@mrrlin-dev/mcp 0.3.12 → 0.3.14

package/README.md

@@ -10,7 +10,8 @@ The bridge auto-picks up new `@mrrlin-dev/mcp` versions after `npm install -g`.
 
 - **L1 (self-update loop):** every 15 minutes (env-tunable) the bridge hashes its own `bin.cjs` and, on change, drains the current Codex turn cleanly and exits via `bridgeShutdown`. PM2 restarts. New code loads.
 - **L2 (postinstall nudge):** `npm install -g @mrrlin-dev/mcp@latest` triggers a `SIGUSR2` to every running PM2 bridge, collapsing the L1 wait to seconds.
-- **L3 (in-chat update offer):** every 6 hours the bridge checks `https://registry.npmjs.org/@mrrlin-dev/mcp/latest`. When a newer version is published, on your next chat turn the Director asks: *"Бачу що bridge на X, на npm уже Y — оновити зараз?"*. Say "yes" → Director runs `npm install -g @mrrlin-dev/mcp@latest` itself. 48h cooldown if you decline.
+- **L3 (in-chat update offer):** every 6 hours the bridge checks `https://registry.npmjs.org/@mrrlin-dev/mcp/latest`. When a newer version is published, on your next chat turn the Director explains *why* to update (latest fixes/improvements, changelog link) and offers a choice — let it run the update, or run `npm install -g @mrrlin-dev/mcp@latest` yourself. Say "yes" → Director runs the install itself. 48h cooldown if you decline.
+- **L3.3 (inbox mirror):** the same fire also files a persistent `question` in the active project's inbox ("A newer version of the mrrlin bridge is available…", with the changelog link), so the update isn't only an ephemeral per-turn aside. The body is version-agnostic on purpose: the inbox dedup collapses it to one open row per project (reused across versions), and it re-appears at most once per 48h cooldown after you decide it. It's an opportunistic per-project signal, not a guaranteed cross-project notice.
 - **L4 (process hygiene):** the bridge refuses to start a second instance on the same port and warns about orphan `mrrlin-mcp director-bridge` processes at startup.
 
