npm - @mrrlin-dev/mcp - Versions diffs - 0.4.79 → 0.4.85 - Mend

@mrrlin-dev/mcp 0.4.79 → 0.4.85

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (2) hide show

package/dist/bin.cjs +1548 -638
package/package.json +28 -20

package/dist/bin.cjs CHANGED Viewed

@@ -6,6 +6,9 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __esm = (fn, res) => function __init() {
+  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+};
 var __commonJS = (cb, mod2) => function __require() {
   return mod2 || (0, cb[__getOwnPropNames(cb)[0]])((mod2 = { exports: {} }).exports, mod2), mod2.exports;
 };
@@ -1949,8 +1952,8 @@ var require_stringify = __commonJS({
       return type === "float" || type === "integer";
     }
     function arrayType(values) {
-      var contentType = tomlType2(values[0]);
-      if (values.every((_) => tomlType2(_) === contentType)) return contentType;
+      var contentType2 = tomlType2(values[0]);
+      if (values.every((_) => tomlType2(_) === contentType2)) return contentType2;
       if (values.every((_) => isNumber(tomlType2(_)))) return "float";
       return "mixed";
     }
@@ -5095,15 +5098,34 @@ var require_data = __commonJS({
   }
 });
-// ../../node_modules/.pnpm/fast-uri@3.1.2/node_modules/fast-uri/lib/utils.js
+// ../../node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/lib/utils.js
 var require_utils = __commonJS({
-  "../../node_modules/.pnpm/fast-uri@3.1.2/node_modules/fast-uri/lib/utils.js"(exports2, module2) {
+  "../../node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/lib/utils.js"(exports2, module2) {
     "use strict";
     var isUUID = RegExp.prototype.test.bind(/^[\da-f]{8}-[\da-f]{4}-[\da-f]{4}-[\da-f]{4}-[\da-f]{12}$/iu);
     var isIPv4 = RegExp.prototype.test.bind(/^(?:(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)$/u);
+    var isPort = RegExp.prototype.test.bind(/^\d*$/u);
     var isHexPair = RegExp.prototype.test.bind(/^[\da-f]{2}$/iu);
     var isUnreserved = RegExp.prototype.test.bind(/^[\da-z\-._~]$/iu);
-    var isPathCharacter = RegExp.prototype.test.bind(/^[\da-z\-._~!$&'()*+,;=:@/]$/iu);
+    var isPathCharacter = RegExp.prototype.test.bind(/^[A-Za-z0-9\-._~!$&'()*+,;=:@/]$/u);
+    var isQueryFragmentCharacter = RegExp.prototype.test.bind(/^[A-Za-z0-9\-._~!$&'()*+,;=:@/?]$/u);
+    var isUserinfoCharacter = RegExp.prototype.test.bind(/^[A-Za-z0-9\-._~!$&'()*+,;=:]$/u);
+    var BYTE_HEX = new Array(256);
+    {
+      const HEX_DIGITS = "0123456789ABCDEF";
+      for (let i = 0; i < 256; i++) {
+        BYTE_HEX[i] = "%" + HEX_DIGITS[i >> 4] + HEX_DIGITS[i & 15];
+      }
+    }
+    function percentEncodeNonAscii(cp) {
+      if (cp < 2048) {
+        return BYTE_HEX[192 | cp >> 6] + BYTE_HEX[128 | cp & 63];
+      }
+      if (cp < 65536) {
+        return BYTE_HEX[224 | cp >> 12] + BYTE_HEX[128 | cp >> 6 & 63] + BYTE_HEX[128 | cp & 63];
+      }
+      return BYTE_HEX[240 | cp >> 18] + BYTE_HEX[128 | cp >> 12 & 63] + BYTE_HEX[128 | cp >> 6 & 63] + BYTE_HEX[128 | cp & 63];
+    }
     function stringArrayToHexStripped(input) {
       let acc = "";
       let code = 0;
@@ -5128,91 +5150,105 @@ var require_utils = __commonJS({
       }
       return acc;
     }
+    var isHextet = RegExp.prototype.test.bind(/^[\dA-Fa-f]{1,4}$/);
+    var isIPvFuture = RegExp.prototype.test.bind(/^[vV][\dA-Fa-f]+\.[A-Za-z\d\-._~!$&'()*+,;=:]+$/);
+    var isZoneCharacter = RegExp.prototype.test.bind(/^[A-Za-z\d\-._~]$/);
     var nonSimpleDomain = RegExp.prototype.test.bind(/[^!"$&'()*+,\-.;=_`a-z{}~]/u);
-    function consumeIsZone(buffer) {
-      buffer.length = 0;
-      return true;
-    }
-    function consumeHextets(buffer, address, output3) {
-      if (buffer.length) {
-        const hex3 = stringArrayToHexStripped(buffer);
-        if (hex3 !== "") {
-          address.push(hex3);
-        } else {
-          output3.error = true;
-          return false;
+    function isZoneIdentifier(zone) {
+      if (zone.length === 0) return false;
+      for (let i = 0; i < zone.length; i++) {
+        if (isZoneCharacter(zone[i])) continue;
+        if (zone[i] === "%" && i + 2 < zone.length && isHexPair(zone.slice(i + 1, i + 3))) {
+          i += 2;
+          continue;
         }
-        buffer.length = 0;
+        return false;
       }
       return true;
     }
-    function getIPV6(input) {
-      let tokenCount = 0;
-      const output3 = { error: false, address: "", zone: "" };
-      const address = [];
-      const buffer = [];
-      let endipv6Encountered = false;
-      let endIpv6 = false;
-      let consume = consumeHextets;
-      for (let i = 0; i < input.length; i++) {
-        const cursor = input[i];
-        if (cursor === "[" || cursor === "]") {
-          continue;
-        }
-        if (cursor === ":") {
-          if (endipv6Encountered === true) {
-            endIpv6 = true;
-          }
-          if (!consume(buffer, address, output3)) {
-            break;
-          }
-          if (++tokenCount > 7) {
-            output3.error = true;
-            break;
-          }
-          if (i > 0 && input[i - 1] === ":") {
-            endipv6Encountered = true;
-          }
-          address.push(":");
-          continue;
-        } else if (cursor === "%") {
-          if (!consume(buffer, address, output3)) {
-            break;
+    function compressIPv6ZeroRun(hextets) {
+      let bestStart = -1;
+      let bestLength = 0;
+      let runStart = -1;
+      let runLength = 0;
+      for (let i = 0; i < hextets.length; i++) {
+        if (hextets[i] === "0") {
+          if (runStart === -1) runStart = i;
+          runLength++;
+          if (runLength > bestLength) {
+            bestLength = runLength;
+            bestStart = runStart;
           }
-          consume = consumeIsZone;
         } else {
-          buffer.push(cursor);
+          runStart = -1;
+          runLength = 0;
+        }
+      }
+      if (bestLength < 2) return hextets.join(":");
+      const head = hextets.slice(0, bestStart).join(":");
+      const tail2 = hextets.slice(bestStart + bestLength).join(":");
+      return head + "::" + tail2;
+    }
+    function normalizeIPv6Address(input) {
+      const compression = input.indexOf("::");
+      if (compression !== -1 && input.indexOf("::", compression + 1) !== -1) return void 0;
+      const left = compression === -1 ? input.split(":") : input.slice(0, compression).split(":");
+      const right = compression === -1 ? [] : input.slice(compression + 2).split(":");
+      if (compression !== -1) {
+        if (left.length === 1 && left[0] === "") left.length = 0;
+        if (right.length === 1 && right[0] === "") right.length = 0;
+      }
+      const parts = left.concat(right);
+      let hextetCount = 0;
+      for (let i = 0; i < parts.length; i++) {
+        const part = parts[i];
+        if (part === "") return void 0;
+        if (part.indexOf(".") !== -1) {
+          if (i !== parts.length - 1 || compression !== -1 && right.length === 0 || !isIPv4(part)) return void 0;
+          hextetCount += 2;
           continue;
         }
+        if (!isHextet(part)) return void 0;
+        parts[i] = parseInt(part, 16).toString(16);
+        hextetCount++;
       }
-      if (buffer.length) {
-        if (consume === consumeIsZone) {
-          output3.zone = buffer.join("");
-        } else if (endIpv6) {
-          address.push(buffer.join(""));
-        } else {
-          address.push(stringArrayToHexStripped(buffer));
-        }
+      if (compression === -1) {
+        if (hextetCount !== 8) return void 0;
+        return compressIPv6ZeroRun(parts);
       }
-      output3.address = address.join("");
-      return output3;
+      if (hextetCount >= 8) return void 0;
+      const expanded = parts.slice(0, left.length);
+      for (let i = hextetCount; i < 8; i++) expanded.push("0");
+      for (let i = left.length; i < parts.length; i++) expanded.push(parts[i]);
+      return compressIPv6ZeroRun(expanded);
     }
     function normalizeIPv6(host) {
-      if (findToken(host, ":") < 2) {
-        return { host, isIPV6: false };
-      }
-      const ipv63 = getIPV6(host);
-      if (!ipv63.error) {
-        let newHost = ipv63.address;
-        let escapedHost = ipv63.address;
-        if (ipv63.zone) {
-          newHost += "%" + ipv63.zone;
-          escapedHost += "%25" + ipv63.zone;
-        }
-        return { host: newHost, isIPV6: true, escapedHost };
-      } else {
-        return { host, isIPV6: false };
-      }
+      const bracketed = host[0] === "[" && host[host.length - 1] === "]";
+      const hasBracket = host[0] === "[" || host[host.length - 1] === "]";
+      if (hasBracket && !bracketed) return { host, isIPV6: false, error: true };
+      let input = bracketed ? host.slice(1, -1) : host;
+      if (bracketed && isIPvFuture(input)) {
+        input = input.toLowerCase();
+        return { host: `[${input}]`, escapedHost: input, isIPV6: false, isIPVFuture: true };
+      }
+      if (findToken(input, ":") < 2) {
+        return { host, isIPV6: false, error: bracketed };
+      }
+      let zoneIdentifier = "";
+      const zoneSeparator = input.indexOf("%");
+      if (zoneSeparator !== -1) {
+        const separatorLength = input.slice(zoneSeparator, zoneSeparator + 3).toLowerCase() === "%25" ? 3 : 1;
+        zoneIdentifier = input.slice(zoneSeparator + separatorLength);
+        if (!isZoneIdentifier(zoneIdentifier)) return { host, isIPV6: false, error: true };
+        input = input.slice(0, zoneSeparator);
+      }
+      const address = normalizeIPv6Address(input);
+      if (address === void 0) return { host, isIPV6: false, error: true };
+      return {
+        host: address + (zoneIdentifier ? "%" + zoneIdentifier : ""),
+        escapedHost: address + (zoneIdentifier ? "%25" + zoneIdentifier : ""),
+        isIPV6: true
+      };
     }
     function findToken(str, token) {
       let ind = 0;
@@ -5221,8 +5257,8 @@ var require_utils = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path26) {
-      let input = path26;
+    function removeDotSegments(path28) {
+      let input = path28;
       const output3 = [];
       let nextSlash = -1;
       let len = 0;
@@ -5331,7 +5367,8 @@ var require_utils = __commonJS({
     function normalizePathEncoding(input) {
       let output3 = "";
       for (let i = 0; i < input.length; i++) {
-        if (input[i] === "%" && i + 2 < input.length) {
+        const ch = input[i];
+        if (ch === "%" && i + 2 < input.length) {
           const hex3 = input.slice(i + 1, i + 3);
           if (isHexPair(hex3)) {
             const normalizedHex = hex3.toUpperCase();
@@ -5345,10 +5382,152 @@ var require_utils = __commonJS({
             continue;
           }
         }
-        if (isPathCharacter(input[i])) {
-          output3 += input[i];
+        if (isPathCharacter(ch)) {
+          output3 += ch;
         } else {
-          output3 += escape(input[i]);
+          const code = input.charCodeAt(i);
+          if (code < 128) {
+            output3 += isEscapeSafe(code) ? ch : BYTE_HEX[code];
+          } else if (code < 55296 || code > 57343) {
+            output3 += percentEncodeNonAscii(code);
+          } else if (code <= 56319 && i + 1 < input.length) {
+            const low = input.charCodeAt(i + 1);
+            if (low >= 56320 && low <= 57343) {
+              output3 += percentEncodeNonAscii(65536 + (code - 55296 << 10) + (low - 56320));
+              i++;
+            } else {
+              output3 += percentEncodeNonAscii(65533);
+            }
+          } else {
+            output3 += percentEncodeNonAscii(65533);
+          }
+        }
+      }
+      return output3;
+    }
+    function serializePathEncoding(input, pathNoScheme = false) {
+      let output3 = "";
+      let firstSegment = pathNoScheme && input[0] !== "/";
+      for (let i = 0; i < input.length; i++) {
+        const ch = input[i];
+        if (ch === "%" && i + 2 < input.length) {
+          const hex3 = input.slice(i + 1, i + 3);
+          if (isHexPair(hex3)) {
+            output3 += "%" + hex3.toUpperCase();
+            i += 2;
+            continue;
+          }
+        }
+        if (ch === "/") {
+          firstSegment = false;
+        }
+        if (isPathCharacter(ch) && (ch !== ":" || !firstSegment)) {
+          output3 += ch;
+        } else {
+          const code = input.charCodeAt(i);
+          if (code < 128) {
+            output3 += BYTE_HEX[code];
+          } else if (code < 55296 || code > 57343) {
+            output3 += percentEncodeNonAscii(code);
+          } else if (code <= 56319 && i + 1 < input.length) {
+            const low = input.charCodeAt(i + 1);
+            if (low >= 56320 && low <= 57343) {
+              output3 += percentEncodeNonAscii(65536 + (code - 55296 << 10) + (low - 56320));
+              i++;
+            } else {
+              output3 += percentEncodeNonAscii(65533);
+            }
+          } else {
+            output3 += percentEncodeNonAscii(65533);
+          }
+        }
+      }
+      return output3;
+    }
+    function encodeComponent(input, isAllowed) {
+      let output3 = "";
+      for (let i = 0; i < input.length; i++) {
+        const ch = input[i];
+        if (ch === "%" && i + 2 < input.length) {
+          const hex3 = input.slice(i + 1, i + 3);
+          if (isHexPair(hex3)) {
+            output3 += "%" + hex3.toUpperCase();
+            i += 2;
+            continue;
+          }
+        }
+        if (isAllowed(ch)) {
+          output3 += ch;
+        } else {
+          const code = input.charCodeAt(i);
+          if (code < 128) {
+            output3 += BYTE_HEX[code];
+          } else if (code < 55296 || code > 57343) {
+            output3 += percentEncodeNonAscii(code);
+          } else if (code <= 56319 && i + 1 < input.length) {
+            const low = input.charCodeAt(i + 1);
+            if (low >= 56320 && low <= 57343) {
+              output3 += percentEncodeNonAscii(65536 + (code - 55296 << 10) + (low - 56320));
+              i++;
+            } else {
+              output3 += percentEncodeNonAscii(65533);
+            }
+          } else {
+            output3 += percentEncodeNonAscii(65533);
+          }
+        }
+      }
+      return output3;
+    }
+    function encodeUserinfo(input) {
+      return encodeComponent(input, isUserinfoCharacter);
+    }
+    function encodeQuery(input) {
+      return encodeComponent(input, isQueryFragmentCharacter);
+    }
+    function encodeFragment(input) {
+      return encodeComponent(input, isQueryFragmentCharacter);
+    }
+    function isEscapeSafe(cp) {
+      return cp >= 48 && cp <= 57 || cp >= 65 && cp <= 90 || cp >= 97 && cp <= 122 || cp === 42 || cp === 43 || cp === 45 || cp === 46 || cp === 47 || cp === 64 || cp === 95;
+    }
+    function normalizeQueryFragmentEncoding(input) {
+      let output3 = "";
+      for (let i = 0; i < input.length; i++) {
+        const ch = input[i];
+        if (ch === "%" && i + 2 < input.length) {
+          const hex3 = input.slice(i + 1, i + 3);
+          if (isHexPair(hex3)) {
+            const normalizedHex = hex3.toUpperCase();
+            const decoded = String.fromCharCode(parseInt(normalizedHex, 16));
+            if (isUnreserved(decoded)) {
+              output3 += decoded;
+            } else {
+              output3 += "%" + normalizedHex;
+            }
+            i += 2;
+            continue;
+          }
+        }
+        if (isQueryFragmentCharacter(ch)) {
+          output3 += ch;
+        } else {
+          const code = input.charCodeAt(i);
+          if (code < 128) {
+            output3 += isEscapeSafe(code) ? ch : BYTE_HEX[code];
+          } else if (code < 55296 || code > 57343) {
+            output3 += percentEncodeNonAscii(code);
+          } else if (code <= 56319 && i + 1 < input.length) {
+            const low = input.charCodeAt(i + 1);
+            if (low >= 56320 && low <= 57343) {
+              output3 += percentEncodeNonAscii(65536 + (code - 55296 << 10) + (low - 56320));
+              i++;
+            } else {
+              output3 += percentEncodeNonAscii(65533);
+            }
+          } else {
+            output3 += percentEncodeNonAscii(65533);
+          }
         }
       }
       return output3;
@@ -5371,14 +5550,18 @@ var require_utils = __commonJS({
     function recomposeAuthority(component) {
       const uriTokens = [];
       if (component.userinfo !== void 0) {
-        uriTokens.push(component.userinfo);
+        uriTokens.push(encodeUserinfo(component.userinfo));
         uriTokens.push("@");
       }
       if (component.host !== void 0) {
-        let host = unescape(component.host);
+        let host = component.host;
         if (!isIPv4(host)) {
-          const ipV6res = normalizeIPv6(host);
-          if (ipV6res.isIPV6 === true) {
+          let ipV6res = normalizeIPv6(host);
+          if (ipV6res.isIPV6 !== true && ipV6res.isIPVFuture !== true) {
+            host = normalizePercentEncoding(host, true);
+            ipV6res = normalizeIPv6(host);
+          }
+          if (ipV6res.isIPV6 === true || ipV6res.isIPVFuture === true) {
             host = `[${ipV6res.escapedHost}]`;
           } else {
             host = reescapeHostDelimiters(host, false);
@@ -5387,8 +5570,12 @@ var require_utils = __commonJS({
         uriTokens.push(host);
       }
       if (typeof component.port === "number" || typeof component.port === "string") {
+        const port = String(component.port);
+        if (!isPort(port)) {
+          throw new TypeError("URI port is malformed.");
+        }
         uriTokens.push(":");
-        uriTokens.push(String(component.port));
+        uriTokens.push(port);
       }
       return uriTokens.length ? uriTokens.join("") : void 0;
     }
@@ -5398,6 +5585,11 @@ var require_utils = __commonJS({
       reescapeHostDelimiters,
       normalizePercentEncoding,
       normalizePathEncoding,
+      serializePathEncoding,
+      normalizeQueryFragmentEncoding,
+      encodeUserinfo,
+      encodeQuery,
+      encodeFragment,
       escapePreservingEscapes,
       removeDotSegments,
       isIPv4,
@@ -5408,12 +5600,12 @@ var require_utils = __commonJS({
   }
 });
-// ../../node_modules/.pnpm/fast-uri@3.1.2/node_modules/fast-uri/lib/schemes.js
+// ../../node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/lib/schemes.js
 var require_schemes = __commonJS({
-  "../../node_modules/.pnpm/fast-uri@3.1.2/node_modules/fast-uri/lib/schemes.js"(exports2, module2) {
+  "../../node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/lib/schemes.js"(exports2, module2) {
     "use strict";
     var { isUUID } = require_utils();
-    var URN_REG = /([\da-z][\d\-a-z]{0,31}):((?:[\w!$'()*+,\-.:;=@]|%[\da-f]{2})+)/iu;
+    var URN_REG = /^([\da-z][\d\-a-z]{0,31}):((?:[\w!$'()*+,\-./:;=@]|%[\da-f]{2})+)$/iu;
     var supportedSchemeNames = (
       /** @type {const} */
       [
@@ -5474,9 +5666,10 @@ var require_schemes = __commonJS({
         wsComponent.secure = void 0;
       }
       if (wsComponent.resourceName) {
-        const [path26, query] = wsComponent.resourceName.split("?");
-        wsComponent.path = path26 && path26 !== "/" ? path26 : void 0;
-        wsComponent.query = query;
+        const queryIndex = wsComponent.resourceName.indexOf("?");
+        const path28 = queryIndex === -1 ? wsComponent.resourceName : wsComponent.resourceName.slice(0, queryIndex);
+        wsComponent.path = path28 && path28 !== "/" ? path28 : void 0;
+        wsComponent.query = queryIndex === -1 ? void 0 : wsComponent.resourceName.slice(queryIndex + 1);
         wsComponent.resourceName = void 0;
       }
       wsComponent.fragment = void 0;
@@ -5488,7 +5681,7 @@ var require_schemes = __commonJS({
         return urnComponent;
       }
       const matches = urnComponent.path.match(URN_REG);
-      if (matches) {
+      if (matches && matches[0] === urnComponent.path) {
         const scheme = options.scheme || urnComponent.scheme || "urn";
         urnComponent.nid = matches[1].toLowerCase();
         urnComponent.nss = matches[2];
@@ -5618,33 +5811,69 @@ var require_schemes = __commonJS({
   }
 });
-// ../../node_modules/.pnpm/fast-uri@3.1.2/node_modules/fast-uri/index.js
+// ../../node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/index.js
 var require_fast_uri = __commonJS({
-  "../../node_modules/.pnpm/fast-uri@3.1.2/node_modules/fast-uri/index.js"(exports2, module2) {
+  "../../node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/index.js"(exports2, module2) {
     "use strict";
-    var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, escapePreservingEscapes, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils();
+    var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, serializePathEncoding, normalizeQueryFragmentEncoding, encodeQuery, encodeFragment, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils();
     var { SCHEMES, getSchemeHandler } = require_schemes();
+    var VALID_SCHEME = /^[A-Za-z][A-Za-z0-9+.-]*$/u;
+    var MALFORMED_SCHEME_ERROR = "URI scheme is malformed.";
+    function decodeValidScheme(scheme) {
+      const decodedScheme = unescape(String(scheme));
+      if (!VALID_SCHEME.test(decodedScheme)) {
+        throw new TypeError(MALFORMED_SCHEME_ERROR);
+      }
+      return decodedScheme;
+    }
     function normalize(uri, options) {
       if (typeof uri === "string") {
         uri = /** @type {T} */
         normalizeString(uri, options);
       } else if (typeof uri === "object") {
         uri = /** @type {T} */
-        parse6(serialize(uri, options), options);
+        parse7(serialize(uri, options), options);
       }
       return uri;
     }
     function resolve(baseURI, relativeURI, options) {
       const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
-      const resolved = resolveComponent(parse6(baseURI, schemelessOptions), parse6(relativeURI, schemelessOptions), schemelessOptions, true);
+      const {
+        parsed: baseParsed,
+        malformedAuthorityOrPort: baseMalformed,
+        malformedPercentEncoding: baseMalformedPercentEncoding,
+        malformedSchemeSpecific: baseMalformedSchemeSpecific,
+        malformedHost: baseMalformedHost,
+        malformedScheme: baseMalformedScheme
+      } = parseWithStatus(baseURI, schemelessOptions);
+      const {
+        parsed: relativeParsed,
+        malformedAuthorityOrPort: relativeMalformed,
+        malformedPercentEncoding: relativeMalformedPercentEncoding,
+        malformedSchemeSpecific: relativeMalformedSchemeSpecific,
+        malformedHost: relativeMalformedHost,
+        malformedScheme: relativeMalformedScheme
+      } = parseWithStatus(relativeURI, schemelessOptions);
+      if (baseMalformed || relativeMalformed || baseMalformedPercentEncoding || relativeMalformedPercentEncoding || baseMalformedSchemeSpecific || relativeMalformedSchemeSpecific || baseMalformedHost || relativeMalformedHost || baseMalformedScheme || relativeMalformedScheme) {
+        throw new Error(baseParsed.error || relativeParsed.error || "URI is malformed.");
+      }
+      const resolved = resolveComponent(baseParsed, relativeParsed, schemelessOptions, true);
+      const resolvedSchemeHandler = getSchemeHandler(options && options.scheme || resolved.scheme);
+      const resolvedHost = resolved.host;
+      const resolvedHostIsIP = resolvedHost !== void 0 && resolvedHost !== "" && (isIPv4(resolvedHost) || normalizeIPv6(resolvedHost).isIPV6);
+      canonicalizeHost(resolved, options || {}, resolvedSchemeHandler, resolvedHostIsIP);
+      const encodedASCIIHost = resolvedHost && resolvedHost.indexOf("%") !== -1 && !new RegExp("\\P{ASCII}", "u").test(resolvedHost);
+      if (resolved.error && !encodedASCIIHost) {
+        throw new Error(resolved.error);
+      }
       schemelessOptions.skipEscape = true;
       return serialize(resolved, schemelessOptions);
     }
     function resolveComponent(base, relative, options, skipNormalization) {
       const target = {};
       if (!skipNormalization) {
-        base = parse6(serialize(base, options), options);
