@dam-agents/cli 0.2.5-rc1 → 0.2.6-rc1

package/dist/bin.js

@@ -25469,6 +25469,107 @@ var envVarSchema = external_exports.object({
   value: external_exports.string().max(1e4)
 });
 
+// ../api-server-api/src/modules/skills/schemas.ts
+var skillSourcePathSchema = external_exports.string().transform((p2) => p2.trim().replace(/^\/+|\/+$/g, "")).refine((p2) => !p2.split("/").includes(".."), "path must not contain '..'");
+var skillSourceSchema = external_exports.object({
+  id: external_exports.string(),
+  name: external_exports.string(),
+  gitUrl: external_exports.string(),
+  path: external_exports.string().optional(),
+  /** True when the source is managed by the cluster admin
+   *  (Helm-seeded). Users can't delete it. */
+  system: external_exports.boolean().optional(),
+  /** Present when the source was declared by an agent template
+   *  (spec.skillSources). UI-only hint for the "Agent" badge —
+   *  backend treats template sources as read-only. */
+  fromTemplate: external_exports.object({ templateId: external_exports.string(), templateName: external_exports.string() }).optional(),
+  canPublish: external_exports.boolean().optional()
+});
+var skillPublishResultSchema = external_exports.object({
+  prUrl: external_exports.string().url(),
+  branch: external_exports.string()
+});
+var skillSchema = external_exports.object({
+  source: external_exports.string(),
+  name: external_exports.string(),
+  description: external_exports.string(),
+  version: external_exports.string(),
+  contentHash: external_exports.string()
+});
+var skillRefSchema = external_exports.object({
+  source: external_exports.string(),
+  name: external_exports.string(),
+  version: external_exports.string(),
+  /** Deterministic SHA-256 of the skill directory's file contents at
+   *  install time. Compared to the scanner's contentHash to flag drift.
+   *  Optional for backward compatibility with installs that pre-date
+   *  this field. */
+  contentHash: external_exports.string().optional(),
+  /** Source subdir the skill was installed from, denormalized so the apply
+   *  path resolves the skill dir without re-reading the source. */
+  path: external_exports.string().optional()
+});
+var localSkillSchema = external_exports.object({
+  name: external_exports.string(),
+  description: external_exports.string(),
+  skillPath: external_exports.string()
+});
+var skillPublishRecordSchema = external_exports.object({
+  skillName: external_exports.string(),
+  sourceId: external_exports.string(),
+  sourceName: external_exports.string(),
+  sourceGitUrl: external_exports.string(),
+  prUrl: external_exports.string(),
+  /** ISO 8601 timestamp. */
+  publishedAt: external_exports.string()
+});
+var skillStateOutputSchema = external_exports.object({
+  installed: external_exports.array(skillRefSchema),
+  standalone: external_exports.array(localSkillSchema),
+  instancePublishes: external_exports.array(skillPublishRecordSchema)
+});
+var skillListSourcesInputSchema = external_exports.object({ agentId: external_exports.string().min(1).optional() }).optional();
+var skillCreateSourceInputSchema = external_exports.object({
+  name: external_exports.string().min(1).max(128),
+  gitUrl: external_exports.string().url(),
+  path: skillSourcePathSchema.optional()
+});
+var skillDeleteSourceInputSchema = external_exports.object({
+  id: external_exports.string().min(1)
+});
+var skillRefreshSourceInputSchema = external_exports.object({
+  id: external_exports.string().min(1)
+});
+var skillListInputSchema = external_exports.object({
+  sourceId: external_exports.string().min(1),
+  agentId: external_exports.string().min(1).optional()
+});
+var skillInstallInputSchema = external_exports.object({
+  agentId: external_exports.string().min(1),
+  source: external_exports.string().url(),
+  name: external_exports.string().min(1),
+  version: external_exports.string().min(1),
+  contentHash: external_exports.string().optional()
+});
+var skillUninstallInputSchema = external_exports.object({
+  agentId: external_exports.string().min(1),
+  source: external_exports.string().url(),
+  name: external_exports.string().min(1)
+});
+var skillListLocalInputSchema = external_exports.object({
+  agentId: external_exports.string().min(1)
+});
+var skillStateInputSchema = external_exports.object({
+  agentId: external_exports.string().min(1)
+});
+var skillPublishInputSchema = external_exports.object({
+  agentId: external_exports.string().min(1),
+  sourceId: external_exports.string().min(1),
+  name: external_exports.string().min(1),
+  title: external_exports.string().optional(),
+  body: external_exports.string().optional()
+});
+
 // ../api-server-api/src/modules/templates/schemas.ts
 var templateGetInputSchema = external_exports.object({
   id: external_exports.string().min(1)
@@ -25488,7 +25589,8 @@ var envVarConfigMapSchema = external_exports.object({
 });
 var skillSourceSeedSchema = external_exports.object({
   name: external_exports.string(),
-  gitUrl: external_exports.string()
+  gitUrl: external_exports.string(),
+  path: skillSourcePathSchema.optional()
 });
 var templateCategorySchema = external_exports.enum(["harness", "preconfigured"]).default("harness");
 var templateSpecSchema = external_exports.object({
@@ -25508,6 +25610,8 @@ var templateSpecSchema = external_exports.object({
   // pod can pull the image without the user entering registry credentials.
   imagePullSecretRef: external_exports.string().optional(),
   storageSize: external_exports.string().optional(),
+  runtimeClassName: external_exports.string().optional(),
+  nodeSelector: external_exports.record(external_exports.string(), external_exports.string()).optional(),
   skillSources: external_exports.array(skillSourceSeedSchema).optional()
 }).passthrough();
 
@@ -25525,229 +25629,555 @@ var repoSchema = external_exports.object({
   compatibleTemplates: external_exports.array(external_exports.string()).default([])
 });
 
-// ../api-server-api/src/modules/egress-rules/schemas.ts
-var ruleVerdictSchema = external_exports.enum(["allow", "deny"]);
-var egressPresetSchema = external_exports.enum(["none", "trusted", "all"]);
-var egressRuleListForAgentInputSchema = external_exports.object({
-  agentId: external_exports.string().min(1)
-});
-var egressRuleCurrentPresetInputSchema = external_exports.object({
-  agentId: external_exports.string().min(1)
-});
-var egressRuleCreateInputSchema = external_exports.object({
-  agentId: external_exports.string().min(1),
-  host: external_exports.string().min(1),
-  method: external_exports.string().min(1).default("*"),
-  pathPattern: external_exports.string().min(1).default("*"),
-  verdict: ruleVerdictSchema
-});
-var egressRuleUpdateInputSchema = external_exports.object({
-  id: external_exports.string().min(1),
-  method: external_exports.string().min(1).optional(),
-  pathPattern: external_exports.string().min(1).optional(),
-  verdict: ruleVerdictSchema.optional()
-});
-var egressRuleRevokeInputSchema = external_exports.object({
-  id: external_exports.string().min(1)
-});
-var egressRuleApplyPresetInputSchema = external_exports.object({
-  agentId: external_exports.string().min(1),
-  preset: egressPresetSchema
+// ../agent-runtime-api/src/modules/files/schemas.ts
+var pathSchema = external_exports.string().min(1);
+var fileListDirsInputSchema = external_exports.object({
+  paths: external_exports.array(external_exports.string()).max(500)
 });
-
-// ../api-server-api/src/modules/agents/schemas.ts
-var idSchema = external_exports.object({ id: external_exports.string().min(1) });
-var agentCreateInputSchema = external_exports.object({
-  name: external_exports.string().min(1).refine((n) => !n.startsWith("agent-"), {
-    message: "agent name cannot start with 'agent-' (reserved for IDs)"
-  }),
-  templateId: external_exports.string().optional(),
-  image: external_exports.string().optional(),
-  description: external_exports.string().optional(),
-  env: external_exports.array(envVarSchema).max(64).optional(),
-  secretRef: external_exports.string().optional(),
-  registryCredential: external_exports.object({
-    server: external_exports.string().min(1),
-    username: external_exports.string().min(1),
-    password: external_exports.string().min(1)
-  }).optional(),
-  allowedUserEmails: external_exports.array(external_exports.email()).optional(),
-  egressPreset: egressPresetSchema.optional(),
-  // Optional: clone this public repo (optionally a branch/tag via `ref`) into
-  // the work dir once, via a one-shot `workspace-seed` event. Not enforced
-  // against the `gitRepos` catalog server-side — the clone runs in the
-  // egress-gated agent pod, so this reaches no URL the agent couldn't already
-  // reach itself.
-  gitRepo: external_exports.object({ url: external_exports.url(), ref: external_exports.string().min(1).optional() }).optional(),
-  // Initial grants, settled into the spec at create so credentials ride the
-  // first snapshot and the gateway renders its chains once (no readiness flap).
-  secretIds: external_exports.array(external_exports.string()).optional(),
-  connectionIds: external_exports.array(external_exports.string()).optional()
-}).refine((d2) => d2.templateId !== void 0 || d2.image !== void 0, {
-  message: "Either templateId or image is required"
+var fileReadInputSchema = external_exports.object({ path: pathSchema });
+var fileWriteInputSchema = external_exports.object({
+  path: pathSchema,
+  content: external_exports.string(),
+  expectedMtimeMs: external_exports.number().optional()
 });
-var agentUpdateInputSchema = external_exports.object({
-  id: external_exports.string().min(1),
-  name: external_exports.string().min(1).max(255).optional(),
-  description: external_exports.string().optional(),
-  env: external_exports.array(envVarSchema).max(64).optional(),
-  secretRef: external_exports.string().optional(),
-  allowedUserEmails: external_exports.array(external_exports.email()).optional()
+var fileCreateInputSchema = external_exports.object({
+  path: pathSchema,
+  content: external_exports.string()
 });
-var agentConnectSlackInputSchema = external_exports.object({
-  id: external_exports.string().min(1),
-  slackChannelId: external_exports.string().min(1)
+var fileMkdirInputSchema = external_exports.object({ path: pathSchema });
+var fileRenameInputSchema = external_exports.object({
+  from: pathSchema,
+  to: pathSchema,
+  overwrite: external_exports.boolean().optional()
 });
-var agentConnectTelegramInputSchema = external_exports.object({
-  id: external_exports.string().min(1),
-  botToken: external_exports.string().min(1)
+var fileRemoveInputSchema = external_exports.object({ path: pathSchema });
+var fileUploadInputSchema = external_exports.object({
+  path: pathSchema,
+  contentBase64: external_exports.string(),
+  /** Browser-reported MIME (File.type). Carried in the API for observability
+   *  and forward-compat; server-side reads still detect MIME from magic
+   *  bytes so we don't need to persist this. */
+  contentType: external_exports.string().max(255).optional(),
+  overwrite: external_exports.boolean().optional()
 });
 
