@autohq/cli 0.1.440 → 0.1.442

package/dist/agent-bridge.js

@@ -30825,7 +30825,7 @@ Object.assign(lookup, {
 // package.json
 var package_default = {
   name: "@autohq/cli",
-  version: "0.1.440",
+  version: "0.1.442",
   license: "SEE LICENSE IN README.md",
   publishConfig: {
     access: "public"
@@ -33231,6 +33231,9 @@ function reasoningEffortRulesForModelSelection(input) {
     efforts: rules.reasoningEfforts
   };
 }
+function defaultReasoningEffortForModelSelection(input) {
+  return reasoningEffortRulesForModelSelection(input).defaultEffort;
+}
 function resolveModelSelectionForHarness(harness, selection) {
   const rules = modelRulesForHarness(harness);
   const provider = selection?.provider ?? rules.defaultProvider;
@@ -58997,6 +59000,20 @@ var ProjectTemplateSubscriptionSchema = external_exports.object({
 
 // ../../packages/schemas/src/templates/catalog.ts
 var import_yaml = __toESM(require_dist(), 1);
+function catalogModelProvider(entry) {
+  if (entry.harness === "claude-code") return "anthropic";
+  return entry.model?.includes("/") ? "openrouter" : "openai";
+}
+function catalogReasoningEffort(entry) {
+  if (entry.reasoningEffort) return entry.reasoningEffort;
+  return defaultReasoningEffortForModelSelection({
+    harness: entry.harness,
+    model: entry.model ? {
+      provider: catalogModelProvider(entry),
+      id: entry.model
+    } : null
+  });
+}
 function plannedCatalogAgent(input) {
   return {
     ...input,
@@ -59090,6 +59107,7 @@ var ROSTER_CATALOG_ENTRIES = [
     description: "The senior implementer: dispatched with a single scoped task, it explores the codebase, plans the change, implements it with tests, opens and binds the PR, and keeps handling CI failures, reviews, comments, and conflicts while the PR remains open. It reports milestones to its dispatcher and never merges the PR itself.",
     harness: "codex",
     model: "gpt-5.6-sol",
+    reasoningEffort: "xhigh",
     triggers: [
       {
         kind: "agent",
@@ -59132,6 +59150,7 @@ var ROSTER_CATALOG_ENTRIES = [
     description: "The senior implementer (GPT-5.6 Sol, medium reasoning): dispatched with a scoped task, it explores the codebase, plans and implements with tests, binds the PR, and keeps handling CI, review feedback, comments, and conflicts while the PR remains open. It never merges the PR itself.",
     harness: "codex",
     model: "gpt-5.6-sol",
+    reasoningEffort: "medium",
     triggers: [
       {
         kind: "agent",
@@ -59792,6 +59811,7 @@ var ROSTER_CATALOG_ENTRIES = [
     description: "A deletion-first implementer for unused dependencies, exports, and obsolete paths. It checks git history and the team's rulings before cutting, opens one negative-diff PR per concern, proves each cut with targeted checks, and never merges its own work.",
     harness: "codex",
     model: "gpt-5.6-sol",
+    reasoningEffort: "xhigh",
     triggers: [
       {
         kind: "schedule",
@@ -59870,6 +59890,7 @@ var ROSTER_CATALOG_ENTRIES = [
     description: "A CI reliability specialist that reads CI history for flake signatures, reproduces what it can, and either fixes the test or quarantines it with a tracking issue. It maintains a haunted-list registry and closes every case with the mechanism explained.",
     harness: "codex",
     model: "gpt-5.6-sol",
+    reasoningEffort: "xhigh",
     triggers: [
       {
         kind: "schedule",
@@ -59999,6 +60020,7 @@ var ROSTER_CATALOG_ENTRIES = [
     description: "A review gate focused on leaked secrets, injection surfaces, disappearing authorization checks, dangerous dependencies, and permission escalations. It reports a dedicated security check next to the review check: quiet when clean, specific when not. Persuasion plus check status only \u2014 humans decide whether the check blocks.",
     harness: "codex",
     model: "gpt-5.6-sol",
+    reasoningEffort: "xhigh",
     triggers: [
       {
         kind: "github",
@@ -60072,6 +60094,7 @@ var ROSTER_CATALOG_ENTRIES = [
     description: "A post-incident analyst that reconstructs the incident timeline from evidence, writes the blameless postmortem, files action items as tracked issues with owners, and follows up on prior postmortems' action items \u2014 the part humans never do. It never writes 'human error' as a root cause.",
