@wardby/cli 0.6.0 → 0.8.0

package/dist/core/zod3-window.js

@@ -0,0 +1,124 @@
+/**
+ * The Zod 3 compatibility window's warnings (one release; see
+ * sandbox/zod-params.ts). A custom tool whose paramsZod Zod 4 can't compile
+ * still works this release, compiled with Zod 3, and stops working in the
+ * next. The operator hears about it in create_tool, update_tool,
+ * dry_run_tool, list_tools and get_agent results (on tools the caller owns),
+ * in import results, from `wardby tool create`, and once per tool in the
+ * server log at startup.
+ *
+ * A warning names only the tool and the removed Zod 3 API it uses (fixed
+ * labels from zod-params.ts): never the schema's text or anything else from
+ * the tool.
+ */
+import { createHash } from "node:crypto";
+import { zod4Compatibility } from "../sandbox/zod-params.js";
+export const ZOD3_WINDOW_ENDS = "Zod 3 schemas stop working in the next release";
+/** The warning for one paramsZod, or undefined when Zod 4 compiles it (or there is nothing to say). */
+export function zod3WindowWarning(subject, compatibility) {
+    if (compatibility.compatible !== false)
+        return undefined;
+    const what = compatibility.removed.length
+        ? `uses Zod 3 API that Zod 4 removed: ${compatibility.removed.join(", ")}`
+        : "does not compile with Zod 4";
+    return (`${subject} ${what}. Wardby still compiles it with Zod 3 in this release, but ${ZOD3_WINDOW_ENDS}: ` +
+        "rewrite it with the Zod 4 API and check it with dry_run_tool.");
+}
+/** How a warning names a tool. */
+export function toolSubject(name) {
+    return `Tool ${JSON.stringify(name)}'s paramsZod`;
+}
+/**
+ * Compatibility depends on the paramsZod text alone, so results are cached in
+ * memory keyed by a SHA-256 of that text: a changed paramsZod is a different
+ * key and is always probed afresh, so the cache can never hide a warning for
+ * it. The tool's name is not part of the result (the warning text is built
+ * from the current name each time). The startup scan fills the cache, so
+ * list_tools usually probes nothing. Bounded; the oldest entry goes first.
+ * An "unknown" result (a probe that hit a sandbox limit) is not cached.
+ */
+const COMPATIBILITY_CACHE_LIMIT = 2000;
+const compatibilityCache = new Map();
+export function cachedZod4Compatibility(paramsZod) {
+    const key = createHash("sha256").update(paramsZod).digest("hex");
+    const hit = compatibilityCache.get(key);
+    if (hit)
+        return hit;
+    const pending = zod4Compatibility(paramsZod).then((result) => {
+        if (result.compatible === "unknown")
+            compatibilityCache.delete(key);
+        return result;
+    }, (err) => {
+        compatibilityCache.delete(key);
+        throw err;
+    });
+    compatibilityCache.set(key, pending);
+    while (compatibilityCache.size > COMPATIBILITY_CACHE_LIMIT) {
+        compatibilityCache.delete(compatibilityCache.keys().next().value);
+    }
+    return pending;
+}
+/** Test hook: empties the compatibility cache. */
+export function clearZod4CompatibilityCache() {
+    compatibilityCache.clear();
+}
+/** The warnings for one tool's paramsZod (empty or one entry), ready for a result's `warnings`. */
+export async function zod3ToolWarnings(subject, paramsZod) {
+    const warning = zod3WindowWarning(subject, await cachedZod4Compatibility(paramsZod));
+    return warning ? [warning] : [];
+}
+/**
+ * A tool row with its Zod 3 window warnings, for a caller who owns it (and so
+ * already sees its paramsZod). Rows projected for anyone else, which carry no
+ * paramsZod, pass through unchanged: a warning would reveal part of the schema.
+ */
+export async function withZod3ToolWarnings(projected) {
+    const row = projected;
+    if (typeof row.paramsZod !== "string" || typeof row.name !== "string")
+        return projected;
+    const warnings = await zod3ToolWarnings(toolSubject(row.name), row.paramsZod);
+    return warnings.length ? { ...projected, warnings } : projected;
+}
+/**
+ * dry_run_tool's check of a schema Zod 4 does compile: whether Zod 4 treats
+ * the sample arguments as the current release does. Names no values.
