@akanjs/cli 3.0.0-beta.17 → 3.0.0-beta.19

package/{index-2sq06vv0.js → index-e4v6vhxq.js}

@@ -2,21 +2,22 @@
 import {
   SubagentPool2,
   akanCodePaths2,
-  McpServerConfig
-} from "./index-qt8dqgnf.js";
+  McpServerConfig,
+  McpSignIn
+} from "./index-9d6nvkz2.js";
 import {
   stripAnsi
 } from "./index-7md2g9vw.js";
 import {
+  akanCodeDefaultModel2,
   akanCodeModel2,
   akanCodeModelSupportsImages2,
   akanCodeModelWarnings2
-} from "./index-jwrpsrg3.js";
+} from "./index-667w0yah.js";
 
 // pkgs/@akanjs/devkit/codeAgent/agent/CodeAgent.ts
 import {
   createAgentSession,
-  DEFAULT_COMPACTION_SETTINGS,
   DefaultResourceLoader
 } from "@earendil-works/pi-coding-agent";
 import {
@@ -513,7 +514,7 @@ class AkanToolPack2 {
     return { name: "akan-tools", factory: async (pi) => await this.#register(pi) };
   }
   async names() {
-    const { ContextRunner } = await import("./context.runner-bys6ykcp.js");
+    const { ContextRunner } = await import("./context.runner-rs4rj15d.js");
     return [
       ...new ContextRunner().listMcpTools(this.#options.mode).map((tool) => tool.name),
       AkanToolPack2.verifyToolName
@@ -521,7 +522,7 @@ class AkanToolPack2 {
   }
   static verifyToolName = "akan_verify";
   async#register(pi) {
-    const { ContextRunner } = await import("./context.runner-bys6ykcp.js");
+    const { ContextRunner } = await import("./context.runner-rs4rj15d.js");
     const runner = new ContextRunner;
     const guidelineNames = await AkanToolPack2.#guidelineNames();
     for (const tool of runner.listMcpTools(this.#options.mode, { guidelineNames })) {
@@ -563,7 +564,7 @@ class AkanToolPack2 {
   }
   static async#guidelineNames() {
     try {
-      const { Prompter } = await import("./prompter-9mn3kp36.js");
+      const { Prompter } = await import("./prompter-1f8d9pcc.js");
       return await Prompter.listGuidelines();
     } catch {
       return [];
@@ -576,9 +577,78 @@ class AkanToolPack2 {
   }
 }
 
-// pkgs/@akanjs/devkit/codeAgent/tools/MailToolPack.ts
+// pkgs/@akanjs/devkit/codeAgent/tools/AskToolPack.ts
 import { Type as Type2 } from "typebox";
 
+class AskToolPack {
+  static toolName = "ask_user";
+  static maxQuestions = 4;
+  #options;
+  constructor(options) {
+    this.#options = options;
+  }
+  names() {
+    return this.#options.profile.ui.canPrompt ? [AskToolPack.toolName] : [];
+  }
+  extension() {
+    if (!this.#options.profile.ui.canPrompt)
+      return;
+    return { name: "akan-ask", factory: (pi) => this.#register(pi) };
+  }
+  #register(pi) {
+    pi.registerTool({
+      name: AskToolPack.toolName,
+      label: "Ask",
+      description: "Ask the user to decide something you cannot decide from the code or the request. Use it when two readings of the task would lead to materially different work, not for choices with an obvious default \u2014 and never to ask permission for work you were already asked to do. Offer concrete options whenever you can name them; mark one recommended when you have a view.",
+      promptSnippet: "ask_user: put a decision the user owns back to them, with options",
+      parameters: Type2.Object({
+        questions: Type2.Array(Type2.Object({
+          question: Type2.String({ description: "The whole question, as one sentence ending in a question mark." }),
+          header: Type2.Optional(Type2.String({ description: "Two or three words naming what is being chosen, e.g. 'Auth method'." })),
+          options: Type2.Optional(Type2.Array(Type2.Object({
+            label: Type2.String({ description: "The choice, in one to five words." }),
+            detail: Type2.Optional(Type2.String({ description: "What picking it means, or the trade-off it carries." })),
+            recommended: Type2.Optional(Type2.Boolean({ description: "Mark at most one. It is offered first and labelled as such." }))
+          }), { description: "Two to four distinct choices. Leave it out to ask for an answer in prose." })),
+          multiSelect: Type2.Optional(Type2.Boolean({ description: "Several options may be chosen together, rather than exactly one." })),
+          freeText: Type2.Optional(Type2.Boolean({
+            description: "Offer a further choice that lets the user type an answer of their own. Default true."
+          }))
+        }), { description: `One to ${AskToolPack.maxQuestions} questions, asked in order.` })
+      }),
+      execute: async (_id, params) => {
+        const questions = (params.questions ?? []).slice(0, AskToolPack.maxQuestions);
+        if (!questions.length)
+          return { content: [{ type: "text", text: "No question was asked." }], details: undefined, isError: true };
+        const answers = [];
+        for (const entry of questions) {
+          const options = (entry.options ?? []).map((option, at) => ({
+            key: `${at}`,
+            label: option.label,
+            ...option.detail ? { detail: option.detail } : {},
+            ...option.recommended ? { recommended: true } : {}
+          }));
+          const answer = await this.#options.ask({
+            prompt: entry.header ? `${entry.header} \u2014 ${entry.question}` : entry.question,
+            kind: options.length ? "select" : "text",
+            ...options.length ? { options } : {},
+            ...entry.multiSelect ? { multiSelect: true } : {},
+            freeText: entry.freeText ?? true
+          });
+          answers.push(`${entry.question}
+\u2192 ${answer ?? "(skipped \u2014 decide this yourself and say what you chose)"}`);
+        }
+        return { content: [{ type: "text", text: answers.join(`
+
+`) }], details: undefined };
+      }
+    });
+  }
+}
+
+// pkgs/@akanjs/devkit/codeAgent/tools/MailToolPack.ts
+import { Type as Type3 } from "typebox";
+
 class MailToolPack2 {
   static toolNames = ["list_peers", "send_peer_message"];
   #options;
@@ -599,7 +669,7 @@ class MailToolPack2 {
       label: "List peer sessions",
       description: "List the other akan code sessions running in this workspace right now, with their name and working directory. Call it before send_peer_message so you name a session that is actually there.",
       promptSnippet: "list_peers: the other akan code sessions running here",
-      parameters: Type2.Object({}),
+      parameters: Type3.Object({}),
       execute: async () => ({
         content: [{ type: "text", text: MailToolPack2.#render(this.#options.mailbox()?.peers() ?? []) }],
         details: undefined
@@ -610,9 +680,9 @@ class MailToolPack2 {
       label: "Message a peer session",
       description: "Hand a message to another akan code session in this workspace. It arrives there as a prompt, so it costs that session a turn \u2014 use it to hand over a piece of work or to warn it about a change you made, not to chat. Say what you want done and what you already did.",
       promptSnippet: "send_peer_message: hand work to another akan code session",
-      parameters: Type2.Object({
-        to: Type2.String({ description: "The peer's name, or the front of its id, from list_peers." }),
-        message: Type2.String({ description: "What that session should know or do." })
+      parameters: Type3.Object({
+        to: Type3.String({ description: "The peer's name, or the front of its id, from list_peers." }),
+        message: Type3.String({ description: "What that session should know or do." })
       }),
       execute: async (_id, params) => {
         const mailbox = this.#options.mailbox();
@@ -645,20 +715,32 @@ import {
   codeAgentClip,
   codeAgentOutputChars
 } from "akanjs/common";
-import { Type as Type3 } from "typebox";
+import { Type as Type4 } from "typebox";
 
