@autohq/cli 0.1.487 → 0.1.489

package/dist/agent-bridge.js

@@ -30866,7 +30866,7 @@ Object.assign(lookup, {
 // package.json
 var package_default = {
   name: "@autohq/cli",
-  version: "0.1.487",
+  version: "0.1.489",
   license: "SEE LICENSE IN README.md",
   publishConfig: {
     access: "public"
@@ -31749,8 +31749,12 @@ var AccountLinkedIdentitiesResponseSchema = external_exports.object({
   availableProviders: external_exports.array(ProviderNameSchema),
   gitAttributionEnabled: external_exports.boolean()
 });
+var AccountLinkedIdentityReturnToSchema = external_exports.enum([
+  "settings_identities"
+]);
 var AccountLinkedIdentityLinkStartRequestSchema = external_exports.object({
-  provider: ProviderNameSchema.default("github")
+  provider: ProviderNameSchema.default("github"),
+  returnTo: AccountLinkedIdentityReturnToSchema.optional()
 });
 var AccountLinkedIdentityLinkStartResponseSchema = external_exports.discriminatedUnion("status", [
   external_exports.object({
@@ -33440,6 +33444,10 @@ var HARNESS_MODEL_RULES = {
         }
       },
       openrouter: {
+        "moonshotai/kimi-k3": {
+          defaultEffort: "high",
+          efforts: ["high", "xhigh"]
+        },
         "z-ai/glm-5.2": {
           defaultEffort: "high",
           efforts: ["high", "xhigh"]
@@ -35031,7 +35039,11 @@ var HeartbeatTickWorkflowInputSchema = external_exports.preprocess(
     organizationId: external_exports.string().trim().min(1),
     projectId: external_exports.string().trim().min(1).nullable(),
     agentResourceId: external_exports.string().trim().min(1),
+    agentName: external_exports.string().trim().min(1).max(256).nullable().default(null),
+    triggerId: external_exports.string().trim().min(1).max(512).nullable().default(null),
     triggerOrdinal: external_exports.number().int().nonnegative(),
+    cron: external_exports.string().trim().min(1).max(512).nullable().default(null),
+    timezone: external_exports.string().trim().min(1).max(128).nullable().default(null),
     event: external_exports.string().trim().min(1)
   }).strict()
 );
@@ -36020,6 +36032,111 @@ var LinearEventRequesterPayloadSchema = external_exports.object({
   })
 });
 
+// ../../packages/schemas/src/work-provenance.ts
+var StableKeySchema = external_exports.string().trim().min(1).max(512);
+var SnapshotNameSchema = external_exports.string().trim().min(1).max(256);
+var SourceIdSchema = external_exports.string().trim().min(1).max(512);
+var principalBase = {
+  stableKey: StableKeySchema,
+  displayName: SnapshotNameSchema
+};
+var schedulePrincipalSchema = external_exports.object({
+  kind: external_exports.literal("schedule"),
+  ...principalBase,
+  scheduleId: SourceIdSchema,
+  agentResourceId: SourceIdSchema,
+  agentName: SnapshotNameSchema,
+  triggerId: SourceIdSchema.nullable().default(null),
+  triggerName: SnapshotNameSchema.nullable().default(null),
+  triggerOrdinal: external_exports.number().int().nonnegative(),
+  cron: external_exports.string().trim().min(1).max(512).nullable().default(null),
+  timezone: external_exports.string().trim().min(1).max(128).nullable().default(null)
+});
+var webhookPrincipalSchema = external_exports.object({
+  kind: external_exports.literal("webhook"),
+  ...principalBase,
+  endpointId: SourceIdSchema,
+  endpointName: SnapshotNameSchema.nullable().default(null)
+});
+var serviceAccountPrincipalSchema = external_exports.object({
