@autohq/cli 0.1.431 → 0.1.432

package/dist/index.js

@@ -17584,335 +17584,6 @@ var init_connections = __esm({
   }
 });
 
-// ../../packages/schemas/src/dormant-capabilities.ts
-var DormantCapabilityConnectionSchema, DormantCapabilitySchema, DormantCapabilitiesSchema;
-var init_dormant_capabilities = __esm({
-  "../../packages/schemas/src/dormant-capabilities.ts"() {
-    "use strict";
-    init_zod();
-    DormantCapabilityConnectionSchema = external_exports.object({
-      provider: external_exports.string().trim().min(1),
-      connection: external_exports.string().trim().min(1)
-    });
-    DormantCapabilitySchema = external_exports.object({
-      kind: external_exports.enum(["tool", "trigger"]),
-      name: external_exports.string().trim().min(1),
-      connections: external_exports.array(DormantCapabilityConnectionSchema).min(1)
-    });
-    DormantCapabilitiesSchema = external_exports.array(DormantCapabilitySchema);
-  }
-});
-
-// ../../packages/schemas/src/github-sync.ts
-var GITHUB_SYNC_AUTO_PATH, GITHUB_SYNC_CI_WATCHDOG_DEFAULT_DELAY_MS, GithubSyncRepositoryFullNameSchema, GithubSyncProductionBranchSchema, GithubSyncCiWatchdogWorkflowSchema, GithubSyncCiWatchdogSchema, GithubSyncBindingSchema, GithubSyncBindingCreateRequestSchema, GithubSyncInitialSyncSchema, GithubSyncBindingCreateResponseSchema, GithubSyncBindingListResponseSchema, GithubSyncTriggerArtifactSchema, GithubSyncWorkflowInputSchema, GithubSyncWorkflowResultSchema;
-var init_github_sync = __esm({
-  "../../packages/schemas/src/github-sync.ts"() {
-    "use strict";
-    init_zod();
-    init_ids();
-    init_primitives();
-    GITHUB_SYNC_AUTO_PATH = ".auto";
-    GITHUB_SYNC_CI_WATCHDOG_DEFAULT_DELAY_MS = 15e3;
-    GithubSyncRepositoryFullNameSchema = external_exports.string().trim().min(1).regex(/^[^/\s]+\/[^/\s]+$/, {
-      message: "repository must be in owner/name form"
-    });
-    GithubSyncProductionBranchSchema = external_exports.string().trim().min(1).max(255).refine((branch) => !branch.startsWith("/") && !branch.endsWith("/"), {
-      message: "branch must not start or end with /"
-    });
-    GithubSyncCiWatchdogWorkflowSchema = external_exports.object({
-      workflowId: external_exports.string().trim().min(1).max(255)
-    }).strict();
-    GithubSyncCiWatchdogSchema = external_exports.object({
-      workflows: external_exports.array(GithubSyncCiWatchdogWorkflowSchema).max(10).default([]),
-      checkDelayMs: external_exports.number().int().nonnegative().default(GITHUB_SYNC_CI_WATCHDOG_DEFAULT_DELAY_MS)
-    }).strict();
-    GithubSyncBindingSchema = external_exports.object({
-      id: external_exports.string().trim().min(1),
-      organizationId: OrganizationIdSchema,
-      projectId: ProjectIdSchema,
-      providerGrantId: ProviderGrantIdSchema,
-      installationId: external_exports.string().trim().min(1),
-      repoFullName: GithubSyncRepositoryFullNameSchema,
-      repoId: external_exports.string().trim().min(1).nullable(),
-      productionBranch: GithubSyncProductionBranchSchema,
-      autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
-      ciWatchdog: GithubSyncCiWatchdogSchema,
-      enabled: external_exports.boolean(),
-      lastPlannedSha: external_exports.string().trim().min(1).nullable(),
-      lastAppliedSha: external_exports.string().trim().min(1).nullable(),
-      createdAt: external_exports.string().datetime(),
-      updatedAt: external_exports.string().datetime()
-    });
-    GithubSyncBindingCreateRequestSchema = external_exports.object({
-      connection: external_exports.string().trim().min(1).optional(),
-      repo: GithubSyncRepositoryFullNameSchema,
-      repoId: external_exports.string().trim().min(1).optional(),
-      branch: GithubSyncProductionBranchSchema.optional(),
-      ciWatchdog: GithubSyncCiWatchdogSchema.optional()
-    });
-    GithubSyncInitialSyncSchema = external_exports.object({
-      started: external_exports.boolean(),
-      headSha: external_exports.string().trim().min(1).optional(),
-      workflowId: external_exports.string().trim().min(1).optional(),
-      reason: external_exports.enum([
-        "no_auto_directory",
-        "already_applied",
-        "probe_failed",
-        "start_failed"
-      ]).optional()
-    });
-    GithubSyncBindingCreateResponseSchema = external_exports.object({
-      binding: GithubSyncBindingSchema,
-      created: external_exports.boolean(),
-      initialSync: GithubSyncInitialSyncSchema.optional()
-    });
-    GithubSyncBindingListResponseSchema = external_exports.object({
-      bindings: external_exports.array(GithubSyncBindingSchema)
-    });
-    GithubSyncTriggerArtifactSchema = external_exports.object({
-      type: external_exports.string().trim().min(1),
-      externalId: external_exports.string().trim().min(1),
-      payload: JsonValueSchema.optional()
-    }).strict();
-    GithubSyncWorkflowInputSchema = external_exports.discriminatedUnion("kind", [
-      external_exports.object({
-        kind: external_exports.literal("pull_request"),
-        bindingId: external_exports.string().trim().min(1),
-        organizationId: OrganizationIdSchema,
-        projectId: ProjectIdSchema,
-        providerGrantId: ProviderGrantIdSchema,
-        installationId: external_exports.string().trim().min(1),
-        repoFullName: GithubSyncRepositoryFullNameSchema,
-        repoId: external_exports.string().trim().min(1).optional(),
-        productionBranch: GithubSyncProductionBranchSchema,
-        autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
-        pullRequestNumber: external_exports.number().int().positive(),
-        headSha: external_exports.string().trim().min(1),
-        baseSha: external_exports.string().trim().min(1).optional(),
-        baseRef: GithubSyncProductionBranchSchema,
-        triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
-      }),
-      external_exports.object({
-        kind: external_exports.literal("push"),
-        bindingId: external_exports.string().trim().min(1),
-        organizationId: OrganizationIdSchema,
-        projectId: ProjectIdSchema,
-        providerGrantId: ProviderGrantIdSchema,
-        installationId: external_exports.string().trim().min(1),
-        repoFullName: GithubSyncRepositoryFullNameSchema,
-        repoId: external_exports.string().trim().min(1).optional(),
-        productionBranch: GithubSyncProductionBranchSchema,
-        autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
-        ref: external_exports.string().trim().min(1),
-        branch: GithubSyncProductionBranchSchema,
-        before: external_exports.string().trim().min(1).optional(),
-        after: external_exports.string().trim().min(1),
-        triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
-      }),
-      // Synthetic re-apply triggered by a managed-template version bump (not a
-      // webhook). The tenant's `.auto` is unchanged — only our registry changed —
-      // so this arm skips the `no_auto_changes` early-out and applies the production
-      // branch HEAD (`after`, which the sweep resolves before starting the run).
-      // It is otherwise push-shaped. `templateName`/`version` identify the drift
-      // that triggered it (for the commit check + idempotent workflow id).
-      external_exports.object({
-        kind: external_exports.literal("template_push"),
-        bindingId: external_exports.string().trim().min(1),
-        organizationId: OrganizationIdSchema,
-        projectId: ProjectIdSchema,
-        providerGrantId: ProviderGrantIdSchema,
-        installationId: external_exports.string().trim().min(1),
-        repoFullName: GithubSyncRepositoryFullNameSchema,
-        repoId: external_exports.string().trim().min(1).optional(),
-        productionBranch: GithubSyncProductionBranchSchema,
-        autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
-        before: external_exports.string().trim().min(1).optional(),
-        after: external_exports.string().trim().min(1),
-        templateName: external_exports.string().trim().min(1),
-        version: external_exports.string().trim().min(1),
-        triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
-      }),
-      // Synthetic authoritative re-apply triggered by one durable connection
-      // lifecycle occurrence. The event id makes retries reuse the same workflow,
-      // while a later remove/re-allow occurrence can re-run at the same git SHA.
