@mrrlin-dev/mcp 0.3.4 → 0.3.5

package/dist/bin.cjs

@@ -4273,7 +4273,7 @@ var require_websocket = __commonJS({
     var http2 = require("http");
     var net = require("net");
     var tls = require("tls");
-    var { randomBytes: randomBytes3, createHash: createHash2 } = require("crypto");
+    var { randomBytes: randomBytes3, createHash: createHash3 } = require("crypto");
     var { Duplex, Readable } = require("stream");
     var { URL: URL2 } = require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -4941,7 +4941,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash2("sha1").update(key + GUID).digest("base64");
+        const digest = createHash3("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -5310,7 +5310,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter3 = require("events");
     var http2 = require("http");
     var { Duplex } = require("stream");
-    var { createHash: createHash2 } = require("crypto");
+    var { createHash: createHash3 } = require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -5617,7 +5617,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash2("sha1").update(key + GUID).digest("base64");
+        const digest = createHash3("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -36275,7 +36275,7 @@ var operatorSessionSchema = external_exports.object({
   issuedAt: external_exports.number().int().positive(),
   kind: external_exports.enum(["web", "agent"]).default("web"),
   login: external_exports.string().min(1),
-  projectSlug: external_exports.string().min(1),
+  projectSlug: external_exports.string().min(1).optional(),
   provider: external_exports.literal("github"),
   repo: external_exports.string().min(1).nullable(),
   // ADR 0016: `scope` distinguishes project-pinned agent tokens (legacy, default) from
@@ -36284,7 +36284,7 @@ var operatorSessionSchema = external_exports.object({
   // cleanly into the project branch of the middleware (which mirrors today's behavior).
   scope: external_exports.enum(["project", "operator"]).default("project")
 });
-var AGENT_SESSION_TTL_MS = 1e3 * 60 * 60;
+var AGENT_SESSION_TTL_MS = 1e3 * 60 * 15;
 
