@alan-ai-hq/agent-manager-darwin-arm64 0.1.136 → 0.1.137

package/alan-agent.cjs

@@ -20104,7 +20104,12 @@ var init_run_context = __esm({
       prMeta: pullRequestMetaSchema.optional(),
       currentUser: agentUserIdentitySchema.optional(),
       sessionVisibility: external_exports.enum(["private", "team"]).nullable().optional(),
-      workflowTools: external_exports.array(workflowToolRefSchema).optional()
+      workflowTools: external_exports.array(workflowToolRefSchema).optional(),
+      availableSkills: external_exports.array(external_exports.object({
+        name: external_exports.string().min(1),
+        description: external_exports.string(),
+        packageDirectory: external_exports.string().min(1)
+      })).max(2e3).optional()
     });
   }
 });
@@ -20358,6 +20363,7 @@ var init_desired_state = __esm({
       /** Omitted by older servers; only an explicit entitlement enables context-search guidance. */
       contextGraphEnabled: external_exports.boolean().optional(),
       cloudEnvironmentId: external_exports.guid().optional(),
+      sandboxId: external_exports.string().min(1).optional(),
       localRepoUrls: external_exports.array(external_exports.string().min(1)).optional()
       // Never here: the provider API key. The holder fetches it per run (RUN_PROVIDER_CREDENTIAL_PATH).
     });
@@ -21372,6 +21378,7 @@ var init_workflow_tools_filter = __esm({
     WORKFLOW_ALWAYS_ALLOWED_BUILTIN_TOOLS = [
       "search_context",
       "create_test_report",
+      "publish_capture",
       "create_plan",
       "create_document_artifact",
       "list_artifacts",
@@ -21853,12 +21860,14 @@ function isExternalMcpServerName(name) {
 function isMcpConfigKey(name) {
   return MCP_CONFIG_KEY.test(name);
 }
-var ALAN_MCP_AUTHORIZATION_ENV, ALAN_RUN_ID_ENV, MCP_CONFIG_KEY;
+var ALAN_MCP_AUTHORIZATION_ENV, ALAN_RUN_ID_ENV, ALAN_MCP_URL_ENV, ALAN_MCP_CREDENTIAL_FILE_ENV, MCP_CONFIG_KEY;
 var init_mcp_config = __esm({
   "../shared/dist/agent/mcp-config.js"() {
     "use strict";
     ALAN_MCP_AUTHORIZATION_ENV = "ALAN_MCP_AUTHORIZATION";
     ALAN_RUN_ID_ENV = "ALAN_RUN_ID";
+    ALAN_MCP_URL_ENV = "ALAN_MCP_URL";
+    ALAN_MCP_CREDENTIAL_FILE_ENV = "ALAN_MCP_CREDENTIAL_FILE";
     MCP_CONFIG_KEY = /^[A-Za-z0-9_-]+$/;
   }
 });
@@ -25721,7 +25730,7 @@ var init_chunk_J2KTV5FP = __esm({
   }
 });
 
