@autohq/cli 0.1.399 → 0.1.401

package/dist/agent-bridge.js

@@ -30819,7 +30819,7 @@ Object.assign(lookup, {
 // package.json
 var package_default = {
   name: "@autohq/cli",
-  version: "0.1.399",
+  version: "0.1.401",
   license: "SEE LICENSE IN README.md",
   publishConfig: {
     access: "public"
@@ -30912,6 +30912,7 @@ var AgentBridgeOutputAckTimeoutError = class extends Error {
     this.name = "AgentBridgeOutputAckTimeoutError";
   }
 };
+var AGENT_BRIDGE_TERMINAL_AUTH_DRAIN_TIMEOUT_MS = 6e4;
 async function runAgentBridgeSocket(options) {
   const socket = lookup(`${options.bridgeUrl}${RUNTIME_BRIDGE_NAMESPACE}`, {
     auth: {
@@ -30923,6 +30924,13 @@ async function runAgentBridgeSocket(options) {
   });
   let handler = null;
   const reconnectLoop = createReconnectLoop(socket);
+  const terminalAuthDrain = createTerminalAuthDrainController({
+    socket,
+    token: options.token,
+    getHandler: () => handler,
+    writeOutput: options.writeOutput,
+    runtimeLogger: options.runtimeLogger
+  });
   let hasConnected = false;
   await new Promise((resolve2, reject) => {
     const shutdown = () => {
@@ -30934,15 +30942,23 @@ async function runAgentBridgeSocket(options) {
     process.once("SIGINT", shutdown);
     process.once("SIGTERM", shutdown);
     socket.on("connect_error", (error51) => {
+      if (terminalAuthDrain.handleConnectError(error51)) {
+        return;
+      }
       if (!hasConnected) {
         reject(error51);
         return;
       }
       if (isTerminalAuthError(error51)) {
         reconnectLoop.stop();
-        handler?.shutdown?.();
-        socket.disconnect();
-        reject(new AgentBridgeTerminalAuthError(error51.message));
+        void terminalAuthDrain.begin().catch((drainError) => {
+          options.writeOutput?.(
+            `agent_bridge_terminal_auth_drain_failed error=${errorMessage(drainError)}`
+          );
+        }).finally(() => {
+          socket.disconnect();
+          reject(new AgentBridgeTerminalAuthError(error51.message));
+        });
         return;
       }
       options.writeOutput?.(
@@ -30955,6 +30971,9 @@ async function runAgentBridgeSocket(options) {
         return;
       }
       options.writeOutput?.(`agent_bridge_disconnected reason=${reason}`);
+      if (terminalAuthDrain.suppressesReconnect()) {
+        return;
+      }
       reconnectLoop.start();
     });
     socket.on(
@@ -30993,6 +31012,9 @@ async function runAgentBridgeSocket(options) {
       })
     );
     socket.on(RUNTIME_BRIDGE_CONNECTED_EVENT, (rawContext) => {
+      if (terminalAuthDrain.handleConnected(rawContext)) {
+        return;
+      }
       const context = RuntimeBridgeConnectedPayloadSchema.parse(rawContext);
       if (!handler) {
         reject(new Error("Bridge connected before bootstrap completed"));
@@ -31237,6 +31259,113 @@ function createReconnectLoop(socket) {
   };
   return { start, stop };
 }
+function createTerminalAuthDrainController(input) {
+  let terminalAuthExit = false;
+  let state = null;
+  const settle = (callback) => {
+    const current = state;
+    if (!current) {
+      return;
+    }
+    clearTimeout(current.timeout);
+    state = null;
+    callback();
+  };
+  const begin = () => {
+    terminalAuthExit = true;
+    if (state) {
+      return state.promise;
+    }
+    const handler = input.getHandler();
