@alan-ai-hq/agent-manager-darwin-arm64 0.1.157 → 0.1.158

package/alan-agent.cjs

@@ -23396,6 +23396,7 @@ If a needed tool is not exposed, use the host's tool-discovery mechanism once wh
   Whatever the intent, check your draft before sending: three or more numbers being compared, several items sharing the same attributes, a sequence, or two or more options means it should be visual. Stay in plain text for one-line facts, yes/no answers, clarifying questions, conversation, and short summaries of code you just changed. Lead with one sentence, show one visual (two at most), then stop; the visual carries the detail, so do not repeat it in prose.
 - Examples of plain questions with visual answers: "Which queue should the importer use, BullMQ or SQS?" \u2192 a one-line recommendation, then \`\`\`openui Tabs with a KeyValue of cost, latency and ops effort per option and a Callout with the pick. "Why did last night's deploy fail?" \u2192 a one-sentence cause, then Steps with the failed step and its detail, then Code with the error. "How's the test suite doing?" \u2192 a row of Stat (passed, failed, flaky) and a line \`\`\`chart of failures per day.
 - \`\`\`mermaid renders in chat, documents, plans and artifacts too; \`\`\`openui renders only in your replies in the Alan chat. In Slack or Teams messages, commit messages, pull request bodies and files, use plain Markdown instead.
+- When you compose a plan, test report, review or document to save as an Alan artifact, use the \`alan-artifact\` skill for its structure and any HTML or interactive block, and \`alan-diagrams\` for its Mermaid diagrams.
 - \`\`\`chart renders in chat, documents, plans and artifacts, and is **strict JSON, nothing else**:
   \`\`\`chart
   { "type": "bar", "title": "Quarterly Revenue", "data": [{ "name": "Q1", "revenue": 4000 }, { "name": "Q2", "revenue": 3000 }] }
@@ -23442,7 +23443,7 @@ Team
 - When a user asks to create a Skill, default to a team-owned Alan platform Skill through \`alan-skill-authoring\`, whether this session runs locally or in a cloud sandbox. Use a repository or filesystem Skill only when the user explicitly requests that scope. Do not infer repository scope from the current checkout or from a procedure that mentions repository files. If repeated work suggests a reusable Skill, offer the platform Skill and its evidence; do not publish it without the approval required by the authoring workflow.
 - Own mistakes. Wrong ID, jumped too fast \u2014 say so and fix it.
 - When writing code, work like a senior engineer: understand the existing design and conventions, make the smallest coherent change that solves the request, and keep related logic together. Reuse an existing abstraction when it fits; remove duplication that the change would otherwise introduce, but do not refactor unrelated code or add speculative abstractions. Keep names, types, error handling, and tests clear enough for the next engineer to maintain. Review the diff for accidental changes before calling the work done.
-- Write for a human reader. Task, subtask and epic descriptions, documents, artifacts and comments are read by people in the app, not parsed by agents. Lead with the outcome in one sentence, then short sections with headings and bullet lists. Spell out internal shorthand, and keep commit hashes, IDs and migration numbers out of sentences \u2014 put them in a trailing "References" list when they matter.
+- Write for a human reader. Task, subtask and epic descriptions, documents, artifacts and comments are read by people in the app, not parsed by agents. Lead with the outcome in one sentence, then short sections with headings and bullet lists when there is enough to organise. Size it to what is actually known: a task written from someone's request restates that request and never adds repro steps, causes, verification or acceptance criteria nobody stated. Spell out internal shorthand, and keep commit hashes, IDs and migration numbers out of sentences \u2014 put them in a trailing "References" list when they matter.
 ${ALAN_VISUAL_PROMPT}
 - Images you generate or edit appear in the chat automatically, the way ChatGPT shows them. Do not link, embed, or print the generated file's path afterwards, and do not announce "Generated:" or "Edited image:" \u2014 at most one short sentence about the result. Mention a path only when the user asked for the file to be saved into the project.
 
@@ -25871,7 +25872,9 @@ function prepareConversationTurns(transcript, streaming, previousTurns = []) {
     }
     const tail = turn.working.reduce((latest, node2) => !latest || (node2.event.seq ?? node2.event.line) > (latest.event.seq ?? latest.event.line) ? node2 : latest, void 0);
     turn.working = turn.working.filter((node2) => !isThought(node2));
-    const final = turn.activity.state === "idle" && (!turn.activity.stopReason || turn.activity.stopReason === "end_turn" || turn.activity.stopReason === "cancelled") && tail?.event.update.sessionUpdate === "agent_message" && hasAnswerContent(tail) ? tail : void 0;