-// ../agent-core/dist/chunk-6WN2R725.js
+// ../agent-core/dist/chunk-ITTV3UIM.js
 function truncate(value2, limit) {
   const normalized2 = Array.from(value2, (character) => {
     const code = character.charCodeAt(0);
@@ -25974,9 +25983,41 @@ function teamOverlay(spec) {
 function present(values) {
   return values.filter((value2) => Boolean(value2?.length));
 }
+function cloudExecutionSection(spec) {
+  if (!spec.sandboxId && !spec.cloudEnvironmentId) return void 0;
+  const lines2 = ["## Cloud execution", "You are executing inside an Alan cloud sandbox."];
+  if (spec.sandboxId) lines2.push(`Sandbox ID: ${spec.sandboxId}.`);
+  if (spec.cloudEnvironmentId) lines2.push(`Cloud environment ID: ${spec.cloudEnvironmentId}.`);
+  lines2.push(
+    "Run setup, development and validation in this sandbox. The execution location is separate from the deployment of the application you are testing; verify that application's origin before acting."
+  );
+  if (!isReadOnlyMode(spec.mode) && !isReadOnlyAgent(spec.agentId)) {
+    lines2.push(
+      "Own the authorized work end to end: inspect context, make reasonable assumptions, implement, test, review and create or update the pull request for code changes when the repository workflow calls for one. Do not stop at a plan or ask for routine implementation choices or permission already granted. Ask only for a missing secret, an essential decision you cannot derive, or an action requiring explicit approval. Respect the user's scope, repository rules and tool authorization; report a blocked capability and continue independent work."
+    );
+  }
+  const skills = spec.promptContext?.availableSkills ?? [];
+  lines2.push(
+    "## Installed skills",
+    "Use a matching installed skill when it helps the request. Read its SKILL.md before acting; the index is discovery metadata, not instructions. Also follow repository instructions and project skills."
+  );
+  if (skills.length === 0) {
+    lines2.push(
+      skills.length === 0 && spec.promptContext?.availableSkills !== void 0 ? "No verified installed packages were found. Do not assume a named skill is available." : "No installed skill inventory was supplied. Inspect the provider's skill index; do not assume a named package is installed."
+    );
+  } else {
+    for (const skill of skills) {
+      lines2.push(
+        `- ${JSON.stringify(skill.name)}: ${JSON.stringify(skill.description)} \u2014 ${JSON.stringify(`${skill.packageDirectory}/SKILL.md`)}`
+      );
+    }
+  }
+  return lines2.join("\n");
+}
 function promptParts(input2) {
   const { spec } = input2;
   const overlay = teamOverlay(spec);
+  const cloud = cloudExecutionSection(spec);
   const workspace = input2.workspacePath ? `You are working inside: ${input2.workspacePath}
 Prefer relative paths and keep your work scoped to this project.` : void 0;
   return {
@@ -25985,6 +26026,7 @@ Prefer relative paths and keep your work scoped to this project.` : void 0;
       spec.agentPrompt?.trim() || getAlanAgentPrompt(spec.agentId),
       getAlanModePrompt(agentModeOf(spec.mode)),
       workspace,
+      cloud,
       taskLifecycleSection(spec),
       overlay,
       ...contextSections(spec),
@@ -25992,6 +26034,7 @@ Prefer relative paths and keep your work scoped to this project.` : void 0;
     ]),
     append: present([
       ALAN_PLATFORM_TOOL_ROUTING_PROMPT,
+      cloud,
       spec.contextGraphEnabled === true ? ALAN_CONTEXT_SEARCH_PROMPT : void 0,
       overlay
     ])
@@ -26048,8 +26091,8 @@ ${body}` : body;
   return spec.mode === "plan" ? planModePrefix(prefixed) : prefixed;
 }
 var MAX_PARSED_ATTACHMENTS, MAX_PARSED_ATTACHMENT_CHARS, MAX_METADATA_CHARS, UNAVAILABLE, READ_ONLY_MODES, AGENT_MODES;
-var init_chunk_6WN2R725 = __esm({
-  "../agent-core/dist/chunk-6WN2R725.js"() {
+var init_chunk_ITTV3UIM = __esm({
+  "../agent-core/dist/chunk-ITTV3UIM.js"() {
     "use strict";
     init_agent2();
     MAX_PARSED_ATTACHMENTS = 3;
@@ -27321,7 +27364,7 @@ var init_claude = __esm({
     init_chunk_54ZRJOQP();
     init_chunk_J2KTV5FP();
     init_chunk_J4T6L5LX();
-    init_chunk_6WN2R725();
+    init_chunk_ITTV3UIM();
     init_chunk_YXWJW7I5();
     init_effort();
     import_crypto6 = require("crypto");
@@ -30098,7 +30141,7 @@ var init_codex = __esm({
     init_chunk_54ZRJOQP();
     init_chunk_J2KTV5FP();
     init_chunk_J4T6L5LX();
-    init_chunk_6WN2R725();
+    init_chunk_ITTV3UIM();
     init_chunk_YXWJW7I5();
     import_fs6 = require("fs");
     import_path6 = require("path");
@@ -42115,7 +42158,7 @@ var init_acp3 = __esm({
     init_chunk_54ZRJOQP();
     init_chunk_J2KTV5FP();
     init_chunk_J4T6L5LX();
-    init_chunk_6WN2R725();
+    init_chunk_ITTV3UIM();
     init_chunk_YXWJW7I5();
     import_promises48 = require("fs/promises");
     import_path9 = require("path");
@@ -43819,7 +43862,7 @@ var init_opencode = __esm({
     init_chunk_54ZRJOQP();
     init_chunk_J2KTV5FP();
     init_chunk_J4T6L5LX();
-    init_chunk_6WN2R725();
+    init_chunk_ITTV3UIM();
     init_chunk_YXWJW7I5();
     import_http10 = require("http");
     init_runtime_v2();
@@ -45627,7 +45670,7 @@ var init_droid = __esm({
     init_chunk_54ZRJOQP();
     init_chunk_J2KTV5FP();
     init_chunk_J4T6L5LX();
-    init_chunk_6WN2R725();
+    init_chunk_ITTV3UIM();
     init_chunk_YXWJW7I5();
     init_runtime_v2();
     import_crypto15 = require("crypto");
@@ -46729,7 +46772,7 @@ var init_antigravity = __esm({
     init_chunk_UGRKZTAD();
     init_chunk_54ZRJOQP();
     init_chunk_J4T6L5LX();
-    init_chunk_6WN2R725();
+    init_chunk_ITTV3UIM();
     init_chunk_YXWJW7I5();
     import_promises52 = require("fs/promises");
     import_path12 = require("path");
@@ -47434,7 +47477,7 @@ var init_command_code = __esm({
     init_chunk_54ZRJOQP();
     init_chunk_J2KTV5FP();
     init_chunk_J4T6L5LX();
-    init_chunk_6WN2R725();
+    init_chunk_ITTV3UIM();
     init_chunk_YXWJW7I5();
     import_promises53 = require("fs/promises");
     import_path15 = require("path");
@@ -52832,7 +52875,7 @@ var require_websocket_server = __commonJS({
 // package.json
 var package_default = {
   name: "@alan-ai-hq/agent-manager",
-  version: "0.1.136",
+  version: "0.1.137",
   private: true,
   type: "module",
   description: "Alan machine runtime (alan-agent): identity, link, reconciler, session holders, run log, uploader, local API",
@@ -52882,7 +52925,7 @@ var package_default = {
 
 // src/cli/commands/compat.ts
 var import_node_crypto30 = require("crypto");
-var import_promises64 = require("fs/promises");
+var import_promises65 = require("fs/promises");
 init_runtime_v2();
 init_zod();
 
