@autohq/cli 0.1.166 → 0.1.168

package/dist/agent-bridge.js

@@ -22067,6 +22067,12 @@ var PROJECT_APPLY_RESOURCE_KINDS = [
   RESOURCE_KIND_ENVIRONMENT,
   RESOURCE_KIND_AGENT
 ];
+var PROJECT_APPLY_BUNDLE_VERSION = 1;
+var MAX_PROJECT_APPLY_BUNDLE_BYTES = 64 * 1024 * 1024;
+var PROJECT_APPLY_BUNDLE_CONTENT_TYPE = "application/vnd.auto.project-apply-bundle+json";
+function projectApplyBundleStorageKey(sha256) {
+  return `project-apply-bundles/${sha256}.json`;
+}
 var ProjectDeleteResourceBaseSchema = external_exports.object({
   name: external_exports.string().trim().min(1)
 });
@@ -22086,14 +22092,72 @@ var ProjectApplyAssetsSchema = external_exports.record(
   }),
   ProjectApplyAssetSchema
 );
-var AvatarAssetUploadRequestSchema = ProjectApplyAssetSchema.omit({
-  sha256: true
-});
 var AvatarAssetUploadResponseSchema = external_exports.object({
   sha256: external_exports.string().regex(/^[a-f0-9]{64}$/),
   contentType: external_exports.enum(AVATAR_ASSET_CONTENT_TYPES),
   sizeBytes: external_exports.number().int().positive()
 });
+var ApplyBundlePathSchema = external_exports.string().trim().min(1).max(4096).refine((path2) => !path2.startsWith("/") && !path2.includes("\0"), {
+  message: "apply bundle paths must be relative paths"
+});
+var ProjectApplyBundleFileSchema = external_exports.object({
+  path: ApplyBundlePathSchema,
+  contentBase64: external_exports.string().regex(/^[A-Za-z0-9+/]*={0,2}$/)
+});
+var ProjectApplyBundleSchema = external_exports.object({
+  version: external_exports.literal(PROJECT_APPLY_BUNDLE_VERSION),
+  files: external_exports.array(ProjectApplyBundleFileSchema).max(2e4)
+});
+var ProjectApplyBundleRefSchema = external_exports.object({
+  kind: external_exports.literal("vercel_blob"),
+  storageKey: external_exports.string().trim().min(1).max(1024),
+  sha256: external_exports.string().regex(SHA256_HEX_PATTERN),
+  sizeBytes: external_exports.number().int().positive().max(MAX_PROJECT_APPLY_BUNDLE_BYTES)
+}).superRefine((ref, context) => {
+  const expectedStorageKey = projectApplyBundleStorageKey(ref.sha256);
+  if (ref.storageKey === expectedStorageKey) {
+    return;
+  }
+  context.addIssue({
+    code: "custom",
+    path: ["storageKey"],
+    message: "apply bundle storage key must match its sha256"
+  });
+});
+var ProjectApplyBundleUploadRequestSchema = external_exports.object({
+  sha256: external_exports.string().regex(SHA256_HEX_PATTERN),
+  sizeBytes: external_exports.number().int().positive().max(MAX_PROJECT_APPLY_BUNDLE_BYTES)
+});
+var ProjectApplyBundleUploadResponseSchema = external_exports.object({
+  method: external_exports.literal("PUT"),
+  uploadUrl: external_exports.string().url(),
+  contentType: external_exports.literal(PROJECT_APPLY_BUNDLE_CONTENT_TYPE),
+  source: ProjectApplyBundleRefSchema
+});
+var ProjectApplyBundleDirectoryEntrypointSchema = external_exports.object({
+  kind: external_exports.literal("directory"),
+  resourceRoot: ApplyBundlePathSchema.default(".auto"),
+  displayResourceRoot: external_exports.string().trim().min(1).max(4096).optional()
+});
+var ProjectApplyBundleFileEntrypointSchema = external_exports.object({
+  kind: external_exports.literal("file"),
+  filePath: ApplyBundlePathSchema
+});
+var ProjectApplyBundleEntrypointSchema = external_exports.discriminatedUnion("kind", [
+  ProjectApplyBundleDirectoryEntrypointSchema,
+  ProjectApplyBundleFileEntrypointSchema
+]);
+var ProjectApplySourceSchema = external_exports.object({
+  kind: external_exports.literal("bundle"),
+  bundle: ProjectApplyBundleRefSchema,
+  entrypoint: ProjectApplyBundleEntrypointSchema
+});
+var ProjectApplySourceRequestSchema = external_exports.object({
+  source: ProjectApplySourceSchema,
+  delete: external_exports.array(ProjectDeleteResourceSchema).default([]),
+  dryRun: external_exports.boolean().default(false),
+  prune: external_exports.boolean().default(true)
+});
 var ProjectApplyRequestSchema = external_exports.object({
   delete: external_exports.array(ProjectDeleteResourceSchema).default([]),
   dryRun: external_exports.boolean().default(false),
@@ -22177,11 +22241,20 @@ var ProjectResourceApplyWorkflowErrorSchema = external_exports.object({
 });
 var ProjectResourceApplyWorkflowInputSchema = external_exports.object({
   operationId: ProjectResourceApplyOperationIdSchema,
-  request: ProjectApplyRequestSchema,
+  request: ProjectApplyRequestSchema.optional(),
+  sourceRequest: ProjectApplySourceRequestSchema.optional(),
   organizationId: OrganizationIdSchema,
   projectId: ProjectIdSchema.nullable().optional(),
   actor: AuthActorSchema,
   auditAction: ProjectResourceApplyAuditActionSchema
+}).superRefine((input, context) => {
+  if ((input.request ? 1 : 0) + (input.sourceRequest ? 1 : 0) !== 1) {
+    context.addIssue({
+      code: "custom",
+      path: ["request"],
+      message: "exactly one of request or sourceRequest is required"
+    });
+  }
 });
 var ProjectResourceApplyWorkflowResultSchema = external_exports.discriminatedUnion(
   "status",
@@ -26482,7 +26555,7 @@ Object.assign(lookup, {
 // package.json
