@alan-ai-hq/agent-manager-linux-arm64 0.1.145 → 0.1.147

package/alan-holder.cjs

@@ -12529,7 +12529,7 @@ function compileValidator(schema, parser) {
 function compile(schema, options) {
   try {
     const parser = compileFn(schema);
-    const clone2 = clone(schema);
+    const clone3 = clone(schema);
     const liveRun = schema._zod.run;
     const originalRun = liveRun.__originalRun ?? liveRun;
     const wrapped = (payload, ctx) => {
@@ -12549,12 +12549,12 @@ function compile(schema, options) {
       return originalRun(payload, ctx);
     };
     wrapped.__originalRun = originalRun;
-    clone2._zod.bag.fallbackRun = originalRun;
-    clone2._zod.bag.validator = compileValidator(schema, parser);
-    clone2._zod.run = wrapped;
+    clone3._zod.bag.fallbackRun = originalRun;
+    clone3._zod.bag.validator = compileValidator(schema, parser);
+    clone3._zod.run = wrapped;
     if (!liveRun.__originalRun)
-      installCompiledUserMethods(clone2, schema, parser);
-    return clone2;
+      installCompiledUserMethods(clone3, schema, parser);
+    return clone3;
   } catch (err) {
     if (options?.strict)
       throw err;
@@ -20309,7 +20309,7 @@ var init_workspace = __esm({
 });
 
 // ../shared/dist/runtime-v2/desired-state.js
-var repoLocalPathSchema, runSpecSchema, desiredRunSchema, desiredStateSchema;
+var repoLocalPathSchema, requestedCheckoutSchema, runSpecSchema, desiredRunSchema, desiredStateSchema;
 var init_desired_state = __esm({
   "../shared/dist/runtime-v2/desired-state.js"() {
     "use strict";
@@ -20324,6 +20324,11 @@ var init_desired_state = __esm({
       localPath: external_exports.string().min(1),
       branch: external_exports.string().min(1).optional()
     });
+    requestedCheckoutSchema = external_exports.object({
+      path: machinePathSchema,
+      repoUrl: gitRemoteUrlSchema,
+      branch: gitBranchSchema
+    });
     runSpecSchema = external_exports.object({
       runId: runIdSchema,
       conversationId: conversationIdSchema,
@@ -20342,6 +20347,8 @@ var init_desired_state = __esm({
       workspacePathPinned: external_exports.boolean().optional(),
       approvedWorkspacePaths: external_exports.array(external_exports.string().min(1)).optional(),
       repoLocalPaths: external_exports.array(repoLocalPathSchema).optional(),
+      /** Applied once, at the conversation's first turn on a cloud sandbox; never moves local work. */
+      requestedCheckouts: external_exports.array(requestedCheckoutSchema).max(64).optional(),
       workflowId: external_exports.guid().optional(),
       workflowExecutionId: external_exports.guid().optional(),
       agentId: external_exports.string().min(1).optional(),
@@ -20506,7 +20513,9 @@ var init_machine_identity = __esm({
     runCodexCredentialSchema = external_exports.object({
       accessToken: external_exports.string().min(1),
       chatgptAccountId: external_exports.string().min(1),
-      chatgptPlanType: external_exports.string().nullable()
+      chatgptPlanType: external_exports.string().nullable(),
+      credentialId: external_exports.uuid().optional(),
+      providerUserId: external_exports.string().min(1).optional()
     });
     runCodexCredentialRefreshRequestSchema = external_exports.object({
       /** sha256 hex of the access token Codex was refused with; a newer stored token is returned instead of rotating. */
@@ -20515,7 +20524,7 @@ var init_machine_identity = __esm({
     runProviderCredentialSchema = external_exports.object({
       /** Environment variables for the agent CLI, e.g. ANTHROPIC_API_KEY; empty when the CLI's own login is used. */
       env: external_exports.record(external_exports.string(), external_exports.string()),
-      /** The team's Codex login for a cloud sandbox; absent where the CLI's own login is used. */
+      /** The bound Codex login for a cloud sandbox; absent where the CLI's own login is used. */
       codex: runCodexCredentialSchema.optional()
     });
   }
@@ -20930,16 +20939,84 @@ var init_problem = __esm({
   }
 });
 
+// ../shared/dist/cli-usage.js
+var usagePercentSchema, usageTimestampSchema, usageAmountSchema, usageObservationShape, cliUsageWindowPatchSchema, cliUsageWindowSchema, cliUsageSpendPatchSchema, cliUsageSpendSchema, cliUsageCreditsPatchSchema, cliUsageCreditsSchema, cliUsageBucketSchema, cliUsageSnapshotSchema;
+var init_cli_usage = __esm({
+  "../shared/dist/cli-usage.js"() {
+    "use strict";
+    init_zod();
+    usagePercentSchema = external_exports.number().min(0).max(100);
+    usageTimestampSchema = external_exports.iso.datetime();
+    usageAmountSchema = external_exports.string().min(1);
+    usageObservationShape = {
+      observedAt: usageTimestampSchema,
+      receivedAt: usageTimestampSchema,
+      sourceId: external_exports.string().min(1),
+      sequence: external_exports.number().int().nonnegative()
+    };
+    cliUsageWindowPatchSchema = external_exports.object({
+      usedPercent: usagePercentSchema.nullable().optional(),
+      windowMinutes: external_exports.number().positive().nullable().optional(),
+      resetsAt: usageTimestampSchema.nullable().optional()
+    });
+    cliUsageWindowSchema = external_exports.object({
+      usedPercent: usagePercentSchema.optional(),
+      windowMinutes: external_exports.number().positive().optional(),
+      resetsAt: usageTimestampSchema.optional(),
+      ...usageObservationShape
+    });
+    cliUsageSpendPatchSchema = external_exports.object({
+      reached: external_exports.boolean(),
+      limit: usageAmountSchema.nullable().optional(),
+      used: usageAmountSchema.nullable().optional(),
+      remaining: usageAmountSchema.nullable().optional(),
+      usedPercent: usagePercentSchema.nullable().optional(),
+      resetsAt: usageTimestampSchema.nullable().optional()
+    });
+    cliUsageSpendSchema = external_exports.object({
+      reached: external_exports.boolean(),
+      limit: usageAmountSchema.optional(),
+      used: usageAmountSchema.optional(),
+      remaining: usageAmountSchema.optional(),
+      usedPercent: usagePercentSchema.optional(),
+      resetsAt: usageTimestampSchema.optional(),
+      ...usageObservationShape
+    });
+    cliUsageCreditsPatchSchema = external_exports.object({
+      hasCredits: external_exports.boolean(),
+      unlimited: external_exports.boolean(),
+      balance: usageAmountSchema.nullable().optional()
+    });
+    cliUsageCreditsSchema = external_exports.object({
+      hasCredits: external_exports.boolean(),
+      unlimited: external_exports.boolean(),
+      balance: usageAmountSchema.optional(),
+      ...usageObservationShape
+    });
+    cliUsageBucketSchema = external_exports.object({
+      primary: cliUsageWindowSchema.optional(),
+      secondary: cliUsageWindowSchema.optional(),
+      spend: cliUsageSpendSchema.optional(),
+      credits: cliUsageCreditsSchema.optional(),
+      planType: external_exports.string().min(1).nullable().optional()
+    });
+    cliUsageSnapshotSchema = external_exports.object({
+      buckets: external_exports.record(external_exports.string().min(1), cliUsageBucketSchema)
+    });
+  }
+});
+
 // ../shared/dist/runtime-v2/run-log.js
 function isRunLifecycleKind(sessionUpdate) {
   return RUN_LIFECYCLE_KINDS.has(sessionUpdate);
 }
-var runAcceptedUpdateSchema, runStartedUpdateSchema, runWorkspaceRelocatedUpdateSchema, runOutcomeSchema, runRejectionCodeSchema, runEndedUpdateSchema, runLifecycleUpdateSchema, RUN_LIFECYCLE_KINDS, runLogRecordSchema;
+var runAcceptedUpdateSchema, runStartedUpdateSchema, runCodexRateLimitsUpdateSchema, runWorkspaceRelocatedUpdateSchema, runOutcomeSchema, runRejectionCodeSchema, runEndedUpdateSchema, runLifecycleUpdateSchema, RUN_LIFECYCLE_KINDS, runLogRecordSchema;
 var init_run_log = __esm({
   "../shared/dist/runtime-v2/run-log.js"() {
     "use strict";
     init_zod();
     init_problem();
+    init_cli_usage();
     init_ids();
     runAcceptedUpdateSchema = external_exports.object({
       sessionUpdate: external_exports.literal("_alan/run.accepted"),
@@ -20951,6 +21028,18 @@ var init_run_log = __esm({
       providerSessionId: external_exports.string().min(1).optional(),
       pid: external_exports.number().int().positive().optional()
     });
+    runCodexRateLimitsUpdateSchema = external_exports.object({
+      sessionUpdate: external_exports.literal("_alan/codex.rate_limits"),
+      limitId: external_exports.string().min(1),
+      primary: cliUsageWindowPatchSchema.nullable().optional(),
+      secondary: cliUsageWindowPatchSchema.nullable().optional(),
+      spend: cliUsageSpendPatchSchema.nullable().optional(),
+      credits: cliUsageCreditsPatchSchema.nullable().optional(),
+      planType: external_exports.string().min(1).nullable().optional(),
+      observedAt: external_exports.iso.datetime(),
+      sourceId: external_exports.string().min(1),
+      sequence: external_exports.number().int().nonnegative()
+    });
     runWorkspaceRelocatedUpdateSchema = external_exports.object({
       sessionUpdate: external_exports.literal("_alan/run.workspace_relocated"),
       previousPath: external_exports.string().min(1).max(4096),
@@ -21013,7 +21102,7 @@ var init_holder_protocol = __esm({
     init_ids();
     init_link();
     init_run_log();
-    HOLDER_PROTOCOL = 1;
+    HOLDER_PROTOCOL = 2;
     holderAbortOutcomeSchema = external_exports.enum(["aborted", "interrupted"]);
     holderRequestSchema = external_exports.discriminatedUnion("type", [
       external_exports.object({ type: external_exports.literal("auth"), token: external_exports.string().min(1) }),
@@ -22179,11 +22268,11 @@ function createListeners() {
     }
   };
 }
-var import_promises4, CoreFault, NANOS_PER_MILLI, systemClock2, silentLog;
+var import_promises5, CoreFault, NANOS_PER_MILLI, systemClock2, silentLog;
 var init_chunk_YXWJW7I5 = __esm({
   "../agent-core/dist/chunk-YXWJW7I5.js"() {
     "use strict";
-    import_promises4 = require("timers/promises");
+    import_promises5 = require("timers/promises");
     CoreFault = class extends Error {
       code;
       constructor(code, message, options) {
@@ -22197,7 +22286,7 @@ var init_chunk_YXWJW7I5 = __esm({
       now: () => Date.now(),
       monotonic: () => Number(process.hrtime.bigint() / NANOS_PER_MILLI),
       sleep: async (ms, signal) => {
-        await (0, import_promises4.setTimeout)(ms, void 0, signal ? { signal } : void 0);
+        await (0, import_promises5.setTimeout)(ms, void 0, signal ? { signal } : void 0);
       }
     };
     silentLog = {
@@ -22404,7 +22493,7 @@ function plan(command, args, options) {
 function captureOutput(command, args, options) {
   const launch = plan(command, args, options);
   if (launch === void 0) return Promise.resolve(NEVER_STARTED);
-  return new Promise((resolve7) => {
+  return new Promise((resolve9) => {
     (0, import_child_process.execFile)(
       launch.file,
       [...launch.args],
@@ -22418,7 +22507,7 @@ function captureOutput(command, args, options) {
       },
       (error61, stdout, stderr) => {
         const code = error61 && typeof error61.code === "number" ? error61.code : error61 ? void 0 : 0;
-        resolve7({ stdout, stderr, exitCode: code });
+        resolve9({ stdout, stderr, exitCode: code });
       }
     );
   });
@@ -22460,18 +22549,18 @@ function decode3(bytes, start, end) {
 }
 async function linuxStartTicks(pid) {
   try {
-    const stat15 = await (0, import_promises5.readFile)(`/proc/${pid}/stat`, "utf8");
-    const fields = stat15.slice(stat15.lastIndexOf(")") + 2).split(" ");
+    const stat16 = await (0, import_promises6.readFile)(`/proc/${pid}/stat`, "utf8");
+    const fields = stat16.slice(stat16.lastIndexOf(")") + 2).split(" ");
     return fields[19];
   } catch {
     return void 0;
   }
 }
 function psStartTime(pid) {
-  return new Promise((resolve7) => {
+  return new Promise((resolve9) => {
     (0, import_child_process2.execFile)("ps", ["-o", "lstart=", "-p", String(pid)], { timeout: 2e3 }, (error61, stdout) => {
       const text2 = stdout.trim();
-      resolve7(error61 || !text2 ? void 0 : text2);
+      resolve9(error61 || !text2 ? void 0 : text2);
     });
   });
 }
@@ -22500,12 +22589,12 @@ function parseProcessList(text2) {
 }
 function listProcesses(platform = process.platform) {
   if (platform === "win32") return Promise.resolve([]);
-  return new Promise((resolve7) => {
+  return new Promise((resolve9) => {
     (0, import_child_process3.execFile)(
       "ps",
       ["-A", "-o", "pid=,ppid=,pgid=,lstart="],
       { timeout: 5e3, maxBuffer: 8 * 1024 * 1024 },
-      (error61, stdout) => resolve7(error61 ? [] : parseProcessList(stdout))
+      (error61, stdout) => resolve9(error61 ? [] : parseProcessList(stdout))
     );
   });
 }
@@ -22545,11 +22634,11 @@ async function taskkill(pid, options) {
     stdio: "ignore",
     windowsHide: true
   });
-  const exited = new Promise((resolve7) => {
-    killer.once("error", (error210) => resolve7(error210));
+  const exited = new Promise((resolve9) => {
+    killer.once("error", (error210) => resolve9(error210));
     killer.once(
       "exit",
-      (code, signal) => resolve7(code === 0 ? void 0 : new Error(`taskkill failed: exit ${code}, signal ${signal}`))
+      (code, signal) => resolve9(code === 0 ? void 0 : new Error(`taskkill failed: exit ${code}, signal ${signal}`))
     );
   });
   const timedOut = clock.sleep(options.timeoutMs ?? DEFAULT_TASKKILL_TIMEOUT_MS, timeout.signal).then(() => new Error("taskkill timed out")).catch(() => void 0);
@@ -22753,7 +22842,7 @@ async function waitForWindowsJob(child, command) {
   const deadline = systemClock2.monotonic() + START_TIMEOUT_MS;
   try {
     while (systemClock2.monotonic() < deadline) {
-      const providerPid = await (0, import_promises6.readFile)(status.path, "utf8").catch(() => void 0);
+      const providerPid = await (0, import_promises7.readFile)(status.path, "utf8").catch(() => void 0);
       if (providerPid !== void 0) {
         requireStartedProvider(providerPid, command);
         return;
@@ -22776,7 +22865,7 @@ async function waitForWindowsJob(child, command) {
     throw new CoreFault("spawn_failed", `Could not start ${command} (Windows helper timed out)`);
   } finally {
     statuses.delete(child);
-    await (0, import_promises6.rm)(status.directory, { recursive: true, force: true });
+    await (0, import_promises7.rm)(status.directory, { recursive: true, force: true });
   }
 }
 function onCliSpawned(listener) {
@@ -22805,10 +22894,10 @@ function spawnCli(options) {
 function waitForSpawn(child, command) {
   if (isWindowsJob(child)) return waitForWindowsJob(child, command);
   if (child.pid !== void 0) return Promise.resolve();
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve9, reject) => {
     const onSpawn = () => {
       child.off("error", onError);
-      resolve7();
+      resolve9();
     };
     const onError = (error61) => {
       child.off("spawn", onSpawn);
@@ -22821,7 +22910,7 @@ function waitForSpawn(child, command) {
     child.once("error", onError);
   });
 }
-var import_child_process, import_fs, import_path, import_child_process2, import_promises5, import_child_process3, import_child_process4, import_child_process5, import_child_process6, import_crypto, import_fs2, import_promises6, import_os, import_path2, SHIM_MAX_BYTES, CMD_MAX_COMMAND_LINE, MAX_COMMAND_LINE, DEFAULT_PATHEXT, LAUNCHABLE_EXTENSIONS, nodeWindowsFiles, NODE_SHIM_ENTRY, NATIVE_SHIM_LINES, NATIVE_SHIM_ENTRY, CMD_META, NEVER_STARTED, HIDDEN_FLAG_PROBE_VALUE, NEWLINE, CARRIAGE_RETURN, EMPTY, MAX_LINE_BYTES, LineSplitter, PS_LINE, POLL_MS, DEFAULT_GRACE_MS, DEFAULT_KILL_WAIT_MS, DEFAULT_TASKKILL_TIMEOUT_MS, statuses, START_TIMEOUT_MS, spawnListeners;
+var import_child_process, import_fs, import_path, import_child_process2, import_promises6, import_child_process3, import_child_process4, import_child_process5, import_child_process6, import_crypto, import_fs2, import_promises7, import_os, import_path2, SHIM_MAX_BYTES, CMD_MAX_COMMAND_LINE, MAX_COMMAND_LINE, DEFAULT_PATHEXT, LAUNCHABLE_EXTENSIONS, nodeWindowsFiles, NODE_SHIM_ENTRY, NATIVE_SHIM_LINES, NATIVE_SHIM_ENTRY, CMD_META, NEVER_STARTED, HIDDEN_FLAG_PROBE_VALUE, NEWLINE, CARRIAGE_RETURN, EMPTY, MAX_LINE_BYTES, LineSplitter, PS_LINE, POLL_MS, DEFAULT_GRACE_MS, DEFAULT_KILL_WAIT_MS, DEFAULT_TASKKILL_TIMEOUT_MS, statuses, START_TIMEOUT_MS, spawnListeners;
 var init_chunk_M6YHY2EZ = __esm({
   "../agent-core/dist/chunk-M6YHY2EZ.js"() {
     "use strict";
@@ -22830,14 +22919,14 @@ var init_chunk_M6YHY2EZ = __esm({
     import_fs = require("fs");
     import_path = require("path");
     import_child_process2 = require("child_process");
-    import_promises5 = require("fs/promises");
+    import_promises6 = require("fs/promises");
     import_child_process3 = require("child_process");
     import_child_process4 = require("child_process");
     import_child_process5 = require("child_process");
     import_child_process6 = require("child_process");
     import_crypto = require("crypto");
     import_fs2 = require("fs");
-    import_promises6 = require("fs/promises");
+    import_promises7 = require("fs/promises");
     import_os = require("os");
     import_path2 = require("path");
     SHIM_MAX_BYTES = 64 * 1024;
@@ -24141,7 +24230,18 @@ var init_chunk_SBT5W7L4 = __esm({
   }
 });
 
-// ../agent-core/dist/chunk-54ZRJOQP.js
+// ../agent-core/dist/chunk-HBIPWAUI.js
+function readCapReset(text2) {
+  const epoch = EPOCH_RESET.exec(text2);
+  if (epoch) return { resetsAt: new Date(Number(epoch[1]) * 1e3).toISOString() };
+  const codex = CODEX_RESET.exec(text2);
+  if (codex) {
+    const milliseconds = Date.parse(codex[1].replace(/(\d)(?:st|nd|rd|th)\b/gi, "$1"));
+    if (Number.isFinite(milliseconds)) return { resetsAt: new Date(milliseconds).toISOString() };
+  }
+  const worded = WORDED_RESET.exec(text2);
+  return worded ? { resetHint: worded[1].trim() } : {};
+}
 function specForErrorKind(errorKind) {
   const spec = ERROR_SPECS[errorKind];
   return { message: spec.message, errorKind, recoveryClass: spec.recoveryClass };
@@ -24202,15 +24302,6 @@ function normalizeCodexCliErrorMessage(message) {
   }
   return message;
 }
-function readCapReset(text2) {
-  const epoch = EPOCH_RESET.exec(text2);
-  if (epoch) {
-    const seconds = Number(epoch[1]);
-    return { resetsAt: new Date(seconds * 1e3).toISOString() };
-  }
-  const worded = WORDED_RESET.exec(text2);
-  return worded ? { resetHint: worded[1].trim() } : {};
-}
 function lineMatching(text2, pattern) {
   return text2.split("\n").map((line) => line.trim()).find((line) => pattern.test(line));
 }
@@ -24222,10 +24313,11 @@ function withCapReset(classified, text2) {
   if (classified.errorKind !== "usage_limit") return classified;
   const reset = readCapReset(text2);
   if (reset.resetsAt) {
+    const own22 = lineMatching(text2, /\btry again at\b/i);
     return {
       ...classified,
       ...reset,
-      message: `Provider usage limit reached. It resets at ${reset.resetsAt}; switch model or wait, then retry.`
+      message: own22 ?? `Provider usage limit reached. It resets at ${reset.resetsAt}; switch model or wait, then retry.`
     };
   }
   const own2 = lineMatching(text2, /usage limit/i);
@@ -24344,13 +24436,16 @@ function createCliProblem(observed, options) {
     ...classified.resetsAt ? { resetsAt: classified.resetsAt } : {}
   });
 }
-var import_crypto2, ERROR_SPECS, AGENT_ERROR_KINDS, AGENT_SIGN_IN_BY_HARNESS, STATUS_PREFIX, TEXT_RULES, CODEX_TIMEOUT_MESSAGE, CODEX_EXPIRED_MESSAGE, EPOCH_RESET, WORDED_RESET, COMMAND_NOT_FOUND, CODE_RULES, TEXT_REFINES, STATUS_LEAD, CLI_PROBLEM_CODE_BY_ERROR_KIND, KEY_REJECTION_KINDS;
-var init_chunk_54ZRJOQP = __esm({
-  "../agent-core/dist/chunk-54ZRJOQP.js"() {
+var import_crypto2, EPOCH_RESET, WORDED_RESET, CODEX_RESET, ERROR_SPECS, AGENT_ERROR_KINDS, AGENT_SIGN_IN_BY_HARNESS, STATUS_PREFIX, TEXT_RULES, CODEX_TIMEOUT_MESSAGE, CODEX_EXPIRED_MESSAGE, COMMAND_NOT_FOUND, CODE_RULES, TEXT_REFINES, STATUS_LEAD, CLI_PROBLEM_CODE_BY_ERROR_KIND, KEY_REJECTION_KINDS;
+var init_chunk_HBIPWAUI = __esm({
+  "../agent-core/dist/chunk-HBIPWAUI.js"() {
     "use strict";
     init_chunk_YXWJW7I5();
     import_crypto2 = require("crypto");
     init_agent2();
+    EPOCH_RESET = /\|\s*(\d{10})\b/;
+    WORDED_RESET = /\bresets?\s+(?:at\s+)?([^.\n]{1,60}?)\s*(?:$|[.\n])/i;
+    CODEX_RESET = /\btry again at\s+([A-Za-z]{3,9}\s+\d{1,2}(?:st|nd|rd|th)?,?\s+\d{4}\s+\d{1,2}:\d{2}\s*[AP]M(?:\s+(?:UTC|GMT)(?:[+-]\d{1,2}(?::?\d{2})?)?)?)/i;
     ERROR_SPECS = {
       model_mismatch: {
         message: "The selected model isn't available, or you don't have access to it. Pick a different model, then send your message again.",
@@ -24504,7 +24599,7 @@ var init_chunk_54ZRJOQP = __esm({
       // #44604), or a trailing assistant message (opencode #19517).
       {
         kind: "history_rejected",
-        pattern: /\btext content blocks must be non-empty\b|\bcontent field in the message object\b|\bids were found without `?tool_result`? blocks\b|\bunexpected `?tool_use_id`?|\btool use concurrency issues\b|\bno tool output found for\b|\bdoes not support assistant message prefill\b/
+        pattern: /\btext content blocks must be non-empty\b|\bcontent field in the message object\b|\bids were found without `?tool_result`? blocks\b|\bunexpected `?tool_use_id`?|\btool use concurrency issues\b|\bno tool output found for\b|\bdoes not support assistant message prefill\b|\binvalid_encrypted_content\b|organization_id did not match the target organization/
       },
       // Claude: "No conversation found with session ID"; Codex: "no rollout found for thread id";
       // Copilot: "No session, task, or name matched"; Kimi/Cursor ACP: `Session "<id>" not found`.
@@ -24553,8 +24648,6 @@ var init_chunk_54ZRJOQP = __esm({
     ];
     CODEX_TIMEOUT_MESSAGE = "Codex connection to OpenAI timed out while waiting for the turn to continue. Retry the message; if it repeats, check network/API latency or reduce slow MCP/tool calls in the turn.";
     CODEX_EXPIRED_MESSAGE = "Codex CLI connection expired. Re-authenticate the Codex CLI on this computer (run `codex login`) or reconnect it in Cloud settings, then retry.";
-    EPOCH_RESET = /\|\s*(\d{10})\b/;
-    WORDED_RESET = /\bresets?\s+(?:at\s+)?([^.\n]{1,60}?)\s*(?:$|[.\n])/i;
     COMMAND_NOT_FOUND = /\bcommand not found\b|\bno such file or directory\b/i;
     CODE_RULES = [
       { pattern: /model_not_found|model_not_available/, kind: "model_mismatch" },
@@ -24609,7 +24702,7 @@ var init_chunk_54ZRJOQP = __esm({
   }
 });
 
