@mrrlin-dev/mcp 0.4.107 → 0.4.108

package/dist/bin.cjs

@@ -41024,8 +41024,8 @@ function createMrrlinClient(config2) {
         throw error51;
       }
     },
-    async getActiveAsyncJob(projectSlug, toolName, dedupKey) {
-      const url2 = appendQuery(`${projectPath(projectSlug)}/async-jobs/active`, { toolName, dedupKey });
+    async getActiveAsyncJob(projectSlug, toolName2, dedupKey) {
+      const url2 = appendQuery(`${projectPath(projectSlug)}/async-jobs/active`, { toolName: toolName2, dedupKey });
       const body = await request(url2);
       return asyncJobMaybeResponseSchema.parse(body).data;
     },
@@ -44198,7 +44198,11 @@ var ClaudeProcess = class {
     if (options.brokerSocket != null) {
       stdio[3] = options.brokerSocket;
     }
-    this.child = (0, import_node_child_process3.spawn)(spawnCmd[0], spawnCmd.slice(1), {
+    const [spawnExecutable, ...spawnArgs] = spawnCmd;
+    if (spawnExecutable === void 0) {
+      throw new Error("Claude command wrapper returned no executable");
+    }
+    this.child = (0, import_node_child_process3.spawn)(spawnExecutable, spawnArgs, {
       cwd: options.cwd?.trim() || void 0,
       // Inherit the operator's env so the CLI picks up their own ~/.claude.json tool registry —
       // unless an explicit mcpConfig was provided in options.
@@ -44740,7 +44744,11 @@ var AgyProcess = class _AgyProcess {
     if (options.brokerSocket != null) {
       stdio[3] = options.brokerSocket;
     }
-    this.child = (0, import_node_child_process4.spawn)(spawnCmd[0], spawnCmd.slice(1), {
+    const [spawnExecutable, ...spawnArgs] = spawnCmd;
+    if (spawnExecutable === void 0) {
+      throw new Error("Agy command wrapper returned no executable");
+    }
+    this.child = (0, import_node_child_process4.spawn)(spawnExecutable, spawnArgs, {
       cwd,
       env: options.env ?? process.env,
       stdio
@@ -45854,7 +45862,7 @@ async function resolvePinnedProviderIps(hosts, options) {
         result[normalized] = records;
         continue;
       }
-    } catch (err) {
+    } catch (_err) {
       if (options?.failClosedOnDnsError) {
         if ((process.env.NODE_ENV === "test" || !process.env.NODE_ENV || process.env.MRRLIN_TEST === "1") && DEFAULT_PINNED_PROVIDER_IPS[normalized]) {
           result[normalized] = DEFAULT_PINNED_PROVIDER_IPS[normalized];
@@ -45917,6 +45925,8 @@ function parseIpv4Bytes(ip) {
   const out = new Uint8Array(4);
   for (let i = 0; i < 4; i++) {
     const p = parts[i];
+    if (p === void 0)
+      return null;
     if (!/^\d+$/.test(p))
       return null;
     if (p.length > 1 && p.startsWith("0"))
@@ -45950,10 +45960,13 @@ function parseIpv6Bytes(ip) {
   }
   const out = new Uint8Array(16);
   if (v4Bytes) {
-    out[12] = v4Bytes[0];
-    out[13] = v4Bytes[1];
-    out[14] = v4Bytes[2];
-    out[15] = v4Bytes[3];
+    const [first, second, third, fourth] = v4Bytes;
+    if (first === void 0 || second === void 0 || third === void 0 || fourth === void 0)
+      return null;
+    out[12] = first;
+    out[13] = second;
+    out[14] = third;
+    out[15] = fourth;
   }
   const targetGroupCount = v4Bytes ? 6 : 8;
   if (doubleColonIdx === -1) {
@@ -45962,6 +45975,8 @@ function parseIpv6Bytes(ip) {
       return null;
     for (let i = 0; i < targetGroupCount; i++) {
       const g = groups[i];
+      if (g === void 0)
+        return null;
       if (!/^[0-9a-f]{1,4}$/.test(g))
         return null;
       const val = parseInt(g, 16);
@@ -45977,6 +45992,8 @@ function parseIpv6Bytes(ip) {
       return null;
     for (let i = 0; i < leftGroups.length; i++) {
       const g = leftGroups[i];
+      if (g === void 0)
+        return null;
       if (!/^[0-9a-f]{1,4}$/.test(g))
         return null;
       const val = parseInt(g, 16);
@@ -45986,6 +46003,8 @@ function parseIpv6Bytes(ip) {
     const omitted = targetGroupCount - leftGroups.length - rightGroups.length;
     for (let i = 0; i < rightGroups.length; i++) {
       const g = rightGroups[i];
+      if (g === void 0)
+        return null;
       if (!/^[0-9a-f]{1,4}$/.test(g))
         return null;
       const val = parseInt(g, 16);
@@ -45997,9 +46016,9 @@ function parseIpv6Bytes(ip) {
   return out;
 }
 function isRestrictedIpv4Bytes(b) {
-  const b0 = b[0];
-  const b1 = b[1];
-  const b2 = b[2];
+  const [b0, b1, b2] = b;
+  if (b0 === void 0 || b1 === void 0 || b2 === void 0)
+    return true;
   if (b0 === 0)
     return true;
   if (b0 === 10)
@@ -46067,9 +46086,13 @@ function isRestrictedIp(ip) {
   }
   if (isLoopback)
     return true;
-  if (v6[0] === 254 && (v6[1] & 192) === 128)
+  const firstByte = v6[0];
+  const secondByte = v6[1];
+  if (firstByte === void 0 || secondByte === void 0)
     return true;
-  if ((v6[0] & 254) === 252)
+  if (firstByte === 254 && (secondByte & 192) === 128)
+    return true;
+  if ((firstByte & 254) === 252)
     return true;
   if (v6[0] === 255)
     return true;
@@ -46098,6 +46121,8 @@ function extractTlsSni(buf) {
     if (offset >= buf.length)
       return null;
     const sidLen = buf[offset];
+    if (sidLen === void 0)
+      return null;
     offset += 1 + sidLen;
     if (offset + 2 > buf.length)
       return null;
@@ -46106,6 +46131,8 @@ function extractTlsSni(buf) {
     if (offset + 1 > buf.length)
       return null;
     const cmLen = buf[offset];
+    if (cmLen === void 0)
+      return null;
     offset += 1 + cmLen;
     if (offset + 2 > buf.length)
       return null;
@@ -46124,6 +46151,8 @@ function extractTlsSni(buf) {
         const sniEnd = Math.min(extensionsEnd, sniOffset + sniListLen);
         while (sniOffset + 3 <= sniEnd) {
           const nameType = buf[sniOffset];
+          if (nameType === void 0)
+            return null;
           const nameLen = buf.readUInt16BE(sniOffset + 1);
           sniOffset += 3;
           if (nameType === 0) {
@@ -46225,7 +46254,13 @@ async function startProviderProxy(allowedHosts, options) {
             return;
           }
         }
-        const validatedIp = options?.allowPrivateUpstream ? "127.0.0.1" : addresses[0].address;
+        const firstAddress = addresses[0];
+        if (!firstAddress) {
+          res.writeHead(502, { "content-type": "text/plain" });
+          res.end(`BAD_GATEWAY: DNS lookup failed for provider host "${effectiveHost}"`);
+          return;
+        }
+        const validatedIp = options?.allowPrivateUpstream ? "127.0.0.1" : firstAddress.address;
         const requestFn = isHttps ? import_node_https.default.request : import_node_http.default.request;
         const transportOpts = {
           host: validatedIp,
@@ -46304,7 +46339,12 @@ async function startProviderProxy(allowedHosts, options) {
           return;
         }
       }
-      const validatedIp = options?.allowPrivateUpstream ? "127.0.0.1" : addresses[0].address;
+      const firstAddress = addresses[0];
+      if (!firstAddress) {
+        clientSocket.end("HTTP/1.1 502 Bad Gateway\\r\\n\\r\\n");
+        return;
+      }
+      const validatedIp = options?.allowPrivateUpstream ? "127.0.0.1" : firstAddress.address;
       const serverSocket = import_node_net.default.connect({ host: validatedIp, port: targetPort }, () => {
         clientSocket.write("HTTP/1.1 200 Connection Established\r\n\r\n");
         let validatedAuthority = false;
@@ -46383,19 +46423,20 @@ async function startProviderProxy(allowedHosts, options) {
   await new Promise((resolve2, reject) => {
     server.on("error", reject);
     if (options?.socketPath) {
