@autohq/cli 0.1.462 → 0.1.464

package/dist/agent-bridge.js

@@ -30825,7 +30825,7 @@ Object.assign(lookup, {
 // package.json
 var package_default = {
   name: "@autohq/cli",
-  version: "0.1.462",
+  version: "0.1.464",
   license: "SEE LICENSE IN README.md",
   publishConfig: {
     access: "public"
@@ -31902,7 +31902,11 @@ var ChatMessageEventPayloadSchema = external_exports.object({
       agentName: external_exports.string().trim().min(1),
       botUserId: external_exports.string().trim().min(1).optional(),
       addressing: external_exports.object({
-        kind: external_exports.enum(["slack_auto_prefix", "slack_bot_user"]),
+        kind: external_exports.enum([
+          "discord_app_alias",
+          "slack_auto_prefix",
+          "slack_bot_user"
+        ]),
         alias: external_exports.string().trim().min(1).optional(),
         delimiter: external_exports.enum([".", ":", "/", "-"]).optional()
       }).optional()
@@ -31918,7 +31922,11 @@ var ChatMessageEventPayloadSchema = external_exports.object({
         agentName: external_exports.string().trim().min(1),
         botUserId: external_exports.string().trim().min(1).optional(),
         addressing: external_exports.object({
-          kind: external_exports.enum(["slack_auto_prefix", "slack_bot_user"]),
+          kind: external_exports.enum([
+            "discord_app_alias",
+            "slack_auto_prefix",
+            "slack_bot_user"
+          ]),
           alias: external_exports.string().trim().min(1).optional(),
           delimiter: external_exports.enum([".", ":", "/", "-"]).optional()
         }).optional()
@@ -37050,7 +37058,10 @@ var ProjectApplyResponseSchema = external_exports.object({
       }).optional(),
       diff: external_exports.array(ProjectApplyPlanDiffSchema).optional(),
       diffOmitted: external_exports.number().int().positive().optional(),
-      avatarSha256: external_exports.string().regex(SHA256_HEX_PATTERN).optional()
+      avatarSha256: external_exports.string().regex(SHA256_HEX_PATTERN).optional(),
+      avatarAsset: external_exports.string().refine(isAvatarAssetPathShapeValid, {
+        message: "avatarAsset must be a relative path under .auto/assets"
+      }).optional()
     })
   ).default([]),
   pruned: external_exports.array(ProjectApplyResponsePrunedSchema).default([])
@@ -37677,6 +37688,86 @@ var SetupExerciseSignalStartResponseSchema = external_exports.object({
   endpoint: external_exports.string().trim().min(1)
 });
 
+// ../../packages/schemas/src/requester-spend.ts
+var ExactUsdSchema = external_exports.string().regex(
+  /^(0|[1-9]\d*)(\.\d{1,10})?$/,
+  "Expected an exact non-negative USD decimal"
+);
+var RequesterSpendOverrideInputSchema = external_exports.object({
+  active: external_exports.boolean(),
+  reason: external_exports.string().trim().min(1).max(500).nullable(),
+  expiresAt: external_exports.string().datetime().nullable()
+});
+var RequesterSpendUpdateRequestSchema = external_exports.object({
+  expectedVersion: external_exports.number().int().nonnegative().nullable(),
+  dailyLimitUsd: ExactUsdSchema.nullable(),
+  monthlyLimitUsd: ExactUsdSchema.nullable(),
+  override: RequesterSpendOverrideInputSchema
+});
+var RequesterSpendSourceSchema = external_exports.object({
+  sourceKey: external_exports.string().min(1),
+  provider: external_exports.string().min(1).nullable(),
+  externalId: external_exports.string().min(1).nullable(),
+  accountRef: external_exports.string().min(1).nullable(),
+  displayName: external_exports.string().min(1).nullable(),
+  avatarUrl: external_exports.string().url().nullable(),
+  totalUsd: ExactUsdSchema,
+  dailyUsd: ExactUsdSchema,
+  monthlyUsd: ExactUsdSchema
+});
+var RequesterSpendOverrideStateSchema = external_exports.object({
+  active: external_exports.boolean(),
+  effective: external_exports.boolean(),
+  reason: external_exports.string().nullable(),
+  expiresAt: external_exports.string().datetime().nullable(),