-// ../agent-core/dist/chunk-72NSEYHK.js
+// ../agent-core/dist/chunk-4G77APXN.js
 function detectImageMimeType(buffer) {
   if (buffer.length >= 8 && buffer.subarray(0, 8).equals(PNG_SIGNATURE)) return "image/png";
   if (buffer.length >= 3 && buffer[0] === 255 && buffer[1] === 216 && buffer[2] === 255) {
@@ -24715,8 +24808,8 @@ function readMediaFiles(candidates2, cwd, mimeByExt, maxBytes) {
     seen.add(path);
     const mimeType = mimeByExt[(0, import_path3.extname)(path).toLowerCase()];
     if (!mimeType) continue;
-    const stat15 = (0, import_fs4.statSync)(path);
-    if (!stat15.isFile() || stat15.size <= 0 || stat15.size > maxBytes) continue;
+    const stat16 = (0, import_fs4.statSync)(path);
+    if (!stat16.isFile() || stat16.size <= 0 || stat16.size > maxBytes) continue;
     files.push({ path, mimeType, buffer: (0, import_fs4.readFileSync)(path) });
   }
   return files;
@@ -24791,8 +24884,8 @@ function createJsonRpcPeer(writer, handlers) {
     },
     request: (method, params = {}) => {
       const id = counter.next++;
-      return new Promise((resolve7, reject) => {
-        pending.set(id, { method, resolve: resolve7, reject });
+      return new Promise((resolve9, reject) => {
+        pending.set(id, { method, resolve: resolve9, reject });
         writer.write({ id, method, params }).catch((error61) => {
           pending.delete(id);
           reject(error61 instanceof Error ? error61 : new Error(String(error61)));
@@ -24905,7 +24998,7 @@ function createNdjsonWriter(stream) {
     get writable() {
       return stream.writable && !stream.destroyed && failure5.error === void 0;
     },
-    write: (value) => new Promise((resolve7, reject) => {
+    write: (value) => new Promise((resolve9, reject) => {
       if (failure5.error) {
         reject(failure5.error);
         return;
@@ -24917,7 +25010,7 @@ function createNdjsonWriter(stream) {
       stream.write(`${JSON.stringify(value)}
 `, (error61) => {
         if (error61) reject(error61);
-        else resolve7();
+        else resolve9();
       });
     }),
     end: () => {
@@ -24933,11 +25026,11 @@ function hostProcess(child, tree, options, handlers) {
   const stderr = new LineSplitter((line) => handlers.onStderrLine(line));
   child.stderr.on("data", (chunk) => stderr.push(chunk));
   child.stderr.once("end", () => stderr.flush());
-  const processExit = new Promise((resolve7) => {
-    child.once("exit", (code, signal) => resolve7({ code, signal }));
+  const processExit = new Promise((resolve9) => {
+    child.once("exit", (code, signal) => resolve9({ code, signal }));
   });
-  const outputEnded = new Promise((resolve7) => {
-    child.stdout.once("close", () => resolve7());
+  const outputEnded = new Promise((resolve9) => {
+    child.stdout.once("close", () => resolve9());
   });
   const watch = async () => {
     const { clock, stdoutDrainMs, log, name } = options;
@@ -24993,11 +25086,11 @@ function silentStartError(name, timeoutMs) {
   };
 }
 var import_crypto3, import_fs4, import_path3, PNG_SIGNATURE, IMAGE_MIME_BY_EXT, VIDEO_MIME_BY_EXT, IMAGE_EXTENSIONS, VIDEO_EXTENSIONS, MAX_IMAGE_BYTES, MAX_VIDEO_BYTES, AGENT_BROWSER_MENTION, LocalMediaReader, SessionOpenRefusal, JsonRpcError, ACP_PROTOCOL_VERSION, ACP_ERROR, STDERR_TAIL_LINES, RESULT_EXIT_GRACE_MS, PerTurnSession;
-var init_chunk_72NSEYHK = __esm({
-  "../agent-core/dist/chunk-72NSEYHK.js"() {
+var init_chunk_4G77APXN = __esm({
+  "../agent-core/dist/chunk-4G77APXN.js"() {
     "use strict";
     init_chunk_XC5676SG();
-    init_chunk_54ZRJOQP();
+    init_chunk_HBIPWAUI();
     init_chunk_M6YHY2EZ();
     init_chunk_YXWJW7I5();
     import_crypto3 = require("crypto");
@@ -25227,13 +25320,13 @@ var init_chunk_72NSEYHK = __esm({
         const turnId = input2.turnId;
         let finish = () => {
         };
-        const done = new Promise((resolve7) => {
+        const done = new Promise((resolve9) => {
           finish = (outcome2) => {
             if (this.#current?.id !== turnId) return;
             this.#current = void 0;
             if (this.#state === "busy") this.#state = "idle";
             this.#emit({ type: "turn_ended", turnId, outcome: outcome2 });
-            resolve7({ turnId, outcome: outcome2, providerSessionId: this.#sessionId });
+            resolve9({ turnId, outcome: outcome2, providerSessionId: this.#sessionId });
           };
         });
         const pending = {
@@ -25429,20 +25522,20 @@ function canonicalizeManagedMcpToolName(toolName) {
   return flattened ? `mcp__${MANAGED_MCP_SERVER_NAME}__${flattened[1]}` : toolName;
 }
 async function writeSecretFile(name, contents) {
-  const dir = await (0, import_promises13.mkdtemp)((0, import_path4.join)((0, import_os2.tmpdir)(), "alan-mcp-"));
+  const dir = await (0, import_promises14.mkdtemp)((0, import_path4.join)((0, import_os2.tmpdir)(), "alan-mcp-"));
   const path = (0, import_path4.join)(dir, name);
   const remove = async () => {
-    await (0, import_promises13.rm)(dir, { recursive: true, force: true });
+    await (0, import_promises14.rm)(dir, { recursive: true, force: true });
   };
   try {
-    await (0, import_promises13.writeFile)(path, contents, { mode: 384, flag: "wx" });
+    await (0, import_promises14.writeFile)(path, contents, { mode: 384, flag: "wx" });
   } catch (error61) {
     await remove();
     throw error61;
   }
   return { path, remove, [Symbol.asyncDispose]: remove };
 }
-var import_crypto4, import_crypto5, import_promises13, import_os2, import_path4, MANAGED_MCP_SERVER_NAME, RUN_SCOPED_SERVER, NAMESPACED_RUN_TOOL, FLATTENED_RUN_TOOL;
+var import_crypto4, import_crypto5, import_promises14, import_os2, import_path4, MANAGED_MCP_SERVER_NAME, RUN_SCOPED_SERVER, NAMESPACED_RUN_TOOL, FLATTENED_RUN_TOOL;
 var init_chunk_J2KTV5FP = __esm({
   "../agent-core/dist/chunk-J2KTV5FP.js"() {
     "use strict";
@@ -25451,7 +25544,7 @@ var init_chunk_J2KTV5FP = __esm({
     import_crypto5 = require("crypto");
     init_agent2();
     init_runtime_v2();
-    import_promises13 = require("fs/promises");
+    import_promises14 = require("fs/promises");
     import_os2 = require("os");
     import_path4 = require("path");
     MANAGED_MCP_SERVER_NAME = "alan";
@@ -26894,19 +26987,19 @@ async function claudeTurnInput(run, context) {
   const encoded = await Promise.all(
     images.map(async (image) => ({
       mimeType: image.mimeType,
-      data: (await (0, import_promises14.readFile)(image.path)).toString("base64")
+      data: (await (0, import_promises15.readFile)(image.path)).toString("base64")
     }))
   );
   return { turnId: run.runId, text: text2, ...encoded.length ? { images: encoded } : {} };
 }
-var import_crypto6, import_fs5, import_path5, import_crypto7, import_promises14, EDIT_TOOLS, ThoughtBlocks, UNDERSTOOD_SYSTEM_SUBTYPES, RATE_LIMIT_WARN_AT, CLAUDE_GRAMMAR_NAME, SUBAGENT_TOOL_NAMES, PLAN_ENTRY_STATUSES, controlResponseSchema, STOPPED_STATUSES, TaskRecords, TERMINAL_BACKGROUND_STATUSES, NON_TERMINAL_BACKGROUND_STATUSES, ASYNC_LAUNCH_ACK, BackgroundTasks, FAILED_STATUSES, STOPPED_BY_USER_TEXT, ClaudeTurn, STDERR_TAIL_LINES2, MAX_EARLY_LINES, UNSUPPORTED_STOP, OUTPUT_CLOSED_REASON, ClaudeSession, DEFAULTS, READ_ONLY_DISALLOWED_TOOLS, DEFAULT_MCP_TIMEOUT_MS;
+var import_crypto6, import_fs5, import_path5, import_crypto7, import_promises15, EDIT_TOOLS, ThoughtBlocks, UNDERSTOOD_SYSTEM_SUBTYPES, RATE_LIMIT_WARN_AT, CLAUDE_GRAMMAR_NAME, SUBAGENT_TOOL_NAMES, PLAN_ENTRY_STATUSES, controlResponseSchema, STOPPED_STATUSES, TaskRecords, TERMINAL_BACKGROUND_STATUSES, NON_TERMINAL_BACKGROUND_STATUSES, ASYNC_LAUNCH_ACK, BackgroundTasks, FAILED_STATUSES, STOPPED_BY_USER_TEXT, ClaudeTurn, STDERR_TAIL_LINES2, MAX_EARLY_LINES, UNSUPPORTED_STOP, OUTPUT_CLOSED_REASON, ClaudeSession, DEFAULTS, READ_ONLY_DISALLOWED_TOOLS, DEFAULT_MCP_TIMEOUT_MS;
 var init_claude = __esm({
   "../agent-core/dist/providers/claude.js"() {
     "use strict";
     init_chunk_SBT5W7L4();
-    init_chunk_72NSEYHK();
+    init_chunk_4G77APXN();
     init_chunk_XC5676SG();
-    init_chunk_54ZRJOQP();
+    init_chunk_HBIPWAUI();
     init_chunk_J2KTV5FP();
     init_chunk_M6YHY2EZ();
     init_chunk_FPGAN4XO();
@@ -26922,7 +27015,7 @@ var init_claude = __esm({
     import_fs5 = require("fs");
     import_path5 = require("path");
     import_crypto7 = require("crypto");
-    import_promises14 = require("fs/promises");
+    import_promises15 = require("fs/promises");
     init_agent2();
     EDIT_TOOLS = /* @__PURE__ */ new Set([
       "Edit",
@@ -27632,8 +27725,8 @@ var init_claude = __esm({
       }
       async #awaitTaskStop(requestId, taskId) {
         const timer = new AbortController();
-        const answered = new Promise((resolve7) => {
-          this.#taskStops.set(requestId, resolve7);
+        const answered = new Promise((resolve9) => {
+          this.#taskStops.set(requestId, resolve9);
         });
         const timeoutMs = this.#options.stopTaskTimeoutMs;
         const timedOut = this.#options.clock.sleep(timeoutMs, timer.signal).then(
@@ -27706,17 +27799,17 @@ var init_claude = __esm({
         };
         let markStarted = () => {
         };
-        const whenStarted = new Promise((resolve7) => {
-          markStarted = resolve7;
+        const whenStarted = new Promise((resolve9) => {
+          markStarted = resolve9;
         });
-        const done = new Promise((resolve7) => {
+        const done = new Promise((resolve9) => {
           finish = (outcome2) => {
             if (this.#current?.id !== id) return;
             this.#current = void 0;
             this.#lastTurn = turn;
             if (this.#state === "busy") this.#state = "idle";
             this.#emit({ type: "turn_ended", turnId: id, outcome: outcome2 });
-            resolve7({ turnId: id, outcome: outcome2, providerSessionId: this.#providerSessionId });
+            resolve9({ turnId: id, outcome: outcome2, providerSessionId: this.#providerSessionId });
           };
         });
         const active = {
@@ -27834,8 +27927,8 @@ var init_claude = __esm({
         void removeLaunchFiles(this.#launchFiles).catch((error61) => {
           this.#options.log.warn("claude.launch_files_cleanup_failed", { error: error61 });
         });
-        for (const resolve7 of this.#taskStops.values()) {
-          resolve7({ ok: false, reason: "runtime_unavailable", message: "Claude Code exited." });
+        for (const resolve9 of this.#taskStops.values()) {
+          resolve9({ ok: false, reason: "runtime_unavailable", message: "Claude Code exited." });
         }
         const active = this.#current;
         if (active) {
@@ -28208,6 +28301,67 @@ function imageKey(update) {
   const image = asRecord(update.image);
   return asString(image?.sourceHash) || asString(image?.id) || void 0;
 }
+function windowPatch(value) {
+  if (value === null) return null;
+  const record2 = asRecord(value);
+  if (!record2) return void 0;
+  const patch = {};
+  const usedPercent = asFiniteNumber(record2.usedPercent);
+  if (usedPercent !== void 0 && usedPercent >= 0 && usedPercent <= 100) {
+    patch.usedPercent = usedPercent;
+  } else if (record2.usedPercent === null) {
+    patch.usedPercent = null;
+  }
+  const duration3 = asFiniteNumber(record2.windowDurationMins);
+  if (duration3 !== void 0 && duration3 > 0) patch.windowMinutes = duration3;
+  else if (record2.windowDurationMins === null) patch.windowMinutes = null;
+  const seconds = asFiniteNumber(record2.resetsAt);
+  if (seconds !== void 0 && seconds >= 0) {
+    const reset = new Date(seconds * 1e3);
+    if (Number.isFinite(reset.getTime())) patch.resetsAt = reset.toISOString();
+  } else if (record2.resetsAt === null) {
+    patch.resetsAt = null;
+  }
+  return patch;
+}
+function amount(value) {
+  const text2 = asString(value).trim();
+  return text2.length > 0 ? text2 : void 0;
+}
+function spendPatch(limit, reached) {
+  const record2 = asRecord(limit);
+  const reachedFlag = reached === true;
+  if (!record2)
+    return limit === null && !reachedFlag ? null : reachedFlag ? { reached: true } : void 0;
+  const patch = { reached: reachedFlag };
+  const limitAmount = amount(record2.limit);
+  const usedAmount = amount(record2.used);
+  if (limitAmount) patch.limit = limitAmount;
+  if (usedAmount) patch.used = usedAmount;
+  const remainingPercent = asFiniteNumber(record2.remainingPercent);
+  if (remainingPercent !== void 0) {
+    patch.usedPercent = Math.min(100, Math.max(0, 100 - remainingPercent));
+  }
+  const seconds = asFiniteNumber(record2.resetsAt);
+  if (seconds !== void 0 && seconds >= 0) {
+    const reset = new Date(seconds * 1e3);
+    if (Number.isFinite(reset.getTime())) patch.resetsAt = reset.toISOString();
+  }
+  return patch;
+}
+function creditsPatch(value) {
+  if (value === null) return null;
+  const record2 = asRecord(value);
+  if (!record2 || typeof record2.hasCredits !== "boolean" || typeof record2.unlimited !== "boolean") {
+    return void 0;
+  }
+  const balance = amount(record2.balance);
+  return {
+    hasCredits: record2.hasCredits,
+    unlimited: record2.unlimited,
+    ...balance ? { balance } : {}
+  };
+}
 function isApprovalRequest(method) {
   return COMMAND_OR_FILE.has(method) || LEGACY.has(method);
 }
@@ -28619,7 +28773,10 @@ function classifyCodexError(error61) {
   const message = asString(error61?.message);
   const known = typeof info === "string" ? INFO_KINDS.get(info) : void 0;
   const own2 = normalizeCodexCliErrorMessage(message.trim());
-  if (known) return own2 ? { ...specForErrorKind(known), message: own2 } : specForErrorKind(known);
+  if (known) {
+    const classified = own2 ? { ...specForErrorKind(known), message: own2 } : specForErrorKind(known);
+    return known === "usage_limit" ? { ...classified, ...readCapReset(message) } : classified;
+  }
   const status = httpStatusOf(info);
   return classifyProviderError(message, status === void 0 ? {} : { status });
 }
@@ -28703,7 +28860,7 @@ async function handshake(session, spec, log) {
   }
   await session.rpc.notify("initialized");
 }
-async function preflight(session, spec) {
+async function preflight(session, spec, log) {
   if (spec.externalAuth) {
     const tokens2 = await spec.externalAuth.current();
     await session.rpc.request("account/login/start", {
@@ -28721,6 +28878,13 @@ async function preflight(session, spec) {
       specForErrorKind("not_logged_in")
     );
   }
+  if (spec.externalAuth) {
+    try {
+      session.observeRateLimits(await session.rpc.request("account/rateLimits/read", {}));
+    } catch {
+      log.warn("codex.rate_limits_unavailable", {});
+    }
+  }
 }
 function threadOf(result) {
   const thread = asRecord(asRecord(result)?.thread);
@@ -28782,7 +28946,7 @@ function createCodexDriver(options = {}) {
       try {
         const opening = (async () => {
           await handshake(session, spec, resolved.log);
-          await preflight(session, spec);
+          await preflight(session, spec, resolved.log);
           return openThread(session, spec, resolved.log);
         })();
         const thread = await withDeadline(
@@ -28933,7 +29097,7 @@ function createCodexExecDriver(options = {}) {
   };
 }
 function envDigest2(env) {
-  const hash2 = (0, import_crypto9.createHash)("sha256");
+  const hash2 = (0, import_crypto10.createHash)("sha256");
   for (const key of Object.keys(env).sort()) hash2.update(`${key}\0${env[key]}\0`);
   return hash2.digest("hex");
 }
@@ -28974,7 +29138,7 @@ function planCodexExecSession(run, context) {
   };
 }
 function envDigest22(env) {
-  const hash2 = (0, import_crypto10.createHash)("sha256");
+  const hash2 = (0, import_crypto11.createHash)("sha256");
   for (const key of Object.keys(env).sort()) hash2.update(`${key}\0${env[key]}\0`);
   return hash2.digest("hex");
 }
@@ -29043,14 +29207,14 @@ function codexTurnInput(run, context) {
     ...images.length ? { imagePaths: images.map((image) => image.path) } : {}
   };
 }
-var import_fs6, import_path6, import_crypto8, import_crypto9, import_crypto10, TokenRefresher, MCP_STARTUP_TIMEOUT_SEC, FIELD_TYPES, YES_NO, ACCEPT_DECLINE, MAX_INLINE_GENERATED_IMAGE_BYTES, PNG_SIGNATURE2, JPEG_NON_FRAME_MARKERS, IMAGE_GEN_CALL, PROMPT_LITERAL, RELOCATE_EVERY_MS, CodexImageGenerationFold, CodexRolloutImages, USER_INPUT_METHOD, PERMISSIONS_METHOD, ELICITATION_METHOD, COMMAND_OR_FILE, LEGACY, DECISIONS, COORDINATION_TOOLS, SETTLED_AGENT, STATUS, CHANGE_OPERATIONS, SILENT_ON_START, IGNORED_ITEMS, PLAN_STATUS, WORKER_LIFECYCLE, INFO_KINDS, SILENT, CodexTurn, STDERR_TAIL_LINES3, MAX_BETWEEN_UPDATES, UNSUPPORTED_REQUEST, DECLINED_ELICITATION, IMAGE_CATCH_UP_MS, IMAGE_POLL_MS, CodexSession, CODEX_MIN_VERSION, CODEX_REQUIREMENT, CODEX_TESTED_LINE, DEFAULTS2, CLIENT_INFO, STATUS2, EXITED_WITHOUT_RESPONSE, CodexExecTurn, DEFAULTS22, CodexExecSession;
+var import_fs6, import_path6, import_crypto8, import_crypto9, import_crypto10, import_crypto11, TokenRefresher, MCP_STARTUP_TIMEOUT_SEC, FIELD_TYPES, YES_NO, ACCEPT_DECLINE, MAX_INLINE_GENERATED_IMAGE_BYTES, PNG_SIGNATURE2, JPEG_NON_FRAME_MARKERS, IMAGE_GEN_CALL, PROMPT_LITERAL, RELOCATE_EVERY_MS, CodexImageGenerationFold, CodexRolloutImages, CodexRateLimits, USER_INPUT_METHOD, PERMISSIONS_METHOD, ELICITATION_METHOD, COMMAND_OR_FILE, LEGACY, DECISIONS, COORDINATION_TOOLS, SETTLED_AGENT, STATUS, CHANGE_OPERATIONS, SILENT_ON_START, IGNORED_ITEMS, PLAN_STATUS, WORKER_LIFECYCLE, INFO_KINDS, SILENT, CodexTurn, STDERR_TAIL_LINES3, MAX_BETWEEN_UPDATES, UNSUPPORTED_REQUEST, DECLINED_ELICITATION, IMAGE_CATCH_UP_MS, IMAGE_POLL_MS, CodexSession, CODEX_MIN_VERSION, CODEX_REQUIREMENT, CODEX_TESTED_LINE, DEFAULTS2, CLIENT_INFO, STATUS2, EXITED_WITHOUT_RESPONSE, CodexExecTurn, DEFAULTS22, CodexExecSession;
 var init_codex = __esm({
   "../agent-core/dist/providers/codex.js"() {
     "use strict";
     init_chunk_SBT5W7L4();
-    init_chunk_72NSEYHK();
+    init_chunk_4G77APXN();
     init_chunk_XC5676SG();
-    init_chunk_54ZRJOQP();
+    init_chunk_HBIPWAUI();
     init_chunk_J2KTV5FP();
     init_chunk_M6YHY2EZ();
     init_chunk_FPGAN4XO();
@@ -29059,10 +29223,12 @@ var init_codex = __esm({
     import_path6 = require("path");
     init_effort();
     import_crypto8 = require("crypto");
-    init_agent2();
     import_crypto9 = require("crypto");
+    init_runtime_v2();
     init_agent2();
     import_crypto10 = require("crypto");
+    init_agent2();
+    import_crypto11 = require("crypto");
     init_effort();
     TokenRefresher = class {
       #auth;
@@ -29246,6 +29412,50 @@ var init_codex = __esm({
         return this.#cursor;
       }
     };
+    CodexRateLimits = class {
+      #clock;
+      #sourceId;
+      #sequence = 0;
+      constructor(clock, sourceId = (0, import_crypto9.randomUUID)()) {
+        this.#clock = clock;
+        this.#sourceId = sourceId;
+      }
+      read(value) {
+        const response = asRecord(value);
+        const buckets = asRecord(response?.rateLimitsByLimitId);
+        if (buckets) {
+          return Object.entries(buckets).flatMap(
+            ([limitId, snapshot2]) => this.#update(snapshot2, limitId)
+          );
+        }
+        return this.#update(response?.rateLimits);
+      }
+      notification(params) {
+        return this.#update(params.rateLimits);
+      }
+      #update(value, bucketId) {
+        const snapshot2 = asRecord(value);
+        if (!snapshot2) return [];
+        const primary = windowPatch(snapshot2.primary);
+        const secondary = windowPatch(snapshot2.secondary);
+        const spend = spendPatch(snapshot2.individualLimit, snapshot2.spendControlReached);
+        const credits = creditsPatch(snapshot2.credits);
+        const planType = snapshot2.planType === null ? null : asString(snapshot2.planType) || void 0;
+        const parsed = runCodexRateLimitsUpdateSchema.safeParse({
+          sessionUpdate: "_alan/codex.rate_limits",
+          limitId: bucketId ?? (asString(snapshot2.limitId) || "codex"),
+          ...primary === void 0 ? {} : { primary },
+          ...secondary === void 0 ? {} : { secondary },
+          ...spend === void 0 ? {} : { spend },
+          ...credits === void 0 ? {} : { credits },
+          ...planType === void 0 ? {} : { planType },
+          observedAt: new Date(this.#clock.now()).toISOString(),
+          sourceId: this.#sourceId,
+          sequence: this.#sequence++
+        });
+        return parsed.success ? [parsed.data] : [];
+      }
+    };
     USER_INPUT_METHOD = "item/tool/requestUserInput";
     PERMISSIONS_METHOD = "item/permissions/requestApproval";
     ELICITATION_METHOD = "mcpServer/elicitation/request";
@@ -29315,7 +29525,6 @@ var init_codex = __esm({
       "thread/closed",
       "hook/started",
       "hook/completed",
-      "account/rateLimits/updated",
       "account/updated",
       "account/login/completed",
       "remoteControl/status/changed",
@@ -29510,6 +29719,7 @@ var init_codex = __esm({
       #listeners = createListeners();
       #options;
       #memory;
+      #rateLimits;
       #stderr = [];
       #approvals = /* @__PURE__ */ new Map();
       /** Session-level updates (thread start warnings, MCP startup) that open the next turn's log. */
@@ -29526,6 +29736,7 @@ var init_codex = __esm({
       constructor(child, tree, memory, options) {
         this.#options = options;
         this.#memory = memory;
+        this.#rateLimits = new CodexRateLimits(options.clock);
         this.#lastTurn = new CodexTurn(memory, options.clock);
         this.#host = hostProcess(
           child,
@@ -29560,6 +29771,9 @@ var init_codex = __esm({
       configure(config2) {
         this.#config = config2;
       }
+      observeRateLimits(response) {
+        this.#recordRateLimits(this.#rateLimits.read(response));
+      }
       attachThread(threadId, rolloutPath) {
         if (threadId === this.#threadId) return;
         this.#threadId = threadId;
@@ -29672,10 +29886,10 @@ var init_codex = __esm({
         };
         let identify = () => {
         };
-        const identified = new Promise((resolve7) => {
-          identify = resolve7;
+        const identified = new Promise((resolve9) => {
+          identify = resolve9;
         });
-        const done = new Promise((resolve7) => {
+        const done = new Promise((resolve9) => {
           finish = (outcome2) => {
             if (this.#current?.id !== id) return;
             this.#current = void 0;
@@ -29683,7 +29897,7 @@ var init_codex = __esm({
             if (this.#state === "busy") this.#state = "idle";
             this.#host.scanDescendants(true);
             this.#emit({ type: "turn_ended", turnId: id, outcome: outcome2 });
-            resolve7({ turnId: id, outcome: outcome2, providerSessionId: this.#threadId });
+            resolve9({ turnId: id, outcome: outcome2, providerSessionId: this.#threadId });
           };
         });
         const active = {
@@ -29726,6 +29940,10 @@ var init_codex = __esm({
         return known === void 0 || known === turnId ? active : void 0;
       }
       #onNotification(notification) {
+        if (notification.method === "account/rateLimits/updated") {
+          this.#recordRateLimits(this.#rateLimits.notification(notification.params));
+          return;
+        }
         if (notification.method === "serverRequest/resolved") this.#dropResolved(notification);
         const active = this.#ownerOf(notification);
         const reader = active?.turn ?? this.#lastTurn;
@@ -29752,6 +29970,14 @@ var init_codex = __esm({
           void this.#stopTurn(active);
         }
       }
+      #recordRateLimits(updates) {
+        const active = this.#current;
+        if (active) this.#emitUpdates(active, updates);
+        else {
+          this.#between.push(...updates);
+          this.#between.splice(0, Math.max(0, this.#between.length - MAX_BETWEEN_UPDATES));
+        }
+      }
       #emitUpdates(active, updates) {
         for (const update of updates) this.#emit({ type: "update", turnId: active.id, update });
       }
@@ -30161,7 +30387,7 @@ function alanCodeConfigContent(existing, input2) {
   });
 }
 function readBody2(response) {
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve9, reject) => {
     const chunks = [];
     let size = 0;
     response.on("data", (chunk) => {
@@ -30169,7 +30395,7 @@ function readBody2(response) {
       if (size > MAX_CATALOG_BYTES) response.destroy(new Error("catalog too large"));
       else chunks.push(chunk);
     });
-    response.on("end", () => resolve7(Buffer.concat(chunks).toString("utf8")));
+    response.on("end", () => resolve9(Buffer.concat(chunks).toString("utf8")));
     response.on("error", reject);
   });
 }
@@ -30185,13 +30411,13 @@ function parseResponseBody(text2, status) {
 }
 function getJson(url2, headers, timeout, signal) {
   const request2 = url2.protocol === "https:" ? import_https.request : import_http3.request;
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve9, reject) => {
     const outgoing = request2(url2, { method: "GET", headers, timeout, signal }, (response) => {
       const status = response.statusCode ?? 0;
       readBody2(response).then((text2) => {
         const body = parseResponseBody(text2, status);
         if (status < 200 || status >= 300) reject(new CatalogResponseError(status, body));
-        else resolve7(body);
+        else resolve9(body);
       }).catch(reject);
     });
     outgoing.on("timeout", () => outgoing.destroy(new Error("catalog timed out")));
@@ -30405,18 +30631,18 @@ function alanCodeEngineEnv(input2) {
   };
 }
 async function writePlugin(directory, apiOrigin) {
-  const origin = (0, import_crypto11.createHash)("sha256").update(apiOrigin).digest("hex").slice(0, 12);
+  const origin = (0, import_crypto12.createHash)("sha256").update(apiOrigin).digest("hex").slice(0, 12);
   const target = (0, import_path8.join)(directory, `engine-plugin-v${ALAN_CODE_ENGINE_PLUGIN_VERSION}-${origin}.mjs`);
-  const temporary = `${target}.${(0, import_crypto11.randomUUID)()}.tmp`;
-  await (0, import_promises15.mkdir)(directory, { recursive: true, mode: 448 });
-  await (0, import_promises15.writeFile)(temporary, alanCodeEnginePluginSource(apiOrigin), { mode: 384 });
-  await (0, import_promises15.rename)(temporary, target);
+  const temporary = `${target}.${(0, import_crypto12.randomUUID)()}.tmp`;
+  await (0, import_promises16.mkdir)(directory, { recursive: true, mode: 448 });
+  await (0, import_promises16.writeFile)(temporary, alanCodeEnginePluginSource(apiOrigin), { mode: 384 });
+  await (0, import_promises16.rename)(temporary, target);
   return (0, import_url.pathToFileURL)(target).href;
 }
 async function prepareAlanCodeProfile(input2) {
   const directories = Object.values(alanCodeEngineDirectories(input2.engineRoot));
   await Promise.all(
-    directories.map((directory) => (0, import_promises15.mkdir)(directory, { recursive: true, mode: 448 }))
+    directories.map((directory) => (0, import_promises16.mkdir)(directory, { recursive: true, mode: 448 }))
   );
   const [pluginUrl, models] = await Promise.all([
     writePlugin((0, import_path8.join)(input2.engineRoot, "plugin"), input2.access.apiOrigin),
@@ -30439,7 +30665,7 @@ function alanCodeSystemPrompt(alanSystemPrompt) {
 