 // pkgs/@akanjs/devkit/codeAgent/tools/McpClient.ts
 var protocolVersion = "2025-06-18";
 
+class McpUnauthorized2 extends Error {
+  challenge;
+  constructor(name, challenge) {
+    super(`MCP server "${name}" requires authentication`);
+    this.name = "McpUnauthorized";
+    this.challenge = challenge;
+  }
+}
+
 class McpClient2 {
+  static maxToolPages = 50;
   ref;
   #proc;
   #nextId = 0;
   #buffer = "";
   #pending = new Map;
   #sessionId;
-  constructor(ref) {
+  #token;
+  constructor(ref, token) {
     this.ref = ref;
+    this.#token = token;
   }
   async connect() {
     if (this.ref.transport === "stdio")
@@ -674,10 +756,19 @@ class McpClient2 {
     return this;
   }
   async listTools() {
-    const response = await this.#call("tools/list", {});
-    if (response.error)
-      throw new Error(response.error.message);
-    return response.result?.tools ?? [];
+    const tools = [];
+    let cursor;
+    for (let page = 0;page < McpClient2.maxToolPages; page += 1) {
+      const response = await this.#call("tools/list", cursor ? { cursor } : {});
+      if (response.error)
+        throw new Error(response.error.message);
+      tools.push(...response.result?.tools ?? []);
+      const next = response.result?.nextCursor;
+      if (!next || next === cursor)
+        return tools;
+      cursor = next;
+    }
+    return tools;
   }
   async callTool(name, args) {
     const response = await this.#call("tools/call", { name, arguments: args });
@@ -761,11 +852,16 @@ class McpClient2 {
       headers: {
         "content-type": "application/json",
         accept: "application/json, text/event-stream",
+        "mcp-protocol-version": protocolVersion,
+        ...this.ref.headers,
+        ...this.#token ? { authorization: `Bearer ${this.#token}` } : {},
         ...this.#sessionId ? { "mcp-session-id": this.#sessionId } : {}
       },
       body: JSON.stringify(body),
       signal: AbortSignal.timeout(30000)
     });
+    if (response.status === 401)
+      throw new McpUnauthorized2(this.ref.name, response.headers.get("www-authenticate") ?? "");
     this.#sessionId = response.headers.get("mcp-session-id") ?? this.#sessionId;
     const text = await response.text();
     if (!text.trim())
@@ -797,12 +893,22 @@ class McpToolPack2 {
     const pack = new McpToolPack2;
     for (const ref of refs) {
       const base = { name: ref.name, transport: ref.transport, target: McpServerConfig.targetOf(ref) };
+      const token = ref.transport === "http" ? await McpSignIn.token(ref, options.onNotice) : undefined;
       try {
-        const client = await new McpClient2(ref).connect();
+        const client = await new McpClient2(ref, token).connect();
         const tools = await client.listTools();
         pack.#clients.push({ client, tools });
-        pack.#status.push({ ...base, tools: tools.map((tool) => McpToolPack2.#nameOf(ref.name, tool.name)) });
+        pack.#status.push({
+          ...base,
+          tools: tools.map((tool) => McpToolPack2.#nameOf(ref.name, tool.name)),
+          auth: token ? "authorized" : "none"
+        });
       } catch (error) {
+        if (error instanceof McpUnauthorized2) {
+          options.onNotice?.(`MCP server "${ref.name}" needs signing in \u2014 /mcp login ${ref.name}`);
+          pack.#status.push({ ...base, tools: [], auth: "required" });
+          continue;
+        }
         options.onNotice?.(`MCP server "${ref.name}" is unavailable: ${String(error)}`);
         pack.#status.push({ ...base, tools: [], error: String(error) });
       }
@@ -832,7 +938,7 @@ class McpToolPack2 {
           label: `${client.ref.name}: ${tool.name}`,
           description,
           promptSnippet: `${name}: ${description.split(".")[0] ?? description}`,
-          parameters: Type3.Unsafe(tool.inputSchema),
+          parameters: Type4.Unsafe(tool.inputSchema),
           execute: async (_id, params) => {
             const result = await client.callTool(tool.name, params ?? {});
             return {
@@ -858,7 +964,7 @@ class McpToolPack2 {
 // pkgs/@akanjs/devkit/codeAgent/tools/SessionToolPack.ts
 import { SessionManager } from "@earendil-works/pi-coding-agent";
 import { codeAgentClip as codeAgentClip2, codeAgentOutputChars as codeAgentOutputChars2 } from "akanjs/common";
-import { Type as Type4 } from "typebox";
+import { Type as Type5 } from "typebox";
 var snippetChars = 240;
 
