@wardby/cli 0.2.0 → 0.3.0

package/dist/generated/prisma/browser.d.ts

@@ -0,0 +1,328 @@
+import * as Prisma from './internal/prismaNamespaceBrowser.js';
+export { Prisma };
+export * as $Enums from './enums.js';
+export * from './enums.js';
+/**
+ * Model Agent
+ *
+ */
+export type Agent = Prisma.AgentModel;
+/**
+ * Model AgentSubAgent
+ * Un-phased: agent-composition edge, referenced by agent name at the
+ * import boundary (capabilities/subagents.json) but id-based here to
+ * match that Tier-1 convention. Cycle-checked in the MCP tool handler at
+ * creation time, not enforced by the database (Postgres has no native
+ * "no cycles" constraint).
+ */
+export type AgentSubAgent = Prisma.AgentSubAgentModel;
+/**
+ * Model BudgetGroup
+ * Phase 7: an optional recurring spend cap across a group of agents,
+ * layered on top of each agent's own per-run budgetUsd (which stays
+ * required and unchanged). All three period caps are independently
+ * optional -- unset means "no cap for that period." warnThresholdRatio
+ * is per-group so different groups can choose their own early-warning
+ * point; enforcement itself never lives here -- see
+ * src/core/budget-groups.ts and runner.ts's executeRun, which turn a
+ * group's remaining period budget into a tightened *effective* per-run
+ * budget the existing engine budget machinery enforces unchanged.
+ */
+export type BudgetGroup = Prisma.BudgetGroupModel;
+/**
+ * Model Tool
+ * Phase 3: a WASM-sandboxed, Zod-validated tool a model can call.
+ */
+export type Tool = Prisma.ToolModel;
+/**
+ * Model AgentTool
+ * Phase 3: explicit many-to-many join between Agent and Tool.
+ * Phase 6: per-attachment capability scoping (OWASP LLM08 fix — Excessive
+ * Agency). Empty array = no access to that resource class; a tool must be
+ * explicitly granted secrets/datastore-prefixes/hosts at attach time. A
+ * literal "*" element in allowedHosts lifts the fetch allowlist entirely
+ * (existing SSRF protection against private/link-local addresses still
+ * applies) — the back-compat escape hatch for pre-existing attachments and
+ * deliberate full-web-access tools. See src/sandbox/tool-capabilities.ts.
+ */
+export type AgentTool = Prisma.AgentToolModel;
+/**
+ * Model Datastore
+ * Named, owned resource shared across agents via AgentDatastore (Un-phased
+ * roadmap item "Named / shared datastores"). Null ownerId = public/unowned,
+ * matching Tool's convention.
+ */
+export type Datastore = Prisma.DatastoreModel;
+/**
+ * Model AgentDatastore
+ * Attaches a Datastore to an agent, addressed at sandbox point-of-use by
+ * `boundName` (sharedDatastore.get(boundName, key)) — same boundName
+ * convention as AgentSecret. Defaults to the datastore's own name.
+ */
+export type AgentDatastore = Prisma.AgentDatastoreModel;
+/**
+ * Model DatastoreEntry
+ * Phase 3: the datastore seam's Postgres-backed default. Scoped by agentId
+ * (private, per-agent) or datastoreId (shared, see Datastore above) — a row
+ * carries exactly one, enforced by a hand-written CHECK in the migration
+ * (Prisma has no declarative "exactly one of two columns" constraint).
+ * Phase 6: optional per-entry PII encryption (see `pii`/`keyId` below).
+ *
+ * `id` is a surrogate key required by Prisma's schema validator: with
+ * agentId and datastoreId both optional, neither `@@unique` below has an
+ * all-required-fields criterion, and Prisma rejects a model with no such
+ * criterion (P1012, "Each model must have at least one unique criteria
+ * that has only required fields") — `prisma generate`/`validate` refuse to
+ * run at all without it. Point lookups still go through the
+ * agentId_key/datastoreId_key compound uniques; `id` is not otherwise used.