     harness: "codex",
     model: "gpt-5.6-sol",
+    reasoningEffort: "xhigh",
     triggers: [
       {
         kind: "github",
@@ -60175,6 +60198,7 @@ var ROSTER_CATALOG_MANIFEST = ROSTER_CATALOG_ENTRIES.map((entry) => ({
   ...entry,
   availability: entry.availability ?? "available",
   capabilitySummary: capabilitySummary(entry),
+  reasoningEffort: catalogReasoningEffort(entry),
   trustNotes: entry.trustNotes ?? []
 }));
 var ROSTER_CATALOG = ROSTER_CATALOG_MANIFEST.filter((agent) => agent.availability === "available");
@@ -60189,8 +60213,8 @@ var TEAM_TEMPLATES = [
     id: "accelerator",
     name: "The Accelerator",
     template: "@auto/agent-fleet",
-    tagline: "You decide. It ships.",
-    pitch: "You've got a big idea and you want it to happen quickly and efficiently. Your software factory boots up and gets to work, anticipating your next move and improving itself as it goes.",
+    tagline: "You set the goal. It shepherds every PR through review\u2014and gets better over time.",
+    pitch: "Hand this team a goal and step out of the operational loop. It breaks down the work, dispatches the right agents, opens the PRs, shepherds every change through CI and review, responds to feedback, resolves conflicts, and keeps the whole queue moving until a decision genuinely needs you. Along the way, it reviews its own performance and proposes improvements so your software factory gets faster, sharper, and more efficient over time.",
     backdrop: "accelerator.mp4",
     frontOfHouse: "chief-of-staff",
     onboardingDocument: "docs/plans/drafts/front-of-house/onboarding/accelerator-onboarding.md",
@@ -60269,8 +60293,8 @@ var TEAM_TEMPLATES = [
     id: "slopbusters",
     name: "The Slopbusters",
     template: "@auto/slopbusters",
-    tagline: "Somebody has to say it: your codebase is haunted.",
-    pitch: "Your agent swarm got ahead of itself. The machine works, but nobody knows how and every new feature digs the hole deeper. Send in the squad to recover a workable codebase and shake out the haunts.",
+    tagline: "Continuously simplifies and documents your codebase as it changes.",
+    pitch: "The Slopbusters are a standing maintenance crew, not a cleanup command. They regularly inspect the codebase for dead code, flaky tests, stale branches, expired TODOs, risky patterns, structural clutter, and missing context. They investigate unusual behavior before touching it, turn what they find into small, reviewable PRs, and shepherd each change through CI and review. As the code evolves, they keep simplifying tangled areas and documenting confusing behavior and architectural decisions, so knowledge does not disappear into people's heads or old threads. The result is a codebase that stays smaller, clearer, and easier for both people and agents to understand, change, and trust.",
     backdrop: "slopbusters.mp4",
     frontOfHouse: "renovator",
     onboardingDocument: "docs/plans/drafts/front-of-house/onboarding/slopbusters-onboarding.md",
@@ -60326,8 +60350,8 @@ var TEAM_TEMPLATES = [
     id: "war-room",
     name: "The War Room",
     template: "@auto/war-room",
-    tagline: "The fleet reports to the Admiral. The Admiral reports to you.",
-    pitch: "Every emergent threat gets an owner, a status, and a follow-up. The room proves itself on a synthetic drill before anything real is burning, then keeps watch around the clock.",
+    tagline: "Triages incidents, investigates causes, and drives fixes through resolution.",
+    pitch: "This team triages alerts, investigates causes, dispatches fixes, and follows every incident through resolution.",
     backdrop: "war-room.mp4",
     frontOfHouse: "admiral",
     onboardingDocument: "docs/plans/drafts/front-of-house/onboarding/war-room-onboarding.md",
@@ -60383,8 +60407,8 @@ var TEAM_TEMPLATES = [
     id: "blank-canvas",
     name: "The Blank Canvas",
     template: "@auto/blank-canvas",
-    tagline: "The whole corpus. Your vision.",
-    pitch: "Describe the automations you want in plain language. The Patron turns that commission into the smallest useful team and drives it to your definition of a magic moment.",