+    handler?.shutdown?.();
+    if (!handler) {
+      input.writeOutput?.(
+        "agent_bridge_terminal_auth_drain_skipped reason=no_handler"
+      );
+      return Promise.resolve();
+    }
+    const startedAt = Date.now();
+    let resolveDrain = () => {
+    };
+    let rejectDrain = () => {
+    };
+    const promise2 = new Promise((resolve2, reject) => {
+      resolveDrain = resolve2;
+      rejectDrain = reject;
+    });
+    const timeout = setTimeout(() => {
+      settle(() => {
+        rejectDrain(
+          new Error(
+            `Timed out draining pending bridge output after terminal auth in ${AGENT_BRIDGE_TERMINAL_AUTH_DRAIN_TIMEOUT_MS}ms`
+          )
+        );
+      });
+    }, AGENT_BRIDGE_TERMINAL_AUTH_DRAIN_TIMEOUT_MS);
+    timeout.unref?.();
+    state = {
+      promise: promise2,
+      reject: rejectDrain,
+      resolve: resolveDrain,
+      startedAt,
+      timeout
+    };
+    input.writeOutput?.("agent_bridge_terminal_auth_drain_started");
+    input.runtimeLogger?.warn("agent_bridge_terminal_auth_drain_started");
+    input.socket.auth = { token: input.token, terminalDrain: true };
+    input.socket.connect();
+    return promise2;
+  };
+  const handleConnected = (rawContext) => {
+    const current = state;
+    if (!current) {
+      return false;
+    }
+    void (async () => {
+      const context = RuntimeBridgeConnectedPayloadSchema.parse(rawContext);
+      input.writeOutput?.(
+        `agent_bridge_terminal_auth_drain_connected session_id=${context.sessionId} runtime_id=${context.runtimeId} bridge_lease_id=${context.bridgeLeaseId}`
+      );
+      input.runtimeLogger?.warn("agent_bridge_terminal_auth_drain_connected", {
+        session_id: context.sessionId,
+        runtime_id: context.runtimeId,
+        bridge_lease_id: context.bridgeLeaseId
+      });
+      const handler = input.getHandler();
+      if (!handler) {
+        throw new Error("Terminal auth drain connected without a handler");
+      }
+      await handler.replayPendingOutputs();
+      settle(() => {
+        input.writeOutput?.(
+          `agent_bridge_terminal_auth_drain_completed duration_ms=${Date.now() - current.startedAt}`
+        );
+        input.runtimeLogger?.warn(
+          "agent_bridge_terminal_auth_drain_completed",
+          { duration_ms: Date.now() - current.startedAt }
+        );
+        current.resolve();
+      });
+    })().catch((error51) => {
+      settle(() => current.reject(error51));
+    });
+    return true;
+  };
+  const handleConnectError = (error51) => {
+    const current = state;
+    if (!current) {
+      return false;
+    }
+    settle(() => current.reject(error51));
+    return true;
+  };
+  return {
+    begin,
+    handleConnected,
+    handleConnectError,
+    suppressesReconnect: () => terminalAuthExit || state !== null
+  };
+}
 function bridgeForwardingHeaders(url3) {
   if (!isNgrokFreeUrl(url3)) {
     return {};
@@ -33809,6 +33938,7 @@ var SESSION_BINDING_SOURCES = [
 ];
 var SESSION_BINDING_STATUSES = ["active", "released"];
 var SESSION_BINDING_RELEASE_POLICIES = ["manual", "held"];
+var SESSION_BINDING_CONTINUITIES = ["session", "agent"];
 var SESSION_BINDING_RELEASED_BY = [
   "agent_tool",
   "archive",
@@ -33825,6 +33955,9 @@ var SessionBindingStatusSchema = external_exports.enum(SESSION_BINDING_STATUSES)
