@autohq/cli 0.1.608 → 0.1.610

package/dist/agent-bridge.js

@@ -37751,7 +37751,7 @@ Object.assign(lookup, {
 // package.json
 var package_default = {
   name: "@autohq/cli",
-  version: "0.1.608",
+  version: "0.1.610",
   license: "SEE LICENSE IN README.md",
   publishConfig: {
     access: "public"
@@ -38969,6 +38969,8 @@ var AuthScopeSchema = external_exports.enum([
   "tools:write",
   "environments:read",
   "environments:write",
+  "runtimes:read",
+  "runtimes:write",
   "profiles:read",
   "profiles:write",
   "sessions:read",
@@ -39104,6 +39106,7 @@ function normalizePersistedAuthClient(value2) {
 }
 var SERVICE_ACCOUNT_READ_ONLY_SCOPES = [
   "environments:read",
+  "runtimes:read",
   "tools:read",
   "agents:read",
   "sessions:read",
@@ -42197,6 +42200,270 @@ var SecretRevealResponseSchema = external_exports.object({
   value: external_exports.string()
 });
 
+// ../../packages/schemas/src/environments.ts
+var RESOURCE_KIND_ENVIRONMENT = "environment";
+var CURRENT_SANDBOX_USER_HOME = "/home/user";
+var LEGACY_SANDBOX_USER_HOMES = ["/home/auto", "/home/node"];
+var STORED_SANDBOX_USER_HOMES = [
+  CURRENT_SANDBOX_USER_HOME,
+  ...LEGACY_SANDBOX_USER_HOMES
+];
+var EnvironmentSetupCachePathSchema = external_exports.string().trim().refine((value2) => isSafeSandboxUserHomePath(value2), {
+  message: `Expected an absolute path under ${CURRENT_SANDBOX_USER_HOME}`
+});
+var StoredEnvironmentSetupCachePathSchema = external_exports.string().trim().refine(
+  (value2) => isSafeSandboxUserHomePath(value2, {
+    allowedHomes: STORED_SANDBOX_USER_HOMES
+  }),
+  {
+    message: `Expected an absolute path under ${CURRENT_SANDBOX_USER_HOME}`
+  }
+);
+var EnvironmentImageSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({
+    kind: external_exports.literal("preset"),
+    name: ResourceNameSchema
+  }).strict(),
+  external_exports.object({
+    kind: external_exports.literal("base"),
+    ref: external_exports.string().trim().min(1).max(512).refine(isSafeBaseImageRef, {
+      message: "Expected a single Docker/OCI image reference"
+    })
+  }).strict()
+]);
+var StoredEnvironmentImageSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({
+    kind: external_exports.literal("preset"),
+    name: external_exports.string().trim().min(1)
+  }).strict(),
+  external_exports.object({
+    kind: external_exports.literal("base"),
+    ref: external_exports.string().trim().min(1).refine(isSafeBaseImageRef, {
+      message: "Expected a single Docker/OCI image reference"
+    })
+  }).strict()
+]);
+var ENVIRONMENT_APPROVALS_MODES = ["bypass", "prompt"];
+var EnvironmentApprovalsSchema = external_exports.enum(ENVIRONMENT_APPROVALS_MODES);
+var EnvironmentSetupSchema = environmentSetupSchema(
+  StoredEnvironmentSetupCachePathSchema
+);
+var EnvironmentApplySetupSchema = environmentSetupSchema(
+  EnvironmentSetupCachePathSchema
+);
+var EnvironmentSetupCacheSchema = external_exports.object({
+  ttl: external_exports.string().trim().refine(isSetupCacheTtl, {
+    message: "Expected a positive setup cache TTL such as 30m, 24h, or 7d"
+  })
+}).strict();
+var EnvironmentResourcesSchema = external_exports.object({
+  cpuCount: external_exports.number().int().min(1).optional(),
+  memoryMB: external_exports.number().int().min(128).optional()
+}).strict().refine(
+  (resources) => resources.cpuCount !== void 0 || resources.memoryMB !== void 0,
+  {
+    message: "Expected at least one runtime resource setting"
+  }
+);
+var EnvironmentSpecSchema = environmentSpecSchema({
+  imageSchema: StoredEnvironmentImageSchema,
+  setupSchema: EnvironmentSetupSchema
+});
+var EnvironmentApplySpecSchema = environmentSpecSchema({
+  imageSchema: EnvironmentImageSchema,
+  setupSchema: EnvironmentApplySetupSchema
+});
+var EnvironmentCandidateSpecSchema = EnvironmentApplySpecSchema;
+var EnvironmentResourceSchema = resourceEnvelopeSchema(
+  EnvironmentSpecSchema
+);
+var EnvironmentApplyRequestSchema = resourceApplySchema(
+  EnvironmentApplySpecSchema
+);
+function environmentSetupSchema(cachePathSchema) {
+  return external_exports.object({
+    name: ResourceNameSchema,
+    commands: external_exports.array(external_exports.string().trim().min(1)).min(1),
+    cache: external_exports.object({
+      key: ResourceNameSchema.optional(),
+      files: external_exports.array(
+        external_exports.string().trim().refine(isSafeRelativePath, {
+          message: "Expected a relative path without traversal"
+        })
+      ).default([]),
+      paths: external_exports.array(cachePathSchema).default([])
+    }).strict().default({ files: [], paths: [] })
+  }).strict();
+}
+function environmentSpecSchema({
+  imageSchema,
+  setupSchema
+}) {
+  return external_exports.object({
+    image: imageSchema,
+    env: SecretEnvSchema.default({}),
+    resources: EnvironmentResourcesSchema.optional(),
+    steps: external_exports.array(external_exports.string()).default([]),
+    setup: external_exports.array(setupSchema).default([]),
+    setupCache: EnvironmentSetupCacheSchema.optional(),
+    // Optional rather than defaulted: a default would materialize the key
+    // into stored specs and session environment snapshots the moment the web
+    // app deploys, and this strict schema on a not-yet-deployed worker would
+    // reject those rows (web and workers do not deploy atomically). Absent
+    // means `bypass`; consumers default at the read boundary.