+    tagline: "Builds any automation from a plain-language idea.",
+    pitch: "Describe what you want to happen, when it should run, and which tools it can use. The Patron will help you shape the workflow, build the agents and triggers behind it, and open a setup PR for your approval.",
     backdrop: "blank-canvas.mp4",
     frontOfHouse: "patron",
     onboardingDocument: "docs/plans/drafts/front-of-house/onboarding/blank-canvas-onboarding.md",
@@ -90581,7 +90605,7 @@ function withClaudeStderrDiagnosticsPointer(error51, capturedStderr) {
 var CLAUDE_AGENT_STARTUP_TIMEOUT_MS = 3e4;
 var CLAUDE_INTERRUPT_SETTLE_TIMEOUT_MS = 1e4;
 var CLAUDE_INTERRUPT_ACK_TIMEOUT_MS = 1e4;
-var CLAUDE_MCP_REGISTRATION_TIMEOUT_MS = 3e3;
+var CLAUDE_MCP_REGISTRATION_TIMEOUT_MS = 3e4;
 var CLAUDE_MCP_REGISTRATION_POLL_INTERVAL_MS = 100;
 var CLAUDE_READ_STATE_SEED_FAILURE_LIMIT = 3;
 var CLAUDE_STARTUP_PROFILE_HOOK_EVENTS = [
@@ -90612,6 +90636,12 @@ var ClaudeMcpRequiredToolsMissingError = class extends Error {
     this.name = "ClaudeMcpRequiredToolsMissingError";
   }
 };
+var ClaudeMcpRegistryNotReadyError = class extends Error {
+  constructor(detail) {
+    super(`MCP tool registry was not ready at session start: ${detail}`);
+    this.name = "ClaudeMcpRegistryNotReadyError";
+  }
+};
 var ClaudeAgentBridgeSessionImpl = class {
   input;
   inputQueue;
@@ -91178,12 +91208,13 @@ var ClaudeAgentBridgeSessionImpl = class {
   }
   // Why this gate is correct without a provider-backed test (it relies on real
   // SDK mcpServerStatus() timing that fakes cannot prove):
-  // - Safe-degrade on uncertainty: pollMcpRegistration never rejects — on
-  //   timeout, a status-read failure, or a closed session it resolves, so an
-  //   *unconfirmed* registry still degrades to today's immediate injection.
-  //   The one fail-closed exit is the confirmed-empty registry: every
-  //   configured server settled and none is serving tools, which is exactly
-  //   the state that produced silent toolless runs in production (FRA-3458).
+  // - Fail closed before first-turn injection whenever configured servers are
+  //   still pending or their status cannot be read. The model must never see a
+  //   callable MCP name whose SDK registry snapshot is not ready to dispatch
+  //   it. Closing the SDK session lets the wrapper's existing bounded command
+  //   delivery retries warm a fresh registry without replaying a tool call.
+  // - Confirmed-empty and missing-required-tool states retain their distinct
+  //   diagnostics and typed failures from FRA-3458.
   // - Provider-path validation is deferred deliberately: the failure is the
   //   intermittent live-prod race on the chief-of-staff singleton (a real
   //   runtime restart dispatching turn-1 while real mcp__* servers reconnect),
@@ -91216,14 +91247,19 @@ var ClaudeAgentBridgeSessionImpl = class {
       };
     }
     const result = await this.mcpRegistrationGate.promise;
-    if (result.outcome !== "empty" && result.outcome !== "missing_required_tools") {
+    if (result.outcome === "ready" || result.outcome === "closed") {
       return;
     }
     this.close();
-    if (result.outcome === "missing_required_tools") {
-      throw new ClaudeMcpRequiredToolsMissingError(result.detail);
+    switch (result.outcome) {
+      case "missing_required_tools":
+        throw new ClaudeMcpRequiredToolsMissingError(result.detail);
+      case "not_ready":
+      case "status_failed":
+        throw new ClaudeMcpRegistryNotReadyError(result.detail);
+      case "empty":
+        throw new ClaudeMcpRegistryEmptyError(result.detail);
     }
-    throw new ClaudeMcpRegistryEmptyError(result.detail);
   }
   // Poll the live query's MCP server status until no configured server is still
   // `pending`, bounded by CLAUDE_MCP_REGISTRATION_TIMEOUT_MS. Terminal states
@@ -91235,7 +91271,9 @@ var ClaudeAgentBridgeSessionImpl = class {
   // status-read failure, timeout, or a closed session all resolve so the caller
   // degrades to immediate injection when the registry state is uncertain. A
   // connected required server with positive zero/missing-tool telemetry fails
-  // immediately even while unrelated configured servers remain pending.
