@autohq/cli 0.1.302 → 0.1.304

package/dist/index.js

@@ -18417,979 +18417,980 @@ var init_environments = __esm({
   }
 });
 
-// ../../packages/schemas/src/live-events.ts
-var LiveEntityEventEnvelopeSchema;
-var init_live_events = __esm({
-  "../../packages/schemas/src/live-events.ts"() {
-    "use strict";
-    init_zod();
-    init_primitives();
-    LiveEntityEventEnvelopeSchema = external_exports.object({
-      // Replay cursor for this frame; the SSE `id:` mirrors it so reconnects resume
-      // from `sequence > cursor`.
-      sequence: external_exports.number().int().nonnegative(),
-      eventKey: external_exports.string().min(1),
-      // The event's `subjectKind`, surfaced as `entity` for client-side dispatch.
-      entity: external_exports.string().min(1),
-      subjectId: external_exports.string().min(1),
-      payload: JsonValueSchema,
-      occurredAt: external_exports.string().min(1)
-    });
-  }
-});
-
-// ../../packages/schemas/src/mcp.ts
-var McpToolCallMessageSchema, McpJsonRpcMessageSchema, McpPostBodySchema;
-var init_mcp = __esm({
-  "../../packages/schemas/src/mcp.ts"() {
+// ../../packages/schemas/src/singleton-refresh.ts
+var SINGLETON_RESPAWN_REASONS, SingletonRespawnReasonSchema, SingletonRespawnSchema, SingletonRefreshEventPayloadSchema;
+var init_singleton_refresh = __esm({
+  "../../packages/schemas/src/singleton-refresh.ts"() {
     "use strict";
     init_zod();
-    McpToolCallMessageSchema = external_exports.object({
-      method: external_exports.literal("tools/call"),
-      params: external_exports.object({
-        name: external_exports.string().trim().min(1)
+    SINGLETON_RESPAWN_REASONS = ["refresh", "failure"];
+    SingletonRespawnReasonSchema = external_exports.enum(SINGLETON_RESPAWN_REASONS);
+    SingletonRespawnSchema = external_exports.object({
+      reason: SingletonRespawnReasonSchema.default("refresh")
+    }).strict();
+    SingletonRefreshEventPayloadSchema = external_exports.object({
+      trigger: external_exports.literal("agent.refresh"),
+      refresh: external_exports.object({
+        reason: SingletonRespawnReasonSchema,
+        agentResourceId: external_exports.string().trim().min(1),
+        previousSessionId: external_exports.string().trim().min(1)
       })
     });
-    McpJsonRpcMessageSchema = external_exports.object({
-      method: external_exports.string().optional()
-    }).passthrough();
-    McpPostBodySchema = external_exports.union([McpJsonRpcMessageSchema, external_exports.array(McpJsonRpcMessageSchema)]).transform((body) => Array.isArray(body) ? body : [body]);
-  }
-});
-
-// ../../packages/schemas/src/pricing.ts
-function tier(inputUsdPerMtok, outputUsdPerMtok) {
-  return {
-    inputUsdPerMtok,
-    outputUsdPerMtok,
-    cacheWrite5mUsdPerMtok: inputUsdPerMtok * 1.25,
-    cacheReadUsdPerMtok: inputUsdPerMtok * 0.1
-  };
-}
-function opusTier() {
-  return tier(5, 25);
-}
-function openAiTier(rates) {
-  return {
-    inputUsdPerMtok: rates.input,
-    outputUsdPerMtok: rates.output,
-    cacheWrite5mUsdPerMtok: rates.input,
-    cacheReadUsdPerMtok: rates.cachedInput
-  };
-}
-var RATE_CARD_2026_06_23, PRICING_RATE_CARDS, CURRENT_PRICING_VERSION;
-var init_pricing = __esm({
-  "../../packages/schemas/src/pricing.ts"() {
-    "use strict";
-    RATE_CARD_2026_06_23 = {
-      version: "2026-06-23",
-      effectiveAt: "2026-06-23T00:00:00.000Z",
-      models: {
-        "claude-opus-4-8": opusTier(),
-        "claude-opus-4-7": opusTier(),
-        "claude-opus-4-6": opusTier(),
-        "claude-sonnet-4-6": tier(3, 15),
-        "claude-haiku-4-5": tier(1, 5),
-        "claude-haiku-4-5-20251001": tier(1, 5),
-        "claude-fable-5": tier(10, 50),
-        // OpenAI gpt-5.3-codex, standard tier: input $1.75/Mtok, cached input
-        // $0.175/Mtok, output $14.00/Mtok. Source (verified 2026-06-23):
-        // https://developers.openai.com/api/docs/models/gpt-5.3-codex and
-        // https://developers.openai.com/api/docs/pricing (priority tier is 2x; we
-        // bill standard).
-        "gpt-5.3-codex": openAiTier({
-          input: 1.75,
-          cachedInput: 0.175,
-          output: 14
-        })
-      }
-    };
-    PRICING_RATE_CARDS = {
-      [RATE_CARD_2026_06_23.version]: RATE_CARD_2026_06_23
-    };
-    CURRENT_PRICING_VERSION = RATE_CARD_2026_06_23.version;
-  }
-});
-
-// ../../packages/schemas/src/project-service-accounts.ts
-var ProjectServiceAccountSchema, ProjectServiceAccountCreateRequestSchema, ProjectServiceAccountUpdateRequestSchema, ProjectServiceAccountTokenResponseSchema, ProjectServiceAccountUpdateResponseSchema, ProjectServiceAccountRemoveResponseSchema, ProjectServiceAccountListResponseSchema;
-var init_project_service_accounts = __esm({
-  "../../packages/schemas/src/project-service-accounts.ts"() {
-    "use strict";
-    init_zod();
-    init_auth();
-    init_ids();
-    init_resources();
-    ProjectServiceAccountSchema = external_exports.object({
-      id: ServiceAccountIdSchema,
-      organizationId: OrganizationIdSchema,
-      projectId: ProjectIdSchema,
-      name: ResourceNameSchema,
-      scopes: external_exports.array(AuthScopeSchema),
-      createdAt: external_exports.string().datetime()
-    });
-    ProjectServiceAccountCreateRequestSchema = external_exports.object({
-      name: ResourceNameSchema,
-      scopes: external_exports.array(AuthScopeSchema).min(1)
-    });
-    ProjectServiceAccountUpdateRequestSchema = external_exports.object({
-      scopes: external_exports.array(AuthScopeSchema).min(1)
-    });
-    ProjectServiceAccountTokenResponseSchema = external_exports.object({
-      serviceAccount: ProjectServiceAccountSchema,
-      token: external_exports.string().min(1)
-    });
-    ProjectServiceAccountUpdateResponseSchema = external_exports.object({
-      serviceAccount: ProjectServiceAccountSchema
-    });
-    ProjectServiceAccountRemoveResponseSchema = external_exports.object({
-      serviceAccount: ProjectServiceAccountSchema,
-      removed: external_exports.literal(true)
-    });
-    ProjectServiceAccountListResponseSchema = external_exports.object({
-      serviceAccounts: external_exports.array(ProjectServiceAccountSchema)
-    });
   }
 });
 
-// ../../packages/schemas/src/project-resources.ts
-function projectApplyBundleStorageKey(sha256) {
-  return `project-apply-bundles/${sha256}.json`;
-}
-var EnvironmentApplyDocumentSchema, IdentityApplyDocumentSchema, AgentApplyDocumentSchema, ProjectApplyResourceSchema, PROJECT_RESOURCE_APPLY_ORDER, PROJECT_RESOURCE_KINDS, PROJECT_APPLY_RESOURCE_KINDS, PROJECT_APPLY_BUNDLE_VERSION, MAX_PROJECT_APPLY_BUNDLE_BYTES, PROJECT_APPLY_BUNDLE_CONTENT_TYPE, ProjectDeleteResourceBaseSchema, ProjectDeleteResourceSchema, AVATAR_ASSET_CONTENT_TYPES, MAX_AVATAR_ASSET_BASE64_LENGTH, ProjectApplyAssetSchema, ProjectApplyAssetsSchema, AvatarAssetUploadResponseSchema, ApplyBundlePathSchema, ProjectApplyBundleFileSchema, ProjectApplyBundleSchema, ProjectApplyBundleRefSchema, ProjectApplyBundleUploadRequestSchema, ProjectApplyBundleUploadResponseSchema, ProjectApplyBundleDirectoryEntrypointSchema, ProjectApplyBundleFileEntrypointSchema, ProjectApplyBundleEntrypointSchema, ProjectApplySourceSchema, ProjectApplySourceRequestSchema, ProjectApplyRequestSchema, ProjectApplySystemConfigSchema, ProjectAppliedResourceSchema, ProjectApplyDiagnosticSchema, ProjectApplyResponsePrunedSchema, ProjectApplyPlanDiffSchema, ProjectApplyResponseSchema, ProjectResourceApplyResultSchema, ProjectResourceApplyAuditActionSchema, ProjectResourceApplyOperationIdSchema, ProjectResourceApplyTriggerArtifactSchema, ProjectResourceApplyWorkflowErrorSchema, ProjectResourceApplyWorkflowInputSchema, ProjectResourceApplyWorkflowResultSchema;
-var init_project_resources = __esm({
-  "../../packages/schemas/src/project-resources.ts"() {
+// ../../packages/schemas/src/session-commands.ts
+var SESSION_COMMAND_KINDS, SESSION_DISPATCH_COMMAND_KINDS, SESSION_PERSISTED_COMMAND_KINDS, SESSION_LIFECYCLE_COMMAND_KINDS, SESSION_COMMAND_STATUSES, SESSION_DISPATCH_COMMAND_STATUSES, SessionCommandKindSchema, SessionPersistedCommandKindSchema, SessionDispatchCommandKindSchema, RunLifecycleCommandKindSchema, SessionCommandStatusSchema, SessionDispatchCommandStatusSchema, SessionCommandSenderSchema, MESSAGE_DELIVERY_MODES, MessageDeliveryModeSchema, TRIGGER_INJECTION_MODALITIES, TriggerInjectionModalitySchema, RunMessageCommandPayloadSchema, RunAnswerCommandPayloadSchema, RunLifecycleCommandPayloadSchema, RunStopCommandPayloadSchema, SessionCommandPayloadSchema, CreateRunMessageCommandRequestSchema, CreateRunAnswerCommandRequestSchema, CreateRunLifecycleCommandRequestSchema, CreateRunStopCommandRequestSchema, CreateSessionCommandRequestSchema, RunResolutionPolicySchema, AgentAddressedCommandTargetSchema, SessionCommandRecordBaseSchema, RunStartCommandPayloadSchema, RunStartWithMessageCommandPayloadSchema, SessionPersistedCommandPayloadSchema, SessionCommandRecordSchema, SessionDispatchMessageCommandPayloadSchema, SessionDispatchAnswerCommandPayloadSchema, SessionDispatchStopCommandPayloadSchema, SessionDispatchCommandPayloadSchema, SessionDispatchCommandRecordBaseSchema, SessionDispatchCommandRecordSchema;
+var init_session_commands = __esm({
+  "../../packages/schemas/src/session-commands.ts"() {
     "use strict";
     init_zod();
-    init_agents();
     init_auth();
-    init_connections();
-    init_environments();
-    init_identities();
     init_ids();
     init_primitives();
-    init_resources();
-    init_trigger_router();
-    EnvironmentApplyDocumentSchema = resourceApplyDocumentSchema(
-      RESOURCE_KIND_ENVIRONMENT,
-      EnvironmentApplyRequestSchema.shape.spec
+    init_singleton_refresh();
+    SESSION_COMMAND_KINDS = [
+      "message",
+      "answer",
+      "pause",
+      "resume",
+      "interrupt",
+      "cancel",
+      "stop"
+    ];
+    SESSION_DISPATCH_COMMAND_KINDS = [
+      "start",
+      "startWithMessage",
+      "message",
+      "answer",
+      "stop"
+    ];
+    SESSION_PERSISTED_COMMAND_KINDS = [
+      "message",
+      "pause",
+      "resume",
+      "interrupt",
+      "cancel",
+      "stop",
+      "start",
+      "startWithMessage",
+      "answer"
+    ];
+    SESSION_LIFECYCLE_COMMAND_KINDS = [
+      "pause",
+      "resume",
+      "interrupt",
+      "cancel",
+      "stop"
+    ];
+    SESSION_COMMAND_STATUSES = [
+      "pending",
+      "dispatching",
+      "accepted",
+      "failed"
+    ];
+    SESSION_DISPATCH_COMMAND_STATUSES = [
+      "pending",
+      "dispatching",
+      "accepted",
+      "failed"
+    ];
+    SessionCommandKindSchema = external_exports.enum(SESSION_COMMAND_KINDS);
+    SessionPersistedCommandKindSchema = external_exports.enum(
+      SESSION_PERSISTED_COMMAND_KINDS
     );
-    IdentityApplyDocumentSchema = resourceApplyDocumentSchema(
-      RESOURCE_KIND_IDENTITY,
-      IdentityApplyRequestSchema.shape.spec
+    SessionDispatchCommandKindSchema = external_exports.enum(
+      SESSION_DISPATCH_COMMAND_KINDS
     );
