@autohq/cli 0.1.488 → 0.1.490

package/dist/agent-bridge.js

@@ -30866,7 +30866,7 @@ Object.assign(lookup, {
 // package.json
 var package_default = {
   name: "@autohq/cli",
-  version: "0.1.488",
+  version: "0.1.490",
   license: "SEE LICENSE IN README.md",
   publishConfig: {
     access: "public"
@@ -31749,8 +31749,12 @@ var AccountLinkedIdentitiesResponseSchema = external_exports.object({
   availableProviders: external_exports.array(ProviderNameSchema),
   gitAttributionEnabled: external_exports.boolean()
 });
+var AccountLinkedIdentityReturnToSchema = external_exports.enum([
+  "settings_identities"
+]);
 var AccountLinkedIdentityLinkStartRequestSchema = external_exports.object({
-  provider: ProviderNameSchema.default("github")
+  provider: ProviderNameSchema.default("github"),
+  returnTo: AccountLinkedIdentityReturnToSchema.optional()
 });
 var AccountLinkedIdentityLinkStartResponseSchema = external_exports.discriminatedUnion("status", [
   external_exports.object({
@@ -34518,6 +34522,111 @@ var AUTO_BIND_LEGAL_TARGETS = {
   onMention: /* @__PURE__ */ new Set(["slack.thread"])
 };
 
+// ../../packages/schemas/src/work-provenance.ts
+var StableKeySchema = external_exports.string().trim().min(1).max(512);
+var SnapshotNameSchema = external_exports.string().trim().min(1).max(256);
+var SourceIdSchema = external_exports.string().trim().min(1).max(512);
+var principalBase = {
+  stableKey: StableKeySchema,
+  displayName: SnapshotNameSchema
+};
+var schedulePrincipalSchema = external_exports.object({
+  kind: external_exports.literal("schedule"),
+  ...principalBase,
+  scheduleId: SourceIdSchema,
+  agentResourceId: SourceIdSchema,
+  agentName: SnapshotNameSchema,
+  triggerId: SourceIdSchema.nullable().default(null),
+  triggerName: SnapshotNameSchema.nullable().default(null),
+  triggerOrdinal: external_exports.number().int().nonnegative(),
+  cron: external_exports.string().trim().min(1).max(512).nullable().default(null),
+  timezone: external_exports.string().trim().min(1).max(128).nullable().default(null)
+});
+var webhookPrincipalSchema = external_exports.object({
+  kind: external_exports.literal("webhook"),
+  ...principalBase,
+  endpointId: SourceIdSchema,
+  endpointName: SnapshotNameSchema.nullable().default(null)
+});
+var serviceAccountPrincipalSchema = external_exports.object({
+  kind: external_exports.literal("service_account"),
+  ...principalBase,
+  serviceAccountId: SourceIdSchema
+});
+var providerIntegrationPrincipalSchema = external_exports.object({
+  kind: external_exports.literal("provider_integration"),
+  ...principalBase,
+  provider: ProviderNameSchema,
+  connectionId: SourceIdSchema.nullable().default(null)
+});
+var systemPrincipalSchema = external_exports.object({
+  kind: external_exports.literal("system"),
+  ...principalBase,
+  systemId: SourceIdSchema
+});
+var agentPrincipalSchema = external_exports.object({
+  kind: external_exports.literal("agent"),
+  ...principalBase,
+  agentResourceId: SourceIdSchema,
+  agentName: SnapshotNameSchema,
+  sessionId: SessionIdSchema2
+});
+var AutomationPrincipalSchema = external_exports.discriminatedUnion("kind", [
+  schedulePrincipalSchema,
+  webhookPrincipalSchema,
+  serviceAccountPrincipalSchema,
+  providerIntegrationPrincipalSchema,
+  systemPrincipalSchema,
+  agentPrincipalSchema
+]);
+var AutomationPrincipalAuthoringSchema = external_exports.discriminatedUnion("kind", [
+  schedulePrincipalSchema.strict(),
+  webhookPrincipalSchema.strict(),
+  serviceAccountPrincipalSchema.strict(),
+  providerIntegrationPrincipalSchema.strict(),
+  systemPrincipalSchema.strict(),
+  agentPrincipalSchema.strict()
+]);
+var scheduleCauseSchema = external_exports.object({
+  kind: external_exports.literal("schedule"),
+  sourceEventId: SourceIdSchema,
+  scheduledAt: external_exports.string().datetime()
+});
+var childSessionCauseSchema = external_exports.object({
+  kind: external_exports.literal("child_session"),
+  sourceSessionId: SessionIdSchema2