+  // immediately even while unrelated configured servers remain pending. A
+  // timeout or status-read failure returns a distinct not-ready result so the
+  // caller closes the session and rejects before first-turn injection.
   async pollMcpRegistration(query) {
     const configuredNames = Object.keys(this.options.mcpServers ?? {});
     const startedAt = Date.now();
@@ -91251,10 +91289,14 @@ var ClaudeAgentBridgeSessionImpl = class {
       try {
         statuses = await query.mcpServerStatus();
       } catch (error51) {
+        const detail = error51 instanceof Error ? error51.message : String(error51);
         this.input.writeOutput?.(
-          `agent_bridge_claude_mcp_gate_status_failed duration_ms=${Date.now() - startedAt} error=${error51 instanceof Error ? error51.message : String(error51)}`
+          `agent_bridge_claude_mcp_gate_status_failed duration_ms=${Date.now() - startedAt} error=${detail}`
         );
-        return { outcome: "status_failed" };
+        return {
+          outcome: "status_failed",
+          detail: `status read failed: ${detail}`
+        };
       }
       const missingRequiredTools = missingRequiredMcpTools(
         statuses,
@@ -91281,10 +91323,11 @@ var ClaudeAgentBridgeSessionImpl = class {
         return { outcome: "ready" };
       }
       if (Date.now() >= deadline) {
+        const detail = mcpStatusDetailList(statuses);
         this.input.writeOutput?.(
-          `agent_bridge_claude_mcp_gate_timeout duration_ms=${Date.now() - startedAt} servers=${mcpStatusList(statuses)}`
+          `agent_bridge_claude_mcp_gate_not_ready duration_ms=${Date.now() - startedAt} servers=${detail}`
         );
-        return { outcome: "timeout" };
+        return { outcome: "not_ready", detail };
       }
       await delay(
         CLAUDE_MCP_REGISTRATION_POLL_INTERVAL_MS,

package/dist/index.js

@@ -16991,6 +16991,9 @@ function reasoningEffortRulesForModelSelection(input) {
     efforts: rules.reasoningEfforts
   };
 }
+function defaultReasoningEffortForModelSelection(input) {
+  return reasoningEffortRulesForModelSelection(input).defaultEffort;
+}
 function resolveModelSelectionForHarness(harness, selection) {
   const rules = modelRulesForHarness(harness);
   const provider = selection?.provider ?? rules.defaultProvider;
@@ -43417,6 +43420,20 @@ var init_subscription = __esm({
 
 // ../../packages/schemas/src/templates/catalog.ts
 import { parse as parseYaml } from "yaml";
+function catalogModelProvider(entry) {
+  if (entry.harness === "claude-code") return "anthropic";
+  return entry.model?.includes("/") ? "openrouter" : "openai";
+}
+function catalogReasoningEffort(entry) {
+  if (entry.reasoningEffort) return entry.reasoningEffort;
+  return defaultReasoningEffortForModelSelection({
+    harness: entry.harness,
+    model: entry.model ? {
+      provider: catalogModelProvider(entry),
+      id: entry.model
+    } : null
+  });
+}
 function plannedCatalogAgent(input) {
   return {
     ...input,
@@ -43473,6 +43490,7 @@ var ROSTER_CATALOG_ENTRIES, ROSTER_CATALOG_MANIFEST, ROSTER_CATALOG, SELF_IMPROV
 var init_catalog = __esm({
   "../../packages/schemas/src/templates/catalog.ts"() {
     "use strict";
+    init_model_selection();
     init_content_generated();
     init_registry();
     ROSTER_CATALOG_ENTRIES = [
@@ -43548,6 +43566,7 @@ var init_catalog = __esm({
         description: "The senior implementer: dispatched with a single scoped task, it explores the codebase, plans the change, implements it with tests, opens and binds the PR, and keeps handling CI failures, reviews, comments, and conflicts while the PR remains open. It reports milestones to its dispatcher and never merges the PR itself.",
         harness: "codex",
         model: "gpt-5.6-sol",
+        reasoningEffort: "xhigh",
         triggers: [
           {
             kind: "agent",
@@ -43590,6 +43609,7 @@ var init_catalog = __esm({
         description: "The senior implementer (GPT-5.6 Sol, medium reasoning): dispatched with a scoped task, it explores the codebase, plans and implements with tests, binds the PR, and keeps handling CI, review feedback, comments, and conflicts while the PR remains open. It never merges the PR itself.",