+    const lastStarted = turn.working.at(-1);
+    const answerTail = [tail, lastStarted].find((node2) => node2?.event.update.sessionUpdate === "agent_message" && hasAnswerContent(node2));
+    const final = turn.activity.state === "idle" && (!turn.activity.stopReason || turn.activity.stopReason === "end_turn" || turn.activity.stopReason === "cancelled") ? answerTail : void 0;
     if (final)
       turn.final = final;
   }
@@ -26135,10 +26138,34 @@ function noticeKind(severity, meta3) {
   const kind = meta3?.["alan.dev/noticeKind"];
   return typeof kind === "string" ? kind : severity;
 }
+function isTextBlock(block2) {
+  return block2.type === "text";
+}
+function restatesDispatchFailure(state, update) {
+  if (!isUpdate(update, "agent_message"))
+    return false;
+  if (!update.messageId.endsWith(IMPORTED_CONTENT_SUFFIX))
+    return false;
+  const blocks = Array.isArray(update.content) ? update.content : [];
+  if (blocks.length === 0 || !blocks.every(isTextBlock))
+    return false;
+  const text3 = blocks.map((block2) => block2.text).join("").trim();
+  if (!text3)
+    return false;
+  const index = state.notices.findIndex((notice3) => notice3.kind === "application_problem" && notice3.message.trim() === text3);
+  if (index < 0)
+    return false;
+  const notice2 = state.notices[index];
+  if (notice2.level !== "error")
+    state.notices[index] = { ...notice2, level: "error" };
+  return true;
+}
 function applyContent(state, index, update) {
   const role = ROLE_BY_KIND[update.sessionUpdate];
   if (!role)
     return;
+  if (restatesDispatchFailure(state, update))
+    return;
   const key = `m:${role}:${update.messageId}`;
   let entry = index.get(key);
   if (!entry) {
@@ -26228,7 +26255,7 @@ function applyTool(state, index, update) {
 function messageText2(entry) {
   return entry.content.filter((b) => b.type === "text").map((b) => b.text).join("");
 }
-var ROLE_BY_KIND, entryIndexes, AWAITING_TOOL_CALLS_META, SETTLED;
+var ROLE_BY_KIND, entryIndexes, AWAITING_TOOL_CALLS_META, IMPORTED_CONTENT_SUFFIX, SETTLED;
 var init_reduce = __esm({
   "../shared/dist/agent/acp/reduce.js"() {
     "use strict";
@@ -26244,6 +26271,7 @@ var init_reduce = __esm({
     };
     entryIndexes = /* @__PURE__ */ new WeakMap();
     AWAITING_TOOL_CALLS_META = "alan.dev/awaitingToolCallIds";
+    IMPORTED_CONTENT_SUFFIX = ":content";
     SETTLED = /* @__PURE__ */ new Set(["completed", "failed", "cancelled"]);
   }
 });
@@ -26735,6 +26763,13 @@ var init_read = __esm({
   }
 });
 
+// ../shared/dist/agent/acp/session-activity.js
+var init_session_activity = __esm({
+  "../shared/dist/agent/acp/session-activity.js"() {
+    "use strict";
+  }
+});
+
 // ../shared/dist/agent/acp/transcript-byte-decoder.js
 var init_transcript_byte_decoder = __esm({
   "../shared/dist/agent/acp/transcript-byte-decoder.js"() {
@@ -26929,6 +26964,7 @@ var init_acp = __esm({
     init_types3();
     init_read();
     init_reduce();
+    init_session_activity();
     init_transcript_byte_decoder();
     init_transcript_fold();
     init_transcript_http();
@@ -27987,7 +28023,7 @@ var init_chunk_ZCTKXKYY = __esm({
   }
 });
 
-// ../agent-core/dist/chunk-ILZBXGVI.js
+// ../agent-core/dist/chunk-FYZKVT3E.js
 function detectImageMimeType(buffer) {
   if (buffer.length >= 8 && buffer.subarray(0, 8).equals(PNG_SIGNATURE)) return "image/png";
   if (buffer.length >= 3 && buffer[0] === 255 && buffer[1] === 216 && buffer[2] === 255) {
@@ -28084,21 +28120,38 @@ function imageDimensions(buffer, mimeType) {
   if (mimeType === "image/jpeg") return jpegDimensions(buffer);
   return { width: null, height: null };
 }
-function readMediaFiles(candidates2, cwd, mimeByExt, maxBytes) {
+function readMediaFiles(query) {
   const seen = /* @__PURE__ */ new Set();
   const files = [];
-  for (const candidate of candidates2) {
-    const path4 = normalizePath(candidate, cwd);
+  for (const candidate of query.candidates) {
+    const path4 = normalizePath(candidate, query.cwd);
     if (!path4 || seen.has(path4) || !(0, import_fs5.existsSync)(path4)) continue;
     seen.add(path4);
-    const mimeType = mimeByExt[(0, import_path4.extname)(path4).toLowerCase()];
+    const mimeType = query.mimeByExt[(0, import_path4.extname)(path4).toLowerCase()];
     if (!mimeType) continue;
     const stat22 = (0, import_fs5.statSync)(path4);
-    if (!stat22.isFile() || stat22.size <= 0 || stat22.size > maxBytes) continue;
+    if (!stat22.isFile() || stat22.size <= 0 || stat22.size > query.maxBytes) continue;
+    if (stat22.mtimeMs < query.writtenSince && !query.named.has(path4)) continue;
     files.push({ path: path4, mimeType, buffer: (0, import_fs5.readFileSync)(path4) });
   }
   return files;
 }
+function isCaptureTool(tool) {
