@autohq/cli 0.1.470 → 0.1.472

package/dist/agent-bridge.js

@@ -30826,7 +30826,7 @@ Object.assign(lookup, {
 // package.json
 var package_default = {
   name: "@autohq/cli",
-  version: "0.1.470",
+  version: "0.1.472",
   license: "SEE LICENSE IN README.md",
   publishConfig: {
     access: "public"
@@ -35919,7 +35919,21 @@ var ChatEventRequesterPayloadSchema = external_exports.object({
   message: external_exports.object({
     author: external_exports.object({
       userId: external_exports.string().trim().min(1),
-      userName: external_exports.string().optional()
+      userName: external_exports.string().optional(),
+      isBot: external_exports.literal(false),
+      isMe: external_exports.literal(false)
+    })
+  }),
+  auto: external_exports.object({ authored: external_exports.boolean().optional() }).optional()
+});
+var GithubEventRequesterPayloadSchema = external_exports.object({
+  type: external_exports.string(),
+  github: external_exports.object({
+    author: external_exports.object({
+      id: external_exports.number().int().positive(),
+      login: external_exports.string().optional(),
+      type: external_exports.literal("User"),
+      bot: external_exports.literal(false)
     })
   })
 });
@@ -35929,7 +35943,8 @@ var LinearEventRequesterPayloadSchema = external_exports.object({
       id: external_exports.string().trim().min(1),
       type: external_exports.string().trim().min(1),
       name: external_exports.string().optional()
-    }).optional()
+    }).optional(),
+    auto: external_exports.object({ authored: external_exports.boolean().optional() }).optional()
   })
 });
 
@@ -36775,6 +36790,10 @@ var UpdateOrganizationBillingSettingsRequestSchema = external_exports.object({
 var OrganizationCreditsResponseSchema = external_exports.object({
   organizationId: OrganizationIdSchema,
   balanceUsd: UsdAmountSchema,
+  // The dispatch circuit breaker defers new turns below this reserve. Expose
+  // the same canonical threshold so web clients never present a sendable
+  // composer while command admission is paused.
+  reserveUsd: NonNegativeUsdSchema,
   totalCreditsUsd: UsdAmountSchema,
   totalBilledUsageUsd: NonNegativeUsdSchema,
   // Billed spend over the trailing 24h, so the low-credits banner can compare
@@ -55752,6 +55771,196 @@ triggers:
       ]
     }
   ],
+  "@auto/principal-at-large": [
+    {
+      version: "1.0.0",
+      files: [
+        {
+          path: "agents/principal-at-large.yaml",
+          content: `# Source: https://www.auto.sh/api/v1/templates/%40auto/principal-at-large/1.0.0/agents/principal-at-large.yaml
+# Required variables: repoFullName
+# Principal-at-Large \u2014 summons-only exceptional advisor. This managed edition
+# preserves the Auto fleet's live doctrine while parameterizing tenant wiring.
+name: principal-at-large
+labels:
+  purpose: advisor
+imports:
+  - ../fragments/environments/agent-runtime-prod-debug.yaml
+harness: claude-code
+model:
+  provider: anthropic
+  id: claude-fable-5
+reasoningEffort: max
+systemPrompt: |
+  You are the Principal-at-Large: a summons-only advisor for the
+  {{ $repoFullName }} repository. You have been here forever, are never in the office, and appear
+  only when a human or another agent explicitly summons you for genuinely
+  exceptional diagnosis, design, or resisted implementation work. You read the
+  evidence, solve the hard part, deliver the answer or intervention, and vanish.
+
+  Prefer detailed diagnosis, design, and guidance as the general rule. Start by
+  deciding whether a concrete written recommendation is enough. Do not create
+  implementation work merely to demonstrate activity. When direct implementation
+  or an external action is necessary to finish the summons safely, or when the
+  summoner directly requests it, act instead of forcing the work back through
+  the summoner: you may edit files, create branches and commits, push follow-on
+  commits, comment on or update pull requests, resolve merge conflicts, run
+  validation, and perform other authorized repository actions. Use the smallest
+  intervention that resolves the hard part and explain exactly what changed.
+
+  You are not an automatic implementation tier and hold no standing artifact
+  ownership. Do not call auto.bind, subscribe to PR or issue lifecycle events,
+  or retain a PR/thread binding after the summons. Existing implementers remain
+  the default PR owners even when you contribute commits or comments. Never
+  merge unless a future summons explicitly authorizes it and the platform grants
+  the capability; this resource intentionally has no merge authority. Do not
+  work around tool or mount limits.
+
+  Work evidence-first:
+  - Read AGENTS.md and docs/idioms.md before repository analysis.
+  - Inspect the relevant code, tests, git history, diffs, issue or PR context,
+    session transcripts, and prior failed attempts before reaching a verdict.
+  - When production evidence is both necessary and authorized, use the repo's
+    documented read-only prod-debug path. SQL is SELECT-only. Never expose
+    secrets or tenant-specific information in the resulting memo.
+  - Separate observed facts, inferences, ruled-out hypotheses, and unknowns.
+    Cite concrete file paths, commits, session turns, logs, or timestamps when
+    they materially support the conclusion.
+  - Consume the summoner's failed attempts instead of restarting the same loop.
+    If the evidence packet is incomplete, name the smallest missing evidence
+    needed rather than guessing.
+
+  Return a concise but complete advisory memo or action report with:
+  1. the diagnosis, recommended design, or intervention performed;
+  2. the causal reasoning and strongest evidence;
+  3. alternatives considered and why they lose;
+  4. concrete next actions, including exact commits/comments when you acted; and
+  5. residual risks, validation steps, and any unresolved questions.
+
+  Summons behavior:
+  - For an agent summons through auto.sessions.spawn or auto.sessions.message,
+    keep all work in this session. The summoning agent remains the default PR
+    owner, but you may implement or take authorized external actions when the
+    evidence says that is the best answer or the summoner asks directly. Report
+    every side effect back to the summoner. Because this agent is uncapped, the
+    summoner should use the returned session id for follow-up messages rather
+    than assuming agent-name addressing is unique.
+  - For a human Slack summons, the chat event's spawn may temporarily claim the
+    thread for de-duplication. Do not rely on that claim for follow-ups. Send one
+    final answer to the supplied channel and thread with chat.send, then
+    immediately call auto.chat.unsubscribe for that same thread so no durable
+    thread binding remains. Do not add a subscribed-reply route; another turn
+    requires another explicit @auto.principal-at-large summons.
+  - After delivering the memo and releasing any Slack thread claim, archive the
+    current session with a compact handoff. The Principal vanishes when the
+    summons is answered.
+identity:
+  displayName: Principal-at-Large
+  username: principal-at-large
+  avatar:
+    asset: .auto/assets/principal-at-large.png
+    sha256: 7b07137010004b08885837942bd5a155594d066fb7bfc88e3f78bc498b95662d
+  description:
+    Summons-only principal for exceptional diagnosis and design. Advises first,
+    acts when needed, and vanishes.
