@autohq/cli 0.1.397 → 0.1.399

package/dist/agent-bridge.js

@@ -30819,7 +30819,7 @@ Object.assign(lookup, {
 // package.json
 var package_default = {
   name: "@autohq/cli",
-  version: "0.1.397",
+  version: "0.1.399",
   license: "SEE LICENSE IN README.md",
   publishConfig: {
     access: "public"
@@ -31832,6 +31832,12 @@ var ChatAttachmentSchema = external_exports.object({
   name: external_exports.string().trim().min(1).optional(),
   mimeType: external_exports.string().trim().min(1).optional(),
   size: external_exports.number().int().nonnegative().optional(),
+  /**
+   * Provider-internal file id (Slack file `id`). Stable across re-reads; used as
+   * the canonical reference for `chat.attachment_download` when present, since
+   * `url_private` can rotate on Slack-initiated file revisions.
+   */
+  fileId: external_exports.string().trim().min(1).optional(),
   /**
    * Provider file URL. May require provider credentials to fetch (Slack
    * `url_private` needs the installation bot token as a bearer header), so
@@ -31849,6 +31855,71 @@ var ChatHistoryMessageSchema = external_exports.object({
 var ChatHistoryToolOutputSchema = external_exports.object({
   messages: external_exports.array(ChatHistoryMessageSchema)
 });
+var ChatAttachmentDownloadAllowedMimeTypes = [
+  // Images
+  "image/png",
+  "image/jpeg",
+  "image/gif",
+  "image/webp",
+  // Documents
+  "application/pdf",
+  "text/markdown",
+  "text/plain",
+  // Archives
+  "application/zip",
+  "application/gzip",
+  "application/x-gzip",
+  "application/x-tar",
+  "application/x-compressed-tar",
+  // Video
+  "video/mp4",
+  "video/quicktime",
+  "video/webm"
+];
+var ChatAttachmentDownloadAllowedMimeTypeSchema = external_exports.enum(
+  ChatAttachmentDownloadAllowedMimeTypes
+);
+var ChatAttachmentDownloadMaxSizeBytesByType = {
+  // Images and small documents: 20 MB.
+  "image/png": 20 * 1024 * 1024,
+  "image/jpeg": 20 * 1024 * 1024,
+  "image/gif": 20 * 1024 * 1024,
+  "image/webp": 20 * 1024 * 1024,
+  "application/pdf": 20 * 1024 * 1024,
+  "text/markdown": 20 * 1024 * 1024,
+  "text/plain": 20 * 1024 * 1024,
+  // Archives: 100 MB.
+  "application/zip": 100 * 1024 * 1024,
+  "application/gzip": 100 * 1024 * 1024,
+  "application/x-gzip": 100 * 1024 * 1024,
+  "application/x-tar": 100 * 1024 * 1024,
+  "application/x-compressed-tar": 100 * 1024 * 1024,
+  // Video: 200 MB.
+  "video/mp4": 200 * 1024 * 1024,
+  "video/quicktime": 200 * 1024 * 1024,
+  "video/webm": 200 * 1024 * 1024
+};
+var ChatAttachmentDownloadMaxSizeBytes = 20 * 1024 * 1024;
+var ChatAttachmentDownloadToolInputSchema = external_exports.object({
+  target: ChatAddressSchema,
+  /** A message/file ref from `chat.history` or a trigger delivery's Attachment line. */
+  attachment: external_exports.object({
+    /** Provider file id (Slack `file.id`), the stable canonical reference. */
+    fileId: external_exports.string().trim().min(1),
+    mimeType: external_exports.string().trim().min(1),
+    size: external_exports.number().int().nonnegative().optional(),
+    name: external_exports.string().trim().min(1).optional()
+  })
+});
+var ChatAttachmentDownloadToolOutputSchema = external_exports.object({
+  /** Short-lived, signed URL the session curls from its sandbox to fetch the bytes. */
+  downloadUrl: external_exports.string().url(),
+  /** When the signed download URL expires (ISO 8601). */
+  expiresAt: external_exports.string().datetime(),
+  mimeType: external_exports.string().trim().min(1),
+  size: external_exports.number().int().nonnegative(),
+  filename: external_exports.string().trim().min(1)
+});
 var ChatIssueParticipantSchema = external_exports.object({
   id: external_exports.string().trim().min(1),
   name: external_exports.string().trim().min(1).optional(),
@@ -33716,6 +33787,54 @@ var SecretRevealResponseSchema = external_exports.object({
   value: external_exports.string()
 });
 
+// ../../packages/schemas/src/session-bindings.ts
+var BINDING_TARGET_TYPES = [
+  "github.pull_request",
+  "github.issue",
+  "slack.thread",
+  "chat.message",
+  "agent.singleton"
+];
