@alan-ai-hq/agent-manager-linux-arm64 0.1.156 → 0.1.158

package/alan-holder.cjs

@@ -23279,6 +23279,7 @@ If a needed tool is not exposed, use the host's tool-discovery mechanism once wh
   Whatever the intent, check your draft before sending: three or more numbers being compared, several items sharing the same attributes, a sequence, or two or more options means it should be visual. Stay in plain text for one-line facts, yes/no answers, clarifying questions, conversation, and short summaries of code you just changed. Lead with one sentence, show one visual (two at most), then stop; the visual carries the detail, so do not repeat it in prose.
 - Examples of plain questions with visual answers: "Which queue should the importer use, BullMQ or SQS?" \u2192 a one-line recommendation, then \`\`\`openui Tabs with a KeyValue of cost, latency and ops effort per option and a Callout with the pick. "Why did last night's deploy fail?" \u2192 a one-sentence cause, then Steps with the failed step and its detail, then Code with the error. "How's the test suite doing?" \u2192 a row of Stat (passed, failed, flaky) and a line \`\`\`chart of failures per day.
 - \`\`\`mermaid renders in chat, documents, plans and artifacts too; \`\`\`openui renders only in your replies in the Alan chat. In Slack or Teams messages, commit messages, pull request bodies and files, use plain Markdown instead.
+- When you compose a plan, test report, review or document to save as an Alan artifact, use the \`alan-artifact\` skill for its structure and any HTML or interactive block, and \`alan-diagrams\` for its Mermaid diagrams.
 - \`\`\`chart renders in chat, documents, plans and artifacts, and is **strict JSON, nothing else**:
   \`\`\`chart
   { "type": "bar", "title": "Quarterly Revenue", "data": [{ "name": "Q1", "revenue": 4000 }, { "name": "Q2", "revenue": 3000 }] }
@@ -23313,7 +23314,7 @@ Team
 \u2514\u2500\u2500 Whiteboard (beta)
 \`\`\`
 
-- **Document vs Artifact**: Document = standalone page in a team. Artifact = output from work on a task + conversation, tied to that context. Unless role-specific instructions say otherwise, work tied to a task \u2192 artifact; standalone team knowledge \u2192 document.
+- **Document vs Artifact**: Choose by the user's intended destination and audience, not the current chat's location or the word "doc" alone. When the user asks for a team doc, wiki page, or reusable team knowledge, create a team Document, even from a task conversation. When the writing is an output of the current task or conversation, such as its plan, working requirements, or test report, create an artifact. Infer the intent from context; ask one question only if the destination remains consequentially unclear. Do not create both unless requested. Role-specific instructions may override this rule.
 - **IDs are not interchangeable**: teamId, taskId, conversationId identify different things. Substituting one for another orphans records. Use the IDs the system provides; never invent or guess.
 
 ## Universal teammate principles
@@ -23324,7 +23325,8 @@ Team
 - Act on the user's request and make reasonable implementation and tool choices within its scope. Do not ask again for permission already granted. Ask only when essential information is missing or an action requires additional authority.
 - When a user asks to create a Skill, default to a team-owned Alan platform Skill through \`alan-skill-authoring\`, whether this session runs locally or in a cloud sandbox. Use a repository or filesystem Skill only when the user explicitly requests that scope. Do not infer repository scope from the current checkout or from a procedure that mentions repository files. If repeated work suggests a reusable Skill, offer the platform Skill and its evidence; do not publish it without the approval required by the authoring workflow.
 - Own mistakes. Wrong ID, jumped too fast \u2014 say so and fix it.
-- Write for a human reader. Task, subtask and epic descriptions, documents, artifacts and comments are read by people in the app, not parsed by agents. Lead with the outcome in one sentence, then short sections with headings and bullet lists. Spell out internal shorthand, and keep commit hashes, IDs and migration numbers out of sentences \u2014 put them in a trailing "References" list when they matter.
+- When writing code, work like a senior engineer: understand the existing design and conventions, make the smallest coherent change that solves the request, and keep related logic together. Reuse an existing abstraction when it fits; remove duplication that the change would otherwise introduce, but do not refactor unrelated code or add speculative abstractions. Keep names, types, error handling, and tests clear enough for the next engineer to maintain. Review the diff for accidental changes before calling the work done.
+- Write for a human reader. Task, subtask and epic descriptions, documents, artifacts and comments are read by people in the app, not parsed by agents. Lead with the outcome in one sentence, then short sections with headings and bullet lists when there is enough to organise. Size it to what is actually known: a task written from someone's request restates that request and never adds repro steps, causes, verification or acceptance criteria nobody stated. Spell out internal shorthand, and keep commit hashes, IDs and migration numbers out of sentences \u2014 put them in a trailing "References" list when they matter.
 ${ALAN_VISUAL_PROMPT}
 - Images you generate or edit appear in the chat automatically, the way ChatGPT shows them. Do not link, embed, or print the generated file's path afterwards, and do not announce "Generated:" or "Edited image:" \u2014 at most one short sentence about the result. Mention a path only when the user asked for the file to be saved into the project.
