@autohq/cli 0.1.436 → 0.1.438

package/dist/index.js

@@ -17584,6 +17584,347 @@ var init_connections = __esm({
   }
 });
 
+// ../../packages/schemas/src/default-agent.ts
+var BUILT_IN_DEFAULT_AGENT_NAME, BUILT_IN_DEFAULT_AGENT_TEMPLATE_NAME, BUILT_IN_DEFAULT_AGENT_TEMPLATE_SUBPATH, BUILT_IN_DEFAULT_AGENT_TEMPLATE_IMPORT;
+var init_default_agent = __esm({
+  "../../packages/schemas/src/default-agent.ts"() {
+    "use strict";
+    BUILT_IN_DEFAULT_AGENT_NAME = "default";
+    BUILT_IN_DEFAULT_AGENT_TEMPLATE_NAME = "@auto/default";
+    BUILT_IN_DEFAULT_AGENT_TEMPLATE_SUBPATH = "fragments/default.yaml";
+    BUILT_IN_DEFAULT_AGENT_TEMPLATE_IMPORT = `${BUILT_IN_DEFAULT_AGENT_TEMPLATE_NAME}@latest/${BUILT_IN_DEFAULT_AGENT_TEMPLATE_SUBPATH}`;
+  }
+});
+
+// ../../packages/schemas/src/dormant-capabilities.ts
+var DormantCapabilityConnectionSchema, DormantCapabilitySchema, DormantCapabilitiesSchema;
+var init_dormant_capabilities = __esm({
+  "../../packages/schemas/src/dormant-capabilities.ts"() {
+    "use strict";
+    init_zod();
+    DormantCapabilityConnectionSchema = external_exports.object({
+      provider: external_exports.string().trim().min(1),
+      connection: external_exports.string().trim().min(1)
+    });
+    DormantCapabilitySchema = external_exports.object({
+      kind: external_exports.enum(["tool", "trigger"]),
+      name: external_exports.string().trim().min(1),
+      connections: external_exports.array(DormantCapabilityConnectionSchema).min(1)
+    });
+    DormantCapabilitiesSchema = external_exports.array(DormantCapabilitySchema);
+  }
+});
+
+// ../../packages/schemas/src/github-sync.ts
+var GITHUB_SYNC_AUTO_PATH, GITHUB_SYNC_CI_WATCHDOG_DEFAULT_DELAY_MS, GithubSyncRepositoryFullNameSchema, GithubSyncProductionBranchSchema, GithubSyncCiWatchdogWorkflowSchema, GithubSyncCiWatchdogSchema, GithubSyncBindingSchema, GithubSyncBindingCreateRequestSchema, GithubSyncInitialSyncSchema, GithubSyncBindingCreateResponseSchema, GithubSyncBindingListResponseSchema, GithubSyncTriggerArtifactSchema, GithubSyncWorkflowInputSchema, GithubSyncWorkflowResultSchema;
+var init_github_sync = __esm({
+  "../../packages/schemas/src/github-sync.ts"() {
+    "use strict";
+    init_zod();
+    init_ids();
+    init_primitives();
+    GITHUB_SYNC_AUTO_PATH = ".auto";
+    GITHUB_SYNC_CI_WATCHDOG_DEFAULT_DELAY_MS = 15e3;
+    GithubSyncRepositoryFullNameSchema = external_exports.string().trim().min(1).regex(/^[^/\s]+\/[^/\s]+$/, {
+      message: "repository must be in owner/name form"
+    });
+    GithubSyncProductionBranchSchema = external_exports.string().trim().min(1).max(255).refine((branch) => !branch.startsWith("/") && !branch.endsWith("/"), {
+      message: "branch must not start or end with /"
+    });
+    GithubSyncCiWatchdogWorkflowSchema = external_exports.object({
+      workflowId: external_exports.string().trim().min(1).max(255)
+    }).strict();
+    GithubSyncCiWatchdogSchema = external_exports.object({
+      workflows: external_exports.array(GithubSyncCiWatchdogWorkflowSchema).max(10).default([]),
+      checkDelayMs: external_exports.number().int().nonnegative().default(GITHUB_SYNC_CI_WATCHDOG_DEFAULT_DELAY_MS)
+    }).strict();
+    GithubSyncBindingSchema = external_exports.object({
+      id: external_exports.string().trim().min(1),
+      organizationId: OrganizationIdSchema,
+      projectId: ProjectIdSchema,
+      providerGrantId: ProviderGrantIdSchema,
+      installationId: external_exports.string().trim().min(1),
+      repoFullName: GithubSyncRepositoryFullNameSchema,
+      repoId: external_exports.string().trim().min(1).nullable(),
+      productionBranch: GithubSyncProductionBranchSchema,
+      autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
+      ciWatchdog: GithubSyncCiWatchdogSchema,
+      enabled: external_exports.boolean(),
+      lastPlannedSha: external_exports.string().trim().min(1).nullable(),
+      lastAppliedSha: external_exports.string().trim().min(1).nullable(),
+      createdAt: external_exports.string().datetime(),
+      updatedAt: external_exports.string().datetime()
+    });
+    GithubSyncBindingCreateRequestSchema = external_exports.object({
+      connection: external_exports.string().trim().min(1).optional(),
+      repo: GithubSyncRepositoryFullNameSchema,
+      repoId: external_exports.string().trim().min(1).optional(),
+      branch: GithubSyncProductionBranchSchema.optional(),
+      ciWatchdog: GithubSyncCiWatchdogSchema.optional()
+    });
+    GithubSyncInitialSyncSchema = external_exports.object({
+      started: external_exports.boolean(),
+      headSha: external_exports.string().trim().min(1).optional(),
+      workflowId: external_exports.string().trim().min(1).optional(),
+      reason: external_exports.enum([
+        "no_auto_directory",
+        "already_applied",
+        "probe_failed",
+        "start_failed"
+      ]).optional()
+    });
+    GithubSyncBindingCreateResponseSchema = external_exports.object({
+      binding: GithubSyncBindingSchema,
+      created: external_exports.boolean(),
+      initialSync: GithubSyncInitialSyncSchema.optional()
+    });
+    GithubSyncBindingListResponseSchema = external_exports.object({
+      bindings: external_exports.array(GithubSyncBindingSchema)
+    });
+    GithubSyncTriggerArtifactSchema = external_exports.object({
+      type: external_exports.string().trim().min(1),
+      externalId: external_exports.string().trim().min(1),
+      payload: JsonValueSchema.optional()
+    }).strict();
+    GithubSyncWorkflowInputSchema = external_exports.discriminatedUnion("kind", [
+      external_exports.object({
+        kind: external_exports.literal("pull_request"),
+        bindingId: external_exports.string().trim().min(1),
+        organizationId: OrganizationIdSchema,
+        projectId: ProjectIdSchema,
+        providerGrantId: ProviderGrantIdSchema,
+        installationId: external_exports.string().trim().min(1),
+        repoFullName: GithubSyncRepositoryFullNameSchema,
+        repoId: external_exports.string().trim().min(1).optional(),
+        productionBranch: GithubSyncProductionBranchSchema,
+        autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
+        pullRequestNumber: external_exports.number().int().positive(),
+        headSha: external_exports.string().trim().min(1),
+        baseSha: external_exports.string().trim().min(1).optional(),
+        baseRef: GithubSyncProductionBranchSchema,
+        triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
+      }),
+      external_exports.object({
+        kind: external_exports.literal("push"),
+        bindingId: external_exports.string().trim().min(1),
+        organizationId: OrganizationIdSchema,
+        projectId: ProjectIdSchema,
+        providerGrantId: ProviderGrantIdSchema,
+        installationId: external_exports.string().trim().min(1),
+        repoFullName: GithubSyncRepositoryFullNameSchema,
+        repoId: external_exports.string().trim().min(1).optional(),
+        productionBranch: GithubSyncProductionBranchSchema,
+        autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
+        ref: external_exports.string().trim().min(1),
+        branch: GithubSyncProductionBranchSchema,
+        before: external_exports.string().trim().min(1).optional(),
+        after: external_exports.string().trim().min(1),
+        triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
+      }),
+      // Synthetic re-apply triggered by a managed-template version bump (not a
+      // webhook). The tenant's `.auto` is unchanged — only our registry changed —
+      // so this arm skips the `no_auto_changes` early-out and applies the production
+      // branch HEAD (`after`, which the sweep resolves before starting the run).
+      // It is otherwise push-shaped. `templateName`/`version` identify the drift
+      // that triggered it (for the commit check + idempotent workflow id).
+      external_exports.object({
+        kind: external_exports.literal("template_push"),
+        bindingId: external_exports.string().trim().min(1),
+        organizationId: OrganizationIdSchema,
+        projectId: ProjectIdSchema,
+        providerGrantId: ProviderGrantIdSchema,
+        installationId: external_exports.string().trim().min(1),
+        repoFullName: GithubSyncRepositoryFullNameSchema,
+        repoId: external_exports.string().trim().min(1).optional(),
+        productionBranch: GithubSyncProductionBranchSchema,
+        autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
+        before: external_exports.string().trim().min(1).optional(),
+        after: external_exports.string().trim().min(1),
+        templateName: external_exports.string().trim().min(1),
+        version: external_exports.string().trim().min(1),
+        triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
+      }),
+      // Synthetic authoritative re-apply triggered by one durable connection
+      // lifecycle occurrence. The event id makes retries reuse the same workflow,
+      // while a later remove/re-allow occurrence can re-run at the same git SHA.