-      external_exports.object({
-        kind: external_exports.literal("connection_push"),
-        bindingId: external_exports.string().trim().min(1),
-        organizationId: OrganizationIdSchema,
-        projectId: ProjectIdSchema,
-        providerGrantId: ProviderGrantIdSchema,
-        installationId: external_exports.string().trim().min(1),
-        repoFullName: GithubSyncRepositoryFullNameSchema,
-        repoId: external_exports.string().trim().min(1).optional(),
-        productionBranch: GithubSyncProductionBranchSchema,
-        autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
-        before: external_exports.string().trim().min(1).optional(),
-        after: external_exports.string().trim().min(1),
-        connectionEventId: external_exports.string().trim().min(1),
-        triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
-      })
-    ]);
-    GithubSyncWorkflowResultSchema = external_exports.discriminatedUnion("status", [
-      external_exports.object({
-        status: external_exports.literal("skipped"),
-        reason: external_exports.string().trim().min(1)
-      }),
-      external_exports.object({
-        status: external_exports.literal("planned"),
-        changed: external_exports.boolean(),
-        checkRunId: external_exports.number().int().positive().optional()
-      }),
-      external_exports.object({
-        status: external_exports.literal("applied"),
-        changed: external_exports.boolean(),
-        checkRunId: external_exports.number().int().positive().optional()
-      }),
-      external_exports.object({
-        status: external_exports.literal("failed"),
-        message: external_exports.string().trim().min(1),
-        checkRunId: external_exports.number().int().positive().optional()
-      })
-    ]);
-  }
-});
-
-// ../../packages/schemas/src/github-credentials.ts
-var CreateRunGithubCredentialRequestSchema, RunGithubCredentialResponseSchema;
-var init_github_credentials = __esm({
-  "../../packages/schemas/src/github-credentials.ts"() {
-    "use strict";
-    init_zod();
-    CreateRunGithubCredentialRequestSchema = external_exports.object({
-      host: external_exports.literal("github.com"),
-      path: external_exports.string().trim().min(1).optional()
-    });
-    RunGithubCredentialResponseSchema = external_exports.object({
-      username: external_exports.literal("x-access-token"),
-      password: external_exports.string().min(1),
-      expiresAt: external_exports.string().datetime()
-    });
-  }
-});
-
-// ../../packages/schemas/src/github-mcp-catalog.ts
-var GITHUB_MCP_TOOL_NAMES, GITHUB_MCP_PROXY_TOOL_NAMES, GITHUB_MCP_SELECTABLE_TOOL_NAMES, GITHUB_MCP_MERGE_TOOLS, GITHUB_MCP_SECRETS_TOOLS, GITHUB_MCP_SECRETS_WRITE_TOOLS, GITHUB_MCP_WRITE_TOOLS, githubMcpToolNameSet, GITHUB_MCP_ATTRIBUTION_EXEMPT_PROXY_TOOLS, githubMcpWriteToolSet, githubMcpProxyToolSet, githubMcpMergeToolSet, githubMcpSecretsToolSet, githubMcpSecretsWriteToolSet;
-var init_github_mcp_catalog = __esm({
-  "../../packages/schemas/src/github-mcp-catalog.ts"() {
-    "use strict";
-    GITHUB_MCP_TOOL_NAMES = [
-      "actions_get",
-      "actions_list",
-      "actions_run_trigger",
-      "add_comment_to_pending_review",
-      "add_issue_comment",
-      "add_reply_to_pull_request_comment",
-      "create_branch",
-      "create_or_update_file",
-      "create_pull_request",
-      "create_repository",
-      "delete_file",
-      "fork_repository",
-      "get_commit",
-      "get_file_contents",
-      "get_job_logs",
-      "get_label",
-      "get_latest_release",
-      "get_release_by_tag",
-      "get_tag",
-      "issue_read",
-      "issue_write",
-      "list_branches",
-      "list_commits",
-      "list_issue_types",
-      "list_issues",
-      "list_pull_requests",
-      "list_releases",
-      "list_repository_collaborators",
-      "list_tags",
-      "merge_pull_request",
-      "pull_request_read",
-      "pull_request_review_write",
-      "push_files",
-      "search_code",
-      "search_commits",
-      "search_issues",
-      "search_pull_requests",
-      "search_repositories",
-      "sub_issue_write",
-      "update_pull_request",
-      "update_pull_request_branch"
-    ];
-    GITHUB_MCP_PROXY_TOOL_NAMES = [
-      "actions_secret_list",
-      "actions_secret_write",
-      "delete_issue_comment",
-      "download_comment_attachment",
-      "enable_pull_request_auto_merge",
-      "upsert_issue_comment"
-    ];
-    GITHUB_MCP_SELECTABLE_TOOL_NAMES = [
-      ...GITHUB_MCP_TOOL_NAMES,
-      ...GITHUB_MCP_PROXY_TOOL_NAMES
-    ];
-    GITHUB_MCP_MERGE_TOOLS = [
-      "merge_pull_request",
-      "enable_pull_request_auto_merge"
-    ];
-    GITHUB_MCP_SECRETS_TOOLS = [
-      "actions_secret_list",
-      "actions_secret_write"
-    ];
-    GITHUB_MCP_SECRETS_WRITE_TOOLS = [
-      "actions_secret_write"
-    ];
-    GITHUB_MCP_WRITE_TOOLS = [
-      "actions_run_trigger",
-      "add_comment_to_pending_review",
-      "add_issue_comment",
-      "add_reply_to_pull_request_comment",
-      "create_branch",
-      "create_or_update_file",
-      "create_pull_request",
-      "create_repository",
-      "delete_file",
-      "fork_repository",
-      "issue_write",
-      "merge_pull_request",
-      "pull_request_review_write",
-      "push_files",
-      "sub_issue_write",
-      "update_pull_request",
-      "update_pull_request_branch"
-    ];
-    githubMcpToolNameSet = new Set(
-      GITHUB_MCP_TOOL_NAMES
-    );
-    GITHUB_MCP_ATTRIBUTION_EXEMPT_PROXY_TOOLS = /* @__PURE__ */ new Set([
-      "actions_secret_list",
-      "download_comment_attachment",
-      "delete_issue_comment"
-    ]);
-    githubMcpWriteToolSet = /* @__PURE__ */ new Set([
-      ...GITHUB_MCP_WRITE_TOOLS,
-      ...GITHUB_MCP_PROXY_TOOL_NAMES.filter(
-        (name) => !GITHUB_MCP_ATTRIBUTION_EXEMPT_PROXY_TOOLS.has(name)
-      )
-    ]);
-    githubMcpProxyToolSet = new Set(
-      GITHUB_MCP_PROXY_TOOL_NAMES
-    );
-    githubMcpMergeToolSet = new Set(
-      GITHUB_MCP_MERGE_TOOLS
-    );
-    githubMcpSecretsToolSet = new Set(
-      GITHUB_MCP_SECRETS_TOOLS
-    );
-    githubMcpSecretsWriteToolSet = new Set(
-      GITHUB_MCP_SECRETS_WRITE_TOOLS
-    );
-  }
-});
-
 // ../../packages/schemas/src/mounts.ts
 var AbsoluteMountPathSchema, GITHUB_MOUNT_CAPABILITY_LEVELS, GithubMountCapabilityLevelSchema, GITHUB_MOUNT_MERGE_CAPABILITY_LEVELS, GithubMountMergeCapabilityLevelSchema, DEFAULT_GITHUB_MOUNT_CAPABILITIES, GitMountAuthSchema, GitMountSchema, AgentMountSchema;
 var init_mounts = __esm({
@@ -18209,6 +17880,125 @@ var init_session_bindings = __esm({
   }
 });
 
+// ../../packages/schemas/src/github-mcp-catalog.ts
+var GITHUB_MCP_TOOL_NAMES, GITHUB_MCP_PROXY_TOOL_NAMES, GITHUB_MCP_SELECTABLE_TOOL_NAMES, GITHUB_MCP_MERGE_TOOLS, GITHUB_MCP_SECRETS_TOOLS, GITHUB_MCP_SECRETS_WRITE_TOOLS, GITHUB_MCP_WRITE_TOOLS, githubMcpToolNameSet, GITHUB_MCP_ATTRIBUTION_EXEMPT_PROXY_TOOLS, githubMcpWriteToolSet, githubMcpProxyToolSet, githubMcpMergeToolSet, githubMcpSecretsToolSet, githubMcpSecretsWriteToolSet;
+var init_github_mcp_catalog = __esm({
+  "../../packages/schemas/src/github-mcp-catalog.ts"() {
+    "use strict";
+    GITHUB_MCP_TOOL_NAMES = [
+      "actions_get",
+      "actions_list",
+      "actions_run_trigger",
+      "add_comment_to_pending_review",
+      "add_issue_comment",
+      "add_reply_to_pull_request_comment",
+      "create_branch",
+      "create_or_update_file",
+      "create_pull_request",
+      "create_repository",
+      "delete_file",
+      "fork_repository",
+      "get_commit",
+      "get_file_contents",
+      "get_job_logs",
+      "get_label",
+      "get_latest_release",
+      "get_release_by_tag",
+      "get_tag",
+      "issue_read",
+      "issue_write",
+      "list_branches",
+      "list_commits",
+      "list_issue_types",
+      "list_issues",
+      "list_pull_requests",
+      "list_releases",
+      "list_repository_collaborators",
+      "list_tags",
+      "merge_pull_request",
+      "pull_request_read",
+      "pull_request_review_write",
+      "push_files",
+      "search_code",
+      "search_commits",
+      "search_issues",
+      "search_pull_requests",
+      "search_repositories",
+      "sub_issue_write",
+      "update_pull_request",
+      "update_pull_request_branch"
+    ];
+    GITHUB_MCP_PROXY_TOOL_NAMES = [
