@mrrlin-dev/mcp 0.4.119 → 0.4.121

package/dist/bin.cjs

@@ -37299,6 +37299,21 @@ function describeCapabilityRefusal(input) {
   return `${happened} ${template.action(ctx)}`;
 }
 
+// ../../packages/schemas/dist/legalVersions.js
+var recordLegalConsentRequestSchema = external_exports.object({
+  source: external_exports.enum(["director_setup", "login", "onboarding_v2"]).default("director_setup"),
+  termsVersion: external_exports.string().min(1, "termsVersion is required"),
+  privacyVersion: external_exports.string().min(1, "privacyVersion is required")
+});
+var legalConsentResponseSchema = external_exports.object({
+  data: external_exports.object({
+    hasConsented: external_exports.boolean(),
+    termsVersion: external_exports.string(),
+    privacyVersion: external_exports.string(),
+    agreedAt: external_exports.string().nullable()
+  })
+});
+
 // ../../packages/schemas/dist/operationIds.js
 var openApiOperationIds = {
   appendExecutionArtifact: "appendExecutionArtifact",
@@ -37392,6 +37407,8 @@ var openApiOperationIds = {
   issueOperatorAgentCredential: "issueOperatorAgentCredential",
   listOperatorAgentCredentials: "listOperatorAgentCredentials",
   revokeOperatorAgentCredential: "revokeOperatorAgentCredential",
+  recordLegalConsent: "recordLegalConsent",
+  getLegalConsent: "getLegalConsent",
   createArtifactFile: "createArtifactFile",
   completeArtifactFile: "completeArtifactFile",
   getArtifactFile: "getArtifactFile",
@@ -37480,6 +37497,7 @@ var operatorSessionSchema = external_exports.object({
   scope: external_exports.enum(["project", "operator"]).default("project"),
   accountId: external_exports.string().uuid().optional(),
   identitySubject: external_exports.string().min(1).optional(),
+  githubId: external_exports.union([external_exports.number().int(), external_exports.string().min(1)]).optional(),
   purpose: external_exports.enum(["session", "identity_assertion"]).default("session"),
   // Billing entitlement carried on the session. Optional because a GitHub session never has one
   // and a Firebase session has one only once the claims exist. `determinedAt` is what makes it
@@ -41695,6 +41713,18 @@ function createMrrlinClient(config2) {
         method: "DELETE"
       });
     },
+    async recordLegalConsent(input) {
+      const body = await request("/operator/legal-consent", {
+        body: JSON.stringify(input),
+        headers: { "content-type": "application/json" },
+        method: "POST"
+      });
+      return legalConsentResponseSchema.parse(body).data;
+    },
+    async getLegalConsent() {
+      const body = await request("/operator/legal-consent");
+      return legalConsentResponseSchema.parse(body).data;
+    },
     // ── Server-Authoritative Intent Methods ─────────────────────────────────
     async appendOperatorTranscriptMessage(projectSlug, content) {
       const body = await request(`${projectPath(projectSlug)}/intent/transcript`, {
@@ -62072,7 +62102,7 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.4.119";
+var PKG_VERSION = "0.4.121";
 
 // src/receipt-signing.ts
 var import_node_crypto13 = __toESM(require("node:crypto"), 1);
@@ -66072,7 +66102,27 @@ function completionTurnMinBudgetMs() {
 function isCompletionTurnDisabled() {
   return (process.env.MRRLIN_COMPLETION_TURN_DISABLED ?? "").trim() === "1";
 }
-function buildCompletionTurnPrompt(taskId, currentStatus) {
+function buildCompletionTurnPrompt(taskId, currentStatus, options = {}) {
+  if (options.localGit) {
+    return [
+      `Your work turn ended but task ${taskId} is still in status "${currentStatus}".`,
+      "",
+      "This project's code lives only on the operator's computer; the bridge verifies and closes the task.",
+      "",
+      "If the work IS genuinely complete:",
+      "1. Make sure every change is committed on the current run branch (never push, never touch the default branch).",
+      "2. Update the task notes with a markdown summary of what you accomplished.",
+      "3. Call update_task with status=awaiting_verification (NOT closed_done) \u2014 the bridge then runs the",
+      "   build and tests itself and closes the task on a signed receipt.",
+      "",
+      "If the work is NOT complete \u2014 be honest, do not close incomplete work:",
+      "1. If you are blocked and need an operator decision, call update_task with status=handoff_needed and",
+      "   explain what remains in the notes.",
+      "2. Append a handoff_judgement artifact explaining what the operator needs to do.",
+      "",
+      "You must pick one of these paths \u2014 do not leave the task in_progress."
