@mrrlin-dev/mcp 0.4.64 → 0.4.66

package/dist/bin.cjs

@@ -21566,6 +21566,37 @@ function isExternalAgentsWrapper(table) {
   return false;
 }
 async function verifyProviderReadiness(provider, run3, opts = {}) {
+  if (provider === "agy") {
+    let cliResult2;
+    try {
+      cliResult2 = run3(["--version"]);
+      if (cliResult2.status === 0) {
+        return {
+          ready: true,
+          checks: { cli: true, version: true, auth: false, mcpReachable: false },
+          details: []
+        };
+      } else if (cliResult2.status === null) {
+        return {
+          ready: false,
+          checks: { cli: false, version: false, auth: false, mcpReachable: false },
+          details: ["cli: `agy` binary not found on PATH"]
+        };
+      } else {
+        return {
+          ready: false,
+          checks: { cli: true, version: false, auth: false, mcpReachable: false },
+          details: [`cli: \`agy --version\` exited with code ${cliResult2.status}`]
+        };
+      }
+    } catch (_e) {
+      return {
+        ready: false,
+        checks: { cli: false, version: false, auth: false, mcpReachable: false },
+        details: ["cli: `agy` binary not found on PATH"]
+      };
+    }
+  }
   const checks = { cli: false, version: false, auth: false, mcpReachable: false };
   const details = [];
   let cliResult;
@@ -37215,7 +37246,7 @@ var mrrlinOperatorSettingsSchema = external_exports.object({
   // claude-director-and-runner design.md D4/D6: the operator's one selected agent-provider seat,
   // governing Director chat, the execution runner, and consensus/arbiter reviewer exclusion alike.
   // Not null, defaults to 'codex' at the DB layer, so every row already has a real value.
-  agentProvider: external_exports.enum(["codex", "claude"]).default("codex"),
+  agentProvider: external_exports.enum(["codex", "claude", "agy"]).default("codex"),
   createdAt: external_exports.string().datetime(),
   updatedAt: external_exports.string().datetime()
 });
@@ -37223,7 +37254,7 @@ var mrrlinOperatorSettingsUpdateSchema = external_exports.object({
   consensusEnabled: external_exports.boolean().optional(),
   autonomyPaused: external_exports.boolean().optional(),
   activeProjectSlug: external_exports.string().min(1).nullable().optional(),
-  agentProvider: external_exports.enum(["codex", "claude"]).optional()
+  agentProvider: external_exports.enum(["codex", "claude", "agy"]).optional()
 }).strict().refine((value) => Object.keys(value).length > 0, {
   message: "OperatorSettingsUpdate requires at least one field"
 });
@@ -37238,7 +37269,7 @@ var operatorPresenceRequestSchema = external_exports.object({ projectSlug: exter
 var mrrlinConsensusConfigSchema = external_exports.object({ consensusEnabled: external_exports.boolean() });
 var consensusConfigResponseSchema = external_exports.object({ data: mrrlinConsensusConfigSchema });
 var mrrlinAgentProviderConfigSchema = external_exports.object({
-  agentProvider: external_exports.enum(["codex", "claude"])
+  agentProvider: external_exports.enum(["codex", "claude", "agy"])
 });
 var agentProviderConfigResponseSchema = external_exports.object({ data: mrrlinAgentProviderConfigSchema });
 var agentPoolSnapshotSchema = external_exports.object({
@@ -37273,6 +37304,40 @@ var agentCapabilitiesSchema = external_exports.object({
   sandboxModes: external_exports.array(external_exports.enum(["read-only", "workspace-write", "danger-full-access"])),
   poolProviderLabels: external_exports.array(external_exports.string())
 });
+var AGENT_CAPABILITIES = {
+  codex: {
+    listsModels: true,
+    readsRateLimits: true,
+    models: [],
+    modelCatalog: [],
+    sandboxModes: ["read-only", "workspace-write", "danger-full-access"],
+    poolProviderLabels: ["openai"]
+  },
+  claude: {
+    listsModels: false,
+    readsRateLimits: false,
+    // Aliases the Claude CLI documents for `--model` (`claude --help`), and what each resolved to
+    // on 2026-09-04 per the CLI's own `system.init.model` frame. Keep in step with
+    // packages/agent-client/src/providers/claude/models.ts — the parity test enforces equality.
