@mrrlin-dev/mcp 0.3.68 → 0.4.1

package/dist/bin.cjs

@@ -20700,6 +20700,18 @@ function retargetRetiredApiBaseUrl(input) {
 function retiredApiHostnames() {
   return Object.keys(RETIRED_API_BASE_URLS);
 }
+function bridgeUrlImpliesStaging(input) {
+  const raw = input?.trim();
+  if (!raw) return false;
+  if (isLoopbackUrl(raw)) return true;
+  let hostname3;
+  try {
+    hostname3 = new URL(raw).hostname.toLowerCase();
+  } catch {
+    return false;
+  }
+  return hostname3 === "staging.mrrlin.com";
+}
 function isLoopbackUrl(input) {
   try {
     const url2 = new URL(input);
@@ -20846,11 +20858,12 @@ async function installBrowser(opts = {}) {
 function deriveServeEnvFromProcessEnv(env) {
   const out = {};
   const rawApiUrl = env.MRRLIN_API_BASE_URL?.trim();
+  const bridgeWantsStaging = bridgeUrlImpliesStaging(env.MRRLIN_BRIDGE_URL);
   const apiUrl = rawApiUrl ? retargetRetiredApiBaseUrl(rawApiUrl).baseUrl : void 0;
   if (apiUrl && !isStagingApiBaseUrl(apiUrl)) {
     out.MRRLIN_API_BASE_URL = apiUrl;
     if (env.MRRLIN_API_ALLOW_REMOTE === "1") out.MRRLIN_API_ALLOW_REMOTE = "1";
-  } else if (apiUrl || env.MRRLIN_STAGING === "1") {
+  } else if (apiUrl || env.MRRLIN_STAGING === "1" || bridgeWantsStaging) {
     out.MRRLIN_STAGING = "1";
   }
   return Object.keys(out).length > 0 ? out : void 0;
@@ -21009,7 +21022,7 @@ function blockEnvHasRetiredApiUrl(actual) {
 }
 function renderEnvPreservedNotice(blockId, envKeys) {
   const keys = [...envKeys].sort().join(", ");
-  return `[mrrlin-mcp install-codex] kept your existing [mcp_servers.${blockId}] env keys (${keys}) so your API target is preserved. Re-run with --force to replace or remove it.`;
+  return `[mrrlin-mcp configure bridge] kept your existing [mcp_servers.${blockId}] env keys (${keys}) so your API target is preserved. Re-run with --force to replace or remove it.`;
 }
 async function pathExists(target) {
   try {
@@ -36401,6 +36414,8 @@ var openApiOperationIds = {
   getTask: "getTask",
   archiveTask: "archiveTask",
   unarchiveTask: "unarchiveTask",
+  takeOverTask: "takeOverTask",
+  closeTaskAsWontDo: "closeTaskAsWontDo",
   getWikiPage: "getWikiPage",
   handleGithubInstallCallback: "handleGithubInstallCallback",
   listExecutionArtifacts: "listExecutionArtifacts",
@@ -36461,6 +36476,7 @@ var openApiOperationIds = {
   getOperatorSettings: "getOperatorSettings",
   updateOperatorSettings: "updateOperatorSettings",
   recordOperatorPresence: "recordOperatorPresence",
+  pauseAutopilotForLimit: "pauseAutopilotForLimit",
   getAgentPool: "getAgentPool",
   putAgentPool: "putAgentPool",
   getConsensusConfig: "getConsensusConfig",
@@ -36507,6 +36523,13 @@ var mrrlinOperatorSettingsSchema = external_exports.object({
   activeProjectSlug: external_exports.string().min(1).nullable(),
   // The last time an authenticated BROWSER operator session was observed. Null means never seen.
   lastPresenceAt: external_exports.string().datetime().nullable(),
+  // autopilot-limit-pause: READ-ONLY status for an automatic provider-limit pause. These are never
+  // writable via mrrlinOperatorSettingsUpdateSchema (an explicit operator write clears them
+  // server-side). Non-null autoPauseSource => the current pause is machine-owned; autoPauseResetAt
+  // is the absolute reset time (null = indefinite, manual resume required).
+  autoPauseSource: external_exports.string().min(1).nullable(),
+  autoPauseReason: external_exports.string().min(1).nullable(),
+  autoPauseResetAt: external_exports.string().datetime().nullable(),
   createdAt: external_exports.string().datetime(),
   updatedAt: external_exports.string().datetime()
 });
@@ -36518,6 +36541,11 @@ var mrrlinOperatorSettingsUpdateSchema = external_exports.object({
   message: "OperatorSettingsUpdate requires at least one field"
 });
 var operatorSettingsResponseSchema = external_exports.object({ data: mrrlinOperatorSettingsSchema });
+var autopilotLimitPauseRequestSchema = external_exports.object({
+  source: external_exports.string().min(1).default("provider_limit"),
+  reason: external_exports.string().min(1).max(500),
+  resetAt: external_exports.string().datetime().nullable().default(null)
+}).strict();
 var operatorPresenceResponseSchema = external_exports.object({ data: external_exports.object({ lastPresenceAt: external_exports.string().datetime() }) });
 var operatorPresenceRequestSchema = external_exports.object({ projectSlug: external_exports.string().min(1).optional() }).strict().optional();
 var mrrlinConsensusConfigSchema = external_exports.object({ consensusEnabled: external_exports.boolean() });
@@ -36889,6 +36917,32 @@ var SUPPORTED_EXECUTION_DOMAINS = Object.keys(SUPPORTED_EXECUTION_POLICY_BY_DOMA
 var taxonomyCategorySchema = external_exports.string().min(1).regex(/^[a-z][a-z0-9-]*$/);
 var taxonomySubcategorySchema = external_exports.string().min(1).regex(/^[a-z][a-z0-9-]*$/);
 var mrrlinTaskAssigneeSchema = external_exports.union([external_exports.string().regex(/^@/), external_exports.string().email()]).nullable();
+var mrrlinStopReasonSchema = external_exports.enum([
+  "task_terminal",
+  "active_run_exists",
+  "draft_running",
+  "consensus_running",
+  "spec_changed_during_advance",
+  "run_limit_reached",
+  "backoff_pending",
+  "blocked_by_active",
+  "spec_missing",
+  "spec_draft_failed",
+  "spec_not_specs_folder",
+  "awaiting_clarification",
+  "consensus_blocked",
+  "consensus_run_failed",
+  "consensus_disabled_spec_not_ready",
+  "spec_approval_pending",
+  "awaiting_handoff",
+  "assigned_to_other",
+  "attempts_exhausted",
+  "daily_job_budget_exhausted",
+  "taken_over",
+  "operator_absent",
+  "autonomy_paused",
+  "unknown"
+]);
 var mrrlinTaskSchema = external_exports.object({
   // Output-optional (not defaulted-required) so existing task fixtures/mocks across the
   // codebase need no churn; DB rows always resolve it to `string | null` via taskRowToTask.
@@ -36903,6 +36957,9 @@ var mrrlinTaskSchema = external_exports.object({
   autonomyReason: external_exports.string().min(1).max(240),
   blockedBy: external_exports.array(mrrlinTaskIdSchema),
   category: taxonomyCategorySchema,
+  // Slice 3 (task-stall-visibility): why a task was closed as won't-do -- populated only by
+  // closeTaskAsWontDo. Output-optional so existing task fixtures need no churn.
