@mrrlin-dev/mcp 0.3.67 → 0.4.0

package/dist/bin.cjs

@@ -20658,14 +20658,17 @@ var toml = __toESM(require_toml(), 1);
 
 // src/api-base-url.ts
 var DEFAULT_API_BASE_URL = "http://127.0.0.1:8787";
-var STAGING_API_BASE_URL = "https://mrrlin-api-mrrlin3.vercel.app";
+var STAGING_API_BASE_URL = "https://api-staging.mrrlin.com";
 function normalizeUrl(value) {
   return value.replace(/\/$/, "");
 }
 var RETIRED_API_BASE_URLS = {
   // Retired 2026-07-28 when staging moved to the mrrlin2 Vercel team; serves a decommissioned
   // Supabase project and now answers `GET /health` with 402 DEPLOYMENT_DISABLED. Added in 0.3.50.
-  "mrrlin-api-fnnzzz-fnnzzzs-projects.vercel.app": STAGING_API_BASE_URL
+  "mrrlin-api-fnnzzz-fnnzzzs-projects.vercel.app": STAGING_API_BASE_URL,
+  // Retired 2026-08-14 when staging decoupled onto the stable custom domain api-staging.mrrlin.com.
+  // A persisted operator configuration may still pin the mrrlin3 Vercel alias; retarget it in one hop.
+  "mrrlin-api-mrrlin3.vercel.app": STAGING_API_BASE_URL
 };
 function isSameApiHost(a, b) {
   const origin = (value) => {
@@ -20697,6 +20700,18 @@ function retargetRetiredApiBaseUrl(input) {
 function retiredApiHostnames() {
   return Object.keys(RETIRED_API_BASE_URLS);
 }
+function bridgeUrlImpliesStaging(input) {
+  const raw = input?.trim();
+  if (!raw) return false;
+  if (isLoopbackUrl(raw)) return true;
+  let hostname3;
+  try {
+    hostname3 = new URL(raw).hostname.toLowerCase();
+  } catch {
+    return false;
+  }
+  return hostname3 === "staging.mrrlin.com";
+}
 function isLoopbackUrl(input) {
   try {
     const url2 = new URL(input);
@@ -20843,11 +20858,12 @@ async function installBrowser(opts = {}) {
 function deriveServeEnvFromProcessEnv(env) {
   const out = {};
   const rawApiUrl = env.MRRLIN_API_BASE_URL?.trim();
+  const bridgeWantsStaging = bridgeUrlImpliesStaging(env.MRRLIN_BRIDGE_URL);
   const apiUrl = rawApiUrl ? retargetRetiredApiBaseUrl(rawApiUrl).baseUrl : void 0;
   if (apiUrl && !isStagingApiBaseUrl(apiUrl)) {
     out.MRRLIN_API_BASE_URL = apiUrl;
     if (env.MRRLIN_API_ALLOW_REMOTE === "1") out.MRRLIN_API_ALLOW_REMOTE = "1";
-  } else if (apiUrl || env.MRRLIN_STAGING === "1") {
+  } else if (apiUrl || env.MRRLIN_STAGING === "1" || bridgeWantsStaging) {
     out.MRRLIN_STAGING = "1";
   }
   return Object.keys(out).length > 0 ? out : void 0;
@@ -21006,7 +21022,7 @@ function blockEnvHasRetiredApiUrl(actual) {
 }
 function renderEnvPreservedNotice(blockId, envKeys) {
   const keys = [...envKeys].sort().join(", ");
-  return `[mrrlin-mcp install-codex] kept your existing [mcp_servers.${blockId}] env keys (${keys}) so your API target is preserved. Re-run with --force to replace or remove it.`;
+  return `[mrrlin-mcp configure bridge] kept your existing [mcp_servers.${blockId}] env keys (${keys}) so your API target is preserved. Re-run with --force to replace or remove it.`;
 }
 async function pathExists(target) {
   try {
@@ -36387,6 +36403,9 @@ var openApiOperationIds = {
   getExecutionRun: "getExecutionRun",
   getProjectSchedulerPolicy: "getProjectSchedulerPolicy",
   getProjectDeployWorkflow: "getProjectDeployWorkflow",
+  getDeployTopology: "getDeployTopology",
+  writeDeployTopology: "writeDeployTopology",
+  getTaskDeployTarget: "getTaskDeployTarget",
   getSchedulerPendingTasks: "getSchedulerPendingTasks",
   wakeDirector: "wakeDirector",
   getGithubInstallationRepositories: "getGithubInstallationRepositories",
@@ -36395,6 +36414,8 @@ var openApiOperationIds = {
   getTask: "getTask",
   archiveTask: "archiveTask",
   unarchiveTask: "unarchiveTask",
+  takeOverTask: "takeOverTask",
+  closeTaskAsWontDo: "closeTaskAsWontDo",
   getWikiPage: "getWikiPage",
   handleGithubInstallCallback: "handleGithubInstallCallback",
   listExecutionArtifacts: "listExecutionArtifacts",
@@ -36883,6 +36904,32 @@ var SUPPORTED_EXECUTION_DOMAINS = Object.keys(SUPPORTED_EXECUTION_POLICY_BY_DOMA
 var taxonomyCategorySchema = external_exports.string().min(1).regex(/^[a-z][a-z0-9-]*$/);
 var taxonomySubcategorySchema = external_exports.string().min(1).regex(/^[a-z][a-z0-9-]*$/);
 var mrrlinTaskAssigneeSchema = external_exports.union([external_exports.string().regex(/^@/), external_exports.string().email()]).nullable();
+var mrrlinStopReasonSchema = external_exports.enum([
+  "task_terminal",
+  "active_run_exists",
+  "draft_running",
+  "consensus_running",
+  "spec_changed_during_advance",
+  "run_limit_reached",
+  "backoff_pending",
+  "blocked_by_active",
+  "spec_missing",
+  "spec_draft_failed",
+  "spec_not_specs_folder",
+  "awaiting_clarification",
+  "consensus_blocked",
+  "consensus_run_failed",
+  "consensus_disabled_spec_not_ready",
+  "spec_approval_pending",
+  "awaiting_handoff",
+  "assigned_to_other",
+  "attempts_exhausted",
+  "daily_job_budget_exhausted",
+  "taken_over",
+  "operator_absent",
+  "autonomy_paused",
+  "unknown"
+]);
 var mrrlinTaskSchema = external_exports.object({
   // Output-optional (not defaulted-required) so existing task fixtures/mocks across the
   // codebase need no churn; DB rows always resolve it to `string | null` via taskRowToTask.
@@ -36897,6 +36944,9 @@ var mrrlinTaskSchema = external_exports.object({
   autonomyReason: external_exports.string().min(1).max(240),
   blockedBy: external_exports.array(mrrlinTaskIdSchema),
   category: taxonomyCategorySchema,
+  // Slice 3 (task-stall-visibility): why a task was closed as won't-do -- populated only by
+  // closeTaskAsWontDo. Output-optional so existing task fixtures need no churn.
+  closeReason: external_exports.string().nullable().optional(),
   directorThreadId: external_exports.string().nullable().default(null),
   dueDate: external_exports.string().date().nullable(),
   followUpAt: external_exports.string().datetime().nullable(),
@@ -36905,6 +36955,9 @@ var mrrlinTaskSchema = external_exports.object({
   latestJudgement: external_exports.string().nullable().default(null),
   latestJudgementAt: external_exports.string().datetime().nullable().default(null),
   latestJudgementKind: external_exports.enum(["autonomy", "handoff"]).nullable().default(null),
+  // Slice 3: the retry-backoff timer for exactly spec_draft_failed/consensus_run_failed -- a task
+  // whose next_attempt_at is in the future is skipped from admission (backoff_pending).
+  nextAttemptAt: external_exports.string().datetime().nullable().optional(),
   notes: external_exports.string().nullable().default(null),
   // Raw operator request captured at task creation (operator-authored ONLY, never Director-generated).
   // The intent-aware spec gate judges the spec against this; null/absent ⇒ the gate fail-closes.
