omnara 1.0.0 → 1.0.1

package/dist/bin.js

@@ -971,6 +971,9 @@ var client = createClient(createConfig({ throwOnError: true }));
 
 // ../sdk/src/generated/zod.gen.ts
 import * as z from "zod";
+var zResourceName = z.string().min(1).refine((value) => Array.from(value).length <= 64, { message: "Resource name cannot exceed 64 Unicode characters" }).transform((value) => value.normalize("NFC")).refine((value) => Array.from(value).length <= 64, { message: "Resource name cannot exceed 64 Unicode characters" }).refine((value) => !new RegExp("^\\p{White_Space}|\\p{White_Space}$", "u").test(value), { message: "Resource name must not start or end with whitespace" }).refine((value) => !/[\p{Cc}\p{Cf}\p{Cs}\p{Default_Ignorable_Code_Point}⠀]/u.test(value), { message: "Resource name contains an unsupported invisible, control, or format character" }).refine((value) => !value.includes("\uFFFD"), { message: "Resource name contains the Unicode replacement character" }).refine((value) => !Array.from(value).some((character) => character !== " " && new RegExp("\\p{White_Space}", "u").test(character)), { message: "Resource name may only use ordinary spaces" });
+var zAgentName = z.string().refine((value) => Array.from(value).length <= 64, { message: "Resource name cannot exceed 64 Unicode characters" }).transform((value) => value.normalize("NFC")).refine((value) => Array.from(value).length <= 64, { message: "Resource name cannot exceed 64 Unicode characters" }).refine((value) => !new RegExp("^\\p{White_Space}|\\p{White_Space}$", "u").test(value), { message: "Resource name must not start or end with whitespace" }).refine((value) => !/[\p{Cc}\p{Cf}\p{Cs}\p{Default_Ignorable_Code_Point}⠀]/u.test(value), { message: "Resource name contains an unsupported invisible, control, or format character" }).refine((value) => !value.includes("\uFFFD"), { message: "Resource name contains the Unicode replacement character" }).refine((value) => !Array.from(value).some((character) => character !== " " && new RegExp("\\p{White_Space}", "u").test(character)), { message: "Resource name may only use ordinary spaces" });
+var zSkillName = z.string().min(1).max(64).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/);
 var zResourceListSort = z.enum([
   "name",
   "-name",
@@ -1098,7 +1101,7 @@ var zModelCatalog = z.object({
   error: z.string().optional()
 });
 var zCreateConfiguredModelRequest = z.object({
-  name: z.string().min(1),
+  name: zResourceName,
   provider_model_slug: z.string().min(1),
   context_window_tokens: z.int().gte(2).lte(2147483647),
   max_output_tokens: z.int().gte(1).lte(2147483647).optional(),
@@ -1113,7 +1116,7 @@ var zCreateConfiguredModelRequest = z.object({
   api_variant_options: zModelApiVariantOptions.optional()
 });
 var zUpdateConfiguredModelRequest = z.object({
-  name: z.string().min(1).optional(),
+  name: zResourceName.optional(),
   provider_model_slug: z.string().min(1).optional(),
   context_window_tokens: z.int().gte(2).lte(2147483647).optional(),
   max_output_tokens: z.int().gte(1).lte(2147483647).optional(),
@@ -1162,7 +1165,7 @@ var zSkillRevisionId = z.string().regex(/^skr_[a-z2-7]{26}$/);
 var zSkillGrantId = z.string().regex(/^skg_[a-z2-7]{26}$/);
 var zSecretId = z.string().regex(/^sec_[a-z2-7]{26}$/);
 var zCreateModelProviderConfigRequest = z.object({
-  name: z.string().min(1),
+  name: zResourceName,
   preset: z.enum([
     "openai",
     "openrouter",
@@ -1200,7 +1203,7 @@ var zModelProviderConfig = z.object({
   id: zModelProviderConfigId,
   org_id: zOrganizationId,
   management_kind: zManagementKind,
-  name: z.string(),
+  name: zResourceName,
   api_format: zModelApiFormat,
   api_variant: zModelProviderApiVariantResponse,
   base_url: z.string(),
@@ -1227,7 +1230,7 @@ var zConfiguredModel = z.object({
   org_id: zOrganizationId,
   model_provider_config_id: zModelProviderConfigId,
   management_kind: zManagementKind,
-  name: z.string(),
+  name: zResourceName,
   current_revision_id: zConfiguredModelRevisionId,
   provider_model_slug: z.string(),
   context_window_tokens: z.int(),
@@ -1274,8 +1277,8 @@ var zConfiguredModelSummary = z.object({
   id: zConfiguredModelId,
   org_id: zOrganizationId,