 var package_default = {
   name: "@autohq/cli",
-  version: "0.1.166",
+  version: "0.1.168",
   license: "SEE LICENSE IN README.md",
   publishConfig: {
     access: "public"

package/dist/index.js

@@ -18762,7 +18762,10 @@ var init_project_service_accounts = __esm({
 });
 
 // ../../packages/schemas/src/project-resources.ts
-var EnvironmentApplyDocumentSchema, IdentityApplyDocumentSchema, AgentApplyDocumentSchema, ProjectApplyResourceSchema, PROJECT_RESOURCE_APPLY_ORDER, PROJECT_RESOURCE_KINDS, PROJECT_APPLY_RESOURCE_KINDS, ProjectDeleteResourceBaseSchema, ProjectDeleteResourceSchema, AVATAR_ASSET_CONTENT_TYPES, MAX_AVATAR_ASSET_BASE64_LENGTH, ProjectApplyAssetSchema, ProjectApplyAssetsSchema, AvatarAssetUploadRequestSchema, AvatarAssetUploadResponseSchema, ProjectApplyRequestSchema, ProjectApplySystemConfigSchema, ProjectAppliedResourceSchema, ProjectApplyDiagnosticSchema, ProjectApplyResponsePrunedSchema, ProjectApplyPlanDiffSchema, ProjectApplyResponseSchema, ProjectResourceApplyResultSchema, ProjectResourceApplyAuditActionSchema, ProjectResourceApplyOperationIdSchema, ProjectResourceApplyWorkflowErrorSchema, ProjectResourceApplyWorkflowInputSchema, ProjectResourceApplyWorkflowResultSchema;
+function projectApplyBundleStorageKey(sha256) {
+  return `project-apply-bundles/${sha256}.json`;
+}
+var EnvironmentApplyDocumentSchema, IdentityApplyDocumentSchema, AgentApplyDocumentSchema, ProjectApplyResourceSchema, PROJECT_RESOURCE_APPLY_ORDER, PROJECT_RESOURCE_KINDS, PROJECT_APPLY_RESOURCE_KINDS, PROJECT_APPLY_BUNDLE_VERSION, MAX_PROJECT_APPLY_BUNDLE_BYTES, PROJECT_APPLY_BUNDLE_CONTENT_TYPE, ProjectDeleteResourceBaseSchema, ProjectDeleteResourceSchema, AVATAR_ASSET_CONTENT_TYPES, MAX_AVATAR_ASSET_BASE64_LENGTH, ProjectApplyAssetSchema, ProjectApplyAssetsSchema, AvatarAssetUploadResponseSchema, ApplyBundlePathSchema, ProjectApplyBundleFileSchema, ProjectApplyBundleSchema, ProjectApplyBundleRefSchema, ProjectApplyBundleUploadRequestSchema, ProjectApplyBundleUploadResponseSchema, ProjectApplyBundleDirectoryEntrypointSchema, ProjectApplyBundleFileEntrypointSchema, ProjectApplyBundleEntrypointSchema, ProjectApplySourceSchema, ProjectApplySourceRequestSchema, ProjectApplyRequestSchema, ProjectApplySystemConfigSchema, ProjectAppliedResourceSchema, ProjectApplyDiagnosticSchema, ProjectApplyResponsePrunedSchema, ProjectApplyPlanDiffSchema, ProjectApplyResponseSchema, ProjectResourceApplyResultSchema, ProjectResourceApplyAuditActionSchema, ProjectResourceApplyOperationIdSchema, ProjectResourceApplyWorkflowErrorSchema, ProjectResourceApplyWorkflowInputSchema, ProjectResourceApplyWorkflowResultSchema;
 var init_project_resources = __esm({
   "../../packages/schemas/src/project-resources.ts"() {
     "use strict";
@@ -18804,6 +18807,9 @@ var init_project_resources = __esm({
       RESOURCE_KIND_ENVIRONMENT,
       RESOURCE_KIND_AGENT
     ];
+    PROJECT_APPLY_BUNDLE_VERSION = 1;
+    MAX_PROJECT_APPLY_BUNDLE_BYTES = 64 * 1024 * 1024;
+    PROJECT_APPLY_BUNDLE_CONTENT_TYPE = "application/vnd.auto.project-apply-bundle+json";
     ProjectDeleteResourceBaseSchema = external_exports.object({
       name: external_exports.string().trim().min(1)
     });
@@ -18823,14 +18829,72 @@ var init_project_resources = __esm({
       }),
       ProjectApplyAssetSchema
     );
-    AvatarAssetUploadRequestSchema = ProjectApplyAssetSchema.omit({
-      sha256: true
-    });
     AvatarAssetUploadResponseSchema = external_exports.object({
       sha256: external_exports.string().regex(/^[a-f0-9]{64}$/),
       contentType: external_exports.enum(AVATAR_ASSET_CONTENT_TYPES),
       sizeBytes: external_exports.number().int().positive()
     });
+    ApplyBundlePathSchema = external_exports.string().trim().min(1).max(4096).refine((path2) => !path2.startsWith("/") && !path2.includes("\0"), {
+      message: "apply bundle paths must be relative paths"
+    });
+    ProjectApplyBundleFileSchema = external_exports.object({
+      path: ApplyBundlePathSchema,
+      contentBase64: external_exports.string().regex(/^[A-Za-z0-9+/]*={0,2}$/)
+    });
+    ProjectApplyBundleSchema = external_exports.object({
+      version: external_exports.literal(PROJECT_APPLY_BUNDLE_VERSION),
+      files: external_exports.array(ProjectApplyBundleFileSchema).max(2e4)
+    });
+    ProjectApplyBundleRefSchema = external_exports.object({
+      kind: external_exports.literal("vercel_blob"),
+      storageKey: external_exports.string().trim().min(1).max(1024),
+      sha256: external_exports.string().regex(SHA256_HEX_PATTERN),
+      sizeBytes: external_exports.number().int().positive().max(MAX_PROJECT_APPLY_BUNDLE_BYTES)
+    }).superRefine((ref, context) => {
+      const expectedStorageKey = projectApplyBundleStorageKey(ref.sha256);
+      if (ref.storageKey === expectedStorageKey) {
+        return;
+      }
+      context.addIssue({
+        code: "custom",
+        path: ["storageKey"],
+        message: "apply bundle storage key must match its sha256"
+      });
+    });
+    ProjectApplyBundleUploadRequestSchema = external_exports.object({
