@autohq/cli 0.1.431 → 0.1.432

package/dist/agent-bridge.js

@@ -30825,7 +30825,7 @@ Object.assign(lookup, {
 // package.json
 var package_default = {
   name: "@autohq/cli",
-  version: "0.1.431",
+  version: "0.1.432",
   license: "SEE LICENSE IN README.md",
   publishConfig: {
     access: "public"
@@ -33647,306 +33647,6 @@ var ConnectionRemoveResponseSchema = external_exports.object({
   message: external_exports.string().trim().min(1)
 });
 
-// ../../packages/schemas/src/dormant-capabilities.ts
-var DormantCapabilityConnectionSchema = external_exports.object({
-  provider: external_exports.string().trim().min(1),
-  connection: external_exports.string().trim().min(1)
-});
-var DormantCapabilitySchema = external_exports.object({
-  kind: external_exports.enum(["tool", "trigger"]),
-  name: external_exports.string().trim().min(1),
-  connections: external_exports.array(DormantCapabilityConnectionSchema).min(1)
-});
-var DormantCapabilitiesSchema = external_exports.array(DormantCapabilitySchema);
-
-// ../../packages/schemas/src/github-sync.ts
-var GITHUB_SYNC_AUTO_PATH = ".auto";
-var GITHUB_SYNC_CI_WATCHDOG_DEFAULT_DELAY_MS = 15e3;
-var GithubSyncRepositoryFullNameSchema = external_exports.string().trim().min(1).regex(/^[^/\s]+\/[^/\s]+$/, {
-  message: "repository must be in owner/name form"
-});
-var GithubSyncProductionBranchSchema = external_exports.string().trim().min(1).max(255).refine((branch) => !branch.startsWith("/") && !branch.endsWith("/"), {
-  message: "branch must not start or end with /"
-});
-var GithubSyncCiWatchdogWorkflowSchema = external_exports.object({
-  workflowId: external_exports.string().trim().min(1).max(255)
-}).strict();
-var GithubSyncCiWatchdogSchema = external_exports.object({
-  workflows: external_exports.array(GithubSyncCiWatchdogWorkflowSchema).max(10).default([]),
-  checkDelayMs: external_exports.number().int().nonnegative().default(GITHUB_SYNC_CI_WATCHDOG_DEFAULT_DELAY_MS)
-}).strict();
-var GithubSyncBindingSchema = external_exports.object({
-  id: external_exports.string().trim().min(1),
-  organizationId: OrganizationIdSchema,
-  projectId: ProjectIdSchema,
-  providerGrantId: ProviderGrantIdSchema,
-  installationId: external_exports.string().trim().min(1),
-  repoFullName: GithubSyncRepositoryFullNameSchema,
-  repoId: external_exports.string().trim().min(1).nullable(),
-  productionBranch: GithubSyncProductionBranchSchema,
-  autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
-  ciWatchdog: GithubSyncCiWatchdogSchema,
-  enabled: external_exports.boolean(),
-  lastPlannedSha: external_exports.string().trim().min(1).nullable(),
-  lastAppliedSha: external_exports.string().trim().min(1).nullable(),
-  createdAt: external_exports.string().datetime(),
-  updatedAt: external_exports.string().datetime()
-});
-var GithubSyncBindingCreateRequestSchema = external_exports.object({
-  connection: external_exports.string().trim().min(1).optional(),
-  repo: GithubSyncRepositoryFullNameSchema,
-  repoId: external_exports.string().trim().min(1).optional(),
-  branch: GithubSyncProductionBranchSchema.optional(),
-  ciWatchdog: GithubSyncCiWatchdogSchema.optional()
-});
-var GithubSyncInitialSyncSchema = external_exports.object({
-  started: external_exports.boolean(),
-  headSha: external_exports.string().trim().min(1).optional(),
-  workflowId: external_exports.string().trim().min(1).optional(),
-  reason: external_exports.enum([
-    "no_auto_directory",
-    "already_applied",
-    "probe_failed",
-    "start_failed"
-  ]).optional()
-});
-var GithubSyncBindingCreateResponseSchema = external_exports.object({
-  binding: GithubSyncBindingSchema,
-  created: external_exports.boolean(),
-  initialSync: GithubSyncInitialSyncSchema.optional()
