@agentsky/sky 2.8.0 → 2.9.0

package/dist/{chunk-WFTZR5YO.js → chunk-NRTKH367.js}

@@ -545,7 +545,7 @@ __export(core_exports2, {
   parseAsync: () => parseAsync,
   parseURLObject: () => parseURLObject,
   prettifyError: () => prettifyError,
-  process: () => process,
+  process: () => process2,
   regexes: () => regexes_exports,
   registry: () => registry,
   safeDecode: () => safeDecode,
@@ -15149,7 +15149,7 @@ function handleUnrepresentable(schema, ctx, json2, params, message) {
   Object.assign(json2, result);
   return true;
 }
-function process(schema, ctx, _params = { path: [], schemaPath: [] }) {
+function process2(schema, ctx, _params = { path: [], schemaPath: [] }) {
   var _a3;
   const def = schema._zod.def;
   const seen = ctx.seen.get(schema);
@@ -15188,7 +15188,7 @@ function process(schema, ctx, _params = { path: [], schemaPath: [] }) {
     if (parent) {
       if (!result.ref)
         result.ref = parent;
-      process(parent, ctx, params);
+      process2(parent, ctx, params);
       ctx.seen.get(parent).isParent = true;
     }
   }
@@ -15623,14 +15623,14 @@ function isTransforming(_schema, _ctx) {
 }
 var createToJSONSchemaMethod = (schema, processors = {}) => (params) => {
   const ctx = initializeContext({ ...params, processors });
-  process(schema, ctx);
+  process2(schema, ctx);
   extractDefs(ctx, schema);
   return finalize(ctx, schema);
 };
 var createStandardJSONSchemaMethod = (schema, io, processors = {}) => (params) => {
   const { libraryOptions, target } = params ?? {};
   const ctx = initializeContext({ ...libraryOptions ?? {}, target, io, processors });
-  process(schema, ctx);
+  process2(schema, ctx);
   extractDefs(ctx, schema);
   return finalize(ctx, schema);
 };
@@ -15862,7 +15862,7 @@ var arrayProcessor = (schema, ctx, _json, params) => {
   if (typeof maximum === "number")
     json2.maxItems = maximum;
   json2.type = "array";
-  json2.items = process(def.element, ctx, {
+  json2.items = process2(def.element, ctx, {
     ...params,
     path: [...params.path, "items"]
   });
@@ -15888,7 +15888,7 @@ var objectProcessor = (schema, ctx, _json, params) => {
   json2.type = "object";
   json2.properties = {};
   for (const key in shape) {
-    assignProp(json2.properties, key, process(shape[key], ctx, {
+    assignProp(json2.properties, key, process2(shape[key], ctx, {
       ...params,
       path: [...params.path, "properties", key]
     }));
@@ -15911,7 +15911,7 @@ var objectProcessor = (schema, ctx, _json, params) => {
     if (ctx.io === "output")
       json2.additionalProperties = false;
   } else if (def.catchall) {
-    json2.additionalProperties = process(def.catchall, ctx, {
+    json2.additionalProperties = process2(def.catchall, ctx, {
       ...params,
       path: [...params.path, "additionalProperties"]
     });
@@ -15920,7 +15920,7 @@ var objectProcessor = (schema, ctx, _json, params) => {
 var unionProcessor = (schema, ctx, json2, params) => {
   const def = schema._zod.def;
   const isExclusive = def.inclusive === false;
-  const options = def.options.map((x, i) => process(x, ctx, {
+  const options = def.options.map((x, i) => process2(x, ctx, {
     ...params,
     path: [...params.path, isExclusive ? "oneOf" : "anyOf", i]
   }));
@@ -15932,11 +15932,11 @@ var unionProcessor = (schema, ctx, json2, params) => {
 };
 var intersectionProcessor = (schema, ctx, json2, params) => {
   const def = schema._zod.def;
-  const a = process(def.left, ctx, {
+  const a = process2(def.left, ctx, {
     ...params,
     path: [...params.path, "allOf", 0]
   });
-  const b = process(def.right, ctx, {
+  const b = process2(def.right, ctx, {
     ...params,
     path: [...params.path, "allOf", 1]
   });
@@ -15954,11 +15954,11 @@ var tupleProcessor = (schema, ctx, _json, params) => {
   json2.type = "array";
   const prefixPath = ctx.target === "draft-2020-12" ? "prefixItems" : "items";
   const restPath = ctx.target === "draft-2020-12" ? "items" : ctx.target === "openapi-3.0" ? "items" : "additionalItems";
-  const prefixItems = def.items.map((x, i) => process(x, ctx, {
+  const prefixItems = def.items.map((x, i) => process2(x, ctx, {
     ...params,
     path: [...params.path, prefixPath, i]
   }));
-  const rest = def.rest ? process(def.rest, ctx, {
+  const rest = def.rest ? process2(def.rest, ctx, {
     ...params,
     path: [...params.path, restPath, ...ctx.target === "openapi-3.0" ? [def.items.length] : []]
   }) : null;
@@ -16083,7 +16083,7 @@ var recordProcessor = (schema, ctx, _json, params) => {
   const keyBag = keyType._zod.bag;
   const patterns = keyBag?.patterns;
   if (def.mode === "loose" && patterns && patterns.size > 0) {
-    const valueSchema = process(def.valueType, ctx, {
+    const valueSchema = process2(def.valueType, ctx, {
       ...params,
       path: [...params.path, "patternProperties", "*"]
     });
@@ -16093,7 +16093,7 @@ var recordProcessor = (schema, ctx, _json, params) => {
     }
   } else {
     if (ctx.target === "draft-07" || ctx.target === "draft-2020-12") {
-      json2.propertyNames = process(def.keyType, ctx, {
+      json2.propertyNames = process2(def.keyType, ctx, {
         ...params,
         path: [...params.path, "propertyNames"]
       });
@@ -16105,7 +16105,7 @@ var recordProcessor = (schema, ctx, _json, params) => {
       }
       pending.push(schema);
     }
-    json2.additionalProperties = process(def.valueType, ctx, {
+    json2.additionalProperties = process2(def.valueType, ctx, {
       ...params,
       path: [...params.path, "additionalProperties"]
     });
@@ -16121,7 +16121,7 @@ var recordProcessor = (schema, ctx, _json, params) => {
 };
 var nullableProcessor = (schema, ctx, json2, params) => {
   const def = schema._zod.def;
-  const inner = process(def.innerType, ctx, params);
+  const inner = process2(def.innerType, ctx, params);
   const seen = ctx.seen.get(schema);
   if (ctx.target === "openapi-3.0") {
     seen.ref = def.innerType;
@@ -16132,7 +16132,7 @@ var nullableProcessor = (schema, ctx, json2, params) => {
 };
 var nonoptionalProcessor = (schema, ctx, _json, params) => {
   const def = schema._zod.def;
-  process(def.innerType, ctx, params);
+  process2(def.innerType, ctx, params);
   const seen = ctx.seen.get(schema);
   seen.ref = def.innerType;
 };
@@ -16152,7 +16152,7 @@ function serializeDefaultValue(value, schema, ctx, json2, params) {
 }
 var defaultProcessor = (schema, ctx, json2, params) => {
   const def = schema._zod.def;
-  process(def.innerType, ctx, params);
+  process2(def.innerType, ctx, params);
   const seen = ctx.seen.get(schema);
   seen.ref = def.innerType;
   const value = serializeDefaultValue(def.defaultValue, schema, ctx, json2, params);
@@ -16161,7 +16161,7 @@ var defaultProcessor = (schema, ctx, json2, params) => {
 };
 var prefaultProcessor = (schema, ctx, json2, params) => {
   const def = schema._zod.def;
-  process(def.innerType, ctx, params);
+  process2(def.innerType, ctx, params);
   const seen = ctx.seen.get(schema);
   seen.ref = def.innerType;
   if (ctx.io !== "input")
@@ -16172,7 +16172,7 @@ var prefaultProcessor = (schema, ctx, json2, params) => {
 };
 var catchProcessor = (schema, ctx, json2, params) => {
   const def = schema._zod.def;
-  process(def.innerType, ctx, params);
+  process2(def.innerType, ctx, params);
   const seen = ctx.seen.get(schema);
   seen.ref = def.innerType;
   let catchValue;
@@ -16188,32 +16188,32 @@ var pipeProcessor = (schema, ctx, _json, params) => {
   const def = schema._zod.def;
   const inIsTransform = def.in._zod.traits.has("$ZodTransform");
   const innerType = ctx.io === "input" ? inIsTransform ? def.out : def.in : def.out;
-  process(innerType, ctx, params);
+  process2(innerType, ctx, params);
   const seen = ctx.seen.get(schema);
   seen.ref = innerType;
 };
 var readonlyProcessor = (schema, ctx, json2, params) => {
   const def = schema._zod.def;
-  process(def.innerType, ctx, params);
+  process2(def.innerType, ctx, params);
   const seen = ctx.seen.get(schema);
   seen.ref = def.innerType;
   json2.readOnly = true;
 };
 var promiseProcessor = (schema, ctx, _json, params) => {
   const def = schema._zod.def;
-  process(def.innerType, ctx, params);
+  process2(def.innerType, ctx, params);
   const seen = ctx.seen.get(schema);
   seen.ref = def.innerType;
 };
 var optionalProcessor = (schema, ctx, _json, params) => {
   const def = schema._zod.def;
-  process(def.innerType, ctx, params);
+  process2(def.innerType, ctx, params);
   const seen = ctx.seen.get(schema);
   seen.ref = def.innerType;
 };
 var lazyProcessor = (schema, ctx, _json, params) => {
   const innerType = schema._zod.innerType;
-  process(innerType, ctx, params);
+  process2(innerType, ctx, params);
   const seen = ctx.seen.get(schema);
   seen.ref = innerType;
 };
@@ -16265,7 +16265,7 @@ function toJSONSchema(input2, params) {
     const defs = {};
     for (const entry of registry2._idmap.entries()) {
       const [_, schema] = entry;
-      process(schema, ctx2);
+      process2(schema, ctx2);
     }
     const schemas = {};
     const external = {
@@ -16288,7 +16288,7 @@ function toJSONSchema(input2, params) {
     return { schemas };
   }
   const ctx = initializeContext({ ...params, processors: allProcessors });
-  process(input2, ctx);
+  process2(input2, ctx);
   extractDefs(ctx, input2);
   return finalize(ctx, input2);
 }
@@ -16347,7 +16347,7 @@ var JSONSchemaGenerator = class {
    * This must be called before emit().
    */
   process(schema, _params = { path: [], schemaPath: [] }) {
-    return process(schema, this.ctx, _params);
+    return process2(schema, this.ctx, _params);
   }
   /**
    * Emit the final JSON Schema after processing.
@@ -19024,7 +19024,6 @@ var REASONING_EFFORTS = {
   sigit: null,
   stakpak: null,
   vtcode: null,
-  agentpool: null,
   code_assistant: null,
   docker_cagent: null,
   kiro: null,
@@ -19197,7 +19196,7 @@ var ACP_AGENTS = {
     "registryId": "antigravity-acp",
     "label": "Google Antigravity",
     "description": "Google\u2019s AI coding agent",
-    "version": "1.1.1",
+    "version": "1.3.0",
     "website": "https://antigravity.google/docs/ide/extensions"
   },
   "goose": {
@@ -19312,13 +19311,6 @@ var ACP_AGENTS = {
     "version": "0.96.14",
     "website": "https://github.com/vinhnx/VTCode/blob/main/docs/guides/zed-acp.md"
   },
-  "agentpool": {
-    "registryId": "agentpool",
-    "label": "AgentPool",
-    "description": "Agent pools configured through YAML and served over ACP.",
-    "version": "2.9.18",
-    "website": "https://phil65.github.io/agentpool/"
-  },
   "code_assistant": {
     "registryId": "code-assistant",
     "label": "Code Assistant",
@@ -19392,7 +19384,6 @@ var ACP_AGENT_TYPES = [
   "sigit",
   "stakpak",
   "vtcode",
-  "agentpool",
   "code_assistant",
   "docker_cagent",
   "kiro",
@@ -19405,7 +19396,6 @@ function isAcpAgentType(value) {
 