+      sha256: external_exports.string().regex(SHA256_HEX_PATTERN),
+      sizeBytes: external_exports.number().int().positive().max(MAX_PROJECT_APPLY_BUNDLE_BYTES)
+    });
+    ProjectApplyBundleUploadResponseSchema = external_exports.object({
+      method: external_exports.literal("PUT"),
+      uploadUrl: external_exports.string().url(),
+      contentType: external_exports.literal(PROJECT_APPLY_BUNDLE_CONTENT_TYPE),
+      source: ProjectApplyBundleRefSchema
+    });
+    ProjectApplyBundleDirectoryEntrypointSchema = external_exports.object({
+      kind: external_exports.literal("directory"),
+      resourceRoot: ApplyBundlePathSchema.default(".auto"),
+      displayResourceRoot: external_exports.string().trim().min(1).max(4096).optional()
+    });
+    ProjectApplyBundleFileEntrypointSchema = external_exports.object({
+      kind: external_exports.literal("file"),
+      filePath: ApplyBundlePathSchema
+    });
+    ProjectApplyBundleEntrypointSchema = external_exports.discriminatedUnion("kind", [
+      ProjectApplyBundleDirectoryEntrypointSchema,
+      ProjectApplyBundleFileEntrypointSchema
+    ]);
+    ProjectApplySourceSchema = external_exports.object({
+      kind: external_exports.literal("bundle"),
+      bundle: ProjectApplyBundleRefSchema,
+      entrypoint: ProjectApplyBundleEntrypointSchema
+    });
+    ProjectApplySourceRequestSchema = external_exports.object({
+      source: ProjectApplySourceSchema,
+      delete: external_exports.array(ProjectDeleteResourceSchema).default([]),
+      dryRun: external_exports.boolean().default(false),
+      prune: external_exports.boolean().default(true)
+    });
     ProjectApplyRequestSchema = external_exports.object({
       delete: external_exports.array(ProjectDeleteResourceSchema).default([]),
       dryRun: external_exports.boolean().default(false),
@@ -18914,11 +18978,20 @@ var init_project_resources = __esm({
     });
     ProjectResourceApplyWorkflowInputSchema = external_exports.object({
       operationId: ProjectResourceApplyOperationIdSchema,
-      request: ProjectApplyRequestSchema,
+      request: ProjectApplyRequestSchema.optional(),
+      sourceRequest: ProjectApplySourceRequestSchema.optional(),
       organizationId: OrganizationIdSchema,
       projectId: ProjectIdSchema.nullable().optional(),
       actor: AuthActorSchema,
       auditAction: ProjectResourceApplyAuditActionSchema
+    }).superRefine((input, context) => {
+      if ((input.request ? 1 : 0) + (input.sourceRequest ? 1 : 0) !== 1) {
+        context.addIssue({
+          code: "custom",
+          path: ["request"],
+          message: "exactly one of request or sourceRequest is required"
+        });
+      }
     });
     ProjectResourceApplyWorkflowResultSchema = external_exports.discriminatedUnion(
       "status",
@@ -19886,6 +19959,7 @@ var init_paths = __esm({
 });
 
 // src/lib/api/resources.ts
+import { createHash as createHash3 } from "crypto";
 function createResourceApi(context) {
   const environments = projectResource(context, {
     path: "/environments",
@@ -19904,8 +19978,8 @@ function createResourceApi(context) {
   );
   return {
     applyEnvironmentResource: environments.apply,
-    hasAvatarAsset: (request, options) => hasAvatarAsset(context, request, options ?? {}),
-    uploadAvatarAsset: (request, options) => uploadAvatarAsset(context, request, options ?? {}),
+    prepareProjectApplyBundleUpload: (request, options) => prepareProjectApplyBundleUpload(context, request, options ?? {}),
+    uploadProjectApplyBundle: (request) => uploadProjectApplyBundle(context, request),
     applyProjectResources: (request, options) => applyProjectResources(
       context,
       request,
@@ -19928,54 +20002,59 @@ function createResourceApi(context) {
     updateProjectServiceAccount: (request, options) => updateProjectServiceAccount(context, request, options ?? {})
   };
 }
-async function hasAvatarAsset(context, request, options) {
-  const response = await context.authenticatedFetch(
-    context.apiUrl(
-      apiPath(`/avatars/${encodeURIComponent(request.sha256)}`),
-      options.apiBaseUrl
-    ),
-    { method: "HEAD" },
-    options.apiBaseUrl
-  );
-  if (response.ok) {
-    return true;
-  }
-  if (response.status === 404) {
-    return false;
-  }
-  throw new Error(await responseErrorMessage(response));
-}
-async function uploadAvatarAsset(context, request, options) {
-  const path2 = await avatarAssetUploadPath(context, request.sha256);
+async function prepareProjectApplyBundleUpload(context, request, options) {
+  const path2 = await projectApplyBundleUploadPath(context);
   const response = await context.authenticatedFetch(
     context.apiUrl(path2, options.apiBaseUrl),
     {
-      method: "PUT",
+      method: "POST",
       headers: { "content-type": "application/json" },
-      body: JSON.stringify({
-        contentType: request.contentType,
-        dataBase64: request.dataBase64
-      })
+      body: JSON.stringify(request)
     },
     options.apiBaseUrl
   );
-  if (response.status === 404) {
-    throw new AvatarAssetUploadUnsupportedError(
