@wardby/cli 0.2.1 → 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (407) hide show
  1. package/.env.example +34 -4
  2. package/README.md +41 -4
  3. package/dist/claude-coding-worker/driver.d.ts +6 -1
  4. package/dist/claude-coding-worker/driver.js +27 -1
  5. package/dist/claude-coding-worker/main.js +2 -0
  6. package/dist/claude-coding-worker/tool-socket.d.ts +9 -0
  7. package/dist/claude-coding-worker/tool-socket.js +26 -0
  8. package/dist/cli-help.d.ts +1 -1
  9. package/dist/cli-help.js +13 -4
  10. package/dist/cli.d.ts +1 -1
  11. package/dist/cli.js +219 -29
  12. package/dist/coding/collect-exclude.d.ts +25 -0
  13. package/dist/coding/collect-exclude.js +76 -0
  14. package/dist/coding/profile.d.ts +67 -22
  15. package/dist/coding/profile.js +58 -25
  16. package/dist/coding/protected-path-wording.d.ts +24 -0
  17. package/dist/coding/protected-path-wording.js +55 -0
  18. package/dist/coding/protected-paths.d.ts +31 -0
  19. package/dist/coding/protected-paths.js +48 -0
  20. package/dist/coding/protocol.d.ts +75 -4
  21. package/dist/coding/protocol.js +107 -7
  22. package/dist/coding/registry/adapters.d.ts +2 -0
  23. package/dist/coding/registry/adapters.js +9 -0
  24. package/dist/coding/registry/allowlist.d.ts +9 -0
  25. package/dist/coding/registry/allowlist.js +28 -0
  26. package/dist/coding/registry/json-scan.d.ts +55 -0
  27. package/dist/coding/registry/json-scan.js +191 -0
  28. package/dist/coding/registry/lockfiles.d.ts +6 -0
  29. package/dist/coding/registry/lockfiles.js +89 -0
  30. package/dist/coding/registry/npm-lockfile.d.ts +9 -0
  31. package/dist/coding/registry/npm-lockfile.js +73 -0
  32. package/dist/coding/registry/npm-plan.d.ts +29 -0
  33. package/dist/coding/registry/npm-plan.js +289 -0
  34. package/dist/coding/registry/npm.d.ts +7 -0
  35. package/dist/coding/registry/npm.js +252 -0
  36. package/dist/coding/registry/pypi.d.ts +4 -0
  37. package/dist/coding/registry/pypi.js +210 -0
  38. package/dist/coding/registry/report.d.ts +37 -0
  39. package/dist/coding/registry/report.js +31 -0
  40. package/dist/coding/registry/token.d.ts +4 -0
  41. package/dist/coding/registry/token.js +7 -0
  42. package/dist/coding/registry/types.d.ts +286 -0
  43. package/dist/coding/registry/types.js +19 -0
  44. package/dist/coding/registry/worker-config.d.ts +14 -0
  45. package/dist/coding/registry/worker-config.js +31 -0
  46. package/dist/coding/services/builtins.d.ts +22 -0
  47. package/dist/coding/services/builtins.js +85 -0
  48. package/dist/coding/services/catalog.d.ts +443 -0
  49. package/dist/coding/services/catalog.js +159 -0
  50. package/dist/coding/services/declaration.d.ts +11 -0
  51. package/dist/coding/services/declaration.js +114 -0
  52. package/dist/coding/services/note.d.ts +8 -0
  53. package/dist/coding/services/note.js +15 -0
  54. package/dist/coding/services/resolve.d.ts +25 -0
  55. package/dist/coding/services/resolve.js +50 -0
  56. package/dist/coding/services/wording.d.ts +25 -0
  57. package/dist/coding/services/wording.js +70 -0
  58. package/dist/coding-proxy/main.js +24 -4
  59. package/dist/coding-worker/artifact.d.ts +6 -0
  60. package/dist/coding-worker/debug-trace.d.ts +37 -0
  61. package/dist/coding-worker/debug-trace.js +117 -0
  62. package/dist/coding-worker/driver.d.ts +13 -1
  63. package/dist/coding-worker/driver.js +102 -13
  64. package/dist/coding-worker/errors.js +8 -0
  65. package/dist/coding-worker/main.js +10 -2
  66. package/dist/coding-worker/sdk.d.ts +2 -2
  67. package/dist/coding-worker/sdk.js +7 -2
  68. package/dist/coding-worker/types.d.ts +3 -0
  69. package/dist/config/providers.d.ts +41 -0
  70. package/dist/config/providers.js +66 -0
  71. package/dist/core/budget-groups.d.ts +108 -5
  72. package/dist/core/budget-groups.js +125 -19
  73. package/dist/core/budget-wording.d.ts +22 -0
  74. package/dist/core/budget-wording.js +55 -0
  75. package/dist/core/datastores.js +18 -2
  76. package/dist/core/db.d.ts +5 -1
  77. package/dist/core/db.js +8 -2
  78. package/dist/core/dispatch.d.ts +33 -6
  79. package/dist/core/dispatch.js +260 -43
  80. package/dist/core/engine-native.js +27 -10
  81. package/dist/core/grants.d.ts +86 -0
  82. package/dist/core/grants.js +126 -0
  83. package/dist/core/host-events.d.ts +49 -0
  84. package/dist/core/host-events.js +257 -0
  85. package/dist/core/host-identity-links.d.ts +54 -0
  86. package/dist/core/host-identity-links.js +189 -0
  87. package/dist/core/host-status.d.ts +61 -0
  88. package/dist/core/host-status.js +211 -0
  89. package/dist/core/in-flight-runs.d.ts +8 -0
  90. package/dist/core/in-flight-runs.js +56 -0
  91. package/dist/core/provider-wording.d.ts +12 -0
  92. package/dist/core/provider-wording.js +44 -0
  93. package/dist/core/reconciler.d.ts +38 -2
  94. package/dist/core/reconciler.js +86 -2
  95. package/dist/core/repo-access.d.ts +99 -0
  96. package/dist/core/repo-access.js +136 -0
  97. package/dist/core/review-host-checks.d.ts +11 -0
  98. package/dist/core/review-host-checks.js +41 -0
  99. package/dist/core/review-host-tools.d.ts +47 -0
  100. package/dist/core/review-host-tools.js +347 -0
  101. package/dist/core/run-heartbeat.d.ts +27 -0
  102. package/dist/core/run-heartbeat.js +54 -0
  103. package/dist/core/runner.d.ts +30 -8
  104. package/dist/core/runner.js +237 -40
  105. package/dist/core/secrets.d.ts +11 -2
  106. package/dist/core/secrets.js +25 -6
  107. package/dist/core/subagent-memory-tools.d.ts +1 -1
  108. package/dist/core/subagent-memory-tools.js +16 -3
