@wardby/cli 0.2.1 → 0.3.0

package/prisma/migrations/20260926050000_repo_access_authorization/migration.sql

@@ -0,0 +1,82 @@
+-- Repository access authorization (security findings H5-1/A3/C3-2, H5-2,
+-- E-08/H5-4). A principal can give an agent authority over a repository only
+-- through its own verified host identity's access, or an explicit, recorded
+-- admin approval; the authorization is stamped on the row that grants it.
+-- See docs/private/2026-09-26-repo-access-authorization-spec-and-plan.md §5.
+
+-- CreateTable
+CREATE TABLE "HostIdentity" (
+    "principalId" TEXT NOT NULL,
+    "provider" TEXT NOT NULL,
+    "hostUserId" TEXT NOT NULL,
+    "login" TEXT NOT NULL,
+    "linkedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "HostIdentity_pkey" PRIMARY KEY ("principalId","provider")
+);
+
+-- CreateTable
+CREATE TABLE "HostIdentityLinkRequest" (
+    "id" TEXT NOT NULL,
+    "principalId" TEXT NOT NULL,
+    "provider" TEXT NOT NULL,
+    "stateHash" TEXT NOT NULL,
+    "codeVerifier" TEXT NOT NULL,
+    "hostUserId" TEXT,
+    "login" TEXT,
+    "confirmHash" TEXT,
+    "attempts" INTEGER NOT NULL DEFAULT 0,
+    "callbackAt" TIMESTAMP(3),
+    "expiresAt" TIMESTAMP(3) NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "HostIdentityLinkRequest_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "HostIdentity_provider_hostUserId_key" ON "HostIdentity"("provider", "hostUserId");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "HostIdentityLinkRequest_stateHash_key" ON "HostIdentityLinkRequest"("stateHash");
+
+-- CreateIndex
+CREATE INDEX "HostIdentityLinkRequest_principalId_idx" ON "HostIdentityLinkRequest"("principalId");
+
+-- CreateIndex
+CREATE INDEX "HostIdentityLinkRequest_expiresAt_idx" ON "HostIdentityLinkRequest"("expiresAt");
+
+-- AddForeignKey
+ALTER TABLE "HostIdentity" ADD CONSTRAINT "HostIdentity_principalId_fkey" FOREIGN KEY ("principalId") REFERENCES "Principal"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "HostIdentityLinkRequest" ADD CONSTRAINT "HostIdentityLinkRequest_principalId_fkey" FOREIGN KEY ("principalId") REFERENCES "Principal"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AlterTable
+ALTER TABLE "AgentRepository" ADD COLUMN     "authorizedAt" TIMESTAMP(3),
+ADD COLUMN     "authorizedById" TEXT,
+ADD COLUMN     "authorizedVia" TEXT;
+
+-- AlterTable
+ALTER TABLE "CodingAgentProfile" ADD COLUMN     "repositoryAuthorizedAt" TIMESTAMP(3),
+ADD COLUMN     "repositoryAuthorizedById" TEXT,
+ADD COLUMN     "repositoryAuthorizedVia" TEXT;
+
+-- AlterTable
+ALTER TABLE "RunHostCheck" ADD COLUMN     "prNumber" INTEGER;
+
+-- Backfill: every existing assignment is the operator's own and keeps
+-- working ("grandfathered", not re-checked at use). New or changed
+-- assignments go through the check.
+UPDATE "AgentRepository" SET "authorizedVia" = 'grandfathered', "authorizedAt" = CURRENT_TIMESTAMP;
+UPDATE "CodingAgentProfile" SET "repositoryAuthorizedVia" = 'grandfathered', "repositoryAuthorizedAt" = CURRENT_TIMESTAMP;
+
+-- Deliberate: a check name is only meaningful with the pull_request trigger
+-- (a check is only ever published for the PR a run was dispatched for), so
+-- names on other links are cleared before the name becomes unique per
+-- repository. Existing pull_request links were already unique by name.
+UPDATE "AgentRepository" SET "checkName" = NULL
+  WHERE "triggers" IS NULL OR NOT ('pull_request' = ANY("triggers"));
+
+-- CreateIndex
+CREATE UNIQUE INDEX "AgentRepository_provider_repository_checkName_key" ON "AgentRepository"("provider", "repository", "checkName");

