@alan-ai-hq/agent-manager-linux-x64 0.1.147 → 0.1.148

package/alan-holder.cjs

@@ -19060,21 +19060,21 @@ function visit(schema, fnOrHandlers) {
       case "object": {
         const oldShape = def.shape;
         const keys = Object.keys(oldShape);
-        let changed = false;
+        let changed2 = false;
         const newShape = {};
         for (const k of keys) {
           const mapped = run(oldShape[k]);
           if (mapped !== oldShape[k])
-            changed = true;
+            changed2 = true;
           newShape[k] = mapped;
         }
         let newCatchall = def.catchall;
         if (def.catchall) {
           newCatchall = run(def.catchall);
           if (newCatchall !== def.catchall)
-            changed = true;
+            changed2 = true;
         }
-        return changed ? clone(s, { ...def, shape: newShape, catchall: newCatchall }) : s;
+        return changed2 ? clone(s, { ...def, shape: newShape, catchall: newCatchall }) : s;
       }
       case "array": {
         const mapped = run(def.element);
@@ -19082,21 +19082,21 @@ function visit(schema, fnOrHandlers) {
       }
       case "tuple": {
         const oldItems = def.items;
-        let changed = false;
+        let changed2 = false;
         const newItems = [];
         for (const item of oldItems) {
           const mapped = run(item);
           if (mapped !== item)
-            changed = true;
+            changed2 = true;
           newItems.push(mapped);
         }
         let newRest = def.rest;
         if (def.rest) {
           newRest = run(def.rest);
           if (newRest !== def.rest)
-            changed = true;
+            changed2 = true;
         }
-        return changed ? clone(s, { ...def, items: newItems, rest: newRest }) : s;
+        return changed2 ? clone(s, { ...def, items: newItems, rest: newRest }) : s;
       }
       case "record":
       case "map": {
@@ -19110,15 +19110,15 @@ function visit(schema, fnOrHandlers) {
       }
       case "union": {
         const oldOptions = def.options;
-        let changed = false;
+        let changed2 = false;
         const newOptions = [];
         for (const opt of oldOptions) {
           const mapped = run(opt);
           if (mapped !== opt)
-            changed = true;
+            changed2 = true;
           newOptions.push(mapped);
         }
-        return changed ? clone(s, { ...def, options: newOptions }) : s;
+        return changed2 ? clone(s, { ...def, options: newOptions }) : s;
       }
       case "intersection": {
         const newLeft = run(def.left);
@@ -19568,6 +19568,259 @@ var init_zod = __esm({
   }
 });
 