+      external_exports.object({
+        kind: external_exports.literal("connection_push"),
+        bindingId: external_exports.string().trim().min(1),
+        organizationId: OrganizationIdSchema,
+        projectId: ProjectIdSchema,
+        providerGrantId: ProviderGrantIdSchema,
+        installationId: external_exports.string().trim().min(1),
+        repoFullName: GithubSyncRepositoryFullNameSchema,
+        repoId: external_exports.string().trim().min(1).optional(),
+        productionBranch: GithubSyncProductionBranchSchema,
+        autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
+        before: external_exports.string().trim().min(1).optional(),
+        after: external_exports.string().trim().min(1),
+        connectionEventId: external_exports.string().trim().min(1),
+        triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
+      })
+    ]);
+    GithubSyncWorkflowResultSchema = external_exports.discriminatedUnion("status", [
+      external_exports.object({
+        status: external_exports.literal("skipped"),
+        reason: external_exports.string().trim().min(1)
+      }),
+      external_exports.object({
+        status: external_exports.literal("planned"),
+        changed: external_exports.boolean(),
+        checkRunId: external_exports.number().int().positive().optional()
+      }),
+      external_exports.object({
+        status: external_exports.literal("applied"),
+        changed: external_exports.boolean(),
+        checkRunId: external_exports.number().int().positive().optional()
+      }),
+      external_exports.object({
+        status: external_exports.literal("failed"),
+        message: external_exports.string().trim().min(1),
+        checkRunId: external_exports.number().int().positive().optional()
+      })
+    ]);
+  }
+});
+
+// ../../packages/schemas/src/github-credentials.ts
+var CreateRunGithubCredentialRequestSchema, RunGithubCredentialResponseSchema;
+var init_github_credentials = __esm({
+  "../../packages/schemas/src/github-credentials.ts"() {
+    "use strict";
+    init_zod();
+    CreateRunGithubCredentialRequestSchema = external_exports.object({
+      host: external_exports.literal("github.com"),
+      path: external_exports.string().trim().min(1).optional()
+    });
+    RunGithubCredentialResponseSchema = external_exports.object({
+      username: external_exports.literal("x-access-token"),
+      password: external_exports.string().min(1),
+      expiresAt: external_exports.string().datetime()
+    });
+  }
+});
+
+// ../../packages/schemas/src/github-mcp-catalog.ts
+var GITHUB_MCP_TOOL_NAMES, GITHUB_MCP_PROXY_TOOL_NAMES, GITHUB_MCP_SELECTABLE_TOOL_NAMES, GITHUB_MCP_MERGE_TOOLS, GITHUB_MCP_SECRETS_TOOLS, GITHUB_MCP_SECRETS_WRITE_TOOLS, GITHUB_MCP_WRITE_TOOLS, githubMcpToolNameSet, GITHUB_MCP_ATTRIBUTION_EXEMPT_PROXY_TOOLS, githubMcpWriteToolSet, githubMcpProxyToolSet, githubMcpMergeToolSet, githubMcpSecretsToolSet, githubMcpSecretsWriteToolSet;
+var init_github_mcp_catalog = __esm({
+  "../../packages/schemas/src/github-mcp-catalog.ts"() {
+    "use strict";
+    GITHUB_MCP_TOOL_NAMES = [
+      "actions_get",
+      "actions_list",
+      "actions_run_trigger",
+      "add_comment_to_pending_review",
+      "add_issue_comment",
+      "add_reply_to_pull_request_comment",
+      "create_branch",
+      "create_or_update_file",
+      "create_pull_request",
+      "create_repository",
+      "delete_file",
+      "fork_repository",
+      "get_commit",
+      "get_file_contents",
+      "get_job_logs",
+      "get_label",
+      "get_latest_release",
+      "get_release_by_tag",
+      "get_tag",
+      "issue_read",
+      "issue_write",
+      "list_branches",
+      "list_commits",
+      "list_issue_types",
+      "list_issues",
+      "list_pull_requests",
+      "list_releases",
+      "list_repository_collaborators",
+      "list_tags",
+      "merge_pull_request",
+      "pull_request_read",
+      "pull_request_review_write",
+      "push_files",
+      "search_code",
+      "search_commits",
+      "search_issues",
+      "search_pull_requests",
+      "search_repositories",
+      "sub_issue_write",
+      "update_pull_request",
+      "update_pull_request_branch"
+    ];
+    GITHUB_MCP_PROXY_TOOL_NAMES = [
+      "actions_secret_list",
+      "actions_secret_write",
+      "delete_issue_comment",
+      "download_comment_attachment",
+      "enable_pull_request_auto_merge",
+      "upsert_issue_comment"
+    ];
+    GITHUB_MCP_SELECTABLE_TOOL_NAMES = [
+      ...GITHUB_MCP_TOOL_NAMES,
+      ...GITHUB_MCP_PROXY_TOOL_NAMES
+    ];
+    GITHUB_MCP_MERGE_TOOLS = [
+      "merge_pull_request",
+      "enable_pull_request_auto_merge"
+    ];
+    GITHUB_MCP_SECRETS_TOOLS = [
+      "actions_secret_list",
+      "actions_secret_write"
+    ];
+    GITHUB_MCP_SECRETS_WRITE_TOOLS = [
+      "actions_secret_write"
+    ];
+    GITHUB_MCP_WRITE_TOOLS = [
+      "actions_run_trigger",
+      "add_comment_to_pending_review",
+      "add_issue_comment",
+      "add_reply_to_pull_request_comment",
+      "create_branch",
+      "create_or_update_file",
+      "create_pull_request",
+      "create_repository",
+      "delete_file",
+      "fork_repository",
+      "issue_write",
+      "merge_pull_request",
+      "pull_request_review_write",
+      "push_files",
+      "sub_issue_write",
+      "update_pull_request",
+      "update_pull_request_branch"
+    ];
+    githubMcpToolNameSet = new Set(
+      GITHUB_MCP_TOOL_NAMES
+    );
+    GITHUB_MCP_ATTRIBUTION_EXEMPT_PROXY_TOOLS = /* @__PURE__ */ new Set([
+      "actions_secret_list",
+      "download_comment_attachment",
+      "delete_issue_comment"
+    ]);
+    githubMcpWriteToolSet = /* @__PURE__ */ new Set([
+      ...GITHUB_MCP_WRITE_TOOLS,
+      ...GITHUB_MCP_PROXY_TOOL_NAMES.filter(
+        (name) => !GITHUB_MCP_ATTRIBUTION_EXEMPT_PROXY_TOOLS.has(name)
+      )
+    ]);
+    githubMcpProxyToolSet = new Set(
+      GITHUB_MCP_PROXY_TOOL_NAMES
+    );
+    githubMcpMergeToolSet = new Set(
+      GITHUB_MCP_MERGE_TOOLS
+    );
+    githubMcpSecretsToolSet = new Set(
+      GITHUB_MCP_SECRETS_TOOLS
+    );
+    githubMcpSecretsWriteToolSet = new Set(
+      GITHUB_MCP_SECRETS_WRITE_TOOLS
+    );
+  }
+});
+
 // ../../packages/schemas/src/mounts.ts
 var AbsoluteMountPathSchema, GITHUB_MOUNT_CAPABILITY_LEVELS, GithubMountCapabilityLevelSchema, GITHUB_MOUNT_MERGE_CAPABILITY_LEVELS, GithubMountMergeCapabilityLevelSchema, DEFAULT_GITHUB_MOUNT_CAPABILITIES, GitMountAuthSchema, GitMountSchema, AgentMountSchema;
 var init_mounts = __esm({
@@ -17880,125 +18221,6 @@ var init_session_bindings = __esm({
   }
 });
 
-// ../../packages/schemas/src/github-mcp-catalog.ts
-var GITHUB_MCP_TOOL_NAMES, GITHUB_MCP_PROXY_TOOL_NAMES, GITHUB_MCP_SELECTABLE_TOOL_NAMES, GITHUB_MCP_MERGE_TOOLS, GITHUB_MCP_SECRETS_TOOLS, GITHUB_MCP_SECRETS_WRITE_TOOLS, GITHUB_MCP_WRITE_TOOLS, githubMcpToolNameSet, GITHUB_MCP_ATTRIBUTION_EXEMPT_PROXY_TOOLS, githubMcpWriteToolSet, githubMcpProxyToolSet, githubMcpMergeToolSet, githubMcpSecretsToolSet, githubMcpSecretsWriteToolSet;
-var init_github_mcp_catalog = __esm({
-  "../../packages/schemas/src/github-mcp-catalog.ts"() {
-    "use strict";
-    GITHUB_MCP_TOOL_NAMES = [
-      "actions_get",
-      "actions_list",
-      "actions_run_trigger",
-      "add_comment_to_pending_review",
-      "add_issue_comment",
-      "add_reply_to_pull_request_comment",
-      "create_branch",
-      "create_or_update_file",
-      "create_pull_request",
-      "create_repository",
-      "delete_file",
-      "fork_repository",
-      "get_commit",
-      "get_file_contents",
-      "get_job_logs",
-      "get_label",
-      "get_latest_release",
-      "get_release_by_tag",
-      "get_tag",
-      "issue_read",
-      "issue_write",
-      "list_branches",
-      "list_commits",
-      "list_issue_types",
-      "list_issues",
-      "list_pull_requests",
-      "list_releases",
-      "list_repository_collaborators",
-      "list_tags",
-      "merge_pull_request",
-      "pull_request_read",
-      "pull_request_review_write",
-      "push_files",
-      "search_code",
-      "search_commits",
-      "search_issues",
-      "search_pull_requests",
-      "search_repositories",
-      "sub_issue_write",
-      "update_pull_request",
-      "update_pull_request_branch"
-    ];
-    GITHUB_MCP_PROXY_TOOL_NAMES = [
