@mrrlin-dev/mcp 0.4.61 → 0.4.63

package/dist/bin.cjs

@@ -20645,7 +20645,7 @@ var require_dist = __commonJS({
 
 // src/bin.ts
 var import_node_path37 = __toESM(require("node:path"), 1);
-var import_node_child_process18 = require("node:child_process");
+var import_node_child_process19 = require("node:child_process");
 var import_node_fs24 = require("node:fs");
 var import_node_os19 = require("node:os");
 var import_node_path38 = __toESM(require("node:path"), 1);
@@ -21638,7 +21638,7 @@ var import_node_fs22 = __toESM(require("node:fs"), 1);
 var import_node_http = __toESM(require("node:http"), 1);
 var import_node_os15 = __toESM(require("node:os"), 1);
 var import_node_path30 = __toESM(require("node:path"), 1);
-var import_node_child_process15 = require("node:child_process");
+var import_node_child_process16 = require("node:child_process");
 var import_node_crypto11 = __toESM(require("node:crypto"), 1);
 
 // src/turn-replay-buffer.ts
@@ -42256,17 +42256,21 @@ function createTurnLock() {
 }
 
 // src/self-update.ts
-var import_node_child_process7 = require("node:child_process");
+var import_node_child_process8 = require("node:child_process");
 var import_node_crypto2 = require("node:crypto");
 var import_node_fs4 = require("node:fs");
 var import_node_path7 = __toESM(require("node:path"), 1);
 var import_semver3 = __toESM(require_semver2(), 1);
 
