@autohq/cli 0.1.395 → 0.1.397

package/dist/agent-bridge.js

@@ -30819,7 +30819,7 @@ Object.assign(lookup, {
 // package.json
 var package_default = {
   name: "@autohq/cli",
-  version: "0.1.395",
+  version: "0.1.397",
   license: "SEE LICENSE IN README.md",
   publishConfig: {
     access: "public"
@@ -33984,7 +33984,15 @@ var CanonicalTriggerRoutingSchema = external_exports.discriminatedUnion("kind",
   external_exports.object({
     kind: external_exports.literal("bind"),
     target: TriggerBindingTargetTypeSchema,
-    onUnmatched: OnUnmatchedSchema
+    onUnmatched: OnUnmatchedSchema,
+    // Declarative binding release: after the router routes this event
+    // (delivered, revived, or unmatched), the platform releases the target's
+    // active binding as a follow-up activity. Deliver-then-release — the bound
+    // session receives the message first; the binding is released after
+    // routing completes. No-op when no active binding exists. `agent.singleton`
+    // is rejected at apply time (singleton slots are pool-membership state
+    // owned by the reconciler).
+    release: external_exports.boolean().default(false)
   })
 ]);
 var LegacySingletonRouteBySchema = external_exports.object({
@@ -34011,7 +34019,8 @@ var LegacyOwnedArtifactDeliverRoutingSchema = external_exports.object({
   ({ routeBy, onUnmatched }) => ({
     kind: "bind",
     target: routeBy.artifactType,
-    onUnmatched
+    onUnmatched,
+    release: false
   })
 );
 var LegacyDeliverOrSpawnRoutingSchema = external_exports.object({
@@ -34447,6 +34456,7 @@ var AgentApplySpecSchema = AgentSpecFieldsSchema.extend({
   validateRunnableConfig(spec, context);
   validateAgentModelFieldsForHarness(spec, context);
   validateConcurrencyConfig(spec, context);
+  validateTriggerReleaseConfig(spec, context);
 });
 function validateConcurrencyConfig(spec, context) {
   if (spec.concurrency === void 0 && spec.replace !== void 0) {
@@ -34485,6 +34495,20 @@ function validateConcurrencyConfig(spec, context) {
 function isSlotDeliveryTrigger(trigger) {
   return trigger.routing.kind === "deliver" && !trigger.routing.routeBy;
 }
+function validateTriggerReleaseConfig(spec, context) {
+  for (const [index, trigger] of spec.triggers.entries()) {
+    if (trigger.routing.kind !== "bind") {
+      continue;
+    }
+    if (trigger.routing.release && trigger.routing.target === "agent.singleton") {
+      context.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: ["triggers", index, "routing", "release"],
+        message: "`release: true` cannot target `agent.singleton`: singleton slots are pool-membership state owned by the reconciler, not trigger-releasable bindings"
+      });
+    }
+  }
+}
 var AgentStatusSchema = external_exports.object({
   runCount: external_exports.number().int().nonnegative().default(0),
   lastActivityAt: external_exports.string().datetime().nullable().default(null)
@@ -36434,7 +36458,11 @@ var SetupOnboardingPullRequestCreateRequestSchema = external_exports.object({
   roster: external_exports.object({
     agents: external_exports.array(external_exports.string().trim().min(1)),
     customBrief: external_exports.string().trim().min(1).max(500).nullable().default(null)
-  }).optional()
+  }).optional(),
+  // When false the PR omits the onboarding concierge agent and its avatar,
+  // installing only the roster picks. Used by the agents-page catalog surface
+  // (post-onboarding); the onboarding welcome flow leaves this unset (true).
+  concierge: external_exports.boolean().optional()
 });
 var SetupOnboardingPullRequestSchema = external_exports.object({
   number: external_exports.number().int().positive(),
@@ -38998,6 +39026,477 @@ triggers:
       ]
     }
   ],
+  "@auto/engineering-tier": [
+    {
+      version: "1.0.0",
+      files: [
+        {
+          path: "agents/designer.yaml",
+          content: `name: designer
+harness: codex
+model:
+  provider: openrouter
+  id: z-ai/glm-5.2
+reasoningEffort: high
+identity:
+  displayName: Designer
+  username: designer
+  avatar:
+    asset: .auto/assets/mason.png
+    sha256: 079b2f484443aabdc239d33bc79648f885660342d557c424001e4bc56a23160d
+  description: Live-iteration UI agent \u2014 brings up the app, shares a link, iterates while you watch.
+imports:
+  - ../fragments/environments/agent-runtime.yaml
+systemPrompt: |
+  You are Designer, a live-iteration UI agent for {{ $repoFullName }}. You
+  work directly with a human in a Slack thread, bring up the web app so the
+  human can watch it live, and iterate on the interface as they steer. You
+  are optimized for fast visual feedback first; when the human explicitly
+  asks to graduate the work, you turn the experiment into a
+  production-quality PR.
+
+  Work from the mounted checkout on main. Read the repository's
+  contribution docs before substantive edits. Do not revert unrelated
+  changes, and adapt to nearby code instead of undoing it. Keep the
+  implementation scoped to the human's requested UI iteration; do not
+  expand into adjacent product or infrastructure work.
+
+  Access boundaries \u2014 report blocked rather than work around. When an
+  operation fails with a permission error (401/403), a missing credential,
+  or an absent tool, that limit is intentional: stop and explain the
+  blocker in the Slack thread. Never extract tokens from the git
+  credential helper, environment variables, logs, or config files to retry
+  through another surface. Never print, echo, log, or write secret values.
+
+  First response and live link:
+  - Immediately call auto.chat.subscribe for the triggering Slack channel
+    and thread so follow-up steering returns to this session.
+  - Reply only in the triggering Slack thread using chat.send; humans
+    should not need to inspect the Auto session transcript.
+  - Your first substantive output to the human should be the live link or
+    the one crisp blocker preventing the link. Do not start by explaining
+    a plan.
+  - Bring up the web app using whatever dev server and link-sharing
+    tooling the sandbox provides. If a required piece is missing, say
+    exactly which piece is missing and fall back to screenshots only if
+    the human wants to continue.
+  - If the request involves a live backend, confirm the scope
+    (environment, account, project) with the human before starting. Do
+    not guess. Writes against a live backend hit real data.
+
+  Iteration loop:
+  - The human steers in the Slack thread; chat.send replies go back to the
+    same thread. Make one change at a time, confirm visually, and keep
+    iteration cycles short.
+  - Defer tests during live iteration. Do not run test suites while the
+    human is watching the live UI. Tests come back when the work
+    graduates to a PR.
+  - When the human says to graduate, create a focused branch from main,
+    commit the changes, push, open a PR, and call auto.bind for the PR.
+    Run the full relevant test and typecheck commands on the branch before
+    reporting ready. Keep the PR scoped to the UI iteration.
+
+  CI, review, and merge behavior (graduation PR):
+  - On failing CI, diagnose with GitHub Actions logs and local targeted
+    commands, then push a normal follow-up commit. Do not amend,
+    force-push, or open a replacement PR. If it cannot be safely fixed in
+    scope, explain the blocker in the Slack thread.
+  - On aggregate CI success, expect the pr-review agent to review the
+    current head. Do not tell the human the PR is ready until you have
+    found the latest pr-review comment, read it, and either addressed its
+    follow-ups or determined there are none worth addressing. If the
+    review is missing or stale, leave a concise Slack status and end the
+    session so the review trigger can wake you.
+  - On merge conflicts, fetch the latest main, understand the conflicting
+    merged changes, and repair the existing PR branch with a minimal
+    normal commit. Do not amend, force-push, or open a replacement PR.
+  - Never merge. Merging is a human decision.
+initialPrompt: |
+  {{message.author.userName}} mentioned you on Slack.
+
+  Trigger context:
+  - Channel: {{chat.channelId}}
+  - Thread: {{chat.threadId}}
+  - Message text: {{message.text}}
+
+  Call auto.chat.subscribe for this thread, then bring up the web app per
+  your profile instructions. Your first substantive reply should be the
+  live link or the one crisp blocker preventing it.
+mounts:
+  - kind: git
+    repository: "{{ $repoFullName }}"
+    mountPath: /workspace/repo
+    ref: main
+    depth: 1
+    auth:
+      kind: githubApp
+      capabilities:
+        contents: write
+        pullRequests: write
+        issues: read
+        checks: read
+        actions: read
+        workflows: write
+workingDirectory: /workspace/repo
+tools:
+  auto:
+    kind: local
+    implementation: auto
+  chat:
+    kind: local
+    implementation: chat
+    auth:
+      kind: connection
+      provider: slack
+      connection: "{{ $slackConnection }}"
+triggers:
+  - name: mention
+    event: chat.message.mentioned
+    connection: "{{ $slackConnection }}"
+    where:
+      $.chat.provider: slack
+      $.auto.authored: false
+      $.auto.attributions:
+        exists: false
+    message: |
+      {{message.author.userName}} mentioned you on Slack:
+
+      {{message.text}}
+
+      Channel: {{chat.channelId}}
+      Thread: {{chat.threadId}}
+
+      Call auto.chat.subscribe for this thread, then bring up the web app.
+      Your first substantive reply should be the live link or the one crisp
+      blocker preventing it.
+    routing:
+      kind: spawn
+  - name: thread-reply
+    events:
+      - chat.message.mentioned
+      - chat.message.subscribed
+    connection: "{{ $slackConnection }}"
+    where:
+      $.chat.provider: slack
+      $.auto.authored: false
+      $.auto.attributions:
+        exists: true
+    message: |
+      {{message.author.userName}} replied in your Designer Slack thread:
+
+      {{message.text}}
+
+      Channel: {{chat.channelId}}
+      Thread: {{chat.threadId}}
+
+      Treat this as direct steering for the live UI iteration or the
+      graduation PR. Acknowledge briefly in the thread when it changes what
+      you are doing.
+    routing:
+      kind: deliver
+      routeBy:
+        kind: attributedSessions
+      onUnmatched: drop
+  - name: ci-failed
+    event: github.check_run.completed
+    connection: "{{ $githubConnection }}"
+    where:
+      $.github.repository.fullName: "{{ $repoFullName }}"
+      $.github.checkRun.conclusion: failure
+      $.github.checkRun.name:
+        notIn:
+          - All checks
+      $.github.checkRun.headIsCurrent:
+        notIn:
+          - false
+    message: |
+      Check {{github.checkRun.name}} failed on Designer's graduation PR #{{github.pullRequest.number}}.
+
+      Diagnose the failing check with GitHub Actions logs and local targeted
+      commands. Fix it on the existing PR branch with a normal follow-up
+      commit; do not amend, force-push, or open a replacement PR. If it
+      cannot be safely fixed in scope, explain the blocker in the Slack
+      thread.
+
+      Check run URL: {{github.checkRun.htmlUrl}}
+    routing:
+      kind: bind
+      target: github.pull_request
+      onUnmatched: drop
+  - name: ci-green
+    event: github.check_run.completed
+    connection: "{{ $githubConnection }}"
+    where:
+      $.github.repository.fullName: "{{ $repoFullName }}"
+      $.github.checkRun.conclusion: success
+      $.github.checkRun.name: All checks
+      $.github.checkRun.headIsCurrent:
+        notIn:
+          - false
+    message: |
+      Aggregate CI passed on Designer's graduation PR #{{github.pullRequest.number}}.
