@autohq/cli 0.1.237 → 0.1.239

package/dist/agent-bridge.js

@@ -23340,7 +23340,7 @@ Object.assign(lookup, {
 // package.json
 var package_default = {
   name: "@autohq/cli",
-  version: "0.1.237",
+  version: "0.1.239",
   license: "SEE LICENSE IN README.md",
   publishConfig: {
     access: "public"
@@ -25315,6 +25315,24 @@ var TelegramConnectionCreateResponseSchema = external_exports.discriminatedUnion
     })
   ]
 );
+var MODEL_API_TOKEN_PROVIDERS = ["anthropic", "openai"];
+var ModelApiTokenProviderSchema = external_exports.enum(MODEL_API_TOKEN_PROVIDERS);
+var ModelProviderConnectionCreateRequestSchema = external_exports.object({
+  organizationId: OrganizationIdSchema.optional(),
+  provider: ModelApiTokenProviderSchema,
+  token: external_exports.string().trim().min(1),
+  name: ConnectionNameSchema.default("default"),
+  /** Grant this project access to the connection once created. */
+  allowProjectId: ProjectIdSchema.optional()
+});
+var ModelProviderConnectionCreateResponseSchema = external_exports.object({
+  status: external_exports.literal("connected"),
+  provider: ModelApiTokenProviderSchema,
+  connection: ConnectionNameSchema,
+  providerGrantId: external_exports.string().trim().min(1),
+  organizationId: OrganizationIdSchema,
+  message: external_exports.string().trim().min(1)
+});
 var ConnectionAllowRequestSchema = external_exports.object({
   organizationId: OrganizationIdSchema.optional(),
   provider: ProviderNameSchema,
@@ -27729,6 +27747,10 @@ var ResourceReconciliationScopeSchema = external_exports.object({
 
 // ../../packages/schemas/src/usage.ts
 var UsageHarnessSchema = external_exports.enum(AGENT_HARNESSES);
+var ModelCredentialFundingSourceSchema = external_exports.enum([
+  "platform",
+  "tenant_provider_grant"
+]);
 var NonNegativeTokenCountSchema = external_exports.number().int().nonnegative();
 var NonNegativeUsdSchema = external_exports.number().nonnegative();
 var UsageEventSchema = external_exports.object({
@@ -27754,6 +27776,11 @@ var UsageEventSchema = external_exports.object({
   // later rate-card change never silently rewrites historical cost.
   derivedCostUsd: NonNegativeUsdSchema,
   pricingVersion: external_exports.string().trim().min(1),
+  // Historical funding attribution for the model call. The provider grant id is
+  // denormalized and nullable for platform-funded usage, matching the ledger's
+  // no-FK audit-trail contract.
+  fundingSource: ModelCredentialFundingSourceSchema.default("platform"),
+  modelCredentialProviderGrantId: ProviderGrantIdSchema.nullable().default(null),
   occurredAt: external_exports.string().datetime()
 });
 var UsageEventRecordSchema = UsageEventSchema.extend({

package/dist/index.js

@@ -16738,7 +16738,7 @@ var init_resources = __esm({
 });
 
