@alan-ai-hq/agent-manager-linux-x64 0.1.151 → 0.1.153

package/alan-holder.cjs

@@ -19798,6 +19798,10 @@ var init_agent_context = __esm({
       installCommand: external_exports.string().max(8192).nullable(),
       startCommand: external_exports.string().max(8192).nullable(),
       imageBuildId: external_exports.guid().nullable(),
+      /** The repository whose `.alan/` the image build reads; a branch build swaps only its branch. */
+      primaryRepository: machinePathSchema.optional(),
+      /** Where install steps and the start command run: the repository, or the workspace with several. */
+      setupDirectory: machinePathSchema.optional(),
       /** The newest build when it is not the one sessions boot from. */
       pendingBuild: agentContextBuildSchema.optional(),
       /** Saved variable names; values never leave the API. */
@@ -20368,7 +20372,7 @@ var init_run_context = __esm({
 });
 
 // ../shared/dist/runtime-v2/desired-state.js
-var repoLocalPathSchema, requestedCheckoutSchema, runSpecSchema, desiredRunSchema, desiredStateSchema;
+var repoLocalPathSchema, requestedCheckoutSchema, runSpecSchema, desiredRunSchema, pendingUploadSchema, desiredStateSchema;
 var init_desired_state = __esm({
   "../shared/dist/runtime-v2/desired-state.js"() {
     "use strict";
@@ -20438,10 +20442,17 @@ var init_desired_state = __esm({
       spec: runSpecSchema,
       abortRequested: external_exports.boolean()
     });
+    pendingUploadSchema = external_exports.object({
+      runId: runIdSchema,
+      conversationId: conversationIdSchema,
+      admittedOffset: external_exports.number().int().nonnegative()
+    });
     desiredStateSchema = external_exports.object({
       runs: external_exports.array(desiredRunSchema),
       /** The machine's saved workspaces; replaces the previous server list on every read. */
-      approvedWorkspacePaths: external_exports.array(machinePathSchema).max(2e3).optional()
+      approvedWorkspacePaths: external_exports.array(machinePathSchema).max(2e3).optional(),
+      /** Absent from an older server: the runtime then uploads only on its own doorbell. */
+      pendingUploads: external_exports.array(pendingUploadSchema).optional()
     });
   }
 });
@@ -22587,7 +22598,7 @@ function plan(command, args, options) {
 function captureOutput(command, args, options) {
   const launch = plan(command, args, options);
   if (launch === void 0) return Promise.resolve(NEVER_STARTED);
-  return new Promise((resolve9) => {
+  return new Promise((resolve8) => {
     (0, import_child_process.execFile)(
       launch.file,
       [...launch.args],
@@ -22601,7 +22612,7 @@ function captureOutput(command, args, options) {
       },
       (error61, stdout, stderr) => {
         const code = error61 && typeof error61.code === "number" ? error61.code : error61 ? void 0 : 0;
-        resolve9({ stdout, stderr, exitCode: code });
+        resolve8({ stdout, stderr, exitCode: code });
       }
     );
   });
@@ -22643,18 +22654,18 @@ function decode3(bytes, start, end) {
 }
 async function linuxStartTicks(pid) {
   try {
-    const stat16 = await (0, import_promises6.readFile)(`/proc/${pid}/stat`, "utf8");
-    const fields = stat16.slice(stat16.lastIndexOf(")") + 2).split(" ");
+    const stat15 = await (0, import_promises6.readFile)(`/proc/${pid}/stat`, "utf8");
+    const fields = stat15.slice(stat15.lastIndexOf(")") + 2).split(" ");
     return fields[19];
   } catch {
     return void 0;
   }
 }
 function psStartTime(pid) {
-  return new Promise((resolve9) => {
+  return new Promise((resolve8) => {
     (0, import_child_process2.execFile)("ps", ["-o", "lstart=", "-p", String(pid)], { timeout: 2e3 }, (error61, stdout) => {
       const text2 = stdout.trim();
-      resolve9(error61 || !text2 ? void 0 : text2);
+      resolve8(error61 || !text2 ? void 0 : text2);
     });
   });
 }
@@ -22683,12 +22694,12 @@ function parseProcessList(text2) {
 }
 function listProcesses(platform = process.platform) {
   if (platform === "win32") return Promise.resolve([]);
-  return new Promise((resolve9) => {
+  return new Promise((resolve8) => {
     (0, import_child_process3.execFile)(
       "ps",
       ["-A", "-o", "pid=,ppid=,pgid=,lstart="],
       { timeout: 5e3, maxBuffer: 8 * 1024 * 1024 },
-      (error61, stdout) => resolve9(error61 ? [] : parseProcessList(stdout))
+      (error61, stdout) => resolve8(error61 ? [] : parseProcessList(stdout))
     );
   });
 }
@@ -22728,11 +22739,11 @@ async function taskkill(pid, options) {
     stdio: "ignore",
     windowsHide: true
   });
-  const exited = new Promise((resolve9) => {
-    killer.once("error", (error210) => resolve9(error210));
+  const exited = new Promise((resolve8) => {
+    killer.once("error", (error210) => resolve8(error210));
     killer.once(
       "exit",
-      (code, signal) => resolve9(code === 0 ? void 0 : new Error(`taskkill failed: exit ${code}, signal ${signal}`))
+      (code, signal) => resolve8(code === 0 ? void 0 : new Error(`taskkill failed: exit ${code}, signal ${signal}`))
     );
   });
   const timedOut = clock.sleep(options.timeoutMs ?? DEFAULT_TASKKILL_TIMEOUT_MS, timeout.signal).then(() => new Error("taskkill timed out")).catch(() => void 0);
@@ -22775,9 +22786,9 @@ function signalGroup(pgid, signal, onError) {
     if (!isAlreadyDead(error61)) onError?.("group", error61);
   }
 }
-function liveEscapedGroups(snapshot2, rootPid, remembered) {
-  const leaders = new Map(snapshot2.map((entry) => [entry.pid, entry.startedAt]));
-  const groups = new Set(escapedGroups(snapshot2, rootPid).map((group) => group.pgid));
+function liveEscapedGroups(snapshot, rootPid, remembered) {
+  const leaders = new Map(snapshot.map((entry) => [entry.pid, entry.startedAt]));
+  const groups = new Set(escapedGroups(snapshot, rootPid).map((group) => group.pgid));
   for (const [pgid, startedAt] of remembered) {
     if (leaders.get(pgid) === startedAt) groups.add(pgid);
   }
@@ -22988,10 +22999,10 @@ function spawnCli(options) {
 function waitForSpawn(child, command) {
   if (isWindowsJob(child)) return waitForWindowsJob(child, command);
   if (child.pid !== void 0) return Promise.resolve();
-  return new Promise((resolve9, reject) => {
+  return new Promise((resolve8, reject) => {
     const onSpawn = () => {
       child.off("error", onError);
-      resolve9();
+      resolve8();
     };
     const onError = (error61) => {
       child.off("spawn", onSpawn);
@@ -23923,15 +23934,6 @@ var init_transcript_fold = __esm({
   }
 });
 
-// ../shared/dist/agent/acp/transcript-live.js
-var TRANSCRIPT_LIVE_BATCH_BYTES;
-var init_transcript_live = __esm({
-  "../shared/dist/agent/acp/transcript-live.js"() {
-    "use strict";
-    TRANSCRIPT_LIVE_BATCH_BYTES = 32 * 1024;
-  }
-});
-
 // ../shared/dist/agent/acp/index.js
 var init_acp = __esm({
   "../shared/dist/agent/acp/index.js"() {
@@ -23952,7 +23954,6 @@ var init_acp = __esm({
     init_transcript_fold();
     init_transcript_http();
     init_transcript_ingestion();
-    init_transcript_live();
     init_types2();
   }
 });
@@ -24903,8 +24904,8 @@ function readMediaFiles(candidates2, cwd, mimeByExt, maxBytes) {
     seen.add(path);
     const mimeType = mimeByExt[(0, import_path3.extname)(path).toLowerCase()];
     if (!mimeType) continue;
-    const stat16 = (0, import_fs4.statSync)(path);
-    if (!stat16.isFile() || stat16.size <= 0 || stat16.size > maxBytes) continue;
+    const stat15 = (0, import_fs4.statSync)(path);
+    if (!stat15.isFile() || stat15.size <= 0 || stat15.size > maxBytes) continue;
     files.push({ path, mimeType, buffer: (0, import_fs4.readFileSync)(path) });
   }
   return files;
@@ -24979,8 +24980,8 @@ function createJsonRpcPeer(writer, handlers) {
     },
     request: (method, params = {}) => {
       const id = counter.next++;
-      return new Promise((resolve9, reject) => {
-        pending.set(id, { method, resolve: resolve9, reject });
+      return new Promise((resolve8, reject) => {
+        pending.set(id, { method, resolve: resolve8, reject });
         writer.write({ id, method, params }).catch((error61) => {
           pending.delete(id);
           reject(error61 instanceof Error ? error61 : new Error(String(error61)));
@@ -25093,7 +25094,7 @@ function createNdjsonWriter(stream) {
     get writable() {
       return stream.writable && !stream.destroyed && failure5.error === void 0;
     },
-    write: (value) => new Promise((resolve9, reject) => {
+    write: (value) => new Promise((resolve8, reject) => {
       if (failure5.error) {
         reject(failure5.error);
         return;
@@ -25105,7 +25106,7 @@ function createNdjsonWriter(stream) {
       stream.write(`${JSON.stringify(value)}
 `, (error61) => {
         if (error61) reject(error61);
-        else resolve9();
+        else resolve8();
       });
     }),
     end: () => {
@@ -25137,11 +25138,11 @@ function hostProcess(child, tree, options, handlers) {
   });
   child.stderr.on("data", (chunk) => stderr.push(chunk));
   child.stderr.once("end", () => stderr.flush());
-  const processExit = new Promise((resolve9) => {
-    child.once("exit", (code, signal) => resolve9({ code, signal }));
+  const processExit = new Promise((resolve8) => {
+    child.once("exit", (code, signal) => resolve8({ code, signal }));
   });
-  const outputEnded = new Promise((resolve9) => {
-    child.stdout.once("close", () => resolve9());
+  const outputEnded = new Promise((resolve8) => {
+    child.stdout.once("close", () => resolve8());
   });
   const watch = async () => {
     const { clock, stdoutDrainMs, log, name } = options;
@@ -25438,13 +25439,13 @@ var init_chunk_A2TG6ROT = __esm({
         const turnId = input2.turnId;
         let finish = () => {
         };
-        const done = new Promise((resolve9) => {
+        const done = new Promise((resolve8) => {
           finish = (outcome2) => {
             if (this.#current?.id !== turnId) return;
             this.#current = void 0;
             if (this.#state === "busy") this.#state = "idle";
             this.#emit({ type: "turn_ended", turnId, outcome: outcome2 });
-            resolve9({ turnId, outcome: outcome2, providerSessionId: this.#sessionId });
+            resolve8({ turnId, outcome: outcome2, providerSessionId: this.#sessionId });
           };
         });
         const pending = {
@@ -25673,7 +25674,7 @@ var init_chunk_J2KTV5FP = __esm({
   }
 });
 
