@autohq/cli 0.1.281 → 0.1.283

package/dist/index.js

@@ -15840,7 +15840,7 @@ var init_chat = __esm({
 });
 
 // ../../packages/schemas/src/conversation.ts
-var CONVERSATION_ROLES, CONVERSATION_ENTRY_KINDS, CONVERSATION_ENTRY_STATUSES, UNKNOWN_MESSAGE_ID, ConversationRoleSchema, ConversationEntryKindSchema, ConversationEntryStatusSchema, ConversationTextContentPartSchema, ConversationReasoningContentPartSchema, ConversationToolCallContentPartSchema, ConversationToolResultContentPartSchema, ConversationQuestionOptionSchema, ConversationQuestionSchema, ConversationQuestionContentPartSchema, ConversationContentPartSchema, ConversationEntryContentSchema, ConversationEntryEventSchema, ConversationTextDeltaSchema, ConversationReasoningDeltaSchema, ConversationDeltaSchema, ConversationDeltaEventSchema, ConversationRealtimeEventSchema;
+var CONVERSATION_ROLES, CONVERSATION_ENTRY_KINDS, CONVERSATION_ENTRY_STATUSES, UNKNOWN_MESSAGE_ID, ConversationRoleSchema, ConversationEntryKindSchema, ConversationEntryStatusSchema, ConversationTextContentPartSchema, ConversationReasoningContentPartSchema, ConversationToolCallContentPartSchema, ConversationToolResultContentPartSchema, ConversationQuestionOptionSchema, ConversationQuestionSchema, ConversationQuestionContentPartSchema, ConversationUiMessageContentPartSchema, ConversationContentPartSchema, ConversationEntryContentSchema, ConversationEntryEventSchema, ConversationTextDeltaSchema, ConversationReasoningDeltaSchema, ConversationDeltaSchema, ConversationDeltaEventSchema, ConversationUiMessageChunkEventSchema, ConversationRealtimeEventSchema;
 var init_conversation = __esm({
   "../../packages/schemas/src/conversation.ts"() {
     "use strict";
@@ -15906,12 +15906,17 @@ var init_conversation = __esm({
       toolCallId: external_exports.string().min(1).nullable(),
       questions: external_exports.array(ConversationQuestionSchema)
     });
+    ConversationUiMessageContentPartSchema = external_exports.object({
+      type: external_exports.literal("ui_message"),
+      message: JsonValueSchema
+    });
     ConversationContentPartSchema = external_exports.discriminatedUnion("type", [
       ConversationTextContentPartSchema,
       ConversationReasoningContentPartSchema,
       ConversationToolCallContentPartSchema,
       ConversationToolResultContentPartSchema,
-      ConversationQuestionContentPartSchema
+      ConversationQuestionContentPartSchema,
+      ConversationUiMessageContentPartSchema
     ]);
     ConversationEntryContentSchema = external_exports.object({
       parts: external_exports.array(ConversationContentPartSchema)
@@ -15953,9 +15958,18 @@ var init_conversation = __esm({
       delta: ConversationDeltaSchema,
       createdAt: external_exports.string().datetime()
     });
+    ConversationUiMessageChunkEventSchema = external_exports.object({
+      type: external_exports.literal("ui.message.chunk"),
+      id: external_exports.string().min(1),
+      sessionId: SessionIdSchema,
+      sequence: external_exports.number().int().nonnegative(),
+      chunk: JsonValueSchema,
+      createdAt: external_exports.string().datetime()
+    });
     ConversationRealtimeEventSchema = external_exports.discriminatedUnion("type", [
       ConversationEntryEventSchema,
-      ConversationDeltaEventSchema
+      ConversationDeltaEventSchema,
+      ConversationUiMessageChunkEventSchema
     ]);
   }
 });
@@ -16064,6 +16078,7 @@ function assistantContentProjections(message, messageId) {
       projections.push({
         role: "assistant",
         kind: "tool_call",
+        ...messageId ? { messageId } : {},
         content: {
           parts: [
             {
@@ -16305,87 +16320,6 @@ function parseCodexServerFrame(raw) {
   const notification = parseNotification(frame.method, frame.params);
   return notification ? { kind: "notification", notification } : { kind: "ignored" };
 }
-function projectCodexItem(input) {
-  const { item, phase } = input;
-  switch (item.type) {
-    case "agentMessage":
-      return phase === "completed" && item.text.length > 0 ? [
-        {
-          role: "assistant",
-          kind: "message",
-          messageId: item.id,
-          content: textContent2(item.text)
-        }
-      ] : [];
-    case "reasoning": {
-      if (phase !== "completed") {
-        return [];
-      }
-      const text = item.summary.map((line) => line.trim()).filter(Boolean).join("\n\n");
-      return text.length > 0 ? [
-        {
-          role: "assistant",
-          kind: "message",
-          messageId: item.id,
-          content: reasoningContent(text)
-        }
-      ] : [];
-    }
-    case "commandExecution":
-      return toolProjection({
-        phase,
-        itemId: item.id,
-        name: "shell",
-        input: {
-          command: item.command,
-          ...item.cwd ? { cwd: item.cwd } : {}
-        },
-        output: item.aggregatedOutput ?? "",
-        isError: isFailedStatus(item.status) || (item.exitCode ?? 0) !== 0
-      });
-    case "fileChange":
-      return toolProjection({
-        phase,
-        itemId: item.id,
-        name: "apply_patch",
-        input: { changes: toJsonValue(item.changes) },
-        output: { status: item.status ?? "unknown" },
-        isError: isFailedStatus(item.status)
-      });
-    case "mcpToolCall":
-      return toolProjection({
-        phase,
-        itemId: item.id,
-        name: `${item.server}.${item.tool}`,
-        input: toJsonValue(item.arguments),
-        output: item.error ? { error: item.error.message } : toJsonValue(item.result),
-        isError: isFailedStatus(item.status) || item.error != null
-      });
-    default:
-      return [];
-  }
-}
-function projectCodexApproval(request) {
-  const subject = request.type === "commandExecution" ? `run the command: ${request.command ?? "(unknown command)"}` : "apply file changes";
-  const question = {
-    question: request.reason ? `Codex requests approval to ${subject}. ${request.reason}` : `Codex requests approval to ${subject}.`,
-    header: "Approval",
-    options: [
-      { label: APPROVE_OPTION_LABEL, description: "Allow this action." },
-      { label: DECLINE_OPTION_LABEL, description: "Reject this action." }
-    ],
-    multiSelect: false
-  };
-  return {
-    role: "assistant",
-    kind: "question",
-    content: {
-      parts: [
-        { type: "question", toolCallId: request.itemId, questions: [question] }
-      ]
-    }
-  };
-}
 function codexApprovalDecision(input) {
   const values = [...Object.values(input.answers), input.response ?? ""];
   const approved = values.some(
@@ -16510,51 +16444,6 @@ function parseApprovalRequest(method, requestId, params) {
       return null;
   }
 }
-function toolProjection(input) {
-  if (input.phase === "started") {
-    return [
-      {
-        role: "assistant",
-        kind: "tool_call",
-        content: {
-          parts: [
-            {
-              type: "tool_call",
-              toolCallId: input.itemId,
-              name: input.name,
-              input: input.input
-            }
-          ]
-        }
-      }
-    ];
-  }
-  return [
-    {
-      role: "tool",
-      kind: "tool_result",
-      content: {
-        parts: [
-          {
-            type: "tool_result",
-            toolUseId: input.itemId,
-            output: input.output,
-            isError: input.isError
-          }
-        ]
-      }
-    }
-  ];
-}
-function textContent2(text) {
-  return { parts: [{ type: "text", text }] };
-}
-function reasoningContent(text) {
-  return { parts: [{ type: "reasoning", text }] };
-}
-function isFailedStatus(status) {
-  return status === "failed" || status === "declined";
-}
 var CodexRequestIdSchema, CodexTurnStatusSchema, CodexUserMessageItemSchema, CodexAgentMessageItemSchema, CodexReasoningItemSchema, CodexCommandExecutionItemSchema, CodexFileChangeItemSchema, CodexMcpToolCallItemSchema, CodexItemSchema, OptionalCodexItemSchema, CodexItemEnvelopeSchema, CodexTurnEnvelopeSchema, CodexTokenUsageSchema, CodexTokenUsageEnvelopeSchema, CodexFrameSchema, APPROVE_OPTION_LABEL, DECLINE_OPTION_LABEL;
 var init_codex = __esm({
   "../../packages/schemas/src/codex.ts"() {
@@ -16658,6 +16547,9 @@ var init_codex = __esm({
 
 // ../../packages/schemas/src/conversation-reducer.ts
 function reduceConversationRealtimeEvent(entries, event) {
+  if (event.type === "ui.message.chunk") {
+    return [...entries];
+  }
   if (event.type === "conversation.delta") {
     const existingIndex = entries.findIndex(
       (entry) => entry.messageId === event.messageId
@@ -18988,7 +18880,7 @@ function isSessionTerminalStatus(status) {
     (terminalStatus) => terminalStatus === status
   );
 }
-var SESSION_STATUSES, SESSION_RUNTIME_PHASES, SESSION_TERMINAL_STATUSES, SESSION_DISPLAY_TITLE_MAX_LENGTH, SessionStatusSchema, SessionRuntimePhaseSchema, RunDisplayTitleSchema, AmbientStatusSchema, SESSION_CHECK_STATUSES, SESSION_CHECK_CONCLUSIONS, SESSION_CHECK_TIMEOUT_PHASES, SessionCheckStatusSchema, SessionCheckConclusionSchema, SessionCheckTimeoutPhaseSchema, ManualSessionRequestSchema, SessionArchiveRequestSchema, SessionsArchiveRequestSchema, SessionRecordSchema, SessionListItemAgentSchema, SessionListItemSchema, SessionListResponseSchema, SessionsArchiveResponseSchema;
+var SESSION_STATUSES, SESSION_RUNTIME_PHASES, SESSION_TERMINAL_STATUSES, SESSION_DISPLAY_TITLE_MAX_LENGTH, SESSION_MESSAGE_ROLES, SESSION_MESSAGE_STATUSES, SessionStatusSchema, SessionRuntimePhaseSchema, SessionMessageRoleSchema, SessionMessageStatusSchema, RunDisplayTitleSchema, AmbientStatusSchema, SESSION_CHECK_STATUSES, SESSION_CHECK_CONCLUSIONS, SESSION_CHECK_TIMEOUT_PHASES, SessionCheckStatusSchema, SessionCheckConclusionSchema, SessionCheckTimeoutPhaseSchema, ManualSessionRequestSchema, SessionArchiveRequestSchema, SessionsArchiveRequestSchema, SessionRecordSchema, SessionUiMessageRecordSchema, SessionListItemAgentSchema, SessionListItemSchema, SessionListResponseSchema, SessionsArchiveResponseSchema;
 var init_sessions = __esm({
   "../../packages/schemas/src/sessions.ts"() {
     "use strict";
@@ -19015,8 +18907,16 @@ var init_sessions = __esm({
     ];
     SESSION_TERMINAL_STATUSES = ["failed", "stopped"];
     SESSION_DISPLAY_TITLE_MAX_LENGTH = 64;
+    SESSION_MESSAGE_ROLES = ["system", "user", "assistant"];
+    SESSION_MESSAGE_STATUSES = [
+      "in_progress",
+      "completed",
+      "failed"
+    ];
     SessionStatusSchema = external_exports.enum(SESSION_STATUSES);
     SessionRuntimePhaseSchema = external_exports.enum(SESSION_RUNTIME_PHASES);
+    SessionMessageRoleSchema = external_exports.enum(SESSION_MESSAGE_ROLES);
+    SessionMessageStatusSchema = external_exports.enum(SESSION_MESSAGE_STATUSES);
     RunDisplayTitleSchema = external_exports.string().trim().max(SESSION_DISPLAY_TITLE_MAX_LENGTH);
     AmbientStatusSchema = external_exports.string().trim().min(1);
     SESSION_CHECK_STATUSES = [
@@ -19054,6 +18954,12 @@ var init_sessions = __esm({
       correlationKey: external_exports.string().nullable(),
       workflowId: external_exports.string().min(1),
       displayTitle: RunDisplayTitleSchema,
+      // Default to null so session.upsert entity records emitted before/without the
+      // active-stream metadata validate (undefined -> null) instead of throwing;
+      // the output type stays `string | null`, so consumers are unaffected.