+ */
+export type DatastoreEntry = Prisma.DatastoreEntryModel;
+/**
+ * Model AgentMemory
+ * Un-phased: agent-controlled persistent memory (key/content per agent),
+ * gated by Agent.memoryEnabled. Deliberately a separate table rather than a
+ * Datastore convention — memory has its own access surface (built-in
+ * memory_get/memory_set/memory_list/memory_search tools, not user-authored
+ * sandbox code) and its own full-text search index, which would be an odd
+ * fit bolted onto Datastore's opaque-JSON-value shape. No FK to Agent,
+ * matching DatastoreEntry: deleting an agent leaves orphaned rows today,
+ * same pre-existing gap, not a new one.
+ *
+ * `contentTsv` is maintained by application code (see
+ * PostgresAgentMemory.set), never a Postgres GENERATED column — a generated
+ * column's expression has no representation in `Unsupported()`, which risks
+ * the migration-vs-schema drift check (CLAUDE.md) never landing clean.
+ */
+export type AgentMemory = Prisma.AgentMemoryModel;
+/**
+ * Model Run
+ *
+ */
+export type Run = Prisma.RunModel;
+/**
+ * Model CodingAgentProfile
+ * Phase 5: owner-configured coding behavior. Runtime credentials and opaque
+ * launcher handles never live on the reusable profile.
+ */
+export type CodingAgentProfile = Prisma.CodingAgentProfileModel;
+/**
+ * Model CodingRun
+ * Phase 5: immutable dispatch inputs plus opaque execution/result state for
+ * one coding run. Policy is copied from the profile before work starts.
+ */
+export type CodingRun = Prisma.CodingRunModel;
+/**
+ * Model CodingService
+ * Coding-run services (docs/coding-services.md): the catalog a repository's
+ * .wardby/services.yaml names entries from. Admin-managed over MCP
+ * (list/get_service: agents:read; create/update/delete_service:
+ * services:manage, audit-logged).
+ * Built-in rows ship with wardby, seeded by migration, and change only with a
+ * wardby release. `kind` is "sidecar" (a fresh instance in each run's pod);
+ * "external" is reserved.
+ */
+export type CodingService = Prisma.CodingServiceModel;
+/**
+ * Model CodingProxySession
+ * Trusted-boundary state for one coding run. Only a capability digest and an
+ * upstream credential reference are persisted; neither secret value enters the DB.
+ */
+export type CodingProxySession = Prisma.CodingProxySessionModel;
+/**
+ * Model CodingProxyRequest
+ * Monotonic per-upstream-call ledger. Uncertain reservations remain held so a
+ * crash or truncated provider stream can never create new spendable budget.
+ */
+export type CodingProxyRequest = Prisma.CodingProxyRequestModel;
+/**
+ * Model RegistryAllowance
+ * One package a run's profile has approved from a given ecosystem, resolved
+ * once at dispatch (see CodingRun.packageAllowlist) and used to gate every
+ * proxy fetch for the run's lifetime.
+ */
+export type RegistryAllowance = Prisma.RegistryAllowanceModel;
+/**
+ * Model RegistryFetch
+ * Audit ledger of every package fetch the registry proxy served or refused
+ * for a run.
+ */
+export type RegistryFetch = Prisma.RegistryFetchModel;
+/**
+ * Model RegistryVersionFact
+ * Immutable facts about one published package version, read from the
+ * registry itself (never from a lockfile) by lockfile verification: its
+ * publish time, integrity, download URL and declared dependencies
+ * ([{ key, name, range }], aliases resolved). Stored once and reused
+ * forever; allow/deny decisions are never cached here.
+ */
+export type RegistryVersionFact = Prisma.RegistryVersionFactModel;
+/**
+ * Model RegistryApprovedVersion
+ * One exact package version a run's lockfile plan (POST
+ * /registry/<ecosystem>/-/plan) verified and approved: a download of it is
+ * served directly, integrity-checked against this value.