@@ -36914,6 +36967,14 @@ var mrrlinTaskSchema = external_exports.object({
   planId: mrrlinPlanIdSchema.nullable(),
   specApproved: mrrlinSpecApprovedSchema.optional(),
   specWikiPageId: mrrlinWikiPageIdSchema.nullable(),
+  // Slice 3: episode bookkeeping alongside the async_jobs-derived countEpisodeAttempts --
+  // stallAttemptCount backs the exponential-backoff formula, stallRearmed guards against
+  // re-arming the same episode's ceiling more than once.
+  stallAttemptCount: external_exports.number().int().nonnegative().optional(),
+  stallRearmed: external_exports.boolean().optional(),
+  stallNextAction: external_exports.string().nullable().optional(),
+  stallReason: mrrlinStopReasonSchema.nullable().optional(),
+  stallSince: external_exports.string().datetime().nullable().optional(),
   status: mrrlinTaskStatusSchema,
   subcategory: taxonomySubcategorySchema,
   tags: mrrlinTaskTagsSchema,
@@ -36976,6 +37037,12 @@ var mrrlinWikiPageSchema = external_exports.object({
 var mrrlinMarkSpecReadyRequestSchema = external_exports.object({
   ready: external_exports.boolean()
 });
+var mrrlinTakeOverTaskRequestSchema = external_exports.object({
+  assignee: external_exports.string().min(1)
+});
+var mrrlinCloseTaskAsWontDoRequestSchema = external_exports.object({
+  reason: external_exports.string().min(1)
+});
 var mrrlinGithubBindingSchema = external_exports.object({
   appInstallationState: external_exports.enum(["installed", "missing"]),
   installationId: external_exports.number().int().positive().nullable().default(null),
@@ -37133,6 +37200,47 @@ function refineTaskCreateDomain(data, ctx) {
 }
 var mrrlinTaskCreateSchema = mrrlinTaskCreateShapeSchema.superRefine(refineTaskCreateDomain);
 var mrrlinTaskCreateWithoutIdSchema = mrrlinTaskCreateShapeSchema.omit({ id: true }).superRefine(refineTaskCreateDomain);
+var mrrlinDeployWorkflowEnvSchema = external_exports.enum(["dev", "prod"]);
+var mrrlinTaskDeployTargetInputSchema = external_exports.object({
+  env: mrrlinDeployWorkflowEnvSchema,
+  targetLabel: external_exports.string().min(1),
+  workflowId: external_exports.number().int().positive(),
+  workflowPath: external_exports.string().min(1),
+  workflowSha: external_exports.string().min(1),
+  topologyFingerprint: external_exports.string().min(1)
+});
+var deployTopologyResponseSchema = external_exports.object({
+  data: external_exports.object({
+    fingerprint: external_exports.string().nullable(),
+    snapshot: external_exports.array(external_exports.object({ id: external_exports.number(), path: external_exports.string(), sha: external_exports.string(), state: external_exports.string() })).nullable(),
+    entries: external_exports.array(external_exports.object({
+      label: external_exports.string(),
+      env: mrrlinDeployWorkflowEnvSchema,
+      workflowId: external_exports.number(),
+      workflowPath: external_exports.string(),
+      workflowSha: external_exports.string()
+    }))
+  })
+});
+var mrrlinDeployTopologyWriteSchema = external_exports.object({
+  fingerprint: external_exports.string().min(1),
+  entries: external_exports.array(external_exports.object({
+    label: external_exports.string().min(1),
+    env: mrrlinDeployWorkflowEnvSchema,
+    workflowId: external_exports.number().int().positive(),
+    workflowPath: external_exports.string().min(1),
+    workflowSha: external_exports.string().min(1)
+  }))
+});
+var taskDeployTargetResponseSchema = external_exports.object({
+  data: external_exports.object({
+    targetLabel: external_exports.string(),
+    workflowId: external_exports.number(),
+    workflowPath: external_exports.string(),
+    workflowSha: external_exports.string(),
+    topologyFingerprint: external_exports.string()
+  })
+});
 var mrrlinTaskUpdateSchema = external_exports.object({
   actor: external_exports.string().min(1).optional(),
   assignee: mrrlinTaskAssigneeSchema.optional(),
@@ -37155,8 +37263,13 @@ var mrrlinTaskUpdateSchema = external_exports.object({
   title: external_exports.string().min(1).optional(),
   type: mrrlinTaskTypeSchema.optional(),
   followUpAt: external_exports.string().datetime().nullable().optional(),
-  verificationDueAt: external_exports.string().datetime().nullable().optional()
-}).refine((value) => value.assignee !== void 0 || value.autoDeploy !== void 0 || value.domain !== void 0 || value.autonomyLevel !== void 0 || value.autonomyReason !== void 0 || value.category !== void 0 || value.directorThreadId !== void 0 || value.dueDate !== void 0 || value.followUpAt !== void 0 || value.impact !== void 0 || value.notes !== void 0 || value.planId !== void 0 || value.specApproved !== void 0 || value.specWikiPageId !== void 0 || value.status !== void 0 || value.subcategory !== void 0 || value.tags !== void 0 || value.title !== void 0 || value.type !== void 0 || value.verificationDueAt !== void 0, { message: "TaskUpdate requires at least one field" }).superRefine((value, context) => {
+  verificationDueAt: external_exports.string().datetime().nullable().optional(),
+  deployTargets: external_exports.array(mrrlinTaskDeployTargetInputSchema).optional(),
+  // design.md D5 step 6 hint (task 3.16): the deploy gate's own bookkeeping write when the
+  // fingerprint moved but the topology still maps the label to the same workflow. Never sent
+  // by any other caller.
+  reverifyRequested: external_exports.boolean().optional()
+}).refine((value) => value.assignee !== void 0 || value.autoDeploy !== void 0 || value.domain !== void 0 || value.autonomyLevel !== void 0 || value.autonomyReason !== void 0 || value.category !== void 0 || value.directorThreadId !== void 0 || value.dueDate !== void 0 || value.followUpAt !== void 0 || value.impact !== void 0 || value.notes !== void 0 || value.planId !== void 0 || value.specApproved !== void 0 || value.specWikiPageId !== void 0 || value.status !== void 0 || value.subcategory !== void 0 || value.tags !== void 0 || value.title !== void 0 || value.type !== void 0 || value.verificationDueAt !== void 0 || value.deployTargets !== void 0 || value.reverifyRequested !== void 0, { message: "TaskUpdate requires at least one field" }).superRefine((value, context) => {
   if (value.autonomyLevel !== void 0 && value.autonomyReason === void 0) {
     context.addIssue({
       code: external_exports.ZodIssueCode.custom,
@@ -37240,6 +37353,7 @@ var mrrlinWikiPageUpdateSchema = external_exports.object({
 }).refine((value) => Object.keys(value).length > 0, { message: "WikiPageUpdate requires at least one field" });
 var mrrlinWikiPageListFiltersSchema = external_exports.object({
   folder: external_exports.string().min(1).optional(),
+  id: mrrlinWikiPageIdSchema.optional(),
   q: external_exports.string().min(1).optional(),
   taskId: mrrlinTaskIdSchema.optional()
 });
@@ -37816,7 +37930,6 @@ var mrrlinProjectSchedulerPolicyUpsertSchema = external_exports.object({
 var projectSchedulerPolicyResponseSchema = external_exports.object({
   data: mrrlinProjectSchedulerPolicySchema
 });
-var mrrlinDeployWorkflowEnvSchema = external_exports.enum(["dev", "prod"]);
 var mrrlinDeployWorkflowSourceSchema = external_exports.enum(["agent", "operator"]);
 var mrrlinDeployWorkflowStateSchema = external_exports.enum(["resolved", "ambiguous"]);
 var mrrlinProjectDeployWorkflowSchema = external_exports.object({
@@ -37945,7 +38058,8 @@ var mrrlinInFlightSchedulerEntrySchema = external_exports.discriminatedUnion("ki
 ]);
 var mrrlinIneligibleTaskSchema = external_exports.object({
   task: mrrlinTaskSchema,
-  autonomyLevel: mrrlinAutonomyLevelSchema
+  autonomyLevel: mrrlinAutonomyLevelSchema,
+  reason: external_exports.string().nullable().optional()
 });
 var schedulerPendingTasksResponseSchema = external_exports.object({
   data: external_exports.object({
@@ -37969,6 +38083,12 @@ var schedulerPendingTasksResponseSchema = external_exports.object({
     // person actually running the project) is visible as a large number instead of the autopilot
     // silently doing nothing.
     excludedByOwnershipCount: external_exports.number().int().min(0),
+    // Additive: the same ownership exclusion grouped by assignee. This reveals who the
+    // autopilot is waiting for without returning task ids or titles in this endpoint.