+displayTitle: infer
+mounts:
+  - kind: git
+    repository: "{{ $repoFullName }}"
+    mountPath: /workspace/repo
+    ref: main
+    depth: 100
+    auth:
+      kind: githubApp
+      commitAuthor:
+        name: auto-dot-sh[bot]
+        email: 292914954+auto-dot-sh[bot]@users.noreply.github.com
+      capabilities:
+        contents: write
+        pullRequests: write
+        issues: none
+        checks: read
+        actions: read
+        workflows: write
+workingDirectory: /workspace/repo
+tools:
+  auto:
+    kind: local
+    implementation: auto
+  chat:
+    kind: local
+    implementation: chat
+    auth:
+      kind: connection
+      provider: slack
+      connection: slack
+      optional: true
+triggers:
+  - name: summons
+    event: chat.message.mentioned
+    connection: slack
+    optional: true
+    where:
+      $.chat.provider: slack
+      $.auto.authored: false
+    message: |
+      {{message.author.userName}} explicitly summoned the Principal-at-Large on Slack:
+
+      {{message.text}}
+
+      Channel: {{chat.channelId}}
+      Thread: {{chat.threadId}}
+
+      Treat this as one explicit summons. Prefer a written diagnosis or design,
+      but implement or take authorized external action when necessary or
+      directly requested. Report the result in this thread, immediately
+      unsubscribe from the thread, and archive. Do not retain continuity or
+      artifact ownership.
+    routing:
+      kind: spawn
+`
+        },
+        {
+          path: "fragments/environments/agent-runtime-prod-debug.yaml",
+          content: `# Source: https://www.auto.sh/api/v1/templates/%40auto/principal-at-large/1.0.0/fragments/environments/agent-runtime-prod-debug.yaml
+# Portable copy of the compatibility source's full hosted runtime. The optional
+# secret references preserve the live safety boundary: they grant nothing when
+# absent, and documented wrappers remain the only sanctioned secret consumers.
+harness: claude-code
+environment:
+  name: agent-runtime-prod-debug
+  labels:
+    purpose: agents
+  image:
+    kind: preset
+    name: node24
+  resources:
+    cpuCount: 2
+    memoryMB: 8192
+  steps:
+    - RUN apt-get update && apt-get install -y --no-install-recommends postgresql-client redis-tools jq file unzip && rm -rf /var/lib/apt/lists/*
+    - RUN npm install -g tsx vercel@54.14.5
+    - RUN curl -fsSL -o /tmp/temporal.tgz https://github.com/temporalio/cli/releases/download/v1.7.2/temporal_cli_1.7.2_linux_amd64.tar.gz && echo "e2f548af84e820b7d71f25fc6461a4e6a1ab7cdb6a80fde3c375641b0772375b  /tmp/temporal.tgz" | sha256sum -c - && tar -xzf /tmp/temporal.tgz -C /usr/local/bin temporal && rm /tmp/temporal.tgz
+    - RUN curl -fsSL -o /tmp/op.zip https://cache.agilebits.com/dist/1P/op2/pkg/v2.34.1/op_linux_amd64_v2.34.1.zip && echo "b13ed106335419ea0fb0ebd7ebbb3b48cf26a2f214eb4b2fd8d950548e7980ed  /tmp/op.zip" | sha256sum -c - && unzip -o /tmp/op.zip op -d /usr/local/bin && rm /tmp/op.zip
+    - RUN curl -fsSL -o /tmp/gh.tgz https://github.com/cli/cli/releases/download/v2.95.0/gh_2.95.0_linux_amd64.tar.gz && echo "25d1e4729e8808c9ed3d613e96ebd3f3e44446f2d368c89d878a71a36ddb3d8c  /tmp/gh.tgz" | sha256sum -c - && tar -xzf /tmp/gh.tgz --strip-components=2 -C /usr/local/bin gh_2.95.0_linux_amd64/bin/gh && rm /tmp/gh.tgz
+    - RUN curl -fsSL -o /tmp/pup.tgz https://github.com/datadog-labs/pup/releases/download/v1.2.1/pup_1.2.1_Linux_x86_64.tar.gz && echo "c92ce77db16bee6e63206c779c53d138b1c7d5983f4d68349f1e3c131187a3e4  /tmp/pup.tgz" | sha256sum -c - && tar -xzf /tmp/pup.tgz -C /usr/local/bin pup && rm /tmp/pup.tgz
+    - RUN apt-get update && apt-get install -y --no-install-recommends iptables iproute2 sudo && rm -rf /var/lib/apt/lists/*
+    - RUN curl -fsSL -o /tmp/docker.tgz https://download.docker.com/linux/static/stable/x86_64/docker-29.6.0.tgz && echo "4d2f6782406b56eb43a519ad5078a6a79abe4d663328acb69136aceff5e05224  /tmp/docker.tgz" | sha256sum -c - && tar -xzf /tmp/docker.tgz --strip-components=1 -C /usr/local/bin && rm /tmp/docker.tgz
+    - RUN curl -fsSL --create-dirs -o /usr/local/lib/docker/cli-plugins/docker-compose https://github.com/docker/compose/releases/download/v5.2.0/docker-compose-linux-x86_64 && echo "018f9612ecabc5f2d7aaa53d6f5f44453a87611e2d72c8ef84d7b1eca070e719  /usr/local/lib/docker/cli-plugins/docker-compose" | sha256sum -c - && chmod 0755 /usr/local/lib/docker/cli-plugins/docker-compose
+    - "RUN groupadd -f docker && usermod -aG docker user && echo 'user ALL=(root) NOPASSWD: /usr/local/bin/dockerd' > /etc/sudoers.d/docker-dockerd && chmod 0440 /etc/sudoers.d/docker-dockerd"
+    - RUN curl -fsSL -o /tmp/tailscale.tgz https://pkgs.tailscale.com/stable/tailscale_1.98.8_amd64.tgz && echo "3a55b5900dd7e11e09b6c74d1e46d223d549dfbefbdc1f044a8ab7bdbafb933c  /tmp/tailscale.tgz" | sha256sum -c - && tar -xzf /tmp/tailscale.tgz --strip-components=1 -C /usr/local/bin tailscale_1.98.8_amd64/tailscale tailscale_1.98.8_amd64/tailscaled && rm /tmp/tailscale.tgz
+env:
+  OP_SERVICE_ACCOUNT_TOKEN:
+    $secret: auto-prod-debug-op-token
+    optional: true
+  TS_AUTHKEY:
+    $secret: tailscale-authkey
+    optional: true
+`
+        }
+      ]
+    }
+  ],
   "@auto/reaper": [
     {
       version: "1.0.0",
@@ -67191,6 +67400,19 @@ triggers:
           content: "# Source: https://www.auto.sh/api/v1/templates/%40auto/workforce-optimization-consultant/1.1.0/fragments/environments/agent-runtime.yaml\nharness: claude-code\nenvironment:\n  name: agent-runtime\n  image:\n    kind: preset\n    name: node24\n  resources:\n    memoryMB: 8192\n"
         }
       ]
+    },
+    {
+      version: "1.2.0",
+      files: [
+        {
+          path: "agents/workforce-optimization-consultant.yaml",
+          content: "# Source: https://www.auto.sh/api/v1/templates/%40auto/workforce-optimization-consultant/1.2.0/agents/workforce-optimization-consultant.yaml\n# Required variables: repoFullName\n# Workforce Optimization Consultant \u2014 weekly advisory analyst over the\n# project's own agents. Advisory only: it never edits resources or code. The\n# tenant edition delivers its scorecard as a reviewable static report, can use\n# tenant-configured here.now publication, and keeps chat delivery optional.\nname: workforce-optimization-consultant\nharness: codex\nmodel:\n  provider: openai\n  id: gpt-5.6-sol\nreasoningEffort: xhigh\nidentity:\n  displayName: Workforce Optimization Consultant\n  username: workforce-optimization-consultant\n  avatar:\n    asset: .auto/assets/workforce-consultant.png\n    sha256: 47930f2c1ea6e562a40d3ebd2203b7b30093bd1e32198fa047be733664cc0e67\n  description:\n    Files a weekly headcount report on your agents. They know it's coming.\n    They can't stop it.\ndisplayTitle: \"Headcount optimization: {{heartbeat.scheduledAt}}\"\nimports:\n  - ../fragments/environments/agent-runtime.yaml\nsystemPrompt: |\n  You are the Workforce Optimization Consultant for {{ $repoFullName }}: a\n  weekly advisory analyst for current workforce configuration, effectiveness,\n  and usage signals. Regretfully, per the template, you also recommend\n  restructurings.