+ */
+export type RegistryApprovedVersion = Prisma.RegistryApprovedVersionModel;
+/**
+ * Model RegistryPlanRefusal
+ * One exact package version a run's lockfile plan refused for a reason
+ * intrinsic to the registry's name@version (too new, an advisory, not
+ * published, no integrity, hosted elsewhere): a download of it is answered
+ * from here with the same code and reason, without a graph walk.
+ */
+export type RegistryPlanRefusal = Prisma.RegistryPlanRefusalModel;
+/**
+ * Model SchedulerLease
+ * Phase 2: single-row-per-scope lease so exactly one scheduler process
+ * ticks at a time. `holder` is a process instance id (crypto.randomUUID()).
+ */
+export type SchedulerLease = Prisma.SchedulerLeaseModel;
+/**
+ * Model Principal
+ * Phase 4: an authenticated caller. `subject` is the IdP subject claim
+ * (delegating mode) or the configured LOCAL_PRINCIPAL (stdio, no token).
+ * Created on first sight (find-or-create by subject).
+ */
+export type Principal = Prisma.PrincipalModel;
+/**
+ * Model ResourceGrant
+ * Explicit sharing of one resource with one grantee (docs/private/
+ * 2026-09-26-resource-sharing-grants-spec-and-plan.md). Polymorphic on
+ * (resourceType, resourceId) -- no FK to the resource, so every resource
+ * delete path removes its grants in the same transaction. Levels are
+ * ordered per type and validated in code (core/grants.ts), like
+ * AgentRepository.provider, so a new type or level needs no enum migration.
+ */
+export type ResourceGrant = Prisma.ResourceGrantModel;
+/**
+ * Model Task
+ *
+ */
+export type Task = Prisma.TaskModel;
+/**
+ * Model Secret
+ * Phase 4: a secret value, encrypted at rest via the SecretCipher seam.
+ * `ciphertext` is opaque to Prisma; only the cipher's decrypt() ever
+ * produces plaintext, and only at point-of-use inside the sandbox.
+ */
+export type Secret = Prisma.SecretModel;
+/**
+ * Model AgentSecret
+ * Phase 4: attaches a secret to an agent, addressed at sandbox point-of-use
+ * by `boundName` (secrets.get(boundName)). `boundName` defaults to the
+ * secret's canonical name; it differs only when the agent binds the secret
+ * under an alias, letting two agents resolve the same logical name to
+ * different underlying secrets.
+ */
+export type AgentSecret = Prisma.AgentSecretModel;
+/**
+ * Model SecretElicitationOutcome
+ * Cross-instance persistence for the out-of-band secret-entry flow
+ * (mcp/tools/secret-elicitation.ts) — was an in-process Map, which stranded
+ * a browser-form submission on the wrong instance under a multi-instance
+ * HTTP deployment. `outcome` holds the SecretElicitationOutcome JSON;
+ * `expiresAt` mirrors the old TTL sweep, now a `DELETE WHERE expiresAt <=
+ * now()` instead of a Map scan.
+ */
+export type SecretElicitationOutcome = Prisma.SecretElicitationOutcomeModel;
+/**
+ * Model Webhook
+ * Phase 4: inbound trigger for an agent. `secretHash` is an HMAC/hash of
+ * the validation secret shown to the caller once at creation; the raw
+ * secret itself is never stored.
+ */
+export type Webhook = Prisma.WebhookModel;
+/**
+ * Model OAuthClient
+ * Phase 4 (self-hosted AS only): a registered OAuth client. Created and
+ * used only under AUTH_PROVIDER=self-hosted; the delegating adapter never
+ * writes these tables even though the migration creates them unconditionally.
+ */
+export type OAuthClient = Prisma.OAuthClientModel;
+/**
+ * Model OAuthGrant
+ * Phase 4 (self-hosted AS only): an issued authorization grant / refresh token.