 // src/codex-auth-preflight.ts
+var import_node_child_process7 = require("node:child_process");
 var import_node_fs3 = require("node:fs");
 var import_node_os6 = __toESM(require("node:os"), 1);
 var import_node_path6 = __toESM(require("node:path"), 1);
 var DEFAULT_CODEX_AUTH_MIN_TTL_SECONDS = 15 * 60;
+var DEFAULT_CODEX_AUTH_SMOKE_TIMEOUT_MS = 2e4;
+var DEFAULT_CODEX_AUTH_SMOKE_MODEL = "gpt-5.4-mini";
+var CODEX_AUTH_SMOKE_PROMPT = "Reply with exactly: OK";
 function positiveInt(raw) {
   if (!raw) return null;
   const parsed = Number.parseInt(raw, 10);
@@ -42275,6 +42279,9 @@ function positiveInt(raw) {
 function codexAuthMinTtlSeconds(env = process.env) {
   return positiveInt(env.MRRLIN_DIRECTOR_BRIDGE_UPDATE_AUTH_MIN_TTL_SECONDS) ?? DEFAULT_CODEX_AUTH_MIN_TTL_SECONDS;
 }
+function codexAuthSmokeTimeoutMs(env = process.env) {
+  return positiveInt(env.MRRLIN_DIRECTOR_BRIDGE_UPDATE_AUTH_SMOKE_TIMEOUT_MS) ?? DEFAULT_CODEX_AUTH_SMOKE_TIMEOUT_MS;
+}
 function resolveCodexAuthPath(opts = {}) {
   const env = opts.env ?? process.env;
   const codexHome = env.CODEX_HOME?.trim();
@@ -42290,6 +42297,97 @@ function decodeJwtExpMs(token) {
     return null;
   }
 }
+function shellQuote(value) {
+  if (/^[A-Za-z0-9_./:@%+=,-]+$/.test(value)) return value;
+  return `'${value.replaceAll("'", "'\\''")}'`;
+}
+function commandForSmoke(executable, model) {
+  return [
+    executable,
+    "exec",
+    "--sandbox",
+    "read-only",
+    "--skip-git-repo-check",
+    "--model",
+    model,
+    CODEX_AUTH_SMOKE_PROMPT
+  ].map(shellQuote).join(" ");
+}
+function codexAuthRefreshSmokeCommandForBridgeUpdate(opts = {}) {
+  const env = { ...process.env, ...opts.env ?? {} };
+  const configuredModel = opts.model ?? env.MRRLIN_DIRECTOR_BRIDGE_UPDATE_AUTH_SMOKE_MODEL?.trim();
+  const model = configuredModel || DEFAULT_CODEX_AUTH_SMOKE_MODEL;
+  const configuredExecutable = opts.codexExecutable ?? env.MRRLIN_DIRECTOR_BRIDGE_CODEX_BIN?.trim();
+  const executable = configuredExecutable || "codex";
+  return commandForSmoke(executable, model);
+}
+function errorField(err, key) {
+  const value = typeof err === "object" && err !== null && key in err ? err[key] : "";
+  return Buffer.isBuffer(value) ? value.toString("utf8") : typeof value === "string" ? value : "";
+}
+function errorStatus(err) {
+  if (typeof err !== "object" || err === null) return null;
+  const status = "status" in err ? err.status : void 0;
+  const signal = "signal" in err ? err.signal : void 0;
+  if (typeof status === "number") return `exit ${status}`;
+  if (typeof signal === "string") return `signal ${signal}`;
+  return null;
+}
+function isAuthLikeSmokeFailure(raw) {
+  return /\baccess token\b|\bauth(?:entication)?\b|\binvalid[_ -]refresh[_ -]token\b|\brefresh token\b|\bsign in again\b|\blog out and sign in\b|\bnot logged in\b|\bunauthori[sz]ed\b/i.test(raw);
+}
+function runCodexAuthRefreshSmokeForBridgeUpdate(opts = {}) {
+  const env = { ...process.env, ...opts.env ?? {} };
+  const configuredModel = opts.model ?? env.MRRLIN_DIRECTOR_BRIDGE_UPDATE_AUTH_SMOKE_MODEL?.trim();
+  const model = configuredModel || DEFAULT_CODEX_AUTH_SMOKE_MODEL;
+  const configuredExecutable = opts.codexExecutable ?? env.MRRLIN_DIRECTOR_BRIDGE_CODEX_BIN?.trim();
+  const executable = configuredExecutable || "codex";
+  const timeoutMs = opts.timeoutMs ?? codexAuthSmokeTimeoutMs(env);
+  const cwd = opts.cwd ?? import_node_os6.default.tmpdir();
+  const args = [
+    "exec",
+    "--sandbox",
+    "read-only",
+    "--skip-git-repo-check",
+    "--model",
+    model,
+    CODEX_AUTH_SMOKE_PROMPT
+  ];
+  const command = commandForSmoke(executable, model);
+  const execFileSync5 = opts.execFileSyncImpl ?? import_node_child_process7.execFileSync;
+  try {
+    execFileSync5(executable, args, {
+      cwd,
+      env,
+      encoding: "utf8",
+      timeout: timeoutMs,
+      stdio: ["ignore", "pipe", "pipe"]
+    });
+    return {
+      ok: true,
+      status: "ok",
+      command,
+      timeoutMs,
+      authLikely: false,
+      detail: "Codex CLI smoke succeeded; any needed token refresh completed before the bridge update offer."
+    };
+  } catch (err) {
+    const raw = `${err instanceof Error ? err.message : String(err)}
+${errorField(err, "stdout")}
+${errorField(err, "stderr")}`;
+    const timedOut = /timed out|ETIMEDOUT/i.test(raw) || errorStatus(err) === "signal SIGTERM";
+    const authLikely = isAuthLikeSmokeFailure(raw);
+    const statusText = errorStatus(err);
+    return {
+      ok: false,
+      status: timedOut ? "timed_out" : "failed",
+      command,
+      timeoutMs,
+      authLikely,
+      detail: authLikely ? "Codex CLI smoke failed with an authentication or token-refresh error." : `Codex CLI smoke failed${statusText ? ` (${statusText})` : ""}; update readiness could not be verified.`
+    };
+  }
+}
 function inspectCodexAuthForBridgeUpdate(opts = {}) {
   const env = opts.env ?? process.env;
   const nowMs = opts.nowMs ?? Date.now();
@@ -42311,6 +42409,7 @@ function inspectCodexAuthForBridgeUpdate(opts = {}) {
       tokenKinds: [],
       expiresAtMs: null,
       expiresInSeconds: null,
+      requiresSmoke: true,
       detail: status === "missing" ? "Codex CLI auth file is missing." : "Codex CLI auth file could not be read."
     };
   }
@@ -42327,6 +42426,7 @@ function inspectCodexAuthForBridgeUpdate(opts = {}) {
       tokenKinds: [],
       expiresAtMs: null,
       expiresInSeconds: null,
+      requiresSmoke: true,
       detail: "Codex CLI auth file is not valid JSON."
     };
   }
@@ -42353,6 +42453,7 @@ function inspectCodexAuthForBridgeUpdate(opts = {}) {
       tokenKinds: [],
       expiresAtMs: null,
       expiresInSeconds: null,
+      requiresSmoke: true,
       detail: "Codex CLI auth file has no access_token or id_token JWT expiry to verify."
     };
   }
@@ -42368,6 +42469,7 @@ function inspectCodexAuthForBridgeUpdate(opts = {}) {
       tokenKinds,
       expiresAtMs: earliest.expMs,
       expiresInSeconds,
+      requiresSmoke: true,
       detail: `Codex CLI ${earliest.kind} JWT is expired.`
     };
   }
@@ -42381,6 +42483,7 @@ function inspectCodexAuthForBridgeUpdate(opts = {}) {
       tokenKinds,
       expiresAtMs: earliest.expMs,
       expiresInSeconds,
+      requiresSmoke: true,
       detail: `Codex CLI ${earliest.kind} JWT expires too soon for a bridge update restart.`
     };
   }
@@ -42393,6 +42496,7 @@ function inspectCodexAuthForBridgeUpdate(opts = {}) {
     tokenKinds,
     expiresAtMs: earliest.expMs,
     expiresInSeconds,
+    requiresSmoke: false,
     detail: "Codex CLI JWT expiry is far enough in the future for a bridge update restart."
   };
 }
@@ -42406,7 +42510,7 @@ function resolveBinPath(opts) {
   }
   const whichSync = opts.whichSync ?? ((name) => {
     try {
-      return (0, import_node_child_process7.execFileSync)("which", [name], { encoding: "utf8", timeout: 3e3 }).trim() || null;
+      return (0, import_node_child_process8.execFileSync)("which", [name], { encoding: "utf8", timeout: 3e3 }).trim() || null;
     } catch {
       return null;
     }
@@ -42468,6 +42572,7 @@ function startSelfUpdate(deps) {
   const codexAuthPreflight = deps.codexAuthPreflight ?? (() => inspectCodexAuthForBridgeUpdate({
     nowMs: nowFn()
   }));
+  const codexAuthSmoke = deps.codexAuthSmoke ?? (() => runCodexAuthRefreshSmokeForBridgeUpdate());
   const disabled = isDisabled();
   let drainOnQuiet = false;
   let drainSource = null;
@@ -42475,44 +42580,71 @@ function startSelfUpdate(deps) {
   let latestVersion = null;
   let lastUpdateMentionAt = null;
   let lastAuthBlockMentionAt = null;
-  function blockedAuthOffer(auth2) {
+  function blockedAuthOffer(auth2, smoke) {
     const expires = auth2.expiresInSeconds === null ? "unknown" : `${auth2.expiresInSeconds}s`;
     return `${SELF_UPDATE_AUTH_PREFLIGHT_OFFER_PREFIX} An update for @mrrlin-dev/mcp is available: ${pkgVersion} -> ${latestVersion}.
 