 // ../../packages/schemas/src/connections.ts
-var RESOURCE_KIND_CONNECTION, ConnectionNameSchema, ProviderConnectionReferenceSchema, ProjectConnectionAllocationSpecSchema, ProjectConnectionAllocationResourceSchema, GithubConnectionAccountSchema, GithubConnectionRepositorySchema, GITHUB_CONNECTION_EVENTS, GithubConnectionEventSchema, GithubConnectionSpecSchema, ConnectionSpecSchema, ConnectionResourceSchema, ConnectionApplyRequestSchema, ConnectionStartRequestSchema, ConnectionProviderDescriptorSchema, ConnectionProviderListResponseSchema, ConnectionStartResponseSchema, TelegramConnectionCreateRequestSchema, TelegramManagerBotSummarySchema, TelegramConnectionCreateResponseSchema, ConnectionAllowRequestSchema, SlackConfigTokenRegisterRequestSchema, SlackConfigTokenRegisterResponseSchema, ConnectionAllowResponseSchema, ConnectionRemoveRequestSchema, ConnectionRemoveResponseSchema;
+var RESOURCE_KIND_CONNECTION, ConnectionNameSchema, ProviderConnectionReferenceSchema, ProjectConnectionAllocationSpecSchema, ProjectConnectionAllocationResourceSchema, GithubConnectionAccountSchema, GithubConnectionRepositorySchema, GITHUB_CONNECTION_EVENTS, GithubConnectionEventSchema, GithubConnectionSpecSchema, ConnectionSpecSchema, ConnectionResourceSchema, ConnectionApplyRequestSchema, ConnectionStartRequestSchema, ConnectionProviderDescriptorSchema, ConnectionProviderListResponseSchema, ConnectionStartResponseSchema, TelegramConnectionCreateRequestSchema, TelegramManagerBotSummarySchema, TelegramConnectionCreateResponseSchema, MODEL_API_TOKEN_PROVIDERS, ModelApiTokenProviderSchema, ModelProviderConnectionCreateRequestSchema, ModelProviderConnectionCreateResponseSchema, ConnectionAllowRequestSchema, SlackConfigTokenRegisterRequestSchema, SlackConfigTokenRegisterResponseSchema, ConnectionAllowResponseSchema, ConnectionRemoveRequestSchema, ConnectionRemoveResponseSchema;
 var init_connections = __esm({
   "../../packages/schemas/src/connections.ts"() {
     "use strict";
@@ -16865,6 +16865,24 @@ var init_connections = __esm({
         })
       ]
     );
+    MODEL_API_TOKEN_PROVIDERS = ["anthropic", "openai"];
+    ModelApiTokenProviderSchema = external_exports.enum(MODEL_API_TOKEN_PROVIDERS);
+    ModelProviderConnectionCreateRequestSchema = external_exports.object({
+      organizationId: OrganizationIdSchema.optional(),
+      provider: ModelApiTokenProviderSchema,
+      token: external_exports.string().trim().min(1),
+      name: ConnectionNameSchema.default("default"),
+      /** Grant this project access to the connection once created. */
+      allowProjectId: ProjectIdSchema.optional()
+    });
+    ModelProviderConnectionCreateResponseSchema = external_exports.object({
+      status: external_exports.literal("connected"),
+      provider: ModelApiTokenProviderSchema,
+      connection: ConnectionNameSchema,
+      providerGrantId: external_exports.string().trim().min(1),
+      organizationId: OrganizationIdSchema,
+      message: external_exports.string().trim().min(1)
+    });
     ConnectionAllowRequestSchema = external_exports.object({
       organizationId: OrganizationIdSchema.optional(),
       provider: ProviderNameSchema,
@@ -19571,7 +19589,7 @@ var init_temporal = __esm({
 });
 