+ */
+export type OAuthGrant = Prisma.OAuthGrantModel;
+/**
+ * Model AuthUser
+ *
+ */
+export type AuthUser = Prisma.AuthUserModel;
+/**
+ * Model AuthLoginKey
+ *
+ */
+export type AuthLoginKey = Prisma.AuthLoginKeyModel;
+/**
+ * Model AuthSession
+ *
+ */
+export type AuthSession = Prisma.AuthSessionModel;
+/**
+ * Model AuthFormChallenge
+ *
+ */
+export type AuthFormChallenge = Prisma.AuthFormChallengeModel;
+/**
+ * Model OAuthAuthorizationRequest
+ *
+ */
+export type OAuthAuthorizationRequest = Prisma.OAuthAuthorizationRequestModel;
+/**
+ * Model OAuthAuthorizationCode
+ *
+ */
+export type OAuthAuthorizationCode = Prisma.OAuthAuthorizationCodeModel;
+/**
+ * Model OAuthFamily
+ *
+ */
+export type OAuthFamily = Prisma.OAuthFamilyModel;
+/**
+ * Model AuthRateLimit
+ *
+ */
+export type AuthRateLimit = Prisma.AuthRateLimitModel;
+/**
+ * Model AgentRepository
+ * Which repositories on which code-review host a native agent may act on,
+ * and which host events trigger it. See
+ * docs/private/2026-09-25-code-review-host-design.md §4.1.
+ */
+export type AgentRepository = Prisma.AgentRepositoryModel;
+/**
+ * Model RunHostCheck
+ * The host check a run owns, so the review tool can complete it and the
+ * run finalizer can close it if the run ends without publishing.
+ */
+export type RunHostCheck = Prisma.RunHostCheckModel;
+/**
+ * Model RunHostStatus
+ * De-duplicates host webhook redeliveries; pruned after 7 days.
+ * The status comment wardby posts on the issue or pull request whose
+ * @-mention started this run ("working on it"), edited with the outcome
+ * when the run ends. One per mention run.
+ */
+export type RunHostStatus = Prisma.RunHostStatusModel;
+/**
+ * Model HostEventDelivery
+ *
+ */
+export type HostEventDelivery = Prisma.HostEventDeliveryModel;
+/**
+ * Model HostIdentity
+ * A principal's verified identity on a code-review host (GitHub today),
+ * linked through the host's user-authorization flow (link_host_account).
+ * Only the numeric user id and login are stored, never a user token. A host
+ * user belongs to at most one principal.
+ */
+export type HostIdentity = Prisma.HostIdentityModel;
+/**
+ * Model HostIdentityLinkRequest
+ * An in-flight host identity link (link_host_account): the OAuth state and
+ * PKCE verifier, then, after the host's callback, the verified user and the
+ * hash of the one-time confirmation code the same principal must submit.
+ * Lives 10 minutes.
+ */
+export type HostIdentityLinkRequest = Prisma.HostIdentityLinkRequestModel;

package/dist/generated/prisma/browser.js

@@ -0,0 +1,17 @@
+/* !!! This is code generated by Prisma. Do not edit directly. !!! */
+/* eslint-disable */
+// biome-ignore-all lint: generated file
+// @ts-nocheck 
+/*
+ * This file should be your main import to use Prisma-related types and utilities in a browser.
+ * Use it to get access to models, enums, and input types.
+ *
+ * This file does not contain a `PrismaClient` class, nor several other helpers that are intended as server-side only.
+ * See `client.ts` for the standard, server-side entry point.
+ *
+ * 🟢 You can import this file directly.
