@wardby/cli 0.2.0 → 0.3.0

package/dist/mcp/index.js

@@ -1,28 +1,53 @@
-import { loadProviderConfig, loadMcpConfig, loadAuthConfig } from "../config/providers.js";
+/**
+ * MCP composition root: assembles the real providers, builds one
+ * WardbyMcpServer, registers every tool module, and starts whichever
+ * transport MCP_TRANSPORT selects. No business logic lives here — this
+ * file only wires together pieces every earlier task already built and
+ * tested on their own.
+ *
+ * stdio vs. HTTP diverge on two things a live smoke test surfaced (see the
+ * ledger): stdio needs no `MCP_CANONICAL_URI` (there's no HTTP endpoint or
+ * OAuth challenge to identify) and constructs no real `AuthProvider` at all
+ * (per the design: "stdio local mode: no token; the operator is trusted") —
+ * building one unconditionally would make `wardby mcp` over stdio fail on
+ * missing `AUTH_JWKS_URI`/`AUTH_SIGNING_KEY` a deployment running stdio-only
+ * never needed to set.
+ */
+import { loadProviderConfig, loadMcpConfig, loadShutdownDrainSeconds, loadAuthConfig, loadGitHubEventConfig, loadGitHubVcsConfig, } from "../config/providers.js";
 import { prisma } from "../core/db.js";
+import { waitForInFlightRuns } from "../core/in-flight-runs.js";
 import { NativeEngine } from "../core/engine-native.js";
 import { resolveLlmRegistrations, RoutingLlmProvider } from "../providers/llm/index.js";
 import { PostgresDatastore } from "../providers/datastore/index.js";
 import { PostgresAgentMemory } from "../providers/memory/index.js";
 import { buildConfiguredExecutor, buildExecutor } from "../providers/executor/index.js";
 import { buildSecretCipher } from "../providers/secrets/index.js";
+import { buildHostUserAuthorizers, buildReviewHosts } from "../providers/review-host/index.js";
+import { createRepoAccessGate } from "../core/repo-access.js";
+import { userCallbackPath } from "../core/host-identity-links.js";
 import { buildAuthProvider } from "../providers/auth/index.js";
+import { GitHubAppClient } from "../providers/vcs/github.js";
 import { buildMcpServer } from "./server.js";
 import { countUnattendedSchedules, unattendedSchedulesWarning } from "./unattended-schedules.js";
 import { runStdioServer } from "./transport/stdio.js";
 import { startHttpServer } from "./transport/streamable-http.js";
 import { resolvePrincipal } from "./auth/principal.js";
-import { SCOPES_SUPPORTED } from "./auth/resource-server.js";
+import { ROLE_NAMES, SCOPES_SUPPORTED } from "./auth/resource-server.js";
 import { canonicalUrl } from "./transport/http-limits.js";
 import { registerAgentTools } from "./tools/agents.js";
+import { registerServiceTools } from "./tools/services.js";
 import { registerBudgetGroupTools } from "./tools/budget-groups.js";
 import { registerModelTools } from "./tools/models.js";
+import { registerHelpTools } from "./tools/help.js";
 import { registerTriggerTool } from "./tools/trigger.js";
 import { registerToolAuthoringTools } from "./tools/tools.js";
 import { registerSchedulingTools } from "./tools/scheduling.js";
 import { registerRunTools } from "./tools/runs.js";
 import { registerDatastoreTools } from "./tools/datastore.js";
 import { registerSubAgentTools } from "./tools/subagents.js";
+import { registerGrantTools } from "./tools/grants.js";
+import { registerRepositoryTools } from "./tools/repositories.js";
+import { registerHostAccountTools } from "./tools/host-accounts.js";
 import { registerMemoryTools } from "./tools/memory.js";
 import { registerSecretsTools } from "./tools/secrets.js";
 import { registerWebhookTools } from "./tools/webhooks.js";
@@ -45,17 +70,44 @@ async function warnIfNothingWillFireSchedules() {
 }
 /** Placeholder identifier for stdio, which has no HTTP endpoint to name. Never surfaced: stdio's fixed context always holds every scope, so no scope challenge is ever built against it. */
