@autohq/cli 0.1.143 → 0.1.145

package/dist/agent-bridge.js

@@ -20782,6 +20782,44 @@ var ConnectionRemoveResponseSchema = external_exports.object({
   message: external_exports.string().trim().min(1)
 });
 
+// ../../packages/schemas/src/github-sync.ts
+var GITHUB_SYNC_AUTO_PATH = ".auto";
+var GithubSyncRepositoryFullNameSchema = external_exports.string().trim().min(1).regex(/^[^/\s]+\/[^/\s]+$/, {
+  message: "repository must be in owner/name form"
+});
+var GithubSyncProductionBranchSchema = external_exports.string().trim().min(1).max(255).refine((branch) => !branch.startsWith("/") && !branch.endsWith("/"), {
+  message: "branch must not start or end with /"
+});
+var GithubSyncBindingSchema = external_exports.object({
+  id: external_exports.string().trim().min(1),
+  organizationId: OrganizationIdSchema,
+  projectId: ProjectIdSchema,
+  providerGrantId: ProviderGrantIdSchema,
+  installationId: external_exports.string().trim().min(1),
+  repoFullName: GithubSyncRepositoryFullNameSchema,
+  repoId: external_exports.string().trim().min(1).nullable(),
+  productionBranch: GithubSyncProductionBranchSchema,
+  autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
+  enabled: external_exports.boolean(),
+  lastPlannedSha: external_exports.string().trim().min(1).nullable(),
+  lastAppliedSha: external_exports.string().trim().min(1).nullable(),
+  createdAt: external_exports.string().datetime(),
+  updatedAt: external_exports.string().datetime()
+});
+var GithubSyncBindingCreateRequestSchema = external_exports.object({
+  connection: external_exports.string().trim().min(1).optional(),
+  repo: GithubSyncRepositoryFullNameSchema,
+  repoId: external_exports.string().trim().min(1).optional(),
+  branch: GithubSyncProductionBranchSchema.optional()
+});
+var GithubSyncBindingCreateResponseSchema = external_exports.object({
+  binding: GithubSyncBindingSchema,
+  created: external_exports.boolean()
+});
+var GithubSyncBindingListResponseSchema = external_exports.object({
+  bindings: external_exports.array(GithubSyncBindingSchema)
+});
+
 // ../../packages/schemas/src/github-credentials.ts
 var CreateRunGithubCredentialRequestSchema = external_exports.object({
   host: external_exports.literal("github.com"),
@@ -26236,7 +26274,7 @@ Object.assign(lookup, {
 // package.json
 var package_default = {
   name: "@autohq/cli",
-  version: "0.1.143",
+  version: "0.1.145",
   license: "SEE LICENSE IN README.md",
   publishConfig: {
     access: "public"

package/dist/index.js

@@ -83,12 +83,21 @@ var init_tokens = __esm({
 // src/lib/browser.ts
 import { spawn } from "child_process";
 function openBrowser(url2) {
+  if (!shouldOpenBrowser(process.env)) {
+    return;
+  }
   const child = spawn(openCommand(), openArgs(url2), {
     detached: true,
     stdio: "ignore"
   });
   child.unref();
 }
+function shouldOpenBrowser(env) {
+  if (env.AUTO_ALLOW_BROWSER_OPEN_IN_TESTS === "1") {
+    return true;
+  }
+  return !env.NODE_TEST_CONTEXT;
+}
 function openCommand() {
   switch (process.platform) {
     case "darwin":
@@ -17328,6 +17337,52 @@ var init_connections = __esm({
   }
 });
 
+// ../../packages/schemas/src/github-sync.ts
+var GITHUB_SYNC_AUTO_PATH, GithubSyncRepositoryFullNameSchema, GithubSyncProductionBranchSchema, GithubSyncBindingSchema, GithubSyncBindingCreateRequestSchema, GithubSyncBindingCreateResponseSchema, GithubSyncBindingListResponseSchema;
+var init_github_sync = __esm({
+  "../../packages/schemas/src/github-sync.ts"() {
+    "use strict";
+    init_zod();
+    init_ids();
+    GITHUB_SYNC_AUTO_PATH = ".auto";
+    GithubSyncRepositoryFullNameSchema = external_exports.string().trim().min(1).regex(/^[^/\s]+\/[^/\s]+$/, {
+      message: "repository must be in owner/name form"
+    });
+    GithubSyncProductionBranchSchema = external_exports.string().trim().min(1).max(255).refine((branch) => !branch.startsWith("/") && !branch.endsWith("/"), {
+      message: "branch must not start or end with /"
+    });
+    GithubSyncBindingSchema = external_exports.object({
+      id: external_exports.string().trim().min(1),
+      organizationId: OrganizationIdSchema,
+      projectId: ProjectIdSchema,
