@alan-ai-hq/agent-manager-linux-arm64 0.1.142 → 0.1.144

package/alan-holder.cjs

@@ -21465,37 +21465,15 @@ Platform Documents are the default destination and source of truth for PM work.
 
 Do NOT call \`create_plan\`, \`create_document_artifact\`, or another artifact-creation tool unless the user explicitly asks for an **artifact**. If \`create_document\` is unavailable or fails, report that blocker; do not silently substitute an artifact.
 
-## Platform knowledge lookups
+## Evidence and source selection
 
-The Alan platform is where product truth lives: tasks, subtasks, decisions, events, sessions, artifacts, context, and Documents. For that platform knowledge, local files and shell commands are a **last resort**, not a starting point. Browser and computer use remain available for authorized UI inspection and QA.
+Follow the shared tool-choice guidance. Use platform Documents for team requirements, PRDs, specifications, and decisions: resolve named records with \`find_records\`, browse with \`list_documents\`, and read with \`get_document\`. Use task, session, and artifact tools for their respective records.
 
-**Before every platform knowledge lookup, ask: does the platform know this?** If a platform MCP tool could plausibly answer the question, you MUST call it before any \`Read\`, \`Glob\`, \`Grep\`, or \`Bash\`. Reaching for a local tool first is a mistake even when it would be faster or you already know the file path. Inspecting transient UI state is product QA, not a platform knowledge lookup.
+Use browser and computer tools to inspect live interfaces, and local read-only tools for repository documentation, source, logs, and version history when relevant. Prefer the source the user names. Words such as "notes" or "docs" alone do not forbid repository inspection; use the available context to identify the likely source.
 
-| What you want | Use this | Not this |
-|---|---|---|
-| Requirements, PRDs, specs, notes, any written knowledge | \`list_documents\`, \`find_records\`, \`get_document\` | reading \`docs/\`, \`notes/\`, \`README.md\` |
-| Scope, status, priority, or history of work | \`get_task\`, \`list_subtasks\`, \`list_tasks\` | \`git log\`, commit messages |
-| What was decided and why | \`list_task_decisions\`, \`list_task_events\` | code comments, in-repo ADRs |
-| What an agent did or is doing | \`list_sessions\`, \`get_session_context\` | \`git log\`, diffing the worktree |
-| Prior agent context | \`list_task_events\`, \`get_session_context\` | scratch files |
-| Outputs of completed work | \`list_artifacts\`, \`get_artifact\` | build output, generated files |
-| Where code lives or how it works | \`search_code_context\` first, then \`Read\` the cited files | \`Grep\`/\`Glob\` sweeps |
+When a platform search is empty or unavailable, continue with other relevant permitted sources and state any evidence gap. Do not treat repository evidence as proof of a missing platform record, and do not bypass denied platform actions. Ask one targeted question only when the ambiguity prevents useful progress.
 
-**If you do fall back to a local tool, say so out loud** \u2014 name the platform tool you tried and what it returned (nothing, unavailable, insufficient). A silent local read is a violation of this rule. If no platform tool was tried, you have not earned the local read.
-
-Code is the exception that proves the rule: understanding how something works legitimately ends in reading source. Even then, start with \`search_code_context\` and read only the files it cites.
-
-**Default for written knowledge: platform Documents.** Any request to find, check, consult, review, summarize, or answer from written knowledge resolves against platform Documents \u2014 use \`list_documents\` or \`find_records\` with \`kinds=["document"]\` to locate it, then \`get_document\` to read it. If a document ID is already known, call \`get_document\` directly.
-
-This applies no matter which word the user uses. Treat all of these as the same request: docs, documentation, documents, notes, PRD, spec, requirements, design doc, plan, proposal, RFC, wiki, runbook, onboarding, guidelines, "what did we decide", "what did we write down", "what do we have on X". The noun never changes where you look.
-
-**Local repository files are off-limits for knowledge lookup** unless the user unambiguously points you at the repository. Do not read \`README.md\`, \`AGENTS.md\`, \`notes/\`, \`docs/\`, or any other in-repo file as a fallback, as corroboration, because no platform document matched, or because the user's wording happens to match a directory name.
-
-A bare noun is never a pointer to the repository. "Check the notes" means platform Documents, not \`notes/\`. "Check the docs" means platform Documents, not \`docs/\`. Only these count as pointing at the repository:
-- an explicit location \u2014 "in the repo", "in the codebase", "local files", "on disk", "in the worktree"
-- a concrete path or filename \u2014 \`notes/foo.md\`, \`AGENTS.md\`, "the readme"
-
-When platform Documents do not cover the question, stop and say so, then offer to check the repository. Do not read local files first, and do not guess. Cite which document answered the question.
+For team code discovery, follow the shared \`search_code_context\` guidance, verify cited files locally, and use focused local searches when needed.
 
 ## Your primary tools
 
@@ -21949,18 +21927,23 @@ var init_system_prompt = __esm({
     init_agent_definitions();
     ALAN_CONTEXT_SEARCH_PROMPT = `## Memory (non-code context)
 
-The codebase records what the system does. It does not record why it is that way, what was ruled out, what an outside constraint forbids, or what someone was left owed. That record lives in \`search_context\` \u2014 this team's decisions, constraints, procedures, ownership, rejected approaches and unfinished work.
+Use \`search_context\` first for team-specific decisions, constraints, ownership, history, or unfinished work when the exact source is unknown. Skip it for source-code questions, general knowledge, fully specified mechanical work, or a known record ID.
+
+Apply relevant retrieved decisions and cite their source. Compare them with current evidence; retrieved context can be incomplete or stale. If search is empty or unavailable, continue with other relevant permitted sources and explain any remaining evidence gap.
 
-Before answering or acting on a question about a past decision, ownership, history, or unfinished work whose exact source is unknown, call \`search_context\` first.
+For questions about recent activity, inspect available evidence for the relevant time window. Use records for task history, browser tools for live interfaces, and source, logs, or version history for implementation changes. A reference to "recently" or "a few days ago" calls for evidence, not an answer from memory.`;
+    ALAN_PLATFORM_TOOL_ROUTING_PROMPT = `## Tool choice
 
-So when a turn depends on something the repository cannot tell you \u2014 a value chosen rather than tuned, an approach that may already have been tried, a boundary another team owns, work someone else left half-done \u2014 recover it before you answer or act. Reading the code, or the document someone named, does not settle it: those answer a different question, and one turn can need both.
+Choose tools by the evidence or action the request needs, whether the agent runs locally or in the cloud:
+- Use Alan MCP for canonical Alan records (tasks, sessions, documents, artifacts, and their relationships), platform actions such as managing runs or machines, and actions through a provider identity connected to Alan.
+- Use computer use and browser tools for live websites and interfaces, including the authenticated Alan app, transient DOM and CSS state, and product QA in development or test environments. When the user asks you to inspect a website or interface, use the available browser or computer tools without asking for permission again for ordinary inspection.
+- Use local file, shell, and diagnostic tools for repository source, version history, processes, logs, and runtime behavior. MCP is not a prerequisite for browser inspection or local diagnostics. Follow the codebase-index guidance for team code discovery.
 
-What comes back is the answer, not a step towards it. Carry its specifics into what you write or change \u2014 the value, the constraint, the reason, the person \u2014 and say plainly when the evidence contradicts what was asked for. Retrieving a decision and then producing work that ignores it is worse than never having searched, because it looks informed.
+Use the available repository tools for GitHub work, including git and gh when useful. If a cloud GitHub request reports github_not_connected, call request_github_connection in the current conversation and end the turn. The chat will offer GitHub authorization and resume after the user connects. Continue other independent work when possible.
 
-Skip it when nothing team-specific is at stake: source-code questions, general knowledge, mechanical work fully specified in the request, or an exact ID already in hand.`;
-    ALAN_PLATFORM_TOOL_ROUTING_PROMPT = `## Alan platform and GitHub
+An empty search result is not a permission denial. Continue gathering evidence from relevant permitted sources rather than refusing the request because one source cannot answer. Distinguish observed facts from inference and name remaining evidence gaps.
 
-Use Alan MCP tools for canonical Alan records and platform actions: tasks, sessions, documents, artifacts, runs, and machines. Use the available repository tools for GitHub work, including git and gh when useful. If a cloud GitHub request reports github_not_connected, call request_github_connection in the current conversation and end the turn. The chat will offer GitHub authorization and resume after the user connects. Continue other independent work when possible.`;
+If a needed tool is not exposed, use the host's tool-discovery mechanism once when available before claiming the capability is unavailable. If a canonical platform action remains unavailable or unauthorized, report it and stop that platform action only; continue independent debugging and testing. Do not use a shell CLI, browser, raw HTTP, or local files to bypass that action or its identity and authorization requirements. Do not bypass a workflow or role tool allowlist.`;
     ALAN_IDENTITY_PROMPT = `You are Alan, the software factory agent. Alan ships software end to end \u2014 plan, write, review, test, deploy.
 
