@autohq/cli 0.1.529 → 0.1.531

package/dist/agent-bridge.js

@@ -27058,6 +27058,7 @@ var RuntimeBridgeBootstrapEnvelopeSchema = external_exports.object({
   bridgeLeaseId: RuntimeBridgeLeaseIdSchema,
   bootstrap: RuntimeBridgeEncryptedBootstrapSchema
 });
+var RUNTIME_SESSION_COMMAND_HEADER_PROTOCOL_EPOCH = 1;
 var RuntimeBridgeBootstrapAckSchema = external_exports.object({
   status: external_exports.enum(["ready", "failed"]),
   error: external_exports.string().trim().min(1).optional(),
@@ -27067,6 +27068,9 @@ var RuntimeBridgeBootstrapAckSchema = external_exports.object({
   // actually live. Optional because runtimes older than the field predate
   // reporting it; the bridge logs those as "unknown" instead of failing.
   cliVersion: external_exports.string().trim().min(1).optional(),
+  // Runtime protocol epoch for exact causal command-header forwarding on
+  // agent-facing MCP requests. Optional for compatibility with older bridges.
+  sessionCommandHeaderProtocolEpoch: external_exports.number().int().positive().optional(),
   // Top-level bootstrap plaintext fields the runtime's tolerant parse
   // stripped because its schema does not know them yet (worker-ahead skew).
   // Reported so the bridge can log the degradation instead of it staying
@@ -30866,7 +30870,7 @@ Object.assign(lookup, {
 // package.json
 var package_default = {
   name: "@autohq/cli",
-  version: "0.1.529",
+  version: "0.1.531",
   license: "SEE LICENSE IN README.md",
   publishConfig: {
     access: "public"
@@ -31210,6 +31214,7 @@ function createRuntimeBridgeBootstrapListener(input) {
           status: "ready",
           at: (/* @__PURE__ */ new Date()).toISOString(),
           cliVersion,
+          sessionCommandHeaderProtocolEpoch: RUNTIME_SESSION_COMMAND_HEADER_PROTOCOL_EPOCH,
           ignoredBootstrapKeys: ignoredKeys.length > 0 ? ignoredKeys : void 0
         })
       );
@@ -31239,7 +31244,8 @@ function createRuntimeBridgeBootstrapListener(input) {
           at: (/* @__PURE__ */ new Date()).toISOString(),
           // Version skew is a leading cause of bootstrap failure, so failed
           // acks carry the version that could not bootstrap.
-          cliVersion
+          cliVersion,
+          sessionCommandHeaderProtocolEpoch: RUNTIME_SESSION_COMMAND_HEADER_PROTOCOL_EPOCH
         })
       );
       input.onBootstrapError(error51);
@@ -34251,8 +34257,9 @@ var GithubSyncWorkflowInputSchema = external_exports.discriminatedUnion("kind",
   // webhook). The tenant's `.auto` is unchanged — only our registry changed —
   // so this arm skips the `no_auto_changes` early-out and applies the production
   // branch HEAD (`after`, which the sweep resolves before starting the run).
-  // It is otherwise push-shaped. `templateName`/`version` identify the drift
-  // that triggered it (for the commit check + idempotent workflow id).
+  // It is otherwise push-shaped. New waves carry the complete bounded
+  // `templates` set plus a deterministic `waveId`; legacy single-template
+  // coordinates remain accepted only so in-flight workflows can replay.
   external_exports.object({
     kind: external_exports.literal("template_push"),
     bindingId: external_exports.string().trim().min(1),
@@ -34266,9 +34273,27 @@ var GithubSyncWorkflowInputSchema = external_exports.discriminatedUnion("kind",
     autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
     before: external_exports.string().trim().min(1).optional(),
     after: external_exports.string().trim().min(1),
-    templateName: external_exports.string().trim().min(1),
-    version: external_exports.string().trim().min(1),
+    // Legacy single-template coordinates remain optional so in-flight
+    // workflows started by a pre-wave worker can finish after deployment.
+    templateName: external_exports.string().trim().min(1).optional(),
+    version: external_exports.string().trim().min(1).optional(),
+    waveId: external_exports.string().trim().min(1).optional(),
+    templates: external_exports.array(
+      external_exports.object({
+        name: external_exports.string().trim().min(1),
+        version: external_exports.string().trim().min(1)
+      })
+    ).min(1).max(50).optional(),
     triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
+  }).superRefine((input, context) => {
+    const legacy = Boolean(input.templateName && input.version);
+    const wave = Boolean(input.waveId && input.templates);
+    if (legacy === wave) {
+      context.addIssue({
+        code: "custom",
+        message: "template_push requires exactly one of legacy templateName/version or waveId/templates"
+      });
+    }
   }),
   // Synthetic authoritative re-apply triggered by one durable connection
   // lifecycle occurrence. The event id makes retries reuse the same workflow,

