@alan-ai-hq/agent-manager-linux-arm64 0.1.134 → 0.1.136

package/alan-holder.cjs

@@ -20376,10 +20376,13 @@ var init_desired_state = __esm({
 function runProviderCredentialPath(runId) {
   return `/public/machines/me/runs/${encodeURIComponent(runId)}/provider-credential`;
 }
+function runCodexCredentialRefreshPath(runId) {
+  return `${runProviderCredentialPath(runId)}/refresh`;
+}
 function runAttachmentPath(runId, attachmentId) {
   return `/public/machines/me/runs/${encodeURIComponent(runId)}/attachments/${encodeURIComponent(attachmentId)}`;
 }
-var machineEndpointsSchema, machineCredentialGrantSchema, MACHINE_PATHS, machinePlatformSchema, machineRegisterRequestSchema, machineRenewRequestSchema, machineRenewReusedSchema, deviceAuthorizationSchema, machineDeviceAuthorizationRequestSchema, machineDeviceTokenRequestSchema, machineDeviceTokenSchema, DEVICE_TOKEN_ERRORS, machineDeviceTokenErrorSchema, machineMcpCredentialRequestSchema, machineMcpCredentialSchema, runtimeReleaseSchema, machineSiblingSchema, MACHINE_SIBLINGS_LIMIT, machineSiblingsResponseSchema, runProviderCredentialSchema;
+var machineEndpointsSchema, machineCredentialGrantSchema, MACHINE_PATHS, machinePlatformSchema, machineRegisterRequestSchema, machineEnrollRequestSchema, machineRenewRequestSchema, machineRenewReusedSchema, deviceAuthorizationSchema, machineDeviceAuthorizationRequestSchema, machineDeviceTokenRequestSchema, machineDeviceTokenSchema, DEVICE_TOKEN_ERRORS, machineDeviceTokenErrorSchema, machineMcpCredentialRequestSchema, machineMcpCredentialSchema, runtimeReleaseSchema, machineSiblingSchema, MACHINE_SIBLINGS_LIMIT, machineSiblingsResponseSchema, runCodexCredentialSchema, runCodexCredentialRefreshRequestSchema, runProviderCredentialSchema;
 var init_machine_identity = __esm({
   "../shared/dist/runtime-v2/machine-identity.js"() {
     "use strict";
@@ -20399,6 +20402,8 @@ var init_machine_identity = __esm({
     MACHINE_PATHS = {
       /** POST with a one-time setup grant (what `install --setup-token` / `setup` send). */
       register: "/public/machines/register",
+      /** POST with a cloud sandbox's one-time enrollment code from `ALAN_RUNTIME_ENROLLMENT_CODE`. */
+      enroll: "/public/machines/enroll",
       /** POST with the current renewal token; the response carries a new one and the old dies. */
       renew: "/public/machines/me/renew",
       /** POST by the machine itself on logout/uninstall. */
@@ -20435,6 +20440,7 @@ var init_machine_identity = __esm({
       /** Chosen by the install before its first registration, so a credential lost locally still maps to its row. */
       installationId: external_exports.guid().optional()
     });
+    machineEnrollRequestSchema = external_exports.object({ enrollmentCode: external_exports.string().min(1) });
     machineRenewRequestSchema = external_exports.object({ renewalToken: external_exports.string().min(1) });
     machineRenewReusedSchema = external_exports.object({
       error: external_exports.literal("renewal_token_reused"),
@@ -20491,9 +20497,20 @@ var init_machine_identity = __esm({
     machineSiblingsResponseSchema = external_exports.object({
       machines: external_exports.array(machineSiblingSchema).max(MACHINE_SIBLINGS_LIMIT)
     });
+    runCodexCredentialSchema = external_exports.object({
+      accessToken: external_exports.string().min(1),
+      chatgptAccountId: external_exports.string().min(1),
+      chatgptPlanType: external_exports.string().nullable()
+    });
+    runCodexCredentialRefreshRequestSchema = external_exports.object({
+      /** sha256 hex of the access token Codex was refused with; a newer stored token is returned instead of rotating. */
+      rejectedAccessTokenSha256: external_exports.string().regex(/^[0-9a-f]{64}$/).optional()
+    });
     runProviderCredentialSchema = external_exports.object({
       /** Environment variables for the agent CLI, e.g. ANTHROPIC_API_KEY; empty when the CLI's own login is used. */
-      env: external_exports.record(external_exports.string(), external_exports.string())
+      env: external_exports.record(external_exports.string(), external_exports.string()),
+      /** The team's Codex login for a cloud sandbox; absent where the CLI's own login is used. */
+      codex: runCodexCredentialSchema.optional()
     });
   }
 });
@@ -21349,11 +21366,12 @@ function isReadOnlyAgent(agentId) {
   const agent = getBuiltinAgentDefinition(agentId);
   return !agent.capabilities.canEditFiles;
 }
-var COORDINATOR_PROMPT, PM_PROMPT, GENERAL_PROMPT, REVIEW_PROMPT, DESIGNER_PROMPT, BUILTIN_AGENT_DEFINITIONS, BUILTIN_AGENT_BY_ID, LEGACY_AGENT_ID_ALIASES;
+var SETUP_AGENT_ID, COORDINATOR_PROMPT, PM_PROMPT, GENERAL_PROMPT, REVIEW_PROMPT, DESIGNER_PROMPT, BUILTIN_AGENT_DEFINITIONS, BUILTIN_AGENT_BY_ID, LEGACY_AGENT_ID_ALIASES;
 var init_agent_definitions = __esm({
   "../shared/dist/agent/agent-definitions.js"() {
     "use strict";
     init_task_duplicate();
+    SETUP_AGENT_ID = "setup";
     COORDINATOR_PROMPT = `## You are the Orchestrator
 
 You are the **Orchestrator** for this task or session. When asked "who are you?", "what agent are you?", "are you the coordinator?", "are you the orchestrator?", or anything similar \u2014 identify yourself plainly as the Orchestrator. Do not say "I'm Alan" alone; say "I'm the Orchestrator (an Alan agent profile)."
@@ -21647,6 +21665,21 @@ For any UI or design work, read and follow the \`uiux\` skill in \`.agents/skill
           canManageSubtasks: false
         },
         systemPrompt: DESIGNER_PROMPT
+      },
+      {
+        id: SETUP_AGENT_ID,
+        name: "Setup Agent",
+        description: "Sets up and verifies cloud environments",
+        iconKey: "hard-drive",
+        defaultMode: "agent",
+        capabilities: {
+          canEditFiles: true,
+          canRunCommands: true,
+          canCreateArtifacts: true,
+          canStartSessions: false,
+          canManageSubtasks: false
+        },
+        systemPrompt: ""
       }
     ];
     BUILTIN_AGENT_BY_ID = new Map(BUILTIN_AGENT_DEFINITIONS.map((agent) => [agent.id, agent]));
@@ -21657,9 +21690,7 @@ For any UI or design work, read and follow the \`uiux\` skill in \`.agents/skill
       implementer: "general",
       implementor: "general",
       "ui-designer": "designer",
-      verifier: "general",
-      // Former reserved Setup Agent profile \u2014 env setup is now a normal session kickoff.
-      setup: "general"
+      verifier: "general"
     };
   }
 });
@@ -21679,21 +21710,9 @@ var init_browser_surface = __esm({
 });
 
 // ../shared/dist/agent/gated-mcp-tools.js
-var CODE_INDEX_MCP_TOOLS, CONTEXT_GRAPH_MCP_TOOLS, ENTITLEMENT_GATED_MCP_TOOLS;
 var init_gated_mcp_tools = __esm({
   "../shared/dist/agent/gated-mcp-tools.js"() {
     "use strict";
-    CODE_INDEX_MCP_TOOLS = [
-      "search_code_context",
-      "code_context_status",
-      "code_graph_query",
-      "code_lsp_diagnostics"
-    ];
-    CONTEXT_GRAPH_MCP_TOOLS = ["search_context"];
-    ENTITLEMENT_GATED_MCP_TOOLS = [
-      ...CODE_INDEX_MCP_TOOLS,
-      ...CONTEXT_GRAPH_MCP_TOOLS
-    ];
   }
 });
 
@@ -22202,7 +22221,7 @@ var init_chunk_YXWJW7I5 = __esm({
   }
 });
 
-// ../agent-core/dist/chunk-6GPS6OKU.js
+// ../agent-core/dist/chunk-J4T6L5LX.js
 function windowsEnvValue(env, name) {
   const wanted = name.toLowerCase();
   for (const [key, value] of Object.entries(env)) {
@@ -22373,7 +22392,7 @@ function plan(command, args, options) {
 function captureOutput(command, args, options) {
   const launch = plan(command, args, options);
   if (launch === void 0) return Promise.resolve(NEVER_STARTED);
-  return new Promise((resolve5) => {
+  return new Promise((resolve6) => {
     (0, import_child_process.execFile)(
       launch.file,
       [...launch.args],
@@ -22387,7 +22406,7 @@ function captureOutput(command, args, options) {
       },
       (error61, stdout, stderr) => {
         const code = error61 && typeof error61.code === "number" ? error61.code : error61 ? void 0 : 0;
-        resolve5({ stdout, stderr, exitCode: code });
+        resolve6({ stdout, stderr, exitCode: code });
       }
     );
   });
@@ -22429,18 +22448,18 @@ function decode3(bytes, start, end) {
 }
 async function linuxStartTicks(pid) {
   try {
-    const stat13 = await (0, import_promises5.readFile)(`/proc/${pid}/stat`, "utf8");
-    const fields = stat13.slice(stat13.lastIndexOf(")") + 2).split(" ");
+    const stat14 = await (0, import_promises5.readFile)(`/proc/${pid}/stat`, "utf8");
+    const fields = stat14.slice(stat14.lastIndexOf(")") + 2).split(" ");
     return fields[19];
   } catch {
     return void 0;
   }
 }
 function psStartTime(pid) {
-  return new Promise((resolve5) => {
+  return new Promise((resolve6) => {
     (0, import_child_process2.execFile)("ps", ["-o", "lstart=", "-p", String(pid)], { timeout: 2e3 }, (error61, stdout) => {
       const text2 = stdout.trim();
-      resolve5(error61 || !text2 ? void 0 : text2);
+      resolve6(error61 || !text2 ? void 0 : text2);
     });
   });
 }
@@ -22469,12 +22488,12 @@ function parseProcessList(text2) {
 }
 function listProcesses(platform = process.platform) {
   if (platform === "win32") return Promise.resolve([]);
-  return new Promise((resolve5) => {
+  return new Promise((resolve6) => {
     (0, import_child_process3.execFile)(
       "ps",
       ["-A", "-o", "pid=,ppid=,pgid=,lstart="],
       { timeout: 5e3, maxBuffer: 8 * 1024 * 1024 },
-      (error61, stdout) => resolve5(error61 ? [] : parseProcessList(stdout))
+      (error61, stdout) => resolve6(error61 ? [] : parseProcessList(stdout))
     );
   });
 }
@@ -22514,11 +22533,11 @@ async function taskkill(pid, options) {
     stdio: "ignore",
     windowsHide: true
   });
-  const exited = new Promise((resolve5) => {
-    killer.once("error", (error210) => resolve5(error210));
+  const exited = new Promise((resolve6) => {
+    killer.once("error", (error210) => resolve6(error210));
     killer.once(
       "exit",
-      (code, signal) => resolve5(code === 0 ? void 0 : new Error(`taskkill failed: exit ${code}, signal ${signal}`))
+      (code, signal) => resolve6(code === 0 ? void 0 : new Error(`taskkill failed: exit ${code}, signal ${signal}`))
     );
   });
   const timedOut = clock.sleep(options.timeoutMs ?? DEFAULT_TASKKILL_TIMEOUT_MS, timeout.signal).then(() => new Error("taskkill timed out")).catch(() => void 0);
@@ -22748,25 +22767,35 @@ async function waitForWindowsJob(child, command) {
     await (0, import_promises6.rm)(status.directory, { recursive: true, force: true });
   }
 }
+function onCliSpawned(listener) {
+  spawnListeners.add(listener);
+  return {
+    [Symbol.dispose]: () => {
+      spawnListeners.delete(listener);
+    }
+  };
+}
 function spawnCli(options) {
   const platform = options.platform ?? process.platform;
   const plan2 = planSpawn({ ...options, platform });
   if (plan2.commandLine !== null) return spawnInWindowsJob(plan2, options);
-  return (0, import_child_process5.spawn)(plan2.file, [...plan2.args], {
+  const child = (0, import_child_process5.spawn)(plan2.file, [...plan2.args], {
     cwd: options.cwd,
     env: { ...options.env },
     stdio: ["pipe", "pipe", "pipe"],
     shell: false,
     detached: true
   });
+  for (const listener of spawnListeners) listener(child);
+  return child;
 }
 function waitForSpawn(child, command) {
   if (isWindowsJob(child)) return waitForWindowsJob(child, command);
   if (child.pid !== void 0) return Promise.resolve();
-  return new Promise((resolve5, reject) => {
+  return new Promise((resolve6, reject) => {
     const onSpawn = () => {
       child.off("error", onError);
-      resolve5();
+      resolve6();
     };
     const onError = (error61) => {
       child.off("spawn", onSpawn);
@@ -22779,9 +22808,9 @@ function waitForSpawn(child, command) {
     child.once("error", onError);
   });
 }
-var import_child_process, import_fs, import_path, import_child_process2, import_promises5, import_child_process3, import_child_process4, import_child_process5, import_child_process6, import_crypto, import_fs2, import_promises6, import_os, import_path2, SHIM_MAX_BYTES, CMD_MAX_COMMAND_LINE, MAX_COMMAND_LINE, DEFAULT_PATHEXT, nodeWindowsFiles, NODE_SHIM_ENTRY, CMD_META, NEVER_STARTED, HIDDEN_FLAG_PROBE_VALUE, NEWLINE, CARRIAGE_RETURN, EMPTY, MAX_LINE_BYTES, LineSplitter, PS_LINE, POLL_MS, DEFAULT_GRACE_MS, DEFAULT_KILL_WAIT_MS, DEFAULT_TASKKILL_TIMEOUT_MS, statuses, START_TIMEOUT_MS;
-var init_chunk_6GPS6OKU = __esm({
-  "../agent-core/dist/chunk-6GPS6OKU.js"() {
+var import_child_process, import_fs, import_path, import_child_process2, import_promises5, import_child_process3, import_child_process4, import_child_process5, import_child_process6, import_crypto, import_fs2, import_promises6, import_os, import_path2, SHIM_MAX_BYTES, CMD_MAX_COMMAND_LINE, MAX_COMMAND_LINE, DEFAULT_PATHEXT, nodeWindowsFiles, NODE_SHIM_ENTRY, CMD_META, NEVER_STARTED, HIDDEN_FLAG_PROBE_VALUE, NEWLINE, CARRIAGE_RETURN, EMPTY, MAX_LINE_BYTES, LineSplitter, PS_LINE, POLL_MS, DEFAULT_GRACE_MS, DEFAULT_KILL_WAIT_MS, DEFAULT_TASKKILL_TIMEOUT_MS, statuses, START_TIMEOUT_MS, spawnListeners;
+var init_chunk_J4T6L5LX = __esm({
+  "../agent-core/dist/chunk-J4T6L5LX.js"() {
     "use strict";
     init_chunk_YXWJW7I5();
     import_child_process = require("child_process");
@@ -22870,6 +22899,7 @@ var init_chunk_6GPS6OKU = __esm({
     DEFAULT_TASKKILL_TIMEOUT_MS = 5e3;
     statuses = /* @__PURE__ */ new WeakMap();
     START_TIMEOUT_MS = 1e4;
+    spawnListeners = /* @__PURE__ */ new Set();
   }
 });
 
@@ -23575,26 +23605,26 @@ var init_constants = __esm({
   }
 });
 
-// ../shared/dist/agent/acp/background-task.js
-var BACKGROUND_TASK_META_KEY;
-var init_background_task = __esm({
-  "../shared/dist/agent/acp/background-task.js"() {
+// ../shared/dist/agent/acp/transcript-http.js
+var init_transcript_http = __esm({
+  "../shared/dist/agent/acp/transcript-http.js"() {
     "use strict";
-    BACKGROUND_TASK_META_KEY = "alan.dev/backgroundTask";
   }
 });
 
-// ../shared/dist/agent/acp/conversation-messages.js
-var init_conversation_messages = __esm({
-  "../shared/dist/agent/acp/conversation-messages.js"() {
+// ../shared/dist/agent/acp/ask.js
+var init_ask = __esm({
+  "../shared/dist/agent/acp/ask.js"() {
     "use strict";
   }
 });
 
-// ../shared/dist/agent/acp/event.js
-var init_event = __esm({
-  "../shared/dist/agent/acp/event.js"() {
+// ../shared/dist/agent/acp/background-task.js
+var BACKGROUND_TASK_META_KEY;
+var init_background_task = __esm({
+  "../shared/dist/agent/acp/background-task.js"() {
     "use strict";
+    BACKGROUND_TASK_META_KEY = "alan.dev/backgroundTask";
   }
 });
 
@@ -23626,9 +23656,9 @@ var init_prepare_conversation_turns = __esm({
   }
 });
 
-// ../shared/dist/agent/acp/presentation/types.js
-var init_types2 = __esm({
-  "../shared/dist/agent/acp/presentation/types.js"() {
+// ../shared/dist/agent/acp/event.js
+var init_event = __esm({
+  "../shared/dist/agent/acp/event.js"() {
     "use strict";
   }
 });
@@ -23637,7 +23667,7 @@ var init_types2 = __esm({
 function isUpdate(update, kind) {
   return update.sessionUpdate === kind;
 }
-var init_types3 = __esm({
+var init_types2 = __esm({
   "../shared/dist/agent/acp/types.js"() {
     "use strict";
   }
@@ -23650,6 +23680,20 @@ var init_reduce = __esm({
   }
 });
 
+// ../shared/dist/agent/acp/conversation-messages.js
+var init_conversation_messages = __esm({
+  "../shared/dist/agent/acp/conversation-messages.js"() {
+    "use strict";
+  }
+});
+
+// ../shared/dist/agent/acp/presentation/types.js
+var init_types3 = __esm({
+  "../shared/dist/agent/acp/presentation/types.js"() {
+    "use strict";
+  }
+});
+
 // ../shared/dist/agent/acp/read.js
 var init_read = __esm({
   "../shared/dist/agent/acp/read.js"() {
@@ -23664,13 +23708,6 @@ var init_transcript_byte_decoder = __esm({
   }
 });
 
-// ../shared/dist/agent/acp/transcript-http.js
-var init_transcript_http = __esm({
-  "../shared/dist/agent/acp/transcript-http.js"() {
-    "use strict";
-  }
-});
-
 // ../shared/dist/agent/acp/transcript-fold.js
 var init_transcript_fold = __esm({
   "../shared/dist/agent/acp/transcript-fold.js"() {
@@ -23691,6 +23728,7 @@ var init_transcript_live = __esm({
 var init_acp = __esm({
   "../shared/dist/agent/acp/index.js"() {
     "use strict";
+    init_ask();
     init_background_task();
     init_conversation_messages();
     init_event();
@@ -23698,7 +23736,7 @@ var init_acp = __esm({
     init_notice_visibility();
     init_prepare_conversation_turns();
     init_terminal_events();
-    init_types2();
+    init_types3();
     init_read();
     init_reduce();
     init_transcript_byte_decoder();
@@ -23706,7 +23744,7 @@ var init_acp = __esm({
     init_transcript_http();
     init_transcript_ingestion();
     init_transcript_live();
-    init_types3();
+    init_types2();
   }
 });
 
@@ -24078,11 +24116,20 @@ var init_chunk_DALFHI4B = __esm({
   }
 });
 
-// ../agent-core/dist/chunk-BR4I6MQF.js
+// ../agent-core/dist/chunk-54ZRJOQP.js
 function specForErrorKind(errorKind) {
   const spec = ERROR_SPECS[errorKind];
   return { message: spec.message, errorKind, recoveryClass: spec.recoveryClass };
 }
+function withAgentSignIn(classified, harness) {
+  const agent = AGENT_SIGN_IN_BY_HARNESS.get(harness);
+  if (!agent || classified.message !== ERROR_SPECS.not_logged_in.message) return classified;
+  const local = agent.localSignIn ?? "sign in to it";
+  return {
+    ...classified,
+    message: `${agent.name} isn't signed in: for cloud runs connect it in Team settings \u2192 Integrations \u2192 Coding agents; on your computer ${local}; then retry.`
+  };
+}
 function embeddedJson(text2) {
   const start = text2.indexOf("{");
   if (start === -1) return void 0;
@@ -24192,6 +24239,7 @@ function statusKind(status) {
 }
 function mapProviderApiError(errorCode, apiStatus) {
   if (apiStatus === 403) return "access_denied";
+  if (apiStatus === 402) return "payment_required";
   if (apiStatus === 401) return "auth_invalid";
   const code = errorCode?.trim().toLowerCase();
   const byCode = code ? CODE_RULES.find((rule) => rule.pattern.test(code))?.kind : void 0;
@@ -24205,6 +24253,11 @@ function classifyProviderApiError(input2) {
   if (fromText && TEXT_REFINES[structured]?.has(fromText.errorKind)) return fromText;
   return specForErrorKind(structured);
 }
+function withPaymentRemedy(classified, message) {
+  if (classified.errorKind !== "payment_required") return classified;
+  const remedy = message.replace(STATUS_LEAD, "").trim();
+  return remedy ? { ...classified, message: remedy.slice(0, 300) } : classified;
+}
 function classifyProviderError(text2, hints = {}) {
   const detail = readProviderErrorDetail(text2);
   const errorCode = hints.errorCode ?? detail.type;
@@ -24214,7 +24267,7 @@ function classifyProviderError(text2, hints = {}) {
     ...status === void 0 ? {} : { status },
     text: detail.message
   }) ?? classifyProviderTerminalText(text2);
-  if (classified) return classified;
+  if (classified) return withPaymentRemedy(classified, detail.message);
   const message = detail.message.slice(0, 200);
   return message ? { message, errorKind: "unknown_cli_error", recoveryClass: "unknown" } : specForErrorKind("unknown_cli_error");
 }
@@ -24235,7 +24288,8 @@ function retryOwnerFor(classified, harnessOwnsRetry, safe) {
   if (!safe) return "none";
   return classified.errorKind === "resume_failed" || classified.errorKind === "history_rejected" ? "alan_resume" : "user_confirmed_fresh_run";
 }
-function createCliProblem(classified, options) {
+function createCliProblem(observed, options) {
+  const classified = withAgentSignIn(observed, options.harness);
   const automatic = classified.recoveryClass === "auto_recovering";
   const harnessOwnsRetry = options.finality === "observation" && automatic;
   const safe = options.outcomeCertainty === "no_effect" || harnessOwnsRetry;
@@ -24265,9 +24319,9 @@ function createCliProblem(classified, options) {
     ...classified.resetsAt ? { resetsAt: classified.resetsAt } : {}
   });
 }
-var import_crypto2, ERROR_SPECS, AGENT_ERROR_KINDS, STATUS_PREFIX, TEXT_RULES, CODEX_TIMEOUT_MESSAGE, CODEX_EXPIRED_MESSAGE, EPOCH_RESET, WORDED_RESET, COMMAND_NOT_FOUND, CODE_RULES, TEXT_REFINES, CLI_PROBLEM_CODE_BY_ERROR_KIND, KEY_REJECTION_KINDS;
-var init_chunk_BR4I6MQF = __esm({
-  "../agent-core/dist/chunk-BR4I6MQF.js"() {
+var import_crypto2, ERROR_SPECS, AGENT_ERROR_KINDS, AGENT_SIGN_IN_BY_HARNESS, STATUS_PREFIX, TEXT_RULES, CODEX_TIMEOUT_MESSAGE, CODEX_EXPIRED_MESSAGE, EPOCH_RESET, WORDED_RESET, COMMAND_NOT_FOUND, CODE_RULES, TEXT_REFINES, STATUS_LEAD, CLI_PROBLEM_CODE_BY_ERROR_KIND, KEY_REJECTION_KINDS;
+var init_chunk_54ZRJOQP = __esm({
+  "../agent-core/dist/chunk-54ZRJOQP.js"() {
     "use strict";
     init_chunk_YXWJW7I5();
     import_crypto2 = require("crypto");
@@ -24286,7 +24340,7 @@ var init_chunk_BR4I6MQF = __esm({
         recoveryClass: "user_fixable"
       },
       not_logged_in: {
-        message: "Not logged in to the agent CLI on this computer. Sign in to it there (for Claude Code, run `claude` then `/login`), then retry.",
+        message: "The agent CLI isn't signed in: for cloud runs connect it in Team settings \u2192 Integrations \u2192 Coding agents; on your computer sign in to the CLI; then retry.",
         recoveryClass: "user_fixable"
       },
       not_authenticated: {
@@ -24301,6 +24355,10 @@ var init_chunk_BR4I6MQF = __esm({
         message: "This model requires a paid subscription. Switch to a supported model or upgrade your plan.",
         recoveryClass: "user_fixable"
       },
+      payment_required: {
+        message: "The account behind this model has no active plan or credits. Ask an admin to check billing, or switch to a model from your own provider, then retry.",
+        recoveryClass: "user_fixable"
+      },
       quota_exceeded: {
         message: "API quota exceeded. Wait for it to reset or check your billing, then retry.",
         recoveryClass: "user_fixable"
@@ -24373,6 +24431,19 @@ var init_chunk_BR4I6MQF = __esm({
     AGENT_ERROR_KINDS = Object.keys(ERROR_SPECS).filter(
       (key) => key in ERROR_SPECS
     );
+    AGENT_SIGN_IN_BY_HARNESS = /* @__PURE__ */ new Map([
+      ["claude_cli", { name: "Claude Code", localSignIn: "run `claude` then `/login`" }],
+      ["codex_app_server", { name: "Codex", localSignIn: "run `codex login`" }],
+      ["codex_exec", { name: "Codex", localSignIn: "run `codex login`" }],
+      ["cursor_agent_cli", { name: "Cursor Agent", localSignIn: "run `cursor-agent login`" }],
+      ["copilot_cli", { name: "GitHub Copilot CLI", localSignIn: "run `copilot` then `/login`" }],
+      ["opencode_serve", { name: "OpenCode", localSignIn: "run `opencode auth login`" }],
+      ["droid_cli", { name: "Droid" }],
+      ["antigravity_cli", { name: "Antigravity" }],
+      ["grok_cli", { name: "Grok CLI" }],
+      ["kimi_cli", { name: "Kimi CLI" }],
+      ["command_code_cli", { name: "Command Code" }]
+    ]);
     STATUS_PREFIX = /\b(?:api error|status|http)[:\s]+(\d{3})\b/i;
     TEXT_RULES = [
       { kind: "auth_expired", pattern: /\bcodex cli connection expired\b|\breconnect openai codex\b/ },
@@ -24477,6 +24548,7 @@ var init_chunk_BR4I6MQF = __esm({
       rate_limited: /* @__PURE__ */ new Set(["usage_limit", "quota_exceeded"]),
       auth_invalid: /* @__PURE__ */ new Set(["auth_expired", "not_logged_in", "not_authenticated"])
     };
+    STATUS_LEAD = /^(?:api error|status|http)[:\s]+\d{3}\b[:\s]*/i;
     CLI_PROBLEM_CODE_BY_ERROR_KIND = {
       model_mismatch: "cli.model.unavailable",
       auth_invalid: "cli.auth.invalid",
@@ -24485,6 +24557,7 @@ var init_chunk_BR4I6MQF = __esm({
       not_authenticated: "cli.auth.invalid",
       auth_expired: "cli.auth.expired",
       subscription_required: "cli.entitlement.required",
+      payment_required: "cli.entitlement.required",
       quota_exceeded: "cli.quota_exceeded",
       usage_limit: "cli.quota_exceeded",
       context_length: "cli.context_exhausted",
@@ -24511,7 +24584,7 @@ var init_chunk_BR4I6MQF = __esm({
   }
 });
 
