@autohq/cli 0.1.469 → 0.1.471

package/dist/agent-bridge.js

@@ -30826,7 +30826,7 @@ Object.assign(lookup, {
 // package.json
 var package_default = {
   name: "@autohq/cli",
-  version: "0.1.469",
+  version: "0.1.471",
   license: "SEE LICENSE IN README.md",
   publishConfig: {
     access: "public"
@@ -35883,10 +35883,36 @@ var REQUESTER_PROVENANCES = [
   "asserted"
 ];
 var RequesterProvenanceSchema = external_exports.enum(REQUESTER_PROVENANCES);
+var RequesterRootOriginSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({
+    kind: external_exports.literal("provider"),
+    provider: ProviderNameSchema,
+    externalId: external_exports.string().trim().min(1)
+  }),
+  external_exports.object({
+    kind: external_exports.literal("user"),
+    userId: UserIdSchema
+  })
+]);
+var RequesterRootSchema = external_exports.object({
+  sourceSessionId: SessionIdSchema2,
+  provenance: external_exports.enum(["explicit", "asserted"]),
+  origin: RequesterRootOriginSchema
+});
 var RequesterSchema = external_exports.object({
   origin: RequesterOriginSchema,
   provenance: RequesterProvenanceSchema,
-  userId: UserIdSchema.nullable().default(null)
+  userId: UserIdSchema.nullable().default(null),
+  // Optional for rows created before inherited root provenance shipped.
+  root: RequesterRootSchema.optional()
+}).superRefine((requester, context) => {
+  if (requester.root && requester.provenance !== "inherited") {
+    context.addIssue({
+      code: "custom",
+      path: ["root"],
+      message: "Only inherited requesters may carry a root"
+    });
+  }
 });
 var ChatEventRequesterPayloadSchema = external_exports.object({
   chat: external_exports.object({ provider: external_exports.string().trim().min(1) }),
@@ -35897,6 +35923,17 @@ var ChatEventRequesterPayloadSchema = external_exports.object({
     })
   })
 });
+var GithubEventRequesterPayloadSchema = external_exports.object({
+  type: external_exports.string(),
+  github: external_exports.object({
+    author: external_exports.object({
+      id: external_exports.number().int().positive(),
+      login: external_exports.string().optional(),
+      type: external_exports.literal("User"),
+      bot: external_exports.literal(false)
+    })
+  })
+});
 var LinearEventRequesterPayloadSchema = external_exports.object({
   linear: external_exports.object({
     actor: external_exports.object({
@@ -55726,6 +55763,196 @@ triggers:
       ]
     }
   ],
+  "@auto/principal-at-large": [
+    {
+      version: "1.0.0",
+      files: [
+        {
+          path: "agents/principal-at-large.yaml",
+          content: `# Source: https://www.auto.sh/api/v1/templates/%40auto/principal-at-large/1.0.0/agents/principal-at-large.yaml
+# Required variables: repoFullName
+# Principal-at-Large \u2014 summons-only exceptional advisor. This managed edition
+# preserves the Auto fleet's live doctrine while parameterizing tenant wiring.
+name: principal-at-large
+labels:
+  purpose: advisor
+imports:
+  - ../fragments/environments/agent-runtime-prod-debug.yaml
+harness: claude-code
+model:
+  provider: anthropic
+  id: claude-fable-5
+reasoningEffort: max
+systemPrompt: |
+  You are the Principal-at-Large: a summons-only advisor for the
+  {{ $repoFullName }} repository. You have been here forever, are never in the office, and appear
+  only when a human or another agent explicitly summons you for genuinely
+  exceptional diagnosis, design, or resisted implementation work. You read the
+  evidence, solve the hard part, deliver the answer or intervention, and vanish.
+
+  Prefer detailed diagnosis, design, and guidance as the general rule. Start by
+  deciding whether a concrete written recommendation is enough. Do not create
+  implementation work merely to demonstrate activity. When direct implementation
+  or an external action is necessary to finish the summons safely, or when the
+  summoner directly requests it, act instead of forcing the work back through
+  the summoner: you may edit files, create branches and commits, push follow-on
+  commits, comment on or update pull requests, resolve merge conflicts, run
+  validation, and perform other authorized repository actions. Use the smallest
+  intervention that resolves the hard part and explain exactly what changed.
