@autohq/cli 0.1.133 → 0.1.135

package/dist/index.js

@@ -334,8 +334,8 @@ async function createOAuthLoopbackCallback(input) {
   });
   let resolveResult;
   let rejectResult;
-  const result = new Promise((resolve2, reject) => {
-    resolveResult = resolve2;
+  const result = new Promise((resolve3, reject) => {
+    resolveResult = resolve3;
     rejectResult = reject;
   });
   const server = createServer((request, response) => {
@@ -595,14 +595,14 @@ async function listenOnPreferredPort(server, port) {
   }
 }
 async function listen(server, port) {
-  await new Promise((resolve2, reject) => {
+  await new Promise((resolve3, reject) => {
     const onError = (error51) => {
       server.off("listening", onListening);
       reject(error51);
     };
     const onListening = () => {
       server.off("error", onError);
-      resolve2();
+      resolve3();
     };
     server.once("error", onError);
     server.once("listening", onListening);
@@ -873,7 +873,7 @@ function persistLogin(config2, input) {
   }
 }
 async function sleep(ms) {
-  await new Promise((resolve2) => setTimeout(resolve2, ms));
+  await new Promise((resolve3) => setTimeout(resolve3, ms));
 }
 var init_login = __esm({
   "src/commands/auth/login.ts"() {
@@ -18053,7 +18053,7 @@ function isChatMessageEvent(trigger) {
 function hasFilterValue(trigger, path2, expected) {
   return trigger.where?.[path2] === expected;
 }
-var RESOURCE_KIND_SESSION, SESSION_HARNESSES, TriggerFilterScalarSchema, TriggerFilterPathSchema, TriggerFilterClauseSchema, TriggerFilterSchema, SessionTriggerCheckTimeoutSchema, TriggerEventSchema, TriggerEventsSchema, SessionTriggerSharedFields, SessionTriggerEventSourceFields, SessionTriggerBaseSchema, SessionTriggerDefinitionBaseSchema, SessionTriggerSchema, SessionApplyTriggerSchema, SessionHeartbeatTriggerBaseSchema, SessionHeartbeatTriggerSchema, SessionApplyHeartbeatTriggerSchema, SessionTriggerDefinitionSchema, SessionApplyTriggerDefinitionSchema, SessionTriggersSchema, SessionApplyTriggersSchema, AVATAR_ASSET_EXTENSIONS, MAX_AVATAR_ASSET_BYTES, MIN_AVATAR_ASSET_DIMENSION_PX, MAX_AVATAR_ASSET_DIMENSION_PX, PNG_SIGNATURE, SESSION_IDENTITY_DESCRIPTION_MAX_LENGTH, SHA256_HEX_PATTERN, SessionIdentitySchema, SessionSpecFieldsSchema, SessionSpecSchema, SessionApplySpecSchema, SessionStatusSchema, SessionResourceSchema, SessionApplyRequestSchema, SessionApplyTriggerReceiptSchema, SessionApplyResponseSchema, SESSION_TELEGRAM_IDENTITY_STATUSES, SessionTelegramIdentityStatusSchema, SessionPresenceIdentitySchema, SessionPresenceResponseSchema, SessionPresenceConnectRequestSchema, SessionPresenceConnectPendingSchema, SessionPresenceConnectResponseSchema, SessionPresenceIconRequestSchema, SessionPresenceIconResponseSchema, SessionPresenceCompleteResponseSchema;
+var RESOURCE_KIND_AGENT, LEGACY_RESOURCE_KIND_SESSION, RESOURCE_KIND_SESSION, SESSION_HARNESSES, TriggerFilterScalarSchema, TriggerFilterPathSchema, TriggerFilterClauseSchema, TriggerFilterSchema, SessionTriggerCheckTimeoutSchema, TriggerEventSchema, TriggerEventsSchema, SessionTriggerSharedFields, SessionTriggerEventSourceFields, SessionTriggerBaseSchema, SessionTriggerDefinitionBaseSchema, SessionTriggerSchema, SessionApplyTriggerSchema, SessionHeartbeatTriggerBaseSchema, SessionHeartbeatTriggerSchema, SessionApplyHeartbeatTriggerSchema, SessionTriggerDefinitionSchema, SessionApplyTriggerDefinitionSchema, SessionTriggersSchema, SessionApplyTriggersSchema, AVATAR_ASSET_EXTENSIONS, MAX_AVATAR_ASSET_BYTES, MIN_AVATAR_ASSET_DIMENSION_PX, MAX_AVATAR_ASSET_DIMENSION_PX, PNG_SIGNATURE, SESSION_IDENTITY_DESCRIPTION_MAX_LENGTH, SHA256_HEX_PATTERN, SessionIdentitySchema, SessionSpecFieldsSchema, SessionSpecSchema, SessionApplySpecSchema, SessionStatusSchema, SessionResourceSchema, SessionApplyRequestSchema, SessionApplyTriggerReceiptSchema, SessionApplyResponseSchema, SESSION_TELEGRAM_IDENTITY_STATUSES, SessionTelegramIdentityStatusSchema, SessionPresenceIdentitySchema, SessionPresenceResponseSchema, SessionPresenceConnectRequestSchema, SessionPresenceConnectPendingSchema, SessionPresenceConnectResponseSchema, SessionPresenceIconRequestSchema, SessionPresenceIconResponseSchema, SessionPresenceCompleteResponseSchema;
 var init_sessions = __esm({
   "../../packages/schemas/src/sessions.ts"() {
     "use strict";
@@ -18065,7 +18065,9 @@ var init_sessions = __esm({
     init_secrets();
     init_tools();
     init_trigger_router();
-    RESOURCE_KIND_SESSION = "session";
+    RESOURCE_KIND_AGENT = "agent";
+    LEGACY_RESOURCE_KIND_SESSION = "session";
+    RESOURCE_KIND_SESSION = RESOURCE_KIND_AGENT;
     SESSION_HARNESSES = ["claude-code"];
     TriggerFilterScalarSchema = external_exports.union([
       external_exports.null(),
@@ -18339,7 +18341,7 @@ var init_sessions = __esm({
       /**
        * Scopes the current agent-app scope set requests that this realized
        * identity's install never granted. Computed at read time; non-empty means
-       * the install predates a scope addition and `auto sessions connect
+       * the install predates a scope addition and `auto agents connect
        * <session> --reconnect` refreshes it.
        */
       missingScopes: external_exports.array(external_exports.string().trim().min(1)).optional()
@@ -18584,7 +18586,16 @@ var init_project_service_accounts = __esm({
 });
 
 // ../../packages/schemas/src/project-resources.ts
-var EnvironmentApplyDocumentSchema, IdentityApplyDocumentSchema, SessionApplyDocumentSchema, ProjectApplyResourceSchema, PROJECT_RESOURCE_APPLY_ORDER, PROJECT_RESOURCE_KINDS, ProjectDeleteResourceSchema, AVATAR_ASSET_CONTENT_TYPES, MAX_AVATAR_ASSET_BASE64_LENGTH, ProjectApplyAssetSchema, ProjectApplyAssetsSchema, AvatarAssetUploadRequestSchema, AvatarAssetUploadResponseSchema, ProjectApplyRequestSchema, ProjectApplySystemConfigSchema, ProjectAppliedResourceSchema, ProjectApplyDiagnosticSchema, ProjectApplyResponseSchema;
+function normalizeLegacySessionKind(value) {
+  if (isRecord(value) && value.kind === LEGACY_RESOURCE_KIND_SESSION) {
+    return { ...value, kind: RESOURCE_KIND_SESSION };
+  }
+  return value;
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+var EnvironmentApplyDocumentSchema, IdentityApplyDocumentSchema, SessionApplyDocumentSchema, ProjectApplyResourceSchema, PROJECT_RESOURCE_APPLY_ORDER, PROJECT_RESOURCE_KINDS, ProjectDeleteResourceBaseSchema, ProjectDeleteResourceSchema, AVATAR_ASSET_CONTENT_TYPES, MAX_AVATAR_ASSET_BASE64_LENGTH, ProjectApplyAssetSchema, ProjectApplyAssetsSchema, AvatarAssetUploadRequestSchema, AvatarAssetUploadResponseSchema, ProjectApplyRequestSchema, ProjectApplySystemConfigSchema, ProjectAppliedResourceSchema, ProjectApplyDiagnosticSchema, ProjectApplyResponseResourceKindSchema, ProjectApplyResponseSchema;
 var init_project_resources = __esm({
   "../../packages/schemas/src/project-resources.ts"() {
     "use strict";
@@ -18605,21 +18616,29 @@ var init_project_resources = __esm({
       RESOURCE_KIND_SESSION,
       SessionApplyRequestSchema.shape.spec
     );
-    ProjectApplyResourceSchema = external_exports.discriminatedUnion("kind", [
-      EnvironmentApplyDocumentSchema,
-      IdentityApplyDocumentSchema,
-      SessionApplyDocumentSchema
-    ]);
+    ProjectApplyResourceSchema = external_exports.preprocess(
+      normalizeLegacySessionKind,
+      external_exports.discriminatedUnion("kind", [
+        EnvironmentApplyDocumentSchema,
+        IdentityApplyDocumentSchema,
+        SessionApplyDocumentSchema
+      ])
+    );
     PROJECT_RESOURCE_APPLY_ORDER = [
       RESOURCE_KIND_ENVIRONMENT,
       RESOURCE_KIND_IDENTITY,
       RESOURCE_KIND_SESSION
     ];
     PROJECT_RESOURCE_KINDS = PROJECT_RESOURCE_APPLY_ORDER;
-    ProjectDeleteResourceSchema = external_exports.object({
-      kind: external_exports.enum(PROJECT_RESOURCE_KINDS),
+    ProjectDeleteResourceBaseSchema = external_exports.object({
       name: external_exports.string().trim().min(1)
     });
+    ProjectDeleteResourceSchema = external_exports.preprocess(
+      normalizeLegacySessionKind,
+      ProjectDeleteResourceBaseSchema.extend({
+        kind: external_exports.enum(PROJECT_RESOURCE_KINDS)
+      })
+    );
     AVATAR_ASSET_CONTENT_TYPES = ["image/png", "image/jpeg"];
     MAX_AVATAR_ASSET_BASE64_LENGTH = Math.ceil(MAX_AVATAR_ASSET_BYTES / 3) * 4 + 4;
     ProjectApplyAssetSchema = external_exports.object({
@@ -18673,6 +18692,12 @@ var init_project_resources = __esm({
       ]),
       name: external_exports.string().min(1)
     });
+    ProjectApplyResponseResourceKindSchema = external_exports.union([
+      external_exports.enum(PROJECT_RESOURCE_KINDS),
+      external_exports.literal(LEGACY_RESOURCE_KIND_SESSION)
+    ]).transform(
+      (kind) => kind === LEGACY_RESOURCE_KIND_SESSION ? RESOURCE_KIND_SESSION : kind
+    );
     ProjectApplyResponseSchema = external_exports.object({
       dryRun: external_exports.boolean().default(false),
       resources: external_exports.array(ProjectAppliedResourceSchema),
@@ -18681,14 +18706,14 @@ var init_project_resources = __esm({
       plan: external_exports.array(
         external_exports.object({
           action: external_exports.enum(["create", "update", "unchanged", "archive"]),
-          kind: external_exports.enum(PROJECT_RESOURCE_KINDS),
+          kind: ProjectApplyResponseResourceKindSchema,
           name: external_exports.string().min(1),
           uid: external_exports.string().min(1).optional()
         })
       ).default([]),
       pruned: external_exports.array(
         external_exports.object({
-          kind: external_exports.enum(PROJECT_RESOURCE_KINDS),
+          kind: ProjectApplyResponseResourceKindSchema,
           name: external_exports.string().min(1),
           uid: external_exports.string().min(1)
         })
@@ -21183,7 +21208,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.133",
+      version: "0.1.135",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"
@@ -21317,7 +21342,7 @@ function stampAvatarSha256(resource, assets) {
       }
     };
   }
-  if (resource.kind === "session" && typeof resource.spec.identity === "object" && resource.spec.identity !== null && !Array.isArray(resource.spec.identity)) {
+  if (resource.kind === RESOURCE_KIND_SESSION && typeof resource.spec.identity === "object" && resource.spec.identity !== null && !Array.isArray(resource.spec.identity)) {
     const identity2 = resource.spec.identity;
     const avatar = identity2.avatar;
     const asset = avatar ? assets[avatar.asset] : void 0;
@@ -21344,19 +21369,14 @@ var MAX_APPLY_REQUEST_BODY_BYTES;
 var init_assets = __esm({
   "src/commands/apply/assets.ts"() {
     "use strict";
+    init_src();
     init_resources2();
     MAX_APPLY_REQUEST_BODY_BYTES = 4 * 1024 * 1024;
   }
 });
 
-// src/commands/apply/files.ts
-import { createHash as createHash3 } from "crypto";
-import {
-  readFileSync as readFileSync3,
-  readdirSync as readdirSync2,
-  realpathSync,
-  statSync
-} from "fs";
+// src/commands/agents/authoring.ts
+import { readFileSync as readFileSync3, readdirSync as readdirSync2, statSync } from "fs";
 import {
   basename as basename2,
   dirname as dirname4,
@@ -21365,7 +21385,436 @@ import {
   join as join3,
   resolve
 } from "path";
-import { parseAllDocuments as parseYamlDocuments } from "yaml";
+import { parseAllDocuments as parseYamlDocuments, stringify } from "yaml";
+function compileAgentFile(path2) {
+  const context = { graph: /* @__PURE__ */ new Map(), removals: [] };
+  const document = readSingleDocument(path2);
+  const compiled = normalizeAgentDocument(
+    compileAgentDocument(document, path2, [], context)
+  );
+  const parsed = ProjectApplyResourceSchema.safeParse(compiled);
+  if (!parsed.success) {
+    throw new Error(`Invalid compiled agent ${path2}: ${parsed.error.message}`);
+  }
+  if (parsed.data.kind !== RESOURCE_KIND_SESSION) {
+    throw new Error(
+      `Invalid compiled agent ${path2}: expected kind "agent", got "${parsed.data.kind}"`
+    );
+  }
+  return {
+    resource: parsed.data,
+    graph: [...context.graph.values()],
+    removals: context.removals
+  };
+}
+function compileAgentDocumentValue(document, path2) {
+  const context = { graph: /* @__PURE__ */ new Map(), removals: [] };
+  const compiled = normalizeAgentDocument(
+    compileAgentDocument(document, path2, [], context)
+  );
+  const parsed = ProjectApplyResourceSchema.safeParse(compiled);
+  if (!parsed.success) {
+    throw new Error(`Invalid compiled agent ${path2}: ${parsed.error.message}`);
+  }
+  if (parsed.data.kind !== RESOURCE_KIND_SESSION) {
+    throw new Error(
+      `Invalid compiled agent ${path2}: expected kind "agent", got "${parsed.data.kind}"`
+    );
+  }
+  return {
+    resource: parsed.data,
+    graph: [...context.graph.values()],
+    removals: context.removals
+  };
+}
+function renderCompiledAgentYaml(result) {
+  return stringify(result.resource).trimEnd();
+}
+function renderAgentExplain(result) {
+  const lines = [
+    `agent ${result.resource.metadata.name}`,
+    `files ${result.graph.length}`
+  ];
+  for (const node of result.graph) {
+    lines.push(node.path);
+    for (const imported of node.imports) {
+      lines.push(`  imports ${imported}`);
+    }
+  }
+  if (result.removals.length > 0) {
+    lines.push("removals");
+    for (const removal of result.removals) {
+      lines.push(
+        `  ${removal.target}: ${removal.names.join(", ")} (${removal.path})`
+      );
+    }
+  }
+  return lines.join("\n");
+}
+function readLocalAgentAuthoringStatuses(input) {