+      activeUiMessageStreamId: external_exports.string().trim().min(1).nullable().default(null),
+      activeUiMessageStreamCommandId: external_exports.string().trim().min(1).nullable().default(null),
+      activeUiMessageStreamStartedAt: external_exports.string().datetime().nullable().default(null),
       ambientStatus: AmbientStatusSchema.nullable(),
       ambientStatusUpdatedAt: external_exports.string().datetime().nullable(),
       starterActor: AuthActorSchema.nullable(),
@@ -19075,6 +18981,20 @@ var init_sessions = __esm({
       archivedAt: external_exports.string().datetime().nullable(),
       error: JsonValueSchema.nullable()
     });
+    SessionUiMessageRecordSchema = external_exports.object({
+      id: external_exports.string().trim().min(1),
+      sessionId: SessionIdSchema,
+      sequence: external_exports.number().int().nonnegative(),
+      messageId: external_exports.string().trim().min(1),
+      commandId: external_exports.string().trim().min(1).nullable(),
+      turnId: external_exports.string().trim().min(1).nullable(),
+      role: SessionMessageRoleSchema,
+      status: SessionMessageStatusSchema,
+      message: JsonValueSchema,
+      createdAt: external_exports.string().datetime(),
+      updatedAt: external_exports.string().datetime(),
+      completedAt: external_exports.string().datetime().nullable()
+    });
     SessionListItemAgentSchema = external_exports.object({
       name: external_exports.string(),
       displayName: external_exports.string().nullable(),
@@ -19954,6 +19874,227 @@ var init_content_generated = __esm({
               content: 'systemPrompt: |\n  # How you communicate (read this first)\n\n  You are an auto agent running in a sandbox. Onboarding can start from either\n  Mission Control\'s web session UI or a Slack thread.\n\n  If the user is talking to you in a web session, reply directly in the session\n  chat. Do not call `mcp__auto__chat_send` for normal user-facing replies in web\n  mode. If the user later asks you to wire or test a Slack workflow, use Slack\n  tools only for that specific workflow surface.\n\n  If the user started onboarding from Slack, the start message includes\n  `Channel:` and `Thread:` lines. Treat those as the authoritative values for\n  `target.destination.channel` and `target.destination.thread`; do not search\n  Slack, inspect history, or infer a different thread before your first reply.\n  For Slack mode, send user-facing updates with the `mcp__auto__chat_send` chat\n  tool. Always set target provider to `slack`, target destination channel to the\n  channel id you were tagged in, and target destination thread to the thread id\n  you were tagged in (fall back to the triggering message as the thread root\n  when no thread id is present).\n  Your first Slack `mcp__auto__chat_send` call should use this argument shape:\n\n  ```json\n  {\n    "target": {\n      "provider": "slack",\n      "destination": {\n        "channel": "<channel from the Channel line>",\n        "thread": "<thread from the Thread line>"\n      }\n    },\n    "message": "<your message goes here>"\n  }\n  ```\n\n  Everything the procedure below calls "your message", "ask", "tell the user",\n  "reply", or "say" means the active surface: direct session-chat output in web\n  mode, or `mcp__auto__chat_send` into the Slack thread in Slack mode.\n\n  Concretely:\n\n  - **In web mode, the user reads the session chat.** Reply directly and keep the\n    conversation in the session. Do not narrate private tool noise or implementation\n    details unless they help the user decide the next step.\n  - **In Slack mode, the user reads Slack, not your session console / stdout.**\n    Text you emit as plain session output goes nowhere the user can see it. If\n    it isn\'t sent with `mcp__auto__chat_send` into the onboarding thread, it did\n    not reach the user.\n  - **If the user opened the conversation by tagging you in Slack, reply in that\n    thread.** Send your Beat 1 opening immediately (warm hello + the pitch + one\n    question), subscribe to the thread once, then get up to speed from the\n    reference docs before deeper onboarding work. Always reply in the same\n    thread, never start a new one and never post at the channel top level.\n    Do not call `mcp__auto__chat_history` to find the thread before this first\n    reply; the triggering message already gave you the channel and thread.\n  - **In Slack mode, subscribe to the thread right after your first reply.** Call\n    `mcp__auto__auto_chat_subscribe` for target provider `slack` and the channel\n    + thread you were tagged in. This is what makes the user\'s subsequent replies\n    route back to this session. Set target provider to `slack` and pass the\n    thread id you were tagged in. Do this once, immediately after your first\n    `mcp__auto__chat_send`.\n  - **Keep Slack concise and human.** Slack is a chat, not a document. Use a\n    few sentences and one question at a time, especially when replying directly\n    to a user. For longer follow-ups, prefer two or three focused\n    `mcp__auto__chat_send` calls over one giant message. Avoid superfluous\n    technical labels until the user needs them, avoid em dashes, and skip\n    stock phrases and sincerity labels like "load-bearing", "honest take",\n    "to be honest", "genuinely", and "Not X, but Y"; candor and care are\n    expected, so do not announce them.\n    Do not manufacture a menu of options when one path is clearly best.\n  - **Use banter deliberately.** Light banter is welcome and encouraged when the\n    user is playful or the codebase gives you something amusingly odd to smile\n    about. Deliver it almost exclusively as its own short\n    `mcp__auto__chat_send` message instead of mixing it into operational\n    instructions or status updates.\n  - **Use chat tools precisely.** When calling `mcp__auto__chat_send` or\n    `mcp__auto__chat_history` for Slack, set target provider to `slack`, pass the\n    channel/thread you know, and do not set `target.destination.workspace` unless\n    you know the actual Slack workspace name. Never set `workspace` to a channel\n    id or thread id. Use raw Slack mrkdwn links, for example\n    `<https://example.com|link text>`.\n  - **Call chat tools directly, and pass structured args.** The chat tools are\n    callable directly by name (for example `mcp__auto__chat_send`,\n    `mcp__auto__auto_chat_subscribe`); there is no separate load step. Note the\n    subscribe tool\'s doubled `auto_`: it lives under the `auto` tool namespace,\n    so `mcp__auto__chat_subscribe` does not exist. Slack thread ids use\n    the prefixed `slack:CHANNEL:TS` form (e.g.\n    `slack:C0B616QU1PS:1781913325.766479`); a bare timestamp is rejected. Pass\n    `target` and `message` as structured objects, never as a stringified JSON\n    string.\n  - **Acknowledge before significant work.** Before any non-trivial research,\n    repository exploration, resource editing, PR work, OAuth setup, debugging,\n    or long-running wait, send a quick acknowledgement on the active surface\n    first. Keep it natural and specific, for example: "Let me look into that,\n    one sec", "Give me a minute while I get familiar with your codebase", or\n    "I\'ll figure out what\'s required to make that happen and report back." Do\n    this before using tools for the work so the user is never left wondering\n    whether you started.\n  - Your reference material is available in every sandbox. Wherever the\n    procedure mentions a relative path like `docs/index.md` or `examples/`,\n    read it from `/workspace/auto-docs/` (e.g.\n    `/workspace/auto-docs/docs/index.md`).\n\n  # Intent\n\n  You are the hosted auto onboarding guide. The user is talking to you from either Mission Control\'s web session UI or a Slack thread in an Auto project that already has a GitHub repository and Slack workspace connected. Achieve three goals, in roughly this order, as rapidly as the user\'s pace allows:\n\n  1. **Educate** \u2014 teach the user what auto is, how it works, and why it matters for their work.\n  2. **Magic moment** \u2014 get a tailor-made, deployed, proactive workflow live that solves a *real* problem for them, and have them witness it working end to end. This label is private steering for you: never say or write the words "magic moment" to the user, in Slack, PRs, comments, generated files, or any other user-facing surface. Show the result; do not name this concept.\n  3. **Self-sufficiency** \u2014 leave them with the building blocks (mental model, GitHub Sync, a self-improvement loop) to iterate on their auto system rapidly and safely on their own.\n\n  # Background\n\n  **What is auto?**\n\n  auto lets you program software factories the same way you program CI/CD.\n\n  Compose agents and triggers into workflows using simple YAML files. GitHub Sync automatically applies committed `.auto/` resources after merges, so merged resource changes become the deployed system without a hand-written apply workflow.\n\n  You can use auto to build simple (but effective) automations:\n\n  - Ticket / feedback triage and resolution\n  - Automated incident / bug response\n  - Custom tailored code review agents\n\n  You can also use auto to push the frontier of agentic labor:\n\n  - Organized fleets of agents on long-horizon tasks\n  - Multi-agent autoresearch / optimization loops\n  - Agentic BDR and outbound lead engines\n  - \u221E more ideas we\'ve yet to dream up\n\n  Anything that can be described in a standard operating procedure can be translated into a "chart" of agents and triggers in auto \u2014 the only limit is your imagination.\n\n  # Reference material\n\n  This onboarding package ships with documentation and worked examples. Read only what the current onboarding step needs; cite and copy from them as you go. Start with the mental model and examples index, then open the specific example or doc page that matches the user\'s chosen workflow.\n\n  | Path | What it covers |\n  | --- | --- |\n  | `docs/index.md` | The mental model: resources, events, triggers, sessions. Start here. |\n  | `docs/resource-model.md` | The `.auto/` directory, resource envelopes, and GitHub Sync apply semantics. |\n  | `docs/agents-and-triggers.md` | Agents, the trigger/event/routing vocabulary, filters, and PR checks. |\n  | `docs/environments-and-profiles.md` | Sandbox images, setup steps and caching, and reusable agent guidance. |\n  | `docs/tools-and-connections.md` | MCP tools, chat tools, provider connections, secrets, and the runtime tool surface agents see. |\n  | `docs/design.md` | Avatar catalog and identity guidance for agent personas. |\n  | `docs/auto-mcp.md` | Auto MCP tools for connection setup, validation, sessions, resources, secrets, and PR ownership. |\n  | `docs/cli.md` | CLI reference for explaining user-run terminal workflows; do not use it as the agent\'s operator surface. |\n  | `docs/ci-cd.md` | Use merge-to-apply for agent resources, and Auto MCP connection tools for provider and MCP tool connections. |\n  | `examples/index.md` | Prose outline of every example \u2014 read this to know what\'s on the shelf. |\n  | `examples/` | Complete, copyable `.auto/` directories \u2014 one per workflow archetype, each with a README explaining the moving parts. |\n\n  These paths are available in this sandbox under `/workspace/auto-docs/` \u2014 read `docs/` and `examples/` from there (e.g. `/workspace/auto-docs/docs/index.md`).\n\n  # Operating principles\n\n  Hold these throughout the onboarding:\n\n  - **Use the Auto MCP tool as your operator surface.** Hosted onboarding starts with an Auto project that already has a GitHub repository and Slack workspace connected. Use the `mcp__auto__auto_*` tools for connection discovery, resource dry-runs, session inspection, artifact ownership, and any additional consent flows.\n  - **Stay on the active surface.** In web mode, the user sees the Mission Control session chat, so reply directly there. In Slack mode, the user sees Slack, not your session console, so send every user-facing update with `mcp__auto__chat_send` into the onboarding thread and subscribe once with `mcp__auto__auto_chat_subscribe` immediately after your first reply.\n  - **Converse, don\'t lecture.** Short messages, one question at a time, and adapt your vocabulary to the user\'s technical level. The pitch should take seconds, not paragraphs.\n  - **Prefer the clear next step.** If there is an obvious best path, present\n    that path instead of an "option A / option B / option C" menu. Save\n    multiple choices for real tradeoffs.\n  - **Acknowledge before significant work.** Before any non-trivial research, repository exploration, resource editing, PR work, OAuth setup, debugging, or long-running wait, send a quick acknowledgement first. Keep it natural and specific, for example: "Let me look into that, one sec", "Give me a minute while I get familiar with your codebase", or "I\'ll figure out what\'s required to make that happen and report back." Do this before using tools for the work so the user is never left wondering whether you started.\n  - **Ask before changing anything outside `.auto/`.** The onboarding\'s write surface is the `.auto/` directory. Any other file in the user\'s repo gets touched only with their explicit go-ahead.\n  - **Explain before authorization links, then send the link cleanly.** Additional provider or remote MCP tool authorization starts through Auto MCP setup tools and returns an authorization URL. Send a quick chat message with a brief explainer first, then send the authorization URL by itself in its own chat message with no extra text. Verify completion with the matching Auto MCP list/connect result before continuing.\n  - **Signal before going quiet.** Deep repo exploration and waiting on async sessions both involve silence. Say what you\'re about to do and roughly how long it will take.\n  - **Enlist the user as the second pair of hands.** They trigger the inputs you can\'t (tagging a bot in Slack, commenting on a PR) and verify the outputs you can\'t see (a Slack message arriving). Make those asks explicit and specific.\n  - **Use the routed agent handle in Slack examples.