+    approvals: EnvironmentApprovalsSchema.optional()
+  }).strict();
+}
+function isSafeSandboxUserHomePath(value2, options = {}) {
+  return (options.allowedHomes ?? [CURRENT_SANDBOX_USER_HOME]).some(
+    (home) => isSafePathUnderHome(value2, home)
+  );
+}
+function isSafePathUnderHome(value2, home) {
+  const prefix = `${home}/`;
+  if (!value2.startsWith(prefix)) {
+    return false;
+  }
+  const relative2 = value2.slice(prefix.length);
+  return relative2.split("/").every((segment) => segment !== "" && segment !== "." && segment !== "..");
+}
+function isSafeRelativePath(value2) {
+  if (!value2 || value2.startsWith("/")) {
+    return false;
+  }
+  return value2.split("/").every((segment) => segment !== "" && segment !== "." && segment !== "..");
+}
+function isSafeBaseImageRef(value2) {
+  return !value2.startsWith("-") && /^[^\s#\\]+$/.test(value2);
+}
+function isSetupCacheTtl(value2) {
+  return /^[1-9][0-9]*(s|m|h|d)$/.test(value2);
+}
+
+// ../../packages/schemas/src/hosted-runtimes.ts
+var HOSTED_RUNTIME_STATUSES = [
+  "queued",
+  "provisioning",
+  "running",
+  "closing",
+  "closed"
+];
+var HOSTED_RUNTIME_OUTCOMES = [
+  "succeeded",
+  "failed",
+  "cancelled"
+];
+var HOSTED_RUNTIME_COMMAND_STATUSES = [
+  "pending",
+  "running",
+  "succeeded",
+  "failed",
+  "cancelled"
+];
+var HOSTED_RUNTIME_CLOSE_REASONS = [
+  "completed",
+  "command_failed",
+  "provision_failed",
+  "requested",
+  "internal_error"
+];
+var HOSTED_RUNTIME_MAX_COMMAND_BUDGET_SECONDS = 45 * 60;
+var HostedRuntimeEnvironmentInputSchema = external_exports.discriminatedUnion(
+  "kind",
+  [
+    external_exports.object({
+      kind: external_exports.literal("inline"),
+      spec: EnvironmentCandidateSpecSchema
+    }).strict(),
+    external_exports.object({
+      kind: external_exports.literal("applied"),
+      name: ResourceNameSchema
+    }).strict()
+  ]
+);
+var HostedRuntimeEnvironmentSourceSchema = external_exports.discriminatedUnion(
+  "kind",
+  [
+    external_exports.object({ kind: external_exports.literal("inline") }).strict(),
+    external_exports.object({
+      kind: external_exports.literal("applied"),
+      name: ResourceNameSchema,
+      resourceId: external_exports.string().trim().min(1),
+      generation: external_exports.number().int().positive()
+    }).strict()
+  ]
+);
+var HostedRuntimeEnvironmentSnapshotSchema = external_exports.object({
+  source: HostedRuntimeEnvironmentSourceSchema,
+  spec: EnvironmentSpecSchema
+}).strict();
+var HostedRuntimeCommandInputSchema = external_exports.object({
+  command: external_exports.string().trim().min(1).max(4096),
+  timeoutSeconds: external_exports.number().int().min(1).max(300).default(60)
+}).strict();
+var HostedRuntimeIdempotencyKeySchema = external_exports.string().trim().min(1).max(200);
+var CreateHostedRuntimeRequestSchema = external_exports.object({
+  environment: HostedRuntimeEnvironmentInputSchema,
+  commands: external_exports.array(HostedRuntimeCommandInputSchema).min(1).max(20)
+}).strict().superRefine((request, context) => {
+  const totalTimeoutSeconds = request.commands.reduce(
+    (total, command) => total + command.timeoutSeconds,
+    0
+  );
+  if (totalTimeoutSeconds > HOSTED_RUNTIME_MAX_COMMAND_BUDGET_SECONDS) {
+    context.addIssue({
+      code: "custom",
+      message: `Total command timeout must not exceed ${HOSTED_RUNTIME_MAX_COMMAND_BUDGET_SECONDS} seconds`,
+      path: ["commands"]
+    });
+  }
+});
+var HostedRuntimeStatusSchema = external_exports.enum(HOSTED_RUNTIME_STATUSES);
+var HostedRuntimeOutcomeSchema = external_exports.enum(HOSTED_RUNTIME_OUTCOMES);
+var HostedRuntimeCommandStatusSchema = external_exports.enum(
+  HOSTED_RUNTIME_COMMAND_STATUSES
+);
+var HostedRuntimeCloseReasonSchema = external_exports.enum(
+  HOSTED_RUNTIME_CLOSE_REASONS
+);
+var HostedRuntimeCommandRecordSchema = external_exports.object({
+  ordinal: external_exports.number().int().positive(),
+  command: external_exports.string(),
+  timeoutSeconds: external_exports.number().int().positive(),
+  status: HostedRuntimeCommandStatusSchema,
+  startedAt: external_exports.string().datetime().nullable(),
+  finishedAt: external_exports.string().datetime().nullable(),