+  const agentsDirectory = join3(
+    input?.directory ?? join3(process.cwd(), ".auto"),
+    "agents"
+  );
+  let entries;
+  try {
+    entries = readdirSync2(agentsDirectory).filter(
+      (entry) => AGENT_FILE_EXTENSIONS.includes(
+        extname(
+          entry
+        ).toLowerCase()
+      )
+    ).sort((left, right) => left.localeCompare(right));
+  } catch {
+    return [];
+  }
+  return entries.map((entry) => {
+    const path2 = join3(agentsDirectory, entry);
+    const fallbackName = basename2(entry, extname(entry));
+    try {
+      const result = compileAgentFile(path2);
+      return {
+        name: result.resource.metadata.name,
+        path: path2,
+        ok: true,
+        imports: importedEdgeCount(result.graph),
+        removals: result.removals.reduce(
+          (count, removal) => count + removal.names.length,
+          0
+        )
+      };
+    } catch (error51) {
+      return {
+        name: fallbackName,
+        path: path2,
+        ok: false,
+        imports: 0,
+        removals: 0,
+        error: error51 instanceof Error ? error51.message : String(error51)
+      };
+    }
+  });
+}
+function importedAgentAuthoringPaths(paths) {
+  const imported = /* @__PURE__ */ new Set();
+  for (const path2 of paths) {
+    for (const document of readDocuments(path2)) {
+      discoverImports(document, path2, [], imported);
+    }
+  }
+  return imported;
+}
+function resolveAgentAuthoringPath(input) {
+  const candidate = resolve(input.agent);
+  if (isAgentFile(candidate)) {
+    return candidate;
+  }
+  const agentsDirectory = join3(
+    input.directory ?? join3(process.cwd(), ".auto"),
+    "agents"
+  );
+  for (const extension of AGENT_FILE_EXTENSIONS) {
+    const path2 = join3(agentsDirectory, `${input.agent}${extension}`);
+    if (isAgentFile(path2)) {
+      return path2;
+    }
+  }
+  throw new Error(
+    `Agent authoring file not found for "${input.agent}" under ${agentsDirectory}`
+  );
+}
+function discoverImports(document, path2, stack, imported) {
+  const resolvedPath = resolve(path2);
+  if (stack.includes(resolvedPath)) {
+    throw new Error(
+      `Agent import cycle detected: ${[...stack, resolvedPath].join(" -> ")}`
+    );
+  }
+  if (!isRecord2(document)) {
+    return;
+  }
+  for (const importPath of importPaths(document)) {
+    const resolvedImport = resolveImportPath(importPath, resolvedPath);
+    imported.add(resolvedImport);
+    discoverImports(
+      readSingleDocument(resolvedImport),
+      resolvedImport,
+      [...stack, resolvedPath],
+      imported
+    );
+  }
+}
+function compileAgentDocument(document, path2, stack, context) {
+  const resolvedPath = resolve(path2);
+  if (stack.includes(resolvedPath)) {
+    throw new Error(
+      `Agent import cycle detected: ${[...stack, resolvedPath].join(" -> ")}`
+    );
+  }
+  if (!isRecord2(document)) {
+    throw new Error(`Invalid agent authoring file ${path2}: expected object`);
+  }
+  const imports = importPaths(document).map(
+    (importPath) => resolveImportPath(importPath, resolvedPath)
+  );
+  context.graph.set(resolvedPath, { path: resolvedPath, imports });
+  let merged = {};
+  for (const imported of imports) {
+    const importedDocument = readSingleDocument(imported);
+    merged = mergeValues2(
+      merged,
+      compileAgentDocument(
+        importedDocument,
+        imported,
+        [...stack, resolvedPath],
+        context
+      ),
+      []
+    );
+  }
+  const removals = removalDirectives(document, resolvedPath);
+  for (const removal of removals) {
+    merged = applyRemoval(merged, removal);
+    context.removals.push(removal);
+  }
+  return mergeValues2(merged, sanitizedAgentDocument(document), []);
+}
+function readSingleDocument(path2) {
+  const documents = readDocuments(path2);
+  if (documents.length !== 1) {
+    throw new Error(
+      `Agent authoring file ${path2} must contain exactly one document`
+    );
+  }
+  return documents[0];
+}
+function readDocuments(path2) {
+  const source = readFileSync3(path2, "utf8");
+  return parseYamlDocuments(source).filter((document) => document.contents !== null).map((document) => document.toJSON());
+}
+function importPaths(document) {
+  const value = document.imports ?? document.import;
+  if (value === void 0) {
+    return [];
+  }
+  const values = Array.isArray(value) ? value : [value];
+  return values.map((item) => {
+    if (typeof item !== "string" || item.trim().length === 0) {
+      throw new Error("Agent imports must be non-empty string paths");
+    }
+    return item.trim();
+  });
+}
+function resolveImportPath(importPath, importerPath) {
+  if (isAbsolute(importPath) || /^[A-Za-z]+:\/\//.test(importPath)) {
+    throw new Error(`Agent import must be a relative path: ${importPath}`);
+  }
+  const resolved = resolve(dirname4(importerPath), importPath);
+  if (!isAgentFile(resolved)) {
+    throw new Error(
+      `Agent import not found: ${importPath} from ${importerPath}`
+    );
+  }
+  return resolved;
+}
+function sanitizedAgentDocument(document) {
+  const next = { ...document };
+  delete next.import;
+  delete next.imports;
+  delete next.remove;
+  if (isRecord2(next.spec) && "remove" in next.spec) {
+    const spec = { ...next.spec };
+    delete spec.remove;
+    next.spec = spec;
+  }
+  return next;
+}
+function normalizeAgentDocument(document) {
+  if (!isRecord2(document) || "kind" in document) {
+    return document;
+  }
+  return { ...document, kind: RESOURCE_KIND_SESSION };
+}
+function removalDirectives(document, path2) {
+  const raw = mergeValues2(
+    isRecord2(document.remove) ? document.remove : {},
+    isRecord2(document.spec) && isRecord2(document.spec.remove) ? document.spec.remove : {},
+    []
+  );
+  if (!isRecord2(raw)) {
+    return [];
+  }
+  const directives = [];
+  for (const [target, value] of Object.entries(raw)) {
+    const names = stringList(value, `remove.${target}`);
+    if (names.length > 0) {
+      directives.push({ path: path2, target, names });
+    }
+  }
+  return directives;
+}
+function stringList(value, label) {
+  const values = Array.isArray(value) ? value : [value];
+  return values.map((item) => {
+    if (typeof item !== "string" || item.trim().length === 0) {
+      throw new Error(`${label} entries must be non-empty strings`);
+    }
+    return item.trim();
+  });
+}
+function applyRemoval(value, removal) {
+  if (!isRecord2(value)) {
+    return value;
+  }
+  const next = structuredClone(value);
+  if (!isRecord2(next.spec)) {
+    return next;
+  }
+  const spec = { ...next.spec };
+  next.spec = spec;
+  switch (removal.target) {
+    case "tools":
+    case "env": {
+      if (!isRecord2(spec[removal.target])) {
+        return next;
+      }
+      const collection = {
+        ...spec[removal.target]
+      };
+      for (const name of removal.names) {
+        delete collection[name];
+      }
+      spec[removal.target] = collection;
+      return next;
+    }
+    case "mounts":
+    case "triggers": {
+      const value2 = spec[removal.target];
+      if (!Array.isArray(value2)) {
+        return next;
+      }
+      const collection = value2;
+      spec[removal.target] = collection.filter(
+        (item) => !removal.names.includes(
+          collectionItemKey(removal.target, item) ?? ""
+        )
+      );
+      return next;
+    }
+    default:
+      throw new Error(
+        `Unsupported agent remove target "${removal.target}"; supported targets are tools, env, mounts, triggers`
+      );
+  }
+}
+function mergeValues2(base, override, path2) {
+  if (override === void 0) {
+    return base;
+  }
+  if (Array.isArray(base) && Array.isArray(override)) {
+    return mergeArrays(base, override, path2);
+  }
+  if (isRecord2(base) && isRecord2(override)) {
+    const merged = { ...base };
+    for (const [key, value] of Object.entries(override)) {
+      merged[key] = mergeValues2(merged[key], value, [...path2, key]);
+    }
+    return merged;
+  }
+  return override;
+}
+function mergeArrays(base, override, path2) {
+  const pathKey = path2.join(".");
+  if (pathKey !== "spec.mounts" && pathKey !== "spec.triggers") {
+    return [...base, ...override];
+  }
+  const merged = [...base];
+  const indexByKey = /* @__PURE__ */ new Map();
+  for (const [index, item] of merged.entries()) {
+    const key = collectionItemKey(path2.at(-1) ?? "", item);
+    if (key) {
+      indexByKey.set(key, index);
+    }
+  }
+  for (const item of override) {
+    const key = collectionItemKey(path2.at(-1) ?? "", item);
+    if (key && indexByKey.has(key)) {
+      merged[indexByKey.get(key) ?? 0] = mergeValues2(
+        merged[indexByKey.get(key) ?? 0],
+        item,
+        path2
+      );
+      continue;
+    }
+    if (key) {
+      indexByKey.set(key, merged.length);
+    }
+    merged.push(item);
+  }
+  return merged;
+}
+function collectionItemKey(collection, item) {
+  if (!isRecord2(item)) {
+    return void 0;
+  }
+  if (typeof item.name === "string") {
+    return item.name;
+  }
+  if (collection === "mounts" && typeof item.mountPath === "string") {
+    return item.mountPath;
+  }
+  if (collection === "triggers") {
+    if (typeof item.event === "string") {
+      return item.event;
+    }
+    if (Array.isArray(item.events)) {
+      return item.events.filter((event) => typeof event === "string").join(",");
+    }
+    if (typeof item.cron === "string") {
+      return `cron:${item.cron}:${typeof item.timezone === "string" ? item.timezone : ""}`;
+    }
+  }
+  return void 0;
+}
+function importedEdgeCount(graph) {
+  return graph.reduce((count, node) => count + node.imports.length, 0);
+}
+function isAgentFile(path2) {
+  try {
+    return statSync(path2).isFile();
+  } catch {
+    return false;
+  }
+}
+function isRecord2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+var AGENT_FILE_EXTENSIONS;
+var init_authoring = __esm({
+  "src/commands/agents/authoring.ts"() {
+    "use strict";
+    init_src();
+    AGENT_FILE_EXTENSIONS = [".yaml", ".yml", ".json"];
+  }
+});
+
+// src/commands/apply/files.ts
+import { createHash as createHash3 } from "crypto";
+import {
+  readFileSync as readFileSync4,
+  readdirSync as readdirSync3,
+  realpathSync,
+  statSync as statSync2
+} from "fs";
+import {
+  basename as basename3,
+  dirname as dirname5,
+  extname as extname2,
+  isAbsolute as isAbsolute2,
+  join as join4,
+  resolve as resolve2
+} from "path";
+import { parseAllDocuments as parseYamlDocuments2 } from "yaml";
 function readProjectApplyRequest(options) {
   if (options.file && options.directory) {
     throw new Error("Cannot use --file with --directory.");
@@ -21378,7 +21827,7 @@ function readProjectApplyRequest(options) {
     );
     return { ...request, assets: assets2 };
   }
-  const directory = options.directory ?? join3(process.cwd(), ".auto");
+  const directory = options.directory ?? join4(process.cwd(), ".auto");
   const files = applyFiles(directory);
   if (files.length === 0) {
     throw new Error(`No resource files found in ${directory}`);
@@ -21389,7 +21838,7 @@ function readProjectApplyRequest(options) {
     for (const resource of request.resources) {
       if (resource.kind !== kind) {
         throw new Error(
-          `Resource kind "${resource.kind}" in ${path2} does not match .auto/${APPLY_DIRECTORIES[kind]}`
+          `Resource kind "${resource.kind}" in ${path2} does not match .auto/${primaryApplyDirectory(kind)}`
         );
       }
       resources.push(resource);
@@ -21430,23 +21879,30 @@ function mcpOAuthSessionToolConnectionsFromAppliedResources(resources) {
 function applyFiles(root) {
   const files = [];
   for (const kind of PROJECT_RESOURCE_APPLY_ORDER) {
-    const directory = APPLY_DIRECTORIES[kind];
-    const path2 = join3(root, directory);
-    let entries;
-    try {
-      entries = readdirSync2(path2, { withFileTypes: true });
-    } catch {
-      continue;
+    const kindFiles = [];
+    for (const directory of applyDirectories(kind)) {
+      const path2 = join4(root, directory);
+      let entries;
+      try {
+        entries = readdirSync3(path2, { withFileTypes: true });
+      } catch {
+        continue;
+      }
+      kindFiles.push(...resourceApplyFiles(path2, entries));
     }
-    files.push(
-      ...resourceApplyFiles(path2, entries).map((file2) => ({
-        kind,
-        path: file2
-      }))
-    );
+    const importedFiles = kind === RESOURCE_KIND_SESSION ? importedAgentAuthoringPaths(kindFiles) : /* @__PURE__ */ new Set();
+    const appliedFiles = kind === RESOURCE_KIND_SESSION ? kindFiles.filter(
+      (path2) => !importedFiles.has(resolve2(path2)) && !isSharedAgentAuthoringFile(root, path2)
+    ) : kindFiles;
+    files.push(...appliedFiles.map((path2) => ({ kind, path: path2 })));
   }
   return files;
 }
+function isSharedAgentAuthoringFile(root, path2) {
+  const agentsSharedRoot = resolve2(root, "agents", "shared");
+  const resolvedPath = resolve2(path2);
+  return resolvedPath.startsWith(`${agentsSharedRoot}/`);
+}
 function mcpOAuthSessionToolConnectionsFromSessionTools(input) {
   return Object.entries(input.tools).flatMap(([alias, tool]) => {
     if (tool.kind !== "mcp_remote" || tool.disabled || tool.auth.kind !== "mcp_oauth") {
@@ -21462,10 +21918,10 @@ function mcpOAuthSessionToolConnectionsFromSessionTools(input) {
   });
 }
 function readApplyDocumentFile(path2) {
-  const source = readFileSync3(path2, "utf8");
+  const source = readFileSync4(path2, "utf8");
   let documents;
   try {