 class SessionToolPack2 {
@@ -881,9 +987,9 @@ class SessionToolPack2 {
       label: "Search sessions",
       description: "Search earlier coding-agent conversations in this workspace for a phrase, and get back the matching sessions with a snippet. Use it when the user refers to something decided before, or when you suspect this problem has been solved here already.",
       promptSnippet: "session_search: find earlier conversations in this workspace by phrase",
-      parameters: Type4.Object({
-        query: Type4.String({ description: "A phrase to look for, matched case-insensitively." }),
-        limit: Type4.Optional(Type4.Number({ description: "How many sessions to return, default 5." }))
+      parameters: Type5.Object({
+        query: Type5.String({ description: "A phrase to look for, matched case-insensitively." }),
+        limit: Type5.Optional(Type5.Number({ description: "How many sessions to return, default 5." }))
       }),
       execute: async (_id, params) => {
         const matches = await this.#search(params.query, params.limit ?? 5);
@@ -895,7 +1001,7 @@ class SessionToolPack2 {
       label: "Read session",
       description: "Read one earlier conversation, found with session_search, as plain text.",
       promptSnippet: "session_read: read one earlier conversation by id",
-      parameters: Type4.Object({ sessionId: Type4.String() }),
+      parameters: Type5.Object({ sessionId: Type5.String() }),
       execute: async (_id, params) => {
         const text = await this.#read(params.sessionId);
         return { content: [{ type: "text", text }], details: undefined, isError: text.startsWith("No session") };
@@ -928,7 +1034,7 @@ class SessionToolPack2 {
 
 // pkgs/@akanjs/devkit/codeAgent/tools/WebToolPack.ts
 import { codeAgentClip as codeAgentClip3, codeAgentOutputChars as codeAgentOutputChars3 } from "akanjs/common";
-import { Type as Type5 } from "typebox";
+import { Type as Type6 } from "typebox";
 
 class WebToolPack2 {
   #options;
@@ -993,7 +1099,7 @@ class WebToolPack2 {
       label: "Fetch",
       description: "Fetch a URL and return its readable text. HTML is stripped to text; the result is truncated.",
       promptSnippet: "web_fetch: fetch a URL and return its readable text",
-      parameters: Type5.Object({ url: Type5.String({ description: "Absolute http(s) URL." }) }),
+      parameters: Type6.Object({ url: Type6.String({ description: "Absolute http(s) URL." }) }),
       execute: async (_id, params) => {
         const refusal = WebToolPack2.#refuseHost(params.url, allowHosts);
         if (refusal)
@@ -1018,9 +1124,9 @@ ${codeAgentClip3(text, codeAgentOutputChars3)}` }
       label: "Search",
       description: `Search the web (${provider.name}) and return the top results as title, url and snippet.`,
       promptSnippet: "web_search: search the web and return titles, urls and snippets",
-      parameters: Type5.Object({
-        query: Type5.String(),
-        count: Type5.Optional(Type5.Number({ description: "How many results, default 5." }))
+      parameters: Type6.Object({
+        query: Type6.String(),
+        count: Type6.Optional(Type6.Number({ description: "How many results, default 5." }))
       }),
       execute: async (_id, params) => {
         const key = process.env[provider.envKey] ?? "";
@@ -1076,10 +1182,19 @@ class AkanCodePlugins2 {
     const sessionExtension = sessions.extension();
     const mail = new MailToolPack2({ profile: options.profile, mailbox: options.mailbox });
     const mailExtension = mail.extension();
+    const onAsk = options.onAsk;
+    const ask = onAsk ? new AskToolPack({ profile: options.profile, ask: onAsk }) : undefined;
+    const askExtension = ask?.extension();
     if (!options.profile.tools.akan)
       return {
-        extensions: [mcp?.extension(), webExtension, sessionExtension, mailExtension].filter((entry) => !!entry),
-        toolNames: [...mcp?.toolNames ?? [], ...web.names(), ...sessions.names(), ...mail.names()],
+        extensions: [mcp?.extension(), webExtension, sessionExtension, mailExtension, askExtension].filter((entry) => !!entry),
+        toolNames: [
+          ...mcp?.toolNames ?? [],
+          ...web.names(),
+          ...sessions.names(),
+          ...mail.names(),
+          ...ask?.names() ?? []
+        ],
         mcp: mcpStatus,
         dispose
       };
@@ -1114,6 +1229,8 @@ class AkanCodePlugins2 {
       extensions.push(sessionExtension);
     if (mailExtension)
       extensions.push(mailExtension);
+    if (askExtension)
+      extensions.push(askExtension);
     return {
       extensions,
       toolNames: [
@@ -1122,7 +1239,8 @@ class AkanCodePlugins2 {
         ...mcp?.toolNames ?? [],
         ...web.names(),
         ...sessions.names(),
-        ...mail.names()
+        ...mail.names(),
+        ...ask?.names() ?? []
       ],
       mcp: mcpStatus,
       dispose
@@ -1154,7 +1272,9 @@ class AkanCodePlugins2 {
 }
 
