@mrrlin-dev/mcp 0.4.108 → 0.4.110

package/dist/bin.cjs

@@ -37432,6 +37432,7 @@ var openApiOperationIds = {
   listOperatorTranscriptMessages: "listOperatorTranscriptMessages",
   createIntentProposal: "createIntentProposal",
   getIntentProposal: "getIntentProposal",
+  listIntentProposals: "listIntentProposals",
   recordIntentClarification: "recordIntentClarification",
   answerIntentClarification: "answerIntentClarification",
   confirmIntentProposal: "confirmIntentProposal",
@@ -38171,13 +38172,13 @@ var mrrlinIntentProposalSchema = external_exports.object({
   updatedAt: external_exports.string()
 });
 var mrrlinIntentProposalCreateSchema = external_exports.object({
-  proposalId: external_exports.string().uuid(),
-  version: external_exports.number().int().min(1),
+  proposalId: external_exports.string().uuid().optional(),
+  version: external_exports.number().int().min(1).optional(),
   resolvedIntent: external_exports.record(external_exports.string(), external_exports.unknown()),
-  digest: external_exports.string().min(1),
+  digest: external_exports.string().min(1).optional(),
   transcriptRevision: external_exports.string().optional(),
-  expectedTranscriptRevisionNumber: external_exports.number().int().nonnegative(),
-  messageIds: external_exports.array(external_exports.string().uuid())
+  expectedTranscriptRevisionNumber: external_exports.number().int().nonnegative().optional(),
+  messageIds: external_exports.array(external_exports.string().uuid()).min(1).optional()
 }).strict();
 var intentProposalResponseSchema = external_exports.object({
   data: mrrlinIntentProposalSchema
@@ -38221,7 +38222,8 @@ var mrrlinIntentConfirmRequestSchema = external_exports.object({
   actor: external_exports.string().min(1).optional(),
   materializeParams: external_exports.object({
     task: external_exports.object({
-      id: external_exports.string().min(1),
+      // Omitted ⇒ the API allocates the next per-project GT-N id before confirming.
+      id: external_exports.string().min(1).optional(),
       title: external_exports.string().min(1).optional(),
       category: external_exports.string().optional(),
       subcategory: external_exports.string().optional(),
@@ -38268,11 +38270,16 @@ var mrrlinIntentConfirmationSchema = external_exports.object({
   digest: external_exports.string().min(1),
   transcriptRevision: external_exports.string(),
   transcriptRevisionNumber: external_exports.number().int().nonnegative().optional(),
+  // The task the confirmation materialized, when it materialized one.
+  materializedTaskId: external_exports.string().nullable().optional(),
   createdAt: external_exports.string()
 });
 var intentConfirmationMaybeResponseSchema = external_exports.object({
   data: mrrlinIntentConfirmationSchema.nullable()
 });
+var intentProposalListResponseSchema = external_exports.object({
+  data: external_exports.array(mrrlinIntentProposalSchema)
+});
 
 // ../../packages/schemas/dist/appsumo.js
 var APPSUMO_CODE_ALPHABET = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
@@ -41647,6 +41654,10 @@ function createMrrlinClient(config2) {
       });
       return intentProposalResponseSchema.parse(body).data;
     },
+    async listIntentProposals(projectSlug) {
+      const body = await request(`${projectPath(projectSlug)}/intent/proposals`);
+      return intentProposalListResponseSchema.parse(body).data;
+    },
     async getIntentProposal(projectSlug, proposalId, version2) {
       try {