+      const socketPath = options.socketPath;
       try {
-        if (import_node_fs2.default.existsSync(options.socketPath)) {
-          import_node_fs2.default.unlinkSync(options.socketPath);
+        if (import_node_fs2.default.existsSync(socketPath)) {
+          import_node_fs2.default.unlinkSync(socketPath);
         }
       } catch {
       }
-      server.listen(options.socketPath, () => {
+      server.listen(socketPath, () => {
         try {
-          import_node_fs2.default.chmodSync(options.socketPath, 384);
+          import_node_fs2.default.chmodSync(socketPath, 384);
         } catch {
         }
         server.unref();
-        assignedSocketPath = options.socketPath;
+        assignedSocketPath = socketPath;
         resolve2();
       });
     } else {
@@ -46597,7 +46638,6 @@ async function createVerificationNetworkSandbox(config2) {
       }
     };
   }
-  const allPinnedIps = Array.from(new Set(Object.values(resolvedIpsMap).flat()));
   const hostsLines = [
     "127.0.0.1 localhost",
     "::1 localhost",
@@ -47137,8 +47177,7 @@ exit $EXIT_CODE`,
     dispose: () => {
       try {
         if (providerProxy) {
-          providerProxy.close().catch(() => {
-          });
+          providerProxy.close().catch(() => void 0);
         }
       } catch {
       }
@@ -50451,8 +50490,8 @@ var Protocol = class {
                   if (queuedMessage.type === "response") {
                     resolver(message);
                   } else {
-                    const errorMessage = message;
-                    const error51 = new McpError(errorMessage.error.code, errorMessage.error.message, errorMessage.error.data);
+                    const errorMessage2 = message;
+                    const error51 = new McpError(errorMessage2.error.code, errorMessage2.error.message, errorMessage2.error.data);
                     resolver(error51);
                   }
                 } else {
@@ -51758,8 +51797,8 @@ var Client = class extends Protocol {
       const wrappedHandler = async (request, extra) => {
         const validatedRequest = safeParse3(ElicitRequestSchema, request);
         if (!validatedRequest.success) {
-          const errorMessage = validatedRequest.error instanceof Error ? validatedRequest.error.message : String(validatedRequest.error);
-          throw new McpError(ErrorCode.InvalidParams, `Invalid elicitation request: ${errorMessage}`);
+          const errorMessage2 = validatedRequest.error instanceof Error ? validatedRequest.error.message : String(validatedRequest.error);
+          throw new McpError(ErrorCode.InvalidParams, `Invalid elicitation request: ${errorMessage2}`);
         }
         const { params } = validatedRequest.data;
         params.mode = params.mode ?? "form";
@@ -51774,15 +51813,15 @@ var Client = class extends Protocol {
         if (params.task) {
           const taskValidationResult = safeParse3(CreateTaskResultSchema, result);
           if (!taskValidationResult.success) {
-            const errorMessage = taskValidationResult.error instanceof Error ? taskValidationResult.error.message : String(taskValidationResult.error);
-            throw new McpError(ErrorCode.InvalidParams, `Invalid task creation result: ${errorMessage}`);
+            const errorMessage2 = taskValidationResult.error instanceof Error ? taskValidationResult.error.message : String(taskValidationResult.error);
+            throw new McpError(ErrorCode.InvalidParams, `Invalid task creation result: ${errorMessage2}`);
           }
           return taskValidationResult.data;
         }
         const validationResult = safeParse3(ElicitResultSchema, result);
         if (!validationResult.success) {
-          const errorMessage = validationResult.error instanceof Error ? validationResult.error.message : String(validationResult.error);
-          throw new McpError(ErrorCode.InvalidParams, `Invalid elicitation result: ${errorMessage}`);
+          const errorMessage2 = validationResult.error instanceof Error ? validationResult.error.message : String(validationResult.error);
+          throw new McpError(ErrorCode.InvalidParams, `Invalid elicitation result: ${errorMessage2}`);
         }
         const validatedResult = validationResult.data;
         const requestedSchema = params.mode === "form" ? params.requestedSchema : void 0;
@@ -51802,16 +51841,16 @@ var Client = class extends Protocol {
       const wrappedHandler = async (request, extra) => {
         const validatedRequest = safeParse3(CreateMessageRequestSchema, request);
         if (!validatedRequest.success) {
-          const errorMessage = validatedRequest.error instanceof Error ? validatedRequest.error.message : String(validatedRequest.error);
-          throw new McpError(ErrorCode.InvalidParams, `Invalid sampling request: ${errorMessage}`);
+          const errorMessage2 = validatedRequest.error instanceof Error ? validatedRequest.error.message : String(validatedRequest.error);
+          throw new McpError(ErrorCode.InvalidParams, `Invalid sampling request: ${errorMessage2}`);
         }
         const { params } = validatedRequest.data;
         const result = await Promise.resolve(handler(request, extra));
         if (params.task) {
           const taskValidationResult = safeParse3(CreateTaskResultSchema, result);
           if (!taskValidationResult.success) {
-            const errorMessage = taskValidationResult.error instanceof Error ? taskValidationResult.error.message : String(taskValidationResult.error);
-            throw new McpError(ErrorCode.InvalidParams, `Invalid task creation result: ${errorMessage}`);
+            const errorMessage2 = taskValidationResult.error instanceof Error ? taskValidationResult.error.message : String(taskValidationResult.error);
+            throw new McpError(ErrorCode.InvalidParams, `Invalid task creation result: ${errorMessage2}`);
           }
           return taskValidationResult.data;
         }
@@ -51819,8 +51858,8 @@ var Client = class extends Protocol {
         const resultSchema = hasTools ? CreateMessageResultWithToolsSchema : CreateMessageResultSchema;
         const validationResult = safeParse3(resultSchema, result);
         if (!validationResult.success) {
-          const errorMessage = validationResult.error instanceof Error ? validationResult.error.message : String(validationResult.error);
-          throw new McpError(ErrorCode.InvalidParams, `Invalid sampling result: ${errorMessage}`);
+          const errorMessage2 = validationResult.error instanceof Error ? validationResult.error.message : String(validationResult.error);
+          throw new McpError(ErrorCode.InvalidParams, `Invalid sampling result: ${errorMessage2}`);
         }
         return validationResult.data;
       };
@@ -52048,18 +52087,18 @@ var Client = class extends Protocol {
     }
     return result;
   }
-  isToolTask(toolName) {
+  isToolTask(toolName2) {
     if (!this._serverCapabilities?.tasks?.requests?.tools?.call) {
       return false;
     }
-    return this._cachedKnownTaskTools.has(toolName);
+    return this._cachedKnownTaskTools.has(toolName2);
   }
   /**
    * Check if a tool requires task-based execution.
    * Unlike isToolTask which includes 'optional' tools, this only checks for 'required'.
    */
-  isToolTaskRequired(toolName) {
-    return this._cachedRequiredTaskTools.has(toolName);
+  isToolTaskRequired(toolName2) {
+    return this._cachedRequiredTaskTools.has(toolName2);
   }
   /**
    * Cache validators for tool output schemas.