  109. package/dist/core/tool-admin.d.ts +81 -0
  110. package/dist/core/tool-admin.js +129 -0
  111. package/dist/core/tool-names.d.ts +42 -0
  112. package/dist/core/tool-names.js +64 -0
  113. package/dist/core/untrusted-content.d.ts +32 -0
  114. package/dist/core/untrusted-content.js +72 -0
  115. package/dist/core/webhooks.d.ts +8 -1
  116. package/dist/core/webhooks.js +23 -2
  117. package/dist/generated/prisma/browser.d.ts +100 -0
  118. package/dist/generated/prisma/client.d.ts +100 -0
  119. package/dist/generated/prisma/commonInputTypes.d.ts +30 -0
  120. package/dist/generated/prisma/enums.d.ts +6 -0
  121. package/dist/generated/prisma/enums.js +6 -1
  122. package/dist/generated/prisma/internal/class.d.ts +143 -0
  123. package/dist/generated/prisma/internal/class.js +4 -4
  124. package/dist/generated/prisma/internal/prismaNamespace.d.ts +1746 -577
  125. package/dist/generated/prisma/internal/prismaNamespace.js +179 -6
  126. package/dist/generated/prisma/internal/prismaNamespaceBrowser.d.ts +186 -0
  127. package/dist/generated/prisma/internal/prismaNamespaceBrowser.js +179 -6
  128. package/dist/generated/prisma/models/Agent.d.ts +294 -1
  129. package/dist/generated/prisma/models/AgentRepository.d.ts +1425 -0
  130. package/dist/generated/prisma/models/AgentRepository.js +1 -0
  131. package/dist/generated/prisma/models/AgentTool.d.ts +95 -1
  132. package/dist/generated/prisma/models/AuthUser.d.ts +56 -1
  133. package/dist/generated/prisma/models/CodingAgentProfile.d.ts +258 -7
  134. package/dist/generated/prisma/models/CodingProxySession.d.ts +123 -2
  135. package/dist/generated/prisma/models/CodingRun.d.ts +1276 -95
  136. package/dist/generated/prisma/models/CodingService.d.ts +1348 -0
  137. package/dist/generated/prisma/models/CodingService.js +1 -0
  138. package/dist/generated/prisma/models/HostEventDelivery.d.ts +946 -0
  139. package/dist/generated/prisma/models/HostEventDelivery.js +1 -0
  140. package/dist/generated/prisma/models/HostIdentity.d.ts +1232 -0
  141. package/dist/generated/prisma/models/HostIdentity.js +1 -0
  142. package/dist/generated/prisma/models/HostIdentityLinkRequest.d.ts +1473 -0
  143. package/dist/generated/prisma/models/HostIdentityLinkRequest.js +1 -0
  144. package/dist/generated/prisma/models/Principal.d.ts +455 -0
  145. package/dist/generated/prisma/models/RegistryAllowance.d.ts +1148 -0
  146. package/dist/generated/prisma/models/RegistryAllowance.js +1 -0
  147. package/dist/generated/prisma/models/RegistryApprovedVersion.d.ts +1219 -0
  148. package/dist/generated/prisma/models/RegistryApprovedVersion.js +1 -0
  149. package/dist/generated/prisma/models/RegistryFetch.d.ts +1428 -0
  150. package/dist/generated/prisma/models/RegistryFetch.js +1 -0
  151. package/dist/generated/prisma/models/RegistryPlanRefusal.d.ts +1294 -0
  152. package/dist/generated/prisma/models/RegistryPlanRefusal.js +1 -0
  153. package/dist/generated/prisma/models/RegistryVersionFact.d.ts +1085 -0
  154. package/dist/generated/prisma/models/RegistryVersionFact.js +1 -0
  155. package/dist/generated/prisma/models/ResourceGrant.d.ts +1437 -0
  156. package/dist/generated/prisma/models/ResourceGrant.js +1 -0
  157. package/dist/generated/prisma/models/Run.d.ts +389 -1
  158. package/dist/generated/prisma/models/RunHostCheck.d.ts +1239 -0
  159. package/dist/generated/prisma/models/RunHostCheck.js +1 -0
  160. package/dist/generated/prisma/models/RunHostStatus.d.ts +1315 -0
  161. package/dist/generated/prisma/models/RunHostStatus.js +1 -0
  162. package/dist/generated/prisma/models/Tool.d.ts +15 -3
  163. package/dist/generated/prisma/models.d.ts +13 -0
  164. package/dist/help/build.d.ts +1 -0
  165. package/dist/help/build.js +9 -0
  166. package/dist/help/catalog.d.ts +24 -0
  167. package/dist/help/catalog.js +160 -0
  168. package/dist/help/cli.d.ts +2 -0
  169. package/dist/help/cli.js +65 -0
  170. package/dist/help/runtime.d.ts +3 -0
  171. package/dist/help/runtime.js +44 -0
  172. package/dist/help/search.d.ts +9 -0
  173. package/dist/help/search.js +104 -0
  174. package/dist/help-index.json +660 -0
  175. package/dist/import/cli-args.js +3 -2
  176. package/dist/import/create.d.ts +5 -0
  177. package/dist/import/create.js +67 -13
  178. package/dist/import/index.js +19 -9
  179. package/dist/import/neutral-schema.d.ts +11 -11
  180. package/dist/mcp/auth/access.d.ts +70 -0
  181. package/dist/mcp/auth/access.js +58 -0
  182. package/dist/mcp/auth/grants-cli.d.ts +149 -0
  183. package/dist/mcp/auth/grants-cli.js +518 -0
  184. package/dist/mcp/auth/host-account-cli.d.ts +2 -0
  185. package/dist/mcp/auth/host-account-cli.js +47 -0
  186. package/dist/mcp/auth/ownership.d.ts +26 -52
  187. package/dist/mcp/auth/ownership.js +19 -14
  188. package/dist/mcp/auth/repo-authorization.d.ts +22 -0
  189. package/dist/mcp/auth/repo-authorization.js +51 -0
  190. package/dist/mcp/auth/resource-server.d.ts +31 -2
  191. package/dist/mcp/auth/resource-server.js +84 -3
  192. package/dist/mcp/auth/self-hosted/browser.js +2 -2
  193. package/dist/mcp/auth/self-hosted/cli.js +47 -13
  194. package/dist/mcp/auth/self-hosted/credentials.d.ts +20 -2
  195. package/dist/mcp/auth/self-hosted/credentials.js +62 -4
  196. package/dist/mcp/auth/self-hosted/session.d.ts +2 -1
  197. package/dist/mcp/context.d.ts +27 -1
  198. package/dist/mcp/errors.d.ts +25 -6
  199. package/dist/mcp/errors.js +98 -0
  200. package/dist/mcp/host-events/github-ingress.d.ts +36 -0
  201. package/dist/mcp/host-events/github-ingress.js +92 -0
  202. package/dist/mcp/host-events/github-user-callback.d.ts +18 -0