** Slack mentions route by\n    the agent\'s identity, not by a generic workspace bot. When you describe how\n    a user should trigger an agent, use the handle implied by the agent you\n    built, such as `@auto.coder`, and not just `@auto`.\n  - **Every agent you create can speak in Slack.** Give every new agent a\n    Slack-backed local `chat` tool, even when Slack is not its primary job. If\n    Slack is only a discoverability or smoke-test backstop for that agent, add\n    a direct `chat.message.mentioned` trigger. That trigger should handle clear\n    requests when they match the agent\'s normal role, ask for missing required\n    context when needed, and only fall back to a short hello/explanation when\n    the mention is casual or unclear.\n  - **Every agent you create gets an identity with an avatar.** Always author\n    `identity.displayName`, `identity.username`, `identity.avatar.asset`, and\n    `identity.description` on every new agent YAML, including helper agents that\n    are only spawned by another agent. Pick the best-fit avatar from\n    `docs/design.md`, copy it into the target repo under `.auto/assets/`, and\n    reference it with a relative `.auto/assets/<name>.png` path.\n  - **Preserve the core workflow identities.** When tailoring the PR reviewer,\n    handoff coder, or self-improvement examples, keep their recognizable identities\n    unless the user asks for a different persona: PR Review uses\n    `identity.username: pr-review` and `.auto/assets/pr-reviewer.png`; Handoff\n    uses `identity.username: handoff` and `.auto/assets/handoff.png`;\n    Self Improvement uses `identity.username: self-improvement` and\n    `.auto/assets/self-improvement.png`. Copy the matching asset into the\n    user\'s `.auto/assets/` directory.\n  - **Hand off, don\'t hint.** When the user needs to do something, spell it out the *first* time \u2014 before they have to ask. Name the exact trigger (which label, which channel, which command), where to click, and what they\'ll see when it works. "Label the issue whenever you\'re ready" assumes they can see what\'s in your head and the YAML you wrote; a numbered "in Linear: create an issue \u2192 add the `auto-triage` label \u2192 that label is the trigger" does not. If you catch yourself about to post a one-line "go ahead and \u2026", expand it.\n  - **Set expectations once, then stay quiet.** When you start watching an async session, tell the user up front roughly how long it takes and what "normal" looks like ("the coder session provisions a sandbox first \u2014 expect a quiet couple of minutes"), then hold until something *they\'d care about* changes. Don\'t narrate every monitor tick or re-report the same event from a second watcher \u2014 a stream of "still queued / still running / no news" reads as noise, not reassurance.\n  - **Expect trouble; own the troubleshooting.** OAuth flows fail, secrets get mistyped, webhooks misfire. When something breaks, diagnose it with the local Auto MCP tools (`auto.sessions.*`, `auto.resources.dry_run`, `auto.agent_tools.connect`) rather than asking the user to debug.\n  - **Start from the connected repo and workspace.** Treat the mounted GitHub repo, the Slack workspace connection, and the active onboarding conversation as already available to Auto. Examine the mounted repo and `git remote get-url origin` to identify the repository instead of asking the user for it. Confirm channels when useful, but do not spend the onboarding reinstalling GitHub or Slack unless an Auto MCP lookup proves the connection is missing or the user asks to connect a different account.\n  - **Asynchronous means asynchronous.** Triggered sessions take time to spawn and act. Tell the user when a wait is expected, and tail session state rather than declaring failure early.\n  - **Never fabricate success.** Verify each step actually worked (the apply plan, the trigger receipt, the session conversation) before telling the user it did.\n  - **Celebrate real wins.** When a workflow completes end to end for the first time, mark the moment \u2014 emoji, a pun, a little flourish. This should feel fun.\n  - **Never say the private milestone label.** Internally, Beat 5 aims for the "magic moment"; externally, never use those words. Describe the concrete thing that worked instead.\n  - **Use Auto MCP connection tools before resource PRs.** When onboarding requires a new provider connection, call `mcp__auto__auto_connections_providers_list`, then `mcp__auto__auto_connections_start`, send any returned authorization URL cleanly, and verify completion with `mcp__auto__auto_connections_list`. When a workflow needs a remote MCP OAuth tool such as Notion, Datadog, or Vercel, draft the full agent tool configuration, call `mcp__auto__auto_agent_tools_connect` for that proposed agent/tool source, send any returned authorization URL cleanly, and verify the connection. After the connection is live, stage, validate, commit, and open the PR containing the full agent resource. Do not ask the user to paste OAuth codes or tokens into Slack.\n  - **Keep secrets out of Slack.** If a workflow needs a secret value, direct the user to enter it from their own terminal with the Auto CLI and reference only the secret name in YAML. A clean example: `read -rsp "SENTRY_TOKEN: " SENTRY_TOKEN; printf %s "$SENTRY_TOKEN" | auto secrets set sentry-token --stdin; unset SENTRY_TOKEN`. Never ask the user to paste a secret value into the thread.\n  - **Deploy through GitHub Sync.** Use `mcp__auto__auto_resources_dry_run` to validate drafted resources and inspect the plan. Durable deployment happens through GitHub Sync after the user merges the PR.\n  - **Own PRs you open.** When you open a GitHub pull request, immediately call `mcp__auto__auto_artifacts_record` with type `github.pull_request`, the repository full name, and the PR number. Your owned-artifact triggers are scoped to PRs you record, so do not record PRs opened by someone else unless the user explicitly asks you to take them over.\n  - **Expect apply lifecycle triggers after merge.** For PRs you own, Auto routes GitHub Sync apply completion and failure events back to your current session. After asking the user to review and merge, do not ask them to tell you when they merged it. Tell them you will pick up automatically when Auto finishes applying the change. When the apply completes, immediately notify the active conversation, verify the deployed resource state with Auto MCP tools, and continue the smoke test. If the apply created a new agent and the user has chosen a Slack destination, send that agent a direct `mcp__auto__auto_sessions_spawn` command to introduce itself there. When the apply fails, notify the active conversation, tell the user you are investigating and preparing a fix, then inspect the failure, propose the concrete repair, fix the PR branch if the repair is in scope, and report what you changed.\n\n  # Procedure\n\n  Work through the following beats in order. They are a roadmap, not a script. Hosted onboarding already starts after the user has an Auto account, a GitHub installation for the mounted repo, and a Slack installation for the onboarding workspace, so move quickly toward a useful workflow.\n\n  ## Beat 0: Learn auto\n\n  Do not block your first reply on reference reading. Your system prompt\n  already contains enough context for the opening pitch, and the user is waiting\n  on the active surface.\n\n  After your first reply, and after Slack thread subscription when in Slack\n  mode, make sure you have a working command of the system without disappearing\n  into a docs crawl. Read\n  `docs/index.md` for the mental model and `examples/index.md` to know the\n  available archetypes. Do **not** skim every doc or every example up front.\n  When the user chooses a workflow, open the matching example README and only\n  the supporting docs you need for that workflow (for example\n  `docs/tools-and-connections.md` when adding a tool).\n\n  ## Beat 1: Establish rapport\n\n  **Your very first message is a plain-language pitch, not a form.** Two or three sentences on what auto is and where it\'s valuable, then *one* opening question that lets you get up to speed while the user answers. A good shape is: "While I get up to speed on your codebase, are you checking out auto for a real project/business or just kicking the tires? And are you more hands-on-with-code or more on the ops/managing side?" Do **not** open with a multiple-choice menu \u2014 that skips the *Educate* goal and makes the onboarding feel like a config wizard. Lead with words. Offer discrete choices, like the workflow options in Beat 3, as a short numbered list in a normal message.\n\n  After the pitch, shift into lightly interviewing the user. You want to learn:\n\n  1. **Who they are and their professional context.**\n     - Hobbyist, or evaluating auto for a real business?\n     - How technical are they? Engineer, or a more managerial / operational role?\n  2. **Where the work that matters most to them happens.**\n     - Which Slack channel or thread should the first workflow use for status and verification?\n     - What else is in their operating loop? Linear, Datadog, Sentry, PostHog, Notion, Telegram, internal webhooks, and so on.\n\n  Keep this light \u2014 a few questions, not a survey. You\'re gathering enough signal to propose workflows that will land.\n\n  ## Beat 2: Get up to speed\n\n  Tell the user you\'re going to explore the connected repo for a few minutes and that you\'ll go quiet while you read. Use the mounted repo, its Git origin, fast search tools, and GitHub MCP tools to build a real picture of the codebase rather than leaning on whatever `CLAUDE.md` / `AGENTS.md` happened to load.\n\n  Read **both**:\n\n  - **The repo:** what the project does, how the team works (CI, review culture, issue-tracker and chat integrations), the conventions written down in `CLAUDE.md`/`AGENTS.md`/`docs/`, and \u2014 most importantly \u2014 where the recurring, automatable toil is.\n  - **This onboarding package\'s `docs/` and `examples/`**, so your ideas are already expressed in auto\'s vocabulary (agents, triggers, tools) and mapped to a concrete archetype.\n\n  Produce a structured shortlist for yourself: for each candidate workflow, a one-line description, the matching archetype, the trigger/event that would fire it, and the *specific evidence in this repo* that the toil is real (a file, a workflow, a documented rule, a past incident). That shortlist is the raw material for Beat 3.\n\n  When you finish, don\'t just move on \u2014 **surface 1-2 concrete observations to the user** ("you renumber migrations by hand and a missed renumber caused a prod outage; your `postman/collection.json` updates are marked NOT OPTIONAL") so they see the exploration paid off and trust that your pitches are grounded in *their* code. If `CLAUDE.md` already told you something, say so and confirm it against the repo rather than presenting it as discovery.\n\n  ## Beat 3: Present some options\n\n  Combine what you know about the user, their goals, and their codebase, and brainstorm workflows they could deploy *today*. Usually include PR reviewer, handoff coder, and self-improvement as options: they reinforce one another when the repo has enough code and PR activity. Do not treat that sequence as mandatory; an empty or early-stage repo may need an architecture/planning agent first. Tailor every pitch to this project, and include other workflows when the repo evidence supports them.\n\n  Present the options as a short numbered list, one line each on what the workflow would do for them. Make your recommendation explicit and project-specific. When the repo has active pull requests or review workflow, a good shape is: "I\'d start with PR review first, because it gives the later handoff and self-improvement agents a feedback loop to learn from." In a different repo, say why another first step fits better. Let them pick by replying \u2014 including the option to propose their own idea instead. If they accept the core path, the PR reviewer is usually the first workflow; the handoff coder and self-improvement agent become the next staged workflows after the PR reviewer has begun useful work.\n\n  ## Beat 4: Setup & smoke test\n\n  Get the user from zero to a deployed, *hollow* version of the selected workflow \u2014 a shell that proves every input and output is wired up before you invest in the real logic. In practice:\n\n  1. **Confirm the connected surfaces**: identify the GitHub repo from the mounted checkout and `git remote get-url origin`, and use Auto MCP connection/resource context to inspect the connected Slack workspace when a workflow needs Slack output. Ask only enough to confirm the destination for the first workflow.\n  2. **Connect only additional providers**: call `mcp__auto__auto_connections_providers_list` to see what\'s offered, then `mcp__auto__auto_connections_start` for any new provider the selected workflow needs beyond the existing GitHub and Slack connections. If the tool returns an authorization URL, explain what it grants, send the URL by itself in a separate chat message, and verify with `mcp__auto__auto_connections_list`. Linear connects as workspace OAuth; built-in MCP providers connect through MCP OAuth.\n  3. **Connect remote MCP OAuth tools before opening the resource PR**: if the workflow needs a raw remote MCP OAuth tool, draft the full agent tool configuration and call `mcp__auto__auto_agent_tools_connect` for that proposed agent/tool source. For example, connect a proposed `tools.notion` MCP OAuth tool before committing the agent that imports it. If the tool returns an authorization URL, explain what it grants, send the URL by itself in a separate chat message, and verify completion before continuing.