@wardby/cli 0.2.1 → 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (407) hide show
  1. package/.env.example +34 -4
  2. package/README.md +41 -4
  3. package/dist/claude-coding-worker/driver.d.ts +6 -1
  4. package/dist/claude-coding-worker/driver.js +27 -1
  5. package/dist/claude-coding-worker/main.js +2 -0
  6. package/dist/claude-coding-worker/tool-socket.d.ts +9 -0
  7. package/dist/claude-coding-worker/tool-socket.js +26 -0
  8. package/dist/cli-help.d.ts +1 -1
  9. package/dist/cli-help.js +13 -4
  10. package/dist/cli.d.ts +1 -1
  11. package/dist/cli.js +219 -29
  12. package/dist/coding/collect-exclude.d.ts +25 -0
  13. package/dist/coding/collect-exclude.js +76 -0
  14. package/dist/coding/profile.d.ts +67 -22
  15. package/dist/coding/profile.js +58 -25
  16. package/dist/coding/protected-path-wording.d.ts +24 -0
  17. package/dist/coding/protected-path-wording.js +55 -0
  18. package/dist/coding/protected-paths.d.ts +31 -0
  19. package/dist/coding/protected-paths.js +48 -0
  20. package/dist/coding/protocol.d.ts +75 -4
  21. package/dist/coding/protocol.js +107 -7
  22. package/dist/coding/registry/adapters.d.ts +2 -0
  23. package/dist/coding/registry/adapters.js +9 -0
  24. package/dist/coding/registry/allowlist.d.ts +9 -0
  25. package/dist/coding/registry/allowlist.js +28 -0
  26. package/dist/coding/registry/json-scan.d.ts +55 -0
  27. package/dist/coding/registry/json-scan.js +191 -0
  28. package/dist/coding/registry/lockfiles.d.ts +6 -0
  29. package/dist/coding/registry/lockfiles.js +89 -0
  30. package/dist/coding/registry/npm-lockfile.d.ts +9 -0
  31. package/dist/coding/registry/npm-lockfile.js +73 -0
  32. package/dist/coding/registry/npm-plan.d.ts +29 -0
  33. package/dist/coding/registry/npm-plan.js +289 -0
  34. package/dist/coding/registry/npm.d.ts +7 -0
  35. package/dist/coding/registry/npm.js +252 -0
  36. package/dist/coding/registry/pypi.d.ts +4 -0
  37. package/dist/coding/registry/pypi.js +210 -0
  38. package/dist/coding/registry/report.d.ts +37 -0
  39. package/dist/coding/registry/report.js +31 -0
  40. package/dist/coding/registry/token.d.ts +4 -0
  41. package/dist/coding/registry/token.js +7 -0
  42. package/dist/coding/registry/types.d.ts +286 -0
  43. package/dist/coding/registry/types.js +19 -0
  44. package/dist/coding/registry/worker-config.d.ts +14 -0
  45. package/dist/coding/registry/worker-config.js +31 -0
  46. package/dist/coding/services/builtins.d.ts +22 -0
  47. package/dist/coding/services/builtins.js +85 -0
  48. package/dist/coding/services/catalog.d.ts +443 -0
  49. package/dist/coding/services/catalog.js +159 -0
  50. package/dist/coding/services/declaration.d.ts +11 -0
  51. package/dist/coding/services/declaration.js +114 -0
  52. package/dist/coding/services/note.d.ts +8 -0
  53. package/dist/coding/services/note.js +15 -0
  54. package/dist/coding/services/resolve.d.ts +25 -0
  55. package/dist/coding/services/resolve.js +50 -0
  56. package/dist/coding/services/wording.d.ts +25 -0
  57. package/dist/coding/services/wording.js +70 -0
  58. package/dist/coding-proxy/main.js +24 -4
  59. package/dist/coding-worker/artifact.d.ts +6 -0
  60. package/dist/coding-worker/debug-trace.d.ts +37 -0
  61. package/dist/coding-worker/debug-trace.js +117 -0
  62. package/dist/coding-worker/driver.d.ts +13 -1
  63. package/dist/coding-worker/driver.js +102 -13
  64. package/dist/coding-worker/errors.js +8 -0
  65. package/dist/coding-worker/main.js +10 -2
  66. package/dist/coding-worker/sdk.d.ts +2 -2
  67. package/dist/coding-worker/sdk.js +7 -2
  68. package/dist/coding-worker/types.d.ts +3 -0
  69. package/dist/config/providers.d.ts +41 -0
  70. package/dist/config/providers.js +66 -0
  71. package/dist/core/budget-groups.d.ts +108 -5
  72. package/dist/core/budget-groups.js +125 -19
  73. package/dist/core/budget-wording.d.ts +22 -0
  74. package/dist/core/budget-wording.js +55 -0
  75. package/dist/core/datastores.js +18 -2
  76. package/dist/core/db.d.ts +5 -1
  77. package/dist/core/db.js +8 -2
  78. package/dist/core/dispatch.d.ts +33 -6
  79. package/dist/core/dispatch.js +260 -43
  80. package/dist/core/engine-native.js +27 -10
  81. package/dist/core/grants.d.ts +86 -0
  82. package/dist/core/grants.js +126 -0
  83. package/dist/core/host-events.d.ts +49 -0
  84. package/dist/core/host-events.js +257 -0
  85. package/dist/core/host-identity-links.d.ts +54 -0
  86. package/dist/core/host-identity-links.js +189 -0
  87. package/dist/core/host-status.d.ts +61 -0
  88. package/dist/core/host-status.js +211 -0
  89. package/dist/core/in-flight-runs.d.ts +8 -0
  90. package/dist/core/in-flight-runs.js +56 -0
  91. package/dist/core/provider-wording.d.ts +12 -0
  92. package/dist/core/provider-wording.js +44 -0
  93. package/dist/core/reconciler.d.ts +38 -2
  94. package/dist/core/reconciler.js +86 -2
  95. package/dist/core/repo-access.d.ts +99 -0
  96. package/dist/core/repo-access.js +136 -0
  97. package/dist/core/review-host-checks.d.ts +11 -0
  98. package/dist/core/review-host-checks.js +41 -0
  99. package/dist/core/review-host-tools.d.ts +47 -0
  100. package/dist/core/review-host-tools.js +347 -0
  101. package/dist/core/run-heartbeat.d.ts +27 -0
  102. package/dist/core/run-heartbeat.js +54 -0
  103. package/dist/core/runner.d.ts +30 -8
  104. package/dist/core/runner.js +237 -40
  105. package/dist/core/secrets.d.ts +11 -2
  106. package/dist/core/secrets.js +25 -6
  107. package/dist/core/subagent-memory-tools.d.ts +1 -1
  108. package/dist/core/subagent-memory-tools.js +16 -3
  109. package/dist/core/tool-admin.d.ts +81 -0
  110. package/dist/core/tool-admin.js +129 -0
  111. package/dist/core/tool-names.d.ts +42 -0
  112. package/dist/core/tool-names.js +64 -0
  113. package/dist/core/untrusted-content.d.ts +32 -0
  114. package/dist/core/untrusted-content.js +72 -0
  115. package/dist/core/webhooks.d.ts +8 -1
  116. package/dist/core/webhooks.js +23 -2
  117. package/dist/generated/prisma/browser.d.ts +100 -0
  118. package/dist/generated/prisma/client.d.ts +100 -0
  119. package/dist/generated/prisma/commonInputTypes.d.ts +30 -0
  120. package/dist/generated/prisma/enums.d.ts +6 -0
  121. package/dist/generated/prisma/enums.js +6 -1
  122. package/dist/generated/prisma/internal/class.d.ts +143 -0
  123. package/dist/generated/prisma/internal/class.js +4 -4
  124. package/dist/generated/prisma/internal/prismaNamespace.d.ts +1746 -577
  125. package/dist/generated/prisma/internal/prismaNamespace.js +179 -6
  126. package/dist/generated/prisma/internal/prismaNamespaceBrowser.d.ts +186 -0
  127. package/dist/generated/prisma/internal/prismaNamespaceBrowser.js +179 -6
  128. package/dist/generated/prisma/models/Agent.d.ts +294 -1
  129. package/dist/generated/prisma/models/AgentRepository.d.ts +1425 -0
  130. package/dist/generated/prisma/models/AgentRepository.js +1 -0
  131. package/dist/generated/prisma/models/AgentTool.d.ts +95 -1
  132. package/dist/generated/prisma/models/AuthUser.d.ts +56 -1
  133. package/dist/generated/prisma/models/CodingAgentProfile.d.ts +258 -7
  134. package/dist/generated/prisma/models/CodingProxySession.d.ts +123 -2
  135. package/dist/generated/prisma/models/CodingRun.d.ts +1276 -95
  136. package/dist/generated/prisma/models/CodingService.d.ts +1348 -0
  137. package/dist/generated/prisma/models/CodingService.js +1 -0
  138. package/dist/generated/prisma/models/HostEventDelivery.d.ts +946 -0
