@mrrlin-dev/mcp 0.3.13 → 0.3.14

package/README.md

@@ -10,7 +10,8 @@ The bridge auto-picks up new `@mrrlin-dev/mcp` versions after `npm install -g`.
 
 - **L1 (self-update loop):** every 15 minutes (env-tunable) the bridge hashes its own `bin.cjs` and, on change, drains the current Codex turn cleanly and exits via `bridgeShutdown`. PM2 restarts. New code loads.
 - **L2 (postinstall nudge):** `npm install -g @mrrlin-dev/mcp@latest` triggers a `SIGUSR2` to every running PM2 bridge, collapsing the L1 wait to seconds.
-- **L3 (in-chat update offer):** every 6 hours the bridge checks `https://registry.npmjs.org/@mrrlin-dev/mcp/latest`. When a newer version is published, on your next chat turn the Director asks: *"Бачу що bridge на X, на npm уже Y — оновити зараз?"*. Say "yes" → Director runs `npm install -g @mrrlin-dev/mcp@latest` itself. 48h cooldown if you decline.
+- **L3 (in-chat update offer):** every 6 hours the bridge checks `https://registry.npmjs.org/@mrrlin-dev/mcp/latest`. When a newer version is published, on your next chat turn the Director explains *why* to update (latest fixes/improvements, changelog link) and offers a choice — let it run the update, or run `npm install -g @mrrlin-dev/mcp@latest` yourself. Say "yes" → Director runs the install itself. 48h cooldown if you decline.
+- **L3.3 (inbox mirror):** the same fire also files a persistent `question` in the active project's inbox ("A newer version of the mrrlin bridge is available…", with the changelog link), so the update isn't only an ephemeral per-turn aside. The body is version-agnostic on purpose: the inbox dedup collapses it to one open row per project (reused across versions), and it re-appears at most once per 48h cooldown after you decide it. It's an opportunistic per-project signal, not a guaranteed cross-project notice.
 - **L4 (process hygiene):** the bridge refuses to start a second instance on the same port and warns about orphan `mrrlin-mcp director-bridge` processes at startup.
 
 ### Env tuning

package/dist/bin.cjs

@@ -38336,6 +38336,7 @@ var DEFAULT_STARTUP_JITTER_MS = 30 * 1e3;
 var DEFAULT_COOLDOWN_MS = 48 * 60 * 60 * 1e3;
 var REGISTRY_URL_DEFAULT = "https://registry.npmjs.org/@mrrlin-dev/mcp/latest";
 var STRICT_SEMVER = /^\d+\.\d+\.\d+(-[A-Za-z0-9.-]+)?(\+[A-Za-z0-9.-]+)?$/;
+var UPDATE_INBOX_BODY = "A newer version of the mrrlin bridge is available. Updating pulls the latest fixes and improvements. Changelog: https://mrrlin-changelog.s3.eu-central-1.amazonaws.com/index.html . Ask the Director to update, or run `npm install -g @mrrlin-dev/mcp@latest` yourself.";
 function isDisabled() {
   return process.env.MRRLIN_DIRECTOR_BRIDGE_SELF_UPDATE === "0";
 }
@@ -38382,9 +38383,15 @@ function startSelfUpdate(deps) {
     });
     return `[bridge:update] An update for @mrrlin-dev/mcp is available: ${pkgVersion} -> ${latestVersion}.
 