 var SessionBindingReleasePolicySchema = external_exports.enum(
   SESSION_BINDING_RELEASE_POLICIES
 );
+var SessionBindingContinuitySchema = external_exports.enum(
+  SESSION_BINDING_CONTINUITIES
+);
 var SessionBindingReleasedBySchema = external_exports.enum(
   SESSION_BINDING_RELEASED_BY
 );
@@ -34496,6 +34629,7 @@ var AgentIdentitySchema = external_exports.object({
 var BINDING_LIFECYCLE_VALUES = ["manual", "held"];
 var BindingLifecycleSpecSchema = external_exports.object({
   lifecycle: external_exports.enum(BINDING_LIFECYCLE_VALUES).default("manual"),
+  continuity: external_exports.enum(["session", "agent"]).default("session"),
   bind: BindingAutoBindSchema.optional()
 }).strict();
 var AgentBindingsSchema = external_exports.record(external_exports.string(), BindingLifecycleSpecSchema).superRefine((bindings, context) => {
@@ -35083,6 +35217,13 @@ var SessionUploadAttachmentRefSchema = external_exports.object({
   mimeType: external_exports.string().trim().min(1),
   sizeBytes: external_exports.number().int().nonnegative()
 });
+var StagedSessionUploadRefSchema = external_exports.object({
+  id: external_exports.string().trim().min(1),
+  stagedStorageKey: external_exports.string().trim().min(1),
+  filename: external_exports.string().trim().min(1),
+  mimeType: external_exports.string().trim().min(1),
+  sizeBytes: external_exports.number().int().nonnegative()
+});
 var SessionUploadDownloadUrlResponseSchema = external_exports.object({
   downloadUrl: external_exports.string().url(),
   expiresAt: external_exports.string().datetime(),
@@ -35306,7 +35447,13 @@ var RunStartWithMessageCommandPayloadSchema = external_exports.object({
   kind: external_exports.literal("startWithMessage"),
   message: external_exports.string().trim().min(1),
   model: AgentModelSelectionSchema.optional(),
-  reasoningEffort: AgentReasoningEffortSchema.optional()
+  reasoningEffort: AgentReasoningEffortSchema.optional(),
+  // File uploads claimed from the pre-session staging area (FAB composer).
+  // The session-creation endpoint copies each staged blob to a session-
+  // scoped key and passes the claimed refs here so the start command's
+  // delivery appends attachment download lines — the same path as a normal
+  // message command. Optional so existing callers stay valid.
+  attachments: external_exports.array(SessionUploadAttachmentRefSchema).optional()
 }).strict();
 var SessionPersistedCommandPayloadSchema = external_exports.union([
   RunMessageCommandPayloadSchema,
@@ -35483,7 +35630,17 @@ var ManualSessionRequestSchema = external_exports.object({
    * session's one idempotent start command and never renders as a user chat
    * bubble; the agent's greeting is the first visible content.
    */
-  kickoff: external_exports.boolean().optional()
+  kickoff: external_exports.boolean().optional(),
+  /**
+   * Staged (pre-session) file uploads to claim for the session's initial
+   * message. Each ref's `stagedStorageKey` points at a blob uploaded before
+   * the session existed (the FAB composer flow); the session-creation
+   * endpoint copies each to a session-scoped key and attaches the resulting
+   * `SessionUploadAttachmentRef` to the start command so the initial message
+   * carries the files end-to-end — the same delivery path as a normal
+   * session-composer attachment.