 // ../../packages/schemas/src/usage.ts
-var UsageHarnessSchema, NonNegativeTokenCountSchema, NonNegativeUsdSchema, UsageEventSchema, UsageEventRecordSchema;
+var UsageHarnessSchema, ModelCredentialFundingSourceSchema, NonNegativeTokenCountSchema, NonNegativeUsdSchema, UsageEventSchema, UsageEventRecordSchema;
 var init_usage = __esm({
   "../../packages/schemas/src/usage.ts"() {
     "use strict";
@@ -19579,6 +19597,10 @@ var init_usage = __esm({
     init_agents();
     init_ids();
     UsageHarnessSchema = external_exports.enum(AGENT_HARNESSES);
+    ModelCredentialFundingSourceSchema = external_exports.enum([
+      "platform",
+      "tenant_provider_grant"
+    ]);
     NonNegativeTokenCountSchema = external_exports.number().int().nonnegative();
     NonNegativeUsdSchema = external_exports.number().nonnegative();
     UsageEventSchema = external_exports.object({
@@ -19604,6 +19626,11 @@ var init_usage = __esm({
       // later rate-card change never silently rewrites historical cost.
       derivedCostUsd: NonNegativeUsdSchema,
       pricingVersion: external_exports.string().trim().min(1),
+      // Historical funding attribution for the model call. The provider grant id is
+      // denormalized and nullable for platform-funded usage, matching the ledger's
+      // no-FK audit-trail contract.
+      fundingSource: ModelCredentialFundingSourceSchema.default("platform"),
+      modelCredentialProviderGrantId: ProviderGrantIdSchema.nullable().default(null),
       occurredAt: external_exports.string().datetime()
     });
     UsageEventRecordSchema = UsageEventSchema.extend({
@@ -21114,6 +21141,30 @@ function createApiClient(input) {
       }
       return await response.json();
     },
+    async connectModelProvider(options) {
+      const organization = await activeOrganization();
+      const response = await authenticatedFetch(
+        apiUrl(apiPath("/connections/model-provider"), options.apiBaseUrl),
+        {
+          method: "POST",
+          headers: {
+            "content-type": "application/json"
+          },
+          body: JSON.stringify({
+            organizationId: organization.organizationId,
+            provider: options.provider,
+            token: options.token,
+            ...options.name ? { name: options.name } : {},
+            ...options.allowProjectId ? { allowProjectId: options.allowProjectId } : {}
+          })
+        },
+        options.apiBaseUrl
+      );
+      if (!response.ok) {
+        throw new Error(await responseErrorMessage(response));
+      }
+      return await response.json();
+    },
     async registerSlackConfigToken(options) {
       const response = await authenticatedFetch(
         apiUrl(apiPath("/connections/slack/config-token"), options.apiBaseUrl),
@@ -22339,7 +22390,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.237",
+      version: "0.1.239",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"
@@ -36655,6 +36706,7 @@ function cliTelegramWizardPrompter(context) {
 }
 
 // src/commands/connections/actions.ts
+var MODEL_API_TOKEN_PROVIDERS2 = /* @__PURE__ */ new Set(["anthropic", "openai"]);
 async function listConnectionsAction(context, commandOptions) {
   const apiBaseUrl = apiUrlFromOptions(context, commandOptions);
   if (commandOptions.available) {
@@ -36683,9 +36735,9 @@ async function connectProviderAction(context, provider, commandOptions) {
       "--config-refresh-token is only supported for the slack provider."
     );
   }
-  if ((commandOptions.token || commandOptions.stdin) && provider !== "telegram") {
+  if ((commandOptions.token || commandOptions.stdin) && provider !== "telegram" && !MODEL_API_TOKEN_PROVIDERS2.has(provider)) {
     throw new Error(
-      "--token/--stdin are only supported for the telegram provider."
+      "--token/--stdin are only supported for telegram, anthropic, and openai."
     );
   }
   const allowScope = await resolveConnectAllowProject(
@@ -36720,6 +36772,37 @@ async function connectProviderAction(context, provider, commandOptions) {
     });
     return;
   }
+  if (MODEL_API_TOKEN_PROVIDERS2.has(provider)) {
+    if (commandOptions.token && commandOptions.stdin) {
+      throw new Error("Use only one of --token or --stdin.");
+    }
+    const token2 = commandOptions.token ?? (commandOptions.stdin ? await readTrimmedStream(context.stdin) : void 0);
+    if (!token2) {
+      const guidance = await createConnectionServiceClient(
+        scopedContext
+      ).startConnection(provider, {
+        allowProjectId,
+        apiBaseUrl
+      });
+      context.writeOutput(guidance.message);
+      for (const [index, step] of (guidance.steps ?? []).entries()) {
+        context.writeOutput(`  ${index + 1}. ${step}`);
+      }
+      return;
+    }
+    const result2 = await createConnectionServiceClient(
+      scopedContext
+    ).connectModelProvider({
+      provider,
+      token: token2,
+      name: commandOptions.name,
+      allowProjectId,
+      apiBaseUrl
+    });
+    context.writeOutput(result2.message);
+    context.writeOutput(`connection/${result2.connection}`);
+    return;
+  }
   if (commandOptions.configRefreshToken && commandOptions.wait === false) {
     throw new Error(
       "--config-refresh-token registers the token once the connection completes; it cannot be combined with --no-wait."

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autohq/cli",
-  "version": "0.1.237",
+  "version": "0.1.239",
   "license": "SEE LICENSE IN README.md",
   "publishConfig": {
     "access": "public"