+      "actions_secret_list",
+      "actions_secret_write",
+      "delete_issue_comment",
+      "download_comment_attachment",
+      "enable_pull_request_auto_merge",
+      "upsert_issue_comment"
+    ];
+    GITHUB_MCP_SELECTABLE_TOOL_NAMES = [
+      ...GITHUB_MCP_TOOL_NAMES,
+      ...GITHUB_MCP_PROXY_TOOL_NAMES
+    ];
+    GITHUB_MCP_MERGE_TOOLS = [
+      "merge_pull_request",
+      "enable_pull_request_auto_merge"
+    ];
+    GITHUB_MCP_SECRETS_TOOLS = [
+      "actions_secret_list",
+      "actions_secret_write"
+    ];
+    GITHUB_MCP_SECRETS_WRITE_TOOLS = [
+      "actions_secret_write"
+    ];
+    GITHUB_MCP_WRITE_TOOLS = [
+      "actions_run_trigger",
+      "add_comment_to_pending_review",
+      "add_issue_comment",
+      "add_reply_to_pull_request_comment",
+      "create_branch",
+      "create_or_update_file",
+      "create_pull_request",
+      "create_repository",
+      "delete_file",
+      "fork_repository",
+      "issue_write",
+      "merge_pull_request",
+      "pull_request_review_write",
+      "push_files",
+      "sub_issue_write",
+      "update_pull_request",
+      "update_pull_request_branch"
+    ];
+    githubMcpToolNameSet = new Set(
+      GITHUB_MCP_TOOL_NAMES
+    );
+    GITHUB_MCP_ATTRIBUTION_EXEMPT_PROXY_TOOLS = /* @__PURE__ */ new Set([
+      "actions_secret_list",
+      "download_comment_attachment",
+      "delete_issue_comment"
+    ]);
+    githubMcpWriteToolSet = /* @__PURE__ */ new Set([
+      ...GITHUB_MCP_WRITE_TOOLS,
+      ...GITHUB_MCP_PROXY_TOOL_NAMES.filter(
+        (name) => !GITHUB_MCP_ATTRIBUTION_EXEMPT_PROXY_TOOLS.has(name)
+      )
+    ]);
+    githubMcpProxyToolSet = new Set(
+      GITHUB_MCP_PROXY_TOOL_NAMES
+    );
+    githubMcpMergeToolSet = new Set(
+      GITHUB_MCP_MERGE_TOOLS
+    );
+    githubMcpSecretsToolSet = new Set(
+      GITHUB_MCP_SECRETS_TOOLS
+    );
+    githubMcpSecretsWriteToolSet = new Set(
+      GITHUB_MCP_SECRETS_WRITE_TOOLS
+    );
+  }
+});
+
 // ../../packages/schemas/src/tools.ts
 function remoteMcpUrlSchema(input) {
   return external_exports.string().trim().url().refine(
@@ -18397,6 +18187,179 @@ var init_tools = __esm({
   }
 });
 
+// ../../packages/schemas/src/github-sync.ts
+var GITHUB_SYNC_AUTO_PATH, GITHUB_SYNC_CI_WATCHDOG_DEFAULT_DELAY_MS, GithubSyncRepositoryFullNameSchema, GithubSyncProductionBranchSchema, GithubSyncCiWatchdogWorkflowSchema, GithubSyncCiWatchdogSchema, GithubSyncBindingSchema, GithubSyncBindingCreateRequestSchema, GithubSyncInitialSyncSchema, GithubSyncBindingCreateResponseSchema, GithubSyncBindingListResponseSchema, GithubSyncTriggerArtifactSchema, GithubSyncWorkflowInputSchema, GithubSyncWorkflowResultSchema;
+var init_github_sync = __esm({
+  "../../packages/schemas/src/github-sync.ts"() {
+    "use strict";
+    init_zod();
+    init_ids();
+    init_primitives();
+    GITHUB_SYNC_AUTO_PATH = ".auto";
+    GITHUB_SYNC_CI_WATCHDOG_DEFAULT_DELAY_MS = 15e3;
+    GithubSyncRepositoryFullNameSchema = external_exports.string().trim().min(1).regex(/^[^/\s]+\/[^/\s]+$/, {
+      message: "repository must be in owner/name form"
+    });
+    GithubSyncProductionBranchSchema = external_exports.string().trim().min(1).max(255).refine((branch) => !branch.startsWith("/") && !branch.endsWith("/"), {
+      message: "branch must not start or end with /"
+    });
+    GithubSyncCiWatchdogWorkflowSchema = external_exports.object({
+      workflowId: external_exports.string().trim().min(1).max(255)
+    }).strict();
+    GithubSyncCiWatchdogSchema = external_exports.object({
+      workflows: external_exports.array(GithubSyncCiWatchdogWorkflowSchema).max(10).default([]),
+      checkDelayMs: external_exports.number().int().nonnegative().default(GITHUB_SYNC_CI_WATCHDOG_DEFAULT_DELAY_MS)
+    }).strict();
+    GithubSyncBindingSchema = external_exports.object({
+      id: external_exports.string().trim().min(1),
+      organizationId: OrganizationIdSchema,
+      projectId: ProjectIdSchema,
+      providerGrantId: ProviderGrantIdSchema,
+      installationId: external_exports.string().trim().min(1),
+      repoFullName: GithubSyncRepositoryFullNameSchema,
+      repoId: external_exports.string().trim().min(1).nullable(),
+      productionBranch: GithubSyncProductionBranchSchema,
+      autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
+      ciWatchdog: GithubSyncCiWatchdogSchema,
+      enabled: external_exports.boolean(),
+      lastPlannedSha: external_exports.string().trim().min(1).nullable(),
+      lastAppliedSha: external_exports.string().trim().min(1).nullable(),
+      createdAt: external_exports.string().datetime(),
+      updatedAt: external_exports.string().datetime()
+    });
+    GithubSyncBindingCreateRequestSchema = external_exports.object({
+      connection: external_exports.string().trim().min(1).optional(),
+      repo: GithubSyncRepositoryFullNameSchema,
+      repoId: external_exports.string().trim().min(1).optional(),
+      branch: GithubSyncProductionBranchSchema.optional(),
+      ciWatchdog: GithubSyncCiWatchdogSchema.optional()
+    });
+    GithubSyncInitialSyncSchema = external_exports.object({
+      started: external_exports.boolean(),
+      headSha: external_exports.string().trim().min(1).optional(),
+      workflowId: external_exports.string().trim().min(1).optional(),
+      reason: external_exports.enum([
+        "no_auto_directory",
+        "already_applied",
+        "probe_failed",
+        "start_failed"
+      ]).optional()
+    });
+    GithubSyncBindingCreateResponseSchema = external_exports.object({
+      binding: GithubSyncBindingSchema,
+      created: external_exports.boolean(),
+      initialSync: GithubSyncInitialSyncSchema.optional()
+    });
+    GithubSyncBindingListResponseSchema = external_exports.object({
+      bindings: external_exports.array(GithubSyncBindingSchema)
+    });
+    GithubSyncTriggerArtifactSchema = external_exports.object({
+      type: external_exports.string().trim().min(1),
+      externalId: external_exports.string().trim().min(1),
+      payload: JsonValueSchema.optional()
+    }).strict();
+    GithubSyncWorkflowInputSchema = external_exports.discriminatedUnion("kind", [
+      external_exports.object({
+        kind: external_exports.literal("pull_request"),
+        bindingId: external_exports.string().trim().min(1),
+        organizationId: OrganizationIdSchema,
+        projectId: ProjectIdSchema,
+        providerGrantId: ProviderGrantIdSchema,
+        installationId: external_exports.string().trim().min(1),
+        repoFullName: GithubSyncRepositoryFullNameSchema,
+        repoId: external_exports.string().trim().min(1).optional(),
+        productionBranch: GithubSyncProductionBranchSchema,
+        autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
+        pullRequestNumber: external_exports.number().int().positive(),
+        headSha: external_exports.string().trim().min(1),
+        baseSha: external_exports.string().trim().min(1).optional(),
+        baseRef: GithubSyncProductionBranchSchema,
+        triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
+      }),
+      external_exports.object({
+        kind: external_exports.literal("push"),
+        bindingId: external_exports.string().trim().min(1),
+        organizationId: OrganizationIdSchema,
+        projectId: ProjectIdSchema,
+        providerGrantId: ProviderGrantIdSchema,
+        installationId: external_exports.string().trim().min(1),
+        repoFullName: GithubSyncRepositoryFullNameSchema,
+        repoId: external_exports.string().trim().min(1).optional(),
+        productionBranch: GithubSyncProductionBranchSchema,
+        autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
+        ref: external_exports.string().trim().min(1),
+        branch: GithubSyncProductionBranchSchema,
+        before: external_exports.string().trim().min(1).optional(),
+        after: external_exports.string().trim().min(1),
+        triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
+      }),
+      // Synthetic re-apply triggered by a managed-template version bump (not a
+      // webhook). The tenant's `.auto` is unchanged — only our registry changed —
+      // so this arm skips the `no_auto_changes` early-out and applies the production
+      // branch HEAD (`after`, which the sweep resolves before starting the run).
