@dunnewold-labs/mr-manager 0.4.53 → 0.4.56

package/dist/index.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // cli/index.ts
-import { Command as Command34 } from "commander";
+import { Command as Command37 } from "commander";
 import { existsSync as existsSync19 } from "fs";
 import { homedir as homedir3 } from "os";
 import { join as join12 } from "path";
@@ -185,7 +185,7 @@ import { fileURLToPath } from "url";
 // cli/package.json
 var package_default = {
   name: "@dunnewold-labs/mr-manager",
-  version: "0.4.53",
+  version: "0.4.56",
   description: "Mr. Manager - Task and project management CLI",
   bin: {
     mr: "./dist/index.mjs"
@@ -1151,6 +1151,118 @@ function getAvailableAgentFallbackChain(agent, availability) {
   return getAgentFallbackChain(agent).filter((candidate) => availability[candidate] !== false);
 }
 
+// lib/permissions.ts
+var DEFAULT_HEADLESS_MODE = "bypass";
+var ENV_VAR = "MR_HEADLESS_PERMISSION_MODE";
+var DESTRUCTIVE_BASH_DENY = [
+  // Privilege escalation.
+  "Bash(sudo:*)",
+  "Bash(su:*)",
+  // Recursive deletes of broad / out-of-repo roots.
+  "Bash(rm -rf /:*)",
+  "Bash(rm -rf /*:*)",
+  "Bash(rm -fr /:*)",
+  "Bash(rm -rf ~:*)",
+  "Bash(rm -rf ~/:*)",
+  "Bash(rm -rf $HOME:*)",
+  "Bash(rm -rf ..:*)",
+  // Filesystem / device destruction.
+  "Bash(mkfs:*)",
+  "Bash(dd:*)",
+  // Mass permission/ownership changes from root.
+  "Bash(chmod -R 777 /:*)",
+  "Bash(chown -R:*)",
+  // Force-push (history rewrite / remote clobber).
+  "Bash(git push --force:*)",
+  "Bash(git push -f:*)",
+  "Bash(git push origin --force:*)",
+  "Bash(git push origin -f:*)",
+  // Remote pipe-to-shell (curl|sh / wget|bash).
+  "Bash(curl:* | sh)",
+  "Bash(curl:* | bash)",
+  "Bash(wget:* | sh)",
+  "Bash(wget:* | bash)"
+];
+var OUT_OF_REPO_WRITE_DENY = [
+  "Write(/etc/**)",
+  "Edit(/etc/**)",
+  "Write(//usr/**)",
+  "Edit(//usr/**)",
+  "Write(~/.ssh/**)",
+  "Edit(~/.ssh/**)",
+  "Write(~/.aws/**)",
+  "Edit(~/.aws/**)"
+];
+var READ_ONLY_EXTRA_DENY = ["Edit", "Write", "MultiEdit", "NotebookEdit"];
+function resolveHeadlessMode(config) {
+  const fromEnv = process.env[ENV_VAR]?.trim().toLowerCase();
+  if (fromEnv === "auto" || fromEnv === "bypass") return fromEnv;
+  const fromConfig = config?.headlessPermissionMode?.trim().toLowerCase();
+  if (fromConfig === "auto" || fromConfig === "bypass") return fromConfig;
+  if (config?.claudePermissionMode != null && config.headlessPermissionMode == null) {
+    return "bypass";
+  }
+  return DEFAULT_HEADLESS_MODE;
+}
+function claudeDenyList(runKind) {
+  const base = [...DESTRUCTIVE_BASH_DENY, ...OUT_OF_REPO_WRITE_DENY];
+  if (runKind === "review" || runKind === "scan") {
+    return [...base, ...READ_ONLY_EXTRA_DENY];
+  }
+  return base;
+}
+function resolvePermissionArgs(agent, runKind, mode) {
+  if (runKind === "plan") {
+    if (agent === "claude") {
+      return { args: ["--permission-mode", "plan"], effectiveMode: "plan", mappedToBypassForLackOfSandbox: false };
+    }
+    return resolvePermissionArgs(agent, "execute", mode);
+  }
+  if (mode === "bypass") {
+    return { args: bypassArgs(agent, runKind), effectiveMode: "bypass", mappedToBypassForLackOfSandbox: false };
+  }
+  switch (agent) {
+    case "claude": {
+      const deny = claudeDenyList(runKind);
+      return {
+        args: ["--permission-mode", "acceptEdits", "--disallowedTools", deny.join(",")],
+        effectiveMode: "auto",
+        mappedToBypassForLackOfSandbox: false
+      };
+    }
+    case "codex": {
+      return { args: ["-s", "workspace-write"], effectiveMode: "auto", mappedToBypassForLackOfSandbox: false };
+    }
+    case "antigravity":
+      return { args: ["--dangerously-skip-permissions"], effectiveMode: "bypass", mappedToBypassForLackOfSandbox: true };
+    default:
+      return { args: bypassArgs(agent, runKind), effectiveMode: "bypass", mappedToBypassForLackOfSandbox: true };
+  }
+}
+function bypassArgs(agent, _runKind) {
+  switch (agent) {
+    case "codex":
+      return ["-s", "danger-full-access"];
+    case "antigravity":
+    case "claude":
+    default:
+      return ["--dangerously-skip-permissions"];
+  }
+}
+function describePermissionMode(res) {
+  if (res.mappedToBypassForLackOfSandbox) {
+    return "bypass (no scoped sandbox for this agent \u2014 full access)";
+  }
+  switch (res.effectiveMode) {
+    case "auto":
+      return "auto (scoped: acceptEdits + destructive-command deny-list)";
+    case "plan":
+      return "plan (read-only)";
+    case "bypass":
+      return "bypass (--dangerously-skip-permissions \u2014 full access)";
+  }
+}
+
 // lib/task-workflow.ts
 function normalizeWhitespace(value) {
   return value.replace(/\s+/g, " ").trim();
@@ -1303,6 +1415,22 @@ function tokenLogLine(jobType, identifier, prompt2, systemPrompt) {
   return parts[0];
 }
 
+// cli/watch-options.ts
+var EXECUTION_SYSTEM_SECTIONS = [
+  "status-updates",
+  "screenshots",
+  "no-mr",
+  "features-workflow"
+];
+var TEST_PLAN_SYSTEM_SECTIONS = ["test-plan", "mr-tests"];
+function getExecutionSystemSections(includeTestPlan) {
+  return [
+    "quiet-mode",
+    ...EXECUTION_SYSTEM_SECTIONS,
+    ...includeTestPlan ? TEST_PLAN_SYSTEM_SECTIONS : []
+  ];
+}
+
 // cli/commands/watch.ts
 var FEATURES_FILE2 = ".mr-features.md";
 var SYSTEM_SECTION_STATUS_UPDATES = `## Status Updates
@@ -1449,7 +1577,6 @@ var SYSTEM_SECTIONS = {
 function composeSystemPrompt(sections) {
   return sections.map((s) => SYSTEM_SECTIONS[s]).join("\n\n");
 }
-var EXECUTION_SYSTEM_SECTIONS = ["status-updates", "screenshots", "test-plan", "mr-tests", "no-mr", "features-workflow"];
 var PRD_SYSTEM_SECTIONS = ["prd-format", "prd-open-questions"];
 var c = {
   reset: "\x1B[0m",
@@ -2851,41 +2978,46 @@ function buildRefinementPrompt(proto, parentFiles, repoDir, options = {}) {
   ].join("\n");
 }
 function buildAgentArgs(agent, prompt2, mode, sessionId, name, resumeSession = false, systemPrompt, maxTurns, claudeModel) {
+  const headlessMode = resolveHeadlessMode(loadConfig());
+  const runKind = mode === "plan" ? "plan" : "execute";
   if (agent === "codex") {
+    const permission2 = resolvePermissionArgs("codex", runKind, headlessMode);
     const args = [];
     if (mode === "execute") {
       args.push("-a", "never");
     }
     args.push("exec");
     if (mode === "execute") {
-      args.push("-s", "danger-full-access");
+      args.push(...permission2.args);
     }
     const fullPrompt = systemPrompt ? `${prompt2}
 
 ${systemPrompt}` : prompt2;
     args.push(fullPrompt);
-    return { bin: "codex", args };
+    return { bin: "codex", args, permission: permission2 };
   }
   if (agent === "antigravity") {
+    const permission2 = resolvePermissionArgs("antigravity", runKind, headlessMode);
     const fullPrompt = systemPrompt ? `${prompt2}
 