@@ -52086,8 +52125,8 @@ var Client = class extends Protocol {
   /**
    * Get cached validator for a tool
    */
-  getToolOutputValidator(toolName) {
-    return this._cachedToolOutputValidators.get(toolName);
+  getToolOutputValidator(toolName2) {
+    return this._cachedToolOutputValidators.get(toolName2);
   }
   async listTools(params, options) {
     const result = await this.request({ method: "tools/list", params }, ListToolsResultSchema, options);
@@ -52630,8 +52669,8 @@ async function parseErrorResponse(input) {
     return new errorClass(error_description || "", error_uri);
   } catch (error51) {
     const redirect = input instanceof Response ? unfollowedRedirect(input, input.url) : void 0;
-    const errorMessage = `${statusCode ? `HTTP ${statusCode}: ` : ""}${redirect ?? `Invalid OAuth error response: ${error51}. Raw body: ${body}`}`;
-    return new ServerError(errorMessage);
+    const errorMessage2 = `${statusCode ? `HTTP ${statusCode}: ` : ""}${redirect ?? `Invalid OAuth error response: ${error51}. Raw body: ${body}`}`;
+    return new ServerError(errorMessage2);
   }
 }
 function issuersMatch(a, b) {
@@ -53974,7 +54013,7 @@ var StdioClientTransport = class {
 };
 
 // src/delivery/invoke.ts
-async function invokeCapability(server, toolName, payload) {
+async function invokeCapability(server, toolName2, payload) {
   const client = new Client({ name: "mrrlin-delivery-invoker", version: "1.0.0" });
   try {
     let result;
@@ -54020,14 +54059,14 @@ async function invokeCapability(server, toolName, payload) {
         await client.connect(transport);
       }
       result = await client.callTool({
-        name: toolName,
+        name: toolName2,
         arguments: isRecord(payload) ? payload : void 0
       });
     } catch (error51) {
-      throw classifyInvokeError(error51, target, toolName);
+      throw classifyInvokeError(error51, target, toolName2);
     }
     if (result.isError) {
-      throw new InvokeToolExecutionError(toolName, extractFirstText(result.content));
+      throw new InvokeToolExecutionError(toolName2, extractFirstText(result.content));
     }
     return { content: result.content, url: extractFirstUrl(result.content) };
   } finally {
@@ -54036,14 +54075,14 @@ async function invokeCapability(server, toolName, payload) {
   }
 }
 var InvokeToolNotFoundError = class extends Error {
-  constructor(toolName, cause) {
-    super(`invokeCapability: tool "${toolName}" not found on the granted server`, { cause });
+  constructor(toolName2, cause) {
+    super(`invokeCapability: tool "${toolName2}" not found on the granted server`, { cause });
     this.name = "InvokeToolNotFoundError";
   }
 };
 var InvokeToolExecutionError = class extends Error {
-  constructor(toolName, detail, cause) {
-    super(`invokeCapability: tool "${toolName}" reported isError -- ${detail}`, { cause });
+  constructor(toolName2, detail, cause) {
+    super(`invokeCapability: tool "${toolName2}" reported isError -- ${detail}`, { cause });
     this.name = "InvokeToolExecutionError";
   }
 };
@@ -54071,7 +54110,7 @@ var InvokeUnexpandedHeaderError = class extends Error {
     this.name = "InvokeUnexpandedHeaderError";
   }
 };
-function classifyInvokeError(error51, url2, toolName) {
+function classifyInvokeError(error51, url2, toolName2) {
   if (error51 instanceof InvokeUnexpandedHeaderError) {
     return error51;
   }
@@ -54081,10 +54120,10 @@ function classifyInvokeError(error51, url2, toolName) {
   }
   if (error51 instanceof McpError) {
     if (error51.code === ErrorCode.MethodNotFound) {
-      return new InvokeToolNotFoundError(toolName, error51);
+      return new InvokeToolNotFoundError(toolName2, error51);
     }
     if (error51.code === ErrorCode.InvalidParams) {
-      return new InvokeMalformedResultError(`invalid parameters for tool "${toolName}": ${error51.message}`, error51);
+      return new InvokeMalformedResultError(`invalid parameters for tool "${toolName2}": ${error51.message}`, error51);
     }
     return new InvokeMalformedResultError(error51.message, error51);
   }
@@ -54160,12 +54199,12 @@ function parsePullRequestUrl(url2) {
   }
   return {};
 }
-async function deliverToGit(server, toolName, payload) {
+async function deliverToGit(server, toolName2, payload) {
   const defaultRoute = server.id ? getDefaultCapabilityRouteForServer(server.id) : null;
   const isDefaultGitHubRoute = defaultRoute?.capability === "repo_host";
   if (payload.operation === "pull_request") {
     const { operation: _operation, ...args } = payload;
-    if (isDefaultGitHubRoute && toolName === defaultRoute.operations.pull_request) {
+    if (isDefaultGitHubRoute && toolName2 === defaultRoute.operations.pull_request) {
       let owner = args.owner;
       let repo = args.repo;
       const repository = args.repository;
@@ -54189,11 +54228,11 @@ async function deliverToGit(server, toolName, payload) {
       if (typeof payload.draft === "boolean") {
         adaptedArgs.draft = payload.draft;
       }
-      return invokeCapability(server, toolName, adaptedArgs);
+      return invokeCapability(server, toolName2, adaptedArgs);
     }
-    return invokeCapability(server, toolName, args);
+    return invokeCapability(server, toolName2, args);
   }
-  if (isDefaultGitHubRoute && (toolName === defaultRoute.operations.pull_request_state || toolName === "pull_request_read")) {
+  if (isDefaultGitHubRoute && (toolName2 === defaultRoute.operations.pull_request_state || toolName2 === "pull_request_read")) {
     const { operation: _operation, ...args } = payload;
     const urlParts = parsePullRequestUrl(payload.pullRequestUrl);
     let owner = args.owner ?? urlParts.owner;
@@ -54209,16 +54248,16 @@ async function deliverToGit(server, toolName, payload) {
     if (owner) adaptedArgs.owner = owner;
     if (repo) adaptedArgs.repo = repo;
     if (pullNumber !== void 0) {
-      if (toolName === "pull_request_read") {
+      if (toolName2 === "pull_request_read") {
         adaptedArgs.method = "get";
         adaptedArgs.pullNumber = pullNumber;
       } else {
         adaptedArgs.pull_number = pullNumber;
       }
     }
-    return invokeCapability(server, toolName, adaptedArgs);
+    return invokeCapability(server, toolName2, adaptedArgs);
   }
-  return invokeCapability(server, toolName, { pullRequestUrl: payload.pullRequestUrl });
+  return invokeCapability(server, toolName2, { pullRequestUrl: payload.pullRequestUrl });
 }
 
 // src/mcp-tool-error.ts
@@ -54297,11 +54336,11 @@ async function deliverToArtifacts(client, projectSlug, payload, bareFetch) {
 }
 
 // src/delivery/send.ts
-async function deliverToSend(server, toolName, payload) {
+async function deliverToSend(server, toolName2, payload) {
   const { operation: _operation, ...args } = payload;
   const defaultRoute = server.id ? getDefaultCapabilityRouteForServer(server.id) : null;
   const isDefaultSlackRoute = defaultRoute?.capability === "send";
-  if (payload.operation === "dispatch" && isDefaultSlackRoute && toolName === defaultRoute.operations.dispatch) {
+  if (payload.operation === "dispatch" && isDefaultSlackRoute && toolName2 === defaultRoute.operations.dispatch) {
     const rawChannel = args.channel_id ?? args.destination ?? args.channel ?? args.to;
     const channelId = typeof rawChannel === "string" ? rawChannel.trim() : rawChannel !== void 0 ? String(rawChannel) : void 0;
     const rawText = args.text ?? args.body ?? args.message ?? args.content;
@@ -54309,15 +54348,15 @@ async function deliverToSend(server, toolName, payload) {
     const adaptedArgs = {};
     if (channelId !== void 0) adaptedArgs.channel_id = channelId;
     if (text !== void 0) adaptedArgs.text = text;
-    return invokeCapability(server, toolName, adaptedArgs);
+    return invokeCapability(server, toolName2, adaptedArgs);
   }
-  return invokeCapability(server, toolName, args);
+  return invokeCapability(server, toolName2, args);
 }
 
 // src/delivery/publish.ts
-async function deliverToPublish(server, toolName, payload) {
+async function deliverToPublish(server, toolName2, payload) {
   const { operation: _operation, ...args } = payload;
-  return invokeCapability(server, toolName, args);
+  return invokeCapability(server, toolName2, args);
 }
 function parsePublishObserveResult(content) {
   const raw = parseStructuredContent(content);
@@ -54472,7 +54511,7 @@ async function proceedToDestination(client, route, resolvedToolName, input) {
