@mrrlin-dev/mcp 0.4.120 → 0.4.122

package/dist/bin.cjs

@@ -39070,7 +39070,25 @@ var mrrlinProjectRenameSchema = external_exports.object({
   intentJudgeEnabled: external_exports.boolean().optional(),
   clientName: external_exports.string().trim().max(80).nullable().optional(),
   scopeDescription: external_exports.string().trim().max(240).nullable().optional(),
-  codeHost: mrrlinProjectCodeHostSchema.nullable().optional()
+  codeHost: mrrlinProjectCodeHostSchema.nullable().optional(),
+  // local-git-delivery: compare-and-set for codeHost. When true, codeHost is written only while the
+  // stored value is still null, in one conditional UPDATE, so a background writer (the bridge applying
+  // an answered code-host question) can never overwrite a host the operator chose meanwhile.
+  codeHostOnlyIfUnset: external_exports.boolean().optional()
+}).superRefine((value, ctx) => {
+  if (!value.codeHostOnlyIfUnset)
+    return;
+  const others = ["displayName", "intentJudgeEnabled", "clientName", "scopeDescription"].filter((key) => value[key] !== void 0);
+  if (others.length > 0) {
+    ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      path: ["codeHostOnlyIfUnset"],
+      message: `codeHostOnlyIfUnset updates codeHost alone; also sent: ${others.join(", ")}`
+    });
+  }
+  if (value.codeHost === void 0 || value.codeHost === null) {
+    ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["codeHost"], message: "codeHostOnlyIfUnset requires a non-null codeHost" });
+  }
 });
 var ONBOARDING_KICKOFF_TRANSITIONS = [
   { from: null, to: "pending" },
@@ -62102,7 +62120,7 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.4.120";
+var PKG_VERSION = "0.4.122";
 
 // src/receipt-signing.ts
 var import_node_crypto13 = __toESM(require("node:crypto"), 1);
@@ -66102,7 +66120,27 @@ function completionTurnMinBudgetMs() {
 function isCompletionTurnDisabled() {
   return (process.env.MRRLIN_COMPLETION_TURN_DISABLED ?? "").trim() === "1";
 }
-function buildCompletionTurnPrompt(taskId, currentStatus) {
+function buildCompletionTurnPrompt(taskId, currentStatus, options = {}) {
+  if (options.localGit) {
+    return [
+      `Your work turn ended but task ${taskId} is still in status "${currentStatus}".`,
+      "",
+      "This project's code lives only on the operator's computer; the bridge verifies and closes the task.",
+      "",
+      "If the work IS genuinely complete:",
+      "1. Make sure every change is committed on the current run branch (never push, never touch the default branch).",
+      "2. Update the task notes with a markdown summary of what you accomplished.",
+      "3. Call update_task with status=awaiting_verification (NOT closed_done) \u2014 the bridge then runs the",
+      "   build and tests itself and closes the task on a signed receipt.",
+      "",
+      "If the work is NOT complete \u2014 be honest, do not close incomplete work:",
+      "1. If you are blocked and need an operator decision, call update_task with status=handoff_needed and",
+      "   explain what remains in the notes.",
+      "2. Append a handoff_judgement artifact explaining what the operator needs to do.",
+      "",
+      "You must pick one of these paths \u2014 do not leave the task in_progress."
+    ].join("\n");
+  }
   return [
     `Your work turn ended but task ${taskId} is still in status "${currentStatus}".`,
     "",
@@ -66320,8 +66358,9 @@ var LOCAL_GIT_EXECUTOR_INSTRUCTIONS = [
   "This project's code lives only in a git repository on the operator's own computer; it has no",
   "remote. Your worktree is on the run branch. Commit your work on THIS branch. Never run `git push`,",
   "never add a remote, never open a pull request, and never switch to or merge into the default branch.",
-  "When your turn ends, the bridge itself commits anything left uncommitted, runs the project's build",
-  "and tests, and records the result \u2014 you do not need to report a link."
+  "When the work is done, set the task to status awaiting_verification (never closed_done): the bridge",
+  "then commits anything left uncommitted, runs the project's build and tests itself, and closes the",
+  "task on a signed receipt \u2014 you do not need to report a link."
