ActorCapabilities
Defined in: .upstream/src/core/wire-actor.ts:26
What a caller is permitted to do. The gate branches on these, it does not re-derive them from who the caller is (warren-1ff0). Named for the permission, not the holder: a flag says what the surface allows, so a later provider can grant an arbitrary subset without anyone teaching handlers a new identity vocabulary.
RuntimeCapabilities (src/runtime/contract.ts) reads the same way by
design and is a different thing. It describes a sandbox, never crosses
the HTTP wire, and stays where it is.
Properties
Section titled “Properties”
readonlyadmin:boolean
Defined in: .upstream/src/core/wire-actor.ts:37
Mutate instance-level state: register projects, triggers, config.
dispatch
Section titled “dispatch”
readonlydispatch:boolean
Defined in: .upstream/src/core/wire-actor.ts:35
Dispatch runs / plan-runs and steer, pause, cancel them.
readOperator
Section titled “readOperator”
readonlyreadOperator:boolean
Defined in: .upstream/src/core/wire-actor.ts:33
Read operator-only surfaces: diagnostics, the run inbox, cost rollups, raw agent transcripts, per-project warren-config.
readPublic
Section titled “readPublic”
readonlyreadPublic:boolean
Defined in: .upstream/src/core/wire-actor.ts:28
Read the public projection of runs / projects / agents.