@@ -63341,6 +63384,38 @@ async function resolveSkillInvocations(layout, invocations) {
   }
   return missing.length === 0 ? { kind: "resolved", skills: resolved } : { kind: "missing", names: missing };
 }
+async function availableSkillIndex(layout) {
+  const found = /* @__PURE__ */ new Map();
+  const candidates2 = [];
+  for (const skill of await readInstalledSkills(layout)) {
+    candidates2.push({
+      directory: packageDirectory(layout, skill.versionId),
+      contentHash: skill.contentHash
+    });
+  }
+  if (layout.nativeDir !== null) {
+    const entries = await (0, import_promises40.readdir)(layout.nativeDir, { withFileTypes: true }).catch(() => []);
+    for (const entry of entries) {
+      if (entry.isDirectory() || entry.isSymbolicLink())
+        candidates2.push({ directory: (0, import_node_path42.join)(layout.nativeDir, entry.name) });
+    }
+  }
+  for (const candidate of candidates2.slice(0, 2e3)) {
+    const skill = await inspectIndexedSkill(candidate.directory, candidate.contentHash);
+    if (skill !== null && !found.has(skill.name)) found.set(skill.name, skill);
+  }
+  return [...found.values()].sort((a, b) => a.name.localeCompare(b.name));
+}
+async function inspectIndexedSkill(directory, contentHash) {
+  try {
+    const inspected = await inspectSkillPackage(directory, { expectedName: null });
+    if (contentHash && inspected.contentHash !== contentHash) return null;
+    const { name, description } = inspected.metadata;
+    return { name, description, packageDirectory: directory };
+  } catch {
+    return null;
+  }
+}
 
 // src/capabilities/skills/local-preview.ts
 var MAX_INLINE_IMAGE_BYTES = 2 * 1024 * 1024;
@@ -65092,7 +65167,7 @@ async function sendNativeHookSignal(discoveryPath, hookSignal, signal) {
 
 // src/sessions/index.ts
 var import_node_crypto29 = require("crypto");
-var import_promises62 = require("fs/promises");
+var import_promises63 = require("fs/promises");
 var import_node_os10 = require("os");
 var import_node_path63 = require("path");
 init_runtime_v2();
@@ -65429,8 +65504,33 @@ function createConversationMcpAuthorization(options) {
   };
 }
 
-// src/holder/run-inputs.ts
+// src/holder/mcp-helper-access.ts
 var import_promises54 = require("fs/promises");
+function createHelperMcpAccess(options) {
+  return {
+    [Symbol.asyncDispose]: async () => {
+      await (0, import_promises54.rm)(options.credentialPath, { force: true });
+    },
+    url: options.managedMcp.url,
+    authorization: async (signal) => {
+      const authorization = await options.managedMcp.authorization(signal);
+      if (authorization === void 0 || signal.aborted) {
+        await (0, import_promises54.rm)(options.credentialPath, { force: true });
+        return void 0;
+      }
+      const credential = {
+        url: options.managedMcp.url,
+        authorization,
+        conversationId: options.conversationId
+      };
+      await writeJsonFileAtomic(options.credentialPath, credential);
+      return authorization;
+    }
+  };
+}
+
+// src/holder/run-inputs.ts
+var import_promises55 = require("fs/promises");
 var import_node_path53 = require("path");
 var NO_RUN_INPUTS = {
   attachments: [],
@@ -65446,16 +65546,16 @@ function safeFilename(filename) {
 async function prepareRunInputs(spec, { source, tmpDir, signal, skills = [] }) {
   const dir = (0, import_node_path53.join)(tmpDir, "runs", spec.runId);
   const cleanup = async () => {
-    await (0, import_promises54.rm)(dir, { recursive: true, force: true });
+    await (0, import_promises55.rm)(dir, { recursive: true, force: true });
   };
   try {
     const credential = await source.fetchProviderCredential(spec.runId, signal);
     const attachments = [];
-    if (spec.attachments?.length) await (0, import_promises54.mkdir)(dir, { recursive: true, mode: 448 });
+    if (spec.attachments?.length) await (0, import_promises55.mkdir)(dir, { recursive: true, mode: 448 });
     for (const [index, attachment] of (spec.attachments ?? []).entries()) {
       const bytes = await source.downloadAttachment(spec.runId, attachment.id, signal);
       const path4 = (0, import_node_path53.join)(dir, `${index}-${safeFilename(attachment.filename)}`);
-      await (0, import_promises54.writeFile)(path4, bytes, { mode: 384 });
+      await (0, import_promises55.writeFile)(path4, bytes, { mode: 384 });
       attachments.push({
         id: attachment.id,
         kind: attachment.kind,
@@ -65490,7 +65590,7 @@ init_runtime_v2();
 
 // src/holder/admission.ts
 var import_node_fs18 = require("fs");
-var import_promises58 = require("fs/promises");
+var import_promises59 = require("fs/promises");
 var import_node_os9 = require("os");
 var import_node_path58 = require("path");
 init_constants();
@@ -65504,7 +65604,7 @@ function resolveAlanDefaultWorkspacePath(homeDirectory = (0, import_node_os8.hom
 }
 