-Do NOT install it yet. The local Codex CLI auth that the restarted bridge will use is not update-safe:
+Do NOT install it yet. The bridge already tried to verify the local Codex CLI by running a headless smoke command, which gives Codex a chance to refresh an expired access token with its stored refresh token. That smoke did not pass, so the restarted bridge may not be able to authenticate.
+
+Static auth read:
 - status: ${auth2.status}
 - auth file: ${auth2.authPath}
 - nearest JWT expiry: ${expires}
 - detail: ${auth2.detail}
 
-Tell the operator, in their language, that the bridge update is ready but the Codex CLI session should be refreshed first because the update restarts the bridge and starts a fresh headless Codex process.
+Smoke check:
+- status: ${smoke.status}
+- command: ${smoke.command}
+- detail: ${smoke.detail}
 
-Ask the operator to run \`codex login\` as the re-auth action only. Do not present \`codex login\` as a readiness check; it opens the login flow even when auth is already fine.
+Tell the operator, in their language, that the bridge update is ready but the Codex CLI must pass the smoke check first because the update restarts the bridge and starts a fresh headless Codex process.
 
-After the operator re-authenticates, ask them to verify the CLI with:
-\`codex exec --model gpt-5.4-mini 'Reply with exactly: OK'\`
+If the smoke failed with an authentication or token-refresh error, ask the operator to run \`codex login\` as the re-auth action only. Do not present \`codex login\` as a readiness check; it opens the login flow even when auth is already fine.
 