+      providerGrantId: ProviderGrantIdSchema,
+      installationId: external_exports.string().trim().min(1),
+      repoFullName: GithubSyncRepositoryFullNameSchema,
+      repoId: external_exports.string().trim().min(1).nullable(),
+      productionBranch: GithubSyncProductionBranchSchema,
+      autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
+      enabled: external_exports.boolean(),
+      lastPlannedSha: external_exports.string().trim().min(1).nullable(),
+      lastAppliedSha: external_exports.string().trim().min(1).nullable(),
+      createdAt: external_exports.string().datetime(),
+      updatedAt: external_exports.string().datetime()
+    });
+    GithubSyncBindingCreateRequestSchema = external_exports.object({
+      connection: external_exports.string().trim().min(1).optional(),
+      repo: GithubSyncRepositoryFullNameSchema,
+      repoId: external_exports.string().trim().min(1).optional(),
+      branch: GithubSyncProductionBranchSchema.optional()
+    });
+    GithubSyncBindingCreateResponseSchema = external_exports.object({
+      binding: GithubSyncBindingSchema,
+      created: external_exports.boolean()
+    });
+    GithubSyncBindingListResponseSchema = external_exports.object({
+      bindings: external_exports.array(GithubSyncBindingSchema)
+    });
+  }
+});
+
 // ../../packages/schemas/src/github-credentials.ts
 var CreateRunGithubCredentialRequestSchema, RunGithubCredentialResponseSchema;
 var init_github_credentials = __esm({
@@ -19393,6 +19448,7 @@ var init_src = __esm({
     init_conversation();
     init_conversation_reducer();
     init_connections();
+    init_github_sync();
     init_github_credentials();
     init_github_mcp_catalog();
     init_identities();
@@ -20646,6 +20702,42 @@ function createApiClient(input) {
       }
       return await response.json();
     },
+    async createGithubSyncBinding(request, options = {}) {
+      const project = await activeProject();
+      const response = await authenticatedFetch(
+        apiUrl(
+          projectApiPath(project, "/github/sync/bindings"),
+          options.apiBaseUrl
+        ),
+        {
+          method: "POST",
+          headers: {
+            "content-type": "application/json"
+          },
+          body: JSON.stringify(request)
+        },
+        options.apiBaseUrl
+      );
+      if (!response.ok) {
+        throw new Error(await responseErrorMessage(response));
+      }
+      return GithubSyncBindingCreateResponseSchema.parse(await response.json());
+    },
+    async listGithubSyncBindings(options = {}) {
+      const project = await activeProject();
+      const response = await authenticatedFetch(
+        apiUrl(
+          projectApiPath(project, "/github/sync/bindings"),
+          options.apiBaseUrl
+        ),
+        {},
+        options.apiBaseUrl
+      );
+      if (!response.ok) {
+        throw new Error(await responseErrorMessage(response));
+      }
+      return GithubSyncBindingListResponseSchema.parse(await response.json());
+    },
     ...createResourceApi({
       activeProject,
       apiUrl,
@@ -21169,7 +21261,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.143",
+      version: "0.1.145",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"
@@ -25113,11 +25205,12 @@ import { Box as Box8, Text as Text8 } from "ink";
 import { jsx as jsx8, jsxs as jsxs7 } from "react/jsx-runtime";
 function ConnectionsView({
   connections,
+  syncBindings = [],
   selectedIndex,
   activeProjectId,
   error: error51
 }) {
-  const rows = connectionRows2(connections, activeProjectId);
+  const rows = connectionRows2(connections, activeProjectId, syncBindings);
   if (error51) {
     return /* @__PURE__ */ jsx8(Box8, { paddingX: 2, paddingTop: 1, children: /* @__PURE__ */ jsx8(Text8, { color: "red", children: error51 }) });
   }
@@ -25128,7 +25221,8 @@ function ConnectionsView({
       /* @__PURE__ */ jsx8(HeaderCell, { width: COL_GRANT, children: "CONNECTION" }),
       /* @__PURE__ */ jsx8(HeaderCell, { width: COL_STATUS, children: "STATUS" }),
       /* @__PURE__ */ jsx8(HeaderCell, { width: COL_ACTIVE, children: "PROJECT" }),