-    AgentApplyDocumentSchema = resourceApplyDocumentSchema(
-      RESOURCE_KIND_AGENT,
-      AgentApplyRequestSchema.shape.spec
+    RunLifecycleCommandKindSchema = external_exports.enum(
+      SESSION_LIFECYCLE_COMMAND_KINDS
     );
-    ProjectApplyResourceSchema = external_exports.discriminatedUnion("kind", [
-      EnvironmentApplyDocumentSchema,
-      IdentityApplyDocumentSchema,
-      AgentApplyDocumentSchema
+    SessionCommandStatusSchema = external_exports.enum(SESSION_COMMAND_STATUSES);
+    SessionDispatchCommandStatusSchema = external_exports.enum(
+      SESSION_DISPATCH_COMMAND_STATUSES
+    );
+    SessionCommandSenderSchema = external_exports.discriminatedUnion("type", [
+      external_exports.object({
+        type: external_exports.literal("operator"),
+        id: external_exports.string().trim().min(1).nullable().default(null),
+        actor: AuthActorSchema.nullable().optional()
+      }),
+      external_exports.object({
+        type: external_exports.literal("agent"),
+        sessionId: SessionIdSchema
+      }),
+      external_exports.object({
+        type: external_exports.literal("system")
+      })
     ]);
-    PROJECT_RESOURCE_APPLY_ORDER = [
-      RESOURCE_KIND_CONNECTION,
-      RESOURCE_KIND_IDENTITY,
-      RESOURCE_KIND_ENVIRONMENT,
-      RESOURCE_KIND_AGENT
-    ];
-    PROJECT_RESOURCE_KINDS = PROJECT_RESOURCE_APPLY_ORDER;
-    PROJECT_APPLY_RESOURCE_KINDS = [
-      RESOURCE_KIND_IDENTITY,
-      RESOURCE_KIND_ENVIRONMENT,
-      RESOURCE_KIND_AGENT
-    ];
-    PROJECT_APPLY_BUNDLE_VERSION = 1;
-    MAX_PROJECT_APPLY_BUNDLE_BYTES = 64 * 1024 * 1024;
-    PROJECT_APPLY_BUNDLE_CONTENT_TYPE = "application/vnd.auto.project-apply-bundle+json";
-    ProjectDeleteResourceBaseSchema = external_exports.object({
-      name: external_exports.string().trim().min(1)
-    });
-    ProjectDeleteResourceSchema = ProjectDeleteResourceBaseSchema.extend({
-      kind: external_exports.enum(PROJECT_APPLY_RESOURCE_KINDS)
-    });
-    AVATAR_ASSET_CONTENT_TYPES = ["image/png", "image/jpeg"];
-    MAX_AVATAR_ASSET_BASE64_LENGTH = Math.ceil(MAX_AVATAR_ASSET_BYTES / 3) * 4 + 4;
-    ProjectApplyAssetSchema = external_exports.object({
-      sha256: external_exports.string().regex(/^[a-f0-9]{64}$/),
-      contentType: external_exports.enum(AVATAR_ASSET_CONTENT_TYPES),
-      dataBase64: external_exports.string().min(1).max(MAX_AVATAR_ASSET_BASE64_LENGTH).regex(/^[A-Za-z0-9+/]+={0,2}$/)
-    });
-    ProjectApplyAssetsSchema = external_exports.record(
-      external_exports.string().refine(isAvatarAssetPathShapeValid, {
-        message: "asset keys must be relative paths under .auto/assets"
-      }),
-      ProjectApplyAssetSchema
+    MESSAGE_DELIVERY_MODES = ["interrupt", "deferred"];
+    MessageDeliveryModeSchema = external_exports.enum(MESSAGE_DELIVERY_MODES);
+    TRIGGER_INJECTION_MODALITIES = [
+      "chat",
+      "githubCheck",
+      "githubCheckAction",
+      "githubPullRequest",
+      "other"
+    ];
+    TriggerInjectionModalitySchema = external_exports.enum(
+      TRIGGER_INJECTION_MODALITIES
     );
-    AvatarAssetUploadResponseSchema = external_exports.object({
-      sha256: external_exports.string().regex(/^[a-f0-9]{64}$/),
-      contentType: external_exports.enum(AVATAR_ASSET_CONTENT_TYPES),
-      sizeBytes: external_exports.number().int().positive()
-    });
-    ApplyBundlePathSchema = external_exports.string().trim().min(1).max(4096).refine((path2) => !path2.startsWith("/") && !path2.includes("\0"), {
-      message: "apply bundle paths must be relative paths"
-    });
-    ProjectApplyBundleFileSchema = external_exports.object({
-      path: ApplyBundlePathSchema,
-      contentBase64: external_exports.string().regex(/^[A-Za-z0-9+/]*={0,2}$/)
-    });
-    ProjectApplyBundleSchema = external_exports.object({
-      version: external_exports.literal(PROJECT_APPLY_BUNDLE_VERSION),
-      files: external_exports.array(ProjectApplyBundleFileSchema).max(2e4)
-    });
-    ProjectApplyBundleRefSchema = external_exports.object({
-      kind: external_exports.literal("vercel_blob"),
-      storageKey: external_exports.string().trim().min(1).max(1024),
-      sha256: external_exports.string().regex(SHA256_HEX_PATTERN),
-      sizeBytes: external_exports.number().int().positive().max(MAX_PROJECT_APPLY_BUNDLE_BYTES)
-    }).superRefine((ref, context) => {
-      const expectedStorageKey = projectApplyBundleStorageKey(ref.sha256);
-      if (ref.storageKey === expectedStorageKey) {
-        return;
-      }
-      context.addIssue({
-        code: "custom",
-        path: ["storageKey"],
-        message: "apply bundle storage key must match its sha256"
-      });
-    });
-    ProjectApplyBundleUploadRequestSchema = external_exports.object({
-      sha256: external_exports.string().regex(SHA256_HEX_PATTERN),
-      sizeBytes: external_exports.number().int().positive().max(MAX_PROJECT_APPLY_BUNDLE_BYTES)
-    });
-    ProjectApplyBundleUploadResponseSchema = external_exports.object({
-      method: external_exports.literal("PUT"),
-      uploadUrl: external_exports.string().url(),
-      contentType: external_exports.literal(PROJECT_APPLY_BUNDLE_CONTENT_TYPE),
-      source: ProjectApplyBundleRefSchema
-    });
-    ProjectApplyBundleDirectoryEntrypointSchema = external_exports.object({
-      kind: external_exports.literal("directory"),
-      resourceRoot: ApplyBundlePathSchema.default(".auto"),
-      displayResourceRoot: external_exports.string().trim().min(1).max(4096).optional()
-    });
-    ProjectApplyBundleFileEntrypointSchema = external_exports.object({
-      kind: external_exports.literal("file"),
-      filePath: ApplyBundlePathSchema
+    RunMessageCommandPayloadSchema = external_exports.object({
+      message: external_exports.string().trim().min(1),
+      // Optional so existing payloads and direct operator/agent messages stay
+      // valid without it; trigger routing sets "deferred" for GitHub check
+      // events. An absent mode is treated as "interrupt" at the delivery
+      // boundary (commandDeliveryPayload / the runtime handler), so the default
+      // lives where the value is consumed rather than as a required field every
+      // call site must construct.
+      deliveryMode: MessageDeliveryModeSchema.optional(),
+      metadata: JsonValueSchema.optional()
+    }).strict();
+    RunAnswerCommandPayloadSchema = external_exports.object({
+      toolCallId: external_exports.string().trim().min(1),
+      answers: external_exports.record(external_exports.string(), external_exports.string()),
+      response: external_exports.string().trim().min(1).optional()
+    }).strict().refine((value) => Object.keys(value.answers).length > 0 || value.response, {
+      message: "Provide at least one answer or a freeform response"
     });
-    ProjectApplyBundleEntrypointSchema = external_exports.discriminatedUnion("kind", [
-      ProjectApplyBundleDirectoryEntrypointSchema,
-      ProjectApplyBundleFileEntrypointSchema
+    RunLifecycleCommandPayloadSchema = external_exports.object({
+      reason: external_exports.string().trim().min(1).optional()
+    }).strict();
+    RunStopCommandPayloadSchema = external_exports.object({
+      reason: external_exports.string().trim().min(1).optional(),
+      respawn: SingletonRespawnSchema.optional()
+    }).strict();
+    SessionCommandPayloadSchema = external_exports.union([
+      RunMessageCommandPayloadSchema,
+      RunAnswerCommandPayloadSchema,
+      RunLifecycleCommandPayloadSchema,
+      RunStopCommandPayloadSchema
     ]);
-    ProjectApplySourceSchema = external_exports.object({
-      kind: external_exports.literal("bundle"),
-      bundle: ProjectApplyBundleRefSchema,
-      entrypoint: ProjectApplyBundleEntrypointSchema
-    });
-    ProjectApplySourceRequestSchema = external_exports.object({
-      source: ProjectApplySourceSchema,
-      delete: external_exports.array(ProjectDeleteResourceSchema).default([]),
-      dryRun: external_exports.boolean().default(false),
-      prune: external_exports.boolean().default(true)
+    CreateRunMessageCommandRequestSchema = external_exports.object({
+      message: external_exports.string().trim().min(1),
+      metadata: JsonValueSchema.optional()
     });
-    ProjectApplyRequestSchema = external_exports.object({
-      delete: external_exports.array(ProjectDeleteResourceSchema).default([]),
-      dryRun: external_exports.boolean().default(false),
-      prune: external_exports.boolean().default(false),
-      resources: external_exports.array(ProjectApplyResourceSchema).default([]),
-      assets: ProjectApplyAssetsSchema.default({})
+    CreateRunAnswerCommandRequestSchema = RunAnswerCommandPayloadSchema;
+    CreateRunLifecycleCommandRequestSchema = external_exports.object({
+      reason: external_exports.string().trim().min(1).optional()
     });
-    ProjectApplySystemConfigSchema = external_exports.object({
-      kind: external_exports.literal("system"),
-      metadata: external_exports.object({
-        name: external_exports.string().trim().min(1).optional()
-      }).optional(),
-      spec: ProjectApplyRequestSchema
+    CreateRunStopCommandRequestSchema = external_exports.object({
+      reason: external_exports.string().trim().min(1).optional(),
+      respawn: SingletonRespawnSchema.optional()
     });
-    ProjectAppliedResourceSchema = external_exports.union([
-      ProjectConnectionAllocationResourceSchema,
-      EnvironmentResourceSchema,
-      IdentityResourceSchema,
-      AgentResourceSchema
+    CreateSessionCommandRequestSchema = external_exports.discriminatedUnion("kind", [
+      external_exports.object({
+        kind: external_exports.literal("message"),
+        payload: CreateRunMessageCommandRequestSchema
+      }).strict(),
+      external_exports.object({
+        kind: external_exports.literal("answer"),
+        payload: CreateRunAnswerCommandRequestSchema
+      }).strict(),
+      external_exports.object({
+        kind: external_exports.literal("pause"),
+        payload: CreateRunLifecycleCommandRequestSchema
+      }).strict(),
+      external_exports.object({
+        kind: external_exports.literal("resume"),
+        payload: CreateRunLifecycleCommandRequestSchema
+      }).strict(),
+      external_exports.object({
+        kind: external_exports.literal("interrupt"),
+        payload: CreateRunLifecycleCommandRequestSchema
+      }).strict(),
+      external_exports.object({
+        kind: external_exports.literal("cancel"),
+        payload: CreateRunLifecycleCommandRequestSchema
+      }).strict(),
+      external_exports.object({
+        kind: external_exports.literal("stop"),
+        payload: CreateRunStopCommandRequestSchema
+      }).strict()
     ]);
-    ProjectApplyDiagnosticSchema = external_exports.object({
-      // "info" is a non-blocking advisory (e.g. template-push capability/override
-      // notices); "error" remains the validation-failure severity. Coordinated
-      // shape with the optional-connection-gating work; whoever lands second rebases.