 ].join("\n");
 var EXECUTOR_LOCAL_GIT_BASE_INSTRUCTIONS = `${EXECUTOR_BASE_INSTRUCTIONS}
 ${LOCAL_GIT_EXECUTOR_INSTRUCTIONS}`;
@@ -66343,6 +66382,7 @@ function artifactKindForEvent(event) {
 }
 var COMPLETED_TASK_STATUSES = /* @__PURE__ */ new Set(["closed_done"]);
 var CODE_PR_READY_TASK_STATUSES = /* @__PURE__ */ new Set(["closed_done", "awaiting_verification"]);
+var LOCAL_GIT_READY_TASK_STATUSES = /* @__PURE__ */ new Set(["awaiting_verification"]);
 var COMPLETION_EVIDENCE_KINDS = /* @__PURE__ */ new Set([
   "checkpoint",
   "test_result",
@@ -66476,15 +66516,16 @@ async function gatherContext(client, projectSlug, task, openRunId, rawProjectInp
     autonomyEvents
   };
 }
-async function assertRunCompletionReady(deps, projectSlug, taskId, runId, allowedStatuses) {
+async function assertRunCompletionReady(deps, projectSlug, taskId, runId, allowedStatuses, options = {}) {
   const task = await deps.client.getTask(projectSlug, taskId);
   if (!allowedStatuses.has(task.status)) {
     return {
       ok: false,
-      reason: `Codex turn completed but task ${task.id} remained in status ${task.status}.`,
+      reason: `Agent turn completed but task ${task.id} remained in status ${task.status}.`,
       task
     };
   }
+  if (options.bridgeVerifiesDelivery) return { ok: true, task };
   const runs = await deps.client.listExecutionRuns(projectSlug, { taskId });
   const runIds = new Set(runs.map((run3) => run3.id));
   runIds.add(runId);
@@ -66497,7 +66538,7 @@ async function assertRunCompletionReady(deps, projectSlug, taskId, runId, allowe
   if (!hasEvidence) {
     return {
       ok: false,
-      reason: `Codex turn completed and task ${task.id} closed, but task lineage for run ${runId} has no durable completion evidence artifact.`,
+      reason: `Agent turn completed and task ${task.id} closed, but task lineage for run ${runId} has no durable completion evidence artifact.`,
       task
     };
   }
@@ -67243,8 +67284,10 @@ Continue executing task ${task.id}. Make the next concrete increment of progress
       );
       return;
     }
-    const prReadyStatuses = useExecutor ? CODE_PR_READY_TASK_STATUSES : COMPLETED_TASK_STATUSES;
-    let readiness = await assertRunCompletionReady(deps, projectSlug, task.id, runId, prReadyStatuses);
+    const prReadyStatuses = useExecutor ? localGitMode ? LOCAL_GIT_READY_TASK_STATUSES : CODE_PR_READY_TASK_STATUSES : COMPLETED_TASK_STATUSES;
+    let readiness = await assertRunCompletionReady(deps, projectSlug, task.id, runId, prReadyStatuses, {
+      bridgeVerifiesDelivery: useExecutor && localGitMode === true
+    });
     if (!readiness.ok) {
       const completionBudget = Math.min(completionTurnBudgetMs(), remainingTurnBudgetMs());
       if (isCompletionTurnDisabled() || completionBudget < completionTurnMinBudgetMs()) {
@@ -67260,7 +67303,9 @@ Continue executing task ${task.id}. Make the next concrete increment of progress
           previousStatus: readiness.task.status
         })
       );
-      const completionPrompt = buildCompletionTurnPrompt(task.id, readiness.task.status);
+      const completionPrompt = buildCompletionTurnPrompt(task.id, readiness.task.status, {
+        localGit: useExecutor && localGitMode === true
+      });
       const completionOutcome = recordTurn2(
         await driveTurn(
           deps,
@@ -67280,7 +67325,9 @@ Continue executing task ${task.id}. Make the next concrete increment of progress
         await failRun(deps, projectSlug, readiness.task, runId, leaseId, completionOutcome.error);
         return;
       }
-      readiness = await assertRunCompletionReady(deps, projectSlug, task.id, runId, prReadyStatuses);
+      readiness = await assertRunCompletionReady(deps, projectSlug, task.id, runId, prReadyStatuses, {
+        bridgeVerifiesDelivery: useExecutor && localGitMode === true
+      });
       if (!readiness.ok) {