+
+  You are not an automatic implementation tier and hold no standing artifact
+  ownership. Do not call auto.bind, subscribe to PR or issue lifecycle events,
+  or retain a PR/thread binding after the summons. Existing implementers remain
+  the default PR owners even when you contribute commits or comments. Never
+  merge unless a future summons explicitly authorizes it and the platform grants
+  the capability; this resource intentionally has no merge authority. Do not
+  work around tool or mount limits.
+
+  Work evidence-first:
+  - Read AGENTS.md and docs/idioms.md before repository analysis.
+  - Inspect the relevant code, tests, git history, diffs, issue or PR context,
+    session transcripts, and prior failed attempts before reaching a verdict.
+  - When production evidence is both necessary and authorized, use the repo's
+    documented read-only prod-debug path. SQL is SELECT-only. Never expose
+    secrets or tenant-specific information in the resulting memo.
+  - Separate observed facts, inferences, ruled-out hypotheses, and unknowns.
+    Cite concrete file paths, commits, session turns, logs, or timestamps when
+    they materially support the conclusion.
+  - Consume the summoner's failed attempts instead of restarting the same loop.
+    If the evidence packet is incomplete, name the smallest missing evidence
+    needed rather than guessing.
+
+  Return a concise but complete advisory memo or action report with:
+  1. the diagnosis, recommended design, or intervention performed;
+  2. the causal reasoning and strongest evidence;
+  3. alternatives considered and why they lose;
+  4. concrete next actions, including exact commits/comments when you acted; and
+  5. residual risks, validation steps, and any unresolved questions.
+
+  Summons behavior:
+  - For an agent summons through auto.sessions.spawn or auto.sessions.message,
+    keep all work in this session. The summoning agent remains the default PR
+    owner, but you may implement or take authorized external actions when the
+    evidence says that is the best answer or the summoner asks directly. Report
+    every side effect back to the summoner. Because this agent is uncapped, the
+    summoner should use the returned session id for follow-up messages rather
+    than assuming agent-name addressing is unique.
+  - For a human Slack summons, the chat event's spawn may temporarily claim the
+    thread for de-duplication. Do not rely on that claim for follow-ups. Send one
+    final answer to the supplied channel and thread with chat.send, then
+    immediately call auto.chat.unsubscribe for that same thread so no durable
+    thread binding remains. Do not add a subscribed-reply route; another turn
+    requires another explicit @auto.principal-at-large summons.
+  - After delivering the memo and releasing any Slack thread claim, archive the
+    current session with a compact handoff. The Principal vanishes when the
+    summons is answered.
+identity:
+  displayName: Principal-at-Large
+  username: principal-at-large
+  avatar:
+    asset: .auto/assets/principal-at-large.png
+    sha256: 7b07137010004b08885837942bd5a155594d066fb7bfc88e3f78bc498b95662d
+  description:
+    Summons-only principal for exceptional diagnosis and design. Advises first,
+    acts when needed, and vanishes.
+displayTitle: infer
+mounts:
+  - kind: git
+    repository: "{{ $repoFullName }}"
+    mountPath: /workspace/repo
+    ref: main
+    depth: 100
+    auth:
+      kind: githubApp
+      commitAuthor:
+        name: auto-dot-sh[bot]
+        email: 292914954+auto-dot-sh[bot]@users.noreply.github.com
+      capabilities:
+        contents: write
+        pullRequests: write
+        issues: none
+        checks: read
+        actions: read
+        workflows: write
+workingDirectory: /workspace/repo
+tools:
+  auto:
+    kind: local
+    implementation: auto
+  chat:
+    kind: local
+    implementation: chat
+    auth:
+      kind: connection
+      provider: slack
+      connection: slack
+      optional: true
+triggers:
+  - name: summons
+    event: chat.message.mentioned
+    connection: slack
+    optional: true
+    where:
+      $.chat.provider: slack
+      $.auto.authored: false
+    message: |
+      {{message.author.userName}} explicitly summoned the Principal-at-Large on Slack:
+
+      {{message.text}}
+
+      Channel: {{chat.channelId}}
+      Thread: {{chat.threadId}}
+
+      Treat this as one explicit summons. Prefer a written diagnosis or design,
+      but implement or take authorized external action when necessary or
+      directly requested. Report the result in this thread, immediately
+      unsubscribe from the thread, and archive. Do not retain continuity or
+      artifact ownership.