+    models: ["fable", "opus", "sonnet", "haiku"],
+    modelCatalog: [
+      { id: "fable", displayName: "Fable 5.1", description: "claude-fable-5-1" },
+      { id: "opus", displayName: "Opus 5", description: "claude-opus-5" },
+      { id: "sonnet", displayName: "Sonnet 5", description: "claude-sonnet-5" },
+      { id: "haiku", displayName: "Haiku 4.5", description: "claude-haiku-4-5-20251001" }
+    ],
+    sandboxModes: ["read-only", "workspace-write", "danger-full-access"],
+    poolProviderLabels: ["anthropic"]
+  },
+  agy: {
+    listsModels: false,
+    readsRateLimits: false,
+    models: [],
+    modelCatalog: [],
+    sandboxModes: ["workspace-write"],
+    poolProviderLabels: ["antigravity"]
+  }
+};
 var providerReadinessResultSchema = external_exports.object({
   ready: external_exports.boolean(),
   checks: external_exports.object({
@@ -37285,7 +37350,8 @@ var providerReadinessResultSchema = external_exports.object({
 });
 var providerReadinessSchema = external_exports.object({
   codex: providerReadinessResultSchema,
-  claude: providerReadinessResultSchema
+  claude: providerReadinessResultSchema,
+  agy: providerReadinessResultSchema
 });
 var providerReadinessResponseSchema = external_exports.object({
   data: external_exports.object({ readiness: providerReadinessSchema.nullable() })
@@ -37384,7 +37450,7 @@ var mrrlinAsyncJobSchema = external_exports.object({
   updatedAt: external_exports.string(),
   // model-tier-planning-and-arbiter task 1.8: the seat minted at claim (or inherited from a
   // prior attempt on this same lease); NULL only before the first beginAttempt call pins it.
-  agentSeat: external_exports.enum(["codex", "claude"]).nullable().default(null)
+  agentSeat: external_exports.enum(["codex", "claude", "agy"]).nullable().default(null)
 }).strict();
 var asyncJobResponseSchema = external_exports.object({ data: mrrlinAsyncJobSchema });
 var asyncJobMaybeResponseSchema = external_exports.object({ data: mrrlinAsyncJobSchema.nullable() });
@@ -37404,7 +37470,7 @@ var mrrlinAsyncJobBeginAttemptSchema = external_exports.object({
   requestedHash: external_exports.string().min(1),
   // task 1.8: the caller has already resolved (inherited or minted) a seat for this job by the
   // time it begins an attempt — required, not optional, so persistence can never be skipped.
-  agentSeat: external_exports.enum(["codex", "claude"])
+  agentSeat: external_exports.enum(["codex", "claude", "agy"])
 });
 var mrrlinAsyncJobTerminalizeSchema = external_exports.object({
   leaseId: external_exports.string().min(1),
@@ -38010,7 +38076,7 @@ var mrrlinTaskSchema = external_exports.object({
   // Output-optional (not .default) so existing task fixtures/mocks need no churn; DB rows always
   // resolve it via taskRowToTask. Null reads as the pre-existing default provider and is never
   // backfilled -- it is NOT a mismatch against whatever provider is currently selected.
