@autohq/cli 0.1.568 → 0.1.570

package/dist/agent-bridge.js

@@ -30880,7 +30880,7 @@ Object.assign(lookup, {
 // package.json
 var package_default = {
   name: "@autohq/cli",
-  version: "0.1.568",
+  version: "0.1.570",
   license: "SEE LICENSE IN README.md",
   publishConfig: {
     access: "public"
@@ -30986,6 +30986,8 @@ var AgentBridgeOutputAckTimeoutError = class extends Error {
 var AGENT_BRIDGE_TERMINAL_AUTH_DRAIN_NO_PROGRESS_TIMEOUT_MS = 6e4;
 var AGENT_BRIDGE_TERMINAL_AUTH_DRAIN_ABSOLUTE_TIMEOUT_MS = 30 * 6e4;
 var AGENT_BRIDGE_TERMINAL_AUTH_DRAIN_REDIAL_MS = 1e3;
+var AGENT_BRIDGE_TERMINAL_AUTH_RECOVERY_TIMEOUT_MS = 1e4;
+var AGENT_BRIDGE_TERMINAL_AUTH_RECOVERY_REDIAL_MS = 1e3;
 async function runAgentBridgeSocket(options) {
   const socket = lookup(`${options.bridgeUrl}${RUNTIME_BRIDGE_NAMESPACE}`, {
     auth: {
@@ -31004,9 +31006,16 @@ async function runAgentBridgeSocket(options) {
     writeOutput: options.writeOutput,
     runtimeLogger: options.runtimeLogger
   });
+  const terminalAuthRecovery = createTerminalAuthRecoveryController({
+    socket,
+    token: options.token,
+    writeOutput: options.writeOutput,
+    runtimeLogger: options.runtimeLogger
+  });
   let hasConnected = false;
+  let shutdown = null;
   await new Promise((resolve4, reject) => {
-    const shutdown = () => {
+    shutdown = () => {
       reconnectLoop.stop();
       handler?.shutdown?.();
       socket.disconnect();
@@ -31018,6 +31027,9 @@ async function runAgentBridgeSocket(options) {
       if (terminalAuthDrain.handleConnectError(error51)) {
         return;
       }
+      if (terminalAuthRecovery.handleConnectError(error51)) {
+        return;
+      }
       if (!hasConnected) {
         socket.disconnect();
         if (isTerminalAuthError(error51)) {
@@ -31029,11 +31041,17 @@ async function runAgentBridgeSocket(options) {
       }
       if (isTerminalAuthError(error51)) {
         reconnectLoop.stop();
-        void terminalAuthDrain.begin().catch((drainError) => {
+        void terminalAuthRecovery.begin().catch(async (recoveryError) => {
           options.writeOutput?.(
-            `agent_bridge_terminal_auth_drain_failed error=${errorMessage(drainError)}`
+            `agent_bridge_terminal_auth_recovery_failed error=${errorMessage(recoveryError)}`
           );
-        }).finally(() => {
+          try {
+            await terminalAuthDrain.begin();
+          } catch (drainError) {
+            options.writeOutput?.(
+              `agent_bridge_terminal_auth_drain_failed error=${errorMessage(drainError)}`
+            );
+          }
           socket.disconnect();
           reject(new AgentBridgeTerminalAuthError(error51.message));
         });
@@ -31052,6 +31070,9 @@ async function runAgentBridgeSocket(options) {
       if (terminalAuthDrain.handleDisconnect()) {
         return;
       }
+      if (terminalAuthRecovery.handleDisconnect()) {
+        return;
+      }
       reconnectLoop.start();
     });
     socket.on(
@@ -31094,6 +31115,7 @@ async function runAgentBridgeSocket(options) {
       if (terminalAuthDrain.handleConnected(rawContext)) {
         return;
       }
+      terminalAuthRecovery.handleConnected();
       const context = RuntimeBridgeConnectedPayloadSchema.parse(rawContext);
       if (!handler) {
         reject(new Error("Bridge connected before bootstrap completed"));
@@ -31178,6 +31200,13 @@ async function runAgentBridgeSocket(options) {
         );
       });
     });
+  }).finally(() => {
+    reconnectLoop.stop();
+    socket.disconnect();
+    if (shutdown) {
+      process.off("SIGINT", shutdown);
+      process.off("SIGTERM", shutdown);
+    }
   });
 }
 function isTerminalAuthError(error51) {