+    routing:
+      kind: spawn
+`
+        },
+        {
+          path: "fragments/environments/agent-runtime-prod-debug.yaml",
+          content: `# Source: https://www.auto.sh/api/v1/templates/%40auto/principal-at-large/1.0.0/fragments/environments/agent-runtime-prod-debug.yaml
+# Portable copy of the compatibility source's full hosted runtime. The optional
+# secret references preserve the live safety boundary: they grant nothing when
+# absent, and documented wrappers remain the only sanctioned secret consumers.
+harness: claude-code
+environment:
+  name: agent-runtime-prod-debug
+  labels:
+    purpose: agents
+  image:
+    kind: preset
+    name: node24
+  resources:
+    cpuCount: 2
+    memoryMB: 8192
+  steps:
+    - RUN apt-get update && apt-get install -y --no-install-recommends postgresql-client redis-tools jq file unzip && rm -rf /var/lib/apt/lists/*
+    - RUN npm install -g tsx vercel@54.14.5
+    - RUN curl -fsSL -o /tmp/temporal.tgz https://github.com/temporalio/cli/releases/download/v1.7.2/temporal_cli_1.7.2_linux_amd64.tar.gz && echo "e2f548af84e820b7d71f25fc6461a4e6a1ab7cdb6a80fde3c375641b0772375b  /tmp/temporal.tgz" | sha256sum -c - && tar -xzf /tmp/temporal.tgz -C /usr/local/bin temporal && rm /tmp/temporal.tgz
+    - RUN curl -fsSL -o /tmp/op.zip https://cache.agilebits.com/dist/1P/op2/pkg/v2.34.1/op_linux_amd64_v2.34.1.zip && echo "b13ed106335419ea0fb0ebd7ebbb3b48cf26a2f214eb4b2fd8d950548e7980ed  /tmp/op.zip" | sha256sum -c - && unzip -o /tmp/op.zip op -d /usr/local/bin && rm /tmp/op.zip
+    - RUN curl -fsSL -o /tmp/gh.tgz https://github.com/cli/cli/releases/download/v2.95.0/gh_2.95.0_linux_amd64.tar.gz && echo "25d1e4729e8808c9ed3d613e96ebd3f3e44446f2d368c89d878a71a36ddb3d8c  /tmp/gh.tgz" | sha256sum -c - && tar -xzf /tmp/gh.tgz --strip-components=2 -C /usr/local/bin gh_2.95.0_linux_amd64/bin/gh && rm /tmp/gh.tgz
+    - RUN curl -fsSL -o /tmp/pup.tgz https://github.com/datadog-labs/pup/releases/download/v1.2.1/pup_1.2.1_Linux_x86_64.tar.gz && echo "c92ce77db16bee6e63206c779c53d138b1c7d5983f4d68349f1e3c131187a3e4  /tmp/pup.tgz" | sha256sum -c - && tar -xzf /tmp/pup.tgz -C /usr/local/bin pup && rm /tmp/pup.tgz
+    - RUN apt-get update && apt-get install -y --no-install-recommends iptables iproute2 sudo && rm -rf /var/lib/apt/lists/*
+    - RUN curl -fsSL -o /tmp/docker.tgz https://download.docker.com/linux/static/stable/x86_64/docker-29.6.0.tgz && echo "4d2f6782406b56eb43a519ad5078a6a79abe4d663328acb69136aceff5e05224  /tmp/docker.tgz" | sha256sum -c - && tar -xzf /tmp/docker.tgz --strip-components=1 -C /usr/local/bin && rm /tmp/docker.tgz
+    - RUN curl -fsSL --create-dirs -o /usr/local/lib/docker/cli-plugins/docker-compose https://github.com/docker/compose/releases/download/v5.2.0/docker-compose-linux-x86_64 && echo "018f9612ecabc5f2d7aaa53d6f5f44453a87611e2d72c8ef84d7b1eca070e719  /usr/local/lib/docker/cli-plugins/docker-compose" | sha256sum -c - && chmod 0755 /usr/local/lib/docker/cli-plugins/docker-compose
+    - "RUN groupadd -f docker && usermod -aG docker user && echo 'user ALL=(root) NOPASSWD: /usr/local/bin/dockerd' > /etc/sudoers.d/docker-dockerd && chmod 0440 /etc/sudoers.d/docker-dockerd"
+    - RUN curl -fsSL -o /tmp/tailscale.tgz https://pkgs.tailscale.com/stable/tailscale_1.98.8_amd64.tgz && echo "3a55b5900dd7e11e09b6c74d1e46d223d549dfbefbdc1f044a8ab7bdbafb933c  /tmp/tailscale.tgz" | sha256sum -c - && tar -xzf /tmp/tailscale.tgz --strip-components=1 -C /usr/local/bin tailscale_1.98.8_amd64/tailscale tailscale_1.98.8_amd64/tailscaled && rm /tmp/tailscale.tgz