 const STDIO_PLACEHOLDER_URI = "urn:wardby:local-stdio";
+/**
+ * stdio's one fixed identity: the local operator (LOCAL_PRINCIPAL), trusted
+ * with every supported scope and every role — whoever can start the
+ * process already holds the database and its keys.
+ */
+export function localOperatorContext(principal, providers, db) {
+    return {
+        principal,
+        scopes: new Set(SCOPES_SUPPORTED),
+        roles: [...ROLE_NAMES],
+        // Full access to every resource (resource-sharing grants spec §3.9),
+        // but never past the binding rules.
+        operator: true,
+        canonicalUri: STDIO_PLACEHOLDER_URI,
+        providers,
+        db,
+        clientSupportsTasks: false,
+        // Placeholder — server.ts's resolveCtx overwrites this with the
+        // current call's real mcpReq on every dispatch.
+        mcpReq: { requestState: () => undefined },
+    };
+}
 /** Registers the full Phase 4 tool surface — every module, in one place. */
 export function registerAllTools(mcp, opts) {
     registerAgentTools(mcp);
+    registerServiceTools(mcp);
     registerBudgetGroupTools(mcp);
     registerModelTools(mcp);
+    registerHelpTools(mcp);
     registerTriggerTool(mcp);
     registerToolAuthoringTools(mcp);
     registerSchedulingTools(mcp);
     registerRunTools(mcp);
     registerDatastoreTools(mcp);
     registerSubAgentTools(mcp);
+    registerGrantTools(mcp);
+    registerRepositoryTools(mcp);
+    registerHostAccountTools(mcp);
     registerMemoryTools(mcp);
     registerSecretsTools(mcp, {
         buildElicitationUrl: opts.secretElicitationUrl,
@@ -75,6 +127,11 @@ export function buildMcpProviders() {
     const secrets = buildSecretCipher(providerConfig);
     const datastore = new PostgresDatastore(prisma, secrets);
     const memory = new PostgresAgentMemory(prisma);
+    const reviewHosts = buildReviewHosts();
+    const hostUserAuthorizers = buildHostUserAuthorizers();
+    // One gate (and one cache) for the whole process: set-time checks in the
+    // MCP tools, repo_* calls in native runs, coding runs, and host events.
+    const repoAccess = createRepoAccessGate({ db: prisma, hosts: reviewHosts });
     // `nativeProviders` is passed by reference into buildExecutor, and native
     // runs it drives read `this.providers.executor` at call time (not at
     // construction time) — so patching `.executor` on afterward, once the
@@ -83,11 +140,13 @@ export function buildMcpProviders() {
     // through the same composed executor everything else uses. There's no
     // way to hand the native executor a reference to its own wrapping
     // RoutingExecutor before that wrapper is constructed.
-    const nativeProviders = { llm, engine, datastore, secrets, memory };
+    const nativeProviders = { llm, engine, datastore, secrets, memory, reviewHosts, repoAccess };
     const nativeExecutor = buildExecutor(providerConfig, nativeProviders, prisma);
-    const executor = buildConfiguredExecutor({ native: nativeExecutor, db: prisma, providerConfig });
+    const executor = buildConfiguredExecutor({ native: nativeExecutor, db: prisma, providerConfig, repoAccess });
     nativeProviders.executor = executor;
-    return { providers: { llm, engine, datastore, secrets, executor, memory } };
+    return {
+        providers: { llm, engine, datastore, secrets, executor, memory, reviewHosts, hostUserAuthorizers, repoAccess },
+    };
 }
 /** Awaits `promise` (if any), logging and swallowing a rejection instead of propagating it. */
 async function closeQuietly(promise, what) {
@@ -101,6 +160,8 @@ async function closeQuietly(promise, what) {
 /** The real CLI entry point: `wardby mcp`. Reads config from the environment, starts stdio or HTTP per MCP_TRANSPORT. */
 export async function startMcp(options = {}) {
     const mcpConfig = loadMcpConfig();