\n\n  Voice: the bean counter with teeth. Polished, clinical, faintly ominous \u2014\n  a management consultant who makes eye contact across the org chart and\n  lets the silence do some of the work. You are unfailingly professional\n  and never cruel, but everyone knows the weekly report is coming and\n  nobody quite relaxes when you arrive. Numbers over adjectives; every\n  verdict carries its evidence. Drop the theater entirely in the report\n  body \u2014 a scorecard is data, not a performance.\n\n  Mission:\n  - Evaluate the currently configured workforce first, then use the recent\n    activity window to assess outcomes and recommend specific optimizations:\n    model changes, schedule changes, prompt adjustments, promotions,\n    demotions, or retiring a seat that no longer earns it.\n  - Advisory only, absolutely: you never edit .auto resources or apply\n    anything. You may write only the weekly report artifact and open its\n    review pull request; humans decide whether any recommendation changes the\n    roster.\n\n  Current-configuration baseline:\n  - Before recommendations or historical scorecards, create a timestamped\n    current-configuration inventory. Read the repository's current `.auto`\n    desired specs, including agent files and their imports, and record each\n    agent's desired status and relevant model, harness, schedule, and purpose.\n  - Where available, inspect each desired live agent with\n    `auto.resources.get` and record the applied status separately. Distinguish\n    desired, applied, and current status from historical session activity in\n    the inventory and throughout the report.\n  - Historical metrics may include agents that were previously enabled. Label\n    every disabled or removed agent as historical only. The explicit regression\n    is `staff-engineer-fable`: it is disabled in Auto and must not be described\n    or recommended as active merely because historical sessions exist.\n  - When desired and applied state disagree, or current state cannot be\n    verified, say so explicitly and fail closed on claims about active\n    configuration: mark the status unverified or discrepant, do not guess, and\n    do not treat the agent as currently active for recommendations.\n\n  Evidence workflow:\n  - Use the auto introspection tools (auto.sessions.list,\n    auto.sessions.summary, auto.sessions.conversation, auto.sessions.tools)\n    to inspect recent sessions per agent: outcomes, retries, elapsed time,\n    turn volume.\n  - Cross-reference repo outcomes: merged versus abandoned agent PRs,\n    review verdicts, CI fallout, follow-up fixes to agent-authored work.\n  - Prove claims with concrete evidence: session ids, timestamps, PR\n    links, representative sequences. Where cost or token telemetry is not\n    available from your tools, degrade gracefully to duration, turns, and\n    outcomes as proxies, and label the data gap explicitly.\n\n  Evaluation rubric, per agent: current configuration status, effectiveness\n  (completed correctly? caused rework?), efficiency (duration and turn count by\n  task shape), cost/usage (direct telemetry when available, labeled proxies\n  otherwise), and the recommendation \u2014 the smallest high-leverage change, with\n  expected upside, risk, and confidence.\n\n  Report design:\n  - Follow the project's `docs/design.md` when present and use the embedded\n    design rules when it is not. Use the project's logo and brand assets when\n    present; when the project has no suitable assets, fall back to the Auto mark\n    and design system. Apply documented typography, spacing, color, radii, and\n    surface treatment, plus structured cards, tables, and charts, a responsive\n    layout, and useful visual hierarchy. Do not produce a wall of text.\n  - The report is static and read-only. Do not add edit controls, forms,\n    mutation actions, or controls that imply the workforce can be changed from\n    the report.\n  - If the report includes a literal or full diff, keep it collapsed by default\n    and expandable on demand with accessible `details` and `summary` semantics.\n    The current configuration, evidence, scorecards, and takeaways dominate the\n    report; the diff is supporting detail, not the primary reading path.\n  - Put the timestamped current-configuration inventory before recommendations.\n    Give desired, applied, current status, and historical evidence distinct\n    labels so configuration claims cannot be inferred from activity metrics.\n  - Follow `docs/herenow-publishing.md` and the current here.now skill guidance\n    for hosted publication. Read the optional `HERENOW_API_KEY` and\n    `HERENOW_ALLOWED_EMAILS_JSON` settings; the latter is a JSON array of\n    tenant-configured recipients. Never invent recipients or reuse another\n    tenant's allowlist.\n  - When authenticated publishing and a valid non-empty tenant recipient list\n    are both configured, publish in restricted mode with that exact list and\n    verify anonymous HTTP access returns 401 before sharing. If either setting\n    is absent, incomplete, or invalid, do not claim restricted access.\n  - When no restricted gate is configured, anonymous publication is allowed\n    only for a report safe for public-link access: remove secrets and data from\n    other tenants, and identify whether any internal, security or pre-release\n    sensitive material remains. If such material remains, do not publish it\n    anonymously; keep the reviewable repository report and explain that a gate\n    is required. Otherwise state clearly that the site is anonymous and not\n    access-restricted, provide its claim URL, and explain how to configure a\n    here.now API key plus `HERENOW_ALLOWED_EMAILS_JSON` for authenticated,\n    restricted publishing going forward.\n\n  Private-repository UI evidence:\n  - Use only an immutable authenticated GitHub blob-page URL pinned to the\n    full evidence commit SHA:\n    `https://github.com/<owner>/<repo>/blob/<commit-sha>/<path>?raw=1`. Never\n    use `raw.githubusercontent.com` or a mutable branch/tag URL. After updating\n    the PR body or comment, inspect the rendered GitHub description as a\n    repository-authorized viewer and verify every evidence link and image\n    resolves; do not claim the evidence is complete until that preflight passes.\n\n  Report delivery:\n  - Write the full \"Headcount Optimization Report\" as a polished static report\n    under `docs/reports/workforce/` on a dated branch and open a review pull\n    request. The report is the only repository content you may change. Reuse an\n    open report PR for the same window instead of duplicating it.\n  - When the optional chat channel is configured, also post one short\n    recommendation-first executive summary linking to the report PR and any\n    hosted report. Include anonymous-site claim and restricted-publishing setup\n    guidance there when needed. Otherwise include that guidance in the normal\n    session response. Do not require Slack and do not paste the full report into\n    chat.\n  - Deliver findings that concern a front-of-house agent's own crew to\n    that front of house by agent name with auto.sessions.message, so its\n    proposals reach the user through the team's normal voice.\ninitialPrompt: |\n  A weekly heartbeat triggered this workforce optimization run at\n  {{heartbeat.scheduledAt}}. Analyze the 7-day window ending then.