+  durationMs: external_exports.number().int().nonnegative().nullable(),
+  exitCode: external_exports.number().int().nullable(),
+  stdout: external_exports.string().nullable(),
+  stderr: external_exports.string().nullable(),
+  error: external_exports.string().nullable()
+}).strict();
+var HostedRuntimeRecordSchema = external_exports.object({
+  id: RuntimeIdSchema2,
+  status: HostedRuntimeStatusSchema,
+  outcome: HostedRuntimeOutcomeSchema.nullable(),
+  environment: HostedRuntimeEnvironmentSourceSchema,
+  commands: external_exports.array(HostedRuntimeCommandRecordSchema),
+  error: external_exports.string().nullable(),
+  closeReason: HostedRuntimeCloseReasonSchema.nullable(),
+  closeRequestedAt: external_exports.string().datetime().nullable(),
+  startedAt: external_exports.string().datetime().nullable(),
+  finishedAt: external_exports.string().datetime().nullable(),
+  createdAt: external_exports.string().datetime(),
+  updatedAt: external_exports.string().datetime()
+}).strict();
+var HostedRuntimeDispatchStatusSchema = external_exports.enum([
+  "started",
+  "deferred"
+]);
+var HostedRuntimeReceiptSchema = external_exports.object({
+  runtime: HostedRuntimeRecordSchema,
+  workflowId: external_exports.string().trim().min(1),
+  dispatchStatus: HostedRuntimeDispatchStatusSchema
+}).strict();
+var HostedRuntimeWorkflowInputSchema = external_exports.object({ runtimeId: RuntimeIdSchema2 }).strip();
+
 // ../../packages/schemas/src/session-bindings.ts
 var BINDING_TARGET_TYPES = [
   "github.pull_request",
@@ -43980,117 +44247,6 @@ var IdentitySpecSchema = AgentIdentitySchema;
 var IdentityResourceSchema = resourceEnvelopeSchema(IdentitySpecSchema);
 var IdentityApplyRequestSchema = resourceApplySchema(IdentitySpecSchema);
 
-// ../../packages/schemas/src/environments.ts
-var RESOURCE_KIND_ENVIRONMENT = "environment";
-var CURRENT_SANDBOX_USER_HOME = "/home/user";
-var LEGACY_SANDBOX_USER_HOMES = ["/home/auto", "/home/node"];
-var STORED_SANDBOX_USER_HOMES = [
-  CURRENT_SANDBOX_USER_HOME,
-  ...LEGACY_SANDBOX_USER_HOMES
-];
-var EnvironmentSetupCachePathSchema = external_exports.string().trim().refine((value2) => isSafeSandboxUserHomePath(value2), {
-  message: `Expected an absolute path under ${CURRENT_SANDBOX_USER_HOME}`
-});
-var StoredEnvironmentSetupCachePathSchema = external_exports.string().trim().refine(
-  (value2) => isSafeSandboxUserHomePath(value2, {
-    allowedHomes: STORED_SANDBOX_USER_HOMES
-  }),
-  {
-    message: `Expected an absolute path under ${CURRENT_SANDBOX_USER_HOME}`
-  }
-);
-var EnvironmentImageSchema = external_exports.object({
-  kind: external_exports.literal("preset"),
-  name: ResourceNameSchema
-}).strict();
-var ENVIRONMENT_APPROVALS_MODES = ["bypass", "prompt"];
-var EnvironmentApprovalsSchema = external_exports.enum(ENVIRONMENT_APPROVALS_MODES);
-var EnvironmentSetupSchema = environmentSetupSchema(
-  StoredEnvironmentSetupCachePathSchema
-);
-var EnvironmentApplySetupSchema = environmentSetupSchema(
-  EnvironmentSetupCachePathSchema
-);
-var EnvironmentSetupCacheSchema = external_exports.object({
-  ttl: external_exports.string().trim().refine(isSetupCacheTtl, {
-    message: "Expected a positive setup cache TTL such as 30m, 24h, or 7d"
-  })
-}).strict();
-var EnvironmentResourcesSchema = external_exports.object({
-  cpuCount: external_exports.number().int().min(1).optional(),
-  memoryMB: external_exports.number().int().min(128).optional()
-}).strict().refine(
-  (resources) => resources.cpuCount !== void 0 || resources.memoryMB !== void 0,
-  {
-    message: "Expected at least one runtime resource setting"
-  }
-);
-var EnvironmentSpecSchema = environmentSpecSchema(
-  EnvironmentSetupSchema
-);
-var EnvironmentApplySpecSchema = environmentSpecSchema(
-  EnvironmentApplySetupSchema
-);
-var EnvironmentResourceSchema = resourceEnvelopeSchema(
-  EnvironmentSpecSchema
-);
-var EnvironmentApplyRequestSchema = resourceApplySchema(
-  EnvironmentApplySpecSchema
-);
-function environmentSetupSchema(cachePathSchema) {
-  return external_exports.object({
-    name: ResourceNameSchema,
-    commands: external_exports.array(external_exports.string().trim().min(1)).min(1),
-    cache: external_exports.object({