+var TRIGGER_BINDING_TARGET_TYPES = [
+  "github.pull_request",
+  "github.issue",
+  "slack.thread",
+  "agent.singleton"
+];
+var SESSION_BINDING_SOURCES = [
+  "trigger_spawn",
+  "agent_tool",
+  "chat_send",
+  "system"
+];
+var SESSION_BINDING_STATUSES = ["active", "released"];
+var SESSION_BINDING_RELEASE_POLICIES = ["manual", "held"];
+var SESSION_BINDING_RELEASED_BY = [
+  "agent_tool",
+  "archive",
+  "trigger_release",
+  "operator",
+  "takeover"
+];
+var BindingTargetTypeSchema = external_exports.enum(BINDING_TARGET_TYPES);
+var TriggerBindingTargetTypeSchema = external_exports.enum(
+  TRIGGER_BINDING_TARGET_TYPES
+);
+var SessionBindingSourceSchema = external_exports.enum(SESSION_BINDING_SOURCES);
+var SessionBindingStatusSchema = external_exports.enum(SESSION_BINDING_STATUSES);
+var SessionBindingReleasePolicySchema = external_exports.enum(
+  SESSION_BINDING_RELEASE_POLICIES
+);
+var SessionBindingReleasedBySchema = external_exports.enum(
+  SESSION_BINDING_RELEASED_BY
+);
+var BindingTargetSchema = external_exports.object({
+  type: BindingTargetTypeSchema,
+  externalId: external_exports.string().min(1)
+});
+var BINDING_AUTO_BIND_VALUES = ["onAttributedEvent"];
+var BindingAutoBindSchema = external_exports.enum(BINDING_AUTO_BIND_VALUES);
+
 // ../../packages/schemas/src/tools.ts
 var REMOTE_MCP_TRANSPORTS = ["streamable_http"];
 var LOCAL_TOOL_IMPLEMENTATIONS = ["auto", "chat", "ping"];
@@ -33887,38 +34006,6 @@ var InlineAgentToolSchema = RemoteMcpToolSchema.extend({
 var AgentToolRefSchema = InlineAgentToolSchema;
 var AgentToolsSchema = external_exports.record(ToolAliasSchema, AgentToolRefSchema);
 
-// ../../packages/schemas/src/session-bindings.ts
-var BINDING_TARGET_TYPES = [
-  "github.pull_request",
-  "github.issue",
-  "slack.thread",
-  "chat.message",
-  "agent.singleton"
-];
-var TRIGGER_BINDING_TARGET_TYPES = [
-  "github.pull_request",
-  "github.issue",
-  "slack.thread",
-  "agent.singleton"
-];
-var SESSION_BINDING_SOURCES = [
-  "trigger_spawn",
-  "agent_tool",
-  "chat_send",
-  "system"
-];
-var SESSION_BINDING_STATUSES = ["active", "released"];
-var BindingTargetTypeSchema = external_exports.enum(BINDING_TARGET_TYPES);
-var TriggerBindingTargetTypeSchema = external_exports.enum(
-  TRIGGER_BINDING_TARGET_TYPES
-);
-var SessionBindingSourceSchema = external_exports.enum(SESSION_BINDING_SOURCES);
-var SessionBindingStatusSchema = external_exports.enum(SESSION_BINDING_STATUSES);
-var BindingTargetSchema = external_exports.object({
-  type: BindingTargetTypeSchema,
-  externalId: external_exports.string().min(1)
-});
-
 // ../../packages/schemas/src/trigger-router.ts
 var CANONICAL_ROUTE_BY_KINDS = [
   "allLiveSessions",
@@ -34406,6 +34493,31 @@ var AgentIdentitySchema = external_exports.object({
 }).strict().refine((identity) => Object.keys(identity).length > 0, {
   message: "Identity requires at least one field"
 });
+var BINDING_LIFECYCLE_VALUES = ["manual", "held"];
+var BindingLifecycleSpecSchema = external_exports.object({
+  lifecycle: external_exports.enum(BINDING_LIFECYCLE_VALUES).default("manual"),
+  bind: BindingAutoBindSchema.optional()
+}).strict();
+var AgentBindingsSchema = external_exports.record(external_exports.string(), BindingLifecycleSpecSchema).superRefine((bindings, context) => {
+  for (const key of Object.keys(bindings)) {
+    const parsed = BindingTargetTypeSchema.safeParse(key);
+    if (!parsed.success) {
+      context.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: [key],
+        message: `\`${key}\` is not a valid binding target type`
+      });
+      continue;
+    }
+    if (parsed.data === "agent.singleton") {
+      context.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: [key],
+        message: "`agent.singleton` is excluded from `bindings` constraints; the pool slot has its own release lifecycle"
+      });
+    }
+  }
+});
 var AgentSpecFieldsSchema = external_exports.object({
   harness: external_exports.enum(AGENT_HARNESSES).optional(),
   model: AgentModelSelectionSchema.optional(),
@@ -34423,6 +34535,7 @@ var AgentSpecFieldsSchema = external_exports.object({