+  kind: external_exports.literal("service_account"),
+  ...principalBase,
+  serviceAccountId: SourceIdSchema
+});
+var providerIntegrationPrincipalSchema = external_exports.object({
+  kind: external_exports.literal("provider_integration"),
+  ...principalBase,
+  provider: ProviderNameSchema,
+  connectionId: SourceIdSchema.nullable().default(null)
+});
+var systemPrincipalSchema = external_exports.object({
+  kind: external_exports.literal("system"),
+  ...principalBase,
+  systemId: SourceIdSchema
+});
+var agentPrincipalSchema = external_exports.object({
+  kind: external_exports.literal("agent"),
+  ...principalBase,
+  agentResourceId: SourceIdSchema,
+  agentName: SnapshotNameSchema,
+  sessionId: SessionIdSchema2
+});
+var AutomationPrincipalSchema = external_exports.discriminatedUnion("kind", [
+  schedulePrincipalSchema,
+  webhookPrincipalSchema,
+  serviceAccountPrincipalSchema,
+  providerIntegrationPrincipalSchema,
+  systemPrincipalSchema,
+  agentPrincipalSchema
+]);
+var AutomationPrincipalAuthoringSchema = external_exports.discriminatedUnion("kind", [
+  schedulePrincipalSchema.strict(),
+  webhookPrincipalSchema.strict(),
+  serviceAccountPrincipalSchema.strict(),
+  providerIntegrationPrincipalSchema.strict(),
+  systemPrincipalSchema.strict(),
+  agentPrincipalSchema.strict()
+]);
+var scheduleCauseSchema = external_exports.object({
+  kind: external_exports.literal("schedule"),
+  sourceEventId: SourceIdSchema,
+  scheduledAt: external_exports.string().datetime()
+});
+var childSessionCauseSchema = external_exports.object({
+  kind: external_exports.literal("child_session"),
+  sourceSessionId: SessionIdSchema2
+});
+var githubArtifactCauseSchema = external_exports.object({
+  kind: external_exports.literal("github_artifact"),
+  sourceEventId: SourceIdSchema,
+  sourceSessionId: SessionIdSchema2,
+  sourceBindingId: SourceIdSchema,
+  sourceArtifactAttributionId: SourceIdSchema
+});
+var WorkProvenanceCauseSchema = external_exports.discriminatedUnion("kind", [
+  scheduleCauseSchema,
+  childSessionCauseSchema,
+  githubArtifactCauseSchema
+]);
+var WorkProvenanceCauseAuthoringSchema = external_exports.discriminatedUnion("kind", [
+  scheduleCauseSchema.strict(),
+  childSessionCauseSchema.strict(),
+  githubArtifactCauseSchema.strict()
+]);
+var WorkProvenanceFields = {
+  version: external_exports.literal(1),
+  root: AutomationPrincipalSchema,
+  actor: AutomationPrincipalSchema,
+  cause: WorkProvenanceCauseSchema
+};
+var WorkProvenanceSchema = external_exports.object(WorkProvenanceFields);
+var WorkProvenanceAuthoringSchema = external_exports.object({
+  version: external_exports.literal(1),
+  root: AutomationPrincipalAuthoringSchema,
+  actor: AutomationPrincipalAuthoringSchema,
+  cause: WorkProvenanceCauseAuthoringSchema
+}).strict();
+
 // ../../packages/schemas/src/session-handoff.ts
 var SESSION_ARCHIVE_HANDOFF_MAX_LENGTH = 2e4;
 var SessionArchiveHandoffSchema = external_exports.string().trim().min(1).max(SESSION_ARCHIVE_HANDOFF_MAX_LENGTH);
@@ -36548,6 +36665,9 @@ var SessionRecordSchema = external_exports.object({
   // Defaulted, not just nullable: sessions persisted before requester shipped
   // lack the key, and replay-path parsing must keep accepting them.
   requester: RequesterSchema.nullable().default(null),
+  // Trusted non-human origin/actor. Defaulted for legacy session.upsert
+  // payloads persisted before work provenance shipped.