       serverId: route.serverId,
       capability: route.capability,
       toolName: resolvedToolName,
-      operationClass: route.operationClass ?? "reversible",
+      operationClass: resolveOperationClass(route, "reversible"),
       payloadDigest
     });
     const idempotencyKey = `deliver:${input.taskProjectSlug}:${permit.id}`;
@@ -54492,7 +54531,7 @@ async function proceedToDestination(client, route, resolvedToolName, input) {
         return {
           ok: false,
           reason: "invocation_failed",
-          message: typeof redemption.error === "string" ? redemption.error : redemption.error?.message ?? "Capability invocation previously failed"
+          message: errorMessage(redemption.error) ?? "Capability invocation previously failed"
         };
       }
       await recordUse(client, route, resolvedToolName, input, "refused");
@@ -54504,7 +54543,7 @@ async function proceedToDestination(client, route, resolvedToolName, input) {
     }
   } catch (permitError) {
     await recordUse(client, route, resolvedToolName, input, "refused");
-    const msg = permitError?.message ?? String(permitError);
+    const msg = errorMessage(permitError) ?? String(permitError);
     const isNoGrant = msg.includes("GRANT_REQUIRED") || msg.includes("no active grant");
     return {
       ok: false,
@@ -54799,7 +54838,7 @@ async function readPublishState(client, projectSlug, taskProjectSlug, payload, m
       return redemption.result;
     }
     if (redemption.status === "failed") {
-      const errMsg = typeof redemption.error === "string" ? redemption.error : redemption.error?.message ?? "Capability invocation previously failed";
+      const errMsg = errorMessage(redemption.error) ?? "Capability invocation previously failed";
       throw new Error(`CAPABILITY_REPLAY_FAILED: ${errMsg}`);
     }
     throw new Error(`OPERATIONAL_INCIDENT: capability invocation ${redemption.id} is in status "${redemption.status}" and cannot be replayed as success`);
@@ -54866,7 +54905,7 @@ async function dispatchPublishOperation(client, projectSlug, taskProjectSlug, ta
       serverId: route.serverId,
       capability: route.capability,
       toolName: resolvedToolName,
-      operationClass: route.operationClass ?? (payload.operation === "preview" ? "reversible" : "irreversible"),
+      operationClass: resolveOperationClass(route, payload.operation === "preview" ? "reversible" : "irreversible"),
       payloadDigest
     });
     const idempotencyKey = `publish:${taskProjectSlug}:${permit.id}`;
@@ -54879,11 +54918,14 @@ async function dispatchPublishOperation(client, projectSlug, taskProjectSlug, ta
     if (redemption.replayed) {
       if (redemption.status === "completed") {
         const use2 = await recordUse(client, route, resolvedToolName, input, "ok");
-        return { ...redemption.result, use: use2 };
+        if (!isRecord3(redemption.result) || !("content" in redemption.result) || !("url" in redemption.result)) {
+          throw new Error("CAPABILITY_REPLAY_INVALID_RESULT: completed publish invocation has no object result");
+        }
+        return { content: redemption.result.content, url: typeof redemption.result.url === "string" ? redemption.result.url : null, use: use2 };
       }
       if (redemption.status === "failed") {
         const use2 = await recordUse(client, route, resolvedToolName, input, "error");
-        const errMsg = typeof redemption.error === "string" ? redemption.error : redemption.error?.message ?? "Capability invocation previously failed";
+        const errMsg = errorMessage(redemption.error) ?? "Capability invocation previously failed";
         throw Object.assign(new Error(`CAPABILITY_REPLAY_FAILED: ${errMsg}`), { use: use2 });
       }
       const use = await recordUse(client, route, resolvedToolName, input, "refused");
@@ -54928,8 +54970,8 @@ async function readPullRequestState(client, projectSlug, taskProjectSlug, pullRe
     throw new RepoHostRouteUnavailableError(`repo_host capability route unavailable: ${resolution.reason}`);
   }
   const { route } = resolution;
-  const toolName = route.operations.pull_request_state;
-  if (typeof toolName !== "string") {
+  const toolName2 = route.operations.pull_request_state;
+  if (typeof toolName2 !== "string") {
     throw new RepoHostRouteUnavailableError('operation "pull_request_state" is not configured for repo_host capability');
   }
   const server = readMcpServerById(mcpConfigPath ?? defaultMcpConfigPath(), route.serverId);
@@ -54950,7 +54992,7 @@ async function readPullRequestState(client, projectSlug, taskProjectSlug, pullRe
     taskId,
     serverId: route.serverId,
     capability: route.capability,
-    toolName,
+    toolName: toolName2,
     operationClass: "read",
     payloadDigest
   });
@@ -54961,18 +55003,18 @@ async function readPullRequestState(client, projectSlug, taskProjectSlug, pullRe
     payloadDigest
   });
   if (redemption.replayed) {
-    if (redemption.status === "completed" && redemption.result && typeof redemption.result.merged === "boolean") {
+    if (redemption.status === "completed" && isRecord3(redemption.result) && typeof redemption.result.merged === "boolean") {
       return { merged: redemption.result.merged };
     }
     if (redemption.status === "failed") {
-      const errMsg = typeof redemption.error === "string" ? redemption.error : redemption.error?.message ?? "Capability invocation previously failed";
+      const errMsg = errorMessage(redemption.error) ?? "Capability invocation previously failed";
       throw new Error(`CAPABILITY_REPLAY_FAILED: ${errMsg}`);
     }
     throw new Error(`OPERATIONAL_INCIDENT: capability invocation ${redemption.id} is in status "${redemption.status}" and cannot be replayed as success`);
   }
   const invocationId = redemption.id;
   try {
-    const result = await deliverToGit(server, toolName, payload);
+    const result = await deliverToGit(server, toolName2, payload);
     const raw = parseStructuredContent(result.content);
     const parsed = gitPullRequestStateResponseSchema.safeParse(raw);
     if (!parsed.success) {
@@ -55003,6 +55045,17 @@ async function readPullRequestState(client, projectSlug, taskProjectSlug, pullRe
 function isRecord3(value) {
   return typeof value === "object" && value !== null;
 }
+function errorMessage(value) {
+  if (typeof value === "string") return value;
+  if (value instanceof Error) return value.message;
+  if (isRecord3(value) && typeof value.message === "string") return value.message;
+  return void 0;
+}
+function resolveOperationClass(route, fallback) {
+  if (!isRecord3(route)) return fallback;
+  const operationClass = route.operationClass;
+  return operationClass === "read" || operationClass === "reversible" || operationClass === "irreversible" ? operationClass : fallback;
+}
 
 // src/decision-consensus.ts
 var ANCHOR_TIMEOUT_MS = Number(process.env["MRRLIN_DECISION_TIMEOUT_MS"] ?? 9e4);
@@ -55149,8 +55202,8 @@ var registry2 = /* @__PURE__ */ new Map();
 function registerAsyncTool(descriptor2) {
   registry2.set(descriptor2.toolName, descriptor2);
 }
-function getAsyncToolDescriptor(toolName) {
-  return registry2.get(toolName);
+function getAsyncToolDescriptor(toolName2) {
+  return registry2.get(toolName2);
 }
 
 // src/async-tools/consensus.ts
@@ -56793,12 +56846,12 @@ function buildProjection(payload, type, ms, telemetry) {
       const tool = rawEvent.tool;
       if (!isRecord4(tool)) return null;
       const toolId = tool.id;
-      const toolName = tool.name;
-      if (typeof toolId !== "string" || typeof toolName !== "string") return null;
+      const toolName2 = tool.name;
+      if (typeof toolId !== "string" || typeof toolName2 !== "string") return null;
       const input = tool.input;
       const argKeys = isRecord4(input) ? Object.keys(input) : [];
       const projectSlug = isRecord4(input) && typeof input.projectSlug === "string" ? input.projectSlug : void 0;
-      const proj = { kind: "tool_use", toolId, toolName, argKeys, seq: maybeSeq ?? 0 };
+      const proj = { kind: "tool_use", toolId, toolName: toolName2, argKeys, seq: maybeSeq ?? 0 };
       if (maybeTurnId !== void 0) proj.turnId = maybeTurnId;
       if (ms !== void 0) proj.ms = ms;
       if (projectSlug !== void 0) proj.projectSlug = projectSlug;
@@ -56974,14 +57027,14 @@ var READ_TOOL_NAMES = /* @__PURE__ */ new Set([
   // call), making every turn that stops a run permanently, unfixably "unresolved".