-});
-var GithubSyncBindingListResponseSchema = external_exports.object({
-  bindings: external_exports.array(GithubSyncBindingSchema)
-});
-var GithubSyncTriggerArtifactSchema = external_exports.object({
-  type: external_exports.string().trim().min(1),
-  externalId: external_exports.string().trim().min(1),
-  payload: JsonValueSchema2.optional()
-}).strict();
-var GithubSyncWorkflowInputSchema = external_exports.discriminatedUnion("kind", [
-  external_exports.object({
-    kind: external_exports.literal("pull_request"),
-    bindingId: external_exports.string().trim().min(1),
-    organizationId: OrganizationIdSchema,
-    projectId: ProjectIdSchema,
-    providerGrantId: ProviderGrantIdSchema,
-    installationId: external_exports.string().trim().min(1),
-    repoFullName: GithubSyncRepositoryFullNameSchema,
-    repoId: external_exports.string().trim().min(1).optional(),
-    productionBranch: GithubSyncProductionBranchSchema,
-    autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
-    pullRequestNumber: external_exports.number().int().positive(),
-    headSha: external_exports.string().trim().min(1),
-    baseSha: external_exports.string().trim().min(1).optional(),
-    baseRef: GithubSyncProductionBranchSchema,
-    triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
-  }),
-  external_exports.object({
-    kind: external_exports.literal("push"),
-    bindingId: external_exports.string().trim().min(1),
-    organizationId: OrganizationIdSchema,
-    projectId: ProjectIdSchema,
-    providerGrantId: ProviderGrantIdSchema,
-    installationId: external_exports.string().trim().min(1),
-    repoFullName: GithubSyncRepositoryFullNameSchema,
-    repoId: external_exports.string().trim().min(1).optional(),
-    productionBranch: GithubSyncProductionBranchSchema,
-    autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
-    ref: external_exports.string().trim().min(1),
-    branch: GithubSyncProductionBranchSchema,
-    before: external_exports.string().trim().min(1).optional(),
-    after: external_exports.string().trim().min(1),
-    triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
-  }),
-  // Synthetic re-apply triggered by a managed-template version bump (not a
-  // webhook). The tenant's `.auto` is unchanged — only our registry changed —
-  // so this arm skips the `no_auto_changes` early-out and applies the production
-  // branch HEAD (`after`, which the sweep resolves before starting the run).
-  // It is otherwise push-shaped. `templateName`/`version` identify the drift
-  // that triggered it (for the commit check + idempotent workflow id).
-  external_exports.object({
-    kind: external_exports.literal("template_push"),
-    bindingId: external_exports.string().trim().min(1),
-    organizationId: OrganizationIdSchema,
-    projectId: ProjectIdSchema,
-    providerGrantId: ProviderGrantIdSchema,
-    installationId: external_exports.string().trim().min(1),
-    repoFullName: GithubSyncRepositoryFullNameSchema,
-    repoId: external_exports.string().trim().min(1).optional(),
-    productionBranch: GithubSyncProductionBranchSchema,
-    autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
-    before: external_exports.string().trim().min(1).optional(),
-    after: external_exports.string().trim().min(1),
-    templateName: external_exports.string().trim().min(1),
-    version: external_exports.string().trim().min(1),
-    triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
-  }),
-  // Synthetic authoritative re-apply triggered by one durable connection
-  // lifecycle occurrence. The event id makes retries reuse the same workflow,
-  // while a later remove/re-allow occurrence can re-run at the same git SHA.
