@mrrlin-dev/mcp 0.4.116 → 0.4.118

package/dist/bin.cjs

@@ -5258,8 +5258,8 @@ var require_utils = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path31) {
-      let input = path31;
+    function removeDotSegments(path33) {
+      let input = path33;
       const output3 = [];
       let nextSlash = -1;
       let len = 0;
@@ -5668,8 +5668,8 @@ var require_schemes = __commonJS({
       }
       if (wsComponent.resourceName) {
         const queryIndex = wsComponent.resourceName.indexOf("?");
-        const path31 = queryIndex === -1 ? wsComponent.resourceName : wsComponent.resourceName.slice(0, queryIndex);
-        wsComponent.path = path31 && path31 !== "/" ? path31 : void 0;
+        const path33 = queryIndex === -1 ? wsComponent.resourceName : wsComponent.resourceName.slice(0, queryIndex);
+        wsComponent.path = path33 && path33 !== "/" ? path33 : void 0;
         wsComponent.query = queryIndex === -1 ? void 0 : wsComponent.resourceName.slice(queryIndex + 1);
         wsComponent.resourceName = void 0;
       }
@@ -9305,7 +9305,7 @@ var require_windows = __commonJS({
     module2.exports = isexe;
     isexe.sync = sync;
     var fs16 = require("fs");
-    function checkPathExt(path31, options) {
+    function checkPathExt(path33, options) {
       var pathext = options.pathExt !== void 0 ? options.pathExt : process.env.PATHEXT;
       if (!pathext) {
         return true;
@@ -9316,25 +9316,25 @@ var require_windows = __commonJS({
       }
       for (var i = 0; i < pathext.length; i++) {
         var p = pathext[i].toLowerCase();
-        if (p && path31.substr(-p.length).toLowerCase() === p) {
+        if (p && path33.substr(-p.length).toLowerCase() === p) {
           return true;
         }
       }
       return false;
     }
-    function checkStat(stat3, path31, options) {
+    function checkStat(stat3, path33, options) {
       if (!stat3.isSymbolicLink() && !stat3.isFile()) {
         return false;
       }
-      return checkPathExt(path31, options);
+      return checkPathExt(path33, options);
     }
-    function isexe(path31, options, cb) {
-      fs16.stat(path31, function(er, stat3) {
-        cb(er, er ? false : checkStat(stat3, path31, options));
+    function isexe(path33, options, cb) {
+      fs16.stat(path33, function(er, stat3) {
+        cb(er, er ? false : checkStat(stat3, path33, options));
       });
     }
-    function sync(path31, options) {
-      return checkStat(fs16.statSync(path31), path31, options);
+    function sync(path33, options) {
+      return checkStat(fs16.statSync(path33), path33, options);
     }
   }
 });
@@ -9345,13 +9345,13 @@ var require_mode = __commonJS({
     module2.exports = isexe;
     isexe.sync = sync;
     var fs16 = require("fs");
-    function isexe(path31, options, cb) {
-      fs16.stat(path31, function(er, stat3) {
+    function isexe(path33, options, cb) {
+      fs16.stat(path33, function(er, stat3) {
         cb(er, er ? false : checkStat(stat3, options));
       });
     }
-    function sync(path31, options) {
-      return checkStat(fs16.statSync(path31), options);
+    function sync(path33, options) {
+      return checkStat(fs16.statSync(path33), options);
     }
     function checkStat(stat3, options) {
       return stat3.isFile() && checkMode(stat3, options);
@@ -9384,7 +9384,7 @@ var require_isexe = __commonJS({
     }
     module2.exports = isexe;
     isexe.sync = sync;
-    function isexe(path31, options, cb) {
+    function isexe(path33, options, cb) {
       if (typeof options === "function") {
         cb = options;
         options = {};
@@ -9394,7 +9394,7 @@ var require_isexe = __commonJS({
           throw new TypeError("callback not provided");
         }
         return new Promise(function(resolve2, reject) {
-          isexe(path31, options || {}, function(er, is) {
+          isexe(path33, options || {}, function(er, is) {
             if (er) {
               reject(er);
             } else {
@@ -9403,7 +9403,7 @@ var require_isexe = __commonJS({
           });
         });
       }
-      core(path31, options || {}, function(er, is) {
+      core(path33, options || {}, function(er, is) {
         if (er) {
           if (er.code === "EACCES" || options && options.ignoreErrors) {
             er = null;
@@ -9413,9 +9413,9 @@ var require_isexe = __commonJS({
         cb(er, is);
       });
     }
-    function sync(path31, options) {
+    function sync(path33, options) {
       try {
-        return core.sync(path31, options || {});
+        return core.sync(path33, options || {});
       } catch (er) {
         if (options && options.ignoreErrors || er.code === "EACCES") {
           return false;
@@ -9431,7 +9431,7 @@ var require_isexe = __commonJS({
 var require_which = __commonJS({
   "../../node_modules/.pnpm/which@2.0.2/node_modules/which/which.js"(exports2, module2) {
     var isWindows = process.platform === "win32" || process.env.OSTYPE === "cygwin" || process.env.OSTYPE === "msys";
-    var path31 = require("path");
+    var path33 = require("path");
     var COLON = isWindows ? ";" : ":";
     var isexe = require_isexe();
     var getNotFoundError = (cmd) => Object.assign(new Error(`not found: ${cmd}`), { code: "ENOENT" });
@@ -9469,7 +9469,7 @@ var require_which = __commonJS({
           return opt.all && found.length ? resolve2(found) : reject(getNotFoundError(cmd));
         const ppRaw = pathEnv[i];
         const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
-        const pCmd = path31.join(pathPart, cmd);
+        const pCmd = path33.join(pathPart, cmd);
         const p = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
         resolve2(subStep(p, i, 0));
       });
@@ -9496,7 +9496,7 @@ var require_which = __commonJS({
       for (let i = 0; i < pathEnv.length; i++) {
         const ppRaw = pathEnv[i];
         const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
-        const pCmd = path31.join(pathPart, cmd);
+        const pCmd = path33.join(pathPart, cmd);
         const p = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
         for (let j = 0; j < pathExt.length; j++) {
           const cur = p + pathExt[j];
@@ -9544,7 +9544,7 @@ var require_path_key = __commonJS({
 var require_resolveCommand = __commonJS({
   "../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/resolveCommand.js"(exports2, module2) {
     "use strict";
-    var path31 = require("path");
+    var path33 = require("path");
     var which = require_which();
     var getPathKey = require_path_key();
     function resolveCommandAttempt(parsed, withoutPathExt) {
@@ -9562,7 +9562,7 @@ var require_resolveCommand = __commonJS({
       try {
         resolved = which.sync(parsed.command, {
           path: env[getPathKey({ env })],
-          pathExt: withoutPathExt ? path31.delimiter : void 0
+          pathExt: withoutPathExt ? path33.delimiter : void 0
         });
       } catch (e) {
       } finally {
@@ -9571,7 +9571,7 @@ var require_resolveCommand = __commonJS({
         }
       }
       if (resolved) {
-        resolved = path31.resolve(hasCustomCwd ? parsed.options.cwd : "", resolved);
+        resolved = path33.resolve(hasCustomCwd ? parsed.options.cwd : "", resolved);
       }
       return resolved;
     }
@@ -9625,8 +9625,8 @@ var require_shebang_command = __commonJS({
       if (!match) {
         return null;
       }
-      const [path31, argument] = match[0].replace(/#! ?/, "").split(" ");
-      const binary = path31.split("/").pop();
+      const [path33, argument] = match[0].replace(/#! ?/, "").split(" ");
+      const binary = path33.split("/").pop();
       if (binary === "env") {
         return argument;
       }
@@ -9661,7 +9661,7 @@ var require_readShebang = __commonJS({
 var require_parse2 = __commonJS({
   "../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/parse.js"(exports2, module2) {
     "use strict";
-    var path31 = require("path");
+    var path33 = require("path");
     var resolveCommand = require_resolveCommand();
     var escape2 = require_escape();
     var readShebang = require_readShebang();
@@ -9686,7 +9686,7 @@ var require_parse2 = __commonJS({
       const needsShell = !isExecutableRegExp.test(commandFile);
       if (parsed.options.forceShell || needsShell) {
         const needsDoubleEscapeMetaChars = isCmdShimRegExp.test(commandFile);
-        parsed.command = path31.normalize(parsed.command);
+        parsed.command = path33.normalize(parsed.command);
         parsed.command = escape2.command(parsed.command);
         parsed.args = parsed.args.map((arg) => escape2.argument(arg, needsDoubleEscapeMetaChars));
         const shellCommand = [parsed.command].concat(parsed.args).join(" ");
@@ -9782,7 +9782,7 @@ var require_cross_spawn = __commonJS({
       enoent.hookChildProcess(spawned, parsed);
       return spawned;
     }
-    function spawnSync8(command, args, options) {
+    function spawnSync9(command, args, options) {
       const parsed = parse8(command, args, options);
       const result = cp.spawnSync(parsed.command, parsed.args, parsed.options);
       result.error = result.error || enoent.verifyENOENTSync(result.status, parsed);
@@ -9790,7 +9790,7 @@ var require_cross_spawn = __commonJS({
     }
     module2.exports = spawn8;
     module2.exports.spawn = spawn8;
-    module2.exports.sync = spawnSync8;
+    module2.exports.sync = spawnSync9;
     module2.exports._parse = parse8;
     module2.exports._enoent = enoent;
   }
@@ -14017,7 +14017,7 @@ var require_websocket = __commonJS({
     var http4 = require("http");
     var net3 = require("net");
     var tls2 = require("tls");
-    var { randomBytes: randomBytes5, createHash: createHash6 } = require("crypto");
+    var { randomBytes: randomBytes5, createHash: createHash7 } = require("crypto");
     var { Duplex, Readable } = require("stream");
     var { URL: URL2 } = require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -14685,7 +14685,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash6("sha1").update(key + GUID).digest("base64");
+        const digest = createHash7("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -15054,7 +15054,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter3 = require("events");
     var http4 = require("http");
     var { Duplex } = require("stream");
-    var { createHash: createHash6 } = require("crypto");
+    var { createHash: createHash7 } = require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -15361,7 +15361,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash6("sha1").update(key + GUID).digest("base64");
+        const digest = createHash7("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -15500,14 +15500,14 @@ var require_polyfills = __commonJS({
       fs16.fstatSync = statFixSync(fs16.fstatSync);
       fs16.lstatSync = statFixSync(fs16.lstatSync);
       if (fs16.chmod && !fs16.lchmod) {
-        fs16.lchmod = function(path31, mode, cb) {
+        fs16.lchmod = function(path33, mode, cb) {
           if (cb) process.nextTick(cb);
         };
         fs16.lchmodSync = function() {
         };
       }
       if (fs16.chown && !fs16.lchown) {
-        fs16.lchown = function(path31, uid, gid, cb) {
+        fs16.lchown = function(path33, uid, gid, cb) {
           if (cb) process.nextTick(cb);
         };
         fs16.lchownSync = function() {
@@ -15574,9 +15574,9 @@ var require_polyfills = __commonJS({
         };
       }(fs16.readSync);
       function patchLchmod(fs17) {
-        fs17.lchmod = function(path31, mode, callback) {
+        fs17.lchmod = function(path33, mode, callback) {
           fs17.open(
-            path31,
+            path33,
             constants2.O_WRONLY | constants2.O_SYMLINK,
             mode,
             function(err, fd) {
@@ -15592,8 +15592,8 @@ var require_polyfills = __commonJS({
             }
           );
         };
-        fs17.lchmodSync = function(path31, mode) {
-          var fd = fs17.openSync(path31, constants2.O_WRONLY | constants2.O_SYMLINK, mode);
+        fs17.lchmodSync = function(path33, mode) {
+          var fd = fs17.openSync(path33, constants2.O_WRONLY | constants2.O_SYMLINK, mode);
           var threw = true;
           var ret;
           try {
@@ -15614,8 +15614,8 @@ var require_polyfills = __commonJS({
       }
       function patchLutimes(fs17) {
         if (constants2.hasOwnProperty("O_SYMLINK") && fs17.futimes) {
-          fs17.lutimes = function(path31, at, mt, cb) {
-            fs17.open(path31, constants2.O_SYMLINK, function(er, fd) {
+          fs17.lutimes = function(path33, at, mt, cb) {
+            fs17.open(path33, constants2.O_SYMLINK, function(er, fd) {
               if (er) {
                 if (cb) cb(er);
                 return;
@@ -15627,8 +15627,8 @@ var require_polyfills = __commonJS({
               });
             });
           };
-          fs17.lutimesSync = function(path31, at, mt) {
-            var fd = fs17.openSync(path31, constants2.O_SYMLINK);
+          fs17.lutimesSync = function(path33, at, mt) {
+            var fd = fs17.openSync(path33, constants2.O_SYMLINK);
             var ret;
             var threw = true;
             try {
@@ -15746,11 +15746,11 @@ var require_legacy_streams = __commonJS({
         ReadStream,
         WriteStream
       };
-      function ReadStream(path31, options) {
-        if (!(this instanceof ReadStream)) return new ReadStream(path31, options);
+      function ReadStream(path33, options) {
+        if (!(this instanceof ReadStream)) return new ReadStream(path33, options);
         Stream.call(this);
         var self = this;
-        this.path = path31;
+        this.path = path33;
         this.fd = null;
         this.readable = true;
         this.paused = false;
@@ -15795,10 +15795,10 @@ var require_legacy_streams = __commonJS({
           self._read();
         });
       }
-      function WriteStream(path31, options) {
-        if (!(this instanceof WriteStream)) return new WriteStream(path31, options);
+      function WriteStream(path33, options) {
+        if (!(this instanceof WriteStream)) return new WriteStream(path33, options);
         Stream.call(this);
-        this.path = path31;
+        this.path = path33;
         this.fd = null;
         this.writable = true;
         this.flags = "w";
@@ -15909,14 +15909,14 @@ var require_graceful_fs = __commonJS({
         return close;
       }(fs16.close);
       fs16.closeSync = function(fs$closeSync) {
-        function closeSync(fd) {
+        function closeSync2(fd) {
           fs$closeSync.apply(fs16, arguments);
           resetQueue();
         }
-        Object.defineProperty(closeSync, previousSymbol, {
+        Object.defineProperty(closeSync2, previousSymbol, {
           value: fs$closeSync
         });
-        return closeSync;
+        return closeSync2;
       }(fs16.closeSync);
       if (/\bgfs4\b/i.test(process.env.NODE_DEBUG || "")) {
         process.on("exit", function() {
@@ -15941,14 +15941,14 @@ var require_graceful_fs = __commonJS({
       fs17.createWriteStream = createWriteStream;
       var fs$readFile = fs17.readFile;
       fs17.readFile = readFile9;
-      function readFile9(path31, options, cb) {
+      function readFile9(path33, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
-        return go$readFile(path31, options, cb);
-        function go$readFile(path32, options2, cb2, startTime) {
-          return fs$readFile(path32, options2, function(err) {
+        return go$readFile(path33, options, cb);
+        function go$readFile(path34, options2, cb2, startTime) {
+          return fs$readFile(path34, options2, function(err) {
             if (err && (err.code === "EMFILE" || err.code === "ENFILE"))
-              enqueue([go$readFile, [path32, options2, cb2], err, startTime || Date.now(), Date.now()]);
+              enqueue([go$readFile, [path34, options2, cb2], err, startTime || Date.now(), Date.now()]);
             else {
               if (typeof cb2 === "function")
                 cb2.apply(this, arguments);
@@ -15958,14 +15958,14 @@ var require_graceful_fs = __commonJS({
       }
       var fs$writeFile = fs17.writeFile;
       fs17.writeFile = writeFile5;
-      function writeFile5(path31, data, options, cb) {
+      function writeFile5(path33, data, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
-        return go$writeFile(path31, data, options, cb);
-        function go$writeFile(path32, data2, options2, cb2, startTime) {
-          return fs$writeFile(path32, data2, options2, function(err) {
+        return go$writeFile(path33, data, options, cb);
+        function go$writeFile(path34, data2, options2, cb2, startTime) {
+          return fs$writeFile(path34, data2, options2, function(err) {
             if (err && (err.code === "EMFILE" || err.code === "ENFILE"))
-              enqueue([go$writeFile, [path32, data2, options2, cb2], err, startTime || Date.now(), Date.now()]);
+              enqueue([go$writeFile, [path34, data2, options2, cb2], err, startTime || Date.now(), Date.now()]);
             else {
               if (typeof cb2 === "function")
                 cb2.apply(this, arguments);
@@ -15976,14 +15976,14 @@ var require_graceful_fs = __commonJS({
       var fs$appendFile = fs17.appendFile;
       if (fs$appendFile)
         fs17.appendFile = appendFile2;
-      function appendFile2(path31, data, options, cb) {
+      function appendFile2(path33, data, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
-        return go$appendFile(path31, data, options, cb);
-        function go$appendFile(path32, data2, options2, cb2, startTime) {
-          return fs$appendFile(path32, data2, options2, function(err) {
+        return go$appendFile(path33, data, options, cb);
+        function go$appendFile(path34, data2, options2, cb2, startTime) {
+          return fs$appendFile(path34, data2, options2, function(err) {
             if (err && (err.code === "EMFILE" || err.code === "ENFILE"))
-              enqueue([go$appendFile, [path32, data2, options2, cb2], err, startTime || Date.now(), Date.now()]);
+              enqueue([go$appendFile, [path34, data2, options2, cb2], err, startTime || Date.now(), Date.now()]);
             else {
               if (typeof cb2 === "function")
                 cb2.apply(this, arguments);
@@ -16014,31 +16014,31 @@ var require_graceful_fs = __commonJS({
       var fs$readdir = fs17.readdir;
       fs17.readdir = readdir5;
       var noReaddirOptionVersions = /^v[0-5]\./;
-      function readdir5(path31, options, cb) {
+      function readdir5(path33, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
-        var go$readdir = noReaddirOptionVersions.test(process.version) ? function go$readdir2(path32, options2, cb2, startTime) {
-          return fs$readdir(path32, fs$readdirCallback(
-            path32,
+        var go$readdir = noReaddirOptionVersions.test(process.version) ? function go$readdir2(path34, options2, cb2, startTime) {
+          return fs$readdir(path34, fs$readdirCallback(
+            path34,
             options2,
             cb2,
             startTime
           ));
-        } : function go$readdir2(path32, options2, cb2, startTime) {
-          return fs$readdir(path32, options2, fs$readdirCallback(
-            path32,
+        } : function go$readdir2(path34, options2, cb2, startTime) {
+          return fs$readdir(path34, options2, fs$readdirCallback(
+            path34,
             options2,
             cb2,
             startTime
           ));
         };
-        return go$readdir(path31, options, cb);
-        function fs$readdirCallback(path32, options2, cb2, startTime) {
+        return go$readdir(path33, options, cb);
+        function fs$readdirCallback(path34, options2, cb2, startTime) {
           return function(err, files) {
             if (err && (err.code === "EMFILE" || err.code === "ENFILE"))
               enqueue([
                 go$readdir,
-                [path32, options2, cb2],
+                [path34, options2, cb2],
                 err,
                 startTime || Date.now(),
                 Date.now()
@@ -16109,7 +16109,7 @@ var require_graceful_fs = __commonJS({
         enumerable: true,
         configurable: true
       });
-      function ReadStream(path31, options) {
+      function ReadStream(path33, options) {
         if (this instanceof ReadStream)
           return fs$ReadStream.apply(this, arguments), this;
         else
@@ -16129,7 +16129,7 @@ var require_graceful_fs = __commonJS({
           }
         });
       }
-      function WriteStream(path31, options) {
+      function WriteStream(path33, options) {
         if (this instanceof WriteStream)
           return fs$WriteStream.apply(this, arguments), this;
         else
@@ -16147,22 +16147,22 @@ var require_graceful_fs = __commonJS({
           }
         });
       }
-      function createReadStream2(path31, options) {
-        return new fs17.ReadStream(path31, options);
+      function createReadStream2(path33, options) {
+        return new fs17.ReadStream(path33, options);
       }
-      function createWriteStream(path31, options) {
-        return new fs17.WriteStream(path31, options);
+      function createWriteStream(path33, options) {
+        return new fs17.WriteStream(path33, options);
       }
       var fs$open = fs17.open;
       fs17.open = open;
-      function open(path31, flags, mode, cb) {
+      function open(path33, flags, mode, cb) {
         if (typeof mode === "function")
           cb = mode, mode = null;
-        return go$open(path31, flags, mode, cb);
-        function go$open(path32, flags2, mode2, cb2, startTime) {
-          return fs$open(path32, flags2, mode2, function(err, fd) {
+        return go$open(path33, flags, mode, cb);
+        function go$open(path34, flags2, mode2, cb2, startTime) {
+          return fs$open(path34, flags2, mode2, function(err, fd) {
             if (err && (err.code === "EMFILE" || err.code === "ENFILE"))
-              enqueue([go$open, [path32, flags2, mode2, cb2], err, startTime || Date.now(), Date.now()]);
+              enqueue([go$open, [path34, flags2, mode2, cb2], err, startTime || Date.now(), Date.now()]);
             else {
               if (typeof cb2 === "function")
                 cb2.apply(this, arguments);
@@ -16691,7 +16691,7 @@ var require_mtime_precision = __commonJS({
 var require_lockfile = __commonJS({
   "../../node_modules/.pnpm/proper-lockfile@4.1.2/node_modules/proper-lockfile/lib/lockfile.js"(exports2, module2) {
     "use strict";
-    var path31 = require("path");
+    var path33 = require("path");
     var fs16 = require_graceful_fs();
     var retry = require_retry2();
     var onExit = require_signal_exit();
@@ -16702,7 +16702,7 @@ var require_lockfile = __commonJS({
     }
     function resolveCanonicalPath(file2, options, callback) {
       if (!options.realpath) {
-        return callback(null, path31.resolve(file2));
+        return callback(null, path33.resolve(file2));
       }
       options.fs.realpath(file2, callback);
     }
@@ -18566,10 +18566,10 @@ var require_segments = __commonJS({
       const segs = getSegmentsFromString(data, Utils.isKanjiModeEnabled());
       const nodes = buildNodes(segs);
       const graph = buildGraph(nodes, version2);
-      const path31 = dijkstra.find_path(graph.map, "start", "end");
+      const path33 = dijkstra.find_path(graph.map, "start", "end");
       const optimizedSegs = [];
-      for (let i = 1; i < path31.length - 1; i++) {
-        optimizedSegs.push(graph.table[path31[i]].node);
+      for (let i = 1; i < path33.length - 1; i++) {
+        optimizedSegs.push(graph.table[path33[i]].node);
       }
       return exports2.fromArray(mergeSegments(optimizedSegs));
     };
@@ -21046,7 +21046,7 @@ var require_png2 = __commonJS({
       });
       png.pack();
     };
-    exports2.renderToFile = function renderToFile(path31, qrData, options, cb) {
+    exports2.renderToFile = function renderToFile(path33, qrData, options, cb) {
       if (typeof cb === "undefined") {
         cb = options;
         options = void 0;
@@ -21057,7 +21057,7 @@ var require_png2 = __commonJS({
         called = true;
         cb.apply(null, args);
       };
-      const stream = fs16.createWriteStream(path31);
+      const stream = fs16.createWriteStream(path33);
       stream.on("error", done);
       stream.on("close", done);
       exports2.renderToFileStream(stream, qrData, options);
@@ -21119,14 +21119,14 @@ var require_utf8 = __commonJS({
       }
       return output3;
     };
-    exports2.renderToFile = function renderToFile(path31, qrData, options, cb) {
+    exports2.renderToFile = function renderToFile(path33, qrData, options, cb) {
       if (typeof cb === "undefined") {
         cb = options;
         options = void 0;
       }
       const fs16 = require("fs");
       const utf8 = exports2.render(qrData, options);
-      fs16.writeFile(path31, utf8, cb);
+      fs16.writeFile(path33, utf8, cb);
     };
   }
 });
@@ -21247,7 +21247,7 @@ var require_svg_tag = __commonJS({
       return str;
     }
     function qrToPath(data, size, margin) {
-      let path31 = "";
+      let path33 = "";
       let moveBy = 0;
       let newRow = false;
       let lineLength = 0;
@@ -21258,19 +21258,19 @@ var require_svg_tag = __commonJS({
         if (data[i]) {
           lineLength++;
           if (!(i > 0 && col > 0 && data[i - 1])) {
-            path31 += newRow ? svgCmd("M", col + margin, 0.5 + row + margin) : svgCmd("m", moveBy, 0);
+            path33 += newRow ? svgCmd("M", col + margin, 0.5 + row + margin) : svgCmd("m", moveBy, 0);
             moveBy = 0;
             newRow = false;
           }
           if (!(col + 1 < size && data[i + 1])) {
-            path31 += svgCmd("h", lineLength);
+            path33 += svgCmd("h", lineLength);
             lineLength = 0;
           }
         } else {
           moveBy++;
         }
       }
-      return path31;
+      return path33;
     }
     exports2.render = function render(qrData, options, cb) {
       const opts = Utils.getOptions(options);
@@ -21278,10 +21278,10 @@ var require_svg_tag = __commonJS({
       const data = qrData.modules.data;
       const qrcodesize = size + opts.margin * 2;
       const bg = !opts.color.light.a ? "" : "<path " + getColorAttrib(opts.color.light, "fill") + ' d="M0 0h' + qrcodesize + "v" + qrcodesize + 'H0z"/>';
-      const path31 = "<path " + getColorAttrib(opts.color.dark, "stroke") + ' d="' + qrToPath(data, size, opts.margin) + '"/>';
+      const path33 = "<path " + getColorAttrib(opts.color.dark, "stroke") + ' d="' + qrToPath(data, size, opts.margin) + '"/>';
       const viewBox = 'viewBox="0 0 ' + qrcodesize + " " + qrcodesize + '"';
       const width = !opts.width ? "" : 'width="' + opts.width + '" height="' + opts.width + '" ';
-      const svgTag = '<svg xmlns="http://www.w3.org/2000/svg" ' + width + viewBox + ' shape-rendering="crispEdges">' + bg + path31 + "</svg>\n";
+      const svgTag = '<svg xmlns="http://www.w3.org/2000/svg" ' + width + viewBox + ' shape-rendering="crispEdges">' + bg + path33 + "</svg>\n";
       if (typeof cb === "function") {
         cb(null, svgTag);
       }
@@ -21295,7 +21295,7 @@ var require_svg = __commonJS({
   "../../node_modules/.pnpm/qrcode@1.5.4/node_modules/qrcode/lib/renderer/svg.js"(exports2) {
     var svgTagRenderer = require_svg_tag();
     exports2.render = svgTagRenderer.render;
-    exports2.renderToFile = function renderToFile(path31, qrData, options, cb) {
+    exports2.renderToFile = function renderToFile(path33, qrData, options, cb) {
       if (typeof cb === "undefined") {
         cb = options;
         options = void 0;
@@ -21303,7 +21303,7 @@ var require_svg = __commonJS({
       const fs16 = require("fs");
       const svgTag = exports2.render(qrData, options);
       const xmlStr = '<?xml version="1.0" encoding="utf-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">' + svgTag;
-      fs16.writeFile(path31, xmlStr, cb);
+      fs16.writeFile(path33, xmlStr, cb);
     };
   }
 });
@@ -21461,8 +21461,8 @@ var require_server = __commonJS({
         cb
       };
     }
-    function getTypeFromFilename(path31) {
-      return path31.slice((path31.lastIndexOf(".") - 1 >>> 0) + 2).toLowerCase();
+    function getTypeFromFilename(path33) {
+      return path33.slice((path33.lastIndexOf(".") - 1 >>> 0) + 2).toLowerCase();
     }
     function getRendererFromType(type) {
       switch (type) {
@@ -21526,17 +21526,17 @@ var require_server = __commonJS({
       const renderer = getRendererFromType(params.opts.type);
       return render(renderer.renderToBuffer, text, params);
     };
-    exports2.toFile = function toFile(path31, text, opts, cb) {
-      if (typeof path31 !== "string" || !(typeof text === "string" || typeof text === "object")) {
+    exports2.toFile = function toFile(path33, text, opts, cb) {
+      if (typeof path33 !== "string" || !(typeof text === "string" || typeof text === "object")) {
         throw new Error("Invalid argument");
       }
       if (arguments.length < 3 && !canPromise()) {
         throw new Error("Too few arguments provided");
       }
       const params = checkParams(text, opts, cb);
-      const type = params.opts.type || getTypeFromFilename(path31);
+      const type = params.opts.type || getTypeFromFilename(path33);
       const renderer = getRendererFromType(type);
-      const renderToFile = renderer.renderToFile.bind(null, path31);
+      const renderToFile = renderer.renderToFile.bind(null, path33);
       return render(renderToFile, text, params);
     };
     exports2.toFileStream = function toFileStream(stream, text, opts) {
@@ -21593,8 +21593,8 @@ args = ${JSON.stringify(expected.args)}
   return tomlStr;
 }
 async function installPublicMcpServerToConfigs(serverId, expected) {
-  const homeDir = import_node_os19.default.homedir();
-  const claudePath = import_node_path39.default.join(homeDir, ".claude.json");
+  const homeDir = import_node_os20.default.homedir();
+  const claudePath = import_node_path41.default.join(homeDir, ".claude.json");
   if (await pathExists5(claudePath)) {
     try {
       const content = await import_promises16.default.readFile(claudePath, "utf8");
@@ -21608,7 +21608,7 @@ async function installPublicMcpServerToConfigs(serverId, expected) {
   } else {
     await writeAtomic(claudePath, JSON.stringify({ mcpServers: { [serverId]: expected } }, null, 2) + "\n");
   }
-  const codexPath = import_node_path39.default.join(homeDir, ".codex", "config.toml");
+  const codexPath = import_node_path41.default.join(homeDir, ".codex", "config.toml");
   if (await pathExists5(codexPath)) {
     try {
       const content = await import_promises16.default.readFile(codexPath, "utf8");
@@ -21623,11 +21623,11 @@ async function installPublicMcpServerToConfigs(serverId, expected) {
       console.error(`Failed to inject MCP server into ${codexPath}`, e);
     }
   } else {
-    await import_promises16.default.mkdir(import_node_path39.default.dirname(codexPath), { recursive: true, mode: 448 }).catch(() => {
+    await import_promises16.default.mkdir(import_node_path41.default.dirname(codexPath), { recursive: true, mode: 448 }).catch(() => {
     });
     await writeAtomic(codexPath, renderTomlBlock(serverId, expected).trim() + "\n");
   }
-  const agyPath = import_node_path39.default.join(homeDir, ".gemini", "antigravity", "mcp_config.json");
+  const agyPath = import_node_path41.default.join(homeDir, ".gemini", "antigravity", "mcp_config.json");
   if (await pathExists5(agyPath)) {
     try {
       const content = await import_promises16.default.readFile(agyPath, "utf8");
@@ -21639,18 +21639,18 @@ async function installPublicMcpServerToConfigs(serverId, expected) {
       console.error(`Failed to inject MCP server into ${agyPath}`, e);
     }
   } else {
-    await import_promises16.default.mkdir(import_node_path39.default.dirname(agyPath), { recursive: true, mode: 448 }).catch(() => {
+    await import_promises16.default.mkdir(import_node_path41.default.dirname(agyPath), { recursive: true, mode: 448 }).catch(() => {
     });
     await writeAtomic(agyPath, JSON.stringify({ mcpServers: { [serverId]: expected } }, null, 2) + "\n");
   }
 }
-var import_promises16, import_node_os19, import_node_path39, toml4;
+var import_promises16, import_node_os20, import_node_path41, toml4;
 var init_install_public_mcp = __esm({
   "src/install-public-mcp.ts"() {
     "use strict";
     import_promises16 = __toESM(require("node:fs/promises"), 1);
-    import_node_os19 = __toESM(require("node:os"), 1);
-    import_node_path39 = __toESM(require("node:path"), 1);
+    import_node_os20 = __toESM(require("node:os"), 1);
+    import_node_path41 = __toESM(require("node:path"), 1);
     toml4 = __toESM(require_toml(), 1);
   }
 });
@@ -21661,11 +21661,11 @@ __export(bin_exports, {
   augmentProcessPathWithCommonDirs: () => augmentProcessPathWithCommonDirs
 });
 module.exports = __toCommonJS(bin_exports);
-var import_node_path44 = __toESM(require("node:path"), 1);
-var import_node_child_process24 = require("node:child_process");
-var import_node_fs27 = require("node:fs");
-var import_node_os23 = require("node:os");
-var import_node_path45 = __toESM(require("node:path"), 1);
+var import_node_path46 = __toESM(require("node:path"), 1);
+var import_node_child_process26 = require("node:child_process");
+var import_node_fs29 = require("node:fs");
+var import_node_os24 = require("node:os");
+var import_node_path47 = __toESM(require("node:path"), 1);
 
