@mrrlin-dev/mcp 0.4.6 → 0.4.7

package/dist/bin.cjs

@@ -6246,7 +6246,7 @@ var require_websocket = __commonJS({
     var http2 = require("http");
     var net = require("net");
     var tls = require("tls");
-    var { randomBytes: randomBytes4, createHash: createHash4 } = require("crypto");
+    var { randomBytes: randomBytes4, createHash: createHash5 } = require("crypto");
     var { Duplex, Readable } = require("stream");
     var { URL: URL2 } = require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -6914,7 +6914,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash4("sha1").update(key + GUID).digest("base64");
+        const digest = createHash5("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -7283,7 +7283,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter3 = require("events");
     var http2 = require("http");
     var { Duplex } = require("stream");
-    var { createHash: createHash4 } = require("crypto");
+    var { createHash: createHash5 } = require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -7590,7 +7590,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash4("sha1").update(key + GUID).digest("base64");
+        const digest = createHash5("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -7729,14 +7729,14 @@ var require_polyfills = __commonJS({
       fs10.fstatSync = statFixSync(fs10.fstatSync);
       fs10.lstatSync = statFixSync(fs10.lstatSync);
       if (fs10.chmod && !fs10.lchmod) {
-        fs10.lchmod = function(path21, mode, cb) {
+        fs10.lchmod = function(path22, mode, cb) {
           if (cb) process.nextTick(cb);
         };
         fs10.lchmodSync = function() {
         };
       }
       if (fs10.chown && !fs10.lchown) {
-        fs10.lchown = function(path21, uid, gid, cb) {
+        fs10.lchown = function(path22, uid, gid, cb) {
           if (cb) process.nextTick(cb);
         };
         fs10.lchownSync = function() {
@@ -7744,7 +7744,7 @@ var require_polyfills = __commonJS({
       }
       if (platform === "win32") {
         fs10.rename = typeof fs10.rename !== "function" ? fs10.rename : function(fs$rename) {
-          function rename(from, to, cb) {
+          function rename4(from, to, cb) {
             var start = Date.now();
             var backoff = 0;
             fs$rename(from, to, function CB(er) {
@@ -7764,8 +7764,8 @@ var require_polyfills = __commonJS({
               if (cb) cb(er);
             });
           }
-          if (Object.setPrototypeOf) Object.setPrototypeOf(rename, fs$rename);
-          return rename;
+          if (Object.setPrototypeOf) Object.setPrototypeOf(rename4, fs$rename);
+          return rename4;
         }(fs10.rename);
       }
       fs10.read = typeof fs10.read !== "function" ? fs10.read : function(fs$read) {
@@ -7803,9 +7803,9 @@ var require_polyfills = __commonJS({
         };
       }(fs10.readSync);
       function patchLchmod(fs11) {
-        fs11.lchmod = function(path21, mode, callback) {
+        fs11.lchmod = function(path22, mode, callback) {
           fs11.open(
-            path21,
+            path22,
             constants2.O_WRONLY | constants2.O_SYMLINK,
             mode,
             function(err, fd) {
@@ -7821,8 +7821,8 @@ var require_polyfills = __commonJS({
             }
           );
         };
-        fs11.lchmodSync = function(path21, mode) {
-          var fd = fs11.openSync(path21, constants2.O_WRONLY | constants2.O_SYMLINK, mode);
+        fs11.lchmodSync = function(path22, mode) {
+          var fd = fs11.openSync(path22, constants2.O_WRONLY | constants2.O_SYMLINK, mode);
           var threw = true;
           var ret;
           try {
@@ -7843,8 +7843,8 @@ var require_polyfills = __commonJS({
       }
       function patchLutimes(fs11) {
         if (constants2.hasOwnProperty("O_SYMLINK") && fs11.futimes) {
-          fs11.lutimes = function(path21, at, mt, cb) {
-            fs11.open(path21, constants2.O_SYMLINK, function(er, fd) {
+          fs11.lutimes = function(path22, at, mt, cb) {
+            fs11.open(path22, constants2.O_SYMLINK, function(er, fd) {
               if (er) {
                 if (cb) cb(er);
                 return;
@@ -7856,8 +7856,8 @@ var require_polyfills = __commonJS({
               });
             });
           };
-          fs11.lutimesSync = function(path21, at, mt) {
-            var fd = fs11.openSync(path21, constants2.O_SYMLINK);
+          fs11.lutimesSync = function(path22, at, mt) {
+            var fd = fs11.openSync(path22, constants2.O_SYMLINK);
             var ret;
             var threw = true;
             try {
@@ -7975,11 +7975,11 @@ var require_legacy_streams = __commonJS({
         ReadStream,
         WriteStream
       };
-      function ReadStream(path21, options) {
-        if (!(this instanceof ReadStream)) return new ReadStream(path21, options);
+      function ReadStream(path22, options) {
+        if (!(this instanceof ReadStream)) return new ReadStream(path22, options);
         Stream.call(this);
         var self = this;
-        this.path = path21;
+        this.path = path22;
         this.fd = null;
         this.readable = true;
         this.paused = false;
@@ -8024,10 +8024,10 @@ var require_legacy_streams = __commonJS({
           self._read();
         });
       }
-      function WriteStream(path21, options) {
-        if (!(this instanceof WriteStream)) return new WriteStream(path21, options);
+      function WriteStream(path22, options) {
+        if (!(this instanceof WriteStream)) return new WriteStream(path22, options);
         Stream.call(this);
-        this.path = path21;
+        this.path = path22;
         this.fd = null;
         this.writable = true;
         this.flags = "w";
@@ -8169,15 +8169,15 @@ var require_graceful_fs = __commonJS({
       fs11.createReadStream = createReadStream;
       fs11.createWriteStream = createWriteStream;
       var fs$readFile = fs11.readFile;
-      fs11.readFile = readFile3;
-      function readFile3(path21, options, cb) {
+      fs11.readFile = readFile9;
+      function readFile9(path22, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
-        return go$readFile(path21, options, cb);
-        function go$readFile(path22, options2, cb2, startTime) {
-          return fs$readFile(path22, options2, function(err) {
+        return go$readFile(path22, options, cb);
+        function go$readFile(path23, options2, cb2, startTime) {
+          return fs$readFile(path23, options2, function(err) {
             if (err && (err.code === "EMFILE" || err.code === "ENFILE"))
-              enqueue([go$readFile, [path22, options2, cb2], err, startTime || Date.now(), Date.now()]);
+              enqueue([go$readFile, [path23, options2, cb2], err, startTime || Date.now(), Date.now()]);
             else {
               if (typeof cb2 === "function")
                 cb2.apply(this, arguments);
@@ -8186,15 +8186,15 @@ var require_graceful_fs = __commonJS({
         }
       }
       var fs$writeFile = fs11.writeFile;
-      fs11.writeFile = writeFile;
-      function writeFile(path21, data, options, cb) {
+      fs11.writeFile = writeFile5;
+      function writeFile5(path22, data, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
-        return go$writeFile(path21, data, options, cb);
-        function go$writeFile(path22, data2, options2, cb2, startTime) {
-          return fs$writeFile(path22, data2, options2, function(err) {
+        return go$writeFile(path22, data, options, cb);
+        function go$writeFile(path23, data2, options2, cb2, startTime) {
+          return fs$writeFile(path23, data2, options2, function(err) {
             if (err && (err.code === "EMFILE" || err.code === "ENFILE"))
-              enqueue([go$writeFile, [path22, data2, options2, cb2], err, startTime || Date.now(), Date.now()]);
+              enqueue([go$writeFile, [path23, data2, options2, cb2], err, startTime || Date.now(), Date.now()]);
             else {
               if (typeof cb2 === "function")
                 cb2.apply(this, arguments);
@@ -8204,15 +8204,15 @@ var require_graceful_fs = __commonJS({
       }
       var fs$appendFile = fs11.appendFile;
       if (fs$appendFile)
-        fs11.appendFile = appendFile;
-      function appendFile(path21, data, options, cb) {
+        fs11.appendFile = appendFile2;
+      function appendFile2(path22, data, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
-        return go$appendFile(path21, data, options, cb);
-        function go$appendFile(path22, data2, options2, cb2, startTime) {
-          return fs$appendFile(path22, data2, options2, function(err) {
+        return go$appendFile(path22, data, options, cb);
+        function go$appendFile(path23, data2, options2, cb2, startTime) {
+          return fs$appendFile(path23, data2, options2, function(err) {
             if (err && (err.code === "EMFILE" || err.code === "ENFILE"))
-              enqueue([go$appendFile, [path22, data2, options2, cb2], err, startTime || Date.now(), Date.now()]);
+              enqueue([go$appendFile, [path23, data2, options2, cb2], err, startTime || Date.now(), Date.now()]);
             else {
               if (typeof cb2 === "function")
                 cb2.apply(this, arguments);
@@ -8241,33 +8241,33 @@ var require_graceful_fs = __commonJS({
         }
       }
       var fs$readdir = fs11.readdir;
-      fs11.readdir = readdir2;
+      fs11.readdir = readdir5;
       var noReaddirOptionVersions = /^v[0-5]\./;
-      function readdir2(path21, options, cb) {
+      function readdir5(path22, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
-        var go$readdir = noReaddirOptionVersions.test(process.version) ? function go$readdir2(path22, options2, cb2, startTime) {
-          return fs$readdir(path22, fs$readdirCallback(
-            path22,
+        var go$readdir = noReaddirOptionVersions.test(process.version) ? function go$readdir2(path23, options2, cb2, startTime) {
+          return fs$readdir(path23, fs$readdirCallback(
+            path23,
             options2,
             cb2,
             startTime
           ));
-        } : function go$readdir2(path22, options2, cb2, startTime) {
-          return fs$readdir(path22, options2, fs$readdirCallback(
-            path22,
+        } : function go$readdir2(path23, options2, cb2, startTime) {
+          return fs$readdir(path23, options2, fs$readdirCallback(
+            path23,
             options2,
             cb2,
             startTime
           ));
         };
-        return go$readdir(path21, options, cb);
-        function fs$readdirCallback(path22, options2, cb2, startTime) {
+        return go$readdir(path22, options, cb);
+        function fs$readdirCallback(path23, options2, cb2, startTime) {
           return function(err, files) {
             if (err && (err.code === "EMFILE" || err.code === "ENFILE"))
               enqueue([
                 go$readdir,
-                [path22, options2, cb2],
+                [path23, options2, cb2],
                 err,
                 startTime || Date.now(),
                 Date.now()
@@ -8338,7 +8338,7 @@ var require_graceful_fs = __commonJS({
         enumerable: true,
         configurable: true
       });
-      function ReadStream(path21, options) {
+      function ReadStream(path22, options) {
         if (this instanceof ReadStream)
           return fs$ReadStream.apply(this, arguments), this;
         else
@@ -8358,7 +8358,7 @@ var require_graceful_fs = __commonJS({
           }
         });
       }
-      function WriteStream(path21, options) {
+      function WriteStream(path22, options) {
         if (this instanceof WriteStream)
           return fs$WriteStream.apply(this, arguments), this;
         else
@@ -8376,22 +8376,22 @@ var require_graceful_fs = __commonJS({
           }
         });
       }
-      function createReadStream(path21, options) {
-        return new fs11.ReadStream(path21, options);
+      function createReadStream(path22, options) {
+        return new fs11.ReadStream(path22, options);
       }
-      function createWriteStream(path21, options) {
-        return new fs11.WriteStream(path21, options);
+      function createWriteStream(path22, options) {
+        return new fs11.WriteStream(path22, options);
       }
       var fs$open = fs11.open;
       fs11.open = open;
-      function open(path21, flags, mode, cb) {
+      function open(path22, flags, mode, cb) {
         if (typeof mode === "function")
           cb = mode, mode = null;
-        return go$open(path21, flags, mode, cb);
-        function go$open(path22, flags2, mode2, cb2, startTime) {
-          return fs$open(path22, flags2, mode2, function(err, fd) {
+        return go$open(path22, flags, mode, cb);
+        function go$open(path23, flags2, mode2, cb2, startTime) {
+          return fs$open(path23, flags2, mode2, function(err, fd) {
             if (err && (err.code === "EMFILE" || err.code === "ENFILE"))
-              enqueue([go$open, [path22, flags2, mode2, cb2], err, startTime || Date.now(), Date.now()]);
+              enqueue([go$open, [path23, flags2, mode2, cb2], err, startTime || Date.now(), Date.now()]);
             else {
               if (typeof cb2 === "function")
                 cb2.apply(this, arguments);
@@ -8882,11 +8882,11 @@ var require_mtime_precision = __commonJS({
     function probe(file2, fs10, callback) {
       const cachedPrecision = fs10[cacheSymbol];
       if (cachedPrecision) {
-        return fs10.stat(file2, (err, stat2) => {
+        return fs10.stat(file2, (err, stat3) => {
           if (err) {
             return callback(err);
           }
-          callback(null, stat2.mtime, cachedPrecision);
+          callback(null, stat3.mtime, cachedPrecision);
         });
       }
       const mtime = new Date(Math.ceil(Date.now() / 1e3) * 1e3 + 5);
@@ -8894,13 +8894,13 @@ var require_mtime_precision = __commonJS({
         if (err) {
           return callback(err);
         }
-        fs10.stat(file2, (err2, stat2) => {
+        fs10.stat(file2, (err2, stat3) => {
           if (err2) {
             return callback(err2);
           }
-          const precision = stat2.mtime.getTime() % 1e3 === 0 ? "s" : "ms";
+          const precision = stat3.mtime.getTime() % 1e3 === 0 ? "s" : "ms";
           Object.defineProperty(fs10, cacheSymbol, { value: precision });
-          callback(null, stat2.mtime, precision);
+          callback(null, stat3.mtime, precision);
         });
       });
     }
@@ -8920,7 +8920,7 @@ var require_mtime_precision = __commonJS({
 var require_lockfile = __commonJS({
   "../../node_modules/.pnpm/proper-lockfile@4.1.2/node_modules/proper-lockfile/lib/lockfile.js"(exports2, module2) {
     "use strict";
-    var path21 = require("path");
+    var path22 = require("path");
     var fs10 = require_graceful_fs();
     var retry = require_retry2();
     var onExit = require_signal_exit();
@@ -8931,7 +8931,7 @@ var require_lockfile = __commonJS({
     }
     function resolveCanonicalPath(file2, options, callback) {
       if (!options.realpath) {
-        return callback(null, path21.resolve(file2));
+        return callback(null, path22.resolve(file2));
       }
       options.fs.realpath(file2, callback);
     }
@@ -8954,14 +8954,14 @@ var require_lockfile = __commonJS({
         if (options.stale <= 0) {
           return callback(Object.assign(new Error("Lock file is already being held"), { code: "ELOCKED", file: file2 }));
         }
-        options.fs.stat(lockfilePath, (err2, stat2) => {
+        options.fs.stat(lockfilePath, (err2, stat3) => {
           if (err2) {
             if (err2.code === "ENOENT") {
               return acquireLock(file2, { ...options, stale: 0 }, callback);
             }
             return callback(err2);
           }
-          if (!isLockStale(stat2, options)) {
+          if (!isLockStale(stat3, options)) {
             return callback(Object.assign(new Error("Lock file is already being held"), { code: "ELOCKED", file: file2 }));
           }
           removeLock(file2, options, (err3) => {
@@ -8973,8 +8973,8 @@ var require_lockfile = __commonJS({
         });
       });
     }
-    function isLockStale(stat2, options) {
-      return stat2.mtime.getTime() < Date.now() - options.stale;
+    function isLockStale(stat3, options) {
+      return stat3.mtime.getTime() < Date.now() - options.stale;
     }
     function removeLock(file2, options, callback) {
       options.fs.rmdir(getLockFile(file2, options), (err) => {
@@ -8992,7 +8992,7 @@ var require_lockfile = __commonJS({
       lock2.updateDelay = lock2.updateDelay || options.update;
       lock2.updateTimeout = setTimeout(() => {
         lock2.updateTimeout = null;
-        options.fs.stat(lock2.lockfilePath, (err, stat2) => {
+        options.fs.stat(lock2.lockfilePath, (err, stat3) => {
           const isOverThreshold = lock2.lastUpdate + options.stale < Date.now();
           if (err) {
             if (err.code === "ENOENT" || isOverThreshold) {
@@ -9001,7 +9001,7 @@ var require_lockfile = __commonJS({
             lock2.updateDelay = 1e3;
             return updateLock(file2, options);
           }
-          const isMtimeOurs = lock2.mtime.getTime() === stat2.mtime.getTime();
+          const isMtimeOurs = lock2.mtime.getTime() === stat3.mtime.getTime();
           if (!isMtimeOurs) {
             return setLockAsCompromised(
               file2,
@@ -9126,11 +9126,11 @@ var require_lockfile = __commonJS({
         if (err) {
           return callback(err);
         }
-        options.fs.stat(getLockFile(file3, options), (err2, stat2) => {
+        options.fs.stat(getLockFile(file3, options), (err2, stat3) => {
           if (err2) {
             return err2.code === "ENOENT" ? callback(null, false) : callback(err2);
           }
-          return callback(null, !isLockStale(stat2, options));
+          return callback(null, !isLockStale(stat3, options));
         });
       });
     }
@@ -10795,10 +10795,10 @@ var require_segments = __commonJS({
       const segs = getSegmentsFromString(data, Utils.isKanjiModeEnabled());
       const nodes = buildNodes(segs);
       const graph = buildGraph(nodes, version2);
-      const path21 = dijkstra.find_path(graph.map, "start", "end");
+      const path22 = dijkstra.find_path(graph.map, "start", "end");
       const optimizedSegs = [];
-      for (let i = 1; i < path21.length - 1; i++) {
-        optimizedSegs.push(graph.table[path21[i]].node);
+      for (let i = 1; i < path22.length - 1; i++) {
+        optimizedSegs.push(graph.table[path22[i]].node);
       }
       return exports2.fromArray(mergeSegments(optimizedSegs));
     };
@@ -13275,7 +13275,7 @@ var require_png2 = __commonJS({
       });
       png.pack();
     };
-    exports2.renderToFile = function renderToFile(path21, qrData, options, cb) {
+    exports2.renderToFile = function renderToFile(path22, qrData, options, cb) {
       if (typeof cb === "undefined") {
         cb = options;
         options = void 0;
@@ -13286,7 +13286,7 @@ var require_png2 = __commonJS({
         called = true;
         cb.apply(null, args);
       };
-      const stream = fs10.createWriteStream(path21);
+      const stream = fs10.createWriteStream(path22);
       stream.on("error", done);
       stream.on("close", done);
       exports2.renderToFileStream(stream, qrData, options);
@@ -13348,14 +13348,14 @@ var require_utf8 = __commonJS({
       }
       return output3;
     };
-    exports2.renderToFile = function renderToFile(path21, qrData, options, cb) {
+    exports2.renderToFile = function renderToFile(path22, qrData, options, cb) {
       if (typeof cb === "undefined") {
         cb = options;
         options = void 0;
       }
       const fs10 = require("fs");
       const utf8 = exports2.render(qrData, options);
-      fs10.writeFile(path21, utf8, cb);
+      fs10.writeFile(path22, utf8, cb);
     };
   }
 });
@@ -13476,7 +13476,7 @@ var require_svg_tag = __commonJS({
       return str;
     }
     function qrToPath(data, size, margin) {
-      let path21 = "";
+      let path22 = "";
       let moveBy = 0;
       let newRow = false;
       let lineLength = 0;
@@ -13487,19 +13487,19 @@ var require_svg_tag = __commonJS({
         if (data[i]) {
           lineLength++;
           if (!(i > 0 && col > 0 && data[i - 1])) {
-            path21 += newRow ? svgCmd("M", col + margin, 0.5 + row + margin) : svgCmd("m", moveBy, 0);
+            path22 += newRow ? svgCmd("M", col + margin, 0.5 + row + margin) : svgCmd("m", moveBy, 0);
             moveBy = 0;
             newRow = false;
           }
           if (!(col + 1 < size && data[i + 1])) {
-            path21 += svgCmd("h", lineLength);
+            path22 += svgCmd("h", lineLength);
             lineLength = 0;
           }
         } else {
           moveBy++;
         }
       }
-      return path21;
+      return path22;
     }
     exports2.render = function render(qrData, options, cb) {
       const opts = Utils.getOptions(options);
@@ -13507,10 +13507,10 @@ var require_svg_tag = __commonJS({
       const data = qrData.modules.data;
       const qrcodesize = size + opts.margin * 2;
       const bg = !opts.color.light.a ? "" : "<path " + getColorAttrib(opts.color.light, "fill") + ' d="M0 0h' + qrcodesize + "v" + qrcodesize + 'H0z"/>';
-      const path21 = "<path " + getColorAttrib(opts.color.dark, "stroke") + ' d="' + qrToPath(data, size, opts.margin) + '"/>';
+      const path22 = "<path " + getColorAttrib(opts.color.dark, "stroke") + ' d="' + qrToPath(data, size, opts.margin) + '"/>';
       const viewBox = 'viewBox="0 0 ' + qrcodesize + " " + qrcodesize + '"';
       const width = !opts.width ? "" : 'width="' + opts.width + '" height="' + opts.width + '" ';
-      const svgTag = '<svg xmlns="http://www.w3.org/2000/svg" ' + width + viewBox + ' shape-rendering="crispEdges">' + bg + path21 + "</svg>\n";
+      const svgTag = '<svg xmlns="http://www.w3.org/2000/svg" ' + width + viewBox + ' shape-rendering="crispEdges">' + bg + path22 + "</svg>\n";
       if (typeof cb === "function") {
         cb(null, svgTag);
       }
@@ -13524,7 +13524,7 @@ var require_svg = __commonJS({
   "../../node_modules/.pnpm/qrcode@1.5.4/node_modules/qrcode/lib/renderer/svg.js"(exports2) {
     var svgTagRenderer = require_svg_tag();
     exports2.render = svgTagRenderer.render;
-    exports2.renderToFile = function renderToFile(path21, qrData, options, cb) {
+    exports2.renderToFile = function renderToFile(path22, qrData, options, cb) {
       if (typeof cb === "undefined") {
         cb = options;
         options = void 0;
@@ -13532,7 +13532,7 @@ var require_svg = __commonJS({
       const fs10 = require("fs");
       const svgTag = exports2.render(qrData, options);
       const xmlStr = '<?xml version="1.0" encoding="utf-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">' + svgTag;
-      fs10.writeFile(path21, xmlStr, cb);
+      fs10.writeFile(path22, xmlStr, cb);
     };
   }
 });
@@ -13690,8 +13690,8 @@ var require_server = __commonJS({
         cb
       };
     }
-    function getTypeFromFilename(path21) {
-      return path21.slice((path21.lastIndexOf(".") - 1 >>> 0) + 2).toLowerCase();
+    function getTypeFromFilename(path22) {
+      return path22.slice((path22.lastIndexOf(".") - 1 >>> 0) + 2).toLowerCase();
     }
     function getRendererFromType(type) {
       switch (type) {
@@ -13755,17 +13755,17 @@ var require_server = __commonJS({
       const renderer = getRendererFromType(params.opts.type);
       return render(renderer.renderToBuffer, text, params);
     };
-    exports2.toFile = function toFile(path21, text, opts, cb) {
-      if (typeof path21 !== "string" || !(typeof text === "string" || typeof text === "object")) {
+    exports2.toFile = function toFile(path22, text, opts, cb) {
+      if (typeof path22 !== "string" || !(typeof text === "string" || typeof text === "object")) {
         throw new Error("Invalid argument");
       }
       if (arguments.length < 3 && !canPromise()) {
         throw new Error("Too few arguments provided");
       }
       const params = checkParams(text, opts, cb);
-      const type = params.opts.type || getTypeFromFilename(path21);
+      const type = params.opts.type || getTypeFromFilename(path22);
       const renderer = getRendererFromType(type);
-      const renderToFile = renderer.renderToFile.bind(null, path21);
+      const renderToFile = renderer.renderToFile.bind(null, path22);
       return render(renderToFile, text, params);
     };
     exports2.toFileStream = function toFileStream(stream, text, opts) {
@@ -16983,8 +16983,8 @@ var require_utils3 = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path21) {
-      let input = path21;
+    function removeDotSegments(path22) {
+      let input = path22;
       const output3 = [];
       let nextSlash = -1;
       let len = 0;
@@ -17236,8 +17236,8 @@ var require_schemes = __commonJS({
         wsComponent.secure = void 0;
       }
       if (wsComponent.resourceName) {
-        const [path21, query] = wsComponent.resourceName.split("?");
-        wsComponent.path = path21 && path21 !== "/" ? path21 : void 0;
+        const [path22, query] = wsComponent.resourceName.split("?");
+        wsComponent.path = path22 && path22 !== "/" ? path22 : void 0;
         wsComponent.query = query;
         wsComponent.resourceName = void 0;
       }
@@ -20644,11 +20644,11 @@ var require_dist = __commonJS({
 });
 