  139. package/dist/generated/prisma/models/HostEventDelivery.js +1 -0
  140. package/dist/generated/prisma/models/HostIdentity.d.ts +1232 -0
  141. package/dist/generated/prisma/models/HostIdentity.js +1 -0
  142. package/dist/generated/prisma/models/HostIdentityLinkRequest.d.ts +1473 -0
  143. package/dist/generated/prisma/models/HostIdentityLinkRequest.js +1 -0
  144. package/dist/generated/prisma/models/Principal.d.ts +455 -0
  145. package/dist/generated/prisma/models/RegistryAllowance.d.ts +1148 -0
  146. package/dist/generated/prisma/models/RegistryAllowance.js +1 -0
  147. package/dist/generated/prisma/models/RegistryApprovedVersion.d.ts +1219 -0
  148. package/dist/generated/prisma/models/RegistryApprovedVersion.js +1 -0
  149. package/dist/generated/prisma/models/RegistryFetch.d.ts +1428 -0
  150. package/dist/generated/prisma/models/RegistryFetch.js +1 -0
  151. package/dist/generated/prisma/models/RegistryPlanRefusal.d.ts +1294 -0
  152. package/dist/generated/prisma/models/RegistryPlanRefusal.js +1 -0
  153. package/dist/generated/prisma/models/RegistryVersionFact.d.ts +1085 -0
  154. package/dist/generated/prisma/models/RegistryVersionFact.js +1 -0
  155. package/dist/generated/prisma/models/ResourceGrant.d.ts +1437 -0
  156. package/dist/generated/prisma/models/ResourceGrant.js +1 -0
  157. package/dist/generated/prisma/models/Run.d.ts +389 -1
  158. package/dist/generated/prisma/models/RunHostCheck.d.ts +1239 -0
  159. package/dist/generated/prisma/models/RunHostCheck.js +1 -0
  160. package/dist/generated/prisma/models/RunHostStatus.d.ts +1315 -0
  161. package/dist/generated/prisma/models/RunHostStatus.js +1 -0
  162. package/dist/generated/prisma/models/Tool.d.ts +15 -3
  163. package/dist/generated/prisma/models.d.ts +13 -0
  164. package/dist/help/build.d.ts +1 -0
  165. package/dist/help/build.js +9 -0
  166. package/dist/help/catalog.d.ts +24 -0
  167. package/dist/help/catalog.js +160 -0
  168. package/dist/help/cli.d.ts +2 -0
  169. package/dist/help/cli.js +65 -0
  170. package/dist/help/runtime.d.ts +3 -0
  171. package/dist/help/runtime.js +44 -0
  172. package/dist/help/search.d.ts +9 -0
  173. package/dist/help/search.js +104 -0
  174. package/dist/help-index.json +660 -0
  175. package/dist/import/cli-args.js +3 -2
  176. package/dist/import/create.d.ts +5 -0
  177. package/dist/import/create.js +67 -13
  178. package/dist/import/index.js +19 -9
  179. package/dist/import/neutral-schema.d.ts +11 -11
  180. package/dist/mcp/auth/access.d.ts +70 -0
  181. package/dist/mcp/auth/access.js +58 -0
  182. package/dist/mcp/auth/grants-cli.d.ts +149 -0
  183. package/dist/mcp/auth/grants-cli.js +518 -0
  184. package/dist/mcp/auth/host-account-cli.d.ts +2 -0
  185. package/dist/mcp/auth/host-account-cli.js +47 -0
  186. package/dist/mcp/auth/ownership.d.ts +26 -52
  187. package/dist/mcp/auth/ownership.js +19 -14
  188. package/dist/mcp/auth/repo-authorization.d.ts +22 -0
  189. package/dist/mcp/auth/repo-authorization.js +51 -0
  190. package/dist/mcp/auth/resource-server.d.ts +31 -2
  191. package/dist/mcp/auth/resource-server.js +84 -3
  192. package/dist/mcp/auth/self-hosted/browser.js +2 -2
  193. package/dist/mcp/auth/self-hosted/cli.js +47 -13
  194. package/dist/mcp/auth/self-hosted/credentials.d.ts +20 -2
  195. package/dist/mcp/auth/self-hosted/credentials.js +62 -4
  196. package/dist/mcp/auth/self-hosted/session.d.ts +2 -1
  197. package/dist/mcp/context.d.ts +27 -1
  198. package/dist/mcp/errors.d.ts +25 -6
  199. package/dist/mcp/errors.js +98 -0
  200. package/dist/mcp/host-events/github-ingress.d.ts +36 -0
  201. package/dist/mcp/host-events/github-ingress.js +92 -0
  202. package/dist/mcp/host-events/github-user-callback.d.ts +18 -0
  203. package/dist/mcp/host-events/github-user-callback.js +50 -0
  204. package/dist/mcp/index.d.ts +8 -1
  205. package/dist/mcp/index.js +106 -16
  206. package/dist/mcp/server.js +27 -9
  207. package/dist/mcp/tools/agents.js +446 -48
  208. package/dist/mcp/tools/budget-groups.js +3 -3
  209. package/dist/mcp/tools/datastore.js +22 -15
  210. package/dist/mcp/tools/grants.d.ts +2 -0
  211. package/dist/mcp/tools/grants.js +239 -0
  212. package/dist/mcp/tools/help.d.ts +5 -0
  213. package/dist/mcp/tools/help.js +67 -0
  214. package/dist/mcp/tools/host-accounts.d.ts +2 -0
  215. package/dist/mcp/tools/host-accounts.js +114 -0
  216. package/dist/mcp/tools/memory.d.ts +7 -1
  217. package/dist/mcp/tools/memory.js +5 -5
  218. package/dist/mcp/tools/repositories.d.ts +2 -0
  219. package/dist/mcp/tools/repositories.js +181 -0
  220. package/dist/mcp/tools/runs.d.ts +6 -0
  221. package/dist/mcp/tools/runs.js +60 -6
  222. package/dist/mcp/tools/scheduling.js +3 -6
  223. package/dist/mcp/tools/secrets.js +18 -6
  224. package/dist/mcp/tools/services.d.ts +2 -0
  225. package/dist/mcp/tools/services.js +222 -0
  226. package/dist/mcp/tools/subagents.js +52 -16
  227. package/dist/mcp/tools/tools.d.ts +41 -0
  228. package/dist/mcp/tools/tools.js +201 -40
  229. package/dist/mcp/tools/trigger.js +36 -6
  230. package/dist/mcp/tools/webhooks.js +15 -4
  231. package/dist/mcp/transport/streamable-http.d.ts +10 -0
  232. package/dist/mcp/transport/streamable-http.js +32 -2
  233. package/dist/providers/auth/delegating.d.ts +19 -0
  234. package/dist/providers/auth/delegating.js +71 -0
  235. package/dist/providers/auth/index.d.ts +2 -0
  236. package/dist/providers/auth/index.js +11 -0
  237. package/dist/providers/auth/self-hosted.d.ts +2 -1
  238. package/dist/providers/auth/self-hosted.js +16 -4
  239. package/dist/providers/auth/types.d.ts +6 -0
  240. package/dist/providers/coding-proxy/memory-ledger.d.ts +3 -0
  241. package/dist/providers/coding-proxy/memory-ledger.js +21 -2
  242. package/dist/providers/coding-proxy/metering.d.ts +4 -0
  243. package/dist/providers/coding-proxy/metering.js +28 -2
  244. package/dist/providers/coding-proxy/prisma-ledger.d.ts +17 -0
  245. package/dist/providers/coding-proxy/prisma-ledger.js +50 -5
  246. package/dist/providers/coding-proxy/proxy.d.ts +13 -0
  247. package/dist/providers/coding-proxy/proxy.js +479 -18
  248. package/dist/providers/coding-proxy/registry/audit.d.ts +131 -0
  249. package/dist/providers/coding-proxy/registry/audit.js +380 -0
  250. package/dist/providers/coding-proxy/registry/bounded-fetch.d.ts +16 -0
  251. package/dist/providers/coding-proxy/registry/bounded-fetch.js +77 -0
  252. package/dist/providers/coding-proxy/registry/plan.d.ts +58 -0
  253. package/dist/providers/coding-proxy/registry/plan.js +304 -0
  254. package/dist/providers/coding-proxy/registry/prisma-store.d.ts +34 -0
  255. package/dist/providers/coding-proxy/registry/prisma-store.js +151 -0
  256. package/dist/providers/coding-proxy/registry/service.d.ts +213 -0
  257. package/dist/providers/coding-proxy/registry/service.js +1137 -0
  258. package/dist/providers/coding-proxy/registry/store.d.ts +127 -0
  259. package/dist/providers/coding-proxy/registry/store.js +70 -0
  260. package/dist/providers/coding-proxy/runtime.d.ts +17 -0
  261. package/dist/providers/coding-proxy/runtime.js +63 -0
  262. package/dist/providers/coding-proxy/secure-fetch.js +0 -1
  263. package/dist/providers/coding-proxy/server.d.ts +11 -0
  264. package/dist/providers/coding-proxy/server.js +163 -0
  265. package/dist/providers/coding-proxy/types.d.ts +15 -0