-  external_exports.object({
-    kind: external_exports.literal("connection_push"),
-    bindingId: external_exports.string().trim().min(1),
-    organizationId: OrganizationIdSchema,
-    projectId: ProjectIdSchema,
-    providerGrantId: ProviderGrantIdSchema,
-    installationId: external_exports.string().trim().min(1),
-    repoFullName: GithubSyncRepositoryFullNameSchema,
-    repoId: external_exports.string().trim().min(1).optional(),
-    productionBranch: GithubSyncProductionBranchSchema,
-    autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
-    before: external_exports.string().trim().min(1).optional(),
-    after: external_exports.string().trim().min(1),
-    connectionEventId: external_exports.string().trim().min(1),
-    triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
-  })
-]);
-var GithubSyncWorkflowResultSchema = external_exports.discriminatedUnion("status", [
-  external_exports.object({
-    status: external_exports.literal("skipped"),
-    reason: external_exports.string().trim().min(1)
-  }),
-  external_exports.object({
-    status: external_exports.literal("planned"),
-    changed: external_exports.boolean(),
-    checkRunId: external_exports.number().int().positive().optional()
-  }),
-  external_exports.object({
-    status: external_exports.literal("applied"),
-    changed: external_exports.boolean(),
-    checkRunId: external_exports.number().int().positive().optional()
-  }),
-  external_exports.object({
-    status: external_exports.literal("failed"),
-    message: external_exports.string().trim().min(1),
-    checkRunId: external_exports.number().int().positive().optional()
-  })
-]);
-
-// ../../packages/schemas/src/github-credentials.ts
-var CreateRunGithubCredentialRequestSchema = external_exports.object({
-  host: external_exports.literal("github.com"),
-  path: external_exports.string().trim().min(1).optional()
-});
-var RunGithubCredentialResponseSchema = external_exports.object({
-  username: external_exports.literal("x-access-token"),
-  password: external_exports.string().min(1),
-  expiresAt: external_exports.string().datetime()
-});
-
-// ../../packages/schemas/src/github-mcp-catalog.ts
-var GITHUB_MCP_TOOL_NAMES = [
-  "actions_get",
-  "actions_list",
-  "actions_run_trigger",
-  "add_comment_to_pending_review",
-  "add_issue_comment",
-  "add_reply_to_pull_request_comment",
-  "create_branch",
-  "create_or_update_file",
-  "create_pull_request",
-  "create_repository",
-  "delete_file",
-  "fork_repository",
-  "get_commit",
-  "get_file_contents",
-  "get_job_logs",
-  "get_label",
-  "get_latest_release",
-  "get_release_by_tag",
-  "get_tag",
-  "issue_read",
-  "issue_write",
-  "list_branches",
-  "list_commits",
-  "list_issue_types",
-  "list_issues",
-  "list_pull_requests",
-  "list_releases",
-  "list_repository_collaborators",
-  "list_tags",
-  "merge_pull_request",
-  "pull_request_read",
-  "pull_request_review_write",
-  "push_files",
-  "search_code",
-  "search_commits",
-  "search_issues",
-  "search_pull_requests",
-  "search_repositories",
-  "sub_issue_write",
-  "update_pull_request",
-  "update_pull_request_branch"
-];
-var GITHUB_MCP_PROXY_TOOL_NAMES = [
-  "actions_secret_list",
-  "actions_secret_write",
-  "delete_issue_comment",
-  "download_comment_attachment",
-  "enable_pull_request_auto_merge",
-  "upsert_issue_comment"
-];
-var GITHUB_MCP_SELECTABLE_TOOL_NAMES = [
-  ...GITHUB_MCP_TOOL_NAMES,
-  ...GITHUB_MCP_PROXY_TOOL_NAMES
-];
-var GITHUB_MCP_MERGE_TOOLS = [
-  "merge_pull_request",
-  "enable_pull_request_auto_merge"
-];
-var GITHUB_MCP_SECRETS_TOOLS = [
-  "actions_secret_list",
-  "actions_secret_write"
-];
-var GITHUB_MCP_SECRETS_WRITE_TOOLS = [
-  "actions_secret_write"
-];
-var GITHUB_MCP_WRITE_TOOLS = [
-  "actions_run_trigger",
-  "add_comment_to_pending_review",
-  "add_issue_comment",
-  "add_reply_to_pull_request_comment",
-  "create_branch",
-  "create_or_update_file",