 // src/install-codex.ts
 var import_promises = __toESM(require("node:fs/promises"), 1);
@@ -22666,14 +22666,14 @@ async function installClaude(options) {
 
 // src/install-agy.ts
 var import_promises9 = __toESM(require("node:fs/promises"), 1);
-var import_node_os11 = __toESM(require("node:os"), 1);
-var import_node_path19 = __toESM(require("node:path"), 1);
+var import_node_os12 = __toESM(require("node:os"), 1);
+var import_node_path20 = __toESM(require("node:path"), 1);
 
 // src/tools.ts
 var import_node_crypto11 = require("node:crypto");
 var import_promises8 = require("node:fs/promises");
-var import_node_path18 = __toESM(require("node:path"), 1);
-var import_node_os10 = __toESM(require("node:os"), 1);
+var import_node_path19 = __toESM(require("node:path"), 1);
+var import_node_os11 = __toESM(require("node:os"), 1);
 
 // ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -23441,10 +23441,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path31) {
-  if (!path31)
+function getElementAtPath(obj, path33) {
+  if (!path33)
     return obj;
-  return path31.reduce((acc, key) => acc?.[key], obj);
+  return path33.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -23853,11 +23853,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path31, issues) {
+function prefixIssues(path33, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path31);
+    iss.path.unshift(path33);
     return iss;
   });
 }
@@ -24004,16 +24004,16 @@ function flattenError(error51, mapper = (issue2) => issue2.message) {
 }
 function formatError(error51, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error52, path31 = []) => {
+  const processError = (error52, path33 = []) => {
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path31, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path33, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path31, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path33, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path31, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path33, ...issue2.path]);
       } else {
-        const fullpath = [...path31, ...issue2.path];
+        const fullpath = [...path33, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -24040,17 +24040,17 @@ function formatError(error51, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error51, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error52, path31 = []) => {
+  const processError = (error52, path33 = []) => {
     var _a3, _b;
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path31, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path33, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path31, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path33, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path31, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path33, ...issue2.path]);
       } else {
-        const fullpath = [...path31, ...issue2.path];
+        const fullpath = [...path33, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -24082,8 +24082,8 @@ function treeifyError(error51, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path31 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path31) {
+  const path33 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path33) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -36775,13 +36775,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path31 = ref.slice(1).split("/").filter(Boolean);
-  if (path31.length === 0) {
+  const path33 = ref.slice(1).split("/").filter(Boolean);
+  if (path33.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path31[0] === defsKey) {
-    const key = path31[1];
+  if (path33[0] === defsKey) {
+    const key = path33[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -37250,6 +37250,8 @@ var ARTIFACT_DESTINATIONS = {
 function resolveKindCapability(kind) {
   return ARTIFACT_DESTINATIONS[kind];
 }
+var BUILTIN_CAPABILITY_SERVER_ID = "mrrlin-builtin";
+var LOCAL_GIT_TOOL_NAME = "mrrlin.local-git";
 
 // ../../packages/schemas/dist/capability-refusal.js
 var REFUSAL_TEMPLATES = {
@@ -38521,6 +38523,9 @@ var GIT_SHA_PATTERN = /^(?:[0-9a-f]{40}|[0-9a-f]{64})$/;
 var SHA256_HEX_PATTERN = /^[0-9a-f]{64}$/;
 var MRRLIN_LOCAL_DELIVERY_REF_PATTERN = /^git\+local:\/\/([^/\s@]+)\/(mrrlin\/run-ER-[A-Za-z0-9-]+)@([0-9a-f]{40}|[0-9a-f]{64})$/;
 var mrrlinLocalDeliveryRefSchema = external_exports.string().regex(MRRLIN_LOCAL_DELIVERY_REF_PATTERN, "deliveryRef must be git+local://<projectSlug>/mrrlin/run-<runId>@<sha>");
+function formatLocalDeliveryRef(input) {
+  return mrrlinLocalDeliveryRefSchema.parse(`git+local://${input.projectSlug}/${input.branch}@${input.headSha}`);
+}
 var mrrlinLocalBuildStepSchema = external_exports.object({
   command: external_exports.string().trim().min(1).max(200),
   exitCode: external_exports.number().int(),
@@ -38571,6 +38576,7 @@ var mrrlinReceiptSchema = external_exports.object({
   if (problem)
     ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["localBuild"], message: problem });
 });
+var LOCAL_BUILD_RECEIPT_PAYLOAD_KEY = "localBuildReceipt";
 function buildReceipt(input) {
   return {
     kind: input.coveredKinds.length === 0 ? "attempt" : "outcome",
@@ -40688,18 +40694,18 @@ function createMrrlinClient(config2) {
   const customFetch = config2.fetch ?? globalThis.fetch;
   const baseUrl = config2.baseUrl.replace(/\/$/, "");
   const token = config2.token;
-  async function request(path31, init) {
+  async function request(path33, init) {
     const method = init?.method ?? "GET";
     const headers = new Headers(init?.headers ?? {});
     if (token && !headers.has("authorization")) {
       headers.set("authorization", `Bearer ${token}`);
     }
-    const response = await customFetch(`${baseUrl}${path31}`, { ...init, headers });
+    const response = await customFetch(`${baseUrl}${path33}`, { ...init, headers });
     if (!response.ok) {
       const body = await response.text();
       let code = `HTTP_${response.status}`;
       let violations = null;
-      let message = `Mrrlin API ${method} ${path31} failed: ${response.status}`;
+      let message = `Mrrlin API ${method} ${path33} failed: ${response.status}`;
       try {
         const parsed = JSON.parse(body);
         const violationsParsed = apiViolationsErrorSchema.safeParse(parsed);
@@ -40719,7 +40725,7 @@ function createMrrlinClient(config2) {
       throw new MrrlinApiError({
         code,
         method,
-        path: path31,
+        path: path33,
         responseBody: body,
         status: response.status,
         violations,
@@ -40728,18 +40734,18 @@ function createMrrlinClient(config2) {
     }
     return response.json();
   }
-  async function requestText(path31, init) {
+  async function requestText(path33, init) {
     const method = init?.method ?? "GET";
     const headers = new Headers(init?.headers ?? {});
     if (token && !headers.has("authorization")) {
       headers.set("authorization", `Bearer ${token}`);
     }
-    const response = await customFetch(`${baseUrl}${path31}`, { ...init, headers });
+    const response = await customFetch(`${baseUrl}${path33}`, { ...init, headers });
     if (!response.ok) {
       const body = await response.text();
       let code = `HTTP_${response.status}`;
       let violations = null;
-      let message = `Mrrlin API ${method} ${path31} failed: ${response.status}`;
+      let message = `Mrrlin API ${method} ${path33} failed: ${response.status}`;
       try {
         const parsed = JSON.parse(body);
         const violationsParsed = apiViolationsErrorSchema.safeParse(parsed);
@@ -40759,7 +40765,7 @@ function createMrrlinClient(config2) {
       throw new MrrlinApiError({
         code,
         method,
-        path: path31,
+        path: path33,
         responseBody: body,
         status: response.status,
         violations,
@@ -40927,16 +40933,16 @@ function createMrrlinClient(config2) {
     // rejected against the first, MrrlinTask[]-only overload) -- the `any` here is contained to
     // this one implementation signature; MrrlinClient's declared overloads keep callers precise.
     async listTasks(projectSlug, filters = {}, options) {
-      const path31 = buildTaskListPath(projectSlug, filters, options?.view);
-      const body = await request(path31, options?.signal ? { signal: options.signal } : void 0);
+      const path33 = buildTaskListPath(projectSlug, filters, options?.view);
+      const body = await request(path33, options?.signal ? { signal: options.signal } : void 0);
       if (options?.view === "summary") {
         return taskSummaryListResponseSchema.parse(body).data;
       }
       return taskListResponseSchema.parse(body).data;
     },
     async listTaskSummaries(projectSlug, filters = {}, options) {
-      const path31 = buildTaskListPath(projectSlug, filters, "summary");
-      const body = await request(path31, options?.signal ? { signal: options.signal } : void 0);
+      const path33 = buildTaskListPath(projectSlug, filters, "summary");
+      const body = await request(path33, options?.signal ? { signal: options.signal } : void 0);
       return taskSummaryListResponseSchema.parse(body).data;
     },
     async listTaxonomy(projectSlug) {
@@ -40945,7 +40951,7 @@ function createMrrlinClient(config2) {
     },
     async listWikiPages(projectSlug, filters = {}, options) {
       const view = options?.view ?? filters.view;
-      const path31 = appendQuery(`${projectPath(projectSlug)}/wiki`, {
+      const path33 = appendQuery(`${projectPath(projectSlug)}/wiki`, {
         folder: filters.folder,
         id: filters.id,
         limit: filters.limit === void 0 ? void 0 : String(filters.limit),
@@ -40953,20 +40959,20 @@ function createMrrlinClient(config2) {
         taskId: filters.taskId,
         view
       });
-      const body = await request(path31, options?.signal ? { signal: options.signal } : void 0);
+      const body = await request(path33, options?.signal ? { signal: options.signal } : void 0);
       if (view === "summary") {
         return wikiPageSummaryListResponseSchema.parse(body).data;
       }
       return wikiPageListResponseSchema.parse(body).data;
     },
     async searchWikiPages(projectSlug, query) {
-      const path31 = appendQuery(`${projectPath(projectSlug)}/wiki/search`, {
+      const path33 = appendQuery(`${projectPath(projectSlug)}/wiki/search`, {
         folder: query.folder,
         limit: query.limit === void 0 ? void 0 : String(query.limit),
         pathPrefix: query.pathPrefix,
         q: query.q
       });
-      const body = await request(path31);
+      const body = await request(path33);
       return wikiPageSearchResponseSchema.parse(body).data;
     },
     async updatePlan(projectSlug, planId, patch) {
@@ -57354,8 +57360,8 @@ async function findSessionDays(stateDir, sessionId) {
 function isRecord5(v) {
   return v !== null && typeof v === "object";
 }
-function resolvePath(root, path31) {
-  const parts = path31.split(".");
+function resolvePath(root, path33) {
+  const parts = path33.split(".");
   let cur = root;
   for (let i = 0; i < parts.length - 1; i += 1) {
     const part = parts[i];
@@ -57423,9 +57429,9 @@ async function gate(artifact, prose, ctx) {
     return { ok: true, gated: true, artifact: withheldExcerptClone(artifact) };
   }
   const maskedClone = typeof structuredClone === "function" ? structuredClone(artifact) : JSON.parse(JSON.stringify(artifact));
-  for (const { path: path31, masked } of fields) {
-    const target = resolvePath(maskedClone, path31);
-    if (!target) throw new Error(`pii-gate: path "${path31}" failed to resolve on the clone after validating on the original`);
+  for (const { path: path33, masked } of fields) {
+    const target = resolvePath(maskedClone, path33);
+    if (!target) throw new Error(`pii-gate: path "${path33}" failed to resolve on the clone after validating on the original`);
     target.parent[target.key] = masked;
   }
   return { ok: true, gated: false, artifact: maskedClone };
@@ -57635,9 +57641,9 @@ var CheckoutRegistry = class {
   get(slug) {
     return this.read()[slug] ?? null;
   }
-  confirm(slug, path31, now) {
+  confirm(slug, path33, now) {
     const all = this.read();
-    all[slug] = { path: path31, confirmedAt: now };
+    all[slug] = { path: path33, confirmedAt: now };
     (0, import_node_fs7.writeFileSync)(this.file, JSON.stringify(all, null, 2));
   }
   /**
@@ -57775,20 +57781,177 @@ function checkoutStateData(projectSlug, entry, machineLabel) {
   };
 }
 
-// src/operator-token.ts
+// src/local-checkout.ts
+var import_node_child_process14 = require("node:child_process");
 var import_node_fs9 = require("node:fs");
-var import_node_os8 = __toESM(require("node:os"), 1);
+var import_node_os8 = require("node:os");
 var import_node_path16 = __toESM(require("node:path"), 1);
+var SYSTEM_PATH_PREFIXES = ["/etc", "/usr", "/bin", "/sbin", "/var", "/System", "/Library", "/opt", "/private"];
+function isUnder(child, parent) {
+  return child === parent || child.startsWith(parent.endsWith(import_node_path16.default.sep) ? parent : `${parent}${import_node_path16.default.sep}`);
+}
+function checkLocalPathRules(input, options = {}) {
+  const trimmed = input.trim();
+  if (!import_node_path16.default.isAbsolute(trimmed)) return { ok: false, code: "not_absolute", detail: `Path must be absolute, got: ${trimmed}` };
+  let realPath;
+  try {
+    realPath = (import_node_fs9.realpathSync.native ?? import_node_fs9.realpathSync)(trimmed);
+  } catch {
+    return { ok: false, code: "not_found", detail: `Path does not exist or is not accessible: ${trimmed}` };
+  }
+  const systemPrefixes = options.systemPrefixes ?? SYSTEM_PATH_PREFIXES;
+  const home = options.homeDir ?? (0, import_node_os8.homedir)();
+  let realHome = home;
+  try {
+    realHome = (import_node_fs9.realpathSync.native ?? import_node_fs9.realpathSync)(home);
+  } catch {
+  }
+  if (realPath === import_node_path16.default.parse(realPath).root || realPath === realHome) {
+    return { ok: false, code: "forbidden_path", detail: `Refusing the home directory or a filesystem root: ${realPath}` };
+  }
+  const prefix = systemPrefixes.find((candidate) => isUnder(realPath, candidate));
+  if (prefix) {
+    return { ok: false, code: "forbidden_path", detail: `Refusing a path under the system prefix ${prefix}: ${realPath}` };
+  }
+  const uid = options.uid ?? (typeof process.getuid === "function" ? process.getuid() : void 0);
+  let fd;
+  try {
+    fd = (0, import_node_fs9.openSync)(realPath, import_node_fs9.constants.O_RDONLY | (import_node_fs9.constants.O_DIRECTORY ?? 0) | (import_node_fs9.constants.O_NOFOLLOW ?? 0));
+    const stat3 = (0, import_node_fs9.fstatSync)(fd);
+    if (!stat3.isDirectory()) return { ok: false, code: "not_a_directory", detail: `Not a directory: ${realPath}` };
+    if (uid !== void 0 && stat3.uid !== uid) {
+      return { ok: false, code: "not_owned", detail: `Directory is not owned by the bridge's user: ${realPath}` };
+    }
+  } catch (error51) {
+    const code = error51.code;
+    if (code === "ENOTDIR") return { ok: false, code: "not_a_directory", detail: `Not a directory: ${realPath}` };
+    return { ok: false, code: "path_changed", detail: `Could not open ${realPath} without following links (${code ?? "error"})` };
+  } finally {
+    if (fd !== void 0) (0, import_node_fs9.closeSync)(fd);
+  }
+  return { ok: true, realPath };
+}
+function gitTopLevel(realPath) {
+  try {
+    return (0, import_node_child_process14.execFileSync)("git", ["-C", realPath, "rev-parse", "--show-toplevel"], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: 15e3,
+      env: { ...process.env, GIT_TERMINAL_PROMPT: "0" }
+    }).trim();
+  } catch {
+    return null;
+  }
+}
+function validateLocalCheckoutPath(input, options = {}) {
+  const checked = checkLocalPathRules(input, options);
+  if (!checked.ok) return checked;
+  const top = gitTopLevel(checked.realPath);
+  if (!top) return { ok: false, code: "not_a_git_repo", detail: `Path is not inside a git repository: ${checked.realPath}` };
+  const realTop = (import_node_fs9.realpathSync.native ?? import_node_fs9.realpathSync)(top);
+  if (realTop !== checked.realPath) {
+    return {
+      ok: false,
+      code: "not_a_git_repo",
+      detail: `Path is inside the git repository at ${realTop}, not its top level; register ${realTop} instead.`
+    };
+  }
+  return checked;
+}
+function registerLocalOnlyCheckout(registry3, input, machineLabel, options = {}, now = (/* @__PURE__ */ new Date()).toISOString()) {
+  const codeHost = input.project.codeHost ?? null;
+  const eligible = codeHost === "local" || codeHost === null && !input.project.githubRepo;
+  if (!eligible) {
+    return {
+      ok: false,
+      code: "not_local_project",
+      detail: `Project ${input.projectSlug} keeps its code on ${codeHost ?? "GitHub"}; register its clone with \`repo\` instead.`
+    };
+  }
+  const validated = validateLocalCheckoutPath(input.path, options);
+  if (!validated.ok) return validated;
+  registry3.confirm(input.projectSlug, validated.realPath, now);
+  return { ok: true, data: { projectSlug: input.projectSlug, path: validated.realPath, confirmedAt: now, machineLabel } };
+}
+var DEFAULT_GITIGNORE = ["node_modules/", "dist/", "build/", ".DS_Store", ".env", ".env.*", "*.log", ""].join("\n");
+function runGit(realPath, args) {
+  return (0, import_node_child_process14.execFileSync)("git", ["-C", realPath, ...args], {
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "pipe"],
+    timeout: 6e4,
+    env: { ...process.env, GIT_TERMINAL_PROMPT: "0" }
+  }).trim();
+}
+function initLocalRepo(registry3, input, machineLabel, options = {}, now = (/* @__PURE__ */ new Date()).toISOString()) {
+  if (input.operatorConsent !== true) {
+    return {
+      ok: false,
+      code: "consent_required",
+      detail: "Ask the operator in chat, in plain words, whether their project folder may be turned into a git repository, and call this again only after they say yes."
+    };
+  }
+  const codeHost = input.project.codeHost ?? null;
+  if (!(codeHost === "local" || codeHost === null && !input.project.githubRepo)) {
+    return { ok: false, code: "not_local_project", detail: `Project ${input.projectSlug} keeps its code on ${codeHost ?? "GitHub"}.` };
+  }
+  const checked = checkLocalPathRules(input.path, options);
+  if (!checked.ok) return checked;
+  if (gitTopLevel(checked.realPath) !== null) {
+    return {
+      ok: false,
+      code: "inside_git_repo",
+      detail: `${checked.realPath} is already inside a git repository; register that repository with register_local_checkout instead.`
+    };
+  }
+  const recheck = checkLocalPathRules(checked.realPath, options);
+  if (!recheck.ok || recheck.realPath !== checked.realPath) {
+    return { ok: false, code: "path_changed", detail: `${checked.realPath} changed while it was being checked; nothing was done.` };
+  }
+  const realPath = recheck.realPath;
+  let wroteGitignore = false;
+  try {
+    runGit(realPath, ["init", "-q", "-b", "main"]);
+    const gitignore = import_node_path16.default.join(realPath, ".gitignore");
+    try {
+      (0, import_node_fs9.writeFileSync)(gitignore, DEFAULT_GITIGNORE, { flag: "wx" });
+      wroteGitignore = true;
+    } catch {
+    }
+    runGit(realPath, ["add", "-A"]);
+    runGit(realPath, [
+      "-c",
+      "user.name=Mrrlin",
+      "-c",
+      "user.email=bridge@mrrlin.local",
+      "commit",
+      "-q",
+      "--no-verify",
+      "--allow-empty",
+      "-m",
+      "Initial commit (Mrrlin)"
+    ]);
+  } catch (error51) {
+    return { ok: false, code: "init_failed", detail: error51 instanceof Error ? error51.message : String(error51) };
+  }
+  const initialCommit = runGit(realPath, ["rev-parse", "HEAD"]);
+  registry3.confirm(input.projectSlug, realPath, now);
+  return { ok: true, data: { projectSlug: input.projectSlug, path: realPath, confirmedAt: now, machineLabel, initialCommit, wroteGitignore } };
+}
+
+// src/operator-token.ts
+var import_node_fs10 = require("node:fs");
+var import_node_os9 = __toESM(require("node:os"), 1);
+var import_node_path17 = __toESM(require("node:path"), 1);
 function operatorDir() {
-  const base = process.env.CODEX_HOME ? import_node_path16.default.join(process.env.CODEX_HOME, "mrrlin") : import_node_path16.default.join(import_node_os8.default.homedir(), ".mrrlin");
+  const base = process.env.CODEX_HOME ? import_node_path17.default.join(process.env.CODEX_HOME, "mrrlin") : import_node_path17.default.join(import_node_os9.default.homedir(), ".mrrlin");
   return base;
 }
 function operatorTokenPath() {
-  return import_node_path16.default.join(operatorDir(), "operator-token");
+  return import_node_path17.default.join(operatorDir(), "operator-token");
 }
 function readOperatorToken() {
   try {
-    const token = (0, import_node_fs9.readFileSync)(operatorTokenPath(), "utf8").trim();
+    const token = (0, import_node_fs10.readFileSync)(operatorTokenPath(), "utf8").trim();
     return token.length > 0 ? token : null;
   } catch {
     return null;
@@ -57796,24 +57959,24 @@ function readOperatorToken() {
 }
 function persistOperatorToken(token) {
   const dir = operatorDir();
-  (0, import_node_fs9.mkdirSync)(dir, { recursive: true, mode: 448 });
-  (0, import_node_fs9.writeFileSync)(operatorTokenPath(), `${token.trim()}
+  (0, import_node_fs10.mkdirSync)(dir, { recursive: true, mode: 448 });
+  (0, import_node_fs10.writeFileSync)(operatorTokenPath(), `${token.trim()}
 `, { encoding: "utf8", mode: 384 });
 }
 function agentCredentialPath() {
-  return import_node_path16.default.join(operatorDir(), "agent-credential");
+  return import_node_path17.default.join(operatorDir(), "agent-credential");
 }
 function persistAgentSecret(secret) {
   const dir = operatorDir();
-  (0, import_node_fs9.mkdirSync)(dir, { recursive: true, mode: 448 });
-  (0, import_node_fs9.writeFileSync)(agentCredentialPath(), `${secret.trim()}
+  (0, import_node_fs10.mkdirSync)(dir, { recursive: true, mode: 448 });
+  (0, import_node_fs10.writeFileSync)(agentCredentialPath(), `${secret.trim()}
 `, { encoding: "utf8", mode: 384 });
 }
 function readAgentSecret() {
   const fromEnv = process.env.MRRLIN_AGENT_SECRET?.trim();
   if (fromEnv) return fromEnv;
   try {
-    const raw = (0, import_node_fs9.readFileSync)(agentCredentialPath(), "utf8").trim();
+    const raw = (0, import_node_fs10.readFileSync)(agentCredentialPath(), "utf8").trim();
     return raw || void 0;
   } catch {
     return void 0;
@@ -57822,9 +57985,9 @@ function readAgentSecret() {
 