  266. package/dist/providers/engine/types.d.ts +10 -0
  267. package/dist/providers/executor/build.d.ts +2 -2
  268. package/dist/providers/executor/composition.d.ts +3 -0
  269. package/dist/providers/executor/composition.js +19 -0
  270. package/dist/providers/executor/container.d.ts +105 -3
  271. package/dist/providers/executor/container.js +296 -20
  272. package/dist/providers/executor/dbos.d.ts +2 -3
  273. package/dist/providers/executor/in-process.d.ts +2 -3
  274. package/dist/providers/executor/routing.d.ts +7 -0
  275. package/dist/providers/executor/routing.js +13 -0
  276. package/dist/providers/executor/types.d.ts +22 -0
  277. package/dist/providers/jobs/claude-tool-setup.d.ts +23 -0
  278. package/dist/providers/jobs/claude-tool-setup.js +50 -0
  279. package/dist/providers/jobs/collect-prune.d.ts +7 -0
  280. package/dist/providers/jobs/collect-prune.js +27 -0
  281. package/dist/providers/jobs/docker-isolation.d.ts +48 -3
  282. package/dist/providers/jobs/docker-isolation.js +213 -22
  283. package/dist/providers/jobs/docker-services.d.ts +35 -0
  284. package/dist/providers/jobs/docker-services.js +191 -0
  285. package/dist/providers/jobs/docker.d.ts +49 -2
  286. package/dist/providers/jobs/docker.js +279 -32
  287. package/dist/providers/jobs/fake-kubernetes-api.d.ts +1 -0
  288. package/dist/providers/jobs/fake-kubernetes-api.js +12 -3
  289. package/dist/providers/jobs/kubernetes-isolation.d.ts +17 -2
  290. package/dist/providers/jobs/kubernetes-isolation.js +238 -57
  291. package/dist/providers/jobs/kubernetes-platform.d.ts +10 -4
  292. package/dist/providers/jobs/kubernetes-platform.js +11 -5
  293. package/dist/providers/jobs/kubernetes-preflight.js +3 -0
  294. package/dist/providers/jobs/kubernetes.d.ts +21 -2
  295. package/dist/providers/jobs/kubernetes.js +112 -21
  296. package/dist/providers/jobs/types.d.ts +18 -0
  297. package/dist/providers/llm/anthropic.js +6 -2
  298. package/dist/providers/llm/bedrock.js +2 -1
  299. package/dist/providers/llm/claude-messages.d.ts +5 -1
  300. package/dist/providers/llm/claude-messages.js +1 -0
  301. package/dist/providers/llm/claude-provider.d.ts +3 -1
  302. package/dist/providers/llm/claude-provider.js +5 -1
  303. package/dist/providers/llm/index.d.ts +1 -1
  304. package/dist/providers/llm/index.js +1 -1
  305. package/dist/providers/llm/pricing-anthropic.d.ts +10 -0
  306. package/dist/providers/llm/pricing-anthropic.js +32 -14
  307. package/dist/providers/llm/pricing-bedrock-claude.d.ts +8 -0
  308. package/dist/providers/llm/pricing-bedrock-claude.js +9 -0
  309. package/dist/providers/llm/routing.d.ts +10 -1
  310. package/dist/providers/llm/routing.js +18 -0
  311. package/dist/providers/llm/types.d.ts +12 -0
  312. package/dist/providers/llm/types.js +8 -1
  313. package/dist/providers/review-host/diff-lines.d.ts +16 -0
  314. package/dist/providers/review-host/diff-lines.js +59 -0
  315. package/dist/providers/review-host/github-events.d.ts +6 -0
  316. package/dist/providers/review-host/github-events.js +180 -0
  317. package/dist/providers/review-host/github-user-auth.d.ts +38 -0
  318. package/dist/providers/review-host/github-user-auth.js +128 -0
  319. package/dist/providers/review-host/github.d.ts +57 -0
  320. package/dist/providers/review-host/github.js +567 -0
  321. package/dist/providers/review-host/index.d.ts +12 -0
  322. package/dist/providers/review-host/index.js +30 -0
  323. package/dist/providers/review-host/review-format.d.ts +19 -0
  324. package/dist/providers/review-host/review-format.js +59 -0
  325. package/dist/providers/review-host/types.d.ts +284 -0
  326. package/dist/providers/review-host/types.js +24 -0
  327. package/dist/providers/vcs/git.d.ts +16 -6
  328. package/dist/providers/vcs/git.js +77 -13
  329. package/dist/providers/vcs/github.d.ts +74 -3
  330. package/dist/providers/vcs/github.js +195 -15
  331. package/dist/providers/vcs/types.d.ts +42 -4
  332. package/dist/quickstart/index.js +13 -2
  333. package/dist/sandbox/fetch-policy.d.ts +20 -2
  334. package/dist/sandbox/fetch-policy.js +64 -3
  335. package/dist/sandbox/host-functions.d.ts +9 -1
  336. package/dist/sandbox/host-functions.js +12 -5
  337. package/dist/serve.js +1 -1
  338. package/dist/wardby-bin.js +6 -0
  339. package/docs/README.md +30 -0
  340. package/docs/architecture-runtime.md +90 -0
  341. package/docs/assets/brand/wardby-icon-512.png +0 -0
  342. package/docs/assets/brand/wardby-icon.svg +16 -0
  343. package/docs/assets/brand/wardby-mascot-profile-512.png +0 -0
  344. package/docs/assets/brand/wardby-mascot.png +0 -0
  345. package/docs/assets/brand/wardby-mascot.svg +5 -0
  346. package/docs/assets/wardby-workflow.svg +106 -0
  347. package/docs/code-review-agents.md +481 -0
  348. package/docs/coding-agent-setup.md +172 -0
  349. package/docs/coding-packages.md +455 -0
  350. package/docs/coding-services.md +300 -0
  351. package/docs/coding-worker-byo-images.md +98 -0
  352. package/docs/coding-worker-isolation.md +1061 -0
  353. package/docs/getting-started-gke.md +615 -0
  354. package/docs/getting-started-identity-provider.md +308 -0
  355. package/docs/getting-started.md +133 -0
  356. package/docs/observability.md +53 -0
  357. package/docs/release-verification.md +66 -0
  358. package/docs/security-deployment.md +657 -0
  359. package/help/code-review-agents.md +31 -0
  360. package/help/coding-packages.md +31 -0
  361. package/help/coding-services.md +71 -0
  362. package/help/creating-agents.md +68 -0
  363. package/help/deploy-gke.md +39 -0
  364. package/help/deployment-targets.md +39 -0
  365. package/help/errors/budget-group-exhausted.md +25 -0
  366. package/help/errors/docker-isolation-unsupported.md +26 -0
  367. package/help/errors/protected-path.md +45 -0
  368. package/help/errors/repo-access.md +27 -0
  369. package/help/errors/service-declaration-invalid.md +27 -0
  370. package/help/errors/service-declaration-unavailable.md +25 -0
  371. package/help/errors/service-launcher-unsupported.md +30 -0
  372. package/help/errors/service-not-allowed.md +27 -0
  373. package/help/errors/service-unknown.md +23 -0
  374. package/help/errors/service-unready.md +49 -0
  375. package/help/getting-started.md +31 -0
  376. package/help/github.md +30 -0
  377. package/help/identity-and-access.md +39 -0
  378. package/help/mcp.md +30 -0
  379. package/help/native-capabilities.md +30 -0
  380. package/help/observability.md +41 -0
  381. package/help/operating-agents.md +30 -0
  382. package/help/security.md +27 -0
  383. package/help/troubleshooting/budgets.md +26 -0
  384. package/help/troubleshooting/coding-workers.md +47 -0
  385. package/help/troubleshooting/repository-access.md +27 -0
  386. package/package.json +12 -3
  387. package/prisma/migrations/20260925010000_coding_collect_exclude/migration.sql +8 -0
  388. package/prisma/migrations/20260925015000_allowed_egress_default/migration.sql +8 -0
  389. package/prisma/migrations/20260925020000_coding_package_registry/migration.sql +55 -0
  390. package/prisma/migrations/20260925030000_tool_name_per_owner/migration.sql +11 -0
  391. package/prisma/migrations/20260926010000_run_trigger_host_event/migration.sql +7 -0
  392. package/prisma/migrations/20260926020000_code_review_hosts/migration.sql +53 -0
  393. package/prisma/migrations/20260926030000_auth_user_roles/migration.sql +9 -0
  394. package/prisma/migrations/20260926040000_agent_effort/migration.sql +6 -0