 // ../../packages/spec/src/acp-platform.ts
 var ACP_PLATFORM_MODELS = {
-  agentpool: ["deepseek-v4-pro", "deepseek-flash", "gpt-5.6-sol", "gpt-6-astra", "glm-5.3", "glm-5.3-flash", "kimi-k3", "kimi-k2.7-code", "grok-4.6", "claude-fable-5-1", "claude-sonnet-5", "claude-haiku-4-5"],
   cline: ["deepseek-v4-pro", "deepseek-flash", "gpt-5.6-sol", "gpt-5.6-terra", "gpt-5.6-luna", "gpt-6-astra", "glm-5.3", "glm-5.3-flash", "kimi-k3", "kimi-k2.7-code", "grok-4.6"],
   code_assistant: ["deepseek-v4-pro", "deepseek-flash", "gpt-5.6-sol", "gpt-5.6-luna", "glm-5.3", "glm-5.3-flash", "kimi-k3", "kimi-k2.7-code", "grok-4.6", "claude-opus-5", "claude-fable-5-1", "claude-sonnet-5", "claude-haiku-4-5"],
   crow_cli: ["deepseek-v4-pro"],
@@ -20122,7 +20112,7 @@ var ACP_ACCOUNT_PROFILES = {
   },
   "antigravity_acp": {
     "name": "Google Antigravity",
-    "version": "1.1.1",
+    "version": "1.3.0",
     "status": "documented",
     "setupModes": [
       {
@@ -20158,8 +20148,8 @@ var ACP_ACCOUNT_PROFILES = {
       }
     ],
     "notes": [
-      "The pinned ACP binary was initialized locally on Linux ARM64. Its authentication error documents this exact settings path and GEMINI_API_KEY input. Real provider authentication has not been tested.",
-      "The pinned binary requires IPv6 loopback (::1). Local initialization passed after enabling IPv6 loopback; sandbox-provider compatibility remains unverified."
+      "The pinned ACP 1.3.0 binary passed local Linux ARM64 initialization and a real Gemini API-key acceptance: two paid turns, a native file-tool round trip, same-session resume, and memory recall.",
+      "The pinned binary requires IPv6 loopback (::1). Local initialization and authenticated acceptance passed after enabling IPv6 loopback; sandbox-provider compatibility still requires release-template evidence."
     ],
     "sources": [
       "https://antigravity.google/docs/ide/extensions",
@@ -20500,43 +20490,6 @@ var ACP_ACCOUNT_PROFILES = {
       "https://github.com/mistralai/mistral-vibe/blob/main/README.md"
     ]
   },
-  "nova": {
-    "name": "Nova",
-    "version": "1.1.38",
-    "status": "documented",
-    "setupModes": [
-      {
-        "id": "anthropic",
-        "label": "Anthropic",
-        "fields": [
-          {
-            "key": "ANTHROPIC_API_KEY",
-            "label": "Anthropic API key",
-            "kind": "secret",
-            "required": true,
-            "source": "https://www.npmjs.com/package/@compass-ai/nova/v/1.1.38"
-          },
-          {
-            "key": "COMPASS_MODEL",
-            "label": "Model",
-            "kind": "string",
-            "required": true,
-            "source": "https://www.npmjs.com/package/@compass-ai/nova/v/1.1.38"
-          }
-        ],
-        "source": "https://www.npmjs.com/package/@compass-ai/nova/v/1.1.38",
-        "instructions": "Use a model from Nova\u2019s documentation. Nova may require first-time consent before it can run."
-      }
-    ],
-    "files": [],
-    "notes": [
-      "Provider environment configuration is documented. Authenticated ACP startup and first-run consent behavior require runtime verification."
-    ],
-    "sources": [
-      "https://github.com/Compass-Agentic-Platform/nova",
-      "https://www.npmjs.com/package/@compass-ai/nova/v/1.1.38"
-    ]
-  },
   "poolside": {
     "name": "Poolside",
     "version": "1.0.16",
@@ -20716,52 +20669,6 @@ var ACP_ACCOUNT_PROFILES = {
       "https://raw.githubusercontent.com/vinhnx/VTCode/main/docs/config/CONFIG_FIELD_REFERENCE.md"
     ]
   },
-  "agentpool": {
-    "name": "AgentPool",
-    "version": "2.9.18",
-    "status": "documented",
-    "setupModes": [
-      {
-        "id": "configuration",
-        "label": "Native configuration",
-        "fields": [
-          {
-            "key": "file:.config/agentpool/agentpool.yml",
-            "label": "AgentPool agents and provider configuration",
-            "kind": "yaml",
-            "required": true,
-            "file": ".config/agentpool/agentpool.yml",
-            "source": "https://pypi.org/project/agentpool/2.9.18/"
-          },
-          {
-            "key": "provider_environment",
-            "label": "Provider environment JSON",
-            "kind": "json",
-            "required": false,
-            "source": "https://github.com/phil65/agentpool",
-            "environment": true
-          }
-        ],
-        "source": "https://pypi.org/project/agentpool/2.9.18/",
-        "instructions": "Import the agents and model configuration. If your selected provider uses environment credentials, include its documented variables as a JSON object of string values."
-      }
-    ],
-    "files": [
-      {
-        "path": ".config/agentpool/agentpool.yml",
-        "format": "yaml",
-        "required": true,
-        "source": "https://pypi.org/project/agentpool/2.9.18/"
-      }
-    ],
-    "notes": [
-      "The pinned 2.9.18 wheel confirms the native default path and explicit serve-acp config argument. The supplied YAML must select the intended agent and model."
-    ],
-    "sources": [
-      "https://github.com/phil65/agentpool",
-      "https://pypi.org/project/agentpool/2.9.18/"
-    ]
-  },
   "blackbox": {
     "name": "Blackbox AI",
     "version": null,
@@ -21175,6 +21082,13 @@ var MAX_FILESYSTEM_COMPONENT_BYTES = 255;
 var MAX_STAGED_COMPONENT_BYTES = MAX_FILESYSTEM_COMPONENT_BYTES - 13;
 