+ */
+import * as Prisma from './internal/prismaNamespaceBrowser.js';
+export { Prisma };
+export * as $Enums from './enums.js';
+export * from './enums.js';

package/dist/generated/prisma/client.d.ts

@@ -0,0 +1,347 @@
+import * as runtime from "@prisma/client/runtime/client";
+import * as $Class from "./internal/class.js";
+import * as Prisma from "./internal/prismaNamespace.js";
+export * as $Enums from './enums.js';
+export * from "./enums.js";
+/**
+ * ## Prisma Client
+ *
+ * Type-safe database client for TypeScript
+ * @example
+ * ```
+ * const prisma = new PrismaClient({
+ *   adapter: new PrismaPg({ connectionString: process.env.DATABASE_URL })
+ * })
+ * // Fetch zero or more Agents
+ * const agents = await prisma.agent.findMany()
+ * ```
+ *
+ * Read more in our [docs](https://pris.ly/d/client).
+ */
+export declare const PrismaClient: $Class.PrismaClientConstructor;
+export type PrismaClient<LogOpts extends Prisma.LogLevel = never, OmitOpts extends Prisma.PrismaClientOptions["omit"] = Prisma.PrismaClientOptions["omit"], ExtArgs extends runtime.Types.Extensions.InternalArgs = runtime.Types.Extensions.DefaultArgs> = $Class.PrismaClient<LogOpts, OmitOpts, ExtArgs>;
+export { Prisma };
+/**
+ * Model Agent
+ *
+ */
+export type Agent = Prisma.AgentModel;
+/**
+ * Model AgentSubAgent
+ * Un-phased: agent-composition edge, referenced by agent name at the
+ * import boundary (capabilities/subagents.json) but id-based here to
+ * match that Tier-1 convention. Cycle-checked in the MCP tool handler at
+ * creation time, not enforced by the database (Postgres has no native
+ * "no cycles" constraint).
+ */
+export type AgentSubAgent = Prisma.AgentSubAgentModel;
+/**
+ * Model BudgetGroup
+ * Phase 7: an optional recurring spend cap across a group of agents,
+ * layered on top of each agent's own per-run budgetUsd (which stays
+ * required and unchanged). All three period caps are independently
+ * optional -- unset means "no cap for that period." warnThresholdRatio
+ * is per-group so different groups can choose their own early-warning
+ * point; enforcement itself never lives here -- see
+ * src/core/budget-groups.ts and runner.ts's executeRun, which turn a
+ * group's remaining period budget into a tightened *effective* per-run
+ * budget the existing engine budget machinery enforces unchanged.
+ */
+export type BudgetGroup = Prisma.BudgetGroupModel;
+/**
+ * Model Tool
+ * Phase 3: a WASM-sandboxed, Zod-validated tool a model can call.
+ */
+export type Tool = Prisma.ToolModel;
+/**
+ * Model AgentTool
+ * Phase 3: explicit many-to-many join between Agent and Tool.
+ * Phase 6: per-attachment capability scoping (OWASP LLM08 fix — Excessive
+ * Agency). Empty array = no access to that resource class; a tool must be
+ * explicitly granted secrets/datastore-prefixes/hosts at attach time. A
+ * literal "*" element in allowedHosts lifts the fetch allowlist entirely
+ * (existing SSRF protection against private/link-local addresses still
+ * applies) — the back-compat escape hatch for pre-existing attachments and
+ * deliberate full-web-access tools. See src/sandbox/tool-capabilities.ts.
+ */
+export type AgentTool = Prisma.AgentToolModel;
+/**
+ * Model Datastore
+ * Named, owned resource shared across agents via AgentDatastore (Un-phased
+ * roadmap item "Named / shared datastores"). Null ownerId = public/unowned,
+ * matching Tool's convention.
+ */
+export type Datastore = Prisma.DatastoreModel;
+/**
+ * Model AgentDatastore
+ * Attaches a Datastore to an agent, addressed at sandbox point-of-use by
+ * `boundName` (sharedDatastore.get(boundName, key)) — same boundName
+ * convention as AgentSecret. Defaults to the datastore's own name.
