@mrrlin-dev/mcp 0.3.4 → 0.3.7

package/dist/bin.cjs

@@ -4273,7 +4273,7 @@ var require_websocket = __commonJS({
     var http2 = require("http");
     var net = require("net");
     var tls = require("tls");
-    var { randomBytes: randomBytes3, createHash: createHash2 } = require("crypto");
+    var { randomBytes: randomBytes4, createHash: createHash3 } = require("crypto");
     var { Duplex, Readable } = require("stream");
     var { URL: URL2 } = require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -4811,7 +4811,7 @@ var require_websocket = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key = randomBytes3(16).toString("base64");
+      const key = randomBytes4(16).toString("base64");
       const request = isSecure ? https.request : http2.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
@@ -4941,7 +4941,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash2("sha1").update(key + GUID).digest("base64");
+        const digest = createHash3("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -5310,7 +5310,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter3 = require("events");
     var http2 = require("http");
     var { Duplex } = require("stream");
-    var { createHash: createHash2 } = require("crypto");
+    var { createHash: createHash3 } = require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -5617,7 +5617,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash2("sha1").update(key + GUID).digest("base64");
+        const digest = createHash3("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -7683,7 +7683,7 @@ var require_polyfills = __commonJS({
     var constants = require("constants");
     var origCwd = process.cwd;
     var cwd = null;
-    var platform2 = process.env.GRACEFUL_FS_PLATFORM || process.platform;
+    var platform = process.env.GRACEFUL_FS_PLATFORM || process.platform;
     process.cwd = function() {
       if (!cwd)
         cwd = origCwd.call(process);
@@ -7729,20 +7729,20 @@ var require_polyfills = __commonJS({
       fs7.fstatSync = statFixSync(fs7.fstatSync);
       fs7.lstatSync = statFixSync(fs7.lstatSync);
       if (fs7.chmod && !fs7.lchmod) {
-        fs7.lchmod = function(path16, mode, cb) {
+        fs7.lchmod = function(path15, mode, cb) {
           if (cb) process.nextTick(cb);
         };
         fs7.lchmodSync = function() {
         };
       }
       if (fs7.chown && !fs7.lchown) {
-        fs7.lchown = function(path16, uid, gid, cb) {
+        fs7.lchown = function(path15, uid, gid, cb) {
           if (cb) process.nextTick(cb);
         };
         fs7.lchownSync = function() {
         };
       }
-      if (platform2 === "win32") {
+      if (platform === "win32") {
         fs7.rename = typeof fs7.rename !== "function" ? fs7.rename : function(fs$rename) {
           function rename(from, to, cb) {
             var start = Date.now();
@@ -7803,9 +7803,9 @@ var require_polyfills = __commonJS({
         };
       }(fs7.readSync);
       function patchLchmod(fs8) {
-        fs8.lchmod = function(path16, mode, callback) {
+        fs8.lchmod = function(path15, mode, callback) {
           fs8.open(
-            path16,
+            path15,
             constants.O_WRONLY | constants.O_SYMLINK,
             mode,
             function(err, fd) {
@@ -7821,8 +7821,8 @@ var require_polyfills = __commonJS({
             }
           );
         };
-        fs8.lchmodSync = function(path16, mode) {
-          var fd = fs8.openSync(path16, constants.O_WRONLY | constants.O_SYMLINK, mode);
+        fs8.lchmodSync = function(path15, mode) {
+          var fd = fs8.openSync(path15, constants.O_WRONLY | constants.O_SYMLINK, mode);
           var threw = true;
           var ret;
           try {
@@ -7843,8 +7843,8 @@ var require_polyfills = __commonJS({
       }
       function patchLutimes(fs8) {
         if (constants.hasOwnProperty("O_SYMLINK") && fs8.futimes) {
-          fs8.lutimes = function(path16, at, mt, cb) {
-            fs8.open(path16, constants.O_SYMLINK, function(er, fd) {
+          fs8.lutimes = function(path15, at, mt, cb) {
+            fs8.open(path15, constants.O_SYMLINK, function(er, fd) {
               if (er) {
                 if (cb) cb(er);
                 return;
@@ -7856,8 +7856,8 @@ var require_polyfills = __commonJS({
               });
             });
           };
-          fs8.lutimesSync = function(path16, at, mt) {
-            var fd = fs8.openSync(path16, constants.O_SYMLINK);
+          fs8.lutimesSync = function(path15, at, mt) {
+            var fd = fs8.openSync(path15, constants.O_SYMLINK);
             var ret;
             var threw = true;
             try {
@@ -7975,11 +7975,11 @@ var require_legacy_streams = __commonJS({
         ReadStream,
         WriteStream
       };
-      function ReadStream(path16, options) {
-        if (!(this instanceof ReadStream)) return new ReadStream(path16, options);
+      function ReadStream(path15, options) {
+        if (!(this instanceof ReadStream)) return new ReadStream(path15, options);
         Stream.call(this);
         var self = this;
-        this.path = path16;
+        this.path = path15;
         this.fd = null;
         this.readable = true;
         this.paused = false;
@@ -8024,10 +8024,10 @@ var require_legacy_streams = __commonJS({
           self._read();
         });
       }
-      function WriteStream(path16, options) {
-        if (!(this instanceof WriteStream)) return new WriteStream(path16, options);
+      function WriteStream(path15, options) {
+        if (!(this instanceof WriteStream)) return new WriteStream(path15, options);
         Stream.call(this);
-        this.path = path16;
+        this.path = path15;
         this.fd = null;
         this.writable = true;
         this.flags = "w";
@@ -8170,14 +8170,14 @@ var require_graceful_fs = __commonJS({
       fs8.createWriteStream = createWriteStream;
       var fs$readFile = fs8.readFile;
       fs8.readFile = readFile2;
-      function readFile2(path16, options, cb) {
+      function readFile2(path15, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
-        return go$readFile(path16, options, cb);
-        function go$readFile(path17, options2, cb2, startTime) {
-          return fs$readFile(path17, options2, function(err) {
+        return go$readFile(path15, options, cb);
+        function go$readFile(path16, options2, cb2, startTime) {
+          return fs$readFile(path16, options2, function(err) {
             if (err && (err.code === "EMFILE" || err.code === "ENFILE"))
-              enqueue([go$readFile, [path17, options2, cb2], err, startTime || Date.now(), Date.now()]);
+              enqueue([go$readFile, [path16, options2, cb2], err, startTime || Date.now(), Date.now()]);
             else {
               if (typeof cb2 === "function")
                 cb2.apply(this, arguments);
@@ -8187,14 +8187,14 @@ var require_graceful_fs = __commonJS({
       }
       var fs$writeFile = fs8.writeFile;
       fs8.writeFile = writeFile;
-      function writeFile(path16, data, options, cb) {
+      function writeFile(path15, data, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
-        return go$writeFile(path16, data, options, cb);
-        function go$writeFile(path17, data2, options2, cb2, startTime) {
-          return fs$writeFile(path17, data2, options2, function(err) {
+        return go$writeFile(path15, data, options, cb);
+        function go$writeFile(path16, data2, options2, cb2, startTime) {
+          return fs$writeFile(path16, data2, options2, function(err) {
             if (err && (err.code === "EMFILE" || err.code === "ENFILE"))
-              enqueue([go$writeFile, [path17, data2, options2, cb2], err, startTime || Date.now(), Date.now()]);
+              enqueue([go$writeFile, [path16, data2, options2, cb2], err, startTime || Date.now(), Date.now()]);
             else {
               if (typeof cb2 === "function")
                 cb2.apply(this, arguments);
@@ -8205,14 +8205,14 @@ var require_graceful_fs = __commonJS({
       var fs$appendFile = fs8.appendFile;
       if (fs$appendFile)
         fs8.appendFile = appendFile;
-      function appendFile(path16, data, options, cb) {
+      function appendFile(path15, data, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
-        return go$appendFile(path16, data, options, cb);
-        function go$appendFile(path17, data2, options2, cb2, startTime) {
-          return fs$appendFile(path17, data2, options2, function(err) {
+        return go$appendFile(path15, data, options, cb);
+        function go$appendFile(path16, data2, options2, cb2, startTime) {
+          return fs$appendFile(path16, data2, options2, function(err) {
             if (err && (err.code === "EMFILE" || err.code === "ENFILE"))
-              enqueue([go$appendFile, [path17, data2, options2, cb2], err, startTime || Date.now(), Date.now()]);
+              enqueue([go$appendFile, [path16, data2, options2, cb2], err, startTime || Date.now(), Date.now()]);
             else {
               if (typeof cb2 === "function")
                 cb2.apply(this, arguments);
@@ -8243,31 +8243,31 @@ var require_graceful_fs = __commonJS({
       var fs$readdir = fs8.readdir;
       fs8.readdir = readdir2;
       var noReaddirOptionVersions = /^v[0-5]\./;
-      function readdir2(path16, options, cb) {
+      function readdir2(path15, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
-        var go$readdir = noReaddirOptionVersions.test(process.version) ? function go$readdir2(path17, options2, cb2, startTime) {
-          return fs$readdir(path17, fs$readdirCallback(
-            path17,
+        var go$readdir = noReaddirOptionVersions.test(process.version) ? function go$readdir2(path16, options2, cb2, startTime) {
+          return fs$readdir(path16, fs$readdirCallback(
+            path16,
             options2,
             cb2,
             startTime
           ));
-        } : function go$readdir2(path17, options2, cb2, startTime) {
-          return fs$readdir(path17, options2, fs$readdirCallback(
-            path17,
+        } : function go$readdir2(path16, options2, cb2, startTime) {
+          return fs$readdir(path16, options2, fs$readdirCallback(
+            path16,
             options2,
             cb2,
             startTime
           ));
         };
-        return go$readdir(path16, options, cb);
-        function fs$readdirCallback(path17, options2, cb2, startTime) {
+        return go$readdir(path15, options, cb);
+        function fs$readdirCallback(path16, options2, cb2, startTime) {
           return function(err, files) {
             if (err && (err.code === "EMFILE" || err.code === "ENFILE"))
               enqueue([
                 go$readdir,
-                [path17, options2, cb2],
+                [path16, options2, cb2],
                 err,
                 startTime || Date.now(),
                 Date.now()
@@ -8338,7 +8338,7 @@ var require_graceful_fs = __commonJS({
         enumerable: true,
         configurable: true
       });
-      function ReadStream(path16, options) {
+      function ReadStream(path15, options) {
         if (this instanceof ReadStream)
           return fs$ReadStream.apply(this, arguments), this;
         else
@@ -8358,7 +8358,7 @@ var require_graceful_fs = __commonJS({
           }
         });
       }
-      function WriteStream(path16, options) {
+      function WriteStream(path15, options) {
         if (this instanceof WriteStream)
           return fs$WriteStream.apply(this, arguments), this;
         else
@@ -8376,22 +8376,22 @@ var require_graceful_fs = __commonJS({
           }
         });
       }
-      function createReadStream(path16, options) {
-        return new fs8.ReadStream(path16, options);
+      function createReadStream(path15, options) {
+        return new fs8.ReadStream(path15, options);
       }
-      function createWriteStream(path16, options) {
-        return new fs8.WriteStream(path16, options);
+      function createWriteStream(path15, options) {
+        return new fs8.WriteStream(path15, options);
       }
       var fs$open = fs8.open;
       fs8.open = open;
-      function open(path16, flags, mode, cb) {
+      function open(path15, flags, mode, cb) {
         if (typeof mode === "function")
           cb = mode, mode = null;
-        return go$open(path16, flags, mode, cb);
-        function go$open(path17, flags2, mode2, cb2, startTime) {
-          return fs$open(path17, flags2, mode2, function(err, fd) {
+        return go$open(path15, flags, mode, cb);
+        function go$open(path16, flags2, mode2, cb2, startTime) {
+          return fs$open(path16, flags2, mode2, function(err, fd) {
             if (err && (err.code === "EMFILE" || err.code === "ENFILE"))
-              enqueue([go$open, [path17, flags2, mode2, cb2], err, startTime || Date.now(), Date.now()]);
+              enqueue([go$open, [path16, flags2, mode2, cb2], err, startTime || Date.now(), Date.now()]);
             else {
               if (typeof cb2 === "function")
                 cb2.apply(this, arguments);
@@ -8920,7 +8920,7 @@ var require_mtime_precision = __commonJS({
 var require_lockfile = __commonJS({
   "../../node_modules/.pnpm/proper-lockfile@4.1.2/node_modules/proper-lockfile/lib/lockfile.js"(exports2, module2) {
     "use strict";
-    var path16 = require("path");
+    var path15 = require("path");
     var fs7 = require_graceful_fs();
     var retry = require_retry2();
     var onExit = require_signal_exit();
@@ -8931,7 +8931,7 @@ var require_lockfile = __commonJS({
     }
     function resolveCanonicalPath(file2, options, callback) {
       if (!options.realpath) {
-        return callback(null, path16.resolve(file2));
+        return callback(null, path15.resolve(file2));
       }
       options.fs.realpath(file2, callback);
     }
@@ -10795,10 +10795,10 @@ var require_segments = __commonJS({
       const segs = getSegmentsFromString(data, Utils.isKanjiModeEnabled());
       const nodes = buildNodes(segs);
       const graph = buildGraph(nodes, version2);
-      const path16 = dijkstra.find_path(graph.map, "start", "end");
+      const path15 = dijkstra.find_path(graph.map, "start", "end");
       const optimizedSegs = [];
-      for (let i = 1; i < path16.length - 1; i++) {
-        optimizedSegs.push(graph.table[path16[i]].node);
+      for (let i = 1; i < path15.length - 1; i++) {
+        optimizedSegs.push(graph.table[path15[i]].node);
       }
       return exports2.fromArray(mergeSegments(optimizedSegs));
     };
@@ -13275,7 +13275,7 @@ var require_png2 = __commonJS({
       });
       png.pack();
     };
-    exports2.renderToFile = function renderToFile(path16, qrData, options, cb) {
+    exports2.renderToFile = function renderToFile(path15, qrData, options, cb) {
       if (typeof cb === "undefined") {
         cb = options;
         options = void 0;
@@ -13286,7 +13286,7 @@ var require_png2 = __commonJS({
         called = true;
         cb.apply(null, args);
       };
-      const stream = fs7.createWriteStream(path16);
+      const stream = fs7.createWriteStream(path15);
       stream.on("error", done);
       stream.on("close", done);
       exports2.renderToFileStream(stream, qrData, options);
@@ -13348,14 +13348,14 @@ var require_utf8 = __commonJS({
       }
       return output3;
     };
-    exports2.renderToFile = function renderToFile(path16, qrData, options, cb) {
+    exports2.renderToFile = function renderToFile(path15, qrData, options, cb) {
       if (typeof cb === "undefined") {
         cb = options;
         options = void 0;
       }
       const fs7 = require("fs");
       const utf8 = exports2.render(qrData, options);
-      fs7.writeFile(path16, utf8, cb);
+      fs7.writeFile(path15, utf8, cb);
     };
   }
 });
@@ -13476,7 +13476,7 @@ var require_svg_tag = __commonJS({
       return str;
     }
     function qrToPath(data, size, margin) {
-      let path16 = "";
+      let path15 = "";
       let moveBy = 0;
       let newRow = false;
       let lineLength = 0;
@@ -13487,19 +13487,19 @@ var require_svg_tag = __commonJS({
         if (data[i]) {
           lineLength++;
           if (!(i > 0 && col > 0 && data[i - 1])) {
-            path16 += newRow ? svgCmd("M", col + margin, 0.5 + row + margin) : svgCmd("m", moveBy, 0);
+            path15 += newRow ? svgCmd("M", col + margin, 0.5 + row + margin) : svgCmd("m", moveBy, 0);
             moveBy = 0;
             newRow = false;
           }
           if (!(col + 1 < size && data[i + 1])) {
-            path16 += svgCmd("h", lineLength);
+            path15 += svgCmd("h", lineLength);
             lineLength = 0;
           }
         } else {
           moveBy++;
         }
       }
-      return path16;
+      return path15;
     }
     exports2.render = function render(qrData, options, cb) {
       const opts = Utils.getOptions(options);
@@ -13507,10 +13507,10 @@ var require_svg_tag = __commonJS({
       const data = qrData.modules.data;
       const qrcodesize = size + opts.margin * 2;
       const bg = !opts.color.light.a ? "" : "<path " + getColorAttrib(opts.color.light, "fill") + ' d="M0 0h' + qrcodesize + "v" + qrcodesize + 'H0z"/>';
-      const path16 = "<path " + getColorAttrib(opts.color.dark, "stroke") + ' d="' + qrToPath(data, size, opts.margin) + '"/>';
+      const path15 = "<path " + getColorAttrib(opts.color.dark, "stroke") + ' d="' + qrToPath(data, size, opts.margin) + '"/>';
       const viewBox = 'viewBox="0 0 ' + qrcodesize + " " + qrcodesize + '"';
       const width = !opts.width ? "" : 'width="' + opts.width + '" height="' + opts.width + '" ';
-      const svgTag = '<svg xmlns="http://www.w3.org/2000/svg" ' + width + viewBox + ' shape-rendering="crispEdges">' + bg + path16 + "</svg>\n";
+      const svgTag = '<svg xmlns="http://www.w3.org/2000/svg" ' + width + viewBox + ' shape-rendering="crispEdges">' + bg + path15 + "</svg>\n";
       if (typeof cb === "function") {
         cb(null, svgTag);
       }
@@ -13524,7 +13524,7 @@ var require_svg = __commonJS({
   "../../node_modules/.pnpm/qrcode@1.5.4/node_modules/qrcode/lib/renderer/svg.js"(exports2) {
     var svgTagRenderer = require_svg_tag();
     exports2.render = svgTagRenderer.render;
-    exports2.renderToFile = function renderToFile(path16, qrData, options, cb) {
+    exports2.renderToFile = function renderToFile(path15, qrData, options, cb) {
       if (typeof cb === "undefined") {
         cb = options;
         options = void 0;
@@ -13532,7 +13532,7 @@ var require_svg = __commonJS({
       const fs7 = require("fs");
       const svgTag = exports2.render(qrData, options);
       const xmlStr = '<?xml version="1.0" encoding="utf-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">' + svgTag;
-      fs7.writeFile(path16, xmlStr, cb);
+      fs7.writeFile(path15, xmlStr, cb);
     };
   }
 });
@@ -13690,8 +13690,8 @@ var require_server = __commonJS({
         cb
       };
     }
-    function getTypeFromFilename(path16) {
-      return path16.slice((path16.lastIndexOf(".") - 1 >>> 0) + 2).toLowerCase();
+    function getTypeFromFilename(path15) {
+      return path15.slice((path15.lastIndexOf(".") - 1 >>> 0) + 2).toLowerCase();
     }
     function getRendererFromType(type) {
       switch (type) {
@@ -13755,17 +13755,17 @@ var require_server = __commonJS({
       const renderer = getRendererFromType(params.opts.type);
       return render(renderer.renderToBuffer, text, params);
     };
-    exports2.toFile = function toFile(path16, text, opts, cb) {
-      if (typeof path16 !== "string" || !(typeof text === "string" || typeof text === "object")) {
+    exports2.toFile = function toFile(path15, text, opts, cb) {
+      if (typeof path15 !== "string" || !(typeof text === "string" || typeof text === "object")) {
         throw new Error("Invalid argument");
       }
       if (arguments.length < 3 && !canPromise()) {
         throw new Error("Too few arguments provided");
       }
       const params = checkParams(text, opts, cb);
-      const type = params.opts.type || getTypeFromFilename(path16);
+      const type = params.opts.type || getTypeFromFilename(path15);
       const renderer = getRendererFromType(type);
-      const renderToFile = renderer.renderToFile.bind(null, path16);
+      const renderToFile = renderer.renderToFile.bind(null, path15);
       return render(renderToFile, text, params);
     };
     exports2.toFileStream = function toFileStream(stream, text, opts) {
@@ -16983,8 +16983,8 @@ var require_utils3 = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path16) {
-      let input = path16;
+    function removeDotSegments(path15) {
+      let input = path15;
       const output3 = [];
       let nextSlash = -1;
       let len = 0;
@@ -17236,8 +17236,8 @@ var require_schemes = __commonJS({
         wsComponent.secure = void 0;
       }
       if (wsComponent.resourceName) {
-        const [path16, query] = wsComponent.resourceName.split("?");
-        wsComponent.path = path16 && path16 !== "/" ? path16 : void 0;
+        const [path15, query] = wsComponent.resourceName.split("?");
+        wsComponent.path = path15 && path15 !== "/" ? path15 : void 0;
         wsComponent.query = query;
         wsComponent.resourceName = void 0;
       }
@@ -20644,11 +20644,11 @@ var require_dist = __commonJS({
 });
 