+    ownershipExcludedAssignees: external_exports.array(external_exports.object({
+      assignee: external_exports.string(),
+      count: external_exports.number().int().min(1)
+    })),
     // Additive: true when the operator-web-presence gate is the reason nothing new is starting
     // (autonomyPaused takes precedence when both apply). Computed by the same shared helper the
     // tick uses, so this page can never claim a task is starting when the tick would decline it.
@@ -38072,6 +38192,7 @@ var mrrlinInboxItemSchema = external_exports.object({
   projectSlug: mrrlinProjectSlugSchema,
   questionOptions: mrrlinInboxQuestionOptionsSchema.nullable().default(null),
   readAt: external_exports.string().datetime().nullable(),
+  reason: external_exports.string().nullable().optional(),
   status: mrrlinInboxItemStatusSchema,
   taskId: mrrlinTaskIdSchema.nullable()
 }).superRefine((value, context) => {
@@ -38918,6 +39039,22 @@ function createMrrlinClient(config2) {
       });
       return taskResponseSchema.parse(body).data;
     },
+    async takeOverTask(projectSlug, taskId, assignee) {
+      const body = await request(`${projectPath(projectSlug)}/tasks/${encodeURIComponent(taskId)}/take-over`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ assignee })
+      });
+      return taskResponseSchema.parse(body).data;
+    },
+    async closeTaskAsWontDo(projectSlug, taskId, reason) {
+      const body = await request(`${projectPath(projectSlug)}/tasks/${encodeURIComponent(taskId)}/wont-do`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ reason })
+      });
+      return taskResponseSchema.parse(body).data;
+    },
     async updateWikiPage(projectSlug, pageId, patch) {
       const body = await request(`${projectPath(projectSlug)}/wiki/${encodeURIComponent(pageId)}`, {
         body: JSON.stringify(patch),
@@ -39301,6 +39438,29 @@ function createMrrlinClient(config2) {
         throw error51;
       }
     },
+    async getDeployTopology(projectSlug) {
+      const body = await request(`${projectPath(projectSlug)}/deploy-topology`);
+      return deployTopologyResponseSchema.parse(body).data;
+    },
+    async writeDeployTopology(projectSlug, input) {
+      const body = await request(`${projectPath(projectSlug)}/deploy-topology`, {
+        body: JSON.stringify(mrrlinDeployTopologyWriteSchema.parse(input)),
+        headers: { "content-type": "application/json" },
+        method: "PUT"
+      });
+      return deployTopologyResponseSchema.parse(body).data;
+    },
+    async getTaskDeployTarget(projectSlug, taskId, env) {
+      try {
+        const body = await request(`${projectPath(projectSlug)}/tasks/${taskId}/deploy-target/${env}`);
+        return taskDeployTargetResponseSchema.parse(body).data;
+      } catch (error51) {
+        if (error51 instanceof MrrlinApiError && error51.status === 404 && error51.code === "DEPLOY_TARGET_UNSET") {
+          return null;
+        }
+        throw error51;
+      }
+    },
     async upsertProjectDeployWorkflow(projectSlug, env, input) {
       const body = await request(`${projectPath(projectSlug)}/deploy-workflows/${env}`, {
         body: JSON.stringify(input),
@@ -39975,7 +40135,7 @@ function startCodexProbe(deps = {}) {
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.3.67";
+var PKG_VERSION = "0.4.0";
 
 // src/api-base-url-migrate.ts
 var import_node_fs2 = __toESM(require("node:fs"), 1);
@@ -42355,6 +42515,111 @@ ${body}`;
   }
   return { markdown: body, tldrChars };
 }
+function extractDeployTarget(markdown) {
+  const section = /(## Deploy Target\s*\n)([\s\S]*?)(?=\n## |$)/i.exec(markdown);
+  if (!section || section.index === void 0) {
+    return { markdown, deployTarget: null };
+  }
+  const remaining = markdown.slice(0, section.index) + markdown.slice(section.index + section[0].length);
+  const fenced = /```(?:json)?\s*\n([\s\S]*?)```/m.exec(section[2] ?? "");
+  let deployTarget = null;
+  if (fenced) {
+    try {
+      const raw = JSON.parse(fenced[1] ?? "");
+      if (raw !== null && typeof raw === "object" && typeof raw.label === "string") {
+        const parsed = { label: raw.label };
+        if (Array.isArray(raw.derive)) {
+          const derive = raw.derive.filter(isDeployTopologyEntry);
+          if (derive.length === raw.derive.length) parsed.derive = derive;
+        }
+        deployTarget = parsed;
+      }
+    } catch {
+      deployTarget = null;
+    }
+  }
+  return { markdown: remaining, deployTarget };
+}
+function isDeployTopologyEntry(value) {
+  if (value === null || typeof value !== "object") return false;
+  const e = value;
+  return typeof e.label === "string" && e.label.length > 0 && (e.env === "dev" || e.env === "prod") && typeof e.workflowId === "number" && Number.isInteger(e.workflowId) && e.workflowId > 0 && typeof e.workflowPath === "string" && e.workflowPath.length > 0 && typeof e.workflowSha === "string" && e.workflowSha.length > 0;
+}
+function buildDeployTargetPromptSection(ctx) {
+  if (ctx.kind === "closed_menu") {
+    const labels = [...new Set(ctx.entries.map((entry) => entry.label))];
+    return [
+      ``,
+      `--- DEPLOY TARGET (required final section) ---`,
+      `This project's deploy topology is already resolved for its current workflow inventory. Pick the ONE label this task deploys under from this CLOSED menu \u2014 never invent a new label:`,
+      ...labels.map((label) => `- ${label}`),
+      ``,
+      `Append a final section \`## Deploy Target\` whose ONLY content is a single fenced json block of exactly this shape:`,
+      "```json",
+      `{"label": "<one of the menu labels above>"}`,
+      "```"
+    ].join("\n");
+  }
+  return [
+    ``,
+    `--- DEPLOY TARGET (required final section) ---`,
+    `This project's deploy topology is NOT yet resolved for its current workflow inventory. Below is the raw GitHub workflow list (workflowId / path / blob sha / state); every value used below must be copied VERBATIM from it \u2014 never invented:`,
+    ``,
+    JSON.stringify(ctx.snapshot, null, 2),
+    ``,
+    `First derive the FULL label map: identify every deploy target in the snapshot, give each a short kebab-case \`label\`, and classify each workflow into an \`env\` of exactly "dev" or "prod".`,
+    `Heuristic for dev vs prod (there is no fixed naming rule): prefer an explicit \`dev-\`/\`prod-\` filename prefix, then a \`/dev/\` or \`/prod/\` directory segment; if neither applies, group the workflows serving the same target and classify from the pair's context.`,
+    `Then pick the ONE \`label\` this task deploys under, from among the labels you just derived.`,
+    ``,
+    `Append a final section \`## Deploy Target\` whose ONLY content is a single fenced json block of exactly this shape:`,
+    "```json",
+    `{"label": "<label this task deploys under>", "derive": [{"label":"<target label>","env":"dev"|"prod","workflowId":N,"workflowPath":"<path>","workflowSha":"<blob sha>"}, ...]}`,
+    "```",
+    ``,
+    `\`derive\` is the FULL map of every deploy target you can identify in the snapshot (not just this task's pick), so later tasks reuse this derivation instead of re-deriving. \`env\` must be exactly "dev" or "prod". \`workflowId\`/\`workflowPath\`/\`workflowSha\` must be copied verbatim from the snapshot above.`
+  ].join("\n");
+}
+function resolveDeployTargetRows(canonical, deployTarget, autoDeploy, fingerprint) {
+  if (autoDeploy === "off") return {};
+  const filtered = canonical.filter((entry) => entry.label === deployTarget.label);
+  const requiredEnvs = autoDeploy === "prod" ? ["dev", "prod"] : ["dev"];
+  const missingEnvs = [];
+  const deployTargets = [];