 // src/bin.ts
-var import_node_path25 = __toESM(require("node:path"), 1);
+var import_node_path30 = __toESM(require("node:path"), 1);
 var import_node_child_process18 = require("node:child_process");
 var import_node_fs17 = require("node:fs");
 var import_node_os15 = require("node:os");
-var import_node_path26 = __toESM(require("node:path"), 1);
+var import_node_path31 = __toESM(require("node:path"), 1);
 
 // src/install-codex.ts
 var import_promises = __toESM(require("node:fs/promises"), 1);
@@ -21474,9 +21474,9 @@ async function verifyProviderReadiness(provider, run3, opts = {}) {
 var import_node_fs16 = __toESM(require("node:fs"), 1);
 var import_node_http = __toESM(require("node:http"), 1);
 var import_node_os11 = __toESM(require("node:os"), 1);
-var import_node_path20 = __toESM(require("node:path"), 1);
+var import_node_path23 = __toESM(require("node:path"), 1);
 var import_node_child_process15 = require("node:child_process");
-var import_node_crypto8 = __toESM(require("node:crypto"), 1);
+var import_node_crypto9 = __toESM(require("node:crypto"), 1);
 
 // src/turn-replay-buffer.ts
 var DEFAULT_MAX_EVENTS = 2e3;
@@ -22124,13 +22124,21 @@ var CodexBridgeEventMapper = class {
       const buffered = this.outputBuffers.get(item.id);
       this.outputBuffers.delete(item.id);
       let content = "";
-      if (item.type === "commandExecution")
-        content = buffered ?? item.stdout ?? `exit code: ${item.exitCode ?? 0}`;
+      if (item.type === "commandExecution") {
+        content = buffered ?? item.stdout ?? (item.exitCode !== void 0 ? `exit code: ${item.exitCode}` : "exit code: none");
+      }
       if (item.type === "fileChange")
         content = buffered ?? item.content ?? "";
       if (item.type === "mcpToolCall")
         content = item.result ?? "";
-      events.push({ type: "tool_result", tool: { id: item.id }, content });
+      const tool = { id: item.id };
+      if (item.type === "commandExecution") {
+        if (item.exitCode !== void 0)
+          tool.exitCode = item.exitCode;
+        if (item.status !== void 0)
+          tool.status = item.status;
+      }
+      events.push({ type: "tool_result", tool, content });
     }
     return events;
   }
@@ -22960,10 +22968,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path21) {
-  if (!path21)
+function getElementAtPath(obj, path22) {
+  if (!path22)
     return obj;
-  return path21.reduce((acc, key) => acc?.[key], obj);
+  return path22.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -23372,11 +23380,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path21, issues) {
+function prefixIssues(path22, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path21);
+    iss.path.unshift(path22);
     return iss;
   });
 }
@@ -23523,16 +23531,16 @@ function flattenError(error51, mapper = (issue2) => issue2.message) {
 }
 function formatError(error51, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error52, path21 = []) => {
+  const processError = (error52, path22 = []) => {
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path21, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path22, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path21, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path22, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path21, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path22, ...issue2.path]);
       } else {
-        const fullpath = [...path21, ...issue2.path];
+        const fullpath = [...path22, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -23559,17 +23567,17 @@ function formatError(error51, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error51, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error52, path21 = []) => {
+  const processError = (error52, path22 = []) => {
     var _a3, _b;
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path21, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path22, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path21, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path22, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path21, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path22, ...issue2.path]);
       } else {
-        const fullpath = [...path21, ...issue2.path];
+        const fullpath = [...path22, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -23601,8 +23609,8 @@ function treeifyError(error51, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path21 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path21) {
+  const path22 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path22) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -36294,13 +36302,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path21 = ref.slice(1).split("/").filter(Boolean);
-  if (path21.length === 0) {
+  const path22 = ref.slice(1).split("/").filter(Boolean);
+  if (path22.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path21[0] === defsKey) {
-    const key = path21[1];
+  if (path22[0] === defsKey) {
+    const key = path22[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -36833,7 +36841,8 @@ var openApiOperationIds = {
   promoteSpecReadyCas: "promoteSpecReadyCas",
   recordSpecConsensusReview: "recordSpecConsensusReview",
   getSpecConsensusReview: "getSpecConsensusReview",
-  onboardingKickoffTransition: "onboardingKickoffTransition"
+  onboardingKickoffTransition: "onboardingKickoffTransition",
+  ingestTelemetry: "ingestTelemetry"
 };
 
 // ../../packages/schemas/dist/session.js
@@ -37074,6 +37083,116 @@ var mrrlinAsyncJobRequeueSchema = external_exports.object({
   staleSeconds: external_exports.number().int().min(60).max(86400).default(300)
 });
 
+// ../../packages/schemas/dist/telemetry.js
+var LOG_PROJECTION_KINDS = ["tool_use", "tool_result", "turn_lifecycle", "plumbing"];
+var PLUMBING_KINDS = [
+  "socket_close",
+  "ready",
+  "scheduler_tick",
+  "buffer_stats",
+  "rate_limit_status"
+];
+var TURN_LIFECYCLES = ["completed", "failed", "interrupted"];
+var TOOL_OUTCOMES = ["success", "error", "unknown"];
+var GATE_MARKERS = ["gated", "projection-only"];
+var logProjectionSchema = external_exports.object({
+  kind: external_exports.enum(LOG_PROJECTION_KINDS),
+  sessionId: external_exports.string(),
+  seq: external_exports.number(),
+  projectSlug: external_exports.string().optional(),
+  turnId: external_exports.string().optional(),
+  toolId: external_exports.string().optional(),
+  toolName: external_exports.string().optional(),
+  plumbingKind: external_exports.enum(PLUMBING_KINDS).optional(),
+  // lifecycle et al: kind "turn_lifecycle" only — the aggregator's sole legal source for these,
+  // since it may never read `payload` and TurnTelemetry/TurnTokenUsage are runtime objects, not
+  // projections. No "started" value: nothing emits it.
+  lifecycle: external_exports.enum(TURN_LIFECYCLES).optional(),
+  promptBytes: external_exports.number().optional(),
+  inputTokens: external_exports.number().nullable().optional(),
+  cachedInputTokens: external_exports.number().nullable().optional(),
+  outputTokens: external_exports.number().nullable().optional(),
+  rateLimitReached: external_exports.boolean().optional(),
+  argKeys: external_exports.array(external_exports.string()).optional(),
+  binary: external_exports.string().optional(),
+  cwdIsRealCheckout: external_exports.boolean().optional(),
+  ms: external_exports.number().optional(),
+  bytes: external_exports.number().optional(),
+  truncated: external_exports.boolean().optional(),
+  exitCode: external_exports.number().optional(),
+  outcome: external_exports.enum(TOOL_OUTCOMES).optional(),
+  statusHash: external_exports.string().nullable().optional()
+});
+var toolSequenceEntrySchema = external_exports.object({
+  toolName: external_exports.string(),
+  ms: external_exports.number(),
+  outcome: external_exports.enum(TOOL_OUTCOMES)
+});
+var telemetryRowSchema = external_exports.object({
+  day: external_exports.string(),
+  sessionId: external_exports.string(),
+  turnId: external_exports.string().nullable(),
+  toolSequence: external_exports.array(toolSequenceEntrySchema),
+  promptBytes: external_exports.number().nullable(),
+  inputTokens: external_exports.number().nullable(),
+  cachedInputTokens: external_exports.number().nullable(),
+  outputTokens: external_exports.number().nullable(),
+  resultRecordPresent: external_exports.boolean(),
+  // one counter per plumbingKind, so no projected kind is silently uncounted
+  plumbing: external_exports.object({
+    socketCloses: external_exports.number(),
+    readyNotifs: external_exports.number(),
+    schedulerTicks: external_exports.number(),
+    bufferStats: external_exports.number(),
+    rateLimitStatusRecords: external_exports.number(),
+    rateLimitReached: external_exports.boolean()
+  }),
+  projectionFailures: external_exports.number(),
+  gateMarker: external_exports.enum(GATE_MARKERS)
+});
+var telemetryBatchSchema = external_exports.object({
+  day: external_exports.string(),
+  bridgeVersion: external_exports.string(),
+  knownCrashCount: external_exports.number(),
+  // pairs still lacking .processed-* after this run completes; a project that never uploads at
+  // all cannot report its own gap this way — silence is not coverage.
+  unprocessedPartitions: external_exports.array(external_exports.object({ projectSlug: external_exports.string(), day: external_exports.string() })),
+  rows: external_exports.array(telemetryRowSchema)
+});
+var evidenceStepSchema = external_exports.object({
+  toolName: external_exports.string(),
+  ms: external_exports.number(),
+  outcome: external_exports.enum(TOOL_OUTCOMES),
+  exitCode: external_exports.number().optional(),
+  excerpt: external_exports.string().optional()
+});
+var evidenceArtifactSchema = external_exports.object({
+  reportId: external_exports.string(),
+  sessionId: external_exports.string(),
+  turnIds: external_exports.array(external_exports.string()),
+  daysRead: external_exports.array(external_exports.string()),
+  windowPruned: external_exports.boolean(),
+  steps: external_exports.array(evidenceStepSchema),
+  gateMarker: external_exports.enum(GATE_MARKERS)
+});
+var extractManifestSchema = external_exports.object({
+  reportId: external_exports.string().optional(),
+  sessionId: external_exports.string().optional(),
+  since: external_exports.string().optional(),
+  until: external_exports.string().optional(),
+  daysRead: external_exports.array(external_exports.string()),
+  recordCount: external_exports.number(),
+  bytesBeforeTruncation: external_exports.number(),
+  truncated: external_exports.boolean(),
+  secretShapesRedacted: external_exports.number(),
+  // null when --out was used and nothing was uploaded
+  deliveredArtifactId: external_exports.string().nullable()
+});
+var ingestResultSchema = external_exports.object({
+  accepted: external_exports.number(),
+  unknownCounts: external_exports.record(external_exports.string(), external_exports.object({ count: external_exports.number(), valueLength: external_exports.number() }))
+});
+
 // ../../packages/schemas/dist/memory-budget.js
 function evictionKey(item, idx) {
   const memClass = item.memoryClass === "historical" ? 0 : 1;
@@ -39390,11 +39509,21 @@ var ClaudeBridgeEventMapper = class {
     return [{ type: "rate_limits", snapshot }];
   }
   handleResult(line) {
+    const tokenUsageEvents = line.usage !== void 0 ? [
+      {
+        type: "token_usage",
+        usage: {
+          inputTokens: line.usage.input_tokens ?? null,
+          cachedInputTokens: line.usage.cache_read_input_tokens ?? null,
+          outputTokens: line.usage.output_tokens ?? null
+        }
+      }
+    ] : [];
     if (line.is_error === true) {
       const content = typeof line.result === "string" && line.result ? line.result : "Unknown Claude error";
-      return [{ type: "error", content }, { type: "turn_completed" }];
+      return [...tokenUsageEvents, { type: "error", content }, { type: "turn_completed" }];
     }
-    return [{ type: "result", subtype: "success" }, { type: "turn_completed" }];
+    return [...tokenUsageEvents, { type: "result", subtype: "success" }, { type: "turn_completed" }];
   }
   contentBlocks(line) {
     const content = line.message?.content;
@@ -39997,18 +40126,18 @@ function createMrrlinClient(config2) {
   const customFetch = config2.fetch ?? globalThis.fetch;
   const baseUrl = config2.baseUrl.replace(/\/$/, "");
   const token = config2.token;
-  async function request(path21, init) {
+  async function request(path22, init) {
     const method = init?.method ?? "GET";
     const headers = new Headers(init?.headers ?? {});
     if (token && !headers.has("authorization")) {
       headers.set("authorization", `Bearer ${token}`);
     }
-    const response = await customFetch(`${baseUrl}${path21}`, { ...init, headers });
+    const response = await customFetch(`${baseUrl}${path22}`, { ...init, headers });
     if (!response.ok) {
       const body = await response.text();
       let code = `HTTP_${response.status}`;
       let violations = null;
-      let message = `Mrrlin API ${method} ${path21} failed: ${response.status}`;
+      let message = `Mrrlin API ${method} ${path22} failed: ${response.status}`;
       try {
         const parsed = JSON.parse(body);
         const violationsParsed = apiViolationsErrorSchema.safeParse(parsed);
@@ -40028,7 +40157,7 @@ function createMrrlinClient(config2) {
       throw new MrrlinApiError({
         code,
         method,
-        path: path21,
+        path: path22,
         responseBody: body,
         status: response.status,
         violations,
@@ -40288,16 +40417,16 @@ function createMrrlinClient(config2) {
     // rejected against the first, MrrlinTask[]-only overload) -- the `any` here is contained to
     // this one implementation signature; MrrlinClient's declared overloads keep callers precise.
     async listTasks(projectSlug, filters = {}, options) {
-      const path21 = buildTaskListPath(projectSlug, filters, options?.view);
-      const body = await request(path21);
+      const path22 = buildTaskListPath(projectSlug, filters, options?.view);
+      const body = await request(path22);
       if (options?.view === "summary") {
         return taskSummaryListResponseSchema.parse(body).data;
       }
       return taskListResponseSchema.parse(body).data;
     },
     async listTaskSummaries(projectSlug, filters = {}) {
-      const path21 = buildTaskListPath(projectSlug, filters, "summary");
-      const body = await request(path21);
+      const path22 = buildTaskListPath(projectSlug, filters, "summary");
+      const body = await request(path22);
       return taskSummaryListResponseSchema.parse(body).data;
     },
     async listTaxonomy(projectSlug) {
@@ -40305,22 +40434,22 @@ function createMrrlinClient(config2) {
       return taxonomyListResponseSchema.parse(body).data;
     },
     async listWikiPages(projectSlug, filters = {}) {
-      const path21 = appendQuery(`${projectPath(projectSlug)}/wiki`, {
+      const path22 = appendQuery(`${projectPath(projectSlug)}/wiki`, {
         folder: filters.folder,
         q: filters.q,
         taskId: filters.taskId
       });
-      const body = await request(path21);
+      const body = await request(path22);
       return wikiPageListResponseSchema.parse(body).data;
     },
     async searchWikiPages(projectSlug, query) {
-      const path21 = appendQuery(`${projectPath(projectSlug)}/wiki/search`, {
+      const path22 = appendQuery(`${projectPath(projectSlug)}/wiki/search`, {
         folder: query.folder,
         limit: query.limit === void 0 ? void 0 : String(query.limit),
         pathPrefix: query.pathPrefix,
         q: query.q
       });
-      const body = await request(path21);
+      const body = await request(path22);
       return wikiPageSearchResponseSchema.parse(body).data;
     },
     async updatePlan(projectSlug, planId, patch) {
@@ -40710,6 +40839,14 @@ function createMrrlinClient(config2) {
       });
       return executionArtifactResponseSchema.parse(body).data;
     },
+    async postTelemetry(projectSlug, batch) {
+      const body = await request(`${projectPath(projectSlug)}/telemetry`, {
+        body: JSON.stringify(batch),
+        headers: { "content-type": "application/json" },
+        method: "POST"
+      });
+      return ingestResultSchema.parse(body);
+    },
     async createArtifactFile(projectSlug, input) {
       const body = await request(`${projectPath(projectSlug)}/artifact-files`, {
         body: JSON.stringify(input),
@@ -41179,7 +41316,7 @@ function sha256(buf) {
 function startSelfUpdate(deps) {
   const log = deps.log ?? (() => {
   });
-  const readFile3 = deps.readFileSyncImpl ?? ((p) => (0, import_node_fs2.readFileSync)(p));
+  const readFile9 = deps.readFileSyncImpl ?? ((p) => (0, import_node_fs2.readFileSync)(p));
   const setIntervalFn = deps.setIntervalImpl ?? setInterval;
   const clearIntervalFn = deps.clearIntervalImpl ?? clearInterval;
   const intervalMs = deps.intervalMs ?? readIntervalEnv("MRRLIN_DIRECTOR_BRIDGE_SELF_UPDATE_INTERVAL_MS", DEFAULT_INTERVAL_MS);
@@ -41235,7 +41372,7 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
   }
   let startupBinSha = null;
   try {
-    startupBinSha = sha256(readFile3(deps.binPath));
+    startupBinSha = sha256(readFile9(deps.binPath));
   } catch (e) {
     log("warn", "bridge.self_update.startup_hash_read_failed", {
       err: String(e?.message ?? e)
@@ -41314,14 +41451,14 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
       try {
         if (!startupBinSha) {
           try {
-            startupBinSha = sha256(readFile3(deps.binPath));
+            startupBinSha = sha256(readFile9(deps.binPath));
           } catch {
             return;
           }
         }
         let currentBinSha;
         try {
-          currentBinSha = sha256(readFile3(deps.binPath));
+          currentBinSha = sha256(readFile9(deps.binPath));
         } catch {
           return;
         }
@@ -41400,7 +41537,7 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.4.6";
+var PKG_VERSION = "0.4.7";
 
 // src/api-base-url-migrate.ts
 var import_node_fs3 = __toESM(require("node:fs"), 1);
@@ -41711,6 +41848,7 @@ var BridgeHealthTracker = class {
   now;
   processExit;
   logger;
+  hasLiveTurn;
   // Initialized to construction time, NOT 0/undefined: a freshly (re)started process — including
   // one that just restarted BECAUSE this breaker tripped — must not treat its own startup instant
   // as "ages ago that nothing succeeded." Without this, the very first tracked failure after any
@@ -41718,14 +41856,21 @@ var BridgeHealthTracker = class {
   // seconds and inverting this mechanism into the outage it exists to prevent.
   lastSuccessAt;
   disabled = false;
-  knownCrashCount = null;
+  // Renamed from knownCrashCount to _knownCrashCount (task 9.4): a class can't have both a
+  // private field and a public method of the same name, and 9.4 asks for the public getter to be
+  // named knownCrashCount().
+  _knownCrashCount = null;
   lastErrorByOperation = /* @__PURE__ */ new Map();
+  // Rate-limits the "deferring crash-exit" log to once per 60s so a tight sweep-retry loop
+  // while a turn stays live doesn't spam it -- the defer itself still applies every call.
+  lastLiveTurnDeferLogAt = null;
   constructor(opts) {
     this.stateDir = opts.stateDir;
     this.stuckMs = opts.stuckMs ?? readStuckMsFromEnv() ?? DEFAULT_STUCK_MS;
     this.now = opts.now ?? Date.now;
     this.processExit = opts.processExit ?? ((code) => process.exit(code));
     this.logger = opts.logger ?? defaultLogger;
+    this.hasLiveTurn = opts.hasLiveTurn ?? (() => false);
     this.lastSuccessAt = this.now();
   }
   /** Wraps a tracked operation: applies the hard timeout, records the outcome, and re-throws or
@@ -41742,13 +41887,18 @@ var BridgeHealthTracker = class {
   }
   async recordSuccess() {
     this.lastSuccessAt = this.now();
-    if (this.knownCrashCount === null) {
+    if (this._knownCrashCount === null) {
       await this.reconcileCrashCountOnFirstSuccess();
     }
   }
   recordFailure(id, error51) {
     this.lastErrorByOperation.set(id, error51 instanceof Error ? error51.message : String(error51));
   }
+  /** `null` until the first success reconciles it (see `recordSuccess`) — read by
+   *  `daily-uploader.ts`, which stamps the captured value on every `TelemetryBatch` in a run. */
+  knownCrashCount() {
+    return this._knownCrashCount;
+  }
   /** True when no tracked operation has succeeded within `stuckMs`. */
   isStuck() {
     return this.now() - this.lastSuccessAt >= this.stuckMs;
@@ -41758,6 +41908,23 @@ var BridgeHealthTracker = class {
   async maybeCrash() {
     if (this.disabled) return;
     if (!this.isStuck()) return;
+    let hasLiveTurn = false;
+    try {
+      hasLiveTurn = this.hasLiveTurn();
+    } catch (error51) {
+      const message = error51 instanceof Error ? error51.message : String(error51);
+      this.logger.critical(`bridge health: hasLiveTurn() threw, treating as no live turn: ${message}`);
+    }
+    if (hasLiveTurn) {
+      const now = this.now();
+      if (this.lastLiveTurnDeferLogAt === null || now - this.lastLiveTurnDeferLogAt >= 6e4) {
+        this.logger.critical(
+          "bridge health: stuck but a Director turn is still active/resumable \u2014 deferring crash-exit"
+        );
+        this.lastLiveTurnDeferLogAt = now;
+      }
+      return;
+    }
     const decision = await this.decideExitOrDisable();
     if (decision.exit) {
       this.logger.critical(
@@ -41784,10 +41951,10 @@ var BridgeHealthTracker = class {
   }
   async reconcileCrashCountOnFirstSuccess() {
     const sentinel = await readCrashSentinel(this.stateDir, this.now);
-    this.knownCrashCount = sentinel.crashCount;
+    this._knownCrashCount = sentinel.crashCount;
     if (sentinel.crashCount > 0) {
       await writeCrashSentinel(this.stateDir, { ...sentinel, crashCount: 0 });
-      this.knownCrashCount = 0;
+      this._knownCrashCount = 0;
     }
   }
   formatLastErrors() {
@@ -41930,386 +42097,272 @@ function startSchedulerTickLoop(deps) {
   };
 }
 
