@mrrlin-dev/mcp 0.4.65 → 0.4.67

package/dist/bin.cjs

@@ -20644,11 +20644,11 @@ var require_dist = __commonJS({
 });
 
 // src/bin.ts
-var import_node_path37 = __toESM(require("node:path"), 1);
-var import_node_child_process19 = require("node:child_process");
+var import_node_path38 = __toESM(require("node:path"), 1);
+var import_node_child_process21 = require("node:child_process");
 var import_node_fs24 = require("node:fs");
 var import_node_os19 = require("node:os");
-var import_node_path38 = __toESM(require("node:path"), 1);
+var import_node_path39 = __toESM(require("node:path"), 1);
 
 // src/install-codex.ts
 var import_promises = __toESM(require("node:fs/promises"), 1);
@@ -21668,9 +21668,9 @@ async function verifyProviderReadiness(provider, run3, opts = {}) {
 var import_node_fs22 = __toESM(require("node:fs"), 1);
 var import_node_http = __toESM(require("node:http"), 1);
 var import_node_os15 = __toESM(require("node:os"), 1);
-var import_node_path30 = __toESM(require("node:path"), 1);
-var import_node_child_process16 = require("node:child_process");
-var import_node_crypto11 = __toESM(require("node:crypto"), 1);
+var import_node_path31 = __toESM(require("node:path"), 1);
+var import_node_child_process18 = require("node:child_process");
+var import_node_crypto12 = __toESM(require("node:crypto"), 1);
 
 // src/turn-replay-buffer.ts
 var DEFAULT_MAX_EVENTS = 2e3;
@@ -37330,12 +37330,42 @@ var AGENT_CAPABILITIES = {
     poolProviderLabels: ["anthropic"]
   },
   agy: {
-    listsModels: false,
+    listsModels: true,
     readsRateLimits: false,
-    models: [],
-    modelCatalog: [],
-    sandboxModes: ["workspace-write"],
-    poolProviderLabels: ["antigravity"]
+    models: [
+      "gemini-3.8-flash-high",
+      "gemini-3.8-flash-medium",
+      "gemini-3.8-flash-low",
+      "gemini-3.7-flash-high",
+      "gemini-3.7-flash-medium",
+      "gemini-3.7-flash-low",
+      "gemini-3.6-flash-high",
+      "gemini-3.6-flash-medium",
+      "gemini-3.6-flash-low",
+      "gemini-3.1-pro-high",
+      "gemini-3.1-pro-low",
+      "claude-sonnet-4-6",
+      "claude-opus-4-6-thinking",
+      "gpt-oss-120b-medium"
+    ],
+    modelCatalog: [
+      { id: "gemini-3.8-flash-high", displayName: "Gemini 3.8 Flash (High)", description: "gemini-3.8-flash-high" },
+      { id: "gemini-3.8-flash-medium", displayName: "Gemini 3.8 Flash (Medium)", description: "gemini-3.8-flash-medium" },
+      { id: "gemini-3.8-flash-low", displayName: "Gemini 3.8 Flash (Low)", description: "gemini-3.8-flash-low" },
+      { id: "gemini-3.7-flash-high", displayName: "Gemini 3.7 Flash (High)", description: "gemini-3.7-flash-high" },
+      { id: "gemini-3.7-flash-medium", displayName: "Gemini 3.7 Flash (Medium)", description: "gemini-3.7-flash-medium" },
+      { id: "gemini-3.7-flash-low", displayName: "Gemini 3.7 Flash (Low)", description: "gemini-3.7-flash-low" },
+      { id: "gemini-3.6-flash-high", displayName: "Gemini 3.6 Flash (High)", description: "gemini-3.6-flash-high" },
+      { id: "gemini-3.6-flash-medium", displayName: "Gemini 3.6 Flash (Medium)", description: "gemini-3.6-flash-medium" },
+      { id: "gemini-3.6-flash-low", displayName: "Gemini 3.6 Flash (Low)", description: "gemini-3.6-flash-low" },
+      { id: "gemini-3.1-pro-high", displayName: "Gemini 3.1 Pro (High)", description: "gemini-3.1-pro-high" },
+      { id: "gemini-3.1-pro-low", displayName: "Gemini 3.1 Pro (Low)", description: "gemini-3.1-pro-low" },
+      { id: "claude-sonnet-4-6", displayName: "Claude Sonnet 4.6 (Thinking)", description: "claude-sonnet-4-6" },
+      { id: "claude-opus-4-6-thinking", displayName: "Claude Opus 4.6 (Thinking)", description: "claude-opus-4-6-thinking" },
+      { id: "gpt-oss-120b-medium", displayName: "GPT-OSS 120B (Medium)", description: "gpt-oss-120b-medium" }
+    ],
+    sandboxModes: ["read-only", "workspace-write", "danger-full-access"],
+    poolProviderLabels: ["antigravity", "google"]
   }
 };
 var providerReadinessResultSchema = external_exports.object({
@@ -37351,7 +37381,7 @@ var providerReadinessResultSchema = external_exports.object({
 var providerReadinessSchema = external_exports.object({
   codex: providerReadinessResultSchema,
   claude: providerReadinessResultSchema,
-  agy: providerReadinessResultSchema
+  agy: providerReadinessResultSchema.optional()
 });
 var providerReadinessResponseSchema = external_exports.object({
   data: external_exports.object({ readiness: providerReadinessSchema.nullable() })
@@ -40421,30 +40451,487 @@ var ClaudeAgentHandle = class {
   }
 };
 
+// ../../packages/agent-client/dist/providers/agy/process.js
+var import_node_child_process5 = require("node:child_process");
+var import_node_crypto2 = require("node:crypto");
+var import_node_events2 = require("node:events");
+var import_promises4 = require("node:timers/promises");
+var MODEL_ID_REGEX = /^[a-zA-Z0-9][a-zA-Z0-9._-]{1,63}$/;
+var CONVERSATION_ID_REGEX = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
+var activeProcesses = /* @__PURE__ */ new Set();
+var globalCleanupInstalled = false;
+function installGlobalCleanupOnce() {
+  if (globalCleanupInstalled)
+    return;
+  globalCleanupInstalled = true;
+  process.once("exit", () => {
+    for (const child of activeProcesses) {
+      try {
+        child.kill("SIGKILL");
+      } catch {
+      }
+    }
+  });
+  const sigHandler = async () => {
+    for (const child of activeProcesses) {
+      try {
+        child.kill("SIGTERM");
+      } catch {
+      }
+    }
+    await (0, import_promises4.setTimeout)(1e3);
+    for (const child of activeProcesses) {
+      try {
+        child.kill("SIGKILL");
+      } catch {
+      }
+    }
+    process.exit(0);
+  };
+  process.once("SIGTERM", sigHandler);
+  process.once("SIGINT", sigHandler);
+}
+installGlobalCleanupOnce();
+var AgyProcess = class _AgyProcess {
+  options;
+  sessionId;
+  child;
+  lineHandlers = /* @__PURE__ */ new Set();
+  activityHandlers = /* @__PURE__ */ new Set();
+  exitHandlers = /* @__PURE__ */ new Set();
+  killGraceMs;
+  leftover = "";
+  static MAX_BUFFER = 1024 * 1024;
+  // 1 MiB
+  exited = false;
+  constructor(options) {
+    this.options = options;
+    this.killGraceMs = options.killGraceMs ?? 2e3;
+    const { mode } = options;
+    if (mode.kind === "new") {
+      this.sessionId = mode.sessionId ?? (0, import_node_crypto2.randomUUID)();
+    } else {
+      if (!CONVERSATION_ID_REGEX.test(mode.resumeId)) {
+        throw new Error(`Invalid resume conversation ID: "${mode.resumeId}". Must match UUID pattern`);
+      }
+      this.sessionId = mode.resumeId;
+    }
+    if (options.model != null && options.model !== "") {
+      if (!MODEL_ID_REGEX.test(options.model)) {
+        throw new Error(`Invalid model identifier: "${options.model}". Must match ${MODEL_ID_REGEX}`);
+      }
+    }
+    const args = [
+      "--input-format",
+      "stream-json",
+      "--output-format",
+      "stream-json"
+    ];
+    switch (options.permissionMode) {
+      case "bypassPermissions":
+        args.push("--dangerously-skip-permissions");
+        break;
+      case "plan":
+        args.push("--mode", "plan");
+        break;
+      case "acceptEdits":
+        args.push("--mode", "accept-edits");
+        break;
+    }
+    if (options.model) {
+      args.push("--model", options.model);
+    }
+    if (mode.kind === "resume") {
+      args.push("--conversation", mode.resumeId);
+    }
+    const executable = options.agyExecutable?.trim() || "agy";
+    const cwd = options.cwd?.trim() || void 0;
+    this.child = (0, import_node_child_process5.spawn)(executable, args, {
+      cwd,
+      env: process.env,
+      stdio: ["pipe", "pipe", "pipe"]
+    });
+    activeProcesses.add(this.child);
+    this.child.stdout.setEncoding("utf8");
+    this.child.stderr.setEncoding("utf8");
+    this.child.stdout.on("data", (chunk) => this.handleStdoutChunk(chunk));
+    this.child.stderr.on("data", () => this.emitActivity());
+    this.child.on("exit", (code, signal) => {
+      activeProcesses.delete(this.child);
+      if (this.exited)
+        return;
+      this.exited = true;
+      const info = { code, signal };
+      for (const handler of this.exitHandlers)
+        handler(info);
+    });
+    this.child.on("error", () => this.handleTerminalError());
+    this.child.stdin.on("error", () => this.handleTerminalError());
+    this.child.stdout.on("error", () => this.handleTerminalError());
+    this.child.stderr.on("error", () => this.handleTerminalError());
+  }
+  handleTerminalError() {
+    activeProcesses.delete(this.child);
+    if (this.exited)
+      return;
+    this.exited = true;
+    const info = { code: null, signal: null };
+    for (const handler of this.exitHandlers)
+      handler(info);
+  }
+  emitActivity() {
+    for (const handler of this.activityHandlers)
+      handler();
+  }
+  sendTurn(text) {
+    if (this.exited) {
+      throw new Error(`AgyProcess: cannot send turn to exited child process (session ${this.sessionId})`);
+    }
+    const payload = JSON.stringify({
+      event: "user",
+      message: { content: text }
+    });
+    this.child.stdin.write(`${payload}
+`);
+  }
+  onLine(handler) {
+    this.lineHandlers.add(handler);
+    return () => this.lineHandlers.delete(handler);
+  }
+  onActivity(handler) {
+    this.activityHandlers.add(handler);
+    return () => this.activityHandlers.delete(handler);
+  }
+  onExit(handler) {
+    this.exitHandlers.add(handler);
+    return () => this.exitHandlers.delete(handler);
+  }
+  async dispose() {
+    if (this.exited || this.child.killed) {
+      activeProcesses.delete(this.child);
+      return;
+    }
+    this.child.kill("SIGTERM");
+    try {
+      await Promise.race([
+        (0, import_node_events2.once)(this.child, "exit"),
+        (0, import_promises4.setTimeout)(this.killGraceMs)
+      ]);
+    } catch {
+    }
+    if (!this.exited) {
+      try {
+        this.child.kill("SIGKILL");
+      } catch {
+      }
+    }
+    activeProcesses.delete(this.child);
+  }
+  handleStdoutChunk(chunk) {
+    this.emitActivity();
+    this.leftover += chunk;
+    let newlineIdx;
+    while ((newlineIdx = this.leftover.indexOf("\n")) !== -1) {
+      const line = this.leftover.slice(0, newlineIdx).trim();
+      this.leftover = this.leftover.slice(newlineIdx + 1);
+      if (line.length === 0)
+        continue;
+      try {
+        const parsed = JSON.parse(line);
+        for (const handler of this.lineHandlers)
+          handler(parsed);
+      } catch {
+      }
+    }
+    if (this.leftover.length > _AgyProcess.MAX_BUFFER) {
+      console.error(`[agy-process] stdout line exceeded max buffer (${_AgyProcess.MAX_BUFFER} chars), discarding`);
+      this.leftover = "";
+    }
+  }
+};
+
+// ../../packages/agent-client/dist/providers/agy/event-mapper.js
+function normalizeContent(content) {
+  if (typeof content === "string")
+    return content;
+  if (content === null || content === void 0)
+    return "";
+  try {
+    return JSON.stringify(content);
+  } catch {
+    return String(content);
+  }
+}
+var AgyBridgeEventMapper = class {
+  emittedToolUses = /* @__PURE__ */ new Set();
+  emittedToolResults = /* @__PURE__ */ new Set();
+  reset() {
+    this.emittedToolUses.clear();
+    this.emittedToolResults.clear();
+  }
+  mapLine(parsed, _threadId) {
+    if (typeof parsed !== "object" || parsed === null) {
+      return [];
+    }
+    const data = parsed;
+    if (data.event === "step_update") {
+      const step = data.step_update;
+      if (!step || typeof step !== "object") {
+        return [];
+      }
+      if (step.step_type === "agent_response") {
+        const text = typeof step.text_delta === "string" ? step.text_delta : typeof step.response === "string" ? step.response : "";
+        return text ? [{ type: "assistant", content: text }] : [];
+      }
+      if (step.step_type === "tool_use" || step.tool_call) {
+        const id = (typeof step.tool_use_id === "string" ? step.tool_use_id : typeof step.id === "string" ? step.id : "") || "";
+        if (id && !this.emittedToolUses.has(id)) {
+          this.emittedToolUses.add(id);
+          const name = typeof step.tool_name === "string" ? step.tool_name : typeof step.tool === "string" ? step.tool : "tool_use";
+          const input = step.input ?? {};
+          return [{ type: "tool_use", tool: { name, id, input } }];
+        }
+        return [];
+      }
+      if (step.step_type === "tool_result") {
+        const toolUseId = (typeof step.tool_use_id === "string" ? step.tool_use_id : typeof step.id === "string" ? step.id : "") || "";
+        if (toolUseId && !this.emittedToolResults.has(toolUseId)) {
+          this.emittedToolResults.add(toolUseId);
+          const content = step.content ?? step.result ?? "";
+          return [{ type: "tool_result", tool: { id: toolUseId }, content: normalizeContent(content) }];
+        }
+        return [];
+      }
+      if (step.step_type === "error_message") {
+        const message = typeof step.error === "string" ? step.error : typeof step.message === "string" ? step.message : "AGY step error";
+        return [{ type: "error", content: message }];
+      }
+      return [];
+    }
+    if (data.event === "result") {
+      const res = data.result ?? {};
+      const events = [];
+      if (res.status === "ERROR") {
+        events.push({
+          type: "error",
+          content: typeof res.error === "string" ? res.error : "AGY turn error"
+        });
+      } else {
+        events.push({ type: "result", subtype: "success" });
+      }
+      if (res.usage && typeof res.usage === "object") {
+        const usage = res.usage;
+        events.push({
+          type: "token_usage",
+          usage: {
+            inputTokens: typeof usage.input_tokens === "number" ? usage.input_tokens : typeof usage.inputTokens === "number" ? usage.inputTokens : null,
+            cachedInputTokens: typeof usage.cache_read_input_tokens === "number" ? usage.cache_read_input_tokens : typeof usage.cachedInputTokens === "number" ? usage.cachedInputTokens : null,
+            outputTokens: typeof usage.output_tokens === "number" ? usage.output_tokens : typeof usage.outputTokens === "number" ? usage.outputTokens : null
+          }
+        });
+      }
+      events.push({ type: "turn_completed" });
+      return events;
+    }
+    return [];
+  }
+};
+
+// ../../packages/agent-client/dist/providers/agy/models.js
+var import_node_child_process6 = require("node:child_process");
+var import_node_util = require("node:util");
+var import_promises5 = require("node:fs/promises");
+var import_node_path6 = require("node:path");
+var execFileAsync = (0, import_node_util.promisify)(import_node_child_process6.execFile);
+var AGY_MODEL_CATALOG = [
+  { id: "gemini-3.8-flash-high", displayName: "Gemini 3.8 Flash (High)", description: "gemini-3.8-flash-high" },
+  { id: "gemini-3.8-flash-medium", displayName: "Gemini 3.8 Flash (Medium)", description: "gemini-3.8-flash-medium" },
+  { id: "gemini-3.8-flash-low", displayName: "Gemini 3.8 Flash (Low)", description: "gemini-3.8-flash-low" },
+  { id: "gemini-3.7-flash-high", displayName: "Gemini 3.7 Flash (High)", description: "gemini-3.7-flash-high" },
+  { id: "gemini-3.7-flash-medium", displayName: "Gemini 3.7 Flash (Medium)", description: "gemini-3.7-flash-medium" },
+  { id: "gemini-3.7-flash-low", displayName: "Gemini 3.7 Flash (Low)", description: "gemini-3.7-flash-low" },
+  { id: "gemini-3.6-flash-high", displayName: "Gemini 3.6 Flash (High)", description: "gemini-3.6-flash-high" },
+  { id: "gemini-3.6-flash-medium", displayName: "Gemini 3.6 Flash (Medium)", description: "gemini-3.6-flash-medium" },
+  { id: "gemini-3.6-flash-low", displayName: "Gemini 3.6 Flash (Low)", description: "gemini-3.6-flash-low" },
+  { id: "gemini-3.1-pro-high", displayName: "Gemini 3.1 Pro (High)", description: "gemini-3.1-pro-high" },
+  { id: "gemini-3.1-pro-low", displayName: "Gemini 3.1 Pro (Low)", description: "gemini-3.1-pro-low" },
+  { id: "claude-sonnet-4-6", displayName: "Claude Sonnet 4.6 (Thinking)", description: "claude-sonnet-4-6" },
+  { id: "claude-opus-4-6-thinking", displayName: "Claude Opus 4.6 (Thinking)", description: "claude-opus-4-6-thinking" },
+  { id: "gpt-oss-120b-medium", displayName: "GPT-OSS 120B (Medium)", description: "gpt-oss-120b-medium" }
+];
+var AGY_MODELS = AGY_MODEL_CATALOG.map((entry) => entry.id);
+function agyModelCatalog() {
+  return AGY_MODEL_CATALOG.map((entry) => ({
+    id: entry.id,
+    displayName: entry.displayName,
+    description: entry.description,
+    isDefault: entry.id === "gemini-3.1-pro-high"
+  }));
+}
+var MODEL_ID_REGEX2 = /^[a-zA-Z0-9][a-zA-Z0-9._-]{1,63}$/;
+function parseAgyModelsOutput(output3) {
+  const lines2 = output3.split(/\r?\n/);
+  const models = [];
+  for (const raw of lines2) {
+    const line = raw.trim();
+    if (!line)
+      continue;
+    if (/^(Fetching|Warning|Error)/i.test(line))
+      continue;
+    const parts = line.split(/\t+|\s{2,}/).map((p) => p.trim()).filter(Boolean);
+    if (parts.length < 1)
+      continue;
+    const id = parts[0];
+    if (!MODEL_ID_REGEX2.test(id)) {
+      console.warn(`[agy:models] skipping malformed model id: ${id}`);
+      continue;
+    }
+    const displayName = parts[1] ?? id;
+    const description = parts[2] ?? displayName;
+    models.push({
+      id,
+      displayName,
+      description,
+      isDefault: id === "gemini-3.1-pro-high"
+    });
+  }
+  return models;
+}
+var cachedModels = null;
+var CACHE_TTL_MS = 3e4;
+async function fetchAgyModels(opts) {
+  const now = Date.now();
+  if (!opts?.bypassCache && cachedModels && cachedModels.expiresAt > now) {
+    return cachedModels.models;
+  }
+  let executable = "agy";
+  const customPath = process.env.MRRLIN_AGY_PATH?.trim();
+  if (customPath) {
+    try {
+      if ((0, import_node_path6.basename)(customPath) === "agy") {
+        await (0, import_promises5.access)(customPath);
+        executable = customPath;
+      }
+    } catch {
+    }
+  }
+  try {
+    const { stdout } = await execFileAsync(executable, ["models"], {
+      timeout: 1e4,
+      maxBuffer: 1024 * 1024
+    });
+    const parsed = parseAgyModelsOutput(stdout);
+    if (parsed.length > 0) {
+      cachedModels = { expiresAt: now + CACHE_TTL_MS, models: parsed };
+      return parsed;
+    }
+    console.warn("[agy:models] fetchAgyModels succeeded but returned no models, falling back to static catalog");
+  } catch (error51) {
+    console.warn("[agy:models] fetchAgyModels failed, falling back to static catalog", error51);
+  }
+  const fallback = agyModelCatalog();
+  cachedModels = { expiresAt: now + CACHE_TTL_MS, models: fallback };
+  return fallback;
+}
+
 // ../../packages/agent-client/dist/providers/agy/adapter.js
 var AgyProviderAdapter = class {
   id = "agy";
   capabilities() {
     return AGENT_CAPABILITIES.agy;
   }
-  // Stub adapter: real process spawning and JSONL stdio streaming will be implemented in agy-stdio-streaming
   async acquireWarm() {
-    return {
-      startThread: () => Promise.resolve({ threadId: "mock-thread-id" }),
-      resumeThread: () => Promise.resolve({ threadId: "mock-thread-id" }),
-      startTurn: () => Promise.resolve({ turnId: "mock-turn-id" }),
-      interruptTurn: () => Promise.resolve(),
-      onEvent: () => () => {
-      },
-      onActivity: () => () => {
-      },
-      listModels: () => Promise.resolve([]),
-      readRateLimits: () => Promise.resolve(null)
-    };
+    return new AgyAgentHandle();
   }
   releaseWarm() {
   }
 };
+function permissionModeFor2(sandbox, approvalPolicy) {
+  if (sandbox === "read-only") {
+    return { permissionMode: "plan" };
+  }
+  if (sandbox === "workspace-write") {
+    return { permissionMode: "acceptEdits" };
+  }
+  if (sandbox === "danger-full-access" || approvalPolicy === "never") {
+    return { permissionMode: "bypassPermissions" };
+  }
+  return { permissionMode: "acceptEdits" };
+}
+var AgyAgentHandle = class {
+  processes = /* @__PURE__ */ new Map();
+  mappers = /* @__PURE__ */ new Map();
+  async startThread(params) {
+    const { permissionMode } = permissionModeFor2(params.sandbox, params.approvalPolicy);
+    const child = new AgyProcess({
+      mode: { kind: "new" },
+      permissionMode,
+      model: params.model,
+      cwd: params.cwd
+    });
+    this.processes.set(child.sessionId, child);
+    this.mappers.set(child.sessionId, new AgyBridgeEventMapper());
+    return { threadId: child.sessionId };
+  }
+  async resumeThread(threadId, params) {
+    const existing = this.processes.get(threadId);
+    if (existing) {
+      await existing.dispose().catch(() => {
+      });
+    }
+    const { permissionMode } = permissionModeFor2(params.sandbox, params.approvalPolicy);
+    const child = new AgyProcess({
+      mode: { kind: "resume", resumeId: threadId },
+      permissionMode,
+      model: params.model,
+      cwd: params.cwd
+    });
+    this.processes.set(threadId, child);
+    this.mappers.set(threadId, new AgyBridgeEventMapper());
+    return { threadId: child.sessionId };
+  }
+  async startTurn(threadId, input) {
+    const child = this.requireProcess(threadId);
+    const text = input.filter((block) => block.type === "text").map((block) => block.text).join("\n");
+    child.sendTurn(text);
+    return { turnId: void 0 };
+  }
+  async interruptTurn(threadId) {
+    const child = this.processes.get(threadId);
+    if (child) {
+      await child.dispose().catch(() => {
+      });
+      this.processes.delete(threadId);
+      this.mappers.delete(threadId);
+    }
+  }
+  onEvent(threadId, handler) {
+    const child = this.requireProcess(threadId);
+    const mapper = this.mappers.get(threadId);
+    if (!mapper)
+      throw new Error(`AgyAgentHandle.onEvent: no mapper for thread ${threadId}`);
+    return child.onLine((parsed) => {
+      for (const event of mapper.mapLine(parsed, threadId))
+        handler(event);
+    });
+  }
+  onActivity(threadId, handler) {
+    const child = this.requireProcess(threadId);
+    return child.onActivity(handler);
+  }
+  async listModels() {
+    return fetchAgyModels();
+  }
+  async readRateLimits() {
+    return null;
+  }
+  requireProcess(threadId) {
+    const child = this.processes.get(threadId);
+    if (!child)
+      throw new Error(`AgyAgentHandle: no active process for thread ${threadId}`);
+    return child;
+  }
+};
 