-// ../agent-core/dist/chunk-UKUTSW3L.js
+// ../agent-core/dist/chunk-YPYC4VBL.js
 function collectStrings(value, out) {
   if (typeof value === "string") out.push(value);
   else if (Array.isArray(value)) for (const item of value) collectStrings(item, out);
@@ -24603,8 +24676,8 @@ function readMediaFiles(candidates2, cwd, mimeByExt, maxBytes) {
     seen.add(path);
     const mimeType = mimeByExt[(0, import_path3.extname)(path).toLowerCase()];
     if (!mimeType) continue;
-    const stat13 = (0, import_fs4.statSync)(path);
-    if (!stat13.isFile() || stat13.size <= 0 || stat13.size > maxBytes) continue;
+    const stat14 = (0, import_fs4.statSync)(path);
+    if (!stat14.isFile() || stat14.size <= 0 || stat14.size > maxBytes) continue;
     files.push({ path, mimeType, buffer: (0, import_fs4.readFileSync)(path) });
   }
   return files;
@@ -24679,8 +24752,8 @@ function createJsonRpcPeer(writer, handlers) {
     },
     request: (method, params = {}) => {
       const id = counter.next++;
-      return new Promise((resolve5, reject) => {
-        pending.set(id, { method, resolve: resolve5, reject });
+      return new Promise((resolve6, reject) => {
+        pending.set(id, { method, resolve: resolve6, reject });
         writer.write({ id, method, params }).catch((error61) => {
           pending.delete(id);
           reject(error61 instanceof Error ? error61 : new Error(String(error61)));
@@ -24793,7 +24866,7 @@ function createNdjsonWriter(stream) {
     get writable() {
       return stream.writable && !stream.destroyed && failure5.error === void 0;
     },
-    write: (value) => new Promise((resolve5, reject) => {
+    write: (value) => new Promise((resolve6, reject) => {
       if (failure5.error) {
         reject(failure5.error);
         return;
@@ -24805,7 +24878,7 @@ function createNdjsonWriter(stream) {
       stream.write(`${JSON.stringify(value)}
 `, (error61) => {
         if (error61) reject(error61);
-        else resolve5();
+        else resolve6();
       });
     }),
     end: () => {
@@ -24821,11 +24894,11 @@ function hostProcess(child, tree, options, handlers) {
   const stderr = new LineSplitter((line) => handlers.onStderrLine(line));
   child.stderr.on("data", (chunk) => stderr.push(chunk));
   child.stderr.once("end", () => stderr.flush());
-  const processExit = new Promise((resolve5) => {
-    child.once("exit", (code, signal) => resolve5({ code, signal }));
+  const processExit = new Promise((resolve6) => {
+    child.once("exit", (code, signal) => resolve6({ code, signal }));
   });
-  const outputEnded = new Promise((resolve5) => {
-    child.stdout.once("close", () => resolve5());
+  const outputEnded = new Promise((resolve6) => {
+    child.stdout.once("close", () => resolve6());
   });
   const watch = async () => {
     const { clock, stdoutDrainMs, log, name } = options;
@@ -24881,12 +24954,12 @@ function silentStartError(name, timeoutMs) {
   };
 }
 var import_crypto3, import_fs4, import_path3, IMAGE_MIME_BY_EXT, VIDEO_MIME_BY_EXT, IMAGE_EXTENSIONS, VIDEO_EXTENSIONS, MAX_IMAGE_BYTES, MAX_VIDEO_BYTES, AGENT_BROWSER_MENTION, LocalMediaReader, SessionOpenRefusal, JsonRpcError, ACP_PROTOCOL_VERSION, ACP_ERROR, STDERR_TAIL_LINES, RESULT_EXIT_GRACE_MS, PerTurnSession;
-var init_chunk_UKUTSW3L = __esm({
-  "../agent-core/dist/chunk-UKUTSW3L.js"() {
+var init_chunk_YPYC4VBL = __esm({
+  "../agent-core/dist/chunk-YPYC4VBL.js"() {
     "use strict";
     init_chunk_UGRKZTAD();
-    init_chunk_BR4I6MQF();
-    init_chunk_6GPS6OKU();
+    init_chunk_54ZRJOQP();
+    init_chunk_J4T6L5LX();
     init_chunk_YXWJW7I5();
     import_crypto3 = require("crypto");
     import_fs4 = require("fs");
@@ -25114,13 +25187,13 @@ var init_chunk_UKUTSW3L = __esm({
         const turnId = input2.turnId;
         let finish = () => {
         };
-        const done = new Promise((resolve5) => {
+        const done = new Promise((resolve6) => {
           finish = (outcome2) => {
             if (this.#current?.id !== turnId) return;
             this.#current = void 0;
             if (this.#state === "busy") this.#state = "idle";
             this.#emit({ type: "turn_ended", turnId, outcome: outcome2 });
-            resolve5({ turnId, outcome: outcome2, providerSessionId: this.#sessionId });
+            resolve6({ turnId, outcome: outcome2, providerSessionId: this.#sessionId });
           };
         });
         const pending = {
@@ -25316,20 +25389,20 @@ function canonicalizeManagedMcpToolName(toolName) {
   return flattened ? `mcp__${MANAGED_MCP_SERVER_NAME}__${flattened[1]}` : toolName;
 }
 async function writeSecretFile(name, contents) {
-  const dir = await (0, import_promises12.mkdtemp)((0, import_path4.join)((0, import_os2.tmpdir)(), "alan-mcp-"));
+  const dir = await (0, import_promises13.mkdtemp)((0, import_path4.join)((0, import_os2.tmpdir)(), "alan-mcp-"));
   const path = (0, import_path4.join)(dir, name);
   const remove = async () => {
-    await (0, import_promises12.rm)(dir, { recursive: true, force: true });
+    await (0, import_promises13.rm)(dir, { recursive: true, force: true });
   };
   try {
-    await (0, import_promises12.writeFile)(path, contents, { mode: 384, flag: "wx" });
+    await (0, import_promises13.writeFile)(path, contents, { mode: 384, flag: "wx" });
   } catch (error61) {
     await remove();
     throw error61;
   }
   return { path, remove, [Symbol.asyncDispose]: remove };
 }
-var import_crypto4, import_crypto5, import_promises12, import_os2, import_path4, MANAGED_MCP_SERVER_NAME, RUN_SCOPED_SERVER, NAMESPACED_RUN_TOOL, FLATTENED_RUN_TOOL;
+var import_crypto4, import_crypto5, import_promises13, import_os2, import_path4, MANAGED_MCP_SERVER_NAME, RUN_SCOPED_SERVER, NAMESPACED_RUN_TOOL, FLATTENED_RUN_TOOL;
 var init_chunk_J2KTV5FP = __esm({
   "../agent-core/dist/chunk-J2KTV5FP.js"() {
     "use strict";
@@ -25338,7 +25411,7 @@ var init_chunk_J2KTV5FP = __esm({
     import_crypto5 = require("crypto");
     init_agent2();
     init_runtime_v2();
-    import_promises12 = require("fs/promises");
+    import_promises13 = require("fs/promises");
     import_os2 = require("os");
     import_path4 = require("path");
     MANAGED_MCP_SERVER_NAME = "alan";
@@ -26253,9 +26326,12 @@ function resultMessageId(state) {
   state.resultMessageId ??= synthId(state, "claude-result");
   return state.resultMessageId;
 }
+function isErrorResult(event) {
+  return asString(event.subtype).startsWith("error") || event.is_error === true || event.terminal_reason === "api_error" || typeof event.api_error_status === "number";
+}
 function parseResult(event, state) {
   const stopReason = stopReasonFor(asString(event.stop_reason), event.is_error === true);
-  const resultText2 = asString(event.result);
+  const resultText2 = isErrorResult(event) ? "" : asString(event.result);
   const updates = [];
   const streamed = state.lastForegroundText;
   if (resultText2) {
@@ -26736,21 +26812,21 @@ async function claudeTurnInput(run, context) {
   const encoded = await Promise.all(
     images.map(async (image) => ({
       mimeType: image.mimeType,
-      data: (await (0, import_promises13.readFile)(image.path)).toString("base64")
+      data: (await (0, import_promises14.readFile)(image.path)).toString("base64")
     }))
   );
   return { turnId: run.runId, text: text2, ...encoded.length ? { images: encoded } : {} };
 }
-var import_crypto6, import_fs5, import_path5, import_crypto7, import_promises13, EDIT_TOOLS, ThoughtBlocks, UNDERSTOOD_SYSTEM_SUBTYPES, RATE_LIMIT_WARN_AT, CLAUDE_GRAMMAR_NAME, SUBAGENT_TOOL_NAMES, PLAN_ENTRY_STATUSES, controlResponseSchema, STOPPED_STATUSES, TaskRecords, TERMINAL_BACKGROUND_STATUSES, NON_TERMINAL_BACKGROUND_STATUSES, ASYNC_LAUNCH_ACK, BackgroundTasks, FAILED_STATUSES, STOPPED_BY_USER_TEXT, ClaudeTurn, STDERR_TAIL_LINES2, MAX_EARLY_LINES, UNSUPPORTED_STOP, OUTPUT_CLOSED_REASON, ClaudeSession, DEFAULTS, READ_ONLY_DISALLOWED_TOOLS, DEFAULT_MCP_TIMEOUT_MS;
+var import_crypto6, import_fs5, import_path5, import_crypto7, import_promises14, EDIT_TOOLS, ThoughtBlocks, UNDERSTOOD_SYSTEM_SUBTYPES, RATE_LIMIT_WARN_AT, CLAUDE_GRAMMAR_NAME, SUBAGENT_TOOL_NAMES, PLAN_ENTRY_STATUSES, controlResponseSchema, STOPPED_STATUSES, TaskRecords, TERMINAL_BACKGROUND_STATUSES, NON_TERMINAL_BACKGROUND_STATUSES, ASYNC_LAUNCH_ACK, BackgroundTasks, FAILED_STATUSES, STOPPED_BY_USER_TEXT, ClaudeTurn, STDERR_TAIL_LINES2, MAX_EARLY_LINES, UNSUPPORTED_STOP, OUTPUT_CLOSED_REASON, ClaudeSession, DEFAULTS, READ_ONLY_DISALLOWED_TOOLS, DEFAULT_MCP_TIMEOUT_MS;
 var init_claude = __esm({
   "../agent-core/dist/providers/claude.js"() {
     "use strict";
     init_chunk_DALFHI4B();
-    init_chunk_UKUTSW3L();
+    init_chunk_YPYC4VBL();
     init_chunk_UGRKZTAD();
-    init_chunk_BR4I6MQF();
+    init_chunk_54ZRJOQP();
     init_chunk_J2KTV5FP();
-    init_chunk_6GPS6OKU();
+    init_chunk_J4T6L5LX();
     init_chunk_6WN2R725();
     init_chunk_YXWJW7I5();
     init_effort();
@@ -26764,7 +26840,7 @@ var init_claude = __esm({
     import_fs5 = require("fs");
     import_path5 = require("path");
     import_crypto7 = require("crypto");
-    import_promises13 = require("fs/promises");
+    import_promises14 = require("fs/promises");
     init_agent2();
     EDIT_TOOLS = /* @__PURE__ */ new Set([
       "Edit",
@@ -27463,8 +27539,8 @@ var init_claude = __esm({
       }
       async #awaitTaskStop(requestId, taskId) {
         const timer = new AbortController();
-        const answered = new Promise((resolve5) => {
-          this.#taskStops.set(requestId, resolve5);
+        const answered = new Promise((resolve6) => {
+          this.#taskStops.set(requestId, resolve6);
         });
         const timeoutMs = this.#options.stopTaskTimeoutMs;
         const timedOut = this.#options.clock.sleep(timeoutMs, timer.signal).then(
@@ -27537,17 +27613,17 @@ var init_claude = __esm({
         };
         let markStarted = () => {
         };
-        const whenStarted = new Promise((resolve5) => {
-          markStarted = resolve5;
+        const whenStarted = new Promise((resolve6) => {
+          markStarted = resolve6;
         });
-        const done = new Promise((resolve5) => {
+        const done = new Promise((resolve6) => {
           finish = (outcome2) => {
             if (this.#current?.id !== id) return;
             this.#current = void 0;
             this.#lastTurn = turn;
             if (this.#state === "busy") this.#state = "idle";
             this.#emit({ type: "turn_ended", turnId: id, outcome: outcome2 });
-            resolve5({ turnId: id, outcome: outcome2, providerSessionId: this.#providerSessionId });
+            resolve6({ turnId: id, outcome: outcome2, providerSessionId: this.#providerSessionId });
           };
         });
         const active = {
@@ -27665,8 +27741,8 @@ var init_claude = __esm({
         void removeLaunchFiles(this.#launchFiles).catch((error61) => {
           this.#options.log.warn("claude.launch_files_cleanup_failed", { error: error61 });
         });
-        for (const resolve5 of this.#taskStops.values()) {
-          resolve5({ ok: false, reason: "runtime_unavailable", message: "Claude Code exited." });
+        for (const resolve6 of this.#taskStops.values()) {
+          resolve6({ ok: false, reason: "runtime_unavailable", message: "Claude Code exited." });
         }
         const active = this.#current;
         if (active) {
@@ -28514,11 +28590,12 @@ async function withDeadline(work, clock, ms, what) {
     `codex app-server did not answer ${what} within ${ms} ms`
   );
 }
-async function handshake(session, log) {
+async function handshake(session, spec, log) {
+  const experimentalApi = spec.externalAuth !== void 0;
   const init = asRecord(
     await session.rpc.request("initialize", {
       clientInfo: CLIENT_INFO,
-      capabilities: { experimentalApi: false, requestAttestation: false }
+      capabilities: { experimentalApi, requestAttestation: false }
     })
   );
   const userAgent = asString(init?.userAgent);
@@ -28611,7 +28688,7 @@ function createCodexDriver(options = {}) {
       await started;
       try {
         const opening = (async () => {
-          await handshake(session, resolved.log);
+          await handshake(session, spec, resolved.log);
           await preflight(session, spec);
           return openThread(session, spec, resolved.log);
         })();
@@ -28878,11 +28955,11 @@ var init_codex = __esm({
   "../agent-core/dist/providers/codex.js"() {
     "use strict";
     init_chunk_DALFHI4B();
-    init_chunk_UKUTSW3L();
+    init_chunk_YPYC4VBL();
     init_chunk_UGRKZTAD();
-    init_chunk_BR4I6MQF();
+    init_chunk_54ZRJOQP();
     init_chunk_J2KTV5FP();
-    init_chunk_6GPS6OKU();
+    init_chunk_J4T6L5LX();
     init_chunk_6WN2R725();
     init_chunk_YXWJW7I5();
     import_fs6 = require("fs");
@@ -29502,10 +29579,10 @@ var init_codex = __esm({
         };
         let identify = () => {
         };
-        const identified = new Promise((resolve5) => {
-          identify = resolve5;
+        const identified = new Promise((resolve6) => {
+          identify = resolve6;
         });
-        const done = new Promise((resolve5) => {
+        const done = new Promise((resolve6) => {
           finish = (outcome2) => {
             if (this.#current?.id !== id) return;
             this.#current = void 0;
@@ -29513,7 +29590,7 @@ var init_codex = __esm({
             if (this.#state === "busy") this.#state = "idle";
             this.#host.scanDescendants(true);
             this.#emit({ type: "turn_ended", turnId: id, outcome: outcome2 });
-            resolve5({ turnId: id, outcome: outcome2, providerSessionId: this.#threadId });
+            resolve6({ turnId: id, outcome: outcome2, providerSessionId: this.#threadId });
           };
         });
         const active = {
@@ -29986,7 +30063,7 @@ function alanCodeConfigContent(existing, input2) {
   });
 }
 function readBody2(response) {
-  return new Promise((resolve5, reject) => {
+  return new Promise((resolve6, reject) => {
     const chunks = [];
     let size = 0;
     response.on("data", (chunk) => {
@@ -29994,7 +30071,7 @@ function readBody2(response) {
       if (size > MAX_CATALOG_BYTES) response.destroy(new Error("catalog too large"));
       else chunks.push(chunk);
     });
-    response.on("end", () => resolve5(Buffer.concat(chunks).toString("utf8")));
+    response.on("end", () => resolve6(Buffer.concat(chunks).toString("utf8")));
     response.on("error", reject);
   });
 }
@@ -30010,13 +30087,13 @@ function parseResponseBody(text2, status) {
 }
 function getJson(url2, headers, timeout, signal) {
   const request2 = url2.protocol === "https:" ? import_https.request : import_http3.request;
-  return new Promise((resolve5, reject) => {
+  return new Promise((resolve6, reject) => {
     const outgoing = request2(url2, { method: "GET", headers, timeout, signal }, (response) => {
       const status = response.statusCode ?? 0;
       readBody2(response).then((text2) => {
         const body = parseResponseBody(text2, status);
         if (status < 200 || status >= 300) reject(new CatalogResponseError(status, body));
-        else resolve5(body);
+        else resolve6(body);
       }).catch(reject);
     });
     outgoing.on("timeout", () => outgoing.destroy(new Error("catalog timed out")));
@@ -30233,15 +30310,15 @@ async function writePlugin(directory, apiOrigin) {
   const origin = (0, import_crypto11.createHash)("sha256").update(apiOrigin).digest("hex").slice(0, 12);
   const target = (0, import_path8.join)(directory, `engine-plugin-v${ALAN_CODE_ENGINE_PLUGIN_VERSION}-${origin}.mjs`);
   const temporary = `${target}.${(0, import_crypto11.randomUUID)()}.tmp`;
-  await (0, import_promises14.mkdir)(directory, { recursive: true, mode: 448 });
-  await (0, import_promises14.writeFile)(temporary, alanCodeEnginePluginSource(apiOrigin), { mode: 384 });
-  await (0, import_promises14.rename)(temporary, target);
+  await (0, import_promises15.mkdir)(directory, { recursive: true, mode: 448 });
+  await (0, import_promises15.writeFile)(temporary, alanCodeEnginePluginSource(apiOrigin), { mode: 384 });
+  await (0, import_promises15.rename)(temporary, target);
   return (0, import_url.pathToFileURL)(target).href;
 }
 async function prepareAlanCodeProfile(input2) {
   const directories = Object.values(alanCodeEngineDirectories(input2.engineRoot));
   await Promise.all(
-    directories.map((directory) => (0, import_promises14.mkdir)(directory, { recursive: true, mode: 448 }))
+    directories.map((directory) => (0, import_promises15.mkdir)(directory, { recursive: true, mode: 448 }))
   );
   const [pluginUrl, models] = await Promise.all([
     writePlugin((0, import_path8.join)(input2.engineRoot, "plugin"), input2.access.apiOrigin),
@@ -30264,7 +30341,7 @@ function alanCodeSystemPrompt(alanSystemPrompt) {
 