 ${instructions}` : ALAN_CODE_TOOL_NAMING_PROMPT;
 }
-var import_http3, import_https, import_fs7, import_path7, import_crypto11, import_promises15, import_path8, import_url, ALAN_CODE_BASELINE_PROMPT, ALAN_CODE_ENGINE_PROVIDER_ID, DEFAULT_CONTEXT_WINDOW, DEFAULT_MAX_OUTPUT_TOKENS, ALAN_CODE_API_KEY_ENV, ALAN_CODE_CONVERSATION_ID_ENV, ALAN_CODE_PROXY_PATH, ALAN_CODE_WEBSEARCH_PATH, ALAN_CODE_CATALOG_PATH, CATALOG_TIMEOUT_MS, MAX_CATALOG_BYTES, ACTIVATION_WAIT_MS, ACTIVATION_POLL_MS, CatalogResponseError, ALAN_CODE_ENGINE_PATH_ENV, ALAN_CODE_ENGINE_COMMAND, ALAN_CODE_ENGINE_NAME, WINDOWS_RUNNABLE_EXTENSION, ALAN_CODE_ENGINE_PLUGIN_VERSION, ALAN_CODE_TOOL_NAMING_PROMPT;
+var import_http3, import_https, import_fs7, import_path7, import_crypto12, import_promises16, import_path8, import_url, ALAN_CODE_BASELINE_PROMPT, ALAN_CODE_ENGINE_PROVIDER_ID, DEFAULT_CONTEXT_WINDOW, DEFAULT_MAX_OUTPUT_TOKENS, ALAN_CODE_API_KEY_ENV, ALAN_CODE_CONVERSATION_ID_ENV, ALAN_CODE_PROXY_PATH, ALAN_CODE_WEBSEARCH_PATH, ALAN_CODE_CATALOG_PATH, CATALOG_TIMEOUT_MS, MAX_CATALOG_BYTES, ACTIVATION_WAIT_MS, ACTIVATION_POLL_MS, CatalogResponseError, ALAN_CODE_ENGINE_PATH_ENV, ALAN_CODE_ENGINE_COMMAND, ALAN_CODE_ENGINE_NAME, WINDOWS_RUNNABLE_EXTENSION, ALAN_CODE_ENGINE_PLUGIN_VERSION, ALAN_CODE_TOOL_NAMING_PROMPT;
 var init_alan_code = __esm({
   "../agent-core/dist/providers/alan-code.js"() {
     "use strict";
@@ -30452,8 +30678,8 @@ var init_alan_code = __esm({
     import_fs7 = require("fs");
     import_path7 = require("path");
     init_runtime_v2();
-    import_crypto11 = require("crypto");
-    import_promises15 = require("fs/promises");
+    import_crypto12 = require("crypto");
+    import_promises16 = require("fs/promises");
     import_path8 = require("path");
     import_url = require("url");
     ALAN_CODE_BASELINE_PROMPT = "You are alan-code, an interactive CLI coding agent that helps users with software engineering tasks. Use the instructions below and the tools available to you to assist the user.\n\nDo not invent URLs. Use verified URLs or ones supplied by the user or project.\n\nIf the user asks for help or wants to give feedback, inform them of the following:\n- `--harness-help` / harness help: learn how to run alan-code\n- For product feedback or bugs, report through the Alan / Supatest issue channels used by this repository\n\nWhen the user directly asks about alan-code capabilities (for example \"can alan-code\u2026\", \"does the harness have\u2026\") or asks in second person about your abilities, answer from the tools and instructions available in this session. If a docs/fetch tool is available and project docs URLs are known, use them; otherwise inspect local README / AGENTS.md rather than inventing product claims.\n\n# Personality\n\nYour default personality and tone is concise, direct, and friendly. You communicate efficiently, always keeping the user clearly informed about ongoing actions without unnecessary detail. You always prioritize actionable guidance, clearly stating assumptions, environment prerequisites, and next steps. Unless explicitly asked, you avoid excessively verbose explanations about your work.\n\n# Tone and style\n\nYou should be concise, direct, and to the point. When you run a non-trivial bash command, you should explain what the command does and why you are running it, so the user understands what you are doing (especially important for commands that change their system).\nRemember that your output will be displayed on a command line interface. Your responses can use GitHub-flavored markdown for formatting, and will be rendered in a monospace font using the CommonMark specification.\nOutput text to communicate with the user; all text you output outside of tool use is displayed to the user. Only use tools to complete tasks. Never use tools like Bash or code comments as means to communicate with the user during the session.\nIf you cannot or will not help the user with something, do not lecture about why. Offer helpful alternatives if possible; otherwise keep the response to 1-2 sentences.\nOnly use emojis if the user explicitly requests it. Avoid emojis in all communication unless asked.\nIMPORTANT: Minimize output tokens while staying helpful, correct, and accurate. Only address the specific query or task. Avoid tangential information unless it is critical to completing the request. If you can answer in 1-3 sentences or a short paragraph, do that.\nAnswer the user's question directly. One-word answers are best when they suffice. Avoid text before/after your response such as \"The answer is <answer>.\", \"Here is the content of the file\u2026\", \"Based on the information provided\u2026\", or \"Here is what I will do next\u2026\". Examples of appropriate verbosity:\n<example>\nuser: what is 2+2?\nassistant: 4\n</example>\n\n<example>\nuser: is 11 a prime number?\nassistant: Yes\n</example>\n\n<example>\nuser: what command should I run to list files in the current directory?\nassistant: ls\n</example>\n\n<example>\nuser: what command should I run to watch files in the current directory?\nassistant: [use tools to inspect the project, then answer]\nnpm run dev\n</example>\n\n<example>\nuser: what files are in the directory src/?\nassistant: [lists files and sees foo.c, bar.c, baz.c]\nuser: which file contains the implementation of foo?\nassistant: src/foo.c\n</example>\n\n<example>\nuser: write tests for new feature\nassistant: [searches for similar tests, reads relevant files concurrently, edits/writes tests]\n</example>\n\n# Responsiveness\n\n## Preamble messages\n\nBefore making tool calls, send a brief preamble to the user explaining what you're about to do. When sending preamble messages, follow these principles and examples:\n\n- **Logically group related actions**: if you're about to run several related commands, describe them together in one preamble rather than sending a separate note for each.\n- **Keep it concise**: be no more than 1-2 sentences, focused on immediate, tangible next steps. (8\u201312 words for quick updates).\n- **Build on prior context**: if this is not your first tool call, use the preamble message to connect the dots with what's been done so far and create a sense of momentum and clarity for the user to understand your next actions.\n- **Keep your tone light, friendly and curious**: add small touches of personality in preambles feel collaborative and engaging.\n- **Exception**: Avoid adding a preamble for every trivial read (e.g., `cat` a single file) unless it's part of a larger grouped action.\n\nExamples:\n\n- \"I've explored the repo; now checking the API route definitions.\"\n- \"Next, I'll patch the config and update the related tests.\"\n- \"I'm about to scaffold the CLI commands and helper functions.\"\n- \"Ok cool, so I've wrapped my head around the repo. Now digging into the API routes.\"\n- \"Config's looking tidy. Next up is patching helpers to keep things in sync.\"\n- \"Finished poking at the DB gateway. I will now chase down error handling.\"\n- \"Alright, build pipeline order is interesting. Checking how it reports failures.\"\n- \"Spotted a clever caching util; now hunting where it gets used.\"\n\n# Planning\n\nIf a planning tool is available, use it when it helps track complex work. Keep the plan brief and update it as work progresses.\n\nNote that plans are not for padding out simple work with filler steps or stating the obvious. The content of your plan should not involve doing anything that you aren't capable of doing (i.e. don't try to test things that you can't test). Do not use plans for simple or single-step queries that you can just do or answer immediately.\n\nWhen a planning tool displays the plan, summarize only what changed or what comes next.\n\nKeep any active plan aligned with the work completed and remaining.\n\nUse a plan when:\n\n- The task is non-trivial and will require multiple actions over a long time horizon.\n- There are logical phases or dependencies where sequencing matters.\n- The work has ambiguity that benefits from outlining high-level goals.\n- You want intermediate checkpoints for feedback and validation.\n- When the user asked you to do more than one thing in a single prompt\n- The user has asked you to use the plan tool (aka \"TODOs\")\n- You generate additional steps while working, and plan to do them before yielding to the user\n\n## Examples\n\n**High-quality plans**\n\nExample 1:\n\n1. Add CLI entry with file args\n2. Parse Markdown via CommonMark library\n3. Apply semantic HTML template\n4. Handle code blocks, images, links\n5. Add error handling for invalid files\n\nExample 2:\n\n1. Define CSS variables for colors\n2. Add toggle with localStorage state\n3. Refactor components to use variables\n4. Verify all views for readability\n5. Add smooth theme-change transition\n\nExample 3:\n\n1. Set up Node.js + WebSocket server\n2. Add join/leave broadcast events\n3. Implement messaging with timestamps\n4. Add usernames + mention highlighting\n5. Persist messages in lightweight DB\n6. Add typing indicators + unread count\n\n**Low-quality plans**\n\nExample 1:\n\n1. Create CLI tool\n2. Add Markdown parser\n3. Convert to HTML\n\nExample 2:\n\n1. Add dark mode toggle\n2. Save preference\n3. Make styles look good\n\nExample 3:\n\n1. Create single-file HTML game\n2. Run quick sanity check\n3. Summarize usage instructions\n\nIf you need to write a plan, only write high quality plans, not low quality ones.\n\n## Plan mode and clarification (harness specifics)\n\n- When the session is in plan mode, inspect without making changes and produce a concrete plan. Outside plan mode, proceed with authorized work and ask for approval only when the action requires it.\n- Prefer the durable plan file path over relying on chat memory after compaction.\n- When requirements are ambiguous, ask a targeted question using an available user-input tool instead of guessing.\n- An execution checklist is not a substitute for a durable plan when the task requires one.\n\n# Task execution\n\nYou are a coding agent. Please keep going until the query is completely resolved, before ending your turn and yielding back to the user. Only terminate your turn when you are sure that the problem is solved. Autonomously resolve the query to the best of your ability, using the tools available to you, before coming back to the user. Do NOT guess or make up an answer.\n\nYou MUST adhere to the following criteria when solving queries:\n\n- Working on the repo(s) in the current environment is allowed, even if they are proprietary.\n- Analyzing code for vulnerabilities is allowed.\n- Showing user code and tool call details is allowed.\n- Use the editing tools available in the current host to modify files. Do not assume a particular tool name.\n\nIf completing the user's task requires writing or modifying files, your code and final answer should follow these coding guidelines, though user instructions (i.e. AGENTS.md) may override these guidelines:\n\n- Fix the problem at the root cause rather than applying surface-level patches, when possible.\n- Avoid unneeded complexity in your solution.\n- Do not attempt to fix unrelated bugs or broken tests. It is not your responsibility to fix them. (You may mention them to the user in your final message though.)\n- Update documentation as necessary.\n- Keep changes consistent with the style of the existing codebase. Changes should be minimal and focused on the task.\n- Use `git log` and `git blame` to search the history of the codebase if additional context is required.\n- NEVER add copyright or license headers unless specifically requested.\n- Do not waste tokens by re-reading files after editing them. The tool call will fail if it didn't work. The same goes for making folders, deleting folders, etc.\n- Do not `git commit` your changes or create new git branches unless explicitly requested.\n- Add comments when they explain a non-obvious invariant or reason for a decision.\n- Do not use one-letter variable names unless explicitly requested.\n- NEVER output inline citations like \"\u3010F:README.md\u2020L5-L14\u3011\" in your outputs. The CLI is not able to render these so they will just be broken in the UI. Instead, if you output valid filepaths, users will be able to click on them to open the files in their editor.\n\n# Validating your work\n\nIf the codebase has tests or the ability to build or run, consider using them to verify that your work is complete.\n\nWhen testing, your philosophy should be to start as specific as possible to the code you changed so that you can catch issues efficiently, then make your way to broader tests as you build confidence. If there's no test for the code you changed, and if the adjacent patterns in the codebases show that there's a logical place for you to add a test, you may do so. However, do not add tests to codebases with no tests.\n\nSimilarly, once you're confident in correctness, you can suggest or use formatting commands to ensure that your code is well formatted. If there are issues you can iterate up to 3 times to get formatting right, but if you still can't manage it's better to save the user time and present them a correct solution where you call out the formatting in your final message. If the codebase does not have a formatter configured, do not add one.\n\nFor all of testing, running, building, and formatting, do not attempt to fix unrelated bugs. It is not your responsibility to fix them. (You may mention them to the user in your final message though.)\n\nBe mindful of whether to run validation commands proactively. In the absence of behavioral guidance:\n\n- When running in a non-interactive mode where edits are auto-approved (print/headless, or the `allow edits` permission mode), proactively run tests, lint and do whatever you need to ensure you've completed the task.\n- In plan mode, stay read-only. Otherwise, run focused checks after changes when the host permits them.\n- When working on test-related tasks, such as adding tests, fixing tests, or reproducing a bug to verify behavior, you may proactively run tests regardless of permission mode. Use your judgement to decide whether this is a test-related task.\n\n# Ambition vs. precision\n\nFor tasks that have no prior context (i.e. the user is starting something brand new), you should feel free to be ambitious and demonstrate creativity with your implementation.\n\nIf you're operating in an existing codebase, you should make sure you do exactly what the user asks with surgical precision. Treat the surrounding codebase with respect, and don't overstep (i.e. changing filenames or variables unnecessarily). You should balance being sufficiently ambitious and proactive when completing tasks of this nature.\n\nYou should use judicious initiative to decide on the right level of detail and complexity to deliver based on the user's needs. This means showing good judgment that you're capable of doing the right extras without gold-plating. This might be demonstrated by high-value, creative touches when scope of the task is vague; while being surgical and targeted when scope is tightly specified.\n\n# Sharing progress updates\n\nFor especially longer tasks that you work on (i.e. requiring many tool calls, or a plan with multiple steps), you should provide progress updates back to the user at reasonable intervals. These updates should be structured as a concise sentence or two (no more than 8-10 words long) recapping progress so far in plain language: this update demonstrates your understanding of what needs to be done, progress so far (i.e. files explores, subtasks complete), and where you're going next.\n\nBefore doing large chunks of work that may incur latency as experienced by the user (i.e. writing a new file), you should send a concise message to the user with an update indicating what you're about to do to ensure they know what you're spending time on. Don't start editing or writing large files before informing the user what you are doing and why.\n\nThe messages you send before tool calls should describe what is immediately about to be done next in very concise language. If there was previous work done, this preamble message should also include a note about the work done so far to bring the user along.\n\n# Presenting your work and final message\n\nYour final message should read naturally, like an update from a concise teammate. For casual conversation, brainstorming tasks, or quick questions from the user, respond in a friendly, conversational tone. You should ask questions, suggest ideas, and adapt to the user's style. If you've finished a large amount of work, when describing what you've done to the user, you should follow the final answer formatting guidelines to communicate substantive changes. You don't need to add structured formatting for one-word answers, greetings, or purely conversational exchanges.\n\nYou can skip heavy formatting for single, simple actions or confirmations. In these cases, respond in plain sentences with any relevant next step or quick option. Reserve multi-section structured responses for results that need grouping or explanation.\n\nThe user is working on the same computer as you, and has access to your work. As such there's no need to show the full contents of large files you have already written unless the user explicitly asks for them. Similarly, if you've created or modified files, there's no need to tell users to \"save the file\" or \"copy the code into a file\"\u2014just reference the file path.\n\nComplete authorized next steps, including relevant tests. Ask before a consequential action that needs approval, and briefly report anything you could not verify.\n\nBrevity is very important as a default. You should be very concise (i.e. no more than 10 lines), but can relax this requirement for tasks where additional detail and comprehensiveness is important for the user's understanding.\n\n## Final answer structure and style guidelines\n\nYou are producing plain text that will later be styled by the CLI. Follow these rules exactly. Formatting should make results easy to scan, but not feel mechanical. Use judgment to decide how much structure adds value.\n\n**Section Headers**\n\n- Use only when they improve clarity \u2014 they are not mandatory for every answer.\n- Choose descriptive names that fit the content\n- Keep headers short (1\u20133 words) and in `**Title Case**`. Always start headers with `**` and end with `**`\n- Use the blank lines required by the renderer for headings and lists.\n- Section headers should only be used where they genuinely improve scanability; avoid fragmenting the answer.\n\n**Bullets**\n\n- Use `-` followed by a space for every bullet.\n- Merge related points when possible; avoid a bullet for every trivial detail.\n- Keep bullets to one line unless breaking for clarity is unavoidable.\n- Group into short lists (4\u20136 bullets) ordered by importance.\n- Use consistent keyword phrasing and formatting across sections.\n\n**Monospace**\n\n- Wrap all commands, file paths, env vars, and code identifiers in backticks (`` `...` ``).\n- Apply to inline examples and to bullet keywords if the keyword itself is a literal file/command.\n- Never mix monospace and bold markers; choose one based on whether it's a keyword (`**`) or inline code/path (`` ` ``).\n\n**File References**\n\nWhen referencing files in your response, make sure to include the relevant start line and always follow the below rules:\n\n- Use inline code to make file paths clickable.\n- Each reference should have a stand alone path. Even if it's the same file.\n- Accepted: absolute, workspace\u2011relative, a/ or b/ diff prefixes, or bare filename/suffix.\n- Line/column (1\u2011based, optional): :line[:column] or #Lline[Ccolumn] (column defaults to 1).\n- Do not use URIs like file://, vscode://, or https://.\n- Do not provide range of lines\n- Examples: src/app.ts, src/app.ts:42, b/server/index.js#L10, C:\\repo\\project\\main.rs:12:5\n\n**Structure**\n\n- Place related bullets together; don't mix unrelated concepts in the same section.\n- Order sections from general \u2192 specific \u2192 supporting info.\n- For subsections (e.g., \"Binaries\" under \"Rust Workspace\"), introduce with a bolded keyword bullet, then list items under it.\n- Match structure to complexity:\n  - Multi-part or detailed results \u2192 use clear headers and grouped bullets.\n  - Simple results \u2192 minimal headers, possibly just a short list or paragraph.\n\n**Tone**\n\n- Keep the voice collaborative and natural, like a coding partner handing off work.\n- Be concise and factual \u2014 no filler or conversational commentary and avoid unnecessary repetition\n- Use present tense and active voice (e.g., \"Runs tests\" not \"This will run tests\").\n- Keep descriptions self-contained; don't refer to \"above\" or \"below\".\n- Use parallel structure in lists for consistency.\n\n**Don't**\n\n- Don't use literal words \"bold\" or \"monospace\" in the content.\n- Don't nest bullets or create deep hierarchies.\n- Don't output ANSI escape codes directly \u2014 the CLI renderer applies them.\n- Don't cram unrelated keywords into a single bullet; split for clarity.\n- Don't let keyword lists run long \u2014 wrap or reformat for scanability.\n\nGenerally, ensure your final answers adapt their shape and depth to the request. For example, answers to code explanations should have a precise, structured explanation with code references that answer the question directly. For tasks with a simple implementation, lead with the outcome and supplement only with what's needed for clarity. Larger changes can be presented as a logical walkthrough of your approach, grouping related steps, explaining rationale where it adds value, and highlighting next actions to accelerate the user. Your answers should provide the right level of detail while being easily scannable.\n\nFor casual greetings, acknowledgements, or other one-off conversational messages that are not delivering substantive information or structured results, respond naturally without section headers or bullet formatting.\n\n# Professional objectivity\n\nPrioritize technical accuracy and truthfulness over validating the user's beliefs. Focus on facts and problem-solving. Be direct and objective without unnecessary praise or emotional validation. Disagree when needed. When uncertain, investigate before confirming the user's assumptions.\n\n# Proactiveness\n\nProactively complete work that follows from the user's request. Avoid unrelated actions that would surprise the user. Strike a balance between:\n\n1. Doing the right thing when asked, including follow-up actions\n2. Not surprising the user with unrequested actions\n   For example, if the user asks how to approach something, answer first; do not immediately jump into edits.\n\n# Following conventions\n\nWhen changing files, first understand the file's conventions. Mimic code style, use existing libraries and utilities, and follow existing patterns.\n\n- NEVER assume a library is available, even if it is well known. Whenever you write code that uses a library or framework, first check that this codebase already uses it (neighboring files, package.json, cargo.toml, go.mod, etc.).\n- When creating a new component, first look at existing components for framework choice, naming, typing, and other conventions.\n- When editing code, first look at surrounding context (especially imports) to understand chosen frameworks/libraries, then make the change idiomatically.\n- Always follow security best practices. Never introduce code that exposes or logs secrets and keys. Never commit secrets or keys to the repository.\n\n# Doing tasks\n\nThe user will primarily request software engineering tasks: bugs, features, refactors, explanations, and more. Recommended steps:\n\n- Use available search/read tools extensively to understand the codebase and the query (in parallel when independent).\n- Implement the solution with the tools available to you.\n- Prefer editing existing files. Create documentation when the task or project instructions require it.\n- Verify when possible with tests. NEVER assume a specific test framework or script \u2014 check README / AGENTS.md or search the repo.\n- Run lint and typecheck commands (for example npm run lint, npm run typecheck, ruff, pnpm lint) if they were provided to you \u2014 see Validating your work for when to run them proactively vs. when to hold off. If you cannot find the correct command, ask the user, and if they supply it, proactively suggest writing it to AGENTS.md so you know next time.\n\n- Tool results and user messages may include <system-reminder> tags. Those tags contain useful reminders. They are NOT part of the user's provided input or the tool result.\n\n# Tool usage policy\n\n- Prefer specialized file tools over shell for reading, editing, writing, listing, and searching when those tools are available. Use the `grep`, `glob`, and `list` tools instead of bash for search and listing \u2014 they are ripgrep-backed and return structured, length-capped results. Use shell for real system commands (git, package managers, builds, tests, process control).\n- When doing broad codebase exploration, use the available search tools and delegate only when the task benefits from independent work.\n- You can call multiple tools in one response. When multiple independent pieces of information are needed, batch tool calls for performance. When making multiple bash tool calls, send a single message with multiple tool calls so they can run in parallel (for example git status and git diff together).\n- Match edit old-text exactly, including whitespace.\n- If a tool call is denied by policy, adapt: use an allowed approach or ask the user. Do not retry the same blocked call in a loop.\n\n## Shell commands\n\nWhen using the shell, you must adhere to the following guidelines:\n\n- When searching for text or files, prefer using `rg` or `rg --files` respectively because `rg` is much faster than alternatives like `grep` and `find`. (If the `rg` command is not found, then use alternatives.) Reach for the shell only when the `grep`/`glob` tools cannot express the query \u2014 for example counting matches, or piping results into another command.\n- Search narrow first: use `rg -l` or `rg -c` to find which files match, then read only those files. Do not dump full match bodies across a repo into context.\n- Never pipe a large file into your context. Do not `cat` a big file; use the `read` tool with an offset/limit, or `sed -n 'START,ENDp'` for a specific range.\n- Do not use python scripts to attempt to output larger chunks of a file.\n\nIMPORTANT: Before you begin work, think about what the code you're editing is supposed to do based on the filenames and directory structure.\n\n# AGENTS.md spec\n\n- Repos often contain AGENTS.md files. These files can appear anywhere within the repository.\n- These files are a way for humans to give you (the agent) instructions or tips for working within the container.\n- Some examples might be: coding conventions, info about how code is organized, or instructions for how to run or test code.\n- Instructions in AGENTS.md files:\n  - The scope of an AGENTS.md file is the entire directory tree rooted at the folder that contains it.\n  - For every file you touch in the final change, you must obey instructions in any AGENTS.md file whose scope includes that file.\n  - Instructions about code style, structure, naming, etc. apply only to code within the AGENTS.md file's scope, unless the file states otherwise.\n  - More-deeply-nested AGENTS.md files take precedence in the case of conflicting instructions.\n  - Direct system/developer/user instructions (as part of a prompt) take precedence over AGENTS.md instructions.\n- The contents of the AGENTS.md file at the root of the repo and the project directory are loaded into your context automatically and don't need to be re-read. AGENTS.md files in subdirectories are NOT loaded automatically: when working in a subdirectory, or a directory outside the CWD, check for any AGENTS.md files that may be applicable.\n\n# Permissions and safety\n\n- Never commit secrets or keys.\n- Never create a git commit unless the user explicitly asks.\n- Do not run destructive commands (mass delete, force-push, hard reset) unless the user clearly requested them.\n";
@@ -37822,9 +38048,9 @@ var require_dist = __commonJS({
 var init_dist = __esm({
   "../agent-core/dist/index.js"() {
     "use strict";
-    init_chunk_72NSEYHK();
+    init_chunk_4G77APXN();
     init_chunk_XC5676SG();
-    init_chunk_54ZRJOQP();
+    init_chunk_HBIPWAUI();
     init_chunk_M6YHY2EZ();
     init_chunk_YXWJW7I5();
   }
@@ -37917,7 +38143,7 @@ function within(root, path) {
 }
 async function resolveReal(path) {
   try {
-    return await (0, import_promises23.realpath)(path);
+    return await (0, import_promises24.realpath)(path);
   } catch {
     const parent = (0, import_path9.dirname)(path);
     if (parent === path) return path;
@@ -37946,14 +38172,14 @@ function createWorkspaceFs(roots, writable) {
   return {
     read: async (params) => {
       const path = await confined(params);
-      const bytes = await (0, import_promises23.readFile)(path);
+      const bytes = await (0, import_promises24.readFile)(path);
       if (bytes.byteLength > MAX_READ_BYTES) throw new FsDenied(`${path} is too large to read`);
       return { content: sliceLines(bytes.toString("utf8"), params) };
     },
     write: async (params) => {
       if (!writable) throw new FsDenied("This session is read-only");
       const path = await confined(params);
-      await (0, import_promises23.writeFile)(path, asString(params.content));
+      await (0, import_promises24.writeFile)(path, asString(params.content));
       return {};
     }
   };
@@ -38498,7 +38724,7 @@ function isAcpBackendKind(value) {
   return Object.hasOwn(ACP_PROFILES, value);
 }
 function envDigest3(env) {
-  const hash2 = (0, import_crypto12.createHash)("sha256");
+  const hash2 = (0, import_crypto13.createHash)("sha256");
   for (const key of Object.keys(env).sort()) hash2.update(`${key}\0${env[key]}\0`);
   return hash2.digest("hex");
 }
@@ -38556,7 +38782,7 @@ async function acpTurnInput(run, context) {
   const encoded = await Promise.all(
     images.map(async (image) => ({
       mimeType: image.mimeType,
-      data: (await (0, import_promises24.readFile)(image.path)).toString("base64")
+      data: (await (0, import_promises25.readFile)(image.path)).toString("base64")
     }))
   );
   return {
@@ -38565,23 +38791,23 @@ async function acpTurnInput(run, context) {
     ...encoded.length ? { images: encoded, imagePaths: images.map((image) => image.path) } : {}
   };
 }
-var import_promises23, import_path9, import_crypto12, import_promises24, CURSOR_ASK_QUESTION, copilotAcpProfile, cursorAcpProfile, MODEL_REJECTED, MAX_READ_BYTES, FsDenied, ENV_REFERENCE, AcpBackgroundTasks, CURSOR_CREATE_PLAN, STATUSES, READ_KINDS, ALLOW_KINDS, REJECT_KINDS, CANCELLED_PERMISSION, STOP_REASONS, CHUNKS, ECHOES, AcpTurn, STDERR_TAIL_LINES4, MAX_BETWEEN_UPDATES2, AcpSession, DEFAULTS3, CLIENT_INFO2, TASK_BACKGROUNDED, TASK_COMPLETED, SESSION_NOTIFICATION, KILLED_STATUSES, SUCCESS_STATUSES, SUBAGENT_ID, grokTaskDialect, grokAcpProfile, kimiAcpProfile, ACP_PROFILES, ACP_MODES;
+var import_promises24, import_path9, import_crypto13, import_promises25, CURSOR_ASK_QUESTION, copilotAcpProfile, cursorAcpProfile, MODEL_REJECTED, MAX_READ_BYTES, FsDenied, ENV_REFERENCE, AcpBackgroundTasks, CURSOR_CREATE_PLAN, STATUSES, READ_KINDS, ALLOW_KINDS, REJECT_KINDS, CANCELLED_PERMISSION, STOP_REASONS, CHUNKS, ECHOES, AcpTurn, STDERR_TAIL_LINES4, MAX_BETWEEN_UPDATES2, AcpSession, DEFAULTS3, CLIENT_INFO2, TASK_BACKGROUNDED, TASK_COMPLETED, SESSION_NOTIFICATION, KILLED_STATUSES, SUCCESS_STATUSES, SUBAGENT_ID, grokTaskDialect, grokAcpProfile, kimiAcpProfile, ACP_PROFILES, ACP_MODES;
 var init_acp3 = __esm({
   "../agent-core/dist/providers/acp.js"() {
     "use strict";
-    init_chunk_72NSEYHK();
+    init_chunk_4G77APXN();
     init_chunk_XC5676SG();
-    init_chunk_54ZRJOQP();
+    init_chunk_HBIPWAUI();
     init_chunk_J2KTV5FP();
     init_chunk_M6YHY2EZ();
     init_chunk_FPGAN4XO();
     init_chunk_YXWJW7I5();
-    import_promises23 = require("fs/promises");
+    import_promises24 = require("fs/promises");
     import_path9 = require("path");
     init_effort();
     init_acp();
-    import_crypto12 = require("crypto");
-    import_promises24 = require("fs/promises");
+    import_crypto13 = require("crypto");
+    import_promises25 = require("fs/promises");
     init_agent2();
     CURSOR_ASK_QUESTION = "cursor/ask_question";
     copilotAcpProfile = {
@@ -39097,7 +39323,7 @@ var init_acp3 = __esm({
         const turn = new AcpTurn(`acp-${this.#turns}-${id}`, this.#profile);
         let finish = () => {
         };
-        const done = new Promise((resolve7) => {
+        const done = new Promise((resolve9) => {
           finish = (outcome2) => {
             if (this.#current?.id !== id) return;
             this.#current = void 0;
@@ -39105,7 +39331,7 @@ var init_acp3 = __esm({
             if (this.#state === "busy") this.#state = "idle";
             this.#host.scanDescendants(true);
             this.#emit({ type: "turn_ended", turnId: id, outcome: outcome2 });
-            resolve7({ turnId: id, outcome: outcome2, providerSessionId: this.#sessionId });
+            resolve9({ turnId: id, outcome: outcome2, providerSessionId: this.#sessionId });
           };
         });
         const active = { id, turn, done, finish, cancelRequested: false };
@@ -39386,7 +39612,7 @@ var init_acp3 = __esm({
 var init_classify = __esm({
   "../agent-core/dist/classify.js"() {
     "use strict";
-    init_chunk_54ZRJOQP();
+    init_chunk_HBIPWAUI();
     init_chunk_YXWJW7I5();
   }
 });
@@ -39596,7 +39822,10 @@ function createPersistentDriver(provider4, options) {
     return "delivered";
   };
   const openFailed = (error61, spec, sink, signal, inputs) => {
-    if (error61 instanceof SessionOpenRefusal && error61.reason === "unsupported_version" && options.fallback) {
+    if (error61 instanceof SessionOpenRefusal && error61.reason === "unsupported_version" && inputs.codex !== void 0) {
+      return { outcome: "failed", message: error61.message };
+    }
+    if (error61 instanceof SessionOpenRefusal && error61.reason === "unsupported_version" && options.fallback && inputs.codex === void 0) {
       log.warn("holder.persistent_unsupported", {
         harness: provider4.harness,
         message: error61.message
@@ -39613,7 +39842,7 @@ function createPersistentDriver(provider4, options) {
   };
   return {
     runTurn: async (spec, sink, signal, inputs) => {
-      if (live.fallbackOnly && options.fallback)
+      if (live.fallbackOnly && options.fallback && inputs.codex === void 0)
         return options.fallback.runTurn(spec, sink, signal, inputs);
       if (signal.aborted) return { outcome: "aborted" };
       const managedMcp = await managedMcpAccess(signal);
@@ -40103,7 +40332,7 @@ async function sameDirectory(left, right) {
 }
 async function canonicalDirectory(directory) {
   try {
-    return await (0, import_promises25.realpath)(directory);
+    return await (0, import_promises26.realpath)(directory);
   } catch {
     return (0, import_path10.resolve)(directory);
   }
@@ -40203,7 +40432,7 @@ function createOpenCodeDriver(options = {}) {
         await authorization?.remove();
       };
       const spec = { ...planned, env: launchEnv(planned, authorization) };
-      const password = options.password?.() ?? (0, import_crypto13.randomBytes)(24).toString("base64url");
+      const password = options.password?.() ?? (0, import_crypto14.randomBytes)(24).toString("base64url");
       try {
         const session = await openWithRetries(spec, password, resolved);
         void session.exited.then(removeAuthorization).catch((error61) => {
@@ -40218,7 +40447,7 @@ function createOpenCodeDriver(options = {}) {
   };
 }
 function envDigest4(env) {
-  const hash2 = (0, import_crypto14.createHash)("sha256");
+  const hash2 = (0, import_crypto15.createHash)("sha256");
   for (const key of Object.keys(env).sort()) hash2.update(`${key}\0${env[key]}\0`);
   return hash2.digest("hex");
 }
@@ -40299,28 +40528,28 @@ function openCodeTurnInput(run, context) {
     ...images.length ? { imagePaths: images.map((image) => image.path) } : {}
   };
 }
-var import_http4, import_crypto13, import_promises25, import_path10, import_path11, import_url2, import_crypto14, IDLE_SOCKET_MS2, OpenCodeHttpError, OpenCodeClient, OPENCODE_CONFIG_ENV, OPENCODE_ENGINE, TEXT_PARTS, STEP_PARTS, STOPPED_BY_USER, OpenCodeSubagents, NAMED_KINDS, OPENCODE_ABORTED_ERROR, PROVIDER_EVENT_META, TASK_TOOL_NAME, TASK_RESULT_TAG, TASK_ERROR_TAG, PERMISSION_DENIED, FILE_OPERATIONS, PartReader, NOTHING, NON_INTERACTIVE_PERMISSIONS, CONTENT_FILTER_FINISHES, OUTPUT_PARTS, OpenCodeTurn, LISTENING, OUTPUT_TAIL_LINES, IMAGE_TYPES, OpenCodeSession, OPENCODE_MIN_VERSION, OPENCODE_REQUIREMENT, OPENCODE_TESTED_LINE, OPENCODE_SUPPORTED_MAJOR, DEFAULTS4, STORE_LOCKED, NON_INTERACTIVE_RULES, TITLE_LENGTH, MAX_VARIANT_LENGTH;
+var import_http4, import_crypto14, import_promises26, import_path10, import_path11, import_url2, import_crypto15, IDLE_SOCKET_MS2, OpenCodeHttpError, OpenCodeClient, OPENCODE_CONFIG_ENV, OPENCODE_ENGINE, TEXT_PARTS, STEP_PARTS, STOPPED_BY_USER, OpenCodeSubagents, NAMED_KINDS, OPENCODE_ABORTED_ERROR, PROVIDER_EVENT_META, TASK_TOOL_NAME, TASK_RESULT_TAG, TASK_ERROR_TAG, PERMISSION_DENIED, FILE_OPERATIONS, PartReader, NOTHING, NON_INTERACTIVE_PERMISSIONS, CONTENT_FILTER_FINISHES, OUTPUT_PARTS, OpenCodeTurn, LISTENING, OUTPUT_TAIL_LINES, IMAGE_TYPES, OpenCodeSession, OPENCODE_MIN_VERSION, OPENCODE_REQUIREMENT, OPENCODE_TESTED_LINE, OPENCODE_SUPPORTED_MAJOR, DEFAULTS4, STORE_LOCKED, NON_INTERACTIVE_RULES, TITLE_LENGTH, MAX_VARIANT_LENGTH;
 var init_opencode = __esm({
   "../agent-core/dist/providers/opencode.js"() {
     "use strict";
-    init_chunk_72NSEYHK();
+    init_chunk_4G77APXN();
     init_chunk_XC5676SG();
-    init_chunk_54ZRJOQP();
+    init_chunk_HBIPWAUI();
     init_chunk_J2KTV5FP();
     init_chunk_M6YHY2EZ();
     init_chunk_FPGAN4XO();
     init_chunk_YXWJW7I5();
     import_http4 = require("http");
     init_runtime_v2();
-    import_crypto13 = require("crypto");
-    import_promises25 = require("fs/promises");
+    import_crypto14 = require("crypto");
+    import_promises26 = require("fs/promises");
     import_path10 = require("path");
     init_agent2();
     import_path11 = require("path");
     import_url2 = require("url");
     init_acp();
     init_acp();
-    import_crypto14 = require("crypto");
+    import_crypto15 = require("crypto");
     init_agent2();
     IDLE_SOCKET_MS2 = 4e3;
     OpenCodeHttpError = class extends Error {
@@ -41616,11 +41845,11 @@ function createCodexLogin(broker) {
     }
   };
 }
-function withLogin(planned, externalAuth, accountId) {
+function withLogin(planned, externalAuth, credentialKey) {
   return {
     ...planned,
     spec: { ...planned.spec, externalAuth },
-    key: JSON.stringify([planned.key, accountId])
+    key: JSON.stringify([planned.key, credentialKey])
   };
 }
 function createCodexHolderDriver(options) {
@@ -41642,7 +41871,11 @@ function createCodexHolderDriver(options) {
         });
         if (inputs.codex === void 0) return planned;
         login.forTurn(spec.runId, inputs.codex);
-        return withLogin(planned, login.externalAuth, inputs.codex.chatgptAccountId);
+        return withLogin(
+          planned,
+          login.externalAuth,
+          inputs.codex.credentialId ?? inputs.codex.chatgptAccountId
+        );
       },
       canResume: () => true,
       open: async (spec) => {
@@ -41774,8 +42007,8 @@ function createDroidPeer(writer, handlers) {
     },
     request: (method, params = {}) => {
       const id = `alan-${counter.next++}`;
-      return new Promise((resolve7, reject) => {
-        pending.set(id, { method, resolve: resolve7, reject });
+      return new Promise((resolve9, reject) => {
+        pending.set(id, { method, resolve: resolve9, reject });
         writer.write(envelope("request", { id, method, params })).catch((error61) => {
           pending.delete(id);
           reject(error61 instanceof Error ? error61 : new Error(String(error61)));
@@ -42055,7 +42288,7 @@ function createDroidDriver(options = {}) {
   };
 }
 function envDigest5(env) {
-  const hash2 = (0, import_crypto15.createHash)("sha256");
+  const hash2 = (0, import_crypto16.createHash)("sha256");
   for (const key of Object.keys(env).sort()) hash2.update(`${key}\0${env[key]}\0`);
   return hash2.digest("hex");
 }
@@ -42110,25 +42343,25 @@ async function droidTurnInput(run, context) {
   const encoded = await Promise.all(
     images.map(async (image) => ({
       mimeType: image.mimeType,
-      data: (await (0, import_promises26.readFile)(image.path)).toString("base64")
+      data: (await (0, import_promises27.readFile)(image.path)).toString("base64")
     }))
   );
   return { turnId: run.runId, text: text2, ...encoded.length ? { images: encoded } : {} };
 }
-var import_crypto15, import_promises26, FACTORY_API_VERSION, FACTORY_PROTOCOL_VERSION, SUBAGENT_TOOLS, TASK_OUTPUT_TOOLS, TASK_STOP_TOOLS, SILENT2, DroidTurn, STDERR_TAIL_LINES5, UNSUPPORTED_REQUEST2, DroidSession, DEFAULTS5, DROID_REQUIREMENT, DROID_JSONRPC_ARGS;
+var import_crypto16, import_promises27, FACTORY_API_VERSION, FACTORY_PROTOCOL_VERSION, SUBAGENT_TOOLS, TASK_OUTPUT_TOOLS, TASK_STOP_TOOLS, SILENT2, DroidTurn, STDERR_TAIL_LINES5, UNSUPPORTED_REQUEST2, DroidSession, DEFAULTS5, DROID_REQUIREMENT, DROID_JSONRPC_ARGS;
 var init_droid = __esm({
   "../agent-core/dist/providers/droid.js"() {
     "use strict";
-    init_chunk_72NSEYHK();
+    init_chunk_4G77APXN();
     init_chunk_XC5676SG();
-    init_chunk_54ZRJOQP();
+    init_chunk_HBIPWAUI();
     init_chunk_J2KTV5FP();
     init_chunk_M6YHY2EZ();
     init_chunk_FPGAN4XO();
     init_chunk_YXWJW7I5();
     init_runtime_v2();
-    import_crypto15 = require("crypto");
-    import_promises26 = require("fs/promises");
+    import_crypto16 = require("crypto");
+    import_promises27 = require("fs/promises");
     init_agent2();
     FACTORY_API_VERSION = "1.0.0";
     FACTORY_PROTOCOL_VERSION = "1.187.0";
@@ -42400,14 +42633,14 @@ var init_droid = __esm({
         const turn = new DroidTurn(sessionId, this.#memory);
         let finish = () => {
         };
-        const done = new Promise((resolve7) => {
+        const done = new Promise((resolve9) => {
           finish = (outcome2) => {
             if (this.#current?.id !== id) return;
             this.#current = void 0;
             if (this.#state === "busy") this.#state = "idle";
             this.#host.scanDescendants(true);
             this.#emit({ type: "turn_ended", turnId: id, outcome: outcome2 });
-            resolve7({ turnId: id, outcome: outcome2, providerSessionId: this.#sessionId });
+            resolve9({ turnId: id, outcome: outcome2, providerSessionId: this.#sessionId });
           };
         });
         const active = { id, turn, done, finish, cancelRequested: false };
@@ -42603,7 +42836,7 @@ function settingsPath(env) {
 async function readSettings(path) {
   let raw;
   try {
-    raw = (await (0, import_promises27.readFile)(path, "utf8")).trim();
+    raw = (await (0, import_promises28.readFile)(path, "utf8")).trim();
   } catch {
     return {};
   }
@@ -42621,8 +42854,8 @@ async function selectAntigravityApiKeyMode(env) {
   const settings2 = await readSettings(path);
   if (settings2 === "malformed") return "malformed";
   if (settings2.modelProvider === "gemini") return "already_selected";
-  await (0, import_promises27.mkdir)((0, import_path12.dirname)(path), { recursive: true });
-  await (0, import_promises27.writeFile)(path, JSON.stringify({ ...settings2, modelProvider: "gemini" }), { mode: 384 });
+  await (0, import_promises28.mkdir)((0, import_path12.dirname)(path), { recursive: true });
+  await (0, import_promises28.writeFile)(path, JSON.stringify({ ...settings2, modelProvider: "gemini" }), { mode: 384 });
   return "selected";
 }
 function readAntigravityCapabilities(version2, help) {
@@ -43175,7 +43408,7 @@ ${output2.stderr}`).join("\n")
   };
 }
 function envDigest6(env) {
-  const hash2 = (0, import_crypto16.createHash)("sha256");
+  const hash2 = (0, import_crypto17.createHash)("sha256");
   for (const key of Object.keys(env).sort()) hash2.update(`${key}\0${env[key]}\0`);
   return hash2.digest("hex");
 }
@@ -43221,18 +43454,18 @@ function antigravityTurnInput(run, context) {
   });
   return { turnId: run.runId, text: appendImagePathReferences(text2, images) };
 }
-var import_promises27, import_path12, import_fs8, import_path13, import_path14, import_url3, import_crypto16, NO_ANTIGRAVITY_CAPABILITIES, INSTRUCTIONS_FILE, MAX_INSTRUCTION_CHARS, SHORTENED_NOTE, DIFF_BLOCK_START, DIFF_BLOCK_END, HUNK_HEADER, TRANSCRIPT_FILE, FULL_TRANSCRIPT_FILE, LOG_DIRS, TOOL_RESULT_TYPES, BrainTranscript, AntigravityTranscripts, ANTIGRAVITY_GRAMMAR_NAME, AntigravityGrammar, ignored, HANDLERS, SUCCESSFUL_STATUSES, SESSION_START_TYPES, RESULT_TYPES, SUBAGENT_START_TYPES, RESUME_FORKED, EXITED_WITHOUT_RESULT, AntigravityTurn, DEFAULTS6, AntigravitySession, WINDOWS_LINE_MARGIN;
+var import_promises28, import_path12, import_fs8, import_path13, import_path14, import_url3, import_crypto17, NO_ANTIGRAVITY_CAPABILITIES, INSTRUCTIONS_FILE, MAX_INSTRUCTION_CHARS, SHORTENED_NOTE, DIFF_BLOCK_START, DIFF_BLOCK_END, HUNK_HEADER, TRANSCRIPT_FILE, FULL_TRANSCRIPT_FILE, LOG_DIRS, TOOL_RESULT_TYPES, BrainTranscript, AntigravityTranscripts, ANTIGRAVITY_GRAMMAR_NAME, AntigravityGrammar, ignored, HANDLERS, SUCCESSFUL_STATUSES, SESSION_START_TYPES, RESULT_TYPES, SUBAGENT_START_TYPES, RESUME_FORKED, EXITED_WITHOUT_RESULT, AntigravityTurn, DEFAULTS6, AntigravitySession, WINDOWS_LINE_MARGIN;
 var init_antigravity = __esm({
   "../agent-core/dist/providers/antigravity.js"() {
     "use strict";
     init_chunk_SBT5W7L4();
-    init_chunk_72NSEYHK();
+    init_chunk_4G77APXN();
     init_chunk_XC5676SG();
-    init_chunk_54ZRJOQP();
+    init_chunk_HBIPWAUI();
     init_chunk_M6YHY2EZ();
     init_chunk_FPGAN4XO();
     init_chunk_YXWJW7I5();
-    import_promises27 = require("fs/promises");
+    import_promises28 = require("fs/promises");
     import_path12 = require("path");
     init_type_guards();
     import_fs8 = require("fs");
@@ -43240,7 +43473,7 @@ var init_antigravity = __esm({
     init_effort();
     import_path14 = require("path");
     import_url3 = require("url");
-    import_crypto16 = require("crypto");
+    import_crypto17 = require("crypto");
     init_agent2();
     NO_ANTIGRAVITY_CAPABILITIES = {
       structuredPrint: false,
@@ -43732,7 +43965,7 @@ function parseConfig(raw) {
 }
 async function writeCommandCodeProjectMcp(cwd, mcp) {
   const path = (0, import_path15.join)(cwd, ".mcp.json");
-  const original = await (0, import_promises28.readFile)(path, "utf8").catch(() => null);
+  const original = await (0, import_promises29.readFile)(path, "utf8").catch(() => null);
   const config2 = parseConfig(original);
   const next = {
     ...config2,
@@ -43749,12 +43982,12 @@ async function writeCommandCodeProjectMcp(cwd, mcp) {
       }
     }
   };
-  await (0, import_promises28.mkdir)(cwd, { recursive: true });
-  await (0, import_promises28.writeFile)(path, `${JSON.stringify(next, null, 2)}
+  await (0, import_promises29.mkdir)(cwd, { recursive: true });
+  await (0, import_promises29.writeFile)(path, `${JSON.stringify(next, null, 2)}
 `);
   return async () => {
-    if (original === null) await (0, import_promises28.rm)(path, { force: true });
-    else await (0, import_promises28.writeFile)(path, original);
+    if (original === null) await (0, import_promises29.rm)(path, { force: true });
+    else await (0, import_promises29.writeFile)(path, original);
   };
 }
 function commandCodeString(value) {
@@ -43874,7 +44107,7 @@ function createCommandCodeDriver(options = {}) {
   };
 }
 function envDigest7(env) {
-  const hash2 = (0, import_crypto17.createHash)("sha256");
+  const hash2 = (0, import_crypto18.createHash)("sha256");
   for (const key of Object.keys(env).sort()) hash2.update(`${key}\0${env[key]}\0`);
   return hash2.digest("hex");
 }
@@ -43926,23 +44159,23 @@ function commandCodeTurnInput(run, context) {
   });
   return { turnId: run.runId, text: appendImagePathReferences(text2, images) };
 }
-var import_promises28, import_path15, import_crypto17, COMMAND_CODE_GRAMMAR_NAME, SILENT3, CommandCodeGrammar, SHELL_TOOL, STOP_TOOLS, REPORTED_STATUS, SHELL_STATUS, SWEEP_INTERVAL_MS, CommandCodeBackgroundTasks, EXITED_WITHOUT_RESULT2, CommandCodeTurn, COMMAND_CODE_MAX_TURNS, DEFAULTS7, CommandCodeSession;
+var import_promises29, import_path15, import_crypto18, COMMAND_CODE_GRAMMAR_NAME, SILENT3, CommandCodeGrammar, SHELL_TOOL, STOP_TOOLS, REPORTED_STATUS, SHELL_STATUS, SWEEP_INTERVAL_MS, CommandCodeBackgroundTasks, EXITED_WITHOUT_RESULT2, CommandCodeTurn, COMMAND_CODE_MAX_TURNS, DEFAULTS7, CommandCodeSession;
 var init_command_code = __esm({
   "../agent-core/dist/providers/command-code.js"() {
     "use strict";
-    init_chunk_72NSEYHK();
+    init_chunk_4G77APXN();
     init_chunk_XC5676SG();
-    init_chunk_54ZRJOQP();
+    init_chunk_HBIPWAUI();
     init_chunk_J2KTV5FP();
     init_chunk_M6YHY2EZ();
     init_chunk_FPGAN4XO();
     init_chunk_YXWJW7I5();
-    import_promises28 = require("fs/promises");
+    import_promises29 = require("fs/promises");
     import_path15 = require("path");
     init_agent2();
     init_runtime_v2();
     init_acp();
-    import_crypto17 = require("crypto");
+    import_crypto18 = require("crypto");
     init_agent2();
     COMMAND_CODE_GRAMMAR_NAME = "command_code_cli";
     SILENT3 = /* @__PURE__ */ new Set([
@@ -44799,7 +45032,7 @@ function transportFailure(request2, error61) {
   });
 }
 function readBody(incoming, url2, maxBytes) {
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve9, reject) => {
     const declared = Number(incoming.headers["content-length"] ?? "0");
     if (maxBytes !== void 0 && declared > maxBytes) {
       incoming.destroy();
@@ -44818,7 +45051,7 @@ function readBody(incoming, url2, maxBytes) {
       chunks.push(chunk);
     });
     incoming.on("error", reject);
-    incoming.on("end", () => resolve7(Buffer.concat(chunks)));
+    incoming.on("end", () => resolve9(Buffer.concat(chunks)));
   });
 }
 function isConnectionReset(error61) {
@@ -44826,7 +45059,7 @@ function isConnectionReset(error61) {
 }
 function exchange(request2, agents, attempt = 0) {
   const { signal, url: url2 } = request2;
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve9, reject) => {
     if (signal.aborted) {
       reject(signal.reason);
       return;
@@ -44853,7 +45086,7 @@ function exchange(request2, agents, attempt = 0) {
       const stale = outgoing.reusedSocket && !responded && isConnectionReset(error61);
       if (stale && attempt < STALE_SOCKET_RETRIES && !signal.aborted) {
         settle();
-        resolve7(exchange(request2, agents, attempt + 1));
+        resolve9(exchange(request2, agents, attempt + 1));
         return;
       }
       fail(error61);
@@ -44866,7 +45099,7 @@ function exchange(request2, agents, attempt = 0) {
       readBody(incoming, url2, isRedirect(status) ? void 0 : request2.maxBodyBytes).then(
         (body) => {
           settle();
-          resolve7({ status, headers: incoming.headers, body });
+          resolve9({ status, headers: incoming.headers, body });
         },
         fail
       );
@@ -44933,7 +45166,18 @@ function createHttpTransport() {
 