 // src/worker-token.ts
 var import_node_crypto10 = require("node:crypto");
-var import_node_fs10 = require("node:fs");
-var import_node_os9 = __toESM(require("node:os"), 1);
-var import_node_path17 = __toESM(require("node:path"), 1);
+var import_node_fs11 = require("node:fs");
+var import_node_os10 = __toESM(require("node:os"), 1);
+var import_node_path18 = __toESM(require("node:path"), 1);
 var DEFAULT_WORKER_PORT = 8792;
 function workerPort() {
   const raw = process.env.MRRLIN_WORKER_PORT;
@@ -57833,15 +57996,15 @@ function workerPort() {
   return Number.isFinite(parsed) && parsed > 0 ? parsed : DEFAULT_WORKER_PORT;
 }
 function workerDir() {
-  const base = process.env.CODEX_HOME ? import_node_path17.default.join(process.env.CODEX_HOME, "mrrlin") : import_node_path17.default.join(import_node_os9.default.homedir(), ".mrrlin");
-  return import_node_path17.default.join(base, "worker");
+  const base = process.env.CODEX_HOME ? import_node_path18.default.join(process.env.CODEX_HOME, "mrrlin") : import_node_path18.default.join(import_node_os10.default.homedir(), ".mrrlin");
+  return import_node_path18.default.join(base, "worker");
 }
 function workerTokenPath() {
-  return import_node_path17.default.join(workerDir(), "token");
+  return import_node_path18.default.join(workerDir(), "token");
 }
 function readWorkerToken() {
   try {
-    const token = (0, import_node_fs10.readFileSync)(workerTokenPath(), "utf8").trim();
+    const token = (0, import_node_fs11.readFileSync)(workerTokenPath(), "utf8").trim();
     return token.length > 0 ? token : null;
   } catch {
     return null;
@@ -57851,9 +58014,9 @@ function readOrCreateWorkerToken() {
   const existing = readWorkerToken();
   if (existing) return existing;
   const dir = workerDir();
-  (0, import_node_fs10.mkdirSync)(dir, { recursive: true, mode: 448 });
+  (0, import_node_fs11.mkdirSync)(dir, { recursive: true, mode: 448 });
   const token = (0, import_node_crypto10.randomBytes)(32).toString("hex");
-  (0, import_node_fs10.writeFileSync)(workerTokenPath(), `${token}
+  (0, import_node_fs11.writeFileSync)(workerTokenPath(), `${token}
 `, { encoding: "utf8", mode: 384 });
   return token;
 }
@@ -57922,6 +58085,8 @@ var mcpToolNames = {
   recordProducedUrl: "record_produced_url",
   updateTaskState: "update_task_state",
   registerLocalCheckout: "register_local_checkout",
+  initLocalRepo: "init_local_repo",
+  setProjectCodeHost: "set_project_code_host",
   /** Compact-context retrieval: rehydrate a mrrlin:// handle into the canonical full record. */
   retrieveContext: "retrieve_context"
 };
@@ -58625,8 +58790,17 @@ var createInboxItemInputSchema = projectScopedSchema.merge(mrrlinInboxItemCreate
 var decideInboxItemInputSchema = projectScopedSchema.extend({ itemId: mrrlinInboxItemIdSchema }).merge(mrrlinInboxItemDecideSchema);
 var resolveHandoffInputSchema = projectScopedSchema.extend({ runId: mrrlinExecutionRunIdSchema }).merge(mrrlinResolveHandoffSchema);
 var registerLocalCheckoutInputSchema = projectScopedSchema.extend({
-  path: external_exports.string().min(1).describe("Absolute path to the local git checkout (must be a git repo whose origin matches `repo`)."),
-  repo: external_exports.string().min(1).describe("The project's bound GitHub repo full name in `owner/repo` form.")
+  path: external_exports.string().min(1).describe("Absolute path to the local git checkout (must be a git repo whose origin matches `repo`, or, with no `repo`, the top of a git repo)."),
+  repo: external_exports.string().min(1).optional().describe(
+    "The project's bound GitHub repo full name in `owner/repo` form. Omit it for a project with no GitHub (its code lives only on this computer): the folder then only has to be a git repository the operator owns."
+  )
+});
+var initLocalRepoInputSchema = projectScopedSchema.extend({
+  path: external_exports.string().min(1).describe("Absolute path to the operator's project folder (not inside any git repository)."),
+  operatorConsent: external_exports.literal(true).describe("true only after the operator explicitly agreed in chat that this folder may become a git repository.")
+});
+var setProjectCodeHostInputSchema = projectScopedSchema.extend({
+  codeHost: mrrlinProjectCodeHostSchema.nullable().describe("local = keep code only on this computer; github / gitlab = the operator wants to push there (connect it next); null = not decided.")
 });
 var retrieveContextInputSchema = external_exports.object({
   handle: external_exports.string().min(1).describe(
@@ -58699,6 +58873,8 @@ var mcpToolInputSchemas = {
   [mcpToolNames.recordProducedUrl]: recordProducedUrlInputSchema,
   [mcpToolNames.updateTaskState]: updateTaskStateInputSchema,
   [mcpToolNames.registerLocalCheckout]: registerLocalCheckoutInputSchema,
+  [mcpToolNames.initLocalRepo]: initLocalRepoInputSchema,
+  [mcpToolNames.setProjectCodeHost]: setProjectCodeHostInputSchema,
   [mcpToolNames.retrieveContext]: retrieveContextInputSchema
 };
 var mcpToolOperationIds = {
@@ -58821,7 +58997,9 @@ var mcpToolDescriptions = {
   [mcpToolNames.restartExecutionRun]: "Restart a parked execution run (handoff_requested or handoff_queued) back to pending so the queue can resume it.",
   [mcpToolNames.stopExecutionRun]: "Operator stop: park an in-flight execution run at handoff_requested with blockingReason operator_stopped. Parks rather than cancels, so restart_execution_run can resume it later. Refuses (409) a run already at a terminal status.",
   [mcpToolNames.resolveHandoff]: "Resolve a tool_assisted handoff for an execution run (outcome success|failure). Success returns the task to the board; failure opens a new handoff cycle. Idempotent.",
-  [mcpToolNames.registerLocalCheckout]: "Register the operator-local git checkout path for `projectSlug` so execution-run workers run code on this machine instead of the cloud. Validates the path is a git repo whose `origin` remote matches `repo`, then writes the (slug -> absolute path) entry to the operator-local checkout registry. Call this after locating the checkout on disk (e.g. via filesystem search) and confirming the choice with the user in chat \u2014 they should NOT have to paste the path into Settings. Returns `{ projectSlug, path, confirmedAt }`. Idempotent: re-registering overwrites the prior entry.",
+  [mcpToolNames.registerLocalCheckout]: "Register the operator-local git checkout path for `projectSlug` so execution-run workers run code on this machine instead of the cloud. Validates the path is a git repo whose `origin` remote matches `repo`, then writes the (slug -> absolute path) entry to the operator-local checkout registry. For a project with no GitHub (code kept only on this computer), omit `repo`: the path must then be the top of a git repository owned by the operator, not the home folder or a system folder. Call this after locating the checkout on disk (e.g. via filesystem search) and confirming the choice with the user in chat \u2014 they should NOT have to paste the path into Settings. Returns `{ projectSlug, path, confirmedAt }`. Idempotent: re-registering overwrites the prior entry.",
+  [mcpToolNames.initLocalRepo]: "For a project with no GitHub whose folder is not a git repository yet: run `git init` and one initial commit in the operator's own folder, then register it. Call ONLY after asking the operator in chat, in plain words, and getting an explicit yes; pass operatorConsent: true. Refuses a folder already inside a git repository, the home folder, a filesystem root or a system folder. Adds a default .gitignore (node_modules, build output, .env files) only when the folder has none.",
+  [mcpToolNames.setProjectCodeHost]: "Record where this project's code lives, after the operator answered the code-host question: local (keep it on this computer), github or gitlab (they want to push there; connect it next). Does not move any code.",
   [mcpToolNames.retrieveContext]: "Rehydrate a mrrlin:// handle emitted by the compact-context layer into the full canonical Mrrlin record (task/wiki page/project snapshot/execution run/artifacts). Use whenever you need the full source \u2014 irreversible decisions (closing tasks, dispatching deploys, writing specs) MUST call this first; never act on a compact envelope alone. Returns `{ kind, data }`. Invalid or unsupported handle \u2192 structured `HANDLE_INVALID` error."
 };
 var ARTIFACT_EXTENSION_TYPES = {
@@ -59793,7 +59971,7 @@ function createMrrlinTools(options) {
       "Unable to upload artifact file.",
       async (c, { projectSlug, path: filePath, class: artifactClass, taskId, runId, description }) => {
         await checkTenantBoundary(projectSlug, "artifact upload");
-        const extension2 = import_node_path18.default.extname(filePath).toLowerCase();
+        const extension2 = import_node_path19.default.extname(filePath).toLowerCase();
         const contentType2 = ARTIFACT_EXTENSION_TYPES[extension2];
         if (!contentType2) {
           throw new McpToolCodedError(
@@ -59821,7 +59999,7 @@ function createMrrlinTools(options) {
             "Artifact exceeds 5MB; split or summarize instead."
           );
         }
-        const filename = import_node_path18.default.basename(filePath);
+        const filename = import_node_path19.default.basename(filePath);
         return deliverBuiltIn(
           c,
           projectSlug,
@@ -59844,7 +60022,7 @@ function createMrrlinTools(options) {
             `Invalid filename '${filename}'; provide a bare filename with no path separators or '..'.`
           );
         }
-        const extension2 = import_node_path18.default.extname(filename).toLowerCase();
+        const extension2 = import_node_path19.default.extname(filename).toLowerCase();
         const contentType2 = ARTIFACT_EXTENSION_TYPES[extension2];
         if (!contentType2) {
           throw new McpToolCodedError(
@@ -59929,10 +60107,37 @@ function createMrrlinTools(options) {
       mcpToolNames.registerLocalCheckout,
       "LOCAL_CHECKOUT_REGISTER_FAILED",
       "Unable to register local checkout.",
-      async (_c, { projectSlug, path: checkoutPath, repo }) => {
+      async (c, { projectSlug, path: checkoutPath, repo }) => {
         await checkTenantBoundary(projectSlug, "local checkout");
         const registry3 = new CheckoutRegistry(resolveStateDir());
-        const result = registerCheckout(registry3, { projectSlug, path: checkoutPath, repo }, import_node_os10.default.hostname());
+        if (!repo) {
+          const snapshot = await c.getProjectSnapshot(projectSlug);
+          const local = registerLocalOnlyCheckout(
+            registry3,
+            {
+              projectSlug,
+              path: checkoutPath,
+              project: { codeHost: snapshot.project.codeHost ?? null, githubRepo: snapshot.github?.repo ?? null }
+            },
+            import_node_os11.default.hostname()
+          );
+          if (!local.ok) {
+            const localCodeMap = {
+              not_absolute: "LOCAL_CHECKOUT_PATH_NOT_ABSOLUTE",
+              not_found: "LOCAL_CHECKOUT_PATH_NOT_FOUND",
+              not_a_directory: "LOCAL_CHECKOUT_PATH_NOT_FOUND",
+              not_owned: "LOCAL_CHECKOUT_PATH_FORBIDDEN",
+              forbidden_path: "LOCAL_CHECKOUT_PATH_FORBIDDEN",
+              path_changed: "LOCAL_CHECKOUT_PATH_FORBIDDEN",
+              not_a_git_repo: "LOCAL_CHECKOUT_NOT_A_GIT_REPO",
+              inside_git_repo: "LOCAL_CHECKOUT_NOT_A_GIT_REPO",
+              not_local_project: "LOCAL_CHECKOUT_REPO_REQUIRED"
+            };
+            throw new McpToolCodedError(localCodeMap[local.code], local.detail);
+          }
+          return local.data;
+        }
+        const result = registerCheckout(registry3, { projectSlug, path: checkoutPath, repo }, import_node_os11.default.hostname());
         if (!result.ok) {
           const codeMap = {
             not_absolute: "LOCAL_CHECKOUT_PATH_NOT_ABSOLUTE",
@@ -59945,6 +60150,53 @@ function createMrrlinTools(options) {
         return result.data;
       }
     ),
+    [mcpToolNames.initLocalRepo]: makeTool(
+      client,
+      mcpToolNames.initLocalRepo,
+      "LOCAL_REPO_INIT_FAILED",
+      "Unable to initialise the local repository.",
+      async (c, { projectSlug, path: folder, operatorConsent }) => {
+        await checkTenantBoundary(projectSlug, "local repository");
+        const snapshot = await c.getProjectSnapshot(projectSlug);
+        const result = initLocalRepo(
+          new CheckoutRegistry(resolveStateDir()),
+          {
+            projectSlug,
+            path: folder,
+            operatorConsent,
+            project: { codeHost: snapshot.project.codeHost ?? null, githubRepo: snapshot.github?.repo ?? null }
+          },
+          import_node_os11.default.hostname()
+        );
+        if (!result.ok) {
+          const codeMap = {
+            not_absolute: "LOCAL_CHECKOUT_PATH_NOT_ABSOLUTE",
+            not_found: "LOCAL_CHECKOUT_PATH_NOT_FOUND",
+            not_a_directory: "LOCAL_CHECKOUT_PATH_NOT_FOUND",
+            not_owned: "LOCAL_CHECKOUT_PATH_FORBIDDEN",
+            forbidden_path: "LOCAL_CHECKOUT_PATH_FORBIDDEN",
+            path_changed: "LOCAL_CHECKOUT_PATH_FORBIDDEN",
+            not_a_git_repo: "LOCAL_CHECKOUT_NOT_A_GIT_REPO",
+            inside_git_repo: "LOCAL_REPO_ALREADY_EXISTS",
+            not_local_project: "LOCAL_CHECKOUT_REPO_REQUIRED",
+            consent_required: "LOCAL_REPO_CONSENT_REQUIRED",
+            init_failed: "LOCAL_REPO_INIT_FAILED"
+          };
+          throw new McpToolCodedError(codeMap[result.code], result.detail);
+        }
+        return result.data;
+      }
+    ),
+    [mcpToolNames.setProjectCodeHost]: makeTool(
+      client,
+      mcpToolNames.setProjectCodeHost,
+      "PROJECT_CODE_HOST_FAILED",
+      "Unable to record where the project's code lives.",
+      async (c, { projectSlug, codeHost }) => {
+        await checkTenantBoundary(projectSlug, "project code host");
+        return await c.renameProject(projectSlug, { codeHost });
+      }
+    ),
     [mcpToolNames.retrieveContext]: makeTool(
       client,
       mcpToolNames.retrieveContext,
@@ -60033,20 +60285,20 @@ function allAgyGrantStrings() {
 }
 function resolveAgyConfigPath(options) {
   if (options.agyConfigPath) return options.agyConfigPath;
-  return import_node_path19.default.join(options.homeDir ?? import_node_os11.default.homedir(), ".gemini", "config", "mcp_config.json");
+  return import_node_path20.default.join(options.homeDir ?? import_node_os12.default.homedir(), ".gemini", "config", "mcp_config.json");
 }
 function resolveConfigJsonPath(options) {
   if (options.configJsonPath) return options.configJsonPath;
-  return import_node_path19.default.join(options.homeDir ?? import_node_os11.default.homedir(), ".gemini", "config", "config.json");
+  return import_node_path20.default.join(options.homeDir ?? import_node_os12.default.homedir(), ".gemini", "config", "config.json");
 }
 async function detectInstallDistribution3(options) {
   if (options.distribution && options.distribution !== "auto") return options.distribution;
-  let current2 = import_node_path19.default.dirname(options.binPath);
+  let current2 = import_node_path20.default.dirname(options.binPath);
   while (true) {
-    if (await pathExists4(import_node_path19.default.join(current2, "pnpm-workspace.yaml"))) {
+    if (await pathExists4(import_node_path20.default.join(current2, "pnpm-workspace.yaml"))) {
       return "local";
     }
-    const parent = import_node_path19.default.dirname(current2);
+    const parent = import_node_path20.default.dirname(current2);
     if (parent === current2) break;
     current2 = parent;
   }
@@ -60068,7 +60320,7 @@ function browserTable3(binPath, distribution, homeDir) {
   return { ...base, env: { PLAYWRIGHT_BROWSERS_PATH: browserPaths(homeDir).browsersPath } };
 }
 function managedEntries2(options, distribution) {
-  const homeDir = options.homeDir ?? import_node_os11.default.homedir();
+  const homeDir = options.homeDir ?? import_node_os12.default.homedir();
   return [
     { id: "mrrlin", expected: mrrlinTable3(options.binPath, distribution, options.serveEnv) },
     { id: "mrrlin-browser", expected: browserTable3(options.binPath, distribution, homeDir) },
@@ -60088,8 +60340,8 @@ async function installAgy(options) {
   const configJsonPath = resolveConfigJsonPath(options);
   const distribution = await detectInstallDistribution3(options);
   const entries = managedEntries2(options, distribution);
-  await import_promises9.default.mkdir(import_node_path19.default.dirname(configPath), { recursive: true });
-  await import_promises9.default.mkdir(import_node_path19.default.dirname(configJsonPath), { recursive: true });
+  await import_promises9.default.mkdir(import_node_path20.default.dirname(configPath), { recursive: true });
+  await import_promises9.default.mkdir(import_node_path20.default.dirname(configJsonPath), { recursive: true });
   let action = "noop";
   const preservedEnvBlocks = [];
   if (!await pathExists4(configPath)) {
@@ -60205,14 +60457,14 @@ async function installAgy(options) {
 
 // src/provider-readiness.ts
 var import_promises10 = require("node:fs/promises");
-var import_node_fs11 = require("node:fs");
-var import_node_os12 = __toESM(require("node:os"), 1);
-var import_node_path20 = __toESM(require("node:path"), 1);
+var import_node_fs12 = require("node:fs");
+var import_node_os13 = __toESM(require("node:os"), 1);
+var import_node_path21 = __toESM(require("node:path"), 1);
 var import_semver2 = __toESM(require_semver2(), 1);
 var toml3 = __toESM(require_toml(), 1);
 
 // src/agent-version.ts
-var import_node_child_process14 = require("node:child_process");
+var import_node_child_process15 = require("node:child_process");
 var import_semver = __toESM(require_semver2(), 1);
 var SEMVER_RE = /\b\d+\.\d+\.\d+(?:-[A-Za-z0-9.-]+)?\b/;
 var CODEX_PACKAGE = process.env.MRRLIN_CODEX_PACKAGE?.trim() || "@openai/codex";
@@ -60222,7 +60474,7 @@ function parseCodexVersion(raw) {
   return m ? m[0] : null;
 }
 var defaultRun = (args) => {
-  const r = (0, import_node_child_process14.spawnSync)("codex", args, { encoding: "utf8", timeout: 8e3, shell: true });
+  const r = (0, import_node_child_process15.spawnSync)("codex", args, { encoding: "utf8", timeout: 8e3, shell: true });
   return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
 };
 function getInstalledAgentVersion(provider, run3) {
@@ -60298,13 +60550,13 @@ function startCodexProbe(deps = {}) {
 // src/provider-readiness.ts
 function resolveCodexHome2(opts) {
   if (opts.codexHome) return opts.codexHome;
-  if (opts.homeDir) return import_node_path20.default.join(opts.homeDir, ".codex");
+  if (opts.homeDir) return import_node_path21.default.join(opts.homeDir, ".codex");
   if (process.env.CODEX_HOME) return process.env.CODEX_HOME;
-  return import_node_path20.default.join(import_node_os12.default.homedir(), ".codex");
+  return import_node_path21.default.join(import_node_os13.default.homedir(), ".codex");
 }
 function resolveClaudeConfigPath2(opts) {
   if (opts.claudeConfigPath) return opts.claudeConfigPath;
-  return import_node_path20.default.join(opts.homeDir ?? import_node_os12.default.homedir(), ".claude.json");
+  return import_node_path21.default.join(opts.homeDir ?? import_node_os13.default.homedir(), ".claude.json");
 }
 function isExternalAgentsWrapper(table) {
   if (!table) return false;
@@ -60373,9 +60625,9 @@ async function verifyProviderReadiness(provider, run3, opts = {}) {
     if (!checks.version) details.push(`version: ${version2 ?? "unparseable"} is below the required 2.1.232`);
   }
   if (provider === "codex") {
-    const authPath = import_node_path20.default.join(resolveCodexHome2(opts), "auth.json");
+    const authPath = import_node_path21.default.join(resolveCodexHome2(opts), "auth.json");
     try {
-      await (0, import_promises10.access)(authPath, import_node_fs11.constants.F_OK);
+      await (0, import_promises10.access)(authPath, import_node_fs12.constants.F_OK);
       checks.auth = true;
     } catch {
       details.push(`auth: ${authPath} not found`);
@@ -60390,7 +60642,7 @@ async function verifyProviderReadiness(provider, run3, opts = {}) {
     if (!checks.auth) details.push("auth: `claude auth status` failed");
   }
   if (provider === "codex") {
-    const configPath = import_node_path20.default.join(resolveCodexHome2(opts), "config.toml");
+    const configPath = import_node_path21.default.join(resolveCodexHome2(opts), "config.toml");
     try {
       const raw = await (0, import_promises10.readFile)(configPath, "utf8");
       const parsed = toml3.parse(raw);
@@ -60441,9 +60693,9 @@ async function verifyProviderReadiness(provider, run3, opts = {}) {
 }
 