+      // It is otherwise push-shaped. `templateName`/`version` identify the drift
+      // that triggered it (for the commit check + idempotent workflow id).
+      external_exports.object({
+        kind: external_exports.literal("template_push"),
+        bindingId: external_exports.string().trim().min(1),
+        organizationId: OrganizationIdSchema,
+        projectId: ProjectIdSchema,
+        providerGrantId: ProviderGrantIdSchema,
+        installationId: external_exports.string().trim().min(1),
+        repoFullName: GithubSyncRepositoryFullNameSchema,
+        repoId: external_exports.string().trim().min(1).optional(),
+        productionBranch: GithubSyncProductionBranchSchema,
+        autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
+        before: external_exports.string().trim().min(1).optional(),
+        after: external_exports.string().trim().min(1),
+        templateName: external_exports.string().trim().min(1),
+        version: external_exports.string().trim().min(1),
+        triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
+      }),
+      // Synthetic authoritative re-apply triggered by one durable connection
+      // lifecycle occurrence. The event id makes retries reuse the same workflow,
+      // while a later remove/re-allow occurrence can re-run at the same git SHA.
+      external_exports.object({
+        kind: external_exports.literal("connection_push"),
+        bindingId: external_exports.string().trim().min(1),
+        organizationId: OrganizationIdSchema,
+        projectId: ProjectIdSchema,
+        providerGrantId: ProviderGrantIdSchema,
+        installationId: external_exports.string().trim().min(1),
+        repoFullName: GithubSyncRepositoryFullNameSchema,
+        repoId: external_exports.string().trim().min(1).optional(),
+        productionBranch: GithubSyncProductionBranchSchema,
+        autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
+        before: external_exports.string().trim().min(1).optional(),
+        after: external_exports.string().trim().min(1),
+        connectionEventId: external_exports.string().trim().min(1),
+        triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
+      })
+    ]);
+    GithubSyncWorkflowResultSchema = external_exports.discriminatedUnion("status", [
+      external_exports.object({
+        status: external_exports.literal("skipped"),
+        reason: external_exports.string().trim().min(1)
+      }),
+      external_exports.object({
+        status: external_exports.literal("planned"),
+        changed: external_exports.boolean(),
+        checkRunId: external_exports.number().int().positive().optional()
+      }),
+      external_exports.object({
+        status: external_exports.literal("applied"),
+        changed: external_exports.boolean(),
+        checkRunId: external_exports.number().int().positive().optional()
+      }),
+      external_exports.object({
+        status: external_exports.literal("failed"),
+        message: external_exports.string().trim().min(1),
+        checkRunId: external_exports.number().int().positive().optional()
+      })
+    ]);
+  }
+});
+
 // ../../packages/schemas/src/trigger-router.ts
 function normalizeLegacyHeartbeatTickWorkflowInput(input) {
   if (!input || typeof input !== "object" || Array.isArray(input)) {
@@ -19078,7 +19041,7 @@ function isChatMessageEvent(trigger) {
 function hasFilterValue(trigger, path2, expected) {
   return trigger.where?.[path2] === expected;
 }
-var RESOURCE_KIND_AGENT, AGENT_HARNESSES, AgentHarnessSchema, TriggerFilterScalarSchema, TriggerFilterPathSchema, TriggerFilterClauseSchema, TriggerFilterSchema, TriggerCheckTimeoutSchema, AgentArchiveAfterInactiveSchema, AgentSessionPolicySchema, AgentConcurrencySchema, AgentReplacePolicySchema, AgentManagesSchema, TriggerEventSchema, TriggerEventsSchema, PAYLOAD_PREFIXED_TEMPLATE_TOKEN, TriggerChecksField, TriggerEventSourceFields, TriggerSchema, ApplyTriggerSchema, HeartbeatTriggerSchema, ApplyHeartbeatTriggerSchema, TriggerDefinitionSchema, ApplyTriggerDefinitionSchema, TriggersSchema, ApplyTriggersSchema, AVATAR_ASSET_EXTENSIONS, MAX_AVATAR_ASSET_BYTES, MIN_AVATAR_ASSET_DIMENSION_PX, MAX_AVATAR_ASSET_DIMENSION_PX, PNG_SIGNATURE, AGENT_IDENTITY_DESCRIPTION_MAX_LENGTH, SHA256_HEX_PATTERN, AgentIdentitySchema, BINDING_LIFECYCLE_VALUES, BindingLifecycleSpecSchema, AgentBindingsSchema, AgentSpecFieldsSchema, AgentSpecSchema, AgentApplySpecSchema, AgentStatusSchema, AgentResourceSchema, AgentApplyRequestSchema, ApplyTriggerReceiptSchema, AgentApplyResponseSchema, AGENT_TELEGRAM_IDENTITY_STATUSES, AgentTelegramIdentityStatusSchema, AgentPresenceIdentitySchema, AgentPresenceResponseSchema, AgentPresenceConnectRequestSchema, AgentPresenceConnectPendingSchema, AgentPresenceConnectResponseSchema, AgentPresenceIconRequestSchema, AgentPresenceIconResponseSchema, AgentPresenceCompleteResponseSchema;
+var RESOURCE_KIND_AGENT, AGENT_HARNESSES, AgentHarnessSchema, TriggerFilterScalarSchema, TriggerFilterPathSchema, TriggerFilterClauseSchema, TriggerFilterSchema, TriggerCheckTimeoutSchema, AgentArchiveAfterInactiveSchema, AgentSessionPolicySchema, AgentConcurrencySchema, AgentReplacePolicySchema, AgentManagesSchema, TriggerEventSchema, TriggerEventsSchema, PAYLOAD_PREFIXED_TEMPLATE_TOKEN, TriggerChecksField, TriggerEventSourceFields, TriggerSchema, ApplyTriggerSchema, HeartbeatTriggerSchema, ApplyHeartbeatTriggerSchema, TriggerDefinitionSchema, ApplyTriggerDefinitionSchema, TriggersSchema, ApplyTriggersSchema, AVATAR_ASSET_EXTENSIONS, MAX_AVATAR_ASSET_BYTES, MIN_AVATAR_ASSET_DIMENSION_PX, MAX_AVATAR_ASSET_DIMENSION_PX, PNG_SIGNATURE, AGENT_IDENTITY_DESCRIPTION_MAX_LENGTH, SHA256_HEX_PATTERN, AgentIdentitySchema, BINDING_LIFECYCLE_VALUES, BindingLifecycleSpecSchema, AgentBindingsSchema, AgentSpecFieldsSchema, AgentSpecSchema, AgentApplySpecFieldsSchema, AgentApplySpecSchema, AgentStatusSchema, AgentResourceOriginSchema, BuiltInAgentMetadataSchema, AgentResourceSchema, AgentApplyRequestSchema, ApplyTriggerReceiptSchema, AgentApplyResponseSchema, AGENT_TELEGRAM_IDENTITY_STATUSES, AgentTelegramIdentityStatusSchema, AgentPresenceIdentitySchema, AgentPresenceResponseSchema, AgentPresenceConnectRequestSchema, AgentPresenceConnectPendingSchema, AgentPresenceConnectResponseSchema, AgentPresenceIconRequestSchema, AgentPresenceIconResponseSchema, AgentPresenceCompleteResponseSchema;
 var init_agents = __esm({
   "../../packages/schemas/src/agents.ts"() {
     "use strict";
@@ -19314,26 +19277,38 @@ var init_agents = __esm({
         validateAgentModelFieldsForHarness(spec, context);
       }
     );
-    AgentApplySpecSchema = AgentSpecFieldsSchema.extend({
+    AgentApplySpecFieldsSchema = AgentSpecFieldsSchema.extend({
       initialPrompt: templateField("authoring"),
       displayTitle: displayTitleField("authoring"),
       triggers: ApplyTriggersSchema.default([])
-    }).superRefine((spec, context) => {
-      validateRunnableConfig(spec, context);
-      validateAgentModelFieldsForHarness(spec, context);
-      validateConcurrencyConfig(spec, context);
-      validateBindingsConfig(spec, context);
-      validateTriggerReleaseConfig(spec, context);
-      validateTriggerObservedTargetConfig(spec, context);
     });
+    AgentApplySpecSchema = AgentApplySpecFieldsSchema.superRefine(
+      (spec, context) => {
+        validateRunnableConfig(spec, context);