  203. package/dist/mcp/host-events/github-user-callback.js +50 -0
  204. package/dist/mcp/index.d.ts +8 -1
  205. package/dist/mcp/index.js +106 -16
  206. package/dist/mcp/server.js +27 -9
  207. package/dist/mcp/tools/agents.js +446 -48
  208. package/dist/mcp/tools/budget-groups.js +3 -3
  209. package/dist/mcp/tools/datastore.js +22 -15
  210. package/dist/mcp/tools/grants.d.ts +2 -0
  211. package/dist/mcp/tools/grants.js +239 -0
  212. package/dist/mcp/tools/help.d.ts +5 -0
  213. package/dist/mcp/tools/help.js +67 -0
  214. package/dist/mcp/tools/host-accounts.d.ts +2 -0
  215. package/dist/mcp/tools/host-accounts.js +114 -0
  216. package/dist/mcp/tools/memory.d.ts +7 -1
  217. package/dist/mcp/tools/memory.js +5 -5
  218. package/dist/mcp/tools/repositories.d.ts +2 -0
  219. package/dist/mcp/tools/repositories.js +181 -0
  220. package/dist/mcp/tools/runs.d.ts +6 -0
  221. package/dist/mcp/tools/runs.js +60 -6
  222. package/dist/mcp/tools/scheduling.js +3 -6
  223. package/dist/mcp/tools/secrets.js +18 -6
  224. package/dist/mcp/tools/services.d.ts +2 -0
  225. package/dist/mcp/tools/services.js +222 -0
  226. package/dist/mcp/tools/subagents.js +52 -16
  227. package/dist/mcp/tools/tools.d.ts +41 -0
  228. package/dist/mcp/tools/tools.js +201 -40
  229. package/dist/mcp/tools/trigger.js +36 -6
  230. package/dist/mcp/tools/webhooks.js +15 -4
  231. package/dist/mcp/transport/streamable-http.d.ts +10 -0
  232. package/dist/mcp/transport/streamable-http.js +32 -2
  233. package/dist/providers/auth/delegating.d.ts +19 -0
  234. package/dist/providers/auth/delegating.js +71 -0
  235. package/dist/providers/auth/index.d.ts +2 -0
  236. package/dist/providers/auth/index.js +11 -0
  237. package/dist/providers/auth/self-hosted.d.ts +2 -1
  238. package/dist/providers/auth/self-hosted.js +16 -4
  239. package/dist/providers/auth/types.d.ts +6 -0
  240. package/dist/providers/coding-proxy/memory-ledger.d.ts +3 -0
  241. package/dist/providers/coding-proxy/memory-ledger.js +21 -2
  242. package/dist/providers/coding-proxy/metering.d.ts +4 -0
  243. package/dist/providers/coding-proxy/metering.js +28 -2
  244. package/dist/providers/coding-proxy/prisma-ledger.d.ts +17 -0
  245. package/dist/providers/coding-proxy/prisma-ledger.js +50 -5
  246. package/dist/providers/coding-proxy/proxy.d.ts +13 -0
  247. package/dist/providers/coding-proxy/proxy.js +479 -18
  248. package/dist/providers/coding-proxy/registry/audit.d.ts +131 -0
  249. package/dist/providers/coding-proxy/registry/audit.js +380 -0
  250. package/dist/providers/coding-proxy/registry/bounded-fetch.d.ts +16 -0
  251. package/dist/providers/coding-proxy/registry/bounded-fetch.js +77 -0
  252. package/dist/providers/coding-proxy/registry/plan.d.ts +58 -0
  253. package/dist/providers/coding-proxy/registry/plan.js +304 -0
  254. package/dist/providers/coding-proxy/registry/prisma-store.d.ts +34 -0
  255. package/dist/providers/coding-proxy/registry/prisma-store.js +151 -0
  256. package/dist/providers/coding-proxy/registry/service.d.ts +213 -0
  257. package/dist/providers/coding-proxy/registry/service.js +1137 -0
  258. package/dist/providers/coding-proxy/registry/store.d.ts +127 -0
  259. package/dist/providers/coding-proxy/registry/store.js +70 -0
  260. package/dist/providers/coding-proxy/runtime.d.ts +17 -0
  261. package/dist/providers/coding-proxy/runtime.js +63 -0
  262. package/dist/providers/coding-proxy/secure-fetch.js +0 -1
  263. package/dist/providers/coding-proxy/server.d.ts +11 -0
  264. package/dist/providers/coding-proxy/server.js +163 -0
  265. package/dist/providers/coding-proxy/types.d.ts +15 -0
  266. package/dist/providers/engine/types.d.ts +10 -0
  267. package/dist/providers/executor/build.d.ts +2 -2
  268. package/dist/providers/executor/composition.d.ts +3 -0
  269. package/dist/providers/executor/composition.js +19 -0
  270. package/dist/providers/executor/container.d.ts +105 -3
  271. package/dist/providers/executor/container.js +296 -20
  272. package/dist/providers/executor/dbos.d.ts +2 -3
  273. package/dist/providers/executor/in-process.d.ts +2 -3
  274. package/dist/providers/executor/routing.d.ts +7 -0
  275. package/dist/providers/executor/routing.js +13 -0
  276. package/dist/providers/executor/types.d.ts +22 -0
  277. package/dist/providers/jobs/claude-tool-setup.d.ts +23 -0
  278. package/dist/providers/jobs/claude-tool-setup.js +50 -0
  279. package/dist/providers/jobs/collect-prune.d.ts +7 -0
  280. package/dist/providers/jobs/collect-prune.js +27 -0
  281. package/dist/providers/jobs/docker-isolation.d.ts +48 -3
  282. package/dist/providers/jobs/docker-isolation.js +213 -22
  283. package/dist/providers/jobs/docker-services.d.ts +35 -0
  284. package/dist/providers/jobs/docker-services.js +191 -0
  285. package/dist/providers/jobs/docker.d.ts +49 -2
  286. package/dist/providers/jobs/docker.js +279 -32
  287. package/dist/providers/jobs/fake-kubernetes-api.d.ts +1 -0
  288. package/dist/providers/jobs/fake-kubernetes-api.js +12 -3
  289. package/dist/providers/jobs/kubernetes-isolation.d.ts +17 -2
  290. package/dist/providers/jobs/kubernetes-isolation.js +238 -57
  291. package/dist/providers/jobs/kubernetes-platform.d.ts +10 -4
  292. package/dist/providers/jobs/kubernetes-platform.js +11 -5
  293. package/dist/providers/jobs/kubernetes-preflight.js +3 -0
  294. package/dist/providers/jobs/kubernetes.d.ts +21 -2
  295. package/dist/providers/jobs/kubernetes.js +112 -21
  296. package/dist/providers/jobs/types.d.ts +18 -0