+  for (const env of requiredEnvs) {
+    const match = filtered.find((entry) => entry.env === env);
+    if (!match) {
+      missingEnvs.push(env);
+      continue;
+    }
+    deployTargets.push({
+      env,
+      targetLabel: deployTarget.label,
+      workflowId: match.workflowId,
+      workflowPath: match.workflowPath,
+      workflowSha: match.workflowSha,
+      topologyFingerprint: fingerprint
+    });
+  }
+  if (missingEnvs.length > 0) return { skippedReason: "incomplete_label", missingEnvs };
+  return { deployTargets };
+}
+function findDuplicateLabelEnvPairs(entries) {
+  const seen = /* @__PURE__ */ new Set();
+  const duplicateKeys = /* @__PURE__ */ new Set();
+  for (const entry of entries) {
+    const key = `${entry.label}\0${entry.env}`;
+    if (seen.has(key)) duplicateKeys.add(key);
+    seen.add(key);
+  }
+  const pairs = [];
+  for (const key of duplicateKeys) {
+    const parts = key.split("\0");
+    const label = parts[0] ?? "";
+    const env = parts[1] === "prod" ? "prod" : "dev";
+    pairs.push({ label, env });
+  }
+  return pairs;
+}
 function nextWikiPageId(pages) {
   let max = 0;
   for (const page of pages) {
@@ -42365,7 +42630,7 @@ function nextWikiPageId(pages) {
   }
   return `WK-${max + 1}`;
 }
-function buildDraftSpecPrompt(task, constitution) {
+function buildDraftSpecPrompt(task, constitution, deployTarget = null) {
   const budget = resolveSpecBudget(task.impact);
   const lines2 = [
     `Write a complete implementation spec for the task below.`,
@@ -42402,6 +42667,7 @@ function buildDraftSpecPrompt(task, constitution) {
     `The \`## TL;DR\` section MUST be at most ${DRAFT_SPEC_TLDR_MAX_CHARS} characters.`,
     `The spec MUST contain at most ${budget.maxRequirements} acceptance-criteria items and no more than ${budget.maxChars} characters total.`
   );
+  if (deployTarget) lines2.push(buildDeployTargetPromptSection(deployTarget));
   return lines2.join("\n");
 }
 function skipped(reason, extra = {}) {
@@ -42450,6 +42716,22 @@ async function runDraftSpec(ctx, input, deps) {
     }
     if (getActiveBlockedByIds(task.blockedBy, blockers).length > 0) return skipped("blocked_by_active");
   }
+  const autoDeploy = task.autoDeploy ?? "off";
+  let topology = null;
+  let deploySkippedReason = null;
+  let deploySkippedDetail = null;
+  if (autoDeploy !== "off") {
+    try {
+      topology = await client.getDeployTopology(projectSlug);
+    } catch {
+      deploySkippedReason = "topology_unavailable";
+      topology = null;
+    }
+  }
+  if (topology && (topology.fingerprint === null || topology.entries.length === 0 && topology.snapshot === null)) {
+    deploySkippedReason = topology.fingerprint === null ? "no_bound_deploy_target" : "topology_snapshot_unavailable";
+    topology = null;
+  }
   let persona;
   try {
     persona = loadPersonaFn(DRAFT_SPEC_PERSONA);
@@ -42478,7 +42760,8 @@ async function runDraftSpec(ctx, input, deps) {
   } catch {
     constitution = null;
   }
-  const prompt = buildDraftSpecPrompt(task, constitution);
+  const deployPromptContext = autoDeploy !== "off" && topology ? topology.entries.length > 0 ? { kind: "closed_menu", entries: topology.entries } : { kind: "derive", snapshot: topology.snapshot ?? [] } : null;
+  const prompt = buildDraftSpecPrompt(task, constitution, deployPromptContext);
   const exec = await runExec({
     prompt,
     developerInstructions: persona,
@@ -42493,7 +42776,8 @@ async function runDraftSpec(ctx, input, deps) {
   if (exec.text.trim().length === 0) {
     return { kind: "retry", failureReason: "zero_output", error: "spec authoring produced empty output" };
   }
-  const { markdown, tldrChars } = enforceSpecOutputContract(exec.text, taskId, task.title);
+  const { markdown: specMarkdown, deployTarget: parsedDeployTarget } = extractDeployTarget(exec.text);
+  const { markdown, tldrChars } = enforceSpecOutputContract(specMarkdown, taskId, task.title);
   let pageId;
   if (adoptedId) {
     try {
@@ -42553,6 +42837,45 @@ async function runDraftSpec(ctx, input, deps) {
     }
     pageId = created;
   }
+  let deployTargets;
+  if (topology && parsedDeployTarget) {
+    const fingerprint = topology.fingerprint;
+    if (fingerprint === null) {
+      deploySkippedReason = deploySkippedReason ?? "no_bound_deploy_target";
+    } else if (topology.entries.length > 0) {
+      const resolved = resolveDeployTargetRows(topology.entries, parsedDeployTarget, autoDeploy, fingerprint);
+      deployTargets = resolved.deployTargets;
+      if (resolved.skippedReason) {
+        deploySkippedReason = resolved.skippedReason;
+        if (resolved.skippedReason === "incomplete_label") {
+          deploySkippedDetail = `label "${parsedDeployTarget.label}" has no entry for: ${(resolved.missingEnvs ?? []).join(", ")}`;
+        }
+      }
+    } else {
+      const derive = parsedDeployTarget.derive ?? [];
+      const duplicateLabelEnvPairs = findDuplicateLabelEnvPairs(derive);
+      if (derive.length === 0) {
+        deploySkippedReason = "no_derivation";
+      } else if (duplicateLabelEnvPairs.length > 0) {
+        deploySkippedReason = "ambiguous_derivation";
+        deploySkippedDetail = `duplicate label/env pair(s): ${duplicateLabelEnvPairs.map((pair) => `${pair.label}/${pair.env}`).join(", ")}`;
+      } else {
+        try {
+          const written = await client.writeDeployTopology(projectSlug, { fingerprint, entries: derive });
+          const resolved = resolveDeployTargetRows(written.entries, parsedDeployTarget, autoDeploy, fingerprint);
+          deployTargets = resolved.deployTargets;
+          if (resolved.skippedReason) {
+            deploySkippedReason = resolved.skippedReason;
+            if (resolved.skippedReason === "incomplete_label") {
+              deploySkippedDetail = `label "${parsedDeployTarget.label}" has no entry for: ${(resolved.missingEnvs ?? []).join(", ")}`;
+            }
+          }
+        } catch {
+          deploySkippedReason = "topology_write_failed";
+        }
+      }
+    }
+  }
   let fresh;
   try {
     fresh = await client.getTask(projectSlug, taskId);
@@ -42569,8 +42892,12 @@ async function runDraftSpec(ctx, input, deps) {
   if (fresh.specWikiPageId) {
     return skipped("lost_link_race", { pageId, linkedPageId: fresh.specWikiPageId });
   }
+  const linkPatch = { specWikiPageId: pageId };
+  if (deployTargets !== void 0 && deployTargets.length > 0) {
+    linkPatch.deployTargets = deployTargets;
+  }
   try {
-    await client.updateTask(projectSlug, taskId, { specWikiPageId: pageId });
+    await client.updateTask(projectSlug, taskId, linkPatch);
   } catch (error51) {
     return {
       kind: "retry",
@@ -42578,18 +42905,20 @@ async function runDraftSpec(ctx, input, deps) {
       error: `failed to link spec page ${pageId} to task ${taskId}: ${errMessage2(error51)}`
     };
   }
+  const drafted = {
+    outcome: "DRAFTED",
+    pageId,
+    adopted: adoptedId !== null,
+    constitution: constitution !== null ? "included" : "missing",
+    tldrChars,
+    relatedContext: "skipped_no_client_method"
+  };
+  if (deploySkippedReason !== null) drafted.deployTargetSkippedReason = deploySkippedReason;
+  if (deploySkippedDetail !== null) drafted.deployTargetSkippedDetail = deploySkippedDetail;
+  drafted.taskTitle = task.title;
   return {
     kind: "done",
-    resultJson: JSON.stringify({
-      outcome: "DRAFTED",
-      pageId,
-      adopted: adoptedId !== null,
-      constitution: constitution !== null ? "included" : "missing",
-      tldrChars,
-      relatedContext: "skipped_no_client_method",
-      // Carried so onComplete can name the task in the operator notification without a re-read.