+        validateAgentModelFieldsForHarness(spec, context);
+        validateConcurrencyConfig(spec, context);
+        validateBindingsConfig(spec, context);
+        validateTriggerReleaseConfig(spec, context);
+        validateTriggerObservedTargetConfig(spec, context);
+      }
+    );
     AgentStatusSchema = external_exports.object({
       runCount: external_exports.number().int().nonnegative().default(0),
       lastActivityAt: external_exports.string().datetime().nullable().default(null)
     }).default({ runCount: 0, lastActivityAt: null });
+    AgentResourceOriginSchema = external_exports.enum(["authored", "built_in"]);
+    BuiltInAgentMetadataSchema = external_exports.object({
+      templateVersion: external_exports.string().trim().min(1),
+      harnessPinned: external_exports.boolean(),
+      authoredOverlay: JsonValueSchema.nullable(),
+      provenance: external_exports.record(external_exports.string().min(1), external_exports.enum(["built_in", "authored"]))
+    });
     AgentResourceSchema = resourceEnvelopeSchema(
       AgentSpecSchema
     ).extend({
-      status: AgentStatusSchema
+      status: AgentStatusSchema,
+      origin: AgentResourceOriginSchema.optional(),
+      builtIn: BuiltInAgentMetadataSchema.optional()
     });
     AgentApplyRequestSchema = resourceApplySchema(AgentApplySpecSchema);
     ApplyTriggerReceiptSchema = external_exports.object({
@@ -19447,6 +19422,166 @@ var init_agents = __esm({
   }
 });
 
+// ../../packages/schemas/src/default-agent.ts
+function builtInDefaultAgentSpec() {
+  return AgentApplySpecSchema.parse({
+    harness: BUILT_IN_DEFAULT_AGENT_RECOMMENDED_HARNESS,
+    environment: BUILT_IN_DEFAULT_AGENT_ENVIRONMENT_NAME,
+    identity: {
+      displayName: "Default",
+      username: BUILT_IN_DEFAULT_AGENT_NAME,
+      description: "Auto's built-in general-purpose agent."
+    },
+    tools: {
+      auto: {
+        kind: "local",
+        implementation: "auto"
+      }
+    }
+  });
+}
+function resolveBuiltInDefaultAgentSpec(input) {
+  const overlay = DefaultAgentOverlaySchema.parse(input);
+  const { remove, ...authoredSpec } = overlay;
+  const base = builtInDefaultAgentSpec();
+  const merged = mergeValues2(base, authoredSpec);
+  for (const name of remove?.env ?? []) {
+    removeKeyedEntry(merged, "env", name);
+  }
+  for (const name of remove?.tools ?? []) {
+    removeKeyedEntry(merged, "tools", name);
+  }
+  const harnessPinned = authoredSpec.harness !== void 0;
+  if ((authoredSpec.triggers?.length ?? 0) > 0 && !harnessPinned) {
+    throw new Error(
+      "Default agent triggers require an authored harness because unattended sessions cannot choose one"
+    );
+  }
+  const spec = AgentApplySpecSchema.parse(merged);
+  const provenance = {};
+  recordLeafProvenance(base, "", "built_in", provenance);
+  recordLeafProvenance(authoredSpec, "", "authored", provenance);
+  for (const name of remove?.env ?? []) {
+    delete provenance[`env.${name}`];
+  }
+  for (const name of remove?.tools ?? []) {
+    for (const key of Object.keys(provenance)) {
+      if (key === `tools.${name}` || key.startsWith(`tools.${name}.`)) {
+        delete provenance[key];
+      }
+    }
+  }
+  return { spec, harnessPinned, provenance };
+}
+function mergeValues2(base, overlay) {
+  if (overlay === void 0) {
+    return structuredClone(base);
+  }
+  if (isRecord(base) && isRecord(overlay)) {
+    const merged = structuredClone(base);
+    for (const [key, value] of Object.entries(overlay)) {
+      merged[key] = mergeValues2(merged[key], value);
+    }
+    return merged;
+  }
+  return structuredClone(overlay);
+}
+function removeKeyedEntry(spec, field, name) {
+  const entries = spec[field];
+  if (isRecord(entries)) {
+    delete entries[name];
+  }
+}
+function recordLeafProvenance(value, path2, source, output) {
+  if (isRecord(value)) {
+    if (path2) {
+      output[path2] = source;
+    }
+    const entries = Object.entries(value);
+    if (entries.length === 0 && path2) {
+      output[path2] = source;
+      return;
+    }
+    for (const [key, nested] of entries) {
+      recordLeafProvenance(
+        nested,
+        path2 ? `${path2}.${key}` : key,
+        source,
+        output
+      );
+    }
+    return;
+  }
+  output[path2] = source;
+}
+function isRecord(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+var BUILT_IN_DEFAULT_AGENT_NAME, BUILT_IN_DEFAULT_AGENT_ENVIRONMENT_NAME, BUILT_IN_DEFAULT_AGENT_RECOMMENDED_HARNESS, BUILT_IN_DEFAULT_AGENT_OVERLAY_ANNOTATION, DefaultAgentRemovalSchema, DefaultAgentOverlaySchema;
+var init_default_agent = __esm({
+  "../../packages/schemas/src/default-agent.ts"() {
+    "use strict";
+    init_zod();
+    init_agents();
+    init_resources();
+    BUILT_IN_DEFAULT_AGENT_NAME = "default";
+    BUILT_IN_DEFAULT_AGENT_ENVIRONMENT_NAME = "auto-default-runtime";
+    BUILT_IN_DEFAULT_AGENT_RECOMMENDED_HARNESS = "claude-code";
+    BUILT_IN_DEFAULT_AGENT_OVERLAY_ANNOTATION = "auto.dev/default-agent-overlay";
+    DefaultAgentRemovalSchema = external_exports.object({
+      env: external_exports.array(ResourceNameSchema).optional(),
+      tools: external_exports.array(ResourceNameSchema).optional(),
+      triggers: external_exports.array(ResourceNameSchema).optional()
+    }).strict();
+    DefaultAgentOverlaySchema = AgentApplySpecFieldsSchema.partial().extend({
+      env: AgentApplySpecFieldsSchema.shape.env.removeDefault().optional(),
+      mounts: AgentApplySpecFieldsSchema.shape.mounts.removeDefault().optional(),
+      triggers: AgentApplySpecFieldsSchema.shape.triggers.removeDefault().optional(),
+      session: AgentApplySpecFieldsSchema.shape.session.removeDefault().optional(),
+      bindings: AgentApplySpecFieldsSchema.shape.bindings.removeDefault().optional(),
+      tools: AgentApplySpecFieldsSchema.shape.tools.removeDefault().optional(),
+      remove: DefaultAgentRemovalSchema.optional()
+    }).strict();
+  }
+});
+
+// ../../packages/schemas/src/dormant-capabilities.ts
+var DormantCapabilityConnectionSchema, DormantCapabilitySchema, DormantCapabilitiesSchema;
+var init_dormant_capabilities = __esm({
+  "../../packages/schemas/src/dormant-capabilities.ts"() {
+    "use strict";
+    init_zod();
+    DormantCapabilityConnectionSchema = external_exports.object({
+      provider: external_exports.string().trim().min(1),
+      connection: external_exports.string().trim().min(1)
+    });
+    DormantCapabilitySchema = external_exports.object({
+      kind: external_exports.enum(["tool", "trigger"]),
+      name: external_exports.string().trim().min(1),
+      connections: external_exports.array(DormantCapabilityConnectionSchema).min(1)
+    });
+    DormantCapabilitiesSchema = external_exports.array(DormantCapabilitySchema);
+  }
+});
+
+// ../../packages/schemas/src/github-credentials.ts
+var CreateRunGithubCredentialRequestSchema, RunGithubCredentialResponseSchema;
+var init_github_credentials = __esm({
+  "../../packages/schemas/src/github-credentials.ts"() {
+    "use strict";
+    init_zod();
+    CreateRunGithubCredentialRequestSchema = external_exports.object({
+      host: external_exports.literal("github.com"),
+      path: external_exports.string().trim().min(1).optional()
+    });
+    RunGithubCredentialResponseSchema = external_exports.object({
+      username: external_exports.literal("x-access-token"),
+      password: external_exports.string().min(1),
+      expiresAt: external_exports.string().datetime()