-      key: ResourceNameSchema.optional(),
-      files: external_exports.array(
-        external_exports.string().trim().refine(isSafeRelativePath, {
-          message: "Expected a relative path without traversal"
-        })
-      ).default([]),
-      paths: external_exports.array(cachePathSchema).default([])
-    }).strict().default({ files: [], paths: [] })
-  }).strict();
-}
-function environmentSpecSchema(setupSchema) {
-  return external_exports.object({
-    image: EnvironmentImageSchema,
-    env: SecretEnvSchema.default({}),
-    resources: EnvironmentResourcesSchema.optional(),
-    steps: external_exports.array(external_exports.string()).default([]),
-    setup: external_exports.array(setupSchema).default([]),
-    setupCache: EnvironmentSetupCacheSchema.optional(),
-    // Optional rather than defaulted: a default would materialize the key
-    // into stored specs and session environment snapshots the moment the web
-    // app deploys, and this strict schema on a not-yet-deployed worker would
-    // reject those rows (web and workers do not deploy atomically). Absent
-    // means `bypass`; consumers default at the read boundary.
-    approvals: EnvironmentApprovalsSchema.optional()
-  }).strict();
-}
-function isSafeSandboxUserHomePath(value2, options = {}) {
-  return (options.allowedHomes ?? [CURRENT_SANDBOX_USER_HOME]).some(
-    (home) => isSafePathUnderHome(value2, home)
-  );
-}
-function isSafePathUnderHome(value2, home) {
-  const prefix = `${home}/`;
-  if (!value2.startsWith(prefix)) {
-    return false;
-  }
-  const relative2 = value2.slice(prefix.length);
-  return relative2.split("/").every((segment) => segment !== "" && segment !== "." && segment !== "..");
-}
-function isSafeRelativePath(value2) {
-  if (!value2 || value2.startsWith("/")) {
-    return false;
-  }
-  return value2.split("/").every((segment) => segment !== "" && segment !== "." && segment !== "..");
-}
-function isSetupCacheTtl(value2) {
-  return /^[1-9][0-9]*(s|m|h|d)$/.test(value2);
-}
-
 // ../../packages/schemas/src/environment-setup-failures.ts
 var EnvironmentSetupStepFailureDiagnosticSchema = external_exports.object({
   kind: external_exports.literal("environment_setup_step_failure"),

package/dist/index.js

@@ -15474,6 +15474,8 @@ var init_auth = __esm({
       "tools:write",
       "environments:read",
       "environments:write",
+      "runtimes:read",
+      "runtimes:write",
       "profiles:read",
       "profiles:write",
       "sessions:read",
@@ -15592,6 +15594,7 @@ var init_auth = __esm({
     });
     SERVICE_ACCOUNT_READ_ONLY_SCOPES = [
       "environments:read",
+      "runtimes:read",
       "tools:read",
       "agents:read",
       "sessions:read",
@@ -18943,6 +18946,289 @@ var init_secrets = __esm({
   }
 });
 
+// ../../packages/schemas/src/environments.ts
+function environmentSetupSchema(cachePathSchema) {
+  return external_exports.object({
+    name: ResourceNameSchema,
+    commands: external_exports.array(external_exports.string().trim().min(1)).min(1),
+    cache: external_exports.object({
+      key: ResourceNameSchema.optional(),
+      files: external_exports.array(
+        external_exports.string().trim().refine(isSafeRelativePath, {
+          message: "Expected a relative path without traversal"
+        })
+      ).default([]),
+      paths: external_exports.array(cachePathSchema).default([])
+    }).strict().default({ files: [], paths: [] })
+  }).strict();
+}
+function environmentSpecSchema({
+  imageSchema,
+  setupSchema
+}) {
+  return external_exports.object({
+    image: imageSchema,
+    env: SecretEnvSchema.default({}),
+    resources: EnvironmentResourcesSchema.optional(),
+    steps: external_exports.array(external_exports.string()).default([]),
+    setup: external_exports.array(setupSchema).default([]),
+    setupCache: EnvironmentSetupCacheSchema.optional(),
+    // Optional rather than defaulted: a default would materialize the key
+    // into stored specs and session environment snapshots the moment the web
+    // app deploys, and this strict schema on a not-yet-deployed worker would
+    // reject those rows (web and workers do not deploy atomically). Absent
+    // means `bypass`; consumers default at the read boundary.