-Once that returns OK, they can ask again and you may offer the normal update command \`npm install -g @mrrlin-dev/mcp@latest\`.`;
+If the smoke failed for another reason, ask the operator to fix that Codex CLI error first instead of logging in blindly.
+
+The readiness check is the smoke command returning OK. Once it does, they can ask again and you may offer the normal update command \`npm install -g @mrrlin-dev/mcp@latest\`.`;
   }
   function maybeUpdateOffer() {
     if (disabled) return null;
     if (latestVersion === null) return null;
     if (!import_semver3.default.gt(latestVersion, pkgVersion)) return null;
+    if (lastUpdateMentionAt !== null && nowFn() - lastUpdateMentionAt < cooldownMs) return null;
     const auth2 = codexAuthPreflight();
     if (!auth2.ok) {
-      if (lastAuthBlockMentionAt !== null && nowFn() - lastAuthBlockMentionAt < authBlockCooldownMs) return null;
-      lastAuthBlockMentionAt = nowFn();
-      log("warn", "bridge.self_update.auth_preflight_blocked", {
-        version: pkgVersion,
-        latestVersion,
-        status: auth2.status,
-        authPath: auth2.authPath,
-        expiresInSeconds: auth2.expiresInSeconds,
-        minTtlSeconds: auth2.minTtlSeconds
-      });
-      return blockedAuthOffer(auth2);
+      const smoke = auth2.requiresSmoke ? codexAuthSmoke() : null;
+      if (smoke?.ok) {
+        log("info", "bridge.self_update.auth_preflight_smoke_passed", {
+          version: pkgVersion,
+          latestVersion,
+          status: auth2.status,
+          authPath: auth2.authPath,
+          expiresInSeconds: auth2.expiresInSeconds,
+          minTtlSeconds: auth2.minTtlSeconds
+        });
+      } else {
+        if (lastAuthBlockMentionAt !== null && nowFn() - lastAuthBlockMentionAt < authBlockCooldownMs) return null;
+        lastAuthBlockMentionAt = nowFn();
+        log("warn", "bridge.self_update.auth_preflight_blocked", {
+          version: pkgVersion,
+          latestVersion,
+          status: auth2.status,
+          authPath: auth2.authPath,
+          expiresInSeconds: auth2.expiresInSeconds,
+          minTtlSeconds: auth2.minTtlSeconds,
+          smokeStatus: smoke?.status ?? null,
+          smokeAuthLikely: smoke?.authLikely ?? null
+        });
+        return blockedAuthOffer(auth2, smoke ?? {
+          ok: false,
+          status: "failed",
+          command: codexAuthRefreshSmokeCommandForBridgeUpdate(),
+          timeoutMs: 0,
+          authLikely: true,
+          detail: "Codex CLI smoke was not available."
+        });
+      }
     }
-    if (lastUpdateMentionAt !== null && nowFn() - lastUpdateMentionAt < cooldownMs) return null;
     lastUpdateMentionAt = nowFn();
     log("info", "bridge.self_update.hint_injected", {
       version: pkgVersion,
@@ -42709,7 +42841,7 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.4.61";
+var PKG_VERSION = "0.4.63";
 
 // src/api-base-url-migrate.ts
 var import_node_fs5 = __toESM(require("node:fs"), 1);
@@ -42743,6 +42875,8 @@ function renderEcosystemConfig(opts) {
   if (telemetryProject) env.MRRLIN_TELEMETRY_DEFAULT_PROJECT = telemetryProject;
   if (opts.user) env.USER = opts.user;
   if (opts.codexHome) env.CODEX_HOME = opts.codexHome;
+  const claudeConfigDir = opts.claudeConfigDir?.trim();
+  if (claudeConfigDir) env.CLAUDE_CONFIG_DIR = claudeConfigDir;
   const apiBaseUrl = opts.apiBaseUrl ? retargetRetiredApiBaseUrl(opts.apiBaseUrl).baseUrl : void 0;
   if (apiBaseUrl && !isProductionApiBaseUrl(apiBaseUrl)) {
     env.MRRLIN_API_BASE_URL = apiBaseUrl;
@@ -44682,7 +44816,7 @@ function sterileCwd() {
 }
 