-      await responseErrorMessage(response)
-    );
-  }
   if (!response.ok) {
     throw new Error(await responseErrorMessage(response));
   }
-  return AvatarAssetUploadResponseSchema.parse(await response.json());
+  return ProjectApplyBundleUploadResponseSchema.parse(await response.json());
+}
+async function stageEmptyApplyBundle(context, options) {
+  const body = JSON.stringify({
+    version: PROJECT_APPLY_BUNDLE_VERSION,
+    files: []
+  });
+  const sizeBytes = Buffer.byteLength(body, "utf8");
+  const upload = await prepareProjectApplyBundleUpload(
+    context,
+    { sha256: createHash3("sha256").update(body).digest("hex"), sizeBytes },
+    options
+  );
+  await uploadProjectApplyBundle(context, {
+    uploadUrl: upload.uploadUrl,
+    method: upload.method,
+    contentType: upload.contentType,
+    body
+  });
+  return upload.source;
 }
-async function avatarAssetUploadPath(context, sha256) {
-  const subpath = `/avatar-assets/${encodeURIComponent(sha256)}`;
+async function uploadProjectApplyBundle(context, request) {
+  const response = await context.fetch(request.uploadUrl, {
+    method: request.method,
+    headers: { "content-type": request.contentType },
+    body: request.body
+  });
+  if (!response.ok) {
+    throw new Error(
+      `Project apply bundle upload failed with ${response.status}: ${await response.text()}`
+    );
+  }
+}
+async function projectApplyBundleUploadPath(context) {
   try {
-    return projectApiPath(await context.activeProject(), subpath);
+    return projectApiPath(await context.activeProject(), "/apply-bundles");
   } catch (error51) {
     if (context.shouldTryProjectInferredAuth()) {
-      return apiPath(`/project${subpath}`);
+      return apiPath("/project/apply-bundles");
     }
     throw error51;
   }
@@ -20196,12 +20275,18 @@ async function removeProjectServiceAccount(context, request, options) {
   return ProjectServiceAccountRemoveResponseSchema.parse(await response.json());
 }
 async function deleteProjectResource(context, request, options) {
+  const bundle = await stageEmptyApplyBundle(context, options);
   const response = await applyProjectResources(
     context,
     {
+      source: {
+        kind: "bundle",
+        bundle,
+        entrypoint: { kind: "directory", resourceRoot: ".auto" }
+      },
       delete: [request],
-      prune: false,
-      resources: []
+      dryRun: false,
+      prune: false
     },
     options
   );
@@ -20284,15 +20369,13 @@ async function listProjectResources(context, endpoint, options) {
   }
   return await response.json();
 }
-var AvatarAssetUploadUnsupportedError, SlackConfigTokenRequiredError;
+var SlackConfigTokenRequiredError;
 var init_resources2 = __esm({
   "src/lib/api/resources.ts"() {
     "use strict";
     init_src();
     init_errors3();
     init_paths();
-    AvatarAssetUploadUnsupportedError = class extends Error {
-    };
     SlackConfigTokenRequiredError = class extends Error {
       workspace;
       constructor(message, workspace) {
@@ -21041,6 +21124,7 @@ function createApiClient(input) {
       activeProject,
       apiUrl,
       authenticatedFetch,
+      fetch: input.fetch,
       shouldTryProjectInferredAuth
     }),
     async setSecret(name, request, options = {}) {
@@ -21581,7 +21665,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.166",
+      version: "0.1.168",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"
@@ -22425,106 +22509,6 @@ var init_agent_tool_connect = __esm({
   }
 });
 
-// src/commands/apply/assets.ts
-async function resolveApplyAssets(input) {
-  const entries = Object.entries(input.request.assets);
-  if (entries.length === 0) {
-    return { resources: input.request.resources, assets: {} };
-  }
-  const probes = await Promise.all(
-    entries.map(async ([path2, asset]) => ({
-      path: path2,
-      asset,
-      stored: await input.client.hasAvatarAsset(
-        { sha256: asset.sha256 },
-        { apiBaseUrl: input.apiBaseUrl }
-      )
-    }))
-  );
-  const inline2 = {};
-  for (const probe of probes) {
-    if (probe.stored) {
-      continue;
-    }
-    if (!await uploadAvatarAsset2(input.client, probe.asset, input.apiBaseUrl)) {
-      inline2[probe.path] = probe.asset;
-    }
-  }
-  const resources = input.request.resources.map(
-    (resource) => stampAvatarSha256(resource, input.request.assets)
-  );
-  return { resources, assets: inline2 };
-}
-function assertApplyRequestBodySize(input) {
-  const bytes = Buffer.byteLength(input.body, "utf8");
-  if (bytes <= MAX_APPLY_REQUEST_BODY_BYTES) {
-    return;
-  }
-  const paths = Object.keys(input.assets);
-  const assetDetail = paths.length > 0 ? ` ${paths.length} avatar asset(s) are not yet stored on the server, so their bytes must ride this request: ${paths.join(", ")}. Apply the agents referencing them in smaller batches (auto apply -f <file> --no-prune) or shrink the image files.` : "";
-  throw new Error(
-    `Apply request body is ${formatMegabytes(bytes)}MB, over the ~4.5MB server request limit.${assetDetail}`
-  );
-}