   model_provider_config_id: zModelProviderConfigId,
-  name: z.string(),
-  provider_config: z.string(),
+  name: zResourceName,
+  provider_config: zResourceName,
   created_at: zTimestamp,
   updated_at: zTimestamp
 });
@@ -1326,7 +1329,7 @@ var zSkill = z.object({
   id: zSkillId,
   org_id: zOrganizationId,
   owner: zSkillOwner,
-  name: z.string(),
+  name: zSkillName,
   revision_id: zSkillRevisionId,
   revision: z.int().gte(1).max(2147483647, { error: "Invalid value: Expected int32 to be <= 2147483647" }),
   description: z.string(),
@@ -1465,8 +1468,8 @@ var zToolCatalog = z.object({
   mcp_tool_permissions: zToolPermissionProfile
 });
 var zAgentConfigModel = z.object({
-  provider_config: z.string(),
-  name: z.string(),
+  provider_config: zResourceName,
+  name: zResourceName,
   provider_model_slug: z.string(),
   configured_model_id: zConfiguredModelId,
   current_revision_id: zConfiguredModelRevisionId,
@@ -1497,7 +1500,7 @@ var zAgentConfig = z.object({
   created_at: zTimestamp
 });
 var zCreateAgentProfileRequest = z.object({
-  name: z.string(),
+  name: zResourceName,
   config: zAgentConfigId
 });
 var zUpdateAgentProfileRequest = z.object({
@@ -1505,13 +1508,13 @@ var zUpdateAgentProfileRequest = z.object({
   expected_current_config_id: zAgentConfigId
 });
 var zRenameAgentProfileRequest = z.object({
-  name: z.string()
+  name: zResourceName
 });
 var zAgentProfile = z.object({
   id: zAgentProfileId,
   org_id: zOrganizationId,
   project_id: zProjectId,
-  name: z.string(),
+  name: zResourceName,
   current_config_id: zAgentConfigId,
   current_generation: z.int().min(-2147483648, { error: "Invalid value: Expected int32 to be >= -2147483648" }).max(2147483647, { error: "Invalid value: Expected int32 to be <= 2147483647" }),
   current_config: zAgentConfig,
@@ -1543,7 +1546,7 @@ var zCronTriggerFailureReport = z.object({
   failed_at: zTimestamp
 });
 var zCreateCronTriggerRequest = z.object({
-  name: z.string(),
+  name: zResourceName,
   target: zCronTriggerTarget,
   cron: zCronExpression,
   timezone: zCronTimezone.optional(),
@@ -1551,7 +1554,7 @@ var zCreateCronTriggerRequest = z.object({
   enabled: z.boolean().optional().default(true)
 });
 var zUpdateCronTriggerRequest = z.object({
-  name: z.string().optional(),
+  name: zResourceName.optional(),
   cron: zCronExpression.optional(),
   timezone: zCronTimezone.optional(),
   message_template: zCronMessageTemplate.optional(),
@@ -1561,7 +1564,7 @@ var zCronTrigger = z.object({
   id: zCronTriggerId,
   org_id: zOrganizationId,
   project_id: zProjectId,
-  name: z.string(),
+  name: zResourceName,
   target: zCronTriggerTarget,
   cron: zCronExpression,
   timezone: zCronTimezone,
@@ -1580,12 +1583,12 @@ var zListCronTriggersResponse = z.object({
 var zCreateAgentRequest = z.object({
   profile: zAgentProfileId.optional(),
   config: zAgentConfigId,
-  name: z.string().optional(),
+  name: zAgentName.optional(),
   message: z.string().optional()
 });
 var zAgentModel = z.object({
-  provider_config: z.string(),
-  name: z.string()
+  provider_config: zResourceName,
+  name: zResourceName
 });
 var zIntegrationTarget = z.object({
   provider: z.string(),
@@ -1600,7 +1603,7 @@ var zAgent = z.object({
   project_id: zProjectId,
   agent_profile_id: zAgentProfileId.optional(),
   state: z.enum(["active", "archived"]),
-  name: z.string(),
+  name: zAgentName,
   integration_target: zIntegrationTarget.optional(),
   current_config_id: zAgentConfigId.optional(),
   model: zAgentModel.optional(),
@@ -2174,7 +2177,7 @@ var zSecretOwnerInput = z.discriminatedUnion("kind", [
 var zMcpoAuthStartRequest = z.object({
   owner: zSecretOwnerInput,
   mcp_url: z.string().min(1),
-  name: z.string().min(1),
+  name: zResourceName,
   return_to: z.string().optional(),
   client_id: z.string().optional(),
   client_secret: z.string().optional(),
@@ -2233,12 +2236,12 @@ var zSecretMaterial = z.discriminatedUnion("kind", [
 ]);
 var zCreateSecretRequest = z.object({
   owner: zSecretOwnerInput,
-  name: z.string().min(1),
+  name: zResourceName,
   metadata: zMetadata.optional(),
   material: zSecretMaterial
 });
 var zUpdateSecretRequest = z.object({