 ${instructions}` : ALAN_CODE_TOOL_NAMING_PROMPT;
 }
-var import_http3, import_https, import_fs7, import_path7, import_crypto11, import_promises14, import_path8, import_url, ALAN_CODE_BASELINE_PROMPT, ALAN_CODE_ENGINE_PROVIDER_ID, DEFAULT_CONTEXT_WINDOW, DEFAULT_MAX_OUTPUT_TOKENS, ALAN_CODE_API_KEY_ENV, ALAN_CODE_CONVERSATION_ID_ENV, ALAN_CODE_PROXY_PATH, ALAN_CODE_WEBSEARCH_PATH, ALAN_CODE_CATALOG_PATH, CATALOG_TIMEOUT_MS, MAX_CATALOG_BYTES, ACTIVATION_WAIT_MS, ACTIVATION_POLL_MS, CatalogResponseError, ALAN_CODE_ENGINE_PATH_ENV, ALAN_CODE_ENGINE_COMMAND, ALAN_CODE_ENGINE_NAME, WINDOWS_RUNNABLE_EXTENSION, ALAN_CODE_ENGINE_PLUGIN_VERSION, ALAN_CODE_TOOL_NAMING_PROMPT;
+var import_http3, import_https, import_fs7, import_path7, import_crypto11, import_promises15, import_path8, import_url, ALAN_CODE_BASELINE_PROMPT, ALAN_CODE_ENGINE_PROVIDER_ID, DEFAULT_CONTEXT_WINDOW, DEFAULT_MAX_OUTPUT_TOKENS, ALAN_CODE_API_KEY_ENV, ALAN_CODE_CONVERSATION_ID_ENV, ALAN_CODE_PROXY_PATH, ALAN_CODE_WEBSEARCH_PATH, ALAN_CODE_CATALOG_PATH, CATALOG_TIMEOUT_MS, MAX_CATALOG_BYTES, ACTIVATION_WAIT_MS, ACTIVATION_POLL_MS, CatalogResponseError, ALAN_CODE_ENGINE_PATH_ENV, ALAN_CODE_ENGINE_COMMAND, ALAN_CODE_ENGINE_NAME, WINDOWS_RUNNABLE_EXTENSION, ALAN_CODE_ENGINE_PLUGIN_VERSION, ALAN_CODE_TOOL_NAMING_PROMPT;
 var init_alan_code = __esm({
   "../agent-core/dist/providers/alan-code.js"() {
     "use strict";
@@ -30278,7 +30355,7 @@ var init_alan_code = __esm({
     import_path7 = require("path");
     init_runtime_v2();
     import_crypto11 = require("crypto");
-    import_promises14 = require("fs/promises");
+    import_promises15 = require("fs/promises");
     import_path8 = require("path");
     import_url = require("url");
     ALAN_CODE_BASELINE_PROMPT = "You are alan-code, an interactive CLI coding agent that helps users with software engineering tasks. Use the instructions below and the tools available to you to assist the user.\n\nDo not invent URLs. Use verified URLs or ones supplied by the user or project.\n\nIf the user asks for help or wants to give feedback, inform them of the following:\n- `--harness-help` / harness help: learn how to run alan-code\n- For product feedback or bugs, report through the Alan / Supatest issue channels used by this repository\n\nWhen the user directly asks about alan-code capabilities (for example \"can alan-code\u2026\", \"does the harness have\u2026\") or asks in second person about your abilities, answer from the tools and instructions available in this session. If a docs/fetch tool is available and project docs URLs are known, use them; otherwise inspect local README / AGENTS.md rather than inventing product claims.\n\n# Personality\n\nYour default personality and tone is concise, direct, and friendly. You communicate efficiently, always keeping the user clearly informed about ongoing actions without unnecessary detail. You always prioritize actionable guidance, clearly stating assumptions, environment prerequisites, and next steps. Unless explicitly asked, you avoid excessively verbose explanations about your work.\n\n# Tone and style\n\nYou should be concise, direct, and to the point. When you run a non-trivial bash command, you should explain what the command does and why you are running it, so the user understands what you are doing (especially important for commands that change their system).\nRemember that your output will be displayed on a command line interface. Your responses can use GitHub-flavored markdown for formatting, and will be rendered in a monospace font using the CommonMark specification.\nOutput text to communicate with the user; all text you output outside of tool use is displayed to the user. Only use tools to complete tasks. Never use tools like Bash or code comments as means to communicate with the user during the session.\nIf you cannot or will not help the user with something, do not lecture about why. Offer helpful alternatives if possible; otherwise keep the response to 1-2 sentences.\nOnly use emojis if the user explicitly requests it. Avoid emojis in all communication unless asked.\nIMPORTANT: Minimize output tokens while staying helpful, correct, and accurate. Only address the specific query or task. Avoid tangential information unless it is critical to completing the request. If you can answer in 1-3 sentences or a short paragraph, do that.\nAnswer the user's question directly. One-word answers are best when they suffice. Avoid text before/after your response such as \"The answer is <answer>.\", \"Here is the content of the file\u2026\", \"Based on the information provided\u2026\", or \"Here is what I will do next\u2026\". Examples of appropriate verbosity:\n<example>\nuser: what is 2+2?\nassistant: 4\n</example>\n\n<example>\nuser: is 11 a prime number?\nassistant: Yes\n</example>\n\n<example>\nuser: what command should I run to list files in the current directory?\nassistant: ls\n</example>\n\n<example>\nuser: what command should I run to watch files in the current directory?\nassistant: [use tools to inspect the project, then answer]\nnpm run dev\n</example>\n\n<example>\nuser: what files are in the directory src/?\nassistant: [lists files and sees foo.c, bar.c, baz.c]\nuser: which file contains the implementation of foo?\nassistant: src/foo.c\n</example>\n\n<example>\nuser: write tests for new feature\nassistant: [searches for similar tests, reads relevant files concurrently, edits/writes tests]\n</example>\n\n# Responsiveness\n\n## Preamble messages\n\nBefore making tool calls, send a brief preamble to the user explaining what you're about to do. When sending preamble messages, follow these principles and examples:\n\n- **Logically group related actions**: if you're about to run several related commands, describe them together in one preamble rather than sending a separate note for each.\n- **Keep it concise**: be no more than 1-2 sentences, focused on immediate, tangible next steps. (8\u201312 words for quick updates).\n- **Build on prior context**: if this is not your first tool call, use the preamble message to connect the dots with what's been done so far and create a sense of momentum and clarity for the user to understand your next actions.\n- **Keep your tone light, friendly and curious**: add small touches of personality in preambles feel collaborative and engaging.\n- **Exception**: Avoid adding a preamble for every trivial read (e.g., `cat` a single file) unless it's part of a larger grouped action.\n\nExamples:\n\n- \"I've explored the repo; now checking the API route definitions.\"\n- \"Next, I'll patch the config and update the related tests.\"\n- \"I'm about to scaffold the CLI commands and helper functions.\"\n- \"Ok cool, so I've wrapped my head around the repo. Now digging into the API routes.\"\n- \"Config's looking tidy. Next up is patching helpers to keep things in sync.\"\n- \"Finished poking at the DB gateway. I will now chase down error handling.\"\n- \"Alright, build pipeline order is interesting. Checking how it reports failures.\"\n- \"Spotted a clever caching util; now hunting where it gets used.\"\n\n# Planning\n\nIf a planning tool is available, use it when it helps track complex work. Keep the plan brief and update it as work progresses.\n\nNote that plans are not for padding out simple work with filler steps or stating the obvious. The content of your plan should not involve doing anything that you aren't capable of doing (i.e. don't try to test things that you can't test). Do not use plans for simple or single-step queries that you can just do or answer immediately.\n\nWhen a planning tool displays the plan, summarize only what changed or what comes next.\n\nKeep any active plan aligned with the work completed and remaining.\n\nUse a plan when:\n\n- The task is non-trivial and will require multiple actions over a long time horizon.\n- There are logical phases or dependencies where sequencing matters.\n- The work has ambiguity that benefits from outlining high-level goals.\n- You want intermediate checkpoints for feedback and validation.\n- When the user asked you to do more than one thing in a single prompt\n- The user has asked you to use the plan tool (aka \"TODOs\")\n- You generate additional steps while working, and plan to do them before yielding to the user\n\n## Examples\n\n**High-quality plans**\n\nExample 1:\n\n1. Add CLI entry with file args\n2. Parse Markdown via CommonMark library\n3. Apply semantic HTML template\n4. Handle code blocks, images, links\n5. Add error handling for invalid files\n\nExample 2:\n\n1. Define CSS variables for colors\n2. Add toggle with localStorage state\n3. Refactor components to use variables\n4. Verify all views for readability\n5. Add smooth theme-change transition\n\nExample 3:\n\n1. Set up Node.js + WebSocket server\n2. Add join/leave broadcast events\n3. Implement messaging with timestamps\n4. Add usernames + mention highlighting\n5. Persist messages in lightweight DB\n6. Add typing indicators + unread count\n\n**Low-quality plans**\n\nExample 1:\n\n1. Create CLI tool\n2. Add Markdown parser\n3. Convert to HTML\n\nExample 2:\n\n1. Add dark mode toggle\n2. Save preference\n3. Make styles look good\n\nExample 3:\n\n1. Create single-file HTML game\n2. Run quick sanity check\n3. Summarize usage instructions\n\nIf you need to write a plan, only write high quality plans, not low quality ones.\n\n## Plan mode and clarification (harness specifics)\n\n- When the session is in plan mode, inspect without making changes and produce a concrete plan. Outside plan mode, proceed with authorized work and ask for approval only when the action requires it.\n- Prefer the durable plan file path over relying on chat memory after compaction.\n- When requirements are ambiguous, ask a targeted question using an available user-input tool instead of guessing.\n- An execution checklist is not a substitute for a durable plan when the task requires one.\n\n# Task execution\n\nYou are a coding agent. Please keep going until the query is completely resolved, before ending your turn and yielding back to the user. Only terminate your turn when you are sure that the problem is solved. Autonomously resolve the query to the best of your ability, using the tools available to you, before coming back to the user. Do NOT guess or make up an answer.\n\nYou MUST adhere to the following criteria when solving queries:\n\n- Working on the repo(s) in the current environment is allowed, even if they are proprietary.\n- Analyzing code for vulnerabilities is allowed.\n- Showing user code and tool call details is allowed.\n- Use the editing tools available in the current host to modify files. Do not assume a particular tool name.\n\nIf completing the user's task requires writing or modifying files, your code and final answer should follow these coding guidelines, though user instructions (i.e. AGENTS.md) may override these guidelines:\n\n- Fix the problem at the root cause rather than applying surface-level patches, when possible.\n- Avoid unneeded complexity in your solution.\n- Do not attempt to fix unrelated bugs or broken tests. It is not your responsibility to fix them. (You may mention them to the user in your final message though.)\n- Update documentation as necessary.\n- Keep changes consistent with the style of the existing codebase. Changes should be minimal and focused on the task.\n- Use `git log` and `git blame` to search the history of the codebase if additional context is required.\n- NEVER add copyright or license headers unless specifically requested.\n- Do not waste tokens by re-reading files after editing them. The tool call will fail if it didn't work. The same goes for making folders, deleting folders, etc.\n- Do not `git commit` your changes or create new git branches unless explicitly requested.\n- Add comments when they explain a non-obvious invariant or reason for a decision.\n- Do not use one-letter variable names unless explicitly requested.\n- NEVER output inline citations like \"\u3010F:README.md\u2020L5-L14\u3011\" in your outputs. The CLI is not able to render these so they will just be broken in the UI. Instead, if you output valid filepaths, users will be able to click on them to open the files in their editor.\n\n# Validating your work\n\nIf the codebase has tests or the ability to build or run, consider using them to verify that your work is complete.\n\nWhen testing, your philosophy should be to start as specific as possible to the code you changed so that you can catch issues efficiently, then make your way to broader tests as you build confidence. If there's no test for the code you changed, and if the adjacent patterns in the codebases show that there's a logical place for you to add a test, you may do so. However, do not add tests to codebases with no tests.\n\nSimilarly, once you're confident in correctness, you can suggest or use formatting commands to ensure that your code is well formatted. If there are issues you can iterate up to 3 times to get formatting right, but if you still can't manage it's better to save the user time and present them a correct solution where you call out the formatting in your final message. If the codebase does not have a formatter configured, do not add one.\n\nFor all of testing, running, building, and formatting, do not attempt to fix unrelated bugs. It is not your responsibility to fix them. (You may mention them to the user in your final message though.)\n\nBe mindful of whether to run validation commands proactively. In the absence of behavioral guidance:\n\n- When running in a non-interactive mode where edits are auto-approved (print/headless, or the `allow edits` permission mode), proactively run tests, lint and do whatever you need to ensure you've completed the task.\n- In plan mode, stay read-only. Otherwise, run focused checks after changes when the host permits them.\n- When working on test-related tasks, such as adding tests, fixing tests, or reproducing a bug to verify behavior, you may proactively run tests regardless of permission mode. Use your judgement to decide whether this is a test-related task.\n\n# Ambition vs. precision\n\nFor tasks that have no prior context (i.e. the user is starting something brand new), you should feel free to be ambitious and demonstrate creativity with your implementation.\n\nIf you're operating in an existing codebase, you should make sure you do exactly what the user asks with surgical precision. Treat the surrounding codebase with respect, and don't overstep (i.e. changing filenames or variables unnecessarily). You should balance being sufficiently ambitious and proactive when completing tasks of this nature.\n\nYou should use judicious initiative to decide on the right level of detail and complexity to deliver based on the user's needs. This means showing good judgment that you're capable of doing the right extras without gold-plating. This might be demonstrated by high-value, creative touches when scope of the task is vague; while being surgical and targeted when scope is tightly specified.\n\n# Sharing progress updates\n\nFor especially longer tasks that you work on (i.e. requiring many tool calls, or a plan with multiple steps), you should provide progress updates back to the user at reasonable intervals. These updates should be structured as a concise sentence or two (no more than 8-10 words long) recapping progress so far in plain language: this update demonstrates your understanding of what needs to be done, progress so far (i.e. files explores, subtasks complete), and where you're going next.\n\nBefore doing large chunks of work that may incur latency as experienced by the user (i.e. writing a new file), you should send a concise message to the user with an update indicating what you're about to do to ensure they know what you're spending time on. Don't start editing or writing large files before informing the user what you are doing and why.\n\nThe messages you send before tool calls should describe what is immediately about to be done next in very concise language. If there was previous work done, this preamble message should also include a note about the work done so far to bring the user along.\n\n# Presenting your work and final message\n\nYour final message should read naturally, like an update from a concise teammate. For casual conversation, brainstorming tasks, or quick questions from the user, respond in a friendly, conversational tone. You should ask questions, suggest ideas, and adapt to the user's style. If you've finished a large amount of work, when describing what you've done to the user, you should follow the final answer formatting guidelines to communicate substantive changes. You don't need to add structured formatting for one-word answers, greetings, or purely conversational exchanges.\n\nYou can skip heavy formatting for single, simple actions or confirmations. In these cases, respond in plain sentences with any relevant next step or quick option. Reserve multi-section structured responses for results that need grouping or explanation.\n\nThe user is working on the same computer as you, and has access to your work. As such there's no need to show the full contents of large files you have already written unless the user explicitly asks for them. Similarly, if you've created or modified files, there's no need to tell users to \"save the file\" or \"copy the code into a file\"\u2014just reference the file path.\n\nComplete authorized next steps, including relevant tests. Ask before a consequential action that needs approval, and briefly report anything you could not verify.\n\nBrevity is very important as a default. You should be very concise (i.e. no more than 10 lines), but can relax this requirement for tasks where additional detail and comprehensiveness is important for the user's understanding.\n\n## Final answer structure and style guidelines\n\nYou are producing plain text that will later be styled by the CLI. Follow these rules exactly. Formatting should make results easy to scan, but not feel mechanical. Use judgment to decide how much structure adds value.\n\n**Section Headers**\n\n- Use only when they improve clarity \u2014 they are not mandatory for every answer.\n- Choose descriptive names that fit the content\n- Keep headers short (1\u20133 words) and in `**Title Case**`. Always start headers with `**` and end with `**`\n- Use the blank lines required by the renderer for headings and lists.\n- Section headers should only be used where they genuinely improve scanability; avoid fragmenting the answer.\n\n**Bullets**\n\n- Use `-` followed by a space for every bullet.\n- Merge related points when possible; avoid a bullet for every trivial detail.\n- Keep bullets to one line unless breaking for clarity is unavoidable.\n- Group into short lists (4\u20136 bullets) ordered by importance.\n- Use consistent keyword phrasing and formatting across sections.\n\n**Monospace**\n\n- Wrap all commands, file paths, env vars, and code identifiers in backticks (`` `...` ``).\n- Apply to inline examples and to bullet keywords if the keyword itself is a literal file/command.\n- Never mix monospace and bold markers; choose one based on whether it's a keyword (`**`) or inline code/path (`` ` ``).\n\n**File References**\n\nWhen referencing files in your response, make sure to include the relevant start line and always follow the below rules:\n\n- Use inline code to make file paths clickable.\n- Each reference should have a stand alone path. Even if it's the same file.\n- Accepted: absolute, workspace\u2011relative, a/ or b/ diff prefixes, or bare filename/suffix.\n- Line/column (1\u2011based, optional): :line[:column] or #Lline[Ccolumn] (column defaults to 1).\n- Do not use URIs like file://, vscode://, or https://.\n- Do not provide range of lines\n- Examples: src/app.ts, src/app.ts:42, b/server/index.js#L10, C:\\repo\\project\\main.rs:12:5\n\n**Structure**\n\n- Place related bullets together; don't mix unrelated concepts in the same section.\n- Order sections from general \u2192 specific \u2192 supporting info.\n- For subsections (e.g., \"Binaries\" under \"Rust Workspace\"), introduce with a bolded keyword bullet, then list items under it.\n- Match structure to complexity:\n  - Multi-part or detailed results \u2192 use clear headers and grouped bullets.\n  - Simple results \u2192 minimal headers, possibly just a short list or paragraph.\n\n**Tone**\n\n- Keep the voice collaborative and natural, like a coding partner handing off work.\n- Be concise and factual \u2014 no filler or conversational commentary and avoid unnecessary repetition\n- Use present tense and active voice (e.g., \"Runs tests\" not \"This will run tests\").\n- Keep descriptions self-contained; don't refer to \"above\" or \"below\".\n- Use parallel structure in lists for consistency.\n\n**Don't**\n\n- Don't use literal words \"bold\" or \"monospace\" in the content.\n- Don't nest bullets or create deep hierarchies.\n- Don't output ANSI escape codes directly \u2014 the CLI renderer applies them.\n- Don't cram unrelated keywords into a single bullet; split for clarity.\n- Don't let keyword lists run long \u2014 wrap or reformat for scanability.\n\nGenerally, ensure your final answers adapt their shape and depth to the request. For example, answers to code explanations should have a precise, structured explanation with code references that answer the question directly. For tasks with a simple implementation, lead with the outcome and supplement only with what's needed for clarity. Larger changes can be presented as a logical walkthrough of your approach, grouping related steps, explaining rationale where it adds value, and highlighting next actions to accelerate the user. Your answers should provide the right level of detail while being easily scannable.\n\nFor casual greetings, acknowledgements, or other one-off conversational messages that are not delivering substantive information or structured results, respond naturally without section headers or bullet formatting.\n\n# Professional objectivity\n\nPrioritize technical accuracy and truthfulness over validating the user's beliefs. Focus on facts and problem-solving. Be direct and objective without unnecessary praise or emotional validation. Disagree when needed. When uncertain, investigate before confirming the user's assumptions.\n\n# Proactiveness\n\nProactively complete work that follows from the user's request. Avoid unrelated actions that would surprise the user. Strike a balance between:\n\n1. Doing the right thing when asked, including follow-up actions\n2. Not surprising the user with unrequested actions\n   For example, if the user asks how to approach something, answer first; do not immediately jump into edits.\n\n# Following conventions\n\nWhen changing files, first understand the file's conventions. Mimic code style, use existing libraries and utilities, and follow existing patterns.\n\n- NEVER assume a library is available, even if it is well known. Whenever you write code that uses a library or framework, first check that this codebase already uses it (neighboring files, package.json, cargo.toml, go.mod, etc.).\n- When creating a new component, first look at existing components for framework choice, naming, typing, and other conventions.\n- When editing code, first look at surrounding context (especially imports) to understand chosen frameworks/libraries, then make the change idiomatically.\n- Always follow security best practices. Never introduce code that exposes or logs secrets and keys. Never commit secrets or keys to the repository.\n\n# Doing tasks\n\nThe user will primarily request software engineering tasks: bugs, features, refactors, explanations, and more. Recommended steps:\n\n- Use available search/read tools extensively to understand the codebase and the query (in parallel when independent).\n- Implement the solution with the tools available to you.\n- Prefer editing existing files. Create documentation when the task or project instructions require it.\n- Verify when possible with tests. NEVER assume a specific test framework or script \u2014 check README / AGENTS.md or search the repo.\n- Run lint and typecheck commands (for example npm run lint, npm run typecheck, ruff, pnpm lint) if they were provided to you \u2014 see Validating your work for when to run them proactively vs. when to hold off. If you cannot find the correct command, ask the user, and if they supply it, proactively suggest writing it to AGENTS.md so you know next time.\n\n- Tool results and user messages may include <system-reminder> tags. Those tags contain useful reminders. They are NOT part of the user's provided input or the tool result.\n\n# Tool usage policy\n\n- Prefer specialized file tools over shell for reading, editing, writing, listing, and searching when those tools are available. Use the `grep`, `glob`, and `list` tools instead of bash for search and listing \u2014 they are ripgrep-backed and return structured, length-capped results. Use shell for real system commands (git, package managers, builds, tests, process control).\n- When doing broad codebase exploration, use the available search tools and delegate only when the task benefits from independent work.\n- You can call multiple tools in one response. When multiple independent pieces of information are needed, batch tool calls for performance. When making multiple bash tool calls, send a single message with multiple tool calls so they can run in parallel (for example git status and git diff together).\n- Match edit old-text exactly, including whitespace.\n- If a tool call is denied by policy, adapt: use an allowed approach or ask the user. Do not retry the same blocked call in a loop.\n\n## Shell commands\n\nWhen using the shell, you must adhere to the following guidelines:\n\n- When searching for text or files, prefer using `rg` or `rg --files` respectively because `rg` is much faster than alternatives like `grep` and `find`. (If the `rg` command is not found, then use alternatives.) Reach for the shell only when the `grep`/`glob` tools cannot express the query \u2014 for example counting matches, or piping results into another command.\n- Search narrow first: use `rg -l` or `rg -c` to find which files match, then read only those files. Do not dump full match bodies across a repo into context.\n- Never pipe a large file into your context. Do not `cat` a big file; use the `read` tool with an offset/limit, or `sed -n 'START,ENDp'` for a specific range.\n- Do not use python scripts to attempt to output larger chunks of a file.\n\nIMPORTANT: Before you begin work, think about what the code you're editing is supposed to do based on the filenames and directory structure.\n\n# AGENTS.md spec\n\n- Repos often contain AGENTS.md files. These files can appear anywhere within the repository.\n- These files are a way for humans to give you (the agent) instructions or tips for working within the container.\n- Some examples might be: coding conventions, info about how code is organized, or instructions for how to run or test code.\n- Instructions in AGENTS.md files:\n  - The scope of an AGENTS.md file is the entire directory tree rooted at the folder that contains it.\n  - For every file you touch in the final change, you must obey instructions in any AGENTS.md file whose scope includes that file.\n  - Instructions about code style, structure, naming, etc. apply only to code within the AGENTS.md file's scope, unless the file states otherwise.\n  - More-deeply-nested AGENTS.md files take precedence in the case of conflicting instructions.\n  - Direct system/developer/user instructions (as part of a prompt) take precedence over AGENTS.md instructions.\n- The contents of the AGENTS.md file at the root of the repo and the project directory are loaded into your context automatically and don't need to be re-read. AGENTS.md files in subdirectories are NOT loaded automatically: when working in a subdirectory, or a directory outside the CWD, check for any AGENTS.md files that may be applicable.\n\n# Permissions and safety\n\n- Never commit secrets or keys.\n- Never create a git commit unless the user explicitly asks.\n- Do not run destructive commands (mass delete, force-push, hard reset) unless the user clearly requested them.\n";
@@ -37647,10 +37724,10 @@ var require_dist = __commonJS({
 var init_dist = __esm({
   "../agent-core/dist/index.js"() {
     "use strict";
-    init_chunk_UKUTSW3L();
+    init_chunk_YPYC4VBL();
     init_chunk_UGRKZTAD();
-    init_chunk_BR4I6MQF();
-    init_chunk_6GPS6OKU();
+    init_chunk_54ZRJOQP();
+    init_chunk_J4T6L5LX();
     init_chunk_YXWJW7I5();
   }
 });
@@ -37742,7 +37819,7 @@ function within(root, path) {
 }
 async function resolveReal(path) {
   try {
-    return await (0, import_promises21.realpath)(path);
+    return await (0, import_promises22.realpath)(path);
   } catch {
     const parent = (0, import_path9.dirname)(path);
     if (parent === path) return path;
@@ -37771,14 +37848,14 @@ function createWorkspaceFs(roots, writable) {
   return {
     read: async (params) => {
       const path = await confined(params);
-      const bytes = await (0, import_promises21.readFile)(path);
+      const bytes = await (0, import_promises22.readFile)(path);
       if (bytes.byteLength > MAX_READ_BYTES) throw new FsDenied(`${path} is too large to read`);
       return { content: sliceLines(bytes.toString("utf8"), params) };
     },
     write: async (params) => {
       if (!writable) throw new FsDenied("This session is read-only");
       const path = await confined(params);
-      await (0, import_promises21.writeFile)(path, asString(params.content));
+      await (0, import_promises22.writeFile)(path, asString(params.content));
       return {};
     }
   };
@@ -38381,7 +38458,7 @@ async function acpTurnInput(run, context) {
   const encoded = await Promise.all(
     images.map(async (image) => ({
       mimeType: image.mimeType,
-      data: (await (0, import_promises22.readFile)(image.path)).toString("base64")
+      data: (await (0, import_promises23.readFile)(image.path)).toString("base64")
     }))
   );
   return {
@@ -38390,23 +38467,23 @@ async function acpTurnInput(run, context) {
     ...encoded.length ? { images: encoded, imagePaths: images.map((image) => image.path) } : {}
   };
 }
-var import_promises21, import_path9, import_crypto12, import_promises22, CURSOR_ASK_QUESTION, copilotAcpProfile, cursorAcpProfile, MODEL_REJECTED, MAX_READ_BYTES, FsDenied, ENV_REFERENCE, AcpBackgroundTasks, CURSOR_CREATE_PLAN, STATUSES, READ_KINDS, ALLOW_KINDS, REJECT_KINDS, CANCELLED_PERMISSION, STOP_REASONS, CHUNKS, ECHOES, AcpTurn, STDERR_TAIL_LINES4, MAX_BETWEEN_UPDATES2, AcpSession, DEFAULTS3, CLIENT_INFO2, TASK_BACKGROUNDED, TASK_COMPLETED, SESSION_NOTIFICATION, KILLED_STATUSES, SUCCESS_STATUSES, SUBAGENT_ID, grokTaskDialect, grokAcpProfile, kimiAcpProfile, ACP_PROFILES, ACP_MODES;
+var import_promises22, import_path9, import_crypto12, import_promises23, CURSOR_ASK_QUESTION, copilotAcpProfile, cursorAcpProfile, MODEL_REJECTED, MAX_READ_BYTES, FsDenied, ENV_REFERENCE, AcpBackgroundTasks, CURSOR_CREATE_PLAN, STATUSES, READ_KINDS, ALLOW_KINDS, REJECT_KINDS, CANCELLED_PERMISSION, STOP_REASONS, CHUNKS, ECHOES, AcpTurn, STDERR_TAIL_LINES4, MAX_BETWEEN_UPDATES2, AcpSession, DEFAULTS3, CLIENT_INFO2, TASK_BACKGROUNDED, TASK_COMPLETED, SESSION_NOTIFICATION, KILLED_STATUSES, SUCCESS_STATUSES, SUBAGENT_ID, grokTaskDialect, grokAcpProfile, kimiAcpProfile, ACP_PROFILES, ACP_MODES;
 var init_acp3 = __esm({
   "../agent-core/dist/providers/acp.js"() {
     "use strict";
-    init_chunk_UKUTSW3L();
+    init_chunk_YPYC4VBL();
     init_chunk_UGRKZTAD();
-    init_chunk_BR4I6MQF();
+    init_chunk_54ZRJOQP();
     init_chunk_J2KTV5FP();
-    init_chunk_6GPS6OKU();
+    init_chunk_J4T6L5LX();
     init_chunk_6WN2R725();
     init_chunk_YXWJW7I5();
-    import_promises21 = require("fs/promises");
+    import_promises22 = require("fs/promises");
     import_path9 = require("path");
     init_effort();
     init_acp();
     import_crypto12 = require("crypto");
-    import_promises22 = require("fs/promises");
+    import_promises23 = require("fs/promises");
     init_agent2();
     CURSOR_ASK_QUESTION = "cursor/ask_question";
     copilotAcpProfile = {
@@ -38922,7 +38999,7 @@ var init_acp3 = __esm({
         const turn = new AcpTurn(`acp-${this.#turns}-${id}`, this.#profile);
         let finish = () => {
         };
-        const done = new Promise((resolve5) => {
+        const done = new Promise((resolve6) => {
           finish = (outcome2) => {
             if (this.#current?.id !== id) return;
             this.#current = void 0;
@@ -38930,7 +39007,7 @@ var init_acp3 = __esm({
             if (this.#state === "busy") this.#state = "idle";
             this.#host.scanDescendants(true);
             this.#emit({ type: "turn_ended", turnId: id, outcome: outcome2 });
-            resolve5({ turnId: id, outcome: outcome2, providerSessionId: this.#sessionId });
+            resolve6({ turnId: id, outcome: outcome2, providerSessionId: this.#sessionId });
           };
         });
         const active = { id, turn, done, finish, cancelRequested: false };
@@ -39211,7 +39288,7 @@ var init_acp3 = __esm({
 var init_classify = __esm({
   "../agent-core/dist/classify.js"() {
     "use strict";
-    init_chunk_BR4I6MQF();
+    init_chunk_54ZRJOQP();
     init_chunk_YXWJW7I5();
   }
 });
@@ -39241,38 +39318,31 @@ function toTurnResult(harness, outcome2, spec, providerSessionId, clock, apiKeyS
       return { outcome: "aborted", ...session };
     case "interrupted":
       return { outcome: "interrupted", message: outcome2.reason, ...session };
-    case "failed":
-      return {
-        outcome: "failed",
-        message: outcome2.error.message,
-        problem: createCliProblem(outcome2.error, {
-          harness,
-          phase: "stream",
-          finality: "terminal",
-          outcomeCertainty: "effect_unknown",
-          occurredAt: new Date(clock.now()).toISOString(),
-          scope: { runId: spec.runId, conversationId: spec.conversationId },
-          apiKeySupplied
-        }),
-        ...session
-      };
+    case "failed": {
+      const problem = createCliProblem(outcome2.error, {
+        harness,
+        phase: "stream",
+        finality: "terminal",
+        outcomeCertainty: "effect_unknown",
+        occurredAt: new Date(clock.now()).toISOString(),
+        scope: { runId: spec.runId, conversationId: spec.conversationId },
+        apiKeySupplied
+      });
+      return { outcome: "failed", message: problem.detail, problem, ...session };
+    }
   }
 }
 function refusalResult(harness, refusal2, spec, clock, apiKeySupplied) {
-  const error61 = refusal2.classified ?? specForErrorKind("not_authenticated");
-  return {
-    outcome: "failed",
-    message: error61.message,
-    problem: createCliProblem(error61, {
-      harness,
-      phase: "preflight",
-      finality: "terminal",
-      outcomeCertainty: "no_effect",
-      occurredAt: new Date(clock.now()).toISOString(),
-      scope: { runId: spec.runId, conversationId: spec.conversationId },
-      apiKeySupplied
-    })
-  };
+  const problem = createCliProblem(refusal2.classified ?? specForErrorKind("not_authenticated"), {
+    harness,
+    phase: "preflight",
+    finality: "terminal",
+    outcomeCertainty: "no_effect",
+    occurredAt: new Date(clock.now()).toISOString(),
+    scope: { runId: spec.runId, conversationId: spec.conversationId },
+    apiKeySupplied
+  });
+  return { outcome: "failed", message: problem.detail, problem };
 }
 function createPersistentDriver(provider4, options) {
   const { log, clock } = options;
@@ -39375,7 +39445,8 @@ function createPersistentDriver(provider4, options) {
       };
       signal.addEventListener("abort", onAbort, { once: true });
       try {
-        const input2 = await provider4.turnInput(spec, inputs, opened.contextPrefix);
+        const contextPrefix = [inputs.turnContext, opened.contextPrefix].filter((part) => part !== void 0).join("\n\n");
+        const input2 = await provider4.turnInput(spec, inputs, contextPrefix || void 0);
         if (signal.aborted) return { outcome: "aborted" };
         const result = await session.sendTurn(input2);
         live.providerSessionId = result.providerSessionId ?? live.providerSessionId;
@@ -39567,10 +39638,10 @@ function parseSseBlock(block) {
   return { type, properties: asRecord(record2.properties) ?? {} };
 }
 function readText(incoming) {
-  return new Promise((resolve5, reject) => {
+  return new Promise((resolve23, reject) => {
     const chunks = [];
     incoming.on("data", (chunk) => chunks.push(chunk));
-    incoming.on("end", () => resolve5(Buffer.concat(chunks).toString("utf8")));
+    incoming.on("end", () => resolve23(Buffer.concat(chunks).toString("utf8")));
     incoming.on("error", reject);
   });
 }
@@ -39813,7 +39884,7 @@ function notice(kind, message) {
 function promptParts2(input2) {
   const files = (input2.imagePaths ?? []).map((path, index) => ({
     type: "file",
-    mime: input2.images?.[index]?.mimeType ?? IMAGE_TYPES[(0, import_path10.extname)(path).toLowerCase()] ?? "application/octet-stream",
+    mime: input2.images?.[index]?.mimeType ?? IMAGE_TYPES[(0, import_path11.extname)(path).toLowerCase()] ?? "application/octet-stream",
     filename: path.split(/[\\/]/).at(-1) ?? path,
     url: (0, import_url2.pathToFileURL)(path).href
   }));
@@ -39905,6 +39976,34 @@ async function startServer(spec, password, options, attempt) {
     }
   }
 }
+async function canResume(client, sessionId, log) {
+  const stored = await client.readSession(sessionId);
+  if (!stored) {
+    log.warn("opencode.resume_failed", { sessionId, reason: "missing" });
+    return false;
+  }
+  if (!stored.directory) return true;
+  const directory = await client.directory();
+  if (await sameDirectory(stored.directory, directory)) return true;
+  log.warn("opencode.resume_failed", {
+    sessionId,
+    reason: "directory_changed",
+    sessionDirectory: stored.directory,
+    serverDirectory: directory
+  });
+  return false;
+}
+async function sameDirectory(left, right) {
+  const [a, b] = await Promise.all([canonicalDirectory(left), canonicalDirectory(right)]);
+  return process.platform === "win32" ? a.toLowerCase() === b.toLowerCase() : a === b;
+}
+async function canonicalDirectory(directory) {
+  try {
+    return await (0, import_promises24.realpath)(directory);
+  } catch {
+    return (0, import_path10.resolve)(directory);
+  }
+}
 async function openSession(session, client, spec, log) {
   const health = await client.health();
   const verdict = judgeOpenCodeVersion(health.version);
@@ -39920,11 +40019,8 @@ async function openSession(session, client, spec, log) {
   }
   await session.connect(client);
   const resumeId = spec.resumeSessionId;
-  if (resumeId && await client.hasSession(resumeId)) return { id: resumeId, resumed: true };
-  if (resumeId) {
-    log.warn("opencode.resume_failed", { sessionId: resumeId });
-    session.resumeFailed = true;
-  }
+  if (resumeId && await canResume(client, resumeId, log)) return { id: resumeId, resumed: true };
+  if (resumeId) session.resumeFailed = true;
   const id = await client.createSession({ title: spec.title, permission: NON_INTERACTIVE_RULES });
   return { id, resumed: false };
 }
@@ -40075,22 +40171,24 @@ function openCodeTurnInput(run, context) {
     ...images.length ? { imagePaths: images.map((image) => image.path) } : {}
   };
 }
-var import_http4, import_crypto13, import_path10, import_url2, import_crypto14, IDLE_SOCKET_MS2, OpenCodeHttpError, OpenCodeClient, OPENCODE_CONFIG_ENV, OPENCODE_ENGINE, TEXT_PARTS, STEP_PARTS, STOPPED_BY_USER, OpenCodeSubagents, NAMED_KINDS, OPENCODE_ABORTED_ERROR, PROVIDER_EVENT_META, TASK_TOOL_NAME, TASK_RESULT_TAG, TASK_ERROR_TAG, PERMISSION_DENIED, FILE_OPERATIONS, PartReader, NOTHING, NON_INTERACTIVE_PERMISSIONS, CONTENT_FILTER_FINISHES, OUTPUT_PARTS, OpenCodeTurn, LISTENING, OUTPUT_TAIL_LINES, IMAGE_TYPES, OpenCodeSession, OPENCODE_MIN_VERSION, OPENCODE_REQUIREMENT, OPENCODE_TESTED_LINE, OPENCODE_SUPPORTED_MAJOR, DEFAULTS4, STORE_LOCKED, NON_INTERACTIVE_RULES, TITLE_LENGTH, MAX_VARIANT_LENGTH;
+var import_http4, import_crypto13, import_promises24, import_path10, import_path11, import_url2, import_crypto14, IDLE_SOCKET_MS2, OpenCodeHttpError, OpenCodeClient, OPENCODE_CONFIG_ENV, OPENCODE_ENGINE, TEXT_PARTS, STEP_PARTS, STOPPED_BY_USER, OpenCodeSubagents, NAMED_KINDS, OPENCODE_ABORTED_ERROR, PROVIDER_EVENT_META, TASK_TOOL_NAME, TASK_RESULT_TAG, TASK_ERROR_TAG, PERMISSION_DENIED, FILE_OPERATIONS, PartReader, NOTHING, NON_INTERACTIVE_PERMISSIONS, CONTENT_FILTER_FINISHES, OUTPUT_PARTS, OpenCodeTurn, LISTENING, OUTPUT_TAIL_LINES, IMAGE_TYPES, OpenCodeSession, OPENCODE_MIN_VERSION, OPENCODE_REQUIREMENT, OPENCODE_TESTED_LINE, OPENCODE_SUPPORTED_MAJOR, DEFAULTS4, STORE_LOCKED, NON_INTERACTIVE_RULES, TITLE_LENGTH, MAX_VARIANT_LENGTH;
 var init_opencode = __esm({
   "../agent-core/dist/providers/opencode.js"() {
     "use strict";
-    init_chunk_UKUTSW3L();
+    init_chunk_YPYC4VBL();
     init_chunk_UGRKZTAD();
-    init_chunk_BR4I6MQF();
+    init_chunk_54ZRJOQP();
     init_chunk_J2KTV5FP();
-    init_chunk_6GPS6OKU();
+    init_chunk_J4T6L5LX();
     init_chunk_6WN2R725();
     init_chunk_YXWJW7I5();
     import_http4 = require("http");
     init_runtime_v2();
     import_crypto13 = require("crypto");
-    init_agent2();
+    import_promises24 = require("fs/promises");
     import_path10 = require("path");
+    init_agent2();
+    import_path11 = require("path");
     import_url2 = require("url");
     init_acp();
     import_crypto14 = require("crypto");
@@ -40117,11 +40215,11 @@ var init_opencode = __esm({
         this.#engine = engine;
       }
       #open(call) {
-        return new Promise((resolve5, reject) => {
+        return new Promise((resolve23, reject) => {
           const outgoing = (0, import_http4.request)(
             `${this.baseUrl}${call.path}`,
             { method: call.method, headers: call.headers, agent: this.#agent },
-            resolve5
+            resolve23
           );
           outgoing.on("error", reject);
           outgoing.end(call.body);
@@ -40158,18 +40256,25 @@ var init_opencode = __esm({
         return id;
       }
       /**
-       * Whether the server's store still has this session. Only a 404 means it does not: any
-       * other failure raises, so a server hiccup never silently replaces the conversation.
+       * The stored session, or undefined when the server's store does not have it. Only a 404
+       * means that: any other failure raises, so a server hiccup never silently replaces the
+       * conversation.
        */
-      async hasSession(sessionId) {
+      async readSession(sessionId) {
         try {
-          await this.#call("session read", "GET", `/session/${encodeURIComponent(sessionId)}`);
-          return true;
+          const body = asRecord(
+            await this.#call("session read", "GET", `/session/${encodeURIComponent(sessionId)}`)
+          );
+          return { directory: asString(body?.directory) };
         } catch (error61) {
-          if (error61 instanceof OpenCodeHttpError && error61.status === 404) return false;
+          if (error61 instanceof OpenCodeHttpError && error61.status === 404) return void 0;
           throw error61;
         }
       }
+      /** The directory the server serves when a request names none: its own cwd. */
+      async directory() {
+        return asString(asRecord(await this.#call("path read", "GET", "/path"))?.directory);
+      }
       /** Answers 204 at once; the turn itself arrives on `/event`. */
       async promptAsync(sessionId, body) {
         await this.#call("prompt", "POST", `/session/${encodeURIComponent(sessionId)}/prompt_async`, {
@@ -40855,8 +40960,8 @@ var init_opencode = __esm({
             onExit: (exit) => this.#onExit(exit)
           }
         );
-        this.#listening = new Promise((resolve5, reject) => {
-          this.#announce = resolve5;
+        this.#listening = new Promise((resolve23, reject) => {
+          this.#announce = resolve23;
           void this.#host.exited.then(
             () => reject(
               new CoreFault(
@@ -40945,12 +41050,8 @@ var init_opencode = __esm({
           await client.promptAsync(sessionId, body);
         } catch (error61) {
           if (this.#state === "closed") return;
+          if (this.#current?.id !== active.id) return;
           const message = error61 instanceof Error ? error61.message : String(error61);
-          this.#emit({
-            type: "update",
-            turnId: active.id,
-            update: noticeUpdate("error", "provider", message)
-          });
           active.finish({ status: "failed", error: classifyProviderError(message) });
         }
       }
@@ -41021,7 +41122,7 @@ var init_opencode = __esm({
         );
         let finish = () => {
         };
-        const done = new Promise((resolve5) => {
+        const done = new Promise((resolve23) => {
           finish = (outcome2) => {
             if (this.#current?.id !== id) return;
             this.#current = void 0;
@@ -41029,7 +41130,7 @@ var init_opencode = __esm({
             if (outcome2.status !== "completed") this.#repairPending = true;
             this.#host.scanDescendants(true);
             this.#emit({ type: "turn_ended", turnId: id, outcome: outcome2 });
-            resolve5({ turnId: id, outcome: outcome2, providerSessionId: this.#sessionId });
+            resolve23({ turnId: id, outcome: outcome2, providerSessionId: this.#sessionId });
           };
         });
         const active = {
@@ -41209,7 +41310,7 @@ function createAlanCodeHolderDriver(options) {
   const engine = resolveAlanCodeEngine({ env, platform, packaged: [] });
   const engineRoot = alanCodeEngineRoot(env.HOME?.trim() || (0, import_node_os2.homedir)());
   options.log.info("alan_code.engine", { command: engine.command, source: engine.source });
-  const open3 = async (planned) => {
+  const open4 = async (planned) => {
     if (planned.profile === void 0) throw refuseWithoutCredential();
     const { opencode } = planned;
     const profile = await prepareAlanCodeProfile({
@@ -41266,7 +41367,7 @@ function createAlanCodeHolderDriver(options) {
         };
       },
       canResume: () => true,
-      open: open3,
+      open: open4,
       turnInput: async (spec, inputs, contextPrefix) => openCodeTurnInput(spec, {
         attachments: inputs.attachments,
         skills: [],
@@ -41350,21 +41451,63 @@ var codex_exports = {};
 __export(codex_exports, {
   createCodexHolderDriver: () => createCodexHolderDriver
 });
+function sha2562(value) {
+  return (0, import_node_crypto12.createHash)("sha256").update(value).digest("hex");
+}
+function createCodexLogin(broker) {
+  const state = {};
+  return {
+    forTurn: (runId, tokens2) => {
+      state.runId = runId;
+      state.latest = tokens2;
+    },
+    externalAuth: {
+      current: async () => {
+        if (state.latest === void 0) throw new Error("No Codex sign-in for this turn");
+        state.given = state.latest;
+        return state.given;
+      },
+      refresh: async () => {
+        if (broker === void 0 || state.runId === void 0) {
+          throw new Error("Codex sign-in cannot be refreshed on this machine");
+        }
+        const rejected2 = state.given === void 0 ? void 0 : sha2562(state.given.accessToken);
+        const fresh = await broker.refresh(state.runId, rejected2);
+        state.latest = fresh;
+        state.given = fresh;
+        return fresh;
+      }
+    }
+  };
+}
+function withLogin(planned, externalAuth, accountId) {
+  return {
+    ...planned,
+    spec: { ...planned.spec, externalAuth },
+    key: JSON.stringify([planned.key, accountId])
+  };
+}
 function createCodexHolderDriver(options) {
   const clock = options.clock ?? systemClock2;
   const sessions = options.sessions ?? createCodexDriver({ ...options.timings, clock, log: options.log });
+  const login = createCodexLogin(options.codexCredentials);
   return createPersistentDriver(
     {
       harness: "codex_app_server",
       displayName: "Codex app-server",
-      plan: (spec, inputs, resumeId, managedMcp) => planCodexSession(spec, {
-        command: options.command ?? "codex",
-        cwd: spec.projectPath ?? options.defaultCwd,
-        cliEnv: options.cliEnvironment,
-        providerEnv: inputs.providerEnv,
-        ...managedMcp === void 0 ? {} : { managedMcp },
-        ...resumeId === void 0 ? {} : { resumeThreadId: resumeId }
-      }),
+      plan: (spec, inputs, resumeId, managedMcp) => {
+        const planned = planCodexSession(spec, {
+          command: options.command ?? "codex",
+          cwd: spec.projectPath ?? options.defaultCwd,
+          cliEnv: options.cliEnvironment,
+          providerEnv: inputs.providerEnv,
+          ...managedMcp === void 0 ? {} : { managedMcp },
+          ...resumeId === void 0 ? {} : { resumeThreadId: resumeId }
+        });
+        if (inputs.codex === void 0) return planned;
+        login.forTurn(spec.runId, inputs.codex);
+        return withLogin(planned, login.externalAuth, inputs.codex.chatgptAccountId);
+      },
       canResume: () => true,
       open: async (spec) => {
         const session = await sessions.open(spec);
@@ -41384,9 +41527,11 @@ function createCodexHolderDriver(options) {
     }
   );
 }
+var import_node_crypto12;
 var init_codex2 = __esm({
   "src/holder/drivers/codex.ts"() {
     "use strict";
+    import_node_crypto12 = require("crypto");
     init_dist();
     init_codex();
     init_persistent();
@@ -41493,8 +41638,8 @@ function createDroidPeer(writer, handlers) {
     },
     request: (method, params = {}) => {
       const id = `alan-${counter.next++}`;
-      return new Promise((resolve5, reject) => {
-        pending.set(id, { method, resolve: resolve5, reject });
+      return new Promise((resolve6, reject) => {
+        pending.set(id, { method, resolve: resolve6, reject });
         writer.write(envelope("request", { id, method, params })).catch((error61) => {
           pending.delete(id);
           reject(error61 instanceof Error ? error61 : new Error(String(error61)));
@@ -41829,25 +41974,25 @@ async function droidTurnInput(run, context) {
   const encoded = await Promise.all(
     images.map(async (image) => ({
       mimeType: image.mimeType,
-      data: (await (0, import_promises23.readFile)(image.path)).toString("base64")
+      data: (await (0, import_promises25.readFile)(image.path)).toString("base64")
     }))
   );
   return { turnId: run.runId, text: text2, ...encoded.length ? { images: encoded } : {} };
 }
-var import_crypto15, import_promises23, FACTORY_API_VERSION, FACTORY_PROTOCOL_VERSION, SUBAGENT_TOOLS, TASK_OUTPUT_TOOLS, TASK_STOP_TOOLS, SILENT2, DroidTurn, STDERR_TAIL_LINES5, UNSUPPORTED_REQUEST2, DroidSession, DEFAULTS5, DROID_REQUIREMENT, DROID_JSONRPC_ARGS;
+var import_crypto15, import_promises25, FACTORY_API_VERSION, FACTORY_PROTOCOL_VERSION, SUBAGENT_TOOLS, TASK_OUTPUT_TOOLS, TASK_STOP_TOOLS, SILENT2, DroidTurn, STDERR_TAIL_LINES5, UNSUPPORTED_REQUEST2, DroidSession, DEFAULTS5, DROID_REQUIREMENT, DROID_JSONRPC_ARGS;
 var init_droid = __esm({
   "../agent-core/dist/providers/droid.js"() {
     "use strict";
-    init_chunk_UKUTSW3L();
+    init_chunk_YPYC4VBL();
     init_chunk_UGRKZTAD();
-    init_chunk_BR4I6MQF();
+    init_chunk_54ZRJOQP();
     init_chunk_J2KTV5FP();
-    init_chunk_6GPS6OKU();
+    init_chunk_J4T6L5LX();
     init_chunk_6WN2R725();
     init_chunk_YXWJW7I5();
     init_runtime_v2();
     import_crypto15 = require("crypto");
-    import_promises23 = require("fs/promises");
+    import_promises25 = require("fs/promises");
     init_agent2();
     FACTORY_API_VERSION = "1.0.0";
     FACTORY_PROTOCOL_VERSION = "1.187.0";
@@ -42119,14 +42264,14 @@ var init_droid = __esm({
         const turn = new DroidTurn(sessionId, this.#memory);
         let finish = () => {
         };
-        const done = new Promise((resolve5) => {
+        const done = new Promise((resolve6) => {
           finish = (outcome2) => {
             if (this.#current?.id !== id) return;
             this.#current = void 0;
             if (this.#state === "busy") this.#state = "idle";
             this.#host.scanDescendants(true);
             this.#emit({ type: "turn_ended", turnId: id, outcome: outcome2 });
-            resolve5({ turnId: id, outcome: outcome2, providerSessionId: this.#sessionId });
+            resolve6({ turnId: id, outcome: outcome2, providerSessionId: this.#sessionId });
           };
         });
         const active = { id, turn, done, finish, cancelRequested: false };
@@ -42311,6 +42456,35 @@ var init_opencode2 = __esm({
 });
 