         const body = await request(`${projectPath(projectSlug)}/intent/proposals/${encodeURIComponent(proposalId)}/${encodeURIComponent(String(version2))}`);
@@ -41685,7 +41696,7 @@ function createMrrlinClient(config2) {
         if (error51 instanceof MrrlinApiError && (error51.status === 409 || error51.status === 422)) {
           try {
             const parsed = JSON.parse(error51.responseBody);
-            const maybeResult = mrrlinIntentConfirmResponseSchema.safeParse(parsed);
+            const maybeResult = mrrlinIntentConfirmResponseSchema.safeParse(parsed?.data ?? parsed);
             if (maybeResult.success)
               return maybeResult.data;
           } catch {
@@ -44170,6 +44181,24 @@ var CodexAgentHandle = class {
   }
 };
 
+// ../../packages/agent-client/dist/providers/thread-env.js
+function threadProcessEnv(childEnv, additions) {
+  if (!additions || Object.keys(additions).length === 0)
+    return childEnv;
+  const env = { ...childEnv ?? process.env };
+  for (const [key, value] of Object.entries(additions)) {
+    if (value === null) {
+      Reflect.deleteProperty(env, key);
+    } else {
+      env[key] = value;
+    }
+  }
+  return env;
+}
+function envOption(env) {
+  return env === void 0 ? {} : { env };
+}
+
 // ../../packages/agent-client/dist/providers/claude/process.js
 var import_node_child_process3 = require("node:child_process");
 var import_node_crypto = require("node:crypto");
@@ -44550,7 +44579,7 @@ var ClaudeAgentHandle = class {
       appendSystemPrompt: params.baseInstructions,
       wrapCommand: this.wrapCommand,
       brokerSocket: this.brokerSocket,
-      ...this.childEnv === void 0 ? {} : { env: this.childEnv }
+      ...envOption(threadProcessEnv(this.childEnv, params.env))
     });
     this.processes.set(child.sessionId, child);
     this.mappers.set(child.sessionId, new ClaudeBridgeEventMapper());
@@ -44572,7 +44601,7 @@ var ClaudeAgentHandle = class {
       appendSystemPrompt: params.baseInstructions,
       wrapCommand: this.wrapCommand,
       brokerSocket: this.brokerSocket,
-      ...this.childEnv === void 0 ? {} : { env: this.childEnv }
+      ...envOption(threadProcessEnv(this.childEnv, params.env))
     });
     this.processes.set(threadId, child);
     this.mappers.set(threadId, new ClaudeBridgeEventMapper());
@@ -45086,7 +45115,7 @@ var AgyAgentHandle = class {
       wrapCommand: this.wrapCommand,
       brokerSocket: this.brokerSocket,
       disabledTools: this.disabledTools,
-      ...this.childEnv === void 0 ? {} : { env: this.childEnv }
+      ...envOption(threadProcessEnv(this.childEnv, params.env))
     });
     this.processes.set(child.sessionId, child);
     this.mappers.set(child.sessionId, new AgyBridgeEventMapper());
@@ -45110,7 +45139,7 @@ var AgyAgentHandle = class {
       wrapCommand: this.wrapCommand,
       brokerSocket: this.brokerSocket,
       disabledTools: this.disabledTools,
-      ...this.childEnv === void 0 ? {} : { env: this.childEnv }
+      ...envOption(threadProcessEnv(this.childEnv, params.env))
     });
     this.processes.set(threadId, child);
     this.mappers.set(threadId, new AgyBridgeEventMapper());
@@ -57016,6 +57045,9 @@ var READ_TOOL_NAMES = /* @__PURE__ */ new Set([
   "search_knowledge",
   "search_wiki_pages",
   "create_task",
+  // propose_task only records a pending intent proposal; nothing happens until the operator
+  // confirms it in the web UI, so it is as in-product as create_task.