+  closeReason: external_exports.string().nullable().optional(),
   directorThreadId: external_exports.string().nullable().default(null),
   dueDate: external_exports.string().date().nullable(),
   followUpAt: external_exports.string().datetime().nullable(),
@@ -36911,6 +36968,9 @@ var mrrlinTaskSchema = external_exports.object({
   latestJudgement: external_exports.string().nullable().default(null),
   latestJudgementAt: external_exports.string().datetime().nullable().default(null),
   latestJudgementKind: external_exports.enum(["autonomy", "handoff"]).nullable().default(null),
+  // Slice 3: the retry-backoff timer for exactly spec_draft_failed/consensus_run_failed -- a task
+  // whose next_attempt_at is in the future is skipped from admission (backoff_pending).
+  nextAttemptAt: external_exports.string().datetime().nullable().optional(),
   notes: external_exports.string().nullable().default(null),
   // Raw operator request captured at task creation (operator-authored ONLY, never Director-generated).
   // The intent-aware spec gate judges the spec against this; null/absent ⇒ the gate fail-closes.
@@ -36920,6 +36980,14 @@ var mrrlinTaskSchema = external_exports.object({
   planId: mrrlinPlanIdSchema.nullable(),
   specApproved: mrrlinSpecApprovedSchema.optional(),
   specWikiPageId: mrrlinWikiPageIdSchema.nullable(),
+  // Slice 3: episode bookkeeping alongside the async_jobs-derived countEpisodeAttempts --
+  // stallAttemptCount backs the exponential-backoff formula, stallRearmed guards against
+  // re-arming the same episode's ceiling more than once.
+  stallAttemptCount: external_exports.number().int().nonnegative().optional(),
+  stallRearmed: external_exports.boolean().optional(),
+  stallNextAction: external_exports.string().nullable().optional(),
+  stallReason: mrrlinStopReasonSchema.nullable().optional(),
+  stallSince: external_exports.string().datetime().nullable().optional(),
   status: mrrlinTaskStatusSchema,
   subcategory: taxonomySubcategorySchema,
   tags: mrrlinTaskTagsSchema,
@@ -36982,6 +37050,12 @@ var mrrlinWikiPageSchema = external_exports.object({
 var mrrlinMarkSpecReadyRequestSchema = external_exports.object({
   ready: external_exports.boolean()
 });
+var mrrlinTakeOverTaskRequestSchema = external_exports.object({
+  assignee: external_exports.string().min(1)
+});
+var mrrlinCloseTaskAsWontDoRequestSchema = external_exports.object({
+  reason: external_exports.string().min(1)
+});
 var mrrlinGithubBindingSchema = external_exports.object({
   appInstallationState: external_exports.enum(["installed", "missing"]),
   installationId: external_exports.number().int().positive().nullable().default(null),
@@ -37997,7 +38071,8 @@ var mrrlinInFlightSchedulerEntrySchema = external_exports.discriminatedUnion("ki
 ]);
 var mrrlinIneligibleTaskSchema = external_exports.object({
   task: mrrlinTaskSchema,
-  autonomyLevel: mrrlinAutonomyLevelSchema
+  autonomyLevel: mrrlinAutonomyLevelSchema,
+  reason: external_exports.string().nullable().optional()
 });
 var schedulerPendingTasksResponseSchema = external_exports.object({
   data: external_exports.object({
@@ -38021,6 +38096,12 @@ var schedulerPendingTasksResponseSchema = external_exports.object({
     // person actually running the project) is visible as a large number instead of the autopilot
     // silently doing nothing.
     excludedByOwnershipCount: external_exports.number().int().min(0),
+    // Additive: the same ownership exclusion grouped by assignee. This reveals who the
+    // autopilot is waiting for without returning task ids or titles in this endpoint.
+    ownershipExcludedAssignees: external_exports.array(external_exports.object({
+      assignee: external_exports.string(),
+      count: external_exports.number().int().min(1)
+    })),
     // Additive: true when the operator-web-presence gate is the reason nothing new is starting
     // (autonomyPaused takes precedence when both apply). Computed by the same shared helper the
     // tick uses, so this page can never claim a task is starting when the tick would decline it.
@@ -38055,7 +38136,7 @@ var wakeDirectorResponseSchema = external_exports.object({
     }))
   })
 });
-var mrrlinInboxItemKindSchema = external_exports.enum(["proposal", "check_in", "question", "handoff", "info"]);
+var mrrlinInboxItemKindSchema = external_exports.enum(["proposal", "check_in", "question", "handoff", "info", "completed"]);
 var mrrlinInboxItemStatusSchema = external_exports.enum(["pending", "approved", "rejected", "acknowledged"]);
 var mrrlinInboxItemIdSchema = external_exports.string().regex(/^II-[A-Za-z0-9._-]+$/);
 var mrrlinInboxItemActionPayloadSchema = external_exports.object({
@@ -38124,6 +38205,7 @@ var mrrlinInboxItemSchema = external_exports.object({
   projectSlug: mrrlinProjectSlugSchema,
   questionOptions: mrrlinInboxQuestionOptionsSchema.nullable().default(null),
   readAt: external_exports.string().datetime().nullable(),
+  reason: external_exports.string().nullable().optional(),
   status: mrrlinInboxItemStatusSchema,
   taskId: mrrlinTaskIdSchema.nullable()
 }).superRefine((value, context) => {
@@ -38514,6 +38596,36 @@ function addTurnTokenUsage(total, turn) {
   };
 }
 
+// ../../packages/codex-client/dist/rate-limit.js
+var EXHAUSTION_USED_PERCENT = 100;
+function windowExhausted(window) {
+  if (!window)
+    return false;
+  return typeof window.usedPercent === "number" && Number.isFinite(window.usedPercent) && window.usedPercent >= EXHAUSTION_USED_PERCENT;
+}
+function normalizeResetEpochSeconds(resetsAt, nowMs) {
+  if (typeof resetsAt !== "number" || !Number.isFinite(resetsAt))
+    return null;
+  const resetMs = resetsAt * 1e3;
+  if (resetMs <= nowMs)
+    return null;
+  return new Date(resetMs).toISOString();
+}
+function detectExhaustedProviderLimit(snapshot, nowMs) {
+  if (!snapshot)
+    return null;
+  const reachedType = typeof snapshot.rateLimitReachedType === "string" ? snapshot.rateLimitReachedType.trim() : "";
+  const exhausted = reachedType.length > 0 || windowExhausted(snapshot.primary) || windowExhausted(snapshot.secondary);
+  if (!exhausted)
+    return null;
+  const candidates = [
+    normalizeResetEpochSeconds(snapshot.primary?.resetsAt, nowMs),
+    normalizeResetEpochSeconds(snapshot.secondary?.resetsAt, nowMs)
+  ].filter((value) => value !== null);
+  const resetAt = candidates.length > 0 ? candidates.reduce((a, b) => a > b ? a : b) : null;
+  return { exhausted: true, resetAt };
+}
+
 // ../../packages/client/dist/agent-token-provider.js
 var AgentTokenProviderError = class extends Error {
   code;
@@ -38970,6 +39082,22 @@ function createMrrlinClient(config2) {
       });
       return taskResponseSchema.parse(body).data;
     },
+    async takeOverTask(projectSlug, taskId, assignee) {
+      const body = await request(`${projectPath(projectSlug)}/tasks/${encodeURIComponent(taskId)}/take-over`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ assignee })
+      });
+      return taskResponseSchema.parse(body).data;
+    },
+    async closeTaskAsWontDo(projectSlug, taskId, reason) {