-// ../api-server-api/src/modules/schedules/schemas.ts
-var scheduleSessionModeSchema = external_exports.enum(["continuous", "fresh"]);
-var quietWindowSchema = external_exports.object({
-  startTime: external_exports.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/, "HH:MM required"),
-  endTime: external_exports.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/, "HH:MM required"),
-  enabled: external_exports.boolean()
-}).refine((w3) => w3.startTime !== w3.endTime, {
-  message: "startTime and endTime must differ"
-});
-var scheduleListInputSchema = external_exports.object({
-  agentId: external_exports.string().min(1)
-});
-var scheduleGetInputSchema = external_exports.object({
-  id: external_exports.string().min(1)
-});
-var scheduleCreateCronInputSchema = external_exports.object({
+// ../agent-runtime-api/src/modules/skills/schemas.ts
+var skillInstallInputSchema2 = external_exports.object({
+  sourceUrl: external_exports.string().min(1),
   name: external_exports.string().min(1),
-  agentId: external_exports.string().min(1),
-  cron: external_exports.string().min(1),
-  task: external_exports.string().min(1),
-  sessionMode: scheduleSessionModeSchema.optional()
+  version: external_exports.string().min(1),
+  skillPaths: external_exports.array(external_exports.string().min(1)).min(1),
+  path: external_exports.string().optional()
 });
-var scheduleCreateRRuleInputSchema = external_exports.object({
+var skillUninstallInputSchema2 = external_exports.object({
   name: external_exports.string().min(1),
-  agentId: external_exports.string().min(1),
-  rrule: external_exports.string().min(1),
-  timezone: external_exports.string().min(1),
-  quietHours: external_exports.array(quietWindowSchema).optional(),
-  task: external_exports.string().min(1),
-  sessionMode: scheduleSessionModeSchema.optional()
+  skillPaths: external_exports.array(external_exports.string().min(1)).min(1)
 });
-var scheduleUpdateRRuleInputSchema = external_exports.object({
-  id: external_exports.string().min(1),
+var skillScanInputSchema = external_exports.object({
+  source: external_exports.string().min(1),
+  path: external_exports.string().optional()
+});
+var skillPublishInputSchema2 = external_exports.object({
   name: external_exports.string().min(1),
-  rrule: external_exports.string().min(1),
-  timezone: external_exports.string().min(1),
-  quietHours: external_exports.array(quietWindowSchema),
-  task: external_exports.string().min(1),
-  sessionMode: scheduleSessionModeSchema.optional()
+  owner: external_exports.string().min(1),
+  repo: external_exports.string().min(1),
+  title: external_exports.string().min(1),
+  body: external_exports.string(),
+  // Source subdir the skill is published into; mirrors the scanner so a
+  // subdir source's own scan finds what was published back to it.
+  path: external_exports.string().optional()
 });
-var scheduleDeleteInputSchema = external_exports.object({
-  id: external_exports.string().min(1)
+var skillReadLocalInputSchema = external_exports.object({
+  name: external_exports.string().min(1)
 });
-var scheduleToggleInputSchema = external_exports.object({
-  id: external_exports.string().min(1)
+
+// ../agent-runtime-api/src/modules/ssh/schemas.ts
+var sshAuthorizeKeyInputSchema = external_exports.object({
+  publicKey: external_exports.string().min(1).max(8192).refine((s) => !/[\r\n]/.test(s), "must be a single line")
 });
-var scheduleResetSessionInputSchema = external_exports.object({
-  id: external_exports.string().min(1)
+
+// ../agent-runtime-api/src/modules/import/types.ts
+var importBundleResultSchema = external_exports.object({
+  filesWritten: external_exports.number().int().nonnegative(),
+  bytes: external_exports.number().int().nonnegative(),
+  durationMs: external_exports.number().int().nonnegative()
 });
-var quietWindowConfigMapSchema = external_exports.object({
-  startTime: external_exports.string(),
-  endTime: external_exports.string(),
-  enabled: external_exports.boolean()
+
+// ../agent-runtime-api/src/modules/runtime/types.ts
+var contributionKind = external_exports.enum([
+  "env",
+  "egress-allow",
+  "egress-inject",
+  "file",
+  "mcp-entry",
+  "skill-ref"
+]);
+var eventKind = external_exports.enum([
+  "trigger",
+  "schedule-reset",
+  "workspace-seed",
+  "experiment-trigger",
+  "harness-config"
+]);
+var mergeMode = external_exports.enum([
+  "overwrite",
+  "section-marker",
+  "key-targeted",
+  "yaml-fill-if-missing"
+]);
+var fileFormat = external_exports.enum(["yaml", "json", "text", "ini", "toml"]);
+var envContribution = external_exports.object({
+  kind: external_exports.literal("env"),
+  name: external_exports.string().min(1),
+  placeholder: external_exports.string()
 });
-var scheduleCreatorSchema = external_exports.enum(["user", "agent"]);
-var scheduleSpecCronSchema = external_exports.object({
-  version: external_exports.string(),
-  type: external_exports.literal("cron"),
-  cron: external_exports.string(),
-  task: external_exports.string().optional(),
-  enabled: external_exports.boolean(),
-  sessionMode: scheduleSessionModeSchema.optional(),
-  createdBy: scheduleCreatorSchema
-}).passthrough();
-var scheduleSpecRRuleSchema = external_exports.object({
-  version: external_exports.string(),
-  type: external_exports.literal("rrule"),
-  rrule: external_exports.string(),
-  timezone: external_exports.string(),
-  quietHours: external_exports.array(quietWindowConfigMapSchema).optional(),
-  task: external_exports.string().optional(),
-  enabled: external_exports.boolean(),
-  sessionMode: scheduleSessionModeSchema.optional(),
-  createdBy: scheduleCreatorSchema
-}).passthrough();
-var scheduleSpecSchema = external_exports.discriminatedUnion("type", [
-  scheduleSpecCronSchema,
-  scheduleSpecRRuleSchema
+var egressAllowContribution = external_exports.object({
+  kind: external_exports.literal("egress-allow"),
+  host: external_exports.string().min(1),
+  pathPattern: external_exports.string().optional()
+});
+var egressInjectContribution = external_exports.object({
+  kind: external_exports.literal("egress-inject"),
+  host: external_exports.string().min(1),
+  pathPattern: external_exports.string().optional(),
+  headerName: external_exports.string().min(1),
+  valueFormat: external_exports.string().min(1),
+  encoding: external_exports.literal("basic-x-access-token").optional(),
+  // Moves the value into this query param instead of the header; restricted to unreserved chars since the Lua treats it as a trusted literal.
+  queryParamName: external_exports.string().regex(/^[A-Za-z0-9_.~-]+$/).optional(),
+  // Terminate this host's gateway chain as HTTP/2 so injection lands on a gRPC
+  // stream (e.g. Modal's x-modal-token-* metadata). Flows to the injection-hosts
+  // annotation the controller reads. Omit for HTTP/1.1 REST hosts.
+  http2: external_exports.boolean().optional()
+});
+var fileContribution = external_exports.object({
+  kind: external_exports.literal("file"),
+  path: external_exports.string().min(1),
+  format: fileFormat,
+  mergeMode,
+  content: external_exports.unknown().optional()
+});
+var mcpEntryContribution = external_exports.object({
+  kind: external_exports.literal("mcp-entry"),
+  name: external_exports.string().min(1),
+  url: external_exports.string().url(),
+  headers: external_exports.record(external_exports.string(), external_exports.string()).optional()
+});
+var skillRefContribution = external_exports.object({
+  kind: external_exports.literal("skill-ref"),
+  sourceUrl: external_exports.string().min(1),
+  name: external_exports.string().min(1),
+  version: external_exports.string().min(1),
+  path: external_exports.string().optional()
+});
+var contribution = external_exports.discriminatedUnion("kind", [
+  envContribution,
+  egressAllowContribution,
+  egressInjectContribution,
+  fileContribution,
+  mcpEntryContribution,
+  skillRefContribution
 ]);
-var scheduleStatusSchema = external_exports.object({
-  lastRun: external_exports.string().optional(),
-  nextRun: external_exports.string().optional(),
-  lastResult: external_exports.string().optional()
+var triggerEventPayload = external_exports.object({
+  scheduleId: external_exports.string().min(1),
+  task: external_exports.string().min(1),
+  sessionMode: external_exports.enum(["continuous", "fresh"]).optional(),
+  mcpServers: external_exports.array(external_exports.unknown()).optional()
 });
-
-// ../../node_modules/.pnpm/rrule@2.8.1/node_modules/rrule/dist/esm/index.js
-var esm_exports = {};
-__export(esm_exports, {
-  ALL_WEEKDAYS: () => ALL_WEEKDAYS,
-  Frequency: () => Frequency,
-  RRule: () => RRule,
-  RRuleSet: () => RRuleSet,
-  Weekday: () => Weekday,
-  datetime: () => datetime3,
-  rrulestr: () => rrulestr
+var triggerEvent = external_exports.object({
+  id: external_exports.string().min(1),
+  kind: external_exports.literal("trigger"),
+  version: external_exports.number().int().nonnegative(),
+  expiresAt: external_exports.string().datetime({ offset: true }),
+  payload: triggerEventPayload
+});
+var scheduleResetEventPayload = external_exports.object({
+  scheduleId: external_exports.string().min(1)
+});
+var scheduleResetEvent = external_exports.object({
+  id: external_exports.string().min(1),
+  kind: external_exports.literal("schedule-reset"),
+  version: external_exports.number().int().nonnegative(),
+  expiresAt: external_exports.string().datetime({ offset: true }),
+  payload: scheduleResetEventPayload
+});
+var workspaceSeedEventPayload = external_exports.object({
+  url: external_exports.string().min(1),
+  /** Branch or tag to clone; omitted = the repo's default branch. */
+  ref: external_exports.string().min(1).optional()
+});
+var workspaceSeedEvent = external_exports.object({
+  id: external_exports.string().min(1),
+  kind: external_exports.literal("workspace-seed"),
+  version: external_exports.number().int().nonnegative(),
+  expiresAt: external_exports.string().datetime({ offset: true }),
+  payload: workspaceSeedEventPayload
+});
+var experimentTriggerEventPayload = external_exports.object({
+  experimentId: external_exports.string().min(1),
+  task: external_exports.string().min(1)
+});
+var experimentTriggerEvent = external_exports.object({
+  id: external_exports.string().min(1),
+  kind: external_exports.literal("experiment-trigger"),
+  version: external_exports.number().int().nonnegative(),
+  expiresAt: external_exports.string().datetime({ offset: true }),
+  payload: experimentTriggerEventPayload
+});
+var harnessConfigEventPayload = external_exports.object({
+  model: external_exports.string().min(1).optional(),
+  mode: external_exports.string().min(1).optional(),
+  configOptions: external_exports.record(external_exports.string().min(1), external_exports.string()).optional(),
+  unset: external_exports.array(external_exports.string().min(1)).optional()
+});
+var harnessConfigEvent = external_exports.object({
+  id: external_exports.string().min(1),
+  kind: external_exports.literal("harness-config"),
+  version: external_exports.number().int().nonnegative(),
+  expiresAt: external_exports.string().datetime({ offset: true }),
+  payload: harnessConfigEventPayload
+});
+var event = external_exports.discriminatedUnion("kind", [
+  triggerEvent,
+  scheduleResetEvent,
+  workspaceSeedEvent,
+  experimentTriggerEvent,
+  harnessConfigEvent
+]);
+var harnessConfigChoice = external_exports.object({
+  value: external_exports.string().min(1),
+  name: external_exports.string().min(1),
+  description: external_exports.string().optional()
+});
+var harnessConfigOptionGroup = external_exports.object({
+  // "model", "mode", or a configOption id (e.g. "effort").
+  id: external_exports.string().min(1),
+  name: external_exports.string().min(1),
+  description: external_exports.string().optional(),
+  // ACP-style category: "model" | "mode" | "thought_level" | …
+  category: external_exports.string().min(1),
+  choices: external_exports.array(harnessConfigChoice)
+});
+var harnessConfigCatalog = external_exports.object({
+  options: external_exports.array(harnessConfigOptionGroup),
+  // Per-model validity: allowed choice values per gated group. Model absent =
+  // all allowed; empty array = group hidden for that model (e.g. Haiku effort).
+  modelConstraints: external_exports.record(external_exports.string().min(1), external_exports.record(external_exports.string().min(1), external_exports.array(external_exports.string()))).optional()
+});
+var capabilities = external_exports.object({
+  contributions: external_exports.array(contributionKind),
+  events: external_exports.array(eventKind),
+  // Whether the harness declares a config mapping (gates the UI panel). Optional
+  // for forward-compat with agents that predate it.
+  harnessConfig: external_exports.boolean().optional(),
+  // The option catalog from the harness's manifest (absent → UI hides the panel).
+  harnessConfigCatalog: harnessConfigCatalog.optional()
+});
+var stateSlice = external_exports.object({
+  contributions: external_exports.array(contribution),
+  hash: external_exports.string().min(1)
+});
+var applyStateInput = external_exports.object({
+  version: external_exports.number().int().positive(),
+  state: stateSlice,
+  events: external_exports.array(event)
+});
+var driverFailure = external_exports.object({
+  kind: contributionKind,
+  message: external_exports.string().min(1)
+});
+var applyStateResult = external_exports.discriminatedUnion("status", [
+  // Processed: resulting cursor + any per-driver failures (empty on a fully clean apply).
+  external_exports.object({
+    status: external_exports.literal("ok"),
+    appliedVersion: external_exports.number().int().nonnegative(),
+    appliedHash: external_exports.string().min(1).nullable(),
+    // null until the first clean settle
+    failures: external_exports.array(driverFailure).default([]),
+    settledEvents: external_exports.array(external_exports.string()).default([])
+  }),
+  // Contributions already at ≥ the requested version; worker reconciles. Events still apply (own version) — settledEvents reports which.
+  external_exports.object({
+    status: external_exports.literal("stale"),
+    appliedVersion: external_exports.number().int().nonnegative(),
+    settledEvents: external_exports.array(external_exports.string()).default([])
+  })
+]);
+var helloInput = external_exports.object({
+  lastAppliedVersion: external_exports.number().int().nonnegative().optional(),
+  lastAppliedHash: external_exports.string().optional(),
+  protocolVersion: external_exports.literal("v1"),
+  agentRuntimeVersion: external_exports.string(),
+  capabilities
+});
+var helloResult = external_exports.object({
+  version: external_exports.number().int().positive().optional(),
+  state: stateSlice.optional(),
+  events: external_exports.array(event)
 });
 