+  "propose_task",
   "update_task",
   "create_wiki_page",
   "update_wiki_page",
@@ -57781,6 +57813,7 @@ var mcpToolNames = {
   deleteTaskDependency: "delete_task_dependency",
   createInboxItem: "create_inbox_item",
   createTask: "create_task",
+  proposeTask: "propose_task",
   decideInboxItem: "decide_inbox_item",
   getExecutionRun: "get_execution_run",
   getProjectSchedulerPolicy: "get_project_scheduler_policy",
@@ -58403,6 +58436,22 @@ var listTasksInputSchema = projectScopedSchema.merge(mrrlinTaskListFiltersSchema
 var getTaskInputSchema = taskScopedSchema;
 var createTaskInputSchema = proposalProvenanceSchema.merge(projectScopedSchema).merge(mrrlinTaskCreateWithoutIdSchema);
 var updateTaskInputSchema = taskScopedSchema.merge(mrrlinTaskUpdateSchema);
+var proposeTaskInputSchema = projectScopedSchema.extend({
+  kind: external_exports.enum(["task", "plan"]).optional().describe("What the operator's confirmation creates. 'task' (default): the task itself. 'plan': nothing yet \u2014 call create_plan with the confirmed proposalId/proposalVersion/proposalDigest."),
+  title: external_exports.string().min(1).max(500),
+  notes: external_exports.string().max(2e4).optional(),
+  type: mrrlinTaskTypeSchema.optional(),
+  category: external_exports.string().min(1).optional(),
+  subcategory: external_exports.string().min(1).optional(),
+  impact: mrrlinTaskImpactSchema.optional(),
+  autonomyLevel: mrrlinAutonomyLevelSchema.optional(),
+  autonomyReason: external_exports.string().min(1).max(240).optional(),
+  autoDeploy: mrrlinAutoDeploySchema.optional(),
+  domains: mrrlinTaskDomainsSchema.optional(),
+  tags: external_exports.array(external_exports.string().min(1)).optional(),
+  planId: mrrlinPlanIdSchema.optional(),
+  specWikiPageId: mrrlinWikiPageIdSchema.optional()
+});
 var resetDirectorThreadInputSchema = taskScopedSchema;
 var archiveTaskInputSchema = taskScopedSchema;
 var unarchiveTaskInputSchema = taskScopedSchema;
@@ -58540,6 +58589,7 @@ var mcpToolInputSchemas = {
   [mcpToolNames.createWikiPage]: createWikiPageInputSchema,
   [mcpToolNames.deleteTaskDependency]: deleteTaskDependencyInputSchema,
   [mcpToolNames.createTask]: createTaskInputSchema,
+  [mcpToolNames.proposeTask]: proposeTaskInputSchema,
   [mcpToolNames.getExecutionRun]: getExecutionRunInputSchema,
   [mcpToolNames.getProjectSchedulerPolicy]: getProjectSchedulerPolicyInputSchema,
   [mcpToolNames.getSchedulerPendingTasks]: getSchedulerPendingTasksInputSchema,
@@ -58604,6 +58654,7 @@ var mcpToolOperationIds = {
   [mcpToolNames.createWikiPage]: openApiOperationIds.createWikiPage,
   [mcpToolNames.deleteTaskDependency]: openApiOperationIds.deleteTaskDependency,
   [mcpToolNames.createTask]: openApiOperationIds.createTask,
+  [mcpToolNames.proposeTask]: openApiOperationIds.createIntentProposal,
   [mcpToolNames.getExecutionRun]: openApiOperationIds.getExecutionRun,
   [mcpToolNames.getProjectSchedulerPolicy]: openApiOperationIds.getProjectSchedulerPolicy,
   [mcpToolNames.getSchedulerPendingTasks]: openApiOperationIds.getSchedulerPendingTasks,
@@ -58658,7 +58709,8 @@ var mcpToolDescriptions = {
   [mcpToolNames.appendTaskEvent]: "Append an operator note to a task's activity timeline. Also use it as the task-linked receipt path for material immediate work that has a parent task; summarize scope, outcome/no-result, evidence or artifacts, blockers, and next action in the note body.",
   [mcpToolNames.createWikiPage]: "Create a markdown Wiki page.",
   [mcpToolNames.deleteTaskDependency]: "Delete a blocked-by relationship.",
-  [mcpToolNames.createTask]: "Create a new task in a project. Defaults to status='todo' to authorize immediate autopilot work; pass status='backlog' only if explicitly parking the task for later. 'backlog' and 'todo' are the only creatable statuses. Pass parentTaskId when spawning a follow-up task to continue work from an existing task \u2014 its operator_seed_request is inherited automatically if you don't supply your own. Domain is required UNLESS parentTaskId is supplied (a follow-up inherits its parent's domain automatically). Domain selects which reviewer roster judges the task's spec. Valid values: code, seo, marketing, content. When creating tasks for work that produces a published web page, author the work as a [code_change] task and a [page] task (with domain: 'content') linked by blocked_by. Set autoDeploy according to the publish policy: 'prod' if only meaningful once live (robots.txt, sitemap), 'dev' to stop at preview (landing page, layout), or 'off' if the repo is not the operator's own.",