-        relative = parse6(serialize(relative, options), options);
+        base = parse7(serialize(base, options), options);
+        relative = parse7(serialize(relative, options), options);
       }
       options = options || {};
       if (!options.tolerant && relative.scheme) {
@@ -5696,7 +5925,7 @@ var require_fast_uri = __commonJS({
     function equal(uriA, uriB, options) {
       const normalizedA = normalizeComparableURI(uriA, options);
       const normalizedB = normalizeComparableURI(uriB, options);
-      return normalizedA !== void 0 && normalizedB !== void 0 && normalizedA.toLowerCase() === normalizedB.toLowerCase();
+      return normalizedA !== void 0 && normalizedB !== void 0 && normalizedA === normalizedB;
     }
     function serialize(cmpts, opts) {
       const component = {
@@ -5717,19 +5946,22 @@ var require_fast_uri = __commonJS({
       };
       const options = Object.assign({}, opts);
       const uriTokens = [];
+      if (component.scheme) {
+        component.scheme = decodeValidScheme(component.scheme);
+      }
       const schemeHandler = getSchemeHandler(options.scheme || component.scheme);
       if (schemeHandler && schemeHandler.serialize) schemeHandler.serialize(component, options);
+      const hasAuthority = component.userinfo !== void 0 || component.host !== void 0 || component.port !== void 0;
+      const pathNoScheme = !options.skipEscape && component.scheme === void 0 && !hasAuthority;
       if (component.path !== void 0) {
         if (!options.skipEscape) {
-          component.path = escapePreservingEscapes(component.path);
-          if (component.scheme !== void 0) {
-            component.path = component.path.split("%3A").join(":");
-          }
+          component.path = serializePathEncoding(component.path, pathNoScheme);
         } else {
           component.path = normalizePercentEncoding(component.path);
         }
       }
       if (options.reference !== "suffix" && component.scheme) {
+        component.scheme = decodeValidScheme(component.scheme);
         uriTokens.push(component.scheme, ":");
       }
       const authority = recomposeAuthority(component);
@@ -5747,20 +5979,25 @@ var require_fast_uri = __commonJS({
         if (!options.absolutePath && (!schemeHandler || !schemeHandler.absolutePath)) {
           s = removeDotSegments(s);
         }
+        if (pathNoScheme) {
+          s = serializePathEncoding(s, true);
+        }
         if (authority === void 0 && s[0] === "/" && s[1] === "/") {
           s = "/%2F" + s.slice(2);
         }
         uriTokens.push(s);
       }
       if (component.query !== void 0) {
-        uriTokens.push("?", component.query);
+        uriTokens.push("?", encodeQuery(component.query));
       }
       if (component.fragment !== void 0) {
-        uriTokens.push("#", component.fragment);
+        uriTokens.push("#", encodeFragment(component.fragment));
       }
       return uriTokens.join("");
     }
     var URI_PARSE = /^(?:([^#/:?]+):)?(?:\/\/((?:([^#/?@]*)@)?(\[[^#/?\]]+\]|[^#/:?]*)(?::(\d*))?))?([^#?]*)(?:\?([^#]*))?(?:#((?:.|[\n\r])*))?/u;
+    var AUTHORITY_PREFIX = /^(?:[^#/:?]+:)?\/\/([^/?#]*)/;
+    var AUTHORITY_INTRODUCER_REGION = /^(?:[^#/:?]+:)?([/\\\t\n\r]*)/;
     function getParseError(parsed, matches) {
       if (matches[2] !== void 0 && parsed.path && parsed.path[0] !== "/") {
         return 'URI path must start with "/" when authority is present.';
@@ -5770,6 +6007,35 @@ var require_fast_uri = __commonJS({
       }
       return void 0;
     }
+    function hasMalformedPercentEncoding(component) {
+      if (component === void 0) return false;
+      let percent = component.indexOf("%");
+      while (percent !== -1) {
+        if (percent + 2 >= component.length || !/^[\da-f]{2}$/iu.test(component.slice(percent + 1, percent + 3))) {
+          return true;
+        }
+        percent = component.indexOf("%", percent + 3);
+      }
+      return false;
+    }
+    function isIPLiteral(host) {
+      return host[0] === "[" && host[host.length - 1] === "]";
+    }
+    function hasMalformedComponentPercentEncoding(matches) {
+      const host = matches[4];
+      return hasMalformedPercentEncoding(matches[3]) || host !== void 0 && !isIPLiteral(host) && hasMalformedPercentEncoding(host) || hasMalformedPercentEncoding(matches[6]) || hasMalformedPercentEncoding(matches[7]) || hasMalformedPercentEncoding(matches[8]);
+    }
+    function canonicalizeHost(parsed, options, schemeHandler, isIP) {
+      if (!options.unicodeSupport && (!schemeHandler || !schemeHandler.unicodeSupport) && parsed.host && !isIPLiteral(parsed.host) && (options.domainHost || schemeHandler && schemeHandler.domainHost) && isIP === false && nonSimpleDomain(parsed.host)) {
+        try {
+          parsed.host = new URL("http://" + parsed.host).hostname;
+        } catch (e) {
+          parsed.error = parsed.error || "Host's domain name can not be converted to ASCII: " + e;
+          return true;
+        }
+      }
+      return false;
+    }
     function parseWithStatus(uri, opts) {
       const options = Object.assign({}, opts);
       const parsed = {
@@ -5782,6 +6048,11 @@ var require_fast_uri = __commonJS({
         fragment: void 0
       };
       let malformedAuthorityOrPort = false;
+      let malformedPercentEncoding = false;
+      let malformedSchemeSpecific = false;
+      let malformedHost = false;
+      let malformedIPLiteral = false;
+      let malformedScheme = false;
       let isIP = false;
       if (options.reference === "suffix") {
         if (options.scheme) {
@@ -5790,6 +6061,25 @@ var require_fast_uri = __commonJS({
           uri = "//" + uri;
         }
       }
+      const authorityMatch = uri.match(AUTHORITY_PREFIX);
+      if (authorityMatch !== null && authorityMatch[1].indexOf("\\") !== -1) {
+        parsed.error = "URI authority must not contain a literal backslash.";
+        malformedAuthorityOrPort = true;
+      }
+      const introducerMatch = uri.match(AUTHORITY_INTRODUCER_REGION);
+      if (introducerMatch !== null) {
+        const region = introducerMatch[1];
+        const normalizedRegion = region.replace(/[\t\n\r]/g, "");
+        if (normalizedRegion.length >= 2) {
+          if (normalizedRegion.slice(0, 2) !== "//") {
+            parsed.error = parsed.error || "URI authority must not contain a literal backslash.";
+            malformedAuthorityOrPort = true;
+          } else if (region.length !== normalizedRegion.length) {
+            parsed.error = parsed.error || "URI authority introducer must not contain whitespace.";
+            malformedAuthorityOrPort = true;
+          }
+        }
+      }
       const matches = uri.match(URI_PARSE);
       if (matches) {
         parsed.scheme = matches[1];
@@ -5799,6 +6089,19 @@ var require_fast_uri = __commonJS({
         parsed.path = matches[6] || "";
         parsed.query = matches[7];
         parsed.fragment = matches[8];
+        if (parsed.scheme !== void 0) {
+          const decodedScheme = unescape(parsed.scheme);
+          if (VALID_SCHEME.test(decodedScheme)) {
+            parsed.scheme = decodedScheme.toLowerCase();
+          } else {
+            parsed.error = parsed.error || MALFORMED_SCHEME_ERROR;
+            malformedScheme = true;
+          }
+        }
+        malformedPercentEncoding = hasMalformedComponentPercentEncoding(matches);
+        if (malformedPercentEncoding) {
+          parsed.error = parsed.error || "URI contains malformed percent-encoding.";
+        }
         if (isNaN(parsed.port)) {
           parsed.port = matches[5];
         }
@@ -5810,9 +6113,16 @@ var require_fast_uri = __commonJS({
         if (parsed.host) {
           const ipv4result = isIPv4(parsed.host);
           if (ipv4result === false) {
+            const bracketedIPLiteral = isIPLiteral(parsed.host);
+            const hasIPLiteralBracket = parsed.host.indexOf("[") !== -1 || parsed.host.indexOf("]") !== -1;
             const ipv6result = normalizeIPv6(parsed.host);
-            parsed.host = ipv6result.host.toLowerCase();
-            isIP = ipv6result.isIPV6;
+            isIP = ipv6result.isIPV6 || ipv6result.isIPVFuture === true;
+            malformedIPLiteral = hasIPLiteralBracket && (!bracketedIPLiteral || ipv6result.error === true);
+            parsed.host = isIP ? ipv6result.host : ipv6result.host.toLowerCase();
+            if (malformedIPLiteral) {
+              parsed.error = parsed.error || "URI host is malformed.";
+              malformedAuthorityOrPort = true;
+            }
           } else {
             isIP = true;
           }
@@ -5830,64 +6140,67 @@ var require_fast_uri = __commonJS({
           parsed.error = parsed.error || "URI is not a " + options.reference + " reference.";
         }
         const schemeHandler = getSchemeHandler(options.scheme || parsed.scheme);
-        if (!options.unicodeSupport && (!schemeHandler || !schemeHandler.unicodeSupport)) {
-          if (parsed.host && (options.domainHost || schemeHandler && schemeHandler.domainHost) && isIP === false && nonSimpleDomain(parsed.host)) {
-            try {
-              parsed.host = URL.domainToASCII(parsed.host.toLowerCase());
-            } catch (e) {
-              parsed.error = parsed.error || "Host's domain name can not be converted to ASCII: " + e;
-            }
+        if (!malformedIPLiteral) {
+          malformedHost = canonicalizeHost(parsed, options, schemeHandler, isIP);
+        }
+        if (uri.indexOf("%") !== -1 && parsed.host !== void 0 && !malformedIPLiteral) {
+          let host = isIP ? parsed.host : normalizePercentEncoding(parsed.host, true);
+          if (!isIP) {
+            host = normalizePercentEncoding(host.toLowerCase());
           }
+          parsed.host = reescapeHostDelimiters(host, isIP);
         }
         if (!schemeHandler || schemeHandler && !schemeHandler.skipNormalize) {
-          if (uri.indexOf("%") !== -1) {
-            if (parsed.scheme !== void 0) {
-              parsed.scheme = unescape(parsed.scheme);
-            }
-            if (parsed.host !== void 0) {
-              parsed.host = reescapeHostDelimiters(unescape(parsed.host), isIP);
-            }
-          }
           if (parsed.path) {
             parsed.path = normalizePathEncoding(parsed.path);
           }
+          if (parsed.query) {
+            parsed.query = normalizeQueryFragmentEncoding(parsed.query);
+          }
           if (parsed.fragment) {
-            try {
-              parsed.fragment = encodeURI(decodeURIComponent(parsed.fragment));
-            } catch {
-              parsed.error = parsed.error || "URI malformed";
-            }
+            parsed.fragment = normalizeQueryFragmentEncoding(parsed.fragment);
           }
         }
         if (schemeHandler && schemeHandler.parse) {
           schemeHandler.parse(parsed, options);
+          if (schemeHandler === SCHEMES.urn && parsed.nid === void 0) {
+            malformedSchemeSpecific = true;
+          }
         }
       } else {
         parsed.error = parsed.error || "URI can not be parsed.";
       }
-      return { parsed, malformedAuthorityOrPort };
+      return { parsed, malformedAuthorityOrPort, malformedPercentEncoding, malformedSchemeSpecific, malformedHost, malformedScheme };
     }
-    function parse6(uri, opts) {
+    function parse7(uri, opts) {
       return parseWithStatus(uri, opts).parsed;
     }
     function normalizeString(uri, opts) {
       return normalizeStringWithStatus(uri, opts).normalized;
     }
     function normalizeStringWithStatus(uri, opts) {
-      const { parsed, malformedAuthorityOrPort } = parseWithStatus(uri, opts);
+      const { parsed, malformedAuthorityOrPort, malformedPercentEncoding, malformedSchemeSpecific, malformedHost, malformedScheme } = parseWithStatus(uri, opts);
       return {
-        normalized: malformedAuthorityOrPort ? uri : serialize(parsed, opts),
-        malformedAuthorityOrPort
+        normalized: malformedAuthorityOrPort || malformedPercentEncoding || malformedSchemeSpecific || malformedHost || malformedScheme ? uri : serialize(parsed, opts),
+        malformedAuthorityOrPort,
+        malformedPercentEncoding,
+        malformedSchemeSpecific,
+        malformedHost,
+        malformedScheme
       };
     }
     function normalizeComparableURI(uri, opts) {
-      if (typeof uri === "string") {
-        const { normalized, malformedAuthorityOrPort } = normalizeStringWithStatus(uri, opts);
-        return malformedAuthorityOrPort ? void 0 : normalized;
+      if (typeof uri !== "string" && typeof uri !== "object") {
+        return void 0;
       }
-      if (typeof uri === "object") {
-        return serialize(uri, opts);
+      let value;
+      try {
+        value = typeof uri === "string" ? uri : serialize(uri, opts);
+      } catch {
+        return void 0;
       }
+      const { normalized, malformedAuthorityOrPort, malformedPercentEncoding, malformedSchemeSpecific, malformedHost, malformedScheme } = normalizeStringWithStatus(value, opts);
+      return malformedAuthorityOrPort || malformedPercentEncoding || malformedSchemeSpecific || malformedHost || malformedScheme ? void 0 : normalized;
     }
     var fastUri = {
       SCHEMES,
@@ -5896,7 +6209,7 @@ var require_fast_uri = __commonJS({
       resolveComponent,
       equal,
       serialize,
-      parse: parse6
+      parse: parse7
     };
     module2.exports = fastUri;
     module2.exports.default = fastUri;
@@ -8868,12 +9181,12 @@ var require_dist = __commonJS({
         throw new Error(`Unknown format "${name}"`);
       return f;
     };
-    function addFormats(ajv, list, fs12, exportName) {
+    function addFormats(ajv, list, fs14, exportName) {
       var _a3;
       var _b;
       (_a3 = (_b = ajv.opts.code).formats) !== null && _a3 !== void 0 ? _a3 : _b.formats = (0, codegen_1._)`require("ajv-formats/dist/formats").${exportName}`;
       for (const f of list)
-        ajv.addFormat(f, fs12[f]);
+        ajv.addFormat(f, fs14[f]);
     }
     module2.exports = exports2 = formatsPlugin;
     Object.defineProperty(exports2, "__esModule", { value: true });
@@ -8881,6 +9194,110 @@ var require_dist = __commonJS({
   }
 });
+// ../../node_modules/.pnpm/content-type@1.0.5/node_modules/content-type/index.js
+var require_content_type = __commonJS({
+  "../../node_modules/.pnpm/content-type@1.0.5/node_modules/content-type/index.js"(exports2) {
+    "use strict";
+    var PARAM_REGEXP = /; *([!#$%&'*+.^_`|~0-9A-Za-z-]+) *= *("(?:[\u000b\u0020\u0021\u0023-\u005b\u005d-\u007e\u0080-\u00ff]|\\[\u000b\u0020-\u00ff])*"|[!#$%&'*+.^_`|~0-9A-Za-z-]+) */g;
+    var TEXT_REGEXP = /^[\u000b\u0020-\u007e\u0080-\u00ff]+$/;
+    var TOKEN_REGEXP = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/;
+    var QESC_REGEXP = /\\([\u000b\u0020-\u00ff])/g;
+    var QUOTE_REGEXP = /([\\"])/g;
+    var TYPE_REGEXP = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+\/[!#$%&'*+.^_`|~0-9A-Za-z-]+$/;
+    exports2.format = format;
+    exports2.parse = parse7;
+    function format(obj) {
+      if (!obj || typeof obj !== "object") {
+        throw new TypeError("argument obj is required");
+      }
+      var parameters = obj.parameters;
+      var type = obj.type;
+      if (!type || !TYPE_REGEXP.test(type)) {
+        throw new TypeError("invalid type");
+      }
+      var string4 = type;
+      if (parameters && typeof parameters === "object") {
+        var param;
+        var params = Object.keys(parameters).sort();
+        for (var i = 0; i < params.length; i++) {
+          param = params[i];
+          if (!TOKEN_REGEXP.test(param)) {
+            throw new TypeError("invalid parameter name");
+          }
+          string4 += "; " + param + "=" + qstring(parameters[param]);
+        }
+      }
+      return string4;
+    }
+    function parse7(string4) {
+      if (!string4) {
+        throw new TypeError("argument string is required");
+      }
+      var header = typeof string4 === "object" ? getcontenttype(string4) : string4;
+      if (typeof header !== "string") {
+        throw new TypeError("argument string is required to be a string");
+      }
+      var index = header.indexOf(";");
+      var type = index !== -1 ? header.slice(0, index).trim() : header.trim();
+      if (!TYPE_REGEXP.test(type)) {
+        throw new TypeError("invalid media type");
+      }
+      var obj = new ContentType(type.toLowerCase());
+      if (index !== -1) {
+        var key;
+        var match;
+        var value;
+        PARAM_REGEXP.lastIndex = index;
+        while (match = PARAM_REGEXP.exec(header)) {
+          if (match.index !== index) {
+            throw new TypeError("invalid parameter format");
+          }
+          index += match[0].length;
+          key = match[1].toLowerCase();
+          value = match[2];
+          if (value.charCodeAt(0) === 34) {
+            value = value.slice(1, -1);
+            if (value.indexOf("\\") !== -1) {
+              value = value.replace(QESC_REGEXP, "$1");
+            }
+          }
+          obj.parameters[key] = value;
+        }
+        if (index !== header.length) {
+          throw new TypeError("invalid parameter format");
+        }
+      }
+      return obj;
+    }
+    function getcontenttype(obj) {
+      var header;
+      if (typeof obj.getHeader === "function") {
+        header = obj.getHeader("content-type");
+      } else if (typeof obj.headers === "object") {
+        header = obj.headers && obj.headers["content-type"];
+      }
+      if (typeof header !== "string") {
+        throw new TypeError("content-type header is missing from object");
+      }
+      return header;
+    }
+    function qstring(val) {
+      var str = String(val);
+      if (TOKEN_REGEXP.test(str)) {
+        return str;
+      }
+      if (str.length > 0 && !TEXT_REGEXP.test(str)) {
+        throw new TypeError("invalid parameter value");
+      }
+      return '"' + str.replace(QUOTE_REGEXP, "\\$1") + '"';
+    }
+    function ContentType(type) {
+      this.parameters = /* @__PURE__ */ Object.create(null);
+      this.type = type;
+    }
+  }
+});
 // ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/internal/constants.js
 var require_constants = __commonJS({
   "../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/internal/constants.js"(exports2, module2) {
@@ -9339,7 +9756,7 @@ var require_parse2 = __commonJS({
   "../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/parse.js"(exports2, module2) {
     "use strict";
     var SemVer = require_semver();
-    var parse6 = (version2, options, throwErrors = false) => {
+    var parse7 = (version2, options, throwErrors = false) => {
       if (version2 instanceof SemVer) {
         return version2;
       }
@@ -9352,7 +9769,7 @@ var require_parse2 = __commonJS({
         throw er;
       }
     };
-    module2.exports = parse6;
+    module2.exports = parse7;
   }
 });
@@ -9360,9 +9777,9 @@ var require_parse2 = __commonJS({
 var require_valid = __commonJS({
   "../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/valid.js"(exports2, module2) {
     "use strict";
-    var parse6 = require_parse2();
+    var parse7 = require_parse2();
     var valid = (version2, options) => {
-      const v = parse6(version2, options);
+      const v = parse7(version2, options);
       return v ? v.version : null;
     };
     module2.exports = valid;
@@ -9373,9 +9790,9 @@ var require_valid = __commonJS({
 var require_clean = __commonJS({
   "../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/clean.js"(exports2, module2) {
     "use strict";
-    var parse6 = require_parse2();
+    var parse7 = require_parse2();
     var clean = (version2, options) => {
-      const s = parse6(version2.trim().replace(/^[=v]+/, ""), options);
+      const s = parse7(version2.trim().replace(/^[=v]+/, ""), options);
       return s ? s.version : null;
     };
     module2.exports = clean;
@@ -9410,10 +9827,10 @@ var require_inc = __commonJS({
 var require_diff = __commonJS({
   "../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/diff.js"(exports2, module2) {
     "use strict";
-    var parse6 = require_parse2();
+    var parse7 = require_parse2();
     var diff = (version1, version2) => {
-      const v1 = parse6(version1, null, true);
-      const v2 = parse6(version2, null, true);
+      const v1 = parse7(version1, null, true);
+      const v2 = parse7(version2, null, true);
       const comparison = v1.compare(v2);
       if (comparison === 0) {
         return null;
@@ -9484,9 +9901,9 @@ var require_patch = __commonJS({
 var require_prerelease = __commonJS({
   "../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/prerelease.js"(exports2, module2) {
     "use strict";
-    var parse6 = require_parse2();
+    var parse7 = require_parse2();
     var prerelease = (version2, options) => {
-      const parsed = parse6(version2, options);
+      const parsed = parse7(version2, options);
       return parsed && parsed.prerelease.length ? parsed.prerelease : null;
     };
     module2.exports = prerelease;
@@ -9672,7 +10089,7 @@ var require_coerce = __commonJS({
   "../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/coerce.js"(exports2, module2) {
     "use strict";
     var SemVer = require_semver();
-    var parse6 = require_parse2();
+    var parse7 = require_parse2();
     var { safeRe: re, t } = require_re();
     var coerce = (version2, options) => {
       if (version2 instanceof SemVer) {
@@ -9707,7 +10124,7 @@ var require_coerce = __commonJS({
       const patch = match[4] || "0";
       const prerelease = options.includePrerelease && match[5] ? `-${match[5]}` : "";
       const build = options.includePrerelease && match[6] ? `+${match[6]}` : "";
-      return parse6(`${major}.${minor}.${patch}${prerelease}${build}`, options);
+      return parse7(`${major}.${minor}.${patch}${prerelease}${build}`, options);
     };
     module2.exports = coerce;
   }
@@ -9717,7 +10134,7 @@ var require_coerce = __commonJS({
 var require_truncate = __commonJS({
   "../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/truncate.js"(exports2, module2) {
     "use strict";
-    var parse6 = require_parse2();
+    var parse7 = require_parse2();
     var constants2 = require_constants();
     var SemVer = require_semver();
     var truncate3 = (version2, truncation, options) => {
@@ -9729,7 +10146,7 @@ var require_truncate = __commonJS({
     };
     var cloneInputVersion = (version2, options) => {
       const versionStringToParse = version2 instanceof SemVer ? version2.version : version2;
-      return parse6(versionStringToParse, options);
+      return parse7(versionStringToParse, options);
     };
     var doTruncation = (version2, truncation) => {
       if (isPrerelease(truncation)) {
@@ -10765,7 +11182,7 @@ var require_semver2 = __commonJS({
     var constants2 = require_constants();
     var SemVer = require_semver();
     var identifiers = require_identifiers();
-    var parse6 = require_parse2();
+    var parse7 = require_parse2();
     var valid = require_valid();
     var clean = require_clean();
     var inc = require_inc();
@@ -10804,7 +11221,7 @@ var require_semver2 = __commonJS({
     var simplifyRange = require_simplify();
     var subset = require_subset();
     module2.exports = {
-      parse: parse6,
+      parse: parse7,
       valid,
       clean,
       inc,
@@ -12949,7 +13366,7 @@ var require_extension = __commonJS({
       if (dest[name] === void 0) dest[name] = [elem];
       else dest[name].push(elem);
     }
-    function parse6(header) {
+    function parse7(header) {
       const offers = /* @__PURE__ */ Object.create(null);
       let params = /* @__PURE__ */ Object.create(null);
       let mustUnescape = false;
@@ -13089,7 +13506,7 @@ var require_extension = __commonJS({
         }).join(", ");
       }).join(", ");
     }
-    module2.exports = { format, parse: parse6 };
+    module2.exports = { format, parse: parse7 };
   }
 });
@@ -13123,7 +13540,7 @@ var require_websocket = __commonJS({
     var {
       EventTarget: { addEventListener, removeEventListener }
     } = require_event_target();
-    var { format, parse: parse6 } = require_extension();