 // src/holder/admission-relocation.ts
-var import_promises55 = require("fs/promises");
+var import_promises56 = require("fs/promises");
 var import_node_path55 = require("path");
 var MAX_RELOCATION_CANDIDATES = 200;
 var RELOCATION_BUDGET_MS = 2e4;
@@ -65540,7 +65640,7 @@ async function originIdentity(git, path4, signal) {
 }
 async function childDirectories(parent, limit) {
   try {
-    const entries = await (0, import_promises55.readdir)(parent, { withFileTypes: true });
+    const entries = await (0, import_promises56.readdir)(parent, { withFileTypes: true });
     return entries.filter((entry) => entry.isDirectory()).slice(0, limit).map((entry) => (0, import_node_path55.join)(parent, entry.name));
   } catch {
     return [];
@@ -65577,7 +65677,7 @@ async function discoverRelocatedWorkspace(search) {
 
 // src/holder/checkout-refresh.ts
 var import_node_crypto26 = require("crypto");
-var import_promises56 = require("fs/promises");
+var import_promises57 = require("fs/promises");
 var import_node_path56 = require("path");
 function short(sha) {
   return sha.slice(0, 12);
@@ -65590,8 +65690,8 @@ function staleLine(path4, snapshot2, tip) {
 }
 async function claimOnce(dir, name) {
   try {
-    await (0, import_promises56.mkdir)(dir, { recursive: true, mode: 448 });
-    await (await (0, import_promises56.open)((0, import_node_path56.join)(dir, name), "wx")).close();
+    await (0, import_promises57.mkdir)(dir, { recursive: true, mode: 448 });
+    await (await (0, import_promises57.open)((0, import_node_path56.join)(dir, name), "wx")).close();
     return true;
   } catch {
     return false;
@@ -65674,7 +65774,7 @@ function createCheckoutRefresh(deps) {
 }
 
 // src/holder/lease.ts
-var import_promises57 = require("fs/promises");
+var import_promises58 = require("fs/promises");
 var import_node_path57 = require("path");
 var LEASE_CHECK_EVERY_MS = 5e3;
 var MAX_TRANSIENT_FAILURES = 3;
@@ -65689,8 +65789,8 @@ function identityFailure(code, workspacePath) {
   return { code, problemCode: "app.workspace.missing", message: MESSAGES[code], workspacePath };
 }
 async function fileIdentity(path4) {
-  const canonical = await (0, import_promises57.realpath)(path4);
-  const info = await (0, import_promises57.stat)(canonical, { bigint: true });
+  const canonical = await (0, import_promises58.realpath)(path4);
+  const info = await (0, import_promises58.stat)(canonical, { bigint: true });
   return `${canonical}:${info.dev}:${info.ino}`;
 }
 async function snapshot(git, path4, signal) {
@@ -65709,7 +65809,7 @@ async function snapshot(git, path4, signal) {
       workspace: await fileIdentity(path4),
       repository: await fileIdentity(commonDir),
       worktree: await fileIdentity(gitDir),
-      commonDir: await (0, import_promises57.realpath)(commonDir)
+      commonDir: await (0, import_promises58.realpath)(commonDir)
     };
   } catch {
     return null;
@@ -65722,7 +65822,7 @@ async function gitValue(git, path4, args, signal) {
 }
 async function pathExists(path4) {
   try {
-    await (0, import_promises57.stat)(path4);
+    await (0, import_promises58.stat)(path4);
     return true;
   } catch (error61) {
     return errnoCode(error61) !== "ENOENT" && errnoCode(error61) !== "ENOTDIR";
@@ -65731,13 +65831,13 @@ async function pathExists(path4) {
 async function hasGitMarker(path4) {
   let directory;
   try {
-    directory = await (0, import_promises57.realpath)(path4);
+    directory = await (0, import_promises58.realpath)(path4);
   } catch {
     return true;
   }
   for (; ; ) {
     try {
-      await (0, import_promises57.stat)((0, import_node_path57.join)(directory, ".git"));
+      await (0, import_promises58.stat)((0, import_node_path57.join)(directory, ".git"));
       return true;
     } catch (error61) {
       const code = errnoCode(error61);
@@ -65907,7 +66007,7 @@ function volumeRoot(path4) {
 }
 async function exists4(path4) {
   try {
-    await (0, import_promises58.stat)(path4);
+    await (0, import_promises59.stat)(path4);
     return true;
   } catch {
     return false;
@@ -65915,10 +66015,10 @@ async function exists4(path4) {
 }
 async function inspectReadiness(path4) {
   try {
-    if (!(await (0, import_promises58.stat)(path4)).isDirectory()) {
+    if (!(await (0, import_promises59.stat)(path4)).isDirectory()) {
       return { ready: false, missing: true, message: MESSAGES2.missing };
     }
-    await (0, import_promises58.access)(path4, import_node_fs18.constants.R_OK | import_node_fs18.constants.W_OK | import_node_fs18.constants.X_OK);
+    await (0, import_promises59.access)(path4, import_node_fs18.constants.R_OK | import_node_fs18.constants.W_OK | import_node_fs18.constants.X_OK);
     return { ready: true };
   } catch (error61) {
     const code = errnoCode(error61) ?? "";
@@ -65996,8 +66096,8 @@ async function admitDefaultWorkspace(spec, context, skills) {
   const { env } = context;
   const path4 = resolveAlanDefaultWorkspacePath(env.HOME || env.USERPROFILE || (0, import_node_os9.homedir)());
   try {
-    await (0, import_promises58.mkdir)(path4, { recursive: true, mode: 448 });
-    await (0, import_promises58.access)(path4, import_node_fs18.constants.R_OK | import_node_fs18.constants.W_OK | import_node_fs18.constants.X_OK);
+    await (0, import_promises59.mkdir)(path4, { recursive: true, mode: 448 });
+    await (0, import_promises59.access)(path4, import_node_fs18.constants.R_OK | import_node_fs18.constants.W_OK | import_node_fs18.constants.X_OK);
     return {
       kind: "admitted",
       spec: { ...spec, projectPath: path4 },
@@ -66013,6 +66113,16 @@ async function admitDefaultWorkspace(spec, context, skills) {
     );
   }
 }
+async function withInstalledCloudSkills(spec, context) {
+  if (!spec.sandboxId && !spec.cloudEnvironmentId || context.skills === void 0) return spec;
+  return {
+    ...spec,
+    promptContext: {
+      ...spec.promptContext,
+      availableSkills: await availableSkillIndex(context.skills)
+    }
+  };
+}
 async function admitRun(spec, context, signal) {
   const provider4 = await checkProvider(spec, context);
   if (provider4 !== null) return provider4;
@@ -66024,6 +66134,7 @@ async function admitRun(spec, context, signal) {
     );
   }
   const skills = selected.skills;
+  spec = await withInstalledCloudSkills(spec, context);
   const projectPath = spec.projectPath;
   if (projectPath === void 0) {
     return { kind: "admitted", spec, relocated: null, leaseTargets: [], skills };
@@ -66115,7 +66226,7 @@ async function respondToTurn(runningRunId, gate, driver, request2) {
 }
 
