@mrrlin-dev/mcp 0.4.148 → 0.4.149

package/dist/bin.cjs

@@ -63826,7 +63826,7 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.4.148";
+var PKG_VERSION = "0.4.149";
 
 // src/bridge-allowed-origins.ts
 var DEFAULT_DIRECTOR_BRIDGE_ALLOWED_ORIGINS = [
@@ -67687,6 +67687,26 @@ var EXECUTOR_BASE_INSTRUCTIONS = [
   // Dogfood v2 F-20: "stop the turn after the next increment" made runs stop after one small step;
   // see workTurnInstruction.
   "turn: carry the task as far as you can and stop only when it is complete or you are genuinely blocked.",
+  // Dogfood v2 F-26: a login check failed in the run's own browser because the executor's page set
+  // `Referrer-Policy: no-referrer` -- under the Fetch spec ("append a request `Origin` header") a
+  // non-GET/HEAD request with that policy carries `Origin: null` -- and its own Origin guard rejected
+  // it. The executor blamed the automation browser and handed the operator a flow that fails in
+  // every Chrome.
+  "When a check you run fails \u2014 a test, a request, a browser flow \u2014 treat it as a defect in your own",
+  "change until you have evidence otherwise. Before blaming the browser, a tool, or the environment,",
+  "find the concrete cause: inspect what your code sends and receives, and reproduce the failure another",
+  "way. Only concrete evidence proves an environment cause: a log or response that shows an outage or",
+  "a platform restriction (a provider outage, a rate limit, a network or DNS failure, a sandbox or OS",
+  "restriction), or the same failure reproduced with that browser or tool on a minimal case outside the project",
+  "together with evidence that the project cannot remove the trigger within the task without weakening security.",
+  "A browser or tool behaving as its specification says is your code's problem, not the environment's;",
+  "an environment cause shown that way is a legitimate blocker, and an unproven environment",
+  "problem is not a blocker. A failure that also happens without your change is a defect already in the",
+  "project, not an environment problem: fix it if the task covers it, otherwise report it as a defect.",
+  "Fix the cause without removing or relaxing a security",
+  "check (origin, CSRF, authentication, authorization) just to make a check pass. Never hand the operator",
+  "a flow to verify that failed when you ran it unless you name the evidence that it will behave",
+  "differently for them.",
   // ADR 0022 Phase 3: the executor is the orchestrator, not the sole worker. It has the
   // external-agents `pick`/`dispatch` MCP tools (a pool of cheap/free models) and should
   // delegate judgment-requiring work to them, keeping itself as judge. If external-agents

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrrlin-dev/mcp",
-  "version": "0.4.148",
+  "version": "0.4.149",
   "type": "module",
   "bin": {
     "mrrlin-mcp": "dist/bin.cjs"