 // src/bin.ts
+var import_node_path20 = __toESM(require("node:path"), 1);
+var import_node_child_process8 = require("node:child_process");
+var import_node_fs15 = require("node:fs");
+var import_node_os12 = require("node:os");
 var import_node_path21 = __toESM(require("node:path"), 1);
-var import_node_child_process9 = require("node:child_process");
-var import_node_fs16 = require("node:fs");
-var import_node_os13 = require("node:os");
-var import_node_path22 = __toESM(require("node:path"), 1);
 
 // src/install-codex.ts
 var import_promises = __toESM(require("node:fs/promises"), 1);
@@ -20915,11 +20915,11 @@ ${block}`;
 }
 
 // src/director-bridge.ts
-var import_node_fs12 = __toESM(require("node:fs"), 1);
+var import_node_fs11 = __toESM(require("node:fs"), 1);
 var import_node_http = __toESM(require("node:http"), 1);
-var import_node_os9 = __toESM(require("node:os"), 1);
-var import_node_path13 = __toESM(require("node:path"), 1);
-var import_node_child_process5 = require("node:child_process");
+var import_node_os8 = __toESM(require("node:os"), 1);
+var import_node_path12 = __toESM(require("node:path"), 1);
+var import_node_child_process4 = require("node:child_process");
 var import_node_crypto5 = __toESM(require("node:crypto"), 1);
 
 // src/turn-replay-buffer.ts
@@ -22421,10 +22421,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path16) {
-  if (!path16)
+function getElementAtPath(obj, path15) {
+  if (!path15)
     return obj;
-  return path16.reduce((acc, key) => acc?.[key], obj);
+  return path15.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -22833,11 +22833,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path16, issues) {
+function prefixIssues(path15, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path16);
+    iss.path.unshift(path15);
     return iss;
   });
 }
@@ -22984,16 +22984,16 @@ function flattenError(error51, mapper = (issue2) => issue2.message) {
 }
 function formatError(error51, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error52, path16 = []) => {
+  const processError = (error52, path15 = []) => {
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path16, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path15, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path16, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path15, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path16, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path15, ...issue2.path]);
       } else {
-        const fullpath = [...path16, ...issue2.path];
+        const fullpath = [...path15, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -23020,17 +23020,17 @@ function formatError(error51, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error51, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error52, path16 = []) => {
+  const processError = (error52, path15 = []) => {
     var _a3, _b;
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path16, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path15, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path16, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path15, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path16, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path15, ...issue2.path]);
       } else {
-        const fullpath = [...path16, ...issue2.path];
+        const fullpath = [...path15, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -23062,8 +23062,8 @@ function treeifyError(error51, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path16 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path16) {
+  const path15 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path15) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -35755,13 +35755,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path16 = ref.slice(1).split("/").filter(Boolean);
-  if (path16.length === 0) {
+  const path15 = ref.slice(1).split("/").filter(Boolean);
+  if (path15.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path16[0] === defsKey) {
-    const key = path16[1];
+  if (path15[0] === defsKey) {
+    const key = path15[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -36264,7 +36264,8 @@ var openApiOperationIds = {
   updateWikiPageCas: "updateWikiPageCas",
   promoteSpecReadyCas: "promoteSpecReadyCas",
   recordSpecConsensusReview: "recordSpecConsensusReview",
-  getSpecConsensusReview: "getSpecConsensusReview"
+  getSpecConsensusReview: "getSpecConsensusReview",
+  onboardingKickoffTransition: "onboardingKickoffTransition"
 };
 
 // ../../packages/schemas/dist/session.js
@@ -36275,7 +36276,7 @@ var operatorSessionSchema = external_exports.object({
   issuedAt: external_exports.number().int().positive(),
   kind: external_exports.enum(["web", "agent"]).default("web"),
   login: external_exports.string().min(1),
-  projectSlug: external_exports.string().min(1),
+  projectSlug: external_exports.string().min(1).optional(),
   provider: external_exports.literal("github"),
   repo: external_exports.string().min(1).nullable(),
   // ADR 0016: `scope` distinguishes project-pinned agent tokens (legacy, default) from
@@ -36284,7 +36285,7 @@ var operatorSessionSchema = external_exports.object({
   // cleanly into the project branch of the middleware (which mirrors today's behavior).
   scope: external_exports.enum(["project", "operator"]).default("project")
 });
-var AGENT_SESSION_TTL_MS = 1e3 * 60 * 60;
+var AGENT_SESSION_TTL_MS = 1e3 * 60 * 15;
 