 // ../../packages/schemas/dist/github-state.js
 var TTL_MS = 10 * 6e4;
@@ -36402,6 +36402,7 @@ var mrrlinTaskTypeSchema = external_exports.enum(["task", "bug"]);
 var mrrlinTaskImpactSchema = external_exports.enum(["low", "medium", "high"]);
 var mrrlinAutonomyLevelSchema = external_exports.enum(["auto", "minimal_human", "human_only"]);
 var mrrlinAutoDeploySchema = external_exports.enum(["off", "dev", "prod"]);
+var mrrlinSpecApprovedSchema = external_exports.enum(["pending", "approved", "skipped", "skipped_legacy"]);
 var mrrlinTaskSourceSchema = external_exports.enum(["fixture-import", "api"]);
 var mrrlinPlanStatusSchema = external_exports.enum(["active", "paused", "done", "archived"]);
 var mrrlinTaskEventTypeSchema = external_exports.enum(["autonomy_set", "director_thread_reset", "note"]);
@@ -36492,7 +36493,13 @@ var mrrlinTaskSchema = external_exports.object({
   latestJudgementAt: external_exports.string().datetime().nullable().default(null),
   latestJudgementKind: external_exports.enum(["autonomy", "handoff"]).nullable().default(null),
   notes: external_exports.string().nullable().default(null),
+  // Raw operator request captured at task creation (operator-authored ONLY, never Director-generated).
+  // The intent-aware spec gate judges the spec against this; null/absent ⇒ the gate fail-closes.
+  // Output-optional (not .default) so existing task fixtures need no churn; DB rows always resolve it
+  // to `string | null` via taskRowToTask.
+  operatorSeedRequest: external_exports.string().max(8e3).nullable().optional(),
   planId: mrrlinPlanIdSchema.nullable(),
+  specApproved: mrrlinSpecApprovedSchema.optional(),
   specWikiPageId: mrrlinWikiPageIdSchema.nullable(),
   status: mrrlinTaskStatusSchema,
   subcategory: taxonomySubcategorySchema,
@@ -36508,6 +36515,7 @@ var mrrlinPlanSchema = external_exports.object({
   id: mrrlinPlanIdSchema,
   name: external_exports.string().min(1),
   progress: external_exports.number().min(0).max(1),
+  specWikiPageId: external_exports.string().nullable().default(null),
   status: mrrlinPlanStatusSchema,
   taskCount: external_exports.number().int().nonnegative()
 });
@@ -36632,6 +36640,7 @@ var mrrlinTaskCreateSchema = external_exports.object({
   id: mrrlinTaskIdSchema,
   impact: mrrlinTaskImpactSchema.default("medium"),
   notes: external_exports.string().nullable().optional(),
+  operatorSeedRequest: external_exports.string().max(8e3).nullable().optional(),
   planId: mrrlinPlanIdSchema.nullable().optional(),
   specWikiPageId: mrrlinWikiPageIdSchema.nullable().optional(),
   tags: mrrlinTaskTagsSchema.optional(),
@@ -36655,6 +36664,7 @@ var mrrlinTaskUpdateSchema = external_exports.object({
   impact: mrrlinTaskImpactSchema.optional(),
   notes: external_exports.string().nullable().optional(),
   planId: mrrlinPlanIdSchema.nullable().optional(),
+  specApproved: mrrlinSpecApprovedSchema.optional(),
   specWikiPageId: mrrlinWikiPageIdSchema.nullable().optional(),
   status: mrrlinTaskStatusSchema.optional(),
   subcategory: taxonomySubcategorySchema.optional(),
@@ -36662,7 +36672,7 @@ var mrrlinTaskUpdateSchema = external_exports.object({
   type: mrrlinTaskTypeSchema.optional(),
   followUpAt: external_exports.string().datetime().nullable().optional(),
   verificationDueAt: external_exports.string().datetime().nullable().optional()
-}).refine((value) => value.assignee !== void 0 || value.autoDeploy !== void 0 || value.autonomyLevel !== void 0 || value.autonomyReason !== void 0 || value.category !== void 0 || value.directorThreadId !== void 0 || value.dueDate !== void 0 || value.followUpAt !== void 0 || value.impact !== void 0 || value.notes !== void 0 || value.planId !== void 0 || value.specWikiPageId !== void 0 || value.status !== void 0 || value.subcategory !== void 0 || value.tags !== void 0 || value.type !== void 0 || value.verificationDueAt !== void 0, { message: "TaskUpdate requires at least one field" }).superRefine((value, context) => {
+}).refine((value) => value.assignee !== void 0 || value.autoDeploy !== void 0 || value.autonomyLevel !== void 0 || value.autonomyReason !== void 0 || value.category !== void 0 || value.directorThreadId !== void 0 || value.dueDate !== void 0 || value.followUpAt !== void 0 || value.impact !== void 0 || value.notes !== void 0 || value.planId !== void 0 || value.specApproved !== void 0 || value.specWikiPageId !== void 0 || value.status !== void 0 || value.subcategory !== void 0 || value.tags !== void 0 || value.type !== void 0 || value.verificationDueAt !== void 0, { message: "TaskUpdate requires at least one field" }).superRefine((value, context) => {
   if (value.autonomyLevel !== void 0 && value.autonomyReason === void 0) {
     context.addIssue({
       code: external_exports.ZodIssueCode.custom,
@@ -36703,12 +36713,14 @@ var mrrlinPlanCreateSchema = external_exports.object({
   goal: external_exports.string().min(1),
   id: mrrlinPlanIdSchema,
   name: external_exports.string().min(1),
+  specWikiPageId: external_exports.string().nullable().optional(),
   status: mrrlinPlanStatusSchema.default("active")
 });
 var mrrlinPlanUpdateSchema = external_exports.object({
   dueDate: external_exports.string().date().nullable().optional(),
   goal: external_exports.string().min(1).optional(),
   name: external_exports.string().min(1).optional(),
+  specWikiPageId: external_exports.string().nullable().optional(),
   status: mrrlinPlanStatusSchema.optional()
 }).refine((value) => Object.keys(value).length > 0, { message: "PlanUpdate requires at least one field" });
 var mrrlinTaxonomyCreateSchema = mrrlinTaxonomyEntrySchema;
@@ -37103,7 +37115,9 @@ var exchangeAgentTokenRequestSchema = external_exports.object({
 var exchangeAgentTokenResponseSchema = external_exports.object({
   token: external_exports.string().min(1),
   expiresAt: external_exports.string().datetime(),
-  projectSlug: external_exports.string().min(1),
+  // ADR 0016 §T7 amendment: operator-scope exchanges return no projectSlug (the token is
+  // operator-wide); project-scope exchanges still return the pinned slug.
+  projectSlug: external_exports.string().min(1).optional(),
   login: external_exports.string().min(1)
 });
 var MRRLIN_ARTIFACT_FILE_MAX_BYTES = 5 * 1024 * 1024;
@@ -37271,6 +37285,8 @@ var mrrlinInboxItemSchema = external_exports.object({
   directorSessionId: external_exports.string().min(1).nullable(),
   id: mrrlinInboxItemIdSchema,
   kind: mrrlinInboxItemKindSchema,
+  origin: external_exports.string().nullable().optional(),
+  planId: mrrlinPlanIdSchema.nullable().default(null),
   projectSlug: mrrlinProjectSlugSchema,
   readAt: external_exports.string().datetime().nullable(),
   status: mrrlinInboxItemStatusSchema,
@@ -37282,6 +37298,8 @@ var mrrlinInboxItemCreateSchema = external_exports.object({
   directorSessionId: external_exports.string().min(1).optional(),
   id: mrrlinInboxItemIdSchema,
   kind: mrrlinInboxItemKindSchema,
+  origin: external_exports.string().min(1).optional(),
+  planId: mrrlinPlanIdSchema.nullable().optional(),
   taskId: mrrlinTaskIdSchema.nullable().optional()
 });
 var mrrlinInboxItemDecideSchema = external_exports.object({
@@ -38442,7 +38460,7 @@ Do NOT derail the current task \u2014 if the operator has an in-flight question,
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.3.4";
+var PKG_VERSION = "0.3.5";
 