 // src/consensus/code-gate-git.ts
-var import_node_child_process8 = require("node:child_process");
+var import_node_child_process9 = require("node:child_process");
 var DIFF_MAX_BYTES = 2e5;
 var FASTGATE_OUTPUT_MAX_BYTES = 16e3;
 var GIT_TIMEOUT_MS = 6e4;
@@ -44698,7 +44832,7 @@ var defaultRunCmd = (cmd, args, opts) => new Promise((resolve) => {
   };
   let child;
   try {
-    child = (0, import_node_child_process8.spawn)(cmd, args, {
+    child = (0, import_node_child_process9.spawn)(cmd, args, {
       cwd: opts.cwd,
       env: process.env,
       shell: false,
@@ -45903,7 +46037,7 @@ async function collectAgentPoolSnapshot(deps) {
 }
 
 // src/external-agents-spawn.ts
-var import_node_child_process9 = require("node:child_process");
+var import_node_child_process10 = require("node:child_process");
 
 // src/external-agents-bin.ts
 function resolveExternalAgentsCliInvocation(override) {
@@ -45949,7 +46083,7 @@ function runExternalAgentsCli(args, opts) {
     };
     let spawned;
     try {
-      spawned = (0, import_node_child_process9.spawn)(command, [...prefixArgs, ...args], { stdio: stdioConfig });
+      spawned = (0, import_node_child_process10.spawn)(command, [...prefixArgs, ...args], { stdio: stdioConfig });
     } catch {
       done(1);
       return;
@@ -46061,14 +46195,14 @@ function startAgentPoolLoop(deps) {
 }
 
 // src/provider-readiness-loop.ts
-var import_node_child_process10 = require("node:child_process");
+var import_node_child_process11 = require("node:child_process");
 var DEFAULT_INTERVAL_MS3 = 6e4;
 function providerReadinessLoopDisabled(env = process.env) {
   return env["MRRLIN_BRIDGE_PROVIDER_READINESS_DISABLE"] === "1";
 }
 function defaultRunnerFor(command) {
   return (args) => {
-    const r = (0, import_node_child_process10.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3 });
+    const r = (0, import_node_child_process11.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3 });
     return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
   };
 }
@@ -46119,7 +46253,7 @@ function setSelectedProvider(value) {
 }
 
 // src/execution-consumer.ts
-var import_node_child_process12 = require("node:child_process");
+var import_node_child_process13 = require("node:child_process");
 var import_node_crypto7 = __toESM(require("node:crypto"), 1);
 var import_node_path20 = __toESM(require("node:path"), 1);
 var import_node_util = require("node:util");
@@ -47416,7 +47550,7 @@ async function awaitTurnWithDeadline(opts) {
 }
 
 // src/worktree.ts
-var import_node_child_process11 = require("node:child_process");
+var import_node_child_process12 = require("node:child_process");
 var import_node_fs12 = require("node:fs");
 var import_node_os9 = require("node:os");
 var import_node_path19 = require("node:path");
@@ -47444,9 +47578,9 @@ async function withCheckoutLock(locksDir, slug, fn) {
 function worktreeBranch(runId) {
   return `mrrlin/run-${runId}`;
 }
-var defaultGitExec = (args, env) => (0, import_node_child_process11.execFileSync)("git", args, { encoding: "utf8", timeout: 3e4, env });
+var defaultGitExec = (args, env) => (0, import_node_child_process12.execFileSync)("git", args, { encoding: "utf8", timeout: 3e4, env });
 function git(checkout, args) {
-  return (0, import_node_child_process11.execFileSync)("git", ["-C", checkout, ...args], {
+  return (0, import_node_child_process12.execFileSync)("git", ["-C", checkout, ...args], {
     encoding: "utf8",
     timeout: 3e4,
     env: { ...process.env, GIT_TERMINAL_PROMPT: "0" }
@@ -48094,7 +48228,7 @@ var BLAST_RADIUS_FLOOR_PATTERNS = [/^supabase\/migrations\//, /^packages\/db\/sr
 function isBlastRadiusFloorPath(path25) {
   return BLAST_RADIUS_FLOOR_PATTERNS.some((re) => re.test(path25));
 }
-var execFileAsync = (0, import_node_util.promisify)(import_node_child_process12.execFile);
+var execFileAsync = (0, import_node_util.promisify)(import_node_child_process13.execFile);
 async function defaultListRunDiffPaths(opts) {
   const parse6 = (stdout) => stdout.split("\n").map((line) => line.trim()).filter((line) => line.length > 0);
   try {
@@ -54763,7 +54897,7 @@ var CheckoutRegistry = class {
 };
 