  297. package/dist/providers/llm/anthropic.js +6 -2
  298. package/dist/providers/llm/bedrock.js +2 -1
  299. package/dist/providers/llm/claude-messages.d.ts +5 -1
  300. package/dist/providers/llm/claude-messages.js +1 -0
  301. package/dist/providers/llm/claude-provider.d.ts +3 -1
  302. package/dist/providers/llm/claude-provider.js +5 -1
  303. package/dist/providers/llm/index.d.ts +1 -1
  304. package/dist/providers/llm/index.js +1 -1
  305. package/dist/providers/llm/pricing-anthropic.d.ts +10 -0
  306. package/dist/providers/llm/pricing-anthropic.js +32 -14
  307. package/dist/providers/llm/pricing-bedrock-claude.d.ts +8 -0
  308. package/dist/providers/llm/pricing-bedrock-claude.js +9 -0
  309. package/dist/providers/llm/routing.d.ts +10 -1
  310. package/dist/providers/llm/routing.js +18 -0
  311. package/dist/providers/llm/types.d.ts +12 -0
  312. package/dist/providers/llm/types.js +8 -1
  313. package/dist/providers/review-host/diff-lines.d.ts +16 -0
  314. package/dist/providers/review-host/diff-lines.js +59 -0
  315. package/dist/providers/review-host/github-events.d.ts +6 -0
  316. package/dist/providers/review-host/github-events.js +180 -0
  317. package/dist/providers/review-host/github-user-auth.d.ts +38 -0
  318. package/dist/providers/review-host/github-user-auth.js +128 -0
  319. package/dist/providers/review-host/github.d.ts +57 -0
  320. package/dist/providers/review-host/github.js +567 -0
  321. package/dist/providers/review-host/index.d.ts +12 -0
  322. package/dist/providers/review-host/index.js +30 -0
  323. package/dist/providers/review-host/review-format.d.ts +19 -0
  324. package/dist/providers/review-host/review-format.js +59 -0
  325. package/dist/providers/review-host/types.d.ts +284 -0
  326. package/dist/providers/review-host/types.js +24 -0
  327. package/dist/providers/vcs/git.d.ts +16 -6
  328. package/dist/providers/vcs/git.js +77 -13
  329. package/dist/providers/vcs/github.d.ts +74 -3
  330. package/dist/providers/vcs/github.js +195 -15
  331. package/dist/providers/vcs/types.d.ts +42 -4
  332. package/dist/quickstart/index.js +13 -2
  333. package/dist/sandbox/fetch-policy.d.ts +20 -2
  334. package/dist/sandbox/fetch-policy.js +64 -3
  335. package/dist/sandbox/host-functions.d.ts +9 -1
  336. package/dist/sandbox/host-functions.js +12 -5
  337. package/dist/serve.js +1 -1
  338. package/dist/wardby-bin.js +6 -0
  339. package/docs/README.md +30 -0
  340. package/docs/architecture-runtime.md +90 -0
  341. package/docs/assets/brand/wardby-icon-512.png +0 -0
  342. package/docs/assets/brand/wardby-icon.svg +16 -0
  343. package/docs/assets/brand/wardby-mascot-profile-512.png +0 -0
  344. package/docs/assets/brand/wardby-mascot.png +0 -0
  345. package/docs/assets/brand/wardby-mascot.svg +5 -0
  346. package/docs/assets/wardby-workflow.svg +106 -0
  347. package/docs/code-review-agents.md +481 -0
  348. package/docs/coding-agent-setup.md +172 -0
  349. package/docs/coding-packages.md +455 -0
  350. package/docs/coding-services.md +300 -0
  351. package/docs/coding-worker-byo-images.md +98 -0
  352. package/docs/coding-worker-isolation.md +1061 -0
  353. package/docs/getting-started-gke.md +615 -0
  354. package/docs/getting-started-identity-provider.md +308 -0
  355. package/docs/getting-started.md +133 -0
  356. package/docs/observability.md +53 -0
  357. package/docs/release-verification.md +66 -0
  358. package/docs/security-deployment.md +657 -0
  359. package/help/code-review-agents.md +31 -0
  360. package/help/coding-packages.md +31 -0
  361. package/help/coding-services.md +71 -0
  362. package/help/creating-agents.md +68 -0
  363. package/help/deploy-gke.md +39 -0
  364. package/help/deployment-targets.md +39 -0
  365. package/help/errors/budget-group-exhausted.md +25 -0
  366. package/help/errors/docker-isolation-unsupported.md +26 -0
  367. package/help/errors/protected-path.md +45 -0
  368. package/help/errors/repo-access.md +27 -0
  369. package/help/errors/service-declaration-invalid.md +27 -0
  370. package/help/errors/service-declaration-unavailable.md +25 -0
  371. package/help/errors/service-launcher-unsupported.md +30 -0
  372. package/help/errors/service-not-allowed.md +27 -0
  373. package/help/errors/service-unknown.md +23 -0
  374. package/help/errors/service-unready.md +49 -0
  375. package/help/getting-started.md +31 -0
  376. package/help/github.md +30 -0
  377. package/help/identity-and-access.md +39 -0
  378. package/help/mcp.md +30 -0
  379. package/help/native-capabilities.md +30 -0
  380. package/help/observability.md +41 -0
  381. package/help/operating-agents.md +30 -0
  382. package/help/security.md +27 -0
  383. package/help/troubleshooting/budgets.md +26 -0
  384. package/help/troubleshooting/coding-workers.md +47 -0
  385. package/help/troubleshooting/repository-access.md +27 -0
  386. package/package.json +12 -3
  387. package/prisma/migrations/20260925010000_coding_collect_exclude/migration.sql +8 -0
  388. package/prisma/migrations/20260925015000_allowed_egress_default/migration.sql +8 -0
  389. package/prisma/migrations/20260925020000_coding_package_registry/migration.sql +55 -0
  390. package/prisma/migrations/20260925030000_tool_name_per_owner/migration.sql +11 -0
  391. package/prisma/migrations/20260926010000_run_trigger_host_event/migration.sql +7 -0
  392. package/prisma/migrations/20260926020000_code_review_hosts/migration.sql +53 -0
  393. package/prisma/migrations/20260926030000_auth_user_roles/migration.sql +9 -0
  394. package/prisma/migrations/20260926040000_agent_effort/migration.sql +6 -0