+   */
+  attachments: external_exports.array(StagedSessionUploadRefSchema).optional()
 });
 var SessionArchiveRequestSchema = external_exports.object({
   archived: external_exports.boolean()
@@ -36387,6 +36544,7 @@ var RunBindingRecordSchema = external_exports.object({
   source: SessionBindingSourceSchema,
   status: SessionBindingStatusSchema,
   releasePolicy: SessionBindingReleasePolicySchema,
+  continuity: SessionBindingContinuitySchema,
   releasedBy: SessionBindingReleasedBySchema.nullable(),
   payload: JsonValueSchema2.nullable(),
   createdAt: external_exports.string().datetime(),

package/dist/index.js

@@ -17895,7 +17895,7 @@ var init_secrets = __esm({
 });
 
 // ../../packages/schemas/src/session-bindings.ts
-var BINDING_TARGET_TYPES, TRIGGER_BINDING_TARGET_TYPES, SESSION_BINDING_SOURCES, SESSION_BINDING_STATUSES, SESSION_BINDING_RELEASE_POLICIES, SESSION_BINDING_RELEASED_BY, BindingTargetTypeSchema, TriggerBindingTargetTypeSchema, SessionBindingSourceSchema, SessionBindingStatusSchema, SessionBindingReleasePolicySchema, SessionBindingReleasedBySchema, BindingTargetSchema, BINDING_AUTO_BIND_VALUES, BindingAutoBindSchema;
+var BINDING_TARGET_TYPES, TRIGGER_BINDING_TARGET_TYPES, SESSION_BINDING_SOURCES, SESSION_BINDING_STATUSES, SESSION_BINDING_RELEASE_POLICIES, SESSION_BINDING_CONTINUITIES, SESSION_BINDING_RELEASED_BY, BindingTargetTypeSchema, TriggerBindingTargetTypeSchema, SessionBindingSourceSchema, SessionBindingStatusSchema, SessionBindingReleasePolicySchema, SessionBindingContinuitySchema, SessionBindingReleasedBySchema, BindingTargetSchema, BINDING_AUTO_BIND_VALUES, BindingAutoBindSchema;
 var init_session_bindings = __esm({
   "../../packages/schemas/src/session-bindings.ts"() {
     "use strict";
@@ -17921,6 +17921,7 @@ var init_session_bindings = __esm({
     ];
     SESSION_BINDING_STATUSES = ["active", "released"];
     SESSION_BINDING_RELEASE_POLICIES = ["manual", "held"];
+    SESSION_BINDING_CONTINUITIES = ["session", "agent"];
     SESSION_BINDING_RELEASED_BY = [
       "agent_tool",
       "archive",
@@ -17937,6 +17938,9 @@ var init_session_bindings = __esm({
     SessionBindingReleasePolicySchema = external_exports.enum(
       SESSION_BINDING_RELEASE_POLICIES
     );
+    SessionBindingContinuitySchema = external_exports.enum(
+      SESSION_BINDING_CONTINUITIES
+    );
     SessionBindingReleasedBySchema = external_exports.enum(
       SESSION_BINDING_RELEASED_BY
     );
@@ -18921,6 +18925,7 @@ var init_agents = __esm({
     BINDING_LIFECYCLE_VALUES = ["manual", "held"];
     BindingLifecycleSpecSchema = external_exports.object({
       lifecycle: external_exports.enum(BINDING_LIFECYCLE_VALUES).default("manual"),
+      continuity: external_exports.enum(["session", "agent"]).default("session"),
       bind: BindingAutoBindSchema.optional()
     }).strict();
     AgentBindingsSchema = external_exports.record(external_exports.string(), BindingLifecycleSpecSchema).superRefine((bindings, context) => {
@@ -19300,7 +19305,7 @@ var init_pool_replace = __esm({
 });
 
 // ../../packages/schemas/src/session-uploads.ts
-var SESSION_UPLOAD_MAX_SIZE_BYTES, SESSION_UPLOAD_DOWNLOAD_TTL_MS, SessionUploadPresignRequestSchema, SessionUploadPresignResponseSchema, SessionUploadAttachmentRefSchema, SessionUploadDownloadUrlResponseSchema;
+var SESSION_UPLOAD_MAX_SIZE_BYTES, SESSION_UPLOAD_DOWNLOAD_TTL_MS, SessionUploadPresignRequestSchema, SessionUploadPresignResponseSchema, SessionUploadAttachmentRefSchema, StagedSessionUploadRefSchema, SessionUploadDownloadUrlResponseSchema;
 var init_session_uploads = __esm({
   "../../packages/schemas/src/session-uploads.ts"() {
     "use strict";
@@ -19329,6 +19334,13 @@ var init_session_uploads = __esm({
       mimeType: external_exports.string().trim().min(1),
       sizeBytes: external_exports.number().int().nonnegative()
     });
+    StagedSessionUploadRefSchema = external_exports.object({
+      id: external_exports.string().trim().min(1),
+      stagedStorageKey: external_exports.string().trim().min(1),
+      filename: external_exports.string().trim().min(1),
+      mimeType: external_exports.string().trim().min(1),
+      sizeBytes: external_exports.number().int().nonnegative()
+    });
     SessionUploadDownloadUrlResponseSchema = external_exports.object({
       downloadUrl: external_exports.string().url(),
       expiresAt: external_exports.string().datetime(),
@@ -19566,7 +19578,13 @@ var init_session_commands = __esm({
       kind: external_exports.literal("startWithMessage"),
       message: external_exports.string().trim().min(1),
       model: AgentModelSelectionSchema.optional(),
-      reasoningEffort: AgentReasoningEffortSchema.optional()
+      reasoningEffort: AgentReasoningEffortSchema.optional(),
+      // File uploads claimed from the pre-session staging area (FAB composer).