 // src/api-client/holder-client.ts
 init_runtime_v2();
+init_zod();
 var REQUEST_TIMEOUT_MS = 3e4;
+var credentialRefusalSchema = external_exports.object({ message: external_exports.string().trim().min(1) });
+function credentialFailureMessage(response, fallback) {
+  if (response.status !== 409) return fallback;
+  try {
+    const parsed = credentialRefusalSchema.safeParse(jsonBody(response));
+    return parsed.success ? parsed.data.message : fallback;
+  } catch {
+    return fallback;
+  }
+}
 function createHolderApiClient({
   apiUrl,
   accessToken,
@@ -44966,7 +45210,10 @@ function createHolderApiClient({
       if (!isOk(response)) {
         throw new RuntimeFault(
           "io_failed",
-          `Provider credential request failed: ${response.status}`
+          credentialFailureMessage(
+            response,
+            `Provider credential request failed: ${response.status}`
+          )
         );
       }
       return runProviderCredentialSchema.parse(jsonBody(response));
@@ -44974,7 +45221,10 @@ function createHolderApiClient({
     refreshCodexCredential: async (runId, body, signal) => {
       const response = await request2("POST", runCodexCredentialRefreshPath(runId), signal, body);
       if (!isOk(response)) {
-        throw new RuntimeFault("io_failed", `Codex sign-in refresh failed: ${response.status}`);
+        throw new RuntimeFault(
+          "io_failed",
+          credentialFailureMessage(response, `Codex sign-in refresh failed: ${response.status}`)
+        );
       }
       return runCodexCredentialSchema.parse(jsonBody(response));
     },
@@ -45019,6 +45269,19 @@ var GitFault = class extends Error {
   }
 };
 