 // ../../packages/agent-client/dist/registry.js
 var KNOWN_PROVIDERS = { codex: true, claude: true, agy: true };
@@ -40475,7 +40962,7 @@ function resolveProvider(env, persisted) {
 }
 
 // ../../packages/agent-client/dist/providers/codex/exec.js
-var import_node_child_process5 = require("node:child_process");
+var import_node_child_process7 = require("node:child_process");
 
 // ../../packages/agent-client/dist/exec-usage.js
 function readCount2(source, ...keys) {
@@ -40589,7 +41076,7 @@ function firstString(...values) {
   return null;
 }
 function runCodexExec(input, deps) {
-  const spawn4 = deps?.spawn ?? import_node_child_process5.spawn;
+  const spawn5 = deps?.spawn ?? import_node_child_process7.spawn;
   const executable = input.codexExecutable ?? "codex";
   const sandbox = input.sandbox ?? "read-only";
   const fullPrompt = input.developerInstructions.trim() ? `${input.developerInstructions.trim()}
@@ -40626,7 +41113,7 @@ ${input.prompt}` : input.prompt;
     };
     let child;
     try {
-      child = spawn4(executable, args, options);
+      child = spawn5(executable, args, options);
     } catch (err) {
       finish({ ok: false, error: `Failed to spawn codex exec: ${errMessage(err)}` });
       return;
@@ -40667,9 +41154,9 @@ function errMessage(err) {
 }
 
 // ../../packages/agent-client/dist/providers/claude/exec.js
-var import_node_child_process6 = require("node:child_process");
+var import_node_child_process8 = require("node:child_process");
 function runClaudeExec(input, deps) {
-  const spawn4 = deps?.spawn ?? import_node_child_process6.spawn;
+  const spawn5 = deps?.spawn ?? import_node_child_process8.spawn;
   const executable = input.codexExecutable ?? "claude";
   const args = ["--print", "--output-format", "json", "--strict-mcp-config"];
   if (input.sandbox === "read-only") {
@@ -40704,7 +41191,7 @@ function runClaudeExec(input, deps) {
     };
     let child;
     try {
-      child = spawn4(executable, args, options);
+      child = spawn5(executable, args, options);
     } catch (err) {
       finish({ ok: false, error: `Failed to spawn ${executable} exec: ${errMessage2(err)}` });
       return;
@@ -40784,10 +41271,34 @@ function runAgentExec(input, deps, persistedProvider) {
 // ../../packages/agent-client/dist/resolved-seat.js
 var CODEX_STRONG_MODEL_CONSTANT = "gpt-5.6-terra";
 var CLAUDE_STRONG_MODEL_CONSTANT = "sonnet";
+var AGY_STRONG_MODEL_CONSTANT = "gemini-3.1-pro-high";
 var CODEX_WEAK_MODEL_CONSTANT = "codex-gpt-5.4-mini";
 var CLAUDE_WEAK_MODEL_CONSTANT = "haiku";
+var AGY_WEAK_MODEL_CONSTANT = "gemini-3.6-flash-low";
 var CODEX_STRONG_MODEL_ENV = "MRRLIN_CODEX_STRONG_MODEL";
 var CLAUDE_STRONG_MODEL_ENV = "MRRLIN_CLAUDE_STRONG_MODEL";
+var AGY_STRONG_MODEL_ENV = "MRRLIN_AGY_STRONG_MODEL";
+function strongConstantFor(providerId) {
+  if (providerId === "codex")
+    return CODEX_STRONG_MODEL_CONSTANT;
+  if (providerId === "claude")
+    return CLAUDE_STRONG_MODEL_CONSTANT;
+  return AGY_STRONG_MODEL_CONSTANT;
+}
+function weakConstantFor(providerId) {
+  if (providerId === "codex")
+    return CODEX_WEAK_MODEL_CONSTANT;
+  if (providerId === "claude")
+    return CLAUDE_WEAK_MODEL_CONSTANT;
+  return AGY_WEAK_MODEL_CONSTANT;
+}
+function strongEnvVarFor(providerId) {
+  if (providerId === "codex")
+    return CODEX_STRONG_MODEL_ENV;
+  if (providerId === "claude")
+    return CLAUDE_STRONG_MODEL_ENV;
+  return AGY_STRONG_MODEL_ENV;
+}
 function logFallback(providerId, tier, source, value) {
   console.error(`[resolved-seat] provider=${providerId} ${tier}=${value} (source: ${source})`);
 }
@@ -40801,12 +41312,22 @@ function pickStrongModelFromList(models) {
   return models[0]?.id ?? null;
 }
 function pickWeakModelFromList(models, strongModel) {
-  const miniModel = models.find((m) => {
+  const preferredWeak = models.find((m) => {
     const id = m.id.toLowerCase();
-    return id.includes("mini") || id.includes("weak") || id.includes("small");
+    if (id === strongModel.toLowerCase())
+      return false;
+    return /(^|[-_])(mini|weak|small)([-_]|$)/i.test(id) || id.includes("flash-low") || /(^|[-_])flash([-_]|$)/i.test(id);
   });
-  if (miniModel && miniModel.id !== strongModel)
-    return miniModel.id;
+  if (preferredWeak)
+    return preferredWeak.id;
+  const fallbackLow = models.find((m) => {
+    const id = m.id.toLowerCase();
+    if (id === strongModel.toLowerCase())
+      return false;
+    return /(^|[-_])low([-_]|$)/i.test(id);
+  });
+  if (fallbackLow)
+    return fallbackLow.id;
   return null;
 }
 async function mintResolvedSeat(provider, opts) {
@@ -40814,7 +41335,10 @@ async function mintResolvedSeat(provider, opts) {
   const providerId = provider.id;
   let strongModel;
   let weakModel;
-  const strongEnvValue = process.env[providerId === "codex" ? CODEX_STRONG_MODEL_ENV : CLAUDE_STRONG_MODEL_ENV]?.trim();
+  let pinRetired;
+  let retiredPin;
+  const strongEnvVar = strongEnvVarFor(providerId);
+  const strongEnvValue = process.env[strongEnvVar]?.trim();
   if (opts?.handle && capabilities.listsModels) {
     try {
       const models = await opts.handle.listModels();
@@ -40827,6 +41351,8 @@ async function mintResolvedSeat(provider, opts) {
           strongModel = picked;
           if (strongEnvValue) {
             logFallback(providerId, "strong", "live-default (env pin retired)", strongModel);
+            pinRetired = true;
+            retiredPin = strongEnvValue;
           }
         } else {
           throw new Error("empty model list");
@@ -40837,7 +41363,7 @@ async function mintResolvedSeat(provider, opts) {
         strongModel = strongEnvValue;
         logFallback(providerId, "strong", "env", strongModel);
       } else {
-        strongModel = providerId === "codex" ? CODEX_STRONG_MODEL_CONSTANT : CLAUDE_STRONG_MODEL_CONSTANT;
+        strongModel = strongConstantFor(providerId);
         logFallback(providerId, "strong", "constant", strongModel);
       }
     }
@@ -40845,7 +41371,7 @@ async function mintResolvedSeat(provider, opts) {
     strongModel = strongEnvValue;
     logFallback(providerId, "strong", "env", strongModel);
   } else {
-    strongModel = providerId === "codex" ? CODEX_STRONG_MODEL_CONSTANT : CLAUDE_STRONG_MODEL_CONSTANT;
+    strongModel = strongConstantFor(providerId);
     logFallback(providerId, "strong", "constant", strongModel);
   }
   if (providerId === "claude") {
@@ -40863,18 +41389,19 @@ async function mintResolvedSeat(provider, opts) {
           logFallback(providerId, "weak", "degenerate (weak=strong)", weakModel);
         }
       } catch {
-        weakModel = CODEX_WEAK_MODEL_CONSTANT;
+        weakModel = weakConstantFor(providerId);
         logFallback(providerId, "weak", "constant", weakModel);
       }
     } else {
-      weakModel = CODEX_WEAK_MODEL_CONSTANT;
+      weakModel = weakConstantFor(providerId);
       logFallback(providerId, "weak", "constant", weakModel);
     }
   }
   return {
     id: providerId,
     capabilities,
-    models: { strong: strongModel, weak: weakModel }
+    models: { strong: strongModel, weak: weakModel },
+    ...pinRetired ? { pinRetired: true, retiredPin } : {}
   };
 }
 
@@ -42355,17 +42882,17 @@ function createTurnLock() {
 }
 
 // src/self-update.ts
-var import_node_child_process8 = require("node:child_process");
-var import_node_crypto2 = require("node:crypto");
+var import_node_child_process10 = require("node:child_process");
+var import_node_crypto3 = require("node:crypto");
 var import_node_fs4 = require("node:fs");
-var import_node_path7 = __toESM(require("node:path"), 1);
+var import_node_path8 = __toESM(require("node:path"), 1);
 var import_semver3 = __toESM(require_semver2(), 1);
 
 // src/codex-auth-preflight.ts
-var import_node_child_process7 = require("node:child_process");
+var import_node_child_process9 = require("node:child_process");
 var import_node_fs3 = require("node:fs");
 var import_node_os6 = __toESM(require("node:os"), 1);
-var import_node_path6 = __toESM(require("node:path"), 1);
+var import_node_path7 = __toESM(require("node:path"), 1);
 var DEFAULT_CODEX_AUTH_MIN_TTL_SECONDS = 15 * 60;
 var DEFAULT_CODEX_AUTH_SMOKE_TIMEOUT_MS = 2e4;
 var DEFAULT_CODEX_AUTH_SMOKE_MODEL = "gpt-5.4-mini";
@@ -42384,7 +42911,7 @@ function codexAuthSmokeTimeoutMs(env = process.env) {
 function resolveCodexAuthPath(opts = {}) {
   const env = opts.env ?? process.env;
   const codexHome = env.CODEX_HOME?.trim();
-  return import_node_path6.default.join(codexHome || import_node_path6.default.join(opts.homeDir ?? import_node_os6.default.homedir(), ".codex"), "auth.json");
+  return import_node_path7.default.join(codexHome || import_node_path7.default.join(opts.homeDir ?? import_node_os6.default.homedir(), ".codex"), "auth.json");
 }
 function decodeJwtExpMs(token) {
   const parts = token.split(".");
@@ -42453,7 +42980,7 @@ function runCodexAuthRefreshSmokeForBridgeUpdate(opts = {}) {
     CODEX_AUTH_SMOKE_PROMPT
   ];
   const command = commandForSmoke(executable, model);
-  const execFileSync5 = opts.execFileSyncImpl ?? import_node_child_process7.execFileSync;
+  const execFileSync5 = opts.execFileSyncImpl ?? import_node_child_process9.execFileSync;
   try {
     execFileSync5(executable, args, {
       cwd,
@@ -42604,12 +43131,12 @@ function inspectCodexAuthForBridgeUpdate(opts = {}) {
 var BIN_NAME = "mrrlin-mcp";
 var SELF_UPDATE_AUTH_PREFLIGHT_OFFER_PREFIX = "[bridge:update:auth-preflight]";
 function resolveBinPath(opts) {
-  if (opts.argv1 && import_node_path7.default.basename(opts.argv1).includes("mrrlin")) {
+  if (opts.argv1 && import_node_path8.default.basename(opts.argv1).includes("mrrlin")) {
     return { path: opts.argv1, source: "argv" };
   }
   const whichSync = opts.whichSync ?? ((name) => {
     try {
-      return (0, import_node_child_process8.execFileSync)("which", [name], { encoding: "utf8", timeout: 3e3 }).trim() || null;
+      return (0, import_node_child_process10.execFileSync)("which", [name], { encoding: "utf8", timeout: 3e3 }).trim() || null;
     } catch {
       return null;
     }
@@ -42620,9 +43147,9 @@ function resolveBinPath(opts) {
     return { path: resolved, source: "which" };
   }
   const envPath = (opts.env ?? process.env).PATH ?? "";
-  for (const dir of envPath.split(import_node_path7.default.delimiter)) {
+  for (const dir of envPath.split(import_node_path8.default.delimiter)) {
     if (!dir) continue;
-    const candidate = import_node_path7.default.join(dir, BIN_NAME);
+    const candidate = import_node_path8.default.join(dir, BIN_NAME);
     if (existsSync5(candidate)) {
       return { path: candidate, source: "path-walk" };
     }
@@ -42648,7 +43175,7 @@ function readIntervalEnv(name, fallback) {
   return Number.isFinite(n) && n > 0 ? n : fallback;
 }
 function sha256(buf) {
-  return (0, import_node_crypto2.createHash)("sha256").update(buf).digest("hex");
+  return (0, import_node_crypto3.createHash)("sha256").update(buf).digest("hex");
 }
 function startSelfUpdate(deps) {
   const log = deps.log ?? (() => {
@@ -42940,17 +43467,17 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.4.65";
+var PKG_VERSION = "0.4.67";
 
 // src/api-base-url-migrate.ts
 var import_node_fs5 = __toESM(require("node:fs"), 1);
 var import_node_os7 = __toESM(require("node:os"), 1);
-var import_node_path9 = __toESM(require("node:path"), 1);
+var import_node_path10 = __toESM(require("node:path"), 1);
 