-// ../agent-core/dist/chunk-GI3ZGXTY.js
+// ../agent-core/dist/chunk-GW6CC6A3.js
 function repositories(input2, context) {
   const problems = new Map(input2.problems.map((problem) => [problem.path, problem]));
   const listed = context?.repositories ?? [];
@@ -25734,7 +25735,12 @@ function environmentInstructions(environment, cwd) {
     );
   } else if (build?.status === "failed") {
     lines.push(
-      `The latest image build (${build.id}) failed; sessions still boot from the previous image.`
+      environment.imageBuildId ? `The latest image build (${build.id}) failed; sessions still boot from the previous image.` : `The latest image build (${build.id}) failed; this environment has no image yet.`
+    );
+  }
+  if (environment.primaryRepository && environment.setupDirectory) {
+    lines.push(
+      `Image builds read .alan/ from ${environment.primaryRepository}; install steps and the start command run from ${environment.setupDirectory}.`
     );
   }
   if (environment.variables.length > 0) {
@@ -25742,18 +25748,18 @@ function environmentInstructions(environment, cwd) {
   }
   return lines;
 }
-function instructionsFor(snapshot2) {
-  const cwd = snapshot2.workspace.cwd ?? snapshot2.workspace.root ?? "the workspace";
+function instructionsFor(snapshot) {
+  const cwd = snapshot.workspace.cwd ?? snapshot.workspace.root ?? "the workspace";
   return [
-    ...snapshot2.session.trigger === "image_build" ? ["Alan sent this turn, not the user: it reports an image build result."] : [],
-    ...snapshot2.environment ? environmentInstructions(snapshot2.environment, cwd) : []
+    ...snapshot.session.trigger === "image_build" ? ["Alan sent this turn, not the user: it reports an image build result."] : [],
+    ...snapshot.environment ? environmentInstructions(snapshot.environment, cwd) : []
   ];
 }
-function startingInstructions(snapshot2) {
-  const cwd = snapshot2.workspace.cwd ?? snapshot2.workspace.root;
+function startingInstructions(snapshot) {
+  const cwd = snapshot.workspace.cwd ?? snapshot.workspace.root;
   return [
     ...cwd ? [`Work from ${cwd}.`] : [],
-    ...snapshot2.workspace.repositories.flatMap(repositoryInstructions)
+    ...snapshot.workspace.repositories.flatMap(repositoryInstructions)
   ];
 }
 function sessionKind(input2, context) {
@@ -25761,6 +25767,12 @@ function sessionKind(input2, context) {
   if (input2.spec.workflowExecutionId) return "workflow";
   return input2.spec.taskId ? "task" : "chat";
 }
+function setupPathsOf(environment) {
+  return {
+    ...environment.primaryRepository ? { primaryRepository: environment.primaryRepository } : {},
+    ...environment.setupDirectory ? { setupDirectory: environment.setupDirectory } : {}
+  };
+}
 function environmentOf(input2, context) {
   const environment = context?.environment;
   if (!environment) return void 0;
@@ -25771,22 +25783,23 @@ function environmentOf(input2, context) {
     installCommand: environment.installCommand,
     startCommand: environment.startCommand,
     imageBuildId: environment.imageBuildId,
+    ...setupPathsOf(environment),
     ...environment.pendingBuild ? { pendingBuild: environment.pendingBuild } : {},
     variables: environment.variables,
     ...start ? { start: start.state === "not_configured" ? start : { ...start, log: input2.startLogPath } } : {}
   };
 }
-function knownContext(snapshot2) {
-  const organizationId = snapshot2?.session.organizationId;
-  if (!snapshot2 || !organizationId) return void 0;
-  const environment = snapshot2.environment;
+function knownContext(snapshot) {
+  const organizationId = snapshot?.session.organizationId;
+  if (!snapshot || !organizationId) return void 0;
+  const environment = snapshot.environment;
   return {
-    kind: snapshot2.session.kind,
+    kind: snapshot.session.kind,
     trigger: "user",
     organizationId,
-    ...snapshot2.task ? { taskWorkingBranch: snapshot2.task.workingBranch } : {},
-    ...snapshot2.pullRequest ? { pullRequest: snapshot2.pullRequest } : {},
-    repositories: snapshot2.workspace.repositories.flatMap(
+    ...snapshot.task ? { taskWorkingBranch: snapshot.task.workingBranch } : {},
+    ...snapshot.pullRequest ? { pullRequest: snapshot.pullRequest } : {},
+    repositories: snapshot.workspace.repositories.flatMap(
       ({ path, name, url: url2, branch, branchSource, base }) => name && url2 && branch && branchSource && base ? [{ path, name, url: url2, branch, branchSource, base }] : []
     ),
     ...environment ? {
@@ -25796,6 +25809,7 @@ function knownContext(snapshot2) {
         installCommand: environment.installCommand,
         startCommand: environment.startCommand,
         imageBuildId: environment.imageBuildId,
+        ...setupPathsOf(environment),
         ...environment.pendingBuild ? { pendingBuild: environment.pendingBuild } : {},
         variables: environment.variables
       }
@@ -25833,7 +25847,7 @@ function isScalar(value) {
 }
 function scalar(value) {
   if (typeof value !== "string") return String(value);
-  return PLAIN_SCALAR.test(value) ? value : JSON.stringify(value);
+  return PLAIN_SCALAR.test(value) ? value : JSON.stringify(value).replaceAll("<", "\\u003c");
 }
 function snakeCase(key) {
   return key.replace(/[A-Z]/g, (letter) => `_${letter.toLowerCase()}`);
@@ -25913,15 +25927,15 @@ function updateBody(previous, next) {
   if (Object.keys(facts).length === 0) return void 0;
   return next.session.trigger === "user" ? facts : { session: { trigger: next.session.trigger }, ...facts };
 }
-function renderAgentContext(snapshot2, previous) {
+function renderAgentContext(snapshot, previous) {
   const full = block("alan_agent_context", {
-    ...snapshot2,
-    ...snapshot2.environment ? { environment: withCommandPreviews(snapshot2.environment) } : {},
-    instructions: [...startingInstructions(snapshot2), ...snapshot2.instructions]
+    ...snapshot,
+    ...snapshot.environment ? { environment: withCommandPreviews(snapshot.environment) } : {},
+    instructions: [...startingInstructions(snapshot), ...snapshot.instructions]
   });
-  const update = previous ? updateBody(previous, snapshot2) : void 0;
+  const update = previous ? updateBody(previous, snapshot) : void 0;
   return {
-    snapshot: snapshot2,
+    snapshot,
     full,
     ...update ? { update: block("alan_agent_context_update", update) } : {}
   };
@@ -26287,8 +26301,8 @@ ${body}` : body;
   return spec.mode === "plan" ? planModePrefix(prefixed) : prefixed;
 }
 var startCommandStateSchema, repositorySnapshotSchema, environmentSnapshotSchema, agentContextSnapshotSchema, BRANCH_REASONS, PLAIN_SCALAR, COMMAND_PREVIEW_CHARS, MAX_PARSED_ATTACHMENTS, MAX_PARSED_ATTACHMENT_CHARS, MAX_METADATA_CHARS, UNAVAILABLE, READ_ONLY_MODES, AGENT_MODES;
-var init_chunk_GI3ZGXTY = __esm({
-  "../agent-core/dist/chunk-GI3ZGXTY.js"() {
+var init_chunk_GW6CC6A3 = __esm({
+  "../agent-core/dist/chunk-GW6CC6A3.js"() {
     "use strict";
     init_runtime_v2();
     init_zod();
@@ -26317,6 +26331,8 @@ var init_chunk_GI3ZGXTY = __esm({
       installCommand: external_exports.string().nullable(),
       startCommand: external_exports.string().nullable(),
       imageBuildId: external_exports.string().nullable(),
+      primaryRepository: external_exports.string().optional(),
+      setupDirectory: external_exports.string().optional(),
       pendingBuild: agentContextBuildSchema.optional(),
       variables: external_exports.array(external_exports.string()),
       start: external_exports.intersection(startCommandStateSchema, external_exports.object({ log: external_exports.string().optional() })).optional()
@@ -27341,18 +27357,24 @@ function realCwd(cwd) {
     return cwd;
   }
 }
+function projectDirs(projectsRoot) {
+  try {
+    return (0, import_fs5.readdirSync)(projectsRoot, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name);
+  } catch {
+    return [];
+  }
+}
 function claudeSessionLogExists(query) {
   if (!query.sessionId || !query.cwd) return false;
-  for (const cwd of /* @__PURE__ */ new Set([query.cwd, realCwd(query.cwd)])) {
-    const log = (0, import_path5.join)(
-      query.claudeHome,
-      "projects",
-      encodeProjectDir(cwd),
-      `${query.sessionId}.jsonl`
-    );
-    if ((0, import_fs5.existsSync)(log)) return true;
-  }
-  return false;
+  const projectsRoot = (0, import_path5.join)(query.claudeHome, "projects");
+  const fileName = `${query.sessionId}.jsonl`;
+  const here = new Set([query.cwd, realCwd(query.cwd)].map(encodeProjectDir));
+  for (const dir of here) {
+    if ((0, import_fs5.existsSync)((0, import_path5.join)(projectsRoot, dir, fileName))) return true;
+  }
+  return projectDirs(projectsRoot).some(
+    (dir) => !here.has(dir) && (0, import_fs5.existsSync)((0, import_path5.join)(projectsRoot, dir, fileName))
+  );
 }
 function envDigest(env) {
   const hash2 = (0, import_crypto7.createHash)("sha256");
@@ -27434,7 +27456,7 @@ var init_claude = __esm({
     init_chunk_ZCTKXKYY();
     init_chunk_J2KTV5FP();
     init_chunk_XE7BX6YP();
-    init_chunk_GI3ZGXTY();
+    init_chunk_GW6CC6A3();
     init_chunk_YXWJW7I5();
     init_effort();
     import_crypto6 = require("crypto");
@@ -28160,8 +28182,8 @@ var init_claude = __esm({
       }
       async #awaitTaskStop(requestId, taskId) {
         const timer = new AbortController();
-        const answered = new Promise((resolve9) => {
-          this.#taskStops.set(requestId, resolve9);
+        const answered = new Promise((resolve8) => {
+          this.#taskStops.set(requestId, resolve8);
         });
         const timeoutMs = this.#options.stopTaskTimeoutMs;
         const timedOut = this.#options.clock.sleep(timeoutMs, timer.signal).then(
@@ -28234,17 +28256,17 @@ var init_claude = __esm({
         };
         let markStarted = () => {
         };
-        const whenStarted = new Promise((resolve9) => {
-          markStarted = resolve9;
+        const whenStarted = new Promise((resolve8) => {
+          markStarted = resolve8;
         });
-        const done = new Promise((resolve9) => {
+        const done = new Promise((resolve8) => {
           finish = (outcome2) => {
             if (this.#current?.id !== id) return;
             this.#current = void 0;
             this.#lastTurn = turn;
             if (this.#state === "busy") this.#state = "idle";
             this.#emit({ type: "turn_ended", turnId: id, outcome: outcome2 });
-            resolve9({ turnId: id, outcome: outcome2, providerSessionId: this.#providerSessionId });
+            resolve8({ turnId: id, outcome: outcome2, providerSessionId: this.#providerSessionId });
           };
         });
         const active = {
@@ -28362,8 +28384,8 @@ var init_claude = __esm({
         void removeLaunchFiles(this.#launchFiles).catch((error61) => {
           this.#options.log.warn("claude.launch_files_cleanup_failed", { error: error61 });
         });
-        for (const resolve9 of this.#taskStops.values()) {
-          resolve9({ ok: false, reason: "runtime_unavailable", message: "Claude Code exited." });
+        for (const resolve8 of this.#taskStops.values()) {
+          resolve8({ ok: false, reason: "runtime_unavailable", message: "Claude Code exited." });
         }
         const active = this.#current;
         if (active) {
@@ -29652,7 +29674,7 @@ var init_codex = __esm({
     init_chunk_ZCTKXKYY();
     init_chunk_J2KTV5FP();
     init_chunk_XE7BX6YP();
-    init_chunk_GI3ZGXTY();
+    init_chunk_GW6CC6A3();
     init_chunk_YXWJW7I5();
     import_fs6 = require("fs");
     import_path6 = require("path");
@@ -29860,7 +29882,7 @@ var init_codex = __esm({
         const buckets = asRecord(response?.rateLimitsByLimitId);
         if (buckets) {
           return Object.entries(buckets).flatMap(
-            ([limitId, snapshot2]) => this.#update(snapshot2, limitId)
+            ([limitId, snapshot]) => this.#update(snapshot, limitId)
           );
         }
         return this.#update(response?.rateLimits);
@@ -29869,16 +29891,16 @@ var init_codex = __esm({
         return this.#update(params.rateLimits);
       }
       #update(value, bucketId) {
-        const snapshot2 = asRecord(value);
-        if (!snapshot2) return [];
-        const primary = windowPatch(snapshot2.primary);
-        const secondary = windowPatch(snapshot2.secondary);
-        const spend = spendPatch(snapshot2.individualLimit, snapshot2.spendControlReached);
-        const credits = creditsPatch(snapshot2.credits);
-        const planType = snapshot2.planType === null ? null : asString(snapshot2.planType) || void 0;
+        const snapshot = asRecord(value);
+        if (!snapshot) return [];
+        const primary = windowPatch(snapshot.primary);
+        const secondary = windowPatch(snapshot.secondary);
+        const spend = spendPatch(snapshot.individualLimit, snapshot.spendControlReached);
+        const credits = creditsPatch(snapshot.credits);
+        const planType = snapshot.planType === null ? null : asString(snapshot.planType) || void 0;
         const parsed = runCodexRateLimitsUpdateSchema.safeParse({
           sessionUpdate: "_alan/codex.rate_limits",
-          limitId: bucketId ?? (asString(snapshot2.limitId) || "codex"),
+          limitId: bucketId ?? (asString(snapshot.limitId) || "codex"),
           ...primary === void 0 ? {} : { primary },
           ...secondary === void 0 ? {} : { secondary },
           ...spend === void 0 ? {} : { spend },
@@ -30324,10 +30346,10 @@ var init_codex = __esm({
         };
         let identify = () => {
         };
-        const identified = new Promise((resolve9) => {
-          identify = resolve9;
+        const identified = new Promise((resolve8) => {
+          identify = resolve8;
         });
-        const done = new Promise((resolve9) => {
+        const done = new Promise((resolve8) => {
           finish = (outcome2) => {
             if (this.#current?.id !== id) return;
             this.#current = void 0;
@@ -30335,7 +30357,7 @@ var init_codex = __esm({
             if (this.#state === "busy") this.#state = "idle";
             this.#host.scanDescendants(true);
             this.#emit({ type: "turn_ended", turnId: id, outcome: outcome2 });
-            resolve9({ turnId: id, outcome: outcome2, providerSessionId: this.#threadId });
+            resolve8({ turnId: id, outcome: outcome2, providerSessionId: this.#threadId });
           };
         });
         const active = {
@@ -30826,7 +30848,7 @@ function alanCodeConfigContent(existing, input2) {
   });
 }
 function readBody2(response) {
-  return new Promise((resolve9, reject) => {
+  return new Promise((resolve8, reject) => {
     const chunks = [];
     let size = 0;
     response.on("data", (chunk) => {
@@ -30834,7 +30856,7 @@ function readBody2(response) {
       if (size > MAX_CATALOG_BYTES) response.destroy(new Error("catalog too large"));
       else chunks.push(chunk);
     });
-    response.on("end", () => resolve9(Buffer.concat(chunks).toString("utf8")));
+    response.on("end", () => resolve8(Buffer.concat(chunks).toString("utf8")));
     response.on("error", reject);
   });
 }
@@ -30850,13 +30872,13 @@ function parseResponseBody(text2, status) {
 }
 function getJson(url2, headers, timeout, signal) {
   const request2 = url2.protocol === "https:" ? import_https.request : import_http3.request;
-  return new Promise((resolve9, reject) => {
+  return new Promise((resolve8, reject) => {
     const outgoing = request2(url2, { method: "GET", headers, timeout, signal }, (response) => {
       const status = response.statusCode ?? 0;
       readBody2(response).then((text2) => {
         const body = parseResponseBody(text2, status);
         if (status < 200 || status >= 300) reject(new CatalogResponseError(status, body));
-        else resolve9(body);
+        else resolve8(body);
       }).catch(reject);
     });
     outgoing.on("timeout", () => outgoing.destroy(new Error("catalog timed out")));
@@ -39089,12 +39111,12 @@ function shellStart(update, sessionId) {
   ];
 }
 function shellEnd(update) {
-  const snapshot2 = asRecord(update.task_snapshot);
-  const taskId = optional2(snapshot2?.task_id);
-  if (!snapshot2 || !taskId) return [];
-  const killed = snapshot2.explicitly_killed === true;
-  const exitCode = snapshot2.exit_code;
-  const failed = typeof exitCode === "number" && exitCode !== 0 || optional2(snapshot2.signal) !== void 0;
+  const snapshot = asRecord(update.task_snapshot);
+  const taskId = optional2(snapshot?.task_id);
+  if (!snapshot || !taskId) return [];
+  const killed = snapshot.explicitly_killed === true;
+  const exitCode = snapshot.exit_code;
+  const failed = typeof exitCode === "number" && exitCode !== 0 || optional2(snapshot.signal) !== void 0;
   const ending = killed ? "stopped" : failed ? "failed" : "completed";
   return [{ type: "end", taskId, ending }];
 }
@@ -39240,7 +39262,7 @@ var init_acp3 = __esm({
     init_chunk_ZCTKXKYY();
     init_chunk_J2KTV5FP();
     init_chunk_XE7BX6YP();
-    init_chunk_GI3ZGXTY();
+    init_chunk_GW6CC6A3();
     init_chunk_YXWJW7I5();
     import_promises24 = require("fs/promises");
     import_path9 = require("path");
@@ -39766,7 +39788,7 @@ var init_acp3 = __esm({
         const turn = new AcpTurn(`acp-${this.#turns}-${id}`, this.#profile);
         let finish = () => {
         };
-        const done = new Promise((resolve9) => {
+        const done = new Promise((resolve8) => {
           finish = (outcome2) => {
             if (this.#current?.id !== id) return;
             this.#current = void 0;
@@ -39774,7 +39796,7 @@ var init_acp3 = __esm({
             if (this.#state === "busy") this.#state = "idle";
             this.#host.scanDescendants(true);
             this.#emit({ type: "turn_ended", turnId: id, outcome: outcome2 });
-            resolve9({ turnId: id, outcome: outcome2, providerSessionId: this.#sessionId });
+            resolve8({ turnId: id, outcome: outcome2, providerSessionId: this.#sessionId });
           };
         });
         const active = { id, turn, done, finish, cancelRequested: false };
@@ -40359,12 +40381,11 @@ function createPersistentDriver(provider4, options) {
     log.warn("holder.history_rejected", { harness: provider4.harness });
     await session.suspend();
   };
-  const respond = async (request2, mayWrite) => {
+  const respond = async (request2) => {
     const turn = live.turn;
     if (turn === void 0 || turn.runId !== request2.runId) return "unknown_run";
     const isWaiting = () => live.turn === turn && turn.waiting.has(request2.toolCallId);
     if (!isWaiting() || turn.session.respond === void 0) return "not_waiting";
-    if (!await mayWrite() || !isWaiting()) return "not_waiting";
     turn.waiting.delete(request2.toolCallId);
     try {
       await turn.session.respond(request2.toolCallId, request2.answer);
@@ -41106,7 +41127,7 @@ var init_opencode = __esm({
     init_chunk_ZCTKXKYY();
     init_chunk_J2KTV5FP();
     init_chunk_XE7BX6YP();
-    init_chunk_GI3ZGXTY();
+    init_chunk_GW6CC6A3();
     init_chunk_YXWJW7I5();
     import_http4 = require("http");
     init_runtime_v2();
@@ -42590,8 +42611,8 @@ function createDroidPeer(writer, handlers) {
     },
     request: (method, params = {}) => {
       const id = `alan-${counter.next++}`;
-      return new Promise((resolve9, reject) => {
-        pending.set(id, { method, resolve: resolve9, reject });
+      return new Promise((resolve8, reject) => {
+        pending.set(id, { method, resolve: resolve8, reject });
         writer.write(envelope("request", { id, method, params })).catch((error61) => {
           pending.delete(id);
           reject(error61 instanceof Error ? error61 : new Error(String(error61)));
@@ -42940,7 +42961,7 @@ var init_droid = __esm({
     init_chunk_ZCTKXKYY();
     init_chunk_J2KTV5FP();
     init_chunk_XE7BX6YP();
-    init_chunk_GI3ZGXTY();
+    init_chunk_GW6CC6A3();
     init_chunk_YXWJW7I5();
     init_runtime_v2();
     import_crypto16 = require("crypto");
@@ -43219,14 +43240,14 @@ var init_droid = __esm({
         const turn = new DroidTurn(sessionId, this.#memory);
         let finish = () => {
         };
-        const done = new Promise((resolve9) => {
+        const done = new Promise((resolve8) => {
           finish = (outcome2) => {
             if (this.#current?.id !== id) return;
             this.#current = void 0;
             if (this.#state === "busy") this.#state = "idle";
             this.#host.scanDescendants(true);
             this.#emit({ type: "turn_ended", turnId: id, outcome: outcome2 });
-            resolve9({ turnId: id, outcome: outcome2, providerSessionId: this.#sessionId });
+            resolve8({ turnId: id, outcome: outcome2, providerSessionId: this.#sessionId });
           };
         });
         const active = { id, turn, done, finish, cancelRequested: false };
@@ -44049,7 +44070,7 @@ var init_antigravity = __esm({
     init_chunk_XC5676SG();
     init_chunk_ZCTKXKYY();
     init_chunk_XE7BX6YP();
-    init_chunk_GI3ZGXTY();
+    init_chunk_GW6CC6A3();
     init_chunk_YXWJW7I5();
     import_promises28 = require("fs/promises");
     import_path12 = require("path");
@@ -44754,7 +44775,7 @@ var init_command_code = __esm({
     init_chunk_ZCTKXKYY();
     init_chunk_J2KTV5FP();
     init_chunk_XE7BX6YP();
-    init_chunk_GI3ZGXTY();
+    init_chunk_GW6CC6A3();
     init_chunk_YXWJW7I5();
     import_promises29 = require("fs/promises");
     import_path15 = require("path");
@@ -45551,46 +45572,6 @@ function openFileLog(path, level, clock) {
   };
 }
 