+    approvals: EnvironmentApprovalsSchema.optional()
+  }).strict();
+}
+function isSafeSandboxUserHomePath(value, options = {}) {
+  return (options.allowedHomes ?? [CURRENT_SANDBOX_USER_HOME]).some(
+    (home) => isSafePathUnderHome(value, home)
+  );
+}
+function isSafePathUnderHome(value, home) {
+  const prefix = `${home}/`;
+  if (!value.startsWith(prefix)) {
+    return false;
+  }
+  const relative2 = value.slice(prefix.length);
+  return relative2.split("/").every((segment) => segment !== "" && segment !== "." && segment !== "..");
+}
+function isSafeRelativePath(value) {
+  if (!value || value.startsWith("/")) {
+    return false;
+  }
+  return value.split("/").every((segment) => segment !== "" && segment !== "." && segment !== "..");
+}
+function isSafeBaseImageRef(value) {
+  return !value.startsWith("-") && /^[^\s#\\]+$/.test(value);
+}
+function isSetupCacheTtl(value) {
+  return /^[1-9][0-9]*(s|m|h|d)$/.test(value);
+}
+var RESOURCE_KIND_ENVIRONMENT, CURRENT_SANDBOX_USER_HOME, LEGACY_SANDBOX_USER_HOMES, STORED_SANDBOX_USER_HOMES, EnvironmentSetupCachePathSchema, StoredEnvironmentSetupCachePathSchema, EnvironmentImageSchema, StoredEnvironmentImageSchema, ENVIRONMENT_APPROVALS_MODES, EnvironmentApprovalsSchema, EnvironmentSetupSchema, EnvironmentApplySetupSchema, EnvironmentSetupCacheSchema, EnvironmentResourcesSchema, EnvironmentSpecSchema, EnvironmentApplySpecSchema, EnvironmentCandidateSpecSchema, EnvironmentResourceSchema, EnvironmentApplyRequestSchema;
+var init_environments = __esm({
+  "../../packages/schemas/src/environments.ts"() {
+    "use strict";
+    init_zod();
+    init_resources();
+    init_secrets();
+    RESOURCE_KIND_ENVIRONMENT = "environment";
+    CURRENT_SANDBOX_USER_HOME = "/home/user";
+    LEGACY_SANDBOX_USER_HOMES = ["/home/auto", "/home/node"];
+    STORED_SANDBOX_USER_HOMES = [
+      CURRENT_SANDBOX_USER_HOME,
+      ...LEGACY_SANDBOX_USER_HOMES
+    ];
+    EnvironmentSetupCachePathSchema = external_exports.string().trim().refine((value) => isSafeSandboxUserHomePath(value), {
+      message: `Expected an absolute path under ${CURRENT_SANDBOX_USER_HOME}`
+    });
+    StoredEnvironmentSetupCachePathSchema = external_exports.string().trim().refine(
+      (value) => isSafeSandboxUserHomePath(value, {
+        allowedHomes: STORED_SANDBOX_USER_HOMES
+      }),
+      {
+        message: `Expected an absolute path under ${CURRENT_SANDBOX_USER_HOME}`
+      }
+    );
+    EnvironmentImageSchema = external_exports.discriminatedUnion("kind", [
+      external_exports.object({
+        kind: external_exports.literal("preset"),
+        name: ResourceNameSchema
+      }).strict(),
+      external_exports.object({
+        kind: external_exports.literal("base"),
+        ref: external_exports.string().trim().min(1).max(512).refine(isSafeBaseImageRef, {
+          message: "Expected a single Docker/OCI image reference"
+        })
+      }).strict()
+    ]);
+    StoredEnvironmentImageSchema = external_exports.discriminatedUnion("kind", [
+      external_exports.object({
+        kind: external_exports.literal("preset"),
+        name: external_exports.string().trim().min(1)
+      }).strict(),
+      external_exports.object({
+        kind: external_exports.literal("base"),
+        ref: external_exports.string().trim().min(1).refine(isSafeBaseImageRef, {
+          message: "Expected a single Docker/OCI image reference"
+        })
+      }).strict()
+    ]);
+    ENVIRONMENT_APPROVALS_MODES = ["bypass", "prompt"];
+    EnvironmentApprovalsSchema = external_exports.enum(ENVIRONMENT_APPROVALS_MODES);
+    EnvironmentSetupSchema = environmentSetupSchema(
+      StoredEnvironmentSetupCachePathSchema
+    );
+    EnvironmentApplySetupSchema = environmentSetupSchema(
+      EnvironmentSetupCachePathSchema
+    );
+    EnvironmentSetupCacheSchema = external_exports.object({
+      ttl: external_exports.string().trim().refine(isSetupCacheTtl, {
+        message: "Expected a positive setup cache TTL such as 30m, 24h, or 7d"
+      })
+    }).strict();
+    EnvironmentResourcesSchema = external_exports.object({
+      cpuCount: external_exports.number().int().min(1).optional(),
+      memoryMB: external_exports.number().int().min(128).optional()
+    }).strict().refine(
+      (resources) => resources.cpuCount !== void 0 || resources.memoryMB !== void 0,
+      {
+        message: "Expected at least one runtime resource setting"