+// ../shared/dist/runtime-v2/workspace.js
+var UNSAFE_LINE, CONTROL_CHARACTERS, machinePathSchema, gitShaSchema, gitBranchSchema, gitRemoteNameSchema, gitRemoteUrlSchema, statusFingerprintSchema, singleLineSchema, operationIdSchema, repoTargetShape, trustedRepoTargetShape, workspaceStatusRequestSchema, gitStatusRequestSchema, gitCheckpointRequestSchema, gitPushRequestSchema, gitPrepareCheckoutRequestSchema, gitVerifyHeadRequestSchema, workspaceQueryRequestSchema, WORKSPACE_QUERY_METHODS, workspaceQueryMethodSchema, workspaceStatusValueSchema, gitStatusValueSchema, gitCheckpointValueSchema, gitPushValueSchema, gitPrepareCheckoutValueSchema, gitVerifyHeadValueSchema, WORKSPACE_QUERY_ERROR_CODES, workspaceQueryErrorCodeSchema, publishedGitReceiptSchema, workspaceQueryErrorSchema, resultEnvelopeSchema;
+var init_workspace = __esm({
+  "../shared/dist/runtime-v2/workspace.js"() {
+    "use strict";
+    init_zod();
+    UNSAFE_LINE = /[\0\r\n]/;
+    CONTROL_CHARACTERS = /[\x00-\x1f\x7f]/;
+    machinePathSchema = external_exports.string().min(1).max(4096).refine((value) => !UNSAFE_LINE.test(value), "path contains unsafe characters");
+    gitShaSchema = external_exports.string().regex(/^[0-9a-f]{40}(?:[0-9a-f]{24})?$/, "not a Git SHA");
+    gitBranchSchema = external_exports.string().min(1).max(255).refine((value) => !value.startsWith("-") && !value.startsWith("+") && !value.includes("..") && !value.includes("@{") && !value.endsWith(".lock") && !/[\s~^:?*[\\]/.test(value) && !CONTROL_CHARACTERS.test(value), "not a safe Git branch name");
+    gitRemoteNameSchema = external_exports.string().regex(/^[A-Za-z0-9][A-Za-z0-9._-]{0,99}$/, "not a safe Git remote name");
+    gitRemoteUrlSchema = external_exports.string().min(1).max(2048).refine((value) => !UNSAFE_LINE.test(value), "remote URL contains unsafe characters");
+    statusFingerprintSchema = external_exports.string().regex(/^[0-9a-f]{64}$/, "not a status fingerprint");
+    singleLineSchema = (max) => external_exports.string().min(1).max(max).refine((value) => !CONTROL_CHARACTERS.test(value), "contains control characters");
+    operationIdSchema = external_exports.guid();
+    repoTargetShape = {
+      path: machinePathSchema,
+      expectedRepoRoot: machinePathSchema.optional(),
+      projectPath: machinePathSchema.optional()
+    };
+    trustedRepoTargetShape = {
+      path: machinePathSchema,
+      expectedRepoRoot: machinePathSchema,
+      projectPath: machinePathSchema
+    };
+    workspaceStatusRequestSchema = external_exports.object({
+      method: external_exports.literal("workspace.status"),
+      path: machinePathSchema
+    });
+    gitStatusRequestSchema = external_exports.object({
+      method: external_exports.literal("git.status"),
+      ...repoTargetShape,
+      remote: gitRemoteNameSchema.default("origin"),
+      expectedRemoteUrl: gitRemoteUrlSchema.optional()
+    });
+    gitCheckpointRequestSchema = external_exports.object({
+      method: external_exports.literal("git.checkpoint"),
+      operationId: operationIdSchema,
+      ...trustedRepoTargetShape,
+      switchId: singleLineSchema(200),
+      repoKey: singleLineSchema(256),
+      expectedHeadSha: gitShaSchema,
+      expectedBranch: gitBranchSchema,
+      expectedStatusFingerprint: statusFingerprintSchema,
+      expectedProposedTreeSha: gitShaSchema,
+      /** Goes to `git commit-tree` over stdin; newlines carry trailers, NUL is unrepresentable. */
+      commitMessage: external_exports.string().min(1).max(64 * 1024).refine((value) => !value.includes("\0") && value.trim().length > 0, "invalid commit message"),
+      authorName: singleLineSchema(256),
+      authorEmail: singleLineSchema(320).refine((value) => !/[<>]/.test(value), "invalid email")
+    });
+    gitPushRequestSchema = external_exports.object({
+      method: external_exports.literal("git.push"),
+      operationId: operationIdSchema,
+      ...trustedRepoTargetShape,
+      remote: gitRemoteNameSchema.default("origin"),
+      expectedRemoteUrl: gitRemoteUrlSchema,
+      expectedHeadSha: gitShaSchema,
+      expectedBranch: gitBranchSchema
+    });
+    gitPrepareCheckoutRequestSchema = external_exports.object({
+      method: external_exports.literal("git.prepare_checkout"),
+      operationId: operationIdSchema,
+      ...trustedRepoTargetShape,
+      remote: gitRemoteNameSchema.default("origin"),
+      expectedRemoteUrl: gitRemoteUrlSchema,
+      branch: gitBranchSchema,
+      targetSha: gitShaSchema
+    });
+    gitVerifyHeadRequestSchema = external_exports.object({
+      method: external_exports.literal("git.verify_head"),
+      ...trustedRepoTargetShape,
+      expectedSha: gitShaSchema
+    });
+    workspaceQueryRequestSchema = external_exports.discriminatedUnion("method", [
+      workspaceStatusRequestSchema,
+      gitStatusRequestSchema,
+      gitCheckpointRequestSchema,
+      gitPushRequestSchema,
+      gitPrepareCheckoutRequestSchema,
+      gitVerifyHeadRequestSchema
+    ]);
+    WORKSPACE_QUERY_METHODS = [
+      "workspace.status",
+      "git.status",
+      "git.checkpoint",
+      "git.push",
+      "git.prepare_checkout",
+      "git.verify_head"
+    ];
+    workspaceQueryMethodSchema = external_exports.enum(WORKSPACE_QUERY_METHODS);
+    workspaceStatusValueSchema = external_exports.object({
+      repoRoot: machinePathSchema,
+      /** null: detached HEAD. */
+      branch: external_exports.string().nullable(),
+      /** null: unborn branch. */
+      headSha: gitShaSchema.nullable(),
+      dirty: external_exports.boolean(),
+      filesChanged: external_exports.number().int().nonnegative(),
+      ahead: external_exports.number().int().nonnegative().nullable(),
+      behind: external_exports.number().int().nonnegative().nullable(),
+      hasUpstream: external_exports.boolean()
+    });
+    gitStatusValueSchema = workspaceStatusValueSchema.extend({
+      remoteUrl: gitRemoteUrlSchema.nullable(),
+      upstream: external_exports.string().nullable(),
+      statusFingerprint: statusFingerprintSchema,
+      proposedTreeSha: gitShaSchema
+    });
+    gitCheckpointValueSchema = external_exports.object({
+      repoRoot: machinePathSchema,
+      sha: gitShaSchema,
+      replayed: external_exports.boolean()
+    });
+    gitPushValueSchema = external_exports.object({
+      repoRoot: machinePathSchema,
+      pushedSha: gitShaSchema,
+      branch: gitBranchSchema,
+      remote: gitRemoteNameSchema,
+      /** The remote already had the SHA before this push. */
+      replayed: external_exports.boolean()
+    });
+    gitPrepareCheckoutValueSchema = external_exports.object({
+      repoRoot: machinePathSchema,
+      branch: gitBranchSchema,
+      headSha: gitShaSchema,
+      replayed: external_exports.boolean()
+    });
+    gitVerifyHeadValueSchema = external_exports.object({
+      repoRoot: machinePathSchema,
+      headSha: gitShaSchema,
+      verified: external_exports.literal(true)
+    });
+    WORKSPACE_QUERY_ERROR_CODES = [
+      "path_not_approved",
+      "workspace_busy",
+      "workspace_repository_mismatch",
+      "operation_in_progress",
+      "git_not_installed",
+      "runtime_operation_failed",
+      "invalid_git_request",
+      "repository_not_found",
+      "repository_path_changed",
+      "repository_path_not_authorized",
+      "path_canonicalization_failed",
+      "git_status_unreadable",
+      "git_operation_failed",
+      "git_network_timeout",
+      "git_output_limit_exceeded",
+      "git_remote_unavailable",
+      "git_fetch_failed",
+      "git_push_failed",
+      "remote_url_credentials_rejected",
+      "remote_url_mismatch",
+      "source_changed_since_approval",
+      "source_dirty_after_checkpoint",
+      "source_head_unreadable",
+      "checkpoint_empty",
+      "checkpoint_tree_unavailable",
+      "checkpoint_commit_failed",
+      "checkpoint_lock_unavailable",
+      "checkpoint_index_sync_failed",
+      "push_verification_failed",
+      "target_checkout_dirty",
+      "target_checkout_failed",
+      "target_branch_in_use",
+      "target_branch_diverged",
+      "target_fast_forward_failed",
+      "target_verification_failed",
+      "target_sha_mismatch",
+      "target_sha_unavailable",
+      "target_head_unreadable",
+      "verify_head_mismatch"
+    ];
+    workspaceQueryErrorCodeSchema = external_exports.enum(WORKSPACE_QUERY_ERROR_CODES);
+    publishedGitReceiptSchema = external_exports.object({
+      pushedSha: gitShaSchema,
+      branch: gitBranchSchema,
+      remote: gitRemoteNameSchema,
+      replayed: external_exports.boolean()
+    });
+    workspaceQueryErrorSchema = external_exports.object({
+      code: workspaceQueryErrorCodeSchema,
+      message: external_exports.string().max(4096),
+      /** Only with source_changed_since_approval after a push: what already reached the remote. */
+      published: publishedGitReceiptSchema.optional()
+    });
+    resultEnvelopeSchema = external_exports.discriminatedUnion("ok", [
+      external_exports.object({ ok: external_exports.literal(true), value: external_exports.unknown() }),
+      external_exports.object({ ok: external_exports.literal(false), error: workspaceQueryErrorSchema })
+    ]);
+  }
+});
+
+// ../shared/dist/runtime-v2/agent-context.js
+var AGENT_CONTEXT_VERSION, agentSessionKindSchema, agentTurnTriggerSchema, agentBranchSourceSchema, agentContextRepositorySchema, agentContextBuildSchema, agentContextEnvironmentSchema, agentContextPullRequestSchema, agentContextSchema;
+var init_agent_context = __esm({
+  "../shared/dist/runtime-v2/agent-context.js"() {
+    "use strict";
+    init_zod();
+    init_workspace();
+    AGENT_CONTEXT_VERSION = 1;
+    agentSessionKindSchema = external_exports.enum(["chat", "task", "workflow", "pr_review"]);
+    agentTurnTriggerSchema = external_exports.enum(["user", "image_build"]);
+    agentBranchSourceSchema = external_exports.enum([
+      "handoff",
+      "pull_request",
+      "task",
+      "chat_selection",
+      "environment_default"
+    ]);
+    agentContextRepositorySchema = external_exports.object({
+      name: external_exports.string().min(1).max(200),
+      url: gitRemoteUrlSchema,
+      path: machinePathSchema,
+      branch: gitBranchSchema,
+      branchSource: agentBranchSourceSchema,
+      base: gitBranchSchema
+    });
+    agentContextBuildSchema = external_exports.object({
+      id: external_exports.guid(),
+      status: external_exports.enum(["queued", "running", "succeeded", "failed", "cancelled", "superseded"]),
+      trigger: external_exports.enum(["agent", "base_bumped", "preview", "manual", "push"])
+    });
+    agentContextEnvironmentSchema = external_exports.object({
+      id: external_exports.guid(),
+      name: external_exports.string().min(1).max(200),
+      installCommand: external_exports.string().max(8192).nullable(),
+      startCommand: external_exports.string().max(8192).nullable(),
+      imageBuildId: external_exports.guid().nullable(),
+      /** The newest build when it is not the one sessions boot from. */
+      pendingBuild: agentContextBuildSchema.optional(),
+      /** Saved variable names; values never leave the API. */
+      variables: external_exports.array(external_exports.string().min(1).max(200)).max(200)
+    });
+    agentContextPullRequestSchema = external_exports.object({
+      number: external_exports.number().int().positive(),
+      url: external_exports.string().url().max(2048),
+      head: gitBranchSchema,
+      base: gitBranchSchema
+    });
+    agentContextSchema = external_exports.object({
+      kind: agentSessionKindSchema,
+      trigger: agentTurnTriggerSchema,
+      organizationId: external_exports.guid(),
+      taskWorkingBranch: gitBranchSchema.optional(),
+      pullRequest: agentContextPullRequestSchema.optional(),
+      repositories: external_exports.array(agentContextRepositorySchema).max(64),
+      environment: agentContextEnvironmentSchema.optional()
+    });
+  }
+});
+
 // ../shared/dist/skills/domain.js
 var SKILLS_PROTOCOL_VERSION, SKILL_PACKAGE_LIMITS;
 var init_domain = __esm({
@@ -20007,304 +20260,110 @@ var init_run_context = __esm({
     }));
     canonicalAssistantMessageSchema = wire()(external_exports.object({
       id: external_exports.string().min(1),
-      turnOrdinal: external_exports.number().int().nullable(),
-      createdAt: external_exports.string().min(1)
-    }));
-    externalMcpServerSchema = wire()(external_exports.object({
-      type: external_exports.enum(["http", "sse", "stdio"]).optional(),
-      url: external_exports.string().min(1).optional(),
-      headers: external_exports.record(external_exports.string(), external_exports.string()).optional(),
-      command: external_exports.string().min(1).optional(),
-      args: external_exports.array(external_exports.string()).optional(),
-      env: external_exports.record(external_exports.string(), external_exports.string()).optional()
-    }));
-    runAttachmentSchema = external_exports.object({
-      id: external_exports.string().min(1),
-      kind: external_exports.enum(["image", "file"]),
-      filename: external_exports.string().min(1),
-      mimeType: external_exports.string().min(1),
-      size: external_exports.number().int().nonnegative(),
-      label: external_exports.string().optional(),
-      width: external_exports.number().int().positive().optional(),
-      height: external_exports.number().int().positive().optional(),
-      /** API path the holder GETs with the machine credential; never a pre-signed secret URL. */
-      downloadPath: external_exports.string().startsWith("/")
-    });
-    parsedAttachmentSchema = wire()(external_exports.object({
-      id: external_exports.string().min(1),
-      filename: external_exports.string().min(1),
-      mimeType: external_exports.string().min(1),
-      kind: external_exports.enum(["pdf", "text", "other"]),
-      status: external_exports.enum(["extracted", "partial", "needs_ocr", "unsupported", "too_large", "failed"]),
-      content: external_exports.string().nullable(),
-      contentTruncated: external_exports.boolean(),
-      pageCount: external_exports.number().int().nonnegative().optional(),
-      pdfType: external_exports.string().optional(),
-      pagesNeedingOcr: external_exports.array(external_exports.number().int()).optional(),
-      hasEncodingIssues: external_exports.boolean().optional(),
-      errorCode: external_exports.enum([
-        "invalid_pdf",
-        "encrypted_pdf",
-        "native_unavailable",
-        "decode_failed",
-        "download_failed"
-      ]).optional()
-    }));
-    taskMetaSchema = wire()(external_exports.object({
-      id: external_exports.string().min(1),
-      title: external_exports.string(),
-      description: external_exports.string().nullable(),
-      status: external_exports.string(),
-      priority: external_exports.string(),
-      labels: external_exports.array(external_exports.string()).nullable(),
-      assignees: external_exports.array(external_exports.object({ name: external_exports.string().nullable(), email: external_exports.string() })),
-      statusOptions: external_exports.array(external_exports.object({
-        id: external_exports.string().min(1),
-        label: external_exports.string(),
-        group: external_exports.enum(["not_started", "active", "done", "closed"])
-      })).optional(),
-      descriptionAttachmentIds: external_exports.array(external_exports.object({ id: external_exports.string().min(1), filename: external_exports.string() })).optional(),
-      linkedResources: external_exports.array(external_exports.object({
-        id: external_exports.string().min(1),
-        type: external_exports.enum(["document", "whiteboard", "url"]),
-        title: external_exports.string(),
-        url: external_exports.string().optional()
-      })).optional()
-    }));
-    pullRequestMetaSchema = wire()(external_exports.object({
-      prNumber: external_exports.number().int().positive(),
-      owner: external_exports.string().min(1),
-      repo: external_exports.string().min(1),
-      title: external_exports.string(),
-      body: external_exports.string().optional(),
-      baseBranch: external_exports.string(),
-      headBranch: external_exports.string(),
-      author: external_exports.string().optional(),
-      state: external_exports.enum(["open", "closed", "merged"]),
-      mergeable: external_exports.boolean().nullable().optional(),
-      labels: external_exports.array(external_exports.string()),
-      changedFilesCount: external_exports.number().int().nonnegative().optional(),
-      additions: external_exports.number().int().nonnegative().optional(),
-      deletions: external_exports.number().int().nonnegative().optional(),
-      changedFiles: external_exports.array(external_exports.object({
-        path: external_exports.string(),
-        status: external_exports.string(),
-        additions: external_exports.number().int(),
-        deletions: external_exports.number().int()
-      })).optional(),
-      linkedTaskReadableId: external_exports.string().nullable().optional(),
-      linkedTaskId: external_exports.string().nullable().optional(),
-      linkedTaskNumber: external_exports.number().int().nullable().optional(),
-      htmlUrl: external_exports.string().optional()
-    }));
-    agentUserIdentitySchema = wire()(external_exports.object({ id: external_exports.string().min(1), name: external_exports.string().nullable(), email: external_exports.string() }));
-    workflowToolRefSchema = wire()(external_exports.object({ type: external_exports.string().min(1), id: external_exports.string().min(1) }));
-    runPromptContextSchema = external_exports.object({
-      taskMeta: taskMetaSchema.optional(),
-      prMeta: pullRequestMetaSchema.optional(),
-      currentUser: agentUserIdentitySchema.optional(),
-      sessionVisibility: external_exports.enum(["private", "team"]).nullable().optional(),
-      workflowTools: external_exports.array(workflowToolRefSchema).optional(),
-      availableSkills: external_exports.array(external_exports.object({
-        name: external_exports.string().min(1),
-        description: external_exports.string(),
-        packageDirectory: external_exports.string().min(1)
-      })).max(2e3).optional()
-    });
-  }
-});
-
-// ../shared/dist/runtime-v2/workspace.js
-var UNSAFE_LINE, CONTROL_CHARACTERS, machinePathSchema, gitShaSchema, gitBranchSchema, gitRemoteNameSchema, gitRemoteUrlSchema, statusFingerprintSchema, singleLineSchema, operationIdSchema, repoTargetShape, trustedRepoTargetShape, workspaceStatusRequestSchema, gitStatusRequestSchema, gitCheckpointRequestSchema, gitPushRequestSchema, gitPrepareCheckoutRequestSchema, gitVerifyHeadRequestSchema, workspaceQueryRequestSchema, WORKSPACE_QUERY_METHODS, workspaceQueryMethodSchema, workspaceStatusValueSchema, gitStatusValueSchema, gitCheckpointValueSchema, gitPushValueSchema, gitPrepareCheckoutValueSchema, gitVerifyHeadValueSchema, WORKSPACE_QUERY_ERROR_CODES, workspaceQueryErrorCodeSchema, publishedGitReceiptSchema, workspaceQueryErrorSchema, resultEnvelopeSchema;
-var init_workspace = __esm({
-  "../shared/dist/runtime-v2/workspace.js"() {
-    "use strict";
-    init_zod();
-    UNSAFE_LINE = /[\0\r\n]/;
-    CONTROL_CHARACTERS = /[\x00-\x1f\x7f]/;
-    machinePathSchema = external_exports.string().min(1).max(4096).refine((value) => !UNSAFE_LINE.test(value), "path contains unsafe characters");
-    gitShaSchema = external_exports.string().regex(/^[0-9a-f]{40}(?:[0-9a-f]{24})?$/, "not a Git SHA");
-    gitBranchSchema = external_exports.string().min(1).max(255).refine((value) => !value.startsWith("-") && !value.startsWith("+") && !value.includes("..") && !value.includes("@{") && !value.endsWith(".lock") && !/[\s~^:?*[\\]/.test(value) && !CONTROL_CHARACTERS.test(value), "not a safe Git branch name");
-    gitRemoteNameSchema = external_exports.string().regex(/^[A-Za-z0-9][A-Za-z0-9._-]{0,99}$/, "not a safe Git remote name");
-    gitRemoteUrlSchema = external_exports.string().min(1).max(2048).refine((value) => !UNSAFE_LINE.test(value), "remote URL contains unsafe characters");
-    statusFingerprintSchema = external_exports.string().regex(/^[0-9a-f]{64}$/, "not a status fingerprint");
-    singleLineSchema = (max) => external_exports.string().min(1).max(max).refine((value) => !CONTROL_CHARACTERS.test(value), "contains control characters");
-    operationIdSchema = external_exports.guid();
-    repoTargetShape = {
-      path: machinePathSchema,
-      expectedRepoRoot: machinePathSchema.optional(),
-      projectPath: machinePathSchema.optional()
-    };
-    trustedRepoTargetShape = {
-      path: machinePathSchema,
-      expectedRepoRoot: machinePathSchema,
-      projectPath: machinePathSchema
-    };
-    workspaceStatusRequestSchema = external_exports.object({
-      method: external_exports.literal("workspace.status"),
-      path: machinePathSchema
-    });
-    gitStatusRequestSchema = external_exports.object({
-      method: external_exports.literal("git.status"),
-      ...repoTargetShape,
-      remote: gitRemoteNameSchema.default("origin"),
-      expectedRemoteUrl: gitRemoteUrlSchema.optional()
-    });
-    gitCheckpointRequestSchema = external_exports.object({
-      method: external_exports.literal("git.checkpoint"),
-      operationId: operationIdSchema,
-      ...trustedRepoTargetShape,
-      switchId: singleLineSchema(200),
-      repoKey: singleLineSchema(256),
-      expectedHeadSha: gitShaSchema,
-      expectedBranch: gitBranchSchema,
-      expectedStatusFingerprint: statusFingerprintSchema,
-      expectedProposedTreeSha: gitShaSchema,
-      /** Goes to `git commit-tree` over stdin; newlines carry trailers, NUL is unrepresentable. */
-      commitMessage: external_exports.string().min(1).max(64 * 1024).refine((value) => !value.includes("\0") && value.trim().length > 0, "invalid commit message"),
-      authorName: singleLineSchema(256),
-      authorEmail: singleLineSchema(320).refine((value) => !/[<>]/.test(value), "invalid email")
-    });
-    gitPushRequestSchema = external_exports.object({
-      method: external_exports.literal("git.push"),
-      operationId: operationIdSchema,
-      ...trustedRepoTargetShape,
-      remote: gitRemoteNameSchema.default("origin"),
-      expectedRemoteUrl: gitRemoteUrlSchema,
-      expectedHeadSha: gitShaSchema,
-      expectedBranch: gitBranchSchema
-    });
-    gitPrepareCheckoutRequestSchema = external_exports.object({
-      method: external_exports.literal("git.prepare_checkout"),
-      operationId: operationIdSchema,
-      ...trustedRepoTargetShape,
-      remote: gitRemoteNameSchema.default("origin"),
-      expectedRemoteUrl: gitRemoteUrlSchema,
-      branch: gitBranchSchema,
-      targetSha: gitShaSchema
-    });
-    gitVerifyHeadRequestSchema = external_exports.object({
-      method: external_exports.literal("git.verify_head"),
-      ...trustedRepoTargetShape,
-      expectedSha: gitShaSchema
-    });
-    workspaceQueryRequestSchema = external_exports.discriminatedUnion("method", [
-      workspaceStatusRequestSchema,
-      gitStatusRequestSchema,
-      gitCheckpointRequestSchema,
-      gitPushRequestSchema,
-      gitPrepareCheckoutRequestSchema,
-      gitVerifyHeadRequestSchema
-    ]);
-    WORKSPACE_QUERY_METHODS = [
-      "workspace.status",
-      "git.status",
-      "git.checkpoint",
-      "git.push",
-      "git.prepare_checkout",
-      "git.verify_head"
-    ];
-    workspaceQueryMethodSchema = external_exports.enum(WORKSPACE_QUERY_METHODS);
-    workspaceStatusValueSchema = external_exports.object({
-      repoRoot: machinePathSchema,
-      /** null: detached HEAD. */
-      branch: external_exports.string().nullable(),
-      /** null: unborn branch. */
-      headSha: gitShaSchema.nullable(),
-      dirty: external_exports.boolean(),
-      filesChanged: external_exports.number().int().nonnegative(),
-      ahead: external_exports.number().int().nonnegative().nullable(),
-      behind: external_exports.number().int().nonnegative().nullable(),
-      hasUpstream: external_exports.boolean()
-    });
-    gitStatusValueSchema = workspaceStatusValueSchema.extend({
-      remoteUrl: gitRemoteUrlSchema.nullable(),
-      upstream: external_exports.string().nullable(),
-      statusFingerprint: statusFingerprintSchema,
-      proposedTreeSha: gitShaSchema
-    });
-    gitCheckpointValueSchema = external_exports.object({
-      repoRoot: machinePathSchema,
-      sha: gitShaSchema,
-      replayed: external_exports.boolean()
-    });
-    gitPushValueSchema = external_exports.object({
-      repoRoot: machinePathSchema,
-      pushedSha: gitShaSchema,
-      branch: gitBranchSchema,
-      remote: gitRemoteNameSchema,
-      /** The remote already had the SHA before this push. */
-      replayed: external_exports.boolean()
-    });
-    gitPrepareCheckoutValueSchema = external_exports.object({
-      repoRoot: machinePathSchema,
-      branch: gitBranchSchema,
-      headSha: gitShaSchema,
-      replayed: external_exports.boolean()
-    });
-    gitVerifyHeadValueSchema = external_exports.object({
-      repoRoot: machinePathSchema,
-      headSha: gitShaSchema,
-      verified: external_exports.literal(true)
-    });
-    WORKSPACE_QUERY_ERROR_CODES = [
-      "path_not_approved",
-      "workspace_busy",
-      "workspace_repository_mismatch",
-      "operation_in_progress",
-      "git_not_installed",
-      "runtime_operation_failed",
-      "invalid_git_request",
-      "repository_not_found",
-      "repository_path_changed",
-      "repository_path_not_authorized",
-      "path_canonicalization_failed",
-      "git_status_unreadable",
-      "git_operation_failed",
-      "git_network_timeout",
-      "git_output_limit_exceeded",
-      "git_remote_unavailable",
-      "git_fetch_failed",
-      "git_push_failed",
-      "remote_url_credentials_rejected",
-      "remote_url_mismatch",
-      "source_changed_since_approval",
-      "source_dirty_after_checkpoint",
-      "source_head_unreadable",
-      "checkpoint_empty",
-      "checkpoint_tree_unavailable",
-      "checkpoint_commit_failed",
-      "checkpoint_lock_unavailable",
-      "checkpoint_index_sync_failed",
-      "push_verification_failed",
-      "target_checkout_dirty",
-      "target_checkout_failed",
-      "target_branch_in_use",
-      "target_branch_diverged",
-      "target_fast_forward_failed",
-      "target_verification_failed",
-      "target_sha_mismatch",
-      "target_sha_unavailable",
-      "target_head_unreadable",
-      "verify_head_mismatch"
-    ];
-    workspaceQueryErrorCodeSchema = external_exports.enum(WORKSPACE_QUERY_ERROR_CODES);
-    publishedGitReceiptSchema = external_exports.object({
-      pushedSha: gitShaSchema,
-      branch: gitBranchSchema,
-      remote: gitRemoteNameSchema,
-      replayed: external_exports.boolean()
+      turnOrdinal: external_exports.number().int().nullable(),
+      createdAt: external_exports.string().min(1)
+    }));
+    externalMcpServerSchema = wire()(external_exports.object({
+      type: external_exports.enum(["http", "sse", "stdio"]).optional(),
+      url: external_exports.string().min(1).optional(),
+      headers: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+      command: external_exports.string().min(1).optional(),
+      args: external_exports.array(external_exports.string()).optional(),
+      env: external_exports.record(external_exports.string(), external_exports.string()).optional()
+    }));
+    runAttachmentSchema = external_exports.object({
+      id: external_exports.string().min(1),
+      kind: external_exports.enum(["image", "file"]),
+      filename: external_exports.string().min(1),
+      mimeType: external_exports.string().min(1),
+      size: external_exports.number().int().nonnegative(),
+      label: external_exports.string().optional(),
+      width: external_exports.number().int().positive().optional(),
+      height: external_exports.number().int().positive().optional(),
+      /** API path the holder GETs with the machine credential; never a pre-signed secret URL. */
+      downloadPath: external_exports.string().startsWith("/")
     });
-    workspaceQueryErrorSchema = external_exports.object({
-      code: workspaceQueryErrorCodeSchema,
-      message: external_exports.string().max(4096),
-      /** Only with source_changed_since_approval after a push: what already reached the remote. */
-      published: publishedGitReceiptSchema.optional()
+    parsedAttachmentSchema = wire()(external_exports.object({
+      id: external_exports.string().min(1),
+      filename: external_exports.string().min(1),
+      mimeType: external_exports.string().min(1),
+      kind: external_exports.enum(["pdf", "text", "other"]),
+      status: external_exports.enum(["extracted", "partial", "needs_ocr", "unsupported", "too_large", "failed"]),
+      content: external_exports.string().nullable(),
+      contentTruncated: external_exports.boolean(),
+      pageCount: external_exports.number().int().nonnegative().optional(),
+      pdfType: external_exports.string().optional(),
+      pagesNeedingOcr: external_exports.array(external_exports.number().int()).optional(),
+      hasEncodingIssues: external_exports.boolean().optional(),
+      errorCode: external_exports.enum([
+        "invalid_pdf",
+        "encrypted_pdf",
+        "native_unavailable",
+        "decode_failed",
+        "download_failed"
+      ]).optional()
+    }));
+    taskMetaSchema = wire()(external_exports.object({
+      id: external_exports.string().min(1),
+      title: external_exports.string(),
+      description: external_exports.string().nullable(),
+      status: external_exports.string(),
+      priority: external_exports.string(),
+      labels: external_exports.array(external_exports.string()).nullable(),
+      assignees: external_exports.array(external_exports.object({ name: external_exports.string().nullable(), email: external_exports.string() })),
+      statusOptions: external_exports.array(external_exports.object({
+        id: external_exports.string().min(1),
+        label: external_exports.string(),
+        group: external_exports.enum(["not_started", "active", "done", "closed"])
+      })).optional(),
+      descriptionAttachmentIds: external_exports.array(external_exports.object({ id: external_exports.string().min(1), filename: external_exports.string() })).optional(),
+      linkedResources: external_exports.array(external_exports.object({
+        id: external_exports.string().min(1),
+        type: external_exports.enum(["document", "whiteboard", "url"]),
+        title: external_exports.string(),
+        url: external_exports.string().optional()
+      })).optional()
+    }));
+    pullRequestMetaSchema = wire()(external_exports.object({
+      prNumber: external_exports.number().int().positive(),
+      owner: external_exports.string().min(1),
+      repo: external_exports.string().min(1),
+      title: external_exports.string(),
+      body: external_exports.string().optional(),
+      baseBranch: external_exports.string(),
+      headBranch: external_exports.string(),
+      author: external_exports.string().optional(),
+      state: external_exports.enum(["open", "closed", "merged"]),
+      mergeable: external_exports.boolean().nullable().optional(),
+      labels: external_exports.array(external_exports.string()),
+      changedFilesCount: external_exports.number().int().nonnegative().optional(),
+      additions: external_exports.number().int().nonnegative().optional(),
+      deletions: external_exports.number().int().nonnegative().optional(),
+      changedFiles: external_exports.array(external_exports.object({
+        path: external_exports.string(),
+        status: external_exports.string(),
+        additions: external_exports.number().int(),
+        deletions: external_exports.number().int()
+      })).optional(),
+      linkedTaskReadableId: external_exports.string().nullable().optional(),
+      linkedTaskId: external_exports.string().nullable().optional(),
+      linkedTaskNumber: external_exports.number().int().nullable().optional(),
+      htmlUrl: external_exports.string().optional()
+    }));
+    agentUserIdentitySchema = wire()(external_exports.object({ id: external_exports.string().min(1), name: external_exports.string().nullable(), email: external_exports.string() }));
+    workflowToolRefSchema = wire()(external_exports.object({ type: external_exports.string().min(1), id: external_exports.string().min(1) }));
+    runPromptContextSchema = external_exports.object({
+      taskMeta: taskMetaSchema.optional(),
+      prMeta: pullRequestMetaSchema.optional(),
+      currentUser: agentUserIdentitySchema.optional(),
+      sessionVisibility: external_exports.enum(["private", "team"]).nullable().optional(),
+      workflowTools: external_exports.array(workflowToolRefSchema).optional(),
+      availableSkills: external_exports.array(external_exports.object({
+        name: external_exports.string().min(1),
+        description: external_exports.string(),
+        packageDirectory: external_exports.string().min(1)
+      })).max(2e3).optional()
     });
-    resultEnvelopeSchema = external_exports.discriminatedUnion("ok", [
-      external_exports.object({ ok: external_exports.literal(true), value: external_exports.unknown() }),
-      external_exports.object({ ok: external_exports.literal(false), error: workspaceQueryErrorSchema })
-    ]);
   }
 });
 