-      /* @__PURE__ */ jsx8(HeaderCell, { width: COL_PROJECTS, children: "ALLOWED PROJECTS" })
+      /* @__PURE__ */ jsx8(HeaderCell, { width: COL_PROJECTS, children: "ALLOWED PROJECTS" }),
+      /* @__PURE__ */ jsx8(HeaderCell, { width: COL_SYNC, children: "SYNC" })
     ] }),
     rows.length === 0 ? /* @__PURE__ */ jsx8(Box8, { paddingX: 2, children: /* @__PURE__ */ jsx8(Text8, { dimColor: true, children: "no connections found" }) }) : rows.map((row, i) => {
       const isSelected = i === selectedIndex;
@@ -25157,12 +25251,13 @@ function ConnectionsView({
             children: activeProjectId ? row.activeProjectAllowed ? "allowed" : "-" : "-"
           }
         ) }),
-        /* @__PURE__ */ jsx8(TableCell, { width: COL_PROJECTS, selected: isSelected, dim, children: row.projects })
+        /* @__PURE__ */ jsx8(TableCell, { width: COL_PROJECTS, selected: isSelected, dim, children: row.projects }),
+        /* @__PURE__ */ jsx8(TableCell, { width: COL_SYNC, selected: isSelected, dim, children: row.sync })
       ] }, row.key);
     })
   ] });
 }
-function connectionRows2(connections, activeProjectId) {
+function connectionRows2(connections, activeProjectId, syncBindings = []) {
   return connections.flatMap(
     (connection) => connection.grants.map((grant) => {
       const grantAccess = connection.projectAccess.filter(
@@ -25171,6 +25266,7 @@ function connectionRows2(connections, activeProjectId) {
       const projects = [
         ...new Set(grantAccess.map((access) => access.projectId))
       ].sort();
+      const sync = syncBindings.filter((binding) => binding.providerGrantId === grant.id).map((binding) => `${binding.repoFullName}@${binding.productionBranch}`).sort();
       return {
         key: `${connection.provider}-${connection.externalAccount.id}-${grant.id}`,
         provider: connection.provider,
@@ -25180,24 +25276,26 @@ function connectionRows2(connections, activeProjectId) {
         projects: projects.length > 0 ? projects.join(",") : "-",
         activeProjectAllowed: grantAccess.some(
           (access) => access.projectId === activeProjectId
-        )
+        ),
+        sync: sync.length > 0 ? sync.join(",") : "-"
       };
     })
   );
 }
-function connectionListFingerprint(connections, activeProjectId) {
-  return connectionRows2(connections, activeProjectId).map(
+function connectionListFingerprint(connections, activeProjectId, syncBindings = []) {
+  return connectionRows2(connections, activeProjectId, syncBindings).map(
     (row) => [
       row.provider,
       row.account,
       row.grant,
       row.status,
       row.projects,
-      row.activeProjectAllowed ? "1" : "0"
+      row.activeProjectAllowed ? "1" : "0",
+      row.sync
     ].join("")
   ).join("");
 }
-var COL_PROVIDER2, COL_ACCOUNT, COL_GRANT, COL_STATUS, COL_ACTIVE, COL_PROJECTS;
+var COL_PROVIDER2, COL_ACCOUNT, COL_GRANT, COL_STATUS, COL_ACTIVE, COL_PROJECTS, COL_SYNC;
 var init_ConnectionsView = __esm({
   "src/tui/ConnectionsView.tsx"() {
     "use strict";
@@ -25207,7 +25305,8 @@ var init_ConnectionsView = __esm({
     COL_GRANT = 22;
     COL_STATUS = 8;
     COL_ACTIVE = 8;
-    COL_PROJECTS = 28;
+    COL_PROJECTS = 22;
+    COL_SYNC = 30;
   }
 });
 
@@ -25546,6 +25645,10 @@ function useConnectionProviders(apiUrl, enabled = true) {
   const client = useApiClient();
   return useQuery(connectionProvidersQueryOptions(client, apiUrl, enabled));
 }
+function useGithubSyncBindings(apiUrl, enabled = true) {
+  const client = useApiClient();
+  return useQuery(githubSyncBindingsQueryOptions(client, apiUrl, enabled));
+}
 function useCreateServiceAccount(apiUrl) {
   const client = useApiClient();
   const queryClient = useQueryClient();
@@ -25593,6 +25696,7 @@ function useSwitchProject() {
         ["environments"],
         ["service-accounts"],
         ["connections"],
+        ["github-sync-bindings"],
         ["connection-providers"]
       ]) {
         void queryClient.invalidateQueries({ queryKey });
@@ -25664,6 +25768,32 @@ function useAllowConnection(apiUrl) {
     })
   });
 }
+function useCreateGithubSyncBinding(apiUrl) {
+  const client = useApiClient();