 // src/checkout-handlers.ts
-var import_node_child_process13 = require("node:child_process");
+var import_node_child_process14 = require("node:child_process");
 var import_node_fs19 = require("node:fs");
 
 // src/git-remote-match.ts
@@ -54809,7 +54943,7 @@ function validateCheckoutPath(checkoutPath, repo) {
   }
   let remoteUrl;
   try {
-    remoteUrl = (0, import_node_child_process13.execFileSync)("git", ["-C", resolvedPath, "remote", "get-url", "origin"], {
+    remoteUrl = (0, import_node_child_process14.execFileSync)("git", ["-C", resolvedPath, "remote", "get-url", "origin"], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
       timeout: 15e3,
@@ -54860,11 +54994,11 @@ function checkoutStateData(projectSlug, entry, machineLabel) {
 }
 
 // src/executor-server.ts
-var import_node_child_process14 = require("node:child_process");
+var import_node_child_process15 = require("node:child_process");
 function defaultReadinessRunner(provider) {
   const command = provider === "claude" ? "claude" : "codex";
   return (args) => {
-    const r = (0, import_node_child_process14.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3, shell: true });
+    const r = (0, import_node_child_process15.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3, shell: true });
     return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
   };
 }
@@ -56286,7 +56420,7 @@ function resolveDefaultBranch(checkoutPath) {
   if (!checkoutPath) return "main";
   const runGit = (args) => {
     try {
-      return (0, import_node_child_process15.execFileSync)("git", ["-C", checkoutPath, ...args], {
+      return (0, import_node_child_process16.execFileSync)("git", ["-C", checkoutPath, ...args], {
         encoding: "utf8",
         stdio: ["ignore", "pipe", "ignore"],
         timeout: 15e3,
@@ -57756,7 +57890,7 @@ function parseConfig() {
 }
 function scanForOtherBridges() {
   try {
-    const result = (0, import_node_child_process15.spawnSync)("pgrep", ["-f", "mrrlin-mcp director-bridge"], {
+    const result = (0, import_node_child_process16.spawnSync)("pgrep", ["-f", "mrrlin-mcp director-bridge"], {
       encoding: "utf8"
     });
     if (result.status !== 0) return [];
@@ -62447,10 +62581,10 @@ async function runCodeGate(_target, deps) {
 }
 
 // src/consensus/multi-llm-head.ts
-var import_node_child_process17 = require("node:child_process");
+var import_node_child_process18 = require("node:child_process");
 
 // src/consensus/provider-limits.ts
-var import_node_child_process16 = require("node:child_process");
+var import_node_child_process17 = require("node:child_process");
 var DEFAULT_STATUS_TIMEOUT_MS = 1e4;
 function errMessage4(err) {
   return err instanceof Error ? err.message : String(err);
@@ -62492,7 +62626,7 @@ function runExternalAgentsStatus(bin, args, timeoutMs, spawn4) {
   });
 }
 async function fetchRegistrySnapshot(deps) {
-  const spawn4 = deps?.spawn ?? import_node_child_process16.spawn;
+  const spawn4 = deps?.spawn ?? import_node_child_process17.spawn;
   const { command, prefixArgs } = resolveExternalAgentsCliInvocation(deps?.externalAgentsBin);
   const { stdout, error: error51 } = await runExternalAgentsStatus(
     command,
@@ -62580,7 +62714,7 @@ function runExternalAgents(bin, args, label, timeoutMs, spawn4) {
   });
 }
 async function pickPanel(input, deps) {
-  const spawn4 = deps?.spawn ?? import_node_child_process17.spawn;
+  const spawn4 = deps?.spawn ?? import_node_child_process18.spawn;
   const { command, prefixArgs } = resolveExternalAgentsCliInvocation(deps?.externalAgentsBin);
   const args = [
     "pick",
@@ -62627,7 +62761,7 @@ function parseDispatch(agentId, stdout, exitCode) {
   return { ok: true, text: parsed.text, usage };
 }
 async function dispatchHead(agentId, prompt, timeoutMs, deps) {
-  const spawn4 = deps?.spawn ?? import_node_child_process17.spawn;
+  const spawn4 = deps?.spawn ?? import_node_child_process18.spawn;
   const { command, prefixArgs } = resolveExternalAgentsCliInvocation(deps?.externalAgentsBin);
   const args = ["dispatch", agentId, "--json", prompt];
   const r = await runExternalAgents(command, [...prefixArgs, ...args], "dispatch", timeoutMs, spawn4);
@@ -68904,6 +69038,7 @@ function installService(deps) {
     home,
     user,
     codexHome: deps.env.CODEX_HOME?.trim() || void 0,
+    claudeConfigDir: deps.env.CLAUDE_CONFIG_DIR?.trim() || void 0,
     pathEnv,
     apiBaseUrl: apiTarget.apiBaseUrl,
     apiAllowRemote: apiTarget.apiAllowRemote,
@@ -69151,13 +69286,13 @@ Missing required flag(s): ${missing.join(
 