 ## How Alan is structured
@@ -21984,7 +21967,7 @@ Team
 - Listen first. Don't jump to solutions. One question at a time, not a list.
 - Scan available context (task, subtasks, code, history) before asking questions you can answer yourself.
 - Challenge when off \u2014 never silently implement the wrong thing.
-- Human leads, you propose. Proactive on reversible actions. Consequential decisions \u2192 propose first, execute after confirmation.
+- Act on the user's request and make reasonable implementation and tool choices within its scope. Do not ask again for permission already granted. Ask only when essential information is missing or an action requires additional authority.
 - Own mistakes. Wrong ID, jumped too fast \u2014 say so and fix it.
 - Write for a human reader. Task, subtask and epic descriptions, documents, artifacts and comments are read by people in the app, not parsed by agents. Lead with the outcome in one sentence, then short sections with headings and bullet lists. Spell out internal shorthand, and keep commit hashes, IDs and migration numbers out of sentences \u2014 put them in a trailing "References" list when they matter.
 - Think visually, proactively \u2014 not only when asked. Mermaid over paragraphs for architecture, flows, state, and schema. The same applies to data: when you're about to present a comparison, trend, breakdown, or status across several items, reach for a \`\`\`chart fence instead of a paragraph of numbers or a markdown table, even if the user never said the word "chart."
@@ -22421,7 +22404,7 @@ function plan(command, args, options) {
 function captureOutput(command, args, options) {
   const launch = plan(command, args, options);
   if (launch === void 0) return Promise.resolve(NEVER_STARTED);
-  return new Promise((resolve6) => {
+  return new Promise((resolve7) => {
     (0, import_child_process.execFile)(
       launch.file,
       [...launch.args],
@@ -22435,7 +22418,7 @@ function captureOutput(command, args, options) {
       },
       (error61, stdout, stderr) => {
         const code = error61 && typeof error61.code === "number" ? error61.code : error61 ? void 0 : 0;
-        resolve6({ stdout, stderr, exitCode: code });
+        resolve7({ stdout, stderr, exitCode: code });
       }
     );
   });
@@ -22485,10 +22468,10 @@ async function linuxStartTicks(pid) {
   }
 }
 function psStartTime(pid) {
-  return new Promise((resolve6) => {
+  return new Promise((resolve7) => {
     (0, import_child_process2.execFile)("ps", ["-o", "lstart=", "-p", String(pid)], { timeout: 2e3 }, (error61, stdout) => {
       const text2 = stdout.trim();
-      resolve6(error61 || !text2 ? void 0 : text2);
+      resolve7(error61 || !text2 ? void 0 : text2);
     });
   });
 }
@@ -22517,12 +22500,12 @@ function parseProcessList(text2) {
 }
 function listProcesses(platform = process.platform) {
   if (platform === "win32") return Promise.resolve([]);
-  return new Promise((resolve6) => {
+  return new Promise((resolve7) => {
     (0, import_child_process3.execFile)(
       "ps",
       ["-A", "-o", "pid=,ppid=,pgid=,lstart="],
       { timeout: 5e3, maxBuffer: 8 * 1024 * 1024 },
-      (error61, stdout) => resolve6(error61 ? [] : parseProcessList(stdout))
+      (error61, stdout) => resolve7(error61 ? [] : parseProcessList(stdout))
     );
   });
 }
@@ -22562,11 +22545,11 @@ async function taskkill(pid, options) {
     stdio: "ignore",
     windowsHide: true
   });
-  const exited = new Promise((resolve6) => {
-    killer.once("error", (error210) => resolve6(error210));
+  const exited = new Promise((resolve7) => {
+    killer.once("error", (error210) => resolve7(error210));
     killer.once(
       "exit",
-      (code, signal) => resolve6(code === 0 ? void 0 : new Error(`taskkill failed: exit ${code}, signal ${signal}`))
+      (code, signal) => resolve7(code === 0 ? void 0 : new Error(`taskkill failed: exit ${code}, signal ${signal}`))
     );
   });
   const timedOut = clock.sleep(options.timeoutMs ?? DEFAULT_TASKKILL_TIMEOUT_MS, timeout.signal).then(() => new Error("taskkill timed out")).catch(() => void 0);
@@ -22822,10 +22805,10 @@ function spawnCli(options) {
 function waitForSpawn(child, command) {
   if (isWindowsJob(child)) return waitForWindowsJob(child, command);
   if (child.pid !== void 0) return Promise.resolve();
-  return new Promise((resolve6, reject) => {
+  return new Promise((resolve7, reject) => {
     const onSpawn = () => {
       child.off("error", onError);
-      resolve6();
+      resolve7();
     };
     const onError = (error61) => {
       child.off("spawn", onSpawn);
@@ -23216,69 +23199,47 @@ var init_models = __esm({
         maxOutputTokens: 16384
       },
       {
-        id: "z-ai/glm-4.7-flash",
-        name: "GLM 4.7 Flash",
-        description: "Fast GLM coding via Alan",
+        id: "z-ai/glm-5.3",
+        name: "GLM 5.3",
+        description: "Z.ai's flagship for coding, agents and long-horizon work",
         enabled: true,
         isDefault: false,
         sortOrder: 30,
-        upstreamModelId: "z-ai/glm-4.7-flash",
-        contextWindow: 2e5,
-        maxOutputTokens: 8192
-      },
-      {
-        id: "z-ai/glm-4.7",
-        name: "GLM 4.7",
-        description: "GLM coding and multi-step agent work",
-        enabled: true,
-        isDefault: false,
-        sortOrder: 40,
-        upstreamModelId: "z-ai/glm-4.7",
-        contextWindow: 2e5,
+        upstreamModelId: "z-ai/glm-5.3",
+        contextWindow: 1048576,
         maxOutputTokens: 16384
       },
       {
-        id: "qwen/qwen3-coder-flash",
-        name: "Qwen3 Coder Flash",
-        description: "Fast Qwen coder via Alan",
-        enabled: true,
-        isDefault: false,
-        sortOrder: 50,
-        upstreamModelId: "qwen/qwen3-coder-flash",
-        contextWindow: 128e3,
-        maxOutputTokens: 8192
-      },
-      {
-        id: "qwen/qwen3-coder",
-        name: "Qwen3 Coder",
-        description: "Open-weight oriented coding",
+        id: "z-ai/glm-5.3-flash",
+        name: "GLM 5.3 Flash",
+        description: "Fast multimodal GLM via Alan",
         enabled: true,
         isDefault: false,
-        sortOrder: 60,
-        upstreamModelId: "qwen/qwen3-coder",
-        contextWindow: 128e3,
+        sortOrder: 40,
+        upstreamModelId: "z-ai/glm-5.3-flash",
+        contextWindow: 1048576,
         maxOutputTokens: 8192
       },
       {
-        id: "moonshotai/kimi-k2.6",
-        name: "Kimi K2.6",
-        description: "Fast Kimi for long-horizon coding",
+        id: "qwen/qwen3.8-27b",
+        name: "Qwen3.8 27B",
+        description: "Qwen3.8 open-weight coding and agentic work",
         enabled: true,
         isDefault: false,
-        sortOrder: 70,
-        upstreamModelId: "moonshotai/kimi-k2.6",
-        contextWindow: 262144,
+        sortOrder: 50,
+        upstreamModelId: "qwen/qwen3.8-27b",
+        contextWindow: 1e6,
         maxOutputTokens: 16384
       },
       {
-        id: "moonshotai/kimi-k2.7-code",
-        name: "Kimi K2.7 Code",
-        description: "Kimi coding specialist",
+        id: "moonshotai/kimi-k3",
+        name: "Kimi K3",
+        description: "Moonshot's 2.8T open-weight flagship",
         enabled: true,
         isDefault: false,
-        sortOrder: 80,
-        upstreamModelId: "moonshotai/kimi-k2.7-code",
-        contextWindow: 262144,
+        sortOrder: 60,
+        upstreamModelId: "moonshotai/kimi-k3",
+        contextWindow: 1048576,
         maxOutputTokens: 16384
       },
       {
@@ -23287,7 +23248,7 @@ var init_models = __esm({
         description: "Fast Nemotron via Alan",
         enabled: true,
         isDefault: false,
-        sortOrder: 90,
+        sortOrder: 70,
         upstreamModelId: "nvidia/nemotron-3-nano-30b-a3b",
         contextWindow: 262144,
         maxOutputTokens: 8192
@@ -23298,7 +23259,7 @@ var init_models = __esm({
         description: "Mid-tier Nemotron via Alan",
         enabled: true,
         isDefault: false,
-        sortOrder: 100,
+        sortOrder: 80,
         upstreamModelId: "nvidia/nemotron-3-super-120b-a12b",
         contextWindow: 262144,
         maxOutputTokens: 16384
@@ -23309,18 +23270,29 @@ var init_models = __esm({
         description: "Largest Nemotron via Alan",
         enabled: true,
         isDefault: false,
-        sortOrder: 110,
+        sortOrder: 90,
         upstreamModelId: "nvidia/nemotron-3-ultra-550b-a55b",
         contextWindow: 262144,
         maxOutputTokens: 16384
       },
+      {
+        id: "nvidia/nemotron-3.5-lightning",
+        name: "Nemotron 3.5 Lightning",
+        description: "Small, fast Nemotron for high-volume work",
+        enabled: true,
+        isDefault: false,
+        sortOrder: 100,
+        upstreamModelId: "nvidia/nemotron-3.5-lightning",
+        contextWindow: 262144,
+        maxOutputTokens: 8192
+      },
       {
         id: "meta/muse-spark-1.3-contributor",
         name: "Muse Spark 1.3 Contributor",
         description: "Cost-efficient Muse Spark (contributor tier)",
         enabled: true,
         isDefault: false,
-        sortOrder: 120,
+        sortOrder: 110,
         upstreamModelId: "meta/muse-spark-1.3-contributor",
         contextWindow: 1048576,
         maxOutputTokens: 16384
@@ -23331,7 +23303,7 @@ var init_models = __esm({
         description: "Meta Muse Spark multimodal agentic coding",
         enabled: true,
         isDefault: false,
-        sortOrder: 130,
+        sortOrder: 120,
         upstreamModelId: "meta/muse-spark-1.3",
         contextWindow: 1048576,
         maxOutputTokens: 16384
@@ -23342,7 +23314,7 @@ var init_models = __esm({
         description: "Prior Muse Spark contributor tier",
         enabled: true,
         isDefault: false,
-        sortOrder: 140,
+        sortOrder: 130,
         upstreamModelId: "meta/muse-spark-1.2-contributor",
         contextWindow: 1048576,
         maxOutputTokens: 16384
@@ -24797,8 +24769,8 @@ function createJsonRpcPeer(writer, handlers) {
     },
     request: (method, params = {}) => {
       const id = counter.next++;
-      return new Promise((resolve6, reject) => {
-        pending.set(id, { method, resolve: resolve6, reject });
+      return new Promise((resolve7, reject) => {
+        pending.set(id, { method, resolve: resolve7, reject });
         writer.write({ id, method, params }).catch((error61) => {
           pending.delete(id);
           reject(error61 instanceof Error ? error61 : new Error(String(error61)));
@@ -24911,7 +24883,7 @@ function createNdjsonWriter(stream) {
     get writable() {
       return stream.writable && !stream.destroyed && failure5.error === void 0;
     },
-    write: (value) => new Promise((resolve6, reject) => {
+    write: (value) => new Promise((resolve7, reject) => {
       if (failure5.error) {
         reject(failure5.error);
         return;
@@ -24923,7 +24895,7 @@ function createNdjsonWriter(stream) {
       stream.write(`${JSON.stringify(value)}
 `, (error61) => {
         if (error61) reject(error61);
-        else resolve6();
+        else resolve7();
       });
     }),
     end: () => {
@@ -24939,11 +24911,11 @@ function hostProcess(child, tree, options, handlers) {
   const stderr = new LineSplitter((line) => handlers.onStderrLine(line));
   child.stderr.on("data", (chunk) => stderr.push(chunk));
   child.stderr.once("end", () => stderr.flush());
-  const processExit = new Promise((resolve6) => {
-    child.once("exit", (code, signal) => resolve6({ code, signal }));
+  const processExit = new Promise((resolve7) => {
+    child.once("exit", (code, signal) => resolve7({ code, signal }));
   });
-  const outputEnded = new Promise((resolve6) => {
-    child.stdout.once("close", () => resolve6());
+  const outputEnded = new Promise((resolve7) => {
+    child.stdout.once("close", () => resolve7());
   });
   const watch = async () => {
     const { clock, stdoutDrainMs, log, name } = options;
@@ -25232,13 +25204,13 @@ var init_chunk_VMGVHPBB = __esm({
         const turnId = input2.turnId;
         let finish = () => {
         };
-        const done = new Promise((resolve6) => {
+        const done = new Promise((resolve7) => {
           finish = (outcome2) => {
             if (this.#current?.id !== turnId) return;
             this.#current = void 0;
             if (this.#state === "busy") this.#state = "idle";
             this.#emit({ type: "turn_ended", turnId, outcome: outcome2 });
-            resolve6({ turnId, outcome: outcome2, providerSessionId: this.#sessionId });
+            resolve7({ turnId, outcome: outcome2, providerSessionId: this.#sessionId });
           };
         });
         const pending = {
@@ -25466,7 +25438,7 @@ var init_chunk_J2KTV5FP = __esm({
   }
 });
 
