@alan-ai-hq/agent-manager 0.1.106 → 0.1.107

package/dist/index.cjs

@@ -15504,7 +15504,7 @@ function describeError(error61) {
 }
 
 // src/version.ts
-var AGENT_VERSION = "0.1.106";
+var AGENT_VERSION = "0.1.107";
 
 // src/daemon-worktree.ts
 var import_node_child_process3 = require("child_process");
@@ -40802,6 +40802,7 @@ function planExternalMcpDelivery(config2, processEnv) {
   }
   return { servers, env, verbatim };
 }
+var ALAN_MCP_BEARER_TOKEN_ENV = "ALAN_MCP_BEARER_TOKEN";
 function requiredHeader(registration, name) {
   const entry = Object.entries(registration.headers).find(
     ([candidate]) => candidate.toLowerCase() === name
@@ -40817,6 +40818,9 @@ function requireManagedAuthorization(registration) {
   }
   return authorization;
 }
+function requireManagedBearerToken(registration) {
+  return requireManagedAuthorization(registration).slice(7).trim();
+}
 function requireManagedRunId(registration) {
   return requiredHeader(registration, "x-alan-run-id");
 }
@@ -42574,7 +42578,7 @@ function buildCodexManagedMcpArgs(registration, options = {}) {
     "-c",
     `mcp_servers.alan.url=${JSON.stringify(registration.url)}`,
     "-c",
-    `mcp_servers.alan.env_http_headers.Authorization=${JSON.stringify(ALAN_MCP_AUTHORIZATION_ENV)}`,
+    `mcp_servers.alan.bearer_token_env_var=${JSON.stringify(ALAN_MCP_BEARER_TOKEN_ENV)}`,
     "-c",
     `mcp_servers.alan.env_http_headers.x-alan-run-id=${JSON.stringify(ALAN_RUN_ID_ENV)}`,
     "-c",
@@ -42622,6 +42626,7 @@ function createCodexRuntimeBackend(command = "codex", defaultArgs = []) {
           ...context.env,
           ...externalMcp?.env,
           [ALAN_MCP_AUTHORIZATION_ENV]: requireManagedAuthorization(managedRegistration),
+          [ALAN_MCP_BEARER_TOKEN_ENV]: requireManagedBearerToken(managedRegistration),
           [ALAN_RUN_ID_ENV]: requireManagedRunId(managedRegistration)
         }
       } : context;
@@ -42676,11 +42681,15 @@ function createCodexRuntimeBackend(command = "codex", defaultArgs = []) {
               ...permissionArgs,
               "exec",
               ...managedMcpArgs,
+              // Codex scopes `-c` overrides on both `exec` and `exec resume`.
+              // Keep every config override at the `exec` level: a later
+              // resume-level `-c` replaces the earlier override set, which
+              // silently drops Alan's managed MCP auth on continuation turns.
+              ...effortArgs,
               "resume",
               "--json",
               "--skip-git-repo-check",
               ...modelArgs,
-              ...effortArgs,
               ...imageArgs,
               resumeId,
               "-"
@@ -55712,6 +55721,8 @@ var CoreAgent = class _CoreAgent extends BaseMachineAgent {
     else delete augmented.ALAN_RUN_ID;
     if (this.runtimeToken) augmented.ALAN_MCP_AUTHORIZATION = `Bearer ${this.runtimeToken}`;
     else delete augmented.ALAN_MCP_AUTHORIZATION;
+    if (this.runtimeToken) augmented[ALAN_MCP_BEARER_TOKEN_ENV] = this.runtimeToken;
+    else delete augmented[ALAN_MCP_BEARER_TOKEN_ENV];
     const backendKind = this.runtime.backendKind ?? "";
     const providerApiKey = this.providerApiKey ?? "";
     if (backendKind === "antigravity_cli" && providerApiKey.trim()) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alan-ai-hq/agent-manager",
-  "version": "0.1.106",
+  "version": "0.1.107",
   "type": "module",
   "description": "Alan agent runtime — cloud sandbox and local daemon (alan-agent CLI)",
   "bin": {
@@ -24,9 +24,9 @@
     "tsup": "^8.5.1",
     "tsx": "^4.19.0",
     "typescript": "~5.9.3",
+    "@alan-ai/sandbox-runtime-spec": "0.1.0",
     "@alan-ai/agent-core": "0.1.0",
-    "@alan-ai/shared": "0.1.0",
-    "@alan-ai/sandbox-runtime-spec": "0.1.0"
+    "@alan-ai/shared": "0.1.0"
   },
   "scripts": {
     "build": "tsup",