 // ../../packages/schemas/dist/github-state.js
 var TTL_MS = 10 * 6e4;
@@ -36402,6 +36403,7 @@ var mrrlinTaskTypeSchema = external_exports.enum(["task", "bug"]);
 var mrrlinTaskImpactSchema = external_exports.enum(["low", "medium", "high"]);
 var mrrlinAutonomyLevelSchema = external_exports.enum(["auto", "minimal_human", "human_only"]);
 var mrrlinAutoDeploySchema = external_exports.enum(["off", "dev", "prod"]);
+var mrrlinSpecApprovedSchema = external_exports.enum(["pending", "approved", "skipped", "skipped_legacy"]);
 var mrrlinTaskSourceSchema = external_exports.enum(["fixture-import", "api"]);
 var mrrlinPlanStatusSchema = external_exports.enum(["active", "paused", "done", "archived"]);
 var mrrlinTaskEventTypeSchema = external_exports.enum(["autonomy_set", "director_thread_reset", "note"]);
@@ -36458,6 +36460,7 @@ var mrrlinExecutionArtifactKindSchema = external_exports.enum([
   "handoff_judgement",
   "file",
   "verification",
+  "produced_url",
   "resume_spec"
 ]);
 var mrrlinDeployAttemptPayloadSchema = external_exports.object({
@@ -36473,6 +36476,11 @@ var mrrlinVerificationPayloadSchema = external_exports.object({
   checks: external_exports.array(external_exports.unknown()).optional(),
   turnRef: external_exports.string().nullable()
 });
+var producedUrlSafeString = external_exports.string().regex(/^[^\x00-\x1F\x7F]+$/, "control chars are not allowed");
+var mrrlinProducedUrlPayloadSchema = external_exports.object({
+  url: producedUrlSafeString.min(1).max(2048).refine((v) => v.startsWith("/") || /^https?:\/\//.test(v), "must be an absolute http(s) URL or a path starting with /"),
+  label: producedUrlSafeString.min(1).max(40).optional()
+});
 var taxonomyCategorySchema = external_exports.string().min(1).regex(/^[a-z][a-z0-9-]*$/);
 var taxonomySubcategorySchema = external_exports.string().min(1).regex(/^[a-z][a-z0-9-]*$/);
 var mrrlinTaskAssigneeSchema = external_exports.union([external_exports.string().regex(/^@/), external_exports.string().email()]).nullable();
@@ -36492,7 +36500,13 @@ var mrrlinTaskSchema = external_exports.object({
   latestJudgementAt: external_exports.string().datetime().nullable().default(null),
   latestJudgementKind: external_exports.enum(["autonomy", "handoff"]).nullable().default(null),
   notes: external_exports.string().nullable().default(null),
+  // Raw operator request captured at task creation (operator-authored ONLY, never Director-generated).
+  // The intent-aware spec gate judges the spec against this; null/absent ⇒ the gate fail-closes.
+  // Output-optional (not .default) so existing task fixtures need no churn; DB rows always resolve it
+  // to `string | null` via taskRowToTask.
+  operatorSeedRequest: external_exports.string().max(8e3).nullable().optional(),
   planId: mrrlinPlanIdSchema.nullable(),
+  specApproved: mrrlinSpecApprovedSchema.optional(),
   specWikiPageId: mrrlinWikiPageIdSchema.nullable(),
   status: mrrlinTaskStatusSchema,
   subcategory: taxonomySubcategorySchema,
@@ -36508,6 +36522,7 @@ var mrrlinPlanSchema = external_exports.object({
   id: mrrlinPlanIdSchema,
   name: external_exports.string().min(1),
   progress: external_exports.number().min(0).max(1),
+  specWikiPageId: external_exports.string().nullable().default(null),
   status: mrrlinPlanStatusSchema,
   taskCount: external_exports.number().int().nonnegative()
 });
@@ -36588,14 +36603,28 @@ var mrrlinProjectSummarySchema = external_exports.object({
   displayName: external_exports.string().min(1),
   emoji: mrrlinProjectEmojiSchema,
   github: mrrlinGithubBindingSchema,
+  onboardingKickoffState: external_exports.enum(["pending", "sent"]).nullable().optional(),
   slug: mrrlinProjectSlugSchema
 });
 var mrrlinProjectUpsertSchema = mrrlinProjectSummarySchema.omit({
+  onboardingKickoffState: true,
   slug: true
 });
 var mrrlinProjectRenameSchema = external_exports.object({
   displayName: external_exports.string().trim().min(1).max(120)
 });
+var ONBOARDING_KICKOFF_TRANSITIONS = [
+  { from: null, to: "pending" },
+  { from: "pending", to: "sent" },
+  { from: "sent", to: "pending" }
+];
+var mrrlinOnboardingKickoffTransitionSchema = external_exports.object({
+  from: external_exports.enum(["pending", "sent"]).nullable(),
+  to: external_exports.enum(["pending", "sent"])
+}).refine((value) => ONBOARDING_KICKOFF_TRANSITIONS.some((t) => t.from === value.from && t.to === value.to), { message: "Unsupported onboarding kickoff transition" });
+var mrrlinOnboardingKickoffTransitionResponseSchema = external_exports.object({
+  data: external_exports.object({ applied: external_exports.boolean() })
+});
 var mrrlinProjectMemberSchema = external_exports.object({
   email: external_exports.string().email(),
   githubLogin: external_exports.string().nullable(),
@@ -36632,6 +36661,7 @@ var mrrlinTaskCreateSchema = external_exports.object({
   id: mrrlinTaskIdSchema,
   impact: mrrlinTaskImpactSchema.default("medium"),
   notes: external_exports.string().nullable().optional(),
+  operatorSeedRequest: external_exports.string().max(8e3).nullable().optional(),
   planId: mrrlinPlanIdSchema.nullable().optional(),
   specWikiPageId: mrrlinWikiPageIdSchema.nullable().optional(),
   tags: mrrlinTaskTagsSchema.optional(),
@@ -36655,6 +36685,7 @@ var mrrlinTaskUpdateSchema = external_exports.object({
   impact: mrrlinTaskImpactSchema.optional(),
   notes: external_exports.string().nullable().optional(),
   planId: mrrlinPlanIdSchema.nullable().optional(),
+  specApproved: mrrlinSpecApprovedSchema.optional(),
   specWikiPageId: mrrlinWikiPageIdSchema.nullable().optional(),
   status: mrrlinTaskStatusSchema.optional(),
   subcategory: taxonomySubcategorySchema.optional(),
@@ -36662,7 +36693,7 @@ var mrrlinTaskUpdateSchema = external_exports.object({
   type: mrrlinTaskTypeSchema.optional(),
   followUpAt: external_exports.string().datetime().nullable().optional(),
   verificationDueAt: external_exports.string().datetime().nullable().optional()
-}).refine((value) => value.assignee !== void 0 || value.autoDeploy !== void 0 || value.autonomyLevel !== void 0 || value.autonomyReason !== void 0 || value.category !== void 0 || value.directorThreadId !== void 0 || value.dueDate !== void 0 || value.followUpAt !== void 0 || value.impact !== void 0 || value.notes !== void 0 || value.planId !== void 0 || value.specWikiPageId !== void 0 || value.status !== void 0 || value.subcategory !== void 0 || value.tags !== void 0 || value.type !== void 0 || value.verificationDueAt !== void 0, { message: "TaskUpdate requires at least one field" }).superRefine((value, context) => {
+}).refine((value) => value.assignee !== void 0 || value.autoDeploy !== void 0 || value.autonomyLevel !== void 0 || value.autonomyReason !== void 0 || value.category !== void 0 || value.directorThreadId !== void 0 || value.dueDate !== void 0 || value.followUpAt !== void 0 || value.impact !== void 0 || value.notes !== void 0 || value.planId !== void 0 || value.specApproved !== void 0 || value.specWikiPageId !== void 0 || value.status !== void 0 || value.subcategory !== void 0 || value.tags !== void 0 || value.type !== void 0 || value.verificationDueAt !== void 0, { message: "TaskUpdate requires at least one field" }).superRefine((value, context) => {
   if (value.autonomyLevel !== void 0 && value.autonomyReason === void 0) {
     context.addIssue({
       code: external_exports.ZodIssueCode.custom,
@@ -36703,12 +36734,14 @@ var mrrlinPlanCreateSchema = external_exports.object({
   goal: external_exports.string().min(1),
   id: mrrlinPlanIdSchema,
   name: external_exports.string().min(1),
+  specWikiPageId: external_exports.string().nullable().optional(),
   status: mrrlinPlanStatusSchema.default("active")
 });
 var mrrlinPlanUpdateSchema = external_exports.object({
   dueDate: external_exports.string().date().nullable().optional(),
   goal: external_exports.string().min(1).optional(),
   name: external_exports.string().min(1).optional(),
+  specWikiPageId: external_exports.string().nullable().optional(),
   status: mrrlinPlanStatusSchema.optional()
 }).refine((value) => Object.keys(value).length > 0, { message: "PlanUpdate requires at least one field" });
 var mrrlinTaxonomyCreateSchema = mrrlinTaxonomyEntrySchema;
@@ -37103,7 +37136,9 @@ var exchangeAgentTokenRequestSchema = external_exports.object({
 var exchangeAgentTokenResponseSchema = external_exports.object({
   token: external_exports.string().min(1),
   expiresAt: external_exports.string().datetime(),
-  projectSlug: external_exports.string().min(1),
+  // ADR 0016 §T7 amendment: operator-scope exchanges return no projectSlug (the token is
+  // operator-wide); project-scope exchanges still return the pinned slug.
+  projectSlug: external_exports.string().min(1).optional(),
   login: external_exports.string().min(1)
 });
 var MRRLIN_ARTIFACT_FILE_MAX_BYTES = 5 * 1024 * 1024;
@@ -37271,6 +37306,8 @@ var mrrlinInboxItemSchema = external_exports.object({
   directorSessionId: external_exports.string().min(1).nullable(),
   id: mrrlinInboxItemIdSchema,
   kind: mrrlinInboxItemKindSchema,
+  origin: external_exports.string().nullable().optional(),
+  planId: mrrlinPlanIdSchema.nullable().default(null),
   projectSlug: mrrlinProjectSlugSchema,
   readAt: external_exports.string().datetime().nullable(),
   status: mrrlinInboxItemStatusSchema,
@@ -37282,6 +37319,8 @@ var mrrlinInboxItemCreateSchema = external_exports.object({
   directorSessionId: external_exports.string().min(1).optional(),
   id: mrrlinInboxItemIdSchema,
   kind: mrrlinInboxItemKindSchema,
+  origin: external_exports.string().min(1).optional(),
+  planId: mrrlinPlanIdSchema.nullable().optional(),
   taskId: mrrlinTaskIdSchema.nullable().optional()
 });
 var mrrlinInboxItemDecideSchema = external_exports.object({
@@ -37412,18 +37451,18 @@ function createMrrlinClient(config2) {
   const customFetch = config2.fetch ?? globalThis.fetch;
   const baseUrl = config2.baseUrl.replace(/\/$/, "");
   const token = config2.token;
-  async function request(path16, init) {
+  async function request(path15, init) {
     const method = init?.method ?? "GET";
     const headers = new Headers(init?.headers ?? {});
     if (token && !headers.has("authorization")) {
       headers.set("authorization", `Bearer ${token}`);
     }
-    const response = await customFetch(`${baseUrl}${path16}`, { ...init, headers });
+    const response = await customFetch(`${baseUrl}${path15}`, { ...init, headers });
     if (!response.ok) {
       const body = await response.text();
       let code = `HTTP_${response.status}`;
       let violations = null;
-      let message = `Mrrlin API ${method} ${path16} failed: ${response.status}`;
+      let message = `Mrrlin API ${method} ${path15} failed: ${response.status}`;
       try {
         const parsed = JSON.parse(body);
         const violationsParsed = apiViolationsErrorSchema.safeParse(parsed);
@@ -37443,7 +37482,7 @@ function createMrrlinClient(config2) {
       throw new MrrlinApiError({
         code,
         method,
-        path: path16,
+        path: path15,
         responseBody: body,
         status: response.status,
         violations,
@@ -37531,6 +37570,14 @@ function createMrrlinClient(config2) {
       });
       return projectSummaryResponseSchema.parse(body).data;
     },
+    async transitionOnboardingKickoff(projectSlug, input) {
+      const body = await request(`${projectPath(projectSlug)}/onboarding-kickoff`, {
+        body: JSON.stringify(mrrlinOnboardingKickoffTransitionSchema.parse(input)),
+        headers: { "content-type": "application/json" },
+        method: "PATCH"
+      });
+      return mrrlinOnboardingKickoffTransitionResponseSchema.parse(body).data.applied;
+    },
     async createTaskDependency(projectSlug, input) {
       const body = await request(`${projectPath(projectSlug)}/task-dependencies`, {
         body: JSON.stringify(input),
@@ -37690,7 +37737,7 @@ function createMrrlinClient(config2) {
       return taskEventListResponseSchema.parse(body).data;
     },
     async listTasks(projectSlug, filters = {}) {
-      const path16 = appendQuery(`${projectPath(projectSlug)}/tasks`, {
+      const path15 = appendQuery(`${projectPath(projectSlug)}/tasks`, {
         assignee: filters.assignee,
         autonomyLevel: filters.autonomyLevel,
         blockedBy: filters.blockedBy,
@@ -37702,7 +37749,7 @@ function createMrrlinClient(config2) {
         subcategory: filters.subcategory,
         type: filters.type
       });
-      const body = await request(path16);
+      const body = await request(path15);
       return taskListResponseSchema.parse(body).data;
     },
     async listTaxonomy(projectSlug) {
@@ -37710,22 +37757,22 @@ function createMrrlinClient(config2) {
       return taxonomyListResponseSchema.parse(body).data;
     },
     async listWikiPages(projectSlug, filters = {}) {
-      const path16 = appendQuery(`${projectPath(projectSlug)}/wiki`, {
+      const path15 = appendQuery(`${projectPath(projectSlug)}/wiki`, {
         folder: filters.folder,
         q: filters.q,
         taskId: filters.taskId
       });
-      const body = await request(path16);
+      const body = await request(path15);
       return wikiPageListResponseSchema.parse(body).data;
     },
     async searchWikiPages(projectSlug, query) {
-      const path16 = appendQuery(`${projectPath(projectSlug)}/wiki/search`, {
+      const path15 = appendQuery(`${projectPath(projectSlug)}/wiki/search`, {
         folder: query.folder,
         limit: query.limit === void 0 ? void 0 : String(query.limit),
         pathPrefix: query.pathPrefix,
         q: query.q
       });
-      const body = await request(path16);
+      const body = await request(path15);
       return wikiPageSearchResponseSchema.parse(body).data;
     },
     async updatePlan(projectSlug, planId, patch) {
@@ -38442,7 +38489,7 @@ Do NOT derail the current task \u2014 if the operator has an in-flight question,
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.3.4";
+var PKG_VERSION = "0.3.7";
 
 // src/api-base-url.ts
 var DEFAULT_API_BASE_URL = "http://127.0.0.1:8787";
@@ -38826,6 +38873,41 @@ async function sweepOrphanWorktrees(opts) {
   return reaped;
 }
 
+// src/pr-body.ts
+function isSafeAbsoluteUrl(url2) {
+  try {
+    const protocol = new URL(url2).protocol;
+    return protocol === "http:" || protocol === "https:";
+  } catch {
+    return false;
+  }
+}
+function escapeMarkdown(text) {
+  return text.replace(/([\\`[\]])/g, "\\$1");
+}
+function buildPullRequestBody(input) {
+  const plain = `Automated change for run \`${input.runId}\` (task ${input.taskId}).`;
+  const seen = /* @__PURE__ */ new Set();
+  const lines2 = [];
+  for (const { url: url2, label } of input.producedUrls) {
+    if (seen.has(url2)) continue;
+    seen.add(url2);
+    if (url2.startsWith("/")) {
+      const note = label ? `${escapeMarkdown(label)} \u2014 ` : "";
+      lines2.push(`- ${note}\`${escapeMarkdown(url2)}\` (deploy-relative)`);
+      continue;
+    }
+    if (!isSafeAbsoluteUrl(url2)) continue;
+    const text = escapeMarkdown(label ?? "Page");
+    lines2.push(`- [${text}](${url2})`);
+  }
+  if (lines2.length === 0) return plain;
+  return `${plain}
+
+## Produced pages
+${lines2.join("\n")}`;
+}
+
 // src/execution-consumer.ts
 var DEFAULT_STALE_SECONDS = 300;
 var DEFAULT_TOUCH_INTERVAL_MS = 6e4;
@@ -38868,6 +38950,16 @@ var BASE_INSTRUCTIONS_PREFIX = [
   "  or evidence page will reference (180 days). Always pass taskId/runId when known.",
   "- Anything user-facing delivered as a file MUST be uploaded. Files are capped at 5MB \u2014",
   "  split or summarize larger outputs.",
+  "",
+  "Browser tools (when the run needs to drive a browser):",
+  "- Use tools from the `mrrlin-browser` MCP server ONLY \u2014 browser_navigate, browser_click,",
+  "  browser_snapshot, browser_type, etc. Never invoke the same-named tools from any other",
+  "  browser MCP (`playwright`, `chrome-devtools`, `puppeteer`, ...) that may also be connected.",
+  "- Only `mrrlin-browser` uses this project's dedicated, version-pinned Chromium + persistent",
+  "  operator profile (`~/.mrrlin/browser/profile`). Others share the default Playwright profile",
+  "  and lose login/cookie state across runs.",
+  "- If tool listings show duplicate names across servers, prefer the `mrrlin-browser` one",
+  "  unconditionally. Do not switch mid-run.",
   ""
 ];
 var CONSUMER_BASE_INSTRUCTIONS = [
@@ -39200,8 +39292,19 @@ Continue executing task ${task.id}. Make the next concrete increment of progress
         }
         return m;
       });
+      const producedUrls = await (async () => {
+        try {
+          const artifacts = await deps.client.listExecutionArtifacts(projectSlug, runId);
+          return artifacts.filter((a) => a.kind === "produced_url").flatMap((a) => {
+            const parsed = mrrlinProducedUrlPayloadSchema.safeParse(a.payload);
+            return parsed.success ? [parsed.data] : [];
+          });
+        } catch {
+          return [];
+        }
+      })();
       const pr = await deps.client.createGithubPullRequest(projectSlug, {
-        body: `Automated change for run \`${runId}\` (task ${readiness.task.id}).`,
+        body: buildPullRequestBody({ runId, taskId: readiness.task.id, producedUrls }),
         draft: true,
         headBranch: minted.branch,
         title: `[mrrlin] ${readiness.task.title}`
@@ -41014,7 +41117,7 @@ function validateOpts(curve) {
 }
 function twistedEdwards(curveDef) {
   const CURVE = validateOpts(curveDef);
-  const { Fp: Fp2, n: CURVE_ORDER, prehash, hash: cHash, randomBytes: randomBytes3, nByteLength, h: cofactor } = CURVE;
+  const { Fp: Fp2, n: CURVE_ORDER, prehash, hash: cHash, randomBytes: randomBytes4, nByteLength, h: cofactor } = CURVE;
   const MASK = _2n3 << BigInt(nByteLength * 8) - _1n4;
   const modP = Fp2.create;
   const uvRatio2 = CURVE.uvRatio || ((u, v) => {
@@ -41353,7 +41456,7 @@ function twistedEdwards(curveDef) {
   const utils = {
     getExtendedPublicKey,
     // ed25519 private keys are uniform 32b. No need to check for modulo bias, like in secp256k1.
-    randomPrivateKey: () => randomBytes3(Fp2.BYTES),
+    randomPrivateKey: () => randomBytes4(Fp2.BYTES),
     /**
      * We're doing scalar multiplication (used in getPublicKey etc) with precomputed BASE_POINT
      * values. This slows down first getPublicKey() by milliseconds (see Speed section),
@@ -42520,7 +42623,10 @@ function parseFrame(bytes3) {
       };
     }
     case "inbox_read":
-      return { type: "inbox_read" };
+      return {
+        type: "inbox_read",
+        ...isString(f.projectSlug) ? { projectSlug: f.projectSlug } : {}
+      };
     case "inbox_decide":
       if (!isString(f.itemId) || !isString(f.idempotencyKey))
         throw new Error("frame inbox_decide: itemId + idempotencyKey required");
@@ -42533,7 +42639,8 @@ function parseFrame(bytes3) {
         itemId: f.itemId,
         decision: f.decision,
         idempotencyKey: f.idempotencyKey,
-        ...f.reason === void 0 ? {} : { reason: f.reason }
+        ...f.reason === void 0 ? {} : { reason: f.reason },
+        ...isString(f.projectSlug) ? { projectSlug: f.projectSlug } : {}
       };
     case "ack":
       if (!isString(f.refId))
@@ -43279,12 +43386,12 @@ var DirectorRelay = class {
           this.sendFrame(channelId, { type: "ack", refId: frame.idempotencyKey });
           return;
         }
-        await this.deps.onInboxDecide?.(frame.itemId, frame.decision, frame.idempotencyKey, frame.reason);
+        await this.deps.onInboxDecide?.(frame.itemId, frame.decision, frame.idempotencyKey, frame.reason, frame.projectSlug);
         this.seenDecideKeys.add(frame.idempotencyKey);
         this.sendFrame(channelId, { type: "ack", refId: frame.idempotencyKey });
         return;
       case "inbox_read": {
-        const items = await this.deps.onInboxRead?.();
+        const items = await this.deps.onInboxRead?.(frame.projectSlug);
         if (items !== void 0) this.sendDirectorEvent(channelId, { type: "inbox_items", items });
         this.sendFrame(channelId, { type: "ack", refId: "inbox_read" });
         return;
@@ -43312,9 +43419,9 @@ var DirectorRelay = class {
 
