amalgm 0.1.130 → 0.1.131-canary.20260625234755

package/lib/cli.js

@@ -1051,7 +1051,10 @@ async function status() {
   if (record?.webhook_url) console.log(`Events: ${record.webhook_url}`);
   if (record?.tunnel_url) console.log(`Tunnel: ${record.tunnel_url}`);
   if (record?.tunnel_token) {
-    console.log(`Chat tunnel: ${record.chat_tunnel_url || 'wss://amalgm-chat-gateway.fly.dev/wire'}`);
+    const defaultChatTunnel = AMALGM_RUNTIME_LABEL === 'main'
+      ? 'wss://amalgm-chat-gateway.fly.dev/wire'
+      : 'wss://chat.preview.amalgm.ai/wire';
+    console.log(`Chat tunnel: ${record.chat_tunnel_url || defaultChatTunnel}`);
   }
   console.log(`HMAC proxy: ${proxyTokenFromRecord(record) ? 'configured' : 'not configured'}`);
 

package/lib/paths.js

@@ -49,7 +49,8 @@ const SERVICE_PID_FILE = path.join(AMALGM_RUNTIME_STATE_DIR, 'amalgm-service.pid
 const SERVICE_STATE_FILE = path.join(AMALGM_RUNTIME_STATE_DIR, 'service-state.json');
 const SERVICE_STOP_FILE = path.join(AMALGM_RUNTIME_STATE_DIR, 'amalgm-service.stop');
 const SHUTDOWN_REASON_FILE = path.join(AMALGM_RUNTIME_STATE_DIR, 'shutdown-reason.json');
-const DEFAULT_APP_URL = process.env.AMALGM_APP_URL || 'https://amalgm.ai';
+const DEFAULT_APP_URL = process.env.AMALGM_APP_URL
+  || (AMALGM_RUNTIME_LABEL === 'main' ? 'https://amalgm.ai' : 'https://preview.amalgm.ai');
 
 module.exports = {
   AMALGM_BRANCH,

package/lib/tunnel-chat.js

@@ -16,7 +16,11 @@ const DEFAULT_PORT_MONITOR_PORT = runtimeServiceByName('port-monitor').defaultPo
 const DEFAULT_MCP_PORT = runtimeServiceByName('amalgm-mcp').defaultPort;
 const DEFAULT_CHAT_SERVER_PORT = runtimeServiceByName('chat-server').defaultPort;
 const DEFAULT_TARGET_PORT = DEFAULT_CHAT_SERVER_PORT;
-const DEFAULT_CHAT_TUNNEL_URL = 'wss://amalgm-chat-gateway.fly.dev/wire';
+function defaultChatTunnelUrl() {
+  return AMALGM_RUNTIME_LABEL === 'main'
+    ? 'wss://amalgm-chat-gateway.fly.dev/wire'
+    : 'wss://chat.preview.amalgm.ai/wire';
+}
 const CONNECT_TIMEOUT_MS = 20_000;
 const WATCHDOG_INTERVAL_MS = 15_000;
 const HEARTBEAT_TIMEOUT_MS = 75_000;
@@ -54,6 +58,7 @@ const MCP_PREFIXES = [
   '/agents',
   '/agent-config',
   '/agent-bundles',
+  '/skills',
   '/user-preferences',
   '/browser',
 ];
@@ -72,7 +77,7 @@ const HOP_BY_HOP_HEADERS = new Set([
 ]);
 
 function tunnelUrl(rawUrl) {
-  const url = new URL(rawUrl || DEFAULT_CHAT_TUNNEL_URL);
+  const url = new URL(rawUrl || defaultChatTunnelUrl());
   url.searchParams.delete('token');
   return url.toString();
 }

package/lib/tunnel-events.js

@@ -56,6 +56,7 @@ const MCP_PREFIXES = [
   '/agents',
   '/agent-config',
   '/agent-bundles',
+  '/skills',
   '/user-preferences',
   '/browser',
 ];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "amalgm",
-  "version": "0.1.130",
+  "version": "0.1.131-canary.20260625234755",
   "description": "Amalgm local computer runtime: login, MCP, chat, events, previews, and tunnels.",
   "license": "UNLICENSED",
   "private": false,