-// src/kernel/maintenance.ts
-function startMaintenance({ everyMs, jobs, clock, log }) {
-  const controller = new AbortController();
-  let running = Promise.resolve();
-  const runJobs = async () => {
-    for (const job of jobs) {
-      if (controller.signal.aborted) return;
-      try {
-        await job.run(controller.signal);
-      } catch (error61) {
-        if (!controller.signal.aborted)
-          log.warn("maintenance.job_failed", { job: job.name, error: error61 });
-      }
-    }
-  };
-  const tick = () => {
-    running = running.then(runJobs);
-    return running;
-  };
-  const loop = async () => {
-    while (!controller.signal.aborted) {
-      try {
-        await clock.sleep(everyMs, controller.signal);
-      } catch {
-        return;
-      }
-      await tick();
-    }
-  };
-  const looping = loop();
-  return {
-    runNow: tick,
-    [Symbol.asyncDispose]: async () => {
-      controller.abort();
-      await looping;
-      await running;
-    }
-  };
-}
-
 // src/api-client/http.ts
 var import_node_http = require("http");
 var import_node_https = require("https");
@@ -45618,7 +45599,7 @@ function transportFailure(request2, error61) {
   });
 }
 function readBody(incoming, url2, maxBytes) {
-  return new Promise((resolve9, reject) => {
+  return new Promise((resolve8, reject) => {
     const declared = Number(incoming.headers["content-length"] ?? "0");
     if (maxBytes !== void 0 && declared > maxBytes) {
       incoming.destroy();
@@ -45637,7 +45618,7 @@ function readBody(incoming, url2, maxBytes) {
       chunks.push(chunk);
     });
     incoming.on("error", reject);
-    incoming.on("end", () => resolve9(Buffer.concat(chunks)));
+    incoming.on("end", () => resolve8(Buffer.concat(chunks)));
   });
 }
 function isConnectionReset(error61) {
@@ -45645,7 +45626,7 @@ function isConnectionReset(error61) {
 }
 function exchange(request2, agents, attempt = 0) {
   const { signal, url: url2 } = request2;
-  return new Promise((resolve9, reject) => {
+  return new Promise((resolve8, reject) => {
     if (signal.aborted) {
       reject(signal.reason);
       return;
@@ -45672,7 +45653,7 @@ function exchange(request2, agents, attempt = 0) {
       const stale = outgoing.reusedSocket && !responded && isConnectionReset(error61);
       if (stale && attempt < STALE_SOCKET_RETRIES && !signal.aborted) {
         settle();
-        resolve9(exchange(request2, agents, attempt + 1));
+        resolve8(exchange(request2, agents, attempt + 1));
         return;
       }
       fail(error61);
@@ -45685,7 +45666,7 @@ function exchange(request2, agents, attempt = 0) {
       readBody(incoming, url2, isRedirect(status) ? void 0 : request2.maxBodyBytes).then(
         (body) => {
           settle();
-          resolve9({ status, headers: incoming.headers, body });
+          resolve8({ status, headers: incoming.headers, body });
         },
         fail
       );
@@ -46004,7 +45985,7 @@ function createGitRunner(options) {
       }
       await killProcessTree(child.pid, { signal: "SIGKILL", child, platform });
     };
-    return new Promise((resolve9, reject) => {
+    return new Promise((resolve8, reject) => {
       let ending = null;
       const stop = (next) => {
         if (ending !== null) return;
@@ -46029,7 +46010,7 @@ function createGitRunner(options) {
         signal.removeEventListener("abort", onAbort);
         const final = ending ?? last;
         if (final.kind === "exited") {
-          resolve9({ exitCode: final.exitCode, stdout: stdout.text(), stderr: stderr.text() });
+          resolve8({ exitCode: final.exitCode, stdout: stdout.text(), stderr: stderr.text() });
         } else {
           reject(faultFor(final, command));
         }
@@ -46351,9 +46332,9 @@ function isProcessAlive(pid) {
   }
 }
 async function linuxStartTime(pid) {
-  const stat16 = await (0, import_promises10.readFile)(`/proc/${pid}/stat`, "utf8").catch(() => null);
-  if (stat16 === null) return null;
-  const fields = stat16.slice(stat16.lastIndexOf(")") + 2).split(" ");
+  const stat15 = await (0, import_promises10.readFile)(`/proc/${pid}/stat`, "utf8").catch(() => null);
+  if (stat15 === null) return null;
+  const fields = stat15.slice(stat15.lastIndexOf(")") + 2).split(" ");
   return fields[19] ?? null;
 }
 async function linuxCommand(pid) {
@@ -46532,7 +46513,7 @@ function statusOf(error61) {
   }
   return 1;
 }
-var systemExec = (request2) => new Promise((resolve9) => {
+var systemExec = (request2) => new Promise((resolve8) => {
   const child = (0, import_node_child_process5.execFile)(
     request2.command,
     [...request2.args],
@@ -46543,7 +46524,7 @@ var systemExec = (request2) => new Promise((resolve9) => {
       windowsHide: true
     },
     (error61, stdout, stderr) => {
-      resolve9({ status: statusOf(error61), stdout, stderr });
+      resolve8({ status: statusOf(error61), stdout, stderr });
     }
   );
   child.stdin?.on("error", () => {
@@ -47507,7 +47488,7 @@ function openRepositoryLocks(options) {
 