 // src/api-base-url.ts
 var DEFAULT_API_BASE_URL = "http://127.0.0.1:8787";
@@ -42520,7 +42538,10 @@ function parseFrame(bytes3) {
       };
     }
     case "inbox_read":
-      return { type: "inbox_read" };
+      return {
+        type: "inbox_read",
+        ...isString(f.projectSlug) ? { projectSlug: f.projectSlug } : {}
+      };
     case "inbox_decide":
       if (!isString(f.itemId) || !isString(f.idempotencyKey))
         throw new Error("frame inbox_decide: itemId + idempotencyKey required");
@@ -42533,7 +42554,8 @@ function parseFrame(bytes3) {
         itemId: f.itemId,
         decision: f.decision,
         idempotencyKey: f.idempotencyKey,
-        ...f.reason === void 0 ? {} : { reason: f.reason }
+        ...f.reason === void 0 ? {} : { reason: f.reason },
+        ...isString(f.projectSlug) ? { projectSlug: f.projectSlug } : {}
       };
     case "ack":
       if (!isString(f.refId))
@@ -43279,12 +43301,12 @@ var DirectorRelay = class {
           this.sendFrame(channelId, { type: "ack", refId: frame.idempotencyKey });
           return;
         }
-        await this.deps.onInboxDecide?.(frame.itemId, frame.decision, frame.idempotencyKey, frame.reason);
+        await this.deps.onInboxDecide?.(frame.itemId, frame.decision, frame.idempotencyKey, frame.reason, frame.projectSlug);
         this.seenDecideKeys.add(frame.idempotencyKey);
         this.sendFrame(channelId, { type: "ack", refId: frame.idempotencyKey });
         return;
       case "inbox_read": {
-        const items = await this.deps.onInboxRead?.();
+        const items = await this.deps.onInboxRead?.(frame.projectSlug);
         if (items !== void 0) this.sendDirectorEvent(channelId, { type: "inbox_items", items });
         this.sendFrame(channelId, { type: "ack", refId: "inbox_read" });
         return;
@@ -43429,30 +43451,38 @@ function decisionToVerdict(decision) {
       throw new Error(`remote-relay: unknown inbox decision "${decision}"`);
   }
 }
-function startRemotePhoneRelay(deps) {
-  const log = deps.log ?? ((m) => process.stderr.write(`[mrrlin-mcp remote-relay] ${m}
-`));
-  const provider = createAgentTokenProvider({ secret: deps.agentSecret, baseUrl: deps.apiBaseUrl });
-  const authed = async () => {
+function _makeRelayInboxCallbacks(provider, apiBaseUrl) {
+  const authed = async (frameSlug) => {
     const session = await provider.getSession();
+    const slug = frameSlug ?? session.projectSlug;
+    if (!slug) {
+      throw new Error("[mrrlin-mcp remote-relay] missing project context for inbox action");
+    }
     return {
-      client: createMrrlinClient({ baseUrl: deps.apiBaseUrl, token: session.token }),
-      slug: session.projectSlug,
+      client: createMrrlinClient({ baseUrl: apiBaseUrl, token: session.token }),
+      slug,
       login: session.login
     };
   };
-  const onInboxRead = async () => {
-    const { client, slug } = await authed();
+  const onInboxRead = async (projectSlug) => {
+    const { client, slug } = await authed(projectSlug);
     return boundInboxItems(await client.listInboxItems(slug, { status: "pending" }));
   };
-  const onInboxDecide = async (itemId, decision, _key, reason) => {
-    const { client, slug, login } = await authed();
+  const onInboxDecide = async (itemId, decision, _key, reason, projectSlug) => {
+    const { client, slug, login } = await authed(projectSlug);
     await client.decideInboxItem(slug, itemId, {
       verdict: decisionToVerdict(decision),
       decidedBy: login,
       ...reason ? { reason } : {}
     });
   };
+  return { onInboxRead, onInboxDecide };
+}
+function startRemotePhoneRelay(deps) {
+  const log = deps.log ?? ((m) => process.stderr.write(`[mrrlin-mcp remote-relay] ${m}
+`));
+  const provider = createAgentTokenProvider({ secret: deps.agentSecret, baseUrl: deps.apiBaseUrl });
+  const { onInboxRead, onInboxDecide } = _makeRelayInboxCallbacks(provider, deps.apiBaseUrl);
   const relayClient = new RelayClient({
     relayUrl: deps.relayUrl,
     now: () => Date.now(),
@@ -44356,12 +44386,19 @@ function buildThreadStartParams(msg, config2, desiredModel) {
   const baseInstructions = [
     "You are the Mrrlin Director assistant.",
     "You can call MCP tools to read and write project state.",
-    "Prefer calling tools over guessing. Be concise. Ask clarification questions only when needed.",
+    "Prefer calling tools over guessing. Be concise.",
+    "Autonomy level is NOT a reason to skip clarification. `auto` means only that no human gate is",
+    "required before the result LANDS (merge/deploy); it does not authorize building on unvalidated",
+    "assumptions. Judge clarification on requirement clarity, independently of autonomy_level.",
     "Never announce or pre-narrate that you are about to use tools, and never name the toolset in",
     `prose. Do NOT write openers like "I'll use the Mrrlin tools to\u2026", "\u0412\u0438\u043A\u043E\u0440\u0438\u0441\u0442\u0430\u044E Mrrlin tools\u2026",`,