-      severity: external_exports.enum(["error", "info"]),
-      blocking: external_exports.boolean(),
-      code: external_exports.string().min(1),
-      message: external_exports.string().min(1),
-      action: external_exports.enum(["create", "update", "unchanged"]),
-      kind: external_exports.enum([
-        RESOURCE_KIND_CONNECTION,
-        RESOURCE_KIND_ENVIRONMENT,
-        RESOURCE_KIND_IDENTITY,
-        RESOURCE_KIND_AGENT
-      ]),
-      name: external_exports.string().min(1)
-    });
-    ProjectApplyResponsePrunedSchema = external_exports.object({
-      kind: external_exports.enum(PROJECT_RESOURCE_KINDS),
-      name: external_exports.string().min(1),
-      uid: external_exports.string().min(1),
-      heartbeatScheduleIds: external_exports.array(external_exports.string().min(1)).optional()
-    });
-    ProjectApplyPlanDiffSchema = external_exports.object({
-      action: external_exports.enum(["add", "remove", "change"]),
-      path: external_exports.string().min(1)
-    });
-    ProjectApplyResponseSchema = external_exports.object({
-      dryRun: external_exports.boolean().default(false),
-      resources: external_exports.array(ProjectAppliedResourceSchema),
-      triggers: external_exports.array(ApplyTriggerReceiptSchema).default([]),
-      diagnostics: external_exports.array(ProjectApplyDiagnosticSchema).default([]),
-      plan: external_exports.array(
-        external_exports.object({
-          action: external_exports.enum(["create", "update", "unchanged", "archive"]),
-          kind: external_exports.enum(PROJECT_RESOURCE_KINDS),
-          name: external_exports.string().min(1),
-          uid: external_exports.string().min(1).optional(),
-          diff: external_exports.array(ProjectApplyPlanDiffSchema).optional(),
-          diffOmitted: external_exports.number().int().positive().optional()
-        })
-      ).default([]),
-      pruned: external_exports.array(ProjectApplyResponsePrunedSchema).default([])
-    });
-    ProjectResourceApplyResultSchema = ProjectApplyResponseSchema.extend({
-      heartbeatSchedules: external_exports.array(
-        external_exports.object({
-          scheduleId: external_exports.string().trim().min(1),
-          cron: external_exports.string().trim().min(1),
-          timezone: external_exports.string().trim().min(1),
-          input: HeartbeatTickWorkflowInputSchema
-        })
-      ).default([]),
-      deletedHeartbeatScheduleIds: external_exports.array(external_exports.string().trim().min(1)).default([])
-    });
-    ProjectResourceApplyAuditActionSchema = external_exports.enum([
-      "project_resources.apply",
-      "github_sync.apply"
+    RunResolutionPolicySchema = external_exports.enum([
+      "singletonLiveRun",
+      "latestLiveRun",
+      "latestRun"
     ]);
-    ProjectResourceApplyOperationIdSchema = external_exports.string().trim().min(1).max(512);
-    ProjectResourceApplyTriggerArtifactSchema = external_exports.object({
-      type: external_exports.string().trim().min(1),
-      externalId: external_exports.string().trim().min(1),
-      payload: JsonValueSchema.optional()
-    }).strict();
-    ProjectResourceApplyWorkflowErrorSchema = external_exports.object({
-      name: external_exports.string().trim().min(1),
-      message: external_exports.string().trim().min(1)
+    AgentAddressedCommandTargetSchema = external_exports.object({
+      agentId: AgentIdSchema.optional(),
+      agentName: external_exports.string().trim().min(1).optional(),
+      resolutionPolicy: RunResolutionPolicySchema
+    }).refine((value) => Boolean(value.agentId) !== Boolean(value.agentName), {
+      message: "Provide exactly one of agentId or agentName"
     });
-    ProjectResourceApplyWorkflowInputSchema = external_exports.object({
-      operationId: ProjectResourceApplyOperationIdSchema,
-      request: ProjectApplyRequestSchema.optional(),
-      sourceRequest: ProjectApplySourceRequestSchema.optional(),
-      organizationId: OrganizationIdSchema,
-      projectId: ProjectIdSchema.nullable().optional(),
-      actor: AuthActorSchema,
-      auditAction: ProjectResourceApplyAuditActionSchema,
-      triggerArtifact: ProjectResourceApplyTriggerArtifactSchema.optional()
-    }).superRefine((input, context) => {
-      if ((input.request ? 1 : 0) + (input.sourceRequest ? 1 : 0) !== 1) {
-        context.addIssue({
-          code: "custom",
-          path: ["request"],
-          message: "exactly one of request or sourceRequest is required"
-        });
-      }
+    SessionCommandRecordBaseSchema = external_exports.object({
+      id: SessionCommandIdSchema,
+      sessionId: SessionIdSchema,
+      sender: SessionCommandSenderSchema,
+      idempotencyKey: external_exports.string().min(1).nullable(),
+      status: SessionCommandStatusSchema,
+      attemptCount: external_exports.number().int().nonnegative(),
+      nextAttemptAt: external_exports.string().datetime().nullable(),
+      lastAttemptAt: external_exports.string().datetime().nullable(),
+      acceptedAt: external_exports.string().datetime().nullable(),
+      failedAt: external_exports.string().datetime().nullable(),
+      error: JsonValueSchema.nullable(),
+      createdAt: external_exports.string().datetime(),
+      updatedAt: external_exports.string().datetime()
     });
-    ProjectResourceApplyWorkflowResultSchema = external_exports.discriminatedUnion(
-      "status",
+    RunStartCommandPayloadSchema = external_exports.object({
+      kind: external_exports.literal("start")
+    }).strict();
+    RunStartWithMessageCommandPayloadSchema = external_exports.object({
+      kind: external_exports.literal("startWithMessage"),
+      message: external_exports.string().trim().min(1)
+    }).strict();
+    SessionPersistedCommandPayloadSchema = external_exports.union([
+      RunMessageCommandPayloadSchema,
+      RunAnswerCommandPayloadSchema,
+      RunLifecycleCommandPayloadSchema,
+      RunStopCommandPayloadSchema,
+      RunStartCommandPayloadSchema,
+      RunStartWithMessageCommandPayloadSchema
+    ]);
+    SessionCommandRecordSchema = external_exports.discriminatedUnion("kind", [
+      SessionCommandRecordBaseSchema.extend({
+        kind: external_exports.literal("message"),
+        payload: RunMessageCommandPayloadSchema
+      }),
+      SessionCommandRecordBaseSchema.extend({
+        kind: external_exports.literal("answer"),
+        payload: RunAnswerCommandPayloadSchema
+      }),
+      SessionCommandRecordBaseSchema.extend({
+        kind: external_exports.literal("pause"),
+        payload: RunLifecycleCommandPayloadSchema
+      }),
+      SessionCommandRecordBaseSchema.extend({
+        kind: external_exports.literal("resume"),
+        payload: RunLifecycleCommandPayloadSchema
+      }),
+      SessionCommandRecordBaseSchema.extend({
+        kind: external_exports.literal("interrupt"),
+        payload: RunLifecycleCommandPayloadSchema
+      }),
+      SessionCommandRecordBaseSchema.extend({
+        kind: external_exports.literal("cancel"),
+        payload: RunLifecycleCommandPayloadSchema
+      }),
+      SessionCommandRecordBaseSchema.extend({
+        kind: external_exports.literal("stop"),
+        payload: RunStopCommandPayloadSchema
+      }),
+      SessionCommandRecordBaseSchema.extend({
+        kind: external_exports.literal("start"),
+        payload: RunStartCommandPayloadSchema
+      }),
+      SessionCommandRecordBaseSchema.extend({
+        kind: external_exports.literal("startWithMessage"),
+        payload: RunStartWithMessageCommandPayloadSchema
+      })
+    ]);
+    SessionDispatchMessageCommandPayloadSchema = external_exports.object({
+      kind: external_exports.literal("message"),
+      message: external_exports.string().trim().min(1)
+    }).strict();
+    SessionDispatchAnswerCommandPayloadSchema = external_exports.object({
+      kind: external_exports.literal("answer"),
+      toolCallId: external_exports.string().trim().min(1),
+      answers: external_exports.record(external_exports.string(), external_exports.string()),
+      response: external_exports.string().trim().min(1).optional()
+    }).strict();
+    SessionDispatchStopCommandPayloadSchema = external_exports.object({
+      kind: external_exports.literal("stop"),
+      reason: external_exports.string().trim().min(1).optional()
+    }).strict();
+    SessionDispatchCommandPayloadSchema = external_exports.discriminatedUnion(
+      "kind",
       [
-        external_exports.object({
-          status: external_exports.literal("applied"),
-          result: ProjectResourceApplyResultSchema
-        }),
-        external_exports.object({
-          status: external_exports.literal("failed"),
-          error: ProjectResourceApplyWorkflowErrorSchema
-        })
+        RunStartCommandPayloadSchema,
+        RunStartWithMessageCommandPayloadSchema,
+        SessionDispatchMessageCommandPayloadSchema,
+        SessionDispatchAnswerCommandPayloadSchema,
+        SessionDispatchStopCommandPayloadSchema
       ]
     );
+    SessionDispatchCommandRecordBaseSchema = external_exports.object({
+      id: SessionCommandIdSchema,
+      sessionId: SessionIdSchema,
+      sender: SessionCommandSenderSchema,
+      idempotencyKey: external_exports.string().min(1).nullable(),
+      status: SessionDispatchCommandStatusSchema,
+      attemptCount: external_exports.number().int().nonnegative(),
+      nextAttemptAt: external_exports.string().datetime().nullable(),
+      lastAttemptAt: external_exports.string().datetime().nullable(),
+      acceptedAt: external_exports.string().datetime().nullable(),
+      failedAt: external_exports.string().datetime().nullable(),
+      error: JsonValueSchema.nullable(),
+      createdAt: external_exports.string().datetime(),
+      updatedAt: external_exports.string().datetime()
+    });
+    SessionDispatchCommandRecordSchema = external_exports.discriminatedUnion("kind", [
+      SessionDispatchCommandRecordBaseSchema.extend({
+        kind: external_exports.literal("start"),
+        payload: RunStartCommandPayloadSchema
+      }),
+      SessionDispatchCommandRecordBaseSchema.extend({
+        kind: external_exports.literal("startWithMessage"),
+        payload: RunStartWithMessageCommandPayloadSchema
+      }),
+      SessionDispatchCommandRecordBaseSchema.extend({
+        kind: external_exports.literal("message"),
+        payload: SessionDispatchMessageCommandPayloadSchema
+      }),
+      SessionDispatchCommandRecordBaseSchema.extend({
+        kind: external_exports.literal("answer"),
+        payload: SessionDispatchAnswerCommandPayloadSchema
+      }),
+      SessionDispatchCommandRecordBaseSchema.extend({
+        kind: external_exports.literal("stop"),
+        payload: SessionDispatchStopCommandPayloadSchema
+      })
+    ]);
   }
 });
 
-// ../../packages/schemas/src/realtime.ts
-var RunRealtimeEventSchema;
-var init_realtime = __esm({
-  "../../packages/schemas/src/realtime.ts"() {
-    "use strict";
-    init_conversation();
-    RunRealtimeEventSchema = ConversationRealtimeEventSchema;
-  }
-});
-
-// ../../packages/schemas/src/session-diagnostics.ts
-var SESSION_DIAGNOSTIC_REALTIME_EVENT, SESSION_DIAGNOSTIC_LEVELS, SESSION_DIAGNOSTIC_SOURCES, SESSION_DIAGNOSTIC_PHASES, SESSION_DIAGNOSTIC_STATUSES, SessionDiagnosticLevelSchema, SessionDiagnosticSourceSchema, SessionDiagnosticPhaseSchema, SessionDiagnosticStatusSchema, SessionDiagnosticEventSchema;
-var init_session_diagnostics = __esm({
-  "../../packages/schemas/src/session-diagnostics.ts"() {
+// ../../packages/schemas/src/sessions.ts
+function isSessionTerminalStatus(status) {
+  return SESSION_TERMINAL_STATUSES.some(
+    (terminalStatus) => terminalStatus === status
+  );
+}