package/runtime/scripts/amalgm-mcp/browser/cli.js

@@ -92,9 +92,12 @@ function nativeAgentBrowser(wrapperPath) {
     && (fs.existsSync('/lib/ld-musl-x86_64.so.1') || fs.existsSync('/lib/ld-musl-aarch64.so.1'));
   const name = `agent-browser-${platform}${musl ? '-musl' : ''}-${arch}${platform === 'win32' ? '.exe' : ''}`;
   const candidate = path.join(path.dirname(wrapperPath), name);
-  if (fs.existsSync(candidate)) return candidate;
   const unpacked = asarUnpackedPath(candidate);
-  return unpacked && fs.existsSync(unpacked) ? unpacked : null;
+  // Electron's asar-aware fs can report this path as "existing" even though
+  // the OS cannot spawn a binary through app.asar. Prefer the real unpacked
+  // path whenever it is available.
+  if (unpacked && fs.existsSync(unpacked)) return unpacked;
+  return fs.existsSync(candidate) ? candidate : null;
 }
 
 function asarUnpackedPath(candidate) {

package/runtime/scripts/amalgm-mcp/config.js

@@ -52,9 +52,21 @@ const DEFAULT_CWD = process.env.AMALGM_DEFAULT_CWD || os.homedir();
 const AMALGM_USER_ID = process.env.AMALGM_USER_ID || '';
 const AMALGM_COMPUTER_ID = process.env.AMALGM_COMPUTER_ID || process.env.AMALGM_CONTAINER_ID || '';
 
+function usesPreviewInfraDefaults() {
+  const raw = String(
+    process.env.AMALGM_RUNTIME_LABEL
+    || process.env.AMALGM_CHANNEL
+    || process.env.AMALGM_BRANCH
+    || '',
+  ).trim().toLowerCase();
+  return ['preview', 'canary', 'native-chat', 'staging', 'local', 'dev', 'development'].includes(raw);
+}
+
 const PROXY_TOKEN = process.env.AMALGM_PROXY_TOKEN
   || (process.env.AMALGM_RUNTIME_SOURCE === 'npm' ? '' : process.env.ANTHROPIC_API_KEY || '');
-const DEFAULT_PROXY_BASE_URL = 'https://amalgm-api-proxy-v2.fly.dev';
+const DEFAULT_PROXY_BASE_URL = usesPreviewInfraDefaults()
+  ? 'https://api.preview.amalgm.ai'
+  : 'https://amalgm-api-proxy-v2.fly.dev';
 const PROXY_BASE_URL = process.env.AMALGM_PROXY_URL || (PROXY_TOKEN ? DEFAULT_PROXY_BASE_URL : '');
 const SUPABASE_PROXY_URL = PROXY_BASE_URL ? `${PROXY_BASE_URL}/supabase` : '';
 
@@ -79,14 +91,14 @@ const APPS_DOMAIN = (
   || process.env.NEXT_PUBLIC_APPS_DOMAIN
   || process.env.AMALGM_ARTIFACTS_DOMAIN
   || process.env.NEXT_PUBLIC_ARTIFACTS_DOMAIN
-  || 'apps.amalgm.ai'
+  || (usesPreviewInfraDefaults() ? 'apps.preview.amalgm.ai' : 'apps.amalgm.ai')
 );
 const APP_PORT_MIN = parseInt(process.env.AMALGM_APP_PORT_MIN || process.env.AMALGM_ARTIFACT_PORT_MIN || '9100', 10);
 const APP_PORT_MAX = parseInt(process.env.AMALGM_APP_PORT_MAX || process.env.AMALGM_ARTIFACT_PORT_MAX || '9199', 10);
 const GATEWAY_BASE_URL = (
   process.env.AMALGM_GATEWAY_INTERNAL_URL
   || process.env.AMALGM_GATEWAY_URL
-  || 'https://wire.events.amalgm.ai'
+  || (usesPreviewInfraDefaults() ? 'https://wire.events.preview.amalgm.ai' : 'https://wire.events.amalgm.ai')
 ).replace(/\/$/, '');
 const GATEWAY_INTERNAL_SECRET =
   process.env.AMALGM_GATEWAY_INTERNAL_SECRET

package/runtime/scripts/amalgm-mcp/index.js

@@ -56,7 +56,7 @@ async function ensureProxyToken() {
   const adminSecret = process.env.PROXY_ADMIN_SECRET || process.env.ADMIN_SECRET;
   if (!adminSecret) return;
 
-  const proxyUrl = process.env.AMALGM_PROXY_URL || 'https://amalgm-api-proxy-v2.fly.dev';
+  const proxyUrl = process.env.AMALGM_PROXY_URL || DEFAULT_PROXY_BASE_URL;
 
   try {
     const res = await fetch(`${proxyUrl}/internal/token`, {

package/runtime/scripts/amalgm-mcp/skills/public.js

@@ -11,19 +11,32 @@ function cleanString(value) {
   return typeof value === 'string' && value.trim() ? value.trim() : '';
 }
 