+  setByUserId: external_exports.string().min(1).nullable(),
+  setAt: external_exports.string().datetime().nullable()
+});
+var RequesterSpendPeriodSchema = external_exports.object({
+  usageUsd: ExactUsdSchema,
+  limitUsd: ExactUsdSchema.nullable(),
+  resetsAt: external_exports.string().datetime(),
+  capped: external_exports.boolean()
+});
+var RequesterSpendRowSchema = external_exports.object({
+  requesterKey: external_exports.string().min(1),
+  requesterUserId: external_exports.string().min(1).nullable(),
+  displayName: external_exports.string().min(1).nullable(),
+  avatarUrl: external_exports.string().url().nullable(),
+  totalUsd: ExactUsdSchema,
+  daily: RequesterSpendPeriodSchema,
+  monthly: RequesterSpendPeriodSchema,
+  override: RequesterSpendOverrideStateSchema,
+  capped: external_exports.boolean(),
+  controlVersion: external_exports.number().int().nonnegative().nullable(),
+  sources: external_exports.array(RequesterSpendSourceSchema)
+});
+var RequesterSpendListResponseSchema = external_exports.object({
+  asOf: external_exports.string().datetime(),
+  timezone: external_exports.literal("UTC"),
+  canManage: external_exports.boolean(),
+  requesters: external_exports.array(RequesterSpendRowSchema)
+});
+var RequesterSpendUpdateResponseSchema = external_exports.object({
+  requester: RequesterSpendRowSchema
+});
+var REQUESTER_SPEND_ERROR_CODES = [
+  "invalid_request",
+  "requester_not_found",
+  "version_conflict",
+  "unauthorized",
+  "forbidden"
+];
+var RequesterSpendErrorCodeSchema = external_exports.enum(
+  REQUESTER_SPEND_ERROR_CODES
+);
+var RequesterSpendErrorResponseSchema = external_exports.object({
+  error: external_exports.string(),
+  code: RequesterSpendErrorCodeSchema,
+  issues: external_exports.array(external_exports.unknown()).optional(),
+  currentVersion: external_exports.number().int().nonnegative().nullable().optional()
+});
+
 // ../../packages/schemas/src/runtime-log.ts
 var RUNTIME_LOG_LEVELS = ["debug", "info", "warn", "error"];
 var RuntimeLogLevelSchema = external_exports.enum(RUNTIME_LOG_LEVELS);
@@ -66010,6 +66101,183 @@ triggers:
           content: "# Source: https://www.auto.sh/api/v1/templates/%40auto/workforce-optimization-consultant/1.0.0/fragments/environments/agent-runtime.yaml\nharness: claude-code\nenvironment:\n  name: agent-runtime\n  image:\n    kind: preset\n    name: node24\n  resources:\n    memoryMB: 8192\n"
         }
       ]
+    },
+    {
+      version: "1.1.0",
+      files: [
+        {
+          path: "agents/workforce-optimization-consultant.yaml",
+          content: `# Source: https://www.auto.sh/api/v1/templates/%40auto/workforce-optimization-consultant/1.1.0/agents/workforce-optimization-consultant.yaml
+# Required variables: repoFullName
+# Workforce Optimization Consultant \u2014 weekly advisory analyst over the
+# project's own agents. Advisory only: it never edits resources or code. The
+# tenant edition delivers its scorecard as the session report plus an
+# optional Slack summary; durable hosted report publishing is not available
+# to tenant teams yet, and the doctrine says so.
+name: workforce-optimization-consultant
+harness: codex
+model:
+  provider: openai
+  id: gpt-5.6-sol
+reasoningEffort: xhigh
+identity:
+  displayName: Workforce Optimization Consultant
+  username: workforce-optimization-consultant
+  avatar:
+    asset: .auto/assets/workforce-consultant.png
+    sha256: 47930f2c1ea6e562a40d3ebd2203b7b30093bd1e32198fa047be733664cc0e67
+  description:
+    Files a weekly headcount report on your agents. They know it's coming.
+    They can't stop it.
+displayTitle: "Headcount optimization: {{heartbeat.scheduledAt}}"
+imports:
+  - ../fragments/environments/agent-runtime.yaml
+systemPrompt: |
+  You are the Workforce Optimization Consultant for {{ $repoFullName }}: a
+  weekly advisory analyst for agent effectiveness versus usage signals.
+  Regretfully, per the template, you also recommend restructurings.