+  const queryClient = useQueryClient();
+  return useMutation({
+    mutationFn: ({
+      connection,
+      repo,
+      branch
+    }) => client.createGithubSyncBinding(
+      {
+        connection,
+        repo,
+        ...branch ? { branch } : {}
+      },
+      { apiBaseUrl: apiUrl }
+    ),
+    onSuccess: () => {
+      void queryClient.invalidateQueries({
+        queryKey: queryKeys.githubSyncBindings(apiUrl)
+      });
+      void queryClient.invalidateQueries({
+        queryKey: queryKeys.connections(apiUrl)
+      });
+    }
+  });
+}
 function useRemoveConnection(apiUrl) {
   const client = useApiClient();
   const queryClient = useQueryClient();
@@ -25854,6 +25984,17 @@ function connectionProvidersQueryOptions(client, apiUrl, enabled = true) {
     staleTime: Number.POSITIVE_INFINITY
   });
 }
+function githubSyncBindingsQueryOptions(client, apiUrl, enabled = true) {
+  return queryOptions({
+    queryKey: queryKeys.githubSyncBindings(apiUrl),
+    queryFn: async () => {
+      const res = await client.listGithubSyncBindings({ apiBaseUrl: apiUrl });
+      return res.bindings;
+    },
+    enabled,
+    staleTime: Number.POSITIVE_INFINITY
+  });
+}
 function sortAgents(list) {
   return list.slice().sort(
     (a, b) => (a.spec.environment ?? "").localeCompare(b.spec.environment ?? "") || a.metadata.name.localeCompare(b.metadata.name)
@@ -25890,6 +26031,7 @@ var init_queries = __esm({
       projects: (apiUrl) => ["projects", apiUrl],
       serviceAccounts: (apiUrl) => ["service-accounts", apiUrl],
       connections: (apiUrl) => ["connections", apiUrl],
+      githubSyncBindings: (apiUrl) => ["github-sync-bindings", apiUrl],
       connectionProviders: (apiUrl) => ["connection-providers", apiUrl],
       runs: (apiUrl, includeArchived = false) => ["runs", apiUrl, includeArchived],
       agentRuns: (agentName, apiUrl, includeArchived = false) => ["agent-runs", agentName, apiUrl, includeArchived]
@@ -26329,6 +26471,9 @@ function HomeView({ apiUrl, notice, returnToAgent }) {
   const [connectionMode, setConnectionMode] = useState3("connections");
   const [serviceAccountInputMode, setServiceAccountInputMode] = useState3(null);
   const [serviceAccountNameInput, setServiceAccountNameInput] = useState3("");
+  const [githubSyncInputMode, setGithubSyncInputMode] = useState3(null);
+  const [githubSyncRepoInput, setGithubSyncRepoInput] = useState3("");
+  const [githubSyncBranchInput, setGithubSyncBranchInput] = useState3("");
   const [inspectedResource, setInspectedResource] = useState3(null);
   const [inspectScrollOffset, setInspectScrollOffset] = useState3(0);
   const localAgentAuthoringStatuses = useMemo3(
@@ -26382,10 +26527,15 @@ function HomeView({ apiUrl, notice, returnToAgent }) {
     apiUrl,
     Boolean(activeSelectionIds.organizationId)
   );
+  const { data: githubSyncBindings = [] } = useGithubSyncBindings(
+    apiUrl,
+    Boolean(activeSelectionIds.projectId)
+  );
   const switchSelection = useSwitchProject();
   const startConnection = useStartConnection(apiUrl);
   const allowConnection = useAllowConnection(apiUrl);
   const removeConnection = useRemoveConnection(apiUrl);
+  const createGithubSyncBinding = useCreateGithubSyncBinding(apiUrl);
   const createServiceAccount2 = useCreateServiceAccount(apiUrl);
   const rotateServiceAccount2 = useRotateServiceAccount(apiUrl);
   const removeServiceAccount2 = useRemoveServiceAccount(apiUrl);
@@ -26430,11 +26580,13 @@ function HomeView({ apiUrl, notice, returnToAgent }) {
   );
   const selectedConnection = connectionRows2(
     connections,
-    activeSelectionIds.projectId
+    activeSelectionIds.projectId,
+    githubSyncBindings
   )[connectionIndex];
   const connectionFingerprint = connectionListFingerprint(
     connections,
-    activeSelectionIds.projectId
+    activeSelectionIds.projectId,
+    githubSyncBindings
   );
   const connectionProviderRowCount = connectionProviders.length;
   const selectedConnectionProvider = providerRows2(connectionProviders)[connectionProviderIndex];
@@ -26526,7 +26678,7 @@ function HomeView({ apiUrl, notice, returnToAgent }) {
     );
     if (index >= 0) setEnvironmentIndex(index);