-      taskTitle: task.title
-    }),
+    resultJson: JSON.stringify(drafted),
     finalReviewedHash: null
   };
 }
@@ -42607,6 +42936,14 @@ function onComplete(outcome, input) {
         body: `Spec draft for ${input.taskId} skipped (${parsed.reason ?? "unknown"}); nothing changed.`
       };
     }
+    if (parsed.deployTargetSkippedReason === "ambiguous_derivation" || parsed.deployTargetSkippedReason === "incomplete_label") {
+      return {
+        kind: "handoff",
+        taskId: input.taskId,
+        id: `II-deploy-target-${parsed.deployTargetSkippedReason}-${input.taskId}`,
+        body: `Spec for ${input.taskId} was drafted (page ${parsed.pageId ?? "?"} in Specs/), but its deploy target needs a human: ${parsed.deployTargetSkippedDetail ?? parsed.deployTargetSkippedReason}. The spec itself proceeds to the normal consensus review; the deploy target stays unresolved until this is fixed.`
+      };
+    }
     const taskRef = parsed.taskTitle ? `${input.taskId} \u2014 ${parsed.taskTitle}` : input.taskId;
     return {
       kind: "info",
@@ -42980,34 +43317,42 @@ async function tryProdAutoRevert(deps, projectSlug, run3, task) {
     return null;
   }
 }
-function computeActiveSetFingerprint(workflows) {
-  return workflows.map((workflow) => `${workflow.id}:${workflow.path}`).sort().join(",");
-}
-async function resolveWorkflowId(deps, projectSlug, run3, env) {
+async function resolveWorkflowId(deps, projectSlug, run3, task, env) {
   const pinned = env === "dev" ? run3.devWorkflowId : run3.prodWorkflowId;
-  if (pinned) return { workflowId: pinned, source: null, resolvedFromStore: false };
-  const row = await deps.client.getProjectDeployWorkflow(projectSlug, env);
-  if (!row || row.state !== "resolved" || row.workflowId === null) {
-    return { workflowId: null, source: null, resolvedFromStore: false };
-  }
-  if (row.source !== "operator") {
-    const liveWorkflows = await deps.client.listGithubWorkflows(projectSlug);
-    const activeWorkflows = liveWorkflows.filter((workflow) => workflow.state === "active");
-    const isLive = activeWorkflows.some((workflow) => String(workflow.id) === String(row.workflowId));
-    if (!isLive) return { workflowId: null, source: null, resolvedFromStore: false };
-    const liveFingerprint = computeActiveSetFingerprint(activeWorkflows);
-    if (!row.reverifyRequested && row.activeSetFingerprint !== null && liveFingerprint !== row.activeSetFingerprint) {
-      await deps.client.upsertProjectDeployWorkflow(projectSlug, env, {
-        workflowId: row.workflowId,
-        workflowPath: row.workflowPath,
-        reason: row.reason,
-        state: row.state,
-        activeSetFingerprint: row.activeSetFingerprint,
-        reverifyRequested: true
-      });
-    }
+  if (pinned) {
+    return { workflowId: pinned, workflowPath: null, blockReason: null, pinned: true, reverifyRequested: false };
   }
-  return { workflowId: row.workflowId, source: row.source, resolvedFromStore: true };
+  const target = await deps.getTaskDeployTarget(projectSlug, task.id, env);
+  if (!target) {
+    return { workflowId: null, workflowPath: null, blockReason: "deploy_target_unset", pinned: false, reverifyRequested: false };
+  }
+  const snapshot = await deps.getRepoSnapshot(projectSlug);
+  const activeWorkflows = (snapshot?.lastSnapshot ?? []).filter((w) => w.state === "active");
+  const liveMatch = activeWorkflows.find((w) => w.id === target.workflowId);
+  if (!liveMatch || liveMatch.path !== target.workflowPath) {
+    return { workflowId: null, workflowPath: null, blockReason: "deploy_target_inactive", pinned: false, reverifyRequested: false };
+  }
+  if (liveMatch.sha !== target.workflowSha) {
+    return { workflowId: null, workflowPath: null, blockReason: "deploy_target_modified", pinned: false, reverifyRequested: false };
+  }
+  const currentFingerprint = snapshot?.lastFingerprint ?? null;
+  if (currentFingerprint !== null && currentFingerprint === target.topologyFingerprint) {
+    return { workflowId: target.workflowId, workflowPath: target.workflowPath, blockReason: null, pinned: false, reverifyRequested: false };
+  }
+  if (currentFingerprint === null) {
+    deps.recordDeployTargetTelemetry("deploy_target_cache_missing");
+    return { workflowId: null, workflowPath: null, blockReason: "deploy_target_cache_missing", pinned: false, reverifyRequested: false };
+  }
+  const entry = await deps.lookupTopologyEntry(projectSlug, currentFingerprint, target.targetLabel, env);
+  if (!entry) {
+    deps.recordDeployTargetTelemetry("deploy_target_cache_missing");
+    return { workflowId: null, workflowPath: null, blockReason: "deploy_target_cache_missing", pinned: false, reverifyRequested: false };
+  }
+  if (entry.workflowId !== target.workflowId) {
+    deps.recordDeployTargetTelemetry("deploy_target_reassigned");
+    return { workflowId: null, workflowPath: null, blockReason: "deploy_target_reassigned", pinned: false, reverifyRequested: false };
+  }
+  return { workflowId: target.workflowId, workflowPath: target.workflowPath, blockReason: null, pinned: false, reverifyRequested: true };
 }
 async function runDeployGateTick(deps, projectSlug, run3, task) {
   const artifacts = await deps.client.listExecutionArtifacts(projectSlug, run3.id);
@@ -43029,7 +43374,10 @@ async function runDeployGateTick(deps, projectSlug, run3, task) {
     return { kind: "done" };
   }
   const env = activeEnv;
-  const resolution = await resolveWorkflowId(deps, projectSlug, run3, env);
+  const resolution = await resolveWorkflowId(deps, projectSlug, run3, task, env);
+  if (resolution.reverifyRequested) {
+    await deps.setTaskReverifyRequested(projectSlug, task.id);
+  }
   const workflowId = resolution.workflowId;
   const attempt = latestByEnv(artifacts, "deploy_attempt", env, { realAttemptsOnly: true });
   if (!attempt) {
@@ -43056,9 +43404,13 @@ async function runDeployGateTick(deps, projectSlug, run3, task) {
       await deps.handoff(projectSlug, task, run3, "verification_steps_missing");
       return { kind: "handoff", reason: "verification_steps_missing" };
     }
+    if (resolution.blockReason) {
+      await deps.handoff(projectSlug, task, run3, `${resolution.blockReason}:${env}`);
+      return { kind: "handoff", reason: `${resolution.blockReason}:${env}` };
+    }
     if (!workflowId) {
-      await deps.handoff(projectSlug, task, run3, `workflow_id_missing:${env}`);
-      return { kind: "handoff", reason: `workflow_id_missing:${env}` };
+      await deps.handoff(projectSlug, task, run3, `deploy_target_unset:${env}`);
+      return { kind: "handoff", reason: `deploy_target_unset:${env}` };
     }
     if (!run3.branch) {
       await deps.handoff(projectSlug, task, run3, "run_branch_missing");
@@ -43076,19 +43428,13 @@ async function runDeployGateTick(deps, projectSlug, run3, task) {
     try {
       await deps.client.dispatchTaskDeploy(projectSlug, task.id, { env, ref: run3.branch, workflowId: String(workflowId) });
     } catch (error51) {
-      if (resolution.source === "operator") {
-        await deps.handoff(
-          projectSlug,
-          task,
-          run3,
-          `deploy_workflow_operator_choice_stale:${env}:${String(error51).slice(0, 120)}`
-        );
-        return { kind: "handoff", reason: `deploy_workflow_operator_choice_stale:${env}` };
+      if (!resolution.pinned && !resolution.reverifyRequested) {
+        deps.recordDeployTargetTelemetry("deploy_dispatch_failed_fingerprint_unchanged");
       }
       await deps.handoff(projectSlug, task, run3, `workflow_dispatch_failed:${env}:${String(error51).slice(0, 120)}`);
       return { kind: "handoff", reason: `workflow_dispatch_failed:${env}` };
     }
-    if (resolution.resolvedFromStore) {
+    if (!resolution.pinned) {
       await deps.client.updateExecutionRun(projectSlug, run3.id, {
         [env === "dev" ? "devWorkflowId" : "prodWorkflowId"]: workflowId
       });
@@ -43731,9 +44077,14 @@ var BASE_INSTRUCTIONS_PREFIX = [
   "  if you are blocked and a human must decide before the work can continue, leave it at `handoff_needed`.",
   "",
   "File artifacts:",
-  "- Decide BEFORE writing your result whether the operator will scan it, compare across it,",