+    var { format, parse: parse7 } = require_extension();
     var { toBuffer } = require_buffer_util();
     var kAborted = Symbol("kAborted");
     var protocolVersions = [8, 13];
@@ -13800,7 +14217,7 @@ var require_websocket = __commonJS({
           }
           let extensions;
           try {
-            extensions = parse6(secWebSocketExtensions);
+            extensions = parse7(secWebSocketExtensions);
           } catch (err) {
             const message = "Invalid Sec-WebSocket-Extensions header";
             abortHandshake(websocket, socket, message);
@@ -14092,7 +14509,7 @@ var require_subprotocol = __commonJS({
   "../../node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/subprotocol.js"(exports2, module2) {
     "use strict";
     var { tokenChars } = require_validation2();
-    function parse6(header) {
+    function parse7(header) {
       const protocols = /* @__PURE__ */ new Set();
       let start = -1;
       let end = -1;
@@ -14128,7 +14545,7 @@ var require_subprotocol = __commonJS({
       protocols.add(protocol);
       return protocols;
     }
-    module2.exports = { parse: parse6 };
+    module2.exports = { parse: parse7 };
   }
 });
@@ -14559,54 +14976,54 @@ var require_polyfills = __commonJS({
     }
     var chdir;
     module2.exports = patch;
-    function patch(fs12) {
+    function patch(fs14) {
       if (constants2.hasOwnProperty("O_SYMLINK") && process.version.match(/^v0\.6\.[0-2]|^v0\.5\./)) {
-        patchLchmod(fs12);
-      }
-      if (!fs12.lutimes) {
-        patchLutimes(fs12);
-      }
-      fs12.chown = chownFix(fs12.chown);
-      fs12.fchown = chownFix(fs12.fchown);
-      fs12.lchown = chownFix(fs12.lchown);
-      fs12.chmod = chmodFix(fs12.chmod);
-      fs12.fchmod = chmodFix(fs12.fchmod);
-      fs12.lchmod = chmodFix(fs12.lchmod);
-      fs12.chownSync = chownFixSync(fs12.chownSync);
-      fs12.fchownSync = chownFixSync(fs12.fchownSync);
-      fs12.lchownSync = chownFixSync(fs12.lchownSync);
-      fs12.chmodSync = chmodFixSync(fs12.chmodSync);
-      fs12.fchmodSync = chmodFixSync(fs12.fchmodSync);
-      fs12.lchmodSync = chmodFixSync(fs12.lchmodSync);
-      fs12.stat = statFix(fs12.stat);
-      fs12.fstat = statFix(fs12.fstat);
-      fs12.lstat = statFix(fs12.lstat);
-      fs12.statSync = statFixSync(fs12.statSync);
-      fs12.fstatSync = statFixSync(fs12.fstatSync);
-      fs12.lstatSync = statFixSync(fs12.lstatSync);
-      if (fs12.chmod && !fs12.lchmod) {
-        fs12.lchmod = function(path26, mode, cb) {
+        patchLchmod(fs14);
+      }
+      if (!fs14.lutimes) {
+        patchLutimes(fs14);
+      }
+      fs14.chown = chownFix(fs14.chown);
+      fs14.fchown = chownFix(fs14.fchown);
+      fs14.lchown = chownFix(fs14.lchown);
+      fs14.chmod = chmodFix(fs14.chmod);
+      fs14.fchmod = chmodFix(fs14.fchmod);
+      fs14.lchmod = chmodFix(fs14.lchmod);
+      fs14.chownSync = chownFixSync(fs14.chownSync);
+      fs14.fchownSync = chownFixSync(fs14.fchownSync);
+      fs14.lchownSync = chownFixSync(fs14.lchownSync);
+      fs14.chmodSync = chmodFixSync(fs14.chmodSync);
+      fs14.fchmodSync = chmodFixSync(fs14.fchmodSync);
+      fs14.lchmodSync = chmodFixSync(fs14.lchmodSync);
+      fs14.stat = statFix(fs14.stat);
+      fs14.fstat = statFix(fs14.fstat);
+      fs14.lstat = statFix(fs14.lstat);
+      fs14.statSync = statFixSync(fs14.statSync);
+      fs14.fstatSync = statFixSync(fs14.fstatSync);
+      fs14.lstatSync = statFixSync(fs14.lstatSync);
+      if (fs14.chmod && !fs14.lchmod) {
+        fs14.lchmod = function(path28, mode, cb) {
           if (cb) process.nextTick(cb);
         };
-        fs12.lchmodSync = function() {
+        fs14.lchmodSync = function() {
         };
       }
-      if (fs12.chown && !fs12.lchown) {
-        fs12.lchown = function(path26, uid, gid, cb) {
+      if (fs14.chown && !fs14.lchown) {
+        fs14.lchown = function(path28, uid, gid, cb) {
           if (cb) process.nextTick(cb);
         };
-        fs12.lchownSync = function() {
+        fs14.lchownSync = function() {
         };
       }
       if (platform === "win32") {
-        fs12.rename = typeof fs12.rename !== "function" ? fs12.rename : function(fs$rename) {
+        fs14.rename = typeof fs14.rename !== "function" ? fs14.rename : function(fs$rename) {
           function rename4(from, to, cb) {
             var start = Date.now();
             var backoff = 0;
             fs$rename(from, to, function CB(er) {
               if (er && (er.code === "EACCES" || er.code === "EPERM" || er.code === "EBUSY") && Date.now() - start < 6e4) {
                 setTimeout(function() {
-                  fs12.stat(to, function(stater, st) {
+                  fs14.stat(to, function(stater, st) {
                     if (stater && stater.code === "ENOENT")
                       fs$rename(from, to, CB);
                     else
@@ -14622,9 +15039,9 @@ var require_polyfills = __commonJS({
           }
           if (Object.setPrototypeOf) Object.setPrototypeOf(rename4, fs$rename);
           return rename4;
-        }(fs12.rename);
+        }(fs14.rename);
       }
-      fs12.read = typeof fs12.read !== "function" ? fs12.read : function(fs$read) {
+      fs14.read = typeof fs14.read !== "function" ? fs14.read : function(fs$read) {
         function read(fd, buffer, offset, length, position, callback_) {
           var callback;
           if (callback_ && typeof callback_ === "function") {
@@ -14632,22 +15049,22 @@ var require_polyfills = __commonJS({
             callback = function(er, _, __) {
               if (er && er.code === "EAGAIN" && eagCounter < 10) {
                 eagCounter++;
-                return fs$read.call(fs12, fd, buffer, offset, length, position, callback);
+                return fs$read.call(fs14, fd, buffer, offset, length, position, callback);
               }
               callback_.apply(this, arguments);
             };
           }
-          return fs$read.call(fs12, fd, buffer, offset, length, position, callback);
+          return fs$read.call(fs14, fd, buffer, offset, length, position, callback);
         }
         if (Object.setPrototypeOf) Object.setPrototypeOf(read, fs$read);
         return read;
-      }(fs12.read);
-      fs12.readSync = typeof fs12.readSync !== "function" ? fs12.readSync : /* @__PURE__ */ function(fs$readSync) {
+      }(fs14.read);
+      fs14.readSync = typeof fs14.readSync !== "function" ? fs14.readSync : /* @__PURE__ */ function(fs$readSync) {
         return function(fd, buffer, offset, length, position) {
           var eagCounter = 0;
           while (true) {
             try {
-              return fs$readSync.call(fs12, fd, buffer, offset, length, position);
+              return fs$readSync.call(fs14, fd, buffer, offset, length, position);
             } catch (er) {
               if (er.code === "EAGAIN" && eagCounter < 10) {
                 eagCounter++;
@@ -14657,11 +15074,11 @@ var require_polyfills = __commonJS({
             }
           }
         };
-      }(fs12.readSync);
-      function patchLchmod(fs13) {
-        fs13.lchmod = function(path26, mode, callback) {
-          fs13.open(
-            path26,
+      }(fs14.readSync);
+      function patchLchmod(fs15) {
+        fs15.lchmod = function(path28, mode, callback) {
+          fs15.open(
+            path28,
             constants2.O_WRONLY | constants2.O_SYMLINK,
             mode,
             function(err, fd) {
@@ -14669,80 +15086,80 @@ var require_polyfills = __commonJS({
                 if (callback) callback(err);
                 return;
               }
-              fs13.fchmod(fd, mode, function(err2) {
-                fs13.close(fd, function(err22) {
+              fs15.fchmod(fd, mode, function(err2) {
+                fs15.close(fd, function(err22) {
                   if (callback) callback(err2 || err22);
                 });
               });
             }
           );
         };
-        fs13.lchmodSync = function(path26, mode) {
-          var fd = fs13.openSync(path26, constants2.O_WRONLY | constants2.O_SYMLINK, mode);
+        fs15.lchmodSync = function(path28, mode) {
+          var fd = fs15.openSync(path28, constants2.O_WRONLY | constants2.O_SYMLINK, mode);
           var threw = true;
           var ret;
           try {
-            ret = fs13.fchmodSync(fd, mode);
+            ret = fs15.fchmodSync(fd, mode);
             threw = false;
           } finally {
             if (threw) {
               try {
-                fs13.closeSync(fd);
+                fs15.closeSync(fd);
               } catch (er) {
               }
             } else {
-              fs13.closeSync(fd);
+              fs15.closeSync(fd);
             }
           }
           return ret;
         };
       }
-      function patchLutimes(fs13) {
-        if (constants2.hasOwnProperty("O_SYMLINK") && fs13.futimes) {
-          fs13.lutimes = function(path26, at, mt, cb) {
-            fs13.open(path26, constants2.O_SYMLINK, function(er, fd) {
+      function patchLutimes(fs15) {
+        if (constants2.hasOwnProperty("O_SYMLINK") && fs15.futimes) {
+          fs15.lutimes = function(path28, at, mt, cb) {
+            fs15.open(path28, constants2.O_SYMLINK, function(er, fd) {
               if (er) {
                 if (cb) cb(er);
                 return;
               }
-              fs13.futimes(fd, at, mt, function(er2) {
-                fs13.close(fd, function(er22) {
+              fs15.futimes(fd, at, mt, function(er2) {
+                fs15.close(fd, function(er22) {
                   if (cb) cb(er2 || er22);
                 });
               });
             });
           };
-          fs13.lutimesSync = function(path26, at, mt) {
-            var fd = fs13.openSync(path26, constants2.O_SYMLINK);
+          fs15.lutimesSync = function(path28, at, mt) {
+            var fd = fs15.openSync(path28, constants2.O_SYMLINK);
             var ret;
             var threw = true;
             try {
-              ret = fs13.futimesSync(fd, at, mt);
+              ret = fs15.futimesSync(fd, at, mt);
               threw = false;
             } finally {
               if (threw) {
                 try {
-                  fs13.closeSync(fd);
+                  fs15.closeSync(fd);
                 } catch (er) {
                 }
               } else {
-                fs13.closeSync(fd);
+                fs15.closeSync(fd);
               }
             }
             return ret;
           };
-        } else if (fs13.futimes) {
-          fs13.lutimes = function(_a3, _b, _c, cb) {
+        } else if (fs15.futimes) {
+          fs15.lutimes = function(_a3, _b, _c, cb) {
             if (cb) process.nextTick(cb);
           };
-          fs13.lutimesSync = function() {
+          fs15.lutimesSync = function() {
           };
         }
       }
       function chmodFix(orig) {
         if (!orig) return orig;
         return function(target, mode, cb) {
-          return orig.call(fs12, target, mode, function(er) {
+          return orig.call(fs14, target, mode, function(er) {
             if (chownErOk(er)) er = null;
             if (cb) cb.apply(this, arguments);
           });
@@ -14752,7 +15169,7 @@ var require_polyfills = __commonJS({
         if (!orig) return orig;
         return function(target, mode) {
           try {
-            return orig.call(fs12, target, mode);
+            return orig.call(fs14, target, mode);
           } catch (er) {
             if (!chownErOk(er)) throw er;
           }
@@ -14761,7 +15178,7 @@ var require_polyfills = __commonJS({
       function chownFix(orig) {
         if (!orig) return orig;
         return function(target, uid, gid, cb) {
-          return orig.call(fs12, target, uid, gid, function(er) {
+          return orig.call(fs14, target, uid, gid, function(er) {
             if (chownErOk(er)) er = null;
             if (cb) cb.apply(this, arguments);
           });
@@ -14771,7 +15188,7 @@ var require_polyfills = __commonJS({
         if (!orig) return orig;
         return function(target, uid, gid) {
           try {
-            return orig.call(fs12, target, uid, gid);
+            return orig.call(fs14, target, uid, gid);
           } catch (er) {
             if (!chownErOk(er)) throw er;
           }
@@ -14791,13 +15208,13 @@ var require_polyfills = __commonJS({
             }
             if (cb) cb.apply(this, arguments);
           }
-          return options ? orig.call(fs12, target, options, callback) : orig.call(fs12, target, callback);
+          return options ? orig.call(fs14, target, options, callback) : orig.call(fs14, target, callback);
         };
       }
       function statFixSync(orig) {
         if (!orig) return orig;
         return function(target, options) {
-          var stats = options ? orig.call(fs12, target, options) : orig.call(fs12, target);
+          var stats = options ? orig.call(fs14, target, options) : orig.call(fs14, target);
           if (stats) {
             if (stats.uid < 0) stats.uid += 4294967296;
             if (stats.gid < 0) stats.gid += 4294967296;
@@ -14826,16 +15243,16 @@ var require_legacy_streams = __commonJS({
   "../../node_modules/.pnpm/graceful-fs@4.2.11/node_modules/graceful-fs/legacy-streams.js"(exports2, module2) {
     var Stream = require("stream").Stream;
     module2.exports = legacy;
-    function legacy(fs12) {
+    function legacy(fs14) {
       return {
         ReadStream,
         WriteStream
       };
-      function ReadStream(path26, options) {
-        if (!(this instanceof ReadStream)) return new ReadStream(path26, options);
+      function ReadStream(path28, options) {
+        if (!(this instanceof ReadStream)) return new ReadStream(path28, options);
         Stream.call(this);
         var self = this;
-        this.path = path26;
+        this.path = path28;
         this.fd = null;
         this.readable = true;
         this.paused = false;
@@ -14869,7 +15286,7 @@ var require_legacy_streams = __commonJS({
           });
           return;
         }
-        fs12.open(this.path, this.flags, this.mode, function(err, fd) {
+        fs14.open(this.path, this.flags, this.mode, function(err, fd) {
           if (err) {
             self.emit("error", err);
             self.readable = false;
@@ -14880,10 +15297,10 @@ var require_legacy_streams = __commonJS({
           self._read();
         });
       }
-      function WriteStream(path26, options) {
-        if (!(this instanceof WriteStream)) return new WriteStream(path26, options);
+      function WriteStream(path28, options) {
+        if (!(this instanceof WriteStream)) return new WriteStream(path28, options);
         Stream.call(this);
-        this.path = path26;
+        this.path = path28;
         this.fd = null;
         this.writable = true;
         this.flags = "w";
@@ -14908,7 +15325,7 @@ var require_legacy_streams = __commonJS({
         this.busy = false;
         this._queue = [];
         if (this.fd === null) {
-          this._open = fs12.open;
+          this._open = fs14.open;
           this._queue.push([this._open, this.path, this.flags, this.mode, void 0]);
           this.flush();
         }
@@ -14943,7 +15360,7 @@ var require_clone = __commonJS({
 // ../../node_modules/.pnpm/graceful-fs@4.2.11/node_modules/graceful-fs/graceful-fs.js
 var require_graceful_fs = __commonJS({
   "../../node_modules/.pnpm/graceful-fs@4.2.11/node_modules/graceful-fs/graceful-fs.js"(exports2, module2) {
-    var fs12 = require("fs");
+    var fs14 = require("fs");
     var polyfills = require_polyfills();
     var legacy = require_legacy_streams();
     var clone2 = require_clone();
@@ -14975,12 +15392,12 @@ var require_graceful_fs = __commonJS({
         m = "GFS4: " + m.split(/\n/).join("\nGFS4: ");
         console.error(m);
       };
-    if (!fs12[gracefulQueue]) {
+    if (!fs14[gracefulQueue]) {
       queue = global[gracefulQueue] || [];
-      publishQueue(fs12, queue);
-      fs12.close = function(fs$close) {
+      publishQueue(fs14, queue);
+      fs14.close = function(fs$close) {
         function close(fd, cb) {
-          return fs$close.call(fs12, fd, function(err) {
+          return fs$close.call(fs14, fd, function(err) {
             if (!err) {
               resetQueue();
             }
@@ -14992,48 +15409,48 @@ var require_graceful_fs = __commonJS({
           value: fs$close
         });
         return close;
-      }(fs12.close);
-      fs12.closeSync = function(fs$closeSync) {
+      }(fs14.close);
+      fs14.closeSync = function(fs$closeSync) {
         function closeSync(fd) {
-          fs$closeSync.apply(fs12, arguments);
+          fs$closeSync.apply(fs14, arguments);
           resetQueue();
         }
         Object.defineProperty(closeSync, previousSymbol, {
           value: fs$closeSync
         });
         return closeSync;
-      }(fs12.closeSync);
+      }(fs14.closeSync);
       if (/\bgfs4\b/i.test(process.env.NODE_DEBUG || "")) {
         process.on("exit", function() {
-          debug(fs12[gracefulQueue]);
-          require("assert").equal(fs12[gracefulQueue].length, 0);
+          debug(fs14[gracefulQueue]);
+          require("assert").equal(fs14[gracefulQueue].length, 0);
         });
       }
     }
     var queue;
     if (!global[gracefulQueue]) {
-      publishQueue(global, fs12[gracefulQueue]);
-    }
-    module2.exports = patch(clone2(fs12));
-    if (process.env.TEST_GRACEFUL_FS_GLOBAL_PATCH && !fs12.__patched) {
-      module2.exports = patch(fs12);
-      fs12.__patched = true;
-    }
-    function patch(fs13) {
-      polyfills(fs13);
-      fs13.gracefulify = patch;
-      fs13.createReadStream = createReadStream2;
-      fs13.createWriteStream = createWriteStream;
-      var fs$readFile = fs13.readFile;
-      fs13.readFile = readFile9;
-      function readFile9(path26, options, cb) {
+      publishQueue(global, fs14[gracefulQueue]);
+    }
+    module2.exports = patch(clone2(fs14));
+    if (process.env.TEST_GRACEFUL_FS_GLOBAL_PATCH && !fs14.__patched) {
+      module2.exports = patch(fs14);
+      fs14.__patched = true;
+    }
+    function patch(fs15) {
+      polyfills(fs15);
+      fs15.gracefulify = patch;
+      fs15.createReadStream = createReadStream2;
+      fs15.createWriteStream = createWriteStream;
+      var fs$readFile = fs15.readFile;
+      fs15.readFile = readFile9;
+      function readFile9(path28, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
-        return go$readFile(path26, options, cb);
-        function go$readFile(path27, options2, cb2, startTime) {
-          return fs$readFile(path27, options2, function(err) {
+        return go$readFile(path28, options, cb);
+        function go$readFile(path29, options2, cb2, startTime) {
+          return fs$readFile(path29, options2, function(err) {
             if (err && (err.code === "EMFILE" || err.code === "ENFILE"))
-              enqueue([go$readFile, [path27, options2, cb2], err, startTime || Date.now(), Date.now()]);
+              enqueue([go$readFile, [path29, options2, cb2], err, startTime || Date.now(), Date.now()]);
             else {
               if (typeof cb2 === "function")
                 cb2.apply(this, arguments);
@@ -15041,16 +15458,16 @@ var require_graceful_fs = __commonJS({
           });
         }
       }
-      var fs$writeFile = fs13.writeFile;
-      fs13.writeFile = writeFile5;
-      function writeFile5(path26, data, options, cb) {
+      var fs$writeFile = fs15.writeFile;
+      fs15.writeFile = writeFile5;
+      function writeFile5(path28, data, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
-        return go$writeFile(path26, data, options, cb);
-        function go$writeFile(path27, data2, options2, cb2, startTime) {
-          return fs$writeFile(path27, data2, options2, function(err) {
+        return go$writeFile(path28, data, options, cb);
+        function go$writeFile(path29, data2, options2, cb2, startTime) {
+          return fs$writeFile(path29, data2, options2, function(err) {
             if (err && (err.code === "EMFILE" || err.code === "ENFILE"))
-              enqueue([go$writeFile, [path27, data2, options2, cb2], err, startTime || Date.now(), Date.now()]);
+              enqueue([go$writeFile, [path29, data2, options2, cb2], err, startTime || Date.now(), Date.now()]);
             else {
               if (typeof cb2 === "function")
                 cb2.apply(this, arguments);
@@ -15058,17 +15475,17 @@ var require_graceful_fs = __commonJS({
           });
         }
       }
-      var fs$appendFile = fs13.appendFile;
+      var fs$appendFile = fs15.appendFile;
       if (fs$appendFile)
-        fs13.appendFile = appendFile2;
-      function appendFile2(path26, data, options, cb) {
+        fs15.appendFile = appendFile2;
+      function appendFile2(path28, data, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
-        return go$appendFile(path26, data, options, cb);
-        function go$appendFile(path27, data2, options2, cb2, startTime) {
-          return fs$appendFile(path27, data2, options2, function(err) {
+        return go$appendFile(path28, data, options, cb);
+        function go$appendFile(path29, data2, options2, cb2, startTime) {
+          return fs$appendFile(path29, data2, options2, function(err) {
             if (err && (err.code === "EMFILE" || err.code === "ENFILE"))
-              enqueue([go$appendFile, [path27, data2, options2, cb2], err, startTime || Date.now(), Date.now()]);
+              enqueue([go$appendFile, [path29, data2, options2, cb2], err, startTime || Date.now(), Date.now()]);
             else {
               if (typeof cb2 === "function")
                 cb2.apply(this, arguments);
@@ -15076,9 +15493,9 @@ var require_graceful_fs = __commonJS({
           });
         }
       }
-      var fs$copyFile = fs13.copyFile;
+      var fs$copyFile = fs15.copyFile;
       if (fs$copyFile)
-        fs13.copyFile = copyFile;
+        fs15.copyFile = copyFile;
       function copyFile(src, dest, flags, cb) {
         if (typeof flags === "function") {
           cb = flags;
@@ -15096,34 +15513,34 @@ var require_graceful_fs = __commonJS({
           });
         }
       }
-      var fs$readdir = fs13.readdir;
-      fs13.readdir = readdir5;
+      var fs$readdir = fs15.readdir;
+      fs15.readdir = readdir5;
       var noReaddirOptionVersions = /^v[0-5]\./;
-      function readdir5(path26, options, cb) {
+      function readdir5(path28, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
-        var go$readdir = noReaddirOptionVersions.test(process.version) ? function go$readdir2(path27, options2, cb2, startTime) {
-          return fs$readdir(path27, fs$readdirCallback(
-            path27,
+        var go$readdir = noReaddirOptionVersions.test(process.version) ? function go$readdir2(path29, options2, cb2, startTime) {
+          return fs$readdir(path29, fs$readdirCallback(
+            path29,
             options2,
             cb2,
             startTime
           ));
-        } : function go$readdir2(path27, options2, cb2, startTime) {
-          return fs$readdir(path27, options2, fs$readdirCallback(
-            path27,
+        } : function go$readdir2(path29, options2, cb2, startTime) {
+          return fs$readdir(path29, options2, fs$readdirCallback(
+            path29,
             options2,
             cb2,
             startTime
           ));
         };
-        return go$readdir(path26, options, cb);
-        function fs$readdirCallback(path27, options2, cb2, startTime) {
+        return go$readdir(path28, options, cb);
+        function fs$readdirCallback(path29, options2, cb2, startTime) {
           return function(err, files) {
             if (err && (err.code === "EMFILE" || err.code === "ENFILE"))
               enqueue([
                 go$readdir,
-                [path27, options2, cb2],
+                [path29, options2, cb2],
                 err,
                 startTime || Date.now(),
                 Date.now()
@@ -15138,21 +15555,21 @@ var require_graceful_fs = __commonJS({
         }
       }
       if (process.version.substr(0, 4) === "v0.8") {