package/prisma/migrations/20260926060000_registry_plan_refusal/migration.sql

@@ -0,0 +1,19 @@
+-- Additive: the exact versions a run's lockfile plan definitively refused,
+-- so a download of one is answered from the plan (no graph walk). See
+-- docs/coding-packages.md.
+
+-- CreateTable
+CREATE TABLE "RegistryPlanRefusal" (
+    "runId" TEXT NOT NULL,
+    "ecosystem" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "version" TEXT NOT NULL,
+    "code" TEXT NOT NULL,
+    "reason" TEXT NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "RegistryPlanRefusal_pkey" PRIMARY KEY ("runId","ecosystem","name","version")
+);
+
+-- AddForeignKey
+ALTER TABLE "RegistryPlanRefusal" ADD CONSTRAINT "RegistryPlanRefusal_runId_fkey" FOREIGN KEY ("runId") REFERENCES "CodingRun"("runId") ON DELETE CASCADE ON UPDATE CASCADE;

package/prisma/migrations/20260926100000_registry_plan_refusal_published_at/migration.sql

@@ -0,0 +1,5 @@
+-- Additive: a too-new plan refusal keeps the version's publish time, so the
+-- answer re-checks the age at answer time and the refusal lapses.
+
+-- AlterTable
+ALTER TABLE "RegistryPlanRefusal" ADD COLUMN     "publishedAt" TIMESTAMP(3);

package/prisma/migrations/20260926190000_run_host_status/migration.sql

@@ -0,0 +1,18 @@
+-- The status comment posted for a mention-started run, edited with its outcome.
+
+-- CreateTable
+CREATE TABLE "RunHostStatus" (
+    "runId" TEXT NOT NULL,
+    "provider" TEXT NOT NULL,
+    "repository" TEXT NOT NULL,
+    "number" INTEGER NOT NULL,
+    "commentKind" TEXT NOT NULL,
+    "commentId" TEXT NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "completedAt" TIMESTAMP(3),
+
+    CONSTRAINT "RunHostStatus_pkey" PRIMARY KEY ("runId")
+);
+
+-- AddForeignKey
+ALTER TABLE "RunHostStatus" ADD CONSTRAINT "RunHostStatus_runId_fkey" FOREIGN KEY ("runId") REFERENCES "Run"("id") ON DELETE CASCADE ON UPDATE CASCADE;

package/prisma/migrations/20260926210000_run_host_status_at_dispatch/migration.sql

@@ -0,0 +1,5 @@
+-- The status row is now written with the run, before its comment exists.
+
+-- AlterTable
+ALTER TABLE "RunHostStatus" ALTER COLUMN "commentId" DROP NOT NULL,
+ADD COLUMN "replyToReviewCommentId" TEXT;