         harness: "codex",
         model: "gpt-5.6-sol",
+        reasoningEffort: "medium",
         triggers: [
           {
             kind: "agent",
@@ -44250,6 +44270,7 @@ var init_catalog = __esm({
         description: "A deletion-first implementer for unused dependencies, exports, and obsolete paths. It checks git history and the team's rulings before cutting, opens one negative-diff PR per concern, proves each cut with targeted checks, and never merges its own work.",
         harness: "codex",
         model: "gpt-5.6-sol",
+        reasoningEffort: "xhigh",
         triggers: [
           {
             kind: "schedule",
@@ -44328,6 +44349,7 @@ var init_catalog = __esm({
         description: "A CI reliability specialist that reads CI history for flake signatures, reproduces what it can, and either fixes the test or quarantines it with a tracking issue. It maintains a haunted-list registry and closes every case with the mechanism explained.",
         harness: "codex",
         model: "gpt-5.6-sol",
+        reasoningEffort: "xhigh",
         triggers: [
           {
             kind: "schedule",
@@ -44457,6 +44479,7 @@ var init_catalog = __esm({
         description: "A review gate focused on leaked secrets, injection surfaces, disappearing authorization checks, dangerous dependencies, and permission escalations. It reports a dedicated security check next to the review check: quiet when clean, specific when not. Persuasion plus check status only \u2014 humans decide whether the check blocks.",
         harness: "codex",
         model: "gpt-5.6-sol",
+        reasoningEffort: "xhigh",
         triggers: [
           {
             kind: "github",
@@ -44530,6 +44553,7 @@ var init_catalog = __esm({
         description: "A post-incident analyst that reconstructs the incident timeline from evidence, writes the blameless postmortem, files action items as tracked issues with owners, and follows up on prior postmortems' action items \u2014 the part humans never do. It never writes 'human error' as a root cause.",
         harness: "codex",
         model: "gpt-5.6-sol",
+        reasoningEffort: "xhigh",
         triggers: [
           {
             kind: "github",
@@ -44601,6 +44625,7 @@ var init_catalog = __esm({
       ...entry,
       availability: entry.availability ?? "available",
       capabilitySummary: capabilitySummary(entry),
+      reasoningEffort: catalogReasoningEffort(entry),
       trustNotes: entry.trustNotes ?? []
     }));
     ROSTER_CATALOG = ROSTER_CATALOG_MANIFEST.filter((agent) => agent.availability === "available");
@@ -44615,8 +44640,8 @@ var init_catalog = __esm({
         id: "accelerator",
         name: "The Accelerator",
         template: "@auto/agent-fleet",
-        tagline: "You decide. It ships.",
-        pitch: "You've got a big idea and you want it to happen quickly and efficiently. Your software factory boots up and gets to work, anticipating your next move and improving itself as it goes.",
+        tagline: "You set the goal. It shepherds every PR through review\u2014and gets better over time.",
+        pitch: "Hand this team a goal and step out of the operational loop. It breaks down the work, dispatches the right agents, opens the PRs, shepherds every change through CI and review, responds to feedback, resolves conflicts, and keeps the whole queue moving until a decision genuinely needs you. Along the way, it reviews its own performance and proposes improvements so your software factory gets faster, sharper, and more efficient over time.",
         backdrop: "accelerator.mp4",
         frontOfHouse: "chief-of-staff",
         onboardingDocument: "docs/plans/drafts/front-of-house/onboarding/accelerator-onboarding.md",
@@ -44695,8 +44720,8 @@ var init_catalog = __esm({
         id: "slopbusters",
         name: "The Slopbusters",
         template: "@auto/slopbusters",
-        tagline: "Somebody has to say it: your codebase is haunted.",
-        pitch: "Your agent swarm got ahead of itself. The machine works, but nobody knows how and every new feature digs the hole deeper. Send in the squad to recover a workable codebase and shake out the haunts.",