-  name: z.string().min(1).optional(),
+  name: zResourceName.optional(),
   metadata: zMetadata.optional()
 });
 var zSecretVersionRequest = z.object({
@@ -2258,7 +2261,7 @@ var zSecret = z.object({
   org_id: zOrganizationId,
   management_kind: zManagementKind,
   owner: zSecretOwner,
-  name: z.string(),
+  name: zResourceName,
   kind: zSecretKind,
   metadata: zMetadata,
   current_version_number: z.int().min(-2147483648, { error: "Invalid value: Expected int32 to be >= -2147483648" }).max(2147483647, { error: "Invalid value: Expected int32 to be <= 2147483647" }),
@@ -2299,11 +2302,11 @@ var zSecretGrant = z.object({
   created_at: zTimestamp
 });
 var zCreateOrganizationRequest = z.object({
-  name: z.string().min(1)
+  name: zResourceName
 });
 var zOrganization = z.object({
   id: zOrganizationId,
-  name: z.string(),
+  name: zResourceName,
   created_at: zTimestamp,
   updated_at: zTimestamp
 });
@@ -2316,7 +2319,7 @@ var zOrganizationMembership = z.object({
 var zOrgInvitation = z.object({
   id: zOrgInvitationId,
   org_id: zOrganizationId,
-  org_name: z.string(),
+  org_name: zResourceName,
   email: z.email(),
   org_role: z.string(),
   created_at: zTimestamp
@@ -2330,12 +2333,12 @@ var zCreateOrgInvitationRequest = z.object({
   role: z.string()
 });
 var zCreatePersonalAccessTokenRequest = z.object({
-  name: z.string().min(1)
+  name: zResourceName
 });
 var zPersonalAccessToken = z.object({
   id: zPersonalAccessTokenId,
   user_id: zUserId,
-  name: z.string(),
+  name: zResourceName,
   token_id: z.string(),
   created_at: zTimestamp,
   last_used_at: zTimestamp.nullable(),
@@ -2349,7 +2352,7 @@ var zOrgApiKeyRole = z.enum(["admin", "member"]);
 var zOrgApiKey = z.object({
   id: zOrgApiKeyId,
   org_id: zOrganizationId,
-  name: z.string(),
+  name: zResourceName,
   token_id: z.string(),
   org_role: z.string(),
   created_by_user_id: zUserId,
@@ -2359,7 +2362,7 @@ var zOrgApiKey = z.object({
   revoked_at: zTimestamp.nullable()
 });
 var zCreateOrgApiKeyRequest = z.object({
-  name: z.string().min(1),
+  name: zResourceName,
   org_role: zOrgApiKeyRole
 });
 var zCreateOrgApiKeyResponse = z.object({
@@ -2367,7 +2370,7 @@ var zCreateOrgApiKeyResponse = z.object({
   api_key: zOrgApiKey
 });
 var zUpdateOrgApiKeyRequest = z.object({
-  name: z.string().min(1).optional(),
+  name: zResourceName.optional(),
   org_role: zOrgApiKeyRole.optional()
 });
 var zListOrgApiKeysResponse = z.object({
@@ -2386,7 +2389,7 @@ var zArtifact = z.object({
   created_at: zTimestamp
 });
 var zCreateMachinePoolRequestBase = z.object({
-  name: z.string().min(1),
+  name: zResourceName,
   description: z.string().optional(),
   provider: z.string().min(1),
   default_machine_cpu: z.int().gte(1).lte(2147483647).optional(),
@@ -2405,6 +2408,7 @@ var zCreateMachinePoolRequestBase = z.object({
   min_machine_memory_mb: z.int().gte(0).lte(2147483647).optional(),
   max_machine_cpu: z.int().gte(1).lte(2147483647).optional(),
   max_machine_memory_mb: z.int().gte(1).lte(2147483647).optional(),
+  delete_after_idle_minutes: z.int().gte(5).lte(2147483647).optional(),
   metadata: zMachineMetadata.optional()
 });
 var zCreateMachinePoolRequest = zCreateMachinePoolRequestBase.and(z.union([
@@ -2432,7 +2436,7 @@ var zCreateMachinePoolRequest = zCreateMachinePoolRequestBase.and(z.union([
   })
 ]));
 var zUpdateMachinePoolRequest = z.object({
-  name: z.string().min(1).optional(),
+  name: zResourceName.optional(),
   description: z.string().optional(),
   default_machine_cpu: z.int().gte(1).lte(2147483647).nullish(),
   default_machine_memory_mb: z.int().gte(1).lte(2147483647).nullish(),
@@ -2450,6 +2454,7 @@ var zUpdateMachinePoolRequest = z.object({
   min_machine_memory_mb: z.int().gte(0).lte(2147483647).nullish(),
   max_machine_cpu: z.int().gte(1).lte(2147483647).nullish(),
   max_machine_memory_mb: z.int().gte(1).lte(2147483647).nullish(),
+  delete_after_idle_minutes: z.int().gte(5).lte(2147483647).nullish(),
   metadata: zMachineMetadata.optional()
 });
 var zMachinePoolUsage = z.object({
@@ -2460,7 +2465,7 @@ var zMachinePoolUsage = z.object({
 var zMachinePool = z.object({
   id: zMachinePoolId,
   org_id: zOrganizationId,
-  name: z.string(),