-      "actions_secret_list",
-      "actions_secret_write",
-      "delete_issue_comment",
-      "download_comment_attachment",
-      "enable_pull_request_auto_merge",
-      "upsert_issue_comment"
-    ];
-    GITHUB_MCP_SELECTABLE_TOOL_NAMES = [
-      ...GITHUB_MCP_TOOL_NAMES,
-      ...GITHUB_MCP_PROXY_TOOL_NAMES
-    ];
-    GITHUB_MCP_MERGE_TOOLS = [
-      "merge_pull_request",
-      "enable_pull_request_auto_merge"
-    ];
-    GITHUB_MCP_SECRETS_TOOLS = [
-      "actions_secret_list",
-      "actions_secret_write"
-    ];
-    GITHUB_MCP_SECRETS_WRITE_TOOLS = [
-      "actions_secret_write"
-    ];
-    GITHUB_MCP_WRITE_TOOLS = [
-      "actions_run_trigger",
-      "add_comment_to_pending_review",
-      "add_issue_comment",
-      "add_reply_to_pull_request_comment",
-      "create_branch",
-      "create_or_update_file",
-      "create_pull_request",
-      "create_repository",
-      "delete_file",
-      "fork_repository",
-      "issue_write",
-      "merge_pull_request",
-      "pull_request_review_write",
-      "push_files",
-      "sub_issue_write",
-      "update_pull_request",
-      "update_pull_request_branch"
-    ];
-    githubMcpToolNameSet = new Set(
-      GITHUB_MCP_TOOL_NAMES
-    );
-    GITHUB_MCP_ATTRIBUTION_EXEMPT_PROXY_TOOLS = /* @__PURE__ */ new Set([
-      "actions_secret_list",
-      "download_comment_attachment",
-      "delete_issue_comment"
-    ]);
-    githubMcpWriteToolSet = /* @__PURE__ */ new Set([
-      ...GITHUB_MCP_WRITE_TOOLS,
-      ...GITHUB_MCP_PROXY_TOOL_NAMES.filter(
-        (name) => !GITHUB_MCP_ATTRIBUTION_EXEMPT_PROXY_TOOLS.has(name)
-      )
-    ]);
-    githubMcpProxyToolSet = new Set(
-      GITHUB_MCP_PROXY_TOOL_NAMES
-    );
-    githubMcpMergeToolSet = new Set(
-      GITHUB_MCP_MERGE_TOOLS
-    );
-    githubMcpSecretsToolSet = new Set(
-      GITHUB_MCP_SECRETS_TOOLS
-    );
-    githubMcpSecretsWriteToolSet = new Set(
-      GITHUB_MCP_SECRETS_WRITE_TOOLS
-    );
-  }
-});
-
 // ../../packages/schemas/src/tools.ts
 function remoteMcpUrlSchema(input) {
   return external_exports.string().trim().url().refine(
@@ -18187,179 +18409,6 @@ var init_tools = __esm({
   }
 });
 
-// ../../packages/schemas/src/github-sync.ts
-var GITHUB_SYNC_AUTO_PATH, GITHUB_SYNC_CI_WATCHDOG_DEFAULT_DELAY_MS, GithubSyncRepositoryFullNameSchema, GithubSyncProductionBranchSchema, GithubSyncCiWatchdogWorkflowSchema, GithubSyncCiWatchdogSchema, GithubSyncBindingSchema, GithubSyncBindingCreateRequestSchema, GithubSyncInitialSyncSchema, GithubSyncBindingCreateResponseSchema, GithubSyncBindingListResponseSchema, GithubSyncTriggerArtifactSchema, GithubSyncWorkflowInputSchema, GithubSyncWorkflowResultSchema;
-var init_github_sync = __esm({
-  "../../packages/schemas/src/github-sync.ts"() {
-    "use strict";
-    init_zod();
-    init_ids();
-    init_primitives();
-    GITHUB_SYNC_AUTO_PATH = ".auto";
-    GITHUB_SYNC_CI_WATCHDOG_DEFAULT_DELAY_MS = 15e3;
-    GithubSyncRepositoryFullNameSchema = external_exports.string().trim().min(1).regex(/^[^/\s]+\/[^/\s]+$/, {
-      message: "repository must be in owner/name form"
-    });
-    GithubSyncProductionBranchSchema = external_exports.string().trim().min(1).max(255).refine((branch) => !branch.startsWith("/") && !branch.endsWith("/"), {
-      message: "branch must not start or end with /"
-    });
-    GithubSyncCiWatchdogWorkflowSchema = external_exports.object({
-      workflowId: external_exports.string().trim().min(1).max(255)
-    }).strict();
-    GithubSyncCiWatchdogSchema = external_exports.object({
-      workflows: external_exports.array(GithubSyncCiWatchdogWorkflowSchema).max(10).default([]),
-      checkDelayMs: external_exports.number().int().nonnegative().default(GITHUB_SYNC_CI_WATCHDOG_DEFAULT_DELAY_MS)
-    }).strict();
-    GithubSyncBindingSchema = external_exports.object({
-      id: external_exports.string().trim().min(1),
-      organizationId: OrganizationIdSchema,
-      projectId: ProjectIdSchema,
-      providerGrantId: ProviderGrantIdSchema,
-      installationId: external_exports.string().trim().min(1),
-      repoFullName: GithubSyncRepositoryFullNameSchema,
-      repoId: external_exports.string().trim().min(1).nullable(),
-      productionBranch: GithubSyncProductionBranchSchema,
-      autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
-      ciWatchdog: GithubSyncCiWatchdogSchema,
-      enabled: external_exports.boolean(),
-      lastPlannedSha: external_exports.string().trim().min(1).nullable(),
-      lastAppliedSha: external_exports.string().trim().min(1).nullable(),
-      createdAt: external_exports.string().datetime(),
-      updatedAt: external_exports.string().datetime()
-    });
-    GithubSyncBindingCreateRequestSchema = external_exports.object({
-      connection: external_exports.string().trim().min(1).optional(),
-      repo: GithubSyncRepositoryFullNameSchema,
-      repoId: external_exports.string().trim().min(1).optional(),
-      branch: GithubSyncProductionBranchSchema.optional(),
-      ciWatchdog: GithubSyncCiWatchdogSchema.optional()
-    });
-    GithubSyncInitialSyncSchema = external_exports.object({
-      started: external_exports.boolean(),
-      headSha: external_exports.string().trim().min(1).optional(),
-      workflowId: external_exports.string().trim().min(1).optional(),
-      reason: external_exports.enum([
-        "no_auto_directory",
-        "already_applied",
-        "probe_failed",
-        "start_failed"
-      ]).optional()
-    });
-    GithubSyncBindingCreateResponseSchema = external_exports.object({
-      binding: GithubSyncBindingSchema,
-      created: external_exports.boolean(),
-      initialSync: GithubSyncInitialSyncSchema.optional()
-    });
-    GithubSyncBindingListResponseSchema = external_exports.object({
-      bindings: external_exports.array(GithubSyncBindingSchema)
-    });
-    GithubSyncTriggerArtifactSchema = external_exports.object({
-      type: external_exports.string().trim().min(1),
-      externalId: external_exports.string().trim().min(1),
-      payload: JsonValueSchema.optional()
-    }).strict();
-    GithubSyncWorkflowInputSchema = external_exports.discriminatedUnion("kind", [
-      external_exports.object({
-        kind: external_exports.literal("pull_request"),
-        bindingId: external_exports.string().trim().min(1),
-        organizationId: OrganizationIdSchema,
-        projectId: ProjectIdSchema,
-        providerGrantId: ProviderGrantIdSchema,
-        installationId: external_exports.string().trim().min(1),
-        repoFullName: GithubSyncRepositoryFullNameSchema,
-        repoId: external_exports.string().trim().min(1).optional(),
-        productionBranch: GithubSyncProductionBranchSchema,
-        autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
-        pullRequestNumber: external_exports.number().int().positive(),
-        headSha: external_exports.string().trim().min(1),
-        baseSha: external_exports.string().trim().min(1).optional(),
-        baseRef: GithubSyncProductionBranchSchema,
-        triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
-      }),
-      external_exports.object({
-        kind: external_exports.literal("push"),
-        bindingId: external_exports.string().trim().min(1),
-        organizationId: OrganizationIdSchema,
-        projectId: ProjectIdSchema,
-        providerGrantId: ProviderGrantIdSchema,
-        installationId: external_exports.string().trim().min(1),
-        repoFullName: GithubSyncRepositoryFullNameSchema,
-        repoId: external_exports.string().trim().min(1).optional(),
-        productionBranch: GithubSyncProductionBranchSchema,
-        autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
-        ref: external_exports.string().trim().min(1),
-        branch: GithubSyncProductionBranchSchema,
-        before: external_exports.string().trim().min(1).optional(),
-        after: external_exports.string().trim().min(1),
-        triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
-      }),
-      // Synthetic re-apply triggered by a managed-template version bump (not a
-      // webhook). The tenant's `.auto` is unchanged — only our registry changed —
-      // so this arm skips the `no_auto_changes` early-out and applies the production
-      // branch HEAD (`after`, which the sweep resolves before starting the run).