 // pkgs/@akanjs/devkit/codeAgent/agent/AkanCodeServices.ts
-import { existsSync as existsSync7, mkdirSync } from "fs";
+import { existsSync as existsSync7, mkdirSync, mkdtempSync } from "fs";
+import { tmpdir } from "os";
+import path7 from "path";
 import { ModelRuntime, SessionManager as SessionManager2, SettingsManager } from "@earendil-works/pi-coding-agent";
 
 // pkgs/@akanjs/devkit/codeAgent/tools/AkanEnvKeys.ts
@@ -1281,6 +1401,7 @@ var akanSystemPrompt2 = (profile) => {
     "- Prefer an akan workflow to a direct source edit. `list_workflows` / `explain_workflow` / `plan_workflow`, then `apply_workflow({ planPath })`. Editing source by hand is the fallback, not the default.",
     "- Read context with `inspect_akan_context` before reading source bodies; it answers most structural questions without spending the file.",
     "- Fetch the guideline for an area before a deep pass on it: `get_guideline`.",
+    "- A question about `akan code` itself \u2014 its slash commands, MCP servers, sessions, models, keys, or where its files live \u2014 is answered by the `akan-code` skill. Read it rather than describing the tool from memory.",
     "- Never hand-edit a generated file (`lib/cnst.ts`, `db.ts`, `st.ts`, any `*/index.ts` barrel). Fix the owning source and run `repair_generated` or `akan sync`."
   ];
   if (profile.tools.builtin.includes("write"))
@@ -1289,6 +1410,8 @@ var akanSystemPrompt2 = (profile) => {
     lines.push("- This session is read-only: there is no write, edit or bash tool. Report what should change instead of changing it.");
   if (profile.tools.subagent)
     lines.push('- Hand a self-contained search or read to `task` \u2014 `type: "explore"` reads and reports, `type: "code"` makes the change. Only its answer comes back, so give it everything it needs and ask for exactly what you want returned. Do it yourself when the reading is short or when you need the files in front of you.');
+  if (profile.ui.canPrompt)
+    lines.push("- Ask with `ask_user` when two readings of the request would lead to materially different work, and offer the options you can name. Do not ask for a choice that has an obvious default, and do not ask permission for work you were already asked to do \u2014 make the call, say the assumption, and carry on.");
   if (profile.approval !== "never")
     lines.push(`- Some tool calls need the user's approval (policy: ${profile.approval}). A refusal is an answer; do not retry it a different way.`);
   lines.push("- Secrets are refused at the tool boundary. If you need a value from `.env`, ask the user for it rather than looking for another way to read the file.", "", "## How to answer", "", "- Answer in as few words as carry the answer. A short question gets one sentence with no heading.", "- Do not open with what you are about to do, and do not close with a summary of what you did. The tool calls are already on the user's screen.", "- Skip headings, bold labels and bullet lists unless the answer is genuinely a list. Prose is shorter.", "- State a file as `path:line`. Do not paste a file back that the user can open.", "- Say what you could not do, and why, in one line. Do not offer alternatives nobody asked for.");
@@ -1374,11 +1497,20 @@ class AkanCodeServices2 {
     return SettingsManager.inMemory({
       enableInstallTelemetry: false,
       enableAnalytics: false,
-      quietStartup: true
+      quietStartup: true,
+      compaction: { reserveTokens: 32768 }
     });
   }
-  static async runtime(workspaceRoot) {
+  static async runtime(workspaceRoot, proxy = null) {
     mkdirSync(akanCodePaths2.globalDir(), { recursive: true, mode: 448 });
+    if (proxy) {
+      const runtime = await ModelRuntime.create({
+        authPath: path7.join(mkdtempSync(path7.join(tmpdir(), "akan-code-proxy-")), "auth.json"),
+        modelsPath: akanCodePaths2.modelsFile()
+      });
+      await proxy.apply(runtime);
+      return runtime;
+    }
     const runtime = await ModelRuntime.create({
       authPath: akanCodePaths2.authFile(),
       modelsPath: akanCodePaths2.modelsFile()
@@ -1387,7 +1519,7 @@ class AkanCodeServices2 {
     return runtime;
   }
   static sessions(workspaceRoot, cwd, profile, resume) {
-    if (profile.session.store !== "file")
+    if (profile.session.store === "memory")
       return SessionManager2.inMemory(cwd);
     const dir = akanCodePaths2.sessionsDir(workspaceRoot);
     mkdirSync(dir, { recursive: true });
@@ -1403,8 +1535,12 @@ class AkanCodeServices2 {
   static #skillPaths(profile, workspaceRoot) {
     if (!profile.context.skills)
       return [];
-    const workspace = akanCodePaths2.skillsDir(workspaceRoot);
-    return [akanCodePaths2.builtinSkillsDir(), existsSync7(workspace) ? workspace : undefined].filter((dir) => !!dir);
+    const dirs = [
+      akanCodePaths2.builtinSkillsDir(),
+      akanCodePaths2.globalSkillsDir(),
+      akanCodePaths2.skillsDir(workspaceRoot)
+    ];
+    return dirs.filter((dir) => !!dir && existsSync7(dir));
   }
   static resourceOptions(options) {
     const present = (dir) => existsSync7(dir) ? [dir] : [];
@@ -1430,6 +1566,7 @@ class CodeAgentAsks2 {
   #question;
   #approvals = new Map;
   #nextId = 0;
+  #epoch = Date.now().toString(36);
   get pendingQuestionId() {
     return this.#question?.question.questionId;
   }
@@ -1441,7 +1578,7 @@ class CodeAgentAsks2 {
   }
   nextId(prefix) {
     this.#nextId += 1;
-    return `${prefix}${this.#nextId}`;
+    return `${prefix}${this.#epoch}.${this.#nextId}`;
   }
   openQuestion(question) {
     this.#question?.deferred.resolve("");
@@ -1550,7 +1687,15 @@ class CodeAgentEventMapper2 {
       case "compaction_start":
         return [{ type: "compaction", phase: "start", reason: event.reason }];
       case "compaction_end":
-        return [{ type: "compaction", phase: "end", reason: event.reason }];
+        return [
+          {
+            type: "compaction",
+            phase: "end",
+            reason: event.reason,
+            ...event.errorMessage ? { error: event.errorMessage } : {},
+            ...event.aborted ? { aborted: true } : {}
+          }
+        ];
       case "auto_retry_start":
         return [
           {
@@ -1694,7 +1839,7 @@ class CodeAgentEventMapper2 {
 }
 