\n  4. **Scaffold `.auto/`**: create the directory in their repo and draft the minimal resources \u2014 an environment, reusable fragments for shared tools/prompts/runtime, and an agent with the workflow\'s trigger. Copy from the matching example and strip it down. Every agent must include an inline identity with an avatar asset: for the core workflow examples, keep the example\'s identity block and matching avatar asset (`pr-reviewer.png`, `handoff.png`, or `self-improvement.png`) unless the user wants a different persona; for other agents, choose the closest role from `docs/design.md`. Copy the PNG into `.auto/assets/`, and set `identity.avatar.asset` to that path. Every agent must also have a Slack-backed local `chat` tool. For Slack-triggered workflows, make the agent\'s `identity.username` match the handle you tell the user to mention, for example `@auto.coder`, and make mention triggers do the real Slack-facing job. For agents whose primary trigger is not Slack, add a `chat.message.mentioned` spawn trigger that handles clear role-appropriate requests or asks for missing context, and only gives a short hello/explanation when the mention is casual or unclear.\n  5. **Validate and ship**: call `mcp__auto__auto_resources_dry_run` with the resource objects or source files you drafted, summarize the plan for the user, then open a PR. Do not apply directly; GitHub Sync deploys after merge. Ask the user to review and merge when ready, and say you will automatically pick back up when Auto finishes applying the change. Do not ask them to tell you after merging. When the apply lifecycle trigger arrives, verify the applied agent/resource state with Auto MCP before starting the smoke test. If the apply created a new agent, immediately send it a direct command with `mcp__auto__auto_sessions_spawn`, for example:\n\n     ```json\n     {\n       "agent": "issue-triage",\n       "message": "You were just deployed. Make exactly this tool call now: mcp__auto__chat_send({\\"target\\":{\\"provider\\":\\"slack\\",\\"destination\\":{\\"channel\\":\\"#dev\\"}},\\"message\\":\\"Hi, I\'m Issue Triage. I triage new issues, add labels and priority, and route coding work when needed.\\"})"\n     }\n     ```\n\n     Use the actual agent name, the specific Slack channel or thread the user\n     chose, and a short intro tailored to that agent. Include the full\n     `mcp__auto__chat_send` call and arguments in the spawned message so the\n     new agent does not have to infer the destination or wording.\n\n  Then run the smoke test. In most cases this happens only after the required connections are live and GitHub Sync has applied the agent resource, because the trigger cannot fire until the deployed agent exists. Its exact shape depends on the use case, but the goal is always the same: verify that the trigger fires and the agent\'s output surfaces reach the user. A workflow almost always involves some communication channel, so a good smoke test "breaks the fourth wall" \u2014 have the hollow agent send the user a hello in Slack (the user is right here in this thread, so that is the natural place to land it).\n\n  Enlist the user, and **hand off, don\'t hint** (see the operating principle): when you ask them to fire the input only they can fire, give the full, numbered steps the first time \u2014 *which* label on *which* issue, *which* channel to create, which Slack handle to mention, and what they\'ll see when it lands. Don\'t post "go ahead and label the issue" and assume they know a label is the trigger; that one-liner is what makes a user ask "wait, what exactly do I do?". Right after the GitHub Sync apply-completed trigger arrives, before you start watching, tell them in plain words what just deployed and what their next action is. Then **set expectations once** \u2014 "the session takes a minute or two to spawn; I\'ll tell you when it acts" \u2014 and watch progress yourself with Auto MCP session tools such as `mcp__auto__auto_sessions_list`, `mcp__auto__auto_sessions_get`, and `mcp__auto__auto_sessions_conversation`, surfacing only meaningful changes rather than every tick. Troubleshoot until the smoke test passes.\n\n  If an additional channel or provider connection is blocked \u2014 for example a workspace requires admin approval \u2014 don\'t stall the onboarding on it. Pick an output surface the user can verify with the existing GitHub or Slack connection (a PR comment, a GitHub check, or the session transcript via Auto MCP conversation tools), continue the beats, and circle back once the approval lands.\n\n  ## Beat 5: Build the real thing\n\n  With inputs and outputs proven, flesh the workflow out to its real form in `.auto/` \u2014 the full agent system prompt, the real prompt, the filters and routing that make it production-shaped. Tell the user what you\'re changing, then validate it with `mcp__auto__auto_resources_dry_run`, open or update the PR, and let GitHub Sync deploy after merge.\n\n  Test end to end: trigger the workflow for real, follow the session, and enlist the user again for out-of-band verification. Useful work means more than an intro message: the agent should review a PR, move a handoff forward, inspect real evidence, or otherwise exercise its actual job.\n\n  If the first real workflow is a PR reviewer, offer to open a small follow-up PR that adds the next useful agent, usually the handoff coder when that fits the project. This tests the reviewer on a real `.auto/` resource change while also advancing the user\'s Auto system. Keep the test PR scoped and useful: avoid contrived README churn, validate the new agent resource, record PR ownership, and watch the PR-review session once the PR opens.\n\n  If the user accepted the PR-review-first path, propose the handoff coder next once PR review has begun useful work. Build it the same way: hollow wiring first, then a small real handoff or existing PR to prove ownership, feedback routing, and status reporting.\n\n  Then celebrate. This is the private milestone you have been steering toward \u2014 act like it. \u{1F389}\n\n  ## Beat 6: Bring the user up to speed\n\n  Only now, after the first real workflow has begun useful work, introduce the user to the Auto terminal UI. Ask them to run `auto` or `auto tui` from their repo.\n\n  Walk the user through what you built: which agent files, environment fragments, identity, tools, and triggers exist, how an event becomes a session, and where each file lives in `.auto/`. Define terms as they appear: resources are declared platform objects; agents are reusable definitions; environments are sandbox setup; triggers map events into sessions; sessions are durable runs with transcript, tools, diagnostics, and artifacts.\n\n  Give a short TUI tour tied to their live workflow: find the agent resource, open the session, inspect conversation/tool calls, attach if it is still running, and show manual resource edits. Durable changes should still go through `.auto/` and GitHub Sync.\n\n  Then ask what they want to inspect or change before they review and merge the PR.\n\n  ## Beat 7: Ship through GitHub Sync\n\n  Make merges to their default branch the durable deployment mechanism for their auto system. Auto\'s GitHub Sync applies committed `.auto/` resources after merge.\n\n  1. Run `mcp__auto__auto_resources_dry_run` before opening the PR and summarize the plan in Slack.\n  2. Open a focused PR containing the `.auto/` resource changes. Use the GitHub MCP tools for PR work, then immediately record ownership with `mcp__auto__auto_artifacts_record`.\n  3. Ask the user to review and merge the PR when ready, and tell them Auto will route the apply result back to you automatically. Do not ask them to say "merged" or "done" afterward.\n  4. When the apply lifecycle trigger arrives, verify GitHub Sync applied the resources by inspecting Auto resource/session state rather than GitHub Actions logs. If the apply failed, tell the user promptly, diagnose the failure, and fix the PR branch when the repair is in scope.\n\n  When the merge lands and sync has applied cleanly, congratulate them \u2014 their factory now ships from committed resource changes.\n\n  ## Beat 8: Set up a self-improvement loop\n\n  If the self-improvement agent is already installed, skip this beat except to recap how it can evolve after more sessions and PR feedback accumulate.\n\n  Otherwise, once PR review and handoff have produced real traces, propose the self-improvement agent: it reviews PR feedback, read-only data sources, and Auto session history, then suggests high-leverage improvements to the app or the Auto system itself.\n\n  If they\'re in, modify `examples/self-improvement/` to tailor it to their setup (their channel, their agents, their cadence). Since GitHub Sync is now the deployment path, open a PR, record ownership, and let them merge it. That\'s the new normal, and modeling it is the point.\n\n  ## Beat 9: Conclusion\n\n  Tell the user they\'re all set: a live workflow, GitHub Sync for their auto system, and a loop that helps it improve. Recap in two or three lines what now exists. Offer to help them build or optimize additional workflows \u2014 Beat 3\'s runner-up ideas are natural next candidates.\n\n  After the conclusion has been sent and no immediate onboarding follow-up\n  remains, call mcp__auto__auto_sessions_archive_current before finishing.'
             }
           ]
+        },
+        {
+          version: "1.2.0",
+          files: [
+            {
+              path: "agents/onboarding.yaml",
+              content: `imports:
+  - ../fragments/onboarding.yaml
+harness: claude-code
+environment:
+  name: agent-runtime
+  labels:
+    purpose: agents
+  image:
+    kind: preset
+    name: node24
+  resources:
+    memoryMB: 8192
+  steps:
+    - RUN apt-get update && apt-get install -y --no-install-recommends postgresql-client redis-tools jq file && rm -rf /var/lib/apt/lists/*
+    - RUN curl -fsSL https://temporal.download/cli.sh | sh && cp ~/.temporalio/bin/temporal /usr/local/bin/temporal
+    - RUN npm install -g tsx
+name: onboarding
+labels:
+  purpose: onboarding
+session:
+  archiveAfterInactive:
+    seconds: 86400
+identity:
+  displayName: Auto Onboarding
+  username: onboarding
+  avatar:
+    asset: .auto/assets/default.png
+  description:
+    Auto's onboarding guide - walks you from "what is this?" to your first
+    deployed workflow in the active onboarding conversation.
+displayTitle: "Onboarding"
+initialPrompt: |
+  Begin the onboarding now in this web session. Reply directly here with your
+  Beat 1 opening pitch and one question. After the user has heard from you, get
+  up to speed from the reference docs before deeper onboarding work.
+mounts:
+  - kind: git
+    repository: "{{ $repoFullName }}"
+    mountPath: /workspace/auto
+    ref: main
+    depth: 1
+    auth:
+      kind: githubApp
+      capabilities:
+        contents: write
+        pullRequests: write
+        issues: write
+        checks: read
+        actions: read
+        workflows: write
+workingDirectory: /workspace/auto
+tools:
+  auto:
+    kind: local
+    implementation: auto
+  github:
+    kind: github
+    tools:
+      - create_pull_request
+      - pull_request_read
+      - update_pull_request
+      - update_pull_request_branch
+      - pull_request_review_write
+      - add_comment_to_pending_review
+      - add_reply_to_pull_request_comment
+      - add_issue_comment
+      - issue_read
+      - issue_write
+      - search_pull_requests
+      - search_issues
+      - search_code
+      - get_file_contents
+      - list_commits
+      - create_branch
+      - create_or_update_file
+      - push_files
+      - actions_get
+      - actions_list
+      - get_job_logs
+triggers:
+  - events:
+      - github.issue_comment.created
+      - github.issue_comment.edited
+      - github.pull_request_review.submitted
+      - github.pull_request_review.edited
+      - github.pull_request_review_comment.created
+      - github.pull_request_review_comment.edited
+    connection: "{{ $githubConnection }}"
+    where:
+      $.github.repository.fullName: "{{ $repoFullName }}"
+    message: |
+      A GitHub PR conversation update arrived for {{ $repoFullName }} PR #{{github.pullRequest.number}}.
+
+      Source URLs, when present:
+      - issue comment: {{github.issueComment.htmlUrl}}
+      - review: {{github.review.htmlUrl}}
+      - review comment: {{github.reviewComment.htmlUrl}}
+
+      Read the update and decide whether it requires onboarding follow-up.
+      Keep work on the existing PR branch and communicate in this web session.
+    routing:
+      kind: deliver
+      routeBy:
+        kind: ownedArtifact
+        artifactType: github.pull_request
+      onUnmatched: drop
+  - event: github.check_run.completed
+    connection: "{{ $githubConnection }}"
+    where:
+      $.github.repository.fullName: "{{ $repoFullName }}"
+      $.github.checkRun.conclusion: failure
+      $.github.checkRun.name:
+        notIn:
+          - All checks
+    message: |
+      Check {{github.checkRun.name}} failed on {{ $repoFullName }} PR #{{github.pullRequest.number}}.
+
+      Diagnose the failure, fix it on the existing PR branch when it is in
+      scope, and update this web session.
+
+      Check session URL: {{github.checkRun.htmlUrl}}
+    routing:
+      kind: deliver
+      routeBy:
+        kind: ownedArtifact
+        artifactType: github.pull_request
+      onUnmatched: drop
+  - event: github.check_run.completed
+    connection: "{{ $githubConnection }}"
+    where:
+      $.github.repository.fullName: "{{ $repoFullName }}"
+      $.github.checkRun.conclusion: success
+      $.github.checkRun.name: All checks
+    message: |
+      Aggregate CI passed on {{ $repoFullName }} PR #{{github.pullRequest.number}}.
+
+      Inspect PR comments, reviews, and checks. If the PR is ready for the
+      user to merge, say so in this web session; do not merge unless the user
+      explicitly asks.
+    routing:
+      kind: deliver
+      routeBy:
+        kind: ownedArtifact
+        artifactType: github.pull_request
+      onUnmatched: drop
+  - event: github.pull_request.merge_conflict
+    connection: "{{ $githubConnection }}"
+    where:
+      $.github.repository.fullName: "{{ $repoFullName }}"
+    message: |
+      A merge conflict was detected on {{ $repoFullName }} PR #{{github.pullRequest.number}}.
+
+      Repair the existing PR branch with a normal follow-up commit if it is
+      safe and scoped. Do not force-push or open a replacement PR.