-// ../agent-core/dist/chunk-ITTV3UIM.js
+// ../agent-core/dist/chunk-VX6QVMKD.js
 function truncate(value, limit) {
   const normalized2 = Array.from(value, (character) => {
     const code = character.charCodeAt(0);
@@ -25555,7 +25527,7 @@ function currentUserSection(user, visibility) {
   if (user.name) lines.push(`- **Name**: ${user.name}`);
   lines.push(`- **Email**: ${user.email}`, `- **User ID**: ${user.id}`, "");
   lines.push(
-    visibility === "team" ? "This session is shared with the team. When creating tasks or assigning work, create them on this team. The person above started the session." : visibility === "private" ? "This session is private to this person. When creating tasks or assigning work, default to assigning to this user unless explicitly instructed otherwise." : "This is the person who initiated this conversation. When creating tasks or assigning work, default to assigning to this user unless explicitly instructed otherwise."
+    visibility === "team" ? "This session is shared with the team. The person above sent the current request. When creating tasks or assigning work, create them on this team." : visibility === "private" ? "This session is private to this person. When creating tasks or assigning work, default to assigning to this user unless explicitly instructed otherwise." : "This is the person who initiated this conversation. When creating tasks or assigning work, default to assigning to this user unless explicitly instructed otherwise."
   );
   return lines.join("\n");
 }
@@ -25827,8 +25799,8 @@ ${body}` : body;
   return spec.mode === "plan" ? planModePrefix(prefixed) : prefixed;
 }
 var MAX_PARSED_ATTACHMENTS, MAX_PARSED_ATTACHMENT_CHARS, MAX_METADATA_CHARS, UNAVAILABLE, READ_ONLY_MODES, AGENT_MODES;
-var init_chunk_ITTV3UIM = __esm({
-  "../agent-core/dist/chunk-ITTV3UIM.js"() {
+var init_chunk_VX6QVMKD = __esm({
+  "../agent-core/dist/chunk-VX6QVMKD.js"() {
     "use strict";
     init_agent2();
     MAX_PARSED_ATTACHMENTS = 3;
@@ -25944,6 +25916,7 @@ function buildClaudeArgs(input2) {
     ...capabilities.supportsThinkingDisplay ? ["--thinking-display", "summarized"] : [],
     // Without it the whole answer lands in one frame at turn end.
     ...capabilities.supportsPartialMessages ? ["--include-partial-messages"] : [],
+    ...capabilities.supportsPluginDir ? (input2.pluginDirs ?? []).flatMap((dir) => ["--plugin-dir", dir]) : [],
     ...option("--resume", input2.resumeId),
     "--chrome",
     ...input2.extraArgs ?? []
@@ -25956,18 +25929,21 @@ function createClaudeCapabilityProbe(probe = createFlagProbe()) {
         supportsApproveMcps,
         supportsThinkingDisplay,
         supportsPartialMessages,
-        supportsReplayUserMessages
+        supportsReplayUserMessages,
+        supportsPluginDir
       ] = await Promise.all([
         needsApproveMcps ? probe.supportsFlag(command, "--approve-mcps", env) : false,
         probe.supportsHiddenChoiceFlag(command, "--thinking-display", env),
         probe.supportsFlag(command, "--include-partial-messages", env),
-        probe.supportsFlag(command, "--replay-user-messages", env)
+        probe.supportsFlag(command, "--replay-user-messages", env),
+        probe.supportsFlag(command, "--plugin-dir", env)
       ]);
       return {
         supportsApproveMcps,
         supportsThinkingDisplay,
         supportsPartialMessages,
-        supportsReplayUserMessages
+        supportsReplayUserMessages,
+        supportsPluginDir
       };
     }
   };
@@ -26855,6 +26831,7 @@ function planClaudeSession(run, context) {
     ...run.selectedEffortLevel === void 0 ? {} : { effortLevel: run.selectedEffortLevel },
     ...prompts.systemPrompt === void 0 ? {} : { systemPrompt: prompts.systemPrompt },
     ...prompts.systemPromptAppend === void 0 ? {} : { appendSystemPrompt: prompts.systemPromptAppend },
+    ...context.pluginDirs?.length ? { pluginDirs: context.pluginDirs } : {},
     ...context.managedMcp === void 0 ? {} : {
       mcp: {
         alanMcpUrl: context.managedMcp.url,
@@ -26909,7 +26886,7 @@ var init_claude = __esm({
     init_chunk_54ZRJOQP();
     init_chunk_J2KTV5FP();
     init_chunk_M6YHY2EZ();
-    init_chunk_ITTV3UIM();
+    init_chunk_VX6QVMKD();
     init_chunk_YXWJW7I5();
     init_effort();
     import_crypto6 = require("crypto");
@@ -27632,8 +27609,8 @@ var init_claude = __esm({
       }
       async #awaitTaskStop(requestId, taskId) {
         const timer = new AbortController();
-        const answered = new Promise((resolve6) => {
-          this.#taskStops.set(requestId, resolve6);
+        const answered = new Promise((resolve7) => {
+          this.#taskStops.set(requestId, resolve7);
         });
         const timeoutMs = this.#options.stopTaskTimeoutMs;
         const timedOut = this.#options.clock.sleep(timeoutMs, timer.signal).then(
@@ -27706,17 +27683,17 @@ var init_claude = __esm({
         };
         let markStarted = () => {
         };
-        const whenStarted = new Promise((resolve6) => {
-          markStarted = resolve6;
+        const whenStarted = new Promise((resolve7) => {
+          markStarted = resolve7;
         });
-        const done = new Promise((resolve6) => {
+        const done = new Promise((resolve7) => {
           finish = (outcome2) => {
             if (this.#current?.id !== id) return;
             this.#current = void 0;
             this.#lastTurn = turn;
             if (this.#state === "busy") this.#state = "idle";
             this.#emit({ type: "turn_ended", turnId: id, outcome: outcome2 });
-            resolve6({ turnId: id, outcome: outcome2, providerSessionId: this.#providerSessionId });
+            resolve7({ turnId: id, outcome: outcome2, providerSessionId: this.#providerSessionId });
           };
         });
         const active = {
@@ -27834,8 +27811,8 @@ var init_claude = __esm({
         void removeLaunchFiles(this.#launchFiles).catch((error61) => {
           this.#options.log.warn("claude.launch_files_cleanup_failed", { error: error61 });
         });
-        for (const resolve6 of this.#taskStops.values()) {
-          resolve6({ ok: false, reason: "runtime_unavailable", message: "Claude Code exited." });
+        for (const resolve7 of this.#taskStops.values()) {
+          resolve7({ ok: false, reason: "runtime_unavailable", message: "Claude Code exited." });
         }
         const active = this.#current;
         if (active) {
@@ -29053,7 +29030,7 @@ var init_codex = __esm({
     init_chunk_54ZRJOQP();
     init_chunk_J2KTV5FP();
     init_chunk_M6YHY2EZ();
-    init_chunk_ITTV3UIM();
+    init_chunk_VX6QVMKD();
     init_chunk_YXWJW7I5();
     import_fs6 = require("fs");
     import_path6 = require("path");
@@ -29672,10 +29649,10 @@ var init_codex = __esm({
         };
         let identify = () => {
         };
-        const identified = new Promise((resolve6) => {
-          identify = resolve6;
+        const identified = new Promise((resolve7) => {
+          identify = resolve7;
         });
-        const done = new Promise((resolve6) => {
+        const done = new Promise((resolve7) => {
           finish = (outcome2) => {
             if (this.#current?.id !== id) return;
             this.#current = void 0;
@@ -29683,7 +29660,7 @@ var init_codex = __esm({
             if (this.#state === "busy") this.#state = "idle";
             this.#host.scanDescendants(true);
             this.#emit({ type: "turn_ended", turnId: id, outcome: outcome2 });
-            resolve6({ turnId: id, outcome: outcome2, providerSessionId: this.#threadId });
+            resolve7({ turnId: id, outcome: outcome2, providerSessionId: this.#threadId });
           };
         });
         const active = {
@@ -30131,6 +30108,11 @@ function alanCodeConfigContent(existing, input2) {
   return JSON.stringify({
     $schema: "https://opencode.ai/config.json",
     ...config2,
+    // OpenCode writes a whole working-tree diff into every user message summary and re-persists
+    // the message on each update, so a large diff lands in the shared store many times over:
+    // 3.4 GB of a dev machine's engine database was these patches, against 82 sessions. Alan
+    // does not use the engine's undo/revert, so the tracking stays off.
+    snapshot: false,
     model: `${ALAN_CODE_ENGINE_PROVIDER_ID}/${input2.modelId}`,
     enabled_providers: [ALAN_CODE_ENGINE_PROVIDER_ID],
     provider: {
@@ -30156,7 +30138,7 @@ function alanCodeConfigContent(existing, input2) {
   });
 }
 function readBody2(response) {
-  return new Promise((resolve6, reject) => {
+  return new Promise((resolve7, reject) => {
     const chunks = [];
     let size = 0;
     response.on("data", (chunk) => {
@@ -30164,7 +30146,7 @@ function readBody2(response) {
       if (size > MAX_CATALOG_BYTES) response.destroy(new Error("catalog too large"));
       else chunks.push(chunk);
     });
-    response.on("end", () => resolve6(Buffer.concat(chunks).toString("utf8")));
+    response.on("end", () => resolve7(Buffer.concat(chunks).toString("utf8")));
     response.on("error", reject);
   });
 }
@@ -30180,13 +30162,13 @@ function parseResponseBody(text2, status) {
 }
 function getJson(url2, headers, timeout, signal) {
   const request2 = url2.protocol === "https:" ? import_https.request : import_http3.request;
-  return new Promise((resolve6, reject) => {
+  return new Promise((resolve7, reject) => {
     const outgoing = request2(url2, { method: "GET", headers, timeout, signal }, (response) => {
       const status = response.statusCode ?? 0;
       readBody2(response).then((text2) => {
         const body = parseResponseBody(text2, status);
         if (status < 200 || status >= 300) reject(new CatalogResponseError(status, body));
-        else resolve6(body);
+        else resolve7(body);
       }).catch(reject);
     });
     outgoing.on("timeout", () => outgoing.destroy(new Error("catalog timed out")));
@@ -37912,7 +37894,7 @@ function within(root, path) {
 }
 async function resolveReal(path) {
   try {
-    return await (0, import_promises22.realpath)(path);
+    return await (0, import_promises23.realpath)(path);
   } catch {
     const parent = (0, import_path9.dirname)(path);
     if (parent === path) return path;
@@ -37941,14 +37923,14 @@ function createWorkspaceFs(roots, writable) {
   return {
     read: async (params) => {
       const path = await confined(params);
-      const bytes = await (0, import_promises22.readFile)(path);
+      const bytes = await (0, import_promises23.readFile)(path);
       if (bytes.byteLength > MAX_READ_BYTES) throw new FsDenied(`${path} is too large to read`);
       return { content: sliceLines(bytes.toString("utf8"), params) };
     },
     write: async (params) => {
       if (!writable) throw new FsDenied("This session is read-only");
       const path = await confined(params);
-      await (0, import_promises22.writeFile)(path, asString(params.content));
+      await (0, import_promises23.writeFile)(path, asString(params.content));
       return {};
     }
   };
@@ -38551,7 +38533,7 @@ async function acpTurnInput(run, context) {
   const encoded = await Promise.all(
     images.map(async (image) => ({
       mimeType: image.mimeType,
-      data: (await (0, import_promises23.readFile)(image.path)).toString("base64")
+      data: (await (0, import_promises24.readFile)(image.path)).toString("base64")
     }))
   );
   return {
@@ -38560,7 +38542,7 @@ async function acpTurnInput(run, context) {
     ...encoded.length ? { images: encoded, imagePaths: images.map((image) => image.path) } : {}
   };
 }
-var import_promises22, import_path9, import_crypto12, import_promises23, CURSOR_ASK_QUESTION, copilotAcpProfile, cursorAcpProfile, MODEL_REJECTED, MAX_READ_BYTES, FsDenied, ENV_REFERENCE, AcpBackgroundTasks, CURSOR_CREATE_PLAN, STATUSES, READ_KINDS, ALLOW_KINDS, REJECT_KINDS, CANCELLED_PERMISSION, STOP_REASONS, CHUNKS, ECHOES, AcpTurn, STDERR_TAIL_LINES4, MAX_BETWEEN_UPDATES2, AcpSession, DEFAULTS3, CLIENT_INFO2, TASK_BACKGROUNDED, TASK_COMPLETED, SESSION_NOTIFICATION, KILLED_STATUSES, SUCCESS_STATUSES, SUBAGENT_ID, grokTaskDialect, grokAcpProfile, kimiAcpProfile, ACP_PROFILES, ACP_MODES;
+var import_promises23, import_path9, import_crypto12, import_promises24, CURSOR_ASK_QUESTION, copilotAcpProfile, cursorAcpProfile, MODEL_REJECTED, MAX_READ_BYTES, FsDenied, ENV_REFERENCE, AcpBackgroundTasks, CURSOR_CREATE_PLAN, STATUSES, READ_KINDS, ALLOW_KINDS, REJECT_KINDS, CANCELLED_PERMISSION, STOP_REASONS, CHUNKS, ECHOES, AcpTurn, STDERR_TAIL_LINES4, MAX_BETWEEN_UPDATES2, AcpSession, DEFAULTS3, CLIENT_INFO2, TASK_BACKGROUNDED, TASK_COMPLETED, SESSION_NOTIFICATION, KILLED_STATUSES, SUCCESS_STATUSES, SUBAGENT_ID, grokTaskDialect, grokAcpProfile, kimiAcpProfile, ACP_PROFILES, ACP_MODES;
 var init_acp3 = __esm({
   "../agent-core/dist/providers/acp.js"() {
     "use strict";
@@ -38569,14 +38551,14 @@ var init_acp3 = __esm({
     init_chunk_54ZRJOQP();
     init_chunk_J2KTV5FP();
     init_chunk_M6YHY2EZ();
-    init_chunk_ITTV3UIM();
+    init_chunk_VX6QVMKD();
     init_chunk_YXWJW7I5();
-    import_promises22 = require("fs/promises");
+    import_promises23 = require("fs/promises");
     import_path9 = require("path");
     init_effort();
     init_acp();
     import_crypto12 = require("crypto");
-    import_promises23 = require("fs/promises");
+    import_promises24 = require("fs/promises");
     init_agent2();
     CURSOR_ASK_QUESTION = "cursor/ask_question";
     copilotAcpProfile = {
@@ -39092,7 +39074,7 @@ var init_acp3 = __esm({
         const turn = new AcpTurn(`acp-${this.#turns}-${id}`, this.#profile);
         let finish = () => {
         };
-        const done = new Promise((resolve6) => {
+        const done = new Promise((resolve7) => {
           finish = (outcome2) => {
             if (this.#current?.id !== id) return;
             this.#current = void 0;
@@ -39100,7 +39082,7 @@ var init_acp3 = __esm({
             if (this.#state === "busy") this.#state = "idle";
             this.#host.scanDescendants(true);
             this.#emit({ type: "turn_ended", turnId: id, outcome: outcome2 });
-            resolve6({ turnId: id, outcome: outcome2, providerSessionId: this.#sessionId });
+            resolve7({ turnId: id, outcome: outcome2, providerSessionId: this.#sessionId });
           };
         });
         const active = { id, turn, done, finish, cancelRequested: false };
@@ -39796,10 +39778,14 @@ function openCodeConfigContent(input2) {
       enabled: true
     };
   }
+  const skills = asRecord(config2.skills) ?? {};
+  const ownPaths = Array.isArray(skills.paths) ? skills.paths : [];
+  const skillPaths = input2.skillPaths ?? [];
   return JSON.stringify({
     ...config2,
     ...input2.readOnly ? {} : { permission: "allow" },
-    ...Object.keys(mcp).length ? { mcp } : {}
+    ...Object.keys(mcp).length ? { mcp } : {},
+    ...skillPaths.length ? { skills: { ...skills, paths: [...ownPaths, ...skillPaths] } } : {}
   });
 }
 function storedParts(message) {
@@ -40094,7 +40080,7 @@ async function sameDirectory(left, right) {
 }
 async function canonicalDirectory(directory) {
   try {
-    return await (0, import_promises24.realpath)(directory);
+    return await (0, import_promises25.realpath)(directory);
   } catch {
     return (0, import_path10.resolve)(directory);
   }
@@ -40119,6 +40105,57 @@ async function openSession(session, client, spec, log) {
   const id = await client.createSession({ title: spec.title, permission: NON_INTERACTIVE_RULES });
   return { id, resumed: false };
 }
+function isOpenTimeout(error61) {
+  return error61 instanceof CoreFault && error61.code === "protocol_violation";
+}
+async function openOnce(spec, password, options) {
+  const attempt = { abandoned: false };
+  const { session, url: url2 } = await withDeadline3(
+    startServer(spec, password, options, attempt),
+    options.clock,
+    options.openTimeoutMs,
+    "report a listening URL"
+  ).catch(async (error61) => {
+    attempt.abandoned = true;
+    await attempt.current?.suspend().catch(() => void 0);
+    throw error61;
+  });
+  try {
+    const client = new OpenCodeClient(url2, password, options.engine.label);
+    const opened = await withDeadline3(
+      openSession(session, client, spec, options.log),
+      options.clock,
+      options.openTimeoutMs,
+      "open a session"
+    );
+    session.attach(
+      opened.id,
+      spec.prompt,
+      expiredSignInNotices(spec.env, options.clock.now()),
+      opened.resumed
+    );
+  } catch (error61) {
+    await session.suspend().catch(() => void 0);
+    throw error61;
+  }
+  options.log.info("opencode.opened", {
+    pid: session.pid,
+    sessionId: session.providerSessionId,
+    resumeFailed: session.resumeFailed
+  });
+  return session;
+}
+async function openWithRetries(spec, password, options) {
+  for (let tries = 1; ; tries += 1) {
+    try {
+      return await openOnce(spec, password, options);
+    } catch (error61) {
+      if (!isOpenTimeout(error61) || tries >= options.openAttempts) throw error61;
+      options.log.warn("opencode.open_retry", { tries });
+      await options.clock.sleep(options.reconnectDelayMs);
+    }
+  }
+}
 function createOpenCodeDriver(options = {}) {
   const resolved = {
     clock: options.clock ?? systemClock2,
@@ -40128,6 +40165,7 @@ function createOpenCodeDriver(options = {}) {
     stdoutDrainMs: options.stdoutDrainMs ?? DEFAULTS4.stdoutDrainMs,
     descendantScanMs: options.descendantScanMs ?? DEFAULTS4.descendantScanMs,
     openTimeoutMs: options.openTimeoutMs ?? DEFAULTS4.openTimeoutMs,
+    openAttempts: options.openAttempts ?? DEFAULTS4.openAttempts,
     startAttempts: options.startAttempts ?? DEFAULTS4.startAttempts,
     reconnectAttempts: options.reconnectAttempts ?? DEFAULTS4.reconnectAttempts,
     reconnectDelayMs: options.reconnectDelayMs ?? DEFAULTS4.reconnectDelayMs,
@@ -40143,45 +40181,16 @@ function createOpenCodeDriver(options = {}) {
       };
       const spec = { ...planned, env: launchEnv(planned, authorization) };
       const password = options.password?.() ?? (0, import_crypto13.randomBytes)(24).toString("base64url");
-      const attempt = { abandoned: false };
-      const { session, url: url2 } = await withDeadline3(
-        startServer(spec, password, resolved, attempt),
-        resolved.clock,
-        resolved.openTimeoutMs,
-        "report a listening URL"
-      ).catch(async (error61) => {
-        attempt.abandoned = true;
-        await attempt.current?.suspend().catch(() => void 0);
-        await removeAuthorization();
-        throw error61;
-      });
-      void session.exited.then(removeAuthorization).catch((error61) => {
-        resolved.log.warn("opencode.authorization_cleanup_failed", { error: error61 });
-      });
       try {
-        const client = new OpenCodeClient(url2, password, resolved.engine.label);
-        const opened = await withDeadline3(
-          openSession(session, client, spec, resolved.log),
-          resolved.clock,
-          resolved.openTimeoutMs,
-          "open a session"
-        );
-        session.attach(
-          opened.id,
-          spec.prompt,
-          expiredSignInNotices(spec.env, resolved.clock.now()),
-          opened.resumed
-        );
+        const session = await openWithRetries(spec, password, resolved);
+        void session.exited.then(removeAuthorization).catch((error61) => {
+          resolved.log.warn("opencode.authorization_cleanup_failed", { error: error61 });
+        });
+        return session;
       } catch (error61) {
-        await session.suspend().catch(() => void 0);
+        await removeAuthorization();
         throw error61;
       }
-      resolved.log.info("opencode.opened", {