+ */
+export type AgentDatastore = Prisma.AgentDatastoreModel;
+/**
+ * Model DatastoreEntry
+ * Phase 3: the datastore seam's Postgres-backed default. Scoped by agentId
+ * (private, per-agent) or datastoreId (shared, see Datastore above) — a row
+ * carries exactly one, enforced by a hand-written CHECK in the migration
+ * (Prisma has no declarative "exactly one of two columns" constraint).
+ * Phase 6: optional per-entry PII encryption (see `pii`/`keyId` below).
+ *
+ * `id` is a surrogate key required by Prisma's schema validator: with
+ * agentId and datastoreId both optional, neither `@@unique` below has an
+ * all-required-fields criterion, and Prisma rejects a model with no such
+ * criterion (P1012, "Each model must have at least one unique criteria
+ * that has only required fields") — `prisma generate`/`validate` refuse to
+ * run at all without it. Point lookups still go through the
+ * agentId_key/datastoreId_key compound uniques; `id` is not otherwise used.
+ */
+export type DatastoreEntry = Prisma.DatastoreEntryModel;
+/**
+ * Model AgentMemory
+ * Un-phased: agent-controlled persistent memory (key/content per agent),
+ * gated by Agent.memoryEnabled. Deliberately a separate table rather than a
+ * Datastore convention — memory has its own access surface (built-in
+ * memory_get/memory_set/memory_list/memory_search tools, not user-authored
+ * sandbox code) and its own full-text search index, which would be an odd
+ * fit bolted onto Datastore's opaque-JSON-value shape. No FK to Agent,
+ * matching DatastoreEntry: deleting an agent leaves orphaned rows today,
+ * same pre-existing gap, not a new one.
+ *
+ * `contentTsv` is maintained by application code (see
+ * PostgresAgentMemory.set), never a Postgres GENERATED column — a generated
+ * column's expression has no representation in `Unsupported()`, which risks
+ * the migration-vs-schema drift check (CLAUDE.md) never landing clean.
+ */
+export type AgentMemory = Prisma.AgentMemoryModel;
+/**
+ * Model Run
+ *
+ */
+export type Run = Prisma.RunModel;
+/**
+ * Model CodingAgentProfile
+ * Phase 5: owner-configured coding behavior. Runtime credentials and opaque
+ * launcher handles never live on the reusable profile.
+ */
+export type CodingAgentProfile = Prisma.CodingAgentProfileModel;
+/**
+ * Model CodingRun
+ * Phase 5: immutable dispatch inputs plus opaque execution/result state for
+ * one coding run. Policy is copied from the profile before work starts.
+ */
+export type CodingRun = Prisma.CodingRunModel;
+/**
+ * Model CodingService
+ * Coding-run services (docs/coding-services.md): the catalog a repository's
+ * .wardby/services.yaml names entries from. Admin-managed over MCP
+ * (list/get_service: agents:read; create/update/delete_service:
+ * services:manage, audit-logged).
+ * Built-in rows ship with wardby, seeded by migration, and change only with a
+ * wardby release. `kind` is "sidecar" (a fresh instance in each run's pod);
+ * "external" is reserved.
+ */
+export type CodingService = Prisma.CodingServiceModel;
+/**
+ * Model CodingProxySession
+ * Trusted-boundary state for one coding run. Only a capability digest and an
+ * upstream credential reference are persisted; neither secret value enters the DB.
+ */
+export type CodingProxySession = Prisma.CodingProxySessionModel;
+/**
+ * Model CodingProxyRequest
+ * Monotonic per-upstream-call ledger. Uncertain reservations remain held so a
+ * crash or truncated provider stream can never create new spendable budget.
+ */
+export type CodingProxyRequest = Prisma.CodingProxyRequestModel;
+/**
+ * Model RegistryAllowance
+ * One package a run's profile has approved from a given ecosystem, resolved
+ * once at dispatch (see CodingRun.packageAllowlist) and used to gate every
+ * proxy fetch for the run's lifetime.