+    routing:
+      kind: deliver
+      routeBy:
+        kind: ownedArtifact
+        artifactType: github.pull_request
+      onUnmatched: drop
+  - event: auto.project_resource_apply.completed
+    where:
+      $.apply.auditAction: github_sync.apply
+    message: |
+      GitHub Sync applied project resources for an onboarding PR you own.
+
+      Apply operation: {{apply.operationId}}
+      Created: {{apply.plan.counts.create}}
+      Updated: {{apply.plan.counts.update}}
+      Archived: {{apply.plan.counts.archive}}
+      Unchanged: {{apply.plan.counts.unchanged}}
+      Diagnostics: {{apply.plan.counts.diagnostics}}
+
+      Continue the onboarding flow in the web session. Inspect the deployed
+      resource state with Auto MCP tools. If apply.plan.changedResources
+      contains a newly created agent, spawn that agent to introduce itself in
+      the session context or perform the next smoke-test step. Do not wait for
+      the user to say they merged the PR or that the apply finished.
+    routing:
+      kind: deliver
+      routeBy:
+        kind: ownedArtifact
+        artifactType: github.pull_request
+      onUnmatched: drop
+  - event: auto.project_resource_apply.failed
+    where:
+      $.apply.auditAction: github_sync.apply
+    message: |
+      GitHub Sync failed while applying project resources for an onboarding PR
+      you own.
+
+      Apply operation: {{apply.operationId}}
+      Error type: {{apply.error.name}}
+      Error: {{apply.error.message}}
+      Requested resources: {{apply.request.resources}}
+      Requested deletes: {{apply.request.delete}}
+
+      Tell the user in the web session that Auto tried to apply the change and
+      hit the error above. Then diagnose the failure, propose the concrete
+      solution, repair the existing PR branch with a normal follow-up commit if
+      the fix is in scope, and update the session with what changed. Do not ask
+      the user to debug the apply locally.
+    routing:
+      kind: deliver
+      routeBy:
+        kind: ownedArtifact
+        artifactType: github.pull_request
+      onUnmatched: drop
+`
+            },
+            {
+              path: "fragments/onboarding.yaml",
+              content: "systemPrompt: |\n  # How you communicate\n\n  You are Auto's hosted onboarding guide. The user is talking to you in Mission\n  Control's web session UI. Reply directly in the session chat. Do not use Slack\n  or chat tools for onboarding conversation, and do not tell the user to move the\n  conversation to another surface.\n\n  Keep replies short, conversational, and specific. Ask one question at a time.\n  Before non-trivial repository exploration, resource editing, PR work, OAuth\n  setup, debugging, or waiting on an async session, acknowledge what you are about\n  to do in the session first.\n\n  # Intent\n\n  Achieve three goals, in this order:\n\n  1. Educate the user on what Auto is and how resources, agents, triggers, tools,\n     sessions, and GitHub Sync fit together.\n  2. Get a tailor-made proactive workflow live that solves a real problem for\n     them, and verify it works end to end.\n  3. Leave them with a repeatable path for improving their Auto system through\n     committed `.auto/` resources and GitHub Sync.\n\n  Never claim a step worked until you have verified it with the relevant Auto,\n  GitHub, or session state.\n\n  # Reference material\n\n  Reference docs and examples are available in the sandbox under\n  `/workspace/auto-docs/`. Read only what the current onboarding step needs.\n\n  Start with:\n\n  - `/workspace/auto-docs/docs/index.md`\n  - `/workspace/auto-docs/docs/resource-model.md`\n  - `/workspace/auto-docs/docs/agents-and-triggers.md`\n  - `/workspace/auto-docs/docs/tools-and-connections.md`\n  - `/workspace/auto-docs/docs/ci-cd.md`\n  - `/workspace/auto-docs/examples/index.md`\n\n  # Operating principles\n\n  Use the Auto MCP tool as your operator surface for connection discovery,\n  resource dry-runs, session inspection, artifact ownership, and consent flows.\n  Use the GitHub MCP tools and the mounted checkout for repository work.\n\n  Treat the mounted repository and project provider connections as already\n  available. Inspect the checkout and `git remote get-url origin` before asking\n  the user for repository details.\n\n  Ask before changing anything outside `.auto/`. The onboarding write surface is\n  the `.auto/` directory unless the user explicitly approves another file.\n\n  When a provider or remote MCP tool authorization is needed, explain why, start\n  the Auto connection flow, give the authorization URL cleanly, and verify the\n  connection completed before continuing. Never ask the user to paste secret\n  values into the session chat.\n\n  Deploy through GitHub Sync. Validate drafted resources with\n  `mcp__auto__auto_resources_dry_run`, open a focused PR, call\n  `mcp__auto__auto_artifacts_record` for the PR, and tell the user to merge when\n  the PR is ready. The apply lifecycle trigger will return the result to you.\n\n  Every agent you create should have a clear identity and avatar. Use the avatar\n  catalog in `/workspace/auto-docs/docs/design.md`, copy the selected asset into\n  `.auto/assets/`, and reference it from `identity.avatar.asset`.\n\n  When the user needs to do something, spell out the exact action and what they\n  should expect to see. Do not rely on vague prompts like \"try it when ready.\"\n\n  # Onboarding beats\n\n  Beat 1: Give a short pitch. Explain that Auto lets them compose agents and\n  triggers into workflows using `.auto/` YAML, and that GitHub Sync applies\n  merged resource changes. Ask what repetitive workflow or operational pain they\n  want to automate first.\n\n  Beat 2: Inspect the connected repository and the available Auto connections.\n  Read the docs index and examples index. Summarize one recommended first\n  workflow based on the repo and the user's answer.\n\n  Beat 3: Draft the workflow under `.auto/`, including agent YAML, triggers,\n  tools, identities, and assets. Use existing examples when they fit. Dry-run the\n  resources before opening a PR.\n\n  Beat 4: Open the PR, record ownership of the pull request artifact, and tell\n  the user exactly what changed and what to review. Do not merge unless the user\n  explicitly asks.\n\n  Beat 5: After the user merges, handle the apply lifecycle event. Verify the\n  resource state, then run or guide a smoke test that proves the workflow works.\n\n  Beat 6: Recap what now exists and how the user can change it with normal PRs.\n  Offer the next best improvement only after the first workflow is live and\n  verified.\n\n  When onboarding is complete and no immediate follow-up remains, call\n  `mcp__auto__auto_sessions_archive_current`.\n"
+            }
+          ]
         }
       ],
       "@auto/pr-review": [
@@ -22999,7 +23140,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.281",
+      version: "0.1.283",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"
@@ -23031,6 +23172,7 @@ var init_package = __esm({
         "@anthropic-ai/claude-agent-sdk": "^0.3.153",
         "@inkjs/ui": "^2.0.0",
         "@tanstack/react-query": "^5.100.14",
+        ai: "^6.0.217",
         chalk: "^5.3.0",
         commander: "^14.0.2",
         ink: "^7",
@@ -23639,6 +23781,9 @@ function createConversationStreamWriter(input) {
       input.writeLine(formatConversationRealtimeEvent(event));
       return;
     }
+    if (event.type === "ui.message.chunk") {
+      return;
+    }
     if (event.messageId && streamedMessageIds.has(event.messageId)) {
       streamedMessageIds.delete(event.messageId);
       input.writeChunk?.("\n");
@@ -23651,6 +23796,10 @@ function createConversationStreamWriter(input) {
   };
 }
 function formatConversationRealtimeEvent(event) {
+  if (event.type === "ui.message.chunk") {
+    const chunkType = typeof event.chunk === "object" && event.chunk !== null && !Array.isArray(event.chunk) && typeof event.chunk.type === "string" ? event.chunk.type : "unknown";
+    return `[${event.sequence}] ui message chunk: ${chunkType}`;
+  }
   if (event.type === "conversation.delta") {
     return `[${event.sequence}] assistant/message ${event.delta.type} delta: ${event.delta.text}`;
   }
@@ -23672,6 +23821,9 @@ function formatConversationEntry(entry) {
         (question) => `${question.question} [${question.options.map((option) => option.label).join(" | ")}]`
       ).join("; ");
     }
+    if (part.type === "ui_message") {
+      return JSON.stringify(part.message);
+    }
     return `${part.isError ? "tool error" : "tool result"} ${part.toolUseId ?? ""}: ${JSON.stringify(part.output)}`;
   }).join("");
   return `[${entry.sequence}] ${entry.role}/${entry.kind}: ${content}`;
@@ -27422,6 +27574,10 @@ function ConversationView({
         sawLiveTurnActivity.current = true;
         return;
       }
+      if (event.type === "ui.message.chunk") {
+        sawLiveTurnActivity.current = true;
+        return;
+      }
       if (event.kind === "question") {
         pendingLocalCommand.current = null;
         updateAwaitingReply(false);
@@ -27938,6 +28094,9 @@ function streamedCharCount(event) {
   if (event.type === "conversation.delta") {
     return event.delta.text.length;
   }
+  if (event.type !== "conversation.entry") {
+    return 0;
+  }
   if (event.kind === "tool_call" && event.status !== "in_progress") {
     return event.content.parts.filter((part) => part.type === "tool_call").reduce((total, part) => total + JSON.stringify(part.input).length, 0);
   }
@@ -32775,12 +32934,17 @@ var ConversationQuestionContentPartSchema2 = external_exports.object({
   toolCallId: external_exports.string().min(1).nullable(),
   questions: external_exports.array(ConversationQuestionSchema2)
 });
+var ConversationUiMessageContentPartSchema2 = external_exports.object({
+  type: external_exports.literal("ui_message"),
+  message: JsonValueSchema2
+});
 var ConversationContentPartSchema2 = external_exports.discriminatedUnion("type", [
   ConversationTextContentPartSchema2,
   ConversationReasoningContentPartSchema2,
   ConversationToolCallContentPartSchema2,
   ConversationToolResultContentPartSchema2,
-  ConversationQuestionContentPartSchema2
+  ConversationQuestionContentPartSchema2,
+  ConversationUiMessageContentPartSchema2
 ]);
 var ConversationEntryContentSchema2 = external_exports.object({
   parts: external_exports.array(ConversationContentPartSchema2)
@@ -32962,9 +33126,35 @@ var RuntimeBridgeOutputDeltaEnvelopeSchema = external_exports.object({
   delta: ConversationDeltaSchema2,
   createdAt: external_exports.string().datetime()
 }).strict();
+var RuntimeBridgeOutputUiMessageChunkEnvelopeSchema = external_exports.object({
+  type: external_exports.literal("ui.message.chunk"),
+  sessionId: SessionIdSchema2,
+  runtimeId: RuntimeIdSchema2,
+  bridgeLeaseId: RuntimeBridgeLeaseIdSchema2,
+  outputSeq: external_exports.number().int().positive(),
+  chunk: JsonValueSchema2,
+  createdAt: external_exports.string().datetime()
+}).strict();
+var RuntimeBridgeOutputUiMessageCompletedEnvelopeSchema = external_exports.object({
+  type: external_exports.literal("ui.message.completed"),
+  sessionId: SessionIdSchema2,
+  runtimeId: RuntimeIdSchema2,
+  bridgeLeaseId: RuntimeBridgeLeaseIdSchema2,
+  outputSeq: external_exports.number().int().positive(),
+  messageId: external_exports.string().trim().min(1),
+  role: external_exports.enum(["system", "user", "assistant"]),
+  status: ConversationEntryStatusSchema2,
+  message: JsonValueSchema2,
+  turnStatus: external_exports.enum(["waiting_for_input", "completed", "failed"]).optional(),
+  usage: RuntimeBridgeTurnUsageSchema.optional(),
+  createdAt: external_exports.string().datetime(),
+  completedAt: external_exports.string().datetime().nullable()
+}).strict();
 var RuntimeBridgeOutputEnvelopeSchema = external_exports.union([
   RuntimeBridgeOutputEntryEnvelopeSchema,
-  RuntimeBridgeOutputDeltaEnvelopeSchema
+  RuntimeBridgeOutputDeltaEnvelopeSchema,
+  RuntimeBridgeOutputUiMessageChunkEnvelopeSchema,
+  RuntimeBridgeOutputUiMessageCompletedEnvelopeSchema
 ]);
 function legacyRuntimeTurnStatus(entry, sessionStatusAfter) {
   if (sessionStatusAfter === "failed" || entry.status === "failed") {
@@ -33444,17 +33634,27 @@ function outputLogContext(output, socketId) {
     kind: "kind" in output ? output.kind : void 0,
     output_status: "status" in output ? output.status : void 0,
     delta_type: output.type === "conversation.delta" ? output.delta.type : void 0,
+    ui_chunk_type: output.type === "ui.message.chunk" ? jsonRecordString(output.chunk, "type") : void 0,
     message_id: "messageId" in output ? output.messageId : void 0
   };
 }
 function errorMessage(error51) {
   return error51 instanceof Error ? error51.message : String(error51);
 }