+    });
+  }
+});
+
 // ../../packages/schemas/src/identities.ts
 var RESOURCE_KIND_IDENTITY, IdentitySpecSchema, IdentityResourceSchema, IdentityApplyRequestSchema;
 var init_identities = __esm({
@@ -41526,6 +41661,7 @@ var init_src = __esm({
     init_conversation();
     init_conversation_reducer();
     init_connections();
+    init_default_agent();
     init_dormant_capabilities();
     init_github_sync();
     init_github_credentials();
@@ -44329,7 +44465,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.431",
+      version: "0.1.432",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"
@@ -44534,7 +44670,7 @@ function compileAgentDocument(document, path2, stack, context) {
       `Agent import cycle detected: ${[...stack, resolvedPath].join(" -> ")}`
     );
   }
-  if (!isRecord(document)) {
+  if (!isRecord2(document)) {
     throw new Error(`Invalid agent authoring file ${path2}: expected object`);
   }
   const imports = importPaths(document).map(
@@ -44544,7 +44680,7 @@ function compileAgentDocument(document, path2, stack, context) {
   let merged = {};
   for (const imported of imports) {
     const importedDocument = readSingleDocument(imported);
-    merged = mergeValues2(
+    merged = mergeValues3(
       merged,
       compileAgentDocument(
         importedDocument,
@@ -44560,7 +44696,7 @@ function compileAgentDocument(document, path2, stack, context) {
     merged = applyRemoval(merged, removal);
     context.removals.push(removal);
   }
-  return mergeValues2(
+  return mergeValues3(
     merged,
     authoringDocumentApplyShape(document, resolvedPath),
     []
@@ -44659,25 +44795,25 @@ function authoringDocumentApplyShape(document, path2) {
   };
 }
 function finalizeAgentApplyShape(document, path2) {
-  if (!isRecord(document) || !isRecord(document.spec)) {
+  if (!isRecord2(document) || !isRecord2(document.spec)) {
     return { resource: document, resources: [] };
   }
   const next = structuredClone(document);
   const spec = next.spec;
   const resources = [];
-  if (isRecord(spec.environment)) {
+  if (isRecord2(spec.environment)) {
     const environment = inlineEnvironmentResource(spec.environment, path2);
     spec.environment = environment.metadata.name;
     resources.push(environment);
   }
-  if (isRecord(spec.identity)) {
+  if (isRecord2(spec.identity)) {
     const identity2 = inlineIdentityResource(spec.identity, next, path2);
     spec.identity = identity2.metadata.name;
     resources.push(identity2);
   }
   if (Array.isArray(spec.triggers)) {
     spec.triggers = spec.triggers.map((trigger) => {
-      if (!isRecord(trigger) || !("name" in trigger)) {
+      if (!isRecord2(trigger) || !("name" in trigger)) {
         return trigger;
       }
       const compiledTrigger = { ...trigger };
@@ -44725,7 +44861,7 @@ function inlineIdentityResource(document, agentDocument, path2) {
     }
     spec[key] = value;
   }
-  if (metadata.name === void 0 && isRecord(agentDocument.metadata) && typeof agentDocument.metadata.name === "string") {
+  if (metadata.name === void 0 && isRecord2(agentDocument.metadata) && typeof agentDocument.metadata.name === "string") {
     metadata.name = agentDocument.metadata.name;
   }
   const parsed = IdentityApplyRequestSchema.safeParse({ metadata, spec });
@@ -44761,7 +44897,7 @@ function resolveFileBackedFields(spec, path2) {
   };
 }
 function resolveFileBackedString(value, input) {
-  if (!isRecord(value) || !("file" in value)) {
+  if (!isRecord2(value) || !("file" in value)) {
     return value;
   }
   const file2 = value.file;
@@ -44779,8 +44915,8 @@ function resolveFileBackedString(value, input) {
   return readFileSync6(resolve(dirname7(input.path), filePath), "utf8");
 }
 function removalDirectives(document, path2) {
-  const raw = isRecord(document.remove) ? document.remove : {};
-  if (!isRecord(raw)) {
+  const raw = isRecord2(document.remove) ? document.remove : {};
+  if (!isRecord2(raw)) {
     return [];
   }
   const directives = [];
@@ -44802,18 +44938,18 @@ function stringList(value, label) {
   });
 }
 function applyRemoval(value, removal) {
-  if (!isRecord(value)) {
+  if (!isRecord2(value)) {
     return value;
   }
   const next = structuredClone(value);
-  if (!isRecord(next.spec)) {
+  if (!isRecord2(next.spec)) {
     return next;
   }
   const spec = { ...next.spec };
   next.spec = spec;
   switch (removal.target) {
     case "tools": {
-      if (!isRecord(spec[removal.target])) {
+      if (!isRecord2(spec[removal.target])) {
         return next;
       }
       const collection = {
@@ -44850,17 +44986,17 @@ function assertSupportedRemovalTarget(target) {
     );
   }
 }
-function mergeValues2(base, override, path2) {
+function mergeValues3(base, override, path2) {
   if (override === void 0) {
     return base;
   }
   if (Array.isArray(base) && Array.isArray(override)) {
     return mergeArrays(base, override, path2);
   }
-  if (isRecord(base) && isRecord(override)) {
+  if (isRecord2(base) && isRecord2(override)) {
     const merged = { ...base };
     for (const [key, value] of Object.entries(override)) {
-      merged[key] = mergeValues2(merged[key], value, [...path2, key]);
+      merged[key] = mergeValues3(merged[key], value, [...path2, key]);
     }
     return merged;
   }
@@ -44882,7 +45018,7 @@ function mergeArrays(base, override, path2) {
   for (const item of override) {
     const key = collectionItemKey(path2.at(-1) ?? "", item);
     if (key && indexByKey.has(key)) {
-      merged[indexByKey.get(key) ?? 0] = mergeValues2(
+      merged[indexByKey.get(key) ?? 0] = mergeValues3(
         merged[indexByKey.get(key) ?? 0],
         item,
         path2
@@ -44900,7 +45036,7 @@ function isNamedArrayMergePath(path2) {
   return path2 === "spec.mounts" || path2 === "spec.triggers";
 }
 function collectionItemKey(collection, item) {
-  if (!isRecord(item)) {
+  if (!isRecord2(item)) {
     return void 0;
   }
   if (typeof item.name === "string") {
@@ -44932,7 +45068,7 @@ function isAgentFile(path2) {
     return false;
   }
 }
-function isRecord(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 var AGENT_FILE_EXTENSIONS, AGENT_SPEC_FIELDS, AGENT_METADATA_FIELDS;
@@ -45334,7 +45470,7 @@ function sourceFileIndex(files) {
 function isAbsoluteSourcePath(path2) {
   return path2.startsWith("/");
 }
-function isRecord2(value) {
+function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 var APPLY_DIRECTORIES, PROJECT_APPLY_RESOURCE_DIRECTORIES;
@@ -45412,7 +45548,7 @@ function resolveTemplateImportPath(importPath, fileIndex) {
   return key;
 }
 function removalDirectives2(document, path2) {
-  const raw = isRecord2(document.remove) ? document.remove : {};
+  const raw = isRecord3(document.remove) ? document.remove : {};
   const directives = [];
   for (const [target, value] of Object.entries(raw)) {
     const names = stringList2(value, `remove.${target}`);
@@ -45553,14 +45689,14 @@ function cloneAgentDraft(draft) {
 function isMetadataFieldKey(key) {
   return AGENT_METADATA_FIELD_KEYS.includes(key);
 }
-function mergeValues3(base, override) {
+function mergeValues4(base, override) {
   if (override === void 0) {
     return base;
   }
-  if (isRecord2(base) && isRecord2(override)) {
+  if (isRecord3(base) && isRecord3(override)) {
     const merged = { ...base };
     for (const [key, value] of Object.entries(override)) {
-      merged[key] = mergeValues3(merged[key], value);