@@ -20315,6 +20374,7 @@ var init_desired_state = __esm({
     "use strict";
     init_zod();
     init_contracts();
+    init_agent_context();
     init_ids();
     init_run_context();
     init_workspace();
@@ -20349,6 +20409,7 @@ var init_desired_state = __esm({
       repoLocalPaths: external_exports.array(repoLocalPathSchema).optional(),
       /** Applied once, at the conversation's first turn on a cloud sandbox; never moves local work. */
       requestedCheckouts: external_exports.array(requestedCheckoutSchema).max(64).optional(),
+      agentContext: agentContextSchema.optional(),
       workflowId: external_exports.guid().optional(),
       workflowExecutionId: external_exports.guid().optional(),
       agentId: external_exports.string().min(1).optional(),
@@ -21362,6 +21423,7 @@ var init_skills = __esm({
 var init_runtime_v2 = __esm({
   "../shared/dist/runtime-v2/index.js"() {
     "use strict";
+    init_agent_context();
     init_capabilities();
     init_desired_state();
     init_git_capability();
@@ -25554,7 +25616,259 @@ var init_chunk_J2KTV5FP = __esm({
   }
 });
 
-// ../agent-core/dist/chunk-FPGAN4XO.js
+// ../agent-core/dist/chunk-GI3ZGXTY.js
+function repositories(input2, context) {
+  const problems = new Map(input2.problems.map((problem) => [problem.path, problem]));
+  const listed = context?.repositories ?? [];
+  const known = new Set(listed.map((repository) => repository.path));
+  const unlisted = input2.problems.filter((problem) => !known.has(problem.path));
+  return [
+    ...listed.map((repository) => {
+      const problem = problems.get(repository.path);
+      return {
+        path: repository.path,
+        name: repository.name,
+        url: repository.url,
+        branch: repository.branch,
+        branchSource: repository.branchSource,
+        base: repository.base,
+        checkout: problem ? "needs_attention" : "ok",
+        ...problem ? { problem: problem.problem, action: problem.action } : {}
+      };
+    }),
+    ...unlisted.map(
+      (problem) => ({
+        path: problem.path,
+        checkout: "needs_attention",
+        problem: problem.problem,
+        action: problem.action
+      })
+    )
+  ];
+}
+function branchInstruction(repository) {
+  const { path, branch, branchSource } = repository;
+  if (!branch || !branchSource) return void 0;
+  const reason = BRANCH_REASONS[branchSource];
+  if (branchSource === "task") {
+    return `Commit work in ${path} on ${branch}, ${reason}; create it from ${repository.base ?? "the default branch"} if it does not exist.`;
+  }
+  return `Work in ${path} on ${branch}, ${reason}.`;
+}
+function repositoryInstructions(repository) {
+  const problem = repository.problem && repository.action ? `${repository.path} ${repository.problem}. ${repository.action} before relying on its files.` : void 0;
+  const branch = problem && repository.branchSource !== "environment_default" ? void 0 : branchInstruction(repository);
+  return [branch, problem].filter((line) => line !== void 0);
+}
+function environmentInstructions(environment, cwd) {
+  const lines = [];
+  const start = environment.start;
+  if (start?.state === "failed") {
+    lines.push(
+      `The start command exited with code ${start.exitCode}. Read ${start.log}, fix the cause, then run the start command from ${cwd} before testing the app.`
+    );
+  } else if (start?.state === "pending") {
+    lines.push(`The start command is still starting; check ${start.log} before testing the app.`);
+  }
+  const build = environment.pendingBuild;
+  if (build?.status === "queued" || build?.status === "running") {
+    lines.push(
+      `Image build ${build.id} is ${build.status}; its result arrives as a message, so do not poll for it.`
+    );
+  } else if (build?.status === "failed") {
+    lines.push(
+      `The latest image build (${build.id}) failed; sessions still boot from the previous image.`
+    );
+  }
+  if (environment.variables.length > 0) {
+    lines.push("Saved variables are set in this sandbox; never print or commit their values.");
+  }
+  return lines;
+}
+function instructionsFor(snapshot2) {
+  const cwd = snapshot2.workspace.cwd ?? snapshot2.workspace.root ?? "the workspace";
+  return [
+    ...snapshot2.session.trigger === "image_build" ? ["Alan sent this turn, not the user: it reports an image build result."] : [],
+    ...snapshot2.environment ? environmentInstructions(snapshot2.environment, cwd) : []
+  ];
+}
+function startingInstructions(snapshot2) {
+  const cwd = snapshot2.workspace.cwd ?? snapshot2.workspace.root;
+  return [
+    ...cwd ? [`Work from ${cwd}.`] : [],
+    ...snapshot2.workspace.repositories.flatMap(repositoryInstructions)
+  ];
+}
+function sessionKind(input2, context) {
+  if (context) return context.kind;
+  if (input2.spec.workflowExecutionId) return "workflow";
+  return input2.spec.taskId ? "task" : "chat";
+}
+function environmentOf(input2, context) {
+  const environment = context?.environment;
+  if (!environment) return void 0;
+  const start = environment.startCommand === null ? { state: "not_configured" } : input2.start;
+  return {
+    id: environment.id,
+    name: environment.name,
+    installCommand: environment.installCommand,
+    startCommand: environment.startCommand,
+    imageBuildId: environment.imageBuildId,
+    ...environment.pendingBuild ? { pendingBuild: environment.pendingBuild } : {},
+    variables: environment.variables,
+    ...start ? { start: start.state === "not_configured" ? start : { ...start, log: input2.startLogPath } } : {}
+  };
+}
+function knownContext(snapshot2) {
+  const organizationId = snapshot2?.session.organizationId;
+  if (!snapshot2 || !organizationId) return void 0;
+  const environment = snapshot2.environment;
+  return {
+    kind: snapshot2.session.kind,
+    trigger: "user",
+    organizationId,
+    ...snapshot2.task ? { taskWorkingBranch: snapshot2.task.workingBranch } : {},
+    ...snapshot2.pullRequest ? { pullRequest: snapshot2.pullRequest } : {},
+    repositories: snapshot2.workspace.repositories.flatMap(
+      ({ path, name, url: url2, branch, branchSource, base }) => name && url2 && branch && branchSource && base ? [{ path, name, url: url2, branch, branchSource, base }] : []
+    ),
+    ...environment ? {
+      environment: {
+        id: environment.id,
+        name: environment.name,
+        installCommand: environment.installCommand,
+        startCommand: environment.startCommand,
+        imageBuildId: environment.imageBuildId,
+        ...environment.pendingBuild ? { pendingBuild: environment.pendingBuild } : {},
+        variables: environment.variables
+      }
+    } : {}
+  };
+}
+function agentContextSnapshot(input2) {
+  const context = input2.spec.agentContext ?? knownContext(input2.known);
+  if (!context && input2.problems.length === 0) return null;
+  const environment = environmentOf(input2, context);
+  const base = {
+    session: {
+      kind: sessionKind(input2, context),
+      trigger: context?.trigger ?? "user",
+      conversationId: input2.spec.conversationId,
+      runId: input2.spec.runId,
+      ...input2.spec.teamId ? { teamId: input2.spec.teamId } : {},
+      ...input2.spec.taskId ? { taskId: input2.spec.taskId } : {},
+      ...input2.spec.workflowExecutionId ? { workflowExecutionId: input2.spec.workflowExecutionId } : {},
+      ...context ? { organizationId: context.organizationId } : {}
+    },
+    ...context?.taskWorkingBranch ? { task: { workingBranch: context.taskWorkingBranch } } : {},
+    ...context?.pullRequest ? { pullRequest: context.pullRequest } : {},
+    workspace: {
+      ...input2.workspaceRoot ? { root: input2.workspaceRoot } : {},
+      ...input2.spec.projectPath ? { cwd: input2.spec.projectPath } : {},
+      repositories: repositories(input2, context)
+    },
+    ...environment ? { environment } : {}
+  };
+  return { ...base, instructions: instructionsFor(base) };
+}
+function isScalar(value) {
+  return value === null || typeof value === "string" || typeof value === "number" || typeof value === "boolean";
+}
+function scalar(value) {
+  if (typeof value !== "string") return String(value);
+  return PLAIN_SCALAR.test(value) ? value : JSON.stringify(value);
+}
+function snakeCase(key) {
+  return key.replace(/[A-Z]/g, (letter) => `_${letter.toLowerCase()}`);
+}
+function yamlLines(record2, indent) {
+  return Object.entries(record2).flatMap(([key, value]) => {
+    const name = `${indent}${snakeCase(key)}:`;
+    if (isScalar(value)) return [`${name} ${scalar(value)}`];
+    if (Array.isArray(value)) {
+      if (value.length === 0) return [];
+      return [
+        name,
+        ...value.flatMap((item) => {
+          if (isScalar(item)) return [`${indent}  - ${scalar(item)}`];
+          if (typeof item !== "object" || item === null) return [];
+          const [first = "", ...rest] = yamlLines(item, `${indent}    `);
+          return [`${indent}  - ${first.trimStart()}`, ...rest];
+        })
+      ];
+    }
+    if (typeof value === "object" && value !== null)
+      return [name, ...yamlLines(value, `${indent}  `)];
+    return [];
+  });
+}
+function block(tag, body) {
+  return [`<${tag} version="${AGENT_CONTEXT_VERSION}">`, ...yamlLines(body, ""), `</${tag}>`].join(
+    "\n"
+  );
+}
+function stableRepository(repository) {
+  const { checkout: _checkout, problem: _problem, action: _action, ...rest } = repository;
+  return rest;
+}
+function commandPreview(command) {
+  if (command === null || command.length <= COMMAND_PREVIEW_CHARS) return command;
+  const lines = command.split("\n").length;
+  return `${command.slice(0, COMMAND_PREVIEW_CHARS)}\u2026 (${lines} lines; get_cloud_machine has the full command)`;
+}
+function withCommandPreviews(environment) {
+  return {
+    ...environment,
+    ...environment.installCommand !== void 0 ? { installCommand: commandPreview(environment.installCommand) } : {},
+    ...environment.startCommand !== void 0 ? { startCommand: commandPreview(environment.startCommand) } : {}
+  };
+}
+function changed(a, b) {
+  return JSON.stringify(a) !== JSON.stringify(b);
+}
+function environmentUpdate(previous, next) {
+  if (!next) return void 0;
+  const { start: previousStart, ...previousFacts } = previous ?? {};
+  const { start, ...facts } = next;
+  if (changed(previousFacts, facts)) return next;
+  return start?.state === "failed" && changed(previousStart, start) ? { start } : void 0;
+}
+function updateBody(previous, next) {
+  const known = new Set(previous.instructions);
+  const instructions = next.instructions.filter((line) => !known.has(line));
+  const before = new Map(
+    previous.workspace.repositories.map((repository) => [
+      repository.path,
+      stableRepository(repository)
+    ])
+  );
+  const repositories2 = next.workspace.repositories.map(stableRepository).filter(
+    (repository) => repository.path !== void 0 && changed(before.get(repository.path), repository)
+  );
+  const environment = environmentUpdate(previous.environment, next.environment);
+  const facts = {
+    ...changed(previous.task, next.task) && next.task ? { task: next.task } : {},
+    ...changed(previous.pullRequest, next.pullRequest) && next.pullRequest ? { pullRequest: next.pullRequest } : {},
+    ...repositories2.length > 0 ? { workspace: { repositories: repositories2 } } : {},
+    ...environment ? { environment: withCommandPreviews(environment) } : {},
+    ...instructions.length > 0 ? { instructions } : {}
+  };
+  if (Object.keys(facts).length === 0) return void 0;
+  return next.session.trigger === "user" ? facts : { session: { trigger: next.session.trigger }, ...facts };
+}
+function renderAgentContext(snapshot2, previous) {
+  const full = block("alan_agent_context", {
+    ...snapshot2,
+    ...snapshot2.environment ? { environment: withCommandPreviews(snapshot2.environment) } : {},
+    instructions: [...startingInstructions(snapshot2), ...snapshot2.instructions]
+  });
+  const update = previous ? updateBody(previous, snapshot2) : void 0;
+  return {
+    snapshot: snapshot2,
+    full,
+    ...update ? { update: block("alan_agent_context_update", update) } : {}
+  };
+}
 function truncate(value, limit) {
   const normalized2 = Array.from(value, (character) => {
     const code = character.charCodeAt(0);
@@ -25813,11 +26127,12 @@ function cloudExecutionSection(spec) {
   if (spec.sandboxId) lines.push(`Sandbox ID: ${spec.sandboxId}.`);
   if (spec.cloudEnvironmentId) lines.push(`Cloud environment ID: ${spec.cloudEnvironmentId}.`);
   lines.push(
-    "Run setup, development and validation in this sandbox. The execution location is separate from the deployment of the application you are testing; verify that application's origin before acting."
+    "Run setup, development and validation in this sandbox. The execution location is separate from the deployment of the application you are testing; verify that application's origin before acting.",
+    "A turn can begin with an <alan_agent_context> block, or an <alan_agent_context_update> with only what changed since. Alan writes these, not the user: they state this session's repositories, branches, environment and start command state, and their instructions apply."
   );
   if (!isReadOnlyMode(spec.mode) && !isReadOnlyAgent(spec.agentId)) {
     lines.push(
-      "Own the authorized work end to end: inspect context, make reasonable assumptions, implement, test, review and create or update the pull request for code changes when the repository workflow calls for one. Do not stop at a plan or ask for routine implementation choices or permission already granted. For application changes, check the repository's setup instructions and configured start commands, start the app if needed, and verify it is reachable before testing. For user-facing flows, use alan-test-feature when installed to test the running app, capture a video, and create a test report. Ask only for a missing secret, an essential decision you cannot derive, or an action requiring explicit approval. Respect the user's scope, repository rules and tool authorization; report blocked capabilities and validation gaps while continuing independent work."
+      "Own the authorized work end to end: inspect context, make reasonable assumptions, implement, test, review and create or update the pull request for code changes when the repository workflow calls for one. Do not stop at a plan or ask for routine implementation choices or permission already granted. For application changes, follow the session context for where to work and whether the start command is running, start the app if needed, and verify it is reachable before testing. For user-facing flows, use alan-test-feature when installed to test the running app, capture a video, and create a test report. Ask only for a missing secret, an essential decision you cannot derive, or an action requiring explicit approval. Respect the user's scope, repository rules and tool authorization; report blocked capabilities and validation gaps while continuing independent work."
     );
   }
   const skills = spec.promptContext?.availableSkills ?? [];
@@ -25914,11 +26229,71 @@ function buildTurnText(input2) {
 ${body}` : body;
   return spec.mode === "plan" ? planModePrefix(prefixed) : prefixed;
 }
-var MAX_PARSED_ATTACHMENTS, MAX_PARSED_ATTACHMENT_CHARS, MAX_METADATA_CHARS, UNAVAILABLE, READ_ONLY_MODES, AGENT_MODES;
-var init_chunk_FPGAN4XO = __esm({
-  "../agent-core/dist/chunk-FPGAN4XO.js"() {
+var startCommandStateSchema, repositorySnapshotSchema, environmentSnapshotSchema, agentContextSnapshotSchema, BRANCH_REASONS, PLAIN_SCALAR, COMMAND_PREVIEW_CHARS, MAX_PARSED_ATTACHMENTS, MAX_PARSED_ATTACHMENT_CHARS, MAX_METADATA_CHARS, UNAVAILABLE, READ_ONLY_MODES, AGENT_MODES;
+var init_chunk_GI3ZGXTY = __esm({
+  "../agent-core/dist/chunk-GI3ZGXTY.js"() {
     "use strict";
+    init_runtime_v2();
+    init_zod();
     init_agent2();
+    startCommandStateSchema = external_exports.discriminatedUnion("state", [
+      external_exports.object({ state: external_exports.literal("not_configured") }),
+      external_exports.object({ state: external_exports.literal("pending") }),
+      external_exports.object({ state: external_exports.literal("running") }),
+      external_exports.object({ state: external_exports.literal("exited_ok") }),
+      external_exports.object({ state: external_exports.literal("failed"), exitCode: external_exports.number().int() })
+    ]);
+    repositorySnapshotSchema = external_exports.object({
+      path: external_exports.string(),
+      name: external_exports.string().optional(),
+      url: external_exports.string().optional(),
+      branch: external_exports.string().optional(),
+      branchSource: agentBranchSourceSchema.optional(),
+      base: external_exports.string().optional(),
+      checkout: external_exports.enum(["ok", "needs_attention"]),
+      problem: external_exports.string().optional(),
+      action: external_exports.string().optional()
+    });
+    environmentSnapshotSchema = external_exports.object({
+      id: external_exports.string(),
+      name: external_exports.string(),
+      installCommand: external_exports.string().nullable(),
+      startCommand: external_exports.string().nullable(),
+      imageBuildId: external_exports.string().nullable(),
+      pendingBuild: agentContextBuildSchema.optional(),
+      variables: external_exports.array(external_exports.string()),