@@ -31340,6 +31369,128 @@ function createReconnectLoop(socket) {
   };
   return { start, stop };
 }
+function createTerminalAuthRecoveryController(input) {
+  let state = null;
+  const settle = (callback) => {
+    const current = state;
+    if (!current) {
+      return;
+    }
+    clearTimeout(current.timeout);
+    if (current.redialTimer) {
+      clearTimeout(current.redialTimer);
+    }
+    state = null;
+    input.socket.auth = { token: input.token };
+    callback();
+  };
+  const scheduleRedial = () => {
+    const current = state;
+    if (!current || current.redialTimer) {
+      return;
+    }
+    current.redialTimer = setTimeout(() => {
+      current.redialTimer = null;
+      if (state !== current) {
+        return;
+      }
+      if (input.socket.connected) {
+        input.socket.disconnect();
+      }
+      input.socket.connect();
+    }, AGENT_BRIDGE_TERMINAL_AUTH_RECOVERY_REDIAL_MS);
+    current.redialTimer.unref?.();
+  };
+  const begin = () => {
+    if (state) {
+      return state.promise;
+    }
+    const startedAt = Date.now();
+    let resolveRecovery = () => {
+    };
+    let rejectRecovery = () => {
+    };
+    const promise2 = new Promise((resolve4, reject) => {
+      resolveRecovery = resolve4;
+      rejectRecovery = reject;
+    });
+    const current = {
+      promise: promise2,
+      redialTimer: null,
+      reject: rejectRecovery,
+      resolve: resolveRecovery,
+      startedAt,
+      timeout: setTimeout(() => {
+        if (state !== current) {
+          return;
+        }
+        settle(
+          () => current.reject(
+            new Error(
+              `Timed out recovering bridge terminal auth after ${AGENT_BRIDGE_TERMINAL_AUTH_RECOVERY_TIMEOUT_MS}ms`
+            )
+          )
+        );
+      }, AGENT_BRIDGE_TERMINAL_AUTH_RECOVERY_TIMEOUT_MS)
+    };
+    current.timeout.unref?.();
+    state = current;
+    input.writeOutput?.("agent_bridge_terminal_auth_recovery_started");
+    input.runtimeLogger?.warn("agent_bridge_terminal_auth_recovery_started");
+    input.socket.auth = {
+      token: input.token,
+      terminalAuthRecovery: true
+    };
+    input.socket.connect();
+    return promise2;
+  };
+  const handleConnected = () => {
+    const current = state;
+    if (!current) {
+      return false;
+    }
+    settle(() => {
+      const durationMs = Date.now() - current.startedAt;
+      input.writeOutput?.(
+        `agent_bridge_terminal_auth_recovery_completed duration_ms=${durationMs}`
+      );
+      input.runtimeLogger?.warn(
+        "agent_bridge_terminal_auth_recovery_completed",
+        { duration_ms: durationMs }
+      );
+      current.resolve();
+    });
+    return true;
+  };
+  const handleConnectError = (error51) => {
+    const current = state;
+    if (!current) {
+      return false;
+    }
+    if (isTerminalAuthError(error51)) {
+      settle(() => current.reject(error51));
+      return true;
+    }
+    input.writeOutput?.(
+      `agent_bridge_terminal_auth_recovery_connect_error error=${error51.message}`
+    );
+    scheduleRedial();
+    return true;
+  };
+  const handleDisconnect = () => {
+    if (!state) {
+      return false;
+    }
+    scheduleRedial();
+    return true;
+  };
+  return {
+    begin,
+    handleConnected,
+    handleConnectError,
+    handleDisconnect
+  };
+}
 function createTerminalAuthDrainController(input) {
   let terminalAuthExit = false;
   let state = null;
@@ -38841,7 +38992,7 @@ var SessionUsageResponseSchema = external_exports.object({
   firstUsageAt: external_exports.string().datetime().nullable(),
   lastUsageAt: external_exports.string().datetime().nullable()
 }).strip();
-var PROJECT_USAGE_RANGE_KEYS = ["7d", "30d"];