+// src/capabilities/git/repository.ts
+var import_promises4 = require("fs/promises");
+var import_node_path3 = require("path");
+async function assertValidBranch(git, repoRoot, branch, signal) {
+  const output2 = await git.run(
+    { cwd: repoRoot, args: ["check-ref-format", "--branch", branch], readOnly: true },
+    signal
+  );
+  if (branch.startsWith("-") || output2.exitCode !== 0) {
+    throw new GitFault("invalid_git_request", "branch is not a valid Git ref");
+  }
+}
+
 // src/capabilities/git/run-git.ts
 var import_node_child_process = require("child_process");
 
@@ -45155,7 +45418,7 @@ function createGitRunner(options) {
       }
       await killProcessTree(child.pid, { signal: "SIGKILL", child, platform });
     };
-    return new Promise((resolve7, reject) => {
+    return new Promise((resolve9, reject) => {
       let ending = null;
       const stop = (next) => {
         if (ending !== null) return;
@@ -45180,7 +45443,7 @@ function createGitRunner(options) {
         signal.removeEventListener("abort", onAbort);
         const final = ending ?? last;
         if (final.kind === "exited") {
-          resolve7({ exitCode: final.exitCode, stdout: stdout.text(), stderr: stderr.text() });
+          resolve9({ exitCode: final.exitCode, stdout: stdout.text(), stderr: stderr.text() });
         } else {
           reject(faultFor(final, command));
         }
@@ -45204,8 +45467,8 @@ function createGitRunner(options) {
 
 // src/capabilities/git/checkout-freshness.ts
 var import_node_crypto3 = require("crypto");
-var import_promises7 = require("fs/promises");
-var import_node_path3 = require("path");
+var import_promises8 = require("fs/promises");
+var import_node_path4 = require("path");
 init_zod();
 var REMOTE = "origin";
 var snapshotSchema = external_exports.object({
@@ -45235,7 +45498,7 @@ var freshnessSchema = external_exports.discriminatedUnion("state", [
   })
 ]);
 function freshnessFile(dir, path) {
-  return (0, import_node_path3.join)(dir, `${(0, import_node_crypto3.createHash)("sha256").update(path).digest("hex").slice(0, 32)}.json`);
+  return (0, import_node_path4.join)(dir, `${(0, import_node_crypto3.createHash)("sha256").update(path).digest("hex").slice(0, 32)}.json`);
 }
 function parseStatus(stdout) {
   const lines = stdout.split("\n").filter((line) => line.length > 0);
@@ -45267,32 +45530,35 @@ async function readCheckoutStatus(git, cwd, signal) {
   return output2.exitCode === 0 ? parseStatus(output2.stdout) : null;
 }
 async function isCheckout(path) {
-  return (0, import_promises7.stat)((0, import_node_path3.join)(path, ".git")).then(
+  return (0, import_promises8.stat)((0, import_node_path4.join)(path, ".git")).then(
     () => true,
     () => false
   );
 }
 async function checkoutsUnder(root) {
   if (await isCheckout(root)) return [root];
-  const entries = await (0, import_promises7.readdir)(root, { withFileTypes: true }).catch(() => []);
+  const entries = await (0, import_promises8.readdir)(root, { withFileTypes: true }).catch(() => []);
   const found = await Promise.all(
     entries.filter((entry) => entry.isDirectory()).map(
-      async (entry) => await isCheckout((0, import_node_path3.join)(root, entry.name)) ? (0, import_node_path3.join)(root, entry.name) : null
+      async (entry) => await isCheckout((0, import_node_path4.join)(root, entry.name)) ? (0, import_node_path4.join)(root, entry.name) : null
     )
   );
   return found.filter((path) => path !== null);
 }
+async function recordCheckoutKept(dir, path, reason) {
+  await writeJsonFileAtomic(freshnessFile(dir, path), { state: "kept", path, reason });
+}
 async function readCheckoutFreshness(dir, path) {
-  for (let current = path; ; current = (0, import_node_path3.dirname)(current)) {
+  for (let current = path; ; current = (0, import_node_path4.dirname)(current)) {
     const read = await readJsonFile(freshnessFile(dir, current), freshnessSchema);
     if (read.kind === "ok") return read.value;
-    if ((0, import_node_path3.dirname)(current) === current) return null;
+    if ((0, import_node_path4.dirname)(current) === current) return null;
   }
 }
 
 // src/platform/credential-store/credential-store.ts
 var import_node_crypto4 = require("crypto");
-var import_promises8 = require("fs/promises");
+var import_promises9 = require("fs/promises");
 
 // src/platform/credential-store/parse.ts
 function parseStoredJson(text2, schema) {
@@ -45308,16 +45574,16 @@ function parseStoredJson(text2, schema) {
 
 // src/platform/windows-helper.ts
 var import_node_fs3 = require("fs");
-var import_node_path4 = require("path");
+var import_node_path5 = require("path");
 var import_node_url = require("url");
 var import_meta = {};
 function windowsHelperPath(entry = process.argv[1]) {
-  const packaged = entry === void 0 ? null : (0, import_node_path4.join)((0, import_node_path4.dirname)((0, import_node_path4.resolve)(entry)), "alan-winhelper.exe");
+  const packaged = entry === void 0 ? null : (0, import_node_path5.join)((0, import_node_path5.dirname)((0, import_node_path5.resolve)(entry)), "alan-winhelper.exe");
   if (entry !== void 0) {
     if (packaged !== null && (0, import_node_fs3.existsSync)(packaged)) return packaged;
   }
   try {
-    const local = (0, import_node_path4.resolve)((0, import_node_path4.dirname)((0, import_node_url.fileURLToPath)(import_meta.url)), "../../dist/alan-winhelper.exe");
+    const local = (0, import_node_path5.resolve)((0, import_node_path5.dirname)((0, import_node_url.fileURLToPath)(import_meta.url)), "../../dist/alan-winhelper.exe");
     return (0, import_node_fs3.existsSync)(local) ? local : packaged;
   } catch {
     return packaged;
@@ -45385,7 +45651,7 @@ function createFileCredentialStore(path) {
     kind: "file",
     read: (schema) => readJsonFile(path, schema),
     write: (value) => writeJsonFileAtomic(path, value),
-    clear: () => (0, import_promises8.rm)(path, { force: true })
+    clear: () => (0, import_promises9.rm)(path, { force: true })
   };
 }
 var KEYCHAIN_SERVICE = "ai.tryalan.runtime";
@@ -45480,14 +45746,14 @@ function defaultCredentialStoreKind(platform) {
 var import_node_child_process3 = require("child_process");
 var import_node_crypto5 = require("crypto");
 var import_node_fs4 = require("fs");
-var import_promises10 = require("fs/promises");
-var import_node_path5 = require("path");
+var import_promises11 = require("fs/promises");
+var import_node_path6 = require("path");
 var import_node_util2 = require("util");
 init_zod();
 