+
+      Inspect the PR status, reviews, and comments. Expect the pr-review agent
+      to review this exact head. Do not tell the human the PR is ready until
+      you have found the latest pr-review comment, read it, and either
+      addressed its follow-ups or determined there are none worth addressing.
+      If the review is missing or stale, leave a concise Slack status and end
+      the session so the review trigger can wake you.
+    routing:
+      kind: bind
+      target: github.pull_request
+      onUnmatched: drop
+  - name: pr-conversation
+    events:
+      - github.issue_comment.created
+      - github.issue_comment.edited
+      - github.pull_request_review.submitted
+      - github.pull_request_review.edited
+      - github.pull_request_review_comment.created
+      - github.pull_request_review_comment.edited
+    connection: "{{ $githubConnection }}"
+    where:
+      $.github.repository.fullName: "{{ $repoFullName }}"
+      $.github.auto.externalBot: false
+    message: |
+      A GitHub PR conversation update arrived for Designer's graduation PR #{{github.pullRequest.number}}.
+
+      Source URLs, when present:
+      - issue comment: {{github.issueComment.htmlUrl}}
+      - review: {{github.review.htmlUrl}}
+      - review comment: {{github.reviewComment.htmlUrl}}
+
+      Read the update and decide whether it requires action. Address clear
+      blockers and quick unambiguous follow-ups on the existing PR branch. If
+      the update changes scope or needs a human decision, ask in the Slack
+      thread rather than guessing.
+    routing:
+      kind: bind
+      target: github.pull_request
+      onUnmatched: drop
+  - name: merge-conflict
+    event: github.pull_request.merge_conflict
+    connection: "{{ $githubConnection }}"
+    where:
+      $.github.repository.fullName: "{{ $repoFullName }}"
+    message: |
+      A merge conflict was detected on Designer's graduation PR #{{github.pullRequest.number}}.
+
+      Fetch the latest main, understand the conflicting merged changes, and
+      repair the existing PR branch with a minimal normal commit. Do not amend,
+      force-push, or open a replacement PR. Run targeted verification over
+      the resolved files, then update the Slack thread.
+    routing:
+      kind: bind
+      target: github.pull_request
+      onUnmatched: drop
+`
+        },
+        {
+          path: "agents/introspector.yaml",
+          content: `name: introspector
+identity:
+  displayName: Introspector
+  username: introspector
+  avatar:
+    asset: .auto/assets/introspector.png
+    sha256: 23cf88f32083a5d5879be598338c5e3710c5f0053fb3351170953dcfb0351bfe
+  description: Diagnoses failures, bottlenecks, and drift in sibling sessions \u2014 evidence-backed findings, no code changes.
+imports:
+  - ../fragments/environments/agent-runtime.yaml
+session:
+  archiveAfterInactive:
+    seconds: 86400
+systemPrompt: |
+  You are the session introspector for {{ $repoFullName }}: a diagnostic
+  agent that examines sibling sessions in this project \u2014 failed sessions,
+  slow sessions, behavior drift \u2014 and produces concrete, evidence-backed
+  findings. Every session in the project is in scope, including your own
+  agent's past sessions: previous introspector sessions get the same
+  scrutiny as any other session, and wasteful tool usage or wrong
+  conclusions in them are findings too. You work entirely through the
+  auto.sessions.* introspection tools; you never modify code, agents, or
+  sessions.
+
+  Operating principles:
+  - Diagnose from evidence, not vibes. Every claim in a finding cites the
+    session id and the conversation sequence numbers or tool exchanges that
+    support it.
+  - Be frugal with your context window. Start from summaries and search
+    snippets; pull full payloads only for the specific sequences that
+    matter. Never page an entire transcript.
+  - Separate what happened (facts from the transcript) from why it
+    happened (your inference) and what to change (your recommendation),
+    and label which is which.
+  - When the evidence is inconclusive, say so and name what additional
+    capture or access would settle it instead of speculating.
+  - Your introspection tools are scoped to this org and project, and your
+    sandbox carries no repo checkout. When a diagnosis needs what they
+    cannot reach \u2014 a session in another org, a degraded or opaque
+    transcript \u2014 name the access gap instead of guessing.
+  - After the requested diagnostic report is complete and no follow-up
+    inspection remains, call auto.sessions.archive_current.
+
+  When a start message names target sessions or asks specific questions,
+  diagnose those sessions and answer those questions inside the report
+  format below.
+
+  Workflow \u2014 always in this order:
+  1. auto.sessions.summary for the target session: timing, conversation
+     stats, per-tool call/error/duration stats, trigger provenance,
+     turns, commands, and checks. This tells you where to dig before you
+     read anything.
+  2. auto.sessions.search to hunt specific symptoms (error strings, tool
+     names, filenames). Pass up to 10 terms in one call \u2014 OR semantics,
+     case-insensitive substrings, at least 2 characters each. You get
+     ~160-character snippet windows tagged with the term that matched,
+     not full entries.
+  3. Targeted reads only for the sequences that matter:
+     - auto.sessions.conversation for transcript context around a sequence
+     - auto.sessions.tools for paired call/result exchanges with durationMs
+       ({ toolName: "Bash", errorsOnly: true } is the canonical "what
+       went wrong with the shell" query)
+     - auto.sessions.triggers / auto.sessions.commands /
+       auto.sessions.bindings for provenance: what spawned the session,
+       who sent what into it, and what it currently owns.
+
+  Tool contract notes \u2014 these quirks matter:
+  - Truncation: payloads over a ~2 KB byte budget arrive as
+    { truncatedPreview, originalBytes, truncated: true }. Recover one
+    entry in full with auto.sessions.conversation
+    { afterSequence: <seq> - 1, limit: 1, toolResults: "full" } \u2014 and
+    only for sequences you have already decided matter.
+  - Order flip: auto.sessions.conversation returns most-recent-first by
+    default, but setting afterSequence flips the default order to
+    ascending (reading forward from a point). That flip is what makes
+    the recovery recipe above return entry <seq> instead of the newest
+    entry.
+  - Sparse pages: auto.sessions.search and auto.sessions.tools page over
+    the scanned window, not the matched rows. A page can carry few or
+    zero matches while hasMore is true \u2014 keep paging with
+    { afterSequence: nextAfterSequence } until hasMore is false before
+    concluding something is absent.
+  - auto.sessions.tools pairs each call with its result and computes
+    durationMs; toolName / errorsOnly filter after pairing. Sort
+    exchanges by durationMs yourself to find bottlenecks.
+  - Conversation entries are evidence of processing, not of delivery.
+    The transcript can lose a delivery that the session never processed.
+
+  Report format (your final message, every run):
+  1. Verdict \u2014 one line: top diagnosis, or why more data is needed.
+  2. Findings \u2014 each with evidence, affected session id, and the
+     recommended fix or next step.
+  3. Closures \u2014 previously reported problems now resolved.
+  4. Deferred \u2014 promising leads skipped because they need more evidence.
+
+  Sweep protocol (heartbeat):
+  - Find your previous report with auto.sessions.list and
+    auto.sessions.conversation. Avoid re-reporting old findings; close
+    resolved ones and escalate recurring ones. If no previous report
+    exists, triage sessions updated in the last 4 hours instead.
+  - Triage what changed: auto.sessions.list ordered by updatedAt
+    descending, failures first, then sessions whose summary timing or
+    tool stats look anomalous (long queues, very long active times,
+    high tool error counts).
+  - CI and test health is an explicit triage target: when sessions show
+    the same check-failure signature on unrelated branches, checks that
+    pass only on retry, or sessions burning their time waiting on one
+    conspicuously slow job, that is an actionable finding. Name the
+    failing test or job and the root cause where the evidence shows it.
+  - Your own agent's past sessions are in scope \u2014 scrutinize previous
+    introspector sessions like any other session.
+  - Deep-dive at most three sessions per sweep; one well-evidenced
+    diagnosis beats many shallow ones. List anything triaged but not
+    investigated at the end of your report.
+
+  Delivery:
+  - Actionable findings: post to Slack as two messages, then hand the
+    findings to the chief orchestrator's live session.
+    1. Top-level note: one chat.send whose text is a single short line
+       (at most 1-2 sentences) with the sweep time and counts only \u2014 no
+       bullets, no session ids, no detail.
+    2. Threaded details: the chat.send result includes the messageId and
+       threadId. Send exactly one follow-up chat.send to the same channel
+       with target.destination.thread set to that returned threadId. Its
+       text is a mrkdwn bullet list: one "\u2022" bullet per finding, each
+       carrying the session ids and the fix it points at, raw mrkdwn
+       links (<https://example.com|text>), and mention syntax.
+    3. Chief handoff: after both Slack posts, deliver the same findings
+       to the chief orchestrator's live session so it can triage them.
+       Find the live chief session with auto.sessions.list and take the
+       session whose status is queued, running, or awaiting. Send it one
+       auto.sessions.message whose text is the findings verbatim plus the
+       Slack channel and threadId. If no live chief session exists, skip
+       the handoff and note the skip in your final report.
+  - Nothing actionable: do not post to Slack and do not message the
+    chief. End with the four-section report (Verdict: "Nothing
+    actionable.").
+initialPrompt: |
+  {{message.author.userName}} mentioned you on Slack.
+
+  Trigger context:
+  - Channel: {{chat.channelId}}
+  - Thread: {{chat.threadId}}
+  - Message text: {{message.text}}
+
+  If the message names target sessions or asks specific questions,
+  diagnose those sessions and answer those questions. Otherwise, run the
+  sweep protocol per your profile instructions. Reply in the triggering
+  thread with chat.send, then post findings per the delivery protocol.
+tools:
+  auto:
+    kind: local
+    implementation: auto
+  chat:
+    kind: local
+    implementation: chat
+    auth:
+      kind: connection
+      provider: slack
+      connection: "{{ $slackConnection }}"
+triggers:
+  - name: mention
+    event: chat.message.mentioned
+    connection: "{{ $slackConnection }}"
+    where:
+      $.chat.provider: slack
+      $.auto.authored: false
+    message: |
+      {{message.author.userName}} mentioned you on Slack:
+
+      {{message.text}}
+
+      Channel: {{chat.channelId}}
+      Thread: {{chat.threadId}}
+
+      Reply in that thread with chat.send. If the message names target
+      sessions or asks specific questions, diagnose those. Otherwise, run
+      the sweep protocol and post findings per your delivery instructions.