-// ../../node_modules/.pnpm/rrule@2.8.1/node_modules/rrule/dist/esm/weekday.js
-var ALL_WEEKDAYS = [
-  "MO",
-  "TU",
-  "WE",
-  "TH",
-  "FR",
-  "SA",
-  "SU"
-];
-var Weekday = (
-  /** @class */
-  (function() {
-    function Weekday2(weekday, n) {
-      if (n === 0)
-        throw new Error("Can't create weekday with n == 0");
-      this.weekday = weekday;
-      this.n = n;
-    }
-    Weekday2.fromStr = function(str) {
-      return new Weekday2(ALL_WEEKDAYS.indexOf(str));
-    };
-    Weekday2.prototype.nth = function(n) {
-      return this.n === n ? this : new Weekday2(this.weekday, n);
-    };
-    Weekday2.prototype.equals = function(other) {
-      return this.weekday === other.weekday && this.n === other.n;
-    };
-    Weekday2.prototype.toString = function() {
-      var s = ALL_WEEKDAYS[this.weekday];
-      if (this.n)
-        s = (this.n > 0 ? "+" : "") + String(this.n) + s;
-      return s;
-    };
-    Weekday2.prototype.getJsWeekday = function() {
-      return this.weekday === 6 ? 0 : this.weekday + 1;
-    };
-    return Weekday2;
-  })()
-);
+// ../api-server-api/src/modules/harness-config/schemas.ts
+var agentConfigOptionsSchema = external_exports.record(external_exports.string().min(1), external_exports.string());
+var harnessConfigApplyInputSchema = external_exports.object({
+  agentId: external_exports.string().min(1),
+  model: external_exports.string().min(1).optional(),
+  mode: external_exports.string().min(1).optional(),
+  configOptions: agentConfigOptionsSchema.optional(),
+  unset: external_exports.array(external_exports.string().min(1)).optional()
+});
+var harnessConfigStatusInputSchema = external_exports.object({
+  agentId: external_exports.string().min(1)
+});
+var harnessConfigStatusSchema = external_exports.object({
+  supported: external_exports.boolean(),
+  catalog: harnessConfigCatalog.nullable()
+});
+var harnessConfigSettledSchema = external_exports.object({
+  settled: external_exports.boolean()
+});
 