 ### Env tuning

package/dist/bin.cjs

@@ -36728,10 +36728,11 @@ var mrrlinTaskUpdateSchema = external_exports.object({
   status: mrrlinTaskStatusSchema.optional(),
   subcategory: taxonomySubcategorySchema.optional(),
   tags: mrrlinTaskTagsSchema.optional(),
+  title: external_exports.string().min(1).optional(),
   type: mrrlinTaskTypeSchema.optional(),
   followUpAt: external_exports.string().datetime().nullable().optional(),
   verificationDueAt: external_exports.string().datetime().nullable().optional()
-}).refine((value) => value.assignee !== void 0 || value.autoDeploy !== void 0 || value.autonomyLevel !== void 0 || value.autonomyReason !== void 0 || value.category !== void 0 || value.directorThreadId !== void 0 || value.dueDate !== void 0 || value.followUpAt !== void 0 || value.impact !== void 0 || value.notes !== void 0 || value.planId !== void 0 || value.specApproved !== void 0 || value.specWikiPageId !== void 0 || value.status !== void 0 || value.subcategory !== void 0 || value.tags !== void 0 || value.type !== void 0 || value.verificationDueAt !== void 0, { message: "TaskUpdate requires at least one field" }).superRefine((value, context) => {
+}).refine((value) => value.assignee !== void 0 || value.autoDeploy !== void 0 || value.autonomyLevel !== void 0 || value.autonomyReason !== void 0 || value.category !== void 0 || value.directorThreadId !== void 0 || value.dueDate !== void 0 || value.followUpAt !== void 0 || value.impact !== void 0 || value.notes !== void 0 || value.planId !== void 0 || value.specApproved !== void 0 || value.specWikiPageId !== void 0 || value.status !== void 0 || value.subcategory !== void 0 || value.tags !== void 0 || value.title !== void 0 || value.type !== void 0 || value.verificationDueAt !== void 0, { message: "TaskUpdate requires at least one field" }).superRefine((value, context) => {
   if (value.autonomyLevel !== void 0 && value.autonomyReason === void 0) {
     context.addIssue({
       code: external_exports.ZodIssueCode.custom,
@@ -36857,6 +36858,10 @@ var githubInstallCallbackResponseSchema = external_exports.object({
   data: external_exports.object({
     installation: mrrlinGithubInstallationSchema,
     linkedProjectSlugs: external_exports.array(mrrlinProjectSlugSchema),
+    // Projects the operator initiated the install for whose BOUND repo the installation cannot
+    // access (repo not in the installation's selection) — deliberately NOT linked: "bound"
+    // must mean the repo is actually reachable. Additive; defaults keep old clients parsing.
+    unlinkedProjectSlugs: external_exports.array(mrrlinProjectSlugSchema).default([]),
     matchedRepos: external_exports.array(external_exports.string().regex(/^[^/]+\/[^/]+$/)),
     setupAction: external_exports.enum(["install", "request", "update"])
   })
@@ -38331,6 +38336,7 @@ var DEFAULT_STARTUP_JITTER_MS = 30 * 1e3;
 var DEFAULT_COOLDOWN_MS = 48 * 60 * 60 * 1e3;
 var REGISTRY_URL_DEFAULT = "https://registry.npmjs.org/@mrrlin-dev/mcp/latest";
 var STRICT_SEMVER = /^\d+\.\d+\.\d+(-[A-Za-z0-9.-]+)?(\+[A-Za-z0-9.-]+)?$/;
+var UPDATE_INBOX_BODY = "A newer version of the mrrlin bridge is available. Updating pulls the latest fixes and improvements. Changelog: https://mrrlin-changelog.s3.eu-central-1.amazonaws.com/index.html . Ask the Director to update, or run `npm install -g @mrrlin-dev/mcp@latest` yourself.";
 function isDisabled() {
   return process.env.MRRLIN_DIRECTOR_BRIDGE_SELF_UPDATE === "0";
 }
@@ -38375,17 +38381,29 @@ function startSelfUpdate(deps) {
       version: pkgVersion,
       latestVersion
     });
-    return `[bridge:update] An update for @mrrlin-dev/mcp is available: ${pkgVersion} \u2192 ${latestVersion}.
+    return `[bridge:update] An update for @mrrlin-dev/mcp is available: ${pkgVersion} -> ${latestVersion}.
 
-This turn, at a natural pause, ASK the operator a yes/no question \u2014 e.g. "\u0411\u0430\u0447\u0443 \u0449\u043E bridge \u043D\u0430 ${pkgVersion}, \u043D\u0430 npm \u0443\u0436\u0435 ${latestVersion} \u2014 \u043E\u043D\u043E\u0432\u0438\u0442\u0438 \u0437\u0430\u0440\u0430\u0437? (\u0437\u0430\u043F\u0443\u0449\u0443 \`npm install -g @mrrlin-dev/mcp@latest\`)". Do NOT install without explicit confirmation.
+This turn, at a natural pause, RAISE this with the operator IN THEIR LANGUAGE (mirror the language they are chatting in). Frame it as a short offer with a choice, and ALWAYS explain WHY it is worth doing:
 
-If the operator confirms (yes / \u0442\u0430\u043A / \u0430\u0433\u0430 / etc.): immediately run \`npm install -g @mrrlin-dev/mcp@latest\` via your shell tool and report the outcome in chat. After a successful install, the bridge auto-restarts via its self-update loop within a couple of minutes \u2014 you do NOT need to call pm2.
+1. WHY (never skip this): give a one-line reason the update matters - do NOT present a bare version bump. Prefer specifics: if you can read the release notes, summarize in one short sentence what is new/fixed. The changelog is at https://mrrlin-changelog.s3.eu-central-1.amazonaws.com/index.html. If you cannot get specifics, fall back to a generic but honest reason, e.g. "it pulls the latest bug fixes and improvements for the bridge".
+
+2. THE CHOICE: offer both paths and let the operator pick - "want me to update it for you now?" OR "you can run it yourself: \`npm install -g @mrrlin-dev/mcp@latest\`". Phrase it as a yes/no, e.g. in English: "The bridge is on ${pkgVersion} but npm already has ${latestVersion}. It brings <why> - want me to run \`npm install -g @mrrlin-dev/mcp@latest\`, or would you rather run it yourself?".
+
+ASK the operator first - do NOT install without explicit confirmation.
+
+If the operator confirms you should do it: immediately run \`npm install -g @mrrlin-dev/mcp@latest\` via your shell tool and report the outcome in chat. After a successful install, the bridge auto-restarts via its self-update loop within a couple of minutes - you do NOT need to call pm2.
 