     'or "let me call the \u2026 tool" in ANY language. The operator already sees tool calls in the',
     "transcript. Just call the tools and reply with the outcome \u2014 start your reply with the result.",
     "When creating or updating tasks, always provide `autonomyLevel` and `autonomyReason`.",
+    "When you create a task out of an operator request, set `operatorSeedRequest` to the operator's",
+    "VERBATIM words (their request as they wrote it \u2014 NOT your paraphrase or synthesized notes). It is",
+    "the spec gate's independent record of intent; omit it only when there is genuinely no operator",
+    "request behind the task (pure system bookkeeping) \u2014 note that omitting it makes the gate fail-closed.",
     "",
     "Spec authoring contract \u2014 when creating or updating a `Specs/{id}` wiki page:",
     "- In `## Specification`, write each requirement as `### Requirement: <name>` followed by one",
@@ -44433,12 +44470,20 @@ function buildThreadStartParams(msg, config2, desiredModel) {
     "  call `list_inbox_items` (kind=question), fold any relevant `acknowledged` TASKLESS answer",
     "  into the new task's Specs/{id} Clarifications, and `reject` (with a reason) any taskless",
     "  question the new task makes moot \u2014 so taskless answers never linger unconsumed.",
-    "- When resuming a task, call `list_inbox_items` (kind=question) and incorporate any",
-    "  `acknowledged` answer not yet reflected in the spec's Clarifications section.",
+    "- Gate-origin questions (origin='gate', filed by the spec consensus gate) are auto-folded",
+    "  into the spec and re-gated by the system when the operator answers them in the inbox.",
+    "  Do NOT fold or `decide_inbox_item` them yourself \u2014 your fold-contract above applies only",
+    "  to YOUR OWN discretionary questions.",
+    "- When resuming a task, call `list_inbox_items` (kind=question) and fold any `acknowledged`",
+    "  answer from YOUR questions (origin is null/absent) not yet reflected into the spec's",
+    "  Clarifications section \u2014 THEN re-run `run_spec_consensus` on the updated spec. Skip",
+    "  gate-origin items (origin='gate') as those are handled automatically.",
     "- If a question becomes moot (task cancelled, superseded, or no longer relevant), close it",
     '  with `decide_inbox_item` `verdict="rejected"` + a `reason`; never leave it pending.',
-    "- Questions are a chat-only mechanism. Do not create question items from non-interactive",
-    "  runs; use the handoff contract above when there is no live operator.",
+    "- YOUR discretionary questions are a chat-only mechanism: do not create question items yourself",
+    "  from non-interactive runs; use the handoff contract above when there is no live operator.",
+    "  The spec consensus GATE, however, may file its own clarification questions on non-interactive",
+    "  runs (that is gate-driven, not your discretion) \u2014 resume them via the rule above when answered.",
     "",
     "Onboarding contract \u2014 seed project context when there is none:",
     `- A project is un-onboarded when it has no \`${PROJECT_CONSTITUTION_PAGE.path}\` wiki page.`,
@@ -49802,6 +49847,19 @@ ${dismissedFwd.slice(-20).join("\n")}` : "";
 var SPEC_HEADS = ["plan-reviewer", "architect", "security-analyst", "scope-analyst"];
 async function runSpecGate(_target, deps, opts) {
   if (!await deps.consensusEnabled()) return { outcome: "SKIPPED" };
+  const intent = await deps.readIntent();
+  if (intent.taskId !== null && (intent.seed === null || intent.seed.trim() === "")) {
+    return {
+      outcome: "CONSENSUS_BLOCKED",
+      clarifications: [
+        {
+          question: "What are the requirements for this task? There is no operator request on record, so the spec cannot be validated against your intent \u2014 please state what this task must do.",
+          whyBlocking: "operator_seed_request is empty",
+          category: "scope"
+        }
+      ]
+    };
+  }
   const extraHeads = opts?.extraHeads ?? [];
   const heads = [...SPEC_HEADS, ...extraHeads.filter((h) => !SPEC_HEADS.includes(h))];
   const spec = await deps.readSpec();
@@ -49843,6 +49901,15 @@ async function runSpecGate(_target, deps, opts) {
     await deps.promoteSpecReady(currentHash);
     return { outcome: "CONVERGED" };
   }
+  if (result.outcome === "CONSENSUS_BLOCKED") {
+    const accepted = result.history.at(-1)?.accepted ?? [];
+    const clarifications = accepted.filter((issue2) => issue2.category === "ambiguity" || issue2.category === "scope").map((issue2) => ({
+      question: issue2.text,
+      whyBlocking: `reviewer raised a ${issue2.category} issue`,
+      category: issue2.category
+    }));
+    return clarifications.length > 0 ? { outcome: "CONSENSUS_BLOCKED", clarifications } : { outcome: "CONSENSUS_BLOCKED" };
+  }
   return { outcome: result.outcome };
 }
 