package/dist/index.js

@@ -18117,8 +18117,9 @@ var init_github_sync = __esm({
       // webhook). The tenant's `.auto` is unchanged — only our registry changed —
       // so this arm skips the `no_auto_changes` early-out and applies the production
       // branch HEAD (`after`, which the sweep resolves before starting the run).
-      // It is otherwise push-shaped. `templateName`/`version` identify the drift
-      // that triggered it (for the commit check + idempotent workflow id).
+      // It is otherwise push-shaped. New waves carry the complete bounded
+      // `templates` set plus a deterministic `waveId`; legacy single-template
+      // coordinates remain accepted only so in-flight workflows can replay.
       external_exports.object({
         kind: external_exports.literal("template_push"),
         bindingId: external_exports.string().trim().min(1),
@@ -18132,9 +18133,27 @@ var init_github_sync = __esm({
         autoPath: external_exports.literal(GITHUB_SYNC_AUTO_PATH),
         before: external_exports.string().trim().min(1).optional(),
         after: external_exports.string().trim().min(1),
-        templateName: external_exports.string().trim().min(1),
-        version: external_exports.string().trim().min(1),
+        // Legacy single-template coordinates remain optional so in-flight
+        // workflows started by a pre-wave worker can finish after deployment.
+        templateName: external_exports.string().trim().min(1).optional(),
+        version: external_exports.string().trim().min(1).optional(),
+        waveId: external_exports.string().trim().min(1).optional(),
+        templates: external_exports.array(
+          external_exports.object({
+            name: external_exports.string().trim().min(1),
+            version: external_exports.string().trim().min(1)
+          })
+        ).min(1).max(50).optional(),
         triggerArtifact: GithubSyncTriggerArtifactSchema.optional()
+      }).superRefine((input, context) => {
+        const legacy = Boolean(input.templateName && input.version);
+        const wave = Boolean(input.waveId && input.templates);
+        if (legacy === wave) {
+          context.addIssue({
+            code: "custom",
+            message: "template_push requires exactly one of legacy templateName/version or waveId/templates"
+          });
+        }
       }),
       // Synthetic authoritative re-apply triggered by one durable connection
       // lifecycle occurrence. The event id makes retries reuse the same workflow,
@@ -78587,7 +78606,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.529",
+      version: "0.1.531",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"
@@ -89624,6 +89643,7 @@ var RuntimeBridgeBootstrapEnvelopeSchema = external_exports.object({
   bridgeLeaseId: RuntimeBridgeLeaseIdSchema2,
   bootstrap: RuntimeBridgeEncryptedBootstrapSchema
 });
+var RUNTIME_SESSION_COMMAND_HEADER_PROTOCOL_EPOCH = 1;
 var RuntimeBridgeBootstrapAckSchema = external_exports.object({
   status: external_exports.enum(["ready", "failed"]),
   error: external_exports.string().trim().min(1).optional(),
@@ -89633,6 +89653,9 @@ var RuntimeBridgeBootstrapAckSchema = external_exports.object({
   // actually live. Optional because runtimes older than the field predate
   // reporting it; the bridge logs those as "unknown" instead of failing.
   cliVersion: external_exports.string().trim().min(1).optional(),
+  // Runtime protocol epoch for exact causal command-header forwarding on
+  // agent-facing MCP requests. Optional for compatibility with older bridges.
+  sessionCommandHeaderProtocolEpoch: external_exports.number().int().positive().optional(),
   // Top-level bootstrap plaintext fields the runtime's tolerant parse
   // stripped because its schema does not know them yet (worker-ahead skew).
   // Reported so the bridge can log the degradation instead of it staying
@@ -90164,6 +90187,7 @@ function createRuntimeBridgeBootstrapListener(input) {
           status: "ready",
           at: (/* @__PURE__ */ new Date()).toISOString(),
           cliVersion,
+          sessionCommandHeaderProtocolEpoch: RUNTIME_SESSION_COMMAND_HEADER_PROTOCOL_EPOCH,
           ignoredBootstrapKeys: ignoredKeys.length > 0 ? ignoredKeys : void 0
         })
       );
@@ -90193,7 +90217,8 @@ function createRuntimeBridgeBootstrapListener(input) {
           at: (/* @__PURE__ */ new Date()).toISOString(),
           // Version skew is a leading cause of bootstrap failure, so failed
           // acks carry the version that could not bootstrap.
-          cliVersion
+          cliVersion,
+          sessionCommandHeaderProtocolEpoch: RUNTIME_SESSION_COMMAND_HEADER_PROTOCOL_EPOCH
         })
       );
       input.onBootstrapError(error51);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autohq/cli",
-  "version": "0.1.529",
+  "version": "0.1.531",
   "license": "SEE LICENSE IN README.md",
   "publishConfig": {
     "access": "public"