   replace: AgentReplacePolicySchema.optional(),
   onReplace: external_exports.string().trim().min(1).max(2e4).optional(),
   manages: AgentManagesSchema.optional(),
+  bindings: AgentBindingsSchema.default({}),
   workingDirectory: external_exports.string().trim().min(1).optional(),
   tools: AgentToolsSchema.default({})
 });
@@ -34456,6 +34569,7 @@ var AgentApplySpecSchema = AgentSpecFieldsSchema.extend({
   validateRunnableConfig(spec, context);
   validateAgentModelFieldsForHarness(spec, context);
   validateConcurrencyConfig(spec, context);
+  validateBindingsConfig(spec, context);
   validateTriggerReleaseConfig(spec, context);
 });
 function validateConcurrencyConfig(spec, context) {
@@ -34495,6 +34609,35 @@ function validateConcurrencyConfig(spec, context) {
 function isSlotDeliveryTrigger(trigger) {
   return trigger.routing.kind === "deliver" && !trigger.routing.routeBy;
 }
+function validateBindingsConfig(spec, context) {
+  if (!spec.bindings) {
+    return;
+  }
+  const heldTargets = new Set(
+    Object.entries(spec.bindings).filter(([, config2]) => config2.lifecycle === "held").map(([target]) => target)
+  );
+  if (heldTargets.size === 0) {
+    return;
+  }
+  const releaseTargets = /* @__PURE__ */ new Set();
+  for (const trigger of spec.triggers) {
+    if (trigger.routing.kind !== "bind") {
+      continue;
+    }
+    if (trigger.routing.release) {
+      releaseTargets.add(trigger.routing.target);
+    }
+  }
+  for (const target of heldTargets) {
+    if (!releaseTargets.has(target)) {
+      context.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: ["bindings", target, "lifecycle"],
+        message: `\`lifecycle: held\` requires at least one bind-routed trigger on "${target}" with \`release: true\` so the platform can release it`
+      });
+    }
+  }
+}
 function validateTriggerReleaseConfig(spec, context) {
   for (const [index, trigger] of spec.triggers.entries()) {
     if (trigger.routing.kind !== "bind") {
@@ -35582,6 +35725,10 @@ var OrganizationBillingSettingsSchema = external_exports.object({
   // amount. Both must be set for auto-top-up to arm.
   autoTopUpThresholdUsd: NonNegativeUsdSchema.nullable(),
   autoTopUpAmountUsd: PositiveUsdSchema.nullable(),
+  // System-managed pause marker: set by the circuit breaker when the org's
+  // balance drops below its reserve, cleared by the credit-event resume hook.
+  // Never set by the settings PATCH (the request schema is strict without it).
+  billingPausedAt: external_exports.string().datetime().nullable(),
   // Stripe linkage, set by the payment flow (never by the settings PATCH):
   // the org's Stripe customer, and the saved card auto-top-up charges
   // off-session. A non-null payment method is what "card on file" means.
@@ -36239,6 +36386,8 @@ var RunBindingRecordSchema = external_exports.object({
   externalId: external_exports.string(),
   source: SessionBindingSourceSchema,
   status: SessionBindingStatusSchema,
+  releasePolicy: SessionBindingReleasePolicySchema,
+  releasedBy: SessionBindingReleasedBySchema.nullable(),
   payload: JsonValueSchema2.nullable(),
   createdAt: external_exports.string().datetime(),
   updatedAt: external_exports.string().datetime()
@@ -36374,9 +36523,12 @@ var RunSummarySchema = external_exports.object({
 
 // ../../packages/schemas/src/session-parks.ts
 var BILLING_SESSION_PARK_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
+var PROVIDER_OUTAGE_SESSION_PARK_TTL_MS = 6 * 60 * 60 * 1e3;
+var PROVIDER_OUTAGE_SESSION_PARK_REPROBE_MS = 5 * 6e4;
 var SESSION_PARK_REASON_KINDS = [
   "billing_insufficient_credits",
-  "billing_spending_limit_exceeded"
+  "billing_spending_limit_exceeded",
+  "provider_outage"
 ];
 var SESSION_PARK_RESUME_CONDITIONS = [
   "organization_credits_added",

package/dist/index.js

@@ -15538,7 +15538,7 @@ var init_auth = __esm({
 });
 
 // ../../packages/schemas/src/chat.ts