-This turn, at a natural pause, ASK the operator a yes/no question IN THE OPERATOR'S LANGUAGE (mirror the language they are chatting in) - e.g. in English: "The bridge is on ${pkgVersion} but npm already has ${latestVersion} - update now? (I'll run \`npm install -g @mrrlin-dev/mcp@latest\`)". Do NOT install without explicit confirmation.
+This turn, at a natural pause, RAISE this with the operator IN THEIR LANGUAGE (mirror the language they are chatting in). Frame it as a short offer with a choice, and ALWAYS explain WHY it is worth doing:
 
-If the operator confirms: immediately run \`npm install -g @mrrlin-dev/mcp@latest\` via your shell tool and report the outcome in chat. After a successful install, the bridge auto-restarts via its self-update loop within a couple of minutes - you do NOT need to call pm2.
+1. WHY (never skip this): give a one-line reason the update matters - do NOT present a bare version bump. Prefer specifics: if you can read the release notes, summarize in one short sentence what is new/fixed. The changelog is at https://mrrlin-changelog.s3.eu-central-1.amazonaws.com/index.html. If you cannot get specifics, fall back to a generic but honest reason, e.g. "it pulls the latest bug fixes and improvements for the bridge".
+
+2. THE CHOICE: offer both paths and let the operator pick - "want me to update it for you now?" OR "you can run it yourself: \`npm install -g @mrrlin-dev/mcp@latest\`". Phrase it as a yes/no, e.g. in English: "The bridge is on ${pkgVersion} but npm already has ${latestVersion}. It brings <why> - want me to run \`npm install -g @mrrlin-dev/mcp@latest\`, or would you rather run it yourself?".
+
+ASK the operator first - do NOT install without explicit confirmation.
+
+If the operator confirms you should do it: immediately run \`npm install -g @mrrlin-dev/mcp@latest\` via your shell tool and report the outcome in chat. After a successful install, the bridge auto-restarts via its self-update loop within a couple of minutes - you do NOT need to call pm2.
 
 If the operator declines / says "later": acknowledge briefly and do not bring it up again this turn. The bridge has a cooldown and will re-offer in 48h.
 
@@ -38392,6 +38399,12 @@ If the install fails (permission denied, registry pinned, sudo required, network
 
 Do NOT derail the current task - if the operator has an in-flight question, answer that first; the update offer is a brief aside, not the main subject.`;
   }
+  function updateInboxBody() {
+    if (disabled) return null;
+    if (latestVersion === null) return null;
+    if (!import_semver.default.gt(latestVersion, pkgVersion)) return null;
+    return UPDATE_INBOX_BODY;
+  }
   let startupBinSha = null;
   try {
     startupBinSha = sha256(readFile2(deps.binPath));
@@ -38545,12 +38558,13 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
     getDrainOnQuiet: () => drainOnQuiet,
     getLatestVersion: () => latestVersion,
     isStale: () => latestVersion !== null && import_semver.default.gt(latestVersion, pkgVersion),
-    maybeUpdateOffer
+    maybeUpdateOffer,
+    updateInboxBody
   };
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.3.13";
+var PKG_VERSION = "0.3.14";
 