+      start: external_exports.intersection(startCommandStateSchema, external_exports.object({ log: external_exports.string().optional() })).optional()
+    });
+    agentContextSnapshotSchema = external_exports.object({
+      session: external_exports.object({
+        kind: agentSessionKindSchema,
+        trigger: agentTurnTriggerSchema,
+        conversationId: external_exports.string(),
+        runId: external_exports.string(),
+        teamId: external_exports.string().optional(),
+        taskId: external_exports.string().optional(),
+        workflowExecutionId: external_exports.string().optional(),
+        organizationId: external_exports.string().optional()
+      }),
+      task: external_exports.object({ workingBranch: external_exports.string() }).optional(),
+      pullRequest: agentContextPullRequestSchema.optional(),
+      workspace: external_exports.object({
+        root: external_exports.string().optional(),
+        cwd: external_exports.string().optional(),
+        repositories: external_exports.array(repositorySnapshotSchema)
+      }),
+      environment: environmentSnapshotSchema.optional(),
+      instructions: external_exports.array(external_exports.string())
+    });
+    BRANCH_REASONS = {
+      handoff: "the branch handed off from the user's computer",
+      pull_request: "this pull request's branch",
+      task: "this task's branch",
+      chat_selection: "the branch the user selected for this chat",
+      environment_default: "the environment's default branch"
+    };
+    PLAIN_SCALAR = /^[A-Za-z0-9_./@~+-][A-Za-z0-9_./@~+:-]*$/;
+    COMMAND_PREVIEW_CHARS = 200;
     MAX_PARSED_ATTACHMENTS = 3;
     MAX_PARSED_ATTACHMENT_CHARS = 12e3;
     MAX_METADATA_CHARS = 240;
@@ -26356,16 +26731,16 @@ function parseClaudeEvent(event, state) {
 }
 function thoughtsOf(event, content, messageId, state) {
   const texts = content.flatMap((raw) => {
-    const block = asRecord(raw);
-    if (!block || asString(block.type) !== "thinking") return [];
-    return [asString(block.thinking) || asString(block.text)];
+    const block2 = asRecord(raw);
+    if (!block2 || asString(block2.type) !== "thinking") return [];
+    return [asString(block2.thinking) || asString(block2.text)];
   });
   if (texts.length === 0) return [];
   const frameId = asString(event.uuid) || synthId(state, "claude-thought-frame");
   return thoughtBlocksFor(state, messageId).complete(frameId, texts);
 }
-function textUpdates(frame, block) {
-  const text2 = asString(block.text);
+function textUpdates(frame, block2) {
+  const text2 = asString(block2.text);
   if (!text2 || frame.alreadyStreamed) return [];
   const content = textBlock(frame.previousBlockWasText ? `
 ${text2}` : text2);
@@ -26386,12 +26761,12 @@ function thoughtUpdates(frame) {
     }
   ];
 }
-function blockUpdates(frame, block) {
-  const blockType = asString(block.type);
-  if (blockType === "text") return textUpdates(frame, block);
+function blockUpdates(frame, block2) {
+  const blockType = asString(block2.type);
+  if (blockType === "text") return textUpdates(frame, block2);
   frame.previousBlockWasText = false;
   if (blockType === "thinking") return thoughtUpdates(frame);
-  if (blockType === "tool_use") return parseToolUse(block, frame.meta);
+  if (blockType === "tool_use") return parseToolUse(block2, frame.meta);
   return [];
 }
 function parseAssistant(event, state) {
@@ -26409,8 +26784,8 @@ function parseAssistant(event, state) {
     previousBlockWasText: false
   };
   return content.flatMap((raw) => {
-    const block = asRecord(raw);
-    return block ? blockUpdates(frame, block) : [];
+    const block2 = asRecord(raw);
+    return block2 ? blockUpdates(frame, block2) : [];
   });
 }
 function toolUseMeta(name, input2, meta3) {
@@ -26423,11 +26798,11 @@ function toolUseMeta(name, input2, meta3) {
     ...!isAsk && normalizeToolName2(name) === "exitplanmode" ? { [EXIT_PLAN_MODE_INPUT_META]: input2 } : {}
   };
 }
-function parseToolUse(block, meta3) {
-  const toolCallId = asString(block.id);
+function parseToolUse(block2, meta3) {
+  const toolCallId = asString(block2.id);
   if (!toolCallId) return [];
-  const name = canonicalizeManagedMcpToolName(asString(block.name));
-  const input2 = block.input;
+  const name = canonicalizeManagedMcpToolName(asString(block2.name));
+  const input2 = block2.input;
   const inputRecord = asRecord(input2) ?? {};
   const pendingFileChange = claudeToolInputDiffContent(name, input2);
   const updates = [
@@ -26469,21 +26844,21 @@ function parseUser(event) {
   if (!message) return [];
   const meta3 = nesting(event);
   return asArray(message.content).flatMap((raw) => {
-    const block = asRecord(raw);
-    if (!block || asString(block.type) !== "tool_result") return [];
-    const toolCallId = asString(block.tool_use_id);
+    const block2 = asRecord(raw);
+    if (!block2 || asString(block2.type) !== "tool_result") return [];
+    const toolCallId = asString(block2.tool_use_id);
     if (!toolCallId) return [];
-    const text2 = flattenToolResult(block.content);
+    const text2 = flattenToolResult(block2.content);
     const content = outputContent(text2);
     const diffs = claudeFileChangeContents(event.tool_use_result);
     return [
       {
         sessionUpdate: "tool_call_update",
         toolCallId,
-        status: block.is_error === true ? "failed" : "completed",
+        status: block2.is_error === true ? "failed" : "completed",
         ...content || diffs.length ? { content: [...diffs, ...content ?? []] } : {},
         rawOutput: text2,
-        _meta: { ...meta3._meta, [PROVIDER_PAYLOAD_META]: event.tool_use_result ?? block }
+        _meta: { ...meta3._meta, [PROVIDER_PAYLOAD_META]: event.tool_use_result ?? block2 }
       }
     ];
   });
@@ -27002,7 +27377,7 @@ var init_claude = __esm({
     init_chunk_HBIPWAUI();
     init_chunk_J2KTV5FP();
     init_chunk_M6YHY2EZ();
-    init_chunk_FPGAN4XO();
+    init_chunk_GI3ZGXTY();
     init_chunk_YXWJW7I5();
     init_effort();
     import_crypto6 = require("crypto");
@@ -27525,11 +27900,11 @@ var init_claude = __esm({
         }
         this.#iterations += 1;
         for (const raw of asArray(asRecord(event.message)?.content)) {
-          const block = asRecord(raw);
-          if (!block || asString(block.type) !== "tool_use") continue;
-          const id = asString(block.id);
+          const block2 = asRecord(raw);
+          if (!block2 || asString(block2.type) !== "tool_use") continue;
+          const id = asString(block2.id);
           if (!id) continue;
-          const name = canonicalizeManagedMcpToolName(asString(block.name));
+          const name = canonicalizeManagedMcpToolName(asString(block2.name));
           if (isInteractiveToolName(name) || INTERACTIVE_TOOL_NAMES.has(normalizeToolName2(name))) {
             this.#suppressedResults.add(id);
           }
@@ -29217,7 +29592,7 @@ var init_codex = __esm({
     init_chunk_HBIPWAUI();
     init_chunk_J2KTV5FP();
     init_chunk_M6YHY2EZ();
-    init_chunk_FPGAN4XO();
+    init_chunk_GI3ZGXTY();
     init_chunk_YXWJW7I5();
     import_fs6 = require("fs");
     import_path6 = require("path");
@@ -30732,7 +31107,7 @@ var require_identity = __commonJS({
     var isDocument = (node2) => !!node2 && typeof node2 === "object" && node2[NODE_TYPE] === DOC;
     var isMap = (node2) => !!node2 && typeof node2 === "object" && node2[NODE_TYPE] === MAP;
     var isPair = (node2) => !!node2 && typeof node2 === "object" && node2[NODE_TYPE] === PAIR;
-    var isScalar = (node2) => !!node2 && typeof node2 === "object" && node2[NODE_TYPE] === SCALAR;
+    var isScalar2 = (node2) => !!node2 && typeof node2 === "object" && node2[NODE_TYPE] === SCALAR;
     var isSeq = (node2) => !!node2 && typeof node2 === "object" && node2[NODE_TYPE] === SEQ;
     function isCollection(node2) {
       if (node2 && typeof node2 === "object")
@@ -30754,7 +31129,7 @@ var require_identity = __commonJS({
         }
       return false;
     }
-    var hasAnchor = (node2) => (isScalar(node2) || isCollection(node2)) && !!node2.anchor;
+    var hasAnchor = (node2) => (isScalar2(node2) || isCollection(node2)) && !!node2.anchor;
     exports2.ALIAS = ALIAS;
     exports2.DOC = DOC;
     exports2.MAP = MAP;
@@ -30769,7 +31144,7 @@ var require_identity = __commonJS({
     exports2.isMap = isMap;
     exports2.isNode = isNode;
     exports2.isPair = isPair;
-    exports2.isScalar = isScalar;
+    exports2.isScalar = isScalar2;
     exports2.isSeq = isSeq;
   }
 });
@@ -35125,13 +35500,13 @@ var require_resolve_block_scalar = __commonJS({
   "../../node_modules/yaml/dist/compose/resolve-block-scalar.js"(exports2) {
     "use strict";
     var Scalar = require_Scalar();
-    function resolveBlockScalar(ctx, scalar, onError) {
-      const start = scalar.offset;
-      const header = parseBlockScalarHeader(scalar, ctx.options.strict, onError);
+    function resolveBlockScalar(ctx, scalar2, onError) {
+      const start = scalar2.offset;
+      const header = parseBlockScalarHeader(scalar2, ctx.options.strict, onError);
       if (!header)
         return { value: "", type: null, comment: "", range: [start, start, start] };
       const type = header.mode === ">" ? Scalar.Scalar.BLOCK_FOLDED : Scalar.Scalar.BLOCK_LITERAL;
-      const lines = scalar.source ? splitLines(scalar.source) : [];
+      const lines = scalar2.source ? splitLines(scalar2.source) : [];
       let chompStart = lines.length;
       for (let i = lines.length - 1; i >= 0; --i) {
         const content = lines[i][1];
@@ -35143,12 +35518,12 @@ var require_resolve_block_scalar = __commonJS({
       if (chompStart === 0) {
         const value2 = header.chomp === "+" && lines.length > 0 ? "\n".repeat(Math.max(1, lines.length - 1)) : "";
         let end2 = start + header.length;
-        if (scalar.source)
-          end2 += scalar.source.length;
+        if (scalar2.source)
+          end2 += scalar2.source.length;
         return { value: value2, type, comment: header.comment, range: [start, end2, end2] };
       }
-      let trimIndent = scalar.indent + header.indent;
-      let offset = scalar.offset + header.length;
+      let trimIndent = scalar2.indent + header.indent;
+      let offset = scalar2.offset + header.length;
       let contentStart = 0;
       for (let i = 0; i < chompStart; ++i) {
         const [indent, content] = lines[i];
@@ -35226,7 +35601,7 @@ var require_resolve_block_scalar = __commonJS({
         default:
           value += "\n";
       }
-      const end = start + header.length + scalar.source.length;
+      const end = start + header.length + scalar2.source.length;
       return { value, type, comment: header.comment, range: [start, end, end] };
     }
     function parseBlockScalarHeader({ offset, props }, strict, onError) {
@@ -35309,8 +35684,8 @@ var require_resolve_flow_scalar = __commonJS({
     "use strict";
     var Scalar = require_Scalar();
     var resolveEnd = require_resolve_end();
-    function resolveFlowScalar(scalar, strict, onError) {
-      const { offset, type, source, end } = scalar;
+    function resolveFlowScalar(scalar2, strict, onError) {
+      const { offset, type, source, end } = scalar2;
       let _type;
       let value;
       const _onError = (rel, code, msg) => onError(offset + rel, code, msg);
@@ -35329,7 +35704,7 @@ var require_resolve_flow_scalar = __commonJS({
           break;
         /* istanbul ignore next should not happen */
         default:
-          onError(scalar, "UNEXPECTED_TOKEN", `Expected a flow scalar value, but found: ${type}`);
+          onError(scalar2, "UNEXPECTED_TOKEN", `Expected a flow scalar value, but found: ${type}`);
           return {
             value: "",
             type: null,
@@ -35543,26 +35918,26 @@ var require_compose_scalar = __commonJS({
         tag = findScalarTagByTest(ctx, value, token, onError);
       else
         tag = ctx.schema[identity.SCALAR];
-      let scalar;
+      let scalar2;
       try {
         const res = tag.resolve(value, (msg) => onError(tagToken ?? token, "TAG_RESOLVE_FAILED", msg), ctx.options);
-        scalar = identity.isScalar(res) ? res : new Scalar.Scalar(res);
+        scalar2 = identity.isScalar(res) ? res : new Scalar.Scalar(res);
       } catch (error61) {
         const msg = error61 instanceof Error ? error61.message : String(error61);
         onError(tagToken ?? token, "TAG_RESOLVE_FAILED", msg);
-        scalar = new Scalar.Scalar(value);
+        scalar2 = new Scalar.Scalar(value);
       }
-      scalar.range = range;
-      scalar.source = value;
+      scalar2.range = range;
+      scalar2.source = value;
       if (type)
-        scalar.type = type;
+        scalar2.type = type;
       if (tagName)
-        scalar.tag = tagName;
+        scalar2.tag = tagName;
       if (tag.format)
-        scalar.format = tag.format;
+        scalar2.format = tag.format;
       if (comment)
-        scalar.comment = comment;
-      return scalar;
+        scalar2.comment = comment;
+      return scalar2;
     }
     function findScalarTagByName(schema, value, tagName, tagToken, onError) {
       if (tagName === "!")
@@ -36311,7 +36686,7 @@ var require_cst = __commonJS({
     var FLOW_END = "";
     var SCALAR = "";
     var isCollection = (token) => !!token && "items" in token;
-    var isScalar = (token) => !!token && (token.type === "scalar" || token.type === "single-quoted-scalar" || token.type === "double-quoted-scalar" || token.type === "block-scalar");
+    var isScalar2 = (token) => !!token && (token.type === "scalar" || token.type === "single-quoted-scalar" || token.type === "double-quoted-scalar" || token.type === "block-scalar");
     function prettyToken(token) {
       switch (token) {
         case BOM:
@@ -36395,7 +36770,7 @@ var require_cst = __commonJS({
     exports2.FLOW_END = FLOW_END;
     exports2.SCALAR = SCALAR;
     exports2.isCollection = isCollection;
-    exports2.isScalar = isScalar;
+    exports2.isScalar = isScalar2;
     exports2.prettyToken = prettyToken;
     exports2.tokenType = tokenType;
   }
@@ -37390,37 +37765,37 @@ var require_parser = __commonJS({
           };
         }
       }
-      *scalar(scalar) {
+      *scalar(scalar2) {
         if (this.type === "map-value-ind") {
           const prev = getPrevProps(this.peek(2));
           const start = getFirstKeyStartProps(prev);
           let sep4;
-          if (scalar.end) {
-            sep4 = scalar.end;
+          if (scalar2.end) {
+            sep4 = scalar2.end;
             sep4.push(this.sourceToken);
-            delete scalar.end;
+            delete scalar2.end;
           } else
             sep4 = [this.sourceToken];
           const map2 = {
             type: "block-map",
-            offset: scalar.offset,
-            indent: scalar.indent,
-            items: [{ start, key: scalar, sep: sep4 }]
+            offset: scalar2.offset,
+            indent: scalar2.indent,
+            items: [{ start, key: scalar2, sep: sep4 }]
           };
           this.onKeyLine = true;
           this.stack[this.stack.length - 1] = map2;
         } else
-          yield* this.lineEnd(scalar);
+          yield* this.lineEnd(scalar2);
       }
-      *blockScalar(scalar) {
+      *blockScalar(scalar2) {
         switch (this.type) {
           case "space":
           case "comment":
           case "newline":
-            scalar.props.push(this.sourceToken);
+            scalar2.props.push(this.sourceToken);
             return;
           case "scalar":
-            scalar.source = this.source;
+            scalar2.source = this.source;
             this.atNewLine = true;
             this.indent = 0;
             if (this.onNewLine) {
@@ -38276,8 +38651,8 @@ function refusal(error61, displayName) {
   return failure2("failed", String(error61));
 }
 function toolResultText(update) {
-  const texts = (update.content ?? []).flatMap((block) => {
-    const text2 = asString(asRecord(asRecord(block)?.content)?.text);
+  const texts = (update.content ?? []).flatMap((block2) => {
+    const text2 = asString(asRecord(asRecord(block2)?.content)?.text);
     return text2 ? [text2] : [];
   });
   if (typeof update.rawOutput === "string" && update.rawOutput) texts.push(update.rawOutput);
@@ -38373,11 +38748,11 @@ function isStopReason(value) {
 function v2ToolContent(content) {
   if (!Array.isArray(content)) return void 0;
   return content.map((item) => {
-    const block = asRecord(item);
-    if (!block || asString(block.type) !== "diff" || asRecord(block.diff)) return item;
-    const path = asString(block.path);
-    const oldText = typeof block.oldText === "string" ? block.oldText : null;
-    const newText = typeof block.newText === "string" ? block.newText : null;
+    const block2 = asRecord(item);
+    if (!block2 || asString(block2.type) !== "diff" || asRecord(block2.diff)) return item;
+    const path = asString(block2.path);
+    const oldText = typeof block2.oldText === "string" ? block2.oldText : null;
+    const newText = typeof block2.newText === "string" ? block2.newText : null;
     const operation = oldText === null ? "add" : newText === null ? "delete" : "modify";
     return {
       type: "diff",
@@ -38800,7 +39175,7 @@ var init_acp3 = __esm({
     init_chunk_HBIPWAUI();
     init_chunk_J2KTV5FP();
     init_chunk_M6YHY2EZ();
-    init_chunk_FPGAN4XO();
+    init_chunk_GI3ZGXTY();
     init_chunk_YXWJW7I5();
     import_promises24 = require("fs/promises");
     import_path9 = require("path");
@@ -39627,6 +40002,9 @@ var init_driver = __esm({
 });
 