 // pkgs/@akanjs/devkit/codeAgent/agent/CodeAgentGate.ts
-import path7 from "path";
+import path8 from "path";
 var writeTools = new Set(["write", "edit"]);
 var commandTools = new Set(["bash"]);
 
@@ -1733,9 +1878,9 @@ class CodeAgentGate2 {
     return `The command names "${hit}", which the profile's deny list covers. Ask the user for the value instead of reading the file.`;
   }
   #deniedReason(target) {
-    const absolute = path7.isAbsolute(target) ? target : path7.resolve(this.#profile.paths.root, target);
-    const relative = path7.relative(this.#profile.paths.root, absolute);
-    if (relative.startsWith("..") || path7.isAbsolute(relative))
+    const absolute = path8.isAbsolute(target) ? target : path8.resolve(this.#profile.paths.root, target);
+    const relative = path8.relative(this.#profile.paths.root, absolute);
+    if (relative.startsWith("..") || path8.isAbsolute(relative))
       return `Path is outside the agent root (${this.#profile.paths.root}).`;
     if (this.#deny.some((glob) => glob.match(absolute) || glob.match(relative)))
       return "Path is on the profile's deny list (secrets and environment files are never readable).";
@@ -1782,6 +1927,137 @@ class CodeAgentGate2 {
   }
 }
 
+// pkgs/@akanjs/devkit/codeAgent/agent/CodeAgentProxy.ts
+import { readFile } from "fs/promises";
+class CodeAgentProxy {
+  static placeholderKey = "akan-code-proxy";
+  baseUrl;
+  providers;
+  #tokenFile;
+  #token;
+  constructor({ baseUrl, providers, tokenFile, token }) {
+    this.baseUrl = baseUrl.replace(/\/+$/, "");
+    this.providers = providers;
+    this.#tokenFile = tokenFile;
+    this.#token = token;
+    if (!tokenFile && !token)
+      throw new Error("AKAN_CODE_PROXY_URL needs AKAN_CODE_PROXY_TOKEN_FILE or AKAN_CODE_PROXY_TOKEN");
+  }
+  static fromEnv(profile) {
+    const baseUrl = process.env.AKAN_CODE_PROXY_URL?.trim() || profile?.network.proxyBaseUrl;
+    if (!baseUrl)
+      return null;
+    const providers = (process.env.AKAN_CODE_PROXY_PROVIDERS ?? akanCodeDefaultModel2.provider).split(",").map((provider) => provider.trim()).filter(Boolean);
+    return new CodeAgentProxy({
+      baseUrl,
+      providers,
+      tokenFile: process.env.AKAN_CODE_PROXY_TOKEN_FILE?.trim() || undefined,
+      token: process.env.AKAN_CODE_PROXY_TOKEN?.trim() || undefined
+    });
+  }
+  baseUrlFor(provider) {
+    return this.baseUrl.replaceAll("{provider}", provider);
+  }
+  async token() {
+    if (!this.#tokenFile)
+      return this.#token ?? "";
+    const token = (await readFile(this.#tokenFile, "utf8")).trim();
+    if (!token)
+      throw new Error(`${this.#tokenFile} is empty`);
+    return token;
+  }
+  async apply(runtime) {
+    const target = runtime;
+    const original = target.prepareRequest?.bind(runtime);
+    if (!original)
+      throw new Error("The model runtime no longer exposes prepareRequest; update CodeAgentProxy");
+    for (const provider of this.providers)
+      await runtime.setRuntimeApiKey(provider, CodeAgentProxy.placeholderKey);
+    target.prepareRequest = async (model, options = {}) => {
+      const apiKey = await this.token();
+      const prepared = await original(model, { ...options, apiKey });
+      return {
+        ...prepared,
+        model: { ...prepared.model, baseUrl: this.baseUrlFor(prepared.model.provider) },
+        options: { ...prepared.options, apiKey }
+      };
+    };
+  }
+}
+
+// pkgs/@akanjs/devkit/codeAgent/agent/CodeAgentSuspended.ts
+import { existsSync as existsSync8, mkdirSync as mkdirSync2, readFileSync as readFileSync4, rmSync, writeFileSync } from "fs";
+import path9 from "path";
+
+class CodeAgentSuspended {
+  #file;
+  #state;
+  constructor(file) {
+    this.#file = file;
+    this.#state = CodeAgentSuspended.#read(file);
+  }
+  static fileOf(sessionDir, sessionId) {
+    return sessionDir ? path9.join(sessionDir, `${sessionId}.suspended.json`) : null;
+  }
+  get question() {
+    return this.#state.question;
+  }
+  get approvals() {
+    return this.#state.approvals;
+  }
+  setQuestion(question) {
+    this.#state = { ...this.#state, question };
+    this.#save();
+  }
+  addApproval(request) {
+    this.#state = { ...this.#state, approvals: [...this.#state.approvals, request] };
+    this.#save();
+  }
+  takeQuestion(questionId) {
+    const question = this.#state.question;
+    if (question?.questionId !== questionId)
+      return;
+    this.#state = { approvals: this.#state.approvals };
+    this.#save();
+    return question;
+  }
+  takeApproval(approvalId) {
+    const request = this.#state.approvals.find((approval) => approval.approvalId === approvalId);
+    if (!request)
+      return;
+    this.#state = { ...this.#state, approvals: this.#state.approvals.filter((approval) => approval !== request) };
+    this.#save();
+    return request;
+  }
+  clear() {
+    if (!this.#state.question && !this.#state.approvals.length)
+      return;
+    this.#state = { approvals: [] };
+    this.#save();
+  }
+  #save() {
+    if (!this.#file)
+      return;
+    if (!this.#state.question && !this.#state.approvals.length) {
+      rmSync(this.#file, { force: true });
+      return;
+    }
+    mkdirSync2(path9.dirname(this.#file), { recursive: true });
+    writeFileSync(this.#file, `${JSON.stringify(this.#state)}
+`);
+  }
+  static #read(file) {
+    if (!file || !existsSync8(file))
+      return { approvals: [] };
+    try {
+      const parsed = JSON.parse(readFileSync4(file, "utf8"));
+      return { ...parsed.question ? { question: parsed.question } : {}, approvals: parsed.approvals ?? [] };
+    } catch {
+      return { approvals: [] };
+    }
+  }
+}
+
 // pkgs/@akanjs/devkit/codeAgent/agent/CodeAgentUi.ts
 class CodeAgentUi2 {
   #handlers;
@@ -1825,15 +2101,15 @@ class CodeAgentUi2 {
 // pkgs/@akanjs/devkit/codeAgent/agent/CodeMailbox.ts
 import {
   appendFileSync,
-  existsSync as existsSync8,
-  mkdirSync as mkdirSync2,
+  existsSync as existsSync9,
+  mkdirSync as mkdirSync3,
   readdirSync as readdirSync3,
-  readFileSync as readFileSync4,
-  rmSync,
+  readFileSync as readFileSync5,
+  rmSync as rmSync2,
   statSync as statSync4,
-  writeFileSync
+  writeFileSync as writeFileSync2
 } from "fs";
-import path8 from "path";
+import path10 from "path";
 