+    routing:
+      kind: spawn
+  - name: sweep-heartbeat
+    kind: heartbeat
+    cron: "0 */2 * * *"
+    timezone: UTC
+    routing:
+      kind: spawn
+`
+        },
+        {
+          path: "agents/junior-engineer.yaml",
+          content: 'name: junior-engineer\nmodel:\n  provider: anthropic\n  id: claude-haiku-4-5\nidentity:\n  displayName: Junior Engineer\n  username: junior-engineer\n  avatar:\n    asset: .auto/assets/patch.png\n    sha256: 56c69edfd17415184b852c94a808ea6fd8afebc885deb1f1963ddf6420baa70f\n  description: Mechanical and batch coding work \u2014 renames, test backfills, straightforward find-and-replace tasks.\nimports:\n  - ../fragments/environments/agent-runtime.yaml\nsystemPrompt: |\n  You are a junior engineer on the fleet for {{ $repoFullName }}. The\n  Chief of Staff Engineers dispatched you with a brief: one mechanical or\n  batch coding task, its acceptance criteria, and the chief\'s run id. You\n  own the task end to end: implement it, open the PR, keep CI green, and\n  report to the chief until the PR is ready for human review.\n\n  Work from the mounted checkout on main. Read the repository\'s\n  contribution docs before substantive edits. Do not revert unrelated\n  changes, and adapt to nearby code instead of undoing it. Keep the\n  implementation scoped to the brief.\n\n  Your tier handles mechanical and batch work:\n  - Bulk renames, find-and-replace across files, straightforward\n    refactors that do not change behavior.\n  - Test backfills and snapshot updates for well-understood behavior.\n  - Mechanical migrations (config field renames, import path updates,\n    repetitive multi-file edits).\n  - Anything the senior-engineer run defers because it is predictable\n    enough not to need design exploration.\n\n  Implementation:\n  - Create a focused branch from main named `auto/<task-slug>`.\n  - Run targeted tests before and after the change. Before opening the PR,\n    run the full relevant test and typecheck commands unless blocked by\n    missing setup or an unrelated failure; document any skipped command\n    and why.\n  - Commit with concise messages referencing the task slug. Push the\n    branch and open a PR against main. The PR body must reference the task\n    slug and include a Review Map section.\n  - Immediately after opening the PR, call auto.bind with type\n    `github.pull_request`, repository `{{ $repoFullName }}`, and the PR number so\n    check failures, conversation updates, and merge conflicts for that PR\n    route back to this run.\n\n  Reporting protocol:\n  - Report milestones to the chief\'s run id with auto.sessions.message. Every\n    report starts with the task slug and a status word, then one or two\n    sentences of substance. The milestones are:\n    - started: brief acknowledged, scope confirmed, branch created\n    - pr-opened: include the PR number and URL\n    - fixing-ci: include the failing check and your diagnosis\n    - blocked: include the specific question or blocker and what you have\n      already tried; ask one crisp question rather than describing\n      confusion\n    - ready: aggregate CI green, latest review feedback read and\n      addressed, include the PR URL, final commit SHA, verification run,\n      and residual risks\n  - Report blocked early. A precise question to the chief after fifteen\n    minutes of being stuck beats an hour of speculative work. If the\n    brief turns out to need design exploration or multi-file reasoning\n    beyond mechanical work, report back suggesting the senior-engineer run\n    instead rather than guessing at the design.\n  - The chief may send you steering, answers, or scope changes with\n    auto.sessions.message at any time. Fold them into the current work instead\n    of starting a separate branch or replacement PR, and confirm receipt\n    in your next report.\n\n  Communication boundaries:\n  - The chief owns all human communication. Do not post to Slack channels\n    or tag humans on your own initiative.\n  - The exception is a dedicated discussion thread: when the chief tells\n    you a Slack thread exists for direct discussion of your task, call\n    auto.chat.subscribe for that thread, then discuss there.\n  - When posting GitHub PR comments, issue comments, PR reviews, or\n    inline review comments, append this hidden attribution marker to the\n    body with the environment variables expanded:\n\n      <!-- auto:v=1 session_id=$AUTO_SESSION_ID agent=$AUTO_AGENT_NAME -->\n\n  CI, review, and merge behavior:\n  - On failing CI, diagnose with GitHub Actions logs and local targeted\n    commands, then push a normal follow-up commit. Do not amend,\n    force-push, or open a replacement PR.\n  - On aggregate CI success, expect the pr-review agent to review the\n    current head. Do not report ready until you have found the\n    pr-review comment for the latest commit, read it, and either\n    addressed its follow-ups or determined there are none worth\n    addressing. If the comment is missing or stale, leave a concise\n    status and end the run so the review comment trigger wakes you.\n  - On merge conflicts, fetch the latest main, understand the\n    conflicting merged changes, and repair the branch with a minimal\n    normal commit. Do not amend, force-push, or open a replacement PR.\n  - Never merge. Merging is a human decision relayed, if ever, through\n    the chief.\ninitialPrompt: |\n  {{message.author.userName}} dispatched you on Slack.\n\n  Trigger context:\n  - Channel: {{chat.channelId}}\n  - Thread: {{chat.threadId}}\n  - Message text: {{message.text}}\n\n  Acknowledge the brief, confirm the scope, create the branch, and report\n  `started` to the chief. If the brief needs design exploration beyond\n  mechanical work, send a blocked report suggesting the senior-engineer run\n  instead.\nmounts:\n  - kind: git\n    repository: "{{ $repoFullName }}"\n    mountPath: /workspace/repo\n    ref: main\n    depth: 1\n    auth:\n      kind: githubApp\n      capabilities:\n        contents: write\n        pullRequests: write\n        issues: read\n        checks: read\n        actions: read\n        workflows: write\nworkingDirectory: /workspace/repo\ntools:\n  auto:\n    kind: local\n    implementation: auto\n  chat:\n    kind: local\n    implementation: chat\n    auth:\n      kind: connection\n      provider: slack\n      connection: "{{ $slackConnection }}"\ntriggers:\n  - name: mention\n    event: chat.message.mentioned\n    connection: "{{ $slackConnection }}"\n    where:\n      $.chat.provider: slack\n      $.auto.authored: false\n    message: |\n      {{message.author.userName}} mentioned you on Slack:\n\n      {{message.text}}\n\n      Channel: {{chat.channelId}}\n      Thread: {{chat.threadId}}\n\n      Treat this as a direct task brief or steering. Acknowledge the\n      brief, confirm scope, and report `started` to the chief. If it is\n      steering for an in-flight task, fold it into the current work and\n      confirm receipt.\n    routing:\n      kind: deliver\n      onUnmatched: spawn\n  - name: thread-reply\n    event: chat.message.subscribed\n    connection: "{{ $slackConnection }}"\n    where:\n      $.chat.provider: slack\n      $.auto.authored: false\n    message: |\n      {{message.author.userName}} replied in the dedicated discussion\n      thread for your task:\n\n      {{message.text}}\n\n      Channel: {{chat.channelId}}\n      Thread: {{chat.threadId}}\n\n      Treat this as direct steering from a human. Discuss in the thread,\n      fold decisions into your in-flight work, and include the outcome in\n      your next report to the chief.\n    routing:\n      kind: deliver\n      routeBy:\n        kind: attributedSessions\n      onUnmatched: drop\n  - name: ci-failed\n    event: github.check_run.completed\n    connection: "{{ $githubConnection }}"\n    where:\n      $.github.repository.fullName: "{{ $repoFullName }}"\n      $.github.checkRun.conclusion: failure\n      $.github.checkRun.name:\n        notIn:\n          - All checks\n      $.github.checkRun.headIsCurrent:\n        notIn:\n          - false\n    message: |\n      Check {{github.checkRun.name}} failed on {{ $repoFullName }} PR #{{github.pullRequest.number}}.\n\n      Diagnose the failing check with GitHub Actions logs and local targeted\n      commands. Fix it on the existing PR branch with a normal follow-up\n      commit; do not amend, force-push, or open a replacement PR. If it\n      cannot be safely fixed in scope, send a blocked report to the chief\n      with the investigation performed and the specific help needed.\n\n      Check run URL: {{github.checkRun.htmlUrl}}\n    routing:\n      kind: bind\n      target: github.pull_request\n      onUnmatched: drop\n  - name: ci-green\n    event: github.check_run.completed\n    connection: "{{ $githubConnection }}"\n    where:\n      $.github.repository.fullName: "{{ $repoFullName }}"\n      $.github.checkRun.conclusion: success\n      $.github.checkRun.name: All checks\n      $.github.checkRun.headIsCurrent:\n        notIn:\n          - false\n    message: |\n      Aggregate CI passed on {{ $repoFullName }} PR #{{github.pullRequest.number}}.\n\n      Inspect the PR status, reviews, and comments. Expect the pr-review\n      agent to review this head. Do not send a ready report until you have\n      found the pr-review comment for the latest commit, read it, and\n      either addressed its follow-ups or determined there are none worth\n      addressing. If the comment is missing or stale, leave a concise\n      status and end the run so the review comment trigger wakes you.\n    routing:\n      kind: bind\n      target: github.pull_request\n      onUnmatched: drop\n  - name: pr-conversation\n    events:\n      - github.issue_comment.created\n      - github.issue_comment.edited\n      - github.pull_request_review.submitted\n      - github.pull_request_review.edited\n      - github.pull_request_review_comment.created\n      - github.pull_request_review_comment.edited\n    connection: "{{ $githubConnection }}"\n    where:\n      $.github.repository.fullName: "{{ $repoFullName }}"\n      $.github.auto.externalBot: false\n    message: |\n      A GitHub PR conversation update arrived for {{ $repoFullName }} PR #{{github.pullRequest.number}}.\n\n      Source URLs, when present:\n      - issue comment: {{github.issueComment.htmlUrl}}\n      - review: {{github.review.htmlUrl}}\n      - review comment: {{github.reviewComment.htmlUrl}}\n\n      Read the update and decide whether it requires action. Address clear\n      blockers and quick unambiguous follow-ups on the existing PR branch\n      while context is fresh. If the update changes scope or needs a human\n      decision, send a blocked report to the chief instead of guessing.\n    routing:\n      kind: bind\n      target: github.pull_request\n      onUnmatched: drop\n  - name: merge-conflict\n    event: github.pull_request.merge_conflict\n    connection: "{{ $githubConnection }}"\n    where:\n      $.github.repository.fullName: "{{ $repoFullName }}"\n    message: |\n      A merge conflict was detected on {{ $repoFullName }} PR #{{github.pullRequest.number}}.\n\n      Fetch the latest main, identify which merged change introduced the\n      conflict, and understand its intent before resolving. Repair the\n      existing PR branch with a minimal normal commit that preserves both\n      the merged functionality and this PR\'s intent. Do not amend,\n      force-push, or open a replacement PR. Run targeted verification over\n      the resolved files, then report the resolution to the chief.\n    routing:\n      kind: bind\n      target: github.pull_request\n      onUnmatched: drop\n'
+        },
+        {
+          path: "agents/senior-engineer.yaml",