-async function uploadAvatarAsset2(client, asset, apiBaseUrl) {
-  try {
-    await client.uploadAvatarAsset(asset, { apiBaseUrl });
-    return true;
-  } catch (error51) {
-    if (error51 instanceof AvatarAssetUploadUnsupportedError) {
-      return false;
-    }
-    throw error51;
-  }
-}
-function stampAvatarSha256(resource, assets) {
-  if (resource.kind === "identity") {
-    const avatar = resource.spec.avatar;
-    const asset = avatar ? assets[avatar.asset] : void 0;
-    if (!avatar || !asset) {
-      return resource;
-    }
-    return {
-      ...resource,
-      spec: {
-        ...resource.spec,
-        avatar: { asset: avatar.asset, sha256: asset.sha256 }
-      }
-    };
-  }
-  if (resource.kind === RESOURCE_KIND_AGENT && typeof resource.spec.identity === "object" && resource.spec.identity !== null && !Array.isArray(resource.spec.identity)) {
-    const identity2 = resource.spec.identity;
-    const avatar = identity2.avatar;
-    const asset = avatar ? assets[avatar.asset] : void 0;
-    if (!avatar || !asset) {
-      return resource;
-    }
-    return {
-      ...resource,
-      spec: {
-        ...resource.spec,
-        identity: {
-          ...identity2,
-          avatar: { asset: avatar.asset, sha256: asset.sha256 }
-        }
-      }
-    };
-  }
-  return resource;
-}
-function formatMegabytes(bytes) {
-  return (bytes / (1024 * 1024)).toFixed(1);
-}
-var MAX_APPLY_REQUEST_BODY_BYTES;
-var init_assets = __esm({
-  "src/commands/apply/assets.ts"() {
-    "use strict";
-    init_src();
-    init_resources2();
-    MAX_APPLY_REQUEST_BODY_BYTES = 4 * 1024 * 1024;
-  }
-});
-
 // ../../packages/schemas/src/project-apply-files/source.ts
 import { parseAllDocuments as parseYamlDocuments2 } from "yaml";
 function readDocumentsFromSource(file2) {
@@ -23366,7 +23350,7 @@ var init_apply_result = __esm({
 });
 
 // ../../packages/schemas/src/project-apply-files/assets.ts
-import { createHash as createHash3 } from "crypto";
+import { createHash as createHash4 } from "crypto";
 import { extname as extname2 } from "path";
 function readApplyAssets(resources, readAsset) {
   const assets = {};
@@ -23413,7 +23397,7 @@ function projectApplyAssetFromSource(input) {
     );
   }
   return {
-    sha256: createHash3("sha256").update(bytes).digest("hex"),
+    sha256: createHash4("sha256").update(bytes).digest("hex"),
     contentType: extension === ".png" ? "image/png" : "image/jpeg",
     dataBase64: bytes.toString("base64")
   };
@@ -23430,7 +23414,7 @@ function avatarAssetTarget(resource) {
   return void 0;
 }
 var ALLOWED_AVATAR_EXTENSIONS;
-var init_assets2 = __esm({
+var init_assets = __esm({
   "../../packages/schemas/src/project-apply-files/assets.ts"() {
     "use strict";
     init_agents();
@@ -23587,7 +23571,7 @@ var init_project_apply_files = __esm({
     init_project_resources();
     init_agent_authoring();
     init_apply_result();
-    init_assets2();
+    init_assets();
     init_source();
   }
 });
@@ -23602,6 +23586,7 @@ var init_project_apply_files2 = __esm({
 
 // src/commands/apply/files.ts
 import {
+  existsSync as existsSync4,
   readFileSync as readFileSync4,
   readdirSync as readdirSync3,
   realpathSync,
@@ -23616,7 +23601,7 @@ import {
   relative,
   resolve as resolve2
 } from "path";
-function readProjectApplyRequest(options) {
+function readProjectApplyBundleInput(options) {
   if (options.file && options.directory) {
     throw new Error("Cannot use --file with --directory.");
   }
@@ -23624,21 +23609,45 @@ function readProjectApplyRequest(options) {
     const file2 = resolve2(options.file);
     const projectRoot2 = applyFileProjectRoot(file2);
     const sourceRoot = applyFileSourceRoot(file2, projectRoot2);
-    return readProjectApplyFileSource({
+    const files2 = sourceFiles(sourceRoot, projectRoot2);
+    const request = readProjectApplyFileSource({
       file: sourceFile(file2, projectRoot2),
-      files: sourceFiles(sourceRoot, projectRoot2),
+      files: files2,
       readAsset: filesystemAssetReader(projectRoot2)
     });
+    return {
+      request,
+      bundle: applyBundle(
+        withProjectApplyAssetFiles({ files: files2, request, projectRoot: projectRoot2 })
+      ),
+      entrypoint: {
+        kind: "file",
+        filePath: sourcePathRelative(projectRoot2, file2)
+      }
+    };
   }
   const directory = resolve2(options.directory ?? join5(process.cwd(), ".auto"));
   const projectRoot = applyProjectRoot(directory);
-  return readProjectApplyDirectorySource({
-    files: sourceFiles(directory, projectRoot),
-    resourceRoot: sourcePathRelative(projectRoot, directory),
-    displayResourceRoot: displayResourceRoot(directory),
-    emptyMessage: `No resource files found in ${directory}`,
-    readAsset: filesystemAssetReader(projectRoot)
-  });
+  const files = sourceFiles(directory, projectRoot);
+  const resourceRoot = sourcePathRelative(projectRoot, directory);
+  return {
+    request: readProjectApplyDirectorySource({
+      files,
+      resourceRoot,
+      displayResourceRoot: displayResourceRoot(directory),