-  directorThreadProvider: external_exports.enum(["codex", "claude"]).nullable().optional(),
+  directorThreadProvider: external_exports.enum(["codex", "claude", "agy"]).nullable().optional(),
   // agnostic-delivery: asserted before the work, not the deliverable-gate's differently-meaning
   // `attemptOutcome` asserted after it (design.md). Required at spec approval (task 3.2's API
   // gate), never at creation -- null on every task until then, forever on legacy tasks. Shape-only
@@ -38358,7 +38424,7 @@ var mrrlinTaskUpdateSchema = external_exports.object({
   category: taxonomyCategorySchema.optional(),
   directorSessionId: external_exports.string().min(1).optional(),
   directorThreadId: external_exports.string().min(1).nullable().optional(),
-  directorThreadProvider: external_exports.enum(["codex", "claude"]).nullable().optional(),
+  directorThreadProvider: external_exports.enum(["codex", "claude", "agy"]).nullable().optional(),
   declaredOutcome: mrrlinDeclaredOutcomeSchema.nullable().optional(),
   dueDate: external_exports.string().date().nullable().optional(),
   impact: mrrlinTaskImpactSchema.optional(),
@@ -38679,7 +38745,7 @@ var mrrlinRunPrerequisiteSchema = external_exports.object({
 });
 var mrrlinExecutionRunSchema = external_exports.object({
   actor: external_exports.string().min(1),
-  agentSeat: external_exports.enum(["codex", "claude"]).nullable(),
+  agentSeat: external_exports.enum(["codex", "claude", "agy"]).nullable(),
   baseSha: external_exports.string().min(1).nullable(),
   branch: external_exports.string().min(1).nullable(),
   blockingReason: mrrlinRunBlockingReasonCodeSchema.nullable(),
@@ -38739,7 +38805,7 @@ var mrrlinTaskStateSchema = external_exports.object({
   // claude-director-and-runner design.md D5: which provider's CLI produced retiredThreadId.
   // Output-optional so existing task_state fixtures/mocks need no churn; null reads as the
   // pre-existing default provider and is never backfilled.
-  retiredThreadProvider: external_exports.enum(["codex", "claude"]).nullable().optional(),
+  retiredThreadProvider: external_exports.enum(["codex", "claude", "agy"]).nullable().optional(),
   updatedAt: external_exports.string().datetime()
 });
 var mrrlinTaskStateUpsertSchema = external_exports.object({
@@ -38781,7 +38847,7 @@ var mrrlinExecutionRunCreateSchema = external_exports.object({
   worktreeId: external_exports.string().min(1).optional()
 });
 var mrrlinExecutionRunUpdateSchema = external_exports.object({
-  agentSeat: external_exports.enum(["codex", "claude"]).nullable().optional(),
+  agentSeat: external_exports.enum(["codex", "claude", "agy"]).nullable().optional(),
   baseSha: external_exports.string().min(1).nullable().optional(),
   branch: external_exports.string().min(1).nullable().optional(),
   blockingReason: mrrlinRunBlockingReasonCodeSchema.nullable().optional(),
@@ -40355,8 +40421,33 @@ var ClaudeAgentHandle = class {
   }
 };
 
+// ../../packages/agent-client/dist/providers/agy/adapter.js
+var AgyProviderAdapter = class {
+  id = "agy";
+  capabilities() {
+    return AGENT_CAPABILITIES.agy;
+  }
+  // Stub adapter: real process spawning and JSONL stdio streaming will be implemented in agy-stdio-streaming
+  async acquireWarm() {
+    return {
+      startThread: () => Promise.resolve({ threadId: "mock-thread-id" }),
+      resumeThread: () => Promise.resolve({ threadId: "mock-thread-id" }),
+      startTurn: () => Promise.resolve({ turnId: "mock-turn-id" }),
+      interruptTurn: () => Promise.resolve(),
+      onEvent: () => () => {