-    documents = parseYamlDocuments(source).filter((document) => document.contents !== null).map((document) => document.toJSON());
+    documents = parseYamlDocuments2(source).filter((document) => document.contents !== null).map((document) => document.toJSON());
   } catch (error51) {
     throw new Error(
       `Invalid apply file: ${error51 instanceof Error ? error51.message : String(error51)}`
@@ -21484,12 +21940,15 @@ function readApplyDocumentFile(path2) {
     delete: [],
     dryRun: false,
     prune: false,
-    resources: documents.map(readApplyDocument),
+    resources: documents.map((document) => readApplyDocument(document, path2)),
     assets: {}
   };
 }
-function readApplyDocument(document) {
+function readApplyDocument(document, path2) {
   const candidate = applyCandidate(document);
+  if (candidate.kind === RESOURCE_KIND_SESSION) {
+    return compileAgentDocumentValue(document, path2).resource;
+  }
   const parsed = APPLY_SCHEMAS[candidate.kind].safeParse(candidate.value);
   if (!parsed.success) {
     throw new Error(
@@ -21514,7 +21973,7 @@ function readApplyAssets(resources, projectRoot) {
       resourceName: target.resourceName,
       projectRoot
     });
-    const bytes = readFileSync3(resolvedPath);
+    const bytes = readFileSync4(resolvedPath);
     const dimensionsProblem = avatarAssetDimensionsProblem(bytes);
     if (dimensionsProblem) {
       throw new Error(
@@ -21523,7 +21982,7 @@ function readApplyAssets(resources, projectRoot) {
     }
     assets[target.asset] = {
       sha256: createHash3("sha256").update(bytes).digest("hex"),
-      contentType: extname(resolvedPath).toLowerCase() === ".png" ? "image/png" : "image/jpeg",
+      contentType: extname2(resolvedPath).toLowerCase() === ".png" ? "image/png" : "image/jpeg",
       dataBase64: bytes.toString("base64")
     };
   }
@@ -21541,7 +22000,7 @@ function avatarAssetTarget(resource) {
   return void 0;
 }
 function validateSessionAvatarAsset(input) {
-  if (isAbsolute(input.asset)) {
+  if (isAbsolute2(input.asset)) {
     throw new Error(
       `Invalid identity avatar asset for "${input.resourceName}": asset path must be relative`
     );
@@ -21553,10 +22012,10 @@ function validateSessionAvatarAsset(input) {
     );
   }
   const projectRoot = realpathSync(input.projectRoot);
-  const assetPath = resolve(projectRoot, input.asset);
+  const assetPath = resolve2(projectRoot, input.asset);
   let assetsRoot;
   try {
-    assetsRoot = realpathSync(resolve(projectRoot, ".auto", "assets"));
+    assetsRoot = realpathSync(resolve2(projectRoot, ".auto", "assets"));
   } catch {
     throw new Error(
       `Invalid identity avatar asset for "${input.resourceName}": .auto/assets directory does not exist`
@@ -21566,7 +22025,7 @@ function validateSessionAvatarAsset(input) {
   let stat;
   try {
     resolvedAssetPath = realpathSync(assetPath);
-    stat = statSync(resolvedAssetPath);
+    stat = statSync2(resolvedAssetPath);
   } catch {
     throw new Error(
       `Invalid identity avatar asset for "${input.resourceName}": ${input.asset} does not exist`
@@ -21587,7 +22046,7 @@ function validateSessionAvatarAsset(input) {
       `Invalid identity avatar asset for "${input.resourceName}": asset must be ${MAX_AVATAR_ASSET_BYTES} bytes or smaller`
     );
   }
-  const extension = extname(resolvedAssetPath).toLowerCase();
+  const extension = extname2(resolvedAssetPath).toLowerCase();
   if (!ALLOWED_AVATAR_EXTENSIONS.has(extension)) {
     throw new Error(
       `Invalid identity avatar asset for "${input.resourceName}": asset must be a PNG or JPEG image`
@@ -21596,16 +22055,16 @@ function validateSessionAvatarAsset(input) {
   return resolvedAssetPath;
 }
 function applyProjectRoot(directory) {
-  const resolved = resolve(directory);
-  return basename2(resolved) === ".auto" ? dirname4(resolved) : resolved;
+  const resolved = resolve2(directory);
+  return basename3(resolved) === ".auto" ? dirname5(resolved) : resolved;
 }
 function applyFileProjectRoot(file2) {
-  let dir = dirname4(resolve(file2));
+  let dir = dirname5(resolve2(file2));
   while (true) {
-    if (basename2(dir) === ".auto") {
-      return dirname4(dir);
+    if (basename3(dir) === ".auto") {
+      return dirname5(dir);
     }
-    const parent = dirname4(dir);
+    const parent = dirname5(dir);
     if (parent === dir) {
       return process.cwd();
     }
@@ -21616,12 +22075,21 @@ function isInside(path2, parent) {
   return path2.startsWith(`${parent}/`);
 }
 function applyCandidate(document) {
-  if (!isRecord(document) || !("kind" in document)) {
+  if (!isRecord3(document) || !("kind" in document)) {
     return { kind: RESOURCE_KIND_SESSION, value: document };
   }
+  if (document.kind === LEGACY_RESOURCE_KIND_SESSION) {
+    return {
+      kind: RESOURCE_KIND_SESSION,
+      value: {
+        metadata: document.metadata,
+        spec: document.spec
+      }
+    };
+  }
   if (!PROJECT_RESOURCE_APPLY_ORDER.includes(document.kind)) {
     throw new Error(
-      `Unsupported apply resource kind "${String(document.kind)}"; supported kinds are ${PROJECT_RESOURCE_APPLY_ORDER.map((kind2) => `"${kind2}"`).join(", ")}`
+      `Unsupported apply resource kind "${String(document.kind)}"; supported kinds are ${PROJECT_RESOURCE_APPLY_ORDER.map((kind2) => `"${kind2}"`).join(", ")} (legacy alias "session" is also accepted)`
     );
   }
   const kind = document.kind;
@@ -21633,16 +22101,22 @@ function applyCandidate(document) {
     }
   };
 }
-function isRecord(value) {
+function applyDirectories(kind) {
+  return [...LEGACY_APPLY_DIRECTORIES[kind] ?? [], APPLY_DIRECTORIES[kind]];
+}
+function primaryApplyDirectory(kind) {
+  return APPLY_DIRECTORIES[kind];
+}
+function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function resourceApplyFiles(directory, entries) {
   const files = [];
   for (const entry of entries) {
-    const path2 = join3(directory, entry.name);
+    const path2 = join4(directory, entry.name);
     if (entry.isDirectory()) {
       files.push(
-        ...resourceApplyFiles(path2, readdirSync2(path2, { withFileTypes: true }))
+        ...resourceApplyFiles(path2, readdirSync3(path2, { withFileTypes: true }))
       );
       continue;
     }
@@ -21652,20 +22126,24 @@ function resourceApplyFiles(directory, entries) {
   }
   return files.sort((left, right) => left.localeCompare(right));
 }
-var APPLY_DIRECTORIES, APPLY_SCHEMAS, ALLOWED_AVATAR_EXTENSIONS;
+var APPLY_DIRECTORIES, LEGACY_APPLY_DIRECTORIES, APPLY_SCHEMAS, ALLOWED_AVATAR_EXTENSIONS;
 var init_files = __esm({
   "src/commands/apply/files.ts"() {
     "use strict";
     init_src();
+    init_authoring();
     APPLY_DIRECTORIES = {
       environment: "environments",
       identity: "identities",
-      session: "sessions"
+      agent: "agents"
+    };
+    LEGACY_APPLY_DIRECTORIES = {
+      [RESOURCE_KIND_SESSION]: ["sessions"]
     };
     APPLY_SCHEMAS = {
       environment: EnvironmentApplyRequestSchema,
       identity: IdentityApplyRequestSchema,
-      session: SessionApplyRequestSchema
+      [RESOURCE_KIND_SESSION]: SessionApplyRequestSchema
     };
     ALLOWED_AVATAR_EXTENSIONS = /* @__PURE__ */ new Set([".jpg", ".jpeg", ".png"]);
   }
@@ -21754,7 +22232,7 @@ async function connectSessionTool(input) {
       }
     );
     input.writeOutput(
-      `connected session/${completed.session ?? input.session} tool/${completed.tool} connection/${completed.connection}`
+      `connected agent/${completed.session ?? input.session} tool/${completed.tool} connection/${completed.connection}`
     );
   } finally {
     callback.close();
@@ -21792,7 +22270,7 @@ function sessionToolConnectionScopeContext(input) {
 function writeConnectionStart(writeOutput, result) {
   writeOutput(result.message);
   writeOutput(
-    `connect session/${result.session} tool/${result.tool} connection/${result.connection}`
+    `connect agent/${result.session} tool/${result.tool} connection/${result.connection}`
   );
   writeOutput(`authorization_url ${result.authorizationUrl}`);
 }
@@ -21871,7 +22349,7 @@ async function applyProjectInput(input) {
       )) {
         input.writeOutput(
           style.dim(
-            `would connect session/${item.session} tool/${item.tool} connection/${item.connection}`
+            `would connect agent/${item.session} tool/${item.tool} connection/${item.connection}`
           )
         );
       }
@@ -21959,8 +22437,11 @@ function parseProjectResourceReference(resource) {
     throw new Error('Resource must be formatted as "kind/name"');
   }
   if (!PROJECT_RESOURCE_KINDS.includes(kind)) {
+    if (kind === LEGACY_RESOURCE_KIND_SESSION) {
+      return { kind: RESOURCE_KIND_SESSION, name };
+    }
     throw new Error(
-      `Unsupported resource kind "${kind}"; supported kinds are ${PROJECT_RESOURCE_KINDS.map((value) => `"${value}"`).join(", ")}`
+      `Unsupported resource kind "${kind}"; supported kinds are ${PROJECT_RESOURCE_KINDS.map((value) => `"${value}"`).join(", ")} (legacy alias "session" is also accepted)`
     );
   }
   return { kind, name };
@@ -22006,8 +22487,8 @@ var init_resources3 = __esm({
       [RESOURCE_KIND_SESSION]: {
         kind: RESOURCE_KIND_SESSION,
         section: "sessions",
-        label: "Session",
-        pluralLabel: "Sessions"
+        label: "Agent",
+        pluralLabel: "Agents"
       }
     };
     PROJECT_RESOURCE_TUI_ORDER = [
@@ -22035,10 +22516,10 @@ var init_resources3 = __esm({
 
 // src/commands/edit/actions.ts
 import { spawn as spawn2 } from "child_process";
-import { mkdtempSync, readFileSync as readFileSync4, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "fs";
+import { mkdtempSync, readFileSync as readFileSync5, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "fs";
 import { tmpdir } from "os";
-import { join as join4 } from "path";
-import { parseAllDocuments as parseYamlDocuments2, stringify as stringify2 } from "yaml";
+import { join as join5 } from "path";
+import { parseAllDocuments as parseYamlDocuments3, stringify as stringify3 } from "yaml";
 async function editResource(input) {
   const reference = parseProjectResourceReference(input.resource);
   const editor = resolveEditor({
@@ -22050,15 +22531,15 @@ async function editResource(input) {
     apiBaseUrl: input.commandOptions.apiBaseUrl
   });
   const document = editableResourceDocument(reference.kind, current);
-  const source = `${stringify2(document).trimEnd()}
+  const source = `${stringify3(document).trimEnd()}
 `;
-  const tempRoot = mkdtempSync(join4(tmpdir(), "auto-edit-"));
-  const filePath = join4(tempRoot, `${reference.kind}-${reference.name}.yaml`);
+  const tempRoot = mkdtempSync(join5(tmpdir(), "auto-edit-"));
+  const filePath = join5(tempRoot, `${reference.kind}-${reference.name}.yaml`);
   writeFileSync3(filePath, source, "utf8");
   let removeTempFile = false;
   try {
     await runEditor(editor, filePath);
-    const editedSource = readFileSync4(filePath, "utf8");
+    const editedSource = readFileSync5(filePath, "utf8");
     if (editedSource === source) {
       input.writeOutput("No changes; skipped apply.");
       removeTempFile = true;
@@ -22105,7 +22586,7 @@ function resolveEditor(input) {
   return input.env.VISUAL?.trim() || input.env.EDITOR?.trim() || "vi";
 }
 async function runEditor(editor, filePath) {
-  await new Promise((resolve2, reject) => {
+  await new Promise((resolve3, reject) => {
     const child = spawn2(editor, [filePath], {
       shell: true,
       stdio: "inherit"
@@ -22117,7 +22598,7 @@ async function runEditor(editor, filePath) {
     });
     child.on("close", (code, signal) => {
       if (code === 0) {
-        resolve2();
+        resolve3();
         return;
       }
       if (signal) {
@@ -22129,10 +22610,10 @@ async function runEditor(editor, filePath) {
   });
 }
 function readEditedResource(filePath, expected) {
-  const source = readFileSync4(filePath, "utf8");
+  const source = readFileSync5(filePath, "utf8");
   let documents;
   try {
-    documents = parseYamlDocuments2(source).filter((document) => document.contents !== null).map((document) => document.toJSON());
+    documents = parseYamlDocuments3(source).filter((document) => document.contents !== null).map((document) => document.toJSON());
   } catch (error51) {
     throw new Error(
       `Invalid edited resource: ${error51 instanceof Error ? error51.message : String(error51)}`
@@ -23735,7 +24216,7 @@ function ConversationView({
     {
       name: "/back",
       aliases: ["/exit"],
-      description: "Go back to the sessions dashboard",
+      description: "Go back to the agents dashboard",
       shortcut: "esc",
       action: () => {
         setInput("");
@@ -23775,7 +24256,7 @@ function ConversationView({
           /* @__PURE__ */ jsx4(Text4, { bold: true, children: "Welcome to Auto!" }),
           /* @__PURE__ */ jsx4(Text4, { children: " " }),
           /* @__PURE__ */ jsxs4(Box4, { gap: 2, children: [
-            /* @__PURE__ */ jsx4(Text4, { color: "yellow", children: "Session  " }),
+            /* @__PURE__ */ jsx4(Text4, { color: "yellow", children: "Agent    " }),
             /* @__PURE__ */ jsx4(Text4, { children: sessionName })
           ] }),
           /* @__PURE__ */ jsxs4(Box4, { gap: 2, children: [
@@ -24058,13 +24539,13 @@ function sleep2(ms, signal) {
   if (signal.aborted) {
     return Promise.resolve();
   }
-  return new Promise((resolve2) => {
-    const timeout = setTimeout(resolve2, ms);
+  return new Promise((resolve3) => {
+    const timeout = setTimeout(resolve3, ms);
     signal.addEventListener(