-// ../../node_modules/.pnpm/rrule@2.8.1/node_modules/rrule/dist/esm/helpers.js
-var isPresent = function(value) {
-  return value !== null && value !== void 0;
-};
-var isNumber = function(value) {
-  return typeof value === "number";
-};
+// ../api-server-api/src/modules/egress-rules/schemas.ts
+var ruleVerdictSchema = external_exports.enum(["allow", "deny"]);
+var egressPresetSchema = external_exports.enum(["none", "trusted", "all"]);
+var egressRuleListForAgentInputSchema = external_exports.object({
+  agentId: external_exports.string().min(1)
+});
+var egressRuleCurrentPresetInputSchema = external_exports.object({
+  agentId: external_exports.string().min(1)
+});
+var egressRuleCreateInputSchema = external_exports.object({
+  agentId: external_exports.string().min(1),
+  host: external_exports.string().min(1),
+  method: external_exports.string().min(1).default("*"),
+  pathPattern: external_exports.string().min(1).default("*"),
+  verdict: ruleVerdictSchema
+});
+var egressRuleUpdateInputSchema = external_exports.object({
+  id: external_exports.string().min(1),
+  method: external_exports.string().min(1).optional(),
+  pathPattern: external_exports.string().min(1).optional(),
+  verdict: ruleVerdictSchema.optional()
+});
+var egressRuleRevokeInputSchema = external_exports.object({
+  id: external_exports.string().min(1)
+});
+var egressRuleApplyPresetInputSchema = external_exports.object({
+  agentId: external_exports.string().min(1),
+  preset: egressPresetSchema
+});
+
+// ../api-server-api/src/modules/agents/schemas.ts
+var idSchema = external_exports.object({ id: external_exports.string().min(1) });
+var agentCreateInputSchema = external_exports.object({
+  name: external_exports.string().min(1).refine((n) => !n.startsWith("agent-"), {
+    message: "agent name cannot start with 'agent-' (reserved for IDs)"
+  }),
+  templateId: external_exports.string().optional(),
+  image: external_exports.string().optional(),
+  description: external_exports.string().optional(),
+  env: external_exports.array(envVarSchema).max(64).optional(),
+  secretRef: external_exports.string().optional(),
+  registryCredential: external_exports.object({
+    server: external_exports.string().min(1),
+    username: external_exports.string().min(1),
+    password: external_exports.string().min(1)
+  }).optional(),
+  allowedUserEmails: external_exports.array(external_exports.email()).optional(),
+  egressPreset: egressPresetSchema.optional(),
+  // Per-agent idle timeout override in minutes (0 = never hibernate); omit to inherit the global default.
+  hibernationTimeoutMin: external_exports.number().int().min(0).optional(),
+  // Optional: clone this public repo (optionally a branch/tag via `ref`) into
+  // the work dir once, via a one-shot `workspace-seed` event. Not enforced
+  // against the `gitRepos` catalog server-side — the clone runs in the
+  // egress-gated agent pod, so this reaches no URL the agent couldn't already
+  // reach itself.
+  gitRepo: external_exports.object({ url: external_exports.url(), ref: external_exports.string().min(1).optional() }).optional(),
+  // Initial connection grants, settled into the spec at create so credentials
+  // ride the first snapshot and the gateway renders its chains once (no
+  // readiness flap).
+  connectionIds: external_exports.array(external_exports.string()).optional()
+}).refine((d2) => d2.templateId !== void 0 || d2.image !== void 0, {
+  message: "Either templateId or image is required"
+});
+var agentUpdateInputSchema = external_exports.object({
+  id: external_exports.string().min(1),
+  name: external_exports.string().min(1).max(255).optional(),
+  description: external_exports.string().optional(),
+  env: external_exports.array(envVarSchema).max(64).optional(),
+  secretRef: external_exports.string().optional(),
+  allowedUserEmails: external_exports.array(external_exports.email()).optional(),
+  // Per-agent idle timeout override in minutes (0 = never hibernate); null clears it back to the global default.
+  hibernationTimeoutMin: external_exports.number().int().min(0).nullable().optional()
+});
+var agentConnectSlackInputSchema = external_exports.object({
+  id: external_exports.string().min(1),
+  slackChannelId: external_exports.string().min(1)
+});
+var agentConnectTelegramInputSchema = external_exports.object({
+  id: external_exports.string().min(1),
+  botToken: external_exports.string().min(1)
+});
+
+// ../api-server-api/src/modules/schedules/schemas.ts
+var scheduleSessionModeSchema = external_exports.enum(["continuous", "fresh"]);
+var quietWindowSchema = external_exports.object({
+  startTime: external_exports.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/, "HH:MM required"),
+  endTime: external_exports.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/, "HH:MM required"),
+  enabled: external_exports.boolean()
+}).refine((w3) => w3.startTime !== w3.endTime, {
+  message: "startTime and endTime must differ"
+});
+var scheduleListInputSchema = external_exports.object({
+  agentId: external_exports.string().min(1)
+});
+var scheduleGetInputSchema = external_exports.object({
+  id: external_exports.string().min(1)
+});
+var scheduleCreateCronInputSchema = external_exports.object({
+  name: external_exports.string().min(1),
+  agentId: external_exports.string().min(1),
+  cron: external_exports.string().min(1),
+  task: external_exports.string().min(1),
+  sessionMode: scheduleSessionModeSchema.optional()
+});
+var scheduleCreateRRuleInputSchema = external_exports.object({
+  name: external_exports.string().min(1),
+  agentId: external_exports.string().min(1),
+  rrule: external_exports.string().min(1),
+  timezone: external_exports.string().min(1),
+  quietHours: external_exports.array(quietWindowSchema).optional(),
+  task: external_exports.string().min(1),
+  sessionMode: scheduleSessionModeSchema.optional()
+});
+var scheduleUpdateRRuleInputSchema = external_exports.object({
+  id: external_exports.string().min(1),
+  name: external_exports.string().min(1),
+  rrule: external_exports.string().min(1),
+  timezone: external_exports.string().min(1),
+  quietHours: external_exports.array(quietWindowSchema),
+  task: external_exports.string().min(1),
+  sessionMode: scheduleSessionModeSchema.optional()
+});
+var scheduleDeleteInputSchema = external_exports.object({
+  id: external_exports.string().min(1)
+});
+var scheduleToggleInputSchema = external_exports.object({
+  id: external_exports.string().min(1)
+});
+var scheduleResetSessionInputSchema = external_exports.object({
+  id: external_exports.string().min(1)
+});
+var quietWindowConfigMapSchema = external_exports.object({
+  startTime: external_exports.string(),
+  endTime: external_exports.string(),
+  enabled: external_exports.boolean()
+});
+var scheduleCreatorSchema = external_exports.enum(["user", "agent"]);
+var scheduleSpecCronSchema = external_exports.object({
+  version: external_exports.string(),
+  type: external_exports.literal("cron"),
+  cron: external_exports.string(),
+  task: external_exports.string().optional(),
+  enabled: external_exports.boolean(),
+  sessionMode: scheduleSessionModeSchema.optional(),
+  createdBy: scheduleCreatorSchema
+}).passthrough();
+var scheduleSpecRRuleSchema = external_exports.object({
+  version: external_exports.string(),
+  type: external_exports.literal("rrule"),
+  rrule: external_exports.string(),
+  timezone: external_exports.string(),
+  quietHours: external_exports.array(quietWindowConfigMapSchema).optional(),
+  task: external_exports.string().optional(),
+  enabled: external_exports.boolean(),
+  sessionMode: scheduleSessionModeSchema.optional(),
+  createdBy: scheduleCreatorSchema
+}).passthrough();
+var scheduleSpecSchema = external_exports.discriminatedUnion("type", [
+  scheduleSpecCronSchema,
+  scheduleSpecRRuleSchema
+]);
+var scheduleStatusSchema = external_exports.object({
+  lastRun: external_exports.string().optional(),
+  nextRun: external_exports.string().optional(),
+  lastResult: external_exports.string().optional()
+});
+
+// ../api-server-api/src/modules/experiments/schemas.ts
+var armVariationSchema = external_exports.string();
+var experimentIdInputSchema = external_exports.object({
+  id: external_exports.string().min(1)
+});
+var experimentCreateInputSchema = external_exports.object({
+  name: external_exports.string().trim().min(1, "name is required").max(200),
+  prompt: external_exports.string().trim().min(1, "prompt is required")
+});
+var experimentAddArmInputSchema = external_exports.object({
+  experimentId: external_exports.string().min(1),
+  agentId: external_exports.string().min(1),
+  armVariation: armVariationSchema.default("")
+});
+
+// ../../node_modules/.pnpm/rrule@2.8.1/node_modules/rrule/dist/esm/index.js
+var esm_exports = {};
+__export(esm_exports, {
+  ALL_WEEKDAYS: () => ALL_WEEKDAYS,
+  Frequency: () => Frequency,
+  RRule: () => RRule,
+  RRuleSet: () => RRuleSet,
+  Weekday: () => Weekday,
+  datetime: () => datetime3,
+  rrulestr: () => rrulestr
+});
+
+// ../../node_modules/.pnpm/rrule@2.8.1/node_modules/rrule/dist/esm/weekday.js
+var ALL_WEEKDAYS = [
+  "MO",
+  "TU",
+  "WE",
+  "TH",
+  "FR",
+  "SA",
+  "SU"
+];
+var Weekday = (
+  /** @class */
+  (function() {
+    function Weekday2(weekday, n) {
+      if (n === 0)
+        throw new Error("Can't create weekday with n == 0");
+      this.weekday = weekday;
+      this.n = n;
+    }
+    Weekday2.fromStr = function(str) {
+      return new Weekday2(ALL_WEEKDAYS.indexOf(str));
+    };
+    Weekday2.prototype.nth = function(n) {
+      return this.n === n ? this : new Weekday2(this.weekday, n);
+    };
+    Weekday2.prototype.equals = function(other) {
+      return this.weekday === other.weekday && this.n === other.n;
+    };
+    Weekday2.prototype.toString = function() {
+      var s = ALL_WEEKDAYS[this.weekday];
+      if (this.n)
+        s = (this.n > 0 ? "+" : "") + String(this.n) + s;
+      return s;
+    };
+    Weekday2.prototype.getJsWeekday = function() {
+      return this.weekday === 6 ? 0 : this.weekday + 1;
+    };
+    return Weekday2;
+  })()
+);
+
+// ../../node_modules/.pnpm/rrule@2.8.1/node_modules/rrule/dist/esm/helpers.js
+var isPresent = function(value) {
+  return value !== null && value !== void 0;
+};
+var isNumber = function(value) {
+  return typeof value === "number";
+};
 var isWeekdayStr = function(value) {
   return typeof value === "string" && ALL_WEEKDAYS.includes(value);
 };
@@ -28731,55 +29161,6 @@ function parseHHMM(s) {
   return h2 * 60 + mi;
 }
 