 // src/api-base-url.ts
 var DEFAULT_API_BASE_URL = "http://127.0.0.1:8787";
@@ -38975,6 +38989,10 @@ var DEFAULT_TOUCH_INTERVAL_MS = 6e4;
 var DEFAULT_CLAIM_INTERVAL_SECONDS = 30;
 var DEFAULT_EXEC_TURN_TIMEOUT_SECONDS = 900;
 var DEFAULT_CONTEXT_MAX_ARTIFACTS = 50;
+var EXECUTION_TURN_TIMEOUT_PREFIX = "Execution turn did not complete within";
+var EXECUTION_TURN_TIMEOUT_RETRY_CODE = "execution_turn_timeout_retry";
+var EXECUTION_TURN_TIMEOUT_RETRY_SUMMARY = "Execution turn timed out; requeued for one automatic retry.";
+var EXECUTION_TURN_TIMEOUT_RETRY_CURSOR = "execution_turn_timeout_retry:1";
 function readPositiveIntEnv(name, fallback) {
   const raw = (process.env[name] ?? "").trim();
   if (!raw) return fallback;
@@ -38984,6 +39002,12 @@ function readPositiveIntEnv(name, fallback) {
 function execTurnTimeoutMs() {
   return readPositiveIntEnv("MRRLIN_DIRECTOR_BRIDGE_EXEC_TURN_TIMEOUT_SECONDS", DEFAULT_EXEC_TURN_TIMEOUT_SECONDS) * 1e3;
 }
+function executionTurnTimeoutMessage(timeoutMs) {
+  return `${EXECUTION_TURN_TIMEOUT_PREFIX} ${timeoutMs}ms.`;
+}
+function isExecutionTurnTimeoutReason(reason) {
+  return reason.startsWith(EXECUTION_TURN_TIMEOUT_PREFIX);
+}
 function contextMaxArtifacts() {
   return readPositiveIntEnv("MRRLIN_DIRECTOR_BRIDGE_CONTEXT_MAX_ARTIFACTS", DEFAULT_CONTEXT_MAX_ARTIFACTS);
 }
@@ -39193,7 +39217,7 @@ async function driveTurn(deps, codex, projectSlug, runId, leaseId, threadId, inp
         },
         interrupt: () => codex.turn.interrupt({ threadId }),
         timeoutMs,
-        timeoutMessage: `Execution turn did not complete within ${timeoutMs}ms.`,
+        timeoutMessage: executionTurnTimeoutMessage(timeoutMs),
         onInterruptFailed: () => {
           interruptFailed = true;
         }
@@ -39452,7 +39476,36 @@ async function resetWedgedThread(deps, projectSlug, taskId, interruptFailed) {
   });
 }
 async function failRun(deps, projectSlug, task, runId, leaseId, reason) {
-  if (!await runHasLease(deps, projectSlug, runId, leaseId)) return;
+  let currentRun;
+  try {
+    currentRun = await deps.client.getExecutionRun(projectSlug, runId);
+  } catch {
+    return;
+  }
+  if (currentRun.status !== "running" || currentRun.leaseId !== leaseId) return;
+  if (isExecutionTurnTimeoutReason(reason) && currentRun.checkpointCursor !== EXECUTION_TURN_TIMEOUT_RETRY_CURSOR) {
+    try {
+      await deps.client.updateExecutionRun(projectSlug, runId, {
+        status: "pending",
+        leaseId: null,
+        checkpointCursor: EXECUTION_TURN_TIMEOUT_RETRY_CURSOR
+      });
+      await deps.client.appendExecutionArtifact(projectSlug, runId, {
+        id: newArtifactId(),
+        kind: "error",
+        payload: {
+          code: EXECUTION_TURN_TIMEOUT_RETRY_CODE,
+          source: "execution-consumer",
+          attempt: 1,
+          reason,
+          summary: EXECUTION_TURN_TIMEOUT_RETRY_SUMMARY
+        }
+      }).catch(() => {
+      });
+      return;
+    } catch {
+    }
+  }
   try {
     await deps.client.createExecutionRunHandoff(projectSlug, runId, { reason });
   } catch {
@@ -44136,6 +44189,24 @@ function buildThreadStartParams(msg, config2, desiredModel) {
     "- Do not create a handoff for transient provider quota/runtime failures, retriable tool",
     "  errors, or vague uncertainty; retry cheaply or explain the transient issue in chat.",
     "",
+    "Deferred-verification contract \u2014 when the RESULT can only be judged later:",
+    "- When a task's implementation is DONE but its outcome cannot be confirmed now because it",
+    "  depends on a delay you do not control \u2014 SEO ranking/traffic effects after (re)indexing,",
+    "  ad-campaign performance data accumulating, cache/DNS propagation, a scheduled external",
+    "  event \u2014 do NOT close the task and do NOT leave it `in_progress`. Move it to",
+    "  `awaiting_verification` via `update_task` and set `verificationDueAt` to the ISO-8601",
+    "  datetime when the effect should be measurable (e.g. ~2 weeks out for an SEO article).",
+    "  Use `followUpAt` instead when it is a softer check-in rather than a hard verification.",
+    "- In the same `update_task`, or in the task notes, record WHAT to measure and HOW so a later",
+    "  turn can verify objectively (the metric, the baseline, the success threshold).",
+    "- Do NOT use `awaiting_verification` for results you CAN confirm now \u2014 verify immediately",
+    "  (browser/HTTP/tests) and close or advance the task instead. It is only for genuinely",
+    "  time-delayed evidence, not for avoiding verification work.",
+    "- When the task is later woken (its `verificationDueAt`/`followUpAt` has passed), gather the",
+    "  evidence, then close it \u2014 `closed_done` if the outcome met the bar, or `closed_no_result`",
+    "  if it did not (that state REQUIRES a linked Evidence wiki page); or, if the effect still",
+    "  is not measurable, re-set `verificationDueAt` to a new date with a reason.",
+    "",
     "File artifacts: when you produce a file for the operator (report, HTML, screenshot),",
     "upload it with `upload_artifact` (class=temp for one-off downloads, class=durable when a",
     "spec/evidence page references it; pass taskId when known) and paste the returned markdown",
@@ -45016,6 +45087,10 @@ function createBridgeMessageHandler(deps) {
             const effectiveText = inputText.length > 0 ? inputText : imageDataUri ? DEFAULT_IMAGE_ONLY_PROMPT : "";
             if (effectiveText.length > 0) {
               const updateOffer = deps.maybeUpdateOffer ? deps.maybeUpdateOffer() : null;
+              const updateOfferProjectSlug = msg.context?.projectSlug?.trim();
+              if (updateOffer !== null && updateOfferProjectSlug && deps.fileUpdateInboxItem) {
+                void deps.fileUpdateInboxItem(updateOfferProjectSlug);
+              }
               const composedPrefix = updateOffer ? contextPrefix ? `${updateOffer}
 