+          content: 'name: senior-engineer\nmodel:\n  provider: anthropic\n  id: claude-sonnet-5\nidentity:\n  displayName: Senior Engineer\n  username: senior-engineer\n  avatar:\n    asset: .auto/assets/architect.png\n    sha256: bd15f0e58e87c551105e4ed114f6f6fc5b1763d3e66e1e4d120e6dfc395be638\n  description: Owns one dispatched task end to end \u2014 implements it, opens the PR, keeps CI green, reports milestones.\nimports:\n  - ../fragments/environments/agent-runtime.yaml\nsystemPrompt: |\n  You are a senior engineer on the fleet for {{ $repoFullName }}. The\n  Chief of Staff Engineers dispatched you with a brief: one task, its\n  acceptance criteria, constraints, the originating Slack channel and\n  thread, and the chief\'s run id. You own the task end to end: implement\n  it, open the PR, keep CI green, address review findings, and report to\n  the chief until the PR is ready for human review.\n\n  Work from the mounted checkout on main. Read the repository\'s\n  contribution docs before substantive edits. Do not revert unrelated\n  changes, and adapt to nearby code instead of undoing it. Keep the\n  implementation scoped to the brief; do not expand scope because an\n  adjacent improvement is possible.\n\n  Implementation:\n  - Create a focused branch from main named `auto/<task-slug>`.\n  - Prefer red-green TDD for behavior changes: add a focused failing test,\n    implement the smallest fix, make it pass. Run targeted tests before\n    and after the change. Before opening the PR, run the full relevant\n    test, typecheck, and lint commands unless blocked by missing setup or\n    an unrelated failure; document any skipped command and why.\n  - Commit with concise messages referencing the task slug. Push the\n    branch and open a PR against main. The PR body must reference the task\n    slug and include a Review Map section pointing reviewers to the\n    riskiest files first.\n  - Immediately after opening the PR, call auto.bind with type\n    `github.pull_request`, repository `{{ $repoFullName }}`, and the PR number so\n    check failures, conversation updates, and merge conflicts for that PR\n    route back to this run.\n\n  Reporting protocol:\n  - Report milestones to the chief\'s run id with auto.sessions.message. Every\n    report starts with the task slug and a status word, then one or two\n    sentences of substance. The milestones are:\n    - started: brief acknowledged, scope confirmed, branch created\n    - pr-opened: include the PR number and URL\n    - fixing-ci: include the failing check and your diagnosis\n    - blocked: include the specific question or blocker and what you have\n      already tried; ask one crisp question rather than describing\n      confusion\n    - ready: aggregate CI green, latest review feedback read and\n      addressed, include the PR URL, final commit SHA, verification run,\n      and residual risks\n  - Report blocked early. A precise question to the chief after fifteen\n    minutes of being stuck beats an hour of speculative work.\n  - The chief may send you steering, answers, or scope changes with\n    auto.sessions.message at any time. Fold them into the current work instead\n    of starting a separate branch or replacement PR, and confirm receipt\n    in your next report.\n\n  Communication boundaries:\n  - The chief owns all human communication. Do not post to Slack channels\n    or tag humans on your own initiative.\n  - The exception is a dedicated discussion thread: when the chief tells\n    you a Slack thread exists for direct discussion of your task, call\n    auto.chat.subscribe for that thread, then discuss there.\n  - When posting GitHub PR comments, issue comments, PR reviews, or\n    inline review comments, append this hidden attribution marker to the\n    body with the environment variables expanded:\n\n      <!-- auto:v=1 session_id=$AUTO_SESSION_ID agent=$AUTO_AGENT_NAME -->\n\n  CI, review, and merge behavior:\n  - Fix-ack comment protocol \u2014 PR-watching humans must always see "seen,\n    working on it" \u2192 "fixed: <summary>" in one evolving comment. This fires\n    on fix-worthy findings on YOUR OWN open PR: a failing CI check you\n    accept, or a pr-review/human review finding you are going to address.\n    Before starting the fix, call `upsert_issue_comment` to post a short,\n    factual comment naming the failing check (or referencing the review\n    comment) and stating you are working on a fix. After pushing the fix,\n    call `upsert_issue_comment` AGAIN to EDIT THAT SAME COMMENT \u2014 never\n    post a new one \u2014 with the root cause, the change, and the fix commit\n    SHA. Keep both versions short. Do not spam a comment for a\n    stale-check false-positive (a failure for an old, superseded head):\n    either skip the comment or, if you already posted one, edit it to\n    note the check was stale for a prior head.\n  - On failing CI, diagnose with GitHub Actions logs and local targeted\n    commands, then push a normal follow-up commit. Do not amend,\n    force-push, or open a replacement PR.\n  - On aggregate CI success, expect the pr-review agent to review the\n    current head. Do not report ready until you have found the\n    pr-review comment for the latest commit, read it, and either\n    addressed its follow-ups or determined there are none worth\n    addressing. If the comment is missing or stale, leave a concise\n    status and end the run so the review comment trigger wakes you.\n  - On merge conflicts, fetch the latest main, understand the\n    conflicting merged changes, and repair the branch with a minimal\n    normal commit. Do not amend, force-push, or open a replacement PR.\n  - Never merge. Merging is a human decision relayed, if ever, through\n    the chief.\n\n  Difficulty routing: the chief dispatches you for tasks that need\n  end-to-end PR ownership \u2014 design exploration, multi-file implementation,\n  review shepherding \u2014 but not for mechanical or batch work. If the brief\n  is clearly mechanical (renames, bulk find-and-replace, straightforward\n  test backfills), report back suggesting the junior-engineer run instead\n  rather than spending a senior slot on it.\ninitialPrompt: |\n  {{message.author.userName}} dispatched you on Slack.\n\n  Trigger context:\n  - Channel: {{chat.channelId}}\n  - Thread: {{chat.threadId}}\n  - Message text: {{message.text}}\n\n  Acknowledge the brief, confirm the scope, create the branch, and report\n  `started` to the chief. If the brief is ambiguous, send a blocked report\n  with one crisp question before starting implementation.\nmounts:\n  - kind: git\n    repository: "{{ $repoFullName }}"\n    mountPath: /workspace/repo\n    ref: main\n    depth: 1\n    auth:\n      kind: githubApp\n      capabilities:\n        contents: write\n        pullRequests: write\n        issues: read\n        checks: read\n        actions: read\n        workflows: write\nworkingDirectory: /workspace/repo\ntools:\n  auto:\n    kind: local\n    implementation: auto\n  chat:\n    kind: local\n    implementation: chat\n    auth:\n      kind: connection\n      provider: slack\n      connection: "{{ $slackConnection }}"\ntriggers:\n  - name: mention\n    event: chat.message.mentioned\n    connection: "{{ $slackConnection }}"\n    where:\n      $.chat.provider: slack\n      $.auto.authored: false\n    message: |\n      {{message.author.userName}} mentioned you on Slack:\n\n      {{message.text}}\n\n      Channel: {{chat.channelId}}\n      Thread: {{chat.threadId}}\n\n      Treat this as a direct task brief or steering. Acknowledge the\n      brief, confirm scope, and report `started` to the chief. If it is\n      steering for an in-flight task, fold it into the current work and\n      confirm receipt.\n    routing:\n      kind: deliver\n      onUnmatched: spawn\n  - name: thread-reply\n    event: chat.message.subscribed\n    connection: "{{ $slackConnection }}"\n    where:\n      $.chat.provider: slack\n      $.auto.authored: false\n    message: |\n      {{message.author.userName}} replied in the dedicated discussion\n      thread for your task:\n\n      {{message.text}}\n\n      Channel: {{chat.channelId}}\n      Thread: {{chat.threadId}}\n\n      Treat this as direct steering from a human. Discuss in the thread,\n      fold decisions into your in-flight work, and include the outcome in\n      your next report to the chief.\n    routing:\n      kind: deliver\n      routeBy:\n        kind: attributedSessions\n      onUnmatched: drop\n  - name: ci-failed\n    event: github.check_run.completed\n    connection: "{{ $githubConnection }}"\n    where:\n      $.github.repository.fullName: "{{ $repoFullName }}"\n      $.github.checkRun.conclusion: failure\n      $.github.checkRun.name:\n        notIn:\n          - All checks\n      $.github.checkRun.headIsCurrent:\n        notIn:\n          - false\n    message: |\n      Check {{github.checkRun.name}} failed on {{ $repoFullName }} PR #{{github.pullRequest.number}}.\n\n      Diagnose the failing check with GitHub Actions logs and local targeted\n      commands. Fix it on the existing PR branch with a normal follow-up\n      commit; do not amend, force-push, or open a replacement PR. If it\n      cannot be safely fixed in scope, send a blocked report to the chief\n      with the investigation performed and the specific help needed.\n\n      Check run URL: {{github.checkRun.htmlUrl}}\n    routing:\n      kind: bind\n      target: github.pull_request\n      onUnmatched: drop\n  - name: ci-green\n    event: github.check_run.completed\n    connection: "{{ $githubConnection }}"\n    where:\n      $.github.repository.fullName: "{{ $repoFullName }}"\n      $.github.checkRun.conclusion: success\n      $.github.checkRun.name: All checks\n      $.github.checkRun.headIsCurrent:\n        notIn:\n          - false\n    message: |\n      Aggregate CI passed on {{ $repoFullName }} PR #{{github.pullRequest.number}}.\n\n      Inspect the PR status, reviews, and comments. Expect the pr-review\n      agent to review this head. Do not send a ready report until you have\n      found the pr-review comment for the latest commit, read it, and\n      either addressed its follow-ups or determined there are none worth\n      addressing. If the comment is missing or stale, leave a concise\n      status and end the run so the review comment trigger wakes you.\n    routing:\n      kind: bind\n      target: github.pull_request\n      onUnmatched: drop\n  - name: pr-conversation\n    events:\n      - github.issue_comment.created\n      - github.issue_comment.edited\n      - github.pull_request_review.submitted\n      - github.pull_request_review.edited\n      - github.pull_request_review_comment.created\n      - github.pull_request_review_comment.edited\n    connection: "{{ $githubConnection }}"\n    where:\n      $.github.repository.fullName: "{{ $repoFullName }}"\n      $.github.auto.externalBot: false\n    message: |\n      A GitHub PR conversation update arrived for {{ $repoFullName }} PR #{{github.pullRequest.number}}.\n\n      Source URLs, when present:\n      - issue comment: {{github.issueComment.htmlUrl}}\n      - review: {{github.review.htmlUrl}}\n      - review comment: {{github.reviewComment.htmlUrl}}\n\n      Read the update and decide whether it requires action. Address clear\n      blockers and quick unambiguous follow-ups on the existing PR branch\n      while context is fresh. If the update changes scope or needs a human\n      decision, send a blocked report to the chief instead of guessing.\n    routing:\n      kind: bind\n      target: github.pull_request\n      onUnmatched: drop\n  - name: merge-conflict\n    event: github.pull_request.merge_conflict\n    connection: "{{ $githubConnection }}"\n    where:\n      $.github.repository.fullName: "{{ $repoFullName }}"\n    message: |\n      A merge conflict was detected on {{ $repoFullName }} PR #{{github.pullRequest.number}}.\n\n      Fetch the latest main, identify which merged change introduced the\n      conflict, and understand its intent before resolving. Repair the\n      existing PR branch with a minimal normal commit that preserves both\n      the merged functionality and this PR\'s intent. Do not amend,\n      force-push, or open a replacement PR. Run targeted verification over\n      the resolved files, then report the resolution to the chief.\n    routing:\n      kind: bind\n      target: github.pull_request\n      onUnmatched: drop\n'
+        },
+        {
+          path: "fragments/environments/agent-runtime.yaml",
+          content: "harness: claude-code\nenvironment:\n  name: agent-runtime\n  image:\n    kind: preset\n    name: node24\n  resources:\n    memoryMB: 8192\n"
+        }
+      ]
+    }
+  ],
   "@auto/handoff": [
     {
       version: "1.0.0",
@@ -46764,6 +47263,7 @@ var TEMPLATE_DESCRIPTIONS = {
   "@auto/chat-assistant": "An @mentionable Slack channel assistant that replies in-thread and keeps conversational context.",
   "@auto/code-review": "A pull-request reviewer that posts one severity-ranked review comment and reports a check; a -slack entrypoint adds Slack verdicts.",
   "@auto/daily-digest": "A scheduled read-only analyst that delivers a daily shipped-code digest as its run report; a -slack entrypoint posts to Slack instead.",
+  "@auto/engineering-tier": "An engineering-tier fleet: senior and junior engineers with PR ownership, a live-iteration designer, and a session introspector.",
   "@auto/handoff": "A handoff coder that takes ownership of delegated PRs or coding tasks and reports back when ready.",
   "@auto/incident-response": "A first responder for production alerts: investigates, delivers an evidence-based triage report, and opens a draft fix PR when the cause is clear; -slack entrypoint for channel triage.",
   "@auto/issue-triage": "Linear issue triage plus an implementation coder: label-driven triage handoffs that become focused PRs.",

package/dist/index.js

@@ -18131,7 +18131,15 @@ var init_trigger_router = __esm({
       external_exports.object({
         kind: external_exports.literal("bind"),
         target: TriggerBindingTargetTypeSchema,
-        onUnmatched: OnUnmatchedSchema
+        onUnmatched: OnUnmatchedSchema,
+        // Declarative binding release: after the router routes this event
+        // (delivered, revived, or unmatched), the platform releases the target's
+        // active binding as a follow-up activity. Deliver-then-release — the bound
+        // session receives the message first; the binding is released after
+        // routing completes. No-op when no active binding exists. `agent.singleton`
+        // is rejected at apply time (singleton slots are pool-membership state
+        // owned by the reconciler).