-var ChatMessageKindSchema, ChatMessageRefSchema, ChatToolBindingSchema, ChatMessageEventPayloadSchema, ChatReactionEventPayloadSchema, ChatMessageContentSchema, ChatThreadSelectorSchema, SlackChatDestinationSchema, LinearChatDestinationSchema, TelegramChatDestinationSchema, ChatDestinationSchema, SlackChatRecipientSchema, LinearChatRecipientSchema, TelegramChatRecipientSchema, ChatRecipientSchema, SlackChatAddressSchema, LinearChatAddressSchema, TelegramChatAddressSchema, ChatAddressSchema, ChatToolDefaultsSchema, ChatSendToolInputSchema, ChatSendToolOutputSchema, ChatHistoryToolInputSchema, ChatAttachmentSchema, ChatHistoryMessageSchema, ChatHistoryToolOutputSchema, ChatIssueParticipantSchema, ChatIssueNamedRefSchema, ChatIssueRefSchema, ChatIssueSchema, ChatIssueGetToolInputSchema, ChatIssueGetToolOutputSchema, ChatIssueUpdateToolInputSchema, ChatIssueUpdateToolOutputSchema, ChatReplyToolInputSchema, ChatReplyToolOutputSchema, ChatReactionToolInputSchema, ChatReactionToolOutputSchema, ChatSearchResultTypeSchema, ChatSearchToolInputSchema, ChatSearchWorkspaceSchema, SlackChatSearchResultSchema, ChatSearchResultSchema, ChatSearchToolOutputSchema;
+var ChatMessageKindSchema, ChatMessageRefSchema, ChatToolBindingSchema, ChatMessageEventPayloadSchema, ChatReactionEventPayloadSchema, ChatMessageContentSchema, ChatThreadSelectorSchema, SlackChatDestinationSchema, LinearChatDestinationSchema, TelegramChatDestinationSchema, ChatDestinationSchema, SlackChatRecipientSchema, LinearChatRecipientSchema, TelegramChatRecipientSchema, ChatRecipientSchema, SlackChatAddressSchema, LinearChatAddressSchema, TelegramChatAddressSchema, ChatAddressSchema, ChatToolDefaultsSchema, ChatSendToolInputSchema, ChatSendToolOutputSchema, ChatHistoryToolInputSchema, ChatAttachmentSchema, ChatHistoryMessageSchema, ChatHistoryToolOutputSchema, ChatAttachmentDownloadAllowedMimeTypes, ChatAttachmentDownloadAllowedMimeTypeSchema, ChatAttachmentDownloadMaxSizeBytesByType, ChatAttachmentDownloadMaxSizeBytes, ChatAttachmentDownloadToolInputSchema, ChatAttachmentDownloadToolOutputSchema, ChatIssueParticipantSchema, ChatIssueNamedRefSchema, ChatIssueRefSchema, ChatIssueSchema, ChatIssueGetToolInputSchema, ChatIssueGetToolOutputSchema, ChatIssueUpdateToolInputSchema, ChatIssueUpdateToolOutputSchema, ChatReplyToolInputSchema, ChatReplyToolOutputSchema, ChatReactionToolInputSchema, ChatReactionToolOutputSchema, ChatSearchResultTypeSchema, ChatSearchToolInputSchema, ChatSearchWorkspaceSchema, SlackChatSearchResultSchema, ChatSearchResultSchema, ChatSearchToolOutputSchema;
 var init_chat = __esm({
   "../../packages/schemas/src/chat.ts"() {
     "use strict";
@@ -15748,6 +15748,12 @@ var init_chat = __esm({
       name: external_exports.string().trim().min(1).optional(),
       mimeType: external_exports.string().trim().min(1).optional(),
       size: external_exports.number().int().nonnegative().optional(),
+      /**
+       * Provider-internal file id (Slack file `id`). Stable across re-reads; used as
+       * the canonical reference for `chat.attachment_download` when present, since
+       * `url_private` can rotate on Slack-initiated file revisions.
+       */
+      fileId: external_exports.string().trim().min(1).optional(),
       /**
        * Provider file URL. May require provider credentials to fetch (Slack
        * `url_private` needs the installation bot token as a bearer header), so
@@ -15765,6 +15771,71 @@ var init_chat = __esm({
     ChatHistoryToolOutputSchema = external_exports.object({
       messages: external_exports.array(ChatHistoryMessageSchema)
     });
+    ChatAttachmentDownloadAllowedMimeTypes = [
+      // Images
+      "image/png",
+      "image/jpeg",
+      "image/gif",
+      "image/webp",
+      // Documents
+      "application/pdf",
+      "text/markdown",
+      "text/plain",
+      // Archives
+      "application/zip",
+      "application/gzip",
+      "application/x-gzip",
+      "application/x-tar",
+      "application/x-compressed-tar",
+      // Video
+      "video/mp4",
+      "video/quicktime",
+      "video/webm"
+    ];
+    ChatAttachmentDownloadAllowedMimeTypeSchema = external_exports.enum(
+      ChatAttachmentDownloadAllowedMimeTypes
+    );
+    ChatAttachmentDownloadMaxSizeBytesByType = {
+      // Images and small documents: 20 MB.