+var SESSION_STATUSES, SESSION_RUNTIME_PHASES, SESSION_TERMINAL_STATUSES, SESSION_DISPLAY_TITLE_MAX_LENGTH, SESSION_MESSAGE_ROLES, SESSION_MESSAGE_STATUSES, SessionStatusSchema, SessionRuntimePhaseSchema, SessionMessageRoleSchema, SessionMessageStatusSchema, RunDisplayTitleSchema, AmbientStatusSchema, SESSION_CHECK_STATUSES, SESSION_CHECK_CONCLUSIONS, SESSION_CHECK_TIMEOUT_PHASES, SessionCheckStatusSchema, SessionCheckConclusionSchema, SessionCheckTimeoutPhaseSchema, ManualSessionRequestSchema, SessionArchiveRequestSchema, SessionsArchiveRequestSchema, SessionRecordSchema, SessionMessageOriginSchema, SessionUiMessageRecordSchema, SessionListItemAgentSchema, SessionListItemSchema, SessionListResponseSchema, SessionsArchiveResponseSchema;
+var init_sessions = __esm({
+  "../../packages/schemas/src/sessions.ts"() {
     "use strict";
     init_zod();
+    init_agents();
+    init_auth();
+    init_environments();
     init_ids();
     init_primitives();
-    SESSION_DIAGNOSTIC_REALTIME_EVENT = "session.diagnostic";
-    SESSION_DIAGNOSTIC_LEVELS = [
-      "debug",
-      "info",
-      "warn",
-      "error"
+    init_session_commands();
+    init_tools();
+    SESSION_STATUSES = [
+      "queued",
+      "running",
+      "awaiting",
+      "failed",
+      "stopped"
     ];
-    SESSION_DIAGNOSTIC_SOURCES = [
-      "web",
-      "worker",
-      "activity",
-      "bridge",
-      "runtime"
+    SESSION_RUNTIME_PHASES = [
+      "building_image",
+      "booting_container",
+      "preparing_environment",
+      "starting_runtime",
+      "running"
     ];
-    SESSION_DIAGNOSTIC_PHASES = [
-      "dispatch",
-      "environment",
-      "bridge",
-      "delivery",
-      "command",
-      "runtime"
+    SESSION_TERMINAL_STATUSES = ["failed", "stopped"];
+    SESSION_DISPLAY_TITLE_MAX_LENGTH = 64;
+    SESSION_MESSAGE_ROLES = ["system", "user", "assistant"];
+    SESSION_MESSAGE_STATUSES = [
+      "in_progress",
+      "completed",
+      "failed"
     ];
-    SESSION_DIAGNOSTIC_STATUSES = [
-      "started",
-      "succeeded",
-      "retrying",
-      "failed",
-      "skipped"
+    SessionStatusSchema = external_exports.enum(SESSION_STATUSES);
+    SessionRuntimePhaseSchema = external_exports.enum(SESSION_RUNTIME_PHASES);
+    SessionMessageRoleSchema = external_exports.enum(SESSION_MESSAGE_ROLES);
+    SessionMessageStatusSchema = external_exports.enum(SESSION_MESSAGE_STATUSES);
+    RunDisplayTitleSchema = external_exports.string().trim().max(SESSION_DISPLAY_TITLE_MAX_LENGTH);
+    AmbientStatusSchema = external_exports.string().trim().min(1);
+    SESSION_CHECK_STATUSES = [
+      "queued",
+      "in_progress",
+      "completed"
     ];
-    SessionDiagnosticLevelSchema = external_exports.enum(SESSION_DIAGNOSTIC_LEVELS);
-    SessionDiagnosticSourceSchema = external_exports.enum(SESSION_DIAGNOSTIC_SOURCES);
-    SessionDiagnosticPhaseSchema = external_exports.enum(SESSION_DIAGNOSTIC_PHASES);
-    SessionDiagnosticStatusSchema = external_exports.enum(
-      SESSION_DIAGNOSTIC_STATUSES
+    SESSION_CHECK_CONCLUSIONS = ["success", "failure"];
+    SESSION_CHECK_TIMEOUT_PHASES = ["begin", "complete"];
+    SessionCheckStatusSchema = external_exports.enum(SESSION_CHECK_STATUSES);
+    SessionCheckConclusionSchema = external_exports.enum(SESSION_CHECK_CONCLUSIONS);
+    SessionCheckTimeoutPhaseSchema = external_exports.enum(
+      SESSION_CHECK_TIMEOUT_PHASES
     );
-    SessionDiagnosticEventSchema = external_exports.object({
-      type: external_exports.literal(SESSION_DIAGNOSTIC_REALTIME_EVENT),
-      id: external_exports.string().min(1),
-      sessionId: SessionIdSchema,
-      level: SessionDiagnosticLevelSchema,
-      source: SessionDiagnosticSourceSchema,
-      phase: SessionDiagnosticPhaseSchema,
-      step: external_exports.string().trim().min(1),
-      status: SessionDiagnosticStatusSchema,
-      message: external_exports.string().trim().min(1),
-      commandId: SessionCommandIdSchema.optional(),
-      runtimeId: RuntimeIdSchema.optional(),
-      bridgeLeaseId: RuntimeBridgeLeaseIdSchema.optional(),
-      attempt: external_exports.number().int().nonnegative().optional(),
-      durationMs: external_exports.number().nonnegative().optional(),
-      details: external_exports.record(external_exports.string(), JsonValueSchema).optional(),
-      createdAt: external_exports.string().datetime()
+    ManualSessionRequestSchema = external_exports.object({
+      message: external_exports.string().trim().min(1).max(2e4).optional(),
+      interactive: external_exports.boolean().optional(),
+      /**
+       * Deliver the agent's configured `initialPrompt` as the session's kickoff
+       * message so the agent opens the conversation. Agents without an
+       * `initialPrompt` fall back to the default manual say-hello message, so a
+       * kickoff always pings the agent. The kickoff is delivered through the
+       * session's one idempotent start command and never renders as a user chat
+       * bubble; the agent's greeting is the first visible content.
+       */
+      kickoff: external_exports.boolean().optional()
+    });
+    SessionArchiveRequestSchema = external_exports.object({
+      archived: external_exports.boolean()
+    });
+    SessionsArchiveRequestSchema = external_exports.object({
+      session_ids: external_exports.array(SessionIdSchema).min(1).max(100),
+      archived: external_exports.boolean()
+    });
+    SessionRecordSchema = external_exports.object({
+      id: SessionIdSchema,
+      organizationId: external_exports.string().trim().min(1),
+      projectId: external_exports.string().trim().min(1).nullable(),
+      agentId: AgentIdSchema,
+      runtimeId: RuntimeIdSchema.nullable(),
+      status: SessionStatusSchema,
+      runtimePhase: SessionRuntimePhaseSchema.nullable(),
+      idempotencyKey: external_exports.string().min(1).nullable(),
+      correlationKey: external_exports.string().nullable(),
+      workflowId: external_exports.string().min(1),
+      displayTitle: RunDisplayTitleSchema,
+      ambientStatus: AmbientStatusSchema.nullable(),
+      ambientStatusUpdatedAt: external_exports.string().datetime().nullable(),
+      starterActor: AuthActorSchema.nullable(),
+      snapshot: AgentResourceSchema,
+      environmentSnapshot: EnvironmentResourceSchema,
+      toolSnapshots: external_exports.array(
+        external_exports.object({
+          source: external_exports.literal("inline"),
+          alias: ToolAliasSchema,
+          spec: RemoteMcpToolSchema.or(ConnectionBackedToolSchema).or(LocalToolSchema).or(GithubToolSchema)
+        })
+      ),
+      input: JsonValueSchema,
+      createdAt: external_exports.string().datetime(),
+      updatedAt: external_exports.string().datetime(),
+      lastActivityAt: external_exports.string().datetime(),
+      startedAt: external_exports.string().datetime().nullable(),
+      finishedAt: external_exports.string().datetime().nullable(),
+      archivedAt: external_exports.string().datetime().nullable(),
+      error: JsonValueSchema.nullable()
+    });
+    SessionMessageOriginSchema = external_exports.object({
+      eventKey: external_exports.string().trim().min(1),
+      provider: external_exports.string().trim().min(1).nullable().default(null)
+    });
+    SessionUiMessageRecordSchema = external_exports.object({
+      id: external_exports.string().trim().min(1),
+      sessionId: SessionIdSchema,
+      sequence: external_exports.number().int().nonnegative(),
+      messageId: external_exports.string().trim().min(1),
+      commandId: external_exports.string().trim().min(1).nullable(),
+      turnId: external_exports.string().trim().min(1).nullable(),
+      role: SessionMessageRoleSchema,
+      status: SessionMessageStatusSchema,
+      message: JsonValueSchema,
+      // The sender of the command that carried this message into the session
+      // (operator chat send, trigger delivery, or another agent's session), joined
+      // from session_commands at read time. Null for messages that did not arrive
+      // through a command, such as assistant output.
+      sender: SessionCommandSenderSchema.nullable().default(null),
+      // For trigger deliveries, the routed event behind the carrying command:
+      // its event key plus the originating provider connection when known
+      // (e.g. "slack" for a subscribed-thread reply, "github" for a check event).
+      origin: SessionMessageOriginSchema.nullable().default(null),
+      streamCursor: external_exports.number().int().positive().nullable().default(null),
+      createdAt: external_exports.string().datetime(),
+      updatedAt: external_exports.string().datetime(),
+      completedAt: external_exports.string().datetime().nullable()
+    });
+    SessionListItemAgentSchema = external_exports.object({
+      name: external_exports.string(),
+      displayName: external_exports.string().nullable(),
+      username: external_exports.string().nullable(),
+      avatarSha256: external_exports.string().nullable()
+    });
+    SessionListItemSchema = external_exports.object({
+      id: SessionIdSchema,
+      agentId: AgentIdSchema,
+      status: SessionStatusSchema,
+      runtimePhase: SessionRuntimePhaseSchema.nullable(),
+      displayTitle: RunDisplayTitleSchema,
+      summary: external_exports.string(),
+      agent: SessionListItemAgentSchema,
+      createdAt: external_exports.string().datetime(),
+      updatedAt: external_exports.string().datetime(),
+      archivedAt: external_exports.string().datetime().nullable(),
+      lastActivityAt: external_exports.string().datetime()
+    });
+    SessionListResponseSchema = external_exports.object({
+      sessions: external_exports.array(SessionListItemSchema),
+      /**
+       * Opaque keyset cursor for the next page, or `null` when the list is
+       * exhausted. Replay it on the next request to append the following page; it is
+       * minted for a specific sort and rejected against a different one.
+       */
+      nextCursor: external_exports.string().nullable(),
+      hasMore: external_exports.boolean()
+    });
+    SessionsArchiveResponseSchema = external_exports.object({
+      archived: external_exports.boolean(),
+      sessions: external_exports.array(SessionRecordSchema)
     });
   }
 });
 
-// ../../packages/schemas/src/singleton-refresh.ts
-var SINGLETON_RESPAWN_REASONS, SingletonRespawnReasonSchema, SingletonRespawnSchema, SingletonRefreshEventPayloadSchema;
-var init_singleton_refresh = __esm({
-  "../../packages/schemas/src/singleton-refresh.ts"() {
+// ../../packages/schemas/src/live-events.ts
+var LiveEntityEventEnvelopeSchema;
+var init_live_events = __esm({
+  "../../packages/schemas/src/live-events.ts"() {
     "use strict";
     init_zod();
-    SINGLETON_RESPAWN_REASONS = ["refresh", "failure"];
-    SingletonRespawnReasonSchema = external_exports.enum(SINGLETON_RESPAWN_REASONS);
-    SingletonRespawnSchema = external_exports.object({
-      reason: SingletonRespawnReasonSchema.default("refresh")
-    }).strict();
-    SingletonRefreshEventPayloadSchema = external_exports.object({
-      trigger: external_exports.literal("agent.refresh"),
-      refresh: external_exports.object({
-        reason: SingletonRespawnReasonSchema,
-        agentResourceId: external_exports.string().trim().min(1),
-        previousSessionId: external_exports.string().trim().min(1)
+    init_primitives();
+    init_sessions();
+    LiveEntityEventEnvelopeSchema = external_exports.object({
+      // Replay cursor for this frame; the SSE `id:` mirrors it so reconnects resume
+      // from `sequence > cursor`.
+      sequence: external_exports.number().int().nonnegative(),
+      eventKey: external_exports.string().min(1),
+      // The event's `subjectKind`, surfaced as `entity` for client-side dispatch.