 If the operator declines / says "later": acknowledge briefly and do not bring it up again this turn. The bridge has a cooldown and will re-offer in 48h.
 
 If the install fails (permission denied, registry pinned, sudo required, network blocked): paste the error verbatim and show the operator the manual command \`npm install -g @mrrlin-dev/mcp@latest\` plus a one-line hint about likely cause.
 
-Do NOT derail the current task \u2014 if the operator has an in-flight question, answer that first; the update offer is a brief aside, not the main subject.`;
+Do NOT derail the current task - if the operator has an in-flight question, answer that first; the update offer is a brief aside, not the main subject.`;
+  }
+  function updateInboxBody() {
+    if (disabled) return null;
+    if (latestVersion === null) return null;
+    if (!import_semver.default.gt(latestVersion, pkgVersion)) return null;
+    return UPDATE_INBOX_BODY;
   }
   let startupBinSha = null;
   try {
@@ -38540,12 +38558,13 @@ Do NOT derail the current task \u2014 if the operator has an in-flight question,
     getDrainOnQuiet: () => drainOnQuiet,
     getLatestVersion: () => latestVersion,
     isStale: () => latestVersion !== null && import_semver.default.gt(latestVersion, pkgVersion),
-    maybeUpdateOffer
+    maybeUpdateOffer,
+    updateInboxBody
   };
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.3.12";
+var PKG_VERSION = "0.3.14";
 