-// src/agent-pool-snapshot.ts
-function normalizeLastUsedAt(value) {
-  if (value === void 0 || value === null) return null;
-  if (typeof value === "number") {
-    if (!Number.isFinite(value)) return null;
-    const ms = value < 1e12 ? value * 1e3 : value;
-    const date5 = new Date(ms);
-    return Number.isNaN(date5.getTime()) ? null : date5.toISOString();
-  }
-  return value;
-}
-function buildAgentPoolSnapshot(statusRows, stats, opts) {
-  if (!opts.available) {
-    return {
-      collected_at: opts.collectedAt,
-      status: "unavailable",
-      agents: [],
-      totals: { calls: 0, tokens_in: 0, tokens_out: 0 },
-      estimated_savings_usd: 0
-    };
-  }
-  const costPer1M = opts.paidCostPer1MTokens ?? 3;
-  const agents = statusRows.map((row) => {
-    const agentStats = stats.by_agent[row.id];
-    const count2 = agentStats?.count ?? 0;
-    const tokensIn = agentStats?.tokens_in ?? 0;
-    const tokensOut = agentStats?.tokens_out ?? 0;
-    let successRate = 0;
-    if (count2 > 0) {
-      const successOutcomes = agentStats?.outcomes.success ?? 0;
-      successRate = Number((successOutcomes / count2 * 100).toFixed(2)) / 100;
+// src/retention/pruner.ts
+var import_promises4 = require("node:fs/promises");
+var import_node_path9 = __toESM(require("node:path"), 1);
+async function prune(stateDir, bounds) {
+  const logsDir = import_node_path9.default.join(stateDir, "logs");
+  let entries;
+  try {
+    entries = await (0, import_promises4.readdir)(logsDir);
+  } catch (err) {
+    if (err?.code === "ENOENT") {
+      await emitPruneLog(stateDir, [], {}, 0, null);
+      return { daysRemoved: [], reasonByDay: {}, bytesRemoved: 0, oldestDayRemaining: null };
     }
-    return {
-      id: row.id,
-      provider: row.provider,
-      tier: row.tier,
-      tags: row.tags,
-      state: row.state ?? "unknown",
-      calls: count2,
-      tokens_in: tokensIn,
-      tokens_out: tokensOut,
-      success_rate: successRate,
-      last_used_at: normalizeLastUsedAt(row.last_used_at)
-    };
-  });
-  let totalCalls = 0;
-  let totalTokensIn = 0;
-  let totalTokensOut = 0;
-  for (const entry of Object.values(stats.by_agent)) {
-    totalCalls += entry.count;
-    totalTokensIn += entry.tokens_in;
-    totalTokensOut += entry.tokens_out;
+    throw err;
   }
-  let savedTokens = 0;
-  for (const row of statusRows) {
-    if (row.tags.includes("free")) {
-      const agentStats = stats.by_agent[row.id];
-      if (agentStats) {
-        savedTokens += agentStats.tokens_in + agentStats.tokens_out;
+  const bridgeRe = /^bridge-(\d{4}-\d{2}-\d{2})\.jsonl$/;
+  const files = [];
+  for (const entry of entries) {
+    const m = bridgeRe.exec(entry);
+    if (!m?.[1]) continue;
+    const fullPath = import_node_path9.default.join(logsDir, entry);
+    const s = await (0, import_promises4.stat)(fullPath);
+    files.push({ day: m[1], size: s.size, fullPath });
+  }
+  files.sort((a, b) => a.day < b.day ? -1 : a.day > b.day ? 1 : 0);
+  const daysRemoved = [];
+  const reasonByDay = {};
+  let bytesRemoved = 0;
+  async function isDaySafeToDelete(day) {
+    const telemetryDir = import_node_path9.default.join(stateDir, "telemetry");
+    let telemetryEntries;
+    try {
+      telemetryEntries = await (0, import_promises4.readdir)(telemetryDir);
+    } catch (err) {
+      if (err?.code === "ENOENT") return true;
+      throw err;
+    }
+    const rowRe = new RegExp(`^rows-(.+)-${day}\\.jsonl$`);
+    const projectSlugs = [];
+    for (const entry of telemetryEntries) {
+      const m = rowRe.exec(entry);
+      if (m?.[1]) projectSlugs.push(m[1]);
+    }
+    if (projectSlugs.length === 0) return true;
+    for (const slug of projectSlugs) {
+      const markerPath = import_node_path9.default.join(telemetryDir, `.processed-${slug}-${day}`);
+      try {
+        await (0, import_promises4.stat)(markerPath);
+      } catch (err) {
+        if (err?.code === "ENOENT") return false;
+        throw err;
       }
     }
+    return true;
   }
-  const estimatedSavings = Number((savedTokens / 1e6 * costPer1M).toFixed(2));
-  return {
-    collected_at: opts.collectedAt,
-    status: "ok",
-    agents,
-    totals: {
-      calls: totalCalls,
-      tokens_in: totalTokensIn,
-      tokens_out: totalTokensOut
-    },
-    estimated_savings_usd: estimatedSavings
-  };
-}
-
-// src/agent-pool-collector.ts
-async function collectAgentPoolSnapshot(deps) {
-  let statusRows;
-  let stats;
-  try {
-    const statusResult = await deps.runCli(["status", "--json"]);
-    if (statusResult.code !== 0) throw new Error("non-zero exit on status");
-    let statusParsed;
-    try {
-      statusParsed = JSON.parse(statusResult.stdout);
-    } catch {
-      throw new Error("invalid status json");
+  const budgetBytes = bounds.budgetMb * 1024 * 1024;
+  let totalSize2 = files.reduce((sum, f) => sum + f.size, 0);
+  let i = 0;
+  while (totalSize2 > budgetBytes && i < files.length) {
+    const candidate = files[i];
+    if (!candidate) break;
+    if (!await isDaySafeToDelete(candidate.day)) {
+      i += 1;
+      continue;
     }
-    if (!Array.isArray(statusParsed)) throw new Error("status not array");
-    statusRows = statusParsed;
-    const statsResult = await deps.runCli(["stats", "--json"]);
-    if (statsResult.code !== 0) throw new Error("non-zero exit on stats");
+    await (0, import_promises4.unlink)(candidate.fullPath);
+    daysRemoved.push(candidate.day);
+    reasonByDay[candidate.day] = "size";
+    bytesRemoved += candidate.size;
+    totalSize2 -= candidate.size;
+    files.splice(i, 1);
+  }
+  const now = Date.now();
+  const msPerDay = 864e5;
+  const stillRemaining = [];
+  for (const info of files) {
+    const fileDate = /* @__PURE__ */ new Date(`${info.day}T00:00:00Z`);
+    const ageInDays = (now - fileDate.getTime()) / msPerDay;
+    if (ageInDays > bounds.ageDays && await isDaySafeToDelete(info.day)) {
+      await (0, import_promises4.unlink)(info.fullPath);
+      daysRemoved.push(info.day);
+      reasonByDay[info.day] = "age";
+      bytesRemoved += info.size;
+      continue;
+    }
+    stillRemaining.push(info);
+  }
+  const oldestDayRemaining = stillRemaining.length > 0 ? stillRemaining[0]?.day ?? null : null;
+  await emitPruneLog(stateDir, daysRemoved, reasonByDay, bytesRemoved, oldestDayRemaining);
+  if (daysRemoved.length > 0) {
+    const sessionsPath = import_node_path9.default.join(logsDir, ".sessions.json");
+    let sessionsObj = {};
+    let fileExists = true;
     try {
-      stats = JSON.parse(statsResult.stdout);
-    } catch {
-      throw new Error("invalid stats json");
+      sessionsObj = JSON.parse(await (0, import_promises4.readFile)(sessionsPath, "utf8"));
+    } catch (err) {
+      if (err?.code === "ENOENT") {
+        fileExists = false;
+      } else {
+        sessionsObj = {};
+      }
+    }
+    if (fileExists) {
+      for (const day of daysRemoved) delete sessionsObj[day];
+      const tmpPath = `${sessionsPath}.tmp`;
+      await (0, import_promises4.writeFile)(tmpPath, JSON.stringify(sessionsObj));
+      await (0, import_promises4.rename)(tmpPath, sessionsPath);
     }
-  } catch {
-    return buildAgentPoolSnapshot(
-      [],
-      {},
-      { collectedAt: deps.now(), available: false }
-    );
   }
-  return buildAgentPoolSnapshot(
-    statusRows,
-    stats,
-    { collectedAt: deps.now(), paidCostPer1MTokens: deps.paidCostPer1MTokens, available: true }
-  );
+  return { daysRemoved, reasonByDay, bytesRemoved, oldestDayRemaining };
+}
+async function emitPruneLog(stateDir, daysRemoved, reasonByDay, bytesRemoved, oldestDayRemaining) {
+  const logsDir = import_node_path9.default.join(stateDir, "logs");
+  const logPath = import_node_path9.default.join(logsDir, ".pruned.jsonl");
+  await (0, import_promises4.mkdir)(logsDir, { recursive: true });
+  const record2 = { ts: Date.now(), dir: "logs", daysRemoved, reasonByDay, bytesRemoved, oldestDayRemaining };
+  await (0, import_promises4.appendFile)(logPath, `${JSON.stringify(record2)}
+`);
 }
 
-// src/external-agents-spawn.ts
-var import_node_child_process8 = require("node:child_process");
-
-// src/external-agents-bin.ts
-function resolveExternalAgentsCliInvocation(override) {
-  if (override && override.trim()) return { command: override, prefixArgs: [] };
+// src/telemetry/turn-aggregator.ts
+var import_promises5 = require("node:fs/promises");
+var import_node_path10 = require("node:path");
+var BRIDGE_FILE_RE = /^bridge-(\d{4}-\d{2}-\d{2})\.jsonl$/;
+var PLUMBING_COUNTER_KEY = {
+  socket_close: "socketCloses",
+  ready: "readyNotifs",
+  scheduler_tick: "schedulerTicks",
+  buffer_stats: "bufferStats",
+  rate_limit_status: "rateLimitStatusRecords"
+};
+async function foldClosedDays(stateDir, today) {
+  const logsDir = (0, import_node_path10.join)(stateDir, "logs");
+  let entries;
   try {
-    return {
-      command: "node",
-      prefixArgs: [resolvePackageBin("@mrrlin-dev/external-agents", "external-agents")]
-    };
+    entries = await (0, import_promises5.readdir)(logsDir);
   } catch {
-    return { command: "external-agents", prefixArgs: [] };
-  }
-}
-
-// src/external-agents-spawn.ts
-function runExternalAgentsCli(args, opts) {
-  let command;
-  let prefixArgs;
-  let source;
-  let triedPath;
-  if (opts.envCliPath && opts.envCliPath.trim()) {
-    command = "node";
-    prefixArgs = [opts.envCliPath];
-    source = "env";
-    triedPath = opts.envCliPath;
-  } else {
-    ({ command, prefixArgs } = resolveExternalAgentsCliInvocation());
-    source = command === "node" && prefixArgs.length === 1 ? "bundled" : "path";
-    triedPath = source === "bundled" ? prefixArgs[0] ?? "" : "external-agents (PATH)";
+    return;
   }
-  const useStdin = opts.stdinValue !== void 0;
-  const stdioConfig = useStdin ? ["pipe", "pipe", "pipe"] : ["ignore", "pipe", "pipe"];
-  return new Promise((resolve) => {
-    let stdout = "";
-    let stderr = "";
-    let settled = false;
-    let timedOut = false;
-    const done = (code) => {
-      if (!settled) {
-        settled = true;
-        resolve({ stdout, stderr, code, timedOut, source, triedPath });
-      }
-    };
-    let spawned;
-    try {
-      spawned = (0, import_node_child_process8.spawn)(command, [...prefixArgs, ...args], { stdio: stdioConfig });
-    } catch {
-      done(1);
-      return;
-    }
-    const child = spawned;
-    let sigkillTimer = null;
-    let budgetTimer = null;
-    if (useStdin && child.stdin) {
-      child.stdin.on("error", () => {
-      });
-      child.stdin.write(opts.stdinValue);
-      child.stdin.end();
-    }
-    child.stdout?.on("data", (d) => {
-      stdout += d.toString();
-      if (stdout.length > 2e5) stdout = stdout.slice(-2e5);
-    });
-    child.stderr?.on("data", (d) => {
-      stderr += d.toString();
-      if (stderr.length > 2e5) stderr = stderr.slice(-2e5);
-    });
-    budgetTimer = setTimeout(() => {
-      budgetTimer = null;
-      timedOut = true;
+  for (const entry of entries) {
+    const m = BRIDGE_FILE_RE.exec(entry);
+    if (!m) continue;
+    const day = m[1];
+    if (day === today) continue;
+    const raw = await (0, import_promises5.readFile)((0, import_node_path10.join)(logsDir, entry), "utf8");
+    const groups = /* @__PURE__ */ new Map();
+    for (const line of raw.split("\n")) {
+      const trimmed = line.trim();
+      if (!trimmed) continue;
+      let rec;
       try {
-        child.kill("SIGTERM");
+        rec = JSON.parse(trimmed);
       } catch {
+        continue;
       }
-      sigkillTimer = setTimeout(() => {
-        sigkillTimer = null;
-        try {
-          child.kill("SIGKILL");
-        } catch {
+      const sessionId = typeof rec.sessionId === "string" ? rec.sessionId : null;
+      const turnId = rec.projection?.turnId ?? null;
+      const key = `${sessionId === null ? 0 : 1}:${sessionId}:${turnId === null ? 0 : 1}:${turnId}`;
+      let group = groups.get(key);
+      if (!group) {
+        group = { sessionId, turnId, records: [], projectionFailures: 0 };
+        groups.set(key, group);
+      }
+      group.records.push(rec);
+      if (rec.projectionFailed === true) group.projectionFailures += 1;
+    }
+    const rowsByProject = /* @__PURE__ */ new Map();
+    for (const group of groups.values()) {
+      if (group.sessionId === null) continue;
+      const records = [...group.records].sort((a, b) => {
+        const aSeq = a.projection?.seq;
+        const bSeq = b.projection?.seq;
+        if (aSeq === void 0 && bSeq === void 0) return 0;
+        if (aSeq === void 0) return 1;
+        if (bSeq === void 0) return -1;
+        return aSeq - bSeq;
+      });
+      let projectSlug;
+      for (const rec of records) {
+        const slug = rec.projection?.projectSlug;
+        if (slug) {
+          projectSlug = slug;
+          break;
         }
-      }, 2e3);
-      sigkillTimer.unref?.();
-      done(1);
-    }, opts.budgetMs);
-    budgetTimer.unref?.();
-    child.on("error", () => {
-      if (budgetTimer) {
-        clearTimeout(budgetTimer);
-        budgetTimer = null;
-      }
-      if (sigkillTimer) {
-        clearTimeout(sigkillTimer);
-        sigkillTimer = null;
-      }
-      done(1);
-    });
-    child.on("close", (code) => {
-      if (budgetTimer) {
-        clearTimeout(budgetTimer);
-        budgetTimer = null;
       }
-      if (sigkillTimer) {
-        clearTimeout(sigkillTimer);
-        sigkillTimer = null;
+      projectSlug ??= "_unattributed";
+      const toolResults = records.filter((r) => r.projection?.kind === "tool_result");
+      const toolSequence = [];
+      for (const rec of records) {
+        if (rec.projection?.kind !== "tool_use") continue;
+        const toolId = rec.projection.toolId;
+        const paired = toolResults.find((r) => r.projection?.toolId === toolId);
+        toolSequence.push({
+          toolName: rec.projection.toolName ?? "",
+          ms: rec.projection.ms ?? 0,
+          outcome: paired?.projection?.outcome ?? "unknown"
+        });
       }
-      done(code ?? 1);
-    });
-  });
-}
-
-// src/agent-pool-loop.ts
-var DEFAULT_INTERVAL_MS2 = 6e4;
-function agentPoolLoopDisabled(env = process.env) {
-  return env["MRRLIN_BRIDGE_AGENT_POOL_DISABLE"] === "1";
-}
-function defaultRunCli(args) {
-  return runExternalAgentsCli(args, {
-    budgetMs: 5e3,
-    envCliPath: process.env["EXTERNAL_AGENTS_CLI"]
-  }).then(({ stdout, code }) => ({ stdout, code }));
-}
-async function runAgentPoolCycle(deps) {
-  try {
-    const snapshot = await collectAgentPoolSnapshot({
-      runCli: deps.runCli ?? defaultRunCli,
-      now: deps.now ?? (() => (/* @__PURE__ */ new Date()).toISOString())
-    });
-    await deps.push(snapshot);
-  } catch (err) {
-    deps.onError?.(err);
-  }
-}
-function startAgentPoolLoop(deps) {
-  const env = deps.env ?? process.env;
-  const intervalMs = deps.intervalMs ?? Number(env["MRRLIN_BRIDGE_AGENT_POOL_INTERVAL_MS"] ?? DEFAULT_INTERVAL_MS2);
-  let stopped = false;
-  let timer = null;
-  const schedule = () => {
-    if (stopped) return;
-    timer = setTimeout(() => {
-      void runAgentPoolCycle(deps).then(() => schedule());
-    }, intervalMs);
-    timer.unref?.();
-  };
-  timer = setTimeout(() => {
-    void runAgentPoolCycle(deps).then(() => schedule());
-  }, 1e3);
-  timer.unref?.();
-  return {
-    stop() {
-      stopped = true;
-      if (timer) clearTimeout(timer);
+      const lifecycleRecs = records.filter((r) => r.projection?.kind === "turn_lifecycle");
+      const resultRecordPresent = lifecycleRecs.length > 0;
+      let promptBytes = null;
+      let inputTokens = null;
+      let cachedInputTokens = null;
+      let outputTokens = null;
+      const firstLifecycle = lifecycleRecs[0]?.projection;
+      if (firstLifecycle?.lifecycle === "completed") {
+        promptBytes = firstLifecycle.promptBytes ?? null;
+        inputTokens = firstLifecycle.inputTokens ?? null;
+        cachedInputTokens = firstLifecycle.cachedInputTokens ?? null;
+        outputTokens = firstLifecycle.outputTokens ?? null;
+      }
+      const plumbing = {
+        socketCloses: 0,
+        readyNotifs: 0,
+        schedulerTicks: 0,
+        bufferStats: 0,
+        rateLimitStatusRecords: 0,
+        rateLimitReached: false
+      };
+      for (const rec of records) {
+        const proj = rec.projection;
+        if (!proj || proj.kind !== "plumbing" || !proj.plumbingKind) continue;
+        const counterKey = PLUMBING_COUNTER_KEY[proj.plumbingKind];
+        if (!counterKey) continue;
+        plumbing[counterKey] += 1;
+        if (proj.plumbingKind === "rate_limit_status" && proj.rateLimitReached === true) {
+          plumbing.rateLimitReached = true;
+        }
+      }
+      const row = {
+        day,
+        sessionId: group.sessionId,
+        turnId: group.turnId,
+        toolSequence,
+        promptBytes,
+        inputTokens,
+        cachedInputTokens,
+        outputTokens,
+        resultRecordPresent,
+        plumbing,
+        projectionFailures: group.projectionFailures
+      };
+      const rows = rowsByProject.get(projectSlug) ?? [];
+      rows.push(row);
+      rowsByProject.set(projectSlug, rows);
     }
-  };
-}
-
-// src/provider-readiness-loop.ts
-var import_node_child_process9 = require("node:child_process");
-var DEFAULT_INTERVAL_MS3 = 6e4;
-function providerReadinessLoopDisabled(env = process.env) {
-  return env["MRRLIN_BRIDGE_PROVIDER_READINESS_DISABLE"] === "1";
-}
-function defaultRunnerFor(command) {
-  return (args) => {
-    const r = (0, import_node_child_process9.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3 });
-    return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
-  };
-}
-async function runProviderReadinessCycle(deps) {
-  try {
-    const verify = deps.verify ?? verifyProviderReadiness;
-    const runnerFor = deps.runnerFor ?? defaultRunnerFor;
-    const [codex, claude] = await Promise.all([
-      verify("codex", runnerFor("codex")),
-      verify("claude", runnerFor("claude"))
-    ]);
-    await deps.push({ codex, claude });
-  } catch (err) {
-    deps.onError?.(err);
-  }
-}
-function startProviderReadinessLoop(deps) {
-  const env = deps.env ?? process.env;
-  const intervalMs = deps.intervalMs ?? Number(env["MRRLIN_BRIDGE_PROVIDER_READINESS_INTERVAL_MS"] ?? DEFAULT_INTERVAL_MS3);
-  let stopped = false;
-  let timer = null;
-  const schedule = () => {
-    if (stopped) return;
-    timer = setTimeout(() => {
-      void runProviderReadinessCycle(deps).then(() => schedule());
-    }, intervalMs);
-    timer.unref?.();
-  };
-  timer = setTimeout(() => {
-    void runProviderReadinessCycle(deps).then(() => schedule());
-  }, 1e3);
-  timer.unref?.();
-  return {
-    stop() {
-      stopped = true;
-      if (timer) clearTimeout(timer);
+    if (rowsByProject.size === 0) continue;
+    const telemetryDir = (0, import_node_path10.join)(stateDir, "telemetry");
+    await (0, import_promises5.mkdir)(telemetryDir, { recursive: true });
+    for (const [slug, rows] of rowsByProject) {
+      const finalPath = (0, import_node_path10.join)(telemetryDir, `rows-${slug}-${day}.jsonl`);
+      const tmpPath = `${finalPath}.tmp`;
+      await (0, import_promises5.writeFile)(tmpPath, rows.map((r) => JSON.stringify(r)).join("\n") + "\n", "utf8");
+      await (0, import_promises5.rename)(tmpPath, finalPath);
     }
-  };
-}
-
-// src/selected-provider-store.ts
-var current = null;
-function getSelectedProvider() {
-  return current;
-}
-function setSelectedProvider(value) {
-  current = value;
+  }
 }
 
-// src/execution-consumer.ts
-var import_node_child_process12 = require("node:child_process");
-var import_node_crypto5 = __toESM(require("node:crypto"), 1);
-var import_node_path12 = __toESM(require("node:path"), 1);
-var import_node_util = require("node:util");
-
-// src/consensus/heads.ts
-var DEFAULT_DOMAIN = "code";
-var DOMAINS = ["code", "seo", "marketing", "content"];
-var HEADS_BY_DOMAIN = {
-  code: ["plan-reviewer", "architect", "security-analyst", "scope-analyst"],
-  seo: ["plan-reviewer", "scope-analyst", "seo-analyst"],
-  marketing: ["plan-reviewer", "scope-analyst", "content-editor", "compliance-reviewer"],
-  content: ["plan-reviewer", "scope-analyst", "content-editor", "compliance-reviewer"]
-};
-var SPEC_HEADS = HEADS_BY_DOMAIN.code;
-var CODE_HEADS_BY_IMPACT = {
-  high: HEADS_BY_DOMAIN.code,
-  medium: ["plan-reviewer", "security-analyst", "scope-analyst"],
-  low: ["plan-reviewer", "scope-analyst"]
-};
-function normalizeDomain(value) {
-  if (typeof value !== "string") return DEFAULT_DOMAIN;
-  const v = value.trim().toLowerCase();
-  return DOMAINS.includes(v) ? v : DEFAULT_DOMAIN;
-}
-function normalizeImpact(value) {
-  if (typeof value !== "string") return null;
-  const v = value.trim().toLowerCase();
-  return v === "low" || v === "medium" || v === "high" ? v : null;
-}
-function resolveHeads(domain2, impact) {
-  const d = normalizeDomain(domain2);
-  if (d !== "code") return [...HEADS_BY_DOMAIN[d]];
-  const i = normalizeImpact(impact) ?? "high";
-  return [...CODE_HEADS_BY_IMPACT[i]];
-}
-var PERSONAS_BY_DOMAIN = {
-  seo: "seo-writer",
-  content: "content-author",
-  marketing: "content-author"
-};
-function resolveProducerPersona(domain2) {
-  const d = normalizeDomain(domain2);
-  if (d === "code") return null;
-  return PERSONAS_BY_DOMAIN[d] ?? null;
-}
+// src/telemetry/daily-uploader.ts
+var import_promises6 = require("node:fs/promises");
+var import_node_path12 = require("node:path");
 