+});
+var githubArtifactCauseSchema = external_exports.object({
+  kind: external_exports.literal("github_artifact"),
+  sourceEventId: SourceIdSchema,
+  sourceSessionId: SessionIdSchema2,
+  sourceBindingId: SourceIdSchema,
+  sourceArtifactAttributionId: SourceIdSchema
+});
+var WorkProvenanceCauseSchema = external_exports.discriminatedUnion("kind", [
+  scheduleCauseSchema,
+  childSessionCauseSchema,
+  githubArtifactCauseSchema
+]);
+var WorkProvenanceCauseAuthoringSchema = external_exports.discriminatedUnion("kind", [
+  scheduleCauseSchema.strict(),
+  childSessionCauseSchema.strict(),
+  githubArtifactCauseSchema.strict()
+]);
+var WorkProvenanceFields = {
+  version: external_exports.literal(1),
+  root: AutomationPrincipalSchema,
+  actor: AutomationPrincipalSchema,
+  cause: WorkProvenanceCauseSchema
+};
+var WorkProvenanceSchema = external_exports.object(WorkProvenanceFields);
+var WorkProvenanceAuthoringSchema = external_exports.object({
+  version: external_exports.literal(1),
+  root: AutomationPrincipalAuthoringSchema,
+  actor: AutomationPrincipalAuthoringSchema,
+  cause: WorkProvenanceCauseAuthoringSchema
+}).strict();
+
 // ../../packages/schemas/src/requester-spend.ts
 var ExactUsdSchema = external_exports.string().regex(
   /^(0|[1-9]\d*)(\.\d{1,10})?$/,
@@ -34541,6 +34650,8 @@ var RequesterSpendSourceSchema = external_exports.object({
   accountRef: external_exports.string().min(1).nullable(),
   displayName: external_exports.string().min(1).nullable(),
   avatarUrl: external_exports.string().url().nullable(),
+  automationActor: AutomationPrincipalSchema.nullable().optional(),
+  automationCauseKind: external_exports.enum(["schedule", "child_session", "github_artifact"]).nullable().optional(),
   totalUsd: ExactUsdSchema,
   dailyUsd: ExactUsdSchema,
   monthlyUsd: ExactUsdSchema
@@ -34565,6 +34676,7 @@ var RequesterSpendRowSchema = external_exports.object({
   requesterUserId: external_exports.string().min(1).nullable(),
   displayName: external_exports.string().min(1).nullable(),
   avatarUrl: external_exports.string().url().nullable(),
+  automationRoot: AutomationPrincipalSchema.nullable().optional(),
   totalUsd: ExactUsdSchema,
   daily: RequesterSpendPeriodSchema,
   monthly: RequesterSpendPeriodSchema,
@@ -35035,7 +35147,11 @@ var HeartbeatTickWorkflowInputSchema = external_exports.preprocess(
     organizationId: external_exports.string().trim().min(1),
     projectId: external_exports.string().trim().min(1).nullable(),
     agentResourceId: external_exports.string().trim().min(1),
+    agentName: external_exports.string().trim().min(1).max(256).nullable().default(null),
+    triggerId: external_exports.string().trim().min(1).max(512).nullable().default(null),
     triggerOrdinal: external_exports.number().int().nonnegative(),
+    cron: external_exports.string().trim().min(1).max(512).nullable().default(null),
+    timezone: external_exports.string().trim().min(1).max(128).nullable().default(null),
     event: external_exports.string().trim().min(1)
   }).strict()
 );
@@ -36552,6 +36668,9 @@ var SessionRecordSchema = external_exports.object({
   // Defaulted, not just nullable: sessions persisted before requester shipped
   // lack the key, and replay-path parsing must keep accepting them.
   requester: RequesterSchema.nullable().default(null),
+  // Trusted non-human origin/actor. Defaulted for legacy session.upsert
+  // payloads persisted before work provenance shipped.
+  workProvenance: WorkProvenanceSchema.nullable().default(null),
   // Defaulted for session.upsert payloads persisted before attached prompts.
   attachedUserPrompt: external_exports.string().nullable().default(null).optional(),
   triggerMessageContext: external_exports.string().nullable().default(null).optional(),
@@ -36659,6 +36778,7 @@ var SessionListItemSchema = external_exports.object({
   // than a parallel projection — it is already compact and is the one source of
   // truth the requester chip and identity service read.