-// ../api-server-api/src/modules/secrets/schemas.ts
-var presetSecretTypeSchema = external_exports.enum([
-  "anthropic",
-  "ibm-litellm",
-  "openai",
-  "bob"
-]);
-var hostPatternSchema = external_exports.string().min(1).max(253).refine((v2) => !v2.includes("*"), {
-  message: "Wildcard host patterns are not supported. Please specify exact hostnames."
-});
-var envMappingSchema = external_exports.object({
-  envName: external_exports.string().min(1).max(255).regex(ENV_NAME_RE, "envName must match [A-Z_][A-Z0-9_]*"),
-  placeholder: external_exports.string().min(1).max(1e3)
-});
-var envMappingsSchema = external_exports.array(envMappingSchema).max(32);
-var secretCreateInputSchema = external_exports.object({
-  type: presetSecretTypeSchema,
-  name: external_exports.string().min(1).max(100),
-  value: external_exports.string().min(1),
-  envMappings: envMappingsSchema.optional()
-});
-var secretUpdateInputSchema = external_exports.object({
-  id: external_exports.string().min(1),
-  name: external_exports.string().min(1).max(100).optional(),
-  value: external_exports.string().min(1).optional(),
-  envMappings: envMappingsSchema.optional()
-});
-var secretDeleteInputSchema = external_exports.object({ id: external_exports.string().min(1) });
-var secretCreateGithubPatInputSchema = external_exports.object({
-  name: external_exports.string().min(1).max(100),
-  token: external_exports.string().min(1)
-});
-var secretUpdateGithubPatInputSchema = external_exports.object({
-  apiSecretId: external_exports.string().min(1),
-  gitSecretId: external_exports.string().min(1),
-  token: external_exports.string().min(1)
-});
-var secretGetAgentAccessInputSchema = external_exports.object({
-  agentId: external_exports.string().min(1)
-});
-var secretSetAgentAccessInputSchema = external_exports.object({
-  agentId: external_exports.string().min(1),
-  secretIds: external_exports.array(external_exports.string().min(1))
-});
-var secretTestAnthropicInputSchema = external_exports.object({
-  value: external_exports.string().min(1),
-  envName: external_exports.enum(["ANTHROPIC_API_KEY", "CLAUDE_CODE_OAUTH_TOKEN"])
-});
-
 // ../api-server-api/src/modules/connections/providers.ts
 var DEFAULT_ENV_PLACEHOLDER = "dummy-placeholder";
 var IBM_LITELLM_HOST = "ete-litellm.ai-models.vpc.res.ibm.com";
@@ -28798,359 +29179,136 @@ function ibmLitellmEnvMappings() {
     { envName: "OPENAI_MODEL", placeholder: "gpt-5.5" }
   ];
 }
-var BOB_HOST = "api.us-east.bob.ibm.com";
-var BOB_PLACEHOLDER = "dummy-placeholder";
-function bobEnvMappings(pins = {}) {
-  const out = [
-    { envName: "BOBSHELL_API_KEY", placeholder: BOB_PLACEHOLDER }
+function openaiEnvMappings() {
+  return [
+    { envName: "OPENAI_API_KEY", placeholder: DEFAULT_ENV_PLACEHOLDER },
+    { envName: "OPENAI_BASE_URL", placeholder: "https://api.openai.com/v1" }
   ];
-  const push = (envName, value) => {
-    const trimmed = value?.trim();
-    if (trimmed) out.push({ envName, placeholder: trimmed });
-  };
-  push("BOB_SHELL_MODEL", pins.model);
-  push("BOB_INSTANCE_ID", pins.agentId);
-  push("BOB_TEAM_ID", pins.teamId);
-  push("BOB_MAX_COINS", pins.maxCoins);
-  push("BOB_CHAT_MODE", pins.chatMode);
-  return out;
 }
-var PROVIDERS = {
-  anthropic: {
-    id: "anthropic",
-    displayName: "Anthropic",
-    hostPattern: "api.anthropic.com",
-    modes: [
-      {
-        key: "oauth",
-        label: "OAuth Token",
-        templateId: "anthropic-oauth",
-        tokenPrefix: "sk-ant-oat",
-        defaultEnvMappings: [
-          {
-            envName: "CLAUDE_CODE_OAUTH_TOKEN",
-            placeholder: DEFAULT_ENV_PLACEHOLDER
-          }
-        ]
-      },
-      {
-        key: "api-key",
-        label: "API Key",
-        templateId: "anthropic",
-        tokenPrefix: "sk-ant-api",
-        isDefault: true,
-        defaultEnvMappings: [
-          {
-            envName: "ANTHROPIC_API_KEY",
-            placeholder: DEFAULT_ENV_PLACEHOLDER
-          }
-        ],
-        injection: { headerName: "x-api-key", valueFormat: "{value}" }
-      }
-    ]
-  },
-  "ibm-litellm": {
-    id: "ibm-litellm",
-    displayName: "IBM LiteLLM ETE Proxy",
-    hostPattern: IBM_LITELLM_HOST,
-    modes: [
-      {
-        key: "api-key",
-        label: "API Token",
-        templateId: "ibm-litellm",
-        defaultEnvMappings: ibmLitellmEnvMappings()
-      }
-    ]
-  },
-  openai: {
-    id: "openai",
-    displayName: "OpenAI",
-    hostPattern: "api.openai.com",
-    // Scope injection to /v1/* so other host endpoints don't get a stray Authorization header.
-    pathPattern: "/v1/*",
-    modes: [
-      {
-        key: "api-key",
-        label: "API Key",
-        templateId: "openai",
-        defaultEnvMappings: [
-          { envName: "OPENAI_API_KEY", placeholder: DEFAULT_ENV_PLACEHOLDER }
-        ]
-      }
-    ]
-  },
-  bob: {
-    id: "bob",
-    displayName: "Bob Shell",
-    hostPattern: BOB_HOST,
-    modes: [
-      {
-        key: "api-key",
-        label: "API Key",
-        templateId: "bob",
-        defaultEnvMappings: bobEnvMappings(),
-        // `Apikey` prefix; `Bearer` would trigger JWT auth.
-        injection: {
-          headerName: "Authorization",
-          valueFormat: "Apikey {value}"
-        },
-        extraInjections: [
-          { headerName: "X-Bobshell-Internal", queryParamName: "key" }
-        ]
-      }
-    ]
-  }
-};
-var PROVIDER_PRESET_TYPES = Object.keys(
-  PROVIDERS
-);
-function isProviderPresetType(type) {
-  return type in PROVIDERS;
-}
-var TEMPLATE_TO_PROVIDER = new Map(
-  PROVIDER_PRESET_TYPES.flatMap(
-    (type) => PROVIDERS[type].modes.map(
-      (mode) => [mode.templateId, type]
-    )
-  )
-);
-var PROVIDER_TEMPLATE_IDS = new Set(
-  TEMPLATE_TO_PROVIDER.keys()
-);
-function providerTypeForTemplateId(templateId) {
-  return TEMPLATE_TO_PROVIDER.get(templateId) ?? null;
-}
-function templateIdForProvider(type, value) {
-  const modes = PROVIDERS[type].modes;
-  const matched = modes.find(
-    (mode) => mode.tokenPrefix !== void 0 && value.startsWith(mode.tokenPrefix)
-  );
-  return (matched ?? modes.find((mode) => mode.isDefault) ?? modes[0]).templateId;
-}
-
-// ../agent-runtime-api/src/modules/files/schemas.ts
-var pathSchema = external_exports.string().min(1);
-var fileListDirsInputSchema = external_exports.object({
-  paths: external_exports.array(external_exports.string()).max(500)
-});
-var fileReadInputSchema = external_exports.object({ path: pathSchema });
-var fileWriteInputSchema = external_exports.object({
-  path: pathSchema,
-  content: external_exports.string(),
-  expectedMtimeMs: external_exports.number().optional()
-});
-var fileCreateInputSchema = external_exports.object({
-  path: pathSchema,
-  content: external_exports.string()
-});
-var fileMkdirInputSchema = external_exports.object({ path: pathSchema });
-var fileRenameInputSchema = external_exports.object({
-  from: pathSchema,
-  to: pathSchema,
-  overwrite: external_exports.boolean().optional()
-});
-var fileRemoveInputSchema = external_exports.object({ path: pathSchema });
-var fileUploadInputSchema = external_exports.object({
-  path: pathSchema,
-  contentBase64: external_exports.string(),
-  /** Browser-reported MIME (File.type). Carried in the API for observability
-   *  and forward-compat; server-side reads still detect MIME from magic
-   *  bytes so we don't need to persist this. */
-  contentType: external_exports.string().max(255).optional(),
-  overwrite: external_exports.boolean().optional()
-});
-
-// ../agent-runtime-api/src/modules/skills/schemas.ts
-var skillInstallInputSchema = external_exports.object({
-  sourceUrl: external_exports.string().min(1),
-  name: external_exports.string().min(1),
-  version: external_exports.string().min(1),
-  skillPaths: external_exports.array(external_exports.string().min(1)).min(1)
-});
-var skillUninstallInputSchema = external_exports.object({
-  name: external_exports.string().min(1),
-  skillPaths: external_exports.array(external_exports.string().min(1)).min(1)
-});
-var skillScanInputSchema = external_exports.object({
-  source: external_exports.string().min(1)
-});
-var skillPublishInputSchema = external_exports.object({
-  name: external_exports.string().min(1),
-  owner: external_exports.string().min(1),
-  repo: external_exports.string().min(1),
-  title: external_exports.string().min(1),
-  body: external_exports.string()
-});
-var skillReadLocalInputSchema = external_exports.object({
-  name: external_exports.string().min(1)
-});
-
-// ../agent-runtime-api/src/modules/ssh/schemas.ts
-var sshAuthorizeKeyInputSchema = external_exports.object({
-  publicKey: external_exports.string().min(1).max(8192).refine((s) => !/[\r\n]/.test(s), "must be a single line")
-});
-
-// ../agent-runtime-api/src/modules/import/types.ts
-var importBundleResultSchema = external_exports.object({
-  filesWritten: external_exports.number().int().nonnegative(),
-  bytes: external_exports.number().int().nonnegative(),
-  durationMs: external_exports.number().int().nonnegative()
-});
-
-// ../agent-runtime-api/src/modules/runtime/types.ts
-var contributionKind = external_exports.enum([
-  "env",
-  "egress-allow",
-  "egress-inject",
-  "file",
-  "mcp-entry",
-  "skill-ref"
-]);
-var eventKind = external_exports.enum([
-  "trigger",
-  "schedule-reset",