 // src/service-paths.ts
-var import_node_path8 = __toESM(require("node:path"), 1);
+var import_node_path9 = __toESM(require("node:path"), 1);
 function isWorktreePath(p) {
-  const norm = import_node_path8.default.normalize(p).split(import_node_path8.default.sep).join("/");
+  const norm = import_node_path9.default.normalize(p).split(import_node_path9.default.sep).join("/");
   return norm.includes("/.claude/worktrees/");
 }
 function resolveServiceCwd(opts) {
@@ -43008,7 +43535,7 @@ function defaultDeps(deps) {
   const home = deps.home ?? process.env.HOME ?? import_node_os7.default.homedir();
   return {
     home,
-    codexHome: deps.codexHome ?? process.env.CODEX_HOME?.trim() ?? import_node_path9.default.join(home, ".codex"),
+    codexHome: deps.codexHome ?? process.env.CODEX_HOME?.trim() ?? import_node_path10.default.join(home, ".codex"),
     readFile: deps.readFile ?? ((p) => import_node_fs5.default.readFileSync(p, "utf8")),
     // Temp-file + atomic rename so a concurrent `serve` and `director-bridge` startup can never
     // interleave partial writes into a config the next start has to parse. Note this normalizes the
@@ -43057,7 +43584,7 @@ function backupOnce(file2, text, deps) {
 }
 function migrateEcosystemConfig(deps = {}) {
   const d = defaultDeps(deps);
-  const file2 = import_node_path9.default.join(d.home, ".mrrlin", "ecosystem.config.cjs");
+  const file2 = import_node_path10.default.join(d.home, ".mrrlin", "ecosystem.config.cjs");
   if (!d.exists(file2)) return { file: file2, status: "absent" };
   const text = d.readFile(file2);
   if (!findRetiredHost(text) && !hasLiveLegacyStagingFlag(text, "js"))
@@ -43207,7 +43734,7 @@ ${envLines}
 }
 function migrateCodexConfig(deps = {}) {
   const d = defaultDeps(deps);
-  const file2 = import_node_path9.default.join(d.codexHome, "config.toml");
+  const file2 = import_node_path10.default.join(d.codexHome, "config.toml");
   if (!d.exists(file2)) return { file: file2, status: "absent" };
   const text = d.readFile(file2);
   const host = findRetiredHost(text);
@@ -43293,7 +43820,7 @@ $1`
 }
 function migrateClaudeConfig(deps = {}) {
   const d = defaultDeps(deps);
-  const file2 = import_node_path9.default.join(d.home, ".claude.json");
+  const file2 = import_node_path10.default.join(d.home, ".claude.json");
   if (!d.exists(file2)) return { file: file2, status: "absent" };
   const text = d.readFile(file2);
   let parsed;
@@ -43343,9 +43870,9 @@ function migrateRetiredApiBaseUrls(deps = {}) {
   const d = defaultDeps(deps);
   const results = [];
   const steps = [
-    { run: migrateEcosystemConfig, file: import_node_path9.default.join(d.home, ".mrrlin", "ecosystem.config.cjs") },
-    { run: migrateCodexConfig, file: import_node_path9.default.join(d.codexHome, "config.toml") },
-    { run: migrateClaudeConfig, file: import_node_path9.default.join(d.home, ".claude.json") }
+    { run: migrateEcosystemConfig, file: import_node_path10.default.join(d.home, ".mrrlin", "ecosystem.config.cjs") },
+    { run: migrateCodexConfig, file: import_node_path10.default.join(d.codexHome, "config.toml") },
+    { run: migrateClaudeConfig, file: import_node_path10.default.join(d.home, ".claude.json") }
   ];
   for (const step of steps) {
     try {
@@ -43372,7 +43899,7 @@ function migrateRetiredApiBaseUrls(deps = {}) {
 
 // src/bridge-health.ts
 var import_node_fs6 = require("node:fs");
-var import_node_path10 = __toESM(require("node:path"), 1);
+var import_node_path11 = __toESM(require("node:path"), 1);
 var SENTINEL_FILE_NAME = "bridge-health-circuit-breaker.json";
 var CRASH_WINDOW_MS = 60 * 60 * 1e3;
 var MAX_CRASHES_PER_WINDOW = 3;
@@ -43384,7 +43911,7 @@ function isCrashSentinel(value) {
   return typeof candidate.crashCount === "number" && Number.isInteger(candidate.crashCount) && candidate.crashCount >= 0 && typeof candidate.windowStartedAt === "string";
 }
 async function readCrashSentinel(stateDir, now = Date.now) {
-  const sentinelPath = import_node_path10.default.join(stateDir, SENTINEL_FILE_NAME);
+  const sentinelPath = import_node_path11.default.join(stateDir, SENTINEL_FILE_NAME);
   try {
     const raw = await import_node_fs6.promises.readFile(sentinelPath, "utf8");
     const parsed = JSON.parse(raw);
@@ -43395,7 +43922,7 @@ async function readCrashSentinel(stateDir, now = Date.now) {
 }
 async function writeCrashSentinel(stateDir, sentinel) {
   await import_node_fs6.promises.mkdir(stateDir, { recursive: true });
-  const sentinelPath = import_node_path10.default.join(stateDir, SENTINEL_FILE_NAME);
+  const sentinelPath = import_node_path11.default.join(stateDir, SENTINEL_FILE_NAME);
   const tmpPath = `${sentinelPath}.tmp-${process.pid}-${Math.random().toString(36).slice(2)}`;
   await import_node_fs6.promises.writeFile(tmpPath, JSON.stringify(sentinel), "utf8");
   await import_node_fs6.promises.rename(tmpPath, sentinelPath);
@@ -43724,16 +44251,16 @@ function startSchedulerTickLoop(deps) {
 }
 
 // src/retention/pruner.ts
-var import_promises4 = require("node:fs/promises");
-var import_node_path11 = __toESM(require("node:path"), 1);
+var import_promises6 = require("node:fs/promises");
+var import_node_path12 = __toESM(require("node:path"), 1);
 function protectedDayFloor(protectedSinceMs) {
   return new Date(protectedSinceMs).toISOString().slice(0, 10);
 }
 async function prune(stateDir, bounds) {
-  const logsDir = import_node_path11.default.join(stateDir, "logs");
+  const logsDir = import_node_path12.default.join(stateDir, "logs");
   let entries;
   try {
-    entries = await (0, import_promises4.readdir)(logsDir);
+    entries = await (0, import_promises6.readdir)(logsDir);
   } catch (err) {
     if (err?.code === "ENOENT") {
       await emitPruneLog(stateDir, [], {}, 0, null);
@@ -43746,8 +44273,8 @@ async function prune(stateDir, bounds) {
   for (const entry of entries) {
     const m = bridgeRe.exec(entry);
     if (!m?.[1]) continue;
-    const fullPath = import_node_path11.default.join(logsDir, entry);
-    const s = await (0, import_promises4.stat)(fullPath);
+    const fullPath = import_node_path12.default.join(logsDir, entry);
+    const s = await (0, import_promises6.stat)(fullPath);
     files.push({ day: m[1], size: s.size, fullPath });
   }
   files.sort((a, b) => a.day < b.day ? -1 : a.day > b.day ? 1 : 0);
@@ -43755,10 +44282,10 @@ async function prune(stateDir, bounds) {
   const reasonByDay = {};
   let bytesRemoved = 0;
   async function isDaySafeToDelete(day) {
-    const telemetryDir = import_node_path11.default.join(stateDir, "telemetry");
+    const telemetryDir = import_node_path12.default.join(stateDir, "telemetry");
     let telemetryEntries;
     try {
-      telemetryEntries = await (0, import_promises4.readdir)(telemetryDir);
+      telemetryEntries = await (0, import_promises6.readdir)(telemetryDir);
     } catch (err) {
       if (err?.code === "ENOENT") return true;
       throw err;
@@ -43771,9 +44298,9 @@ async function prune(stateDir, bounds) {
     }
     if (projectSlugs.length === 0) return true;
     for (const slug of projectSlugs) {
-      const markerPath = import_node_path11.default.join(telemetryDir, `.processed-${slug}-${day}`);
+      const markerPath = import_node_path12.default.join(telemetryDir, `.processed-${slug}-${day}`);
       try {
-        await (0, import_promises4.stat)(markerPath);
+        await (0, import_promises6.stat)(markerPath);
       } catch (err) {
         if (err?.code === "ENOENT") return false;
         throw err;
@@ -43794,7 +44321,7 @@ async function prune(stateDir, bounds) {
       i += 1;
       continue;
     }
-    await (0, import_promises4.unlink)(candidate.fullPath);
+    await (0, import_promises6.unlink)(candidate.fullPath);
     daysRemoved.push(candidate.day);
     reasonByDay[candidate.day] = "size";
     bytesRemoved += candidate.size;
@@ -43808,7 +44335,7 @@ async function prune(stateDir, bounds) {
     const fileDate = /* @__PURE__ */ new Date(`${info.day}T00:00:00Z`);
     const ageInDays = (now - fileDate.getTime()) / msPerDay;
     if (ageInDays > bounds.ageDays && !isProtected(info.day) && await isDaySafeToDelete(info.day)) {
-      await (0, import_promises4.unlink)(info.fullPath);
+      await (0, import_promises6.unlink)(info.fullPath);
       daysRemoved.push(info.day);
       reasonByDay[info.day] = "age";
       bytesRemoved += info.size;
@@ -43821,11 +44348,11 @@ async function prune(stateDir, bounds) {
   const budgetOvershootBytes = Math.max(0, totalSize2 - budgetBytes);
   await emitPruneLog(stateDir, daysRemoved, reasonByDay, bytesRemoved, oldestDayRemaining);
   if (daysRemoved.length > 0) {
-    const sessionsPath = import_node_path11.default.join(logsDir, ".sessions.json");
+    const sessionsPath = import_node_path12.default.join(logsDir, ".sessions.json");
     let sessionsObj = {};
     let fileExists = true;
     try {
-      sessionsObj = JSON.parse(await (0, import_promises4.readFile)(sessionsPath, "utf8"));
+      sessionsObj = JSON.parse(await (0, import_promises6.readFile)(sessionsPath, "utf8"));
     } catch (err) {
       if (err?.code === "ENOENT") {
         fileExists = false;
@@ -43836,25 +44363,25 @@ async function prune(stateDir, bounds) {
     if (fileExists) {
       for (const day of daysRemoved) Reflect.deleteProperty(sessionsObj, day);
       const tmpPath = `${sessionsPath}.tmp`;
-      await (0, import_promises4.writeFile)(tmpPath, JSON.stringify(sessionsObj));
-      await (0, import_promises4.rename)(tmpPath, sessionsPath);
+      await (0, import_promises6.writeFile)(tmpPath, JSON.stringify(sessionsObj));
+      await (0, import_promises6.rename)(tmpPath, sessionsPath);
     }
   }
   return { daysRemoved, reasonByDay, bytesRemoved, oldestDayRemaining, budgetOvershootBytes };
 }
 async function emitPruneLog(stateDir, daysRemoved, reasonByDay, bytesRemoved, oldestDayRemaining) {
-  const logsDir = import_node_path11.default.join(stateDir, "logs");
-  const logPath = import_node_path11.default.join(logsDir, ".pruned.jsonl");
-  await (0, import_promises4.mkdir)(logsDir, { recursive: true });
+  const logsDir = import_node_path12.default.join(stateDir, "logs");
+  const logPath = import_node_path12.default.join(logsDir, ".pruned.jsonl");
+  await (0, import_promises6.mkdir)(logsDir, { recursive: true });
   const record2 = { ts: Date.now(), dir: "logs", daysRemoved, reasonByDay, bytesRemoved, oldestDayRemaining };
-  await (0, import_promises4.appendFile)(logPath, `${JSON.stringify(record2)}
+  await (0, import_promises6.appendFile)(logPath, `${JSON.stringify(record2)}
 `);
 }
 
 // src/telemetry/turn-aggregator.ts
-var import_node_crypto3 = require("node:crypto");
-var import_promises5 = require("node:fs/promises");
-var import_node_path12 = require("node:path");
+var import_node_crypto4 = require("node:crypto");
+var import_promises7 = require("node:fs/promises");
+var import_node_path13 = require("node:path");
 var BRIDGE_FILE_RE = /^bridge-(\d{4}-\d{2}-\d{2})\.jsonl$/;
 var PLUMBING_COUNTER_KEY = {
   socket_close: "socketCloses",
@@ -43883,10 +44410,10 @@ function inheritSlug(seeds, index) {
   return (preceding ?? following)?.slug;
 }
 async function foldClosedDays(stateDir, today) {
-  const logsDir = (0, import_node_path12.join)(stateDir, "logs");
+  const logsDir = (0, import_node_path13.join)(stateDir, "logs");
   let entries;
   try {
-    entries = await (0, import_promises5.readdir)(logsDir);
+    entries = await (0, import_promises7.readdir)(logsDir);
   } catch {
     return;
   }
@@ -43895,7 +44422,7 @@ async function foldClosedDays(stateDir, today) {
     if (!m) continue;
     const day = m[1];
     if (day === today) continue;
-    const raw = await (0, import_promises5.readFile)((0, import_node_path12.join)(logsDir, entry), "utf8");
+    const raw = await (0, import_promises7.readFile)((0, import_node_path13.join)(logsDir, entry), "utf8");
     const groups = /* @__PURE__ */ new Map();
     let groupCounter = 0;
     for (const line of raw.split("\n")) {
@@ -44006,16 +44533,16 @@ async function foldClosedDays(stateDir, today) {
       rowsByProject.set(slug, rows);
     }
     if (rowsByProject.size === 0) continue;
-    const telemetryDir = (0, import_node_path12.join)(stateDir, "telemetry");
-    await (0, import_promises5.mkdir)(telemetryDir, { recursive: true });
+    const telemetryDir = (0, import_node_path13.join)(stateDir, "telemetry");
+    await (0, import_promises7.mkdir)(telemetryDir, { recursive: true });
     for (const [slug, rows] of rowsByProject) {
-      const finalPath = (0, import_node_path12.join)(telemetryDir, `rows-${slug}-${day}.jsonl`);
-      const tmpPath = `${finalPath}.tmp-${process.pid}-${(0, import_node_crypto3.randomBytes)(6).toString("hex")}`;
+      const finalPath = (0, import_node_path13.join)(telemetryDir, `rows-${slug}-${day}.jsonl`);
+      const tmpPath = `${finalPath}.tmp-${process.pid}-${(0, import_node_crypto4.randomBytes)(6).toString("hex")}`;
       try {
-        await (0, import_promises5.writeFile)(tmpPath, rows.map((r) => JSON.stringify(r)).join("\n") + "\n", "utf8");
-        await (0, import_promises5.rename)(tmpPath, finalPath);
+        await (0, import_promises7.writeFile)(tmpPath, rows.map((r) => JSON.stringify(r)).join("\n") + "\n", "utf8");
+        await (0, import_promises7.rename)(tmpPath, finalPath);
       } finally {
-        await (0, import_promises5.unlink)(tmpPath).catch(() => {
+        await (0, import_promises7.unlink)(tmpPath).catch(() => {
         });
       }
     }
@@ -44023,23 +44550,23 @@ async function foldClosedDays(stateDir, today) {
 }
 
 // src/telemetry/daily-uploader.ts
-var import_promises6 = require("node:fs/promises");
-var import_node_path17 = require("node:path");
+var import_promises8 = require("node:fs/promises");
+var import_node_path18 = require("node:path");
 
 // src/consensus/wiring.ts
-var import_node_crypto4 = __toESM(require("node:crypto"), 1);
+var import_node_crypto5 = __toESM(require("node:crypto"), 1);
 var import_node_fs9 = __toESM(require("node:fs"), 1);
-var import_node_path15 = __toESM(require("node:path"), 1);
+var import_node_path16 = __toESM(require("node:path"), 1);
 var import_node_url2 = require("node:url");
 
 // src/consensus/gate-usage-log.ts
 var import_node_fs7 = require("node:fs");
-var import_node_path13 = require("node:path");
+var import_node_path14 = require("node:path");
 function recordGateCall(stateDir, projectSlug, record2) {
   try {
-    const dir = (0, import_node_path13.join)(stateDir, "telemetry");
+    const dir = (0, import_node_path14.join)(stateDir, "telemetry");
     (0, import_node_fs7.mkdirSync)(dir, { recursive: true });
-    (0, import_node_fs7.appendFileSync)((0, import_node_path13.join)(dir, gateFileName(projectSlug, record2.day)), `${JSON.stringify(record2)}
+    (0, import_node_fs7.appendFileSync)((0, import_node_path14.join)(dir, gateFileName(projectSlug, record2.day)), `${JSON.stringify(record2)}
 `, "utf8");
   } catch {
   }
@@ -44907,15 +45434,15 @@ ${issuesBlock}`,
 // src/consensus/sterile-cwd.ts
 var import_node_fs8 = require("node:fs");
 var import_node_os8 = require("node:os");
-var import_node_path14 = require("node:path");
+var import_node_path15 = require("node:path");
 var sterileDir = null;
 function sterileCwd() {
-  sterileDir ??= (0, import_node_fs8.mkdtempSync)((0, import_node_path14.join)((0, import_node_os8.tmpdir)(), "mrrlin-gate-"));
+  sterileDir ??= (0, import_node_fs8.mkdtempSync)((0, import_node_path15.join)((0, import_node_os8.tmpdir)(), "mrrlin-gate-"));
   return sterileDir;
 }
 
 // src/consensus/code-gate-git.ts
-var import_node_child_process9 = require("node:child_process");
+var import_node_child_process11 = require("node:child_process");
 var DIFF_MAX_BYTES = 2e5;
 var FASTGATE_OUTPUT_MAX_BYTES = 16e3;
 var GIT_TIMEOUT_MS = 6e4;
@@ -44931,7 +45458,7 @@ var defaultRunCmd = (cmd, args, opts) => new Promise((resolve) => {
   };
   let child;
   try {
-    child = (0, import_node_child_process9.spawn)(cmd, args, {
+    child = (0, import_node_child_process11.spawn)(cmd, args, {
       cwd: opts.cwd,
       env: process.env,
       shell: false,
@@ -45146,15 +45673,15 @@ ${res.stdout}${res.stderr}`);
 var import_meta2 = {};
 function getPersonasDir() {
   if (typeof __dirname !== "undefined") {
-    return import_node_path15.default.join(__dirname, "consensus", "personas");
+    return import_node_path16.default.join(__dirname, "consensus", "personas");
   }
-  return import_node_path15.default.join(import_node_path15.default.dirname((0, import_node_url2.fileURLToPath)(import_meta2.url)), "personas");
+  return import_node_path16.default.join(import_node_path16.default.dirname((0, import_node_url2.fileURLToPath)(import_meta2.url)), "personas");
 }
 var personaCache = /* @__PURE__ */ new Map();
 function loadPersona(name) {
   const cached2 = personaCache.get(name);
   if (cached2 !== void 0) return cached2;
-  const content = import_node_fs9.default.readFileSync(import_node_path15.default.join(getPersonasDir(), `${name}.md`), "utf8");
+  const content = import_node_fs9.default.readFileSync(import_node_path16.default.join(getPersonasDir(), `${name}.md`), "utf8");
   personaCache.set(name, content);
   return content;
 }
@@ -45719,7 +46246,7 @@ You revise a deliverable to address the accepted issues so it satisfies the acce
         try {
           const diagnostics = Array.isArray(r["diagnostics"]) ? r["diagnostics"] : void 0;
           await client.appendExecutionArtifact(projectSlug, runId, {
-            id: `EA-${import_node_crypto4.default.randomUUID()}`,
+            id: `EA-${import_node_crypto5.default.randomUUID()}`,
             kind: "verification",
             payload: {
               source: "deliverable-gate",
@@ -45821,23 +46348,23 @@ async function gate(artifact, prose, ctx) {
 }
 