+ */
+export type RegistryAllowance = Prisma.RegistryAllowanceModel;
+/**
+ * Model RegistryFetch
+ * Audit ledger of every package fetch the registry proxy served or refused
+ * for a run.
+ */
+export type RegistryFetch = Prisma.RegistryFetchModel;
+/**
+ * Model RegistryVersionFact
+ * Immutable facts about one published package version, read from the
+ * registry itself (never from a lockfile) by lockfile verification: its
+ * publish time, integrity, download URL and declared dependencies
+ * ([{ key, name, range }], aliases resolved). Stored once and reused
+ * forever; allow/deny decisions are never cached here.
+ */
+export type RegistryVersionFact = Prisma.RegistryVersionFactModel;
+/**
+ * Model RegistryApprovedVersion
+ * One exact package version a run's lockfile plan (POST
+ * /registry/<ecosystem>/-/plan) verified and approved: a download of it is
+ * served directly, integrity-checked against this value.
+ */
+export type RegistryApprovedVersion = Prisma.RegistryApprovedVersionModel;
+/**
+ * Model RegistryPlanRefusal
+ * One exact package version a run's lockfile plan refused for a reason
+ * intrinsic to the registry's name@version (too new, an advisory, not
+ * published, no integrity, hosted elsewhere): a download of it is answered
+ * from here with the same code and reason, without a graph walk.
+ */
+export type RegistryPlanRefusal = Prisma.RegistryPlanRefusalModel;
+/**
+ * Model SchedulerLease
+ * Phase 2: single-row-per-scope lease so exactly one scheduler process
+ * ticks at a time. `holder` is a process instance id (crypto.randomUUID()).
+ */
+export type SchedulerLease = Prisma.SchedulerLeaseModel;
+/**
+ * Model Principal
+ * Phase 4: an authenticated caller. `subject` is the IdP subject claim
+ * (delegating mode) or the configured LOCAL_PRINCIPAL (stdio, no token).
+ * Created on first sight (find-or-create by subject).
+ */
+export type Principal = Prisma.PrincipalModel;
+/**
+ * Model ResourceGrant
+ * Explicit sharing of one resource with one grantee (docs/private/
+ * 2026-09-26-resource-sharing-grants-spec-and-plan.md). Polymorphic on
+ * (resourceType, resourceId) -- no FK to the resource, so every resource
+ * delete path removes its grants in the same transaction. Levels are
+ * ordered per type and validated in code (core/grants.ts), like
+ * AgentRepository.provider, so a new type or level needs no enum migration.
+ */
+export type ResourceGrant = Prisma.ResourceGrantModel;
+/**
+ * Model Task
+ *
+ */
+export type Task = Prisma.TaskModel;
+/**
+ * Model Secret
+ * Phase 4: a secret value, encrypted at rest via the SecretCipher seam.
+ * `ciphertext` is opaque to Prisma; only the cipher's decrypt() ever
+ * produces plaintext, and only at point-of-use inside the sandbox.
+ */
+export type Secret = Prisma.SecretModel;
+/**
+ * Model AgentSecret
+ * Phase 4: attaches a secret to an agent, addressed at sandbox point-of-use
+ * by `boundName` (secrets.get(boundName)). `boundName` defaults to the
+ * secret's canonical name; it differs only when the agent binds the secret
+ * under an alias, letting two agents resolve the same logical name to
+ * different underlying secrets.
+ */
+export type AgentSecret = Prisma.AgentSecretModel;
+/**
+ * Model SecretElicitationOutcome
+ * Cross-instance persistence for the out-of-band secret-entry flow
+ * (mcp/tools/secret-elicitation.ts) — was an in-process Map, which stranded
+ * a browser-form submission on the wrong instance under a multi-instance
+ * HTTP deployment. `outcome` holds the SecretElicitationOutcome JSON;
+ * `expiresAt` mirrors the old TTL sweep, now a `DELETE WHERE expiresAt <=
+ * now()` instead of a Map scan.