 // src/platform/process-identity.ts
 var import_node_child_process2 = require("child_process");
-var import_promises9 = require("fs/promises");
+var import_promises10 = require("fs/promises");
 var import_node_util = require("util");
 var execFileAsync = (0, import_node_util.promisify)(import_node_child_process2.execFile);
 function isProcessAlive(pid) {
@@ -45499,13 +45765,13 @@ function isProcessAlive(pid) {
   }
 }
 async function linuxStartTime(pid) {
-  const stat15 = await (0, import_promises9.readFile)(`/proc/${pid}/stat`, "utf8").catch(() => null);
-  if (stat15 === null) return null;
-  const fields = stat15.slice(stat15.lastIndexOf(")") + 2).split(" ");
+  const stat16 = await (0, import_promises10.readFile)(`/proc/${pid}/stat`, "utf8").catch(() => null);
+  if (stat16 === null) return null;
+  const fields = stat16.slice(stat16.lastIndexOf(")") + 2).split(" ");
   return fields[19] ?? null;
 }
 async function linuxCommand(pid) {
-  const raw = await (0, import_promises9.readFile)(`/proc/${pid}/cmdline`, "utf8").catch(() => null);
+  const raw = await (0, import_promises10.readFile)(`/proc/${pid}/cmdline`, "utf8").catch(() => null);
   return raw === null ? null : normalizeCommand(raw.replaceAll("\0", " "));
 }
 async function darwinCommand(pid) {
@@ -45599,11 +45865,11 @@ async function mayBeSameProcess(expected, probe = systemProcessProbe) {
 var execFileAsync2 = (0, import_node_util2.promisify)(import_node_child_process3.execFile);
 var packageJsonSchema = external_exports.object({ version: external_exports.string().min(1) });
 function markVersionInUse(bundlePath) {
-  const versionDir = (0, import_node_path5.dirname)(bundlePath);
-  if ((0, import_node_path5.basename)((0, import_node_path5.dirname)(versionDir)) !== "versions") return { [Symbol.dispose]: () => {
+  const versionDir = (0, import_node_path6.dirname)(bundlePath);
+  if ((0, import_node_path6.basename)((0, import_node_path6.dirname)(versionDir)) !== "versions") return { [Symbol.dispose]: () => {
   } };
-  const marker = (0, import_node_path5.join)(versionDir, ".running", String(process.pid));
-  (0, import_node_fs4.mkdirSync)((0, import_node_path5.dirname)(marker), { recursive: true, mode: 448 });
+  const marker = (0, import_node_path6.join)(versionDir, ".running", String(process.pid));
+  (0, import_node_fs4.mkdirSync)((0, import_node_path6.dirname)(marker), { recursive: true, mode: 448 });
   (0, import_node_fs4.writeFileSync)(marker, "");
   const remove = () => (0, import_node_fs4.rmSync)(marker, { force: true });
   process.once("exit", remove);
@@ -45619,36 +45885,36 @@ function markVersionInUse(bundlePath) {
 var import_node_crypto6 = require("crypto");
 var import_node_fs5 = require("fs");
 var import_node_os = require("os");
-var import_node_path6 = require("path");
+var import_node_path7 = require("path");
 function removeStaleEndpoint(endpoint) {
   if (!endpoint.startsWith("\\\\.\\pipe\\")) (0, import_node_fs5.rmSync)(endpoint, { force: true });
 }
 
 // src/platform/paths.ts
-var import_node_path7 = require("path");
+var import_node_path8 = require("path");
 function runtimePaths(stateDir) {
   return {
     stateDir,
-    lock: (0, import_node_path7.join)(stateDir, "runtime.lock"),
-    machine: (0, import_node_path7.join)(stateDir, "machine.json"),
-    credential: (0, import_node_path7.join)(stateDir, "credential.json"),
-    runs: (0, import_node_path7.join)(stateDir, "runs"),
-    sessions: (0, import_node_path7.join)(stateDir, "sessions"),
-    sockets: (0, import_node_path7.join)(stateDir, "s"),
-    logs: (0, import_node_path7.join)(stateDir, "logs"),
-    tmp: (0, import_node_path7.join)(stateDir, "tmp")
+    lock: (0, import_node_path8.join)(stateDir, "runtime.lock"),
+    machine: (0, import_node_path8.join)(stateDir, "machine.json"),
+    credential: (0, import_node_path8.join)(stateDir, "credential.json"),
+    runs: (0, import_node_path8.join)(stateDir, "runs"),
+    sessions: (0, import_node_path8.join)(stateDir, "sessions"),
+    sockets: (0, import_node_path8.join)(stateDir, "s"),
+    logs: (0, import_node_path8.join)(stateDir, "logs"),
+    tmp: (0, import_node_path8.join)(stateDir, "tmp")
   };
 }
 
 // src/platform/process-memory.ts
 var import_node_child_process4 = require("child_process");
-var import_promises11 = require("fs/promises");
+var import_promises12 = require("fs/promises");
 var import_node_util3 = require("util");
 var execFileAsync3 = (0, import_node_util3.promisify)(import_node_child_process4.execFile);
 var PROBE_TIMEOUT_MS = 2e3;
 async function readProcessRss(pid) {
   if (process.platform === "linux") {
-    const status = await (0, import_promises11.readFile)(`/proc/${pid}/status`, "utf8").catch(() => null);
+    const status = await (0, import_promises12.readFile)(`/proc/${pid}/status`, "utf8").catch(() => null);
     const kilobytes = status === null ? void 0 : /^VmRSS:\s+(\d+)\s+kB$/m.exec(status)?.[1];
     return kilobytes === void 0 ? null : Number(kilobytes) * 1024;
   }
@@ -45665,7 +45931,7 @@ async function readProcessRss(pid) {
 }
 
 // src/platform/runtime-host.ts
-var import_promises12 = require("fs/promises");
+var import_promises13 = require("fs/promises");
 var RUNTIME_HOST_KINDS = ["app", "standalone"];
 
 // src/platform/service/exec.ts
@@ -45680,7 +45946,7 @@ function statusOf(error61) {
   }
   return 1;
 }
-var systemExec = (request2) => new Promise((resolve7) => {
+var systemExec = (request2) => new Promise((resolve9) => {
   const child = (0, import_node_child_process5.execFile)(
     request2.command,
     [...request2.args],
@@ -45691,7 +45957,7 @@ var systemExec = (request2) => new Promise((resolve7) => {
       windowsHide: true
     },
     (error61, stdout, stderr) => {
-      resolve7({ status: statusOf(error61), stdout, stderr });
+      resolve9({ status: statusOf(error61), stdout, stderr });
     }
   );
   child.stdin?.on("error", () => {
@@ -45704,8 +45970,8 @@ init_alan_code();
 
 // src/capabilities/providers/commands.ts
 var import_node_fs6 = require("fs");
-var import_promises16 = require("fs/promises");
-var import_node_path8 = require("path");
+var import_promises17 = require("fs/promises");
+var import_node_path9 = require("path");
 var PROVIDER_COMMANDS = [
   // The engine, not a CLI of its own: `resolveProviderExecutable` finds the bundled one first.
   { backendKind: "alan_code", command: "opencode", name: "Alan Code" },
@@ -45740,8 +46006,8 @@ function pathDelimiter(platform) {
 }
 async function isRunnable(path, platform) {
   try {
-    if (!(await (0, import_promises16.stat)(path)).isFile()) return false;
-    if (platform !== "win32") await (0, import_promises16.access)(path, import_node_fs6.constants.X_OK);
+    if (!(await (0, import_promises17.stat)(path)).isFile()) return false;
+    if (platform !== "win32") await (0, import_promises17.access)(path, import_node_fs6.constants.X_OK);
     return true;
   } catch {
     return false;
@@ -45758,12 +46024,12 @@ async function resolveCommandOnPath(command, env, platform) {
   const directories = envValue(env, "PATH").split(pathDelimiter(platform)).map(
     (directory) => platform === "win32" ? directory.trim().replace(/^"(.*)"$/, "$1") : directory
   ).filter(
-    (directory) => platform === "win32" ? import_node_path8.win32.isAbsolute(directory) : directory.length > 0
+    (directory) => platform === "win32" ? import_node_path9.win32.isAbsolute(directory) : directory.length > 0
   );
   const extensions = platform === "win32" ? windowsExtensions(command, env) : [""];
   for (const directory of directories) {
     for (const extension of extensions) {
-      const candidate = (0, import_node_path8.join)(directory, `${command}${extension}`);
+      const candidate = (0, import_node_path9.join)(directory, `${command}${extension}`);
       if (await isRunnable(candidate, platform)) return candidate;
     }
   }
@@ -45798,14 +46064,14 @@ function resolveProviderExecutable(provider4, env, platform) {
 
 // src/capabilities/providers/managed.ts
 var import_node_crypto7 = require("crypto");
-var import_promises17 = require("fs/promises");
-var import_node_path9 = require("path");
+var import_promises18 = require("fs/promises");
+var import_node_path10 = require("path");
 init_zod();
 var VERSION = /^[0-9]+\.[0-9]+\.[0-9]+(?:[-+][0-9A-Za-z.-]+)?$/;
 var selectedSchema = external_exports.record(external_exports.string(), external_exports.string());
 async function readManagedProviderVersion(file2, backendKind) {
   try {
-    const selected = selectedSchema.parse(JSON.parse(await (0, import_promises17.readFile)(file2, "utf8")));
+    const selected = selectedSchema.parse(JSON.parse(await (0, import_promises18.readFile)(file2, "utf8")));
     const version2 = selected[backendKind];
     return version2 !== void 0 && VERSION.test(version2) ? version2 : null;
   } catch {
@@ -45816,8 +46082,8 @@ async function readManagedProviderVersion(file2, backendKind) {
 // ../shared/dist/node/skill-package.js
 var import_node_buffer = require("buffer");
 var import_node_crypto8 = require("crypto");
-var import_promises18 = require("fs/promises");
-var import_node_path10 = require("path");
+var import_promises19 = require("fs/promises");
+var import_node_path11 = require("path");
 var import_yaml = __toESM(require_dist(), 1);
 init_contracts();
 init_domain();
@@ -45888,7 +46154,7 @@ async function inspectSkillPackage(packageRoot, options = {}) {
   }
   const inspectedFiles = await Promise.all(files.map(readPackageFile));
   inspectedFiles.sort(comparePackageFiles);
-  const parsedMetadata = parseSkillMetadata(inspectedFiles.find((file2) => file2.manifest.path === "SKILL.md")?.bytes, options.expectedName === void 0 ? (0, import_node_path10.basename)(root) : options.expectedName);
+  const parsedMetadata = parseSkillMetadata(inspectedFiles.find((file2) => file2.manifest.path === "SKILL.md")?.bytes, options.expectedName === void 0 ? (0, import_node_path11.basename)(root) : options.expectedName);
   const manifestFiles = inspectedFiles.map((file2) => file2.manifest);
   const diagnostics = [
     ...parsedMetadata.conformance,
@@ -45906,11 +46172,11 @@ async function inspectSkillPackage(packageRoot, options = {}) {
   };
 }
 async function requirePackageRoot(packageRoot) {
-  const root = await (0, import_promises18.realpath)((0, import_node_path10.resolve)(packageRoot)).catch(() => null);
+  const root = await (0, import_promises19.realpath)((0, import_node_path11.resolve)(packageRoot)).catch(() => null);
   if (!root) {
     throw new SkillPackageError("INVALID_PACKAGE_ROOT", "Skill package directory does not exist");
   }
-  const rootStat = await (0, import_promises18.lstat)(root);
+  const rootStat = await (0, import_promises19.lstat)(root);
   if (!rootStat.isDirectory()) {
     throw new SkillPackageError("INVALID_PACKAGE_ROOT", "Skill package root must be a directory");
   }
@@ -45930,13 +46196,13 @@ async function walkPackage(root, ignoredPaths) {
   }
   return files;
   async function walkDirectory(directory) {
-    const entries = await (0, import_promises18.readdir)(directory, { withFileTypes: true });
+    const entries = await (0, import_promises19.readdir)(directory, { withFileTypes: true });
     for (const entry of entries) {
-      const absolutePath = (0, import_node_path10.resolve)(directory, entry.name);
+      const absolutePath = (0, import_node_path11.resolve)(directory, entry.name);
       const normalizedPath = normalizeRelativePath(root, absolutePath);
       if (isIgnored(normalizedPath, entry.name, entry.isDirectory(), ignored2))
         continue;
-      const entryStat = await (0, import_promises18.lstat)(absolutePath);
+      const entryStat = await (0, import_promises19.lstat)(absolutePath);
       if (entryStat.isSymbolicLink()) {
         throw new SkillPackageError("SYMLINK_BLOCKED", `Nested symbolic links are not allowed in Skill packages: ${normalizedPath}`, normalizedPath);
       }
@@ -45999,12 +46265,12 @@ function globToRegExp(pattern) {
   return new RegExp(`${source}(?:/.*)?$`);
 }
 function normalizeRelativePath(root, absolutePath) {
-  const nativeRelativePath = (0, import_node_path10.relative)(root, absolutePath);
-  if (!nativeRelativePath || nativeRelativePath.startsWith(`..${import_node_path10.sep}`) || nativeRelativePath === "..") {
+  const nativeRelativePath = (0, import_node_path11.relative)(root, absolutePath);
+  if (!nativeRelativePath || nativeRelativePath.startsWith(`..${import_node_path11.sep}`) || nativeRelativePath === "..") {
     throw new SkillPackageError("INVALID_PATH", "Skill package path escapes its root");
   }
-  const normalized2 = nativeRelativePath.split(import_node_path10.sep).join("/").normalize("NFC");
-  if (normalized2.includes("\0") || normalized2.includes("\uFFFD") || import_node_path10.posix.isAbsolute(normalized2)) {
+  const normalized2 = nativeRelativePath.split(import_node_path11.sep).join("/").normalize("NFC");
+  if (normalized2.includes("\0") || normalized2.includes("\uFFFD") || import_node_path11.posix.isAbsolute(normalized2)) {
     throw new SkillPackageError("INVALID_PATH", `Invalid Skill package path: ${normalized2}`);
   }
   return normalized2;
@@ -46039,13 +46305,13 @@ function requireSafeFile(path, size, normalizedPaths) {
   }
 }
 function isSecretPath(path) {
-  const name = import_node_path10.posix.basename(path).toLowerCase();
+  const name = import_node_path11.posix.basename(path).toLowerCase();
   if (SECRET_BASENAMES.has(name) || name.startsWith(".env."))
     return true;
   return name.endsWith(".private-key.pem") || name.endsWith(".private-key.key");
 }
 async function readPackageFile(file2) {
-  const bytes = await (0, import_promises18.readFile)(file2.absolutePath);
+  const bytes = await (0, import_promises19.readFile)(file2.absolutePath);
   return {
     bytes,
     manifest: {
@@ -46067,12 +46333,12 @@ function classifyFileKind(path) {
     return "reference";
   if (path.startsWith("assets/"))
     return "asset";
-  if (/^(?:licen[cs]e|copying|notice)(?:\.|$)/i.test(import_node_path10.posix.basename(path)))
+  if (/^(?:licen[cs]e|copying|notice)(?:\.|$)/i.test(import_node_path11.posix.basename(path)))
     return "license";
   return "other";
 }
 function classifyPreview(path, bytes) {
-  const extension = import_node_path10.posix.extname(path).toLowerCase();
+  const extension = import_node_path11.posix.extname(path).toLowerCase();
   if (IMAGE_EXTENSIONS2.has(extension))
     return "image";
   if (bytes.includes(0))
@@ -46176,7 +46442,7 @@ function normalizePackageReference(value) {
   const withoutSuffix = trimmed4.split(/[?#]/, 1)[0];
   if (!withoutSuffix)
     return null;
-  const normalized2 = import_node_path10.posix.normalize(withoutSuffix).replace(/^\.\//, "").normalize("NFC");
+  const normalized2 = import_node_path11.posix.normalize(withoutSuffix).replace(/^\.\//, "").normalize("NFC");
   if (normalized2 === ".." || normalized2.startsWith("../"))
     return null;
   return normalized2;
@@ -46215,8 +46481,8 @@ function uint642(value) {
 }
 
 // src/capabilities/skills/store.ts
-var import_promises19 = require("fs/promises");
-var import_node_path11 = require("path");
+var import_promises20 = require("fs/promises");
+var import_node_path12 = require("path");
 
 // ../shared/dist/node/alan-skill-identity.js
 var import_node_crypto9 = require("crypto");
@@ -46239,21 +46505,21 @@ function alanSkillVersionId(slug, contentHash) {
 init_runtime_v2();
 init_zod();
 function skillsLayout(stateDir, home) {
-  const root = (0, import_node_path11.join)(stateDir, "skills");
+  const root = (0, import_node_path12.join)(stateDir, "skills");
   return {
     root,
-    installedFile: (0, import_node_path11.join)(root, "installed.json"),
-    retiredFile: (0, import_node_path11.join)(root, "retired.json"),
-    localFile: (0, import_node_path11.join)(root, "local.json"),
-    versionsDir: (0, import_node_path11.join)(root, "versions"),
-    tmpDir: (0, import_node_path11.join)(root, "tmp"),
-    pluginDir: (0, import_node_path11.join)(root, "alan-plugin"),
-    pluginSkillsDir: (0, import_node_path11.join)(root, "alan-plugin", "skills"),
-    nativeDir: home === void 0 || home === "" ? null : (0, import_node_path11.join)(home, ".agents", "skills")
+    installedFile: (0, import_node_path12.join)(root, "installed.json"),
+    retiredFile: (0, import_node_path12.join)(root, "retired.json"),
+    localFile: (0, import_node_path12.join)(root, "local.json"),
+    versionsDir: (0, import_node_path12.join)(root, "versions"),
+    tmpDir: (0, import_node_path12.join)(root, "tmp"),
+    pluginDir: (0, import_node_path12.join)(root, "alan-plugin"),
+    pluginSkillsDir: (0, import_node_path12.join)(root, "alan-plugin", "skills"),
+    nativeDir: home === void 0 || home === "" ? null : (0, import_node_path12.join)(home, ".agents", "skills")
   };
 }
 function packageDirectory(layout, versionId) {
-  return (0, import_node_path11.join)(layout.versionsDir, versionId);
+  return (0, import_node_path12.join)(layout.versionsDir, versionId);
 }
 var installedFileSchema = external_exports.object({ skills: external_exports.array(desiredMachineSkillSchema) });
 async function readInstalledSkills(layout) {
@@ -46280,7 +46546,7 @@ async function readLocalSkills(layout) {
 async function isLocalSkillCurrent(entry, contentHash, ignoredPaths) {
   if (entry.contentHash !== contentHash) return false;
   try {
-    if (await (0, import_promises19.realpath)(entry.path) !== entry.path) return false;
+    if (await (0, import_promises20.realpath)(entry.path) !== entry.path) return false;
     const inspected = await inspectSkillPackage(entry.path, { expectedName: null, ignoredPaths });
     return inspected.contentHash === contentHash;
   } catch {
@@ -46295,7 +46561,7 @@ async function resolveLocalSkill(local, invocation) {
 }
 async function hasSkillFile(directory) {
   try {
-    return (await (0, import_promises19.stat)((0, import_node_path11.join)(directory, "SKILL.md"))).isFile();
+    return (await (0, import_promises20.stat)((0, import_node_path12.join)(directory, "SKILL.md"))).isFile();
   } catch {
     return false;
   }
@@ -46313,7 +46579,7 @@ async function isIntact(layout, skill) {
 async function resolveNativeBuiltIn(layout, invocation, baked) {
   const slug = invocation.displayName;
   if (layout.nativeDir === null || invocation.skillId !== alanSkillId(slug)) return null;
-  const directory = (0, import_node_path11.join)(layout.nativeDir, slug);
+  const directory = (0, import_node_path12.join)(layout.nativeDir, slug);
   try {
     const inspected = await inspectSkillPackage(directory, { expectedName: slug });
     if (baked === "exact" && alanSkillVersionId(slug, inspected.contentHash) !== invocation.versionId)
@@ -46359,10 +46625,10 @@ async function availableSkillIndex(layout) {
     });
   }
   if (layout.nativeDir !== null) {
-    const entries = await (0, import_promises19.readdir)(layout.nativeDir, { withFileTypes: true }).catch(() => []);
+    const entries = await (0, import_promises20.readdir)(layout.nativeDir, { withFileTypes: true }).catch(() => []);
     for (const entry of entries) {
       if (entry.isDirectory() || entry.isSymbolicLink())
-        candidates2.push({ directory: (0, import_node_path11.join)(layout.nativeDir, entry.name) });
+        candidates2.push({ directory: (0, import_node_path12.join)(layout.nativeDir, entry.name) });
     }
   }
   const bounded = candidates2.slice(0, 2e3);
@@ -46392,8 +46658,8 @@ async function inspectIndexedSkill(directory, contentHash) {
 // src/capabilities/skills/native-index.ts
 var import_node_crypto10 = require("crypto");
 var import_node_fs7 = require("fs");
-var import_promises20 = require("fs/promises");
-var import_node_path12 = require("path");
+var import_promises21 = require("fs/promises");
+var import_node_path13 = require("path");
 var ALAN_SKILLS_PLUGIN_NAME = "alan";
 var PLUGIN_MANIFEST = `${JSON.stringify(
   {
@@ -46405,18 +46671,18 @@ var PLUGIN_MANIFEST = `${JSON.stringify(
 )}
 `;
 function installedSkillFolders(layout) {
-  return (0, import_node_fs7.existsSync)((0, import_node_path12.join)(layout.pluginDir, ".claude-plugin", "plugin.json")) ? { pluginDir: layout.pluginDir, skillsDir: layout.pluginSkillsDir } : null;
+  return (0, import_node_fs7.existsSync)((0, import_node_path13.join)(layout.pluginDir, ".claude-plugin", "plugin.json")) ? { pluginDir: layout.pluginDir, skillsDir: layout.pluginSkillsDir } : null;
 }
 
 // src/capabilities/workspace/index.ts
-var import_node_path15 = require("path");
+var import_node_path16 = require("path");
 
 // src/capabilities/workspace/approved-paths.ts
-var import_promises21 = require("fs/promises");
+var import_promises22 = require("fs/promises");
 init_zod();
 