-  "workspace-seed"
-]);
-var mergeMode = external_exports.enum([
-  "overwrite",
-  "section-marker",
-  "key-targeted",
-  "yaml-fill-if-missing"
-]);
-var fileFormat = external_exports.enum(["yaml", "json", "text", "ini"]);
-var envContribution = external_exports.object({
-  kind: external_exports.literal("env"),
-  name: external_exports.string().min(1),
-  placeholder: external_exports.string()
-});
-var egressAllowContribution = external_exports.object({
-  kind: external_exports.literal("egress-allow"),
-  host: external_exports.string().min(1),
-  pathPattern: external_exports.string().optional()
-});
-var egressInjectContribution = external_exports.object({
-  kind: external_exports.literal("egress-inject"),
-  host: external_exports.string().min(1),
-  pathPattern: external_exports.string().optional(),
-  headerName: external_exports.string().min(1),
-  valueFormat: external_exports.string().min(1),
-  encoding: external_exports.literal("basic-x-access-token").optional(),
-  // Moves the value into this query param instead of the header; restricted to unreserved chars since the Lua treats it as a trusted literal.
-  queryParamName: external_exports.string().regex(/^[A-Za-z0-9_.~-]+$/).optional()
-});
-var fileContribution = external_exports.object({
-  kind: external_exports.literal("file"),
-  path: external_exports.string().min(1),
-  format: fileFormat,
-  mergeMode,
-  content: external_exports.unknown().optional()
-});
-var mcpEntryContribution = external_exports.object({
-  kind: external_exports.literal("mcp-entry"),
-  name: external_exports.string().min(1),
-  url: external_exports.string().url(),
-  headers: external_exports.record(external_exports.string(), external_exports.string()).optional()
-});
-var skillRefContribution = external_exports.object({
-  kind: external_exports.literal("skill-ref"),
-  sourceUrl: external_exports.string().min(1),
-  name: external_exports.string().min(1),
-  version: external_exports.string().min(1)
-});
-var contribution = external_exports.discriminatedUnion("kind", [
-  envContribution,
-  egressAllowContribution,
-  egressInjectContribution,
-  fileContribution,
-  mcpEntryContribution,
-  skillRefContribution
-]);
-var triggerEventPayload = external_exports.object({
-  scheduleId: external_exports.string().min(1),
-  task: external_exports.string().min(1),
-  sessionMode: external_exports.enum(["continuous", "fresh"]).optional(),
-  mcpServers: external_exports.array(external_exports.unknown()).optional()
-});
-var triggerEvent = external_exports.object({
-  id: external_exports.string().min(1),
-  kind: external_exports.literal("trigger"),
-  version: external_exports.number().int().nonnegative(),
-  expiresAt: external_exports.string().datetime({ offset: true }),
-  payload: triggerEventPayload
-});
-var scheduleResetEventPayload = external_exports.object({
-  scheduleId: external_exports.string().min(1)
-});
-var scheduleResetEvent = external_exports.object({
-  id: external_exports.string().min(1),
-  kind: external_exports.literal("schedule-reset"),
-  version: external_exports.number().int().nonnegative(),
-  expiresAt: external_exports.string().datetime({ offset: true }),
-  payload: scheduleResetEventPayload
-});
-var workspaceSeedEventPayload = external_exports.object({
-  url: external_exports.string().min(1),
-  /** Branch or tag to clone; omitted = the repo's default branch. */
-  ref: external_exports.string().min(1).optional()
-});
-var workspaceSeedEvent = external_exports.object({
-  id: external_exports.string().min(1),
-  kind: external_exports.literal("workspace-seed"),
-  version: external_exports.number().int().nonnegative(),
-  expiresAt: external_exports.string().datetime({ offset: true }),
-  payload: workspaceSeedEventPayload
-});
-var event = external_exports.discriminatedUnion("kind", [
-  triggerEvent,
-  scheduleResetEvent,
-  workspaceSeedEvent
-]);
-var capabilities = external_exports.object({
-  contributions: external_exports.array(contributionKind),
-  events: external_exports.array(eventKind)
-});
-var stateSlice = external_exports.object({
-  contributions: external_exports.array(contribution),
-  hash: external_exports.string().min(1)
-});
-var applyStateInput = external_exports.object({
-  version: external_exports.number().int().positive(),
-  state: stateSlice,
-  events: external_exports.array(event)
-});
-var driverFailure = external_exports.object({
-  kind: contributionKind,
-  message: external_exports.string().min(1)
-});
-var applyStateResult = external_exports.discriminatedUnion("status", [
-  // Processed: resulting cursor + any per-driver failures (empty on a fully clean apply).
-  external_exports.object({
-    status: external_exports.literal("ok"),
-    appliedVersion: external_exports.number().int().nonnegative(),
-    appliedHash: external_exports.string().min(1).nullable(),
-    // null until the first clean settle
-    failures: external_exports.array(driverFailure).default([]),
-    settledEvents: external_exports.array(external_exports.string()).default([])
-  }),
-  // Contributions already at ≥ the requested version; worker reconciles. Events still apply (own version) — settledEvents reports which.
-  external_exports.object({
-    status: external_exports.literal("stale"),
-    appliedVersion: external_exports.number().int().nonnegative(),
-    settledEvents: external_exports.array(external_exports.string()).default([])
-  })
-]);
-var helloInput = external_exports.object({
-  lastAppliedVersion: external_exports.number().int().nonnegative().optional(),
-  lastAppliedHash: external_exports.string().optional(),
-  protocolVersion: external_exports.literal("v1"),
-  agentRuntimeVersion: external_exports.string(),
-  capabilities
-});
-var helloResult = external_exports.object({
-  version: external_exports.number().int().positive().optional(),
-  state: stateSlice.optional(),
-  events: external_exports.array(event)
-});
+var BOB_HOST = "api.us-east.bob.ibm.com";
+var BOB_PLACEHOLDER = "dummy-placeholder";
+function bobEnvMappings(pins = {}) {
+  const out = [
+    { envName: "BOBSHELL_API_KEY", placeholder: BOB_PLACEHOLDER }
+  ];
+  const push = (envName, value) => {
+    const trimmed = value?.trim();
+    if (trimmed) out.push({ envName, placeholder: trimmed });
+  };
+  push("BOB_SHELL_MODEL", pins.model);
+  push("BOB_INSTANCE_ID", pins.agentId);
+  push("BOB_TEAM_ID", pins.teamId);
+  push("BOB_MAX_COINS", pins.maxCoins);
+  push("BOB_CHAT_MODE", pins.chatMode);
+  return out;
+}
+var PROVIDERS = {
+  anthropic: {
+    id: "anthropic",
+    displayName: "Anthropic",
+    hostPattern: "api.anthropic.com",
+    modes: [
+      {
+        key: "oauth",
+        label: "OAuth Token",
+        templateId: "anthropic-oauth",
+        tokenPrefix: "sk-ant-oat",
+        defaultEnvMappings: [
+          {
+            envName: "CLAUDE_CODE_OAUTH_TOKEN",
+            placeholder: DEFAULT_ENV_PLACEHOLDER
+          }
+        ]
+      },
+      {
+        key: "api-key",
+        label: "API Key",
+        templateId: "anthropic",
+        tokenPrefix: "sk-ant-api",
+        isDefault: true,
+        defaultEnvMappings: [
+          {
+            envName: "ANTHROPIC_API_KEY",
+            placeholder: DEFAULT_ENV_PLACEHOLDER
+          }
+        ],
+        injection: { headerName: "x-api-key", valueFormat: "{value}" }
+      }
+    ]
+  },
+  "ibm-litellm": {
+    id: "ibm-litellm",
+    displayName: "IBM LiteLLM ETE Proxy",
+    hostPattern: IBM_LITELLM_HOST,
+    modes: [
+      {
+        key: "api-key",
+        label: "API Token",
+        templateId: "ibm-litellm",
+        defaultEnvMappings: ibmLitellmEnvMappings()
+      }
+    ]
+  },
+  openai: {
+    id: "openai",
+    displayName: "OpenAI",
+    hostPattern: "api.openai.com",
+    // Scope injection to /v1/* so other host endpoints don't get a stray Authorization header.
+    pathPattern: "/v1/*",
+    modes: [
+      {
+        key: "api-key",
+        label: "API Key",
+        templateId: "openai",
+        defaultEnvMappings: openaiEnvMappings()
+      }
+    ]
+  },
+  bob: {
+    id: "bob",
+    displayName: "Bob Shell",
+    hostPattern: BOB_HOST,
+    modes: [
+      {
+        key: "api-key",
+        label: "API Key",
+        templateId: "bob",
+        defaultEnvMappings: bobEnvMappings(),
+        // `Apikey` prefix; `Bearer` would trigger JWT auth.
+        injection: {
+          headerName: "Authorization",
+          valueFormat: "Apikey {value}"
+        },
+        extraInjections: [
+          { headerName: "X-Bobshell-Internal", queryParamName: "key" }
+        ]
+      }
+    ]
+  }
+};
+var PROVIDER_PRESET_TYPES = Object.keys(
+  PROVIDERS
+);
+var TEMPLATE_TO_PROVIDER = new Map(
+  PROVIDER_PRESET_TYPES.flatMap(
+    (type) => PROVIDERS[type].modes.map(
+      (mode) => [mode.templateId, type]
+    )
+  )
+);
+var PROVIDER_TEMPLATE_IDS = new Set(
+  TEMPLATE_TO_PROVIDER.keys()
+);
+function providerTypeForTemplateId(templateId) {
+  return TEMPLATE_TO_PROVIDER.get(templateId) ?? null;
+}
+function templateIdForProvider(type, value) {
+  const modes = PROVIDERS[type].modes;
+  const matched = modes.find(
+    (mode) => mode.tokenPrefix !== void 0 && value.startsWith(mode.tokenPrefix)
+  );
+  return (matched ?? modes.find((mode) => mode.isDefault) ?? modes[0]).templateId;
+}
 