   requester: RequesterSchema.nullable().optional(),
+  workProvenance: WorkProvenanceSchema.nullable().optional(),
   createdAt: external_exports.string().datetime(),
   updatedAt: external_exports.string().datetime(),
   archivedAt: external_exports.string().datetime().nullable(),
@@ -37751,6 +37871,8 @@ var RunSummarySchema = external_exports.object({
     workflowId: external_exports.string(),
     /** The human on whose behalf the session's work runs, with provenance. */
     requester: RequesterSchema.nullable().default(null),
+    /** Trusted non-human root and immediate automation actor, when present. */
+    workProvenance: WorkProvenanceSchema.nullable().default(null),
     createdAt: external_exports.string().datetime(),
     startedAt: external_exports.string().datetime().nullable(),
     finishedAt: external_exports.string().datetime().nullable(),

package/dist/index.js

@@ -15355,7 +15355,7 @@ var init_provider_grants = __esm({
 });
 
 // ../../packages/schemas/src/account.ts
-var AccountDeleteRequestSchema, AccountDeleteOrganizationSchema, AccountDeleteDeletedOrganizationSchema, AccountDeleteResponseSchema, AccountLinkedIdentityVerificationSchema, AccountLinkedIdentitySchema, AccountLinkedIdentitiesResponseSchema, AccountLinkedIdentityLinkStartRequestSchema, AccountLinkedIdentityLinkStartResponseSchema, AccountLinkedIdentityUnlinkResponseSchema, AccountAttributionPreferenceUpdateRequestSchema, AccountAttributionPreferenceResponseSchema;
+var AccountDeleteRequestSchema, AccountDeleteOrganizationSchema, AccountDeleteDeletedOrganizationSchema, AccountDeleteResponseSchema, AccountLinkedIdentityVerificationSchema, AccountLinkedIdentitySchema, AccountLinkedIdentitiesResponseSchema, AccountLinkedIdentityReturnToSchema, AccountLinkedIdentityLinkStartRequestSchema, AccountLinkedIdentityLinkStartResponseSchema, AccountLinkedIdentityUnlinkResponseSchema, AccountAttributionPreferenceUpdateRequestSchema, AccountAttributionPreferenceResponseSchema;
 var init_account = __esm({
   "../../packages/schemas/src/account.ts"() {
     "use strict";
@@ -15405,8 +15405,12 @@ var init_account = __esm({
       availableProviders: external_exports.array(ProviderNameSchema),
       gitAttributionEnabled: external_exports.boolean()
     });
+    AccountLinkedIdentityReturnToSchema = external_exports.enum([
+      "settings_identities"
+    ]);
     AccountLinkedIdentityLinkStartRequestSchema = external_exports.object({
-      provider: ProviderNameSchema.default("github")
+      provider: ProviderNameSchema.default("github"),
+      returnTo: AccountLinkedIdentityReturnToSchema.optional()
     });
     AccountLinkedIdentityLinkStartResponseSchema = external_exports.discriminatedUnion("status", [
       external_exports.object({
@@ -18411,12 +18415,127 @@ var init_session_bindings = __esm({
   }
 });
 
+// ../../packages/schemas/src/work-provenance.ts
+var StableKeySchema, SnapshotNameSchema, SourceIdSchema, principalBase, schedulePrincipalSchema, webhookPrincipalSchema, serviceAccountPrincipalSchema, providerIntegrationPrincipalSchema, systemPrincipalSchema, agentPrincipalSchema, AutomationPrincipalSchema, AutomationPrincipalAuthoringSchema, scheduleCauseSchema, childSessionCauseSchema, githubArtifactCauseSchema, WorkProvenanceCauseSchema, WorkProvenanceCauseAuthoringSchema, WorkProvenanceFields, WorkProvenanceSchema, WorkProvenanceAuthoringSchema;
+var init_work_provenance = __esm({
+  "../../packages/schemas/src/work-provenance.ts"() {
+    "use strict";
+    init_zod();
+    init_ids();
+    init_provider_grants();
+    StableKeySchema = external_exports.string().trim().min(1).max(512);
+    SnapshotNameSchema = external_exports.string().trim().min(1).max(256);
+    SourceIdSchema = external_exports.string().trim().min(1).max(512);
+    principalBase = {
+      stableKey: StableKeySchema,
+      displayName: SnapshotNameSchema
+    };
+    schedulePrincipalSchema = external_exports.object({
+      kind: external_exports.literal("schedule"),
+      ...principalBase,
+      scheduleId: SourceIdSchema,
+      agentResourceId: SourceIdSchema,
+      agentName: SnapshotNameSchema,
+      triggerId: SourceIdSchema.nullable().default(null),
+      triggerName: SnapshotNameSchema.nullable().default(null),
+      triggerOrdinal: external_exports.number().int().nonnegative(),
+      cron: external_exports.string().trim().min(1).max(512).nullable().default(null),
