@autohq/cli 0.1.135 → 0.1.137

package/dist/agent-bridge.js

@@ -19793,7 +19793,8 @@ var SERVICE_ACCOUNT_READ_ONLY_SCOPES = [
   "environments:read",
   "tools:read",
   "sessions:read",
-  "runs:read"
+  "runs:read",
+  "provider_grants:read"
 ];
 var SERVICE_ACCOUNT_SCOPE_PRESETS = {
   "read-only": SERVICE_ACCOUNT_READ_ONLY_SCOPES,
@@ -19801,7 +19802,8 @@ var SERVICE_ACCOUNT_SCOPE_PRESETS = {
     ...SERVICE_ACCOUNT_READ_ONLY_SCOPES,
     "environments:write",
     "tools:write",
-    "sessions:write"
+    "sessions:write",
+    "provider_grants:use"
   ]
 };
 var ServiceAccountScopePresetSchema = external_exports.enum(["read-only", "applier"]);
@@ -20623,11 +20625,18 @@ function resourceApplyDocumentSchema(kind, spec) {
 }
 
 // ../../packages/schemas/src/connections.ts
+var RESOURCE_KIND_CONNECTION = "connection";
 var ConnectionNameSchema = ResourceNameSchema;
 var ProviderConnectionReferenceSchema = external_exports.object({
   provider: ProviderNameSchema,
   connection: ConnectionNameSchema
 });
+var ProjectConnectionAllocationSpecSchema = external_exports.object({
+  provider: ProviderNameSchema
+});
+var ProjectConnectionAllocationResourceSchema = resourceEnvelopeSchema(
+  ProjectConnectionAllocationSpecSchema
+);
 var GithubConnectionAccountSchema = external_exports.object({
   login: external_exports.string().trim().min(1),
   type: external_exports.enum(["User", "Organization"])
@@ -21909,18 +21918,24 @@ var ProjectApplyResourceSchema = external_exports.preprocess(
   ])
 );
 var PROJECT_RESOURCE_APPLY_ORDER = [
-  RESOURCE_KIND_ENVIRONMENT,
+  RESOURCE_KIND_CONNECTION,
   RESOURCE_KIND_IDENTITY,
+  RESOURCE_KIND_ENVIRONMENT,
   RESOURCE_KIND_SESSION
 ];
 var PROJECT_RESOURCE_KINDS = PROJECT_RESOURCE_APPLY_ORDER;
+var PROJECT_APPLY_RESOURCE_KINDS = [
+  RESOURCE_KIND_IDENTITY,
+  RESOURCE_KIND_ENVIRONMENT,
+  RESOURCE_KIND_SESSION
+];
 var ProjectDeleteResourceBaseSchema = external_exports.object({
   name: external_exports.string().trim().min(1)
 });
 var ProjectDeleteResourceSchema = external_exports.preprocess(
   normalizeLegacySessionKind,
   ProjectDeleteResourceBaseSchema.extend({
-    kind: external_exports.enum(PROJECT_RESOURCE_KINDS)
+    kind: external_exports.enum(PROJECT_APPLY_RESOURCE_KINDS)
   })
 );
 var AVATAR_ASSET_CONTENT_TYPES = ["image/png", "image/jpeg"];
@@ -21959,6 +21974,7 @@ var ProjectApplySystemConfigSchema = external_exports.object({
   spec: ProjectApplyRequestSchema
 });
 var ProjectAppliedResourceSchema = external_exports.union([
+  ProjectConnectionAllocationResourceSchema,
   EnvironmentResourceSchema,
   IdentityResourceSchema,
   SessionResourceSchema
@@ -21970,6 +21986,7 @@ var ProjectApplyDiagnosticSchema = external_exports.object({
   message: external_exports.string().min(1),
   action: external_exports.enum(["create", "update", "unchanged"]),
   kind: external_exports.enum([
+    RESOURCE_KIND_CONNECTION,
     RESOURCE_KIND_ENVIRONMENT,
     RESOURCE_KIND_IDENTITY,
     RESOURCE_KIND_SESSION
@@ -26273,7 +26290,7 @@ Object.assign(lookup, {
 // package.json
 var package_default = {
   name: "@autohq/cli",
-  version: "0.1.135",
+  version: "0.1.137",
   license: "SEE LICENSE IN README.md",
   publishConfig: {
     access: "public"

package/dist/index.js

@@ -16191,7 +16191,8 @@ var init_auth = __esm({
       "environments:read",