       "abort",
       () => {
         clearTimeout(timeout);
-        resolve2();
+        resolve3();
       },
       { once: true }
     );
@@ -25252,20 +25733,25 @@ var init_RunsView = __esm({
 // src/tui/SessionsView.tsx
 import { Box as Box11, Text as Text12, useStdout as useStdout6 } from "ink";
 import { jsx as jsx12, jsxs as jsxs10 } from "react/jsx-runtime";
-function SessionsView({ sessions, selectedIndex, error: error51 }) {
+function SessionsView({
+  sessions,
+  selectedIndex,
+  error: error51,
+  authoringStatuses
+}) {
   const { stdout } = useStdout6();
   const termWidth = stdout?.columns ?? 120;
   const numCols = 4;
   const gapTotal = (numCols - 1) * TABLE_GAP;
   const descriptionWidth = Math.max(
     24,
-    termWidth - TABLE_PADDING_X * 2 - COL_NAME2 - COL_RUNS - COL_UPDATED2 - gapTotal
+    termWidth - TABLE_PADDING_X * 2 - COL_NAME2 - COL_AUTHORING - COL_UPDATED2 - gapTotal
   );
   return /* @__PURE__ */ jsxs10(Box11, { flexDirection: "column", flexGrow: 1, children: [
     /* @__PURE__ */ jsxs10(Box11, { paddingX: TABLE_PADDING_X, paddingBottom: 1, gap: TABLE_GAP, children: [
       /* @__PURE__ */ jsx12(HeaderCell, { width: COL_NAME2, children: "NAME\u2191" }),
-      /* @__PURE__ */ jsx12(HeaderCell, { width: descriptionWidth, children: "DESCRIPTION" }),
-      /* @__PURE__ */ jsx12(HeaderCell, { width: COL_RUNS, justifyContent: "flex-end", children: "RUNS" }),
+      /* @__PURE__ */ jsx12(HeaderCell, { width: descriptionWidth, children: "CONFIG" }),
+      /* @__PURE__ */ jsx12(HeaderCell, { width: COL_AUTHORING, justifyContent: "flex-end", children: "AUTHORING" }),
       /* @__PURE__ */ jsx12(HeaderCell, { width: COL_UPDATED2, justifyContent: "flex-end", children: "UPDATED" })
     ] }),
     error51 ? /* @__PURE__ */ jsx12(Box11, { paddingX: 2, children: /* @__PURE__ */ jsxs10(Text12, { color: "red", children: [
@@ -25277,7 +25763,9 @@ function SessionsView({ sessions, selectedIndex, error: error51 }) {
     ] }) }) : sessions.map((session, i) => {
       const isSelected = i === selectedIndex;
       const updated = relativeTime3(session.metadata.updatedAt);
-      const runCount = session.status.runCount.toString();
+      const authoring = sessionAuthoringLabel(
+        authoringStatuses?.get(session.metadata.name)
+      );
       return /* @__PURE__ */ jsxs10(TableRow, { selected: isSelected, children: [
         /* @__PURE__ */ jsx12(
           TableCell,
@@ -25296,17 +25784,17 @@ function SessionsView({ sessions, selectedIndex, error: error51 }) {
             width: descriptionWidth,
             selected: isSelected,
             dim: !isSelected,
-            children: "<todo fill in>"
+            children: sessionConfigLabel(session)
           }
         ),
         /* @__PURE__ */ jsx12(
           TableCell,
           {
-            width: COL_RUNS,
+            width: COL_AUTHORING,
             selected: isSelected,
             dim: !isSelected,
             justifyContent: "flex-end",
-            children: runCount
+            children: authoring
           }
         ),
         /* @__PURE__ */ jsx12(
@@ -25323,6 +25811,26 @@ function SessionsView({ sessions, selectedIndex, error: error51 }) {
     })
   ] });
 }
+function sessionConfigLabel(session) {
+  const pieces = [
+    session.spec.harness,
+    session.spec.environment ? `env:${session.spec.environment}` : void 0,
+    `${session.status.runCount} runs`
+  ].filter(Boolean);
+  return pieces.join(" ");
+}
+function sessionAuthoringLabel(status) {
+  if (!status) {
+    return "remote";
+  }
+  if (!status.ok) {
+    return "error";
+  }
+  if (status.imports === 0 && status.removals === 0) {
+    return "local ok";
+  }
+  return `ok i${status.imports}/r${status.removals}`;
+}
 function relativeTime3(dateStr) {
   const ms = Date.now() - new Date(dateStr).getTime();
   const s = Math.floor(ms / 1e3);
@@ -25334,12 +25842,12 @@ function relativeTime3(dateStr) {
   const d = Math.floor(h / 24);
   return `${d}d ago`;
 }
-var COL_RUNS, COL_UPDATED2, COL_NAME2;
+var COL_AUTHORING, COL_UPDATED2, COL_NAME2;
 var init_SessionsView = __esm({
   "src/tui/SessionsView.tsx"() {
     "use strict";
     init_Table();
-    COL_RUNS = 6;
+    COL_AUTHORING = 16;
     COL_UPDATED2 = 10;
     COL_NAME2 = 28;
   }
@@ -25347,7 +25855,7 @@ var init_SessionsView = __esm({
 
 // src/tui/SpecInspector.tsx
 import { Box as Box12, Text as Text13 } from "ink";
-import { stringify as stringify4 } from "yaml";
+import { stringify as stringify6 } from "yaml";
 import { jsx as jsx13, jsxs as jsxs11 } from "react/jsx-runtime";
 function SpecInspector({
   kind,
@@ -25378,7 +25886,7 @@ function specLineCount(spec) {
   return yamlLines(spec).length;
 }
 function yamlLines(spec) {
-  return stringify4(spec).trimEnd().split("\n");
+  return stringify6(spec).trimEnd().split("\n");
 }
 function YamlLine({ line }) {
   const match = /^(\s*)([^:#][^:]*:)(.*)$/.exec(line);
@@ -25465,6 +25973,15 @@ function selectedNamedResourceForSection(input) {
       return null;
   }
 }
+function agentAuthoringHeaderLabel(status) {
+  if (!status.ok) {
+    return "error";
+  }
+  if (status.imports === 0 && status.removals === 0) {
+    return "local ok";
+  }
+  return `local ok, ${status.imports} imports, ${status.removals} removals`;
+}
 function editableResourceForSelection(input) {
   if (!isApplyResourceSection(input.activeSection)) {
     return null;
@@ -25523,6 +26040,15 @@ function HomeView({ apiUrl, notice, returnToSession }) {
   const [serviceAccountNameInput, setServiceAccountNameInput] = useState3("");
   const [inspectedResource, setInspectedResource] = useState3(null);
   const [inspectScrollOffset, setInspectScrollOffset] = useState3(0);
+  const localAgentAuthoringStatuses = useMemo3(
+    () => new Map(
+      readLocalAgentAuthoringStatuses().map((status) => [
+        status.name,
+        status
+      ])
+    ),
+    []
+  );
   const activeSelectionIds = client.getActiveSelection();
   const {
     data: sessions = [],
@@ -25625,6 +26151,7 @@ function HomeView({ apiUrl, notice, returnToSession }) {
   const selectedConnectionProvider = providerRows2(connectionProviders)[connectionProviderIndex];
   const selectedServiceAccount = serviceAccounts[serviceAccountIndex];
   const selectedSession = sessions[sessionIndex];
+  const selectedAgentAuthoringStatus = selectedSession ? localAgentAuthoringStatuses.get(selectedSession.metadata.name) : void 0;
   const selectedEnvironment = environments[environmentIndex];
   const selectedIdentity = identities[identityIndex];
   const selectedInspectableResource = useMemo3(() => {
@@ -26505,7 +27032,7 @@ function HomeView({ apiUrl, notice, returnToSession }) {
     }
   });
   if (isLoading) {
-    return /* @__PURE__ */ jsx14(Box13, { height: termHeight, alignItems: "center", justifyContent: "center", children: /* @__PURE__ */ jsx14(Spinner, { label: "loading sessions\u2026" }) });
+    return /* @__PURE__ */ jsx14(Box13, { height: termHeight, alignItems: "center", justifyContent: "center", children: /* @__PURE__ */ jsx14(Spinner, { label: "loading agents\u2026" }) });
   }
   if (authErrorMessage && sessions.length === 0 && !projectSelectionRequired) {
     return /* @__PURE__ */ jsx14(
@@ -26526,7 +27053,7 @@ function HomeView({ apiUrl, notice, returnToSession }) {
   let sectionTitle;
   switch (activeSection) {
     case "sessions":
-      sectionTitle = "Sessions";
+      sectionTitle = "Agents";
       break;
     case "projects":
       sectionTitle = `Projects[${projects.length}]`;
@@ -26547,7 +27074,7 @@ function HomeView({ apiUrl, notice, returnToSession }) {
     case "runs": {
       const selectedSuffix = markedRunIds.length > 0 ? `, ${markedRunIds.length} selected` : "";
       if (scopedSession) {
-        sectionTitle = showArchivedRuns ? `Session Runs[${scopedSession.metadata.name}: ${visibleRuns.length} archived${selectedSuffix}]` : `Session Runs[${scopedSession.metadata.name}: ${visibleRuns.length}${selectedSuffix}]`;
+        sectionTitle = showArchivedRuns ? `Agent Runs[${scopedSession.metadata.name}: ${visibleRuns.length} archived${selectedSuffix}]` : `Agent Runs[${scopedSession.metadata.name}: ${visibleRuns.length}${selectedSuffix}]`;
       } else {
         sectionTitle = showArchivedRuns ? `Runs[${visibleRuns.length} archived${selectedSuffix}]` : `Runs[${visibleRuns.length}${selectedSuffix}]`;
       }
@@ -26571,7 +27098,15 @@ function HomeView({ apiUrl, notice, returnToSession }) {
         activeProject && /* @__PURE__ */ jsx14(KV, { label: "Org", value: activeProject.organizationName }),
         activeProject && /* @__PURE__ */ jsx14(KV, { label: "Project", value: activeProject.projectName }),
         activeProject && /* @__PURE__ */ jsx14(KV, { label: "Role", value: activeProject.role }),
-        selectedSession && /* @__PURE__ */ jsx14(KV, { label: "Session", value: selectedSession.metadata.name }),
+        selectedSession && /* @__PURE__ */ jsx14(KV, { label: "Agent", value: selectedSession.metadata.name }),
+        selectedAgentAuthoringStatus && /* @__PURE__ */ jsx14(
+          KV,
+          {
+            label: "Authoring",
+            value: agentAuthoringHeaderLabel(selectedAgentAuthoringStatus),
+            color: selectedAgentAuthoringStatus.ok ? void 0 : "red"
+          }
+        ),
         runError && /* @__PURE__ */ jsx14(KV, { label: "Error", value: runError, color: "red" }),
         isRunMutationPending && /* @__PURE__ */ jsx14(
           KV,
@@ -26720,7 +27255,8 @@ function HomeView({ apiUrl, notice, returnToSession }) {
           {
             sessions,
             selectedIndex: sessionIndex,
-            error: sessionsErrorMessage
+            error: sessionsErrorMessage,
+            authoringStatuses: localAgentAuthoringStatuses
           }
         ) : activeSection === "serviceAccounts" ? isServiceAccountsLoading ? /* @__PURE__ */ jsx14(Box13, { padding: 2, children: /* @__PURE__ */ jsx14(Spinner, { label: "loading service accounts\u2026" }) }) : /* @__PURE__ */ jsxs12(Box13, { flexDirection: "column", flexGrow: 1, children: [
           serviceAccountInputMode === "create" && /* @__PURE__ */ jsxs12(Box13, { paddingX: 2, gap: 1, children: [
@@ -27039,6 +27575,7 @@ var init_HomeView = __esm({
   "src/tui/HomeView.tsx"() {
     "use strict";
     init_src();
+    init_authoring();
     init_login();
     init_base_url();
     init_browser();
@@ -27746,8 +28283,8 @@ async function startGitCredentialRelay(input) {
     update: (next) => {
       target = { url: next.url, accessToken: next.accessToken };
     },
-    close: () => new Promise((resolve2) => {
-      server.close(() => resolve2());
+    close: () => new Promise((resolve3) => {
+      server.close(() => resolve3());
     })
   };
 }
@@ -28170,12 +28707,12 @@ async function runAgentBridgeSocket(options) {
   let handler = null;
   const reconnectLoop = createReconnectLoop(socket);
   let hasConnected = false;
-  await new Promise((resolve2, reject) => {
+  await new Promise((resolve3, reject) => {
     const shutdown = () => {
       reconnectLoop.stop();
       handler?.shutdown?.();
       socket.disconnect();
-      resolve2();
+      resolve3();
     };
     process.once("SIGINT", shutdown);
     process.once("SIGTERM", shutdown);
@@ -28358,7 +28895,7 @@ function createRuntimeBridgeBootstrapListener(input) {
   };
 }
 function emitOutputWithAck(socket, output) {
-  return new Promise((resolve2, reject) => {
+  return new Promise((resolve3, reject) => {
     socket.timeout(5e3).emit(
       RUNTIME_BRIDGE_OUTPUT_EVENT,
       output,
@@ -28378,7 +28915,7 @@ function emitOutputWithAck(socket, output) {
           );
           return;
         }
-        resolve2(ack.data);
+        resolve3(ack.data);
       }
     );
   });
@@ -29121,8 +29658,8 @@ var AsyncMessageQueue = class {
     if (this.closed) {
       return Promise.resolve({ done: true, value: void 0 });
     }
-    return new Promise((resolve2) => {
-      this.waiters.push(resolve2);
+    return new Promise((resolve3) => {
+      this.waiters.push(resolve3);
     });
   }
 };
@@ -29386,13 +29923,13 @@ var ClaudeCodeCommandHandler = class {
     this.input.writeOutput?.(
       `agent_bridge_question_pending tool_use_id=${toolUseId}`
     );
-    return new Promise((resolve2) => {
-      this.pendingQuestions.set(toolUseId, { input: toolInput, resolve: resolve2 });
+    return new Promise((resolve3) => {
+      this.pendingQuestions.set(toolUseId, { input: toolInput, resolve: resolve3 });
       options.signal.addEventListener(
         "abort",
         () => {
           if (this.pendingQuestions.delete(toolUseId)) {
-            resolve2({
+            resolve3({
               behavior: "deny",
               message: "The question was cancelled before the user answered",
               toolUseID: toolUseId
@@ -30041,7 +30578,7 @@ async function activeGrantIds(input) {
   );
 }
 async function waitForNewGrant(input, knownGrantIds) {
-  const sleep3 = input.sleep ?? ((ms) => new Promise((resolve2) => setTimeout(resolve2, ms)));
+  const sleep3 = input.sleep ?? ((ms) => new Promise((resolve3) => setTimeout(resolve3, ms)));
   const now3 = input.now ?? Date.now;
   const deadline = now3() + (input.pollTimeoutMs ?? POLL_TIMEOUT_MS);
   while (now3() < deadline) {
@@ -30738,13 +31275,13 @@ function registerDeleteCommands(program, context) {
 
 // src/commands/describe/actions.ts
 init_resources3();
-import { stringify } from "yaml";
+import { stringify as stringify2 } from "yaml";
 async function inspectResource(input) {