+      emptyMessage: `No resource files found in ${directory}`,
+      readAsset: filesystemAssetReader(projectRoot)
+    }),
+    bundle: applyBundle(files),
+    entrypoint: {
+      kind: "directory",
+      resourceRoot,
+      displayResourceRoot: displayResourceRoot(directory)
+    }
+  };
+}
+function serializeProjectApplyBundle(bundle) {
+  return JSON.stringify(ProjectApplyBundleSchema.parse(bundle));
 }
 function sourceFiles(root, projectRoot) {
   let entries;
@@ -23664,6 +23673,28 @@ function sourceFile(path2, projectRoot) {
     contentBase64: readFileSync4(path2).toString("base64")
   };
 }
+function applyBundle(files) {
+  return ProjectApplyBundleSchema.parse({
+    version: PROJECT_APPLY_BUNDLE_VERSION,
+    files: [...files].sort(
+      (left, right) => left.path.localeCompare(right.path)
+    )
+  });
+}
+function withProjectApplyAssetFiles(input) {
+  const files = [...input.files];
+  const includedPaths = new Set(files.map((file2) => file2.path));
+  for (const assetPath of Object.keys(input.request.assets)) {
+    if (includedPaths.has(assetPath)) {
+      continue;
+    }
+    files.push(
+      sourceFile(resolve2(input.projectRoot, assetPath), input.projectRoot)
+    );
+    includedPaths.add(assetPath);
+  }
+  return files;
+}
 function filesystemAssetReader(projectRoot) {
   return ({ asset, resourceName }) => {
     const path2 = validateAgentAvatarAsset({
@@ -23687,6 +23718,9 @@ function applyFileProjectRoot(file2) {
     if (basename3(dir) === ".auto") {
       return dirname5(dir);
     }
+    if (directoryHasAutoRoot(dir)) {
+      return dir;
+    }
     const parent = dirname5(dir);
     if (parent === dir) {
       return process.cwd();
@@ -23698,6 +23732,13 @@ function applyFileSourceRoot(file2, projectRoot) {
   const autoRoot = resolve2(projectRoot, ".auto");
   return file2 === autoRoot || isInside(file2, autoRoot) ? autoRoot : dirname5(file2);
 }
+function directoryHasAutoRoot(directory) {
+  const autoRoot = resolve2(directory, ".auto");
+  if (!existsSync4(autoRoot)) {
+    return false;
+  }
+  return statSync2(autoRoot).isDirectory();
+}
 function displayResourceRoot(directory) {
   return basename3(directory) === ".auto" ? ".auto" : directory;
 }
@@ -23773,59 +23814,88 @@ var init_files = __esm({
 });
 
 // src/commands/apply/actions.ts
+import { createHash as createHash5 } from "crypto";
 async function applyResource(input) {
   if (input.commandOptions.connect && input.commandOptions.json) {
     throw new Error("Cannot use --connect with --json output.");
   }
-  const request = readProjectApplyRequest(input.commandOptions);
-  await applyProjectInput({
+  const bundleInput = readProjectApplyBundleInput(input.commandOptions);
+  const commandOptions = {
+    ...input.commandOptions,
+    prune: input.commandOptions.file ? false : input.commandOptions.prune ?? bundleInput.request.prune
+  };
+  await applyProjectBundleInput({
+    commandOptions,
+    client: input.client,
+    input: bundleInput,
+    writeOutput: input.writeOutput,
+    style: input.style
+  });
+}
+async function applyProjectBundleInput(input) {
+  const dryRun = input.commandOptions.dryRun ?? input.input.request.dryRun;
+  const prune = input.commandOptions.prune ?? input.input.request.prune;
+  const body = serializeProjectApplyBundle(input.input.bundle);
+  const sizeBytes = Buffer.byteLength(body, "utf8");
+  if (sizeBytes > MAX_PROJECT_APPLY_BUNDLE_BYTES) {
+    throw new Error(
+      `Project apply bundle is ${formatMegabytes(sizeBytes)}MB, over the ${formatMegabytes(MAX_PROJECT_APPLY_BUNDLE_BYTES)}MB upload limit.`
+    );
+  }
+  const upload = await input.client.prepareProjectApplyBundleUpload(
+    {
+      sha256: createHash5("sha256").update(body).digest("hex"),
+      sizeBytes
+    },
+    { apiBaseUrl: input.commandOptions.apiBaseUrl }
+  );
+  await input.client.uploadProjectApplyBundle({
+    uploadUrl: upload.uploadUrl,
+    method: upload.method,
+    contentType: upload.contentType,
+    body
+  });
+  const response = await input.client.applyProjectResources(
+    {
+      source: {
+        kind: "bundle",
+        bundle: upload.source,
+        entrypoint: input.input.entrypoint
+      },
+      dryRun,
+      prune
+    },
+    { apiBaseUrl: input.commandOptions.apiBaseUrl }
+  );
+  await writeProjectApplyResponse({
     commandOptions: {
       ...input.commandOptions,
-      prune: input.commandOptions.file ? false : input.commandOptions.prune ?? request.prune
+      dryRun,
+      prune
     },
     client: input.client,
-    request,
+    request: input.input.request,
+    response,
     writeOutput: input.writeOutput,
     style: input.style
   });
 }
-async function applyProjectInput(input) {
+async function writeProjectApplyResponse(input) {
   const style = input.style ?? plainStyle;
-  const dryRun = input.commandOptions.dryRun ?? input.request.dryRun;
-  const resolved = await resolveApplyAssets({
-    client: input.client,
-    request: input.request,
-    apiBaseUrl: input.commandOptions.apiBaseUrl,
-    dryRun
-  });
-  const request = {