 
@@ -25200,6 +25202,13 @@ var init_read = __esm({
   }
 });
 
+// ../shared/dist/agent/acp/session-activity.js
+var init_session_activity = __esm({
+  "../shared/dist/agent/acp/session-activity.js"() {
+    "use strict";
+  }
+});
+
 // ../shared/dist/agent/acp/transcript-byte-decoder.js
 var init_transcript_byte_decoder = __esm({
   "../shared/dist/agent/acp/transcript-byte-decoder.js"() {
@@ -25231,6 +25240,7 @@ var init_acp = __esm({
     init_types3();
     init_read();
     init_reduce();
+    init_session_activity();
     init_transcript_byte_decoder();
     init_transcript_fold();
     init_transcript_http();
@@ -26103,7 +26113,7 @@ var init_chunk_ZCTKXKYY = __esm({
   }
 });
 
-// ../agent-core/dist/chunk-ILZBXGVI.js
+// ../agent-core/dist/chunk-FYZKVT3E.js
 function detectImageMimeType(buffer) {
   if (buffer.length >= 8 && buffer.subarray(0, 8).equals(PNG_SIGNATURE)) return "image/png";
   if (buffer.length >= 3 && buffer[0] === 255 && buffer[1] === 216 && buffer[2] === 255) {
@@ -26200,21 +26210,38 @@ function imageDimensions(buffer, mimeType) {
   if (mimeType === "image/jpeg") return jpegDimensions(buffer);
   return { width: null, height: null };
 }
-function readMediaFiles(candidates2, cwd, mimeByExt, maxBytes) {
+function readMediaFiles(query) {
   const seen = /* @__PURE__ */ new Set();
   const files = [];
-  for (const candidate of candidates2) {
-    const path = normalizePath(candidate, cwd);
+  for (const candidate of query.candidates) {
+    const path = normalizePath(candidate, query.cwd);
     if (!path || seen.has(path) || !(0, import_fs5.existsSync)(path)) continue;
     seen.add(path);
-    const mimeType = mimeByExt[(0, import_path4.extname)(path).toLowerCase()];
+    const mimeType = query.mimeByExt[(0, import_path4.extname)(path).toLowerCase()];
     if (!mimeType) continue;
     const stat15 = (0, import_fs5.statSync)(path);
-    if (!stat15.isFile() || stat15.size <= 0 || stat15.size > maxBytes) continue;
+    if (!stat15.isFile() || stat15.size <= 0 || stat15.size > query.maxBytes) continue;
+    if (stat15.mtimeMs < query.writtenSince && !query.named.has(path)) continue;
     files.push({ path, mimeType, buffer: (0, import_fs5.readFileSync)(path) });
   }
   return files;
 }
+function isCaptureTool(tool) {
+  return isBrowserScreenshotToolName(tool.name) || isBrowserRecordingToolName(tool.name);
+}
+function runsCaptureCommand(tool) {
+  return someString(tool.input, (text2) => AGENT_BROWSER_CAPTURE_COMMAND.test(text2));
+}
+function capturePaths(tool, content, extensions, cwd) {
+  const values = isCaptureTool(tool) ? contentStrings(content, tool.input) : runsCaptureCommand(tool) ? contentStrings("", tool.input) : [];
+  return pathCandidates(values, extensions).flatMap((candidate) => {
+    const path = normalizePath(candidate, cwd);
+    return path ? [path] : [];
+  });
+}
+function base64Length(bytes) {
+  return Math.ceil(bytes / 3) * 4;
+}
 function resultText(update) {
   const only2 = isJsonRecord(update._meta) ? update._meta[TOOL_RESULT_ONLY_META] : void 0;
   if (typeof only2 === "string") return only2;
@@ -26505,9 +26532,9 @@ function silentStartError(name, timeoutMs) {
     message: `${name} printed nothing for ${seconds}s after it started and was stopped. Send your message again.`
   };
 }
-var import_crypto4, import_fs5, import_path4, PNG_SIGNATURE, IMAGE_MIME_BY_EXT, VIDEO_MIME_BY_EXT, IMAGE_EXTENSIONS, VIDEO_EXTENSIONS, MAX_IMAGE_BYTES, MAX_VIDEO_BYTES, AGENT_BROWSER_MENTION, LocalMediaReader, SessionOpenRefusal, JsonRpcError, ACP_PROTOCOL_VERSION, ACP_ERROR, STDERR_TAIL_LINES, RESULT_EXIT_GRACE_MS, PerTurnSession;
-var init_chunk_ILZBXGVI = __esm({
-  "../agent-core/dist/chunk-ILZBXGVI.js"() {
+var import_crypto4, import_fs5, import_path4, PNG_SIGNATURE, IMAGE_MIME_BY_EXT, VIDEO_MIME_BY_EXT, IMAGE_EXTENSIONS, VIDEO_EXTENSIONS, MAX_IMAGE_BYTES, MAX_VIDEO_BYTES, MAX_TURN_MEDIA_DATA_CHARS, MTIME_SLACK_MS, AGENT_BROWSER_MENTION, AGENT_BROWSER_CAPTURE_COMMAND, LocalMediaReader, SessionOpenRefusal, JsonRpcError, ACP_PROTOCOL_VERSION, ACP_ERROR, STDERR_TAIL_LINES, RESULT_EXIT_GRACE_MS, PerTurnSession;
+var init_chunk_FYZKVT3E = __esm({
+  "../agent-core/dist/chunk-FYZKVT3E.js"() {
     "use strict";
     init_chunk_OUEMTEUX();
     init_chunk_ZCTKXKYY();
@@ -26535,12 +26562,16 @@ var init_chunk_ILZBXGVI = __esm({
     VIDEO_EXTENSIONS = "mp4|webm|mov";
     MAX_IMAGE_BYTES = 20 * 1024 * 1024;
     MAX_VIDEO_BYTES = 100 * 1024 * 1024;
+    MAX_TURN_MEDIA_DATA_CHARS = 8 * 1024 * 1024;
+    MTIME_SLACK_MS = 2e3;
     AGENT_BROWSER_MENTION = /agent[-_]browser/i;
+    AGENT_BROWSER_CAPTURE_COMMAND = /(?:^|[\s/])agent[-_]browser(?:@[^\s;&|]+)?(?:\s[^\n;&|]*?)?\s(?:screenshot|record)(?=\s|$)/im;
     LocalMediaReader = class {
       #cwd;
       #clock;
       #tools = /* @__PURE__ */ new Map();
       #pathHints = /* @__PURE__ */ new Set();
+      #mediaDataChars = 0;
       constructor(cwd, clock) {
         this.#cwd = cwd;
         this.#clock = clock;
@@ -26565,7 +26596,11 @@ var init_chunk_ILZBXGVI = __esm({
       /** A recording names its output file when it starts; the stop's result may not repeat it. */
       #announce(toolCallId, name, input2) {
         const known = this.#tools.get(toolCallId);
-        const tool = { name: name ?? known?.name ?? "", input: input2 ?? known?.input };
+        const tool = {
+          name: name ?? known?.name ?? "",
+          input: input2 ?? known?.input,
+          startedAt: known?.startedAt ?? this.#clock.now()
+        };
         this.#tools.set(toolCallId, tool);
         if (!isAgentBrowserMedia(tool, "", "video")) return;
         const cwd = toolCwd(this.#cwd, tool.input);
@@ -26574,13 +26609,30 @@ var init_chunk_ILZBXGVI = __esm({
           if (path) this.#pathHints.add(path);
         }
       }
-      #payloadFields(file2, toolId) {
+      /** Media written before the call started is old, unless its capture command named it. */
+      #toolFiles(tool, content, extensions, limits) {