  395. package/prisma/migrations/20260926050000_registry_lockfile_plan/migration.sql +32 -0
  396. package/prisma/migrations/20260926050000_repo_access_authorization/migration.sql +82 -0
  397. package/prisma/migrations/20260926060000_registry_plan_refusal/migration.sql +19 -0
  398. package/prisma/migrations/20260926100000_registry_plan_refusal_published_at/migration.sql +5 -0
  399. package/prisma/migrations/20260926190000_run_host_status/migration.sql +18 -0
  400. package/prisma/migrations/20260926210000_run_host_status_at_dispatch/migration.sql +5 -0
  401. package/prisma/migrations/20260927010000_resource_grants/migration.sql +72 -0
  402. package/prisma/migrations/20260927020000_proxy_session_budget_exhausted/migration.sql +3 -0
  403. package/prisma/migrations/20260927030000_coding_debug_trace/migration.sql +4 -0
  404. package/prisma/migrations/20260927040000_proxy_session_upstream_failure/migration.sql +3 -0
  405. package/prisma/migrations/20260927050000_coding_run_services/migration.sql +74 -0
  406. package/prisma/migrations/20260928000000_coding_run_tool_image/migration.sql +5 -0
  407. package/prisma/schema.prisma +407 -21
@@ -33,6 +33,10 @@ export type CodingAgentProfileMinAggregateOutputType = {
33
33
  toolchainVersion: string | null;
34
34
  workerImageRef: string | null;
35
35
  workspaceDiskMb: number | null;
36
+ debugTraceUntil: Date | null;
37
+ repositoryAuthorizedVia: string | null;
38
+ repositoryAuthorizedById: string | null;
39
+ repositoryAuthorizedAt: Date | null;
36
40
  };
37
41
  export type CodingAgentProfileMaxAggregateOutputType = {
38
42
  agentId: string | null;
@@ -46,6 +50,10 @@ export type CodingAgentProfileMaxAggregateOutputType = {
46
50
  toolchainVersion: string | null;
47
51
  workerImageRef: string | null;
48
52
  workspaceDiskMb: number | null;
53
+ debugTraceUntil: Date | null;
54
+ repositoryAuthorizedVia: string | null;
55
+ repositoryAuthorizedById: string | null;
56
+ repositoryAuthorizedAt: Date | null;
49
57
  };
50
58
  export type CodingAgentProfileCountAggregateOutputType = {
51
59
  agentId: number;
@@ -57,10 +65,18 @@ export type CodingAgentProfileCountAggregateOutputType = {
57
65
  timeoutSec: number;
58
66
  allowedEgress: number;
59
67
  protectedPaths: number;
68
+ collectExclude: number;
60
69
  toolchain: number;
61
70
  toolchainVersion: number;
62
71
  workerImageRef: number;
63
72
  workspaceDiskMb: number;
73
+ packageAllowlist: number;
74
+ packagePolicy: number;
75
+ debugTraceUntil: number;
76
+ services: number;
77
+ repositoryAuthorizedVia: number;
78
+ repositoryAuthorizedById: number;
79
+ repositoryAuthorizedAt: number;
64
80
  _all: number;
65
81
  };
66
82
  export type CodingAgentProfileAvgAggregateInputType = {
@@ -83,6 +99,10 @@ export type CodingAgentProfileMinAggregateInputType = {
83
99
  toolchainVersion?: true;
84
100
  workerImageRef?: true;
85
101
  workspaceDiskMb?: true;
102
+ debugTraceUntil?: true;
103
+ repositoryAuthorizedVia?: true;
104
+ repositoryAuthorizedById?: true;
105
+ repositoryAuthorizedAt?: true;
86
106
  };
87
107
  export type CodingAgentProfileMaxAggregateInputType = {
88
108
  agentId?: true;
@@ -96,6 +116,10 @@ export type CodingAgentProfileMaxAggregateInputType = {
96
116
  toolchainVersion?: true;
97
117
  workerImageRef?: true;
98
118
  workspaceDiskMb?: true;
119
+ debugTraceUntil?: true;
120
+ repositoryAuthorizedVia?: true;
121
+ repositoryAuthorizedById?: true;
122
+ repositoryAuthorizedAt?: true;
99
123
  };
100
124
  export type CodingAgentProfileCountAggregateInputType = {
101
125
  agentId?: true;
@@ -107,10 +131,18 @@ export type CodingAgentProfileCountAggregateInputType = {
107
131
  timeoutSec?: true;
108
132
  allowedEgress?: true;
109
133
  protectedPaths?: true;
134
+ collectExclude?: true;
110
135
  toolchain?: true;
111
136
  toolchainVersion?: true;
112
137
  workerImageRef?: true;
113
138
  workspaceDiskMb?: true;
139
+ packageAllowlist?: true;
140
+ packagePolicy?: true;
141
+ debugTraceUntil?: true;
142
+ services?: true;
143
+ repositoryAuthorizedVia?: true;
144
+ repositoryAuthorizedById?: true;
145
+ repositoryAuthorizedAt?: true;
114
146
  _all?: true;
115
147
  };
116
148
  export type CodingAgentProfileAggregateArgs<ExtArgs extends runtime.Types.Extensions.InternalArgs = runtime.Types.Extensions.DefaultArgs> = {
@@ -199,10 +231,18 @@ export type CodingAgentProfileGroupByOutputType = {
199
231
  timeoutSec: number;
200
232
  allowedEgress: runtime.JsonValue;
201
233
  protectedPaths: runtime.JsonValue;
234
+ collectExclude: runtime.JsonValue;
202
235
  toolchain: string;
203
236
  toolchainVersion: string | null;
204
237
  workerImageRef: string | null;
205
238
  workspaceDiskMb: number | null;
239
+ packageAllowlist: runtime.JsonValue;
240
+ packagePolicy: runtime.JsonValue;
241
+ debugTraceUntil: Date | null;
242
+ services: runtime.JsonValue;
243
+ repositoryAuthorizedVia: string | null;
244
+ repositoryAuthorizedById: string | null;
245
+ repositoryAuthorizedAt: Date | null;
206
246
  _count: CodingAgentProfileCountAggregateOutputType | null;
207
247
  _avg: CodingAgentProfileAvgAggregateOutputType | null;
208
248
  _sum: CodingAgentProfileSumAggregateOutputType | null;
@@ -225,10 +265,18 @@ export type CodingAgentProfileWhereInput = {
225
265
  timeoutSec?: Prisma.IntFilter<"CodingAgentProfile"> | number;
226
266
  allowedEgress?: Prisma.JsonFilter<"CodingAgentProfile">;
227
267
  protectedPaths?: Prisma.JsonFilter<"CodingAgentProfile">;
268
+ collectExclude?: Prisma.JsonFilter<"CodingAgentProfile">;
228
269
  toolchain?: Prisma.StringFilter<"CodingAgentProfile"> | string;
229
270
  toolchainVersion?: Prisma.StringNullableFilter<"CodingAgentProfile"> | string | null;
230
271
  workerImageRef?: Prisma.StringNullableFilter<"CodingAgentProfile"> | string | null;
231
272
  workspaceDiskMb?: Prisma.IntNullableFilter<"CodingAgentProfile"> | number | null;
273
+ packageAllowlist?: Prisma.JsonFilter<"CodingAgentProfile">;
274
+ packagePolicy?: Prisma.JsonFilter<"CodingAgentProfile">;
275
+ debugTraceUntil?: Prisma.DateTimeNullableFilter<"CodingAgentProfile"> | Date | string | null;
276
+ services?: Prisma.JsonFilter<"CodingAgentProfile">;
277
+ repositoryAuthorizedVia?: Prisma.StringNullableFilter<"CodingAgentProfile"> | string | null;
278
+ repositoryAuthorizedById?: Prisma.StringNullableFilter<"CodingAgentProfile"> | string | null;
279
+ repositoryAuthorizedAt?: Prisma.DateTimeNullableFilter<"CodingAgentProfile"> | Date | string | null;
232
280
  agent?: Prisma.XOR<Prisma.AgentScalarRelationFilter, Prisma.AgentWhereInput>;
233
281
  };
234
282
  export type CodingAgentProfileOrderByWithRelationInput = {
@@ -241,10 +289,18 @@ export type CodingAgentProfileOrderByWithRelationInput = {
241
289
  timeoutSec?: Prisma.SortOrder;
242
290
  allowedEgress?: Prisma.SortOrder;
243
291
  protectedPaths?: Prisma.SortOrder;
292
+ collectExclude?: Prisma.SortOrder;
244
293
  toolchain?: Prisma.SortOrder;
245
294
  toolchainVersion?: Prisma.SortOrderInput | Prisma.SortOrder;
246
295
  workerImageRef?: Prisma.SortOrderInput | Prisma.SortOrder;
247
296
  workspaceDiskMb?: Prisma.SortOrderInput | Prisma.SortOrder;
297
+ packageAllowlist?: Prisma.SortOrder;
298
+ packagePolicy?: Prisma.SortOrder;
299
+ debugTraceUntil?: Prisma.SortOrderInput | Prisma.SortOrder;
300
+ services?: Prisma.SortOrder;
301