package/prisma/migrations/20260927010000_resource_grants/migration.sql

@@ -0,0 +1,72 @@
+-- Resource sharing grants (A2/S2-2, N1, R2-1, A6). Replaces "null owner =
+-- public and mutable by anyone" with explicit grants. See
+-- docs/private/2026-09-26-resource-sharing-grants-spec-and-plan.md.
+-- Needs PostgreSQL 13+ for gen_random_uuid() (core since 13).
+
+-- CreateTable
+CREATE TABLE "ResourceGrant" (
+    "id" TEXT NOT NULL,
+    "resourceType" TEXT NOT NULL,
+    "resourceId" TEXT NOT NULL,
+    "granteeKind" TEXT NOT NULL,
+    "granteePrincipalId" TEXT,
+    "granteeKey" TEXT NOT NULL,
+    "level" TEXT NOT NULL,
+    "source" TEXT NOT NULL DEFAULT 'owner',
+    "grantedById" TEXT,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "ResourceGrant_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "ResourceGrant_resourceType_resourceId_granteeKey_key" ON "ResourceGrant"("resourceType", "resourceId", "granteeKey");
+
+-- CreateIndex
+CREATE INDEX "ResourceGrant_granteeKey_resourceType_idx" ON "ResourceGrant"("granteeKey", "resourceType");
+
+-- CreateIndex
+CREATE INDEX "ResourceGrant_granteePrincipalId_idx" ON "ResourceGrant"("granteePrincipalId");
+
+-- AddForeignKey
+ALTER TABLE "ResourceGrant" ADD CONSTRAINT "ResourceGrant_granteePrincipalId_fkey" FOREIGN KEY ("granteePrincipalId") REFERENCES "Principal"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- Grantee shape. Not representable in schema.prisma (like DatastoreEntry_scope_xor,
+-- 20260912040000_named_shared_datastores), so invisible to migrate diff.
+ALTER TABLE "ResourceGrant" ADD CONSTRAINT "ResourceGrant_grantee_shape" CHECK (
+    ("granteeKind" = 'principal' AND "granteePrincipalId" IS NOT NULL
+        AND "granteeKey" = 'principal:' || "granteePrincipalId")
+    OR ("granteeKind" = 'everyone' AND "granteePrincipalId" IS NULL AND "granteeKey" = 'everyone')
+);
+
+-- AlterTable
+ALTER TABLE "Run" ADD COLUMN "triggeredById" TEXT;
+
+-- CreateIndex
+CREATE INDEX "Run_agentId_triggeredById_idx" ON "Run"("agentId", "triggeredById");
+
+-- AlterTable
+ALTER TABLE "AgentTool" ADD COLUMN "attachedById" TEXT,
+    ADD COLUMN "capabilitiesGrantedById" TEXT;
+
+-- Data: owner-less agents keep working at execute-for-everyone; nobody can edit them.
+INSERT INTO "ResourceGrant" ("id", "resourceType", "resourceId", "granteeKind", "granteeKey", "level", "source", "updatedAt")
+SELECT gen_random_uuid()::text, 'agent', a."id", 'everyone', 'everyone', 'execute', 'migration_public', CURRENT_TIMESTAMP
+FROM "Agent" a WHERE a."ownerId" IS NULL;
+
+-- Data: capabilities on an owned agent whose tool is the owner's or owner-less
+-- were set by that owner (only the owner could attach to an owned agent, and
+-- only its own or an owner-less tool), so they carry its consent. Every other
+-- attachment stays unstamped = inert until the owner re-grants.
+UPDATE "AgentTool" at
+SET "capabilitiesGrantedById" = a."ownerId", "attachedById" = a."ownerId"
+FROM "Agent" a, "Tool" t
+WHERE a."id" = at."agentId" AND t."id" = at."toolId"
+  AND a."ownerId" IS NOT NULL
+  AND (t."ownerId" IS NULL OR t."ownerId" = a."ownerId");
+
+-- Data: triggerer of historic runs, where a Task recorded it.
+UPDATE "Run" r SET "triggeredById" = t."principalId"
+FROM "Task" t
+WHERE t."runId" = r."id" AND t."kind" = 'run' AND t."principalId" IS NOT NULL;

package/prisma/migrations/20260927020000_proxy_session_budget_exhausted/migration.sql

@@ -0,0 +1,3 @@
+-- Record the first time the coding proxy refuses a session's request for
+-- budget, so the run can be reported as out of budget rather than failed.
+ALTER TABLE "CodingProxySession" ADD COLUMN "budgetExhaustedAt" TIMESTAMP(3);

package/prisma/migrations/20260927030000_coding_debug_trace/migration.sql

@@ -0,0 +1,4 @@
+-- Admin-requested debug trace for coding runs: the profile carries an expiry,
+-- and each run records at dispatch whether it was traced.
+ALTER TABLE "CodingAgentProfile" ADD COLUMN "debugTraceUntil" TIMESTAMP(3);
+ALTER TABLE "CodingRun" ADD COLUMN "debugTrace" BOOLEAN NOT NULL DEFAULT false;

package/prisma/migrations/20260927040000_proxy_session_upstream_failure/migration.sql