-  "create_pull_request",
-  "create_repository",
-  "delete_file",
-  "fork_repository",
-  "issue_write",
-  "merge_pull_request",
-  "pull_request_review_write",
-  "push_files",
-  "sub_issue_write",
-  "update_pull_request",
-  "update_pull_request_branch"
-];
-var githubMcpToolNameSet = new Set(
-  GITHUB_MCP_TOOL_NAMES
-);
-var GITHUB_MCP_ATTRIBUTION_EXEMPT_PROXY_TOOLS = /* @__PURE__ */ new Set([
-  "actions_secret_list",
-  "download_comment_attachment",
-  "delete_issue_comment"
-]);
-var githubMcpWriteToolSet = /* @__PURE__ */ new Set([
-  ...GITHUB_MCP_WRITE_TOOLS,
-  ...GITHUB_MCP_PROXY_TOOL_NAMES.filter(
-    (name23) => !GITHUB_MCP_ATTRIBUTION_EXEMPT_PROXY_TOOLS.has(name23)
-  )
-]);
-var githubMcpProxyToolSet = new Set(
-  GITHUB_MCP_PROXY_TOOL_NAMES
-);
-var githubMcpMergeToolSet = new Set(
-  GITHUB_MCP_MERGE_TOOLS
-);
-var githubMcpSecretsToolSet = new Set(
-  GITHUB_MCP_SECRETS_TOOLS
-);
-var githubMcpSecretsWriteToolSet = new Set(
-  GITHUB_MCP_SECRETS_WRITE_TOOLS
-);
-
 // ../../packages/schemas/src/mounts.ts
 var AbsoluteMountPathSchema = external_exports.string().trim().min(1).refine((value2) => value2.startsWith("/"), {
   message: "Mount paths must be absolute"
@@ -34191,35 +33891,148 @@ var BINDING_TRANSITION_CAUSES = [
   "rollover",
   "system"
 ];
-var BindingTargetTypeSchema = external_exports.enum(BINDING_TARGET_TYPES);
-var TriggerBindingTargetTypeSchema = external_exports.enum(
-  TRIGGER_BINDING_TARGET_TYPES
+var BindingTargetTypeSchema = external_exports.enum(BINDING_TARGET_TYPES);
+var TriggerBindingTargetTypeSchema = external_exports.enum(
+  TRIGGER_BINDING_TARGET_TYPES
+);
+var SessionBindingSourceSchema = external_exports.enum(SESSION_BINDING_SOURCES);
+var SessionBindingStatusSchema = external_exports.enum(SESSION_BINDING_STATUSES);
+var SessionBindingReleasePolicySchema = external_exports.enum(
+  SESSION_BINDING_RELEASE_POLICIES
+);
+var SessionBindingContinuitySchema = external_exports.enum(
+  SESSION_BINDING_CONTINUITIES
+);
+var SessionBindingReleasedBySchema = external_exports.enum(
+  SESSION_BINDING_RELEASED_BY
+);
+var BindingTransitionCauseSchema = external_exports.enum(BINDING_TRANSITION_CAUSES);
+var BindingTargetSchema = external_exports.object({
+  type: BindingTargetTypeSchema,
+  externalId: external_exports.string().min(1)
+});
+var BINDING_AUTO_BIND_VALUES = [
+  "onAttributedEvent",
+  "onMention"
+];
+var BindingAutoBindSchema = external_exports.enum(BINDING_AUTO_BIND_VALUES);
+var AUTO_BIND_LEGAL_TARGETS = {
+  onAttributedEvent: /* @__PURE__ */ new Set(["github.pull_request"]),
+  onMention: /* @__PURE__ */ new Set(["slack.thread"])
+};
+
+// ../../packages/schemas/src/github-mcp-catalog.ts
+var GITHUB_MCP_TOOL_NAMES = [
+  "actions_get",
+  "actions_list",
+  "actions_run_trigger",
+  "add_comment_to_pending_review",
+  "add_issue_comment",
+  "add_reply_to_pull_request_comment",
+  "create_branch",
+  "create_or_update_file",
+  "create_pull_request",
+  "create_repository",
+  "delete_file",
+  "fork_repository",
+  "get_commit",
+  "get_file_contents",
+  "get_job_logs",
+  "get_label",
+  "get_latest_release",
+  "get_release_by_tag",
+  "get_tag",
+  "issue_read",
+  "issue_write",
+  "list_branches",
+  "list_commits",
+  "list_issue_types",
+  "list_issues",
+  "list_pull_requests",
+  "list_releases",
+  "list_repository_collaborators",
+  "list_tags",
+  "merge_pull_request",
+  "pull_request_read",
+  "pull_request_review_write",
+  "push_files",
+  "search_code",
+  "search_commits",
+  "search_issues",
+  "search_pull_requests",
+  "search_repositories",
+  "sub_issue_write",
+  "update_pull_request",
+  "update_pull_request_branch"
+];
+var GITHUB_MCP_PROXY_TOOL_NAMES = [
+  "actions_secret_list",
+  "actions_secret_write",
+  "delete_issue_comment",
+  "download_comment_attachment",
+  "enable_pull_request_auto_merge",
+  "upsert_issue_comment"
+];
+var GITHUB_MCP_SELECTABLE_TOOL_NAMES = [
+  ...GITHUB_MCP_TOOL_NAMES,