+ repositoryAuthorizedVia?: Prisma.SortOrderInput | Prisma.SortOrder;
302
+ repositoryAuthorizedById?: Prisma.SortOrderInput | Prisma.SortOrder;
303
+ repositoryAuthorizedAt?: Prisma.SortOrderInput | Prisma.SortOrder;
248
304
  agent?: Prisma.AgentOrderByWithRelationInput;
249
305
  };
250
306
  export type CodingAgentProfileWhereUniqueInput = Prisma.AtLeast<{
@@ -260,10 +316,18 @@ export type CodingAgentProfileWhereUniqueInput = Prisma.AtLeast<{
260
316
  timeoutSec?: Prisma.IntFilter<"CodingAgentProfile"> | number;
261
317
  allowedEgress?: Prisma.JsonFilter<"CodingAgentProfile">;
262
318
  protectedPaths?: Prisma.JsonFilter<"CodingAgentProfile">;
319
+ collectExclude?: Prisma.JsonFilter<"CodingAgentProfile">;
263
320
  toolchain?: Prisma.StringFilter<"CodingAgentProfile"> | string;
264
321
  toolchainVersion?: Prisma.StringNullableFilter<"CodingAgentProfile"> | string | null;
265
322
  workerImageRef?: Prisma.StringNullableFilter<"CodingAgentProfile"> | string | null;
266
323
  workspaceDiskMb?: Prisma.IntNullableFilter<"CodingAgentProfile"> | number | null;
324
+ packageAllowlist?: Prisma.JsonFilter<"CodingAgentProfile">;
325
+ packagePolicy?: Prisma.JsonFilter<"CodingAgentProfile">;
326
+ debugTraceUntil?: Prisma.DateTimeNullableFilter<"CodingAgentProfile"> | Date | string | null;
327
+ services?: Prisma.JsonFilter<"CodingAgentProfile">;
328
+ repositoryAuthorizedVia?: Prisma.StringNullableFilter<"CodingAgentProfile"> | string | null;
329
+ repositoryAuthorizedById?: Prisma.StringNullableFilter<"CodingAgentProfile"> | string | null;
330
+ repositoryAuthorizedAt?: Prisma.DateTimeNullableFilter<"CodingAgentProfile"> | Date | string | null;
267
331
  agent?: Prisma.XOR<Prisma.AgentScalarRelationFilter, Prisma.AgentWhereInput>;
268
332
  }, "agentId">;
269
333
  export type CodingAgentProfileOrderByWithAggregationInput = {
@@ -276,10 +340,18 @@ export type CodingAgentProfileOrderByWithAggregationInput = {
276
340
  timeoutSec?: Prisma.SortOrder;
277
341
  allowedEgress?: Prisma.SortOrder;
278
342
  protectedPaths?: Prisma.SortOrder;
343
+ collectExclude?: Prisma.SortOrder;
279
344
  toolchain?: Prisma.SortOrder;
280
345
  toolchainVersion?: Prisma.SortOrderInput | Prisma.SortOrder;
281
346
  workerImageRef?: Prisma.SortOrderInput | Prisma.SortOrder;
282
347
  workspaceDiskMb?: Prisma.SortOrderInput | Prisma.SortOrder;
348
+ packageAllowlist?: Prisma.SortOrder;
349
+ packagePolicy?: Prisma.SortOrder;
350
+ debugTraceUntil?: Prisma.SortOrderInput | Prisma.SortOrder;
351
+ services?: Prisma.SortOrder;
352
+ repositoryAuthorizedVia?: Prisma.SortOrderInput | Prisma.SortOrder;
353
+ repositoryAuthorizedById?: Prisma.SortOrderInput | Prisma.SortOrder;
354
+ repositoryAuthorizedAt?: Prisma.SortOrderInput | Prisma.SortOrder;
283
355
  _count?: Prisma.CodingAgentProfileCountOrderByAggregateInput;
284
356
  _avg?: Prisma.CodingAgentProfileAvgOrderByAggregateInput;
285
357
  _max?: Prisma.CodingAgentProfileMaxOrderByAggregateInput;
@@ -299,10 +371,18 @@ export type CodingAgentProfileScalarWhereWithAggregatesInput = {
299
371
  timeoutSec?: Prisma.IntWithAggregatesFilter<"CodingAgentProfile"> | number;
300
372
  allowedEgress?: Prisma.JsonWithAggregatesFilter<"CodingAgentProfile">;
301
373
  protectedPaths?: Prisma.JsonWithAggregatesFilter<"CodingAgentProfile">;
374
+ collectExclude?: Prisma.JsonWithAggregatesFilter<"CodingAgentProfile">;
302
375
  toolchain?: Prisma.StringWithAggregatesFilter<"CodingAgentProfile"> | string;
303
376
  toolchainVersion?: Prisma.StringNullableWithAggregatesFilter<"CodingAgentProfile"> | string | null;
304
377
  workerImageRef?: Prisma.StringNullableWithAggregatesFilter<"CodingAgentProfile"> | string | null;
305
378
  workspaceDiskMb?: Prisma.IntNullableWithAggregatesFilter<"CodingAgentProfile"> | number | null;
379
+ packageAllowlist?: Prisma.JsonWithAggregatesFilter<"CodingAgentProfile">;
380
+ packagePolicy?: Prisma.JsonWithAggregatesFilter<"CodingAgentProfile">;
381
+ debugTraceUntil?: Prisma.DateTimeNullableWithAggregatesFilter<"CodingAgentProfile"> | Date | string | null;
382
+ services?: Prisma.JsonWithAggregatesFilter<"CodingAgentProfile">;
383
+ repositoryAuthorizedVia?: Prisma.StringNullableWithAggregatesFilter<"CodingAgentProfile"> | string | null;
384
+ repositoryAuthorizedById?: Prisma.StringNullableWithAggregatesFilter<"CodingAgentProfile"> | string | null;
385
+ repositoryAuthorizedAt?: Prisma.DateTimeNullableWithAggregatesFilter<"CodingAgentProfile"> | Date | string | null;
306
386
  };
307
387
  export type CodingAgentProfileCreateInput = {
308
388
  provider?: string;
@@ -311,12 +391,20 @@ export type CodingAgentProfileCreateInput = {
311
391
  defaultTask?: string | null;
312
392
  allowWebhookTaskOverride?: boolean;
313
393
  timeoutSec?: number;
314
- allowedEgress: Prisma.JsonNullValueInput | runtime.InputJsonValue;
394
+ allowedEgress?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
315
395
  protectedPaths: Prisma.JsonNullValueInput | runtime.InputJsonValue;
396
+ collectExclude?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
316
397
  toolchain?: string;
317
398
  toolchainVersion?: string | null;
318
399
  workerImageRef?: string | null;
319
400
  workspaceDiskMb?: number | null;
401
+ packageAllowlist?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
402
+ packagePolicy?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
403
+ debugTraceUntil?: Date | string | null;
404
+ services?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
405
+ repositoryAuthorizedVia?: string | null;
406
+ repositoryAuthorizedById?: string | null;
407
+ repositoryAuthorizedAt?: Date | string | null;
320
408
  agent: Prisma.AgentCreateNestedOneWithoutCodingProfileInput;
321
409
  };
322
410
  export type CodingAgentProfileUncheckedCreateInput = {
@@ -327,12 +415,20 @@ export type CodingAgentProfileUncheckedCreateInput = {
327
415
  defaultTask?: string | null;
328
416
  allowWebhookTaskOverride?: boolean;
329
417
  timeoutSec?: number;
330
- allowedEgress: Prisma.JsonNullValueInput | runtime.InputJsonValue;
418
+ allowedEgress?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
331
419
  protectedPaths: Prisma.JsonNullValueInput | runtime.InputJsonValue;
420
+ collectExclude?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
332
421
  toolchain?: string;
333
422
  toolchainVersion?: string | null;
334
423
  workerImageRef?: string | null;
335
424
  workspaceDiskMb?: number | null;
425
+ packageAllowlist?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
426
+ packagePolicy?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
427
+ debugTraceUntil?: Date | string | null;
428
+ services?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
429
+ repositoryAuthorizedVia?: string | null;
430
+ repositoryAuthorizedById?: string | null;
431
+ repositoryAuthorizedAt?: Date | string | null;
336
432
  };
337
433
  export type CodingAgentProfileUpdateInput = {
338
434
  provider?: Prisma.StringFieldUpdateOperationsInput | string;
@@ -343,10 +439,18 @@ export type CodingAgentProfileUpdateInput = {
343
439
  timeoutSec?: Prisma.IntFieldUpdateOperationsInput | number;
344
440
  allowedEgress?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
345
441
  protectedPaths?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
442
+ collectExclude?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
346
443
  toolchain?: Prisma.StringFieldUpdateOperationsInput | string;
347