-  "  re-read it later, keep it, or share it. If so it is a file, not inline text \u2014 judge by use,",
-  "  not by topic, domain, or data type.",
+  "- Decide BEFORE writing your result, by PROVENANCE: output assembled from data you RETRIEVED",
+  "  this run (API, browser, analytics, database, a search over project records) that comes out as",
+  "  a multi-record or multi-dimension result is a FILE, not inline text.",
+  "- Your own synthesis or comparison stays inline however structured it looks, and so does a",
+  "  retrieval yielding one value. Both conditions must hold before it becomes a file. When it",
+  "  qualifies, produce the file; never merely offer one.",
+  "- Mixed output counts as retrieved: if any material part came from a retrieval, treat the whole",
+  "  result as retrieved rather than splitting it between inline text and a file.",
   "- When your output is a file (markdown report, HTML, screenshot), upload it with",
   "  `upload_artifact` and embed the returned markdown link \u2014 never inline large blobs",
   "  into chat, spec, or note text.",
@@ -45180,7 +45531,35 @@ async function runBackstopSweep(deps, drive = (slug, id) => driveRun(deps, slug,
                 await deployGateHandoff(deps, projectSlug, t, r.id, reason, r.leaseId);
               },
               budgetSeconds: deps.deployGate.budgetSeconds ?? deployPollBudgetSeconds(),
-              now: () => /* @__PURE__ */ new Date()
+              now: () => /* @__PURE__ */ new Date(),
+              getTaskDeployTarget: async (projectSlug, taskId, env) => deps.client.getTaskDeployTarget(projectSlug, taskId, env),
+              getRepoSnapshot: async (projectSlug) => {
+                try {
+                  const topology = await deps.client.getDeployTopology(projectSlug);
+                  return { lastFingerprint: topology.fingerprint, lastSnapshot: topology.snapshot };
+                } catch {
+                  return null;
+                }
+              },
+              lookupTopologyEntry: async (projectSlug, fingerprint, label, env) => {
+                try {
+                  const topology = await deps.client.getDeployTopology(projectSlug);
+                  if (topology.fingerprint !== fingerprint) return null;
+                  const entry = topology.entries.find((e) => e.label === label && e.env === env);
+                  return entry ? { workflowId: entry.workflowId, workflowPath: entry.workflowPath, workflowSha: entry.workflowSha } : null;
+                } catch {
+                  return null;
+                }
+              },
+              setTaskReverifyRequested: async (projectSlug, taskId) => {
+                await deps.client.updateTask(projectSlug, taskId, { reverifyRequested: true }).catch(() => {
+                });
+              },
+              recordDeployTargetTelemetry: (counter) => {
+                console.log(
+                  JSON.stringify({ event: "deploy_target_telemetry", counter, projectSlug: slug, taskId: task.id })
+                );
+              }
             };
             await runDeployGateTick(gateDeps, slug, run3, task);
           } catch {
@@ -50366,12 +50745,13 @@ var DEFAULT_DIRECTOR_BRIDGE_ALLOWED_ORIGINS = [
   "http://localhost:*",
   "http://127.0.0.1:*",
   "http://[::1]:*",
-  // Staging Vercel team migrated 2026-07-28 (see docs/reference/deployments.md). The prior
-  // fnnzzz-fnnzzzs-projects web alias was dropped once no operator was left on an old build.
-  // mrrlin2 hit usage limits and was replaced by mrrlin3 on 2026-08-11; the mrrlin2 web alias
-  // was dropped the same day since no operator was left on that build either.
-  "https://mrrlin-web-mrrlin3.vercel.app",
-  "https://app.mrrlin.dev",
+  // Staging decoupled onto the stable custom domain staging.mrrlin.com on 2026-08-14 (Cloudflare DNS
+  // in front of the mrrlin3 Vercel project). The Vercel-owned web alias (mrrlin-web-mrrlin3.vercel.app)
+  // and the old app.mrrlin.dev origin are dropped from the defaults: the browser now reaches the
+  // bridge from the owned domain, which is stable across future Vercel project/team moves.
+  // See docs/reference/deployments.md.
+  "https://staging.mrrlin.com",
+  // Production web (unchanged).
   "https://mrrlin-web.vercel.app"
 ];
 function normalizeReasoningEffort(value) {
@@ -50669,9 +51049,17 @@ function buildThreadStartParams(msg, config2, desiredModel) {
     "  is not measurable, re-set `verificationDueAt` to a new date with a reason.",
     "",
     "File artifacts contract \u2014 decide the delivery medium BEFORE you compose the reply:",
-    "- First ask what the operator will DO with this output. If they will scan it, compare across",
-    "  it, re-read it later, keep it, or share it, it belongs in a FILE. If they need to know one",
-    "  thing right now, chat alone is right. Judge by use, not by topic, domain, or data type.",
+    "- Decide by PROVENANCE, not by predicting what the operator will do later. If this answer is",
+    "  assembled from data you RETRIEVED this turn (an HTTP/API call, the browser, analytics, a",
+    "  database, a search over project records) AND it comes out as a multi-record or",
+    "  multi-dimension result rather than one fact or a few values, it belongs in a FILE.",
+    "- Your own synthesis, comparison, or judgement belongs in chat, however structured it looks.",
+    "  A retrieval that yields one number or one line also belongs in chat. Both conditions must",
+    "  hold before it becomes a file.",
+    "- Mixed answers count as retrieved: if any material part of the result came from a retrieval,",
+    "  treat the whole answer as retrieved rather than splitting it between chat and a file.",
+    '- When it qualifies, PRODUCE the file. Offering one ("I can give you this as CSV/JSON") is the',
+    "  failure, not the courtesy.",
     "- When it is a file: write it (`.md` for linear prose, `.html` when structure or layout",
     "  carries meaning), upload with `upload_artifact` (class=temp for one-off downloads,",
     "  class=durable when a spec/evidence page references it; pass taskId when known), and paste",
@@ -51843,7 +52231,18 @@ function createBridgeMessageHandler(deps) {
       });
       const mapper = thread.mapper;
       mapper.reset();
-      const contextPrefix = renderContextPrefix({ ...msg.context, directorSessionId });
+      const contextFocusTaskId = msg.context?.focusTaskId?.trim();
+      const contextProjectSlug = msg.context?.projectSlug?.trim();
+      let answeredQuestions;
+      if (deps.listAnsweredQuestions && contextFocusTaskId && contextProjectSlug) {
+        try {
+          const acknowledged = await deps.listAnsweredQuestions(contextProjectSlug, contextFocusTaskId);
+          const withAnswers = acknowledged.filter((item) => Boolean(item.answer)).map((item) => ({ answer: item.answer, question: item.body }));
+          answeredQuestions = withAnswers.length ? withAnswers : void 0;
+        } catch {
+        }
+      }
+      const contextPrefix = renderContextPrefix({ ...msg.context, answeredQuestions, directorSessionId });
       const sendInTurn = (msg2) => {
         const buf = thread.replay;
         if (!buf) {
@@ -52529,7 +52928,7 @@ async function startDirectorBridge() {
       if (!body) return;
       const id = `II-MCPUPD-${(0, import_node_crypto8.randomUUID)()}`;
       try {
-        const row = await client.createInboxItem(projectSlug, { id, kind: "question", body });
+        const row = await client.createInboxItem(projectSlug, { id, kind: "info", body });
         process.stderr.write(
           `[mrrlin-mcp director-bridge] info bridge.self_update.inbox_filed ${JSON.stringify({
             projectSlug,
@@ -52549,6 +52948,7 @@ async function startDirectorBridge() {
         );
       }
     },
+    listAnsweredQuestions: (projectSlug, taskId) => client.listInboxItems(projectSlug, { status: "acknowledged", kind: "question", taskId }),
     // External-agents control plane: the real spawn runner, with the EXTERNAL_AGENTS_CLI operator
     // escape hatch bound here (the handlers stay spawn-free and this is the only production seam).