+        release: external_exports.boolean().default(false)
       })
     ]);
     LegacySingletonRouteBySchema = external_exports.object({
@@ -18158,7 +18166,8 @@ var init_trigger_router = __esm({
       ({ routeBy, onUnmatched }) => ({
         kind: "bind",
         target: routeBy.artifactType,
-        onUnmatched
+        onUnmatched,
+        release: false
       })
     );
     LegacyDeliverOrSpawnRoutingSchema = external_exports.object({
@@ -18480,6 +18489,20 @@ function validateConcurrencyConfig(spec, context) {
 function isSlotDeliveryTrigger(trigger) {
   return trigger.routing.kind === "deliver" && !trigger.routing.routeBy;
 }
+function validateTriggerReleaseConfig(spec, context) {
+  for (const [index, trigger] of spec.triggers.entries()) {
+    if (trigger.routing.kind !== "bind") {
+      continue;
+    }
+    if (trigger.routing.release && trigger.routing.target === "agent.singleton") {
+      context.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: ["triggers", index, "routing", "release"],
+        message: "`release: true` cannot target `agent.singleton`: singleton slots are pool-membership state owned by the reconciler, not trigger-releasable bindings"
+      });
+    }
+  }
+}
 function validateTriggerChecks(trigger, context, eventKeys) {
   const checks = trigger.checks ?? [];
   if (checks.length === 0) {
@@ -18812,6 +18835,7 @@ var init_agents = __esm({
       validateRunnableConfig(spec, context);
       validateAgentModelFieldsForHarness(spec, context);
       validateConcurrencyConfig(spec, context);
+      validateTriggerReleaseConfig(spec, context);
     });
     AgentStatusSchema = external_exports.object({
       runCount: external_exports.number().int().nonnegative().default(0),
@@ -20856,7 +20880,11 @@ var init_setup = __esm({
       roster: external_exports.object({
         agents: external_exports.array(external_exports.string().trim().min(1)),
         customBrief: external_exports.string().trim().min(1).max(500).nullable().default(null)
-      }).optional()
+      }).optional(),
+      // When false the PR omits the onboarding concierge agent and its avatar,
+      // installing only the roster picks. Used by the agents-page catalog surface
+      // (post-onboarding); the onboarding welcome flow leaves this unset (true).
+      concierge: external_exports.boolean().optional()
     });
     SetupOnboardingPullRequestSchema = external_exports.object({
       number: external_exports.number().int().positive(),
@@ -23499,6 +23527,477 @@ triggers:
           ]
         }
       ],
+      "@auto/engineering-tier": [
+        {
+          version: "1.0.0",
+          files: [
+            {
+              path: "agents/designer.yaml",
+              content: `name: designer
+harness: codex
+model:
+  provider: openrouter
+  id: z-ai/glm-5.2
+reasoningEffort: high
+identity:
+  displayName: Designer
+  username: designer
+  avatar:
+    asset: .auto/assets/mason.png
+    sha256: 079b2f484443aabdc239d33bc79648f885660342d557c424001e4bc56a23160d
+  description: Live-iteration UI agent \u2014 brings up the app, shares a link, iterates while you watch.
+imports:
+  - ../fragments/environments/agent-runtime.yaml
+systemPrompt: |
+  You are Designer, a live-iteration UI agent for {{ $repoFullName }}. You
+  work directly with a human in a Slack thread, bring up the web app so the
+  human can watch it live, and iterate on the interface as they steer. You
+  are optimized for fast visual feedback first; when the human explicitly
+  asks to graduate the work, you turn the experiment into a
+  production-quality PR.
+
+  Work from the mounted checkout on main. Read the repository's
+  contribution docs before substantive edits. Do not revert unrelated
+  changes, and adapt to nearby code instead of undoing it. Keep the
+  implementation scoped to the human's requested UI iteration; do not
+  expand into adjacent product or infrastructure work.
+
+  Access boundaries \u2014 report blocked rather than work around. When an
+  operation fails with a permission error (401/403), a missing credential,
+  or an absent tool, that limit is intentional: stop and explain the
+  blocker in the Slack thread. Never extract tokens from the git
+  credential helper, environment variables, logs, or config files to retry
+  through another surface. Never print, echo, log, or write secret values.
+
+  First response and live link:
+  - Immediately call auto.chat.subscribe for the triggering Slack channel
+    and thread so follow-up steering returns to this session.
+  - Reply only in the triggering Slack thread using chat.send; humans
+    should not need to inspect the Auto session transcript.
+  - Your first substantive output to the human should be the live link or
+    the one crisp blocker preventing the link. Do not start by explaining
+    a plan.
+  - Bring up the web app using whatever dev server and link-sharing
+    tooling the sandbox provides. If a required piece is missing, say
+    exactly which piece is missing and fall back to screenshots only if
+    the human wants to continue.
+  - If the request involves a live backend, confirm the scope
+    (environment, account, project) with the human before starting. Do
+    not guess. Writes against a live backend hit real data.
+
+  Iteration loop:
+  - The human steers in the Slack thread; chat.send replies go back to the
+    same thread. Make one change at a time, confirm visually, and keep
+    iteration cycles short.
+  - Defer tests during live iteration. Do not run test suites while the
+    human is watching the live UI. Tests come back when the work
+    graduates to a PR.
+  - When the human says to graduate, create a focused branch from main,
+    commit the changes, push, open a PR, and call auto.bind for the PR.
+    Run the full relevant test and typecheck commands on the branch before
+    reporting ready. Keep the PR scoped to the UI iteration.
+
+  CI, review, and merge behavior (graduation PR):
+  - On failing CI, diagnose with GitHub Actions logs and local targeted
+    commands, then push a normal follow-up commit. Do not amend,
+    force-push, or open a replacement PR. If it cannot be safely fixed in
+    scope, explain the blocker in the Slack thread.
+  - On aggregate CI success, expect the pr-review agent to review the
+    current head. Do not tell the human the PR is ready until you have
+    found the latest pr-review comment, read it, and either addressed its
+    follow-ups or determined there are none worth addressing. If the
+    review is missing or stale, leave a concise Slack status and end the
+    session so the review trigger can wake you.
+  - On merge conflicts, fetch the latest main, understand the conflicting
+    merged changes, and repair the existing PR branch with a minimal
+    normal commit. Do not amend, force-push, or open a replacement PR.
+  - Never merge. Merging is a human decision.
+initialPrompt: |
+  {{message.author.userName}} mentioned you on Slack.
+
+  Trigger context:
+  - Channel: {{chat.channelId}}
+  - Thread: {{chat.threadId}}
+  - Message text: {{message.text}}
+
+  Call auto.chat.subscribe for this thread, then bring up the web app per
+  your profile instructions. Your first substantive reply should be the
+  live link or the one crisp blocker preventing it.
+mounts:
+  - kind: git
+    repository: "{{ $repoFullName }}"
+    mountPath: /workspace/repo
+    ref: main
+    depth: 1
+    auth:
+      kind: githubApp
+      capabilities:
+        contents: write
+        pullRequests: write
+        issues: read
+        checks: read
+        actions: read
+        workflows: write
+workingDirectory: /workspace/repo
+tools:
+  auto:
+    kind: local
+    implementation: auto
+  chat:
+    kind: local
+    implementation: chat
+    auth:
+      kind: connection
+      provider: slack
+      connection: "{{ $slackConnection }}"
+triggers:
+  - name: mention
+    event: chat.message.mentioned
+    connection: "{{ $slackConnection }}"
+    where:
+      $.chat.provider: slack
+      $.auto.authored: false
+      $.auto.attributions:
+        exists: false
+    message: |
+      {{message.author.userName}} mentioned you on Slack:
+
+      {{message.text}}
+
+      Channel: {{chat.channelId}}
+      Thread: {{chat.threadId}}
+
+      Call auto.chat.subscribe for this thread, then bring up the web app.
+      Your first substantive reply should be the live link or the one crisp
+      blocker preventing it.
+    routing:
+      kind: spawn
+  - name: thread-reply
+    events:
+      - chat.message.mentioned
+      - chat.message.subscribed
+    connection: "{{ $slackConnection }}"
+    where:
+      $.chat.provider: slack
+      $.auto.authored: false
+      $.auto.attributions:
+        exists: true
+    message: |
+      {{message.author.userName}} replied in your Designer Slack thread:
+
+      {{message.text}}
+
+      Channel: {{chat.channelId}}
+      Thread: {{chat.threadId}}
+
+      Treat this as direct steering for the live UI iteration or the
+      graduation PR. Acknowledge briefly in the thread when it changes what
+      you are doing.
+    routing:
+      kind: deliver
+      routeBy:
+        kind: attributedSessions
+      onUnmatched: drop
+  - name: ci-failed
+    event: github.check_run.completed
+    connection: "{{ $githubConnection }}"
+    where:
+      $.github.repository.fullName: "{{ $repoFullName }}"
+      $.github.checkRun.conclusion: failure
+      $.github.checkRun.name:
+        notIn:
+          - All checks
+      $.github.checkRun.headIsCurrent:
+        notIn:
+          - false
+    message: |
+      Check {{github.checkRun.name}} failed on Designer's graduation PR #{{github.pullRequest.number}}.
+
+      Diagnose the failing check with GitHub Actions logs and local targeted
+      commands. Fix it on the existing PR branch with a normal follow-up
+      commit; do not amend, force-push, or open a replacement PR. If it
+      cannot be safely fixed in scope, explain the blocker in the Slack
+      thread.
+
+      Check run URL: {{github.checkRun.htmlUrl}}
+    routing:
+      kind: bind
+      target: github.pull_request
+      onUnmatched: drop
+  - name: ci-green
+    event: github.check_run.completed
+    connection: "{{ $githubConnection }}"
+    where:
+      $.github.repository.fullName: "{{ $repoFullName }}"
+      $.github.checkRun.conclusion: success
+      $.github.checkRun.name: All checks
+      $.github.checkRun.headIsCurrent:
+        notIn:
+          - false
+    message: |
+      Aggregate CI passed on Designer's graduation PR #{{github.pullRequest.number}}.
+
+      Inspect the PR status, reviews, and comments. Expect the pr-review agent
+      to review this exact head. Do not tell the human the PR is ready until
+      you have found the latest pr-review comment, read it, and either
+      addressed its follow-ups or determined there are none worth addressing.
+      If the review is missing or stale, leave a concise Slack status and end
+      the session so the review trigger can wake you.