 // src/browser-interceptor.ts
-var import_node_os13 = __toESM(require("node:os"), 1);
+var import_node_os14 = __toESM(require("node:os"), 1);
 var import_node_readline = __toESM(require("node:readline"), 1);
-var import_node_child_process15 = require("node:child_process");
+var import_node_child_process16 = require("node:child_process");
 var INTERNAL_HOST_PATTERNS = [
   /^(?:.*\.)?mrrlin\.(?:com|internal|local)$/i,
   /^(?:localhost|127\.0\.0\.1)(?::\d+)?$/i
@@ -60615,7 +60867,7 @@ function wireBrowserServeProxy(streams) {
 }
 function signalToExitCode(signal) {
   if (!signal) return 1;
-  const sigNum = import_node_os13.default.constants.signals[signal];
+  const sigNum = import_node_os14.default.constants.signals[signal];
   if (typeof sigNum === "number") {
     return 128 + sigNum;
   }
@@ -60624,7 +60876,7 @@ function signalToExitCode(signal) {
 async function runBrowserServeProxy(opts) {
   const input = opts.input ?? process.stdin;
   const output3 = opts.output ?? process.stdout;
-  const child = (0, import_node_child_process15.spawn)(opts.command, opts.args, {
+  const child = (0, import_node_child_process16.spawn)(opts.command, opts.args, {
     stdio: ["pipe", "pipe", "inherit"],
     env: { ...process.env, ...opts.env }
   });
@@ -60671,12 +60923,12 @@ async function runBrowserServeProxy(opts) {
 }
 
 // src/director-bridge.ts
-var import_node_fs25 = __toESM(require("node:fs"), 1);
+var import_node_fs27 = __toESM(require("node:fs"), 1);
 var import_node_http3 = __toESM(require("node:http"), 1);
-var import_node_os20 = __toESM(require("node:os"), 1);
-var import_node_path40 = __toESM(require("node:path"), 1);
-var import_node_child_process23 = require("node:child_process");
-var import_node_crypto20 = __toESM(require("node:crypto"), 1);
+var import_node_os21 = __toESM(require("node:os"), 1);
+var import_node_path42 = __toESM(require("node:path"), 1);
+var import_node_child_process25 = require("node:child_process");
+var import_node_crypto21 = __toESM(require("node:crypto"), 1);
 
 // src/turn-replay-buffer.ts
 var DEFAULT_MAX_EVENTS = 2e3;
@@ -61220,17 +61472,17 @@ function createTurnLock() {
 }
 
 // src/self-update.ts
-var import_node_child_process17 = require("node:child_process");
+var import_node_child_process18 = require("node:child_process");
 var import_node_crypto12 = require("node:crypto");
-var import_node_fs13 = require("node:fs");
-var import_node_path22 = __toESM(require("node:path"), 1);
+var import_node_fs14 = require("node:fs");
+var import_node_path23 = __toESM(require("node:path"), 1);
 var import_semver3 = __toESM(require_semver2(), 1);
 
 // src/codex-auth-preflight.ts
-var import_node_child_process16 = require("node:child_process");
-var import_node_fs12 = require("node:fs");
-var import_node_os14 = __toESM(require("node:os"), 1);
-var import_node_path21 = __toESM(require("node:path"), 1);
+var import_node_child_process17 = require("node:child_process");
+var import_node_fs13 = require("node:fs");
+var import_node_os15 = __toESM(require("node:os"), 1);
+var import_node_path22 = __toESM(require("node:path"), 1);
 var DEFAULT_CODEX_AUTH_MIN_TTL_SECONDS = 15 * 60;
 var DEFAULT_CODEX_AUTH_SMOKE_TIMEOUT_MS = 2e4;
 var DEFAULT_CODEX_AUTH_SMOKE_MODEL = "gpt-5.4-mini";
@@ -61249,7 +61501,7 @@ function codexAuthSmokeTimeoutMs(env = process.env) {
 function resolveCodexAuthPath(opts = {}) {
   const env = opts.env ?? process.env;
   const codexHome = env.CODEX_HOME?.trim();
-  return import_node_path21.default.join(codexHome || import_node_path21.default.join(opts.homeDir ?? import_node_os14.default.homedir(), ".codex"), "auth.json");
+  return import_node_path22.default.join(codexHome || import_node_path22.default.join(opts.homeDir ?? import_node_os15.default.homedir(), ".codex"), "auth.json");
 }
 function decodeJwtExpMs(token) {
   const parts = token.split(".");
@@ -61310,7 +61562,7 @@ function runCodexAuthRefreshSmokeForBridgeUpdate(opts = {}) {
   const configuredExecutable = opts.codexExecutable ?? env.MRRLIN_DIRECTOR_BRIDGE_CODEX_BIN?.trim();
   const executable = configuredExecutable || "codex";
   const timeoutMs = opts.timeoutMs ?? codexAuthSmokeTimeoutMs(env);
-  const cwd = opts.cwd ?? import_node_os14.default.tmpdir();
+  const cwd = opts.cwd ?? import_node_os15.default.tmpdir();
   const args = [
     "exec",
     "--sandbox",
@@ -61321,9 +61573,9 @@ function runCodexAuthRefreshSmokeForBridgeUpdate(opts = {}) {
     CODEX_AUTH_SMOKE_PROMPT
   ];
   const command = commandForSmoke(executable, model);
-  const execFileSync5 = opts.execFileSyncImpl ?? import_node_child_process16.execFileSync;
+  const execFileSync7 = opts.execFileSyncImpl ?? import_node_child_process17.execFileSync;
   try {
-    execFileSync5(executable, args, {
+    execFileSync7(executable, args, {
       cwd,
       env,
       encoding: "utf8",
@@ -61370,7 +61622,7 @@ function inspectCodexAuthForBridgeUpdate(opts = {}) {
   const nowMs = opts.nowMs ?? Date.now();
   const minTtlSeconds = opts.minTtlSeconds ?? codexAuthMinTtlSeconds(env);
   const authPath = resolveCodexAuthPath({ env, homeDir: opts.homeDir });
-  const readFile9 = opts.readFileSyncImpl ?? ((p, encoding) => (0, import_node_fs12.readFileSync)(p, encoding));
+  const readFile9 = opts.readFileSyncImpl ?? ((p, encoding) => (0, import_node_fs13.readFileSync)(p, encoding));
   let raw;
   try {
     raw = readFile9(authPath, "utf8");
@@ -61484,26 +61736,26 @@ function inspectCodexAuthForBridgeUpdate(opts = {}) {
 var BIN_NAME = "mrrlin-mcp";
 var SELF_UPDATE_AUTH_PREFLIGHT_OFFER_PREFIX = "[bridge:update:auth-preflight]";
 function resolveBinPath(opts) {
-  if (opts.argv1 && import_node_path22.default.basename(opts.argv1).includes("mrrlin")) {
+  if (opts.argv1 && import_node_path23.default.basename(opts.argv1).includes("mrrlin")) {
     return { path: opts.argv1, source: "argv" };
   }
   const whichSync = opts.whichSync ?? ((name) => {
     try {
-      return (0, import_node_child_process17.execFileSync)("which", [name], { encoding: "utf8", timeout: 3e3 }).trim() || null;
+      return (0, import_node_child_process18.execFileSync)("which", [name], { encoding: "utf8", timeout: 3e3 }).trim() || null;
     } catch {
       return null;
     }
   });
-  const existsSync5 = opts.existsSync ?? import_node_fs13.existsSync;
+  const existsSync6 = opts.existsSync ?? import_node_fs14.existsSync;
   const resolved = whichSync(BIN_NAME);
-  if (resolved && existsSync5(resolved)) {
+  if (resolved && existsSync6(resolved)) {
     return { path: resolved, source: "which" };
   }
   const envPath = (opts.env ?? process.env).PATH ?? "";
-  for (const dir of envPath.split(import_node_path22.default.delimiter)) {
+  for (const dir of envPath.split(import_node_path23.default.delimiter)) {
     if (!dir) continue;
-    const candidate = import_node_path22.default.join(dir, BIN_NAME);
-    if (existsSync5(candidate)) {
+    const candidate = import_node_path23.default.join(dir, BIN_NAME);
+    if (existsSync6(candidate)) {
       return { path: candidate, source: "path-walk" };
     }
   }
@@ -61533,7 +61785,7 @@ function sha256(buf) {
 function startSelfUpdate(deps) {
   const log = deps.log ?? (() => {
   });
-  const readFile9 = deps.readFileSyncImpl ?? ((p) => (0, import_node_fs13.readFileSync)(p));
+  const readFile9 = deps.readFileSyncImpl ?? ((p) => (0, import_node_fs14.readFileSync)(p));
   const setIntervalFn = deps.setIntervalImpl ?? setInterval;
   const clearIntervalFn = deps.clearIntervalImpl ?? clearInterval;
   const intervalMs = deps.intervalMs ?? readIntervalEnv("MRRLIN_DIRECTOR_BRIDGE_SELF_UPDATE_INTERVAL_MS", DEFAULT_INTERVAL_MS);
@@ -61820,7 +62072,7 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.4.116";
+var PKG_VERSION = "0.4.118";
 
 // src/receipt-signing.ts
 var import_node_crypto13 = __toESM(require("node:crypto"), 1);
@@ -62704,14 +62956,14 @@ function parseLedger(value) {
 }
 
 // src/api-base-url-migrate.ts
-var import_node_fs14 = __toESM(require("node:fs"), 1);
-var import_node_os15 = __toESM(require("node:os"), 1);
-var import_node_path24 = __toESM(require("node:path"), 1);
+var import_node_fs15 = __toESM(require("node:fs"), 1);
+var import_node_os16 = __toESM(require("node:os"), 1);
+var import_node_path25 = __toESM(require("node:path"), 1);
 
 // src/service-paths.ts
-var import_node_path23 = __toESM(require("node:path"), 1);
+var import_node_path24 = __toESM(require("node:path"), 1);
 function isWorktreePath(p) {
-  const norm = import_node_path23.default.normalize(p).split(import_node_path23.default.sep).join("/");
+  const norm = import_node_path24.default.normalize(p).split(import_node_path24.default.sep).join("/");
   return norm.includes("/.claude/worktrees/");
 }
 function resolveServiceCwd(opts) {
@@ -62783,20 +63035,20 @@ ${envLines}
 
 // src/api-base-url-migrate.ts
 function defaultDeps(deps) {
-  const home = deps.home ?? process.env.HOME ?? import_node_os15.default.homedir();
+  const home = deps.home ?? process.env.HOME ?? import_node_os16.default.homedir();
   return {
     home,
-    codexHome: deps.codexHome ?? process.env.CODEX_HOME?.trim() ?? import_node_path24.default.join(home, ".codex"),
-    readFile: deps.readFile ?? ((p) => import_node_fs14.default.readFileSync(p, "utf8")),
+    codexHome: deps.codexHome ?? process.env.CODEX_HOME?.trim() ?? import_node_path25.default.join(home, ".codex"),
+    readFile: deps.readFile ?? ((p) => import_node_fs15.default.readFileSync(p, "utf8")),
     // Temp-file + atomic rename so a concurrent `serve` and `director-bridge` startup can never
     // interleave partial writes into a config the next start has to parse. Note this normalizes the
     // file to 0o600 — deliberate, since both files can carry a credential-bearing URL.
     writeFile: deps.writeFile ?? ((p, c) => {
       const tmp = `${p}.tmp-${process.pid}`;
-      import_node_fs14.default.writeFileSync(tmp, c, { mode: 384 });
-      import_node_fs14.default.renameSync(tmp, p);
+      import_node_fs15.default.writeFileSync(tmp, c, { mode: 384 });
+      import_node_fs15.default.renameSync(tmp, p);
     }),
-    exists: deps.exists ?? ((p) => import_node_fs14.default.existsSync(p)),
+    exists: deps.exists ?? ((p) => import_node_fs15.default.existsSync(p)),
     log: deps.log ?? ((m) => process.stderr.write(`${m}
 `))
   };
@@ -62835,7 +63087,7 @@ function backupOnce(file2, text, deps) {
 }
 function migrateEcosystemConfig(deps = {}) {
   const d = defaultDeps(deps);
-  const file2 = import_node_path24.default.join(d.home, ".mrrlin", "ecosystem.config.cjs");
+  const file2 = import_node_path25.default.join(d.home, ".mrrlin", "ecosystem.config.cjs");
   if (!d.exists(file2)) return { file: file2, status: "absent" };
   const text = d.readFile(file2);
   if (!findRetiredHost(text) && !hasLiveLegacyStagingFlag(text, "js"))
@@ -62985,7 +63237,7 @@ ${envLines}
 }
 function migrateCodexConfig(deps = {}) {
   const d = defaultDeps(deps);
-  const file2 = import_node_path24.default.join(d.codexHome, "config.toml");
+  const file2 = import_node_path25.default.join(d.codexHome, "config.toml");
   if (!d.exists(file2)) return { file: file2, status: "absent" };
   const text = d.readFile(file2);
   const host = findRetiredHost(text);
@@ -63071,7 +63323,7 @@ $1`
 }
 function migrateClaudeConfig(deps = {}) {
   const d = defaultDeps(deps);
-  const file2 = import_node_path24.default.join(d.home, ".claude.json");
+  const file2 = import_node_path25.default.join(d.home, ".claude.json");
   if (!d.exists(file2)) return { file: file2, status: "absent" };
   const text = d.readFile(file2);
   let parsed;
@@ -63121,9 +63373,9 @@ function migrateRetiredApiBaseUrls(deps = {}) {
   const d = defaultDeps(deps);
   const results = [];
   const steps = [
-    { run: migrateEcosystemConfig, file: import_node_path24.default.join(d.home, ".mrrlin", "ecosystem.config.cjs") },
-    { run: migrateCodexConfig, file: import_node_path24.default.join(d.codexHome, "config.toml") },
-    { run: migrateClaudeConfig, file: import_node_path24.default.join(d.home, ".claude.json") }
+    { run: migrateEcosystemConfig, file: import_node_path25.default.join(d.home, ".mrrlin", "ecosystem.config.cjs") },
+    { run: migrateCodexConfig, file: import_node_path25.default.join(d.codexHome, "config.toml") },
+    { run: migrateClaudeConfig, file: import_node_path25.default.join(d.home, ".claude.json") }
   ];
   for (const step of steps) {
     try {
@@ -63149,8 +63401,8 @@ function migrateRetiredApiBaseUrls(deps = {}) {
 }
 
 // src/bridge-health.ts
-var import_node_fs15 = require("node:fs");
-var import_node_path25 = __toESM(require("node:path"), 1);
+var import_node_fs16 = require("node:fs");
+var import_node_path26 = __toESM(require("node:path"), 1);
 var SENTINEL_FILE_NAME = "bridge-health-circuit-breaker.json";
 var CRASH_WINDOW_MS = 60 * 60 * 1e3;
 var MAX_CRASHES_PER_WINDOW = 3;
@@ -63162,9 +63414,9 @@ function isCrashSentinel(value) {
   return typeof candidate.crashCount === "number" && Number.isInteger(candidate.crashCount) && candidate.crashCount >= 0 && typeof candidate.windowStartedAt === "string";
 }
 async function readCrashSentinel(stateDir, now = Date.now) {
-  const sentinelPath = import_node_path25.default.join(stateDir, SENTINEL_FILE_NAME);
+  const sentinelPath = import_node_path26.default.join(stateDir, SENTINEL_FILE_NAME);
   try {
-    const raw = await import_node_fs15.promises.readFile(sentinelPath, "utf8");
+    const raw = await import_node_fs16.promises.readFile(sentinelPath, "utf8");
     const parsed = JSON.parse(raw);
     if (isCrashSentinel(parsed)) return parsed;
   } catch {
@@ -63172,11 +63424,11 @@ async function readCrashSentinel(stateDir, now = Date.now) {
   return { crashCount: 0, windowStartedAt: new Date(now()).toISOString() };
 }
 async function writeCrashSentinel(stateDir, sentinel) {
-  await import_node_fs15.promises.mkdir(stateDir, { recursive: true });
-  const sentinelPath = import_node_path25.default.join(stateDir, SENTINEL_FILE_NAME);
+  await import_node_fs16.promises.mkdir(stateDir, { recursive: true });
+  const sentinelPath = import_node_path26.default.join(stateDir, SENTINEL_FILE_NAME);
   const tmpPath = `${sentinelPath}.tmp-${process.pid}-${Math.random().toString(36).slice(2)}`;
-  await import_node_fs15.promises.writeFile(tmpPath, JSON.stringify(sentinel), "utf8");
-  await import_node_fs15.promises.rename(tmpPath, sentinelPath);
+  await import_node_fs16.promises.writeFile(tmpPath, JSON.stringify(sentinel), "utf8");
+  await import_node_fs16.promises.rename(tmpPath, sentinelPath);
 }
 function withTimeout(fn, ms = DEFAULT_OPERATION_TIMEOUT_MS) {
   const controller = new AbortController();
@@ -63503,12 +63755,12 @@ function startSchedulerTickLoop(deps) {
 
 // src/retention/pruner.ts
 var import_promises11 = require("node:fs/promises");
-var import_node_path26 = __toESM(require("node:path"), 1);
+var import_node_path27 = __toESM(require("node:path"), 1);
 function protectedDayFloor(protectedSinceMs) {
   return new Date(protectedSinceMs).toISOString().slice(0, 10);
 }
 async function prune(stateDir, bounds) {
-  const logsDir = import_node_path26.default.join(stateDir, "logs");
+  const logsDir = import_node_path27.default.join(stateDir, "logs");
   let entries;
   try {
     entries = await (0, import_promises11.readdir)(logsDir);
@@ -63524,7 +63776,7 @@ async function prune(stateDir, bounds) {
   for (const entry of entries) {
     const m = bridgeRe.exec(entry);
     if (!m?.[1]) continue;
-    const fullPath = import_node_path26.default.join(logsDir, entry);
+    const fullPath = import_node_path27.default.join(logsDir, entry);
     const s = await (0, import_promises11.stat)(fullPath);
     files.push({ day: m[1], size: s.size, fullPath });
   }
@@ -63533,7 +63785,7 @@ async function prune(stateDir, bounds) {
   const reasonByDay = {};
   let bytesRemoved = 0;
   async function isDaySafeToDelete(day) {
-    const telemetryDir = import_node_path26.default.join(stateDir, "telemetry");
+    const telemetryDir = import_node_path27.default.join(stateDir, "telemetry");
     let telemetryEntries;
     try {
       telemetryEntries = await (0, import_promises11.readdir)(telemetryDir);
@@ -63549,7 +63801,7 @@ async function prune(stateDir, bounds) {
     }
     if (projectSlugs.length === 0) return true;
     for (const slug of projectSlugs) {
-      const markerPath = import_node_path26.default.join(telemetryDir, `.processed-${slug}-${day}`);
+      const markerPath = import_node_path27.default.join(telemetryDir, `.processed-${slug}-${day}`);
       try {
         await (0, import_promises11.stat)(markerPath);
       } catch (err) {
@@ -63599,7 +63851,7 @@ async function prune(stateDir, bounds) {
   const budgetOvershootBytes = Math.max(0, totalSize2 - budgetBytes);
   await emitPruneLog(stateDir, daysRemoved, reasonByDay, bytesRemoved, oldestDayRemaining);
   if (daysRemoved.length > 0) {
-    const sessionsPath = import_node_path26.default.join(logsDir, ".sessions.json");
+    const sessionsPath = import_node_path27.default.join(logsDir, ".sessions.json");
     let sessionsObj = {};
     let fileExists = true;
     try {
@@ -63621,8 +63873,8 @@ async function prune(stateDir, bounds) {
   return { daysRemoved, reasonByDay, bytesRemoved, oldestDayRemaining, budgetOvershootBytes };
 }
 async function emitPruneLog(stateDir, daysRemoved, reasonByDay, bytesRemoved, oldestDayRemaining) {
-  const logsDir = import_node_path26.default.join(stateDir, "logs");
-  const logPath = import_node_path26.default.join(logsDir, ".pruned.jsonl");
+  const logsDir = import_node_path27.default.join(stateDir, "logs");
+  const logPath = import_node_path27.default.join(logsDir, ".pruned.jsonl");
   await (0, import_promises11.mkdir)(logsDir, { recursive: true });
   const record2 = { ts: Date.now(), dir: "logs", daysRemoved, reasonByDay, bytesRemoved, oldestDayRemaining };
   await (0, import_promises11.appendFile)(logPath, `${JSON.stringify(record2)}
@@ -63632,7 +63884,7 @@ async function emitPruneLog(stateDir, daysRemoved, reasonByDay, bytesRemoved, ol
 // src/telemetry/turn-aggregator.ts
 var import_node_crypto14 = require("node:crypto");
 var import_promises12 = require("node:fs/promises");
-var import_node_path27 = require("node:path");
+var import_node_path28 = require("node:path");
 var BRIDGE_FILE_RE = /^bridge-(\d{4}-\d{2}-\d{2})\.jsonl$/;
 var PLUMBING_COUNTER_KEY = {
   socket_close: "socketCloses",
@@ -63661,7 +63913,7 @@ function inheritSlug(seeds, index) {
   return (preceding ?? following)?.slug;
 }
 async function foldClosedDays(stateDir, today) {
-  const logsDir = (0, import_node_path27.join)(stateDir, "logs");
+  const logsDir = (0, import_node_path28.join)(stateDir, "logs");
   let entries;
   try {
     entries = await (0, import_promises12.readdir)(logsDir);
@@ -63673,7 +63925,7 @@ async function foldClosedDays(stateDir, today) {
     if (!m) continue;
     const day = m[1];
     if (day === today) continue;
-    const raw = await (0, import_promises12.readFile)((0, import_node_path27.join)(logsDir, entry), "utf8");
+    const raw = await (0, import_promises12.readFile)((0, import_node_path28.join)(logsDir, entry), "utf8");
     const groups = /* @__PURE__ */ new Map();
     let groupCounter = 0;
     for (const line of raw.split("\n")) {
@@ -63784,10 +64036,10 @@ async function foldClosedDays(stateDir, today) {
       rowsByProject.set(slug, rows);
     }
     if (rowsByProject.size === 0) continue;
-    const telemetryDir = (0, import_node_path27.join)(stateDir, "telemetry");
+    const telemetryDir = (0, import_node_path28.join)(stateDir, "telemetry");
     await (0, import_promises12.mkdir)(telemetryDir, { recursive: true });
     for (const [slug, rows] of rowsByProject) {
-      const finalPath = (0, import_node_path27.join)(telemetryDir, `rows-${slug}-${day}.jsonl`);
+      const finalPath = (0, import_node_path28.join)(telemetryDir, `rows-${slug}-${day}.jsonl`);
       const tmpPath = `${finalPath}.tmp-${process.pid}-${(0, import_node_crypto14.randomBytes)(6).toString("hex")}`;
       try {
         await (0, import_promises12.writeFile)(tmpPath, rows.map((r) => JSON.stringify(r)).join("\n") + "\n", "utf8");
@@ -63802,27 +64054,27 @@ async function foldClosedDays(stateDir, today) {
 
 // src/telemetry/daily-uploader.ts
 var import_promises13 = require("node:fs/promises");
-var import_node_path29 = require("node:path");
+var import_node_path30 = require("node:path");
 