+  ...GITHUB_MCP_PROXY_TOOL_NAMES
+];
+var GITHUB_MCP_MERGE_TOOLS = [
+  "merge_pull_request",
+  "enable_pull_request_auto_merge"
+];
+var GITHUB_MCP_SECRETS_TOOLS = [
+  "actions_secret_list",
+  "actions_secret_write"
+];
+var GITHUB_MCP_SECRETS_WRITE_TOOLS = [
+  "actions_secret_write"
+];
+var GITHUB_MCP_WRITE_TOOLS = [
+  "actions_run_trigger",
+  "add_comment_to_pending_review",
+  "add_issue_comment",
+  "add_reply_to_pull_request_comment",
+  "create_branch",
+  "create_or_update_file",
+  "create_pull_request",
+  "create_repository",
+  "delete_file",
+  "fork_repository",
+  "issue_write",
+  "merge_pull_request",
+  "pull_request_review_write",
+  "push_files",
+  "sub_issue_write",
+  "update_pull_request",
+  "update_pull_request_branch"
+];
+var githubMcpToolNameSet = new Set(
+  GITHUB_MCP_TOOL_NAMES
 );
-var SessionBindingSourceSchema = external_exports.enum(SESSION_BINDING_SOURCES);
-var SessionBindingStatusSchema = external_exports.enum(SESSION_BINDING_STATUSES);
-var SessionBindingReleasePolicySchema = external_exports.enum(
-  SESSION_BINDING_RELEASE_POLICIES
+var GITHUB_MCP_ATTRIBUTION_EXEMPT_PROXY_TOOLS = /* @__PURE__ */ new Set([
+  "actions_secret_list",
+  "download_comment_attachment",
+  "delete_issue_comment"
+]);
+var githubMcpWriteToolSet = /* @__PURE__ */ new Set([
+  ...GITHUB_MCP_WRITE_TOOLS,
+  ...GITHUB_MCP_PROXY_TOOL_NAMES.filter(
+    (name23) => !GITHUB_MCP_ATTRIBUTION_EXEMPT_PROXY_TOOLS.has(name23)
+  )
+]);
+var githubMcpProxyToolSet = new Set(
+  GITHUB_MCP_PROXY_TOOL_NAMES
 );
-var SessionBindingContinuitySchema = external_exports.enum(
-  SESSION_BINDING_CONTINUITIES
+var githubMcpMergeToolSet = new Set(
+  GITHUB_MCP_MERGE_TOOLS
 );
-var SessionBindingReleasedBySchema = external_exports.enum(
-  SESSION_BINDING_RELEASED_BY
+var githubMcpSecretsToolSet = new Set(
+  GITHUB_MCP_SECRETS_TOOLS
+);
+var githubMcpSecretsWriteToolSet = new Set(
+  GITHUB_MCP_SECRETS_WRITE_TOOLS
 );
-var BindingTransitionCauseSchema = external_exports.enum(BINDING_TRANSITION_CAUSES);
-var BindingTargetSchema = external_exports.object({
-  type: BindingTargetTypeSchema,
-  externalId: external_exports.string().min(1)
-});
-var BINDING_AUTO_BIND_VALUES = [
-  "onAttributedEvent",
-  "onMention"
-];
-var BindingAutoBindSchema = external_exports.enum(BINDING_AUTO_BIND_VALUES);
-var AUTO_BIND_LEGAL_TARGETS = {
-  onAttributedEvent: /* @__PURE__ */ new Set(["github.pull_request"]),
-  onMention: /* @__PURE__ */ new Set(["slack.thread"])
-};
 
 // ../../packages/schemas/src/tools.ts
 var REMOTE_MCP_TRANSPORTS = ["streamable_http"];
@@ -34398,6 +34211,170 @@ var InlineAgentToolSchema = RemoteMcpToolSchema.extend({
 var AgentToolRefSchema = InlineAgentToolSchema;
 var AgentToolsSchema = external_exports.record(ToolAliasSchema, AgentToolRefSchema);
 
+// ../../packages/schemas/src/github-sync.ts
+var GITHUB_SYNC_AUTO_PATH = ".auto";
+var GITHUB_SYNC_CI_WATCHDOG_DEFAULT_DELAY_MS = 15e3;
+var GithubSyncRepositoryFullNameSchema = external_exports.string().trim().min(1).regex(/^[^/\s]+\/[^/\s]+$/, {
+  message: "repository must be in owner/name form"
+});
+var GithubSyncProductionBranchSchema = external_exports.string().trim().min(1).max(255).refine((branch) => !branch.startsWith("/") && !branch.endsWith("/"), {
+  message: "branch must not start or end with /"
+});
+var GithubSyncCiWatchdogWorkflowSchema = external_exports.object({
+  workflowId: external_exports.string().trim().min(1).max(255)
+}).strict();
+var GithubSyncCiWatchdogSchema = external_exports.object({
+  workflows: external_exports.array(GithubSyncCiWatchdogWorkflowSchema).max(10).default([]),
+  checkDelayMs: external_exports.number().int().nonnegative().default(GITHUB_SYNC_CI_WATCHDOG_DEFAULT_DELAY_MS)
+}).strict();
+var GithubSyncBindingSchema = external_exports.object({
+  id: external_exports.string().trim().min(1),
+  organizationId: OrganizationIdSchema,
+  projectId: ProjectIdSchema,
+  providerGrantId: ProviderGrantIdSchema,