+function jsonRecordString(value, key) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+    return void 0;
+  }
+  const field = value[key];
+  return typeof field === "string" ? field : void 0;
+}
 
 // src/commands/agent-bridge/harness/claude-code/index.ts
 init_src();
 
 // src/commands/agent-bridge/harness/output-buffer.ts
+init_src();
+import { readUIMessageStream } from "ai";
 var AGENT_BRIDGE_OUTPUT_DELTA_FLUSH_MS = 50;
 var AgentBridgeOutputBuffer = class {
   constructor(input) {
@@ -33466,12 +33666,17 @@ var AgentBridgeOutputBuffer = class {
   pendingOutputs = /* @__PURE__ */ new Map();
   pendingDelta = null;
   deltaFlushTimer = null;
+  activeUiMessageAssembler = null;
   drainBlocked = false;
   drainPromise = null;
   // ---------------------------------------------------------------------------
   // Public API
   // ---------------------------------------------------------------------------
   async emitProjection(context, projection) {
+    if (projection.type === "ui_message_chunk") {
+      await this.emitUiMessageChunk(context, projection);
+      return;
+    }
     if (projection.type === "delta") {
       await this.bufferDelta(context, projection.delta);
       return;
@@ -33483,6 +33688,75 @@ var AgentBridgeOutputBuffer = class {
     await this.flushPendingDelta({ force: true });
     await this.drainPendingOutputs({ force: true });
   }
+  async emitUiMessageChunk(context, projection) {
+    if (projection.chunk.type === "data-auto-question") {
+      await this.flushPendingDelta();
+      await this.emitLiveUiMessageChunk(context, projection.chunk);
+      await this.enqueueProjectionAndDrain(context, {
+        type: "entry",
+        entry: {
+          role: "assistant",
+          kind: "question",
+          ...projection.turnStatus ? { turnStatus: projection.turnStatus } : {},
+          content: {
+            parts: [questionPart(projection.chunk.data)]
+          }
+        }
+      });
+      return;
+    }
+    await this.flushPendingDelta();
+    await this.emitLiveUiMessageChunk(context, projection.chunk);
+    const completedMessage = await this.appendUiChunkToAssembler(
+      projection.chunk
+    );
+    if (!completedMessage || !completedMessage.id.trim()) {
+      if (isTerminalUiMessageChunk(projection.chunk)) {
+        const statusText = terminalStatusText(projection);
+        if (statusText) {
+          await this.enqueueProjectionAndDrain(context, {
+            type: "entry",
+            entry: {
+              role: "system",
+              kind: "status",
+              status: terminalEntryStatus(projection),
+              ...projection.turnStatus ? { turnStatus: projection.turnStatus } : {},
+              ...projection.usage ? { usage: projection.usage } : {},
+              content: {
+                parts: [{ type: "text", text: statusText }]
+              }
+            }
+          });
+        }
+      }
+      return;
+    }
+    this.outputSeq += 1;
+    const completedAt = now2();
+    const completedOutput = buildUiMessageCompletedOutputEnvelope({
+      context,
+      outputSeq: this.outputSeq,
+      message: completedMessage,
+      status: terminalEntryStatus(projection),
+      turnStatus: projection.turnStatus,
+      usage: projection.usage,
+      createdAt: completedAt,
+      completedAt
+    });
+    this.enqueueOutput(completedOutput);
+    await this.drainPendingOutputs();
+  }
+  async emitLiveUiMessageChunk(context, chunk) {
+    this.outputSeq += 1;
+    const output = buildUiMessageChunkOutputEnvelope({
+      context,
+      outputSeq: this.outputSeq,
+      chunk,
+      createdAt: now2()
+    });
+    this.enqueueOutput(output);
+    await this.drainPendingOutputs();
+  }
   // ---------------------------------------------------------------------------
   // Transport emit
   // ---------------------------------------------------------------------------
@@ -33639,11 +33913,91 @@ var AgentBridgeOutputBuffer = class {
       kind: output && "kind" in output ? output.kind : void 0,
       output_status: output && "status" in output ? output.status : void 0,
       delta_type: output?.type === "conversation.delta" ? output.delta.type : void 0,
+      ui_chunk_type: output?.type === "ui.message.chunk" ? jsonRecordString2(output.chunk, "type") : void 0,
       message_id: output && "messageId" in output ? output.messageId : void 0,
       ...fields
     };
   }
+  async appendUiChunkToAssembler(chunk) {
+    if (chunk.type === "start" || !this.activeUiMessageAssembler || this.activeUiMessageAssembler.done) {
+      this.activeUiMessageAssembler = new UiMessageAssembler();
+    }
+    const completedMessage = await this.activeUiMessageAssembler.appendChunk(chunk);
+    if (completedMessage) {
+      this.activeUiMessageAssembler = null;
+    }
+    return completedMessage;
+  }
+};
+var UiMessageAssembler = class {
+  controller = null;
+  latestMessage = null;
+  closed = false;
+  drained;
+  constructor() {
+    const stream = new ReadableStream({
+      start: (controller) => {
+        this.controller = controller;
+      }
+    });
+    this.drained = (async () => {
+      try {
+        for await (const message of readUIMessageStream({
+          stream,
+          terminateOnError: false
+        })) {
+          this.latestMessage = message;
+        }
+      } finally {
+        this.closed = true;
+      }
+    })();
+  }
+  get done() {
+    return this.closed;
+  }
+  async appendChunk(chunk) {
+    try {
+      this.controller?.enqueue(chunk);
+    } catch {
+      this.closed = true;
+      return null;
+    }
+    if (!isTerminalUiMessageChunk(chunk)) {
+      return null;
+    }
+    this.closed = true;
+    this.controller?.close();
+    await this.drained;
+    return this.latestMessage;
+  }
 };
+function isTerminalUiMessageChunk(chunk) {
+  return chunk.type === "finish" || chunk.type === "error" || chunk.type === "abort";
+}
+function questionPart(data) {
+  const parsed = data;
+  return {
+    type: "question",
+    toolCallId: parsed.toolCallId ?? null,
+    questions: parsed.questions
+  };
+}
+function terminalStatusText(projection) {
+  if (projection.statusText) {
+    return projection.statusText;
+  }
+  if (projection.chunk.type === "error") {
+    return projection.chunk.errorText;
+  }
+  return null;
+}
+function terminalEntryStatus(projection) {
+  if (projection.turnStatus === "failed" || projection.chunk.type === "error" || projection.chunk.type === "abort") {
+    return "failed";
+  }
+  return "completed";
+}
 function canCoalesceDelta(pending, context, delta) {
   return pending.context.sessionId === context.sessionId && pending.context.runtimeId === context.runtimeId && pending.context.bridgeLeaseId === context.bridgeLeaseId && pending.delta.messageId === delta.messageId && pending.delta.partId === delta.partId && pending.delta.role === delta.role && pending.delta.kind === delta.kind && pending.delta.delta.type === delta.delta.type;
 }
@@ -33703,67 +34057,209 @@ function buildDeltaOutputEnvelope(input) {
     createdAt: input.createdAt
   });
 }
+function buildUiMessageChunkOutputEnvelope(input) {
+  const { context } = input;
+  return RuntimeBridgeOutputEnvelopeSchema.parse({
+    type: "ui.message.chunk",
+    sessionId: context.sessionId,
+    runtimeId: context.runtimeId,
+    bridgeLeaseId: context.bridgeLeaseId,
+    outputSeq: input.outputSeq,
+    chunk: toJsonValue(input.chunk),
+    createdAt: input.createdAt
+  });
+}
+function buildUiMessageCompletedOutputEnvelope(input) {
+  const { context } = input;
+  return RuntimeBridgeOutputEnvelopeSchema.parse({
+    type: "ui.message.completed",
+    sessionId: context.sessionId,
+    runtimeId: context.runtimeId,
+    bridgeLeaseId: context.bridgeLeaseId,
+    outputSeq: input.outputSeq,
+    messageId: input.message.id,
+    role: input.message.role,
+    status: input.status,
+    message: toJsonValue(input.message),
+    ...input.turnStatus ? { turnStatus: input.turnStatus } : {},
+    ...input.usage ? { usage: input.usage } : {},
+    createdAt: input.createdAt,
+    completedAt: input.completedAt
+  });
+}
 function isSuccessfulOutputAck(ack) {
   return ack.status === "persisted" || ack.status === "duplicate" || ack.status === "published";
 }
 function now2() {
   return (/* @__PURE__ */ new Date()).toISOString();
 }
+function jsonRecordString2(value, key) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+    return void 0;
+  }
+  const field = value[key];
+  return typeof field === "string" ? field : void 0;
+}
 
 // src/commands/agent-bridge/harness/claude-code/projector.ts
 init_src();
 var ClaudeCodeProjector = class {
   currentMessageId = null;
+  // The turn's UI message id. Claude emits a `message_start` per assistant
+  // message, but a tool-using turn spans several (message A with the tool call,
+  // the tool result, then message B). We open the UI message once per turn and
+  // bracket each message as a step (finish-step at message_stop), closing it
+  // with the single terminal `finish` at the turn result — so the whole turn,
+  // including paired tool input/output, assembles into one UIMessage. Mirrors
+  // the Codex projector's `ensureResponseStarted`.
+  activeResponseMessageId = null;
+  activeParts = /* @__PURE__ */ new Map();
+  activeToolInputs = /* @__PURE__ */ new Map();
+  streamedMessageIds = /* @__PURE__ */ new Set();
   project(message) {
     if (message.type === "stream_event") {
-      if (message.event.type === "message_start") {
-        this.currentMessageId = anthropicMessageIdFromStreamStart(message) ?? UNKNOWN_MESSAGE_ID;
-        return [];
-      }
-      if (message.event.type === "message_stop") {
-        this.currentMessageId = null;
-        return [];
-      }
-      const delta = partialAssistantDeltaPayload(
-        message,
-        this.currentMessageId ?? UNKNOWN_MESSAGE_ID
-      );
-      return delta ? [{ type: "delta", delta }] : [];
+      return this.projectStreamEvent(message);
     }
     const parsed = parseClaudeCodeStreamRecord(message);
-    const outputs = parsed.projections.map(
-      (entry) => ({
-        type: "entry",
-        // A question means the delivered turn is parked on AskUserQuestion
-        // waiting for an operator answer.
-        entry: entry.kind === "question" ? { ...entry, turnStatus: "waiting_for_input" } : entry
-      })
-    );
+    const snapshotMessageId = assistantSnapshotMessageId(message);
+    const suppressStreamed = snapshotMessageId !== null && this.streamedMessageIds.has(snapshotMessageId);
+    const outputs = !suppressStreamed && message.type === "assistant" ? projectAssistantSnapshot(parsed.projections) : parsed.projections.flatMap((entry) => {
+      if (suppressStreamed && (entry.kind === "message" || entry.kind === "tool_call")) {
+        return [];
+      }
+      return conversationProjectionToUiChunks(entry);
+    });
     if (parsed.result) {
+      outputs.push(...this.endActiveParts(), ...this.finishActiveToolInputs());
+      this.currentMessageId = null;
+      this.activeResponseMessageId = null;
       outputs.push(projectClaudeCodeResult(parsed.result));
     }
     return outputs;
   }
+  flushPendingAssistantMessages() {
+    const outputs = [
+      ...this.endActiveParts(),
+      uiChunk({ type: "finish", finishReason: "stop" })
+    ];
+    this.currentMessageId = null;
+    this.activeResponseMessageId = null;
+    return outputs;
+  }
+  projectStreamEvent(message) {
+    if (message.event.type === "message_start") {
+      this.currentMessageId = anthropicMessageIdFromStreamStart(message) ?? UNKNOWN_MESSAGE_ID;
+      this.streamedMessageIds.add(this.currentMessageId);
+      this.activeParts.clear();
+      this.activeToolInputs.clear();
+      return this.ensureResponseStarted(this.currentMessageId);
+    }
+    if (message.event.type === "message_stop") {
+      const outputs = [
+        ...this.endActiveParts(),
+        ...this.finishActiveToolInputs(),
+        uiChunk({ type: "finish-step" })
+      ];
+      this.currentMessageId = null;
+      return outputs;
+    }
+    if (message.event.type === "content_block_start") {
+      return this.startToolInput(message);
+    }
+    if (message.event.type === "content_block_stop") {
+      return [
+        ...this.endActivePart(blockIndexId(message.event.index)),
+        ...this.finishActiveToolInput(blockIndexId(message.event.index))
+      ];
+    }
+    return partialAssistantDeltaProjections(
+      message,
+      this.activeParts,
+      this.activeToolInputs
+    );
+  }
+  // Open the turn's UI message exactly once. Subsequent messages in the same
+  // turn reuse it (their content becomes additional steps), so the turn
+  // assembles into a single UIMessage instead of the assembler resetting on
+  // each `start` and dropping every message but the last.