   "stop_execution_run"
 ]);
-function normalizeToolName(toolName) {
-  return toolName.replace(/^mcp__.+?__/, "");
+function normalizeToolName(toolName2) {
+  return toolName2.replace(/^mcp__.+?__/, "");
 }
 var MRRLIN_MCP_NAMESPACE_PREFIXES = ["mcp__mrrlin__", "mcp__mrrlin-browser__"];
 function classifyToolEffect(rawToolName) {
-  const toolName = normalizeToolName(rawToolName);
-  if (READ_TOOL_NAMES.has(toolName)) return "read";
-  if (OUTWARD_TOOL_NAMES.has(toolName)) return "outward";
+  const toolName2 = normalizeToolName(rawToolName);
+  if (READ_TOOL_NAMES.has(toolName2)) return "read";
+  if (OUTWARD_TOOL_NAMES.has(toolName2)) return "outward";
   if (MRRLIN_MCP_NAMESPACE_PREFIXES.some((prefix) => rawToolName.startsWith(prefix))) return "outward";
   return "read";
 }
@@ -56994,10 +57047,10 @@ var BROWSER_OUTWARD_TOOL_NAMES = /* @__PURE__ */ new Set([
   "browser_select_option"
 ]);
 var IN_PRODUCT_WRITE_TOOL_NAMES = /* @__PURE__ */ new Set(["create_task", "update_task", "create_wiki_page", "update_wiki_page", "create_inbox_item"]);
-function buildBrowserAttemptReceipt(toolName) {
+function buildBrowserAttemptReceipt(toolName2) {
   return {
     kind: "attempt",
-    evidence: { type: "human_tap", value: toolName },
+    evidence: { type: "human_tap", value: toolName2 },
     observedAt: (/* @__PURE__ */ new Date()).toISOString(),
     requiresCovered: []
   };
@@ -57127,20 +57180,20 @@ function createBridgeLogger(stateDir, env = process.env) {
           if (isNewTurn) state.pending = [];
         }
         if (projection?.kind === "tool_use" && typeof projection.toolName === "string" && typeof projection.toolId === "string") {
-          const toolName = normalizeToolName(projection.toolName);
+          const toolName2 = normalizeToolName(projection.toolName);
           if (classifyToolEffect(projection.toolName) === "outward") {
-            if (BROWSER_OUTWARD_TOOL_NAMES.has(toolName)) {
-              syntheticReceipt = buildBrowserAttemptReceipt(toolName);
+            if (BROWSER_OUTWARD_TOOL_NAMES.has(toolName2)) {
+              syntheticReceipt = buildBrowserAttemptReceipt(toolName2);
             } else {
               state.pending.push({
                 turnSpanId: projection.turnId,
-                toolName,
+                toolName: toolName2,
                 toolId: projection.toolId,
                 seq: projection.seq,
                 armedAt: (/* @__PURE__ */ new Date()).toISOString()
               });
             }
-          } else if (IN_PRODUCT_WRITE_TOOL_NAMES.has(toolName) && state.pending.length > 0) {
+          } else if (IN_PRODUCT_WRITE_TOOL_NAMES.has(toolName2) && state.pending.length > 0) {
             if (state.pending.length > 1) {
               recordingObligationMultiResolve = {
                 resolvedCount: state.pending.length,
@@ -57348,10 +57401,10 @@ async function assembleEvidence(stateDir, sessionId, reportId, gateCtx) {
       if (line.projection?.kind !== "tool_use") continue;
       const rawToolId = line.payload?.event?.tool?.id;
       const paired = typeof rawToolId === "string" ? resultByToolId.get(rawToolId) : void 0;
-      const toolName = line.projection.toolName ?? line.payload?.event?.tool?.name ?? "";
+      const toolName2 = line.projection.toolName ?? line.payload?.event?.tool?.name ?? "";
       const ms = line.projection.ms ?? 0;
       const outcome = paired?.projection?.kind === "tool_result" ? paired.projection.outcome ?? "unknown" : "unknown";
-      const step = { toolName, ms, outcome };
+      const step = { toolName: toolName2, ms, outcome };
       if (paired?.projection?.kind === "tool_result" && paired.projection.exitCode !== void 0) {
         step.exitCode = paired.projection.exitCode;
       }
@@ -61611,7 +61664,7 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.4.107";
+var PKG_VERSION = "0.4.108";
 
 // src/receipt-signing.ts
 var import_node_crypto13 = __toESM(require("node:crypto"), 1);
@@ -61838,26 +61891,26 @@ function turnReferences(events) {
     if (event.type === "tool_use") {
       hasToolEvents = true;
       const rawName = event.tool?.name ?? event.name ?? "";
-      const toolName = rawName.replace(/^.*__/, "");
-      const isMutation = MUTATION_TOOLS.has(toolName);
+      const toolName2 = rawName.replace(/^.*__/, "");
+      const isMutation = MUTATION_TOOLS.has(toolName2);
       const inputObj = event.tool?.input && typeof event.tool.input === "object" ? event.tool.input : event.input && typeof event.input === "object" ? event.input : {};
       const rawTargetId = typeof inputObj.taskId === "string" ? inputObj.taskId : typeof inputObj.pageId === "string" ? inputObj.pageId : typeof inputObj.id === "string" ? inputObj.id : null;
       let targetId = null;
       if (rawTargetId) {
-        if ((toolName === "create_task" || toolName === "update_task") && /^GT-\d+$/.test(rawTargetId)) {
+        if ((toolName2 === "create_task" || toolName2 === "update_task") && /^GT-\d+$/.test(rawTargetId)) {
           targetId = rawTargetId;
-        } else if ((toolName === "create_wiki_page" || toolName === "update_wiki_page") && /^WK-\d+$/.test(rawTargetId)) {
+        } else if ((toolName2 === "create_wiki_page" || toolName2 === "update_wiki_page") && /^WK-\d+$/.test(rawTargetId)) {
           targetId = rawTargetId;
         }
       }
       const callId = event.tool?.id ?? event.tool_use_id ?? event.id;
       if (callId && typeof callId === "string") {
         if (isMutation) {
-          keyedPending.set(callId, { toolName, targetId });
+          keyedPending.set(callId, { toolName: toolName2, targetId });
         }
       } else {
         if (isMutation) {
-          unkeyedCalls.push({ isMutation: true, toolName, targetId });
+          unkeyedCalls.push({ isMutation: true, toolName: toolName2, targetId });
         } else {
           unkeyedCalls.push({ isMutation: false });
         }
@@ -67818,13 +67871,13 @@ async function driveAsyncJob(deps, projectSlug, jobId) {
   }
   if (descriptor2.wakeDirector) deps.wake(projectSlug, claimed.directorSessionId, delivery.body, delivery.kind);
 }
-async function deriveRequestedHash(client, toolName, input) {
+async function deriveRequestedHash(client, toolName2, input) {
   if (input.requestedHash) return input.requestedHash;
-  if (toolName === "run_spec_consensus" && input.pageId) {
+  if (toolName2 === "run_spec_consensus" && input.pageId) {
     const page = await client.getWikiPage(input.projectSlug, input.pageId);
     return page.contentHash ?? import_node_crypto18.default.createHash("sha256").update(page.markdownBody).digest("hex");
   }
-  if (toolName === "draft_task_spec" && input.taskId) {
+  if (toolName2 === "draft_task_spec" && input.taskId) {
     const task = await client.getTask(input.projectSlug, input.taskId);
     return task.updatedAt ?? import_node_crypto18.default.createHash("sha256").update(JSON.stringify(task)).digest("hex");
   }
@@ -72168,18 +72221,19 @@ async function startExecutorServer(opts) {
   const childEnv = withDisabledGitHooksEnv(baseEnv, opts.disabledGitHooksDir);
   const baseSpawn = opts.spawn ?? import_node_child_process22.spawn;
   const hasExtraFd = opts.brokerSocket != null || opts.brokerSocketFd != null;
-  const spawnFn = (cmd, args, spawnOpts) => {
-    const argList = Array.isArray(args) ? args : [];