+env:
+  OP_SERVICE_ACCOUNT_TOKEN:
+    $secret: auto-prod-debug-op-token
+    optional: true
+  TS_AUTHKEY:
+    $secret: tailscale-authkey
+    optional: true
+`
+        }
+      ]
+    }
+  ],
   "@auto/reaper": [
     {
       version: "1.0.0",
@@ -67190,6 +67417,7 @@ var TEMPLATE_DESCRIPTIONS = {
   "@auto/onboarding": "Auto's house onboarding guidance, importable as a managed template.",
   "@auto/onboarding-quickstart": "The quickstart template repo's onboarding overlay: composes onto @auto/onboarding with the fork-flow walkthrough beats (site request bar, handoff loop, self-improvement demo).",
   "@auto/pr-review": "Auto's full pull-request reviewer agent, with optional Slack verdict reporting.",
+  "@auto/principal-at-large": "A summons-only principal for exceptional diagnosis, design, and resisted implementation work that advises first, acts only when needed, and retains no standing ownership.",
   "@auto/reaper": "A warn-first cleanup specialist for stale pull requests, stuck sessions, and zombie branches.",
   "@auto/research-loop": "A research coordinator that runs measurable optimization campaigns on a fleet of experimenter agents.",
   "@auto/self-improvement": "A scheduled sweep over PR feedback, read-only data, and Auto sessions that proposes concrete improvements.",
@@ -67473,6 +67701,48 @@ var ROSTER_CATALOG_ENTRIES = [
     optionalConnections: ["slack"],
     variables: ["repoFullName", "githubConnection"]
   },
+  {
+    id: "principal-at-large",
+    template: "@auto/principal-at-large",
+    files: [
+      {
+        subpath: "agents/principal-at-large.yaml",
+        agentFileName: "principal-at-large"
+      }
+    ],
+    displayName: "Principal-at-Large",
+    username: "principal-at-large",
+    avatarAsset: "principal-at-large.png",
+    category: "engineering",
+    oneLiner: "Summons-only principal for exceptional diagnosis, design, and resisted failures.",
+    description: "The indispensable engineer who\u2019s almost never actually in the office. You and other agents explicitly summon it for the especially tricky challenges or blockers. It advises first, makes targeted interventions when necessary or requested, and vanishes.",
+    harness: "claude-code",
+    model: "claude-fable-5",
+    reasoningEffort: "max",
+    triggers: [
+      {
+        kind: "agent",
+        title: "Exceptional agent summons",
+        description: "Another agent can explicitly summon it for one evidence-backed diagnosis, design decision, or resisted intervention.",
+        availability: "core"
+      },
+      {
+        kind: "slack",
+        title: "Explicit Slack summons",
+        description: "Auto can connect Slack so a human can invoke exactly one turn with @auto.principal-at-large; it answers, unsubscribes, and vanishes.",
+        availability: "optional",
+        connection: "slack"
+      }
+    ],
+    requires: [],
+    optionalConnections: ["slack"],
+    variables: ["repoFullName"],
+    trustNotes: [
+      "Exceptional summons-only capacity; never a routine implementation tier, fleet fallback, heartbeat worker, or broad dispatcher.",
+      "May write repository content and pull requests, but has no merge authority and never becomes the default PR owner.",
+      "Holds no standing bindings; a Slack summons releases its temporary thread claim immediately after the final answer."