+  return isBrowserScreenshotToolName(tool.name) || isBrowserRecordingToolName(tool.name);
+}
+function runsCaptureCommand(tool) {
+  return someString(tool.input, (text3) => AGENT_BROWSER_CAPTURE_COMMAND.test(text3));
+}
+function capturePaths(tool, content, extensions, cwd) {
+  const values = isCaptureTool(tool) ? contentStrings(content, tool.input) : runsCaptureCommand(tool) ? contentStrings("", tool.input) : [];
+  return pathCandidates(values, extensions).flatMap((candidate) => {
+    const path4 = normalizePath(candidate, cwd);
+    return path4 ? [path4] : [];
+  });
+}
+function base64Length(bytes) {
+  return Math.ceil(bytes / 3) * 4;
+}
 function resultText2(update) {
   const only2 = isJsonRecord(update._meta) ? update._meta[TOOL_RESULT_ONLY_META] : void 0;
   if (typeof only2 === "string") return only2;
@@ -28389,9 +28442,9 @@ function silentStartError(name, timeoutMs) {
     message: `${name} printed nothing for ${seconds}s after it started and was stopped. Send your message again.`
   };
 }
-var import_crypto4, import_fs5, import_path4, PNG_SIGNATURE, IMAGE_MIME_BY_EXT, VIDEO_MIME_BY_EXT, IMAGE_EXTENSIONS, VIDEO_EXTENSIONS, MAX_IMAGE_BYTES, MAX_VIDEO_BYTES, AGENT_BROWSER_MENTION, LocalMediaReader, SessionOpenRefusal, JsonRpcError, ACP_PROTOCOL_VERSION, ACP_ERROR, STDERR_TAIL_LINES, RESULT_EXIT_GRACE_MS, PerTurnSession;
-var init_chunk_ILZBXGVI = __esm({
-  "../agent-core/dist/chunk-ILZBXGVI.js"() {
+var import_crypto4, import_fs5, import_path4, PNG_SIGNATURE, IMAGE_MIME_BY_EXT, VIDEO_MIME_BY_EXT, IMAGE_EXTENSIONS, VIDEO_EXTENSIONS, MAX_IMAGE_BYTES, MAX_VIDEO_BYTES, MAX_TURN_MEDIA_DATA_CHARS, MTIME_SLACK_MS, AGENT_BROWSER_MENTION, AGENT_BROWSER_CAPTURE_COMMAND, LocalMediaReader, SessionOpenRefusal, JsonRpcError, ACP_PROTOCOL_VERSION, ACP_ERROR, STDERR_TAIL_LINES, RESULT_EXIT_GRACE_MS, PerTurnSession;
+var init_chunk_FYZKVT3E = __esm({
+  "../agent-core/dist/chunk-FYZKVT3E.js"() {
     "use strict";
     init_chunk_OUEMTEUX();
     init_chunk_ZCTKXKYY();
@@ -28419,12 +28472,16 @@ var init_chunk_ILZBXGVI = __esm({
     VIDEO_EXTENSIONS = "mp4|webm|mov";
     MAX_IMAGE_BYTES = 20 * 1024 * 1024;
     MAX_VIDEO_BYTES = 100 * 1024 * 1024;
+    MAX_TURN_MEDIA_DATA_CHARS = 8 * 1024 * 1024;
+    MTIME_SLACK_MS = 2e3;
     AGENT_BROWSER_MENTION = /agent[-_]browser/i;
+    AGENT_BROWSER_CAPTURE_COMMAND = /(?:^|[\s/])agent[-_]browser(?:@[^\s;&|]+)?(?:\s[^\n;&|]*?)?\s(?:screenshot|record)(?=\s|$)/im;
     LocalMediaReader = class {
       #cwd;
       #clock;
       #tools = /* @__PURE__ */ new Map();
       #pathHints = /* @__PURE__ */ new Set();
+      #mediaDataChars = 0;
       constructor(cwd, clock) {
         this.#cwd = cwd;
         this.#clock = clock;
@@ -28449,7 +28506,11 @@ var init_chunk_ILZBXGVI = __esm({
       /** A recording names its output file when it starts; the stop's result may not repeat it. */
       #announce(toolCallId, name, input2) {
         const known = this.#tools.get(toolCallId);
-        const tool = { name: name ?? known?.name ?? "", input: input2 ?? known?.input };
+        const tool = {
+          name: name ?? known?.name ?? "",
+          input: input2 ?? known?.input,
+          startedAt: known?.startedAt ?? this.#clock.now()
+        };
         this.#tools.set(toolCallId, tool);
         if (!isAgentBrowserMedia(tool, "", "video")) return;
         const cwd = toolCwd(this.#cwd, tool.input);
@@ -28458,13 +28519,30 @@ var init_chunk_ILZBXGVI = __esm({
           if (path4) this.#pathHints.add(path4);
         }
       }
-      #payloadFields(file2, toolId) {
+      /** Media written before the call started is old, unless its capture command named it. */
+      #toolFiles(tool, content, extensions, limits) {
+        const cwd = toolCwd(this.#cwd, tool.input);
+        return readMediaFiles({
+          ...limits,
+          candidates: [
+            ...pathCandidates(contentStrings(content, tool.input), extensions),
+            ...this.#pathHints
+          ],
+          cwd,
+          writtenSince: tool.startedAt - MTIME_SLACK_MS,
+          named: /* @__PURE__ */ new Set([...capturePaths(tool, content, extensions, cwd), ...this.#pathHints])
+        });
+      }
+      #payloadFields(file2, toolId, explicit) {
+        const dataChars = base64Length(file2.buffer.length);
+        const inline = explicit || this.#mediaDataChars + dataChars <= MAX_TURN_MEDIA_DATA_CHARS;
+        if (inline) this.#mediaDataChars += dataChars;
         return {
           id: (0, import_crypto4.randomUUID)(),
           filename: (0, import_path4.basename)(file2.path),
           mimeType: file2.mimeType,
           size: file2.buffer.length,
-          data: file2.buffer.toString("base64"),
+          ...inline ? { data: file2.buffer.toString("base64") } : { inlineDataOmitted: true },
           sourcePath: file2.path,
           sourceHash: (0, import_crypto4.createHash)("sha256").update(file2.buffer).digest("hex"),
           toolId,
