@autohq/cli 0.1.562 → 0.1.563

package/dist/agent-bridge.js

@@ -30870,7 +30870,7 @@ Object.assign(lookup, {
 // package.json
 var package_default = {
   name: "@autohq/cli",
-  version: "0.1.562",
+  version: "0.1.563",
   license: "SEE LICENSE IN README.md",
   publishConfig: {
     access: "public"
@@ -31820,6 +31820,7 @@ var AuthScopeSchema = external_exports.enum([
   "project_members:read",
   "tasks:read",
   "tasks:write",
+  "task_management:write",
   "billing:read",
   "billing:write",
   "secrets:read",
@@ -31959,6 +31960,16 @@ var SERVICE_ACCOUNT_SCOPE_PRESETS = {
 };
 var ServiceAccountScopePresetSchema = external_exports.enum(["read-only", "applier"]);
 
+// ../../packages/schemas/src/archive-policy.ts
+var DEFAULT_AUTO_ARCHIVE_AFTER_SECONDS = 24 * 60 * 60;
+var AutoArchivePolicySchema = external_exports.discriminatedUnion("mode", [
+  external_exports.object({ mode: external_exports.literal("off") }).strict(),
+  external_exports.object({
+    mode: external_exports.literal("after"),
+    seconds: external_exports.number().int().positive().max(2147483647)
+  }).strict()
+]);
+
 // ../../packages/schemas/src/capability-attenuation.ts
 function grantedCapabilityLevel(capability) {
   return typeof capability === "string" ? capability : capability.level;
@@ -35095,6 +35106,10 @@ var ProjectMemberCapabilityLevelSchema = external_exports.enum(
 );
 var TASK_CAPABILITY_LEVELS = ["none", "read", "write"];
 var TaskCapabilityLevelSchema = external_exports.enum(TASK_CAPABILITY_LEVELS);
+var TASK_MANAGEMENT_CAPABILITY_LEVELS = ["none", "write"];
+var TaskManagementCapabilityLevelSchema = external_exports.enum(
+  TASK_MANAGEMENT_CAPABILITY_LEVELS
+);
 var CONNECTION_CAPABILITY_LEVELS = ["none", "read", "write"];
 var ConnectionCapabilityLevelSchema = external_exports.enum(
   CONNECTION_CAPABILITY_LEVELS
@@ -35152,6 +35167,10 @@ var LocalAutoToolCapabilitiesSchema = external_exports.object({
   billing: BillingCapabilitySchema.default("none"),
   projectMembers: ProjectMemberCapabilitySchema.default("none"),
   tasks: TaskCapabilitySchema.default("none"),
+  // Project-wide coordination is an explicit session-snapshot grant, not a
+  // requester-attenuated form of ordinary Task access. Keeping it optional
+  // preserves pre-capability rendered spec hashes; absence means `none`.
+  taskManagement: TaskManagementCapabilityLevelSchema.optional(),
   connections: ConnectionCapabilitySchema.optional(),
   secrets: SecretCapabilitySchema.optional(),
   webhooks: WebhookCapabilitySchema.optional()
@@ -35394,6 +35413,36 @@ var TaskLinkTargetSchema = BindingTargetSchema.refine(
   (target) => TASK_LINK_TARGET_TYPES.includes(target.type),
   "Target type cannot be linked to a task"
 );
+var TaskOutcomeSchema = JsonObjectSchema;
+var TaskArchiveRequestSchema = external_exports.object({ archived: external_exports.boolean() }).strict();
+var TasksArchiveRequestSchema = external_exports.object({
+  task_ids: external_exports.array(external_exports.string().trim().min(1)).min(1).max(100),
+  archived: external_exports.boolean()
+}).strict();
+var TaskArchiveFilterSchema = external_exports.enum(["active", "archived", "all"]);
+var TaskReadModelSchema = external_exports.object({
+  id: external_exports.string(),
+  organizationId: external_exports.string(),
+  projectId: external_exports.string(),
+  parentTaskId: external_exports.string().nullable(),
+  title: external_exports.string(),
+  description: external_exports.string().nullable(),
+  status: TaskStatusSchema,
+  completionKind: TaskCompletionKindSchema,
+  outcome: TaskOutcomeSchema.nullable(),
+  context: JsonObjectSchema.nullable(),
+  createdBySessionId: external_exports.string().nullable(),
+  requester: JsonObjectSchema.nullable(),
+  revision: external_exports.number().int().positive(),
+  archivedAt: external_exports.string().datetime().nullable(),
+  createdAt: external_exports.string().datetime(),
+  updatedAt: external_exports.string().datetime(),
+  startedAt: external_exports.string().datetime().nullable(),
+  completedAt: external_exports.string().datetime().nullable()
+});
+var TaskListResponseSchema = external_exports.object({
+  tasks: external_exports.array(TaskReadModelSchema)
+});
 