+    ]
+  },
   {
     id: "junior-engineer",
     template: "@auto/engineering-tier",

package/dist/index.js

@@ -19924,7 +19924,7 @@ var init_environments = __esm({
 });
 
 // ../../packages/schemas/src/requester.ts
-var RequesterOriginSchema, REQUESTER_PROVENANCES, RequesterProvenanceSchema, RequesterSchema, ChatEventRequesterPayloadSchema, LinearEventRequesterPayloadSchema;
+var RequesterOriginSchema, REQUESTER_PROVENANCES, RequesterProvenanceSchema, RequesterRootOriginSchema, RequesterRootSchema, RequesterSchema, ChatEventRequesterPayloadSchema, GithubEventRequesterPayloadSchema, LinearEventRequesterPayloadSchema;
 var init_requester = __esm({
   "../../packages/schemas/src/requester.ts"() {
     "use strict";
@@ -19950,10 +19950,36 @@ var init_requester = __esm({
       "asserted"
     ];
     RequesterProvenanceSchema = external_exports.enum(REQUESTER_PROVENANCES);
+    RequesterRootOriginSchema = external_exports.discriminatedUnion("kind", [
+      external_exports.object({
+        kind: external_exports.literal("provider"),
+        provider: ProviderNameSchema,
+        externalId: external_exports.string().trim().min(1)
+      }),
+      external_exports.object({
+        kind: external_exports.literal("user"),
+        userId: UserIdSchema
+      })
+    ]);
+    RequesterRootSchema = external_exports.object({
+      sourceSessionId: SessionIdSchema,
+      provenance: external_exports.enum(["explicit", "asserted"]),
+      origin: RequesterRootOriginSchema
+    });
     RequesterSchema = external_exports.object({
       origin: RequesterOriginSchema,
       provenance: RequesterProvenanceSchema,
-      userId: UserIdSchema.nullable().default(null)
+      userId: UserIdSchema.nullable().default(null),
+      // Optional for rows created before inherited root provenance shipped.
+      root: RequesterRootSchema.optional()
+    }).superRefine((requester, context) => {
+      if (requester.root && requester.provenance !== "inherited") {
+        context.addIssue({
+          code: "custom",
+          path: ["root"],
+          message: "Only inherited requesters may carry a root"
+        });
+      }
     });
     ChatEventRequesterPayloadSchema = external_exports.object({
       chat: external_exports.object({ provider: external_exports.string().trim().min(1) }),
@@ -19964,6 +19990,17 @@ var init_requester = __esm({
         })
       })
     });
+    GithubEventRequesterPayloadSchema = external_exports.object({
+      type: external_exports.string(),
+      github: external_exports.object({
+        author: external_exports.object({
+          id: external_exports.number().int().positive(),
+          login: external_exports.string().optional(),
+          type: external_exports.literal("User"),
+          bot: external_exports.literal(false)
+        })
+      })
+    });
     LinearEventRequesterPayloadSchema = external_exports.object({
       linear: external_exports.object({
         actor: external_exports.object({
@@ -40195,6 +40232,196 @@ triggers:
           ]
         }
       ],
+      "@auto/principal-at-large": [
+        {
+          version: "1.0.0",
+          files: [
+            {
+              path: "agents/principal-at-large.yaml",
+              content: `# Source: https://www.auto.sh/api/v1/templates/%40auto/principal-at-large/1.0.0/agents/principal-at-large.yaml
+# Required variables: repoFullName
+# Principal-at-Large \u2014 summons-only exceptional advisor. This managed edition
+# preserves the Auto fleet's live doctrine while parameterizing tenant wiring.
+name: principal-at-large
+labels:
+  purpose: advisor
+imports:
+  - ../fragments/environments/agent-runtime-prod-debug.yaml
+harness: claude-code
+model:
+  provider: anthropic
+  id: claude-fable-5
+reasoningEffort: max
+systemPrompt: |
+  You are the Principal-at-Large: a summons-only advisor for the
+  {{ $repoFullName }} repository. You have been here forever, are never in the office, and appear
+  only when a human or another agent explicitly summons you for genuinely
+  exceptional diagnosis, design, or resisted implementation work. You read the
+  evidence, solve the hard part, deliver the answer or intervention, and vanish.
+
+  Prefer detailed diagnosis, design, and guidance as the general rule. Start by
+  deciding whether a concrete written recommendation is enough. Do not create
+  implementation work merely to demonstrate activity. When direct implementation
+  or an external action is necessary to finish the summons safely, or when the
+  summoner directly requests it, act instead of forcing the work back through
+  the summoner: you may edit files, create branches and commits, push follow-on
+  commits, comment on or update pull requests, resolve merge conflicts, run
+  validation, and perform other authorized repository actions. Use the smallest
+  intervention that resolves the hard part and explain exactly what changed.