-        var legStreams = legacy(fs13);
+        var legStreams = legacy(fs15);
         ReadStream = legStreams.ReadStream;
         WriteStream = legStreams.WriteStream;
       }
-      var fs$ReadStream = fs13.ReadStream;
+      var fs$ReadStream = fs15.ReadStream;
       if (fs$ReadStream) {
         ReadStream.prototype = Object.create(fs$ReadStream.prototype);
         ReadStream.prototype.open = ReadStream$open;
       }
-      var fs$WriteStream = fs13.WriteStream;
+      var fs$WriteStream = fs15.WriteStream;
       if (fs$WriteStream) {
         WriteStream.prototype = Object.create(fs$WriteStream.prototype);
         WriteStream.prototype.open = WriteStream$open;
       }
-      Object.defineProperty(fs13, "ReadStream", {
+      Object.defineProperty(fs15, "ReadStream", {
         get: function() {
           return ReadStream;
         },
@@ -15162,7 +15579,7 @@ var require_graceful_fs = __commonJS({
         enumerable: true,
         configurable: true
       });
-      Object.defineProperty(fs13, "WriteStream", {
+      Object.defineProperty(fs15, "WriteStream", {
         get: function() {
           return WriteStream;
         },
@@ -15173,7 +15590,7 @@ var require_graceful_fs = __commonJS({
         configurable: true
       });
       var FileReadStream = ReadStream;
-      Object.defineProperty(fs13, "FileReadStream", {
+      Object.defineProperty(fs15, "FileReadStream", {
         get: function() {
           return FileReadStream;
         },
@@ -15184,7 +15601,7 @@ var require_graceful_fs = __commonJS({
         configurable: true
       });
       var FileWriteStream = WriteStream;
-      Object.defineProperty(fs13, "FileWriteStream", {
+      Object.defineProperty(fs15, "FileWriteStream", {
         get: function() {
           return FileWriteStream;
         },
@@ -15194,7 +15611,7 @@ var require_graceful_fs = __commonJS({
         enumerable: true,
         configurable: true
       });
-      function ReadStream(path26, options) {
+      function ReadStream(path28, options) {
         if (this instanceof ReadStream)
           return fs$ReadStream.apply(this, arguments), this;
         else
@@ -15214,7 +15631,7 @@ var require_graceful_fs = __commonJS({
           }
         });
       }
-      function WriteStream(path26, options) {
+      function WriteStream(path28, options) {
         if (this instanceof WriteStream)
           return fs$WriteStream.apply(this, arguments), this;
         else
@@ -15232,22 +15649,22 @@ var require_graceful_fs = __commonJS({
           }
         });
       }
-      function createReadStream2(path26, options) {
-        return new fs13.ReadStream(path26, options);
+      function createReadStream2(path28, options) {
+        return new fs15.ReadStream(path28, options);
       }
-      function createWriteStream(path26, options) {
-        return new fs13.WriteStream(path26, options);
+      function createWriteStream(path28, options) {
+        return new fs15.WriteStream(path28, options);
       }
-      var fs$open = fs13.open;
-      fs13.open = open;
-      function open(path26, flags, mode, cb) {
+      var fs$open = fs15.open;
+      fs15.open = open;
+      function open(path28, flags, mode, cb) {
         if (typeof mode === "function")
           cb = mode, mode = null;
-        return go$open(path26, flags, mode, cb);
-        function go$open(path27, flags2, mode2, cb2, startTime) {
-          return fs$open(path27, flags2, mode2, function(err, fd) {
+        return go$open(path28, flags, mode, cb);
+        function go$open(path29, flags2, mode2, cb2, startTime) {
+          return fs$open(path29, flags2, mode2, function(err, fd) {
             if (err && (err.code === "EMFILE" || err.code === "ENFILE"))
-              enqueue([go$open, [path27, flags2, mode2, cb2], err, startTime || Date.now(), Date.now()]);
+              enqueue([go$open, [path29, flags2, mode2, cb2], err, startTime || Date.now(), Date.now()]);
             else {
               if (typeof cb2 === "function")
                 cb2.apply(this, arguments);
@@ -15255,20 +15672,20 @@ var require_graceful_fs = __commonJS({
           });
         }
       }
-      return fs13;
+      return fs15;
     }
     function enqueue(elem) {
       debug("ENQUEUE", elem[0].name, elem[1]);
-      fs12[gracefulQueue].push(elem);
+      fs14[gracefulQueue].push(elem);
       retry();
     }
     var retryTimer;
     function resetQueue() {
       var now = Date.now();
-      for (var i = 0; i < fs12[gracefulQueue].length; ++i) {
-        if (fs12[gracefulQueue][i].length > 2) {
-          fs12[gracefulQueue][i][3] = now;
-          fs12[gracefulQueue][i][4] = now;
+      for (var i = 0; i < fs14[gracefulQueue].length; ++i) {
+        if (fs14[gracefulQueue][i].length > 2) {
+          fs14[gracefulQueue][i][3] = now;
+          fs14[gracefulQueue][i][4] = now;
         }
       }
       retry();
@@ -15276,9 +15693,9 @@ var require_graceful_fs = __commonJS({
     function retry() {
       clearTimeout(retryTimer);
       retryTimer = void 0;
-      if (fs12[gracefulQueue].length === 0)
+      if (fs14[gracefulQueue].length === 0)
         return;
-      var elem = fs12[gracefulQueue].shift();
+      var elem = fs14[gracefulQueue].shift();
       var fn = elem[0];
       var args = elem[1];
       var err = elem[2];
@@ -15300,7 +15717,7 @@ var require_graceful_fs = __commonJS({
           debug("RETRY", fn.name, args);
           fn.apply(null, args.concat([startTime]));
         } else {
-          fs12[gracefulQueue].push(elem);
+          fs14[gracefulQueue].push(elem);
         }
       }
       if (retryTimer === void 0) {
@@ -15735,10 +16152,10 @@ var require_mtime_precision = __commonJS({
   "../../node_modules/.pnpm/proper-lockfile@4.1.2/node_modules/proper-lockfile/lib/mtime-precision.js"(exports2, module2) {
     "use strict";
     var cacheSymbol = Symbol();
-    function probe(file2, fs12, callback) {
-      const cachedPrecision = fs12[cacheSymbol];
+    function probe(file2, fs14, callback) {
+      const cachedPrecision = fs14[cacheSymbol];
       if (cachedPrecision) {
-        return fs12.stat(file2, (err, stat3) => {
+        return fs14.stat(file2, (err, stat3) => {
           if (err) {
             return callback(err);
           }
@@ -15746,16 +16163,16 @@ var require_mtime_precision = __commonJS({
         });
       }
       const mtime = new Date(Math.ceil(Date.now() / 1e3) * 1e3 + 5);
-      fs12.utimes(file2, mtime, mtime, (err) => {
+      fs14.utimes(file2, mtime, mtime, (err) => {
         if (err) {
           return callback(err);
         }
-        fs12.stat(file2, (err2, stat3) => {
+        fs14.stat(file2, (err2, stat3) => {
           if (err2) {
             return callback(err2);
           }
           const precision = stat3.mtime.getTime() % 1e3 === 0 ? "s" : "ms";
-          Object.defineProperty(fs12, cacheSymbol, { value: precision });
+          Object.defineProperty(fs14, cacheSymbol, { value: precision });
           callback(null, stat3.mtime, precision);
         });
       });
@@ -15776,8 +16193,8 @@ var require_mtime_precision = __commonJS({
 var require_lockfile = __commonJS({
   "../../node_modules/.pnpm/proper-lockfile@4.1.2/node_modules/proper-lockfile/lib/lockfile.js"(exports2, module2) {
     "use strict";
-    var path26 = require("path");
-    var fs12 = require_graceful_fs();
+    var path28 = require("path");
+    var fs14 = require_graceful_fs();
     var retry = require_retry2();
     var onExit = require_signal_exit();
     var mtimePrecision = require_mtime_precision();
@@ -15787,7 +16204,7 @@ var require_lockfile = __commonJS({
     }
     function resolveCanonicalPath(file2, options, callback) {
       if (!options.realpath) {
-        return callback(null, path26.resolve(file2));
+        return callback(null, path28.resolve(file2));
       }
       options.fs.realpath(file2, callback);
     }
@@ -15908,7 +16325,7 @@ var require_lockfile = __commonJS({
         update: null,
         realpath: true,
         retries: 0,
-        fs: fs12,
+        fs: fs14,
         onCompromised: (err) => {
           throw err;
         },
@@ -15952,7 +16369,7 @@ var require_lockfile = __commonJS({
     }
     function unlock(file2, options, callback) {
       options = {
-        fs: fs12,
+        fs: fs14,
         realpath: true,
         ...options
       };
@@ -15974,7 +16391,7 @@ var require_lockfile = __commonJS({
       options = {
         stale: 1e4,
         realpath: true,
-        fs: fs12,
+        fs: fs14,
         ...options
       };
       options.stale = Math.max(options.stale || 0, 2e3);
@@ -16013,16 +16430,16 @@ var require_lockfile = __commonJS({
 var require_adapter = __commonJS({
   "../../node_modules/.pnpm/proper-lockfile@4.1.2/node_modules/proper-lockfile/lib/adapter.js"(exports2, module2) {
     "use strict";
-    var fs12 = require_graceful_fs();
-    function createSyncFs(fs13) {
+    var fs14 = require_graceful_fs();
+    function createSyncFs(fs15) {
       const methods = ["mkdir", "realpath", "stat", "rmdir", "utimes"];
-      const newFs = { ...fs13 };
+      const newFs = { ...fs15 };
       methods.forEach((method) => {
         newFs[method] = (...args) => {
           const callback = args.pop();
           let ret;
           try {
-            ret = fs13[`${method}Sync`](...args);
+            ret = fs15[`${method}Sync`](...args);
           } catch (err) {
             return callback(err);
           }
@@ -16060,7 +16477,7 @@ var require_adapter = __commonJS({
     }
     function toSyncOptions(options) {
       options = { ...options };
-      options.fs = createSyncFs(options.fs || fs12);
+      options.fs = createSyncFs(options.fs || fs14);
       if (typeof options.retries === "number" && options.retries > 0 || options.retries && typeof options.retries.retries === "number" && options.retries.retries > 0) {
         throw Object.assign(new Error("Cannot use retries with the sync api"), { code: "ESYNC" });
       }
@@ -17651,10 +18068,10 @@ var require_segments = __commonJS({
       const segs = getSegmentsFromString(data, Utils.isKanjiModeEnabled());
       const nodes = buildNodes(segs);
       const graph = buildGraph(nodes, version2);
-      const path26 = dijkstra.find_path(graph.map, "start", "end");
+      const path28 = dijkstra.find_path(graph.map, "start", "end");
       const optimizedSegs = [];
-      for (let i = 1; i < path26.length - 1; i++) {
-        optimizedSegs.push(graph.table[path26[i]].node);
+      for (let i = 1; i < path28.length - 1; i++) {
+        optimizedSegs.push(graph.table[path28[i]].node);
       }
       return exports2.fromArray(mergeSegments(optimizedSegs));
     };
@@ -19859,10 +20276,10 @@ var require_packer_sync = __commonJS({
 var require_png_sync = __commonJS({
   "../../node_modules/.pnpm/pngjs@5.0.0/node_modules/pngjs/lib/png-sync.js"(exports2) {
     "use strict";
-    var parse6 = require_parser_sync();
+    var parse7 = require_parser_sync();
     var pack = require_packer_sync();
     exports2.read = function(buffer, options) {
-      return parse6(buffer, options || {});
+      return parse7(buffer, options || {});
     };
     exports2.write = function(png, options) {
       return pack(png, options);
@@ -20090,7 +20507,7 @@ var require_utils3 = __commonJS({
 // ../../node_modules/.pnpm/qrcode@1.5.4/node_modules/qrcode/lib/renderer/png.js
 var require_png2 = __commonJS({
   "../../node_modules/.pnpm/qrcode@1.5.4/node_modules/qrcode/lib/renderer/png.js"(exports2) {
-    var fs12 = require("fs");
+    var fs14 = require("fs");
     var PNG = require_png().PNG;
     var Utils = require_utils3();
     exports2.render = function render(qrData, options) {
@@ -20131,7 +20548,7 @@ var require_png2 = __commonJS({
       });
       png.pack();
     };
-    exports2.renderToFile = function renderToFile(path26, qrData, options, cb) {
+    exports2.renderToFile = function renderToFile(path28, qrData, options, cb) {
       if (typeof cb === "undefined") {
         cb = options;
         options = void 0;
@@ -20142,7 +20559,7 @@ var require_png2 = __commonJS({
         called = true;
         cb.apply(null, args);
       };
-      const stream = fs12.createWriteStream(path26);
+      const stream = fs14.createWriteStream(path28);
       stream.on("error", done);
       stream.on("close", done);
       exports2.renderToFileStream(stream, qrData, options);
@@ -20204,14 +20621,14 @@ var require_utf8 = __commonJS({
       }
       return output3;
     };
-    exports2.renderToFile = function renderToFile(path26, qrData, options, cb) {
+    exports2.renderToFile = function renderToFile(path28, qrData, options, cb) {
       if (typeof cb === "undefined") {
         cb = options;
         options = void 0;
       }
-      const fs12 = require("fs");
+      const fs14 = require("fs");
       const utf8 = exports2.render(qrData, options);
-      fs12.writeFile(path26, utf8, cb);
+      fs14.writeFile(path28, utf8, cb);
     };
   }
 });
@@ -20332,7 +20749,7 @@ var require_svg_tag = __commonJS({
       return str;
     }
     function qrToPath(data, size, margin) {
-      let path26 = "";
+      let path28 = "";
       let moveBy = 0;
       let newRow = false;
       let lineLength = 0;
@@ -20343,19 +20760,19 @@ var require_svg_tag = __commonJS({
         if (data[i]) {
           lineLength++;
           if (!(i > 0 && col > 0 && data[i - 1])) {
-            path26 += newRow ? svgCmd("M", col + margin, 0.5 + row + margin) : svgCmd("m", moveBy, 0);
+            path28 += newRow ? svgCmd("M", col + margin, 0.5 + row + margin) : svgCmd("m", moveBy, 0);
             moveBy = 0;
             newRow = false;
           }
           if (!(col + 1 < size && data[i + 1])) {
-            path26 += svgCmd("h", lineLength);
+            path28 += svgCmd("h", lineLength);
             lineLength = 0;
           }
         } else {
           moveBy++;
         }
       }
-      return path26;
+      return path28;
     }
     exports2.render = function render(qrData, options, cb) {
       const opts = Utils.getOptions(options);
@@ -20363,10 +20780,10 @@ var require_svg_tag = __commonJS({
       const data = qrData.modules.data;
       const qrcodesize = size + opts.margin * 2;
       const bg = !opts.color.light.a ? "" : "<path " + getColorAttrib(opts.color.light, "fill") + ' d="M0 0h' + qrcodesize + "v" + qrcodesize + 'H0z"/>';
-      const path26 = "<path " + getColorAttrib(opts.color.dark, "stroke") + ' d="' + qrToPath(data, size, opts.margin) + '"/>';
+      const path28 = "<path " + getColorAttrib(opts.color.dark, "stroke") + ' d="' + qrToPath(data, size, opts.margin) + '"/>';
       const viewBox = 'viewBox="0 0 ' + qrcodesize + " " + qrcodesize + '"';
       const width = !opts.width ? "" : 'width="' + opts.width + '" height="' + opts.width + '" ';
-      const svgTag = '<svg xmlns="http://www.w3.org/2000/svg" ' + width + viewBox + ' shape-rendering="crispEdges">' + bg + path26 + "</svg>\n";
+      const svgTag = '<svg xmlns="http://www.w3.org/2000/svg" ' + width + viewBox + ' shape-rendering="crispEdges">' + bg + path28 + "</svg>\n";
       if (typeof cb === "function") {
         cb(null, svgTag);
       }
@@ -20380,15 +20797,15 @@ var require_svg = __commonJS({
   "../../node_modules/.pnpm/qrcode@1.5.4/node_modules/qrcode/lib/renderer/svg.js"(exports2) {
     var svgTagRenderer = require_svg_tag();
     exports2.render = svgTagRenderer.render;
-    exports2.renderToFile = function renderToFile(path26, qrData, options, cb) {
+    exports2.renderToFile = function renderToFile(path28, qrData, options, cb) {
       if (typeof cb === "undefined") {
         cb = options;
         options = void 0;
       }
-      const fs12 = require("fs");
+      const fs14 = require("fs");
       const svgTag = exports2.render(qrData, options);
       const xmlStr = '<?xml version="1.0" encoding="utf-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">' + svgTag;
-      fs12.writeFile(path26, xmlStr, cb);
+      fs14.writeFile(path28, xmlStr, cb);
     };
   }
 });
@@ -20546,8 +20963,8 @@ var require_server = __commonJS({
         cb
       };
     }
-    function getTypeFromFilename(path26) {
-      return path26.slice((path26.lastIndexOf(".") - 1 >>> 0) + 2).toLowerCase();
+    function getTypeFromFilename(path28) {
+      return path28.slice((path28.lastIndexOf(".") - 1 >>> 0) + 2).toLowerCase();
     }
     function getRendererFromType(type) {
       switch (type) {
@@ -20611,17 +21028,17 @@ var require_server = __commonJS({
       const renderer = getRendererFromType(params.opts.type);
       return render(renderer.renderToBuffer, text, params);
     };
-    exports2.toFile = function toFile(path26, text, opts, cb) {
-      if (typeof path26 !== "string" || !(typeof text === "string" || typeof text === "object")) {
+    exports2.toFile = function toFile(path28, text, opts, cb) {
+      if (typeof path28 !== "string" || !(typeof text === "string" || typeof text === "object")) {
         throw new Error("Invalid argument");
       }
       if (arguments.length < 3 && !canPromise()) {
         throw new Error("Too few arguments provided");
       }
       const params = checkParams(text, opts, cb);
-      const type = params.opts.type || getTypeFromFilename(path26);
+      const type = params.opts.type || getTypeFromFilename(path28);
       const renderer = getRendererFromType(type);
-      const renderToFile = renderer.renderToFile.bind(null, path26);
+      const renderToFile = renderer.renderToFile.bind(null, path28);
       return render(renderToFile, text, params);
     };
     exports2.toFileStream = function toFileStream(stream, text, opts) {
@@ -20643,12 +21060,109 @@ var require_lib = __commonJS({
   }
 });
+// src/install-public-mcp.ts
+var install_public_mcp_exports = {};
+__export(install_public_mcp_exports, {
+  installPublicMcpServerToConfigs: () => installPublicMcpServerToConfigs
+});
+async function pathExists5(target) {
+  try {
+    await import_promises15.default.access(target);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function writeAtomic(targetPath, content) {
+  const tempPath = `${targetPath}.${Date.now()}.tmp`;
+  await import_promises15.default.writeFile(tempPath, content, { mode: 384 });
+  await import_promises15.default.rename(tempPath, targetPath);
+}
+function renderTomlBlock(serverId, expected) {
+  let tomlStr = `
+[mcp_servers.${serverId}]
+command = ${JSON.stringify(expected.command)}
+args = ${JSON.stringify(expected.args)}
+`;
+  if (expected.env && Object.keys(expected.env).length > 0) {
+    tomlStr += `[mcp_servers.${serverId}.env]
+`;
+    for (const [k, v] of Object.entries(expected.env)) {
+      tomlStr += `${k} = ${JSON.stringify(v)}
+`;
+    }
+  }
+  return tomlStr;
+}
+async function installPublicMcpServerToConfigs(serverId, expected) {
+  const homeDir = import_node_os16.default.homedir();
+  const claudePath = import_node_path36.default.join(homeDir, ".claude.json");
+  if (await pathExists5(claudePath)) {
+    try {
+      const content = await import_promises15.default.readFile(claudePath, "utf8");
+      const parsed = JSON.parse(content);
+      if (!parsed.mcpServers) parsed.mcpServers = {};
+      parsed.mcpServers[serverId] = expected;
+      await writeAtomic(claudePath, JSON.stringify(parsed, null, 2) + "\n");
+    } catch (e) {
+      console.error(`Failed to inject MCP server into ${claudePath}`, e);
+    }
+  } else {
+    await writeAtomic(claudePath, JSON.stringify({ mcpServers: { [serverId]: expected } }, null, 2) + "\n");
+  }
+  const codexPath = import_node_path36.default.join(homeDir, ".codex", "config.toml");
+  if (await pathExists5(codexPath)) {
+    try {
+      const content = await import_promises15.default.readFile(codexPath, "utf8");
+      const parsed = toml3.parse(content);
+      if (!parsed.mcp_servers?.[serverId]) {
+        const appended = content.replace(/\n$/, "") + renderTomlBlock(serverId, expected);
+        await writeAtomic(codexPath, appended);
+      } else {
+        console.warn(`MCP server ${serverId} already exists in ${codexPath}, skipping direct TOML edit.`);
+      }
+    } catch (e) {
+      console.error(`Failed to inject MCP server into ${codexPath}`, e);
+    }
+  } else {
+    await import_promises15.default.mkdir(import_node_path36.default.dirname(codexPath), { recursive: true, mode: 448 }).catch(() => {
+    });
+    await writeAtomic(codexPath, renderTomlBlock(serverId, expected).trim() + "\n");
+  }
+  const agyPath = import_node_path36.default.join(homeDir, ".gemini", "antigravity", "mcp_config.json");
+  if (await pathExists5(agyPath)) {
+    try {
+      const content = await import_promises15.default.readFile(agyPath, "utf8");
+      const parsed = JSON.parse(content);
+      if (!parsed.mcpServers) parsed.mcpServers = {};
+      parsed.mcpServers[serverId] = expected;
+      await writeAtomic(agyPath, JSON.stringify(parsed, null, 2) + "\n");
+    } catch (e) {
+      console.error(`Failed to inject MCP server into ${agyPath}`, e);
+    }
+  } else {
+    await import_promises15.default.mkdir(import_node_path36.default.dirname(agyPath), { recursive: true, mode: 448 }).catch(() => {
+    });
+    await writeAtomic(agyPath, JSON.stringify({ mcpServers: { [serverId]: expected } }, null, 2) + "\n");
+  }
+}
+var import_promises15, import_node_os16, import_node_path36, toml3;
+var init_install_public_mcp = __esm({
+  "src/install-public-mcp.ts"() {
+    "use strict";
+    import_promises15 = __toESM(require("node:fs/promises"), 1);
+    import_node_os16 = __toESM(require("node:os"), 1);
+    import_node_path36 = __toESM(require("node:path"), 1);
+    toml3 = __toESM(require_toml(), 1);
+  }
+});
 // src/bin.ts
-var import_node_path39 = __toESM(require("node:path"), 1);
+var import_node_path41 = __toESM(require("node:path"), 1);
 var import_node_child_process21 = require("node:child_process");
-var import_node_fs24 = require("node:fs");
-var import_node_os19 = require("node:os");
-var import_node_path40 = __toESM(require("node:path"), 1);
+var import_node_fs25 = require("node:fs");
+var import_node_os20 = require("node:os");
+var import_node_path42 = __toESM(require("node:path"), 1);
 // src/install-codex.ts
 var import_promises = __toESM(require("node:fs/promises"), 1);
@@ -21135,6 +21649,126 @@ function readMcpServerById(configPath, serverId) {
   }
   return { url: url2, headers };
 }
+function parseTomlMcpServers(raw) {
+  const result = {};
+  const lines2 = raw.split(/\r?\n/);
+  let currentServer = null;
+  for (const line of lines2) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#")) continue;
+    const headerMatch = trimmed.match(/^\[(?:mcp_servers|mcpServers)\.["']?([^"']+)["']?\]$/i);
+    if (headerMatch) {
+      currentServer = headerMatch[1] ?? null;
+      if (currentServer && !result[currentServer]) {
+        result[currentServer] = {};
+      }
+      continue;
+    }
+    if (trimmed.startsWith("[") && !trimmed.startsWith("[mcp_servers.") && !trimmed.startsWith("[mcpServers.")) {
+      currentServer = null;
+      continue;
+    }
+    if (!currentServer) continue;
+    const serverObj = result[currentServer];
+    if (!serverObj) continue;
+    const commandMatch = trimmed.match(/^command\s*=\s*["']([^"']+)["']/i);
+    if (commandMatch) {
+      serverObj.command = commandMatch[1];
+      continue;
+    }
+    const urlMatch = trimmed.match(/^url\s*=\s*["']([^"']+)["']/i);
+    if (urlMatch) {
+      serverObj.url = urlMatch[1];
+      continue;
+    }
+    const argsMatch = trimmed.match(/^args\s*=\s*\[(.*)\]/i);
+    if (argsMatch) {
+      const inner = argsMatch[1];
+      const parsedArgs = inner ? (inner.match(/"([^"\\]*(?:\\.[^"\\]*)*)"|'([^'\\]*(?:\\.[^'\\]*)*)'/g) ?? []).map((s) => s.slice(1, -1)) : [];
+      serverObj.args = parsedArgs;
+      continue;
+    }
+  }
+  return result;
+}
+function listDiscoveredMcpServers(customPaths) {
+  const home = import_node_os2.default.homedir();
+  const codexHome = process.env.CODEX_HOME || import_node_path2.default.join(home, ".codex");
+  const candidatePaths = [
+    { path: import_node_path2.default.join(home, ".claude.json"), source: "claude", format: "json" },