   }, [environments, selectedAgent]);
-  const connectionStatus = startConnection.error instanceof Error ? startConnection.error.message : allowConnection.error instanceof Error ? allowConnection.error.message : removeConnection.error instanceof Error ? removeConnection.error.message : connectionNotice;
+  const connectionStatus = startConnection.error instanceof Error ? startConnection.error.message : allowConnection.error instanceof Error ? allowConnection.error.message : removeConnection.error instanceof Error ? removeConnection.error.message : createGithubSyncBinding.error instanceof Error ? createGithubSyncBinding.error.message : connectionNotice;
   const startRun = useCallback2(() => {
     if (!scopedAgent || triggerRun.isPending) return;
     triggerRun.reset();
@@ -26736,7 +26888,8 @@ function HomeView({ apiUrl, notice, returnToAgent }) {
           );
           const nextFingerprint = connectionListFingerprint(
             response.connections,
-            activeSelectionIds.projectId
+            activeSelectionIds.projectId,
+            githubSyncBindings
           );
           if (nextFingerprint !== input.beforeFingerprint) {
             setConnectionNotice(`${input.provider} connection status updated.`);
@@ -26767,14 +26920,24 @@ function HomeView({ apiUrl, notice, returnToAgent }) {
         void refresh();
       }, CONNECTION_REFRESH_INTERVAL_MS);
     },
-    [activeSelectionIds.projectId, apiUrl, client, queryClient]
+    [
+      activeSelectionIds.projectId,
+      apiUrl,
+      client,
+      githubSyncBindings,
+      queryClient
+    ]
   );
   const beginConnection = useCallback2(
     (provider) => {
       startConnection.reset();
       allowConnection.reset();
       removeConnection.reset();
+      createGithubSyncBinding.reset();
       setPendingRemoveConnectionKey(null);
+      setGithubSyncInputMode(null);
+      setGithubSyncRepoInput("");
+      setGithubSyncBranchInput("");
       setConnectionNotice(null);
       startConnection.mutate(
         {
@@ -26806,6 +26969,7 @@ function HomeView({ apiUrl, notice, returnToAgent }) {
       allowConnection,
       connectionFingerprint,
       removeConnection,
+      createGithubSyncBinding,
       refreshConnectionsUntilChanged,
       startConnection
     ]
@@ -26843,6 +27007,88 @@ function HomeView({ apiUrl, notice, returnToAgent }) {
     serviceAccountNameInput,
     serviceAccounts
   ]);
+  const beginGithubSyncBinding = useCallback2(() => {
+    startConnection.reset();
+    allowConnection.reset();
+    removeConnection.reset();
+    createGithubSyncBinding.reset();
+    setPendingRemoveConnectionKey(null);
+    if (!selectedConnection) {
+      setConnectionNotice("Select a GitHub connection before enabling Sync.");
+      return;
+    }
+    if (selectedConnection.provider !== "github") {
+      setConnectionNotice("Sync v1 supports GitHub connections only.");
+      return;
+    }
+    if (!activeSelectionIds.projectId) {
+      setConnectionNotice("Select an active project before enabling Sync.");
+      return;
+    }
+    if (!selectedConnection.activeProjectAllowed) {
+      setConnectionNotice(
+        "Allow this GitHub connection for the active project first."
+      );
+      return;
+    }
+    setConnectionNotice(null);
+    setGithubSyncRepoInput("");
+    setGithubSyncBranchInput("");
+    setGithubSyncInputMode("repo");
+  }, [
+    activeSelectionIds.projectId,
+    allowConnection,
+    createGithubSyncBinding,
+    removeConnection,
+    selectedConnection,
+    startConnection
+  ]);
+  const submitGithubSyncRepo = useCallback2(() => {
+    const repo = githubSyncRepoInput.trim();
+    if (!repo) {
+      setConnectionNotice("Enter a GitHub repository in owner/name form.");
+      return;
+    }
+    setConnectionNotice(null);
+    setGithubSyncInputMode("branch");
+  }, [githubSyncRepoInput]);
+  const submitGithubSyncBranch = useCallback2(() => {
+    if (!selectedConnection) {
+      setGithubSyncInputMode(null);
+      setConnectionNotice("Select a GitHub connection before enabling Sync.");
+      return;
+    }
+    const repo = githubSyncRepoInput.trim();