-        pid: session.pid,
-        sessionId: session.providerSessionId,
-        resumeFailed: session.resumeFailed
-      });
-      return session;
     }
   };
 }
@@ -40214,6 +40223,7 @@ function planOpenCodeSession(run, context) {
   const config2 = {
     existing: baseEnv[OPENCODE_CONFIG_ENV],
     readOnly,
+    ...context.skillPaths?.length ? { skillPaths: context.skillPaths } : {},
     mcp: {
       conversationId: run.conversationId,
       externalServers: mcp.servers,
@@ -40266,7 +40276,7 @@ function openCodeTurnInput(run, context) {
     ...images.length ? { imagePaths: images.map((image) => image.path) } : {}
   };
 }
-var import_http4, import_crypto13, import_promises24, import_path10, import_path11, import_url2, import_crypto14, IDLE_SOCKET_MS2, OpenCodeHttpError, OpenCodeClient, OPENCODE_CONFIG_ENV, OPENCODE_ENGINE, TEXT_PARTS, STEP_PARTS, STOPPED_BY_USER, OpenCodeSubagents, NAMED_KINDS, OPENCODE_ABORTED_ERROR, PROVIDER_EVENT_META, TASK_TOOL_NAME, TASK_RESULT_TAG, TASK_ERROR_TAG, PERMISSION_DENIED, FILE_OPERATIONS, PartReader, NOTHING, NON_INTERACTIVE_PERMISSIONS, CONTENT_FILTER_FINISHES, OUTPUT_PARTS, OpenCodeTurn, LISTENING, OUTPUT_TAIL_LINES, IMAGE_TYPES, OpenCodeSession, OPENCODE_MIN_VERSION, OPENCODE_REQUIREMENT, OPENCODE_TESTED_LINE, OPENCODE_SUPPORTED_MAJOR, DEFAULTS4, STORE_LOCKED, NON_INTERACTIVE_RULES, TITLE_LENGTH, MAX_VARIANT_LENGTH;
+var import_http4, import_crypto13, import_promises25, import_path10, import_path11, import_url2, import_crypto14, IDLE_SOCKET_MS2, OpenCodeHttpError, OpenCodeClient, OPENCODE_CONFIG_ENV, OPENCODE_ENGINE, TEXT_PARTS, STEP_PARTS, STOPPED_BY_USER, OpenCodeSubagents, NAMED_KINDS, OPENCODE_ABORTED_ERROR, PROVIDER_EVENT_META, TASK_TOOL_NAME, TASK_RESULT_TAG, TASK_ERROR_TAG, PERMISSION_DENIED, FILE_OPERATIONS, PartReader, NOTHING, NON_INTERACTIVE_PERMISSIONS, CONTENT_FILTER_FINISHES, OUTPUT_PARTS, OpenCodeTurn, LISTENING, OUTPUT_TAIL_LINES, IMAGE_TYPES, OpenCodeSession, OPENCODE_MIN_VERSION, OPENCODE_REQUIREMENT, OPENCODE_TESTED_LINE, OPENCODE_SUPPORTED_MAJOR, DEFAULTS4, STORE_LOCKED, NON_INTERACTIVE_RULES, TITLE_LENGTH, MAX_VARIANT_LENGTH;
 var init_opencode = __esm({
   "../agent-core/dist/providers/opencode.js"() {
     "use strict";
@@ -40275,12 +40285,12 @@ var init_opencode = __esm({
     init_chunk_54ZRJOQP();
     init_chunk_J2KTV5FP();
     init_chunk_M6YHY2EZ();
-    init_chunk_ITTV3UIM();
+    init_chunk_VX6QVMKD();
     init_chunk_YXWJW7I5();
     import_http4 = require("http");
     init_runtime_v2();
     import_crypto13 = require("crypto");
-    import_promises24 = require("fs/promises");
+    import_promises25 = require("fs/promises");
     import_path10 = require("path");
     init_agent2();
     import_path11 = require("path");
@@ -41366,6 +41376,7 @@ var init_opencode = __esm({
       stdoutDrainMs: 2e3,
       descendantScanMs: 5e3,
       openTimeoutMs: 6e4,
+      openAttempts: 2,
       startAttempts: 3,
       reconnectAttempts: 3,
       reconnectDelayMs: 500,
@@ -41444,6 +41455,7 @@ function createAlanCodeHolderDriver(options) {
           engineRoot,
           requestedModel: spec.model
         };
+        const skills = options.installedSkills?.() ?? null;
         const planned = planOpenCodeSession(spec, {
           command: engine.command,
           cwd: spec.projectPath ?? options.defaultCwd,
@@ -41453,7 +41465,8 @@ function createAlanCodeHolderDriver(options) {
           },
           providerEnv: inputs.providerEnv,
           ...managedMcp === void 0 ? {} : { managedMcp },
-          ...resumeId === void 0 ? {} : { resumeSessionId: resumeId }
+          ...resumeId === void 0 ? {} : { resumeSessionId: resumeId },
+          ...skills === null ? {} : { skillPaths: [skills.skillsDir] }
         });
         return {
           spec: { opencode: planned.spec, profile },
@@ -41504,14 +41517,18 @@ function createClaudeHolderDriver(options) {
     {
       harness: "claude_cli",
       displayName: "Claude CLI",
-      plan: (spec, inputs, resumeId, managedMcp) => planClaudeSession(spec, {
-        command: options.command ?? "claude",
-        cwd: spec.projectPath ?? options.defaultCwd,
-        cliEnv: options.cliEnvironment,
-        providerEnv: inputs.providerEnv,
-        ...managedMcp === void 0 ? {} : { managedMcp },
-        ...resumeId === void 0 ? {} : { resumeId }
-      }),
+      plan: (spec, inputs, resumeId, managedMcp) => {
+        const skills = options.installedSkills?.() ?? null;
+        return planClaudeSession(spec, {
+          command: options.command ?? "claude",
+          cwd: spec.projectPath ?? options.defaultCwd,
+          cliEnv: options.cliEnvironment,
+          providerEnv: inputs.providerEnv,
+          ...managedMcp === void 0 ? {} : { managedMcp },
+          ...resumeId === void 0 ? {} : { resumeId },
+          ...skills === null ? {} : { pluginDirs: [skills.pluginDir] }
+        });
+      },
       canResume: (planned, resumeId) => claudeSessionLogExists({
         sessionId: resumeId,
         cwd: planned.spec.cwd,
@@ -41548,7 +41565,7 @@ __export(codex_exports, {
   createCodexHolderDriver: () => createCodexHolderDriver
 });
 function sha2562(value) {
-  return (0, import_node_crypto12.createHash)("sha256").update(value).digest("hex");
+  return (0, import_node_crypto13.createHash)("sha256").update(value).digest("hex");
 }
 function createCodexLogin(broker) {
   const state = {};
@@ -41623,11 +41640,11 @@ function createCodexHolderDriver(options) {
     }
   );
 }
-var import_node_crypto12;
+var import_node_crypto13;
 var init_codex2 = __esm({
   "src/holder/drivers/codex.ts"() {
     "use strict";
-    import_node_crypto12 = require("crypto");
+    import_node_crypto13 = require("crypto");
     init_dist();
     init_codex();
     init_persistent();
@@ -41734,8 +41751,8 @@ function createDroidPeer(writer, handlers) {
     },
     request: (method, params = {}) => {
       const id = `alan-${counter.next++}`;
-      return new Promise((resolve6, reject) => {
-        pending.set(id, { method, resolve: resolve6, reject });
+      return new Promise((resolve7, reject) => {
+        pending.set(id, { method, resolve: resolve7, reject });
         writer.write(envelope("request", { id, method, params })).catch((error61) => {
           pending.delete(id);
           reject(error61 instanceof Error ? error61 : new Error(String(error61)));
@@ -42070,12 +42087,12 @@ async function droidTurnInput(run, context) {
   const encoded = await Promise.all(
     images.map(async (image) => ({
       mimeType: image.mimeType,
-      data: (await (0, import_promises25.readFile)(image.path)).toString("base64")
+      data: (await (0, import_promises26.readFile)(image.path)).toString("base64")
     }))
   );
   return { turnId: run.runId, text: text2, ...encoded.length ? { images: encoded } : {} };
 }
-var import_crypto15, import_promises25, FACTORY_API_VERSION, FACTORY_PROTOCOL_VERSION, SUBAGENT_TOOLS, TASK_OUTPUT_TOOLS, TASK_STOP_TOOLS, SILENT2, DroidTurn, STDERR_TAIL_LINES5, UNSUPPORTED_REQUEST2, DroidSession, DEFAULTS5, DROID_REQUIREMENT, DROID_JSONRPC_ARGS;
+var import_crypto15, import_promises26, FACTORY_API_VERSION, FACTORY_PROTOCOL_VERSION, SUBAGENT_TOOLS, TASK_OUTPUT_TOOLS, TASK_STOP_TOOLS, SILENT2, DroidTurn, STDERR_TAIL_LINES5, UNSUPPORTED_REQUEST2, DroidSession, DEFAULTS5, DROID_REQUIREMENT, DROID_JSONRPC_ARGS;
 var init_droid = __esm({
   "../agent-core/dist/providers/droid.js"() {
     "use strict";
@@ -42084,11 +42101,11 @@ var init_droid = __esm({
     init_chunk_54ZRJOQP();
     init_chunk_J2KTV5FP();
     init_chunk_M6YHY2EZ();
-    init_chunk_ITTV3UIM();
+    init_chunk_VX6QVMKD();
     init_chunk_YXWJW7I5();
     init_runtime_v2();
     import_crypto15 = require("crypto");
-    import_promises25 = require("fs/promises");
+    import_promises26 = require("fs/promises");
     init_agent2();
     FACTORY_API_VERSION = "1.0.0";
     FACTORY_PROTOCOL_VERSION = "1.187.0";
@@ -42360,14 +42377,14 @@ var init_droid = __esm({
         const turn = new DroidTurn(sessionId, this.#memory);
         let finish = () => {
         };
-        const done = new Promise((resolve6) => {
+        const done = new Promise((resolve7) => {
           finish = (outcome2) => {
             if (this.#current?.id !== id) return;
             this.#current = void 0;
             if (this.#state === "busy") this.#state = "idle";
             this.#host.scanDescendants(true);
             this.#emit({ type: "turn_ended", turnId: id, outcome: outcome2 });
-            resolve6({ turnId: id, outcome: outcome2, providerSessionId: this.#sessionId });
+            resolve7({ turnId: id, outcome: outcome2, providerSessionId: this.#sessionId });
           };
         });
         const active = { id, turn, done, finish, cancelRequested: false };
@@ -42515,14 +42532,18 @@ function createOpenCodeHolderDriver(options) {
     {
       harness: "opencode_serve",
       displayName: "OpenCode server",
-      plan: (spec, inputs, resumeId, managedMcp) => planOpenCodeSession(spec, {
-        command: options.command ?? "opencode",
-        cwd: spec.projectPath ?? options.defaultCwd,
-        cliEnv: options.cliEnvironment,
-        providerEnv: inputs.providerEnv,
-        ...managedMcp === void 0 ? {} : { managedMcp },
-        ...resumeId === void 0 ? {} : { resumeSessionId: resumeId }
-      }),
+      plan: (spec, inputs, resumeId, managedMcp) => {
+        const skills = options.installedSkills?.() ?? null;
+        return planOpenCodeSession(spec, {
+          command: options.command ?? "opencode",
+          cwd: spec.projectPath ?? options.defaultCwd,
+          cliEnv: options.cliEnvironment,
+          providerEnv: inputs.providerEnv,
+          ...managedMcp === void 0 ? {} : { managedMcp },
+          ...resumeId === void 0 ? {} : { resumeSessionId: resumeId },
+          ...skills === null ? {} : { skillPaths: [skills.skillsDir] }
+        });
+      },
       canResume: () => true,
       open: async (spec) => {
         const session = await sessions.open(spec);
@@ -42559,7 +42580,7 @@ function settingsPath(env) {
 async function readSettings(path) {
   let raw;
   try {
-    raw = (await (0, import_promises26.readFile)(path, "utf8")).trim();
+    raw = (await (0, import_promises27.readFile)(path, "utf8")).trim();
   } catch {
     return {};
   }
@@ -42577,8 +42598,8 @@ async function selectAntigravityApiKeyMode(env) {
   const settings2 = await readSettings(path);
   if (settings2 === "malformed") return "malformed";
   if (settings2.modelProvider === "gemini") return "already_selected";
-  await (0, import_promises26.mkdir)((0, import_path12.dirname)(path), { recursive: true });
-  await (0, import_promises26.writeFile)(path, JSON.stringify({ ...settings2, modelProvider: "gemini" }), { mode: 384 });
+  await (0, import_promises27.mkdir)((0, import_path12.dirname)(path), { recursive: true });
+  await (0, import_promises27.writeFile)(path, JSON.stringify({ ...settings2, modelProvider: "gemini" }), { mode: 384 });
   return "selected";
 }
 function readAntigravityCapabilities(version2, help) {
@@ -43177,7 +43198,7 @@ function antigravityTurnInput(run, context) {
   });
   return { turnId: run.runId, text: appendImagePathReferences(text2, images) };
 }
-var import_promises26, import_path12, import_fs8, import_path13, import_path14, import_url3, import_crypto16, NO_ANTIGRAVITY_CAPABILITIES, INSTRUCTIONS_FILE, MAX_INSTRUCTION_CHARS, SHORTENED_NOTE, DIFF_BLOCK_START, DIFF_BLOCK_END, HUNK_HEADER, TRANSCRIPT_FILE, FULL_TRANSCRIPT_FILE, LOG_DIRS, TOOL_RESULT_TYPES, BrainTranscript, AntigravityTranscripts, ANTIGRAVITY_GRAMMAR_NAME, AntigravityGrammar, ignored, HANDLERS, SUCCESSFUL_STATUSES, SESSION_START_TYPES, RESULT_TYPES, SUBAGENT_START_TYPES, RESUME_FORKED, EXITED_WITHOUT_RESULT, AntigravityTurn, DEFAULTS6, AntigravitySession, WINDOWS_LINE_MARGIN;
+var import_promises27, import_path12, import_fs8, import_path13, import_path14, import_url3, import_crypto16, NO_ANTIGRAVITY_CAPABILITIES, INSTRUCTIONS_FILE, MAX_INSTRUCTION_CHARS, SHORTENED_NOTE, DIFF_BLOCK_START, DIFF_BLOCK_END, HUNK_HEADER, TRANSCRIPT_FILE, FULL_TRANSCRIPT_FILE, LOG_DIRS, TOOL_RESULT_TYPES, BrainTranscript, AntigravityTranscripts, ANTIGRAVITY_GRAMMAR_NAME, AntigravityGrammar, ignored, HANDLERS, SUCCESSFUL_STATUSES, SESSION_START_TYPES, RESULT_TYPES, SUBAGENT_START_TYPES, RESUME_FORKED, EXITED_WITHOUT_RESULT, AntigravityTurn, DEFAULTS6, AntigravitySession, WINDOWS_LINE_MARGIN;
 var init_antigravity = __esm({
   "../agent-core/dist/providers/antigravity.js"() {
     "use strict";
@@ -43186,9 +43207,9 @@ var init_antigravity = __esm({
     init_chunk_XC5676SG();
     init_chunk_54ZRJOQP();
     init_chunk_M6YHY2EZ();
-    init_chunk_ITTV3UIM();
+    init_chunk_VX6QVMKD();
     init_chunk_YXWJW7I5();
-    import_promises26 = require("fs/promises");
+    import_promises27 = require("fs/promises");
     import_path12 = require("path");
     init_type_guards();
     import_fs8 = require("fs");
@@ -43688,7 +43709,7 @@ function parseConfig(raw) {
 }
 async function writeCommandCodeProjectMcp(cwd, mcp) {
   const path = (0, import_path15.join)(cwd, ".mcp.json");
-  const original = await (0, import_promises27.readFile)(path, "utf8").catch(() => null);
+  const original = await (0, import_promises28.readFile)(path, "utf8").catch(() => null);
   const config2 = parseConfig(original);
   const next = {
     ...config2,
@@ -43705,12 +43726,12 @@ async function writeCommandCodeProjectMcp(cwd, mcp) {
       }
     }
   };
-  await (0, import_promises27.mkdir)(cwd, { recursive: true });
-  await (0, import_promises27.writeFile)(path, `${JSON.stringify(next, null, 2)}
+  await (0, import_promises28.mkdir)(cwd, { recursive: true });
+  await (0, import_promises28.writeFile)(path, `${JSON.stringify(next, null, 2)}
 `);
   return async () => {
-    if (original === null) await (0, import_promises27.rm)(path, { force: true });
-    else await (0, import_promises27.writeFile)(path, original);
+    if (original === null) await (0, import_promises28.rm)(path, { force: true });
+    else await (0, import_promises28.writeFile)(path, original);
   };
 }
 function commandCodeString(value) {
@@ -43882,7 +43903,7 @@ function commandCodeTurnInput(run, context) {
   });
   return { turnId: run.runId, text: appendImagePathReferences(text2, images) };
 }
-var import_promises27, import_path15, import_crypto17, COMMAND_CODE_GRAMMAR_NAME, SILENT3, CommandCodeGrammar, SHELL_TOOL, STOP_TOOLS, REPORTED_STATUS, SHELL_STATUS, SWEEP_INTERVAL_MS, CommandCodeBackgroundTasks, EXITED_WITHOUT_RESULT2, CommandCodeTurn, COMMAND_CODE_MAX_TURNS, DEFAULTS7, CommandCodeSession;
+var import_promises28, import_path15, import_crypto17, COMMAND_CODE_GRAMMAR_NAME, SILENT3, CommandCodeGrammar, SHELL_TOOL, STOP_TOOLS, REPORTED_STATUS, SHELL_STATUS, SWEEP_INTERVAL_MS, CommandCodeBackgroundTasks, EXITED_WITHOUT_RESULT2, CommandCodeTurn, COMMAND_CODE_MAX_TURNS, DEFAULTS7, CommandCodeSession;
 var init_command_code = __esm({
   "../agent-core/dist/providers/command-code.js"() {
     "use strict";
@@ -43891,9 +43912,9 @@ var init_command_code = __esm({
     init_chunk_54ZRJOQP();
     init_chunk_J2KTV5FP();
     init_chunk_M6YHY2EZ();
-    init_chunk_ITTV3UIM();
+    init_chunk_VX6QVMKD();
     init_chunk_YXWJW7I5();
-    import_promises27 = require("fs/promises");
+    import_promises28 = require("fs/promises");
     import_path15 = require("path");
     init_agent2();
     init_runtime_v2();
@@ -44755,7 +44776,7 @@ function transportFailure(request2, error61) {
   });
 }
 function readBody(incoming, url2, maxBytes) {
-  return new Promise((resolve6, reject) => {
+  return new Promise((resolve7, reject) => {
     const declared = Number(incoming.headers["content-length"] ?? "0");
     if (maxBytes !== void 0 && declared > maxBytes) {
       incoming.destroy();
@@ -44774,7 +44795,7 @@ function readBody(incoming, url2, maxBytes) {
       chunks.push(chunk);
     });
     incoming.on("error", reject);
-    incoming.on("end", () => resolve6(Buffer.concat(chunks)));
+    incoming.on("end", () => resolve7(Buffer.concat(chunks)));
   });
 }
 function isConnectionReset(error61) {
@@ -44782,7 +44803,7 @@ function isConnectionReset(error61) {
 }
 function exchange(request2, agents, attempt = 0) {
   const { signal, url: url2 } = request2;
-  return new Promise((resolve6, reject) => {
+  return new Promise((resolve7, reject) => {
     if (signal.aborted) {
       reject(signal.reason);
       return;
@@ -44809,7 +44830,7 @@ function exchange(request2, agents, attempt = 0) {
       const stale = outgoing.reusedSocket && !responded && isConnectionReset(error61);
       if (stale && attempt < STALE_SOCKET_RETRIES && !signal.aborted) {
         settle();
-        resolve6(exchange(request2, agents, attempt + 1));
+        resolve7(exchange(request2, agents, attempt + 1));
         return;
       }
       fail(error61);
@@ -44822,7 +44843,7 @@ function exchange(request2, agents, attempt = 0) {
       readBody(incoming, url2, isRedirect(status) ? void 0 : request2.maxBodyBytes).then(
         (body) => {
           settle();
-          resolve6({ status, headers: incoming.headers, body });
+          resolve7({ status, headers: incoming.headers, body });
         },
         fail
       );
@@ -45111,7 +45132,7 @@ function createGitRunner(options) {
       }
       await killProcessTree(child.pid, { signal: "SIGKILL", child, platform });
     };
-    return new Promise((resolve6, reject) => {
+    return new Promise((resolve7, reject) => {
       let ending = null;
       const stop = (next) => {
         if (ending !== null) return;
@@ -45136,7 +45157,7 @@ function createGitRunner(options) {
         signal.removeEventListener("abort", onAbort);
         const final = ending ?? last;
         if (final.kind === "exited") {
-          resolve6({ exitCode: final.exitCode, stdout: stdout.text(), stderr: stderr.text() });
+          resolve7({ exitCode: final.exitCode, stdout: stdout.text(), stderr: stderr.text() });
         } else {
           reject(faultFor(final, command));
         }
@@ -45636,7 +45657,7 @@ function statusOf(error61) {
   }
   return 1;
 }
-var systemExec = (request2) => new Promise((resolve6) => {
+var systemExec = (request2) => new Promise((resolve7) => {
   const child = (0, import_node_child_process5.execFile)(
     request2.command,
     [...request2.args],
@@ -45647,7 +45668,7 @@ var systemExec = (request2) => new Promise((resolve6) => {
       windowsHide: true
     },
     (error61, stdout, stderr) => {
-      resolve6({ status: statusOf(error61), stdout, stderr });
+      resolve7({ status: statusOf(error61), stdout, stderr });
     }
   );
   child.stdin?.on("error", () => {
@@ -45925,10 +45946,10 @@ function createIgnoreMatcher(path) {
   const expression = globToRegExp(pattern);
   return (candidate) => expression.test(candidate) || expression.test(`${candidate}/`);
 }
-function isIgnored(normalizedPath, basename6, isDirectory2, configured) {
-  if (isDirectory2 && ALWAYS_IGNORED_DIRECTORIES.has(basename6))
+function isIgnored(normalizedPath, basename7, isDirectory2, configured) {
+  if (isDirectory2 && ALWAYS_IGNORED_DIRECTORIES.has(basename7))
     return true;
-  if (!isDirectory2 && ALWAYS_IGNORED_FILES.has(basename6))
+  if (!isDirectory2 && ALWAYS_IGNORED_FILES.has(basename7))
     return true;
   return configured.some((matches) => matches(normalizedPath));
 }
@@ -46187,6 +46208,9 @@ function uuidV5(name, namespace) {
 function alanSkillId(slug) {
   return uuidV5(`alan:${slug}`, ALAN_SKILL_NAMESPACE);
 }
+function alanSkillVersionId(slug, contentHash) {
+  return uuidV5(`alan:${slug}:${contentHash}`, ALAN_SKILL_NAMESPACE);
+}
 