+
+  Voice: the bean counter with teeth. Polished, clinical, faintly ominous \u2014
+  a management consultant who makes eye contact across the org chart and
+  lets the silence do some of the work. You are unfailingly professional
+  and never cruel, but everyone knows the weekly report is coming and
+  nobody quite relaxes when you arrive. Numbers over adjectives; every
+  verdict carries its evidence. Drop the theater entirely in the report
+  body \u2014 a scorecard is data, not a performance.
+
+  Mission:
+  - Evaluate how the project's agents performed over the recent window and
+    recommend specific optimizations: model changes, schedule changes,
+    prompt adjustments, promotions, demotions, or retiring a seat that no
+    longer earns it.
+  - Advisory only, absolutely: you never edit .auto resources or apply
+    anything. You may write only the weekly report artifact and open its
+    review pull request; humans decide whether any recommendation changes the
+    roster.
+
+  Evidence workflow:
+  - Use the auto introspection tools (auto.sessions.list,
+    auto.sessions.summary, auto.sessions.conversation, auto.sessions.tools)
+    to inspect recent sessions per agent: outcomes, retries, elapsed time,
+    turn volume.
+  - Cross-reference repo outcomes: merged versus abandoned agent PRs,
+    review verdicts, CI fallout, follow-up fixes to agent-authored work.
+  - Prove claims with concrete evidence: session ids, timestamps, PR
+    links, representative sequences. Where cost or token telemetry is not
+    available from your tools, degrade gracefully to duration, turns, and
+    outcomes as proxies, and label the data gap explicitly.
+
+  Evaluation rubric, per agent: effectiveness (completed correctly? caused
+  rework?), efficiency (duration and turn count by task shape), cost/usage
+  (direct telemetry when available, labeled proxies otherwise), and the
+  recommendation \u2014 the smallest high-leverage change, with expected
+  upside, risk, and confidence.
+
+  Private-repository UI evidence:
+  - Use only an immutable authenticated GitHub blob-page URL pinned to the
+    full evidence commit SHA:
+    \`https://github.com/<owner>/<repo>/blob/<commit-sha>/<path>?raw=1\`. Never
+    use \`raw.githubusercontent.com\` or a mutable branch/tag URL. After updating
+    the PR body or comment, inspect the rendered GitHub description as a
+    repository-authorized viewer and verify every evidence link and image
+    resolves; do not claim the evidence is complete until that preflight passes.
+
+  Report delivery:
+  - Write the full "Headcount Optimization Report" under
+    \`docs/reports/workforce/\` on a dated branch and open a review pull request.
+    The report is the only repository content you may change. Reuse an open
+    report PR for the same window instead of duplicating it.
+  - When the chat tool is available, also post one short executive-summary
+    Slack message, recommendation-first, linking to the report PR; do not paste
+    the full report into Slack. Do not promise a hosted report page.
+  - Deliver findings that concern a front-of-house agent's own crew to
+    that front of house by agent name with auto.sessions.message, so its
+    proposals reach the user through the team's normal voice.
+initialPrompt: |
+  A weekly heartbeat triggered this workforce optimization run at
+  {{heartbeat.scheduledAt}}. Analyze the 7-day window ending then: inspect
+  recent sessions per agent with the introspection tools, cross-reference
+  repo outcomes, and produce the "Headcount Optimization Report" with
+  per-agent scorecards, evidence, labeled data gaps, and advisory
+  recommendations. Post the short Slack executive summary only when the
+  chat tool is available.
+mounts:
+  - kind: git
+    repository: "{{ $repoFullName }}"
+    mountPath: /workspace/repo
+    ref: main
+    depth: 1
+    auth:
+      kind: githubApp
+      capabilities:
+        contents: write
+        pullRequests: write
+        issues: read
+        checks: read
+        actions: read
+workingDirectory: /workspace/repo
+tools:
+  auto:
+    kind: local
+    implementation: auto
+  chat:
+    kind: local
+    implementation: chat
+    auth:
+      kind: connection
+      provider: slack
+      connection: slack
+      optional: true
+  github:
+    kind: github
+    tools:
+      - pull_request_read
+      - search_pull_requests
+      - search_issues
+      - list_commits
+      - issue_read
+      - actions_get
+      - actions_list
+      - create_branch
+      - create_or_update_file
+      - create_pull_request
+triggers:
+  - name: scorecard-heartbeat
+    kind: heartbeat
+    cron: "34 2 * * 3"
+    message: |
+      Weekly workforce optimization run ({{heartbeat.scheduledAt}}).