 // src/telemetry/installation-id.ts
 var import_node_crypto15 = require("node:crypto");
-var import_node_fs16 = require("node:fs");
-var import_node_path28 = require("node:path");
+var import_node_fs17 = require("node:fs");
+var import_node_path29 = require("node:path");
 var FILE_NAME = "installation-id";
 var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
 var cache = /* @__PURE__ */ new Map();
 function resolveInstallationId(stateDir) {
   const cached2 = cache.get(stateDir);
   if (cached2 !== void 0) return cached2;
-  const path31 = (0, import_node_path28.join)(stateDir, FILE_NAME);
+  const path33 = (0, import_node_path29.join)(stateDir, FILE_NAME);
   let id;
   try {
-    id = (0, import_node_fs16.readFileSync)(path31, "utf8").trim();
+    id = (0, import_node_fs17.readFileSync)(path33, "utf8").trim();
     if (!UUID.test(id)) throw new Error("unusable");
   } catch {
     id = (0, import_node_crypto15.randomUUID)();
-    (0, import_node_fs16.mkdirSync)((0, import_node_path28.dirname)(path31), { recursive: true });
-    (0, import_node_fs16.writeFileSync)(path31, `${id}
+    (0, import_node_fs17.mkdirSync)((0, import_node_path29.dirname)(path33), { recursive: true });
+    (0, import_node_fs17.writeFileSync)(path33, `${id}
 `, "utf8");
   }
   cache.set(stateDir, id);
@@ -63839,7 +64091,7 @@ function truncateCause(err) {
   return `${message.slice(0, MAX_CAUSE_CHARS - 3)}...`;
 }
 async function uploadPendingDays(stateDir, client, bridgeHealth, gateCtx) {
-  const telemetryDir = (0, import_node_path29.join)(stateDir, "telemetry");
+  const telemetryDir = (0, import_node_path30.join)(stateDir, "telemetry");
   let files;
   try {
     files = await (0, import_promises13.readdir)(telemetryDir);
@@ -63855,14 +64107,14 @@ async function uploadPendingDays(stateDir, client, bridgeHealth, gateCtx) {
     const [, projectSlug, day] = match;
     const key = `${projectSlug}\0${day}`;
     const entry = discovered.get(key) ?? { projectSlug, day, rowsPath: null };
-    if (rowsMatch) entry.rowsPath = (0, import_node_path29.join)(telemetryDir, file2);
+    if (rowsMatch) entry.rowsPath = (0, import_node_path30.join)(telemetryDir, file2);
     discovered.set(key, entry);
   }
   const today = telemetryDay();
   const pending = [];
   const deferred = [];
   for (const { projectSlug, day, rowsPath } of discovered.values()) {
-    const markerPath = (0, import_node_path29.join)(telemetryDir, `.processed-${projectSlug}-${day}`);
+    const markerPath = (0, import_node_path30.join)(telemetryDir, `.processed-${projectSlug}-${day}`);
     if (rowsPath === null && day >= today) {
       try {
         await (0, import_promises13.access)(markerPath);
@@ -63882,7 +64134,7 @@ async function uploadPendingDays(stateDir, client, bridgeHealth, gateCtx) {
   const fullUnprocessed = [...pending.map((p) => ({ projectSlug: p.projectSlug, day: p.day })), ...deferred];
   pending.sort((a, b) => a.day.localeCompare(b.day));
   for (const cur of pending) {
-    const failurePath = (0, import_node_path29.join)(telemetryDir, `.failed-${cur.projectSlug}-${cur.day}.json`);
+    const failurePath = (0, import_node_path30.join)(telemetryDir, `.failed-${cur.projectSlug}-${cur.day}.json`);
     let failureState = null;
     try {
       const data = await (0, import_promises13.readFile)(failurePath, "utf8");
@@ -63916,7 +64168,7 @@ async function uploadPendingDays(stateDir, client, bridgeHealth, gateCtx) {
       }
       const gateCalls = [];
       try {
-        const rawGate = await (0, import_promises13.readFile)((0, import_node_path29.join)(telemetryDir, gateFileName(cur.projectSlug, cur.day)), "utf8");
+        const rawGate = await (0, import_promises13.readFile)((0, import_node_path30.join)(telemetryDir, gateFileName(cur.projectSlug, cur.day)), "utf8");
         for (const line of rawGate.split("\n")) {
           if (!line.trim()) continue;
           try {
@@ -64118,7 +64370,7 @@ async function collectAgentPoolSnapshot(deps) {
 }
 
 // src/external-agents-spawn.ts
-var import_node_child_process18 = require("node:child_process");
+var import_node_child_process19 = require("node:child_process");
 function runExternalAgentsCli(args, opts) {
   let command;
   let prefixArgs;
@@ -64149,7 +64401,7 @@ function runExternalAgentsCli(args, opts) {
     };
     let spawned;
     try {
-      spawned = (0, import_node_child_process18.spawn)(command, [...prefixArgs, ...args], { stdio: stdioConfig });
+      spawned = (0, import_node_child_process19.spawn)(command, [...prefixArgs, ...args], { stdio: stdioConfig });
     } catch {
       done(1);
       return;
@@ -64261,14 +64513,14 @@ function startAgentPoolLoop(deps) {
 }
 
 // src/provider-readiness-loop.ts
-var import_node_child_process19 = require("node:child_process");
+var import_node_child_process20 = require("node:child_process");
 var DEFAULT_INTERVAL_MS3 = 6e4;
 function providerReadinessLoopDisabled(env = process.env) {
   return env["MRRLIN_BRIDGE_PROVIDER_READINESS_DISABLE"] === "1";
 }
 function defaultRunnerFor(command) {
   return (args) => {
-    const r = (0, import_node_child_process19.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3 });
+    const r = (0, import_node_child_process20.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3 });
     return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
   };
 }
@@ -64311,9 +64563,9 @@ function startProviderReadinessLoop(deps) {
 }
 
 // src/execution-consumer.ts
-var import_node_child_process21 = require("node:child_process");
-var import_node_crypto17 = __toESM(require("node:crypto"), 1);
-var import_node_path32 = __toESM(require("node:path"), 1);
+var import_node_child_process23 = require("node:child_process");
+var import_node_crypto18 = __toESM(require("node:crypto"), 1);
+var import_node_path34 = __toESM(require("node:path"), 1);
 var import_node_util2 = require("node:util");
 
 // src/notify-templates.ts
@@ -65167,19 +65419,19 @@ async function awaitTurnWithDeadline(opts) {
 }
 
 // src/worktree.ts
-var import_node_child_process20 = require("node:child_process");
+var import_node_child_process21 = require("node:child_process");
 var import_node_crypto16 = require("node:crypto");
-var import_node_fs18 = require("node:fs");
-var import_node_path31 = require("node:path");
+var import_node_fs19 = require("node:fs");
+var import_node_path32 = require("node:path");
 
 // src/checkout-lock.ts
-var import_node_fs17 = require("node:fs");
-var import_node_path30 = require("node:path");
+var import_node_fs18 = require("node:fs");
+var import_node_path31 = require("node:path");
 var import_proper_lockfile = __toESM(require_proper_lockfile(), 1);
 async function withCheckoutLock(locksDir, slug, fn) {
-  (0, import_node_fs17.mkdirSync)(locksDir, { recursive: true });
-  const target = (0, import_node_path30.join)(locksDir, `${slug}.lock`);
-  if (!(0, import_node_fs17.existsSync)(target)) (0, import_node_fs17.writeFileSync)(target, "");
+  (0, import_node_fs18.mkdirSync)(locksDir, { recursive: true });
+  const target = (0, import_node_path31.join)(locksDir, `${slug}.lock`);
+  if (!(0, import_node_fs18.existsSync)(target)) (0, import_node_fs18.writeFileSync)(target, "");
   const release = await import_proper_lockfile.default.lock(target, {
     retries: { retries: 600, factor: 1, minTimeout: 100, maxTimeout: 100 },
     stale: 5 * 6e4
@@ -65195,28 +65447,28 @@ async function withCheckoutLock(locksDir, slug, fn) {
 function worktreeBranch(runId) {
   return `mrrlin/run-${runId}`;
 }
-var defaultGitExec = (args, env) => (0, import_node_child_process20.execFileSync)("git", args, { encoding: "utf8", timeout: 3e4, env });
+var defaultGitExec = (args, env) => (0, import_node_child_process21.execFileSync)("git", args, { encoding: "utf8", timeout: 3e4, env });
 function disabledGitHooksPath(locksDir, scope) {
   const scopeKey = (0, import_node_crypto16.createHash)("sha256").update(scope).digest("hex").slice(0, 32);
-  return (0, import_node_path31.resolve)(locksDir, "..", "disabled-git-hooks", scopeKey);
+  return (0, import_node_path32.resolve)(locksDir, "..", "disabled-git-hooks", scopeKey);
 }
 function prepareDisabledGitHooksDir(locksDir, scope) {
   const hooksDir = disabledGitHooksPath(locksDir, scope);
-  const hooksRoot = (0, import_node_path31.resolve)(hooksDir, "..");
-  (0, import_node_fs18.mkdirSync)(hooksRoot, { recursive: true, mode: 448 });
-  (0, import_node_fs18.mkdirSync)(hooksDir, { recursive: true, mode: 320 });
-  if ((0, import_node_fs18.readdirSync)(hooksDir).length > 0) {
+  const hooksRoot = (0, import_node_path32.resolve)(hooksDir, "..");
+  (0, import_node_fs19.mkdirSync)(hooksRoot, { recursive: true, mode: 448 });
+  (0, import_node_fs19.mkdirSync)(hooksDir, { recursive: true, mode: 320 });
+  if ((0, import_node_fs19.readdirSync)(hooksDir).length > 0) {
     throw new Error(`disabled_git_hooks_dir_not_empty: ${hooksDir}`);
   }
   try {
-    (0, import_node_fs18.chmodSync)(hooksDir, 320);
+    (0, import_node_fs19.chmodSync)(hooksDir, 320);
   } catch {
   }
   return hooksDir;
 }
 function removeDisabledGitHooksDir(locksDir, scope) {
   try {
-    (0, import_node_fs18.rmdirSync)(disabledGitHooksPath(locksDir, scope));
+    (0, import_node_fs19.rmdirSync)(disabledGitHooksPath(locksDir, scope));
   } catch {
   }
 }
@@ -65232,20 +65484,21 @@ function withDisabledGitHooksEnv(env, hooksDir) {
   };
 }
 function git(checkout, args, hooksDir) {
-  return (0, import_node_child_process20.execFileSync)("git", ["-C", checkout, "-c", `core.hooksPath=${hooksDir}`, ...args], {
+  return (0, import_node_child_process21.execFileSync)("git", ["-C", checkout, "-c", `core.hooksPath=${hooksDir}`, ...args], {
     encoding: "utf8",
     timeout: 3e4,
     env: { ...process.env, GIT_TERMINAL_PROMPT: "0" }
   });
 }
 async function createRunWorktree(opts) {
-  const worktreePath = (0, import_node_path31.join)(opts.worktreeRoot, opts.slug, opts.runId);
+  const worktreePath = (0, import_node_path32.join)(opts.worktreeRoot, opts.slug, opts.runId);
   const hooksDir = prepareDisabledGitHooksDir(opts.locksDir, opts.runId);
   await withCheckoutLock(opts.locksDir, opts.slug, async () => {
-    (0, import_node_fs18.mkdirSync)(opts.worktreeRoot, { recursive: true });
+    (0, import_node_fs19.mkdirSync)(opts.worktreeRoot, { recursive: true });
+    const base = opts.local ? `refs/heads/${opts.defaultBranch}` : `origin/${opts.defaultBranch}`;
     try {
-      git(opts.checkout, ["fetch", "origin", opts.defaultBranch], hooksDir);
-      if (!(0, import_node_fs18.existsSync)(worktreePath)) {
+      if (!opts.local) git(opts.checkout, ["fetch", "origin", opts.defaultBranch], hooksDir);
+      if (!(0, import_node_fs19.existsSync)(worktreePath)) {
         git(opts.checkout, [
           "worktree",
           "add",
@@ -65253,27 +65506,27 @@ async function createRunWorktree(opts) {
           "-b",
           worktreeBranch(opts.runId),
           worktreePath,
-          `origin/${opts.defaultBranch}`
+          base
         ], hooksDir);
       }
     } catch (error51) {
       const detail = error51 instanceof Error ? error51.message : String(error51);
       throw new Error(
-        `default_branch_unresolved: could not provision worktree off origin/${opts.defaultBranch} for ${opts.slug}/${opts.runId}: ${detail}`
+        `default_branch_unresolved: could not provision worktree off ${base} for ${opts.slug}/${opts.runId}: ${detail}`
       );
     }
   });
   return worktreePath;
 }
 async function removeRunWorktree(opts) {
-  const hooksDir = prepareDisabledGitHooksDir(opts.locksDir, (0, import_node_path31.basename)(opts.worktreePath));
+  const hooksDir = prepareDisabledGitHooksDir(opts.locksDir, (0, import_node_path32.basename)(opts.worktreePath));
   await withCheckoutLock(opts.locksDir, opts.slug, async () => {
     try {
       git(opts.checkout, ["worktree", "remove", "--force", opts.worktreePath], hooksDir);
     } catch {
     }
     git(opts.checkout, ["worktree", "prune"], hooksDir);
-    removeDisabledGitHooksDir(opts.locksDir, (0, import_node_path31.basename)(opts.worktreePath));
+    removeDisabledGitHooksDir(opts.locksDir, (0, import_node_path32.basename)(opts.worktreePath));
   });
 }
 async function pushRunBranch(opts, execGit = defaultGitExec) {
@@ -65357,11 +65610,11 @@ async function sweepOrphanWorktrees(opts) {
   const hooksDir = prepareDisabledGitHooksDir(opts.locksDir, `sweep:${opts.slug}`);
   const ownedPrefix = (() => {
     try {
-      return (import_node_fs18.realpathSync.native ?? import_node_fs18.realpathSync)(opts.worktreeRoot);
+      return (import_node_fs19.realpathSync.native ?? import_node_fs19.realpathSync)(opts.worktreeRoot);
     } catch {
       return opts.worktreeRoot;
     }
-  })() + import_node_path31.sep + opts.slug + import_node_path31.sep;
+  })() + import_node_path32.sep + opts.slug + import_node_path32.sep;
   try {
     await withCheckoutLock(opts.locksDir, opts.slug, async () => {
       const listing = git(opts.checkout, ["worktree", "list", "--porcelain"], hooksDir);
@@ -65371,18 +65624,18 @@ async function sweepOrphanWorktrees(opts) {
         if (!wt) continue;
         const canonicalWt = (() => {
           try {
-            return (import_node_fs18.realpathSync.native ?? import_node_fs18.realpathSync)(wt);
+            return (import_node_fs19.realpathSync.native ?? import_node_fs19.realpathSync)(wt);
           } catch {
             return wt;
           }
         })();
-        const normWt = (0, import_node_path31.normalize)(canonicalWt);
-        const normPrefix = (0, import_node_path31.normalize)(ownedPrefix);
+        const normWt = (0, import_node_path32.normalize)(canonicalWt);
+        const normPrefix = (0, import_node_path32.normalize)(ownedPrefix);
         const isMatch = process.platform === "win32" ? normWt.toLowerCase().startsWith(normPrefix.toLowerCase()) : normWt.startsWith(normPrefix);
         if (isMatch && opts.isReapable(wt)) {
           try {
             git(opts.checkout, ["worktree", "remove", "--force", wt], hooksDir);
-            removeDisabledGitHooksDir(opts.locksDir, (0, import_node_path31.basename)(wt));
+            removeDisabledGitHooksDir(opts.locksDir, (0, import_node_path32.basename)(wt));
             reaped.push(wt);
           } catch {
           }
@@ -65431,6 +65684,159 @@ function buildPullRequestBody(input) {
 ${lines2.join("\n")}`;
 }
 