 // src/telemetry/installation-id.ts
-var import_node_crypto5 = require("node:crypto");
+var import_node_crypto6 = require("node:crypto");
 var import_node_fs10 = require("node:fs");
-var import_node_path16 = require("node:path");
+var import_node_path17 = require("node:path");
 var FILE_NAME = "installation-id";
 var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
 var cache = /* @__PURE__ */ new Map();
 function resolveInstallationId(stateDir) {
   const cached2 = cache.get(stateDir);
   if (cached2 !== void 0) return cached2;
-  const path25 = (0, import_node_path16.join)(stateDir, FILE_NAME);
+  const path25 = (0, import_node_path17.join)(stateDir, FILE_NAME);
   let id;
   try {
     id = (0, import_node_fs10.readFileSync)(path25, "utf8").trim();
     if (!UUID.test(id)) throw new Error("unusable");
   } catch {
-    id = (0, import_node_crypto5.randomUUID)();
-    (0, import_node_fs10.mkdirSync)((0, import_node_path16.dirname)(path25), { recursive: true });
+    id = (0, import_node_crypto6.randomUUID)();
+    (0, import_node_fs10.mkdirSync)((0, import_node_path17.dirname)(path25), { recursive: true });
     (0, import_node_fs10.writeFileSync)(path25, `${id}
 `, "utf8");
   }
@@ -45855,10 +46382,10 @@ function truncateCause(err) {
   return `${message.slice(0, MAX_CAUSE_CHARS - 3)}...`;
 }
 async function uploadPendingDays(stateDir, client, bridgeHealth, gateCtx) {
-  const telemetryDir = (0, import_node_path17.join)(stateDir, "telemetry");
+  const telemetryDir = (0, import_node_path18.join)(stateDir, "telemetry");
   let files;
   try {
-    files = await (0, import_promises6.readdir)(telemetryDir);
+    files = await (0, import_promises8.readdir)(telemetryDir);
   } catch (err) {
     if (err?.code === "ENOENT") return;
     throw err;
@@ -45871,24 +46398,24 @@ async function uploadPendingDays(stateDir, client, bridgeHealth, gateCtx) {
     const [, projectSlug, day] = match;
     const key = `${projectSlug}\0${day}`;
     const entry = discovered.get(key) ?? { projectSlug, day, rowsPath: null };
-    if (rowsMatch) entry.rowsPath = (0, import_node_path17.join)(telemetryDir, file2);
+    if (rowsMatch) entry.rowsPath = (0, import_node_path18.join)(telemetryDir, file2);
     discovered.set(key, entry);
   }
   const today = telemetryDay();
   const pending = [];
   const deferred = [];
   for (const { projectSlug, day, rowsPath } of discovered.values()) {
-    const markerPath = (0, import_node_path17.join)(telemetryDir, `.processed-${projectSlug}-${day}`);
+    const markerPath = (0, import_node_path18.join)(telemetryDir, `.processed-${projectSlug}-${day}`);
     if (rowsPath === null && day >= today) {
       try {
-        await (0, import_promises6.access)(markerPath);
+        await (0, import_promises8.access)(markerPath);
       } catch {
         deferred.push({ projectSlug, day });
       }
       continue;
     }
     try {
-      await (0, import_promises6.access)(markerPath);
+      await (0, import_promises8.access)(markerPath);
     } catch {
       pending.push({ projectSlug, day, rowsPath, markerPath });
     }
@@ -45898,10 +46425,10 @@ async function uploadPendingDays(stateDir, client, bridgeHealth, gateCtx) {
   const fullUnprocessed = [...pending.map((p) => ({ projectSlug: p.projectSlug, day: p.day })), ...deferred];
   pending.sort((a, b) => a.day.localeCompare(b.day));
   for (const cur of pending) {
-    const failurePath = (0, import_node_path17.join)(telemetryDir, `.failed-${cur.projectSlug}-${cur.day}.json`);
+    const failurePath = (0, import_node_path18.join)(telemetryDir, `.failed-${cur.projectSlug}-${cur.day}.json`);
     let failureState = null;
     try {
-      const data = await (0, import_promises6.readFile)(failurePath, "utf8");
+      const data = await (0, import_promises8.readFile)(failurePath, "utf8");
       failureState = JSON.parse(data);
     } catch {
       failureState = null;
@@ -45916,7 +46443,7 @@ async function uploadPendingDays(stateDir, client, bridgeHealth, gateCtx) {
       let raw = "";
       if (cur.rowsPath !== null) {
         try {
-          raw = await (0, import_promises6.readFile)(cur.rowsPath, "utf8");
+          raw = await (0, import_promises8.readFile)(cur.rowsPath, "utf8");
         } catch (err) {
           console.error(`uploadPendingDays: failed to read ${cur.rowsPath}`, err);
           throw err;
@@ -45932,7 +46459,7 @@ async function uploadPendingDays(stateDir, client, bridgeHealth, gateCtx) {
       }
       const gateCalls = [];
       try {
-        const rawGate = await (0, import_promises6.readFile)((0, import_node_path17.join)(telemetryDir, gateFileName(cur.projectSlug, cur.day)), "utf8");
+        const rawGate = await (0, import_promises8.readFile)((0, import_node_path18.join)(telemetryDir, gateFileName(cur.projectSlug, cur.day)), "utf8");
         for (const line of rawGate.split("\n")) {
           if (!line.trim()) continue;
           try {
@@ -45974,14 +46501,14 @@ async function uploadPendingDays(stateDir, client, bridgeHealth, gateCtx) {
     if (success2) {
       const tmpMarker = `${cur.markerPath}.tmp-${process.pid}-${Math.random().toString(36).slice(2)}`;
       try {
-        await (0, import_promises6.writeFile)(tmpMarker, "");
-        await (0, import_promises6.rename)(tmpMarker, cur.markerPath);
+        await (0, import_promises8.writeFile)(tmpMarker, "");
+        await (0, import_promises8.rename)(tmpMarker, cur.markerPath);
       } catch (err) {
         console.error(`uploadPendingDays: failed to write marker for ${cur.projectSlug}/${cur.day}`, err);
       }
       if (failureState) {
         try {
-          await (0, import_promises6.unlink)(failurePath);
+          await (0, import_promises8.unlink)(failurePath);
           console.log(`uploadPendingDays: partition ${cur.projectSlug}/${cur.day} recovered after ${failureState.failureCount + 1} consecutive failures`);
         } catch (err) {
           console.error(`uploadPendingDays: failed to remove failure state for ${cur.projectSlug}/${cur.day}`, err);
@@ -46009,8 +46536,8 @@ async function uploadPendingDays(stateDir, client, bridgeHealth, gateCtx) {
       };
       const tmpFailurePath = `${failurePath}.tmp-${process.pid}-${Math.random().toString(36).slice(2)}`;
       try {
-        await (0, import_promises6.writeFile)(tmpFailurePath, JSON.stringify(newFailureState));
-        await (0, import_promises6.rename)(tmpFailurePath, failurePath);
+        await (0, import_promises8.writeFile)(tmpFailurePath, JSON.stringify(newFailureState));
+        await (0, import_promises8.rename)(tmpFailurePath, failurePath);
       } catch (writeErr) {
         console.error(`uploadPendingDays: failed to write failure state for ${cur.projectSlug}/${cur.day}`, writeErr);
       }
@@ -46136,7 +46663,7 @@ async function collectAgentPoolSnapshot(deps) {
 }
 
 // src/external-agents-spawn.ts
-var import_node_child_process10 = require("node:child_process");
+var import_node_child_process12 = require("node:child_process");
 
 // src/external-agents-bin.ts
 function resolveExternalAgentsCliInvocation(override) {
@@ -46182,7 +46709,7 @@ function runExternalAgentsCli(args, opts) {
     };
     let spawned;
     try {
-      spawned = (0, import_node_child_process10.spawn)(command, [...prefixArgs, ...args], { stdio: stdioConfig });
+      spawned = (0, import_node_child_process12.spawn)(command, [...prefixArgs, ...args], { stdio: stdioConfig });
     } catch {
       done(1);
       return;
@@ -46294,14 +46821,14 @@ function startAgentPoolLoop(deps) {
 }
 
 // src/provider-readiness-loop.ts
-var import_node_child_process11 = require("node:child_process");
+var import_node_child_process13 = require("node:child_process");
 var DEFAULT_INTERVAL_MS3 = 6e4;
 function providerReadinessLoopDisabled(env = process.env) {
   return env["MRRLIN_BRIDGE_PROVIDER_READINESS_DISABLE"] === "1";
 }
 function defaultRunnerFor(command) {
   return (args) => {
-    const r = (0, import_node_child_process11.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3 });
+    const r = (0, import_node_child_process13.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3 });
     return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
   };
 }
@@ -46353,10 +46880,10 @@ function setSelectedProvider(value) {
 }
 
 // src/execution-consumer.ts
-var import_node_child_process13 = require("node:child_process");
-var import_node_crypto7 = __toESM(require("node:crypto"), 1);
-var import_node_path20 = __toESM(require("node:path"), 1);
-var import_node_util = require("node:util");
+var import_node_child_process15 = require("node:child_process");
+var import_node_crypto8 = __toESM(require("node:crypto"), 1);
+var import_node_path22 = __toESM(require("node:path"), 1);
+var import_node_util2 = require("node:util");
 
 // src/consensus/deliverable-gate-outcome.ts
 var MAX_DELIVERABLE_DIAGNOSTICS = 5;
@@ -46425,7 +46952,7 @@ function mapDeliverableGateResult(result) {
 }
 
 // src/async-tools/draft-spec.ts
-var import_node_crypto6 = require("node:crypto");
+var import_node_crypto7 = require("node:crypto");
 var DRAFT_SPEC_TOOL_NAME = "draft_task_spec";
 var SPECS_FOLDER = "Specs";
 var DRAFT_SPEC_TLDR_MAX_CHARS = 300;
@@ -46920,7 +47447,7 @@ function onComplete(outcome, input) {
     };
   }
   const summary = outcome.error;
-  const hash3 = (0, import_node_crypto6.createHash)("sha256").update(summary).digest("hex").slice(0, 10);
+  const hash3 = (0, import_node_crypto7.createHash)("sha256").update(summary).digest("hex").slice(0, 10);
   return {
     kind: "info",
     id: `II-sched-draft-failed-${input.taskId}-${hash3}`,
@@ -47650,18 +48177,18 @@ async function awaitTurnWithDeadline(opts) {
 }
 
 // src/worktree.ts
-var import_node_child_process12 = require("node:child_process");
+var import_node_child_process14 = require("node:child_process");
 var import_node_fs12 = require("node:fs");
 var import_node_os9 = require("node:os");
-var import_node_path19 = require("node:path");
+var import_node_path20 = require("node:path");
 
 // src/checkout-lock.ts
 var import_node_fs11 = require("node:fs");
-var import_node_path18 = require("node:path");
+var import_node_path19 = require("node:path");
 var import_proper_lockfile = __toESM(require_proper_lockfile(), 1);
 async function withCheckoutLock(locksDir, slug, fn) {
   (0, import_node_fs11.mkdirSync)(locksDir, { recursive: true });
-  const target = (0, import_node_path18.join)(locksDir, `${slug}.lock`);
+  const target = (0, import_node_path19.join)(locksDir, `${slug}.lock`);
   if (!(0, import_node_fs11.existsSync)(target)) (0, import_node_fs11.writeFileSync)(target, "");
   const release = await import_proper_lockfile.default.lock(target, {
     retries: { retries: 600, factor: 1, minTimeout: 100, maxTimeout: 100 },
@@ -47678,16 +48205,16 @@ async function withCheckoutLock(locksDir, slug, fn) {
 function worktreeBranch(runId) {
   return `mrrlin/run-${runId}`;
 }
-var defaultGitExec = (args, env) => (0, import_node_child_process12.execFileSync)("git", args, { encoding: "utf8", timeout: 3e4, env });
+var defaultGitExec = (args, env) => (0, import_node_child_process14.execFileSync)("git", args, { encoding: "utf8", timeout: 3e4, env });
 function git(checkout, args) {
-  return (0, import_node_child_process12.execFileSync)("git", ["-C", checkout, ...args], {
+  return (0, import_node_child_process14.execFileSync)("git", ["-C", checkout, ...args], {
     encoding: "utf8",
     timeout: 3e4,
     env: { ...process.env, GIT_TERMINAL_PROMPT: "0" }
   });
 }
 async function createRunWorktree(opts) {
-  const worktreePath = (0, import_node_path19.join)(opts.worktreeRoot, opts.slug, opts.runId);
+  const worktreePath = (0, import_node_path20.join)(opts.worktreeRoot, opts.slug, opts.runId);
   await withCheckoutLock(opts.locksDir, opts.slug, async () => {
     (0, import_node_fs12.mkdirSync)(opts.worktreeRoot, { recursive: true });
     try {
@@ -47764,8 +48291,8 @@ async function doPushRunBranch(opts, execGit) {
   if (localConfig.trim()) {
     throw new Error(`push aborted: agent-controlled git config present in worktree: ${localConfig.trim().split("\n")[0]}`);
   }
-  const dir = (0, import_node_fs12.mkdtempSync)((0, import_node_path19.join)((0, import_node_os9.tmpdir)(), "mrrlin-push-"));
-  const askpass = (0, import_node_path19.join)(dir, "askpass");
+  const dir = (0, import_node_fs12.mkdtempSync)((0, import_node_path20.join)((0, import_node_os9.tmpdir)(), "mrrlin-push-"));
+  const askpass = (0, import_node_path20.join)(dir, "askpass");
   try {
     (0, import_node_fs12.writeFileSync)(
       askpass,
@@ -47802,7 +48329,7 @@ async function sweepOrphanWorktrees(opts) {
     } catch {
       return opts.worktreeRoot;
     }
-  })() + import_node_path19.sep + opts.slug + import_node_path19.sep;
+  })() + import_node_path20.sep + opts.slug + import_node_path20.sep;
   await withCheckoutLock(opts.locksDir, opts.slug, async () => {
     const listing = git(opts.checkout, ["worktree", "list", "--porcelain"]);
     for (const block of listing.split("\n\n")) {
@@ -47962,6 +48489,132 @@ function effortDisabled(env = process.env) {
   return (env.MRRLIN_EXEC_EFFORT_DISABLE ?? "").trim() === "1";
 }
 