-      // It is otherwise push-shaped. `templateName`/`version` identify the drift
-      // that triggered it (for the commit check + idempotent workflow id).
-      external_exports.object({
-        kind: external_exports.literal("template_push"),
-        bindingId: external_exports.string().trim().min(1),
-        organizationId: OrganizationIdSchema,
-        projectId: ProjectIdSchema,
-        providerGrantId: ProviderGrantIdSchema,
-        installationId: external_exports.string().trim().min(1),
-        repoFullName: GithubSyncRepositoryFullNameSchema,
-        repoId: external_exports.string().trim().min(1).optional(),
-        productionBranch: GithubSyncProductionBranchSchema,
-        autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
-        before: external_exports.string().trim().min(1).optional(),
-        after: external_exports.string().trim().min(1),
-        templateName: external_exports.string().trim().min(1),
-        version: external_exports.string().trim().min(1),
-        triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
-      }),
-      // Synthetic authoritative re-apply triggered by one durable connection
-      // lifecycle occurrence. The event id makes retries reuse the same workflow,
-      // while a later remove/re-allow occurrence can re-run at the same git SHA.
-      external_exports.object({
-        kind: external_exports.literal("connection_push"),
-        bindingId: external_exports.string().trim().min(1),
-        organizationId: OrganizationIdSchema,
-        projectId: ProjectIdSchema,
-        providerGrantId: ProviderGrantIdSchema,
-        installationId: external_exports.string().trim().min(1),
-        repoFullName: GithubSyncRepositoryFullNameSchema,
-        repoId: external_exports.string().trim().min(1).optional(),
-        productionBranch: GithubSyncProductionBranchSchema,
-        autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
-        before: external_exports.string().trim().min(1).optional(),
-        after: external_exports.string().trim().min(1),
-        connectionEventId: external_exports.string().trim().min(1),
-        triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
-      })
-    ]);
-    GithubSyncWorkflowResultSchema = external_exports.discriminatedUnion("status", [
-      external_exports.object({
-        status: external_exports.literal("skipped"),
-        reason: external_exports.string().trim().min(1)
-      }),
-      external_exports.object({
-        status: external_exports.literal("planned"),
-        changed: external_exports.boolean(),
-        checkRunId: external_exports.number().int().positive().optional()
-      }),
-      external_exports.object({
-        status: external_exports.literal("applied"),
-        changed: external_exports.boolean(),
-        checkRunId: external_exports.number().int().positive().optional()
-      }),
-      external_exports.object({
-        status: external_exports.literal("failed"),
-        message: external_exports.string().trim().min(1),
-        checkRunId: external_exports.number().int().positive().optional()
-      })
-    ]);
-  }
-});
-
 // ../../packages/schemas/src/trigger-router.ts
 function normalizeLegacyHeartbeatTickWorkflowInput(input) {
   if (!input || typeof input !== "object" || Array.isArray(input)) {
@@ -19041,7 +19090,7 @@ function isChatMessageEvent(trigger) {
 function hasFilterValue(trigger, path2, expected) {
   return trigger.where?.[path2] === expected;
 }
-var RESOURCE_KIND_AGENT, AGENT_HARNESSES, AgentHarnessSchema, TriggerFilterScalarSchema, TriggerFilterPathSchema, TriggerFilterClauseSchema, TriggerFilterSchema, TriggerCheckTimeoutSchema, AgentArchiveAfterInactiveSchema, AgentSessionPolicySchema, AgentConcurrencySchema, AgentReplacePolicySchema, AgentManagesSchema, TriggerEventSchema, TriggerEventsSchema, PAYLOAD_PREFIXED_TEMPLATE_TOKEN, TriggerChecksField, TriggerEventSourceFields, TriggerSchema, ApplyTriggerSchema, HeartbeatTriggerSchema, ApplyHeartbeatTriggerSchema, TriggerDefinitionSchema, ApplyTriggerDefinitionSchema, TriggersSchema, ApplyTriggersSchema, AVATAR_ASSET_EXTENSIONS, MAX_AVATAR_ASSET_BYTES, MIN_AVATAR_ASSET_DIMENSION_PX, MAX_AVATAR_ASSET_DIMENSION_PX, PNG_SIGNATURE, AGENT_IDENTITY_DESCRIPTION_MAX_LENGTH, SHA256_HEX_PATTERN, AgentIdentitySchema, BINDING_LIFECYCLE_VALUES, BindingLifecycleSpecSchema, AgentBindingsSchema, AgentSpecFieldsSchema, AgentSpecSchema, AgentApplySpecFieldsSchema, AgentApplySpecSchema, AgentStatusSchema, AgentResourceOriginSchema, BuiltInAgentMetadataSchema, AgentResourceSchema, AgentApplyRequestSchema, ApplyTriggerReceiptSchema, AgentApplyResponseSchema, AGENT_TELEGRAM_IDENTITY_STATUSES, AgentTelegramIdentityStatusSchema, AgentPresenceIdentitySchema, AgentPresenceResponseSchema, AgentPresenceConnectRequestSchema, AgentPresenceConnectPendingSchema, AgentPresenceConnectResponseSchema, AgentPresenceIconRequestSchema, AgentPresenceIconResponseSchema, AgentPresenceCompleteResponseSchema;
+var RESOURCE_KIND_AGENT, AGENT_HARNESSES, AgentHarnessSchema, TriggerFilterScalarSchema, TriggerFilterPathSchema, TriggerFilterClauseSchema, TriggerFilterSchema, TriggerCheckTimeoutSchema, AgentArchiveAfterInactiveSchema, AgentSessionPolicySchema, AgentConcurrencySchema, AgentReplacePolicySchema, AgentManagesSchema, TriggerEventSchema, TriggerEventsSchema, PAYLOAD_PREFIXED_TEMPLATE_TOKEN, TriggerChecksField, TriggerEventSourceFields, TriggerSchema, ApplyTriggerSchema, HeartbeatTriggerSchema, ApplyHeartbeatTriggerSchema, TriggerDefinitionSchema, ApplyTriggerDefinitionSchema, TriggersSchema, ApplyTriggersSchema, AVATAR_ASSET_EXTENSIONS, MAX_AVATAR_ASSET_BYTES, MIN_AVATAR_ASSET_DIMENSION_PX, MAX_AVATAR_ASSET_DIMENSION_PX, PNG_SIGNATURE, AGENT_IDENTITY_DESCRIPTION_MAX_LENGTH, SHA256_HEX_PATTERN, AgentIdentitySchema, BINDING_LIFECYCLE_VALUES, BindingLifecycleSpecSchema, AgentBindingsSchema, AgentSpecFieldsSchema, AgentSpecSchema, AgentApplySpecFieldsSchema, AgentApplySpecSchema, AgentStatusSchema, AgentResourceOriginSchema, AgentResourceSchema, AgentApplyRequestSchema, ApplyTriggerReceiptSchema, AgentApplyResponseSchema, AGENT_TELEGRAM_IDENTITY_STATUSES, AgentTelegramIdentityStatusSchema, AgentPresenceIdentitySchema, AgentPresenceResponseSchema, AgentPresenceConnectRequestSchema, AgentPresenceConnectPendingSchema, AgentPresenceConnectResponseSchema, AgentPresenceIconRequestSchema, AgentPresenceIconResponseSchema, AgentPresenceCompleteResponseSchema;
 var init_agents = __esm({
   "../../packages/schemas/src/agents.ts"() {
     "use strict";
@@ -19297,18 +19346,11 @@ var init_agents = __esm({
       lastActivityAt: external_exports.string().datetime().nullable().default(null)
     }).default({ runCount: 0, lastActivityAt: null });
     AgentResourceOriginSchema = external_exports.enum(["authored", "built_in"]);
-    BuiltInAgentMetadataSchema = external_exports.object({
-      templateVersion: external_exports.string().trim().min(1),
-      harnessPinned: external_exports.boolean(),
-      authoredOverlay: JsonValueSchema.nullable(),
-      provenance: external_exports.record(external_exports.string().min(1), external_exports.enum(["built_in", "authored"]))
-    });
     AgentResourceSchema = resourceEnvelopeSchema(
       AgentSpecSchema
     ).extend({
       status: AgentStatusSchema,
-      origin: AgentResourceOriginSchema.optional(),
-      builtIn: BuiltInAgentMetadataSchema.optional()
+      origin: AgentResourceOriginSchema.optional()
     });
     AgentApplyRequestSchema = resourceApplySchema(AgentApplySpecSchema);
     ApplyTriggerReceiptSchema = external_exports.object({
@@ -19422,166 +19464,6 @@ var init_agents = __esm({
   }
 });
 
-// ../../packages/schemas/src/default-agent.ts
-function builtInDefaultAgentSpec() {
-  return AgentApplySpecSchema.parse({
-    harness: BUILT_IN_DEFAULT_AGENT_RECOMMENDED_HARNESS,
-    environment: BUILT_IN_DEFAULT_AGENT_ENVIRONMENT_NAME,
-    identity: {
-      displayName: "Default",
-      username: BUILT_IN_DEFAULT_AGENT_NAME,
-      description: "Auto's built-in general-purpose agent."