-    ...input.request.delete.length > 0 ? { delete: input.request.delete } : {},
-    dryRun,
-    prune: input.commandOptions.prune ?? input.request.prune,
-    resources: resolved.resources,
-    ...Object.keys(resolved.assets).length > 0 ? { assets: resolved.assets } : {}
-  };
-  assertApplyRequestBodySize({
-    body: JSON.stringify(request),
-    assets: resolved.assets
-  });
-  const response = await input.client.applyProjectResources(request, {
-    apiBaseUrl: input.commandOptions.apiBaseUrl
-  });
-  const resources = response.resources.map((resource, index) => ({
-    kind: appliedResourceKind(input.request, response, index),
+  const resources = input.response.resources.map((resource, index) => ({
+    kind: appliedResourceKind(input.request, input.response, index),
     resource
   }));
   if (input.commandOptions.json) {
-    input.writeOutput(JSON.stringify(response));
+    input.writeOutput(JSON.stringify(input.response));
     return;
   }
-  if (response.dryRun) {
+  if (input.response.dryRun) {
     const actionWidth = Math.max(
-      ...response.plan.map((item) => item.action.length),
+      ...input.response.plan.map((item) => item.action.length),
       0
     );
-    for (const item of response.plan) {
+    for (const item of input.response.plan) {
       input.writeOutput(
         `${planActionStyle(
           style,
@@ -23844,7 +23914,7 @@ async function applyProjectInput(input) {
         );
       }
     }
-    writeDiagnostics(response.diagnostics, input.writeOutput, style);
+    writeDiagnostics(input.response.diagnostics, input.writeOutput, style);
     return;
   }
   for (const { kind, resource } of resources) {
@@ -23860,7 +23930,7 @@ async function applyProjectInput(input) {
       `${style.label("resource_version")} ${resource.metadata.resourceVersion}`
     );
   }
-  for (const trigger of response.triggers) {
+  for (const trigger of input.response.triggers) {
     input.writeOutput(`${style.label("webhook_event")} ${trigger.event}`);
     input.writeOutput(`${style.label("webhook_endpoint")} ${trigger.endpoint}`);
     input.writeOutput(
@@ -23868,12 +23938,12 @@ async function applyProjectInput(input) {
     );
     input.writeOutput(`${style.label("webhook_status")} ${trigger.status}`);
   }
-  for (const resource of response.pruned) {
+  for (const resource of input.response.pruned) {
     input.writeOutput(
       `${style.warn("pruned")} ${resource.kind}/${resource.name}`
     );
   }
-  writeDiagnostics(response.diagnostics, input.writeOutput, style);
+  writeDiagnostics(input.response.diagnostics, input.writeOutput, style);
   if (input.commandOptions.connect) {
     const connections = mcpOAuthAgentToolConnectionsFromAppliedResources(resources);
     for (const item of connections) {
@@ -23910,12 +23980,15 @@ function planActionStyle(style, action) {
       return (text) => text;
   }
 }
+function formatMegabytes(bytes) {
+  return (bytes / (1024 * 1024)).toFixed(1);
+}
 var init_actions = __esm({
   "src/commands/apply/actions.ts"() {
     "use strict";
+    init_src();
     init_style();
     init_agent_tool_connect();
-    init_assets();
     init_files();
   }
 });
@@ -24010,7 +24083,13 @@ var init_resources3 = __esm({
 
 // src/commands/edit/actions.ts
 import { spawn as spawn2 } from "child_process";
-import { mkdtempSync as mkdtempSync2, readFileSync as readFileSync5, rmSync as rmSync2, writeFileSync as writeFileSync4 } from "fs";
+import {
+  mkdirSync as mkdirSync3,
+  mkdtempSync as mkdtempSync2,
+  readFileSync as readFileSync5,
+  rmSync as rmSync2,
+  writeFileSync as writeFileSync4
+} from "fs";
 import { tmpdir as tmpdir2 } from "os";
 import { join as join6 } from "path";
 import { parseAllDocuments as parseYamlDocuments3, stringify as stringify4 } from "yaml";
@@ -24029,11 +24108,13 @@ async function editResource(input) {
   const current = await requireProjectResource(input.client, reference, {
     apiBaseUrl: input.commandOptions.apiBaseUrl
   });
-  const document = editableResourceDocument(reference.kind, current);
+  const document = editableAgentFacade(current);
   const source = `${stringify4(document).trimEnd()}
 `;
   const tempRoot = mkdtempSync2(join6(tmpdir2(), "auto-edit-"));
-  const filePath = join6(tempRoot, `${reference.kind}-${reference.name}.yaml`);
+  const agentsDir = join6(tempRoot, ".auto", "agents");
+  mkdirSync3(agentsDir, { recursive: true });
+  const filePath = join6(agentsDir, `${reference.name}.yaml`);
   writeFileSync4(filePath, source, "utf8");
   let removeTempFile = false;
   try {
@@ -24044,22 +24125,16 @@ async function editResource(input) {
       removeTempFile = true;
       return { changed: false, resource: reference };
     }
-    const editedResource = readEditedResource(filePath, reference);
-    const request = {
-      delete: [],
-      dryRun: false,
-      prune: false,
-      resources: [editedResource],
-      assets: {}
-    };
-    await applyProjectInput({
+    assertEditedResourceIdentity(filePath, reference);
+    const bundleInput = readProjectApplyBundleInput({ file: filePath });