 ${systemPrompt}` : prompt2;
     const args = ["-p", fullPrompt];
     if (mode === "execute") {
-      args.push("--dangerously-skip-permissions");
+      args.push(...permission2.args);
     }
-    return { bin: AGENT_BINARIES.antigravity, args };
+    return { bin: AGENT_BINARIES.antigravity, args, permission: permission2 };
   }
+  const permission = resolvePermissionArgs("claude", runKind, headlessMode);
   const sessionArgs = sessionId ? resumeSession ? ["--resume", sessionId] : ["--session-id", sessionId] : [];
   const nameArgs = name ? ["--name", name] : [];
   const systemArgs = systemPrompt ? ["--append-system-prompt", systemPrompt] : [];
   const turnsArgs = maxTurns ? ["--max-turns", String(maxTurns)] : [];
   const modelArgs = claudeModel ? ["--model", claudeModel] : [];
-  if (mode === "plan") {
-    return { bin: "claude", args: [...sessionArgs, ...nameArgs, ...systemArgs, ...turnsArgs, ...modelArgs, "--permission-mode", "plan", "-p", prompt2] };
-  }
-  const permissionArgs = ["--dangerously-skip-permissions"];
-  return { bin: "claude", args: [...sessionArgs, ...nameArgs, ...systemArgs, ...turnsArgs, ...modelArgs, ...permissionArgs, "-p", prompt2] };
+  return {
+    bin: "claude",
+    args: [...sessionArgs, ...nameArgs, ...systemArgs, ...turnsArgs, ...modelArgs, ...permission.args, "-p", prompt2],
+    permission
+  };
 }
 var AGENT_BINARIES = {
   claude: "claude",
@@ -2968,7 +3100,13 @@ function askYesNo(question) {
 function spawnAgent(agent, repoDir, prompt2, prefix, onActivity, sessionId, name, resumeSession = false, onSpawnError, systemPrompt, maxTurns, claudeModel, onOutputBytes) {
   const jobLabel = name ?? "unknown";
   console.log(`${timestamp()} ${prefix} ${paint("dim", tokenLogLine("agent", jobLabel, prompt2, systemPrompt))}`);
-  const { bin, args } = buildAgentArgs(agent, prompt2, "execute", sessionId, name, resumeSession, systemPrompt, maxTurns, claudeModel);
+  const { bin, args, permission } = buildAgentArgs(agent, prompt2, "execute", sessionId, name, resumeSession, systemPrompt, maxTurns, claudeModel);
+  const permLine = `${timestamp()} ${prefix} ${paint("dim", `permission: ${describePermissionMode(permission)}`)}`;
+  if (permission.mappedToBypassForLackOfSandbox) {
+    logWarn(prefix, `permission: ${describePermissionMode(permission)}`);
+  } else {
+    console.log(permLine);
+  }
   const child = spawn4(bin, args, { cwd: repoDir, stdio: ["ignore", "pipe", "pipe"] });
   child.on("error", (err) => {
     logError(prefix, `Failed to spawn ${agent}: ${err.message}`);
@@ -3000,13 +3138,14 @@ function spawnAgent(agent, repoDir, prompt2, prefix, onActivity, sessionId, name
 }
 var watchCommand = new Command9("watch").description(
   "Watch for in-progress tasks and autonomously dispatch an AI coding agent to work on them"
-).option("--interval <seconds>", "Polling interval in seconds", "15").option("--dry-run", "Show what would be dispatched without spawning the agent", false).option("--plan-approval", "Show the agent's plan and ask for approval before executing", false).option("--root <dir>", "Root directory filter for linked repos (default: cwd)").option("--agent <agent>", "AI agent to use: claude, codex, or antigravity", "claude").option("--scan-at <HH:MM>", "Run a product scan daily at this time (e.g., 02:00)").action(async (opts) => {
+).option("--interval <seconds>", "Polling interval in seconds", "15").option("--dry-run", "Show what would be dispatched without spawning the agent", false).option("--plan-approval", "Show the agent's plan and ask for approval before executing", false).option("--root <dir>", "Root directory filter for linked repos (default: cwd)").option("--agent <agent>", "AI agent to use: claude, codex, or antigravity", "claude").option("--scan-at <HH:MM>", "Run a product scan daily at this time (e.g., 02:00)").option("--test-plan", "Ask build agents to create a structured browser test plan", false).action(async (opts) => {
   const intervalMs = parseInt(opts.interval, 10) * 1e3;
   const dryRun = opts.dryRun;
   const planApproval = opts.planApproval;
   const rootDir = opts.root ? resolve2(opts.root) : process.cwd();
   const agent = opts.agent === "codex" ? "codex" : opts.agent === "antigravity" ? "antigravity" : "claude";
   const scanAt = opts.scanAt;
+  const includeTestPlan = opts.testPlan;
   const taskStallTimeoutMs = getTaskStallTimeoutMs();
   const hungTaskTimeoutMinutes = Math.max(5, parseInt(process.env.MR_WATCH_HUNG_TASK_TIMEOUT_MINUTES ?? "60", 10) || 60);
   const hungTaskTimeoutMs = hungTaskTimeoutMinutes * 6e4;
@@ -3028,6 +3167,7 @@ var watchCommand = new Command9("watch").description(
     ...planApproval ? [paint("yellow", "plan-approval")] : [],
     ...dryRun ? [paint("yellow", "dry-run")] : [],
     ...scanAt ? [`scan-at=${paint("cyan", scanAt)}`] : [],
+    ...includeTestPlan ? [paint("yellow", "test-plan")] : [],
     `hung-timeout=${paint("cyan", `${hungTaskTimeoutMinutes}m`)}`
   ].join("  ");
   const banner = [
@@ -3262,7 +3402,7 @@ var watchCommand = new Command9("watch").description(
       const shouldResumeClaudeSession = attemptAgent === "claude" && !!task.claudeSessionId && !resumeAlreadyRetried && (hasFeedback || pausedForNetwork?.resumeSession === true);
       const sessionId = attemptAgent === "claude" ? shouldResumeClaudeSession ? task.claudeSessionId : randomUUID() : void 0;
       const effectiveClaudeModel = attemptAgent === "claude" ? taskClaudeModel : void 0;
-      const systemSections = ["quiet-mode", ...EXECUTION_SYSTEM_SECTIONS];
+      const systemSections = getExecutionSystemSections(includeTestPlan);
       const executionSystemPrompt = composeSystemPrompt(systemSections);
       const child = spawnAgent(
         attemptAgent,
@@ -4020,6 +4160,7 @@ var watchCommand = new Command9("watch").description(
   function dispatchCodeReview(review, prefix, key) {
     logDispatch(prefix, `Running code review on branch ${paint("cyan", review.branch)}`);
     const reviewArgs = [process.argv[1], "review", "--project", review.projectId, "--report", review.id, "--branch", review.branch, "--base", review.baseBranch];
+    if (review.depth) reviewArgs.push("--depth", review.depth);
     if (review.branchUrl) reviewArgs.push("--pr-url", review.branchUrl);
     if (review.prNumber != null) reviewArgs.push("--pr-number", String(review.prNumber));
     const reviewProc = spawn4(process.execPath, reviewArgs, {
@@ -4857,9 +4998,125 @@ var completeCommand = new Command12("complete").description("Mark a task as comp
   printTaskBanner2(paint3("green", "complete \u2713"), task.title, task.id);
 });
 
-// cli/commands/subtask-complete.ts
+// cli/commands/show.ts
 import { Command as Command13 } from "commander";
-var subtaskCompleteCommand = new Command13("subtask-complete").description("Mark a subtask as completed").argument("<task-id>", "Parent task ID").argument("<subtask-id>", "Subtask ID to complete").action(async (taskId, subtaskId) => {
+var showCommand = new Command13("show").description("Show a single task").argument("<task-id>", "Task ID to show").option("--json", "Output raw JSON").option(
+  "--include <fields>",
+  "Comma-separated relations to include (e.g. project,resources)"
+).action(async (taskId, opts) => {
+  let path = `/api/tasks/${taskId}`;
+  if (opts.include) {
+    path += `?include=${encodeURIComponent(opts.include)}`;
+  }
+  const task = await api.get(path);
+  if (opts.json) {
+    console.log(JSON.stringify(task, null, 2));
+    return;
+  }
+  const c15 = {
+    reset: "\x1B[0m",
+    bold: "\x1B[1m",
+    dim: "\x1B[2m",
+    cyan: "\x1B[36m"
+  };
+  const row = (label, value) => {
+    if (value == null || value === "") return;
+    console.log(`${c15.dim}${label.padEnd(14)}${c15.reset}${value}`);
+  };
+  console.log(`${c15.bold}${c15.cyan}${task.title}${c15.reset} ${c15.dim}(${task.id})${c15.reset}`);
+  row("Status", task.status);
+  row("Mode", task.mode);
+  row("Project", task.projectId);
+  row("Due", task.dueDate);
+  row("Jira", task.jiraTicketKey);
+  row("Branch", task.attachedBranch);
+  row("Link", task.link ?? task.attachedBranchLink);
+  row("Auto-merge", task.autoMergeEnabled ? "enabled" : void 0);
+  row("Created", task.createdAt);
+  row("Completed", task.completedAt);
+  if (task.notes) {
+    console.log(`${c15.dim}Notes${c15.reset}`);
+    console.log(task.notes);
+  }
+});
+
+// cli/commands/edit.ts
+import { Command as Command14 } from "commander";
+var VALID_STATUSES = [
+  "todo",
+  "in_progress",
+  "queued",
+  "delegated",
+  "review",
+  "completed",
+  "error"
+];
+var VALID_MODES = ["development", "planning", "testing"];
+var editCommand = new Command14("edit").description("Update fields on an existing task").argument("<task-id>", "Task ID to update").option("--title <title>", "New task title").option("--notes <notes>", "New task notes").option("--status <status>", `New status (${VALID_STATUSES.join(", ")})`).option("--mode <mode>", `New mode (${VALID_MODES.join(", ")})`).option("--due-date <date>", "Due date (ISO string), or 'none' to clear").option("--link <url>", "Task link, or 'none' to clear").option("--jira <key>", "Jira ticket key, or 'none' to clear").option("--branch <input>", "Attached branch name or PR/MR URL, or 'none' to clear").option("--auto-merge <bool>", "Enable/disable auto-merge (true/false)").action(async (taskId, opts) => {
+  const body = {};
+  if (opts.title != null) body.title = opts.title;
+  if (opts.notes != null) body.notes = opts.notes;
+  if (opts.status != null) {
+    if (!VALID_STATUSES.includes(opts.status)) {
+      console.error(`Invalid status. Must be one of: ${VALID_STATUSES.join(", ")}`);
+      process.exit(1);
+    }
+    body.status = opts.status;
+  }
+  if (opts.mode != null) {
+    if (!VALID_MODES.includes(opts.mode)) {
+      console.error(`Invalid mode. Must be one of: ${VALID_MODES.join(", ")}`);
+      process.exit(1);
+    }
+    body.mode = opts.mode;
+  }
+  const clearable = (v) => v.toLowerCase() === "none" ? null : v;
+  if (opts.dueDate != null) body.dueDate = clearable(opts.dueDate);
+  if (opts.link != null) body.link = clearable(opts.link);
+  if (opts.jira != null) body.jiraTicketKey = clearable(opts.jira);
+  if (opts.branch != null) body.attachedBranchInput = clearable(opts.branch) ?? "";
+  if (opts.autoMerge != null) body.autoMergeEnabled = opts.autoMerge === "true";
+  if (Object.keys(body).length === 0) {
+    console.error("No fields to update. Pass at least one option (e.g. --title, --status).");
+    process.exit(1);
+  }
+  const task = await api.patch(`/api/tasks/${taskId}`, body);
+  console.log(`\u2713 Updated: ${task.title} (${task.id})`);
+});
+
+// cli/commands/delete.ts
+import { Command as Command15 } from "commander";
+import { createInterface as createInterface3 } from "readline/promises";
+var c4 = {
+  reset: "\x1B[0m",
+  bold: "\x1B[1m",
+  dim: "\x1B[2m"
+};
+var deleteCommand = new Command15("delete").description("Delete a task").argument("<task-id>", "Task ID to delete").option("-y, --yes", "Skip the confirmation prompt").action(async (taskId, opts) => {
+  let title = taskId;
+  try {
+    const task = await api.get(`/api/tasks/${taskId}`);
+    if (task?.title) title = task.title;
+  } catch {
+  }
+  if (!opts.yes) {
+    const rl = createInterface3({ input: process.stdin, output: process.stdout });
+    const answer = (await rl.question(
+      `Delete task ${c4.bold}${title}${c4.reset} ${c4.dim}(${taskId})${c4.reset}? [y/N] `
+    )).trim().toLowerCase();
+    rl.close();
+    if (answer !== "y" && answer !== "yes") {
+      console.log("Aborted.");
+      return;
+    }
+  }
+  await api.del(`/api/tasks/${taskId}`);
+  console.log(`\u2713 Deleted task ${title} (${taskId})`);
+});
+
+// cli/commands/subtask-complete.ts
+import { Command as Command16 } from "commander";
+var subtaskCompleteCommand = new Command16("subtask-complete").description("Mark a subtask as completed").argument("<task-id>", "Parent task ID").argument("<subtask-id>", "Subtask ID to complete").action(async (taskId, subtaskId) => {
   const subtask = await api.patch(
     `/api/tasks/${taskId}/subtasks/${subtaskId}`,
     { completed: true }
@@ -4868,8 +5125,8 @@ var subtaskCompleteCommand = new Command13("subtask-complete").description("Mark
 });
 