+      },
+      onActivity: () => () => {
+      },
+      listModels: () => Promise.resolve([]),
+      readRateLimits: () => Promise.resolve(null)
+    };
+  }
+  releaseWarm() {
+  }
+};
+
 // ../../packages/agent-client/dist/registry.js
-var KNOWN_PROVIDERS = { codex: true, claude: true };
+var KNOWN_PROVIDERS = { codex: true, claude: true, agy: true };
 var KNOWN_PROVIDER_IDS = Object.keys(KNOWN_PROVIDERS);
 function readProviderFromEnv(env) {
   const raw = env.MRRLIN_AGENT_PROVIDER;
@@ -40377,6 +40468,9 @@ function resolveProvider(env, persisted) {
   if (id === "claude") {
     return new ClaudeProviderAdapter();
   }
+  if (id === "agy") {
+    return new AgyProviderAdapter();
+  }
   throw new Error(`not-yet-wired: ${id}`);
 }
 
@@ -40720,6 +40814,8 @@ async function mintResolvedSeat(provider, opts) {
   const providerId = provider.id;
   let strongModel;
   let weakModel;
+  let pinRetired;
+  let retiredPin;
   const strongEnvValue = process.env[providerId === "codex" ? CODEX_STRONG_MODEL_ENV : CLAUDE_STRONG_MODEL_ENV]?.trim();
   if (opts?.handle && capabilities.listsModels) {
     try {
@@ -40733,6 +40829,8 @@ async function mintResolvedSeat(provider, opts) {
           strongModel = picked;
           if (strongEnvValue) {
             logFallback(providerId, "strong", "live-default (env pin retired)", strongModel);
+            pinRetired = true;
+            retiredPin = strongEnvValue;
           }
         } else {
           throw new Error("empty model list");
@@ -40780,7 +40878,8 @@ async function mintResolvedSeat(provider, opts) {
   return {
     id: providerId,
     capabilities,
-    models: { strong: strongModel, weak: weakModel }
+    models: { strong: strongModel, weak: weakModel },
+    ...pinRetired ? { pinRetired: true, retiredPin } : {}
   };
 }
 
@@ -42846,7 +42945,7 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.4.64";
+var PKG_VERSION = "0.4.66";
 
 // src/api-base-url-migrate.ts
 var import_node_fs5 = __toESM(require("node:fs"), 1);
@@ -46215,11 +46314,12 @@ async function runProviderReadinessCycle(deps) {
   try {
     const verify = deps.verify ?? verifyProviderReadiness;
     const runnerFor = deps.runnerFor ?? defaultRunnerFor;
-    const [codex, claude] = await Promise.all([
+    const [codex, claude, agy] = await Promise.all([
       verify("codex", runnerFor("codex")),
-      verify("claude", runnerFor("claude"))
+      verify("claude", runnerFor("claude")),
+      verify("agy", runnerFor("agy"))
     ]);
-    await deps.push({ codex, claude });
+    await deps.push({ codex, claude, agy });
   } catch (err) {
     deps.onError?.(err);
   }
@@ -46260,7 +46360,7 @@ function setSelectedProvider(value) {
 // src/execution-consumer.ts
 var import_node_child_process13 = require("node:child_process");
 var import_node_crypto7 = __toESM(require("node:crypto"), 1);
-var import_node_path20 = __toESM(require("node:path"), 1);
+var import_node_path21 = __toESM(require("node:path"), 1);
 var import_node_util = require("node:util");
 
 // src/consensus/deliverable-gate-outcome.ts
@@ -47867,6 +47967,132 @@ function effortDisabled(env = process.env) {
   return (env.MRRLIN_EXEC_EFFORT_DISABLE ?? "").trim() === "1";
 }
 
+// src/operator-token.ts
+var import_node_fs13 = require("node:fs");
+var import_node_os10 = __toESM(require("node:os"), 1);
+var import_node_path20 = __toESM(require("node:path"), 1);
+function operatorDir() {
+  const base = process.env.CODEX_HOME ? import_node_path20.default.join(process.env.CODEX_HOME, "mrrlin") : import_node_path20.default.join(import_node_os10.default.homedir(), ".mrrlin");