   const request = parseProjectResourceReference(input.resource);
   const resource = await requireProjectResource(input.client, request, {
     apiBaseUrl: input.commandOptions.apiBaseUrl
   });
-  input.writeOutput(stringify(resource.spec).trimEnd());
+  input.writeOutput(stringify2(resource.spec).trimEnd());
 }
 
 // src/commands/describe/commands.ts
@@ -30881,7 +31418,7 @@ var humanQuickstartText = `Get started with auto:
   1. auto auth login          sign in (device flow; account setup in browser)
   2. auto connections list    see available providers; auto connect <provider>
   3. auto apply               apply .auto/ resources to your project
-  4. auto run <session>       launch a session run; add --attach to follow it
+  4. auto run <agent>         launch an agent run; add --attach to follow it
 
 Fastest path: paste this into a coding agent running in your repo
 (Claude Code, Cursor, Codex):
@@ -30895,7 +31432,7 @@ Docs and help: auto --help
 `;
 
 // src/commands/onboard/skill-content.generated.ts
-var onboardingSkillMarkdown = "# Intent\n\nYou are onboarding a user onto auto. Achieve three goals, in roughly this order, as rapidly as the user's pace allows:\n\n1. **Educate** \u2014 teach the user what auto is and how it works, and get them genuinely excited about it.\n2. **Magic moment** \u2014 get a tailor-made, deployed, proactive workflow live that solves a *real* problem for them, and have them witness it working end to end.\n3. **Self-sufficiency** \u2014 leave them with the building blocks (mental model, CI/CD, a self-improvement loop) to iterate on their auto system rapidly and safely on their own.\n\n# Background\n\n**What is auto?**\n\nauto lets you program software factories the same way you program CI/CD.\n\nCompose agents and triggers into workflows using simple YAML files, and deploy them into the cloud on merge.\n\nYou can use auto to build simple (but effective) automations:\n\n- Ticket / feedback triage and resolution\n- Automated incident / bug response\n- Custom tailored code review agents\n\nYou can also use auto to push the frontier of agentic labor:\n\n- Organized fleets of agents on long-horizon tasks\n- Multi-agent autoresearch / optimization loops\n- Agentic BDR and outbound lead engines\n- \u221E more ideas we've yet to dream up\n\nAnything that can be described in a standard operating procedure can be translated into a \"chart\" of agents and triggers in auto \u2014 the only limit is your imagination.\n\n# Reference material\n\nThis skill ships with documentation and worked examples. Read them before you onboard anyone; cite and copy from them as you go.\n\n| Path | What it covers |\n| --- | --- |\n| `docs/index.md` | The mental model: resources, events, triggers, runs. Start here. |\n| `docs/resource-model.md` | The `.auto/` directory, resource envelopes, and `auto apply` semantics. |\n| `docs/sessions-and-triggers.md` | Sessions, the trigger/event/routing vocabulary, filters, and PR checks. |\n| `docs/environments-and-profiles.md` | Sandbox images, setup steps and caching, and reusable agent profiles. |\n| `docs/tools-and-connections.md` | MCP tools, chat tools, provider connections, secrets, and the runtime tool surface agents see. |\n| `docs/cli.md` | The `auto` CLI command reference. |\n| `docs/ci-cd.md` | Service accounts and GitHub Actions for apply-on-merge. |\n| `examples/index.md` | Prose outline of every example \u2014 read this to know what's on the shelf. |\n| `examples/` | Complete, copyable `.auto/` directories \u2014 one per workflow archetype, each with a README explaining the moving parts. |\n\nIf these relative paths are not available (for example this playbook was printed by `auto onboard --agent` rather than installed as a skill directory), fetch the same content from the skills mirror: `npx skills add auto-dot-sh/skills`, or browse https://github.com/auto-dot-sh/skills.\n\n# Operating principles\n\nHold these throughout the onboarding:\n\n- **Trust live command output over this document.** The CLI evolves; run `auto --help` early and whenever in doubt, and when a command's real output disagrees with anything written here, trust the command output over this document and adapt.\n- **Converse, don't lecture.** Short messages, one question at a time, and adapt your vocabulary to the user's technical level. The pitch should take seconds, not paragraphs.\n- **Ask before changing anything outside `.auto/`.** The onboarding's write surface is the `.auto/` directory (plus the CI workflow in Beat 7, which ships as a PR). Any other file in the user's repo gets touched only with their explicit go-ahead.\n- **Warn before browsers open, and surface the link either way.** `auto auth login`, `auto connect`, and `auto sessions connect` open a browser window *and* print the authorization URL. Give a one-sentence heads-up first (\"this will open your browser to install the GitHub App\") so it doesn't feel like something hijacked their machine. If the browser doesn't pop (some environments can't open one), don't leave the user hunting through command output \u2014 repeat the printed authorization URL back to them on its own line as a clickable fallback, one provider at a time, and tell them plainly to click it.\n- **Signal before going quiet.** Deep repo exploration and waiting on async runs both involve silence. Say what you're about to do and roughly how long it will take.\n- **Enlist the user as the second pair of hands.** They trigger the inputs you can't (tagging a bot in Slack, commenting on a PR) and verify the outputs you can't see (a Slack message arriving). Make those asks explicit and specific.\n- **Hand off, don't hint.** When the user needs to do something, spell it out the *first* time \u2014 before they have to ask. Name the exact trigger (which label, which channel, which command), where to click, and what they'll see when it works. \"Label the issue whenever you're ready\" assumes they can see what's in your head and the YAML you wrote; a numbered \"in Linear: create an issue \u2192 add the `auto-triage` label \u2192 that label is the trigger\" does not. If you catch yourself about to post a one-line \"go ahead and \u2026\", expand it.\n- **Set expectations once, then stay quiet.** When you start watching an async run, tell the user up front roughly how long it takes and what \"normal\" looks like (\"the coder run provisions a sandbox first \u2014 expect a quiet couple of minutes\"), then hold until something *they'd care about* changes. Don't narrate every monitor tick or re-report the same event from a second watcher \u2014 a stream of \"still queued / still running / no news\" reads as noise, not reassurance.\n- **Expect trouble; own the troubleshooting.** OAuth flows fail, secrets get mistyped, webhooks misfire. When something breaks, diagnose it with the CLI (`auto runs list`, `auto runs show`, `auto runs conversation`, `auto apply --dry-run`) rather than asking the user to debug.\n- **Asynchronous means asynchronous.** Triggered runs take time to spawn and act. Tell the user when a wait is expected, and tail run state rather than declaring failure early.\n- **Never fabricate success.** Verify each step actually worked (the apply plan, the trigger receipt, the run conversation) before telling the user it did.\n- **Celebrate real wins.** When a workflow completes end to end for the first time, mark the moment \u2014 emoji, a pun, a little flourish. This should feel fun.\n\n# Procedure\n\nWork through the following beats in order. They are a roadmap, not a script \u2014 skip or reorder when the user's situation clearly calls for it (for example, a user who already has an account and connections can jump straight to Beat 3).\n\n## Beat 0: Learn auto\n\nBefore talking to the user, make sure you have a working command of the system: read `docs/index.md` for the mental model, skim the rest of `docs/`, and look through `examples/` to internalize what complete workflows look like. You will be drawing on the examples heavily in Beats 3-5.\n\n## Beat 1: Establish rapport\n\n**Your very first message after launching is a plain-language pitch, not a form.** Two or three sentences on what auto is and where it's valuable, then *one* opening question. Do **not** open with `AskUserQuestion` or a multiple-choice menu \u2014 that skips the *Educate* goal and makes the onboarding feel like a config wizard. Lead with words; reach for `AskUserQuestion` only once you're past the pitch and genuinely offering discrete choices (e.g. the hero workflow in Beat 3).\n\nAfter the pitch, shift into lightly interviewing the user. You want to learn:\n\n1. **Who they are and their professional context.**\n   - Hobbyist, or evaluating auto for a real business?\n   - How technical are they? Engineer, or a more managerial / operational role?\n2. **Where the work that matters most to them happens.**\n   - Do they have a GitHub account / organization? Is there a repo that would make a good home for their auto system \u2014 better yet, are you running inside it right now?\n   - Do they work out of Slack day-to-day, and could they install auto there?\n   - What else is in their operating loop? Linear, Datadog, Sentry, PostHog, Notion, Telegram, internal webhooks, and so on.\n\nKeep this light \u2014 a few questions, not a survey. You're gathering enough signal to propose workflows that will land.\n\n## Beat 2: Get up to speed\n\nIf you are running inside a repo the user has indicated is their focus, tell them you're going to explore it for a few minutes (and that you'll go quiet while a research agent reads the repo) \u2014 then **dispatch a subagent to do the deep read in parallel** rather than reading file-by-file in the main thread. This keeps the conversation responsive and your own context clean, and it forces real exploration instead of leaning on whatever `CLAUDE.md` / `AGENTS.md` happened to load.\n\nSpawn one general-purpose / Explore subagent (or a small fan-out of them for a large monorepo) and have it read **both**:\n\n- **The repo:** what the project does, how the team works (CI, review culture, issue-tracker and chat integrations), the conventions written down in `CLAUDE.md`/`AGENTS.md`/`docs/`, and \u2014 most importantly \u2014 where the recurring, automatable toil is.\n- **This skill's `docs/` and `examples/`**, so the ideas it returns are already expressed in auto's vocabulary (sessions, triggers, profiles) and mapped to a concrete archetype.\n\nHave the subagent return a structured shortlist: for each candidate workflow, a one-line description, the matching archetype, the trigger/event that would fire it, and the *specific evidence in this repo* that the toil is real (a file, a workflow, a documented rule, a past incident). That shortlist is the raw material for Beat 3.\n\nWhen the agent returns, don't just move on \u2014 **surface 1-2 concrete observations to the user** (\"you renumber migrations by hand and a missed renumber caused a prod outage; your `postman/collection.json` updates are marked NOT OPTIONAL\") so they see the exploration paid off and trust that your pitches are grounded in *their* code. If `CLAUDE.md` already told you something, say so and confirm it against the repo rather than presenting it as discovery.\n\n## Beat 3: Present some options\n\nCombine what you know about the user, their goals, and their codebase, and brainstorm at least three workflows they could deploy *today*. Anchor on the archetypes in `examples/index.md` \u2014 code review, issue triage, incident response, chat assistant, scheduled digest, an orchestrated agent fleet, a research/optimization loop, an outbound lead engine \u2014 but tailor each pitch to their actual stack and pain points (\"a review agent that enforces *your* `docs/style.md`\", not \"a code review bot\"). The archetypes are anchors, not a menu: if the user's situation suggests a useful workflow that matches none of them, it is absolutely fair game \u2014 pitch it. Calibrate ambition to the user: the simple automations land the magic moment fastest, while the frontier examples (fleet, research loop) make better second acts unless the user is clearly hungry for them.\n\nPresent the options as a question, one line each on what the workflow would do for them, and let them pick \u2014 including the option to propose their own idea instead. The winner becomes the hero use case.\n\n## Beat 4: Setup & smoke test\n\nGet the user from zero to a deployed, *hollow* version of the hero workflow \u2014 a shell that proves every input and output is wired up before you invest in the real logic. In practice:\n\n1. **Install the CLI**: `npm install -g @autohq/cli` (requires Node 20+). Verify with `auto --version`.\n2. **Sign in**: `auto auth login` (heads-up: opens a browser; account creation happens there too). You're blocked on the user completing the flow either way, so wait for them \u2014 don't busy yourself with other work mid-sign-in, which only confuses things. When you're driving from a terminal with no browser, `auto auth login --device` prints a code the user enters in their browser.\n3. **Create the org and project**: `auto orgs create` / `auto projects create`. Ask the user what they want to name them \u2014 don't pick names for them.\n4. **Connect providers**: `auto connections list --available` to see what's offered, then `auto connect <provider>` for each one the workflow needs (heads-up: browser again). GitHub connects as an App installation; Slack and Linear as OAuth grants.