+      merged[key] = mergeValues4(merged[key], value);
     }
     return merged;
   }
@@ -45577,7 +45713,7 @@ function sortJson(value) {
   if (Array.isArray(value)) {
     return value.map(sortJson);
   }
-  if (isRecord2(value)) {
+  if (isRecord3(value)) {
     return Object.fromEntries(
       Object.entries(value).sort(([left], [right]) => left.localeCompare(right)).map(([key, nested]) => [key, sortJson(nested)])
     );
@@ -45613,7 +45749,7 @@ function fileBackedStringField() {
   };
 }
 function rejectDirectiveObject(value, input) {
-  if (isRecord2(value) && "append" in value) {
+  if (isRecord3(value) && "append" in value) {
     throw new Error(
       `Invalid agent authoring file ${input.path}: ${input.field} does not support directive objects; append is supported on ${APPEND_CAPABLE_FIELDS}`
     );
@@ -45621,7 +45757,7 @@ function rejectDirectiveObject(value, input) {
   return value;
 }
 function resolveFileBackedString2(value, input) {
-  if (!isRecord2(value)) {
+  if (!isRecord3(value)) {
     return value;
   }
   if ("file" in value && !("append" in value)) {
@@ -45687,7 +45823,7 @@ function resolveAppendDirective(base, override) {
         `Invalid agent authoring file ${droppedPending.path}: ${droppedPending.field} append directive was merged before any base value; import the base document before its append overlay`
       );
     }
-    return mergeValues3(base, override);
+    return mergeValues4(base, override);
   }
   if (typeof base === "string") {
     return base + directive.text;
@@ -45719,11 +45855,11 @@ function rejectUnresolvedAppendDirective(value) {
   );
 }
 function appendDirectiveFromMarker(value) {
-  if (!isRecord2(value)) {
+  if (!isRecord3(value)) {
     return void 0;
   }
   const marker = value[APPEND_DIRECTIVE_MARKER_KEY];
-  if (!isRecord2(marker)) {
+  if (!isRecord3(marker)) {
     return void 0;
   }
   return marker;
@@ -45743,9 +45879,9 @@ var init_file_backed_string = __esm({
 function inlineEnvironmentField() {
   return {
     target: "spec",
-    merge: (base, override) => mergeValues3(base, override),
+    merge: (base, override) => mergeValues4(base, override),
     compile: (value, context) => {
-      if (!isRecord2(value)) {
+      if (!isRecord3(value)) {
         return { resources: [], value };
       }
       const resource = inlineEnvironmentResource2(value, context.path);
@@ -45756,9 +45892,9 @@ function inlineEnvironmentField() {
 function inlineIdentityField() {
   return {
     target: "spec",
-    merge: (base, override) => mergeValues3(base, override),
+    merge: (base, override) => mergeValues4(base, override),
     compile: (value, context) => {
-      if (!isRecord2(value)) {
+      if (!isRecord3(value)) {
         return { resources: [], value };
       }
       const resource = inlineIdentityResource2(
@@ -45771,7 +45907,7 @@ function inlineIdentityField() {
   };
 }
 function assertAgentAuthoringDocument(document, path2) {
-  if (!isRecord2(document) || !("kind" in document)) {
+  if (!isRecord3(document) || !("kind" in document)) {
     return;
   }
   if (document.kind === "session") {
@@ -45797,7 +45933,10 @@ function assertAgentAuthoringDocument(document, path2) {
     );
   }
 }
-function parseAgentResource(draft, path2) {
+function parseAgentResource(draft, path2, removals = []) {
+  if (draft.metadata.name === BUILT_IN_DEFAULT_AGENT_NAME) {
+    return parseBuiltInDefaultAgentResource(draft, path2, removals);
+  }
   const parsed = AgentApplyRequestSchema.safeParse({
     metadata: draft.metadata,
     spec: draft.spec
@@ -45811,6 +45950,44 @@ function parseAgentResource(draft, path2) {
     spec: parsed.data.spec
   };
 }
+function parseBuiltInDefaultAgentResource(draft, path2, removals) {
+  const remove = Object.fromEntries(
+    removals.map(({ target, names }) => [target, names])
+  );
+  const overlay = DefaultAgentOverlaySchema.safeParse({
+    ...draft.spec,
+    ...Object.keys(remove).length > 0 ? { remove } : {}
+  });
+  if (!overlay.success) {
+    throw new Error(
+      `Invalid built-in Default agent overlay ${path2}: ${overlay.error.message}`
+    );
+  }
+  const resolved = resolveBuiltInDefaultAgentSpec(overlay.data);
+  const annotations = isRecord3(draft.metadata.annotations) ? draft.metadata.annotations : {};
+  const parsed = AgentApplyRequestSchema.safeParse({
+    metadata: {
+      ...draft.metadata,
+      annotations: {
+        ...annotations,
+        [BUILT_IN_DEFAULT_AGENT_OVERLAY_ANNOTATION]: JSON.stringify(
+          overlay.data
+        )
+      }
+    },
+    spec: resolved.spec
+  });
+  if (!parsed.success) {
+    throw new Error(
+      `Invalid compiled built-in Default agent ${path2}: ${parsed.error.message}`
+    );
+  }
+  return {
+    kind: RESOURCE_KIND_AGENT,
+    metadata: parsed.data.metadata,
+    spec: parsed.data.spec
+  };
+}
 function inlineEnvironmentResource2(document, path2) {
   const parsed = EnvironmentApplyRequestSchema.safeParse(
     splitMetadataAndSpec(document)
@@ -45872,6 +46049,7 @@ var init_inline_resource = __esm({
   "../../packages/schemas/src/project-apply-files/agent-fields/inline-resource.ts"() {
     "use strict";
     init_agents();
+    init_default_agent();
     init_environments();
     init_identities();
     init_source();
@@ -45884,12 +46062,12 @@ function compileRoutingInlineBindings(input) {
   const bindings = input.bindings ? cloneBindings(input.bindings) : {};
   const compiledTriggers = [];
   for (const trigger of input.triggers) {
-    if (!isRecord2(trigger) || trigger.kind === "heartbeat") {
+    if (!isRecord3(trigger) || trigger.kind === "heartbeat") {
       compiledTriggers.push(trigger);
       continue;
     }
     const routing = trigger.routing;
-    if (!isRecord2(routing)) {
+    if (!isRecord3(routing)) {
       compiledTriggers.push(trigger);
       continue;
     }
@@ -45920,7 +46098,7 @@ function extractDeliverContribution(routing, path2) {
   if (bindBlock === void 0) {
     return void 0;
   }
-  if (!isRecord2(bindBlock)) {
+  if (!isRecord3(bindBlock)) {
     throw inlineShapeError(
       path2,
       "deliver",
@@ -45950,7 +46128,7 @@ function extractBindArmContribution(routing, path2) {
 }
 function extractSpawnArmContribution(routing, path2) {
   const bindBlock = routing.bind;
-  if (!isRecord2(bindBlock)) {
+  if (!isRecord3(bindBlock)) {
     return void 0;
   }
   if (bindBlock.lifecycle === void 0 && bindBlock.continuity === void 0) {
@@ -45988,7 +46166,7 @@ function mergeContributionIntoBindings(bindings, contribution, path2) {
 }
 function ensureEntry(bindings, target) {
   const existing = bindings[target];
-  if (isRecord2(existing)) {
+  if (isRecord3(existing)) {
     return existing;
   }
   const entry = {};
@@ -46010,7 +46188,7 @@ function stripInlineRoutingFields(trigger, routing) {
       return { ...trigger, routing: rest };
     }
     case "spawn": {
-      if (!isRecord2(routing.bind)) {
+      if (!isRecord3(routing.bind)) {
         return trigger;
       }
       const {
@@ -46075,7 +46253,7 @@ function rejectSingletonTarget(target, path2, arm) {
 function cloneBindings(bindings) {
   const clone2 = {};
   for (const [key, value] of Object.entries(bindings)) {
-    clone2[key] = isRecord2(value) ? { ...value } : value;
+    clone2[key] = isRecord3(value) ? { ...value } : value;
   }
   return clone2;
 }
@@ -46105,7 +46283,7 @@ function namedArrayField(options) {