 // src/remote-phone-relay.ts
 function loadOrCreateAgentDeviceKey() {
-  const path16 = (0, import_node_path8.join)((0, import_node_os6.homedir)(), ".mrrlin", "agent-device-key");
+  const path15 = (0, import_node_path8.join)((0, import_node_os6.homedir)(), ".mrrlin", "agent-device-key");
   try {
-    const raw = JSON.parse((0, import_node_fs7.readFileSync)(path16, "utf8"));
+    const raw = JSON.parse((0, import_node_fs7.readFileSync)(path15, "utf8"));
     if (typeof raw.priv === "string" && typeof raw.pub === "string") {
       return { privateKey: fromBase64Url(raw.priv), publicKey: fromBase64Url(raw.pub) };
     }
@@ -43324,7 +43431,7 @@ function loadOrCreateAgentDeviceKey() {
   try {
     (0, import_node_fs7.mkdirSync)((0, import_node_path8.join)((0, import_node_os6.homedir)(), ".mrrlin"), { recursive: true });
     (0, import_node_fs7.writeFileSync)(
-      path16,
+      path15,
       JSON.stringify({ priv: toBase64Url(kp.privateKey), pub: toBase64Url(kp.publicKey) }),
       { mode: 384 }
     );
@@ -43429,30 +43536,38 @@ function decisionToVerdict(decision) {
       throw new Error(`remote-relay: unknown inbox decision "${decision}"`);
   }
 }
-function startRemotePhoneRelay(deps) {
-  const log = deps.log ?? ((m) => process.stderr.write(`[mrrlin-mcp remote-relay] ${m}
-`));
-  const provider = createAgentTokenProvider({ secret: deps.agentSecret, baseUrl: deps.apiBaseUrl });
-  const authed = async () => {
+function _makeRelayInboxCallbacks(provider, apiBaseUrl) {
+  const authed = async (frameSlug) => {
     const session = await provider.getSession();
+    const slug = frameSlug ?? session.projectSlug;
+    if (!slug) {
+      throw new Error("[mrrlin-mcp remote-relay] missing project context for inbox action");
+    }
     return {
-      client: createMrrlinClient({ baseUrl: deps.apiBaseUrl, token: session.token }),
-      slug: session.projectSlug,
+      client: createMrrlinClient({ baseUrl: apiBaseUrl, token: session.token }),
+      slug,
       login: session.login
     };
   };
-  const onInboxRead = async () => {
-    const { client, slug } = await authed();
+  const onInboxRead = async (projectSlug) => {
+    const { client, slug } = await authed(projectSlug);
     return boundInboxItems(await client.listInboxItems(slug, { status: "pending" }));
   };
-  const onInboxDecide = async (itemId, decision, _key, reason) => {
-    const { client, slug, login } = await authed();
+  const onInboxDecide = async (itemId, decision, _key, reason, projectSlug) => {
+    const { client, slug, login } = await authed(projectSlug);
     await client.decideInboxItem(slug, itemId, {
       verdict: decisionToVerdict(decision),
       decidedBy: login,
       ...reason ? { reason } : {}
     });
   };
+  return { onInboxRead, onInboxDecide };
+}
+function startRemotePhoneRelay(deps) {
+  const log = deps.log ?? ((m) => process.stderr.write(`[mrrlin-mcp remote-relay] ${m}
+`));
+  const provider = createAgentTokenProvider({ secret: deps.agentSecret, baseUrl: deps.apiBaseUrl });
+  const { onInboxRead, onInboxDecide } = _makeRelayInboxCallbacks(provider, deps.apiBaseUrl);
   const relayClient = new RelayClient({
     relayUrl: deps.relayUrl,
     now: () => Date.now(),
@@ -43539,9 +43654,9 @@ var CheckoutRegistry = class {
   get(slug) {
     return this.read()[slug] ?? null;
   }
-  confirm(slug, path16, now) {
+  confirm(slug, path15, now) {
     const all = this.read();
-    all[slug] = { path: path16, confirmedAt: now };
+    all[slug] = { path: path15, confirmedAt: now };
     (0, import_node_fs8.writeFileSync)(this.file, JSON.stringify(all, null, 2));
   }
 };
@@ -43957,336 +44072,6 @@ function createBridgeLogger(stateDir, env = process.env) {
   };
 }
 