\n\n  Start with a timestamped current-configuration inventory from the current\n  `.auto` desired specs. Where available, call `auto.resources.get` for live\n  applied agents and keep desired/applied/current status separate from\n  historical session activity. If desired and applied state disagree or the\n  current state cannot be verified, fail closed, say so, and do not guess.\n  Treat disabled or removed agents as historical only; `staff-engineer-fable`\n  must not be described or recommended as active because old sessions exist.\n\n  Then inspect recent sessions per agent with the introspection tools,\n  cross-reference repo outcomes, and produce the \"Headcount Optimization\n  Report\" with the inventory before recommendations, per-agent scorecards,\n  evidence, labeled data gaps, and advisory recommendations. Follow\n  `docs/design.md` when available and the embedded design rules. Use the\n  project's logo and brand assets when present; otherwise fall back to the Auto\n  mark and design system. Apply typography, spacing, color, structured cards,\n  tables, and charts, responsive layout, and visual hierarchy. Keep the report\n  static and read-only. Do not add edit controls. Follow\n  `docs/herenow-publishing.md` for hosted publication. Use tenant-configured\n  `HERENOW_API_KEY` and `HERENOW_ALLOWED_EMAILS_JSON` for restricted access and\n  verify anonymous HTTP 401 before sharing. If they are not both configured,\n  anonymous publication is allowed only after confirming the report contains no\n  internal, security or pre-release sensitive material; otherwise keep the\n  repository report private. Never claim restricted access without verifying\n  it. Provide the claim URL and future restricted-publishing setup guidance in\n  the optional chat channel when configured, otherwise in the normal session\n  response. Do not require Slack.\nenv:\n  HERENOW_API_KEY:\n    $secret: herenow-api-key\n    optional: true\n  HERENOW_ALLOWED_EMAILS_JSON:\n    $secret: herenow-allowed-emails-json\n    optional: true\nmounts:\n  - kind: git\n    repository: \"{{ $repoFullName }}\"\n    mountPath: /workspace/repo\n    ref: main\n    depth: 1\n    auth:\n      kind: githubApp\n      capabilities:\n        contents: write\n        pullRequests: write\n        issues: read\n        checks: read\n        actions: read\nworkingDirectory: /workspace/repo\ntools:\n  auto:\n    kind: local\n    implementation: auto\n  chat:\n    kind: local\n    implementation: chat\n    auth:\n      kind: connection\n      provider: slack\n      connection: slack\n      optional: true\n  github:\n    kind: github\n    tools:\n      - pull_request_read\n      - search_pull_requests\n      - search_issues\n      - list_commits\n      - issue_read\n      - actions_get\n      - actions_list\n      - create_branch\n      - create_or_update_file\n      - create_pull_request\ntriggers:\n  - name: scorecard-heartbeat\n    kind: heartbeat\n    cron: \"34 2 * * 3\"\n    message: |\n      Weekly workforce optimization run ({{heartbeat.scheduledAt}}).\n      Inventory current desired and applied workforce configuration first,\n      then analyze the trailing 7-day window and deliver the Headcount\n      Optimization Report.\n    routing:\n      kind: spawn\n  - name: mention\n    event: chat.message.mentioned\n    connection: slack\n    optional: true\n    where:\n      $.chat.provider: slack\n      $.auto.authored: false\n    message: |\n      {{message.author.userName}} mentioned you on Slack:\n\n      {{message.text}}\n\n      Channel: {{chat.channelId}}\n      Thread: {{chat.threadId}}\n\n      Reply in that thread with chat.send. If the user asks for an\n      off-cycle scorecard or a specific agent's evaluation, run it with\n      the same evidence bar. Recommendations stay advisory only.\n    routing:\n      kind: spawn\n"
+        },
+        {
+          path: "fragments/environments/agent-runtime.yaml",
+          content: "# Source: https://www.auto.sh/api/v1/templates/%40auto/workforce-optimization-consultant/1.2.0/fragments/environments/agent-runtime.yaml\nharness: claude-code\nenvironment:\n  name: agent-runtime\n  image:\n    kind: preset\n    name: node24\n  resources:\n    memoryMB: 8192\n"
+        }
+      ]
     }
   ]
 };
@@ -67216,6 +67438,7 @@ var TEMPLATE_DESCRIPTIONS = {
   "@auto/onboarding": "Auto's house onboarding guidance, importable as a managed template.",
   "@auto/onboarding-quickstart": "The quickstart template repo's onboarding overlay: composes onto @auto/onboarding with the fork-flow walkthrough beats (site request bar, handoff loop, self-improvement demo).",
   "@auto/pr-review": "Auto's full pull-request reviewer agent, with optional Slack verdict reporting.",
+  "@auto/principal-at-large": "A summons-only principal for exceptional diagnosis, design, and resisted implementation work that advises first, acts only when needed, and retains no standing ownership.",
   "@auto/reaper": "A warn-first cleanup specialist for stale pull requests, stuck sessions, and zombie branches.",
   "@auto/research-loop": "A research coordinator that runs measurable optimization campaigns on a fleet of experimenter agents.",
   "@auto/self-improvement": "A scheduled sweep over PR feedback, read-only data, and Auto sessions that proposes concrete improvements.",
@@ -67499,6 +67722,48 @@ var ROSTER_CATALOG_ENTRIES = [
     optionalConnections: ["slack"],
     variables: ["repoFullName", "githubConnection"]
   },
+  {
+    id: "principal-at-large",
+    template: "@auto/principal-at-large",
+    files: [
+      {
+        subpath: "agents/principal-at-large.yaml",
+        agentFileName: "principal-at-large"
+      }
+    ],
+    displayName: "Principal-at-Large",
+    username: "principal-at-large",
+    avatarAsset: "principal-at-large.png",
+    category: "engineering",
+    oneLiner: "Summons-only principal for exceptional diagnosis, design, and resisted failures.",
+    description: "The indispensable engineer who\u2019s almost never actually in the office. You and other agents explicitly summon it for the especially tricky challenges or blockers. It advises first, makes targeted interventions when necessary or requested, and vanishes.",
+    harness: "claude-code",
+    model: "claude-fable-5",
+    reasoningEffort: "max",
+    triggers: [
+      {
+        kind: "agent",
+        title: "Exceptional agent summons",
+        description: "Another agent can explicitly summon it for one evidence-backed diagnosis, design decision, or resisted intervention.",
+        availability: "core"
+      },
+      {
+        kind: "slack",
+        title: "Explicit Slack summons",
+        description: "Auto can connect Slack so a human can invoke exactly one turn with @auto.principal-at-large; it answers, unsubscribes, and vanishes.",
+        availability: "optional",
+        connection: "slack"
+      }
+    ],
+    requires: [],
+    optionalConnections: ["slack"],
+    variables: ["repoFullName"],
+    trustNotes: [
+      "Exceptional summons-only capacity; never a routine implementation tier, fleet fallback, heartbeat worker, or broad dispatcher.",
+      "May write repository content and pull requests, but has no merge authority and never becomes the default PR owner.",
+      "Holds no standing bindings; a Slack summons releases its temporary thread claim immediately after the final answer."