 // src/consensus/wiring.ts
 var import_node_crypto3 = __toESM(require("node:crypto"), 1);
 var import_node_fs5 = __toESM(require("node:fs"), 1);
-var import_node_path9 = __toESM(require("node:path"), 1);
+var import_node_path11 = __toESM(require("node:path"), 1);
 var import_node_url2 = require("node:url");
 
 // src/consensus/verdict.ts
@@ -42741,6 +42794,48 @@ function firstTaskIdToken(text) {
   return m ? m[0] : null;
 }
 
+// src/consensus/heads.ts
+var DEFAULT_DOMAIN = "code";
+var DOMAINS = ["code", "seo", "marketing", "content"];
+var HEADS_BY_DOMAIN = {
+  code: ["plan-reviewer", "architect", "security-analyst", "scope-analyst"],
+  seo: ["plan-reviewer", "scope-analyst", "seo-analyst"],
+  marketing: ["plan-reviewer", "scope-analyst", "content-editor", "compliance-reviewer"],
+  content: ["plan-reviewer", "scope-analyst", "content-editor", "compliance-reviewer"]
+};
+var SPEC_HEADS = HEADS_BY_DOMAIN.code;
+var CODE_HEADS_BY_IMPACT = {
+  high: HEADS_BY_DOMAIN.code,
+  medium: ["plan-reviewer", "security-analyst", "scope-analyst"],
+  low: ["plan-reviewer", "scope-analyst"]
+};
+function normalizeDomain(value) {
+  if (typeof value !== "string") return DEFAULT_DOMAIN;
+  const v = value.trim().toLowerCase();
+  return DOMAINS.includes(v) ? v : DEFAULT_DOMAIN;
+}
+function normalizeImpact(value) {
+  if (typeof value !== "string") return null;
+  const v = value.trim().toLowerCase();
+  return v === "low" || v === "medium" || v === "high" ? v : null;
+}
+function resolveHeads(domain2, impact) {
+  const d = normalizeDomain(domain2);
+  if (d !== "code") return [...HEADS_BY_DOMAIN[d]];
+  const i = normalizeImpact(impact) ?? "high";
+  return [...CODE_HEADS_BY_IMPACT[i]];
+}
+var PERSONAS_BY_DOMAIN = {
+  seo: "seo-writer",
+  content: "content-author",
+  marketing: "content-author"
+};
+function resolveProducerPersona(domain2) {
+  const d = normalizeDomain(domain2);
+  if (d === "code") return null;
+  return PERSONAS_BY_DOMAIN[d] ?? null;
+}
+
 // src/consensus/acceptance-criteria.ts
 var HEADING_RE = /^(#{1,6})\s+(.+?)\s*$/;
 var CHECKLIST_ITEM_RE = /^\s*[-*]\s+\[[ xX]\]\s+(.+\S)\s*$/;
@@ -43092,7 +43187,7 @@ ${issuesBlock}`,
 }
 
 // src/consensus/code-gate-git.ts
-var import_node_child_process10 = require("node:child_process");
+var import_node_child_process8 = require("node:child_process");
 var DIFF_MAX_BYTES = 2e5;
 var FASTGATE_OUTPUT_MAX_BYTES = 16e3;
 var GIT_TIMEOUT_MS = 6e4;
@@ -43108,7 +43203,7 @@ var defaultRunCmd = (cmd, args, opts) => new Promise((resolve) => {
   };
   let child;
   try {
-    child = (0, import_node_child_process10.spawn)(cmd, args, {
+    child = (0, import_node_child_process8.spawn)(cmd, args, {
       cwd: opts.cwd,
       env: process.env,
       shell: false,
@@ -43323,15 +43418,15 @@ ${res.stdout}${res.stderr}`);
 var import_meta2 = {};
 function getPersonasDir() {
   if (typeof __dirname !== "undefined") {
-    return import_node_path9.default.join(__dirname, "consensus", "personas");
+    return import_node_path11.default.join(__dirname, "consensus", "personas");
   }
-  return import_node_path9.default.join(import_node_path9.default.dirname((0, import_node_url2.fileURLToPath)(import_meta2.url)), "personas");
+  return import_node_path11.default.join(import_node_path11.default.dirname((0, import_node_url2.fileURLToPath)(import_meta2.url)), "personas");
 }
 var personaCache = /* @__PURE__ */ new Map();
 function loadPersona(name) {
   const cached2 = personaCache.get(name);
   if (cached2 !== void 0) return cached2;
-  const content = import_node_fs5.default.readFileSync(import_node_path9.default.join(getPersonasDir(), `${name}.md`), "utf8");
+  const content = import_node_fs5.default.readFileSync(import_node_path11.default.join(getPersonasDir(), `${name}.md`), "utf8");
   personaCache.set(name, content);
   return content;
 }
@@ -43811,6 +43906,497 @@ You revise a deliverable to address the accepted issues so it satisfies the acce
   };
 }
 
+// src/telemetry/pii-gate.ts
+function isRecord(v) {
+  return v !== null && typeof v === "object";
+}
+function resolvePath(root, path22) {
+  const parts = path22.split(".");
+  let cur = root;
+  for (let i = 0; i < parts.length - 1; i += 1) {
+    const part = parts[i];
+    const idx = Number(part);
+    if (Array.isArray(cur) && Number.isInteger(idx)) {
+      if (idx < 0 || idx >= cur.length) return null;
+      cur = cur[idx];
+    } else if (isRecord(cur) && part in cur) {
+      cur = cur[part];
+    } else {
+      return null;
+    }
+  }
+  const last = parts[parts.length - 1];
+  const lastIdx = Number(last);
+  if (Array.isArray(cur) && Number.isInteger(lastIdx)) {
+    if (lastIdx < 0 || lastIdx >= cur.length) return null;
+    return { parent: cur, key: lastIdx };
+  }
+  if (isRecord(cur) && last in cur) {
+    return { parent: cur, key: last };
+  }
+  return null;
+}
+function withheldExcerptClone(artifact) {
+  const clone2 = { ...artifact };
+  if (Array.isArray(clone2.steps)) {
+    clone2.steps = clone2.steps.map((step) => {
+      if (!isRecord(step)) return step;
+      const copy = { ...step };
+      delete copy.excerpt;
+      return copy;
+    });
+  }
+  return clone2;
+}
+async function gate(artifact, prose, ctx) {
+  if (prose.length === 0) {
+    return { ok: true, gated: true, artifact };
+  }
+  const runExec = ctx.runExec ?? runAgentExec;
+  const execResult = await runExec({
+    prompt: JSON.stringify({ fields: prose }),
+    developerInstructions: loadPersona("pii-gate"),
+    cwd: ctx.cwd,
+    timeoutMs: ctx.timeoutMs,
+    sandbox: "read-only",
+    codexExecutable: ctx.codexExecutable,
+    model: ctx.model
+  });
+  if (!execResult.ok) {
+    return { ok: true, gated: true, artifact: withheldExcerptClone(artifact) };
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(execResult.text);
+  } catch {
+    return { ok: true, gated: true, artifact: withheldExcerptClone(artifact) };
+  }
+  const fields = isRecord(parsed) && Array.isArray(parsed.fields) ? parsed.fields : null;
+  const isValidShape = fields !== null && fields.length === prose.length && fields.every(
+    (entry, i) => isRecord(entry) && typeof entry.path === "string" && typeof entry.masked === "string" && entry.path === prose[i]?.path && resolvePath(artifact, entry.path) !== null
+  );
+  if (!isValidShape || fields === null) {
+    return { ok: true, gated: true, artifact: withheldExcerptClone(artifact) };
+  }
+  const maskedClone = typeof structuredClone === "function" ? structuredClone(artifact) : JSON.parse(JSON.stringify(artifact));
+  for (const { path: path22, masked } of fields) {
+    const target = resolvePath(maskedClone, path22);
+    if (!target) throw new Error(`pii-gate: path "${path22}" failed to resolve on the clone after validating on the original`);
+    target.parent[target.key] = masked;
+  }
+  return { ok: true, gated: false, artifact: maskedClone };
+}
+
+// src/telemetry/daily-uploader.ts
+var ROWS_FILE_RE = /^rows-(.+)-(\d{4}-\d{2}-\d{2})\.jsonl$/;
+async function uploadPendingDays(stateDir, client, bridgeHealth, gateCtx) {
+  const telemetryDir = (0, import_node_path12.join)(stateDir, "telemetry");
+  let files;
+  try {
+    files = await (0, import_promises6.readdir)(telemetryDir);
+  } catch (err) {
+    if (err?.code === "ENOENT") return;
+    throw err;
+  }
+  const pending = [];
+  for (const file2 of files) {
+    const match = ROWS_FILE_RE.exec(file2);
+    if (!match) continue;
+    const [, projectSlug, day] = match;
+    const markerPath = (0, import_node_path12.join)(telemetryDir, `.processed-${projectSlug}-${day}`);
+    try {
+      await (0, import_promises6.access)(markerPath);
+    } catch {
+      pending.push({ projectSlug, day, rowsPath: (0, import_node_path12.join)(telemetryDir, file2), markerPath });
+    }
+  }
+  if (pending.length === 0) return;
+  const knownCrashCount = bridgeHealth.knownCrashCount() ?? 0;
+  const fullUnprocessed = pending.map((p) => ({ projectSlug: p.projectSlug, day: p.day }));
+  pending.sort((a, b) => a.day.localeCompare(b.day));
+  for (const cur of pending) {
+    let raw;
+    try {
+      raw = await (0, import_promises6.readFile)(cur.rowsPath, "utf8");
+    } catch (err) {
+      console.error(`uploadPendingDays: failed to read ${cur.rowsPath}`, err);
+      continue;
+    }
+    const rows = [];
+    for (const line of raw.split("\n")) {
+      if (!line.trim()) continue;
+      try {
+        rows.push({ ...JSON.parse(line), gateMarker: "gated" });
+      } catch {
+      }
+    }
+    const batch = {
+      day: cur.day,
+      bridgeVersion: PKG_VERSION,
+      knownCrashCount,
+      unprocessedPartitions: fullUnprocessed.filter(
+        (p) => !(p.projectSlug === cur.projectSlug && p.day === cur.day)
+      ),
+      rows
+    };
+    const gateResult = await gate(batch, [], gateCtx);
+    const gateMarker = gateResult.gated ? "gated" : "projection-only";
+    for (const row of gateResult.artifact.rows) row.gateMarker = gateMarker;
+    const targetProject = cur.projectSlug === "_unattributed" ? process.env.MRRLIN_TELEMETRY_DEFAULT_PROJECT : cur.projectSlug;
+    if (!targetProject) {
+      console.error(`uploadPendingDays: no target project resolved for _unattributed/${cur.day}`);
+      continue;
+    }
+    try {
+      await client.postTelemetry(targetProject, gateResult.artifact);
+    } catch (err) {
+      console.error(`uploadPendingDays: postTelemetry failed for ${cur.projectSlug}/${cur.day}`, err);
+      continue;
+    }
+    const tmpMarker = `${cur.markerPath}.tmp-${process.pid}-${Math.random().toString(36).slice(2)}`;
+    try {
+      await (0, import_promises6.writeFile)(tmpMarker, "");
+      await (0, import_promises6.rename)(tmpMarker, cur.markerPath);
+    } catch (err) {
+      console.error(`uploadPendingDays: failed to write marker for ${cur.projectSlug}/${cur.day}`, err);
+    }
+  }
+}
+
+// src/agent-pool-snapshot.ts
+function normalizeLastUsedAt(value) {
+  if (value === void 0 || value === null) return null;
+  if (typeof value === "number") {
+    if (!Number.isFinite(value)) return null;
+    const ms = value < 1e12 ? value * 1e3 : value;
+    const date5 = new Date(ms);
+    return Number.isNaN(date5.getTime()) ? null : date5.toISOString();
+  }
+  return value;
+}
+function buildAgentPoolSnapshot(statusRows, stats, opts) {
+  if (!opts.available) {
+    return {
+      collected_at: opts.collectedAt,
+      status: "unavailable",
+      agents: [],
+      totals: { calls: 0, tokens_in: 0, tokens_out: 0 },
+      estimated_savings_usd: 0
+    };
+  }
+  const costPer1M = opts.paidCostPer1MTokens ?? 3;
+  const agents = statusRows.map((row) => {
+    const agentStats = stats.by_agent[row.id];
+    const count2 = agentStats?.count ?? 0;
+    const tokensIn = agentStats?.tokens_in ?? 0;
+    const tokensOut = agentStats?.tokens_out ?? 0;
+    let successRate = 0;
+    if (count2 > 0) {
+      const successOutcomes = agentStats?.outcomes.success ?? 0;
+      successRate = Number((successOutcomes / count2 * 100).toFixed(2)) / 100;
+    }
+    return {
+      id: row.id,
+      provider: row.provider,
+      tier: row.tier,
+      tags: row.tags,
+      state: row.state ?? "unknown",
+      calls: count2,
+      tokens_in: tokensIn,
+      tokens_out: tokensOut,
+      success_rate: successRate,
+      last_used_at: normalizeLastUsedAt(row.last_used_at)
+    };
+  });
+  let totalCalls = 0;
+  let totalTokensIn = 0;
+  let totalTokensOut = 0;
+  for (const entry of Object.values(stats.by_agent)) {
+    totalCalls += entry.count;
+    totalTokensIn += entry.tokens_in;
+    totalTokensOut += entry.tokens_out;
+  }
+  let savedTokens = 0;
+  for (const row of statusRows) {
+    if (row.tags.includes("free")) {
+      const agentStats = stats.by_agent[row.id];
+      if (agentStats) {
+        savedTokens += agentStats.tokens_in + agentStats.tokens_out;
+      }
+    }
+  }
+  const estimatedSavings = Number((savedTokens / 1e6 * costPer1M).toFixed(2));
+  return {
+    collected_at: opts.collectedAt,
+    status: "ok",
+    agents,
+    totals: {
+      calls: totalCalls,
+      tokens_in: totalTokensIn,
+      tokens_out: totalTokensOut
+    },
+    estimated_savings_usd: estimatedSavings
+  };
+}
+
+// src/agent-pool-collector.ts
+async function collectAgentPoolSnapshot(deps) {
+  let statusRows;
+  let stats;
+  try {
+    const statusResult = await deps.runCli(["status", "--json"]);
+    if (statusResult.code !== 0) throw new Error("non-zero exit on status");
+    let statusParsed;
+    try {
+      statusParsed = JSON.parse(statusResult.stdout);
+    } catch {
+      throw new Error("invalid status json");
+    }
+    if (!Array.isArray(statusParsed)) throw new Error("status not array");
+    statusRows = statusParsed;
+    const statsResult = await deps.runCli(["stats", "--json"]);
+    if (statsResult.code !== 0) throw new Error("non-zero exit on stats");
+    try {
+      stats = JSON.parse(statsResult.stdout);
+    } catch {
+      throw new Error("invalid stats json");
+    }
+  } catch {
+    return buildAgentPoolSnapshot(
+      [],
+      {},
+      { collectedAt: deps.now(), available: false }
+    );
+  }
+  return buildAgentPoolSnapshot(
+    statusRows,
+    stats,
+    { collectedAt: deps.now(), paidCostPer1MTokens: deps.paidCostPer1MTokens, available: true }
+  );
+}
+
+// src/external-agents-spawn.ts
+var import_node_child_process9 = require("node:child_process");
+
+// src/external-agents-bin.ts
+function resolveExternalAgentsCliInvocation(override) {
+  if (override && override.trim()) return { command: override, prefixArgs: [] };
+  try {
+    return {
+      command: "node",
+      prefixArgs: [resolvePackageBin("@mrrlin-dev/external-agents", "external-agents")]
+    };
+  } catch {
+    return { command: "external-agents", prefixArgs: [] };
+  }
+}
+
+// src/external-agents-spawn.ts
+function runExternalAgentsCli(args, opts) {
+  let command;
+  let prefixArgs;
+  let source;
+  let triedPath;
+  if (opts.envCliPath && opts.envCliPath.trim()) {
+    command = "node";
+    prefixArgs = [opts.envCliPath];
+    source = "env";
+    triedPath = opts.envCliPath;
+  } else {
+    ({ command, prefixArgs } = resolveExternalAgentsCliInvocation());
+    source = command === "node" && prefixArgs.length === 1 ? "bundled" : "path";
+    triedPath = source === "bundled" ? prefixArgs[0] ?? "" : "external-agents (PATH)";
+  }
+  const useStdin = opts.stdinValue !== void 0;
+  const stdioConfig = useStdin ? ["pipe", "pipe", "pipe"] : ["ignore", "pipe", "pipe"];
+  return new Promise((resolve) => {
+    let stdout = "";
+    let stderr = "";
+    let settled = false;
+    let timedOut = false;
+    const done = (code) => {
+      if (!settled) {
+        settled = true;
+        resolve({ stdout, stderr, code, timedOut, source, triedPath });
+      }
+    };
+    let spawned;
+    try {
+      spawned = (0, import_node_child_process9.spawn)(command, [...prefixArgs, ...args], { stdio: stdioConfig });
+    } catch {
+      done(1);
+      return;
+    }
+    const child = spawned;
+    let sigkillTimer = null;
+    let budgetTimer = null;
+    if (useStdin && child.stdin) {
+      child.stdin.on("error", () => {
+      });
+      child.stdin.write(opts.stdinValue);
+      child.stdin.end();
+    }
+    child.stdout?.on("data", (d) => {
+      stdout += d.toString();
+      if (stdout.length > 2e5) stdout = stdout.slice(-2e5);
+    });
+    child.stderr?.on("data", (d) => {
+      stderr += d.toString();
+      if (stderr.length > 2e5) stderr = stderr.slice(-2e5);
+    });
+    budgetTimer = setTimeout(() => {
+      budgetTimer = null;
+      timedOut = true;
+      try {
+        child.kill("SIGTERM");
+      } catch {
+      }
+      sigkillTimer = setTimeout(() => {
+        sigkillTimer = null;
+        try {
+          child.kill("SIGKILL");
+        } catch {
+        }
+      }, 2e3);
+      sigkillTimer.unref?.();
+      done(1);
+    }, opts.budgetMs);
+    budgetTimer.unref?.();
+    child.on("error", () => {
+      if (budgetTimer) {
+        clearTimeout(budgetTimer);
+        budgetTimer = null;
+      }
+      if (sigkillTimer) {
+        clearTimeout(sigkillTimer);
+        sigkillTimer = null;
+      }
+      done(1);
+    });
+    child.on("close", (code) => {
+      if (budgetTimer) {
+        clearTimeout(budgetTimer);
+        budgetTimer = null;
+      }
+      if (sigkillTimer) {
+        clearTimeout(sigkillTimer);
+        sigkillTimer = null;
+      }
+      done(code ?? 1);
+    });
+  });
+}
+
+// src/agent-pool-loop.ts
+var DEFAULT_INTERVAL_MS2 = 6e4;
+function agentPoolLoopDisabled(env = process.env) {
+  return env["MRRLIN_BRIDGE_AGENT_POOL_DISABLE"] === "1";
+}
+function defaultRunCli(args) {
+  return runExternalAgentsCli(args, {
+    budgetMs: 5e3,
+    envCliPath: process.env["EXTERNAL_AGENTS_CLI"]
+  }).then(({ stdout, code }) => ({ stdout, code }));
+}
+async function runAgentPoolCycle(deps) {
+  try {
+    const snapshot = await collectAgentPoolSnapshot({
+      runCli: deps.runCli ?? defaultRunCli,
+      now: deps.now ?? (() => (/* @__PURE__ */ new Date()).toISOString())
+    });
+    await deps.push(snapshot);
+  } catch (err) {
+    deps.onError?.(err);
+  }
+}
+function startAgentPoolLoop(deps) {
+  const env = deps.env ?? process.env;
+  const intervalMs = deps.intervalMs ?? Number(env["MRRLIN_BRIDGE_AGENT_POOL_INTERVAL_MS"] ?? DEFAULT_INTERVAL_MS2);
+  let stopped = false;
+  let timer = null;
+  const schedule = () => {
+    if (stopped) return;
+    timer = setTimeout(() => {
+      void runAgentPoolCycle(deps).then(() => schedule());
+    }, intervalMs);
+    timer.unref?.();
+  };
+  timer = setTimeout(() => {
+    void runAgentPoolCycle(deps).then(() => schedule());
+  }, 1e3);
+  timer.unref?.();
+  return {
+    stop() {
+      stopped = true;
+      if (timer) clearTimeout(timer);
+    }
+  };
+}
+
+// src/provider-readiness-loop.ts
+var import_node_child_process10 = require("node:child_process");
+var DEFAULT_INTERVAL_MS3 = 6e4;
+function providerReadinessLoopDisabled(env = process.env) {
+  return env["MRRLIN_BRIDGE_PROVIDER_READINESS_DISABLE"] === "1";
+}
+function defaultRunnerFor(command) {
+  return (args) => {
+    const r = (0, import_node_child_process10.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3 });
+    return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
+  };
+}
+async function runProviderReadinessCycle(deps) {
+  try {
+    const verify = deps.verify ?? verifyProviderReadiness;
+    const runnerFor = deps.runnerFor ?? defaultRunnerFor;
+    const [codex, claude] = await Promise.all([
+      verify("codex", runnerFor("codex")),
+      verify("claude", runnerFor("claude"))
+    ]);
+    await deps.push({ codex, claude });
+  } catch (err) {
+    deps.onError?.(err);
+  }
+}
+function startProviderReadinessLoop(deps) {
+  const env = deps.env ?? process.env;
+  const intervalMs = deps.intervalMs ?? Number(env["MRRLIN_BRIDGE_PROVIDER_READINESS_INTERVAL_MS"] ?? DEFAULT_INTERVAL_MS3);
+  let stopped = false;
+  let timer = null;
+  const schedule = () => {
+    if (stopped) return;
+    timer = setTimeout(() => {
+      void runProviderReadinessCycle(deps).then(() => schedule());
+    }, intervalMs);
+    timer.unref?.();
+  };
+  timer = setTimeout(() => {
+    void runProviderReadinessCycle(deps).then(() => schedule());
+  }, 1e3);
+  timer.unref?.();
+  return {
+    stop() {
+      stopped = true;
+      if (timer) clearTimeout(timer);
+    }
+  };
+}
+
+// src/selected-provider-store.ts
+var current = null;
+function getSelectedProvider() {
+  return current;
+}
+function setSelectedProvider(value) {
+  current = value;
+}
+
+// src/execution-consumer.ts
+var import_node_child_process12 = require("node:child_process");
+var import_node_crypto5 = __toESM(require("node:crypto"), 1);
+var import_node_path15 = __toESM(require("node:path"), 1);
+var import_node_util = require("node:util");
+
 // src/consensus/deliverable-gate-outcome.ts
 var MAX_DELIVERABLE_DIAGNOSTICS = 5;
 var MAX_DELIVERABLE_DIAGNOSTIC_LENGTH = 240;
@@ -45055,15 +45641,15 @@ async function awaitTurnWithDeadline(opts) {
 var import_node_child_process11 = require("node:child_process");
 var import_node_fs7 = require("node:fs");
 var import_node_os6 = require("node:os");
-var import_node_path11 = require("node:path");
+var import_node_path14 = require("node:path");
 