+      entity: external_exports.string().min(1),
+      subjectId: external_exports.string().min(1),
+      payload: JsonValueSchema,
+      occurredAt: external_exports.string().min(1)
+    });
+  }
+});
+
+// ../../packages/schemas/src/mcp.ts
+var McpToolCallMessageSchema, McpJsonRpcMessageSchema, McpPostBodySchema;
+var init_mcp = __esm({
+  "../../packages/schemas/src/mcp.ts"() {
+    "use strict";
+    init_zod();
+    McpToolCallMessageSchema = external_exports.object({
+      method: external_exports.literal("tools/call"),
+      params: external_exports.object({
+        name: external_exports.string().trim().min(1)
       })
     });
+    McpJsonRpcMessageSchema = external_exports.object({
+      method: external_exports.string().optional()
+    }).passthrough();
+    McpPostBodySchema = external_exports.union([McpJsonRpcMessageSchema, external_exports.array(McpJsonRpcMessageSchema)]).transform((body) => Array.isArray(body) ? body : [body]);
   }
 });
 
-// ../../packages/schemas/src/session-commands.ts
-var SESSION_COMMAND_KINDS, SESSION_DISPATCH_COMMAND_KINDS, SESSION_PERSISTED_COMMAND_KINDS, SESSION_LIFECYCLE_COMMAND_KINDS, SESSION_COMMAND_STATUSES, SESSION_DISPATCH_COMMAND_STATUSES, SessionCommandKindSchema, SessionPersistedCommandKindSchema, SessionDispatchCommandKindSchema, RunLifecycleCommandKindSchema, SessionCommandStatusSchema, SessionDispatchCommandStatusSchema, SessionCommandSenderSchema, MESSAGE_DELIVERY_MODES, MessageDeliveryModeSchema, TRIGGER_INJECTION_MODALITIES, TriggerInjectionModalitySchema, RunMessageCommandPayloadSchema, RunAnswerCommandPayloadSchema, RunLifecycleCommandPayloadSchema, RunStopCommandPayloadSchema, SessionCommandPayloadSchema, CreateRunMessageCommandRequestSchema, CreateRunAnswerCommandRequestSchema, CreateRunLifecycleCommandRequestSchema, CreateRunStopCommandRequestSchema, CreateSessionCommandRequestSchema, RunResolutionPolicySchema, AgentAddressedCommandTargetSchema, SessionCommandRecordBaseSchema, RunStartCommandPayloadSchema, RunStartWithMessageCommandPayloadSchema, SessionPersistedCommandPayloadSchema, SessionCommandRecordSchema, SessionDispatchMessageCommandPayloadSchema, SessionDispatchAnswerCommandPayloadSchema, SessionDispatchStopCommandPayloadSchema, SessionDispatchCommandPayloadSchema, SessionDispatchCommandRecordBaseSchema, SessionDispatchCommandRecordSchema;
-var init_session_commands = __esm({
-  "../../packages/schemas/src/session-commands.ts"() {
+// ../../packages/schemas/src/pricing.ts
+function tier(inputUsdPerMtok, outputUsdPerMtok) {
+  return {
+    inputUsdPerMtok,
+    outputUsdPerMtok,
+    cacheWrite5mUsdPerMtok: inputUsdPerMtok * 1.25,
+    cacheReadUsdPerMtok: inputUsdPerMtok * 0.1
+  };
+}
+function opusTier() {
+  return tier(5, 25);
+}
+function openAiTier(rates) {
+  return {
+    inputUsdPerMtok: rates.input,
+    outputUsdPerMtok: rates.output,
+    cacheWrite5mUsdPerMtok: rates.input,
+    cacheReadUsdPerMtok: rates.cachedInput
+  };
+}
+var RATE_CARD_2026_06_23, PRICING_RATE_CARDS, CURRENT_PRICING_VERSION;
+var init_pricing = __esm({
+  "../../packages/schemas/src/pricing.ts"() {
+    "use strict";
+    RATE_CARD_2026_06_23 = {
+      version: "2026-06-23",
+      effectiveAt: "2026-06-23T00:00:00.000Z",
+      models: {
+        "claude-opus-4-8": opusTier(),
+        "claude-opus-4-7": opusTier(),
+        "claude-opus-4-6": opusTier(),
+        "claude-sonnet-4-6": tier(3, 15),
+        "claude-haiku-4-5": tier(1, 5),
+        "claude-haiku-4-5-20251001": tier(1, 5),
+        "claude-fable-5": tier(10, 50),
+        // OpenAI gpt-5.3-codex, standard tier: input $1.75/Mtok, cached input
+        // $0.175/Mtok, output $14.00/Mtok. Source (verified 2026-06-23):
+        // https://developers.openai.com/api/docs/models/gpt-5.3-codex and
+        // https://developers.openai.com/api/docs/pricing (priority tier is 2x; we
+        // bill standard).
+        "gpt-5.3-codex": openAiTier({
+          input: 1.75,
+          cachedInput: 0.175,
+          output: 14
+        })
+      }
+    };
+    PRICING_RATE_CARDS = {
+      [RATE_CARD_2026_06_23.version]: RATE_CARD_2026_06_23
+    };
+    CURRENT_PRICING_VERSION = RATE_CARD_2026_06_23.version;
+  }
+});
+
+// ../../packages/schemas/src/project-service-accounts.ts
+var ProjectServiceAccountSchema, ProjectServiceAccountCreateRequestSchema, ProjectServiceAccountUpdateRequestSchema, ProjectServiceAccountTokenResponseSchema, ProjectServiceAccountUpdateResponseSchema, ProjectServiceAccountRemoveResponseSchema, ProjectServiceAccountListResponseSchema;
+var init_project_service_accounts = __esm({
+  "../../packages/schemas/src/project-service-accounts.ts"() {
     "use strict";
     init_zod();
     init_auth();
     init_ids();
-    init_primitives();
-    init_singleton_refresh();
-    SESSION_COMMAND_KINDS = [
-      "message",
-      "answer",
-      "pause",
-      "resume",
-      "interrupt",
-      "cancel",
-      "stop"
-    ];
-    SESSION_DISPATCH_COMMAND_KINDS = [
-      "start",
-      "startWithMessage",
-      "message",
-      "answer",
-      "stop"
-    ];
-    SESSION_PERSISTED_COMMAND_KINDS = [
-      "message",
-      "pause",
-      "resume",
-      "interrupt",
-      "cancel",
-      "stop",
-      "start",
-      "startWithMessage",
-      "answer"
-    ];
-    SESSION_LIFECYCLE_COMMAND_KINDS = [
-      "pause",
-      "resume",
-      "interrupt",
-      "cancel",
-      "stop"
-    ];
-    SESSION_COMMAND_STATUSES = [
-      "pending",
-      "dispatching",
-      "accepted",
-      "failed"
-    ];
-    SESSION_DISPATCH_COMMAND_STATUSES = [
-      "pending",
-      "dispatching",
-      "accepted",
-      "failed"
-    ];
-    SessionCommandKindSchema = external_exports.enum(SESSION_COMMAND_KINDS);
-    SessionPersistedCommandKindSchema = external_exports.enum(
-      SESSION_PERSISTED_COMMAND_KINDS
-    );
-    SessionDispatchCommandKindSchema = external_exports.enum(
-      SESSION_DISPATCH_COMMAND_KINDS
+    init_resources();
+    ProjectServiceAccountSchema = external_exports.object({
+      id: ServiceAccountIdSchema,
+      organizationId: OrganizationIdSchema,
+      projectId: ProjectIdSchema,
+      name: ResourceNameSchema,
+      scopes: external_exports.array(AuthScopeSchema),
+      createdAt: external_exports.string().datetime()
+    });
+    ProjectServiceAccountCreateRequestSchema = external_exports.object({
+      name: ResourceNameSchema,
+      scopes: external_exports.array(AuthScopeSchema).min(1)
+    });
+    ProjectServiceAccountUpdateRequestSchema = external_exports.object({
+      scopes: external_exports.array(AuthScopeSchema).min(1)
+    });
+    ProjectServiceAccountTokenResponseSchema = external_exports.object({
+      serviceAccount: ProjectServiceAccountSchema,
+      token: external_exports.string().min(1)
+    });
+    ProjectServiceAccountUpdateResponseSchema = external_exports.object({
+      serviceAccount: ProjectServiceAccountSchema
+    });
+    ProjectServiceAccountRemoveResponseSchema = external_exports.object({
+      serviceAccount: ProjectServiceAccountSchema,
+      removed: external_exports.literal(true)
+    });
+    ProjectServiceAccountListResponseSchema = external_exports.object({
+      serviceAccounts: external_exports.array(ProjectServiceAccountSchema)
+    });
+  }
+});
+
+// ../../packages/schemas/src/project-resources.ts
+function projectApplyBundleStorageKey(sha256) {
+  return `project-apply-bundles/${sha256}.json`;
+}
+var EnvironmentApplyDocumentSchema, IdentityApplyDocumentSchema, AgentApplyDocumentSchema, ProjectApplyResourceSchema, PROJECT_RESOURCE_APPLY_ORDER, PROJECT_RESOURCE_KINDS, PROJECT_APPLY_RESOURCE_KINDS, PROJECT_APPLY_BUNDLE_VERSION, MAX_PROJECT_APPLY_BUNDLE_BYTES, PROJECT_APPLY_BUNDLE_CONTENT_TYPE, ProjectDeleteResourceBaseSchema, ProjectDeleteResourceSchema, AVATAR_ASSET_CONTENT_TYPES, MAX_AVATAR_ASSET_BASE64_LENGTH, ProjectApplyAssetSchema, ProjectApplyAssetsSchema, AvatarAssetUploadResponseSchema, ApplyBundlePathSchema, ProjectApplyBundleFileSchema, ProjectApplyBundleSchema, ProjectApplyBundleRefSchema, ProjectApplyBundleUploadRequestSchema, ProjectApplyBundleUploadResponseSchema, ProjectApplyBundleDirectoryEntrypointSchema, ProjectApplyBundleFileEntrypointSchema, ProjectApplyBundleEntrypointSchema, ProjectApplySourceSchema, ProjectApplySourceRequestSchema, ProjectApplyRequestSchema, ProjectApplySystemConfigSchema, ProjectAppliedResourceSchema, ProjectApplyDiagnosticSchema, ProjectApplyResponsePrunedSchema, ProjectApplyPlanDiffSchema, ProjectApplyResponseSchema, ProjectResourceApplyResultSchema, ProjectResourceApplyAuditActionSchema, ProjectResourceApplyOperationIdSchema, ProjectResourceApplyTriggerArtifactSchema, ProjectResourceApplyWorkflowErrorSchema, ProjectResourceApplyWorkflowInputSchema, ProjectResourceApplyWorkflowResultSchema;
+var init_project_resources = __esm({
+  "../../packages/schemas/src/project-resources.ts"() {
+    "use strict";
+    init_zod();
+    init_agents();
+    init_auth();
+    init_connections();
+    init_environments();
+    init_identities();
+    init_ids();
+    init_primitives();
+    init_resources();
+    init_trigger_router();
+    EnvironmentApplyDocumentSchema = resourceApplyDocumentSchema(
+      RESOURCE_KIND_ENVIRONMENT,
+      EnvironmentApplyRequestSchema.shape.spec
     );
-    RunLifecycleCommandKindSchema = external_exports.enum(
-      SESSION_LIFECYCLE_COMMAND_KINDS
+    IdentityApplyDocumentSchema = resourceApplyDocumentSchema(
+      RESOURCE_KIND_IDENTITY,
+      IdentityApplyRequestSchema.shape.spec
     );
-    SessionCommandStatusSchema = external_exports.enum(SESSION_COMMAND_STATUSES);
-    SessionDispatchCommandStatusSchema = external_exports.enum(
-      SESSION_DISPATCH_COMMAND_STATUSES
+    AgentApplyDocumentSchema = resourceApplyDocumentSchema(
+      RESOURCE_KIND_AGENT,
+      AgentApplyRequestSchema.shape.spec
     );
-    SessionCommandSenderSchema = external_exports.discriminatedUnion("type", [
-      external_exports.object({
-        type: external_exports.literal("operator"),
-        id: external_exports.string().trim().min(1).nullable().default(null),
-        actor: AuthActorSchema.nullable().optional()
-      }),
-      external_exports.object({
-        type: external_exports.literal("agent"),
-        sessionId: SessionIdSchema
-      }),
-      external_exports.object({
-        type: external_exports.literal("system")
-      })
+    ProjectApplyResourceSchema = external_exports.discriminatedUnion("kind", [
+      EnvironmentApplyDocumentSchema,
+      IdentityApplyDocumentSchema,
+      AgentApplyDocumentSchema
     ]);
-    MESSAGE_DELIVERY_MODES = ["interrupt", "deferred"];
-    MessageDeliveryModeSchema = external_exports.enum(MESSAGE_DELIVERY_MODES);
-    TRIGGER_INJECTION_MODALITIES = [
-      "chat",
-      "githubCheck",
-      "githubCheckAction",
-      "githubPullRequest",
-      "other"
+    PROJECT_RESOURCE_APPLY_ORDER = [
+      RESOURCE_KIND_CONNECTION,
+      RESOURCE_KIND_IDENTITY,
+      RESOURCE_KIND_ENVIRONMENT,
+      RESOURCE_KIND_AGENT
     ];
-    TriggerInjectionModalitySchema = external_exports.enum(
-      TRIGGER_INJECTION_MODALITIES
+    PROJECT_RESOURCE_KINDS = PROJECT_RESOURCE_APPLY_ORDER;
+    PROJECT_APPLY_RESOURCE_KINDS = [
+      RESOURCE_KIND_IDENTITY,
+      RESOURCE_KIND_ENVIRONMENT,
+      RESOURCE_KIND_AGENT
+    ];
+    PROJECT_APPLY_BUNDLE_VERSION = 1;
+    MAX_PROJECT_APPLY_BUNDLE_BYTES = 64 * 1024 * 1024;
+    PROJECT_APPLY_BUNDLE_CONTENT_TYPE = "application/vnd.auto.project-apply-bundle+json";
+    ProjectDeleteResourceBaseSchema = external_exports.object({
+      name: external_exports.string().trim().min(1)
+    });
+    ProjectDeleteResourceSchema = ProjectDeleteResourceBaseSchema.extend({
+      kind: external_exports.enum(PROJECT_APPLY_RESOURCE_KINDS)
+    });
+    AVATAR_ASSET_CONTENT_TYPES = ["image/png", "image/jpeg"];
+    MAX_AVATAR_ASSET_BASE64_LENGTH = Math.ceil(MAX_AVATAR_ASSET_BYTES / 3) * 4 + 4;
+    ProjectApplyAssetSchema = external_exports.object({
+      sha256: external_exports.string().regex(/^[a-f0-9]{64}$/),
+      contentType: external_exports.enum(AVATAR_ASSET_CONTENT_TYPES),
+      dataBase64: external_exports.string().min(1).max(MAX_AVATAR_ASSET_BASE64_LENGTH).regex(/^[A-Za-z0-9+/]+={0,2}$/)
+    });
+    ProjectApplyAssetsSchema = external_exports.record(
+      external_exports.string().refine(isAvatarAssetPathShapeValid, {
+        message: "asset keys must be relative paths under .auto/assets"
+      }),
+      ProjectApplyAssetSchema
     );
-    RunMessageCommandPayloadSchema = external_exports.object({
-      message: external_exports.string().trim().min(1),
-      // Optional so existing payloads and direct operator/agent messages stay
-      // valid without it; trigger routing sets "deferred" for GitHub check
-      // events. An absent mode is treated as "interrupt" at the delivery
-      // boundary (commandDeliveryPayload / the runtime handler), so the default
-      // lives where the value is consumed rather than as a required field every
-      // call site must construct.