 // ../../packages/schemas/src/trigger-router.ts
 var CANONICAL_ROUTE_BY_KINDS = [
@@ -37269,6 +37318,9 @@ var SessionRecordSchema = external_exports.object({
   // Trusted non-human origin/actor. Defaulted for legacy session.upsert
   // payloads persisted before work provenance shipped.
   workProvenance: WorkProvenanceSchema.nullable().default(null),
+  // Platform-stamped only when this session is atomically spawned onto a
+  // Task. Missing/null is the safe persisted-read default for legacy rows.
+  delegatedTaskId: external_exports.string().trim().min(1).nullable().default(null),
   // Defaulted for session.upsert payloads persisted before attached prompts.
   attachedUserPrompt: external_exports.string().nullable().default(null).optional(),
   triggerMessageContext: external_exports.string().nullable().default(null).optional(),
@@ -37587,6 +37639,10 @@ var OrganizationBillingSettingsSchema = external_exports.object({
   // amount. Both must be set for auto-top-up to arm.
   autoTopUpThresholdUsd: NonNegativeUsdSchema.nullable(),
   autoTopUpAmountUsd: PositiveUsdSchema.nullable(),
+  // Set when an automatic charge cannot proceed without operator attention.
+  // The timestamp is intentionally the whole public failure contract: payment
+  // provider identifiers and decline details stay out of settings responses.
+  autoTopUpRequiresAttentionAt: external_exports.string().datetime().nullable().default(null),
   // System-managed pause marker: set by the circuit breaker when the org's
   // balance drops below its reserve, cleared by the credit-event resume hook.
   // Never set by the settings PATCH (the request schema is strict without it).
@@ -37595,7 +37651,10 @@ var OrganizationBillingSettingsSchema = external_exports.object({
   // the org's Stripe customer, and the saved card auto-top-up charges
   // off-session. A non-null payment method is what "card on file" means.
   stripeCustomerId: external_exports.string().trim().min(1).nullable(),
-  stripeDefaultPaymentMethodId: external_exports.string().trim().min(1).nullable()
+  stripeDefaultPaymentMethodId: external_exports.string().trim().min(1).nullable(),
+  // Safe provenance used server-side to reject a test/live mismatch before a
+  // real charge attempt. Null preserves compatibility with legacy rows.
+  stripeDefaultPaymentMethodLivemode: external_exports.boolean().nullable().default(null)
 });
 var UpdateOrganizationBillingSettingsRequestSchema = external_exports.object({
   spendLimitDayUsd: PositiveUsdSchema.nullable().optional(),
@@ -38054,10 +38113,13 @@ var ProjectDefaultAgentSchema = external_exports.object({
 });
 var UpdateProjectSettingsRequestSchema = external_exports.object({
   name: external_exports.string().trim().min(1).optional(),
-  slug: AppRouteSlugSchema.optional()
-}).strict().refine((value2) => value2.name !== void 0 || value2.slug !== void 0, {
-  message: "At least one settings field is required"
-});
+  slug: AppRouteSlugSchema.optional(),
+  sessionAutoArchivePolicy: AutoArchivePolicySchema.optional(),
+  taskAutoArchivePolicy: AutoArchivePolicySchema.optional()
+}).strict().refine(
+  (value2) => value2.name !== void 0 || value2.slug !== void 0 || value2.sessionAutoArchivePolicy !== void 0 || value2.taskAutoArchivePolicy !== void 0,
+  { message: "At least one settings field is required" }
+);
 
 // ../../packages/schemas/src/project-service-accounts.ts
 var ProjectServiceAccountSchema = external_exports.object({

package/dist/index.js

@@ -15486,6 +15486,7 @@ var init_auth = __esm({
       "project_members:read",
       "tasks:read",
       "tasks:write",
+      "task_management:write",
       "billing:read",
       "billing:write",
       "secrets:read",
@@ -15610,6 +15611,23 @@ var init_auth = __esm({
   }
 });
 