+  [mcpToolNames.proposeTask]: "Propose a task (or plan) for the operator to confirm. This is how work gets created: a proposal does nothing on its own; the operator sees it in the Director chat and confirms it, and that confirmation creates the task. It binds to the operator's latest message in this chat, so call it right after the operator asked for the work, in the same turn. Call it once per task. Then tell the operator, in plain words, that the task is waiting for their confirmation in the chat \u2014 never say it was created. A new operator message makes an unconfirmed proposal stale; propose again if the operator still wants it. Fails with NO_OPERATOR_TRANSCRIPT when the operator has not said anything this proposal could quote.",
+  [mcpToolNames.createTask]: "Only for a proposal the operator already confirmed: pass its proposalId, proposalVersion and proposalDigest. A confirmed task proposal has already created its task, and this returns that task; never call it to create new work \u2014 use propose_task. Create a new task in a project. Defaults to status='todo' to authorize immediate autopilot work; pass status='backlog' only if explicitly parking the task for later. 'backlog' and 'todo' are the only creatable statuses. Pass parentTaskId when spawning a follow-up task to continue work from an existing task \u2014 its operator_seed_request is inherited automatically if you don't supply your own. Domain is required UNLESS parentTaskId is supplied (a follow-up inherits its parent's domain automatically). Domain selects which reviewer roster judges the task's spec. Valid values: code, seo, marketing, content. When creating tasks for work that produces a published web page, author the work as a [code_change] task and a [page] task (with domain: 'content') linked by blocked_by. Set autoDeploy according to the publish policy: 'prod' if only meaningful once live (robots.txt, sitemap), 'dev' to stop at preview (landing page, layout), or 'off' if the repo is not the operator's own.",
   [mcpToolNames.getProject]: "Fetch a single project summary by slug.",
   [mcpToolNames.getProjectSnapshot]: "Fetch the full project snapshot: GitHub binding, tasks, plans, and wiki pages.",
   [mcpToolNames.getTask]: "Fetch a single task by project slug and task id.",
@@ -58903,6 +58955,7 @@ async function getAgentProviderForPanel(client, opts = {}) {
 function createMrrlinTools(options) {
   const client = createMrrlinClient(withAuth(options));
   async function resolveBoundSlug() {
+    if (process.env.MRRLIN_PROJECT_BINDING === "none") return void 0;
     if (options.activeProjectSlug !== void 0) return options.activeProjectSlug;
     const envSlug = process.env.MRRLIN_PROJECT_SLUG?.trim();
     if (envSlug) return envSlug;
@@ -59102,10 +59155,35 @@ function createMrrlinTools(options) {
             `Task materialization digest mismatch for proposal ${proposalId} v${proposalVersion}.`
           );
         }
+        if (confirmation.materializedTaskId) {
+          return await c.getTask(projectSlug, confirmation.materializedTaskId);
+        }
         const status = input.status ?? "todo";
         return await c.createTask(projectSlug, { ...input, status });
       }
     ),
+    [mcpToolNames.proposeTask]: makeTool(
+      client,
+      mcpToolNames.proposeTask,
+      "TASK_PROPOSE_FAILED",
+      "Unable to propose task.",
+      async (c, { projectSlug, kind, ...intent }) => {
+        await checkTenantBoundary(projectSlug, "task proposal");
+        const proposal = await c.createIntentProposal(projectSlug, {
+          resolvedIntent: { kind: kind ?? "task", ...intent }
+        });
+        return {
+          proposalId: proposal.proposalId,
+          proposalVersion: proposal.version,
+          proposalDigest: proposal.digest,
+          state: proposal.state,
+          kind: kind ?? "task",
+          title: intent.title,
+          awaitingOperatorConfirmation: true,
+          next: (kind ?? "task") === "task" ? "Tell the operator the task is waiting for their confirmation in the chat. Their confirmation creates it; do not call create_task." : "Tell the operator the plan is waiting for their confirmation in the chat. After they confirm, call create_plan with proposalId, proposalVersion and proposalDigest."