+// src/delivery/local-git.ts
+var import_node_child_process22 = require("node:child_process");
+var import_node_crypto17 = require("node:crypto");
+var import_node_fs20 = require("node:fs");
+var import_node_path33 = __toESM(require("node:path"), 1);
+function isLocalGitRoute(route) {
+  return Boolean(route && route.serverId === BUILTIN_CAPABILITY_SERVER_ID && route.operations.commit === LOCAL_GIT_TOOL_NAME);
+}
+function git2(repo, args) {
+  return (0, import_node_child_process22.execFileSync)("git", ["-C", repo, ...args], {
+    encoding: "utf8",
+    timeout: 3e4,
+    stdio: ["ignore", "pipe", "pipe"],
+    env: { ...process.env, GIT_TERMINAL_PROMPT: "0" }
+  }).trim();
+}
+function branchExists(repo, branch) {
+  try {
+    git2(repo, ["rev-parse", "--verify", "--quiet", `refs/heads/${branch}`]);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function resolveLocalDefaultBranch(checkout) {
+  for (const candidate of ["main", "master"]) {
+    if (branchExists(checkout, candidate)) return candidate;
+  }
+  try {
+    const current2 = git2(checkout, ["symbolic-ref", "--quiet", "--short", "HEAD"]);
+    if (current2 && branchExists(checkout, current2)) return current2;
+  } catch {
+  }
+  throw new Error(`default_branch_unresolved: ${checkout} has no committed branch to branch a run from`);
+}
+var NPM_PLACEHOLDER_TEST = /no test specified/i;
+function detectBuildCommands(worktree) {
+  const pkgPath = import_node_path33.default.join(worktree, "package.json");
+  if ((0, import_node_fs20.existsSync)(pkgPath)) {
+    let scripts = {};
+    let hasDeps = false;
+    try {
+      const pkg = JSON.parse((0, import_node_fs20.readFileSync)(pkgPath, "utf8"));
+      scripts = pkg.scripts ?? {};
+      hasDeps = Boolean(pkg.dependencies || pkg.devDependencies);
+    } catch {
+      return [];
+    }
+    const pm = (0, import_node_fs20.existsSync)(import_node_path33.default.join(worktree, "pnpm-lock.yaml")) ? "pnpm" : (0, import_node_fs20.existsSync)(import_node_path33.default.join(worktree, "yarn.lock")) ? "yarn" : "npm";
+    const commands = [];
+    const wantsBuild = typeof scripts.build === "string" && scripts.build.trim().length > 0;
+    const wantsTest = typeof scripts.test === "string" && scripts.test.trim().length > 0 && !NPM_PLACEHOLDER_TEST.test(scripts.test);
+    if ((wantsBuild || wantsTest) && hasDeps && !(0, import_node_fs20.existsSync)(import_node_path33.default.join(worktree, "node_modules"))) {
+      commands.push({ label: `${pm} install`, file: pm, args: ["install"] });
+    }
+    if (wantsBuild) commands.push({ label: `${pm} run build`, file: pm, args: ["run", "build"] });
+    if (wantsTest) commands.push({ label: `${pm} run test`, file: pm, args: ["run", "test"] });
+    return commands;
+  }
+  const makefile = ["Makefile", "makefile", "GNUmakefile"].map((name) => import_node_path33.default.join(worktree, name)).find(import_node_fs20.existsSync);
+  if (makefile && /^test\s*:/m.test((0, import_node_fs20.readFileSync)(makefile, "utf8"))) {
+    return [{ label: "make test", file: "make", args: ["test"] }];
+  }
+  return [];
+}
+var DEFAULT_STEP_TIMEOUT_MS = 15 * 6e4;
+var defaultStepRunner = (command, cwd) => {
+  const result = (0, import_node_child_process22.spawnSync)(command.file, command.args, {
+    cwd,
+    encoding: "utf8",
+    timeout: DEFAULT_STEP_TIMEOUT_MS,
+    maxBuffer: 64 * 1024 * 1024,
+    env: { ...process.env, CI: "1", GIT_TERMINAL_PROMPT: "0" }
+  });
+  const output3 = `${result.stdout ?? ""}${result.stderr ?? ""}${result.error ? `
+${result.error.message}` : ""}`;
+  return { exitCode: typeof result.status === "number" ? result.status : 1, output: output3 };
+};
+function sha2562(text) {
+  return (0, import_node_crypto17.createHash)("sha256").update(text).digest("hex");
+}
+function deliverLocalGit(input) {
+  const branch = `mrrlin/run-${input.runId}`;
+  const currentBranch = git2(input.worktreePath, ["rev-parse", "--abbrev-ref", "HEAD"]);
+  if (currentBranch !== branch) {
+    throw new Error(`local_delivery_branch_mismatch: worktree is on ${currentBranch}, expected ${branch}`);
+  }
+  if (git2(input.worktreePath, ["status", "--porcelain"]).length > 0) {
+    git2(input.worktreePath, ["add", "-A"]);
+    git2(input.worktreePath, [
+      "-c",
+      "user.name=Mrrlin",
+      "-c",
+      "user.email=bridge@mrrlin.local",
+      "commit",
+      "--no-verify",
+      "-m",
+      `mrrlin: ${input.runId} work`
+    ]);
+  }
+  const headSha = git2(input.worktreePath, ["rev-parse", "HEAD"]);
+  const commitCount = Number(git2(input.worktreePath, ["rev-list", "--count", `${input.baseSha}..${headSha}`]));
+  if (!Number.isInteger(commitCount) || commitCount < 0) {
+    throw new Error(`local_delivery_commit_count_unreadable: git rev-list returned ${String(commitCount)}`);
+  }
+  const checkoutDigest = sha2562(input.checkoutRealPath);
+  (0, import_node_fs20.mkdirSync)(input.evidenceDir, { recursive: true, mode: 448 });
+  const evidenceFile = import_node_path33.default.join(input.evidenceDir, `${input.runId}.json`);
+  if (!(commitCount > 0)) {
+    (0, import_node_fs20.writeFileSync)(
+      evidenceFile,
+      JSON.stringify({ checkout: input.checkoutRealPath, branch, baseSha: input.baseSha, headSha, commitCount, steps: [] }, null, 2),
+      { mode: 384 }
+    );
+    return {
+      ok: false,
+      reason: "no_commits",
+      detail: `no_commits_to_deliver: run ${input.runId} has no commits on ${branch} ahead of ${input.baseSha.slice(0, 12)}`,
+      evidence: null,
+      evidenceFile
+    };
+  }
+  const runStep = input.runStep ?? defaultStepRunner;
+  const steps = [];
+  const logs = [];
+  for (const command of detectBuildCommands(input.worktreePath)) {
+    const { exitCode, output: output3 } = runStep(command, input.worktreePath);
+    steps.push({ command: command.label, exitCode, logDigest: sha2562(output3) });
+    logs.push({ command: command.label, exitCode, output: output3.slice(-2e5) });
+    if (exitCode !== 0) break;
+  }
+  const evidence = {
+    branch,
+    baseSha: input.baseSha,
+    headSha,
+    commitCount,
+    steps,
+    noBuildStep: steps.length === 0,
+    checkoutDigest
+  };
+  (0, import_node_fs20.writeFileSync)(evidenceFile, JSON.stringify({ checkout: input.checkoutRealPath, ...evidence, logs }, null, 2), { mode: 384 });
+  const problem = checkLocalBuildEvidence({ type: "build", value: headSha }, evidence);
+  if (problem) {
+    return { ok: false, reason: "build_failed", detail: `local_build_failed: ${problem}`, evidence, evidenceFile };
+  }
+  return {
+    ok: true,
+    evidence,
+    deliveryRef: formatLocalDeliveryRef({ projectSlug: input.projectSlug, branch, headSha }),
+    evidenceFile
+  };
+}
+
 // src/thread-retirement.ts
 function decideThreadRetirement(input) {
   if (input.disabled) return { retire: false };
@@ -65879,6 +66285,16 @@ var EXECUTOR_BASE_INSTRUCTIONS = [
   "commit unverified delegated output. If dispatch fails or the pool is unavailable, do the",
   "work yourself \u2014 never block the run on the pool."
 ].join("\n");
+var LOCAL_GIT_EXECUTOR_INSTRUCTIONS = [
+  "",
+  "This project's code lives only in a git repository on the operator's own computer; it has no",
+  "remote. Your worktree is on the run branch. Commit your work on THIS branch. Never run `git push`,",
+  "never add a remote, never open a pull request, and never switch to or merge into the default branch.",
+  "When your turn ends, the bridge itself commits anything left uncommitted, runs the project's build",
+  "and tests, and records the result \u2014 you do not need to report a link."
+].join("\n");
+var EXECUTOR_LOCAL_GIT_BASE_INSTRUCTIONS = `${EXECUTOR_BASE_INSTRUCTIONS}
+${LOCAL_GIT_EXECUTOR_INSTRUCTIONS}`;
 function artifactKindForEvent(event) {
   switch (event.type) {
     case "assistant":
@@ -65914,13 +66330,20 @@ function isBridgeGeneratedArtifact(artifact) {
   return typeof payload === "object" && payload !== null && "event" in payload;
 }
 function newArtifactId() {
-  return `EA-${import_node_crypto17.default.randomUUID()}`;
+  return `EA-${import_node_crypto18.default.randomUUID()}`;
 }
 var BLAST_RADIUS_FLOOR_PATTERNS = [/^supabase\/migrations\//, /^packages\/db\/src\/schema\.ts$/];
-function isBlastRadiusFloorPath(path31) {
-  return BLAST_RADIUS_FLOOR_PATTERNS.some((re) => re.test(path31));
+function isBlastRadiusFloorPath(path33) {
+  return BLAST_RADIUS_FLOOR_PATTERNS.some((re) => re.test(path33));
+}
+var execFileAsync2 = (0, import_node_util2.promisify)(import_node_child_process23.execFile);
+async function gitOutput(cwd, args) {
+  const { stdout } = await execFileAsync2("git", ["-C", cwd, ...args], {
+    timeout: 3e4,
+    env: { ...process.env, GIT_TERMINAL_PROMPT: "0" }
+  });
+  return String(stdout).trim();
 }
-var execFileAsync2 = (0, import_node_util2.promisify)(import_node_child_process21.execFile);
 async function defaultListRunDiffPaths(opts) {
   const parse8 = (stdout) => stdout.split("\n").map((line) => line.trim()).filter((line) => line.length > 0);
   try {
@@ -66165,7 +66588,7 @@ async function driveRun(deps, projectSlug, runId) {
   if (!claimed) return;
   if (!claimed.leaseId) {
     await deps.client.createInboxItem(projectSlug, {
-      id: `II-${import_node_crypto17.default.randomUUID()}`,
+      id: `II-${import_node_crypto18.default.randomUUID()}`,
       kind: "handoff",
       taskId: claimed.taskId,
       body: `Execution run ${runId} was claimed but returned no leaseId. This indicates DB/API corruption and requires operator attention.`
@@ -66182,6 +66605,7 @@ async function driveRun(deps, projectSlug, runId) {
     return legacy != null ? Math.min(legacy, remaining) : remaining;
   };
   const task = await deps.client.getTask(projectSlug, claimed.taskId);
+  let localGitMode = null;
   if (task.declaredOutcome != null) {
     for (const kind of task.declaredOutcome.requires) {
       if (resolveKindCapability(kind) === null) {
@@ -66214,6 +66638,7 @@ async function driveRun(deps, projectSlug, runId) {
         );
         return;
       }
+      if (kind === "code_change") localGitMode = isLocalGitRoute(routeResolution.route);
     }
   }
   const needsBrowser = claimed.prerequisites?.some((p) => p.mcp === "mrrlin-browser") || task.domains?.includes("browser");
@@ -66479,6 +66904,31 @@ ${renderTaskStateSection(taskState)}`;
   let codex;
   let disposeCodex = () => {
   };
+  let localCheckoutRealPath = null;
+  let localBaseSha = null;
+  if (claimed.codeExecution && localGitMode === null) {
+    try {
+      const resolution = await deps.client.resolveArtifactKindRoute(projectSlug, "code_change", projectSlug);
+      localGitMode = resolution.ok ? isLocalGitRoute(resolution.route) : false;
+    } catch {
+      localGitMode = false;
+    }
+  }
+  if (claimed.codeExecution && localGitMode) {
+    await askCodeHostOnce(deps, projectSlug, task.id);
+  }
+  if (claimed.codeExecution && localGitMode && !checkout) {
+    await failRun(
+      deps,
+      projectSlug,
+      task,
+      runId,
+      leaseId,
+      `local_checkout_missing: run ${runId} needs code execution, but project ${projectSlug} keeps its code only on this computer and no project folder is registered for it yet. Explain this to the operator in plain, non-technical language, then ask which folder on their computer holds this project. When they confirm an absolute path, call register_local_checkout({ projectSlug: "${projectSlug}", path: "<absolute path>" }) WITHOUT a repo. If that folder is not a git repository yet, ask their explicit permission before turning it into one. Once a folder is registered, the run can be re-queued.`,
+      "local_checkout_missing"
+    );
+    return;
+  }
   if (claimed.codeExecution) {
     if (!checkout) {
       const reason = `local_checkout_missing: run ${runId} needs code execution, but project ${projectSlug} has no local git checkout registered on this machine, so there is nowhere to make the changes. Explain this to the operator in plain, non-technical language, then proactively help register one:
@@ -66494,22 +66944,46 @@ ${renderTaskStateSection(taskState)}`;
       await failRun(deps, projectSlug, task, runId, leaseId, reason);
       return;
     }
+    if (localGitMode) {
+      const validated = validateLocalCheckoutPath(checkout.path, deps.localCheckoutRules);
+      if (!validated.ok) {
+        await failRun(
+          deps,
+          projectSlug,
+          task,
+          runId,
+          leaseId,
+          `local_checkout_invalid: run ${runId} cannot use the folder registered for project ${projectSlug} (${validated.code}): ${validated.detail}. Ask the operator to confirm the project folder again and re-register it with register_local_checkout.`
+        );
+        return;
+      }
+      localCheckoutRealPath = validated.realPath;
+    }
     try {
       const createWt = deps.createRunWorktree ?? createRunWorktree;
-      const getDefaultBranch = deps.getDefaultBranch ?? (async () => "main");
-      resolvedDefaultBranch = await getDefaultBranch(projectSlug);
+      if (localGitMode && localCheckoutRealPath) {
+        resolvedDefaultBranch = (deps.resolveLocalDefaultBranch ?? resolveLocalDefaultBranch)(localCheckoutRealPath);
+      } else {
+        const getDefaultBranch = deps.getDefaultBranch ?? (async () => "main");
+        resolvedDefaultBranch = await getDefaultBranch(projectSlug);
+      }
       worktreePath = await createWt({
-        checkout: checkout.path,
+        checkout: localCheckoutRealPath ?? checkout.path,
         worktreeRoot: deps.worktreeRoot ?? "/tmp/mrrlin-worktrees",
         locksDir: deps.locksDir ?? "/tmp/mrrlin-locks",
         slug: projectSlug,
         runId,
-        defaultBranch: resolvedDefaultBranch
+        defaultBranch: resolvedDefaultBranch,
+        ...localGitMode ? { local: true } : {}
       });
+      if (localGitMode) {
+        localBaseSha = await gitOutput(worktreePath, ["merge-base", "HEAD", `refs/heads/${resolvedDefaultBranch}`]);
+      }
       if (!await runHasLease(deps, projectSlug, runId, leaseId)) return;
       await deps.client.updateExecutionRun(projectSlug, runId, {
         worktreeId: worktreePath,
-        branch: worktreeBranch(runId)
+        branch: worktreeBranch(runId),
+        ...localBaseSha ? { baseSha: localBaseSha } : {}
       });
       sandbox = "danger-full-access";
       turnCwd = worktreePath;
@@ -66578,7 +67052,7 @@ ${renderTaskStateSection(taskState)}`;
       // write-authorized within its worktree, so it must NOT receive the
       // read-only-sandbox claim (which makes a write-authorized model
       // self-censor). The read-only path keeps the never-write restriction.
-      baseInstructions: useExecutor ? EXECUTOR_BASE_INSTRUCTIONS : CONSUMER_BASE_INSTRUCTIONS,
+      baseInstructions: useExecutor ? localGitMode ? EXECUTOR_LOCAL_GIT_BASE_INSTRUCTIONS : EXECUTOR_BASE_INSTRUCTIONS : CONSUMER_BASE_INSTRUCTIONS,
       developerInstructions: null,
       ephemeral: null,
       mcpConfig: deps.mcpConfigPath
@@ -66790,7 +67264,7 @@ Continue executing task ${task.id}. Make the next concrete increment of progress
       if (!await runHasLease(deps, projectSlug, runId, leaseId)) return;
       const hasCommitsFn = deps.hasCommitsToPush ?? hasCommitsToPush;
       const defaultBranchForPush = resolvedDefaultBranch ?? "main";
-      if (!await hasCommitsFn({ worktreePath, defaultBranch: defaultBranchForPush })) {
+      if (!localGitMode && !await hasCommitsFn({ worktreePath, defaultBranch: defaultBranchForPush })) {
         await failRun(
           deps,
           projectSlug,
@@ -66823,6 +67297,18 @@ Continue executing task ${task.id}. Make the next concrete increment of progress
       } else {
         console.warn(JSON.stringify({ event: "self_review_gate_skipped", projectSlug, runId, reason: "no selfReviewTurn dep" }));
       }
+      if (localGitMode) {
+        await deliverLocalRun(deps, {
+          projectSlug,
+          task: readiness.task,
+          runId,
+          leaseId,
+          worktreePath,
+          checkoutRealPath: localCheckoutRealPath ?? checkout?.path ?? worktreePath,
+          baseSha: localBaseSha
+        });
+        return;
+      }
       const snapshot = await deps.client.getProjectSnapshot(projectSlug);
       const expectedRepoFullName = snapshot.github?.repo ?? null;
       if (!expectedRepoFullName) {
@@ -66955,7 +67441,7 @@ Continue executing task ${task.id}. Make the next concrete increment of progress
           taskId: task.id,
           runId,
           outcome: "completed",
-          nonce: import_node_crypto17.default.randomUUID(),
+          nonce: import_node_crypto18.default.randomUUID(),
           artifacts: []
         }
       );
@@ -67443,7 +67929,7 @@ async function driveNonCodeRun(deps, projectSlug, runId, leaseId, task, domain2,
           taskId: task.id,
           runId,
           outcome: parsedResult.outcome,
-          nonce: import_node_crypto17.default.randomUUID(),
+          nonce: import_node_crypto18.default.randomUUID(),
           artifacts: [
             {
               artifactId: pageId,
@@ -67512,6 +67998,162 @@ async function resetWedgedThread(deps, projectSlug, taskId, interruptFailed) {
   await deps.client.resetDirectorThread(projectSlug, taskId).catch(() => {
   });
 }
+function codeHostQuestionId(projectSlug) {
+  return `II-code-host-${projectSlug.replace(/[^A-Za-z0-9._-]/g, "-")}`;
+}
+async function askCodeHostOnce(deps, projectSlug, taskId) {
+  try {
+    const snapshot = await deps.client.getProjectSnapshot(projectSlug);
+    if (snapshot.project.codeHost != null) return;
+    await deps.client.createInboxItem(projectSlug, {
+      id: codeHostQuestionId(projectSlug),
+      kind: "question",
+      taskId,
+      body: "Your project's code is being saved on this computer, in your project folder. Should it stay only here, or would you also like a copy on GitHub or GitLab (useful for backups and teammates)?",
+      questionOptions: [
+        { label: "Keep it on this computer", answer: "local", description: "Nothing is uploaded anywhere.", recommended: true },
+        { label: "Also put it on GitHub", answer: "github", description: "You will be asked to connect GitHub." },
+        { label: "Also put it on GitLab", answer: "gitlab", description: "You will be asked to connect GitLab." }
+      ]
+    });
+  } catch {
+  }
+}
+async function deliverLocalRun(deps, input) {
+  const { projectSlug, task, runId, leaseId } = input;
+  if (!input.baseSha) {
+    await failRun(deps, projectSlug, task, runId, leaseId, `local_delivery_failed: run ${runId} has no recorded base commit.`);
+    return;
+  }
+  if (!deps.localEvidenceDir) {
+    await failRun(
+      deps,
+      projectSlug,
+      task,
+      runId,
+      leaseId,
+      `local_delivery_failed: run ${runId} has no bridge evidence directory configured (localEvidenceDir).`
+    );
+    return;
+  }
+  const evidenceDir = deps.localEvidenceDir;
+  const deliver = deps.deliverLocalGit ?? deliverLocalGit;
+  let outcome;
+  try {
+    outcome = deliver({
+      projectSlug,
+      runId,
+      checkoutRealPath: input.checkoutRealPath,
+      worktreePath: input.worktreePath,
+      baseSha: input.baseSha,
+      evidenceDir
+    });
+  } catch (error51) {
+    await failRun(
+      deps,
+      projectSlug,
+      task,
+      runId,
+      leaseId,
+      `local_delivery_failed: ${error51 instanceof Error ? error51.message : String(error51)}`
+    );
+    return;
+  }
+  if (!outcome.ok) {
+    if (outcome.evidence) {
+      await deps.client.updateExecutionRun(projectSlug, runId, { headSha: outcome.evidence.headSha }).catch(() => {
+      });
+    }
+    await failRun(deps, projectSlug, task, runId, leaseId, outcome.detail);
+    return;
+  }
+  if (!await runHasLease(deps, projectSlug, runId, leaseId)) return;
+  await deps.client.updateExecutionRun(projectSlug, runId, {
+    headSha: outcome.evidence.headSha,
+    deliveryRef: outcome.deliveryRef
+  });
+  const receipt = {
+    ...buildReceipt({
+      declaredOutcome: task.declaredOutcome ?? { sentence: task.title, requires: ["code_change"], verification: "machine" },
+      evidenceType: "build",
+      evidenceValue: outcome.evidence.headSha,
+      coveredKinds: ["code_change"]
+    }),
+    localBuild: outcome.evidence
+  };
+  const artifactId = `EA-LG-${runId}-${outcome.evidence.headSha.slice(0, 12)}`;
+  let artifact;
+  try {
+    artifact = await deps.client.appendExecutionArtifact(projectSlug, runId, {
+      id: artifactId,
+      kind: "verification",
+      payload: { [LOCAL_BUILD_RECEIPT_PAYLOAD_KEY]: receipt, deliveryRef: outcome.deliveryRef }
+    });
+  } catch (error51) {
+    const existing = await deps.client.listExecutionArtifacts(projectSlug, runId).catch(() => []);
+    const found = existing.find((candidate) => candidate.id === artifactId);
+    if (!found) {
+      await failRun(
+        deps,
+        projectSlug,
+        task,
+        runId,
+        leaseId,
+        `local_delivery_failed: could not record the build receipt: ${error51 instanceof Error ? error51.message : String(error51)}`
+      );
+      return;
+    }
+    artifact = found;
+  }
+  if (!deps.signingProvider) {
+    await failRun(
+      deps,
+      projectSlug,
+      task,
+      runId,
+      leaseId,
+      `closure_signing_unavailable: run ${runId} delivered ${outcome.deliveryRef} with a green bridge-run build, but this bridge has no receipt signing key (MRRLIN_SIGNING_KEY_ID / MRRLIN_SIGNING_PRIVATE_KEY), so the task cannot be closed. Configure signing and restart the run.`
+    );
+    return;
+  }
+  const stored = artifact?.payload ?? {};
+  const contentHash = String(stored.contentHash ?? stored.content_hash ?? stored.hash ?? "");
+  try {
+    await orchestrateSettlementClosure(
+      {
+        prepareSettlementCandidate: (slug, params) => deps.client.prepareSettlementCandidate(slug, params),
+        signingProvider: deps.signingProvider,
+        finalizeSettlementReceipt: (slug, params) => deps.client.finalizeSettlementReceipt(slug, params)
+      },
+      {
+        projectSlug,
+        taskId: task.id,
+        runId,
+        outcome: "completed",
+        nonce: import_node_crypto18.default.randomUUID(),
+        artifacts: [{ artifactId: artifact?.id ?? artifactId, storageVersion: "1", contentHash, kind: "verification" }]
+      }
+    );
+  } catch (error51) {
+    await failRun(
+      deps,
+      projectSlug,
+      task,
+      runId,
+      leaseId,
+      `local_delivery_settlement_failed: ${error51 instanceof Error ? error51.message : String(error51)}`
+    );
+    return;
+  }
+  const removeWt = deps.removeRunWorktree ?? removeRunWorktree;
+  await removeWt({
+    checkout: input.checkoutRealPath,
+    worktreePath: input.worktreePath,
+    locksDir: deps.locksDir ?? "/tmp/mrrlin-locks",
+    slug: projectSlug
+  }).catch(() => {
+  });
+}
 async function failRun(deps, projectSlug, task, runId, leaseId, reason, reasonCode) {
   let currentRun;
   try {
@@ -67673,7 +68315,7 @@ async function reconcileTaskAwaitingMerge(deps, projectSlug, task, runId, reason
   }
   try {
     await deps.client.createInboxItem(projectSlug, {
-      id: `II-${import_node_crypto17.default.randomUUID()}`,
+      id: `II-${import_node_crypto18.default.randomUUID()}`,
       kind: "handoff",
       taskId: task.id,
       body: `Task ${task.id} (${task.title}) still needs operator follow-up: ${reason}. Mrrlin could not move the task back to Handoff needed automatically.`
@@ -67708,7 +68350,7 @@ async function notifyOperatorHandoff(deps, projectSlug, task, runId, reason) {
   }
   try {
     await deps.client.createInboxItem(projectSlug, {
-      id: `II-${import_node_crypto17.default.randomUUID()}`,
+      id: `II-${import_node_crypto18.default.randomUUID()}`,
       kind: "handoff",
       taskId: task.id,
       body: `Execution run ${runId} for task ${task.id} (${task.title}) needs operator attention: ${reason}`
@@ -67850,8 +68492,8 @@ async function runBackstopSweep(deps, drive = (slug, id) => driveRun(deps, slug,
 function isRunRecoverableByThisBridge(run3, worktreeRoot) {
   if (!worktreeRoot) return true;
   if (!run3.worktreeId) return true;
-  const relative = import_node_path32.default.relative(import_node_path32.default.resolve(worktreeRoot), import_node_path32.default.resolve(run3.worktreeId));
-  return relative === "" || relative.length > 0 && !relative.startsWith("..") && !import_node_path32.default.isAbsolute(relative);
+  const relative = import_node_path34.default.relative(import_node_path34.default.resolve(worktreeRoot), import_node_path34.default.resolve(run3.worktreeId));
+  return relative === "" || relative.length > 0 && !relative.startsWith("..") && !import_node_path34.default.isAbsolute(relative);
 }
 async function deployGateHandoff(deps, projectSlug, task, runId, reason, leaseId) {
   await deps.client.updateExecutionRun(projectSlug, runId, { status: "failed", finishedAt: (/* @__PURE__ */ new Date()).toISOString(), leaseId: leaseId ?? void 0 }).catch(() => {
@@ -67869,7 +68511,7 @@ async function deployGateHandoff(deps, projectSlug, task, runId, reason, leaseId
   }).catch(() => {
   });
   await deps.client.createInboxItem(projectSlug, {
-    id: `II-${import_node_crypto17.default.randomUUID()}`,
+    id: `II-${import_node_crypto18.default.randomUUID()}`,
     kind: "handoff",
     taskId: task.id,
     body: `Deploy gate for run ${runId} (task ${task.id} \u2014 ${task.title}) needs operator attention: ${reason}`
@@ -67888,7 +68530,7 @@ function maxLeaseReclaims() {
 }
 
 // src/async-job-consumer.ts
-var import_node_crypto18 = __toESM(require("node:crypto"), 1);
+var import_node_crypto19 = __toESM(require("node:crypto"), 1);
 var ASYNC_JOB_MAX_ATTEMPTS = 2;
 function ASYNC_UNOWNED_TTL_DAYS() {
   const raw = Number(process.env.MRRLIN_ASYNC_UNOWNED_TTL_DAYS);
@@ -68013,7 +68655,7 @@ async function driveAsyncJob(deps, projectSlug, jobId) {
   const delivery = descriptor2.onComplete(outcome, input);
   if (!delivery.suppressInbox) {
     await deps.client.createInboxItem(projectSlug, {
-      id: delivery.id ?? `II-${import_node_crypto18.default.randomUUID()}`,
+      id: delivery.id ?? `II-${import_node_crypto19.default.randomUUID()}`,
       kind: delivery.kind,
       body: delivery.body,
       ...delivery.taskId ? { taskId: delivery.taskId } : {},
@@ -68031,13 +68673,13 @@ async function deriveRequestedHash(client, toolName2, input) {
   if (input.requestedHash) return input.requestedHash;
   if (toolName2 === "run_spec_consensus" && input.pageId) {
     const page = await client.getWikiPage(input.projectSlug, input.pageId);
-    return page.contentHash ?? import_node_crypto18.default.createHash("sha256").update(page.markdownBody).digest("hex");
+    return page.contentHash ?? import_node_crypto19.default.createHash("sha256").update(page.markdownBody).digest("hex");
   }
   if (toolName2 === "draft_task_spec" && input.taskId) {
     const task = await client.getTask(input.projectSlug, input.taskId);
-    return task.updatedAt ?? import_node_crypto18.default.createHash("sha256").update(JSON.stringify(task)).digest("hex");
+    return task.updatedAt ?? import_node_crypto19.default.createHash("sha256").update(JSON.stringify(task)).digest("hex");
   }
-  return import_node_crypto18.default.createHash("sha256").update(JSON.stringify(input)).digest("hex");
+  return import_node_crypto19.default.createHash("sha256").update(JSON.stringify(input)).digest("hex");
 }
 async function runAsyncBackstopSweep(deps, drive = (slug, jobId) => driveAsyncJob(deps, slug, jobId)) {
   const projects = await deps.client.listProjects();
@@ -68063,19 +68705,19 @@ async function runAsyncBackstopSweep(deps, drive = (slug, jobId) => driveAsyncJo
 }
 
 // src/bridge-artifacts.ts
-var import_node_fs19 = __toESM(require("node:fs"), 1);
+var import_node_fs21 = __toESM(require("node:fs"), 1);
 var import_promises14 = __toESM(require("node:fs/promises"), 1);
-var import_node_path33 = __toESM(require("node:path"), 1);
+var import_node_path35 = __toESM(require("node:path"), 1);
 var DEFAULT_MAX_ARTIFACTS_BYTES = 500 * 1024 * 1024;
 var DEFAULT_MAX_ARTIFACT_AGE_MS = 7 * 24 * 60 * 60 * 1e3;
 function resolveArtifactsDir(baseStateDir) {
   const stateDir = baseStateDir ?? resolveStateDir();
-  return import_node_path33.default.join(stateDir, "artifacts");
+  return import_node_path35.default.join(stateDir, "artifacts");
 }
 function ensureDir(dir) {
-  import_node_fs19.default.mkdirSync(dir, { recursive: true, mode: 448 });
+  import_node_fs21.default.mkdirSync(dir, { recursive: true, mode: 448 });
   try {
-    import_node_fs19.default.chmodSync(dir, 448);
+    import_node_fs21.default.chmodSync(dir, 448);
   } catch {
   }
 }
@@ -68083,7 +68725,7 @@ function safeArtifactPath(artifactsDir, id) {
   if (!id || typeof id !== "string" || !/^[a-zA-Z0-9_-]+$/.test(id)) {
     throw new Error("Invalid artifact id");
   }
-  return import_node_path33.default.join(artifactsDir, `${id}.json`);
+  return import_node_path35.default.join(artifactsDir, `${id}.json`);
 }
 async function writeLocalArtifact(id, payload, baseStateDir) {
   const artifactsDir = resolveArtifactsDir(baseStateDir);
@@ -68126,7 +68768,7 @@ async function cleanArtifacts(baseStateDir, options) {
   let deletedBytes = 0;
   for (const name of entries) {
     if (!name.endsWith(".json")) continue;
-    const filePath = import_node_path33.default.join(artifactsDir, name);
+    const filePath = import_node_path35.default.join(artifactsDir, name);
     try {
       const stat3 = await import_promises14.default.stat(filePath);
       if (now - stat3.mtimeMs > maxAgeMs) {
@@ -68353,16 +68995,16 @@ function agentIdleMs(provider) {
 }
 
 // src/thread-index.ts
-var import_node_fs20 = require("node:fs");
-var import_node_path34 = __toESM(require("node:path"), 1);
+var import_node_fs22 = require("node:fs");
+var import_node_path36 = __toESM(require("node:path"), 1);
 function threadIndexPath(stateDir) {
-  return import_node_path34.default.join(stateDir, "threads.json");
+  return import_node_path36.default.join(stateDir, "threads.json");
 }
 function loadThreadIndex(stateDir, ttlMs, now) {
   const result = /* @__PURE__ */ new Map();
   let parsed;
   try {
-    parsed = JSON.parse((0, import_node_fs20.readFileSync)(threadIndexPath(stateDir), "utf8"));
+    parsed = JSON.parse((0, import_node_fs22.readFileSync)(threadIndexPath(stateDir), "utf8"));
   } catch {
     return result;
   }
@@ -68387,8 +69029,8 @@ function loadThreadIndex(stateDir, ttlMs, now) {
   return result;
 }
 function saveThreadIndex(stateDir, entries) {
-  (0, import_node_fs20.mkdirSync)(stateDir, { recursive: true, mode: 448 });
-  (0, import_node_fs20.writeFileSync)(threadIndexPath(stateDir), `${JSON.stringify(Object.fromEntries(entries), null, 2)}
+  (0, import_node_fs22.mkdirSync)(stateDir, { recursive: true, mode: 448 });
+  (0, import_node_fs22.writeFileSync)(threadIndexPath(stateDir), `${JSON.stringify(Object.fromEntries(entries), null, 2)}
 `, {
     encoding: "utf8",
     mode: 384
@@ -68524,9 +69166,9 @@ function createToolBusyClock(opts) {
 
 // src/remote-phone-relay.ts
 var import_node_events3 = require("node:events");
-var import_node_fs21 = require("node:fs");
-var import_node_os16 = require("node:os");
-var import_node_path35 = require("node:path");
+var import_node_fs23 = require("node:fs");
+var import_node_os17 = require("node:os");
+var import_node_path37 = require("node:path");
 
 // ../../node_modules/.pnpm/@noble+hashes@1.3.3/node_modules/@noble/hashes/esm/cryptoNode.js
 var nc = __toESM(require("node:crypto"), 1);
@@ -68989,7 +69631,7 @@ var SHA256 = class extends SHA2 {
     this.buffer.fill(0);
   }
 };
-var sha2562 = /* @__PURE__ */ wrapConstructor(() => new SHA256());
+var sha2563 = /* @__PURE__ */ wrapConstructor(() => new SHA256());
 
 // ../../node_modules/.pnpm/@noble+curves@1.3.0/node_modules/@noble/curves/esm/abstract/utils.js
 var _0n = BigInt(0);
@@ -69133,7 +69775,7 @@ function validateObject(object3, validators, optValidators = {}) {
 // ../../packages/director-e2e/dist/verifier.js
 var RELAY_AUTH_LABEL = utf8ToBytes("relay-auth");
 function relayAuth(secret) {
-  return hmac(sha2562, secret, RELAY_AUTH_LABEL);
+  return hmac(sha2563, secret, RELAY_AUTH_LABEL);
 }
 