+    { path: import_node_path2.default.join(home, ".gemini", "antigravity", "mcp_config.json"), source: "gemini", format: "json" },
+    { path: import_node_path2.default.join(home, ".gemini", "config", "config.json"), source: "gemini", format: "json" },
+    { path: import_node_path2.default.join(codexHome, "config.toml"), source: "codex", format: "toml" },
+    { path: import_node_path2.default.join(home, ".config", "codex", "config.toml"), source: "codex", format: "toml" },
+    { path: import_node_path2.default.join(home, "Library", "Application Support", "Claude", "claude_desktop_config.json"), source: "claude", format: "json" },
+    { path: import_node_path2.default.join(home, ".config", "Claude", "claude_desktop_config.json"), source: "claude", format: "json" }
+  ];
+  if (customPaths) {
+    for (const cp of customPaths) {
+      candidatePaths.unshift({
+        path: cp,
+        source: "custom",
+        format: cp.endsWith(".toml") ? "toml" : "json"
+      });
+    }
+  }
+  const result = /* @__PURE__ */ new Map();
+  for (const { path: cfgPath, source, format } of candidatePaths) {
+    let raw;
+    try {
+      raw = import_node_fs.default.readFileSync(cfgPath, "utf8");
+    } catch {
+      continue;
+    }
+    let servers;
+    if (format === "toml" || cfgPath.endsWith(".toml")) {
+      try {
+        servers = parseTomlMcpServers(raw);
+      } catch {
+        continue;
+      }
+    } else {
+      let parsed;
+      try {
+        parsed = JSON.parse(raw);
+      } catch {
+        continue;
+      }
+      if (typeof parsed !== "object" || parsed === null) continue;
+      const rawServers = parsed.mcpServers ?? parsed.mcp_servers;
+      if (typeof rawServers !== "object" || rawServers === null) continue;
+      servers = rawServers;
+    }
+    if (!servers) continue;
+    for (const [id, entry] of Object.entries(servers)) {
+      if (typeof entry !== "object" || entry === null) continue;
+      if (result.has(id)) continue;
+      const record2 = entry;
+      const url2 = typeof record2.url === "string" && record2.url.trim().length > 0 ? record2.url.trim() : void 0;
+      const command = typeof record2.command === "string" && record2.command.trim().length > 0 ? record2.command.trim() : void 0;
+      const args = Array.isArray(record2.args) ? record2.args.filter((a) => typeof a === "string") : void 0;
+      if (url2) {
+        result.set(id, {
+          id,
+          name: id,
+          transport: "http",
+          url: url2,
+          source
+        });
+      } else if (command) {
+        result.set(id, {
+          id,
+          name: id,
+          transport: "stdio",
+          command,
+          args,
+          source
+        });
+      }
+    }
+  }
+  return Array.from(result.values()).sort((a, b) => a.id.localeCompare(b.id));
+}
 // src/install-codex.ts
 function deriveServeEnvFromProcessEnv(env) {
@@ -22276,10 +22910,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path26) {
-  if (!path26)
+function getElementAtPath(obj, path28) {
+  if (!path28)
     return obj;
-  return path26.reduce((acc, key) => acc?.[key], obj);
+  return path28.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -22688,11 +23322,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path26, issues) {
+function prefixIssues(path28, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path26);
+    iss.path.unshift(path28);
     return iss;
   });
 }
@@ -22839,16 +23473,16 @@ function flattenError(error51, mapper = (issue2) => issue2.message) {
 }
 function formatError(error51, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error52, path26 = []) => {
+  const processError = (error52, path28 = []) => {
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path26, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path28, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path26, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path28, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path26, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path28, ...issue2.path]);
       } else {
-        const fullpath = [...path26, ...issue2.path];
+        const fullpath = [...path28, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -22875,17 +23509,17 @@ function formatError(error51, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error51, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error52, path26 = []) => {
+  const processError = (error52, path28 = []) => {
     var _a3, _b;
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path26, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path28, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path26, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path28, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path26, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path28, ...issue2.path]);
       } else {
-        const fullpath = [...path26, ...issue2.path];
+        const fullpath = [...path28, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -22917,8 +23551,8 @@ function treeifyError(error51, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path26 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path26) {
+  const path28 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path28) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -35610,13 +36244,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path26 = ref.slice(1).split("/").filter(Boolean);
-  if (path26.length === 0) {
+  const path28 = ref.slice(1).split("/").filter(Boolean);
+  if (path28.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path26[0] === defsKey) {
-    const key = path26[1];
+  if (path28[0] === defsKey) {
+    const key = path28[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -36039,7 +36673,7 @@ var ARTIFACT_CHECKS = {
   file_set: null,
   code_change: { verifier: "build" },
   structured_data: null,
-  message: { verifier: "status" }
+  message: null
 };
 var ARTIFACT_DESTINATIONS = {
   document: "wiki",
@@ -36047,7 +36681,7 @@ var ARTIFACT_DESTINATIONS = {
   file_set: "artifacts",
   code_change: "repo_host",
   structured_data: null,
-  message: null
+  message: "artifacts"
 };
 function resolveKindCapability(kind) {
   return ARTIFACT_DESTINATIONS[kind];
@@ -36937,7 +37571,7 @@ var mrrlinDeclaredOutcomeSchema = mrrlinDeclaredOutcomeShapeSchema.superRefine((
 var mrrlinReceiptSchema = external_exports.object({
   kind: external_exports.enum(["outcome", "attempt"]),
   evidence: external_exports.object({
-    type: external_exports.enum(["url", "build", "status", "human_tap"]),
+    type: external_exports.enum(["url", "build", "human_tap"]),
     value: external_exports.string().trim().min(1)
   }),
   observedAt: external_exports.string().datetime(),
@@ -38080,7 +38714,7 @@ var mrrlinExecutionArtifactSchema = external_exports.object({
 var mrrlinExecutionArtifactCreateSchema = external_exports.object({
   id: mrrlinExecutionArtifactIdSchema,
   kind: mrrlinExecutionArtifactKindSchema,
-  payload: external_exports.record(external_exports.string(), external_exports.unknown()).default({})
+  payload: external_exports.record(external_exports.string(), external_exports.unknown()).optional().default({})
 });
 var executionArtifactListFiltersSchema = external_exports.object({
   limit: external_exports.coerce.number().int().min(1).max(100).optional(),
@@ -38849,18 +39483,18 @@ function createMrrlinClient(config2) {
   const customFetch = config2.fetch ?? globalThis.fetch;
   const baseUrl = config2.baseUrl.replace(/\/$/, "");
   const token = config2.token;
-  async function request(path26, init) {
+  async function request(path28, init) {
     const method = init?.method ?? "GET";
     const headers = new Headers(init?.headers ?? {});
     if (token && !headers.has("authorization")) {
       headers.set("authorization", `Bearer ${token}`);
     }
-    const response = await customFetch(`${baseUrl}${path26}`, { ...init, headers });
+    const response = await customFetch(`${baseUrl}${path28}`, { ...init, headers });
     if (!response.ok) {
       const body = await response.text();
       let code = `HTTP_${response.status}`;
       let violations = null;
-      let message = `Mrrlin API ${method} ${path26} failed: ${response.status}`;
+      let message = `Mrrlin API ${method} ${path28} failed: ${response.status}`;
       try {
         const parsed = JSON.parse(body);
         const violationsParsed = apiViolationsErrorSchema.safeParse(parsed);
@@ -38880,7 +39514,7 @@ function createMrrlinClient(config2) {
       throw new MrrlinApiError({
         code,
         method,
-        path: path26,
+        path: path28,
         responseBody: body,
         status: response.status,
         violations,
@@ -38889,18 +39523,18 @@ function createMrrlinClient(config2) {
     }
     return response.json();
   }
-  async function requestText(path26, init) {
+  async function requestText(path28, init) {
     const method = init?.method ?? "GET";
     const headers = new Headers(init?.headers ?? {});
     if (token && !headers.has("authorization")) {
       headers.set("authorization", `Bearer ${token}`);
     }
-    const response = await customFetch(`${baseUrl}${path26}`, { ...init, headers });
+    const response = await customFetch(`${baseUrl}${path28}`, { ...init, headers });
     if (!response.ok) {
       const body = await response.text();
       let code = `HTTP_${response.status}`;
       let violations = null;
-      let message = `Mrrlin API ${method} ${path26} failed: ${response.status}`;
+      let message = `Mrrlin API ${method} ${path28} failed: ${response.status}`;
       try {
         const parsed = JSON.parse(body);
         const violationsParsed = apiViolationsErrorSchema.safeParse(parsed);
@@ -38920,7 +39554,7 @@ function createMrrlinClient(config2) {
       throw new MrrlinApiError({
         code,
         method,
-        path: path26,
+        path: path28,
         responseBody: body,
         status: response.status,
         violations,
@@ -39161,16 +39795,16 @@ function createMrrlinClient(config2) {
     // rejected against the first, MrrlinTask[]-only overload) -- the `any` here is contained to
     // this one implementation signature; MrrlinClient's declared overloads keep callers precise.
     async listTasks(projectSlug, filters = {}, options) {
-      const path26 = buildTaskListPath(projectSlug, filters, options?.view);
-      const body = await request(path26);
+      const path28 = buildTaskListPath(projectSlug, filters, options?.view);
+      const body = await request(path28);
       if (options?.view === "summary") {
         return taskSummaryListResponseSchema.parse(body).data;
       }
       return taskListResponseSchema.parse(body).data;
     },
     async listTaskSummaries(projectSlug, filters = {}) {
-      const path26 = buildTaskListPath(projectSlug, filters, "summary");
-      const body = await request(path26);
+      const path28 = buildTaskListPath(projectSlug, filters, "summary");
+      const body = await request(path28);
       return taskSummaryListResponseSchema.parse(body).data;
     },
     async listTaxonomy(projectSlug) {
@@ -39178,22 +39812,22 @@ function createMrrlinClient(config2) {
       return taxonomyListResponseSchema.parse(body).data;
     },
     async listWikiPages(projectSlug, filters = {}) {
-      const path26 = appendQuery(`${projectPath(projectSlug)}/wiki`, {
+      const path28 = appendQuery(`${projectPath(projectSlug)}/wiki`, {
         folder: filters.folder,
         q: filters.q,
         taskId: filters.taskId
       });
-      const body = await request(path26);
+      const body = await request(path28);
       return wikiPageListResponseSchema.parse(body).data;
     },
     async searchWikiPages(projectSlug, query) {
-      const path26 = appendQuery(`${projectPath(projectSlug)}/wiki/search`, {
+      const path28 = appendQuery(`${projectPath(projectSlug)}/wiki/search`, {
         folder: query.folder,
         limit: query.limit === void 0 ? void 0 : String(query.limit),
         pathPrefix: query.pathPrefix,
         q: query.q
       });
-      const body = await request(path26);
+      const body = await request(path28);
       return wikiPageSearchResponseSchema.parse(body).data;
     },
     async updatePlan(projectSlug, planId, patch) {
@@ -39396,6 +40030,13 @@ function createMrrlinClient(config2) {
       const body = await request(`${projectPath(projectSlug)}/capability-grants`);
       return capabilityGrantListResponseSchema.parse(body).data;
     },
+    async createCapabilityGrant(projectSlug, serverId) {
+      const body = await request(`${projectPath(projectSlug)}/capability-grants`, {
+        method: "POST",
+        body: JSON.stringify({ serverId })
+      });
+      return capabilityGrantResponseSchema.parse(body).data;
+    },
     async listCapabilityUses(projectSlug) {
       const body = await request(`${projectPath(projectSlug)}/capability-uses`);
       return capabilityUseListResponseSchema.parse(body).data;
@@ -39698,10 +40339,10 @@ function createMrrlinClient(config2) {
       });
       return artifactFileCreateResponseSchema.parse(body).data;
     },
-    async uploadArtifactFileContent(projectSlug, artifactFileId, bytes3, contentType) {
+    async uploadArtifactFileContent(projectSlug, artifactFileId, bytes3, contentType2) {
       await request(`${projectPath(projectSlug)}/artifact-files/${encodeURIComponent(artifactFileId)}/content`, {
         body: bytes3,
-        headers: { "content-type": contentType },
+        headers: { "content-type": contentType2 },
         method: "PUT"
       });
     },
@@ -41927,7 +42568,8 @@ var CodexAgentHandle = class {
       sandbox: params.sandbox ?? null,
       baseInstructions: params.baseInstructions ?? null,
       developerInstructions: params.developerInstructions ?? null,
-      ephemeral: params.ephemeral ?? null
+      ephemeral: params.ephemeral ?? null,
+      mcpConfig: params.mcpConfig ?? null
     });
     return { threadId: started.thread.id };
   }
@@ -41937,7 +42579,8 @@ var CodexAgentHandle = class {
       model: params.model ?? null,
       cwd: params.cwd ?? null,
       approvalPolicy: params.approvalPolicy ?? null,
-      sandbox: params.sandbox ?? null
+      sandbox: params.sandbox ?? null,
+      mcpConfig: params.mcpConfig ?? null
     });
     return { threadId: resumed.thread.id };
   }
@@ -42008,7 +42651,7 @@ var ClaudeProcess = class {
     this.child = (0, import_node_child_process3.spawn)(executable, args, {
       cwd: options.cwd?.trim() || void 0,
       // Inherit the operator's env so the CLI picks up their own ~/.claude.json tool registry —
-      // that is deliberately why we pass NO --mcp-config/--strict-mcp-config here.
+      // unless an explicit mcpConfig was provided in options.
       env: process.env,
       stdio: ["pipe", "pipe", "pipe"]
     });
@@ -42052,6 +42695,9 @@ var ClaudeProcess = class {
     const model = options.model?.trim();
     if (model)
       args.push("--model", model);
+    if (options.mcpConfig) {
+      args.push("--mcp-config", options.mcpConfig);
+    }
     args.push("--permission-mode", options.permissionMode);
     if (options.disallowedTools && options.disallowedTools.length > 0) {
       args.push("--disallowedTools", options.disallowedTools.join(","));
@@ -42326,7 +42972,8 @@ var ClaudeAgentHandle = class {
       permissionMode,
       disallowedTools,
       model: params.model,
-      cwd: params.cwd
+      cwd: params.cwd,
+      mcpConfig: params.mcpConfig
     });
     this.processes.set(child.sessionId, child);
     this.mappers.set(child.sessionId, new ClaudeBridgeEventMapper());
@@ -42339,7 +42986,8 @@ var ClaudeAgentHandle = class {
       permissionMode,
       disallowedTools,
       model: params.model,
-      cwd: params.cwd
+      cwd: params.cwd,
+      mcpConfig: params.mcpConfig
     });
     this.processes.set(threadId, child);
     this.mappers.set(threadId, new ClaudeBridgeEventMapper());
@@ -43033,6 +43681,9 @@ ${input.prompt}` : input.prompt;
     "--skip-git-repo-check",
     "--ignore-user-config"
   ];
+  if (input.mcpConfig) {
+    args.push("--mcp-config", input.mcpConfig);
+  }
   if (input.model) {
     args.push("-m", input.model);
   }
@@ -43102,6 +43753,9 @@ function runClaudeExec(input, deps) {
   const spawn5 = deps?.spawn ?? import_node_child_process7.spawn;
   const executable = input.codexExecutable ?? "claude";
   const args = ["--print", "--output-format", "json", "--strict-mcp-config"];
+  if (input.mcpConfig) {
+    args.push("--mcp-config", input.mcpConfig);
+  }
   if (input.sandbox === "read-only") {
     args.push("--permission-mode", "plan", "--disallowedTools", "Edit,Write,NotebookEdit,Bash");
   } else if (input.sandbox === "workspace-write") {
@@ -44775,7 +45429,7 @@ async function deliverToWiki(client, projectSlug, payload) {
   return client.updateWikiPage(projectSlug, payload.pageId, payload.patch);
 }
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-compat.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-compat.js
 function isZ4Schema(s) {
   const schema = s;
   return !!schema._zod;
@@ -44838,7 +45492,7 @@ function getLiteralValue(schema) {
   return void 0;
 }
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/types.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/types.js
 var LATEST_PROTOCOL_VERSION = "2025-11-25";
 var SUPPORTED_PROTOCOL_VERSIONS = [LATEST_PROTOCOL_VERSION, "2025-06-18", "2025-03-26", "2024-11-05", "2024-10-07"];
 var RELATED_TASK_META_KEY = "io.modelcontextprotocol/related-task";
@@ -46358,7 +47012,7 @@ var UrlElicitationRequiredError = class extends McpError {
   }
 };
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/interfaces.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/interfaces.js
 function isTerminal(status) {
   return status === "completed" || status === "failed" || status === "cancelled";
 }
@@ -46369,7 +47023,7 @@ var ignoreOverride = Symbol("Let zodToJsonSchema decide on which parser to use")
 // ../../node_modules/.pnpm/zod-to-json-schema@3.25.2_zod@4.4.3/node_modules/zod-to-json-schema/dist/esm/parsers/string.js
 var ALPHA_NUMERIC = new Set("ABCDEFGHIJKLMNOPQRSTUVXYZabcdefghijklmnopqrstuvxyz0123456789");
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-json-schema-compat.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-json-schema-compat.js
 function getMethodLiteral(schema) {
   const shape = getObjectShape(schema);
   const methodSchema = shape?.method;
@@ -46390,7 +47044,7 @@ function parseWithCompat(schema, data) {
   return result.data;
 }
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/protocol.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/protocol.js
 var DEFAULT_REQUEST_TIMEOUT_MSEC = 6e4;
 var Protocol = class {
   constructor(_options) {
@@ -47344,7 +47998,7 @@ function mergeCapabilities(base, additional) {
   return result;
 }
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/validation/ajv-provider.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/validation/ajv-provider.js
 var import_ajv = __toESM(require_ajv(), 1);
 var import_ajv_formats = __toESM(require_dist(), 1);
 function createDefaultAjvInstance() {
@@ -47412,7 +48066,7 @@ var AjvJsonSchemaValidator = class {
   }
 };
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/client.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/client.js
 var ExperimentalClientTasks = class {
   constructor(_client) {
     this._client = _client;
@@ -47566,7 +48220,7 @@ var ExperimentalClientTasks = class {
   }
 };
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/helpers.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/helpers.js
 function assertToolsCallTaskCapability(requests, method, entityName) {
   if (!requests) {
     throw new Error(`${entityName} does not support task creation (required for ${method})`);
@@ -47601,7 +48255,7 @@ function assertClientRequestTaskCapability(requests, method, entityName) {
   }
 }
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/client/index.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/client/index.js
 function applyElicitationDefaults(schema, data) {
   if (!schema || data === null || typeof data !== "object")
     return;
@@ -47721,16 +48375,7 @@ var Client = class extends Protocol {
     if (!methodSchema) {
       throw new Error("Schema is missing a method literal");
     }
-    let methodValue;
-    if (isZ4Schema(methodSchema)) {
-      const v4Schema = methodSchema;
-      const v4Def = v4Schema._zod?.def;
-      methodValue = v4Def?.value ?? v4Schema.value;
-    } else {
-      const v3Schema = methodSchema;
-      const legacyDef = v3Schema._def;
-      methodValue = legacyDef?.value ?? v3Schema.value;
-    }
+    const methodValue = getLiteralValue(methodSchema);
     if (typeof methodValue !== "string") {
       throw new Error("Schema method literal must be a string");
     }
@@ -48121,7 +48766,24 @@ var Client = class extends Protocol {
   }
 };
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/transport.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/mediaType.js
+var import_content_type = __toESM(require_content_type(), 1);
+function mediaTypeEssence(header) {
+  if (!header) {
+    return void 0;
+  }
+  try {
+    return import_content_type.default.parse(header).type;
+  } catch {
+    const essence = (header.split(";", 1)[0] ?? "").trim().toLowerCase();
+    if (essence === "" || header.slice(essence.length).includes(",")) {
+      return void 0;
+    }
+    return essence;
+  }
+}
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/transport.js
 function normalizeHeaders(headers) {
   if (!headers)
     return {};
@@ -48191,7 +48853,7 @@ async function pkceChallenge(length) {
   };
 }
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/auth.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/auth.js
 var SafeUrlSchema = url().superRefine((val, ctx) => {
   if (!URL.canParse(val)) {
     ctx.addIssue({
@@ -48335,7 +48997,7 @@ var OAuthTokenRevocationRequestSchema = object({
   token_type_hint: string2().optional()
 }).strip();
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/auth-utils.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/auth-utils.js
 function resourceUrlFromServerUrl(url2) {
   const resourceURL = typeof url2 === "string" ? new URL(url2) : new URL(url2.href);
   resourceURL.hash = "";
@@ -48355,7 +49017,7 @@ function checkResourceAllowed({ requestedResource, configuredResource }) {
   return requestedPath.startsWith(configuredPath);
 }
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/server/auth/errors.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/server/auth/errors.js
 var OAuthError = class extends Error {
   constructor(message, errorUri) {
     super(message);
@@ -48450,7 +49112,7 @@ var OAUTH_ERRORS = {
   [InvalidTargetError.errorCode]: InvalidTargetError
 };
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/client/auth.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/client/auth.js
 var UnauthorizedError = class extends Error {
   constructor(message) {
     super(message ?? "Unauthorized");
@@ -48991,7 +49653,7 @@ async function registerClient(authorizationServerUrl, { metadata, clientMetadata
   return OAuthClientInformationFullSchema.parse(await response.json());
 }
-// ../../node_modules/.pnpm/eventsource-parser@3.0.8/node_modules/eventsource-parser/dist/index.js
+// ../../node_modules/.pnpm/eventsource-parser@3.1.1/node_modules/eventsource-parser/dist/index.js
 var ParseError = class extends Error {
   constructor(message, options) {
     super(message), this.name = "ParseError", this.type = options.type, this.field = options.field, this.value = options.value, this.line = options.line;
@@ -49002,29 +49664,40 @@ var CR = 13;
 var SPACE = 32;
 function noop(_arg) {
 }
-function createParser(callbacks) {
-  if (typeof callbacks == "function")
+function createParser(config2) {
+  if (typeof config2 == "function")
     throw new TypeError(
-      "`callbacks` must be an object, got a function instead. Did you mean `{onEvent: fn}`?"