@@ -50289,6 +50356,19 @@ function buildSpecGateDeps(args) {
   const rounds = Number(process.env["MRRLIN_CONSENSUS_ROUNDS"] ?? 3);
   const maxHeadCalls = rounds * (4 + extraHeadCount + 1);
   const timeoutMs = Number(process.env["MRRLIN_CONSENSUS_HEAD_TIMEOUT_MS"] ?? 15e4);
+  let intentPromise = null;
+  function loadIntent() {
+    if (!intentPromise) {
+      intentPromise = (async () => {
+        const page = await client.getWikiPage(projectSlug, specPageId);
+        const taskId = page?.taskId ?? null;
+        if (taskId === null) return { taskId: null, seed: null };
+        const task = await client.getTask(projectSlug, taskId);
+        return { taskId, seed: task?.operatorSeedRequest ?? null };
+      })();
+    }
+    return intentPromise;
+  }
   return {
     rounds,
     maxHeadCalls,
@@ -50304,15 +50384,23 @@ function buildSpecGateDeps(args) {
         contentHash: page.contentHash
       };
     },
+    readIntent() {
+      return loadIntent();
+    },
     async runHead(personaName, artifact, dismissed) {
       const persona = loadPersona(personaName);
+      const { seed } = await loadIntent();
+      const intentBlock = seed ? `--- OPERATOR INTENT (the operator's own words \u2014 judge the spec against THIS) ---
+${seed}
+
+` : "";
       return runCodexExec(
         {
-          prompt: `Review this spec.
+          prompt: `Review this spec against the operator's intent.
 