+        tagline: "Continuously simplifies and documents your codebase as it changes.",
+        pitch: "The Slopbusters are a standing maintenance crew, not a cleanup command. They regularly inspect the codebase for dead code, flaky tests, stale branches, expired TODOs, risky patterns, structural clutter, and missing context. They investigate unusual behavior before touching it, turn what they find into small, reviewable PRs, and shepherd each change through CI and review. As the code evolves, they keep simplifying tangled areas and documenting confusing behavior and architectural decisions, so knowledge does not disappear into people's heads or old threads. The result is a codebase that stays smaller, clearer, and easier for both people and agents to understand, change, and trust.",
         backdrop: "slopbusters.mp4",
         frontOfHouse: "renovator",
         onboardingDocument: "docs/plans/drafts/front-of-house/onboarding/slopbusters-onboarding.md",
@@ -44752,8 +44777,8 @@ var init_catalog = __esm({
         id: "war-room",
         name: "The War Room",
         template: "@auto/war-room",
-        tagline: "The fleet reports to the Admiral. The Admiral reports to you.",
-        pitch: "Every emergent threat gets an owner, a status, and a follow-up. The room proves itself on a synthetic drill before anything real is burning, then keeps watch around the clock.",
+        tagline: "Triages incidents, investigates causes, and drives fixes through resolution.",
+        pitch: "This team triages alerts, investigates causes, dispatches fixes, and follows every incident through resolution.",
         backdrop: "war-room.mp4",
         frontOfHouse: "admiral",
         onboardingDocument: "docs/plans/drafts/front-of-house/onboarding/war-room-onboarding.md",
@@ -44809,8 +44834,8 @@ var init_catalog = __esm({
         id: "blank-canvas",
         name: "The Blank Canvas",
         template: "@auto/blank-canvas",
-        tagline: "The whole corpus. Your vision.",
-        pitch: "Describe the automations you want in plain language. The Patron turns that commission into the smallest useful team and drives it to your definition of a magic moment.",
+        tagline: "Builds any automation from a plain-language idea.",
+        pitch: "Describe what you want to happen, when it should run, and which tools it can use. The Patron will help you shape the workflow, build the agents and triggers behind it, and open a setup PR for your approval.",
         backdrop: "blank-canvas.mp4",
         frontOfHouse: "patron",
         onboardingDocument: "docs/plans/drafts/front-of-house/onboarding/blank-canvas-onboarding.md",
@@ -47809,7 +47834,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.440",
+      version: "0.1.442",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"
@@ -61601,7 +61626,7 @@ function withClaudeStderrDiagnosticsPointer(error51, capturedStderr) {
 var CLAUDE_AGENT_STARTUP_TIMEOUT_MS = 3e4;
 var CLAUDE_INTERRUPT_SETTLE_TIMEOUT_MS = 1e4;
 var CLAUDE_INTERRUPT_ACK_TIMEOUT_MS = 1e4;
-var CLAUDE_MCP_REGISTRATION_TIMEOUT_MS = 3e3;
+var CLAUDE_MCP_REGISTRATION_TIMEOUT_MS = 3e4;
 var CLAUDE_MCP_REGISTRATION_POLL_INTERVAL_MS = 100;
 var CLAUDE_READ_STATE_SEED_FAILURE_LIMIT = 3;
 var CLAUDE_STARTUP_PROFILE_HOOK_EVENTS = [
@@ -61632,6 +61657,12 @@ var ClaudeMcpRequiredToolsMissingError = class extends Error {
     this.name = "ClaudeMcpRequiredToolsMissingError";
   }
 };
+var ClaudeMcpRegistryNotReadyError = class extends Error {
+  constructor(detail) {
+    super(`MCP tool registry was not ready at session start: ${detail}`);
+    this.name = "ClaudeMcpRegistryNotReadyError";
+  }
+};
 var ClaudeAgentBridgeSessionImpl = class {
   input;
   inputQueue;
@@ -62198,12 +62229,13 @@ var ClaudeAgentBridgeSessionImpl = class {
   }
   // Why this gate is correct without a provider-backed test (it relies on real
   // SDK mcpServerStatus() timing that fakes cannot prove):
-  // - Safe-degrade on uncertainty: pollMcpRegistration never rejects — on
-  //   timeout, a status-read failure, or a closed session it resolves, so an
-  //   *unconfirmed* registry still degrades to today's immediate injection.