  395. package/prisma/migrations/20260926050000_registry_lockfile_plan/migration.sql +32 -0
  396. package/prisma/migrations/20260926050000_repo_access_authorization/migration.sql +82 -0
  397. package/prisma/migrations/20260926060000_registry_plan_refusal/migration.sql +19 -0
  398. package/prisma/migrations/20260926100000_registry_plan_refusal_published_at/migration.sql +5 -0
  399. package/prisma/migrations/20260926190000_run_host_status/migration.sql +18 -0
  400. package/prisma/migrations/20260926210000_run_host_status_at_dispatch/migration.sql +5 -0
  401. package/prisma/migrations/20260927010000_resource_grants/migration.sql +72 -0
  402. package/prisma/migrations/20260927020000_proxy_session_budget_exhausted/migration.sql +3 -0
  403. package/prisma/migrations/20260927030000_coding_debug_trace/migration.sql +4 -0
  404. package/prisma/migrations/20260927040000_proxy_session_upstream_failure/migration.sql +3 -0
  405. package/prisma/migrations/20260927050000_coding_run_services/migration.sql +74 -0
  406. package/prisma/migrations/20260928000000_coding_run_tool_image/migration.sql +5 -0
  407. package/prisma/schema.prisma +407 -21
@@ -0,0 +1 @@
1
+ export {};
@@ -20,10 +20,14 @@ export type AggregateAgentTool = {
20
20
  export type AgentToolMinAggregateOutputType = {
21
21
  agentId: string | null;
22
22
  toolId: string | null;
23
+ attachedById: string | null;
24
+ capabilitiesGrantedById: string | null;
23
25
  };
24
26
  export type AgentToolMaxAggregateOutputType = {
25
27
  agentId: string | null;
26
28
  toolId: string | null;
29
+ attachedById: string | null;
30
+ capabilitiesGrantedById: string | null;
27
31
  };
28
32
  export type AgentToolCountAggregateOutputType = {
29
33
  agentId: number;
@@ -32,15 +36,21 @@ export type AgentToolCountAggregateOutputType = {
32
36
  allowedDatastorePrefixes: number;
33
37
  allowedHosts: number;
34
38
  allowedSharedDatastorePrefixes: number;
39
+ attachedById: number;
40
+ capabilitiesGrantedById: number;
35
41
  _all: number;
36
42
  };
37
43
  export type AgentToolMinAggregateInputType = {
38
44
  agentId?: true;
39
45
  toolId?: true;
46
+ attachedById?: true;
47
+ capabilitiesGrantedById?: true;
40
48
  };
41
49
  export type AgentToolMaxAggregateInputType = {
42
50
  agentId?: true;
43
51
  toolId?: true;
52
+ attachedById?: true;
53
+ capabilitiesGrantedById?: true;
44
54
  };
45
55
  export type AgentToolCountAggregateInputType = {
46
56
  agentId?: true;
@@ -49,6 +59,8 @@ export type AgentToolCountAggregateInputType = {
49
59
  allowedDatastorePrefixes?: true;
50
60
  allowedHosts?: true;
51
61
  allowedSharedDatastorePrefixes?: true;
62
+ attachedById?: true;
63
+ capabilitiesGrantedById?: true;
52
64
  _all?: true;
53
65
  };
54
66
  export type AgentToolAggregateArgs<ExtArgs extends runtime.Types.Extensions.InternalArgs = runtime.Types.Extensions.DefaultArgs> = {
@@ -120,6 +132,8 @@ export type AgentToolGroupByOutputType = {
120
132
  allowedDatastorePrefixes: runtime.JsonValue;
121
133
  allowedHosts: runtime.JsonValue;
122
134
  allowedSharedDatastorePrefixes: runtime.JsonValue;
135
+ attachedById: string | null;
136
+ capabilitiesGrantedById: string | null;
123
137
  _count: AgentToolCountAggregateOutputType | null;
124
138
  _min: AgentToolMinAggregateOutputType | null;
125
139
  _max: AgentToolMaxAggregateOutputType | null;
@@ -137,6 +151,8 @@ export type AgentToolWhereInput = {
137
151
  allowedDatastorePrefixes?: Prisma.JsonFilter<"AgentTool">;
138
152
  allowedHosts?: Prisma.JsonFilter<"AgentTool">;
139
153
  allowedSharedDatastorePrefixes?: Prisma.JsonFilter<"AgentTool">;
154
+ attachedById?: Prisma.StringNullableFilter<"AgentTool"> | string | null;
155
+ capabilitiesGrantedById?: Prisma.StringNullableFilter<"AgentTool"> | string | null;
140
156
  agent?: Prisma.XOR<Prisma.AgentScalarRelationFilter, Prisma.AgentWhereInput>;
141
157
  tool?: Prisma.XOR<Prisma.ToolScalarRelationFilter, Prisma.ToolWhereInput>;
142
158
  };
@@ -147,6 +163,8 @@ export type AgentToolOrderByWithRelationInput = {
147
163
  allowedDatastorePrefixes?: Prisma.SortOrder;
148
164
  allowedHosts?: Prisma.SortOrder;
149
165
  allowedSharedDatastorePrefixes?: Prisma.SortOrder;
166
+ attachedById?: Prisma.SortOrderInput | Prisma.SortOrder;
167
+ capabilitiesGrantedById?: Prisma.SortOrderInput | Prisma.SortOrder;
150
168
  agent?: Prisma.AgentOrderByWithRelationInput;
151
169
  tool?: Prisma.ToolOrderByWithRelationInput;
152
170
  };
@@ -161,6 +179,8 @@ export type AgentToolWhereUniqueInput = Prisma.AtLeast<{
161
179
  allowedDatastorePrefixes?: Prisma.JsonFilter<"AgentTool">;
162
180
  allowedHosts?: Prisma.JsonFilter<"AgentTool">;
163
181
  allowedSharedDatastorePrefixes?: Prisma.JsonFilter<"AgentTool">;
182
+ attachedById?: Prisma.StringNullableFilter<"AgentTool"> | string | null;
183
+ capabilitiesGrantedById?: Prisma.StringNullableFilter<"AgentTool"> | string | null;
164
184
  agent?: Prisma.XOR<Prisma.AgentScalarRelationFilter, Prisma.AgentWhereInput>;
165
185
  tool?: Prisma.XOR<Prisma.ToolScalarRelationFilter, Prisma.ToolWhereInput>;
166
186
  }, "agentId_toolId">;
@@ -171,6 +191,8 @@ export type AgentToolOrderByWithAggregationInput = {
171
191
  allowedDatastorePrefixes?: Prisma.SortOrder;
172
192
  allowedHosts?: Prisma.SortOrder;
173
193
  allowedSharedDatastorePrefixes?: Prisma.SortOrder;
194
+ attachedById?: Prisma.SortOrderInput | Prisma.SortOrder;
195
+ capabilitiesGrantedById?: Prisma.SortOrderInput | Prisma.SortOrder;
174
196
  _count?: Prisma.AgentToolCountOrderByAggregateInput;
175
197
  _max?: Prisma.AgentToolMaxOrderByAggregateInput;