 // src/checkout-lock.ts
 var import_node_fs6 = require("node:fs");
-var import_node_path10 = require("node:path");
+var import_node_path13 = require("node:path");
 var import_proper_lockfile = __toESM(require_proper_lockfile(), 1);
 async function withCheckoutLock(locksDir, slug, fn) {
   (0, import_node_fs6.mkdirSync)(locksDir, { recursive: true });
-  const target = (0, import_node_path10.join)(locksDir, `${slug}.lock`);
+  const target = (0, import_node_path13.join)(locksDir, `${slug}.lock`);
   if (!(0, import_node_fs6.existsSync)(target)) (0, import_node_fs6.writeFileSync)(target, "");
   const release = await import_proper_lockfile.default.lock(target, {
     retries: { retries: 600, factor: 1, minTimeout: 100, maxTimeout: 100 },
@@ -45089,7 +45675,7 @@ function git(checkout, args) {
   });
 }
 async function createRunWorktree(opts) {
-  const worktreePath = (0, import_node_path11.join)(opts.worktreeRoot, opts.slug, opts.runId);
+  const worktreePath = (0, import_node_path14.join)(opts.worktreeRoot, opts.slug, opts.runId);
   await withCheckoutLock(opts.locksDir, opts.slug, async () => {
     (0, import_node_fs7.mkdirSync)(opts.worktreeRoot, { recursive: true });
     try {
@@ -45166,8 +45752,8 @@ async function doPushRunBranch(opts, execGit) {
   if (localConfig.trim()) {
     throw new Error(`push aborted: agent-controlled git config present in worktree: ${localConfig.trim().split("\n")[0]}`);
   }
-  const dir = (0, import_node_fs7.mkdtempSync)((0, import_node_path11.join)((0, import_node_os6.tmpdir)(), "mrrlin-push-"));
-  const askpass = (0, import_node_path11.join)(dir, "askpass");
+  const dir = (0, import_node_fs7.mkdtempSync)((0, import_node_path14.join)((0, import_node_os6.tmpdir)(), "mrrlin-push-"));
+  const askpass = (0, import_node_path14.join)(dir, "askpass");
   try {
     (0, import_node_fs7.writeFileSync)(
       askpass,
@@ -45204,7 +45790,7 @@ async function sweepOrphanWorktrees(opts) {
     } catch {
       return opts.worktreeRoot;
     }
-  })() + import_node_path11.sep + opts.slug + import_node_path11.sep;
+  })() + import_node_path14.sep + opts.slug + import_node_path14.sep;
   await withCheckoutLock(opts.locksDir, opts.slug, async () => {
     const listing = git(opts.checkout, ["worktree", "list", "--porcelain"]);
     for (const block of listing.split("\n\n")) {
@@ -45496,6 +46082,11 @@ var BASE_INSTRUCTIONS_PREFIX = [
   "- Pick the right open status when you stop a CODE task: if the code work itself is done and only an",
   "  already-open PR still awaits operator merge or follow-up, leave the task at `awaiting_verification`;",
   "  if you are blocked and a human must decide before the work can continue, leave it at `handoff_needed`.",
+  "- Before calling update_task with status=handoff_needed because you are missing a concrete",
+  "  operational fact (an email address, credential, pricing detail, account name, or similar) --",
+  "  NOT a product/scope decision, which is legitimately the operator's call -- first search for it:",
+  "  search_wiki_pages / retrieve_context, and re-read anything already loaded in this run's context",
+  "  bundle. Only hand off for that input if the search comes up empty.",
   "",
   "File artifacts:",
   "- Decide BEFORE writing your result, by PROVENANCE: output assembled from data you RETRIEVED",
@@ -45677,8 +46268,8 @@ function newArtifactId() {
   return `EA-${import_node_crypto5.default.randomUUID()}`;
 }
 var BLAST_RADIUS_FLOOR_PATTERNS = [/^supabase\/migrations\//, /^packages\/db\/src\/schema\.ts$/];
-function isBlastRadiusFloorPath(path21) {
-  return BLAST_RADIUS_FLOOR_PATTERNS.some((re) => re.test(path21));
+function isBlastRadiusFloorPath(path22) {
+  return BLAST_RADIUS_FLOOR_PATTERNS.some((re) => re.test(path22));
 }
 var execFileAsync = (0, import_node_util.promisify)(import_node_child_process12.execFile);
 async function defaultListRunDiffPaths(opts) {
@@ -47041,8 +47632,8 @@ async function runBackstopSweep(deps, drive = (slug, id) => driveRun(deps, slug,
 function isRunRecoverableByThisBridge(run3, worktreeRoot) {
   if (!worktreeRoot) return true;
   if (!run3.worktreeId) return false;
-  const relative = import_node_path12.default.relative(import_node_path12.default.resolve(worktreeRoot), import_node_path12.default.resolve(run3.worktreeId));
-  return relative === "" || relative.length > 0 && !relative.startsWith("..") && !import_node_path12.default.isAbsolute(relative);
+  const relative = import_node_path15.default.relative(import_node_path15.default.resolve(worktreeRoot), import_node_path15.default.resolve(run3.worktreeId));
+  return relative === "" || relative.length > 0 && !relative.startsWith("..") && !import_node_path15.default.isAbsolute(relative);
 }
 async function deployGateHandoff(deps, projectSlug, task, runId, reason, leaseId) {
   await deps.client.updateExecutionRun(projectSlug, runId, { status: "failed", finishedAt: (/* @__PURE__ */ new Date()).toISOString(), leaseId: leaseId ?? void 0 }).catch(() => {
@@ -47079,7 +47670,7 @@ function maxLeaseReclaims() {
 }
 
 // src/async-job-consumer.ts
-var import_node_crypto6 = __toESM(require("node:crypto"), 1);
+var import_node_crypto7 = __toESM(require("node:crypto"), 1);
 
 // src/async-tools/registry.ts
 var registry2 = /* @__PURE__ */ new Map();
@@ -47090,9 +47681,303 @@ function getAsyncToolDescriptor(toolName) {
   return registry2.get(toolName);
 }
 
+// src/bridge-log.ts
+var import_node_fs8 = require("node:fs");
+var import_promises7 = require("node:fs/promises");
+var import_node_path16 = require("node:path");
+
+// src/redact.ts
+var REDACTED = "[REDACTED]";
+var SECRET_PATTERNS = [
+  /ghp_[A-Za-z0-9]{20,}/g,
+  // GitHub personal access token (classic)
+  /github_pat_[A-Za-z0-9_]{20,}/g,
+  // GitHub fine-grained PAT
+  /\bBearer\s+[A-Za-z0-9._~+/-]+=*/gi,
+  // Authorization: Bearer <token>
+  /\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g,
+  // JWT (header.payload.signature)
+  /\b[A-Fa-f0-9]{32,}\b/g,
+  // long hex run (hashes, hex secrets)
+  /\b[A-Za-z0-9+/]{40,}={0,2}\b/g
+  // long base64-ish run (opaque tokens)
+];
+function redact(input) {
+  let out = input;
+  for (const re of SECRET_PATTERNS) out = out.replace(re, REDACTED);
+  return out;
+}
+
+// src/telemetry/projector.ts
+var import_node_crypto6 = require("node:crypto");
+function isRecord2(x) {
+  return typeof x === "object" && x !== null;
+}
+function buildProjection(payload, type, ms, telemetry) {
+  if (!isRecord2(payload)) return null;
+  const seqRaw = payload.seq;
+  const turnIdRaw = payload.turnId;
+  const maybeSeq = typeof seqRaw === "number" ? seqRaw : void 0;
+  const maybeTurnId = typeof turnIdRaw === "string" ? turnIdRaw : void 0;
+  if (type === "event") {
+    const rawEvent = payload.event;
+    if (!isRecord2(rawEvent) || typeof rawEvent.type !== "string") return null;
+    if (rawEvent.type === "tool_use") {
+      const tool = rawEvent.tool;
+      if (!isRecord2(tool)) return null;
+      const toolId = tool.id;
+      const toolName = tool.name;
+      if (typeof toolId !== "string" || typeof toolName !== "string") return null;
+      const input = tool.input;
+      const argKeys = isRecord2(input) ? Object.keys(input) : [];
+      const projectSlug = isRecord2(input) && typeof input.projectSlug === "string" ? input.projectSlug : void 0;
+      const proj = { kind: "tool_use", toolId, toolName, argKeys, seq: maybeSeq ?? 0 };
+      if (maybeTurnId !== void 0) proj.turnId = maybeTurnId;
+      if (ms !== void 0) proj.ms = ms;
+      if (projectSlug !== void 0) proj.projectSlug = projectSlug;
+      return proj;
+    }
+    if (rawEvent.type === "tool_result") {
+      const tool = rawEvent.tool;
+      if (!isRecord2(tool)) return null;
+      const toolId = tool.id;
+      if (typeof toolId !== "string") return null;
+      const exitCode = tool.exitCode;
+      const outcome = typeof exitCode === "number" ? exitCode === 0 ? "success" : "error" : "unknown";
+      const proj = { kind: "tool_result", toolId, outcome, seq: maybeSeq ?? 0 };
+      if (maybeTurnId !== void 0) proj.turnId = maybeTurnId;
+      if (ms !== void 0) proj.ms = ms;
+      if (typeof exitCode === "number") proj.exitCode = exitCode;
+      const status = tool.status;
+      if (typeof status === "string" && status.trim() !== "") {
+        proj.statusHash = (0, import_node_crypto6.createHash)("sha256").update(status.trim().toLowerCase()).digest("hex").slice(0, 8);
+      }
+      return proj;
+    }
+    if (rawEvent.type === "result") {
+      const subtype = rawEvent.subtype;
+      if (subtype !== "success" && subtype !== "interrupted") return null;
+      const lifecycle = subtype === "success" ? "completed" : "interrupted";
+      const proj = { kind: "turn_lifecycle", lifecycle, seq: maybeSeq ?? 0 };
+      if (maybeTurnId !== void 0) proj.turnId = maybeTurnId;
+      if (ms !== void 0) proj.ms = ms;
+      if (lifecycle === "completed" && telemetry !== void 0) {
+        proj.promptBytes = telemetry.promptBytes;
+        if (telemetry.usage !== null) {
+          proj.inputTokens = telemetry.usage.inputTokens ?? null;
+          proj.cachedInputTokens = telemetry.usage.cachedInputTokens ?? null;
+          proj.outputTokens = telemetry.usage.outputTokens ?? null;
+        }
+      }
+      return proj;
+    }
+    if (rawEvent.type === "error") {
+      const proj = { kind: "turn_lifecycle", lifecycle: "failed", seq: maybeSeq ?? 0 };
+      if (maybeTurnId !== void 0) proj.turnId = maybeTurnId;
+      if (ms !== void 0) proj.ms = ms;
+      return proj;
+    }
+    return null;
+  }
+  if (type === "ready") {
+    return { kind: "plumbing", plumbingKind: "ready", seq: maybeSeq ?? 0, ...ms !== void 0 ? { ms } : {} };
+  }
+  if (type === "rateLimits") {
+    const rateLimits = payload.rateLimits;
+    const proj = { kind: "plumbing", plumbingKind: "rate_limit_status", seq: maybeSeq ?? 0 };
+    if (maybeTurnId !== void 0) proj.turnId = maybeTurnId;
+    if (ms !== void 0) proj.ms = ms;
+    if (isRecord2(rateLimits)) proj.rateLimitReached = rateLimits.rateLimitReachedType != null;
+    return proj;
+  }
+  const bracketMatch = /^<([a-z-]+)>$/.exec(type);
+  if (bracketMatch) {
+    const candidate = bracketMatch[1]?.replace(/-/g, "_");
+    if (candidate === "scheduler_tick" || candidate === "buffer_stats") {
+      return { kind: "plumbing", plumbingKind: candidate, seq: maybeSeq ?? 0, ...ms !== void 0 ? { ms } : {} };
+    }
+  }
+  return null;
+}
+
+// src/bridge-log.ts
+var NOOP_LOGGER = {
+  logIn() {
+  },
+  logOut() {
+  },
+  close() {
+  }
+};
+var REDACT_DEPTH_CAP = 8;
+var IMAGE_DATA_URI_RE = /^(data:image\/[a-zA-Z0-9.+-]+;base64,)([A-Za-z0-9+/=]+)$/;
+function redactImageDataUri(value) {
+  const m = value.match(IMAGE_DATA_URI_RE);
+  if (!m) return value;
+  const [, prefix, body] = m;
+  if (prefix === void 0 || body === void 0) return value;
+  return `${prefix}\u2026(${body.length} bytes)`;
+}
+function redactValue(value, depth, counter) {
+  if (typeof value === "string") {
+    const redacted = redact(redactImageDataUri(value));
+    if (redacted !== value) counter.count += 1;
+    return redacted;
+  }
+  if (value === null || typeof value !== "object") return value;
+  if (depth >= REDACT_DEPTH_CAP) {
+    try {
+      const flattened = JSON.stringify(value);
+      const redacted = redact(flattened);
+      if (redacted !== flattened) counter.count += 1;
+      return redacted;
+    } catch {
+      counter.count += 1;
+      return REDACTED;
+    }
+  }
+  if (Array.isArray(value)) return value.map((item) => redactValue(item, depth + 1, counter));
+  const out = {};
+  for (const [k, v] of Object.entries(value)) {
+    out[k] = redactValue(v, depth + 1, counter);
+  }
+  return out;
+}
+function redactMessage(payload, opts) {
+  const counter = { count: 0 };
+  if (payload && typeof payload === "object" && !Array.isArray(payload)) {
+    const msg = payload;
+    if (msg.type === "pairing-qr") {
+      const clone2 = { ...msg };
+      for (const key of ["payload", "svg"]) {
+        if (typeof clone2[key] === "string") clone2[key] = `[REDACTED len=${clone2[key].length}]`;
+      }
+      return { payload: redactValue(clone2, 1, counter), redactedCount: counter.count };
+    }
+    if (!opts.includePrompts && msg.type === "turn" && typeof msg.message === "string") {
+      return { payload: redactValue({ ...msg, message: "[prompt omitted]" }, 1, counter), redactedCount: counter.count };
+    }
+  }
+  return { payload: redactValue(payload, 0, counter), redactedCount: counter.count };
+}
+function resolveBridgeLogEnabled(env = process.env) {
+  const raw = (env.MRRLIN_DIRECTOR_BRIDGE_LOG ?? "").trim().toLowerCase();
+  return !(raw === "0" || raw === "false");
+}
+function resolvePromptsEnabled(env) {
+  const raw = (env.MRRLIN_DIRECTOR_BRIDGE_LOG_PROMPTS ?? "").trim().toLowerCase();
+  return !(raw === "0" || raw === "false");
+}
+function createBridgeLogger(stateDir, env = process.env) {
+  if (!resolveBridgeLogEnabled(env)) return NOOP_LOGGER;
+  const logsDir = (0, import_node_path16.join)(stateDir, "logs");
+  try {
+    (0, import_node_fs8.mkdirSync)(logsDir, { recursive: true });
+  } catch {
+    return NOOP_LOGGER;
+  }
+  const includePrompts = resolvePromptsEnabled(env);
+  const fileFor = () => (0, import_node_path16.join)(logsDir, `bridge-${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}.jsonl`);
+  const gainDay = (sessionId) => {
+    const sessionsPath = (0, import_node_path16.join)(logsDir, ".sessions.json");
+    let sessionsObj = {};
+    try {
+      const parsed = JSON.parse((0, import_node_fs8.readFileSync)(sessionsPath, "utf8"));
+      if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) sessionsObj = parsed;
+    } catch {
+      sessionsObj = {};
+    }
+    const day = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+    const idsToday = Array.isArray(sessionsObj[day]) ? sessionsObj[day] : [];
+    if (idsToday.includes(sessionId)) return;
+    sessionsObj[day] = [...idsToday, sessionId];
+    const tmpPath = `${sessionsPath}.tmp`;
+    (0, import_node_fs8.writeFileSync)(tmpPath, JSON.stringify(sessionsObj));
+    (0, import_node_fs8.renameSync)(tmpPath, sessionsPath);
+  };
+  const write = (dir, rec) => {
+    try {
+      let projection = null;
+      let projectionFailed = false;
+      if (rec.sessionId !== null) {
+        try {
+          const built = buildProjection(rec.payload, rec.type, rec.ms, rec.telemetry);
+          if (built) projection = { ...built, sessionId: rec.sessionId };
+        } catch {
+          projectionFailed = true;
+        }
+      }
+      const { payload: redactedPayload, redactedCount } = redactMessage(rec.payload, { includePrompts });
+      const line = JSON.stringify({
+        ts: (/* @__PURE__ */ new Date()).toISOString(),
+        dir,
+        spanId: rec.spanId,
+        sessionId: rec.sessionId,
+        type: rec.type,
+        ...rec.ms !== void 0 ? { ms: rec.ms } : {},
+        payload: redactedPayload,
+        redactedCount,
+        projection,
+        ...projectionFailed ? { projectionFailed: true } : {}
+      }) + "\n";
+      (0, import_node_fs8.appendFileSync)(fileFor(), line);
+      if (rec.sessionId !== null) gainDay(rec.sessionId);
+    } catch {
+    }
+  };
+  return {
+    logIn: (rec) => write("in", rec),
+    logOut: (rec) => write("out", rec),
+    close() {
+    }
+  };
+}
+async function findSessionDays(stateDir, sessionId) {
+  const sessionsPath = (0, import_node_path16.join)(stateDir, "logs", ".sessions.json");
+  let sessionsObj;
+  try {
+    const parsed = JSON.parse(await (0, import_promises7.readFile)(sessionsPath, "utf8"));
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return [];
+    sessionsObj = parsed;
+  } catch {
+    return [];
+  }
+  const days = [];
+  for (const [day, ids] of Object.entries(sessionsObj)) {
+    if (Array.isArray(ids) && ids.includes(sessionId)) days.push(day);
+  }
+  return days;
+}
+
 // src/async-job-consumer.ts
 var ASYNC_JOB_MAX_ATTEMPTS = 2;
+function ASYNC_UNOWNED_TTL_DAYS() {
+  const raw = Number(process.env.MRRLIN_ASYNC_UNOWNED_TTL_DAYS);
+  return Number.isFinite(raw) && raw > 0 ? raw : 7;
+}
 async function driveAsyncJob(deps, projectSlug, jobId) {
+  const preClaimJob = await deps.client.getAsyncJob(projectSlug, jobId);
+  if (!preClaimJob) return;
+  const preClaimDescriptor = getAsyncToolDescriptor(preClaimJob.toolName);
+  if (preClaimDescriptor?.locationDependent) {
+    const owns = preClaimJob.directorSessionId != null && (await findSessionDays(deps.stateDir, preClaimJob.directorSessionId)).length > 0;
+    if (!owns) {
+      const ttlMs = ASYNC_UNOWNED_TTL_DAYS() * 24 * 60 * 60 * 1e3;
+      const ageMs = Date.now() - new Date(preClaimJob.createdAt).getTime();
+      if (ageMs > ttlMs) {
+        const claimedToTerminate = await deps.client.claimAsyncJob(projectSlug, jobId);
+        if (claimedToTerminate?.leaseId) {
+          await deps.client.terminalizeAsyncJob(projectSlug, jobId, {
+            leaseId: claimedToTerminate.leaseId,
+            status: "failed",
+            failureReason: "provider_unavailable",
+            error: `No machine held the logs for directorSessionId=${String(preClaimJob.directorSessionId)} within MRRLIN_ASYNC_UNOWNED_TTL_DAYS`
+          });
+        }
+      }
+      return;
+    }
+  }
   const claimed = await deps.client.claimAsyncJob(projectSlug, jobId);
   if (!claimed || !claimed.leaseId) return;
   const leaseId = claimed.leaseId;
@@ -47134,7 +48019,7 @@ async function driveAsyncJob(deps, projectSlug, jobId) {
         outcome = await deps.run(
           "async",
           () => descriptor2.run(
-            { client: deps.client, cwd: deps.cwd, codexExecutable: deps.codexExecutable, seat, projectSlug },
+            { client: deps.client, cwd: deps.cwd, codexExecutable: deps.codexExecutable, stateDir: deps.stateDir, seat, projectSlug },
             input
           )
         );
@@ -47180,7 +48065,7 @@ async function driveAsyncJob(deps, projectSlug, jobId) {
   const delivery = descriptor2.onComplete(outcome, input);
   if (!delivery.suppressInbox) {
     await deps.client.createInboxItem(projectSlug, {
-      id: delivery.id ?? `II-${import_node_crypto6.default.randomUUID()}`,
+      id: delivery.id ?? `II-${import_node_crypto7.default.randomUUID()}`,
       kind: delivery.kind,
       body: delivery.body,
       ...delivery.taskId ? { taskId: delivery.taskId } : {},
@@ -47198,13 +48083,13 @@ async function deriveRequestedHash(client, toolName, input) {
   if (input.requestedHash) return input.requestedHash;
   if (toolName === "run_spec_consensus" && input.pageId) {
     const page = await client.getWikiPage(input.projectSlug, input.pageId);
-    return page.contentHash ?? import_node_crypto6.default.createHash("sha256").update(page.markdownBody).digest("hex");
+    return page.contentHash ?? import_node_crypto7.default.createHash("sha256").update(page.markdownBody).digest("hex");
   }
   if (toolName === "draft_task_spec" && input.taskId) {
     const task = await client.getTask(input.projectSlug, input.taskId);
-    return task.updatedAt ?? import_node_crypto6.default.createHash("sha256").update(JSON.stringify(task)).digest("hex");
+    return task.updatedAt ?? import_node_crypto7.default.createHash("sha256").update(JSON.stringify(task)).digest("hex");
   }
-  return import_node_crypto6.default.createHash("sha256").update(JSON.stringify(input)).digest("hex");
+  return import_node_crypto7.default.createHash("sha256").update(JSON.stringify(input)).digest("hex");
 }
 async function runAsyncBackstopSweep(deps, drive = (slug, jobId) => driveAsyncJob(deps, slug, jobId)) {
   const projects = await deps.client.listProjects();
@@ -47392,19 +48277,19 @@ function agentIdleMs(provider) {
 }
 