 // src/holder/session-facts.ts
-var import_promises59 = require("fs/promises");
+var import_promises60 = require("fs/promises");
 var CLI_RSS_CACHE_MS = 1e4;
 var LOGIN_PROBLEM_PREFIX = "cli.auth.";
 function isLoginFailure(result) {
@@ -66141,8 +66252,8 @@ function createSessionFacts(options) {
     const path4 = await resolveCommandOnPath(command, env, platform3);
     if (path4 === null) return null;
     try {
-      const real = await (0, import_promises59.realpath)(path4);
-      const info = await (0, import_promises59.stat)(real);
+      const real = await (0, import_promises60.realpath)(path4);
+      const info = await (0, import_promises60.stat)(real);
       return { command, key: `${real}:${info.ino}:${info.size}:${info.mtimeMs}` };
     } catch {
       return null;
@@ -66234,7 +66345,7 @@ var import_node_fs19 = require("fs");
 var import_node_path60 = require("path");
 
 // src/run-log/directory.ts
-var import_promises60 = require("fs/promises");
+var import_promises61 = require("fs/promises");
 var import_node_path59 = require("path");
 init_runtime_v2();
 init_zod();
@@ -66254,7 +66365,7 @@ function runDirectory(runsDir, runId) {
 }
 async function isRunClaimed(runsDir, runId) {
   try {
-    return (await (0, import_promises60.stat)(runDirectory(runsDir, runId).log)).size > 0;
+    return (await (0, import_promises61.stat)(runDirectory(runsDir, runId).log)).size > 0;
   } catch (error61) {
     if (errnoCode(error61) === "ENOENT") return false;
     throw error61;
@@ -66292,7 +66403,7 @@ async function writeCompleteRunLog(runsDir, meta3, records) {
 }
 
 // src/run-log/reader.ts
-var import_promises61 = require("fs/promises");
+var import_promises62 = require("fs/promises");
 init_runtime_v2();
 
 // src/run-log/tail.ts
@@ -66315,7 +66426,7 @@ function firstRecordLength(bytes) {
   return bytes.indexOf(RUN_LOG_RECORD_SEPARATOR) + 1;
 }
 async function openRunLogReader(path4) {
-  const handle = await (0, import_promises61.open)(path4, "r");
+  const handle = await (0, import_promises62.open)(path4, "r");
   const readAt = async (position, length) => {
     const buffer = Buffer.alloc(length);
     const { bytesRead } = await handle.read(buffer, 0, length, position);
@@ -66349,7 +66460,7 @@ async function openRunLogReader(path4) {
   };
 }
 async function readLastRecord(path4) {
-  const handle = await (0, import_promises61.open)(path4, "r").catch(() => null);
+  const handle = await (0, import_promises62.open)(path4, "r").catch(() => null);
   if (handle === null) return null;
   try {
     const { size } = await handle.stat();
@@ -67009,7 +67120,7 @@ var DEFAULT_MAX_ACTIVE_RUNS = 32;
 var HOLDER_BUSY = "busy";
 async function listIds(dir, schema) {
   const ids = [];
-  for (const name of await (0, import_promises62.readdir)(dir).catch(() => [])) {
+  for (const name of await (0, import_promises63.readdir)(dir).catch(() => [])) {
     const parsed = schema.safeParse(name);
     if (parsed.success) ids.push(parsed.data);
   }
@@ -67065,7 +67176,7 @@ async function openSessions(deps) {
     await reapLeftoverEngines(engineRecordsPath(dir), { clock, log, conversationId }).catch(
       (error61) => log.warn("sessions.engine_reap_failed", { conversationId, error: error61 })
     );
-    await (0, import_promises62.rm)(dir, { recursive: true, force: true });
+    await (0, import_promises63.rm)(dir, { recursive: true, force: true });
   };
   const retireIfGone = async (conversationId) => {
     const files = sessionFiles(paths, conversationId);
@@ -67153,7 +67264,7 @@ async function openSessions(deps) {
       log.info("sessions.reattached", { conversationId });
       return;
     }
-    if (alive) await (0, import_promises62.rm)(files.dir, { recursive: true, force: true });
+    if (alive) await (0, import_promises63.rm)(files.dir, { recursive: true, force: true });
     else await discardSession(conversationId);
   };
   const busyRunIds = async () => {
@@ -67211,7 +67322,7 @@ async function openSessions(deps) {
     const meta3 = await readRunMeta(dir.meta);
     const last = await readLastRecord(dir.log);
     if (meta3 === null || last === null) return null;
-    const logged = await (0, import_promises62.stat)(dir.log).catch((error61) => {
+    const logged = await (0, import_promises63.stat)(dir.log).catch((error61) => {
       if (errnoCode(error61) === "ENOENT") return null;
       throw error61;
     });
@@ -67591,7 +67702,7 @@ function takeEnrollmentCodeFromEnv(env = process.env) {
 }
 