 // ../../node_modules/.pnpm/@noble+hashes@1.3.3/node_modules/@noble/hashes/esm/_u64.js
@@ -70467,16 +71109,16 @@ var hkdf = (hash3, ikm, salt, info, length) => expand(hash3, extract(hash3, ikm,
 
 // ../../packages/director-e2e/dist/kdf.js
 function deriveMasterKey(ikm, salt, info) {
-  return hkdf(sha2562, ikm, salt, info, 32);
+  return hkdf(sha2563, ikm, salt, info, 32);
 }
 function deriveDirectionKeys(masterKey) {
   return {
-    p2a: hkdf(sha2562, masterKey, void 0, utf8ToBytes("dir:phone->agent"), 32),
-    a2p: hkdf(sha2562, masterKey, void 0, utf8ToBytes("dir:agent->phone"), 32)
+    p2a: hkdf(sha2563, masterKey, void 0, utf8ToBytes("dir:phone->agent"), 32),
+    a2p: hkdf(sha2563, masterKey, void 0, utf8ToBytes("dir:agent->phone"), 32)
   };
 }
 function confirmationMac(masterKey, role, transcript) {
-  return hmac(sha2562, masterKey, concatBytes(utf8ToBytes(`confirm:${role}`), transcript));
+  return hmac(sha2563, masterKey, concatBytes(utf8ToBytes(`confirm:${role}`), transcript));
 }
 
 // ../../node_modules/.pnpm/@noble+ciphers@0.4.1/node_modules/@noble/ciphers/esm/utils.js
@@ -72097,9 +72739,9 @@ var DirectorRelay = class {
 
 // src/remote-phone-relay.ts
 function loadOrCreateAgentDeviceKey() {
-  const path31 = (0, import_node_path35.join)((0, import_node_os16.homedir)(), ".mrrlin", "agent-device-key");
+  const path33 = (0, import_node_path37.join)((0, import_node_os17.homedir)(), ".mrrlin", "agent-device-key");
   try {
-    const raw = JSON.parse((0, import_node_fs21.readFileSync)(path31, "utf8"));
+    const raw = JSON.parse((0, import_node_fs23.readFileSync)(path33, "utf8"));
     if (typeof raw.priv === "string" && typeof raw.pub === "string") {
       return { privateKey: fromBase64Url(raw.priv), publicKey: fromBase64Url(raw.pub) };
     }
@@ -72107,9 +72749,9 @@ function loadOrCreateAgentDeviceKey() {
   }
   const kp = generateIdentityKeyPair();
   try {
-    (0, import_node_fs21.mkdirSync)((0, import_node_path35.join)((0, import_node_os16.homedir)(), ".mrrlin"), { recursive: true });
-    (0, import_node_fs21.writeFileSync)(
-      path31,
+    (0, import_node_fs23.mkdirSync)((0, import_node_path37.join)((0, import_node_os17.homedir)(), ".mrrlin"), { recursive: true });
+    (0, import_node_fs23.writeFileSync)(
+      path33,
       JSON.stringify({ priv: toBase64Url(kp.privateKey), pub: toBase64Url(kp.publicKey) }),
       { mode: 384 }
     );
@@ -72117,10 +72759,10 @@ function loadOrCreateAgentDeviceKey() {
   }
   return kp;
 }
-var AGENT_PAIRING_PATH = (0, import_node_path35.join)((0, import_node_os16.homedir)(), ".mrrlin", "agent-pairing.json");
+var AGENT_PAIRING_PATH = (0, import_node_path37.join)((0, import_node_os17.homedir)(), ".mrrlin", "agent-pairing.json");
 function loadAgentPairing() {
   try {
-    const raw = JSON.parse((0, import_node_fs21.readFileSync)(AGENT_PAIRING_PATH, "utf8"));
+    const raw = JSON.parse((0, import_node_fs23.readFileSync)(AGENT_PAIRING_PATH, "utf8"));
     if (typeof raw.channelId === "string" && typeof raw.agentControlSecret === "string" && typeof raw.relayAuth === "string" && typeof raw.peerIdentityKey === "string") {
       return {
         channelId: raw.channelId,
@@ -72135,8 +72777,8 @@ function loadAgentPairing() {
 }
 function saveAgentPairing(record2) {
   try {
-    (0, import_node_fs21.mkdirSync)((0, import_node_path35.join)((0, import_node_os16.homedir)(), ".mrrlin"), { recursive: true });
-    (0, import_node_fs21.writeFileSync)(AGENT_PAIRING_PATH, JSON.stringify(record2), { mode: 384 });
+    (0, import_node_fs23.mkdirSync)((0, import_node_path37.join)((0, import_node_os17.homedir)(), ".mrrlin"), { recursive: true });
+    (0, import_node_fs23.writeFileSync)(AGENT_PAIRING_PATH, JSON.stringify(record2), { mode: 384 });
   } catch {
   }
 }
@@ -72314,14 +72956,14 @@ async function renderPairingQrSvg(payload) {
 }
 
 // src/executor-server.ts
-var import_node_child_process22 = require("node:child_process");
+var import_node_child_process24 = require("node:child_process");
 function defaultReadinessRunner(provider) {
   if (provider !== "codex" && provider !== "claude" && provider !== "agy") {
     throw new Error(`unsupported executor provider: ${String(provider)}`);
   }
   const command = provider === "claude" ? "claude" : provider === "agy" ? "agy" : "codex";
   return (args) => {
-    const r = (0, import_node_child_process22.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3, shell: true });
+    const r = (0, import_node_child_process24.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3, shell: true });
     return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
   };
 }
@@ -72375,7 +73017,7 @@ async function startExecutorServer(opts) {
   const rawBaseEnv = opts.env ?? (isVerification ? buildVerificationEnv(process.env) : process.env);
   const baseEnv = isVerification ? buildVerificationEnv(rawBaseEnv) : { ...rawBaseEnv };
   const childEnv = withDisabledGitHooksEnv(baseEnv, opts.disabledGitHooksDir);
-  const baseSpawn = opts.spawn ?? import_node_child_process22.spawn;
+  const baseSpawn = opts.spawn ?? import_node_child_process24.spawn;
   const hasExtraFd = opts.brokerSocket != null || opts.brokerSocketFd != null;
   const spawnFn = (cmd, args = [], spawnOpts = {}) => {
     const argList = [...args];
@@ -72519,10 +73161,10 @@ var import_node_http2 = __toESM(require("node:http"), 1);
 var import_node_https2 = __toESM(require("node:https"), 1);
 var import_node_net2 = __toESM(require("node:net"), 1);
 var import_node_tls = __toESM(require("node:tls"), 1);
-var import_node_fs22 = __toESM(require("node:fs"), 1);
-var import_node_os17 = __toESM(require("node:os"), 1);
-var import_node_path36 = __toESM(require("node:path"), 1);
-var import_node_crypto19 = __toESM(require("node:crypto"), 1);
+var import_node_fs24 = __toESM(require("node:fs"), 1);
+var import_node_os18 = __toESM(require("node:os"), 1);
+var import_node_path38 = __toESM(require("node:path"), 1);
+var import_node_crypto20 = __toESM(require("node:crypto"), 1);
 var import_node_zlib = __toESM(require("node:zlib"), 1);
 
 // src/verification-egress-policy.ts
@@ -72860,20 +73502,20 @@ function reauthorizeRedirect(params) {
 // src/verification-broker.ts
 var TEST_CONNECT_OVERRIDE_SYMBOL = Symbol.for("mrrlin.test.connectOverride");
 async function createVerificationBrokerSession(options) {
-  const nonce = import_node_crypto19.default.randomBytes(16).toString("hex");
+  const nonce = import_node_crypto20.default.randomBytes(16).toString("hex");
   let createdDir = null;
   let socketPath = options.socketPath;
   if (!socketPath) {
-    createdDir = import_node_fs22.default.mkdtempSync(import_node_path36.default.join(import_node_os17.default.tmpdir(), "mrrlin-broker-"));
-    import_node_fs22.default.chmodSync(createdDir, 448);
-    socketPath = import_node_path36.default.join(
+    createdDir = import_node_fs24.default.mkdtempSync(import_node_path38.default.join(import_node_os18.default.tmpdir(), "mrrlin-broker-"));
+    import_node_fs24.default.chmodSync(createdDir, 448);
+    socketPath = import_node_path38.default.join(
       createdDir,
       `broker-${options.runId.replace(/[^a-zA-Z0-9_-]/g, "")}-${nonce}.sock`
     );
   }
   try {
-    if (import_node_fs22.default.existsSync(socketPath)) {
-      import_node_fs22.default.unlinkSync(socketPath);
+    if (import_node_fs24.default.existsSync(socketPath)) {
+      import_node_fs24.default.unlinkSync(socketPath);
     }
   } catch {
   }
@@ -73161,12 +73803,12 @@ async function createVerificationBrokerSession(options) {
   } catch (err) {
     server.close();
     try {
-      if (import_node_fs22.default.existsSync(socketPath)) import_node_fs22.default.unlinkSync(socketPath);
+      if (import_node_fs24.default.existsSync(socketPath)) import_node_fs24.default.unlinkSync(socketPath);
     } catch (error51) {
     }
     if (createdDir) {
       try {
-        import_node_fs22.default.rmSync(createdDir, { recursive: true, force: true });
+        import_node_fs24.default.rmSync(createdDir, { recursive: true, force: true });
       } catch (error51) {
       }
     }
@@ -73194,14 +73836,14 @@ async function createVerificationBrokerSession(options) {
         server.close(() => resolve2());
       });
       try {
-        if (import_node_fs22.default.existsSync(socketPath)) {
-          import_node_fs22.default.unlinkSync(socketPath);
+        if (import_node_fs24.default.existsSync(socketPath)) {
+          import_node_fs24.default.unlinkSync(socketPath);
         }
       } catch {
       }
       if (createdDir) {
         try {
-          import_node_fs22.default.rmSync(createdDir, { recursive: true, force: true });
+          import_node_fs24.default.rmSync(createdDir, { recursive: true, force: true });
         } catch {
         }
       }
@@ -73697,9 +74339,9 @@ function extractVerificationSection(markdown) {
 }
 
 // src/director-reseed.ts
-var import_node_fs23 = require("node:fs");
+var import_node_fs25 = require("node:fs");
 var import_node_readline2 = require("node:readline");
-var import_node_path37 = require("node:path");
+var import_node_path39 = require("node:path");
 function estimateTokens(s) {
   return Buffer.byteLength(s, "utf8");
 }
@@ -73848,9 +74490,9 @@ async function readSessionRows(logsDir, files, sessionIds) {
   const lines2 = [];
   let missingFiles = 0;
   for (const f of files) {
-    const filePath = (0, import_node_path37.join)(logsDir, f);
+    const filePath = (0, import_node_path39.join)(logsDir, f);
     try {
-      const stream = (0, import_node_fs23.createReadStream)(filePath, { encoding: "utf8" });
+      const stream = (0, import_node_fs25.createReadStream)(filePath, { encoding: "utf8" });
       const rl = (0, import_node_readline2.createInterface)({ input: stream, crlfDelay: Infinity });
       try {
         for await (const line of rl) {
@@ -73874,18 +74516,18 @@ async function readSessionRows(logsDir, files, sessionIds) {
 }
 
 // src/external-agents-scrub.ts
-var import_node_fs24 = __toESM(require("node:fs"), 1);
-var import_node_os18 = __toESM(require("node:os"), 1);
-var import_node_path38 = __toESM(require("node:path"), 1);
+var import_node_fs26 = __toESM(require("node:fs"), 1);
+var import_node_os19 = __toESM(require("node:os"), 1);
+var import_node_path40 = __toESM(require("node:path"), 1);
 var REDACTION = "[REDACTED]";
 var SHORT_VALUE_THRESHOLD = 8;
-var KEYS_ENV_PATH = () => import_node_path38.default.join(import_node_os18.default.homedir(), ".local", "state", "external-agents", "keys.env");
+var KEYS_ENV_PATH = () => import_node_path40.default.join(import_node_os19.default.homedir(), ".local", "state", "external-agents", "keys.env");
 var keysEnvCache = null;
 function readKeysEnv() {
   const filePath = KEYS_ENV_PATH();
   let mtimeMs = 0;
   try {
-    mtimeMs = import_node_fs24.default.statSync(filePath).mtimeMs;
+    mtimeMs = import_node_fs26.default.statSync(filePath).mtimeMs;
   } catch {
     mtimeMs = 0;
   }
@@ -73894,7 +74536,7 @@ function readKeysEnv() {
   }
   const map2 = /* @__PURE__ */ new Map();
   try {
-    const content = import_node_fs24.default.readFileSync(filePath, "utf8");
+    const content = import_node_fs26.default.readFileSync(filePath, "utf8");
     for (const rawLine of content.split(/\r?\n/)) {
       const line = rawLine.trim();
       if (line === "" || line.startsWith("#")) continue;
@@ -74312,7 +74954,7 @@ function addBridgeModel(target, model) {
 }
 function readTextIfExists(filePath) {
   try {
-    return import_node_fs25.default.readFileSync(filePath, "utf8");
+    return import_node_fs27.default.readFileSync(filePath, "utf8");
   } catch {
     return null;
   }
@@ -74323,9 +74965,9 @@ function readKnownGptSlugsFromTomlFile(filePath) {
   return Array.from(raw.matchAll(/^\s*model\s*=\s*"([^"]+)"/gm)).map((match) => match[1]?.trim() ?? "").filter(isSelectableModelSlug);
 }
 function readCodexFallbackModels() {
-  const codexHome = process.env.CODEX_HOME?.trim() || import_node_path40.default.join(import_node_os20.default.homedir(), ".codex");
+  const codexHome = process.env.CODEX_HOME?.trim() || import_node_path42.default.join(import_node_os21.default.homedir(), ".codex");
   const models = /* @__PURE__ */ new Map();
-  const cachePath = import_node_path40.default.join(codexHome, "models_cache.json");
+  const cachePath = import_node_path42.default.join(codexHome, "models_cache.json");
   const cacheRaw = readTextIfExists(cachePath);
   if (cacheRaw) {
     try {
@@ -74375,7 +75017,7 @@ function readCodexFallbackModels() {
       );
     }
   }
-  for (const slug of readKnownGptSlugsFromTomlFile(import_node_path40.default.join(codexHome, "config.toml"))) {
+  for (const slug of readKnownGptSlugsFromTomlFile(import_node_path42.default.join(codexHome, "config.toml"))) {
     addBridgeModel(
       models,
       mapBridgeModel({
@@ -74389,11 +75031,11 @@ function readCodexFallbackModels() {
       })
     );
   }
-  const automationsDir = import_node_path40.default.join(codexHome, "automations");
+  const automationsDir = import_node_path42.default.join(codexHome, "automations");
   try {
-    for (const entry of import_node_fs25.default.readdirSync(automationsDir, { withFileTypes: true })) {
+    for (const entry of import_node_fs27.default.readdirSync(automationsDir, { withFileTypes: true })) {
       if (!entry.isDirectory()) continue;
-      for (const slug of readKnownGptSlugsFromTomlFile(import_node_path40.default.join(automationsDir, entry.name, "automation.toml"))) {
+      for (const slug of readKnownGptSlugsFromTomlFile(import_node_path42.default.join(automationsDir, entry.name, "automation.toml"))) {
         addBridgeModel(
           models,
           mapBridgeModel({
@@ -74413,18 +75055,18 @@ function readCodexFallbackModels() {
   return [...models.values()];
 }
 function selfUpdateInboxItemId(offeredVersion) {
-  if (!offeredVersion) return `II-MCPUPD-${(0, import_node_crypto20.randomUUID)()}`;
+  if (!offeredVersion) return `II-MCPUPD-${(0, import_node_crypto21.randomUUID)()}`;
   if (/^[A-Za-z0-9._-]+$/.test(offeredVersion)) return `II-MCPUPD-${offeredVersion}`;
-  const hash3 = import_node_crypto20.default.createHash("sha256").update(offeredVersion).digest("hex").slice(0, 10);
+  const hash3 = import_node_crypto21.default.createHash("sha256").update(offeredVersion).digest("hex").slice(0, 10);
   return `II-MCPUPD-${offeredVersion.replace(/[^A-Za-z0-9._-]/g, "-")}-${hash3}`;
 }
 function neutralCheckoutCwd(stateDir) {
-  const dir = import_node_path40.default.join(stateDir, "no-checkout");
+  const dir = import_node_path42.default.join(stateDir, "no-checkout");
   try {
-    import_node_fs25.default.mkdirSync(dir, { recursive: true });
-    if (!import_node_fs25.default.existsSync(import_node_path40.default.join(dir, ".git"))) {
+    import_node_fs27.default.mkdirSync(dir, { recursive: true });
+    if (!import_node_fs27.default.existsSync(import_node_path42.default.join(dir, ".git"))) {
       try {
-        (0, import_node_child_process23.spawnSync)("git", ["init", "-b", "main"], { cwd: dir, stdio: "ignore" });
+        (0, import_node_child_process25.spawnSync)("git", ["init", "-b", "main"], { cwd: dir, stdio: "ignore" });
       } catch {
       }
     }
@@ -74457,7 +75099,7 @@ function buildThreadStartParams(msg, config2, desiredModel) {
     "- Reply in the operator's language for the whole turn (questions, task scopes, summaries).",
     "- Keep chat short and human. No code blocks, DDL, terminal output, local filesystem paths, internal job/inbox UUIDs or alert markers in chat \u2014 put long content into a wiki page and link it.",
     "- Spec pages in folder Specs must contain `## Acceptance criteria` followed by `- [ ]` items.",
-    "- AGNOSTIC DELIVERY MANDATE: Mrrlin is an Agnostic Delivery Platform decoupled from mandatory GitHub. Delivery is routed strictly by artifact kind: (1) document -> wiki (specs, policies, legal compliance playbooks, project documentation); (2) page -> publish (web pages, landing pages, interactive HTML previews); (3) file_set -> artifacts (file uploads, bundles, build zips); (4) message -> send (outbound webhooks, Slack, notifications); (5) code_change -> repo_host (git / GitHub ONLY when modifying source repository code). NEVER stall or refuse non-code tasks (such as marketing landing pages, GDPR checklists, or legal compliance playbooks) by demanding a Git repository. Non-code tasks deliver directly via page (Publish) or document (Wiki).",
+    "- AGNOSTIC DELIVERY MANDATE: Mrrlin is an Agnostic Delivery Platform decoupled from mandatory GitHub. Delivery is routed strictly by artifact kind: (1) document -> wiki; (2) page -> publish (web pages, landing pages, interactive HTML previews); (3) file_set -> artifacts (file uploads, bundles, build zips); (4) message -> send (outbound webhooks, Slack, notifications); (5) code_change -> repo_host (GitHub; with no GitHub, a local git repo on the operator's computer: register_local_checkout without repo, init_local_repo only after an explicit yes, record their push choice with set_project_code_host). NEVER stall or refuse non-code tasks by demanding a Git repository. Non-code tasks deliver directly via page (Publish) or document (Wiki).",
     "- 3-TIER COMMERCIAL SCOPE GOVERNANCE: Treat tasks by domain governance tier. (1) Tier 1 Core Tech Delivery (backend, frontend, SRE, databases): decompose autonomously into repository code changes (when a repo is bound) or code artifacts. (2) Tier 2 Planning & Content (landing pages, SEO, marketing): create actionable drafts; when details such as a phone number, brand name or copy are missing, do not loop on questions \u2014 create the task, record `## Placeholders: [NEED_INPUT: <item>]` in the Wiki spec, and set `autonomyLevel: 'human_review'`. (3) Tier 3 Guardrailed Advisory (high risk: privacy/GDPR, security/SOC 2, billing, production database migrations, infrastructure): always set `autonomyLevel: 'human_review'`, put the domain's standard safety controls into the spec, and state that irreversible actions need human sign-off.",
     "- INBOX QUESTION RETIREMENT MANDATE \u2014 Retiring answered questions: Before creating a task/plan, retire only pending Inbox questions the operator actually answered. Call `decide_inbox_item(itemId: <exact id>, decidedBy: 'director', verdict: 'acknowledged', answer: <actual answer>)`. Use `verdict: 'rejected', reason: ...` only if moot. Never close an unrelated item.",
     "- CHAT CLARIFICATIONS ARE IN CHAT ONLY: During synchronous interactive Director chat, ask clarifying questions directly in your chat response. DO NOT call `create_inbox_item(kind: 'question')` for routine conversational clarifications in Turn 1 \u2014 Inbox questions are reserved for autonomous background workers or asynchronous gate pauses that occur while the operator is away.",
@@ -74945,9 +75587,9 @@ async function runCollectedAgentTurn(handle, prompt, cwd, baseInstructions) {
 }
 function resolveDefaultBranch(checkoutPath) {
   if (!checkoutPath) return "main";
-  const runGit = (args) => {
+  const runGit2 = (args) => {
     try {
-      return (0, import_node_child_process23.execFileSync)("git", ["-C", checkoutPath, ...args], {
+      return (0, import_node_child_process25.execFileSync)("git", ["-C", checkoutPath, ...args], {
         encoding: "utf8",
         stdio: ["ignore", "pipe", "ignore"],
         timeout: 15e3,
@@ -74957,13 +75599,13 @@ function resolveDefaultBranch(checkoutPath) {
       return null;
     }
   };
-  const symRef = runGit(["symbolic-ref", "refs/remotes/origin/HEAD"]);
+  const symRef = runGit2(["symbolic-ref", "refs/remotes/origin/HEAD"]);
   if (symRef) {
     const prefix = "refs/remotes/origin/";
     const branch = symRef.startsWith(prefix) ? symRef.slice(prefix.length) : symRef;
     if (branch) return branch;
   }
-  const remoteShow = runGit(["remote", "show", "origin"]);
+  const remoteShow = runGit2(["remote", "show", "origin"]);
   if (remoteShow) {
     const match = /HEAD branch:\s*(\S+)/.exec(remoteShow);
     const branch = match?.[1];
@@ -74983,7 +75625,7 @@ async function runOrphanWorktreeSweep(client, opts) {
   const cutoff = Date.now() - worktreeRetentionMs();
   const isReapable = (worktreePath) => {
     try {
-      return import_node_fs25.default.statSync(worktreePath).mtimeMs < cutoff;
+      return import_node_fs27.default.statSync(worktreePath).mtimeMs < cutoff;
     } catch {
       return false;
     }
@@ -75135,7 +75777,7 @@ function createBridgeRequestListener(opts) {
         res.end(JSON.stringify({ ok: false, error: "Origin not allowed." }));
         return;
       }
-      const nonce = import_node_crypto20.default.randomBytes(16).toString("base64url");
+      const nonce = import_node_crypto21.default.randomBytes(16).toString("base64url");
       res.writeHead(200, { "content-type": "application/json" });
       const publicHost = host === "0.0.0.0" ? "127.0.0.1" : host;
       res.end(JSON.stringify({ ok: true, wsUrl: `ws://${publicHost}:${port}/ws`, token, nonce }));
@@ -75439,7 +76081,7 @@ function createBridgeMessageHandler(deps) {
       }
     }
     socket.on("message", async (data) => {
-      const spanId = import_node_crypto20.default.randomUUID();
+      const spanId = import_node_crypto21.default.randomUUID();
       if (logCtx) {
         logCtx.span.id = spanId;
         logCtx.span.at = Date.now();
@@ -75501,7 +76143,7 @@ function createBridgeMessageHandler(deps) {
           sendForSpan({ type: "checkout-state", ok: false, error: { code: "invalid_input", fields: { projectSlug: "required" } } });
           return;
         }
-        const state = readCheckoutState(deps.checkoutRegistry, projectSlug, import_node_os20.default.hostname());
+        const state = readCheckoutState(deps.checkoutRegistry, projectSlug, import_node_os21.default.hostname());
         if (!state) {
           sendForSpan({ type: "checkout-state", ok: false, error: { code: "checkout_missing" } });
           return;
@@ -75533,7 +76175,7 @@ function createBridgeMessageHandler(deps) {
         const result = registerCheckout(
           deps.checkoutRegistry,
           { projectSlug, path: typeof msg.path === "string" ? msg.path : "", repo },
-          import_node_os20.default.hostname()
+          import_node_os21.default.hostname()
         );
         if (!result.ok) {
           sendForSpan({ type: "checkout-register", ok: false, error: { code: result.code, detail: result.detail } });
@@ -76046,7 +76688,7 @@ function createBridgeMessageHandler(deps) {
       let desiredInstructionHash = null;
       try {
         const startParams = deps.buildStartParams(msg, desiredModel);
-        desiredInstructionHash = import_node_crypto20.default.createHash("sha256").update(startParams.baseInstructions ?? "").digest("hex");
+        desiredInstructionHash = import_node_crypto21.default.createHash("sha256").update(startParams.baseInstructions ?? "").digest("hex");
         if (!thread) {
           const newThread = {
             threadId: "",
@@ -76123,7 +76765,7 @@ function createBridgeMessageHandler(deps) {
       thread.inFlight = true;
       pendingTurnSessions.delete(directorSessionId);
       thread.replay = createReplayBuffer({
-        turnId: (0, import_node_crypto20.randomUUID)(),
+        turnId: (0, import_node_crypto21.randomUUID)(),
         spanId,
         ...deps.retentionMs !== void 0 ? { retentionMs: deps.retentionMs } : {},
         ...deps.ackLingerMs !== void 0 ? { ackLingerMs: deps.ackLingerMs } : {}
@@ -76738,7 +77380,7 @@ function parseConfig() {
 }
 function scanForOtherBridges() {
   try {
-    const result = (0, import_node_child_process23.spawnSync)("pgrep", ["-f", "mrrlin-mcp director-bridge"], {
+    const result = (0, import_node_child_process25.spawnSync)("pgrep", ["-f", "mrrlin-mcp director-bridge"], {
       encoding: "utf8"
     });
     if (result.status !== 0) return [];
@@ -76934,8 +77576,10 @@ async function startDirectorBridge() {
     codexCwd: config2.codexCwd,
     codexExecutable: config2.codexExecutable,
     checkoutRegistry,
-    worktreeRoot: import_node_path40.default.join(config2.stateDir, "worktrees"),
-    locksDir: import_node_path40.default.join(config2.stateDir, "locks"),
+    worktreeRoot: import_node_path42.default.join(config2.stateDir, "worktrees"),
+    locksDir: import_node_path42.default.join(config2.stateDir, "locks"),
+    // local-git-delivery: bridge-local evidence (checkout realpath, build logs) that never leaves this machine.
+    localEvidenceDir: import_node_path42.default.join(config2.stateDir, "local-evidence"),
     // Wire the executor server for code-execution runs. Each run gets its own provider process
     // (app-server for codex, a resident CLI child for claude) at the run worktree, running
     // UNRESTRICTED from the real operator config (owner no-sandbox decision — auth + mrrlin MCP
@@ -76952,7 +77596,7 @@ async function startDirectorBridge() {
         // The run's provider process carries exactly its own project (or none), so its Mrrlin MCP
         // server is bound to it and never to whatever the bridge's environment names.
         env: threadProcessEnv(process.env, directorThreadEnv(projectSlug)),
-        disabledGitHooksDir: prepareDisabledGitHooksDir(import_node_path40.default.join(config2.stateDir, "locks"), import_node_path40.default.basename(worktreePath)),
+        disabledGitHooksDir: prepareDisabledGitHooksDir(import_node_path42.default.join(config2.stateDir, "locks"), import_node_path42.default.basename(worktreePath)),
         provider: providerId
       });
       return { handle: executor.handle, dispose: executor.dispose };
@@ -76983,10 +77627,10 @@ async function startDirectorBridge() {
       runVerificationTurn: createRunVerificationTurn({
         startSandbox: async (egressDomains, providerId, opts) => {
           opts?.wrapCommand?.(["node"]);
-          const scratchDir = import_node_fs25.default.mkdtempSync(import_node_path40.default.join(import_node_os20.default.tmpdir(), "mrrlin-verify-"));
+          const scratchDir = import_node_fs27.default.mkdtempSync(import_node_path42.default.join(import_node_os21.default.tmpdir(), "mrrlin-verify-"));
           const executor = await startExecutorServer({
             worktree: scratchDir,
-            disabledGitHooksDir: prepareDisabledGitHooksDir(import_node_path40.default.join(config2.stateDir, "locks"), import_node_path40.default.basename(scratchDir)),
+            disabledGitHooksDir: prepareDisabledGitHooksDir(import_node_path42.default.join(config2.stateDir, "locks"), import_node_path42.default.basename(scratchDir)),
             provider: providerId,
             wrapCommand: opts?.wrapCommand,
             brokerSocket: opts?.brokerSocket,
@@ -76999,7 +77643,7 @@ async function startDirectorBridge() {
             dispose: () => {
               executor.dispose();
               try {
-                import_node_fs25.default.rmSync(scratchDir, { recursive: true, force: true });
+                import_node_fs27.default.rmSync(scratchDir, { recursive: true, force: true });
               } catch {
               }
             },
@@ -77032,7 +77676,7 @@ async function startDirectorBridge() {
   };
   const sessionSinks = createSessionSinkRegistry();
   const tombstones = /* @__PURE__ */ new Map();
-  const bridgeInstanceId = (0, import_node_crypto20.randomUUID)();
+  const bridgeInstanceId = (0, import_node_crypto21.randomUUID)();
   const asyncConsumerDeps = {
     client,
     run: wrappedTurnLock.run,
@@ -77210,7 +77854,7 @@ async function startDirectorBridge() {
       const files = dayFilesInWindow(/* @__PURE__ */ new Date(), reseedWindowMs);
       filesCount = files.length;
       const sessionIds = [args.directorSessionId, ...args.priorSessionIds];
-      const { lines: lines2, missingFiles } = await readSessionRows(import_node_path40.default.join(config2.stateDir, "logs"), files, sessionIds);
+      const { lines: lines2, missingFiles } = await readSessionRows(import_node_path42.default.join(config2.stateDir, "logs"), files, sessionIds);
       missingFilesCount = missingFiles;
       const extracted = extractItems(lines2, sessionIds);
       items = extracted.items;
@@ -77359,7 +78003,7 @@ async function startDirectorBridge() {
   const bridgeLogger = createBridgeLogger(config2.stateDir, process.env);
   let bridgeBinShaShort = "unknown00000";
   try {
-    bridgeBinShaShort = import_node_crypto20.default.createHash("sha256").update(import_node_fs25.default.readFileSync(process.argv[1] ?? "")).digest("hex").slice(0, 12);
+    bridgeBinShaShort = import_node_crypto21.default.createHash("sha256").update(import_node_fs27.default.readFileSync(process.argv[1] ?? "")).digest("hex").slice(0, 12);
   } catch {
   }
   attachBridgeWss(server, {
@@ -77495,8 +78139,8 @@ async function startDirectorBridge() {
       );
       void runOrphanWorktreeSweep(client, {
         checkoutRegistry,
-        worktreeRoot: import_node_path40.default.join(config2.stateDir, "worktrees"),
-        locksDir: import_node_path40.default.join(config2.stateDir, "locks")
+        worktreeRoot: import_node_path42.default.join(config2.stateDir, "worktrees"),
+        locksDir: import_node_path42.default.join(config2.stateDir, "locks")
       });
       {
         const { retainedBuffers, retainedBytes, tombstonesRemoved } = sweepReplayBuffers(threads, tombstones, {
@@ -77800,7 +78444,7 @@ function timingSafeTokenEqual(provided, expected) {
   const a = Buffer.from(provided);
   const b = Buffer.from(expected);
   if (a.length !== b.length) return false;
-  return import_node_crypto20.default.timingSafeEqual(a, b);
+  return import_node_crypto21.default.timingSafeEqual(a, b);
 }
 function readDispatchBody(req) {
   return new Promise((resolve2, reject) => {
@@ -77822,15 +78466,15 @@ function readDispatchBody(req) {
 function readOrCreateBridgeToken(stateDir) {
   const explicit = (process.env.MRRLIN_DIRECTOR_BRIDGE_TOKEN ?? "").trim();
   if (explicit) return explicit;
-  const tokenPath = import_node_path40.default.join(stateDir, "token.txt");
+  const tokenPath = import_node_path42.default.join(stateDir, "token.txt");
   try {
-    const existing = import_node_fs25.default.readFileSync(tokenPath, "utf8").trim();
+    const existing = import_node_fs27.default.readFileSync(tokenPath, "utf8").trim();
     if (existing) return existing;
   } catch {
   }
-  import_node_fs25.default.mkdirSync(stateDir, { recursive: true, mode: 448 });
-  const token = import_node_crypto20.default.randomBytes(32).toString("base64url");
-  import_node_fs25.default.writeFileSync(tokenPath, `${token}
+  import_node_fs27.default.mkdirSync(stateDir, { recursive: true, mode: 448 });
+  const token = import_node_crypto21.default.randomBytes(32).toString("base64url");
+  import_node_fs27.default.writeFileSync(tokenPath, `${token}
 `, { mode: 384 });
   return token;
 }
@@ -78738,9 +79382,9 @@ function runSetCredential(args) {
 }
 
