@autohq/cli 0.1.562 → 0.1.564

package/dist/agent-bridge.js

@@ -30870,7 +30870,7 @@ Object.assign(lookup, {
 // package.json
 var package_default = {
   name: "@autohq/cli",
-  version: "0.1.562",
+  version: "0.1.564",
   license: "SEE LICENSE IN README.md",
   publishConfig: {
     access: "public"
@@ -30973,7 +30973,8 @@ var AgentBridgeOutputAckTimeoutError = class extends Error {
     this.name = "AgentBridgeOutputAckTimeoutError";
   }
 };
-var AGENT_BRIDGE_TERMINAL_AUTH_DRAIN_TIMEOUT_MS = 6e4;
+var AGENT_BRIDGE_TERMINAL_AUTH_DRAIN_NO_PROGRESS_TIMEOUT_MS = 6e4;
+var AGENT_BRIDGE_TERMINAL_AUTH_DRAIN_ABSOLUTE_TIMEOUT_MS = 30 * 6e4;
 var AGENT_BRIDGE_TERMINAL_AUTH_DRAIN_REDIAL_MS = 1e3;
 async function runAgentBridgeSocket(options) {
   const socket = lookup(`${options.bridgeUrl}${RUNTIME_BRIDGE_NAMESPACE}`, {
@@ -31050,6 +31051,7 @@ async function runAgentBridgeSocket(options) {
         onBootstrap: options.onBootstrap,
         createHandler: (bootstrap) => options.createHandler({
           emitOutput: (output) => emitOutputWithAck(socket, output, options.runtimeLogger),
+          onOutputAckProgress: terminalAuthDrain.handleOutputAckProgress,
           cycleSocket: () => {
             options.writeOutput?.(
               "agent_bridge_socket_cycle reason=output_ack_retries_exhausted"
@@ -31336,7 +31338,12 @@ function createTerminalAuthDrainController(input) {
     if (!current) {
       return;
     }
-    clearTimeout(current.timeout);
+    if (current.absoluteTimeout) {
+      clearTimeout(current.absoluteTimeout);
+    }
+    if (current.noProgressTimeout) {
+      clearTimeout(current.noProgressTimeout);
+    }
     if (current.redialTimer) {
       clearTimeout(current.redialTimer);
     }
@@ -31362,6 +31369,34 @@ function createTerminalAuthDrainController(input) {
       context
     );
   };
+  const timeoutDrain = (current, input2) => {
+    if (state !== current) {
+      return;
+    }
+    logDroppedPendingOutputs(input2.reason);
+    settle(() => current.reject(new Error(input2.error)));
+  };
+  const scheduleNoProgressTimeout = (current) => {
+    if (current.noProgressTimeout) {
+      clearTimeout(current.noProgressTimeout);
+    }
+    current.noProgressTimeout = setTimeout(() => {
+      timeoutDrain(current, {
+        reason: "drain_no_progress_timeout",
+        error: `Timed out draining pending bridge output after terminal auth with no output ack progress for ${AGENT_BRIDGE_TERMINAL_AUTH_DRAIN_NO_PROGRESS_TIMEOUT_MS}ms`
+      });
+    }, AGENT_BRIDGE_TERMINAL_AUTH_DRAIN_NO_PROGRESS_TIMEOUT_MS);
+    current.noProgressTimeout.unref?.();
+  };
+  const scheduleAbsoluteTimeout = (current) => {
+    current.absoluteTimeout = setTimeout(() => {
+      timeoutDrain(current, {
+        reason: "drain_absolute_timeout",
+        error: `Timed out draining pending bridge output after terminal auth at the ${AGENT_BRIDGE_TERMINAL_AUTH_DRAIN_ABSOLUTE_TIMEOUT_MS}ms absolute safety bound`
+      });
+    }, AGENT_BRIDGE_TERMINAL_AUTH_DRAIN_ABSOLUTE_TIMEOUT_MS);
+    current.absoluteTimeout.unref?.();
+  };
   const scheduleRedial = () => {
     const current = state;
     if (!current || current.redialTimer) {
@@ -31401,25 +31436,18 @@ function createTerminalAuthDrainController(input) {
       resolveDrain = resolve4;
       rejectDrain = reject;
     });
-    const timeout = setTimeout(() => {
-      logDroppedPendingOutputs("drain_timeout");
-      settle(() => {
-        rejectDrain(
-          new Error(
-            `Timed out draining pending bridge output after terminal auth in ${AGENT_BRIDGE_TERMINAL_AUTH_DRAIN_TIMEOUT_MS}ms`
-          )
-        );
-      });
-    }, AGENT_BRIDGE_TERMINAL_AUTH_DRAIN_TIMEOUT_MS);
-    timeout.unref?.();
-    state = {
+    const current = {
+      absoluteTimeout: null,
+      noProgressTimeout: null,
       promise: promise2,
       redialTimer: null,
       reject: rejectDrain,
       resolve: resolveDrain,
-      startedAt,
-      timeout
+      startedAt
     };
+    state = current;
+    scheduleNoProgressTimeout(current);
+    scheduleAbsoluteTimeout(current);
     input.writeOutput?.("agent_bridge_terminal_auth_drain_started");
     input.runtimeLogger?.warn("agent_bridge_terminal_auth_drain_started");
     input.socket.auth = { token: input.token, terminalDrain: true };
@@ -31487,11 +31515,20 @@ function createTerminalAuthDrainController(input) {
     }
     return terminalAuthExit;
   };
+  const handleOutputAckProgress = () => {
+    const current = state;
+    if (!current) {
+      return false;
+    }
+    scheduleNoProgressTimeout(current);
+    return true;
+  };
   return {
     begin,
     handleConnected,
     handleConnectError,
     handleDisconnect,
+    handleOutputAckProgress,
     suppressesReconnect: () => terminalAuthExit || state !== null
   };
 }
@@ -31820,6 +31857,7 @@ var AuthScopeSchema = external_exports.enum([
   "project_members:read",
   "tasks:read",
   "tasks:write",
+  "task_management:write",
   "billing:read",
   "billing:write",
   "secrets:read",
@@ -31959,6 +31997,16 @@ var SERVICE_ACCOUNT_SCOPE_PRESETS = {
 };
 var ServiceAccountScopePresetSchema = external_exports.enum(["read-only", "applier"]);
 