\n5. **Scaffold `.auto/`**: create the directory in their repo and draft the minimal resources \u2014 an environment, a profile, any tool definitions, and a session with the workflow's trigger. Copy from the matching example and strip it down.\n6. **Apply**: `auto apply --dry-run` first, show the user the plan, then `auto apply`.\n\nThen run the smoke test. Its exact shape depends on the use case, but the goal is always the same: verify that the trigger fires and the agent's output surfaces reach the user. A workflow almost always involves some communication channel, so a good smoke test \"breaks the fourth wall\" \u2014 have the hollow agent send the user a hello in Slack (or wherever they live).\n\nEnlist the user, and **hand off, don't hint** (see the operating principle): when you ask them to fire the input only they can fire, give the full, numbered steps the first time \u2014 *which* label on *which* issue, *which* channel to create, the exact command to run, and what they'll see when it lands. Don't post \"go ahead and label the issue\" and assume they know a label is the trigger; that one-liner is what makes a user ask \"wait, what exactly do I do?\". Right after `auto apply`, before you start watching, tell them in plain words what just deployed and what their next action is. Then **set expectations once** \u2014 \"the run takes a minute or two to spawn; I'll tell you when it acts\" \u2014 and watch progress yourself with `auto runs list` and `auto attach <run-id>` (live stream; `auto runs conversation <run-id>` for a snapshot), surfacing only meaningful changes rather than every tick. Troubleshoot until the smoke test passes.\n\nIf a channel install is blocked \u2014 for example the Slack workspace requires admin approval \u2014 don't stall the onboarding on it. Pick an output surface the user can verify without the channel (a PR comment, a GitHub check, the run transcript via `auto runs conversation`), continue the beats, and circle back to realize the channel identity once the approval lands.\n\n## Beat 5: Build the real thing\n\nWith inputs and outputs proven, flesh the workflow out to its real form in `.auto/` \u2014 the full profile instructions, the real prompt, the filters and routing that make it production-shaped. Tell the user what you're changing, then apply it.\n\nTest end to end: trigger the workflow for real, follow the run, and enlist the user again for out-of-band inputs and output verification. Iterate until you've witnessed one complete, successful run of the real workflow.\n\nThen celebrate. This is the magic moment \u2014 act like it. \u{1F389}\n\n## Beat 6: Bring the user up to speed\n\nWalk the user through what you built, piece by piece: which environment, profile, tools, session, and triggers you composed, how an event flows through them to become a run, and where each file lives in `.auto/`. Show short snippets from the actual files rather than describing them abstractly.\n\nThen ask: anything they want to dig into further, or shall we set up CI/CD?\n\n## Beat 7: Set up CI/CD\n\nMake merges to their default branch the deployment mechanism for their auto system (this is the \"program software factories like CI/CD\" promise made literal). Following `docs/ci-cd.md`:\n\n1. Create a service account: have the *user* run `auto service-account create ci-apply --preset applier` in their own terminal (and a second `--preset read-only` account for PR dry-runs if they want plan-on-PR). The token prints exactly once and goes straight into a repo secret \u2014 it must never be pasted into the conversation, and if you run the command yourself it lands in your transcript.\n2. Add a GitHub Actions workflow that runs `auto apply --dry-run` on pull requests and `auto apply` on pushes to the default branch.\n3. Tell the user exactly which secret to create where in their repo settings (the service-account token, shown once at creation).\n4. Open a PR containing `.auto/` and the new workflow, and ask the user to merge it.\n\nWhen the merge lands, verify the apply ran cleanly in Actions, and congratulate them \u2014 their factory now ships itself.\n\n## Beat 8: Set up a self-improvement loop\n\nTell the user there's one last step we've found high-leverage: a workflow that watches their auto system itself \u2014 sweeping recent runs for failures, bottlenecks, and drift, and proposing improvements. Explain that it's just another auto workflow, fully theirs to tune.\n\nIf they're in, copy `examples/self-improvement/` and tailor it to their setup (their channel, their sessions, their cadence). Since CI/CD is now live, do **not** run `auto apply` yourself \u2014 open a PR and let them merge it. That's the new normal, and modeling it is the point.\n\n## Beat 9: Conclusion\n\nTell the user they're all set: a live workflow, CI/CD for their auto system, and a loop that helps it improve. Recap in two or three lines what now exists. Offer to help them build or optimize additional workflows \u2014 Beat 3's runner-up ideas are natural next candidates.\n";
+var onboardingSkillMarkdown = "# Intent\n\nYou are onboarding a user onto auto. Achieve three goals, in roughly this order, as rapidly as the user's pace allows:\n\n1. **Educate** \u2014 teach the user what auto is and how it works, and get them genuinely excited about it.\n2. **Magic moment** \u2014 get a tailor-made, deployed, proactive workflow live that solves a *real* problem for them, and have them witness it working end to end.\n3. **Self-sufficiency** \u2014 leave them with the building blocks (mental model, CI/CD, a self-improvement loop) to iterate on their auto system rapidly and safely on their own.\n\n# Background\n\n**What is auto?**\n\nauto lets you program software factories the same way you program CI/CD.\n\nCompose agents and triggers into workflows using simple YAML files, and deploy them into the cloud on merge.\n\nYou can use auto to build simple (but effective) automations:\n\n- Ticket / feedback triage and resolution\n- Automated incident / bug response\n- Custom tailored code review agents\n\nYou can also use auto to push the frontier of agentic labor:\n\n- Organized fleets of agents on long-horizon tasks\n- Multi-agent autoresearch / optimization loops\n- Agentic BDR and outbound lead engines\n- \u221E more ideas we've yet to dream up\n\nAnything that can be described in a standard operating procedure can be translated into a \"chart\" of agents and triggers in auto \u2014 the only limit is your imagination.\n\n# Reference material\n\nThis skill ships with documentation and worked examples. Read them before you onboard anyone; cite and copy from them as you go.\n\n| Path | What it covers |\n| --- | --- |\n| `docs/index.md` | The mental model: resources, events, triggers, runs. Start here. |\n| `docs/resource-model.md` | The `.auto/` directory, resource envelopes, and `auto apply` semantics. |\n| `docs/sessions-and-triggers.md` | Agents, the trigger/event/routing vocabulary, filters, and PR checks. |\n| `docs/environments-and-profiles.md` | Sandbox images, setup steps and caching, and reusable agent profiles. |\n| `docs/tools-and-connections.md` | MCP tools, chat tools, provider connections, secrets, and the runtime tool surface agents see. |\n| `docs/cli.md` | The `auto` CLI command reference. |\n| `docs/ci-cd.md` | Service accounts and GitHub Actions for apply-on-merge. |\n| `examples/index.md` | Prose outline of every example \u2014 read this to know what's on the shelf. |\n| `examples/` | Complete, copyable `.auto/` directories \u2014 one per workflow archetype, each with a README explaining the moving parts. |\n\nIf these relative paths are not available (for example this playbook was printed by `auto onboard --agent` rather than installed as a skill directory), fetch the same content from the skills mirror: `npx skills add auto-dot-sh/skills`, or browse https://github.com/auto-dot-sh/skills.\n\n# Operating principles\n\nHold these throughout the onboarding:\n\n- **Trust live command output over this document.** The CLI evolves; run `auto --help` early and whenever in doubt, and when a command's real output disagrees with anything written here, trust the command output over this document and adapt.\n- **Converse, don't lecture.** Short messages, one question at a time, and adapt your vocabulary to the user's technical level. The pitch should take seconds, not paragraphs.\n- **Ask before changing anything outside `.auto/`.** The onboarding's write surface is the `.auto/` directory (plus the CI workflow in Beat 7, which ships as a PR). Any other file in the user's repo gets touched only with their explicit go-ahead.\n- **Warn before browsers open, and surface the link either way.** `auto auth login`, `auto connect`, and `auto agents connect` open a browser window *and* print the authorization URL. Give a one-sentence heads-up first (\"this will open your browser to install the GitHub App\") so it doesn't feel like something hijacked their machine. If the browser doesn't pop (some environments can't open one), don't leave the user hunting through command output \u2014 repeat the printed authorization URL back to them on its own line as a clickable fallback, one provider at a time, and tell them plainly to click it.\n- **Signal before going quiet.** Deep repo exploration and waiting on async runs both involve silence. Say what you're about to do and roughly how long it will take.\n- **Enlist the user as the second pair of hands.** They trigger the inputs you can't (tagging a bot in Slack, commenting on a PR) and verify the outputs you can't see (a Slack message arriving). Make those asks explicit and specific.\n- **Hand off, don't hint.** When the user needs to do something, spell it out the *first* time \u2014 before they have to ask. Name the exact trigger (which label, which channel, which command), where to click, and what they'll see when it works. \"Label the issue whenever you're ready\" assumes they can see what's in your head and the YAML you wrote; a numbered \"in Linear: create an issue \u2192 add the `auto-triage` label \u2192 that label is the trigger\" does not. If you catch yourself about to post a one-line \"go ahead and \u2026\", expand it.\n- **Set expectations once, then stay quiet.** When you start watching an async run, tell the user up front roughly how long it takes and what \"normal\" looks like (\"the coder run provisions a sandbox first \u2014 expect a quiet couple of minutes\"), then hold until something *they'd care about* changes. Don't narrate every monitor tick or re-report the same event from a second watcher \u2014 a stream of \"still queued / still running / no news\" reads as noise, not reassurance.\n- **Expect trouble; own the troubleshooting.** OAuth flows fail, secrets get mistyped, webhooks misfire. When something breaks, diagnose it with the CLI (`auto runs list`, `auto runs show`, `auto runs conversation`, `auto apply --dry-run`) rather than asking the user to debug.\n- **Asynchronous means asynchronous.** Triggered runs take time to spawn and act. Tell the user when a wait is expected, and tail run state rather than declaring failure early.\n- **Never fabricate success.** Verify each step actually worked (the apply plan, the trigger receipt, the run conversation) before telling the user it did.\n- **Celebrate real wins.** When a workflow completes end to end for the first time, mark the moment \u2014 emoji, a pun, a little flourish. This should feel fun.\n\n# Procedure\n\nWork through the following beats in order. They are a roadmap, not a script \u2014 skip or reorder when the user's situation clearly calls for it (for example, a user who already has an account and connections can jump straight to Beat 3).\n\n## Beat 0: Learn auto\n\nBefore talking to the user, make sure you have a working command of the system: read `docs/index.md` for the mental model, skim the rest of `docs/`, and look through `examples/` to internalize what complete workflows look like. You will be drawing on the examples heavily in Beats 3-5.\n\n## Beat 1: Establish rapport\n\n**Your very first message after launching is a plain-language pitch, not a form.** Two or three sentences on what auto is and where it's valuable, then *one* opening question. Do **not** open with `AskUserQuestion` or a multiple-choice menu \u2014 that skips the *Educate* goal and makes the onboarding feel like a config wizard. Lead with words; reach for `AskUserQuestion` only once you're past the pitch and genuinely offering discrete choices (e.g. the hero workflow in Beat 3).\n\nAfter the pitch, shift into lightly interviewing the user. You want to learn:\n\n1. **Who they are and their professional context.**\n   - Hobbyist, or evaluating auto for a real business?\n   - How technical are they? Engineer, or a more managerial / operational role?\n2. **Where the work that matters most to them happens.**\n   - Do they have a GitHub account / organization? Is there a repo that would make a good home for their auto system \u2014 better yet, are you running inside it right now?\n   - Do they work out of Slack day-to-day, and could they install auto there?\n   - What else is in their operating loop? Linear, Datadog, Sentry, PostHog, Notion, Telegram, internal webhooks, and so on.\n\nKeep this light \u2014 a few questions, not a survey. You're gathering enough signal to propose workflows that will land.