+  name: zResourceName,
   management_kind: zManagementKind,
   description: z.string(),
   provider: z.string(),
@@ -2480,6 +2485,7 @@ var zMachinePool = z.object({
   min_machine_memory_mb: z.int().gte(0).lte(2147483647).nullable(),
   max_machine_cpu: z.int().gte(1).lte(2147483647).nullable(),
   max_machine_memory_mb: z.int().gte(1).lte(2147483647).nullable(),
+  delete_after_idle_minutes: z.int().gte(5).lte(2147483647).nullable(),
   metadata: zMetadata,
   created_at: zTimestamp,
   updated_at: zTimestamp,
@@ -2510,7 +2516,7 @@ var zMachine = z.object({
   org_id: zOrganizationId,
   source_kind: zMachineSourceKind,
   machine_pool_id: zMachinePoolId.nullish(),
-  display_name: z.string(),
+  display_name: zResourceName,
   description: z.string(),
   provider: z.string(),
   lifecycle_state: zMachineLifecycleState,
@@ -2532,7 +2538,7 @@ var zMachine = z.object({
   updated_at: zTimestamp
 });
 var zCreateMachineRequest = z.object({
-  display_name: z.string().min(1),
+  display_name: zResourceName,
   description: z.string().optional(),
   cwd: z.string().optional(),
   env: z.record(z.string(), z.string()).optional(),
@@ -2540,7 +2546,7 @@ var zCreateMachineRequest = z.object({
   metadata: zMachineMetadata.optional()
 });
 var zConnectByoMachineRequest = z.object({
-  display_name: z.string().min(1),
+  display_name: zResourceName,
   project_ids: z.array(zProjectId).max(100)
 });
 var zUpdateMachineRequest = z.object({
@@ -2552,7 +2558,7 @@ var zMachineSummaryFields = z.object({
   id: zMachineId,
   org_id: zOrganizationId,
   source_kind: zMachineSourceKind,
-  display_name: z.string(),
+  display_name: zResourceName,
   description: z.string(),
   provider: z.string(),
   lifecycle_state: zMachineLifecycleState,
@@ -2628,6 +2634,10 @@ var zProjectMachinePoolGrant = z.object({
   min_machine_memory_mb: z.int().gte(0).lte(2147483647).nullable(),
   max_machine_cpu: z.int().gte(1).lte(2147483647).nullable(),
   max_machine_memory_mb: z.int().gte(1).lte(2147483647).nullable(),
+  delete_after_idle_minutes: z.union([
+    z.literal(0),
+    z.int().gte(5).lte(2147483647)
+  ]).nullable(),
   metadata: zMetadata,
   created_at: zTimestamp,
   updated_at: zTimestamp
@@ -2648,6 +2658,10 @@ var zCreateProjectMachinePoolGrantRequest = z.object({
   min_machine_memory_mb: z.int().gte(0).lte(2147483647).optional(),
   max_machine_cpu: z.int().gte(1).lte(2147483647).optional(),
   max_machine_memory_mb: z.int().gte(1).lte(2147483647).optional(),
+  delete_after_idle_minutes: z.union([
+    z.literal(0),
+    z.int().gte(5).lte(2147483647)
+  ]).optional(),
   metadata: zMetadata.optional()
 });
 var zUpdateProjectMachinePoolGrantRequest = z.object({
@@ -2665,12 +2679,16 @@ var zUpdateProjectMachinePoolGrantRequest = z.object({
   min_machine_memory_mb: z.int().gte(0).lte(2147483647).nullish(),
   max_machine_cpu: z.int().gte(1).lte(2147483647).nullish(),
   max_machine_memory_mb: z.int().gte(1).lte(2147483647).nullish(),
+  delete_after_idle_minutes: z.union([
+    z.literal(0),
+    z.int().gte(5).lte(2147483647)
+  ]).nullish(),
   metadata: zMetadata.optional()
 });
 var zMachinePoolSummary = z.object({
   id: zMachinePoolId,
   org_id: zOrganizationId,
-  name: z.string(),
+  name: zResourceName,
   management_kind: zManagementKind,
   description: z.string(),
   provider: z.string(),
@@ -2686,14 +2704,14 @@ var zListProjectMachinePoolGrantsResponse = z.object({
   next_cursor: z.string().nullable()
 });
 var zCreateMachineDaemonTokenRequest = z.object({
-  name: z.string().optional(),
+  name: zResourceName.optional(),
   metadata: zMetadata.optional()
 });
 var zMachineDaemonToken = z.object({
   id: zMachineDaemonTokenId,
   org_id: zOrganizationId,
   machine_id: zMachineId,
-  name: z.string(),
+  name: zResourceName,
   metadata: zMetadata,
   created_at: zTimestamp,
   last_used_at: zTimestamp.nullable(),
@@ -2803,12 +2821,12 @@ var zBootstrapDaemonResponse = z.object({
   machine_id: zMachineId
 });
 var zCreateProjectRequest = z.object({
-  name: z.string().min(1)
+  name: zResourceName
 });
 var zProjectFields = z.object({
   id: zProjectId,
   org_id: zOrganizationId,
-  name: z.string(),
+  name: zResourceName,