+// ../../packages/schemas/src/archive-policy.ts
+var DEFAULT_AUTO_ARCHIVE_AFTER_SECONDS, AutoArchivePolicySchema;
+var init_archive_policy = __esm({
+  "../../packages/schemas/src/archive-policy.ts"() {
+    "use strict";
+    init_zod();
+    DEFAULT_AUTO_ARCHIVE_AFTER_SECONDS = 24 * 60 * 60;
+    AutoArchivePolicySchema = external_exports.discriminatedUnion("mode", [
+      external_exports.object({ mode: external_exports.literal("off") }).strict(),
+      external_exports.object({
+        mode: external_exports.literal("after"),
+        seconds: external_exports.number().int().positive().max(2147483647)
+      }).strict()
+    ]);
+  }
+});
+
 // ../../packages/schemas/src/capability-attenuation.ts
 function grantedCapabilityLevel(capability) {
   return typeof capability === "string" ? capability : capability.level;
@@ -19066,7 +19084,7 @@ function remoteMcpToolSchema(input) {
     ]).default({ kind: "none" })
   });
 }
-var REMOTE_MCP_TRANSPORTS, LOCAL_TOOL_IMPLEMENTATIONS, BILLING_CAPABILITY_LEVELS, BillingCapabilityLevelSchema, PROJECT_MEMBER_CAPABILITY_LEVELS, ProjectMemberCapabilityLevelSchema, TASK_CAPABILITY_LEVELS, TaskCapabilityLevelSchema, CONNECTION_CAPABILITY_LEVELS, ConnectionCapabilityLevelSchema, SECRET_CAPABILITY_LEVELS, SecretCapabilityLevelSchema, WEBHOOK_CAPABILITY_LEVELS, WebhookCapabilityLevelSchema, BillingCapabilitySchema, ProjectMemberCapabilitySchema, TaskCapabilitySchema, ConnectionCapabilitySchema, SecretCapabilitySchema, WebhookCapabilitySchema, LocalAutoToolCapabilitiesSchema, SecretReferenceSchema, NoToolAuthSchema, OptionalConnectionField, McpOAuthToolAuthSchema, ConnectionToolAuthSchema, ConnectionsToolAuthSchema, ConnectionBackedToolSchema, ToolAliasSchema, RemoteMcpToolSchema, LocalAutoToolSchema, LocalPingToolSchema, LocalChatToolSchema, LocalToolSchema, GithubToolSchema, ToolSpecSchema, AgentToolConnectRequestSchema, AgentToolConnectResponseSchema, AgentToolConnectCompleteResponseSchema, InlineAgentToolSchema, AgentToolRefSchema, AgentToolsSchema;
+var REMOTE_MCP_TRANSPORTS, LOCAL_TOOL_IMPLEMENTATIONS, BILLING_CAPABILITY_LEVELS, BillingCapabilityLevelSchema, PROJECT_MEMBER_CAPABILITY_LEVELS, ProjectMemberCapabilityLevelSchema, TASK_CAPABILITY_LEVELS, TaskCapabilityLevelSchema, TASK_MANAGEMENT_CAPABILITY_LEVELS, TaskManagementCapabilityLevelSchema, CONNECTION_CAPABILITY_LEVELS, ConnectionCapabilityLevelSchema, SECRET_CAPABILITY_LEVELS, SecretCapabilityLevelSchema, WEBHOOK_CAPABILITY_LEVELS, WebhookCapabilityLevelSchema, BillingCapabilitySchema, ProjectMemberCapabilitySchema, TaskCapabilitySchema, ConnectionCapabilitySchema, SecretCapabilitySchema, WebhookCapabilitySchema, LocalAutoToolCapabilitiesSchema, SecretReferenceSchema, NoToolAuthSchema, OptionalConnectionField, McpOAuthToolAuthSchema, ConnectionToolAuthSchema, ConnectionsToolAuthSchema, ConnectionBackedToolSchema, ToolAliasSchema, RemoteMcpToolSchema, LocalAutoToolSchema, LocalPingToolSchema, LocalChatToolSchema, LocalToolSchema, GithubToolSchema, ToolSpecSchema, AgentToolConnectRequestSchema, AgentToolConnectResponseSchema, AgentToolConnectCompleteResponseSchema, InlineAgentToolSchema, AgentToolRefSchema, AgentToolsSchema;
 var init_tools = __esm({
   "../../packages/schemas/src/tools.ts"() {
     "use strict";
@@ -19086,6 +19104,10 @@ var init_tools = __esm({
     );
     TASK_CAPABILITY_LEVELS = ["none", "read", "write"];
     TaskCapabilityLevelSchema = external_exports.enum(TASK_CAPABILITY_LEVELS);
+    TASK_MANAGEMENT_CAPABILITY_LEVELS = ["none", "write"];
+    TaskManagementCapabilityLevelSchema = external_exports.enum(
+      TASK_MANAGEMENT_CAPABILITY_LEVELS
+    );
     CONNECTION_CAPABILITY_LEVELS = ["none", "read", "write"];
     ConnectionCapabilityLevelSchema = external_exports.enum(
       CONNECTION_CAPABILITY_LEVELS
@@ -19122,6 +19144,10 @@ var init_tools = __esm({
       billing: BillingCapabilitySchema.default("none"),
       projectMembers: ProjectMemberCapabilitySchema.default("none"),
       tasks: TaskCapabilitySchema.default("none"),
+      // Project-wide coordination is an explicit session-snapshot grant, not a
+      // requester-attenuated form of ordinary Task access. Keeping it optional
+      // preserves pre-capability rendered spec hashes; absence means `none`.
+      taskManagement: TaskManagementCapabilityLevelSchema.optional(),
       connections: ConnectionCapabilitySchema.optional(),
       secrets: SecretCapabilitySchema.optional(),
       webhooks: WebhookCapabilitySchema.optional()
@@ -19306,7 +19332,7 @@ var init_trigger_filters = __esm({
 });
 