 // cli/commands/subtask-add.ts
-import { Command as Command14 } from "commander";
-var subtaskAddCommand = new Command14("subtask-add").description("Add a subtask to a task (used by the agent to plan work as it starts)").argument("<task-id>", "Parent task ID").argument("<title...>", "Subtask title").action(async (taskId, titleParts) => {
+import { Command as Command17 } from "commander";
+var subtaskAddCommand = new Command17("subtask-add").description("Add a subtask to a task (used by the agent to plan work as it starts)").argument("<task-id>", "Parent task ID").argument("<title...>", "Subtask title").action(async (taskId, titleParts) => {
   const title = titleParts.join(" ").trim();
   if (!title) {
     console.error("Subtask title is required.");
@@ -4882,8 +5139,8 @@ var subtaskAddCommand = new Command14("subtask-add").description("Add a subtask
 });
 
 // cli/commands/prototype.ts
-import { Command as Command15 } from "commander";
-var c4 = {
+import { Command as Command18 } from "commander";
+var c5 = {
   reset: "\x1B[0m",
   bold: "\x1B[1m",
   dim: "\x1B[2m",
@@ -4895,7 +5152,7 @@ var c4 = {
   gray: "\x1B[90m"
 };
 function paint4(color, text) {
-  return `${c4[color]}${text}${c4.reset}`;
+  return `${c5[color]}${text}${c5.reset}`;
 }
 function statusBadge(status) {
   switch (status) {
@@ -4911,8 +5168,8 @@ function statusBadge(status) {
       return paint4("gray", status);
   }
 }
-var prototypeCommand = new Command15("prototype").description("Manage prototypes").addCommand(
-  new Command15("list").description("List prototypes for the linked project").option("--all", "Show prototypes for all projects").action(async (opts) => {
+var prototypeCommand = new Command18("prototype").description("Manage prototypes").addCommand(
+  new Command18("list").description("List prototypes for the linked project").option("--all", "Show prototypes for all projects").action(async (opts) => {
     const params = new URLSearchParams();
     if (!opts.all) {
       const projectId = getLinkedProjectId();
@@ -4946,7 +5203,7 @@ var prototypeCommand = new Command15("prototype").description("Manage prototypes
     }
   })
 ).addCommand(
-  new Command15("create").description("Create a new prototype").argument("<title>", "Title of the prototype").requiredOption("--prompt <prompt>", "Design description / prompt").option("--project <projectId>", "Project ID (defaults to linked project, when available)").option("--variants <count>", "Number of variants to generate (1-50)", "5").option("--type <type>", "Prototype type: web_app, mobile_app, desktop_app, logo (default: web_app)", "web_app").option("--fidelity <fidelity>", "Fidelity level: low, high (default: high)", "high").action(async (title, opts) => {
+  new Command18("create").description("Create a new prototype").argument("<title>", "Title of the prototype").requiredOption("--prompt <prompt>", "Design description / prompt").option("--project <projectId>", "Project ID (defaults to linked project, when available)").option("--variants <count>", "Number of variants to generate (1-50)", "5").option("--type <type>", "Prototype type: web_app, mobile_app, desktop_app, logo (default: web_app)", "web_app").option("--fidelity <fidelity>", "Fidelity level: low, high (default: high)", "high").action(async (title, opts) => {
     const projectId = opts.project ?? getLinkedProjectId();
     const variantCount = Math.max(1, Math.min(50, parseInt(opts.variants, 10) || 5));
     const validTypes = ["web_app", "mobile_app", "desktop_app", "logo"];
@@ -4987,7 +5244,7 @@ var prototypeCommand = new Command15("prototype").description("Manage prototypes
     console.log();
   })
 ).addCommand(
-  new Command15("start").description("Start prototype generation (sets status to in_progress)").argument("<id>", "Prototype ID").action(async (id) => {
+  new Command18("start").description("Start prototype generation (sets status to in_progress)").argument("<id>", "Prototype ID").action(async (id) => {
     const prototype = await api.patch(`/api/prototypes/${id}`, {
       status: "in_progress"
     });
@@ -4997,7 +5254,7 @@ var prototypeCommand = new Command15("prototype").description("Manage prototypes
     console.log();
   })
 ).addCommand(
-  new Command15("retry").description("Retry a failed prototype").argument("<id>", "Prototype ID").action(async (id) => {
+  new Command18("retry").description("Retry a failed prototype").argument("<id>", "Prototype ID").action(async (id) => {
     const prototype = await api.patch(`/api/prototypes/${id}`, {
       status: "in_progress",
       files: null
@@ -5009,9 +5266,9 @@ var prototypeCommand = new Command15("prototype").description("Manage prototypes
 );
 
 // cli/commands/setup.ts
-import { Command as Command16 } from "commander";
+import { Command as Command19 } from "commander";
 import { exec as exec2 } from "child_process";
-var c5 = {
+var c6 = {
   reset: "\x1B[0m",
   bold: "\x1B[1m",
   dim: "\x1B[2m",
@@ -5023,7 +5280,7 @@ var c5 = {
   gray: "\x1B[90m"
 };
 function paint5(color, text) {
-  return `${c5[color]}${text}${c5.reset}`;
+  return `${c6[color]}${text}${c6.reset}`;
 }
 function commandExists2(cmd) {
   return new Promise((resolve9) => {
@@ -5267,7 +5524,7 @@ async function checkApiConnectivity() {
   }
 }
 function printResults(checks) {
-  const maxNameLen = Math.max(...checks.map((c14) => c14.name.length));
+  const maxNameLen = Math.max(...checks.map((c15) => c15.name.length));
   let allOk = true;
   for (const check of checks) {
     const isOptional = check.optional ?? false;
@@ -5281,10 +5538,10 @@ function printResults(checks) {
 }
 async function autoFix(checks, agent) {
   const { spawn: spawn9 } = await import("child_process");
-  const ghInstalled = checks.find((c14) => c14.name === "GitHub CLI (gh)").ok;
-  const ghAuthed = checks.find((c14) => c14.name === "GitHub CLI auth").ok;
-  const mrAuthed = checks.find((c14) => c14.name === "Mr. Manager CLI auth").ok;
-  const claudeCheck = checks.find((c14) => c14.name === "Claude Code (claude)");
+  const ghInstalled = checks.find((c15) => c15.name === "GitHub CLI (gh)").ok;
+  const ghAuthed = checks.find((c15) => c15.name === "GitHub CLI auth").ok;
+  const mrAuthed = checks.find((c15) => c15.name === "Mr. Manager CLI auth").ok;
+  const claudeCheck = checks.find((c15) => c15.name === "Claude Code (claude)");
   if (claudeCheck && !claudeCheck.ok && agent === "claude") {
     console.log(paint5("cyan", "  Installing Claude Code..."));
     console.log(paint5("dim", "  Running: curl -fsSL https://claude.ai/install.sh | bash"));
@@ -5312,7 +5569,7 @@ async function autoFix(checks, agent) {
     console.log("");
   }
 }
-var setupCommand = new Command16("setup").description("Check that all dependencies for mr watch are installed and configured").option("--fix", "Attempt to auto-fix issues where possible", false).option("--agent <agent>", "AI agent to check: claude, codex, or antigravity (default: claude)", "claude").action(async (opts) => {
+var setupCommand = new Command19("setup").description("Check that all dependencies for mr watch are installed and configured").option("--fix", "Attempt to auto-fix issues where possible", false).option("--agent <agent>", "AI agent to check: claude, codex, or antigravity (default: claude)", "claude").action(async (opts) => {
   const agent = opts.agent === "codex" ? "codex" : opts.agent === "antigravity" ? "antigravity" : "claude";
   const banner = [
     ``,
@@ -5347,7 +5604,7 @@ var setupCommand = new Command16("setup").description("Check that all dependenci
     console.log("");
     return;
   }
-  const fixes = checks.filter((c14) => !c14.ok && c14.fix && !c14.optional);
+  const fixes = checks.filter((c15) => !c15.ok && c15.fix && !c15.optional);
   if (fixes.length > 0) {
     console.log(paint5("yellow", "  To fix:"));
     for (const fix of fixes) {
@@ -5362,8 +5619,8 @@ var setupCommand = new Command16("setup").description("Check that all dependenci
 });
 
 // cli/commands/update.ts
-import { Command as Command17 } from "commander";
-var updateCommand = new Command17("update").description("Post a status update to a task, or attach a resource").argument("<task-id>", "Task ID").argument("[message-or-title]", "Status update message, or resource title when using --resource").argument("[content]", "Resource content (only used with --resource)").option("--source <source>", "Update source: agent, system, or user", "agent").option("--resource <type>", "Create a task resource (e.g. test-plan, note, plan, research)").action(async (taskId, messageOrTitle, content, opts) => {
+import { Command as Command20 } from "commander";
+var updateCommand = new Command20("update").description("Post a status update to a task, or attach a resource").argument("<task-id>", "Task ID").argument("[message-or-title]", "Status update message, or resource title when using --resource").argument("[content]", "Resource content (only used with --resource)").option("--source <source>", "Update source: agent, system, or user", "agent").option("--resource <type>", "Create a task resource (e.g. test-plan, note, plan, research)").action(async (taskId, messageOrTitle, content, opts) => {
   if (opts.resource) {
     if (!messageOrTitle || !content) {
       console.error(`Usage: mr update <task-id> --resource <type> "<title>" '<content>'`);
@@ -5389,11 +5646,11 @@ var updateCommand = new Command17("update").description("Post a status update to
 });
 
 // cli/commands/screenshot.ts
-import { Command as Command18 } from "commander";
+import { Command as Command21 } from "commander";
 import { readFileSync as readFileSync6, existsSync as existsSync8, unlinkSync as unlinkSync2 } from "fs";
 import { join as join7 } from "path";
 import { tmpdir } from "os";
-var screenshotCommand = new Command18("screenshot").description(
+var screenshotCommand = new Command21("screenshot").description(
   "Take or attach a screenshot to a task update (agents use this to show their work)"
 ).argument("<task-id>", "Task ID").argument("[file]", "Path to an image file (if omitted, uses headless browser to screenshot the app)").option("-m, --message <message>", "Optional message to include with the screenshot").option("-u, --url <url>", "Custom URL to screenshot (defaults to the task's project page)").action(async (taskId, file, opts) => {
   let filePath = file;
@@ -5484,10 +5741,10 @@ var screenshotCommand = new Command18("screenshot").description(
 });
 