-// src/issue-report.ts
-var import_node_fs11 = require("node:fs");
-var import_node_os8 = require("node:os");
-var import_node_path12 = __toESM(require("node:path"), 1);
-var import_node_child_process4 = require("node:child_process");
-var TELEGRAM_BOT_TOKEN = "8506614214:AAGyhO1phWb7ah2aN6_gAX2Co7OXNN3zb0A";
-var TELEGRAM_CHAT_ID = "-5373779177";
-function summarizeTranscript(entries = []) {
-  const normalized = entries.map((entry) => ({
-    kind: entry.kind,
-    content: squashWhitespace(entry.content)
-  })).filter((entry) => entry.content.length > 0);
-  if (normalized.length <= 20) return normalized;
-  return normalized.slice(normalized.length - 20);
-}
-function squashWhitespace(value) {
-  return value.replace(/\s+/g, " ").trim();
-}
-function clip(value, maxChars) {
-  if (value.length <= maxChars) return value;
-  return `${value.slice(0, Math.max(0, maxChars - 1))}\u2026`;
-}
-function firstSentence(value) {
-  const trimmed = squashWhitespace(value);
-  if (!trimmed) return "";
-  const match = trimmed.match(/^(.{1,120}?[.!?])(?:\s|$)/);
-  return match?.[1] ? squashWhitespace(match[1]) : clip(trimmed, 120);
-}
-function describePayload(payload) {
-  if (typeof payload === "string") return payload;
-  try {
-    return JSON.stringify(payload);
-  } catch {
-    return String(payload);
-  }
-}
-function resolveLogDir() {
-  const codexHome = process.env.CODEX_HOME?.trim();
-  if (codexHome) {
-    const candidate = import_node_path12.default.join(codexHome, "mrrlin", "director-bridge", "logs");
-    if (existsDir(candidate)) return candidate;
-  }
-  const fallback = import_node_path12.default.join((0, import_node_os8.homedir)(), ".mrrlin", "director-bridge", "logs");
-  return fallback;
-}
-function existsDir(candidate) {
-  try {
-    return (0, import_node_fs11.statSync)(candidate).isDirectory();
-  } catch {
-    return false;
-  }
-}
-function listRecentLogFiles(logDir) {
-  if (!existsDir(logDir)) return [];
-  return (0, import_node_fs11.readdirSync)(logDir).filter((name) => /^bridge-\d{4}-\d{2}-\d{2}\.jsonl$/.test(name)).sort((a, b) => b.localeCompare(a)).slice(0, 3).map((name) => import_node_path12.default.join(logDir, name));
-}
-function parseLogFile(file2) {
-  const lines2 = (0, import_node_fs11.readFileSync)(file2, "utf8").split(/\r?\n/).filter(Boolean);
-  const parsed = [];
-  for (const rawLine of lines2) {
-    try {
-      const raw = JSON.parse(rawLine);
-      if (typeof raw.ts !== "string" || typeof raw.type !== "string" || typeof raw.spanId !== "string") continue;
-      parsed.push({
-        ts: raw.ts,
-        dir: raw.dir === "in" ? "in" : "out",
-        spanId: raw.spanId,
-        sessionId: typeof raw.sessionId === "string" ? raw.sessionId : null,
-        type: raw.type,
-        ms: typeof raw.ms === "number" ? raw.ms : void 0,
-        payload: raw.payload,
-        rawLine,
-        file: file2
-      });
-    } catch {
-    }
-  }
-  return parsed;
-}
-function looksLikeError(record2) {
-  if (record2.type === "error" || record2.type === "<parse-error>") return true;
-  const text = `${record2.type} ${describePayload(record2.payload)}`.toLowerCase();
-  return /(^|[^a-z])(error|failed|failure|timed out|timeout|unauthorized|forbidden|invalid|closed before returning a reply)([^a-z]|$)/.test(
-    text
-  );
-}
-function buildKeywordSet(input) {
-  return Array.from(
-    new Set(
-      input.toLowerCase().split(/[^a-z0-9_:-]+/).map((part) => part.trim()).filter((part) => part.length >= 4)
-    )
-  ).slice(0, 8);
-}
-function pickCluster(records, index) {
-  const from = Math.max(0, index - 10);
-  const to = Math.min(records.length, index + 31);
-  return records.slice(from, to);
-}
-function findRelevantLogWindow(request, opts = {}) {
-  const logDir = opts.logDir ?? resolveLogDir();
-  const files = listRecentLogFiles(logDir);
-  if (files.length === 0) {
-    return { strategy: "no-log", matchedOn: "(log directory missing or empty)", records: [], file: null };
-  }
-  const allRecords = files.flatMap((file2) => parseLogFile(file2));
-  if (allRecords.length === 0) {
-    return { strategy: "no-log", matchedOn: "(no readable JSONL records)", records: [], file: files[0] ?? null };
-  }
-  const directorSessionId = request.directorSessionId?.trim() || "";
-  if (directorSessionId) {
-    const sessionRecords = allRecords.filter((record2) => record2.sessionId === directorSessionId);
-    if (sessionRecords.length > 0) {
-      for (let index = sessionRecords.length - 1; index >= 0; index -= 1) {
-        const record2 = sessionRecords[index];
-        if (!record2 || !looksLikeError(record2)) continue;
-        const cluster = pickCluster(sessionRecords, index);
-        return {
-          strategy: "session-error-cluster",
-          matchedOn: clip(record2.rawLine, 160),
-          records: cluster,
-          file: record2.file
-        };
-      }
-      return {
-        strategy: "session-tail",
-        matchedOn: `directorSessionId=${directorSessionId}`,
-        records: sessionRecords.slice(Math.max(0, sessionRecords.length - 30)),
-        file: sessionRecords.at(-1)?.file ?? null
-      };
-    }
-  }
-  const description = request.customerDescription.trim();
-  const keywords = buildKeywordSet(description);
-  if (keywords.length > 0) {
-    for (let index = allRecords.length - 1; index >= 0; index -= 1) {
-      const record2 = allRecords[index];
-      if (!record2) continue;
-      const haystack = `${record2.type} ${describePayload(record2.payload)}`.toLowerCase();
-      if (!keywords.some((keyword) => haystack.includes(keyword))) continue;
-      return {
-        strategy: "hint-cluster",
-        matchedOn: clip(record2.rawLine, 160),
-        records: pickCluster(allRecords, index),
-        file: record2.file
-      };
-    }
-  }
-  for (let index = allRecords.length - 1; index >= 0; index -= 1) {
-    const record2 = allRecords[index];
-    if (!record2 || !looksLikeError(record2)) continue;
-    return {
-      strategy: "global-error-tail",
-      matchedOn: clip(record2.rawLine, 160),
-      records: pickCluster(allRecords, index),
-      file: record2.file
-    };
-  }
-  const tail2 = allRecords.slice(Math.max(0, allRecords.length - 30));
-  return {
-    strategy: "global-error-tail",
-    matchedOn: "(no error cluster; using global tail)",
-    records: tail2,
-    file: tail2.at(-1)?.file ?? null
-  };
-}
-function formatTranscript(entries) {
-  if (entries.length === 0) return "(no transcript context)";
-  return entries.map((entry) => `- ${entry.kind}: ${clip(redact(entry.content), 400)}`).join("\n");
-}
-function formatLogWindow(window) {
-  if (window.records.length === 0) return "(no relevant bridge log lines found)";
-  const preferred = window.records.filter((record2) => looksLikeError(record2)).concat(window.records.filter((record2) => !looksLikeError(record2)));
-  const unique = preferred.filter((record2, index, array2) => array2.findIndex((item) => item.rawLine === record2.rawLine) === index);
-  return clip(
-    unique.map((record2) => {
-      const payload = clip(redact(describePayload(record2.payload)), 360);
-      return `${record2.ts} ${record2.dir} ${record2.type} span=${record2.spanId}${record2.sessionId ? ` session=${record2.sessionId}` : ""} ${payload}`;
-    }).join("\n"),
-    5e3
-  );
-}
-function titlePrefix(source) {
-  return source === "shell-menu" ? "[Web]" : "[Director]";
-}
-function plainTitle(title) {
-  return title.replace(/^\[[^\]]+\]\s*/, "").trim();
-}
-function buildIssueDraft(request, logWindow) {
-  const customerDescription = clip(redact(request.customerDescription.trim() || "(not provided)"), 4e3);
-  const titleStem = firstSentence(customerDescription) || firstSentence(logWindow.records.find((record2) => looksLikeError(record2))?.rawLine ?? "") || "Issue report";
-  const title = clip(`${titlePrefix(request.source)} ${titleStem}`, 96);
-  const transcript = summarizeTranscript(request.transcript ?? []);
-  const screenshotLines = request.screenshots && request.screenshots.length > 0 ? request.screenshots.map((shot) => `- [${shot.filename}](${shot.url})`).join("\n") : "(no screenshots)";
-  const environment = [
-    `- Created at (UTC): ${(/* @__PURE__ */ new Date()).toISOString()}`,
-    `- Source: ${request.source}`,
-    `- Project: ${request.projectSlug?.trim() || "(unknown)"}`,
-    `- Route: ${request.urlPath?.trim() || "(unknown)"}`,
-    `- Director session: ${request.directorSessionId?.trim() || "(none)"}`,
-    `- @mrrlin-dev/mcp: ${PKG_VERSION}`,
-    `- OS: ${(0, import_node_os8.platform)()}`,
-    `- Node: ${process.version}`
-  ].join("\n");
-  const logLabel = logWindow.file ? import_node_path12.default.basename(logWindow.file) : "(none)";
-  const body = [
-    "## Summary",
-    `${titlePrefix(request.source)} issue report generated from local Mrrlin evidence.`,
-    "",
-    "## Customer report",
-    customerDescription,
-    "",
-    "## Observed behavior",
-    `- Log search strategy: ${logWindow.strategy}`,
-    `- Matched on: ${redact(logWindow.matchedOn)}`,
-    "",
-    "## Director / shell context",
-    environment,
-    "",
-    `## Bridge log excerpt (${logLabel})`,
-    "```text",
-    formatLogWindow(logWindow),
-    "```",
-    "",
-    "## Transcript excerpt",
-    "```text",
-    formatTranscript(transcript),
-    "```",
-    "",
-    "## Screenshots",
-    screenshotLines
-  ].join("\n");
-  return { title, body, labels: ["bug"] };
-}
-function buildTelegramAnnouncement(request, draft, issueUrl) {
-  const summary = firstSentence(redact(request.customerDescription.trim())) || firstSentence(plainTitle(draft.title)) || "\u043D\u0435\u0432\u0456\u0434\u0442\u0432\u043E\u0440\u0435\u043D\u0430 \u043F\u0440\u043E\u0431\u043B\u0435\u043C\u0430";
-  return `\u0437\u0430\u0440\u0435\u043F\u043E\u0440\u0447\u0435\u043D\u043E \u043D\u043E\u0432\u0438\u0439 \u0431\u0430\u0433, \u043A\u043E\u0440\u043E\u0442\u043A\u043E: ${clip(summary, 280)}
-${issueUrl}`;
-}
-function ensureGhReady() {
-  const auth = (0, import_node_child_process4.spawnSync)("gh", ["auth", "status", "-h", "github.com"], { encoding: "utf8" });
-  if (auth.status !== 0) {
-    const detail = (auth.stderr || auth.stdout || "gh auth status failed").trim();
-    throw new Error(`GitHub CLI is not ready: ${detail}`);
-  }
-}
-function createGithubIssue(draft) {
-  ensureGhReady();
-  const tmpDir = (0, import_node_fs11.mkdtempSync)(import_node_path12.default.join((0, import_node_os8.tmpdir)(), "mrrlin-issue-"));
-  const bodyFile = import_node_path12.default.join(tmpDir, "issue-body.md");
-  try {
-    (0, import_node_fs11.writeFileSync)(bodyFile, draft.body, "utf8");
-    const args = ["issue", "create", "--repo", "fnnzzz/mrrlin", "--title", draft.title, "--body-file", bodyFile];
-    for (const label of draft.labels) args.push("--label", label);
-    const result = (0, import_node_child_process4.spawnSync)("gh", args, { encoding: "utf8" });
-    if (result.status !== 0) {
-      const detail = (result.stderr || result.stdout || "gh issue create failed").trim();
-      throw new Error(detail);
-    }
-    const url2 = (result.stdout || "").trim().split(/\s+/).at(-1) ?? "";
-    if (!/^https?:\/\//.test(url2)) {
-      throw new Error(`Issue created but URL could not be parsed from gh output: ${result.stdout.trim()}`);
-    }
-    const numberMatch = url2.match(/\/issues\/(\d+)$/);
-    return { issueNumber: numberMatch ? Number(numberMatch[1]) : null, url: url2 };
-  } finally {
-    (0, import_node_fs11.rmSync)(tmpDir, { recursive: true, force: true });
-  }
-}
-function sendTelegramAnnouncement(text) {
-  const tmpDir = (0, import_node_fs11.mkdtempSync)(import_node_path12.default.join((0, import_node_os8.tmpdir)(), "mrrlin-issue-telegram-"));
-  const bodyFile = import_node_path12.default.join(tmpDir, "telegram-body.json");
-  try {
-    (0, import_node_fs11.writeFileSync)(
-      bodyFile,
-      JSON.stringify({
-        chat_id: TELEGRAM_CHAT_ID,
-        text,
-        disable_web_page_preview: true
-      }),
-      "utf8"
-    );
-    const result = (0, import_node_child_process4.spawnSync)(
-      "curl",
-      [
-        "-sS",
-        "-X",
-        "POST",
-        `https://api.telegram.org/bot${TELEGRAM_BOT_TOKEN}/sendMessage`,
-        "-H",
-        "Content-Type: application/json",
-        "--data-binary",
-        `@${bodyFile}`
-      ],
-      { encoding: "utf8" }
-    );
-    if (result.error) {
-      return `Telegram announce failed: ${result.error.message}`;
-    }
-    if (result.status !== 0) {
-      const detail = (result.stderr || result.stdout || "curl failed").trim();
-      return `Telegram announce failed: ${detail}`;
-    }
-    let parsed = null;
-    try {
-      parsed = JSON.parse(result.stdout || "{}");
-    } catch {
-      return `Telegram announce failed: could not parse response: ${result.stdout.trim()}`;
-    }
-    if (!parsed?.ok) {
-      return `Telegram announce failed: ${parsed?.description || "unknown Telegram error"}`;
-    }
-    return null;
-  } finally {
-    (0, import_node_fs11.rmSync)(tmpDir, { recursive: true, force: true });
-  }
-}
-function fileIssueReport(request, opts = {}) {
-  const logWindow = findRelevantLogWindow(request, opts);
-  const draft = buildIssueDraft(request, logWindow);
-  const created = createGithubIssue(draft);
-  const telegramWarning = sendTelegramAnnouncement(buildTelegramAnnouncement(request, draft, created.url));
-  return {
-    issueNumber: created.issueNumber,
-    title: draft.title,
-    url: created.url,
-    telegramDelivered: telegramWarning === null,
-    telegramWarning
-  };
-}
-
 // src/director-bridge.ts
 var DEFAULT_DIRECTOR_BRIDGE_ALLOWED_ORIGINS = [
   "http://localhost:*",
@@ -44308,46 +44093,10 @@ function normalizeModel(value) {
   const trimmed = value.trim();
   return trimmed ? trimmed : null;
 }
-function normalizeIssueTranscript(value) {
-  if (value === void 0 || value === null) return [];
-  if (!Array.isArray(value)) return { error: "transcript must be an array." };
-  const transcript = [];
-  for (const entry of value.slice(0, 20)) {
-    if (!entry || typeof entry !== "object") return { error: "transcript entries must be objects." };
-    const kind = entry.kind;
-    const content = entry.content;
-    if (kind !== "user" && kind !== "assistant" && kind !== "error" && kind !== "tool") {
-      return { error: "transcript entry kind is invalid." };
-    }
-    if (typeof content !== "string") return { error: "transcript entry content must be a string." };
-    const trimmed = content.trim();
-    if (!trimmed) continue;
-    transcript.push({ kind, content: trimmed });
-  }
-  return transcript;
-}
-function normalizeIssueScreenshots(value) {
-  if (value === void 0 || value === null) return [];
-  if (!Array.isArray(value)) return { error: "screenshots must be an array." };
-  const screenshots = [];
-  for (const entry of value.slice(0, 3)) {
-    if (!entry || typeof entry !== "object") return { error: "screenshots entries must be objects." };
-    const filename = entry.filename;
-    const url2 = entry.url;
-    if (typeof filename !== "string" || !filename.trim()) {
-      return { error: "screenshot filename is required." };
-    }
-    if (typeof url2 !== "string" || !/^https?:\/\//.test(url2)) {
-      return { error: "screenshot url must be an absolute http(s) URL." };
-    }
-    screenshots.push({ filename: filename.trim(), url: url2.trim() });
-  }
-  return screenshots;
-}
 function neutralCheckoutCwd(stateDir) {
-  const dir = import_node_path13.default.join(stateDir, "no-checkout");
+  const dir = import_node_path12.default.join(stateDir, "no-checkout");
   try {
-    import_node_fs12.default.mkdirSync(dir, { recursive: true });
+    import_node_fs11.default.mkdirSync(dir, { recursive: true });
   } catch {
   }
   return dir;
@@ -44356,12 +44105,19 @@ function buildThreadStartParams(msg, config2, desiredModel) {
   const baseInstructions = [
     "You are the Mrrlin Director assistant.",
     "You can call MCP tools to read and write project state.",
-    "Prefer calling tools over guessing. Be concise. Ask clarification questions only when needed.",
+    "Prefer calling tools over guessing. Be concise.",
+    "Autonomy level is NOT a reason to skip clarification. `auto` means only that no human gate is",
+    "required before the result LANDS (merge/deploy); it does not authorize building on unvalidated",
+    "assumptions. Judge clarification on requirement clarity, independently of autonomy_level.",
     "Never announce or pre-narrate that you are about to use tools, and never name the toolset in",
     `prose. Do NOT write openers like "I'll use the Mrrlin tools to\u2026", "\u0412\u0438\u043A\u043E\u0440\u0438\u0441\u0442\u0430\u044E Mrrlin tools\u2026",`,
     'or "let me call the \u2026 tool" in ANY language. The operator already sees tool calls in the',
     "transcript. Just call the tools and reply with the outcome \u2014 start your reply with the result.",
     "When creating or updating tasks, always provide `autonomyLevel` and `autonomyReason`.",
+    "When you create a task out of an operator request, set `operatorSeedRequest` to the operator's",
+    "VERBATIM words (their request as they wrote it \u2014 NOT your paraphrase or synthesized notes). It is",
+    "the spec gate's independent record of intent; omit it only when there is genuinely no operator",
+    "request behind the task (pure system bookkeeping) \u2014 note that omitting it makes the gate fail-closed.",
     "",
     "Spec authoring contract \u2014 when creating or updating a `Specs/{id}` wiki page:",
     "- In `## Specification`, write each requirement as `### Requirement: <name>` followed by one",
@@ -44372,6 +44128,7 @@ function buildThreadStartParams(msg, config2, desiredModel) {
     "- Apply this format ONLY to Specs/{id} pages; do not retro-fit it onto other wiki page types.",
     "- Spec consensus runs ASYNCHRONOUSLY. Call `run_spec_consensus` for a `Specs/{id}` page; it returns IMMEDIATELY. On `already_converged`, the spec is already marked ready \u2014 proceed straight to `create_execution_run`; do NOT call `mark_spec_ready` and do NOT re-run consensus. On `queued` or `already_running`, tell the user it was launched and END your turn \u2014 do NOT poll or call it again; the result arrives in the inbox (an `info` item on CONVERGED, a `handoff` item if it was blocked/failed). When a consensus `info` item says CONVERGED, proceed to `create_execution_run`. When a `handoff` says it was blocked, address the recorded issues in the spec (any edit re-arms the gate) and call `run_spec_consensus` once more.",
     '- When a task needs a browser (login flows, UI verification/clicks, scraping), pass `prerequisites:[{mcp:"mrrlin-browser",reason:"..."}]` to `create_execution_run`. If that run later fails into a handoff, the operator gets a one-click "Launch browser & resume" that brings up the dedicated browser as the turn starts.',
+    "- When you actually drive a browser (calling `browser_navigate`, `browser_click`, `browser_snapshot`, `browser_type`, etc.), invoke those tools from the **`mrrlin-browser`** MCP server ONLY. Do NOT use tools from any other browser MCP (`playwright`, `chrome-devtools`, `puppeteer`, etc.) even if they are also connected on this operator's box \u2014 those use a shared/default Playwright profile that is fragile across runs. Only `mrrlin-browser` uses this project's dedicated Chromium + persistent operator profile (`~/.mrrlin/browser/profile`). If your host exposes multiple browser MCPs with overlapping tool names, prefer the `mrrlin-browser` server unconditionally.",
     "",
     'Research playbook \u2014 when the user asks about a topic, an area, or "what do we have on X":',
     "- Tasks are the source of truth. Start with `list_tasks` using `q=<keyword>`; the filter is a",
@@ -44433,12 +44190,20 @@ function buildThreadStartParams(msg, config2, desiredModel) {
     "  call `list_inbox_items` (kind=question), fold any relevant `acknowledged` TASKLESS answer",
     "  into the new task's Specs/{id} Clarifications, and `reject` (with a reason) any taskless",
     "  question the new task makes moot \u2014 so taskless answers never linger unconsumed.",
-    "- When resuming a task, call `list_inbox_items` (kind=question) and incorporate any",
-    "  `acknowledged` answer not yet reflected in the spec's Clarifications section.",
+    "- Gate-origin questions (origin='gate', filed by the spec consensus gate) are auto-folded",
+    "  into the spec and re-gated by the system when the operator answers them in the inbox.",
+    "  Do NOT fold or `decide_inbox_item` them yourself \u2014 your fold-contract above applies only",
+    "  to YOUR OWN discretionary questions.",
+    "- When resuming a task, call `list_inbox_items` (kind=question) and fold any `acknowledged`",
+    "  answer from YOUR questions (origin is null/absent) not yet reflected into the spec's",
+    "  Clarifications section \u2014 THEN re-run `run_spec_consensus` on the updated spec. Skip",
+    "  gate-origin items (origin='gate') as those are handled automatically.",
     "- If a question becomes moot (task cancelled, superseded, or no longer relevant), close it",
     '  with `decide_inbox_item` `verdict="rejected"` + a `reason`; never leave it pending.',
-    "- Questions are a chat-only mechanism. Do not create question items from non-interactive",
-    "  runs; use the handoff contract above when there is no live operator.",
+    "- YOUR discretionary questions are a chat-only mechanism: do not create question items yourself",
+    "  from non-interactive runs; use the handoff contract above when there is no live operator.",
+    "  The spec consensus GATE, however, may file its own clarification questions on non-interactive",
+    "  runs (that is gate-driven, not your discretion) \u2014 resume them via the rule above when answered.",
     "",
     "Onboarding contract \u2014 seed project context when there is none:",
     `- A project is un-onboarded when it has no \`${PROJECT_CONSTITUTION_PAGE.path}\` wiki page.`,
@@ -44540,7 +44305,7 @@ function resolveDefaultBranch(checkoutPath) {
   if (!checkoutPath) return "main";
   const runGit = (args) => {
     try {
-      return (0, import_node_child_process5.execFileSync)("git", ["-C", checkoutPath, ...args], {
+      return (0, import_node_child_process4.execFileSync)("git", ["-C", checkoutPath, ...args], {
         encoding: "utf8",
         stdio: ["ignore", "pipe", "ignore"],
         timeout: 15e3,
@@ -44572,7 +44337,7 @@ async function runOrphanWorktreeSweep(client, opts) {
   const cutoff = Date.now() - worktreeRetentionMs();
   const isReapable = (worktreePath) => {
     try {
-      return import_node_fs12.default.statSync(worktreePath).mtimeMs < cutoff;
+      return import_node_fs11.default.statSync(worktreePath).mtimeMs < cutoff;
     } catch {
       return false;
     }
@@ -44609,8 +44374,8 @@ async function runOrphanWorktreeSweep(client, opts) {
   }
 }
 function readStateDir() {
-  if (process.env.CODEX_HOME) return import_node_path13.default.join(process.env.CODEX_HOME, "mrrlin", "director-bridge");
-  return import_node_path13.default.join(import_node_os9.default.homedir(), ".mrrlin", "director-bridge");
+  if (process.env.CODEX_HOME) return import_node_path12.default.join(process.env.CODEX_HOME, "mrrlin", "director-bridge");
+  return import_node_path12.default.join(import_node_os8.default.homedir(), ".mrrlin", "director-bridge");
 }
 function readAllowedOrigins() {
   const raw = (process.env.MRRLIN_DIRECTOR_BRIDGE_ALLOWED_ORIGINS ?? "").trim();
@@ -44959,54 +44724,6 @@ function createBridgeMessageHandler(deps) {
         handleResumeRequest(msg, sendForSpan);
         return;
       }
-      if (msg.type === "report_issue") {
-        if (msg.source !== "director-chat" && msg.source !== "director-panel" && msg.source !== "shell-menu") {
-          sendForSpan({ type: "report-issue-result", status: "error", error: "report source is invalid." });
-          return;
-        }
-        const customerDescription = typeof msg.customerDescription === "string" ? msg.customerDescription.trim() : "";
-        if (!customerDescription) {
-          sendForSpan({ type: "report-issue-result", status: "error", error: "customerDescription is required." });
-          return;
-        }
-        const transcript = normalizeIssueTranscript(msg.transcript);
-        if ("error" in transcript) {
-          sendForSpan({ type: "report-issue-result", status: "error", error: transcript.error });
-          return;
-        }
-        const screenshots = normalizeIssueScreenshots(msg.screenshots);
-        if ("error" in screenshots) {
-          sendForSpan({ type: "report-issue-result", status: "error", error: screenshots.error });
-          return;
-        }
-        try {
-          const result = fileIssueReport({
-            source: msg.source,
-            customerDescription,
-            directorSessionId: typeof msg.directorSessionId === "string" ? msg.directorSessionId.trim() || null : null,
-            projectSlug: typeof msg.projectSlug === "string" ? msg.projectSlug.trim() || null : null,
-            urlPath: typeof msg.urlPath === "string" ? msg.urlPath.trim() || null : null,
-            transcript,
-            screenshots
-          });
-          sendForSpan({
-            type: "report-issue-result",
-            status: "ok",
-            issueNumber: result.issueNumber,
-            title: result.title,
-            url: result.url,
-            telegramDelivered: result.telegramDelivered,
-            telegramWarning: result.telegramWarning
-          });
-        } catch (error51) {
-          sendForSpan({
-            type: "report-issue-result",
-            status: "error",
-            error: error51 instanceof Error ? error51.message : String(error51)
-          });
-        }
-        return;
-      }
       if (msg.type === "interrupt") {
         const directorSessionId2 = (msg.directorSessionId ?? "").trim();
         const existing = directorSessionId2 ? deps.threads.get(directorSessionId2) : void 0;
@@ -45390,7 +45107,7 @@ function parseConfig() {
 }
 function scanForOtherBridges() {
   try {
-    const result = (0, import_node_child_process5.spawnSync)("pgrep", ["-f", "mrrlin-mcp director-bridge"], {
+    const result = (0, import_node_child_process4.spawnSync)("pgrep", ["-f", "mrrlin-mcp director-bridge"], {
       encoding: "utf8"
     });
     if (result.status !== 0) return [];
@@ -45522,8 +45239,8 @@ async function startDirectorBridge() {
     codexCwd: config2.codexCwd,
     codexExecutable: config2.codexExecutable,
     checkoutRegistry,
-    worktreeRoot: import_node_path13.default.join(config2.stateDir, "worktrees"),
-    locksDir: import_node_path13.default.join(config2.stateDir, "locks"),
+    worktreeRoot: import_node_path12.default.join(config2.stateDir, "worktrees"),
+    locksDir: import_node_path12.default.join(config2.stateDir, "locks"),
     // Wire the profile-enforced executor server for code-execution runs. Each run gets its own
     // sandboxed Codex instance (scrubbed env, scratch CODEX_HOME, deny-read, egress allowlist).
     // The returned handle's dispose() shuts down the spawned app-server CHILD (manager.shutdown(),
@@ -45556,13 +45273,13 @@ async function startDirectorBridge() {
       },
       runVerificationTurn: createRunVerificationTurn({
         startSandbox: async (egressDomains) => {
-          const cwd = import_node_fs12.default.mkdtempSync(import_node_path13.default.join(import_node_os9.default.tmpdir(), "mrrlin-verify-"));
+          const cwd = import_node_fs11.default.mkdtempSync(import_node_path12.default.join(import_node_os8.default.tmpdir(), "mrrlin-verify-"));
           let handle;
           try {
             handle = await startExecutorServer({ worktree: cwd, egressDomains });
           } catch (error51) {
             try {
-              import_node_fs12.default.rmSync(cwd, { recursive: true, force: true });
+              import_node_fs11.default.rmSync(cwd, { recursive: true, force: true });
             } catch {
             }
             throw error51;
@@ -45573,7 +45290,7 @@ async function startDirectorBridge() {
             dispose: () => {
               handle.dispose();
               try {
-                import_node_fs12.default.rmSync(cwd, { recursive: true, force: true });
+                import_node_fs11.default.rmSync(cwd, { recursive: true, force: true });
               } catch {
               }
             }
@@ -45713,7 +45430,7 @@ async function startDirectorBridge() {
   const bridgeLogger = createBridgeLogger(config2.stateDir, process.env);
   let bridgeBinShaShort = "unknown00000";
   try {
-    bridgeBinShaShort = import_node_crypto5.default.createHash("sha256").update(import_node_fs12.default.readFileSync(process.argv[1] ?? "")).digest("hex").slice(0, 12);
+    bridgeBinShaShort = import_node_crypto5.default.createHash("sha256").update(import_node_fs11.default.readFileSync(process.argv[1] ?? "")).digest("hex").slice(0, 12);
   } catch {
   }
   attachBridgeWss(server, {
@@ -45822,8 +45539,8 @@ async function startDirectorBridge() {
       enqueueRun(
         () => runOrphanWorktreeSweep(client, {
           checkoutRegistry,
-          worktreeRoot: import_node_path13.default.join(config2.stateDir, "worktrees"),
-          locksDir: import_node_path13.default.join(config2.stateDir, "locks")
+          worktreeRoot: import_node_path12.default.join(config2.stateDir, "worktrees"),
+          locksDir: import_node_path12.default.join(config2.stateDir, "locks")
         })
       );
       enqueueRun(async () => {
@@ -46035,15 +45752,15 @@ function readDispatchBody(req) {
 function readOrCreateBridgeToken(stateDir) {
   const explicit = (process.env.MRRLIN_DIRECTOR_BRIDGE_TOKEN ?? "").trim();
   if (explicit) return explicit;
-  const tokenPath = import_node_path13.default.join(stateDir, "token.txt");
+  const tokenPath = import_node_path12.default.join(stateDir, "token.txt");
   try {
-    const existing = import_node_fs12.default.readFileSync(tokenPath, "utf8").trim();
+    const existing = import_node_fs11.default.readFileSync(tokenPath, "utf8").trim();
     if (existing) return existing;
   } catch {
   }
-  import_node_fs12.default.mkdirSync(stateDir, { recursive: true, mode: 448 });
+  import_node_fs11.default.mkdirSync(stateDir, { recursive: true, mode: 448 });
   const token = import_node_crypto5.default.randomBytes(32).toString("base64url");
-  import_node_fs12.default.writeFileSync(tokenPath, `${token}
+  import_node_fs11.default.writeFileSync(tokenPath, `${token}
 `, { mode: 384 });
   return token;
 }
@@ -49425,18 +49142,19 @@ var StdioServerTransport = class {
 };
 