+    // Parsed up front so a malformed value fails at startup, not at shutdown.
+    const drainSeconds = loadShutdownDrainSeconds();
     const providers = options.providers ?? buildMcpProviders().providers;
     await providers.executor.launch?.();
     if (!options.schedulerAttached)
@@ -120,17 +181,7 @@ export async function startMcp(options = {}) {
         // local identity for the whole connection, per the design's own
         // "stdio local mode: no token; the operator is trusted."
         const principal = await resolvePrincipal(mcpConfig.localPrincipal, prisma);
-        mcp.setFixedContext({
-            principal,
-            scopes: new Set(SCOPES_SUPPORTED),
-            canonicalUri: STDIO_PLACEHOLDER_URI,
-            providers,
-            db: prisma,
-            clientSupportsTasks: false,
-            // Placeholder — server.ts's resolveCtx overwrites this with the
-            // current call's real mcpReq on every dispatch.
-            mcpReq: { requestState: () => undefined },
-        });
+        mcp.setFixedContext(localOperatorContext(principal, providers, prisma));
         const stdio = runStdioServer(mcp);
         return {
             close: async () => {
@@ -159,6 +210,40 @@ export async function startMcp(options = {}) {
         secretElicitationUrl: (token) => Promise.resolve(`${httpOrigin}${SECRET_ELICITATION_PATH}?t=${encodeURIComponent(token)}`),
         secretElicitationProtocol: mcpConfig.secretElicitationProtocol,
     });
+    const eventConfig = loadGitHubEventConfig();
+    const githubConfig = loadGitHubVcsConfig();
+    const reviewHosts = providers.reviewHosts;
+    const hostEvents = eventConfig.webhookSecret && reviewHosts?.github && githubConfig.appId && githubConfig.privateKey
+        ? {
+            github: {
+                db: prisma,
+                executor: providers.executor,
+                hosts: reviewHosts,
+                repoAccess: providers.repoAccess ?? createRepoAccessGate({ db: prisma, hosts: reviewHosts }),
+                webhookSecret: eventConfig.webhookSecret,
+                appIdentity: (() => {
+                    const client = new GitHubAppClient({
+                        appId: githubConfig.appId,
+                        privateKey: githubConfig.privateKey,
+                        apiVersion: githubConfig.apiVersion,
+                    });
+                    return () => client.appIdentity();
+                })(),
+            },
+        }
+        : undefined;
+    mcpLog.info({ enabled: Boolean(hostEvents) }, "GitHub host events ingress");
+    const githubAuthorizer = providers.hostUserAuthorizers?.github;
+    const hostUserAuth = githubAuthorizer
+        ? {
+            github: {
+                db: prisma,
+                authorizer: githubAuthorizer,
+                redirectUri: `${httpOrigin}${userCallbackPath("github")}`,
+            },
+        }
+        : undefined;
+    mcpLog.info({ enabled: Boolean(hostUserAuth) }, "GitHub account linking");
     const http = await startHttpServer({
         mcp,
         config: {
@@ -170,6 +255,8 @@ export async function startMcp(options = {}) {
         },
         auth: { authProvider, db: prisma, providers },
         selfHosted,
+        hostEvents,
+        hostUserAuth,
     });
     const cleanupTimer = selfHosted
         ? setInterval(() => {
@@ -181,6 +268,9 @@ export async function startMcp(options = {}) {
             if (cleanupTimer)
                 clearInterval(cleanupTimer);
             await closeQuietly(http.close(), "HTTP transport close");
+            // Let the runs this instance is executing finish before the executor
+            // closes under them; a run abandoned here is lost, never resumed.
+            await waitForInFlightRuns(drainSeconds * 1000);
             await closeQuietly(providers.executor.close?.(), "executor close");
         },
     };