-    const optsObj = args && !Array.isArray(args) ? args : spawnOpts ?? {};
+  const spawnFn = (cmd, args = [], spawnOpts = {}) => {
+    const argList = [...args];
     const fullCmd = [cmd, ...argList];
     const wrapped = opts.wrapCommand ? opts.wrapCommand(fullCmd) : fullCmd;
-    const finalSpawnOpts = { ...optsObj };
+    const finalSpawnOpts = { ...spawnOpts };
     if (hasExtraFd) {
-      const stdio = Array.isArray(finalSpawnOpts?.stdio) ? [...finalSpawnOpts.stdio] : ["pipe", "pipe", "pipe"];
+      const stdio = Array.isArray(finalSpawnOpts.stdio) ? [...finalSpawnOpts.stdio] : ["pipe", "pipe", "pipe"];
       stdio[3] = opts.brokerSocket ?? opts.brokerSocketFd;
       finalSpawnOpts.stdio = stdio;
     }
-    return baseSpawn(wrapped[0], wrapped.slice(1), finalSpawnOpts);
+    const executable = wrapped[0];
+    if (!executable) throw new Error("command wrapper returned an empty command");
+    return baseSpawn(executable, wrapped.slice(1), finalSpawnOpts);
   };
   if (opts.provider === "codex") {
     const manager = new CodexServerManager();
@@ -72429,19 +72483,21 @@ function parseIpv4Numeric(ipStr) {
     parsedParts.push(n);
   }
   if (parsedParts.length === 4) {
-    for (const b of parsedParts) {
-      if (b > 255) return null;
+    for (const b2 of parsedParts) {
+      if (b2 > 255) return null;
     }
-    return [parsedParts[0], parsedParts[1], parsedParts[2], parsedParts[3]];
+    const [a, b, c, d] = parsedParts;
+    if (a === void 0 || b === void 0 || c === void 0 || d === void 0) return null;
+    return [a, b, c, d];
   }
   if (parsedParts.length === 3) {
     const [a, b, c] = parsedParts;
-    if (a > 255 || b > 255 || c > 65535) return null;
+    if (a === void 0 || b === void 0 || c === void 0 || a > 255 || b > 255 || c > 65535) return null;
     return [a, b, c >>> 8 & 255, c & 255];
   }
   if (parsedParts.length === 2) {
     const [a, b] = parsedParts;
-    if (a > 255 || b > 16777215) return null;
+    if (a === void 0 || b === void 0 || a > 255 || b > 16777215) return null;
     return [a, b >>> 16 & 255, b >>> 8 & 255, b & 255];
   }
   return null;
@@ -72475,14 +72531,14 @@ function isGlobalIpv6(ipStr) {
   }
   const mappedMatch = /^::ffff:(?:0:)?(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/i.exec(clean);
   if (mappedMatch) {
-    const ipv43 = parseIpv4Numeric(mappedMatch[1]);
+    const ipv43 = parseIpv4Numeric(mappedMatch[1] ?? "");
     if (!ipv43) return false;
     return isGlobalIpv4(ipv43);
   }
   const hexMappedMatch = /^::ffff:(?:0:)?([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i.exec(clean);
   if (hexMappedMatch) {
-    const high = Number.parseInt(hexMappedMatch[1], 16);
-    const low = Number.parseInt(hexMappedMatch[2], 16);
+    const high = Number.parseInt(hexMappedMatch[1] ?? "", 16);
+    const low = Number.parseInt(hexMappedMatch[2] ?? "", 16);
     const b0 = high >>> 8 & 255;
     const b1 = high & 255;
     const b2 = low >>> 8 & 255;
@@ -72492,13 +72548,13 @@ function isGlobalIpv6(ipStr) {
   if (clean.startsWith("::ffff:")) return false;
   const compatMatch = /^::(?:0:)?(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/i.exec(clean);
   if (compatMatch) {
-    const ipv43 = parseIpv4Numeric(compatMatch[1]);
+    const ipv43 = parseIpv4Numeric(compatMatch[1] ?? "");
     if (!ipv43) return false;
     return isGlobalIpv4(ipv43);
   }
   const nat64Match = /^64:ff9b::(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/i.exec(clean);
   if (nat64Match) {
-    const ipv43 = parseIpv4Numeric(nat64Match[1]);
+    const ipv43 = parseIpv4Numeric(nat64Match[1] ?? "");
     if (!ipv43) return false;
     return isGlobalIpv4(ipv43);
   }
@@ -72618,7 +72674,9 @@ async function resolveAndPinAddress(hostname3, customResolver) {
   }
   return {
     hostname: cleanHost,
-    pinnedIp: allIps[0],
+    pinnedIp: allIps[0] ?? (() => {
+      throw new Error("DNS_RESOLUTION_FAILED: empty address set");
+    })(),
     allIps
   };
 }
@@ -72748,11 +72806,11 @@ async function createVerificationBrokerSession(options) {
             clearTimeout(timer);
             try {
               res.destroy();
-            } catch {
+            } catch (error51) {
             }
             try {
               req.destroy();
-            } catch {
+            } catch (error51) {
             }
             reject(err);
           };
@@ -72783,7 +72841,7 @@ async function createVerificationBrokerSession(options) {
               if (decompressedBytes > maxDecompBytes) {
                 try {
                   decompressor.destroy();
-                } catch {
+                } catch (error51) {
                 }
                 fail(new Error(`DECOMPRESSION_LIMIT_EXCEEDED: decompressed body exceeded ${maxDecompBytes} bytes`));
               }
@@ -72948,12 +73006,12 @@ async function createVerificationBrokerSession(options) {
     server.close();
     try {
       if (import_node_fs22.default.existsSync(socketPath)) import_node_fs22.default.unlinkSync(socketPath);
-    } catch {
+    } catch (error51) {
     }
     if (createdDir) {
       try {
         import_node_fs22.default.rmSync(createdDir, { recursive: true, force: true });
-      } catch {
+      } catch (error51) {
       }
     }
     throw new Error(`BROKER_SOCKET_ERROR: failed to establish inherited client socket connection: ${String(err)}`);
@@ -72973,7 +73031,7 @@ async function createVerificationBrokerSession(options) {
       if (clientSocket) {
         try {
           clientSocket.destroy();
-        } catch {
+        } catch (error51) {
         }
       }
       await new Promise((resolve2) => {
@@ -72997,6 +73055,31 @@ async function createVerificationBrokerSession(options) {
 }
 
 // src/verification-turn.ts
+function runtimeHandle(handle) {
+  return handle;
+}
+function toolName(tool) {
+  if (typeof tool === "string") return tool;
+  if (tool !== null && typeof tool === "object") {
+    const descriptor2 = tool;
+    if (typeof descriptor2.name === "string") return descriptor2.name;
+    if (typeof descriptor2.function?.name === "string") return descriptor2.function.name;
+  }
+  return "";
+}
+function disabledToolFromEvent(event, disabledTools) {
+  if (event === null || typeof event !== "object") return null;
+  const record2 = event;
+  if (record2.type !== "tool_use") return null;
+  const name = typeof record2.tool?.name === "string" ? record2.tool.name : null;
+  if (name === null) return null;
+  return disabledTools.some((tool) => tool.toLowerCase() === name.toLowerCase()) ? name : null;
+}
+function isDnsNoData(error51) {
+  if (error51 === null || typeof error51 !== "object") return false;
+  const code = error51.code;
+  return code === "ENODATA" || code === "ENOTFOUND";
+}
 var DISABLED_NATIVE_VERIFICATION_TOOLS = [
   "WebFetch",
   "WebSearch",
@@ -73007,42 +73090,40 @@ var DISABLED_NATIVE_VERIFICATION_TOOLS = [
   "curl"
 ];
 var DisabledToolInvocationError = class extends Error {
-  constructor(toolName) {
-    super(`TOOL_INVOCATION_FORBIDDEN: native network tool "${toolName}" is disabled in verification isolation mode`);
+  constructor(toolName2) {
+    super(`TOOL_INVOCATION_FORBIDDEN: native network tool "${toolName2}" is disabled in verification isolation mode`);
     this.name = "DisabledToolInvocationError";