-      deliveryMode: MessageDeliveryModeSchema.optional(),
-      metadata: JsonValueSchema.optional()
-    }).strict();
-    RunAnswerCommandPayloadSchema = external_exports.object({
-      toolCallId: external_exports.string().trim().min(1),
-      answers: external_exports.record(external_exports.string(), external_exports.string()),
-      response: external_exports.string().trim().min(1).optional()
-    }).strict().refine((value) => Object.keys(value.answers).length > 0 || value.response, {
-      message: "Provide at least one answer or a freeform response"
+    AvatarAssetUploadResponseSchema = external_exports.object({
+      sha256: external_exports.string().regex(/^[a-f0-9]{64}$/),
+      contentType: external_exports.enum(AVATAR_ASSET_CONTENT_TYPES),
+      sizeBytes: external_exports.number().int().positive()
     });
-    RunLifecycleCommandPayloadSchema = external_exports.object({
-      reason: external_exports.string().trim().min(1).optional()
-    }).strict();
-    RunStopCommandPayloadSchema = external_exports.object({
-      reason: external_exports.string().trim().min(1).optional(),
-      respawn: SingletonRespawnSchema.optional()
-    }).strict();
-    SessionCommandPayloadSchema = external_exports.union([
-      RunMessageCommandPayloadSchema,
-      RunAnswerCommandPayloadSchema,
-      RunLifecycleCommandPayloadSchema,
-      RunStopCommandPayloadSchema
+    ApplyBundlePathSchema = external_exports.string().trim().min(1).max(4096).refine((path2) => !path2.startsWith("/") && !path2.includes("\0"), {
+      message: "apply bundle paths must be relative paths"
+    });
+    ProjectApplyBundleFileSchema = external_exports.object({
+      path: ApplyBundlePathSchema,
+      contentBase64: external_exports.string().regex(/^[A-Za-z0-9+/]*={0,2}$/)
+    });
+    ProjectApplyBundleSchema = external_exports.object({
+      version: external_exports.literal(PROJECT_APPLY_BUNDLE_VERSION),
+      files: external_exports.array(ProjectApplyBundleFileSchema).max(2e4)
+    });
+    ProjectApplyBundleRefSchema = external_exports.object({
+      kind: external_exports.literal("vercel_blob"),
+      storageKey: external_exports.string().trim().min(1).max(1024),
+      sha256: external_exports.string().regex(SHA256_HEX_PATTERN),
+      sizeBytes: external_exports.number().int().positive().max(MAX_PROJECT_APPLY_BUNDLE_BYTES)
+    }).superRefine((ref, context) => {
+      const expectedStorageKey = projectApplyBundleStorageKey(ref.sha256);
+      if (ref.storageKey === expectedStorageKey) {
+        return;
+      }
+      context.addIssue({
+        code: "custom",
+        path: ["storageKey"],
+        message: "apply bundle storage key must match its sha256"
+      });
+    });
+    ProjectApplyBundleUploadRequestSchema = external_exports.object({
+      sha256: external_exports.string().regex(SHA256_HEX_PATTERN),
+      sizeBytes: external_exports.number().int().positive().max(MAX_PROJECT_APPLY_BUNDLE_BYTES)
+    });
+    ProjectApplyBundleUploadResponseSchema = external_exports.object({
+      method: external_exports.literal("PUT"),
+      uploadUrl: external_exports.string().url(),
+      contentType: external_exports.literal(PROJECT_APPLY_BUNDLE_CONTENT_TYPE),
+      source: ProjectApplyBundleRefSchema
+    });
+    ProjectApplyBundleDirectoryEntrypointSchema = external_exports.object({
+      kind: external_exports.literal("directory"),
+      resourceRoot: ApplyBundlePathSchema.default(".auto"),
+      displayResourceRoot: external_exports.string().trim().min(1).max(4096).optional()
+    });
+    ProjectApplyBundleFileEntrypointSchema = external_exports.object({
+      kind: external_exports.literal("file"),
+      filePath: ApplyBundlePathSchema
+    });
+    ProjectApplyBundleEntrypointSchema = external_exports.discriminatedUnion("kind", [
+      ProjectApplyBundleDirectoryEntrypointSchema,
+      ProjectApplyBundleFileEntrypointSchema
     ]);
-    CreateRunMessageCommandRequestSchema = external_exports.object({
-      message: external_exports.string().trim().min(1),
-      metadata: JsonValueSchema.optional()
+    ProjectApplySourceSchema = external_exports.object({
+      kind: external_exports.literal("bundle"),
+      bundle: ProjectApplyBundleRefSchema,
+      entrypoint: ProjectApplyBundleEntrypointSchema
+    });
+    ProjectApplySourceRequestSchema = external_exports.object({
+      source: ProjectApplySourceSchema,
+      delete: external_exports.array(ProjectDeleteResourceSchema).default([]),
+      dryRun: external_exports.boolean().default(false),
+      prune: external_exports.boolean().default(true)
+    });
+    ProjectApplyRequestSchema = external_exports.object({
+      delete: external_exports.array(ProjectDeleteResourceSchema).default([]),
+      dryRun: external_exports.boolean().default(false),
+      prune: external_exports.boolean().default(false),
+      resources: external_exports.array(ProjectApplyResourceSchema).default([]),
+      assets: ProjectApplyAssetsSchema.default({})
+    });
+    ProjectApplySystemConfigSchema = external_exports.object({
+      kind: external_exports.literal("system"),
+      metadata: external_exports.object({
+        name: external_exports.string().trim().min(1).optional()
+      }).optional(),
+      spec: ProjectApplyRequestSchema
+    });
+    ProjectAppliedResourceSchema = external_exports.union([
+      ProjectConnectionAllocationResourceSchema,
+      EnvironmentResourceSchema,
+      IdentityResourceSchema,
+      AgentResourceSchema
+    ]);
+    ProjectApplyDiagnosticSchema = external_exports.object({
+      // "info" is a non-blocking advisory (e.g. template-push capability/override
+      // notices); "error" remains the validation-failure severity. Coordinated
+      // shape with the optional-connection-gating work; whoever lands second rebases.
+      severity: external_exports.enum(["error", "info"]),
+      blocking: external_exports.boolean(),
+      code: external_exports.string().min(1),
+      message: external_exports.string().min(1),
+      action: external_exports.enum(["create", "update", "unchanged"]),
+      kind: external_exports.enum([
+        RESOURCE_KIND_CONNECTION,
+        RESOURCE_KIND_ENVIRONMENT,
+        RESOURCE_KIND_IDENTITY,
+        RESOURCE_KIND_AGENT
+      ]),
+      name: external_exports.string().min(1)
     });
-    CreateRunAnswerCommandRequestSchema = RunAnswerCommandPayloadSchema;
-    CreateRunLifecycleCommandRequestSchema = external_exports.object({
-      reason: external_exports.string().trim().min(1).optional()
+    ProjectApplyResponsePrunedSchema = external_exports.object({
+      kind: external_exports.enum(PROJECT_RESOURCE_KINDS),
+      name: external_exports.string().min(1),
+      uid: external_exports.string().min(1),
+      heartbeatScheduleIds: external_exports.array(external_exports.string().min(1)).optional()
     });
-    CreateRunStopCommandRequestSchema = external_exports.object({
-      reason: external_exports.string().trim().min(1).optional(),
-      respawn: SingletonRespawnSchema.optional()
+    ProjectApplyPlanDiffSchema = external_exports.object({
+      action: external_exports.enum(["add", "remove", "change"]),
+      path: external_exports.string().min(1)
     });
-    CreateSessionCommandRequestSchema = external_exports.discriminatedUnion("kind", [
-      external_exports.object({
-        kind: external_exports.literal("message"),
-        payload: CreateRunMessageCommandRequestSchema
-      }).strict(),
-      external_exports.object({
-        kind: external_exports.literal("answer"),
-        payload: CreateRunAnswerCommandRequestSchema
-      }).strict(),
-      external_exports.object({
-        kind: external_exports.literal("pause"),
-        payload: CreateRunLifecycleCommandRequestSchema
-      }).strict(),
-      external_exports.object({
-        kind: external_exports.literal("resume"),
-        payload: CreateRunLifecycleCommandRequestSchema
-      }).strict(),
-      external_exports.object({
-        kind: external_exports.literal("interrupt"),
-        payload: CreateRunLifecycleCommandRequestSchema
-      }).strict(),
-      external_exports.object({
-        kind: external_exports.literal("cancel"),
-        payload: CreateRunLifecycleCommandRequestSchema
-      }).strict(),
-      external_exports.object({
-        kind: external_exports.literal("stop"),
-        payload: CreateRunStopCommandRequestSchema
-      }).strict()
-    ]);
-    RunResolutionPolicySchema = external_exports.enum([
-      "singletonLiveRun",
-      "latestLiveRun",
-      "latestRun"
-    ]);
-    AgentAddressedCommandTargetSchema = external_exports.object({
-      agentId: AgentIdSchema.optional(),
-      agentName: external_exports.string().trim().min(1).optional(),
-      resolutionPolicy: RunResolutionPolicySchema
-    }).refine((value) => Boolean(value.agentId) !== Boolean(value.agentName), {
-      message: "Provide exactly one of agentId or agentName"
+    ProjectApplyResponseSchema = external_exports.object({
+      dryRun: external_exports.boolean().default(false),
+      resources: external_exports.array(ProjectAppliedResourceSchema),
+      triggers: external_exports.array(ApplyTriggerReceiptSchema).default([]),
+      diagnostics: external_exports.array(ProjectApplyDiagnosticSchema).default([]),
+      plan: external_exports.array(
+        external_exports.object({
+          action: external_exports.enum(["create", "update", "unchanged", "archive"]),
+          kind: external_exports.enum(PROJECT_RESOURCE_KINDS),
+          name: external_exports.string().min(1),
+          uid: external_exports.string().min(1).optional(),
+          diff: external_exports.array(ProjectApplyPlanDiffSchema).optional(),
+          diffOmitted: external_exports.number().int().positive().optional()
+        })
+      ).default([]),
+      pruned: external_exports.array(ProjectApplyResponsePrunedSchema).default([])
     });
-    SessionCommandRecordBaseSchema = external_exports.object({
-      id: SessionCommandIdSchema,
-      sessionId: SessionIdSchema,
-      sender: SessionCommandSenderSchema,
-      idempotencyKey: external_exports.string().min(1).nullable(),
-      status: SessionCommandStatusSchema,
-      attemptCount: external_exports.number().int().nonnegative(),
-      nextAttemptAt: external_exports.string().datetime().nullable(),
-      lastAttemptAt: external_exports.string().datetime().nullable(),
-      acceptedAt: external_exports.string().datetime().nullable(),
-      failedAt: external_exports.string().datetime().nullable(),
-      error: JsonValueSchema.nullable(),
-      createdAt: external_exports.string().datetime(),
-      updatedAt: external_exports.string().datetime()
+    ProjectResourceApplyResultSchema = ProjectApplyResponseSchema.extend({
+      heartbeatSchedules: external_exports.array(
+        external_exports.object({
+          scheduleId: external_exports.string().trim().min(1),
+          cron: external_exports.string().trim().min(1),
+          timezone: external_exports.string().trim().min(1),
+          input: HeartbeatTickWorkflowInputSchema
+        })
+      ).default([]),
+      deletedHeartbeatScheduleIds: external_exports.array(external_exports.string().trim().min(1)).default([])
     });
-    RunStartCommandPayloadSchema = external_exports.object({
-      kind: external_exports.literal("start")
-    }).strict();
-    RunStartWithMessageCommandPayloadSchema = external_exports.object({
-      kind: external_exports.literal("startWithMessage"),
-      message: external_exports.string().trim().min(1)
-    }).strict();
-    SessionPersistedCommandPayloadSchema = external_exports.union([