+// ../../packages/schemas/src/archive-policy.ts
+var DEFAULT_AUTO_ARCHIVE_AFTER_SECONDS = 24 * 60 * 60;
+var AutoArchivePolicySchema = external_exports.discriminatedUnion("mode", [
+  external_exports.object({ mode: external_exports.literal("off") }).strict(),
+  external_exports.object({
+    mode: external_exports.literal("after"),
+    seconds: external_exports.number().int().positive().max(2147483647)
+  }).strict()
+]);
+
 // ../../packages/schemas/src/capability-attenuation.ts
 function grantedCapabilityLevel(capability) {
   return typeof capability === "string" ? capability : capability.level;
@@ -35095,6 +35143,10 @@ var ProjectMemberCapabilityLevelSchema = external_exports.enum(
 );
 var TASK_CAPABILITY_LEVELS = ["none", "read", "write"];
 var TaskCapabilityLevelSchema = external_exports.enum(TASK_CAPABILITY_LEVELS);
+var TASK_MANAGEMENT_CAPABILITY_LEVELS = ["none", "write"];
+var TaskManagementCapabilityLevelSchema = external_exports.enum(
+  TASK_MANAGEMENT_CAPABILITY_LEVELS
+);
 var CONNECTION_CAPABILITY_LEVELS = ["none", "read", "write"];
 var ConnectionCapabilityLevelSchema = external_exports.enum(
   CONNECTION_CAPABILITY_LEVELS
@@ -35152,6 +35204,10 @@ var LocalAutoToolCapabilitiesSchema = external_exports.object({
   billing: BillingCapabilitySchema.default("none"),
   projectMembers: ProjectMemberCapabilitySchema.default("none"),
   tasks: TaskCapabilitySchema.default("none"),
+  // Project-wide coordination is an explicit session-snapshot grant, not a
+  // requester-attenuated form of ordinary Task access. Keeping it optional
+  // preserves pre-capability rendered spec hashes; absence means `none`.
+  taskManagement: TaskManagementCapabilityLevelSchema.optional(),
   connections: ConnectionCapabilitySchema.optional(),
   secrets: SecretCapabilitySchema.optional(),
   webhooks: WebhookCapabilitySchema.optional()
@@ -35394,6 +35450,36 @@ var TaskLinkTargetSchema = BindingTargetSchema.refine(
   (target) => TASK_LINK_TARGET_TYPES.includes(target.type),
   "Target type cannot be linked to a task"
 );
+var TaskOutcomeSchema = JsonObjectSchema;
+var TaskArchiveRequestSchema = external_exports.object({ archived: external_exports.boolean() }).strict();
+var TasksArchiveRequestSchema = external_exports.object({
+  task_ids: external_exports.array(external_exports.string().trim().min(1)).min(1).max(100),
+  archived: external_exports.boolean()
+}).strict();
+var TaskArchiveFilterSchema = external_exports.enum(["active", "archived", "all"]);
+var TaskReadModelSchema = external_exports.object({
+  id: external_exports.string(),
+  organizationId: external_exports.string(),
+  projectId: external_exports.string(),
+  parentTaskId: external_exports.string().nullable(),
+  title: external_exports.string(),
+  description: external_exports.string().nullable(),
+  status: TaskStatusSchema,
+  completionKind: TaskCompletionKindSchema,
+  outcome: TaskOutcomeSchema.nullable(),
+  context: JsonObjectSchema.nullable(),
+  createdBySessionId: external_exports.string().nullable(),
+  requester: JsonObjectSchema.nullable(),
+  revision: external_exports.number().int().positive(),
+  archivedAt: external_exports.string().datetime().nullable(),
+  createdAt: external_exports.string().datetime(),
+  updatedAt: external_exports.string().datetime(),
+  startedAt: external_exports.string().datetime().nullable(),
+  completedAt: external_exports.string().datetime().nullable()
+});
+var TaskListResponseSchema = external_exports.object({
+  tasks: external_exports.array(TaskReadModelSchema)
+});
 