@@ -28473,15 +28551,14 @@ var init_chunk_ILZBXGVI = __esm({
       }
       #generatedImages(toolId, tool, content) {
         if (!isGeneratedImageToolName(tool.name)) return [];
-        const candidates2 = [
-          ...pathCandidates(contentStrings(content, tool.input), IMAGE_EXTENSIONS),
-          ...this.#pathHints
-        ];
-        const cwd = toolCwd(this.#cwd, tool.input);
-        return readMediaFiles(candidates2, cwd, IMAGE_MIME_BY_EXT, MAX_IMAGE_BYTES).map((file2) => {
+        const files = this.#toolFiles(tool, content, IMAGE_EXTENSIONS, {
+          mimeByExt: IMAGE_MIME_BY_EXT,
+          maxBytes: MAX_IMAGE_BYTES
+        });
+        return files.map((file2) => {
           const image = {
             type: "generated_image",
-            ...this.#payloadFields(file2, toolId),
+            ...this.#payloadFields(file2, toolId, true),
             ...imageDimensions(file2.buffer, file2.mimeType)
           };
           return { sessionUpdate: "_alan/generated_image", image };
@@ -28491,25 +28568,19 @@ var init_chunk_ILZBXGVI = __esm({
         const isVideo = isAgentBrowserMedia(tool, content, "video");
         if (!isVideo && !isAgentBrowserMedia(tool, content, "image")) return [];
         const kind = isVideo ? "video" : "image";
-        const candidates2 = [
-          ...pathCandidates(
-            contentStrings(content, tool.input),
-            isVideo ? VIDEO_EXTENSIONS : IMAGE_EXTENSIONS
-          ),
-          ...this.#pathHints
-        ];
-        const files = readMediaFiles(
-          candidates2,
-          toolCwd(this.#cwd, tool.input),
-          isVideo ? VIDEO_MIME_BY_EXT : IMAGE_MIME_BY_EXT,
-          isVideo ? MAX_VIDEO_BYTES : MAX_IMAGE_BYTES
+        const explicit = isCaptureTool(tool) || runsCaptureCommand(tool);
+        const files = this.#toolFiles(
+          tool,
+          content,
+          isVideo ? VIDEO_EXTENSIONS : IMAGE_EXTENSIONS,
+          isVideo ? { mimeByExt: VIDEO_MIME_BY_EXT, maxBytes: MAX_VIDEO_BYTES } : { mimeByExt: IMAGE_MIME_BY_EXT, maxBytes: MAX_IMAGE_BYTES }
         );
         return files.map((file2) => {
           this.#pathHints.delete(file2.path);
           const media = {
             type: "session_media",
             kind,
-            ...this.#payloadFields(file2, toolId),
+            ...this.#payloadFields(file2, toolId, explicit),
             ...kind === "image" ? imageDimensions(file2.buffer, file2.mimeType) : {}
           };
           return { sessionUpdate: "_alan/session_media", media };
@@ -28741,128 +28812,6 @@ var init_chunk_ILZBXGVI = __esm({
   }
 });
 
-// ../agent-core/dist/chunk-J2KTV5FP.js
-function selectExternalMcpServers(spec) {
-  const isWorkflow = Boolean(spec.workflowId || spec.workflowExecutionId);
-  const filter = isWorkflow ? createWorkflowToolsFilter(spec.workflowTools) : null;
-  if (filter && !filter.hasFilter) return {};
-  const selected = {};
-  for (const [name, server] of Object.entries(spec.externalMcpServers ?? {})) {
-    if (!isExternalMcpServerName(name)) continue;
-    if (filter && !filter.isMcpServerAllowed(name)) continue;
-    selected[name] = server;
-  }
-  return selected;
-}
-function headerEnvName(server, header) {
-  const fingerprint = (0, import_crypto5.createHash)("sha256").update(`${server}\0${header}`).digest("hex").slice(0, 12);
-  return `ALAN_MCP_HEADER_${fingerprint.toUpperCase()}`;
-}
-function deliverRemote(name, server, env) {
-  const headerEnv = {};
-  for (const [header, value2] of Object.entries(server.headers ?? {})) {
-    if (!isMcpConfigKey(header)) continue;
-    const variable = headerEnvName(name, header);
-    env[variable] = value2;
-    headerEnv[header] = variable;
-  }
-  return {
-    type: server.type === "sse" ? "sse" : "http",
-    url: server.url,
-    ...Object.keys(headerEnv).length ? { headerEnv } : {}
-  };
-}
-function deliverStdio(server, cliEnv, delivery) {
-  const envKeys = [];
-  for (const [key, value2] of Object.entries(server.env ?? {})) {
-    if (!isMcpConfigKey(key)) continue;
-    if (key in cliEnv || key in delivery.env && delivery.env[key] !== value2) {
-      delivery.skippedEnvKeys.push(key);
-      continue;
-    }
-    delivery.env[key] = value2;
-    envKeys.push(key);
-  }
-  return {
-    type: "stdio",
-    command: server.command,
-    ...server.args?.length ? { args: server.args } : {},
-    ...envKeys.length ? { envKeys } : {}
-  };
-}
-function planExternalMcpDelivery(spec, cliEnv) {
-  const delivery = { servers: {}, env: {}, skippedEnvKeys: [] };
-  for (const [name, server] of Object.entries(selectExternalMcpServers(spec))) {
-    const { url: url3, command } = server;
-    if (url3 && server.type !== "stdio") {
-      delivery.servers[name] = deliverRemote(name, { ...server, url: url3 }, delivery.env);
-    } else if (command) {
-      delivery.servers[name] = deliverStdio({ ...server, command }, cliEnv, delivery);