+      "`config` must be an object, got a function instead. Did you mean `createParser({onEvent: fn})`?"
     );
-  const { onEvent = noop, onError = noop, onRetry = noop, onComment } = callbacks, pendingFragments = [];
-  let isFirstChunk = true, id, data = "", dataLines = 0, eventType;
+  const { onEvent = noop, onError = noop, onRetry = noop, onComment, maxBufferSize } = config2, pendingFragments = [];
+  let pendingFragmentsLength = 0, isFirstChunk = true, id, data = "", dataLines = 0, eventType, terminated = false;
   function feed(chunk) {
+    if (terminated)
+      throw new Error(
+        "Cannot feed parser: it was terminated after exceeding the configured max buffer size. Call `reset()` to resume parsing."
+      );
     if (isFirstChunk && (isFirstChunk = false, chunk.charCodeAt(0) === 239 && chunk.charCodeAt(1) === 187 && chunk.charCodeAt(2) === 191 && (chunk = chunk.slice(3))), pendingFragments.length === 0) {
       const trailing2 = processLines(chunk);
-      trailing2 !== "" && pendingFragments.push(trailing2);
+      trailing2 !== "" && (pendingFragments.push(trailing2), pendingFragmentsLength = trailing2.length), checkBufferSize();
       return;
     }
     if (chunk.indexOf(`
 `) === -1 && chunk.indexOf("\r") === -1) {
-      pendingFragments.push(chunk);
+      pendingFragments.push(chunk), pendingFragmentsLength += chunk.length, checkBufferSize();
       return;
     }
     pendingFragments.push(chunk);
     const input = pendingFragments.join("");
-    pendingFragments.length = 0;
+    pendingFragments.length = 0, pendingFragmentsLength = 0;
     const trailing = processLines(input);
-    trailing !== "" && pendingFragments.push(trailing);
+    trailing !== "" && (pendingFragments.push(trailing), pendingFragmentsLength = trailing.length), checkBufferSize();
+  }
+  function checkBufferSize() {
+    maxBufferSize !== void 0 && (pendingFragmentsLength + data.length <= maxBufferSize || (terminated = true, pendingFragments.length = 0, pendingFragmentsLength = 0, id = void 0, data = "", dataLines = 0, eventType = void 0, onError(
+      new ParseError(`Buffered data exceeded max buffer size of ${maxBufferSize} characters`, {
+        type: "max-buffer-size-exceeded"
+      })
+    )));
   }
   function processLines(chunk) {
     let searchIndex = 0;
@@ -49084,7 +49757,7 @@ ${value2}`, dataLines++;
     }
     if (firstCharCode === 105 && chunk.charCodeAt(start + 1) === 100 && chunk.charCodeAt(start + 2) === 58) {
       const value2 = chunk.slice(chunk.charCodeAt(start + 3) === SPACE ? start + 4 : start + 3, end);
-      id = value2.includes("\0") ? void 0 : value2;
+      value2.includes("\0") || (id = value2);
       return;
     }
     if (firstCharCode === 58) {
@@ -49112,7 +49785,7 @@ ${value2}`, dataLines++;
 ${value}`, dataLines++;
         break;
       case "id":
-        id = value.includes("\0") ? void 0 : value;
+        value.includes("\0") || (id = value);
         break;
       case "retry":
         /^\d+$/.test(value) ? onRetry(parseInt(value, 10)) : onError(
@@ -49145,7 +49818,7 @@ ${value}`, dataLines++;
       const incompleteLine = pendingFragments.join("");
       parseLine(incompleteLine, 0, incompleteLine.length);
     }
-    isFirstChunk = true, id = void 0, data = "", dataLines = 0, eventType = void 0, pendingFragments.length = 0;
+    isFirstChunk = true, id = void 0, data = "", dataLines = 0, eventType = void 0, pendingFragments.length = 0, pendingFragmentsLength = 0, terminated = false;
   }
   return { feed, reset };
 }
@@ -49156,9 +49829,9 @@ function isEventPrefix(chunk, i, firstCharCode) {
   return firstCharCode === 101 && chunk.charCodeAt(i + 1) === 118 && chunk.charCodeAt(i + 2) === 101 && chunk.charCodeAt(i + 3) === 110 && chunk.charCodeAt(i + 4) === 116 && chunk.charCodeAt(i + 5) === 58;
 }
-// ../../node_modules/.pnpm/eventsource-parser@3.0.8/node_modules/eventsource-parser/dist/stream.js
+// ../../node_modules/.pnpm/eventsource-parser@3.1.1/node_modules/eventsource-parser/dist/stream.js
 var EventSourceParserStream = class extends TransformStream {
-  constructor({ onError, onRetry, onComment } = {}) {
+  constructor({ onError, onRetry, onComment, maxBufferSize } = {}) {
     let parser;
     super({
       start(controller) {
@@ -49167,10 +49840,11 @@ var EventSourceParserStream = class extends TransformStream {
             controller.enqueue(event);
           },
           onError(error51) {
-            onError === "terminate" ? controller.error(error51) : typeof onError == "function" && onError(error51);
+            typeof onError == "function" && onError(error51), (onError === "terminate" || error51.type === "max-buffer-size-exceeded") && controller.error(error51);
           },
           onRetry,
-          onComment
+          onComment,
+          maxBufferSize
         });
       },
       transform(chunk) {
@@ -49180,7 +49854,7 @@ var EventSourceParserStream = class extends TransformStream {
   }
 };
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/client/streamableHttp.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/client/streamableHttp.js
 var DEFAULT_STREAMABLE_HTTP_RECONNECTION_OPTIONS = {
   initialReconnectionDelay: 1e3,
   maxReconnectionDelay: 3e4,
@@ -49496,11 +50170,12 @@ var StreamableHTTPClientTransport = class {
       }
       const messages = Array.isArray(message) ? message : [message];
       const hasRequests = messages.filter((msg) => "method" in msg && "id" in msg && msg.id !== void 0).length > 0;
-      const contentType = response.headers.get("content-type");
+      const contentType2 = response.headers.get("content-type");
+      const responseMediaType = mediaTypeEssence(contentType2);
       if (hasRequests) {
-        if (contentType?.includes("text/event-stream")) {
+        if (responseMediaType === "text/event-stream") {
           this._handleSseStream(response.body, { onresumptiontoken }, false);
-        } else if (contentType?.includes("application/json")) {
+        } else if (responseMediaType === "application/json") {
           const data = await response.json();
           const responseMessages = Array.isArray(data) ? data.map((msg) => JSONRPCMessageSchema.parse(msg)) : [JSONRPCMessageSchema.parse(data)];
           for (const msg of responseMessages) {
@@ -49508,7 +50183,7 @@ var StreamableHTTPClientTransport = class {
           }
         } else {
           await response.body?.cancel();
-          throw new StreamableHTTPError(-1, `Unexpected content type: ${contentType}`);
+          throw new StreamableHTTPError(-1, `Unexpected content type: ${contentType2}`);
         }
       } else {
         await response.body?.cancel();
@@ -49722,10 +50397,10 @@ var McpToolCodedError = class extends Error {
 // src/delivery/artifacts.ts
 async function deliverToArtifacts(client, projectSlug, payload, bareFetch) {
-  const { bytes: bytes3, class: artifactClass, contentType, description, filename, runId, taskId } = payload;
+  const { bytes: bytes3, class: artifactClass, contentType: contentType2, description, filename, runId, taskId } = payload;
   const created = await client.createArtifactFile(projectSlug, {
     class: artifactClass,
-    contentType,
+    contentType: contentType2,
     filename,
     runId,
     sizeBytes: bytes3.byteLength,
@@ -49738,14 +50413,14 @@ async function deliverToArtifacts(client, projectSlug, payload, bareFetch) {
       for (const [field, value] of Object.entries(created.upload.fields)) {
         form.append(field, value);
       }
-      form.append("file", new Blob([bytes3], { type: contentType }), filename);
+      form.append("file", new Blob([bytes3], { type: contentType2 }), filename);
       const fetchImpl = bareFetch ?? globalThis.fetch;
       const uploadResponse = await fetchImpl(created.upload.url, { body: form, method: "POST" });
       if (!uploadResponse.ok) {
         throw new Error(`Presigned upload failed: ${uploadResponse.status} ${await uploadResponse.text()}`);
       }
     } else {
-      await client.uploadArtifactFileContent(projectSlug, created.artifact.id, bytes3, contentType);
+      await client.uploadArtifactFileContent(projectSlug, created.artifact.id, bytes3, contentType2);
     }
     stage = "complete";
     const completed = await client.completeArtifactFile(projectSlug, created.artifact.id);
@@ -49765,7 +50440,7 @@ async function deliverToArtifacts(client, projectSlug, payload, bareFetch) {
         }
       });
     }
-    const markdown = contentType.startsWith("image/") ? `![${completed.filename}](${created.stableUrl})` : `[${completed.filename}](${created.stableUrl})`;
+    const markdown = contentType2.startsWith("image/") ? `![${completed.filename}](${created.stableUrl})` : `[${completed.filename}](${created.stableUrl})`;
     return {
       artifactFile: completed,
       markdown,
@@ -52318,8 +52993,8 @@ async function findSessionDays(stateDir, sessionId) {
 function isRecord5(v) {
   return v !== null && typeof v === "object";
 }
-function resolvePath(root, path26) {
-  const parts = path26.split(".");
+function resolvePath(root, path28) {
+  const parts = path28.split(".");
   let cur = root;
   for (let i = 0; i < parts.length - 1; i += 1) {
     const part = parts[i];
@@ -52387,9 +53062,9 @@ async function gate(artifact, prose, ctx) {
     return { ok: true, gated: true, artifact: withheldExcerptClone(artifact) };
   }
   const maskedClone = typeof structuredClone === "function" ? structuredClone(artifact) : JSON.parse(JSON.stringify(artifact));
-  for (const { path: path26, masked } of fields) {
-    const target = resolvePath(maskedClone, path26);
-    if (!target) throw new Error(`pii-gate: path "${path26}" failed to resolve on the clone after validating on the original`);
+  for (const { path: path28, masked } of fields) {
+    const target = resolvePath(maskedClone, path28);
+    if (!target) throw new Error(`pii-gate: path "${path28}" failed to resolve on the clone after validating on the original`);
     target.parent[target.key] = masked;
   }
   return { ok: true, gated: false, artifact: maskedClone };
@@ -52596,9 +53271,9 @@ var CheckoutRegistry = class {
   get(slug) {
     return this.read()[slug] ?? null;
   }
-  confirm(slug, path26, now) {
+  confirm(slug, path28, now) {
     const all = this.read();
-    all[slug] = { path: path26, confirmedAt: now };
+    all[slug] = { path: path28, confirmedAt: now };
     (0, import_node_fs6.writeFileSync)(this.file, JSON.stringify(all, null, 2));
   }
   /**
@@ -54580,8 +55255,8 @@ function createMrrlinTools(options) {
       "Unable to upload artifact file.",
       async (c, { projectSlug, path: filePath, class: artifactClass, taskId, runId, description }) => {
         const extension2 = import_node_path16.default.extname(filePath).toLowerCase();
-        const contentType = ARTIFACT_EXTENSION_TYPES[extension2];
-        if (!contentType) {
+        const contentType2 = ARTIFACT_EXTENSION_TYPES[extension2];
+        if (!contentType2) {
           throw new McpToolCodedError(
             "ARTIFACT_FILE_TYPE_UNSUPPORTED",
             `Unsupported artifact extension '${extension2}'. Allowed: ${Object.keys(ARTIFACT_EXTENSION_TYPES).join(", ")}.`
@@ -54612,7 +55287,7 @@ function createMrrlinTools(options) {
           c,
           projectSlug,
           "file_set",
-          { operation: "upload", bytes: bytes3, class: artifactClass, contentType, description, filename, runId, taskId },
+          { operation: "upload", bytes: bytes3, class: artifactClass, contentType: contentType2, description, filename, runId, taskId },
           { mcpConfigPath: options.mcpConfigPath, bareFetch: options.fetch ?? globalThis.fetch, taskId, runId }
         );
       }
@@ -54630,8 +55305,8 @@ function createMrrlinTools(options) {
           );
         }
         const extension2 = import_node_path16.default.extname(filename).toLowerCase();
-        const contentType = ARTIFACT_EXTENSION_TYPES[extension2];
-        if (!contentType) {
+        const contentType2 = ARTIFACT_EXTENSION_TYPES[extension2];
+        if (!contentType2) {
           throw new McpToolCodedError(
             "ARTIFACT_FILE_TYPE_UNSUPPORTED",
             `Unsupported artifact extension '${extension2}'. Allowed: ${Object.keys(ARTIFACT_EXTENSION_TYPES).join(", ")}.`
@@ -54654,7 +55329,7 @@ function createMrrlinTools(options) {
           c,
           projectSlug,
           "file_set",
-          { operation: "upload", bytes: bytes3, class: artifactClass, contentType, description, filename, runId, taskId },
+          { operation: "upload", bytes: bytes3, class: artifactClass, contentType: contentType2, description, filename, runId, taskId },
           { mcpConfigPath: options.mcpConfigPath, bareFetch: options.fetch ?? globalThis.fetch, taskId, runId }
         );
       }
@@ -55181,10 +55856,10 @@ async function verifyProviderReadiness(provider, run3, opts = {}) {
 }
 // src/director-bridge.ts
-var import_node_fs22 = __toESM(require("node:fs"), 1);
+var import_node_fs23 = __toESM(require("node:fs"), 1);
 var import_node_http = __toESM(require("node:http"), 1);
-var import_node_os16 = __toESM(require("node:os"), 1);
-var import_node_path35 = __toESM(require("node:path"), 1);
+var import_node_os17 = __toESM(require("node:os"), 1);
+var import_node_path37 = __toESM(require("node:path"), 1);
 var import_node_child_process20 = require("node:child_process");
 var import_node_crypto15 = __toESM(require("node:crypto"), 1);
@@ -56315,7 +56990,7 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
 }
 // src/_generated/version.ts
-var PKG_VERSION = "0.4.79";
+var PKG_VERSION = "0.4.85";
 // src/api-base-url-migrate.ts
 var import_node_fs13 = __toESM(require("node:fs"), 1);
@@ -57414,15 +58089,15 @@ var cache = /* @__PURE__ */ new Map();
 function resolveInstallationId(stateDir) {
   const cached2 = cache.get(stateDir);
   if (cached2 !== void 0) return cached2;
-  const path26 = (0, import_node_path26.join)(stateDir, FILE_NAME);
+  const path28 = (0, import_node_path26.join)(stateDir, FILE_NAME);
   let id;
   try {
-    id = (0, import_node_fs15.readFileSync)(path26, "utf8").trim();
+    id = (0, import_node_fs15.readFileSync)(path28, "utf8").trim();
     if (!UUID.test(id)) throw new Error("unusable");
   } catch {
     id = (0, import_node_crypto12.randomUUID)();
-    (0, import_node_fs15.mkdirSync)((0, import_node_path26.dirname)(path26), { recursive: true });
-    (0, import_node_fs15.writeFileSync)(path26, `${id}
+    (0, import_node_fs15.mkdirSync)((0, import_node_path26.dirname)(path28), { recursive: true });
+    (0, import_node_fs15.writeFileSync)(path28, `${id}
 `, "utf8");
   }
   cache.set(stateDir, id);
@@ -59234,10 +59909,17 @@ var BASE_INSTRUCTIONS_PREFIX = [
   "Completion contract (the run is gated on this):",
   "- Act now, in this turn, whenever the tools to do the work are in reach, the work does not",
   "  depend on waiting for external state, and any irreversible outward action it takes is already",
-  "  covered by this turn's own recording obligation. The conveyor -- a scheduled follow-up task or",
-  "  plan -- is the exception, entered only for a build-and-test cycle, work still unfinished when",
-  "  the turn ends, or a decision only the operator can make. A task or plan exists to keep",
-  "  unfinished work from being lost, not to authorize doing it later when it could be done now.",
+  "  covered by this turn's own recording obligation. BUT this applies ONLY to self-contained or",
+  "  routine work.",
+  "- For large epics, complex integrations, or multi-step initiatives (e.g. adding a new",
+  "  payment provider, launching a broad marketing campaign, synthesizing a",
+  "  comprehensive UX research report, or setting up a database schema), you MUST NOT act",
+  "  immediately in chat. You must route substantial work through a tracked task or plan to ensure",
+  "  it goes through the proper Spec -> Consensus flow.",
+  "- The conveyor (a scheduled follow-up task or plan) is the rule for complex work, and the exception",
+  "  for simple work, entered only for a build-and-test cycle, work still unfinished when",
+  "  the turn ends, or a decision only the operator can make. A task or plan exists to organize complex work",
+  "  and keep unfinished work from being lost, not to authorize doing it later when it could be done now.",
   "- Never file a clarifying question about anything the operator already answered in this thread.",
   "  A complete instruction whose work is reachable in this turn gets done, then recorded -- it does",
   "  not become a question.",
@@ -59278,6 +59960,9 @@ var BASE_INSTRUCTIONS_PREFIX = [
   "  NOT a product/scope decision, which is legitimately the operator's call -- first search for it:",
   "  search_wiki_pages / retrieve_context, and re-read anything already loaded in this run's context",
   "  bundle. Only hand off for that input if the search comes up empty.",
+  "- When a task requires an external service (e.g. PostgreSQL, Notion, Linear, Slack, Stripe, Supabase, Brave Search)",
+  "  that is not currently granted or reachable, do not fake credentials or pretend to execute it. Note the missing",
+  "  capability in the spec or handoff and direct the operator to [Integrations](/integrations) to grant it in 1 click.",
   "",
   "File artifacts:",
   "- Decide BEFORE writing your result, by PROVENANCE: output assembled from data you RETRIEVED",
@@ -59464,26 +60149,26 @@ function newArtifactId() {
   return `EA-${import_node_crypto13.default.randomUUID()}`;
 }
 var BLAST_RADIUS_FLOOR_PATTERNS = [/^supabase\/migrations\//, /^packages\/db\/src\/schema\.ts$/];
-function isBlastRadiusFloorPath(path26) {
-  return BLAST_RADIUS_FLOOR_PATTERNS.some((re) => re.test(path26));
+function isBlastRadiusFloorPath(path28) {
+  return BLAST_RADIUS_FLOOR_PATTERNS.some((re) => re.test(path28));
 }
 var execFileAsync2 = (0, import_node_util2.promisify)(import_node_child_process18.execFile);
 async function defaultListRunDiffPaths(opts) {
-  const parse6 = (stdout) => stdout.split("\n").map((line) => line.trim()).filter((line) => line.length > 0);
+  const parse7 = (stdout) => stdout.split("\n").map((line) => line.trim()).filter((line) => line.length > 0);
   try {
     const { stdout } = await execFileAsync2(
       "git",
       ["-C", opts.worktreePath, "diff", "--name-only", `origin/${opts.defaultBranch}...HEAD`],
       { timeout: 3e4 }
     );
-    return parse6(stdout);
+    return parse7(stdout);
   } catch {
     const { stdout } = await execFileAsync2(
       "git",
       ["-C", opts.worktreePath, "diff", "--name-only", `${opts.defaultBranch}...HEAD`],
       { timeout: 3e4 }
     );
-    return parse6(stdout);
+    return parse7(stdout);
   }
 }
 var BLAST_RADIUS_FLOOR_REASON = "migration or database schema files changed";
@@ -60057,7 +60742,8 @@ ${renderTaskStateSection(taskState)}`;
       // self-censor). The read-only path keeps the never-write restriction.
       baseInstructions: useExecutor ? EXECUTOR_BASE_INSTRUCTIONS : CONSUMER_BASE_INSTRUCTIONS,
       developerInstructions: null,
-      ephemeral: null
+      ephemeral: null,
+      mcpConfig: deps.mcpConfigPath
     };
     let resumed = true;
     let acquireResult;
@@ -60284,16 +60970,15 @@ Continue executing task ${task.id}. Make the next concrete increment of progress
       if (!expectedRepoFullName) {
         throw new Error(`push aborted: project ${projectSlug} has no bound GitHub repository`);
       }
+      const pushFn2 = deps.pushRunBranch ?? pushRunBranch;
       const locksDir = deps.locksDir ?? "/tmp/mrrlin-locks";
       await withCheckoutLock(locksDir, projectSlug, async () => {
-        await pushFn({
+        await pushFn2({
           worktreePath,
           locksDir,
           slug: projectSlug,
           runId,
           expectedRepoFullName,
-          // Guard a stale/wrong tree against the SHA recorded for the run at execution time
-          // (null until head_sha recording is wired — then the guard activates automatically).