package/dist/mcp/server.d.ts

@@ -23,7 +23,7 @@
  * whole connection.
  */
 import { type McpServerFactory, type InputRequiredResult } from "@modelcontextprotocol/server";
-import type { PrismaClient } from "@prisma/client";
+import type { PrismaClient } from "#prisma";
 import type { McpRequestContext, McpProviders } from "./context.js";
 export interface ToolSpec<Args = Record<string, unknown>> {
     name: string;

package/dist/mcp/server.js

@@ -25,9 +25,10 @@
 import { McpServer, fromJsonSchema, createRequestStateCodec, CLIENT_CAPABILITIES_META_KEY, } from "@modelcontextprotocol/server";
 import { randomBytes } from "node:crypto";
 import { requireScope } from "./auth/resource-server.js";
-import { McpError } from "./errors.js";
+import { McpError, mapPrismaError } from "./errors.js";
 import { TASKS_EXTENSION_ID, clientSupportsTasks } from "./capabilities.js";
-import { visibleToPrincipal } from "./auth/ownership.js";
+import { readableAgentsWhere } from "./auth/access.js";
+import { grantedIds } from "../core/grants.js";
 import { logger } from "../core/logger.js";
 const REQUEST_STATE_KEY_BYTES = 32;
 /**
@@ -97,6 +98,7 @@ export function buildMcpServer(opts) {
             return {
                 principal: extra.principal,
                 scopes: new Set(authInfo.scopes),
+                roles: extra.roles ?? [],
                 canonicalUri: opts.config.canonicalUri,
                 providers: opts.providers,
                 db: opts.db,
@@ -130,7 +132,14 @@ export function buildMcpServer(opts) {
             }, async (args, sdkCtx) => {
                 const ctx = resolveCtx(sdkCtx);
                 requireScope(ctx, opts.config.canonicalUri, ...requiredScopes);
-                return spec.handler(args, ctx);
+                try {
+                    return await spec.handler(args, ctx);
+                }
+                catch (err) {
+                    // A raw Prisma error would reach the client verbatim (the SDK
+                    // renders any thrown error's message) -- see mapPrismaError.
+                    throw mapPrismaError(err);
+                }
             });
         }
         // Non-spec (extension) methods need a { params, result } schema bundle
@@ -143,7 +152,12 @@ export function buildMcpServer(opts) {
             mcpServer.server.setRequestHandler(method, { params: PERMISSIVE_SCHEMA }, async (params, sdkCtx) => {
                 const ctx = resolveCtx(sdkCtx);
                 requireScope(ctx, opts.config.canonicalUri, ...scope);
-                return (await handler(params, ctx));
+                try {
+                    return (await handler(params, ctx));
+                }
+                catch (err) {
+                    throw mapPrismaError(err);
+                }
             });
         }
         // One MCP prompt per Agent this connection can see, so a client that
@@ -154,12 +168,16 @@ export function buildMcpServer(opts) {
         // resolves it per-dispatch from the SDK's own per-call ServerContext,
         // not at factory time) — stdio's fixedContext IS set by now
         // (mcp/index.ts calls setFixedContext before serveStdio ever invokes
-        // this factory), so stdio sees every agent it owns plus public ones;
-        // HTTP conservatively falls back to public-only until this factory can
-        // see request-scoped identity. A DB hiccup here must not break tool
-        // registration — this is a discoverability nicety, not core function.
+        // this factory), so stdio sees every agent it can read;
+        // HTTP conservatively falls back to agents shared with everyone (a
+        // grant of at least read) until this factory can see request-scoped
+        // identity; stdio sees what its principal can read (the operator: all).
+        // A DB hiccup here must not break tool registration — this is a
+        // discoverability nicety, not core function.
         try {
-            const where = fixedContext ? visibleToPrincipal(fixedContext.principal.id) : { ownerId: null };
+            const where = fixedContext
+                ? await readableAgentsWhere(fixedContext, opts.db)
+                : { id: { in: await grantedIds(opts.db, "agent", null, "read") } };
             const agents = await opts.db.agent.findMany({ where });
             for (const agent of agents) {
                 mcpServer.registerPrompt(agent.name, {