+      const body = await request(`${projectPath(projectSlug)}/tasks/${encodeURIComponent(taskId)}/wont-do`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ reason })
+      });
+      return taskResponseSchema.parse(body).data;
+    },
     async updateWikiPage(projectSlug, pageId, patch) {
       const body = await request(`${projectPath(projectSlug)}/wiki/${encodeURIComponent(pageId)}`, {
         body: JSON.stringify(patch),
@@ -39408,6 +39536,15 @@ function createMrrlinClient(config2) {
       });
       return operatorSettingsResponseSchema.parse(body).data;
     },
+    async pauseAutopilotForLimit(input) {
+      const parsed = autopilotLimitPauseRequestSchema.parse(input);
+      const body = await request(`/operator/autopilot/limit-pause`, {
+        body: JSON.stringify(parsed),
+        headers: { "content-type": "application/json" },
+        method: "POST"
+      });
+      return operatorSettingsResponseSchema.parse(body).data;
+    },
     async recordOperatorPresence(input) {
       const projectSlug = input?.projectSlug;
       const body = await request(`/operator/presence`, {
@@ -40050,7 +40187,7 @@ function startCodexProbe(deps = {}) {
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.3.68";
+var PKG_VERSION = "0.4.1";
 
 // src/api-base-url-migrate.ts
 var import_node_fs2 = __toESM(require("node:fs"), 1);
@@ -42861,7 +42998,7 @@ function onComplete(outcome, input) {
     }
     const taskRef = parsed.taskTitle ? `${input.taskId} \u2014 ${parsed.taskTitle}` : input.taskId;
     return {
-      kind: "info",
+      kind: "completed",
       taskId: input.taskId,
       body: `Spec drafted automatically for ${taskRef} \u2014 page ${parsed.pageId ?? "?"} in Specs/. The next scheduler tick will run the consensus review.`
     };
@@ -43921,6 +44058,10 @@ function executionTurnBudgetMessage(budgetMs) {
 function isExecutionTurnTimeoutReason(reason) {
   return reason.startsWith(EXECUTION_TURN_TIMEOUT_PREFIX) || reason.startsWith(EXECUTION_TURN_STALL_PREFIX);
 }
+function reportAutopilotLimitPause(client, reason, resetAt) {
+  void client.pauseAutopilotForLimit({ source: "provider_limit", reason, resetAt }).catch(() => {
+  });
+}
 function isDeliverableGateRetryableReason(reason) {
   return DELIVERABLE_GATE_RETRYABLE_REASON_PREFIXES.some((prefix) => reason.startsWith(prefix));
 }
@@ -43992,20 +44133,24 @@ var BASE_INSTRUCTIONS_PREFIX = [
   "  if you are blocked and a human must decide before the work can continue, leave it at `handoff_needed`.",
   "",
   "File artifacts:",
-  "- Decide BEFORE writing your result whether the operator will scan it, compare across it,",
-  "  re-read it later, keep it, or share it. If so it is a file, not inline text \u2014 judge by use,",
-  "  not by topic, domain, or data type.",
-  "- When your output is a file (markdown report, HTML, screenshot), upload it with",
-  "  `upload_artifact` and embed the returned markdown link \u2014 never inline large blobs",
-  "  into chat, spec, or note text.",
+  "- Decide BEFORE writing your result, by PROVENANCE: output assembled from data you RETRIEVED",
+  "  this run (API, browser, analytics, database, a search over project records) that comes out as",
+  "  a multi-record or multi-dimension result is a FILE, not inline text.",
+  "- Your own synthesis or comparison stays inline however structured it looks, and so does a",
+  "  retrieval yielding one value. Both conditions must hold before it becomes a file. When it",
+  "  qualifies, produce the file; never merely offer one.",
+  "- Mixed output counts as retrieved: if any material part came from a retrieval, treat the whole",
+  "  result as retrieved rather than splitting it between inline text and a file.",
+  "- When your output is a file (markdown report, HTML), call `deliver_file`: pass the body inline",
+  "  as `content` and embed the returned markdown link. It needs no writable path, so it is the",
+  "  default even when this run path cannot write files \u2014 never inline large blobs into chat,",
+  "  spec, or note text.",
   "- class=temp for one-off operator hand-offs (48h); class=durable for anything a spec",
   "  or evidence page will reference (180 days). Always pass taskId/runId when known.",
-  "- Anything user-facing delivered as a file MUST be uploaded. Files are capped at 5MB \u2014",
-  "  split or summarize larger outputs.",
-  "- `upload_artifact` needs a real local file path, so it presupposes you can write one. When this",
-  "  run path CAN write files, produce the artifact normally \u2014 that is the default. ONLY when it",
-  "  cannot write, do NOT attempt the file: put the summary in your result text and state what a",
-  "  file would have held. Never fake a path you did not write.",
+  "- Anything user-facing delivered as a file MUST go through `deliver_file`. Files are capped at",
+  "  5MB \u2014 split or summarize larger outputs.",
+  "- Use `upload_artifact` only for a file already on disk (e.g. a screenshot the browser wrote);",
+  "  it needs a real local path, so never fake a path you did not write.",
   "",
   "Produced URLs \u2014 the operator's per-page links come only from you:",
   "- Call `record_produced_url` after publishing EACH web page this task produced, so the task UI",
@@ -44335,6 +44480,17 @@ async function driveTurn(deps, codex, projectSlug, runId, leaseId, threadId, inp
       }
       const usage = !notifThreadId || notifThreadId === threadId ? extractTurnTokenUsage(method, params) : null;
       if (usage) turnUsage = usage;
+      if (method === "account/rateLimits/updated") {
+        const snapshot = params?.rateLimits ?? null;
+        const signal = detectExhaustedProviderLimit(snapshot, Date.now());
+        if (signal) {
+          reportAutopilotLimitPause(
+            deps.client,
+            "Codex provider limit exhausted during an autonomous execution run.",
+            signal.resetAt
+          );
+        }
+      }
       const events = mapper.mapNotification(
         { method, params },
         threadId
@@ -50959,13 +51115,22 @@ function buildThreadStartParams(msg, config2, desiredModel) {
     "  is not measurable, re-set `verificationDueAt` to a new date with a reason.",
     "",
     "File artifacts contract \u2014 decide the delivery medium BEFORE you compose the reply:",
-    "- First ask what the operator will DO with this output. If they will scan it, compare across",
-    "  it, re-read it later, keep it, or share it, it belongs in a FILE. If they need to know one",
-    "  thing right now, chat alone is right. Judge by use, not by topic, domain, or data type.",
-    "- When it is a file: write it (`.md` for linear prose, `.html` when structure or layout",
-    "  carries meaning), upload with `upload_artifact` (class=temp for one-off downloads,",
-    "  class=durable when a spec/evidence page references it; pass taskId when known), and paste",
-    "  the returned markdown link into your reply.",
+    "- Decide by PROVENANCE, not by predicting what the operator will do later. If this answer is",
+    "  assembled from data you RETRIEVED this turn (an HTTP/API call, the browser, analytics, a",