       "tools:read",
       "sessions:read",
-      "runs:read"
+      "runs:read",
+      "provider_grants:read"
     ];
     SERVICE_ACCOUNT_SCOPE_PRESETS = {
       "read-only": SERVICE_ACCOUNT_READ_ONLY_SCOPES,
@@ -16199,7 +16200,8 @@ var init_auth = __esm({
         ...SERVICE_ACCOUNT_READ_ONLY_SCOPES,
         "environments:write",
         "tools:write",
-        "sessions:write"
+        "sessions:write",
+        "provider_grants:use"
       ]
     };
     ServiceAccountScopePresetSchema = external_exports.enum(["read-only", "applier"]);
@@ -17159,7 +17161,7 @@ var init_resources = __esm({
 });
 
 // ../../packages/schemas/src/connections.ts
-var ConnectionNameSchema, ProviderConnectionReferenceSchema, GithubConnectionAccountSchema, GithubConnectionRepositorySchema, GITHUB_CONNECTION_EVENTS, GithubConnectionEventSchema, GithubConnectionSpecSchema, ConnectionSpecSchema, ConnectionResourceSchema, ConnectionApplyRequestSchema, ConnectionStartRequestSchema, ConnectionProviderDescriptorSchema, ConnectionProviderListResponseSchema, ConnectionStartResponseSchema, TelegramConnectionCreateRequestSchema, TelegramManagerBotSummarySchema, TelegramConnectionCreateResponseSchema, ConnectionAllowRequestSchema, SlackConfigTokenRegisterRequestSchema, SlackConfigTokenRegisterResponseSchema, ConnectionAllowResponseSchema, ConnectionRemoveRequestSchema, ConnectionRemoveResponseSchema;
+var RESOURCE_KIND_CONNECTION, ConnectionNameSchema, ProviderConnectionReferenceSchema, ProjectConnectionAllocationSpecSchema, ProjectConnectionAllocationResourceSchema, GithubConnectionAccountSchema, GithubConnectionRepositorySchema, GITHUB_CONNECTION_EVENTS, GithubConnectionEventSchema, GithubConnectionSpecSchema, ConnectionSpecSchema, ConnectionResourceSchema, ConnectionApplyRequestSchema, ConnectionStartRequestSchema, ConnectionProviderDescriptorSchema, ConnectionProviderListResponseSchema, ConnectionStartResponseSchema, TelegramConnectionCreateRequestSchema, TelegramManagerBotSummarySchema, TelegramConnectionCreateResponseSchema, ConnectionAllowRequestSchema, SlackConfigTokenRegisterRequestSchema, SlackConfigTokenRegisterResponseSchema, ConnectionAllowResponseSchema, ConnectionRemoveRequestSchema, ConnectionRemoveResponseSchema;
 var init_connections = __esm({
   "../../packages/schemas/src/connections.ts"() {
     "use strict";
@@ -17167,11 +17169,18 @@ var init_connections = __esm({
     init_ids();
     init_provider_grants();
     init_resources();
+    RESOURCE_KIND_CONNECTION = "connection";
     ConnectionNameSchema = ResourceNameSchema;
     ProviderConnectionReferenceSchema = external_exports.object({
       provider: ProviderNameSchema,
       connection: ConnectionNameSchema
     });
+    ProjectConnectionAllocationSpecSchema = external_exports.object({
+      provider: ProviderNameSchema
+    });
+    ProjectConnectionAllocationResourceSchema = resourceEnvelopeSchema(
+      ProjectConnectionAllocationSpecSchema
+    );
     GithubConnectionAccountSchema = external_exports.object({
       login: external_exports.string().trim().min(1),
       type: external_exports.enum(["User", "Organization"])
@@ -18595,11 +18604,12 @@ function normalizeLegacySessionKind(value) {