+      // The session-creation endpoint copies each staged blob to a session-
+      // scoped key and passes the claimed refs here so the start command's
+      // delivery appends attachment download lines — the same path as a normal
+      // message command. Optional so existing callers stay valid.
+      attachments: external_exports.array(SessionUploadAttachmentRefSchema).optional()
     }).strict();
     SessionPersistedCommandPayloadSchema = external_exports.union([
       RunMessageCommandPayloadSchema,
@@ -19708,6 +19726,7 @@ var init_sessions = __esm({
     init_primitives();
     init_requester();
     init_session_commands();
+    init_session_uploads();
     init_tools();
     SESSION_STATUSES = [
       "queued",
@@ -19765,7 +19784,17 @@ var init_sessions = __esm({
        * session's one idempotent start command and never renders as a user chat
        * bubble; the agent's greeting is the first visible content.
        */
-      kickoff: external_exports.boolean().optional()
+      kickoff: external_exports.boolean().optional(),
+      /**
+       * Staged (pre-session) file uploads to claim for the session's initial
+       * message. Each ref's `stagedStorageKey` points at a blob uploaded before
+       * the session existed (the FAB composer flow); the session-creation
+       * endpoint copies each to a session-scoped key and attaches the resulting
+       * `SessionUploadAttachmentRef` to the start command so the initial message
+       * carries the files end-to-end — the same delivery path as a normal
+       * session-composer attachment.
+       */
+      attachments: external_exports.array(StagedSessionUploadRefSchema).optional()
     });
     SessionArchiveRequestSchema = external_exports.object({
       archived: external_exports.boolean()
@@ -20785,6 +20814,7 @@ var init_session_introspection = __esm({
       source: SessionBindingSourceSchema,
       status: SessionBindingStatusSchema,
       releasePolicy: SessionBindingReleasePolicySchema,
+      continuity: SessionBindingContinuitySchema,
       releasedBy: SessionBindingReleasedBySchema.nullable(),
       payload: JsonValueSchema.nullable(),
       createdAt: external_exports.string().datetime(),
@@ -35042,7 +35072,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.399",
+      version: "0.1.401",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"
@@ -36882,7 +36912,8 @@ function readApplyDocument(path2, document, fileIndex, contextVariables) {
   );
   return result.resources.map((resource) => ({
     resource,
-    generatedFromAgent: resource !== result.resource
+    generatedFromAgent: resource !== result.resource,
+    sourcePath: normalizeSourcePath(path2)
   }));
 }
 function validateAgentFragmentDocument(document, path2, context) {
@@ -36931,12 +36962,16 @@ function dedupeGeneratedResources(records) {
     }
     if (stableResource(resource) !== stableResource(existing.resource)) {
       throw new Error(
-        `Conflicting generated resource "${key}" from agent authoring. Inline generated resources must be identical when they share a name.`
+        conflictingGeneratedResourceMessage(key, existing, record2)
       );
     }
   }
   return deduped.map((record2) => record2.resource);
 }
+function conflictingGeneratedResourceMessage(key, existing, record2) {
+  const location = existing.sourcePath === record2.sourcePath ? `defined more than once in "${existing.sourcePath}" with different content` : `defined differently in "${existing.sourcePath}" and "${record2.sourcePath}"`;