 // cli/commands/resume.ts
-import { Command as Command19 } from "commander";
+import { Command as Command22 } from "commander";
 import { spawn as spawn5 } from "child_process";
 import { resolve as resolve3 } from "path";
-var c6 = {
+var c7 = {
   reset: "\x1B[0m",
   bold: "\x1B[1m",
   dim: "\x1B[2m",
@@ -5499,9 +5756,9 @@ var c6 = {
   gray: "\x1B[90m"
 };
 function paint6(color, text) {
-  return `${c6[color]}${text}${c6.reset}`;
+  return `${c7[color]}${text}${c7.reset}`;
 }
-var resumeCommand = new Command19("resume").description("Resume an interactive Claude session for a task (non-headless)").argument("<task-id>", "Task ID whose Claude session to resume").option("--dir <directory>", "Override the working directory for the session").action(async (taskId, opts) => {
+var resumeCommand = new Command22("resume").description("Resume an interactive Claude session for a task (non-headless)").argument("<task-id>", "Task ID whose Claude session to resume").option("--dir <directory>", "Override the working directory for the session").action(async (taskId, opts) => {
   const task = await api.get(`/api/tasks/${taskId}`);
   if (!task.claudeSessionId) {
     console.error(
@@ -5570,7 +5827,7 @@ var resumeCommand = new Command19("resume").description("Resume an interactive C
 });
 
 // cli/commands/browse.ts
-import { Command as Command20 } from "commander";
+import { Command as Command23 } from "commander";
 import { execSync as execSync4, spawn as spawn6 } from "child_process";
 import { existsSync as existsSync9, readFileSync as readFileSync7, writeFileSync as writeFileSync4 } from "fs";
 import { createHash } from "crypto";
@@ -5685,7 +5942,7 @@ async function ensureDevServer(options = {}) {
   }
   throw new Error(`Dev server failed to start within 60s. Command: ${devCmd} in ${projectCwd}`);
 }
-var browseCommand = new Command20("browse").description("Control a headless browser for QA and testing").argument("[command]", "Browse command (goto, click, fill, screenshot, etc.)").argument("[args...]", "Command arguments").option(
+var browseCommand = new Command23("browse").description("Control a headless browser for QA and testing").argument("[command]", "Browse command (goto, click, fill, screenshot, etc.)").argument("[args...]", "Command arguments").option(
   "--task-id <id>",
   "Attach output to a task update (for screenshot and recording-stop commands)"
 ).option("--dev", "Auto-start local dev server before browsing").option("--dev-cwd <path>", "Working directory for the dev server (defaults to mr-manager root)").option("--dev-cmd <command>", "Dev server command to run (auto-detected from package.json if omitted)").option("--dev-port-flag <flag>", "CLI flag name used to set port (e.g. --port). Omit to use PORT env var.").allowUnknownOption(true).action(
@@ -5828,10 +6085,10 @@ var browseCommand = new Command20("browse").description("Control a headless brow
 );
 
 // cli/commands/set-path.ts
-import { Command as Command21 } from "commander";
+import { Command as Command24 } from "commander";
 import { resolve as resolve5 } from "path";
 import { existsSync as existsSync10 } from "fs";
-var setPathCommand = new Command21("set-path").description("Set or update the local repo path for a project").argument("<project-id>", "Project ID").argument("<path>", "Absolute or relative path to the local repo").action(async (projectId, pathArg) => {
+var setPathCommand = new Command24("set-path").description("Set or update the local repo path for a project").argument("<project-id>", "Project ID").argument("<path>", "Absolute or relative path to the local repo").action(async (projectId, pathArg) => {
   const absolutePath = resolve5(pathArg);
   if (!existsSync10(absolutePath)) {
     console.error(`Error: Path does not exist: ${absolutePath}`);
@@ -5849,9 +6106,9 @@ var setPathCommand = new Command21("set-path").description("Set or update the lo
 });
 
 // cli/commands/test.ts
-import { Command as Command22 } from "commander";
+import { Command as Command25 } from "commander";
 import { readFileSync as readFileSync8, existsSync as existsSync11 } from "fs";
-var testCommand = new Command22("test").description("Run automated browser test for a task's MR/PR").argument("<task-id>", "Task ID to test").option("--plan <file>", "Path to a custom test plan JSON file").option("--no-recording", "Disable proof recording for this run").action(async (taskId, opts) => {
+var testCommand = new Command25("test").description("Run automated browser test for a task's MR/PR").argument("<task-id>", "Task ID to test").option("--plan <file>", "Path to a custom test plan JSON file").option("--no-recording", "Disable proof recording for this run").action(async (taskId, opts) => {
   const config = loadConfig();
   console.log("[test] Fetching task...");
   let task;
@@ -6013,11 +6270,11 @@ var testCommand = new Command22("test").description("Run automated browser test
 });
 
 // cli/commands/features.ts
-import { Command as Command23 } from "commander";
+import { Command as Command26 } from "commander";
 import { readFileSync as readFileSync9, writeFileSync as writeFileSync5, existsSync as existsSync12 } from "fs";
 import { resolve as resolve6, sep as sep2 } from "path";
 var FEATURES_FILE3 = ".mr-features.md";
-var c7 = {
+var c8 = {
   reset: "\x1B[0m",
   bold: "\x1B[1m",
   dim: "\x1B[2m",
@@ -6028,7 +6285,7 @@ var c7 = {
   gray: "\x1B[90m"
 };
 function paint7(color, text) {
-  return `${c7[color]}${text}${c7.reset}`;
+  return `${c8[color]}${text}${c8.reset}`;
 }
 function resolveProjectRoot2() {
   const cwd = process.cwd();
@@ -6047,7 +6304,7 @@ function readFeatures2() {
   if (!existsSync12(path)) return null;
   return readFileSync9(path, "utf-8");
 }
-var featuresCommand = new Command23("features").description("View or update the project features & goals document (.mr-features.md)").option("--update <content>", "Replace the features document with the given content").option("--file <path>", "Read content from a file and use it to update the features document").option("--path", "Print the path to the features file").action(async (opts) => {
+var featuresCommand = new Command26("features").description("View or update the project features & goals document (.mr-features.md)").option("--update <content>", "Replace the features document with the given content").option("--file <path>", "Read content from a file and use it to update the features document").option("--path", "Print the path to the features file").action(async (opts) => {
   if (opts.path) {
     console.log(getFeaturesPath());
     return;
@@ -6075,11 +6332,11 @@ var featuresCommand = new Command23("features").description("View or update the
 });
 
 // cli/commands/no-mr.ts
-import { Command as Command24 } from "commander";
+import { Command as Command27 } from "commander";
 import { writeFileSync as writeFileSync6 } from "fs";
 import { resolve as resolve7 } from "path";
 var NO_MR_FILE = ".mr-no-mr";
-var noMrCommand = new Command24("no-mr").description("Signal that a task does not require a merge/pull request and describe what was done instead").argument("<task-id>", "Task ID").argument("<description>", "Description of what was done instead of creating an MR/PR").action(async (taskId, description) => {
+var noMrCommand = new Command27("no-mr").description("Signal that a task does not require a merge/pull request and describe what was done instead").argument("<task-id>", "Task ID").argument("<description>", "Description of what was done instead of creating an MR/PR").action(async (taskId, description) => {
   const filePath = resolve7(process.cwd(), NO_MR_FILE);
   writeFileSync6(filePath, description, "utf-8");
   await api.post(`/api/tasks/${taskId}/updates`, {
@@ -6091,12 +6348,12 @@ var noMrCommand = new Command24("no-mr").description("Signal that a task does no
 });
 
 // cli/commands/review.ts
-import { Command as Command26 } from "commander";
+import { Command as Command29 } from "commander";
 import { execSync as execSync6 } from "child_process";
 import { existsSync as existsSync14, statSync as statSync2 } from "fs";
 
 // cli/commands/review-apply.ts
-import { Command as Command25 } from "commander";
+import { Command as Command28 } from "commander";
 import { execSync as execSync5 } from "child_process";
 import { existsSync as existsSync13 } from "fs";
 
@@ -6119,18 +6376,26 @@ async function resolveReviewAgentChain(preferred2 = "claude") {
   }
   return getAvailableAgentFallbackChain(preferred2, availability);
 }
-function buildArgs(agent, prompt2) {
+function buildArgs(agent, prompt2, runKind) {
+  const mode = resolveHeadlessMode(loadConfig());
+  const permission = resolvePermissionArgs(agent, runKind, mode);
   if (agent === "codex") {
-    return ["-a", "never", "exec", "-s", "danger-full-access", prompt2];
+    return ["-a", "never", "exec", ...permission.args, prompt2];
   }
   if (agent === "antigravity") {
-    return ["-p", prompt2, "--dangerously-skip-permissions"];
+    return ["-p", prompt2, ...permission.args];
   }
-  return ["-p", "--dangerously-skip-permissions", prompt2];
+  return ["-p", ...permission.args, prompt2];
+}
+function logPermission(agent, runKind) {
+  const permission = resolvePermissionArgs(agent, runKind, resolveHeadlessMode(loadConfig()));
+  const label = permission.mappedToBypassForLackOfSandbox ? "warning" : "info";
+  console.error(`[review:${label}] ${agent} ${runKind} permission: ${describePermissionMode(permission)}`);
 }
 function runOnce(agent, prompt2, opts) {
   return new Promise((resolve9) => {
-    const child = spawn7(AGENT_BINARIES2[agent], buildArgs(agent, prompt2), {
+    logPermission(agent, opts.runKind);
+    const child = spawn7(AGENT_BINARIES2[agent], buildArgs(agent, prompt2, opts.runKind), {
       cwd: opts.cwd,
       stdio: opts.capture ? ["ignore", "pipe", "pipe"] : ["ignore", "inherit", "inherit"]
     });
@@ -6156,7 +6421,7 @@ async function runAgentCaptured(prompt2, opts) {
   }
   let lastError = "";
   for (const agent of opts.chain) {
-    const result = await runOnce(agent, prompt2, { cwd: opts.cwd, capture: true });
+    const result = await runOnce(agent, prompt2, { cwd: opts.cwd, capture: true, runKind: "review" });
     if (result.ok && result.output) {
       return { output: result.output, agent };
     }
@@ -6170,7 +6435,7 @@ async function runAgentInteractive(prompt2, opts) {
   }
   let lastError = "";
   for (const agent of opts.chain) {
-    const result = await runOnce(agent, prompt2, { cwd: opts.cwd, capture: false });
+    const result = await runOnce(agent, prompt2, { cwd: opts.cwd, capture: false, runKind: "execute" });
     if (result.ok) return { agent };
     lastError = result.spawnError ? `${agent} could not be spawned` : `${agent} exited non-zero`;
   }
@@ -6178,7 +6443,7 @@ async function runAgentInteractive(prompt2, opts) {
 }
 