 // src/operator-token.ts
-var import_node_fs8 = require("node:fs");
+var import_node_fs9 = require("node:fs");
 var import_node_os7 = __toESM(require("node:os"), 1);
-var import_node_path13 = __toESM(require("node:path"), 1);
+var import_node_path17 = __toESM(require("node:path"), 1);
 function operatorDir() {
-  const base = process.env.CODEX_HOME ? import_node_path13.default.join(process.env.CODEX_HOME, "mrrlin") : import_node_path13.default.join(import_node_os7.default.homedir(), ".mrrlin");
+  const base = process.env.CODEX_HOME ? import_node_path17.default.join(process.env.CODEX_HOME, "mrrlin") : import_node_path17.default.join(import_node_os7.default.homedir(), ".mrrlin");
   return base;
 }
 function operatorTokenPath() {
-  return import_node_path13.default.join(operatorDir(), "operator-token");
+  return import_node_path17.default.join(operatorDir(), "operator-token");
 }
 function readOperatorToken() {
   try {
-    const token = (0, import_node_fs8.readFileSync)(operatorTokenPath(), "utf8").trim();
+    const token = (0, import_node_fs9.readFileSync)(operatorTokenPath(), "utf8").trim();
     return token.length > 0 ? token : null;
   } catch {
     return null;
@@ -47412,24 +48297,24 @@ function readOperatorToken() {
 }
 function persistOperatorToken(token) {
   const dir = operatorDir();
-  (0, import_node_fs8.mkdirSync)(dir, { recursive: true, mode: 448 });
-  (0, import_node_fs8.writeFileSync)(operatorTokenPath(), `${token.trim()}
+  (0, import_node_fs9.mkdirSync)(dir, { recursive: true, mode: 448 });
+  (0, import_node_fs9.writeFileSync)(operatorTokenPath(), `${token.trim()}
 `, { encoding: "utf8", mode: 384 });
 }
 function agentCredentialPath() {
-  return import_node_path13.default.join(operatorDir(), "agent-credential");
+  return import_node_path17.default.join(operatorDir(), "agent-credential");
 }
 function persistAgentSecret(secret) {
   const dir = operatorDir();
-  (0, import_node_fs8.mkdirSync)(dir, { recursive: true, mode: 448 });
-  (0, import_node_fs8.writeFileSync)(agentCredentialPath(), `${secret.trim()}
+  (0, import_node_fs9.mkdirSync)(dir, { recursive: true, mode: 448 });
+  (0, import_node_fs9.writeFileSync)(agentCredentialPath(), `${secret.trim()}
 `, { encoding: "utf8", mode: 384 });
 }
 function readAgentSecret() {
   const fromEnv = process.env.MRRLIN_AGENT_SECRET?.trim();
   if (fromEnv) return fromEnv;
   try {
-    const raw = (0, import_node_fs8.readFileSync)(agentCredentialPath(), "utf8").trim();
+    const raw = (0, import_node_fs9.readFileSync)(agentCredentialPath(), "utf8").trim();
     return raw || void 0;
   } catch {
     return void 0;
@@ -47437,16 +48322,16 @@ function readAgentSecret() {
 }
 
 // src/thread-index.ts
-var import_node_fs9 = require("node:fs");
-var import_node_path14 = __toESM(require("node:path"), 1);
+var import_node_fs10 = require("node:fs");
+var import_node_path18 = __toESM(require("node:path"), 1);
 function threadIndexPath(stateDir) {
-  return import_node_path14.default.join(stateDir, "threads.json");
+  return import_node_path18.default.join(stateDir, "threads.json");
 }
 function loadThreadIndex(stateDir, ttlMs, now) {
   const result = /* @__PURE__ */ new Map();
   let parsed;
   try {
-    parsed = JSON.parse((0, import_node_fs9.readFileSync)(threadIndexPath(stateDir), "utf8"));
+    parsed = JSON.parse((0, import_node_fs10.readFileSync)(threadIndexPath(stateDir), "utf8"));
   } catch {
     return result;
   }
@@ -47469,8 +48354,8 @@ function loadThreadIndex(stateDir, ttlMs, now) {
   return result;
 }
 function saveThreadIndex(stateDir, entries) {
-  (0, import_node_fs9.mkdirSync)(stateDir, { recursive: true, mode: 448 });
-  (0, import_node_fs9.writeFileSync)(threadIndexPath(stateDir), `${JSON.stringify(Object.fromEntries(entries), null, 2)}
+  (0, import_node_fs10.mkdirSync)(stateDir, { recursive: true, mode: 448 });
+  (0, import_node_fs10.writeFileSync)(threadIndexPath(stateDir), `${JSON.stringify(Object.fromEntries(entries), null, 2)}
 `, {
     encoding: "utf8",
     mode: 384
@@ -47605,10 +48490,10 @@ function createToolBusyClock(opts) {
 }
 
 // src/worker-token.ts
-var import_node_crypto7 = require("node:crypto");
-var import_node_fs10 = require("node:fs");
+var import_node_crypto8 = require("node:crypto");
+var import_node_fs11 = require("node:fs");
 var import_node_os8 = __toESM(require("node:os"), 1);
-var import_node_path15 = __toESM(require("node:path"), 1);
+var import_node_path19 = __toESM(require("node:path"), 1);
 var DEFAULT_WORKER_PORT = 8792;
 function workerPort() {
   const raw = process.env.MRRLIN_WORKER_PORT;
@@ -47617,15 +48502,15 @@ function workerPort() {
   return Number.isFinite(parsed) && parsed > 0 ? parsed : DEFAULT_WORKER_PORT;
 }
 function workerDir() {
-  const base = process.env.CODEX_HOME ? import_node_path15.default.join(process.env.CODEX_HOME, "mrrlin") : import_node_path15.default.join(import_node_os8.default.homedir(), ".mrrlin");
-  return import_node_path15.default.join(base, "worker");
+  const base = process.env.CODEX_HOME ? import_node_path19.default.join(process.env.CODEX_HOME, "mrrlin") : import_node_path19.default.join(import_node_os8.default.homedir(), ".mrrlin");
+  return import_node_path19.default.join(base, "worker");
 }
 function workerTokenPath() {
-  return import_node_path15.default.join(workerDir(), "token");
+  return import_node_path19.default.join(workerDir(), "token");
 }
 function readWorkerToken() {
   try {
-    const token = (0, import_node_fs10.readFileSync)(workerTokenPath(), "utf8").trim();
+    const token = (0, import_node_fs11.readFileSync)(workerTokenPath(), "utf8").trim();
     return token.length > 0 ? token : null;
   } catch {
     return null;
@@ -47635,18 +48520,18 @@ function readOrCreateWorkerToken() {
   const existing = readWorkerToken();
   if (existing) return existing;
   const dir = workerDir();
-  (0, import_node_fs10.mkdirSync)(dir, { recursive: true, mode: 448 });
-  const token = (0, import_node_crypto7.randomBytes)(32).toString("hex");
-  (0, import_node_fs10.writeFileSync)(workerTokenPath(), `${token}
+  (0, import_node_fs11.mkdirSync)(dir, { recursive: true, mode: 448 });
+  const token = (0, import_node_crypto8.randomBytes)(32).toString("hex");
+  (0, import_node_fs11.writeFileSync)(workerTokenPath(), `${token}
 `, { encoding: "utf8", mode: 384 });
   return token;
 }
 
 // src/remote-phone-relay.ts
 var import_node_events2 = require("node:events");
-var import_node_fs11 = require("node:fs");
+var import_node_fs12 = require("node:fs");
 var import_node_os9 = require("node:os");
-var import_node_path16 = require("node:path");
+var import_node_path20 = require("node:path");
 
 // ../../node_modules/.pnpm/@noble+hashes@1.3.3/node_modules/@noble/hashes/esm/cryptoNode.js
 var nc = __toESM(require("node:crypto"), 1);
@@ -51217,9 +52102,9 @@ var DirectorRelay = class {
 
 // src/remote-phone-relay.ts
 function loadOrCreateAgentDeviceKey() {
-  const path21 = (0, import_node_path16.join)((0, import_node_os9.homedir)(), ".mrrlin", "agent-device-key");
+  const path22 = (0, import_node_path20.join)((0, import_node_os9.homedir)(), ".mrrlin", "agent-device-key");
   try {
-    const raw = JSON.parse((0, import_node_fs11.readFileSync)(path21, "utf8"));
+    const raw = JSON.parse((0, import_node_fs12.readFileSync)(path22, "utf8"));
     if (typeof raw.priv === "string" && typeof raw.pub === "string") {
       return { privateKey: fromBase64Url(raw.priv), publicKey: fromBase64Url(raw.pub) };
     }
@@ -51227,9 +52112,9 @@ function loadOrCreateAgentDeviceKey() {
   }
   const kp = generateIdentityKeyPair();
   try {
-    (0, import_node_fs11.mkdirSync)((0, import_node_path16.join)((0, import_node_os9.homedir)(), ".mrrlin"), { recursive: true });
-    (0, import_node_fs11.writeFileSync)(
-      path21,
+    (0, import_node_fs12.mkdirSync)((0, import_node_path20.join)((0, import_node_os9.homedir)(), ".mrrlin"), { recursive: true });
+    (0, import_node_fs12.writeFileSync)(
+      path22,
       JSON.stringify({ priv: toBase64Url(kp.privateKey), pub: toBase64Url(kp.publicKey) }),
       { mode: 384 }
     );
@@ -51237,10 +52122,10 @@ function loadOrCreateAgentDeviceKey() {
   }
   return kp;
 }
-var AGENT_PAIRING_PATH = (0, import_node_path16.join)((0, import_node_os9.homedir)(), ".mrrlin", "agent-pairing.json");
+var AGENT_PAIRING_PATH = (0, import_node_path20.join)((0, import_node_os9.homedir)(), ".mrrlin", "agent-pairing.json");
 function loadAgentPairing() {
   try {
-    const raw = JSON.parse((0, import_node_fs11.readFileSync)(AGENT_PAIRING_PATH, "utf8"));
+    const raw = JSON.parse((0, import_node_fs12.readFileSync)(AGENT_PAIRING_PATH, "utf8"));
     if (typeof raw.channelId === "string" && typeof raw.agentControlSecret === "string" && typeof raw.relayAuth === "string" && typeof raw.peerIdentityKey === "string") {
       return {
         channelId: raw.channelId,
@@ -51255,8 +52140,8 @@ function loadAgentPairing() {
 }
 function saveAgentPairing(record2) {
   try {
-    (0, import_node_fs11.mkdirSync)((0, import_node_path16.join)((0, import_node_os9.homedir)(), ".mrrlin"), { recursive: true });
-    (0, import_node_fs11.writeFileSync)(AGENT_PAIRING_PATH, JSON.stringify(record2), { mode: 384 });
+    (0, import_node_fs12.mkdirSync)((0, import_node_path20.join)((0, import_node_os9.homedir)(), ".mrrlin"), { recursive: true });
+    (0, import_node_fs12.writeFileSync)(AGENT_PAIRING_PATH, JSON.stringify(record2), { mode: 384 });
   } catch {
   }
 }
@@ -51433,18 +52318,18 @@ async function renderPairingQrSvg(payload) {
 }
 
 // src/checkout-registry.ts
-var import_node_fs12 = require("node:fs");
-var import_node_path17 = require("node:path");
+var import_node_fs13 = require("node:fs");
+var import_node_path21 = require("node:path");
 var CheckoutRegistry = class {
   file;
   constructor(stateDir) {
-    this.file = (0, import_node_path17.join)(stateDir, "checkouts.json");
-    (0, import_node_fs12.mkdirSync)(stateDir, { recursive: true });
+    this.file = (0, import_node_path21.join)(stateDir, "checkouts.json");
+    (0, import_node_fs13.mkdirSync)(stateDir, { recursive: true });
   }
   read() {
-    if (!(0, import_node_fs12.existsSync)(this.file)) return {};
+    if (!(0, import_node_fs13.existsSync)(this.file)) return {};
     try {
-      return JSON.parse((0, import_node_fs12.readFileSync)(this.file, "utf8"));
+      return JSON.parse((0, import_node_fs13.readFileSync)(this.file, "utf8"));
     } catch {
       return {};
     }
@@ -51452,16 +52337,16 @@ var CheckoutRegistry = class {
   get(slug) {
     return this.read()[slug] ?? null;
   }
-  confirm(slug, path21, now) {
+  confirm(slug, path22, now) {
     const all = this.read();
-    all[slug] = { path: path21, confirmedAt: now };
-    (0, import_node_fs12.writeFileSync)(this.file, JSON.stringify(all, null, 2));
+    all[slug] = { path: path22, confirmedAt: now };
+    (0, import_node_fs13.writeFileSync)(this.file, JSON.stringify(all, null, 2));
   }
 };
 
 // src/checkout-handlers.ts
 var import_node_child_process13 = require("node:child_process");
-var import_node_fs13 = require("node:fs");
+var import_node_fs14 = require("node:fs");
 
 // src/git-remote-match.ts
 function normalizeRemote(url2) {
@@ -51496,7 +52381,7 @@ function validateCheckoutPath(checkoutPath, repo) {
   }
   let resolvedPath;
   try {
-    resolvedPath = (0, import_node_fs13.realpathSync)(trimmedPath);
+    resolvedPath = (0, import_node_fs14.realpathSync)(trimmedPath);
   } catch {
     return {
       ok: false,
@@ -51801,131 +52686,13 @@ function extractVerificationSection(markdown) {
   return body.length > 0 ? body : null;
 }
 
-// src/bridge-log.ts
-var import_node_fs14 = require("node:fs");
-var import_node_path18 = require("node:path");
-
-// src/redact.ts
-var REDACTED = "[REDACTED]";
-var SECRET_PATTERNS = [
-  /ghp_[A-Za-z0-9]{20,}/g,
-  // GitHub personal access token (classic)
-  /github_pat_[A-Za-z0-9_]{20,}/g,
-  // GitHub fine-grained PAT
-  /\bBearer\s+[A-Za-z0-9._~+/-]+=*/gi,
-  // Authorization: Bearer <token>
-  /\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g,
-  // JWT (header.payload.signature)
-  /\b[A-Fa-f0-9]{32,}\b/g,
-  // long hex run (hashes, hex secrets)
-  /\b[A-Za-z0-9+/]{40,}={0,2}\b/g
-  // long base64-ish run (opaque tokens)
-];
-function redact(input) {
-  let out = input;
-  for (const re of SECRET_PATTERNS) out = out.replace(re, REDACTED);
-  return out;
-}
-
-// src/bridge-log.ts
-var NOOP_LOGGER = {
-  logIn() {
-  },
-  logOut() {
-  },
-  close() {
-  }
-};
-var REDACT_DEPTH_CAP = 8;
-var IMAGE_DATA_URI_RE = /^(data:image\/[a-zA-Z0-9.+-]+;base64,)([A-Za-z0-9+/=]+)$/;
-function redactImageDataUri(value) {
-  const m = value.match(IMAGE_DATA_URI_RE);
-  if (!m) return value;
-  const [, prefix, body] = m;
-  if (prefix === void 0 || body === void 0) return value;
-  return `${prefix}\u2026(${body.length} bytes)`;
-}
-function redactValue(value, depth) {
-  if (typeof value === "string") return redact(redactImageDataUri(value));
-  if (value === null || typeof value !== "object") return value;
-  if (depth >= REDACT_DEPTH_CAP) {
-    try {
-      return redact(JSON.stringify(value));
-    } catch {
-      return REDACTED;
-    }
-  }
-  if (Array.isArray(value)) return value.map((item) => redactValue(item, depth + 1));
-  const out = {};
-  for (const [k, v] of Object.entries(value)) {
-    out[k] = redactValue(v, depth + 1);
-  }
-  return out;
-}
-function redactMessage(payload, opts) {
-  if (payload && typeof payload === "object" && !Array.isArray(payload)) {
-    const msg = payload;
-    if (msg.type === "pairing-qr") {
-      const clone2 = { ...msg };
-      for (const key of ["payload", "svg"]) {
-        if (typeof clone2[key] === "string") clone2[key] = `[REDACTED len=${clone2[key].length}]`;
-      }
-      return redactValue(clone2, 1);
-    }
-    if (!opts.includePrompts && msg.type === "turn" && typeof msg.message === "string") {
-      return redactValue({ ...msg, message: "[prompt omitted]" }, 1);
-    }
-  }
-  return redactValue(payload, 0);
-}
-function resolveBridgeLogEnabled(env = process.env) {
-  const raw = (env.MRRLIN_DIRECTOR_BRIDGE_LOG ?? "").trim().toLowerCase();
-  return !(raw === "0" || raw === "false");
-}
-function resolvePromptsEnabled(env) {
-  const raw = (env.MRRLIN_DIRECTOR_BRIDGE_LOG_PROMPTS ?? "").trim().toLowerCase();
-  return !(raw === "0" || raw === "false");
-}
-function createBridgeLogger(stateDir, env = process.env) {
-  if (!resolveBridgeLogEnabled(env)) return NOOP_LOGGER;
-  const logsDir = (0, import_node_path18.join)(stateDir, "logs");
-  try {
-    (0, import_node_fs14.mkdirSync)(logsDir, { recursive: true });
-  } catch {
-    return NOOP_LOGGER;
-  }
-  const includePrompts = resolvePromptsEnabled(env);
-  const fileFor = () => (0, import_node_path18.join)(logsDir, `bridge-${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}.jsonl`);
-  const write = (dir, rec) => {
-    try {
-      const line = JSON.stringify({
-        ts: (/* @__PURE__ */ new Date()).toISOString(),
-        dir,
-        spanId: rec.spanId,
-        sessionId: rec.sessionId,
-        type: rec.type,
-        ...rec.ms !== void 0 ? { ms: rec.ms } : {},
-        payload: redactMessage(rec.payload, { includePrompts })
-      }) + "\n";
-      (0, import_node_fs14.appendFileSync)(fileFor(), line);
-    } catch {
-    }
-  };
-  return {
-    logIn: (rec) => write("in", rec),
-    logOut: (rec) => write("out", rec),
-    close() {
-    }
-  };
-}
-
 // src/external-agents-scrub.ts
 var import_node_fs15 = __toESM(require("node:fs"), 1);
 var import_node_os10 = __toESM(require("node:os"), 1);
-var import_node_path19 = __toESM(require("node:path"), 1);
+var import_node_path22 = __toESM(require("node:path"), 1);
 var REDACTION = "[REDACTED]";
 var SHORT_VALUE_THRESHOLD = 8;
-var KEYS_ENV_PATH = () => import_node_path19.default.join(import_node_os10.default.homedir(), ".local", "state", "external-agents", "keys.env");
+var KEYS_ENV_PATH = () => import_node_path22.default.join(import_node_os10.default.homedir(), ".local", "state", "external-agents", "keys.env");
 var keysEnvCache = null;
 function readKeysEnv() {
   const filePath = KEYS_ENV_PATH();
@@ -52346,9 +53113,9 @@ function readKnownGptSlugsFromTomlFile(filePath) {
   return Array.from(raw.matchAll(/^\s*model\s*=\s*"([^"]+)"/gm)).map((match) => match[1]?.trim() ?? "").filter(isSelectableModelSlug);
 }
 function readCodexFallbackModels() {
-  const codexHome = process.env.CODEX_HOME?.trim() || import_node_path20.default.join(import_node_os11.default.homedir(), ".codex");
+  const codexHome = process.env.CODEX_HOME?.trim() || import_node_path23.default.join(import_node_os11.default.homedir(), ".codex");
   const models = /* @__PURE__ */ new Map();
-  const cachePath = import_node_path20.default.join(codexHome, "models_cache.json");
+  const cachePath = import_node_path23.default.join(codexHome, "models_cache.json");
   const cacheRaw = readTextIfExists(cachePath);
   if (cacheRaw) {
     try {
@@ -52398,7 +53165,7 @@ function readCodexFallbackModels() {
       );
     }
   }
-  for (const slug of readKnownGptSlugsFromTomlFile(import_node_path20.default.join(codexHome, "config.toml"))) {
+  for (const slug of readKnownGptSlugsFromTomlFile(import_node_path23.default.join(codexHome, "config.toml"))) {
     addBridgeModel(
       models,
       mapBridgeModel({
@@ -52412,11 +53179,11 @@ function readCodexFallbackModels() {
       })
     );
   }
-  const automationsDir = import_node_path20.default.join(codexHome, "automations");
+  const automationsDir = import_node_path23.default.join(codexHome, "automations");
   try {
     for (const entry of import_node_fs16.default.readdirSync(automationsDir, { withFileTypes: true })) {
       if (!entry.isDirectory()) continue;
-      for (const slug of readKnownGptSlugsFromTomlFile(import_node_path20.default.join(automationsDir, entry.name, "automation.toml"))) {
+      for (const slug of readKnownGptSlugsFromTomlFile(import_node_path23.default.join(automationsDir, entry.name, "automation.toml"))) {
         addBridgeModel(
           models,
           mapBridgeModel({
@@ -52436,7 +53203,7 @@ function readCodexFallbackModels() {
   return [...models.values()];
 }
 function neutralCheckoutCwd(stateDir) {
-  const dir = import_node_path20.default.join(stateDir, "no-checkout");
+  const dir = import_node_path23.default.join(stateDir, "no-checkout");
   try {
     import_node_fs16.default.mkdirSync(dir, { recursive: true });
   } catch {
@@ -52906,8 +53673,8 @@ async function runOrphanWorktreeSweep(client, opts) {
   }
 }
 function readStateDir() {
-  if (process.env.CODEX_HOME) return import_node_path20.default.join(process.env.CODEX_HOME, "mrrlin", "director-bridge");
-  return import_node_path20.default.join(import_node_os11.default.homedir(), ".mrrlin", "director-bridge");
+  if (process.env.CODEX_HOME) return import_node_path23.default.join(process.env.CODEX_HOME, "mrrlin", "director-bridge");
+  return import_node_path23.default.join(import_node_os11.default.homedir(), ".mrrlin", "director-bridge");
 }
 function readAllowedOrigins() {
   const raw = (process.env.MRRLIN_DIRECTOR_BRIDGE_ALLOWED_ORIGINS ?? "").trim();
@@ -52982,7 +53749,7 @@ function createBridgeRequestListener(opts) {
         res.end(JSON.stringify({ ok: false, error: "Origin not allowed." }));
         return;
       }
-      const nonce = import_node_crypto8.default.randomBytes(16).toString("base64url");
+      const nonce = import_node_crypto9.default.randomBytes(16).toString("base64url");
       res.writeHead(200, { "content-type": "application/json" });
       res.end(JSON.stringify({ ok: true, wsUrl: `ws://${host}:${port}/ws`, token, nonce }));
       return;
@@ -53033,7 +53800,11 @@ function attachBridgeWss(server, opts) {
         sessionId: sessionIdOf(msg),
         type: msg.type,
         ms: span.at ? Date.now() - span.at : void 0,
-        payload: msg
+        payload: msg,
+        // send() is generic across every OutgoingMessage variant; only the "event" variant ever
+        // carries telemetry (task 4.5), so this is simply undefined — and omitted by BridgeLogRecordInput's
+        // optional telemetry? — for every other message type.
+        telemetry: msg.telemetry
       });
       socket.send(JSON.stringify(msg));
     };
@@ -53097,6 +53868,20 @@ function attachSeqMetadata(msg, seq, turnId) {
   }
   return msg;
 }
+function describeZeroOutputLimit(signal) {
+  if (!signal) {
+    return {
+      message: "Director turn completed without any output \u2014 Codex likely hit its usage/credits limit. Check your Codex account/plan.",
+      reason: "Director turn completed without output; Codex likely hit its usage or credits limit.",
+      resetAt: null
+    };
+  }
+  return {
+    message: signal.resetAt ? `Director turn completed without any output \u2014 Codex's usage/credits limit is exhausted; it resets at ${signal.resetAt}.` : "Director turn completed without any output \u2014 Codex's usage/credits limit is exhausted (no reset time reported).",
+    reason: "Codex provider limit exhausted during a Director turn.",
+    resetAt: signal.resetAt
+  };
+}
 function createBridgeMessageHandler(deps) {
   const tombstones = deps.tombstones ?? /* @__PURE__ */ new Map();
   const pendingTurnSessions = /* @__PURE__ */ new Set();
@@ -53263,7 +54048,7 @@ function createBridgeMessageHandler(deps) {
       }
     }
     socket.on("message", async (data) => {
-      const spanId = import_node_crypto8.default.randomUUID();
+      const spanId = import_node_crypto9.default.randomUUID();
       if (logCtx) {
         logCtx.span.id = spanId;
         logCtx.span.at = Date.now();
@@ -53785,7 +54570,7 @@ function createBridgeMessageHandler(deps) {
       thread.inFlight = true;
       pendingTurnSessions.delete(directorSessionId);
       thread.replay = createReplayBuffer({
-        turnId: (0, import_node_crypto8.randomUUID)(),
+        turnId: (0, import_node_crypto9.randomUUID)(),
         spanId,
         ...deps.retentionMs !== void 0 ? { retentionMs: deps.retentionMs } : {},
         ...deps.ackLingerMs !== void 0 ? { ackLingerMs: deps.ackLingerMs } : {}
@@ -53860,6 +54645,9 @@ function createBridgeMessageHandler(deps) {
             rejectTurn = (error51) => reject(error51);
           });
           let outputEvents = 0;
+          let exhaustedLimitSignal = null;
+          let turnTokenUsage = null;
+          let promptBytes = 0;
           const deferredResults = [];
           let pokeActivity = () => {
           };
@@ -53869,7 +54657,12 @@ function createBridgeMessageHandler(deps) {
               deferredResults.push(event);
               return;
             }
-            if (event.type === "turn_completed" || event.type === "rate_limits" || event.type === "token_usage") {
+            if (event.type === "token_usage") {
+              const usage = event.usage;
+              turnTokenUsage = addTurnTokenUsage(turnTokenUsage, usage);
+              return;
+            }
+            if (event.type === "turn_completed" || event.type === "rate_limits") {
               return;
             }
             outputEvents += 1;
@@ -53888,6 +54681,7 @@ function createBridgeMessageHandler(deps) {
                 sendInTurn({ type: "rateLimits", directorSessionId, rateLimits: event.snapshot });
               }
               const signal = detectExhaustedProviderLimit(event.snapshot, Date.now());
+              exhaustedLimitSignal = signal;
               if (signal) {
                 deps.reportLimitPause?.("Codex provider limit exhausted during a Director turn.", signal.resetAt);
               }
@@ -53968,6 +54762,7 @@ ${contextPrefix}` : updateOffer : contextPrefix;
               const composed = composedPrefix ? `${composedPrefix}
 