@@ -0,0 +1,3 @@
+-- Record the first upstream failure code the coding proxy relays for a
+-- session, so the run can be reported as refused by the model provider.
+ALTER TABLE "CodingProxySession" ADD COLUMN "upstreamFailure" TEXT;

package/prisma/migrations/20260927050000_coding_run_services/migration.sql

@@ -0,0 +1,74 @@
+-- Coding-run services (docs/coding-services.md): the admin-managed catalog a
+-- repository's .wardby/services.yaml names entries from, the service names each
+-- coding agent may use, and the services resolved for each run at dispatch.
+-- Additive: one new table, two new columns with defaults, and the built-in rows
+-- (src/coding/services/builtins.ts; builtins.database.test.ts keeps them equal).
+
+-- CreateTable
+CREATE TABLE "CodingService" (
+    "id" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "version" TEXT NOT NULL,
+    "kind" TEXT NOT NULL DEFAULT 'sidecar',
+    "image" TEXT NOT NULL,
+    "port" INTEGER NOT NULL,
+    "serviceEnv" JSONB NOT NULL DEFAULT '{}',
+    "testEnv" JSONB NOT NULL DEFAULT '{}',
+    "readiness" JSONB NOT NULL,
+    "resources" JSONB NOT NULL,
+    "dataPath" TEXT NOT NULL,
+    "writablePaths" JSONB NOT NULL DEFAULT '[]',
+    "builtin" BOOLEAN NOT NULL DEFAULT false,
+    "createdById" TEXT,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "CodingService_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "CodingService_name_version_key" ON "CodingService"("name", "version");
+
+-- AlterTable
+ALTER TABLE "CodingAgentProfile" ADD COLUMN "services" JSONB NOT NULL DEFAULT '[]';
+
+-- AlterTable
+ALTER TABLE "CodingRun" ADD COLUMN "services" JSONB NOT NULL DEFAULT '[]';
+
+-- Built-in catalog entries.
+INSERT INTO "CodingService" ("id", "name", "version", "kind", "image", "port", "serviceEnv", "testEnv", "readiness", "resources", "dataPath", "writablePaths", "builtin", "updatedAt") VALUES
+('builtin-postgres-15', 'postgres', '15', 'sidecar',
+ 'docker.io/library/postgres@sha256:724292da1f2e50bdccfc3302ce75bbba7f4a6076701b588cc795fcac65683550', 5432,
+ '{"POSTGRES_USER":"test","POSTGRES_PASSWORD":"test","POSTGRES_DB":"test","PGDATA":"/var/lib/postgresql/data/pgdata"}',
+ '{"DATABASE_URL":"postgres://test:test@127.0.0.1:5432/test","PGHOST":"127.0.0.1","PGPORT":"5432","PGUSER":"test","PGPASSWORD":"test","PGDATABASE":"test"}',
+ '{"command":["pg_isready","-h","127.0.0.1","-p","5432","-U","test","-d","test"],"periodSeconds":2,"timeoutSeconds":2,"failureThreshold":30}',
+ '{"cpuMillicores":500,"memoryMib":512,"diskMib":1024}',
+ '/var/lib/postgresql/data', '["/var/run/postgresql","/tmp"]', true, CURRENT_TIMESTAMP),
+('builtin-postgres-16', 'postgres', '16', 'sidecar',
+ 'docker.io/library/postgres@sha256:1a6ab3f5345eb6dbe04a1349529caabdb0ab09293a09590fad07b2246bfa4b54', 5432,
+ '{"POSTGRES_USER":"test","POSTGRES_PASSWORD":"test","POSTGRES_DB":"test","PGDATA":"/var/lib/postgresql/data/pgdata"}',