+        const cwd = toolCwd(this.#cwd, tool.input);
+        return readMediaFiles({
+          ...limits,
+          candidates: [
+            ...pathCandidates(contentStrings(content, tool.input), extensions),
+            ...this.#pathHints
+          ],
+          cwd,
+          writtenSince: tool.startedAt - MTIME_SLACK_MS,
+          named: /* @__PURE__ */ new Set([...capturePaths(tool, content, extensions, cwd), ...this.#pathHints])
+        });
+      }
+      #payloadFields(file2, toolId, explicit) {
+        const dataChars = base64Length(file2.buffer.length);
+        const inline = explicit || this.#mediaDataChars + dataChars <= MAX_TURN_MEDIA_DATA_CHARS;
+        if (inline) this.#mediaDataChars += dataChars;
         return {
           id: (0, import_crypto4.randomUUID)(),
           filename: (0, import_path4.basename)(file2.path),
           mimeType: file2.mimeType,
           size: file2.buffer.length,
-          data: file2.buffer.toString("base64"),
+          ...inline ? { data: file2.buffer.toString("base64") } : { inlineDataOmitted: true },
           sourcePath: file2.path,
           sourceHash: (0, import_crypto4.createHash)("sha256").update(file2.buffer).digest("hex"),
           toolId,
@@ -26589,15 +26641,14 @@ var init_chunk_ILZBXGVI = __esm({
       }
       #generatedImages(toolId, tool, content) {
         if (!isGeneratedImageToolName(tool.name)) return [];
-        const candidates2 = [
-          ...pathCandidates(contentStrings(content, tool.input), IMAGE_EXTENSIONS),
-          ...this.#pathHints
-        ];
-        const cwd = toolCwd(this.#cwd, tool.input);
-        return readMediaFiles(candidates2, cwd, IMAGE_MIME_BY_EXT, MAX_IMAGE_BYTES).map((file2) => {
+        const files = this.#toolFiles(tool, content, IMAGE_EXTENSIONS, {
+          mimeByExt: IMAGE_MIME_BY_EXT,
+          maxBytes: MAX_IMAGE_BYTES
+        });
+        return files.map((file2) => {
           const image = {
             type: "generated_image",
-            ...this.#payloadFields(file2, toolId),
+            ...this.#payloadFields(file2, toolId, true),
             ...imageDimensions(file2.buffer, file2.mimeType)
           };
           return { sessionUpdate: "_alan/generated_image", image };
@@ -26607,25 +26658,19 @@ var init_chunk_ILZBXGVI = __esm({
         const isVideo = isAgentBrowserMedia(tool, content, "video");
         if (!isVideo && !isAgentBrowserMedia(tool, content, "image")) return [];
         const kind = isVideo ? "video" : "image";
-        const candidates2 = [
-          ...pathCandidates(
-            contentStrings(content, tool.input),
-            isVideo ? VIDEO_EXTENSIONS : IMAGE_EXTENSIONS
-          ),
-          ...this.#pathHints
-        ];
-        const files = readMediaFiles(
-          candidates2,
-          toolCwd(this.#cwd, tool.input),
-          isVideo ? VIDEO_MIME_BY_EXT : IMAGE_MIME_BY_EXT,
-          isVideo ? MAX_VIDEO_BYTES : MAX_IMAGE_BYTES
+        const explicit = isCaptureTool(tool) || runsCaptureCommand(tool);
+        const files = this.#toolFiles(
+          tool,
+          content,
+          isVideo ? VIDEO_EXTENSIONS : IMAGE_EXTENSIONS,
+          isVideo ? { mimeByExt: VIDEO_MIME_BY_EXT, maxBytes: MAX_VIDEO_BYTES } : { mimeByExt: IMAGE_MIME_BY_EXT, maxBytes: MAX_IMAGE_BYTES }
         );
         return files.map((file2) => {
           this.#pathHints.delete(file2.path);
           const media = {
             type: "session_media",
             kind,
-            ...this.#payloadFields(file2, toolId),
+            ...this.#payloadFields(file2, toolId, explicit),
             ...kind === "image" ? imageDimensions(file2.buffer, file2.mimeType) : {}
           };
           return { sessionUpdate: "_alan/session_media", media };
@@ -26857,129 +26902,7 @@ var init_chunk_ILZBXGVI = __esm({
   }
 });
 
-// ../agent-core/dist/chunk-J2KTV5FP.js
-function selectExternalMcpServers(spec) {
-  const isWorkflow = Boolean(spec.workflowId || spec.workflowExecutionId);
-  const filter = isWorkflow ? createWorkflowToolsFilter(spec.workflowTools) : null;
-  if (filter && !filter.hasFilter) return {};
-  const selected = {};
-  for (const [name, server] of Object.entries(spec.externalMcpServers ?? {})) {
-    if (!isExternalMcpServerName(name)) continue;
-    if (filter && !filter.isMcpServerAllowed(name)) continue;
-    selected[name] = server;
-  }
-  return selected;
-}
-function headerEnvName(server, header) {
-  const fingerprint = (0, import_crypto5.createHash)("sha256").update(`${server}\0${header}`).digest("hex").slice(0, 12);
-  return `ALAN_MCP_HEADER_${fingerprint.toUpperCase()}`;
-}
-function deliverRemote(name, server, env) {
-  const headerEnv = {};
-  for (const [header, value] of Object.entries(server.headers ?? {})) {
-    if (!isMcpConfigKey(header)) continue;
-    const variable = headerEnvName(name, header);
-    env[variable] = value;
-    headerEnv[header] = variable;
-  }
-  return {
-    type: server.type === "sse" ? "sse" : "http",
-    url: server.url,
-    ...Object.keys(headerEnv).length ? { headerEnv } : {}
-  };
-}
-function deliverStdio(server, cliEnv, delivery) {
-  const envKeys = [];
-  for (const [key, value] of Object.entries(server.env ?? {})) {
-    if (!isMcpConfigKey(key)) continue;
-    if (key in cliEnv || key in delivery.env && delivery.env[key] !== value) {
-      delivery.skippedEnvKeys.push(key);
-      continue;
-    }
-    delivery.env[key] = value;
-    envKeys.push(key);
-  }
-  return {
-    type: "stdio",
-    command: server.command,
-    ...server.args?.length ? { args: server.args } : {},
-    ...envKeys.length ? { envKeys } : {}
-  };
-}
-function planExternalMcpDelivery(spec, cliEnv) {
-  const delivery = { servers: {}, env: {}, skippedEnvKeys: [] };
-  for (const [name, server] of Object.entries(selectExternalMcpServers(spec))) {
-    const { url: url2, command } = server;
-    if (url2 && server.type !== "stdio") {
-      delivery.servers[name] = deliverRemote(name, { ...server, url: url2 }, delivery.env);