 // cli/commands/review-apply.ts
-var c8 = {
+var c9 = {
   reset: "\x1B[0m",
   dim: "\x1B[2m",
   cyan: "\x1B[36m",
@@ -6190,7 +6455,7 @@ var c8 = {
   magenta: "\x1B[35m"
 };
 function paint8(color, text) {
-  return `${c8[color]}${text}${c8.reset}`;
+  return `${c9[color]}${text}${c9.reset}`;
 }
 function timestamp2() {
   return paint8("gray", (/* @__PURE__ */ new Date()).toLocaleTimeString("en-US", { hour12: false }));
@@ -6207,7 +6472,7 @@ function logOk(msg) {
 function logErr(msg) {
   console.error(`${timestamp2()} ${tag()} ${paint8("red", "\u2717")} ${msg}`);
 }
-var reviewApplyCommand = new Command25("apply").description("Apply review comments and findings using the Claude agent").argument("<id>", "Code review ID (the one shown in the Reviews UI)").option("--no-push", "Skip pushing the fix commit to the remote").option("--no-commit", "Apply changes but don't commit (for dry-run review)").option("--in-place", "Apply edits directly in the linked checkout instead of an isolated worktree (legacy, unsafe)").action(async (id, opts) => {
+var reviewApplyCommand = new Command28("apply").description("Apply review comments and findings using the Claude agent").argument("<id>", "Code review ID (the one shown in the Reviews UI)").option("--no-push", "Skip pushing the fix commit to the remote").option("--no-commit", "Apply changes but don't commit (for dry-run review)").option("--in-place", "Apply edits directly in the linked checkout instead of an isolated worktree (legacy, unsafe)").action(async (id, opts) => {
   const config = loadConfig();
   if (!config.apiKey) {
     logErr('Not authenticated. Run "mr login" first.');
@@ -6227,7 +6492,7 @@ var reviewApplyCommand = new Command25("apply").description("Apply review commen
     logErr("Review has no comments or findings to act on.");
     process.exit(1);
   }
-  const actionableComments = comments.filter((c14) => !excluded.has(c14.file));
+  const actionableComments = comments.filter((c15) => !excluded.has(c15.file));
   const dismissedCount = findings.filter((f) => f.status === "dismissed").length;
   const actionableFindings = findings.filter(
     (f) => !excluded.has(f.file) && f.status !== "dismissed"
@@ -6265,7 +6530,7 @@ var reviewApplyCommand = new Command25("apply").description("Apply review commen
   }
   const touchedFiles = Array.from(
     new Set([
-      ...actionableComments.map((c14) => c14.file),
+      ...actionableComments.map((c15) => c15.file),
       ...actionableFindings.map((f) => f.file)
     ].filter(Boolean))
   );
@@ -6405,9 +6670,9 @@ function buildApplyPrompt(args) {
   }
   if (args.comments.length > 0) {
     lines.push("USER COMMENTS:");
-    for (const c14 of args.comments) {
-      const where = c14.line ? `${c14.file}:${c14.line}` : c14.file;
-      lines.push(`- [${where}] ${c14.body}`);
+    for (const c15 of args.comments) {
+      const where = c15.line ? `${c15.file}:${c15.line}` : c15.file;
+      lines.push(`- [${where}] ${c15.body}`);
     }
     lines.push("");
   }
@@ -6661,6 +6926,37 @@ function buildDimensionPrompt(args) {
   lines.push(JSON_CONTRACT, "", "Here is the diff to review:", "", "```diff", args.diff, "```");
   return lines.join("\n");
 }
+function buildLightPrompt(args) {
+  const allowedTypes = [
+    ...new Set(REVIEW_DIMENSIONS.flatMap((d) => d.allowedTypes))
+  ];
+  const lines = [];
+  lines.push(
+    `You are a senior code reviewer doing a quick but careful pass.`,
+    `Review the git diff for branch "${args.branch}" compared to "${args.baseBranch}".`,
+    "",
+    "Cover all of these concerns in a single pass and report the issues that matter most:",
+    "- Security (injection, auth gaps, leaked secrets, unsafe input handling)",
+    "- Correctness (logic bugs, null/undefined, broken contracts, bad async)",
+    "- Performance (N+1 queries, hot-loop work, missing memoization)",
+    "- Style & maintainability (naming, dead code, duplication) \u2014 keep these low severity",
+    "",
+    "Prioritize real, high-impact problems over nitpicks. This is a fast pass, so favor",
+    "the issues you are confident about over exhaustive coverage.",
+    "",
+    `Emit findings whose "type" is one of: ${allowedTypes.join(", ")}.`,
+    ""
+  );
+  if (args.canReadFiles) {
+    lines.push(
+      "You are running inside a checkout of this repository and MAY open changed files",
+      "and their neighbors to confirm a finding before reporting it.",
+      ""
+    );
+  }
+  lines.push(JSON_CONTRACT, "", "Here is the diff to review:", "", "```diff", args.diff, "```");
+  return lines.join("\n");
+}
 function buildVerificationPrompt(args) {
   const compact = args.findings.map((f) => ({
     id: f.id,
@@ -6701,6 +6997,41 @@ function buildVerificationPrompt(args) {
   return lines.join("\n");
 }
 
+// lib/review/depth.ts
+var REVIEW_DEPTHS = {
+  light: {
+    key: "light",
+    label: "Light",
+    description: "One agent, quick single pass",
+    fanOut: false,
+    verify: false,
+    multiAgent: false
+  },
+  regular: {
+    key: "regular",
+    label: "Regular",
+    description: "Team review across security, correctness, performance & style",
+    fanOut: true,
+    verify: true,
+    multiAgent: false
+  },
+  deep: {
+    key: "deep",
+    label: "Deep",
+    description: "Multiple agents (claude, codex, gemini) for deep analysis",
+    fanOut: true,
+    verify: true,
+    multiAgent: true
+  }
+};
+var DEFAULT_REVIEW_DEPTH = "regular";
+function normalizeReviewDepth(value) {
+  return value === "light" || value === "regular" || value === "deep" ? value : DEFAULT_REVIEW_DEPTH;
+}
+function getReviewDepthConfig(value) {
+  return REVIEW_DEPTHS[normalizeReviewDepth(value)];
+}
+
 // lib/review/orchestrate.ts
 function splitDiffByFile(diff) {
   const sections = diff.split(/(?=^diff --git )/m).filter((s) => s.trim());
@@ -6721,7 +7052,10 @@ async function pool(items, limit) {
   await Promise.all(workers);
   return results;
 }
-function buildJobs(opts) {
+function buildJobs(opts, fanOut) {
+  if (!fanOut) {
+    return [{ dimension: null, diff: opts.diff }];
+  }
   const files = splitDiffByFile(opts.diff);
   const shardThreshold = opts.shardThreshold ?? 12;
   if (files.length >= shardThreshold) {
@@ -6750,40 +7084,63 @@ async function orchestrateReview(opts) {
   });
   const concurrency = opts.concurrency ?? 4;
   const canReadFiles = Boolean(opts.cwd);
-  const runOpts = { cwd: opts.cwd, chain: opts.chain };
-  const jobs = buildJobs(opts);
-  log4(`Fanning out ${jobs.length} review subagent(s) across ${REVIEW_DIMENSIONS.length} dimensions`);
+  const depthConfig = getReviewDepthConfig(opts.depth);
+  const jobs = buildJobs(opts, depthConfig.fanOut);
+  const reviewers = depthConfig.multiAgent ? opts.chain : [opts.chain[0]];
+  if (depthConfig.multiAgent) {
+    log4(`Deep review across ${reviewers.length} agent(s): ${reviewers.join(", ")}`);
+  }
+  log4(
+    depthConfig.fanOut ? `Fanning out ${jobs.length} review subagent(s) across ${REVIEW_DIMENSIONS.length} dimensions \xD7 ${reviewers.length} agent(s)` : `Running a light single-pass review with ${reviewers[0]}`
+  );
+  const tasks = jobs.flatMap(
+    (job) => reviewers.map((agent) => ({ job, agent }))
+  );
   const summaries = [];
   const collected = [];
   const jobResults = await pool(
-    jobs.map((job) => async () => {
-      const prompt2 = buildDimensionPrompt({
+    tasks.map(({ job, agent }) => async () => {
+      const prompt2 = job.dimension ? buildDimensionPrompt({
         dimension: job.dimension,
         branch: opts.branch,
         baseBranch: opts.baseBranch,
         diff: job.diff,
         canReadFiles,
         fileScope: job.fileScope
+      }) : buildLightPrompt({
+        branch: opts.branch,
+        baseBranch: opts.baseBranch,
+        diff: job.diff,
+        canReadFiles
       });
+      const runOpts = {
+        cwd: opts.cwd,
+        chain: depthConfig.multiAgent ? [agent] : opts.chain
+      };
       try {
-        const { output } = await runAgentCaptured(prompt2, runOpts);
+        const { output, agent: usedAgent } = await runAgentCaptured(prompt2, runOpts);
         const parsed = parseReviewOutput(output);
-        return { job, parsed };
+        return { job, parsed, agent: usedAgent };
       } catch (err) {
-        log4(`  ${job.dimension.key} subagent failed: ${err.message}`);
-        return { job, parsed: { summary: "", findings: [], parseFailed: true } };
+        const label = job.dimension?.key ?? "light";
+        log4(`  ${label} subagent (${agent}) failed: ${err.message}`);
+        return { job, parsed: { summary: "", findings: [], parseFailed: true }, agent };
       }
     }),
     concurrency
   );
   const dimensionsRun = /* @__PURE__ */ new Set();
-  for (const { job, parsed } of jobResults) {
-    if (parsed.summary) summaries.push(`${job.dimension.title}: ${parsed.summary}`);
+  const agentsRun = /* @__PURE__ */ new Set();
+  for (const { job, parsed, agent } of jobResults) {
+    const label = job.dimension?.title ?? "Review";
+    if (parsed.summary) summaries.push(`${label}: ${parsed.summary}`);
     for (const f of parsed.findings) {
-      dimensionsRun.add(job.dimension.key);
+      agentsRun.add(agent);
+      const fallbackType = job.dimension?.allowedTypes[0] ?? "bug";
+      if (job.dimension) dimensionsRun.add(job.dimension.key);
       collected.push({
         id: f.id || "f",
-        type: f.type || job.dimension.allowedTypes[0],
+        type: f.type || fallbackType,
         severity: f.severity || "medium",
         title: f.title || "Untitled finding",
         description: f.description || "",
@@ -6792,7 +7149,7 @@ async function orchestrateReview(opts) {
         endLine: typeof f.endLine === "number" ? f.endLine : void 0,
         suggestion: f.suggestion,
         status: "new",
-        dimension: job.dimension.key,
+        dimension: job.dimension?.key ?? f.type ?? "general",
         confidence: typeof f.confidence === "number" ? f.confidence : void 0
       });
     }
@@ -6800,13 +7157,15 @@ async function orchestrateReview(opts) {
   const rawCount = collected.length;
   let findings = mergeFindings(collected);
   log4(`Merged ${rawCount} raw findings into ${findings.length} after dedup`);
-  if (opts.verify && findings.length > 0) {
-    findings = await verifyFindings(findings, opts, runOpts, log4);
+  if (depthConfig.verify && findings.length > 0) {
+    const verifyOpts = { cwd: opts.cwd, chain: opts.chain };
+    findings = await verifyFindings(findings, opts, verifyOpts, log4);
   }
   return {
     summary: summaries.join(" "),
     findings,
     dimensionsRun: [...dimensionsRun],
+    agentsRun: [...agentsRun],
     rawCount
   };
 }
@@ -6848,7 +7207,7 @@ async function verifyFindings(findings, opts, runOpts, log4) {
 }
 