 // src/cli/config.ts
 var import_node_os7 = require("os");
-var import_node_path33 = require("path");
+var import_node_path31 = require("path");
 init_zod();
 
 // src/client/locate.ts
@@ -47528,9 +47509,9 @@ function defaultInstallDir({ platform, home, env }) {
 
 // src/sessions/index.ts
 var import_node_crypto16 = require("crypto");
-var import_promises41 = require("fs/promises");
+var import_promises39 = require("fs/promises");
 var import_node_os6 = require("os");
-var import_node_path32 = require("path");
+var import_node_path30 = require("path");
 
 // src/holder/control-client.ts
 var import_node_crypto12 = require("crypto");
@@ -47585,9 +47566,9 @@ function selectDriver(persistent, fallback) {
     suspend: async () => {
       await Promise.all([...drivers].map((driver) => driver.suspend?.()));
     },
-    respond: async (request2, mayWrite) => {
+    respond: async (request2) => {
       for (const driver of drivers) {
-        const status = await driver.respond?.(request2, mayWrite);
+        const status = await driver.respond?.(request2);
         if (status !== void 0 && status !== "unknown_run") return status;
       }
       return "unknown_run";
@@ -47627,9 +47608,9 @@ function createLazyDriver(load) {
     suspend: async () => {
       if (loaded.driver !== void 0) await (await loaded.driver).suspend?.();
     },
-    respond: async (request2, mayWrite) => {
+    respond: async (request2) => {
       if (loaded.driver === void 0) return "unknown_run";
-      return await (await loaded.driver).respond?.(request2, mayWrite) ?? "unknown_run";
+      return await (await loaded.driver).respond?.(request2) ?? "unknown_run";
     },
     stopTask: async (taskId) => {
       if (loaded.driver === void 0) return TASK_NOT_FOUND;
@@ -47844,14 +47825,14 @@ async function prepareRunInputs(spec, { source, tmpDir, signal, skills = [] }) {
 var import_node_crypto15 = require("crypto");
 var import_node_fs11 = require("fs");
 var import_node_net2 = require("net");
-var import_node_path31 = require("path");
+var import_node_path29 = require("path");
 init_runtime_v2();
 
 // src/holder/admission.ts
 var import_node_fs9 = require("fs");
-var import_promises37 = require("fs/promises");
+var import_promises35 = require("fs/promises");
 var import_node_os5 = require("os");
-var import_node_path27 = require("path");
+var import_node_path25 = require("path");
 init_constants();
 
 // ../shared/dist/node/local-workspace.js
@@ -47862,88 +47843,16 @@ function resolveAlanDefaultWorkspacePath(homeDirectory = (0, import_node_os4.hom
   return (0, import_node_path20.join)(homeDirectory, ".alan", "workspace");
 }
 
-// src/holder/admission-relocation.ts
+// src/holder/agent-context.ts
 var import_promises32 = require("fs/promises");
 var import_node_path21 = require("path");
-var MAX_RELOCATION_CANDIDATES = 200;
-var RELOCATION_BUDGET_MS = 2e4;
-function repositoryIdentity(url2) {
-  const trimmed4 = url2.trim().replace(/\/+$/, "").replace(/\.git$/i, "");
-  if (trimmed4.length === 0) return null;
-  const scp = /^(?:[^@/]+@)?([^:/]+):(.+)$/.exec(trimmed4);
-  if (scp !== null && !trimmed4.includes("://")) {
-    return `${scp[1]}/${scp[2]}`.toLowerCase();
-  }
-  try {
-    const parsed = new URL(trimmed4);
-    return `${parsed.hostname}${parsed.pathname}`.replace(/\/+$/, "").toLowerCase();
-  } catch {
-    return null;
-  }
-}
-function repositoryIdentities(urls) {
-  return new Set(
-    urls.map(repositoryIdentity).filter((identity) => identity !== null)
-  );
-}
-async function originIdentity(git, path, signal) {
-  try {
-    const output2 = await git.run(
-      { cwd: path, args: ["config", "--get", "remote.origin.url"], readOnly: true },
-      signal
-    );
-    return output2.exitCode === 0 ? repositoryIdentity(output2.stdout) : null;
-  } catch {
-    return null;
-  }
-}
-async function childDirectories(parent, limit) {
-  try {
-    const entries = await (0, import_promises32.readdir)(parent, { withFileTypes: true });
-    return entries.filter((entry) => entry.isDirectory()).slice(0, limit).map((entry) => (0, import_node_path21.join)(parent, entry.name));
-  } catch {
-    return [];
-  }
-}
-async function candidateFolders(search) {
-  const roots = /* @__PURE__ */ new Map();
-  for (const path of [search.missingPath, ...search.approvedWorkspacePaths]) {
-    const parent = (0, import_node_path21.dirname)((0, import_node_path21.resolve)(path));
-    roots.set(comparablePath(parent, search.platform), parent);
-  }
-  const candidates2 = /* @__PURE__ */ new Map();
-  for (const root of roots.values()) {
-    const remaining = MAX_RELOCATION_CANDIDATES - candidates2.size;
-    if (remaining <= 0) break;
-    for (const child of await childDirectories(root, remaining)) {
-      candidates2.set(comparablePath(child, search.platform), child);
-    }
-  }
-  return [...candidates2.values()];
-}
-async function discoverRelocatedWorkspace(search) {
-  if (search.expected.size === 0) return null;
-  const signal = AbortSignal.any([search.signal, AbortSignal.timeout(RELOCATION_BUDGET_MS)]);
-  const matches = [];
-  for (const candidate of await candidateFolders(search)) {
-    if (signal.aborted) return null;
-    const identity = await originIdentity(search.git, candidate, signal);
-    if (identity !== null && search.expected.has(identity)) matches.push(candidate);
-    if (matches.length > 1) return null;
-  }
-  return matches[0] ?? null;
-}
-
-// src/holder/agent-context.ts
-var import_promises33 = require("fs/promises");
-var import_node_path22 = require("path");
 
 // ../agent-core/dist/prompt.js
-init_chunk_GI3ZGXTY();
+init_chunk_GW6CC6A3();
 
 // src/holder/agent-context.ts
 async function readText2(path) {
-  return (0, import_promises33.readFile)(path, "utf8").then(
+  return (0, import_promises32.readFile)(path, "utf8").then(
     (text2) => text2.trim(),
     () => null
   );
@@ -47958,15 +47867,15 @@ async function startCommandState(statusPath) {
   return code === 0 ? { state: "exited_ok" } : { state: "failed", exitCode: code };
 }
 function createAgentContext(deps) {
-  const statusPath = (0, import_node_path22.join)(deps.homeDir, ".alan", "start-commands.status");
-  const logPath = (0, import_node_path22.join)(deps.homeDir, ".alan", "start-commands.log");
+  const statusPath = (0, import_node_path21.join)(deps.homeDir, ".alan", "start-commands.status");
+  const logPath = (0, import_node_path21.join)(deps.homeDir, ".alan", "start-commands.log");
   return async (spec, problems) => {
-    const file2 = (0, import_node_path22.join)(deps.dir, `${spec.conversationId}.json`);
+    const file2 = (0, import_node_path21.join)(deps.dir, `${spec.conversationId}.json`);
     const saved = await readJsonFile(file2, agentContextSnapshotSchema);
     const known = saved.kind === "ok" ? saved.value : void 0;
     const hasEnvironment = (spec.agentContext ?? known)?.environment !== void 0;
     const start = hasEnvironment ? await startCommandState(statusPath) : void 0;
-    const snapshot2 = agentContextSnapshot({
+    const snapshot = agentContextSnapshot({
       spec,
       ...spec.approvedWorkspacePaths?.[0] ? { workspaceRoot: spec.approvedWorkspacePaths[0] } : {},
       problems,
@@ -47974,39 +47883,39 @@ function createAgentContext(deps) {
       startLogPath: logPath,
       ...known ? { known } : {}
     });
-    if (snapshot2 === null) return void 0;
-    const rendered = renderAgentContext(snapshot2, known);
+    if (snapshot === null) return void 0;
+    const rendered = renderAgentContext(snapshot, known);
     return {
       full: rendered.full,
       ...rendered.update ? { update: rendered.update } : {},
-      save: () => writeJsonFileAtomic(file2, snapshot2)
+      save: () => writeJsonFileAtomic(file2, snapshot)
     };
   };
 }
 
 // src/holder/checkout-refresh.ts
-var import_node_path25 = require("path");
+var import_node_path24 = require("path");
 