 // ../../packages/spec/src/usage.ts
+var rateLimitWindowSchema = external_exports.object({
+  /** The vendor's window name: `five_hour`, `seven_day`, `primary`, ... */
+  window: external_exports.string().min(1).max(64),
+  usedPercent: external_exports.number().min(0).max(100),
+  resetsAt: external_exports.iso.datetime({ offset: true }).nullish(),
+  windowMinutes: external_exports.number().int().positive().nullish()
+});
 var usageReportSchema = external_exports.object({
   idempotencyKey: external_exports.string().min(1).max(128),
   /** "turn" = pod self-report (one per turn); "model-gateway" = RFC-0071
@@ -21197,6 +21111,8 @@ var usageReportSchema = external_exports.object({
   basis: external_exports.enum(["provider", "estimated"]).default("provider"),
   interrupted: external_exports.boolean().default(false),
   durationMs: external_exports.number().int().min(0).nullish(),
+  /** Plan allowance windows observed during a subscription turn (pod reports only). */
+  rateLimits: external_exports.array(rateLimitWindowSchema).max(16).optional(),
   /** Supplier request start, set by the trusted model gateway. */
   occurredAt: external_exports.iso.datetime({ offset: true }).nullish(),
   /** Trusted product origin captured by the model gateway at call start. */
@@ -21212,6 +21128,17 @@ var usageReportSchema = external_exports.object({
   usageRaw: external_exports.unknown().nullish()
 });
 
+// ../../packages/spec/src/subscription-limits.ts
+var observedWindowSchema = rateLimitWindowSchema.extend({
+  /** When this window was last reported; windows are reported one at a time. */
+  observedAt: external_exports.iso.datetime({ offset: true })
+});
+var observedLimitsSchema = external_exports.object({
+  observedAt: external_exports.iso.datetime({ offset: true }),
+  windows: external_exports.array(observedWindowSchema).max(16)
+});
+var WEEK_MINUTES = 7 * 24 * 60;
+
 // ../../packages/spec/src/connection-support.ts
 var CHANNEL_IDS = ["slack", "telegram", "whatsapp", "imessage", "discord", "lark", "teams", "x", "email", "gchat", "line", "buzz"];
 var connectionSupportSchema = external_exports.object({
@@ -21220,7 +21147,7 @@ var connectionSupportSchema = external_exports.object({
 }).strict();
 
 // ../../packages/spec/src/question.ts
-var QUESTION_REQUEST_KINDS = ["connect_app"];
+var QUESTION_REQUEST_KINDS = ["connect_app", "connect_account", "spend"];
 var questionSchema = external_exports.object({
   requestId: external_exports.string().min(1),
   question: external_exports.string().trim().min(1),
@@ -21246,7 +21173,7 @@ var questionSchema = external_exports.object({
   /** What the platform is asking for when the question is one of its own
    *  requests rather than an agent's free question. Absent on an ordinary question. */
   kind: external_exports.enum(QUESTION_REQUEST_KINDS).optional(),
-  /** What the request is about: the app to connect, for `connect_app`. */
+  /** What the request is about: the app to connect for `connect_app`, the vendor for `connect_account`, the agent's handle for `spend`. */
   subject: external_exports.string().trim().min(1).max(200).optional()
 }).superRefine((value, context) => {
   if (new Set(value.options.map((option) => option.id)).size !== value.options.length) {
@@ -21906,6 +21833,24 @@ function isFilePayload(node2) {
   return typeof node2.data === "string" && node2.data !== "" && (typeof node2.media_type === "string" || typeof node2.mime_type === "string" || node2.type === "import.resource" || node2.type === "base64");
 }
 