 class CodeMailbox2 {
   static staleMs = 20000;
@@ -1853,11 +2129,11 @@ class CodeMailbox2 {
     this.#name = name;
   }
   get inbox() {
-    return path8.join(this.#dir, "inbox", `${this.#id}.jsonl`);
+    return path10.join(this.#dir, "inbox", `${this.#id}.jsonl`);
   }
   open(cwd, onMail) {
-    mkdirSync2(path8.join(this.#dir, "live"), { recursive: true });
-    mkdirSync2(path8.join(this.#dir, "inbox"), { recursive: true });
+    mkdirSync3(path10.join(this.#dir, "live"), { recursive: true });
+    mkdirSync3(path10.join(this.#dir, "inbox"), { recursive: true });
     this.#read = CodeMailbox2.#lines(this.inbox).length;
     this.beat(cwd);
     this.#beat = setInterval(() => this.beat(cwd), CodeMailbox2.beatMs);
@@ -1874,7 +2150,7 @@ class CodeMailbox2 {
     this.#beat = null;
     this.#poll = null;
     try {
-      rmSync(path8.join(this.#dir, "live", `${this.#id}.json`), { force: true });
+      rmSync2(path10.join(this.#dir, "live", `${this.#id}.json`), { force: true });
     } catch {}
   }
   rename(name, cwd) {
@@ -1884,15 +2160,15 @@ class CodeMailbox2 {
   beat(cwd) {
     const peer = { id: this.#id, name: this.#name, cwd, pid: process.pid, at: Date.now() };
     try {
-      writeFileSync(path8.join(this.#dir, "live", `${this.#id}.json`), JSON.stringify(peer));
+      writeFileSync2(path10.join(this.#dir, "live", `${this.#id}.json`), JSON.stringify(peer));
     } catch {}
   }
   peers() {
-    const dir = path8.join(this.#dir, "live");
-    if (!existsSync8(dir))
+    const dir = path10.join(this.#dir, "live");
+    if (!existsSync9(dir))
       return [];
     const now = Date.now();
-    return readdirSync3(dir).filter((entry) => entry.endsWith(".json")).map((entry) => CodeMailbox2.#peer(path8.join(dir, entry))).filter((peer) => !!peer && peer.id !== this.#id && now - peer.at < CodeMailbox2.staleMs).sort((left, right) => right.at - left.at);
+    return readdirSync3(dir).filter((entry) => entry.endsWith(".json")).map((entry) => CodeMailbox2.#peer(path10.join(dir, entry))).filter((peer) => !!peer && peer.id !== this.#id && now - peer.at < CodeMailbox2.staleMs).sort((left, right) => right.at - left.at);
   }
   find(target) {
     const needle = target.trim().toLowerCase();
@@ -1910,8 +2186,8 @@ class CodeMailbox2 {
       throw new Error(`Too many messages: ${CodeMailbox2.sendsPerMinute} a minute is the ceiling.`);
     this.#sent.push(now);
     const mail = { at: now, from: this.#id, fromName: this.#name, text };
-    mkdirSync2(path8.join(this.#dir, "inbox"), { recursive: true });
-    appendFileSync(path8.join(this.#dir, "inbox", `${to}.jsonl`), `${JSON.stringify(mail)}
+    mkdirSync3(path10.join(this.#dir, "inbox"), { recursive: true });
+    appendFileSync(path10.join(this.#dir, "inbox", `${to}.jsonl`), `${JSON.stringify(mail)}
 `);
   }
   #drain() {
@@ -1924,7 +2200,7 @@ class CodeMailbox2 {
   }
   static #peer(file) {
     try {
-      const peer = JSON.parse(readFileSync4(file, "utf8"));
+      const peer = JSON.parse(readFileSync5(file, "utf8"));
       return typeof peer.id === "string" ? { ...peer, at: peer.at || statSync4(file).mtimeMs } : undefined;
     } catch {
       return;
@@ -1932,7 +2208,7 @@ class CodeMailbox2 {
   }
   static #lines(file) {
     try {
-      return readFileSync4(file, "utf8").split(`
+      return readFileSync5(file, "utf8").split(`
 `).filter((line) => !!line.trim());
     } catch {
       return [];
@@ -1949,15 +2225,15 @@ class CodeMailbox2 {
 