-      RunMessageCommandPayloadSchema,
-      RunAnswerCommandPayloadSchema,
-      RunLifecycleCommandPayloadSchema,
-      RunStopCommandPayloadSchema,
-      RunStartCommandPayloadSchema,
-      RunStartWithMessageCommandPayloadSchema
-    ]);
-    SessionCommandRecordSchema = external_exports.discriminatedUnion("kind", [
-      SessionCommandRecordBaseSchema.extend({
-        kind: external_exports.literal("message"),
-        payload: RunMessageCommandPayloadSchema
-      }),
-      SessionCommandRecordBaseSchema.extend({
-        kind: external_exports.literal("answer"),
-        payload: RunAnswerCommandPayloadSchema
-      }),
-      SessionCommandRecordBaseSchema.extend({
-        kind: external_exports.literal("pause"),
-        payload: RunLifecycleCommandPayloadSchema
-      }),
-      SessionCommandRecordBaseSchema.extend({
-        kind: external_exports.literal("resume"),
-        payload: RunLifecycleCommandPayloadSchema
-      }),
-      SessionCommandRecordBaseSchema.extend({
-        kind: external_exports.literal("interrupt"),
-        payload: RunLifecycleCommandPayloadSchema
-      }),
-      SessionCommandRecordBaseSchema.extend({
-        kind: external_exports.literal("cancel"),
-        payload: RunLifecycleCommandPayloadSchema
-      }),
-      SessionCommandRecordBaseSchema.extend({
-        kind: external_exports.literal("stop"),
-        payload: RunStopCommandPayloadSchema
-      }),
-      SessionCommandRecordBaseSchema.extend({
-        kind: external_exports.literal("start"),
-        payload: RunStartCommandPayloadSchema
-      }),
-      SessionCommandRecordBaseSchema.extend({
-        kind: external_exports.literal("startWithMessage"),
-        payload: RunStartWithMessageCommandPayloadSchema
-      })
+    ProjectResourceApplyAuditActionSchema = external_exports.enum([
+      "project_resources.apply",
+      "github_sync.apply"
     ]);
-    SessionDispatchMessageCommandPayloadSchema = external_exports.object({
-      kind: external_exports.literal("message"),
-      message: external_exports.string().trim().min(1)
-    }).strict();
-    SessionDispatchAnswerCommandPayloadSchema = external_exports.object({
-      kind: external_exports.literal("answer"),
-      toolCallId: external_exports.string().trim().min(1),
-      answers: external_exports.record(external_exports.string(), external_exports.string()),
-      response: external_exports.string().trim().min(1).optional()
-    }).strict();
-    SessionDispatchStopCommandPayloadSchema = external_exports.object({
-      kind: external_exports.literal("stop"),
-      reason: external_exports.string().trim().min(1).optional()
+    ProjectResourceApplyOperationIdSchema = external_exports.string().trim().min(1).max(512);
+    ProjectResourceApplyTriggerArtifactSchema = external_exports.object({
+      type: external_exports.string().trim().min(1),
+      externalId: external_exports.string().trim().min(1),
+      payload: JsonValueSchema.optional()
     }).strict();
-    SessionDispatchCommandPayloadSchema = external_exports.discriminatedUnion(
-      "kind",
+    ProjectResourceApplyWorkflowErrorSchema = external_exports.object({
+      name: external_exports.string().trim().min(1),
+      message: external_exports.string().trim().min(1)
+    });
+    ProjectResourceApplyWorkflowInputSchema = external_exports.object({
+      operationId: ProjectResourceApplyOperationIdSchema,
+      request: ProjectApplyRequestSchema.optional(),
+      sourceRequest: ProjectApplySourceRequestSchema.optional(),
+      organizationId: OrganizationIdSchema,
+      projectId: ProjectIdSchema.nullable().optional(),
+      actor: AuthActorSchema,
+      auditAction: ProjectResourceApplyAuditActionSchema,
+      triggerArtifact: ProjectResourceApplyTriggerArtifactSchema.optional()
+    }).superRefine((input, context) => {
+      if ((input.request ? 1 : 0) + (input.sourceRequest ? 1 : 0) !== 1) {
+        context.addIssue({
+          code: "custom",
+          path: ["request"],
+          message: "exactly one of request or sourceRequest is required"
+        });
+      }
+    });
+    ProjectResourceApplyWorkflowResultSchema = external_exports.discriminatedUnion(
+      "status",
       [
-        RunStartCommandPayloadSchema,
-        RunStartWithMessageCommandPayloadSchema,
-        SessionDispatchMessageCommandPayloadSchema,
-        SessionDispatchAnswerCommandPayloadSchema,
-        SessionDispatchStopCommandPayloadSchema
+        external_exports.object({
+          status: external_exports.literal("applied"),
+          result: ProjectResourceApplyResultSchema
+        }),
+        external_exports.object({
+          status: external_exports.literal("failed"),
+          error: ProjectResourceApplyWorkflowErrorSchema
+        })
       ]
     );
-    SessionDispatchCommandRecordBaseSchema = external_exports.object({
-      id: SessionCommandIdSchema,
-      sessionId: SessionIdSchema,
-      sender: SessionCommandSenderSchema,
-      idempotencyKey: external_exports.string().min(1).nullable(),
-      status: SessionDispatchCommandStatusSchema,
-      attemptCount: external_exports.number().int().nonnegative(),
-      nextAttemptAt: external_exports.string().datetime().nullable(),
-      lastAttemptAt: external_exports.string().datetime().nullable(),
-      acceptedAt: external_exports.string().datetime().nullable(),
-      failedAt: external_exports.string().datetime().nullable(),
-      error: JsonValueSchema.nullable(),
-      createdAt: external_exports.string().datetime(),
-      updatedAt: external_exports.string().datetime()
-    });
-    SessionDispatchCommandRecordSchema = external_exports.discriminatedUnion("kind", [
-      SessionDispatchCommandRecordBaseSchema.extend({
-        kind: external_exports.literal("start"),
-        payload: RunStartCommandPayloadSchema
-      }),
-      SessionDispatchCommandRecordBaseSchema.extend({
-        kind: external_exports.literal("startWithMessage"),
-        payload: RunStartWithMessageCommandPayloadSchema
-      }),
-      SessionDispatchCommandRecordBaseSchema.extend({
-        kind: external_exports.literal("message"),
-        payload: SessionDispatchMessageCommandPayloadSchema
-      }),
-      SessionDispatchCommandRecordBaseSchema.extend({
-        kind: external_exports.literal("answer"),
-        payload: SessionDispatchAnswerCommandPayloadSchema
-      }),
-      SessionDispatchCommandRecordBaseSchema.extend({
-        kind: external_exports.literal("stop"),
-        payload: SessionDispatchStopCommandPayloadSchema
-      })
-    ]);
   }
 });
 
-// ../../packages/schemas/src/sessions.ts
-function isSessionTerminalStatus(status) {
-  return SESSION_TERMINAL_STATUSES.some(
-    (terminalStatus) => terminalStatus === status
-  );
-}
-var SESSION_STATUSES, SESSION_RUNTIME_PHASES, SESSION_TERMINAL_STATUSES, SESSION_DISPLAY_TITLE_MAX_LENGTH, SESSION_MESSAGE_ROLES, SESSION_MESSAGE_STATUSES, SessionStatusSchema, SessionRuntimePhaseSchema, SessionMessageRoleSchema, SessionMessageStatusSchema, RunDisplayTitleSchema, AmbientStatusSchema, SESSION_CHECK_STATUSES, SESSION_CHECK_CONCLUSIONS, SESSION_CHECK_TIMEOUT_PHASES, SessionCheckStatusSchema, SessionCheckConclusionSchema, SessionCheckTimeoutPhaseSchema, ManualSessionRequestSchema, SessionArchiveRequestSchema, SessionsArchiveRequestSchema, SessionRecordSchema, SessionMessageOriginSchema, SessionUiMessageRecordSchema, SessionListItemAgentSchema, SessionListItemSchema, SessionListResponseSchema, SessionsArchiveResponseSchema;
-var init_sessions = __esm({
-  "../../packages/schemas/src/sessions.ts"() {
+// ../../packages/schemas/src/realtime.ts
+var RunRealtimeEventSchema;
+var init_realtime = __esm({
+  "../../packages/schemas/src/realtime.ts"() {
+    "use strict";
+    init_conversation();
+    RunRealtimeEventSchema = ConversationRealtimeEventSchema;
+  }
+});
+
+// ../../packages/schemas/src/session-diagnostics.ts
+var SESSION_DIAGNOSTIC_REALTIME_EVENT, SESSION_DIAGNOSTIC_LEVELS, SESSION_DIAGNOSTIC_SOURCES, SESSION_DIAGNOSTIC_PHASES, SESSION_DIAGNOSTIC_STATUSES, SessionDiagnosticLevelSchema, SessionDiagnosticSourceSchema, SessionDiagnosticPhaseSchema, SessionDiagnosticStatusSchema, SessionDiagnosticEventSchema;
+var init_session_diagnostics = __esm({
+  "../../packages/schemas/src/session-diagnostics.ts"() {
     "use strict";
     init_zod();
-    init_agents();
-    init_auth();
-    init_environments();
     init_ids();
     init_primitives();
-    init_session_commands();
-    init_tools();
-    SESSION_STATUSES = [
-      "queued",
-      "running",
-      "awaiting",
-      "failed",
-      "stopped"
+    SESSION_DIAGNOSTIC_REALTIME_EVENT = "session.diagnostic";
+    SESSION_DIAGNOSTIC_LEVELS = [
+      "debug",
+      "info",
+      "warn",
+      "error"
     ];
-    SESSION_RUNTIME_PHASES = [
-      "building_image",
-      "booting_container",
-      "preparing_environment",
-      "starting_runtime",
-      "running"
+    SESSION_DIAGNOSTIC_SOURCES = [
+      "web",
+      "worker",
+      "activity",
+      "bridge",
+      "runtime"
     ];
-    SESSION_TERMINAL_STATUSES = ["failed", "stopped"];
-    SESSION_DISPLAY_TITLE_MAX_LENGTH = 64;
-    SESSION_MESSAGE_ROLES = ["system", "user", "assistant"];
-    SESSION_MESSAGE_STATUSES = [
-      "in_progress",
-      "completed",
-      "failed"
+    SESSION_DIAGNOSTIC_PHASES = [
+      "dispatch",
+      "environment",
+      "bridge",
+      "delivery",
+      "command",
+      "runtime"
     ];
-    SessionStatusSchema = external_exports.enum(SESSION_STATUSES);
-    SessionRuntimePhaseSchema = external_exports.enum(SESSION_RUNTIME_PHASES);
-    SessionMessageRoleSchema = external_exports.enum(SESSION_MESSAGE_ROLES);
-    SessionMessageStatusSchema = external_exports.enum(SESSION_MESSAGE_STATUSES);
-    RunDisplayTitleSchema = external_exports.string().trim().max(SESSION_DISPLAY_TITLE_MAX_LENGTH);
-    AmbientStatusSchema = external_exports.string().trim().min(1);
-    SESSION_CHECK_STATUSES = [
-      "queued",
-      "in_progress",
-      "completed"
+    SESSION_DIAGNOSTIC_STATUSES = [
+      "started",
+      "succeeded",
+      "retrying",
+      "failed",
+      "skipped"
     ];
-    SESSION_CHECK_CONCLUSIONS = ["success", "failure"];
-    SESSION_CHECK_TIMEOUT_PHASES = ["begin", "complete"];
-    SessionCheckStatusSchema = external_exports.enum(SESSION_CHECK_STATUSES);
-    SessionCheckConclusionSchema = external_exports.enum(SESSION_CHECK_CONCLUSIONS);
-    SessionCheckTimeoutPhaseSchema = external_exports.enum(
-      SESSION_CHECK_TIMEOUT_PHASES
+    SessionDiagnosticLevelSchema = external_exports.enum(SESSION_DIAGNOSTIC_LEVELS);
+    SessionDiagnosticSourceSchema = external_exports.enum(SESSION_DIAGNOSTIC_SOURCES);
+    SessionDiagnosticPhaseSchema = external_exports.enum(SESSION_DIAGNOSTIC_PHASES);
+    SessionDiagnosticStatusSchema = external_exports.enum(
+      SESSION_DIAGNOSTIC_STATUSES
     );
-    ManualSessionRequestSchema = external_exports.object({
-      message: external_exports.string().trim().min(1).max(2e4).optional(),
-      interactive: external_exports.boolean().optional(),
-      /**
-       * Deliver the agent's configured `initialPrompt` as the session's kickoff
-       * message so the agent opens the conversation. Agents without an
-       * `initialPrompt` fall back to the default manual say-hello message, so a
-       * kickoff always pings the agent. The kickoff is delivered through the
-       * session's one idempotent start command and never renders as a user chat
-       * bubble; the agent's greeting is the first visible content.