-    }
-  }
-  return delivery;
-}
-function envReference(name) {
-  return `\${${name}}`;
-}
-function managedMcpHeaders(identity) {
-  if (identity.scope === "run") {
-    return {
-      Authorization: envReference(ALAN_MCP_AUTHORIZATION_ENV),
-      [MANAGED_MCP_RUN_HEADER]: envReference(ALAN_RUN_ID_ENV)
-    };
-  }
-  return {
-    ...identity.authorization === void 0 ? {} : { Authorization: identity.authorization },
-    [MANAGED_MCP_CONVERSATION_HEADER]: identity.conversationId
-  };
-}
-function credentialDigest(authorization) {
-  if (authorization === void 0) return void 0;
-  return (0, import_crypto6.createHash)("sha256").update(authorization).digest("hex").slice(0, 16);
-}
-function canonicalizeManagedMcpServerName(serverName) {
-  return RUN_SCOPED_SERVER.test(serverName) ? MANAGED_MCP_SERVER_NAME : serverName;
-}
-function canonicalizeManagedMcpToolName(toolName2) {
-  const namespaced = NAMESPACED_RUN_TOOL.exec(toolName2);
-  if (namespaced) return `mcp__${MANAGED_MCP_SERVER_NAME}__${namespaced[2]}`;
-  const flattened = FLATTENED_RUN_TOOL.exec(toolName2);
-  return flattened ? `mcp__${MANAGED_MCP_SERVER_NAME}__${flattened[1]}` : toolName2;
-}
-async function writeSecretFile(name, contents) {
-  const dir = await (0, import_promises30.mkdtemp)((0, import_path5.join)((0, import_os2.tmpdir)(), "alan-mcp-"));
-  const path4 = (0, import_path5.join)(dir, name);
-  const remove = async () => {
-    await (0, import_promises30.rm)(dir, { recursive: true, force: true });
-  };
-  try {
-    await (0, import_promises30.writeFile)(path4, contents, { mode: 384, flag: "wx" });
-  } catch (error62) {
-    await remove();
-    throw error62;
-  }
-  return { path: path4, remove, [Symbol.asyncDispose]: remove };
-}
-var import_crypto5, import_crypto6, import_promises30, import_os2, import_path5, MANAGED_MCP_SERVER_NAME, RUN_SCOPED_SERVER, NAMESPACED_RUN_TOOL, FLATTENED_RUN_TOOL;
-var init_chunk_J2KTV5FP = __esm({
-  "../agent-core/dist/chunk-J2KTV5FP.js"() {
-    "use strict";
-    import_crypto5 = require("crypto");
-    init_agent2();
-    import_crypto6 = require("crypto");
-    init_agent2();
-    init_runtime_v2();
-    import_promises30 = require("fs/promises");
-    import_os2 = require("os");
-    import_path5 = require("path");
-    MANAGED_MCP_SERVER_NAME = "alan";
-    RUN_SCOPED_SERVER = /^alan-run-[a-f0-9]{16}$/;
-    NAMESPACED_RUN_TOOL = /^mcp__(alan-run-[a-f0-9]{16})__(.+)$/;
-    FLATTENED_RUN_TOOL = /^alan-run-[a-f0-9]{16}_(.+)$/;
-  }
-});
-
 // ../agent-core/dist/chunk-DLVRNIY5.js
 function repositories(input2, context) {
   const problems = new Map(input2.problems.map((problem) => [problem.path, problem]));
@@ -29673,6 +29622,131 @@ var init_chunk_DLVRNIY5 = __esm({
   }
 });
 
+// ../agent-core/dist/chunk-OSECDZA5.js
+function selectExternalMcpServers(spec) {
+  const isWorkflow = Boolean(spec.workflowId || spec.workflowExecutionId);
+  const filter = isWorkflow ? createWorkflowToolsFilter(spec.workflowTools) : null;
+  if (filter && !filter.hasFilter) return {};
+  const selected = {};
+  for (const [name, server] of Object.entries(spec.externalMcpServers ?? {})) {
+    if (!isExternalMcpServerName(name)) continue;
+    if (filter && !filter.isMcpServerAllowed(name)) continue;
+    selected[name] = server;
+  }
+  return selected;
+}
+function headerEnvName(server, header) {
+  const fingerprint = (0, import_crypto5.createHash)("sha256").update(`${server}\0${header}`).digest("hex").slice(0, 12);
+  return `ALAN_MCP_HEADER_${fingerprint.toUpperCase()}`;
+}
+function deliverRemote(name, server, env) {
+  const headerEnv = {};
+  for (const [header, value2] of Object.entries(server.headers ?? {})) {
+    if (!isMcpConfigKey(header)) continue;
+    const variable = headerEnvName(name, header);
+    env[variable] = value2;
+    headerEnv[header] = variable;
+  }
+  return {
+    type: server.type === "sse" ? "sse" : "http",
+    url: server.url,
+    ...Object.keys(headerEnv).length ? { headerEnv } : {}
+  };
+}
+function deliverStdio(server, cliEnv, delivery) {
+  const envKeys = [];
+  for (const [key, value2] of Object.entries(server.env ?? {})) {
+    if (!isMcpConfigKey(key)) continue;
+    if (key in cliEnv || key in delivery.env && delivery.env[key] !== value2) {
+      delivery.skippedEnvKeys.push(key);
+      continue;
+    }
+    delivery.env[key] = value2;
+    envKeys.push(key);
+  }
+  return {
+    type: "stdio",
+    command: server.command,
+    ...server.args?.length ? { args: server.args } : {},
+    ...envKeys.length ? { envKeys } : {}
+  };
+}
+function planExternalMcpDelivery(spec, cliEnv) {
+  const delivery = { servers: {}, env: {}, skippedEnvKeys: [] };
+  for (const [name, server] of Object.entries(selectExternalMcpServers(spec))) {
+    const { url: url3, command } = server;
+    if (url3 && server.type !== "stdio") {
+      delivery.servers[name] = deliverRemote(name, { ...server, url: url3 }, delivery.env);
