@mrrlin-dev/mcp 0.4.49 → 0.4.51

package/dist/bin.cjs

@@ -21963,6 +21963,70 @@ var CodexJsonRpcClient = class {
 
 // ../../packages/agent-client/dist/providers/codex/server-manager.js
 var import_node_child_process3 = require("node:child_process");
+
+// ../../packages/agent-client/dist/providers/codex/stderr-diagnostics.js
+var AUTH_DIAGNOSTIC = [
+  /could not be refreshed/i,
+  /refresh token/i,
+  /\brefreshing token\b/i,
+  /reloading auth/i,
+  /guarded reload/i,
+  /refresh lock/i,
+  /auth (?:lock|storage) is (?:poisoned|unavailable)/i,
+  /no more recovery steps/i,
+  /oauth token exchange/i,
+  /invalid_grant/i,
+  /\bnot logged in\b/i,
+  /\b401\b(?!\d)/
+];
+var MAX_LINE_CHARS = 500;
+var MAX_BUFFERED_CHARS = MAX_LINE_CHARS * 4;
+var SECRET_SHAPES = [
+  // A JWT: three base64url segments. codex's id_token and access_token are both this shape.
+  [/\b[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g, "<jwt>"],
+  // Any long opaque run — codex's refresh_token is ~211 chars of this. 40 is comfortably above the
+  // longest ordinary word, an ISO timestamp, or a UUID (36, and a UUID is not a secret).
+  [/\b[A-Za-z0-9_-]{40,}\b/g, "<redacted>"]
+];
+function scrubSecrets(line) {
+  let out = line;
+  for (const [pattern, replacement] of SECRET_SHAPES)
+    out = out.replace(pattern, replacement);
+  return out;
+}
+var MAX_DIAGNOSTIC_LINES = 200;
+function isAuthDiagnostic(line) {
+  const flat = line.trim();
+  if (!flat)
+    return false;
+  return AUTH_DIAGNOSTIC.some((pattern) => pattern.test(flat));
+}
+function createStderrDiagnosticFilter(emit, maxLines = MAX_DIAGNOSTIC_LINES) {
+  let buffered = "";
+  let emitted = 0;
+  return (chunk) => {
+    buffered += chunk.toString();
+    const lines2 = buffered.split(/\r?\n/);
+    buffered = lines2.pop() ?? "";
+    if (buffered.length > MAX_BUFFERED_CHARS)
+      buffered = buffered.slice(0, MAX_LINE_CHARS);
+    for (const line of lines2) {
+      if (emitted >= maxLines)
+        return;
+      if (!isAuthDiagnostic(line))
+        continue;
+      emitted += 1;
+      const cleaned = scrubSecrets(line.trim()).slice(0, MAX_LINE_CHARS);
+      if (emitted === maxLines) {
+        emit(`${cleaned} [codex auth diagnostics capped at ${maxLines} lines]`);
+        return;
+      }
+      emit(cleaned);
+    }
+  };
+}
+
+// ../../packages/agent-client/dist/providers/codex/server-manager.js
 var CodexServerManager = class {
   client = null;
   process = null;
@@ -22021,8 +22085,12 @@ var CodexServerManager = class {
       throw new Error("Failed to spawn codex app-server: stdio not available");
     }
     const rpcClient = new CodexJsonRpcClient(child.stdin, child.stdout);
-    child.stderr?.on("data", () => {
+    const emitDiagnostic = config2?.onStderrDiagnostic ?? ((line) => {
+      process.stderr.write(`[codex-stderr] ${line}
+`);
     });
+    const consumeStderr = createStderrDiagnosticFilter(emitDiagnostic);
+    child.stderr?.on("data", consumeStderr);
     child.on("exit", () => {
       rpcClient.close();
       this.process = null;
@@ -42369,7 +42437,7 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.4.49";
+var PKG_VERSION = "0.4.51";
 
 // src/api-base-url-migrate.ts
 var import_node_fs4 = __toESM(require("node:fs"), 1);
@@ -55113,8 +55181,8 @@ var DEFAULT_DIRECTOR_BRIDGE_ALLOWED_ORIGINS = [
   // bridge from the owned domain, which is stable across future Vercel project/team moves.
   // See docs/reference/deployments.md.
   "https://staging.mrrlin.com",
-  // Production web (unchanged).
-  "https://mrrlin-web.vercel.app"
+  // Production web.
+  "https://app.mrrlin.com"
 ];
 var COMPACT_REQUEST_HISTORY_MAX_ITEMS = 500;
 function isValidChatHistoryMessage(value) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrrlin-dev/mcp",
-  "version": "0.4.49",
+  "version": "0.4.51",
   "type": "module",
   "bin": {
     "mrrlin-mcp": "dist/bin.cjs"
@@ -21,9 +21,9 @@
     "@types/ws": "^8.18.1",
     "esbuild": "^0.24.0",
     "tsx": "^4.22.3",
+    "@mrrlin/client": "0.0.0",
     "@mrrlin/agent-client": "0.0.0",
     "@mrrlin/director-e2e": "0.0.0",
-    "@mrrlin/client": "0.0.0",
     "@mrrlin/schemas": "0.0.0",
     "@mrrlin/tsconfig": "0.0.0",
     "@mrrlin/wiki": "0.0.0"