 // ../../packages/schemas/src/tasks.ts
-var TASK_STATUSES, TaskStatusSchema, TASK_COMPLETION_KINDS, TaskCompletionKindSchema, TASK_LINK_ROLES, TaskLinkRoleSchema, TASK_LINK_STATUSES, TaskLinkStatusSchema, TASK_LINK_TARGET_TYPES, TaskLinkTargetTypeSchema, TaskLinkTargetSchema;
+var TASK_STATUSES, TaskStatusSchema, TASK_COMPLETION_KINDS, TaskCompletionKindSchema, TASK_LINK_ROLES, TaskLinkRoleSchema, TASK_LINK_STATUSES, TaskLinkStatusSchema, TASK_LINK_TARGET_TYPES, TaskLinkTargetTypeSchema, TaskLinkTargetSchema, TaskOutcomeSchema, TaskArchiveRequestSchema, TasksArchiveRequestSchema, TaskArchiveFilterSchema, TaskReadModelSchema, TaskListResponseSchema;
 var init_tasks = __esm({
   "../../packages/schemas/src/tasks.ts"() {
     "use strict";
@@ -19343,6 +19369,36 @@ var init_tasks = __esm({
       (target) => TASK_LINK_TARGET_TYPES.includes(target.type),
       "Target type cannot be linked to a task"
     );
+    TaskOutcomeSchema = JsonObjectSchema;
+    TaskArchiveRequestSchema = external_exports.object({ archived: external_exports.boolean() }).strict();
+    TasksArchiveRequestSchema = external_exports.object({
+      task_ids: external_exports.array(external_exports.string().trim().min(1)).min(1).max(100),
+      archived: external_exports.boolean()
+    }).strict();
+    TaskArchiveFilterSchema = external_exports.enum(["active", "archived", "all"]);
+    TaskReadModelSchema = external_exports.object({
+      id: external_exports.string(),
+      organizationId: external_exports.string(),
+      projectId: external_exports.string(),
+      parentTaskId: external_exports.string().nullable(),
+      title: external_exports.string(),
+      description: external_exports.string().nullable(),
+      status: TaskStatusSchema,
+      completionKind: TaskCompletionKindSchema,
+      outcome: TaskOutcomeSchema.nullable(),
+      context: JsonObjectSchema.nullable(),
+      createdBySessionId: external_exports.string().nullable(),
+      requester: JsonObjectSchema.nullable(),
+      revision: external_exports.number().int().positive(),
+      archivedAt: external_exports.string().datetime().nullable(),
+      createdAt: external_exports.string().datetime(),
+      updatedAt: external_exports.string().datetime(),
+      startedAt: external_exports.string().datetime().nullable(),
+      completedAt: external_exports.string().datetime().nullable()
+    });
+    TaskListResponseSchema = external_exports.object({
+      tasks: external_exports.array(TaskReadModelSchema)
+    });
   }
 });
 