 // src/cli/context.ts
-var import_promises63 = require("fs/promises");
+var import_promises64 = require("fs/promises");
 var import_node_os12 = require("os");
 var import_node_path65 = require("path");
 var DESKTOP_BUNDLE_IDS = {
@@ -67641,7 +67752,7 @@ async function installedServiceSpec(ctx) {
   const spec = serviceSpec(ctx);
   if (ctx.config.host === "app") return spec;
   const layout = installLayout(ctx.config.installDir, ctx.config.profile);
-  const installed = await (0, import_promises63.access)(layout.launcher).then(
+  const installed = await (0, import_promises64.access)(layout.launcher).then(
     () => true,
     () => false
   );
@@ -67769,7 +67880,7 @@ var manifestRevisionSchema = external_exports.object({ revision: external_export
 async function manifestRevision(path4) {
   let raw;
   try {
-    raw = JSON.parse(await (0, import_promises64.readFile)(path4, "utf8"));
+    raw = JSON.parse(await (0, import_promises65.readFile)(path4, "utf8"));
   } catch (error61) {
     throw new RuntimeFault("invalid_file", `Cannot read the skill manifest at ${path4}`, {
       cause: error61
@@ -67823,7 +67934,7 @@ async function runSkills(argv) {
 }
 
 // src/cli/commands/doctor.ts
-var import_promises67 = require("fs/promises");
+var import_promises68 = require("fs/promises");
 var import_node_path69 = require("path");
 init_runtime_v2();
 
@@ -68001,7 +68112,7 @@ async function authorizeDevice(input2) {
 }
 
 // src/identity/enroll.ts
-var import_promises65 = require("fs/promises");
+var import_promises66 = require("fs/promises");
 init_runtime_v2();
 
 // src/identity/installation.ts
@@ -68105,12 +68216,12 @@ async function enrollFromGrantFile(input2) {
     clock: input2.clock,
     access: input2.access
   });
-  await (0, import_promises65.rm)(input2.grantPath, { force: true });
+  await (0, import_promises66.rm)(input2.grantPath, { force: true });
   return machine;
 }
 
 // src/identity/migrate-v1.ts
-var import_promises66 = require("fs/promises");
+var import_promises67 = require("fs/promises");
 var import_node_path67 = require("path");
 init_runtime_v2();
 init_zod();
@@ -68161,8 +68272,8 @@ async function scrubLegacyInstall(install2) {
   const scrubbed = { ...install2.config, migratedToRuntimeV2: true };
   for (const key of SCRUBBED_KEYS) delete scrubbed[key];
   await writeJsonFileAtomic(`${install2.configPath}.migrated-v1`, scrubbed);
-  await (0, import_promises66.rm)(install2.configPath, { force: true });
-  await (0, import_promises66.rm)(install2.ownerLeasePath, { force: true });
+  await (0, import_promises67.rm)(install2.configPath, { force: true });
+  await (0, import_promises67.rm)(install2.ownerLeasePath, { force: true });
 }
 async function exchangeCredential(deps) {
   const { config: config2 } = deps.install;
@@ -68571,7 +68682,7 @@ async function probeHolder(dir, conversationId) {
   }
 }
 async function holdersCheck(ctx) {
-  const names = await (0, import_promises67.readdir)(ctx.paths.sessions).catch(() => []);
+  const names = await (0, import_promises68.readdir)(ctx.paths.sessions).catch(() => []);
   const holders = (await Promise.all(names.map((name) => probeHolder((0, import_node_path69.join)(ctx.paths.sessions, name), name)))).filter((facts) => facts !== null);
   const dead = holders.filter((holder) => !holder.alive).length;
   return check2(
@@ -68583,7 +68694,7 @@ async function holdersCheck(ctx) {
 }
 async function freeBytesAt(path4) {
   try {
-    const stats = await (0, import_promises67.statfs)(path4);
+    const stats = await (0, import_promises68.statfs)(path4);
     return { path: path4, freeBytes: stats.bavail * stats.bsize };
   } catch (error61) {
     const parent = (0, import_node_path69.dirname)(path4);
@@ -68722,7 +68833,7 @@ async function runDoctor(argv, context = cliContext) {
 }
 