-    },
-    tools: {
-      auto: {
-        kind: "local",
-        implementation: "auto"
-      }
-    }
-  });
-}
-function resolveBuiltInDefaultAgentSpec(input) {
-  const overlay = DefaultAgentOverlaySchema.parse(input);
-  const { remove, ...authoredSpec } = overlay;
-  const base = builtInDefaultAgentSpec();
-  const merged = mergeValues2(base, authoredSpec);
-  for (const name of remove?.env ?? []) {
-    removeKeyedEntry(merged, "env", name);
-  }
-  for (const name of remove?.tools ?? []) {
-    removeKeyedEntry(merged, "tools", name);
-  }
-  const harnessPinned = authoredSpec.harness !== void 0;
-  if ((authoredSpec.triggers?.length ?? 0) > 0 && !harnessPinned) {
-    throw new Error(
-      "Default agent triggers require an authored harness because unattended sessions cannot choose one"
-    );
-  }
-  const spec = AgentApplySpecSchema.parse(merged);
-  const provenance = {};
-  recordLeafProvenance(base, "", "built_in", provenance);
-  recordLeafProvenance(authoredSpec, "", "authored", provenance);
-  for (const name of remove?.env ?? []) {
-    delete provenance[`env.${name}`];
-  }
-  for (const name of remove?.tools ?? []) {
-    for (const key of Object.keys(provenance)) {
-      if (key === `tools.${name}` || key.startsWith(`tools.${name}.`)) {
-        delete provenance[key];
-      }
-    }
-  }
-  return { spec, harnessPinned, provenance };
-}
-function mergeValues2(base, overlay) {
-  if (overlay === void 0) {
-    return structuredClone(base);
-  }
-  if (isRecord(base) && isRecord(overlay)) {
-    const merged = structuredClone(base);
-    for (const [key, value] of Object.entries(overlay)) {
-      merged[key] = mergeValues2(merged[key], value);
-    }
-    return merged;
-  }
-  return structuredClone(overlay);
-}
-function removeKeyedEntry(spec, field, name) {
-  const entries = spec[field];
-  if (isRecord(entries)) {
-    delete entries[name];
-  }
-}
-function recordLeafProvenance(value, path2, source, output) {
-  if (isRecord(value)) {
-    if (path2) {
-      output[path2] = source;
-    }
-    const entries = Object.entries(value);
-    if (entries.length === 0 && path2) {
-      output[path2] = source;
-      return;
-    }
-    for (const [key, nested] of entries) {
-      recordLeafProvenance(
-        nested,
-        path2 ? `${path2}.${key}` : key,
-        source,
-        output
-      );
-    }
-    return;
-  }
-  output[path2] = source;
-}
-function isRecord(value) {
-  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
-}
-var BUILT_IN_DEFAULT_AGENT_NAME, BUILT_IN_DEFAULT_AGENT_ENVIRONMENT_NAME, BUILT_IN_DEFAULT_AGENT_RECOMMENDED_HARNESS, BUILT_IN_DEFAULT_AGENT_OVERLAY_ANNOTATION, DefaultAgentRemovalSchema, DefaultAgentOverlaySchema;
-var init_default_agent = __esm({
-  "../../packages/schemas/src/default-agent.ts"() {
-    "use strict";
-    init_zod();
-    init_agents();
-    init_resources();
-    BUILT_IN_DEFAULT_AGENT_NAME = "default";
-    BUILT_IN_DEFAULT_AGENT_ENVIRONMENT_NAME = "auto-default-runtime";
-    BUILT_IN_DEFAULT_AGENT_RECOMMENDED_HARNESS = "claude-code";
-    BUILT_IN_DEFAULT_AGENT_OVERLAY_ANNOTATION = "auto.dev/default-agent-overlay";
-    DefaultAgentRemovalSchema = external_exports.object({
-      env: external_exports.array(ResourceNameSchema).optional(),
-      tools: external_exports.array(ResourceNameSchema).optional(),
-      triggers: external_exports.array(ResourceNameSchema).optional()
-    }).strict();
-    DefaultAgentOverlaySchema = AgentApplySpecFieldsSchema.partial().extend({
-      env: AgentApplySpecFieldsSchema.shape.env.removeDefault().optional(),
-      mounts: AgentApplySpecFieldsSchema.shape.mounts.removeDefault().optional(),
-      triggers: AgentApplySpecFieldsSchema.shape.triggers.removeDefault().optional(),
-      session: AgentApplySpecFieldsSchema.shape.session.removeDefault().optional(),
-      bindings: AgentApplySpecFieldsSchema.shape.bindings.removeDefault().optional(),
-      tools: AgentApplySpecFieldsSchema.shape.tools.removeDefault().optional(),
-      remove: DefaultAgentRemovalSchema.optional()
-    }).strict();
-  }
-});
-
-// ../../packages/schemas/src/dormant-capabilities.ts
-var DormantCapabilityConnectionSchema, DormantCapabilitySchema, DormantCapabilitiesSchema;
-var init_dormant_capabilities = __esm({
-  "../../packages/schemas/src/dormant-capabilities.ts"() {
-    "use strict";
-    init_zod();
-    DormantCapabilityConnectionSchema = external_exports.object({
-      provider: external_exports.string().trim().min(1),
-      connection: external_exports.string().trim().min(1)
-    });
-    DormantCapabilitySchema = external_exports.object({
-      kind: external_exports.enum(["tool", "trigger"]),
-      name: external_exports.string().trim().min(1),
-      connections: external_exports.array(DormantCapabilityConnectionSchema).min(1)
-    });
-    DormantCapabilitiesSchema = external_exports.array(DormantCapabilitySchema);
-  }
-});
-
-// ../../packages/schemas/src/github-credentials.ts
-var CreateRunGithubCredentialRequestSchema, RunGithubCredentialResponseSchema;
-var init_github_credentials = __esm({
-  "../../packages/schemas/src/github-credentials.ts"() {
-    "use strict";
-    init_zod();
-    CreateRunGithubCredentialRequestSchema = external_exports.object({
-      host: external_exports.literal("github.com"),
-      path: external_exports.string().trim().min(1).optional()
-    });
-    RunGithubCredentialResponseSchema = external_exports.object({
-      username: external_exports.literal("x-access-token"),
-      password: external_exports.string().min(1),
-      expiresAt: external_exports.string().datetime()
-    });
-  }
-});
-
 // ../../packages/schemas/src/identities.ts
 var RESOURCE_KIND_IDENTITY, IdentitySpecSchema, IdentityResourceSchema, IdentityApplyRequestSchema;
 var init_identities = __esm({
@@ -20807,38 +20689,32 @@ var init_project_config = __esm({
   "../../packages/schemas/src/project-config.ts"() {
     "use strict";
     init_zod();
+    init_agents();
     init_resources();
     RESOURCE_KIND_CONFIG = "config";
     PROJECT_CONFIG_RESOURCE_NAME = "project";
     PROJECT_CONFIG_FILE_NAME = "config.yaml";
-    ProjectConfigSpecSchema = external_exports.object({
-      defaultAgent: ResourceNameSchema.optional()
-    }).strict();
+    ProjectConfigSpecSchema = external_exports.object({}).strict();
     ProjectConfigResourceSchema = resourceEnvelopeSchema(
       ProjectConfigSpecSchema
     );
     ProjectConfigApplyRequestSchema = resourceApplySchema(
       ProjectConfigSpecSchema
     );
-    PROJECT_DEFAULT_AGENT_SOURCES = [
-      "config",
-      "setting",
-      "first_agent"
-    ];
+    PROJECT_DEFAULT_AGENT_SOURCES = ["built_in"];
     ProjectDefaultAgentSourceSchema = external_exports.enum(
       PROJECT_DEFAULT_AGENT_SOURCES
     );
     ProjectDefaultAgentSchema = external_exports.object({
       agentName: ResourceNameSchema,
-      source: ProjectDefaultAgentSourceSchema
+      source: ProjectDefaultAgentSourceSchema,
+      harness: AgentHarnessSchema.optional()
     });
     UpdateProjectSettingsRequestSchema = external_exports.object({
-      defaultAgentName: ResourceNameSchema.nullable().optional(),
       name: external_exports.string().trim().min(1).optional()
-    }).strict().refine(
-      (value) => value.defaultAgentName !== void 0 || value.name !== void 0,
-      { message: "At least one settings field is required" }
-    );
+    }).strict().refine((value) => value.name !== void 0, {
+      message: "At least one settings field is required"
+    });
   }
 });
 
@@ -27043,6 +26919,17 @@ triggers:
           ]
         }
       ],
+      "@auto/default": [
+        {
+          version: "1.0.0",
+          files: [
+            {
+              path: "fragments/default.yaml",
+              content: "harness: claude-code\nenvironment:\n  name: auto-default-runtime\n  image:\n    kind: preset\n    name: node24\nidentity:\n  displayName: Default\n  username: default\n  description: Auto's built-in general-purpose agent.\ntools:\n  auto:\n    kind: local\n    implementation: auto\n"
+            }
+          ]
+        }
+      ],
       "@auto/engineering-tier": [
         {