+  installationId: external_exports.string().trim().min(1),
+  repoFullName: GithubSyncRepositoryFullNameSchema,
+  repoId: external_exports.string().trim().min(1).nullable(),
+  productionBranch: GithubSyncProductionBranchSchema,
+  autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
+  ciWatchdog: GithubSyncCiWatchdogSchema,
+  enabled: external_exports.boolean(),
+  lastPlannedSha: external_exports.string().trim().min(1).nullable(),
+  lastAppliedSha: external_exports.string().trim().min(1).nullable(),
+  createdAt: external_exports.string().datetime(),
+  updatedAt: external_exports.string().datetime()
+});
+var GithubSyncBindingCreateRequestSchema = external_exports.object({
+  connection: external_exports.string().trim().min(1).optional(),
+  repo: GithubSyncRepositoryFullNameSchema,
+  repoId: external_exports.string().trim().min(1).optional(),
+  branch: GithubSyncProductionBranchSchema.optional(),
+  ciWatchdog: GithubSyncCiWatchdogSchema.optional()
+});
+var GithubSyncInitialSyncSchema = external_exports.object({
+  started: external_exports.boolean(),
+  headSha: external_exports.string().trim().min(1).optional(),
+  workflowId: external_exports.string().trim().min(1).optional(),
+  reason: external_exports.enum([
+    "no_auto_directory",
+    "already_applied",
+    "probe_failed",
+    "start_failed"
+  ]).optional()
+});
+var GithubSyncBindingCreateResponseSchema = external_exports.object({
+  binding: GithubSyncBindingSchema,
+  created: external_exports.boolean(),
+  initialSync: GithubSyncInitialSyncSchema.optional()
+});
+var GithubSyncBindingListResponseSchema = external_exports.object({
+  bindings: external_exports.array(GithubSyncBindingSchema)
+});
+var GithubSyncTriggerArtifactSchema = external_exports.object({
+  type: external_exports.string().trim().min(1),
+  externalId: external_exports.string().trim().min(1),
+  payload: JsonValueSchema2.optional()
+}).strict();
+var GithubSyncWorkflowInputSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({
+    kind: external_exports.literal("pull_request"),
+    bindingId: external_exports.string().trim().min(1),
+    organizationId: OrganizationIdSchema,
+    projectId: ProjectIdSchema,
+    providerGrantId: ProviderGrantIdSchema,
+    installationId: external_exports.string().trim().min(1),
+    repoFullName: GithubSyncRepositoryFullNameSchema,
+    repoId: external_exports.string().trim().min(1).optional(),
+    productionBranch: GithubSyncProductionBranchSchema,
+    autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
+    pullRequestNumber: external_exports.number().int().positive(),
+    headSha: external_exports.string().trim().min(1),
+    baseSha: external_exports.string().trim().min(1).optional(),
+    baseRef: GithubSyncProductionBranchSchema,
+    triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("push"),
+    bindingId: external_exports.string().trim().min(1),
+    organizationId: OrganizationIdSchema,
+    projectId: ProjectIdSchema,
+    providerGrantId: ProviderGrantIdSchema,
+    installationId: external_exports.string().trim().min(1),
+    repoFullName: GithubSyncRepositoryFullNameSchema,
+    repoId: external_exports.string().trim().min(1).optional(),
+    productionBranch: GithubSyncProductionBranchSchema,
+    autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
+    ref: external_exports.string().trim().min(1),
+    branch: GithubSyncProductionBranchSchema,
+    before: external_exports.string().trim().min(1).optional(),
+    after: external_exports.string().trim().min(1),
+    triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
+  }),
+  // Synthetic re-apply triggered by a managed-template version bump (not a
+  // webhook). The tenant's `.auto` is unchanged — only our registry changed —
+  // so this arm skips the `no_auto_changes` early-out and applies the production
+  // branch HEAD (`after`, which the sweep resolves before starting the run).