 // ../api-server-api/src/modules/secret-store/types.ts
 var secretRef = external_exports.object({
@@ -29330,13 +29488,18 @@ var connectionCreateInputSchema = external_exports.discriminatedUnion("authKind"
   headerCreateInput,
   noneCreateInput
 ]);
+var connectionTestAnthropicInputSchema = external_exports.object({
+  value: external_exports.string().min(1),
+  envName: external_exports.enum(["ANTHROPIC_API_KEY", "CLAUDE_CODE_OAUTH_TOKEN"])
+});
 
 // ../api-server-api/src/modules/sessions/types.ts
 var SessionType = {
   Regular: "regular",
   ChannelSlack: "channel_slack",
   ChannelTelegram: "channel_telegram",
-  ScheduleCron: "schedule_cron"
+  ScheduleCron: "schedule_cron",
+  ExperimentTrial: "experiment_trial"
 };
 var SessionMode = /* @__PURE__ */ ((SessionMode2) => {
   SessionMode2["Chat"] = "chat";
@@ -29399,101 +29562,6 @@ var PodFilesEventSchema = external_exports.object({
 });
 var EventKindSchema = external_exports.enum(["snapshot", "upsert"]);
 
-// ../api-server-api/src/modules/skills/schemas.ts
-var skillSourceSchema = external_exports.object({
-  id: external_exports.string(),
-  name: external_exports.string(),
-  gitUrl: external_exports.string(),
-  /** True when the source is managed by the cluster admin
-   *  (Helm-seeded). Users can't delete it. */
-  system: external_exports.boolean().optional(),
-  /** Present when the source was declared by an agent template
-   *  (spec.skillSources). UI-only hint for the "Agent" badge —
-   *  backend treats template sources as read-only. */
-  fromTemplate: external_exports.object({ templateId: external_exports.string(), templateName: external_exports.string() }).optional(),
-  canPublish: external_exports.boolean().optional()
-});
-var skillPublishResultSchema = external_exports.object({
-  prUrl: external_exports.string().url(),
-  branch: external_exports.string()
-});
-var skillSchema = external_exports.object({
-  source: external_exports.string(),
-  name: external_exports.string(),
-  description: external_exports.string(),
-  version: external_exports.string(),
-  contentHash: external_exports.string()
-});
-var skillRefSchema = external_exports.object({
-  source: external_exports.string(),
-  name: external_exports.string(),
-  version: external_exports.string(),
-  /** Deterministic SHA-256 of the skill directory's file contents at
-   *  install time. Compared to the scanner's contentHash to flag drift.
-   *  Optional for backward compatibility with installs that pre-date
-   *  this field. */
-  contentHash: external_exports.string().optional()
-});
-var localSkillSchema = external_exports.object({
-  name: external_exports.string(),
-  description: external_exports.string(),
-  skillPath: external_exports.string()
-});
-var skillPublishRecordSchema = external_exports.object({
-  skillName: external_exports.string(),
-  sourceId: external_exports.string(),
-  sourceName: external_exports.string(),
-  sourceGitUrl: external_exports.string(),
-  prUrl: external_exports.string(),
-  /** ISO 8601 timestamp. */
-  publishedAt: external_exports.string()
-});
-var skillStateOutputSchema = external_exports.object({
-  installed: external_exports.array(skillRefSchema),
-  standalone: external_exports.array(localSkillSchema),
-  instancePublishes: external_exports.array(skillPublishRecordSchema)
-});
-var skillListSourcesInputSchema = external_exports.object({ agentId: external_exports.string().min(1).optional() }).optional();
-var skillCreateSourceInputSchema = external_exports.object({
-  name: external_exports.string().min(1).max(128),
-  gitUrl: external_exports.string().url()
-});
-var skillDeleteSourceInputSchema = external_exports.object({
-  id: external_exports.string().min(1)
-});
-var skillRefreshSourceInputSchema = external_exports.object({
-  id: external_exports.string().min(1)
-});
-var skillListInputSchema = external_exports.object({
-  sourceId: external_exports.string().min(1),
-  agentId: external_exports.string().min(1).optional()
-});
-var skillInstallInputSchema2 = external_exports.object({
-  agentId: external_exports.string().min(1),
-  source: external_exports.string().url(),
-  name: external_exports.string().min(1),
-  version: external_exports.string().min(1),
-  contentHash: external_exports.string().optional()
-});
-var skillUninstallInputSchema2 = external_exports.object({
-  agentId: external_exports.string().min(1),
-  source: external_exports.string().url(),
-  name: external_exports.string().min(1)
-});
-var skillListLocalInputSchema = external_exports.object({
-  agentId: external_exports.string().min(1)
-});
-var skillStateInputSchema = external_exports.object({
-  agentId: external_exports.string().min(1)
-});
-var skillPublishInputSchema2 = external_exports.object({
-  agentId: external_exports.string().min(1),
-  sourceId: external_exports.string().min(1),
-  name: external_exports.string().min(1),
-  title: external_exports.string().optional(),
-  body: external_exports.string().optional()
-});
-
 // ../api-server-api/src/modules/approvals/schemas.ts
 var approvalStatusSchema = external_exports.enum(["pending", "resolved", "expired"]);
 var approvalListOptionsSchema = external_exports.object({
@@ -31203,35 +31271,6 @@ function promptSecret(message) {
   });
 }
 