 // src/holder/claim-once.ts
 var import_node_crypto14 = require("crypto");
-var import_promises34 = require("fs/promises");
-var import_node_path23 = require("path");
+var import_promises33 = require("fs/promises");
+var import_node_path22 = require("path");
 async function claimOnce(dir, name) {
   try {
-    await (0, import_promises34.mkdir)(dir, { recursive: true, mode: 448 });
-    await (await (0, import_promises34.open)((0, import_node_path23.join)(dir, name), "wx")).close();
+    await (0, import_promises33.mkdir)(dir, { recursive: true, mode: 448 });
+    await (await (0, import_promises33.open)((0, import_node_path22.join)(dir, name), "wx")).close();
     return true;
   } catch {
     return false;
   }
 }
 function claimFirstLease(freshnessDir, path) {
-  return claimOnce((0, import_node_path23.join)(freshnessDir, "leased"), (0, import_node_crypto14.createHash)("sha256").update(path).digest("hex"));
+  return claimOnce((0, import_node_path22.join)(freshnessDir, "leased"), (0, import_node_crypto14.createHash)("sha256").update(path).digest("hex"));
 }
 
 // src/holder/requested-checkout.ts
-var import_promises35 = require("fs/promises");
-var import_node_path24 = require("path");
+var import_promises34 = require("fs/promises");
+var import_node_path23 = require("path");
 var REMOTE2 = "origin";
 var REASON_MAX_CHARS = 200;
 function firstLine2(text2) {
@@ -48027,8 +47936,8 @@ function notSwitched(checkout, current, reason) {
   );
 }
 async function clone2(checkout, deps, signal) {
-  const parent = (0, import_node_path24.dirname)(checkout.path);
-  await (0, import_promises35.mkdir)(parent, { recursive: true });
+  const parent = (0, import_node_path23.dirname)(checkout.path);
+  await (0, import_promises34.mkdir)(parent, { recursive: true });
   await assertValidBranch(deps.git, parent, checkout.branch, signal);
   const output2 = await deps.git.run(
     {
@@ -48180,9 +48089,9 @@ async function applyRequestedCheckout(checkout, spec, deps, signal) {
 function short(sha) {
   return sha.slice(0, 12);
 }
-function staleCheckout(path, snapshot2, tip) {
-  const checkout = snapshot2 === void 0 ? "is the environment snapshot's checkout" : `is the environment snapshot's checkout of ${snapshot2.branch} (commit ${short(snapshot2.head)})`;
-  const base = snapshot2 === void 0 ? "its upstream" : `origin/${snapshot2.base}`;
+function staleCheckout(path, snapshot, tip) {
+  const checkout = snapshot === void 0 ? "is the environment snapshot's checkout" : `is the environment snapshot's checkout of ${snapshot.branch} (commit ${short(snapshot.head)})`;
+  const base = snapshot === void 0 ? "its upstream" : `origin/${snapshot.base}`;
   const remote = tip === void 0 ? "may be ahead" : `is ahead at ${short(tip)}`;
   return {
     path,
@@ -48193,18 +48102,18 @@ function staleCheckout(path, snapshot2, tip) {
 async function fastForward(freshness, operationId, deps, signal) {
   var _stack = [];
   try {
-    const { path: cwd, snapshot: snapshot2, tip } = freshness;
-    const attempt = await deps.locks.tryExclusive(snapshot2.commonDir, operationId);
+    const { path: cwd, snapshot, tip } = freshness;
+    const attempt = await deps.locks.tryExclusive(snapshot.commonDir, operationId);
     if (attempt.kind === "busy") return false;
     const _lock = __using(_stack, attempt.lock, true);
     const now = await readCheckoutStatus(deps.git, cwd, signal);
-    if (now === null || now.dirty || now.head !== snapshot2.head || now.branch !== snapshot2.branch) {
+    if (now === null || now.dirty || now.head !== snapshot.head || now.branch !== snapshot.branch) {
       return false;
     }
     const git = (args) => deps.git.run({ cwd, args }, signal);
     if ((await git(["switch", "--quiet", "--detach", tip])).exitCode !== 0) return false;
-    const moved = await git(["update-ref", `refs/heads/${snapshot2.branch}`, tip, snapshot2.head]);
-    const back = await git(["switch", "--quiet", snapshot2.branch]);
+    const moved = await git(["update-ref", `refs/heads/${snapshot.branch}`, tip, snapshot.head]);
+    const back = await git(["switch", "--quiet", snapshot.branch]);
     return moved.exitCode === 0 && back.exitCode === 0;
   } catch (_) {
     var _error = _, _hasError = true;
@@ -48236,9 +48145,8 @@ function problemFor(freshness) {
       return staleCheckout(freshness.path, void 0);
   }
 }
-async function checkoutsOf(spec, leaseTargets) {
-  if (leaseTargets.length > 0 || spec.projectPath === void 0) return [...leaseTargets];
-  return checkoutsUnder(spec.projectPath);
+async function checkoutsOf(spec) {
+  return spec.projectPath === void 0 ? [] : checkoutsUnder(spec.projectPath);
 }
 function requestedCheckoutsOf(spec, log) {
   const roots = spec.approvedWorkspacePaths ?? [];
@@ -48266,7 +48174,7 @@ async function applyRequestedCheckouts(spec, deps, signal) {
       ...outcome2.kind === "moved" ? { how: outcome2.how } : {}
     });
     if (outcome2.kind === "on_branch") continue;
-    settled2.add((0, import_node_path25.resolve)(checkout.path));
+    settled2.add((0, import_node_path24.resolve)(checkout.path));
     if (outcome2.kind === "noted") {
       problems.push({ path: checkout.path, problem: outcome2.problem, action: outcome2.action });
     }
@@ -48276,7 +48184,7 @@ async function applyRequestedCheckouts(spec, deps, signal) {
 async function refreshSnapshotCheckouts(spec, targets, settled2, deps, signal) {
   const problems = [];
   for (const target of targets) {
-    if (settled2.has((0, import_node_path25.resolve)(target))) continue;
+    if (settled2.has((0, import_node_path24.resolve)(target))) continue;
     const freshness = await readCheckoutFreshness(deps.dir, target);
     if (freshness === null) continue;
     const outcome2 = await atFirstLease(freshness, spec, deps, signal).catch(
@@ -48293,11 +48201,11 @@ async function refreshSnapshotCheckouts(spec, targets, settled2, deps, signal) {
   return problems;
 }
 function createCheckoutRefresh(deps) {
-  return async (spec, leaseTargets, signal) => {
+  return async (spec, signal) => {
     if (spec.providerSessionId !== void 0) return [];
-    if (!await claimOnce((0, import_node_path25.join)(deps.dir, "conversations"), spec.conversationId)) return [];
+    if (!await claimOnce((0, import_node_path24.join)(deps.dir, "conversations"), spec.conversationId)) return [];
     const requested = await applyRequestedCheckouts(spec, deps, signal);
-    const targets = await checkoutsOf(spec, leaseTargets);
+    const targets = await checkoutsOf(spec);
     return [
       ...requested.problems,
       ...await refreshSnapshotCheckouts(spec, targets, requested.settled, deps, signal)
@@ -48305,207 +48213,6 @@ function createCheckoutRefresh(deps) {
   };
 }
 