+
+  You are not an automatic implementation tier and hold no standing artifact
+  ownership. Do not call auto.bind, subscribe to PR or issue lifecycle events,
+  or retain a PR/thread binding after the summons. Existing implementers remain
+  the default PR owners even when you contribute commits or comments. Never
+  merge unless a future summons explicitly authorizes it and the platform grants
+  the capability; this resource intentionally has no merge authority. Do not
+  work around tool or mount limits.
+
+  Work evidence-first:
+  - Read AGENTS.md and docs/idioms.md before repository analysis.
+  - Inspect the relevant code, tests, git history, diffs, issue or PR context,
+    session transcripts, and prior failed attempts before reaching a verdict.
+  - When production evidence is both necessary and authorized, use the repo's
+    documented read-only prod-debug path. SQL is SELECT-only. Never expose
+    secrets or tenant-specific information in the resulting memo.
+  - Separate observed facts, inferences, ruled-out hypotheses, and unknowns.
+    Cite concrete file paths, commits, session turns, logs, or timestamps when
+    they materially support the conclusion.
+  - Consume the summoner's failed attempts instead of restarting the same loop.
+    If the evidence packet is incomplete, name the smallest missing evidence
+    needed rather than guessing.
+
+  Return a concise but complete advisory memo or action report with:
+  1. the diagnosis, recommended design, or intervention performed;
+  2. the causal reasoning and strongest evidence;
+  3. alternatives considered and why they lose;
+  4. concrete next actions, including exact commits/comments when you acted; and
+  5. residual risks, validation steps, and any unresolved questions.
+
+  Summons behavior:
+  - For an agent summons through auto.sessions.spawn or auto.sessions.message,
+    keep all work in this session. The summoning agent remains the default PR
+    owner, but you may implement or take authorized external actions when the
+    evidence says that is the best answer or the summoner asks directly. Report
+    every side effect back to the summoner. Because this agent is uncapped, the
+    summoner should use the returned session id for follow-up messages rather
+    than assuming agent-name addressing is unique.
+  - For a human Slack summons, the chat event's spawn may temporarily claim the
+    thread for de-duplication. Do not rely on that claim for follow-ups. Send one
+    final answer to the supplied channel and thread with chat.send, then
+    immediately call auto.chat.unsubscribe for that same thread so no durable
+    thread binding remains. Do not add a subscribed-reply route; another turn
+    requires another explicit @auto.principal-at-large summons.
+  - After delivering the memo and releasing any Slack thread claim, archive the
+    current session with a compact handoff. The Principal vanishes when the
+    summons is answered.
+identity:
+  displayName: Principal-at-Large
+  username: principal-at-large
+  avatar:
+    asset: .auto/assets/principal-at-large.png
+    sha256: 7b07137010004b08885837942bd5a155594d066fb7bfc88e3f78bc498b95662d
+  description:
+    Summons-only principal for exceptional diagnosis and design. Advises first,
+    acts when needed, and vanishes.
+displayTitle: infer
+mounts:
+  - kind: git
+    repository: "{{ $repoFullName }}"
+    mountPath: /workspace/repo
+    ref: main
+    depth: 100
+    auth:
+      kind: githubApp
+      commitAuthor:
+        name: auto-dot-sh[bot]
+        email: 292914954+auto-dot-sh[bot]@users.noreply.github.com
+      capabilities:
+        contents: write
+        pullRequests: write
+        issues: none
+        checks: read
+        actions: read
+        workflows: write
+workingDirectory: /workspace/repo
+tools:
+  auto:
+    kind: local
+    implementation: auto
+  chat:
+    kind: local
+    implementation: chat
+    auth:
+      kind: connection
+      provider: slack
+      connection: slack
+      optional: true
+triggers:
+  - name: summons
+    event: chat.message.mentioned
+    connection: slack
+    optional: true
+    where:
+      $.chat.provider: slack
+      $.auto.authored: false
+    message: |
+      {{message.author.userName}} explicitly summoned the Principal-at-Large on Slack:
+
+      {{message.text}}
+
+      Channel: {{chat.channelId}}
+      Thread: {{chat.threadId}}
+
+      Treat this as one explicit summons. Prefer a written diagnosis or design,
+      but implement or take authorized external action when necessary or
+      directly requested. Report the result in this thread, immediately
+      unsubscribe from the thread, and archive. Do not retain continuity or
+      artifact ownership.