-// src/modules/agent/lib/group-github-pats.ts
-var API_HOST = "api.github.com";
-var GIT_HOST = "github.com";
-function groupGithubPats(secrets) {
-  const byName2 = /* @__PURE__ */ new Map();
-  for (const s of secrets) {
-    const slot = s.hostPattern === API_HOST ? "api" : s.hostPattern === GIT_HOST ? "git" : null;
-    if (!slot) continue;
-    let group = byName2.get(s.name);
-    if (!group) {
-      group = { api: [], git: [] };
-      byName2.set(s.name, group);
-    }
-    group[slot].push(s.id);
-  }
-  const pairs = [];
-  for (const [name, group] of byName2) {
-    if (group.api.length === 1 && group.git.length === 1) {
-      pairs.push({
-        name,
-        apiSecretId: group.api[0],
-        gitSecretId: group.git[0]
-      });
-    }
-  }
-  pairs.sort((a, b2) => a.name.localeCompare(b2.name));
-  return pairs;
-}
-
 // src/modules/connection/services/connection-service.ts
 function createConnectionService(deps) {
   const readIds = async (agentId) => {
@@ -31485,34 +31524,14 @@ hint: run \`dam auth login\` first`
     process.exit(EXIT_RUNTIME_FAILURE);
   }
   spin.message("Granting credentials...");
-  const connectionIds = [];
-  const secretIds = [];
-  if (provider.routing.kind === "connection") {
-    connectionIds.push(provider.routing.id);
-  } else {
-    secretIds.push(provider.routing.id);
-  }
-  if (githubPat) {
-    if (githubPat.source === "connection") {
-      connectionIds.push(githubPat.connectionId);
-    } else {
-      secretIds.push(githubPat.apiSecretId, githubPat.gitSecretId);
-    }
-  }
+  const connectionIds = [provider.routing.id];
+  if (githubPat) connectionIds.push(githubPat.connectionId);
   try {
     await withRetry(async () => {
-      if (connectionIds.length > 0) {
-        await trpc.connections.setAgentConnections.mutate({
-          agentId: cleanup.agentId,
-          connectionIds
-        });
-      }
-      if (secretIds.length > 0) {
-        await trpc.secrets.setAgentAccess.mutate({
-          agentId: cleanup.agentId,
-          secretIds
-        });
-      }
+      await trpc.connections.setAgentConnections.mutate({
+        agentId: cleanup.agentId,
+        connectionIds
+      });
     });
   } catch (e2) {
     spin.stop("Grant failed");
@@ -31619,7 +31638,6 @@ async function listCredentials(trpc, cleanup) {
   try {
     return {
       conns: await trpc.connections.list.query(),
-      secrets: await trpc.secrets.list.query(),
       templates: await trpc.connections.listTemplates.query()
     };
   } catch (e2) {
@@ -31629,12 +31647,9 @@ async function listCredentials(trpc, cleanup) {
   }
 }
 async function pickProvider(trpc, cleanup) {
-  const { conns, secrets, templates } = await listCredentials(trpc, cleanup);
+  const { conns, templates } = await listCredentials(trpc, cleanup);
   const existingConns = providerConns(conns);
-  const existingSecrets = secrets.filter(
-    (s) => isProviderPresetType(s.type)
-  ).map((s) => ({ id: s.id, name: s.name, type: s.type }));
-  if (existingConns.length === 0 && existingSecrets.length === 0) {
+  if (existingConns.length === 0) {
     R2.info("No model providers configured yet \u2014 let's add one.");
     return addOrReplaceProvider(trpc, cleanup, existingConns, templates);
   }
@@ -31646,10 +31661,6 @@ async function pickProvider(trpc, cleanup) {
         value: `conn:${c2.id}`,
         label: `${c2.name} (${c2.type})`
       })),
-      ...existingSecrets.map((s) => ({
-        value: `secret:${s.id}`,
-        label: `${s.name} (${s.type}) (legacy)`
-      })),
       { value: NEW, label: "Add new..." }
     ]
   });
@@ -31657,17 +31668,9 @@ async function pickProvider(trpc, cleanup) {
   if (picked === NEW) {
     return addOrReplaceProvider(trpc, cleanup, existingConns, templates);
   }
-  if (picked.startsWith("conn:")) {
-    const found2 = existingConns.find((c2) => `conn:${c2.id}` === picked);
-    return {
-      routing: { kind: "connection", id: found2.id },
-      name: found2.name,
-      type: found2.type
-    };
-  }
-  const found = existingSecrets.find((s) => `secret:${s.id}` === picked);
+  const found = existingConns.find((c2) => `conn:${c2.id}` === picked);
   return {
-    routing: { kind: "secret", id: found.id },
+    routing: { id: found.id },
     name: found.name,
     type: found.type
   };
@@ -31697,7 +31700,7 @@ async function addOrReplaceProvider(trpc, cleanup, existingConns, templates) {
       if (q(replace)) return cancelAndCleanup(trpc, cleanup);
       if (!replace) {
         return {
-          routing: { kind: "connection", id: existingOfType.id },
+          routing: { id: existingOfType.id },
           name: existingOfType.name,
           type
         };
@@ -31721,7 +31724,7 @@ async function addOrReplaceProvider(trpc, cleanup, existingConns, templates) {
           value: value2
         });
         return {
-          routing: { kind: "connection", id: existingOfType.id },
+          routing: { id: existingOfType.id },
           name: existingOfType.name,
           type
         };
@@ -31823,17 +31826,16 @@ async function createProviderConnection(trpc, cleanup, type, templateId, value,
   });
   if (!created) return null;
   return {
-    routing: { kind: "connection", id: created.id },
+    routing: { id: created.id },
     name: created.name,
     type
   };
 }
 var DEFAULT_GITHUB_PAT_NAME = GITHUB_PAT_TEMPLATE_ID;
 async function pickGithubPat(trpc, cleanup) {
-  const { conns, secrets } = await listCredentials(trpc, cleanup);
+  const { conns } = await listCredentials(trpc, cleanup);
   const patConns = conns.filter((c2) => c2.templateId === GITHUB_PAT_TEMPLATE_ID);
-  const pairs = groupGithubPats(secrets);
-  if (patConns.length === 0 && pairs.length === 0) {
+  if (patConns.length === 0) {
     R2.info("No GitHub PAT configured yet.");
     const add = await ue({ message: "Add one?", initialValue: true });
     if (q(add)) return cancelAndCleanup(trpc, cleanup);
@@ -31846,10 +31848,6 @@ async function pickGithubPat(trpc, cleanup) {
     message: "GitHub PAT",
     options: [
       ...patConns.map((c2) => ({ value: `conn:${c2.id}`, label: c2.name })),
-      ...pairs.map((p2) => ({
-        value: `secret:${p2.name}`,
-        label: `${p2.name} (legacy)`
-      })),
       { value: NEW, label: "Add new..." },
       { value: SKIP, label: "Skip" }
     ]
@@ -31857,17 +31855,8 @@ async function pickGithubPat(trpc, cleanup) {
   if (q(picked)) return cancelAndCleanup(trpc, cleanup);
   if (picked === SKIP) return null;
   if (picked === NEW) return addOrReplaceGithubPat(trpc, cleanup, patConns);
-  if (picked.startsWith("conn:")) {
-    const found2 = patConns.find((c2) => `conn:${c2.id}` === picked);
-    return { source: "connection", connectionId: found2.id, name: found2.name };
-  }
-  const found = pairs.find((p2) => `secret:${p2.name}` === picked);
-  return {
-    source: "secret",
-    apiSecretId: found.apiSecretId,
-    gitSecretId: found.gitSecretId,
-    name: found.name
-  };
+  const found = patConns.find((c2) => `conn:${c2.id}` === picked);
+  return { connectionId: found.id, name: found.name };
 }
 async function addOrReplaceGithubPat(trpc, cleanup, existing) {
   const collide = existing.find((c2) => c2.name === DEFAULT_GITHUB_PAT_NAME);
@@ -31879,21 +31868,13 @@ async function addOrReplaceGithubPat(trpc, cleanup, existing) {
       });
       if (q(replace)) return cancelAndCleanup(trpc, cleanup);
       if (!replace) {
-        return {
-          source: "connection",
-          connectionId: collide.id,
-          name: collide.name
-        };
+        return { connectionId: collide.id, name: collide.name };
       }
       const token2 = await promptSecret("New GitHub personal access token");
       if (q(token2)) return cancelAndCleanup(trpc, cleanup);
       try {
         await trpc.connections.update.mutate({ id: collide.id, value: token2 });
-        return {
-          source: "connection",
-          connectionId: collide.id,
-          name: collide.name
-        };
+        return { connectionId: collide.id, name: collide.name };
       } catch (e2) {
         R2.error(`Failed to replace GitHub PAT: ${errorReason2(e2)}`);
         continue;
@@ -31908,11 +31889,7 @@ async function addOrReplaceGithubPat(trpc, cleanup, existing) {
       nameExample: "my-github"
     });
     if (created) {
-      return {
-        source: "connection",
-        connectionId: created.id,
-        name: created.name
-      };
+      return { connectionId: created.id, name: created.name };
     }
   }
 }
@@ -38190,6 +38167,7 @@ function toSessionView(agentId, s) {
     mode: p2 ? p2.mode ?? "chat" /* Chat */ : "terminal" /* Terminal */,
     createdAt: p2?.createdAt ?? s.updatedAt ?? (/* @__PURE__ */ new Date(0)).toISOString(),
     scheduleId: p2?.scheduleId ?? null,
+    experimentId: p2?.experimentId ?? null,
     title: s.title ?? null,
     updatedAt: s.updatedAt ?? null
   };
@@ -38812,7 +38790,7 @@ function createProcessEnvReader() {
 
 // src/modules/cli/infrastructure/package-version.ts
 function readPackageVersion() {
-  return true ? "0.2.5-rc1" : DEV_VERSION;
+  return true ? "0.2.6-rc1" : DEV_VERSION;
 }
 
 // src/modules/cli/infrastructure/version-probe.ts
@@ -42357,11 +42335,14 @@ function deriveSourceName(gitUrl) {
 // src/modules/skill/commands/source-add.ts
 function buildSourceAddCommand(deps) {
   return new Command("add").description("Register a skill source from a git URL").argument("<git-url>", "git URL of the skill source repository").option("--name <name>", "source name (default: derived from the git URL)").option(
+    "--path <path>",
+    "optional subdirectory within the repository to scan for skills"
+  ).option(
     "--server <url>",
     "override the configured server URL for this call"
   ).option("--json", "emit the created SkillSource as JSON").addHelpText(
     "after",
-    "\nThe name defaults to the URL path (github.com/acme/skills \u2192 acme/skills);\npass --name to override. Adding a URL that a Platform or Agent source already\nuses shadows it \u2014 removing your source re-exposes the original.\n\nExamples:\n  dam skill source add https://github.com/anthropics/skills\n  dam skill source add https://github.com/acme/skills --name acme\n"
+    "\nThe name defaults to the URL path (github.com/acme/skills \u2192 acme/skills);\npass --name to override. Adding a URL that a Platform or Agent source already\nuses shadows it \u2014 removing your source re-exposes the original.\n\nExamples:\n  dam skill source add https://github.com/anthropics/skills\n  dam skill source add https://github.com/acme/skills --name acme\n  dam skill source add https://github.com/acme/monorepo --path .claude/skills\n"
   ).action(
     async (gitUrl, opts) => {
       const json2 = opts.json ?? false;
@@ -42380,6 +42361,19 @@ function buildSourceAddCommand(deps) {
 `);
         process.exit(EXIT_INVALID_INPUT);
       }
+      let path2;
+      if (opts.path !== void 0) {
+        const pathCheck = skillCreateSourceInputSchema.shape.path.safeParse(
+          opts.path
+        );
+        if (!pathCheck.success) {
+          const msg = pathCheck.error.issues[0]?.message ?? "invalid path";
+          process.stderr.write(`error: ${msg}
+`);
+          process.exit(EXIT_INVALID_INPUT);
+        }
+        path2 = pathCheck.data || void 0;
+      }
       const host = await resolveActiveHost(deps, {
         flag: opts.server ? { server: opts.server } : void 0,
         exitCodes: {
@@ -42387,7 +42381,7 @@ function buildSourceAddCommand(deps) {
           belowFloor: EXIT_BELOW_FLOOR
         }
       });
-      const result = await deps.createSkillsService(host).addSource({ name, gitUrl });
+      const result = await deps.createSkillsService(host).addSource({ name, gitUrl, path: path2 });
       if (!result.ok) {
         if (result.error.kind === "source-exists") {
           process.stderr.write(
@@ -42434,12 +42428,12 @@ async function resolveName(gitUrl, flag, json2) {
 }
 
 // src/modules/skill/commands/source-list.ts
-var HEADER3 = ["ID", "NAME", "GIT URL", "KIND"];
+var HEADER3 = ["ID", "NAME", "GIT URL", "PATH", "KIND"];
 function tableFor3(sources) {
   const sorted = [...sources].sort((a, b2) => a.name.localeCompare(b2.name));
   return renderTable([
     HEADER3,
-    ...sorted.map((s) => [s.id, s.name, s.gitUrl, sourceKind(s)])
+    ...sorted.map((s) => [s.id, s.name, s.gitUrl, s.path ?? "", sourceKind(s)])
   ]);
 }
 function buildSourceListCommand(deps) {