+function normalizeInstallSource(value) {
+  const source = cleanString(value);
+  if (!source) return '';
+  if (/^https?:\/\/[^\s]+$/i.test(source)) return source;
+  if (/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(source)) return source;
+
+  const host = source.split('/')[0];
+  if (/^[A-Za-z0-9.-]+\.[A-Za-z]{2,}(?::\d+)?$/i.test(host)) {
+    return `https://${source}`;
+  }
+  return source;
+}
+
 function npmCommand() {
   return process.platform === 'win32' ? 'npm.cmd' : 'npm';
 }
 
 function isSupportedInstallSource(value) {
-  const source = cleanString(value);
+  const source = normalizeInstallSource(value);
   if (!source) return false;
   if (/^https?:\/\/[^\s]+$/i.test(source)) return true;
   return /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(source);
 }
 
 function buildInstallSkillArgs({ installUrl, slug }) {
-  const source = cleanString(installUrl);
+  const source = normalizeInstallSource(installUrl);
   const skillSlug = cleanString(slug);
   if (!isSupportedInstallSource(source)) {
     throw new Error('installUrl must be an https URL or owner/repo reference');
@@ -111,4 +124,5 @@ module.exports = {
   buildInstallSkillArgs,
   findInstalledSkillBySlug,
   installPublicSkill,
+  normalizeInstallSource,
 };

package/runtime/scripts/amalgm-mcp/skills/roots.js

@@ -61,6 +61,31 @@ function walkProjectSkillRoots(selectedCwd) {
   return roots;
 }
 
+function walkCodexWorktreeSkillRoots(home) {
+  const worktreesRoot = existingDirectory(path.join(home, '.codex', 'worktrees'));
+  if (!worktreesRoot) return [];
+
+  let entries = [];
+  try {
+    entries = fs.readdirSync(worktreesRoot, { withFileTypes: true });
+  } catch {
+    return [];
+  }
+
+  return entries
+    .filter((entry) => entry.isDirectory() && !entry.name.startsWith('.'))
+    .map((entry) => existingDirectory(path.join(worktreesRoot, entry.name, '.agents', 'skills')))
+    .filter(Boolean);
+}
+
+function isCodexWorktreeRoot(rootPath, options = {}) {
+  const root = normalizePath(rootPath);
+  const home = normalizePath(options.homeDir) || homeDir();
+  if (!root || !home) return false;
+  const worktreesRoot = `${normalizePath(path.join(home, '.codex', 'worktrees'))}${path.sep}`;
+  return root.startsWith(worktreesRoot) && root.endsWith(path.normalize(path.join('.agents', 'skills')));
+}
+
 function homeDir() {
   return normalizePath(process.env.AMALGM_NATIVE_HOME || os.homedir());
 }
@@ -75,6 +100,7 @@ function buildCanonicalSkillRoots(options = {}) {
     home ? path.join(home, '.agents', 'skills') : '',
     codeXHome ? path.join(codeXHome, 'skills') : '',
     home ? path.join(home, '.codex', 'skills') : '',
+    ...walkCodexWorktreeSkillRoots(home),
     claudeConfigDir ? path.join(claudeConfigDir, 'skills') : '',
     home ? path.join(home, '.claude', 'skills') : '',
     home ? path.join(home, '.config', 'claude', 'skills') : '',
@@ -127,6 +153,8 @@ module.exports = {
   homeDir,
   normalizePath,
   prefsSelectedCwd,
+  isCodexWorktreeRoot,
   uniquePaths,
+  walkCodexWorktreeSkillRoots,
   walkProjectSkillRoots,
 };

package/runtime/scripts/amalgm-mcp/skills/scanner.js

@@ -3,7 +3,12 @@
 const crypto = require('crypto');
 const fs = require('fs');
 const path = require('path');
-const { buildCanonicalSkillRoots, classifySkillRoot, normalizePath } = require('./roots');
+const {
+  buildCanonicalSkillRoots,
+  classifySkillRoot,
+  isCodexWorktreeRoot,
+  normalizePath,
+} = require('./roots');
 
 const FRONTMATTER_RE = /^---\s*\n([\s\S]*?)\n---/;
 
@@ -126,14 +131,37 @@ function scanSkillRoot(rootPath, options = {}) {
     .filter(Boolean);
 }
 