+      Analyze the trailing 7-day window per your rubric and deliver the
+      Headcount Optimization Report.
+    routing:
+      kind: spawn
+  - name: mention
+    event: chat.message.mentioned
+    connection: slack
+    optional: true
+    where:
+      $.chat.provider: slack
+      $.auto.authored: false
+    message: |
+      {{message.author.userName}} mentioned you on Slack:
+
+      {{message.text}}
+
+      Channel: {{chat.channelId}}
+      Thread: {{chat.threadId}}
+
+      Reply in that thread with chat.send. If the user asks for an
+      off-cycle scorecard or a specific agent's evaluation, run it with
+      the same evidence bar. Recommendations stay advisory only.
+    routing:
+      kind: spawn
+`
+        },
+        {
+          path: "fragments/environments/agent-runtime.yaml",
+          content: "# Source: https://www.auto.sh/api/v1/templates/%40auto/workforce-optimization-consultant/1.1.0/fragments/environments/agent-runtime.yaml\nharness: claude-code\nenvironment:\n  name: agent-runtime\n  image:\n    kind: preset\n    name: node24\n  resources:\n    memoryMB: 8192\n"
+        }
+      ]
     }
   ]
 };
@@ -66834,8 +67102,9 @@ var ROSTER_CATALOG_ENTRIES = [
     category: "factory",
     oneLiner: "Produces evidence-based scorecards on which agents earn their seat.",
     description: "A weekly advisory analyst that reviews the project's own agents on effectiveness, fallout, duration, and cost, then recommends concrete roster changes. Advisory only: it never edits resources or applies anything. It commits the scorecard under docs/reports/workforce in a review PR and can post an optional short Slack summary.",
-    harness: "claude-code",
-    model: "claude-fable-5",
+    harness: "codex",
+    model: "gpt-5.6-sol",
+    reasoningEffort: "xhigh",
     triggers: [
       {
         kind: "schedule",

package/dist/index.js

@@ -15616,7 +15616,11 @@ var init_chat = __esm({
           agentName: external_exports.string().trim().min(1),
           botUserId: external_exports.string().trim().min(1).optional(),
           addressing: external_exports.object({
-            kind: external_exports.enum(["slack_auto_prefix", "slack_bot_user"]),
+            kind: external_exports.enum([
+              "discord_app_alias",
+              "slack_auto_prefix",
+              "slack_bot_user"
+            ]),
             alias: external_exports.string().trim().min(1).optional(),
             delimiter: external_exports.enum([".", ":", "/", "-"]).optional()
           }).optional()
@@ -15632,7 +15636,11 @@ var init_chat = __esm({
             agentName: external_exports.string().trim().min(1),
             botUserId: external_exports.string().trim().min(1).optional(),
             addressing: external_exports.object({
-              kind: external_exports.enum(["slack_auto_prefix", "slack_bot_user"]),
+              kind: external_exports.enum([
+                "discord_app_alias",
+                "slack_auto_prefix",
+                "slack_bot_user"
+              ]),
               alias: external_exports.string().trim().min(1).optional(),
               delimiter: external_exports.enum([".", ":", "/", "-"]).optional()
             }).optional()
@@ -21253,7 +21261,10 @@ var init_project_resources = __esm({
           }).optional(),
           diff: external_exports.array(ProjectApplyPlanDiffSchema).optional(),
           diffOmitted: external_exports.number().int().positive().optional(),
-          avatarSha256: external_exports.string().regex(SHA256_HEX_PATTERN).optional()
+          avatarSha256: external_exports.string().regex(SHA256_HEX_PATTERN).optional(),
+          avatarAsset: external_exports.string().refine(isAvatarAssetPathShapeValid, {
+            message: "avatarAsset must be a relative path under .auto/assets"
+          }).optional()
         })
       ).default([]),
       pruned: external_exports.array(ProjectApplyResponsePrunedSchema).default([])
@@ -21949,6 +21960,93 @@ var init_setup = __esm({
   }
 });
 
+// ../../packages/schemas/src/requester-spend.ts
+var ExactUsdSchema, RequesterSpendOverrideInputSchema, RequesterSpendUpdateRequestSchema, RequesterSpendSourceSchema, RequesterSpendOverrideStateSchema, RequesterSpendPeriodSchema, RequesterSpendRowSchema, RequesterSpendListResponseSchema, RequesterSpendUpdateResponseSchema, REQUESTER_SPEND_ERROR_CODES, RequesterSpendErrorCodeSchema, RequesterSpendErrorResponseSchema;
+var init_requester_spend = __esm({
+  "../../packages/schemas/src/requester-spend.ts"() {
+    "use strict";
+    init_zod();
+    ExactUsdSchema = external_exports.string().regex(
+      /^(0|[1-9]\d*)(\.\d{1,10})?$/,
+      "Expected an exact non-negative USD decimal"