+      timezone: external_exports.string().trim().min(1).max(128).nullable().default(null)
+    });
+    webhookPrincipalSchema = external_exports.object({
+      kind: external_exports.literal("webhook"),
+      ...principalBase,
+      endpointId: SourceIdSchema,
+      endpointName: SnapshotNameSchema.nullable().default(null)
+    });
+    serviceAccountPrincipalSchema = external_exports.object({
+      kind: external_exports.literal("service_account"),
+      ...principalBase,
+      serviceAccountId: SourceIdSchema
+    });
+    providerIntegrationPrincipalSchema = external_exports.object({
+      kind: external_exports.literal("provider_integration"),
+      ...principalBase,
+      provider: ProviderNameSchema,
+      connectionId: SourceIdSchema.nullable().default(null)
+    });
+    systemPrincipalSchema = external_exports.object({
+      kind: external_exports.literal("system"),
+      ...principalBase,
+      systemId: SourceIdSchema
+    });
+    agentPrincipalSchema = external_exports.object({
+      kind: external_exports.literal("agent"),
+      ...principalBase,
+      agentResourceId: SourceIdSchema,
+      agentName: SnapshotNameSchema,
+      sessionId: SessionIdSchema
+    });
+    AutomationPrincipalSchema = external_exports.discriminatedUnion("kind", [
+      schedulePrincipalSchema,
+      webhookPrincipalSchema,
+      serviceAccountPrincipalSchema,
+      providerIntegrationPrincipalSchema,
+      systemPrincipalSchema,
+      agentPrincipalSchema
+    ]);
+    AutomationPrincipalAuthoringSchema = external_exports.discriminatedUnion("kind", [
+      schedulePrincipalSchema.strict(),
+      webhookPrincipalSchema.strict(),
+      serviceAccountPrincipalSchema.strict(),
+      providerIntegrationPrincipalSchema.strict(),
+      systemPrincipalSchema.strict(),
+      agentPrincipalSchema.strict()
+    ]);
+    scheduleCauseSchema = external_exports.object({
+      kind: external_exports.literal("schedule"),
+      sourceEventId: SourceIdSchema,
+      scheduledAt: external_exports.string().datetime()
+    });
+    childSessionCauseSchema = external_exports.object({
+      kind: external_exports.literal("child_session"),
+      sourceSessionId: SessionIdSchema
+    });
+    githubArtifactCauseSchema = external_exports.object({
+      kind: external_exports.literal("github_artifact"),
+      sourceEventId: SourceIdSchema,
+      sourceSessionId: SessionIdSchema,
+      sourceBindingId: SourceIdSchema,
+      sourceArtifactAttributionId: SourceIdSchema
+    });
+    WorkProvenanceCauseSchema = external_exports.discriminatedUnion("kind", [
+      scheduleCauseSchema,
+      childSessionCauseSchema,
+      githubArtifactCauseSchema
+    ]);
+    WorkProvenanceCauseAuthoringSchema = external_exports.discriminatedUnion("kind", [
+      scheduleCauseSchema.strict(),
+      childSessionCauseSchema.strict(),
+      githubArtifactCauseSchema.strict()
+    ]);
+    WorkProvenanceFields = {
+      version: external_exports.literal(1),
+      root: AutomationPrincipalSchema,
+      actor: AutomationPrincipalSchema,
+      cause: WorkProvenanceCauseSchema
+    };
+    WorkProvenanceSchema = external_exports.object(WorkProvenanceFields);
+    WorkProvenanceAuthoringSchema = external_exports.object({
+      version: external_exports.literal(1),
+      root: AutomationPrincipalAuthoringSchema,
+      actor: AutomationPrincipalAuthoringSchema,
+      cause: WorkProvenanceCauseAuthoringSchema
+    }).strict();
+  }
+});
+
 // ../../packages/schemas/src/requester-spend.ts
 var ExactUsdSchema, RequesterSpendOverrideInputSchema, RequesterSpendUpdateRequestSchema, RequesterSpendSourceSchema, RequesterSpendOverrideStateSchema, RequesterSpendPeriodSchema, RequesterSpendRowSchema, RequesterSpendListResponseSchema, RequesterSpendUpdateResponseSchema, REQUESTER_SPEND_ERROR_CODES, RequesterSpendErrorCodeSchema, RequesterSpendErrorResponseSchema;
 var init_requester_spend = __esm({
   "../../packages/schemas/src/requester-spend.ts"() {
     "use strict";
     init_zod();
+    init_work_provenance();
     ExactUsdSchema = external_exports.string().regex(
       /^(0|[1-9]\d*)(\.\d{1,10})?$/,
       "Expected an exact non-negative USD decimal"
@@ -18439,6 +18558,8 @@ var init_requester_spend = __esm({
       accountRef: external_exports.string().min(1).nullable(),
       displayName: external_exports.string().min(1).nullable(),
       avatarUrl: external_exports.string().url().nullable(),