+      "image/png": 20 * 1024 * 1024,
+      "image/jpeg": 20 * 1024 * 1024,
+      "image/gif": 20 * 1024 * 1024,
+      "image/webp": 20 * 1024 * 1024,
+      "application/pdf": 20 * 1024 * 1024,
+      "text/markdown": 20 * 1024 * 1024,
+      "text/plain": 20 * 1024 * 1024,
+      // Archives: 100 MB.
+      "application/zip": 100 * 1024 * 1024,
+      "application/gzip": 100 * 1024 * 1024,
+      "application/x-gzip": 100 * 1024 * 1024,
+      "application/x-tar": 100 * 1024 * 1024,
+      "application/x-compressed-tar": 100 * 1024 * 1024,
+      // Video: 200 MB.
+      "video/mp4": 200 * 1024 * 1024,
+      "video/quicktime": 200 * 1024 * 1024,
+      "video/webm": 200 * 1024 * 1024
+    };
+    ChatAttachmentDownloadMaxSizeBytes = 20 * 1024 * 1024;
+    ChatAttachmentDownloadToolInputSchema = external_exports.object({
+      target: ChatAddressSchema,
+      /** A message/file ref from `chat.history` or a trigger delivery's Attachment line. */
+      attachment: external_exports.object({
+        /** Provider file id (Slack `file.id`), the stable canonical reference. */
+        fileId: external_exports.string().trim().min(1),
+        mimeType: external_exports.string().trim().min(1),
+        size: external_exports.number().int().nonnegative().optional(),
+        name: external_exports.string().trim().min(1).optional()
+      })
+    });
+    ChatAttachmentDownloadToolOutputSchema = external_exports.object({
+      /** Short-lived, signed URL the session curls from its sandbox to fetch the bytes. */
+      downloadUrl: external_exports.string().url(),
+      /** When the signed download URL expires (ISO 8601). */
+      expiresAt: external_exports.string().datetime(),
+      mimeType: external_exports.string().trim().min(1),
+      size: external_exports.number().int().nonnegative(),
+      filename: external_exports.string().trim().min(1)
+    });
     ChatIssueParticipantSchema = external_exports.object({
       id: external_exports.string().trim().min(1),
       name: external_exports.string().trim().min(1).optional(),
@@ -17823,6 +17894,61 @@ var init_secrets = __esm({
   }
 });
 
+// ../../packages/schemas/src/session-bindings.ts
+var BINDING_TARGET_TYPES, TRIGGER_BINDING_TARGET_TYPES, SESSION_BINDING_SOURCES, SESSION_BINDING_STATUSES, SESSION_BINDING_RELEASE_POLICIES, SESSION_BINDING_RELEASED_BY, BindingTargetTypeSchema, TriggerBindingTargetTypeSchema, SessionBindingSourceSchema, SessionBindingStatusSchema, SessionBindingReleasePolicySchema, SessionBindingReleasedBySchema, BindingTargetSchema, BINDING_AUTO_BIND_VALUES, BindingAutoBindSchema;
+var init_session_bindings = __esm({
+  "../../packages/schemas/src/session-bindings.ts"() {
+    "use strict";
+    init_zod();
+    BINDING_TARGET_TYPES = [
+      "github.pull_request",
+      "github.issue",
+      "slack.thread",
+      "chat.message",
+      "agent.singleton"
+    ];
+    TRIGGER_BINDING_TARGET_TYPES = [
+      "github.pull_request",
+      "github.issue",
+      "slack.thread",
+      "agent.singleton"
+    ];
+    SESSION_BINDING_SOURCES = [
+      "trigger_spawn",
+      "agent_tool",
+      "chat_send",
+      "system"
+    ];
+    SESSION_BINDING_STATUSES = ["active", "released"];
+    SESSION_BINDING_RELEASE_POLICIES = ["manual", "held"];
+    SESSION_BINDING_RELEASED_BY = [
+      "agent_tool",
+      "archive",
+      "trigger_release",
+      "operator",
+      "takeover"
+    ];
+    BindingTargetTypeSchema = external_exports.enum(BINDING_TARGET_TYPES);
+    TriggerBindingTargetTypeSchema = external_exports.enum(
+      TRIGGER_BINDING_TARGET_TYPES
+    );
+    SessionBindingSourceSchema = external_exports.enum(SESSION_BINDING_SOURCES);
+    SessionBindingStatusSchema = external_exports.enum(SESSION_BINDING_STATUSES);
+    SessionBindingReleasePolicySchema = external_exports.enum(
+      SESSION_BINDING_RELEASE_POLICIES
+    );
+    SessionBindingReleasedBySchema = external_exports.enum(