           version: "1.0.0",
@@ -42821,6 +42708,7 @@ var init_hardcoded = __esm({
       "@auto/chat-assistant": "A conversational assistant for direct sessions, with optional Slack mentions, threaded replies, and retained context.",
       "@auto/code-review": "A pull-request reviewer that posts one severity-ranked review comment and reports a check, with optional Slack verdict reporting.",
       "@auto/daily-digest": "A scheduled read-only analyst that delivers a daily shipped-code digest as its run report; a -slack entrypoint posts to Slack instead.",
+      "@auto/default": "Auto's minimum general-purpose runtime contract, implicitly imported by the permanent Default agent in every project.",
       "@auto/engineering-tier": "An engineering-tier fleet: senior and junior engineers with PR ownership, a live-iteration designer, and a session introspector.",
       "@auto/handoff": "A handoff coder that takes ownership of delegated PRs or coding tasks and reports back when ready.",
       "@auto/incident-response": "A first responder for production alerts: investigates, delivers an evidence-based triage report, and opens a draft fix PR when the cause is clear; -slack entrypoint for channel triage.",
@@ -47309,7 +47197,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.436",
+      version: "0.1.438",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"
@@ -47514,7 +47402,7 @@ function compileAgentDocument(document, path2, stack, context) {
       `Agent import cycle detected: ${[...stack, resolvedPath].join(" -> ")}`
     );
   }
-  if (!isRecord2(document)) {
+  if (!isRecord(document)) {
     throw new Error(`Invalid agent authoring file ${path2}: expected object`);
   }
   const imports = importPaths(document).map(
@@ -47524,7 +47412,7 @@ function compileAgentDocument(document, path2, stack, context) {
   let merged = {};
   for (const imported of imports) {
     const importedDocument = readSingleDocument(imported);
-    merged = mergeValues3(
+    merged = mergeValues2(
       merged,
       compileAgentDocument(
         importedDocument,
@@ -47540,7 +47428,7 @@ function compileAgentDocument(document, path2, stack, context) {
     merged = applyRemoval(merged, removal);
     context.removals.push(removal);
   }
-  return mergeValues3(
+  return mergeValues2(
     merged,
     authoringDocumentApplyShape(document, resolvedPath),
     []
@@ -47639,25 +47527,25 @@ function authoringDocumentApplyShape(document, path2) {
   };
 }
 function finalizeAgentApplyShape(document, path2) {
-  if (!isRecord2(document) || !isRecord2(document.spec)) {
+  if (!isRecord(document) || !isRecord(document.spec)) {
     return { resource: document, resources: [] };
   }
   const next = structuredClone(document);
   const spec = next.spec;
   const resources = [];
-  if (isRecord2(spec.environment)) {
+  if (isRecord(spec.environment)) {
     const environment = inlineEnvironmentResource(spec.environment, path2);
     spec.environment = environment.metadata.name;
     resources.push(environment);
   }
-  if (isRecord2(spec.identity)) {
+  if (isRecord(spec.identity)) {
     const identity2 = inlineIdentityResource(spec.identity, next, path2);
     spec.identity = identity2.metadata.name;
     resources.push(identity2);
   }
   if (Array.isArray(spec.triggers)) {
     spec.triggers = spec.triggers.map((trigger) => {
-      if (!isRecord2(trigger) || !("name" in trigger)) {
+      if (!isRecord(trigger) || !("name" in trigger)) {
         return trigger;
       }
       const compiledTrigger = { ...trigger };
@@ -47705,7 +47593,7 @@ function inlineIdentityResource(document, agentDocument, path2) {
     }
     spec[key] = value;
   }
-  if (metadata.name === void 0 && isRecord2(agentDocument.metadata) && typeof agentDocument.metadata.name === "string") {
+  if (metadata.name === void 0 && isRecord(agentDocument.metadata) && typeof agentDocument.metadata.name === "string") {
     metadata.name = agentDocument.metadata.name;
   }
   const parsed = IdentityApplyRequestSchema.safeParse({ metadata, spec });
@@ -47741,7 +47629,7 @@ function resolveFileBackedFields(spec, path2) {
   };
 }
 function resolveFileBackedString(value, input) {
-  if (!isRecord2(value) || !("file" in value)) {
+  if (!isRecord(value) || !("file" in value)) {
     return value;
   }
   const file2 = value.file;
@@ -47759,8 +47647,8 @@ function resolveFileBackedString(value, input) {
   return readFileSync6(resolve(dirname7(input.path), filePath), "utf8");
 }
 function removalDirectives(document, path2) {
-  const raw = isRecord2(document.remove) ? document.remove : {};
-  if (!isRecord2(raw)) {
+  const raw = isRecord(document.remove) ? document.remove : {};
+  if (!isRecord(raw)) {
     return [];
   }
   const directives = [];
@@ -47782,18 +47670,18 @@ function stringList(value, label) {
   });
 }
 function applyRemoval(value, removal) {
-  if (!isRecord2(value)) {
+  if (!isRecord(value)) {
     return value;
   }
   const next = structuredClone(value);
-  if (!isRecord2(next.spec)) {
+  if (!isRecord(next.spec)) {
     return next;
   }
   const spec = { ...next.spec };
   next.spec = spec;
   switch (removal.target) {
     case "tools": {
-      if (!isRecord2(spec[removal.target])) {
+      if (!isRecord(spec[removal.target])) {
         return next;
       }
       const collection = {
@@ -47830,17 +47718,17 @@ function assertSupportedRemovalTarget(target) {
     );
   }
 }
-function mergeValues3(base, override, path2) {
+function mergeValues2(base, override, path2) {
   if (override === void 0) {
     return base;
   }
   if (Array.isArray(base) && Array.isArray(override)) {
     return mergeArrays(base, override, path2);
   }
-  if (isRecord2(base) && isRecord2(override)) {
+  if (isRecord(base) && isRecord(override)) {
     const merged = { ...base };
     for (const [key, value] of Object.entries(override)) {
-      merged[key] = mergeValues3(merged[key], value, [...path2, key]);
+      merged[key] = mergeValues2(merged[key], value, [...path2, key]);
     }
     return merged;
   }
@@ -47862,7 +47750,7 @@ function mergeArrays(base, override, path2) {
   for (const item of override) {
     const key = collectionItemKey(path2.at(-1) ?? "", item);
     if (key && indexByKey.has(key)) {
-      merged[indexByKey.get(key) ?? 0] = mergeValues3(
+      merged[indexByKey.get(key) ?? 0] = mergeValues2(
         merged[indexByKey.get(key) ?? 0],
         item,
         path2
@@ -47880,7 +47768,7 @@ function isNamedArrayMergePath(path2) {
   return path2 === "spec.mounts" || path2 === "spec.triggers";
 }
 function collectionItemKey(collection, item) {
-  if (!isRecord2(item)) {
+  if (!isRecord(item)) {
     return void 0;
   }
   if (typeof item.name === "string") {
@@ -47912,7 +47800,7 @@ function isAgentFile(path2) {
     return false;
   }
 }
-function isRecord2(value) {
+function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 var AGENT_FILE_EXTENSIONS, AGENT_SPEC_FIELDS, AGENT_METADATA_FIELDS;
@@ -48314,7 +48202,7 @@ function sourceFileIndex(files) {
 function isAbsoluteSourcePath(path2) {
   return path2.startsWith("/");
 }
-function isRecord3(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 var APPLY_DIRECTORIES, PROJECT_APPLY_RESOURCE_DIRECTORIES;
@@ -48392,7 +48280,7 @@ function resolveTemplateImportPath(importPath, fileIndex) {
   return key;
 }
 function removalDirectives2(document, path2) {
-  const raw = isRecord3(document.remove) ? document.remove : {};
+  const raw = isRecord2(document.remove) ? document.remove : {};
   const directives = [];
   for (const [target, value] of Object.entries(raw)) {
     const names = stringList2(value, `remove.${target}`);
@@ -48533,14 +48421,14 @@ function cloneAgentDraft(draft) {
 function isMetadataFieldKey(key) {
   return AGENT_METADATA_FIELD_KEYS.includes(key);
 }
-function mergeValues4(base, override) {
+function mergeValues3(base, override) {
   if (override === void 0) {
     return base;
   }
-  if (isRecord3(base) && isRecord3(override)) {
+  if (isRecord2(base) && isRecord2(override)) {
     const merged = { ...base };
     for (const [key, value] of Object.entries(override)) {
-      merged[key] = mergeValues4(merged[key], value);