+function skillDuplicateKey(skill) {
+  const name = cleanString(skill?.name).toLowerCase();
+  const contentHash = cleanString(skill?.contentHash);
+  if (!name || !contentHash) return '';
+  return `${name}::${contentHash}`;
+}
+
 function scanInstalledSkills(options = {}) {
   const roots = buildCanonicalSkillRoots(options);
   const byPath = new Map();
+  const byResolvedPath = new Map();
+  const bySignature = new Map();
   for (const rootPath of roots) {
     for (const skill of scanSkillRoot(rootPath, options)) {
-      const key = cleanString(skill?.source?.path);
-      if (!key || byPath.has(key)) continue;
-      byPath.set(key, skill);
+      const pathKey = cleanString(skill?.source?.path);
+      const resolvedKey = cleanString(skill?.source?.resolvedPath);
+      const signature = skillDuplicateKey(skill);
+
+      if (!pathKey || byPath.has(pathKey)) continue;
+      if (resolvedKey && byResolvedPath.has(resolvedKey)) continue;
+      if (
+        signature
+        && isCodexWorktreeRoot(skill?.source?.rootPath, options)
+        && bySignature.has(signature)
+      ) {
+        continue;
+      }
+
+      byPath.set(pathKey, skill);
+      if (resolvedKey) byResolvedPath.set(resolvedKey, skill);
+      if (signature) bySignature.set(signature, skill);
     }
   }
   return {

package/runtime/scripts/amalgm-mcp/tests/browser-cli.test.js

@@ -8,6 +8,17 @@ const path = require('node:path');
 
 const cli = require('../browser/cli');
 
+function nativeBinaryName() {
+  const platforms = { darwin: 'darwin', linux: 'linux', win32: 'win32' };
+  const arches = { x64: 'x64', arm64: 'arm64' };
+  const platform = platforms[os.platform()];
+  const arch = arches[os.arch()];
+  if (!platform || !arch) return null;
+  const musl = platform === 'linux'
+    && (fs.existsSync('/lib/ld-musl-x86_64.so.1') || fs.existsSync('/lib/ld-musl-aarch64.so.1'));
+  return `agent-browser-${platform}${musl ? '-musl' : ''}-${arch}${platform === 'win32' ? '.exe' : ''}`;
+}
+
 function withoutBinOverride(fn) {
   const saved = process.env.AMALGM_AGENT_BROWSER_BIN;
   delete process.env.AMALGM_AGENT_BROWSER_BIN;
@@ -67,7 +78,9 @@ test('agent-browser spawns the native binary directly when it exists', () => {
 test('agent-browser native path resolves from packaged app.asar to app.asar.unpacked', () => {
   const root = fs.mkdtempSync(path.join(os.tmpdir(), 'amalgm-asar-browser-test-'));
   const wrapper = path.join(root, 'app.asar', 'node_modules', 'agent-browser', 'bin', 'agent-browser.js');
-  const native = path.join(root, 'app.asar.unpacked', 'node_modules', 'agent-browser', 'bin', `agent-browser-${os.platform()}-${os.arch()}`);
+  const binaryName = nativeBinaryName();
+  if (!binaryName) return;
+  const native = path.join(root, 'app.asar.unpacked', 'node_modules', 'agent-browser', 'bin', binaryName);
   fs.mkdirSync(path.dirname(native), { recursive: true });
   fs.writeFileSync(native, '');
   try {
@@ -78,6 +91,29 @@ test('agent-browser native path resolves from packaged app.asar to app.asar.unpa
   }
 });
 
+test('agent-browser prefers app.asar.unpacked even when the asar candidate appears to exist', () => {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'amalgm-asar-shim-test-'));
+  const wrapper = path.join(root, 'app.asar', 'node_modules', 'agent-browser', 'bin', 'agent-browser.js');
+  const binaryName = nativeBinaryName();
+  if (!binaryName) return;
+  const candidate = path.join(root, 'app.asar', 'node_modules', 'agent-browser', 'bin', binaryName);
+  const unpacked = path.join(root, 'app.asar.unpacked', 'node_modules', 'agent-browser', 'bin', binaryName);
+  fs.mkdirSync(path.dirname(unpacked), { recursive: true });
+  fs.writeFileSync(unpacked, '');
+  const originalExistsSync = fs.existsSync;
+  fs.existsSync = (value) => {
+    const target = String(value);
+    if (target === candidate || target === unpacked) return true;
+    return originalExistsSync(value);
+  };
+  try {
+    assert.equal(cli.nativeAgentBrowser(wrapper), unpacked);
+  } finally {
+    fs.existsSync = originalExistsSync;
+    fs.rmSync(root, { recursive: true, force: true });
+  }
+});
+
 test('CLI browser sessions stay headless unless headed mode is explicit', async () => {
   await withBrowserEnv({}, () => {
     assert.equal(cli.wantsHeaded(), false);