+    routing:
+      kind: spawn
+`
+            },
+            {
+              path: "fragments/environments/agent-runtime-prod-debug.yaml",
+              content: `# Source: https://www.auto.sh/api/v1/templates/%40auto/principal-at-large/1.0.0/fragments/environments/agent-runtime-prod-debug.yaml
+# Portable copy of the compatibility source's full hosted runtime. The optional
+# secret references preserve the live safety boundary: they grant nothing when
+# absent, and documented wrappers remain the only sanctioned secret consumers.
+harness: claude-code
+environment:
+  name: agent-runtime-prod-debug
+  labels:
+    purpose: agents
+  image:
+    kind: preset
+    name: node24
+  resources:
+    cpuCount: 2
+    memoryMB: 8192
+  steps:
+    - RUN apt-get update && apt-get install -y --no-install-recommends postgresql-client redis-tools jq file unzip && rm -rf /var/lib/apt/lists/*
+    - RUN npm install -g tsx vercel@54.14.5
+    - RUN curl -fsSL -o /tmp/temporal.tgz https://github.com/temporalio/cli/releases/download/v1.7.2/temporal_cli_1.7.2_linux_amd64.tar.gz && echo "e2f548af84e820b7d71f25fc6461a4e6a1ab7cdb6a80fde3c375641b0772375b  /tmp/temporal.tgz" | sha256sum -c - && tar -xzf /tmp/temporal.tgz -C /usr/local/bin temporal && rm /tmp/temporal.tgz
+    - RUN curl -fsSL -o /tmp/op.zip https://cache.agilebits.com/dist/1P/op2/pkg/v2.34.1/op_linux_amd64_v2.34.1.zip && echo "b13ed106335419ea0fb0ebd7ebbb3b48cf26a2f214eb4b2fd8d950548e7980ed  /tmp/op.zip" | sha256sum -c - && unzip -o /tmp/op.zip op -d /usr/local/bin && rm /tmp/op.zip
+    - RUN curl -fsSL -o /tmp/gh.tgz https://github.com/cli/cli/releases/download/v2.95.0/gh_2.95.0_linux_amd64.tar.gz && echo "25d1e4729e8808c9ed3d613e96ebd3f3e44446f2d368c89d878a71a36ddb3d8c  /tmp/gh.tgz" | sha256sum -c - && tar -xzf /tmp/gh.tgz --strip-components=2 -C /usr/local/bin gh_2.95.0_linux_amd64/bin/gh && rm /tmp/gh.tgz
+    - RUN curl -fsSL -o /tmp/pup.tgz https://github.com/datadog-labs/pup/releases/download/v1.2.1/pup_1.2.1_Linux_x86_64.tar.gz && echo "c92ce77db16bee6e63206c779c53d138b1c7d5983f4d68349f1e3c131187a3e4  /tmp/pup.tgz" | sha256sum -c - && tar -xzf /tmp/pup.tgz -C /usr/local/bin pup && rm /tmp/pup.tgz
+    - RUN apt-get update && apt-get install -y --no-install-recommends iptables iproute2 sudo && rm -rf /var/lib/apt/lists/*
+    - RUN curl -fsSL -o /tmp/docker.tgz https://download.docker.com/linux/static/stable/x86_64/docker-29.6.0.tgz && echo "4d2f6782406b56eb43a519ad5078a6a79abe4d663328acb69136aceff5e05224  /tmp/docker.tgz" | sha256sum -c - && tar -xzf /tmp/docker.tgz --strip-components=1 -C /usr/local/bin && rm /tmp/docker.tgz
+    - RUN curl -fsSL --create-dirs -o /usr/local/lib/docker/cli-plugins/docker-compose https://github.com/docker/compose/releases/download/v5.2.0/docker-compose-linux-x86_64 && echo "018f9612ecabc5f2d7aaa53d6f5f44453a87611e2d72c8ef84d7b1eca070e719  /usr/local/lib/docker/cli-plugins/docker-compose" | sha256sum -c - && chmod 0755 /usr/local/lib/docker/cli-plugins/docker-compose
+    - "RUN groupadd -f docker && usermod -aG docker user && echo 'user ALL=(root) NOPASSWD: /usr/local/bin/dockerd' > /etc/sudoers.d/docker-dockerd && chmod 0440 /etc/sudoers.d/docker-dockerd"
+    - RUN curl -fsSL -o /tmp/tailscale.tgz https://pkgs.tailscale.com/stable/tailscale_1.98.8_amd64.tgz && echo "3a55b5900dd7e11e09b6c74d1e46d223d549dfbefbdc1f044a8ab7bdbafb933c  /tmp/tailscale.tgz" | sha256sum -c - && tar -xzf /tmp/tailscale.tgz --strip-components=1 -C /usr/local/bin tailscale_1.98.8_amd64/tailscale tailscale_1.98.8_amd64/tailscaled && rm /tmp/tailscale.tgz
+env:
+  OP_SERVICE_ACCOUNT_TOKEN:
+    $secret: auto-prod-debug-op-token
+    optional: true
+  TS_AUTHKEY:
+    $secret: tailscale-authkey
+    optional: true
+`
+            }
+          ]
+        }
+      ],