 // cli/commands/review.ts
-var c9 = {
+var c10 = {
   reset: "\x1B[0m",
   bold: "\x1B[1m",
   dim: "\x1B[2m",
@@ -6861,7 +7220,7 @@ var c9 = {
   blue: "\x1B[34m"
 };
 function paint9(color, text) {
-  return `${c9[color]}${text}${c9.reset}`;
+  return `${c10[color]}${text}${c10.reset}`;
 }
 function timestamp3() {
   return paint9("gray", (/* @__PURE__ */ new Date()).toLocaleTimeString("en-US", { hour12: false }));
@@ -6878,7 +7237,7 @@ function logOk2(msg) {
 function logErr2(msg) {
   console.error(`${timestamp3()} ${tag2()} ${paint9("red", "\u2717")} ${msg}`);
 }
-var reviewCommand = new Command26("review").description("Run an automated code review on a branch").option("--project <id>", "Project ID (defaults to linked project)").option("--report <id>", "Use an existing review report ID (created by UI trigger)").option("--branch <name>", "Branch to review (defaults to current branch)").option("--base <name>", "Base branch to diff against (defaults to main)").option("--pr-url <url>", "Pull/merge request URL; when set, diff is fetched via gh/glab and no local checkout is needed").option("--pr-number <n>", "Pull/merge request number (used with --pr-url)").addCommand(reviewApplyCommand).action(async (opts) => {
+var reviewCommand = new Command29("review").description("Run an automated code review on a branch").option("--project <id>", "Project ID (defaults to linked project)").option("--report <id>", "Use an existing review report ID (created by UI trigger)").option("--branch <name>", "Branch to review (defaults to current branch)").option("--base <name>", "Base branch to diff against (defaults to main)").option("--depth <level>", "Review depth: light | regular | deep", "regular").option("--pr-url <url>", "Pull/merge request URL; when set, diff is fetched via gh/glab and no local checkout is needed").option("--pr-number <n>", "Pull/merge request number (used with --pr-url)").addCommand(reviewApplyCommand).action(async (opts) => {
   const config = loadConfig();
   if (!config.apiKey) {
     logErr2('Not authenticated. Run "mr login" first.');
@@ -6907,6 +7266,8 @@ var reviewCommand = new Command26("review").description("Run an automated code r
     process.exit(1);
   }
   const baseBranch = opts.base || "main";
+  const depth = normalizeReviewDepth(opts.depth);
+  const depthConfig = getReviewDepthConfig(depth);
   const prUrl = opts.prUrl;
   const prNumberRaw = opts.prNumber;
   const prNumber = prNumberRaw ? Number(prNumberRaw) : void 0;
@@ -7026,7 +7387,8 @@ var reviewCommand = new Command26("review").description("Run an automated code r
       const report = await api.post("/api/reviews", {
         projectId,
         branch,
-        baseBranch
+        baseBranch,
+        depth
       });
       reportId = report.id;
       log2(`Created review report ${paint9("yellow", reportId.slice(0, 8))}`);
@@ -7054,6 +7416,7 @@ var reviewCommand = new Command26("review").description("Run an automated code r
     process.exit(1);
   }
   log2(`Agent chain: ${paint9("cyan", chain.join(" \u2192 "))}`);
+  log2(`Review depth: ${paint9("magenta", depthConfig.label)} ${paint9("dim", `(${depthConfig.description})`)}`);
   const MAX_DIFF_CHARS = 4e5;
   const diffCharsTotal = diff.length;
   let reviewDiff = diff;
@@ -7064,15 +7427,15 @@ var reviewCommand = new Command26("review").description("Run an automated code r
     log2(paint9("yellow", `Diff truncated to ${MAX_DIFF_CHARS.toLocaleString()} of ${diffCharsTotal.toLocaleString()} chars`));
   }
   try {
-    log2("Running fan-out code review...");
+    log2(`Running ${depthConfig.label.toLowerCase()} code review...`);
     const orchestrated = await orchestrateReview({
       branch,
       baseBranch,
       diff: reviewDiff,
       chain,
+      depth,
       cwd: reviewCwd,
       concurrency: 4,
-      verify: true,
       log: (m) => log2(m)
     });
     const result = { summary: orchestrated.summary, findings: orchestrated.findings };
@@ -7185,7 +7548,7 @@ function formatDuration(ms) {
 }
 
 // cli/commands/scan.ts
-import { Command as Command27 } from "commander";
+import { Command as Command30 } from "commander";
 
 // lib/scanner/index.ts
 import { spawn as spawn8 } from "child_process";
@@ -7651,10 +8014,10 @@ ${codebaseAnalysis.routes.map((r) => `- ${r}`).join("\n")}
 ${codebaseAnalysis.prismaModels.map((m) => `- ${m}`).join("\n")}
 
 **Components:**
-${codebaseAnalysis.components.slice(0, 15).map((c14) => `- ${c14}`).join("\n")}
+${codebaseAnalysis.components.slice(0, 15).map((c15) => `- ${c15}`).join("\n")}
 
 **Recent Git Commits:**
-${codebaseAnalysis.recentCommits.slice(0, 8).map((c14) => `- ${c14}`).join("\n")}
+${codebaseAnalysis.recentCommits.slice(0, 8).map((c15) => `- ${c15}`).join("\n")}
 
 **Completed Tasks:**
 ${context.completedTasks.slice(0, 10).map((t) => `- ${t.title}`).join("\n") || "None"}
@@ -7869,7 +8232,9 @@ async function fetchScanContext(opts) {
 }
 function runClaude(prompt2) {
   return new Promise((resolve9, reject) => {
-    const child = spawn8("claude", ["-p", "--dangerously-skip-permissions", prompt2], {
+    const permission = resolvePermissionArgs("claude", "scan", resolveHeadlessMode(loadConfig()));
+    console.error(`[scanner] permission: ${describePermissionMode(permission)}`);
+    const child = spawn8("claude", ["-p", ...permission.args, prompt2], {
       stdio: ["ignore", "pipe", "pipe"]
     });
     let output = "";
@@ -7925,7 +8290,7 @@ function parseSynthesisOutput(output) {
 }
 
 // cli/commands/scan.ts
-var c10 = {
+var c11 = {
   reset: "\x1B[0m",
   bold: "\x1B[1m",
   dim: "\x1B[2m",
@@ -7937,7 +8302,7 @@ var c10 = {
   gray: "\x1B[90m"
 };
 function paint10(color, text) {
-  return `${c10[color]}${text}${c10.reset}`;
+  return `${c11[color]}${text}${c11.reset}`;
 }
 function timestamp4() {
   return paint10("gray", (/* @__PURE__ */ new Date()).toLocaleTimeString("en-US", { hour12: false }));
@@ -7954,7 +8319,7 @@ function logOk3(msg) {
 function logErr3(msg) {
   console.error(`${timestamp4()} ${scanTag()} ${paint10("red", "\u2717")} ${msg}`);
 }
-var scanCommand = new Command27("scan").description("Run a product scan on the current project \u2014 analyzes codebase, crawls the app, and surfaces findings").option("--project <id>", "Project ID (defaults to linked project)").option("--report <id>", "Use an existing scan report ID (created by UI trigger)").option("--prompt <prompt>", "Custom scan direction/prompt to focus the scan on").option("--no-crawl", "Skip live crawl (codebase analysis only)").action(async (opts) => {
+var scanCommand = new Command30("scan").description("Run a product scan on the current project \u2014 analyzes codebase, crawls the app, and surfaces findings").option("--project <id>", "Project ID (defaults to linked project)").option("--report <id>", "Use an existing scan report ID (created by UI trigger)").option("--prompt <prompt>", "Custom scan direction/prompt to focus the scan on").option("--no-crawl", "Skip live crawl (codebase analysis only)").action(async (opts) => {
   const config = loadConfig();
   if (!config.apiKey) {
     logErr3('Not authenticated. Run "mr login" first.');
@@ -8119,7 +8484,7 @@ var scanCommand = new Command27("scan").description("Run a product scan on the c
 });
 
 // cli/commands/doctor.ts
-import { Command as Command28 } from "commander";
+import { Command as Command31 } from "commander";
 import { existsSync as existsSync17 } from "fs";
 import { homedir as homedir2 } from "os";
 import { join as join11 } from "path";
@@ -8167,7 +8532,7 @@ async function checkProjectLink() {
     optional: true
   };
 }
-var doctorCommand = new Command28("doctor").description("Diagnose Mr. Manager CLI installation and environment").action(async () => {
+var doctorCommand = new Command31("doctor").description("Diagnose Mr. Manager CLI installation and environment").action(async () => {
   const banner = [
     ``,
     paint5("cyan", `  MR DOCTOR`),
@@ -8198,7 +8563,7 @@ var doctorCommand = new Command28("doctor").description("Diagnose Mr. Manager CL
     console.log("");
     return;
   }
-  const fixes = checks.filter((c14) => !c14.ok && c14.fix && !c14.optional);
+  const fixes = checks.filter((c15) => !c15.ok && c15.fix && !c15.optional);
   if (fixes.length > 0) {
     console.log(paint5("yellow", "  To fix:"));
     for (const fix of fixes) {
@@ -8210,14 +8575,14 @@ var doctorCommand = new Command28("doctor").description("Diagnose Mr. Manager CL
 });
 
 // cli/commands/prompt-audit.ts
-import { Command as Command29 } from "commander";
+import { Command as Command32 } from "commander";
 import { resolve as resolve8 } from "path";
 import { existsSync as existsSync18, readFileSync as readFileSync12 } from "fs";
 function auditLine(label, tokens) {
   const bar = "\u2588".repeat(Math.min(60, Math.round(tokens / 200)));
   return `  ${label.padEnd(30)} ${formatTokenCount(tokens).padStart(8)}  ${bar}`;
 }
-var promptAuditCommand = new Command29("prompt-audit").description("Dry-run prompt construction and report estimated token counts by job type").option("--task <id>", "Audit prompts for a specific task ID").option("--all", "Audit all supported job types with representative data", false).option("--json", "Output as JSON instead of plain text", false).action(async (opts) => {
+var promptAuditCommand = new Command32("prompt-audit").description("Dry-run prompt construction and report estimated token counts by job type").option("--task <id>", "Audit prompts for a specific task ID").option("--all", "Audit all supported job types with representative data", false).option("--json", "Output as JSON instead of plain text", false).action(async (opts) => {
   const results = [];
   if (opts.task) {
     try {
@@ -8277,7 +8642,7 @@ ${task.notes}` : "";
         }
       }
       sections.push({ name: "static-instructions (system)", tokens: estimateTokens(
-        "status-updates + screenshots + test-plan + no-mr + features-workflow"
+        "status-updates + screenshots + no-mr + features-workflow"
       ) });
       const totalTokens = sections.reduce((sum, s) => sum + s.tokens, 0);
       const promptTokens = sections.filter((s) => !s.name.includes("system")).reduce((sum, s) => sum + s.tokens, 0);
@@ -8426,9 +8791,9 @@ ${r.jobType} [${r.identifier}]`);
 });
 