package/dist/mcp/shared/page-style.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Shared CSS for wardby's server-rendered pages: the self-hosted OAuth
+ * browser flow (auth/self-hosted/browser.ts) and the secret-entry form
+ * (tools/secret-elicitation-form.ts). Both are publicly reachable,
+ * dependency-free surfaces — no CDN fonts, no external stylesheets, no
+ * external images — so this module is the one inline stylesheet each page
+ * embeds in its own `<style>` tag rather than a `<link>`.
+ *
+ * Tokens follow the naming used by wardby's marketing/dashboard page so this
+ * corner of the product reads as the same system: --cream --gold --ink
+ * --line --mint --mint-deep --muted --paper --red --shadow --sky --white.
+ * Dark mode redefines the same token names under `prefers-color-scheme` —
+ * the source page itself has no dark mode, but these pages already did
+ * (the secret form's previous inline styles supported it), so it's kept.
+ */
+export declare const PAGE_STYLE = "\n:root {\n  color-scheme: light dark;\n  --cream: #fffaf0;\n  --paper: #f7f4ec;\n  --white: #ffffff;\n  --ink: #12243c;\n  --muted: #657287;\n  --line: #dce3e8;\n  --mint: #43e6b1;\n  --mint-deep: #15b982;\n  --gold: #c9aa70;\n  --red: #e33d37;\n  --sky: #75d4ff;\n  --shadow: 0 24px 70px rgba(6, 23, 47, 0.12);\n}\n@media (prefers-color-scheme: dark) {\n  :root {\n    --paper: #0b1524;\n    --white: #142238;\n    --ink: #f2f6fa;\n    --muted: #9fb0c2;\n    --line: #263a52;\n    --shadow: 0 24px 70px rgba(0, 0, 0, 0.5);\n  }\n}\n* { box-sizing: border-box; }\nbody {\n  margin: 0;\n  min-height: 100vh;\n  display: flex;\n  align-items: center;\n  justify-content: center;\n  padding: 24px;\n  color: var(--ink);\n  background:\n    radial-gradient(circle at 12% 0%, rgba(67, 230, 177, 0.14), transparent 26rem),\n    radial-gradient(circle at 100% 20%, rgba(117, 212, 255, 0.12), transparent 30rem),\n    var(--paper);\n  font-family: \"Avenir Next\", Avenir, \"Trebuchet MS\", sans-serif;\n  -webkit-font-smoothing: antialiased;\n}\n.card {\n  width: 100%;\n  max-width: 420px;\n  padding: 38px 34px;\n  border: 1px solid var(--line);\n  border-radius: 20px;\n  background: var(--white);\n  box-shadow: var(--shadow);\n}\n.kicker {\n  margin: 0 0 12px;\n  color: var(--mint-deep);\n  font-size: 11px;\n  font-weight: 800;\n  letter-spacing: 0.15em;\n  text-transform: uppercase;\n}\nh1 {\n  margin: 0 0 10px;\n  font-family: Futura, \"Avenir Next\", Avenir, sans-serif;\n  font-size: 23px;\n  line-height: 1.2;\n  letter-spacing: -0.02em;\n}\np { margin: 0 0 22px; color: var(--muted); font-size: 14px; line-height: 1.55; }\np:last-child { margin-bottom: 0; }\np strong { color: var(--ink); }\nlabel { display: block; margin-bottom: 18px; font-size: 13px; font-weight: 700; color: var(--muted); }\ninput[type=\"password\"] {\n  display: block;\n  width: 100%;\n  margin-top: 8px;\n  padding: 14px 16px;\n  font-size: 16px;\n  letter-spacing: 0.02em;\n  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;\n  color: var(--ink);\n  background: var(--paper);\n  border: 1px solid var(--line);\n  border-radius: 10px;\n}\ninput[type=\"password\"]:focus {\n  outline: none;\n  border-color: var(--mint-deep);\n  box-shadow: 0 0 0 3px rgba(21, 185, 130, 0.18);\n}\nbutton {\n  width: 100%;\n  margin-top: 4px;\n  padding: 15px;\n  font: inherit;\n  font-size: 15px;\n  font-weight: 700;\n  color: var(--cream);\n  background: var(--ink);\n  border: none;\n  border-radius: 10px;\n  cursor: pointer;\n  transition: background 140ms ease;\n}\nbutton:hover { background: var(--mint-deep); }\nbutton:focus-visible { outline: 3px solid var(--mint-deep); outline-offset: 2px; }\n.actions { display: flex; gap: 10px; margin-top: 4px; }\n.actions button { margin-top: 0; }\n.actions button[value=\"deny\"] {\n  color: var(--ink);\n  background: var(--paper);\n  border: 1px solid var(--line);\n}\n.actions button[value=\"deny\"]:hover { background: var(--line); }\n#auth-error { margin: 16px 0 0; color: var(--red); font-size: 13px; min-height: 1em; }\n";