 // ../../packages/schemas/src/trigger-router.ts
 var CANONICAL_ROUTE_BY_KINDS = [
@@ -37269,6 +37355,9 @@ var SessionRecordSchema = external_exports.object({
   // Trusted non-human origin/actor. Defaulted for legacy session.upsert
   // payloads persisted before work provenance shipped.
   workProvenance: WorkProvenanceSchema.nullable().default(null),
+  // Platform-stamped only when this session is atomically spawned onto a
+  // Task. Missing/null is the safe persisted-read default for legacy rows.
+  delegatedTaskId: external_exports.string().trim().min(1).nullable().default(null),
   // Defaulted for session.upsert payloads persisted before attached prompts.
   attachedUserPrompt: external_exports.string().nullable().default(null).optional(),
   triggerMessageContext: external_exports.string().nullable().default(null).optional(),
@@ -37587,6 +37676,10 @@ var OrganizationBillingSettingsSchema = external_exports.object({
   // amount. Both must be set for auto-top-up to arm.
   autoTopUpThresholdUsd: NonNegativeUsdSchema.nullable(),
   autoTopUpAmountUsd: PositiveUsdSchema.nullable(),
+  // Set when an automatic charge cannot proceed without operator attention.
+  // The timestamp is intentionally the whole public failure contract: payment
+  // provider identifiers and decline details stay out of settings responses.
+  autoTopUpRequiresAttentionAt: external_exports.string().datetime().nullable().default(null),
   // System-managed pause marker: set by the circuit breaker when the org's
   // balance drops below its reserve, cleared by the credit-event resume hook.
   // Never set by the settings PATCH (the request schema is strict without it).
@@ -37595,7 +37688,10 @@ var OrganizationBillingSettingsSchema = external_exports.object({
   // the org's Stripe customer, and the saved card auto-top-up charges
   // off-session. A non-null payment method is what "card on file" means.
   stripeCustomerId: external_exports.string().trim().min(1).nullable(),
-  stripeDefaultPaymentMethodId: external_exports.string().trim().min(1).nullable()
+  stripeDefaultPaymentMethodId: external_exports.string().trim().min(1).nullable(),
+  // Safe provenance used server-side to reject a test/live mismatch before a
+  // real charge attempt. Null preserves compatibility with legacy rows.
+  stripeDefaultPaymentMethodLivemode: external_exports.boolean().nullable().default(null)
 });
 var UpdateOrganizationBillingSettingsRequestSchema = external_exports.object({
   spendLimitDayUsd: PositiveUsdSchema.nullable().optional(),
@@ -38054,10 +38150,13 @@ var ProjectDefaultAgentSchema = external_exports.object({
 });
 var UpdateProjectSettingsRequestSchema = external_exports.object({
   name: external_exports.string().trim().min(1).optional(),
-  slug: AppRouteSlugSchema.optional()
-}).strict().refine((value2) => value2.name !== void 0 || value2.slug !== void 0, {
-  message: "At least one settings field is required"
-});
+  slug: AppRouteSlugSchema.optional(),
+  sessionAutoArchivePolicy: AutoArchivePolicySchema.optional(),
+  taskAutoArchivePolicy: AutoArchivePolicySchema.optional()
+}).strict().refine(
+  (value2) => value2.name !== void 0 || value2.slug !== void 0 || value2.sessionAutoArchivePolicy !== void 0 || value2.taskAutoArchivePolicy !== void 0,
+  { message: "At least one settings field is required" }
+);
 
 // ../../packages/schemas/src/project-service-accounts.ts
 var ProjectServiceAccountSchema = external_exports.object({
@@ -72540,6 +72639,7 @@ var AgentBridgeOutputBuffer = class {
     if (isSuccessfulOutputAck(ack)) {
       this.pendingOutputs.delete(output.outputSeq);
       this.discardOnFailureOutputSeqs.delete(output.outputSeq);
+      this.input.onOutputAckProgress?.();
       this.input.runtimeLogger?.info(
         "agent_bridge_output_buffer_emit_ready",
         this.outputLogContext(output, {
@@ -77859,6 +77959,7 @@ function createHarnessCommandHandler(input) {
   const config2 = resolveHarnessConfig(input.bootstrap);
   const base = {
     emitOutput: input.emitOutput,
+    ...input.onOutputAckProgress ? { onOutputAckProgress: input.onOutputAckProgress } : {},
     ...input.cycleSocket ? { cycleSocket: input.cycleSocket } : {},
     ...input.outputSeqStart !== void 0 ? { outputSeqStart: input.outputSeqStart } : {},
     ...input.runtimeLogger ? { runtimeLogger: input.runtimeLogger } : {},