 // cli/commands/skill.ts
-import { Command as Command30 } from "commander";
-import { createInterface as createInterface3 } from "readline/promises";
-var c11 = {
+import { Command as Command33 } from "commander";
+import { createInterface as createInterface4 } from "readline/promises";
+var c12 = {
   reset: "\x1B[0m",
   bold: "\x1B[1m",
   dim: "\x1B[2m",
@@ -8461,7 +8826,7 @@ function formatSize(bytes) {
   if (bytes < 1024) return `${bytes}b`;
   return `${(bytes / 1024).toFixed(1)}kb`;
 }
-var skillCommand = new Command30("skill").description("Manage skills \u2014 reusable playbooks for AI agents");
+var skillCommand = new Command33("skill").description("Manage skills \u2014 reusable playbooks for AI agents");
 skillCommand.command("list").alias("ls").description("List all skills").option("--category <category>", "Filter by category").action(async (opts) => {
   const params = new URLSearchParams();
   if (opts.category) params.set("category", opts.category);
@@ -8469,17 +8834,17 @@ skillCommand.command("list").alias("ls").description("List all skills").option("
     `/api/skills${params.toString() ? `?${params}` : ""}`
   );
   if (skills.length === 0) {
-    console.log(`${c11.dim}No skills found.${c11.reset}`);
+    console.log(`${c12.dim}No skills found.${c12.reset}`);
     return;
   }
   for (const skill of skills) {
-    const cat = skill.category ? ` ${c11.dim}[${skill.category}]${c11.reset}` : "";
-    const scope = skill.projectId ? ` ${c11.dim}(project)${c11.reset}` : ` ${c11.dim}(global)${c11.reset}`;
-    console.log(`  ${c11.cyan}${skill.name}${c11.reset}${cat}${scope}`);
+    const cat = skill.category ? ` ${c12.dim}[${skill.category}]${c12.reset}` : "";
+    const scope = skill.projectId ? ` ${c12.dim}(project)${c12.reset}` : ` ${c12.dim}(global)${c12.reset}`;
+    console.log(`  ${c12.cyan}${skill.name}${c12.reset}${cat}${scope}`);
     if (skill.description) {
-      console.log(`    ${c11.dim}${skill.description}${c11.reset}`);
+      console.log(`    ${c12.dim}${skill.description}${c12.reset}`);
     }
-    console.log(`    ${c11.dim}id: ${skill.id}${c11.reset}`);
+    console.log(`    ${c12.dim}id: ${skill.id}${c12.reset}`);
   }
 });
 skillCommand.command("create").description("Create a new skill from a markdown file or inline content").argument("<name>", "Skill name").option("-d, --description <desc>", "Short description").option("-c, --category <cat>", "Category (e.g. Deployment, Testing)").option("-f, --file <path>", "Read content from a markdown file").option("--content <text>", "Inline markdown content").option("-p, --project", "Scope to the linked project").action(async (name, opts) => {
@@ -8515,7 +8880,7 @@ skillCommand.command("create").description("Create a new skill from a markdown f
     projectId
   });
   console.log(
-    `${c11.green}Created skill:${c11.reset} ${c11.bold}${skill.name}${c11.reset} ${c11.dim}(${skill.id})${c11.reset}`
+    `${c12.green}Created skill:${c12.reset} ${c12.bold}${skill.name}${c12.reset} ${c12.dim}(${skill.id})${c12.reset}`
   );
 });
 skillCommand.command("update").description(
@@ -8576,14 +8941,14 @@ skillCommand.command("update").description(
   const beforeContent = existing.content ?? "";
   const afterContent = typeof patch.content === "string" ? patch.content : beforeContent;
   const contentChanged = typeof patch.content === "string" && patch.content !== beforeContent;
-  const sizeDiff = typeof patch.content === "string" ? ` ${c11.dim}(${formatSize(Buffer.byteLength(beforeContent, "utf-8"))} -> ${formatSize(Buffer.byteLength(afterContent, "utf-8"))})${c11.reset}` : "";
+  const sizeDiff = typeof patch.content === "string" ? ` ${c12.dim}(${formatSize(Buffer.byteLength(beforeContent, "utf-8"))} -> ${formatSize(Buffer.byteLength(afterContent, "utf-8"))})${c12.reset}` : "";
   const priorRevisions = existing.revisions?.length ?? 0;
   const revisionsAfter = priorRevisions + (contentChanged ? 1 : 0);
-  const revisionNote = contentChanged ? ` ${c11.dim}kept ${revisionsAfter} prior revision${revisionsAfter === 1 ? "" : "s"}${c11.reset}` : "";
+  const revisionNote = contentChanged ? ` ${c12.dim}kept ${revisionsAfter} prior revision${revisionsAfter === 1 ? "" : "s"}${c12.reset}` : "";
   console.log(
-    `${c11.green}Updated skill:${c11.reset} ${c11.bold}${updated.name}${c11.reset}${sizeDiff}${revisionNote}`
+    `${c12.green}Updated skill:${c12.reset} ${c12.bold}${updated.name}${c12.reset}${sizeDiff}${revisionNote}`
   );
-  console.log(`  ${c11.dim}id: ${updated.id}${c11.reset}`);
+  console.log(`  ${c12.dim}id: ${updated.id}${c12.reset}`);
 });
 skillCommand.command("delete").alias("rm").description("Delete a skill").argument("<idOrName>", "Skill id or name").option("--yes", "Skip confirmation prompt").action(async (idOrName, opts) => {
   let skill;
@@ -8594,9 +8959,9 @@ skillCommand.command("delete").alias("rm").description("Delete a skill").argumen
     process.exit(1);
   }
   if (!opts.yes) {
-    const rl = createInterface3({ input: process.stdin, output: process.stdout });
+    const rl = createInterface4({ input: process.stdin, output: process.stdout });
     const answer = (await rl.question(
-      `Delete skill ${c11.bold}${skill.name}${c11.reset} ${c11.dim}(${skill.id})${c11.reset}? [y/N] `
+      `Delete skill ${c12.bold}${skill.name}${c12.reset} ${c12.dim}(${skill.id})${c12.reset}? [y/N] `
     )).trim().toLowerCase();
     rl.close();
     if (answer !== "y" && answer !== "yes") {
@@ -8606,7 +8971,7 @@ skillCommand.command("delete").alias("rm").description("Delete a skill").argumen
   }
   await api.del(`/api/skills/${skill.id}`);
   console.log(
-    `${c11.yellow}Deleted skill:${c11.reset} ${c11.bold}${skill.name}${c11.reset} ${c11.dim}(${skill.id})${c11.reset}`
+    `${c12.yellow}Deleted skill:${c12.reset} ${c12.bold}${skill.name}${c12.reset} ${c12.dim}(${skill.id})${c12.reset}`
   );
 });
 skillCommand.command("generate").alias("gen").description("Generate a new skill using AI from a text prompt").argument("<prompt>", "Describe the skill to generate").option("-p, --project", "Scope to the linked project").action(async (prompt2, opts) => {
@@ -8620,22 +8985,22 @@ skillCommand.command("generate").alias("gen").description("Generate a new skill
       process.exit(1);
     }
   }
-  console.log(`${c11.dim}Generating skill...${c11.reset}`);
+  console.log(`${c12.dim}Generating skill...${c12.reset}`);
   try {
     const skill = await api.post("/api/skills/generate", {
       prompt: prompt2,
       projectId
     });
     console.log(
-      `${c11.green}Generated skill:${c11.reset} ${c11.bold}${skill.name}${c11.reset}`
+      `${c12.green}Generated skill:${c12.reset} ${c12.bold}${skill.name}${c12.reset}`
     );
     if (skill.description) {
-      console.log(`  ${c11.dim}${skill.description}${c11.reset}`);
+      console.log(`  ${c12.dim}${skill.description}${c12.reset}`);
     }
     if (skill.category) {
-      console.log(`  ${c11.dim}Category: ${skill.category}${c11.reset}`);
+      console.log(`  ${c12.dim}Category: ${skill.category}${c12.reset}`);
     }
-    console.log(`  ${c11.dim}id: ${skill.id}${c11.reset}`);
+    console.log(`  ${c12.dim}id: ${skill.id}${c12.reset}`);
   } catch (err) {
     console.error(`Failed to generate skill: ${err.message}`);
     process.exit(1);
@@ -8643,8 +9008,8 @@ skillCommand.command("generate").alias("gen").description("Generate a new skill
 });
 