+    "  database, a search over project records) AND it comes out as a multi-record or",
+    "  multi-dimension result rather than one fact or a few values, it belongs in a FILE.",
+    "- Your own synthesis, comparison, or judgement belongs in chat, however structured it looks.",
+    "  A retrieval that yields one number or one line also belongs in chat. Both conditions must",
+    "  hold before it becomes a file.",
+    "- Mixed answers count as retrieved: if any material part of the result came from a retrieval,",
+    "  treat the whole answer as retrieved rather than splitting it between chat and a file.",
+    '- When it qualifies, PRODUCE the file. Offering one ("I can give you this as CSV/JSON") is the',
+    "  failure, not the courtesy.",
+    "- When it is a file: choose the format (`.md` for linear prose, `.html` when structure or",
+    "  layout carries meaning), then call `deliver_file` \u2014 pass the body inline as `content` and it",
+    "  needs no local file (class=temp for one-off downloads, class=durable when a spec/evidence",
+    "  page references it; pass taskId when known), and paste the returned markdown link into your",
+    "  reply. Use `upload_artifact` only for a file that already exists on disk (e.g. a screenshot).",
     "- The chat reply must still stand alone as a complete answer even if the file is never opened:",
     "  the headline finding, the few points that matter, then the link. Never reduce it to",
     '  "see attached" or "details in the report".',
@@ -51202,6 +51367,10 @@ var DEFAULT_WORKTREE_RETENTION_HOURS = 48;
 function worktreeRetentionMs() {
   return readEnvInt("MRRLIN_DIRECTOR_WORKTREE_RETENTION_HOURS", DEFAULT_WORKTREE_RETENTION_HOURS) * 36e5;
 }
+function reportAutopilotLimitPause2(client, reason, resetAt) {
+  void client.pauseAutopilotForLimit({ source: "provider_limit", reason, resetAt }).catch(() => {
+  });
+}
 async function runOrphanWorktreeSweep(client, opts) {
   const cutoff = Date.now() - worktreeRetentionMs();
   const isReapable = (worktreePath) => {
@@ -52133,7 +52302,18 @@ function createBridgeMessageHandler(deps) {
       });
       const mapper = thread.mapper;
       mapper.reset();
-      const contextPrefix = renderContextPrefix({ ...msg.context, directorSessionId });
+      const contextFocusTaskId = msg.context?.focusTaskId?.trim();
+      const contextProjectSlug = msg.context?.projectSlug?.trim();
+      let answeredQuestions;
+      if (deps.listAnsweredQuestions && contextFocusTaskId && contextProjectSlug) {
+        try {
+          const acknowledged = await deps.listAnsweredQuestions(contextProjectSlug, contextFocusTaskId);
+          const withAnswers = acknowledged.filter((item) => Boolean(item.answer)).map((item) => ({ answer: item.answer, question: item.body }));
+          answeredQuestions = withAnswers.length ? withAnswers : void 0;
+        } catch {
+        }
+      }
+      const contextPrefix = renderContextPrefix({ ...msg.context, answeredQuestions, directorSessionId });
       const sendInTurn = (msg2) => {
         const buf = thread.replay;
         if (!buf) {
@@ -52201,7 +52381,13 @@ function createBridgeMessageHandler(deps) {
             pokeActivity();
             if (method === "account/rateLimits/updated") {
               const snapshot = params?.rateLimits ?? null;
-              if (snapshot) sendInTurn({ type: "rateLimits", directorSessionId, rateLimits: snapshot });
+              if (snapshot) {
+                sendInTurn({ type: "rateLimits", directorSessionId, rateLimits: snapshot });
+                const signal = detectExhaustedProviderLimit(snapshot, Date.now());
+                if (signal) {
+                  deps.reportLimitPause?.("Codex provider limit exhausted during a Director turn.", signal.resetAt);
+                }
+              }
             }
             const events = mapper.mapNotification({ method, params }, threadId);
             for (const event of events) {
@@ -52303,6 +52489,10 @@ ${effectiveText}` : effectiveText;
               forward(event);
             }
             if (outputEvents === 0) {
+              deps.reportLimitPause?.(
+                "Director turn completed without output; Codex likely hit its usage or credits limit.",
+                null
+              );
               sendInTurn({
                 type: "error",
                 directorSessionId,
@@ -52800,6 +52990,7 @@ async function startDirectorBridge() {
     turnInactivity: () => ({ idleMs: chatTurnIdleMs(), maxMs: chatTurnMaxMs() }),
     checkoutRegistry,
     setCodexAuth: (s) => health.setCodexAuth(s),
+    reportLimitPause: (reason, resetAt) => reportAutopilotLimitPause2(client, reason, resetAt),
     getPairingQr: async () => {
       if (!relayConfigured || !remoteRelay) return { status: "not-configured" };
       const payload = remoteRelay.qrPayload;
@@ -52819,7 +53010,7 @@ async function startDirectorBridge() {
       if (!body) return;
       const id = `II-MCPUPD-${(0, import_node_crypto8.randomUUID)()}`;
       try {
-        const row = await client.createInboxItem(projectSlug, { id, kind: "question", body });
+        const row = await client.createInboxItem(projectSlug, { id, kind: "info", body });
         process.stderr.write(
           `[mrrlin-mcp director-bridge] info bridge.self_update.inbox_filed ${JSON.stringify({
             projectSlug,
@@ -52839,6 +53030,7 @@ async function startDirectorBridge() {
         );
       }
     },
+    listAnsweredQuestions: (projectSlug, taskId) => client.listInboxItems(projectSlug, { status: "acknowledged", kind: "question", taskId }),
     // External-agents control plane: the real spawn runner, with the EXTERNAL_AGENTS_CLI operator
     // escape hatch bound here (the handlers stay spawn-free and this is the only production seam).
     runExternalAgentsCli: (args, opts) => runExternalAgentsCli(args, { ...opts, envCliPath: process.env["EXTERNAL_AGENTS_CLI"] })
@@ -53253,11 +53445,13 @@ function renderContextPrefix(context) {
   const urlPath = context?.urlPath?.trim() ? context.urlPath.trim() : void 0;
   const focusTaskId = context?.focusTaskId?.trim() ? context.focusTaskId.trim() : void 0;
   const directorSessionId = context?.directorSessionId?.trim() ? context.directorSessionId.trim() : void 0;
+  const answeredQuestions = context?.answeredQuestions?.length ? context.answeredQuestions : void 0;
   const payload = {};
   if (projectSlug) payload.projectSlug = projectSlug;
   if (urlPath) payload.urlPath = urlPath;
   if (focusTaskId) payload.focusTaskId = focusTaskId;
   if (directorSessionId) payload.directorSessionId = directorSessionId;
+  if (answeredQuestions) payload.answeredQuestions = answeredQuestions;
   const keys = Object.keys(payload);
   if (keys.length === 0) return "";
   return `Context (JSON): ${JSON.stringify(payload)}`;
@@ -57271,30 +57465,9 @@ var HUMANIZE_TEMPLATE_BY_KIND = {
   missing_requirement: "A required part of the task is still missing from the spec. What should it say?",
   acceptance_criteria_detail: "The direction is clear, but the spec still needs a sharper success check. What should count as done?"