+// ../../packages/spec/src/code-review.ts
+var codeReviewTargetSchema = external_exports.string().trim().max(2048).transform((value, ctx) => {
+  try {
+    const url2 = new URL(value);
+    const match = /^\/([\w.-]+)\/([\w.-]+)\/pull\/([1-9]\d*)(?:\/.*)?$/.exec(url2.pathname);
+    if (url2.protocol !== "https:" || url2.hostname !== "github.com" || url2.port || url2.username || url2.password || !match || !Number.isSafeInteger(Number(match[3]))) throw new Error();
+    return { owner: match[1], repo: match[2], number: Number(match[3]), url: `https://github.com/${match[1]}/${match[2]}/pull/${match[3]}` };
+  } catch {
+    ctx.addIssue({ code: "custom", message: "Enter a GitHub pull request URL." });
+    return external_exports.NEVER;
+  }
+});
+var codeReviewRequestSchema = external_exports.discriminatedUnion("action", [
+  external_exports.object({ action: external_exports.literal("read"), url: codeReviewTargetSchema }).strict(),
+  external_exports.object({ action: external_exports.literal("open"), url: codeReviewTargetSchema }).strict(),
+  external_exports.object({ action: external_exports.literal("review"), url: codeReviewTargetSchema, head: external_exports.string().regex(/^[a-f0-9]{40}$/i), body: external_exports.string().trim().max(65536), event: external_exports.enum(["COMMENT", "APPROVE", "REQUEST_CHANGES"]) }).strict().refine((request) => request.event === "APPROVE" || request.body.length > 0, { path: ["body"], message: "Add a review comment." })
+]);
+
 // ../../packages/spec/src/index.ts
 var NATIVE_AGENT_TYPES = [
   "hermes",
@@ -22012,7 +21957,6 @@ var allowedLlms = {
   sigit: [...ACP_PLATFORM_MODELS.sigit, "harness-default"],
   stakpak: [...ACP_PLATFORM_MODELS.stakpak, "harness-default"],
   vtcode: [...ACP_PLATFORM_MODELS.vtcode, "harness-default"],
-  agentpool: [...ACP_PLATFORM_MODELS.agentpool, "harness-default"],
   code_assistant: [...ACP_PLATFORM_MODELS.code_assistant, "harness-default"],
   docker_cagent: [...ACP_PLATFORM_MODELS.docker_cagent, "harness-default"],
   kiro: ["harness-default"],
@@ -22064,6 +22008,16 @@ var allowedLlms = {
     "gpt-6-astra",
     "deepseek-v4-pro",
     "deepseek-flash",
+    "claude-opus-5-5",
+    "claude-opus-5",
+    "claude-fable-5-1",
+    "claude-sonnet-5",
+    "claude-haiku-4-5",
+    "kimi-k3",
+    "kimi-k2.7-code",
+    "glm-5.3",
+    "glm-5.3-flash",
+    "grok-4.6",
     "gpt-5.5",
     "deepseek-v4-flash"
   ],
@@ -22072,6 +22026,9 @@ var allowedLlms = {
     "gpt-5.6-terra",
     "gpt-5.6-luna",
     "gpt-6-astra",
+    "gpt-6.1-sol",
+    "gpt-6-sol",
+    "gpt-6-luna",
     "deepseek-v4-pro",
     "deepseek-flash",
     "gemini-3.8-flash",
@@ -22095,6 +22052,10 @@ var allowedLlms = {
     "gpt-5.6-terra",
     "gpt-5.6-luna",
     "gpt-6-astra",
+    "gpt-6.1-sol",
+    "gpt-6-sol",
+    "gpt-6-luna",
+    "gemini-3.8-flash",
     "deepseek-v4-pro",
     "deepseek-flash",
     "glm-5.3",
@@ -22133,6 +22094,9 @@ var allowedLlms = {
     "gpt-5.6-terra",
     "gpt-5.6-luna",
     "gpt-6-astra",
+    "gpt-6.1-sol",
+    "gpt-6-sol",
+    "gpt-6-luna",
     "glm-5.3",
     "glm-5.3-flash",
     "grok-4.6",
@@ -22150,6 +22114,9 @@ var allowedLlms = {
     "gpt-5.6-terra",
     "gpt-5.6-luna",
     "gpt-6-astra",
+    "gpt-6.1-sol",
+    "gpt-6-sol",
+    "gpt-6-luna",
     "deepseek-v4-pro",
     "deepseek-flash",
     "glm-5.3",
@@ -22203,6 +22170,7 @@ var CHATGPT_PLAN_MODELS = /* @__PURE__ */ new Set([
   "gpt-5.6-luna",
   "gpt-5.5"
 ]);
+var CHATGPT_PLAN_HARNESSES = /* @__PURE__ */ new Set(["codex", "pi", "hermes", "opencode", "openclaw"]);
 var CLAUDE_PLAN_MODELS = /* @__PURE__ */ new Set([
   "claude-opus-5",
   "claude-fable-5-1",
@@ -22214,7 +22182,7 @@ var CLAUDE_PLAN_MODELS = /* @__PURE__ */ new Set([
 ]);
 function modelSubscriptionProviderFor(agentType, llm) {
   if (agentType === "claude_code" && CLAUDE_PLAN_MODELS.has(llm)) return "anthropic";
-  if (agentType === "codex" && CHATGPT_PLAN_MODELS.has(llm)) return "openai";
+  if (CHATGPT_PLAN_HARNESSES.has(agentType) && CHATGPT_PLAN_MODELS.has(llm)) return "openai";
   if (agentType === "cursor" && llm === "harness-default") return "cursor";
   if (agentType === "grok_build" && llm === "harness-default") return "xai";
   if (agentType === "muse_code" && llm === "harness-default") return "meta";
@@ -22254,7 +22222,7 @@ var AGENT_TYPE_META = {
   },
   codex: {
     label: "Codex",
-    blurb: "OpenAI's coding agent. Uses GPT models."
+    blurb: "OpenAI's coding agent. Works with GPT, Claude, DeepSeek, Kimi, GLM and Grok."
   },
   openclaw: {
     label: "OpenClaw",

package/dist/index.js

@@ -16,7 +16,7 @@ import {
   skillRefSchema,
   splitMcpServers,
   supersededBy
-} from "./chunk-WFTZR5YO.js";
+} from "./chunk-NRTKH367.js";
 
 // src/index.ts
 import { existsSync as existsSync7, readFileSync as readFileSync10, writeFileSync as writeFileSync6 } from "fs";
@@ -64,7 +64,7 @@ function currentUniverse() {
 }
 
 // src/version.ts
-var CLI_VERSION = "2.8.0";
+var CLI_VERSION = "2.9.0";
 var USER_AGENT = `sky-cli/${CLI_VERSION} (${process.platform}; node/${process.versions.node})`;
 