+  return base;
+}
+function operatorTokenPath() {
+  return import_node_path20.default.join(operatorDir(), "operator-token");
+}
+function readOperatorToken() {
+  try {
+    const token = (0, import_node_fs13.readFileSync)(operatorTokenPath(), "utf8").trim();
+    return token.length > 0 ? token : null;
+  } catch {
+    return null;
+  }
+}
+function persistOperatorToken(token) {
+  const dir = operatorDir();
+  (0, import_node_fs13.mkdirSync)(dir, { recursive: true, mode: 448 });
+  (0, import_node_fs13.writeFileSync)(operatorTokenPath(), `${token.trim()}
+`, { encoding: "utf8", mode: 384 });
+}
+function agentCredentialPath() {
+  return import_node_path20.default.join(operatorDir(), "agent-credential");
+}
+function persistAgentSecret(secret) {
+  const dir = operatorDir();
+  (0, import_node_fs13.mkdirSync)(dir, { recursive: true, mode: 448 });
+  (0, import_node_fs13.writeFileSync)(agentCredentialPath(), `${secret.trim()}
+`, { encoding: "utf8", mode: 384 });
+}
+function readAgentSecret() {
+  const fromEnv = process.env.MRRLIN_AGENT_SECRET?.trim();
+  if (fromEnv) return fromEnv;
+  try {
+    const raw = (0, import_node_fs13.readFileSync)(agentCredentialPath(), "utf8").trim();
+    return raw || void 0;
+  } catch {
+    return void 0;
+  }
+}
+
+// src/pin-retirement-notifier.ts
+var notifiedPins = /* @__PURE__ */ new Set();
+var inFlightPins = /* @__PURE__ */ new Set();
+function getDedupKey(providerId, pinnedModel) {
+  return pinnedModel ? `${providerId}:${pinnedModel}` : providerId;
+}
+async function notifyPinRetirement(info, opts) {
+  if (info.providerId === "claude") {
+    return;
+  }
+  const dedupKey = getDedupKey(info.providerId, info.pinnedModel);
+  if (notifiedPins.has(dedupKey) || inFlightPins.has(dedupKey)) {
+    return;
+  }
+  inFlightPins.add(dedupKey);
+  try {
+    const apiBaseUrl = opts?.apiBaseUrl ?? process.env.MRRLIN_API_BASE_URL ?? "http://127.0.0.1:8787";
+    const projectSlug = info.projectSlug ?? process.env.MRRLIN_REPORT_PROJECT_SLUG?.trim() ?? "mrrlin";
+    const token = opts?.token !== void 0 ? opts.token : process.env.MRRLIN_API_TOKEN?.trim() || readOperatorToken();
+    const fetchImpl = opts?.fetch ?? globalThis.fetch;
+    const endpoint = `${apiBaseUrl.replace(/\/+$/, "")}/projects/${encodeURIComponent(
+      projectSlug
+    )}/tasks`;
+    const headers = {
+      "content-type": "application/json",
+      "x-mrrlin-actor": "mrrlin-bridge",
+      "x-mrrlin-director-session-id": "pin-retirement-signal"
+    };
+    if (token) {
+      headers.authorization = `Bearer ${token}`;
+    }
+    const body = {
+      title: `[Bug] Retired strong-model pin: ${info.providerId} (${info.pinnedModel})`,
+      type: "bug",
+      category: "bug",
+      subcategory: "reported",
+      domain: "code",
+      impact: "medium",
+      notes: `The pinned strong model "${info.pinnedModel}" for provider "${info.providerId}" was not found in the provider's live model list (retired by provider). Falling back to live default model "${info.fallbackModel}". Please update the operator pin in ~/.mrrlin/ecosystem.config.cjs or the corresponding environment variable (MRRLIN_${info.providerId.toUpperCase()}_STRONG_MODEL).`,
+      operatorSeedRequest: `The pinned strong model "${info.pinnedModel}" for provider "${info.providerId}" has been retired. Fallback in use: "${info.fallbackModel}". Update the strong model pin.`,
+      autonomyLevel: "human_review",
+      autonomyReason: "Needs human review before automation."