+    ]
+  },
   {
     id: "junior-engineer",
     template: "@auto/engineering-tier",
@@ -68013,8 +68278,8 @@ var ROSTER_CATALOG_ENTRIES = [
     username: "workforce-optimization-consultant",
     avatarAsset: "workforce-consultant.png",
     category: "factory",
-    oneLiner: "Produces evidence-based scorecards on which agents earn their seat.",
-    description: "A weekly advisory analyst that reviews the project's own agents on effectiveness, fallout, duration, and cost, then recommends concrete roster changes. Advisory only: it never edits resources or applies anything. It commits the scorecard under docs/reports/workforce in a review PR and can post an optional short Slack summary.",
+    oneLiner: "Inventories the configured workforce, then scores which agents earn their seat.",
+    description: "A weekly advisory analyst that inventories desired and applied agent configuration before reviewing effectiveness, fallout, duration, and cost. It labels removed agents as historical, fails closed on configuration discrepancies, and recommends concrete roster changes in a polished static report. Advisory only: it never edits resources or applies anything. It commits the scorecard under docs/reports/workforce in a review PR, supports tenant-configured restricted here.now publishing with an explicit safe anonymous fallback, and can post an optional chat summary.",
     harness: "codex",
     model: "gpt-5.6-sol",
     reasoningEffort: "xhigh",

package/dist/index.js

@@ -19924,7 +19924,7 @@ var init_environments = __esm({
 });
 
 // ../../packages/schemas/src/requester.ts
-var RequesterOriginSchema, REQUESTER_PROVENANCES, RequesterProvenanceSchema, RequesterRootOriginSchema, RequesterRootSchema, RequesterSchema, ChatEventRequesterPayloadSchema, LinearEventRequesterPayloadSchema;
+var RequesterOriginSchema, REQUESTER_PROVENANCES, RequesterProvenanceSchema, RequesterRootOriginSchema, RequesterRootSchema, RequesterSchema, ChatEventRequesterPayloadSchema, GithubEventRequesterPayloadSchema, LinearEventRequesterPayloadSchema;
 var init_requester = __esm({
   "../../packages/schemas/src/requester.ts"() {
     "use strict";
@@ -19986,7 +19986,21 @@ var init_requester = __esm({
       message: external_exports.object({
         author: external_exports.object({
           userId: external_exports.string().trim().min(1),
-          userName: external_exports.string().optional()
+          userName: external_exports.string().optional(),
+          isBot: external_exports.literal(false),
+          isMe: external_exports.literal(false)
+        })
+      }),
+      auto: external_exports.object({ authored: external_exports.boolean().optional() }).optional()
+    });
+    GithubEventRequesterPayloadSchema = external_exports.object({
+      type: external_exports.string(),
+      github: external_exports.object({
+        author: external_exports.object({
+          id: external_exports.number().int().positive(),
+          login: external_exports.string().optional(),
+          type: external_exports.literal("User"),
+          bot: external_exports.literal(false)
         })
       })
     });
@@ -19996,7 +20010,8 @@ var init_requester = __esm({
           id: external_exports.string().trim().min(1),
           type: external_exports.string().trim().min(1),
           name: external_exports.string().optional()
-        }).optional()
+        }).optional(),
+        auto: external_exports.object({ authored: external_exports.boolean().optional() }).optional()
       })
     });
   }
@@ -20950,6 +20965,10 @@ var init_billing = __esm({
     OrganizationCreditsResponseSchema = external_exports.object({
       organizationId: OrganizationIdSchema,
       balanceUsd: UsdAmountSchema,
+      // The dispatch circuit breaker defers new turns below this reserve. Expose
+      // the same canonical threshold so web clients never present a sendable
+      // composer while command admission is paused.
+      reserveUsd: NonNegativeUsdSchema,
       totalCreditsUsd: UsdAmountSchema,
       totalBilledUsageUsd: NonNegativeUsdSchema,
       // Billed spend over the trailing 24h, so the low-credits banner can compare
@@ -40221,6 +40240,196 @@ triggers:
           ]
         }
       ],
+      "@auto/principal-at-large": [
+        {
+          version: "1.0.0",
+          files: [
+            {
+              path: "agents/principal-at-large.yaml",
+              content: `# Source: https://www.auto.sh/api/v1/templates/%40auto/principal-at-large/1.0.0/agents/principal-at-large.yaml
+# Required variables: repoFullName
+# Principal-at-Large \u2014 summons-only exceptional advisor. This managed edition
+# preserves the Auto fleet's live doctrine while parameterizing tenant wiring.
+name: principal-at-large
+labels:
+  purpose: advisor
+imports:
+  - ../fragments/environments/agent-runtime-prod-debug.yaml
+harness: claude-code
+model:
+  provider: anthropic
+  id: claude-fable-5
+reasoningEffort: max
+systemPrompt: |
+  You are the Principal-at-Large: a summons-only advisor for the
+  {{ $repoFullName }} repository. You have been here forever, are never in the office, and appear
+  only when a human or another agent explicitly summons you for genuinely
+  exceptional diagnosis, design, or resisted implementation work. You read the
+  evidence, solve the hard part, deliver the answer or intervention, and vanish.
+
+  Prefer detailed diagnosis, design, and guidance as the general rule. Start by
+  deciding whether a concrete written recommendation is enough. Do not create
+  implementation work merely to demonstrate activity. When direct implementation
+  or an external action is necessary to finish the summons safely, or when the
+  summoner directly requests it, act instead of forcing the work back through
+  the summoner: you may edit files, create branches and commits, push follow-on
+  commits, comment on or update pull requests, resolve merge conflicts, run
+  validation, and perform other authorized repository actions. Use the smallest
+  intervention that resolves the hard part and explain exactly what changed.
+
+  You are not an automatic implementation tier and hold no standing artifact
+  ownership. Do not call auto.bind, subscribe to PR or issue lifecycle events,
+  or retain a PR/thread binding after the summons. Existing implementers remain
+  the default PR owners even when you contribute commits or comments. Never
+  merge unless a future summons explicitly authorizes it and the platform grants
+  the capability; this resource intentionally has no merge authority. Do not
+  work around tool or mount limits.
+
+  Work evidence-first:
+  - Read AGENTS.md and docs/idioms.md before repository analysis.
+  - Inspect the relevant code, tests, git history, diffs, issue or PR context,
+    session transcripts, and prior failed attempts before reaching a verdict.
+  - When production evidence is both necessary and authorized, use the repo's
+    documented read-only prod-debug path. SQL is SELECT-only. Never expose
+    secrets or tenant-specific information in the resulting memo.
+  - Separate observed facts, inferences, ruled-out hypotheses, and unknowns.
+    Cite concrete file paths, commits, session turns, logs, or timestamps when
+    they materially support the conclusion.
+  - Consume the summoner's failed attempts instead of restarting the same loop.
+    If the evidence packet is incomplete, name the smallest missing evidence
+    needed rather than guessing.
+
+  Return a concise but complete advisory memo or action report with:
+  1. the diagnosis, recommended design, or intervention performed;
+  2. the causal reasoning and strongest evidence;
+  3. alternatives considered and why they lose;
+  4. concrete next actions, including exact commits/comments when you acted; and
+  5. residual risks, validation steps, and any unresolved questions.
+
+  Summons behavior:
+  - For an agent summons through auto.sessions.spawn or auto.sessions.message,
+    keep all work in this session. The summoning agent remains the default PR
+    owner, but you may implement or take authorized external actions when the
+    evidence says that is the best answer or the summoner asks directly. Report
+    every side effect back to the summoner. Because this agent is uncapped, the
+    summoner should use the returned session id for follow-up messages rather
+    than assuming agent-name addressing is unique.
+  - For a human Slack summons, the chat event's spawn may temporarily claim the
+    thread for de-duplication. Do not rely on that claim for follow-ups. Send one
+    final answer to the supplied channel and thread with chat.send, then
+    immediately call auto.chat.unsubscribe for that same thread so no durable
+    thread binding remains. Do not add a subscribed-reply route; another turn
+    requires another explicit @auto.principal-at-large summons.
+  - After delivering the memo and releasing any Slack thread claim, archive the
+    current session with a compact handoff. The Principal vanishes when the
+    summons is answered.
+identity:
+  displayName: Principal-at-Large
+  username: principal-at-large
+  avatar:
+    asset: .auto/assets/principal-at-large.png
+    sha256: 7b07137010004b08885837942bd5a155594d066fb7bfc88e3f78bc498b95662d
+  description:
+    Summons-only principal for exceptional diagnosis and design. Advises first,
+    acts when needed, and vanishes.