444
  toolchainVersion?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
348
445
  workerImageRef?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
349
446
  workspaceDiskMb?: Prisma.NullableIntFieldUpdateOperationsInput | number | null;
447
+ packageAllowlist?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
448
+ packagePolicy?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
449
+ debugTraceUntil?: Prisma.NullableDateTimeFieldUpdateOperationsInput | Date | string | null;
450
+ services?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
451
+ repositoryAuthorizedVia?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
452
+ repositoryAuthorizedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
453
+ repositoryAuthorizedAt?: Prisma.NullableDateTimeFieldUpdateOperationsInput | Date | string | null;
350
454
  agent?: Prisma.AgentUpdateOneRequiredWithoutCodingProfileNestedInput;
351
455
  };
352
456
  export type CodingAgentProfileUncheckedUpdateInput = {
@@ -359,10 +463,18 @@ export type CodingAgentProfileUncheckedUpdateInput = {
359
463
  timeoutSec?: Prisma.IntFieldUpdateOperationsInput | number;
360
464
  allowedEgress?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
361
465
  protectedPaths?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
466
+ collectExclude?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
362
467
  toolchain?: Prisma.StringFieldUpdateOperationsInput | string;
363
468
  toolchainVersion?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
364
469
  workerImageRef?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
365
470
  workspaceDiskMb?: Prisma.NullableIntFieldUpdateOperationsInput | number | null;
471
+ packageAllowlist?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
472
+ packagePolicy?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
473
+ debugTraceUntil?: Prisma.NullableDateTimeFieldUpdateOperationsInput | Date | string | null;
474
+ services?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
475
+ repositoryAuthorizedVia?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
476
+ repositoryAuthorizedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
477
+ repositoryAuthorizedAt?: Prisma.NullableDateTimeFieldUpdateOperationsInput | Date | string | null;
366
478
  };
367
479
  export type CodingAgentProfileCreateManyInput = {
368
480
  agentId: string;
@@ -372,12 +484,20 @@ export type CodingAgentProfileCreateManyInput = {
372
484
  defaultTask?: string | null;
373
485
  allowWebhookTaskOverride?: boolean;
374
486
  timeoutSec?: number;
375
- allowedEgress: Prisma.JsonNullValueInput | runtime.InputJsonValue;
487
+ allowedEgress?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
376
488
  protectedPaths: Prisma.JsonNullValueInput | runtime.InputJsonValue;
489
+ collectExclude?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
377
490
  toolchain?: string;
378
491
  toolchainVersion?: string | null;
379
492
  workerImageRef?: string | null;
380
493
  workspaceDiskMb?: number | null;
494
+ packageAllowlist?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
495
+ packagePolicy?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
496
+ debugTraceUntil?: Date | string | null;
497
+ services?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
498
+ repositoryAuthorizedVia?: string | null;
499
+ repositoryAuthorizedById?: string | null;
500
+ repositoryAuthorizedAt?: Date | string | null;
381
501
  };
382
502
  export type CodingAgentProfileUpdateManyMutationInput = {
383
503
  provider?: Prisma.StringFieldUpdateOperationsInput | string;
@@ -388,10 +508,18 @@ export type CodingAgentProfileUpdateManyMutationInput = {
388
508
  timeoutSec?: Prisma.IntFieldUpdateOperationsInput | number;
389
509
  allowedEgress?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
390
510
  protectedPaths?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
511
+ collectExclude?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
391
512
  toolchain?: Prisma.StringFieldUpdateOperationsInput | string;
392
513
  toolchainVersion?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
393
514
  workerImageRef?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
394
515
  workspaceDiskMb?: Prisma.NullableIntFieldUpdateOperationsInput | number | null;
516
+ packageAllowlist?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
517
+ packagePolicy?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
518
+ debugTraceUntil?: Prisma.NullableDateTimeFieldUpdateOperationsInput | Date | string | null;
519
+ services?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
520
+ repositoryAuthorizedVia?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
521
+ repositoryAuthorizedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
522
+ repositoryAuthorizedAt?: Prisma.NullableDateTimeFieldUpdateOperationsInput | Date | string | null;
395
523
  };
396
524
  export type CodingAgentProfileUncheckedUpdateManyInput = {
397
525
  agentId?: Prisma.StringFieldUpdateOperationsInput | string;
@@ -403,10 +531,18 @@ export type CodingAgentProfileUncheckedUpdateManyInput = {
403
531
  timeoutSec?: Prisma.IntFieldUpdateOperationsInput | number;
404
532
  allowedEgress?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
405
533
  protectedPaths?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
534
+ collectExclude?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
406
535
  toolchain?: Prisma.StringFieldUpdateOperationsInput | string;
407
536
  toolchainVersion?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
408
537
  workerImageRef?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
409
538
  workspaceDiskMb?: Prisma.NullableIntFieldUpdateOperationsInput | number | null;
539
+ packageAllowlist?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
540
+ packagePolicy?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
541
+ debugTraceUntil?: Prisma.NullableDateTimeFieldUpdateOperationsInput | Date | string | null;
542
+ services?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
543
+ repositoryAuthorizedVia?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
544
+ repositoryAuthorizedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
545
+ repositoryAuthorizedAt?: Prisma.NullableDateTimeFieldUpdateOperationsInput | Date | string | null;
410
546
  };
411
547
  export type CodingAgentProfileNullableScalarRelationFilter = {
412
548
  is?: Prisma.CodingAgentProfileWhereInput | null;
@@ -422,10 +558,18 @@ export type CodingAgentProfileCountOrderByAggregateInput = {
422
558
  timeoutSec?: Prisma.SortOrder;
423
559
  allowedEgress?: Prisma.SortOrder;
424
560
  protectedPaths?: Prisma.SortOrder;
561
+ collectExclude?: Prisma.SortOrder;
425
562
  toolchain?: Prisma.SortOrder;
426
563
  toolchainVersion?: Prisma.SortOrder;
427
564
  workerImageRef?: Prisma.SortOrder;
428
565
  workspaceDiskMb?: Prisma.SortOrder;
566
+ packageAllowlist?: Prisma.SortOrder;
567
+ packagePolicy?: Prisma.SortOrder;
568
+ debugTraceUntil?: Prisma.SortOrder;
569
+ services?: Prisma.SortOrder;
570
+ repositoryAuthorizedVia?: Prisma.SortOrder;
571
+ repositoryAuthorizedById?: Prisma.SortOrder;
572
+ repositoryAuthorizedAt?: Prisma.SortOrder;
429
573
  };
430
574
  export type CodingAgentProfileAvgOrderByAggregateInput = {
431
575
  timeoutSec?: Prisma.SortOrder;
@@ -443,6 +587,10 @@ export type CodingAgentProfileMaxOrderByAggregateInput = {
443