 ${effectiveText}` : effectiveText;
+              promptBytes = Buffer.byteLength(composed, "utf8");
               turnInput.push({ type: "text", text: composed, text_elements: [] });
             }
             if (imageDataUri) {
@@ -53983,18 +54778,17 @@ ${effectiveText}` : effectiveText;
             await Promise.race([runSequence, watchdogExpired]);
             deps.setCodexAuth?.("ok");
             if (outputEvents === 0) {
-              deps.reportLimitPause?.(
-                "Director turn completed without output; Codex likely hit its usage or credits limit.",
-                null
-              );
+              const zeroOutputLimit = describeZeroOutputLimit(exhaustedLimitSignal);
+              deps.reportLimitPause?.(zeroOutputLimit.reason, zeroOutputLimit.resetAt);
               sendInTurn({
                 type: "error",
                 directorSessionId,
-                error: "Director turn completed without any output \u2014 Codex likely hit its usage/credits limit. Check your Codex account/plan."
+                error: zeroOutputLimit.message
               });
             }
+            const telemetry = turnTokenUsage !== null ? { promptBytes, usage: turnTokenUsage } : void 0;
             for (const event of deferredResults) {
-              sendInTurn({ type: "event", directorSessionId, event });
+              sendInTurn({ type: "event", directorSessionId, event, telemetry });
             }
           } finally {
             if (thread.replay && (thread.replay.state === "live" || thread.replay.state === "detached")) {
@@ -54130,6 +54924,9 @@ function scanForOtherBridges() {
 }
 async function startDirectorBridge() {
   const config2 = parseConfig();
+  if (!process.env.MRRLIN_TELEMETRY_DEFAULT_PROJECT?.trim()) {
+    throw new Error("MRRLIN_TELEMETRY_DEFAULT_PROJECT must be set (non-empty) at bridge startup.");
+  }
   const turnLock = createTurnLock();
   let lastTurnEndedAt = Date.now();
   const wrappedTurnLock = {
@@ -54266,8 +55063,8 @@ async function startDirectorBridge() {
     codexCwd: config2.codexCwd,
     codexExecutable: config2.codexExecutable,
     checkoutRegistry,
-    worktreeRoot: import_node_path20.default.join(config2.stateDir, "worktrees"),
-    locksDir: import_node_path20.default.join(config2.stateDir, "locks"),
+    worktreeRoot: import_node_path23.default.join(config2.stateDir, "worktrees"),
+    locksDir: import_node_path23.default.join(config2.stateDir, "locks"),
     // Wire the executor server for code-execution runs. Each run gets its own provider process
     // (app-server for codex, a resident CLI child for claude) at the run worktree, running
     // UNRESTRICTED from the real operator config (owner no-sandbox decision — auth + mrrlin MCP
@@ -54311,7 +55108,7 @@ async function startDirectorBridge() {
         // egressDomains is retained in the seam signature (verification-turn.ts still computes the
         // env host) but no longer constrains anything — the executor is unrestricted.
         startSandbox: async (_egressDomains, providerId) => {
-          const cwd = import_node_fs16.default.mkdtempSync(import_node_path20.default.join(import_node_os11.default.tmpdir(), "mrrlin-verify-"));
+          const cwd = import_node_fs16.default.mkdtempSync(import_node_path23.default.join(import_node_os11.default.tmpdir(), "mrrlin-verify-"));
           let executor;
           try {
             executor = await startExecutorServer({ worktree: cwd, provider: providerId });
@@ -54356,12 +55153,13 @@ async function startDirectorBridge() {
   };
   const sessionSinks = createSessionSinkRegistry();
   const tombstones = /* @__PURE__ */ new Map();
-  const bridgeInstanceId = (0, import_node_crypto8.randomUUID)();
+  const bridgeInstanceId = (0, import_node_crypto9.randomUUID)();
   const asyncConsumerDeps = {
     client,
     run: wrappedTurnLock.run,
     cwd: config2.codexCwd ?? process.cwd(),
     codexExecutable: config2.codexExecutable,
+    stateDir: config2.stateDir,
     staleSeconds,
     touchIntervalMs: Math.min(DEFAULT_TOUCH_INTERVAL_MS, Math.floor(staleSeconds * 1e3 / 2)),
     wake: (slug, directorSessionId, body, deliveryKind) => {
@@ -54511,7 +55309,7 @@ async function startDirectorBridge() {
     fileUpdateInboxItem: async (projectSlug) => {
       const body = selfUpdateHandle.updateInboxBody();
       if (!body) return;
-      const id = `II-MCPUPD-${(0, import_node_crypto8.randomUUID)()}`;
+      const id = `II-MCPUPD-${(0, import_node_crypto9.randomUUID)()}`;
       try {
         const row = await client.createInboxItem(projectSlug, { id, kind: "info", body });
         process.stderr.write(
@@ -54541,7 +55339,7 @@ async function startDirectorBridge() {
   const bridgeLogger = createBridgeLogger(config2.stateDir, process.env);
   let bridgeBinShaShort = "unknown00000";
   try {
-    bridgeBinShaShort = import_node_crypto8.default.createHash("sha256").update(import_node_fs16.default.readFileSync(process.argv[1] ?? "")).digest("hex").slice(0, 12);
+    bridgeBinShaShort = import_node_crypto9.default.createHash("sha256").update(import_node_fs16.default.readFileSync(process.argv[1] ?? "")).digest("hex").slice(0, 12);
   } catch {
   }
   attachBridgeWss(server, {
@@ -54628,7 +55426,10 @@ async function startDirectorBridge() {
     dispatchServer.on("error", reject);
     dispatchServer.listen(workerPort(), "127.0.0.1", () => resolve());
   });
-  const bridgeHealth = new BridgeHealthTracker({ stateDir: config2.stateDir });
+  const bridgeHealth = new BridgeHealthTracker({
+    stateDir: config2.stateDir,
+    hasLiveTurn: () => wrappedTurnLock.activeCount() > 0 || (resumableCountHolder.fn?.() ?? 0) > 0
+  });
   const runTrackedSweep = async (id, label, fn) => {
     try {
       await fn();
@@ -54665,8 +55466,8 @@ async function startDirectorBridge() {
       );
       void runOrphanWorktreeSweep(client, {
         checkoutRegistry,
-        worktreeRoot: import_node_path20.default.join(config2.stateDir, "worktrees"),
-        locksDir: import_node_path20.default.join(config2.stateDir, "locks")
+        worktreeRoot: import_node_path23.default.join(config2.stateDir, "worktrees"),
+        locksDir: import_node_path23.default.join(config2.stateDir, "locks")
       });
       {
         const { retainedBuffers, retainedBytes, tombstonesRemoved } = sweepReplayBuffers(threads, tombstones, {
@@ -54707,6 +55508,28 @@ async function startDirectorBridge() {
           });
         }
       }
+      void (async () => {
+        try {
+          const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+          await foldClosedDays(config2.stateDir, today);
+          await uploadPendingDays(config2.stateDir, client, bridgeHealth, {
+            cwd: config2.codexCwd ?? process.cwd(),
+            codexExecutable: config2.codexExecutable,
+            timeoutMs: readEnvInt("MRRLIN_TELEMETRY_GATE_TIMEOUT_SECONDS", 60) * 1e3
+          });
+          await prune(config2.stateDir, {
+            ageDays: readEnvInt("MRRLIN_LOG_RETENTION_AGE_DAYS", 30),
+            budgetMb: readEnvInt("MRRLIN_LOG_RETENTION_BUDGET_MB", 1024)
+          });
+        } catch (error51) {
+          bridgeLogger.logOut({
+            spanId: "gc",
+            sessionId: null,
+            type: "<telemetry-pipeline-error>",
+            payload: { error: error51 instanceof Error ? error51.message : String(error51) }
+          });
+        }
+      })();
       scheduleClaimLoop();
     }, claimIntervalMs());
     claimTimer.unref?.();
@@ -54927,7 +55750,7 @@ function timingSafeTokenEqual(provided, expected) {
   const a = Buffer.from(provided);
   const b = Buffer.from(expected);
   if (a.length !== b.length) return false;
-  return import_node_crypto8.default.timingSafeEqual(a, b);
+  return import_node_crypto9.default.timingSafeEqual(a, b);
 }
 function readDispatchBody(req) {
   return new Promise((resolve, reject) => {
@@ -54949,14 +55772,14 @@ function readDispatchBody(req) {
 function readOrCreateBridgeToken(stateDir) {
   const explicit = (process.env.MRRLIN_DIRECTOR_BRIDGE_TOKEN ?? "").trim();
   if (explicit) return explicit;
-  const tokenPath = import_node_path20.default.join(stateDir, "token.txt");
+  const tokenPath = import_node_path23.default.join(stateDir, "token.txt");
   try {
     const existing = import_node_fs16.default.readFileSync(tokenPath, "utf8").trim();
     if (existing) return existing;
   } catch {
   }
   import_node_fs16.default.mkdirSync(stateDir, { recursive: true, mode: 448 });
-  const token = import_node_crypto8.default.randomBytes(32).toString("base64url");
+  const token = import_node_crypto9.default.randomBytes(32).toString("base64url");
   import_node_fs16.default.writeFileSync(tokenPath, `${token}
 `, { mode: 384 });
   return token;
@@ -58341,36 +59164,36 @@ var StdioServerTransport = class {
 };
 
 // src/tools.ts
-var import_node_crypto11 = require("node:crypto");
-var import_promises5 = require("node:fs/promises");
-var import_node_path22 = __toESM(require("node:path"), 1);
+var import_node_crypto12 = require("node:crypto");
+var import_promises10 = require("node:fs/promises");
+var import_node_path26 = __toESM(require("node:path"), 1);
 var import_node_os12 = __toESM(require("node:os"), 1);
 
 // ../../packages/wiki/dist/index.js
-var import_promises4 = __toESM(require("node:fs/promises"), 1);
-var import_node_path21 = __toESM(require("node:path"), 1);
+var import_promises8 = __toESM(require("node:fs/promises"), 1);
+var import_node_path24 = __toESM(require("node:path"), 1);
 var INCLUDED_DOC_FOLDERS = /* @__PURE__ */ new Set(["_meta", "explanation", "how-to", "reference", "sdd", "tutorials"]);
 function toPosixPath(input) {
-  return input.split(import_node_path21.default.sep).join("/");
+  return input.split(import_node_path24.default.sep).join("/");
 }
 function slugifyWikiSegment(input) {
   return input.trim().toLowerCase().replace(/`/g, "").replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
 }
 async function pathExists3(input) {
   try {
-    await import_promises4.default.access(input);
+    await import_promises8.default.access(input);
     return true;
   } catch {
     return false;
   }
 }
 async function findWorkspaceRoot(start = process.cwd()) {
-  let current2 = import_node_path21.default.resolve(start);
+  let current2 = import_node_path24.default.resolve(start);
   while (true) {
-    if (await pathExists3(import_node_path21.default.join(current2, "pnpm-workspace.yaml")) && await pathExists3(import_node_path21.default.join(current2, "docs"))) {
+    if (await pathExists3(import_node_path24.default.join(current2, "pnpm-workspace.yaml")) && await pathExists3(import_node_path24.default.join(current2, "docs"))) {
       return current2;
     }
-    const parent = import_node_path21.default.dirname(current2);
+    const parent = import_node_path24.default.dirname(current2);
     if (parent === current2) {
       throw new Error(`Unable to find Mrrlin workspace root from ${start}`);
     }
@@ -58379,28 +59202,28 @@ async function findWorkspaceRoot(start = process.cwd()) {
 }
 async function resolveDocsRoot(input) {
   if (input) {
-    return import_node_path21.default.resolve(input);
+    return import_node_path24.default.resolve(input);
   }
   if (process.env.MRRLIN_DOCS_ROOT) {
-    return import_node_path21.default.resolve(process.env.MRRLIN_DOCS_ROOT);
+    return import_node_path24.default.resolve(process.env.MRRLIN_DOCS_ROOT);
   }
-  return import_node_path21.default.join(await findWorkspaceRoot(), "docs");
+  return import_node_path24.default.join(await findWorkspaceRoot(), "docs");
 }
 async function resolveIndexPath(input) {
   if (input) {
-    return import_node_path21.default.resolve(input);
+    return import_node_path24.default.resolve(input);
   }
   if (process.env.MRRLIN_WIKI_INDEX_PATH) {
-    return import_node_path21.default.resolve(process.env.MRRLIN_WIKI_INDEX_PATH);
+    return import_node_path24.default.resolve(process.env.MRRLIN_WIKI_INDEX_PATH);
   }
   const workspaceRoot = await findWorkspaceRoot();
-  return import_node_path21.default.join(workspaceRoot, "apps", "web", "public", "wiki-index.json");
+  return import_node_path24.default.join(workspaceRoot, "apps", "web", "public", "wiki-index.json");
 }
 async function walkMarkdownFiles(root, dir = root) {
-  const entries = await import_promises4.default.readdir(dir, { withFileTypes: true });
+  const entries = await import_promises8.default.readdir(dir, { withFileTypes: true });
   const files = [];
   for (const entry of entries) {
-    const absolute = import_node_path21.default.join(dir, entry.name);
+    const absolute = import_node_path24.default.join(dir, entry.name);
     if (entry.isDirectory()) {
       files.push(...await walkMarkdownFiles(root, absolute));
       continue;
@@ -58419,7 +59242,7 @@ function parseTitle(markdown, sourcePath) {
   return title;
 }
 function documentFromFile(docsRoot, absolutePath, markdown) {
-  const relativePath = toPosixPath(import_node_path21.default.relative(docsRoot, absolutePath));
+  const relativePath = toPosixPath(import_node_path24.default.relative(docsRoot, absolutePath));
   const [section, fileName] = relativePath.split("/");
   if (!section || !fileName || !INCLUDED_DOC_FOLDERS.has(section)) {
     return null;
@@ -58439,7 +59262,7 @@ async function listWikiDocuments(options = {}) {
   const files = await walkMarkdownFiles(docsRoot);
   const documents = [];
   for (const file2 of files) {
-    const markdown = await import_promises4.default.readFile(file2, "utf8");
+    const markdown = await import_promises8.default.readFile(file2, "utf8");
     const document2 = documentFromFile(docsRoot, file2, markdown);
     if (document2) {
       documents.push(document2);
@@ -58493,7 +59316,7 @@ async function buildWikiKnowledgeIndex(options = {}) {
 }
 async function loadBuiltWikiKnowledgeIndex(indexPath) {
   const resolvedIndexPath = await resolveIndexPath(indexPath);
-  const raw = await import_promises4.default.readFile(resolvedIndexPath, "utf8");
+  const raw = await import_promises8.default.readFile(resolvedIndexPath, "utf8");
   return wikiKnowledgeIndexSchema.parse(JSON.parse(raw));
 }
 function tokenize(input) {
@@ -58584,9 +59407,9 @@ async function runCodeGate(_target, deps) {
             accepted
           );
         }
-        let gate;
+        let gate2;
         try {
-          gate = await deps.fastGate();
+          gate2 = await deps.fastGate();
         } catch (gateErr) {
           await deps.restore(ref);
           throw new CodeGateUnfixableError(
@@ -58594,7 +59417,7 @@ async function runCodeGate(_target, deps) {
             accepted
           );
         }
-        if (!gate.ok) {
+        if (!gate2.ok) {
           await deps.restore(ref);
           throw new CodeGateUnfixableError("fast-gate red after revision", accepted);
         }
@@ -59031,7 +59854,7 @@ async function resolveActiveRunHead(input, deps) {
 }
 
 // src/async-tools/consensus.ts
-var import_node_crypto9 = require("node:crypto");
+var import_node_crypto10 = require("node:crypto");
 
 // src/consensus/question-similarity.ts
 var SUPPRESSION_SIMILARITY_THRESHOLD = 0.6;
@@ -59307,9 +60130,9 @@ async function handleConsensusBlocked(result, ctx, input, resolvedTaskId) {
     }
     if (taskId) {
       const scopeId = taskId;
-      const groupId = toFile.length > 1 ? `II-${scopeId}-gate-group-${(0, import_node_crypto9.createHash)("sha256").update(toFile.map((c) => c.rawQuestion).sort().join("\n")).digest("hex").slice(0, 10)}` : void 0;
+      const groupId = toFile.length > 1 ? `II-${scopeId}-gate-group-${(0, import_node_crypto10.createHash)("sha256").update(toFile.map((c) => c.rawQuestion).sort().join("\n")).digest("hex").slice(0, 10)}` : void 0;
       for (const clarification of toFile) {
-        const id = `II-${scopeId}-gate-${(0, import_node_crypto9.createHash)("sha256").update(clarification.rawQuestion).digest("hex").slice(0, 10)}`;
+        const id = `II-${scopeId}-gate-${(0, import_node_crypto10.createHash)("sha256").update(clarification.rawQuestion).digest("hex").slice(0, 10)}`;
         try {
           const questionOptions = buildGateQuestionOptions(clarification.rawQuestion, clarification.category);
           await ctx.client.createInboxItem(input.projectSlug, {
@@ -59327,9 +60150,9 @@ async function handleConsensusBlocked(result, ctx, input, resolvedTaskId) {
       filedQuestionCount = toFile.length;
     } else if (planId) {
       const scopeId = planId;
-      const groupId = toFile.length > 1 ? `II-${scopeId}-gate-group-${(0, import_node_crypto9.createHash)("sha256").update(toFile.map((c) => c.rawQuestion).sort().join("\n")).digest("hex").slice(0, 10)}` : void 0;
+      const groupId = toFile.length > 1 ? `II-${scopeId}-gate-group-${(0, import_node_crypto10.createHash)("sha256").update(toFile.map((c) => c.rawQuestion).sort().join("\n")).digest("hex").slice(0, 10)}` : void 0;
       for (const clarification of toFile) {
-        const id = `II-${scopeId}-gate-${(0, import_node_crypto9.createHash)("sha256").update(clarification.rawQuestion).digest("hex").slice(0, 10)}`;
+        const id = `II-${scopeId}-gate-${(0, import_node_crypto10.createHash)("sha256").update(clarification.rawQuestion).digest("hex").slice(0, 10)}`;
         try {
           const questionOptions = buildGateQuestionOptions(clarification.rawQuestion, clarification.category);
           await ctx.client.createInboxItem(input.projectSlug, {
@@ -59353,7 +60176,7 @@ async function handleConsensusBlocked(result, ctx, input, resolvedTaskId) {
       taskId: page.taskId ?? null
     });
     const reviewHash = domainScopedReviewHash2(page.contentHash, domain2);
-    const baseBlockItemId = `II-${taskId}-gateblock-${(0, import_node_crypto9.createHash)("sha256").update(reviewHash).digest("hex").slice(0, 10)}`;
+    const baseBlockItemId = `II-${taskId}-gateblock-${(0, import_node_crypto10.createHash)("sha256").update(reviewHash).digest("hex").slice(0, 10)}`;
     const reviewAgainAvailable = !taskInboxItems.some(
       (item) => item.id === baseBlockItemId && item.status !== "pending" && item.answer === REVIEW_AGAIN_ANSWER
     );
@@ -59923,8 +60746,159 @@ function createIntentCheckDescriptor() {
 }
 var intentCheckDescriptor = createIntentCheckDescriptor();
 