\n\n## Beat 2: Get up to speed\n\nIf you are running inside a repo the user has indicated is their focus, tell them you're going to explore it for a few minutes (and that you'll go quiet while a research agent reads the repo) \u2014 then **dispatch a subagent to do the deep read in parallel** rather than reading file-by-file in the main thread. This keeps the conversation responsive and your own context clean, and it forces real exploration instead of leaning on whatever `CLAUDE.md` / `AGENTS.md` happened to load.\n\nSpawn one general-purpose / Explore subagent (or a small fan-out of them for a large monorepo) and have it read **both**:\n\n- **The repo:** what the project does, how the team works (CI, review culture, issue-tracker and chat integrations), the conventions written down in `CLAUDE.md`/`AGENTS.md`/`docs/`, and \u2014 most importantly \u2014 where the recurring, automatable toil is.\n- **This skill's `docs/` and `examples/`**, so the ideas it returns are already expressed in auto's vocabulary (agents, triggers, profiles) and mapped to a concrete archetype.\n\nHave the subagent return a structured shortlist: for each candidate workflow, a one-line description, the matching archetype, the trigger/event that would fire it, and the *specific evidence in this repo* that the toil is real (a file, a workflow, a documented rule, a past incident). That shortlist is the raw material for Beat 3.\n\nWhen the agent returns, don't just move on \u2014 **surface 1-2 concrete observations to the user** (\"you renumber migrations by hand and a missed renumber caused a prod outage; your `postman/collection.json` updates are marked NOT OPTIONAL\") so they see the exploration paid off and trust that your pitches are grounded in *their* code. If `CLAUDE.md` already told you something, say so and confirm it against the repo rather than presenting it as discovery.\n\n## Beat 3: Present some options\n\nCombine what you know about the user, their goals, and their codebase, and brainstorm at least three workflows they could deploy *today*. Anchor on the archetypes in `examples/index.md` \u2014 code review, issue triage, incident response, chat assistant, scheduled digest, an orchestrated agent fleet, a research/optimization loop, an outbound lead engine \u2014 but tailor each pitch to their actual stack and pain points (\"a review agent that enforces *your* `docs/style.md`\", not \"a code review bot\"). The archetypes are anchors, not a menu: if the user's situation suggests a useful workflow that matches none of them, it is absolutely fair game \u2014 pitch it. Calibrate ambition to the user: the simple automations land the magic moment fastest, while the frontier examples (fleet, research loop) make better second acts unless the user is clearly hungry for them.\n\nPresent the options as a question, one line each on what the workflow would do for them, and let them pick \u2014 including the option to propose their own idea instead. The winner becomes the hero use case.\n\n## Beat 4: Setup & smoke test\n\nGet the user from zero to a deployed, *hollow* version of the hero workflow \u2014 a shell that proves every input and output is wired up before you invest in the real logic. In practice:\n\n1. **Install the CLI**: `npm install -g @autohq/cli` (requires Node 20+). Verify with `auto --version`.\n2. **Sign in**: `auto auth login` (heads-up: opens a browser; account creation happens there too). You're blocked on the user completing the flow either way, so wait for them \u2014 don't busy yourself with other work mid-sign-in, which only confuses things. When you're driving from a terminal with no browser, `auto auth login --device` prints a code the user enters in their browser.\n3. **Create the org and project**: `auto orgs create` / `auto projects create`. Ask the user what they want to name them \u2014 don't pick names for them.\n4. **Connect providers**: `auto connections list --available` to see what's offered, then `auto connect <provider>` for each one the workflow needs (heads-up: browser again). GitHub connects as an App installation; Slack and Linear as OAuth grants.\n5. **Scaffold `.auto/`**: create the directory in their repo and draft the minimal resources \u2014 an environment, a profile, any tool definitions, and an agent with the workflow's trigger. Copy from the matching example and strip it down.\n6. **Apply**: `auto apply --dry-run` first, show the user the plan, then `auto apply`.\n\nThen run the smoke test. Its exact shape depends on the use case, but the goal is always the same: verify that the trigger fires and the agent's output surfaces reach the user. A workflow almost always involves some communication channel, so a good smoke test \"breaks the fourth wall\" \u2014 have the hollow agent send the user a hello in Slack (or wherever they live).\n\nEnlist the user, and **hand off, don't hint** (see the operating principle): when you ask them to fire the input only they can fire, give the full, numbered steps the first time \u2014 *which* label on *which* issue, *which* channel to create, the exact command to run, and what they'll see when it lands. Don't post \"go ahead and label the issue\" and assume they know a label is the trigger; that one-liner is what makes a user ask \"wait, what exactly do I do?\". Right after `auto apply`, before you start watching, tell them in plain words what just deployed and what their next action is. Then **set expectations once** \u2014 \"the run takes a minute or two to spawn; I'll tell you when it acts\" \u2014 and watch progress yourself with `auto runs list` and `auto attach <run-id>` (live stream; `auto runs conversation <run-id>` for a snapshot), surfacing only meaningful changes rather than every tick. Troubleshoot until the smoke test passes.\n\nIf a channel install is blocked \u2014 for example the Slack workspace requires admin approval \u2014 don't stall the onboarding on it. Pick an output surface the user can verify without the channel (a PR comment, a GitHub check, the run transcript via `auto runs conversation`), continue the beats, and circle back to realize the channel identity once the approval lands.\n\n## Beat 5: Build the real thing\n\nWith inputs and outputs proven, flesh the workflow out to its real form in `.auto/` \u2014 the full profile instructions, the real prompt, the filters and routing that make it production-shaped. Tell the user what you're changing, then apply it.\n\nTest end to end: trigger the workflow for real, follow the run, and enlist the user again for out-of-band inputs and output verification. Iterate until you've witnessed one complete, successful run of the real workflow.\n\nThen celebrate. This is the magic moment \u2014 act like it. \u{1F389}\n\n## Beat 6: Bring the user up to speed\n\nWalk the user through what you built, piece by piece: which environment, profile, tools, agent, and triggers you composed, how an event flows through them to become a run, and where each file lives in `.auto/`. Show short snippets from the actual files rather than describing them abstractly.\n\nThen ask: anything they want to dig into further, or shall we set up CI/CD?\n\n## Beat 7: Set up CI/CD\n\nMake merges to their default branch the deployment mechanism for their auto system (this is the \"program software factories like CI/CD\" promise made literal). Following `docs/ci-cd.md`:\n\n1. Create a service account: have the *user* run `auto service-account create ci-apply --preset applier` in their own terminal (and a second `--preset read-only` account for PR dry-runs if they want plan-on-PR). The token prints exactly once and goes straight into a repo secret \u2014 it must never be pasted into the conversation, and if you run the command yourself it lands in your transcript.\n2. Add a GitHub Actions workflow that runs `auto apply --dry-run` on pull requests and `auto apply` on pushes to the default branch.\n3. Tell the user exactly which secret to create where in their repo settings (the service-account token, shown once at creation).\n4. Open a PR containing `.auto/` and the new workflow, and ask the user to merge it.\n\nWhen the merge lands, verify the apply ran cleanly in Actions, and congratulate them \u2014 their factory now ships itself.\n\n## Beat 8: Set up a self-improvement loop\n\nTell the user there's one last step we've found high-leverage: a workflow that watches their auto system itself \u2014 sweeping recent runs for failures, bottlenecks, and drift, and proposing improvements. Explain that it's just another auto workflow, fully theirs to tune.\n\nIf they're in, copy `examples/self-improvement/` and tailor it to their setup (their channel, their agents, their cadence). Since CI/CD is now live, do **not** run `auto apply` yourself \u2014 open a PR and let them merge it. That's the new normal, and modeling it is the point.\n\n## Beat 9: Conclusion\n\nTell the user they're all set: a live workflow, CI/CD for their auto system, and a loop that helps it improve. Recap in two or three lines what now exists. Offer to help them build or optimize additional workflows \u2014 Beat 3's runner-up ideas are natural next candidates.\n";
 
 // src/commands/onboard/commands.ts
 function registerOnboardCommands(program, context) {
@@ -31421,13 +31958,13 @@ function delay(ms, signal) {
   if (signal.aborted) {
     return Promise.resolve();
   }
-  return new Promise((resolve2) => {
-    const timeout = setTimeout(resolve2, ms);
+  return new Promise((resolve3) => {
+    const timeout = setTimeout(resolve3, ms);
     signal.addEventListener(
       "abort",
       () => {
         clearTimeout(timeout);
-        resolve2();
+        resolve3();
       },
       { once: true }
     );
@@ -31452,11 +31989,11 @@ function pollUntilFailed(input) {
   input.abort?.addEventListener("abort", cancel, { once: true });
   const done = (async () => {
     while (!cancelled) {
-      await new Promise((resolve2) => {
-        sleepResolve = resolve2;
+      await new Promise((resolve3) => {
+        sleepResolve = resolve3;
         activeSleep = setTimeout(() => {
           activeSleep = void 0;
-          resolve2();
+          resolve3();
         }, interval);
       });
       if (cancelled) {
@@ -31793,7 +32330,7 @@ function delay2(ms) {
   if (ms <= 0) {
     return Promise.resolve();
   }
-  return new Promise((resolve2) => setTimeout(resolve2, ms));
+  return new Promise((resolve3) => setTimeout(resolve3, ms));
 }
 function createDiagnosticCollector(limit) {
   const events = [];
@@ -32191,9 +32728,9 @@ function entryPreview(event, full) {
       case "text":
         return part.text;
       case "tool_call":
-        return `${part.name} ${stringify3(part.input)}`;
+        return `${part.name} ${stringify4(part.input)}`;
       case "tool_result":
-        return stringify3(part.output);
+        return stringify4(part.output);
       case "question":
         return part.questions.map((question) => question.question).join(" ");
       default:
@@ -32204,9 +32741,9 @@ function entryPreview(event, full) {
   return full ? joined : clip(joined);
 }
 function preview(value) {
-  return clip(singleLine(stringify3(value)));
+  return clip(singleLine(stringify4(value)));
 }
-function stringify3(value) {
+function stringify4(value) {
   return typeof value === "string" ? value : JSON.stringify(value);
 }
 function singleLine(text) {
@@ -32221,7 +32758,7 @@ function collect(value, previous = []) {
   return [...previous, value];
 }
 function registerRunCommands(program, context) {
-  const runs = program.command("runs").description("Inspect session runs.");
+  const runs = program.command("runs").description("Inspect agent runs.");
   runs.command("list").description("List runs for a session or the whole project.").option("--session <name>", "session name").option("--include-archived", "include archived runs").option("--status <status>", "filter by run status (repeatable)", collect).option("--since <iso-timestamp>", "only runs created after this time").option("--limit <count>", "maximum runs to return", parsePositiveInteger).option("--api-url <url>", "Auto API base URL").option("--api-base-url <url>", "Auto API base URL").action(async (options) => {
     await handleRunsList(context, options.session, options);
   });
@@ -32291,7 +32828,7 @@ function registerRunCommands(program, context) {
   runs.command("stop").description("Stop live runs and shut down their agent sessions.").argument("<run-ids...>", "run id(s)").option("--reason <reason>", "reason recorded with the stop").option("--api-url <url>", "Auto API base URL").option("--api-base-url <url>", "Auto API base URL").action(async (runIds, commandOptions) => {
     await stopRunsAction(context, runIds, commandOptions);
   });
-  runs.command("benchmark-startup").description("Launch a session run and measure time until awaiting.").requiredOption("--session <name>", "session name").option("-m, --message <message>", "initial message for the run").option(
+  runs.command("benchmark-startup").description("Launch an agent run and measure time until awaiting.").requiredOption("--session <name>", "agent name").option("-m, --message <message>", "initial message for the run").option(
     "--interactive",
     "start without the default initial prompt unless --message is provided"
   ).option(
@@ -32313,7 +32850,7 @@ function registerRunCommands(program, context) {
   ).option("--json", "write a single JSON result object").option("--api-url <url>", "Auto API base URL").option("--api-base-url <url>", "Auto API base URL").action(async (options) => {
     await benchmarkStartupAction(context, options);
   });