 function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-var EnvironmentApplyDocumentSchema, IdentityApplyDocumentSchema, SessionApplyDocumentSchema, ProjectApplyResourceSchema, PROJECT_RESOURCE_APPLY_ORDER, PROJECT_RESOURCE_KINDS, ProjectDeleteResourceBaseSchema, ProjectDeleteResourceSchema, AVATAR_ASSET_CONTENT_TYPES, MAX_AVATAR_ASSET_BASE64_LENGTH, ProjectApplyAssetSchema, ProjectApplyAssetsSchema, AvatarAssetUploadRequestSchema, AvatarAssetUploadResponseSchema, ProjectApplyRequestSchema, ProjectApplySystemConfigSchema, ProjectAppliedResourceSchema, ProjectApplyDiagnosticSchema, ProjectApplyResponseResourceKindSchema, ProjectApplyResponseSchema;
+var EnvironmentApplyDocumentSchema, IdentityApplyDocumentSchema, SessionApplyDocumentSchema, ProjectApplyResourceSchema, PROJECT_RESOURCE_APPLY_ORDER, PROJECT_RESOURCE_KINDS, PROJECT_APPLY_RESOURCE_KINDS, ProjectDeleteResourceBaseSchema, ProjectDeleteResourceSchema, AVATAR_ASSET_CONTENT_TYPES, MAX_AVATAR_ASSET_BASE64_LENGTH, ProjectApplyAssetSchema, ProjectApplyAssetsSchema, AvatarAssetUploadRequestSchema, AvatarAssetUploadResponseSchema, ProjectApplyRequestSchema, ProjectApplySystemConfigSchema, ProjectAppliedResourceSchema, ProjectApplyDiagnosticSchema, ProjectApplyResponseResourceKindSchema, ProjectApplyResponseSchema;
 var init_project_resources = __esm({
   "../../packages/schemas/src/project-resources.ts"() {
     "use strict";
     init_zod();
+    init_connections();
     init_environments();
     init_identities();
     init_resources();
@@ -18625,18 +18635,24 @@ var init_project_resources = __esm({
       ])
     );
     PROJECT_RESOURCE_APPLY_ORDER = [
-      RESOURCE_KIND_ENVIRONMENT,
+      RESOURCE_KIND_CONNECTION,
       RESOURCE_KIND_IDENTITY,
+      RESOURCE_KIND_ENVIRONMENT,
       RESOURCE_KIND_SESSION
     ];
     PROJECT_RESOURCE_KINDS = PROJECT_RESOURCE_APPLY_ORDER;
+    PROJECT_APPLY_RESOURCE_KINDS = [
+      RESOURCE_KIND_IDENTITY,
+      RESOURCE_KIND_ENVIRONMENT,
+      RESOURCE_KIND_SESSION
+    ];
     ProjectDeleteResourceBaseSchema = external_exports.object({
       name: external_exports.string().trim().min(1)
     });
     ProjectDeleteResourceSchema = external_exports.preprocess(
       normalizeLegacySessionKind,
       ProjectDeleteResourceBaseSchema.extend({
-        kind: external_exports.enum(PROJECT_RESOURCE_KINDS)
+        kind: external_exports.enum(PROJECT_APPLY_RESOURCE_KINDS)
       })
     );
     AVATAR_ASSET_CONTENT_TYPES = ["image/png", "image/jpeg"];
@@ -18675,6 +18691,7 @@ var init_project_resources = __esm({
       spec: ProjectApplyRequestSchema
     });
     ProjectAppliedResourceSchema = external_exports.union([
+      ProjectConnectionAllocationResourceSchema,
       EnvironmentResourceSchema,
       IdentityResourceSchema,
       SessionResourceSchema
@@ -18686,6 +18703,7 @@ var init_project_resources = __esm({
       message: external_exports.string().min(1),
       action: external_exports.enum(["create", "update", "unchanged"]),
       kind: external_exports.enum([
+        RESOURCE_KIND_CONNECTION,
         RESOURCE_KIND_ENVIRONMENT,
         RESOURCE_KIND_IDENTITY,
         RESOURCE_KIND_SESSION
@@ -21208,7 +21226,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.135",
+      version: "0.1.137",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"
@@ -21389,7 +21407,7 @@ import { parseAllDocuments as parseYamlDocuments, stringify } from "yaml";
 function compileAgentFile(path2) {
   const context = { graph: /* @__PURE__ */ new Map(), removals: [] };