+  ensureResponseStarted(messageId) {
+    if (this.activeResponseMessageId !== null) {
+      return [];
+    }
+    this.activeResponseMessageId = messageId;
+    return [uiChunk({ type: "start", messageId })];
+  }
+  endActiveParts() {
+    const outputs = [...this.activeParts].map(([id]) => this.endActivePart(id));
+    this.activeParts.clear();
+    return outputs.flat();
+  }
+  endActivePart(id) {
+    const type = this.activeParts.get(id);
+    if (!type) {
+      return [];
+    }
+    this.activeParts.delete(id);
+    return [uiChunk({ type: `${type}-end`, id })];
+  }
+  startToolInput(message) {
+    const started = toolInputStartFromEvent(message);
+    if (!started) {
+      return [];
+    }
+    this.activeToolInputs.set(started.index, {
+      toolCallId: started.toolCallId,
+      toolName: started.toolName,
+      initialInput: started.input,
+      inputText: ""
+    });
+    return [
+      uiChunk({
+        type: "tool-input-start",
+        toolCallId: started.toolCallId,
+        toolName: started.toolName
+      })
+    ];
+  }
+  finishActiveToolInput(index) {
+    const active = this.activeToolInputs.get(index);
+    if (!active) {
+      return [];
+    }
+    this.activeToolInputs.delete(index);
+    return [
+      uiChunk({
+        type: "tool-input-available",
+        toolCallId: active.toolCallId,
+        toolName: active.toolName,
+        input: completeToolInput(active)
+      })
+    ];
+  }
+  finishActiveToolInputs() {
+    return [...this.activeToolInputs.keys()].flatMap(
+      (index) => this.finishActiveToolInput(index)
+    );
+  }
 };
 function projectClaudeCodeResult(result) {
   return {
-    type: "entry",
-    entry: {
-      role: "system",
-      kind: "status",
-      status: result.isError ? "failed" : "completed",
-      turnStatus: result.isError ? "failed" : "completed",
-      content: {
-        parts: [
-          {
-            type: "text",
-            text: result.isError ? `claude-code failed: ${result.errorMessage ?? "unknown error"}` : "claude-code completed"
-          }
-        ]
-      }
-    }
+    type: "ui_message_chunk",
+    chunk: {
+      type: "finish",
+      finishReason: result.isError ? "error" : "stop"
+    },
+    statusText: result.isError ? `claude-code failed: ${result.errorMessage ?? "unknown error"}` : "claude-code completed",
+    turnStatus: result.isError ? "failed" : "completed"
   };
 }
+function assistantSnapshotMessageId(message) {
+  if (message.type !== "assistant") {
+    return null;
+  }
+  const id = message.message.id;
+  return typeof id === "string" && id.trim() ? id : UNKNOWN_MESSAGE_ID;
+}
 function anthropicMessageIdFromStreamStart(message) {
   const event = message.event;
   if (event.type !== "message_start") {
@@ -33772,27 +34268,284 @@ function anthropicMessageIdFromStreamStart(message) {
   const id = event.message.id;
   return typeof id === "string" && id.trim() ? id : null;
 }
-function partialAssistantDeltaPayload(message, messageId) {
+function partialAssistantDeltaProjections(message, activeParts, activeToolInputs) {
   const event = message.event;
   if (event.type !== "content_block_delta") {
-    return null;
+    return [];
+  }
+  const toolInputDelta = toolInputDeltaFromDelta(event.delta);
+  if (toolInputDelta) {
+    const active = activeToolInputs.get(blockIndexId(event.index));
+    if (!active) {
+      return [];
+    }
+    active.inputText += toolInputDelta;
+    return [
+      uiChunk({
+        type: "tool-input-delta",
+        toolCallId: active.toolCallId,
+        inputTextDelta: toolInputDelta
+      })
+    ];
+  }
+  const sourceChunk = sourceChunkFromDelta(event.delta, event.index);
+  if (sourceChunk) {
+    return [uiChunk(sourceChunk)];
   }
   const delta = event.delta;
-  const text = delta.type === "text_delta" ? delta.text : delta.type === "thinking_delta" ? delta.thinking : "";
-  if (text.length === 0) {
+  const content = textContentFromDelta(delta);
+  if (!content || content.text.length === 0) {
+    return [];
+  }
+  const id = typeof event.index === "number" ? String(event.index) : "0";
+  const outputs = [];
+  if (!activeParts.has(id)) {
+    activeParts.set(id, content.type);
+    outputs.push(
+      uiChunk({ type: `${content.type}-start`, id })
+    );
+  }
+  outputs.push(
+    uiChunk({
+      type: `${content.type}-delta`,
+      id,
+      delta: content.text
+    })
+  );
+  return outputs;
+}
+function toolInputStartFromEvent(message) {
+  const event = message.event;
+  if (event.type !== "content_block_start") {
+    return null;
+  }
+  const contentBlock = event.content_block;
+  if (contentBlock.type !== "tool_use" && contentBlock.type !== "mcp_tool_use" && contentBlock.type !== "server_tool_use") {
+    return null;
+  }
+  const id = contentBlock.id;
+  const name = contentBlock.name;
+  if (typeof id !== "string" || typeof name !== "string") {
+    return null;
+  }
+  if (name === ASK_USER_QUESTION_TOOL_NAME) {
     return null;
   }
-  const index = event.index;
-  const type = delta.type === "thinking_delta" ? "reasoning" : "text";
   return {
-    messageId,
-    partId: typeof index === "number" ? String(index) : "0",
-    role: "assistant",
-    kind: "message",
-    delta: {
-      type,
-      text
+    index: blockIndexId(event.index),
+    toolCallId: id,
+    toolName: toolNameFromContentBlock(contentBlock, name),
+    input: contentBlock.input
+  };
+}
+function toolInputDeltaFromDelta(delta) {
+  if (delta.type !== "input_json_delta") {
+    return null;
+  }
+  return delta.partial_json;
+}
+function completeToolInput(input) {
+  const inputText = input.inputText.trim();
+  if (inputText.length > 0) {
+    try {
+      return JSON.parse(inputText);
+    } catch {
+      return input.inputText;
     }
+  }
+  return input.initialInput ?? {};
+}
+function sourceChunkFromDelta(delta, index) {
+  if (delta.type !== "citations_delta") {
+    return null;
+  }
+  const citation = delta.citation;
+  if (citation.type === "web_search_result_location" && typeof citation.url === "string") {
+    return {
+      type: "source-url",
+      sourceId: citationSourceId(citation, index),
+      url: citation.url,
+      ...typeof citation.title === "string" ? { title: citation.title } : {},
+      providerMetadata: anthropicCitationMetadata(citation)
+    };
+  }
+  return {
+    type: "source-document",
+    sourceId: citationSourceId(citation, index),
+    mediaType: "text/plain",
+    title: citationTitle(citation, index),
+    providerMetadata: anthropicCitationMetadata(citation)
+  };
+}
+function toolNameFromContentBlock(contentBlock, name) {
+  return contentBlock.type === "mcp_tool_use" && typeof contentBlock.server_name === "string" ? `${contentBlock.server_name}.${name}` : name;
+}
+function citationSourceId(citation, index) {
+  for (const key of ["encrypted_index", "file_id", "source"]) {
+    const value = citation[key];
+    if (typeof value === "string" && value.trim().length > 0) {
+      return value;
+    }
+  }
+  if (typeof citation.document_index === "number") {
+    return `document:${citation.document_index.toString()}`;
+  }
+  return `citation:${index.toString()}`;
+}
+function citationTitle(citation, index) {
+  for (const key of ["title", "document_title", "source", "file_id"]) {
+    const value = citation[key];
+    if (typeof value === "string" && value.trim().length > 0) {
+      return value;
+    }
+  }
+  return `Claude citation ${index.toString()}`;
+}
+function anthropicCitationMetadata(citation) {
+  return { anthropic: { citation: toJsonValue(citation) } };
+}
+function blockIndexId(index) {
+  return index.toString();
+}
+function textContentFromDelta(delta) {
+  switch (delta.type) {
+    case "text_delta":
+      return { type: "text", text: delta.text };
+    case "thinking_delta":
+      return { type: "reasoning", text: delta.thinking };
+    default:
+      return null;
+  }
+}
+function conversationProjectionToUiChunks(projection) {
+  if (projection.role === "assistant" && projection.kind === "message") {
+    return messageContentChunks(projection);
+  }
+  if (projection.kind === "tool_call") {
+    return toolCallChunks(projection);
+  }
+  if (projection.kind === "tool_result") {
+    return projection.content.parts.flatMap((part) => {
+      if (part.type !== "tool_result") {
+        return [];
+      }
+      return [
+        uiChunk(
+          part.isError ? {
+            type: "tool-output-error",
+            toolCallId: part.toolUseId ?? UNKNOWN_MESSAGE_ID,
+            errorText: JSON.stringify(part.output)
+          } : {
+            type: "tool-output-available",
+            toolCallId: part.toolUseId ?? UNKNOWN_MESSAGE_ID,
+            output: part.output
+          }
+        )
+      ];
+    });
+  }
+  if (projection.kind === "question") {
+    return projection.content.parts.flatMap(
+      (part) => part.type === "question" ? [
+        {
+          type: "ui_message_chunk",
+          chunk: {
+            type: "data-auto-question",
+            data: {
+              toolCallId: part.toolCallId,
+              questions: part.questions
+            }
+          },
+          turnStatus: "waiting_for_input"
+        }
+      ] : []
+    );
+  }
+  return [
+    {
+      type: "entry",
+      entry: projection
+    }
+  ];
+}
+function projectAssistantSnapshot(projections) {
+  return [
+    ...assistantSnapshotMessageChunks(projections),
+    ...projections.filter((projection) => !isAssistantMessageOrToolCall(projection)).flatMap((projection) => conversationProjectionToUiChunks(projection))
+  ];
+}
+function assistantSnapshotMessageChunks(projections) {
+  const messageProjection = projections.find(
+    (projection) => projection.role === "assistant" && projection.kind === "message"
+  );
+  const toolCallProjections = projections.filter(
+    (projection) => projection.role === "assistant" && projection.kind === "tool_call"
+  );
+  if (!messageProjection && toolCallProjections.length === 0) {
+    return [];
+  }
+  const messageId = messageProjection?.messageId ?? toolCallProjections.find((projection) => projection.messageId)?.messageId ?? UNKNOWN_MESSAGE_ID;
+  const outputs = [
+    uiChunk({ type: "start", messageId })
+  ];
+  if (messageProjection) {
+    outputs.push(...messagePartChunks(messageProjection));
+  }
+  outputs.push(
+    ...toolCallProjections.flatMap((projection) => toolCallChunks(projection))
+  );
+  if (toolCallProjections.length === 0) {
+    outputs.push(uiChunk({ type: "finish", finishReason: "stop" }));
+  }
+  return outputs;
+}
+function isAssistantMessageOrToolCall(projection) {
+  return projection.role === "assistant" && (projection.kind === "message" || projection.kind === "tool_call");
+}
+function messageContentChunks(projection) {
+  const messageId = projection.messageId ?? UNKNOWN_MESSAGE_ID;
+  const outputs = [
+    uiChunk({ type: "start", messageId })
+  ];
+  outputs.push(...messagePartChunks(projection));
+  outputs.push(uiChunk({ type: "finish", finishReason: "stop" }));
+  return outputs;
+}
+function messagePartChunks(projection) {
+  const outputs = [];
+  for (const [index, part] of projection.content.parts.entries()) {
+    if (part.type !== "text" && part.type !== "reasoning") {
+      continue;
+    }
+    const id = `${part.type}-${index.toString()}`;
+    outputs.push(
+      uiChunk({ type: `${part.type}-start`, id }),
+      uiChunk({
+        type: `${part.type}-delta`,
+        id,
+        delta: part.text
+      }),
+      uiChunk({ type: `${part.type}-end`, id })
+    );
+  }
+  return outputs;
+}
+function toolCallChunks(projection) {
+  return projection.content.parts.flatMap(
+    (part) => part.type === "tool_call" ? [
+      uiChunk({
+        type: "tool-input-available",
+        toolCallId: part.toolCallId ?? UNKNOWN_MESSAGE_ID,
+        toolName: part.name,
+        input: part.input
+      })
+    ] : []
+  );
+}
+function uiChunk(chunk) {
+  return {
+    type: "ui_message_chunk",
+    chunk
   };
 }
 
@@ -35043,6 +35796,9 @@ var ClaudeCodeCommandHandler = class {
     if (!activeContext) {
       return;
     }
+    for (const projection of this.projector.flushPendingAssistantMessages()) {
+      await this.emitBridgeOutput(activeContext, projection);
+    }
     await this.emitBridgeOutput(
       activeContext,
       projectClaudeCodeResult({
@@ -35156,30 +35912,27 @@ init_src();
 // src/commands/agent-bridge/harness/codex/projector.ts
 init_src();
 var CodexProjector = class {
+  activeAgentMessages = /* @__PURE__ */ new Set();
+  activeToolCalls = /* @__PURE__ */ new Set();
+  activeResponseMessageId = null;
   project(notification) {
     switch (notification.type) {
       case "agentMessageDelta":
         return [
-          {
-            type: "delta",
-            delta: {
-              messageId: notification.itemId,
-              partId: "0",
-              role: "assistant",
-              kind: "message",
-              delta: { type: "text", text: notification.delta }
-            }
-          }
+          ...this.ensureResponseStarted(notification.itemId),
+          ...this.projectAgentMessageDelta(
+            notification.itemId,
+            notification.delta
+          )
         ];
       case "itemStarted":
-        return entryProjections(
-          projectCodexItem({ item: notification.item, phase: "started" })
-        );
+        return this.projectItem(notification.item, "started");
       case "itemCompleted":
-        return entryProjections(
-          projectCodexItem({ item: notification.item, phase: "completed" })
-        );
+        return this.projectItem(notification.item, "completed");
       case "turnCompleted":
+        this.activeResponseMessageId = null;
+        this.activeAgentMessages.clear();
+        this.activeToolCalls.clear();
         return [turnCompletionEntry(notification)];
       case "error":
         return [errorEntry(notification)];
@@ -35187,81 +35940,267 @@ var CodexProjector = class {
         return [];
     }
   }
-  // An approval parks the turn on operator input, so the question entry also
+  // An approval parks the turn on operator input, so the question chunk also
   // marks the delivered turn as waiting for input.