+    ].join("\n");
+  }
   return [
     `Your work turn ended but task ${taskId} is still in status "${currentStatus}".`,
     "",
@@ -66290,8 +66340,9 @@ var LOCAL_GIT_EXECUTOR_INSTRUCTIONS = [
   "This project's code lives only in a git repository on the operator's own computer; it has no",
   "remote. Your worktree is on the run branch. Commit your work on THIS branch. Never run `git push`,",
   "never add a remote, never open a pull request, and never switch to or merge into the default branch.",
-  "When your turn ends, the bridge itself commits anything left uncommitted, runs the project's build",
-  "and tests, and records the result \u2014 you do not need to report a link."
+  "When the work is done, set the task to status awaiting_verification (never closed_done): the bridge",
+  "then commits anything left uncommitted, runs the project's build and tests itself, and closes the",
+  "task on a signed receipt \u2014 you do not need to report a link."
 ].join("\n");
 var EXECUTOR_LOCAL_GIT_BASE_INSTRUCTIONS = `${EXECUTOR_BASE_INSTRUCTIONS}
 ${LOCAL_GIT_EXECUTOR_INSTRUCTIONS}`;
@@ -66313,6 +66364,7 @@ function artifactKindForEvent(event) {
 }
 var COMPLETED_TASK_STATUSES = /* @__PURE__ */ new Set(["closed_done"]);
 var CODE_PR_READY_TASK_STATUSES = /* @__PURE__ */ new Set(["closed_done", "awaiting_verification"]);
+var LOCAL_GIT_READY_TASK_STATUSES = /* @__PURE__ */ new Set(["awaiting_verification"]);
 var COMPLETION_EVIDENCE_KINDS = /* @__PURE__ */ new Set([
   "checkpoint",
   "test_result",
@@ -66446,7 +66498,7 @@ async function gatherContext(client, projectSlug, task, openRunId, rawProjectInp
     autonomyEvents
   };
 }
-async function assertRunCompletionReady(deps, projectSlug, taskId, runId, allowedStatuses) {
+async function assertRunCompletionReady(deps, projectSlug, taskId, runId, allowedStatuses, options = {}) {
   const task = await deps.client.getTask(projectSlug, taskId);
   if (!allowedStatuses.has(task.status)) {
     return {
@@ -66455,6 +66507,7 @@ async function assertRunCompletionReady(deps, projectSlug, taskId, runId, allowe
       task
     };
   }
+  if (options.bridgeVerifiesDelivery) return { ok: true, task };
   const runs = await deps.client.listExecutionRuns(projectSlug, { taskId });
   const runIds = new Set(runs.map((run3) => run3.id));
   runIds.add(runId);
@@ -67213,8 +67266,10 @@ Continue executing task ${task.id}. Make the next concrete increment of progress
       );
       return;
     }
-    const prReadyStatuses = useExecutor ? CODE_PR_READY_TASK_STATUSES : COMPLETED_TASK_STATUSES;
-    let readiness = await assertRunCompletionReady(deps, projectSlug, task.id, runId, prReadyStatuses);
+    const prReadyStatuses = useExecutor ? localGitMode ? LOCAL_GIT_READY_TASK_STATUSES : CODE_PR_READY_TASK_STATUSES : COMPLETED_TASK_STATUSES;
+    let readiness = await assertRunCompletionReady(deps, projectSlug, task.id, runId, prReadyStatuses, {
+      bridgeVerifiesDelivery: useExecutor && localGitMode === true
+    });
     if (!readiness.ok) {
       const completionBudget = Math.min(completionTurnBudgetMs(), remainingTurnBudgetMs());
       if (isCompletionTurnDisabled() || completionBudget < completionTurnMinBudgetMs()) {
@@ -67230,7 +67285,9 @@ Continue executing task ${task.id}. Make the next concrete increment of progress
           previousStatus: readiness.task.status
         })
       );
-      const completionPrompt = buildCompletionTurnPrompt(task.id, readiness.task.status);
+      const completionPrompt = buildCompletionTurnPrompt(task.id, readiness.task.status, {
+        localGit: useExecutor && localGitMode === true
+      });
       const completionOutcome = recordTurn2(
         await driveTurn(
           deps,
@@ -67250,7 +67307,9 @@ Continue executing task ${task.id}. Make the next concrete increment of progress
         await failRun(deps, projectSlug, readiness.task, runId, leaseId, completionOutcome.error);
         return;
       }
-      readiness = await assertRunCompletionReady(deps, projectSlug, task.id, runId, prReadyStatuses);