+ '{"DATABASE_URL":"postgres://test:test@127.0.0.1:5432/test","PGHOST":"127.0.0.1","PGPORT":"5432","PGUSER":"test","PGPASSWORD":"test","PGDATABASE":"test"}',
+ '{"command":["pg_isready","-h","127.0.0.1","-p","5432","-U","test","-d","test"],"periodSeconds":2,"timeoutSeconds":2,"failureThreshold":30}',
+ '{"cpuMillicores":500,"memoryMib":512,"diskMib":1024}',
+ '/var/lib/postgresql/data', '["/var/run/postgresql","/tmp"]', true, CURRENT_TIMESTAMP),
+('builtin-postgres-17', 'postgres', '17', 'sidecar',
+ 'docker.io/library/postgres@sha256:d74eeac9a635390a49bc21bd49fccd973de707e2a53a76ac49b552b8712ec46f', 5432,
+ '{"POSTGRES_USER":"test","POSTGRES_PASSWORD":"test","POSTGRES_DB":"test","PGDATA":"/var/lib/postgresql/data/pgdata"}',
+ '{"DATABASE_URL":"postgres://test:test@127.0.0.1:5432/test","PGHOST":"127.0.0.1","PGPORT":"5432","PGUSER":"test","PGPASSWORD":"test","PGDATABASE":"test"}',
+ '{"command":["pg_isready","-h","127.0.0.1","-p","5432","-U","test","-d","test"],"periodSeconds":2,"timeoutSeconds":2,"failureThreshold":30}',
+ '{"cpuMillicores":500,"memoryMib":512,"diskMib":1024}',
+ '/var/lib/postgresql/data', '["/var/run/postgresql","/tmp"]', true, CURRENT_TIMESTAMP),
+('builtin-redis-7', 'redis', '7', 'sidecar',
+ 'docker.io/library/redis@sha256:c6eabf748fc7a61dbb5a705c78bcf3d6377b1127a97d0ce965c11c44ba46896f', 6379,
+ '{}',
+ '{"REDIS_URL":"redis://127.0.0.1:6379/0","REDIS_HOST":"127.0.0.1","REDIS_PORT":"6379"}',
+ '{"command":["redis-cli","-h","127.0.0.1","-p","6379","ping"],"periodSeconds":1,"timeoutSeconds":2,"failureThreshold":30}',
+ '{"cpuMillicores":250,"memoryMib":256,"diskMib":256}',
+ '/data', '[]', true, CURRENT_TIMESTAMP),
+('builtin-mysql-8', 'mysql', '8', 'sidecar',
+ 'docker.io/library/mysql@sha256:0744ee5ef89ce6ccfa13de3e579fe6b9e27f93dd70da9c06d2c908b1b193fb8d', 3306,
+ '{"MYSQL_ROOT_PASSWORD":"test","MYSQL_DATABASE":"test","MYSQL_USER":"test","MYSQL_PASSWORD":"test"}',
+ '{"DATABASE_URL":"mysql://test:test@127.0.0.1:3306/test","MYSQL_HOST":"127.0.0.1","MYSQL_TCP_PORT":"3306","MYSQL_USER":"test","MYSQL_PASSWORD":"test","MYSQL_DATABASE":"test"}',
+ '{"command":["mysqladmin","ping","-h","127.0.0.1","-P","3306","-utest","-ptest","--silent"],"periodSeconds":2,"timeoutSeconds":3,"failureThreshold":45}',
+ '{"cpuMillicores":500,"memoryMib":1024,"diskMib":2048}',
+ '/var/lib/mysql', '["/var/run/mysqld","/tmp"]', true, CURRENT_TIMESTAMP);

package/prisma/migrations/20260928000000_coding_run_tool_image/migration.sql

@@ -0,0 +1,5 @@
+-- Claude Code's tool-runner image (the container that runs its commands) for the
+-- agent's toolchain, resolved at dispatch alongside workerImage so a run keeps the
+-- image it was dispatched with. Additive and nullable: existing rows and Codex runs
+-- leave it null, and the launcher falls back to the deployment's default image.
+ALTER TABLE "CodingRun" ADD COLUMN "toolImage" TEXT;