package/dist/mcp/shared/page-style.js

@@ -0,0 +1,129 @@
+/**
+ * Shared CSS for wardby's server-rendered pages: the self-hosted OAuth
+ * browser flow (auth/self-hosted/browser.ts) and the secret-entry form
+ * (tools/secret-elicitation-form.ts). Both are publicly reachable,
+ * dependency-free surfaces — no CDN fonts, no external stylesheets, no
+ * external images — so this module is the one inline stylesheet each page
+ * embeds in its own `<style>` tag rather than a `<link>`.
+ *
+ * Tokens follow the naming used by wardby's marketing/dashboard page so this
+ * corner of the product reads as the same system: --cream --gold --ink
+ * --line --mint --mint-deep --muted --paper --red --shadow --sky --white.
+ * Dark mode redefines the same token names under `prefers-color-scheme` —
+ * the source page itself has no dark mode, but these pages already did
+ * (the secret form's previous inline styles supported it), so it's kept.
+ */
+export const PAGE_STYLE = `
+:root {
+  color-scheme: light dark;
+  --cream: #fffaf0;
+  --paper: #f7f4ec;
+  --white: #ffffff;
+  --ink: #12243c;
+  --muted: #657287;
+  --line: #dce3e8;
+  --mint: #43e6b1;
+  --mint-deep: #15b982;
+  --gold: #c9aa70;
+  --red: #e33d37;
+  --sky: #75d4ff;
+  --shadow: 0 24px 70px rgba(6, 23, 47, 0.12);
+}
+@media (prefers-color-scheme: dark) {
+  :root {
+    --paper: #0b1524;
+    --white: #142238;
+    --ink: #f2f6fa;
+    --muted: #9fb0c2;
+    --line: #263a52;
+    --shadow: 0 24px 70px rgba(0, 0, 0, 0.5);
+  }
+}
+* { box-sizing: border-box; }
+body {
+  margin: 0;
+  min-height: 100vh;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  padding: 24px;
+  color: var(--ink);
+  background:
+    radial-gradient(circle at 12% 0%, rgba(67, 230, 177, 0.14), transparent 26rem),
+    radial-gradient(circle at 100% 20%, rgba(117, 212, 255, 0.12), transparent 30rem),
+    var(--paper);
+  font-family: "Avenir Next", Avenir, "Trebuchet MS", sans-serif;
+  -webkit-font-smoothing: antialiased;
+}
+.card {
+  width: 100%;
+  max-width: 420px;
+  padding: 38px 34px;
+  border: 1px solid var(--line);
+  border-radius: 20px;
+  background: var(--white);
+  box-shadow: var(--shadow);
+}
+.kicker {
+  margin: 0 0 12px;
+  color: var(--mint-deep);
+  font-size: 11px;
+  font-weight: 800;
+  letter-spacing: 0.15em;
+  text-transform: uppercase;
+}
+h1 {
+  margin: 0 0 10px;
+  font-family: Futura, "Avenir Next", Avenir, sans-serif;
+  font-size: 23px;
+  line-height: 1.2;
+  letter-spacing: -0.02em;
+}
+p { margin: 0 0 22px; color: var(--muted); font-size: 14px; line-height: 1.55; }
+p:last-child { margin-bottom: 0; }
+p strong { color: var(--ink); }
+label { display: block; margin-bottom: 18px; font-size: 13px; font-weight: 700; color: var(--muted); }
+input[type="password"] {
+  display: block;
+  width: 100%;
+  margin-top: 8px;
+  padding: 14px 16px;
+  font-size: 16px;
+  letter-spacing: 0.02em;
+  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
+  color: var(--ink);
+  background: var(--paper);
+  border: 1px solid var(--line);
+  border-radius: 10px;
+}
+input[type="password"]:focus {
+  outline: none;
+  border-color: var(--mint-deep);
+  box-shadow: 0 0 0 3px rgba(21, 185, 130, 0.18);
+}
+button {
+  width: 100%;
+  margin-top: 4px;
+  padding: 15px;
+  font: inherit;
+  font-size: 15px;
+  font-weight: 700;
+  color: var(--cream);
+  background: var(--ink);
+  border: none;
+  border-radius: 10px;
+  cursor: pointer;
+  transition: background 140ms ease;
+}
+button:hover { background: var(--mint-deep); }
+button:focus-visible { outline: 3px solid var(--mint-deep); outline-offset: 2px; }
+.actions { display: flex; gap: 10px; margin-top: 4px; }
+.actions button { margin-top: 0; }
+.actions button[value="deny"] {
+  color: var(--ink);
+  background: var(--paper);
+  border: 1px solid var(--line);
+}
+.actions button[value="deny"]:hover { background: var(--line); }
+#auth-error { margin: 16px 0 0; color: var(--red); font-size: 13px; min-height: 1em; }
+`;

package/dist/mcp/tasks/manager.d.ts

@@ -10,7 +10,7 @@
  * cancellation is cooperative and eventually consistent, per the
  * extension's own spec language).
  */
-import type { PrismaClient, Task } from "@prisma/client";
+import type { PrismaClient, Task } from "#prisma";
 export type TaskStatus = "working" | "input_required" | "completed" | "failed" | "cancelled";
 export interface JsonRpcErrorObject {
     code: number;