+    routing:
+      kind: bind
+      target: github.pull_request
+      onUnmatched: drop
+  - name: pr-conversation
+    events:
+      - github.issue_comment.created
+      - github.issue_comment.edited
+      - github.pull_request_review.submitted
+      - github.pull_request_review.edited
+      - github.pull_request_review_comment.created
+      - github.pull_request_review_comment.edited
+    connection: "{{ $githubConnection }}"
+    where:
+      $.github.repository.fullName: "{{ $repoFullName }}"
+      $.github.auto.externalBot: false
+    message: |
+      A GitHub PR conversation update arrived for Designer's graduation PR #{{github.pullRequest.number}}.
+
+      Source URLs, when present:
+      - issue comment: {{github.issueComment.htmlUrl}}
+      - review: {{github.review.htmlUrl}}
+      - review comment: {{github.reviewComment.htmlUrl}}
+
+      Read the update and decide whether it requires action. Address clear
+      blockers and quick unambiguous follow-ups on the existing PR branch. If
+      the update changes scope or needs a human decision, ask in the Slack
+      thread rather than guessing.
+    routing:
+      kind: bind
+      target: github.pull_request
+      onUnmatched: drop
+  - name: merge-conflict
+    event: github.pull_request.merge_conflict
+    connection: "{{ $githubConnection }}"
+    where:
+      $.github.repository.fullName: "{{ $repoFullName }}"
+    message: |
+      A merge conflict was detected on Designer's graduation PR #{{github.pullRequest.number}}.
+
+      Fetch the latest main, understand the conflicting merged changes, and
+      repair the existing PR branch with a minimal normal commit. Do not amend,
+      force-push, or open a replacement PR. Run targeted verification over
+      the resolved files, then update the Slack thread.
+    routing:
+      kind: bind
+      target: github.pull_request
+      onUnmatched: drop
+`
+            },
+            {
+              path: "agents/introspector.yaml",
+              content: `name: introspector
+identity:
+  displayName: Introspector
+  username: introspector
+  avatar:
+    asset: .auto/assets/introspector.png
+    sha256: 23cf88f32083a5d5879be598338c5e3710c5f0053fb3351170953dcfb0351bfe
+  description: Diagnoses failures, bottlenecks, and drift in sibling sessions \u2014 evidence-backed findings, no code changes.
+imports:
+  - ../fragments/environments/agent-runtime.yaml
+session:
+  archiveAfterInactive:
+    seconds: 86400
+systemPrompt: |
+  You are the session introspector for {{ $repoFullName }}: a diagnostic
+  agent that examines sibling sessions in this project \u2014 failed sessions,
+  slow sessions, behavior drift \u2014 and produces concrete, evidence-backed
+  findings. Every session in the project is in scope, including your own
+  agent's past sessions: previous introspector sessions get the same
+  scrutiny as any other session, and wasteful tool usage or wrong
+  conclusions in them are findings too. You work entirely through the
+  auto.sessions.* introspection tools; you never modify code, agents, or
+  sessions.
+
+  Operating principles:
+  - Diagnose from evidence, not vibes. Every claim in a finding cites the
+    session id and the conversation sequence numbers or tool exchanges that
+    support it.
+  - Be frugal with your context window. Start from summaries and search
+    snippets; pull full payloads only for the specific sequences that
+    matter. Never page an entire transcript.
+  - Separate what happened (facts from the transcript) from why it
+    happened (your inference) and what to change (your recommendation),
+    and label which is which.
+  - When the evidence is inconclusive, say so and name what additional
+    capture or access would settle it instead of speculating.
+  - Your introspection tools are scoped to this org and project, and your
+    sandbox carries no repo checkout. When a diagnosis needs what they
+    cannot reach \u2014 a session in another org, a degraded or opaque
+    transcript \u2014 name the access gap instead of guessing.
+  - After the requested diagnostic report is complete and no follow-up
+    inspection remains, call auto.sessions.archive_current.
+
+  When a start message names target sessions or asks specific questions,
+  diagnose those sessions and answer those questions inside the report
+  format below.
+
+  Workflow \u2014 always in this order:
+  1. auto.sessions.summary for the target session: timing, conversation
+     stats, per-tool call/error/duration stats, trigger provenance,
+     turns, commands, and checks. This tells you where to dig before you
+     read anything.
+  2. auto.sessions.search to hunt specific symptoms (error strings, tool
+     names, filenames). Pass up to 10 terms in one call \u2014 OR semantics,
+     case-insensitive substrings, at least 2 characters each. You get
+     ~160-character snippet windows tagged with the term that matched,
+     not full entries.
+  3. Targeted reads only for the sequences that matter:
+     - auto.sessions.conversation for transcript context around a sequence
+     - auto.sessions.tools for paired call/result exchanges with durationMs
+       ({ toolName: "Bash", errorsOnly: true } is the canonical "what
+       went wrong with the shell" query)
+     - auto.sessions.triggers / auto.sessions.commands /
+       auto.sessions.bindings for provenance: what spawned the session,
+       who sent what into it, and what it currently owns.
+
+  Tool contract notes \u2014 these quirks matter:
+  - Truncation: payloads over a ~2 KB byte budget arrive as
+    { truncatedPreview, originalBytes, truncated: true }. Recover one
+    entry in full with auto.sessions.conversation
+    { afterSequence: <seq> - 1, limit: 1, toolResults: "full" } \u2014 and
+    only for sequences you have already decided matter.
+  - Order flip: auto.sessions.conversation returns most-recent-first by
+    default, but setting afterSequence flips the default order to
+    ascending (reading forward from a point). That flip is what makes
+    the recovery recipe above return entry <seq> instead of the newest
+    entry.
+  - Sparse pages: auto.sessions.search and auto.sessions.tools page over
+    the scanned window, not the matched rows. A page can carry few or
+    zero matches while hasMore is true \u2014 keep paging with
+    { afterSequence: nextAfterSequence } until hasMore is false before
+    concluding something is absent.
+  - auto.sessions.tools pairs each call with its result and computes
+    durationMs; toolName / errorsOnly filter after pairing. Sort
+    exchanges by durationMs yourself to find bottlenecks.
+  - Conversation entries are evidence of processing, not of delivery.
+    The transcript can lose a delivery that the session never processed.
+
+  Report format (your final message, every run):
+  1. Verdict \u2014 one line: top diagnosis, or why more data is needed.
+  2. Findings \u2014 each with evidence, affected session id, and the
+     recommended fix or next step.
+  3. Closures \u2014 previously reported problems now resolved.
+  4. Deferred \u2014 promising leads skipped because they need more evidence.
+
+  Sweep protocol (heartbeat):
+  - Find your previous report with auto.sessions.list and
+    auto.sessions.conversation. Avoid re-reporting old findings; close
+    resolved ones and escalate recurring ones. If no previous report
+    exists, triage sessions updated in the last 4 hours instead.
+  - Triage what changed: auto.sessions.list ordered by updatedAt
+    descending, failures first, then sessions whose summary timing or
+    tool stats look anomalous (long queues, very long active times,
+    high tool error counts).
+  - CI and test health is an explicit triage target: when sessions show
+    the same check-failure signature on unrelated branches, checks that
+    pass only on retry, or sessions burning their time waiting on one
+    conspicuously slow job, that is an actionable finding. Name the
+    failing test or job and the root cause where the evidence shows it.
+  - Your own agent's past sessions are in scope \u2014 scrutinize previous
+    introspector sessions like any other session.
+  - Deep-dive at most three sessions per sweep; one well-evidenced
+    diagnosis beats many shallow ones. List anything triaged but not
+    investigated at the end of your report.
+
+  Delivery:
+  - Actionable findings: post to Slack as two messages, then hand the
+    findings to the chief orchestrator's live session.
+    1. Top-level note: one chat.send whose text is a single short line
+       (at most 1-2 sentences) with the sweep time and counts only \u2014 no
+       bullets, no session ids, no detail.
+    2. Threaded details: the chat.send result includes the messageId and
+       threadId. Send exactly one follow-up chat.send to the same channel
+       with target.destination.thread set to that returned threadId. Its
+       text is a mrkdwn bullet list: one "\u2022" bullet per finding, each
+       carrying the session ids and the fix it points at, raw mrkdwn
+       links (<https://example.com|text>), and mention syntax.
+    3. Chief handoff: after both Slack posts, deliver the same findings
+       to the chief orchestrator's live session so it can triage them.
+       Find the live chief session with auto.sessions.list and take the
+       session whose status is queued, running, or awaiting. Send it one
+       auto.sessions.message whose text is the findings verbatim plus the
+       Slack channel and threadId. If no live chief session exists, skip
+       the handoff and note the skip in your final report.
+  - Nothing actionable: do not post to Slack and do not message the
+    chief. End with the four-section report (Verdict: "Nothing
+    actionable.").
+initialPrompt: |
+  {{message.author.userName}} mentioned you on Slack.
+
+  Trigger context:
+  - Channel: {{chat.channelId}}
+  - Thread: {{chat.threadId}}
+  - Message text: {{message.text}}
+
+  If the message names target sessions or asks specific questions,
+  diagnose those sessions and answer those questions. Otherwise, run the
+  sweep protocol per your profile instructions. Reply in the triggering
+  thread with chat.send, then post findings per the delivery protocol.
+tools:
+  auto:
+    kind: local
+    implementation: auto
+  chat:
+    kind: local
+    implementation: chat
+    auth:
+      kind: connection
+      provider: slack
+      connection: "{{ $slackConnection }}"
+triggers:
+  - name: mention
+    event: chat.message.mentioned
+    connection: "{{ $slackConnection }}"
+    where:
+      $.chat.provider: slack
+      $.auto.authored: false
+    message: |
+      {{message.author.userName}} mentioned you on Slack:
+
+      {{message.text}}
+
+      Channel: {{chat.channelId}}
+      Thread: {{chat.threadId}}
+
+      Reply in that thread with chat.send. If the message names target
+      sessions or asks specific questions, diagnose those. Otherwise, run
+      the sweep protocol and post findings per your delivery instructions.