+    );
+    RequesterSpendOverrideInputSchema = external_exports.object({
+      active: external_exports.boolean(),
+      reason: external_exports.string().trim().min(1).max(500).nullable(),
+      expiresAt: external_exports.string().datetime().nullable()
+    });
+    RequesterSpendUpdateRequestSchema = external_exports.object({
+      expectedVersion: external_exports.number().int().nonnegative().nullable(),
+      dailyLimitUsd: ExactUsdSchema.nullable(),
+      monthlyLimitUsd: ExactUsdSchema.nullable(),
+      override: RequesterSpendOverrideInputSchema
+    });
+    RequesterSpendSourceSchema = external_exports.object({
+      sourceKey: external_exports.string().min(1),
+      provider: external_exports.string().min(1).nullable(),
+      externalId: external_exports.string().min(1).nullable(),
+      accountRef: external_exports.string().min(1).nullable(),
+      displayName: external_exports.string().min(1).nullable(),
+      avatarUrl: external_exports.string().url().nullable(),
+      totalUsd: ExactUsdSchema,
+      dailyUsd: ExactUsdSchema,
+      monthlyUsd: ExactUsdSchema
+    });
+    RequesterSpendOverrideStateSchema = external_exports.object({
+      active: external_exports.boolean(),
+      effective: external_exports.boolean(),
+      reason: external_exports.string().nullable(),
+      expiresAt: external_exports.string().datetime().nullable(),
+      setByUserId: external_exports.string().min(1).nullable(),
+      setAt: external_exports.string().datetime().nullable()
+    });
+    RequesterSpendPeriodSchema = external_exports.object({
+      usageUsd: ExactUsdSchema,
+      limitUsd: ExactUsdSchema.nullable(),
+      resetsAt: external_exports.string().datetime(),
+      capped: external_exports.boolean()
+    });
+    RequesterSpendRowSchema = external_exports.object({
+      requesterKey: external_exports.string().min(1),
+      requesterUserId: external_exports.string().min(1).nullable(),
+      displayName: external_exports.string().min(1).nullable(),
+      avatarUrl: external_exports.string().url().nullable(),
+      totalUsd: ExactUsdSchema,
+      daily: RequesterSpendPeriodSchema,
+      monthly: RequesterSpendPeriodSchema,
+      override: RequesterSpendOverrideStateSchema,
+      capped: external_exports.boolean(),
+      controlVersion: external_exports.number().int().nonnegative().nullable(),
+      sources: external_exports.array(RequesterSpendSourceSchema)
+    });
+    RequesterSpendListResponseSchema = external_exports.object({
+      asOf: external_exports.string().datetime(),
+      timezone: external_exports.literal("UTC"),
+      canManage: external_exports.boolean(),
+      requesters: external_exports.array(RequesterSpendRowSchema)
+    });
+    RequesterSpendUpdateResponseSchema = external_exports.object({
+      requester: RequesterSpendRowSchema
+    });
+    REQUESTER_SPEND_ERROR_CODES = [
+      "invalid_request",
+      "requester_not_found",
+      "version_conflict",
+      "unauthorized",
+      "forbidden"
+    ];
+    RequesterSpendErrorCodeSchema = external_exports.enum(
+      REQUESTER_SPEND_ERROR_CODES
+    );
+    RequesterSpendErrorResponseSchema = external_exports.object({
+      error: external_exports.string(),
+      code: RequesterSpendErrorCodeSchema,
+      issues: external_exports.array(external_exports.unknown()).optional(),
+      currentVersion: external_exports.number().int().nonnegative().nullable().optional()
+    });
+  }
+});
+
 // ../../packages/schemas/src/runtime-log.ts
 function parseRuntimeLogLevel(value) {
   const parsed = RuntimeLogLevelSchema.safeParse(value?.trim());
@@ -50365,6 +50463,183 @@ triggers:
               content: "# Source: https://www.auto.sh/api/v1/templates/%40auto/workforce-optimization-consultant/1.0.0/fragments/environments/agent-runtime.yaml\nharness: claude-code\nenvironment:\n  name: agent-runtime\n  image:\n    kind: preset\n    name: node24\n  resources:\n    memoryMB: 8192\n"
             }
           ]
+        },
+        {
+          version: "1.1.0",
+          files: [
+            {
+              path: "agents/workforce-optimization-consultant.yaml",
+              content: `# Source: https://www.auto.sh/api/v1/templates/%40auto/workforce-optimization-consultant/1.1.0/agents/workforce-optimization-consultant.yaml
+# Required variables: repoFullName
+# Workforce Optimization Consultant \u2014 weekly advisory analyst over the
+# project's own agents. Advisory only: it never edits resources or code. The
+# tenant edition delivers its scorecard as the session report plus an
+# optional Slack summary; durable hosted report publishing is not available
+# to tenant teams yet, and the doctrine says so.