-// src/holder/lease.ts
-var import_promises36 = require("fs/promises");
-var import_node_path26 = require("path");
-var LEASE_CHECK_EVERY_MS = 5e3;
-var MAX_TRANSIENT_FAILURES = 3;
-var BACKOFF_BASE_MS = 1e3;
-var BACKOFF_MAX_MS = 15e3;
-var MESSAGES = {
-  workspace_lease_unavailable: "The workspace or Git checkout became unavailable while the run was active. Restore it and start a new run.",
-  workspace_lease_path_changed: "The selected workspace folder changed while the run was active. The run stopped before continuing; choose the correct folder and start a new run.",
-  workspace_lease_repository_changed: "The workspace now points to a different repository or worktree. The run stopped before continuing; restore the original checkout and start a new run."
-};
-function identityFailure(code, workspacePath) {
-  return { code, problemCode: "app.workspace.missing", message: MESSAGES[code], workspacePath };
-}
-async function fileIdentity(path) {
-  const canonical = await (0, import_promises36.realpath)(path);
-  const info = await (0, import_promises36.stat)(canonical, { bigint: true });
-  return `${canonical}:${info.dev}:${info.ino}`;
-}
-async function snapshot(git, path, signal) {
-  try {
-    const output2 = await git.run(
-      {
-        cwd: path,
-        args: ["rev-parse", "--path-format=absolute", "--git-dir", "--git-common-dir"],
-        readOnly: true
-      },
-      signal
-    );
-    const [gitDir, commonDir] = output2.stdout.trim().split("\n");
-    if (output2.exitCode !== 0 || !gitDir || !commonDir) return null;
-    return {
-      workspace: await fileIdentity(path),
-      repository: await fileIdentity(commonDir),
-      worktree: await fileIdentity(gitDir),
-      commonDir: await (0, import_promises36.realpath)(commonDir)
-    };
-  } catch {
-    return null;
-  }
-}
-async function gitValue(git, path, args, signal) {
-  const output2 = await git.run({ cwd: path, args, readOnly: true }, signal).catch(() => null);
-  const value = output2?.exitCode === 0 ? output2.stdout.trim() : "";
-  return value.length > 0 ? value : null;
-}
-async function pathExists(path) {
-  try {
-    await (0, import_promises36.stat)(path);
-    return true;
-  } catch (error61) {
-    return errnoCode(error61) !== "ENOENT" && errnoCode(error61) !== "ENOTDIR";
-  }
-}
-async function hasGitMarker(path) {
-  let directory;
-  try {
-    directory = await (0, import_promises36.realpath)(path);
-  } catch {
-    return true;
-  }
-  for (; ; ) {
-    try {
-      await (0, import_promises36.stat)((0, import_node_path26.join)(directory, ".git"));
-      return true;
-    } catch (error61) {
-      const code = errnoCode(error61);
-      if (code !== "ENOENT" && code !== "ENOTDIR") return true;
-    }
-    const parent = (0, import_node_path26.dirname)(directory);
-    if (parent === directory) return false;
-    directory = parent;
-  }
-}
-async function probeCheckout(git, path, captured, signal) {
-  const current = await snapshot(git, path, signal);
-  if (current === null) {
-    const failure5 = identityFailure("workspace_lease_unavailable", path);
-    return await pathExists(path) ? { kind: "transient", failure: failure5 } : { kind: "failed", failure: failure5 };
-  }
-  if (current.workspace !== captured.workspace) {
-    return { kind: "failed", failure: identityFailure("workspace_lease_path_changed", path) };
-  }
-  if (current.repository !== captured.repository || current.worktree !== captured.worktree) {
-    return { kind: "failed", failure: identityFailure("workspace_lease_repository_changed", path) };
-  }
-  return { kind: "ok" };
-}
-async function releaseAll(locks) {
-  for (const lock of locks) await lock[Symbol.asyncDispose]();
-}
-async function captureOne(git, path, signal) {
-  const identity = await snapshot(git, path, signal);
-  if (identity === null) return identityFailure("workspace_lease_unavailable", path);
-  const branch = await gitValue(git, path, ["symbolic-ref", "-q", "--short", "HEAD"], signal);
-  const head = await gitValue(git, path, ["rev-parse", "-q", "--verify", "HEAD"], signal);
-  return { path, identity, checkout: { path, commonDir: identity.commonDir, branch, head } };
-}
-async function captureWorkspaceLease(runId, paths, deps, signal) {
-  const captured = [];
-  const locks = [];
-  const locked = /* @__PURE__ */ new Set();
-  for (const path of paths) {
-    const one = await captureOne(deps.git, path, signal);
-    if (!("identity" in one)) {
-      await releaseAll(locks);
-      return { kind: "failed", failure: one };
-    }
-    const key = comparablePath(one.identity.commonDir, deps.platform);
-    if (!locked.has(key)) {
-      const attempt = await deps.locks.tryShared(one.identity.commonDir, runId);
-      if (attempt.kind === "busy") {
-        await releaseAll(locks);
-        return {
-          kind: "failed",
-          failure: {
-            code: "workspace_busy",
-            problemCode: null,
-            message: "Alan is committing or pushing in this repository for a checkout switch. Try again when it finishes.",
-            workspacePath: path
-          }
-        };
-      }
-      locked.add(key);
-      locks.push(attempt.lock);
-    }
-    captured.push(one);
-  }
-  return { kind: "held", lease: holdLease(captured, locks, deps) };
-}
-function holdLease(captured, locks, deps) {
-  const lifetime = new AbortController();
-  const lost = new AbortController();
-  const state = { failure: null, inFlight: null, transientStreak: 0, nextCheckAt: 0 };
-  const probeOnce = async () => {
-    for (const { path, identity } of captured) {
-      const probe = await probeCheckout(deps.git, path, identity, lifetime.signal);
-      if (probe.kind !== "ok") return probe;
-    }
-    return { kind: "ok" };
-  };
-  const lose = (failure5) => {
-    if (state.failure !== null) return;
-    state.failure = failure5;
-    deps.log.warn("holder.workspace_lease_lost", {
-      code: failure5.code,
-      workspacePath: failure5.workspacePath
-    });
-    lost.abort(failure5);
-  };
-  const apply = (probe) => {
-    if (probe.kind === "ok") {
-      state.transientStreak = 0;
-      state.nextCheckAt = 0;
-    } else if (probe.kind === "failed") {
-      lose(probe.failure);
-    } else {
-      state.transientStreak += 1;
-      if (state.transientStreak >= MAX_TRANSIENT_FAILURES) lose(probe.failure);
-      else {
-        const backoff = BACKOFF_BASE_MS * 2 ** (state.transientStreak - 1);
-        state.nextCheckAt = deps.clock.monotonic() + Math.min(backoff, BACKOFF_MAX_MS);
-      }
-    }
-    return state.failure === null;
-  };
-  const check2 = () => {
-    if (state.failure !== null) return Promise.resolve(false);
-    state.inFlight ??= probeOnce().then((probe) => lifetime.signal.aborted ? state.failure === null : apply(probe)).finally(() => {
-      state.inFlight = null;
-    });
-    return state.inFlight;
-  };
-  const monitor = captured.length === 0 ? null : startMaintenance({
-    everyMs: deps.everyMs ?? LEASE_CHECK_EVERY_MS,
-    jobs: [
-      {
-        name: "holder.workspace_lease",
-        run: async () => {
-          if (state.failure !== null || deps.clock.monotonic() < state.nextCheckAt) return;
-          await check2();
-        }
-      }
-    ],
-    clock: deps.clock,
-    log: deps.log
-  });
-  return {
-    checkouts: captured.map((entry) => entry.checkout),
-    lost: lost.signal,
-    failure: () => state.failure,
-    verify: check2,
-    [Symbol.asyncDispose]: async () => {
-      lifetime.abort();
-      await monitor?.[Symbol.asyncDispose]();
-      await releaseAll(locks);
-    }
-  };
-}
-
 // src/holder/admission.ts
 var VOLUME_ERRORS = /* @__PURE__ */ new Set([
   "EIO",
@@ -48514,13 +48221,12 @@ var VOLUME_ERRORS = /* @__PURE__ */ new Set([
   "ENXIO",
   "ESTALE"
 ]);
-var MESSAGES2 = {
+var MESSAGES = {
   missing: "This project folder was moved or removed. Locate it before starting the run.",
   permission: "Alan needs permission to access this project folder.",
   volume: "The drive containing this project is unavailable. Connect it and try again.",
   pinnedMissing: "This run must use exactly this project folder, and it was moved or removed. Restore it or choose another folder.",
-  notApproved: "This folder is not one of the workspaces approved on this computer.",
-  mismatch: "This folder belongs to a different repository. Choose the correct project folder and try again."
+  notApproved: "This folder is not one of the workspaces approved on this computer."
 };
 function rejected(rejection, message) {
   return { kind: "rejected", rejection, message };
@@ -48539,7 +48245,7 @@ function volumeRoot(path) {
 }
 async function exists(path) {
   try {
-    await (0, import_promises37.stat)(path);
+    await (0, import_promises35.stat)(path);
     return true;
   } catch {
     return false;
@@ -48547,30 +48253,23 @@ async function exists(path) {
 }
 async function inspectReadiness(path) {
   try {
-    if (!(await (0, import_promises37.stat)(path)).isDirectory()) {
-      return { ready: false, missing: true, message: MESSAGES2.missing };
+    if (!(await (0, import_promises35.stat)(path)).isDirectory()) {
+      return { ready: false, missing: true, message: MESSAGES.missing };
     }
-    await (0, import_promises37.access)(path, import_node_fs9.constants.R_OK | import_node_fs9.constants.W_OK | import_node_fs9.constants.X_OK);
+    await (0, import_promises35.access)(path, import_node_fs9.constants.R_OK | import_node_fs9.constants.W_OK | import_node_fs9.constants.X_OK);
     return { ready: true };
   } catch (error61) {
     const code = errnoCode(error61) ?? "";
     if (code === "EACCES" || code === "EPERM") {
-      return { ready: false, missing: false, message: MESSAGES2.permission };
+      return { ready: false, missing: false, message: MESSAGES.permission };
     }
     const root = volumeRoot(path);
     if (VOLUME_ERRORS.has(code) || code === "ENOENT" && root !== null && !await exists(root)) {
-      return { ready: false, missing: false, message: MESSAGES2.volume };
+      return { ready: false, missing: false, message: MESSAGES.volume };
     }
-    return { ready: false, missing: true, message: MESSAGES2.missing };
+    return { ready: false, missing: true, message: MESSAGES.missing };
   }
 }
-function expectedRepositoryUrls(spec, projectPath, platform) {
-  const folder = comparablePath(projectPath, platform);
-  return [
-    ...(spec.repoLocalPaths ?? []).filter((repo) => comparablePath(repo.localPath, platform) === folder).map((repo) => repo.repoUrl),
-    ...spec.localRepoUrls ?? []
-  ];
-}
 function resolveSelectedSkills(spec, context) {
   const invocations = spec.skillInvocations ?? [];
   if (context.skills === void 0) {
@@ -48597,51 +48296,18 @@ async function checkProvider(spec, context) {
     `The ${provider4.name} CLI (\`${provider4.command}\`) is not installed on this computer, or it is not on the PATH Alan uses. Install it and try again.`
   );
 }
-async function locateWorkspace(spec, projectPath, expected, context, signal) {
-  const readiness = await inspectReadiness(projectPath);
-  if (readiness.ready) return { cwd: projectPath, relocated: null };
-  if (!readiness.missing) return rejected("workspace_unavailable", readiness.message);
-  if (spec.workspacePathPinned === true) {
-    return rejected("workspace_pinned_missing", MESSAGES2.pinnedMissing);
-  }
-  const found = await discoverRelocatedWorkspace({
-    missingPath: projectPath,
-    approvedWorkspacePaths: spec.approvedWorkspacePaths ?? [],
-    expected,
-    git: context.git,
-    platform: context.platform,
-    signal
-  });
-  if (found === null) return rejected("workspace_unavailable", readiness.message);
-  const moved = await inspectReadiness(found);
-  if (!moved.ready) return rejected("workspace_unavailable", moved.message);
-  return {
-    cwd: found,
-    relocated: {
-      sessionUpdate: "_alan/run.workspace_relocated",
-      previousPath: projectPath,
-      canonicalPath: found
-    }
-  };
-}
 async function admitDefaultWorkspace(spec, context, skills) {
   const { env } = context;
   const path = resolveAlanDefaultWorkspacePath(env.HOME || env.USERPROFILE || (0, import_node_os5.homedir)());
   try {
-    await (0, import_promises37.mkdir)(path, { recursive: true, mode: 448 });
-    await (0, import_promises37.access)(path, import_node_fs9.constants.R_OK | import_node_fs9.constants.W_OK | import_node_fs9.constants.X_OK);
-    return {
-      kind: "admitted",
-      spec: { ...spec, projectPath: path },
-      relocated: null,
-      leaseTargets: [],
-      skills
-    };
+    await (0, import_promises35.mkdir)(path, { recursive: true, mode: 448 });
+    await (0, import_promises35.access)(path, import_node_fs9.constants.R_OK | import_node_fs9.constants.W_OK | import_node_fs9.constants.X_OK);
+    return { kind: "admitted", spec: { ...spec, projectPath: path }, skills };
   } catch (error61) {
     const code = errnoCode(error61);
     return rejected(
       "workspace_unavailable",
-      code === "EACCES" || code === "EPERM" ? MESSAGES2.permission : MESSAGES2.missing
+      code === "EACCES" || code === "EPERM" ? MESSAGES.permission : MESSAGES.missing
     );
   }
 }
@@ -48655,7 +48321,7 @@ async function withInstalledCloudSkills(spec, context) {
     }
   };
 }
-async function admitRun(spec, context, signal) {
+async function admitRun(spec, context) {
   const provider4 = await checkProvider(spec, context);
   if (provider4 !== null) return provider4;
   const selected = await resolveSelectedSkills(spec, context);
@@ -48668,50 +48334,30 @@ async function admitRun(spec, context, signal) {
   const skills = selected.skills;
   spec = await withInstalledCloudSkills(spec, context);
   const projectPath = spec.projectPath;
-  if (projectPath === void 0) {
-    return { kind: "admitted", spec, relocated: null, leaseTargets: [], skills };
-  }
+  if (projectPath === void 0) return { kind: "admitted", spec, skills };
   if (isAlanDefaultWorkspace(projectPath)) return admitDefaultWorkspace(spec, context, skills);
-  const { platform } = context;
-  const expected = repositoryIdentities(expectedRepositoryUrls(spec, projectPath, platform));
-  const located = await locateWorkspace(spec, projectPath, expected, context, signal);
-  if ("kind" in located) return located;
-  const { cwd, relocated } = located;
+  const readiness = await inspectReadiness(projectPath);
+  if (!readiness.ready) {
+    return readiness.missing && spec.workspacePathPinned === true ? rejected("workspace_pinned_missing", MESSAGES.pinnedMissing) : rejected("workspace_unavailable", readiness.message);
+  }
   const roots = [
     ...await context.approvedRoots(),
     projectPath,
     ...spec.approvedWorkspacePaths ?? [],
-    ...(spec.repoLocalPaths ?? []).map((repo) => repo.localPath),
-    ...relocated === null ? [] : [relocated.canonicalPath]
+    ...(spec.repoLocalPaths ?? []).map((repo) => repo.localPath)
   ];
-  if (!await isApprovedPath(cwd, roots, platform)) {
-    return rejected("workspace_unavailable", MESSAGES2.notApproved);
-  }
-  if (expected.size > 0) {
-    const identity = await originIdentity(context.git, cwd, signal);
-    if (identity === null || !expected.has(identity)) {
-      return rejected("workspace_repository_mismatch", MESSAGES2.mismatch);
-    }
+  if (!await isApprovedPath(projectPath, roots, context.platform)) {
+    return rejected("workspace_unavailable", MESSAGES.notApproved);
   }
-  return {
-    kind: "admitted",
-    spec: relocated === null ? spec : { ...spec, projectPath: cwd },
-    relocated,
-    leaseTargets: await hasGitMarker(cwd) ? [cwd] : [],
-    skills
-  };
+  return { kind: "admitted", spec, skills };
 }
-var PROBE_TIMEOUT_MS2 = 5e3;
 var CHECKOUT_LOCAL_TIMEOUT_MS = 6e4;
 var CHECKOUT_NETWORK_TIMEOUT_MS = 12e4;
 function createHolderWorkspace(machine, clock, log) {
   const platform = machine.platform ?? process.platform;
-  const git = createGitRunner({ env: machine.env, platform, localTimeoutMs: PROBE_TIMEOUT_MS2 });
-  const locks = openRepositoryLocks({ dir: (0, import_node_path27.join)(machine.stateDir, "locks"), clock, platform });
   return {
     admission: {
       env: machine.env,
-      git,
       platform,
       skills: skillsLayout(
         machine.stateDir,
@@ -48719,14 +48365,13 @@ function createHolderWorkspace(machine, clock, log) {
       ),
       approvedRoots: async () => {
         const approved = await openApprovedPaths({
-          file: (0, import_node_path27.join)(machine.stateDir, "workspaces.json"),
+          file: (0, import_node_path25.join)(machine.stateDir, "workspaces.json"),
           log,
           platform
         });
         return approved.roots();
       }
     },
-    lease: { git, locks, clock, log, platform },
     ...machine.refreshesFirstCheckout === true ? {
       refreshFirstCheckout: createCheckoutRefresh({
         git: createGitRunner({
@@ -48735,12 +48380,12 @@ function createHolderWorkspace(machine, clock, log) {
           localTimeoutMs: CHECKOUT_LOCAL_TIMEOUT_MS,
           networkTimeoutMs: CHECKOUT_NETWORK_TIMEOUT_MS
         }),
-        locks,
+        locks: openRepositoryLocks({ dir: (0, import_node_path25.join)(machine.stateDir, "locks"), clock, platform }),
         log,
-        dir: (0, import_node_path27.join)(machine.stateDir, "checkout-freshness")
+        dir: (0, import_node_path25.join)(machine.stateDir, "checkout-freshness")
       }),
       prepareAgentContext: createAgentContext({
-        dir: (0, import_node_path27.join)(machine.stateDir, "agent-context"),
+        dir: (0, import_node_path25.join)(machine.stateDir, "agent-context"),
         homeDir: machine.env.HOME || (0, import_node_os5.homedir)()
       })
     } : {}
@@ -48748,28 +48393,14 @@ function createHolderWorkspace(machine, clock, log) {
 }
 