+      SESSION_BINDING_RELEASED_BY
+    );
+    BindingTargetSchema = external_exports.object({
+      type: BindingTargetTypeSchema,
+      externalId: external_exports.string().min(1)
+    });
+    BINDING_AUTO_BIND_VALUES = ["onAttributedEvent"];
+    BindingAutoBindSchema = external_exports.enum(BINDING_AUTO_BIND_VALUES);
+  }
+});
+
 // ../../packages/schemas/src/tools.ts
 function remoteMcpUrlSchema(input) {
   return external_exports.string().trim().url().refine(
@@ -18005,45 +18131,6 @@ var init_tools = __esm({
   }
 });
 
-// ../../packages/schemas/src/session-bindings.ts
-var BINDING_TARGET_TYPES, TRIGGER_BINDING_TARGET_TYPES, SESSION_BINDING_SOURCES, SESSION_BINDING_STATUSES, BindingTargetTypeSchema, TriggerBindingTargetTypeSchema, SessionBindingSourceSchema, SessionBindingStatusSchema, BindingTargetSchema;
-var init_session_bindings = __esm({
-  "../../packages/schemas/src/session-bindings.ts"() {
-    "use strict";
-    init_zod();
-    BINDING_TARGET_TYPES = [
-      "github.pull_request",
-      "github.issue",
-      "slack.thread",
-      "chat.message",
-      "agent.singleton"
-    ];
-    TRIGGER_BINDING_TARGET_TYPES = [
-      "github.pull_request",
-      "github.issue",
-      "slack.thread",
-      "agent.singleton"
-    ];
-    SESSION_BINDING_SOURCES = [
-      "trigger_spawn",
-      "agent_tool",
-      "chat_send",
-      "system"
-    ];
-    SESSION_BINDING_STATUSES = ["active", "released"];
-    BindingTargetTypeSchema = external_exports.enum(BINDING_TARGET_TYPES);
-    TriggerBindingTargetTypeSchema = external_exports.enum(
-      TRIGGER_BINDING_TARGET_TYPES
-    );
-    SessionBindingSourceSchema = external_exports.enum(SESSION_BINDING_SOURCES);
-    SessionBindingStatusSchema = external_exports.enum(SESSION_BINDING_STATUSES);
-    BindingTargetSchema = external_exports.object({
-      type: BindingTargetTypeSchema,
-      externalId: external_exports.string().min(1)
-    });
-  }
-});
-
 // ../../packages/schemas/src/trigger-router.ts
 function normalizeLegacyHeartbeatTickWorkflowInput(input) {
   if (!input || typeof input !== "object" || Array.isArray(input)) {
@@ -18489,6 +18576,35 @@ function validateConcurrencyConfig(spec, context) {
 function isSlotDeliveryTrigger(trigger) {
   return trigger.routing.kind === "deliver" && !trigger.routing.routeBy;
 }
+function validateBindingsConfig(spec, context) {
+  if (!spec.bindings) {
+    return;
+  }
+  const heldTargets = new Set(
+    Object.entries(spec.bindings).filter(([, config2]) => config2.lifecycle === "held").map(([target]) => target)
+  );
+  if (heldTargets.size === 0) {
+    return;
+  }
+  const releaseTargets = /* @__PURE__ */ new Set();
+  for (const trigger of spec.triggers) {
+    if (trigger.routing.kind !== "bind") {
+      continue;
+    }
+    if (trigger.routing.release) {
+      releaseTargets.add(trigger.routing.target);
+    }
+  }
+  for (const target of heldTargets) {
+    if (!releaseTargets.has(target)) {
+      context.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: ["bindings", target, "lifecycle"],
+        message: `\`lifecycle: held\` requires at least one bind-routed trigger on "${target}" with \`release: true\` so the platform can release it`
+      });
+    }
+  }
+}
 function validateTriggerReleaseConfig(spec, context) {
   for (const [index, trigger] of spec.triggers.entries()) {
     if (trigger.routing.kind !== "bind") {
@@ -18626,7 +18742,7 @@ function isChatMessageEvent(trigger) {
 function hasFilterValue(trigger, path2, expected) {
   return trigger.where?.[path2] === expected;
 }