+        };
+      }
+    ),
     [mcpToolNames.getProject]: makeTool(
       client,
       mcpToolNames.getProject,
@@ -61664,7 +61742,7 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.4.108";
+var PKG_VERSION = "0.4.110";
 
 // src/receipt-signing.ts
 var import_node_crypto13 = __toESM(require("node:crypto"), 1);
@@ -66359,7 +66437,7 @@ ${renderTaskStateSection(taskState)}`;
       turnCwd = worktreePath;
       useExecutor = true;
       if (deps.acquireExecutorAgent) {
-        const executorAgent = await deps.acquireExecutorAgent(worktreePath, resolvedProviderId);
+        const executorAgent = await deps.acquireExecutorAgent(worktreePath, resolvedProviderId, projectSlug);
         codex = executorAgent.handle;
         disposeCodex = executorAgent.dispose;
       } else {
@@ -74276,6 +74354,13 @@ function neutralCheckoutCwd(stateDir) {
   }
   return dir;
 }
+function directorThreadEnv(projectSlug) {
+  const slug = projectSlug ?? "";
+  if (!slug || slug.length > 200 || /[\s\p{Cc}]/u.test(slug)) {
+    return { MRRLIN_PROJECT_SLUG: null, MRRLIN_PROJECT_BINDING: "none" };
+  }
+  return { MRRLIN_PROJECT_SLUG: slug, MRRLIN_PROJECT_BINDING: null };
+}
 function buildThreadStartParams(msg, config2, desiredModel) {
   const baseInstructions = [
     "You are the Mrrlin Director assistant.",
@@ -74313,10 +74398,10 @@ function buildThreadStartParams(msg, config2, desiredModel) {
     "- Every read or write of Mrrlin data \u2014 tasks, plans, wiki pages, inbox items, execution runs,",
     "  projects \u2014 must go through the corresponding typed MCP tool. Never use `commandExecution`,",
     "  `curl`, `python`, or any direct HTTP call to the Mrrlin API.",
-    "- A single `create_task` call creates a task completely; it accepts `title`, `notes`, `category`,",
-    "  `subcategory`, `impact`, `autonomyLevel`, `planId`, `parentTaskId`, and more in one call.",
-    "  Do not create then patch, and do not re-read the task afterwards unless the operator asked",
-    "  for confirmation.",
+    "- New work is created through `propose_task`, one call per task: it accepts `title`, `notes`,",
+    "  `category`, `subcategory`, `impact`, `autonomyLevel`, `planId`, and more in one call. The",
+    "  operator confirms the proposal in the chat, and that confirmation creates the task \u2014 you do",
+    "  not call `create_task` for it. Do not propose then patch.",
     "- `commandExecution` is for the operator's own machine and repositories \u2014 running builds, tests,",
     "  `git`, inspecting local files \u2014 and for public third-party web checks. It is not a transport",
     "  for this product's API.",
@@ -74399,11 +74484,12 @@ function buildThreadStartParams(msg, config2, desiredModel) {
     "NOT add words of your own.",
     "",
     "Once the operator replies and clarifies or confirms the scope (or if scope was already clear),",
-    "you MUST create the tasks: create the plan (if needed) and call `create_task` in the same turn so",
-    "actionable task cards appear on the Tasks board immediately. Never leave the board empty with 0",
-    "tasks after agreeing on scope. Never claim tasks are created, queued, or ready unless `create_task`",
-    "was actually invoked and returned the task ID. Set `status: 'todo'` on newly created actionable",
-    "tasks unless explicitly asked for backlog, so they appear in active Kanban columns immediately.",
+    "you MUST propose the tasks in the same turn: call `propose_task` once per task (`kind: 'plan'` for",