+  // It is otherwise push-shaped. `templateName`/`version` identify the drift
+  // that triggered it (for the commit check + idempotent workflow id).
+  external_exports.object({
+    kind: external_exports.literal("template_push"),
+    bindingId: external_exports.string().trim().min(1),
+    organizationId: OrganizationIdSchema,
+    projectId: ProjectIdSchema,
+    providerGrantId: ProviderGrantIdSchema,
+    installationId: external_exports.string().trim().min(1),
+    repoFullName: GithubSyncRepositoryFullNameSchema,
+    repoId: external_exports.string().trim().min(1).optional(),
+    productionBranch: GithubSyncProductionBranchSchema,
+    autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
+    before: external_exports.string().trim().min(1).optional(),
+    after: external_exports.string().trim().min(1),
+    templateName: external_exports.string().trim().min(1),
+    version: external_exports.string().trim().min(1),
+    triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
+  }),
+  // Synthetic authoritative re-apply triggered by one durable connection
+  // lifecycle occurrence. The event id makes retries reuse the same workflow,
+  // while a later remove/re-allow occurrence can re-run at the same git SHA.
+  external_exports.object({
+    kind: external_exports.literal("connection_push"),
+    bindingId: external_exports.string().trim().min(1),
+    organizationId: OrganizationIdSchema,
+    projectId: ProjectIdSchema,
+    providerGrantId: ProviderGrantIdSchema,
+    installationId: external_exports.string().trim().min(1),
+    repoFullName: GithubSyncRepositoryFullNameSchema,
+    repoId: external_exports.string().trim().min(1).optional(),
+    productionBranch: GithubSyncProductionBranchSchema,
+    autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
+    before: external_exports.string().trim().min(1).optional(),
+    after: external_exports.string().trim().min(1),
+    connectionEventId: external_exports.string().trim().min(1),
+    triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
+  })
+]);
+var GithubSyncWorkflowResultSchema = external_exports.discriminatedUnion("status", [
+  external_exports.object({
+    status: external_exports.literal("skipped"),
+    reason: external_exports.string().trim().min(1)
+  }),
+  external_exports.object({
+    status: external_exports.literal("planned"),
+    changed: external_exports.boolean(),
+    checkRunId: external_exports.number().int().positive().optional()
+  }),
+  external_exports.object({
+    status: external_exports.literal("applied"),
+    changed: external_exports.boolean(),
+    checkRunId: external_exports.number().int().positive().optional()
+  }),
+  external_exports.object({
+    status: external_exports.literal("failed"),
+    message: external_exports.string().trim().min(1),
+    checkRunId: external_exports.number().int().positive().optional()
+  })
+]);
+
 // ../../packages/schemas/src/trigger-router.ts
 var CANONICAL_ROUTE_BY_KINDS = [
   "allLiveSessions",
@@ -34989,18 +34966,21 @@ var AgentSpecSchema = AgentSpecFieldsSchema.superRefine(
     validateAgentModelFieldsForHarness(spec, context);
   }
 );
-var AgentApplySpecSchema = AgentSpecFieldsSchema.extend({
+var AgentApplySpecFieldsSchema = AgentSpecFieldsSchema.extend({
   initialPrompt: templateField("authoring"),
   displayTitle: displayTitleField("authoring"),
   triggers: ApplyTriggersSchema.default([])
-}).superRefine((spec, context) => {
-  validateRunnableConfig(spec, context);
-  validateAgentModelFieldsForHarness(spec, context);
-  validateConcurrencyConfig(spec, context);
-  validateBindingsConfig(spec, context);
-  validateTriggerReleaseConfig(spec, context);
-  validateTriggerObservedTargetConfig(spec, context);
 });
+var AgentApplySpecSchema = AgentApplySpecFieldsSchema.superRefine(