+    const branch = githubSyncBranchInput.trim();
+    if (!repo) {
+      setGithubSyncInputMode("repo");
+      setConnectionNotice("Enter a GitHub repository in owner/name form.");
+      return;
+    }
+    setConnectionNotice(null);
+    createGithubSyncBinding.mutate(
+      {
+        connection: selectedConnection.grant,
+        repo,
+        ...branch ? { branch } : {}
+      },
+      {
+        onSuccess: (result) => {
+          setGithubSyncInputMode(null);
+          setGithubSyncRepoInput("");
+          setGithubSyncBranchInput("");
+          setConnectionNotice(
+            `${result.created ? "Enabled" : "Updated"} Sync for ${result.binding.repoFullName} on ${result.binding.productionBranch}.`
+          );
+        }
+      }
+    );
+  }, [
+    createGithubSyncBinding,
+    githubSyncBranchInput,
+    githubSyncRepoInput,
+    selectedConnection
+  ]);
   const selectTopLevelSection = useCallback2(
     (section) => {
       if (section === "agents") {
@@ -26881,6 +27127,11 @@ function HomeView({ apiUrl, notice, returnToAgent }) {
       setPendingRemoveServiceAccountName(null);
       setPendingRotateServiceAccountName(null);
     }
+    if (activeSection !== "connections") {
+      setGithubSyncInputMode(null);
+      setGithubSyncRepoInput("");
+      setGithubSyncBranchInput("");
+    }
   }, [activeSection]);
   useEffect3(() => {
     if (activeSection !== "runs") {
@@ -26925,6 +27176,15 @@ function HomeView({ apiUrl, notice, returnToAgent }) {
       }
       return;
     }
+    if (githubSyncInputMode) {
+      if (key.escape) {
+        setGithubSyncInputMode(null);
+        setGithubSyncRepoInput("");
+        setGithubSyncBranchInput("");
+        setConnectionNotice(null);
+      }
+      return;
+    }
     if (serviceAccountInputMode) {
       if (key.escape) {
         setServiceAccountInputMode(null);
@@ -27176,6 +27436,7 @@ function HomeView({ apiUrl, notice, returnToAgent }) {
           startConnection.reset();
           allowConnection.reset();
           removeConnection.reset();
+          createGithubSyncBinding.reset();
           setPendingRemoveConnectionKey(null);
           setConnectionNotice("Refreshing providers\u2026");
           void refetchConnectionProviders().then(
@@ -27205,12 +27466,14 @@ function HomeView({ apiUrl, notice, returnToAgent }) {
       }
       if (input === "n") {
         setPendingRemoveConnectionKey(null);
+        setGithubSyncInputMode(null);
         setConnectionNotice(null);
         setConnectionMode("providers");
         return;
       }
       if (input === "a") {
         setPendingRemoveConnectionKey(null);
+        setGithubSyncInputMode(null);
         if (!selectedConnection) {
           setConnectionNotice("Select a connection before allowing it.");
           return;
@@ -27224,6 +27487,7 @@ function HomeView({ apiUrl, notice, returnToAgent }) {
         startConnection.reset();
         allowConnection.reset();
         removeConnection.reset();
+        createGithubSyncBinding.reset();
         setConnectionNotice(null);
         allowConnection.mutate(
           {
@@ -27241,6 +27505,8 @@ function HomeView({ apiUrl, notice, returnToAgent }) {
         startConnection.reset();
         allowConnection.reset();
         removeConnection.reset();
+        createGithubSyncBinding.reset();
+        setGithubSyncInputMode(null);
         if (!selectedConnection) {
           setConnectionNotice("Select a connection before removing it.");
           return;
@@ -27270,11 +27536,17 @@ function HomeView({ apiUrl, notice, returnToAgent }) {
         );
         return;
       }
+      if (input === "s") {
+        beginGithubSyncBinding();
+        return;
+      }
       if (input === "r") {
         startConnection.reset();
         allowConnection.reset();
         removeConnection.reset();
+        createGithubSyncBinding.reset();
         setPendingRemoveConnectionKey(null);
+        setGithubSyncInputMode(null);
         setConnectionNotice("Refreshing connections\u2026");
         void refetchConnections().then(
           () => setConnectionNotice("Connections refreshed.")