587
  toolchainVersion?: Prisma.SortOrder;
444
588
  workerImageRef?: Prisma.SortOrder;
445
589
  workspaceDiskMb?: Prisma.SortOrder;
590
+ debugTraceUntil?: Prisma.SortOrder;
591
+ repositoryAuthorizedVia?: Prisma.SortOrder;
592
+ repositoryAuthorizedById?: Prisma.SortOrder;
593
+ repositoryAuthorizedAt?: Prisma.SortOrder;
446
594
  };
447
595
  export type CodingAgentProfileMinOrderByAggregateInput = {
448
596
  agentId?: Prisma.SortOrder;
@@ -456,6 +604,10 @@ export type CodingAgentProfileMinOrderByAggregateInput = {
456
604
  toolchainVersion?: Prisma.SortOrder;
457
605
  workerImageRef?: Prisma.SortOrder;
458
606
  workspaceDiskMb?: Prisma.SortOrder;
607
+ debugTraceUntil?: Prisma.SortOrder;
608
+ repositoryAuthorizedVia?: Prisma.SortOrder;
609
+ repositoryAuthorizedById?: Prisma.SortOrder;
610
+ repositoryAuthorizedAt?: Prisma.SortOrder;
459
611
  };
460
612
  export type CodingAgentProfileSumOrderByAggregateInput = {
461
613
  timeoutSec?: Prisma.SortOrder;
@@ -503,12 +655,20 @@ export type CodingAgentProfileCreateWithoutAgentInput = {
503
655
  defaultTask?: string | null;
504
656
  allowWebhookTaskOverride?: boolean;
505
657
  timeoutSec?: number;
506
- allowedEgress: Prisma.JsonNullValueInput | runtime.InputJsonValue;
658
+ allowedEgress?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
507
659
  protectedPaths: Prisma.JsonNullValueInput | runtime.InputJsonValue;
660
+ collectExclude?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
508
661
  toolchain?: string;
509
662
  toolchainVersion?: string | null;
510
663
  workerImageRef?: string | null;
511
664
  workspaceDiskMb?: number | null;
665
+ packageAllowlist?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
666
+ packagePolicy?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
667
+ debugTraceUntil?: Date | string | null;
668
+ services?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
669
+ repositoryAuthorizedVia?: string | null;
670
+ repositoryAuthorizedById?: string | null;
671
+ repositoryAuthorizedAt?: Date | string | null;
512
672
  };
513
673
  export type CodingAgentProfileUncheckedCreateWithoutAgentInput = {
514
674
  provider?: string;
@@ -517,12 +677,20 @@ export type CodingAgentProfileUncheckedCreateWithoutAgentInput = {
517
677
  defaultTask?: string | null;
518
678
  allowWebhookTaskOverride?: boolean;
519
679
  timeoutSec?: number;
520
- allowedEgress: Prisma.JsonNullValueInput | runtime.InputJsonValue;
680
+ allowedEgress?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
521
681
  protectedPaths: Prisma.JsonNullValueInput | runtime.InputJsonValue;
682
+ collectExclude?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
522
683
  toolchain?: string;
523
684
  toolchainVersion?: string | null;
524
685
  workerImageRef?: string | null;
525
686
  workspaceDiskMb?: number | null;
687
+ packageAllowlist?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
688
+ packagePolicy?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
689
+ debugTraceUntil?: Date | string | null;
690
+ services?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
691
+ repositoryAuthorizedVia?: string | null;
692
+ repositoryAuthorizedById?: string | null;
693
+ repositoryAuthorizedAt?: Date | string | null;
526
694
  };
527
695
  export type CodingAgentProfileCreateOrConnectWithoutAgentInput = {
528
696
  where: Prisma.CodingAgentProfileWhereUniqueInput;
@@ -546,10 +714,18 @@ export type CodingAgentProfileUpdateWithoutAgentInput = {
546
714
  timeoutSec?: Prisma.IntFieldUpdateOperationsInput | number;
547
715
  allowedEgress?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
548
716
  protectedPaths?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
717
+ collectExclude?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
549
718
  toolchain?: Prisma.StringFieldUpdateOperationsInput | string;
550
719
  toolchainVersion?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
551
720
  workerImageRef?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
552
721
  workspaceDiskMb?: Prisma.NullableIntFieldUpdateOperationsInput | number | null;
722
+ packageAllowlist?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
723
+ packagePolicy?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
724
+ debugTraceUntil?: Prisma.NullableDateTimeFieldUpdateOperationsInput | Date | string | null;
725
+ services?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
726
+ repositoryAuthorizedVia?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
727
+ repositoryAuthorizedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
728
+ repositoryAuthorizedAt?: Prisma.NullableDateTimeFieldUpdateOperationsInput | Date | string | null;
553
729
  };
554
730
  export type CodingAgentProfileUncheckedUpdateWithoutAgentInput = {
555
731
  provider?: Prisma.StringFieldUpdateOperationsInput | string;
@@ -560,10 +736,18 @@ export type CodingAgentProfileUncheckedUpdateWithoutAgentInput = {
560
736
  timeoutSec?: Prisma.IntFieldUpdateOperationsInput | number;
561
737
  allowedEgress?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
562
738
  protectedPaths?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
739
+ collectExclude?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
563
740
  toolchain?: Prisma.StringFieldUpdateOperationsInput | string;
564
741
  toolchainVersion?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
565
742
  workerImageRef?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
566
743
  workspaceDiskMb?: Prisma.NullableIntFieldUpdateOperationsInput | number | null;
744
+ packageAllowlist?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
745
+ packagePolicy?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
746
+ debugTraceUntil?: Prisma.NullableDateTimeFieldUpdateOperationsInput | Date | string | null;
747
+ services?: Prisma.JsonNullValueInput | runtime.InputJsonValue;
748
+ repositoryAuthorizedVia?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
749
+ repositoryAuthorizedById?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
750
+ repositoryAuthorizedAt?: Prisma.NullableDateTimeFieldUpdateOperationsInput | Date | string | null;
567
751
  };
568
752
  export type CodingAgentProfileSelect<ExtArgs extends runtime.Types.Extensions.InternalArgs = runtime.Types.Extensions.DefaultArgs> = runtime.Types.Extensions.GetSelect<{
569
753
  agentId?: boolean;
@@ -575,10 +759,18 @@ export type CodingAgentProfileSelect<ExtArgs extends runtime.Types.Extensions.In
575
759
  timeoutSec?: boolean;
576
760
  allowedEgress?: boolean;
577
761
  protectedPaths?: boolean;
762
+ collectExclude?: boolean;
578
763
  toolchain?: boolean;
579
764
  toolchainVersion?: boolean;
580
765
  workerImageRef?: boolean;
581
766
  workspaceDiskMb?: boolean;
767
+ packageAllowlist?: boolean;
768
+ packagePolicy?: boolean;
769
+ debugTraceUntil?: boolean;
770
+ services?: boolean;
771
+ repositoryAuthorizedVia?: boolean;
772
+ repositoryAuthorizedById?: boolean;
773
+ repositoryAuthorizedAt?: boolean;
582
774
  agent?: boolean | Prisma.AgentDefaultArgs<ExtArgs>;
583
775
  }, ExtArgs["result"]["codingAgentProfile"]>;
584
776
  export type CodingAgentProfileSelectCreateManyAndReturn<ExtArgs extends runtime.Types.Extensions.InternalArgs = runtime.Types.Extensions.DefaultArgs> = runtime.Types.Extensions.GetSelect<{
@@ -591,10 +783,18 @@ export type CodingAgentProfileSelectCreateManyAndReturn<ExtArgs extends runtime.