 // ../agent-core/dist/providers/antigravity.js
+function settingsPath(env) {
+  const home = env.HOME?.trim() || env.USERPROFILE?.trim();
+  return home ? (0, import_path12.resolve)(home, ".gemini", "antigravity-cli", "settings.json") : void 0;
+}
+async function readSettings(path) {
+  let raw;
+  try {
+    raw = (await (0, import_promises26.readFile)(path, "utf8")).trim();
+  } catch {
+    return {};
+  }
+  if (!raw) return {};
+  try {
+    const parsed = JSON.parse(raw);
+    return isRecord(parsed) ? parsed : "malformed";
+  } catch {
+    return "malformed";
+  }
+}
+async function selectAntigravityApiKeyMode(env) {
+  const path = settingsPath(env);
+  if (!env.GEMINI_API_KEY?.trim() || path === void 0) return "no_key";
+  const settings2 = await readSettings(path);
+  if (settings2 === "malformed") return "malformed";
+  if (settings2.modelProvider === "gemini") return "already_selected";
+  await (0, import_promises26.mkdir)((0, import_path12.dirname)(path), { recursive: true });
+  await (0, import_promises26.writeFile)(path, JSON.stringify({ ...settings2, modelProvider: "gemini" }), { mode: 384 });
+  return "selected";
+}
 function readAntigravityCapabilities(version2, help) {
   const text2 = help.toLowerCase().replace(/\s+/g, " ");
   const structured = /\bstream-json\b/.test(text2) || /\bjsonl\b/.test(text2) || /\bjson\b/.test(text2);
@@ -42351,21 +42525,21 @@ function antigravityArgs(input2, capabilities, prompt) {
   ];
 }
 function workspaceRoot(cwd) {
-  for (let current = (0, import_path11.resolve)(cwd); ; current = (0, import_path11.dirname)(current)) {
-    if ((0, import_fs8.existsSync)((0, import_path11.join)(current, ".git"))) return current;
-    if ((0, import_path11.dirname)(current) === current) return (0, import_path11.resolve)(cwd);
+  for (let current = (0, import_path13.resolve)(cwd); ; current = (0, import_path13.dirname)(current)) {
+    if ((0, import_fs8.existsSync)((0, import_path13.join)(current, ".git"))) return current;
+    if ((0, import_path13.dirname)(current) === current) return (0, import_path13.resolve)(cwd);
   }
 }
 function instructionPaths(cwd) {
   const root = workspaceRoot(cwd);
   const paths = [];
-  for (let current = (0, import_path11.resolve)(cwd); ; current = (0, import_path11.dirname)(current)) {
-    const path = (0, import_path11.join)(current, INSTRUCTIONS_FILE);
+  for (let current = (0, import_path13.resolve)(cwd); ; current = (0, import_path13.dirname)(current)) {
+    const path = (0, import_path13.join)(current, INSTRUCTIONS_FILE);
     try {
       if ((0, import_fs8.existsSync)(path) && (0, import_fs8.statSync)(path).isFile()) paths.unshift(path);
     } catch {
     }
-    if (current === root || (0, import_path11.dirname)(current) === current) return paths;
+    if (current === root || (0, import_path13.dirname)(current) === current) return paths;
   }
 }
 function antigravityWorkspaceInstructions(cwd, maxChars = MAX_INSTRUCTION_CHARS) {
@@ -42619,7 +42793,7 @@ function normalizeAntigravityFrame(event) {
 }
 function antigravityBrainRoot(env) {
   const home = env.HOME?.trim() || env.USERPROFILE?.trim();
-  return home ? (0, import_path12.resolve)(home, ".gemini", "antigravity-cli", "brain") : void 0;
+  return home ? (0, import_path14.resolve)(home, ".gemini", "antigravity-cli", "brain") : void 0;
 }
 function parseEntry(text2) {
   try {
@@ -42657,14 +42831,14 @@ function childTranscriptPath(root, frame) {
   try {
     const url2 = new URL(logUri);
     if (url2.protocol !== "file:") return void 0;
-    path = (0, import_path12.resolve)((0, import_url3.fileURLToPath)(url2));
+    path = (0, import_path14.resolve)((0, import_url3.fileURLToPath)(url2));
   } catch {
     return void 0;
   }
-  const fromRoot = (0, import_path12.relative)(root, path);
-  if (!fromRoot || (0, import_path12.isAbsolute)(fromRoot) || fromRoot.split(import_path12.sep).includes("..")) return void 0;
+  const fromRoot = (0, import_path14.relative)(root, path);
+  if (!fromRoot || (0, import_path14.isAbsolute)(fromRoot) || fromRoot.split(import_path14.sep).includes("..")) return void 0;
   const expected = [conversationId, ...LOG_DIRS, TRANSCRIPT_FILE];
-  const segments = fromRoot.split(import_path12.sep);
+  const segments = fromRoot.split(import_path14.sep);
   const matches = segments.length === expected.length && segments.every((segment, index) => segment === expected[index]);
   return matches ? path : void 0;
 }
@@ -42842,11 +43016,15 @@ ${output2.stderr}`).join("\n")
     name: "antigravity_cli",
     capabilities,
     open: async (spec) => {
-      const found = await capabilities(spec.command, spec.env);
+      const [found, apiKeyMode] = await Promise.all([
+        capabilities(spec.command, spec.env),
+        selectAntigravityApiKeyMode(spec.env).catch(() => "unwritable")
+      ]);
       session.log.info("antigravity.opened", {
         version: found.version,
         structured: found.structuredPrint,
-        resumeId: spec.resumeSessionId
+        resumeId: spec.resumeSessionId,
+        apiKeyMode
       });
       return new AntigravitySession(
         provider2(spec, found, options.platform ?? process.platform),
@@ -42903,21 +43081,24 @@ function antigravityTurnInput(run, context) {
   });
   return { turnId: run.runId, text: appendImagePathReferences(text2, images) };
 }
-var import_fs8, import_path11, import_path12, import_url3, import_crypto16, NO_ANTIGRAVITY_CAPABILITIES, INSTRUCTIONS_FILE, MAX_INSTRUCTION_CHARS, SHORTENED_NOTE, DIFF_BLOCK_START, DIFF_BLOCK_END, HUNK_HEADER, TRANSCRIPT_FILE, FULL_TRANSCRIPT_FILE, LOG_DIRS, TOOL_RESULT_TYPES, BrainTranscript, AntigravityTranscripts, ANTIGRAVITY_GRAMMAR_NAME, AntigravityGrammar, ignored, HANDLERS, SUCCESSFUL_STATUSES, SESSION_START_TYPES, RESULT_TYPES, SUBAGENT_START_TYPES, RESUME_FORKED, EXITED_WITHOUT_RESULT, AntigravityTurn, DEFAULTS6, AntigravitySession, WINDOWS_LINE_MARGIN;
+var import_promises26, import_path12, import_fs8, import_path13, import_path14, import_url3, import_crypto16, NO_ANTIGRAVITY_CAPABILITIES, INSTRUCTIONS_FILE, MAX_INSTRUCTION_CHARS, SHORTENED_NOTE, DIFF_BLOCK_START, DIFF_BLOCK_END, HUNK_HEADER, TRANSCRIPT_FILE, FULL_TRANSCRIPT_FILE, LOG_DIRS, TOOL_RESULT_TYPES, BrainTranscript, AntigravityTranscripts, ANTIGRAVITY_GRAMMAR_NAME, AntigravityGrammar, ignored, HANDLERS, SUCCESSFUL_STATUSES, SESSION_START_TYPES, RESULT_TYPES, SUBAGENT_START_TYPES, RESUME_FORKED, EXITED_WITHOUT_RESULT, AntigravityTurn, DEFAULTS6, AntigravitySession, WINDOWS_LINE_MARGIN;
 var init_antigravity = __esm({
   "../agent-core/dist/providers/antigravity.js"() {
     "use strict";
     init_chunk_DALFHI4B();
-    init_chunk_UKUTSW3L();
+    init_chunk_YPYC4VBL();
     init_chunk_UGRKZTAD();
-    init_chunk_BR4I6MQF();
-    init_chunk_6GPS6OKU();
+    init_chunk_54ZRJOQP();
+    init_chunk_J4T6L5LX();
     init_chunk_6WN2R725();
     init_chunk_YXWJW7I5();
+    import_promises26 = require("fs/promises");
+    import_path12 = require("path");
+    init_type_guards();
     import_fs8 = require("fs");
-    import_path11 = require("path");
+    import_path13 = require("path");
     init_effort();
-    import_path12 = require("path");
+    import_path14 = require("path");
     import_url3 = require("url");
     import_crypto16 = require("crypto");
     init_agent2();
@@ -42957,7 +43138,7 @@ var init_antigravity = __esm({
       #full;
       constructor(path) {
         this.#cursor = new TranscriptCursor(path);
-        this.#fullPath = (0, import_path12.resolve)((0, import_path12.dirname)(path), FULL_TRANSCRIPT_FILE);
+        this.#fullPath = (0, import_path14.resolve)((0, import_path14.dirname)(path), FULL_TRANSCRIPT_FILE);
       }
       skipExisting() {
         this.#cursor.read();
@@ -43005,7 +43186,7 @@ var init_antigravity = __esm({
       /** A conversation this turn did not resume was created by it, so it is read whole. */
       trackParent(conversationId) {
         if (this.#parent?.conversationId === conversationId) return;
-        const path = (0, import_path12.resolve)(this.#root, conversationId, ...LOG_DIRS, TRANSCRIPT_FILE);
+        const path = (0, import_path14.resolve)(this.#root, conversationId, ...LOG_DIRS, TRANSCRIPT_FILE);
         this.#parent = { conversationId, transcript: new BrainTranscript(path) };
       }
       /** A launcher keeps the first valid transcript it names; later frames change nothing. */
@@ -43410,8 +43591,8 @@ function parseConfig(raw) {
   }
 }
 async function writeCommandCodeProjectMcp(cwd, mcp) {
-  const path = (0, import_path13.join)(cwd, ".mcp.json");
-  const original = await (0, import_promises24.readFile)(path, "utf8").catch(() => null);
+  const path = (0, import_path15.join)(cwd, ".mcp.json");
+  const original = await (0, import_promises27.readFile)(path, "utf8").catch(() => null);
   const config2 = parseConfig(original);
   const next = {
     ...config2,
@@ -43428,12 +43609,12 @@ async function writeCommandCodeProjectMcp(cwd, mcp) {
       }
     }
   };
-  await (0, import_promises24.mkdir)(cwd, { recursive: true });
-  await (0, import_promises24.writeFile)(path, `${JSON.stringify(next, null, 2)}
+  await (0, import_promises27.mkdir)(cwd, { recursive: true });
+  await (0, import_promises27.writeFile)(path, `${JSON.stringify(next, null, 2)}
 `);
   return async () => {
-    if (original === null) await (0, import_promises24.rm)(path, { force: true });
-    else await (0, import_promises24.writeFile)(path, original);
+    if (original === null) await (0, import_promises27.rm)(path, { force: true });
+    else await (0, import_promises27.writeFile)(path, original);
   };
 }
 function commandCodeString(value) {
@@ -43605,19 +43786,19 @@ function commandCodeTurnInput(run, context) {
   });
   return { turnId: run.runId, text: appendImagePathReferences(text2, images) };
 }
-var import_promises24, import_path13, import_crypto17, COMMAND_CODE_GRAMMAR_NAME, SILENT3, CommandCodeGrammar, SHELL_TOOL, STOP_TOOLS, REPORTED_STATUS, SHELL_STATUS, SWEEP_INTERVAL_MS, CommandCodeBackgroundTasks, EXITED_WITHOUT_RESULT2, CommandCodeTurn, COMMAND_CODE_MAX_TURNS, DEFAULTS7, CommandCodeSession;
+var import_promises27, import_path15, import_crypto17, COMMAND_CODE_GRAMMAR_NAME, SILENT3, CommandCodeGrammar, SHELL_TOOL, STOP_TOOLS, REPORTED_STATUS, SHELL_STATUS, SWEEP_INTERVAL_MS, CommandCodeBackgroundTasks, EXITED_WITHOUT_RESULT2, CommandCodeTurn, COMMAND_CODE_MAX_TURNS, DEFAULTS7, CommandCodeSession;
 var init_command_code = __esm({
   "../agent-core/dist/providers/command-code.js"() {
     "use strict";
-    init_chunk_UKUTSW3L();
+    init_chunk_YPYC4VBL();
     init_chunk_UGRKZTAD();
-    init_chunk_BR4I6MQF();
+    init_chunk_54ZRJOQP();
     init_chunk_J2KTV5FP();
-    init_chunk_6GPS6OKU();
+    init_chunk_J4T6L5LX();
     init_chunk_6WN2R725();
     init_chunk_YXWJW7I5();
-    import_promises24 = require("fs/promises");
-    import_path13 = require("path");
+    import_promises27 = require("fs/promises");
+    import_path15 = require("path");
     init_agent2();
     init_runtime_v2();
     init_acp();
@@ -44478,7 +44659,7 @@ function transportFailure(request2, error61) {
   });
 }
 function readBody(incoming, url2, maxBytes) {
-  return new Promise((resolve5, reject) => {
+  return new Promise((resolve6, reject) => {
     const declared = Number(incoming.headers["content-length"] ?? "0");
     if (maxBytes !== void 0 && declared > maxBytes) {
       incoming.destroy();
@@ -44497,7 +44678,7 @@ function readBody(incoming, url2, maxBytes) {
       chunks.push(chunk);
     });
     incoming.on("error", reject);
-    incoming.on("end", () => resolve5(Buffer.concat(chunks)));
+    incoming.on("end", () => resolve6(Buffer.concat(chunks)));
   });
 }
 function isConnectionReset(error61) {
@@ -44505,7 +44686,7 @@ function isConnectionReset(error61) {
 }
 function exchange(request2, agents, attempt = 0) {
   const { signal, url: url2 } = request2;
-  return new Promise((resolve5, reject) => {
+  return new Promise((resolve6, reject) => {
     if (signal.aborted) {
       reject(signal.reason);
       return;
@@ -44532,7 +44713,7 @@ function exchange(request2, agents, attempt = 0) {
       const stale = outgoing.reusedSocket && !responded && isConnectionReset(error61);
       if (stale && attempt < STALE_SOCKET_RETRIES && !signal.aborted) {
         settle();
-        resolve5(exchange(request2, agents, attempt + 1));
+        resolve6(exchange(request2, agents, attempt + 1));
         return;
       }
       fail(error61);
@@ -44545,7 +44726,7 @@ function exchange(request2, agents, attempt = 0) {
       readBody(incoming, url2, isRedirect(status) ? void 0 : request2.maxBodyBytes).then(
         (body) => {
           settle();
-          resolve5({ status, headers: incoming.headers, body });
+          resolve6({ status, headers: incoming.headers, body });
         },
         fail
       );
@@ -44650,6 +44831,13 @@ function createHolderApiClient({
       }
       return runProviderCredentialSchema.parse(jsonBody(response));
     },
+    refreshCodexCredential: async (runId, body, signal) => {
+      const response = await request2("POST", runCodexCredentialRefreshPath(runId), signal, body);
+      if (!isOk(response)) {
+        throw new RuntimeFault("io_failed", `Codex sign-in refresh failed: ${response.status}`);
+      }
+      return runCodexCredentialSchema.parse(jsonBody(response));
+    },
     mintMcpCredential: async (conversationId, signal) => {
       const response = await request2("POST", MACHINE_PATHS.mcpCredential, signal, {
         conversationId
@@ -44695,7 +44883,7 @@ var GitFault = class extends Error {
 var import_node_child_process = require("child_process");
 