+  (spec, context) => {
+    validateRunnableConfig(spec, context);
+    validateAgentModelFieldsForHarness(spec, context);
+    validateConcurrencyConfig(spec, context);
+    validateBindingsConfig(spec, context);
+    validateTriggerReleaseConfig(spec, context);
+    validateTriggerObservedTargetConfig(spec, context);
+  }
+);
 function validateConcurrencyConfig(spec, context) {
   if (spec.concurrency === void 0 && spec.replace !== void 0) {
     context.addIssue({
@@ -35127,10 +35107,19 @@ var AgentStatusSchema = external_exports.object({
   runCount: external_exports.number().int().nonnegative().default(0),
   lastActivityAt: external_exports.string().datetime().nullable().default(null)
 }).default({ runCount: 0, lastActivityAt: null });
+var AgentResourceOriginSchema = external_exports.enum(["authored", "built_in"]);
+var BuiltInAgentMetadataSchema = external_exports.object({
+  templateVersion: external_exports.string().trim().min(1),
+  harnessPinned: external_exports.boolean(),
+  authoredOverlay: JsonValueSchema2.nullable(),
+  provenance: external_exports.record(external_exports.string().min(1), external_exports.enum(["built_in", "authored"]))
+});
 var AgentResourceSchema = resourceEnvelopeSchema(
   AgentSpecSchema
 ).extend({
-  status: AgentStatusSchema
+  status: AgentStatusSchema,
+  origin: AgentResourceOriginSchema.optional(),
+  builtIn: BuiltInAgentMetadataSchema.optional()
 });
 var AgentApplyRequestSchema = resourceApplySchema(AgentApplySpecSchema);
 var ApplyTriggerReceiptSchema = external_exports.object({
@@ -35365,6 +35354,45 @@ function hasFilterValue(trigger, path2, expected) {
   return trigger.where?.[path2] === expected;
 }
 
+// ../../packages/schemas/src/default-agent.ts
+var DefaultAgentRemovalSchema = external_exports.object({
+  env: external_exports.array(ResourceNameSchema).optional(),
+  tools: external_exports.array(ResourceNameSchema).optional(),
+  triggers: external_exports.array(ResourceNameSchema).optional()
+}).strict();
+var DefaultAgentOverlaySchema = AgentApplySpecFieldsSchema.partial().extend({
+  env: AgentApplySpecFieldsSchema.shape.env.removeDefault().optional(),
+  mounts: AgentApplySpecFieldsSchema.shape.mounts.removeDefault().optional(),
+  triggers: AgentApplySpecFieldsSchema.shape.triggers.removeDefault().optional(),
+  session: AgentApplySpecFieldsSchema.shape.session.removeDefault().optional(),
+  bindings: AgentApplySpecFieldsSchema.shape.bindings.removeDefault().optional(),
+  tools: AgentApplySpecFieldsSchema.shape.tools.removeDefault().optional(),
+  remove: DefaultAgentRemovalSchema.optional()
+}).strict();
+
+// ../../packages/schemas/src/dormant-capabilities.ts
+var DormantCapabilityConnectionSchema = external_exports.object({
+  provider: external_exports.string().trim().min(1),
+  connection: external_exports.string().trim().min(1)
+});
+var DormantCapabilitySchema = external_exports.object({
+  kind: external_exports.enum(["tool", "trigger"]),
+  name: external_exports.string().trim().min(1),
+  connections: external_exports.array(DormantCapabilityConnectionSchema).min(1)
+});
+var DormantCapabilitiesSchema = external_exports.array(DormantCapabilitySchema);
+
+// ../../packages/schemas/src/github-credentials.ts
+var CreateRunGithubCredentialRequestSchema = external_exports.object({
+  host: external_exports.literal("github.com"),
+  path: external_exports.string().trim().min(1).optional()
+});
+var RunGithubCredentialResponseSchema = external_exports.object({
+  username: external_exports.literal("x-access-token"),
+  password: external_exports.string().min(1),
+  expiresAt: external_exports.string().datetime()
+});
+
 // ../../packages/schemas/src/identities.ts
 var RESOURCE_KIND_IDENTITY = "identity";
 var IdentitySpecSchema = AgentIdentitySchema;