 // src/capabilities/skills/store.ts
 init_runtime_v2();
@@ -46196,9 +46220,12 @@ function skillsLayout(stateDir, home) {
   return {
     root,
     installedFile: (0, import_node_path11.join)(root, "installed.json"),
+    retiredFile: (0, import_node_path11.join)(root, "retired.json"),
     localFile: (0, import_node_path11.join)(root, "local.json"),
     versionsDir: (0, import_node_path11.join)(root, "versions"),
     tmpDir: (0, import_node_path11.join)(root, "tmp"),
+    pluginDir: (0, import_node_path11.join)(root, "alan-plugin"),
+    pluginSkillsDir: (0, import_node_path11.join)(root, "alan-plugin", "skills"),
     nativeDir: home === void 0 || home === "" ? null : (0, import_node_path11.join)(home, ".agents", "skills")
   };
 }
@@ -46260,18 +46287,20 @@ async function isIntact(layout, skill) {
     return false;
   }
 }
-async function resolveNativeBuiltIn(layout, invocation) {
+async function resolveNativeBuiltIn(layout, invocation, baked) {
   const slug = invocation.displayName;
   if (layout.nativeDir === null || invocation.skillId !== alanSkillId(slug)) return null;
   const directory = (0, import_node_path11.join)(layout.nativeDir, slug);
   try {
-    await inspectSkillPackage(directory, { expectedName: slug });
+    const inspected = await inspectSkillPackage(directory, { expectedName: slug });
+    if (baked === "exact" && alanSkillVersionId(slug, inspected.contentHash) !== invocation.versionId)
+      return null;
     return { packageDirectory: directory };
   } catch {
     return null;
   }
 }
-async function resolveSkillInvocations(layout, invocations) {
+async function resolveSkillInvocations(layout, invocations, baked = "any") {
   if (invocations.length === 0) return { kind: "resolved", skills: [] };
   const installed = await readInstalledSkills(layout);
   const local = invocations.some((invocation) => invocation.kind === "local_skill") ? await readLocalSkills(layout) : null;
@@ -46291,7 +46320,7 @@ async function resolveSkillInvocations(layout, invocations) {
       resolved.push({ packageDirectory: packageDirectory(layout, skill.versionId) });
       continue;
     }
-    const native = await resolveNativeBuiltIn(layout, invocation);
+    const native = await resolveNativeBuiltIn(layout, invocation, baked);
     if (native === null) missing.push(invocation.displayName);
     else resolved.push(native);
   }
@@ -46313,12 +46342,19 @@ async function availableSkillIndex(layout) {
         candidates2.push({ directory: (0, import_node_path11.join)(layout.nativeDir, entry.name) });
     }
   }
-  for (const candidate of candidates2.slice(0, 2e3)) {
-    const skill = await inspectIndexedSkill(candidate.directory, candidate.contentHash);
-    if (skill !== null && !found.has(skill.name)) found.set(skill.name, skill);
+  const bounded = candidates2.slice(0, 2e3);
+  for (let start = 0; start < bounded.length; start += INDEX_CONCURRENCY) {
+    const batch = bounded.slice(start, start + INDEX_CONCURRENCY);
+    const inspected = await Promise.all(
+      batch.map((candidate) => inspectIndexedSkill(candidate.directory, candidate.contentHash))
+    );
+    for (const skill of inspected) {
+      if (skill !== null && !found.has(skill.name)) found.set(skill.name, skill);
+    }
   }
   return [...found.values()].sort((a, b) => a.name.localeCompare(b.name));
 }
+var INDEX_CONCURRENCY = 8;
 async function inspectIndexedSkill(directory, contentHash) {
   try {
     const inspected = await inspectSkillPackage(directory, { expectedName: null });
@@ -46330,15 +46366,34 @@ async function inspectIndexedSkill(directory, contentHash) {
   }
 }
 