+      merged[key] = mergeValues3(merged[key], value);
     }
     return merged;
   }
@@ -48557,7 +48445,7 @@ function sortJson(value) {
   if (Array.isArray(value)) {
     return value.map(sortJson);
   }
-  if (isRecord3(value)) {
+  if (isRecord2(value)) {
     return Object.fromEntries(
       Object.entries(value).sort(([left], [right]) => left.localeCompare(right)).map(([key, nested]) => [key, sortJson(nested)])
     );
@@ -48593,7 +48481,7 @@ function fileBackedStringField() {
   };
 }
 function rejectDirectiveObject(value, input) {
-  if (isRecord3(value) && "append" in value) {
+  if (isRecord2(value) && "append" in value) {
     throw new Error(
       `Invalid agent authoring file ${input.path}: ${input.field} does not support directive objects; append is supported on ${APPEND_CAPABLE_FIELDS}`
     );
@@ -48601,7 +48489,7 @@ function rejectDirectiveObject(value, input) {
   return value;
 }
 function resolveFileBackedString2(value, input) {
-  if (!isRecord3(value)) {
+  if (!isRecord2(value)) {
     return value;
   }
   if ("file" in value && !("append" in value)) {
@@ -48667,7 +48555,7 @@ function resolveAppendDirective(base, override) {
         `Invalid agent authoring file ${droppedPending.path}: ${droppedPending.field} append directive was merged before any base value; import the base document before its append overlay`
       );
     }
-    return mergeValues4(base, override);
+    return mergeValues3(base, override);
   }
   if (typeof base === "string") {
     return base + directive.text;
@@ -48699,11 +48587,11 @@ function rejectUnresolvedAppendDirective(value) {
   );
 }
 function appendDirectiveFromMarker(value) {
-  if (!isRecord3(value)) {
+  if (!isRecord2(value)) {
     return void 0;
   }
   const marker = value[APPEND_DIRECTIVE_MARKER_KEY];
-  if (!isRecord3(marker)) {
+  if (!isRecord2(marker)) {
     return void 0;
   }
   return marker;
@@ -48723,9 +48611,9 @@ var init_file_backed_string = __esm({
 function inlineEnvironmentField() {
   return {
     target: "spec",
-    merge: (base, override) => mergeValues4(base, override),
+    merge: (base, override) => mergeValues3(base, override),
     compile: (value, context) => {
-      if (!isRecord3(value)) {
+      if (!isRecord2(value)) {
         return { resources: [], value };
       }
       const resource = inlineEnvironmentResource2(value, context.path);
@@ -48736,9 +48624,9 @@ function inlineEnvironmentField() {
 function inlineIdentityField() {
   return {
     target: "spec",
-    merge: (base, override) => mergeValues4(base, override),
+    merge: (base, override) => mergeValues3(base, override),
     compile: (value, context) => {
-      if (!isRecord3(value)) {
+      if (!isRecord2(value)) {
         return { resources: [], value };
       }
       const resource = inlineIdentityResource2(
@@ -48751,7 +48639,7 @@ function inlineIdentityField() {
   };
 }
 function assertAgentAuthoringDocument(document, path2) {
-  if (!isRecord3(document) || !("kind" in document)) {
+  if (!isRecord2(document) || !("kind" in document)) {
     return;
   }
   if (document.kind === "session") {
@@ -48777,10 +48665,7 @@ function assertAgentAuthoringDocument(document, path2) {
     );
   }
 }
-function parseAgentResource(draft, path2, removals = []) {
-  if (draft.metadata.name === BUILT_IN_DEFAULT_AGENT_NAME) {
-    return parseBuiltInDefaultAgentResource(draft, path2, removals);
-  }
+function parseAgentResource(draft, path2, _removals = []) {
   const parsed = AgentApplyRequestSchema.safeParse({
     metadata: draft.metadata,
     spec: draft.spec
@@ -48794,44 +48679,6 @@ function parseAgentResource(draft, path2, removals = []) {
     spec: parsed.data.spec
   };
 }
-function parseBuiltInDefaultAgentResource(draft, path2, removals) {
-  const remove = Object.fromEntries(
-    removals.map(({ target, names }) => [target, names])
-  );
-  const overlay = DefaultAgentOverlaySchema.safeParse({
-    ...draft.spec,
-    ...Object.keys(remove).length > 0 ? { remove } : {}
-  });
-  if (!overlay.success) {
-    throw new Error(
-      `Invalid built-in Default agent overlay ${path2}: ${overlay.error.message}`
-    );
-  }
-  const resolved = resolveBuiltInDefaultAgentSpec(overlay.data);
-  const annotations = isRecord3(draft.metadata.annotations) ? draft.metadata.annotations : {};
-  const parsed = AgentApplyRequestSchema.safeParse({
-    metadata: {
-      ...draft.metadata,
-      annotations: {
-        ...annotations,
-        [BUILT_IN_DEFAULT_AGENT_OVERLAY_ANNOTATION]: JSON.stringify(
-          overlay.data
-        )
-      }
-    },
-    spec: resolved.spec
-  });
-  if (!parsed.success) {
-    throw new Error(
-      `Invalid compiled built-in Default agent ${path2}: ${parsed.error.message}`
-    );
-  }
-  return {
-    kind: RESOURCE_KIND_AGENT,
-    metadata: parsed.data.metadata,
-    spec: parsed.data.spec
-  };
-}
 function inlineEnvironmentResource2(document, path2) {
   const parsed = EnvironmentApplyRequestSchema.safeParse(
     splitMetadataAndSpec(document)
@@ -48893,7 +48740,6 @@ var init_inline_resource = __esm({
   "../../packages/schemas/src/project-apply-files/agent-fields/inline-resource.ts"() {
     "use strict";
     init_agents();
-    init_default_agent();
     init_environments();
     init_identities();
     init_source();
@@ -48906,12 +48752,12 @@ function compileRoutingInlineBindings(input) {
   const bindings = input.bindings ? cloneBindings(input.bindings) : {};
   const compiledTriggers = [];
   for (const trigger of input.triggers) {
-    if (!isRecord3(trigger) || trigger.kind === "heartbeat") {
+    if (!isRecord2(trigger) || trigger.kind === "heartbeat") {
       compiledTriggers.push(trigger);
       continue;
     }
     const routing = trigger.routing;
-    if (!isRecord3(routing)) {
+    if (!isRecord2(routing)) {
       compiledTriggers.push(trigger);
       continue;
     }
@@ -48942,7 +48788,7 @@ function extractDeliverContribution(routing, path2) {
   if (bindBlock === void 0) {
     return void 0;
   }
-  if (!isRecord3(bindBlock)) {
+  if (!isRecord2(bindBlock)) {
     throw inlineShapeError(
       path2,
       "deliver",
@@ -48972,7 +48818,7 @@ function extractBindArmContribution(routing, path2) {
 }
 function extractSpawnArmContribution(routing, path2) {
   const bindBlock = routing.bind;
-  if (!isRecord3(bindBlock)) {
+  if (!isRecord2(bindBlock)) {
     return void 0;
   }
   if (bindBlock.lifecycle === void 0 && bindBlock.continuity === void 0) {
@@ -49010,7 +48856,7 @@ function mergeContributionIntoBindings(bindings, contribution, path2) {
 }
 function ensureEntry(bindings, target) {
   const existing = bindings[target];
-  if (isRecord3(existing)) {
+  if (isRecord2(existing)) {
     return existing;
   }
   const entry = {};
@@ -49032,7 +48878,7 @@ function stripInlineRoutingFields(trigger, routing) {
       return { ...trigger, routing: rest };
     }
     case "spawn": {
-      if (!isRecord3(routing.bind)) {
+      if (!isRecord2(routing.bind)) {
         return trigger;
       }
       const {
@@ -49097,7 +48943,7 @@ function rejectSingletonTarget(target, path2, arm) {
 function cloneBindings(bindings) {
   const clone2 = {};
   for (const [key, value] of Object.entries(bindings)) {
-    clone2[key] = isRecord3(value) ? { ...value } : value;
+    clone2[key] = isRecord2(value) ? { ...value } : value;
   }
   return clone2;
 }
@@ -49127,7 +48973,7 @@ function namedArrayField(options) {
     target: "spec",
     merge: (base, override) => {
       if (!Array.isArray(base) || !Array.isArray(override)) {
-        return mergeValues4(base, override);
+        return mergeValues3(base, override);
       }
       return mergeNamedArray(base, override, options.itemKey);
     },
@@ -49147,7 +48993,7 @@ function triggersField() {
       const withNamesStripped = removeAuthoringTriggerNames(value);
       const { triggers, bindings } = compileRoutingInlineBindings({
         triggers: withNamesStripped,
-        bindings: isRecord3(context.draft.spec.bindings) ? context.draft.spec.bindings : void 0,
+        bindings: isRecord2(context.draft.spec.bindings) ? context.draft.spec.bindings : void 0,