   const document = readSingleDocument(path2);
-  const compiled = normalizeAgentDocument(
+  const compiled = finalizeAgentApplyShape(
     compileAgentDocument(document, path2, [], context)
   );
   const parsed = ProjectApplyResourceSchema.safeParse(compiled);
@@ -21409,7 +21427,7 @@ function compileAgentFile(path2) {
 }
 function compileAgentDocumentValue(document, path2) {
   const context = { graph: /* @__PURE__ */ new Map(), removals: [] };
-  const compiled = normalizeAgentDocument(
+  const compiled = finalizeAgentApplyShape(
     compileAgentDocument(document, path2, [], context)
   );
   const parsed = ProjectApplyResourceSchema.safeParse(compiled);
@@ -21577,7 +21595,11 @@ function compileAgentDocument(document, path2, stack, context) {
     merged = applyRemoval(merged, removal);
     context.removals.push(removal);
   }
-  return mergeValues2(merged, sanitizedAgentDocument(document), []);
+  return mergeValues2(
+    merged,
+    authoringDocumentApplyShape(document, resolvedPath),
+    []
+  );
 }
 function readSingleDocument(path2) {
   const documents = readDocuments(path2);
@@ -21629,11 +21651,97 @@ function sanitizedAgentDocument(document) {
   }
   return next;
 }
-function normalizeAgentDocument(document) {
-  if (!isRecord2(document) || "kind" in document) {
+function authoringDocumentApplyShape(document, path2) {
+  const sanitized = sanitizedAgentDocument(document);
+  const kind = typeof sanitized.kind === "string" ? sanitized.kind : RESOURCE_KIND_SESSION;
+  const metadata = isRecord2(sanitized.metadata) ? { ...sanitized.metadata } : {};
+  const spec = isRecord2(sanitized.spec) ? { ...sanitized.spec } : {};
+  for (const [key, value] of Object.entries(sanitized)) {
+    if (key === "kind" || key === "metadata" || key === "spec" || value === void 0) {
+      continue;
+    }
+    if (AGENT_METADATA_FIELDS.has(key)) {
+      const metadataKey = key === "name" ? "name" : key;
+      assertNoDuplicateFacadeField({
+        path: path2,
+        field: key,
+        target: `metadata.${metadataKey}`,
+        targetValue: metadata[metadataKey]
+      });
+      metadata[metadataKey] = value;
+      continue;
+    }
+    if (AGENT_SPEC_FIELDS.has(key)) {
+      assertNoDuplicateFacadeField({
+        path: path2,
+        field: key,
+        target: `spec.${key}`,
+        targetValue: spec[key]
+      });
+      spec[key] = value;
+    }
+  }
+  return {
+    kind,
+    metadata,
+    spec: resolveFileBackedFields(spec, path2)
+  };
+}
+function finalizeAgentApplyShape(document) {
+  if (!isRecord2(document) || !isRecord2(document.spec)) {
     return document;
   }
-  return { ...document, kind: RESOURCE_KIND_SESSION };
+  const next = structuredClone(document);
+  const spec = next.spec;
+  if (Array.isArray(spec.triggers)) {
+    spec.triggers = spec.triggers.map((trigger) => {
+      if (!isRecord2(trigger) || !("name" in trigger)) {
+        return trigger;
+      }
+      const compiledTrigger = { ...trigger };
+      delete compiledTrigger.name;
+      return compiledTrigger;
+    });
+  }
+  return next;
+}
+function assertNoDuplicateFacadeField(input) {
+  if (input.targetValue !== void 0) {
+    throw new Error(
+      `Invalid agent authoring file ${input.path}: ${input.field} duplicates ${input.target}`
+    );
+  }
+}