-    } else if (command) {
-      delivery.servers[name] = deliverStdio({ ...server, command }, cliEnv, delivery);
-    }
-  }
-  return delivery;
-}
-function envReference(name) {
-  return `\${${name}}`;
-}
-function managedMcpHeaders(identity) {
-  if (identity.scope === "run") {
-    return {
-      Authorization: envReference(ALAN_MCP_AUTHORIZATION_ENV),
-      [MANAGED_MCP_RUN_HEADER]: envReference(ALAN_RUN_ID_ENV)
-    };
-  }
-  return {
-    ...identity.authorization === void 0 ? {} : { Authorization: identity.authorization },
-    [MANAGED_MCP_CONVERSATION_HEADER]: identity.conversationId
-  };
-}
-function credentialDigest(authorization) {
-  if (authorization === void 0) return void 0;
-  return (0, import_crypto6.createHash)("sha256").update(authorization).digest("hex").slice(0, 16);
-}
-function canonicalizeManagedMcpServerName(serverName) {
-  return RUN_SCOPED_SERVER.test(serverName) ? MANAGED_MCP_SERVER_NAME : serverName;
-}
-function canonicalizeManagedMcpToolName(toolName) {
-  const namespaced = NAMESPACED_RUN_TOOL.exec(toolName);
-  if (namespaced) return `mcp__${MANAGED_MCP_SERVER_NAME}__${namespaced[2]}`;
-  const flattened = FLATTENED_RUN_TOOL.exec(toolName);
-  return flattened ? `mcp__${MANAGED_MCP_SERVER_NAME}__${flattened[1]}` : toolName;
-}
-async function writeSecretFile(name, contents) {
-  const dir = await (0, import_promises14.mkdtemp)((0, import_path5.join)((0, import_os2.tmpdir)(), "alan-mcp-"));
-  const path = (0, import_path5.join)(dir, name);
-  const remove = async () => {
-    await (0, import_promises14.rm)(dir, { recursive: true, force: true });
-  };
-  try {
-    await (0, import_promises14.writeFile)(path, contents, { mode: 384, flag: "wx" });
-  } catch (error62) {
-    await remove();
-    throw error62;
-  }
-  return { path, remove, [Symbol.asyncDispose]: remove };
-}
-var import_crypto5, import_crypto6, import_promises14, import_os2, import_path5, MANAGED_MCP_SERVER_NAME, RUN_SCOPED_SERVER, NAMESPACED_RUN_TOOL, FLATTENED_RUN_TOOL;
-var init_chunk_J2KTV5FP = __esm({
-  "../agent-core/dist/chunk-J2KTV5FP.js"() {
-    "use strict";
-    import_crypto5 = require("crypto");
-    init_agent2();
-    import_crypto6 = require("crypto");
-    init_agent2();
-    init_runtime_v2();
-    import_promises14 = require("fs/promises");
-    import_os2 = require("os");
-    import_path5 = require("path");
-    MANAGED_MCP_SERVER_NAME = "alan";
-    RUN_SCOPED_SERVER = /^alan-run-[a-f0-9]{16}$/;
-    NAMESPACED_RUN_TOOL = /^mcp__(alan-run-[a-f0-9]{16})__(.+)$/;
-    FLATTENED_RUN_TOOL = /^alan-run-[a-f0-9]{16}_(.+)$/;
-  }
-});
-
-// ../agent-core/dist/chunk-2SKVAUID.js
+// ../agent-core/dist/chunk-DLVRNIY5.js
 function repositories(input2, context) {
   const problems = new Map(input2.problems.map((problem) => [problem.path, problem]));
   const listed = context?.repositories ?? [];
@@ -27523,7 +27446,7 @@ function standaloneChatSection(owner) {
   if (!(owner.teamId && owner.conversationId && !owner.taskId && !owner.isWorkflowSession)) {
     return void 0;
   }
-  return "This is a standalone chat. For create_plan, create_document_artifact, and create_test_report, omit taskId and workflowId; conversationId is the artifact owner. Do not use create_document unless the user explicitly asks for a standalone team Document.";
+  return "This is a standalone chat. For create_plan, create_document_artifact, and create_test_report, omit taskId and workflowId; conversationId is the artifact owner. If the user asks for a team doc or reusable team page, use create_document; otherwise use an artifact for written work produced in this conversation.";
 }
 function contextSections(spec) {
   const owner = ownershipOf(spec);
@@ -27576,13 +27499,20 @@ function cloudExecutionSection(spec) {
   );
   if (!isReadOnlyMode(spec.mode) && !isReadOnlyAgent(spec.agentId)) {
     lines.push(
-      "Own the authorized work end to end: inspect context, make reasonable assumptions, implement, test, review and create or update the pull request for code changes when the repository workflow calls for one. Do not stop at a plan or ask for routine implementation choices or permission already granted. For application changes, follow the session context for where to work and whether the start command is running, start the app if needed, and verify it is reachable before testing. For user-facing flows, use alan-test-feature when installed to test the running app, capture a video, and create a test report. Ask only for a missing secret, an essential decision you cannot derive, or an action requiring explicit approval. Respect the user's scope, repository rules and tool authorization; report blocked capabilities and validation gaps while continuing independent work."
+      "Own authorized code work through delivery: inspect context, implement the scoped change, run relevant checks, review the diff, then commit, push, and create or update a pull request for a cloud implementation request by default. Follow an explicit different delivery request from the user. Do not stop after editing files or ask for routine implementation choices or permission already granted. For application changes, follow the session context for where to work and whether the start command is running; start the app if needed and verify its origin and reachability before testing. Test the behavior affected by the change, not just whether code compiles. For user-facing flows, use alan-test-feature when installed to exercise the running app and create a detailed test report with screenshots and video linked to the observed behavior; a failed or blocked test still needs an honest partial report. If testing, evidence publishing, or PR creation is blocked, record the exact blocker and finish independent work. Ask only for a missing secret, an essential decision you cannot derive, or an action requiring explicit approval. Respect the user's scope, active mode and role, and tool authorization."