 // ../agent-core/dist/process.js
-init_chunk_6GPS6OKU();
+init_chunk_J4T6L5LX();
 init_chunk_YXWJW7I5();
 
 // src/capabilities/git/run-git.ts
@@ -44827,7 +45015,7 @@ function createGitRunner(options) {
       }
       await killProcessTree(child.pid, { signal: "SIGKILL", child, platform });
     };
-    return new Promise((resolve5, reject) => {
+    return new Promise((resolve6, reject) => {
       let ending = null;
       const stop = (next) => {
         if (ending !== null) return;
@@ -44852,7 +45040,7 @@ function createGitRunner(options) {
         signal.removeEventListener("abort", onAbort);
         const final = ending ?? last;
         if (final.kind === "exited") {
-          resolve5({ exitCode: final.exitCode, stdout: stdout.text(), stderr: stderr.text() });
+          resolve6({ exitCode: final.exitCode, stdout: stdout.text(), stderr: stderr.text() });
         } else {
           reject(faultFor(final, command));
         }
@@ -44874,9 +45062,97 @@ function createGitRunner(options) {
   };
 }
 
-// src/platform/credential-store/credential-store.ts
+// src/capabilities/git/checkout-freshness.ts
 var import_node_crypto3 = require("crypto");
 var import_promises7 = require("fs/promises");
+var import_node_path3 = require("path");
+init_zod();
+var REMOTE = "origin";
+var snapshotSchema = external_exports.object({
+  branch: external_exports.string().min(1),
+  base: external_exports.string().min(1),
+  head: external_exports.string().min(1),
+  published: external_exports.string(),
+  shallow: external_exports.boolean(),
+  commonDir: external_exports.string().min(1)
+});
+var freshnessSchema = external_exports.discriminatedUnion("state", [
+  external_exports.object({ state: external_exports.literal("checking"), path: external_exports.string() }),
+  external_exports.object({ state: external_exports.literal("kept"), path: external_exports.string(), reason: external_exports.string() }),
+  external_exports.object({ state: external_exports.literal("current"), path: external_exports.string(), snapshot: snapshotSchema }),
+  external_exports.object({
+    state: external_exports.literal("behind"),
+    path: external_exports.string(),
+    snapshot: snapshotSchema,
+    tip: external_exports.string().min(1),
+    fetched: external_exports.boolean()
+  }),
+  external_exports.object({
+    state: external_exports.literal("failed"),
+    path: external_exports.string(),
+    snapshot: snapshotSchema.optional(),
+    reason: external_exports.string()
+  })
+]);
+function freshnessFile(dir, path) {
+  return (0, import_node_path3.join)(dir, `${(0, import_node_crypto3.createHash)("sha256").update(path).digest("hex").slice(0, 32)}.json`);
+}
+function parseStatus(stdout) {
+  const lines = stdout.split("\n").filter((line) => line.length > 0);
+  const header = /* @__PURE__ */ new Map();
+  for (const line of lines) {
+    const [hash2, key, value] = line.split(" ");
+    if (hash2 === "#" && key !== void 0 && value !== void 0) header.set(key, value);
+  }
+  const head = header.get("branch.oid");
+  const branch = header.get("branch.head");
+  const upstream = header.get("branch.upstream") ?? "";
+  return {
+    head: head === void 0 || head === "(initial)" ? null : head,
+    branch: branch === void 0 || branch === "(detached)" ? null : branch,
+    base: upstream.startsWith(`${REMOTE}/`) ? upstream.slice(REMOTE.length + 1) : null,
+    ahead: Number(header.get("branch.ab")?.slice(1) ?? 0),
+    dirty: lines.some((line) => !line.startsWith("# "))
+  };
+}
+async function readCheckoutStatus(git, cwd, signal) {
+  const output2 = await git.run(
+    {
+      cwd,
+      args: ["status", "--porcelain=v2", "--branch", "--untracked-files=no"],
+      readOnly: true
+    },
+    signal
+  );
+  return output2.exitCode === 0 ? parseStatus(output2.stdout) : null;
+}
+async function isCheckout(path) {
+  return (0, import_promises7.stat)((0, import_node_path3.join)(path, ".git")).then(
+    () => true,
+    () => false
+  );
+}
+async function checkoutsUnder(root) {
+  if (await isCheckout(root)) return [root];
+  const entries = await (0, import_promises7.readdir)(root, { withFileTypes: true }).catch(() => []);
+  const found = await Promise.all(
+    entries.filter((entry) => entry.isDirectory()).map(
+      async (entry) => await isCheckout((0, import_node_path3.join)(root, entry.name)) ? (0, import_node_path3.join)(root, entry.name) : null
+    )
+  );
+  return found.filter((path) => path !== null);
+}
+async function readCheckoutFreshness(dir, path) {
+  for (let current = path; ; current = (0, import_node_path3.dirname)(current)) {
+    const read = await readJsonFile(freshnessFile(dir, current), freshnessSchema);
+    if (read.kind === "ok") return read.value;
+    if ((0, import_node_path3.dirname)(current) === current) return null;
+  }
+}
+
+// src/platform/credential-store/credential-store.ts
+var import_node_crypto4 = require("crypto");
+var import_promises8 = require("fs/promises");
 
 // src/platform/credential-store/parse.ts
 function parseStoredJson(text2, schema) {
@@ -44892,16 +45168,16 @@ function parseStoredJson(text2, schema) {
 
 // src/platform/windows-helper.ts
 var import_node_fs3 = require("fs");
-var import_node_path3 = require("path");
+var import_node_path4 = require("path");
 var import_node_url = require("url");
 var import_meta = {};
 function windowsHelperPath(entry = process.argv[1]) {
-  const packaged = entry === void 0 ? null : (0, import_node_path3.join)((0, import_node_path3.dirname)((0, import_node_path3.resolve)(entry)), "alan-winhelper.exe");
+  const packaged = entry === void 0 ? null : (0, import_node_path4.join)((0, import_node_path4.dirname)((0, import_node_path4.resolve)(entry)), "alan-winhelper.exe");
   if (entry !== void 0) {
     if (packaged !== null && (0, import_node_fs3.existsSync)(packaged)) return packaged;
   }
   try {
-    const local = (0, import_node_path3.resolve)((0, import_node_path3.dirname)((0, import_node_url.fileURLToPath)(import_meta.url)), "../../dist/alan-winhelper.exe");
+    const local = (0, import_node_path4.resolve)((0, import_node_path4.dirname)((0, import_node_url.fileURLToPath)(import_meta.url)), "../../dist/alan-winhelper.exe");
     return (0, import_node_fs3.existsSync)(local) ? local : packaged;
   } catch {
     return packaged;
@@ -44969,13 +45245,13 @@ function createFileCredentialStore(path) {
     kind: "file",
     read: (schema) => readJsonFile(path, schema),
     write: (value) => writeJsonFileAtomic(path, value),
-    clear: () => (0, import_promises7.rm)(path, { force: true })
+    clear: () => (0, import_promises8.rm)(path, { force: true })
   };
 }
 var KEYCHAIN_SERVICE = "ai.tryalan.runtime";
 var KEYCHAIN_NOT_FOUND = 44;
 function keychainAccount(stateDir) {
-  return `state-${(0, import_node_crypto3.createHash)("sha256").update(stateDir).digest("hex").slice(0, 16)}`;
+  return `state-${(0, import_node_crypto4.createHash)("sha256").update(stateDir).digest("hex").slice(0, 16)}`;
 }
 function windowsCredentialTarget(stateDir) {
   return `${KEYCHAIN_SERVICE}/${keychainAccount(stateDir.toLowerCase())}`;
@@ -45062,16 +45338,16 @@ function defaultCredentialStoreKind(platform) {
 
 // src/platform/install.ts
 var import_node_child_process3 = require("child_process");
-var import_node_crypto4 = require("crypto");
+var import_node_crypto5 = require("crypto");
 var import_node_fs4 = require("fs");
-var import_promises9 = require("fs/promises");
-var import_node_path4 = require("path");
+var import_promises10 = require("fs/promises");
+var import_node_path5 = require("path");
 var import_node_util2 = require("util");
 init_zod();
 
 // src/platform/process-identity.ts
 var import_node_child_process2 = require("child_process");
-var import_promises8 = require("fs/promises");
+var import_promises9 = require("fs/promises");
 var import_node_util = require("util");
 var execFileAsync = (0, import_node_util.promisify)(import_node_child_process2.execFile);
 function isProcessAlive(pid) {
@@ -45083,13 +45359,13 @@ function isProcessAlive(pid) {
   }
 }
 async function linuxStartTime(pid) {
-  const stat13 = await (0, import_promises8.readFile)(`/proc/${pid}/stat`, "utf8").catch(() => null);
-  if (stat13 === null) return null;
-  const fields = stat13.slice(stat13.lastIndexOf(")") + 2).split(" ");
+  const stat14 = await (0, import_promises9.readFile)(`/proc/${pid}/stat`, "utf8").catch(() => null);
+  if (stat14 === null) return null;
+  const fields = stat14.slice(stat14.lastIndexOf(")") + 2).split(" ");
   return fields[19] ?? null;
 }
 async function linuxCommand(pid) {
-  const raw = await (0, import_promises8.readFile)(`/proc/${pid}/cmdline`, "utf8").catch(() => null);
+  const raw = await (0, import_promises9.readFile)(`/proc/${pid}/cmdline`, "utf8").catch(() => null);
   return raw === null ? null : normalizeCommand(raw.replaceAll("\0", " "));
 }
 async function darwinCommand(pid) {
@@ -45183,11 +45459,11 @@ async function mayBeSameProcess(expected, probe = systemProcessProbe) {
 var execFileAsync2 = (0, import_node_util2.promisify)(import_node_child_process3.execFile);
 var packageJsonSchema = external_exports.object({ version: external_exports.string().min(1) });
 function markVersionInUse(bundlePath) {
-  const versionDir = (0, import_node_path4.dirname)(bundlePath);
-  if ((0, import_node_path4.basename)((0, import_node_path4.dirname)(versionDir)) !== "versions") return { [Symbol.dispose]: () => {
+  const versionDir = (0, import_node_path5.dirname)(bundlePath);
+  if ((0, import_node_path5.basename)((0, import_node_path5.dirname)(versionDir)) !== "versions") return { [Symbol.dispose]: () => {
   } };
-  const marker = (0, import_node_path4.join)(versionDir, ".running", String(process.pid));
-  (0, import_node_fs4.mkdirSync)((0, import_node_path4.dirname)(marker), { recursive: true, mode: 448 });
+  const marker = (0, import_node_path5.join)(versionDir, ".running", String(process.pid));
+  (0, import_node_fs4.mkdirSync)((0, import_node_path5.dirname)(marker), { recursive: true, mode: 448 });
   (0, import_node_fs4.writeFileSync)(marker, "");
   const remove = () => (0, import_node_fs4.rmSync)(marker, { force: true });
   process.once("exit", remove);
@@ -45200,39 +45476,39 @@ function markVersionInUse(bundlePath) {
 }
 
 // src/platform/ipc-endpoint.ts
-var import_node_crypto5 = require("crypto");
+var import_node_crypto6 = require("crypto");
 var import_node_fs5 = require("fs");
 var import_node_os = require("os");
-var import_node_path5 = require("path");
+var import_node_path6 = require("path");
 function removeStaleEndpoint(endpoint) {
   if (!endpoint.startsWith("\\\\.\\pipe\\")) (0, import_node_fs5.rmSync)(endpoint, { force: true });
 }
 