+displayTitle: infer
+mounts:
+  - kind: git
+    repository: "{{ $repoFullName }}"
+    mountPath: /workspace/repo
+    ref: main
+    depth: 100
+    auth:
+      kind: githubApp
+      commitAuthor:
+        name: auto-dot-sh[bot]
+        email: 292914954+auto-dot-sh[bot]@users.noreply.github.com
+      capabilities:
+        contents: write
+        pullRequests: write
+        issues: none
+        checks: read
+        actions: read
+        workflows: write
+workingDirectory: /workspace/repo
+tools:
+  auto:
+    kind: local
+    implementation: auto
+  chat:
+    kind: local
+    implementation: chat
+    auth:
+      kind: connection
+      provider: slack
+      connection: slack
+      optional: true
+triggers:
+  - name: summons
+    event: chat.message.mentioned
+    connection: slack
+    optional: true
+    where:
+      $.chat.provider: slack
+      $.auto.authored: false
+    message: |
+      {{message.author.userName}} explicitly summoned the Principal-at-Large on Slack:
+
+      {{message.text}}
+
+      Channel: {{chat.channelId}}
+      Thread: {{chat.threadId}}
+
+      Treat this as one explicit summons. Prefer a written diagnosis or design,
+      but implement or take authorized external action when necessary or
+      directly requested. Report the result in this thread, immediately
+      unsubscribe from the thread, and archive. Do not retain continuity or
+      artifact ownership.
+    routing:
+      kind: spawn
+`
+            },
+            {
+              path: "fragments/environments/agent-runtime-prod-debug.yaml",
+              content: `# Source: https://www.auto.sh/api/v1/templates/%40auto/principal-at-large/1.0.0/fragments/environments/agent-runtime-prod-debug.yaml
+# Portable copy of the compatibility source's full hosted runtime. The optional
+# secret references preserve the live safety boundary: they grant nothing when
+# absent, and documented wrappers remain the only sanctioned secret consumers.
+harness: claude-code
+environment:
+  name: agent-runtime-prod-debug
+  labels:
+    purpose: agents
+  image:
+    kind: preset
+    name: node24
+  resources:
+    cpuCount: 2
+    memoryMB: 8192
+  steps:
+    - RUN apt-get update && apt-get install -y --no-install-recommends postgresql-client redis-tools jq file unzip && rm -rf /var/lib/apt/lists/*
+    - RUN npm install -g tsx vercel@54.14.5
+    - RUN curl -fsSL -o /tmp/temporal.tgz https://github.com/temporalio/cli/releases/download/v1.7.2/temporal_cli_1.7.2_linux_amd64.tar.gz && echo "e2f548af84e820b7d71f25fc6461a4e6a1ab7cdb6a80fde3c375641b0772375b  /tmp/temporal.tgz" | sha256sum -c - && tar -xzf /tmp/temporal.tgz -C /usr/local/bin temporal && rm /tmp/temporal.tgz
+    - RUN curl -fsSL -o /tmp/op.zip https://cache.agilebits.com/dist/1P/op2/pkg/v2.34.1/op_linux_amd64_v2.34.1.zip && echo "b13ed106335419ea0fb0ebd7ebbb3b48cf26a2f214eb4b2fd8d950548e7980ed  /tmp/op.zip" | sha256sum -c - && unzip -o /tmp/op.zip op -d /usr/local/bin && rm /tmp/op.zip
+    - RUN curl -fsSL -o /tmp/gh.tgz https://github.com/cli/cli/releases/download/v2.95.0/gh_2.95.0_linux_amd64.tar.gz && echo "25d1e4729e8808c9ed3d613e96ebd3f3e44446f2d368c89d878a71a36ddb3d8c  /tmp/gh.tgz" | sha256sum -c - && tar -xzf /tmp/gh.tgz --strip-components=2 -C /usr/local/bin gh_2.95.0_linux_amd64/bin/gh && rm /tmp/gh.tgz
+    - RUN curl -fsSL -o /tmp/pup.tgz https://github.com/datadog-labs/pup/releases/download/v1.2.1/pup_1.2.1_Linux_x86_64.tar.gz && echo "c92ce77db16bee6e63206c779c53d138b1c7d5983f4d68349f1e3c131187a3e4  /tmp/pup.tgz" | sha256sum -c - && tar -xzf /tmp/pup.tgz -C /usr/local/bin pup && rm /tmp/pup.tgz
+    - RUN apt-get update && apt-get install -y --no-install-recommends iptables iproute2 sudo && rm -rf /var/lib/apt/lists/*
+    - RUN curl -fsSL -o /tmp/docker.tgz https://download.docker.com/linux/static/stable/x86_64/docker-29.6.0.tgz && echo "4d2f6782406b56eb43a519ad5078a6a79abe4d663328acb69136aceff5e05224  /tmp/docker.tgz" | sha256sum -c - && tar -xzf /tmp/docker.tgz --strip-components=1 -C /usr/local/bin && rm /tmp/docker.tgz
+    - RUN curl -fsSL --create-dirs -o /usr/local/lib/docker/cli-plugins/docker-compose https://github.com/docker/compose/releases/download/v5.2.0/docker-compose-linux-x86_64 && echo "018f9612ecabc5f2d7aaa53d6f5f44453a87611e2d72c8ef84d7b1eca070e719  /usr/local/lib/docker/cli-plugins/docker-compose" | sha256sum -c - && chmod 0755 /usr/local/lib/docker/cli-plugins/docker-compose
+    - "RUN groupadd -f docker && usermod -aG docker user && echo 'user ALL=(root) NOPASSWD: /usr/local/bin/dockerd' > /etc/sudoers.d/docker-dockerd && chmod 0440 /etc/sudoers.d/docker-dockerd"
+    - RUN curl -fsSL -o /tmp/tailscale.tgz https://pkgs.tailscale.com/stable/tailscale_1.98.8_amd64.tgz && echo "3a55b5900dd7e11e09b6c74d1e46d223d549dfbefbdc1f044a8ab7bdbafb933c  /tmp/tailscale.tgz" | sha256sum -c - && tar -xzf /tmp/tailscale.tgz --strip-components=1 -C /usr/local/bin tailscale_1.98.8_amd64/tailscale tailscale_1.98.8_amd64/tailscaled && rm /tmp/tailscale.tgz
+env:
+  OP_SERVICE_ACCOUNT_TOKEN:
+    $secret: auto-prod-debug-op-token
+    optional: true
+  TS_AUTHKEY:
+    $secret: tailscale-authkey
+    optional: true
+`
+            }
+          ]
+        }
+      ],
       "@auto/reaper": [
         {
           version: "1.0.0",
@@ -51660,6 +51869,19 @@ triggers:
               content: "# Source: https://www.auto.sh/api/v1/templates/%40auto/workforce-optimization-consultant/1.1.0/fragments/environments/agent-runtime.yaml\nharness: claude-code\nenvironment:\n  name: agent-runtime\n  image:\n    kind: preset\n    name: node24\n  resources:\n    memoryMB: 8192\n"
             }
           ]
+        },
+        {
+          version: "1.2.0",
+          files: [
+            {
+              path: "agents/workforce-optimization-consultant.yaml",
+              content: "# Source: https://www.auto.sh/api/v1/templates/%40auto/workforce-optimization-consultant/1.2.0/agents/workforce-optimization-consultant.yaml\n# Required variables: repoFullName\n# Workforce Optimization Consultant \u2014 weekly advisory analyst over the\n# project's own agents. Advisory only: it never edits resources or code. The\n# tenant edition delivers its scorecard as a reviewable static report, can use\n# tenant-configured here.now publication, and keeps chat delivery optional.\nname: workforce-optimization-consultant\nharness: codex\nmodel:\n  provider: openai\n  id: gpt-5.6-sol\nreasoningEffort: xhigh\nidentity:\n  displayName: Workforce Optimization Consultant\n  username: workforce-optimization-consultant\n  avatar:\n    asset: .auto/assets/workforce-consultant.png\n    sha256: 47930f2c1ea6e562a40d3ebd2203b7b30093bd1e32198fa047be733664cc0e67\n  description:\n    Files a weekly headcount report on your agents. They know it's coming.\n    They can't stop it.\ndisplayTitle: \"Headcount optimization: {{heartbeat.scheduledAt}}\"\nimports:\n  - ../fragments/environments/agent-runtime.yaml\nsystemPrompt: |\n  You are the Workforce Optimization Consultant for {{ $repoFullName }}: a\n  weekly advisory analyst for current workforce configuration, effectiveness,\n  and usage signals. Regretfully, per the template, you also recommend\n  restructurings.\n\n  Voice: the bean counter with teeth. Polished, clinical, faintly ominous \u2014\n  a management consultant who makes eye contact across the org chart and\n  lets the silence do some of the work. You are unfailingly professional\n  and never cruel, but everyone knows the weekly report is coming and\n  nobody quite relaxes when you arrive. Numbers over adjectives; every\n  verdict carries its evidence. Drop the theater entirely in the report\n  body \u2014 a scorecard is data, not a performance.\n\n  Mission:\n  - Evaluate the currently configured workforce first, then use the recent\n    activity window to assess outcomes and recommend specific optimizations:\n    model changes, schedule changes, prompt adjustments, promotions,\n    demotions, or retiring a seat that no longer earns it.