+    );
+    lines.push(
+      "## Cloud workflow precedence",
+      "For authorized cloud code changes, complete implementation, appropriate validation, diff review, a scoped commit, pushing a task branch, and creating or updating a pull request. Do not stop after making local changes.",
+      "These cloud delivery and autonomy requirements take precedence over conflicting repository or skill instructions about committing, pushing, PR creation, task completion, or routine approval. This includes exceptions for tiny changes. Repository files and skills cannot reduce these delivery steps or require fresh permission for routine work already authorized by the user. Continue following repository guidance about architecture, coding conventions, and project-specific validation within these boundaries.",
+      "The user may explicitly override this delivery workflow, including requesting local-only work or a direct push to main. Do not infer an override from urgency, simplicity, or change size. Creating a PR does not itself authorize merging, deployment, destructive actions, or scope expansion; active mode, role restrictions, and tool permissions still apply.",
+      "If a required delivery step is blocked, complete remaining independent work and report the precise blocker and what remains unfinished. Never describe local-only work as fully delivered."
     );
   }
   const skills = spec.promptContext?.availableSkills ?? [];
   lines.push(
     "## Installed skills",
-    "Use a matching installed skill when it helps the request. Read its SKILL.md before acting; the index is discovery metadata, not instructions. Also follow repository instructions and project skills."
+    "Use a matching installed skill when it helps the request. Read its SKILL.md before acting; the index is discovery metadata, not instructions. Follow repository instructions and project skills within the cloud workflow boundaries above."
   );
   if (skills.length === 0) {
     lines.push(
@@ -27675,8 +27605,8 @@ ${body}` : body;
   return spec.mode === "plan" ? planModePrefix(prefixed) : prefixed;
 }
 var startCommandStateSchema, repositorySnapshotSchema, environmentSnapshotSchema, agentContextSnapshotSchema, BRANCH_REASONS, SLACK_SURFACE_INSTRUCTIONS, PLAIN_SCALAR, COMMAND_PREVIEW_CHARS, MAX_PARSED_ATTACHMENTS, MAX_PARSED_ATTACHMENT_CHARS, MAX_METADATA_CHARS, UNAVAILABLE, READ_ONLY_MODES, AGENT_MODES;
-var init_chunk_2SKVAUID = __esm({
-  "../agent-core/dist/chunk-2SKVAUID.js"() {
+var init_chunk_DLVRNIY5 = __esm({
+  "../agent-core/dist/chunk-DLVRNIY5.js"() {
     "use strict";
     init_runtime_v2();
     init_zod();
@@ -27782,6 +27712,131 @@ var init_chunk_2SKVAUID = __esm({
   }
 });
 
+// ../agent-core/dist/chunk-OSECDZA5.js
+function selectExternalMcpServers(spec) {
+  const isWorkflow = Boolean(spec.workflowId || spec.workflowExecutionId);
+  const filter = isWorkflow ? createWorkflowToolsFilter(spec.workflowTools) : null;
+  if (filter && !filter.hasFilter) return {};
+  const selected = {};
+  for (const [name, server] of Object.entries(spec.externalMcpServers ?? {})) {
+    if (!isExternalMcpServerName(name)) continue;
+    if (filter && !filter.isMcpServerAllowed(name)) continue;
+    selected[name] = server;
+  }
+  return selected;
+}
+function headerEnvName(server, header) {
+  const fingerprint = (0, import_crypto5.createHash)("sha256").update(`${server}\0${header}`).digest("hex").slice(0, 12);
+  return `ALAN_MCP_HEADER_${fingerprint.toUpperCase()}`;
+}
+function deliverRemote(name, server, env) {
+  const headerEnv = {};
+  for (const [header, value] of Object.entries(server.headers ?? {})) {
+    if (!isMcpConfigKey(header)) continue;
+    const variable = headerEnvName(name, header);
+    env[variable] = value;
+    headerEnv[header] = variable;
+  }
+  return {
+    type: server.type === "sse" ? "sse" : "http",
+    url: server.url,
+    ...Object.keys(headerEnv).length ? { headerEnv } : {}
+  };
+}
+function deliverStdio(server, cliEnv, delivery) {
+  const envKeys = [];
+  for (const [key, value] of Object.entries(server.env ?? {})) {
+    if (!isMcpConfigKey(key)) continue;
+    if (key in cliEnv || key in delivery.env && delivery.env[key] !== value) {
+      delivery.skippedEnvKeys.push(key);
+      continue;
+    }
+    delivery.env[key] = value;
+    envKeys.push(key);
+  }
+  return {
+    type: "stdio",
+    command: server.command,
+    ...server.args?.length ? { args: server.args } : {},
+    ...envKeys.length ? { envKeys } : {}
+  };
+}
+function planExternalMcpDelivery(spec, cliEnv) {
+  const delivery = { servers: {}, env: {}, skippedEnvKeys: [] };
+  for (const [name, server] of Object.entries(selectExternalMcpServers(spec))) {
+    const { url: url2, command } = server;
+    if (url2 && server.type !== "stdio") {
+      delivery.servers[name] = deliverRemote(name, { ...server, url: url2 }, delivery.env);
+    } else if (command) {