           expectedSha: claimed.headSha ?? null,
           alreadyLocked: true
         });
@@ -60353,7 +61038,8 @@ Continue executing task ${task.id}. Make the next concrete increment of progress
           await postRunFeed(deps.client, projectSlug, runId, readiness.task.id, "demoted_blast_radius", { reason });
         }
       }
-      if (readiness.task.autoDeploy !== "dev" && readiness.task.autoDeploy !== "prod") {
+      const autoDeploy = readiness.task.autoDeploy;
+      if (autoDeploy === "off") {
         await deps.client.updateExecutionRun(projectSlug, runId, {
           leaseId,
           pullRequestUrl: pr.url,
@@ -60725,7 +61411,8 @@ async function driveNonCodeRun(deps, projectSlug, runId, leaseId, task, domain2)
       cwd: deps.codexCwd ?? process.cwd(),
       timeoutMs: DELIVERABLE_AUTHOR_TIMEOUT_MS,
       sandbox: "read-only",
-      codexExecutable: deps.codexExecutable
+      codexExecutable: deps.codexExecutable,
+      mcpConfig: deps.mcpConfigPath
     });
     if (!exec.ok) {
       await failRun(deps, projectSlug, task, runId, leaseId, `deliverable_authoring_failed: ${exec.error}`);
@@ -61423,6 +62110,114 @@ async function runAsyncBackstopSweep(deps, drive = (slug, jobId) => driveAsyncJo
   }
 }
+// src/bridge-artifacts.ts
+var import_node_fs18 = __toESM(require("node:fs"), 1);
+var import_promises14 = __toESM(require("node:fs/promises"), 1);
+var import_node_path31 = __toESM(require("node:path"), 1);
+var DEFAULT_MAX_ARTIFACTS_BYTES = 500 * 1024 * 1024;
+var DEFAULT_MAX_ARTIFACT_AGE_MS = 7 * 24 * 60 * 60 * 1e3;
+function resolveArtifactsDir(baseStateDir) {
+  const stateDir = baseStateDir ?? resolveStateDir();
+  return import_node_path31.default.join(stateDir, "artifacts");
+}
+function ensureDir(dir) {
+  import_node_fs18.default.mkdirSync(dir, { recursive: true, mode: 448 });
+  try {
+    import_node_fs18.default.chmodSync(dir, 448);
+  } catch {
+  }
+}
+function safeArtifactPath(artifactsDir, id) {
+  if (!id || typeof id !== "string" || !/^[a-zA-Z0-9_-]+$/.test(id)) {
+    throw new Error("Invalid artifact id");
+  }
+  return import_node_path31.default.join(artifactsDir, `${id}.json`);
+}
+async function writeLocalArtifact(id, payload, baseStateDir) {
+  const artifactsDir = resolveArtifactsDir(baseStateDir);
+  ensureDir(artifactsDir);
+  const filePath = safeArtifactPath(artifactsDir, id);
+  const content = JSON.stringify(payload ?? {});
+  await import_promises14.default.writeFile(filePath, content, { mode: 384, encoding: "utf8" });
+  try {
+    await import_promises14.default.chmod(filePath, 384);
+  } catch {
+  }
+  return filePath;
+}
+async function readLocalArtifact(id, baseStateDir) {
+  const artifactsDir = resolveArtifactsDir(baseStateDir);
+  try {
+    const filePath = safeArtifactPath(artifactsDir, id);
+    const content = await import_promises14.default.readFile(filePath, "utf8");
+    return JSON.parse(content);
+  } catch (err) {
+    if (err?.code === "ENOENT") {
+      return null;
+    }
+    return null;
+  }
+}
+async function cleanArtifacts(baseStateDir, options) {
+  const artifactsDir = resolveArtifactsDir(baseStateDir);
+  const maxAgeMs = options?.maxAgeMs ?? DEFAULT_MAX_ARTIFACT_AGE_MS;
+  const maxTotalBytes = options?.maxTotalBytes ?? DEFAULT_MAX_ARTIFACTS_BYTES;
+  let entries = [];
+  try {
+    entries = await import_promises14.default.readdir(artifactsDir);
+  } catch {
+    return { deletedCount: 0, deletedBytes: 0 };
+  }
+  const now = Date.now();
+  const files = [];
+  let deletedCount = 0;
+  let deletedBytes = 0;
+  for (const name of entries) {
+    if (!name.endsWith(".json")) continue;
+    const filePath = import_node_path31.default.join(artifactsDir, name);
+    try {
+      const stat3 = await import_promises14.default.stat(filePath);
+      if (now - stat3.mtimeMs > maxAgeMs) {
+        await import_promises14.default.unlink(filePath);
+        deletedCount++;
+        deletedBytes += stat3.size;
+      } else {
+        files.push({ name, path: filePath, size: stat3.size, mtimeMs: stat3.mtimeMs });
+      }
+    } catch {
+    }
+  }
+  let currentTotalBytes = files.reduce((acc, f) => acc + f.size, 0);
+  if (currentTotalBytes > maxTotalBytes) {
+    files.sort((a, b) => a.mtimeMs - b.mtimeMs);
+    for (const f of files) {
+      if (currentTotalBytes <= maxTotalBytes) break;
+      try {
+        await import_promises14.default.unlink(f.path);
+        deletedCount++;
+        deletedBytes += f.size;
+        currentTotalBytes -= f.size;
+      } catch {
+      }
+    }
+  }
+  return { deletedCount, deletedBytes };
+}
+function startArtifactsGc(baseStateDir, intervalMs = 10 * 60 * 1e3, options) {
+  const timer = setInterval(() => {
+    cleanArtifacts(baseStateDir, options).catch((err) => {
+      process.stderr.write(
+        `[mrrlin-mcp bridge-artifacts] GC failed: ${err instanceof Error ? err.message : String(err)}
+`
+      );
+    });
+  }, intervalMs);
+  timer.unref();
+  return {
+    stop: () => clearInterval(timer)
+  };
+}
 // src/chat-compaction.ts
 var DEFAULT_COMPACTION_SEED_BUDGET_BYTES = 8e3;
 var DEFAULT_COMPACTION_TIMEOUT_MS = 3e4;
@@ -61606,16 +62401,16 @@ function agentIdleMs(provider) {
 }
 // src/thread-index.ts
-var import_node_fs18 = require("node:fs");
-var import_node_path31 = __toESM(require("node:path"), 1);
+var import_node_fs19 = require("node:fs");
+var import_node_path32 = __toESM(require("node:path"), 1);
 function threadIndexPath(stateDir) {
-  return import_node_path31.default.join(stateDir, "threads.json");
+  return import_node_path32.default.join(stateDir, "threads.json");
 }
 function loadThreadIndex(stateDir, ttlMs, now) {
   const result = /* @__PURE__ */ new Map();
   let parsed;
   try {
-    parsed = JSON.parse((0, import_node_fs18.readFileSync)(threadIndexPath(stateDir), "utf8"));
+    parsed = JSON.parse((0, import_node_fs19.readFileSync)(threadIndexPath(stateDir), "utf8"));
   } catch {
     return result;
   }
@@ -61638,8 +62433,8 @@ function loadThreadIndex(stateDir, ttlMs, now) {
   return result;
 }
 function saveThreadIndex(stateDir, entries) {
-  (0, import_node_fs18.mkdirSync)(stateDir, { recursive: true, mode: 448 });
-  (0, import_node_fs18.writeFileSync)(threadIndexPath(stateDir), `${JSON.stringify(Object.fromEntries(entries), null, 2)}
+  (0, import_node_fs19.mkdirSync)(stateDir, { recursive: true, mode: 448 });
+  (0, import_node_fs19.writeFileSync)(threadIndexPath(stateDir), `${JSON.stringify(Object.fromEntries(entries), null, 2)}
 `, {
     encoding: "utf8",
     mode: 384
@@ -61775,9 +62570,9 @@ function createToolBusyClock(opts) {
 // src/remote-phone-relay.ts
 var import_node_events3 = require("node:events");
-var import_node_fs19 = require("node:fs");
+var import_node_fs20 = require("node:fs");
 var import_node_os14 = require("node:os");
-var import_node_path32 = require("node:path");
+var import_node_path33 = require("node:path");
 // ../../node_modules/.pnpm/@noble+hashes@1.3.3/node_modules/@noble/hashes/esm/cryptoNode.js
 var nc = __toESM(require("node:crypto"), 1);
@@ -65348,9 +66143,9 @@ var DirectorRelay = class {
 // src/remote-phone-relay.ts
 function loadOrCreateAgentDeviceKey() {
-  const path26 = (0, import_node_path32.join)((0, import_node_os14.homedir)(), ".mrrlin", "agent-device-key");
+  const path28 = (0, import_node_path33.join)((0, import_node_os14.homedir)(), ".mrrlin", "agent-device-key");
   try {
-    const raw = JSON.parse((0, import_node_fs19.readFileSync)(path26, "utf8"));
+    const raw = JSON.parse((0, import_node_fs20.readFileSync)(path28, "utf8"));
     if (typeof raw.priv === "string" && typeof raw.pub === "string") {
       return { privateKey: fromBase64Url(raw.priv), publicKey: fromBase64Url(raw.pub) };
     }
@@ -65358,9 +66153,9 @@ function loadOrCreateAgentDeviceKey() {
   }
   const kp = generateIdentityKeyPair();
   try {
-    (0, import_node_fs19.mkdirSync)((0, import_node_path32.join)((0, import_node_os14.homedir)(), ".mrrlin"), { recursive: true });
-    (0, import_node_fs19.writeFileSync)(
-      path26,
+    (0, import_node_fs20.mkdirSync)((0, import_node_path33.join)((0, import_node_os14.homedir)(), ".mrrlin"), { recursive: true });
+    (0, import_node_fs20.writeFileSync)(
+      path28,
       JSON.stringify({ priv: toBase64Url(kp.privateKey), pub: toBase64Url(kp.publicKey) }),
       { mode: 384 }
     );
@@ -65368,10 +66163,10 @@ function loadOrCreateAgentDeviceKey() {
   }
   return kp;
 }
-var AGENT_PAIRING_PATH = (0, import_node_path32.join)((0, import_node_os14.homedir)(), ".mrrlin", "agent-pairing.json");
+var AGENT_PAIRING_PATH = (0, import_node_path33.join)((0, import_node_os14.homedir)(), ".mrrlin", "agent-pairing.json");
 function loadAgentPairing() {
   try {
-    const raw = JSON.parse((0, import_node_fs19.readFileSync)(AGENT_PAIRING_PATH, "utf8"));
+    const raw = JSON.parse((0, import_node_fs20.readFileSync)(AGENT_PAIRING_PATH, "utf8"));
     if (typeof raw.channelId === "string" && typeof raw.agentControlSecret === "string" && typeof raw.relayAuth === "string" && typeof raw.peerIdentityKey === "string") {
       return {
         channelId: raw.channelId,
@@ -65386,8 +66181,8 @@ function loadAgentPairing() {
 }
 function saveAgentPairing(record2) {
   try {
-    (0, import_node_fs19.mkdirSync)((0, import_node_path32.join)((0, import_node_os14.homedir)(), ".mrrlin"), { recursive: true });
-    (0, import_node_fs19.writeFileSync)(AGENT_PAIRING_PATH, JSON.stringify(record2), { mode: 384 });
+    (0, import_node_fs20.mkdirSync)((0, import_node_path33.join)((0, import_node_os14.homedir)(), ".mrrlin"), { recursive: true });
+    (0, import_node_fs20.writeFileSync)(AGENT_PAIRING_PATH, JSON.stringify(record2), { mode: 384 });
   } catch {
   }
 }
@@ -65810,9 +66605,9 @@ function extractVerificationSection(markdown) {
 }
 // src/director-reseed.ts
-var import_node_fs20 = require("node:fs");
+var import_node_fs21 = require("node:fs");
 var import_node_readline = require("node:readline");
-var import_node_path33 = require("node:path");
+var import_node_path34 = require("node:path");
 function estimateTokens(s) {
   return Buffer.byteLength(s, "utf8");
 }
@@ -65944,9 +66739,9 @@ async function readSessionRows(logsDir, files, sessionIds) {
   const lines2 = [];
   let missingFiles = 0;
   for (const f of files) {
-    const filePath = (0, import_node_path33.join)(logsDir, f);
+    const filePath = (0, import_node_path34.join)(logsDir, f);
     try {
-      const stream = (0, import_node_fs20.createReadStream)(filePath, { encoding: "utf8" });
+      const stream = (0, import_node_fs21.createReadStream)(filePath, { encoding: "utf8" });
       const rl = (0, import_node_readline.createInterface)({ input: stream, crlfDelay: Infinity });
       try {
         for await (const line of rl) {
@@ -65970,18 +66765,18 @@ async function readSessionRows(logsDir, files, sessionIds) {
 }
 // src/external-agents-scrub.ts
-var import_node_fs21 = __toESM(require("node:fs"), 1);
+var import_node_fs22 = __toESM(require("node:fs"), 1);
 var import_node_os15 = __toESM(require("node:os"), 1);
-var import_node_path34 = __toESM(require("node:path"), 1);
+var import_node_path35 = __toESM(require("node:path"), 1);
 var REDACTION = "[REDACTED]";
 var SHORT_VALUE_THRESHOLD = 8;
-var KEYS_ENV_PATH = () => import_node_path34.default.join(import_node_os15.default.homedir(), ".local", "state", "external-agents", "keys.env");
+var KEYS_ENV_PATH = () => import_node_path35.default.join(import_node_os15.default.homedir(), ".local", "state", "external-agents", "keys.env");
 var keysEnvCache = null;
 function readKeysEnv() {
   const filePath = KEYS_ENV_PATH();
   let mtimeMs = 0;
   try {
-    mtimeMs = import_node_fs21.default.statSync(filePath).mtimeMs;
+    mtimeMs = import_node_fs22.default.statSync(filePath).mtimeMs;
   } catch {
     mtimeMs = 0;
   }
@@ -65990,7 +66785,7 @@ function readKeysEnv() {
   }
   const map2 = /* @__PURE__ */ new Map();
   try {
-    const content = import_node_fs21.default.readFileSync(filePath, "utf8");
+    const content = import_node_fs22.default.readFileSync(filePath, "utf8");
     for (const rawLine of content.split(/\r?\n/)) {
       const line = rawLine.trim();
       if (line === "" || line.startsWith("#")) continue;
@@ -66408,7 +67203,7 @@ function addBridgeModel(target, model) {
 }
 function readTextIfExists(filePath) {
   try {
-    return import_node_fs22.default.readFileSync(filePath, "utf8");
+    return import_node_fs23.default.readFileSync(filePath, "utf8");
   } catch {
     return null;
   }
@@ -66419,9 +67214,9 @@ function readKnownGptSlugsFromTomlFile(filePath) {
   return Array.from(raw.matchAll(/^\s*model\s*=\s*"([^"]+)"/gm)).map((match) => match[1]?.trim() ?? "").filter(isSelectableModelSlug);
 }
 function readCodexFallbackModels() {
-  const codexHome = process.env.CODEX_HOME?.trim() || import_node_path35.default.join(import_node_os16.default.homedir(), ".codex");
+  const codexHome = process.env.CODEX_HOME?.trim() || import_node_path37.default.join(import_node_os17.default.homedir(), ".codex");
   const models = /* @__PURE__ */ new Map();
-  const cachePath = import_node_path35.default.join(codexHome, "models_cache.json");
+  const cachePath = import_node_path37.default.join(codexHome, "models_cache.json");
   const cacheRaw = readTextIfExists(cachePath);
   if (cacheRaw) {
     try {
@@ -66471,7 +67266,7 @@ function readCodexFallbackModels() {
       );
     }
   }
-  for (const slug of readKnownGptSlugsFromTomlFile(import_node_path35.default.join(codexHome, "config.toml"))) {
+  for (const slug of readKnownGptSlugsFromTomlFile(import_node_path37.default.join(codexHome, "config.toml"))) {
     addBridgeModel(
       models,
       mapBridgeModel({
@@ -66485,11 +67280,11 @@ function readCodexFallbackModels() {
       })
     );
   }
-  const automationsDir = import_node_path35.default.join(codexHome, "automations");
+  const automationsDir = import_node_path37.default.join(codexHome, "automations");
   try {
-    for (const entry of import_node_fs22.default.readdirSync(automationsDir, { withFileTypes: true })) {
+    for (const entry of import_node_fs23.default.readdirSync(automationsDir, { withFileTypes: true })) {
       if (!entry.isDirectory()) continue;
-      for (const slug of readKnownGptSlugsFromTomlFile(import_node_path35.default.join(automationsDir, entry.name, "automation.toml"))) {
+      for (const slug of readKnownGptSlugsFromTomlFile(import_node_path37.default.join(automationsDir, entry.name, "automation.toml"))) {
         addBridgeModel(
           models,
           mapBridgeModel({
@@ -66515,9 +67310,9 @@ function selfUpdateInboxItemId(offeredVersion) {
   return `II-MCPUPD-${offeredVersion.replace(/[^A-Za-z0-9._-]/g, "-")}-${hash3}`;
 }
 function neutralCheckoutCwd(stateDir) {
-  const dir = import_node_path35.default.join(stateDir, "no-checkout");
+  const dir = import_node_path37.default.join(stateDir, "no-checkout");
   try {
-    import_node_fs22.default.mkdirSync(dir, { recursive: true });
+    import_node_fs23.default.mkdirSync(dir, { recursive: true });
   } catch {
   }
   return dir;
@@ -66696,6 +67491,11 @@ function buildThreadStartParams(msg, config2, desiredModel) {
     "  the default, not the only option: see the browser-vs-fetch contract below for when a fetch is",
     "  the wrong tool outright and when a failed fetch must be escalated to `mrrlin-browser`.",
     "",
+    "Integrations & external capability proactive guidance:",
+    "- When an operator request or planned task requires an external service (e.g. database schema/queries via PostgreSQL, documentation sync with Notion, task tracking in Linear, team notifications with Slack, payments via Stripe, web scraping with Puppeteer, cloud database/storage with Supabase, or external search via Brave Search) that is not currently granted to the project or available on the host:",
+    "- Proactively inform the operator which integration is needed and provide a direct link to the integrations page: [Integrations](/integrations).",
+    "- Explain that they can browse the Public Marketplace, discover installed local MCP servers from Claude / Codex / Antigravity, and grant project permissions in 1 click.",
+    "",
     "Handoff contract \u2014 durable operator action MUST NOT live only in chat:",
     "- If you conclude that a specific task needs human input, account access, manual evidence,",
     "  or an operator decision before it can be closed or advanced, call `create_inbox_item`",
@@ -67028,7 +67828,7 @@ async function runOrphanWorktreeSweep(client, opts) {
   const cutoff = Date.now() - worktreeRetentionMs();
   const isReapable = (worktreePath) => {
     try {
-      return import_node_fs22.default.statSync(worktreePath).mtimeMs < cutoff;
+      return import_node_fs23.default.statSync(worktreePath).mtimeMs < cutoff;
     } catch {
       return false;
     }
@@ -67104,7 +67904,7 @@ function applyPnaHeaders(res, requestOrigin, allowed) {
   res.setHeader("Vary", "Origin");
 }
 function createBridgeRequestListener(opts) {
-  const { host, port, token, allowedOrigins, getHealth } = opts;
+  const { host, port, token, allowedOrigins, stateDir, getHealth } = opts;
   return (req, res) => {
     const requestOrigin = typeof req.headers.origin === "string" ? req.headers.origin : void 0;
     if (req.method === "OPTIONS") {
@@ -67126,6 +67926,44 @@ function createBridgeRequestListener(opts) {
       return;
     }
     const url2 = new URL(req.url, `http://${req.headers.host ?? `${host}:${port}`}`);
+    if (url2.pathname.startsWith("/artifacts/")) {
+      if (req.method !== "GET") {
+        res.writeHead(405).end();
+        return;
+      }
+      applyPnaHeaders(res, requestOrigin, allowedOrigins);
+      if (requestOrigin !== void 0 && !isOriginAllowed(requestOrigin, allowedOrigins)) {
+        res.writeHead(403, { "content-type": "application/json" });
+        res.end(JSON.stringify({ ok: false, error: "Origin not allowed." }));
+        return;
+      }
+      const authHeader = (req.headers.authorization ?? "").trim();
+      const match = /^Bearer\s+(\S+)$/i.exec(authHeader);
+      if (!match || match[1] !== token) {
+        res.writeHead(401, { "content-type": "application/json" });
+        res.end(JSON.stringify({ ok: false, error: "Unauthorized" }));
+        return;
+      }
+      const artifactId = decodeURIComponent(url2.pathname.slice("/artifacts/".length).trim());
+      if (!artifactId) {
+        res.writeHead(400, { "content-type": "application/json" });
+        res.end(JSON.stringify({ ok: false, error: "Artifact ID required." }));
+        return;
+      }
+      readLocalArtifact(artifactId, stateDir).then((payload) => {
+        if (!payload) {
+          res.writeHead(404, { "content-type": "application/json" });
+          res.end(JSON.stringify({ ok: false, error: "Artifact not found." }));
+          return;
+        }
+        res.writeHead(200, { "content-type": "application/json" });
+        res.end(JSON.stringify({ ok: true, data: { id: artifactId, payload }, payload }));
+      }).catch((err) => {
+        res.writeHead(500, { "content-type": "application/json" });
+        res.end(JSON.stringify({ ok: false, error: err instanceof Error ? err.message : String(err) }));
+      });
+      return;
+    }
     if (url2.pathname === "/pair") {
       const origin = (url2.searchParams.get("origin") ?? "").trim();
       const originAllowed = isOriginAllowed(origin, allowedOrigins);
@@ -67507,7 +68345,7 @@ function createBridgeMessageHandler(deps) {
           sendForSpan({ type: "checkout-state", ok: false, error: { code: "invalid_input", fields: { projectSlug: "required" } } });
           return;
         }
-        const state = readCheckoutState(deps.checkoutRegistry, projectSlug, import_node_os16.default.hostname());
+        const state = readCheckoutState(deps.checkoutRegistry, projectSlug, import_node_os17.default.hostname());
         if (!state) {
           sendForSpan({ type: "checkout-state", ok: false, error: { code: "checkout_missing" } });
           return;
@@ -67539,7 +68377,7 @@ function createBridgeMessageHandler(deps) {
         const result = registerCheckout(
           deps.checkoutRegistry,
           { projectSlug, path: typeof msg.path === "string" ? msg.path : "", repo },
-          import_node_os16.default.hostname()
+          import_node_os17.default.hostname()
         );
         if (!result.ok) {
           sendForSpan({ type: "checkout-register", ok: false, error: { code: result.code, detail: result.detail } });
@@ -67595,6 +68433,50 @@ function createBridgeMessageHandler(deps) {
         });
         return;
       }
+      if (msg.type === "list-installed-mcp-servers" || msg.type === "get_installed_mcp_servers") {
+        const requestId = typeof msg.requestId === "string" ? msg.requestId : void 0;
+        try {
+          const servers = listDiscoveredMcpServers();
+          sendForSpan({
+            type: "installed-mcp-servers",
+            requestId,
+            ok: true,
+            data: { servers }
+          });
+        } catch (err) {
+          sendForSpan({
+            type: "installed-mcp-servers",
+            requestId,
+            ok: false,
+            error: { code: "discovery_failed", detail: err instanceof Error ? err.message : String(err) }
+          });
+        }
+        return;
+      }
+      if (msg.type === "install-public-mcp-server") {
+        const typedMsg = msg;
+        try {
+          const { installPublicMcpServerToConfigs: installPublicMcpServerToConfigs2 } = await Promise.resolve().then(() => (init_install_public_mcp(), install_public_mcp_exports));
+          await installPublicMcpServerToConfigs2(typedMsg.id, {
+            command: typedMsg.command,
+            args: typedMsg.args,
+            env: typedMsg.env
+          });
+          sendForSpan({
+            type: "install-public-mcp-server-response",
+            requestId: typedMsg.requestId,
+            ok: true
+          });
+        } catch (err) {
+          sendForSpan({
+            type: "install-public-mcp-server-response",
+            requestId: typedMsg.requestId,
+            ok: false,
+            error: { code: "install_failed", detail: err instanceof Error ? err.message : String(err) }
+          });
+        }
+        return;
+      }
       if (msg.type === "agents-state") {
         if (!deps.runExternalAgentsCli) {
           sendForSpan({ type: "agents-state", ok: false, error: { code: "bridge_offline", detail: "external-agents is not configured on this bridge" } });
@@ -68646,6 +69528,18 @@ async function startDirectorBridge() {
   }
   const hasStaticToken = !agentSecret && Boolean(envToken ?? readOperatorToken());
   const client = createMrrlinClient({ baseUrl: apiBaseUrl, fetch: authedFetch });
+  const originalAppendExecutionArtifact = client.appendExecutionArtifact.bind(client);
+  client.appendExecutionArtifact = async (projectSlug, runId, artifact) => {
+    if (artifact.payload && Object.keys(artifact.payload).length > 0) {
+      await writeLocalArtifact(artifact.id, artifact.payload, config2.stateDir);
+    }
+    const isBridgeHosted = artifact.kind === "command_output" || artifact.kind === "test_result" || artifact.kind === "diff_summary" || artifact.kind === "error";
+    return originalAppendExecutionArtifact(projectSlug, runId, {
+      ...artifact,
+      payload: isBridgeHosted ? {} : artifact.payload ?? {}
+    });
+  };
+  const artifactsGc = startArtifactsGc(config2.stateDir);
   const agentKeepalive = createAgentKeepalive({
     acquire: (providerId) => resolveProvider(process.env, providerId).acquireWarm(),
     release: (providerId) => resolveProvider(process.env, providerId).releaseWarm(),
@@ -68667,8 +69561,8 @@ async function startDirectorBridge() {
     codexCwd: config2.codexCwd,
     codexExecutable: config2.codexExecutable,
     checkoutRegistry,
-    worktreeRoot: import_node_path35.default.join(config2.stateDir, "worktrees"),
-    locksDir: import_node_path35.default.join(config2.stateDir, "locks"),
+    worktreeRoot: import_node_path37.default.join(config2.stateDir, "worktrees"),
+    locksDir: import_node_path37.default.join(config2.stateDir, "locks"),
     // Wire the executor server for code-execution runs. Each run gets its own provider process
     // (app-server for codex, a resident CLI child for claude) at the run worktree, running
     // UNRESTRICTED from the real operator config (owner no-sandbox decision — auth + mrrlin MCP
@@ -68712,13 +69606,13 @@ async function startDirectorBridge() {
         // egressDomains is retained in the seam signature (verification-turn.ts still computes the
         // env host) but no longer constrains anything — the executor is unrestricted.
         startSandbox: async (_egressDomains, providerId) => {
-          const cwd = import_node_fs22.default.mkdtempSync(import_node_path35.default.join(import_node_os16.default.tmpdir(), "mrrlin-verify-"));
+          const cwd = import_node_fs23.default.mkdtempSync(import_node_path37.default.join(import_node_os17.default.tmpdir(), "mrrlin-verify-"));
           let executor;
           try {
             executor = await startExecutorServer({ worktree: cwd, provider: providerId });
           } catch (error51) {
             try {
-              import_node_fs22.default.rmSync(cwd, { recursive: true, force: true });
+              import_node_fs23.default.rmSync(cwd, { recursive: true, force: true });
             } catch {
             }
             throw error51;
@@ -68729,7 +69623,7 @@ async function startDirectorBridge() {
             dispose: () => {
               executor.dispose();
               try {
-                import_node_fs22.default.rmSync(cwd, { recursive: true, force: true });
+                import_node_fs23.default.rmSync(cwd, { recursive: true, force: true });
               } catch {
               }
             }
@@ -68822,6 +69716,7 @@ async function startDirectorBridge() {
       port: config2.port,
       token: config2.token,
       allowedOrigins: config2.allowedOrigins,
+      stateDir: config2.stateDir,
       getHealth: () => ({
         ok: true,
         // Most recently claimed run, or null once nothing is in flight — kept for existing consumers.