+ */
+export function zod3SampleArgsWarning(subject, current, zod4) {
+    let how;
+    if (current.ok && zod4.ok) {
+        if (JSON.stringify(current.value) === JSON.stringify(zod4.value))
+            return undefined;
+        how = "parses the sample arguments to a different value with Zod 4";
+    }
+    else if (current.ok !== zod4.ok) {
+        how = current.ok ? "rejects the sample arguments with Zod 4" : "accepts the sample arguments with Zod 4";
+    }
+    else {
+        return undefined;
+    }
+    return (`${subject} ${how}. Wardby still compiles it with Zod 3 in this release, but ${ZOD3_WINDOW_ENDS}: ` +
+        "check the schema against the Zod 4 API.");
+}
+/**
+ * Logs one warning per stored tool whose paramsZod Zod 4 can't compile. Runs
+ * in the background at startup; never throws.
+ */
+export async function logZod3ToolWarnings(db, log) {
+    let warned = 0;
+    try {
+        const tools = await db.tool.findMany({ select: { id: true, name: true, paramsZod: true }, orderBy: { id: "asc" } });
+        for (const tool of tools) {
+            const compatibility = await cachedZod4Compatibility(tool.paramsZod);
+            const warning = zod3WindowWarning(toolSubject(tool.name), compatibility);
+            if (!warning)
+                continue;
+            const removed = compatibility.compatible === false ? compatibility.removed : [];
+            log.warn({ toolId: tool.id, toolName: tool.name, removed }, warning);
+            warned += 1;
+        }
+    }
+    catch (err) {
+        log.warn({ errorName: err instanceof Error ? err.name : typeof err }, "zod3_window_check_failed");
+    }
+    return warned;
+}

package/dist/generated/prisma/browser.d.ts

@@ -111,6 +111,12 @@ export type CodingAgentProfile = Prisma.CodingAgentProfileModel;
  * one coding run. Policy is copied from the profile before work starts.
  */
 export type CodingRun = Prisma.CodingRunModel;
+/**
+ * Model RunTranscript
+ * A coding run's session transcript for local resume: metadata only. The redacted content lives in
+ * the blob store under blobKey; the unredacted transcript is never stored.
+ */
+export type RunTranscript = Prisma.RunTranscriptModel;
 /**
  * Model CodingService
  * Coding-run services (docs/coding-services.md): the catalog a repository's
@@ -134,6 +140,14 @@ export type CodingService = Prisma.CodingServiceModel;
  * never probe output.
  */
 export type CodingRunServiceStatus = Prisma.CodingRunServiceStatusModel;
+/**
+ * Model RunBudgetEvent
+ * One budget decision about a run: a refusal by the coding proxy or at
+ * dispatch, or an overrun top-up with no room, with the numbers behind it.
+ * `limit` names what refused it: run, run-tree, day, week or month. `details`
+ * holds amounts, the model and the turn; never secrets or message text.
+ */
+export type RunBudgetEvent = Prisma.RunBudgetEventModel;
 /**
  * Model NativeGatewaySession
  * The trusted gateway's record of one sandbox-mode native run (native
@@ -170,10 +184,17 @@ export type NativeGatewayCall = Prisma.NativeGatewayCallModel;
 export type CodingProxySession = Prisma.CodingProxySessionModel;
 /**
  * Model CodingProxyRequest
- * Monotonic per-upstream-call ledger. Uncertain reservations remain held so a
- * crash or truncated provider stream can never create new spendable budget.
+ * Monotonic per-upstream-call ledger. An uncertain request without an
+ * estimate stays held in full; one the proxy estimated (costEstimated) counts
+ * at that estimate.
  */
 export type CodingProxyRequest = Prisma.CodingProxyRequestModel;
+/**
+ * Model RegistryAuditRecord
+ * One package version a run's registry served only because of package audit mode (or, in full mode,
+ * served despite blocking advisories). Insert-only for the proxy.
+ */
+export type RegistryAuditRecord = Prisma.RegistryAuditRecordModel;
 /**
  * Model RegistryAllowance
  * One package a run's profile has approved from a given ecosystem, resolved
@@ -211,6 +232,15 @@ export type RegistryApprovedVersion = Prisma.RegistryApprovedVersionModel;
  * from here with the same code and reason, without a graph walk.
  */
 export type RegistryPlanRefusal = Prisma.RegistryPlanRefusalModel;
+/**
+ * Model DependencySnapshot
+ * A cached node_modules snapshot for one npm project of a repository, keyed
+ * server-side by the coding proxy. The archive lives in the blob store under
+ * blobKey; only trusted wardby code writes it, before a run's agent starts.
