mcp/tools/tools.js

@@ -9,7 +9,7 @@
  * (attach/detach on an agent or tool you don't own) DO throw, same
  * convention as every other tool in this codebase.
  */
-import { Prisma } from "@prisma/client";
+import { Prisma } from "#prisma";
 import { deriveJsonSchema, validateParams } from "../../sandbox/zod-params.js";
 import { runInSandbox } from "../../sandbox/run-in-sandbox.js";
 import { ToolCapabilitiesPatchSchema } from "../../sandbox/tool-capabilities.js";

package/dist/mcp/transport/streamable-http.d.ts

@@ -1,6 +1,6 @@
 import { type ServerResponse } from "node:http";
 import { type PerRequestResponseMode } from "@modelcontextprotocol/server";
-import type { PrismaClient } from "@prisma/client";
+import type { PrismaClient } from "#prisma";
 import type { AuthProvider } from "../../providers/auth/types.js";
 import type { SelfHostedAuthProvider } from "../../providers/auth/self-hosted.js";
 import type { WardbyMcpServer } from "../server.js";

package/dist/mcp/unattended-schedules.d.ts

@@ -1,4 +1,4 @@
-import type { PrismaClient } from "@prisma/client";
+import type { PrismaClient } from "#prisma";
 /**
  * `wardby mcp` serves the MCP surface and launches the executor, but the
  * scheduler and reconciler live in `wardby scheduler` (or in `wardby serve`,

package/dist/mcp/webhooks/ingress.d.ts

@@ -4,7 +4,7 @@
  * route in streamable-http.ts, matching the design's "route is
  * unauthenticated by OAuth" invariant.
  */
-import type { PrismaClient } from "@prisma/client";
+import type { PrismaClient } from "#prisma";
 import type { Executor } from "../../providers/executor/types.js";
 export interface WebhookIngressRequest {
     headers: Record<string, string | undefined>;

package/dist/providers/auth/index.d.ts

@@ -3,7 +3,7 @@
  * kind. Both adapters implement the same AuthProvider (incl. verifyBearer),
  * so the resource-server middleware and tool handlers never branch on mode.
  */
-import type { PrismaClient } from "@prisma/client";
+import type { PrismaClient } from "#prisma";
 import type { AuthProviderKind, AuthConfig } from "../../config/providers.js";
 import type { AuthProvider } from "./types.js";
 export { DelegatingAuthProvider } from "./delegating.js";