 // src/api.ts
@@ -185,7 +185,7 @@ async function resolveSessionRef(ref) {
   return agent2.defaultSessionId;
 }
 async function* streamEvents(sessionId, signal) {
-  const { parseSseStream } = await import("./src-2DLGPJB6.js");
+  const { parseSseStream } = await import("./src-OEZ7BT2L.js");
   const res = await fetch(
     `${apiBase()}/sessions/${encodeURIComponent(sessionId)}/stream`,
     {
@@ -408,7 +408,7 @@ function scaffoldAgentFile(path, name) {
     path,
     `# agent.toml \u2014 everything the create wizard can set. Only \`name\` is required.
 name = "${name}"
-# type = "hermes"              # hermes | claude_code | codex | openclaw | pi | dsh | kimi_code | opencode
+# type = "pi"                  # pi (default) | hermes | claude_code | codex | openclaw | pi | dsh | kimi_code | opencode
 # llm = "deepseek-flash"       # must be compatible with type
 # reasoning_effort = "high"    # per harness \u2014 ${reasoningEffortDocLine()}
 # capabilities = []
@@ -626,7 +626,7 @@ async function createClone(local, opts) {
   if (local.truncated) console.log("  note: instructions exceeded 100k chars and were truncated");
   if (local.droppedServers.length) {
     console.log(
-      `Dropped (need credentials \u2014 not supported yet): ${local.droppedServers.map((n) => `${n} MCP`).join(", ")}`
+      `Left out (need a key): ${local.droppedServers.map((n) => `${n} MCP`).join(", ")}. Run \`sky setup secrets\` to choose which keys to save to your vault.`
     );
   }
   if (opts.dryRun) {
@@ -740,7 +740,7 @@ async function syncClone(local, link, opts) {
   }
   if (local.droppedServers.length) {
     console.log(
-      `  dropped (need credentials \u2014 not supported yet): ${local.droppedServers.map((n) => `${n} MCP`).join(", ")}`
+      `  left out (need a key): ${local.droppedServers.map((n) => `${n} MCP`).join(", ")}. Run \`sky setup secrets\` to choose which keys to save to your vault.`
     );
   }
   writeLink(local.configRoot, { ...link, lastSyncedAt: (/* @__PURE__ */ new Date()).toISOString() });
@@ -845,10 +845,10 @@ function listClaudeCodeSessions(limit) {
         continue;
       }
       const workspace = decodeWorkspace(encoded);
-      for (const entry of entries) {
-        if (!entry.endsWith(".jsonl")) continue;
-        const sessionId = entry.slice(0, -6);
-        const mainFile = join3(projectDir, entry);
+      for (const entry2 of entries) {
+        if (!entry2.endsWith(".jsonl")) continue;
+        const sessionId = entry2.slice(0, -6);
+        const mainFile = join3(projectDir, entry2);
         let stat;
         try {
           stat = statSync(mainFile);
@@ -894,13 +894,13 @@ function listCodexSessions(limit) {
     } catch {
       return;
     }
-    for (const entry of entries) {
-      const full = join3(dir, entry.name);
-      if (entry.isDirectory()) {
+    for (const entry2 of entries) {
+      const full = join3(dir, entry2.name);
+      if (entry2.isDirectory()) {
         walk(full);
         continue;
       }
-      if (!entry.isFile() || !entry.name.startsWith("rollout-") || !entry.name.endsWith(".jsonl")) continue;
+      if (!entry2.isFile() || !entry2.name.startsWith("rollout-") || !entry2.name.endsWith(".jsonl")) continue;
       try {
         const first = readPrefix(full).split("\n", 1)[0];
         const meta = JSON.parse(first);
@@ -1269,92 +1269,179 @@ import { mkdirSync as mkdirSync3, readFileSync as readFileSync9, writeFileSync a
 import { dirname as dirname4, join as join8 } from "path";
 import { createInterface as createInterface3 } from "readline";
 
-// src/setup-local.ts
-import { existsSync as existsSync5, readdirSync as readdirSync2, readFileSync as readFileSync7, statSync as statSync2 } from "fs";
-import { homedir as homedir5 } from "os";
-import { dirname as dirname3, isAbsolute, join as join6, resolve as resolve3 } from "path";
-import { parse as parseToml2 } from "smol-toml";
+// src/mcp-register.ts
+import { spawnSync } from "child_process";
 
 // src/skill.ts
 import { mkdirSync as mkdirSync2, readFileSync as readFileSync6, writeFileSync as writeFileSync4 } from "fs";
 import { join as join5 } from "path";
+
+// src/catalog-file.ts
+var CATALOG_FILE = "catalog.md";
+var CATEGORY_ORDER = ["websites", "content", "video", "code", "research", "general"];
+function categoryOf(agent2) {
+  return CATEGORY_ORDER.find((category) => agent2.categories.includes(category)) ?? agent2.categories[0] ?? "general";
+}
+function describe(value) {
+  const parts = Object.entries(value).filter(([, item]) => item !== null && item !== void 0 && item !== false && item !== "").map(([key, item]) => item === true ? key : `${key}: ${typeof item === "string" ? item : JSON.stringify(item)}`);
+  return parts.length ? parts.join(", ") : null;
+}
+function entry(agent2) {
+  const engine = agent2.engine_type ? ` \xB7 engine ${agent2.engine_type}` : "";
+  const lines = [`### @${agent2.handle} \u2014 ${agent2.name}${engine}`, "", agent2.tagline];
+  if (agent2.does.length) lines.push("", `Does: ${agent2.does.join("; ")}`);
+  if (agent2.does_not.length) lines.push(`Does not: ${agent2.does_not.join("; ")}`);
+  const { mcp_servers: mcpServers, ...rest } = agent2.requirements;
+  if (typeof mcpServers === "boolean") lines.push(mcpServers ? "Can use MCP servers." : "Cannot use MCP servers.");
+  const details = describe(rest);
+  if (details) lines.push(`Details: ${details}`);
+  const pricing = describe(agent2.pricing);
+  if (pricing) lines.push(`Pricing: ${pricing}`);
+  return lines.join("\n");
+}
+function renderCatalog(agents, generatedAt) {
+  const header = [
+    "# AgentSky agent catalog",
+    "",
+    `Every agent you can hire, as of ${generatedAt.toISOString()}. Start one with \`start_session\` and its handle, written with the @.`,
+    "Run `npx @agentsky/sky setup` again to refresh this file; `search_catalog` always has the current list."
+  ];
+  if (!agents.length) return [...header, "", "The catalog was empty when this file was written. Use `search_catalog`.", ""].join("\n");
+  const own = agents.filter((agent2) => agent2.visibility === "workspace");
+  const shared = agents.filter((agent2) => agent2.visibility !== "workspace");
+  const sections = [];
+  if (own.length) sections.push(["## Your workspace's agents", ...own.map(entry)].join("\n\n"));
+  const groups = /* @__PURE__ */ new Map();
+  for (const agent2 of shared) groups.set(categoryOf(agent2), [...groups.get(categoryOf(agent2)) ?? [], agent2]);
+  const ordered = [...groups.keys()].sort((a, b) => {
+    const rank = (category) => CATEGORY_ORDER.includes(category) ? CATEGORY_ORDER.indexOf(category) : CATEGORY_ORDER.length;
+    return rank(a) - rank(b) || a.localeCompare(b);
+  });
+  for (const category of ordered) {
+    const title = category.charAt(0).toUpperCase() + category.slice(1);
+    sections.push([`## ${title}`, ...groups.get(category).map(entry)].join("\n\n"));
+  }
+  return [...header, "", sections.join("\n\n"), ""].join("\n");
+}
+
+// src/skill.ts
 var SKILL_NAME = "agentsky";
 var SKILL_MARKER = ".agentsky.json";
 function skillDocument() {
   return `---
 name: ${SKILL_NAME}
-description: Hand part of a job to another agent running in the cloud through AgentSky, and bring its result back. Use when the person asks for another agent or a named engine (Claude Code, Codex, Hermes, OpenClaw and others) to do, test or review something, or when independent work could run in parallel.
+description: "Hire cloud agents from the AgentSky catalog (included as ${CATALOG_FILE}) and coordinate them on one task. Use when the person names an agent by @handle, asks to have another agent (or another engine such as Codex, Claude Code, Gemini or Hermes) do, test or review part of the work, wants work to keep running in the cloud, or the work splits into independent parts that can run at the same time. Works through the agentsky MCP server, or the sky command where those tools are missing."
 ---
 
 # Working with other agents through AgentSky
 
-AgentSky runs long-lived agents in the cloud. With the \`sky\` command you can
-find one, give it a job, and read what it produced. You stay responsible for
-the result.
-
-If the \`agentsky\` MCP tools are available in this session (\`search_catalog\`,
-\`start_session\`, \`read_session\`, \`send_message\`), use them instead of the
-commands below; they do the same things.
+AgentSky runs long-lived agents in the cloud. You can hire them from its
+catalog, give each a part of the work, and collect what they produce. Agents you
+hire for the same piece of work share one task: a shared \`task/\` folder they all
+read and write, listed as one task in the person's AgentSky account. You stay
+responsible for the result.
 