+// src/operator-token.ts
+var import_node_fs13 = require("node:fs");
+var import_node_os10 = __toESM(require("node:os"), 1);
+var import_node_path21 = __toESM(require("node:path"), 1);
+function operatorDir() {
+  const base = process.env.CODEX_HOME ? import_node_path21.default.join(process.env.CODEX_HOME, "mrrlin") : import_node_path21.default.join(import_node_os10.default.homedir(), ".mrrlin");
+  return base;
+}
+function operatorTokenPath() {
+  return import_node_path21.default.join(operatorDir(), "operator-token");
+}
+function readOperatorToken() {
+  try {
+    const token = (0, import_node_fs13.readFileSync)(operatorTokenPath(), "utf8").trim();
+    return token.length > 0 ? token : null;
+  } catch {
+    return null;
+  }
+}
+function persistOperatorToken(token) {
+  const dir = operatorDir();
+  (0, import_node_fs13.mkdirSync)(dir, { recursive: true, mode: 448 });
+  (0, import_node_fs13.writeFileSync)(operatorTokenPath(), `${token.trim()}
+`, { encoding: "utf8", mode: 384 });
+}
+function agentCredentialPath() {
+  return import_node_path21.default.join(operatorDir(), "agent-credential");
+}
+function persistAgentSecret(secret) {
+  const dir = operatorDir();
+  (0, import_node_fs13.mkdirSync)(dir, { recursive: true, mode: 448 });
+  (0, import_node_fs13.writeFileSync)(agentCredentialPath(), `${secret.trim()}
+`, { encoding: "utf8", mode: 384 });
+}
+function readAgentSecret() {
+  const fromEnv = process.env.MRRLIN_AGENT_SECRET?.trim();
+  if (fromEnv) return fromEnv;
+  try {
+    const raw = (0, import_node_fs13.readFileSync)(agentCredentialPath(), "utf8").trim();
+    return raw || void 0;
+  } catch {
+    return void 0;
+  }
+}
+
+// src/pin-retirement-notifier.ts
+var notifiedPins = /* @__PURE__ */ new Set();
+var inFlightPins = /* @__PURE__ */ new Set();
+function getDedupKey(providerId, pinnedModel) {
+  return pinnedModel ? `${providerId}:${pinnedModel}` : providerId;
+}
+async function notifyPinRetirement(info, opts) {
+  if (info.providerId === "claude") {
+    return;
+  }
+  const dedupKey = getDedupKey(info.providerId, info.pinnedModel);
+  if (notifiedPins.has(dedupKey) || inFlightPins.has(dedupKey)) {
+    return;
+  }
+  inFlightPins.add(dedupKey);
+  try {
+    const apiBaseUrl = opts?.apiBaseUrl ?? process.env.MRRLIN_API_BASE_URL ?? "http://127.0.0.1:8787";
+    const projectSlug = info.projectSlug ?? process.env.MRRLIN_REPORT_PROJECT_SLUG?.trim() ?? "mrrlin";
+    const token = opts?.token !== void 0 ? opts.token : process.env.MRRLIN_API_TOKEN?.trim() || readOperatorToken();
+    const fetchImpl = opts?.fetch ?? globalThis.fetch;
+    const endpoint = `${apiBaseUrl.replace(/\/+$/, "")}/projects/${encodeURIComponent(
+      projectSlug
+    )}/tasks`;
+    const headers = {
+      "content-type": "application/json",
+      "x-mrrlin-actor": "mrrlin-bridge",
+      "x-mrrlin-director-session-id": "pin-retirement-signal"
+    };
+    if (token) {
+      headers.authorization = `Bearer ${token}`;
+    }
+    const body = {
+      title: `[Bug] Retired strong-model pin: ${info.providerId} (${info.pinnedModel})`,
+      type: "bug",
+      category: "bug",
+      subcategory: "reported",
+      domain: "code",
+      impact: "medium",
+      notes: `The pinned strong model "${info.pinnedModel}" for provider "${info.providerId}" was not found in the provider's live model list (retired by provider). Falling back to live default model "${info.fallbackModel}". Please update the operator pin in ~/.mrrlin/ecosystem.config.cjs or the corresponding environment variable (MRRLIN_${info.providerId.toUpperCase()}_STRONG_MODEL).`,
+      operatorSeedRequest: `The pinned strong model "${info.pinnedModel}" for provider "${info.providerId}" has been retired. Fallback in use: "${info.fallbackModel}". Update the strong model pin.`,
+      autonomyLevel: "human_review",
+      autonomyReason: "Needs human review before automation."
+    };
+    const response = await fetchImpl(endpoint, {
+      method: "POST",
+      headers,
+      body: JSON.stringify(body)
+    });
+    if (response.ok) {
+      notifiedPins.add(dedupKey);
+    } else {
+      console.warn(
+        `[pin-retirement-notifier] received non-2xx status (${response.status}) from ${endpoint}`
+      );
+    }
+  } catch (err) {
+    console.warn(
+      `[pin-retirement-notifier] failed to report retirement for provider "${info.providerId}":`,
+      err
+    );
+  } finally {
+    inFlightPins.delete(dedupKey);
+  }
+}
+async function notifyPinRetirementIfRetired(seat, opts) {
+  if (!seat.pinRetired) {
+    return;
+  }
+  const pinnedModel = seat.retiredPin ?? (seat.id === "codex" ? process.env.MRRLIN_CODEX_STRONG_MODEL : seat.id === "claude" ? process.env.MRRLIN_CLAUDE_STRONG_MODEL : void 0) ?? "unknown";
+  const fallbackModel = seat.models?.strong ?? "unknown";
+  await notifyPinRetirement(
+    {
+      providerId: seat.id,
+      pinnedModel,
+      fallbackModel,
+      projectSlug: opts?.projectSlug
+    },
+    opts
+  );
+}
+
 // src/execution-consumer.ts
 var DEFAULT_STALE_SECONDS = 300;
 var DEFAULT_MAX_LEASE_RECLAIMS = 3;
@@ -48322,24 +48975,24 @@ function isBridgeGeneratedArtifact(artifact) {
   return typeof payload === "object" && payload !== null && "event" in payload;
 }
 function newArtifactId() {
-  return `EA-${import_node_crypto7.default.randomUUID()}`;
+  return `EA-${import_node_crypto8.default.randomUUID()}`;
 }
 var BLAST_RADIUS_FLOOR_PATTERNS = [/^supabase\/migrations\//, /^packages\/db\/src\/schema\.ts$/];
 function isBlastRadiusFloorPath(path25) {
   return BLAST_RADIUS_FLOOR_PATTERNS.some((re) => re.test(path25));
 }
-var execFileAsync = (0, import_node_util.promisify)(import_node_child_process13.execFile);
+var execFileAsync2 = (0, import_node_util2.promisify)(import_node_child_process15.execFile);
 async function defaultListRunDiffPaths(opts) {
   const parse6 = (stdout) => stdout.split("\n").map((line) => line.trim()).filter((line) => line.length > 0);
   try {
-    const { stdout } = await execFileAsync(
+    const { stdout } = await execFileAsync2(
       "git",
       ["-C", opts.worktreePath, "diff", "--name-only", `origin/${opts.defaultBranch}...HEAD`],
       { timeout: 3e4 }
     );
     return parse6(stdout);
   } catch {
-    const { stdout } = await execFileAsync(
+    const { stdout } = await execFileAsync2(
       "git",
       ["-C", opts.worktreePath, "diff", "--name-only", `${opts.defaultBranch}...HEAD`],
       { timeout: 3e4 }
@@ -48564,7 +49217,7 @@ async function driveRun(deps, projectSlug, runId) {
   if (!claimed) return;
   if (!claimed.leaseId) {
     await deps.client.createInboxItem(projectSlug, {
-      id: `II-${import_node_crypto7.default.randomUUID()}`,
+      id: `II-${import_node_crypto8.default.randomUUID()}`,
       kind: "handoff",
       taskId: claimed.taskId,
       body: `Execution run ${runId} was claimed but returned no leaseId. This indicates DB/API corruption and requires operator attention.`
@@ -48689,6 +49342,7 @@ async function driveRun(deps, projectSlug, runId) {
     resolvedProviderId = claimed.agentSeat;
   } else {
     const seat = await mintResolvedSeat(resolveProvider(process.env, getSelectedProvider()));
+    void notifyPinRetirementIfRetired(seat, { projectSlug });
     resolvedProviderId = seat.id;
     await deps.client.updateExecutionRun(projectSlug, runId, { agentSeat: seat.id }).catch((err) => {
       console.warn(
@@ -49781,7 +50435,7 @@ async function reconcileTaskAwaitingMerge(deps, projectSlug, task, runId, reason
   }
   try {
     await deps.client.createInboxItem(projectSlug, {
-      id: `II-${import_node_crypto7.default.randomUUID()}`,
+      id: `II-${import_node_crypto8.default.randomUUID()}`,
       kind: "handoff",
       taskId: task.id,
       body: `Task ${task.id} (${task.title}) still needs operator follow-up: ${reason}. Mrrlin could not move the task back to Handoff needed automatically.`
@@ -49816,7 +50470,7 @@ async function notifyOperatorHandoff(deps, projectSlug, task, runId, reason) {
   }
   try {
     await deps.client.createInboxItem(projectSlug, {
-      id: `II-${import_node_crypto7.default.randomUUID()}`,
+      id: `II-${import_node_crypto8.default.randomUUID()}`,
       kind: "handoff",
       taskId: task.id,
       body: `Execution run ${runId} for task ${task.id} (${task.title}) needs operator attention: ${reason}`
@@ -49956,8 +50610,8 @@ async function runBackstopSweep(deps, drive = (slug, id) => driveRun(deps, slug,
 function isRunRecoverableByThisBridge(run3, worktreeRoot) {
   if (!worktreeRoot) return true;
   if (!run3.worktreeId) return false;
-  const relative = import_node_path20.default.relative(import_node_path20.default.resolve(worktreeRoot), import_node_path20.default.resolve(run3.worktreeId));
-  return relative === "" || relative.length > 0 && !relative.startsWith("..") && !import_node_path20.default.isAbsolute(relative);
+  const relative = import_node_path22.default.relative(import_node_path22.default.resolve(worktreeRoot), import_node_path22.default.resolve(run3.worktreeId));
+  return relative === "" || relative.length > 0 && !relative.startsWith("..") && !import_node_path22.default.isAbsolute(relative);
 }
 async function deployGateHandoff(deps, projectSlug, task, runId, reason, leaseId) {
   await deps.client.updateExecutionRun(projectSlug, runId, { status: "failed", finishedAt: (/* @__PURE__ */ new Date()).toISOString(), leaseId: leaseId ?? void 0 }).catch(() => {
@@ -49975,7 +50629,7 @@ async function deployGateHandoff(deps, projectSlug, task, runId, reason, leaseId
   }).catch(() => {
   });
   await deps.client.createInboxItem(projectSlug, {
-    id: `II-${import_node_crypto7.default.randomUUID()}`,
+    id: `II-${import_node_crypto8.default.randomUUID()}`,
     kind: "handoff",
     taskId: task.id,
     body: `Deploy gate for run ${runId} (task ${task.id} \u2014 ${task.title}) needs operator attention: ${reason}`
@@ -49994,7 +50648,7 @@ function maxLeaseReclaims() {
 }
 
 // src/async-job-consumer.ts
-var import_node_crypto9 = __toESM(require("node:crypto"), 1);
+var import_node_crypto10 = __toESM(require("node:crypto"), 1);
 
 // src/async-tools/registry.ts
 var registry2 = /* @__PURE__ */ new Map();
@@ -50006,9 +50660,9 @@ function getAsyncToolDescriptor(toolName) {
 }
 
 // src/bridge-log.ts
-var import_node_fs13 = require("node:fs");
-var import_promises7 = require("node:fs/promises");
-var import_node_path21 = require("node:path");
+var import_node_fs14 = require("node:fs");
+var import_promises9 = require("node:fs/promises");
+var import_node_path23 = require("node:path");
 
 // src/redact.ts
 var REDACTED = "[REDACTED]";
@@ -50033,7 +50687,7 @@ function redact(input) {
 }
 
 // src/telemetry/projector.ts
-var import_node_crypto8 = require("node:crypto");
+var import_node_crypto9 = require("node:crypto");
 function isRecord3(x) {
   return typeof x === "object" && x !== null;
 }
@@ -50074,7 +50728,7 @@ function buildProjection(payload, type, ms, telemetry) {
       if (typeof exitCode === "number") proj.exitCode = exitCode;
       const status = tool.status;
       if (typeof status === "string" && status.trim() !== "") {
-        proj.statusHash = (0, import_node_crypto8.createHash)("sha256").update(status.trim().toLowerCase()).digest("hex").slice(0, 8);
+        proj.statusHash = (0, import_node_crypto9.createHash)("sha256").update(status.trim().toLowerCase()).digest("hex").slice(0, 8);
       }
       return proj;
     }
@@ -50284,14 +50938,14 @@ function resolvePromptsEnabled(env = process.env) {
 }
 function createBridgeLogger(stateDir, env = process.env) {
   if (!resolveBridgeLogEnabled(env)) return NOOP_LOGGER;
-  const logsDir = (0, import_node_path21.join)(stateDir, "logs");
+  const logsDir = (0, import_node_path23.join)(stateDir, "logs");
   try {
-    (0, import_node_fs13.mkdirSync)(logsDir, { recursive: true });
+    (0, import_node_fs14.mkdirSync)(logsDir, { recursive: true });
   } catch {
     return NOOP_LOGGER;
   }
   const includePrompts = resolvePromptsEnabled(env);
-  const fileFor = () => (0, import_node_path21.join)(logsDir, `bridge-${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}.jsonl`);
+  const fileFor = () => (0, import_node_path23.join)(logsDir, `bridge-${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}.jsonl`);
   const MAX_TRACKED_SESSIONS = 64;
   const contextSlugBySession = /* @__PURE__ */ new Map();
   const rememberContextSlug = (sessionId, payload) => {
@@ -50332,10 +50986,10 @@ function createBridgeLogger(stateDir, env = process.env) {
     return { isGap, isNewTurn };
   };
   const gainDay = (sessionId) => {
-    const sessionsPath = (0, import_node_path21.join)(logsDir, ".sessions.json");
+    const sessionsPath = (0, import_node_path23.join)(logsDir, ".sessions.json");
     let sessionsObj = {};
     try {
-      const parsed = JSON.parse((0, import_node_fs13.readFileSync)(sessionsPath, "utf8"));
+      const parsed = JSON.parse((0, import_node_fs14.readFileSync)(sessionsPath, "utf8"));
       if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) sessionsObj = parsed;
     } catch {
       sessionsObj = {};
@@ -50345,8 +50999,8 @@ function createBridgeLogger(stateDir, env = process.env) {
     if (idsToday.includes(sessionId)) return;
     sessionsObj[day] = [...idsToday, sessionId];
     const tmpPath = `${sessionsPath}.tmp`;
-    (0, import_node_fs13.writeFileSync)(tmpPath, JSON.stringify(sessionsObj));
-    (0, import_node_fs13.renameSync)(tmpPath, sessionsPath);
+    (0, import_node_fs14.writeFileSync)(tmpPath, JSON.stringify(sessionsObj));
+    (0, import_node_fs14.renameSync)(tmpPath, sessionsPath);
   };
   const write = (dir, rec) => {
     try {
@@ -50437,7 +51091,7 @@ function createBridgeLogger(stateDir, env = process.env) {
         ...recordingObligationUnresolved ? { recordingObligationUnresolved } : {},
         ...recordingObligationMultiResolve ? { recordingObligationMultiResolve } : {}
       }) + "\n";
-      (0, import_node_fs13.appendFileSync)(fileFor(), line);
+      (0, import_node_fs14.appendFileSync)(fileFor(), line);
       if (rec.sessionId !== null) gainDay(rec.sessionId);
     } catch {
     }
@@ -50450,10 +51104,10 @@ function createBridgeLogger(stateDir, env = process.env) {
   };
 }
 async function findSessionDays(stateDir, sessionId) {
-  const sessionsPath = (0, import_node_path21.join)(stateDir, "logs", ".sessions.json");
+  const sessionsPath = (0, import_node_path23.join)(stateDir, "logs", ".sessions.json");
   let sessionsObj;
   try {
-    const parsed = JSON.parse(await (0, import_promises7.readFile)(sessionsPath, "utf8"));
+    const parsed = JSON.parse(await (0, import_promises9.readFile)(sessionsPath, "utf8"));
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return [];
     sessionsObj = parsed;
   } catch {
@@ -50582,7 +51236,7 @@ async function driveAsyncJob(deps, projectSlug, jobId) {
   const delivery = descriptor2.onComplete(outcome, input);
   if (!delivery.suppressInbox) {
     await deps.client.createInboxItem(projectSlug, {
-      id: delivery.id ?? `II-${import_node_crypto9.default.randomUUID()}`,
+      id: delivery.id ?? `II-${import_node_crypto10.default.randomUUID()}`,
       kind: delivery.kind,
       body: delivery.body,
       ...delivery.taskId ? { taskId: delivery.taskId } : {},
@@ -50600,13 +51254,13 @@ async function deriveRequestedHash(client, toolName, input) {
   if (input.requestedHash) return input.requestedHash;
   if (toolName === "run_spec_consensus" && input.pageId) {
     const page = await client.getWikiPage(input.projectSlug, input.pageId);
-    return page.contentHash ?? import_node_crypto9.default.createHash("sha256").update(page.markdownBody).digest("hex");
+    return page.contentHash ?? import_node_crypto10.default.createHash("sha256").update(page.markdownBody).digest("hex");
   }
   if (toolName === "draft_task_spec" && input.taskId) {
     const task = await client.getTask(input.projectSlug, input.taskId);
-    return task.updatedAt ?? import_node_crypto9.default.createHash("sha256").update(JSON.stringify(task)).digest("hex");
+    return task.updatedAt ?? import_node_crypto10.default.createHash("sha256").update(JSON.stringify(task)).digest("hex");
   }
-  return import_node_crypto9.default.createHash("sha256").update(JSON.stringify(input)).digest("hex");
+  return import_node_crypto10.default.createHash("sha256").update(JSON.stringify(input)).digest("hex");
 }
 async function runAsyncBackstopSweep(deps, drive = (slug, jobId) => driveAsyncJob(deps, slug, jobId)) {
   const projects = await deps.client.listProjects();
@@ -50632,12 +51286,12 @@ async function runAsyncBackstopSweep(deps, drive = (slug, jobId) => driveAsyncJo
 }
 
 // src/state-dir.ts
-var import_node_os10 = __toESM(require("node:os"), 1);
-var import_node_path22 = __toESM(require("node:path"), 1);
+var import_node_os11 = __toESM(require("node:os"), 1);
+var import_node_path24 = __toESM(require("node:path"), 1);
 function resolveStateDir(env = process.env) {
   const codexHome = env.CODEX_HOME;
-  if (codexHome) return import_node_path22.default.join(codexHome, "mrrlin", "director-bridge");
-  return import_node_path22.default.join(import_node_os10.default.homedir(), ".mrrlin", "director-bridge");
+  if (codexHome) return import_node_path24.default.join(codexHome, "mrrlin", "director-bridge");
+  return import_node_path24.default.join(import_node_os11.default.homedir(), ".mrrlin", "director-bridge");
 }
 
 // src/consensus/deliverable-gate.ts
@@ -50892,56 +51546,11 @@ function agentIdleMs(provider) {
   return seconds * 1e3;
 }
 
-// src/operator-token.ts
-var import_node_fs14 = require("node:fs");
-var import_node_os11 = __toESM(require("node:os"), 1);
-var import_node_path23 = __toESM(require("node:path"), 1);
-function operatorDir() {
-  const base = process.env.CODEX_HOME ? import_node_path23.default.join(process.env.CODEX_HOME, "mrrlin") : import_node_path23.default.join(import_node_os11.default.homedir(), ".mrrlin");
-  return base;
-}
-function operatorTokenPath() {
-  return import_node_path23.default.join(operatorDir(), "operator-token");
-}
-function readOperatorToken() {
-  try {
-    const token = (0, import_node_fs14.readFileSync)(operatorTokenPath(), "utf8").trim();
-    return token.length > 0 ? token : null;
-  } catch {
-    return null;
-  }
-}
-function persistOperatorToken(token) {
-  const dir = operatorDir();
-  (0, import_node_fs14.mkdirSync)(dir, { recursive: true, mode: 448 });
-  (0, import_node_fs14.writeFileSync)(operatorTokenPath(), `${token.trim()}
-`, { encoding: "utf8", mode: 384 });
-}
-function agentCredentialPath() {
-  return import_node_path23.default.join(operatorDir(), "agent-credential");
-}
-function persistAgentSecret(secret) {
-  const dir = operatorDir();
-  (0, import_node_fs14.mkdirSync)(dir, { recursive: true, mode: 448 });
-  (0, import_node_fs14.writeFileSync)(agentCredentialPath(), `${secret.trim()}
-`, { encoding: "utf8", mode: 384 });
-}
-function readAgentSecret() {
-  const fromEnv = process.env.MRRLIN_AGENT_SECRET?.trim();
-  if (fromEnv) return fromEnv;
-  try {
-    const raw = (0, import_node_fs14.readFileSync)(agentCredentialPath(), "utf8").trim();
-    return raw || void 0;
-  } catch {
-    return void 0;
-  }
-}
-
 // src/thread-index.ts
 var import_node_fs15 = require("node:fs");
-var import_node_path24 = __toESM(require("node:path"), 1);
+var import_node_path25 = __toESM(require("node:path"), 1);
 function threadIndexPath(stateDir) {
-  return import_node_path24.default.join(stateDir, "threads.json");
+  return import_node_path25.default.join(stateDir, "threads.json");
 }
 function loadThreadIndex(stateDir, ttlMs, now) {
   const result = /* @__PURE__ */ new Map();
@@ -51106,10 +51715,10 @@ function createToolBusyClock(opts) {
 }
 