 };
-var HUMANIZE_CONTEXT_CAP = 200;
-function truncateToSentenceBoundary(text, cap) {
-  if (text.length <= cap) return text;
-  const sentences = text.match(/.+?[.!?](?=\s|$)/g);
-  if (sentences) {
-    let kept = "";
-    let keptCount = 0;
-    for (const sentence of sentences) {
-      const candidate = kept ? `${kept} ${sentence.trim()}` : sentence.trim();
-      if (candidate.length > cap) break;
-      kept = candidate;
-      keptCount++;
-    }
-    if (kept) return keptCount < sentences.length ? `${kept} \u2026` : kept;
-  }
-  const cutIdx = text.lastIndexOf(" ", cap);
-  return text.slice(0, cutIdx > 0 ? cutIdx : cap).trim() + "\u2026";
-}
 function humanizeClarificationBody(clarification) {
   const prefix = HUMANIZE_TEMPLATE_BY_KIND[clarification.kind];
-  const context = truncateToSentenceBoundary(
-    clarification.rawQuestion.replace(/\b(?:parseable|SPEC_IDENTITY_MISMATCH|machine-usable)\b/gi, "").replace(/\s+/g, " ").trim(),
-    HUMANIZE_CONTEXT_CAP
-  );
+  const context = clarification.rawQuestion.replace(/\b(?:parseable|SPEC_IDENTITY_MISMATCH|machine-usable)\b/gi, "").replace(/\s+/g, " ").trim();
   return context ? `${prefix} ${context}` : prefix;
 }
 var defaultNativeSpecGateBuilders = { buildSpecGateDeps, runSpecGate };
@@ -57589,7 +57762,7 @@ function onComplete2(outcome, input) {
       };
     }
     return {
-      kind: "info",
+      kind: "completed",
       ...taskId ? { taskId } : {},
       body: taskRef ? `Consensus CONVERGED for ${taskRef} (spec Specs/${input.pageId}); spec_ready set. Ready to create an execution run.` : `Consensus CONVERGED for Specs/${input.pageId}; spec_ready set. Ready to create an execution run.`
     };
@@ -57720,7 +57893,7 @@ function onComplete3(outcome, input) {
       };
     }
     return {
-      kind: "info",
+      kind: "completed",
       ...taskId ? { taskId } : {},
       body: taskRef ? `Deliverable consensus CONVERGED for ${taskRef} (Deliverables/${input.pageId}); it meets the acceptance criteria.` : `Deliverable consensus CONVERGED for Deliverables/${input.pageId}; it meets the acceptance criteria.`
     };
@@ -57836,11 +58009,14 @@ var mcpToolNames = {
   resetDirectorThread: "reset_director_thread",
   archiveTask: "archive_task",
   unarchiveTask: "unarchive_task",
+  takeOverTask: "take_over_task",
+  closeTaskAsWontDo: "close_task_as_wont_do",
   updateWikiPage: "update_wiki_page",
   markSpecReady: "mark_spec_ready",
   runSpecConsensus: "run_spec_consensus",
   runCodeReviewerGate: "run_code_reviewer_gate",
   uploadArtifact: "upload_artifact",
+  deliverFile: "deliver_file",
   listArtifactFiles: "list_artifact_files",
   reclaimExecutionRunLease: "reclaim_execution_run_lease",
   restartExecutionRun: "restart_execution_run",
@@ -58342,6 +58518,8 @@ var updateTaskInputSchema = taskScopedSchema.merge(mrrlinTaskUpdateSchema);
 var resetDirectorThreadInputSchema = taskScopedSchema;
 var archiveTaskInputSchema = taskScopedSchema;
 var unarchiveTaskInputSchema = taskScopedSchema;
+var takeOverTaskInputSchema = taskScopedSchema.merge(mrrlinTakeOverTaskRequestSchema);
+var closeTaskAsWontDoInputSchema = taskScopedSchema.merge(mrrlinCloseTaskAsWontDoRequestSchema);
 var listPlansInputSchema = projectScopedSchema;
 var createPlanInputSchema = projectScopedSchema.merge(mrrlinPlanCreateSchema);
 var updatePlanInputSchema = planScopedSchema.merge(mrrlinPlanUpdateSchema);
@@ -58424,6 +58602,20 @@ var uploadArtifactInputSchema = projectScopedSchema.merge(
     description: external_exports.string().optional().describe("Shown in the run's artifact history; ignored when runId is not provided.")
   })
 );
+var deliverFileInputSchema = projectScopedSchema.merge(
+  external_exports.object({
+    filename: external_exports.string().min(1).describe(
+      "Bare filename with extension (e.g. 'notes.md'). No path separators or '..' allowed."
+    ),
+    content: external_exports.string().describe("UTF-8 text content of the file."),
+    class: mrrlinArtifactFileClassSchema.describe(
+      "temp = 48h one-off hand-off; durable = 180d, for spec/evidence references."
+    ),
+    taskId: mrrlinTaskIdSchema.optional(),
+    runId: mrrlinExecutionRunIdSchema.optional(),
+    description: external_exports.string().optional().describe("Shown in the run's artifact history; ignored when runId is not provided.")