+      delivery.servers[name] = deliverStdio({ ...server, command }, cliEnv, delivery);
+    }
+  }
+  return delivery;
+}
+function envReference(name) {
+  return `\${${name}}`;
+}
+function managedMcpHeaders(identity) {
+  if (identity.scope === "run") {
+    return {
+      Authorization: envReference(ALAN_MCP_AUTHORIZATION_ENV),
+      [MANAGED_MCP_RUN_HEADER]: envReference(ALAN_RUN_ID_ENV)
+    };
+  }
+  return {
+    ...identity.authorization === void 0 ? {} : { Authorization: identity.authorization },
+    [MANAGED_MCP_CONVERSATION_HEADER]: identity.conversationId
+  };
+}
+function credentialDigest(authorization) {
+  if (authorization === void 0) return void 0;
+  return (0, import_crypto6.createHash)("sha256").update(authorization).digest("hex").slice(0, 16);
+}
+function canonicalizeManagedMcpServerName(serverName) {
+  return RUN_SCOPED_SERVER.test(serverName) ? MANAGED_MCP_SERVER_NAME : serverName;
+}
+function canonicalizeManagedMcpToolName(toolName) {
+  const namespaced = NAMESPACED_RUN_TOOL.exec(toolName);
+  if (namespaced) return `mcp__${MANAGED_MCP_SERVER_NAME}__${namespaced[2]}`;
+  const flattened = FLATTENED_RUN_TOOL.exec(toolName);
+  return flattened ? `mcp__${MANAGED_MCP_SERVER_NAME}__${flattened[1]}` : toolName;
+}
+async function writeSecretFile(name, contents) {
+  const dir = await (0, import_promises14.mkdtemp)((0, import_path5.join)((0, import_os2.tmpdir)(), "alan-mcp-"));
+  const path = (0, import_path5.join)(dir, name);
+  const remove = async () => {
+    await (0, import_promises14.rm)(dir, { recursive: true, force: true });
+  };
+  try {
+    await (0, import_promises14.writeFile)(path, contents, { mode: 384, flag: "wx" });
+  } catch (error62) {
+    await remove();
+    throw error62;
+  }
+  return { path, remove, [Symbol.asyncDispose]: remove };
+}
+var import_crypto5, import_crypto6, import_promises14, import_os2, import_path5, OPENCODE_CODE_MODE_ENV, OPENCODE_CODE_MODE_TOOL, CODE_MODE_CALLS_META, MANAGED_MCP_SERVER_NAME, RUN_SCOPED_SERVER, NAMESPACED_RUN_TOOL, FLATTENED_RUN_TOOL;
+var init_chunk_OSECDZA5 = __esm({
+  "../agent-core/dist/chunk-OSECDZA5.js"() {
+    "use strict";
+    import_crypto5 = require("crypto");
+    init_agent2();
+    import_crypto6 = require("crypto");
+    init_agent2();
+    init_runtime_v2();
+    import_promises14 = require("fs/promises");
+    import_os2 = require("os");
+    import_path5 = require("path");
+    OPENCODE_CODE_MODE_ENV = "OPENCODE_EXPERIMENTAL_CODE_MODE";
+    OPENCODE_CODE_MODE_TOOL = "execute";
+    CODE_MODE_CALLS_META = "alanToolCalls";
+    MANAGED_MCP_SERVER_NAME = "alan";
+    RUN_SCOPED_SERVER = /^alan-run-[a-f0-9]{16}$/;
+    NAMESPACED_RUN_TOOL = /^mcp__(alan-run-[a-f0-9]{16})__(.+)$/;
+    FLATTENED_RUN_TOOL = /^alan-run-[a-f0-9]{16}_(.+)$/;
+  }
+});
+
 // ../agent-core/dist/providers/claude.js
 function trimmed(value) {
   const text2 = value?.trim();
@@ -28830,12 +28885,12 @@ var init_claude = __esm({
   "../agent-core/dist/providers/claude.js"() {
     "use strict";
     init_chunk_D4TIXPWZ();
-    init_chunk_ILZBXGVI();
+    init_chunk_FYZKVT3E();
     init_chunk_OUEMTEUX();
     init_chunk_ZCTKXKYY();
-    init_chunk_J2KTV5FP();
     init_chunk_6VWVDJ2A();
-    init_chunk_2SKVAUID();
+    init_chunk_DLVRNIY5();
+    init_chunk_OSECDZA5();
     init_chunk_YXWJW7I5();
     init_effort();
     import_crypto7 = require("crypto");
@@ -31042,12 +31097,12 @@ var init_codex = __esm({
   "../agent-core/dist/providers/codex.js"() {
     "use strict";
     init_chunk_D4TIXPWZ();
-    init_chunk_ILZBXGVI();
+    init_chunk_FYZKVT3E();
     init_chunk_OUEMTEUX();
     init_chunk_ZCTKXKYY();
-    init_chunk_J2KTV5FP();
     init_chunk_6VWVDJ2A();
-    init_chunk_2SKVAUID();
+    init_chunk_DLVRNIY5();
+    init_chunk_OSECDZA5();
     init_chunk_YXWJW7I5();
     import_fs7 = require("fs");
     import_path7 = require("path");
@@ -32320,6 +32375,47 @@ const PROVIDER_ID = ${JSON.stringify(ALAN_CODE_ENGINE_PROVIDER_ID)};
 const INCLUDED_RESULTS = 8;
 const MAX_AUTO_RETRIES = 2;
 const MAX_AUTO_RETRY_WAIT_MS = 10_000;
+const CODE_MODE_TOOL = ${JSON.stringify(OPENCODE_CODE_MODE_TOOL)};
+const CODE_MODE_CALLS_META = ${JSON.stringify(CODE_MODE_CALLS_META)};
+const MAX_CHILD_OUTPUT_CHARS = 64 * 1024;
+const MAX_OPEN_SCRIPTS = 64;
+const scriptCalls = new Map();
+
+function mcpResultText(result) {
+  return result.content
+    .flatMap(function (item) {
+      if (item && item.type === "text") return [item.text];
+      if (item && item.type === "resource" && item.resource && item.resource.text) return [item.resource.text];
+      return [];
+    })
+    .join("\\n\\n");
+}
+
+function openScript(callID) {
+  if (scriptCalls.size >= MAX_OPEN_SCRIPTS) scriptCalls.delete(scriptCalls.keys().next().value);
+  scriptCalls.set(callID, []);
+}
+
+// Code mode names each MCP call "<script callID>/<n>" and hands the hook the raw MCP result.