 ${dismissed}
 
---- SPEC ---
+${intentBlock}--- SPEC ---
 ${artifact}`,
           developerInstructions: persona,
           cwd,
@@ -50488,6 +50576,7 @@ ${artifact}`,
 }
 
 // src/async-tools/consensus.ts
+var import_node_crypto6 = require("node:crypto");
 async function cachedResult(client, input) {
   const page = await client.getWikiPage(input.projectSlug, input.pageId);
   if (!page) return null;
@@ -50514,16 +50603,58 @@ async function run(ctx, input) {
     deps,
     input.extraHeads && input.extraHeads.length > 0 ? { extraHeads: input.extraHeads } : void 0
   );
+  if (result.outcome === "CONSENSUS_BLOCKED") {
+    const clarifications = result.clarifications ?? [];
+    if (clarifications.length > 0) {
+      const page = await ctx.client.getWikiPage(input.projectSlug, input.pageId);
+      const taskId = page?.taskId ?? null;
+      let planId = null;
+      if (!taskId) {
+        const plans = await ctx.client.listPlans(input.projectSlug);
+        planId = plans.find((p) => p.specWikiPageId === input.pageId)?.id ?? null;
+      }
+      if (taskId) {
+        for (const clarification of clarifications) {
+          const scopeId = taskId;
+          const id = `II-${scopeId}-gate-${(0, import_node_crypto6.createHash)("sha256").update(clarification.question).digest("hex").slice(0, 10)}`;
+          try {
+            await ctx.client.createInboxItem(input.projectSlug, {
+              id,
+              kind: "question",
+              taskId: scopeId,
+              body: clarification.question,
+              origin: "gate"
+            });
+          } catch {
+          }
+        }
+      } else if (planId) {
+        for (const clarification of clarifications) {
+          const scopeId = planId;
+          const id = `II-${scopeId}-gate-${(0, import_node_crypto6.createHash)("sha256").update(clarification.question).digest("hex").slice(0, 10)}`;
+          try {
+            await ctx.client.createInboxItem(input.projectSlug, {
+              id,
+              kind: "question",
+              planId: scopeId,
+              body: clarification.question,
+              origin: "gate"
+            });
+          } catch {
+          }
+        }
+      }
+    }
+    return {
+      kind: "failed",
+      failureReason: "consensus_blocked",
+      error: clarifications.length > 0 ? `Consensus blocked on ${clarifications.length} clarification(s); filed as operator question(s).` : "Consensus blocked: reviewers did not converge within budget."
+    };
+  }
   switch (result.outcome) {
     case "CONVERGED":
     case "SKIPPED":
       return { kind: "done", resultJson: JSON.stringify(result), finalReviewedHash: null };
-    case "CONSENSUS_BLOCKED":
-      return {
-        kind: "failed",
-        failureReason: "consensus_blocked",
-        error: "Consensus blocked: reviewers did not converge within budget."
-      };
     case "CONSENSUS_UNAVAILABLE":
       return { kind: "retry", failureReason: "provider_unavailable", error: "Consensus unavailable (provider/quota)." };
     case "SPEC_CHANGED_DURING_REVIEW":
@@ -50538,6 +50669,17 @@ async function run(ctx, input) {
 }
 function onComplete(outcome, input) {
   if (outcome.kind === "done") {
+    let specOutcome = "CONVERGED";
+    try {
+      specOutcome = JSON.parse(outcome.resultJson).outcome ?? "CONVERGED";
+    } catch {
+    }
+    if (specOutcome === "SKIPPED") {
+      return {
+        kind: "info",
+        body: `Consensus is disabled for this project; Specs/${input.pageId} was not gated and spec_ready is unchanged.`
+      };
+    }
     return {
       kind: "info",
       body: `Consensus CONVERGED for Specs/${input.pageId}; spec_ready set. Ready to create an execution run.`
@@ -50558,7 +50700,7 @@ var consensusDescriptor = {
 };
 