 // src/capabilities/workspace/paths.ts
-var import_node_path13 = require("path");
+var import_node_path14 = require("path");
 function stripWin32Namespace(path) {
   if (/^\\\\\?\\UNC\\/i.test(path)) return `\\\\${path.slice(8)}`;
   if (path.startsWith("\\\\?\\")) return path.slice(4);
@@ -46424,15 +46690,15 @@ function stripWin32Namespace(path) {
 }
 function comparablePath(path, platform) {
   if (platform === "win32") {
-    const normalized3 = import_node_path13.win32.normalize(stripWin32Namespace(path).replaceAll("/", "\\"));
+    const normalized3 = import_node_path14.win32.normalize(stripWin32Namespace(path).replaceAll("/", "\\"));
     const trimmed4 = normalized3.length > 3 || !/^[a-z]:\\$/i.test(normalized3) ? normalized3.replace(/\\+$/, "") : normalized3;
     return trimmed4.toLowerCase();
   }
-  const normalized2 = import_node_path13.posix.normalize(path);
+  const normalized2 = import_node_path14.posix.normalize(path);
   return normalized2.length > 1 ? normalized2.replace(/\/+$/, "") : normalized2;
 }
 function isAbsoluteFor(path, platform) {
-  return platform === "win32" ? import_node_path13.win32.isAbsolute(path) : import_node_path13.posix.isAbsolute(path);
+  return platform === "win32" ? import_node_path14.win32.isAbsolute(path) : import_node_path14.posix.isAbsolute(path);
 }
 function isWithin(root, candidate, platform) {
   const separator = platform === "win32" ? "\\" : "/";
@@ -46450,7 +46716,7 @@ var storeSchema = external_exports.object({
 });
 async function realpathOrNull(path) {
   try {
-    return await (0, import_promises21.realpath)(path);
+    return await (0, import_promises22.realpath)(path);
   } catch (error61) {
     const code = errnoCode(error61);
     if (code === "ENOENT" || code === "ENOTDIR" || code === "EACCES" || code === "EPERM") {
@@ -46510,8 +46776,8 @@ async function openApprovedPaths(options) {
 
 // src/capabilities/workspace/locks.ts
 var import_node_crypto11 = require("crypto");
-var import_promises22 = require("fs/promises");
-var import_node_path14 = require("path");
+var import_promises23 = require("fs/promises");
+var import_node_path15 = require("path");
 init_zod();
 var LOCK_FORMAT = 1;
 var EXCLUSIVE_FILE = "exclusive.json";
@@ -46531,7 +46797,7 @@ function repositoryLockKey(commonDir, platform) {
 async function readOwner(path) {
   let text2;
   try {
-    text2 = await (0, import_promises22.readFile)(path, "utf8");
+    text2 = await (0, import_promises23.readFile)(path, "utf8");
   } catch (error61) {
     if (errnoCode(error61) === "ENOENT") return { kind: "missing" };
     return { kind: "unreadable" };
@@ -46552,7 +46818,7 @@ async function removeIfSame(path, expected) {
     if (current.kind !== "owner" || current.owner.since !== expected.since) return;
     if (current.owner.pid !== expected.pid || current.owner.holder !== expected.holder) return;
   }
-  await (0, import_promises22.unlink)(path).catch((error61) => {
+  await (0, import_promises23.unlink)(path).catch((error61) => {
     if (errnoCode(error61) !== "ENOENT") throw error61;
   });
 }
@@ -46577,7 +46843,7 @@ function openRepositoryLocks(options) {
       await removeIfSame(path, read.owner);
       return null;
     }
-    const age = await (0, import_promises22.stat)(path).then(
+    const age = await (0, import_promises23.stat)(path).then(
       (info) => clock.now() - info.mtimeMs,
       () => 0
     );
@@ -46591,13 +46857,13 @@ function openRepositoryLocks(options) {
   });
   const folder = async (commonDir) => {
     const key = repositoryLockKey(commonDir, platform);
-    const dir = (0, import_node_path14.join)(options.dir, key);
-    await (0, import_promises22.mkdir)(dir, { recursive: true, mode: 448 });
+    const dir = (0, import_node_path15.join)(options.dir, key);
+    await (0, import_promises23.mkdir)(dir, { recursive: true, mode: 448 });
     return { key, dir };
   };
   const createExclusive = async (path, owner) => {
     try {
-      const handle = await (0, import_promises22.open)(path, "wx", 384);
+      const handle = await (0, import_promises23.open)(path, "wx", 384);
       try {
         await handle.writeFile(JSON.stringify(owner));
       } finally {
@@ -46610,10 +46876,10 @@ function openRepositoryLocks(options) {
     }
   };
   const liveRun = async (dir) => {
-    const entries = await (0, import_promises22.readdir)(dir);
+    const entries = await (0, import_promises23.readdir)(dir);
     for (const entry of entries) {
       if (!entry.startsWith(RUN_FILE_PREFIX)) continue;
-      const holder = await heldBy((0, import_node_path14.join)(dir, entry));
+      const holder = await heldBy((0, import_node_path15.join)(dir, entry));
       if (holder !== null) return holder;
     }
     return null;
@@ -46621,7 +46887,7 @@ function openRepositoryLocks(options) {
   return {
     tryExclusive: async (commonDir, operationId) => {
       const { key, dir } = await folder(commonDir);
-      const path = (0, import_node_path14.join)(dir, EXCLUSIVE_FILE);
+      const path = (0, import_node_path15.join)(dir, EXCLUSIVE_FILE);
       const owner = await self(operationId);
       if (!await createExclusive(path, owner)) {
         const holder = await heldBy(path);
@@ -46640,10 +46906,10 @@ function openRepositoryLocks(options) {
     tryShared: async (commonDir, runId) => {
       const { key, dir } = await folder(commonDir);
       const file2 = `${RUN_FILE_PREFIX}${(0, import_node_crypto11.createHash)("sha256").update(runId).digest("hex").slice(0, 32)}.json`;
-      const path = (0, import_node_path14.join)(dir, file2);
+      const path = (0, import_node_path15.join)(dir, file2);
       const owner = await self(runId);
       await writeJsonFileAtomic(path, owner);
-      const operation = await heldBy((0, import_node_path14.join)(dir, EXCLUSIVE_FILE));
+      const operation = await heldBy((0, import_node_path15.join)(dir, EXCLUSIVE_FILE));
       if (operation !== null) {
         await removeIfSame(path, owner);
         return { kind: "busy", holder: operation };
@@ -46655,30 +46921,30 @@ function openRepositoryLocks(options) {
 
 // src/cli/config.ts
 var import_node_os7 = require("os");
-var import_node_path29 = require("path");
+var import_node_path32 = require("path");
 init_zod();
 
 // src/client/locate.ts
-var import_node_path16 = require("path");
+var import_node_path17 = require("path");
 var RUNTIME_PROFILES = ["production", "staging", "development", "local"];
 function defaultStateDir({ profile, platform, home, env }) {
   if (platform === "win32") {
-    return (0, import_node_path16.join)(env.LOCALAPPDATA ?? (0, import_node_path16.join)(home, "AppData", "Local"), "Alan", profile);
+    return (0, import_node_path17.join)(env.LOCALAPPDATA ?? (0, import_node_path17.join)(home, "AppData", "Local"), "Alan", profile);
   }
-  return (0, import_node_path16.join)(env.XDG_STATE_HOME ?? (0, import_node_path16.join)(home, ".local", "state"), "alan", profile);
+  return (0, import_node_path17.join)(env.XDG_STATE_HOME ?? (0, import_node_path17.join)(home, ".local", "state"), "alan", profile);
 }
 function defaultInstallDir({ platform, home, env }) {
   if (platform === "win32") {
-    return (0, import_node_path16.join)(env.LOCALAPPDATA ?? (0, import_node_path16.join)(home, "AppData", "Local"), "Alan", "runtime");
+    return (0, import_node_path17.join)(env.LOCALAPPDATA ?? (0, import_node_path17.join)(home, "AppData", "Local"), "Alan", "runtime");
   }
-  return (0, import_node_path16.join)(env.XDG_DATA_HOME ?? (0, import_node_path16.join)(home, ".local", "share"), "alan", "runtime");
+  return (0, import_node_path17.join)(env.XDG_DATA_HOME ?? (0, import_node_path17.join)(home, ".local", "share"), "alan", "runtime");
 }
 
 // src/sessions/index.ts
 var import_node_crypto16 = require("crypto");
-var import_promises38 = require("fs/promises");
+var import_promises40 = require("fs/promises");
 var import_node_os6 = require("os");
-var import_node_path28 = require("path");
+var import_node_path31 = require("path");
 
 // src/holder/control-client.ts
 var import_node_crypto12 = require("crypto");
@@ -46845,7 +47111,7 @@ function createProviderDrivers(options) {
 }
 
 // src/holder/engine-records.ts
-var import_node_path17 = require("path");
+var import_node_path18 = require("path");
 init_zod();
 var ENGINES_FILE = "engines.json";
 var engineRecordSchema = external_exports.object({
@@ -46855,7 +47121,7 @@ var engineRecordSchema = external_exports.object({
 });
 var engineRecordsSchema = external_exports.object({ engines: external_exports.array(engineRecordSchema) });
 function engineRecordsPath(sessionDir) {
-  return (0, import_node_path17.join)(sessionDir, ENGINES_FILE);
+  return (0, import_node_path18.join)(sessionDir, ENGINES_FILE);
 }
 function recordSpawnedEngines(path, clock, log) {
   const live = /* @__PURE__ */ new Map();
@@ -46910,17 +47176,17 @@ function createConversationMcpAuthorization(options) {
 }
 
 // src/holder/mcp-helper-access.ts
-var import_promises29 = require("fs/promises");
+var import_promises30 = require("fs/promises");
 function createHelperMcpAccess(options) {
   return {
     [Symbol.asyncDispose]: async () => {
-      await (0, import_promises29.rm)(options.credentialPath, { force: true });
+      await (0, import_promises30.rm)(options.credentialPath, { force: true });
     },
     url: options.managedMcp.url,
     authorization: async (signal) => {
       const authorization = await options.managedMcp.authorization(signal);
       if (authorization === void 0 || signal.aborted) {
-        await (0, import_promises29.rm)(options.credentialPath, { force: true });
+        await (0, import_promises30.rm)(options.credentialPath, { force: true });
         return void 0;
       }
       const credential = {
@@ -46935,8 +47201,8 @@ function createHelperMcpAccess(options) {
 }
 
 // src/holder/run-inputs.ts
-var import_promises30 = require("fs/promises");
-var import_node_path18 = require("path");
+var import_promises31 = require("fs/promises");
+var import_node_path19 = require("path");
 init_dist();
 var NO_RUN_INPUTS = {
   attachments: [],
@@ -46950,18 +47216,18 @@ function safeFilename(filename) {
   return safe || "attachment";
 }
 async function prepareRunInputs(spec, { source, tmpDir, signal, skills = [] }) {
-  const dir = (0, import_node_path18.join)(tmpDir, "runs", spec.runId);
+  const dir = (0, import_node_path19.join)(tmpDir, "runs", spec.runId);
   const cleanup = async () => {
-    await (0, import_promises30.rm)(dir, { recursive: true, force: true });
+    await (0, import_promises31.rm)(dir, { recursive: true, force: true });
   };
   try {
     const credential = await source.fetchProviderCredential(spec.runId, signal);
     const attachments = [];
-    if (spec.attachments?.length) await (0, import_promises30.mkdir)(dir, { recursive: true, mode: 448 });
+    if (spec.attachments?.length) await (0, import_promises31.mkdir)(dir, { recursive: true, mode: 448 });
     for (const [index, attachment] of (spec.attachments ?? []).entries()) {
       const bytes = await source.downloadAttachment(spec.runId, attachment.id, signal);
-      const path = (0, import_node_path18.join)(dir, `${index}-${safeFilename(attachment.filename)}`);
-      await (0, import_promises30.writeFile)(path, bytes, { mode: 384 });
+      const path = (0, import_node_path19.join)(dir, `${index}-${safeFilename(attachment.filename)}`);
+      await (0, import_promises31.writeFile)(path, bytes, { mode: 384 });
       const imageMimeType = attachment.kind === "image" ? detectImageMimeType(Buffer.from(bytes.buffer, bytes.byteOffset, bytes.byteLength)) : null;
       attachments.push({
         id: attachment.id,
@@ -46992,27 +47258,27 @@ async function prepareRunInputs(spec, { source, tmpDir, signal, skills = [] }) {
 var import_node_crypto15 = require("crypto");
 var import_node_fs11 = require("fs");
 var import_node_net2 = require("net");
-var import_node_path27 = require("path");
+var import_node_path30 = require("path");
 init_runtime_v2();
 
 // src/holder/admission.ts
 var import_node_fs9 = require("fs");
-var import_promises34 = require("fs/promises");
+var import_promises36 = require("fs/promises");
 var import_node_os5 = require("os");
-var import_node_path23 = require("path");
+var import_node_path26 = require("path");
 init_constants();
 
 // ../shared/dist/node/local-workspace.js
 var import_node_fs8 = require("fs");
 var import_node_os4 = require("os");
-var import_node_path19 = require("path");
+var import_node_path20 = require("path");
 function resolveAlanDefaultWorkspacePath(homeDirectory = (0, import_node_os4.homedir)()) {
-  return (0, import_node_path19.join)(homeDirectory, ".alan", "workspace");
+  return (0, import_node_path20.join)(homeDirectory, ".alan", "workspace");
 }
 
 // src/holder/admission-relocation.ts
-var import_promises31 = require("fs/promises");
-var import_node_path20 = require("path");
+var import_promises32 = require("fs/promises");
+var import_node_path21 = require("path");
 var MAX_RELOCATION_CANDIDATES = 200;
 var RELOCATION_BUDGET_MS = 2e4;
 function repositoryIdentity(url2) {
@@ -47047,8 +47313,8 @@ async function originIdentity(git, path, signal) {
 }
 async function childDirectories(parent, limit) {
   try {
-    const entries = await (0, import_promises31.readdir)(parent, { withFileTypes: true });
-    return entries.filter((entry) => entry.isDirectory()).slice(0, limit).map((entry) => (0, import_node_path20.join)(parent, entry.name));
+    const entries = await (0, import_promises32.readdir)(parent, { withFileTypes: true });
+    return entries.filter((entry) => entry.isDirectory()).slice(0, limit).map((entry) => (0, import_node_path21.join)(parent, entry.name));
   } catch {
     return [];
   }
@@ -47056,7 +47322,7 @@ async function childDirectories(parent, limit) {
 async function candidateFolders(search) {
   const roots = /* @__PURE__ */ new Map();
   for (const path of [search.missingPath, ...search.approvedWorkspacePaths]) {
-    const parent = (0, import_node_path20.dirname)((0, import_node_path20.resolve)(path));
+    const parent = (0, import_node_path21.dirname)((0, import_node_path21.resolve)(path));
     roots.set(comparablePath(parent, search.platform), parent);
   }
   const candidates2 = /* @__PURE__ */ new Map();
@@ -47083,9 +47349,205 @@ async function discoverRelocatedWorkspace(search) {
 }
 
 // src/holder/checkout-refresh.ts
+var import_node_path24 = require("path");
+
+// src/holder/claim-once.ts
 var import_node_crypto14 = require("crypto");
-var import_promises32 = require("fs/promises");
-var import_node_path21 = require("path");
+var import_promises33 = require("fs/promises");
+var import_node_path22 = require("path");
+async function claimOnce(dir, name) {
+  try {
+    await (0, import_promises33.mkdir)(dir, { recursive: true, mode: 448 });
+    await (await (0, import_promises33.open)((0, import_node_path22.join)(dir, name), "wx")).close();
+    return true;
+  } catch {
+    return false;
+  }
+}
+function claimFirstLease(freshnessDir, path) {
+  return claimOnce((0, import_node_path22.join)(freshnessDir, "leased"), (0, import_node_crypto14.createHash)("sha256").update(path).digest("hex"));
+}
+
+// src/holder/requested-checkout.ts
+var import_promises34 = require("fs/promises");
+var import_node_path23 = require("path");
+var REMOTE2 = "origin";
+var REASON_MAX_CHARS = 200;
+function firstLine2(text2) {
+  return (text2.trim().split("\n")[0] ?? "").slice(0, REASON_MAX_CHARS);
+}
+function reasonOf(output2, command) {
+  return firstLine2(output2.stderr) || `git ${command} exited ${output2.exitCode}`;
+}
+function noted(checkout, situation, reason, action) {
+  return {
+    kind: "noted",
+    line: `Note: ${checkout.path} ${situation}: ${reason}. ${action} before relying on its files.`
+  };
+}
+function notSwitched(checkout, current, reason) {
+  const on = current ?? "a detached HEAD";
+  return noted(
+    checkout,
+    `is on ${on}, not ${checkout.branch}, the branch picked for this chat`,
+    reason,
+    `Switch it to ${checkout.branch}`
+  );
+}
+async function clone2(checkout, deps, signal) {
+  const parent = (0, import_node_path23.dirname)(checkout.path);
+  await (0, import_promises34.mkdir)(parent, { recursive: true });
+  await assertValidBranch(deps.git, parent, checkout.branch, signal);
+  const output2 = await deps.git.run(
+    {
+      cwd: parent,
+      args: [
+        "clone",
+        "--quiet",
+        "--no-tags",
+        "--depth=1",
+        "--branch",
+        checkout.branch,
+        "--",
+        checkout.repoUrl,
+        checkout.path
+      ],
+      network: true
+    },
+    signal
+  );
+  if (output2.exitCode === 0) return { kind: "moved", how: "cloned" };
+  return noted(
+    checkout,
+    `is missing, and cloning it on ${checkout.branch}, the branch picked for this chat, failed`,
+    reasonOf(output2, "clone"),
+    `Clone ${checkout.repoUrl} there`
+  );
+}
+var SWITCHED = { kind: "moved", how: "switched" };
+function coversBranch(fetchConfig, branch) {
+  return fetchConfig.split("\n").some(
+    (refspec) => refspec === `+refs/heads/*:refs/remotes/${REMOTE2}/*` || refspec === `+refs/heads/${branch}:refs/remotes/${REMOTE2}/${branch}`
+  );
+}
+async function fetchBranch(checkout, git, shallow, current) {
+  const { branch } = checkout;
+  const tracking = `refs/remotes/${REMOTE2}/${branch}`;
+  const fetchConfig = await git(["config", "--get-all", `remote.${REMOTE2}.fetch`], {
+    readOnly: true
+  });
+  if (!coversBranch(fetchConfig.stdout, branch)) {
+    const added = await git(["remote", "set-branches", "--add", REMOTE2, branch]);
+    if (added.exitCode !== 0) return notSwitched(checkout, current, reasonOf(added, "remote"));
+  }
+  const depth = shallow ? ["--depth=1"] : [];
+  const fetched = await git(
+    ["fetch", "--no-tags", "--quiet", ...depth, REMOTE2, `refs/heads/${branch}:${tracking}`],
+    { network: true }
+  );
+  if (fetched.exitCode !== 0) return notSwitched(checkout, current, reasonOf(fetched, "fetch"));
+  const tip = await git(["rev-parse", "--verify", tracking], { readOnly: true });
+  if (tip.exitCode !== 0) return notSwitched(checkout, current, reasonOf(tip, "rev-parse"));
+  return { kind: "fetched", tip: tip.stdout.trim() };
+}
+async function moveOnto(checkout, git, tip, current) {
+  const { branch } = checkout;
+  const local = await git(["rev-parse", "--verify", "-q", `refs/heads/${branch}`], {
+    readOnly: true
+  });
+  if (local.exitCode !== 0) {
+    const created = await git([
+      "switch",
+      "--quiet",
+      "-c",
+      branch,
+      "--track",
+      `${REMOTE2}/${branch}`
+    ]);
+    return created.exitCode === 0 ? SWITCHED : notSwitched(checkout, current, reasonOf(created, "switch"));
+  }
+  const localHead = local.stdout.trim();
+  const ancestor = localHead === tip || (await git(["merge-base", "--is-ancestor", localHead, tip], { readOnly: true })).exitCode === 0;
+  if (!ancestor) {
+    return notSwitched(
+      checkout,
+      current,
+      `its local ${branch} has diverged from ${REMOTE2}/${branch}`
+    );
+  }
+  const switched = await git(["switch", "--quiet", branch]);
+  if (switched.exitCode !== 0) return notSwitched(checkout, current, reasonOf(switched, "switch"));
+  if (localHead === tip) return SWITCHED;
+  const merged = await git(["merge", "--quiet", "--ff-only", tip]);
+  return merged.exitCode === 0 ? SWITCHED : noted(
+    checkout,
+    `is on ${branch} but behind ${REMOTE2}/${branch}`,
+    reasonOf(merged, "merge"),
+    "Run `git pull --ff-only` there"
+  );
+}
+async function switchTo(checkout, current, operationId, deps, signal) {
+  var _stack = [];
+  try {
+    const cwd = checkout.path;
+    const git = (args, invocation = {}) => deps.git.run({ cwd, args, ...invocation }, signal);
+    await assertValidBranch(deps.git, cwd, checkout.branch, signal);
+    const refs = await git(
+      ["rev-parse", "--path-format=absolute", "--git-common-dir", "--is-shallow-repository"],
+      { readOnly: true }
+    );
+    if (refs.exitCode !== 0) return notSwitched(checkout, current, reasonOf(refs, "rev-parse"));
+    const [commonDir = "", shallow] = refs.stdout.trim().split("\n");
+    const attempt = await deps.locks.tryExclusive(commonDir, operationId);
+    if (attempt.kind === "busy") {
+      return notSwitched(checkout, current, "another git operation holds the checkout");
+    }
+    const _lock = __using(_stack, attempt.lock, true);
+    const now = await readCheckoutStatus(deps.git, cwd, signal);
+    if (now === null || now.dirty) {
+      return notSwitched(checkout, now?.branch ?? current, "it has uncommitted changes");
+    }
+    const fetched = await fetchBranch(checkout, git, shallow === "true", now.branch);
+    if (fetched.kind !== "fetched") return fetched;
+    const outcome2 = await moveOnto(checkout, git, fetched.tip, now.branch);
+    const after = await readCheckoutStatus(deps.git, cwd, signal);
+    if (after?.branch === checkout.branch) {
+      await recordCheckoutKept(deps.dir, cwd, "requested_branch");
+    }
+    return outcome2;
+  } catch (_) {
+    var _error = _, _hasError = true;
+  } finally {
+    var _promise2 = __callDispose(_stack, _error, _hasError);
+    _promise2 && await _promise2;
+  }
+}
+async function applyRequestedCheckout(checkout, spec, deps, signal) {
+  try {
+    if (!await isCheckout(checkout.path)) return await clone2(checkout, deps, signal);
+    const status = await readCheckoutStatus(deps.git, checkout.path, signal);
+    if (status === null) return notSwitched(checkout, null, "git status failed");
+    if (status.branch === checkout.branch) return { kind: "on_branch" };
+    if (status.dirty) return notSwitched(checkout, status.branch, "it has uncommitted changes");
+    if (!await claimFirstLease(deps.dir, checkout.path)) {
+      return notSwitched(
+        checkout,
+        status.branch,
+        "an earlier conversation on this machine already uses it"
+      );
+    }
+    return await switchTo(checkout, status.branch, `checkout-${spec.runId}`, deps, signal);
+  } catch (error61) {
+    return noted(
+      checkout,
+      `could not be put on ${checkout.branch}, the branch picked for this chat`,
+      firstLine2(error61 instanceof Error ? error61.message : String(error61)) || "unknown error",
+      "Check it"
+    );
+  }
+}
+
+// src/holder/checkout-refresh.ts
 function short(sha) {
   return sha.slice(0, 12);
 }
@@ -47095,15 +47557,6 @@ function staleLine(path, snapshot2, tip) {
   const remote = tip === void 0 ? "may be ahead" : `is ahead at ${short(tip)}`;
   return `Note: ${path} ${checkout}; ${base} ${remote}. Run \`git pull --ff-only\` there before relying on its files.`;
 }
-async function claimOnce(dir, name) {
-  try {
-    await (0, import_promises32.mkdir)(dir, { recursive: true, mode: 448 });
-    await (await (0, import_promises32.open)((0, import_node_path21.join)(dir, name), "wx")).close();
-    return true;
-  } catch {
-    return false;
-  }
-}
 async function fastForward(freshness, operationId, deps, signal) {
   var _stack = [];
   try {
@@ -47128,10 +47581,7 @@ async function fastForward(freshness, operationId, deps, signal) {
   }
 }
 async function atFirstLease(freshness, spec, deps, signal) {
-  const first = await claimOnce(
-    (0, import_node_path21.join)(deps.dir, "leased"),
-    (0, import_node_crypto14.createHash)("sha256").update(freshness.path).digest("hex")
-  );
+  const first = await claimFirstLease(deps.dir, freshness.path);
   switch (freshness.state) {
     case "current":
     case "kept":
@@ -47157,32 +47607,73 @@ async function checkoutsOf(spec, leaseTargets) {
   if (leaseTargets.length > 0 || spec.projectPath === void 0) return [...leaseTargets];
   return checkoutsUnder(spec.projectPath);
 }
-function createCheckoutRefresh(deps) {
-  return async (spec, leaseTargets, signal) => {
-    if (spec.providerSessionId !== void 0) return void 0;
-    if (!await claimOnce((0, import_node_path21.join)(deps.dir, "conversations"), spec.conversationId)) return void 0;
-    const lines = [];
-    for (const target of await checkoutsOf(spec, leaseTargets)) {
-      const freshness = await readCheckoutFreshness(deps.dir, target);
-      if (freshness === null) continue;
-      const outcome2 = await atFirstLease(freshness, spec, deps, signal).catch(
-        () => "noted"
-      );
-      if (outcome2 === "noted") lines.push(lineFor(freshness));
-      deps.log.info("workspace.refresh", {
+function requestedCheckoutsOf(spec, log) {
+  const roots = spec.approvedWorkspacePaths ?? [];
+  return (spec.requestedCheckouts ?? []).filter((checkout) => {
+    const approved = roots.some((root) => isWithin(root, checkout.path, process.platform));
+    if (!approved) {
+      log.warn("workspace.requested_checkout_outside_workspace", {
         runId: spec.runId,
-        path: freshness.path,
-        state: freshness.state,
-        outcome: outcome2
+        path: checkout.path
       });
     }
+    return approved;
+  });
+}
+async function applyRequestedCheckouts(spec, deps, signal) {
+  const settled2 = /* @__PURE__ */ new Set();
+  const lines = [];
+  for (const checkout of requestedCheckoutsOf(spec, deps.log)) {
+    const outcome2 = await applyRequestedCheckout(checkout, spec, deps, signal);
+    deps.log.info("workspace.requested_checkout", {
+      runId: spec.runId,
+      path: checkout.path,
+      branch: checkout.branch,
+      outcome: outcome2.kind,
+      ...outcome2.kind === "moved" ? { how: outcome2.how } : {}
+    });
+    if (outcome2.kind === "on_branch") continue;
+    settled2.add((0, import_node_path24.resolve)(checkout.path));
+    if (outcome2.kind === "noted") lines.push(outcome2.line);
+  }
+  return { settled: settled2, lines };
+}
+async function refreshSnapshotCheckouts(spec, targets, settled2, deps, signal) {
+  const lines = [];
+  for (const target of targets) {
+    if (settled2.has((0, import_node_path24.resolve)(target))) continue;
+    const freshness = await readCheckoutFreshness(deps.dir, target);
+    if (freshness === null) continue;
+    const outcome2 = await atFirstLease(freshness, spec, deps, signal).catch(
+      () => "noted"
+    );
+    if (outcome2 === "noted") lines.push(lineFor(freshness));
+    deps.log.info("workspace.refresh", {
+      runId: spec.runId,
+      path: freshness.path,
+      state: freshness.state,
+      outcome: outcome2
+    });
+  }
+  return lines;
+}
+function createCheckoutRefresh(deps) {
+  return async (spec, leaseTargets, signal) => {
+    if (spec.providerSessionId !== void 0) return void 0;
+    if (!await claimOnce((0, import_node_path24.join)(deps.dir, "conversations"), spec.conversationId)) return void 0;
+    const requested = await applyRequestedCheckouts(spec, deps, signal);
+    const targets = await checkoutsOf(spec, leaseTargets);
+    const lines = [
+      ...requested.lines,
+      ...await refreshSnapshotCheckouts(spec, targets, requested.settled, deps, signal)
+    ];
     return lines.length === 0 ? void 0 : lines.join("\n");
   };
 }
 