 // src/install-service.ts
-var import_node_os21 = __toESM(require("node:os"), 1);
-var import_node_fs26 = require("node:fs");
-var import_node_path41 = __toESM(require("node:path"), 1);
+var import_node_os22 = __toESM(require("node:os"), 1);
+var import_node_fs28 = require("node:fs");
+var import_node_path43 = __toESM(require("node:path"), 1);
 function parseEnvLine(line, env) {
   const trimmed = line.trim();
   if (!trimmed || trimmed === "}" || trimmed === "},") return;
@@ -79129,7 +79773,7 @@ function performConfigBackup(deps, ecoPath, existingText) {
       deps.log("Service config backup failed.");
       return;
     }
-    const dir = import_node_path41.default.dirname(ecoPath);
+    const dir = import_node_path43.default.dirname(ecoPath);
     let files;
     try {
       files = deps.listDir(dir);
@@ -79141,7 +79785,7 @@ function performConfigBackup(deps, ecoPath, existingText) {
       deps.log("Service config backup failed.");
       return;
     }
-    const base = import_node_path41.default.basename(ecoPath);
+    const base = import_node_path43.default.basename(ecoPath);
     const backupRegex = new RegExp(`^${escapeRegex2(base)}\\.bak-\\d{4}-\\d{2}-\\d{2}T\\d{2}-\\d{2}-\\d{2}-\\d{3}Z$`);
     const existingBackups = files.filter((f) => backupRegex.test(f));
     if (existingBackups.length >= 10) {
@@ -79176,7 +79820,7 @@ function performConfigBackup(deps, ecoPath, existingText) {
 var SYSTEM_PATH_DIRS = ["/usr/bin", "/bin", "/usr/sbin", "/sbin"];
 function defaultHomeOwnerUid(home) {
   try {
-    return (0, import_node_fs26.statSync)(home).uid;
+    return (0, import_node_fs28.statSync)(home).uid;
   } catch {
     return null;
   }
@@ -79217,11 +79861,11 @@ function installService(deps) {
     deps.log(resolved.reason);
     return { ok: false };
   }
-  const home = deps.env.HOME ?? import_node_os21.default.homedir();
+  const home = deps.env.HOME ?? import_node_os22.default.homedir();
   const user = resolveBridgeUser({
     env: deps.env,
     home,
-    userInfo: deps.userInfo ?? (() => import_node_os21.default.userInfo()),
+    userInfo: deps.userInfo ?? (() => import_node_os22.default.userInfo()),
     homeOwnerUid: deps.homeOwnerUid ?? defaultHomeOwnerUid,
     log: deps.log
   });
@@ -79242,12 +79886,12 @@ function installService(deps) {
   const claudeBin = deps.which("claude");
   const agyBin = deps.which("agy");
   const resolvedBins = [...bins, claudeBin, agyBin].filter((b) => b !== null);
-  const isWin = import_node_os21.default.platform() === "win32";
-  const systemDirs = isWin ? (deps.env.PATH || "").split(import_node_path41.default.delimiter).filter(Boolean) : SYSTEM_PATH_DIRS;
+  const isWin = import_node_os22.default.platform() === "win32";
+  const systemDirs = isWin ? (deps.env.PATH || "").split(import_node_path43.default.delimiter).filter(Boolean) : SYSTEM_PATH_DIRS;
   const pathEnv = Array.from(
-    /* @__PURE__ */ new Set([...resolvedBins.map((b) => import_node_path41.default.dirname(b)), ...systemDirs])
-  ).join(import_node_path41.default.delimiter);
-  const ecoPath = import_node_path41.default.join(home, ".mrrlin", "ecosystem.config.cjs");
+    /* @__PURE__ */ new Set([...resolvedBins.map((b) => import_node_path43.default.dirname(b)), ...systemDirs])
+  ).join(import_node_path43.default.delimiter);
+  const ecoPath = import_node_path43.default.join(home, ".mrrlin", "ecosystem.config.cjs");
   const existingText = deps.readFile ? deps.readFile(ecoPath) : null;
   const parseResult = parseExistingEcosystemConfig(existingText);
   if (parseResult.kind === "rejected") {
@@ -79325,14 +79969,14 @@ function uninstallService(deps) {
 
 // src/uninstall-codex.ts
 var import_promises17 = __toESM(require("node:fs/promises"), 1);
-var import_node_os22 = __toESM(require("node:os"), 1);
-var import_node_path42 = __toESM(require("node:path"), 1);
+var import_node_os23 = __toESM(require("node:os"), 1);
+var import_node_path44 = __toESM(require("node:path"), 1);
 var toml5 = __toESM(require_toml(), 1);
 function resolveCodexHome3(options) {
   if (options.codexHome) return options.codexHome;
-  if (options.homeDir) return import_node_path42.default.join(options.homeDir, ".codex");
+  if (options.homeDir) return import_node_path44.default.join(options.homeDir, ".codex");
   if (process.env.CODEX_HOME) return process.env.CODEX_HOME;
-  return import_node_path42.default.join(import_node_os22.default.homedir(), ".codex");
+  return import_node_path44.default.join(import_node_os23.default.homedir(), ".codex");
 }
 async function pathExists6(target) {
   try {
@@ -79345,7 +79989,7 @@ async function pathExists6(target) {
 var MRRLIN_BLOCK_RE = /(^|\n)\[mcp_servers\.(?:mrrlin(?:-browser)?|external-agents)(?:\]|\.[^\]\n]*\])[\s\S]*?(?=\n\[|$)/g;
 async function uninstallCodex(options = {}) {
   const codexHome = resolveCodexHome3(options);
-  const configPath = import_node_path42.default.join(codexHome, "config.toml");
+  const configPath = import_node_path44.default.join(codexHome, "config.toml");
   const removePrompts = async () => uninstallPrompts(codexHome, options.promptNames ?? []);
   if (!await pathExists6(configPath)) {
     return { action: "missing", configPath, prompts: await removePrompts() };
@@ -79373,10 +80017,10 @@ async function uninstallCodex(options = {}) {
 }
 async function uninstallPrompts(codexHome, names) {
   if (names.length === 0) return [];
-  const promptsDir = import_node_path42.default.join(codexHome, "prompts");
+  const promptsDir = import_node_path44.default.join(codexHome, "prompts");
   const out = [];
   for (const name of names) {
-    const promptPath = import_node_path42.default.join(promptsDir, `${name}.md`);
+    const promptPath = import_node_path44.default.join(promptsDir, `${name}.md`);
     try {
       await import_promises17.default.unlink(promptPath);
       out.push({ name, action: "removed", promptPath });
@@ -79394,7 +80038,7 @@ async function uninstallPrompts(codexHome, names) {
 
 // src/extract/command.ts
 var import_promises18 = require("node:fs/promises");
-var import_node_path43 = require("node:path");
+var import_node_path45 = require("node:path");
 function parseArgs(args) {
   const map2 = /* @__PURE__ */ new Map();
   for (let i = 0; i < args.length; i++) {
@@ -79431,7 +80075,7 @@ Missing required flag(s): ${missing.join(
   const days = await findSessionDays(deps.stateDir, sessionId);
   const matchingLines = [];
   for (const day of days) {
-    const logPath = (0, import_node_path43.join)(deps.stateDir, "logs", `bridge-${day}.jsonl`);
+    const logPath = (0, import_node_path45.join)(deps.stateDir, "logs", `bridge-${day}.jsonl`);
     let raw;
     try {
       raw = await (0, import_promises18.readFile)(logPath, "utf8");
@@ -79519,29 +80163,29 @@ Missing required flag(s): ${missing.join(
 function augmentProcessPathWithCommonDirs() {
   const isWin = process.platform === "win32";
   if (isWin) return;
-  const home = process.env.HOME || (0, import_node_os23.homedir)();
+  const home = process.env.HOME || (0, import_node_os24.homedir)();
   const candidates = [
-    import_node_path45.default.join(home, ".local", "bin"),
-    import_node_path45.default.join(home, ".cargo", "bin"),
+    import_node_path47.default.join(home, ".local", "bin"),
+    import_node_path47.default.join(home, ".cargo", "bin"),
     "/usr/local/bin",
     "/opt/homebrew/bin"
   ];
-  const existing = (process.env.PATH || "").split(import_node_path45.default.delimiter).filter(Boolean);
+  const existing = (process.env.PATH || "").split(import_node_path47.default.delimiter).filter(Boolean);
   const existingSet = new Set(existing);
-  const toAdd = candidates.filter((d) => !existingSet.has(d) && (0, import_node_fs27.existsSync)(d));
+  const toAdd = candidates.filter((d) => !existingSet.has(d) && (0, import_node_fs29.existsSync)(d));
   if (toAdd.length > 0) {
-    process.env.PATH = [...existing, ...toAdd].join(import_node_path45.default.delimiter);
+    process.env.PATH = [...existing, ...toAdd].join(import_node_path47.default.delimiter);
   }
 }
 augmentProcessPathWithCommonDirs();
 function pm2Runner(args) {
-  const r = (0, import_node_child_process24.spawnSync)("pm2", args, { encoding: "utf8" });
+  const r = (0, import_node_child_process26.spawnSync)("pm2", args, { encoding: "utf8" });
   process.stderr.write(r.stdout ?? "");
   process.stderr.write(r.stderr ?? "");
   return { code: r.status ?? 1, stdout: r.stdout ?? "" };
 }
 function whichBin(bin) {
-  const r = (0, import_node_child_process24.spawnSync)("which", [bin], { encoding: "utf8" });
+  const r = (0, import_node_child_process26.spawnSync)("which", [bin], { encoding: "utf8" });
   const out = (r.stdout ?? "").trim();
   return r.status === 0 && out ? out.split("\n")[0] ?? null : null;
 }
@@ -79549,16 +80193,16 @@ function bootHookStatus() {
   if (process.platform !== "darwin") return { status: "unknown" };
   const uid = process.getuid?.();
   if (uid === void 0 || uid === 0) return { status: "unknown" };
-  const home = process.env.HOME ?? (0, import_node_os23.homedir)();
-  const agents = import_node_path45.default.join(home, "Library", "LaunchAgents");
+  const home = process.env.HOME ?? (0, import_node_os24.homedir)();
+  const agents = import_node_path47.default.join(home, "Library", "LaunchAgents");
   const candidates = [
-    { label: "com.mrrlin.director-bridge", plist: import_node_path45.default.join(agents, "com.mrrlin.director-bridge.plist") },
-    { label: "com.PM2", plist: import_node_path45.default.join(agents, `pm2.${(0, import_node_os23.userInfo)().username}.plist`) }
+    { label: "com.mrrlin.director-bridge", plist: import_node_path47.default.join(agents, "com.mrrlin.director-bridge.plist") },
+    { label: "com.PM2", plist: import_node_path47.default.join(agents, `pm2.${(0, import_node_os24.userInfo)().username}.plist`) }
   ];
   for (const candidate of candidates) {
-    const printed = (0, import_node_child_process24.spawnSync)("launchctl", ["print", `gui/${uid}/${candidate.label}`], { encoding: "utf8" });
+    const printed = (0, import_node_child_process26.spawnSync)("launchctl", ["print", `gui/${uid}/${candidate.label}`], { encoding: "utf8" });
     if (printed.status !== 0) continue;
-    if (!(0, import_node_fs27.existsSync)(candidate.plist)) continue;
+    if (!(0, import_node_fs29.existsSync)(candidate.plist)) continue;
     const out = printed.stdout ?? "";
     const runs = /^\s*runs\s*=\s*(\d+)/m.exec(out);
     const exitCode = /^\s*last exit code\s*=\s*(-?\d+)/m.exec(out);
@@ -79781,7 +80425,7 @@ async function main() {
     }
     case "external-agents-serve": {
       const { command: command2, args } = externalAgentsServeArgs();
-      const r = (0, import_node_child_process24.spawnSync)(command2, args, { stdio: "inherit", env: process.env });
+      const r = (0, import_node_child_process26.spawnSync)(command2, args, { stdio: "inherit", env: process.env });
       process.exitCode = r.status ?? 1;
       return;
     }
@@ -79835,8 +80479,8 @@ async function main() {
         }
       }
       try {
-        const codexHome = process.env.CODEX_HOME ?? import_node_path45.default.join(process.env.HOME ?? (0, import_node_os23.homedir)(), ".codex");
-        (0, import_node_fs27.rmSync)(import_node_path45.default.join(codexHome, "prompts", "report-issue.md"), { force: true });
+        const codexHome = process.env.CODEX_HOME ?? import_node_path47.default.join(process.env.HOME ?? (0, import_node_os24.homedir)(), ".codex");
+        (0, import_node_fs29.rmSync)(import_node_path47.default.join(codexHome, "prompts", "report-issue.md"), { force: true });
       } catch {
       }
       const claudeResult = await installClaude({ binPath, force, serveEnv });
@@ -79858,7 +80502,7 @@ async function main() {
         );
       }
       const realProviderRunner = (command2) => (args) => {
-        const r = (0, import_node_child_process24.spawnSync)(command2, args, { encoding: "utf8", timeout: 8e3 });
+        const r = (0, import_node_child_process26.spawnSync)(command2, args, { encoding: "utf8", timeout: 8e3 });
         return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
       };
       for (const provider of ["codex", "claude", "agy"]) {
@@ -79906,13 +80550,13 @@ async function main() {
         env: process.env,
         cwd: process.cwd(),
         writeFile: (p, c) => {
-          (0, import_node_fs27.mkdirSync)(import_node_path45.default.dirname(p), { recursive: true, mode: 448 });
-          (0, import_node_fs27.writeFileSync)(p, c, { mode: 384 });
+          (0, import_node_fs29.mkdirSync)(import_node_path47.default.dirname(p), { recursive: true, mode: 448 });
+          (0, import_node_fs29.writeFileSync)(p, c, { mode: 384 });
         },
-        writeExclusiveFile: (p, c) => (0, import_node_fs27.writeFileSync)(p, c, { flag: "wx", mode: 384 }),
+        writeExclusiveFile: (p, c) => (0, import_node_fs29.writeFileSync)(p, c, { flag: "wx", mode: 384 }),
         listDir: (p) => {
           try {
-            return (0, import_node_fs27.readdirSync)(p);
+            return (0, import_node_fs29.readdirSync)(p);
           } catch {
             return null;
           }
@@ -79923,7 +80567,7 @@ async function main() {
         // value", never a failed install. See readExistingTelemetryDefaultProject.
         readFile: (p) => {
           try {
-            return (0, import_node_fs27.readFileSync)(p, "utf8");
+            return (0, import_node_fs29.readFileSync)(p, "utf8");
           } catch {
             return null;
           }
@@ -79944,35 +80588,35 @@ async function main() {
         runPm2: (a) => ({ code: pm2Runner(a).code }),
         removeFile: (p) => {
           try {
-            (0, import_node_fs27.rmSync)(p, { force: true });
+            (0, import_node_fs29.rmSync)(p, { force: true });
           } catch {
           }
         },
         purgeSecret: purge,
         secretPath: agentCredentialPath(),
         tokenPath: operatorTokenPath(),
-        ecoPath: import_node_path45.default.join(process.env.HOME ?? (0, import_node_os23.homedir)(), ".mrrlin", "ecosystem.config.cjs"),
+        ecoPath: import_node_path47.default.join(process.env.HOME ?? (0, import_node_os24.homedir)(), ".mrrlin", "ecosystem.config.cjs"),
         log: (m) => process.stderr.write(`[mrrlin-mcp uninstall-service] ${m}
 `)
       });
       return;
     }
     case "uninstall": {
-      const home = process.env.HOME ?? (0, import_node_os23.homedir)();
+      const home = process.env.HOME ?? (0, import_node_os24.homedir)();
       const log = (m) => process.stderr.write(`[mrrlin-mcp uninstall] ${m}
 `);
       uninstallService({
         runPm2: (a) => ({ code: pm2Runner(a).code }),
         removeFile: (p) => {
           try {
-            (0, import_node_fs27.rmSync)(p, { force: true });
+            (0, import_node_fs29.rmSync)(p, { force: true });
           } catch {
           }
         },
         purgeSecret: true,
         secretPath: agentCredentialPath(),
         tokenPath: operatorTokenPath(),
-        ecoPath: import_node_path45.default.join(home, ".mrrlin", "ecosystem.config.cjs"),
+        ecoPath: import_node_path47.default.join(home, ".mrrlin", "ecosystem.config.cjs"),
         log
       });
       let codexOk = true;
@@ -79992,7 +80636,7 @@ async function main() {
         log(`codex config NOT modified: ${error51 instanceof Error ? error51.message : String(error51)}`);
       }
       try {
-        (0, import_node_fs27.rmSync)(import_node_path45.default.join(home, ".mrrlin"), { recursive: true, force: true });
+        (0, import_node_fs29.rmSync)(import_node_path47.default.join(home, ".mrrlin"), { recursive: true, force: true });
       } catch {
       }
       log("removed ~/.mrrlin");
@@ -80033,7 +80677,7 @@ ${HELP_TEXT}`);
   }
 }
 function resolveSelfBinPath() {
-  return import_node_path44.default.resolve(process.argv[1] ?? process.execPath);
+  return import_node_path46.default.resolve(process.argv[1] ?? process.execPath);
 }
 main().catch((error51) => {
   process.stderr.write(`mrrlin-mcp fatal error: ${error51 instanceof Error ? error51.message : String(error51)}