+ * Outlives the run that created it (createdByRunId is cleared when that run is
+ * deleted); evicted least-recently-used.
+ */
+export type DependencySnapshot = Prisma.DependencySnapshotModel;
 /**
  * Model SchedulerLease
  * Phase 2: single-row-per-scope lease so exactly one scheduler process
@@ -391,6 +421,16 @@ export type HostIdentityLinkRequest = Prisma.HostIdentityLinkRequestModel;
  * docs/private/2026-09-30-jira-issue-tracker-design.md §3.
  */
 export type AgentIssueProject = Prisma.AgentIssueProjectModel;
+/**
+ * Model McpServer
+ * A remote MCP server an owner registered (Streamable HTTP, HTTPS only).
+ */
+export type McpServer = Prisma.McpServerModel;
+/**
+ * Model AgentMcpServer
+ * An MCP server attached to an agent, with the server tools it may call.
+ */
+export type AgentMcpServer = Prisma.AgentMcpServerModel;
 /**
  * Model IssueFingerprint
  * Dedupe record: an issue wardby created for a fingerprint (several over time — regressions).
@@ -398,7 +438,8 @@ export type AgentIssueProject = Prisma.AgentIssueProjectModel;
 export type IssueFingerprint = Prisma.IssueFingerprintModel;
 /**
  * Model IssuePullRequest
- * A pull request wardby opened for a tracker issue (the Jira -> code bridge). Provider-neutral on both sides.
+ * A pull request wardby opened for an issue (a Jira issue, a GitHub issue): one shape for every issue
+ * provider. Provider-neutral on both sides.
  * Deliberately no foreign keys to Agent or Run: audit-style rows that survive agent/run deletion.
  */
 export type IssuePullRequest = Prisma.IssuePullRequestModel;
@@ -473,3 +514,24 @@ export type NotificationDelivery = Prisma.NotificationDeliveryModel;
  * The parent message of a work item's (or PR's) thread in one channel.
  */
 export type NotificationThread = Prisma.NotificationThreadModel;
+/**
+ * Model HostProvider
+ * A code host implemented by operator-approved custom tools (docs/host-providers.md).
+ * `name` is the prefix of its repository ids: `<name>:<workspace>/<repo>`. Holds no secret values.
+ */
+export type HostProvider = Prisma.HostProviderModel;
+/**
+ * Model HostProviderOperation
+ * One approved snapshot: the code Wardby runs. `update_tool` changes nothing here until approved again.
+ */
+export type HostProviderOperation = Prisma.HostProviderOperationModel;
+/**
+ * Model HostProviderCredential
+ * Which brokered secret serves which repositories. `credentialKind` is `static` only in v1.
+ */
+export type HostProviderCredential = Prisma.HostProviderCredentialModel;
+/**
+ * Model HostProviderTrustedAccount
+ * Host accounts allowed to start runs when the provider has no permission secret.
+ */
+export type HostProviderTrustedAccount = Prisma.HostProviderTrustedAccountModel;

package/dist/generated/prisma/client.d.ts

@@ -130,6 +130,12 @@ export type CodingAgentProfile = Prisma.CodingAgentProfileModel;
  * one coding run. Policy is copied from the profile before work starts.
  */
 export type CodingRun = Prisma.CodingRunModel;
+/**
+ * Model RunTranscript
+ * A coding run's session transcript for local resume: metadata only. The redacted content lives in
+ * the blob store under blobKey; the unredacted transcript is never stored.
+ */
+export type RunTranscript = Prisma.RunTranscriptModel;
 /**
  * Model CodingService
  * Coding-run services (docs/coding-services.md): the catalog a repository's
@@ -153,6 +159,14 @@ export type CodingService = Prisma.CodingServiceModel;
  * never probe output.
  */
 export type CodingRunServiceStatus = Prisma.CodingRunServiceStatusModel;
+/**
+ * Model RunBudgetEvent
+ * One budget decision about a run: a refusal by the coding proxy or at
+ * dispatch, or an overrun top-up with no room, with the numbers behind it.
+ * `limit` names what refused it: run, run-tree, day, week or month. `details`
+ * holds amounts, the model and the turn; never secrets or message text.