176
198
  _min?: Prisma.AgentToolMinOrderByAggregateInput;
@@ -185,12 +207,16 @@ export type AgentToolScalarWhereWithAggregatesInput = {
185
207
  allowedDatastorePrefixes?: Prisma.JsonWithAggregatesFilter<"AgentTool">;
186
208
  allowedHosts?: Prisma.JsonWithAggregatesFilter<"AgentTool">;
187
209
  allowedSharedDatastorePrefixes?: Prisma.JsonWithAggregatesFilter<"AgentTool">;
210
+ attachedById?: Prisma.StringNullableWithAggregatesFilter<"AgentTool"> | string | null;
211
+ capabilitiesGrantedById?: Prisma.StringNullableWithAggregatesFilter<"AgentTool"> | string | null;
188
212
  };
189
213
  export type AgentToolCreateInput = {
190
214
  allowedSecrets?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
191
215
  allowedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
192
216
  allowedHosts?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
193
217
  allowedSharedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
218
+ attachedById?: string | null;
219
+ capabilitiesGrantedById?: string | null;
194
220
  agent: Prisma.AgentCreateNestedOneWithoutToolsInput;
195
221
  tool: Prisma.ToolCreateNestedOneWithoutAgentsInput;
196
222
  };
@@ -201,12 +227,16 @@ export type AgentToolUncheckedCreateInput = {
201
227
  allowedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
202
228
  allowedHosts?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
203
229
  allowedSharedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
230
+ attachedById?: string | null;
231
+ capabilitiesGrantedById?: string | null;
204
232
  };
205
233
  export type AgentToolUpdateInput = {
206
234
  allowedSecrets?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
207
235
  allowedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
208
236
  allowedHosts?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
209
237
  allowedSharedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
238
+ attachedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
239
+ capabilitiesGrantedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
210
240
  agent?: Prisma.AgentUpdateOneRequiredWithoutToolsNestedInput;
211
241
  tool?: Prisma.ToolUpdateOneRequiredWithoutAgentsNestedInput;
212
242
  };
@@ -217,6 +247,8 @@ export type AgentToolUncheckedUpdateInput = {
217
247
  allowedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
218
248
  allowedHosts?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
219
249
  allowedSharedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
250
+ attachedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
251
+ capabilitiesGrantedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
220
252
  };
221
253
  export type AgentToolCreateManyInput = {
222
254
  agentId: string;
@@ -225,12 +257,16 @@ export type AgentToolCreateManyInput = {
225
257
  allowedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
226
258
  allowedHosts?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
227
259
  allowedSharedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
260
+ attachedById?: string | null;
261
+ capabilitiesGrantedById?: string | null;
228
262
  };
229
263
  export type AgentToolUpdateManyMutationInput = {
230
264
  allowedSecrets?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
231
265
  allowedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
232
266
  allowedHosts?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
233
267
  allowedSharedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
268
+ attachedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
269
+ capabilitiesGrantedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
234
270
  };
235
271
  export type AgentToolUncheckedUpdateManyInput = {
236
272
  agentId?: Prisma.StringFieldUpdateOperationsInput | string;
@@ -239,6 +275,8 @@ export type AgentToolUncheckedUpdateManyInput = {
239
275
  allowedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
240
276
  allowedHosts?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
241
277
  allowedSharedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
278
+ attachedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
279
+ capabilitiesGrantedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
242
280
  };
243
281
  export type AgentToolListRelationFilter = {
244
282
  every?: Prisma.AgentToolWhereInput;
@@ -259,14 +297,20 @@ export type AgentToolCountOrderByAggregateInput = {
259
297
  allowedDatastorePrefixes?: Prisma.SortOrder;
260
298
  allowedHosts?: Prisma.SortOrder;
261
299
  allowedSharedDatastorePrefixes?: Prisma.SortOrder;
300
+ attachedById?: Prisma.SortOrder;
301
+ capabilitiesGrantedById?: Prisma.SortOrder;
262
302
  };
263
303
  export type AgentToolMaxOrderByAggregateInput = {
264
304
  agentId?: Prisma.SortOrder;
265
305
  toolId?: Prisma.SortOrder;
306
+ attachedById?: Prisma.SortOrder;
307
+ capabilitiesGrantedById?: Prisma.SortOrder;
266
308
  };
267
309
  export type AgentToolMinOrderByAggregateInput = {
268
310
  agentId?: Prisma.SortOrder;
269
311
  toolId?: Prisma.SortOrder;
312
+ attachedById?: Prisma.SortOrder;
313
+ capabilitiesGrantedById?: Prisma.SortOrder;
270
314
  };
271
315
  export type AgentToolCreateNestedManyWithoutAgentInput = {
272
316
  create?: Prisma.XOR<Prisma.AgentToolCreateWithoutAgentInput, Prisma.AgentToolUncheckedCreateWithoutAgentInput> | Prisma.AgentToolCreateWithoutAgentInput[] | Prisma.AgentToolUncheckedCreateWithoutAgentInput[];
@@ -349,6 +393,8 @@ export type AgentToolCreateWithoutAgentInput = {
349
393
  allowedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
350