     runExternalAgentsCli: (args, opts) => runExternalAgentsCli(args, { ...opts, envCliPath: process.env["EXTERNAL_AGENTS_CLI"] })
@@ -52963,11 +53363,13 @@ function renderContextPrefix(context) {
   const urlPath = context?.urlPath?.trim() ? context.urlPath.trim() : void 0;
   const focusTaskId = context?.focusTaskId?.trim() ? context.focusTaskId.trim() : void 0;
   const directorSessionId = context?.directorSessionId?.trim() ? context.directorSessionId.trim() : void 0;
+  const answeredQuestions = context?.answeredQuestions?.length ? context.answeredQuestions : void 0;
   const payload = {};
   if (projectSlug) payload.projectSlug = projectSlug;
   if (urlPath) payload.urlPath = urlPath;
   if (focusTaskId) payload.focusTaskId = focusTaskId;
   if (directorSessionId) payload.directorSessionId = directorSessionId;
+  if (answeredQuestions) payload.answeredQuestions = answeredQuestions;
   const keys = Object.keys(payload);
   if (keys.length === 0) return "";
   return `Context (JSON): ${JSON.stringify(payload)}`;
@@ -57546,6 +57948,8 @@ var mcpToolNames = {
   resetDirectorThread: "reset_director_thread",
   archiveTask: "archive_task",
   unarchiveTask: "unarchive_task",
+  takeOverTask: "take_over_task",
+  closeTaskAsWontDo: "close_task_as_wont_do",
   updateWikiPage: "update_wiki_page",
   markSpecReady: "mark_spec_ready",
   runSpecConsensus: "run_spec_consensus",
@@ -58052,6 +58456,8 @@ var updateTaskInputSchema = taskScopedSchema.merge(mrrlinTaskUpdateSchema);
 var resetDirectorThreadInputSchema = taskScopedSchema;
 var archiveTaskInputSchema = taskScopedSchema;
 var unarchiveTaskInputSchema = taskScopedSchema;
+var takeOverTaskInputSchema = taskScopedSchema.merge(mrrlinTakeOverTaskRequestSchema);
+var closeTaskAsWontDoInputSchema = taskScopedSchema.merge(mrrlinCloseTaskAsWontDoRequestSchema);
 var listPlansInputSchema = projectScopedSchema;
 var createPlanInputSchema = projectScopedSchema.merge(mrrlinPlanCreateSchema);
 var updatePlanInputSchema = planScopedSchema.merge(mrrlinPlanUpdateSchema);
@@ -58209,6 +58615,8 @@ var mcpToolInputSchemas = {
   [mcpToolNames.resetDirectorThread]: resetDirectorThreadInputSchema,
   [mcpToolNames.archiveTask]: archiveTaskInputSchema,
   [mcpToolNames.unarchiveTask]: unarchiveTaskInputSchema,
+  [mcpToolNames.takeOverTask]: takeOverTaskInputSchema,
+  [mcpToolNames.closeTaskAsWontDo]: closeTaskAsWontDoInputSchema,
   [mcpToolNames.updateWikiPage]: updateWikiPageInputSchema,
   [mcpToolNames.markSpecReady]: markSpecReadyInputSchema,
   [mcpToolNames.runSpecConsensus]: runSpecConsensusInputSchema,
@@ -58278,6 +58686,8 @@ var mcpToolOperationIds = {
   [mcpToolNames.resetDirectorThread]: openApiOperationIds.resetDirectorThread,
   [mcpToolNames.archiveTask]: openApiOperationIds.archiveTask,
   [mcpToolNames.unarchiveTask]: openApiOperationIds.unarchiveTask,
+  [mcpToolNames.takeOverTask]: openApiOperationIds.takeOverTask,
+  [mcpToolNames.closeTaskAsWontDo]: openApiOperationIds.closeTaskAsWontDo,
   [mcpToolNames.updateWikiPage]: openApiOperationIds.updateWikiPage,
   [mcpToolNames.markSpecReady]: openApiOperationIds.markSpecReady,
   [mcpToolNames.listInboxItems]: openApiOperationIds.listInboxItems,
@@ -58329,6 +58739,8 @@ var mcpToolDescriptions = {
   [mcpToolNames.resetDirectorThread]: "Clear a task's persisted Director execution thread handle so the next execution run starts a fresh provider thread. Records a director_thread_reset task event.",
   [mcpToolNames.archiveTask]: "Archive a task: hides it from default reads, removes it from plan progress and scheduler consideration, cancels its non-terminal execution runs, and closes its open inbox items. Reversible \u2014 the project owner can restore it with unarchive_task. Records an 'archived' task event.",
   [mcpToolNames.unarchiveTask]: "Restore an archived task to its original status and visibility. Owner-only \u2014 refused with NOT_PROJECT_OWNER for any other caller. Does not resurrect the execution runs or inbox items that were cancelled/closed when the task was archived. Records a 'restored' task event.",
+  [mcpToolNames.takeOverTask]: "Take ownership of a task by assigning it to the provided assignee through the dedicated take-over route.",
+  [mcpToolNames.closeTaskAsWontDo]: "Close a task as won't-do with a required human-readable reason recorded on the task.",
   [mcpToolNames.updateWikiPage]: "Update a markdown Wiki page.",
   [mcpToolNames.markSpecReady]: "Mark a wiki page (folder=Specs) as ready (or not) for execution-run gating. The Director sets this true after validating the spec; any edit to the page's markdown auto-resets it to false.",
   [mcpToolNames.runSpecConsensus]: 'Enqueue the consensus review gate over a Specs/{id} page. Returns IMMEDIATELY with one of: already_converged (a CONVERGED review already exists for the current content \u2014 proceed straight to create_execution_run, do NOT call mark_spec_ready, it is already set), already_reviewed (a terminal CONSENSUS_BLOCKED for this content), already_running (a consensus job is in flight), or queued (a new job was launched). The review runs in the background; its result/blocker arrives in the inbox (info on CONVERGED, handoff on failure) and is surfaced into the open chat. Do NOT call again for the same spec and do NOT poll. On queued/already_running, tell the user it was launched and end the turn. Pass extraHeads: ["researcher"] for specs referencing external libraries/APIs, or ["debugger"] for root-cause/investigation specs to add opt-in specialist reviewers on top of the fixed four. For a NON-code task (domain seo/marketing/content, ADR 0020): the low-risk lanes `seo`, `marketing`, and `content` proceed to `create_execution_run` after consensus, using the same flow as code tasks. Report the spec\'s review outcome to the operator.',
@@ -58776,6 +59188,20 @@ function createMrrlinTools(options) {
       "Unable to unarchive task.",
       async (c, { projectSlug, taskId }) => await c.unarchiveTask(projectSlug, taskId)
     ),
+    [mcpToolNames.takeOverTask]: makeTool(
+      client,
+      mcpToolNames.takeOverTask,
+      "TASK_TAKE_OVER_FAILED",
+      "Unable to take over task.",
+      async (c, { projectSlug, taskId, assignee }) => await c.takeOverTask(projectSlug, taskId, assignee)
+    ),
+    [mcpToolNames.closeTaskAsWontDo]: makeTool(
+      client,
+      mcpToolNames.closeTaskAsWontDo,
+      "TASK_CLOSE_AS_WONT_DO_FAILED",
+      "Unable to close task as won't-do.",
+      async (c, { projectSlug, taskId, reason }) => await c.closeTaskAsWontDo(projectSlug, taskId, reason)
+    ),
     [mcpToolNames.updateWikiPage]: makeTool(
       client,
       mcpToolNames.updateWikiPage,
@@ -59398,13 +59824,15 @@ function installService(deps) {
   }
   const resolvedBins = bins.filter((b) => b !== null);
   const pathEnv = Array.from(new Set(resolvedBins.map((b) => import_node_path21.default.dirname(b)))).join(":");
+  const apiBaseUrl = deps.env.MRRLIN_API_BASE_URL?.trim() || void 0;
+  const staging = deps.env.MRRLIN_STAGING === "1" || !apiBaseUrl && bridgeUrlImpliesStaging(deps.env.MRRLIN_BRIDGE_URL);
   const text = renderEcosystemConfig({
     cwd: resolved.cwd,
     home,
     codexHome: deps.env.CODEX_HOME?.trim() || void 0,
     pathEnv,
-    staging: deps.env.MRRLIN_STAGING === "1",
-    apiBaseUrl: deps.env.MRRLIN_API_BASE_URL?.trim() || void 0
+    staging,
+    apiBaseUrl
   });
   const ecoPath = import_node_path21.default.join(home, ".mrrlin", "ecosystem.config.cjs");
   deps.writeFile(ecoPath, text);
@@ -59527,22 +59955,22 @@ Usage:
   mrrlin-mcp install-browser    Idempotently install the dedicated, pinned
                                 Chromium into ~/.mrrlin/browser/browsers (its own
                                 copy, isolated from the operator's Chrome and
-                                codex-chrome). Run by install-codex; safe to
+                                codex-chrome). Run by configure bridge; safe to
                                 re-run. Exits non-zero on download failure.