+  })
+);
 var listArtifactFilesInputSchema = projectScopedSchema.merge(
   external_exports.object({
     taskId: mrrlinTaskIdSchema.optional(),
@@ -58499,6 +58691,8 @@ var mcpToolInputSchemas = {
   [mcpToolNames.resetDirectorThread]: resetDirectorThreadInputSchema,
   [mcpToolNames.archiveTask]: archiveTaskInputSchema,
   [mcpToolNames.unarchiveTask]: unarchiveTaskInputSchema,
+  [mcpToolNames.takeOverTask]: takeOverTaskInputSchema,
+  [mcpToolNames.closeTaskAsWontDo]: closeTaskAsWontDoInputSchema,
   [mcpToolNames.updateWikiPage]: updateWikiPageInputSchema,
   [mcpToolNames.markSpecReady]: markSpecReadyInputSchema,
   [mcpToolNames.runSpecConsensus]: runSpecConsensusInputSchema,
@@ -58507,6 +58701,7 @@ var mcpToolInputSchemas = {
   [mcpToolNames.createInboxItem]: createInboxItemInputSchema,
   [mcpToolNames.decideInboxItem]: decideInboxItemInputSchema,
   [mcpToolNames.uploadArtifact]: uploadArtifactInputSchema,
+  [mcpToolNames.deliverFile]: deliverFileInputSchema,
   [mcpToolNames.listArtifactFiles]: listArtifactFilesInputSchema,
   [mcpToolNames.reclaimExecutionRunLease]: reclaimExecutionRunLeaseInputSchema,
   [mcpToolNames.restartExecutionRun]: restartExecutionRunInputSchema,
@@ -58568,6 +58763,8 @@ var mcpToolOperationIds = {
   [mcpToolNames.resetDirectorThread]: openApiOperationIds.resetDirectorThread,
   [mcpToolNames.archiveTask]: openApiOperationIds.archiveTask,
   [mcpToolNames.unarchiveTask]: openApiOperationIds.unarchiveTask,
+  [mcpToolNames.takeOverTask]: openApiOperationIds.takeOverTask,
+  [mcpToolNames.closeTaskAsWontDo]: openApiOperationIds.closeTaskAsWontDo,
   [mcpToolNames.updateWikiPage]: openApiOperationIds.updateWikiPage,
   [mcpToolNames.markSpecReady]: openApiOperationIds.markSpecReady,
   [mcpToolNames.listInboxItems]: openApiOperationIds.listInboxItems,
@@ -58619,6 +58816,8 @@ var mcpToolDescriptions = {
   [mcpToolNames.resetDirectorThread]: "Clear a task's persisted Director execution thread handle so the next execution run starts a fresh provider thread. Records a director_thread_reset task event.",
   [mcpToolNames.archiveTask]: "Archive a task: hides it from default reads, removes it from plan progress and scheduler consideration, cancels its non-terminal execution runs, and closes its open inbox items. Reversible \u2014 the project owner can restore it with unarchive_task. Records an 'archived' task event.",
   [mcpToolNames.unarchiveTask]: "Restore an archived task to its original status and visibility. Owner-only \u2014 refused with NOT_PROJECT_OWNER for any other caller. Does not resurrect the execution runs or inbox items that were cancelled/closed when the task was archived. Records a 'restored' task event.",
+  [mcpToolNames.takeOverTask]: "Take ownership of a task by assigning it to the provided assignee through the dedicated take-over route.",
+  [mcpToolNames.closeTaskAsWontDo]: "Close a task as won't-do with a required human-readable reason recorded on the task.",
   [mcpToolNames.updateWikiPage]: "Update a markdown Wiki page.",
   [mcpToolNames.markSpecReady]: "Mark a wiki page (folder=Specs) as ready (or not) for execution-run gating. The Director sets this true after validating the spec; any edit to the page's markdown auto-resets it to false.",
   [mcpToolNames.runSpecConsensus]: 'Enqueue the consensus review gate over a Specs/{id} page. Returns IMMEDIATELY with one of: already_converged (a CONVERGED review already exists for the current content \u2014 proceed straight to create_execution_run, do NOT call mark_spec_ready, it is already set), already_reviewed (a terminal CONSENSUS_BLOCKED for this content), already_running (a consensus job is in flight), or queued (a new job was launched). The review runs in the background; its result/blocker arrives in the inbox (info on CONVERGED, handoff on failure) and is surfaced into the open chat. Do NOT call again for the same spec and do NOT poll. On queued/already_running, tell the user it was launched and end the turn. Pass extraHeads: ["researcher"] for specs referencing external libraries/APIs, or ["debugger"] for root-cause/investigation specs to add opt-in specialist reviewers on top of the fixed four. For a NON-code task (domain seo/marketing/content, ADR 0020): the low-risk lanes `seo`, `marketing`, and `content` proceed to `create_execution_run` after consensus, using the same flow as code tasks. Report the spec\'s review outcome to the operator.',
@@ -58640,6 +58839,7 @@ var mcpToolDescriptions = {
   [mcpToolNames.createInboxItem]: "Create an operator-inbox item (proposal, check_in, question, handoff, or info) for a project.",
   [mcpToolNames.decideInboxItem]: "Approve, reject, or acknowledge an operator-inbox item. Rejection requires a reason.",
   [mcpToolNames.uploadArtifact]: "Upload a local file (md/txt/html/csv/json/pdf/png/jpg/webp/gif, <=5MB) as a project artifact. Returns a stable markdown link to embed in chat/spec/handoff text. Use class=temp for one-off hand-offs, class=durable for anything referenced by specs or evidence. Pass runId to record the file in that run's artifact history; pass taskId to surface it on the task's Artifacts list.",
+  [mcpToolNames.deliverFile]: "This is the DEFAULT way to deliver a file the agent just composed; it takes the body inline as UTF-8 `content` in one call and needs no local file or writable path; `upload_artifact` is for a file that already exists on disk; use class=temp / class=durable and taskId/runId semantics with a 5MB cap.",
   [mcpToolNames.listArtifactFiles]: "List uploaded artifact files for the project (optionally filtered by taskId/runId), newest first.",
   [mcpToolNames.reclaimExecutionRunLease]: "Clear a stale pending execution-run lease when the lease has aged past staleSeconds. Returns the reclaimed run on success, null when the lease is not stale yet, and surfaces a structured conflict when reclaim retries are exhausted.",
   [mcpToolNames.restartExecutionRun]: "Restart a parked execution run (handoff_requested or handoff_queued) back to pending so the queue can resume it.",
@@ -58786,6 +58986,68 @@ function makeReadTool(client, name, fallbackCode, fallbackMessage, handler, proj
 }
 function createMrrlinTools(options) {
   const client = createMrrlinClient(withAuth(options));
+  async function uploadArtifactBytes(c, args) {
+    const { bytes: bytes3, class: artifactClass, contentType, description, filename, projectSlug, runId, taskId } = args;
+    const created = await c.createArtifactFile(projectSlug, {
+      class: artifactClass,
+      contentType,
+      filename,
+      runId,
+      sizeBytes: bytes3.byteLength,
+      taskId
+    });
+    let stage = "upload";
+    try {
+      if (created.upload.kind === "presigned-post") {
+        const form = new FormData();
+        for (const [field, value] of Object.entries(created.upload.fields)) {
+          form.append(field, value);
+        }
+        form.append("file", new Blob([bytes3], { type: contentType }), filename);
+        const bareFetch = options.fetch ?? globalThis.fetch;
+        const uploadResponse = await bareFetch(created.upload.url, { body: form, method: "POST" });
+        if (!uploadResponse.ok) {
+          throw new Error(
+            `Presigned upload failed: ${uploadResponse.status} ${await uploadResponse.text()}`
+          );
+        }
+      } else {
+        await c.uploadArtifactFileContent(projectSlug, created.artifact.id, bytes3, contentType);
+      }
+      stage = "complete";
+      const completed = await c.completeArtifactFile(projectSlug, created.artifact.id);
+      if (completed.runId) {
+        stage = "append-run-artifact";
+        await c.appendExecutionArtifact(projectSlug, completed.runId, {
+          id: `EA-${completed.id}`,
+          kind: "file",
+          payload: {
+            artifactFileId: completed.id,
+            class: completed.class,
+            contentType: completed.contentType,
+            description: description ?? null,
+            filename: completed.filename,
+            sizeBytes: completed.sizeBytes,
+            stableUrl: created.stableUrl
+          }
+        });
+      }