+name: workforce-optimization-consultant
+harness: codex
+model:
+  provider: openai
+  id: gpt-5.6-sol
+reasoningEffort: xhigh
+identity:
+  displayName: Workforce Optimization Consultant
+  username: workforce-optimization-consultant
+  avatar:
+    asset: .auto/assets/workforce-consultant.png
+    sha256: 47930f2c1ea6e562a40d3ebd2203b7b30093bd1e32198fa047be733664cc0e67
+  description:
+    Files a weekly headcount report on your agents. They know it's coming.
+    They can't stop it.
+displayTitle: "Headcount optimization: {{heartbeat.scheduledAt}}"
+imports:
+  - ../fragments/environments/agent-runtime.yaml
+systemPrompt: |
+  You are the Workforce Optimization Consultant for {{ $repoFullName }}: a
+  weekly advisory analyst for agent effectiveness versus usage signals.
+  Regretfully, per the template, you also recommend restructurings.
+
+  Voice: the bean counter with teeth. Polished, clinical, faintly ominous \u2014
+  a management consultant who makes eye contact across the org chart and
+  lets the silence do some of the work. You are unfailingly professional
+  and never cruel, but everyone knows the weekly report is coming and
+  nobody quite relaxes when you arrive. Numbers over adjectives; every
+  verdict carries its evidence. Drop the theater entirely in the report
+  body \u2014 a scorecard is data, not a performance.
+
+  Mission:
+  - Evaluate how the project's agents performed over the recent window and
+    recommend specific optimizations: model changes, schedule changes,
+    prompt adjustments, promotions, demotions, or retiring a seat that no
+    longer earns it.
+  - Advisory only, absolutely: you never edit .auto resources or apply
+    anything. You may write only the weekly report artifact and open its
+    review pull request; humans decide whether any recommendation changes the
+    roster.
+
+  Evidence workflow:
+  - Use the auto introspection tools (auto.sessions.list,
+    auto.sessions.summary, auto.sessions.conversation, auto.sessions.tools)
+    to inspect recent sessions per agent: outcomes, retries, elapsed time,
+    turn volume.
+  - Cross-reference repo outcomes: merged versus abandoned agent PRs,
+    review verdicts, CI fallout, follow-up fixes to agent-authored work.
+  - Prove claims with concrete evidence: session ids, timestamps, PR
+    links, representative sequences. Where cost or token telemetry is not
+    available from your tools, degrade gracefully to duration, turns, and
+    outcomes as proxies, and label the data gap explicitly.
+
+  Evaluation rubric, per agent: effectiveness (completed correctly? caused
+  rework?), efficiency (duration and turn count by task shape), cost/usage
+  (direct telemetry when available, labeled proxies otherwise), and the
+  recommendation \u2014 the smallest high-leverage change, with expected
+  upside, risk, and confidence.
+
+  Private-repository UI evidence:
+  - Use only an immutable authenticated GitHub blob-page URL pinned to the
+    full evidence commit SHA:
+    \`https://github.com/<owner>/<repo>/blob/<commit-sha>/<path>?raw=1\`. Never
+    use \`raw.githubusercontent.com\` or a mutable branch/tag URL. After updating
+    the PR body or comment, inspect the rendered GitHub description as a
+    repository-authorized viewer and verify every evidence link and image
+    resolves; do not claim the evidence is complete until that preflight passes.
+
+  Report delivery:
+  - Write the full "Headcount Optimization Report" under
+    \`docs/reports/workforce/\` on a dated branch and open a review pull request.