@@ -27375,7 +27647,7 @@ function HomeView({ apiUrl, notice, returnToAgent }) {
   }
   const runError = errorMessage2(triggerRun.error) ?? errorMessage2(archiveRuns.error) ?? errorMessage2(unarchiveRuns.error) ?? errorMessage2(stopRuns.error);
   const isRunMutationPending = triggerRun.isPending || archiveRuns.isPending || unarchiveRuns.isPending || stopRuns.isPending;
-  const isConnectionMutationPending = startConnection.isPending || allowConnection.isPending || removeConnection.isPending;
+  const isConnectionMutationPending = startConnection.isPending || allowConnection.isPending || removeConnection.isPending || createGithubSyncBinding.isPending;
   const serviceAccountStatus = createServiceAccount2.error instanceof Error ? createServiceAccount2.error.message : rotateServiceAccount2.error instanceof Error ? rotateServiceAccount2.error.message : removeServiceAccount2.error instanceof Error ? removeServiceAccount2.error.message : serviceAccountNotice;
   const isServiceAccountMutationPending = createServiceAccount2.isPending || rotateServiceAccount2.isPending || removeServiceAccount2.isPending;
   return /* @__PURE__ */ jsxs12(Box13, { flexDirection: "column", height: termHeight, children: [
@@ -27459,6 +27731,7 @@ function HomeView({ apiUrl, notice, returnToAgent }) {
                 ...connectionMode === "providers" ? [{ k: "enter", label: "Connect" }] : [
                   { k: "n", label: "New provider" },
                   { k: "a", label: "Allow project" },
+                  { k: "s", label: "Enable Sync" },
                   { k: "d", label: "Remove" }
                 ],
                 { k: "r", label: "Refresh" }
@@ -27581,16 +27854,38 @@ function HomeView({ apiUrl, notice, returnToAgent }) {
             }
           )
         ] }) : activeSection === "connections" ? connectionMode === "providers" && isConnectionProvidersLoading ? /* @__PURE__ */ jsx14(Box13, { padding: 2, children: /* @__PURE__ */ jsx14(Spinner, { label: "loading providers\u2026" }) }) : connectionMode === "connections" && isConnectionsLoading ? /* @__PURE__ */ jsx14(Box13, { padding: 2, children: /* @__PURE__ */ jsx14(Spinner, { label: "loading connections\u2026" }) }) : /* @__PURE__ */ jsxs12(Box13, { flexDirection: "column", flexGrow: 1, children: [
+          githubSyncInputMode === "repo" && /* @__PURE__ */ jsxs12(Box13, { paddingX: 2, gap: 1, children: [
+            /* @__PURE__ */ jsx14(Text14, { color: "yellow", children: "Repo:" }),
+            /* @__PURE__ */ jsx14(
+              TextInput3,
+              {
+                value: githubSyncRepoInput,
+                onChange: setGithubSyncRepoInput,
+                onSubmit: submitGithubSyncRepo
+              }
+            )
+          ] }),
+          githubSyncInputMode === "branch" && /* @__PURE__ */ jsxs12(Box13, { paddingX: 2, gap: 1, children: [
+            /* @__PURE__ */ jsx14(Text14, { color: "yellow", children: "Branch:" }),
+            /* @__PURE__ */ jsx14(
+              TextInput3,
+              {
+                value: githubSyncBranchInput,
+                onChange: setGithubSyncBranchInput,
+                onSubmit: submitGithubSyncBranch
+              }
+            )
+          ] }),
           isConnectionMutationPending && /* @__PURE__ */ jsx14(Box13, { paddingX: 2, children: /* @__PURE__ */ jsx14(
             Spinner,
             {
-              label: startConnection.isPending ? "starting connection\u2026" : allowConnection.isPending ? "allowing project\u2026" : "removing connection\u2026"
+              label: startConnection.isPending ? "starting connection\u2026" : allowConnection.isPending ? "allowing project\u2026" : removeConnection.isPending ? "removing connection\u2026" : "enabling sync\u2026"
             }
           ) }),
           connectionStatus && !isConnectionMutationPending && /* @__PURE__ */ jsx14(Box13, { paddingX: 2, children: /* @__PURE__ */ jsx14(
             Text14,
             {
-              color: startConnection.error || allowConnection.error || removeConnection.error ? "red" : "green",
+              color: startConnection.error || allowConnection.error || removeConnection.error || createGithubSyncBinding.error ? "red" : "green",
               children: connectionStatus
             }
           ) }),
@@ -27605,6 +27900,7 @@ function HomeView({ apiUrl, notice, returnToAgent }) {
             ConnectionsView,
             {
               connections,
+              syncBindings: githubSyncBindings,
               selectedIndex: connectionIndex,
               activeProjectId: activeSelectionIds.projectId,
               error: connectionsError instanceof Error ? connectionsError.message : connectionsError ? String(connectionsError) : null
@@ -33887,6 +34183,134 @@ function withApiBaseUrl2(context, commandOptions) {
   };
 }
 
+// src/commands/sync/repo.ts
+import { execFile as execFileWithCallback } from "child_process";
+import { promisify } from "util";
+var execFile = promisify(execFileWithCallback);
+async function inferGithubRepoFromOrigin() {
+  try {
+    const { stdout } = await execFile("git", ["remote", "get-url", "origin"], {
+      cwd: process.cwd()
+    });
+    return parseGithubRemote(stdout.trim());
+  } catch {
+    return void 0;
+  }
+}
+function parseGithubRemote(remote) {
+  const trimmed = remote.trim();
+  const ssh = /^git@github\.com:([^/\s]+)\/(.+?)(?:\.git)?$/i.exec(trimmed);
+  if (ssh) {
+    return `${ssh[1]}/${stripGitSuffix(ssh[2])}`;
+  }
+  let url2;
+  try {
+    url2 = new URL(trimmed.replace(/^git\+/, ""));
+  } catch {
+    return void 0;
+  }
+  if (url2.hostname.toLowerCase() !== "github.com") {
+    return void 0;
+  }
+  const [owner, repo] = url2.pathname.replace(/^\/+/, "").split("/");
+  if (!owner || !repo) {
+    return void 0;
+  }
+  return `${owner}/${stripGitSuffix(repo)}`;
+}
+function stripGitSuffix(repo) {
+  return repo.replace(/\.git$/i, "");
+}
+
+// src/commands/sync/actions.ts
+async function enableGithubSyncAction(context, repoArgument, options) {
+  const project = await requireProjectScope({
+    context,
+    options,
+    explicitHint: "an active project"
+  });
+  const scopedContext = withProjectScope(context, project);
+  const connection = await requireConnection({
+    context: scopedContext,
+    options,
+    provider: "github",
+    identifier: options.connection
+  });
+  const repo = repoArgument ?? await inferGithubRepoFromOrigin();
+  if (!repo) {
+    throw new Error(
+      "No GitHub repository was provided and origin could not be inferred. Pass owner/repo."