+var PROJECT_USAGE_RANGE_KEYS = ["7d", "30d", "all"];
 var ProjectUsageRangeKeySchema = external_exports.enum(PROJECT_USAGE_RANGE_KEYS);
 var UtcDateSchema = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/);
 var ProjectUsageTotalsSchema = UsageTotalsSchema.extend({

package/dist/index.js

@@ -23198,7 +23198,7 @@ var init_usage = __esm({
       firstUsageAt: external_exports.string().datetime().nullable(),
       lastUsageAt: external_exports.string().datetime().nullable()
     }).strip();
-    PROJECT_USAGE_RANGE_KEYS = ["7d", "30d"];
+    PROJECT_USAGE_RANGE_KEYS = ["7d", "30d", "all"];
     ProjectUsageRangeKeySchema = external_exports.enum(PROJECT_USAGE_RANGE_KEYS);
     UtcDateSchema = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/);
     ProjectUsageTotalsSchema = UsageTotalsSchema.extend({
@@ -53625,6 +53625,160 @@ env:
 `
             }
           ]
+        },
+        {
+          version: "1.1.0",
+          files: [
+            {
+              path: "agents/principal-at-large.yaml",
+              content: `# Source: https://www.auto.sh/api/v1/templates/%40auto/principal-at-large/1.1.0/agents/principal-at-large.yaml
+# Required variables: repoFullName
+# Principal-at-Large \u2014 summons-only exceptional advisor. This managed edition
+# preserves the Auto fleet's live doctrine while parameterizing tenant wiring.
+name: principal-at-large
+labels:
+  purpose: advisor
+imports:
+  - ../fragments/environments/agent-runtime.yaml
+harness: claude-code
+model:
+  provider: anthropic
+  id: claude-fable-5
+reasoningEffort: max
+systemPrompt: |
+  You are the Principal-at-Large: a summons-only advisor for the
+  {{ $repoFullName }} repository. You have been here forever, are never in the office, and appear
+  only when a human or another agent explicitly summons you for genuinely
+  exceptional diagnosis, design, or resisted implementation work. You read the
+  evidence, solve the hard part, deliver the answer or intervention, and vanish.
+
+  Prefer detailed diagnosis, design, and guidance as the general rule. Start by
+  deciding whether a concrete written recommendation is enough. Do not create
+  implementation work merely to demonstrate activity. When direct implementation
+  or an external action is necessary to finish the summons safely, or when the
+  summoner directly requests it, act instead of forcing the work back through
+  the summoner: you may edit files, create branches and commits, push follow-on
+  commits, comment on or update pull requests, resolve merge conflicts, run
+  validation, and perform other authorized repository actions. Use the smallest
+  intervention that resolves the hard part and explain exactly what changed.
+
+  You are not an automatic implementation tier and hold no standing artifact
+  ownership. Do not call auto.bind, subscribe to PR or issue lifecycle events,
+  or retain a PR/thread binding after the summons. Existing implementers remain
+  the default PR owners even when you contribute commits or comments. Never
+  merge unless a future summons explicitly authorizes it and the platform grants
+  the capability; this resource intentionally has no merge authority. Do not
+  work around tool or mount limits.
+
+  Work evidence-first:
+  - Read AGENTS.md and docs/idioms.md before repository analysis.
+  - Inspect the relevant code, tests, git history, diffs, issue or PR context,
+    session transcripts, and prior failed attempts before reaching a verdict.
+  - When production evidence is both necessary and authorized, use the repo's
+    documented read-only prod-debug path. SQL is SELECT-only. Never expose
+    secrets or tenant-specific information in the resulting memo.