+      }
+    );
+    EnvironmentSpecSchema = environmentSpecSchema({
+      imageSchema: StoredEnvironmentImageSchema,
+      setupSchema: EnvironmentSetupSchema
+    });
+    EnvironmentApplySpecSchema = environmentSpecSchema({
+      imageSchema: EnvironmentImageSchema,
+      setupSchema: EnvironmentApplySetupSchema
+    });
+    EnvironmentCandidateSpecSchema = EnvironmentApplySpecSchema;
+    EnvironmentResourceSchema = resourceEnvelopeSchema(
+      EnvironmentSpecSchema
+    );
+    EnvironmentApplyRequestSchema = resourceApplySchema(
+      EnvironmentApplySpecSchema
+    );
+  }
+});
+
+// ../../packages/schemas/src/hosted-runtimes.ts
+var HOSTED_RUNTIME_STATUSES, HOSTED_RUNTIME_OUTCOMES, HOSTED_RUNTIME_COMMAND_STATUSES, HOSTED_RUNTIME_CLOSE_REASONS, HOSTED_RUNTIME_MAX_COMMAND_BUDGET_SECONDS, HostedRuntimeEnvironmentInputSchema, HostedRuntimeEnvironmentSourceSchema, HostedRuntimeEnvironmentSnapshotSchema, HostedRuntimeCommandInputSchema, HostedRuntimeIdempotencyKeySchema, CreateHostedRuntimeRequestSchema, HostedRuntimeStatusSchema, HostedRuntimeOutcomeSchema, HostedRuntimeCommandStatusSchema, HostedRuntimeCloseReasonSchema, HostedRuntimeCommandRecordSchema, HostedRuntimeRecordSchema, HostedRuntimeDispatchStatusSchema, HostedRuntimeReceiptSchema, HostedRuntimeWorkflowInputSchema;
+var init_hosted_runtimes = __esm({
+  "../../packages/schemas/src/hosted-runtimes.ts"() {
+    "use strict";
+    init_zod();
+    init_environments();
+    init_ids();
+    init_resources();
+    HOSTED_RUNTIME_STATUSES = [
+      "queued",
+      "provisioning",
+      "running",
+      "closing",
+      "closed"
+    ];
+    HOSTED_RUNTIME_OUTCOMES = [
+      "succeeded",
+      "failed",
+      "cancelled"
+    ];
+    HOSTED_RUNTIME_COMMAND_STATUSES = [
+      "pending",
+      "running",
+      "succeeded",
+      "failed",
+      "cancelled"
+    ];
+    HOSTED_RUNTIME_CLOSE_REASONS = [
+      "completed",
+      "command_failed",
+      "provision_failed",
+      "requested",
+      "internal_error"
+    ];
+    HOSTED_RUNTIME_MAX_COMMAND_BUDGET_SECONDS = 45 * 60;
+    HostedRuntimeEnvironmentInputSchema = external_exports.discriminatedUnion(
+      "kind",
+      [
+        external_exports.object({
+          kind: external_exports.literal("inline"),
+          spec: EnvironmentCandidateSpecSchema
+        }).strict(),
+        external_exports.object({
+          kind: external_exports.literal("applied"),
+          name: ResourceNameSchema
+        }).strict()
+      ]
+    );
+    HostedRuntimeEnvironmentSourceSchema = external_exports.discriminatedUnion(
+      "kind",
+      [
+        external_exports.object({ kind: external_exports.literal("inline") }).strict(),
+        external_exports.object({
+          kind: external_exports.literal("applied"),
+          name: ResourceNameSchema,
+          resourceId: external_exports.string().trim().min(1),
+          generation: external_exports.number().int().positive()
+        }).strict()
+      ]
+    );
+    HostedRuntimeEnvironmentSnapshotSchema = external_exports.object({
+      source: HostedRuntimeEnvironmentSourceSchema,
+      spec: EnvironmentSpecSchema
+    }).strict();
+    HostedRuntimeCommandInputSchema = external_exports.object({
+      command: external_exports.string().trim().min(1).max(4096),
+      timeoutSeconds: external_exports.number().int().min(1).max(300).default(60)
+    }).strict();
+    HostedRuntimeIdempotencyKeySchema = external_exports.string().trim().min(1).max(200);
+    CreateHostedRuntimeRequestSchema = external_exports.object({
+      environment: HostedRuntimeEnvironmentInputSchema,
+      commands: external_exports.array(HostedRuntimeCommandInputSchema).min(1).max(20)
+    }).strict().superRefine((request, context) => {
+      const totalTimeoutSeconds = request.commands.reduce(
+        (total, command) => total + command.timeoutSeconds,
+        0
+      );
+      if (totalTimeoutSeconds > HOSTED_RUNTIME_MAX_COMMAND_BUDGET_SECONDS) {
+        context.addIssue({
+          code: "custom",
+          message: `Total command timeout must not exceed ${HOSTED_RUNTIME_MAX_COMMAND_BUDGET_SECONDS} seconds`,
+          path: ["commands"]
+        });
+      }
+    });
+    HostedRuntimeStatusSchema = external_exports.enum(HOSTED_RUNTIME_STATUSES);
+    HostedRuntimeOutcomeSchema = external_exports.enum(HOSTED_RUNTIME_OUTCOMES);
+    HostedRuntimeCommandStatusSchema = external_exports.enum(