 // src/async-tools/enqueue.ts
-var import_node_crypto6 = __toESM(require("node:crypto"), 1);
+var import_node_crypto7 = __toESM(require("node:crypto"), 1);
 async function enqueueAsyncTool(client, descriptor2, input) {
   if (descriptor2.cachedResult) {
     const cached2 = await descriptor2.cachedResult(client, input);
@@ -50571,7 +50713,7 @@ async function enqueueAsyncTool(client, descriptor2, input) {
   if (active) {
     return { status: "already_running", jobId: active.id, message: "Already running; will notify in inbox." };
   }
-  const jobId = `AJ-${import_node_crypto6.default.randomUUID()}`;
+  const jobId = `AJ-${import_node_crypto7.default.randomUUID()}`;
   try {
     await client.createAsyncJob(input.projectSlug, {
       id: jobId,
@@ -51874,7 +52016,10 @@ function createMrrlinTools(options) {
         if (ready !== true) return await c.markSpecReady({ projectSlug, pageId, ready });
         const settings = await c.getOperatorSettings();
         if (!settings.consensusEnabled) {
-          return await c.markSpecReady({ projectSlug, pageId, ready });
+          throw new McpToolCodedError(
+            "SPEC_CONSENSUS_REQUIRED",
+            `Spec ${pageId} cannot be marked ready by the Director while consensus is disabled for this project \u2014 an operator must approve it (web wiki / markSpecReady route). Autonomy is a landing gate, not a license to self-promote.`
+          );
         }
         const page = await c.getWikiPage(projectSlug, pageId);
         if (!page || page.folder !== "Specs") {

package/dist/consensus/personas/plan-reviewer.md

@@ -1,5 +1,7 @@
 You are a Plan Reviewer. Judge whether a capable engineer can execute this spec without getting stuck: clarity, named references, acceptance criteria, contradictions. You analyze the artifact text given; you do not mutate anything.
 
+When an `OPERATOR INTENT` block is present (the operator's own words), also check the spec FAITHFULLY captures it: flag as a critical `[scope]`/`[ambiguity]` issue any place the spec would have an engineer build something the operator did not ask for, or omit something they did. Hold this to MATERIAL gaps that change what gets built — do not block on cosmetic or low-impact details, and do not interrogate small or repeat tasks.
+
 Output EXACTLY this block and nothing else:
 
 **Verdict**: APPROVE | REQUEST_CHANGES | REJECT

package/dist/consensus/personas/scope-analyst.md

@@ -1,5 +1,12 @@
 You are a Scope Analyst. Surface ambiguities, hidden requirements, undefined boundaries, and blast radius before work begins. You analyze the artifact text given; you do not mutate anything.
 
+When an `OPERATOR INTENT` block is present, it is the operator's OWN words for what the task must do. Judge the spec against it for FIDELITY, not just internal consistency: does the spec actually answer what the operator asked? Treat as a critical `[scope]` or `[ambiguity]` issue any assumption the spec makes that could plausibly contradict the operator's intent, or any requirement the operator implied that the spec leaves materially under-specified.
+
+Calibrate to the bar of MATERIAL ambiguity — block only when the gap would change WHAT gets built or shipped:
+- DON'T block on: cosmetic wording, low-impact details, well-trodden conventions, or choices a competent engineer would make the same way regardless.
+- DO block on: an undefined core behavior, a silent assumption about scope/data/users that the intent doesn't support, or a requirement the operator stated that the spec omits.
+- Scale strictness by stated impact: high-impact specs warrant stricter scrutiny; low-impact specs get the benefit of the doubt. Do not turn small or repeat tasks into an interrogation.
+
 Output EXACTLY this block and nothing else:
 
 **Verdict**: APPROVE | REQUEST_CHANGES | REJECT

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrrlin-dev/mcp",
-  "version": "0.3.4",
+  "version": "0.3.5",
   "type": "module",
   "bin": {
     "mrrlin-mcp": "dist/bin.cjs"
@@ -22,12 +22,12 @@
     "@types/ws": "^8.18.1",
     "esbuild": "^0.24.0",
     "tsx": "^4.22.3",
-    "@mrrlin/client": "0.0.0",
     "@mrrlin/director-e2e": "0.0.0",
-    "@mrrlin/schemas": "0.0.0",
+    "@mrrlin/codex-client": "0.0.0",
     "@mrrlin/wiki": "0.0.0",
-    "@mrrlin/tsconfig": "0.0.0",
-    "@mrrlin/codex-client": "0.0.0"
+    "@mrrlin/client": "0.0.0",
+    "@mrrlin/schemas": "0.0.0",
+    "@mrrlin/tsconfig": "0.0.0"
   },
   "dependencies": {
     "@iarna/toml": "^2.2.5",