-var RESOURCE_KIND_AGENT, AGENT_HARNESSES, AgentHarnessSchema, TriggerFilterScalarSchema, TriggerFilterPathSchema, TriggerFilterClauseSchema, TriggerFilterSchema, TriggerCheckTimeoutSchema, AgentArchiveAfterInactiveSchema, AgentSessionPolicySchema, AgentConcurrencySchema, AgentReplacePolicySchema, AgentManagesSchema, TriggerEventSchema, TriggerEventsSchema, PAYLOAD_PREFIXED_TEMPLATE_TOKEN, TriggerChecksField, TriggerEventSourceFields, TriggerSchema, ApplyTriggerSchema, HeartbeatTriggerSchema, ApplyHeartbeatTriggerSchema, TriggerDefinitionSchema, ApplyTriggerDefinitionSchema, TriggersSchema, ApplyTriggersSchema, AVATAR_ASSET_EXTENSIONS, MAX_AVATAR_ASSET_BYTES, MIN_AVATAR_ASSET_DIMENSION_PX, MAX_AVATAR_ASSET_DIMENSION_PX, PNG_SIGNATURE, AGENT_IDENTITY_DESCRIPTION_MAX_LENGTH, SHA256_HEX_PATTERN, AgentIdentitySchema, AgentSpecFieldsSchema, AgentSpecSchema, AgentApplySpecSchema, AgentStatusSchema, AgentResourceSchema, AgentApplyRequestSchema, ApplyTriggerReceiptSchema, AgentApplyResponseSchema, AGENT_TELEGRAM_IDENTITY_STATUSES, AgentTelegramIdentityStatusSchema, AgentPresenceIdentitySchema, AgentPresenceResponseSchema, AgentPresenceConnectRequestSchema, AgentPresenceConnectPendingSchema, AgentPresenceConnectResponseSchema, AgentPresenceIconRequestSchema, AgentPresenceIconResponseSchema, AgentPresenceCompleteResponseSchema;
+var RESOURCE_KIND_AGENT, AGENT_HARNESSES, AgentHarnessSchema, TriggerFilterScalarSchema, TriggerFilterPathSchema, TriggerFilterClauseSchema, TriggerFilterSchema, TriggerCheckTimeoutSchema, AgentArchiveAfterInactiveSchema, AgentSessionPolicySchema, AgentConcurrencySchema, AgentReplacePolicySchema, AgentManagesSchema, TriggerEventSchema, TriggerEventsSchema, PAYLOAD_PREFIXED_TEMPLATE_TOKEN, TriggerChecksField, TriggerEventSourceFields, TriggerSchema, ApplyTriggerSchema, HeartbeatTriggerSchema, ApplyHeartbeatTriggerSchema, TriggerDefinitionSchema, ApplyTriggerDefinitionSchema, TriggersSchema, ApplyTriggersSchema, AVATAR_ASSET_EXTENSIONS, MAX_AVATAR_ASSET_BYTES, MIN_AVATAR_ASSET_DIMENSION_PX, MAX_AVATAR_ASSET_DIMENSION_PX, PNG_SIGNATURE, AGENT_IDENTITY_DESCRIPTION_MAX_LENGTH, SHA256_HEX_PATTERN, AgentIdentitySchema, BINDING_LIFECYCLE_VALUES, BindingLifecycleSpecSchema, AgentBindingsSchema, AgentSpecFieldsSchema, AgentSpecSchema, AgentApplySpecSchema, AgentStatusSchema, AgentResourceSchema, AgentApplyRequestSchema, ApplyTriggerReceiptSchema, AgentApplyResponseSchema, AGENT_TELEGRAM_IDENTITY_STATUSES, AgentTelegramIdentityStatusSchema, AgentPresenceIdentitySchema, AgentPresenceResponseSchema, AgentPresenceConnectRequestSchema, AgentPresenceConnectPendingSchema, AgentPresenceConnectResponseSchema, AgentPresenceIconRequestSchema, AgentPresenceIconResponseSchema, AgentPresenceCompleteResponseSchema;
 var init_agents = __esm({
   "../../packages/schemas/src/agents.ts"() {
     "use strict";
@@ -18637,6 +18753,7 @@ var init_agents = __esm({
     init_primitives();
     init_resources();
     init_secrets();
+    init_session_bindings();
     init_tools();
     init_trigger_router();
     RESOURCE_KIND_AGENT = "agent";
@@ -18801,6 +18918,31 @@ var init_agents = __esm({
     }).strict().refine((identity2) => Object.keys(identity2).length > 0, {
       message: "Identity requires at least one field"
     });
+    BINDING_LIFECYCLE_VALUES = ["manual", "held"];
+    BindingLifecycleSpecSchema = external_exports.object({
+      lifecycle: external_exports.enum(BINDING_LIFECYCLE_VALUES).default("manual"),
+      bind: BindingAutoBindSchema.optional()
+    }).strict();
+    AgentBindingsSchema = external_exports.record(external_exports.string(), BindingLifecycleSpecSchema).superRefine((bindings, context) => {
+      for (const key of Object.keys(bindings)) {
+        const parsed = BindingTargetTypeSchema.safeParse(key);
+        if (!parsed.success) {
+          context.addIssue({
+            code: external_exports.ZodIssueCode.custom,
+            path: [key],
+            message: `\`${key}\` is not a valid binding target type`
+          });
+          continue;
+        }
+        if (parsed.data === "agent.singleton") {
+          context.addIssue({
+            code: external_exports.ZodIssueCode.custom,
+            path: [key],