+// src/capabilities/skills/native-index.ts
+var import_node_crypto10 = require("crypto");
+var import_node_fs7 = require("fs");
+var import_promises20 = require("fs/promises");
+var import_node_path12 = require("path");
+var ALAN_SKILLS_PLUGIN_NAME = "alan";
+var PLUGIN_MANIFEST = `${JSON.stringify(
+  {
+    name: ALAN_SKILLS_PLUGIN_NAME,
+    description: "Skills Alan installed on this machine for you and your team."
+  },
+  null,
+  2
+)}
+`;
+function installedSkillFolders(layout) {
+  return (0, import_node_fs7.existsSync)((0, import_node_path12.join)(layout.pluginDir, ".claude-plugin", "plugin.json")) ? { pluginDir: layout.pluginDir, skillsDir: layout.pluginSkillsDir } : null;
+}
+
 // src/capabilities/workspace/index.ts
-var import_node_path14 = require("path");
+var import_node_path15 = require("path");
 
 // src/capabilities/workspace/approved-paths.ts
-var import_promises20 = require("fs/promises");
+var import_promises21 = require("fs/promises");
 init_zod();
 
 // src/capabilities/workspace/paths.ts
-var import_node_path12 = require("path");
+var import_node_path13 = require("path");
 function stripWin32Namespace(path) {
   if (/^\\\\\?\\UNC\\/i.test(path)) return `\\\\${path.slice(8)}`;
   if (path.startsWith("\\\\?\\")) return path.slice(4);
@@ -46346,15 +46401,15 @@ function stripWin32Namespace(path) {
 }
 function comparablePath(path, platform) {
   if (platform === "win32") {
-    const normalized3 = import_node_path12.win32.normalize(stripWin32Namespace(path).replaceAll("/", "\\"));
+    const normalized3 = import_node_path13.win32.normalize(stripWin32Namespace(path).replaceAll("/", "\\"));
     const trimmed4 = normalized3.length > 3 || !/^[a-z]:\\$/i.test(normalized3) ? normalized3.replace(/\\+$/, "") : normalized3;
     return trimmed4.toLowerCase();
   }
-  const normalized2 = import_node_path12.posix.normalize(path);
+  const normalized2 = import_node_path13.posix.normalize(path);
   return normalized2.length > 1 ? normalized2.replace(/\/+$/, "") : normalized2;
 }
 function isAbsoluteFor(path, platform) {
-  return platform === "win32" ? import_node_path12.win32.isAbsolute(path) : import_node_path12.posix.isAbsolute(path);
+  return platform === "win32" ? import_node_path13.win32.isAbsolute(path) : import_node_path13.posix.isAbsolute(path);
 }
 function isWithin(root, candidate, platform) {
   const separator = platform === "win32" ? "\\" : "/";
@@ -46372,7 +46427,7 @@ var storeSchema = external_exports.object({
 });
 async function realpathOrNull(path) {
   try {
-    return await (0, import_promises20.realpath)(path);
+    return await (0, import_promises21.realpath)(path);
   } catch (error61) {
     const code = errnoCode(error61);
     if (code === "ENOENT" || code === "ENOTDIR" || code === "EACCES" || code === "EPERM") {
@@ -46431,9 +46486,9 @@ async function openApprovedPaths(options) {
 }
 
 // src/capabilities/workspace/locks.ts
-var import_node_crypto10 = require("crypto");
-var import_promises21 = require("fs/promises");
-var import_node_path13 = require("path");
+var import_node_crypto11 = require("crypto");
+var import_promises22 = require("fs/promises");
+var import_node_path14 = require("path");
 init_zod();
 var LOCK_FORMAT = 1;
 var EXCLUSIVE_FILE = "exclusive.json";
@@ -46448,12 +46503,12 @@ var ownerSchema = external_exports.object({
   since: external_exports.number().int().nonnegative()
 });
 function repositoryLockKey(commonDir, platform) {
-  return (0, import_node_crypto10.createHash)("sha256").update(comparablePath(commonDir, platform)).digest("hex").slice(0, 32);
+  return (0, import_node_crypto11.createHash)("sha256").update(comparablePath(commonDir, platform)).digest("hex").slice(0, 32);
 }
 async function readOwner(path) {
   let text2;
   try {
-    text2 = await (0, import_promises21.readFile)(path, "utf8");
+    text2 = await (0, import_promises22.readFile)(path, "utf8");
   } catch (error61) {
     if (errnoCode(error61) === "ENOENT") return { kind: "missing" };
     return { kind: "unreadable" };
@@ -46474,7 +46529,7 @@ async function removeIfSame(path, expected) {
     if (current.kind !== "owner" || current.owner.since !== expected.since) return;
     if (current.owner.pid !== expected.pid || current.owner.holder !== expected.holder) return;
   }
-  await (0, import_promises21.unlink)(path).catch((error61) => {
+  await (0, import_promises22.unlink)(path).catch((error61) => {
     if (errnoCode(error61) !== "ENOENT") throw error61;
   });
 }
@@ -46499,7 +46554,7 @@ function openRepositoryLocks(options) {
       await removeIfSame(path, read.owner);
       return null;
     }
-    const age = await (0, import_promises21.stat)(path).then(
+    const age = await (0, import_promises22.stat)(path).then(
       (info) => clock.now() - info.mtimeMs,
       () => 0
     );
@@ -46513,13 +46568,13 @@ function openRepositoryLocks(options) {
   });
   const folder = async (commonDir) => {
     const key = repositoryLockKey(commonDir, platform);
-    const dir = (0, import_node_path13.join)(options.dir, key);
-    await (0, import_promises21.mkdir)(dir, { recursive: true, mode: 448 });
+    const dir = (0, import_node_path14.join)(options.dir, key);
+    await (0, import_promises22.mkdir)(dir, { recursive: true, mode: 448 });
     return { key, dir };
   };
   const createExclusive = async (path, owner) => {
     try {
-      const handle = await (0, import_promises21.open)(path, "wx", 384);
+      const handle = await (0, import_promises22.open)(path, "wx", 384);
       try {
         await handle.writeFile(JSON.stringify(owner));
       } finally {
@@ -46532,10 +46587,10 @@ function openRepositoryLocks(options) {
     }
   };
   const liveRun = async (dir) => {
-    const entries = await (0, import_promises21.readdir)(dir);
+    const entries = await (0, import_promises22.readdir)(dir);
     for (const entry of entries) {
       if (!entry.startsWith(RUN_FILE_PREFIX)) continue;
-      const holder = await heldBy((0, import_node_path13.join)(dir, entry));
+      const holder = await heldBy((0, import_node_path14.join)(dir, entry));
       if (holder !== null) return holder;
     }
     return null;
@@ -46543,7 +46598,7 @@ function openRepositoryLocks(options) {
   return {
     tryExclusive: async (commonDir, operationId) => {
       const { key, dir } = await folder(commonDir);
-      const path = (0, import_node_path13.join)(dir, EXCLUSIVE_FILE);
+      const path = (0, import_node_path14.join)(dir, EXCLUSIVE_FILE);
       const owner = await self(operationId);
       if (!await createExclusive(path, owner)) {
         const holder = await heldBy(path);
@@ -46561,11 +46616,11 @@ function openRepositoryLocks(options) {
     },
     tryShared: async (commonDir, runId) => {
       const { key, dir } = await folder(commonDir);
-      const file2 = `${RUN_FILE_PREFIX}${(0, import_node_crypto10.createHash)("sha256").update(runId).digest("hex").slice(0, 32)}.json`;
-      const path = (0, import_node_path13.join)(dir, file2);
+      const file2 = `${RUN_FILE_PREFIX}${(0, import_node_crypto11.createHash)("sha256").update(runId).digest("hex").slice(0, 32)}.json`;
+      const path = (0, import_node_path14.join)(dir, file2);
       const owner = await self(runId);
       await writeJsonFileAtomic(path, owner);
-      const operation = await heldBy((0, import_node_path13.join)(dir, EXCLUSIVE_FILE));
+      const operation = await heldBy((0, import_node_path14.join)(dir, EXCLUSIVE_FILE));
       if (operation !== null) {
         await removeIfSame(path, owner);
         return { kind: "busy", holder: operation };
@@ -46577,33 +46632,33 @@ function openRepositoryLocks(options) {
 
 // src/cli/config.ts
 var import_node_os7 = require("os");
-var import_node_path28 = require("path");
+var import_node_path29 = require("path");
 init_zod();
 
 // src/client/locate.ts
-var import_node_path15 = require("path");
+var import_node_path16 = require("path");
 var RUNTIME_PROFILES = ["production", "staging", "development", "local"];
 function defaultStateDir({ profile, platform, home, env }) {
   if (platform === "win32") {
-    return (0, import_node_path15.join)(env.LOCALAPPDATA ?? (0, import_node_path15.join)(home, "AppData", "Local"), "Alan", profile);
+    return (0, import_node_path16.join)(env.LOCALAPPDATA ?? (0, import_node_path16.join)(home, "AppData", "Local"), "Alan", profile);
   }
-  return (0, import_node_path15.join)(env.XDG_STATE_HOME ?? (0, import_node_path15.join)(home, ".local", "state"), "alan", profile);
+  return (0, import_node_path16.join)(env.XDG_STATE_HOME ?? (0, import_node_path16.join)(home, ".local", "state"), "alan", profile);
 }
 function defaultInstallDir({ platform, home, env }) {
   if (platform === "win32") {
-    return (0, import_node_path15.join)(env.LOCALAPPDATA ?? (0, import_node_path15.join)(home, "AppData", "Local"), "Alan", "runtime");
+    return (0, import_node_path16.join)(env.LOCALAPPDATA ?? (0, import_node_path16.join)(home, "AppData", "Local"), "Alan", "runtime");
   }
-  return (0, import_node_path15.join)(env.XDG_DATA_HOME ?? (0, import_node_path15.join)(home, ".local", "share"), "alan", "runtime");
+  return (0, import_node_path16.join)(env.XDG_DATA_HOME ?? (0, import_node_path16.join)(home, ".local", "share"), "alan", "runtime");
 }
 
 // src/sessions/index.ts
-var import_node_crypto15 = require("crypto");
-var import_promises37 = require("fs/promises");
+var import_node_crypto16 = require("crypto");
+var import_promises38 = require("fs/promises");
 var import_node_os6 = require("os");
-var import_node_path27 = require("path");
+var import_node_path28 = require("path");
 
 // src/holder/control-client.ts
-var import_node_crypto11 = require("crypto");
+var import_node_crypto12 = require("crypto");
 var import_node_net = require("net");
 
 // src/holder/ndjson.ts
@@ -46767,7 +46822,7 @@ function createProviderDrivers(options) {
 }
 
 // src/holder/engine-records.ts
-var import_node_path16 = require("path");
+var import_node_path17 = require("path");
 init_zod();
 var ENGINES_FILE = "engines.json";
 var engineRecordSchema = external_exports.object({
@@ -46777,7 +46832,7 @@ var engineRecordSchema = external_exports.object({
 });
 var engineRecordsSchema = external_exports.object({ engines: external_exports.array(engineRecordSchema) });
 function engineRecordsPath(sessionDir) {
-  return (0, import_node_path16.join)(sessionDir, ENGINES_FILE);
+  return (0, import_node_path17.join)(sessionDir, ENGINES_FILE);
 }
 function recordSpawnedEngines(path, clock, log) {
   const live = /* @__PURE__ */ new Map();
@@ -46832,17 +46887,17 @@ function createConversationMcpAuthorization(options) {
 }
 
 // src/holder/mcp-helper-access.ts
-var import_promises28 = require("fs/promises");
+var import_promises29 = require("fs/promises");
 function createHelperMcpAccess(options) {
   return {
     [Symbol.asyncDispose]: async () => {
-      await (0, import_promises28.rm)(options.credentialPath, { force: true });
+      await (0, import_promises29.rm)(options.credentialPath, { force: true });
     },
     url: options.managedMcp.url,
     authorization: async (signal) => {
       const authorization = await options.managedMcp.authorization(signal);
       if (authorization === void 0 || signal.aborted) {
-        await (0, import_promises28.rm)(options.credentialPath, { force: true });
+        await (0, import_promises29.rm)(options.credentialPath, { force: true });
         return void 0;
       }
       const credential = {
@@ -46857,8 +46912,8 @@ function createHelperMcpAccess(options) {
 }
 