+  return `Conflicting generated resource "${key}" from agent authoring: ${location}. Inline generated resources must be identical when they share a name.`;
+}
 function compileAgentDocumentValue(document, path2, fileIndex, contextVariables) {
   return compileAgentDraftResources(
     compileAgentDocument2(document, path2, {
@@ -37298,7 +37333,8 @@ function readProjectApplyDirectorySource(input) {
     resourceRecords.push(
       ...request.resources.map((resource) => ({
         resource,
-        generatedFromAgent: resource.kind !== RESOURCE_KIND_AGENT
+        generatedFromAgent: resource.kind !== RESOURCE_KIND_AGENT,
+        sourcePath: file2.path
       }))
     );
   }
@@ -45487,6 +45523,7 @@ var AgentBridgeOutputAckTimeoutError = class extends Error {
     this.name = "AgentBridgeOutputAckTimeoutError";
   }
 };
+var AGENT_BRIDGE_TERMINAL_AUTH_DRAIN_TIMEOUT_MS = 6e4;
 async function runAgentBridgeSocket(options) {
   const socket = io(`${options.bridgeUrl}${RUNTIME_BRIDGE_NAMESPACE}`, {
     auth: {
@@ -45498,6 +45535,13 @@ async function runAgentBridgeSocket(options) {
   });
   let handler = null;
   const reconnectLoop = createReconnectLoop(socket);
+  const terminalAuthDrain = createTerminalAuthDrainController({
+    socket,
+    token: options.token,
+    getHandler: () => handler,
+    writeOutput: options.writeOutput,
+    runtimeLogger: options.runtimeLogger
+  });
   let hasConnected = false;
   await new Promise((resolve4, reject) => {
     const shutdown = () => {
@@ -45509,15 +45553,23 @@ async function runAgentBridgeSocket(options) {
     process.once("SIGINT", shutdown);
     process.once("SIGTERM", shutdown);
     socket.on("connect_error", (error51) => {
+      if (terminalAuthDrain.handleConnectError(error51)) {
+        return;
+      }
       if (!hasConnected) {
         reject(error51);
         return;
       }
       if (isTerminalAuthError(error51)) {
         reconnectLoop.stop();
-        handler?.shutdown?.();
-        socket.disconnect();
-        reject(new AgentBridgeTerminalAuthError(error51.message));
+        void terminalAuthDrain.begin().catch((drainError) => {
+          options.writeOutput?.(
+            `agent_bridge_terminal_auth_drain_failed error=${errorMessage(drainError)}`
+          );
+        }).finally(() => {
+          socket.disconnect();
+          reject(new AgentBridgeTerminalAuthError(error51.message));
+        });
         return;
       }
       options.writeOutput?.(
@@ -45530,6 +45582,9 @@ async function runAgentBridgeSocket(options) {
         return;
       }
       options.writeOutput?.(`agent_bridge_disconnected reason=${reason}`);
+      if (terminalAuthDrain.suppressesReconnect()) {
+        return;
+      }
       reconnectLoop.start();
     });
     socket.on(
@@ -45568,6 +45623,9 @@ async function runAgentBridgeSocket(options) {
       })
     );
     socket.on(RUNTIME_BRIDGE_CONNECTED_EVENT, (rawContext) => {
+      if (terminalAuthDrain.handleConnected(rawContext)) {
+        return;
+      }
       const context = RuntimeBridgeConnectedPayloadSchema.parse(rawContext);
       if (!handler) {
         reject(new Error("Bridge connected before bootstrap completed"));
@@ -45812,6 +45870,113 @@ function createReconnectLoop(socket) {
   };
   return { start, stop };
 }
+function createTerminalAuthDrainController(input) {
+  let terminalAuthExit = false;
+  let state = null;