+    };
+    const response = await fetchImpl(endpoint, {
+      method: "POST",
+      headers,
+      body: JSON.stringify(body)
+    });
+    if (response.ok) {
+      notifiedPins.add(dedupKey);
+    } else {
+      console.warn(
+        `[pin-retirement-notifier] received non-2xx status (${response.status}) from ${endpoint}`
+      );
+    }
+  } catch (err) {
+    console.warn(
+      `[pin-retirement-notifier] failed to report retirement for provider "${info.providerId}":`,
+      err
+    );
+  } finally {
+    inFlightPins.delete(dedupKey);
+  }
+}
+async function notifyPinRetirementIfRetired(seat, opts) {
+  if (!seat.pinRetired) {
+    return;
+  }
+  const pinnedModel = seat.retiredPin ?? (seat.id === "codex" ? process.env.MRRLIN_CODEX_STRONG_MODEL : seat.id === "claude" ? process.env.MRRLIN_CLAUDE_STRONG_MODEL : void 0) ?? "unknown";
+  const fallbackModel = seat.models?.strong ?? "unknown";
+  await notifyPinRetirement(
+    {
+      providerId: seat.id,
+      pinnedModel,
+      fallbackModel,
+      projectSlug: opts?.projectSlug
+    },
+    opts
+  );
+}
+
 // src/execution-consumer.ts
 var DEFAULT_STALE_SECONDS = 300;
 var DEFAULT_MAX_LEASE_RECLAIMS = 3;
@@ -48594,6 +48820,7 @@ async function driveRun(deps, projectSlug, runId) {
     resolvedProviderId = claimed.agentSeat;
   } else {
     const seat = await mintResolvedSeat(resolveProvider(process.env, getSelectedProvider()));
+    void notifyPinRetirementIfRetired(seat, { projectSlug });
     resolvedProviderId = seat.id;
     await deps.client.updateExecutionRun(projectSlug, runId, { agentSeat: seat.id }).catch((err) => {
       console.warn(
@@ -49861,8 +50088,8 @@ async function runBackstopSweep(deps, drive = (slug, id) => driveRun(deps, slug,
 function isRunRecoverableByThisBridge(run3, worktreeRoot) {
   if (!worktreeRoot) return true;
   if (!run3.worktreeId) return false;
-  const relative = import_node_path20.default.relative(import_node_path20.default.resolve(worktreeRoot), import_node_path20.default.resolve(run3.worktreeId));
-  return relative === "" || relative.length > 0 && !relative.startsWith("..") && !import_node_path20.default.isAbsolute(relative);
+  const relative = import_node_path21.default.relative(import_node_path21.default.resolve(worktreeRoot), import_node_path21.default.resolve(run3.worktreeId));
+  return relative === "" || relative.length > 0 && !relative.startsWith("..") && !import_node_path21.default.isAbsolute(relative);
 }
 async function deployGateHandoff(deps, projectSlug, task, runId, reason, leaseId) {
   await deps.client.updateExecutionRun(projectSlug, runId, { status: "failed", finishedAt: (/* @__PURE__ */ new Date()).toISOString(), leaseId: leaseId ?? void 0 }).catch(() => {
@@ -49911,9 +50138,9 @@ function getAsyncToolDescriptor(toolName) {
 }
 
 // src/bridge-log.ts
-var import_node_fs13 = require("node:fs");
+var import_node_fs14 = require("node:fs");
 var import_promises7 = require("node:fs/promises");
-var import_node_path21 = require("node:path");
+var import_node_path22 = require("node:path");
 
 // src/redact.ts
 var REDACTED = "[REDACTED]";
@@ -50189,14 +50416,14 @@ function resolvePromptsEnabled(env = process.env) {
 }
 function createBridgeLogger(stateDir, env = process.env) {
   if (!resolveBridgeLogEnabled(env)) return NOOP_LOGGER;
-  const logsDir = (0, import_node_path21.join)(stateDir, "logs");
+  const logsDir = (0, import_node_path22.join)(stateDir, "logs");
   try {