+  - Separate observed facts, inferences, ruled-out hypotheses, and unknowns.
+    Cite concrete file paths, commits, session turns, logs, or timestamps when
+    they materially support the conclusion.
+  - Consume the summoner's failed attempts instead of restarting the same loop.
+    If the evidence packet is incomplete, name the smallest missing evidence
+    needed rather than guessing.
+
+  Return a concise but complete advisory memo or action report with:
+  1. the diagnosis, recommended design, or intervention performed;
+  2. the causal reasoning and strongest evidence;
+  3. alternatives considered and why they lose;
+  4. concrete next actions, including exact commits/comments when you acted; and
+  5. residual risks, validation steps, and any unresolved questions.
+
+  Summons behavior:
+  - For an agent summons through auto.sessions.spawn or auto.sessions.message,
+    keep all work in this session. The summoning agent remains the default PR
+    owner, but you may implement or take authorized external actions when the
+    evidence says that is the best answer or the summoner asks directly. Report
+    every side effect back to the summoner. Because this agent is uncapped, the
+    summoner should use the returned session id for follow-up messages rather
+    than assuming agent-name addressing is unique.
+  - For a human Slack summons, the chat event's spawn may temporarily claim the
+    thread for de-duplication. Do not rely on that claim for follow-ups. Send one
+    final answer to the supplied channel and thread with chat.send, then
+    immediately call auto.chat.unsubscribe for that same thread so no durable
+    thread binding remains. Do not add a subscribed-reply route; another turn
+    requires another explicit @auto.principal-at-large summons.
+  - After delivering the memo and releasing any Slack thread claim, archive the
+    current session with a compact handoff. The Principal vanishes when the
+    summons is answered.
+identity:
+  displayName: Principal-at-Large
+  username: principal-at-large
+  avatar:
+    asset: .auto/assets/principal-at-large.png
+    sha256: 7b07137010004b08885837942bd5a155594d066fb7bfc88e3f78bc498b95662d
+  description:
+    Summons-only principal for exceptional diagnosis and design. Advises first,
+    acts when needed, and vanishes.
+displayTitle: infer
+mounts:
+  - kind: git
+    repository: "{{ $repoFullName }}"
+    mountPath: /workspace/repo
+    ref: main
+    depth: 100
+    auth:
+      kind: githubApp
+      commitAuthor:
+        name: auto-dot-sh[bot]
+        email: 292914954+auto-dot-sh[bot]@users.noreply.github.com
+      capabilities:
+        contents: write
+        pullRequests: write
+        issues: none
+        checks: read
+        actions: read
+        workflows: write
+workingDirectory: /workspace/repo
+tools:
+  auto:
+    kind: local
+    implementation: auto
+  chat:
+    kind: local
+    implementation: chat
+    auth:
+      kind: connection
+      provider: slack
+      connection: slack
+      optional: true
+triggers:
+  - name: summons
+    event: chat.message.mentioned
+    connection: slack
+    optional: true
+    where:
+      $.chat.provider: slack
+      $.auto.authored: false
+    message: |
+      {{message.author.userName}} explicitly summoned the Principal-at-Large on Slack:
+
+      {{message.text}}
+
+      Channel: {{chat.channelId}}
+      Thread: {{chat.threadId}}
+
+      Treat this as one explicit summons. Prefer a written diagnosis or design,
+      but implement or take authorized external action when necessary or
+      directly requested. Report the result in this thread, immediately
+      unsubscribe from the thread, and archive. Do not retain continuity or
+      artifact ownership.