@@ -21407,6 +21463,9 @@ var init_sessions = __esm({
       // Trusted non-human origin/actor. Defaulted for legacy session.upsert
       // payloads persisted before work provenance shipped.
       workProvenance: WorkProvenanceSchema.nullable().default(null),
+      // Platform-stamped only when this session is atomically spawned onto a
+      // Task. Missing/null is the safe persisted-read default for legacy rows.
+      delegatedTaskId: external_exports.string().trim().min(1).nullable().default(null),
       // Defaulted for session.upsert payloads persisted before attached prompts.
       attachedUserPrompt: external_exports.string().nullable().default(null).optional(),
       triggerMessageContext: external_exports.string().nullable().default(null).optional(),
@@ -21779,6 +21838,10 @@ var init_billing = __esm({
       // amount. Both must be set for auto-top-up to arm.
       autoTopUpThresholdUsd: NonNegativeUsdSchema.nullable(),
       autoTopUpAmountUsd: PositiveUsdSchema.nullable(),
+      // Set when an automatic charge cannot proceed without operator attention.
+      // The timestamp is intentionally the whole public failure contract: payment
+      // provider identifiers and decline details stay out of settings responses.
+      autoTopUpRequiresAttentionAt: external_exports.string().datetime().nullable().default(null),
       // System-managed pause marker: set by the circuit breaker when the org's
       // balance drops below its reserve, cleared by the credit-event resume hook.
       // Never set by the settings PATCH (the request schema is strict without it).
@@ -21787,7 +21850,10 @@ var init_billing = __esm({
       // the org's Stripe customer, and the saved card auto-top-up charges
       // off-session. A non-null payment method is what "card on file" means.
       stripeCustomerId: external_exports.string().trim().min(1).nullable(),
-      stripeDefaultPaymentMethodId: external_exports.string().trim().min(1).nullable()
+      stripeDefaultPaymentMethodId: external_exports.string().trim().min(1).nullable(),
+      // Safe provenance used server-side to reject a test/live mismatch before a
+      // real charge attempt. Null preserves compatibility with legacy rows.
+      stripeDefaultPaymentMethodLivemode: external_exports.boolean().nullable().default(null)
     });
     UpdateOrganizationBillingSettingsRequestSchema = external_exports.object({
       spendLimitDayUsd: PositiveUsdSchema.nullable().optional(),
@@ -22166,6 +22232,7 @@ var init_project_config = __esm({
     "use strict";
     init_zod();
     init_agents();
+    init_archive_policy();
     init_ids();
     init_primitives();
     init_resources();
@@ -22295,10 +22362,13 @@ var init_project_config = __esm({
     });
     UpdateProjectSettingsRequestSchema = external_exports.object({
       name: external_exports.string().trim().min(1).optional(),
-      slug: AppRouteSlugSchema.optional()
-    }).strict().refine((value) => value.name !== void 0 || value.slug !== void 0, {
-      message: "At least one settings field is required"
-    });
+      slug: AppRouteSlugSchema.optional(),
+      sessionAutoArchivePolicy: AutoArchivePolicySchema.optional(),
+      taskAutoArchivePolicy: AutoArchivePolicySchema.optional()
+    }).strict().refine(
+      (value) => value.name !== void 0 || value.slug !== void 0 || value.sessionAutoArchivePolicy !== void 0 || value.taskAutoArchivePolicy !== void 0,
+      { message: "At least one settings field is required" }
+    );
   }
 });
 
@@ -81601,6 +81671,7 @@ var init_src = __esm({
     "use strict";
     init_account();
     init_auth();
+    init_archive_policy();
     init_capability_attenuation();
     init_chat();
     init_chatgpt_codex();
@@ -84428,7 +84499,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.562",
+      version: "0.1.563",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autohq/cli",
-  "version": "0.1.562",
+  "version": "0.1.563",
   "license": "SEE LICENSE IN README.md",
   "publishConfig": {
     "access": "public"