+  workProvenance: WorkProvenanceSchema.nullable().default(null),
   // Defaulted for session.upsert payloads persisted before attached prompts.
   attachedUserPrompt: external_exports.string().nullable().default(null).optional(),
   triggerMessageContext: external_exports.string().nullable().default(null).optional(),
@@ -36655,6 +36775,7 @@ var SessionListItemSchema = external_exports.object({
   // than a parallel projection — it is already compact and is the one source of
   // truth the requester chip and identity service read.
   requester: RequesterSchema.nullable().optional(),
+  workProvenance: WorkProvenanceSchema.nullable().optional(),
   createdAt: external_exports.string().datetime(),
   updatedAt: external_exports.string().datetime(),
   archivedAt: external_exports.string().datetime().nullable(),
@@ -37747,6 +37868,8 @@ var RunSummarySchema = external_exports.object({
     workflowId: external_exports.string(),
     /** The human on whose behalf the session's work runs, with provenance. */
     requester: RequesterSchema.nullable().default(null),
+    /** Trusted non-human root and immediate automation actor, when present. */
+    workProvenance: WorkProvenanceSchema.nullable().default(null),
     createdAt: external_exports.string().datetime(),
     startedAt: external_exports.string().datetime().nullable(),
     finishedAt: external_exports.string().datetime().nullable(),

package/dist/index.js

@@ -15355,7 +15355,7 @@ var init_provider_grants = __esm({
 });
 
 // ../../packages/schemas/src/account.ts
-var AccountDeleteRequestSchema, AccountDeleteOrganizationSchema, AccountDeleteDeletedOrganizationSchema, AccountDeleteResponseSchema, AccountLinkedIdentityVerificationSchema, AccountLinkedIdentitySchema, AccountLinkedIdentitiesResponseSchema, AccountLinkedIdentityLinkStartRequestSchema, AccountLinkedIdentityLinkStartResponseSchema, AccountLinkedIdentityUnlinkResponseSchema, AccountAttributionPreferenceUpdateRequestSchema, AccountAttributionPreferenceResponseSchema;
+var AccountDeleteRequestSchema, AccountDeleteOrganizationSchema, AccountDeleteDeletedOrganizationSchema, AccountDeleteResponseSchema, AccountLinkedIdentityVerificationSchema, AccountLinkedIdentitySchema, AccountLinkedIdentitiesResponseSchema, AccountLinkedIdentityReturnToSchema, AccountLinkedIdentityLinkStartRequestSchema, AccountLinkedIdentityLinkStartResponseSchema, AccountLinkedIdentityUnlinkResponseSchema, AccountAttributionPreferenceUpdateRequestSchema, AccountAttributionPreferenceResponseSchema;
 var init_account = __esm({
   "../../packages/schemas/src/account.ts"() {
     "use strict";
@@ -15405,8 +15405,12 @@ var init_account = __esm({
       availableProviders: external_exports.array(ProviderNameSchema),
       gitAttributionEnabled: external_exports.boolean()
     });
+    AccountLinkedIdentityReturnToSchema = external_exports.enum([
+      "settings_identities"
+    ]);
     AccountLinkedIdentityLinkStartRequestSchema = external_exports.object({
-      provider: ProviderNameSchema.default("github")
+      provider: ProviderNameSchema.default("github"),
+      returnTo: AccountLinkedIdentityReturnToSchema.optional()
     });
     AccountLinkedIdentityLinkStartResponseSchema = external_exports.discriminatedUnion("status", [
       external_exports.object({
@@ -17461,6 +17465,10 @@ var init_model_selection = __esm({
             }
           },
           openrouter: {
+            "moonshotai/kimi-k3": {
+              defaultEffort: "high",
+              efforts: ["high", "xhigh"]
+            },
             "z-ai/glm-5.2": {
               defaultEffort: "high",
               efforts: ["high", "xhigh"]
@@ -18980,7 +18988,11 @@ var init_trigger_router = __esm({
         organizationId: external_exports.string().trim().min(1),
         projectId: external_exports.string().trim().min(1).nullable(),
         agentResourceId: external_exports.string().trim().min(1),
+        agentName: external_exports.string().trim().min(1).max(256).nullable().default(null),
+        triggerId: external_exports.string().trim().min(1).max(512).nullable().default(null),
         triggerOrdinal: external_exports.number().int().nonnegative(),