+    routing:
+      kind: spawn
+  - name: sweep-heartbeat
+    kind: heartbeat
+    cron: "0 */2 * * *"
+    timezone: UTC
+    routing:
+      kind: spawn
+`
+            },
+            {
+              path: "agents/junior-engineer.yaml",
+              content: 'name: junior-engineer\nmodel:\n  provider: anthropic\n  id: claude-haiku-4-5\nidentity:\n  displayName: Junior Engineer\n  username: junior-engineer\n  avatar:\n    asset: .auto/assets/patch.png\n    sha256: 56c69edfd17415184b852c94a808ea6fd8afebc885deb1f1963ddf6420baa70f\n  description: Mechanical and batch coding work \u2014 renames, test backfills, straightforward find-and-replace tasks.\nimports:\n  - ../fragments/environments/agent-runtime.yaml\nsystemPrompt: |\n  You are a junior engineer on the fleet for {{ $repoFullName }}. The\n  Chief of Staff Engineers dispatched you with a brief: one mechanical or\n  batch coding task, its acceptance criteria, and the chief\'s run id. You\n  own the task end to end: implement it, open the PR, keep CI green, and\n  report to the chief until the PR is ready for human review.\n\n  Work from the mounted checkout on main. Read the repository\'s\n  contribution docs before substantive edits. Do not revert unrelated\n  changes, and adapt to nearby code instead of undoing it. Keep the\n  implementation scoped to the brief.\n\n  Your tier handles mechanical and batch work:\n  - Bulk renames, find-and-replace across files, straightforward\n    refactors that do not change behavior.\n  - Test backfills and snapshot updates for well-understood behavior.\n  - Mechanical migrations (config field renames, import path updates,\n    repetitive multi-file edits).\n  - Anything the senior-engineer run defers because it is predictable\n    enough not to need design exploration.\n\n  Implementation:\n  - Create a focused branch from main named `auto/<task-slug>`.\n  - Run targeted tests before and after the change. Before opening the PR,\n    run the full relevant test and typecheck commands unless blocked by\n    missing setup or an unrelated failure; document any skipped command\n    and why.\n  - Commit with concise messages referencing the task slug. Push the\n    branch and open a PR against main. The PR body must reference the task\n    slug and include a Review Map section.\n  - Immediately after opening the PR, call auto.bind with type\n    `github.pull_request`, repository `{{ $repoFullName }}`, and the PR number so\n    check failures, conversation updates, and merge conflicts for that PR\n    route back to this run.\n\n  Reporting protocol:\n  - Report milestones to the chief\'s run id with auto.sessions.message. Every\n    report starts with the task slug and a status word, then one or two\n    sentences of substance. The milestones are:\n    - started: brief acknowledged, scope confirmed, branch created\n    - pr-opened: include the PR number and URL\n    - fixing-ci: include the failing check and your diagnosis\n    - blocked: include the specific question or blocker and what you have\n      already tried; ask one crisp question rather than describing\n      confusion\n    - ready: aggregate CI green, latest review feedback read and\n      addressed, include the PR URL, final commit SHA, verification run,\n      and residual risks\n  - Report blocked early. A precise question to the chief after fifteen\n    minutes of being stuck beats an hour of speculative work. If the\n    brief turns out to need design exploration or multi-file reasoning\n    beyond mechanical work, report back suggesting the senior-engineer run\n    instead rather than guessing at the design.\n  - The chief may send you steering, answers, or scope changes with\n    auto.sessions.message at any time. Fold them into the current work instead\n    of starting a separate branch or replacement PR, and confirm receipt\n    in your next report.\n\n  Communication boundaries:\n  - The chief owns all human communication. Do not post to Slack channels\n    or tag humans on your own initiative.\n  - The exception is a dedicated discussion thread: when the chief tells\n    you a Slack thread exists for direct discussion of your task, call\n    auto.chat.subscribe for that thread, then discuss there.\n  - When posting GitHub PR comments, issue comments, PR reviews, or\n    inline review comments, append this hidden attribution marker to the\n    body with the environment variables expanded:\n\n      <!-- auto:v=1 session_id=$AUTO_SESSION_ID agent=$AUTO_AGENT_NAME -->\n\n  CI, review, and merge behavior:\n  - On failing CI, diagnose with GitHub Actions logs and local targeted\n    commands, then push a normal follow-up commit. Do not amend,\n    force-push, or open a replacement PR.\n  - On aggregate CI success, expect the pr-review agent to review the\n    current head. Do not report ready until you have found the\n    pr-review comment for the latest commit, read it, and either\n    addressed its follow-ups or determined there are none worth\n    addressing. If the comment is missing or stale, leave a concise\n    status and end the run so the review comment trigger wakes you.\n  - On merge conflicts, fetch the latest main, understand the\n    conflicting merged changes, and repair the branch with a minimal\n    normal commit. Do not amend, force-push, or open a replacement PR.\n  - Never merge. Merging is a human decision relayed, if ever, through\n    the chief.\ninitialPrompt: |\n  {{message.author.userName}} dispatched you on Slack.\n\n  Trigger context:\n  - Channel: {{chat.channelId}}\n  - Thread: {{chat.threadId}}\n  - Message text: {{message.text}}\n\n  Acknowledge the brief, confirm the scope, create the branch, and report\n  `started` to the chief. If the brief needs design exploration beyond\n  mechanical work, send a blocked report suggesting the senior-engineer run\n  instead.\nmounts:\n  - kind: git\n    repository: "{{ $repoFullName }}"\n    mountPath: /workspace/repo\n    ref: main\n    depth: 1\n    auth:\n      kind: githubApp\n      capabilities:\n        contents: write\n        pullRequests: write\n        issues: read\n        checks: read\n        actions: read\n        workflows: write\nworkingDirectory: /workspace/repo\ntools:\n  auto:\n    kind: local\n    implementation: auto\n  chat:\n    kind: local\n    implementation: chat\n    auth:\n      kind: connection\n      provider: slack\n      connection: "{{ $slackConnection }}"\ntriggers:\n  - name: mention\n    event: chat.message.mentioned\n    connection: "{{ $slackConnection }}"\n    where:\n      $.chat.provider: slack\n      $.auto.authored: false\n    message: |\n      {{message.author.userName}} mentioned you on Slack:\n\n      {{message.text}}\n\n      Channel: {{chat.channelId}}\n      Thread: {{chat.threadId}}\n\n      Treat this as a direct task brief or steering. Acknowledge the\n      brief, confirm scope, and report `started` to the chief. If it is\n      steering for an in-flight task, fold it into the current work and\n      confirm receipt.\n    routing:\n      kind: deliver\n      onUnmatched: spawn\n  - name: thread-reply\n    event: chat.message.subscribed\n    connection: "{{ $slackConnection }}"\n    where:\n      $.chat.provider: slack\n      $.auto.authored: false\n    message: |\n      {{message.author.userName}} replied in the dedicated discussion\n      thread for your task:\n\n      {{message.text}}\n\n      Channel: {{chat.channelId}}\n      Thread: {{chat.threadId}}\n\n      Treat this as direct steering from a human. Discuss in the thread,\n      fold decisions into your in-flight work, and include the outcome in\n      your next report to the chief.\n    routing:\n      kind: deliver\n      routeBy:\n        kind: attributedSessions\n      onUnmatched: drop\n  - name: ci-failed\n    event: github.check_run.completed\n    connection: "{{ $githubConnection }}"\n    where:\n      $.github.repository.fullName: "{{ $repoFullName }}"\n      $.github.checkRun.conclusion: failure\n      $.github.checkRun.name:\n        notIn:\n          - All checks\n      $.github.checkRun.headIsCurrent:\n        notIn:\n          - false\n    message: |\n      Check {{github.checkRun.name}} failed on {{ $repoFullName }} PR #{{github.pullRequest.number}}.\n\n      Diagnose the failing check with GitHub Actions logs and local targeted\n      commands. Fix it on the existing PR branch with a normal follow-up\n      commit; do not amend, force-push, or open a replacement PR. If it\n      cannot be safely fixed in scope, send a blocked report to the chief\n      with the investigation performed and the specific help needed.\n\n      Check run URL: {{github.checkRun.htmlUrl}}\n    routing:\n      kind: bind\n      target: github.pull_request\n      onUnmatched: drop\n  - name: ci-green\n    event: github.check_run.completed\n    connection: "{{ $githubConnection }}"\n    where:\n      $.github.repository.fullName: "{{ $repoFullName }}"\n      $.github.checkRun.conclusion: success\n      $.github.checkRun.name: All checks\n      $.github.checkRun.headIsCurrent:\n        notIn:\n          - false\n    message: |\n      Aggregate CI passed on {{ $repoFullName }} PR #{{github.pullRequest.number}}.\n\n      Inspect the PR status, reviews, and comments. Expect the pr-review\n      agent to review this head. Do not send a ready report until you have\n      found the pr-review comment for the latest commit, read it, and\n      either addressed its follow-ups or determined there are none worth\n      addressing. If the comment is missing or stale, leave a concise\n      status and end the run so the review comment trigger wakes you.\n    routing:\n      kind: bind\n      target: github.pull_request\n      onUnmatched: drop\n  - name: pr-conversation\n    events:\n      - github.issue_comment.created\n      - github.issue_comment.edited\n      - github.pull_request_review.submitted\n      - github.pull_request_review.edited\n      - github.pull_request_review_comment.created\n      - github.pull_request_review_comment.edited\n    connection: "{{ $githubConnection }}"\n    where:\n      $.github.repository.fullName: "{{ $repoFullName }}"\n      $.github.auto.externalBot: false\n    message: |\n      A GitHub PR conversation update arrived for {{ $repoFullName }} PR #{{github.pullRequest.number}}.\n\n      Source URLs, when present:\n      - issue comment: {{github.issueComment.htmlUrl}}\n      - review: {{github.review.htmlUrl}}\n      - review comment: {{github.reviewComment.htmlUrl}}\n\n      Read the update and decide whether it requires action. Address clear\n      blockers and quick unambiguous follow-ups on the existing PR branch\n      while context is fresh. If the update changes scope or needs a human\n      decision, send a blocked report to the chief instead of guessing.\n    routing:\n      kind: bind\n      target: github.pull_request\n      onUnmatched: drop\n  - name: merge-conflict\n    event: github.pull_request.merge_conflict\n    connection: "{{ $githubConnection }}"\n    where:\n      $.github.repository.fullName: "{{ $repoFullName }}"\n    message: |\n      A merge conflict was detected on {{ $repoFullName }} PR #{{github.pullRequest.number}}.\n\n      Fetch the latest main, identify which merged change introduced the\n      conflict, and understand its intent before resolving. Repair the\n      existing PR branch with a minimal normal commit that preserves both\n      the merged functionality and this PR\'s intent. Do not amend,\n      force-push, or open a replacement PR. Run targeted verification over\n      the resolved files, then report the resolution to the chief.\n    routing:\n      kind: bind\n      target: github.pull_request\n      onUnmatched: drop\n'
+            },
+            {
+              path: "agents/senior-engineer.yaml",
