@@ -3857,6 +3857,20 @@ func (q *querier) GetWorkspacesEligibleForTransition(ctx context.Context, now ti
38573857return q .db .GetWorkspacesEligibleForTransition (ctx ,now )
38583858}
38593859
3860+ func (q * querier )GetWorkspacesForAgentMetrics (ctx context.Context ,deleted bool ) ([]database.GetWorkspacesForAgentMetricsRow ,error ) {
3861+ if err := q .authorizeContext (ctx ,policy .ActionRead ,rbac .ResourceSystem );err != nil {
3862+ return nil ,err
3863+ }
3864+ return q .db .GetWorkspacesForAgentMetrics (ctx ,deleted )
3865+ }
3866+
3867+ func (q * querier )GetWorkspacesForWorkspaceMetrics (ctx context.Context ,deleted bool ) ([]database.GetWorkspacesForWorkspaceMetricsRow ,error ) {
3868+ if err := q .authorizeContext (ctx ,policy .ActionRead ,rbac .ResourceSystem );err != nil {
3869+ return nil ,err
3870+ }
3871+ return q .db .GetWorkspacesForWorkspaceMetrics (ctx ,deleted )
3872+ }
3873+
38603874func (q * querier )InsertAIBridgeInterception (ctx context.Context ,arg database.InsertAIBridgeInterceptionParams ) (database.AIBridgeInterception ,error ) {
38613875return insert (q .log ,q .auth ,rbac .ResourceAibridgeInterception .WithOwner (arg .InitiatorID .String ()),q .db .InsertAIBridgeInterception )(ctx ,arg )
38623876}
@@ -3885,20 +3899,6 @@ func (q *querier) InsertAIBridgeUserPrompt(ctx context.Context, arg database.Ins
38853899return q .db .InsertAIBridgeUserPrompt (ctx ,arg )
38863900}
38873901
3888- func (q * querier )GetWorkspacesForAgentMetrics (ctx context.Context ,deleted bool ) ([]database.GetWorkspacesForAgentMetricsRow ,error ) {
3889- if err := q .authorizeContext (ctx ,policy .ActionRead ,rbac .ResourceSystem );err != nil {
3890- return nil ,err
3891- }
3892- return q .db .GetWorkspacesForAgentMetrics (ctx ,deleted )
3893- }
3894-
3895- func (q * querier )GetWorkspacesForWorkspaceMetrics (ctx context.Context ,deleted bool ) ([]database.GetWorkspacesForWorkspaceMetricsRow ,error ) {
3896- if err := q .authorizeContext (ctx ,policy .ActionRead ,rbac .ResourceSystem );err != nil {
3897- return nil ,err
3898- }
3899- return q .db .GetWorkspacesForWorkspaceMetrics (ctx ,deleted )
3900- }
3901-
39023902func (q * querier )InsertAPIKey (ctx context.Context ,arg database.InsertAPIKeyParams ) (database.APIKey ,error ) {
39033903// TODO(Cian): ideally this would be encoded in the policy, but system users are just members and we
39043904// don't currently have a capability to conditionally deny creating resources by owner ID in a role.