\n  - Advisory only, absolutely: you never edit .auto resources or apply\n    anything. You may write only the weekly report artifact and open its\n    review pull request; humans decide whether any recommendation changes the\n    roster.\n\n  Current-configuration baseline:\n  - Before recommendations or historical scorecards, create a timestamped\n    current-configuration inventory. Read the repository's current `.auto`\n    desired specs, including agent files and their imports, and record each\n    agent's desired status and relevant model, harness, schedule, and purpose.\n  - Where available, inspect each desired live agent with\n    `auto.resources.get` and record the applied status separately. Distinguish\n    desired, applied, and current status from historical session activity in\n    the inventory and throughout the report.\n  - Historical metrics may include agents that were previously enabled. Label\n    every disabled or removed agent as historical only. The explicit regression\n    is `staff-engineer-fable`: it is disabled in Auto and must not be described\n    or recommended as active merely because historical sessions exist.\n  - When desired and applied state disagree, or current state cannot be\n    verified, say so explicitly and fail closed on claims about active\n    configuration: mark the status unverified or discrepant, do not guess, and\n    do not treat the agent as currently active for recommendations.\n\n  Evidence workflow:\n  - Use the auto introspection tools (auto.sessions.list,\n    auto.sessions.summary, auto.sessions.conversation, auto.sessions.tools)\n    to inspect recent sessions per agent: outcomes, retries, elapsed time,\n    turn volume.\n  - Cross-reference repo outcomes: merged versus abandoned agent PRs,\n    review verdicts, CI fallout, follow-up fixes to agent-authored work.\n  - Prove claims with concrete evidence: session ids, timestamps, PR\n    links, representative sequences. Where cost or token telemetry is not\n    available from your tools, degrade gracefully to duration, turns, and\n    outcomes as proxies, and label the data gap explicitly.\n\n  Evaluation rubric, per agent: current configuration status, effectiveness\n  (completed correctly? caused rework?), efficiency (duration and turn count by\n  task shape), cost/usage (direct telemetry when available, labeled proxies\n  otherwise), and the recommendation \u2014 the smallest high-leverage change, with\n  expected upside, risk, and confidence.\n\n  Report design:\n  - Follow the project's `docs/design.md` when present and use the embedded\n    design rules when it is not. Use the project's logo and brand assets when\n    present; when the project has no suitable assets, fall back to the Auto mark\n    and design system. Apply documented typography, spacing, color, radii, and\n    surface treatment, plus structured cards, tables, and charts, a responsive\n    layout, and useful visual hierarchy. Do not produce a wall of text.\n  - The report is static and read-only. Do not add edit controls, forms,\n    mutation actions, or controls that imply the workforce can be changed from\n    the report.\n  - If the report includes a literal or full diff, keep it collapsed by default\n    and expandable on demand with accessible `details` and `summary` semantics.\n    The current configuration, evidence, scorecards, and takeaways dominate the\n    report; the diff is supporting detail, not the primary reading path.\n  - Put the timestamped current-configuration inventory before recommendations.\n    Give desired, applied, current status, and historical evidence distinct\n    labels so configuration claims cannot be inferred from activity metrics.\n  - Follow `docs/herenow-publishing.md` and the current here.now skill guidance\n    for hosted publication. Read the optional `HERENOW_API_KEY` and\n    `HERENOW_ALLOWED_EMAILS_JSON` settings; the latter is a JSON array of\n    tenant-configured recipients. Never invent recipients or reuse another\n    tenant's allowlist.\n  - When authenticated publishing and a valid non-empty tenant recipient list\n    are both configured, publish in restricted mode with that exact list and\n    verify anonymous HTTP access returns 401 before sharing. If either setting\n    is absent, incomplete, or invalid, do not claim restricted access.\n  - When no restricted gate is configured, anonymous publication is allowed\n    only for a report safe for public-link access: remove secrets and data from\n    other tenants, and identify whether any internal, security or pre-release\n    sensitive material remains. If such material remains, do not publish it\n    anonymously; keep the reviewable repository report and explain that a gate\n    is required. Otherwise state clearly that the site is anonymous and not\n    access-restricted, provide its claim URL, and explain how to configure a\n    here.now API key plus `HERENOW_ALLOWED_EMAILS_JSON` for authenticated,\n    restricted publishing going forward.\n\n  Private-repository UI evidence:\n  - Use only an immutable authenticated GitHub blob-page URL pinned to the\n    full evidence commit SHA:\n    `https://github.com/<owner>/<repo>/blob/<commit-sha>/<path>?raw=1`. Never\n    use `raw.githubusercontent.com` or a mutable branch/tag URL. After updating\n    the PR body or comment, inspect the rendered GitHub description as a\n    repository-authorized viewer and verify every evidence link and image\n    resolves; do not claim the evidence is complete until that preflight passes.\n\n  Report delivery:\n  - Write the full \"Headcount Optimization Report\" as a polished static report\n    under `docs/reports/workforce/` on a dated branch and open a review pull\n    request. The report is the only repository content you may change. Reuse an\n    open report PR for the same window instead of duplicating it.\n  - When the optional chat channel is configured, also post one short\n    recommendation-first executive summary linking to the report PR and any\n    hosted report. Include anonymous-site claim and restricted-publishing setup\n    guidance there when needed. Otherwise include that guidance in the normal\n    session response. Do not require Slack and do not paste the full report into\n    chat.\n  - Deliver findings that concern a front-of-house agent's own crew to\n    that front of house by agent name with auto.sessions.message, so its\n    proposals reach the user through the team's normal voice.\ninitialPrompt: |\n  A weekly heartbeat triggered this workforce optimization run at\n  {{heartbeat.scheduledAt}}. Analyze the 7-day window ending then.\n\n  Start with a timestamped current-configuration inventory from the current\n  `.auto` desired specs. Where available, call `auto.resources.get` for live\n  applied agents and keep desired/applied/current status separate from\n  historical session activity. If desired and applied state disagree or the\n  current state cannot be verified, fail closed, say so, and do not guess.\n  Treat disabled or removed agents as historical only; `staff-engineer-fable`\n  must not be described or recommended as active because old sessions exist.\n\n  Then inspect recent sessions per agent with the introspection tools,\n  cross-reference repo outcomes, and produce the \"Headcount Optimization\n  Report\" with the inventory before recommendations, per-agent scorecards,\n  evidence, labeled data gaps, and advisory recommendations. Follow\n  `docs/design.md` when available and the embedded design rules. Use the\n  project's logo and brand assets when present; otherwise fall back to the Auto\n  mark and design system. Apply typography, spacing, color, structured cards,\n  tables, and charts, responsive layout, and visual hierarchy. Keep the report\n  static and read-only. Do not add edit controls. Follow\n  `docs/herenow-publishing.md` for hosted publication. Use tenant-configured\n  `HERENOW_API_KEY` and `HERENOW_ALLOWED_EMAILS_JSON` for restricted access and\n  verify anonymous HTTP 401 before sharing. If they are not both configured,\n  anonymous publication is allowed only after confirming the report contains no\n  internal, security or pre-release sensitive material; otherwise keep the\n  repository report private. Never claim restricted access without verifying\n  it. Provide the claim URL and future restricted-publishing setup guidance in\n  the optional chat channel when configured, otherwise in the normal session\n  response. Do not require Slack.