-## Before you start
+Everything below is a tool of the \`agentsky\` MCP server. If those tools are
+missing in this session, use the \`sky\` commands under "Without the MCP tools"
+at the end; they do the same things, one agent at a time.
 
-Run \`sky auth whoami\`. If it says you are not logged in, ask the person to run
-\`sky auth login\` and stop there. Never ask them for a token.
+## When to hire
 
-## When to hand work over
-
-- When the person asks another agent to do, test or review something, do that.
-  Honor an agent or engine they name.
-- Otherwise, hand over work another agent is better suited to, or independent
-  parts that can run at the same time as your own.
-- Do the work yourself when it is small, when it depends on what you already
-  have in front of you, or when explaining it would take as long as doing it.
+- When the person names an agent (\`@handle\`) or an engine, or asks another agent
+  to test, review or do part of the work, do that. Do not substitute another one
+  silently.
+- Otherwise hire for work another agent is better suited to than you are, for
+  independent parts that can run at the same time, or for work that should keep
+  going after this conversation ends.
+- Do the work yourself when it is small, when it depends on what you already have
+  in front of you, or when explaining it would take as long as doing it.
+- Every hire spends the person's AgentSky balance. Say what you are about to hire
+  and roughly what it may cost before the first one, unless they already asked
+  for it.
 
 ## How to pick
 
-\`sky catalog search <words for the work> --json\`
+Read \`${CATALOG_FILE}\` in this skill's folder. It lists every agent you can hire,
+your own workspace's first, then by category: its \`@handle\`, its engine, what it
+does and does not do, whether it can use MCP servers, and how it is paid. Pick by
+the work, not by the name, and respect what an agent says it does not do.
 
-Each result has a \`handle\`, what the agent does, its \`engine_type\`, its
-categories, how it is paid, and what it needs. If the person names an engine,
-match its \`engine_type\` and do not substitute another one silently. Run the
-command with no words to see every agent. If nothing fits, do the work
-yourself and say so.
+Call \`search_catalog\` (with words for the work, or none to list everything)
+when \`${CATALOG_FILE}\` is missing, when nothing in it fits, or when the person names
+a handle it does not list: the catalog file is a snapshot from when the skill
+was installed. If nothing fits, do the work yourself and say so.
 
 ## How to brief
 
-\`sky session create @<handle> --title "<short name>" --message "<brief>" --json\`
+Start the first agent with \`start_session\`:
 
-It prints the new session's \`id\`. The agent starts working at once, on its own
-computer in the cloud. It cannot see this conversation or this machine, so a
-brief is one self-contained message that states:
+- \`agent_id\`: the handle, with its \`@\`.
+- \`message\`: the brief.
+- \`title\`: a short name for its part.
+- \`budget_cents\`: the most it may spend, in US cents. Always set one. When it is
+  reached the agent pauses instead of spending more.
+- \`idempotency_key\`: a new unique value for this hire. Reuse it only to retry
+  the exact same call after a timeout.
 
-1. what to produce,
-2. what "done" means,
-3. anything it must not do.
+The agent cannot see this conversation or your files. A brief is one
+self-contained paragraph that says:
 
-To give it a file, add \`--file <path>\`. Never put a password, key or token in a
-brief.
+1. what to produce;
+2. where to write it: a path under \`task/<its part>/\`;
+3. what "done" means;
+4. anything it must not do.
 
-## How to collect
+Never put a password, key or token in a brief.
 
-\`sky session read <session id> --wait --json\`
+Its task id is the first session's id. Start every other agent for the same work
+with that \`task_id\`, so it sees the same \`task/\` folder and the person sees one
+task. To hand an agent a file, write it with \`write_task_file\` before you brief
+it, and name its path in the brief.
 
-It waits until the agent finishes its turn and prints its messages, with
-\`finished\` true or false. If \`finished\` is false the wait timed out: run it
-again. A first turn can take a minute to begin while the agent's computer
-starts.
+## How to supervise
 
-To correct it, answer it or ask for more:
+- Call \`read_session\` with the \`session_id\`, \`cursor\` and \`message_id\` that
+  \`start_session\` or \`send_message\` returned and \`wait_seconds: 50\`. Call again
+  with the returned cursor until \`turn_finished\` is true, and at once whenever
+  \`has_more\` is true. The first turn also boots the agent's sandbox, which can
+  take a minute.
+- Run independent agents at the same time: start them all, then read each.
+- To steer or answer an agent, \`send_message\` once its turn is finished.
+- If \`get_task\` shows a request waiting on the person (a question, an approval,
+  or an app to connect with its link), show it to them and pass their answer with
+  \`answer_request\`. Never approve spending or access on their behalf.
+- An agent that finishes its first turn with no reply did not start properly:
+  \`stop_session\` it and hire again, or do that part yourself.
 
-\`sky session message <session id> "<text>" --detach\`
+## How to finish
 
-then read again. An agent saying it is done is not evidence: check what it
-produced before you rely on it.
+1. \`collect_result\` for each agent: its last reply and the files it wrote.
+2. Read the files with \`read_task_file\` and check each one exists and does what
+   was asked. An agent saying "done" is not evidence.
+3. Put the pieces together.
+4. If the person should be able to open or share the result, \`publish_artifact\`
+   the files; \`share_artifact\` only when they asked for a link.
+5. \`stop_session\` every agent you no longer need.
+6. Tell the person what was done, which agent did which part, and what it cost
+   (\`get_task\` reports the task's cost).
 
-## How to finish
+## Without the MCP tools
 
-Tell the person what was done and which agent did which part. Every agent you
-start is paid for by the person, so start only what the job needs.
+Run \`sky auth whoami\`. If it says you are not logged in, ask the person to run
+\`sky auth login\` and stop there. Never ask them for a token.
+
+- Pick: \`sky catalog search <words for the work> --json\`. Each result has a
+  \`handle\`, what the agent does, its \`engine_type\`, its categories, how it is
+  paid, and what it needs. Run it with no words to see every agent.
+- Brief: \`sky session create @<handle> --title "<short name>" --message "<brief>" --json\`
+  prints the new session's \`id\`. To give it a file, add \`--file <path>:/<name>\`:
+  the file is in the agent's working directory under that name, read-only, so
+  call it by that name in the brief.
+- Collect: \`sky session read <session id> --wait --json\` waits until the agent
+  finishes its turn and prints its messages, with \`finished\` true or false. If
+  \`finished\` is false the wait timed out: run it again. To correct it, answer it
+  or ask for more, \`sky session message <session id> "<text>" --detach\`, then
+  read again.
 `;
 }
 function installedVersion(dir) {
@@ -1372,16 +1459,71 @@ function installSkill(agent2, opts = {}) {
   const dir = join5(agent2.skillsDir, SKILL_NAME);
   const previous = installedVersion(dir);
   const outcome = previous === CLI_VERSION ? "current" : previous ? "updated" : "installed";
-  if (outcome !== "current" && !opts.dryRun) {
+  if (opts.dryRun) return { agent: agent2.id, path: dir, outcome };
+  if (outcome !== "current") {
     mkdirSync2(dir, { recursive: true });
     writeFileSync4(join5(dir, "SKILL.md"), skillDocument());
     writeFileSync4(join5(dir, SKILL_MARKER), `${JSON.stringify({ version: CLI_VERSION }, null, 2)}
 `);
   }
+  if (opts.catalog) {
+    mkdirSync2(dir, { recursive: true });
+    writeFileSync4(join5(dir, CATALOG_FILE), renderCatalog(opts.catalog, opts.now ?? /* @__PURE__ */ new Date()));
+  }
   return { agent: agent2.id, path: dir, outcome };
 }
 