   created_at: zTimestamp,
   updated_at: zTimestamp
 });
@@ -2859,7 +2877,7 @@ var zCurrentUserIdentity = z.object({
 });
 var zCurrentUserOrg = z.object({
   id: zOrganizationId,
-  name: z.string(),
+  name: zResourceName,
   role: z.string(),
   created_at: zTimestamp
 });
@@ -2890,7 +2908,7 @@ var zSetProjectMembershipRequest = z.object({
 });
 var zProjectMembershipGrant = z.object({
   project_id: zProjectId,
-  project_name: z.string(),
+  project_name: zResourceName,
   role: z.string(),
   created_at: zTimestamp
 });
@@ -3274,7 +3292,6 @@ var zListAgentProfilesQuery = z.object({
   cursor: z.string().max(1024).optional()
 });
 var zListAgentProfilesResponse2 = zListAgentProfilesResponse;
-var zCreateAgentProfileBody = zCreateAgentProfileRequest;
 var zCreateAgentProfileHeaders = z.object({
   "Idempotency-Key": z.string().min(1).max(255).optional()
 });
@@ -3376,7 +3393,6 @@ var zListAgentsQuery = z.object({
   cursor: z.string().max(1024).optional()
 });
 var zListAgentsResponse2 = zListAgentsResponse;
-var zCreateAgentBody = zCreateAgentRequest;
 var zCreateAgentHeaders = z.object({
   "Idempotency-Key": z.string().min(1).max(255).optional()
 });
@@ -6330,6 +6346,32 @@ var ApiError = class _ApiError extends Error {
 };
 
 // ../sdk/src/client.ts
+function stripClientSelector(client2) {
+  const strip = (dispatch) => (options) => {
+    if (options == null || !("client" in options)) return dispatch(options);
+    const rest = { ...options };
+    delete rest.client;
+    return dispatch(rest);
+  };
+  const methods = [
+    "connect",
+    "delete",
+    "get",
+    "head",
+    "options",
+    "patch",
+    "post",
+    "put",
+    "request",
+    "trace"
+  ];
+  const wrap = (target) => {
+    const dispatches = target;
+    for (const method of methods) dispatches[method] &&= strip(dispatches[method]);
+  };
+  wrap(client2);
+  wrap(client2.sse);
+}
 function createOmnaraClient(options = {}) {
   const client2 = createClient(
     createConfig({
@@ -6352,6 +6394,7 @@ function createOmnaraClient(options = {}) {
     if (!response.ok) throw await ApiError.fromResponse(response);
     return response;
   });
+  stripClientSelector(client2);
   return client2;
 }
 
@@ -7208,7 +7251,10 @@ function registerOperation(parent, config2, spec) {
         const base = options.body === void 0 ? {} : parseWithSchema(zBodyObject, options.body, "--body");
         const body = deepMerge(base, collectFlagValues(bodyFlags, options));
         const parsed = parseWithSchema(spec.body, body, "request body");
-        input.body = spec.transformBody ? await spec.transformBody(parsed) : parsed;
+        input.body = spec.transformBody ? await spec.transformBody(parsed, {
+          client: config2.client,
+          path: input.path ?? {}
+        }) : parsed;
       }
       const data = await callOperation(spec, input);
       if (options.json === true) {
@@ -7249,6 +7295,7 @@ function registerGroup(program2, config2, group) {
 // src/login.ts
 import { hostname } from "node:os";
 import { intro as intro2, log as log2, note as note2, outro as outro2, spinner as spinner2 } from "@clack/prompts";
+import * as z7 from "zod";
 
 // src/browser.ts
 import { spawn } from "node:child_process";
@@ -7346,6 +7393,14 @@ function plainReporter2() {
     }
   };
 }
+function loginTokenName(explicit, hostName) {
+  const candidate = explicit ?? `Omnara CLI on ${hostName}`;
+  const result = zResourceName.safeParse(candidate);
+  if (result.success) return result.data;
+  if (explicit === void 0) return "Omnara CLI";
+  throw new CliInputError(`invalid token name:
+${z7.prettifyError(result.error)}`);
+}
 function registerLoginCommand(program2, cli) {
   program2.command("login").description("Log in via the browser and save an API token").option("--no-browser", "print the approval URL instead of opening a browser").option("--token-name <name>", "name for the created API token").action(async (options) => {
     await runCliAction(async () => {
@@ -7354,7 +7409,7 @@ function registerLoginCommand(program2, cli) {
       const start = await startDeviceAuth({
         baseUrl: cli.baseUrl,
         clientName: "Omnara CLI",