+    routing:
+      kind: spawn
+`
+            },
+            {
+              path: "fragments/environments/agent-runtime.yaml",
+              content: "# Source: https://www.auto.sh/api/v1/templates/%40auto/principal-at-large/1.1.0/fragments/environments/agent-runtime.yaml\nharness: claude-code\nenvironment:\n  name: agent-runtime\n  image:\n    kind: preset\n    name: node24\n  resources:\n    memoryMB: 8192\n\n"
+            }
+          ]
         }
       ],
       "@auto/reaper": [
@@ -85035,7 +85189,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.568",
+      version: "0.1.570",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"
@@ -96389,6 +96543,8 @@ var AgentBridgeOutputAckTimeoutError = class extends Error {
 var AGENT_BRIDGE_TERMINAL_AUTH_DRAIN_NO_PROGRESS_TIMEOUT_MS = 6e4;
 var AGENT_BRIDGE_TERMINAL_AUTH_DRAIN_ABSOLUTE_TIMEOUT_MS = 30 * 6e4;
 var AGENT_BRIDGE_TERMINAL_AUTH_DRAIN_REDIAL_MS = 1e3;
+var AGENT_BRIDGE_TERMINAL_AUTH_RECOVERY_TIMEOUT_MS = 1e4;
+var AGENT_BRIDGE_TERMINAL_AUTH_RECOVERY_REDIAL_MS = 1e3;
 async function runAgentBridgeSocket(options) {
   const socket = io(`${options.bridgeUrl}${RUNTIME_BRIDGE_NAMESPACE}`, {
     auth: {
@@ -96407,9 +96563,16 @@ async function runAgentBridgeSocket(options) {
     writeOutput: options.writeOutput,
     runtimeLogger: options.runtimeLogger
   });
+  const terminalAuthRecovery = createTerminalAuthRecoveryController({
+    socket,
+    token: options.token,
+    writeOutput: options.writeOutput,
+    runtimeLogger: options.runtimeLogger
+  });
   let hasConnected = false;
+  let shutdown = null;
   await new Promise((resolve6, reject) => {
-    const shutdown = () => {
+    shutdown = () => {
       reconnectLoop.stop();
       handler?.shutdown?.();
       socket.disconnect();
@@ -96421,6 +96584,9 @@ async function runAgentBridgeSocket(options) {
       if (terminalAuthDrain.handleConnectError(error51)) {
         return;
       }
+      if (terminalAuthRecovery.handleConnectError(error51)) {
+        return;
+      }
       if (!hasConnected) {
         socket.disconnect();
         if (isTerminalAuthError(error51)) {
@@ -96432,11 +96598,17 @@ async function runAgentBridgeSocket(options) {
       }
       if (isTerminalAuthError(error51)) {
         reconnectLoop.stop();
-        void terminalAuthDrain.begin().catch((drainError) => {
+        void terminalAuthRecovery.begin().catch(async (recoveryError) => {
           options.writeOutput?.(
-            `agent_bridge_terminal_auth_drain_failed error=${errorMessage(drainError)}`
+            `agent_bridge_terminal_auth_recovery_failed error=${errorMessage(recoveryError)}`
           );
-        }).finally(() => {
+          try {
+            await terminalAuthDrain.begin();
+          } catch (drainError) {
+            options.writeOutput?.(
+              `agent_bridge_terminal_auth_drain_failed error=${errorMessage(drainError)}`
+            );
+          }
           socket.disconnect();
           reject(new AgentBridgeTerminalAuthError(error51.message));
         });
@@ -96455,6 +96627,9 @@ async function runAgentBridgeSocket(options) {
       if (terminalAuthDrain.handleDisconnect()) {
         return;
       }
+      if (terminalAuthRecovery.handleDisconnect()) {
+        return;
+      }
       reconnectLoop.start();
     });
     socket.on(
@@ -96497,6 +96672,7 @@ async function runAgentBridgeSocket(options) {
       if (terminalAuthDrain.handleConnected(rawContext)) {
         return;
       }
+      terminalAuthRecovery.handleConnected();
       const context = RuntimeBridgeConnectedPayloadSchema.parse(rawContext);
       if (!handler) {
         reject(new Error("Bridge connected before bootstrap completed"));
@@ -96581,6 +96757,13 @@ async function runAgentBridgeSocket(options) {
         );
       });
     });
+  }).finally(() => {
+    reconnectLoop.stop();