 // src/tools.ts
+var import_node_crypto8 = require("node:crypto");
 var import_promises3 = require("node:fs/promises");
-var import_node_fs14 = require("node:fs");
-var import_node_path16 = __toESM(require("node:path"), 1);
-var import_node_os10 = __toESM(require("node:os"), 1);
-var import_node_child_process8 = require("node:child_process");
+var import_node_fs13 = require("node:fs");
+var import_node_path15 = __toESM(require("node:path"), 1);
+var import_node_os9 = __toESM(require("node:os"), 1);
+var import_node_child_process7 = require("node:child_process");
 
 // ../../packages/wiki/dist/index.js
 var import_promises2 = __toESM(require("node:fs/promises"), 1);
-var import_node_path14 = __toESM(require("node:path"), 1);
+var import_node_path13 = __toESM(require("node:path"), 1);
 var INCLUDED_DOC_FOLDERS = /* @__PURE__ */ new Set(["_meta", "explanation", "how-to", "reference", "sdd", "tutorials"]);
 function toPosixPath(input) {
-  return input.split(import_node_path14.default.sep).join("/");
+  return input.split(import_node_path13.default.sep).join("/");
 }
 function slugifyWikiSegment(input) {
   return input.trim().toLowerCase().replace(/`/g, "").replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
@@ -49450,12 +49168,12 @@ async function pathExists2(input) {
   }
 }
 async function findWorkspaceRoot(start = process.cwd()) {
-  let current = import_node_path14.default.resolve(start);
+  let current = import_node_path13.default.resolve(start);
   while (true) {
-    if (await pathExists2(import_node_path14.default.join(current, "pnpm-workspace.yaml")) && await pathExists2(import_node_path14.default.join(current, "docs"))) {
+    if (await pathExists2(import_node_path13.default.join(current, "pnpm-workspace.yaml")) && await pathExists2(import_node_path13.default.join(current, "docs"))) {
       return current;
     }
-    const parent = import_node_path14.default.dirname(current);
+    const parent = import_node_path13.default.dirname(current);
     if (parent === current) {
       throw new Error(`Unable to find Mrrlin workspace root from ${start}`);
     }
@@ -49464,28 +49182,28 @@ async function findWorkspaceRoot(start = process.cwd()) {
 }
 async function resolveDocsRoot(input) {
   if (input) {
-    return import_node_path14.default.resolve(input);
+    return import_node_path13.default.resolve(input);
   }
   if (process.env.MRRLIN_DOCS_ROOT) {
-    return import_node_path14.default.resolve(process.env.MRRLIN_DOCS_ROOT);
+    return import_node_path13.default.resolve(process.env.MRRLIN_DOCS_ROOT);
   }
-  return import_node_path14.default.join(await findWorkspaceRoot(), "docs");
+  return import_node_path13.default.join(await findWorkspaceRoot(), "docs");
 }
 async function resolveIndexPath(input) {
   if (input) {
-    return import_node_path14.default.resolve(input);
+    return import_node_path13.default.resolve(input);
   }
   if (process.env.MRRLIN_WIKI_INDEX_PATH) {
-    return import_node_path14.default.resolve(process.env.MRRLIN_WIKI_INDEX_PATH);
+    return import_node_path13.default.resolve(process.env.MRRLIN_WIKI_INDEX_PATH);
   }
   const workspaceRoot = await findWorkspaceRoot();
-  return import_node_path14.default.join(workspaceRoot, "apps", "web", "public", "wiki-index.json");
+  return import_node_path13.default.join(workspaceRoot, "apps", "web", "public", "wiki-index.json");
 }
 async function walkMarkdownFiles(root, dir = root) {
   const entries = await import_promises2.default.readdir(dir, { withFileTypes: true });
   const files = [];
   for (const entry of entries) {
-    const absolute = import_node_path14.default.join(dir, entry.name);
+    const absolute = import_node_path13.default.join(dir, entry.name);
     if (entry.isDirectory()) {
       files.push(...await walkMarkdownFiles(root, absolute));
       continue;
@@ -49504,7 +49222,7 @@ function parseTitle(markdown, sourcePath) {
   return title;
 }
 function documentFromFile(docsRoot, absolutePath, markdown) {
-  const relativePath = toPosixPath(import_node_path14.default.relative(docsRoot, absolutePath));
+  const relativePath = toPosixPath(import_node_path13.default.relative(docsRoot, absolutePath));
   const [section, fileName] = relativePath.split("/");
   if (!section || !fileName || !INCLUDED_DOC_FOLDERS.has(section)) {
     return null;
@@ -49802,6 +49520,19 @@ ${dismissedFwd.slice(-20).join("\n")}` : "";
 var SPEC_HEADS = ["plan-reviewer", "architect", "security-analyst", "scope-analyst"];
 async function runSpecGate(_target, deps, opts) {
   if (!await deps.consensusEnabled()) return { outcome: "SKIPPED" };
+  const intent = await deps.readIntent();
+  if (intent.taskId !== null && (intent.seed === null || intent.seed.trim() === "")) {
+    return {
+      outcome: "CONSENSUS_BLOCKED",
+      clarifications: [
+        {
+          question: "What are the requirements for this task? There is no operator request on record, so the spec cannot be validated against your intent \u2014 please state what this task must do.",
+          whyBlocking: "operator_seed_request is empty",
+          category: "scope"
+        }
+      ]
+    };
+  }
   const extraHeads = opts?.extraHeads ?? [];
   const heads = [...SPEC_HEADS, ...extraHeads.filter((h) => !SPEC_HEADS.includes(h))];
   const spec = await deps.readSpec();
@@ -49843,6 +49574,15 @@ async function runSpecGate(_target, deps, opts) {
     await deps.promoteSpecReady(currentHash);
     return { outcome: "CONVERGED" };
   }
+  if (result.outcome === "CONSENSUS_BLOCKED") {
+    const accepted = result.history.at(-1)?.accepted ?? [];
+    const clarifications = accepted.filter((issue2) => issue2.category === "ambiguity" || issue2.category === "scope").map((issue2) => ({
+      question: issue2.text,
+      whyBlocking: `reviewer raised a ${issue2.category} issue`,
+      category: issue2.category
+    }));
+    return clarifications.length > 0 ? { outcome: "CONSENSUS_BLOCKED", clarifications } : { outcome: "CONSENSUS_BLOCKED" };
+  }
   return { outcome: result.outcome };
 }
 