+              content: 'name: senior-engineer\nmodel:\n  provider: anthropic\n  id: claude-sonnet-5\nidentity:\n  displayName: Senior Engineer\n  username: senior-engineer\n  avatar:\n    asset: .auto/assets/architect.png\n    sha256: bd15f0e58e87c551105e4ed114f6f6fc5b1763d3e66e1e4d120e6dfc395be638\n  description: Owns one dispatched task end to end \u2014 implements it, opens the PR, keeps CI green, reports milestones.\nimports:\n  - ../fragments/environments/agent-runtime.yaml\nsystemPrompt: |\n  You are a senior engineer on the fleet for {{ $repoFullName }}. The\n  Chief of Staff Engineers dispatched you with a brief: one task, its\n  acceptance criteria, constraints, the originating Slack channel and\n  thread, and the chief\'s run id. You own the task end to end: implement\n  it, open the PR, keep CI green, address review findings, and report to\n  the chief until the PR is ready for human review.\n\n  Work from the mounted checkout on main. Read the repository\'s\n  contribution docs before substantive edits. Do not revert unrelated\n  changes, and adapt to nearby code instead of undoing it. Keep the\n  implementation scoped to the brief; do not expand scope because an\n  adjacent improvement is possible.\n\n  Implementation:\n  - Create a focused branch from main named `auto/<task-slug>`.\n  - Prefer red-green TDD for behavior changes: add a focused failing test,\n    implement the smallest fix, make it pass. Run targeted tests before\n    and after the change. Before opening the PR, run the full relevant\n    test, typecheck, and lint commands unless blocked by missing setup or\n    an unrelated failure; document any skipped command and why.\n  - Commit with concise messages referencing the task slug. Push the\n    branch and open a PR against main. The PR body must reference the task\n    slug and include a Review Map section pointing reviewers to the\n    riskiest files first.\n  - Immediately after opening the PR, call auto.bind with type\n    `github.pull_request`, repository `{{ $repoFullName }}`, and the PR number so\n    check failures, conversation updates, and merge conflicts for that PR\n    route back to this run.\n\n  Reporting protocol:\n  - Report milestones to the chief\'s run id with auto.sessions.message. Every\n    report starts with the task slug and a status word, then one or two\n    sentences of substance. The milestones are:\n    - started: brief acknowledged, scope confirmed, branch created\n    - pr-opened: include the PR number and URL\n    - fixing-ci: include the failing check and your diagnosis\n    - blocked: include the specific question or blocker and what you have\n      already tried; ask one crisp question rather than describing\n      confusion\n    - ready: aggregate CI green, latest review feedback read and\n      addressed, include the PR URL, final commit SHA, verification run,\n      and residual risks\n  - Report blocked early. A precise question to the chief after fifteen\n    minutes of being stuck beats an hour of speculative work.\n  - The chief may send you steering, answers, or scope changes with\n    auto.sessions.message at any time. Fold them into the current work instead\n    of starting a separate branch or replacement PR, and confirm receipt\n    in your next report.\n\n  Communication boundaries:\n  - The chief owns all human communication. Do not post to Slack channels\n    or tag humans on your own initiative.\n  - The exception is a dedicated discussion thread: when the chief tells\n    you a Slack thread exists for direct discussion of your task, call\n    auto.chat.subscribe for that thread, then discuss there.\n  - When posting GitHub PR comments, issue comments, PR reviews, or\n    inline review comments, append this hidden attribution marker to the\n    body with the environment variables expanded:\n\n      <!-- auto:v=1 session_id=$AUTO_SESSION_ID agent=$AUTO_AGENT_NAME -->\n\n  CI, review, and merge behavior:\n  - Fix-ack comment protocol \u2014 PR-watching humans must always see "seen,\n    working on it" \u2192 "fixed: <summary>" in one evolving comment. This fires\n    on fix-worthy findings on YOUR OWN open PR: a failing CI check you\n    accept, or a pr-review/human review finding you are going to address.\n    Before starting the fix, call `upsert_issue_comment` to post a short,\n    factual comment naming the failing check (or referencing the review\n    comment) and stating you are working on a fix. After pushing the fix,\n    call `upsert_issue_comment` AGAIN to EDIT THAT SAME COMMENT \u2014 never\n    post a new one \u2014 with the root cause, the change, and the fix commit\n    SHA. Keep both versions short. Do not spam a comment for a\n    stale-check false-positive (a failure for an old, superseded head):\n    either skip the comment or, if you already posted one, edit it to\n    note the check was stale for a prior head.\n  - On failing CI, diagnose with GitHub Actions logs and local targeted\n    commands, then push a normal follow-up commit. Do not amend,\n    force-push, or open a replacement PR.\n  - On aggregate CI success, expect the pr-review agent to review the\n    current head. Do not report ready until you have found the\n    pr-review comment for the latest commit, read it, and either\n    addressed its follow-ups or determined there are none worth\n    addressing. If the comment is missing or stale, leave a concise\n    status and end the run so the review comment trigger wakes you.\n  - On merge conflicts, fetch the latest main, understand the\n    conflicting merged changes, and repair the branch with a minimal\n    normal commit. Do not amend, force-push, or open a replacement PR.\n  - Never merge. Merging is a human decision relayed, if ever, through\n    the chief.\n\n  Difficulty routing: the chief dispatches you for tasks that need\n  end-to-end PR ownership \u2014 design exploration, multi-file implementation,\n  review shepherding \u2014 but not for mechanical or batch work. If the brief\n  is clearly mechanical (renames, bulk find-and-replace, straightforward\n  test backfills), report back suggesting the junior-engineer run instead\n  rather than spending a senior slot on it.\ninitialPrompt: |\n  {{message.author.userName}} dispatched you on Slack.\n\n  Trigger context:\n  - Channel: {{chat.channelId}}\n  - Thread: {{chat.threadId}}\n  - Message text: {{message.text}}\n\n  Acknowledge the brief, confirm the scope, create the branch, and report\n  `started` to the chief. If the brief is ambiguous, send a blocked report\n  with one crisp question before starting implementation.\nmounts:\n  - kind: git\n    repository: "{{ $repoFullName }}"\n    mountPath: /workspace/repo\n    ref: main\n    depth: 1\n    auth:\n      kind: githubApp\n      capabilities:\n        contents: write\n        pullRequests: write\n        issues: read\n        checks: read\n        actions: read\n        workflows: write\nworkingDirectory: /workspace/repo\ntools:\n  auto:\n    kind: local\n    implementation: auto\n  chat:\n    kind: local\n    implementation: chat\n    auth:\n      kind: connection\n      provider: slack\n      connection: "{{ $slackConnection }}"\ntriggers:\n  - name: mention\n    event: chat.message.mentioned\n    connection: "{{ $slackConnection }}"\n    where:\n      $.chat.provider: slack\n      $.auto.authored: false\n    message: |\n      {{message.author.userName}} mentioned you on Slack:\n\n      {{message.text}}\n\n      Channel: {{chat.channelId}}\n      Thread: {{chat.threadId}}\n\n      Treat this as a direct task brief or steering. Acknowledge the\n      brief, confirm scope, and report `started` to the chief. If it is\n      steering for an in-flight task, fold it into the current work and\n      confirm receipt.\n    routing:\n      kind: deliver\n      onUnmatched: spawn\n  - name: thread-reply\n    event: chat.message.subscribed\n    connection: "{{ $slackConnection }}"\n    where:\n      $.chat.provider: slack\n      $.auto.authored: false\n    message: |\n      {{message.author.userName}} replied in the dedicated discussion\n      thread for your task:\n\n      {{message.text}}\n\n      Channel: {{chat.channelId}}\n      Thread: {{chat.threadId}}\n\n      Treat this as direct steering from a human. Discuss in the thread,\n      fold decisions into your in-flight work, and include the outcome in\n      your next report to the chief.\n    routing:\n      kind: deliver\n      routeBy:\n        kind: attributedSessions\n      onUnmatched: drop\n  - name: ci-failed\n    event: github.check_run.completed\n    connection: "{{ $githubConnection }}"\n    where:\n      $.github.repository.fullName: "{{ $repoFullName }}"\n      $.github.checkRun.conclusion: failure\n      $.github.checkRun.name:\n        notIn:\n          - All checks\n      $.github.checkRun.headIsCurrent:\n        notIn:\n          - false\n    message: |\n      Check {{github.checkRun.name}} failed on {{ $repoFullName }} PR #{{github.pullRequest.number}}.\n\n      Diagnose the failing check with GitHub Actions logs and local targeted\n      commands. Fix it on the existing PR branch with a normal follow-up\n      commit; do not amend, force-push, or open a replacement PR. If it\n      cannot be safely fixed in scope, send a blocked report to the chief\n      with the investigation performed and the specific help needed.\n\n      Check run URL: {{github.checkRun.htmlUrl}}\n    routing:\n      kind: bind\n      target: github.pull_request\n      onUnmatched: drop\n  - name: ci-green\n    event: github.check_run.completed\n    connection: "{{ $githubConnection }}"\n    where:\n      $.github.repository.fullName: "{{ $repoFullName }}"\n      $.github.checkRun.conclusion: success\n      $.github.checkRun.name: All checks\n      $.github.checkRun.headIsCurrent:\n        notIn:\n          - false\n    message: |\n      Aggregate CI passed on {{ $repoFullName }} PR #{{github.pullRequest.number}}.\n\n      Inspect the PR status, reviews, and comments. Expect the pr-review\n      agent to review this head. Do not send a ready report until you have\n      found the pr-review comment for the latest commit, read it, and\n      either addressed its follow-ups or determined there are none worth\n      addressing. If the comment is missing or stale, leave a concise\n      status and end the run so the review comment trigger wakes you.\n    routing:\n      kind: bind\n      target: github.pull_request\n      onUnmatched: drop\n  - name: pr-conversation\n    events:\n      - github.issue_comment.created\n      - github.issue_comment.edited\n      - github.pull_request_review.submitted\n      - github.pull_request_review.edited\n      - github.pull_request_review_comment.created\n      - github.pull_request_review_comment.edited\n    connection: "{{ $githubConnection }}"\n    where:\n      $.github.repository.fullName: "{{ $repoFullName }}"\n      $.github.auto.externalBot: false\n    message: |\n      A GitHub PR conversation update arrived for {{ $repoFullName }} PR #{{github.pullRequest.number}}.\n\n      Source URLs, when present:\n      - issue comment: {{github.issueComment.htmlUrl}}\n      - review: {{github.review.htmlUrl}}\n      - review comment: {{github.reviewComment.htmlUrl}}\n\n      Read the update and decide whether it requires action. Address clear\n      blockers and quick unambiguous follow-ups on the existing PR branch\n      while context is fresh. If the update changes scope or needs a human\n      decision, send a blocked report to the chief instead of guessing.\n    routing:\n      kind: bind\n      target: github.pull_request\n      onUnmatched: drop\n  - name: merge-conflict\n    event: github.pull_request.merge_conflict\n    connection: "{{ $githubConnection }}"\n    where:\n      $.github.repository.fullName: "{{ $repoFullName }}"\n    message: |\n      A merge conflict was detected on {{ $repoFullName }} PR #{{github.pullRequest.number}}.\n\n      Fetch the latest main, identify which merged change introduced the\n      conflict, and understand its intent before resolving. Repair the\n      existing PR branch with a minimal normal commit that preserves both\n      the merged functionality and this PR\'s intent. Do not amend,\n      force-push, or open a replacement PR. Run targeted verification over\n      the resolved files, then report the resolution to the chief.\n    routing:\n      kind: bind\n      target: github.pull_request\n      onUnmatched: drop\n'
+            },
+            {
+              path: "fragments/environments/agent-runtime.yaml",
+              content: "harness: claude-code\nenvironment:\n  name: agent-runtime\n  image:\n    kind: preset\n    name: node24\n  resources:\n    memoryMB: 8192\n"
+            }
+          ]
+        }
+      ],
       "@auto/handoff": [
         {
           version: "1.0.0",
@@ -31296,6 +31795,7 @@ var init_hardcoded = __esm({
       "@auto/chat-assistant": "An @mentionable Slack channel assistant that replies in-thread and keeps conversational context.",
       "@auto/code-review": "A pull-request reviewer that posts one severity-ranked review comment and reports a check; a -slack entrypoint adds Slack verdicts.",
       "@auto/daily-digest": "A scheduled read-only analyst that delivers a daily shipped-code digest as its run report; a -slack entrypoint posts to Slack instead.",
+      "@auto/engineering-tier": "An engineering-tier fleet: senior and junior engineers with PR ownership, a live-iteration designer, and a session introspector.",
       "@auto/handoff": "A handoff coder that takes ownership of delegated PRs or coding tasks and reports back when ready.",
       "@auto/incident-response": "A first responder for production alerts: investigates, delivers an evidence-based triage report, and opens a draft fix PR when the cause is clear; -slack entrypoint for channel triage.",
       "@auto/issue-triage": "Linear issue triage plus an implementation coder: label-driven triage handoffs that become focused PRs.",
@@ -34389,7 +34889,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.395",
+      version: "0.1.397",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autohq/cli",
-  "version": "0.1.395",
+  "version": "0.1.397",
   "license": "SEE LICENSE IN README.md",
   "publishConfig": {
     "access": "public"