Mental model

Learn the objects you configure and audit.

Agents do the work. Agent identities name the caller. Capability grants define what they can touch. Approvals pause exact risky calls. Activity keeps evidence.

Core Objects

Workspace	The ownership boundary for sessions, workflows, credentials, package secrets, integrations, Agent identities, and feature flags.
Session	An interactive hosted-agent run with transcript, tools, model choices, sandbox volume state, and linked durable runs.
Agent identity	A named persistent caller credential for external agents and MCP clients. It has lifecycle, expiry, revocation, token regeneration, grants, and Activity.
Capability	A discoverable action surface with schemas, scope contract, source metadata, maximum mode, risk hints, and Activity defaults.
Capability grant	The active Ask or Allow record that binds a subject to one capability with scope, expiry, use limits, capture mode, provenance, and lifecycle. Off is the absence of a grant.
Human input request	A stored pause where a package asks a person to approve, choose, provide text, or explicitly resume before the source session continues.
Workflow	A durable automation object: definition, triggers, outputs, access rules, and enabled state.
Trigger	The event that starts a workflow. Manual, schedule, GitHub webhook/GitHub App events, custom webhook receiver events, and declared package events execute today; broader product-event publishers and richer trigger UI are follow-up work.
Run	One workflow execution, with status, timestamps, trigger input, logs, approvals, artifacts, and optional agent-session links.

How to Talk About a Run

Work

The agent inspects, edits, calls tools, runs commands, or produces an artifact.

Access

The gateway exposes only the APIs, repos, docs, and internal tools granted to the run.

Human review

Sensitive writes can pause for approval, while packages can also ask for choices, missing values, reasons, or an explicit resume.

History

The transcript, tool calls, outputs, human input decisions, approvals, Activity records, and workflow run records stay inspectable later.