-  //   The one fail-closed exit is the confirmed-empty registry: every
-  //   configured server settled and none is serving tools, which is exactly
-  //   the state that produced silent toolless runs in production (FRA-3458).
+  // - Fail closed before first-turn injection whenever configured servers are
+  //   still pending or their status cannot be read. The model must never see a
+  //   callable MCP name whose SDK registry snapshot is not ready to dispatch
+  //   it. Closing the SDK session lets the wrapper's existing bounded command
+  //   delivery retries warm a fresh registry without replaying a tool call.
+  // - Confirmed-empty and missing-required-tool states retain their distinct
+  //   diagnostics and typed failures from FRA-3458.
   // - Provider-path validation is deferred deliberately: the failure is the
   //   intermittent live-prod race on the chief-of-staff singleton (a real
   //   runtime restart dispatching turn-1 while real mcp__* servers reconnect),
@@ -62236,14 +62268,19 @@ var ClaudeAgentBridgeSessionImpl = class {
       };
     }
     const result = await this.mcpRegistrationGate.promise;
-    if (result.outcome !== "empty" && result.outcome !== "missing_required_tools") {
+    if (result.outcome === "ready" || result.outcome === "closed") {
       return;
     }
     this.close();
-    if (result.outcome === "missing_required_tools") {
-      throw new ClaudeMcpRequiredToolsMissingError(result.detail);
+    switch (result.outcome) {
+      case "missing_required_tools":
+        throw new ClaudeMcpRequiredToolsMissingError(result.detail);
+      case "not_ready":
+      case "status_failed":
+        throw new ClaudeMcpRegistryNotReadyError(result.detail);
+      case "empty":
+        throw new ClaudeMcpRegistryEmptyError(result.detail);
     }
-    throw new ClaudeMcpRegistryEmptyError(result.detail);
   }
   // Poll the live query's MCP server status until no configured server is still
   // `pending`, bounded by CLAUDE_MCP_REGISTRATION_TIMEOUT_MS. Terminal states
@@ -62255,7 +62292,9 @@ var ClaudeAgentBridgeSessionImpl = class {
   // status-read failure, timeout, or a closed session all resolve so the caller
   // degrades to immediate injection when the registry state is uncertain. A
   // connected required server with positive zero/missing-tool telemetry fails
-  // immediately even while unrelated configured servers remain pending.
+  // immediately even while unrelated configured servers remain pending. A
+  // timeout or status-read failure returns a distinct not-ready result so the
+  // caller closes the session and rejects before first-turn injection.
   async pollMcpRegistration(query) {
     const configuredNames = Object.keys(this.options.mcpServers ?? {});
     const startedAt = Date.now();
@@ -62271,10 +62310,14 @@ var ClaudeAgentBridgeSessionImpl = class {
       try {
         statuses = await query.mcpServerStatus();
       } catch (error51) {
+        const detail = error51 instanceof Error ? error51.message : String(error51);
         this.input.writeOutput?.(
-          `agent_bridge_claude_mcp_gate_status_failed duration_ms=${Date.now() - startedAt} error=${error51 instanceof Error ? error51.message : String(error51)}`
+          `agent_bridge_claude_mcp_gate_status_failed duration_ms=${Date.now() - startedAt} error=${detail}`
         );
-        return { outcome: "status_failed" };
+        return {
+          outcome: "status_failed",
+          detail: `status read failed: ${detail}`
+        };
       }
       const missingRequiredTools = missingRequiredMcpTools(
         statuses,
@@ -62301,10 +62344,11 @@ var ClaudeAgentBridgeSessionImpl = class {
         return { outcome: "ready" };
       }
       if (Date.now() >= deadline) {
+        const detail = mcpStatusDetailList(statuses);
         this.input.writeOutput?.(
-          `agent_bridge_claude_mcp_gate_timeout duration_ms=${Date.now() - startedAt} servers=${mcpStatusList(statuses)}`
+          `agent_bridge_claude_mcp_gate_not_ready duration_ms=${Date.now() - startedAt} servers=${detail}`
         );
-        return { outcome: "timeout" };
+        return { outcome: "not_ready", detail };
       }
       await delay(
         CLAUDE_MCP_REGISTRATION_POLL_INTERVAL_MS,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autohq/cli",
-  "version": "0.1.440",
+  "version": "0.1.442",
   "license": "SEE LICENSE IN README.md",
   "publishConfig": {
     "access": "public"