 // src/api-base-url.ts
 var DEFAULT_API_BASE_URL = "http://127.0.0.1:8787";
@@ -38970,6 +38989,10 @@ var DEFAULT_TOUCH_INTERVAL_MS = 6e4;
 var DEFAULT_CLAIM_INTERVAL_SECONDS = 30;
 var DEFAULT_EXEC_TURN_TIMEOUT_SECONDS = 900;
 var DEFAULT_CONTEXT_MAX_ARTIFACTS = 50;
+var EXECUTION_TURN_TIMEOUT_PREFIX = "Execution turn did not complete within";
+var EXECUTION_TURN_TIMEOUT_RETRY_CODE = "execution_turn_timeout_retry";
+var EXECUTION_TURN_TIMEOUT_RETRY_SUMMARY = "Execution turn timed out; requeued for one automatic retry.";
+var EXECUTION_TURN_TIMEOUT_RETRY_CURSOR = "execution_turn_timeout_retry:1";
 function readPositiveIntEnv(name, fallback) {
   const raw = (process.env[name] ?? "").trim();
   if (!raw) return fallback;
@@ -38979,6 +39002,12 @@ function readPositiveIntEnv(name, fallback) {
 function execTurnTimeoutMs() {
   return readPositiveIntEnv("MRRLIN_DIRECTOR_BRIDGE_EXEC_TURN_TIMEOUT_SECONDS", DEFAULT_EXEC_TURN_TIMEOUT_SECONDS) * 1e3;
 }
+function executionTurnTimeoutMessage(timeoutMs) {
+  return `${EXECUTION_TURN_TIMEOUT_PREFIX} ${timeoutMs}ms.`;
+}
+function isExecutionTurnTimeoutReason(reason) {
+  return reason.startsWith(EXECUTION_TURN_TIMEOUT_PREFIX);
+}
 function contextMaxArtifacts() {
   return readPositiveIntEnv("MRRLIN_DIRECTOR_BRIDGE_CONTEXT_MAX_ARTIFACTS", DEFAULT_CONTEXT_MAX_ARTIFACTS);
 }
@@ -39188,7 +39217,7 @@ async function driveTurn(deps, codex, projectSlug, runId, leaseId, threadId, inp
         },
         interrupt: () => codex.turn.interrupt({ threadId }),
         timeoutMs,
-        timeoutMessage: `Execution turn did not complete within ${timeoutMs}ms.`,
+        timeoutMessage: executionTurnTimeoutMessage(timeoutMs),
         onInterruptFailed: () => {
           interruptFailed = true;
         }
@@ -39447,7 +39476,36 @@ async function resetWedgedThread(deps, projectSlug, taskId, interruptFailed) {
   });
 }
 async function failRun(deps, projectSlug, task, runId, leaseId, reason) {
-  if (!await runHasLease(deps, projectSlug, runId, leaseId)) return;
+  let currentRun;
+  try {
+    currentRun = await deps.client.getExecutionRun(projectSlug, runId);
+  } catch {
+    return;
+  }
+  if (currentRun.status !== "running" || currentRun.leaseId !== leaseId) return;
+  if (isExecutionTurnTimeoutReason(reason) && currentRun.checkpointCursor !== EXECUTION_TURN_TIMEOUT_RETRY_CURSOR) {
+    try {
+      await deps.client.updateExecutionRun(projectSlug, runId, {
+        status: "pending",
+        leaseId: null,
+        checkpointCursor: EXECUTION_TURN_TIMEOUT_RETRY_CURSOR
+      });
+      await deps.client.appendExecutionArtifact(projectSlug, runId, {
+        id: newArtifactId(),
+        kind: "error",
+        payload: {
+          code: EXECUTION_TURN_TIMEOUT_RETRY_CODE,
+          source: "execution-consumer",
+          attempt: 1,
+          reason,
+          summary: EXECUTION_TURN_TIMEOUT_RETRY_SUMMARY
+        }
+      }).catch(() => {
+      });
+      return;
+    } catch {
+    }
+  }
   try {
     await deps.client.createExecutionRunHandoff(projectSlug, runId, { reason });
   } catch {
@@ -44131,6 +44189,24 @@ function buildThreadStartParams(msg, config2, desiredModel) {
     "- Do not create a handoff for transient provider quota/runtime failures, retriable tool",
     "  errors, or vague uncertainty; retry cheaply or explain the transient issue in chat.",
     "",
+    "Deferred-verification contract \u2014 when the RESULT can only be judged later:",
+    "- When a task's implementation is DONE but its outcome cannot be confirmed now because it",
+    "  depends on a delay you do not control \u2014 SEO ranking/traffic effects after (re)indexing,",
+    "  ad-campaign performance data accumulating, cache/DNS propagation, a scheduled external",
+    "  event \u2014 do NOT close the task and do NOT leave it `in_progress`. Move it to",
+    "  `awaiting_verification` via `update_task` and set `verificationDueAt` to the ISO-8601",
+    "  datetime when the effect should be measurable (e.g. ~2 weeks out for an SEO article).",
+    "  Use `followUpAt` instead when it is a softer check-in rather than a hard verification.",
+    "- In the same `update_task`, or in the task notes, record WHAT to measure and HOW so a later",
+    "  turn can verify objectively (the metric, the baseline, the success threshold).",
+    "- Do NOT use `awaiting_verification` for results you CAN confirm now \u2014 verify immediately",
+    "  (browser/HTTP/tests) and close or advance the task instead. It is only for genuinely",
+    "  time-delayed evidence, not for avoiding verification work.",
+    "- When the task is later woken (its `verificationDueAt`/`followUpAt` has passed), gather the",
+    "  evidence, then close it \u2014 `closed_done` if the outcome met the bar, or `closed_no_result`",
+    "  if it did not (that state REQUIRES a linked Evidence wiki page); or, if the effect still",
+    "  is not measurable, re-set `verificationDueAt` to a new date with a reason.",
+    "",
     "File artifacts: when you produce a file for the operator (report, HTML, screenshot),",
     "upload it with `upload_artifact` (class=temp for one-off downloads, class=durable when a",
     "spec/evidence page references it; pass taskId when known) and paste the returned markdown",
@@ -44217,7 +44293,15 @@ function tokenRefreshIntervalMs() {
   const seconds = Math.min(55, Math.max(15, readEnvInt("MRRLIN_DIRECTOR_BRIDGE_TOKEN_REFRESH_SECONDS", 45)));
   return seconds * 1e3;
 }
-var COLLECTED_TURN_TIMEOUT_MS = 3e5;
+var COLLECTED_TURN_TIMEOUT_DEFAULT_MS = 9e5;
+function collectedTurnTimeoutMs() {
+  const raw = process.env.MRRLIN_COLLECTED_TURN_TIMEOUT_MS;
+  if (raw) {
+    const parsed = Number(raw);
+    if (Number.isFinite(parsed) && parsed > 0) return Math.floor(parsed);
+  }
+  return COLLECTED_TURN_TIMEOUT_DEFAULT_MS;
+}
 var DEFAULT_IMAGE_ONLY_PROMPT = "Look at the attached image.";
 var VERIFICATION_BASE_INSTRUCTIONS = [
   "You are a deployment verification agent. Make ONLY read-only HTTP requests to the single",
@@ -44283,8 +44367,8 @@ async function runCollectedCodexTurn(client, prompt, cwd, baseInstructions) {
         await turnEnded;
       },
       interrupt: () => client.turn.interrupt({ threadId }),
-      timeoutMs: COLLECTED_TURN_TIMEOUT_MS,
-      timeoutMessage: `Collected turn did not complete within ${COLLECTED_TURN_TIMEOUT_MS}ms.`
+      timeoutMs: collectedTurnTimeoutMs(),
+      timeoutMessage: `Collected turn did not complete within ${collectedTurnTimeoutMs()}ms.`
     });
     for (const ev of mapper.flush()) if (ev.type === "assistant") chunks.push(ev.content);
   } finally {
@@ -45003,6 +45087,10 @@ function createBridgeMessageHandler(deps) {
             const effectiveText = inputText.length > 0 ? inputText : imageDataUri ? DEFAULT_IMAGE_ONLY_PROMPT : "";
             if (effectiveText.length > 0) {
               const updateOffer = deps.maybeUpdateOffer ? deps.maybeUpdateOffer() : null;
+              const updateOfferProjectSlug = msg.context?.projectSlug?.trim();
+              if (updateOffer !== null && updateOfferProjectSlug && deps.fileUpdateInboxItem) {
+                void deps.fileUpdateInboxItem(updateOfferProjectSlug);
+              }
               const composedPrefix = updateOffer ? contextPrefix ? `${updateOffer}
 