@@ -49919,7 +49659,7 @@ async function runCodeGate(_target, deps) {
 }
 
 // src/consensus/codex-exec.ts
-var import_node_child_process6 = require("node:child_process");
+var import_node_child_process5 = require("node:child_process");
 function extractFinalMessage(stdout) {
   let last = null;
   for (const rawLine of stdout.split(/\r?\n/)) {
@@ -49964,7 +49704,7 @@ function firstString(...values) {
   return null;
 }
 function runCodexExec(input, deps) {
-  const spawn2 = deps?.spawn ?? import_node_child_process6.spawn;
+  const spawn2 = deps?.spawn ?? import_node_child_process5.spawn;
   const executable = input.codexExecutable ?? "codex";
   const sandbox = input.sandbox ?? "read-only";
   const fullPrompt = input.developerInstructions.trim() ? `${input.developerInstructions.trim()}
@@ -50036,12 +49776,12 @@ function errMessage(err) {
 }
 
 // src/consensus/wiring.ts
-var import_node_fs13 = __toESM(require("node:fs"), 1);
-var import_node_path15 = __toESM(require("node:path"), 1);
+var import_node_fs12 = __toESM(require("node:fs"), 1);
+var import_node_path14 = __toESM(require("node:path"), 1);
 var import_node_url2 = require("node:url");
 
 // src/consensus/code-gate-git.ts
-var import_node_child_process7 = require("node:child_process");
+var import_node_child_process6 = require("node:child_process");
 var DIFF_MAX_BYTES = 2e5;
 var FASTGATE_OUTPUT_MAX_BYTES = 16e3;
 var GIT_TIMEOUT_MS = 6e4;
@@ -50057,7 +49797,7 @@ var defaultRunCmd = (cmd, args, opts) => new Promise((resolve) => {
   };
   let child;
   try {
-    child = (0, import_node_child_process7.spawn)(cmd, args, {
+    child = (0, import_node_child_process6.spawn)(cmd, args, {
       cwd: opts.cwd,
       env: process.env,
       shell: false,
@@ -50272,15 +50012,15 @@ ${res.stdout}${res.stderr}`);
 var import_meta2 = {};
 function getPersonasDir() {
   if (typeof __dirname !== "undefined") {
-    return import_node_path15.default.join(__dirname, "consensus", "personas");
+    return import_node_path14.default.join(__dirname, "consensus", "personas");
   }
-  return import_node_path15.default.join(import_node_path15.default.dirname((0, import_node_url2.fileURLToPath)(import_meta2.url)), "personas");
+  return import_node_path14.default.join(import_node_path14.default.dirname((0, import_node_url2.fileURLToPath)(import_meta2.url)), "personas");
 }
 var personaCache = /* @__PURE__ */ new Map();
 function loadPersona(name) {
   const cached2 = personaCache.get(name);
   if (cached2 !== void 0) return cached2;
-  const content = import_node_fs13.default.readFileSync(import_node_path15.default.join(getPersonasDir(), `${name}.md`), "utf8");
+  const content = import_node_fs12.default.readFileSync(import_node_path14.default.join(getPersonasDir(), `${name}.md`), "utf8");
   personaCache.set(name, content);
   return content;
 }
@@ -50289,6 +50029,19 @@ function buildSpecGateDeps(args) {
   const rounds = Number(process.env["MRRLIN_CONSENSUS_ROUNDS"] ?? 3);
   const maxHeadCalls = rounds * (4 + extraHeadCount + 1);
   const timeoutMs = Number(process.env["MRRLIN_CONSENSUS_HEAD_TIMEOUT_MS"] ?? 15e4);
+  let intentPromise = null;
+  function loadIntent() {
+    if (!intentPromise) {
+      intentPromise = (async () => {
+        const page = await client.getWikiPage(projectSlug, specPageId);
+        const taskId = page?.taskId ?? null;
+        if (taskId === null) return { taskId: null, seed: null };
+        const task = await client.getTask(projectSlug, taskId);
+        return { taskId, seed: task?.operatorSeedRequest ?? null };
+      })();
+    }
+    return intentPromise;
+  }
   return {
     rounds,
     maxHeadCalls,
@@ -50304,15 +50057,23 @@ function buildSpecGateDeps(args) {
         contentHash: page.contentHash
       };
     },
+    readIntent() {
+      return loadIntent();
+    },
     async runHead(personaName, artifact, dismissed) {
       const persona = loadPersona(personaName);
+      const { seed } = await loadIntent();
+      const intentBlock = seed ? `--- OPERATOR INTENT (the operator's own words \u2014 judge the spec against THIS) ---
+${seed}
+
+` : "";
       return runCodexExec(
         {
-          prompt: `Review this spec.
+          prompt: `Review this spec against the operator's intent.
 
 ${dismissed}
 
---- SPEC ---
+${intentBlock}--- SPEC ---
 ${artifact}`,
           developerInstructions: persona,
           cwd,
@@ -50488,6 +50249,7 @@ ${artifact}`,
 }
 
 // src/async-tools/consensus.ts
+var import_node_crypto6 = require("node:crypto");
 async function cachedResult(client, input) {
   const page = await client.getWikiPage(input.projectSlug, input.pageId);
   if (!page) return null;
@@ -50514,16 +50276,58 @@ async function run(ctx, input) {
     deps,
     input.extraHeads && input.extraHeads.length > 0 ? { extraHeads: input.extraHeads } : void 0
   );
+  if (result.outcome === "CONSENSUS_BLOCKED") {
+    const clarifications = result.clarifications ?? [];
+    if (clarifications.length > 0) {
+      const page = await ctx.client.getWikiPage(input.projectSlug, input.pageId);
+      const taskId = page?.taskId ?? null;
+      let planId = null;
+      if (!taskId) {
+        const plans = await ctx.client.listPlans(input.projectSlug);
+        planId = plans.find((p) => p.specWikiPageId === input.pageId)?.id ?? null;
+      }
+      if (taskId) {
+        for (const clarification of clarifications) {
+          const scopeId = taskId;
+          const id = `II-${scopeId}-gate-${(0, import_node_crypto6.createHash)("sha256").update(clarification.question).digest("hex").slice(0, 10)}`;
+          try {
+            await ctx.client.createInboxItem(input.projectSlug, {
+              id,
+              kind: "question",
+              taskId: scopeId,
+              body: clarification.question,
+              origin: "gate"
+            });
+          } catch {
+          }
+        }
+      } else if (planId) {
+        for (const clarification of clarifications) {
+          const scopeId = planId;
+          const id = `II-${scopeId}-gate-${(0, import_node_crypto6.createHash)("sha256").update(clarification.question).digest("hex").slice(0, 10)}`;
+          try {
+            await ctx.client.createInboxItem(input.projectSlug, {
+              id,
+              kind: "question",
+              planId: scopeId,
+              body: clarification.question,
+              origin: "gate"
+            });
+          } catch {
+          }
+        }
+      }
+    }
+    return {
+      kind: "failed",
+      failureReason: "consensus_blocked",
+      error: clarifications.length > 0 ? `Consensus blocked on ${clarifications.length} clarification(s); filed as operator question(s).` : "Consensus blocked: reviewers did not converge within budget."
+    };
+  }
   switch (result.outcome) {
     case "CONVERGED":
     case "SKIPPED":
       return { kind: "done", resultJson: JSON.stringify(result), finalReviewedHash: null };
-    case "CONSENSUS_BLOCKED":
-      return {
-        kind: "failed",
-        failureReason: "consensus_blocked",
-        error: "Consensus blocked: reviewers did not converge within budget."
-      };
     case "CONSENSUS_UNAVAILABLE":
       return { kind: "retry", failureReason: "provider_unavailable", error: "Consensus unavailable (provider/quota)." };
     case "SPEC_CHANGED_DURING_REVIEW":
@@ -50538,6 +50342,17 @@ async function run(ctx, input) {
 }
 function onComplete(outcome, input) {
   if (outcome.kind === "done") {
+    let specOutcome = "CONVERGED";
+    try {
+      specOutcome = JSON.parse(outcome.resultJson).outcome ?? "CONVERGED";
+    } catch {
+    }
+    if (specOutcome === "SKIPPED") {
+      return {
+        kind: "info",
+        body: `Consensus is disabled for this project; Specs/${input.pageId} was not gated and spec_ready is unchanged.`
+      };
+    }
     return {
       kind: "info",
       body: `Consensus CONVERGED for Specs/${input.pageId}; spec_ready set. Ready to create an execution run.`
@@ -50558,7 +50373,7 @@ var consensusDescriptor = {
 };
 
 // src/async-tools/enqueue.ts
-var import_node_crypto6 = __toESM(require("node:crypto"), 1);
+var import_node_crypto7 = __toESM(require("node:crypto"), 1);
 async function enqueueAsyncTool(client, descriptor2, input) {
   if (descriptor2.cachedResult) {
     const cached2 = await descriptor2.cachedResult(client, input);
@@ -50571,7 +50386,7 @@ async function enqueueAsyncTool(client, descriptor2, input) {
   if (active) {
     return { status: "already_running", jobId: active.id, message: "Already running; will notify in inbox." };
   }
-  const jobId = `AJ-${import_node_crypto6.default.randomUUID()}`;
+  const jobId = `AJ-${import_node_crypto7.default.randomUUID()}`;
   try {
     await client.createAsyncJob(input.projectSlug, {
       id: jobId,
@@ -50669,6 +50484,7 @@ var mcpToolNames = {
   uploadArtifact: "upload_artifact",
   listArtifactFiles: "list_artifact_files",
   resolveHandoff: "resolve_handoff",
+  recordProducedUrl: "record_produced_url",
   registerLocalCheckout: "register_local_checkout",
   /** Compact-context retrieval: rehydrate a mrrlin:// handle into the canonical full record. */
   retrieveContext: "retrieve_context"
@@ -51230,6 +51046,7 @@ var getExecutionRunInputSchema = runScopedSchema;
 var updateExecutionRunInputSchema = runScopedSchema.merge(mrrlinExecutionRunUpdateSchema);
 var listExecutionArtifactsInputSchema = runScopedSchema;
 var appendExecutionArtifactInputSchema = runScopedSchema.merge(mrrlinExecutionArtifactCreateSchema);
+var recordProducedUrlInputSchema = runScopedSchema.merge(mrrlinProducedUrlPayloadSchema);
 var getProjectSchedulerPolicyInputSchema = projectScopedSchema;
 var upsertProjectSchedulerPolicyInputSchema = projectScopedSchema.merge(mrrlinProjectSchedulerPolicyUpsertSchema);
 var getSchedulerPendingTasksInputSchema = projectScopedSchema;
@@ -51327,6 +51144,7 @@ var mcpToolInputSchemas = {
   [mcpToolNames.uploadArtifact]: uploadArtifactInputSchema,
   [mcpToolNames.listArtifactFiles]: listArtifactFilesInputSchema,
   [mcpToolNames.resolveHandoff]: resolveHandoffInputSchema,
+  [mcpToolNames.recordProducedUrl]: recordProducedUrlInputSchema,
   [mcpToolNames.registerLocalCheckout]: registerLocalCheckoutInputSchema,
   [mcpToolNames.retrieveContext]: retrieveContextInputSchema
 };
@@ -51430,7 +51248,8 @@ var mcpToolDescriptions = {
   [mcpToolNames.runSpecConsensus]: 'Enqueue the consensus review gate over a Specs/{id} page. Returns IMMEDIATELY with one of: already_converged (a CONVERGED review already exists for the current content \u2014 proceed straight to create_execution_run, do NOT call mark_spec_ready, it is already set), already_reviewed (a terminal CONSENSUS_BLOCKED for this content), already_running (a consensus job is in flight), or queued (a new job was launched). The review runs in the background; its result/blocker arrives in the inbox (info on CONVERGED, handoff on failure) and is surfaced into the open chat. Do NOT call again for the same spec and do NOT poll. On queued/already_running, tell the user it was launched and end the turn. Pass extraHeads: ["researcher"] for specs referencing external libraries/APIs, or ["debugger"] for root-cause/investigation specs to add opt-in specialist reviewers on top of the fixed four.',
   [mcpToolNames.runCodeReviewerGate]: `Review the current branch's code diff (vs baseRef) with a Code Reviewer gate \u2014 independent reviewers iterate review\u2192fix\u2192re-check (checkpoint, scope-limited reviser edits, typecheck/build fast-gate, rollback) until the diff converges or is blocked. Run before opening a PR. Pass extraHeads: ["security-analyst"] for sensitive diffs (auth, secrets, input handling, new endpoints).`,
   [mcpToolNames.appendExecutionArtifact]: "Append a durable artifact (plan, checkpoint, command output, test result, diff summary, self-review, error, deploy attempt, or handoff judgement) to an execution run.",
-  [mcpToolNames.createExecutionRun]: 'Create a durable Director execution run for a task. Persists status, branch/SHA, workflow ids, and checkpoint cursor outside the chat transcript. For tasks that require a browser (login flows, UI verification, scraping), set prerequisites:[{mcp:"mrrlin-browser",reason:"<why a browser is needed>"}] so any resulting handoff offers a one-click "Launch browser & resume".',
+  [mcpToolNames.recordProducedUrl]: 'Call this after publishing each web page produced by the task, so the UI link opens the page itself instead of the deployed site root. Pass the page\'s full https URL (for external pages, e.g. "https://dev.to/<slug>") OR a path starting with "/" for the deploy environment (e.g. "/blog/<slug>") \u2014 paths are resolved against the run\'s deployed env URL at render time. Optional `label` (\u226440 chars) is shown next to the link; omit and the UI defaults to the page title. Call once per page; multiple calls dedupe by resolved URL in the UI.',
+  [mcpToolNames.createExecutionRun]: 'Create a durable Director execution run for a task. Persists status, branch/SHA, workflow ids, and checkpoint cursor outside the chat transcript. For tasks that require a browser (login flows, UI verification, scraping), set prerequisites:[{mcp:"mrrlin-browser",reason:"<why a browser is needed>"}] so any resulting handoff offers a one-click "Launch browser & resume". When actually driving the browser inside the run, invoke tools from the `mrrlin-browser` MCP server ONLY (browser_navigate/browser_click/browser_snapshot/browser_type/etc.) \u2014 never from `playwright`, `chrome-devtools`, `puppeteer`, or any other browser MCP that may also be connected on the operator\'s box. Only `mrrlin-browser` uses the dedicated Chromium + persistent operator profile.',
   [mcpToolNames.getExecutionRun]: "Fetch a single execution run by id.",
   [mcpToolNames.listExecutionArtifacts]: "List artifacts captured during an execution run, in chronological order.",
   [mcpToolNames.listExecutionRuns]: "List execution runs for a project. Optional filters: taskId, status.",
@@ -51874,7 +51693,10 @@ function createMrrlinTools(options) {
         if (ready !== true) return await c.markSpecReady({ projectSlug, pageId, ready });
         const settings = await c.getOperatorSettings();
         if (!settings.consensusEnabled) {
-          return await c.markSpecReady({ projectSlug, pageId, ready });
+          throw new McpToolCodedError(
+            "SPEC_CONSENSUS_REQUIRED",
+            `Spec ${pageId} cannot be marked ready by the Director while consensus is disabled for this project \u2014 an operator must approve it (web wiki / markSpecReady route). Autonomy is a landing gate, not a license to self-promote.`
+          );
         }
         const page = await c.getWikiPage(projectSlug, pageId);
         if (!page || page.folder !== "Specs") {
@@ -51985,6 +51807,21 @@ function createMrrlinTools(options) {
       "Unable to append execution artifact.",
       async (c, { projectSlug, runId, ...input }) => await c.appendExecutionArtifact(projectSlug, runId, input)
     ),
+    [mcpToolNames.recordProducedUrl]: makeTool(
+      client,
+      mcpToolNames.recordProducedUrl,
+      "PRODUCED_URL_RECORD_FAILED",
+      "Unable to record produced URL.",
+      async (c, { projectSlug, runId, url: url2, label }) => {
+        const id = `EA-pu-${(0, import_node_crypto8.randomBytes)(4).toString("hex")}`;
+        const payload = label ? { url: url2, label } : { url: url2 };
+        return await c.appendExecutionArtifact(projectSlug, runId, {
+          id,
+          kind: "produced_url",
+          payload
+        });
+      }
+    ),
     [mcpToolNames.getProjectSchedulerPolicy]: makeTool(
       client,
       mcpToolNames.getProjectSchedulerPolicy,
@@ -52043,7 +51880,7 @@ function createMrrlinTools(options) {
       "ARTIFACT_FILE_UPLOAD_FAILED",
       "Unable to upload artifact file.",
       async (c, { projectSlug, path: filePath, class: artifactClass, taskId, runId, description }) => {
-        const extension2 = import_node_path16.default.extname(filePath).toLowerCase();
+        const extension2 = import_node_path15.default.extname(filePath).toLowerCase();
         const contentType = ARTIFACT_EXTENSION_TYPES[extension2];
         if (!contentType) {
           throw new McpToolCodedError(
@@ -52071,7 +51908,7 @@ function createMrrlinTools(options) {
             "Artifact exceeds 5MB; split or summarize instead."
           );
         }
-        const filename = import_node_path16.default.basename(filePath);
+        const filename = import_node_path15.default.basename(filePath);
         const created = await c.createArtifactFile(projectSlug, {
           class: artifactClass,
           contentType,
@@ -52154,7 +51991,7 @@ function createMrrlinTools(options) {
       "Unable to register local checkout.",
       async (_c, { projectSlug, path: checkoutPath, repo }) => {
         const trimmedPath = checkoutPath.trim();
-        if (!import_node_path16.default.isAbsolute(trimmedPath)) {
+        if (!import_node_path15.default.isAbsolute(trimmedPath)) {
           throw new McpToolCodedError(
             "LOCAL_CHECKOUT_PATH_NOT_ABSOLUTE",
             `Path must be absolute, got: ${trimmedPath}`
@@ -52162,7 +51999,7 @@ function createMrrlinTools(options) {
         }
         let resolvedPath;
         try {
-          resolvedPath = (0, import_node_fs14.realpathSync)(trimmedPath);
+          resolvedPath = (0, import_node_fs13.realpathSync)(trimmedPath);
         } catch {
           throw new McpToolCodedError(
             "LOCAL_CHECKOUT_PATH_NOT_FOUND",
@@ -52171,7 +52008,7 @@ function createMrrlinTools(options) {
         }
         let remoteUrl;
         try {
-          remoteUrl = (0, import_node_child_process8.execFileSync)("git", ["-C", resolvedPath, "remote", "get-url", "origin"], {
+          remoteUrl = (0, import_node_child_process7.execFileSync)("git", ["-C", resolvedPath, "remote", "get-url", "origin"], {
             encoding: "utf8",
             stdio: ["ignore", "pipe", "ignore"],
             timeout: 15e3,
@@ -52189,7 +52026,7 @@ function createMrrlinTools(options) {
             `Origin remote ${remoteUrl} does not match repo ${repo}.`
           );
         }
-        const stateDir = process.env.CODEX_HOME ? import_node_path16.default.join(process.env.CODEX_HOME, "mrrlin", "director-bridge") : import_node_path16.default.join(import_node_os10.default.homedir(), ".mrrlin", "director-bridge");
+        const stateDir = process.env.CODEX_HOME ? import_node_path15.default.join(process.env.CODEX_HOME, "mrrlin", "director-bridge") : import_node_path15.default.join(import_node_os9.default.homedir(), ".mrrlin", "director-bridge");
         const registry3 = new CheckoutRegistry(stateDir);
         const confirmedAt = (/* @__PURE__ */ new Date()).toISOString();
         registry3.confirm(projectSlug, resolvedPath, confirmedAt);
@@ -52396,13 +52233,13 @@ function runSetCredential(args) {
 }
 