+// src/mcp-register.ts
+var MCP_SERVER_NAME = SKILL_NAME;
+var CODEX_TOKEN_ENV = "AGENTSKY_API_KEY";
+function systemCommandRunner() {
+  return {
+    has: (command) => spawnSync(command, ["--version"], { stdio: "ignore" }).status === 0,
+    run: (command, args) => {
+      const result = spawnSync(command, args, { encoding: "utf8" });
+      return { status: result.status, stderr: result.stderr ?? "" };
+    }
+  };
+}
+function mcpUrlFor(apiBase2) {
+  return `${apiBase2.replace(/\/$/, "")}/mcp`;
+}
+function mcpCommands(agent2, opts) {
+  if (agent2 === "claude_code") {
+    return {
+      command: "claude",
+      remove: ["mcp", "remove", "--scope", "user", MCP_SERVER_NAME],
+      add: ["mcp", "add", "--scope", "user", "--transport", "http", MCP_SERVER_NAME, opts.mcpUrl, "--header", `Authorization: Bearer ${opts.token}`]
+    };
+  }
+  if (agent2 === "codex") {
+    return {
+      command: "codex",
+      remove: ["mcp", "remove", MCP_SERVER_NAME],
+      add: ["mcp", "add", MCP_SERVER_NAME, "--url", opts.mcpUrl, "--bearer-token-env-var", CODEX_TOKEN_ENV]
+    };
+  }
+  return null;
+}
+function redact(text, token) {
+  return text.split(token).join(`${token.slice(0, 10)}\u2026`);
+}
+function registerMcpServer(agent2, opts, runner = systemCommandRunner()) {
+  const commands = mcpCommands(agent2.id, opts);
+  if (!commands) return { agent: agent2.id, outcome: "unsupported" };
+  if (!runner.has(commands.command)) return { agent: agent2.id, outcome: "no_command", detail: `${commands.command} is not on PATH` };
+  if (opts.dryRun) return { agent: agent2.id, outcome: "planned", detail: redact([commands.command, ...commands.add].join(" "), opts.token) };
+  runner.run(commands.command, commands.remove);
+  const added = runner.run(commands.command, commands.add);
+  if (added.status !== 0) return { agent: agent2.id, outcome: "failed", detail: redact(added.stderr.trim() || `exit ${added.status}`, opts.token) };
+  return agent2.id === "codex" ? { agent: agent2.id, outcome: "registered", detail: `set ${CODEX_TOKEN_ENV} to an AgentSky API token in the shell that runs codex` } : { agent: agent2.id, outcome: "registered" };
+}
+
 // src/setup-local.ts
+import { existsSync as existsSync5, readdirSync as readdirSync2, readFileSync as readFileSync7, statSync as statSync2 } from "fs";
+import { homedir as homedir5 } from "os";
+import { dirname as dirname3, isAbsolute, join as join6, resolve as resolve3 } from "path";
+import { parse as parseToml2 } from "smol-toml";
 var MAX_SKILL_FILE_BYTES = 1024 * 1024;
 var MAX_IMPORT_DEPTH = 5;
 var SKIPPED_DIRS = /* @__PURE__ */ new Set([".git", "node_modules"]);
@@ -1395,12 +1537,12 @@ function sensitive(name) {
 }
 function skillFiles(root, prefix) {
   const files2 = [];
-  for (const entry of readdirSync2(root, { withFileTypes: true })) {
-    const path = join6(root, entry.name);
-    if (entry.isDirectory()) {
-      if (!SKIPPED_DIRS.has(entry.name)) files2.push(...skillFiles(path, `${prefix}/${entry.name}`));
-    } else if (entry.isFile() && !sensitive(entry.name) && statSync2(path).size <= MAX_SKILL_FILE_BYTES) {
-      files2.push({ path: `${prefix}/${entry.name}`, bytes: new Uint8Array(readFileSync7(path)) });
+  for (const entry2 of readdirSync2(root, { withFileTypes: true })) {
+    const path = join6(root, entry2.name);
+    if (entry2.isDirectory()) {
+      if (!SKIPPED_DIRS.has(entry2.name)) files2.push(...skillFiles(path, `${prefix}/${entry2.name}`));
+    } else if (entry2.isFile() && !sensitive(entry2.name) && statSync2(path).size <= MAX_SKILL_FILE_BYTES) {
+      files2.push({ path: `${prefix}/${entry2.name}`, bytes: new Uint8Array(readFileSync7(path)) });
     }
   }
   return files2;
@@ -1410,10 +1552,10 @@ function readLocalSkills(agents) {
   const ignored = [];
   for (const agent2 of agents) {
     if (!existsSync5(agent2.skillsDir)) continue;
-    for (const entry of readdirSync2(agent2.skillsDir, { withFileTypes: true })) {
-      const dir = join6(agent2.skillsDir, entry.name);
-      let isDir = entry.isDirectory();
-      if (entry.isSymbolicLink()) {
+    for (const entry2 of readdirSync2(agent2.skillsDir, { withFileTypes: true })) {
+      const dir = join6(agent2.skillsDir, entry2.name);
+      let isDir = entry2.isDirectory();
+      if (entry2.isSymbolicLink()) {
         try {
           isDir = statSync2(dir).isDirectory();
         } catch {
@@ -1431,7 +1573,7 @@ function readLocalSkills(agents) {
         ignored.push({ agent: agent2.id, dir, reason: `${taken.agent} already has a skill named ${name}` });
         continue;
       }
-      const files2 = skillFiles(dir, entry.name);
+      const files2 = skillFiles(dir, entry2.name);
       skills.push({ name, agent: agent2.id, dir, files: files2, bytes: files2.reduce((sum, file) => sum + file.bytes.length, 0) });
     }
   }
@@ -1497,8 +1639,8 @@ function bearerOf(def) {
   if (typeof def.bearer_token === "string" && def.bearer_token.trim()) return def.bearer_token.trim();
   const headers = def.headers ?? def.http_headers;
   if (!headers || typeof headers !== "object") return null;
-  const entry = Object.entries(headers).find(([name]) => name.toLowerCase() === "authorization");
-  const match = typeof entry?.[1] === "string" ? /^Bearer\s+(\S+)$/i.exec(entry[1].trim()) : null;
+  const entry2 = Object.entries(headers).find(([name]) => name.toLowerCase() === "authorization");
+  const match = typeof entry2?.[1] === "string" ? /^Bearer\s+(\S+)$/i.exec(entry2[1].trim()) : null;
   return match?.[1] ?? null;
 }
 function serversOf(agent2, home) {
@@ -1743,12 +1885,25 @@ function confirm3(question) {
 function kb2(bytes) {
   return `${Math.max(1, Math.round(bytes / 1024))} KB`;
 }
-function describe(event) {
+function describe2(event) {
   switch (event.type) {
     case "agents":
       return event.agents.length ? `Found on this computer: ${event.agents.map((agent2) => agent2.name).join(", ")}` : "No agent found on this computer (looked for Claude Code, Codex and Cursor).";
+    case "catalog":
+      return event.outcome === "read" ? `  agent catalog: ${event.agents} agent${event.agents === 1 ? "" : "s"}` : `  agent catalog: not read${event.detail ? ` (${event.detail})` : ""}; the skill looks agents up with search_catalog`;
     case "skill":
       return `  AgentSky skill ${event.outcome === "current" ? "already up to date" : event.outcome} for ${event.agent}`;
+    case "mcp":
+      switch (event.outcome) {
+        case "registered":
+          return `  agentsky MCP server registered for ${event.agent}${event.detail ? ` (${event.detail})` : ""}`;
+        case "planned":
+          return `  would run: ${event.detail}`;
+        case "unsupported":
+          return null;
+        default:
+          return `  agentsky MCP server not registered for ${event.agent}: ${event.detail ?? event.outcome}`;
+      }
     case "plan":