 // src/cli/commands/git-credential.ts
-var import_promises68 = require("fs/promises");
+var import_promises69 = require("fs/promises");
 var import_node_net4 = require("net");
 var MAX_RESPONSE_BYTES = 64 * 1024;
 async function readAll(stream) {
@@ -68832,7 +68943,7 @@ async function configure(argv) {
 }
 async function configureGitGateway(config2, gatewayUrl, signal) {
   const { launcher } = installLayout(config2.installDir, config2.profile);
-  const installed = await (0, import_promises68.access)(launcher).then(
+  const installed = await (0, import_promises69.access)(launcher).then(
     () => true,
     () => false
   );
@@ -68860,6 +68971,7 @@ async function runGitCredential(argv) {
 
 // src/cli/commands/hold.ts
 var import_node_path70 = require("path");
+init_agent2();
 init_runtime_v2();
 async function machineAccess(paths, log, conversationId, transport) {
   const initial = await loadStoredAccess(paths).catch(
@@ -68927,15 +69039,26 @@ async function runHold(argv) {
     );
     const transport = __using(_stack, createHttpTransport());
     const access7 = await machineAccess(paths, log, launch.value.conversationId, transport);
+    const credentialPath = (0, import_node_path70.join)(paths.tmp, "mcp", `${launch.value.conversationId}.json`);
+    const managedMcp = __using(_stack, access7.managedMcp === void 0 ? void 0 : createHelperMcpAccess({
+      managedMcp: access7.managedMcp,
+      conversationId: launch.value.conversationId,
+      credentialPath
+    }), true);
+    const providerEnvironment2 = access7.managedMcp === void 0 ? cliEnvironment : {
+      ...cliEnvironment,
+      [ALAN_MCP_URL_ENV]: access7.managedMcp.url,
+      [ALAN_MCP_CREDENTIAL_FILE_ENV]: credentialPath
+    };
     await runHolder({
       launch: launch.value,
       driver: createProviderDrivers({
-        cliEnvironment,
+        cliEnvironment: providerEnvironment2,
         defaultCwd: process.cwd(),
         timings: config2.sessionTimings,
         log,
-        codexCredentials: access7.codexCredentials,
-        ...access7.managedMcp === void 0 ? {} : { managedMcp: access7.managedMcp }
+        ...managedMcp === void 0 ? {} : { managedMcp },
+        codexCredentials: access7.codexCredentials
       }),
       clock: systemClock,
       log,
@@ -68950,7 +69073,8 @@ async function runHold(argv) {
   } catch (_) {
     var _error = _, _hasError = true;
   } finally {
-    __callDispose(_stack, _error, _hasError);
+    var _promise2 = __callDispose(_stack, _error, _hasError);
+    _promise2 && await _promise2;
   }
 }
 
@@ -69023,7 +69147,7 @@ async function runHook(argv, overrides = {}) {
 }
 
 // src/cli/commands/ingestion-hooks.ts
-var import_promises69 = require("fs/promises");
+var import_promises70 = require("fs/promises");
 var CODEX_TRUST_NOTE = "Codex runs new hooks only after you review them: open /hooks in Codex.";
 function isAction(value2) {
   return value2 === "enable" || value2 === "disable" || value2 === "status";
@@ -69046,7 +69170,7 @@ function errorMessage2(error61) {
   return error61 instanceof Error ? error61.message : String(error61);
 }
 async function exists5(path4) {
-  return (0, import_promises69.access)(path4).then(
+  return (0, import_promises70.access)(path4).then(
     () => true,
     () => false
   );
@@ -69405,7 +69529,7 @@ async function runToken(argv, signal) {
 }
 
 // src/cli/commands/logout.ts
-var import_promises70 = require("fs/promises");
+var import_promises71 = require("fs/promises");
 var import_node_path74 = require("path");
 init_runtime_v2();
 var RUNTIME_EXIT_WAIT_MS = 35e3;
@@ -69465,7 +69589,7 @@ async function stopHolder(launch, deps, outcome2) {
 }
 async function stopHeldRuns(ctx, deps, outcome2 = "aborted") {
   const stopped = [];
-  for (const name of await (0, import_promises70.readdir)(ctx.paths.sessions).catch(() => [])) {
+  for (const name of await (0, import_promises71.readdir)(ctx.paths.sessions).catch(() => [])) {
     const launch = await readJsonFile(
       (0, import_node_path74.join)(ctx.paths.sessions, name, "launch.json"),
       holderLaunchSchema
@@ -69504,7 +69628,7 @@ async function forgetMachineLocally(ctx) {
   const machine = await readMachineFile(ctx.paths);
   if (machine === null) return;
   await credentialStoreFor(ctx.paths, machine.credentialStore, ctx.access).clear();
-  await (0, import_promises70.rm)(ctx.paths.machine, { force: true });
+  await (0, import_promises71.rm)(ctx.paths.machine, { force: true });
 }
 async function runLogout(argv, signal) {
   var _stack = [];
@@ -69593,7 +69717,7 @@ function createRunAppends() {
 
 // src/local-api/server.ts
 var import_node_crypto33 = require("crypto");
-var import_promises71 = require("fs/promises");
+var import_promises72 = require("fs/promises");
 var import_node_http4 = require("http");
 var import_node_path75 = require("path");
 