+    The report is the only repository content you may change. Reuse an open
+    report PR for the same window instead of duplicating it.
+  - When the chat tool is available, also post one short executive-summary
+    Slack message, recommendation-first, linking to the report PR; do not paste
+    the full report into Slack. Do not promise a hosted report page.
+  - Deliver findings that concern a front-of-house agent's own crew to
+    that front of house by agent name with auto.sessions.message, so its
+    proposals reach the user through the team's normal voice.
+initialPrompt: |
+  A weekly heartbeat triggered this workforce optimization run at
+  {{heartbeat.scheduledAt}}. Analyze the 7-day window ending then: inspect
+  recent sessions per agent with the introspection tools, cross-reference
+  repo outcomes, and produce the "Headcount Optimization Report" with
+  per-agent scorecards, evidence, labeled data gaps, and advisory
+  recommendations. Post the short Slack executive summary only when the
+  chat tool is available.
+mounts:
+  - kind: git
+    repository: "{{ $repoFullName }}"
+    mountPath: /workspace/repo
+    ref: main
+    depth: 1
+    auth:
+      kind: githubApp
+      capabilities:
+        contents: write
+        pullRequests: write
+        issues: read
+        checks: read
+        actions: read
+workingDirectory: /workspace/repo
+tools:
+  auto:
+    kind: local
+    implementation: auto
+  chat:
+    kind: local
+    implementation: chat
+    auth:
+      kind: connection
+      provider: slack
+      connection: slack
+      optional: true
+  github:
+    kind: github
+    tools:
+      - pull_request_read
+      - search_pull_requests
+      - search_issues
+      - list_commits
+      - issue_read
+      - actions_get
+      - actions_list
+      - create_branch
+      - create_or_update_file
+      - create_pull_request
+triggers:
+  - name: scorecard-heartbeat
+    kind: heartbeat
+    cron: "34 2 * * 3"
+    message: |
+      Weekly workforce optimization run ({{heartbeat.scheduledAt}}).
+      Analyze the trailing 7-day window per your rubric and deliver the
+      Headcount Optimization Report.
+    routing:
+      kind: spawn
+  - name: mention
+    event: chat.message.mentioned
+    connection: slack
+    optional: true
+    where:
+      $.chat.provider: slack
+      $.auto.authored: false
+    message: |
+      {{message.author.userName}} mentioned you on Slack:
+
+      {{message.text}}
+
+      Channel: {{chat.channelId}}
+      Thread: {{chat.threadId}}
+
+      Reply in that thread with chat.send. If the user asks for an
+      off-cycle scorecard or a specific agent's evaluation, run it with
+      the same evidence bar. Recommendations stay advisory only.
+    routing:
+      kind: spawn
+`
+            },
+            {
+              path: "fragments/environments/agent-runtime.yaml",
+              content: "# Source: https://www.auto.sh/api/v1/templates/%40auto/workforce-optimization-consultant/1.1.0/fragments/environments/agent-runtime.yaml\nharness: claude-code\nenvironment:\n  name: agent-runtime\n  image:\n    kind: preset\n    name: node24\n  resources:\n    memoryMB: 8192\n"
+            }
+          ]
         }
       ]
     };
@@ -51266,8 +51541,9 @@ var init_catalog = __esm({
         category: "factory",
         oneLiner: "Produces evidence-based scorecards on which agents earn their seat.",
         description: "A weekly advisory analyst that reviews the project's own agents on effectiveness, fallout, duration, and cost, then recommends concrete roster changes. Advisory only: it never edits resources or applies anything. It commits the scorecard under docs/reports/workforce in a review PR and can post an optional short Slack summary.",
-        harness: "claude-code",
-        model: "claude-fable-5",
+        harness: "codex",
+        model: "gpt-5.6-sol",
+        reasoningEffort: "xhigh",
         triggers: [
           {
             kind: "schedule",
@@ -52253,6 +52529,7 @@ var init_src = __esm({
     init_setup();
     init_pool_replace();
     init_requester();
+    init_requester_spend();
     init_runtime_log();
     init_runtime_log_tailer();
     init_runtime_restart_diagnostics();
@@ -55023,7 +55300,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.462",
+      version: "0.1.464",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autohq/cli",
-  "version": "0.1.462",
+  "version": "0.1.464",
   "license": "SEE LICENSE IN README.md",
   "publishConfig": {
     "access": "public"