 // src/holder/run-inputs.ts
-var import_promises29 = require("fs/promises");
-var import_node_path17 = require("path");
+var import_promises30 = require("fs/promises");
+var import_node_path18 = require("path");
 var NO_RUN_INPUTS = {
   attachments: [],
   providerEnv: {},
@@ -46871,18 +46926,18 @@ function safeFilename(filename) {
   return safe || "attachment";
 }
 async function prepareRunInputs(spec, { source, tmpDir, signal, skills = [] }) {
-  const dir = (0, import_node_path17.join)(tmpDir, "runs", spec.runId);
+  const dir = (0, import_node_path18.join)(tmpDir, "runs", spec.runId);
   const cleanup = async () => {
-    await (0, import_promises29.rm)(dir, { recursive: true, force: true });
+    await (0, import_promises30.rm)(dir, { recursive: true, force: true });
   };
   try {
     const credential = await source.fetchProviderCredential(spec.runId, signal);
     const attachments = [];
-    if (spec.attachments?.length) await (0, import_promises29.mkdir)(dir, { recursive: true, mode: 448 });
+    if (spec.attachments?.length) await (0, import_promises30.mkdir)(dir, { recursive: true, mode: 448 });
     for (const [index, attachment] of (spec.attachments ?? []).entries()) {
       const bytes = await source.downloadAttachment(spec.runId, attachment.id, signal);
-      const path = (0, import_node_path17.join)(dir, `${index}-${safeFilename(attachment.filename)}`);
-      await (0, import_promises29.writeFile)(path, bytes, { mode: 384 });
+      const path = (0, import_node_path18.join)(dir, `${index}-${safeFilename(attachment.filename)}`);
+      await (0, import_promises30.writeFile)(path, bytes, { mode: 384 });
       attachments.push({
         id: attachment.id,
         kind: attachment.kind,
@@ -46909,30 +46964,30 @@ async function prepareRunInputs(spec, { source, tmpDir, signal, skills = [] }) {
 }
 
 // src/holder/serve.ts
-var import_node_crypto14 = require("crypto");
-var import_node_fs10 = require("fs");
+var import_node_crypto15 = require("crypto");
+var import_node_fs11 = require("fs");
 var import_node_net2 = require("net");
-var import_node_path26 = require("path");
+var import_node_path27 = require("path");
 init_runtime_v2();
 
 // src/holder/admission.ts
-var import_node_fs8 = require("fs");
-var import_promises33 = require("fs/promises");
+var import_node_fs9 = require("fs");
+var import_promises34 = require("fs/promises");
 var import_node_os5 = require("os");
-var import_node_path22 = require("path");
+var import_node_path23 = require("path");
 init_constants();
 
 // ../shared/dist/node/local-workspace.js
-var import_node_fs7 = require("fs");
+var import_node_fs8 = require("fs");
 var import_node_os4 = require("os");
-var import_node_path18 = require("path");
+var import_node_path19 = require("path");
 function resolveAlanDefaultWorkspacePath(homeDirectory = (0, import_node_os4.homedir)()) {
-  return (0, import_node_path18.join)(homeDirectory, ".alan", "workspace");
+  return (0, import_node_path19.join)(homeDirectory, ".alan", "workspace");
 }
 
 // src/holder/admission-relocation.ts
-var import_promises30 = require("fs/promises");
-var import_node_path19 = require("path");
+var import_promises31 = require("fs/promises");
+var import_node_path20 = require("path");
 var MAX_RELOCATION_CANDIDATES = 200;
 var RELOCATION_BUDGET_MS = 2e4;
 function repositoryIdentity(url2) {
@@ -46967,8 +47022,8 @@ async function originIdentity(git, path, signal) {
 }
 async function childDirectories(parent, limit) {
   try {
-    const entries = await (0, import_promises30.readdir)(parent, { withFileTypes: true });
-    return entries.filter((entry) => entry.isDirectory()).slice(0, limit).map((entry) => (0, import_node_path19.join)(parent, entry.name));
+    const entries = await (0, import_promises31.readdir)(parent, { withFileTypes: true });
+    return entries.filter((entry) => entry.isDirectory()).slice(0, limit).map((entry) => (0, import_node_path20.join)(parent, entry.name));
   } catch {
     return [];
   }
@@ -46976,7 +47031,7 @@ async function childDirectories(parent, limit) {
 async function candidateFolders(search) {
   const roots = /* @__PURE__ */ new Map();
   for (const path of [search.missingPath, ...search.approvedWorkspacePaths]) {
-    const parent = (0, import_node_path19.dirname)((0, import_node_path19.resolve)(path));
+    const parent = (0, import_node_path20.dirname)((0, import_node_path20.resolve)(path));
     roots.set(comparablePath(parent, search.platform), parent);
   }
   const candidates2 = /* @__PURE__ */ new Map();
@@ -47003,9 +47058,9 @@ async function discoverRelocatedWorkspace(search) {
 }
 
 // src/holder/checkout-refresh.ts
-var import_node_crypto13 = require("crypto");
-var import_promises31 = require("fs/promises");
-var import_node_path20 = require("path");
+var import_node_crypto14 = require("crypto");
+var import_promises32 = require("fs/promises");
+var import_node_path21 = require("path");
 function short(sha) {
   return sha.slice(0, 12);
 }
@@ -47017,8 +47072,8 @@ function staleLine(path, snapshot2, tip) {
 }
 async function claimOnce(dir, name) {
   try {
-    await (0, import_promises31.mkdir)(dir, { recursive: true, mode: 448 });
-    await (await (0, import_promises31.open)((0, import_node_path20.join)(dir, name), "wx")).close();
+    await (0, import_promises32.mkdir)(dir, { recursive: true, mode: 448 });
+    await (await (0, import_promises32.open)((0, import_node_path21.join)(dir, name), "wx")).close();
     return true;
   } catch {
     return false;
@@ -47049,8 +47104,8 @@ async function fastForward(freshness, operationId, deps, signal) {
 }
 async function atFirstLease(freshness, spec, deps, signal) {
   const first = await claimOnce(
-    (0, import_node_path20.join)(deps.dir, "leased"),
-    (0, import_node_crypto13.createHash)("sha256").update(freshness.path).digest("hex")
+    (0, import_node_path21.join)(deps.dir, "leased"),
+    (0, import_node_crypto14.createHash)("sha256").update(freshness.path).digest("hex")
   );
   switch (freshness.state) {
     case "current":
@@ -47080,7 +47135,7 @@ async function checkoutsOf(spec, leaseTargets) {
 function createCheckoutRefresh(deps) {
   return async (spec, leaseTargets, signal) => {
     if (spec.providerSessionId !== void 0) return void 0;
-    if (!await claimOnce((0, import_node_path20.join)(deps.dir, "conversations"), spec.conversationId)) return void 0;
+    if (!await claimOnce((0, import_node_path21.join)(deps.dir, "conversations"), spec.conversationId)) return void 0;
     const lines = [];
     for (const target of await checkoutsOf(spec, leaseTargets)) {
       const freshness = await readCheckoutFreshness(deps.dir, target);
@@ -47101,8 +47156,8 @@ function createCheckoutRefresh(deps) {
 }
 
 // src/holder/lease.ts
-var import_promises32 = require("fs/promises");
-var import_node_path21 = require("path");
+var import_promises33 = require("fs/promises");
+var import_node_path22 = require("path");
 var LEASE_CHECK_EVERY_MS = 5e3;
 var MAX_TRANSIENT_FAILURES = 3;
 var BACKOFF_BASE_MS = 1e3;
@@ -47116,8 +47171,8 @@ function identityFailure(code, workspacePath) {
   return { code, problemCode: "app.workspace.missing", message: MESSAGES[code], workspacePath };
 }
 async function fileIdentity(path) {
-  const canonical = await (0, import_promises32.realpath)(path);
-  const info = await (0, import_promises32.stat)(canonical, { bigint: true });
+  const canonical = await (0, import_promises33.realpath)(path);
+  const info = await (0, import_promises33.stat)(canonical, { bigint: true });
   return `${canonical}:${info.dev}:${info.ino}`;
 }
 async function snapshot(git, path, signal) {
@@ -47136,7 +47191,7 @@ async function snapshot(git, path, signal) {
       workspace: await fileIdentity(path),
       repository: await fileIdentity(commonDir),
       worktree: await fileIdentity(gitDir),
-      commonDir: await (0, import_promises32.realpath)(commonDir)
+      commonDir: await (0, import_promises33.realpath)(commonDir)
     };
   } catch {
     return null;
@@ -47149,7 +47204,7 @@ async function gitValue(git, path, args, signal) {
 }
 async function pathExists(path) {
   try {
-    await (0, import_promises32.stat)(path);
+    await (0, import_promises33.stat)(path);
     return true;
   } catch (error61) {
     return errnoCode(error61) !== "ENOENT" && errnoCode(error61) !== "ENOTDIR";
@@ -47158,19 +47213,19 @@ async function pathExists(path) {
 async function hasGitMarker(path) {
   let directory;
   try {
-    directory = await (0, import_promises32.realpath)(path);
+    directory = await (0, import_promises33.realpath)(path);
   } catch {
     return true;
   }
   for (; ; ) {
     try {
-      await (0, import_promises32.stat)((0, import_node_path21.join)(directory, ".git"));
+      await (0, import_promises33.stat)((0, import_node_path22.join)(directory, ".git"));
       return true;
     } catch (error61) {
       const code = errnoCode(error61);
       if (code !== "ENOENT" && code !== "ENOTDIR") return true;
     }
-    const parent = (0, import_node_path21.dirname)(directory);
+    const parent = (0, import_node_path22.dirname)(directory);
     if (parent === directory) return false;
     directory = parent;
   }
@@ -47334,7 +47389,7 @@ function volumeRoot(path) {
 }
 async function exists(path) {
   try {
-    await (0, import_promises33.stat)(path);
+    await (0, import_promises34.stat)(path);
     return true;
   } catch {
     return false;
@@ -47342,10 +47397,10 @@ async function exists(path) {
 }
 async function inspectReadiness(path) {
   try {
-    if (!(await (0, import_promises33.stat)(path)).isDirectory()) {
+    if (!(await (0, import_promises34.stat)(path)).isDirectory()) {
       return { ready: false, missing: true, message: MESSAGES2.missing };
     }
-    await (0, import_promises33.access)(path, import_node_fs8.constants.R_OK | import_node_fs8.constants.W_OK | import_node_fs8.constants.X_OK);
+    await (0, import_promises34.access)(path, import_node_fs9.constants.R_OK | import_node_fs9.constants.W_OK | import_node_fs9.constants.X_OK);
     return { ready: true };
   } catch (error61) {
     const code = errnoCode(error61) ?? "";
@@ -47423,8 +47478,8 @@ async function admitDefaultWorkspace(spec, context, skills) {
   const { env } = context;
   const path = resolveAlanDefaultWorkspacePath(env.HOME || env.USERPROFILE || (0, import_node_os5.homedir)());
   try {
-    await (0, import_promises33.mkdir)(path, { recursive: true, mode: 448 });
-    await (0, import_promises33.access)(path, import_node_fs8.constants.R_OK | import_node_fs8.constants.W_OK | import_node_fs8.constants.X_OK);
+    await (0, import_promises34.mkdir)(path, { recursive: true, mode: 448 });
+    await (0, import_promises34.access)(path, import_node_fs9.constants.R_OK | import_node_fs9.constants.W_OK | import_node_fs9.constants.X_OK);
     return {
       kind: "admitted",
       spec: { ...spec, projectPath: path },
@@ -47500,7 +47555,7 @@ var PROBE_TIMEOUT_MS2 = 5e3;
 function createHolderWorkspace(machine, clock, log) {
   const platform = machine.platform ?? process.platform;
   const git = createGitRunner({ env: machine.env, platform, localTimeoutMs: PROBE_TIMEOUT_MS2 });
-  const locks = openRepositoryLocks({ dir: (0, import_node_path22.join)(machine.stateDir, "locks"), clock, platform });
+  const locks = openRepositoryLocks({ dir: (0, import_node_path23.join)(machine.stateDir, "locks"), clock, platform });
   return {
     admission: {
       env: machine.env,
@@ -47512,7 +47567,7 @@ function createHolderWorkspace(machine, clock, log) {
       ),
       approvedRoots: async () => {
         const approved = await openApprovedPaths({
-          file: (0, import_node_path22.join)(machine.stateDir, "workspaces.json"),
+          file: (0, import_node_path23.join)(machine.stateDir, "workspaces.json"),
           log,
           platform
         });
@@ -47525,7 +47580,7 @@ function createHolderWorkspace(machine, clock, log) {
         git,
         locks,
         log,
-        dir: (0, import_node_path22.join)(machine.stateDir, "checkout-freshness")
+        dir: (0, import_node_path23.join)(machine.stateDir, "checkout-freshness")
       })
     } : {}
   };
@@ -47553,7 +47608,7 @@ async function respondToTurn(runningRunId, gate, driver, request2) {
 }
 
 // src/holder/session-facts.ts
-var import_promises34 = require("fs/promises");
+var import_promises35 = require("fs/promises");
 var CLI_RSS_CACHE_MS = 1e4;
 var LOGIN_PROBLEM_PREFIX = "cli.auth.";
 function isLoginFailure(result) {
@@ -47579,8 +47634,8 @@ function createSessionFacts(options) {
     const path = await resolveCommandOnPath(command, env, platform);
     if (path === null) return null;
     try {
-      const real = await (0, import_promises34.realpath)(path);
-      const info = await (0, import_promises34.stat)(real);
+      const real = await (0, import_promises35.realpath)(path);
+      const info = await (0, import_promises35.stat)(real);
       return { command, key: `${real}:${info.ino}:${info.size}:${info.mtimeMs}` };
     } catch {
       return null;
@@ -47667,8 +47722,8 @@ function createSessionFacts(options) {
 init_acp2();
 