 // src/holder/drivers/persistent.ts
+function sessionContextFor(opened, inputs) {
+  return opened.fresh ? inputs.agentContext?.full : inputs.agentContext?.update;
+}
 function errorMessage(error61) {
   return error61 instanceof Error ? error61.message : String(error61);
 }
@@ -39682,14 +40060,14 @@ function createPersistentDriver(provider4, options) {
   const resumeNotice = (spec, session, sink) => {
     if (spec.resumeFallbackContext) {
       log.info("holder.session_resume_fallback", { harness: provider4.harness, runId: spec.runId });
-      return { session, contextPrefix: spec.resumeFallbackContext };
+      return { session, fresh: true, contextPrefix: spec.resumeFallbackContext };
     }
     sink.onEvent({
       seq: 0,
       at: clock.now(),
       update: noticeUpdate("warning", "session_resume_failed", RESUME_UNAVAILABLE)
     });
-    return { session };
+    return { session, fresh: true };
   };
   const managedMcpAccess = async (signal) => {
     const managed = options.managedMcp;
@@ -39700,7 +40078,7 @@ function createPersistentDriver(provider4, options) {
   const ensureSession = async (spec, inputs, sink, managedMcp) => {
     const wanted = provider4.plan(spec, inputs, void 0, managedMcp);
     const reused = await reuseLive(spec, wanted.key);
-    if (reused) return { session: reused };
+    if (reused) return { session: reused, fresh: false };
     const requested = live.providerSessionId ?? spec.providerSessionId;
     const resumeId = requested !== void 0 && requested !== live.rejectedSessionId && provider4.canResume(wanted, requested) ? requested : void 0;
     const planned = provider4.plan(spec, inputs, resumeId, managedMcp);
@@ -39719,7 +40097,7 @@ function createPersistentDriver(provider4, options) {
       requested
     });
     const resumed = resumeId !== void 0 && !opened.resumeFailed;
-    if (requested === void 0 || resumed) return { session: opened.session };
+    if (requested === void 0 || resumed) return { session: opened.session, fresh: !resumed };
     return resumeNotice(spec, opened.session, sink);
   };
   const runOnSession = async (opened, spec, sink, signal, inputs) => {
@@ -39771,7 +40149,7 @@ function createPersistentDriver(provider4, options) {
       };
       signal.addEventListener("abort", onAbort, { once: true });
       try {
-        const contextPrefix = [inputs.turnContext, opened.contextPrefix].filter((part) => part !== void 0).join("\n\n");
+        const contextPrefix = [sessionContextFor(opened, inputs), opened.contextPrefix].filter((part) => part !== void 0).join("\n\n");
         const input2 = await provider4.turnInput(spec, inputs, contextPrefix || void 0);
         if (signal.aborted) return { outcome: "aborted" };
         const result = await session.sendTurn(input2);
@@ -39952,8 +40330,8 @@ var init_acp4 = __esm({
 });
 