+    await applyProjectBundleInput({
       commandOptions: {
         apiBaseUrl: input.commandOptions.apiBaseUrl,
         dryRun: input.commandOptions.dryRun,
         prune: false
       },
       client: input.client,
-      request,
+      input: bundleInput,
       writeOutput: input.writeOutput
     });
     removeTempFile = true;
@@ -24108,44 +24183,41 @@ async function runEditor(editor, filePath) {
     });
   });
 }
-function readEditedResource(filePath, expected) {
+function assertEditedResourceIdentity(filePath, expected) {
   const source = readFileSync5(filePath, "utf8");
-  let documents;
+  let parsedDocuments;
   try {
-    documents = parseYamlDocuments3(source).filter((document) => document.contents !== null).map((document) => document.toJSON());
+    parsedDocuments = parseYamlDocuments3(source);
   } catch (error51) {
     throw new Error(
       `Invalid edited resource: ${error51 instanceof Error ? error51.message : String(error51)}`
     );
   }
+  const parseError = parsedDocuments.flatMap((document2) => document2.errors)[0];
+  if (parseError) {
+    throw new Error(`Invalid edited resource: ${parseError.message}`);
+  }
+  const documents = parsedDocuments.filter((document2) => document2.contents !== null).map((document2) => document2.toJSON());
   if (documents.length !== 1) {
     throw new Error("Edited resource must contain exactly one YAML document.");
   }
-  const parsed = ProjectApplyResourceSchema.safeParse(documents[0]);
-  if (!parsed.success) {
-    throw new Error(`Invalid edited resource: ${parsed.error.message}`);
-  }
-  if (parsed.data.kind !== expected.kind) {
-    throw new Error(
-      `Edited resource kind changed from "${expected.kind}" to "${parsed.data.kind}".`
-    );
+  const document = documents[0];
+  const name = typeof document === "object" && document !== null && "name" in document && typeof document.name === "string" ? document.name : void 0;
+  if (name === void 0) {
+    throw new Error("Invalid edited resource: missing agent name.");
   }
-  if (parsed.data.metadata.name !== expected.name) {
+  if (name !== expected.name) {
     throw new Error(
-      `Edited resource name changed from "${expected.name}" to "${parsed.data.metadata.name}".`
+      `Edited resource name changed from "${expected.name}" to "${name}".`
     );
   }
-  return parsed.data;
 }
-function editableResourceDocument(kind, resource) {
+function editableAgentFacade(resource) {
   return {
-    kind,
-    metadata: {
-      name: resource.metadata.name,
-      ...resource.metadata.labels ? { labels: resource.metadata.labels } : {},
-      ...resource.metadata.annotations ? { annotations: resource.metadata.annotations } : {}
-    },
-    spec: resource.spec
+    name: resource.metadata.name,
+    ...resource.metadata.labels ? { labels: resource.metadata.labels } : {},
+    ...resource.metadata.annotations ? { annotations: resource.metadata.annotations } : {},
+    ...resource.spec
   };
 }
 var init_actions2 = __esm({
@@ -24154,6 +24226,7 @@ var init_actions2 = __esm({
     init_src();
     init_resources3();
     init_actions();
+    init_files();
   }
 });
 
@@ -29537,7 +29610,7 @@ var init_launcher = __esm({
 });
 
 // src/cli/program.ts
-import { existsSync as existsSync4 } from "fs";
+import { existsSync as existsSync5 } from "fs";
 import { Command, Option as Option4 } from "commander";
 
 // src/commands/account/commands.ts
@@ -29962,14 +30035,14 @@ async function authorizeSensitiveActionLoopback(input) {
     successHtml: () => renderOAuthLoopbackPage({
       status: "success",
       eyebrow: "Auto CLI",
-      title: "Account deletion confirmed",
-      message: "Auto received the fresh browser authorization. The CLI will finish deleting the account from your terminal.",
+      title: "Authorization confirmed",
+      message: "Auto received the fresh browser authorization. Return to your terminal to finish deleting the account.",
       details: [{ label: "Account", value: input.email }]
     }),
     failureHtml: () => renderOAuthLoopbackPage({
       status: "failure",
       eyebrow: "Auto CLI",
-      title: "Account deletion confirmation failed",
+      title: "Authorization failed",
       message: "The browser authorization did not complete. Return to your terminal to retry or inspect the error.",
       details: [{ label: "Account", value: input.email }]
     })
@@ -36173,7 +36246,7 @@ function createProgram(options = {}) {
       assertValidProfileName(pin);
       const base = options.configPath ?? defaultConfigPath();
       const pinnedPath = profileFilePath(base, pin);
-      if (!existsSync4(pinnedPath)) {
+      if (!existsSync5(pinnedPath)) {
         const names = listProfiles(base).map((profile) => profile.name);
         throw new Error(
           `No stored profile "${pin}". Stored profiles: ${names.join(", ") || "(none)"}.`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autohq/cli",
-  "version": "0.1.166",
+  "version": "0.1.168",
   "license": "SEE LICENSE IN README.md",
   "publishConfig": {
     "access": "public"