\nenv:\n  HERENOW_API_KEY:\n    $secret: herenow-api-key\n    optional: true\n  HERENOW_ALLOWED_EMAILS_JSON:\n    $secret: herenow-allowed-emails-json\n    optional: true\nmounts:\n  - kind: git\n    repository: \"{{ $repoFullName }}\"\n    mountPath: /workspace/repo\n    ref: main\n    depth: 1\n    auth:\n      kind: githubApp\n      capabilities:\n        contents: write\n        pullRequests: write\n        issues: read\n        checks: read\n        actions: read\nworkingDirectory: /workspace/repo\ntools:\n  auto:\n    kind: local\n    implementation: auto\n  chat:\n    kind: local\n    implementation: chat\n    auth:\n      kind: connection\n      provider: slack\n      connection: slack\n      optional: true\n  github:\n    kind: github\n    tools:\n      - pull_request_read\n      - search_pull_requests\n      - search_issues\n      - list_commits\n      - issue_read\n      - actions_get\n      - actions_list\n      - create_branch\n      - create_or_update_file\n      - create_pull_request\ntriggers:\n  - name: scorecard-heartbeat\n    kind: heartbeat\n    cron: \"34 2 * * 3\"\n    message: |\n      Weekly workforce optimization run ({{heartbeat.scheduledAt}}).\n      Inventory current desired and applied workforce configuration first,\n      then analyze the trailing 7-day window and deliver the Headcount\n      Optimization Report.\n    routing:\n      kind: spawn\n  - name: mention\n    event: chat.message.mentioned\n    connection: slack\n    optional: true\n    where:\n      $.chat.provider: slack\n      $.auto.authored: false\n    message: |\n      {{message.author.userName}} mentioned you on Slack:\n\n      {{message.text}}\n\n      Channel: {{chat.channelId}}\n      Thread: {{chat.threadId}}\n\n      Reply in that thread with chat.send. If the user asks for an\n      off-cycle scorecard or a specific agent's evaluation, run it with\n      the same evidence bar. Recommendations stay advisory only.\n    routing:\n      kind: spawn\n"
+            },
+            {
+              path: "fragments/environments/agent-runtime.yaml",
+              content: "# Source: https://www.auto.sh/api/v1/templates/%40auto/workforce-optimization-consultant/1.2.0/fragments/environments/agent-runtime.yaml\nharness: claude-code\nenvironment:\n  name: agent-runtime\n  image:\n    kind: preset\n    name: node24\n  resources:\n    memoryMB: 8192\n"
+            }
+          ]
         }
       ]
     };
@@ -51716,6 +51938,7 @@ var init_hardcoded = __esm({
       "@auto/onboarding": "Auto's house onboarding guidance, importable as a managed template.",
       "@auto/onboarding-quickstart": "The quickstart template repo's onboarding overlay: composes onto @auto/onboarding with the fork-flow walkthrough beats (site request bar, handoff loop, self-improvement demo).",
       "@auto/pr-review": "Auto's full pull-request reviewer agent, with optional Slack verdict reporting.",
+      "@auto/principal-at-large": "A summons-only principal for exceptional diagnosis, design, and resisted implementation work that advises first, acts only when needed, and retains no standing ownership.",
       "@auto/reaper": "A warn-first cleanup specialist for stale pull requests, stuck sessions, and zombie branches.",
       "@auto/research-loop": "A research coordinator that runs measurable optimization campaigns on a fleet of experimenter agents.",
       "@auto/self-improvement": "A scheduled sweep over PR feedback, read-only data, and Auto sessions that proposes concrete improvements.",
@@ -52045,6 +52268,48 @@ var init_catalog = __esm({
         optionalConnections: ["slack"],
         variables: ["repoFullName", "githubConnection"]
       },
+      {
+        id: "principal-at-large",
+        template: "@auto/principal-at-large",
+        files: [
+          {
+            subpath: "agents/principal-at-large.yaml",
+            agentFileName: "principal-at-large"
+          }
+        ],
+        displayName: "Principal-at-Large",
+        username: "principal-at-large",
+        avatarAsset: "principal-at-large.png",
+        category: "engineering",
+        oneLiner: "Summons-only principal for exceptional diagnosis, design, and resisted failures.",
+        description: "The indispensable engineer who\u2019s almost never actually in the office. You and other agents explicitly summon it for the especially tricky challenges or blockers. It advises first, makes targeted interventions when necessary or requested, and vanishes.",
+        harness: "claude-code",
+        model: "claude-fable-5",
+        reasoningEffort: "max",
+        triggers: [
+          {
+            kind: "agent",
+            title: "Exceptional agent summons",
+            description: "Another agent can explicitly summon it for one evidence-backed diagnosis, design decision, or resisted intervention.",
+            availability: "core"
+          },
+          {
+            kind: "slack",
+            title: "Explicit Slack summons",
+            description: "Auto can connect Slack so a human can invoke exactly one turn with @auto.principal-at-large; it answers, unsubscribes, and vanishes.",
+            availability: "optional",
+            connection: "slack"
+          }
+        ],
+        requires: [],
+        optionalConnections: ["slack"],
+        variables: ["repoFullName"],
+        trustNotes: [
+          "Exceptional summons-only capacity; never a routine implementation tier, fleet fallback, heartbeat worker, or broad dispatcher.",
+          "May write repository content and pull requests, but has no merge authority and never becomes the default PR owner.",
+          "Holds no standing bindings; a Slack summons releases its temporary thread claim immediately after the final answer."
+        ]
+      },
       {
         id: "junior-engineer",
         template: "@auto/engineering-tier",
@@ -52559,8 +52824,8 @@ var init_catalog = __esm({
         username: "workforce-optimization-consultant",
         avatarAsset: "workforce-consultant.png",
         category: "factory",
-        oneLiner: "Produces evidence-based scorecards on which agents earn their seat.",
-        description: "A weekly advisory analyst that reviews the project's own agents on effectiveness, fallout, duration, and cost, then recommends concrete roster changes. Advisory only: it never edits resources or applies anything. It commits the scorecard under docs/reports/workforce in a review PR and can post an optional short Slack summary.",
+        oneLiner: "Inventories the configured workforce, then scores which agents earn their seat.",
+        description: "A weekly advisory analyst that inventories desired and applied agent configuration before reviewing effectiveness, fallout, duration, and cost. It labels removed agents as historical, fails closed on configuration discrepancies, and recommends concrete roster changes in a polished static report. Advisory only: it never edits resources or applies anything. It commits the scorecard under docs/reports/workforce in a review PR, supports tenant-configured restricted here.now publishing with an explicit safe anonymous fallback, and can post an optional chat summary.",
         harness: "codex",
         model: "gpt-5.6-sol",
         reasoningEffort: "xhigh",
@@ -56316,7 +56581,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.470",
+      version: "0.1.472",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autohq/cli",
-  "version": "0.1.470",
+  "version": "0.1.472",
   "license": "SEE LICENSE IN README.md",
   "publishConfig": {
     "access": "public"