+ */
+export type SecretElicitationOutcome = Prisma.SecretElicitationOutcomeModel;
+/**
+ * Model Webhook
+ * Phase 4: inbound trigger for an agent. `secretHash` is an HMAC/hash of
+ * the validation secret shown to the caller once at creation; the raw
+ * secret itself is never stored.
+ */
+export type Webhook = Prisma.WebhookModel;
+/**
+ * Model OAuthClient
+ * Phase 4 (self-hosted AS only): a registered OAuth client. Created and
+ * used only under AUTH_PROVIDER=self-hosted; the delegating adapter never
+ * writes these tables even though the migration creates them unconditionally.
+ */
+export type OAuthClient = Prisma.OAuthClientModel;
+/**
+ * Model OAuthGrant
+ * Phase 4 (self-hosted AS only): an issued authorization grant / refresh token.
+ */
+export type OAuthGrant = Prisma.OAuthGrantModel;
+/**
+ * Model AuthUser
+ *
+ */
+export type AuthUser = Prisma.AuthUserModel;
+/**
+ * Model AuthLoginKey
+ *
+ */
+export type AuthLoginKey = Prisma.AuthLoginKeyModel;
+/**
+ * Model AuthSession
+ *
+ */
+export type AuthSession = Prisma.AuthSessionModel;
+/**
+ * Model AuthFormChallenge
+ *
+ */
+export type AuthFormChallenge = Prisma.AuthFormChallengeModel;
+/**
+ * Model OAuthAuthorizationRequest
+ *
+ */
+export type OAuthAuthorizationRequest = Prisma.OAuthAuthorizationRequestModel;
+/**
+ * Model OAuthAuthorizationCode
+ *
+ */
+export type OAuthAuthorizationCode = Prisma.OAuthAuthorizationCodeModel;
+/**
+ * Model OAuthFamily
+ *
+ */
+export type OAuthFamily = Prisma.OAuthFamilyModel;
+/**
+ * Model AuthRateLimit
+ *
+ */
+export type AuthRateLimit = Prisma.AuthRateLimitModel;
+/**
+ * Model AgentRepository
+ * Which repositories on which code-review host a native agent may act on,
+ * and which host events trigger it. See
+ * docs/private/2026-09-25-code-review-host-design.md §4.1.
+ */
+export type AgentRepository = Prisma.AgentRepositoryModel;
+/**
+ * Model RunHostCheck
+ * The host check a run owns, so the review tool can complete it and the
+ * run finalizer can close it if the run ends without publishing.
+ */
+export type RunHostCheck = Prisma.RunHostCheckModel;
+/**
+ * Model RunHostStatus
+ * De-duplicates host webhook redeliveries; pruned after 7 days.
+ * The status comment wardby posts on the issue or pull request whose
+ * @-mention started this run ("working on it"), edited with the outcome
+ * when the run ends. One per mention run.
+ */
+export type RunHostStatus = Prisma.RunHostStatusModel;
+/**
+ * Model HostEventDelivery
+ *
+ */
+export type HostEventDelivery = Prisma.HostEventDeliveryModel;
+/**
+ * Model HostIdentity
+ * A principal's verified identity on a code-review host (GitHub today),
+ * linked through the host's user-authorization flow (link_host_account).
+ * Only the numeric user id and login are stored, never a user token. A host
+ * user belongs to at most one principal.
+ */
+export type HostIdentity = Prisma.HostIdentityModel;
+/**
+ * Model HostIdentityLinkRequest
+ * An in-flight host identity link (link_host_account): the OAuth state and
+ * PKCE verifier, then, after the host's callback, the verified user and the
+ * hash of the one-time confirmation code the same principal must submit.
+ * Lives 10 minutes.
+ */
+export type HostIdentityLinkRequest = Prisma.HostIdentityLinkRequestModel;