+      HOSTED_RUNTIME_COMMAND_STATUSES
+    );
+    HostedRuntimeCloseReasonSchema = external_exports.enum(
+      HOSTED_RUNTIME_CLOSE_REASONS
+    );
+    HostedRuntimeCommandRecordSchema = external_exports.object({
+      ordinal: external_exports.number().int().positive(),
+      command: external_exports.string(),
+      timeoutSeconds: external_exports.number().int().positive(),
+      status: HostedRuntimeCommandStatusSchema,
+      startedAt: external_exports.string().datetime().nullable(),
+      finishedAt: external_exports.string().datetime().nullable(),
+      durationMs: external_exports.number().int().nonnegative().nullable(),
+      exitCode: external_exports.number().int().nullable(),
+      stdout: external_exports.string().nullable(),
+      stderr: external_exports.string().nullable(),
+      error: external_exports.string().nullable()
+    }).strict();
+    HostedRuntimeRecordSchema = external_exports.object({
+      id: RuntimeIdSchema,
+      status: HostedRuntimeStatusSchema,
+      outcome: HostedRuntimeOutcomeSchema.nullable(),
+      environment: HostedRuntimeEnvironmentSourceSchema,
+      commands: external_exports.array(HostedRuntimeCommandRecordSchema),
+      error: external_exports.string().nullable(),
+      closeReason: HostedRuntimeCloseReasonSchema.nullable(),
+      closeRequestedAt: external_exports.string().datetime().nullable(),
+      startedAt: external_exports.string().datetime().nullable(),
+      finishedAt: external_exports.string().datetime().nullable(),
+      createdAt: external_exports.string().datetime(),
+      updatedAt: external_exports.string().datetime()
+    }).strict();
+    HostedRuntimeDispatchStatusSchema = external_exports.enum([
+      "started",
+      "deferred"
+    ]);
+    HostedRuntimeReceiptSchema = external_exports.object({
+      runtime: HostedRuntimeRecordSchema,
+      workflowId: external_exports.string().trim().min(1),
+      dispatchStatus: HostedRuntimeDispatchStatusSchema
+    }).strict();
+    HostedRuntimeWorkflowInputSchema = external_exports.object({ runtimeId: RuntimeIdSchema }).strip();
+  }
+});
+
 // ../../packages/schemas/src/session-bindings.ts
 var BINDING_TARGET_TYPES, TRIGGER_BINDING_TARGET_TYPES, OWNER_RELEASABLE_HELD_BINDING_TARGET_TYPES, OBSERVED_TARGET_EVENT_KEYS, SESSION_BINDING_SOURCES, SESSION_BINDING_STATUSES, SESSION_BINDING_RELEASE_POLICIES, SESSION_BINDING_CONTINUITIES, SESSION_BINDING_RELEASED_BY, BINDING_TRANSITION_CAUSES, BindingTargetTypeSchema, TriggerBindingTargetTypeSchema, OwnerReleasableHeldBindingTargetTypeSchema, SessionBindingSourceSchema, SessionBindingStatusSchema, SessionBindingReleasePolicySchema, SessionBindingContinuitySchema, SessionBindingReleasedBySchema, BindingTransitionCauseSchema, BindingTargetSchema, BINDING_AUTO_BIND_VALUES, BindingAutoBindSchema, AUTO_BIND_LEGAL_TARGETS;
 var init_session_bindings = __esm({
@@ -20883,126 +21169,6 @@ var init_identities = __esm({
   }
 });
 
-// ../../packages/schemas/src/environments.ts
-function environmentSetupSchema(cachePathSchema) {
-  return external_exports.object({
-    name: ResourceNameSchema,
-    commands: external_exports.array(external_exports.string().trim().min(1)).min(1),
-    cache: external_exports.object({
-      key: ResourceNameSchema.optional(),
-      files: external_exports.array(
-        external_exports.string().trim().refine(isSafeRelativePath, {
-          message: "Expected a relative path without traversal"
-        })
-      ).default([]),
-      paths: external_exports.array(cachePathSchema).default([])
-    }).strict().default({ files: [], paths: [] })
-  }).strict();
-}
-function environmentSpecSchema(setupSchema) {
-  return external_exports.object({
-    image: EnvironmentImageSchema,
-    env: SecretEnvSchema.default({}),
-    resources: EnvironmentResourcesSchema.optional(),
-    steps: external_exports.array(external_exports.string()).default([]),
-    setup: external_exports.array(setupSchema).default([]),
-    setupCache: EnvironmentSetupCacheSchema.optional(),
-    // Optional rather than defaulted: a default would materialize the key
-    // into stored specs and session environment snapshots the moment the web
-    // app deploys, and this strict schema on a not-yet-deployed worker would
-    // reject those rows (web and workers do not deploy atomically). Absent
-    // means `bypass`; consumers default at the read boundary.