394
  allowedHosts?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
351
395
  allowedSharedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
396
+ attachedById?: string | null;
397
+ capabilitiesGrantedById?: string | null;
352
398
  tool: Prisma.ToolCreateNestedOneWithoutAgentsInput;
353
399
  };
354
400
  export type AgentToolUncheckedCreateWithoutAgentInput = {
@@ -357,6 +403,8 @@ export type AgentToolUncheckedCreateWithoutAgentInput = {
357
403
  allowedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
358
404
  allowedHosts?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
359
405
  allowedSharedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
406
+ attachedById?: string | null;
407
+ capabilitiesGrantedById?: string | null;
360
408
  };
361
409
  export type AgentToolCreateOrConnectWithoutAgentInput = {
362
410
  where: Prisma.AgentToolWhereUniqueInput;
@@ -389,12 +437,16 @@ export type AgentToolScalarWhereInput = {
389
437
  allowedDatastorePrefixes?: Prisma.JsonFilter<"AgentTool">;
390
438
  allowedHosts?: Prisma.JsonFilter<"AgentTool">;
391
439
  allowedSharedDatastorePrefixes?: Prisma.JsonFilter<"AgentTool">;
440
+ attachedById?: Prisma.StringNullableFilter<"AgentTool"> | string | null;
441
+ capabilitiesGrantedById?: Prisma.StringNullableFilter<"AgentTool"> | string | null;
392
442
  };
393
443
  export type AgentToolCreateWithoutToolInput = {
394
444
  allowedSecrets?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
395
445
  allowedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
396
446
  allowedHosts?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
397
447
  allowedSharedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
448
+ attachedById?: string | null;
449
+ capabilitiesGrantedById?: string | null;
398
450
  agent: Prisma.AgentCreateNestedOneWithoutToolsInput;
399
451
  };
400
452
  export type AgentToolUncheckedCreateWithoutToolInput = {
@@ -403,6 +455,8 @@ export type AgentToolUncheckedCreateWithoutToolInput = {
403
455
  allowedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
404
456
  allowedHosts?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
405
457
  allowedSharedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
458
+ attachedById?: string | null;
459
+ capabilitiesGrantedById?: string | null;
406
460
  };
407
461
  export type AgentToolCreateOrConnectWithoutToolInput = {
408
462
  where: Prisma.AgentToolWhereUniqueInput;
@@ -431,12 +485,16 @@ export type AgentToolCreateManyAgentInput = {
431
485
  allowedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
432
486
  allowedHosts?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
433
487
  allowedSharedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
488
+ attachedById?: string | null;
489
+ capabilitiesGrantedById?: string | null;
434
490
  };
435
491
  export type AgentToolUpdateWithoutAgentInput = {
436
492
  allowedSecrets?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
437
493
  allowedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
438
494
  allowedHosts?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
439
495
  allowedSharedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
496
+ attachedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
497
+ capabilitiesGrantedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
440
498
  tool?: Prisma.ToolUpdateOneRequiredWithoutAgentsNestedInput;
441
499
  };
442
500
  export type AgentToolUncheckedUpdateWithoutAgentInput = {
@@ -445,6 +503,8 @@ export type AgentToolUncheckedUpdateWithoutAgentInput = {
445
503
  allowedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
446
504
  allowedHosts?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
447
505
  allowedSharedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
506
+ attachedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
507
+ capabilitiesGrantedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
448
508
  };
449
509
  export type AgentToolUncheckedUpdateManyWithoutAgentInput = {
450
510
  toolId?: Prisma.StringFieldUpdateOperationsInput | string;
@@ -452,6 +512,8 @@ export type AgentToolUncheckedUpdateManyWithoutAgentInput = {
452
512
  allowedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
453
513
  allowedHosts?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
454
514
  allowedSharedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
515
+ attachedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
516
+ capabilitiesGrantedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
455
517
  };
456
518
  export type AgentToolCreateManyToolInput = {
457
519
  agentId: string;
@@ -459,12 +521,16 @@ export type AgentToolCreateManyToolInput = {
459
521
  allowedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
460
522
  allowedHosts?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
461
523
  allowedSharedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
524
+ attachedById?: string | null;
525
+ capabilitiesGrantedById?: string | null;
462
526
  };
463
527
  export type AgentToolUpdateWithoutToolInput = {
464
528
  allowedSecrets?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
465
529
  allowedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
466
530
  allowedHosts?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
467
531
  allowedSharedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
532
+ attachedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
533
+ capabilitiesGrantedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
468
534