 // src/run-log/directory.ts
-var import_promises35 = require("fs/promises");
-var import_node_path23 = require("path");
+var import_promises36 = require("fs/promises");
+var import_node_path24 = require("path");
 init_runtime_v2();
 init_zod();
 var runMetaSchema = external_exports.object({
@@ -47690,17 +47745,17 @@ var runMetaSchema = external_exports.object({
   }).optional()
 });
 function runDirectory(runsDir, runId) {
-  const dir = (0, import_node_path23.join)(runsDir, runId);
+  const dir = (0, import_node_path24.join)(runsDir, runId);
   return {
     dir,
-    log: (0, import_node_path23.join)(dir, "log.jsonl"),
-    upload: (0, import_node_path23.join)(dir, "upload.json"),
-    meta: (0, import_node_path23.join)(dir, "run.json")
+    log: (0, import_node_path24.join)(dir, "log.jsonl"),
+    upload: (0, import_node_path24.join)(dir, "upload.json"),
+    meta: (0, import_node_path24.join)(dir, "run.json")
   };
 }
 async function isRunClaimed(runsDir, runId) {
   try {
-    return (await (0, import_promises35.stat)(runDirectory(runsDir, runId).log)).size > 0;
+    return (await (0, import_promises36.stat)(runDirectory(runsDir, runId).log)).size > 0;
   } catch (error61) {
     if (errnoCode(error61) === "ENOENT") return false;
     throw error61;
@@ -47708,8 +47763,8 @@ async function isRunClaimed(runsDir, runId) {
 }
 
 // src/run-log/conversation-index.ts
-var import_promises36 = require("fs/promises");
-var import_node_path24 = require("path");
+var import_promises37 = require("fs/promises");
+var import_node_path25 = require("path");
 init_runtime_v2();
 init_zod();
 var ORDINALS_PER_SHARD = 1e3;
@@ -47725,13 +47780,13 @@ var coverageSchema = external_exports.object({
   nextExpectedOrdinal: external_exports.number().int().positive()
 });
 function conversationsDirectory(runsDir) {
-  return (0, import_node_path24.join)((0, import_node_path24.dirname)(runsDir), "conversations");
+  return (0, import_node_path25.join)((0, import_node_path25.dirname)(runsDir), "conversations");
 }
 function indexDirectory(runsDir, conversationId) {
-  return (0, import_node_path24.join)(conversationsDirectory(runsDir), conversationId, "turn-index");
+  return (0, import_node_path25.join)(conversationsDirectory(runsDir), conversationId, "turn-index");
 }
 function shardPath(runsDir, conversationId, ordinal) {
-  return (0, import_node_path24.join)(
+  return (0, import_node_path25.join)(
     indexDirectory(runsDir, conversationId),
     `${Math.floor(ordinal / ORDINALS_PER_SHARD)}.jsonl`
   );
@@ -47740,10 +47795,10 @@ async function indexConversationRun(runsDir, conversationId, ordinal, assistantO
   const nextOrdinal = assistantOrdinal + 1;
   if (nextOrdinal <= ordinal) throw new Error("Assistant order must follow the prompt");
   const path = shardPath(runsDir, conversationId, ordinal);
-  await (0, import_promises36.mkdir)((0, import_node_path24.dirname)(path), { recursive: true, mode: 448 });
-  await (0, import_promises36.appendFile)(path, `${JSON.stringify({ ordinal, nextOrdinal, runId })}
+  await (0, import_promises37.mkdir)((0, import_node_path25.dirname)(path), { recursive: true, mode: 448 });
+  await (0, import_promises37.appendFile)(path, `${JSON.stringify({ ordinal, nextOrdinal, runId })}
 `, { mode: 384 });
-  const coveragePath = (0, import_node_path24.join)((0, import_node_path24.dirname)((0, import_node_path24.dirname)(path)), "coverage.json");
+  const coveragePath = (0, import_node_path25.join)((0, import_node_path25.dirname)((0, import_node_path25.dirname)(path)), "coverage.json");
   const coverage = await readJsonFile(coveragePath, coverageSchema);
   const current = coverage.kind === "ok" ? coverage.value : null;
   const next = nextCoverage(current, ordinal, nextOrdinal);
@@ -47786,13 +47841,13 @@ function runEnded(input2) {
 var decoder = new TextDecoder();
 
 // src/run-log/writer.ts
-var import_node_fs9 = require("fs");
-var import_node_path25 = require("path");
+var import_node_fs10 = require("fs");
+var import_node_path26 = require("path");
 init_runtime_v2();
 function lastSeq(fd, size) {
   for (const length of tailWindows(size)) {
     const buffer = Buffer.alloc(length);
-    (0, import_node_fs9.readSync)(fd, buffer, 0, length, size - length);
+    (0, import_node_fs10.readSync)(fd, buffer, 0, length, size - length);
     const last = lastLine(buffer.toString("utf8").trimEnd(), length === size);
     if (last === void 0) continue;
     if (last.length === 0) return 0;
@@ -47803,13 +47858,13 @@ function lastSeq(fd, size) {
   throw new RuntimeFault("record_too_large", "Run log tail record is larger than any record");
 }
 function openRunLog(path, clock) {
-  (0, import_node_fs9.mkdirSync)((0, import_node_path25.dirname)(path), { recursive: true, mode: 448 });
-  const fd = (0, import_node_fs9.openSync)(path, "a+", 384);
-  let size = (0, import_node_fs9.fstatSync)(fd).size;
+  (0, import_node_fs10.mkdirSync)((0, import_node_path26.dirname)(path), { recursive: true, mode: 448 });
+  const fd = (0, import_node_fs10.openSync)(path, "a+", 384);
+  let size = (0, import_node_fs10.fstatSync)(fd).size;
   let seq = lastSeq(fd, size);
   let dirty = false;
   const sync = () => {
-    (0, import_node_fs9.fsyncSync)(fd);
+    (0, import_node_fs10.fsyncSync)(fd);
     dirty = false;
   };
   return {
@@ -47823,7 +47878,7 @@ function openRunLog(path, clock) {
       };
       const line = Buffer.from(`${JSON.stringify(record2)}
 `, "utf8");
-      (0, import_node_fs9.writeSync)(fd, line);
+      (0, import_node_fs10.writeSync)(fd, line);
       size += line.length;
       dirty = true;
       if (isRunLifecycleKind(update.sessionUpdate)) sync();
@@ -47835,7 +47890,7 @@ function openRunLog(path, clock) {
     },
     [Symbol.dispose]: () => {
       if (dirty) sync();
-      (0, import_node_fs9.closeSync)(fd);
+      (0, import_node_fs10.closeSync)(fd);
     }
   };
 }
@@ -48120,12 +48175,12 @@ var TASK_UNSUPPORTED = {
   message: "This agent cannot stop one background task."
 };
 function sha2563(value) {
-  return (0, import_node_crypto14.createHash)("sha256").update(value).digest("hex");
+  return (0, import_node_crypto15.createHash)("sha256").update(value).digest("hex");
 }
 function tokenMatches(expected, presented) {
   const a = Buffer.from(sha2563(expected), "hex");
   const b = Buffer.from(sha2563(presented), "hex");
-  return (0, import_node_crypto14.timingSafeEqual)(a, b);
+  return (0, import_node_crypto15.timingSafeEqual)(a, b);
 }
 async function runHolder({
   launch,
@@ -48139,7 +48194,7 @@ async function runHolder({
   try {
     const identity = await readProcessIdentity(process.pid);
     if (identity === null) throw new RuntimeFault("internal", "Cannot read own process identity");
-    const _engines = __using(_stack, recordSpawnedEngines(engineRecordsPath((0, import_node_path26.dirname)(launch.statusPath)), clock, log));
+    const _engines = __using(_stack, recordSpawnedEngines(engineRecordsPath((0, import_node_path27.dirname)(launch.statusPath)), clock, log));
     const holder = {
       state: "idle",
       runId: null,
@@ -48335,17 +48390,17 @@ async function runHolder({
       client.on("error", () => holder.clients.delete(client));
     });
     removeStaleEndpoint(launch.endpoint);
-    await new Promise((resolve6, reject) => {
+    await new Promise((resolve7, reject) => {
       server.once("error", reject);
-      server.listen(launch.endpoint, () => resolve6());
+      server.listen(launch.endpoint, () => resolve7());
     });
     await writeStatus();
     log.info("holder.ready", { conversationId: launch.conversationId, pid: identity.pid });
-    await new Promise((resolve6) => exit.signal.addEventListener("abort", () => resolve6()));
+    await new Promise((resolve7) => exit.signal.addEventListener("abort", () => resolve7()));
     await driver.suspend?.().catch((error61) => log.warn("holder.driver_suspend_failed", { error: error61 }));
     for (const client of holder.clients) client.end();
-    await new Promise((resolve6) => server.close(() => resolve6()));
-    (0, import_node_fs10.rmSync)(launch.statusPath, { force: true });
+    await new Promise((resolve7) => server.close(() => resolve7()));
+    (0, import_node_fs11.rmSync)(launch.statusPath, { force: true });
     log.info("holder.suspended", { conversationId: launch.conversationId });
   } catch (_) {
     var _error = _, _hasError = true;
@@ -48397,7 +48452,8 @@ var envSchema = external_exports.object({
   ALAN_RUNTIME_GIT_GATEWAY_URL: external_exports.url().optional(),
   ALAN_RUNTIME_WORKSPACE_ROOT: external_exports.string().min(1).optional(),
   XDG_CONFIG_HOME: external_exports.string().min(1).optional(),
-  GH_CONFIG_DIR: external_exports.string().min(1).optional()
+  GH_CONFIG_DIR: external_exports.string().min(1).optional(),
+  CODEX_HOME: external_exports.string().trim().min(1).optional()
 });
 var DEFAULT_API_URLS = {
   production: "https://api.tryalan.ai",
@@ -48450,7 +48506,8 @@ function loadRuntimeConfig(env = process.env, totalMemoryBytes = (0, import_node
     ALAN_RUNTIME_GIT_GATEWAY_URL,
     ALAN_RUNTIME_WORKSPACE_ROOT,
     XDG_CONFIG_HOME,
-    GH_CONFIG_DIR
+    GH_CONFIG_DIR,
+    CODEX_HOME
   } = parsed.data;
   const home = (0, import_node_os7.homedir)();
   const suspendDefaults = defaultSuspendPolicy(totalMemoryBytes);
@@ -48482,7 +48539,8 @@ function loadRuntimeConfig(env = process.env, totalMemoryBytes = (0, import_node
     providerProbes: ALAN_RUNTIME_PROVIDER_PROBES === "on",
     providerToolchain: ALAN_RUNTIME_PROVIDER_NODE !== void 0 && ALAN_RUNTIME_PROVIDER_NPM_CLI !== void 0 ? { node: ALAN_RUNTIME_PROVIDER_NODE, npmCli: ALAN_RUNTIME_PROVIDER_NPM_CLI } : null,
     home,
-    configHome: XDG_CONFIG_HOME ?? (0, import_node_path28.join)(home, ".config"),
+    configHome: XDG_CONFIG_HOME ?? (0, import_node_path29.join)(home, ".config"),
+    codexHome: resolveCodexHome(CODEX_HOME, home),
     ...githubProxyConfig({ ALAN_RUNTIME_GITHUB_PROXY, XDG_CONFIG_HOME, GH_CONFIG_DIR }, home),
     gitGatewayUrl: ALAN_RUNTIME_GIT_GATEWAY_URL ?? null,
     workspaceRoot: ALAN_RUNTIME_WORKSPACE_ROOT ?? null,
@@ -48490,11 +48548,14 @@ function loadRuntimeConfig(env = process.env, totalMemoryBytes = (0, import_node
     adoptsLegacyInstall: ALAN_RUNTIME_STATE_DIR === void 0
   };
 }
+function resolveCodexHome(configuredHome, home) {
+  return configuredHome ?? (0, import_node_path29.join)(home, ".codex");
+}
 function githubProxyConfig(env, home) {
-  const configHome = env.XDG_CONFIG_HOME ?? (0, import_node_path28.join)(home, ".config");
+  const configHome = env.XDG_CONFIG_HOME ?? (0, import_node_path29.join)(home, ".config");
   return {
     githubProxy: env.ALAN_RUNTIME_GITHUB_PROXY === "on",
-    ghConfigDir: env.GH_CONFIG_DIR ?? (0, import_node_path28.join)(configHome, "gh")
+    ghConfigDir: env.GH_CONFIG_DIR ?? (0, import_node_path29.join)(configHome, "gh")
   };
 }
 function serviceEnvironment(env, profile) {
@@ -48593,7 +48654,7 @@ async function loadStoredAccess(paths, access3 = { exec: systemExec }) {
 }
 
 // src/cli/commands/hold.ts
-var import_node_path29 = require("path");
+var import_node_path30 = require("path");
 init_agent2();
 init_runtime_v2();
 async function machineAccess(paths, log, conversationId, transport) {
@@ -48651,7 +48712,7 @@ async function runHold(argv) {
     const config2 = loadRuntimeConfig();
     const paths = runtimePaths(config2.stateDir);
     const log = __using(_stack, openFileLog(
-      (0, import_node_path29.join)(paths.logs, `holder-${launch.value.conversationId}.jsonl`),
+      (0, import_node_path30.join)(paths.logs, `holder-${launch.value.conversationId}.jsonl`),
       config2.logLevel,
       systemClock
     ));
@@ -48662,7 +48723,7 @@ async function runHold(argv) {
     );
     const transport = __using(_stack, createHttpTransport());
     const access3 = await machineAccess(paths, log, launch.value.conversationId, transport);
-    const credentialPath = (0, import_node_path29.join)(paths.tmp, "mcp", `${launch.value.conversationId}.json`);
+    const credentialPath = (0, import_node_path30.join)(paths.tmp, "mcp", `${launch.value.conversationId}.json`);
     const managedMcp = __using(_stack, access3.managedMcp === void 0 ? void 0 : createHelperMcpAccess({
       managedMcp: access3.managedMcp,
       conversationId: launch.value.conversationId,
@@ -48681,7 +48742,8 @@ async function runHold(argv) {
         timings: config2.sessionTimings,
         log,
         ...managedMcp === void 0 ? {} : { managedMcp },
-        codexCredentials: access3.codexCredentials
+        codexCredentials: access3.codexCredentials,
+        installedSkills: () => installedSkillFolders(skillsLayout(paths.stateDir))
       }),
       clock: systemClock,
       log,