-  program.command("interactive").description("Launch a session run, stream it, and send typed messages.").argument("<session>", "session name").option("-m, --message <message>", "initial message for the run").option("--api-url <url>", "Auto API base URL").option("--api-base-url <url>", "Auto API base URL").option("--operator <name>", "operator name for attach/detach messages").option(
+  program.command("interactive").description("Launch an agent run, stream it, and send typed messages.").argument("<session>", "agent name").option("-m, --message <message>", "initial message for the run").option("--api-url <url>", "Auto API base URL").option("--api-base-url <url>", "Auto API base URL").option("--operator <name>", "operator name for attach/detach messages").option(
     "--attach-message",
     "send the automated attach message after creating the run"
   ).option("--no-attach-message", "do not send the automated attach message").option("--no-detach-message", "do not send the automated detach message").action(
@@ -32651,12 +33188,57 @@ function withApiBaseUrl2(context, commandOptions) {
   };
 }
 
+// src/commands/agents/actions.ts
+init_authoring();
+import { stringify as stringify5 } from "yaml";
+function renderAgent(input) {
+  const result = compileAgent(input);
+  input.writeOutput(renderCompiledAgentYaml(result));
+}
+function compileAgent(input) {
+  const path2 = resolveAgentAuthoringPath({
+    agent: input.agent,
+    directory: input.options.directory
+  });
+  return compileAgentFile(path2);
+}
+function compileAgentCommand(input) {
+  const result = compileAgent(input);
+  input.writeOutput(
+    input.options.json ? JSON.stringify(result.resource) : stringify5(result.resource).trimEnd()
+  );
+}
+function explainAgent(input) {
+  const result = compileAgent(input);
+  input.writeOutput(
+    input.options.json ? JSON.stringify(result) : renderAgentExplain(result)
+  );
+}
+function statusAgents(input) {
+  const statuses = readLocalAgentAuthoringStatuses({
+    directory: input.options.directory
+  });
+  if (input.options.json) {
+    input.writeOutput(JSON.stringify(statuses));
+    return;
+  }
+  if (statuses.length === 0) {
+    input.writeOutput("No local agent authoring files found.");
+    return;
+  }
+  for (const status of statuses) {
+    const state = status.ok ? "ok" : "error";
+    const suffix = status.ok ? `imports=${status.imports} removals=${status.removals}` : status.error;
+    input.writeOutput(`${state} ${status.name} ${suffix}`);
+  }
+}
+
 // src/commands/sessions/connect.ts
 init_resources2();
 init_browser();
 import { existsSync as existsSync3, mkdtempSync as mkdtempSync2, writeFileSync as writeFileSync4 } from "fs";
 import { homedir as homedir3, tmpdir as tmpdir2 } from "os";
-import { join as join5 } from "path";
+import { join as join6 } from "path";
 var POLL_INTERVAL_MS2 = 2e3;
 var POLL_TIMEOUT_MS2 = 5 * 6e4;
 var SLACK_APPS_URL = "https://api.slack.com/apps";
@@ -32677,7 +33259,7 @@ async function connectSessionPresence2(input) {
   }
   for (const pending of result.pending) {
     input.writeOutput(
-      `connect session/${input.session} workspace/${pending.workspace} connection/${pending.connection}`
+      `connect agent/${input.session} workspace/${pending.workspace} connection/${pending.connection}`
     );
     input.writeOutput(`authorization_url ${pending.authorizationUrl}`);
     if (pending.suggestedUsername) {
@@ -32708,7 +33290,7 @@ async function connectSessionPresence2(input) {
     );
     return;
   }
-  const sleep3 = input.sleep ?? ((ms) => new Promise((resolve2) => setTimeout(resolve2, ms)));
+  const sleep3 = input.sleep ?? ((ms) => new Promise((resolve3) => setTimeout(resolve3, ms)));
   const openBrowser2 = input.openBrowser ?? openBrowser;
   const now3 = input.now ?? Date.now;
   const pollIntervalMs = input.pollIntervalMs ?? POLL_INTERVAL_MS2;
@@ -32738,7 +33320,7 @@ async function connectSessionPresence2(input) {
     }
     if (!realized) {
       throw new Error(
-        telegram ? `Timed out waiting for the Telegram bot to be confirmed under ${pending.workspace}. Confirm the creation dialog in Telegram, then re-run \`auto sessions connect ${input.session}\`.` : `Timed out waiting for the install in workspace ${pending.workspace}. Re-run \`auto sessions connect ${input.session}\` to retry.`
+        telegram ? `Timed out waiting for the Telegram bot to be confirmed under ${pending.workspace}. Confirm the creation dialog in Telegram, then re-run \`auto agents connect ${input.session}\`.` : `Timed out waiting for the install in workspace ${pending.workspace}. Re-run \`auto agents connect ${input.session}\` to retry.`
       );
     }
   }
@@ -32746,19 +33328,19 @@ async function connectSessionPresence2(input) {
 }
 function realizedIdentityLine(session, identity2) {
   const handle = identity2.botUsername ? `persona/@${identity2.botUsername}` : `bot/${identity2.botUserId ?? ""}`;
-  return `connected session/${session} workspace/${identity2.workspace} ${handle}`;
+  return `connected agent/${session} workspace/${identity2.workspace} ${handle}`;
 }
 function staleScopesLine(session, identity2) {
   if (!identity2.missingScopes?.length) {
     return void 0;
   }
-  return `  workspace "${identity2.workspace}" was installed before scopes ${identity2.missingScopes.join(", ")} were added; refresh with \`auto sessions connect ${session} --reconnect\``;
+  return `  workspace "${identity2.workspace}" was installed before scopes ${identity2.missingScopes.join(", ")} were added; refresh with \`auto agents connect ${session} --reconnect\``;
 }
 function manualGuidance(input) {
   if (input.allTelegram) {
-    return `Open each creation link and confirm the new bot in Telegram; Auto provisions it automatically. Re-run \`auto sessions connect ${input.session}\` (or check presence) to see it realize.`;
+    return `Open each creation link and confirm the new bot in Telegram; Auto provisions it automatically. Re-run \`auto agents connect ${input.session}\` (or check presence) to see it realize.`;
   }
-  return input.reconnect ? "Open each authorization URL to reinstall the agent app; the callback page confirms the refreshed tokens." : "Open each authorization URL to install the agent app, then re-run with no flags or check `sessions connect` again.";
+  return input.reconnect ? "Open each authorization URL to reinstall the agent app; the callback page confirms the refreshed tokens." : "Open each authorization URL to install the agent app, then re-run with no flags or check `agents connect` again.";
 }
 async function promptForIconUploads(input, options) {
   const presence = await input.client.getSessionPresence(
@@ -32775,14 +33357,14 @@ async function promptForIconUploads(input, options) {
   for (const identity2 of drifted) {
     const settingsUrl = `${SLACK_APPS_URL}/${identity2.appId}/general`;
     input.writeOutput(
-      `Workspace "${identity2.workspace}" agent app icon does not match the session avatar yet. Slack has no app-icon API; upload the avatar image once under "Display Information" at ${settingsUrl}`
+      `Workspace "${identity2.workspace}" agent app icon does not match the agent avatar yet. Slack has no app-icon API; upload the avatar image once under "Display Information" at ${settingsUrl}`
     );
     if (identity2.avatarUrl) {
       input.writeOutput(`avatar image: ${identity2.avatarUrl}`);
     }
     if (!canPrompt) {
       input.writeOutput(
-        `Then re-run \`auto sessions connect ${input.session}\` interactively to record the upload.`
+        `Then re-run \`auto agents connect ${input.session}\` interactively to record the upload.`
       );
       continue;
     }
@@ -32822,12 +33404,12 @@ async function promptForIconUploads(input, options) {
       options
     );
     input.writeOutput(
-      `recorded icon session/${input.session} workspace/${identity2.workspace} sha256/${recorded.appliedIconSha256.slice(0, 12)}`
+      `recorded icon agent/${input.session} workspace/${identity2.workspace} sha256/${recorded.appliedIconSha256.slice(0, 12)}`
     );
   }
 }
 function stagedLocationLabel(stagedPath) {
-  return stagedPath.startsWith(`${join5(homedir3(), "Downloads")}/`) ? "Downloads" : "the printed path";
+  return stagedPath.startsWith(`${join6(homedir3(), "Downloads")}/`) ? "Downloads" : "the printed path";
 }
 async function stageAvatarImage(input) {
   try {
@@ -32839,9 +33421,9 @@ async function stageAvatarImage(input) {
     }
     const contentType = response.headers.get("content-type") ?? "";
     const extension = contentType.includes("jpeg") ? ".jpg" : ".png";
-    const downloads = join5(homedir3(), "Downloads");
-    const directory = existsSync3(downloads) ? downloads : mkdtempSync2(join5(tmpdir2(), "auto-avatar-"));
-    const path2 = join5(directory, `${input.session}-avatar${extension}`);
+    const downloads = join6(homedir3(), "Downloads");
+    const directory = existsSync3(downloads) ? downloads : mkdtempSync2(join6(tmpdir2(), "auto-avatar-"));
+    const path2 = join6(directory, `${input.session}-avatar${extension}`);
     writeFileSync4(path2, Buffer.from(await response.arrayBuffer()));
     return path2;
   } catch {
@@ -32929,17 +33511,56 @@ async function launchRun(input) {
 
 // src/commands/sessions/commands.ts
 function registerSessionCommands(program, context) {
-  program.command("run").description("Launch a session run on the Auto platform.").argument("<session>", "session name").option("-m, --message <message>", "initial message for the run").option("-a, --attach", "stream the run conversation after launch").option("--api-url <url>", "Auto API base URL").option("--api-base-url <url>", "Auto API base URL").action(async (sessionName, commandOptions) => {
+  program.command("run").description("Launch an agent run on the Auto platform.").argument("<session>", "agent name").option("-m, --message <message>", "initial message for the run").option("-a, --attach", "stream the run conversation after launch").option("--api-url <url>", "Auto API base URL").option("--api-base-url <url>", "Auto API base URL").action(async (sessionName, commandOptions) => {
     await launchRun({
       sessionName,
       commandOptions,
       context
     });
   });
-  const sessions = program.command("sessions").description("Manage Session resources.");
+  const sessions = program.command("agents").alias("sessions").description("Manage Agent resources.");
+  sessions.command("render").description("Render a local Agent authoring file after imports/removals.").argument("<agent>", "agent name or path").option(
+    "--directory <directory>",
+    "directory containing Auto resource files"
+  ).action((agent, commandOptions) => {
+    renderAgent({
+      agent,
+      options: commandOptions,
+      writeOutput: context.writeOutput
+    });
+  });
+  sessions.command("compile").description("Compile a local Agent authoring file into an apply resource.").argument("<agent>", "agent name or path").option(
+    "--directory <directory>",
+    "directory containing Auto resource files"
+  ).option("--json", "print the compiled resource as JSON").action((agent, commandOptions) => {
+    compileAgentCommand({
+      agent,
+      options: commandOptions,
+      writeOutput: context.writeOutput
+    });
+  });
+  sessions.command("explain").description("Explain a local Agent authoring file's import graph.").argument("<agent>", "agent name or path").option(
+    "--directory <directory>",
+    "directory containing Auto resource files"
+  ).option("--json", "print the import graph as JSON").action((agent, commandOptions) => {
+    explainAgent({
+      agent,
+      options: commandOptions,
+      writeOutput: context.writeOutput
+    });
+  });
+  sessions.command("status").description("Validate local Agent authoring files.").option(
+    "--directory <directory>",
+    "directory containing Auto resource files"
+  ).option("--json", "print local authoring status as JSON").action((commandOptions) => {
+    statusAgents({
+      options: commandOptions,
+      writeOutput: context.writeOutput
+    });
+  });
   sessions.command("connect").description(
-    "Connect a session's provider presence (e.g. install its Slack agent app)."
-  ).argument("<session>", "session resource name").option("--manual", "print authorization URLs without opening a browser").option(
+    "Connect an agent's provider presence (e.g. install its Slack agent app)."
+  ).argument("<session>", "agent resource name").option("--manual", "print authorization URLs without opening a browser").option(
     "--reconnect",
     "re-run the install for already-connected workspaces (repairs stranded bot tokens)"
   ).option("--api-url <url>", "Auto API base URL").option("--api-base-url <url>", "Auto API base URL").action(
@@ -32955,9 +33576,7 @@ function registerSessionCommands(program, context) {
       });
     }
   );
-  program.command("run-and-attach").description(
-    "Launch a session run and immediately stream its conversation."
-  ).argument("<session>", "session name").option("-m, --message <message>", "initial message for the run").option("--api-url <url>", "Auto API base URL").option("--api-base-url <url>", "Auto API base URL").action(async (sessionName, commandOptions) => {
+  program.command("run-and-attach").description("Launch an agent run and immediately stream its conversation.").argument("<session>", "agent name").option("-m, --message <message>", "initial message for the run").option("--api-url <url>", "Auto API base URL").option("--api-base-url <url>", "Auto API base URL").action(async (sessionName, commandOptions) => {
     await launchRun({
       sessionName,
       commandOptions: {