 ${contextPrefix}` : updateOffer : contextPrefix;
@@ -45420,7 +45508,32 @@ async function startDirectorBridge() {
       sessionSinks.unbind(directorSessionId, send);
     },
     getSessionSink: (directorSessionId) => sessionSinks.get(directorSessionId),
-    maybeUpdateOffer: () => selfUpdateHandle.maybeUpdateOffer()
+    maybeUpdateOffer: () => selfUpdateHandle.maybeUpdateOffer(),
+    fileUpdateInboxItem: async (projectSlug) => {
+      const body = selfUpdateHandle.updateInboxBody();
+      if (!body) return;
+      const id = `II-MCPUPD-${(0, import_node_crypto5.randomUUID)()}`;
+      try {
+        const row = await client.createInboxItem(projectSlug, { id, kind: "question", body });
+        process.stderr.write(
+          `[mrrlin-mcp director-bridge] info bridge.self_update.inbox_filed ${JSON.stringify({
+            projectSlug,
+            itemId: row.id,
+            deduped: row.id !== id
+          })}
+`
+        );
+      } catch (err) {
+        process.stderr.write(
+          `[mrrlin-mcp director-bridge] warn bridge.self_update.inbox_file_failed ${JSON.stringify({
+            projectSlug,
+            errorClass: "inbox_write_failed",
+            message: String(err?.message ?? err)
+          })}
+`
+        );
+      }
+    }
   };
   const bridgeLogger = createBridgeLogger(config2.stateDir, process.env);
   let bridgeBinShaShort = "unknown00000";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrrlin-dev/mcp",
-  "version": "0.3.12",
+  "version": "0.3.14",
   "type": "module",
   "bin": {
     "mrrlin-mcp": "dist/bin.cjs"