-    (0, import_node_fs13.mkdirSync)(logsDir, { recursive: true });
+    (0, import_node_fs14.mkdirSync)(logsDir, { recursive: true });
   } catch {
     return NOOP_LOGGER;
   }
   const includePrompts = resolvePromptsEnabled(env);
-  const fileFor = () => (0, import_node_path21.join)(logsDir, `bridge-${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}.jsonl`);
+  const fileFor = () => (0, import_node_path22.join)(logsDir, `bridge-${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}.jsonl`);
   const MAX_TRACKED_SESSIONS = 64;
   const contextSlugBySession = /* @__PURE__ */ new Map();
   const rememberContextSlug = (sessionId, payload) => {
@@ -50237,10 +50464,10 @@ function createBridgeLogger(stateDir, env = process.env) {
     return { isGap, isNewTurn };
   };
   const gainDay = (sessionId) => {
-    const sessionsPath = (0, import_node_path21.join)(logsDir, ".sessions.json");
+    const sessionsPath = (0, import_node_path22.join)(logsDir, ".sessions.json");
     let sessionsObj = {};
     try {
-      const parsed = JSON.parse((0, import_node_fs13.readFileSync)(sessionsPath, "utf8"));
+      const parsed = JSON.parse((0, import_node_fs14.readFileSync)(sessionsPath, "utf8"));
       if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) sessionsObj = parsed;
     } catch {
       sessionsObj = {};
@@ -50250,8 +50477,8 @@ function createBridgeLogger(stateDir, env = process.env) {
     if (idsToday.includes(sessionId)) return;
     sessionsObj[day] = [...idsToday, sessionId];
     const tmpPath = `${sessionsPath}.tmp`;
-    (0, import_node_fs13.writeFileSync)(tmpPath, JSON.stringify(sessionsObj));
-    (0, import_node_fs13.renameSync)(tmpPath, sessionsPath);
+    (0, import_node_fs14.writeFileSync)(tmpPath, JSON.stringify(sessionsObj));
+    (0, import_node_fs14.renameSync)(tmpPath, sessionsPath);
   };
   const write = (dir, rec) => {
     try {
@@ -50342,7 +50569,7 @@ function createBridgeLogger(stateDir, env = process.env) {
         ...recordingObligationUnresolved ? { recordingObligationUnresolved } : {},
         ...recordingObligationMultiResolve ? { recordingObligationMultiResolve } : {}
       }) + "\n";
-      (0, import_node_fs13.appendFileSync)(fileFor(), line);
+      (0, import_node_fs14.appendFileSync)(fileFor(), line);
       if (rec.sessionId !== null) gainDay(rec.sessionId);
     } catch {
     }
@@ -50355,7 +50582,7 @@ function createBridgeLogger(stateDir, env = process.env) {
   };
 }
 async function findSessionDays(stateDir, sessionId) {
-  const sessionsPath = (0, import_node_path21.join)(stateDir, "logs", ".sessions.json");
+  const sessionsPath = (0, import_node_path22.join)(stateDir, "logs", ".sessions.json");
   let sessionsObj;
   try {
     const parsed = JSON.parse(await (0, import_promises7.readFile)(sessionsPath, "utf8"));
@@ -50537,12 +50764,12 @@ async function runAsyncBackstopSweep(deps, drive = (slug, jobId) => driveAsyncJo
 }
 
 // src/state-dir.ts
-var import_node_os10 = __toESM(require("node:os"), 1);
-var import_node_path22 = __toESM(require("node:path"), 1);
+var import_node_os11 = __toESM(require("node:os"), 1);
+var import_node_path23 = __toESM(require("node:path"), 1);
 function resolveStateDir(env = process.env) {
   const codexHome = env.CODEX_HOME;
-  if (codexHome) return import_node_path22.default.join(codexHome, "mrrlin", "director-bridge");
-  return import_node_path22.default.join(import_node_os10.default.homedir(), ".mrrlin", "director-bridge");