+      readiness = await assertRunCompletionReady(deps, projectSlug, task.id, runId, prReadyStatuses, {
+        bridgeVerifiesDelivery: useExecutor && localGitMode === true
+      });
       if (!readiness.ok) {
         await failRun(deps, projectSlug, readiness.task, runId, leaseId, readiness.reason);
         return;
@@ -75099,7 +75158,7 @@ function buildThreadStartParams(msg, config2, desiredModel) {
     "- Reply in the operator's language for the whole turn (questions, task scopes, summaries).",
     "- Keep chat short and human. No code blocks, DDL, terminal output, local filesystem paths, internal job/inbox UUIDs or alert markers in chat \u2014 put long content into a wiki page and link it.",
     "- Spec pages in folder Specs must contain `## Acceptance criteria` followed by `- [ ]` items.",
-    "- AGNOSTIC DELIVERY MANDATE: Mrrlin is an Agnostic Delivery Platform decoupled from mandatory GitHub. Delivery is routed strictly by artifact kind: (1) document -> wiki; (2) page -> publish (web pages, landing pages, interactive HTML previews); (3) file_set -> artifacts (file uploads, bundles, build zips); (4) message -> send (outbound webhooks, Slack, notifications); (5) code_change -> repo_host (GitHub; with no GitHub, a local git repo on the operator's computer: register_local_checkout without repo, init_local_repo only after an explicit yes, record their push choice with set_project_code_host). NEVER stall or refuse non-code tasks by demanding a Git repository. Non-code tasks deliver directly via page (Publish) or document (Wiki).",
+    "- AGNOSTIC DELIVERY MANDATE: Mrrlin is an Agnostic Delivery Platform decoupled from mandatory GitHub. Delivery is routed strictly by artifact kind: (1) document -> wiki; (2) page -> publish (web pages, landing pages, interactive HTML previews); (3) file_set -> artifacts (file uploads, bundles, build zips); (4) message -> send (outbound webhooks, Slack, notifications); (5) code_change -> repo_host (GitHub, or with none a local repo: register_local_checkout without repo; init_local_repo only after a yes; push choice via set_project_code_host; NEVER edit or commit project code yourself, only a code run does). NEVER stall or refuse non-code tasks by demanding a Git repository. Non-code tasks deliver directly via page (Publish) or document (Wiki).",
     "- 3-TIER COMMERCIAL SCOPE GOVERNANCE: Treat tasks by domain governance tier. (1) Tier 1 Core Tech Delivery (backend, frontend, SRE, databases): decompose autonomously into repository code changes (when a repo is bound) or code artifacts. (2) Tier 2 Planning & Content (landing pages, SEO, marketing): create actionable drafts; when details such as a phone number, brand name or copy are missing, do not loop on questions \u2014 create the task, record `## Placeholders: [NEED_INPUT: <item>]` in the Wiki spec, and set `autonomyLevel: 'human_review'`. (3) Tier 3 Guardrailed Advisory (high risk: privacy/GDPR, security/SOC 2, billing, production database migrations, infrastructure): always set `autonomyLevel: 'human_review'`, put the domain's standard safety controls into the spec, and state that irreversible actions need human sign-off.",
     "- INBOX QUESTION RETIREMENT MANDATE \u2014 Retiring answered questions: Before creating a task/plan, retire only pending Inbox questions the operator actually answered. Call `decide_inbox_item(itemId: <exact id>, decidedBy: 'director', verdict: 'acknowledged', answer: <actual answer>)`. Use `verdict: 'rejected', reason: ...` only if moot. Never close an unrelated item.",
     "- CHAT CLARIFICATIONS ARE IN CHAT ONLY: During synchronous interactive Director chat, ask clarifying questions directly in your chat response. DO NOT call `create_inbox_item(kind: 'question')` for routine conversational clarifications in Turn 1 \u2014 Inbox questions are reserved for autonomous background workers or asynchronous gate pauses that occur while the operator is away.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrrlin-dev/mcp",
-  "version": "0.4.119",
+  "version": "0.4.121",
   "type": "module",
   "bin": {
     "mrrlin-mcp": "dist/bin.cjs"