+  const settle = (callback) => {
+    const current = state;
+    if (!current) {
+      return;
+    }
+    clearTimeout(current.timeout);
+    state = null;
+    callback();
+  };
+  const begin = () => {
+    terminalAuthExit = true;
+    if (state) {
+      return state.promise;
+    }
+    const handler = input.getHandler();
+    handler?.shutdown?.();
+    if (!handler) {
+      input.writeOutput?.(
+        "agent_bridge_terminal_auth_drain_skipped reason=no_handler"
+      );
+      return Promise.resolve();
+    }
+    const startedAt = Date.now();
+    let resolveDrain = () => {
+    };
+    let rejectDrain = () => {
+    };
+    const promise2 = new Promise((resolve4, reject) => {
+      resolveDrain = resolve4;
+      rejectDrain = reject;
+    });
+    const timeout = setTimeout(() => {
+      settle(() => {
+        rejectDrain(
+          new Error(
+            `Timed out draining pending bridge output after terminal auth in ${AGENT_BRIDGE_TERMINAL_AUTH_DRAIN_TIMEOUT_MS}ms`
+          )
+        );
+      });
+    }, AGENT_BRIDGE_TERMINAL_AUTH_DRAIN_TIMEOUT_MS);
+    timeout.unref?.();
+    state = {
+      promise: promise2,
+      reject: rejectDrain,
+      resolve: resolveDrain,
+      startedAt,
+      timeout
+    };
+    input.writeOutput?.("agent_bridge_terminal_auth_drain_started");
+    input.runtimeLogger?.warn("agent_bridge_terminal_auth_drain_started");
+    input.socket.auth = { token: input.token, terminalDrain: true };
+    input.socket.connect();
+    return promise2;
+  };
+  const handleConnected = (rawContext) => {
+    const current = state;
+    if (!current) {
+      return false;
+    }
+    void (async () => {
+      const context = RuntimeBridgeConnectedPayloadSchema.parse(rawContext);
+      input.writeOutput?.(
+        `agent_bridge_terminal_auth_drain_connected session_id=${context.sessionId} runtime_id=${context.runtimeId} bridge_lease_id=${context.bridgeLeaseId}`
+      );
+      input.runtimeLogger?.warn("agent_bridge_terminal_auth_drain_connected", {
+        session_id: context.sessionId,
+        runtime_id: context.runtimeId,
+        bridge_lease_id: context.bridgeLeaseId
+      });
+      const handler = input.getHandler();
+      if (!handler) {
+        throw new Error("Terminal auth drain connected without a handler");
+      }
+      await handler.replayPendingOutputs();
+      settle(() => {
+        input.writeOutput?.(
+          `agent_bridge_terminal_auth_drain_completed duration_ms=${Date.now() - current.startedAt}`
+        );
+        input.runtimeLogger?.warn(
+          "agent_bridge_terminal_auth_drain_completed",
+          { duration_ms: Date.now() - current.startedAt }
+        );
+        current.resolve();
+      });
+    })().catch((error51) => {
+      settle(() => current.reject(error51));
+    });
+    return true;
+  };
+  const handleConnectError = (error51) => {
+    const current = state;
+    if (!current) {
+      return false;
+    }
+    settle(() => current.reject(error51));
+    return true;
+  };
+  return {
+    begin,
+    handleConnected,
+    handleConnectError,
+    suppressesReconnect: () => terminalAuthExit || state !== null
+  };
+}
 function bridgeForwardingHeaders(url2) {
   if (!isNgrokFreeUrl(url2)) {
     return {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autohq/cli",
-  "version": "0.1.399",
+  "version": "0.1.401",
   "license": "SEE LICENSE IN README.md",
   "publishConfig": {
     "access": "public"