-    approvals: EnvironmentApprovalsSchema.optional()
-  }).strict();
-}
-function isSafeSandboxUserHomePath(value, options = {}) {
-  return (options.allowedHomes ?? [CURRENT_SANDBOX_USER_HOME]).some(
-    (home) => isSafePathUnderHome(value, home)
-  );
-}
-function isSafePathUnderHome(value, home) {
-  const prefix = `${home}/`;
-  if (!value.startsWith(prefix)) {
-    return false;
-  }
-  const relative2 = value.slice(prefix.length);
-  return relative2.split("/").every((segment) => segment !== "" && segment !== "." && segment !== "..");
-}
-function isSafeRelativePath(value) {
-  if (!value || value.startsWith("/")) {
-    return false;
-  }
-  return value.split("/").every((segment) => segment !== "" && segment !== "." && segment !== "..");
-}
-function isSetupCacheTtl(value) {
-  return /^[1-9][0-9]*(s|m|h|d)$/.test(value);
-}
-var RESOURCE_KIND_ENVIRONMENT, CURRENT_SANDBOX_USER_HOME, LEGACY_SANDBOX_USER_HOMES, STORED_SANDBOX_USER_HOMES, EnvironmentSetupCachePathSchema, StoredEnvironmentSetupCachePathSchema, EnvironmentImageSchema, ENVIRONMENT_APPROVALS_MODES, EnvironmentApprovalsSchema, EnvironmentSetupSchema, EnvironmentApplySetupSchema, EnvironmentSetupCacheSchema, EnvironmentResourcesSchema, EnvironmentSpecSchema, EnvironmentApplySpecSchema, EnvironmentResourceSchema, EnvironmentApplyRequestSchema;
-var init_environments = __esm({
-  "../../packages/schemas/src/environments.ts"() {
-    "use strict";
-    init_zod();
-    init_resources();
-    init_secrets();
-    RESOURCE_KIND_ENVIRONMENT = "environment";
-    CURRENT_SANDBOX_USER_HOME = "/home/user";
-    LEGACY_SANDBOX_USER_HOMES = ["/home/auto", "/home/node"];
-    STORED_SANDBOX_USER_HOMES = [
-      CURRENT_SANDBOX_USER_HOME,
-      ...LEGACY_SANDBOX_USER_HOMES
-    ];
-    EnvironmentSetupCachePathSchema = external_exports.string().trim().refine((value) => isSafeSandboxUserHomePath(value), {
-      message: `Expected an absolute path under ${CURRENT_SANDBOX_USER_HOME}`
-    });
-    StoredEnvironmentSetupCachePathSchema = external_exports.string().trim().refine(
-      (value) => isSafeSandboxUserHomePath(value, {
-        allowedHomes: STORED_SANDBOX_USER_HOMES
-      }),
-      {
-        message: `Expected an absolute path under ${CURRENT_SANDBOX_USER_HOME}`
-      }
-    );
-    EnvironmentImageSchema = external_exports.object({
-      kind: external_exports.literal("preset"),
-      name: ResourceNameSchema
-    }).strict();
-    ENVIRONMENT_APPROVALS_MODES = ["bypass", "prompt"];
-    EnvironmentApprovalsSchema = external_exports.enum(ENVIRONMENT_APPROVALS_MODES);
-    EnvironmentSetupSchema = environmentSetupSchema(
-      StoredEnvironmentSetupCachePathSchema
-    );
-    EnvironmentApplySetupSchema = environmentSetupSchema(
-      EnvironmentSetupCachePathSchema
-    );
-    EnvironmentSetupCacheSchema = external_exports.object({
-      ttl: external_exports.string().trim().refine(isSetupCacheTtl, {
-        message: "Expected a positive setup cache TTL such as 30m, 24h, or 7d"
-      })
-    }).strict();
-    EnvironmentResourcesSchema = external_exports.object({
-      cpuCount: external_exports.number().int().min(1).optional(),
-      memoryMB: external_exports.number().int().min(128).optional()
-    }).strict().refine(
-      (resources) => resources.cpuCount !== void 0 || resources.memoryMB !== void 0,
-      {
-        message: "Expected at least one runtime resource setting"
-      }
-    );
-    EnvironmentSpecSchema = environmentSpecSchema(
-      EnvironmentSetupSchema
-    );
-    EnvironmentApplySpecSchema = environmentSpecSchema(
-      EnvironmentApplySetupSchema
-    );
-    EnvironmentResourceSchema = resourceEnvelopeSchema(
-      EnvironmentSpecSchema
-    );
-    EnvironmentApplyRequestSchema = resourceApplySchema(
-      EnvironmentApplySpecSchema
-    );
-  }
-});
-
 // ../../packages/schemas/src/environment-setup-failures.ts
 var EnvironmentSetupStepFailureDiagnosticSchema, PersistedEnvironmentSetupStepFailureDiagnosticSchema;
 var init_environment_setup_failures = __esm({
@@ -90185,6 +90351,7 @@ var init_src = __esm({
     init_github_sync();
     init_github_credentials();
     init_github_mcp_catalog();
+    init_hosted_runtimes();
     init_identities();
     init_ids();
     init_environments();
@@ -93002,7 +93169,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.608",
+      version: "0.1.610",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"
@@ -99590,7 +99757,7 @@ function EnvironmentsView({
         return {
           id: environment.metadata.uid,
           name: environment.metadata.name,
-          kind: environment.spec.image.name,
+          kind: environment.spec.image.kind === "preset" ? environment.spec.image.name : `base:${environment.spec.image.ref}`,
           target: envEntries.map(([name, value]) => `${name}:${envValueKind(value)}`).join(", "),
           detail: "",
           updatedAt: environment.metadata.updatedAt

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autohq/cli",
-  "version": "0.1.608",
+  "version": "0.1.610",
   "license": "SEE LICENSE IN README.md",
   "publishConfig": {
     "access": "public"