package/runtime/scripts/amalgm-mcp/tests/skills.test.js

@@ -38,6 +38,27 @@ test('scanInstalledSkills discovers canonical project/global roots and symlink m
     const globalSkillDir = path.join(home, '.codex', 'skills', 'global-review');
     writeSkill(globalSkillDir, 'Global skill');
 
+    const worktreeSkillDir = path.join(
+      home,
+      '.codex',
+      'worktrees',
+      'sandbox-check',
+      '.agents',
+      'skills',
+      'sandbox-agent',
+    );
+    writeSkill(worktreeSkillDir, 'Worktree skill');
+    const duplicateWorktreeSkillDir = path.join(
+      home,
+      '.codex',
+      'worktrees',
+      'sandbox-duplicate',
+      '.agents',
+      'skills',
+      'sandbox-agent',
+    );
+    writeSkill(duplicateWorktreeSkillDir, 'Worktree skill');
+
     const realProjectSkillDir = path.join(sourceRoot, 'project-portability');
     writeSkill(realProjectSkillDir, 'Project skill');
     const projectSkillRoot = path.join(project, '.agents', 'skills');
@@ -50,8 +71,16 @@ test('scanInstalledSkills discovers canonical project/global roots and symlink m
     });
 
     assert.equal(result.roots.includes(path.join(project, '.agents', 'skills')), true);
+    assert.equal(
+      result.roots.includes(path.join(home, '.codex', 'worktrees', 'sandbox-check', '.agents', 'skills')),
+      true,
+    );
+    assert.equal(
+      result.roots.includes(path.join(home, '.codex', 'worktrees', 'sandbox-duplicate', '.agents', 'skills')),
+      true,
+    );
     assert.equal(result.roots.includes(path.join(home, '.codex', 'skills')), true);
-    assert.equal(result.skills.length, 2);
+    assert.equal(result.skills.length, 3);
 
     const projectSkill = result.skills.find((skill) => skill.name === 'project-portability');
     assert.equal(projectSkill?.source.scope, 'project');
@@ -61,6 +90,9 @@ test('scanInstalledSkills discovers canonical project/global roots and symlink m
     const globalSkill = result.skills.find((skill) => skill.name === 'global-review');
     assert.equal(globalSkill?.source.provider, 'codex');
     assert.equal(globalSkill?.source.scope, 'global');
+
+    const worktreeSkill = result.skills.find((skill) => skill.name === 'sandbox-agent');
+    assert.equal(worktreeSkill?.source.scope, 'project');
   } finally {
     fs.rmSync(home, { recursive: true, force: true });
     fs.rmSync(project, { recursive: true, force: true });
@@ -169,6 +201,30 @@ test('buildInstallSkillArgs targets the global Codex skills install flow', () =>
   );
 });
 
+test('buildInstallSkillArgs normalizes bare well-known sources to https URLs', () => {
+  assert.deepEqual(
+    buildInstallSkillArgs({
+      installUrl: 'open.feishu.cn',
+      slug: 'lark-approval',
+    }),
+    [
+      'exec',
+      '--yes',
+      '--package=skills',
+      '--',
+      'skills',
+      'add',
+      'https://open.feishu.cn',
+      '--skill',
+      'lark-approval',
+      '--agent',
+      'codex',
+      '--global',
+      '--yes',
+    ],
+  );
+});
+
 test('findInstalledSkillBySlug matches installed public skills by name or directory', () => {
   const installedSkill = {
     id: 'skill:find-skills',