+    );
+  }
+  await confirmDestructiveAction(context, {
+    message: `This will enable Sync for ${repo} and automatically apply .auto changes merged to ${options.branch ?? "the repository default branch"}.`,
+    yes: options.yes
+  });
+  const client = createContextApiClient(scopedContext);
+  const result = await client.createGithubSyncBinding(
+    {
+      connection: connection.name,
+      repo,
+      ...options.branch ? { branch: options.branch } : {}
+    },
+    { apiBaseUrl: apiUrlFromOptions(context, options) }
+  );
+  const style = context.io.style;
+  context.writeOutput(
+    style.success(
+      `${result.created ? "enabled" : "updated"} sync ${result.binding.repoFullName}`
+    )
+  );
+  context.writeOutput(
+    `${style.label("connection")} ${result.binding.providerGrantId}`
+  );
+  context.writeOutput(
+    `${style.label("branch")} ${result.binding.productionBranch}`
+  );
+  context.writeOutput(`${style.label("path")} ${result.binding.autoPath}`);
+}
+async function listSyncBindingsAction(context, options) {
+  const project = await requireProjectScope({
+    context,
+    options,
+    explicitHint: "an active project"
+  });
+  const scopedContext = withProjectScope(context, project);
+  const result = await createContextApiClient(
+    scopedContext
+  ).listGithubSyncBindings({
+    apiBaseUrl: apiUrlFromOptions(context, options)
+  });
+  if (result.bindings.length === 0) {
+    context.writeOutput("no sync bindings found");
+    return;
+  }
+  for (const binding of result.bindings) {
+    context.writeOutput(
+      [
+        binding.repoFullName,
+        `branch=${binding.productionBranch}`,
+        `path=${binding.autoPath}`,
+        `lastApplied=${binding.lastAppliedSha ?? "-"}`
+      ].join(" ")
+    );
+  }
+}
+
+// src/commands/sync/commands.ts
+function registerSyncCommands(program, context) {
+  const sync = program.command("sync").description("Manage repository Sync bindings.");
+  const enable = sync.command("enable").description("Enable Sync.");
+  enable.command("github").description("Enable Sync for a GitHub repository.").argument("[repo]", "GitHub repository in owner/name form").option("--connection <name>", "GitHub connection name or id").option("--branch <branch>", "production branch to apply from").option("-y, --yes", "skip confirmation prompt").option("--api-url <url>", "Auto API base URL").option("--api-base-url <url>", "Auto API base URL").action(
+    async (repo, commandOptions) => {
+      await enableGithubSyncAction(context, repo, commandOptions);
+    }
+  );
+  sync.command("list").alias("ls").description("List enabled Sync bindings for the active project.").option("--api-url <url>", "Auto API base URL").option("--api-base-url <url>", "Auto API base URL").action(async (commandOptions) => {
+    await listSyncBindingsAction(context, commandOptions);
+  });
+}
+
 // src/cli/program.ts
 init_path();
 init_profiles();
@@ -34054,6 +34478,7 @@ function createProgram(options = {}) {
   registerProjectCommands(program, context);
   registerConnectionCommands(program, context);
   registerSecretCommands(program, context);
+  registerSyncCommands(program, context);
   registerAgentCommands(program, context);
   registerRunCommands(program, context);
   return program;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autohq/cli",
-  "version": "0.1.143",
+  "version": "0.1.145",
   "license": "SEE LICENSE IN README.md",
   "publishConfig": {
     "access": "public"