   }
 };
-function assertNativeToolsDisabled(toolName, disabledTools = DISABLED_NATIVE_VERIFICATION_TOOLS) {
+function assertNativeToolsDisabled(toolName2, disabledTools = DISABLED_NATIVE_VERIFICATION_TOOLS) {
   const disabledSet = new Set(disabledTools.map((t) => t.toLowerCase()));
-  if (disabledSet.has(toolName.toLowerCase())) {
-    throw new DisabledToolInvocationError(toolName);
+  if (disabledSet.has(toolName2.toLowerCase())) {
+    throw new DisabledToolInvocationError(toolName2);
   }
 }
 function enforceNativeToolsDisabled(handle, disabledTools = DISABLED_NATIVE_VERIFICATION_TOOLS) {
   const disabledSet = new Set(disabledTools.map((t) => t.toLowerCase()));
+  const extendedHandle = runtimeHandle(handle);
   for (const prop of ["tools", "availableTools", "registeredTools"]) {
-    const val = handle[prop];
+    const val = extendedHandle[prop];
     if (Array.isArray(val)) {
-      handle[prop] = val.filter((t) => {
-        const name = typeof t === "string" ? t : t?.name ?? t?.function?.name ?? "";
-        return !disabledSet.has(String(name).toLowerCase());
-      });
+      extendedHandle[prop] = val.filter((tool) => !disabledSet.has(toolName(tool).toLowerCase()));
     }
   }
-  const toolsConfig = handle.toolsConfig;
+  const toolsConfig = extendedHandle.toolsConfig;
   if (toolsConfig && typeof toolsConfig === "object") {
     for (const tool of disabledTools) {
       toolsConfig[tool] = false;
       toolsConfig[tool.toLowerCase()] = false;
     }
   }
-  if (typeof handle.disableNativeTools === "function") {
+  if (typeof extendedHandle.disableNativeTools === "function") {
     try {
-      handle.disableNativeTools(disabledTools);
-    } catch {
+      extendedHandle.disableNativeTools(disabledTools);
+    } catch (error51) {
     }
   }
-  handle.disabledTools = disabledTools;
+  extendedHandle.disabledTools = disabledTools;
   return handle;
 }
 function createVerificationTurnRunner(baseRunTurn, disabledTools = DISABLED_NATIVE_VERIFICATION_TOOLS) {
@@ -73051,11 +73132,12 @@ function createVerificationTurnRunner(baseRunTurn, disabledTools = DISABLED_NATI
       throw new Error("INVALID_AGENT_HANDLE: handle is required for verification turn runner");
     }
     enforceNativeToolsDisabled(handle, disabledTools);
-    let origExecute = null;
+    const extendedHandle = runtimeHandle(handle);
+    let origExecute;
     let didPatchExecute = false;
-    let origStartThread = null;
-    let origResumeThread = null;
-    let origStartTurn = null;
+    let origStartThread;
+    let origResumeThread;
+    let origStartTurn;
     const unsubscribes = [];
     const subscribedThreads = /* @__PURE__ */ new Set();
     let toolViolationError = null;
@@ -73065,32 +73147,26 @@ function createVerificationTurnRunner(baseRunTurn, disabledTools = DISABLED_NATI
       if (typeof handle.onEvent === "function") {
         try {
           const unsub = handle.onEvent(threadId, (event) => {
-            if (event && event.type === "tool_use" && event.tool?.name) {
-              const name = String(event.tool.name).toLowerCase();
-              for (const disabled of disabledTools) {
-                if (name === disabled.toLowerCase()) {
-                  toolViolationError = new DisabledToolInvocationError(event.tool.name);
-                  if (typeof handle.interruptTurn === "function") {
-                    try {
-                      handle.interruptTurn(threadId).catch(() => {
-                      });
-                    } catch {
-                    }
-                  }
-                  break;
-                }
+            const disabledTool = disabledToolFromEvent(event, disabledTools);
+            if (disabledTool !== null) {
+              toolViolationError = new DisabledToolInvocationError(disabledTool);
+              try {
+                void handle.interruptTurn(threadId).catch((error51) => {
+                });
+              } catch (error51) {
               }
             }
           });
           unsubscribes.push(unsub);
-        } catch {
+        } catch (error51) {
         }
       }
     };
     if (typeof handle.startThread === "function") {
-      origStartThread = handle.startThread;
+      const startThread = handle.startThread;
+      origStartThread = startThread;
       handle.startThread = async (params) => {
-        const res = await origStartThread.call(handle, params);
+        const res = await startThread.call(handle, params);
         if (res?.threadId) {
           subscribeThread(res.threadId);
         }
@@ -73098,9 +73174,10 @@ function createVerificationTurnRunner(baseRunTurn, disabledTools = DISABLED_NATI
       };
     }
     if (typeof handle.resumeThread === "function") {
-      origResumeThread = handle.resumeThread;
+      const resumeThread = handle.resumeThread;
+      origResumeThread = resumeThread;
       handle.resumeThread = async (threadId, params) => {
-        const res = await origResumeThread.call(handle, threadId, params);
+        const res = await resumeThread.call(handle, threadId, params);
         if (res?.threadId) {
           subscribeThread(res.threadId);
         }
@@ -73108,44 +73185,39 @@ function createVerificationTurnRunner(baseRunTurn, disabledTools = DISABLED_NATI
       };
     }
     if (typeof handle.startTurn === "function") {
-      origStartTurn = handle.startTurn;
+      const startTurn = handle.startTurn;
+      origStartTurn = startTurn;
       handle.startTurn = async (threadId, input, effort) => {
         if (threadId) {
           subscribeThread(threadId);
         }
-        return origStartTurn.call(handle, threadId, input, effort);
+        return startTurn.call(handle, threadId, input, effort);
       };
     }
     if (typeof handle.onEvent === "function" && typeof handle.startThread !== "function") {
       try {
         const unsub = handle.onEvent("*", (event) => {
-          if (event && event.type === "tool_use" && event.tool?.name) {
-            const name = String(event.tool.name).toLowerCase();
-            for (const disabled of disabledTools) {
-              if (name === disabled.toLowerCase()) {
-                toolViolationError = new DisabledToolInvocationError(event.tool.name);
-                if (typeof handle.interruptTurn === "function") {
-                  try {
-                    handle.interruptTurn("*").catch(() => {
-                    });
-                  } catch {
-                  }
-                }
-                break;
-              }
+          const disabledTool = disabledToolFromEvent(event, disabledTools);
+          if (disabledTool !== null) {
+            toolViolationError = new DisabledToolInvocationError(disabledTool);
+            try {
+              void handle.interruptTurn("*").catch((error51) => {
+              });
+            } catch (error51) {
             }
           }
         });
         unsubscribes.push(unsub);
-      } catch {
+      } catch (error51) {
       }
     }
-    if (typeof handle.executeTool === "function") {
-      origExecute = handle.executeTool;
+    if (typeof extendedHandle.executeTool === "function") {
+      const executeTool = extendedHandle.executeTool;
+      origExecute = executeTool;
       didPatchExecute = true;
-      handle.executeTool = async (name, args) => {