+    } else if (command) {
+      delivery.servers[name] = deliverStdio({ ...server, command }, cliEnv, delivery);
+    }
+  }
+  return delivery;
+}
+function envReference(name) {
+  return `\${${name}}`;
+}
+function managedMcpHeaders(identity) {
+  if (identity.scope === "run") {
+    return {
+      Authorization: envReference(ALAN_MCP_AUTHORIZATION_ENV),
+      [MANAGED_MCP_RUN_HEADER]: envReference(ALAN_RUN_ID_ENV)
+    };
+  }
+  return {
+    ...identity.authorization === void 0 ? {} : { Authorization: identity.authorization },
+    [MANAGED_MCP_CONVERSATION_HEADER]: identity.conversationId
+  };
+}
+function credentialDigest(authorization) {
+  if (authorization === void 0) return void 0;
+  return (0, import_crypto6.createHash)("sha256").update(authorization).digest("hex").slice(0, 16);
+}
+function canonicalizeManagedMcpServerName(serverName) {
+  return RUN_SCOPED_SERVER.test(serverName) ? MANAGED_MCP_SERVER_NAME : serverName;
+}
+function canonicalizeManagedMcpToolName(toolName2) {
+  const namespaced = NAMESPACED_RUN_TOOL.exec(toolName2);
+  if (namespaced) return `mcp__${MANAGED_MCP_SERVER_NAME}__${namespaced[2]}`;
+  const flattened = FLATTENED_RUN_TOOL.exec(toolName2);
+  return flattened ? `mcp__${MANAGED_MCP_SERVER_NAME}__${flattened[1]}` : toolName2;
+}
+async function writeSecretFile(name, contents) {
+  const dir = await (0, import_promises30.mkdtemp)((0, import_path5.join)((0, import_os2.tmpdir)(), "alan-mcp-"));
+  const path4 = (0, import_path5.join)(dir, name);
+  const remove = async () => {
+    await (0, import_promises30.rm)(dir, { recursive: true, force: true });
+  };
+  try {
+    await (0, import_promises30.writeFile)(path4, contents, { mode: 384, flag: "wx" });
+  } catch (error62) {
+    await remove();
+    throw error62;
+  }
+  return { path: path4, remove, [Symbol.asyncDispose]: remove };
+}
+var import_crypto5, import_crypto6, import_promises30, import_os2, import_path5, OPENCODE_CODE_MODE_ENV, OPENCODE_CODE_MODE_TOOL, CODE_MODE_CALLS_META, MANAGED_MCP_SERVER_NAME, RUN_SCOPED_SERVER, NAMESPACED_RUN_TOOL, FLATTENED_RUN_TOOL;
+var init_chunk_OSECDZA5 = __esm({
+  "../agent-core/dist/chunk-OSECDZA5.js"() {
+    "use strict";
+    import_crypto5 = require("crypto");
+    init_agent2();
+    import_crypto6 = require("crypto");
+    init_agent2();
+    init_runtime_v2();
+    import_promises30 = require("fs/promises");
+    import_os2 = require("os");
+    import_path5 = require("path");
+    OPENCODE_CODE_MODE_ENV = "OPENCODE_EXPERIMENTAL_CODE_MODE";
+    OPENCODE_CODE_MODE_TOOL = "execute";
+    CODE_MODE_CALLS_META = "alanToolCalls";
+    MANAGED_MCP_SERVER_NAME = "alan";
+    RUN_SCOPED_SERVER = /^alan-run-[a-f0-9]{16}$/;
+    NAMESPACED_RUN_TOOL = /^mcp__(alan-run-[a-f0-9]{16})__(.+)$/;
+    FLATTENED_RUN_TOOL = /^alan-run-[a-f0-9]{16}_(.+)$/;
+  }
+});
+
 // ../agent-core/dist/providers/claude.js
 function trimmed(value2) {
   const text22 = value2?.trim();
@@ -30915,12 +30989,12 @@ var init_claude = __esm({
   "../agent-core/dist/providers/claude.js"() {
     "use strict";
     init_chunk_D4TIXPWZ();
-    init_chunk_ILZBXGVI();
+    init_chunk_FYZKVT3E();
     init_chunk_OUEMTEUX();
     init_chunk_ZCTKXKYY();
-    init_chunk_J2KTV5FP();
     init_chunk_6VWVDJ2A();
     init_chunk_DLVRNIY5();
+    init_chunk_OSECDZA5();
     init_chunk_YXWJW7I5();
     init_effort();
     import_crypto7 = require("crypto");
@@ -33771,12 +33845,12 @@ var init_codex = __esm({
   "../agent-core/dist/providers/codex.js"() {
     "use strict";
     init_chunk_D4TIXPWZ();
-    init_chunk_ILZBXGVI();
+    init_chunk_FYZKVT3E();
     init_chunk_OUEMTEUX();
     init_chunk_ZCTKXKYY();
-    init_chunk_J2KTV5FP();
     init_chunk_6VWVDJ2A();
     init_chunk_DLVRNIY5();
+    init_chunk_OSECDZA5();
     init_chunk_YXWJW7I5();
     import_fs7 = require("fs");
     import_path7 = require("path");
@@ -35114,6 +35188,47 @@ const PROVIDER_ID = ${JSON.stringify(ALAN_CODE_ENGINE_PROVIDER_ID)};
 const INCLUDED_RESULTS = 8;
 const MAX_AUTO_RETRIES = 2;
 const MAX_AUTO_RETRY_WAIT_MS = 10_000;
+const CODE_MODE_TOOL = ${JSON.stringify(OPENCODE_CODE_MODE_TOOL)};
+const CODE_MODE_CALLS_META = ${JSON.stringify(CODE_MODE_CALLS_META)};
+const MAX_CHILD_OUTPUT_CHARS = 64 * 1024;
+const MAX_OPEN_SCRIPTS = 64;
+const scriptCalls = new Map();
+
+function mcpResultText(result) {
+  return result.content
+    .flatMap(function (item) {
+      if (item && item.type === "text") return [item.text];
+      if (item && item.type === "resource" && item.resource && item.resource.text) return [item.resource.text];
+      return [];
+    })
+    .join("\\n\\n");
+}
+
+function openScript(callID) {
+  if (scriptCalls.size >= MAX_OPEN_SCRIPTS) scriptCalls.delete(scriptCalls.keys().next().value);
+  scriptCalls.set(callID, []);
+}
+
+// Code mode names each MCP call "<script callID>/<n>" and hands the hook the raw MCP result.