+      const markdown = contentType.startsWith("image/") ? `![${completed.filename}](${created.stableUrl})` : `[${completed.filename}](${created.stableUrl})`;
+      return {
+        artifactFile: completed,
+        markdown,
+        stableUrl: created.stableUrl
+      };
+    } catch (error51) {
+      const original = error51 instanceof MrrlinApiError ? error51.code : error51 instanceof McpToolCodedError ? error51.code : "ARTIFACT_FILE_UPLOAD_FAILED";
+      const message = error51 instanceof Error ? error51.message : String(error51);
+      const note = stage === "append-run-artifact" ? "file uploaded and completed successfully; only the run-history append failed \u2014 do NOT re-upload, reference the stableUrl directly" : "a pending row may remain; it is reaped automatically after 1h";
+      throw new McpToolCodedError(
+        original,
+        `artifactFileId=${created.artifact.id} stableUrl=${created.stableUrl} (failed at ${stage}; ${note}): ${message}`
+      );
+    }
+  }
   return {
     [mcpToolNames.archivePlan]: makeTool(
       client,
@@ -59066,6 +59328,20 @@ function createMrrlinTools(options) {
       "Unable to unarchive task.",
       async (c, { projectSlug, taskId }) => await c.unarchiveTask(projectSlug, taskId)
     ),
+    [mcpToolNames.takeOverTask]: makeTool(
+      client,
+      mcpToolNames.takeOverTask,
+      "TASK_TAKE_OVER_FAILED",
+      "Unable to take over task.",
+      async (c, { projectSlug, taskId, assignee }) => await c.takeOverTask(projectSlug, taskId, assignee)
+    ),
+    [mcpToolNames.closeTaskAsWontDo]: makeTool(
+      client,
+      mcpToolNames.closeTaskAsWontDo,
+      "TASK_CLOSE_AS_WONT_DO_FAILED",
+      "Unable to close task as won't-do.",
+      async (c, { projectSlug, taskId, reason }) => await c.closeTaskAsWontDo(projectSlug, taskId, reason)
+    ),
     [mcpToolNames.updateWikiPage]: makeTool(
       client,
       mcpToolNames.updateWikiPage,
@@ -59339,65 +59615,61 @@ function createMrrlinTools(options) {
           );
         }
         const filename = import_node_path20.default.basename(filePath);
-        const created = await c.createArtifactFile(projectSlug, {
+        return uploadArtifactBytes(c, {
+          bytes: bytes3,
           class: artifactClass,
           contentType,
+          description,
           filename,
+          projectSlug,
           runId,
-          sizeBytes: bytes3.byteLength,
           taskId
         });
-        let stage = "upload";
-        try {
-          if (created.upload.kind === "presigned-post") {
-            const form = new FormData();
-            for (const [field, value] of Object.entries(created.upload.fields)) {
-              form.append(field, value);
-            }
-            form.append("file", new Blob([bytes3], { type: contentType }), filename);
-            const bareFetch = options.fetch ?? globalThis.fetch;
-            const uploadResponse = await bareFetch(created.upload.url, { body: form, method: "POST" });
-            if (!uploadResponse.ok) {
-              throw new Error(
-                `Presigned upload failed: ${uploadResponse.status} ${await uploadResponse.text()}`
-              );
-            }
-          } else {
-            await c.uploadArtifactFileContent(projectSlug, created.artifact.id, bytes3, contentType);
-          }
-          stage = "complete";
-          const completed = await c.completeArtifactFile(projectSlug, created.artifact.id);
-          if (completed.runId) {
-            stage = "append-run-artifact";
-            await c.appendExecutionArtifact(projectSlug, completed.runId, {
-              id: `EA-${completed.id}`,
-              kind: "file",
-              payload: {
-                artifactFileId: completed.id,
-                class: completed.class,
-                contentType: completed.contentType,
-                description: description ?? null,
-                filename: completed.filename,
-                sizeBytes: completed.sizeBytes,
-                stableUrl: created.stableUrl
-              }
-            });
-          }
-          const markdown = contentType.startsWith("image/") ? `![${completed.filename}](${created.stableUrl})` : `[${completed.filename}](${created.stableUrl})`;
-          return {
-            artifactFile: completed,
-            markdown,
-            stableUrl: created.stableUrl
-          };
-        } catch (error51) {
-          const original = error51 instanceof MrrlinApiError ? error51.code : error51 instanceof McpToolCodedError ? error51.code : "ARTIFACT_FILE_UPLOAD_FAILED";
-          const message = error51 instanceof Error ? error51.message : String(error51);
-          const note = stage === "append-run-artifact" ? "file uploaded and completed successfully; only the run-history append failed \u2014 do NOT re-upload, reference the stableUrl directly" : "a pending row may remain; it is reaped automatically after 1h";
+      }
+    ),
+    [mcpToolNames.deliverFile]: makeTool(
+      client,
+      mcpToolNames.deliverFile,
+      "ARTIFACT_FILE_UPLOAD_FAILED",
+      "Unable to deliver artifact file.",
+      async (c, { projectSlug, filename, content, class: artifactClass, taskId, runId, description }) => {
+        if (filename.includes("/") || filename.includes("\\") || filename.includes("..")) {
+          throw new McpToolCodedError(
+            "ARTIFACT_FILE_NAME_INVALID",
+            `Invalid filename '${filename}'; provide a bare filename with no path separators or '..'.`
+          );
+        }
+        const extension2 = import_node_path20.default.extname(filename).toLowerCase();
+        const contentType = ARTIFACT_EXTENSION_TYPES[extension2];
+        if (!contentType) {
+          throw new McpToolCodedError(
+            "ARTIFACT_FILE_TYPE_UNSUPPORTED",
+            `Unsupported artifact extension '${extension2}'. Allowed: ${Object.keys(ARTIFACT_EXTENSION_TYPES).join(", ")}.`
+          );
+        }
+        const bytes3 = new Uint8Array(Buffer.from(content, "utf8"));
+        if (bytes3.byteLength === 0) {
+          throw new McpToolCodedError(
+            "ARTIFACT_FILE_EMPTY",
+            "File is empty (0 bytes); write content before uploading."
+          );
+        }
+        if (bytes3.byteLength > MRRLIN_ARTIFACT_FILE_MAX_BYTES) {
           throw new McpToolCodedError(
-            original,
-            `artifactFileId=${created.artifact.id} stableUrl=${created.stableUrl} (failed at ${stage}; ${note}): ${message}`
+            "ARTIFACT_FILE_TOO_LARGE",
+            "Artifact exceeds 5MB; split or summarize instead."
           );
         }
+        return uploadArtifactBytes(c, {
+          bytes: bytes3,
+          class: artifactClass,
+          contentType,
+          description,
+          filename,
+          projectSlug,
+          runId,
+          taskId
+        });
       }
     ),
     [mcpToolNames.listArtifactFiles]: makeTool(
@@ -59688,13 +59960,15 @@ function installService(deps) {
   }
   const resolvedBins = bins.filter((b) => b !== null);
   const pathEnv = Array.from(new Set(resolvedBins.map((b) => import_node_path21.default.dirname(b)))).join(":");
+  const apiBaseUrl = deps.env.MRRLIN_API_BASE_URL?.trim() || void 0;
+  const staging = deps.env.MRRLIN_STAGING === "1" || !apiBaseUrl && bridgeUrlImpliesStaging(deps.env.MRRLIN_BRIDGE_URL);
   const text = renderEcosystemConfig({
     cwd: resolved.cwd,
     home,
     codexHome: deps.env.CODEX_HOME?.trim() || void 0,
     pathEnv,
-    staging: deps.env.MRRLIN_STAGING === "1",
-    apiBaseUrl: deps.env.MRRLIN_API_BASE_URL?.trim() || void 0
+    staging,
+    apiBaseUrl
   });
   const ecoPath = import_node_path21.default.join(home, ".mrrlin", "ecosystem.config.cjs");
   deps.writeFile(ecoPath, text);
@@ -59817,22 +60091,22 @@ Usage:
   mrrlin-mcp install-browser    Idempotently install the dedicated, pinned
                                 Chromium into ~/.mrrlin/browser/browsers (its own
                                 copy, isolated from the operator's Chrome and
-                                codex-chrome). Run by install-codex; safe to
+                                codex-chrome). Run by configure bridge; safe to
                                 re-run. Exits non-zero on download failure.