+      automationActor: AutomationPrincipalSchema.nullable().optional(),
+      automationCauseKind: external_exports.enum(["schedule", "child_session", "github_artifact"]).nullable().optional(),
       totalUsd: ExactUsdSchema,
       dailyUsd: ExactUsdSchema,
       monthlyUsd: ExactUsdSchema
@@ -18463,6 +18584,7 @@ var init_requester_spend = __esm({
       requesterUserId: external_exports.string().min(1).nullable(),
       displayName: external_exports.string().min(1).nullable(),
       avatarUrl: external_exports.string().url().nullable(),
+      automationRoot: AutomationPrincipalSchema.nullable().optional(),
       totalUsd: ExactUsdSchema,
       daily: RequesterSpendPeriodSchema,
       monthly: RequesterSpendPeriodSchema,
@@ -18984,7 +19106,11 @@ var init_trigger_router = __esm({
         organizationId: external_exports.string().trim().min(1),
         projectId: external_exports.string().trim().min(1).nullable(),
         agentResourceId: external_exports.string().trim().min(1),
+        agentName: external_exports.string().trim().min(1).max(256).nullable().default(null),
+        triggerId: external_exports.string().trim().min(1).max(512).nullable().default(null),
         triggerOrdinal: external_exports.number().int().nonnegative(),
+        cron: external_exports.string().trim().min(1).max(512).nullable().default(null),
+        timezone: external_exports.string().trim().min(1).max(128).nullable().default(null),
         event: external_exports.string().trim().min(1)
       }).strict()
     );
@@ -20533,6 +20659,7 @@ var init_sessions = __esm({
     init_model_selection();
     init_primitives();
     init_requester();
+    init_work_provenance();
     init_session_handoff();
     init_session_commands();
     init_session_uploads();
@@ -20650,6 +20777,9 @@ var init_sessions = __esm({
       // Defaulted, not just nullable: sessions persisted before requester shipped
       // lack the key, and replay-path parsing must keep accepting them.
       requester: RequesterSchema.nullable().default(null),
+      // Trusted non-human origin/actor. Defaulted for legacy session.upsert
+      // payloads persisted before work provenance shipped.
+      workProvenance: WorkProvenanceSchema.nullable().default(null),
       // Defaulted for session.upsert payloads persisted before attached prompts.
       attachedUserPrompt: external_exports.string().nullable().default(null).optional(),
       triggerMessageContext: external_exports.string().nullable().default(null).optional(),
@@ -20757,6 +20887,7 @@ var init_sessions = __esm({
       // than a parallel projection — it is already compact and is the one source of
       // truth the requester chip and identity service read.
       requester: RequesterSchema.nullable().optional(),
+      workProvenance: WorkProvenanceSchema.nullable().optional(),
       createdAt: external_exports.string().datetime(),
       updatedAt: external_exports.string().datetime(),
       archivedAt: external_exports.string().datetime().nullable(),
@@ -21910,6 +22041,7 @@ var init_session_introspection = __esm({
     init_runtime_restart_diagnostics();
     init_session_bindings();
     init_sessions();
+    init_work_provenance();
     TruncatedValueSchema = external_exports.object({
       truncated: external_exports.literal(true),
       truncatedPreview: external_exports.string(),
@@ -22070,6 +22202,8 @@ var init_session_introspection = __esm({
         workflowId: external_exports.string(),
         /** The human on whose behalf the session's work runs, with provenance. */
         requester: RequesterSchema.nullable().default(null),
+        /** Trusted non-human root and immediate automation actor, when present. */
+        workProvenance: WorkProvenanceSchema.nullable().default(null),
         createdAt: external_exports.string().datetime(),
         startedAt: external_exports.string().datetime().nullable(),
         finishedAt: external_exports.string().datetime().nullable(),
@@ -60154,6 +60288,7 @@ var init_src = __esm({
     init_url_slugs();
     init_usage();
     init_validation_diagnostics();
+    init_work_provenance();
   }
 });
 
@@ -62911,7 +63046,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.488",
+      version: "0.1.490",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autohq/cli",
-  "version": "0.1.488",
+  "version": "0.1.490",
   "license": "SEE LICENSE IN README.md",
   "publishConfig": {
     "access": "public"