  agent?: Prisma.AgentUpdateOneRequiredWithoutToolsNestedInput;
469
535
  };
470
536
  export type AgentToolUncheckedUpdateWithoutToolInput = {
@@ -473,6 +539,8 @@ export type AgentToolUncheckedUpdateWithoutToolInput = {
473
539
  allowedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
474
540
  allowedHosts?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
475
541
  allowedSharedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
542
+ attachedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
543
+ capabilitiesGrantedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
476
544
  };
477
545
  export type AgentToolUncheckedUpdateManyWithoutToolInput = {
478
546
  agentId?: Prisma.StringFieldUpdateOperationsInput | string;
@@ -480,6 +548,8 @@ export type AgentToolUncheckedUpdateManyWithoutToolInput = {
480
548
  allowedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
481
549
  allowedHosts?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
482
550
  allowedSharedDatastorePrefixes?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
551
+ attachedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
552
+ capabilitiesGrantedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
483
553
  };
484
554
  export type AgentToolSelect<ExtArgs extends runtime.Types.Extensions.InternalArgs = runtime.Types.Extensions.DefaultArgs> = runtime.Types.Extensions.GetSelect<{
485
555
  agentId?: boolean;
@@ -488,6 +558,8 @@ export type AgentToolSelect<ExtArgs extends runtime.Types.Extensions.InternalArg
488
558
  allowedDatastorePrefixes?: boolean;
489
559
  allowedHosts?: boolean;
490
560
  allowedSharedDatastorePrefixes?: boolean;
561
+ attachedById?: boolean;
562
+ capabilitiesGrantedById?: boolean;
491
563
  agent?: boolean | Prisma.AgentDefaultArgs<ExtArgs>;
492
564
  tool?: boolean | Prisma.ToolDefaultArgs<ExtArgs>;
493
565
  }, ExtArgs["result"]["agentTool"]>;
@@ -498,6 +570,8 @@ export type AgentToolSelectCreateManyAndReturn<ExtArgs extends runtime.Types.Ext
498
570
  allowedDatastorePrefixes?: boolean;
499
571
  allowedHosts?: boolean;
500
572
  allowedSharedDatastorePrefixes?: boolean;
573
+ attachedById?: boolean;
574
+ capabilitiesGrantedById?: boolean;
501
575
  agent?: boolean | Prisma.AgentDefaultArgs<ExtArgs>;
502
576
  tool?: boolean | Prisma.ToolDefaultArgs<ExtArgs>;
503
577
  }, ExtArgs["result"]["agentTool"]>;
@@ -508,6 +582,8 @@ export type AgentToolSelectUpdateManyAndReturn<ExtArgs extends runtime.Types.Ext
508
582
  allowedDatastorePrefixes?: boolean;
509
583
  allowedHosts?: boolean;
510
584
  allowedSharedDatastorePrefixes?: boolean;
585
+ attachedById?: boolean;
586
+ capabilitiesGrantedById?: boolean;
511
587
  agent?: boolean | Prisma.AgentDefaultArgs<ExtArgs>;
512
588
  tool?: boolean | Prisma.ToolDefaultArgs<ExtArgs>;
513
589
  }, ExtArgs["result"]["agentTool"]>;
@@ -518,8 +594,10 @@ export type AgentToolSelectScalar = {
518
594
  allowedDatastorePrefixes?: boolean;
519
595
  allowedHosts?: boolean;
520
596
  allowedSharedDatastorePrefixes?: boolean;
597
+ attachedById?: boolean;
598
+ capabilitiesGrantedById?: boolean;
521
599
  };
522
- export type AgentToolOmit<ExtArgs extends runtime.Types.Extensions.InternalArgs = runtime.Types.Extensions.DefaultArgs> = runtime.Types.Extensions.GetOmit<"agentId" | "toolId" | "allowedSecrets" | "allowedDatastorePrefixes" | "allowedHosts" | "allowedSharedDatastorePrefixes", ExtArgs["result"]["agentTool"]>;
600
+ export type AgentToolOmit<ExtArgs extends runtime.Types.Extensions.InternalArgs = runtime.Types.Extensions.DefaultArgs> = runtime.Types.Extensions.GetOmit<"agentId" | "toolId" | "allowedSecrets" | "allowedDatastorePrefixes" | "allowedHosts" | "allowedSharedDatastorePrefixes" | "attachedById" | "capabilitiesGrantedById", ExtArgs["result"]["agentTool"]>;
523
601
  export type AgentToolInclude<ExtArgs extends runtime.Types.Extensions.InternalArgs = runtime.Types.Extensions.DefaultArgs> = {
524
602
  agent?: boolean | Prisma.AgentDefaultArgs<ExtArgs>;
525
603
  tool?: boolean | Prisma.ToolDefaultArgs<ExtArgs>;
@@ -545,6 +623,20 @@ export type $AgentToolPayload<ExtArgs extends runtime.Types.Extensions.InternalA
545
623
  allowedDatastorePrefixes: runtime.JsonValue;
546
624
  allowedHosts: runtime.JsonValue;
547
625
  allowedSharedDatastorePrefixes: runtime.JsonValue;
626
+ /**
627
+ * Who created the attachment. Audit only: plain text, no FK (same
628
+ * convention as AgentRepository.authorizedById).
629
+ */
630
+ attachedById: string | null;
631
+ /**
632
+ * The principal whose consent the four capability fields above carry.
633
+ * The runner honours them only while this equals the agent's CURRENT
634
+ * ownerId (resource-sharing grants spec §3.4.2): a write-grantee's
635
+ * attachment, a make_owner transfer, or a pre-grants row nobody vouched
636
+ * for runs with no secrets, no datastore and no fetch until the owner
637
+ * re-grants with attach_tool. Plain text, no FK.
638
+ */
639
+ capabilitiesGrantedById: string | null;
548
640
  }, ExtArgs["result"]["agentTool"]>;
549
641
  composites: {};
550
642
  };
@@ -907,6 +999,8 @@ export interface AgentToolFieldRefs {
907
999
  readonly allowedDatastorePrefixes: Prisma.FieldRef<"AgentTool", 'Json'>;
908
1000
  readonly allowedHosts: Prisma.FieldRef<"AgentTool", 'Json'>;
909
1001
  readonly allowedSharedDatastorePrefixes: Prisma.FieldRef<"AgentTool", 'Json'>;
1002
+ readonly attachedById: Prisma.FieldRef<"AgentTool", 'String'>;
1003
+ readonly capabilitiesGrantedById: Prisma.FieldRef<"AgentTool", 'String'>;
910
1004
  }
911
1005
  /**
912
1006
  * AgentTool findUnique