+function resolveFileBackedFields(spec, path2) {
+  return {
+    ...spec,
+    systemPrompt: resolveFileBackedString(spec.systemPrompt, {
+      path: path2,
+      field: "systemPrompt"
+    }),
+    initialPrompt: resolveFileBackedString(spec.initialPrompt, {
+      path: path2,
+      field: "initialPrompt"
+    })
+  };
+}
+function resolveFileBackedString(value, input) {
+  if (!isRecord2(value) || !("file" in value)) {
+    return value;
+  }
+  const file2 = value.file;
+  if (typeof file2 !== "string" || file2.trim().length === 0) {
+    throw new Error(
+      `Invalid agent authoring file ${input.path}: ${input.field}.file must be a non-empty string`
+    );
+  }
+  const filePath = file2.trim();
+  if (isAbsolute(filePath) || /^[A-Za-z]+:\/\//.test(filePath)) {
+    throw new Error(
+      `Invalid agent authoring file ${input.path}: ${input.field}.file must be a relative path`
+    );
+  }
+  return readFileSync3(resolve(dirname4(input.path), filePath), "utf8");
 }
 function removalDirectives(document, path2) {
   const raw = mergeValues2(
@@ -21673,8 +21781,7 @@ function applyRemoval(value, removal) {
   const spec = { ...next.spec };
   next.spec = spec;
   switch (removal.target) {
-    case "tools":
-    case "env": {
+    case "tools": {
       if (!isRecord2(spec[removal.target])) {
         return next;
       }
@@ -21687,7 +21794,6 @@ function applyRemoval(value, removal) {
       spec[removal.target] = collection;
       return next;
     }
-    case "mounts":
     case "triggers": {
       const value2 = spec[removal.target];
       if (!Array.isArray(value2)) {
@@ -21703,7 +21809,7 @@ function applyRemoval(value, removal) {
     }
     default:
       throw new Error(
-        `Unsupported agent remove target "${removal.target}"; supported targets are tools, env, mounts, triggers`
+        `Unsupported agent remove target "${removal.target}"; supported targets are tools, triggers`
       );
   }
 }
@@ -21725,8 +21831,8 @@ function mergeValues2(base, override, path2) {
 }
 function mergeArrays(base, override, path2) {
   const pathKey = path2.join(".");
-  if (pathKey !== "spec.mounts" && pathKey !== "spec.triggers") {
-    return [...base, ...override];
+  if (!isNamedArrayMergePath(pathKey)) {
+    return override;
   }
   const merged = [...base];
   const indexByKey = /* @__PURE__ */ new Map();
@@ -21753,6 +21859,9 @@ function mergeArrays(base, override, path2) {
   }
   return merged;
 }
+function isNamedArrayMergePath(path2) {
+  return path2 === "spec.mounts" || path2 === "spec.triggers";
+}
 function collectionItemKey(collection, item) {
   if (!isRecord2(item)) {
     return void 0;
@@ -21789,12 +21898,25 @@ function isAgentFile(path2) {
 function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-var AGENT_FILE_EXTENSIONS;
+var AGENT_FILE_EXTENSIONS, AGENT_SPEC_FIELDS, AGENT_METADATA_FIELDS;
 var init_authoring = __esm({
   "src/commands/agents/authoring.ts"() {
     "use strict";
     init_src();
     AGENT_FILE_EXTENSIONS = [".yaml", ".yml", ".json"];
+    AGENT_SPEC_FIELDS = /* @__PURE__ */ new Set([
+      "harness",
+      "systemPrompt",
+      "environment",
+      "identity",
+      "initialPrompt",
+      "env",
+      "mounts",
+      "triggers",
+      "workingDirectory",
+      "tools"
+    ]);
+    AGENT_METADATA_FIELDS = /* @__PURE__ */ new Set(["name", "labels", "annotations"]);