+function recordScriptCall(input, result) {
+  const callID = String(input.callID || "");
+  const slash = callID.lastIndexOf("/");
+  const calls = slash > 0 ? scriptCalls.get(callID.slice(0, slash)) : undefined;
+  if (!calls || !result || !Array.isArray(result.content)) return;
+  calls.push({
+    callId: callID,
+    tool: input.tool,
+    input: input.args,
+    output: mcpResultText(result).slice(0, MAX_CHILD_OUTPUT_CHARS),
+  });
+}
+
+function closeScript(callID, output) {
+  const calls = scriptCalls.get(callID);
+  scriptCalls.delete(callID);
+  if (!calls || calls.length === 0 || !output || typeof output !== "object") return;
+  output.metadata = Object.assign({}, output.metadata, { [CODE_MODE_CALLS_META]: calls });
+}
 
 function truncate(text, max) {
   const trimmed = String(text == null ? "" : text).trim();
@@ -35221,6 +35336,13 @@ export const AlanEnginePlugin = async () => ({
       output.headers["x-alan-operation-key"] = Date.now() + "-" + crypto.randomUUID();
     }
   },
+  "tool.execute.before": async (input) => {
+    if (input.tool === CODE_MODE_TOOL) openScript(input.callID);
+  },
+  "tool.execute.after": async (input, output) => {
+    if (input.tool === CODE_MODE_TOOL) closeScript(input.callID, output);
+    else recordScriptCall(input, output);
+  },
   tool: {
     web_search: {
       description: "web_search: Search the public web via Alan's Parallel proxy. Use when you do not already have a URL. Follow up with webfetch on the best result(s).",
@@ -35254,6 +35376,7 @@ function bearerToken(authorization) {
 function alanCodeEngineEnv(input2) {
   return {
     ...alanCodeEngineDirectories(input2.engineRoot),
+    [OPENCODE_CODE_MODE_ENV]: "true",
     [ALAN_CODE_API_KEY_ENV]: input2.apiKey,
     [ALAN_CODE_CONVERSATION_ID_ENV]: input2.conversationId
   };
@@ -35297,6 +35420,7 @@ var import_http9, import_https, import_fs8, import_path8, import_crypto13, impor
 var init_alan_code = __esm({
   "../agent-core/dist/providers/alan-code.js"() {
     "use strict";
+    init_chunk_OSECDZA5();
     init_chunk_YXWJW7I5();
     import_http9 = require("http");
     import_https = require("https");
@@ -35339,10 +35463,15 @@ var init_alan_code = __esm({
       emptyTurn: "Alan Code ended the turn without producing any output. Try again or pick another model."
     };
     WINDOWS_RUNNABLE_EXTENSION = /\.(exe|com|cmd|bat)$/i;
-    ALAN_CODE_ENGINE_PLUGIN_VERSION = 2;
+    ALAN_CODE_ENGINE_PLUGIN_VERSION = 3;
     ALAN_CODE_TOOL_NAMING_PROMPT = `## Alan tool names
 
-This engine exposes Alan MCP tools with an \`alan_\` prefix. Where these instructions name an Alan tool, call its prefixed form: \`search_context\` is \`alan_search_context\`, \`search_code_context\` is \`alan_search_code_context\`, and \`find_records\` is \`alan_find_records\`.`;
+Alan's MCP tools are not separate tools in this engine. Call them inside an \`execute\` script under the \`alan\` namespace: \`search_context\` is \`tools.alan.search_context({ ... })\`, \`search_code_context\` is \`tools.alan.search_code_context({ ... })\`, and \`find_records\` is \`tools.alan.find_records({ ... })\`.
+
+- Before the first call to a tool whose signature is not shown in the \`execute\` description, read it with \`tools.$codemode.search({ query: "<tool name>" })\` and pass exactly its fields.
+- Alan tools return JSON as text: \`JSON.parse\` a result before reading its fields or passing it to \`Object.keys\`.
+- Look up IDs in one script, then make the writes in the next, so a failed lookup never leaves half the writes done.
+- Pass an \`idempotencyKey\` naming each change (for example \`create-task:<title>\`) on every write that accepts one. If a script fails, check what it already created before running it again, and run only the writes that are missing.`;
   }
 });
 
@@ -45113,7 +45242,7 @@ var require_tar_stream = __commonJS({
 var init_dist = __esm({
   "../agent-core/dist/index.js"() {
     "use strict";
-    init_chunk_ILZBXGVI();
+    init_chunk_FYZKVT3E();
     init_chunk_OUEMTEUX();
     init_chunk_ZCTKXKYY();
     init_chunk_6VWVDJ2A();
@@ -45860,12 +45989,12 @@ var import_promises50, import_path10, import_crypto14, import_promises51, CURSOR
 var init_acp3 = __esm({
   "../agent-core/dist/providers/acp.js"() {
     "use strict";
-    init_chunk_ILZBXGVI();
+    init_chunk_FYZKVT3E();
     init_chunk_OUEMTEUX();
     init_chunk_ZCTKXKYY();
-    init_chunk_J2KTV5FP();
     init_chunk_6VWVDJ2A();
     init_chunk_DLVRNIY5();
+    init_chunk_OSECDZA5();
     init_chunk_YXWJW7I5();
     import_promises50 = require("fs/promises");
     import_path10 = require("path");
@@ -47366,6 +47495,21 @@ function classifyOpenCodeError(error62, fallback) {
   }
   return classifyCliError(message2 || fallback);
 }
+function readChildCall(value2) {
+  const record2 = asRecord(value2);
+  const callId = asString(record2?.callId);
+  const tool = asString(record2?.tool);
+  if (!record2 || !callId || !tool) return void 0;
+  return { callId, tool, input: record2.input, output: asString(record2.output) };
+}
+function readCodeModeChildCalls(metadata) {
+  return asArray(asRecord(metadata)?.[CODE_MODE_CALLS_META]).flatMap(
+    (entry) => {
+      const call = readChildCall(entry);
+      return call ? [call] : [];
+    }
+  );
+}
 function withParent(updates, parentToolCallId) {
   if (!parentToolCallId) return updates;
   return updates.map(
@@ -47456,6 +47600,24 @@ function toolContent(tool, toolState) {
   const editing = tool.status === "in_progress" && (tool.name === "edit" || tool.name === "write");
   return editing && path4 ? [fileChangeContent({ path: path4, operation: "modify", hunks: [] })] : void 0;
 }
+function codeModeChildUpdates(tool, metadata) {
+  if (tool.name !== OPENCODE_CODE_MODE_TOOL || tool.status !== "completed") return [];
+  return readCodeModeChildCalls(metadata).map((call) => {
+    const name = canonicalizeManagedMcpToolName(call.tool);
+    const content = outputContent(call.output);
+    return {
+      sessionUpdate: "tool_call_update",
+      toolCallId: call.callId,
+      name,
+      title: name,
+      kind: toolKindFor(name),
+      status: "completed",
+      ...call.input !== void 0 ? { rawInput: call.input } : {},
+      ...content ? { content } : {},
+      ...call.output ? { rawOutput: call.output } : {}
+    };
+  });
+}
 function createOpenCodeSessionMemory() {
   return { userMessageIds: /* @__PURE__ */ new Set() };
 }
@@ -47794,12 +47956,12 @@ var import_crypto15, import_http10, import_crypto16, import_promises52, import_p
 var init_opencode = __esm({
   "../agent-core/dist/providers/opencode.js"() {
     "use strict";
-    init_chunk_ILZBXGVI();
+    init_chunk_FYZKVT3E();
     init_chunk_OUEMTEUX();
     init_chunk_ZCTKXKYY();
-    init_chunk_J2KTV5FP();
     init_chunk_6VWVDJ2A();
     init_chunk_DLVRNIY5();
+    init_chunk_OSECDZA5();
     init_chunk_YXWJW7I5();
     import_crypto15 = require("crypto");
     import_http10 = require("http");
@@ -48325,6 +48487,7 @@ var init_opencode = __esm({
           }
         ];
         updates.push(...this.#plan(toolCallId, tool.name, toolState));
+        updates.push(...codeModeChildUpdates(tool, toolState?.metadata));
         if (tool.status === "failed" && (tool.isTask || PERMISSION_DENIED.test(tool.errorMessage))) {
           updates.push(
             noticeUpdate("error", "tool_failed", tool.errorMessage || "OpenCode tool call failed.")