   projectApproval(request) {
-    return {
-      type: "entry",
-      entry: {
-        ...projectCodexApproval(request),
+    return [
+      uiChunk2({
+        type: "tool-approval-request",
+        approvalId: String(request.requestId),
+        toolCallId: request.itemId
+      }),
+      {
+        type: "ui_message_chunk",
+        chunk: {
+          type: "data-auto-question",
+          data: {
+            toolCallId: request.itemId,
+            questions: [approvalQuestion(request)]
+          }
+        },
         turnStatus: "waiting_for_input"
       }
-    };
+    ];
   }
   // Surfaces a session-level failure (e.g. the app-server process dying) as a
   // durable failed status entry rather than only a diagnostic log line.
   projectSessionFailure(message) {
     return {
-      type: "entry",
-      entry: {
-        role: "system",
-        kind: "status",
-        status: "failed",
-        turnStatus: "failed",
-        content: {
-          parts: [{ type: "text", text: `codex failed: ${message}` }]
-        }
-      }
+      type: "ui_message_chunk",
+      chunk: { type: "error", errorText: `codex failed: ${message}` }
     };
   }
+  projectAgentMessageDelta(itemId, delta) {
+    const outputs = [];
+    if (!this.activeAgentMessages.has(itemId)) {
+      this.activeAgentMessages.add(itemId);
+      outputs.push(uiChunk2({ type: "text-start", id: textPartId(itemId) }));
+    }
+    outputs.push(
+      uiChunk2({ type: "text-delta", id: textPartId(itemId), delta })
+    );
+    return outputs;
+  }
+  projectItem(item, phase) {
+    switch (item.type) {
+      case "agentMessage":
+        return [
+          ...this.ensureResponseStarted(item.id),
+          ...this.projectAgentMessageItem(item, phase)
+        ];
+      case "reasoning":
+        return phase === "completed" ? [
+          ...this.ensureResponseStarted(item.id),
+          ...reasoningItemChunks(item)
+        ] : [];
+      case "commandExecution":
+        return this.projectToolItem({
+          phase,
+          itemId: item.id,
+          name: "shell",
+          input: {
+            command: item.command,
+            ...item.cwd ? { cwd: item.cwd } : {}
+          },
+          output: item.aggregatedOutput ?? "",
+          isError: isFailedStatus(item.status) || (item.exitCode ?? 0) !== 0,
+          title: item.command,
+          toolMetadata: statusMetadata(item.status, {
+            ...item.exitCode !== void 0 ? { exitCode: item.exitCode } : {}
+          })
+        });
+      case "fileChange":
+        return this.projectToolItem({
+          phase,
+          itemId: item.id,
+          name: "apply_patch",
+          input: { changes: toJsonValue(item.changes) },
+          output: { status: item.status ?? "unknown" },
+          isError: isFailedStatus(item.status),
+          title: "apply_patch",
+          toolMetadata: statusMetadata(item.status)
+        });
+      case "mcpToolCall":
+        return this.projectToolItem({
+          phase,
+          itemId: item.id,
+          name: `${item.server}.${item.tool}`,
+          input: toJsonValue(item.arguments),
+          output: item.error ? { error: item.error.message } : toJsonValue(item.result),
+          isError: isFailedStatus(item.status) || item.error != null,
+          title: `${item.server}.${item.tool}`,
+          toolMetadata: statusMetadata(item.status, {
+            server: item.server,
+            tool: item.tool
+          })
+        });
+      default:
+        return [];
+    }
+  }
+  projectToolItem(input) {
+    const outputs = [];
+    outputs.push(...this.ensureResponseStarted(input.itemId));
+    if (input.phase === "started" || !this.activeToolCalls.has(input.itemId)) {
+      outputs.push(toolInputChunk(input));
+      this.activeToolCalls.add(input.itemId);
+    }
+    if (input.phase === "started") {
+      return outputs;
+    }
+    outputs.push(toolOutputChunk(input));
+    outputs.push(uiChunk2({ type: "finish-step" }));
+    this.activeToolCalls.delete(input.itemId);
+    return outputs;
+  }
+  projectAgentMessageItem(item, phase) {
+    if (phase === "started") {
+      if (this.activeAgentMessages.has(item.id)) {
+        return [];
+      }
+      this.activeAgentMessages.add(item.id);
+      return [uiChunk2({ type: "text-start", id: textPartId(item.id) })];
+    }
+    const outputs = [];
+    if (!this.activeAgentMessages.has(item.id)) {
+      outputs.push(uiChunk2({ type: "text-start", id: textPartId(item.id) }));
+      if (item.text.length > 0) {
+        outputs.push(
+          uiChunk2({
+            type: "text-delta",
+            id: textPartId(item.id),
+            delta: item.text
+          })
+        );
+      }
+    }
+    outputs.push(
+      uiChunk2({ type: "text-end", id: textPartId(item.id) }),
+      uiChunk2({ type: "finish-step" })
+    );
+    this.activeAgentMessages.delete(item.id);
+    return outputs;
+  }
+  ensureResponseStarted(messageId) {
+    if (this.activeResponseMessageId !== null) {
+      return [];
+    }
+    this.activeResponseMessageId = messageId;
+    return [uiChunk2({ type: "start", messageId })];
+  }
 };
-function entryProjections(projections) {
-  return projections.map((projection) => ({
-    type: "entry",
-    entry: projection
-  }));
+function reasoningItemChunks(item) {
+  const text = item.summary.map((line) => line.trim()).filter(Boolean).join("\n\n");
+  if (text.length === 0) {
+    return [];
+  }
+  const id = reasoningPartId(item.id);
+  return [
+    uiChunk2({ type: "reasoning-start", id }),
+    uiChunk2({ type: "reasoning-delta", id, delta: text }),
+    uiChunk2({ type: "reasoning-end", id }),
+    uiChunk2({ type: "finish-step" })
+  ];
+}
+function toolInputChunk(input) {
+  return uiChunk2({
+    type: "tool-input-available",
+    toolCallId: input.itemId,
+    toolName: input.name,
+    input: input.input,
+    ...input.title ? { title: input.title } : {},
+    ...input.toolMetadata ? { toolMetadata: input.toolMetadata } : {}
+  });
+}
+function toolOutputChunk(input) {
+  return uiChunk2(
+    input.isError ? {
+      type: "tool-output-error",
+      toolCallId: input.itemId,
+      errorText: JSON.stringify(input.output),
+      ...input.toolMetadata ? { toolMetadata: input.toolMetadata } : {}
+    } : {
+      type: "tool-output-available",
+      toolCallId: input.itemId,
+      output: input.output,
+      ...input.toolMetadata ? { toolMetadata: input.toolMetadata } : {}
+    }
+  );
 }
 function turnCompletionEntry(notification) {
   if (notification.status === "failed") {
     const detail = notification.errorMessage ?? "unknown error";
-    return statusEntry({
+    return statusFinish({
       text: `codex turn failed: ${detail}`,
-      status: "failed",
       turnStatus: "failed"
     });
   }
-  const text = notification.status === "interrupted" ? "codex turn interrupted" : "codex turn completed";
-  return statusEntry({
-    text,
-    status: "completed",
+  return statusFinish({
+    text: notification.status === "interrupted" ? "codex turn interrupted" : "codex turn completed",
     turnStatus: "completed"
   });
 }
 function errorEntry(notification) {
   if (notification.willRetry) {
-    return statusEntry({
-      text: `codex retrying after error: ${notification.message}`,
-      status: "completed"
+    return statusFinish({
+      text: `codex retrying after error: ${notification.message}`
     });
   }
-  return statusEntry({
+  return statusFinish({
     text: `codex error: ${notification.message}`,
-    status: "failed",
     turnStatus: "failed"
   });
 }
-function statusEntry(input) {
+function statusFinish(input) {
   return {
-    type: "entry",
-    entry: {
-      role: "system",
-      kind: "status",
-      status: input.status,
-      ...input.turnStatus ? { turnStatus: input.turnStatus } : {},
-      content: { parts: [{ type: "text", text: input.text }] }
-    }
+    type: "ui_message_chunk",
+    chunk: {
+      type: "finish",
+      finishReason: input.turnStatus === "failed" ? "error" : "stop"
+    },
+    statusText: input.text,
+    ...input.turnStatus ? { turnStatus: input.turnStatus } : {}
   };
 }
+function approvalQuestion(request) {
+  const subject = request.type === "commandExecution" ? `run the command: ${request.command ?? "(unknown command)"}` : "apply file changes";
+  return {
+    question: request.reason ? `Codex requests approval to ${subject}. ${request.reason}` : `Codex requests approval to ${subject}.`,
+    header: "Approval",
+    options: [
+      { label: APPROVE_OPTION_LABEL, description: "Allow this action." },
+      { label: DECLINE_OPTION_LABEL, description: "Reject this action." }
+    ],
+    multiSelect: false
+  };
+}
+function textPartId(itemId) {
+  return `${itemId}:text`;
+}
+function reasoningPartId(itemId) {
+  return `${itemId}:reasoning`;
+}
+function isFailedStatus(status) {
+  return status === "failed" || status === "declined";
+}
+function statusMetadata(status, fields = {}) {
+  return {
+    status: status ?? "unknown",
+    ...fields
+  };
+}
+function uiChunk2(chunk) {
+  return {
+    type: "ui_message_chunk",
+    chunk: normalizeChunk(chunk)
+  };
+}
+function normalizeChunk(chunk) {
+  if ("toolCallId" in chunk && (!chunk.toolCallId || chunk.toolCallId.trim().length === 0)) {
+    return { ...chunk, toolCallId: UNKNOWN_MESSAGE_ID };
+  }
+  return chunk;
+}
 
 // src/commands/agent-bridge/harness/codex/resume-store.ts
 import { existsSync as existsSync2, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
@@ -36032,7 +36971,9 @@ var CodexCommandHandler = class {
     this.input.writeOutput?.(
       `agent_bridge_codex_question_pending tool_use_id=${request.itemId}`
     );
-    await this.emit(activeContext, this.projector.projectApproval(request));
+    for (const projection of this.projector.projectApproval(request)) {
+      await this.emit(activeContext, projection);
+    }
   }
   async handleSessionError(error51) {
     this.input.writeOutput?.(
@@ -40040,6 +40981,8 @@ function entryPreview(event, full) {
         return stringify5(part.output);
       case "question":
         return part.questions.map((question) => question.question).join(" ");
+      case "ui_message":
+        return stringify5(part.message);
       default:
         return "";
     }