+            message: "`agent.singleton` is excluded from `bindings` constraints; the pool slot has its own release lifecycle"
+          });
+        }
+      }
+    });
     AgentSpecFieldsSchema = external_exports.object({
       harness: external_exports.enum(AGENT_HARNESSES).optional(),
       model: AgentModelSelectionSchema.optional(),
@@ -18818,6 +18960,7 @@ var init_agents = __esm({
       replace: AgentReplacePolicySchema.optional(),
       onReplace: external_exports.string().trim().min(1).max(2e4).optional(),
       manages: AgentManagesSchema.optional(),
+      bindings: AgentBindingsSchema.default({}),
       workingDirectory: external_exports.string().trim().min(1).optional(),
       tools: AgentToolsSchema.default({})
     });
@@ -18835,6 +18978,7 @@ var init_agents = __esm({
       validateRunnableConfig(spec, context);
       validateAgentModelFieldsForHarness(spec, context);
       validateConcurrencyConfig(spec, context);
+      validateBindingsConfig(spec, context);
       validateTriggerReleaseConfig(spec, context);
     });
     AgentStatusSchema = external_exports.object({
@@ -19894,6 +20038,10 @@ var init_billing = __esm({
       // amount. Both must be set for auto-top-up to arm.
       autoTopUpThresholdUsd: NonNegativeUsdSchema.nullable(),
       autoTopUpAmountUsd: PositiveUsdSchema.nullable(),
+      // System-managed pause marker: set by the circuit breaker when the org's
+      // balance drops below its reserve, cleared by the credit-event resume hook.
+      // Never set by the settings PATCH (the request schema is strict without it).
+      billingPausedAt: external_exports.string().datetime().nullable(),
       // Stripe linkage, set by the payment flow (never by the settings PATCH):
       // the org's Stripe customer, and the saved card auto-top-up charges
       // off-session. A non-null payment method is what "card on file" means.
@@ -20636,6 +20784,8 @@ var init_session_introspection = __esm({
       externalId: external_exports.string(),
       source: SessionBindingSourceSchema,
       status: SessionBindingStatusSchema,
+      releasePolicy: SessionBindingReleasePolicySchema,
+      releasedBy: SessionBindingReleasedBySchema.nullable(),
       payload: JsonValueSchema.nullable(),
       createdAt: external_exports.string().datetime(),
       updatedAt: external_exports.string().datetime()
@@ -20772,16 +20922,19 @@ var init_session_introspection = __esm({
 });
 
 // ../../packages/schemas/src/session-parks.ts
-var BILLING_SESSION_PARK_TTL_MS, SESSION_PARK_REASON_KINDS, SESSION_PARK_RESUME_CONDITIONS, SESSION_PARK_RESOLUTIONS, SessionParkReasonKindSchema, SessionParkResumeConditionSchema, SessionParkResolutionSchema, SessionParkRecordSchema;
+var BILLING_SESSION_PARK_TTL_MS, PROVIDER_OUTAGE_SESSION_PARK_TTL_MS, PROVIDER_OUTAGE_SESSION_PARK_REPROBE_MS, SESSION_PARK_REASON_KINDS, SESSION_PARK_RESUME_CONDITIONS, SESSION_PARK_RESOLUTIONS, SessionParkReasonKindSchema, SessionParkResumeConditionSchema, SessionParkResolutionSchema, SessionParkRecordSchema;
 var init_session_parks = __esm({
   "../../packages/schemas/src/session-parks.ts"() {
     "use strict";
     init_zod();
     init_ids();
     BILLING_SESSION_PARK_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
+    PROVIDER_OUTAGE_SESSION_PARK_TTL_MS = 6 * 60 * 60 * 1e3;
+    PROVIDER_OUTAGE_SESSION_PARK_REPROBE_MS = 5 * 6e4;
     SESSION_PARK_REASON_KINDS = [
       "billing_insufficient_credits",
-      "billing_spending_limit_exceeded"
+      "billing_spending_limit_exceeded",
+      "provider_outage"
     ];
     SESSION_PARK_RESUME_CONDITIONS = [
       "organization_credits_added",
@@ -34889,7 +35042,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.397",
+      version: "0.1.399",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autohq/cli",
-  "version": "0.1.397",
+  "version": "0.1.399",
   "license": "SEE LICENSE IN README.md",
   "publishConfig": {
     "access": "public"