 // src/holder/respond.ts
-function createAnswerGate() {
-  const state = { lease: null };
-  return {
-    allows: () => state.lease?.verify() ?? Promise.resolve(true),
-    guard: (lease) => {
-      state.lease = lease;
-      return {
-        [Symbol.dispose]: () => {
-          if (state.lease === lease) state.lease = null;
-        }
-      };
-    }
-  };
-}
-async function respondToTurn(runningRunId, gate, driver, request2) {
+async function respondToTurn(runningRunId, driver, request2) {
   if (runningRunId !== request2.runId) return "unknown_run";
   if (driver.respond === void 0) return "not_waiting";
-  return driver.respond(request2, () => gate.allows());
+  return driver.respond(request2);
 }
 
 // src/holder/session-facts.ts
-var import_promises38 = require("fs/promises");
+var import_promises36 = require("fs/promises");
 var CLI_RSS_CACHE_MS = 1e4;
 var LOGIN_PROBLEM_PREFIX = "cli.auth.";
 function isLoginFailure(result) {
@@ -48795,8 +48426,8 @@ function createSessionFacts(options) {
     const path = await resolveCommandOnPath(command, env, platform);
     if (path === null) return null;
     try {
-      const real = await (0, import_promises38.realpath)(path);
-      const info = await (0, import_promises38.stat)(real);
+      const real = await (0, import_promises36.realpath)(path);
+      const info = await (0, import_promises36.stat)(real);
       return { command, key: `${real}:${info.ino}:${info.size}:${info.mtimeMs}` };
     } catch {
       return null;
@@ -48883,8 +48514,8 @@ function createSessionFacts(options) {
 init_acp2();
 
 // src/run-log/directory.ts
-var import_promises39 = require("fs/promises");
-var import_node_path28 = require("path");
+var import_promises37 = require("fs/promises");
+var import_node_path26 = require("path");
 init_runtime_v2();
 init_zod();
 var runMetaSchema = external_exports.object({
@@ -48906,17 +48537,17 @@ var runMetaSchema = external_exports.object({
   }).optional()
 });
 function runDirectory(runsDir, runId) {
-  const dir = (0, import_node_path28.join)(runsDir, runId);
+  const dir = (0, import_node_path26.join)(runsDir, runId);
   return {
     dir,
-    log: (0, import_node_path28.join)(dir, "log.jsonl"),
-    upload: (0, import_node_path28.join)(dir, "upload.json"),
-    meta: (0, import_node_path28.join)(dir, "run.json")
+    log: (0, import_node_path26.join)(dir, "log.jsonl"),
+    upload: (0, import_node_path26.join)(dir, "upload.json"),
+    meta: (0, import_node_path26.join)(dir, "run.json")
   };
 }
 async function isRunClaimed(runsDir, runId) {
   try {
-    return (await (0, import_promises39.stat)(runDirectory(runsDir, runId).log)).size > 0;
+    return (await (0, import_promises37.stat)(runDirectory(runsDir, runId).log)).size > 0;
   } catch (error61) {
     if (errnoCode(error61) === "ENOENT") return false;
     throw error61;
@@ -48924,8 +48555,8 @@ async function isRunClaimed(runsDir, runId) {
 }
 
 // src/run-log/conversation-index.ts
-var import_promises40 = require("fs/promises");
-var import_node_path29 = require("path");
+var import_promises38 = require("fs/promises");
+var import_node_path27 = require("path");
 init_runtime_v2();
 init_zod();
 var ORDINALS_PER_SHARD = 1e3;
@@ -48941,13 +48572,13 @@ var coverageSchema = external_exports.object({
   nextExpectedOrdinal: external_exports.number().int().positive()
 });
 function conversationsDirectory(runsDir) {
-  return (0, import_node_path29.join)((0, import_node_path29.dirname)(runsDir), "conversations");
+  return (0, import_node_path27.join)((0, import_node_path27.dirname)(runsDir), "conversations");
 }
 function indexDirectory(runsDir, conversationId) {
-  return (0, import_node_path29.join)(conversationsDirectory(runsDir), conversationId, "turn-index");
+  return (0, import_node_path27.join)(conversationsDirectory(runsDir), conversationId, "turn-index");
 }
 function shardPath(runsDir, conversationId, ordinal) {
-  return (0, import_node_path29.join)(
+  return (0, import_node_path27.join)(
     indexDirectory(runsDir, conversationId),
     `${Math.floor(ordinal / ORDINALS_PER_SHARD)}.jsonl`
   );
@@ -48956,10 +48587,10 @@ async function indexConversationRun(runsDir, conversationId, ordinal, assistantO
   const nextOrdinal = assistantOrdinal + 1;
   if (nextOrdinal <= ordinal) throw new Error("Assistant order must follow the prompt");
   const path = shardPath(runsDir, conversationId, ordinal);
-  await (0, import_promises40.mkdir)((0, import_node_path29.dirname)(path), { recursive: true, mode: 448 });
-  await (0, import_promises40.appendFile)(path, `${JSON.stringify({ ordinal, nextOrdinal, runId })}
+  await (0, import_promises38.mkdir)((0, import_node_path27.dirname)(path), { recursive: true, mode: 448 });
+  await (0, import_promises38.appendFile)(path, `${JSON.stringify({ ordinal, nextOrdinal, runId })}
 `, { mode: 384 });
-  const coveragePath = (0, import_node_path29.join)((0, import_node_path29.dirname)((0, import_node_path29.dirname)(path)), "coverage.json");
+  const coveragePath = (0, import_node_path27.join)((0, import_node_path27.dirname)((0, import_node_path27.dirname)(path)), "coverage.json");
   const coverage = await readJsonFile(coveragePath, coverageSchema);
   const current = coverage.kind === "ok" ? coverage.value : null;
   const next = nextCoverage(current, ordinal, nextOrdinal);
@@ -49003,7 +48634,7 @@ var decoder = new TextDecoder();
 
 // src/run-log/writer.ts
 var import_node_fs10 = require("fs");
-var import_node_path30 = require("path");
+var import_node_path28 = require("path");
 init_runtime_v2();
 function lastSeq(fd, size) {
   for (const length of tailWindows(size)) {
@@ -49019,7 +48650,7 @@ function lastSeq(fd, size) {
   throw new RuntimeFault("record_too_large", "Run log tail record is larger than any record");
 }
 function openRunLog(path, clock) {
-  (0, import_node_fs10.mkdirSync)((0, import_node_path30.dirname)(path), { recursive: true, mode: 448 });
+  (0, import_node_fs10.mkdirSync)((0, import_node_path28.dirname)(path), { recursive: true, mode: 448 });
   const fd = (0, import_node_fs10.openSync)(path, "a+", 384);
   let size = (0, import_node_fs10.fstatSync)(fd).size;
   let seq = lastSeq(fd, size);
@@ -49056,107 +48687,6 @@ function openRunLog(path, clock) {
   };
 }
 
-// src/holder/lease-gate.ts
-init_acp();
-var READ_ONLY_TOOL_KINDS = /* @__PURE__ */ new Set([
-  "read",
-  "search",
-  "think",
-  "fetch",
-  "switch_mode"
-]);
-function gateWorkspaceWrites(sink, lease) {
-  const kinds = /* @__PURE__ */ new Map();
-  const state = { tail: Promise.resolve(), pending: 0, gate: null, blocked: 0 };
-  const writesFiles = (update) => {
-    if (!isUpdate(update, "tool_call_update")) return false;
-    if (typeof update.kind === "string") kinds.set(update.toolCallId, update.kind);
-    const kind = kinds.get(update.toolCallId);
-    return kind === void 0 || !READ_ONLY_TOOL_KINDS.has(kind);
-  };
-  const deliver = (event) => {
-    if (lease.failure() === null) {
-      sink.onEvent(event);
-      return;
-    }
-    if (event.update.sessionUpdate === "tool_call_update") state.blocked += 1;
-  };
-  const enqueue = (event, gate) => {
-    state.pending += 1;
-    state.tail = state.tail.then(async () => {
-      if (gate === null || await gate) deliver(event);
-      else if (event.update.sessionUpdate === "tool_call_update") state.blocked += 1;
-    }).finally(() => {
-      state.pending -= 1;
-      if (state.pending === 0) state.gate = null;
-    });
-  };
-  return {
-    onSpawned: (pid) => sink.onSpawned(pid),
-    onEvent: (event) => {
-      const write = writesFiles(event.update);
-      if (!write && state.pending === 0) {
-        deliver(event);
-        return;
-      }
-      if (write) state.gate ??= lease.verify();
-      enqueue(event, state.gate);
-    },
-    drain: async () => {
-      while (state.pending > 0) await state.tail;
-    },
-    blocked: () => state.blocked
-  };
-}
-
-// src/holder/lease-turn.ts
-function leaseNotice(failure5, blocked) {
-  const withheld = blocked === 0 ? "" : ` ${blocked} tool ${blocked === 1 ? "update was" : "updates were"} withheld.`;
-  return {
-    sessionUpdate: "notice",
-    severity: "error",
-    title: "The workspace changed while the agent was working",
-    description: `${failure5.message}${withheld}`,
-    _meta: {
-      "alan.dev/noticeKind": "workspace_lease_lost",
-      ...failure5.problemCode === null ? {} : { "alan.dev/problem": { domain: "application", code: failure5.problemCode } }
-    }
-  };
-}
-async function runLeased(spec, paths, turn, sink, signal, run) {
-  var _stack = [];
-  try {
-    const capture = await captureWorkspaceLease(spec.runId, paths, turn.lease, signal);
-    if (capture.kind === "failed") {
-      turn.log.warn("holder.workspace_lease_refused", {
-        runId: spec.runId,
-        code: capture.failure.code
-      });
-      return { outcome: "failed", message: capture.failure.message };
-    }
-    const lease = __using(_stack, capture.lease, true);
-    const _answers = __using(_stack, turn.answerGate?.guard(lease));
-    turn.log.info("holder.workspace_leased", { runId: spec.runId, checkouts: lease.checkouts });
-    const gated = gateWorkspaceWrites(sink, lease);
-    const result = await run(gated, AbortSignal.any([signal, lease.lost]));
-    await gated.drain();
-    const failure5 = lease.failure();
-    if (failure5 === null) return result;
-    sink.onEvent({ seq: 0, at: turn.clock.now(), update: leaseNotice(failure5, gated.blocked()) });
-    await turn.driver.suspend?.().catch((error61) => turn.log.warn("holder.driver_suspend_failed", { error: error61 }));
-    return {
-      outcome: "failed",
-      message: failure5.message,
-      ...result.providerSessionId === void 0 ? {} : { providerSessionId: result.providerSessionId }
-    };
-  } catch (_) {
-    var _error = _, _hasError = true;
-  } finally {
-    var _promise2 = __callDispose(_stack, _error, _hasError);
-    _promise2 && await _promise2;
-  }
-}
-
 // src/holder/record-fit.ts
 init_acp2();
 init_runtime_v2();
@@ -49194,11 +48724,11 @@ function fitForRunLog(update) {
 }
 