+// src/evidence/assembler.ts
+var import_promises9 = require("node:fs/promises");
+var import_node_path25 = require("node:path");
+function evidenceDedupKey(sessionId, reportId) {
+  return `${sessionId}:${reportId}`;
+}
+function isRecord3(v) {
+  return v !== null && typeof v === "object";
+}
+async function readDayLines(stateDir, day, sessionId) {
+  let raw;
+  try {
+    raw = await (0, import_promises9.readFile)((0, import_node_path25.join)(stateDir, "logs", `bridge-${day}.jsonl`), "utf8");
+  } catch {
+    return [];
+  }
+  const kept = [];
+  for (const line of raw.split("\n")) {
+    if (!line.trim()) continue;
+    let rec;
+    try {
+      rec = JSON.parse(line);
+    } catch {
+      continue;
+    }
+    if (!isRecord3(rec) || !isRecord3(rec.payload)) continue;
+    if (rec.payload.directorSessionId !== sessionId) continue;
+    kept.push(rec);
+  }
+  return kept;
+}
+async function assembleEvidence(stateDir, sessionId, reportId, gateCtx) {
+  const daysRead = await findSessionDays(stateDir, sessionId);
+  const allLines = [];
+  for (const day of daysRead) {
+    allLines.push(...await readDayLines(stateDir, day, sessionId));
+  }
+  const groups = /* @__PURE__ */ new Map();
+  for (const line of allLines) {
+    const turnKey = line.payload?.turnId ?? null;
+    const bucket = groups.get(turnKey);
+    if (bucket) bucket.push(line);
+    else groups.set(turnKey, [line]);
+  }
+  const orderedGroups = [...groups.entries()].sort(([, a], [, b]) => {
+    const aTs = a[0]?.ts ?? "";
+    const bTs = b[0]?.ts ?? "";
+    return aTs < bTs ? -1 : aTs > bTs ? 1 : 0;
+  });
+  const steps = [];
+  const turnIds = [];
+  for (const [turnId, groupLines] of orderedGroups) {
+    const ordered = [...groupLines].sort((a, b) => (a.payload?.seq ?? 0) - (b.payload?.seq ?? 0));
+    const groupHasFailedLifecycle = ordered.some(
+      (l) => l.projection?.kind === "turn_lifecycle" && l.projection.lifecycle === "failed"
+    );
+    const resultByToolId = /* @__PURE__ */ new Map();
+    for (const line of ordered) {
+      if (line.projection?.kind !== "tool_result") continue;
+      const toolId = line.payload?.event?.tool?.id;
+      if (typeof toolId === "string") resultByToolId.set(toolId, line);
+    }
+    let groupProducedStep = false;
+    for (const line of ordered) {
+      if (line.projection?.kind !== "tool_use") continue;
+      const rawToolId = line.payload?.event?.tool?.id;
+      const paired = typeof rawToolId === "string" ? resultByToolId.get(rawToolId) : void 0;
+      const toolName = line.projection.toolName ?? line.payload?.event?.tool?.name ?? "";
+      const ms = line.projection.ms ?? 0;
+      const outcome = paired?.projection?.kind === "tool_result" ? paired.projection.outcome ?? "unknown" : "unknown";
+      const step = { toolName, ms, outcome };
+      if (paired?.projection?.kind === "tool_result" && paired.projection.exitCode !== void 0) {
+        step.exitCode = paired.projection.exitCode;
+      }
+      const needsExcerpt = outcome === "error" || groupHasFailedLifecycle;
+      const rawContent = paired?.payload?.event?.content;
+      if (needsExcerpt && typeof rawContent === "string") {
+        step.excerpt = redact(rawContent).slice(0, 8192);
+      }
+      steps.push(step);
+      groupProducedStep = true;
+    }
+    if (groupProducedStep && turnId !== null) turnIds.push(turnId);
+  }
+  let windowPruned = false;
+  try {
+    const raw = await (0, import_promises9.readFile)((0, import_node_path25.join)(stateDir, "logs", ".pruned.jsonl"), "utf8");
+    outer: for (const line of raw.split("\n")) {
+      if (!line.trim()) continue;
+      let rec;
+      try {
+        rec = JSON.parse(line);
+      } catch {
+        continue;
+      }
+      if (!isRecord3(rec) || !Array.isArray(rec.daysRemoved)) continue;
+      for (const removedDay of rec.daysRemoved) {
+        if (daysRead.includes(removedDay)) {
+          windowPruned = true;
+          break outer;
+        }
+      }
+    }
+  } catch {
+  }
+  const provisional = { reportId, sessionId, turnIds, daysRead, windowPruned, steps, gateMarker: "gated" };
+  const prose = [];
+  steps.forEach((step, i) => {
+    if (step.excerpt !== void 0) prose.push({ path: `steps.${i}.excerpt`, value: step.excerpt });
+  });
+  const gateResult = await gate(provisional, prose, gateCtx);
+  return { ...gateResult.artifact, gateMarker: gateResult.gated ? "gated" : "projection-only" };
+}
+
+// src/async-tools/report-evidence.ts
+function gateTimeoutMs() {
+  const raw = (process.env.MRRLIN_TELEMETRY_GATE_TIMEOUT_SECONDS ?? "").trim();
+  const parsed = Number.parseInt(raw, 10);
+  const seconds = Number.isInteger(parsed) && parsed > 0 ? parsed : 60;
+  return seconds * 1e3;
+}
+var REPORT_EVIDENCE_TOOL_NAME = "report-evidence";
+async function runReportEvidence(ctx, input) {
+  const gateCtx = {
+    cwd: ctx.cwd,
+    codexExecutable: ctx.codexExecutable,
+    timeoutMs: gateTimeoutMs(),
+    runExec: ctx.gateRunExec
+  };
+  const artifact = await assembleEvidence(ctx.stateDir, input.directorSessionId, input.reportId, gateCtx);
+  return { kind: "done", resultJson: JSON.stringify(artifact), finalReviewedHash: null };
+}
+function onComplete5(outcome, input) {
+  if (outcome.kind === "done") {
+    return { kind: "info", body: `Evidence assembled for report ${input.reportId}.`, suppressInbox: true };
+  }
+  return { kind: "info", body: `Evidence assembly failed for report ${input.reportId}: ${outcome.error}` };
+}
+function createReportEvidenceDescriptor() {
+  return {
+    toolName: REPORT_EVIDENCE_TOOL_NAME,
+    dedupKey: (input) => evidenceDedupKey(input.directorSessionId, input.reportId),
+    run: runReportEvidence,
+    onComplete: onComplete5,
+    // Runs long after the reporting user's turn ended, sometimes with no live session left to wake.
+    wakeDirector: false,
+    locationDependent: true
+  };
+}
+var reportEvidenceDescriptor = createReportEvidenceDescriptor();
+
 // src/async-tools/enqueue.ts
-var import_node_crypto10 = __toESM(require("node:crypto"), 1);
+var import_node_crypto11 = __toESM(require("node:crypto"), 1);
 async function enqueueAsyncTool(client, descriptor2, input) {
   if (descriptor2.cachedResult) {
     const cached2 = await descriptor2.cachedResult(client, input);
@@ -59937,7 +60911,7 @@ async function enqueueAsyncTool(client, descriptor2, input) {
   if (active) {
     return { status: "already_running", jobId: active.id, message: "Already running; will notify in inbox." };
   }
-  const jobId = `AJ-${import_node_crypto10.default.randomUUID()}`;
+  const jobId = `AJ-${import_node_crypto11.default.randomUUID()}`;
   try {
     await client.createAsyncJob(input.projectSlug, {
       id: jobId,
@@ -60506,6 +61480,7 @@ registerAsyncTool(consensusDescriptor);
 registerAsyncTool(deliverableConsensusDescriptor);
 registerAsyncTool(draftSpecDescriptor);
 registerAsyncTool(intentCheckDescriptor);
+registerAsyncTool(reportEvidenceDescriptor);
 var projectScopedSchema = external_exports.object({ projectSlug: mrrlinProjectSlugSchema });
 var taskScopedSchema = projectScopedSchema.extend({ taskId: mrrlinTaskIdSchema });
 var planScopedSchema = projectScopedSchema.extend({ planId: mrrlinPlanIdSchema });
@@ -61516,7 +62491,7 @@ function createMrrlinTools(options) {
       "PRODUCED_URL_RECORD_FAILED",
       "Unable to record produced URL.",
       async (c, { projectSlug, runId, url: url2, label }) => {
-        const id = `EA-pu-${(0, import_node_crypto11.randomBytes)(4).toString("hex")}`;
+        const id = `EA-pu-${(0, import_node_crypto12.randomBytes)(4).toString("hex")}`;
         const payload = label ? { url: url2, label } : { url: url2 };
         return await c.appendExecutionArtifact(projectSlug, runId, {
           id,
@@ -61590,7 +62565,7 @@ function createMrrlinTools(options) {
       "ARTIFACT_FILE_UPLOAD_FAILED",
       "Unable to upload artifact file.",
       async (c, { projectSlug, path: filePath, class: artifactClass, taskId, runId, description }) => {
-        const extension2 = import_node_path22.default.extname(filePath).toLowerCase();
+        const extension2 = import_node_path26.default.extname(filePath).toLowerCase();
         const contentType = ARTIFACT_EXTENSION_TYPES[extension2];
         if (!contentType) {
           throw new McpToolCodedError(
@@ -61598,7 +62573,7 @@ function createMrrlinTools(options) {
             `Unsupported artifact extension '${extension2}'. Allowed: ${Object.keys(ARTIFACT_EXTENSION_TYPES).join(", ")}.`
           );
         }
-        const stats = await (0, import_promises5.stat)(filePath);
+        const stats = await (0, import_promises10.stat)(filePath);
         if (stats.size > MRRLIN_ARTIFACT_FILE_MAX_BYTES) {
           throw new McpToolCodedError(
             "ARTIFACT_FILE_TOO_LARGE",
@@ -61611,14 +62586,14 @@ function createMrrlinTools(options) {
             "File is empty (0 bytes); write content before uploading."
           );
         }
-        const bytes3 = new Uint8Array(await (0, import_promises5.readFile)(filePath));
+        const bytes3 = new Uint8Array(await (0, import_promises10.readFile)(filePath));
         if (bytes3.byteLength > MRRLIN_ARTIFACT_FILE_MAX_BYTES) {
           throw new McpToolCodedError(
             "ARTIFACT_FILE_TOO_LARGE",
             "Artifact exceeds 5MB; split or summarize instead."
           );
         }
-        const filename = import_node_path22.default.basename(filePath);
+        const filename = import_node_path26.default.basename(filePath);
         return uploadArtifactBytes(c, {
           bytes: bytes3,
           class: artifactClass,
@@ -61643,7 +62618,7 @@ function createMrrlinTools(options) {
             `Invalid filename '${filename}'; provide a bare filename with no path separators or '..'.`
           );
         }
-        const extension2 = import_node_path22.default.extname(filename).toLowerCase();
+        const extension2 = import_node_path26.default.extname(filename).toLowerCase();
         const contentType = ARTIFACT_EXTENSION_TYPES[extension2];
         if (!contentType) {
           throw new McpToolCodedError(
@@ -61710,7 +62685,7 @@ function createMrrlinTools(options) {
       "LOCAL_CHECKOUT_REGISTER_FAILED",
       "Unable to register local checkout.",
       async (_c, { projectSlug, path: checkoutPath, repo }) => {
-        const stateDir = process.env.CODEX_HOME ? import_node_path22.default.join(process.env.CODEX_HOME, "mrrlin", "director-bridge") : import_node_path22.default.join(import_node_os12.default.homedir(), ".mrrlin", "director-bridge");
+        const stateDir = process.env.CODEX_HOME ? import_node_path26.default.join(process.env.CODEX_HOME, "mrrlin", "director-bridge") : import_node_path26.default.join(import_node_os12.default.homedir(), ".mrrlin", "director-bridge");
         const registry3 = new CheckoutRegistry(stateDir);
         const result = registerCheckout(registry3, { projectSlug, path: checkoutPath, repo }, import_node_os12.default.hostname());
         if (!result.ok) {
@@ -61950,7 +62925,7 @@ function runSetCredential(args) {
 
 // src/install-service.ts
 var import_node_os13 = __toESM(require("node:os"), 1);
-var import_node_path23 = __toESM(require("node:path"), 1);
+var import_node_path27 = __toESM(require("node:path"), 1);
 function installService(deps) {
   if (!deps.hasSecret()) {
     deps.log("No agent credential found. Issue one in Settings, then run: mrrlin-mcp set-credential '<secret>'.");
@@ -61972,7 +62947,7 @@ function installService(deps) {
     return { ok: false };
   }
   const resolvedBins = bins.filter((b) => b !== null);
-  const pathEnv = Array.from(new Set(resolvedBins.map((b) => import_node_path23.default.dirname(b)))).join(":");
+  const pathEnv = Array.from(new Set(resolvedBins.map((b) => import_node_path27.default.dirname(b)))).join(":");
   const apiBaseUrl = deps.env.MRRLIN_API_BASE_URL?.trim() || void 0;
   const staging = deps.env.MRRLIN_STAGING === "1" || !apiBaseUrl && bridgeUrlImpliesStaging(deps.env.MRRLIN_BRIDGE_URL);
   const text = renderEcosystemConfig({
@@ -61983,7 +62958,7 @@ function installService(deps) {
     staging,
     apiBaseUrl
   });
-  const ecoPath = import_node_path23.default.join(home, ".mrrlin", "ecosystem.config.cjs");
+  const ecoPath = import_node_path27.default.join(home, ".mrrlin", "ecosystem.config.cjs");
   deps.writeFile(ecoPath, text);
   const start = deps.runPm2(["startOrReload", ecoPath]);
   if (start.code !== 0) {
@@ -62013,18 +62988,18 @@ function uninstallService(deps) {
 }
 
 // src/uninstall-codex.ts
-var import_promises6 = __toESM(require("node:fs/promises"), 1);
+var import_promises11 = __toESM(require("node:fs/promises"), 1);
 var import_node_os14 = __toESM(require("node:os"), 1);
-var import_node_path24 = __toESM(require("node:path"), 1);
+var import_node_path28 = __toESM(require("node:path"), 1);
 var toml3 = __toESM(require_toml(), 1);
 function resolveCodexHome3(options) {
   if (options.codexHome) return options.codexHome;
   if (process.env.CODEX_HOME) return process.env.CODEX_HOME;
-  return import_node_path24.default.join(options.homeDir ?? import_node_os14.default.homedir(), ".codex");
+  return import_node_path28.default.join(options.homeDir ?? import_node_os14.default.homedir(), ".codex");
 }
 async function pathExists4(target) {
   try {
-    await import_promises6.default.access(target);
+    await import_promises11.default.access(target);
     return true;
   } catch {
     return false;
@@ -62033,13 +63008,13 @@ async function pathExists4(target) {
 var MRRLIN_BLOCK_RE = /(^|\n)\[mcp_servers\.(?:mrrlin(?:-browser)?|external-agents)(?:\]|\.[^\]\n]*\])[\s\S]*?(?=\n\[|$)/g;
 async function uninstallCodex(options = {}) {
   const codexHome = resolveCodexHome3(options);
-  const configPath = import_node_path24.default.join(codexHome, "config.toml");
+  const configPath = import_node_path28.default.join(codexHome, "config.toml");
   const removePrompts = async () => uninstallPrompts(codexHome, options.promptNames ?? []);
   if (!await pathExists4(configPath)) {
     return { action: "missing", configPath, prompts: await removePrompts() };
   }
-  const realPath = await import_promises6.default.realpath(configPath).catch(() => configPath);
-  const existing = await import_promises6.default.readFile(realPath, "utf8");
+  const realPath = await import_promises11.default.realpath(configPath).catch(() => configPath);
+  const existing = await import_promises11.default.readFile(realPath, "utf8");
   let parsed = null;
   try {
     parsed = toml3.parse(existing);
@@ -62056,17 +63031,17 @@ async function uninstallCodex(options = {}) {
     return { action: "noop", configPath: realPath, prompts: await removePrompts() };
   }
   const stripped = existing.replace(MRRLIN_BLOCK_RE, (match) => match.startsWith("\n") ? "\n" : "").replace(/\n{3,}/g, "\n\n").replace(/^\n+/, "");
-  await import_promises6.default.writeFile(realPath, stripped, { mode: 384 });
+  await import_promises11.default.writeFile(realPath, stripped, { mode: 384 });
   return { action: "removed", configPath: realPath, prompts: await removePrompts() };
 }
 async function uninstallPrompts(codexHome, names) {
   if (names.length === 0) return [];
-  const promptsDir = import_node_path24.default.join(codexHome, "prompts");
+  const promptsDir = import_node_path28.default.join(codexHome, "prompts");
   const out = [];
   for (const name of names) {
-    const promptPath = import_node_path24.default.join(promptsDir, `${name}.md`);
+    const promptPath = import_node_path28.default.join(promptsDir, `${name}.md`);
     try {
-      await import_promises6.default.unlink(promptPath);
+      await import_promises11.default.unlink(promptPath);
       out.push({ name, action: "removed", promptPath });
     } catch (error51) {
       const code = error51?.code;
@@ -62080,6 +63055,129 @@ async function uninstallPrompts(codexHome, names) {
   return out;
 }
 
+// src/extract/command.ts
+var import_promises12 = require("node:fs/promises");
+var import_node_path29 = require("node:path");
+function parseArgs(args) {
+  const map2 = /* @__PURE__ */ new Map();
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (arg?.startsWith("--")) {
+      const key = arg.slice(2);
+      const next = args[i + 1];
+      if (next && !next.startsWith("--")) {
+        map2.set(key, next);
+        i++;
+      }
+    }
+  }
+  return map2;
+}
+function isRecord4(v) {
+  return v !== null && typeof v === "object";
+}
+async function runExtract(args, deps) {
+  const flags = parseArgs(args);
+  const sessionId = flags.get("session");
+  const projectSlug = flags.get("project");
+  const outPath = flags.get("out") ?? null;
+  if (!sessionId || !projectSlug) {
+    const missing = [];
+    if (!sessionId) missing.push("--session");
+    if (!projectSlug) missing.push("--project");
+    const usage = `Usage: mrrlin-mcp extract --session <directorSessionId> --project <projectSlug> [--out <path>]
+Missing required flag(s): ${missing.join(
+      ", "
+    )}`;
+    return { ok: false, message: usage, deliveredArtifactId: null };
+  }
+  const days = await findSessionDays(deps.stateDir, sessionId);
+  const matchingLines = [];
+  for (const day of days) {
+    const logPath = (0, import_node_path29.join)(deps.stateDir, "logs", `bridge-${day}.jsonl`);
+    let raw;
+    try {
+      raw = await (0, import_promises12.readFile)(logPath, "utf8");
+    } catch {
+      continue;
+    }
+    const lines2 = raw.split("\n");
+    for (const line of lines2) {
+      if (!line.trim()) continue;
+      let parsed;
+      try {
+        parsed = JSON.parse(line);
+      } catch {
+        continue;
+      }
+      const payload = isRecord4(parsed) ? parsed.payload : void 0;
+      if (isRecord4(payload) && payload.directorSessionId === sessionId) {
+        matchingLines.push(line);
+      }
+    }
+  }
+  const maxBytes = deps.maxBytes ?? MRRLIN_ARTIFACT_FILE_MAX_BYTES;
+  const cappedLines = [];
+  let totalBytes = 0;
+  for (const rawLine of matchingLines) {
+    const redacted = redact(rawLine);
+    const lineWithNewline = redacted + "\n";
+    const prospective = totalBytes + Buffer.byteLength(lineWithNewline, "utf8");
+    if (prospective > maxBytes) {
+      break;
+    }
+    cappedLines.push(redacted);
+    totalBytes = prospective;
+  }
+  const outputText = cappedLines.join("\n");
+  if (outPath) {
+    await (0, import_promises12.writeFile)(outPath, outputText, "utf8");
+    return {
+      ok: true,
+      message: `Wrote extract to ${outPath}`,
+      deliveredArtifactId: null
+    };
+  }
+  const firstDay = days[0] ?? "unknown";
+  const lastDay = days[days.length - 1] ?? "unknown";
+  const filename = `extract-${sessionId}-${firstDay}-${lastDay}.txt`;
+  const sizeBytes = Buffer.byteLength(outputText, "utf8");
+  const created = await deps.client.createArtifactFile(projectSlug, {
+    class: "temp",
+    contentType: "text/plain",
+    filename,
+    sizeBytes
+  });
+  if (created.upload.kind === "presigned-post") {
+    const form = new FormData();
+    for (const [k, v] of Object.entries(created.upload.fields)) {
+      form.append(k, v);
+    }
+    const blob = new Blob([outputText], { type: "text/plain" });
+    form.append("file", blob, filename);
+    const resp = await fetch(created.upload.url, { method: "POST", body: form });
+    if (!resp.ok) {
+      throw new Error(`Presigned POST failed with ${resp.status}`);
+    }
+  } else {
+    await deps.client.uploadArtifactFileContent(
+      projectSlug,
+      created.artifact.id,
+      new TextEncoder().encode(outputText),
+      "text/plain"
+    );
+  }
+  const completed = await deps.client.completeArtifactFile(
+    projectSlug,
+    created.artifact.id
+  );
+  return {
+    ok: true,
+    message: `Uploaded artifact ${completed.id} (${created.stableUrl})`,
+    deliveredArtifactId: completed.id
+  };
+}
+
 // src/bin.ts
 function pm2Runner(args) {
   const r = (0, import_node_child_process18.spawnSync)("pm2", args, { encoding: "utf8" });
@@ -62244,6 +63342,11 @@ Usage:
                                 support/debug packaging flow:
                                   printf %s "$HINT" | mrrlin-mcp redact
 
+  mrrlin-mcp extract            Pull a director session's raw bridge log lines,
+                                scrub them, cap the output size, and either write
+                                them locally (with --out) or upload as a temporary
+                                artifact file.
+
   mrrlin-mcp --help             Show this help.
 
 Operator notes:
@@ -62333,8 +63436,8 @@ async function main() {
         }
       }
       try {
-        const codexHome = process.env.CODEX_HOME ?? import_node_path26.default.join(process.env.HOME ?? (0, import_node_os15.homedir)(), ".codex");
-        (0, import_node_fs17.rmSync)(import_node_path26.default.join(codexHome, "prompts", "report-issue.md"), { force: true });
+        const codexHome = process.env.CODEX_HOME ?? import_node_path31.default.join(process.env.HOME ?? (0, import_node_os15.homedir)(), ".codex");
+        (0, import_node_fs17.rmSync)(import_node_path31.default.join(codexHome, "prompts", "report-issue.md"), { force: true });
       } catch {
       }
       const claudeResult = await installClaude({ binPath, force, serveEnv });
@@ -62369,6 +63472,16 @@ async function main() {
       process.stdout.write(redact(input));
       return;
     }
+    case "extract": {
+      const stateDir = readStateDir();
+      const apiBaseUrl = readConfiguredApiBaseUrl();
+      const client = createMrrlinClient(withAuth({ apiBaseUrl }));
+      const result = await runExtract(rest, { stateDir, client });
+      process.stderr.write(`${result.message}
+`);
+      if (!result.ok) process.exit(2);
+      return;
+    }
     case "director-bridge": {
       await startDirectorBridge();
       return;
@@ -62385,7 +63498,7 @@ async function main() {
         env: process.env,
         cwd: process.cwd(),
         writeFile: (p, c) => {
-          (0, import_node_fs17.mkdirSync)(import_node_path26.default.dirname(p), { recursive: true, mode: 448 });
+          (0, import_node_fs17.mkdirSync)(import_node_path31.default.dirname(p), { recursive: true, mode: 448 });
           (0, import_node_fs17.writeFileSync)(p, c, { mode: 384 });
         },
         runPm2: pm2Runner,
@@ -62410,7 +63523,7 @@ async function main() {
         purgeSecret: purge,
         secretPath: agentCredentialPath(),
         tokenPath: operatorTokenPath(),
-        ecoPath: import_node_path26.default.join(process.env.HOME ?? (0, import_node_os15.homedir)(), ".mrrlin", "ecosystem.config.cjs"),
+        ecoPath: import_node_path31.default.join(process.env.HOME ?? (0, import_node_os15.homedir)(), ".mrrlin", "ecosystem.config.cjs"),
         log: (m) => process.stderr.write(`[mrrlin-mcp uninstall-service] ${m}
 `)
       });
@@ -62431,7 +63544,7 @@ async function main() {
         purgeSecret: true,
         secretPath: agentCredentialPath(),
         tokenPath: operatorTokenPath(),
-        ecoPath: import_node_path26.default.join(home, ".mrrlin", "ecosystem.config.cjs"),
+        ecoPath: import_node_path31.default.join(home, ".mrrlin", "ecosystem.config.cjs"),
         log
       });
       let codexOk = true;
@@ -62451,7 +63564,7 @@ async function main() {
         log(`codex config NOT modified: ${error51 instanceof Error ? error51.message : String(error51)}`);
       }
       try {
-        (0, import_node_fs17.rmSync)(import_node_path26.default.join(home, ".mrrlin"), { recursive: true, force: true });
+        (0, import_node_fs17.rmSync)(import_node_path31.default.join(home, ".mrrlin"), { recursive: true, force: true });
       } catch {
       }
       log("removed ~/.mrrlin");
@@ -62492,7 +63605,7 @@ ${HELP_TEXT}`);
   }
 }
 function resolveSelfBinPath() {
-  return import_node_path25.default.resolve(process.argv[1] ?? process.execPath);
+  return import_node_path30.default.resolve(process.argv[1] ?? process.execPath);
 }
 main().catch((error51) => {
   process.stderr.write(`mrrlin-mcp fatal error: ${error51 instanceof Error ? error51.message : String(error51)}