   }
 });
 
@@ -21878,7 +22000,7 @@ function mcpOAuthSessionToolConnectionsFromAppliedResources(resources) {
 }
 function applyFiles(root) {
   const files = [];
-  for (const kind of PROJECT_RESOURCE_APPLY_ORDER) {
+  for (const kind of PROJECT_APPLY_RESOURCE_KINDS) {
     const kindFiles = [];
     for (const directory of applyDirectories(kind)) {
       const path2 = join4(root, directory);
@@ -22087,9 +22209,11 @@ function applyCandidate(document) {
       }
     };
   }
-  if (!PROJECT_RESOURCE_APPLY_ORDER.includes(document.kind)) {
+  if (!PROJECT_APPLY_RESOURCE_KINDS.includes(
+    document.kind
+  )) {
     throw new Error(
-      `Unsupported apply resource kind "${String(document.kind)}"; supported kinds are ${PROJECT_RESOURCE_APPLY_ORDER.map((kind2) => `"${kind2}"`).join(", ")} (legacy alias "session" is also accepted)`
+      `Unsupported apply resource kind "${String(document.kind)}"; supported kinds are ${PROJECT_APPLY_RESOURCE_KINDS.map((kind2) => `"${kind2}"`).join(", ")} (legacy alias "session" is also accepted)`
     );
   }
   const kind = document.kind;
@@ -22436,15 +22560,20 @@ function parseProjectResourceReference(resource) {
   if (!kind || !name || extra) {
     throw new Error('Resource must be formatted as "kind/name"');
   }
-  if (!PROJECT_RESOURCE_KINDS.includes(kind)) {
+  if (!PROJECT_APPLY_RESOURCE_KINDS.includes(
+    kind
+  )) {
     if (kind === LEGACY_RESOURCE_KIND_SESSION) {
       return { kind: RESOURCE_KIND_SESSION, name };
     }
     throw new Error(
-      `Unsupported resource kind "${kind}"; supported kinds are ${PROJECT_RESOURCE_KINDS.map((value) => `"${value}"`).join(", ")} (legacy alias "session" is also accepted)`
+      `Unsupported resource kind "${kind}"; supported kinds are ${PROJECT_APPLY_RESOURCE_KINDS.map((value) => `"${value}"`).join(", ")} (legacy alias "session" is also accepted)`
     );
   }
-  return { kind, name };
+  return {
+    kind,
+    name
+  };
 }
 async function listProjectResources2(client, kind, options) {
   switch (kind) {
@@ -22454,6 +22583,8 @@ async function listProjectResources2(client, kind, options) {
       return (await client.listIdentities(options)).identities;
     case RESOURCE_KIND_SESSION:
       return (await client.listSessions(options)).sessions;
+    default:
+      throw new Error(`Resource kind "${kind}" cannot be listed directly.`);
   }
 }
 async function requireProjectResource(client, reference, options) {
@@ -27828,6 +27959,9 @@ async function launch(opts) {
   }
 }
 async function refreshEditedResource(input) {
+  if (!isRefreshableResourceKind(input.kind)) {
+    return;
+  }
   const definition = RESOURCE_REFRESH_DEFINITIONS[input.kind];
   input.queryClient.setQueryData(
     definition.queryKey(input.apiUrl),
@@ -27842,6 +27976,9 @@ function sortByResourceName(resources) {
 function isEditSelection(selection) {
   return "action" in selection && selection.action === "editResource";
 }
+function isRefreshableResourceKind(kind) {
+  return kind in RESOURCE_REFRESH_DEFINITIONS;
+}
 var RESOURCE_REFRESH_DEFINITIONS;
 var init_launcher = __esm({
   "src/tui/launcher.ts"() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autohq/cli",
-  "version": "0.1.135",
+  "version": "0.1.137",
   "license": "SEE LICENSE IN README.md",
   "publishConfig": {
     "access": "public"