+    socket.disconnect();
+    if (shutdown) {
+      process.off("SIGINT", shutdown);
+      process.off("SIGTERM", shutdown);
+    }
   });
 }
 function isTerminalAuthError(error51) {
@@ -96743,6 +96926,128 @@ function createReconnectLoop(socket) {
   };
   return { start, stop };
 }
+function createTerminalAuthRecoveryController(input) {
+  let state = null;
+  const settle = (callback) => {
+    const current = state;
+    if (!current) {
+      return;
+    }
+    clearTimeout(current.timeout);
+    if (current.redialTimer) {
+      clearTimeout(current.redialTimer);
+    }
+    state = null;
+    input.socket.auth = { token: input.token };
+    callback();
+  };
+  const scheduleRedial = () => {
+    const current = state;
+    if (!current || current.redialTimer) {
+      return;
+    }
+    current.redialTimer = setTimeout(() => {
+      current.redialTimer = null;
+      if (state !== current) {
+        return;
+      }
+      if (input.socket.connected) {
+        input.socket.disconnect();
+      }
+      input.socket.connect();
+    }, AGENT_BRIDGE_TERMINAL_AUTH_RECOVERY_REDIAL_MS);
+    current.redialTimer.unref?.();
+  };
+  const begin = () => {
+    if (state) {
+      return state.promise;
+    }
+    const startedAt = Date.now();
+    let resolveRecovery = () => {
+    };
+    let rejectRecovery = () => {
+    };
+    const promise2 = new Promise((resolve6, reject) => {
+      resolveRecovery = resolve6;
+      rejectRecovery = reject;
+    });
+    const current = {
+      promise: promise2,
+      redialTimer: null,
+      reject: rejectRecovery,
+      resolve: resolveRecovery,
+      startedAt,
+      timeout: setTimeout(() => {
+        if (state !== current) {
+          return;
+        }
+        settle(
+          () => current.reject(
+            new Error(
+              `Timed out recovering bridge terminal auth after ${AGENT_BRIDGE_TERMINAL_AUTH_RECOVERY_TIMEOUT_MS}ms`
+            )
+          )
+        );
+      }, AGENT_BRIDGE_TERMINAL_AUTH_RECOVERY_TIMEOUT_MS)
+    };
+    current.timeout.unref?.();
+    state = current;
+    input.writeOutput?.("agent_bridge_terminal_auth_recovery_started");
+    input.runtimeLogger?.warn("agent_bridge_terminal_auth_recovery_started");
+    input.socket.auth = {
+      token: input.token,
+      terminalAuthRecovery: true
+    };
+    input.socket.connect();
+    return promise2;
+  };
+  const handleConnected = () => {
+    const current = state;
+    if (!current) {
+      return false;
+    }
+    settle(() => {
+      const durationMs = Date.now() - current.startedAt;
+      input.writeOutput?.(
+        `agent_bridge_terminal_auth_recovery_completed duration_ms=${durationMs}`
+      );
+      input.runtimeLogger?.warn(
+        "agent_bridge_terminal_auth_recovery_completed",
+        { duration_ms: durationMs }
+      );
+      current.resolve();
+    });
+    return true;
+  };
+  const handleConnectError = (error51) => {
+    const current = state;
+    if (!current) {
+      return false;
+    }
+    if (isTerminalAuthError(error51)) {
+      settle(() => current.reject(error51));
+      return true;
+    }
+    input.writeOutput?.(
+      `agent_bridge_terminal_auth_recovery_connect_error error=${error51.message}`
+    );
+    scheduleRedial();
+    return true;
+  };
+  const handleDisconnect = () => {
+    if (!state) {
+      return false;
+    }
+    scheduleRedial();
+    return true;
+  };
+  return {
+    begin,
+    handleConnected,
+    handleConnectError,
+    handleDisconnect
+  };
+}
 function createTerminalAuthDrainController(input) {
   let terminalAuthExit = false;
   let state = null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autohq/cli",
-  "version": "0.1.568",
+  "version": "0.1.570",
   "license": "SEE LICENSE IN README.md",
   "publishConfig": {
     "access": "public"