 // src/bin.ts
 function pm2Runner(args) {
-  const r = (0, import_node_child_process18.spawnSync)("pm2", args, { encoding: "utf8" });
+  const r = (0, import_node_child_process19.spawnSync)("pm2", args, { encoding: "utf8" });
   process.stderr.write(r.stdout ?? "");
   process.stderr.write(r.stderr ?? "");
   return { code: r.status ?? 1, stdout: r.stdout ?? "" };
 }
 function whichBin(bin) {
-  const r = (0, import_node_child_process18.spawnSync)("which", [bin], { encoding: "utf8" });
+  const r = (0, import_node_child_process19.spawnSync)("which", [bin], { encoding: "utf8" });
   const out = (r.stdout ?? "").trim();
   return r.status === 0 && out ? out.split("\n")[0] ?? null : null;
 }
@@ -69172,7 +69307,7 @@ function bootHookStatus() {
     { label: "com.PM2", plist: import_node_path38.default.join(agents, `pm2.${(0, import_node_os19.userInfo)().username}.plist`) }
   ];
   for (const candidate of candidates) {
-    const printed = (0, import_node_child_process18.spawnSync)("launchctl", ["print", `gui/${uid}/${candidate.label}`], { encoding: "utf8" });
+    const printed = (0, import_node_child_process19.spawnSync)("launchctl", ["print", `gui/${uid}/${candidate.label}`], { encoding: "utf8" });
     if (printed.status !== 0) continue;
     if (!(0, import_node_fs24.existsSync)(candidate.plist)) continue;
     const out = printed.stdout ?? "";
@@ -69394,7 +69529,7 @@ async function main() {
         );
       }
       const { command: command2, args, env } = browserServeArgs();
-      const r = (0, import_node_child_process18.spawnSync)(command2, args, { stdio: "inherit", env: { ...process.env, ...env } });
+      const r = (0, import_node_child_process19.spawnSync)(command2, args, { stdio: "inherit", env: { ...process.env, ...env } });
       process.exitCode = r.status ?? 1;
       return;
     }
@@ -69405,7 +69540,7 @@ async function main() {
     }
     case "external-agents-serve": {
       const { command: command2, args } = externalAgentsServeArgs();
-      const r = (0, import_node_child_process18.spawnSync)(command2, args, { stdio: "inherit", env: process.env });
+      const r = (0, import_node_child_process19.spawnSync)(command2, args, { stdio: "inherit", env: process.env });
       process.exitCode = r.status ?? 1;
       return;
     }
@@ -69473,7 +69608,7 @@ async function main() {
         );
       }
       const realProviderRunner = (command2) => (args) => {
-        const r = (0, import_node_child_process18.spawnSync)(command2, args, { encoding: "utf8", timeout: 8e3 });
+        const r = (0, import_node_child_process19.spawnSync)(command2, args, { encoding: "utf8", timeout: 8e3 });
         return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
       };
       for (const provider of ["codex", "claude"]) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrrlin-dev/mcp",
-  "version": "0.4.61",
+  "version": "0.4.63",
   "type": "module",
   "bin": {
     "mrrlin-mcp": "dist/bin.cjs"
@@ -22,8 +22,8 @@
     "esbuild": "^0.24.0",
     "tsx": "^4.22.3",
     "@mrrlin/client": "0.0.0",
-    "@mrrlin/agent-client": "0.0.0",
     "@mrrlin/director-e2e": "0.0.0",
+    "@mrrlin/agent-client": "0.0.0",
     "@mrrlin/schemas": "0.0.0",
     "@mrrlin/tsconfig": "0.0.0",
     "@mrrlin/wiki": "0.0.0"