+      extendedHandle.executeTool = async (name, args) => {
         assertNativeToolsDisabled(name, disabledTools);
-        return origExecute.call(handle, name, args);
+        return executeTool.call(handle, name, args);
       };
     }
     try {
@@ -73158,14 +73230,14 @@ function createVerificationTurnRunner(baseRunTurn, disabledTools = DISABLED_NATI
       for (const unsub of unsubscribes) {
         try {
           unsub();
-        } catch {
+        } catch (error51) {
         }
       }
       if (origStartThread) handle.startThread = origStartThread;
       if (origResumeThread) handle.resumeThread = origResumeThread;
       if (origStartTurn) handle.startTurn = origStartTurn;
       if (didPatchExecute && origExecute) {
-        handle.executeTool = origExecute;
+        extendedHandle.executeTool = origExecute;
       }
     }
   };
@@ -73245,7 +73317,7 @@ function createRunVerificationTurn(deps) {
       let v6 = [];
       try {
         v4 = await import_node_dns2.default.promises.resolve4(normalizedUrl.hostname).catch((err) => {
-          if (err?.code === "ENODATA" || err?.code === "ENOTFOUND") return [];
+          if (isDnsNoData(err)) return [];
           throw err;
         });
       } catch (err) {
@@ -73257,7 +73329,7 @@ function createRunVerificationTurn(deps) {
       }
       try {
         v6 = await import_node_dns2.default.promises.resolve6(normalizedUrl.hostname).catch((err) => {
-          if (err?.code === "ENODATA" || err?.code === "ENOTFOUND") return [];
+          if (isDnsNoData(err)) return [];
           throw err;
         });
       } catch (err) {
@@ -73302,7 +73374,7 @@ function createRunVerificationTurn(deps) {
     if (!brokerSession.clientSocket) {
       try {
         await brokerSession.close();
-      } catch {
+      } catch (error51) {
       }
       return {
         verdict: "fail",
@@ -73323,7 +73395,7 @@ function createRunVerificationTurn(deps) {
       if (brokerSession) {
         try {
           await brokerSession.close();
-        } catch {
+        } catch (error51) {
         }
       }
       return { verdict: "fail", summary: `network sandbox initialization failed: ${String(err)}`, turnRef: null };
@@ -73338,13 +73410,13 @@ function createRunVerificationTurn(deps) {
       if (sandboxHandle) {
         try {
           sandboxHandle.dispose();
-        } catch {
+        } catch (error51) {
         }
       }
       if (brokerSession) {
         try {
           await brokerSession.close();
-        } catch {
+        } catch (error51) {
         }
       }
       return {
@@ -73370,13 +73442,13 @@ function createRunVerificationTurn(deps) {
       if (sandboxHandle) {
         try {
           sandboxHandle.dispose();
-        } catch {
+        } catch (error51) {
         }
       }
       if (brokerSession) {
         try {
           await brokerSession.close();
-        } catch {
+        } catch (error51) {
         }
       }
       return { verdict: "fail", summary: `agent sandbox startup failed: ${String(err)}`, turnRef: null };
@@ -73385,19 +73457,19 @@ function createRunVerificationTurn(deps) {
       if (agentSandbox) {
         try {
           agentSandbox.dispose();
-        } catch {
+        } catch (error51) {
         }
       }
       if (sandboxHandle) {
         try {
           sandboxHandle.dispose();
-        } catch {
+        } catch (error51) {
         }
       }
       if (brokerSession) {
         try {
           await brokerSession.close();
-        } catch {
+        } catch (error51) {
         }
       }
       return {
@@ -73422,19 +73494,19 @@ function createRunVerificationTurn(deps) {
       if (agentSandbox) {
         try {
           agentSandbox.dispose();
-        } catch {
+        } catch (error51) {
         }
       }
       if (sandboxHandle) {
         try {
           sandboxHandle.dispose();
-        } catch {
+        } catch (error51) {
         }
       }
       if (brokerSession) {
         try {
           await brokerSession.close();
-        } catch {
+        } catch (error51) {
         }
       }
     }
@@ -75990,7 +76062,15 @@ function createBridgeMessageHandler(deps) {
         project: projectContext,
         answeredQuestions,
         openQuestions: presentedLedger.shown.length ? presentedLedger.shown : void 0,
-        clarifications: msg.context?.clarifications ?? (presentedLedger.shown.some((i) => i.id) ? presentedLedger.shown : void 0),
+        clarifications: msg.context?.clarifications ?? (presentedLedger.shown.some((i) => i.id) ? presentedLedger.shown.map(({ id, round, ordinal, question, status, answer, actor }) => ({
+          id,
+          round,
+          ordinal,
+          question,
+          status,
+          answer,
+          actor
+        })) : void 0),
         directorSessionId
       });
       const sendInTurn = (msg2) => {
@@ -77935,23 +78015,23 @@ var Server = class extends Protocol {
       const wrappedHandler = async (request, extra) => {
         const validatedRequest = safeParse3(CallToolRequestSchema, request);
         if (!validatedRequest.success) {
-          const errorMessage = validatedRequest.error instanceof Error ? validatedRequest.error.message : String(validatedRequest.error);
-          throw new McpError(ErrorCode.InvalidParams, `Invalid tools/call request: ${errorMessage}`);
+          const errorMessage2 = validatedRequest.error instanceof Error ? validatedRequest.error.message : String(validatedRequest.error);
+          throw new McpError(ErrorCode.InvalidParams, `Invalid tools/call request: ${errorMessage2}`);
         }
         const { params } = validatedRequest.data;
         const result = await Promise.resolve(handler(request, extra));
         if (params.task) {
           const taskValidationResult = safeParse3(CreateTaskResultSchema, result);
           if (!taskValidationResult.success) {
-            const errorMessage = taskValidationResult.error instanceof Error ? taskValidationResult.error.message : String(taskValidationResult.error);
-            throw new McpError(ErrorCode.InvalidParams, `Invalid task creation result: ${errorMessage}`);
+            const errorMessage2 = taskValidationResult.error instanceof Error ? taskValidationResult.error.message : String(taskValidationResult.error);
+            throw new McpError(ErrorCode.InvalidParams, `Invalid task creation result: ${errorMessage2}`);
           }
           return taskValidationResult.data;
         }
         const validationResult = safeParse3(CallToolResultSchema, result);
         if (!validationResult.success) {
-          const errorMessage = validationResult.error instanceof Error ? validationResult.error.message : String(validationResult.error);
-          throw new McpError(ErrorCode.InvalidParams, `Invalid tools/call result: ${errorMessage}`);
+          const errorMessage2 = validationResult.error instanceof Error ? validationResult.error.message : String(validationResult.error);
+          throw new McpError(ErrorCode.InvalidParams, `Invalid tools/call result: ${errorMessage2}`);
         }
         return validationResult.data;
       };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrrlin-dev/mcp",
-  "version": "0.4.107",
+  "version": "0.4.108",
   "type": "module",
   "bin": {
     "mrrlin-mcp": "dist/bin.cjs"