 // cli/commands/resource.ts
-import { Command as Command31 } from "commander";
-var c12 = {
+import { Command as Command34 } from "commander";
+var c13 = {
   reset: "\x1B[0m",
   bold: "\x1B[1m",
   dim: "\x1B[2m",
@@ -8654,16 +9019,16 @@ var c12 = {
   magenta: "\x1B[35m"
 };
 var TYPE_COLORS = {
-  plan: c12.cyan,
-  research: c12.magenta,
-  "test-plan": c12.yellow,
-  note: c12.green
+  plan: c13.cyan,
+  research: c13.magenta,
+  "test-plan": c13.yellow,
+  note: c13.green
 };
 function typeLabel(type) {
-  const color = TYPE_COLORS[type] ?? c12.dim;
-  return `${color}${type}${c12.reset}`;
+  const color = TYPE_COLORS[type] ?? c13.dim;
+  return `${color}${type}${c13.reset}`;
 }
-var resourceCommand = new Command31("resource").description("Manage resources \u2014 documents, plans, research, and notes");
+var resourceCommand = new Command34("resource").description("Manage resources \u2014 documents, plans, research, and notes");
 resourceCommand.command("list").alias("ls").description("List resources for the linked project (or all)").option("--all", "List all resources across projects").action(async (opts) => {
   const params = new URLSearchParams();
   if (opts.all) {
@@ -8676,13 +9041,13 @@ resourceCommand.command("list").alias("ls").description("List resources for the
     `/api/resources${params.toString() ? `?${params}` : ""}`
   );
   if (resources.length === 0) {
-    console.log(`${c12.dim}No resources found.${c12.reset}`);
+    console.log(`${c13.dim}No resources found.${c13.reset}`);
     return;
   }
   for (const r of resources) {
-    const project = r.projectName ? ` ${c12.dim}[${r.projectName}]${c12.reset}` : "";
-    console.log(`  ${typeLabel(r.type)}  ${c12.bold}${r.title}${c12.reset}${project}`);
-    console.log(`    ${c12.dim}id: ${r.id}${c12.reset}`);
+    const project = r.projectName ? ` ${c13.dim}[${r.projectName}]${c13.reset}` : "";
+    console.log(`  ${typeLabel(r.type)}  ${c13.bold}${r.title}${c13.reset}${project}`);
+    console.log(`    ${c13.dim}id: ${r.id}${c13.reset}`);
   }
 });
 resourceCommand.command("create").description("Create a new resource from a file or inline content").argument("<title>", "Resource title").option("-t, --type <type>", "Resource type (note, plan, research, test-plan)", "note").option("-f, --file <path>", "Read content from a file").option("--content <text>", "Inline content").option("--task <taskId>", "Attach to an existing task instead of creating a standalone resource").option("-p, --project", "Scope to the linked project").action(async (title, opts) => {
@@ -8707,9 +9072,9 @@ resourceCommand.command("create").description("Create a new resource from a file
       content: content.trim()
     });
     console.log(
-      `${c12.green}Created resource:${c12.reset} ${c12.bold}${title}${c12.reset} ${c12.dim}(${resource.id})${c12.reset}`
+      `${c13.green}Created resource:${c13.reset} ${c13.bold}${title}${c13.reset} ${c13.dim}(${resource.id})${c13.reset}`
     );
-    console.log(`  ${c12.dim}Attached to task ${opts.task}${c12.reset}`);
+    console.log(`  ${c13.dim}Attached to task ${opts.task}${c13.reset}`);
     return;
   }
   let projectId;
@@ -8729,7 +9094,7 @@ resourceCommand.command("create").description("Create a new resource from a file
     projectId
   });
   console.log(
-    `${c12.green}Created resource:${c12.reset} ${c12.bold}${title}${c12.reset} ${c12.dim}(${result.resource.id})${c12.reset}`
+    `${c13.green}Created resource:${c13.reset} ${c13.bold}${title}${c13.reset} ${c13.dim}(${result.resource.id})${c13.reset}`
   );
 });
 resourceCommand.command("generate").alias("gen").description("Generate a resource using AI from a text prompt").argument("<prompt>", "Describe the resource to generate").option("-t, --type <type>", "Resource type (plan or research)", "research").option("-p, --project", "Scope to the linked project").action(async (prompt2, opts) => {
@@ -8748,30 +9113,30 @@ resourceCommand.command("generate").alias("gen").description("Generate a resourc
       process.exit(1);
     }
   }
-  console.log(`${c12.dim}Generating ${type}...${c12.reset}`);
+  console.log(`${c13.dim}Generating ${type}...${c13.reset}`);
   const result = await api.post("/api/resources", {
     type,
     prompt: prompt2,
     projectId
   });
   console.log(
-    `${c12.green}Queued:${c12.reset} ${c12.bold}${result.task.title}${c12.reset}`
+    `${c13.green}Queued:${c13.reset} ${c13.bold}${result.task.title}${c13.reset}`
   );
-  console.log(`  ${c12.dim}task: ${result.task.id}${c12.reset}`);
+  console.log(`  ${c13.dim}task: ${result.task.id}${c13.reset}`);
 });
 
 // cli/commands/tests.ts
-import { Command as Command32 } from "commander";
-var c13 = {
+import { Command as Command35 } from "commander";
+var c14 = {
   reset: "\x1B[0m",
   dim: "\x1B[2m",
   yellow: "\x1B[33m"
 };
-var testsCommand = new Command32("tests").description("List MR Test scenarios for the linked project").action(async () => {
+var testsCommand = new Command35("tests").description("List MR Test scenarios for the linked project").action(async () => {
   const projectId = getLinkedProjectId();
   if (!projectId) {
     console.error(
-      `${c13.yellow}No project linked to this directory.${c13.reset} Run "mr link <project-id>" first.`
+      `${c14.yellow}No project linked to this directory.${c14.reset} Run "mr link <project-id>" first.`
     );
     process.exit(1);
   }
@@ -8784,13 +9149,13 @@ var testsCommand = new Command32("tests").description("List MR Test scenarios fo
     process.exit(1);
   }
   if (scenarios.length === 0) {
-    console.log(`${c13.dim}No test scenarios found for this project.${c13.reset}`);
+    console.log(`${c14.dim}No test scenarios found for this project.${c14.reset}`);
     return;
   }
   for (const scenario of scenarios) {
     console.log(`### ${scenario.name}`);
     if (scenario.description) {
-      console.log(`${c13.dim}${scenario.description}${c13.reset}`);
+      console.log(`${c14.dim}${scenario.description}${c14.reset}`);
       console.log();
     }
     console.log(scenario.content);
@@ -8799,9 +9164,9 @@ var testsCommand = new Command32("tests").description("List MR Test scenarios fo
 });
 
 // cli/commands/walkthrough.ts
-import { Command as Command33 } from "commander";
+import { Command as Command36 } from "commander";
 var SKILL_NAME = "Generate Walkthrough Video";
-var walkthroughCommand = new Command33("walkthrough").description("Attach the Generate Walkthrough Video skill to a task and queue it").argument("<task-id>", "Task ID to generate a walkthrough for").option("--prod", "Allow recording against production (requires explicit confirmation)").action(async (taskId, opts) => {
+var walkthroughCommand = new Command36("walkthrough").description("Attach the Generate Walkthrough Video skill to a task and queue it").argument("<task-id>", "Task ID to generate a walkthrough for").option("--prod", "Allow recording against production (requires explicit confirmation)").action(async (taskId, opts) => {
   const skills = await api.get("/api/skills");
   const skill = skills.find((s) => s.name === SKILL_NAME);
   if (!skill) {
@@ -8834,7 +9199,7 @@ var userArgs = process.argv.slice(2);
 var bypassCommands = /* @__PURE__ */ new Set(["login", "init", "auth", "help", "--help", "-h", "--version", "-V", "doctor", "setup"]);
 var shouldBypass = userArgs.length > 0 && bypassCommands.has(userArgs[0]);
 if (isFirstRun && !shouldBypass) {
-  const c14 = {
+  const c15 = {
     reset: "\x1B[0m",
     bold: "\x1B[1m",
     dim: "\x1B[2m",
@@ -8844,28 +9209,28 @@ if (isFirstRun && !shouldBypass) {
     magenta: "\x1B[35m"
   };
   console.log("");
-  console.log(`${c14.cyan}  \u2554\u2566\u2557\u2566\u2550\u2557  \u2554\u2566\u2557\u2554\u2550\u2557\u2554\u2557\u2554\u2554\u2550\u2557\u2554\u2550\u2557\u2554\u2550\u2557\u2566\u2550\u2557${c14.reset}`);
-  console.log(`${c14.magenta}  \u2551\u2551\u2551\u2560\u2566\u255D  \u2551\u2551\u2551\u2560\u2550\u2563\u2551\u2551\u2551\u2560\u2550\u2563\u2551 \u2566\u2551\u2563 \u2560\u2566\u255D${c14.reset}`);
-  console.log(`${c14.cyan}  \u2569 \u2569\u2569\u255A\u2550  \u2569 \u2569\u2569 \u2569\u255D\u255A\u255D\u2569 \u2569\u255A\u2550\u255D\u255A\u2550\u255D\u2569\u255A\u2550${c14.reset}`);
-  console.log(`${c14.dim}  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500${c14.reset}`);
+  console.log(`${c15.cyan}  \u2554\u2566\u2557\u2566\u2550\u2557  \u2554\u2566\u2557\u2554\u2550\u2557\u2554\u2557\u2554\u2554\u2550\u2557\u2554\u2550\u2557\u2554\u2550\u2557\u2566\u2550\u2557${c15.reset}`);
+  console.log(`${c15.magenta}  \u2551\u2551\u2551\u2560\u2566\u255D  \u2551\u2551\u2551\u2560\u2550\u2563\u2551\u2551\u2551\u2560\u2550\u2563\u2551 \u2566\u2551\u2563 \u2560\u2566\u255D${c15.reset}`);
+  console.log(`${c15.cyan}  \u2569 \u2569\u2569\u255A\u2550  \u2569 \u2569\u2569 \u2569\u255D\u255A\u255D\u2569 \u2569\u255A\u2550\u255D\u255A\u2550\u255D\u2569\u255A\u2550${c15.reset}`);
+  console.log(`${c15.dim}  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500${c15.reset}`);
   console.log("");
-  console.log(`${c14.bold}  Welcome to Mr. Manager!${c14.reset}`);
-  console.log(`${c14.dim}  Let's get you set up in a few quick steps.${c14.reset}`);
+  console.log(`${c15.bold}  Welcome to Mr. Manager!${c15.reset}`);
+  console.log(`${c15.dim}  Let's get you set up in a few quick steps.${c15.reset}`);
   console.log("");
-  console.log(`  ${c14.yellow}Step 1:${c14.reset} Authenticate via Google OAuth`);
-  console.log(`  ${c14.dim}Run:${c14.reset} ${c14.cyan}mr login${c14.reset}`);
+  console.log(`  ${c15.yellow}Step 1:${c15.reset} Authenticate via Google OAuth`);
+  console.log(`  ${c15.dim}Run:${c15.reset} ${c15.cyan}mr login${c15.reset}`);
   console.log("");
-  console.log(`  ${c14.yellow}Step 2:${c14.reset} Verify your environment`);
-  console.log(`  ${c14.dim}Run:${c14.reset} ${c14.cyan}mr setup${c14.reset}`);
+  console.log(`  ${c15.yellow}Step 2:${c15.reset} Verify your environment`);
+  console.log(`  ${c15.dim}Run:${c15.reset} ${c15.cyan}mr setup${c15.reset}`);
   console.log("");
-  console.log(`  ${c14.yellow}Step 3:${c14.reset} Link a repo and start watching`);
-  console.log(`  ${c14.dim}Run:${c14.reset} ${c14.cyan}mr link${c14.reset} ${c14.dim}&&${c14.reset} ${c14.cyan}mr watch${c14.reset}`);
+  console.log(`  ${c15.yellow}Step 3:${c15.reset} Link a repo and start watching`);
+  console.log(`  ${c15.dim}Run:${c15.reset} ${c15.cyan}mr link${c15.reset} ${c15.dim}&&${c15.reset} ${c15.cyan}mr watch${c15.reset}`);
   console.log("");
-  console.log(`${c14.dim}  Or run ${c14.reset}${c14.cyan}mr login${c14.reset}${c14.dim} to get started now.${c14.reset}`);
+  console.log(`${c15.dim}  Or run ${c15.reset}${c15.cyan}mr login${c15.reset}${c15.dim} to get started now.${c15.reset}`);
   console.log("");
   process.exit(0);
 }
-var program = new Command34();
+var program = new Command37();
 program.name("mr").description("Mr. Manager - Task and project management CLI").version(CLI_VERSION);
 program.addCommand(initCommand);
 program.addCommand(authCommand);
@@ -8882,6 +9247,9 @@ program.addCommand(delegateCommand);
 program.addCommand(undelegateCommand);
 program.addCommand(createCommand);
 program.addCommand(completeCommand);
+program.addCommand(showCommand);
+program.addCommand(editCommand);
+program.addCommand(deleteCommand);
 program.addCommand(subtaskCompleteCommand);
 program.addCommand(subtaskAddCommand);
 program.addCommand(prototypeCommand);