 // ../agent-core/dist/providers/opencode.js
-function parseSseBlock(block) {
-  const data = block.split("\n").map((line) => line.endsWith("\r") ? line.slice(0, -1) : line).filter((line) => line.startsWith("data:")).map((line) => line.slice(5).replace(/^ /, "")).join("\n");
+function parseSseBlock(block2) {
+  const data = block2.split("\n").map((line) => line.endsWith("\r") ? line.slice(0, -1) : line).filter((line) => line.startsWith("data:")).map((line) => line.slice(5).replace(/^ /, "")).join("\n");
   if (!data) return void 0;
   let parsed;
   try {
@@ -40537,7 +40915,7 @@ var init_opencode = __esm({
     init_chunk_HBIPWAUI();
     init_chunk_J2KTV5FP();
     init_chunk_M6YHY2EZ();
-    init_chunk_FPGAN4XO();
+    init_chunk_GI3ZGXTY();
     init_chunk_YXWJW7I5();
     import_http4 = require("http");
     init_runtime_v2();
@@ -42093,7 +42471,7 @@ function droidToolCall(toolUse) {
 function droidResultText(result) {
   const blocks = asArray(result.content);
   if (blocks.length) {
-    return blocks.map((block) => asString(asRecord(block)?.text)).filter(Boolean).join("\n");
+    return blocks.map((block2) => asString(asRecord(block2)?.text)).filter(Boolean).join("\n");
   }
   const value = result.value;
   if (typeof value === "string") return value;
@@ -42357,7 +42735,7 @@ var init_droid = __esm({
     init_chunk_HBIPWAUI();
     init_chunk_J2KTV5FP();
     init_chunk_M6YHY2EZ();
-    init_chunk_FPGAN4XO();
+    init_chunk_GI3ZGXTY();
     init_chunk_YXWJW7I5();
     init_runtime_v2();
     import_crypto16 = require("crypto");
@@ -43463,7 +43841,7 @@ var init_antigravity = __esm({
     init_chunk_XC5676SG();
     init_chunk_HBIPWAUI();
     init_chunk_M6YHY2EZ();
-    init_chunk_FPGAN4XO();
+    init_chunk_GI3ZGXTY();
     init_chunk_YXWJW7I5();
     import_promises28 = require("fs/promises");
     import_path12 = require("path");
@@ -44168,7 +44546,7 @@ var init_command_code = __esm({
     init_chunk_HBIPWAUI();
     init_chunk_J2KTV5FP();
     init_chunk_M6YHY2EZ();
-    init_chunk_FPGAN4XO();
+    init_chunk_GI3ZGXTY();
     init_chunk_YXWJW7I5();
     import_promises29 = require("fs/promises");
     import_path15 = require("path");
@@ -46921,7 +47299,7 @@ function openRepositoryLocks(options) {
 
 // src/cli/config.ts
 var import_node_os7 = require("os");
-var import_node_path32 = require("path");
+var import_node_path33 = require("path");
 init_zod();
 
 // src/client/locate.ts
@@ -46942,9 +47320,9 @@ function defaultInstallDir({ platform, home, env }) {
 
 // src/sessions/index.ts
 var import_node_crypto16 = require("crypto");
-var import_promises40 = require("fs/promises");
+var import_promises41 = require("fs/promises");
 var import_node_os6 = require("os");
-var import_node_path31 = require("path");
+var import_node_path32 = require("path");
 
 // src/holder/control-client.ts
 var import_node_crypto12 = require("crypto");
@@ -47258,14 +47636,14 @@ async function prepareRunInputs(spec, { source, tmpDir, signal, skills = [] }) {
 var import_node_crypto15 = require("crypto");
 var import_node_fs11 = require("fs");
 var import_node_net2 = require("net");
-var import_node_path30 = require("path");
+var import_node_path31 = require("path");
 init_runtime_v2();
 
 // src/holder/admission.ts
 var import_node_fs9 = require("fs");
-var import_promises36 = require("fs/promises");
+var import_promises37 = require("fs/promises");
 var import_node_os5 = require("os");
-var import_node_path26 = require("path");
+var import_node_path27 = require("path");
 init_constants();
 
 // ../shared/dist/node/local-workspace.js
@@ -47348,29 +47726,79 @@ async function discoverRelocatedWorkspace(search) {
   return matches[0] ?? null;
 }
 
+// src/holder/agent-context.ts
+var import_promises33 = require("fs/promises");
+var import_node_path22 = require("path");
+
+// ../agent-core/dist/prompt.js
+init_chunk_GI3ZGXTY();
+
+// src/holder/agent-context.ts
+async function readText2(path) {
+  return (0, import_promises33.readFile)(path, "utf8").then(
+    (text2) => text2.trim(),
+    () => null
+  );
+}
+async function startCommandState(statusPath) {
+  const [status, exit] = await Promise.all([readText2(statusPath), readText2(`${statusPath}.exit`)]);
+  if (status === null || status === "started") return { state: "pending" };
+  const failed = /^failed (\d+)$/.exec(status);
+  if (failed) return { state: "failed", exitCode: Number(failed[1]) };
+  if (exit === null) return { state: "running" };
+  const code = Number(exit);
+  return code === 0 ? { state: "exited_ok" } : { state: "failed", exitCode: code };
+}
+function createAgentContext(deps) {
+  const statusPath = (0, import_node_path22.join)(deps.homeDir, ".alan", "start-commands.status");
+  const logPath = (0, import_node_path22.join)(deps.homeDir, ".alan", "start-commands.log");
+  return async (spec, problems) => {
+    const file2 = (0, import_node_path22.join)(deps.dir, `${spec.conversationId}.json`);
+    const saved = await readJsonFile(file2, agentContextSnapshotSchema);
+    const known = saved.kind === "ok" ? saved.value : void 0;
+    const hasEnvironment = (spec.agentContext ?? known)?.environment !== void 0;
+    const start = hasEnvironment ? await startCommandState(statusPath) : void 0;
+    const snapshot2 = agentContextSnapshot({
+      spec,
+      ...spec.approvedWorkspacePaths?.[0] ? { workspaceRoot: spec.approvedWorkspacePaths[0] } : {},
+      problems,
+      ...start ? { start } : {},
+      startLogPath: logPath,
+      ...known ? { known } : {}
+    });
+    if (snapshot2 === null) return void 0;
+    const rendered = renderAgentContext(snapshot2, known);
+    return {
+      full: rendered.full,
+      ...rendered.update ? { update: rendered.update } : {},
+      save: () => writeJsonFileAtomic(file2, snapshot2)
+    };
+  };
+}
+
 // src/holder/checkout-refresh.ts
-var import_node_path24 = require("path");
+var import_node_path25 = require("path");
 