 ${contextPrefix}` : updateOffer : contextPrefix;
@@ -45433,7 +45508,32 @@ async function startDirectorBridge() {
       sessionSinks.unbind(directorSessionId, send);
     },
     getSessionSink: (directorSessionId) => sessionSinks.get(directorSessionId),
-    maybeUpdateOffer: () => selfUpdateHandle.maybeUpdateOffer()
+    maybeUpdateOffer: () => selfUpdateHandle.maybeUpdateOffer(),
+    fileUpdateInboxItem: async (projectSlug) => {
+      const body = selfUpdateHandle.updateInboxBody();
+      if (!body) return;
+      const id = `II-MCPUPD-${(0, import_node_crypto5.randomUUID)()}`;
+      try {
+        const row = await client.createInboxItem(projectSlug, { id, kind: "question", body });
+        process.stderr.write(
+          `[mrrlin-mcp director-bridge] info bridge.self_update.inbox_filed ${JSON.stringify({
+            projectSlug,
+            itemId: row.id,
+            deduped: row.id !== id
+          })}
+`
+        );
+      } catch (err) {
+        process.stderr.write(
+          `[mrrlin-mcp director-bridge] warn bridge.self_update.inbox_file_failed ${JSON.stringify({
+            projectSlug,
+            errorClass: "inbox_write_failed",
+            message: String(err?.message ?? err)
+          })}
+`
+        );
+      }
+    }
   };
   const bridgeLogger = createBridgeLogger(config2.stateDir, process.env);
   let bridgeBinShaShort = "unknown00000";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrrlin-dev/mcp",
-  "version": "0.3.13",
+  "version": "0.3.14",
   "type": "module",
   "bin": {
     "mrrlin-mcp": "dist/bin.cjs"
@@ -22,9 +22,9 @@
     "@types/ws": "^8.18.1",
     "esbuild": "^0.24.0",
     "tsx": "^4.22.3",
+    "@mrrlin/client": "0.0.0",
     "@mrrlin/codex-client": "0.0.0",
     "@mrrlin/director-e2e": "0.0.0",
-    "@mrrlin/client": "0.0.0",
     "@mrrlin/schemas": "0.0.0",
     "@mrrlin/tsconfig": "0.0.0",
     "@mrrlin/wiki": "0.0.0"