+        cron: external_exports.string().trim().min(1).max(512).nullable().default(null),
+        timezone: external_exports.string().trim().min(1).max(128).nullable().default(null),
         event: external_exports.string().trim().min(1)
       }).strict()
     );
@@ -20059,6 +20071,120 @@ var init_requester = __esm({
   }
 });
 
+// ../../packages/schemas/src/work-provenance.ts
+var StableKeySchema, SnapshotNameSchema, SourceIdSchema, principalBase, schedulePrincipalSchema, webhookPrincipalSchema, serviceAccountPrincipalSchema, providerIntegrationPrincipalSchema, systemPrincipalSchema, agentPrincipalSchema, AutomationPrincipalSchema, AutomationPrincipalAuthoringSchema, scheduleCauseSchema, childSessionCauseSchema, githubArtifactCauseSchema, WorkProvenanceCauseSchema, WorkProvenanceCauseAuthoringSchema, WorkProvenanceFields, WorkProvenanceSchema, WorkProvenanceAuthoringSchema;
+var init_work_provenance = __esm({
+  "../../packages/schemas/src/work-provenance.ts"() {
+    "use strict";
+    init_zod();
+    init_ids();
+    init_provider_grants();
+    StableKeySchema = external_exports.string().trim().min(1).max(512);
+    SnapshotNameSchema = external_exports.string().trim().min(1).max(256);
+    SourceIdSchema = external_exports.string().trim().min(1).max(512);
+    principalBase = {
+      stableKey: StableKeySchema,
+      displayName: SnapshotNameSchema
+    };
+    schedulePrincipalSchema = external_exports.object({
+      kind: external_exports.literal("schedule"),
+      ...principalBase,
+      scheduleId: SourceIdSchema,
+      agentResourceId: SourceIdSchema,
+      agentName: SnapshotNameSchema,
+      triggerId: SourceIdSchema.nullable().default(null),
+      triggerName: SnapshotNameSchema.nullable().default(null),
+      triggerOrdinal: external_exports.number().int().nonnegative(),
+      cron: external_exports.string().trim().min(1).max(512).nullable().default(null),
+      timezone: external_exports.string().trim().min(1).max(128).nullable().default(null)
+    });
+    webhookPrincipalSchema = external_exports.object({
+      kind: external_exports.literal("webhook"),
+      ...principalBase,
+      endpointId: SourceIdSchema,
+      endpointName: SnapshotNameSchema.nullable().default(null)
+    });
+    serviceAccountPrincipalSchema = external_exports.object({
+      kind: external_exports.literal("service_account"),
+      ...principalBase,
+      serviceAccountId: SourceIdSchema
+    });
+    providerIntegrationPrincipalSchema = external_exports.object({
+      kind: external_exports.literal("provider_integration"),
+      ...principalBase,
+      provider: ProviderNameSchema,
+      connectionId: SourceIdSchema.nullable().default(null)
+    });
+    systemPrincipalSchema = external_exports.object({
+      kind: external_exports.literal("system"),
+      ...principalBase,
+      systemId: SourceIdSchema
+    });
+    agentPrincipalSchema = external_exports.object({
+      kind: external_exports.literal("agent"),
+      ...principalBase,
+      agentResourceId: SourceIdSchema,
+      agentName: SnapshotNameSchema,
+      sessionId: SessionIdSchema
+    });
+    AutomationPrincipalSchema = external_exports.discriminatedUnion("kind", [
+      schedulePrincipalSchema,
+      webhookPrincipalSchema,
+      serviceAccountPrincipalSchema,
+      providerIntegrationPrincipalSchema,
+      systemPrincipalSchema,
+      agentPrincipalSchema
+    ]);
+    AutomationPrincipalAuthoringSchema = external_exports.discriminatedUnion("kind", [
+      schedulePrincipalSchema.strict(),
+      webhookPrincipalSchema.strict(),
+      serviceAccountPrincipalSchema.strict(),
+      providerIntegrationPrincipalSchema.strict(),
+      systemPrincipalSchema.strict(),
+      agentPrincipalSchema.strict()
+    ]);
+    scheduleCauseSchema = external_exports.object({
+      kind: external_exports.literal("schedule"),
+      sourceEventId: SourceIdSchema,
+      scheduledAt: external_exports.string().datetime()
+    });
+    childSessionCauseSchema = external_exports.object({
+      kind: external_exports.literal("child_session"),
+      sourceSessionId: SessionIdSchema
+    });
+    githubArtifactCauseSchema = external_exports.object({
+      kind: external_exports.literal("github_artifact"),