 // src/platform/paths.ts
-var import_node_path6 = require("path");
+var import_node_path7 = require("path");
 function runtimePaths(stateDir) {
   return {
     stateDir,
-    lock: (0, import_node_path6.join)(stateDir, "runtime.lock"),
-    machine: (0, import_node_path6.join)(stateDir, "machine.json"),
-    credential: (0, import_node_path6.join)(stateDir, "credential.json"),
-    runs: (0, import_node_path6.join)(stateDir, "runs"),
-    sessions: (0, import_node_path6.join)(stateDir, "sessions"),
-    sockets: (0, import_node_path6.join)(stateDir, "s"),
-    logs: (0, import_node_path6.join)(stateDir, "logs"),
-    tmp: (0, import_node_path6.join)(stateDir, "tmp")
+    lock: (0, import_node_path7.join)(stateDir, "runtime.lock"),
+    machine: (0, import_node_path7.join)(stateDir, "machine.json"),
+    credential: (0, import_node_path7.join)(stateDir, "credential.json"),
+    runs: (0, import_node_path7.join)(stateDir, "runs"),
+    sessions: (0, import_node_path7.join)(stateDir, "sessions"),
+    sockets: (0, import_node_path7.join)(stateDir, "s"),
+    logs: (0, import_node_path7.join)(stateDir, "logs"),
+    tmp: (0, import_node_path7.join)(stateDir, "tmp")
   };
 }
 
 // src/platform/process-memory.ts
 var import_node_child_process4 = require("child_process");
-var import_promises10 = require("fs/promises");
+var import_promises11 = require("fs/promises");
 var import_node_util3 = require("util");
 var execFileAsync3 = (0, import_node_util3.promisify)(import_node_child_process4.execFile);
 var PROBE_TIMEOUT_MS = 2e3;
 async function readProcessRss(pid) {
   if (process.platform === "linux") {
-    const status = await (0, import_promises10.readFile)(`/proc/${pid}/status`, "utf8").catch(() => null);
+    const status = await (0, import_promises11.readFile)(`/proc/${pid}/status`, "utf8").catch(() => null);
     const kilobytes = status === null ? void 0 : /^VmRSS:\s+(\d+)\s+kB$/m.exec(status)?.[1];
     return kilobytes === void 0 ? null : Number(kilobytes) * 1024;
   }
@@ -45249,7 +45525,7 @@ async function readProcessRss(pid) {
 }
 
 // src/platform/runtime-host.ts
-var import_promises11 = require("fs/promises");
+var import_promises12 = require("fs/promises");
 var RUNTIME_HOST_KINDS = ["app", "standalone"];
 
 // src/platform/service/exec.ts
@@ -45264,7 +45540,7 @@ function statusOf(error61) {
   }
   return 1;
 }
-var systemExec = (request2) => new Promise((resolve5) => {
+var systemExec = (request2) => new Promise((resolve6) => {
   const child = (0, import_node_child_process5.execFile)(
     request2.command,
     [...request2.args],
@@ -45275,7 +45551,7 @@ var systemExec = (request2) => new Promise((resolve5) => {
       windowsHide: true
     },
     (error61, stdout, stderr) => {
-      resolve5({ status: statusOf(error61), stdout, stderr });
+      resolve6({ status: statusOf(error61), stdout, stderr });
     }
   );
   child.stdin?.on("error", () => {
@@ -45288,8 +45564,8 @@ init_alan_code();
 
 // src/capabilities/providers/commands.ts
 var import_node_fs6 = require("fs");
-var import_promises15 = require("fs/promises");
-var import_node_path7 = require("path");
+var import_promises16 = require("fs/promises");
+var import_node_path8 = require("path");
 var PROVIDER_COMMANDS = [
   // The engine, not a CLI of its own: `resolveProviderExecutable` finds the bundled one first.
   { backendKind: "alan_code", command: "opencode", name: "Alan Code" },
@@ -45322,8 +45598,8 @@ function pathDelimiter(platform) {
 }
 async function isRunnable(path, platform) {
   try {
-    if (!(await (0, import_promises15.stat)(path)).isFile()) return false;
-    if (platform !== "win32") await (0, import_promises15.access)(path, import_node_fs6.constants.X_OK);
+    if (!(await (0, import_promises16.stat)(path)).isFile()) return false;
+    if (platform !== "win32") await (0, import_promises16.access)(path, import_node_fs6.constants.X_OK);
     return true;
   } catch {
     return false;
@@ -45339,7 +45615,7 @@ async function resolveCommandOnPath(command, env, platform) {
   const extensions = platform === "win32" ? windowsExtensions(command, env) : [""];
   for (const directory of directories) {
     for (const extension of extensions) {
-      const candidate = (0, import_node_path7.join)(directory, `${command}${extension}`);
+      const candidate = (0, import_node_path8.join)(directory, `${command}${extension}`);
       if (await isRunnable(candidate, platform)) return candidate;
     }
   }
@@ -45374,15 +45650,15 @@ function resolveProviderExecutable(provider4, env, platform) {
 
 // src/capabilities/providers/managed.ts
 var import_node_child_process6 = require("child_process");
-var import_node_crypto6 = require("crypto");
-var import_promises16 = require("fs/promises");
-var import_node_path8 = require("path");
+var import_node_crypto7 = require("crypto");
+var import_promises17 = require("fs/promises");
+var import_node_path9 = require("path");
 init_zod();
 var VERSION = /^[0-9]+\.[0-9]+\.[0-9]+(?:[-+][0-9A-Za-z.-]+)?$/;
 var selectedSchema = external_exports.record(external_exports.string(), external_exports.string());
 async function readManagedProviderVersion(file2, backendKind) {
   try {
-    const selected = selectedSchema.parse(JSON.parse(await (0, import_promises16.readFile)(file2, "utf8")));
+    const selected = selectedSchema.parse(JSON.parse(await (0, import_promises17.readFile)(file2, "utf8")));
     const version2 = selected[backendKind];
     return version2 !== void 0 && VERSION.test(version2) ? version2 : null;
   } catch {
@@ -45392,9 +45668,9 @@ async function readManagedProviderVersion(file2, backendKind) {
 
 // ../shared/dist/node/skill-package.js
 var import_node_buffer = require("buffer");
-var import_node_crypto7 = require("crypto");
-var import_promises17 = require("fs/promises");
-var import_node_path9 = require("path");
+var import_node_crypto8 = require("crypto");
+var import_promises18 = require("fs/promises");
+var import_node_path10 = require("path");
 var import_yaml = __toESM(require_dist(), 1);
 init_contracts();
 init_domain();
@@ -45465,7 +45741,7 @@ async function inspectSkillPackage(packageRoot, options = {}) {
   }
   const inspectedFiles = await Promise.all(files.map(readPackageFile));
   inspectedFiles.sort(comparePackageFiles);
-  const parsedMetadata = parseSkillMetadata(inspectedFiles.find((file2) => file2.manifest.path === "SKILL.md")?.bytes, options.expectedName === void 0 ? (0, import_node_path9.basename)(root) : options.expectedName);
+  const parsedMetadata = parseSkillMetadata(inspectedFiles.find((file2) => file2.manifest.path === "SKILL.md")?.bytes, options.expectedName === void 0 ? (0, import_node_path10.basename)(root) : options.expectedName);
   const manifestFiles = inspectedFiles.map((file2) => file2.manifest);
   const diagnostics = [
     ...parsedMetadata.conformance,
@@ -45483,11 +45759,11 @@ async function inspectSkillPackage(packageRoot, options = {}) {
   };
 }
 async function requirePackageRoot(packageRoot) {
-  const root = await (0, import_promises17.realpath)((0, import_node_path9.resolve)(packageRoot)).catch(() => null);
+  const root = await (0, import_promises18.realpath)((0, import_node_path10.resolve)(packageRoot)).catch(() => null);
   if (!root) {
     throw new SkillPackageError("INVALID_PACKAGE_ROOT", "Skill package directory does not exist");
   }
-  const rootStat = await (0, import_promises17.lstat)(root);
+  const rootStat = await (0, import_promises18.lstat)(root);
   if (!rootStat.isDirectory()) {
     throw new SkillPackageError("INVALID_PACKAGE_ROOT", "Skill package root must be a directory");
   }
@@ -45507,13 +45783,13 @@ async function walkPackage(root, ignoredPaths) {
   }
   return files;
   async function walkDirectory(directory) {
-    const entries = await (0, import_promises17.readdir)(directory, { withFileTypes: true });
+    const entries = await (0, import_promises18.readdir)(directory, { withFileTypes: true });
     for (const entry of entries) {
-      const absolutePath = (0, import_node_path9.resolve)(directory, entry.name);
+      const absolutePath = (0, import_node_path10.resolve)(directory, entry.name);
       const normalizedPath = normalizeRelativePath(root, absolutePath);
       if (isIgnored(normalizedPath, entry.name, entry.isDirectory(), ignored2))
         continue;
-      const entryStat = await (0, import_promises17.lstat)(absolutePath);
+      const entryStat = await (0, import_promises18.lstat)(absolutePath);
       if (entryStat.isSymbolicLink()) {
         throw new SkillPackageError("SYMLINK_BLOCKED", `Nested symbolic links are not allowed in Skill packages: ${normalizedPath}`, normalizedPath);
       }
@@ -45576,12 +45852,12 @@ function globToRegExp(pattern) {
   return new RegExp(`${source}(?:/.*)?$`);
 }
 function normalizeRelativePath(root, absolutePath) {
-  const nativeRelativePath = (0, import_node_path9.relative)(root, absolutePath);
-  if (!nativeRelativePath || nativeRelativePath.startsWith(`..${import_node_path9.sep}`) || nativeRelativePath === "..") {
+  const nativeRelativePath = (0, import_node_path10.relative)(root, absolutePath);
+  if (!nativeRelativePath || nativeRelativePath.startsWith(`..${import_node_path10.sep}`) || nativeRelativePath === "..") {
     throw new SkillPackageError("INVALID_PATH", "Skill package path escapes its root");
   }
-  const normalized2 = nativeRelativePath.split(import_node_path9.sep).join("/").normalize("NFC");
-  if (normalized2.includes("\0") || normalized2.includes("\uFFFD") || import_node_path9.posix.isAbsolute(normalized2)) {
+  const normalized2 = nativeRelativePath.split(import_node_path10.sep).join("/").normalize("NFC");
+  if (normalized2.includes("\0") || normalized2.includes("\uFFFD") || import_node_path10.posix.isAbsolute(normalized2)) {
     throw new SkillPackageError("INVALID_PATH", `Invalid Skill package path: ${normalized2}`);
   }
   return normalized2;
@@ -45616,13 +45892,13 @@ function requireSafeFile(path, size, normalizedPaths) {
   }
 }
 function isSecretPath(path) {
-  const name = import_node_path9.posix.basename(path).toLowerCase();
+  const name = import_node_path10.posix.basename(path).toLowerCase();
   if (SECRET_BASENAMES.has(name) || name.startsWith(".env."))
     return true;
   return name.endsWith(".private-key.pem") || name.endsWith(".private-key.key");
 }
 async function readPackageFile(file2) {
-  const bytes = await (0, import_promises17.readFile)(file2.absolutePath);
+  const bytes = await (0, import_promises18.readFile)(file2.absolutePath);
   return {
     bytes,
     manifest: {
@@ -45644,12 +45920,12 @@ function classifyFileKind(path) {
     return "reference";
   if (path.startsWith("assets/"))
     return "asset";
-  if (/^(?:licen[cs]e|copying|notice)(?:\.|$)/i.test(import_node_path9.posix.basename(path)))
+  if (/^(?:licen[cs]e|copying|notice)(?:\.|$)/i.test(import_node_path10.posix.basename(path)))
     return "license";
   return "other";
 }
 function classifyPreview(path, bytes) {
-  const extension = import_node_path9.posix.extname(path).toLowerCase();
+  const extension = import_node_path10.posix.extname(path).toLowerCase();
   if (IMAGE_EXTENSIONS2.has(extension))
     return "image";
   if (bytes.includes(0))
@@ -45753,7 +46029,7 @@ function normalizePackageReference(value) {
   const withoutSuffix = trimmed4.split(/[?#]/, 1)[0];
   if (!withoutSuffix)
     return null;
-  const normalized2 = import_node_path9.posix.normalize(withoutSuffix).replace(/^\.\//, "").normalize("NFC");
+  const normalized2 = import_node_path10.posix.normalize(withoutSuffix).replace(/^\.\//, "").normalize("NFC");
   if (normalized2 === ".." || normalized2.startsWith("../"))
     return null;
   return normalized2;
@@ -45765,7 +46041,7 @@ function comparePackageFiles(left, right) {
   return import_node_buffer.Buffer.compare(import_node_buffer.Buffer.from(left.manifest.path, "utf8"), import_node_buffer.Buffer.from(right.manifest.path, "utf8"));
 }
 function hashPackageTree(files) {
-  const hash2 = (0, import_node_crypto7.createHash)("sha256");
+  const hash2 = (0, import_node_crypto8.createHash)("sha256");
   hash2.update(TREE_HASH_PREFIX);
   for (const file2 of files) {
     const path = import_node_buffer.Buffer.from(file2.path, "utf8");
@@ -45778,7 +46054,7 @@ function hashPackageTree(files) {
   return `sha256:${hash2.digest("hex")}`;
 }
 function sha256(bytes) {
-  return `sha256:${(0, import_node_crypto7.createHash)("sha256").update(bytes).digest("hex")}`;
+  return `sha256:${(0, import_node_crypto8.createHash)("sha256").update(bytes).digest("hex")}`;
 }
 function uint322(value) {
   const buffer = import_node_buffer.Buffer.allocUnsafe(4);
@@ -45792,22 +46068,39 @@ function uint642(value) {
 }
 
 // src/capabilities/skills/store.ts
-var import_promises18 = require("fs/promises");
-var import_node_path10 = require("path");
+var import_promises19 = require("fs/promises");
+var import_node_path11 = require("path");
+
+// ../shared/dist/node/alan-skill-identity.js
+var import_node_crypto9 = require("crypto");
+var ALAN_SKILL_NAMESPACE = "ec71d99b-d207-4ca2-a9eb-3a7bed4a73fd";
+function uuidV5(name, namespace) {
+  const bytes = (0, import_node_crypto9.createHash)("sha1").update(Buffer.from(namespace.replaceAll("-", ""), "hex")).update(name, "utf8").digest().subarray(0, 16);
+  bytes[6] = bytes[6] & 15 | 80;
+  bytes[8] = bytes[8] & 63 | 128;
+  const hex3 = bytes.toString("hex");
+  return `${hex3.slice(0, 8)}-${hex3.slice(8, 12)}-${hex3.slice(12, 16)}-${hex3.slice(16, 20)}-${hex3.slice(20)}`;
+}
+function alanSkillId(slug) {
+  return uuidV5(`alan:${slug}`, ALAN_SKILL_NAMESPACE);
+}
+
+// src/capabilities/skills/store.ts
 init_runtime_v2();
 init_zod();
-function skillsLayout(stateDir) {
-  const root = (0, import_node_path10.join)(stateDir, "skills");
+function skillsLayout(stateDir, home) {
+  const root = (0, import_node_path11.join)(stateDir, "skills");
   return {
     root,
-    installedFile: (0, import_node_path10.join)(root, "installed.json"),
-    localFile: (0, import_node_path10.join)(root, "local.json"),
-    versionsDir: (0, import_node_path10.join)(root, "versions"),
-    tmpDir: (0, import_node_path10.join)(root, "tmp")
+    installedFile: (0, import_node_path11.join)(root, "installed.json"),
+    localFile: (0, import_node_path11.join)(root, "local.json"),
+    versionsDir: (0, import_node_path11.join)(root, "versions"),
+    tmpDir: (0, import_node_path11.join)(root, "tmp"),
+    nativeDir: home === void 0 || home === "" ? null : (0, import_node_path11.join)(home, ".agents", "skills")
   };
 }
 function packageDirectory(layout, versionId) {
-  return (0, import_node_path10.join)(layout.versionsDir, versionId);
+  return (0, import_node_path11.join)(layout.versionsDir, versionId);
 }
 var installedFileSchema = external_exports.object({ skills: external_exports.array(desiredMachineSkillSchema) });
 async function readInstalledSkills(layout) {
@@ -45834,7 +46127,7 @@ async function readLocalSkills(layout) {
 async function isLocalSkillCurrent(entry, contentHash, ignoredPaths) {
   if (entry.contentHash !== contentHash) return false;
   try {
-    if (await (0, import_promises18.realpath)(entry.path) !== entry.path) return false;
+    if (await (0, import_promises19.realpath)(entry.path) !== entry.path) return false;
     const inspected = await inspectSkillPackage(entry.path, { expectedName: null, ignoredPaths });
     return inspected.contentHash === contentHash;
   } catch {
@@ -45849,7 +46142,7 @@ async function resolveLocalSkill(local, invocation) {
 }
 async function hasSkillFile(directory) {
   try {
-    return (await (0, import_promises18.stat)((0, import_node_path10.join)(directory, "SKILL.md"))).isFile();
+    return (await (0, import_promises19.stat)((0, import_node_path11.join)(directory, "SKILL.md"))).isFile();
   } catch {
     return false;
   }
@@ -45864,6 +46157,17 @@ async function isIntact(layout, skill) {
     return false;
   }
 }
+async function resolveNativeBuiltIn(layout, invocation) {
+  const slug = invocation.displayName;
+  if (layout.nativeDir === null || invocation.skillId !== alanSkillId(slug)) return null;
+  const directory = (0, import_node_path11.join)(layout.nativeDir, slug);
+  try {
+    await inspectSkillPackage(directory, { expectedName: slug });
+    return { packageDirectory: directory };
+  } catch {
+    return null;
+  }
+}
 async function resolveSkillInvocations(layout, invocations) {
   if (invocations.length === 0) return { kind: "resolved", skills: [] };
   const installed = await readInstalledSkills(layout);
@@ -45882,22 +46186,24 @@ async function resolveSkillInvocations(layout, invocations) {
     );
     if (skill !== void 0 && await isIntact(layout, skill)) {
       resolved.push({ packageDirectory: packageDirectory(layout, skill.versionId) });
-    } else {
-      missing.push(invocation.displayName);
+      continue;
     }
+    const native = await resolveNativeBuiltIn(layout, invocation);
+    if (native === null) missing.push(invocation.displayName);
+    else resolved.push(native);
   }
   return missing.length === 0 ? { kind: "resolved", skills: resolved } : { kind: "missing", names: missing };
 }
 
 // src/capabilities/workspace/index.ts
-var import_node_path13 = require("path");
+var import_node_path14 = require("path");
 
 // src/capabilities/workspace/approved-paths.ts
-var import_promises19 = require("fs/promises");
+var import_promises20 = require("fs/promises");
 init_zod();
 
 // src/capabilities/workspace/paths.ts
-var import_node_path11 = require("path");
+var import_node_path12 = require("path");
 function stripWin32Namespace(path) {
   if (/^\\\\\?\\UNC\\/i.test(path)) return `\\\\${path.slice(8)}`;
   if (path.startsWith("\\\\?\\")) return path.slice(4);
@@ -45905,15 +46211,15 @@ function stripWin32Namespace(path) {
 }
 function comparablePath(path, platform) {
   if (platform === "win32") {
-    const normalized3 = import_node_path11.win32.normalize(stripWin32Namespace(path).replaceAll("/", "\\"));
+    const normalized3 = import_node_path12.win32.normalize(stripWin32Namespace(path).replaceAll("/", "\\"));
     const trimmed4 = normalized3.length > 3 || !/^[a-z]:\\$/i.test(normalized3) ? normalized3.replace(/\\+$/, "") : normalized3;
     return trimmed4.toLowerCase();
   }
-  const normalized2 = import_node_path11.posix.normalize(path);
+  const normalized2 = import_node_path12.posix.normalize(path);
   return normalized2.length > 1 ? normalized2.replace(/\/+$/, "") : normalized2;
 }
 function isAbsoluteFor(path, platform) {
-  return platform === "win32" ? import_node_path11.win32.isAbsolute(path) : import_node_path11.posix.isAbsolute(path);
+  return platform === "win32" ? import_node_path12.win32.isAbsolute(path) : import_node_path12.posix.isAbsolute(path);
 }
 function isWithin(root, candidate, platform) {
   const separator = platform === "win32" ? "\\" : "/";
@@ -45931,7 +46237,7 @@ var storeSchema = external_exports.object({
 });
 async function realpathOrNull(path) {
   try {
-    return await (0, import_promises19.realpath)(path);
+    return await (0, import_promises20.realpath)(path);
   } catch (error61) {
     const code = errnoCode(error61);
     if (code === "ENOENT" || code === "ENOTDIR" || code === "EACCES" || code === "EPERM") {
@@ -45990,9 +46296,9 @@ async function openApprovedPaths(options) {
 }
 
 // src/capabilities/workspace/locks.ts
-var import_node_crypto8 = require("crypto");
-var import_promises20 = require("fs/promises");
-var import_node_path12 = require("path");
+var import_node_crypto10 = require("crypto");
+var import_promises21 = require("fs/promises");
+var import_node_path13 = require("path");
 init_zod();
 var LOCK_FORMAT = 1;
 var EXCLUSIVE_FILE = "exclusive.json";
@@ -46007,12 +46313,12 @@ var ownerSchema = external_exports.object({
   since: external_exports.number().int().nonnegative()
 });
 function repositoryLockKey(commonDir, platform) {
-  return (0, import_node_crypto8.createHash)("sha256").update(comparablePath(commonDir, platform)).digest("hex").slice(0, 32);
+  return (0, import_node_crypto10.createHash)("sha256").update(comparablePath(commonDir, platform)).digest("hex").slice(0, 32);
 }
 async function readOwner(path) {
   let text2;
   try {
-    text2 = await (0, import_promises20.readFile)(path, "utf8");
+    text2 = await (0, import_promises21.readFile)(path, "utf8");
   } catch (error61) {
     if (errnoCode(error61) === "ENOENT") return { kind: "missing" };
     return { kind: "unreadable" };
@@ -46033,7 +46339,7 @@ async function removeIfSame(path, expected) {
     if (current.kind !== "owner" || current.owner.since !== expected.since) return;
     if (current.owner.pid !== expected.pid || current.owner.holder !== expected.holder) return;
   }
-  await (0, import_promises20.unlink)(path).catch((error61) => {
+  await (0, import_promises21.unlink)(path).catch((error61) => {
     if (errnoCode(error61) !== "ENOENT") throw error61;
   });
 }
@@ -46058,7 +46364,7 @@ function openRepositoryLocks(options) {
       await removeIfSame(path, read.owner);
       return null;
     }
-    const age = await (0, import_promises20.stat)(path).then(
+    const age = await (0, import_promises21.stat)(path).then(
       (info) => clock.now() - info.mtimeMs,
       () => 0
     );
@@ -46072,13 +46378,13 @@ function openRepositoryLocks(options) {
   });
   const folder = async (commonDir) => {
     const key = repositoryLockKey(commonDir, platform);
-    const dir = (0, import_node_path12.join)(options.dir, key);
-    await (0, import_promises20.mkdir)(dir, { recursive: true, mode: 448 });
+    const dir = (0, import_node_path13.join)(options.dir, key);
+    await (0, import_promises21.mkdir)(dir, { recursive: true, mode: 448 });
     return { key, dir };
   };
   const createExclusive = async (path, owner) => {
     try {
-      const handle = await (0, import_promises20.open)(path, "wx", 384);
+      const handle = await (0, import_promises21.open)(path, "wx", 384);
       try {
         await handle.writeFile(JSON.stringify(owner));
       } finally {
@@ -46091,10 +46397,10 @@ function openRepositoryLocks(options) {
     }
   };
   const liveRun = async (dir) => {
-    const entries = await (0, import_promises20.readdir)(dir);
+    const entries = await (0, import_promises21.readdir)(dir);
     for (const entry of entries) {
       if (!entry.startsWith(RUN_FILE_PREFIX)) continue;
-      const holder = await heldBy((0, import_node_path12.join)(dir, entry));
+      const holder = await heldBy((0, import_node_path13.join)(dir, entry));
       if (holder !== null) return holder;
     }
     return null;
@@ -46102,7 +46408,7 @@ function openRepositoryLocks(options) {
   return {
     tryExclusive: async (commonDir, operationId) => {
       const { key, dir } = await folder(commonDir);
-      const path = (0, import_node_path12.join)(dir, EXCLUSIVE_FILE);
+      const path = (0, import_node_path13.join)(dir, EXCLUSIVE_FILE);
       const owner = await self(operationId);
       if (!await createExclusive(path, owner)) {
         const holder = await heldBy(path);
@@ -46120,11 +46426,11 @@ function openRepositoryLocks(options) {
     },
     tryShared: async (commonDir, runId) => {
       const { key, dir } = await folder(commonDir);
-      const file2 = `${RUN_FILE_PREFIX}${(0, import_node_crypto8.createHash)("sha256").update(runId).digest("hex").slice(0, 32)}.json`;
-      const path = (0, import_node_path12.join)(dir, file2);
+      const file2 = `${RUN_FILE_PREFIX}${(0, import_node_crypto10.createHash)("sha256").update(runId).digest("hex").slice(0, 32)}.json`;
+      const path = (0, import_node_path13.join)(dir, file2);
       const owner = await self(runId);
       await writeJsonFileAtomic(path, owner);
-      const operation = await heldBy((0, import_node_path12.join)(dir, EXCLUSIVE_FILE));
+      const operation = await heldBy((0, import_node_path13.join)(dir, EXCLUSIVE_FILE));
       if (operation !== null) {
         await removeIfSame(path, owner);
         return { kind: "busy", holder: operation };
@@ -46136,33 +46442,33 @@ function openRepositoryLocks(options) {
 