package/runtime/scripts/chat-core/contract.js

@@ -3,7 +3,7 @@
 const fs = require('fs');
 const os = require('os');
 const path = require('path');
-const { AMALGM_DIR, DEFAULT_CWD, PROXY_BASE_URL, PROXY_TOKEN } = require('../chat-server/config');
+const { AMALGM_DIR, DEFAULT_CWD, DEFAULT_PROXY_BASE_URL, PROXY_BASE_URL, PROXY_TOKEN } = require('../chat-server/config');
 const { canonicalProjectPath } = require('../lib/project-paths');
 const { authEnvelope, coerceAuth, fingerprint } = require('./auth');
 const { runtimePort } = require('../../lib/runtime-manifest');
@@ -427,7 +427,7 @@ function createContract(payload, options = {}) {
     sessionId,
     localBaseUrl,
     proxyToken: options.proxyToken || PROXY_TOKEN,
-    proxyBaseUrl: options.proxyBaseUrl || PROXY_BASE_URL || 'https://amalgm-api-proxy-v2.fly.dev',
+    proxyBaseUrl: options.proxyBaseUrl || PROXY_BASE_URL || DEFAULT_PROXY_BASE_URL,
     amalgmDir: options.amalgmDir || AMALGM_DIR || path.join(process.env.HOME || '.', '.amalgm'),
     userId,
     credentialId: payload.credentialId || payload.byokCredentialId || null,

package/runtime/scripts/chat-core/server.js

@@ -1,7 +1,7 @@
 'use strict';
 
 const http = require('http');
-const { PORT, PROXY_BASE_URL, ensureFreshProxyToken } = require('../chat-server/config');
+const { PORT, DEFAULT_PROXY_BASE_URL, PROXY_BASE_URL, ensureFreshProxyToken } = require('../chat-server/config');
 const db = require('../chat-server/db');
 const { CodexAdapter } = require('./adapters/codex');
 const { ClaudeAdapter } = require('./adapters/claude');
@@ -107,7 +107,7 @@ function createServer(core = createCore()) {
           res,
           contract,
           turn: core.turns.active(route.sessionId),
-          proxyBaseUrl: PROXY_BASE_URL || 'https://amalgm-api-proxy-v2.fly.dev',
+          proxyBaseUrl: PROXY_BASE_URL || DEFAULT_PROXY_BASE_URL,
           proxyToken,
           upstreamPath: `${route.upstreamPath}${route.search || ''}`,
         });

package/runtime/scripts/chat-server/config.js

@@ -100,6 +100,7 @@ module.exports = {
   PROXY_TOKEN,
   ensureFreshProxyToken,
   readProxyToken,
+  DEFAULT_PROXY_BASE_URL,
   PROXY_BASE_URL,
   OPENAI_PROXY_URL,
   AI_GATEWAY_PROXY_URL,

package/runtime/scripts/chat-server.js

@@ -31,7 +31,8 @@ async function boot() {
     }
     const adminSecret = process.env.PROXY_ADMIN_SECRET || process.env.ADMIN_SECRET;
     if (adminSecret) {
-      const proxyUrl = process.env.AMALGM_PROXY_URL || 'https://amalgm-api-proxy-v2.fly.dev';
+      const { DEFAULT_PROXY_BASE_URL } = require('./proxy-token-store');
+      const proxyUrl = process.env.AMALGM_PROXY_URL || DEFAULT_PROXY_BASE_URL;
       try {
         const userId = process.env.AMALGM_USER_ID || process.env.USER_ID || process.env.NEXT_PUBLIC_AMALGM_USER_ID || '';
         const containerId = process.env.AMALGM_CONTAINER_ID || 'standalone';

package/runtime/scripts/local-gateway.js

@@ -163,6 +163,7 @@ const MCP_PREFIXES = [
   '/agents',
   '/agent-config',
   '/agent-bundles',
+  '/skills',
   '/user-preferences',
   '/browser',
 ];

package/runtime/scripts/proxy-token-store.js

@@ -4,7 +4,19 @@ const fs = require('fs');
 const os = require('os');
 const path = require('path');
 
-const DEFAULT_PROXY_BASE_URL = 'https://amalgm-api-proxy-v2.fly.dev';
+function usesPreviewInfraDefaults() {
+  const raw = String(
+    process.env.AMALGM_RUNTIME_LABEL
+    || process.env.AMALGM_CHANNEL
+    || process.env.AMALGM_BRANCH
+    || '',
+  ).trim().toLowerCase();
+  return ['preview', 'canary', 'native-chat', 'staging', 'local', 'dev', 'development'].includes(raw);
+}
+
+const DEFAULT_PROXY_BASE_URL = usesPreviewInfraDefaults()
+  ? 'https://api.preview.amalgm.ai'
+  : 'https://amalgm-api-proxy-v2.fly.dev';
 const REFRESH_BUFFER_MS = 10 * 60 * 1000;
 
 const AMALGM_DIR = process.env.AMALGM_DIR || path.join(os.homedir(), '.amalgm');