 // src/worker-token.ts
-var import_node_crypto10 = require("node:crypto");
+var import_node_crypto11 = require("node:crypto");
 var import_node_fs16 = require("node:fs");
 var import_node_os12 = __toESM(require("node:os"), 1);
-var import_node_path25 = __toESM(require("node:path"), 1);
+var import_node_path26 = __toESM(require("node:path"), 1);
 var DEFAULT_WORKER_PORT = 8792;
 function workerPort() {
   const raw = process.env.MRRLIN_WORKER_PORT;
@@ -51118,11 +51727,11 @@ function workerPort() {
   return Number.isFinite(parsed) && parsed > 0 ? parsed : DEFAULT_WORKER_PORT;
 }
 function workerDir() {
-  const base = process.env.CODEX_HOME ? import_node_path25.default.join(process.env.CODEX_HOME, "mrrlin") : import_node_path25.default.join(import_node_os12.default.homedir(), ".mrrlin");
-  return import_node_path25.default.join(base, "worker");
+  const base = process.env.CODEX_HOME ? import_node_path26.default.join(process.env.CODEX_HOME, "mrrlin") : import_node_path26.default.join(import_node_os12.default.homedir(), ".mrrlin");
+  return import_node_path26.default.join(base, "worker");
 }
 function workerTokenPath() {
-  return import_node_path25.default.join(workerDir(), "token");
+  return import_node_path26.default.join(workerDir(), "token");
 }
 function readWorkerToken() {
   try {
@@ -51137,17 +51746,17 @@ function readOrCreateWorkerToken() {
   if (existing) return existing;
   const dir = workerDir();
   (0, import_node_fs16.mkdirSync)(dir, { recursive: true, mode: 448 });
-  const token = (0, import_node_crypto10.randomBytes)(32).toString("hex");
+  const token = (0, import_node_crypto11.randomBytes)(32).toString("hex");
   (0, import_node_fs16.writeFileSync)(workerTokenPath(), `${token}
 `, { encoding: "utf8", mode: 384 });
   return token;
 }
 
 // src/remote-phone-relay.ts
-var import_node_events2 = require("node:events");
+var import_node_events3 = require("node:events");
 var import_node_fs17 = require("node:fs");
 var import_node_os13 = require("node:os");
-var import_node_path26 = require("node:path");
+var import_node_path27 = require("node:path");
 
 // ../../node_modules/.pnpm/@noble+hashes@1.3.3/node_modules/@noble/hashes/esm/cryptoNode.js
 var nc = __toESM(require("node:crypto"), 1);
@@ -54173,9 +54782,9 @@ var RelayClient = class {
     this.socket = null;
     this.nextHeartbeatAt = Number.POSITIVE_INFINITY;
     if (this.stopped || this.register === null) return;
-    const delay = this.backoff[Math.min(this.backoffIndex, this.backoff.length - 1)] ?? 0;
+    const delay2 = this.backoff[Math.min(this.backoffIndex, this.backoff.length - 1)] ?? 0;
     this.backoffIndex += 1;
-    this.reconnectAt = this.deps.now() + delay;
+    this.reconnectAt = this.deps.now() + delay2;
   }
   onMessage(data) {
     let frame;
@@ -54718,7 +55327,7 @@ var DirectorRelay = class {
 
 // src/remote-phone-relay.ts
 function loadOrCreateAgentDeviceKey() {
-  const path25 = (0, import_node_path26.join)((0, import_node_os13.homedir)(), ".mrrlin", "agent-device-key");
+  const path25 = (0, import_node_path27.join)((0, import_node_os13.homedir)(), ".mrrlin", "agent-device-key");
   try {
     const raw = JSON.parse((0, import_node_fs17.readFileSync)(path25, "utf8"));
     if (typeof raw.priv === "string" && typeof raw.pub === "string") {
@@ -54728,7 +55337,7 @@ function loadOrCreateAgentDeviceKey() {
   }
   const kp = generateIdentityKeyPair();
   try {
-    (0, import_node_fs17.mkdirSync)((0, import_node_path26.join)((0, import_node_os13.homedir)(), ".mrrlin"), { recursive: true });
+    (0, import_node_fs17.mkdirSync)((0, import_node_path27.join)((0, import_node_os13.homedir)(), ".mrrlin"), { recursive: true });
     (0, import_node_fs17.writeFileSync)(
       path25,
       JSON.stringify({ priv: toBase64Url(kp.privateKey), pub: toBase64Url(kp.publicKey) }),
@@ -54738,7 +55347,7 @@ function loadOrCreateAgentDeviceKey() {
   }
   return kp;
 }
-var AGENT_PAIRING_PATH = (0, import_node_path26.join)((0, import_node_os13.homedir)(), ".mrrlin", "agent-pairing.json");
+var AGENT_PAIRING_PATH = (0, import_node_path27.join)((0, import_node_os13.homedir)(), ".mrrlin", "agent-pairing.json");
 function loadAgentPairing() {
   try {
     const raw = JSON.parse((0, import_node_fs17.readFileSync)(AGENT_PAIRING_PATH, "utf8"));
@@ -54756,14 +55365,14 @@ function loadAgentPairing() {
 }
 function saveAgentPairing(record2) {
   try {
-    (0, import_node_fs17.mkdirSync)((0, import_node_path26.join)((0, import_node_os13.homedir)(), ".mrrlin"), { recursive: true });
+    (0, import_node_fs17.mkdirSync)((0, import_node_path27.join)((0, import_node_os13.homedir)(), ".mrrlin"), { recursive: true });
     (0, import_node_fs17.writeFileSync)(AGENT_PAIRING_PATH, JSON.stringify(record2), { mode: 384 });
   } catch {
   }
 }
 function runPhoneTurn(handler, directorSessionId, text, emit) {
   return new Promise((resolve) => {
-    const emitter = new import_node_events2.EventEmitter();
+    const emitter = new import_node_events3.EventEmitter();
     const fakeSocket = {
       on: (event, cb) => {
         emitter.on(event, cb);
@@ -54936,11 +55545,11 @@ async function renderPairingQrSvg(payload) {
 
 // src/checkout-registry.ts
 var import_node_fs18 = require("node:fs");
-var import_node_path27 = require("node:path");
+var import_node_path28 = require("node:path");
 var CheckoutRegistry = class {
   file;
   constructor(stateDir) {
-    this.file = (0, import_node_path27.join)(stateDir, "checkouts.json");
+    this.file = (0, import_node_path28.join)(stateDir, "checkouts.json");
     (0, import_node_fs18.mkdirSync)(stateDir, { recursive: true });
   }
   read() {
@@ -54997,7 +55606,7 @@ var CheckoutRegistry = class {
 };
 
 // src/checkout-handlers.ts
-var import_node_child_process14 = require("node:child_process");
+var import_node_child_process16 = require("node:child_process");
 var import_node_fs19 = require("node:fs");
 
 // src/git-remote-match.ts
@@ -55043,7 +55652,7 @@ function validateCheckoutPath(checkoutPath, repo) {
   }
   let remoteUrl;
   try {
-    remoteUrl = (0, import_node_child_process14.execFileSync)("git", ["-C", resolvedPath, "remote", "get-url", "origin"], {
+    remoteUrl = (0, import_node_child_process16.execFileSync)("git", ["-C", resolvedPath, "remote", "get-url", "origin"], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
       timeout: 15e3,
@@ -55094,11 +55703,11 @@ function checkoutStateData(projectSlug, entry, machineLabel) {
 }
 
 // src/executor-server.ts
-var import_node_child_process15 = require("node:child_process");
+var import_node_child_process17 = require("node:child_process");
 function defaultReadinessRunner(provider) {
   const command = provider === "claude" ? "claude" : "codex";
   return (args) => {
-    const r = (0, import_node_child_process15.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3, shell: true });
+    const r = (0, import_node_child_process17.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3, shell: true });
     return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
   };
 }
@@ -55341,7 +55950,7 @@ function extractVerificationSection(markdown) {
 // src/director-reseed.ts
 var import_node_fs20 = require("node:fs");
 var import_node_readline = require("node:readline");
-var import_node_path28 = require("node:path");
+var import_node_path29 = require("node:path");
 function estimateTokens(s) {
   return Buffer.byteLength(s, "utf8");
 }
@@ -55473,7 +56082,7 @@ async function readSessionRows(logsDir, files, sessionIds) {
   const lines2 = [];
   let missingFiles = 0;
   for (const f of files) {
-    const filePath = (0, import_node_path28.join)(logsDir, f);
+    const filePath = (0, import_node_path29.join)(logsDir, f);
     try {
       const stream = (0, import_node_fs20.createReadStream)(filePath, { encoding: "utf8" });
       const rl = (0, import_node_readline.createInterface)({ input: stream, crlfDelay: Infinity });
@@ -55501,10 +56110,10 @@ async function readSessionRows(logsDir, files, sessionIds) {
 // src/external-agents-scrub.ts
 var import_node_fs21 = __toESM(require("node:fs"), 1);
 var import_node_os14 = __toESM(require("node:os"), 1);
-var import_node_path29 = __toESM(require("node:path"), 1);
+var import_node_path30 = __toESM(require("node:path"), 1);
 var REDACTION = "[REDACTED]";
 var SHORT_VALUE_THRESHOLD = 8;
-var KEYS_ENV_PATH = () => import_node_path29.default.join(import_node_os14.default.homedir(), ".local", "state", "external-agents", "keys.env");
+var KEYS_ENV_PATH = () => import_node_path30.default.join(import_node_os14.default.homedir(), ".local", "state", "external-agents", "keys.env");
 var keysEnvCache = null;
 function readKeysEnv() {
   const filePath = KEYS_ENV_PATH();
@@ -55948,9 +56557,9 @@ function readKnownGptSlugsFromTomlFile(filePath) {
   return Array.from(raw.matchAll(/^\s*model\s*=\s*"([^"]+)"/gm)).map((match) => match[1]?.trim() ?? "").filter(isSelectableModelSlug);
 }
 function readCodexFallbackModels() {
-  const codexHome = process.env.CODEX_HOME?.trim() || import_node_path30.default.join(import_node_os15.default.homedir(), ".codex");
+  const codexHome = process.env.CODEX_HOME?.trim() || import_node_path31.default.join(import_node_os15.default.homedir(), ".codex");
   const models = /* @__PURE__ */ new Map();
-  const cachePath = import_node_path30.default.join(codexHome, "models_cache.json");
+  const cachePath = import_node_path31.default.join(codexHome, "models_cache.json");
   const cacheRaw = readTextIfExists(cachePath);
   if (cacheRaw) {
     try {
@@ -56000,7 +56609,7 @@ function readCodexFallbackModels() {
       );
     }
   }
-  for (const slug of readKnownGptSlugsFromTomlFile(import_node_path30.default.join(codexHome, "config.toml"))) {
+  for (const slug of readKnownGptSlugsFromTomlFile(import_node_path31.default.join(codexHome, "config.toml"))) {
     addBridgeModel(
       models,
       mapBridgeModel({
@@ -56014,11 +56623,11 @@ function readCodexFallbackModels() {
       })
     );
   }
-  const automationsDir = import_node_path30.default.join(codexHome, "automations");
+  const automationsDir = import_node_path31.default.join(codexHome, "automations");
   try {
     for (const entry of import_node_fs22.default.readdirSync(automationsDir, { withFileTypes: true })) {
       if (!entry.isDirectory()) continue;
-      for (const slug of readKnownGptSlugsFromTomlFile(import_node_path30.default.join(automationsDir, entry.name, "automation.toml"))) {
+      for (const slug of readKnownGptSlugsFromTomlFile(import_node_path31.default.join(automationsDir, entry.name, "automation.toml"))) {
         addBridgeModel(
           models,
           mapBridgeModel({
@@ -56038,13 +56647,13 @@ function readCodexFallbackModels() {
   return [...models.values()];
 }
 function selfUpdateInboxItemId(offeredVersion) {
-  if (!offeredVersion) return `II-MCPUPD-${(0, import_node_crypto11.randomUUID)()}`;
+  if (!offeredVersion) return `II-MCPUPD-${(0, import_node_crypto12.randomUUID)()}`;
   if (/^[A-Za-z0-9._-]+$/.test(offeredVersion)) return `II-MCPUPD-${offeredVersion}`;
-  const hash3 = import_node_crypto11.default.createHash("sha256").update(offeredVersion).digest("hex").slice(0, 10);
+  const hash3 = import_node_crypto12.default.createHash("sha256").update(offeredVersion).digest("hex").slice(0, 10);
   return `II-MCPUPD-${offeredVersion.replace(/[^A-Za-z0-9._-]/g, "-")}-${hash3}`;
 }
 function neutralCheckoutCwd(stateDir) {
-  const dir = import_node_path30.default.join(stateDir, "no-checkout");
+  const dir = import_node_path31.default.join(stateDir, "no-checkout");
   try {
     import_node_fs22.default.mkdirSync(dir, { recursive: true });
   } catch {
@@ -56520,7 +57129,7 @@ function resolveDefaultBranch(checkoutPath) {
   if (!checkoutPath) return "main";
   const runGit = (args) => {
     try {
-      return (0, import_node_child_process16.execFileSync)("git", ["-C", checkoutPath, ...args], {
+      return (0, import_node_child_process18.execFileSync)("git", ["-C", checkoutPath, ...args], {
         encoding: "utf8",
         stdio: ["ignore", "pipe", "ignore"],
         timeout: 15e3,
@@ -56670,7 +57279,7 @@ function createBridgeRequestListener(opts) {
         res.end(JSON.stringify({ ok: false, error: "Origin not allowed." }));
         return;
       }
-      const nonce = import_node_crypto11.default.randomBytes(16).toString("base64url");
+      const nonce = import_node_crypto12.default.randomBytes(16).toString("base64url");
       res.writeHead(200, { "content-type": "application/json" });
       res.end(JSON.stringify({ ok: true, wsUrl: `ws://${host}:${port}/ws`, token, nonce }));
       return;
@@ -56970,7 +57579,7 @@ function createBridgeMessageHandler(deps) {
       }
     }
     socket.on("message", async (data) => {
-      const spanId = import_node_crypto11.default.randomUUID();
+      const spanId = import_node_crypto12.default.randomUUID();
       if (logCtx) {
         logCtx.span.id = spanId;
         logCtx.span.at = Date.now();
@@ -57102,6 +57711,7 @@ function createBridgeMessageHandler(deps) {
           return;
         }
         const compactionSeat = await mintResolvedSeat(resolveProvider(process.env, getSelectedProvider()));
+        void notifyPinRetirementIfRetired(compactionSeat);
         const result = await deps.runCompaction({
           history,
           provider: compactionSeat.id,
@@ -57288,7 +57898,15 @@ function createBridgeMessageHandler(deps) {
           const bootstrapProvider = resolveProvider(process.env, getSelectedProvider());
           bootstrapProviderId = bootstrapProvider.id;
           const bootstrapCapabilities = bootstrapProvider.capabilities();
-          fallbackModels = bootstrapCapabilities.listsModels ? readCodexFallbackModels() : [];
+          const agyStaticFallback = bootstrapProviderId === "agy" && bootstrapCapabilities.modelCatalog.length > 0 ? bootstrapCapabilities.modelCatalog.map(
+            (entry) => mapBridgeModel({
+              id: entry.id,
+              model: entry.id,
+              displayName: entry.displayName,
+              description: entry.description
+            })
+          ).filter((m) => m !== null) : [];
+          fallbackModels = bootstrapProviderId === "codex" && bootstrapCapabilities.listsModels ? readCodexFallbackModels() : agyStaticFallback;
           if (!bootstrapCapabilities.listsModels) {
             const staticModels = /* @__PURE__ */ new Map();
             for (const entry of bootstrapCapabilities.modelCatalog) {
@@ -57473,6 +58091,7 @@ function createBridgeMessageHandler(deps) {
       }
       pendingTurnSessions.add(directorSessionId);
       const turnSeat = await mintResolvedSeat(resolveProvider(process.env, getSelectedProvider()));
+      void notifyPinRetirementIfRetired(turnSeat);
       const turnProviderCapabilities = turnSeat.capabilities;
       const codexClient = await deps.acquireCodex(turnSeat.id);
       let thread = deps.threads.get(directorSessionId);
@@ -57587,7 +58206,7 @@ function createBridgeMessageHandler(deps) {
       thread.inFlight = true;
       pendingTurnSessions.delete(directorSessionId);
       thread.replay = createReplayBuffer({
-        turnId: (0, import_node_crypto11.randomUUID)(),
+        turnId: (0, import_node_crypto12.randomUUID)(),
         spanId,
         ...deps.retentionMs !== void 0 ? { retentionMs: deps.retentionMs } : {},
         ...deps.ackLingerMs !== void 0 ? { ackLingerMs: deps.ackLingerMs } : {}
@@ -57990,7 +58609,7 @@ function parseConfig() {
 }
 function scanForOtherBridges() {
   try {
-    const result = (0, import_node_child_process16.spawnSync)("pgrep", ["-f", "mrrlin-mcp director-bridge"], {
+    const result = (0, import_node_child_process18.spawnSync)("pgrep", ["-f", "mrrlin-mcp director-bridge"], {
       encoding: "utf8"
     });
     if (result.status !== 0) return [];
@@ -58166,8 +58785,8 @@ async function startDirectorBridge() {
     codexCwd: config2.codexCwd,
     codexExecutable: config2.codexExecutable,
     checkoutRegistry,
-    worktreeRoot: import_node_path30.default.join(config2.stateDir, "worktrees"),
-    locksDir: import_node_path30.default.join(config2.stateDir, "locks"),
+    worktreeRoot: import_node_path31.default.join(config2.stateDir, "worktrees"),
+    locksDir: import_node_path31.default.join(config2.stateDir, "locks"),
     // Wire the executor server for code-execution runs. Each run gets its own provider process
     // (app-server for codex, a resident CLI child for claude) at the run worktree, running
     // UNRESTRICTED from the real operator config (owner no-sandbox decision — auth + mrrlin MCP
@@ -58211,7 +58830,7 @@ async function startDirectorBridge() {
         // egressDomains is retained in the seam signature (verification-turn.ts still computes the
         // env host) but no longer constrains anything — the executor is unrestricted.
         startSandbox: async (_egressDomains, providerId) => {
-          const cwd = import_node_fs22.default.mkdtempSync(import_node_path30.default.join(import_node_os15.default.tmpdir(), "mrrlin-verify-"));
+          const cwd = import_node_fs22.default.mkdtempSync(import_node_path31.default.join(import_node_os15.default.tmpdir(), "mrrlin-verify-"));
           let executor;
           try {
             executor = await startExecutorServer({ worktree: cwd, provider: providerId });
@@ -58261,7 +58880,7 @@ async function startDirectorBridge() {
   };
   const sessionSinks = createSessionSinkRegistry();
   const tombstones = /* @__PURE__ */ new Map();
-  const bridgeInstanceId = (0, import_node_crypto11.randomUUID)();
+  const bridgeInstanceId = (0, import_node_crypto12.randomUUID)();
   const asyncConsumerDeps = {
     client,
     run: wrappedTurnLock.run,
@@ -58439,7 +59058,7 @@ async function startDirectorBridge() {
     }
     const files = dayFilesInWindow(/* @__PURE__ */ new Date(), reseedWindowMs);
     const sessionIds = [args.directorSessionId, ...args.priorSessionIds];
-    const { lines: lines2, missingFiles } = await readSessionRows(import_node_path30.default.join(config2.stateDir, "logs"), files, sessionIds);
+    const { lines: lines2, missingFiles } = await readSessionRows(import_node_path31.default.join(config2.stateDir, "logs"), files, sessionIds);
     const { items, skipped: skipped2 } = extractItems(lines2, sessionIds);
     if (items.length === 0) return refuse2("no-rows");
     const budget = Math.max(0, Math.min(config2.reseedMaxTokens, config2.turnMaxTokens - args.otherBytes));
@@ -58546,7 +59165,7 @@ async function startDirectorBridge() {
   const bridgeLogger = createBridgeLogger(config2.stateDir, process.env);
   let bridgeBinShaShort = "unknown00000";
   try {
-    bridgeBinShaShort = import_node_crypto11.default.createHash("sha256").update(import_node_fs22.default.readFileSync(process.argv[1] ?? "")).digest("hex").slice(0, 12);
+    bridgeBinShaShort = import_node_crypto12.default.createHash("sha256").update(import_node_fs22.default.readFileSync(process.argv[1] ?? "")).digest("hex").slice(0, 12);
   } catch {
   }
   attachBridgeWss(server, {
@@ -58682,8 +59301,8 @@ async function startDirectorBridge() {
       );
       void runOrphanWorktreeSweep(client, {
         checkoutRegistry,
-        worktreeRoot: import_node_path30.default.join(config2.stateDir, "worktrees"),
-        locksDir: import_node_path30.default.join(config2.stateDir, "locks")
+        worktreeRoot: import_node_path31.default.join(config2.stateDir, "worktrees"),
+        locksDir: import_node_path31.default.join(config2.stateDir, "locks")
       });
       {
         const { retainedBuffers, retainedBytes, tombstonesRemoved } = sweepReplayBuffers(threads, tombstones, {
@@ -58986,7 +59605,7 @@ function timingSafeTokenEqual(provided, expected) {
   const a = Buffer.from(provided);
   const b = Buffer.from(expected);
   if (a.length !== b.length) return false;
-  return import_node_crypto11.default.timingSafeEqual(a, b);
+  return import_node_crypto12.default.timingSafeEqual(a, b);
 }
 function readDispatchBody(req) {
   return new Promise((resolve, reject) => {
@@ -59008,14 +59627,14 @@ function readDispatchBody(req) {
 function readOrCreateBridgeToken(stateDir) {
   const explicit = (process.env.MRRLIN_DIRECTOR_BRIDGE_TOKEN ?? "").trim();
   if (explicit) return explicit;
-  const tokenPath = import_node_path30.default.join(stateDir, "token.txt");
+  const tokenPath = import_node_path31.default.join(stateDir, "token.txt");
   try {
     const existing = import_node_fs22.default.readFileSync(tokenPath, "utf8").trim();
     if (existing) return existing;
   } catch {
   }
   import_node_fs22.default.mkdirSync(stateDir, { recursive: true, mode: 448 });
-  const token = import_node_crypto11.default.randomBytes(32).toString("base64url");
+  const token = import_node_crypto12.default.randomBytes(32).toString("base64url");
   import_node_fs22.default.writeFileSync(tokenPath, `${token}
 `, { mode: 384 });
   return token;
@@ -62405,36 +63024,36 @@ var StdioServerTransport = class {
 };
 