+      sourceEventId: SourceIdSchema,
+      sourceSessionId: SessionIdSchema,
+      sourceBindingId: SourceIdSchema,
+      sourceArtifactAttributionId: SourceIdSchema
+    });
+    WorkProvenanceCauseSchema = external_exports.discriminatedUnion("kind", [
+      scheduleCauseSchema,
+      childSessionCauseSchema,
+      githubArtifactCauseSchema
+    ]);
+    WorkProvenanceCauseAuthoringSchema = external_exports.discriminatedUnion("kind", [
+      scheduleCauseSchema.strict(),
+      childSessionCauseSchema.strict(),
+      githubArtifactCauseSchema.strict()
+    ]);
+    WorkProvenanceFields = {
+      version: external_exports.literal(1),
+      root: AutomationPrincipalSchema,
+      actor: AutomationPrincipalSchema,
+      cause: WorkProvenanceCauseSchema
+    };
+    WorkProvenanceSchema = external_exports.object(WorkProvenanceFields);
+    WorkProvenanceAuthoringSchema = external_exports.object({
+      version: external_exports.literal(1),
+      root: AutomationPrincipalAuthoringSchema,
+      actor: AutomationPrincipalAuthoringSchema,
+      cause: WorkProvenanceCauseAuthoringSchema
+    }).strict();
+  }
+});
+
 // ../../packages/schemas/src/session-handoff.ts
 var SESSION_ARCHIVE_HANDOFF_MAX_LENGTH, SessionArchiveHandoffSchema;
 var init_session_handoff = __esm({
@@ -20529,6 +20655,7 @@ var init_sessions = __esm({
     init_model_selection();
     init_primitives();
     init_requester();
+    init_work_provenance();
     init_session_handoff();
     init_session_commands();
     init_session_uploads();
@@ -20646,6 +20773,9 @@ var init_sessions = __esm({
       // Defaulted, not just nullable: sessions persisted before requester shipped
       // lack the key, and replay-path parsing must keep accepting them.
       requester: RequesterSchema.nullable().default(null),
+      // Trusted non-human origin/actor. Defaulted for legacy session.upsert
+      // payloads persisted before work provenance shipped.
+      workProvenance: WorkProvenanceSchema.nullable().default(null),
       // Defaulted for session.upsert payloads persisted before attached prompts.
       attachedUserPrompt: external_exports.string().nullable().default(null).optional(),
       triggerMessageContext: external_exports.string().nullable().default(null).optional(),
@@ -20753,6 +20883,7 @@ var init_sessions = __esm({
       // than a parallel projection — it is already compact and is the one source of
       // truth the requester chip and identity service read.
       requester: RequesterSchema.nullable().optional(),
+      workProvenance: WorkProvenanceSchema.nullable().optional(),
       createdAt: external_exports.string().datetime(),
       updatedAt: external_exports.string().datetime(),
       archivedAt: external_exports.string().datetime().nullable(),
@@ -21906,6 +22037,7 @@ var init_session_introspection = __esm({
     init_runtime_restart_diagnostics();
     init_session_bindings();
     init_sessions();
+    init_work_provenance();
     TruncatedValueSchema = external_exports.object({
       truncated: external_exports.literal(true),
       truncatedPreview: external_exports.string(),
@@ -22066,6 +22198,8 @@ var init_session_introspection = __esm({
         workflowId: external_exports.string(),
         /** The human on whose behalf the session's work runs, with provenance. */
         requester: RequesterSchema.nullable().default(null),
+        /** Trusted non-human root and immediate automation actor, when present. */
+        workProvenance: WorkProvenanceSchema.nullable().default(null),
         createdAt: external_exports.string().datetime(),
         startedAt: external_exports.string().datetime().nullable(),
         finishedAt: external_exports.string().datetime().nullable(),
@@ -60150,6 +60284,7 @@ var init_src = __esm({
     init_url_slugs();
     init_usage();
     init_validation_diagnostics();
+    init_work_provenance();
   }
 });
 
@@ -62907,7 +63042,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.487",
+      version: "0.1.489",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autohq/cli",
-  "version": "0.1.487",
+  "version": "0.1.489",
   "license": "SEE LICENSE IN README.md",
   "publishConfig": {
     "access": "public"