 // src/install-service.ts
-var import_node_os11 = __toESM(require("node:os"), 1);
-var import_node_path18 = __toESM(require("node:path"), 1);
+var import_node_os10 = __toESM(require("node:os"), 1);
+var import_node_path17 = __toESM(require("node:path"), 1);
 
 // src/service-paths.ts
-var import_node_path17 = __toESM(require("node:path"), 1);
+var import_node_path16 = __toESM(require("node:path"), 1);
 function isWorktreePath(p) {
-  const norm = import_node_path17.default.normalize(p).split(import_node_path17.default.sep).join("/");
+  const norm = import_node_path16.default.normalize(p).split(import_node_path16.default.sep).join("/");
   return norm.includes("/.claude/worktrees/");
 }
 function resolveServiceCwd(opts) {
@@ -52456,7 +52293,7 @@ function installService(deps) {
     deps.log(resolved.reason);
     return { ok: false };
   }
-  const home = deps.env.HOME ?? import_node_os11.default.homedir();
+  const home = deps.env.HOME ?? import_node_os10.default.homedir();
   const bins = ["node", "codex", "mrrlin-mcp"].map((b) => deps.which(b));
   if (bins.some((b) => !b)) {
     deps.log("Could not resolve absolute paths for node/codex/mrrlin-mcp on PATH. Install them or fix PATH.");
@@ -52467,7 +52304,7 @@ function installService(deps) {
     return { ok: false };
   }
   const resolvedBins = bins.filter((b) => b !== null);
-  const pathEnv = Array.from(new Set(resolvedBins.map((b) => import_node_path18.default.dirname(b)))).join(":");
+  const pathEnv = Array.from(new Set(resolvedBins.map((b) => import_node_path17.default.dirname(b)))).join(":");
   const text = renderEcosystemConfig({
     cwd: resolved.cwd,
     home,
@@ -52476,7 +52313,7 @@ function installService(deps) {
     staging: deps.env.MRRLIN_STAGING === "1",
     apiBaseUrl: deps.env.MRRLIN_API_BASE_URL?.trim() || void 0
   });
-  const ecoPath = import_node_path18.default.join(home, ".mrrlin", "ecosystem.config.cjs");
+  const ecoPath = import_node_path17.default.join(home, ".mrrlin", "ecosystem.config.cjs");
   deps.writeFile(ecoPath, text);
   const start = deps.runPm2(["startOrReload", ecoPath]);
   if (start.code !== 0) {
@@ -52507,13 +52344,13 @@ function uninstallService(deps) {
 
 // src/uninstall-codex.ts
 var import_promises4 = __toESM(require("node:fs/promises"), 1);
-var import_node_os12 = __toESM(require("node:os"), 1);
-var import_node_path19 = __toESM(require("node:path"), 1);
+var import_node_os11 = __toESM(require("node:os"), 1);
+var import_node_path18 = __toESM(require("node:path"), 1);
 var toml2 = __toESM(require_toml(), 1);
 function resolveCodexHome2(options) {
   if (options.codexHome) return options.codexHome;
   if (process.env.CODEX_HOME) return process.env.CODEX_HOME;
-  return import_node_path19.default.join(options.homeDir ?? import_node_os12.default.homedir(), ".codex");
+  return import_node_path18.default.join(options.homeDir ?? import_node_os11.default.homedir(), ".codex");
 }
 async function pathExists3(target) {
   try {
@@ -52526,7 +52363,7 @@ async function pathExists3(target) {
 var MRRLIN_BLOCK_RE = /(^|\n)\[mcp_servers\.mrrlin(?:-browser)?(?:\]|\.[^\]\n]*\])[\s\S]*?(?=\n\[|$)/g;
 async function uninstallCodex(options = {}) {
   const codexHome = resolveCodexHome2(options);
-  const configPath = import_node_path19.default.join(codexHome, "config.toml");
+  const configPath = import_node_path18.default.join(codexHome, "config.toml");
   const removePrompts = async () => uninstallPrompts(codexHome, options.promptNames ?? []);
   if (!await pathExists3(configPath)) {
     return { action: "missing", configPath, prompts: await removePrompts() };
@@ -52554,10 +52391,10 @@ async function uninstallCodex(options = {}) {
 }
 async function uninstallPrompts(codexHome, names) {
   if (names.length === 0) return [];
-  const promptsDir2 = import_node_path19.default.join(codexHome, "prompts");
+  const promptsDir2 = import_node_path18.default.join(codexHome, "prompts");
   const out = [];
   for (const name of names) {
-    const promptPath = import_node_path19.default.join(promptsDir2, `${name}.md`);
+    const promptPath = import_node_path18.default.join(promptsDir2, `${name}.md`);
     try {
       await import_promises4.default.unlink(promptPath);
       out.push({ name, action: "removed", promptPath });
@@ -52574,27 +52411,27 @@ async function uninstallPrompts(codexHome, names) {
 }
 
 // src/report-issue-prompt.ts
-var import_node_fs15 = __toESM(require("node:fs"), 1);
-var import_node_path20 = __toESM(require("node:path"), 1);
+var import_node_fs14 = __toESM(require("node:fs"), 1);
+var import_node_path19 = __toESM(require("node:path"), 1);
 var import_node_url3 = require("node:url");
 var import_meta3 = {};
 function promptsDir() {
-  if (typeof __dirname !== "undefined") return import_node_path20.default.join(__dirname, "prompts");
-  return import_node_path20.default.join(import_node_path20.default.dirname((0, import_node_url3.fileURLToPath)(import_meta3.url)), "prompts");
+  if (typeof __dirname !== "undefined") return import_node_path19.default.join(__dirname, "prompts");
+  return import_node_path19.default.join(import_node_path19.default.dirname((0, import_node_url3.fileURLToPath)(import_meta3.url)), "prompts");
 }
 function readReportIssuePrompt() {
-  return import_node_fs15.default.readFileSync(import_node_path20.default.join(promptsDir(), "report-issue.md"), "utf8");
+  return import_node_fs14.default.readFileSync(import_node_path19.default.join(promptsDir(), "report-issue.md"), "utf8");
 }
 
 // src/bin.ts
 function pm2Runner(args) {
-  const r = (0, import_node_child_process9.spawnSync)("pm2", args, { encoding: "utf8" });
+  const r = (0, import_node_child_process8.spawnSync)("pm2", args, { encoding: "utf8" });
   process.stderr.write(r.stdout ?? "");
   process.stderr.write(r.stderr ?? "");
   return { code: r.status ?? 1, stdout: r.stdout ?? "" };
 }
 function whichBin(bin) {
-  const r = (0, import_node_child_process9.spawnSync)("which", [bin], { encoding: "utf8" });
+  const r = (0, import_node_child_process8.spawnSync)("which", [bin], { encoding: "utf8" });
   const out = (r.stdout ?? "").trim();
   return r.status === 0 && out ? out.split("\n")[0] ?? null : null;
 }
@@ -52760,7 +52597,7 @@ async function main() {
     }
     case "browser-serve": {
       const { command: command2, args, env } = browserServeArgs();
-      const r = (0, import_node_child_process9.spawnSync)(command2, args, { stdio: "inherit", env: { ...process.env, ...env } });
+      const r = (0, import_node_child_process8.spawnSync)(command2, args, { stdio: "inherit", env: { ...process.env, ...env } });
       process.exitCode = r.status ?? 1;
       return;
     }
@@ -52828,8 +52665,8 @@ async function main() {
         env: process.env,
         cwd: process.cwd(),
         writeFile: (p, c) => {
-          (0, import_node_fs16.mkdirSync)(import_node_path22.default.dirname(p), { recursive: true, mode: 448 });
-          (0, import_node_fs16.writeFileSync)(p, c, { mode: 384 });
+          (0, import_node_fs15.mkdirSync)(import_node_path21.default.dirname(p), { recursive: true, mode: 448 });
+          (0, import_node_fs15.writeFileSync)(p, c, { mode: 384 });
         },
         runPm2: pm2Runner,
         which: whichBin,
@@ -52846,35 +52683,35 @@ async function main() {
         runPm2: (a) => ({ code: pm2Runner(a).code }),
         removeFile: (p) => {
           try {
-            (0, import_node_fs16.rmSync)(p, { force: true });
+            (0, import_node_fs15.rmSync)(p, { force: true });
           } catch {
           }
         },
         purgeSecret: purge,
         secretPath: agentCredentialPath(),
         tokenPath: operatorTokenPath(),
-        ecoPath: import_node_path22.default.join(process.env.HOME ?? (0, import_node_os13.homedir)(), ".mrrlin", "ecosystem.config.cjs"),
+        ecoPath: import_node_path21.default.join(process.env.HOME ?? (0, import_node_os12.homedir)(), ".mrrlin", "ecosystem.config.cjs"),
         log: (m) => process.stderr.write(`[mrrlin-mcp uninstall-service] ${m}
 `)
       });
       return;
     }
     case "uninstall": {
-      const home = process.env.HOME ?? (0, import_node_os13.homedir)();
+      const home = process.env.HOME ?? (0, import_node_os12.homedir)();
       const log = (m) => process.stderr.write(`[mrrlin-mcp uninstall] ${m}
 `);
       uninstallService({
         runPm2: (a) => ({ code: pm2Runner(a).code }),
         removeFile: (p) => {
           try {
-            (0, import_node_fs16.rmSync)(p, { force: true });
+            (0, import_node_fs15.rmSync)(p, { force: true });
           } catch {
           }
         },
         purgeSecret: true,
         secretPath: agentCredentialPath(),
         tokenPath: operatorTokenPath(),
-        ecoPath: import_node_path22.default.join(home, ".mrrlin", "ecosystem.config.cjs"),
+        ecoPath: import_node_path21.default.join(home, ".mrrlin", "ecosystem.config.cjs"),
         log
       });
       let codexOk = true;
@@ -52894,7 +52731,7 @@ async function main() {
         log(`codex config NOT modified: ${error51 instanceof Error ? error51.message : String(error51)}`);
       }
       try {
-        (0, import_node_fs16.rmSync)(import_node_path22.default.join(home, ".mrrlin"), { recursive: true, force: true });
+        (0, import_node_fs15.rmSync)(import_node_path21.default.join(home, ".mrrlin"), { recursive: true, force: true });
       } catch {
       }
       log("removed ~/.mrrlin");
@@ -52935,7 +52772,7 @@ ${HELP_TEXT}`);
   }
 }
 function resolveSelfBinPath() {
-  return import_node_path21.default.resolve(process.argv[1] ?? process.execPath);
+  return import_node_path20.default.resolve(process.argv[1] ?? process.execPath);
 }
 main().catch((error51) => {
   process.stderr.write(`mrrlin-mcp fatal error: ${error51 instanceof Error ? error51.message : String(error51)}