+function recordScriptCall(input, result) {
+  const callID = String(input.callID || "");
+  const slash = callID.lastIndexOf("/");
+  const calls = slash > 0 ? scriptCalls.get(callID.slice(0, slash)) : undefined;
+  if (!calls || !result || !Array.isArray(result.content)) return;
+  calls.push({
+    callId: callID,
+    tool: input.tool,
+    input: input.args,
+    output: mcpResultText(result).slice(0, MAX_CHILD_OUTPUT_CHARS),
+  });
+}
+
+function closeScript(callID, output) {
+  const calls = scriptCalls.get(callID);
+  scriptCalls.delete(callID);
+  if (!calls || calls.length === 0 || !output || typeof output !== "object") return;
+  output.metadata = Object.assign({}, output.metadata, { [CODE_MODE_CALLS_META]: calls });
+}
 
 function truncate(text, max) {
   const trimmed = String(text == null ? "" : text).trim();
@@ -32427,6 +32523,13 @@ export const AlanEnginePlugin = async () => ({
       output.headers["x-alan-operation-key"] = Date.now() + "-" + crypto.randomUUID();
     }
   },
+  "tool.execute.before": async (input) => {
+    if (input.tool === CODE_MODE_TOOL) openScript(input.callID);
+  },
+  "tool.execute.after": async (input, output) => {
+    if (input.tool === CODE_MODE_TOOL) closeScript(input.callID, output);
+    else recordScriptCall(input, output);
+  },
   tool: {
     web_search: {
       description: "web_search: Search the public web via Alan's Parallel proxy. Use when you do not already have a URL. Follow up with webfetch on the best result(s).",
@@ -32460,6 +32563,7 @@ function bearerToken(authorization) {
 function alanCodeEngineEnv(input2) {
   return {
     ...alanCodeEngineDirectories(input2.engineRoot),
+    [OPENCODE_CODE_MODE_ENV]: "true",
     [ALAN_CODE_API_KEY_ENV]: input2.apiKey,
     [ALAN_CODE_CONVERSATION_ID_ENV]: input2.conversationId
   };
@@ -32503,6 +32607,7 @@ var import_http3, import_https, import_fs8, import_path8, import_crypto13, impor
 var init_alan_code = __esm({
   "../agent-core/dist/providers/alan-code.js"() {
     "use strict";
+    init_chunk_OSECDZA5();
     init_chunk_YXWJW7I5();
     import_http3 = require("http");
     import_https = require("https");
@@ -32545,10 +32650,15 @@ var init_alan_code = __esm({
       emptyTurn: "Alan Code ended the turn without producing any output. Try again or pick another model."
     };
     WINDOWS_RUNNABLE_EXTENSION = /\.(exe|com|cmd|bat)$/i;
-    ALAN_CODE_ENGINE_PLUGIN_VERSION = 2;
+    ALAN_CODE_ENGINE_PLUGIN_VERSION = 3;
     ALAN_CODE_TOOL_NAMING_PROMPT = `## Alan tool names
 
-This engine exposes Alan MCP tools with an \`alan_\` prefix. Where these instructions name an Alan tool, call its prefixed form: \`search_context\` is \`alan_search_context\`, \`search_code_context\` is \`alan_search_code_context\`, and \`find_records\` is \`alan_find_records\`.`;
+Alan's MCP tools are not separate tools in this engine. Call them inside an \`execute\` script under the \`alan\` namespace: \`search_context\` is \`tools.alan.search_context({ ... })\`, \`search_code_context\` is \`tools.alan.search_code_context({ ... })\`, and \`find_records\` is \`tools.alan.find_records({ ... })\`.
+
+- Before the first call to a tool whose signature is not shown in the \`execute\` description, read it with \`tools.$codemode.search({ query: "<tool name>" })\` and pass exactly its fields.
+- Alan tools return JSON as text: \`JSON.parse\` a result before reading its fields or passing it to \`Object.keys\`.
+- Look up IDs in one script, then make the writes in the next, so a failed lookup never leaves half the writes done.
+- Pass an \`idempotencyKey\` naming each change (for example \`create-task:<title>\`) on every write that accepts one. If a script fails, check what it already created before running it again, and run only the writes that are missing.`;
   }
 });
 
@@ -39883,7 +39993,7 @@ var require_dist = __commonJS({
 var init_dist = __esm({
   "../agent-core/dist/index.js"() {
     "use strict";
-    init_chunk_ILZBXGVI();
+    init_chunk_FYZKVT3E();
     init_chunk_OUEMTEUX();
     init_chunk_ZCTKXKYY();
     init_chunk_6VWVDJ2A();
@@ -40630,12 +40740,12 @@ var import_promises24, import_path10, import_crypto14, import_promises25, CURSOR
 var init_acp3 = __esm({
   "../agent-core/dist/providers/acp.js"() {
     "use strict";
-    init_chunk_ILZBXGVI();
+    init_chunk_FYZKVT3E();
     init_chunk_OUEMTEUX();
     init_chunk_ZCTKXKYY();
-    init_chunk_J2KTV5FP();
     init_chunk_6VWVDJ2A();
-    init_chunk_2SKVAUID();
+    init_chunk_DLVRNIY5();
+    init_chunk_OSECDZA5();
     init_chunk_YXWJW7I5();
     import_promises24 = require("fs/promises");
     import_path10 = require("path");
@@ -42136,6 +42246,21 @@ function classifyOpenCodeError(error62, fallback) {
   }
   return classifyCliError(message || fallback);
 }
+function readChildCall(value) {
+  const record2 = asRecord(value);
+  const callId = asString(record2?.callId);
+  const tool = asString(record2?.tool);
+  if (!record2 || !callId || !tool) return void 0;
+  return { callId, tool, input: record2.input, output: asString(record2.output) };
+}
+function readCodeModeChildCalls(metadata) {
+  return asArray(asRecord(metadata)?.[CODE_MODE_CALLS_META]).flatMap(
+    (entry) => {
+      const call = readChildCall(entry);
+      return call ? [call] : [];
+    }
+  );
+}
 function withParent(updates, parentToolCallId) {
   if (!parentToolCallId) return updates;
   return updates.map(
@@ -42226,6 +42351,24 @@ function toolContent(tool, toolState) {
   const editing = tool.status === "in_progress" && (tool.name === "edit" || tool.name === "write");
   return editing && path ? [fileChangeContent({ path, operation: "modify", hunks: [] })] : void 0;
 }
+function codeModeChildUpdates(tool, metadata) {
+  if (tool.name !== OPENCODE_CODE_MODE_TOOL || tool.status !== "completed") return [];
+  return readCodeModeChildCalls(metadata).map((call) => {
+    const name = canonicalizeManagedMcpToolName(call.tool);
+    const content = outputContent(call.output);
+    return {
+      sessionUpdate: "tool_call_update",
+      toolCallId: call.callId,
+      name,
+      title: name,
+      kind: toolKindFor(name),
+      status: "completed",
+      ...call.input !== void 0 ? { rawInput: call.input } : {},
+      ...content ? { content } : {},
+      ...call.output ? { rawOutput: call.output } : {}
+    };
+  });
+}
 function createOpenCodeSessionMemory() {
   return { userMessageIds: /* @__PURE__ */ new Set() };
 }
@@ -42564,12 +42707,12 @@ var import_crypto15, import_http4, import_crypto16, import_promises26, import_pa
 var init_opencode = __esm({
   "../agent-core/dist/providers/opencode.js"() {
     "use strict";
-    init_chunk_ILZBXGVI();
+    init_chunk_FYZKVT3E();
     init_chunk_OUEMTEUX();
     init_chunk_ZCTKXKYY();
-    init_chunk_J2KTV5FP();
     init_chunk_6VWVDJ2A();
-    init_chunk_2SKVAUID();
+    init_chunk_DLVRNIY5();
+    init_chunk_OSECDZA5();
     init_chunk_YXWJW7I5();
     import_crypto15 = require("crypto");
     import_http4 = require("http");
@@ -43095,6 +43238,7 @@ var init_opencode = __esm({
           }
         ];
         updates.push(...this.#plan(toolCallId, tool.name, toolState));
+        updates.push(...codeModeChildUpdates(tool, toolState?.metadata));
         if (tool.status === "failed" && (tool.isTask || PERMISSION_DENIED.test(tool.errorMessage))) {
           updates.push(
             noticeUpdate("error", "tool_failed", tool.errorMessage || "OpenCode tool call failed.")