+  if (codexHome) return import_node_path23.default.join(codexHome, "mrrlin", "director-bridge");
+  return import_node_path23.default.join(import_node_os11.default.homedir(), ".mrrlin", "director-bridge");
 }
 
 // src/consensus/deliverable-gate.ts
@@ -50797,51 +51024,6 @@ function agentIdleMs(provider) {
   return seconds * 1e3;
 }
 
-// src/operator-token.ts
-var import_node_fs14 = require("node:fs");
-var import_node_os11 = __toESM(require("node:os"), 1);
-var import_node_path23 = __toESM(require("node:path"), 1);
-function operatorDir() {
-  const base = process.env.CODEX_HOME ? import_node_path23.default.join(process.env.CODEX_HOME, "mrrlin") : import_node_path23.default.join(import_node_os11.default.homedir(), ".mrrlin");
-  return base;
-}
-function operatorTokenPath() {
-  return import_node_path23.default.join(operatorDir(), "operator-token");
-}
-function readOperatorToken() {
-  try {
-    const token = (0, import_node_fs14.readFileSync)(operatorTokenPath(), "utf8").trim();
-    return token.length > 0 ? token : null;
-  } catch {
-    return null;
-  }
-}
-function persistOperatorToken(token) {
-  const dir = operatorDir();
-  (0, import_node_fs14.mkdirSync)(dir, { recursive: true, mode: 448 });
-  (0, import_node_fs14.writeFileSync)(operatorTokenPath(), `${token.trim()}
-`, { encoding: "utf8", mode: 384 });
-}
-function agentCredentialPath() {
-  return import_node_path23.default.join(operatorDir(), "agent-credential");
-}
-function persistAgentSecret(secret) {
-  const dir = operatorDir();
-  (0, import_node_fs14.mkdirSync)(dir, { recursive: true, mode: 448 });
-  (0, import_node_fs14.writeFileSync)(agentCredentialPath(), `${secret.trim()}
-`, { encoding: "utf8", mode: 384 });
-}
-function readAgentSecret() {
-  const fromEnv = process.env.MRRLIN_AGENT_SECRET?.trim();
-  if (fromEnv) return fromEnv;
-  try {
-    const raw = (0, import_node_fs14.readFileSync)(agentCredentialPath(), "utf8").trim();
-    return raw || void 0;
-  } catch {
-    return void 0;
-  }
-}
-
 // src/thread-index.ts
 var import_node_fs15 = require("node:fs");
 var import_node_path24 = __toESM(require("node:path"), 1);
@@ -57007,6 +57189,7 @@ function createBridgeMessageHandler(deps) {
           return;
         }
         const compactionSeat = await mintResolvedSeat(resolveProvider(process.env, getSelectedProvider()));
+        void notifyPinRetirementIfRetired(compactionSeat);
         const result = await deps.runCompaction({
           history,
           provider: compactionSeat.id,
@@ -57378,6 +57561,7 @@ function createBridgeMessageHandler(deps) {
       }
       pendingTurnSessions.add(directorSessionId);
       const turnSeat = await mintResolvedSeat(resolveProvider(process.env, getSelectedProvider()));
+      void notifyPinRetirementIfRetired(turnSeat);
       const turnProviderCapabilities = turnSeat.capabilities;
       const codexClient = await deps.acquireCodex(turnSeat.id);
       let thread = deps.threads.get(directorSessionId);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrrlin-dev/mcp",
-  "version": "0.4.64",
+  "version": "0.4.66",
   "type": "module",
   "bin": {
     "mrrlin-mcp": "dist/bin.cjs"
@@ -25,8 +25,8 @@
     "@mrrlin/agent-client": "0.0.0",
     "@mrrlin/director-e2e": "0.0.0",
     "@mrrlin/tsconfig": "0.0.0",
-    "@mrrlin/schemas": "0.0.0",
-    "@mrrlin/wiki": "0.0.0"
+    "@mrrlin/wiki": "0.0.0",
+    "@mrrlin/schemas": "0.0.0"
   },
   "dependencies": {
     "@iarna/toml": "^2.2.5",