 // src/holder/lease.ts
-var import_promises33 = require("fs/promises");
-var import_node_path22 = require("path");
+var import_promises35 = require("fs/promises");
+var import_node_path25 = require("path");
 var LEASE_CHECK_EVERY_MS = 5e3;
 var MAX_TRANSIENT_FAILURES = 3;
 var BACKOFF_BASE_MS = 1e3;
@@ -47196,8 +47687,8 @@ function identityFailure(code, workspacePath) {
   return { code, problemCode: "app.workspace.missing", message: MESSAGES[code], workspacePath };
 }
 async function fileIdentity(path) {
-  const canonical = await (0, import_promises33.realpath)(path);
-  const info = await (0, import_promises33.stat)(canonical, { bigint: true });
+  const canonical = await (0, import_promises35.realpath)(path);
+  const info = await (0, import_promises35.stat)(canonical, { bigint: true });
   return `${canonical}:${info.dev}:${info.ino}`;
 }
 async function snapshot(git, path, signal) {
@@ -47216,7 +47707,7 @@ async function snapshot(git, path, signal) {
       workspace: await fileIdentity(path),
       repository: await fileIdentity(commonDir),
       worktree: await fileIdentity(gitDir),
-      commonDir: await (0, import_promises33.realpath)(commonDir)
+      commonDir: await (0, import_promises35.realpath)(commonDir)
     };
   } catch {
     return null;
@@ -47229,7 +47720,7 @@ async function gitValue(git, path, args, signal) {
 }
 async function pathExists(path) {
   try {
-    await (0, import_promises33.stat)(path);
+    await (0, import_promises35.stat)(path);
     return true;
   } catch (error61) {
     return errnoCode(error61) !== "ENOENT" && errnoCode(error61) !== "ENOTDIR";
@@ -47238,19 +47729,19 @@ async function pathExists(path) {
 async function hasGitMarker(path) {
   let directory;
   try {
-    directory = await (0, import_promises33.realpath)(path);
+    directory = await (0, import_promises35.realpath)(path);
   } catch {
     return true;
   }
   for (; ; ) {
     try {
-      await (0, import_promises33.stat)((0, import_node_path22.join)(directory, ".git"));
+      await (0, import_promises35.stat)((0, import_node_path25.join)(directory, ".git"));
       return true;
     } catch (error61) {
       const code = errnoCode(error61);
       if (code !== "ENOENT" && code !== "ENOTDIR") return true;
     }
-    const parent = (0, import_node_path22.dirname)(directory);
+    const parent = (0, import_node_path25.dirname)(directory);
     if (parent === directory) return false;
     directory = parent;
   }
@@ -47414,7 +47905,7 @@ function volumeRoot(path) {
 }
 async function exists(path) {
   try {
-    await (0, import_promises34.stat)(path);
+    await (0, import_promises36.stat)(path);
     return true;
   } catch {
     return false;
@@ -47422,10 +47913,10 @@ async function exists(path) {
 }
 async function inspectReadiness(path) {
   try {
-    if (!(await (0, import_promises34.stat)(path)).isDirectory()) {
+    if (!(await (0, import_promises36.stat)(path)).isDirectory()) {
       return { ready: false, missing: true, message: MESSAGES2.missing };
     }
-    await (0, import_promises34.access)(path, import_node_fs9.constants.R_OK | import_node_fs9.constants.W_OK | import_node_fs9.constants.X_OK);
+    await (0, import_promises36.access)(path, import_node_fs9.constants.R_OK | import_node_fs9.constants.W_OK | import_node_fs9.constants.X_OK);
     return { ready: true };
   } catch (error61) {
     const code = errnoCode(error61) ?? "";
@@ -47503,8 +47994,8 @@ async function admitDefaultWorkspace(spec, context, skills) {
   const { env } = context;
   const path = resolveAlanDefaultWorkspacePath(env.HOME || env.USERPROFILE || (0, import_node_os5.homedir)());
   try {
-    await (0, import_promises34.mkdir)(path, { recursive: true, mode: 448 });
-    await (0, import_promises34.access)(path, import_node_fs9.constants.R_OK | import_node_fs9.constants.W_OK | import_node_fs9.constants.X_OK);
+    await (0, import_promises36.mkdir)(path, { recursive: true, mode: 448 });
+    await (0, import_promises36.access)(path, import_node_fs9.constants.R_OK | import_node_fs9.constants.W_OK | import_node_fs9.constants.X_OK);
     return {
       kind: "admitted",
       spec: { ...spec, projectPath: path },
@@ -47577,10 +48068,12 @@ async function admitRun(spec, context, signal) {
   };
 }
 var PROBE_TIMEOUT_MS2 = 5e3;
+var CHECKOUT_LOCAL_TIMEOUT_MS = 6e4;
+var CHECKOUT_NETWORK_TIMEOUT_MS = 12e4;
 function createHolderWorkspace(machine, clock, log) {
   const platform = machine.platform ?? process.platform;
   const git = createGitRunner({ env: machine.env, platform, localTimeoutMs: PROBE_TIMEOUT_MS2 });
-  const locks = openRepositoryLocks({ dir: (0, import_node_path23.join)(machine.stateDir, "locks"), clock, platform });
+  const locks = openRepositoryLocks({ dir: (0, import_node_path26.join)(machine.stateDir, "locks"), clock, platform });
   return {
     admission: {
       env: machine.env,
@@ -47592,7 +48085,7 @@ function createHolderWorkspace(machine, clock, log) {
       ),
       approvedRoots: async () => {
         const approved = await openApprovedPaths({
-          file: (0, import_node_path23.join)(machine.stateDir, "workspaces.json"),
+          file: (0, import_node_path26.join)(machine.stateDir, "workspaces.json"),
           log,
           platform
         });
@@ -47602,10 +48095,15 @@ function createHolderWorkspace(machine, clock, log) {
     lease: { git, locks, clock, log, platform },
     ...machine.refreshesFirstCheckout === true ? {
       refreshFirstCheckout: createCheckoutRefresh({
-        git,
+        git: createGitRunner({
+          env: machine.env,
+          platform,
+          localTimeoutMs: CHECKOUT_LOCAL_TIMEOUT_MS,
+          networkTimeoutMs: CHECKOUT_NETWORK_TIMEOUT_MS
+        }),
         locks,
         log,
-        dir: (0, import_node_path23.join)(machine.stateDir, "checkout-freshness")
+        dir: (0, import_node_path26.join)(machine.stateDir, "checkout-freshness")
       })
     } : {}
   };
@@ -47633,7 +48131,7 @@ async function respondToTurn(runningRunId, gate, driver, request2) {
 }
 
 // src/holder/session-facts.ts
-var import_promises35 = require("fs/promises");
+var import_promises37 = require("fs/promises");
 var CLI_RSS_CACHE_MS = 1e4;
 var LOGIN_PROBLEM_PREFIX = "cli.auth.";
 function isLoginFailure(result) {
@@ -47659,8 +48157,8 @@ function createSessionFacts(options) {
     const path = await resolveCommandOnPath(command, env, platform);
     if (path === null) return null;
     try {
-      const real = await (0, import_promises35.realpath)(path);
-      const info = await (0, import_promises35.stat)(real);
+      const real = await (0, import_promises37.realpath)(path);
+      const info = await (0, import_promises37.stat)(real);
       return { command, key: `${real}:${info.ino}:${info.size}:${info.mtimeMs}` };
     } catch {
       return null;
@@ -47747,8 +48245,8 @@ function createSessionFacts(options) {
 init_acp2();
 
 // src/run-log/directory.ts
-var import_promises36 = require("fs/promises");
-var import_node_path24 = require("path");
+var import_promises38 = require("fs/promises");
+var import_node_path27 = require("path");
 init_runtime_v2();
 init_zod();
 var runMetaSchema = external_exports.object({
@@ -47770,17 +48268,17 @@ var runMetaSchema = external_exports.object({
   }).optional()
 });
 function runDirectory(runsDir, runId) {
-  const dir = (0, import_node_path24.join)(runsDir, runId);
+  const dir = (0, import_node_path27.join)(runsDir, runId);
   return {
     dir,
-    log: (0, import_node_path24.join)(dir, "log.jsonl"),
-    upload: (0, import_node_path24.join)(dir, "upload.json"),
-    meta: (0, import_node_path24.join)(dir, "run.json")
+    log: (0, import_node_path27.join)(dir, "log.jsonl"),
+    upload: (0, import_node_path27.join)(dir, "upload.json"),
+    meta: (0, import_node_path27.join)(dir, "run.json")
   };
 }
 async function isRunClaimed(runsDir, runId) {
   try {
-    return (await (0, import_promises36.stat)(runDirectory(runsDir, runId).log)).size > 0;
+    return (await (0, import_promises38.stat)(runDirectory(runsDir, runId).log)).size > 0;
   } catch (error61) {
     if (errnoCode(error61) === "ENOENT") return false;
     throw error61;
@@ -47788,8 +48286,8 @@ async function isRunClaimed(runsDir, runId) {
 }
 
 // src/run-log/conversation-index.ts
-var import_promises37 = require("fs/promises");
-var import_node_path25 = require("path");
+var import_promises39 = require("fs/promises");
+var import_node_path28 = require("path");
 init_runtime_v2();
 init_zod();
 var ORDINALS_PER_SHARD = 1e3;
@@ -47805,13 +48303,13 @@ var coverageSchema = external_exports.object({
   nextExpectedOrdinal: external_exports.number().int().positive()
 });
 function conversationsDirectory(runsDir) {
-  return (0, import_node_path25.join)((0, import_node_path25.dirname)(runsDir), "conversations");
+  return (0, import_node_path28.join)((0, import_node_path28.dirname)(runsDir), "conversations");
 }
 function indexDirectory(runsDir, conversationId) {
-  return (0, import_node_path25.join)(conversationsDirectory(runsDir), conversationId, "turn-index");
+  return (0, import_node_path28.join)(conversationsDirectory(runsDir), conversationId, "turn-index");
 }
 function shardPath(runsDir, conversationId, ordinal) {
-  return (0, import_node_path25.join)(
+  return (0, import_node_path28.join)(
     indexDirectory(runsDir, conversationId),
     `${Math.floor(ordinal / ORDINALS_PER_SHARD)}.jsonl`
   );
@@ -47820,10 +48318,10 @@ async function indexConversationRun(runsDir, conversationId, ordinal, assistantO
   const nextOrdinal = assistantOrdinal + 1;
   if (nextOrdinal <= ordinal) throw new Error("Assistant order must follow the prompt");
   const path = shardPath(runsDir, conversationId, ordinal);
-  await (0, import_promises37.mkdir)((0, import_node_path25.dirname)(path), { recursive: true, mode: 448 });
-  await (0, import_promises37.appendFile)(path, `${JSON.stringify({ ordinal, nextOrdinal, runId })}
+  await (0, import_promises39.mkdir)((0, import_node_path28.dirname)(path), { recursive: true, mode: 448 });
+  await (0, import_promises39.appendFile)(path, `${JSON.stringify({ ordinal, nextOrdinal, runId })}
 `, { mode: 384 });
-  const coveragePath = (0, import_node_path25.join)((0, import_node_path25.dirname)((0, import_node_path25.dirname)(path)), "coverage.json");
+  const coveragePath = (0, import_node_path28.join)((0, import_node_path28.dirname)((0, import_node_path28.dirname)(path)), "coverage.json");
   const coverage = await readJsonFile(coveragePath, coverageSchema);
   const current = coverage.kind === "ok" ? coverage.value : null;
   const next = nextCoverage(current, ordinal, nextOrdinal);
@@ -47867,7 +48365,7 @@ var decoder = new TextDecoder();
 
 // src/run-log/writer.ts
 var import_node_fs10 = require("fs");
-var import_node_path26 = require("path");
+var import_node_path29 = require("path");
 init_runtime_v2();
 function lastSeq(fd, size) {
   for (const length of tailWindows(size)) {
@@ -47883,7 +48381,7 @@ function lastSeq(fd, size) {
   throw new RuntimeFault("record_too_large", "Run log tail record is larger than any record");
 }
 function openRunLog(path, clock) {
-  (0, import_node_fs10.mkdirSync)((0, import_node_path26.dirname)(path), { recursive: true, mode: 448 });
+  (0, import_node_fs10.mkdirSync)((0, import_node_path29.dirname)(path), { recursive: true, mode: 448 });
   const fd = (0, import_node_fs10.openSync)(path, "a+", 384);
   let size = (0, import_node_fs10.fstatSync)(fd).size;
   let seq = lastSeq(fd, size);
@@ -48219,7 +48717,7 @@ async function runHolder({
   try {
     const identity = await readProcessIdentity(process.pid);
     if (identity === null) throw new RuntimeFault("internal", "Cannot read own process identity");
-    const _engines = __using(_stack, recordSpawnedEngines(engineRecordsPath((0, import_node_path27.dirname)(launch.statusPath)), clock, log));
+    const _engines = __using(_stack, recordSpawnedEngines(engineRecordsPath((0, import_node_path30.dirname)(launch.statusPath)), clock, log));
     const holder = {
       state: "idle",
       runId: null,
@@ -48415,16 +48913,16 @@ async function runHolder({
       client.on("error", () => holder.clients.delete(client));
     });
     removeStaleEndpoint(launch.endpoint);
-    await new Promise((resolve7, reject) => {
+    await new Promise((resolve9, reject) => {
       server.once("error", reject);
-      server.listen(launch.endpoint, () => resolve7());
+      server.listen(launch.endpoint, () => resolve9());
     });
     await writeStatus();
     log.info("holder.ready", { conversationId: launch.conversationId, pid: identity.pid });
-    await new Promise((resolve7) => exit.signal.addEventListener("abort", () => resolve7()));
+    await new Promise((resolve9) => exit.signal.addEventListener("abort", () => resolve9()));
     await driver.suspend?.().catch((error61) => log.warn("holder.driver_suspend_failed", { error: error61 }));
     for (const client of holder.clients) client.end();
-    await new Promise((resolve7) => server.close(() => resolve7()));
+    await new Promise((resolve9) => server.close(() => resolve9()));
     (0, import_node_fs11.rmSync)(launch.statusPath, { force: true });
     log.info("holder.suspended", { conversationId: launch.conversationId });
   } catch (_) {
@@ -48564,7 +49062,7 @@ function loadRuntimeConfig(env = process.env, totalMemoryBytes = (0, import_node
     providerProbes: ALAN_RUNTIME_PROVIDER_PROBES === "on",
     providerToolchain: ALAN_RUNTIME_PROVIDER_NODE !== void 0 && ALAN_RUNTIME_PROVIDER_NPM_CLI !== void 0 ? { node: ALAN_RUNTIME_PROVIDER_NODE, npmCli: ALAN_RUNTIME_PROVIDER_NPM_CLI } : null,
     home,
-    configHome: XDG_CONFIG_HOME ?? (0, import_node_path29.join)(home, ".config"),
+    configHome: XDG_CONFIG_HOME ?? (0, import_node_path32.join)(home, ".config"),
     codexHome: resolveCodexHome(CODEX_HOME, home),
     ...githubProxyConfig({ ALAN_RUNTIME_GITHUB_PROXY, XDG_CONFIG_HOME, GH_CONFIG_DIR }, home),
     gitGatewayUrl: ALAN_RUNTIME_GIT_GATEWAY_URL ?? null,
@@ -48574,13 +49072,13 @@ function loadRuntimeConfig(env = process.env, totalMemoryBytes = (0, import_node
   };
 }
 function resolveCodexHome(configuredHome, home) {
-  return configuredHome ?? (0, import_node_path29.join)(home, ".codex");
+  return configuredHome ?? (0, import_node_path32.join)(home, ".codex");
 }
 function githubProxyConfig(env, home) {
-  const configHome = env.XDG_CONFIG_HOME ?? (0, import_node_path29.join)(home, ".config");
+  const configHome = env.XDG_CONFIG_HOME ?? (0, import_node_path32.join)(home, ".config");
   return {
     githubProxy: env.ALAN_RUNTIME_GITHUB_PROXY === "on",
-    ghConfigDir: env.GH_CONFIG_DIR ?? (0, import_node_path29.join)(configHome, "gh")
+    ghConfigDir: env.GH_CONFIG_DIR ?? (0, import_node_path32.join)(configHome, "gh")
   };
 }
 function serviceEnvironment(env, profile) {
@@ -48679,7 +49177,7 @@ async function loadStoredAccess(paths, access3 = { exec: systemExec }) {
 }
 
 // src/cli/commands/hold.ts
-var import_node_path30 = require("path");
+var import_node_path33 = require("path");
 init_agent2();
 init_runtime_v2();
 async function machineAccess(paths, log, conversationId, transport) {
@@ -48737,7 +49235,7 @@ async function runHold(argv) {
     const config2 = loadRuntimeConfig();
     const paths = runtimePaths(config2.stateDir);
     const log = __using(_stack, openFileLog(
-      (0, import_node_path30.join)(paths.logs, `holder-${launch.value.conversationId}.jsonl`),
+      (0, import_node_path33.join)(paths.logs, `holder-${launch.value.conversationId}.jsonl`),
       config2.logLevel,
       systemClock
     ));
@@ -48748,7 +49246,7 @@ async function runHold(argv) {
     );
     const transport = __using(_stack, createHttpTransport());
     const access3 = await machineAccess(paths, log, launch.value.conversationId, transport);
-    const credentialPath = (0, import_node_path30.join)(paths.tmp, "mcp", `${launch.value.conversationId}.json`);
+    const credentialPath = (0, import_node_path33.join)(paths.tmp, "mcp", `${launch.value.conversationId}.json`);
     const managedMcp = __using(_stack, access3.managedMcp === void 0 ? void 0 : createHelperMcpAccess({
       managedMcp: access3.managedMcp,
       conversationId: launch.value.conversationId,