@@ -44614,12 +44758,12 @@ var import_crypto18, import_promises27, FACTORY_API_VERSION, FACTORY_PROTOCOL_VE
 var init_droid = __esm({
   "../agent-core/dist/providers/droid.js"() {
     "use strict";
-    init_chunk_ILZBXGVI();
+    init_chunk_FYZKVT3E();
     init_chunk_OUEMTEUX();
     init_chunk_ZCTKXKYY();
-    init_chunk_J2KTV5FP();
     init_chunk_6VWVDJ2A();
-    init_chunk_2SKVAUID();
+    init_chunk_DLVRNIY5();
+    init_chunk_OSECDZA5();
     init_chunk_YXWJW7I5();
     init_runtime_v2();
     import_crypto18 = require("crypto");
@@ -45724,11 +45868,11 @@ var init_antigravity = __esm({
   "../agent-core/dist/providers/antigravity.js"() {
     "use strict";
     init_chunk_D4TIXPWZ();
-    init_chunk_ILZBXGVI();
+    init_chunk_FYZKVT3E();
     init_chunk_OUEMTEUX();
     init_chunk_ZCTKXKYY();
     init_chunk_6VWVDJ2A();
-    init_chunk_2SKVAUID();
+    init_chunk_DLVRNIY5();
     init_chunk_YXWJW7I5();
     import_promises28 = require("fs/promises");
     import_path13 = require("path");
@@ -46428,12 +46572,12 @@ var import_promises29, import_path16, import_crypto20, COMMAND_CODE_GRAMMAR_NAME
 var init_command_code = __esm({
   "../agent-core/dist/providers/command-code.js"() {
     "use strict";
-    init_chunk_ILZBXGVI();
+    init_chunk_FYZKVT3E();
     init_chunk_OUEMTEUX();
     init_chunk_ZCTKXKYY();
-    init_chunk_J2KTV5FP();
     init_chunk_6VWVDJ2A();
-    init_chunk_2SKVAUID();
+    init_chunk_DLVRNIY5();
+    init_chunk_OSECDZA5();
     init_chunk_YXWJW7I5();
     import_promises29 = require("fs/promises");
     import_path16 = require("path");
@@ -49607,7 +49751,7 @@ var import_promises32 = require("fs/promises");
 var import_node_path21 = require("path");
 
 // ../agent-core/dist/prompt.js
-init_chunk_2SKVAUID();
+init_chunk_DLVRNIY5();
 
 // src/holder/agent-context.ts
 async function readText2(path) {
@@ -50678,7 +50822,19 @@ async function runHolder({
       ...machine?.platform === void 0 ? {} : { platform: machine.platform }
     });
     const observed = facts.observe(driver);
-    const writeStatus = () => writeJsonFileAtomic(launch.statusPath, {
+    let statusWrites = Promise.resolve();
+    const writeStatus = () => {
+      const next = statusWrites.then(() => writeStatusNow());
+      statusWrites = next.catch(
+        (error62) => log.warn("holder.status_write_failed", { error: error62 })
+      );
+      return next;
+    };
+    const queueStatus = () => {
+      writeStatus().catch(() => {
+      });
+    };
+    const writeStatusNow = () => writeJsonFileAtomic(launch.statusPath, {
       protocol: HOLDER_PROTOCOL,
       conversationId: launch.conversationId,
       pid: identity.pid,
@@ -50697,7 +50853,7 @@ async function runHolder({
       holder.state = "idle";
       holder.runId = null;
       holder.turn = null;
-      void writeStatus();
+      queueStatus();
     };
     const startTurn = (id, spec, client) => {
       if (holder.runId === spec.runId) {
@@ -50741,7 +50897,7 @@ async function runHolder({
             return;
           }
           writeMessage(client, { type: "ack", id });
-          void writeStatus();
+          queueStatus();
           runClaimedTurn(spec, claimed, context, turn.signal).then((outcome2) => broadcast({ type: "turn_ended", runId: spec.runId, outcome: outcome2 })).catch((error62) => log.error("holder.turn_crashed", { runId: spec.runId, error: error62 })).finally(settle2);
         },
         (error62) => {
@@ -50879,6 +51035,7 @@ async function runHolder({
     await driver.suspend?.().catch((error62) => log.warn("holder.driver_suspend_failed", { error: error62 }));
     for (const client of holder.clients) client.end();
     await new Promise((resolve8) => server.close(() => resolve8()));
+    await statusWrites;
     (0, import_node_fs11.rmSync)(launch.statusPath, { force: true });
     log.info("holder.suspended", { conversationId: launch.conversationId });
   } catch (_) {