       return `  ${event.provider} plan: ${event.outcome === "already" ? "already connected" : event.outcome}${event.detail ? ` (${event.detail})` : ""}`;
     case "found": {
@@ -1799,22 +1954,40 @@ async function connectedProviders() {
   const { modelSubscriptions } = await api("GET", "/model-subscriptions");
   return new Set(modelSubscriptions.map((subscription) => subscription.provider));
 }
-async function defaultVaultId() {
+var WORKSPACE_VAULT_NAME = "default";
+async function findWorkspaceVault() {
   const { vaults } = await api("GET", "/vaults");
-  const existing = vaults.find((vault) => vault.display_name === "default");
-  if (existing) return existing.id;
-  return (await api("POST", "/vaults", { display_name: "default" })).vault.id;
+  return vaults.find((vault) => vault.display_name === WORKSPACE_VAULT_NAME)?.id ?? null;
+}
+async function workspaceVaultId() {
+  const existing = await findWorkspaceVault();
+  if (existing) return existing;
+  try {
+    return (await api("POST", "/vaults", { display_name: WORKSPACE_VAULT_NAME })).vault.id;
+  } catch (error) {
+    const raced = error instanceof ApiError && error.status === 409 ? await findWorkspaceVault() : null;
+    if (!raced) throw error;
+    return raced;
+  }
 }
 function message(error) {
   return error instanceof Error ? error.message : String(error);
 }
+async function readCatalog() {
+  if (!apiToken()) return { catalog: null, detail: "not logged in" };
+  try {
+    return { catalog: (await api("GET", "/catalog/agents")).agents };
+  } catch (error) {
+    return { catalog: null, detail: message(error) };
+  }
+}
 async function runSetup(opts) {
   const steps = opts.steps?.length ? opts.steps : [...SETUP_STEPS];
   const interactive = !opts.json && !opts.yes && !opts.dryRun;
   const emit = (event) => {
     if (opts.json) console.log(JSON.stringify(event));
     else {
-      const line = describe(event);
+      const line = describe2(event);
       if (line) console.log(line);
     }
   };
@@ -1822,7 +1995,7 @@ async function runSetup(opts) {
   const has = (step) => steps.includes(step);
   const agents = selectLocalAgents(opts.agents);
   emit({ type: "agents", agents: agents.map((agent2) => ({ id: agent2.id, name: agent2.name })) });
-  const needsToken = !opts.dryRun && (has("logins") || has("secrets") || has("import") && !opts.key);
+  const needsToken = !opts.dryRun && (has("skill") || has("logins") || has("secrets") || has("import") && !opts.key);
   if (needsToken && !apiToken()) {
     if (opts.json) throw new ApiError(401, "not_logged_in", "not logged in \u2014 run `sky auth login`");
     console.log("First, sign this computer in to AgentSky.");
@@ -1843,17 +2016,23 @@ async function runSetup(opts) {
     held = new Map((claimed.body.skills ?? []).map((skill) => [skill.name, skill.fingerprint]));
   };
   await tell();
-  if (has("skill") && agents.length && await agreed("Add the AgentSky skill to these agents, so they can hand work to others?")) {
+  if (has("skill") && agents.length && await agreed("Add the AgentSky skill and MCP server to these agents, so they can hand work to others?")) {
+    const { catalog: catalog2, detail } = await readCatalog();
+    emit(catalog2 ? { type: "catalog", outcome: "read", agents: catalog2.length } : { type: "catalog", outcome: "unavailable", ...detail ? { detail } : {} });
+    const token = apiToken();
     for (const agent2 of agents) {
       try {
-        const installed = installSkill(agent2, { dryRun: opts.dryRun });
+        const installed = installSkill(agent2, { dryRun: opts.dryRun, catalog: catalog2 });
         emit({ type: "skill", agent: agent2.id, outcome: installed.outcome, path: installed.path });
         if (!opts.dryRun) run2.agents.push({ id: agent2.id, skill: installed.outcome });
       } catch (error) {
         emit({ type: "skill", agent: agent2.id, outcome: "failed", path: agent2.skillsDir });
         emit({ type: "error", code: "skill_install_failed", message: message(error) });
         run2.agents.push({ id: agent2.id, skill: "failed" });
+        continue;
       }
+      const registered = token ? registerMcpServer(agent2, { token, mcpUrl: mcpUrlFor(apiBase()), dryRun: opts.dryRun }) : { agent: agent2.id, outcome: "skipped", detail: "not logged in" };
+      emit({ type: "mcp", agent: agent2.id, outcome: registered.outcome, ...registered.detail ? { detail: registered.detail } : {} });
     }
     await tell();
   }
@@ -1947,7 +2126,7 @@ async function saveSecrets(found, opts, interactive, emit) {
       continue;
     }
     try {
-      vaultId ??= await defaultVaultId();
+      vaultId ??= await workspaceVaultId();
       await api("POST", `/vaults/${encodeURIComponent(vaultId)}/secrets`, {
         display_name: secret.name,
         auth: { type: "static_bearer", mcp_server_url: secret.url, token: secret.token }
@@ -2683,7 +2862,7 @@ program.command("skill").description("the AgentSky skill for the agents on this
     for (const i of installs) console.log(`${i.agent.padEnd(12)} ${verb[i.outcome].padEnd(14)} ${i.path}`);
   })
 );
-program.command("setup [steps...]").description("bring this machine's agents to AgentSky: the skill, your plans, your skills and instructions, your tool keys").addHelpText("after", `
+program.command("setup [steps...]").description("bring this machine's agents to AgentSky: the skill and its MCP server, your plans, your skills and instructions, your tool keys").addHelpText("after", `
 Steps (all when none is named): ${SETUP_STEPS.join(" | ")}`).option("--key <key>", "a setup key from agentsky.dev/setup").option("--agent <id...>", "only these agents: claude_code | codex | cursor").option("--secret <name...>", "save these tool keys to your vault (asked one by one when omitted)").option("--no-claude", "leave the Claude plan alone").option("--plan <name...>", "connect only these plans: claude | chatgpt | cursor").option("--dry-run", "say what would be done; write and send nothing").option("-y, --yes", "do not ask before each step").option("--json", "print progress as one JSON object per line; never asks").action(
   run(async (steps, opts) => {
     const unknown = steps.find((step) => !SETUP_STEPS.includes(step));

package/dist/products.js

@@ -8,7 +8,7 @@ import {
   skillsArraySchema,
   systemMessageEventSchema,
   userMessageEventSchema
-} from "./chunk-WFTZR5YO.js";
+} from "./chunk-NRTKH367.js";
 
 // ../../packages/spec/src/compatibility.ts
 var capabilityInputsSchema = capabilitiesSchema;

package/dist/{src-2DLGPJB6.js → src-OEZ7BT2L.js}

@@ -1,7 +1,7 @@
 import {
   external_exports,
   messagePartSchema
-} from "./chunk-WFTZR5YO.js";
+} from "./chunk-NRTKH367.js";
 
 // ../../packages/chat/src/stream.ts
 async function* parseSseStream(body) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentsky/sky",
-  "version": "2.8.0",
+  "version": "2.9.0",
   "description": "sky — the AgentSky developer CLI: launch and talk to long-lived agents from your terminal.",
   "license": "MIT",
   "type": "module",