-        tokenName: options.tokenName ?? `Omnara CLI on ${hostname()}`
+        tokenName: loginTokenName(options.tokenName, hostname())
       });
       report.showCode(start.userCode, start.verificationUriComplete);
       if (options.browser) {
@@ -7424,7 +7479,75 @@ function registerLoginCommand(program2, cli) {
 }
 
 // src/manifest.ts
-import * as z11 from "zod";
+import * as z13 from "zod";
+
+// src/config-attachment.ts
+import { readFileSync as readFileSync2 } from "node:fs";
+import * as z8 from "zod";
+var zConfigSourceAttachment = z8.object({
+  file: z8.string().min(1).optional().describe("path to an agent config file (.yaml, .yml, or .json)"),
+  source: z8.string().min(1).optional().describe("inline agent config source (YAML or JSON)")
+});
+var zConfigAttachment = z8.object({
+  config: zAgentConfigId.optional().describe("existing agent config ID"),
+  ...zConfigSourceAttachment.shape
+});
+var ATTACHMENT_HINT = "pass exactly one of --config, --file, or --source";
+var SOURCE_HINT = "pass exactly one of --file or --source";
+function requireExactlyOne(values, hint) {
+  const provided = values.filter((value) => value !== void 0);
+  if (provided.length !== 1) throw new CliInputError(hint);
+}
+function fileFormat(filePath) {
+  const lower = filePath.toLowerCase();
+  if (lower.endsWith(".json")) return "json";
+  if (lower.endsWith(".yaml") || lower.endsWith(".yml")) return "yaml";
+  throw new CliInputError(`config file must end in .yaml, .yml, or .json: ${filePath}`);
+}
+function inlineFormat(source) {
+  try {
+    JSON.parse(source);
+    return "json";
+  } catch {
+    return "yaml";
+  }
+}
+function renderConfigSource(attachment) {
+  requireExactlyOne([attachment.file, attachment.source], SOURCE_HINT);
+  if (attachment.file !== void 0) {
+    const format = fileFormat(attachment.file);
+    let source;
+    try {
+      source = readFileSync2(attachment.file, "utf8");
+    } catch {
+      throw new CliInputError(`could not read config file: ${attachment.file}`);
+    }
+    return { source, source_format: format };
+  }
+  if (attachment.source !== void 0) {
+    return { source: attachment.source, source_format: inlineFormat(attachment.source) };
+  }
+  throw new CliInputError(SOURCE_HINT);
+}
+var zProjectScope = z8.object({
+  orgID: z8.string().min(1),
+  projectID: z8.string().min(1)
+});
+async function resolveConfigId(client2, path, attachment) {
+  requireExactlyOne([attachment.config, attachment.file, attachment.source], ATTACHMENT_HINT);
+  if (attachment.config !== void 0) return attachment.config;
+  const { data } = await sdk_gen_exports.createAgentConfig({
+    client: client2,
+    path: zProjectScope.parse(path),
+    body: renderConfigSource(attachment)
+  });
+  return data.id;
+}
+var zProfilePath = zProjectScope.extend({ agentProfileID: z8.string().min(1) });
+async function currentProfileConfigId(client2, path) {
+  const { data } = await sdk_gen_exports.getAgentProfile({ client: client2, path: zProfilePath.parse(path) });
+  return data.current_config_id;
+}
 
 // src/format.ts
 function pickFields(source, fields) {
@@ -7453,10 +7576,10 @@ function formatVoid(message = "ok") {
 
 // src/mcp-add.ts
 import { isMap, isScalar as isScalar2, parseDocument } from "yaml";
-import * as z8 from "zod";
+import * as z10 from "zod";
 
 // src/mcp-oauth.ts
-import * as z7 from "zod";
+import * as z9 from "zod";
 
 // src/poll.ts
 var POLL_INTERVAL_SECONDS = 2;
@@ -7504,7 +7627,7 @@ async function authorizeMcpOAuthSecret(options) {
     }
   });
 }
-var zBrowserFlag = z7.boolean().default(true).describe("open the authorization URL in a browser");
+var zBrowserFlag = z9.boolean().default(true).describe("open the authorization URL in a browser");
 function openAuthorizationUrl(report, title, url3, browser) {
   report.url(title, url3);
   if (browser) {
@@ -7540,11 +7663,11 @@ async function runMcpOAuth(context) {
 // src/mcp-add.ts
 var SERVER_KEY_PATTERN = /^[a-zA-Z][a-zA-Z0-9-]{0,31}$/;
 var zMcpAddBody = zMcpoAuthStartRequest.omit({ owner: true, name: true }).extend({
-  server_name: z8.string().regex(
+  server_name: z10.string().regex(
     SERVER_KEY_PATTERN,