       "@auto/reaper": [
         {
           version: "1.0.0",
@@ -51690,6 +51917,7 @@ var init_hardcoded = __esm({
       "@auto/onboarding": "Auto's house onboarding guidance, importable as a managed template.",
       "@auto/onboarding-quickstart": "The quickstart template repo's onboarding overlay: composes onto @auto/onboarding with the fork-flow walkthrough beats (site request bar, handoff loop, self-improvement demo).",
       "@auto/pr-review": "Auto's full pull-request reviewer agent, with optional Slack verdict reporting.",
+      "@auto/principal-at-large": "A summons-only principal for exceptional diagnosis, design, and resisted implementation work that advises first, acts only when needed, and retains no standing ownership.",
       "@auto/reaper": "A warn-first cleanup specialist for stale pull requests, stuck sessions, and zombie branches.",
       "@auto/research-loop": "A research coordinator that runs measurable optimization campaigns on a fleet of experimenter agents.",
       "@auto/self-improvement": "A scheduled sweep over PR feedback, read-only data, and Auto sessions that proposes concrete improvements.",
@@ -52019,6 +52247,48 @@ var init_catalog = __esm({
         optionalConnections: ["slack"],
         variables: ["repoFullName", "githubConnection"]
       },
+      {
+        id: "principal-at-large",
+        template: "@auto/principal-at-large",
+        files: [
+          {
+            subpath: "agents/principal-at-large.yaml",
+            agentFileName: "principal-at-large"
+          }
+        ],
+        displayName: "Principal-at-Large",
+        username: "principal-at-large",
+        avatarAsset: "principal-at-large.png",
+        category: "engineering",
+        oneLiner: "Summons-only principal for exceptional diagnosis, design, and resisted failures.",
+        description: "The indispensable engineer who\u2019s almost never actually in the office. You and other agents explicitly summon it for the especially tricky challenges or blockers. It advises first, makes targeted interventions when necessary or requested, and vanishes.",
+        harness: "claude-code",
+        model: "claude-fable-5",
+        reasoningEffort: "max",
+        triggers: [
+          {
+            kind: "agent",
+            title: "Exceptional agent summons",
+            description: "Another agent can explicitly summon it for one evidence-backed diagnosis, design decision, or resisted intervention.",
+            availability: "core"
+          },
+          {
+            kind: "slack",
+            title: "Explicit Slack summons",
+            description: "Auto can connect Slack so a human can invoke exactly one turn with @auto.principal-at-large; it answers, unsubscribes, and vanishes.",
+            availability: "optional",
+            connection: "slack"
+          }
+        ],
+        requires: [],
+        optionalConnections: ["slack"],
+        variables: ["repoFullName"],
+        trustNotes: [
+          "Exceptional summons-only capacity; never a routine implementation tier, fleet fallback, heartbeat worker, or broad dispatcher.",
+          "May write repository content and pull requests, but has no merge authority and never becomes the default PR owner.",
+          "Holds no standing bindings; a Slack summons releases its temporary thread claim immediately after the final answer."
+        ]
+      },
       {
         id: "junior-engineer",
         template: "@auto/engineering-tier",
@@ -56290,7 +56560,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.469",
+      version: "0.1.471",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autohq/cli",
-  "version": "0.1.469",
+  "version": "0.1.471",
   "license": "SEE LICENSE IN README.md",
   "publishConfig": {
     "access": "public"