         await failRun(deps, projectSlug, readiness.task, runId, leaseId, readiness.reason);
         return;
@@ -75129,7 +75176,7 @@ function buildThreadStartParams(msg, config2, desiredModel) {
     "- Reply in the operator's language for the whole turn (questions, task scopes, summaries).",
     "- Keep chat short and human. No code blocks, DDL, terminal output, local filesystem paths, internal job/inbox UUIDs or alert markers in chat \u2014 put long content into a wiki page and link it.",
     "- Spec pages in folder Specs must contain `## Acceptance criteria` followed by `- [ ]` items.",
-    "- AGNOSTIC DELIVERY MANDATE: Mrrlin is an Agnostic Delivery Platform decoupled from mandatory GitHub. Delivery is routed strictly by artifact kind: (1) document -> wiki; (2) page -> publish (web pages, landing pages, interactive HTML previews); (3) file_set -> artifacts (file uploads, bundles, build zips); (4) message -> send (outbound webhooks, Slack, notifications); (5) code_change -> repo_host (GitHub; with no GitHub, a local git repo on the operator's computer: register_local_checkout without repo, init_local_repo only after an explicit yes, record their push choice with set_project_code_host). NEVER stall or refuse non-code tasks by demanding a Git repository. Non-code tasks deliver directly via page (Publish) or document (Wiki).",
+    "- AGNOSTIC DELIVERY MANDATE: Mrrlin is an Agnostic Delivery Platform decoupled from mandatory GitHub. Delivery is routed strictly by artifact kind: (1) document -> wiki; (2) page -> publish (web pages, landing pages, interactive HTML previews); (3) file_set -> artifacts (file uploads, bundles, build zips); (4) message -> send (outbound webhooks, Slack, notifications); (5) code_change -> repo_host (GitHub, or with none a local repo: register_local_checkout without repo; init_local_repo only after a yes; push choice via set_project_code_host; NEVER edit or commit project code yourself, only a code run does). NEVER stall or refuse non-code tasks by demanding a Git repository. Non-code tasks deliver directly via page (Publish) or document (Wiki).",
     "- 3-TIER COMMERCIAL SCOPE GOVERNANCE: Treat tasks by domain governance tier. (1) Tier 1 Core Tech Delivery (backend, frontend, SRE, databases): decompose autonomously into repository code changes (when a repo is bound) or code artifacts. (2) Tier 2 Planning & Content (landing pages, SEO, marketing): create actionable drafts; when details such as a phone number, brand name or copy are missing, do not loop on questions \u2014 create the task, record `## Placeholders: [NEED_INPUT: <item>]` in the Wiki spec, and set `autonomyLevel: 'human_review'`. (3) Tier 3 Guardrailed Advisory (high risk: privacy/GDPR, security/SOC 2, billing, production database migrations, infrastructure): always set `autonomyLevel: 'human_review'`, put the domain's standard safety controls into the spec, and state that irreversible actions need human sign-off.",
     "- INBOX QUESTION RETIREMENT MANDATE \u2014 Retiring answered questions: Before creating a task/plan, retire only pending Inbox questions the operator actually answered. Call `decide_inbox_item(itemId: <exact id>, decidedBy: 'director', verdict: 'acknowledged', answer: <actual answer>)`. Use `verdict: 'rejected', reason: ...` only if moot. Never close an unrelated item.",
     "- CHAT CLARIFICATIONS ARE IN CHAT ONLY: During synchronous interactive Director chat, ask clarifying questions directly in your chat response. DO NOT call `create_inbox_item(kind: 'question')` for routine conversational clarifications in Turn 1 \u2014 Inbox questions are reserved for autonomous background workers or asynchronous gate pauses that occur while the operator is away.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrrlin-dev/mcp",
-  "version": "0.4.120",
+  "version": "0.4.122",
   "type": "module",
   "bin": {
     "mrrlin-mcp": "dist/bin.cjs"