@@ -70332,7 +70456,7 @@ async function serveLocalApi(deps) {
       await watchedStatus[Symbol.asyncDispose]();
       const current = await readJsonFile(discoveryPath, localApiDiscoverySchema);
       if (current.kind === "ok" && current.value.token === token) {
-        await (0, import_promises71.rm)(discoveryPath, { force: true });
+        await (0, import_promises72.rm)(discoveryPath, { force: true });
       }
       await closeServer(server);
       log.info("local_api.closed", {});
@@ -74085,7 +74209,7 @@ function refusalFailure(refusal2) {
 }
 
 // src/link/probe.ts
-var import_promises72 = require("dns/promises");
+var import_promises73 = require("dns/promises");
 var import_node_net5 = require("net");
 var import_node_tls2 = require("tls");
 var PROBE_TIMEOUT_MS4 = 5e3;
@@ -74121,7 +74245,7 @@ async function connectOnce(url3, clock) {
 }
 async function probeEndpoint(url3, clock) {
   try {
-    await (0, import_promises72.lookup)(url3.hostname);
+    await (0, import_promises73.lookup)(url3.hostname);
   } catch (error61) {
     const reason = classifyTransportFailure(error61);
     return reason === "other" ? "dns" : reason;
@@ -74562,7 +74686,7 @@ function createReconciler(host, lifecycle, log, signal) {
 }
 
 // src/uploader/index.ts
-var import_promises73 = require("fs/promises");
+var import_promises74 = require("fs/promises");
 init_runtime_v2();
 init_zod();
 var RETRY_DELAYS_MS = [250, 500, 1e3, 2e3, 5e3, 1e4, 3e4];
@@ -74703,7 +74827,7 @@ function startUploader({ api, runsDir, clock, log }) {
     active.set(runId, task);
   };
   const sweep2 = async () => {
-    for (const name of await (0, import_promises73.readdir)(runsDir).catch(() => [])) {
+    for (const name of await (0, import_promises74.readdir)(runsDir).catch(() => [])) {
       const runId = runIdSchema.safeParse(name);
       if (runId.success) run2(runId.data);
     }
@@ -74713,18 +74837,18 @@ function startUploader({ api, runsDir, clock, log }) {
     const dir = runDirectory(runsDir, runId);
     const progress = await readJsonFile(dir.upload, uploadProgressSchema);
     if (progress.kind !== "ok" || !progress.value.sealed) return false;
-    const sealedAt = (await (0, import_promises73.stat)(dir.upload)).mtimeMs;
+    const sealedAt = (await (0, import_promises74.stat)(dir.upload)).mtimeMs;
     if (clock.now() - sealedAt < options.sealedForMs) return false;
     return (await readLastRecord(dir.log))?.update.sessionUpdate === "_alan/run.ended";
   };
   const prune = async (options) => {
     let removed = 0;
-    for (const name of await (0, import_promises73.readdir)(runsDir).catch(() => [])) {
+    for (const name of await (0, import_promises74.readdir)(runsDir).catch(() => [])) {
       const runId = runIdSchema.safeParse(name);
       if (!runId.success) continue;
       try {
         if (!await isPrunable(runId.data, options)) continue;
-        await (0, import_promises73.rm)(runDirectory(runsDir, runId.data).dir, { recursive: true, force: true });
+        await (0, import_promises74.rm)(runDirectory(runsDir, runId.data).dir, { recursive: true, force: true });
         removed += 1;
       } catch (error61) {
         log.warn("upload.prune_failed", { runId: runId.data, error: error61 });
@@ -76024,17 +76148,17 @@ async function runServiceCommand(argv, ctx = cliContext()) {
 }
 
 // src/cli/commands/upgrade.ts
-var import_promises74 = require("fs/promises");
+var import_promises75 = require("fs/promises");
 var import_node_path79 = require("path");
 function isNotNewer(version2, installed) {
   return installed !== null && isReleaseVersion(version2) && isReleaseVersion(installed) && compareVersions(version2, installed) <= 0;
 }
 async function installFromSource(source) {
   const { layout, from, ifNewer } = source;
-  const isTarball = (await (0, import_promises74.stat)(from)).isFile();
+  const isTarball = (await (0, import_promises75.stat)(from)).isFile();
   const downloads = (0, import_node_path79.join)(layout.root, ".downloads");
-  if (isTarball) await (0, import_promises74.mkdir)(downloads, { recursive: true, mode: 448 });
-  const scratch = isTarball ? await (0, import_promises74.mkdtemp)((0, import_node_path79.join)(downloads, "upgrade-")) : null;
+  if (isTarball) await (0, import_promises75.mkdir)(downloads, { recursive: true, mode: 448 });
+  const scratch = isTarball ? await (0, import_promises75.mkdtemp)((0, import_node_path79.join)(downloads, "upgrade-")) : null;
   try {
     const sourceDir = scratch === null ? from : await extractPackageTarball(from, scratch);
     const version2 = await readPackageVersion(sourceDir);
@@ -76042,7 +76166,7 @@ async function installFromSource(source) {
     if (ifNewer && isNotNewer(version2, installed)) return { kind: "skipped", version: version2, installed };
     return { kind: "installed", ...await installVersion(layout, sourceDir) };
   } finally {
-    if (scratch !== null) await (0, import_promises74.rm)(scratch, { recursive: true, force: true });
+    if (scratch !== null) await (0, import_promises75.rm)(scratch, { recursive: true, force: true });
   }
 }
 async function runUpgrade(argv) {