591
783
  timeoutSec?: boolean;
592
784
  allowedEgress?: boolean;
593
785
  protectedPaths?: boolean;
786
+ collectExclude?: boolean;
594
787
  toolchain?: boolean;
595
788
  toolchainVersion?: boolean;
596
789
  workerImageRef?: boolean;
597
790
  workspaceDiskMb?: boolean;
791
+ packageAllowlist?: boolean;
792
+ packagePolicy?: boolean;
793
+ debugTraceUntil?: boolean;
794
+ services?: boolean;
795
+ repositoryAuthorizedVia?: boolean;
796
+ repositoryAuthorizedById?: boolean;
797
+ repositoryAuthorizedAt?: boolean;
598
798
  agent?: boolean | Prisma.AgentDefaultArgs<ExtArgs>;
599
799
  }, ExtArgs["result"]["codingAgentProfile"]>;
600
800
  export type CodingAgentProfileSelectUpdateManyAndReturn<ExtArgs extends runtime.Types.Extensions.InternalArgs = runtime.Types.Extensions.DefaultArgs> = runtime.Types.Extensions.GetSelect<{
@@ -607,10 +807,18 @@ export type CodingAgentProfileSelectUpdateManyAndReturn<ExtArgs extends runtime.
607
807
  timeoutSec?: boolean;
608
808
  allowedEgress?: boolean;
609
809
  protectedPaths?: boolean;
810
+ collectExclude?: boolean;
610
811
  toolchain?: boolean;
611
812
  toolchainVersion?: boolean;
612
813
  workerImageRef?: boolean;
613
814
  workspaceDiskMb?: boolean;
815
+ packageAllowlist?: boolean;
816
+ packagePolicy?: boolean;
817
+ debugTraceUntil?: boolean;
818
+ services?: boolean;
819
+ repositoryAuthorizedVia?: boolean;
820
+ repositoryAuthorizedById?: boolean;
821
+ repositoryAuthorizedAt?: boolean;
614
822
  agent?: boolean | Prisma.AgentDefaultArgs<ExtArgs>;
615
823
  }, ExtArgs["result"]["codingAgentProfile"]>;
616
824
  export type CodingAgentProfileSelectScalar = {
@@ -623,12 +831,20 @@ export type CodingAgentProfileSelectScalar = {
623
831
  timeoutSec?: boolean;
624
832
  allowedEgress?: boolean;
625
833
  protectedPaths?: boolean;
834
+ collectExclude?: boolean;
626
835
  toolchain?: boolean;
627
836
  toolchainVersion?: boolean;
628
837
  workerImageRef?: boolean;
629
838
  workspaceDiskMb?: boolean;
630
- };
631
- export type CodingAgentProfileOmit<ExtArgs extends runtime.Types.Extensions.InternalArgs = runtime.Types.Extensions.DefaultArgs> = runtime.Types.Extensions.GetOmit<"agentId" | "provider" | "repository" | "baseRef" | "defaultTask" | "allowWebhookTaskOverride" | "timeoutSec" | "allowedEgress" | "protectedPaths" | "toolchain" | "toolchainVersion" | "workerImageRef" | "workspaceDiskMb", ExtArgs["result"]["codingAgentProfile"]>;
839
+ packageAllowlist?: boolean;
840
+ packagePolicy?: boolean;
841
+ debugTraceUntil?: boolean;
842
+ services?: boolean;
843
+ repositoryAuthorizedVia?: boolean;
844
+ repositoryAuthorizedById?: boolean;
845
+ repositoryAuthorizedAt?: boolean;
846
+ };
847
+ export type CodingAgentProfileOmit<ExtArgs extends runtime.Types.Extensions.InternalArgs = runtime.Types.Extensions.DefaultArgs> = runtime.Types.Extensions.GetOmit<"agentId" | "provider" | "repository" | "baseRef" | "defaultTask" | "allowWebhookTaskOverride" | "timeoutSec" | "allowedEgress" | "protectedPaths" | "collectExclude" | "toolchain" | "toolchainVersion" | "workerImageRef" | "workspaceDiskMb" | "packageAllowlist" | "packagePolicy" | "debugTraceUntil" | "services" | "repositoryAuthorizedVia" | "repositoryAuthorizedById" | "repositoryAuthorizedAt", ExtArgs["result"]["codingAgentProfile"]>;
632
848
  export type CodingAgentProfileInclude<ExtArgs extends runtime.Types.Extensions.InternalArgs = runtime.Types.Extensions.DefaultArgs> = {
633
849
  agent?: boolean | Prisma.AgentDefaultArgs<ExtArgs>;
634
850
  };
@@ -651,8 +867,12 @@ export type $CodingAgentProfilePayload<ExtArgs extends runtime.Types.Extensions.
651
867
  defaultTask: string | null;
652
868
  allowWebhookTaskOverride: boolean;
653
869
  timeoutSec: number;
870
+ /**
871
+ * Unused; dropped after rollout (see the package-registry plan, Task 14).
872
+ */
654
873
  allowedEgress: runtime.JsonValue;
655
874
  protectedPaths: runtime.JsonValue;
875
+ collectExclude: runtime.JsonValue;
656
876
  toolchain: string;
657
877
  toolchainVersion: string | null;
658
878
  workerImageRef: string | null;
@@ -660,6 +880,29 @@ export type $CodingAgentProfilePayload<ExtArgs extends runtime.Types.Extensions.
660
880
  * Per-agent workspace size in MiB; null = CODING_DISK_MB.
661
881
  */
662
882
  workspaceDiskMb: number | null;
883
+ packageAllowlist: runtime.JsonValue;
884
+ packagePolicy: runtime.JsonValue;
885
+ /**
886
+ * Admin-requested debug trace: while now < debugTraceUntil, every coding
887
+ * run of this agent is dispatched with CodingRun.debugTrace set. Null = off.
888
+ */
889
+ debugTraceUntil: Date | null;
890
+ /**
891
+ * Coding-run services (docs/coding-services.md): the catalog names
892
+ * (CodingService.name) this agent's runs may start, any version the catalog
893
+ * has. Empty = none. Owner-set through update_agent.
894
+ */
895
+ services: runtime.JsonValue;
896
+ /**
897
+ * How `repository` was authorized for this agent (see AgentRepository.authorizedVia):
898
+ * "host_permission", "admin", or "grandfathered". Null = never authorized; runs are refused.
899
+ */
900
+ repositoryAuthorizedVia: string | null;
901
+ /**
902
+ * The principal whose GitHub access (or admin approval) authorized it. Audit only, no FK.
903
+ */
904
+ repositoryAuthorizedById: string | null;
905
+ repositoryAuthorizedAt: Date | null;
663
906
  }, ExtArgs["result"]["codingAgentProfile"]>;
664
907
  composites: {};
665
908
  };
@@ -1024,10 +1267,18 @@ export interface CodingAgentProfileFieldRefs {
1024
1267
  readonly timeoutSec: Prisma.FieldRef<"CodingAgentProfile", 'Int'>;
1025
1268
  readonly allowedEgress: Prisma.FieldRef<"CodingAgentProfile", 'Json'>;
1026
1269
  readonly protectedPaths: Prisma.FieldRef<"CodingAgentProfile", 'Json'>;
1270
+ readonly collectExclude: Prisma.FieldRef<"CodingAgentProfile", 'Json'>;
1027
1271
  readonly toolchain: Prisma.FieldRef<"CodingAgentProfile", 'String'>;
1028
1272
  readonly toolchainVersion: Prisma.FieldRef<"CodingAgentProfile", 'String'>;
1029
1273
  readonly workerImageRef: Prisma.FieldRef<"CodingAgentProfile", 'String'>;
1030
1274
  readonly workspaceDiskMb: Prisma.FieldRef<"CodingAgentProfile", 'Int'>;
1275
+ readonly packageAllowlist: Prisma.FieldRef<"CodingAgentProfile", 'Json'>;
1276
+ readonly packagePolicy: Prisma.FieldRef<"CodingAgentProfile", 'Json'>;
1277
+ readonly debugTraceUntil: Prisma.FieldRef<"CodingAgentProfile", 'DateTime'>;
1278
+ readonly services: Prisma.FieldRef<"CodingAgentProfile", 'Json'>;
1279
+ readonly repositoryAuthorizedVia: Prisma.FieldRef<"CodingAgentProfile", 'String'>;
1280
+ readonly repositoryAuthorizedById: Prisma.FieldRef<"CodingAgentProfile", 'String'>;
1281
+ readonly repositoryAuthorizedAt: Prisma.FieldRef<"CodingAgentProfile", 'DateTime'>;
1031
1282
  }
1032
1283
  /**
1033
1284
  * CodingAgentProfile findUnique