 // pkgs/@akanjs/devkit/codeAgent/agent/CodeSessionFork.ts
 import { randomBytes } from "crypto";
-import { readFileSync as readFileSync5, writeFileSync as writeFileSync2 } from "fs";
-import path9 from "path";
+import { readFileSync as readFileSync6, writeFileSync as writeFileSync3 } from "fs";
+import path11 from "path";
 import { codeAgentSessionName } from "akanjs/common";
 class CodeSessionFork2 {
   static fork(dir, id, name) {
     const source = CodeSessionIndex2.fileOf(dir, id);
     if (!source)
       throw new Error(`No stored session ${id} in ${dir}`);
-    const lines = readFileSync5(source, "utf8").split(`
+    const lines = readFileSync6(source, "utf8").split(`
 `).filter((line) => !!line.trim());
     if (!lines.length)
       throw new Error(`Session ${id} has nothing in it to fork`);
@@ -1970,8 +2246,8 @@ class CodeSessionFork2 {
     first.id = forked;
     first.timestamp = at.toISOString();
     records.push(CodeSessionFork2.#named(records, name ?? CodeSessionFork2.#nameOf(records), at));
-    const file = path9.join(dir, `${at.toISOString().replace(/[:.]/g, "-")}_${forked}.jsonl`);
-    writeFileSync2(file, `${records.map((record) => JSON.stringify(record)).join(`
+    const file = path11.join(dir, `${at.toISOString().replace(/[:.]/g, "-")}_${forked}.jsonl`);
+    writeFileSync3(file, `${records.map((record) => JSON.stringify(record)).join(`
 `)}
 `);
     return { id: forked, file };
@@ -2006,6 +2282,7 @@ class CodeAgent2 {
   #gate;
   #mapper = new CodeAgentEventMapper2;
   #asks = new CodeAgentAsks2;
+  #suspended = new CodeAgentSuspended(null);
   #listeners = new Set;
   #session;
   #disposePlugins;
@@ -2027,9 +2304,9 @@ class CodeAgent2 {
     const cwd = options.cwd ?? workspaceRoot;
     const agent = new CodeAgent2(options.profile);
     const settingsManager = AkanCodeServices2.settings();
-    const modelRuntime = await AkanCodeServices2.runtime(workspaceRoot);
+    const modelRuntime = await AkanCodeServices2.runtime(workspaceRoot, CodeAgentProxy.fromEnv(options.profile));
     const model = await akanCodeModel2(modelRuntime, options.model);
-    const compaction = DEFAULT_COMPACTION_SETTINGS;
+    const compaction = settingsManager.getCompactionSettings(model);
     const modelWarnings = akanCodeModelWarnings2(model, compaction.reserveTokens + compaction.keepRecentTokens);
     const akan = await AkanCodePlugins2.build({
       workspace: options.workspace,
@@ -2041,7 +2318,8 @@ class CodeAgent2 {
       currentSessionId: () => agent.sessionId,
       mailbox: () => agent.#mailbox,
       onNotice: (message) => agent.#emit({ type: "notice", level: "warning", message }),
-      onAgents: (agents) => agent.#emit({ type: "subagent", agents })
+      onAgents: (agents) => agent.#emit({ type: "subagent", agents }),
+      onAsk: (question) => agent.ask(question)
     });
     const resourceLoader = new DefaultResourceLoader({
       cwd,
@@ -2070,10 +2348,11 @@ class CodeAgent2 {
     agent.#disposePlugins = akan.dispose;
     agent.#mcp = akan.mcp;
     agent.#workspaceRoot = workspaceRoot;
-    if (options.profile.session.store === "file")
+    if (options.profile.session.store !== "memory")
       agent.#sessionDir = akanCodePaths2.sessionsDir(workspaceRoot);
     await agent.#attach(session, options.mode ?? "print");
-    if (agent.#sessionDir)
+    agent.#suspended = new CodeAgentSuspended(CodeAgentSuspended.fileOf(agent.#sessionDir, agent.sessionId));
+    if (agent.#sessionDir && options.profile.session.store === "file")
       agent.#openMail(akanCodePaths2.mailDir(workspaceRoot), cwd);
     for (const message of modelWarnings)
       agent.#emit({ type: "notice", level: "warning", message });
@@ -2147,6 +2426,11 @@ ${mail.text}`).catch((error) => this.#emit({ type: "notice", level: "error", mes
   announce() {
     this.#emit({ type: "session", info: this.info });
     this.#restore();
+    const { question, approvals } = this.#suspended;
+    if (question)
+      this.#emit({ type: "question", question });
+    for (const request of approvals)
+      this.#emit({ type: "approval", request });
   }
   #restore() {
     const session = this.#session;
@@ -2160,6 +2444,7 @@ ${mail.text}`).catch((error) => this.#emit({ type: "notice", level: "error", mes
       if (text)
         this.#emit({ type: "message", turnId, role: message.role, text });
     }
+    this.#emitContextNow();
   }
   static #textOf(content) {
     if (typeof content === "string")
@@ -2203,8 +2488,12 @@ ${mail.text}`).catch((error) => this.#emit({ type: "notice", level: "error", mes
     }
     if (this.#profile.interaction.question !== "suspend")
       return false;
-    this.#emit({ type: "question_resolved", questionId, answer, rendered });
-    await this.prompt(`The user answered: ${rendered}
+    const suspended = this.#suspended.takeQuestion(questionId);
+    if (!suspended)
+      return false;
+    const suspendedRendered = codeAgentRenderAnswer(suspended, answer);
+    this.#emit({ type: "question_resolved", questionId, answer, rendered: suspendedRendered });
+    await this.prompt(`The user answered: ${suspendedRendered}
 Continue the task.`);
     return true;
   }
@@ -2215,6 +2504,8 @@ Continue the task.`);
     }
     if (this.#profile.interaction.approval !== "suspend")
       return false;
+    if (!this.#suspended.takeApproval(approvalId))
+      return false;
     this.#emit({ type: "approval_resolved", approvalId, approved });
     if (approved)
       await this.prompt("The user approved the pending action. Retry it and continue.");
@@ -2249,6 +2540,23 @@ Continue the task.`);
     session.setThinkingLevel(effort);
     this.#emit({ type: "session", info: this.info });
   }
+  catalogue() {
+    const runtime = this.#session?.modelRuntime;
+    if (!runtime)
+      return [];
+    const current = this.#session?.model;
+    return runtime.getProviders().map((provider) => ({
+      id: provider.id,
+      name: provider.name ?? provider.id,
+      authorized: runtime.hasConfiguredAuth(provider.id),
+      models: (runtime.getModels(provider.id) ?? []).map((model) => ({
+        id: model.id,
+        name: model.name,
+        ...model.contextWindow ? { contextWindow: model.contextWindow } : {},
+        current: model.provider === current?.provider && model.id === current?.id
+      }))
+    })).sort((a, b) => a.id.localeCompare(b.id));
+  }
   async setModel(ref) {
     const session = this.#require();
     const model = await akanCodeModel2(session.modelRuntime, ref);
@@ -2301,6 +2609,9 @@ Continue the task.`);
   #emitContextUsage(eventType) {
     if (eventType !== "agent_end" && eventType !== "compaction_end")
       return;
+    this.#emitContextNow();
+  }
+  #emitContextNow() {
     const usage = this.#session?.getContextUsage();
     if (usage?.tokens == null)
       return;
@@ -2360,45 +2671,46 @@ Continue the task.`);
     if (!this.#profile.ui.canPrompt)
       return true;
     const approvalId = this.#asks.nextId("a");
-    this.#emit({
-      type: "approval",
-      request: {
-        approvalId,
-        toolCallId,
-        name,
-        summary: codeAgentClip5(summary, codeAgentLabelChars2),
-        policy: this.#profile.approval
-      }
-    });
+    const request = {
+      approvalId,
+      toolCallId,
+      name,
+      summary: codeAgentClip5(summary, codeAgentLabelChars2),
+      policy: this.#profile.approval
+    };
+    this.#emit({ type: "approval", request });
     if (this.#profile.interaction.approval === "suspend") {
+      this.#suspended.addApproval(request);
       this.#mapper.noteOutcome("awaiting");
       return false;
     }
     return await this.#asks.openApproval(approvalId);
   }
+  async ask(spec) {
+    const question = { questionId: this.#asks.nextId("q"), ...spec };
+    if (!this.#profile.ui.canPrompt) {
+      this.#emit({ type: "question_skipped", question, reason: "no-host" });
+      return;
+    }
+    this.#emit({ type: "question", question });
+    if (this.#profile.interaction.question === "suspend") {
+      this.#suspended.setQuestion(question);
+      this.#mapper.noteOutcome("awaiting");
+      return;
+    }
+    return await this.#asks.openQuestion(question) || undefined;
+  }
   #ui() {
     return new CodeAgentUi2({
-      ask: async (prompt, kind, choices) => {
-        if (!this.#profile.ui.canPrompt)
-          return;
-        const questionId = this.#asks.nextId("q");
-        const question = {
-          questionId,
-          prompt,
-          kind,
-          ...choices ? { options: choices.map((label) => ({ key: label, label })) } : {},
-          freeText: kind === "text"
-        };
-        this.#emit({ type: "question", question });
-        if (this.#profile.interaction.question === "suspend") {
-          this.#mapper.noteOutcome("awaiting");
-          return;
-        }
-        return await this.#asks.openQuestion(question) || undefined;
-      },
+      ask: async (prompt, kind, choices) => await this.ask({
+        prompt,
+        kind,
+        ...choices ? { options: choices.map((label) => ({ key: label, label })) } : {},
+        freeText: kind === "text"
+      }),
       notify: (level, message) => this.#emit({ type: "notice", level, message })
     });
   }
 }
 