 // src/holder/turn.ts
-async function runWithInputs({ spec, leaseTargets, skills }, context, sink, signal) {
+async function runWithInputs({ spec, skills }, context, sink, signal) {
   var _stack = [];
   try {
     const workspace = context.workspace;
-    const sessionContext = (workspace?.refreshFirstCheckout?.(spec, leaseTargets, signal) ?? Promise.resolve([])).catch((error61) => {
+    const sessionContext = (workspace?.refreshFirstCheckout?.(spec, signal) ?? Promise.resolve([])).catch((error61) => {
       context.log.warn("workspace.refresh_failed", { runId: spec.runId, error: error61 });
       return [];
     }).then((problems) => workspace?.prepareAgentContext?.(spec, problems)).catch((error61) => {
@@ -49217,35 +48747,24 @@ async function runWithInputs({ spec, leaseTargets, skills }, context, sink, sign
     }
     const agentContext = await sessionContext;
     const prepared = __using(_stack, inputs, true);
-    const run = async (turnSink, turnSignal) => {
-      const result = await context.driver.runTurn(
-        spec,
-        turnSink,
-        turnSignal,
-        agentContext === void 0 ? prepared : {
-          ...prepared,
-          agentContext: {
-            full: agentContext.full,
-            ...agentContext.update ? { update: agentContext.update } : {}
-          }
-        }
-      );
-      if (agentContext !== void 0 && result.outcome !== "rejected") {
-        await agentContext.save().catch((error61) => {
-          context.log.warn("holder.agent_context_save_failed", { runId: spec.runId, error: error61 });
-        });
-      }
-      return result;
-    };
-    if (workspace === void 0) return await run(sink, signal);
-    return await runLeased(
+    const result = await context.driver.runTurn(
       spec,
-      leaseTargets,
-      { ...context, lease: workspace.lease },
       sink,
       signal,
-      run
+      agentContext === void 0 ? prepared : {
+        ...prepared,
+        agentContext: {
+          full: agentContext.full,
+          ...agentContext.update ? { update: agentContext.update } : {}
+        }
+      }
     );
+    if (agentContext !== void 0 && result.outcome !== "rejected") {
+      await agentContext.save().catch((error61) => {
+        context.log.warn("holder.agent_context_save_failed", { runId: spec.runId, error: error61 });
+      });
+    }
+    return result;
   } catch (_) {
     var _error = _, _hasError = true;
   } finally {
@@ -49253,7 +48772,7 @@ async function runWithInputs({ spec, leaseTargets, skills }, context, sink, sign
     _promise2 && await _promise2;
   }
 }
-async function admitAndRun(spec, context, append, sink, signal) {
+async function admitAndRun(spec, context, sink, signal) {
   if (context.workspace === void 0) {
     if (spec.skillInvocations?.length) {
       return {
@@ -49262,14 +48781,13 @@ async function admitAndRun(spec, context, append, sink, signal) {
         message: "Selected skills need this computer's skill sync, which this holder does not have."
       };
     }
-    return runWithInputs({ spec, leaseTargets: [], skills: [] }, context, sink, signal);
+    return runWithInputs({ spec, skills: [] }, context, sink, signal);
   }
-  const admission = await admitRun(spec, context.workspace.admission, signal);
+  const admission = await admitRun(spec, context.workspace.admission);
   if (admission.kind === "rejected") {
     context.log.info("holder.run_rejected", { runId: spec.runId, rejection: admission.rejection });
     return { outcome: "rejected", rejection: admission.rejection, message: admission.message };
   }
-  if (admission.relocated !== null) append(admission.relocated);
   return runWithInputs(admission, context, sink, signal);
 }
 async function claimRun(spec, context) {
@@ -49316,7 +48834,6 @@ async function runClaimedTurn(spec, claimed, context, signal) {
       result = await admitAndRun(
         spec,
         context,
-        append,
         {
           onSpawned: (pid) => append(runStarted({ pid })),
           // Base64 media in provider payloads and tool output never reaches the log (main 13590db369).
@@ -49379,12 +48896,11 @@ async function runHolder({
   try {
     const identity = await readProcessIdentity(process.pid);
     if (identity === null) throw new RuntimeFault("internal", "Cannot read own process identity");
-    const _engines = __using(_stack, recordSpawnedEngines(engineRecordsPath((0, import_node_path31.dirname)(launch.statusPath)), clock, log));
+    const _engines = __using(_stack, recordSpawnedEngines(engineRecordsPath((0, import_node_path29.dirname)(launch.statusPath)), clock, log));
     const holder = {
       state: "idle",
       runId: null,
       turn: null,
-      answerGate: createAnswerGate(),
       clients: /* @__PURE__ */ new Set()
     };
     const exit = new AbortController();
@@ -49442,8 +48958,7 @@ async function runHolder({
         log,
         onAppended: (runId, offset) => broadcast({ type: "appended", runId, offset }),
         ...inputs === void 0 ? {} : { inputs },
-        ...workspace === void 0 ? {} : { workspace },
-        answerGate: holder.answerGate
+        ...workspace === void 0 ? {} : { workspace }
       };
       claimRun(spec, context).then(
         (claimed) => {
@@ -49475,7 +48990,7 @@ async function runHolder({
       );
     };
     const respond = (request2, client) => {
-      respondToTurn(holder.runId, holder.answerGate, driver, request2).then((status) => {
+      respondToTurn(holder.runId, driver, request2).then((status) => {
         log.info("holder.responded", { runId: request2.runId, status });
         writeMessage(client, { type: "responded", id: request2.id, status });
       }).catch((error61) => {
@@ -49521,12 +49036,12 @@ async function runHolder({
           return;
         case "status":
           void facts.snapshot().then(
-            (snapshot2) => writeMessage(client, {
+            (snapshot) => writeMessage(client, {
               type: "status",
               id: request2.id,
               state: holder.state,
               runId: holder.runId,
-              facts: snapshot2
+              facts: snapshot
             })
           );
           return;
@@ -49575,16 +49090,16 @@ async function runHolder({
       client.on("error", () => holder.clients.delete(client));
     });
     removeStaleEndpoint(launch.endpoint);
-    await new Promise((resolve9, reject) => {
+    await new Promise((resolve8, reject) => {
       server.once("error", reject);
-      server.listen(launch.endpoint, () => resolve9());
+      server.listen(launch.endpoint, () => resolve8());
     });
     await writeStatus();
     log.info("holder.ready", { conversationId: launch.conversationId, pid: identity.pid });
-    await new Promise((resolve9) => exit.signal.addEventListener("abort", () => resolve9()));
+    await new Promise((resolve8) => exit.signal.addEventListener("abort", () => resolve8()));
     await driver.suspend?.().catch((error61) => log.warn("holder.driver_suspend_failed", { error: error61 }));
     for (const client of holder.clients) client.end();
-    await new Promise((resolve9) => server.close(() => resolve9()));
+    await new Promise((resolve8) => server.close(() => resolve8()));
     (0, import_node_fs11.rmSync)(launch.statusPath, { force: true });
     log.info("holder.suspended", { conversationId: launch.conversationId });
   } catch (_) {
@@ -49724,7 +49239,7 @@ function loadRuntimeConfig(env = process.env, totalMemoryBytes = (0, import_node
     providerProbes: ALAN_RUNTIME_PROVIDER_PROBES === "on",
     providerToolchain: ALAN_RUNTIME_PROVIDER_NODE !== void 0 && ALAN_RUNTIME_PROVIDER_NPM_CLI !== void 0 ? { node: ALAN_RUNTIME_PROVIDER_NODE, npmCli: ALAN_RUNTIME_PROVIDER_NPM_CLI } : null,
     home,
-    configHome: XDG_CONFIG_HOME ?? (0, import_node_path33.join)(home, ".config"),
+    configHome: XDG_CONFIG_HOME ?? (0, import_node_path31.join)(home, ".config"),
     codexHome: resolveCodexHome(CODEX_HOME, home),
     ...githubProxyConfig({ ALAN_RUNTIME_GITHUB_PROXY, XDG_CONFIG_HOME, GH_CONFIG_DIR }, home),
     gitGatewayUrl: ALAN_RUNTIME_GIT_GATEWAY_URL ?? null,
@@ -49734,13 +49249,13 @@ function loadRuntimeConfig(env = process.env, totalMemoryBytes = (0, import_node
   };
 }
 function resolveCodexHome(configuredHome, home) {
-  return configuredHome ?? (0, import_node_path33.join)(home, ".codex");
+  return configuredHome ?? (0, import_node_path31.join)(home, ".codex");
 }
 function githubProxyConfig(env, home) {
-  const configHome = env.XDG_CONFIG_HOME ?? (0, import_node_path33.join)(home, ".config");
+  const configHome = env.XDG_CONFIG_HOME ?? (0, import_node_path31.join)(home, ".config");
   return {
     githubProxy: env.ALAN_RUNTIME_GITHUB_PROXY === "on",
-    ghConfigDir: env.GH_CONFIG_DIR ?? (0, import_node_path33.join)(configHome, "gh")
+    ghConfigDir: env.GH_CONFIG_DIR ?? (0, import_node_path31.join)(configHome, "gh")
   };
 }
 function serviceEnvironment(env, profile) {
@@ -49839,7 +49354,7 @@ async function loadStoredAccess(paths, access3 = { exec: systemExec }) {
 }
 
 // src/cli/commands/hold.ts
-var import_node_path34 = require("path");
+var import_node_path32 = require("path");
 init_agent2();
 init_runtime_v2();
 async function machineAccess(paths, log, conversationId, transport) {
@@ -49897,7 +49412,7 @@ async function runHold(argv) {
     const config2 = loadRuntimeConfig();
     const paths = runtimePaths(config2.stateDir);
     const log = __using(_stack, openFileLog(
-      (0, import_node_path34.join)(paths.logs, `holder-${launch.value.conversationId}.jsonl`),
+      (0, import_node_path32.join)(paths.logs, `holder-${launch.value.conversationId}.jsonl`),
       config2.logLevel,
       systemClock
     ));
@@ -49908,7 +49423,7 @@ async function runHold(argv) {
     );
     const transport = __using(_stack, createHttpTransport());
     const access3 = await machineAccess(paths, log, launch.value.conversationId, transport);
-    const credentialPath = (0, import_node_path34.join)(paths.tmp, "mcp", `${launch.value.conversationId}.json`);
+    const credentialPath = (0, import_node_path32.join)(paths.tmp, "mcp", `${launch.value.conversationId}.json`);
     const managedMcp = __using(_stack, access3.managedMcp === void 0 ? void 0 : createHelperMcpAccess({
       managedMcp: access3.managedMcp,
       conversationId: launch.value.conversationId,