@@ -49844,12 +50007,12 @@ var import_crypto18, import_promises53, FACTORY_API_VERSION, FACTORY_PROTOCOL_VE
 var init_droid = __esm({
   "../agent-core/dist/providers/droid.js"() {
     "use strict";
-    init_chunk_ILZBXGVI();
+    init_chunk_FYZKVT3E();
     init_chunk_OUEMTEUX();
     init_chunk_ZCTKXKYY();
-    init_chunk_J2KTV5FP();
     init_chunk_6VWVDJ2A();
     init_chunk_DLVRNIY5();
+    init_chunk_OSECDZA5();
     init_chunk_YXWJW7I5();
     init_runtime_v2();
     import_crypto18 = require("crypto");
@@ -50954,7 +51117,7 @@ var init_antigravity = __esm({
   "../agent-core/dist/providers/antigravity.js"() {
     "use strict";
     init_chunk_D4TIXPWZ();
-    init_chunk_ILZBXGVI();
+    init_chunk_FYZKVT3E();
     init_chunk_OUEMTEUX();
     init_chunk_ZCTKXKYY();
     init_chunk_6VWVDJ2A();
@@ -51658,12 +51821,12 @@ var import_promises55, import_path16, import_crypto20, COMMAND_CODE_GRAMMAR_NAME
 var init_command_code = __esm({
   "../agent-core/dist/providers/command-code.js"() {
     "use strict";
-    init_chunk_ILZBXGVI();
+    init_chunk_FYZKVT3E();
     init_chunk_OUEMTEUX();
     init_chunk_ZCTKXKYY();
-    init_chunk_J2KTV5FP();
     init_chunk_6VWVDJ2A();
     init_chunk_DLVRNIY5();
+    init_chunk_OSECDZA5();
     init_chunk_YXWJW7I5();
     import_promises55 = require("fs/promises");
     import_path16 = require("path");
@@ -57061,7 +57224,7 @@ var require_websocket_server = __commonJS({
 // package.json
 var package_default = {
   name: "@alan-ai-hq/agent-manager",
-  version: "0.1.157",
+  version: "0.1.158",
   private: true,
   type: "module",
   description: "Alan machine runtime (alan-agent): identity, link, reconciler, session holders, run log, uploader, local API",
@@ -71985,7 +72148,19 @@ async function runHolder({
       ...machine?.platform === void 0 ? {} : { platform: machine.platform }
     });
     const observed = facts.observe(driver);
-    const writeStatus = () => writeJsonFileAtomic(launch.statusPath, {
+    let statusWrites = Promise.resolve();
+    const writeStatus = () => {
+      const next = statusWrites.then(() => writeStatusNow());
+      statusWrites = next.catch(
+        (error62) => log.warn("holder.status_write_failed", { error: error62 })
+      );
+      return next;
+    };
+    const queueStatus = () => {
+      writeStatus().catch(() => {
+      });
+    };
+    const writeStatusNow = () => writeJsonFileAtomic(launch.statusPath, {
       protocol: HOLDER_PROTOCOL,
       conversationId: launch.conversationId,
       pid: identity.pid,
@@ -72004,7 +72179,7 @@ async function runHolder({
       holder.state = "idle";
       holder.runId = null;
       holder.turn = null;
-      void writeStatus();
+      queueStatus();
     };
     const startTurn = (id, spec, client) => {
       if (holder.runId === spec.runId) {
@@ -72048,7 +72223,7 @@ async function runHolder({
             return;
           }
           writeMessage(client, { type: "ack", id });
-          void writeStatus();
+          queueStatus();
           runClaimedTurn(spec, claimed, context, turn.signal).then((outcome2) => broadcast({ type: "turn_ended", runId: spec.runId, outcome: outcome2 })).catch((error62) => log.error("holder.turn_crashed", { runId: spec.runId, error: error62 })).finally(settle2);
         },
         (error62) => {
@@ -72186,6 +72361,7 @@ async function runHolder({
     await driver.suspend?.().catch((error62) => log.warn("holder.driver_suspend_failed", { error: error62 }));
     for (const client of holder.clients) client.end();
     await new Promise((resolve13) => server.close(() => resolve13()));
+    await statusWrites;
     (0, import_node_fs23.rmSync)(launch.statusPath, { force: true });
     log.info("holder.suspended", { conversationId: launch.conversationId });
   } catch (_) {