 // src/holder/claim-once.ts
 var import_node_crypto14 = require("crypto");
-var import_promises33 = require("fs/promises");
-var import_node_path22 = require("path");
+var import_promises34 = require("fs/promises");
+var import_node_path23 = require("path");
 async function claimOnce(dir, name) {
   try {
-    await (0, import_promises33.mkdir)(dir, { recursive: true, mode: 448 });
-    await (await (0, import_promises33.open)((0, import_node_path22.join)(dir, name), "wx")).close();
+    await (0, import_promises34.mkdir)(dir, { recursive: true, mode: 448 });
+    await (await (0, import_promises34.open)((0, import_node_path23.join)(dir, name), "wx")).close();
     return true;
   } catch {
     return false;
   }
 }
 function claimFirstLease(freshnessDir, path) {
-  return claimOnce((0, import_node_path22.join)(freshnessDir, "leased"), (0, import_node_crypto14.createHash)("sha256").update(path).digest("hex"));
+  return claimOnce((0, import_node_path23.join)(freshnessDir, "leased"), (0, import_node_crypto14.createHash)("sha256").update(path).digest("hex"));
 }
 
 // src/holder/requested-checkout.ts
-var import_promises34 = require("fs/promises");
-var import_node_path23 = require("path");
+var import_promises35 = require("fs/promises");
+var import_node_path24 = require("path");
 var REMOTE2 = "origin";
 var REASON_MAX_CHARS = 200;
 function firstLine2(text2) {
@@ -47379,24 +47807,20 @@ function firstLine2(text2) {
 function reasonOf(output2, command) {
   return firstLine2(output2.stderr) || `git ${command} exited ${output2.exitCode}`;
 }
-function noted(checkout, situation, reason, action) {
-  return {
-    kind: "noted",
-    line: `Note: ${checkout.path} ${situation}: ${reason}. ${action} before relying on its files.`
-  };
+function noted(situation, reason, action) {
+  return { kind: "noted", problem: `${situation}: ${reason}`, action };
 }
 function notSwitched(checkout, current, reason) {
   const on = current ?? "a detached HEAD";
   return noted(
-    checkout,
     `is on ${on}, not ${checkout.branch}, the branch picked for this chat`,
     reason,
     `Switch it to ${checkout.branch}`
   );
 }
 async function clone2(checkout, deps, signal) {
-  const parent = (0, import_node_path23.dirname)(checkout.path);
-  await (0, import_promises34.mkdir)(parent, { recursive: true });
+  const parent = (0, import_node_path24.dirname)(checkout.path);
+  await (0, import_promises35.mkdir)(parent, { recursive: true });
   await assertValidBranch(deps.git, parent, checkout.branch, signal);
   const output2 = await deps.git.run(
     {
@@ -47418,7 +47842,6 @@ async function clone2(checkout, deps, signal) {
   );
   if (output2.exitCode === 0) return { kind: "moved", how: "cloned" };
   return noted(
-    checkout,
     `is missing, and cloning it on ${checkout.branch}, the branch picked for this chat, failed`,
     reasonOf(output2, "clone"),
     `Clone ${checkout.repoUrl} there`
@@ -47480,7 +47903,6 @@ async function moveOnto(checkout, git, tip, current) {
   if (localHead === tip) return SWITCHED;
   const merged = await git(["merge", "--quiet", "--ff-only", tip]);
   return merged.exitCode === 0 ? SWITCHED : noted(
-    checkout,
     `is on ${branch} but behind ${REMOTE2}/${branch}`,
     reasonOf(merged, "merge"),
     "Run `git pull --ff-only` there"
@@ -47539,7 +47961,6 @@ async function applyRequestedCheckout(checkout, spec, deps, signal) {
     return await switchTo(checkout, status.branch, `checkout-${spec.runId}`, deps, signal);
   } catch (error61) {
     return noted(
-      checkout,
       `could not be put on ${checkout.branch}, the branch picked for this chat`,
       firstLine2(error61 instanceof Error ? error61.message : String(error61)) || "unknown error",
       "Check it"
@@ -47551,11 +47972,15 @@ async function applyRequestedCheckout(checkout, spec, deps, signal) {
 function short(sha) {
   return sha.slice(0, 12);
 }
-function staleLine(path, snapshot2, tip) {
+function staleCheckout(path, snapshot2, tip) {
   const checkout = snapshot2 === void 0 ? "is the environment snapshot's checkout" : `is the environment snapshot's checkout of ${snapshot2.branch} (commit ${short(snapshot2.head)})`;
   const base = snapshot2 === void 0 ? "its upstream" : `origin/${snapshot2.base}`;
   const remote = tip === void 0 ? "may be ahead" : `is ahead at ${short(tip)}`;
-  return `Note: ${path} ${checkout}; ${base} ${remote}. Run \`git pull --ff-only\` there before relying on its files.`;
+  return {
+    path,
+    problem: `${checkout}; ${base} ${remote}`,
+    action: "Run `git pull --ff-only` there"
+  };
 }
 async function fastForward(freshness, operationId, deps, signal) {
   var _stack = [];
@@ -47593,14 +48018,14 @@ async function atFirstLease(freshness, spec, deps, signal) {
       return first && freshness.fetched && await fastForward(freshness, `refresh-${spec.runId}`, deps, signal) ? "moved" : "noted";
   }
 }
-function lineFor(freshness) {
+function problemFor(freshness) {
   switch (freshness.state) {
     case "behind":
-      return staleLine(freshness.path, freshness.snapshot, freshness.tip);
+      return staleCheckout(freshness.path, freshness.snapshot, freshness.tip);
     case "failed":
-      return staleLine(freshness.path, freshness.snapshot);
+      return staleCheckout(freshness.path, freshness.snapshot);
     default:
-      return staleLine(freshness.path, void 0);
+      return staleCheckout(freshness.path, void 0);
   }
 }
 async function checkoutsOf(spec, leaseTargets) {
@@ -47622,7 +48047,7 @@ function requestedCheckoutsOf(spec, log) {
 }
 async function applyRequestedCheckouts(spec, deps, signal) {
   const settled2 = /* @__PURE__ */ new Set();
-  const lines = [];
+  const problems = [];
   for (const checkout of requestedCheckoutsOf(spec, deps.log)) {
     const outcome2 = await applyRequestedCheckout(checkout, spec, deps, signal);
     deps.log.info("workspace.requested_checkout", {
@@ -47633,21 +48058,23 @@ async function applyRequestedCheckouts(spec, deps, signal) {
       ...outcome2.kind === "moved" ? { how: outcome2.how } : {}
     });
     if (outcome2.kind === "on_branch") continue;
-    settled2.add((0, import_node_path24.resolve)(checkout.path));
-    if (outcome2.kind === "noted") lines.push(outcome2.line);
+    settled2.add((0, import_node_path25.resolve)(checkout.path));
+    if (outcome2.kind === "noted") {
+      problems.push({ path: checkout.path, problem: outcome2.problem, action: outcome2.action });
+    }
   }
-  return { settled: settled2, lines };
+  return { settled: settled2, problems };
 }
 async function refreshSnapshotCheckouts(spec, targets, settled2, deps, signal) {
-  const lines = [];
+  const problems = [];
   for (const target of targets) {
-    if (settled2.has((0, import_node_path24.resolve)(target))) continue;
+    if (settled2.has((0, import_node_path25.resolve)(target))) continue;
     const freshness = await readCheckoutFreshness(deps.dir, target);
     if (freshness === null) continue;
     const outcome2 = await atFirstLease(freshness, spec, deps, signal).catch(
       () => "noted"
     );
-    if (outcome2 === "noted") lines.push(lineFor(freshness));
+    if (outcome2 === "noted") problems.push(problemFor(freshness));
     deps.log.info("workspace.refresh", {
       runId: spec.runId,
       path: freshness.path,
@@ -47655,25 +48082,24 @@ async function refreshSnapshotCheckouts(spec, targets, settled2, deps, signal) {
       outcome: outcome2
     });
   }
-  return lines;
+  return problems;
 }
 function createCheckoutRefresh(deps) {
   return async (spec, leaseTargets, signal) => {
-    if (spec.providerSessionId !== void 0) return void 0;
-    if (!await claimOnce((0, import_node_path24.join)(deps.dir, "conversations"), spec.conversationId)) return void 0;
+    if (spec.providerSessionId !== void 0) return [];
+    if (!await claimOnce((0, import_node_path25.join)(deps.dir, "conversations"), spec.conversationId)) return [];
     const requested = await applyRequestedCheckouts(spec, deps, signal);
     const targets = await checkoutsOf(spec, leaseTargets);
-    const lines = [
-      ...requested.lines,
+    return [
+      ...requested.problems,
       ...await refreshSnapshotCheckouts(spec, targets, requested.settled, deps, signal)
     ];
-    return lines.length === 0 ? void 0 : lines.join("\n");
   };
 }
 
 // src/holder/lease.ts
-var import_promises35 = require("fs/promises");
-var import_node_path25 = require("path");
+var import_promises36 = require("fs/promises");
+var import_node_path26 = require("path");
 var LEASE_CHECK_EVERY_MS = 5e3;
 var MAX_TRANSIENT_FAILURES = 3;
 var BACKOFF_BASE_MS = 1e3;
@@ -47687,8 +48113,8 @@ function identityFailure(code, workspacePath) {
   return { code, problemCode: "app.workspace.missing", message: MESSAGES[code], workspacePath };
 }
 async function fileIdentity(path) {
-  const canonical = await (0, import_promises35.realpath)(path);
-  const info = await (0, import_promises35.stat)(canonical, { bigint: true });
+  const canonical = await (0, import_promises36.realpath)(path);
+  const info = await (0, import_promises36.stat)(canonical, { bigint: true });
   return `${canonical}:${info.dev}:${info.ino}`;
 }
 async function snapshot(git, path, signal) {
@@ -47707,7 +48133,7 @@ async function snapshot(git, path, signal) {
       workspace: await fileIdentity(path),
       repository: await fileIdentity(commonDir),
       worktree: await fileIdentity(gitDir),
-      commonDir: await (0, import_promises35.realpath)(commonDir)
+      commonDir: await (0, import_promises36.realpath)(commonDir)
     };
   } catch {
     return null;
@@ -47720,7 +48146,7 @@ async function gitValue(git, path, args, signal) {
 }
 async function pathExists(path) {
   try {
-    await (0, import_promises35.stat)(path);
+    await (0, import_promises36.stat)(path);
     return true;
   } catch (error61) {
     return errnoCode(error61) !== "ENOENT" && errnoCode(error61) !== "ENOTDIR";
@@ -47729,19 +48155,19 @@ async function pathExists(path) {
 async function hasGitMarker(path) {
   let directory;
   try {
-    directory = await (0, import_promises35.realpath)(path);
+    directory = await (0, import_promises36.realpath)(path);
   } catch {
     return true;
   }
   for (; ; ) {
     try {
-      await (0, import_promises35.stat)((0, import_node_path25.join)(directory, ".git"));
+      await (0, import_promises36.stat)((0, import_node_path26.join)(directory, ".git"));
       return true;
     } catch (error61) {
       const code = errnoCode(error61);
       if (code !== "ENOENT" && code !== "ENOTDIR") return true;
     }
-    const parent = (0, import_node_path25.dirname)(directory);
+    const parent = (0, import_node_path26.dirname)(directory);
     if (parent === directory) return false;
     directory = parent;
   }
@@ -47905,7 +48331,7 @@ function volumeRoot(path) {
 }
 async function exists(path) {
   try {
-    await (0, import_promises36.stat)(path);
+    await (0, import_promises37.stat)(path);
     return true;
   } catch {
     return false;
@@ -47913,10 +48339,10 @@ async function exists(path) {
 }
 async function inspectReadiness(path) {
   try {
-    if (!(await (0, import_promises36.stat)(path)).isDirectory()) {
+    if (!(await (0, import_promises37.stat)(path)).isDirectory()) {
       return { ready: false, missing: true, message: MESSAGES2.missing };
     }
-    await (0, import_promises36.access)(path, import_node_fs9.constants.R_OK | import_node_fs9.constants.W_OK | import_node_fs9.constants.X_OK);
+    await (0, import_promises37.access)(path, import_node_fs9.constants.R_OK | import_node_fs9.constants.W_OK | import_node_fs9.constants.X_OK);
     return { ready: true };
   } catch (error61) {
     const code = errnoCode(error61) ?? "";
@@ -47994,8 +48420,8 @@ async function admitDefaultWorkspace(spec, context, skills) {
   const { env } = context;
   const path = resolveAlanDefaultWorkspacePath(env.HOME || env.USERPROFILE || (0, import_node_os5.homedir)());
   try {
-    await (0, import_promises36.mkdir)(path, { recursive: true, mode: 448 });
-    await (0, import_promises36.access)(path, import_node_fs9.constants.R_OK | import_node_fs9.constants.W_OK | import_node_fs9.constants.X_OK);
+    await (0, import_promises37.mkdir)(path, { recursive: true, mode: 448 });
+    await (0, import_promises37.access)(path, import_node_fs9.constants.R_OK | import_node_fs9.constants.W_OK | import_node_fs9.constants.X_OK);
     return {
       kind: "admitted",
       spec: { ...spec, projectPath: path },
@@ -48073,7 +48499,7 @@ var CHECKOUT_NETWORK_TIMEOUT_MS = 12e4;
 function createHolderWorkspace(machine, clock, log) {
   const platform = machine.platform ?? process.platform;
   const git = createGitRunner({ env: machine.env, platform, localTimeoutMs: PROBE_TIMEOUT_MS2 });
-  const locks = openRepositoryLocks({ dir: (0, import_node_path26.join)(machine.stateDir, "locks"), clock, platform });
+  const locks = openRepositoryLocks({ dir: (0, import_node_path27.join)(machine.stateDir, "locks"), clock, platform });
   return {
     admission: {
       env: machine.env,
@@ -48085,7 +48511,7 @@ function createHolderWorkspace(machine, clock, log) {
       ),
       approvedRoots: async () => {
         const approved = await openApprovedPaths({
-          file: (0, import_node_path26.join)(machine.stateDir, "workspaces.json"),
+          file: (0, import_node_path27.join)(machine.stateDir, "workspaces.json"),
           log,
           platform
         });
@@ -48103,7 +48529,11 @@ function createHolderWorkspace(machine, clock, log) {
         }),
         locks,
         log,
-        dir: (0, import_node_path26.join)(machine.stateDir, "checkout-freshness")
+        dir: (0, import_node_path27.join)(machine.stateDir, "checkout-freshness")
+      }),
+      prepareAgentContext: createAgentContext({
+        dir: (0, import_node_path27.join)(machine.stateDir, "agent-context"),
+        homeDir: machine.env.HOME || (0, import_node_os5.homedir)()
       })
     } : {}
   };
@@ -48131,7 +48561,7 @@ async function respondToTurn(runningRunId, gate, driver, request2) {
 }
 