     target: "spec",
     merge: (base, override) => {
       if (!Array.isArray(base) || !Array.isArray(override)) {
-        return mergeValues3(base, override);
+        return mergeValues4(base, override);
       }
       return mergeNamedArray(base, override, options.itemKey);
     },
@@ -46125,7 +46303,7 @@ function triggersField() {
       const withNamesStripped = removeAuthoringTriggerNames(value);
       const { triggers, bindings } = compileRoutingInlineBindings({
         triggers: withNamesStripped,
-        bindings: isRecord2(context.draft.spec.bindings) ? context.draft.spec.bindings : void 0,
+        bindings: isRecord3(context.draft.spec.bindings) ? context.draft.spec.bindings : void 0,
         path: context.path
       });
       context.draft.spec.bindings = bindings;
@@ -46134,7 +46312,7 @@ function triggersField() {
   };
 }
 function mountItemKey(item) {
-  if (!isRecord2(item)) {
+  if (!isRecord3(item)) {
     return void 0;
   }
   if (typeof item.name === "string") {
@@ -46146,7 +46324,7 @@ function mountItemKey(item) {
   return void 0;
 }
 function triggerItemKey(item) {
-  if (!isRecord2(item)) {
+  if (!isRecord3(item)) {
     return void 0;
   }
   if (typeof item.name === "string") {
@@ -46175,7 +46353,7 @@ function mergeNamedArray(base, override, itemKey) {
   for (const item of override) {
     const key = itemKey(item);
     if (key && indexByKey.has(key)) {
-      merged[indexByKey.get(key) ?? 0] = mergeValues3(
+      merged[indexByKey.get(key) ?? 0] = mergeValues4(
         merged[indexByKey.get(key) ?? 0],
         item
       );
@@ -46199,7 +46377,7 @@ function removeAuthoringTriggerNames(value) {
     return value;
   }
   return value.map((trigger) => {
-    if (!isRecord2(trigger) || !("name" in trigger)) {
+    if (!isRecord3(trigger) || !("name" in trigger)) {
       return trigger;
     }
     const next = { ...trigger };
@@ -46220,9 +46398,9 @@ var init_named_array = __esm({
 function namedMapField() {
   return {
     target: "spec",
-    merge: (base, override) => mergeValues3(base, override),
+    merge: (base, override) => mergeValues4(base, override),
     remove: (value, names) => {
-      if (!isRecord2(value)) {
+      if (!isRecord3(value)) {
         return value;
       }
       const next = { ...value };
@@ -46321,7 +46499,7 @@ function mergeSourceLocations(base, override) {
         continue;
       }
       const prefix = `${target}.${key}`;
-      if (!isRecord2(value)) {
+      if (!isRecord3(value)) {
         merged = Object.fromEntries(
           Object.entries(merged).filter(
             ([path2]) => path2 !== prefix && !path2.startsWith(`${prefix}.`)
@@ -46340,7 +46518,7 @@ function assertSupportedAgentRemovalTarget(target) {
     );
   }
 }
-function compileAgentDraftResources(draft, path2) {
+function compileAgentDraftResources(draft, path2, removals = []) {
   const next = cloneAgentDraft(draft);
   const resources = [];
   for (const [key, field] of Object.entries(AGENT_FIELDS)) {
@@ -46358,7 +46536,7 @@ function compileAgentDraftResources(draft, path2) {
       next.spec[key] = compiled.value;
     }
   }
-  const resource = parseAgentResource(next, path2);
+  const resource = parseAgentResource(next, path2, removals);
   return { resource, resources: [...resources, resource] };
 }
 function sanitizedAgentDocument2(document) {
@@ -46381,7 +46559,7 @@ function mergeDraftTarget(target, base, override) {
   for (const [key, value] of Object.entries(override)) {
     const field = AGENT_FIELDS[key];
     const merge2 = field?.target === target ? field.merge : void 0;
-    merged[key] = merge2 ? merge2(merged[key], value, { field: key }) : mergeValues3(merged[key], value);
+    merged[key] = merge2 ? merge2(merged[key], value, { field: key }) : mergeValues4(merged[key], value);
   }
   return merged;
 }
@@ -46447,7 +46625,7 @@ function readVariableScope(document, path2) {
   if (declared === void 0) {
     return /* @__PURE__ */ new Map();
   }
-  if (!isRecord2(declared)) {
+  if (!isRecord3(declared)) {
     throw new Error(
       `Invalid variables in ${path2}: variables must be a map of name to value`
     );
@@ -46476,7 +46654,7 @@ function substituteValue(value, scope, site) {
   if (Array.isArray(value)) {
     return value.map((item) => substituteValue(item, scope, site));
   }
-  if (isRecord2(value)) {
+  if (isRecord3(value)) {
     return Object.fromEntries(
       Object.entries(value).map(([key, nested]) => [
         key,
@@ -46594,7 +46772,7 @@ function projectCompiledTriggerSourceLocations(locations, authoredTriggers) {
   );
   let compiledIndex = 0;
   for (const [authoredIndex, trigger] of authoredTriggers.entries()) {
-    if (!isRecord2(trigger)) {
+    if (!isRecord3(trigger)) {
       continue;
     }
     const events = authoredTriggerEvents(trigger);
@@ -46662,7 +46840,7 @@ function validateAgentFragmentDocument(document, path2, context) {
       `Agent import cycle detected: ${[...context.stack, normalizedPath].join(" -> ")}`
     );
   }
-  if (!isRecord2(document)) {
+  if (!isRecord3(document)) {
     throw new Error(`Invalid agent fragment file ${path2}: expected object`);
   }
   for (const imported of importPaths2(document).map(
@@ -46719,8 +46897,9 @@ function compileAgentDocumentValue(document, path2, fileIndex, contextVariables)
     ...contextVariables && Object.keys(contextVariables).length > 0 ? { contextVariables: new Map(Object.entries(contextVariables)) } : {}
   });
   const authoredTriggers = structuredClone(draft.spec.triggers);
+  const removals = isRecord3(document) ? removalDirectives2(document, normalizeSourcePath(path2)) : [];
   return {
-    ...compileAgentDraftResources(draft, path2),
+    ...compileAgentDraftResources(draft, path2, removals),
     sourceLocations: draft.sourceLocations,
     authoredTriggers
   };
@@ -46732,7 +46911,7 @@ function compileAgentDocument2(document, path2, context) {
       `Agent import cycle detected: ${[...context.stack, normalizedPath].join(" -> ")}`
     );
   }
-  if (!isRecord2(document)) {
+  if (!isRecord3(document)) {
     throw new Error(`Invalid agent authoring file ${path2}: expected object`);
   }
   const variables = context.stack.length === 0 ? new Map([
@@ -47007,7 +47186,7 @@ function templateImportsInFile(file2) {
   try {
     const specifiers = [];
     for (const document of readDocumentsFromSource(file2)) {
-      if (!isRecord2(document)) {
+      if (!isRecord3(document)) {
         continue;
       }
       for (const importPath of importPaths2(document)) {
@@ -65958,7 +66137,7 @@ async function selectRepository(context, github, explicitRepo) {
   const selection = github.grant.providerResourceSelection;
   if (selection.kind === "selected") {
     const repos = selection.resources.map(
-      (resource) => isRecord3(resource) && typeof resource.fullName === "string" ? resource.fullName : void 0
+      (resource) => isRecord4(resource) && typeof resource.fullName === "string" ? resource.fullName : void 0
     ).filter(isDefined);
     if (repos.length === 1) {
       context.writeOutput(`Using GitHub repository ${repos[0]}.`);
@@ -66288,7 +66467,7 @@ function slackWorkspaceUrl(slack) {
 function organizationLabel(organization) {
   return `${organization.organizationName} (${organization.organizationSlug})`;
 }
-function isRecord3(value) {
+function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isDefined(value) {