         path: context.path
       });
       context.draft.spec.bindings = bindings;
@@ -49156,7 +49002,7 @@ function triggersField() {
   };
 }
 function mountItemKey(item) {
-  if (!isRecord3(item)) {
+  if (!isRecord2(item)) {
     return void 0;
   }
   if (typeof item.name === "string") {
@@ -49168,7 +49014,7 @@ function mountItemKey(item) {
   return void 0;
 }
 function triggerItemKey(item) {
-  if (!isRecord3(item)) {
+  if (!isRecord2(item)) {
     return void 0;
   }
   if (typeof item.name === "string") {
@@ -49197,7 +49043,7 @@ function mergeNamedArray(base, override, itemKey) {
   for (const item of override) {
     const key = itemKey(item);
     if (key && indexByKey.has(key)) {
-      merged[indexByKey.get(key) ?? 0] = mergeValues4(
+      merged[indexByKey.get(key) ?? 0] = mergeValues3(
         merged[indexByKey.get(key) ?? 0],
         item
       );
@@ -49221,7 +49067,7 @@ function removeAuthoringTriggerNames(value) {
     return value;
   }
   return value.map((trigger) => {
-    if (!isRecord3(trigger) || !("name" in trigger)) {
+    if (!isRecord2(trigger) || !("name" in trigger)) {
       return trigger;
     }
     const next = { ...trigger };
@@ -49242,9 +49088,9 @@ var init_named_array = __esm({
 function namedMapField() {
   return {
     target: "spec",
-    merge: (base, override) => mergeValues4(base, override),
+    merge: (base, override) => mergeValues3(base, override),
     remove: (value, names) => {
-      if (!isRecord3(value)) {
+      if (!isRecord2(value)) {
         return value;
       }
       const next = { ...value };
@@ -49343,7 +49189,7 @@ function mergeSourceLocations(base, override) {
         continue;
       }
       const prefix = `${target}.${key}`;
-      if (!isRecord3(value)) {
+      if (!isRecord2(value)) {
         merged = Object.fromEntries(
           Object.entries(merged).filter(
             ([path2]) => path2 !== prefix && !path2.startsWith(`${prefix}.`)
@@ -49403,7 +49249,7 @@ function mergeDraftTarget(target, base, override) {
   for (const [key, value] of Object.entries(override)) {
     const field = AGENT_FIELDS[key];
     const merge2 = field?.target === target ? field.merge : void 0;
-    merged[key] = merge2 ? merge2(merged[key], value, { field: key }) : mergeValues4(merged[key], value);
+    merged[key] = merge2 ? merge2(merged[key], value, { field: key }) : mergeValues3(merged[key], value);
   }
   return merged;
 }
@@ -49469,7 +49315,7 @@ function readVariableScope(document, path2) {
   if (declared === void 0) {
     return /* @__PURE__ */ new Map();
   }
-  if (!isRecord3(declared)) {
+  if (!isRecord2(declared)) {
     throw new Error(
       `Invalid variables in ${path2}: variables must be a map of name to value`
     );
@@ -49498,7 +49344,7 @@ function substituteValue(value, scope, site) {
   if (Array.isArray(value)) {
     return value.map((item) => substituteValue(item, scope, site));
   }
-  if (isRecord3(value)) {
+  if (isRecord2(value)) {
     return Object.fromEntries(
       Object.entries(value).map(([key, nested]) => [
         key,
@@ -49616,7 +49462,7 @@ function projectCompiledTriggerSourceLocations(locations, authoredTriggers) {
   );
   let compiledIndex = 0;
   for (const [authoredIndex, trigger] of authoredTriggers.entries()) {
-    if (!isRecord3(trigger)) {
+    if (!isRecord2(trigger)) {
       continue;
     }
     const events = authoredTriggerEvents(trigger);
@@ -49684,7 +49530,7 @@ function validateAgentFragmentDocument(document, path2, context) {
       `Agent import cycle detected: ${[...context.stack, normalizedPath].join(" -> ")}`
     );
   }
-  if (!isRecord3(document)) {
+  if (!isRecord2(document)) {
     throw new Error(`Invalid agent fragment file ${path2}: expected object`);
   }
   for (const imported of importPaths2(document).map(
@@ -49741,7 +49587,7 @@ function compileAgentDocumentValue(document, path2, fileIndex, contextVariables)
     ...contextVariables && Object.keys(contextVariables).length > 0 ? { contextVariables: new Map(Object.entries(contextVariables)) } : {}
   });
   const authoredTriggers = structuredClone(draft.spec.triggers);
-  const removals = isRecord3(document) ? removalDirectives2(document, normalizeSourcePath(path2)) : [];
+  const removals = isRecord2(document) ? removalDirectives2(document, normalizeSourcePath(path2)) : [];
   return {
     ...compileAgentDraftResources(draft, path2, removals),
     sourceLocations: draft.sourceLocations,
@@ -49755,7 +49601,7 @@ function compileAgentDocument2(document, path2, context) {
       `Agent import cycle detected: ${[...context.stack, normalizedPath].join(" -> ")}`
     );
   }
-  if (!isRecord3(document)) {
+  if (!isRecord2(document)) {
     throw new Error(`Invalid agent authoring file ${path2}: expected object`);
   }
   const variables = context.stack.length === 0 ? new Map([
@@ -49763,7 +49609,11 @@ function compileAgentDocument2(document, path2, context) {
     ...readVariableScope(document, normalizedPath)
   ]) : context.variables;
   let merged = emptyAgentDraft();
-  for (const importPath of importPaths2(document)) {
+  const imports = [
+    ...context.stack.length === 0 && document.name === BUILT_IN_DEFAULT_AGENT_NAME ? [BUILT_IN_DEFAULT_AGENT_TEMPLATE_IMPORT] : [],
+    ...importPaths2(document)
+  ];
+  for (const importPath of imports) {
     const imported = resolveImportPath2(
       importPath,
       normalizedPath,
@@ -49794,6 +49644,7 @@ function compileAgentDocument2(document, path2, context) {
 var init_agent_authoring = __esm({
   "../../packages/schemas/src/project-apply-files/agent-authoring.ts"() {
     "use strict";
+    init_default_agent();
     init_agent_document_merge();
     init_agent_fields();
     init_source();
@@ -50024,13 +49875,33 @@ function collectInjectableTemplateReferences(files) {
       }
     }
   }
+  if (hasBuiltInDefaultAgentDocument(files)) {
+    const implicit = parseTemplateImportSpecifier(
+      BUILT_IN_DEFAULT_AGENT_TEMPLATE_IMPORT
+    );
+    references.set(
+      templateInjectionKey(implicit.name, implicit.track, ""),
+      implicit
+    );
+  }
   return [...references.values()];
 }
+function hasBuiltInDefaultAgentDocument(files) {
+  return files.some((file2) => {
+    try {
+      return readDocumentsFromSource(file2).some(
+        (document) => isRecord2(document) && document.name === BUILT_IN_DEFAULT_AGENT_NAME
+      );
+    } catch {
+      return false;
+    }
+  });
+}
 function templateImportsInFile(file2) {
   try {
     const specifiers = [];
     for (const document of readDocumentsFromSource(file2)) {
-      if (!isRecord3(document)) {
+      if (!isRecord2(document)) {
         continue;
       }
       for (const importPath of importPaths2(document)) {
@@ -50047,6 +49918,7 @@ function templateImportsInFile(file2) {
 var init_template_injection = __esm({
   "../../packages/schemas/src/project-apply-files/template-injection.ts"() {
     "use strict";
+    init_default_agent();
     init_templates();
     init_agent_document_merge();
     init_source();
@@ -50278,6 +50150,7 @@ var init_project_apply_files = __esm({
   "../../packages/schemas/src/project-apply-files/index.ts"() {
     "use strict";
     init_agents();
+    init_default_agent();
     init_environments();
     init_identities();
     init_project_config();
@@ -68981,7 +68854,7 @@ async function selectRepository(context, github, explicitRepo) {
   const selection = github.grant.providerResourceSelection;
   if (selection.kind === "selected") {
     const repos = selection.resources.map(
-      (resource) => isRecord4(resource) && typeof resource.fullName === "string" ? resource.fullName : void 0
+      (resource) => isRecord3(resource) && typeof resource.fullName === "string" ? resource.fullName : void 0
     ).filter(isDefined);
     if (repos.length === 1) {
       context.writeOutput(`Using GitHub repository ${repos[0]}.`);
@@ -69311,7 +69184,7 @@ function slackWorkspaceUrl(slack) {
 function organizationLabel(organization) {
   return `${organization.organizationName} (${organization.organizationSlug})`;
 }
-function isRecord4(value) {
+function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isDefined(value) {