+ */
+export type RunBudgetEvent = Prisma.RunBudgetEventModel;
 /**
  * Model NativeGatewaySession
  * The trusted gateway's record of one sandbox-mode native run (native
@@ -189,10 +203,17 @@ export type NativeGatewayCall = Prisma.NativeGatewayCallModel;
 export type CodingProxySession = Prisma.CodingProxySessionModel;
 /**
  * Model CodingProxyRequest
- * Monotonic per-upstream-call ledger. Uncertain reservations remain held so a
- * crash or truncated provider stream can never create new spendable budget.
+ * Monotonic per-upstream-call ledger. An uncertain request without an
+ * estimate stays held in full; one the proxy estimated (costEstimated) counts
+ * at that estimate.
  */
 export type CodingProxyRequest = Prisma.CodingProxyRequestModel;
+/**
+ * Model RegistryAuditRecord
+ * One package version a run's registry served only because of package audit mode (or, in full mode,
+ * served despite blocking advisories). Insert-only for the proxy.
+ */
+export type RegistryAuditRecord = Prisma.RegistryAuditRecordModel;
 /**
  * Model RegistryAllowance
  * One package a run's profile has approved from a given ecosystem, resolved
@@ -230,6 +251,15 @@ export type RegistryApprovedVersion = Prisma.RegistryApprovedVersionModel;
  * from here with the same code and reason, without a graph walk.
  */
 export type RegistryPlanRefusal = Prisma.RegistryPlanRefusalModel;
+/**
+ * Model DependencySnapshot
+ * A cached node_modules snapshot for one npm project of a repository, keyed
+ * server-side by the coding proxy. The archive lives in the blob store under
+ * blobKey; only trusted wardby code writes it, before a run's agent starts.
+ * Outlives the run that created it (createdByRunId is cleared when that run is
+ * deleted); evicted least-recently-used.
+ */
+export type DependencySnapshot = Prisma.DependencySnapshotModel;
 /**
  * Model SchedulerLease
  * Phase 2: single-row-per-scope lease so exactly one scheduler process
@@ -410,6 +440,16 @@ export type HostIdentityLinkRequest = Prisma.HostIdentityLinkRequestModel;
  * docs/private/2026-09-30-jira-issue-tracker-design.md §3.
  */
 export type AgentIssueProject = Prisma.AgentIssueProjectModel;
+/**
+ * Model McpServer
+ * A remote MCP server an owner registered (Streamable HTTP, HTTPS only).
+ */
+export type McpServer = Prisma.McpServerModel;
+/**
+ * Model AgentMcpServer
+ * An MCP server attached to an agent, with the server tools it may call.
+ */
+export type AgentMcpServer = Prisma.AgentMcpServerModel;
 /**
  * Model IssueFingerprint
  * Dedupe record: an issue wardby created for a fingerprint (several over time — regressions).
@@ -417,7 +457,8 @@ export type AgentIssueProject = Prisma.AgentIssueProjectModel;
 export type IssueFingerprint = Prisma.IssueFingerprintModel;
 /**
  * Model IssuePullRequest
- * A pull request wardby opened for a tracker issue (the Jira -> code bridge). Provider-neutral on both sides.
+ * A pull request wardby opened for an issue (a Jira issue, a GitHub issue): one shape for every issue
+ * provider. Provider-neutral on both sides.
  * Deliberately no foreign keys to Agent or Run: audit-style rows that survive agent/run deletion.
  */
 export type IssuePullRequest = Prisma.IssuePullRequestModel;
@@ -492,3 +533,24 @@ export type NotificationDelivery = Prisma.NotificationDeliveryModel;
  * The parent message of a work item's (or PR's) thread in one channel.
  */
 export type NotificationThread = Prisma.NotificationThreadModel;
+/**
+ * Model HostProvider
+ * A code host implemented by operator-approved custom tools (docs/host-providers.md).
+ * `name` is the prefix of its repository ids: `<name>:<workspace>/<repo>`. Holds no secret values.
+ */
+export type HostProvider = Prisma.HostProviderModel;
+/**
+ * Model HostProviderOperation
+ * One approved snapshot: the code Wardby runs. `update_tool` changes nothing here until approved again.
+ */
+export type HostProviderOperation = Prisma.HostProviderOperationModel;
+/**
+ * Model HostProviderCredential
+ * Which brokered secret serves which repositories. `credentialKind` is `static` only in v1.
+ */
+export type HostProviderCredential = Prisma.HostProviderCredentialModel;
+/**
+ * Model HostProviderTrustedAccount
+ * Host accounts allowed to start runs when the provider has no permission secret.
+ */
+export type HostProviderTrustedAccount = Prisma.HostProviderTrustedAccountModel;