 // src/tools.ts
-var import_node_crypto14 = require("node:crypto");
-var import_promises10 = require("node:fs/promises");
-var import_node_path33 = __toESM(require("node:path"), 1);
+var import_node_crypto15 = require("node:crypto");
+var import_promises12 = require("node:fs/promises");
+var import_node_path34 = __toESM(require("node:path"), 1);
 var import_node_os16 = __toESM(require("node:os"), 1);
 
 // ../../packages/wiki/dist/index.js
-var import_promises8 = __toESM(require("node:fs/promises"), 1);
-var import_node_path31 = __toESM(require("node:path"), 1);
+var import_promises10 = __toESM(require("node:fs/promises"), 1);
+var import_node_path32 = __toESM(require("node:path"), 1);
 var INCLUDED_DOC_FOLDERS = /* @__PURE__ */ new Set(["_meta", "explanation", "how-to", "reference", "sdd", "tutorials"]);
 function toPosixPath(input) {
-  return input.split(import_node_path31.default.sep).join("/");
+  return input.split(import_node_path32.default.sep).join("/");
 }
 function slugifyWikiSegment(input) {
   return input.trim().toLowerCase().replace(/`/g, "").replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
 }
 async function pathExists3(input) {
   try {
-    await import_promises8.default.access(input);
+    await import_promises10.default.access(input);
     return true;
   } catch {
     return false;
   }
 }
 async function findWorkspaceRoot(start = process.cwd()) {
-  let current2 = import_node_path31.default.resolve(start);
+  let current2 = import_node_path32.default.resolve(start);
   while (true) {
-    if (await pathExists3(import_node_path31.default.join(current2, "pnpm-workspace.yaml")) && await pathExists3(import_node_path31.default.join(current2, "docs"))) {
+    if (await pathExists3(import_node_path32.default.join(current2, "pnpm-workspace.yaml")) && await pathExists3(import_node_path32.default.join(current2, "docs"))) {
       return current2;
     }
-    const parent = import_node_path31.default.dirname(current2);
+    const parent = import_node_path32.default.dirname(current2);
     if (parent === current2) {
       throw new Error(`Unable to find Mrrlin workspace root from ${start}`);
     }
@@ -62443,28 +63062,28 @@ async function findWorkspaceRoot(start = process.cwd()) {
 }
 async function resolveDocsRoot(input) {
   if (input) {
-    return import_node_path31.default.resolve(input);
+    return import_node_path32.default.resolve(input);
   }
   if (process.env.MRRLIN_DOCS_ROOT) {
-    return import_node_path31.default.resolve(process.env.MRRLIN_DOCS_ROOT);
+    return import_node_path32.default.resolve(process.env.MRRLIN_DOCS_ROOT);
   }
-  return import_node_path31.default.join(await findWorkspaceRoot(), "docs");
+  return import_node_path32.default.join(await findWorkspaceRoot(), "docs");
 }
 async function resolveIndexPath(input) {
   if (input) {
-    return import_node_path31.default.resolve(input);
+    return import_node_path32.default.resolve(input);
   }
   if (process.env.MRRLIN_WIKI_INDEX_PATH) {
-    return import_node_path31.default.resolve(process.env.MRRLIN_WIKI_INDEX_PATH);
+    return import_node_path32.default.resolve(process.env.MRRLIN_WIKI_INDEX_PATH);
   }
   const workspaceRoot = await findWorkspaceRoot();
-  return import_node_path31.default.join(workspaceRoot, "apps", "web", "public", "wiki-index.json");
+  return import_node_path32.default.join(workspaceRoot, "apps", "web", "public", "wiki-index.json");
 }
 async function walkMarkdownFiles(root, dir = root) {
-  const entries = await import_promises8.default.readdir(dir, { withFileTypes: true });
+  const entries = await import_promises10.default.readdir(dir, { withFileTypes: true });
   const files = [];
   for (const entry of entries) {
-    const absolute = import_node_path31.default.join(dir, entry.name);
+    const absolute = import_node_path32.default.join(dir, entry.name);
     if (entry.isDirectory()) {
       files.push(...await walkMarkdownFiles(root, absolute));
       continue;
@@ -62483,7 +63102,7 @@ function parseTitle(markdown, sourcePath) {
   return title;
 }
 function documentFromFile(docsRoot, absolutePath, markdown) {
-  const relativePath = toPosixPath(import_node_path31.default.relative(docsRoot, absolutePath));
+  const relativePath = toPosixPath(import_node_path32.default.relative(docsRoot, absolutePath));
   const [section, fileName] = relativePath.split("/");
   if (!section || !fileName || !INCLUDED_DOC_FOLDERS.has(section)) {
     return null;
@@ -62503,7 +63122,7 @@ async function listWikiDocuments(options = {}) {
   const files = await walkMarkdownFiles(docsRoot);
   const documents = [];
   for (const file2 of files) {
-    const markdown = await import_promises8.default.readFile(file2, "utf8");
+    const markdown = await import_promises10.default.readFile(file2, "utf8");
     const document2 = documentFromFile(docsRoot, file2, markdown);
     if (document2) {
       documents.push(document2);
@@ -62557,7 +63176,7 @@ async function buildWikiKnowledgeIndex(options = {}) {
 }
 async function loadBuiltWikiKnowledgeIndex(indexPath) {
   const resolvedIndexPath = await resolveIndexPath(indexPath);
-  const raw = await import_promises8.default.readFile(resolvedIndexPath, "utf8");
+  const raw = await import_promises10.default.readFile(resolvedIndexPath, "utf8");
   return wikiKnowledgeIndexSchema.parse(JSON.parse(raw));
 }
 function tokenize(input) {
@@ -62681,15 +63300,15 @@ async function runCodeGate(_target, deps) {
 }
 
 // src/consensus/multi-llm-head.ts
-var import_node_child_process18 = require("node:child_process");
+var import_node_child_process20 = require("node:child_process");
 
 // src/consensus/provider-limits.ts
-var import_node_child_process17 = require("node:child_process");
+var import_node_child_process19 = require("node:child_process");
 var DEFAULT_STATUS_TIMEOUT_MS = 1e4;
 function errMessage4(err) {
   return err instanceof Error ? err.message : String(err);
 }
-function runExternalAgentsStatus(bin, args, timeoutMs, spawn4) {
+function runExternalAgentsStatus(bin, args, timeoutMs, spawn5) {
   return new Promise((resolve) => {
     let settled = false;
     const timerRef = { id: void 0 };
@@ -62702,7 +63321,7 @@ function runExternalAgentsStatus(bin, args, timeoutMs, spawn4) {
     const options = { stdio: ["ignore", "pipe", "pipe"], env: process.env, shell: false };
     let child;
     try {
-      child = spawn4(bin, args, options);
+      child = spawn5(bin, args, options);
     } catch (err) {
       finish({ stdout: "", error: `spawn ${bin} failed: ${errMessage4(err)}` });
       return;
@@ -62726,13 +63345,13 @@ function runExternalAgentsStatus(bin, args, timeoutMs, spawn4) {
   });
 }
 async function fetchRegistrySnapshot(deps) {
-  const spawn4 = deps?.spawn ?? import_node_child_process17.spawn;
+  const spawn5 = deps?.spawn ?? import_node_child_process19.spawn;
   const { command, prefixArgs } = resolveExternalAgentsCliInvocation(deps?.externalAgentsBin);
   const { stdout, error: error51 } = await runExternalAgentsStatus(
     command,
     [...prefixArgs, "status", "--json"],
     deps?.statusTimeoutMs ?? DEFAULT_STATUS_TIMEOUT_MS,
-    spawn4
+    spawn5
   );
   if (error51) return { ok: false, error: error51 };
   try {
@@ -62776,7 +63395,7 @@ function estimateTokenCount(text) {
 function errMessage5(err) {
   return err instanceof Error ? err.message : String(err);
 }
-function runExternalAgents(bin, args, label, timeoutMs, spawn4) {
+function runExternalAgents(bin, args, label, timeoutMs, spawn5) {
   return new Promise((resolve) => {
     let settled = false;
     const timerRef = { id: void 0 };
@@ -62794,7 +63413,7 @@ function runExternalAgents(bin, args, label, timeoutMs, spawn4) {
     };
     let child;
     try {
-      child = spawn4(bin, args, options);
+      child = spawn5(bin, args, options);
     } catch (err) {
       finish({ code: null, stdout: "", error: `spawn ${bin} failed: ${errMessage5(err)}` });
       return;
@@ -62814,7 +63433,7 @@ function runExternalAgents(bin, args, label, timeoutMs, spawn4) {
   });
 }
 async function pickPanel(input, deps) {
-  const spawn4 = deps?.spawn ?? import_node_child_process18.spawn;
+  const spawn5 = deps?.spawn ?? import_node_child_process20.spawn;
   const { command, prefixArgs } = resolveExternalAgentsCliInvocation(deps?.externalAgentsBin);
   const args = [
     "pick",
@@ -62827,7 +63446,7 @@ async function pickPanel(input, deps) {
     "--exclude-providers",
     input.excludeProvider
   ];
-  const r = await runExternalAgents(command, [...prefixArgs, ...args], "pick", input.timeoutMs, spawn4);
+  const r = await runExternalAgents(command, [...prefixArgs, ...args], "pick", input.timeoutMs, spawn5);
   if (r.error) return { ok: false, error: r.error };
   if (r.code === 3) return { ok: true, agents: [] };
   if (r.code !== 0) return { ok: false, error: `external-agents pick exited ${r.code}` };
@@ -62861,10 +63480,10 @@ function parseDispatch(agentId, stdout, exitCode) {
   return { ok: true, text: parsed.text, usage };
 }
 async function dispatchHead(agentId, prompt, timeoutMs, deps) {
-  const spawn4 = deps?.spawn ?? import_node_child_process18.spawn;
+  const spawn5 = deps?.spawn ?? import_node_child_process20.spawn;
   const { command, prefixArgs } = resolveExternalAgentsCliInvocation(deps?.externalAgentsBin);
   const args = ["dispatch", agentId, "--json", prompt];
-  const r = await runExternalAgents(command, [...prefixArgs, ...args], "dispatch", timeoutMs, spawn4);
+  const r = await runExternalAgents(command, [...prefixArgs, ...args], "dispatch", timeoutMs, spawn5);
   if (r.error) return { ok: false, error: r.error };
   return parseDispatch(agentId, r.stdout, r.code);
 }
@@ -65006,13 +65625,13 @@ var StreamableHTTPClientTransport = class {
       this.onerror?.(new Error(`Maximum reconnection attempts (${maxRetries}) exceeded.`));
       return;
     }
-    const delay = this._getNextReconnectionDelay(attemptCount);
+    const delay2 = this._getNextReconnectionDelay(attemptCount);
     this._reconnectionTimeout = setTimeout(() => {
       this._startOrAuthSse(options).catch((error51) => {
         this.onerror?.(new Error(`Failed to reconnect SSE stream: ${error51 instanceof Error ? error51.message : String(error51)}`));
         this._scheduleReconnection(options, attemptCount + 1);
       });
-    }, delay);
+    }, delay2);
   }
   _handleSseStream(stream, options, isReconnectable) {
     if (!stream) {
@@ -65848,7 +66467,7 @@ async function runDecisionConsensus(input, deps) {
 }
 
 // src/async-tools/consensus.ts
-var import_node_crypto12 = require("node:crypto");
+var import_node_crypto13 = require("node:crypto");
 
 // src/consensus/question-similarity.ts
 var SUPPRESSION_SIMILARITY_THRESHOLD = 0.6;
@@ -66128,9 +66747,9 @@ async function handleConsensusBlocked(result, ctx, input, resolvedTaskId) {
     }
     if (taskId) {
       const scopeId = taskId;
-      const groupId = toFile.length > 1 ? `II-${scopeId}-gate-group-${(0, import_node_crypto12.createHash)("sha256").update(toFile.map((c) => c.rawQuestion).sort().join("\n")).digest("hex").slice(0, 10)}` : void 0;
+      const groupId = toFile.length > 1 ? `II-${scopeId}-gate-group-${(0, import_node_crypto13.createHash)("sha256").update(toFile.map((c) => c.rawQuestion).sort().join("\n")).digest("hex").slice(0, 10)}` : void 0;
       for (const clarification of toFile) {
-        const id = `II-${scopeId}-gate-${(0, import_node_crypto12.createHash)("sha256").update(clarification.rawQuestion).digest("hex").slice(0, 10)}`;
+        const id = `II-${scopeId}-gate-${(0, import_node_crypto13.createHash)("sha256").update(clarification.rawQuestion).digest("hex").slice(0, 10)}`;
         try {
           const questionOptions = buildGateQuestionOptions(clarification.rawQuestion, clarification.category);
           await ctx.client.createInboxItem(input.projectSlug, {
@@ -66148,9 +66767,9 @@ async function handleConsensusBlocked(result, ctx, input, resolvedTaskId) {
       filedQuestionCount = toFile.length;
     } else if (planId) {
       const scopeId = planId;
-      const groupId = toFile.length > 1 ? `II-${scopeId}-gate-group-${(0, import_node_crypto12.createHash)("sha256").update(toFile.map((c) => c.rawQuestion).sort().join("\n")).digest("hex").slice(0, 10)}` : void 0;
+      const groupId = toFile.length > 1 ? `II-${scopeId}-gate-group-${(0, import_node_crypto13.createHash)("sha256").update(toFile.map((c) => c.rawQuestion).sort().join("\n")).digest("hex").slice(0, 10)}` : void 0;
       for (const clarification of toFile) {
-        const id = `II-${scopeId}-gate-${(0, import_node_crypto12.createHash)("sha256").update(clarification.rawQuestion).digest("hex").slice(0, 10)}`;
+        const id = `II-${scopeId}-gate-${(0, import_node_crypto13.createHash)("sha256").update(clarification.rawQuestion).digest("hex").slice(0, 10)}`;
         try {
           const questionOptions = buildGateQuestionOptions(clarification.rawQuestion, clarification.category);
           await ctx.client.createInboxItem(input.projectSlug, {
@@ -66174,7 +66793,7 @@ async function handleConsensusBlocked(result, ctx, input, resolvedTaskId) {
       taskId: page.taskId ?? null
     });
     const reviewHash = domainScopedReviewHash2(page.contentHash, domain2);
-    const baseBlockItemId = `II-${taskId}-gateblock-${(0, import_node_crypto12.createHash)("sha256").update(reviewHash).digest("hex").slice(0, 10)}`;
+    const baseBlockItemId = `II-${taskId}-gateblock-${(0, import_node_crypto13.createHash)("sha256").update(reviewHash).digest("hex").slice(0, 10)}`;
     const reviewAgainAvailable = !taskInboxItems.some(
       (item) => item.id === baseBlockItemId && item.status !== "pending" && item.answer === REVIEW_AGAIN_ANSWER
     );
@@ -66748,8 +67367,8 @@ function createIntentCheckDescriptor() {
 var intentCheckDescriptor = createIntentCheckDescriptor();
 