 // src/cli/config.ts
 var import_node_os7 = require("os");
-var import_node_path23 = require("path");
+var import_node_path27 = require("path");
 init_zod();
 
 // src/client/locate.ts
-var import_node_path14 = require("path");
+var import_node_path15 = require("path");
 var RUNTIME_PROFILES = ["production", "staging", "development", "local"];
 function defaultStateDir({ profile, platform, home, env }) {
   if (platform === "win32") {
-    return (0, import_node_path14.join)(env.LOCALAPPDATA ?? (0, import_node_path14.join)(home, "AppData", "Local"), "Alan", profile);
+    return (0, import_node_path15.join)(env.LOCALAPPDATA ?? (0, import_node_path15.join)(home, "AppData", "Local"), "Alan", profile);
   }
-  return (0, import_node_path14.join)(env.XDG_STATE_HOME ?? (0, import_node_path14.join)(home, ".local", "state"), "alan", profile);
+  return (0, import_node_path15.join)(env.XDG_STATE_HOME ?? (0, import_node_path15.join)(home, ".local", "state"), "alan", profile);
 }
 function defaultInstallDir({ platform, home, env }) {
   if (platform === "win32") {
-    return (0, import_node_path14.join)(env.LOCALAPPDATA ?? (0, import_node_path14.join)(home, "AppData", "Local"), "Alan", "runtime");
+    return (0, import_node_path15.join)(env.LOCALAPPDATA ?? (0, import_node_path15.join)(home, "AppData", "Local"), "Alan", "runtime");
   }
-  return (0, import_node_path14.join)(env.XDG_DATA_HOME ?? (0, import_node_path14.join)(home, ".local", "share"), "alan", "runtime");
+  return (0, import_node_path15.join)(env.XDG_DATA_HOME ?? (0, import_node_path15.join)(home, ".local", "share"), "alan", "runtime");
 }
 
 // src/sessions/index.ts
-var import_node_crypto11 = require("crypto");
-var import_promises31 = require("fs/promises");
+var import_node_crypto15 = require("crypto");
+var import_promises35 = require("fs/promises");
 var import_node_os6 = require("os");
-var import_node_path22 = require("path");
+var import_node_path26 = require("path");
 
 // src/holder/control-client.ts
-var import_node_crypto9 = require("crypto");
+var import_node_crypto11 = require("crypto");
 var import_node_net = require("net");
 
 // src/holder/ndjson.ts
@@ -46325,12 +46631,48 @@ function createProviderDrivers(options) {
   );
 }
 
+// src/holder/engine-records.ts
+var import_node_path16 = require("path");
+init_zod();
+var ENGINES_FILE = "engines.json";
+var engineRecordSchema = external_exports.object({
+  pid: external_exports.number().int().positive(),
+  startedAt: external_exports.string().min(1),
+  spawnedAt: external_exports.number().int().nonnegative()
+});
+var engineRecordsSchema = external_exports.object({ engines: external_exports.array(engineRecordSchema) });
+function engineRecordsPath(sessionDir) {
+  return (0, import_node_path16.join)(sessionDir, ENGINES_FILE);
+}
+function recordSpawnedEngines(path, clock, log) {
+  const live = /* @__PURE__ */ new Map();
+  let writes = Promise.resolve();
+  const save = () => {
+    const engines = [...live.values()];
+    writes = writes.then(() => writeJsonFileAtomic(path, { engines })).catch((error61) => log.warn("holder.engine_record_failed", { error: error61 }));
+  };
+  return onCliSpawned((child) => {
+    const pid = child.pid;
+    if (pid === void 0) return;
+    const spawnedAt = clock.now();
+    const exited = () => child.exitCode !== null || child.signalCode !== null;
+    child.once("exit", () => {
+      if (live.delete(pid)) save();
+    });
+    void readProcessIdentity(pid).then((identity) => {
+      if (identity === null || exited()) return;
+      live.set(pid, { pid, startedAt: identity.startedAt, spawnedAt });
+      save();
+    });
+  });
+}
+
 // src/holder/mcp-credential.ts
 function createConversationMcpAuthorization(options) {
   let held;
-  return async (signal) => {
+  let minting;
+  const mint = async (signal) => {
     const now = options.now();
-    if (held !== void 0 && now < held.refreshAt) return held.authorization;
     try {
       const credential = await options.mint(signal);
       const expiresAt = Date.parse(credential.expiresAt);
@@ -46345,11 +46687,18 @@ function createConversationMcpAuthorization(options) {
       return held !== void 0 && now < held.expiresAt ? held.authorization : void 0;
     }
   };
+  return async (signal) => {
+    if (held !== void 0 && options.now() < held.refreshAt) return held.authorization;
+    minting ??= mint(signal).finally(() => {
+      minting = void 0;
+    });
+    return minting;
+  };
 }
 
 // src/holder/run-inputs.ts
-var import_promises25 = require("fs/promises");
-var import_node_path15 = require("path");
+var import_promises28 = require("fs/promises");
+var import_node_path17 = require("path");
 var NO_RUN_INPUTS = {
   attachments: [],
   providerEnv: {},
@@ -46362,18 +46711,18 @@ function safeFilename(filename) {
   return safe || "attachment";
 }
 async function prepareRunInputs(spec, { source, tmpDir, signal, skills = [] }) {
-  const dir = (0, import_node_path15.join)(tmpDir, "runs", spec.runId);
+  const dir = (0, import_node_path17.join)(tmpDir, "runs", spec.runId);
   const cleanup = async () => {
-    await (0, import_promises25.rm)(dir, { recursive: true, force: true });
+    await (0, import_promises28.rm)(dir, { recursive: true, force: true });
   };
   try {
     const credential = await source.fetchProviderCredential(spec.runId, signal);
     const attachments = [];
-    if (spec.attachments?.length) await (0, import_promises25.mkdir)(dir, { recursive: true, mode: 448 });
+    if (spec.attachments?.length) await (0, import_promises28.mkdir)(dir, { recursive: true, mode: 448 });
     for (const [index, attachment] of (spec.attachments ?? []).entries()) {
       const bytes = await source.downloadAttachment(spec.runId, attachment.id, signal);
-      const path = (0, import_node_path15.join)(dir, `${index}-${safeFilename(attachment.filename)}`);
-      await (0, import_promises25.writeFile)(path, bytes, { mode: 384 });
+      const path = (0, import_node_path17.join)(dir, `${index}-${safeFilename(attachment.filename)}`);
+      await (0, import_promises28.writeFile)(path, bytes, { mode: 384 });
       attachments.push({
         id: attachment.id,
         kind: attachment.kind,
@@ -46386,7 +46735,13 @@ async function prepareRunInputs(spec, { source, tmpDir, signal, skills = [] }) {
         ...attachment.height === void 0 ? {} : { height: attachment.height }
       });
     }
-    return { attachments, providerEnv: credential.env, skills, [Symbol.asyncDispose]: cleanup };
+    return {
+      attachments,
+      providerEnv: credential.env,
+      ...credential.codex === void 0 ? {} : { codex: credential.codex },
+      skills,
+      [Symbol.asyncDispose]: cleanup
+    };
   } catch (error61) {
     await cleanup();
     throw error61;
@@ -46394,29 +46749,30 @@ async function prepareRunInputs(spec, { source, tmpDir, signal, skills = [] }) {
 }
 
 // src/holder/serve.ts
-var import_node_crypto10 = require("crypto");
+var import_node_crypto14 = require("crypto");
 var import_node_fs10 = require("fs");
 var import_node_net2 = require("net");
+var import_node_path25 = require("path");
 init_runtime_v2();
 
 // src/holder/admission.ts
 var import_node_fs8 = require("fs");
-var import_promises28 = require("fs/promises");
+var import_promises32 = require("fs/promises");
 var import_node_os5 = require("os");
-var import_node_path19 = require("path");
+var import_node_path22 = require("path");
 init_constants();
 
 // ../shared/dist/node/local-workspace.js
 var import_node_fs7 = require("fs");
 var import_node_os4 = require("os");
-var import_node_path16 = require("path");
+var import_node_path18 = require("path");
 function resolveAlanDefaultWorkspacePath(homeDirectory = (0, import_node_os4.homedir)()) {
-  return (0, import_node_path16.join)(homeDirectory, ".alan", "workspace");
+  return (0, import_node_path18.join)(homeDirectory, ".alan", "workspace");
 }
 
 // src/holder/admission-relocation.ts
-var import_promises26 = require("fs/promises");
-var import_node_path17 = require("path");
+var import_promises29 = require("fs/promises");
+var import_node_path19 = require("path");
 var MAX_RELOCATION_CANDIDATES = 200;
 var RELOCATION_BUDGET_MS = 2e4;
 function repositoryIdentity(url2) {
@@ -46451,8 +46807,8 @@ async function originIdentity(git, path, signal) {
 }
 async function childDirectories(parent, limit) {
   try {
-    const entries = await (0, import_promises26.readdir)(parent, { withFileTypes: true });
-    return entries.filter((entry) => entry.isDirectory()).slice(0, limit).map((entry) => (0, import_node_path17.join)(parent, entry.name));
+    const entries = await (0, import_promises29.readdir)(parent, { withFileTypes: true });
+    return entries.filter((entry) => entry.isDirectory()).slice(0, limit).map((entry) => (0, import_node_path19.join)(parent, entry.name));
   } catch {
     return [];
   }
@@ -46460,7 +46816,7 @@ async function childDirectories(parent, limit) {
 async function candidateFolders(search) {
   const roots = /* @__PURE__ */ new Map();
   for (const path of [search.missingPath, ...search.approvedWorkspacePaths]) {
-    const parent = (0, import_node_path17.dirname)((0, import_node_path17.resolve)(path));
+    const parent = (0, import_node_path19.dirname)((0, import_node_path19.resolve)(path));
     roots.set(comparablePath(parent, search.platform), parent);
   }
   const candidates2 = /* @__PURE__ */ new Map();
@@ -46486,9 +46842,107 @@ async function discoverRelocatedWorkspace(search) {
   return matches[0] ?? null;
 }
 
+// src/holder/checkout-refresh.ts
+var import_node_crypto13 = require("crypto");
+var import_promises30 = require("fs/promises");
+var import_node_path20 = require("path");
+function short(sha) {
+  return sha.slice(0, 12);
+}
+function staleLine(path, snapshot2, tip) {
+  const checkout = snapshot2 === void 0 ? "is the environment snapshot's checkout" : `is the environment snapshot's checkout of ${snapshot2.branch} (commit ${short(snapshot2.head)})`;
+  const base = snapshot2 === void 0 ? "its upstream" : `origin/${snapshot2.base}`;
+  const remote = tip === void 0 ? "may be ahead" : `is ahead at ${short(tip)}`;
+  return `Note: ${path} ${checkout}; ${base} ${remote}. Run \`git pull --ff-only\` there before relying on its files.`;
+}
+async function claimOnce(dir, name) {
+  try {
+    await (0, import_promises30.mkdir)(dir, { recursive: true, mode: 448 });
+    await (await (0, import_promises30.open)((0, import_node_path20.join)(dir, name), "wx")).close();
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function fastForward(freshness, operationId, deps, signal) {
+  var _stack = [];
+  try {
+    const { path: cwd, snapshot: snapshot2, tip } = freshness;
+    const attempt = await deps.locks.tryExclusive(snapshot2.commonDir, operationId);
+    if (attempt.kind === "busy") return false;
+    const _lock = __using(_stack, attempt.lock, true);
+    const now = await readCheckoutStatus(deps.git, cwd, signal);
+    if (now === null || now.dirty || now.head !== snapshot2.head || now.branch !== snapshot2.branch) {
+      return false;
+    }
+    const git = (args) => deps.git.run({ cwd, args }, signal);
+    if ((await git(["switch", "--quiet", "--detach", tip])).exitCode !== 0) return false;
+    const moved = await git(["update-ref", `refs/heads/${snapshot2.branch}`, tip, snapshot2.head]);
+    const back = await git(["switch", "--quiet", snapshot2.branch]);
+    return moved.exitCode === 0 && back.exitCode === 0;
+  } catch (_) {
+    var _error = _, _hasError = true;
+  } finally {
+    var _promise2 = __callDispose(_stack, _error, _hasError);
+    _promise2 && await _promise2;
+  }
+}
+async function atFirstLease(freshness, spec, deps, signal) {
+  const first = await claimOnce(
+    (0, import_node_path20.join)(deps.dir, "leased"),
+    (0, import_node_crypto13.createHash)("sha256").update(freshness.path).digest("hex")
+  );
+  switch (freshness.state) {
+    case "current":
+    case "kept":
+      return "none";
+    case "checking":
+    case "failed":
+      return "noted";
+    case "behind":
+      return first && freshness.fetched && await fastForward(freshness, `refresh-${spec.runId}`, deps, signal) ? "moved" : "noted";
+  }
+}
+function lineFor(freshness) {
+  switch (freshness.state) {
+    case "behind":
+      return staleLine(freshness.path, freshness.snapshot, freshness.tip);
+    case "failed":
+      return staleLine(freshness.path, freshness.snapshot);
+    default:
+      return staleLine(freshness.path, void 0);
+  }
+}
+async function checkoutsOf(spec, leaseTargets) {
+  if (leaseTargets.length > 0 || spec.projectPath === void 0) return [...leaseTargets];
+  return checkoutsUnder(spec.projectPath);
+}
+function createCheckoutRefresh(deps) {
+  return async (spec, leaseTargets, signal) => {
+    if (spec.providerSessionId !== void 0) return void 0;
+    if (!await claimOnce((0, import_node_path20.join)(deps.dir, "conversations"), spec.conversationId)) return void 0;
+    const lines = [];
+    for (const target of await checkoutsOf(spec, leaseTargets)) {
+      const freshness = await readCheckoutFreshness(deps.dir, target);
+      if (freshness === null) continue;
+      const outcome2 = await atFirstLease(freshness, spec, deps, signal).catch(
+        () => "noted"
+      );
+      if (outcome2 === "noted") lines.push(lineFor(freshness));
+      deps.log.info("workspace.refresh", {
+        runId: spec.runId,
+        path: freshness.path,
+        state: freshness.state,
+        outcome: outcome2
+      });
+    }
+    return lines.length === 0 ? void 0 : lines.join("\n");
+  };
+}
+
 // src/holder/lease.ts
-var import_promises27 = require("fs/promises");
-var import_node_path18 = require("path");
+var import_promises31 = require("fs/promises");
+var import_node_path21 = require("path");
 var LEASE_CHECK_EVERY_MS = 5e3;
 var MAX_TRANSIENT_FAILURES = 3;
 var BACKOFF_BASE_MS = 1e3;
@@ -46502,8 +46956,8 @@ function identityFailure(code, workspacePath) {
   return { code, problemCode: "app.workspace.missing", message: MESSAGES[code], workspacePath };
 }
 async function fileIdentity(path) {
-  const canonical = await (0, import_promises27.realpath)(path);
-  const info = await (0, import_promises27.stat)(canonical, { bigint: true });
+  const canonical = await (0, import_promises31.realpath)(path);
+  const info = await (0, import_promises31.stat)(canonical, { bigint: true });
   return `${canonical}:${info.dev}:${info.ino}`;
 }
 async function snapshot(git, path, signal) {
@@ -46522,7 +46976,7 @@ async function snapshot(git, path, signal) {
       workspace: await fileIdentity(path),
       repository: await fileIdentity(commonDir),
       worktree: await fileIdentity(gitDir),
-      commonDir: await (0, import_promises27.realpath)(commonDir)
+      commonDir: await (0, import_promises31.realpath)(commonDir)
     };
   } catch {
     return null;
@@ -46535,7 +46989,7 @@ async function gitValue(git, path, args, signal) {
 }
 async function pathExists(path) {
   try {
-    await (0, import_promises27.stat)(path);
+    await (0, import_promises31.stat)(path);
     return true;
   } catch (error61) {
     return errnoCode(error61) !== "ENOENT" && errnoCode(error61) !== "ENOTDIR";
@@ -46544,19 +46998,19 @@ async function pathExists(path) {
 async function hasGitMarker(path) {
   let directory;
   try {
-    directory = await (0, import_promises27.realpath)(path);
+    directory = await (0, import_promises31.realpath)(path);
   } catch {
     return true;
   }
   for (; ; ) {
     try {
-      await (0, import_promises27.stat)((0, import_node_path18.join)(directory, ".git"));
+      await (0, import_promises31.stat)((0, import_node_path21.join)(directory, ".git"));
       return true;
     } catch (error61) {
       const code = errnoCode(error61);
       if (code !== "ENOENT" && code !== "ENOTDIR") return true;
     }
-    const parent = (0, import_node_path18.dirname)(directory);
+    const parent = (0, import_node_path21.dirname)(directory);
     if (parent === directory) return false;
     directory = parent;
   }
@@ -46720,7 +47174,7 @@ function volumeRoot(path) {
 }
 async function exists(path) {
   try {
-    await (0, import_promises28.stat)(path);
+    await (0, import_promises32.stat)(path);
     return true;
   } catch {
     return false;
@@ -46728,10 +47182,10 @@ async function exists(path) {
 }
 async function inspectReadiness(path) {
   try {
-    if (!(await (0, import_promises28.stat)(path)).isDirectory()) {
+    if (!(await (0, import_promises32.stat)(path)).isDirectory()) {
       return { ready: false, missing: true, message: MESSAGES2.missing };
     }
-    await (0, import_promises28.access)(path, import_node_fs8.constants.R_OK | import_node_fs8.constants.W_OK | import_node_fs8.constants.X_OK);
+    await (0, import_promises32.access)(path, import_node_fs8.constants.R_OK | import_node_fs8.constants.W_OK | import_node_fs8.constants.X_OK);
     return { ready: true };
   } catch (error61) {
     const code = errnoCode(error61) ?? "";
@@ -46809,8 +47263,8 @@ async function admitDefaultWorkspace(spec, context, skills) {
   const { env } = context;
   const path = resolveAlanDefaultWorkspacePath(env.HOME || env.USERPROFILE || (0, import_node_os5.homedir)());
   try {
-    await (0, import_promises28.mkdir)(path, { recursive: true, mode: 448 });
-    await (0, import_promises28.access)(path, import_node_fs8.constants.R_OK | import_node_fs8.constants.W_OK | import_node_fs8.constants.X_OK);
+    await (0, import_promises32.mkdir)(path, { recursive: true, mode: 448 });
+    await (0, import_promises32.access)(path, import_node_fs8.constants.R_OK | import_node_fs8.constants.W_OK | import_node_fs8.constants.X_OK);
     return {
       kind: "admitted",
       spec: { ...spec, projectPath: path },
@@ -46875,28 +47329,34 @@ var PROBE_TIMEOUT_MS2 = 5e3;
 function createHolderWorkspace(machine, clock, log) {
   const platform = machine.platform ?? process.platform;
   const git = createGitRunner({ env: machine.env, platform, localTimeoutMs: PROBE_TIMEOUT_MS2 });
+  const locks = openRepositoryLocks({ dir: (0, import_node_path22.join)(machine.stateDir, "locks"), clock, platform });
   return {
     admission: {
       env: machine.env,
       git,
       platform,
-      skills: skillsLayout(machine.stateDir),
+      skills: skillsLayout(
+        machine.stateDir,
+        machine.env.HOME || machine.env.USERPROFILE || (0, import_node_os5.homedir)()
+      ),
       approvedRoots: async () => {
         const approved = await openApprovedPaths({
-          file: (0, import_node_path19.join)(machine.stateDir, "workspaces.json"),
+          file: (0, import_node_path22.join)(machine.stateDir, "workspaces.json"),
           log,
           platform
         });
         return approved.roots();
       }
     },
-    lease: {
-      git,
-      locks: openRepositoryLocks({ dir: (0, import_node_path19.join)(machine.stateDir, "locks"), clock, platform }),
-      clock,
-      log,
-      platform
-    }
+    lease: { git, locks, clock, log, platform },
+    ...machine.refreshesFirstCheckout === true ? {
+      refreshFirstCheckout: createCheckoutRefresh({
+        git,
+        locks,
+        log,
+        dir: (0, import_node_path22.join)(machine.stateDir, "checkout-freshness")
+      })
+    } : {}
   };
 }
 
@@ -46922,7 +47382,7 @@ async function respondToTurn(runningRunId, gate, driver, request2) {
 }
 
 // src/holder/session-facts.ts
-var import_promises29 = require("fs/promises");
+var import_promises33 = require("fs/promises");
 var CLI_RSS_CACHE_MS = 1e4;
 var LOGIN_PROBLEM_PREFIX = "cli.auth.";
 function isLoginFailure(result) {
@@ -46948,8 +47408,8 @@ function createSessionFacts(options) {
     const path = await resolveCommandOnPath(command, env, platform);
     if (path === null) return null;
     try {
-      const real = await (0, import_promises29.realpath)(path);
-      const info = await (0, import_promises29.stat)(real);
+      const real = await (0, import_promises33.realpath)(path);
+      const info = await (0, import_promises33.stat)(real);
       return { command, key: `${real}:${info.ino}:${info.size}:${info.mtimeMs}` };
     } catch {
       return null;
@@ -47036,23 +47496,23 @@ function createSessionFacts(options) {
 init_acp2();
 
 // src/run-log/directory.ts
-var import_promises30 = require("fs/promises");
-var import_node_path20 = require("path");
+var import_promises34 = require("fs/promises");
+var import_node_path23 = require("path");
 init_runtime_v2();
 init_zod();
 var runMetaSchema = external_exports.object({ runId: runIdSchema, conversationId: conversationIdSchema });
 function runDirectory(runsDir, runId) {
-  const dir = (0, import_node_path20.join)(runsDir, runId);
+  const dir = (0, import_node_path23.join)(runsDir, runId);
   return {
     dir,
-    log: (0, import_node_path20.join)(dir, "log.jsonl"),
-    upload: (0, import_node_path20.join)(dir, "upload.json"),
-    meta: (0, import_node_path20.join)(dir, "run.json")
+    log: (0, import_node_path23.join)(dir, "log.jsonl"),
+    upload: (0, import_node_path23.join)(dir, "upload.json"),
+    meta: (0, import_node_path23.join)(dir, "run.json")
   };
 }
 async function isRunClaimed(runsDir, runId) {
   try {
-    return (await (0, import_promises30.stat)(runDirectory(runsDir, runId).log)).size > 0;
+    return (await (0, import_promises34.stat)(runDirectory(runsDir, runId).log)).size > 0;
   } catch (error61) {
     if (errnoCode(error61) === "ENOENT") return false;
     throw error61;
@@ -47088,7 +47548,7 @@ var decoder = new TextDecoder();
 