 // src/holder/session-facts.ts
-var import_promises37 = require("fs/promises");
+var import_promises38 = require("fs/promises");
 var CLI_RSS_CACHE_MS = 1e4;
 var LOGIN_PROBLEM_PREFIX = "cli.auth.";
 function isLoginFailure(result) {
@@ -48157,8 +48587,8 @@ function createSessionFacts(options) {
     const path = await resolveCommandOnPath(command, env, platform);
     if (path === null) return null;
     try {
-      const real = await (0, import_promises37.realpath)(path);
-      const info = await (0, import_promises37.stat)(real);
+      const real = await (0, import_promises38.realpath)(path);
+      const info = await (0, import_promises38.stat)(real);
       return { command, key: `${real}:${info.ino}:${info.size}:${info.mtimeMs}` };
     } catch {
       return null;
@@ -48245,8 +48675,8 @@ function createSessionFacts(options) {
 init_acp2();
 
 // src/run-log/directory.ts
-var import_promises38 = require("fs/promises");
-var import_node_path27 = require("path");
+var import_promises39 = require("fs/promises");
+var import_node_path28 = require("path");
 init_runtime_v2();
 init_zod();
 var runMetaSchema = external_exports.object({
@@ -48268,17 +48698,17 @@ var runMetaSchema = external_exports.object({
   }).optional()
 });
 function runDirectory(runsDir, runId) {
-  const dir = (0, import_node_path27.join)(runsDir, runId);
+  const dir = (0, import_node_path28.join)(runsDir, runId);
   return {
     dir,
-    log: (0, import_node_path27.join)(dir, "log.jsonl"),
-    upload: (0, import_node_path27.join)(dir, "upload.json"),
-    meta: (0, import_node_path27.join)(dir, "run.json")
+    log: (0, import_node_path28.join)(dir, "log.jsonl"),
+    upload: (0, import_node_path28.join)(dir, "upload.json"),
+    meta: (0, import_node_path28.join)(dir, "run.json")
   };
 }
 async function isRunClaimed(runsDir, runId) {
   try {
-    return (await (0, import_promises38.stat)(runDirectory(runsDir, runId).log)).size > 0;
+    return (await (0, import_promises39.stat)(runDirectory(runsDir, runId).log)).size > 0;
   } catch (error61) {
     if (errnoCode(error61) === "ENOENT") return false;
     throw error61;
@@ -48286,8 +48716,8 @@ async function isRunClaimed(runsDir, runId) {
 }
 
 // src/run-log/conversation-index.ts
-var import_promises39 = require("fs/promises");
-var import_node_path28 = require("path");
+var import_promises40 = require("fs/promises");
+var import_node_path29 = require("path");
 init_runtime_v2();
 init_zod();
 var ORDINALS_PER_SHARD = 1e3;
@@ -48303,13 +48733,13 @@ var coverageSchema = external_exports.object({
   nextExpectedOrdinal: external_exports.number().int().positive()
 });
 function conversationsDirectory(runsDir) {
-  return (0, import_node_path28.join)((0, import_node_path28.dirname)(runsDir), "conversations");
+  return (0, import_node_path29.join)((0, import_node_path29.dirname)(runsDir), "conversations");
 }
 function indexDirectory(runsDir, conversationId) {
-  return (0, import_node_path28.join)(conversationsDirectory(runsDir), conversationId, "turn-index");
+  return (0, import_node_path29.join)(conversationsDirectory(runsDir), conversationId, "turn-index");
 }
 function shardPath(runsDir, conversationId, ordinal) {
-  return (0, import_node_path28.join)(
+  return (0, import_node_path29.join)(
     indexDirectory(runsDir, conversationId),
     `${Math.floor(ordinal / ORDINALS_PER_SHARD)}.jsonl`
   );
@@ -48318,10 +48748,10 @@ async function indexConversationRun(runsDir, conversationId, ordinal, assistantO
   const nextOrdinal = assistantOrdinal + 1;
   if (nextOrdinal <= ordinal) throw new Error("Assistant order must follow the prompt");
   const path = shardPath(runsDir, conversationId, ordinal);
-  await (0, import_promises39.mkdir)((0, import_node_path28.dirname)(path), { recursive: true, mode: 448 });
-  await (0, import_promises39.appendFile)(path, `${JSON.stringify({ ordinal, nextOrdinal, runId })}
+  await (0, import_promises40.mkdir)((0, import_node_path29.dirname)(path), { recursive: true, mode: 448 });
+  await (0, import_promises40.appendFile)(path, `${JSON.stringify({ ordinal, nextOrdinal, runId })}
 `, { mode: 384 });
-  const coveragePath = (0, import_node_path28.join)((0, import_node_path28.dirname)((0, import_node_path28.dirname)(path)), "coverage.json");
+  const coveragePath = (0, import_node_path29.join)((0, import_node_path29.dirname)((0, import_node_path29.dirname)(path)), "coverage.json");
   const coverage = await readJsonFile(coveragePath, coverageSchema);
   const current = coverage.kind === "ok" ? coverage.value : null;
   const next = nextCoverage(current, ordinal, nextOrdinal);
@@ -48365,7 +48795,7 @@ var decoder = new TextDecoder();
 
 // src/run-log/writer.ts
 var import_node_fs10 = require("fs");
-var import_node_path29 = require("path");
+var import_node_path30 = require("path");
 init_runtime_v2();
 function lastSeq(fd, size) {
   for (const length of tailWindows(size)) {
@@ -48381,7 +48811,7 @@ function lastSeq(fd, size) {
   throw new RuntimeFault("record_too_large", "Run log tail record is larger than any record");
 }
 function openRunLog(path, clock) {
-  (0, import_node_fs10.mkdirSync)((0, import_node_path29.dirname)(path), { recursive: true, mode: 448 });
+  (0, import_node_fs10.mkdirSync)((0, import_node_path30.dirname)(path), { recursive: true, mode: 448 });
   const fd = (0, import_node_fs10.openSync)(path, "a+", 384);
   let size = (0, import_node_fs10.fstatSync)(fd).size;
   let seq = lastSeq(fd, size);
@@ -48559,8 +48989,12 @@ function fitForRunLog(update) {
 async function runWithInputs({ spec, leaseTargets, skills }, context, sink, signal) {
   var _stack = [];
   try {
-    const refreshed = context.workspace?.refreshFirstCheckout?.(spec, leaseTargets, signal).catch((error61) => {
+    const workspace = context.workspace;
+    const sessionContext = (workspace?.refreshFirstCheckout?.(spec, leaseTargets, signal) ?? Promise.resolve([])).catch((error61) => {
       context.log.warn("workspace.refresh_failed", { runId: spec.runId, error: error61 });
+      return [];
+    }).then((problems) => workspace?.prepareAgentContext?.(spec, problems)).catch((error61) => {
+      context.log.warn("holder.agent_context_failed", { runId: spec.runId, error: error61 });
       return void 0;
     });
     let inputs;
@@ -48573,17 +49007,37 @@ async function runWithInputs({ spec, leaseTargets, skills }, context, sink, sign
         message: `Could not fetch this run's attachments or provider credential: ${error61 instanceof Error ? error61.message : String(error61)}`
       };
     }
-    const turnContext = await refreshed;
+    const agentContext = await sessionContext;
     const prepared = __using(_stack, inputs, true);
-    const run = (turnSink, turnSignal) => context.driver.runTurn(
+    const run = async (turnSink, turnSignal) => {
+      const result = await context.driver.runTurn(
+        spec,
+        turnSink,
+        turnSignal,
+        agentContext === void 0 ? prepared : {
+          ...prepared,
+          agentContext: {
+            full: agentContext.full,
+            ...agentContext.update ? { update: agentContext.update } : {}
+          }
+        }
+      );
+      if (agentContext !== void 0 && result.outcome !== "rejected") {
+        await agentContext.save().catch((error61) => {
+          context.log.warn("holder.agent_context_save_failed", { runId: spec.runId, error: error61 });
+        });
+      }
+      return result;
+    };
+    if (workspace === void 0) return await run(sink, signal);
+    return await runLeased(
       spec,
-      turnSink,
-      turnSignal,
-      turnContext === void 0 ? prepared : { ...prepared, turnContext }
+      leaseTargets,
+      { ...context, lease: workspace.lease },
+      sink,
+      signal,
+      run
     );
-    if (context.workspace === void 0) return await run(sink, signal);
-    const leased = { ...context, lease: context.workspace.lease };
-    return await runLeased(spec, leaseTargets, leased, sink, signal, run);
   } catch (_) {
     var _error = _, _hasError = true;
   } finally {
@@ -48717,7 +49171,7 @@ async function runHolder({
   try {
     const identity = await readProcessIdentity(process.pid);
     if (identity === null) throw new RuntimeFault("internal", "Cannot read own process identity");
-    const _engines = __using(_stack, recordSpawnedEngines(engineRecordsPath((0, import_node_path30.dirname)(launch.statusPath)), clock, log));
+    const _engines = __using(_stack, recordSpawnedEngines(engineRecordsPath((0, import_node_path31.dirname)(launch.statusPath)), clock, log));
     const holder = {
       state: "idle",
       runId: null,
@@ -49062,7 +49516,7 @@ function loadRuntimeConfig(env = process.env, totalMemoryBytes = (0, import_node
     providerProbes: ALAN_RUNTIME_PROVIDER_PROBES === "on",
     providerToolchain: ALAN_RUNTIME_PROVIDER_NODE !== void 0 && ALAN_RUNTIME_PROVIDER_NPM_CLI !== void 0 ? { node: ALAN_RUNTIME_PROVIDER_NODE, npmCli: ALAN_RUNTIME_PROVIDER_NPM_CLI } : null,
     home,
-    configHome: XDG_CONFIG_HOME ?? (0, import_node_path32.join)(home, ".config"),
+    configHome: XDG_CONFIG_HOME ?? (0, import_node_path33.join)(home, ".config"),
     codexHome: resolveCodexHome(CODEX_HOME, home),
     ...githubProxyConfig({ ALAN_RUNTIME_GITHUB_PROXY, XDG_CONFIG_HOME, GH_CONFIG_DIR }, home),
     gitGatewayUrl: ALAN_RUNTIME_GIT_GATEWAY_URL ?? null,
@@ -49072,13 +49526,13 @@ function loadRuntimeConfig(env = process.env, totalMemoryBytes = (0, import_node
   };
 }
 function resolveCodexHome(configuredHome, home) {
-  return configuredHome ?? (0, import_node_path32.join)(home, ".codex");
+  return configuredHome ?? (0, import_node_path33.join)(home, ".codex");
 }
 function githubProxyConfig(env, home) {
-  const configHome = env.XDG_CONFIG_HOME ?? (0, import_node_path32.join)(home, ".config");
+  const configHome = env.XDG_CONFIG_HOME ?? (0, import_node_path33.join)(home, ".config");
   return {
     githubProxy: env.ALAN_RUNTIME_GITHUB_PROXY === "on",
-    ghConfigDir: env.GH_CONFIG_DIR ?? (0, import_node_path32.join)(configHome, "gh")
+    ghConfigDir: env.GH_CONFIG_DIR ?? (0, import_node_path33.join)(configHome, "gh")
   };
 }
 function serviceEnvironment(env, profile) {
@@ -49177,7 +49631,7 @@ async function loadStoredAccess(paths, access3 = { exec: systemExec }) {
 }
 
 // src/cli/commands/hold.ts
-var import_node_path33 = require("path");
+var import_node_path34 = require("path");
 init_agent2();
 init_runtime_v2();
 async function machineAccess(paths, log, conversationId, transport) {
@@ -49235,7 +49689,7 @@ async function runHold(argv) {
     const config2 = loadRuntimeConfig();
     const paths = runtimePaths(config2.stateDir);
     const log = __using(_stack, openFileLog(
-      (0, import_node_path33.join)(paths.logs, `holder-${launch.value.conversationId}.jsonl`),
+      (0, import_node_path34.join)(paths.logs, `holder-${launch.value.conversationId}.jsonl`),
       config2.logLevel,
       systemClock
     ));
@@ -49246,7 +49700,7 @@ async function runHold(argv) {
     );
     const transport = __using(_stack, createHttpTransport());
     const access3 = await machineAccess(paths, log, launch.value.conversationId, transport);
-    const credentialPath = (0, import_node_path33.join)(paths.tmp, "mcp", `${launch.value.conversationId}.json`);
+    const credentialPath = (0, import_node_path34.join)(paths.tmp, "mcp", `${launch.value.conversationId}.json`);
     const managedMcp = __using(_stack, access3.managedMcp === void 0 ? void 0 : createHelperMcpAccess({
       managedMcp: access3.managedMcp,
       conversationId: launch.value.conversationId,