-export { AkanEditScope2, DevLogFeedback2, PreviewChrome2, PreviewView2, PreviewFeedback2, TurnFeedback2, AkanCli2, AkanVerifier2, VerifyFeedback2, AkanToolPack2, MailToolPack2, McpClient2, McpToolPack2, SessionToolPack2, WebToolPack2, AkanCodePlugins2, AkanEnvKeys2, akanSystemPrompt2, CodeSessionIndex2, AkanCodeServices2, CodeAgentAsks2, CodeAgentEventMapper2, CodeAgentGate2, CodeAgentUi2, CodeMailbox2, CodeSessionFork2, CodeAgent2 };
+export { AkanEditScope2, DevLogFeedback2, PreviewChrome2, PreviewView2, PreviewFeedback2, TurnFeedback2, AkanCli2, AkanVerifier2, VerifyFeedback2, AkanToolPack2, MailToolPack2, McpUnauthorized2, McpClient2, McpToolPack2, SessionToolPack2, WebToolPack2, AkanCodePlugins2, AkanEnvKeys2, akanSystemPrompt2, CodeSessionIndex2, AkanCodeServices2, CodeAgentAsks2, CodeAgentEventMapper2, CodeAgentGate2, CodeAgentUi2, CodeMailbox2, CodeSessionFork2, CodeAgent2 };