 
   mrrlin-mcp browser-serve      Launch the vendored @playwright/mcp against the
                                 dedicated persistent profile
                                 (~/.mrrlin/browser/profile, headed). This is the
-                                command install-codex wires for the
+                                command configure bridge wires for the
                                 [mcp_servers.mrrlin-browser] block.
 
   mrrlin-mcp external-agents-serve
                                 Launch the bundled @mrrlin-dev/external-agents
                                 MCP server (multi-LLM dispatch pool). This is the
-                                command install-codex wires for the
+                                command configure bridge wires for the
                                 [mcp_servers.external-agents] block.
 
-  mrrlin-mcp install-codex      Idempotently register Mrrlin in
+  mrrlin-mcp configure bridge   Idempotently register Mrrlin in
   [--force]                     ~/.codex/config.toml (or CODEX_HOME). Adds an
                                 [mcp_servers.mrrlin] block. Development
                                 checkouts register the local dist/bin.cjs;
@@ -59551,12 +59979,12 @@ Usage:
                                 Bakes API-target env vars into the block as an
                                 inline env table so \`serve\` boots even when the
                                 local 127.0.0.1:8787 is not running. Setup guide:
-                                  MRRLIN_STAGING=1 mrrlin-mcp install-codex
+                                  MRRLIN_STAGING=1 mrrlin-mcp configure bridge
                                 is the canonical path (staging alias + remote-
                                 allow gate in one flag). For a non-staging remote,
                                 pass BOTH the URL AND the allow gate:
                                   MRRLIN_API_BASE_URL=https://... \\
-                                    MRRLIN_API_ALLOW_REMOTE=1 mrrlin-mcp install-codex
+                                    MRRLIN_API_ALLOW_REMOTE=1 mrrlin-mcp configure bridge
                                 Without an allow gate, \`serve\` still refuses any
                                 non-loopback URL (see \`mrrlin-mcp serve\` above).
                                 URL and MRRLIN_STAGING are mutually exclusive at
@@ -59669,8 +60097,8 @@ Usage:
   mrrlin-mcp --help             Show this help.
 
 Operator notes:
-  - install-codex is idempotent: a second run with the same target is a no-op.
-  - install-codex auto-detects how it was installed. Development checkouts keep
+  - configure bridge is idempotent: a second run with the same target is a no-op.
+  - configure bridge auto-detects how it was installed. Development checkouts keep
     using the local dist/bin.cjs; npm installs use
     \`mrrlin-mcp serve\`.
 `;
@@ -59705,16 +60133,29 @@ async function main() {
       process.exitCode = r.status ?? 1;
       return;
     }
-    case "install-codex": {
-      const force = rest.includes("--force");
+    case "configure": {
+      const [target, ...configureRest] = rest;
+      if (target !== "bridge") {
+        process.stderr.write(
+          `configure requires a target. The only supported form is:
+  mrrlin-mcp configure bridge [--force]
+`
+        );
+        if (target !== void 0) {
+          process.stderr.write(`Unknown configure target: ${target}
+`);
+        }
+        process.exit(2);
+      }
+      const force = configureRest.includes("--force");
       const binPath = resolveSelfBinPath();
       try {
         const b = await installBrowser();
-        process.stderr.write(`[mrrlin-mcp install-codex] install-browser ${b.action} ${b.browsersPath}
+        process.stderr.write(`[mrrlin-mcp configure bridge] install-browser ${b.action} ${b.browsersPath}
 `);
       } catch (error51) {
         process.stderr.write(
-          `[mrrlin-mcp install-codex] install-browser FAILED \u2014 config.toml left untouched: ${error51 instanceof Error ? error51.message : String(error51)}
+          `[mrrlin-mcp configure bridge] install-browser FAILED \u2014 config.toml left untouched: ${error51 instanceof Error ? error51.message : String(error51)}
 `
         );
         process.exit(2);
@@ -59725,18 +60166,18 @@ async function main() {
         force,
         serveEnv
       });
-      process.stderr.write(`[mrrlin-mcp install-codex] ${result.action} ${result.configPath}
+      process.stderr.write(`[mrrlin-mcp configure bridge] ${result.action} ${result.configPath}
 `);
       for (const preserved of result.preservedEnvBlocks) {
         process.stderr.write(`${renderEnvPreservedNotice(preserved.blockId, preserved.envKeys)}
 `);
       }
       for (const p of result.prompts) {
-        process.stderr.write(`[mrrlin-mcp install-codex] prompt ${p.name}: ${p.action} ${p.promptPath}
+        process.stderr.write(`[mrrlin-mcp configure bridge] prompt ${p.name}: ${p.action} ${p.promptPath}
 `);
         if (p.action === "skipped-modified") {
           process.stderr.write(
-            `[mrrlin-mcp install-codex] prompt ${p.name}: kept your local edits; run with --force-prompts to overwrite (or delete ${p.promptPath} to take the new bundled version)
+            `[mrrlin-mcp configure bridge] prompt ${p.name}: kept your local edits; run with --force-prompts to overwrite (or delete ${p.promptPath} to take the new bundled version)
 `
           );
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrrlin-dev/mcp",
-  "version": "0.3.67",
+  "version": "0.4.0",
   "type": "module",
   "bin": {
     "mrrlin-mcp": "dist/bin.cjs"
@@ -21,12 +21,12 @@
     "@types/ws": "^8.18.1",
     "esbuild": "^0.24.0",
     "tsx": "^4.22.3",
+    "@mrrlin/client": "0.0.0",
     "@mrrlin/codex-client": "0.0.0",
     "@mrrlin/director-e2e": "0.0.0",
-    "@mrrlin/client": "0.0.0",
     "@mrrlin/schemas": "0.0.0",
-    "@mrrlin/wiki": "0.0.0",
-    "@mrrlin/tsconfig": "0.0.0"
+    "@mrrlin/tsconfig": "0.0.0",
+    "@mrrlin/wiki": "0.0.0"
   },
   "dependencies": {
     "@iarna/toml": "^2.2.5",