     "must start with a letter and contain at most 32 letters, digits, or hyphens"
   ).describe("MCP server key used in the agent config"),
-  secret_name: z8.string().min(1).optional().describe("OAuth secret name; defaults to <server-name>-mcp"),
+  secret_name: zResourceName.optional().describe("OAuth secret name; defaults to <server-name>-mcp"),
   browser: zBrowserFlag
 });
 function targetLabel(target) {
@@ -7553,7 +7676,7 @@ function targetLabel(target) {
 function serverEntry(url3, secretId) {
   return { url: url3, auth: { type: "oauth", secret_id: secretId } };
 }
-var zJsonRecord = z8.record(z8.string(), z8.json());
+var zJsonRecord = z10.record(z10.string(), z10.json());
 function prepareJsonConfig(config2, serverName, mcpUrl) {
   let parsedJson;
   try {
@@ -7717,13 +7840,13 @@ function runProfileMcpAdd(context) {
 }
 
 // src/skill-archive.ts
-import { readdirSync, readFileSync as readFileSync2, statSync } from "node:fs";
+import { readdirSync, readFileSync as readFileSync3, statSync } from "node:fs";
 import { basename, dirname as dirname2, join as join2, resolve } from "node:path";
 import * as tar from "tar";
-import * as z9 from "zod";
-var zCreateSkillCliBody = z9.object({
+import * as z11 from "zod";
+var zCreateSkillCliBody = z11.object({
   owner: zSkillOwnerInput,
-  archive: z9.string().min(1).describe("path to a skill directory (packed automatically) or a .zip/.tar.gz archive")
+  archive: z11.string().min(1).describe("path to a skill directory (packed automatically) or a .zip/.tar.gz archive")
 });
 var ARCHIVE_SUFFIXES = [".zip", ".tar.gz", ".tgz"];
 function assertPackable(dir) {
@@ -7761,20 +7884,20 @@ async function loadSkillArchive(archivePath) {
       `archive must be a directory or a ${ARCHIVE_SUFFIXES.join("/")} file: ${archivePath}`
     );
   }
-  return new File([new Uint8Array(readFileSync2(archivePath))], filename);
+  return new File([new Uint8Array(readFileSync3(archivePath))], filename);
 }
 
 // src/slack-integration.ts
-import * as z10 from "zod";
-var zSlackBody = z10.object({
-  app_name: z10.string().optional().describe("name for a new Slack app"),
-  app_configuration_token: z10.string().optional().describe("Slack app configuration token for a new app"),
-  icon_filename: z10.string().optional().describe("filename for the new Slack app icon"),
-  icon_data_base64: z10.string().optional().describe("base64-encoded Slack app icon"),
-  client_id: z10.string().optional().describe("existing Slack app client ID"),
-  client_secret: z10.string().optional().describe("existing Slack app client secret"),
-  signing_secret: z10.string().optional().describe("existing Slack app signing secret"),
-  return_to: z10.string().optional().describe("console-relative path opened after authorization"),
+import * as z12 from "zod";
+var zSlackBody = z12.object({
+  app_name: z12.string().optional().describe("name for a new Slack app"),
+  app_configuration_token: z12.string().optional().describe("Slack app configuration token for a new app"),
+  icon_filename: z12.string().optional().describe("filename for the new Slack app icon"),
+  icon_data_base64: z12.string().optional().describe("base64-encoded Slack app icon"),
+  client_id: z12.string().optional().describe("existing Slack app client ID"),
+  client_secret: z12.string().optional().describe("existing Slack app client secret"),
+  signing_secret: z12.string().optional().describe("existing Slack app signing secret"),
+  return_to: z12.string().optional().describe("console-relative path opened after authorization"),
   browser: zBrowserFlag
 });
 function parseRequest(body) {
@@ -7803,7 +7926,7 @@ function parseRequest(body) {
     if (!result2.success) {
       throw new CliInputError(
         `invalid existing Slack app parameters:
-${z10.prettifyError(result2.error)}`
+${z12.prettifyError(result2.error)}`
       );
     }
     return { kind: "existing-app", body: result2.data };
@@ -7825,7 +7948,7 @@ ${z10.prettifyError(result2.error)}`
   if (!result.success) {
     throw new CliInputError(
       `invalid Slack app parameters:
-${z10.prettifyError(result.error)}
+${z12.prettifyError(result.error)}
 Pass --app-name and --app-configuration-token, or existing app credentials.`
     );