 // src/run-log/writer.ts
 var import_node_fs9 = require("fs");
-var import_node_path21 = require("path");
+var import_node_path24 = require("path");
 init_runtime_v2();
 function lastSeq(fd, size) {
   for (const length of tailWindows(size)) {
@@ -47104,7 +47564,7 @@ function lastSeq(fd, size) {
   throw new RuntimeFault("record_too_large", "Run log tail record is larger than any record");
 }
 function openRunLog(path, clock) {
-  (0, import_node_fs9.mkdirSync)((0, import_node_path21.dirname)(path), { recursive: true, mode: 448 });
+  (0, import_node_fs9.mkdirSync)((0, import_node_path24.dirname)(path), { recursive: true, mode: 448 });
   const fd = (0, import_node_fs9.openSync)(path, "a+", 384);
   let size = (0, import_node_fs9.fstatSync)(fd).size;
   let seq = lastSeq(fd, size);
@@ -47282,6 +47742,10 @@ function fitForRunLog(update) {
 async function runWithInputs({ spec, leaseTargets, skills }, context, sink, signal) {
   var _stack = [];
   try {
+    const refreshed = context.workspace?.refreshFirstCheckout?.(spec, leaseTargets, signal).catch((error61) => {
+      context.log.warn("workspace.refresh_failed", { runId: spec.runId, error: error61 });
+      return void 0;
+    });
     let inputs;
     try {
       inputs = context.inputs ? await prepareRunInputs(spec, { ...context.inputs, signal, skills }) : { ...NO_RUN_INPUTS, skills };
@@ -47292,8 +47756,14 @@ async function runWithInputs({ spec, leaseTargets, skills }, context, sink, sign
         message: `Could not fetch this run's attachments or provider credential: ${error61 instanceof Error ? error61.message : String(error61)}`
       };
     }
+    const turnContext = await refreshed;
     const prepared = __using(_stack, inputs, true);
-    const run = (turnSink, turnSignal) => context.driver.runTurn(spec, turnSink, turnSignal, prepared);
+    const run = (turnSink, turnSignal) => context.driver.runTurn(
+      spec,
+      turnSink,
+      turnSignal,
+      turnContext === void 0 ? prepared : { ...prepared, turnContext }
+    );
     if (context.workspace === void 0) return await run(sink, signal);
     const leased = { ...context, lease: context.workspace.lease };
     return await runLeased(spec, leaseTargets, leased, sink, signal, run);
@@ -47390,13 +47860,13 @@ var TASK_UNSUPPORTED = {
   reason: "unsupported",
   message: "This agent cannot stop one background task."
 };
-function sha2562(value) {
-  return (0, import_node_crypto10.createHash)("sha256").update(value).digest("hex");
+function sha2563(value) {
+  return (0, import_node_crypto14.createHash)("sha256").update(value).digest("hex");
 }
 function tokenMatches(expected, presented) {
-  const a = Buffer.from(sha2562(expected), "hex");
-  const b = Buffer.from(sha2562(presented), "hex");
-  return (0, import_node_crypto10.timingSafeEqual)(a, b);
+  const a = Buffer.from(sha2563(expected), "hex");
+  const b = Buffer.from(sha2563(presented), "hex");
+  return (0, import_node_crypto14.timingSafeEqual)(a, b);
 }
 async function runHolder({
   launch,
@@ -47406,215 +47876,223 @@ async function runHolder({
   inputs,
   machine
 }) {
-  const identity = await readProcessIdentity(process.pid);
-  if (identity === null) throw new RuntimeFault("internal", "Cannot read own process identity");
-  const holder = {
-    state: "idle",
-    runId: null,
-    turn: null,
-    answerGate: createAnswerGate(),
-    clients: /* @__PURE__ */ new Set()
-  };
-  const exit = new AbortController();
-  const workspace = machine === void 0 ? void 0 : createHolderWorkspace(machine, clock, log);
-  const facts = createSessionFacts({
-    clock,
-    env: machine?.env ?? {},
-    ...machine?.platform === void 0 ? {} : { platform: machine.platform }
-  });
-  const observed = facts.observe(driver);
-  const writeStatus = () => writeJsonFileAtomic(launch.statusPath, {
-    protocol: HOLDER_PROTOCOL,
-    conversationId: launch.conversationId,
-    pid: identity.pid,
-    startedAt: identity.startedAt,
-    ...identity.command === void 0 ? {} : { command: identity.command },
-    endpoint: launch.endpoint,
-    tokenSha256: sha2562(launch.token),
-    state: holder.state,
-    runId: holder.runId,
-    updatedAt: clock.now()
-  });
-  const broadcast = (message) => {
-    for (const client of holder.clients) writeMessage(client, message);
-  };
-  const settle = () => {
-    holder.state = "idle";
-    holder.runId = null;
-    holder.turn = null;
-    void writeStatus();
-  };
-  const startTurn = (id, spec, client) => {
-    if (holder.runId === spec.runId) {
-      writeMessage(client, {
-        type: "error",
-        id,
-        code: HOLDER_ALREADY_STARTED,
-        message: "The run is already running"
-      });
-      return;
-    }
-    if (holder.state !== "idle") {
-      writeMessage(client, { type: "error", id, code: "busy", message: "A turn is running" });
-      return;
-    }
-    const turn = new AbortController();
-    holder.state = "running";
-    holder.runId = spec.runId;
-    holder.turn = turn;
-    const context = {
-      runsDir: launch.runsDir,
-      machineId: launch.machineId,
-      driver: observed,
+  var _stack = [];
+  try {
+    const identity = await readProcessIdentity(process.pid);
+    if (identity === null) throw new RuntimeFault("internal", "Cannot read own process identity");
+    const _engines = __using(_stack, recordSpawnedEngines(engineRecordsPath((0, import_node_path25.dirname)(launch.statusPath)), clock, log));
+    const holder = {
+      state: "idle",
+      runId: null,
+      turn: null,
+      answerGate: createAnswerGate(),
+      clients: /* @__PURE__ */ new Set()
+    };
+    const exit = new AbortController();
+    const workspace = machine === void 0 ? void 0 : createHolderWorkspace(machine, clock, log);
+    const facts = createSessionFacts({
       clock,
-      log,
-      onAppended: (runId, offset) => broadcast({ type: "appended", runId, offset }),
-      ...inputs === void 0 ? {} : { inputs },
-      ...workspace === void 0 ? {} : { workspace },
-      answerGate: holder.answerGate
-    };
-    claimRun(spec, context).then(
-      (claimed) => {
-        if (claimed === null) {
-          log.warn("holder.start_already_claimed", { runId: spec.runId });
+      env: machine?.env ?? {},
+      ...machine?.platform === void 0 ? {} : { platform: machine.platform }
+    });
+    const observed = facts.observe(driver);
+    const writeStatus = () => writeJsonFileAtomic(launch.statusPath, {
+      protocol: HOLDER_PROTOCOL,
+      conversationId: launch.conversationId,
+      pid: identity.pid,
+      startedAt: identity.startedAt,
+      ...identity.command === void 0 ? {} : { command: identity.command },
+      endpoint: launch.endpoint,
+      tokenSha256: sha2563(launch.token),
+      state: holder.state,
+      runId: holder.runId,
+      updatedAt: clock.now()
+    });
+    const broadcast = (message) => {
+      for (const client of holder.clients) writeMessage(client, message);
+    };
+    const settle = () => {
+      holder.state = "idle";
+      holder.runId = null;
+      holder.turn = null;
+      void writeStatus();
+    };
+    const startTurn = (id, spec, client) => {
+      if (holder.runId === spec.runId) {
+        writeMessage(client, {
+          type: "error",
+          id,
+          code: HOLDER_ALREADY_STARTED,
+          message: "The run is already running"
+        });
+        return;
+      }
+      if (holder.state !== "idle") {
+        writeMessage(client, { type: "error", id, code: "busy", message: "A turn is running" });
+        return;
+      }
+      const turn = new AbortController();
+      holder.state = "running";
+      holder.runId = spec.runId;
+      holder.turn = turn;
+      const context = {
+        runsDir: launch.runsDir,
+        machineId: launch.machineId,
+        driver: observed,
+        clock,
+        log,
+        onAppended: (runId, offset) => broadcast({ type: "appended", runId, offset }),
+        ...inputs === void 0 ? {} : { inputs },
+        ...workspace === void 0 ? {} : { workspace },
+        answerGate: holder.answerGate
+      };
+      claimRun(spec, context).then(
+        (claimed) => {
+          if (claimed === null) {
+            log.warn("holder.start_already_claimed", { runId: spec.runId });
+            settle();
+            writeMessage(client, {
+              type: "error",
+              id,
+              code: HOLDER_ALREADY_STARTED,
+              message: "The run was already started"
+            });
+            return;
+          }
+          writeMessage(client, { type: "ack", id });
+          void writeStatus();
+          runClaimedTurn(spec, claimed, context, turn.signal).then((outcome2) => broadcast({ type: "turn_ended", runId: spec.runId, outcome: outcome2 })).catch((error61) => log.error("holder.turn_crashed", { runId: spec.runId, error: error61 })).finally(settle);
+        },
+        (error61) => {
+          log.error("holder.claim_failed", { runId: spec.runId, error: error61 });
           settle();
           writeMessage(client, {
             type: "error",
             id,
-            code: HOLDER_ALREADY_STARTED,
-            message: "The run was already started"
+            code: "claim_failed",
+            message: "The run log could not be written"
           });
-          return;
         }
-        writeMessage(client, { type: "ack", id });
-        void writeStatus();
-        runClaimedTurn(spec, claimed, context, turn.signal).then((outcome2) => broadcast({ type: "turn_ended", runId: spec.runId, outcome: outcome2 })).catch((error61) => log.error("holder.turn_crashed", { runId: spec.runId, error: error61 })).finally(settle);
-      },
-      (error61) => {
-        log.error("holder.claim_failed", { runId: spec.runId, error: error61 });
-        settle();
+      );
+    };
+    const respond = (request2, client) => {
+      respondToTurn(holder.runId, holder.answerGate, driver, request2).then((status) => {
+        log.info("holder.responded", { runId: request2.runId, status });
+        writeMessage(client, { type: "responded", id: request2.id, status });
+      }).catch((error61) => {
+        log.warn("holder.respond_crashed", { runId: request2.runId, error: error61 });
         writeMessage(client, {
           type: "error",
-          id,
-          code: "claim_failed",
-          message: "The run log could not be written"
+          id: request2.id,
+          code: "respond_failed",
+          message: "The answer could not be delivered"
         });
-      }
-    );
-  };
-  const respond = (request2, client) => {
-    respondToTurn(holder.runId, holder.answerGate, driver, request2).then((status) => {
-      log.info("holder.responded", { runId: request2.runId, status });
-      writeMessage(client, { type: "responded", id: request2.id, status });
-    }).catch((error61) => {
-      log.warn("holder.respond_crashed", { runId: request2.runId, error: error61 });
-      writeMessage(client, {
-        type: "error",
-        id: request2.id,
-        code: "respond_failed",
-        message: "The answer could not be delivered"
       });
-    });
-  };
-  const stopTask = (request2, client) => {
-    const stopping = driver.stopTask?.(request2.taskId) ?? Promise.resolve(TASK_UNSUPPORTED);
-    stopping.then((result) => {
-      log.info("holder.task_stop", { runId: request2.runId, taskId: request2.taskId, result });
-      writeMessage(client, { type: "task_stopped", id: request2.id, result });
-    }).catch((error61) => {
-      log.warn("holder.task_stop_crashed", { runId: request2.runId, error: error61 });
-      writeMessage(client, {
-        type: "task_stopped",
-        id: request2.id,
-        result: { ok: false, reason: "failed", message: "The task could not be stopped" }
+    };
+    const stopTask = (request2, client) => {
+      const stopping = driver.stopTask?.(request2.taskId) ?? Promise.resolve(TASK_UNSUPPORTED);
+      stopping.then((result) => {
+        log.info("holder.task_stop", { runId: request2.runId, taskId: request2.taskId, result });
+        writeMessage(client, { type: "task_stopped", id: request2.id, result });
+      }).catch((error61) => {
+        log.warn("holder.task_stop_crashed", { runId: request2.runId, error: error61 });
+        writeMessage(client, {
+          type: "task_stopped",
+          id: request2.id,
+          result: { ok: false, reason: "failed", message: "The task could not be stopped" }
+        });
       });
-    });
-  };
-  const handle = (request2, client) => {
-    switch (request2.type) {
-      case "auth":
-        return;
-      case "start_turn":
-        startTurn(request2.id, request2.spec, client);
-        return;
-      case "respond":
-        respond(request2, client);
-        return;
-      case "stop_task":
-        stopTask(request2, client);
-        return;
-      case "abort":
-        if (holder.runId === request2.runId) holder.turn?.abort(request2.outcome ?? "aborted");
-        writeMessage(client, { type: "ack", id: request2.id });
-        return;
-      case "status":
-        void facts.snapshot().then(
-          (snapshot2) => writeMessage(client, {
-            type: "status",
-            id: request2.id,
-            state: holder.state,
-            runId: holder.runId,
-            facts: snapshot2
-          })
-        );
-        return;
-      case "suspend":
-        if (holder.state === "running") {
-          writeMessage(client, {
-            type: "error",
-            id: request2.id,
-            code: "busy",
-            message: "A turn is running; it is never killed to suspend"
-          });
+    };
+    const handle = (request2, client) => {
+      switch (request2.type) {
+        case "auth":
           return;
-        }
-        holder.state = "suspending";
-        writeMessage(client, { type: "ack", id: request2.id });
-        exit.abort();
-        return;
-      default:
-        assertNever2(request2);
-    }
-  };
-  const server = (0, import_node_net2.createServer)((client) => {
-    let authenticated = false;
-    readMessages(client, holderRequestSchema, {
-      onMessage: (request2) => {
-        if (!authenticated) {
-          if (request2.type !== "auth" || !tokenMatches(launch.token, request2.token)) {
-            client.destroy();
+        case "start_turn":
+          startTurn(request2.id, request2.spec, client);
+          return;
+        case "respond":
+          respond(request2, client);
+          return;
+        case "stop_task":
+          stopTask(request2, client);
+          return;
+        case "abort":
+          if (holder.runId === request2.runId) holder.turn?.abort(request2.outcome ?? "aborted");
+          writeMessage(client, { type: "ack", id: request2.id });
+          return;
+        case "status":
+          void facts.snapshot().then(
+            (snapshot2) => writeMessage(client, {
+              type: "status",
+              id: request2.id,
+              state: holder.state,
+              runId: holder.runId,
+              facts: snapshot2
+            })
+          );
+          return;
+        case "suspend":
+          if (holder.state === "running") {
+            writeMessage(client, {
+              type: "error",
+              id: request2.id,
+              code: "busy",
+              message: "A turn is running; it is never killed to suspend"
+            });
             return;
           }
-          authenticated = true;
-          holder.clients.add(client);
-          writeMessage(client, {
-            type: "ready",
-            protocol: HOLDER_PROTOCOL,
-            conversationId: launch.conversationId,
-            pid: identity.pid
-          });
+          holder.state = "suspending";
+          writeMessage(client, { type: "ack", id: request2.id });
+          exit.abort();
           return;
-        }
-        handle(request2, client);
-      },
-      onInvalid: (reason) => log.warn("holder.request_invalid", { reason })
-    });
-    client.on("close", () => holder.clients.delete(client));
-    client.on("error", () => holder.clients.delete(client));
-  });
-  removeStaleEndpoint(launch.endpoint);
-  await new Promise((resolve5, reject) => {
-    server.once("error", reject);
-    server.listen(launch.endpoint, () => resolve5());
-  });
-  await writeStatus();
-  log.info("holder.ready", { conversationId: launch.conversationId, pid: identity.pid });
-  await new Promise((resolve5) => exit.signal.addEventListener("abort", () => resolve5()));
-  await driver.suspend?.().catch((error61) => log.warn("holder.driver_suspend_failed", { error: error61 }));
-  for (const client of holder.clients) client.end();
-  await new Promise((resolve5) => server.close(() => resolve5()));
-  (0, import_node_fs10.rmSync)(launch.statusPath, { force: true });
-  log.info("holder.suspended", { conversationId: launch.conversationId });
+        default:
+          assertNever2(request2);
+      }
+    };
+    const server = (0, import_node_net2.createServer)((client) => {
+      let authenticated = false;
+      readMessages(client, holderRequestSchema, {
+        onMessage: (request2) => {
+          if (!authenticated) {
+            if (request2.type !== "auth" || !tokenMatches(launch.token, request2.token)) {
+              client.destroy();
+              return;
+            }
+            authenticated = true;
+            holder.clients.add(client);
+            writeMessage(client, {
+              type: "ready",
+              protocol: HOLDER_PROTOCOL,
+              conversationId: launch.conversationId,
+              pid: identity.pid
+            });
+            return;
+          }
+          handle(request2, client);
+        },
+        onInvalid: (reason) => log.warn("holder.request_invalid", { reason })
+      });
+      client.on("close", () => holder.clients.delete(client));
+      client.on("error", () => holder.clients.delete(client));
+    });
+    removeStaleEndpoint(launch.endpoint);
+    await new Promise((resolve6, reject) => {
+      server.once("error", reject);
+      server.listen(launch.endpoint, () => resolve6());
+    });
+    await writeStatus();
+    log.info("holder.ready", { conversationId: launch.conversationId, pid: identity.pid });
+    await new Promise((resolve6) => exit.signal.addEventListener("abort", () => resolve6()));
+    await driver.suspend?.().catch((error61) => log.warn("holder.driver_suspend_failed", { error: error61 }));
+    for (const client of holder.clients) client.end();
+    await new Promise((resolve6) => server.close(() => resolve6()));
+    (0, import_node_fs10.rmSync)(launch.statusPath, { force: true });
+    log.info("holder.suspended", { conversationId: launch.conversationId });
+  } catch (_) {
+    var _error = _, _hasError = true;
+  } finally {
+    __callDispose(_stack, _error, _hasError);
+  }
 }
 
 // src/sessions/suspend-policy.ts
@@ -47657,6 +48135,8 @@ var envSchema = external_exports.object({
   ALAN_RUNTIME_PROVIDER_NPM_CLI: external_exports.string().min(1).optional(),
   ALAN_RUNTIME_HOST: external_exports.enum(RUNTIME_HOST_KINDS).default("standalone"),
   ALAN_RUNTIME_GITHUB_PROXY: external_exports.enum(["on", "off"]).default("off"),
+  ALAN_RUNTIME_GIT_GATEWAY_URL: external_exports.url().optional(),
+  ALAN_RUNTIME_WORKSPACE_ROOT: external_exports.string().min(1).optional(),
   XDG_CONFIG_HOME: external_exports.string().min(1).optional(),
   GH_CONFIG_DIR: external_exports.string().min(1).optional()
 });
@@ -47677,6 +48157,11 @@ var RUNTIME_ENV_PREFIX = "ALAN_RUNTIME_";
 var MAX_ACTIVE_RUNS_VARIABLE = "ALAN_MAX_ACTIVE_RUNS";
 var MAX_ACTIVE_RUNS_RANGE = { min: 1, max: 32 };
 var SETUP_TOKEN_VARIABLE = "ALAN_RUNTIME_SETUP_TOKEN";
+var ENROLLMENT_CODE_VARIABLE = "ALAN_RUNTIME_ENROLLMENT_CODE";
+var SECRET_VARIABLES = /* @__PURE__ */ new Set([
+  SETUP_TOKEN_VARIABLE,
+  ENROLLMENT_CODE_VARIABLE
+]);
 var ALAN_CODE_ENGINE_VARIABLE = "ALAN_CODE_ENGINE_PATH";
 function loadRuntimeConfig(env = process.env, totalMemoryBytes = (0, import_node_os7.totalmem)()) {
   const parsed = envSchema.safeParse(env);
@@ -47703,6 +48188,8 @@ function loadRuntimeConfig(env = process.env, totalMemoryBytes = (0, import_node
     ALAN_RUNTIME_PROVIDER_NPM_CLI,
     ALAN_RUNTIME_HOST,
     ALAN_RUNTIME_GITHUB_PROXY,
+    ALAN_RUNTIME_GIT_GATEWAY_URL,
+    ALAN_RUNTIME_WORKSPACE_ROOT,
     XDG_CONFIG_HOME,
     GH_CONFIG_DIR
   } = parsed.data;
@@ -47736,24 +48223,26 @@ function loadRuntimeConfig(env = process.env, totalMemoryBytes = (0, import_node
     providerProbes: ALAN_RUNTIME_PROVIDER_PROBES === "on",
     providerToolchain: ALAN_RUNTIME_PROVIDER_NODE !== void 0 && ALAN_RUNTIME_PROVIDER_NPM_CLI !== void 0 ? { node: ALAN_RUNTIME_PROVIDER_NODE, npmCli: ALAN_RUNTIME_PROVIDER_NPM_CLI } : null,
     home,
-    configHome: XDG_CONFIG_HOME ?? (0, import_node_path23.join)(home, ".config"),
+    configHome: XDG_CONFIG_HOME ?? (0, import_node_path27.join)(home, ".config"),
     ...githubProxyConfig({ ALAN_RUNTIME_GITHUB_PROXY, XDG_CONFIG_HOME, GH_CONFIG_DIR }, home),
+    gitGatewayUrl: ALAN_RUNTIME_GIT_GATEWAY_URL ?? null,
+    workspaceRoot: ALAN_RUNTIME_WORKSPACE_ROOT ?? null,
     serviceEnvironment: serviceEnvironment(env, ALAN_RUNTIME_PROFILE),
     adoptsLegacyInstall: ALAN_RUNTIME_STATE_DIR === void 0
   };
 }
 function githubProxyConfig(env, home) {
-  const configHome = env.XDG_CONFIG_HOME ?? (0, import_node_path23.join)(home, ".config");
+  const configHome = env.XDG_CONFIG_HOME ?? (0, import_node_path27.join)(home, ".config");
   return {
     githubProxy: env.ALAN_RUNTIME_GITHUB_PROXY === "on",
-    ghConfigDir: env.GH_CONFIG_DIR ?? (0, import_node_path23.join)(configHome, "gh")
+    ghConfigDir: env.GH_CONFIG_DIR ?? (0, import_node_path27.join)(configHome, "gh")
   };
 }
 function serviceEnvironment(env, profile) {
   const result = { ALAN_RUNTIME_PROFILE: profile };
   for (const [key, value] of Object.entries(env)) {
     const copied = key.startsWith(RUNTIME_ENV_PREFIX) || key === MAX_ACTIVE_RUNS_VARIABLE || key === ALAN_CODE_ENGINE_VARIABLE;
-    if (!copied || key === SETUP_TOKEN_VARIABLE) continue;
+    if (!copied || SECRET_VARIABLES.has(key)) continue;
     if (value !== void 0 && value.length > 0) result[key] = value;
   }
   return result;
@@ -47786,7 +48275,10 @@ var ELECTRON_ENV_PREFIX = "ELECTRON_";
 function readCliEnvironment(env = process.env) {
   const result = {};
   for (const [key, value] of Object.entries(env)) {
-    if (value !== void 0 && !key.startsWith(ELECTRON_ENV_PREFIX)) result[key] = value;
+    if (value === void 0 || key.startsWith(ELECTRON_ENV_PREFIX) || SECRET_VARIABLES.has(key)) {
+      continue;
+    }
+    result[key] = value;
   }
   return result;
 }
@@ -47842,7 +48334,7 @@ async function loadStoredAccess(paths, access3 = { exec: systemExec }) {
 }
 
 // src/cli/commands/hold.ts
-var import_node_path24 = require("path");
+var import_node_path28 = require("path");
 init_runtime_v2();
 async function machineAccess(paths, log, conversationId, transport) {
   const initial = await loadStoredAccess(paths).catch(
@@ -47859,10 +48351,6 @@ async function machineAccess(paths, log, conversationId, transport) {
       transport
     });
   };
-  const source = {
-    downloadAttachment: async (runId, id, signal) => (await api()).downloadAttachment(runId, id, signal),
-    fetchProviderCredential: async (runId, signal) => (await api()).fetchProviderCredential(runId, signal)
-  };
   const apiUrl = initial?.endpoints.apiUrl;
   const managedMcp = apiUrl === void 0 ? void 0 : {
     url: new URL("/mcp", apiUrl).href,
@@ -47872,7 +48360,21 @@ async function machineAccess(paths, log, conversationId, transport) {
       log
     })
   };
-  return { source, managedMcp };
+  const source = {
+    downloadAttachment: async (runId, id, signal) => (await api()).downloadAttachment(runId, id, signal),
+    fetchProviderCredential: async (runId, signal) => {
+      void managedMcp?.authorization(signal);
+      return (await api()).fetchProviderCredential(runId, signal);
+    }
+  };
+  const codexCredentials = {
+    refresh: async (runId, rejectedAccessTokenSha256) => (await api()).refreshCodexCredential(
+      runId,
+      rejectedAccessTokenSha256 === void 0 ? {} : { rejectedAccessTokenSha256 },
+      new AbortController().signal
+    )
+  };
+  return { source, managedMcp, codexCredentials };
 }
 async function runHold(argv) {
   var _stack = [];
@@ -47889,7 +48391,7 @@ async function runHold(argv) {
     const config2 = loadRuntimeConfig();
     const paths = runtimePaths(config2.stateDir);
     const log = __using(_stack, openFileLog(
-      (0, import_node_path24.join)(paths.logs, `holder-${launch.value.conversationId}.jsonl`),
+      (0, import_node_path28.join)(paths.logs, `holder-${launch.value.conversationId}.jsonl`),
       config2.logLevel,
       systemClock
     ));
@@ -47907,12 +48409,18 @@ async function runHold(argv) {
         defaultCwd: process.cwd(),
         timings: config2.sessionTimings,
         log,
+        codexCredentials: access3.codexCredentials,
         ...access3.managedMcp === void 0 ? {} : { managedMcp: access3.managedMcp }
       }),
       clock: systemClock,
       log,
       inputs: { source: access3.source, tmpDir: paths.tmp },
-      machine: { env: cliEnvironment, stateDir: paths.stateDir }
+      machine: {
+        env: cliEnvironment,
+        stateDir: paths.stateDir,
+        // Only a cloud sandbox's runtime has a git gateway.
+        refreshesFirstCheckout: config2.gitGatewayUrl !== null
+      }
     });
   } catch (_) {
     var _error = _, _hasError = true;