 
   mrrlin-mcp browser-serve      Launch the vendored @playwright/mcp against the
                                 dedicated persistent profile
                                 (~/.mrrlin/browser/profile, headed). This is the
-                                command install-codex wires for the
+                                command configure bridge wires for the
                                 [mcp_servers.mrrlin-browser] block.
 
   mrrlin-mcp external-agents-serve
                                 Launch the bundled @mrrlin-dev/external-agents
                                 MCP server (multi-LLM dispatch pool). This is the
-                                command install-codex wires for the
+                                command configure bridge wires for the
                                 [mcp_servers.external-agents] block.
 
-  mrrlin-mcp install-codex      Idempotently register Mrrlin in
+  mrrlin-mcp configure bridge   Idempotently register Mrrlin in
   [--force]                     ~/.codex/config.toml (or CODEX_HOME). Adds an
                                 [mcp_servers.mrrlin] block. Development
                                 checkouts register the local dist/bin.cjs;
@@ -59841,12 +60115,12 @@ Usage:
                                 Bakes API-target env vars into the block as an
                                 inline env table so \`serve\` boots even when the
                                 local 127.0.0.1:8787 is not running. Setup guide:
-                                  MRRLIN_STAGING=1 mrrlin-mcp install-codex
+                                  MRRLIN_STAGING=1 mrrlin-mcp configure bridge
                                 is the canonical path (staging alias + remote-
                                 allow gate in one flag). For a non-staging remote,
                                 pass BOTH the URL AND the allow gate:
                                   MRRLIN_API_BASE_URL=https://... \\
-                                    MRRLIN_API_ALLOW_REMOTE=1 mrrlin-mcp install-codex
+                                    MRRLIN_API_ALLOW_REMOTE=1 mrrlin-mcp configure bridge
                                 Without an allow gate, \`serve\` still refuses any
                                 non-loopback URL (see \`mrrlin-mcp serve\` above).
                                 URL and MRRLIN_STAGING are mutually exclusive at
@@ -59959,8 +60233,8 @@ Usage:
   mrrlin-mcp --help             Show this help.
 
 Operator notes:
-  - install-codex is idempotent: a second run with the same target is a no-op.
-  - install-codex auto-detects how it was installed. Development checkouts keep
+  - configure bridge is idempotent: a second run with the same target is a no-op.
+  - configure bridge auto-detects how it was installed. Development checkouts keep
     using the local dist/bin.cjs; npm installs use
     \`mrrlin-mcp serve\`.
 `;
@@ -59995,16 +60269,29 @@ async function main() {
       process.exitCode = r.status ?? 1;
       return;
     }
-    case "install-codex": {
-      const force = rest.includes("--force");
+    case "configure": {
+      const [target, ...configureRest] = rest;
+      if (target !== "bridge") {
+        process.stderr.write(
+          `configure requires a target. The only supported form is:
+  mrrlin-mcp configure bridge [--force]
+`
+        );
+        if (target !== void 0) {
+          process.stderr.write(`Unknown configure target: ${target}
+`);
+        }
+        process.exit(2);
+      }
+      const force = configureRest.includes("--force");
       const binPath = resolveSelfBinPath();
       try {
         const b = await installBrowser();
-        process.stderr.write(`[mrrlin-mcp install-codex] install-browser ${b.action} ${b.browsersPath}
+        process.stderr.write(`[mrrlin-mcp configure bridge] install-browser ${b.action} ${b.browsersPath}
 `);
       } catch (error51) {
         process.stderr.write(
-          `[mrrlin-mcp install-codex] install-browser FAILED \u2014 config.toml left untouched: ${error51 instanceof Error ? error51.message : String(error51)}
+          `[mrrlin-mcp configure bridge] install-browser FAILED \u2014 config.toml left untouched: ${error51 instanceof Error ? error51.message : String(error51)}
 `
         );
         process.exit(2);
@@ -60015,18 +60302,18 @@ async function main() {
         force,
         serveEnv
       });
-      process.stderr.write(`[mrrlin-mcp install-codex] ${result.action} ${result.configPath}
+      process.stderr.write(`[mrrlin-mcp configure bridge] ${result.action} ${result.configPath}
 `);
       for (const preserved of result.preservedEnvBlocks) {
         process.stderr.write(`${renderEnvPreservedNotice(preserved.blockId, preserved.envKeys)}
 `);
       }
       for (const p of result.prompts) {
-        process.stderr.write(`[mrrlin-mcp install-codex] prompt ${p.name}: ${p.action} ${p.promptPath}
+        process.stderr.write(`[mrrlin-mcp configure bridge] prompt ${p.name}: ${p.action} ${p.promptPath}
 `);
         if (p.action === "skipped-modified") {
           process.stderr.write(
-            `[mrrlin-mcp install-codex] prompt ${p.name}: kept your local edits; run with --force-prompts to overwrite (or delete ${p.promptPath} to take the new bundled version)
+            `[mrrlin-mcp configure bridge] prompt ${p.name}: kept your local edits; run with --force-prompts to overwrite (or delete ${p.promptPath} to take the new bundled version)
 `
           );
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrrlin-dev/mcp",
-  "version": "0.3.68",
+  "version": "0.4.1",
   "type": "module",
   "bin": {
     "mrrlin-mcp": "dist/bin.cjs"
@@ -21,12 +21,12 @@
     "@types/ws": "^8.18.1",
     "esbuild": "^0.24.0",
     "tsx": "^4.22.3",
-    "@mrrlin/wiki": "0.0.0",
-    "@mrrlin/schemas": "0.0.0",
     "@mrrlin/client": "0.0.0",
-    "@mrrlin/tsconfig": "0.0.0",
+    "@mrrlin/codex-client": "0.0.0",
     "@mrrlin/director-e2e": "0.0.0",
-    "@mrrlin/codex-client": "0.0.0"
+    "@mrrlin/schemas": "0.0.0",
+    "@mrrlin/tsconfig": "0.0.0",
+    "@mrrlin/wiki": "0.0.0"
   },
   "dependencies": {
     "@iarna/toml": "^2.2.5",
@@ -47,7 +47,7 @@
     "dev": "tsx watch src/bin.ts serve",
     "lint": "eslint .",
     "start": "node dist/bin.cjs serve",
-    "test": "node scripts/write-version.mjs && node --import tsx --test $(find src -name '*.test.ts' | sort | tr '\\n' ' ')",
+    "test": "pnpm --filter @mrrlin/codex-client build && node scripts/write-version.mjs && node --import tsx --test $(find src -name '*.test.ts' | sort | tr '\\n' ' ')",
     "typecheck": "node scripts/write-version.mjs && pnpm --filter @mrrlin/schemas build && pnpm --filter @mrrlin/client build && pnpm --filter @mrrlin/wiki build && pnpm --filter @mrrlin/codex-client build && pnpm --filter @mrrlin/director-e2e build && tsc -p tsconfig.json --noEmit"
   }
 }