+    "a plan) so the operator gets a confirmation card for each one immediately. Never leave the",
+    "operator with nothing to confirm after agreeing on scope. Never claim tasks are created, queued,",
+    "or ready before the operator confirmed them: say they are waiting for the operator's confirmation",
+    "in the chat. Proposals bind to the operator's latest message, so propose in the same turn as the",
+    "request \u2014 a later operator message makes an unconfirmed proposal stale.",
     "When referring to created tasks or where to view them, use natural, human-friendly language with a markdown link",
     "to the Tasks page (e.g. 'on the [Tasks page](/tasks)', '[Tasks board](/tasks)', or in Ukrainian '\u043D\u0430 [\u0441\u0442\u043E\u0440\u0456\u043D\u0446\u0456 \u0437\u0430\u0434\u0430\u0447](/tasks)').",
     "Never output raw technical URL fragments like '\u043D\u0430 /tasks' or 'on /tasks', and never use developer database",
@@ -74690,7 +74776,10 @@ function buildThreadStartParams(msg, config2, desiredModel) {
     model: desiredModel,
     baseInstructions,
     developerInstructions: null,
-    ephemeral: null
+    ephemeral: null,
+    // Claude and Agy spawn a process per thread and every Director turn starts or resumes one,
+    // so the turn's own project always reaches the child, including after a project switch.
+    env: directorThreadEnv(msg.context?.projectSlug)
   };
 }
 function readEnvInt(name, fallback) {
@@ -76778,9 +76867,12 @@ async function startDirectorBridge() {
     // Task 1.11: providerId is the caller's own pinned/minted seat (execution-consumer.ts's
     // resolvedProviderId), not resolved ambiently here — this run-scoped spawn has no business
     // re-reading a setting that could have moved since the run's own seat was decided.
-    acquireExecutorAgent: async (worktreePath, providerId) => {
+    acquireExecutorAgent: async (worktreePath, providerId, projectSlug) => {
       const executor = await startExecutorServer({
         worktree: worktreePath,
+        // The run's provider process carries exactly its own project (or none), so its Mrrlin MCP
+        // server is bound to it and never to whatever the bridge's environment names.
+        env: threadProcessEnv(process.env, directorThreadEnv(projectSlug)),
         disabledGitHooksDir: prepareDisabledGitHooksDir(import_node_path40.default.join(config2.stateDir, "locks"), import_node_path40.default.basename(worktreePath)),
         provider: providerId
       });
@@ -77711,7 +77803,7 @@ function renderContextPrefix(context) {
   }
   if (context?.activeProposal) {
     parts.push(
-      `[ACTIVE PROPOSAL] Proposal ID: ${context.activeProposal.id} (version ${context.activeProposal.version}). Work materialization requires explicit operator confirmation of this proposal. You MUST provide proposalId, proposalVersion, and proposalDigest when creating tasks or plans. Direct agent materialization without confirmation will fail closed.`
+      `[ACTIVE PROPOSAL] Proposal ID: ${context.activeProposal.id} (version ${context.activeProposal.version}). Work is created only by the operator confirming a proposal in the chat; propose new work with propose_task. create_plan, and create_task for an already-confirmed proposal, need its proposalId, proposalVersion, and proposalDigest.`
     );
   }
   if (context?.clarifications?.length) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrrlin-dev/mcp",
-  "version": "0.4.108",
+  "version": "0.4.110",
   "type": "module",
   "bin": {
     "mrrlin-mcp": "dist/bin.cjs"