-       */
-      kickoff: external_exports.boolean().optional()
-    });
-    SessionArchiveRequestSchema = external_exports.object({
-      archived: external_exports.boolean()
-    });
-    SessionsArchiveRequestSchema = external_exports.object({
-      session_ids: external_exports.array(SessionIdSchema).min(1).max(100),
-      archived: external_exports.boolean()
-    });
-    SessionRecordSchema = external_exports.object({
-      id: SessionIdSchema,
-      organizationId: external_exports.string().trim().min(1),
-      projectId: external_exports.string().trim().min(1).nullable(),
-      agentId: AgentIdSchema,
-      runtimeId: RuntimeIdSchema.nullable(),
-      status: SessionStatusSchema,
-      runtimePhase: SessionRuntimePhaseSchema.nullable(),
-      idempotencyKey: external_exports.string().min(1).nullable(),
-      correlationKey: external_exports.string().nullable(),
-      workflowId: external_exports.string().min(1),
-      displayTitle: RunDisplayTitleSchema,
-      ambientStatus: AmbientStatusSchema.nullable(),
-      ambientStatusUpdatedAt: external_exports.string().datetime().nullable(),
-      starterActor: AuthActorSchema.nullable(),
-      snapshot: AgentResourceSchema,
-      environmentSnapshot: EnvironmentResourceSchema,
-      toolSnapshots: external_exports.array(
-        external_exports.object({
-          source: external_exports.literal("inline"),
-          alias: ToolAliasSchema,
-          spec: RemoteMcpToolSchema.or(ConnectionBackedToolSchema).or(LocalToolSchema).or(GithubToolSchema)
-        })
-      ),
-      input: JsonValueSchema,
-      createdAt: external_exports.string().datetime(),
-      updatedAt: external_exports.string().datetime(),
-      lastActivityAt: external_exports.string().datetime(),
-      startedAt: external_exports.string().datetime().nullable(),
-      finishedAt: external_exports.string().datetime().nullable(),
-      archivedAt: external_exports.string().datetime().nullable(),
-      error: JsonValueSchema.nullable()
-    });
-    SessionMessageOriginSchema = external_exports.object({
-      eventKey: external_exports.string().trim().min(1),
-      provider: external_exports.string().trim().min(1).nullable().default(null)
-    });
-    SessionUiMessageRecordSchema = external_exports.object({
-      id: external_exports.string().trim().min(1),
+    SessionDiagnosticEventSchema = external_exports.object({
+      type: external_exports.literal(SESSION_DIAGNOSTIC_REALTIME_EVENT),
+      id: external_exports.string().min(1),
       sessionId: SessionIdSchema,
-      sequence: external_exports.number().int().nonnegative(),
-      messageId: external_exports.string().trim().min(1),
-      commandId: external_exports.string().trim().min(1).nullable(),
-      turnId: external_exports.string().trim().min(1).nullable(),
-      role: SessionMessageRoleSchema,
-      status: SessionMessageStatusSchema,
-      message: JsonValueSchema,
-      // The sender of the command that carried this message into the session
-      // (operator chat send, trigger delivery, or another agent's session), joined
-      // from session_commands at read time. Null for messages that did not arrive
-      // through a command, such as assistant output.
-      sender: SessionCommandSenderSchema.nullable().default(null),
-      // For trigger deliveries, the routed event behind the carrying command:
-      // its event key plus the originating provider connection when known
-      // (e.g. "slack" for a subscribed-thread reply, "github" for a check event).
-      origin: SessionMessageOriginSchema.nullable().default(null),
-      streamCursor: external_exports.number().int().positive().nullable().default(null),
-      createdAt: external_exports.string().datetime(),
-      updatedAt: external_exports.string().datetime(),
-      completedAt: external_exports.string().datetime().nullable()
-    });
-    SessionListItemAgentSchema = external_exports.object({
-      name: external_exports.string(),
-      displayName: external_exports.string().nullable(),
-      username: external_exports.string().nullable(),
-      avatarSha256: external_exports.string().nullable()
-    });
-    SessionListItemSchema = external_exports.object({
-      id: SessionIdSchema,
-      agentId: AgentIdSchema,
-      status: SessionStatusSchema,
-      runtimePhase: SessionRuntimePhaseSchema.nullable(),
-      displayTitle: RunDisplayTitleSchema,
-      summary: external_exports.string(),
-      agent: SessionListItemAgentSchema,
-      createdAt: external_exports.string().datetime(),
-      updatedAt: external_exports.string().datetime(),
-      archivedAt: external_exports.string().datetime().nullable(),
-      lastActivityAt: external_exports.string().datetime()
-    });
-    SessionListResponseSchema = external_exports.object({
-      sessions: external_exports.array(SessionListItemSchema),
-      /**
-       * Opaque keyset cursor for the next page, or `null` when the list is
-       * exhausted. Replay it on the next request to append the following page; it is
-       * minted for a specific sort and rejected against a different one.
-       */
-      nextCursor: external_exports.string().nullable(),
-      hasMore: external_exports.boolean()
-    });
-    SessionsArchiveResponseSchema = external_exports.object({
-      archived: external_exports.boolean(),
-      sessions: external_exports.array(SessionRecordSchema)
+      level: SessionDiagnosticLevelSchema,
+      source: SessionDiagnosticSourceSchema,
+      phase: SessionDiagnosticPhaseSchema,
+      step: external_exports.string().trim().min(1),
+      status: SessionDiagnosticStatusSchema,
+      message: external_exports.string().trim().min(1),
+      commandId: SessionCommandIdSchema.optional(),
+      runtimeId: RuntimeIdSchema.optional(),
+      bridgeLeaseId: RuntimeBridgeLeaseIdSchema.optional(),
+      attempt: external_exports.number().int().nonnegative().optional(),
+      durationMs: external_exports.number().nonnegative().optional(),
+      details: external_exports.record(external_exports.string(), JsonValueSchema).optional(),
+      createdAt: external_exports.string().datetime()
     });
   }
 });
@@ -24703,7 +24704,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.302",
+      version: "0.1.304",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"
@@ -35273,6 +35274,7 @@ var UiMessagePartTracker = class {
   textPartIndexById = /* @__PURE__ */ new Map();
   reasoningPartIndexById = /* @__PURE__ */ new Map();
   toolPartIndexByCallId = /* @__PURE__ */ new Map();
+  approvalByCallId = /* @__PURE__ */ new Map();
   dataPartIndexById = /* @__PURE__ */ new Map();
   append(chunk) {
     switch (chunk.type) {
@@ -35365,14 +35367,16 @@ var UiMessagePartTracker = class {
         return [];
       }
       case "tool-input-available": {
+        const pendingApproval = this.approvalByCallId.get(chunk.toolCallId);
         const index = this.upsertToolPart(chunk.toolCallId, {
           ...toolPartShape({
             toolCallId: chunk.toolCallId,
             toolName: chunk.toolName,
             dynamic: chunk.dynamic,
-            state: "input-available"
+            state: pendingApproval ? "approval-requested" : "input-available"
           }),
           input: chunk.input,
+          ...pendingApproval ? { approval: pendingApproval } : {},
           ...chunk.providerExecuted !== void 0 ? { providerExecuted: chunk.providerExecuted } : {},
           ...chunk.providerMetadata !== void 0 ? { callProviderMetadata: chunk.providerMetadata } : {}
         });
@@ -35391,6 +35395,24 @@ var UiMessagePartTracker = class {
         });
         return this.persistable(index);
       }
+      case "tool-approval-request": {
+        const approval = {
+          id: chunk.approvalId,
+          ...chunk.signature != null ? { signature: chunk.signature } : {}
+        };
+        this.approvalByCallId.set(chunk.toolCallId, approval);
+        const part = this.partById(
+          this.toolPartIndexByCallId,
+          chunk.toolCallId
+        );
+        const index = this.toolPartIndexByCallId.get(chunk.toolCallId);
+        if (!part || index === void 0) {
+          return [];
+        }
+        part.state = "approval-requested";
+        part.approval = approval;
+        return this.persistable(index);
+      }
       case "tool-output-available": {
         const part = this.partById(
           this.toolPartIndexByCallId,
@@ -35403,6 +35425,20 @@ var UiMessagePartTracker = class {
         part.state = "output-available";
         part.output = chunk.output;
         part.preliminary = chunk.preliminary;
+        this.settleApproval(part, chunk.toolCallId, { approved: true });
+        return this.persistable(index);
+      }
+      case "tool-output-denied": {
+        const part = this.partById(
+          this.toolPartIndexByCallId,
+          chunk.toolCallId
+        );
+        const index = this.toolPartIndexByCallId.get(chunk.toolCallId);
+        if (!part || index === void 0) {
+          return [];
+        }
+        part.state = "output-denied";
+        this.settleApproval(part, chunk.toolCallId, { approved: false });
         return this.persistable(index);
       }
       case "tool-output-error": {
@@ -35416,6 +35452,7 @@ var UiMessagePartTracker = class {
         }
         part.state = "output-error";
         part.errorText = chunk.errorText;
+        this.settleApproval(part, chunk.toolCallId, { approved: true });
         return this.persistable(index);
       }
       case "start-step": {
@@ -35523,6 +35560,16 @@ var UiMessagePartTracker = class {
     }
     return this.parts[index] ?? null;
   }
+  // The UIToolInvocation contract requires `approval.approved` on settled
+  // states (`output-available`/`output-denied`), but the settling chunks don't
+  // carry it — the outcome is implied by which chunk arrives. Stamp it onto a
+  // previously requested approval; parts that never parked stay approval-free.
+  settleApproval(part, toolCallId, outcome) {
+    const approval = this.approvalByCallId.get(toolCallId);
+    if (approval) {
+      part.approval = { ...approval, approved: outcome.approved };
+    }
+  }
   reset() {
     this.messageId = null;
     this.messageMetadata = void 0;
@@ -35531,6 +35578,7 @@ var UiMessagePartTracker = class {
     this.textPartIndexById = /* @__PURE__ */ new Map();
     this.reasoningPartIndexById = /* @__PURE__ */ new Map();
     this.toolPartIndexByCallId = /* @__PURE__ */ new Map();
+    this.approvalByCallId = /* @__PURE__ */ new Map();
     this.dataPartIndexById = /* @__PURE__ */ new Map();
   }
 };
@@ -35967,6 +36015,21 @@ function legacyToolEntry(chunk) {
           ]
         }
       };
+    case "tool-output-denied":
+      return {
+        role: "tool",
+        kind: "tool_result",
+        content: {
+          parts: [
+            {
+              type: "tool_result",
+              toolUseId: legacyToolCallId(chunk.toolCallId),
+              output: { denied: true },
+              isError: true
+            }
+          ]
+        }
+      };
     default:
       return null;
   }
@@ -38109,15 +38172,19 @@ var CodexProjector = class {
         return [];
     }
   }
-  // An approval parks the turn on operator input, so the question chunk also
-  // marks the delivered turn as waiting for input.
+  // An approval parks the turn on operator input, so both chunks mark the
+  // delivered turn as waiting for input.
   projectApproval(request) {
     return [
-      uiChunk2({
-        type: "tool-approval-request",
-        approvalId: String(request.requestId),
-        toolCallId: request.itemId
-      }),
+      {
+        type: "ui_message_chunk",
+        chunk: {
+          type: "tool-approval-request",
+          approvalId: String(request.requestId),
+          toolCallId: request.itemId
+        },
+        turnStatus: "waiting_for_input"
+      },
       {
         type: "ui_message_chunk",
         chunk: {
@@ -38172,6 +38239,7 @@ var CodexProjector = class {
             ...item.cwd ? { cwd: item.cwd } : {}
           },
           output: item.aggregatedOutput ?? "",
+          isDenied: isDeclinedStatus(item.status),
           isError: isFailedStatus(item.status) || (item.exitCode ?? 0) !== 0,
           title: item.command,
           toolMetadata: statusMetadata(item.status, {
@@ -38185,6 +38253,7 @@ var CodexProjector = class {
           name: "apply_patch",
           input: { changes: toJsonValue(item.changes) },
           output: { status: item.status ?? "unknown" },
+          isDenied: isDeclinedStatus(item.status),
           isError: isFailedStatus(item.status),
           title: "apply_patch",
           toolMetadata: statusMetadata(item.status)
@@ -38282,6 +38351,12 @@ function toolInputChunk(input) {
   });
 }
 function toolOutputChunk(input) {
+  if (input.isDenied) {
+    return uiChunk2({
+      type: "tool-output-denied",
+      toolCallId: input.itemId
+    });
+  }
   return uiChunk2(
     input.isError ? {
       type: "tool-output-error",
@@ -38352,6 +38427,9 @@ function reasoningPartId(itemId) {
 function isFailedStatus(status) {
   return status === "failed" || status === "declined";
 }
+function isDeclinedStatus(status) {
+  return status === "declined";
+}
 function statusMetadata(status, fields = {}) {
   return {
     status: status ?? "unknown",