 // src/evidence/assembler.ts
-var import_promises9 = require("node:fs/promises");
-var import_node_path32 = require("node:path");
+var import_promises11 = require("node:fs/promises");
+var import_node_path33 = require("node:path");
 function evidenceDedupKey(sessionId, reportId) {
   return `${sessionId}:${reportId}`;
 }
@@ -66759,7 +67378,7 @@ function isRecord7(v) {
 async function readDayLines(stateDir, day, sessionId) {
   let raw;
   try {
-    raw = await (0, import_promises9.readFile)((0, import_node_path32.join)(stateDir, "logs", `bridge-${day}.jsonl`), "utf8");
+    raw = await (0, import_promises11.readFile)((0, import_node_path33.join)(stateDir, "logs", `bridge-${day}.jsonl`), "utf8");
   } catch {
     return [];
   }
@@ -66833,7 +67452,7 @@ async function assembleEvidence(stateDir, sessionId, reportId, gateCtx) {
   }
   let windowPruned = false;
   try {
-    const raw = await (0, import_promises9.readFile)((0, import_node_path32.join)(stateDir, "logs", ".pruned.jsonl"), "utf8");
+    const raw = await (0, import_promises11.readFile)((0, import_node_path33.join)(stateDir, "logs", ".pruned.jsonl"), "utf8");
     outer: for (const line of raw.split("\n")) {
       if (!line.trim()) continue;
       let rec;
@@ -66899,7 +67518,7 @@ function createReportEvidenceDescriptor() {
 var reportEvidenceDescriptor = createReportEvidenceDescriptor();
 
 // src/async-tools/enqueue.ts
-var import_node_crypto13 = __toESM(require("node:crypto"), 1);
+var import_node_crypto14 = __toESM(require("node:crypto"), 1);
 async function enqueueAsyncTool(client, descriptor2, input) {
   if (descriptor2.cachedResult) {
     const cached2 = await descriptor2.cachedResult(client, input);
@@ -66912,7 +67531,7 @@ async function enqueueAsyncTool(client, descriptor2, input) {
   if (active) {
     return { status: "already_running", jobId: active.id, message: "Already running; will notify in inbox." };
   }
-  const jobId = `AJ-${import_node_crypto13.default.randomUUID()}`;
+  const jobId = `AJ-${import_node_crypto14.default.randomUUID()}`;
   try {
     await client.createAsyncJob(input.projectSlug, {
       id: jobId,
@@ -68572,7 +69191,7 @@ function createMrrlinTools(options) {
       "PRODUCED_URL_RECORD_FAILED",
       "Unable to record produced URL.",
       async (c, { projectSlug, runId, url: url2, label }) => {
-        const id = `EA-pu-${(0, import_node_crypto14.randomBytes)(4).toString("hex")}`;
+        const id = `EA-pu-${(0, import_node_crypto15.randomBytes)(4).toString("hex")}`;
         const payload = label ? { url: url2, label } : { url: url2 };
         return await c.appendExecutionArtifact(projectSlug, runId, {
           id,
@@ -68646,7 +69265,7 @@ function createMrrlinTools(options) {
       "ARTIFACT_FILE_UPLOAD_FAILED",
       "Unable to upload artifact file.",
       async (c, { projectSlug, path: filePath, class: artifactClass, taskId, runId, description }) => {
-        const extension2 = import_node_path33.default.extname(filePath).toLowerCase();
+        const extension2 = import_node_path34.default.extname(filePath).toLowerCase();
         const contentType = ARTIFACT_EXTENSION_TYPES[extension2];
         if (!contentType) {
           throw new McpToolCodedError(
@@ -68654,7 +69273,7 @@ function createMrrlinTools(options) {
             `Unsupported artifact extension '${extension2}'. Allowed: ${Object.keys(ARTIFACT_EXTENSION_TYPES).join(", ")}.`
           );
         }
-        const stats = await (0, import_promises10.stat)(filePath);
+        const stats = await (0, import_promises12.stat)(filePath);
         if (stats.size > MRRLIN_ARTIFACT_FILE_MAX_BYTES) {
           throw new McpToolCodedError(
             "ARTIFACT_FILE_TOO_LARGE",
@@ -68667,14 +69286,14 @@ function createMrrlinTools(options) {
             "File is empty (0 bytes); write content before uploading."
           );
         }
-        const bytes3 = new Uint8Array(await (0, import_promises10.readFile)(filePath));
+        const bytes3 = new Uint8Array(await (0, import_promises12.readFile)(filePath));
         if (bytes3.byteLength > MRRLIN_ARTIFACT_FILE_MAX_BYTES) {
           throw new McpToolCodedError(
             "ARTIFACT_FILE_TOO_LARGE",
             "Artifact exceeds 5MB; split or summarize instead."
           );
         }
-        const filename = import_node_path33.default.basename(filePath);
+        const filename = import_node_path34.default.basename(filePath);
         return deliverBuiltIn(
           c,
           projectSlug,
@@ -68696,7 +69315,7 @@ function createMrrlinTools(options) {
             `Invalid filename '${filename}'; provide a bare filename with no path separators or '..'.`
           );
         }
-        const extension2 = import_node_path33.default.extname(filename).toLowerCase();
+        const extension2 = import_node_path34.default.extname(filename).toLowerCase();
         const contentType = ARTIFACT_EXTENSION_TYPES[extension2];
         if (!contentType) {
           throw new McpToolCodedError(
@@ -69007,7 +69626,7 @@ function runSetCredential(args) {
 // src/install-service.ts
 var import_node_os17 = __toESM(require("node:os"), 1);
 var import_node_fs23 = require("node:fs");
-var import_node_path34 = __toESM(require("node:path"), 1);
+var import_node_path35 = __toESM(require("node:path"), 1);
 function readExistingTelemetryDefaultProject(deps, ecoPath) {
   try {
     const existing = deps.readFile?.(ecoPath);
@@ -69128,9 +69747,9 @@ function installService(deps) {
   const claudeBin = deps.which("claude");
   const resolvedBins = [...bins, claudeBin].filter((b) => b !== null);
   const pathEnv = Array.from(
-    /* @__PURE__ */ new Set([...resolvedBins.map((b) => import_node_path34.default.dirname(b)), ...SYSTEM_PATH_DIRS])
+    /* @__PURE__ */ new Set([...resolvedBins.map((b) => import_node_path35.default.dirname(b)), ...SYSTEM_PATH_DIRS])
   ).join(":");
-  const ecoPath = import_node_path34.default.join(home, ".mrrlin", "ecosystem.config.cjs");
+  const ecoPath = import_node_path35.default.join(home, ".mrrlin", "ecosystem.config.cjs");
   const apiTarget = deriveServiceApiTarget(deps, ecoPath);
   const telemetryDefaultProject = "MRRLIN_TELEMETRY_DEFAULT_PROJECT" in deps.env ? deps.env.MRRLIN_TELEMETRY_DEFAULT_PROJECT?.trim() || void 0 : readExistingTelemetryDefaultProject(deps, ecoPath);
   const text = renderEcosystemConfig({
@@ -69194,18 +69813,18 @@ function uninstallService(deps) {
 }
 
 // src/uninstall-codex.ts
-var import_promises11 = __toESM(require("node:fs/promises"), 1);
+var import_promises13 = __toESM(require("node:fs/promises"), 1);
 var import_node_os18 = __toESM(require("node:os"), 1);
-var import_node_path35 = __toESM(require("node:path"), 1);
+var import_node_path36 = __toESM(require("node:path"), 1);
 var toml3 = __toESM(require_toml(), 1);
 function resolveCodexHome3(options) {
   if (options.codexHome) return options.codexHome;
   if (process.env.CODEX_HOME) return process.env.CODEX_HOME;
-  return import_node_path35.default.join(options.homeDir ?? import_node_os18.default.homedir(), ".codex");
+  return import_node_path36.default.join(options.homeDir ?? import_node_os18.default.homedir(), ".codex");
 }
 async function pathExists4(target) {
   try {
-    await import_promises11.default.access(target);
+    await import_promises13.default.access(target);
     return true;
   } catch {
     return false;
@@ -69214,13 +69833,13 @@ async function pathExists4(target) {
 var MRRLIN_BLOCK_RE = /(^|\n)\[mcp_servers\.(?:mrrlin(?:-browser)?|external-agents)(?:\]|\.[^\]\n]*\])[\s\S]*?(?=\n\[|$)/g;
 async function uninstallCodex(options = {}) {
   const codexHome = resolveCodexHome3(options);
-  const configPath = import_node_path35.default.join(codexHome, "config.toml");
+  const configPath = import_node_path36.default.join(codexHome, "config.toml");
   const removePrompts = async () => uninstallPrompts(codexHome, options.promptNames ?? []);
   if (!await pathExists4(configPath)) {
     return { action: "missing", configPath, prompts: await removePrompts() };
   }
-  const realPath = await import_promises11.default.realpath(configPath).catch(() => configPath);
-  const existing = await import_promises11.default.readFile(realPath, "utf8");
+  const realPath = await import_promises13.default.realpath(configPath).catch(() => configPath);
+  const existing = await import_promises13.default.readFile(realPath, "utf8");
   let parsed = null;
   try {
     parsed = toml3.parse(existing);
@@ -69237,17 +69856,17 @@ async function uninstallCodex(options = {}) {
     return { action: "noop", configPath: realPath, prompts: await removePrompts() };
   }
   const stripped = existing.replace(MRRLIN_BLOCK_RE, (match) => match.startsWith("\n") ? "\n" : "").replace(/\n{3,}/g, "\n\n").replace(/^\n+/, "");
-  await import_promises11.default.writeFile(realPath, stripped, { mode: 384 });
+  await import_promises13.default.writeFile(realPath, stripped, { mode: 384 });
   return { action: "removed", configPath: realPath, prompts: await removePrompts() };
 }
 async function uninstallPrompts(codexHome, names) {
   if (names.length === 0) return [];
-  const promptsDir = import_node_path35.default.join(codexHome, "prompts");
+  const promptsDir = import_node_path36.default.join(codexHome, "prompts");
   const out = [];
   for (const name of names) {
-    const promptPath = import_node_path35.default.join(promptsDir, `${name}.md`);
+    const promptPath = import_node_path36.default.join(promptsDir, `${name}.md`);
     try {
-      await import_promises11.default.unlink(promptPath);
+      await import_promises13.default.unlink(promptPath);
       out.push({ name, action: "removed", promptPath });
     } catch (error51) {
       const code = error51?.code;
@@ -69262,8 +69881,8 @@ async function uninstallPrompts(codexHome, names) {
 }
 
 // src/extract/command.ts
-var import_promises12 = require("node:fs/promises");
-var import_node_path36 = require("node:path");
+var import_promises14 = require("node:fs/promises");
+var import_node_path37 = require("node:path");
 function parseArgs(args) {
   const map2 = /* @__PURE__ */ new Map();
   for (let i = 0; i < args.length; i++) {
@@ -69300,10 +69919,10 @@ Missing required flag(s): ${missing.join(
   const days = await findSessionDays(deps.stateDir, sessionId);
   const matchingLines = [];
   for (const day of days) {
-    const logPath = (0, import_node_path36.join)(deps.stateDir, "logs", `bridge-${day}.jsonl`);
+    const logPath = (0, import_node_path37.join)(deps.stateDir, "logs", `bridge-${day}.jsonl`);
     let raw;
     try {
-      raw = await (0, import_promises12.readFile)(logPath, "utf8");
+      raw = await (0, import_promises14.readFile)(logPath, "utf8");
     } catch {
       continue;
     }
@@ -69337,7 +69956,7 @@ Missing required flag(s): ${missing.join(
   }
   const outputText = cappedLines.join("\n");
   if (outPath) {
-    await (0, import_promises12.writeFile)(outPath, outputText, "utf8");
+    await (0, import_promises14.writeFile)(outPath, outputText, "utf8");
     return {
       ok: true,
       message: `Wrote extract to ${outPath}`,
@@ -69386,13 +70005,13 @@ Missing required flag(s): ${missing.join(
 
 // src/bin.ts
 function pm2Runner(args) {
-  const r = (0, import_node_child_process19.spawnSync)("pm2", args, { encoding: "utf8" });
+  const r = (0, import_node_child_process21.spawnSync)("pm2", args, { encoding: "utf8" });
   process.stderr.write(r.stdout ?? "");
   process.stderr.write(r.stderr ?? "");
   return { code: r.status ?? 1, stdout: r.stdout ?? "" };
 }
 function whichBin(bin) {
-  const r = (0, import_node_child_process19.spawnSync)("which", [bin], { encoding: "utf8" });
+  const r = (0, import_node_child_process21.spawnSync)("which", [bin], { encoding: "utf8" });
   const out = (r.stdout ?? "").trim();
   return r.status === 0 && out ? out.split("\n")[0] ?? null : null;
 }
@@ -69401,13 +70020,13 @@ function bootHookStatus() {
   const uid = process.getuid?.();
   if (uid === void 0 || uid === 0) return { status: "unknown" };
   const home = process.env.HOME ?? (0, import_node_os19.homedir)();
-  const agents = import_node_path38.default.join(home, "Library", "LaunchAgents");
+  const agents = import_node_path39.default.join(home, "Library", "LaunchAgents");
   const candidates = [
-    { label: "com.mrrlin.director-bridge", plist: import_node_path38.default.join(agents, "com.mrrlin.director-bridge.plist") },
-    { label: "com.PM2", plist: import_node_path38.default.join(agents, `pm2.${(0, import_node_os19.userInfo)().username}.plist`) }
+    { label: "com.mrrlin.director-bridge", plist: import_node_path39.default.join(agents, "com.mrrlin.director-bridge.plist") },
+    { label: "com.PM2", plist: import_node_path39.default.join(agents, `pm2.${(0, import_node_os19.userInfo)().username}.plist`) }
   ];
   for (const candidate of candidates) {
-    const printed = (0, import_node_child_process19.spawnSync)("launchctl", ["print", `gui/${uid}/${candidate.label}`], { encoding: "utf8" });
+    const printed = (0, import_node_child_process21.spawnSync)("launchctl", ["print", `gui/${uid}/${candidate.label}`], { encoding: "utf8" });
     if (printed.status !== 0) continue;
     if (!(0, import_node_fs24.existsSync)(candidate.plist)) continue;
     const out = printed.stdout ?? "";
@@ -69629,7 +70248,7 @@ async function main() {
         );
       }
       const { command: command2, args, env } = browserServeArgs();
-      const r = (0, import_node_child_process19.spawnSync)(command2, args, { stdio: "inherit", env: { ...process.env, ...env } });
+      const r = (0, import_node_child_process21.spawnSync)(command2, args, { stdio: "inherit", env: { ...process.env, ...env } });
       process.exitCode = r.status ?? 1;
       return;
     }
@@ -69640,7 +70259,7 @@ async function main() {
     }
     case "external-agents-serve": {
       const { command: command2, args } = externalAgentsServeArgs();
-      const r = (0, import_node_child_process19.spawnSync)(command2, args, { stdio: "inherit", env: process.env });
+      const r = (0, import_node_child_process21.spawnSync)(command2, args, { stdio: "inherit", env: process.env });
       process.exitCode = r.status ?? 1;
       return;
     }
@@ -69694,8 +70313,8 @@ async function main() {
         }
       }
       try {
-        const codexHome = process.env.CODEX_HOME ?? import_node_path38.default.join(process.env.HOME ?? (0, import_node_os19.homedir)(), ".codex");
-        (0, import_node_fs24.rmSync)(import_node_path38.default.join(codexHome, "prompts", "report-issue.md"), { force: true });
+        const codexHome = process.env.CODEX_HOME ?? import_node_path39.default.join(process.env.HOME ?? (0, import_node_os19.homedir)(), ".codex");
+        (0, import_node_fs24.rmSync)(import_node_path39.default.join(codexHome, "prompts", "report-issue.md"), { force: true });
       } catch {
       }
       const claudeResult = await installClaude({ binPath, force, serveEnv });
@@ -69708,7 +70327,7 @@ async function main() {
         );
       }
       const realProviderRunner = (command2) => (args) => {
-        const r = (0, import_node_child_process19.spawnSync)(command2, args, { encoding: "utf8", timeout: 8e3 });
+        const r = (0, import_node_child_process21.spawnSync)(command2, args, { encoding: "utf8", timeout: 8e3 });
         return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
       };
       for (const provider of ["codex", "claude"]) {
@@ -69756,7 +70375,7 @@ async function main() {
         env: process.env,
         cwd: process.cwd(),
         writeFile: (p, c) => {
-          (0, import_node_fs24.mkdirSync)(import_node_path38.default.dirname(p), { recursive: true, mode: 448 });
+          (0, import_node_fs24.mkdirSync)(import_node_path39.default.dirname(p), { recursive: true, mode: 448 });
           (0, import_node_fs24.writeFileSync)(p, c, { mode: 384 });
         },
         // Swallows every error on purpose — the only caller uses this to recover settings from the
@@ -69792,7 +70411,7 @@ async function main() {
         purgeSecret: purge,
         secretPath: agentCredentialPath(),
         tokenPath: operatorTokenPath(),
-        ecoPath: import_node_path38.default.join(process.env.HOME ?? (0, import_node_os19.homedir)(), ".mrrlin", "ecosystem.config.cjs"),
+        ecoPath: import_node_path39.default.join(process.env.HOME ?? (0, import_node_os19.homedir)(), ".mrrlin", "ecosystem.config.cjs"),
         log: (m) => process.stderr.write(`[mrrlin-mcp uninstall-service] ${m}
 `)
       });
@@ -69813,7 +70432,7 @@ async function main() {
         purgeSecret: true,
         secretPath: agentCredentialPath(),
         tokenPath: operatorTokenPath(),
-        ecoPath: import_node_path38.default.join(home, ".mrrlin", "ecosystem.config.cjs"),
+        ecoPath: import_node_path39.default.join(home, ".mrrlin", "ecosystem.config.cjs"),
         log
       });
       let codexOk = true;
@@ -69833,7 +70452,7 @@ async function main() {
         log(`codex config NOT modified: ${error51 instanceof Error ? error51.message : String(error51)}`);
       }
       try {
-        (0, import_node_fs24.rmSync)(import_node_path38.default.join(home, ".mrrlin"), { recursive: true, force: true });
+        (0, import_node_fs24.rmSync)(import_node_path39.default.join(home, ".mrrlin"), { recursive: true, force: true });
       } catch {
       }
       log("removed ~/.mrrlin");
@@ -69874,7 +70493,7 @@ ${HELP_TEXT}`);
   }
 }
 function resolveSelfBinPath() {
-  return import_node_path37.default.resolve(process.argv[1] ?? process.execPath);
+  return import_node_path38.default.resolve(process.argv[1] ?? process.execPath);
 }
 main().catch((error51) => {
   process.stderr.write(`mrrlin-mcp fatal error: ${error51 instanceof Error ? error51.message : String(error51)}