   }
@@ -7917,7 +8040,31 @@ var commandGroups = [
         fn: sdk_gen_exports.createAgent,
         format: formatRecord(),
         path: zCreateAgentPath,
-        body: zCreateAgentBody
+        body: zConfigAttachment.extend({
+          profile: zAgentProfileId.optional(),
+          name: zAgentName.optional(),
+          message: z13.string().optional()
+        }),
+        transformBody: async ({ profile, name, message, ...attachment }, { client: client2, path }) => ({
+          profile,
+          name,
+          message,
+          config: await resolveConfigId(client2, path, attachment)
+        })
+      }),
+      op({
+        verb: "update",
+        summary: "Replace a running agent's config",
+        fn: sdk_gen_exports.updateAgentConfig,
+        format: (response) => formatRecord()(response.agent_config),
+        path: zUpdateAgentConfigPath,
+        body: zConfigSourceAttachment.extend({
+          expected_current_config_id: zAgentConfigId.optional().describe("fail unless the agent still runs this config")
+        }),
+        transformBody: ({ expected_current_config_id, ...attachment }) => ({
+          ...renderConfigSource(attachment),
+          expected_current_config_id
+        })
       }),
       op({
         verb: "cancel",
@@ -7937,7 +8084,7 @@ var commandGroups = [
       flowOp({
         verb: "mcp-add",
         summary: "Create an OAuth secret and add an MCP server to an agent",
-        path: z11.object({
+        path: z13.object({
           orgID: zOrganizationId,
           projectID: zProjectId,
           agentID: zAgentId
@@ -8399,7 +8546,7 @@ var commandGroups = [
       flowOp({
         verb: "mcp-oauth",
         summary: "Create a secret through an MCP server OAuth flow",
-        path: z11.object({ orgID: zOrganizationId }),
+        path: z13.object({ orgID: zOrganizationId }),
         body: zMcpOAuthBody,
         run: runMcpOAuth
       })
@@ -8472,7 +8619,28 @@ var commandGroups = [
         fn: sdk_gen_exports.createAgentProfile,
         format: formatRecord(),
         path: zCreateAgentProfilePath,
-        body: zCreateAgentProfileBody
+        body: zConfigAttachment.extend({ name: zResourceName }),
+        transformBody: async ({ name, ...attachment }, { client: client2, path }) => ({
+          name,
+          config: await resolveConfigId(client2, path, attachment)
+        })
+      }),
+      op({
+        verb: "update",
+        summary: "Point an agent profile at a new config",
+        fn: sdk_gen_exports.updateAgentProfile,
+        format: formatRecord(),
+        path: zUpdateAgentProfilePath,
+        body: zConfigAttachment.extend({
+          expected_current_config_id: zAgentConfigId.optional().describe("fail unless the profile still points at this config")
+        }),
+        transformBody: async ({ expected_current_config_id, ...attachment }, { client: client2, path }) => {
+          const expected = expected_current_config_id ?? await currentProfileConfigId(client2, path);
+          return {
+            config: await resolveConfigId(client2, path, attachment),
+            expected_current_config_id: expected
+          };
+        }
       }),
       op({
         verb: "rename",
@@ -8492,7 +8660,7 @@ var commandGroups = [
       flowOp({
         verb: "mcp-add",
         summary: "Create an OAuth secret and add an MCP server to an agent profile",
-        path: z11.object({
+        path: z13.object({
           orgID: zOrganizationId,
           projectID: zProjectId,
           agentProfileID: zAgentProfileId
@@ -8504,7 +8672,7 @@ var commandGroups = [
         verb: "slack",
         aliases: ["slack-setup"],
         summary: "Connect Slack to an agent profile through OAuth",
-        path: z11.object({
+        path: z13.object({
           orgID: zOrganizationId,
           projectID: zProjectId,
           agentProfileID: zAgentProfileId

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omnara",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Command-line interface for Omnara: launch and manage agents, organizations, integrations, and MCP servers",
   "license": "Apache-2.0",
   "homepage": "https://omnara.com",