@@ -68829,7 +69724,8 @@ async function startDirectorBridge() {
         inFlightRunIds: Array.from(consumerState.inFlightRunIds),
         inFlightCount: consumerState.inFlightRunIds.size,
         lastClaimAt: consumerState.lastClaimAt,
-        service: health.snapshot()
+        service: health.snapshot(),
+        localArtifactToken: config2.token
       })
     })
   );
@@ -68940,7 +69836,7 @@ async function startDirectorBridge() {
     }
     const files = dayFilesInWindow(/* @__PURE__ */ new Date(), reseedWindowMs);
     const sessionIds = [args.directorSessionId, ...args.priorSessionIds];
-    const { lines: lines2, missingFiles } = await readSessionRows(import_node_path35.default.join(config2.stateDir, "logs"), files, sessionIds);
+    const { lines: lines2, missingFiles } = await readSessionRows(import_node_path37.default.join(config2.stateDir, "logs"), files, sessionIds);
     const { items, skipped: skipped2 } = extractItems(lines2, sessionIds);
     if (items.length === 0) return refuse2("no-rows");
     const budget = Math.max(0, Math.min(config2.reseedMaxTokens, config2.turnMaxTokens - args.otherBytes));
@@ -69048,7 +69944,7 @@ async function startDirectorBridge() {
   const bridgeLogger = createBridgeLogger(config2.stateDir, process.env);
   let bridgeBinShaShort = "unknown00000";
   try {
-    bridgeBinShaShort = import_node_crypto15.default.createHash("sha256").update(import_node_fs22.default.readFileSync(process.argv[1] ?? "")).digest("hex").slice(0, 12);
+    bridgeBinShaShort = import_node_crypto15.default.createHash("sha256").update(import_node_fs23.default.readFileSync(process.argv[1] ?? "")).digest("hex").slice(0, 12);
   } catch {
   }
   attachBridgeWss(server, {
@@ -69184,8 +70080,8 @@ async function startDirectorBridge() {
       );
       void runOrphanWorktreeSweep(client, {
         checkoutRegistry,
-        worktreeRoot: import_node_path35.default.join(config2.stateDir, "worktrees"),
-        locksDir: import_node_path35.default.join(config2.stateDir, "locks")
+        worktreeRoot: import_node_path37.default.join(config2.stateDir, "worktrees"),
+        locksDir: import_node_path37.default.join(config2.stateDir, "locks")
       });
       {
         const { retainedBuffers, retainedBytes, tombstonesRemoved } = sweepReplayBuffers(threads, tombstones, {
@@ -69380,7 +70276,8 @@ async function startDirectorBridge() {
       () => providerReadinessLoopHandle?.stop(),
       () => agentKeepalive.dropNow(),
       () => selfUpdateHandle.stop(),
-      () => codexProbeHandle.stop()
+      () => codexProbeHandle.stop(),
+      () => artifactsGc.stop()
     ],
     shutdownCodex: () => codexServerManager.shutdown(),
     exit: (code) => process.exit(code),
@@ -69510,15 +70407,15 @@ function readDispatchBody(req) {
 function readOrCreateBridgeToken(stateDir) {
   const explicit = (process.env.MRRLIN_DIRECTOR_BRIDGE_TOKEN ?? "").trim();
   if (explicit) return explicit;
-  const tokenPath = import_node_path35.default.join(stateDir, "token.txt");
+  const tokenPath = import_node_path37.default.join(stateDir, "token.txt");
   try {
-    const existing = import_node_fs22.default.readFileSync(tokenPath, "utf8").trim();
+    const existing = import_node_fs23.default.readFileSync(tokenPath, "utf8").trim();
     if (existing) return existing;
   } catch {
   }
-  import_node_fs22.default.mkdirSync(stateDir, { recursive: true, mode: 448 });
+  import_node_fs23.default.mkdirSync(stateDir, { recursive: true, mode: 448 });
   const token = import_node_crypto15.default.randomBytes(32).toString("base64url");
-  import_node_fs22.default.writeFileSync(tokenPath, `${token}
+  import_node_fs23.default.writeFileSync(tokenPath, `${token}
 `, { mode: 384 });
   return token;
 }
@@ -69549,7 +70446,7 @@ function renderContextPrefix(context) {
   return `Context (JSON): ${JSON.stringify(payload)}`;
 }
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/server.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/server.js
 var ExperimentalServerTasks = class {
   constructor(_server) {
     this._server = _server;
@@ -69762,7 +70659,7 @@ var ExperimentalServerTasks = class {
   }
 };
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/server/index.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/server/index.js
 var Server = class extends Protocol {
   /**
    * Initializes this server with the given name and version information.
@@ -69828,16 +70725,7 @@ var Server = class extends Protocol {
     if (!methodSchema) {
       throw new Error("Schema is missing a method literal");
     }
-    let methodValue;
-    if (isZ4Schema(methodSchema)) {
-      const v4Schema = methodSchema;
-      const v4Def = v4Schema._zod?.def;
-      methodValue = v4Def?.value ?? v4Schema.value;
-    } else {
-      const v3Schema = methodSchema;
-      const legacyDef = v3Schema._def;
-      methodValue = legacyDef?.value ?? v3Schema.value;
-    }
+    const methodValue = getLiteralValue(methodSchema);
     if (typeof methodValue !== "string") {
       throw new Error("Schema method literal must be a string");
     }
@@ -70142,12 +71030,21 @@ var Server = class extends Protocol {
   }
 };
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js
 var import_node_process = __toESM(require("node:process"), 1);
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/stdio.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/stdio.js
+var STDIO_DEFAULT_MAX_BUFFER_SIZE = 10 * 1024 * 1024;
 var ReadBuffer = class {
+  constructor(options) {
+    this._maxBufferSize = options?.maxBufferSize ?? STDIO_DEFAULT_MAX_BUFFER_SIZE;
+  }
   append(chunk) {
+    const newSize = (this._buffer?.length ?? 0) + chunk.length;
+    if (newSize > this._maxBufferSize) {
+      this.clear();
+      throw new Error(`ReadBuffer exceeded maximum size of ${this._maxBufferSize} bytes`);
+    }
     this._buffer = this._buffer ? Buffer.concat([this._buffer, chunk]) : chunk;
   }
   readMessage() {
@@ -70173,20 +71070,26 @@ function serializeMessage(message) {
   return JSON.stringify(message) + "\n";
 }
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js
 var StdioServerTransport = class {
-  constructor(_stdin = import_node_process.default.stdin, _stdout = import_node_process.default.stdout) {
+  constructor(_stdin = import_node_process.default.stdin, _stdout = import_node_process.default.stdout, options) {
     this._stdin = _stdin;
     this._stdout = _stdout;
-    this._readBuffer = new ReadBuffer();
     this._started = false;
     this._ondata = (chunk) => {
-      this._readBuffer.append(chunk);
-      this.processReadBuffer();
+      try {
+        this._readBuffer.append(chunk);
+        this.processReadBuffer();
+      } catch (error51) {
+        this.onerror?.(error51);
+        this.close().catch(() => {
+        });
+      }
     };
     this._onerror = (error51) => {
       this.onerror?.(error51);
     };
+    this._readBuffer = new ReadBuffer({ maxBufferSize: options?.maxBufferSize });
   }
   /**
    * Starts listening for messages on stdin.
@@ -70415,9 +71318,9 @@ function runSetCredential(args) {
 }
 // src/install-service.ts
-var import_node_os17 = __toESM(require("node:os"), 1);
-var import_node_fs23 = require("node:fs");
-var import_node_path36 = __toESM(require("node:path"), 1);
+var import_node_os18 = __toESM(require("node:os"), 1);
+var import_node_fs24 = require("node:fs");
+var import_node_path38 = __toESM(require("node:path"), 1);
 function isOwnedEcosystemConfig(text) {
   return /name:\s*"mrrlin-bridge"/.test(text) && /script:\s*"mrrlin-mcp"/.test(text) && /args:\s*"director-bridge"/.test(text);
 }
@@ -70465,7 +71368,7 @@ function deriveServiceApiTarget(deps, ecoPath) {
 var SYSTEM_PATH_DIRS = ["/usr/bin", "/bin", "/usr/sbin", "/sbin"];
 function defaultHomeOwnerUid(home) {
   try {
-    return (0, import_node_fs23.statSync)(home).uid;
+    return (0, import_node_fs24.statSync)(home).uid;
   } catch {
     return null;
   }
@@ -70506,11 +71409,11 @@ function installService(deps) {
     deps.log(resolved.reason);
     return { ok: false };
   }
-  const home = deps.env.HOME ?? import_node_os17.default.homedir();
+  const home = deps.env.HOME ?? import_node_os18.default.homedir();
   const user = resolveBridgeUser({
     env: deps.env,
     home,
-    userInfo: deps.userInfo ?? (() => import_node_os17.default.userInfo()),
+    userInfo: deps.userInfo ?? (() => import_node_os18.default.userInfo()),
     homeOwnerUid: deps.homeOwnerUid ?? defaultHomeOwnerUid,
     log: deps.log
   });
@@ -70530,12 +71433,12 @@ function installService(deps) {
   }
   const claudeBin = deps.which("claude");
   const resolvedBins = [...bins, claudeBin].filter((b) => b !== null);
-  const isWin = import_node_os17.default.platform() === "win32";
-  const systemDirs = isWin ? (deps.env.PATH || "").split(import_node_path36.default.delimiter).filter(Boolean) : SYSTEM_PATH_DIRS;
+  const isWin = import_node_os18.default.platform() === "win32";
+  const systemDirs = isWin ? (deps.env.PATH || "").split(import_node_path38.default.delimiter).filter(Boolean) : SYSTEM_PATH_DIRS;
   const pathEnv = Array.from(
-    /* @__PURE__ */ new Set([...resolvedBins.map((b) => import_node_path36.default.dirname(b)), ...systemDirs])
-  ).join(import_node_path36.default.delimiter);
-  const ecoPath = import_node_path36.default.join(home, ".mrrlin", "ecosystem.config.cjs");
+    /* @__PURE__ */ new Set([...resolvedBins.map((b) => import_node_path38.default.dirname(b)), ...systemDirs])
+  ).join(import_node_path38.default.delimiter);
+  const ecoPath = import_node_path38.default.join(home, ".mrrlin", "ecosystem.config.cjs");
   const apiTarget = deriveServiceApiTarget(deps, ecoPath);
   const text = renderEcosystemConfig({
     cwd: resolved.cwd,
@@ -70597,18 +71500,18 @@ function uninstallService(deps) {
 }
 // src/uninstall-codex.ts
-var import_promises14 = __toESM(require("node:fs/promises"), 1);
-var import_node_os18 = __toESM(require("node:os"), 1);
-var import_node_path37 = __toESM(require("node:path"), 1);
-var toml3 = __toESM(require_toml(), 1);
+var import_promises16 = __toESM(require("node:fs/promises"), 1);
+var import_node_os19 = __toESM(require("node:os"), 1);
+var import_node_path39 = __toESM(require("node:path"), 1);
+var toml4 = __toESM(require_toml(), 1);
 function resolveCodexHome3(options) {
   if (options.codexHome) return options.codexHome;
   if (process.env.CODEX_HOME) return process.env.CODEX_HOME;
-  return import_node_path37.default.join(options.homeDir ?? import_node_os18.default.homedir(), ".codex");
+  return import_node_path39.default.join(options.homeDir ?? import_node_os19.default.homedir(), ".codex");
 }
-async function pathExists5(target) {
+async function pathExists6(target) {
   try {
-    await import_promises14.default.access(target);
+    await import_promises16.default.access(target);
     return true;
   } catch {
     return false;
@@ -70617,16 +71520,16 @@ async function pathExists5(target) {
 var MRRLIN_BLOCK_RE = /(^|\n)\[mcp_servers\.(?:mrrlin(?:-browser)?|external-agents)(?:\]|\.[^\]\n]*\])[\s\S]*?(?=\n\[|$)/g;
 async function uninstallCodex(options = {}) {
   const codexHome = resolveCodexHome3(options);
-  const configPath = import_node_path37.default.join(codexHome, "config.toml");
+  const configPath = import_node_path39.default.join(codexHome, "config.toml");
   const removePrompts = async () => uninstallPrompts(codexHome, options.promptNames ?? []);
-  if (!await pathExists5(configPath)) {
+  if (!await pathExists6(configPath)) {
     return { action: "missing", configPath, prompts: await removePrompts() };
   }
-  const realPath = await import_promises14.default.realpath(configPath).catch(() => configPath);
-  const existing = await import_promises14.default.readFile(realPath, "utf8");
+  const realPath = await import_promises16.default.realpath(configPath).catch(() => configPath);
+  const existing = await import_promises16.default.readFile(realPath, "utf8");
   let parsed = null;
   try {
-    parsed = toml3.parse(existing);
+    parsed = toml4.parse(existing);
   } catch (error51) {
     const detail = error51 instanceof Error ? error51.message : String(error51);
     const err = {
@@ -70640,17 +71543,17 @@ async function uninstallCodex(options = {}) {
     return { action: "noop", configPath: realPath, prompts: await removePrompts() };
   }
   const stripped = existing.replace(MRRLIN_BLOCK_RE, (match) => match.startsWith("\n") ? "\n" : "").replace(/\n{3,}/g, "\n\n").replace(/^\n+/, "");
-  await import_promises14.default.writeFile(realPath, stripped, { mode: 384 });
+  await import_promises16.default.writeFile(realPath, stripped, { mode: 384 });
   return { action: "removed", configPath: realPath, prompts: await removePrompts() };
 }
 async function uninstallPrompts(codexHome, names) {
   if (names.length === 0) return [];
-  const promptsDir = import_node_path37.default.join(codexHome, "prompts");
+  const promptsDir = import_node_path39.default.join(codexHome, "prompts");
   const out = [];
   for (const name of names) {
-    const promptPath = import_node_path37.default.join(promptsDir, `${name}.md`);
+    const promptPath = import_node_path39.default.join(promptsDir, `${name}.md`);
     try {
-      await import_promises14.default.unlink(promptPath);
+      await import_promises16.default.unlink(promptPath);
       out.push({ name, action: "removed", promptPath });
     } catch (error51) {
       const code = error51?.code;
@@ -70665,8 +71568,8 @@ async function uninstallPrompts(codexHome, names) {
 }
 // src/extract/command.ts
-var import_promises15 = require("node:fs/promises");
-var import_node_path38 = require("node:path");
+var import_promises17 = require("node:fs/promises");
+var import_node_path40 = require("node:path");
 function parseArgs(args) {
   const map2 = /* @__PURE__ */ new Map();
   for (let i = 0; i < args.length; i++) {
@@ -70703,10 +71606,10 @@ Missing required flag(s): ${missing.join(
   const days = await findSessionDays(deps.stateDir, sessionId);
   const matchingLines = [];
   for (const day of days) {
-    const logPath = (0, import_node_path38.join)(deps.stateDir, "logs", `bridge-${day}.jsonl`);
+    const logPath = (0, import_node_path40.join)(deps.stateDir, "logs", `bridge-${day}.jsonl`);
     let raw;
     try {
-      raw = await (0, import_promises15.readFile)(logPath, "utf8");
+      raw = await (0, import_promises17.readFile)(logPath, "utf8");
     } catch {
       continue;
     }
@@ -70740,7 +71643,7 @@ Missing required flag(s): ${missing.join(
   }
   const outputText = cappedLines.join("\n");
   if (outPath) {
-    await (0, import_promises15.writeFile)(outPath, outputText, "utf8");
+    await (0, import_promises17.writeFile)(outPath, outputText, "utf8");
     return {
       ok: true,
       message: `Wrote extract to ${outPath}`,
@@ -70803,16 +71706,16 @@ function bootHookStatus() {
   if (process.platform !== "darwin") return { status: "unknown" };
   const uid = process.getuid?.();
   if (uid === void 0 || uid === 0) return { status: "unknown" };
-  const home = process.env.HOME ?? (0, import_node_os19.homedir)();
-  const agents = import_node_path40.default.join(home, "Library", "LaunchAgents");
+  const home = process.env.HOME ?? (0, import_node_os20.homedir)();
+  const agents = import_node_path42.default.join(home, "Library", "LaunchAgents");
   const candidates = [
-    { label: "com.mrrlin.director-bridge", plist: import_node_path40.default.join(agents, "com.mrrlin.director-bridge.plist") },
-    { label: "com.PM2", plist: import_node_path40.default.join(agents, `pm2.${(0, import_node_os19.userInfo)().username}.plist`) }
+    { label: "com.mrrlin.director-bridge", plist: import_node_path42.default.join(agents, "com.mrrlin.director-bridge.plist") },
+    { label: "com.PM2", plist: import_node_path42.default.join(agents, `pm2.${(0, import_node_os20.userInfo)().username}.plist`) }
   ];
   for (const candidate of candidates) {
     const printed = (0, import_node_child_process21.spawnSync)("launchctl", ["print", `gui/${uid}/${candidate.label}`], { encoding: "utf8" });
     if (printed.status !== 0) continue;
-    if (!(0, import_node_fs24.existsSync)(candidate.plist)) continue;
+    if (!(0, import_node_fs25.existsSync)(candidate.plist)) continue;
     const out = printed.stdout ?? "";
     const runs = /^\s*runs\s*=\s*(\d+)/m.exec(out);
     const exitCode = /^\s*last exit code\s*=\s*(-?\d+)/m.exec(out);
@@ -71097,8 +72000,8 @@ async function main() {
         }
       }
       try {
-        const codexHome = process.env.CODEX_HOME ?? import_node_path40.default.join(process.env.HOME ?? (0, import_node_os19.homedir)(), ".codex");
-        (0, import_node_fs24.rmSync)(import_node_path40.default.join(codexHome, "prompts", "report-issue.md"), { force: true });
+        const codexHome = process.env.CODEX_HOME ?? import_node_path42.default.join(process.env.HOME ?? (0, import_node_os20.homedir)(), ".codex");
+        (0, import_node_fs25.rmSync)(import_node_path42.default.join(codexHome, "prompts", "report-issue.md"), { force: true });
       } catch {
       }
       const claudeResult = await installClaude({ binPath, force, serveEnv });
@@ -71168,15 +72071,15 @@ async function main() {
         env: process.env,
         cwd: process.cwd(),
         writeFile: (p, c) => {
-          (0, import_node_fs24.mkdirSync)(import_node_path40.default.dirname(p), { recursive: true, mode: 448 });
-          (0, import_node_fs24.writeFileSync)(p, c, { mode: 384 });
+          (0, import_node_fs25.mkdirSync)(import_node_path42.default.dirname(p), { recursive: true, mode: 448 });
+          (0, import_node_fs25.writeFileSync)(p, c, { mode: 384 });
         },
         // Swallows every error on purpose — the only caller uses this to recover settings from the
         // config it is about to overwrite, and a missing or unreadable file means "no previous
         // value", never a failed install. See readExistingTelemetryDefaultProject.
         readFile: (p) => {
           try {
-            return (0, import_node_fs24.readFileSync)(p, "utf8");
+            return (0, import_node_fs25.readFileSync)(p, "utf8");
           } catch {
             return null;
           }
@@ -71197,35 +72100,35 @@ async function main() {
         runPm2: (a) => ({ code: pm2Runner(a).code }),
         removeFile: (p) => {
           try {
-            (0, import_node_fs24.rmSync)(p, { force: true });
+            (0, import_node_fs25.rmSync)(p, { force: true });
           } catch {
           }
         },
         purgeSecret: purge,
         secretPath: agentCredentialPath(),
         tokenPath: operatorTokenPath(),
-        ecoPath: import_node_path40.default.join(process.env.HOME ?? (0, import_node_os19.homedir)(), ".mrrlin", "ecosystem.config.cjs"),
+        ecoPath: import_node_path42.default.join(process.env.HOME ?? (0, import_node_os20.homedir)(), ".mrrlin", "ecosystem.config.cjs"),
         log: (m) => process.stderr.write(`[mrrlin-mcp uninstall-service] ${m}
 `)
       });
       return;
     }
     case "uninstall": {
-      const home = process.env.HOME ?? (0, import_node_os19.homedir)();
+      const home = process.env.HOME ?? (0, import_node_os20.homedir)();
       const log = (m) => process.stderr.write(`[mrrlin-mcp uninstall] ${m}
 `);
       uninstallService({
         runPm2: (a) => ({ code: pm2Runner(a).code }),
         removeFile: (p) => {
           try {
-            (0, import_node_fs24.rmSync)(p, { force: true });
+            (0, import_node_fs25.rmSync)(p, { force: true });
           } catch {
           }
         },
         purgeSecret: true,
         secretPath: agentCredentialPath(),
         tokenPath: operatorTokenPath(),
-        ecoPath: import_node_path40.default.join(home, ".mrrlin", "ecosystem.config.cjs"),
+        ecoPath: import_node_path42.default.join(home, ".mrrlin", "ecosystem.config.cjs"),
         log
       });
       let codexOk = true;
@@ -71245,7 +72148,7 @@ async function main() {
         log(`codex config NOT modified: ${error51 instanceof Error ? error51.message : String(error51)}`);
       }
       try {
-        (0, import_node_fs24.rmSync)(import_node_path40.default.join(home, ".mrrlin"), { recursive: true, force: true });
+        (0, import_node_fs25.rmSync)(import_node_path42.default.join(home, ".mrrlin"), { recursive: true, force: true });
       } catch {
       }
       log("removed ~/.mrrlin");
@@ -71286,7 +72189,7 @@ ${HELP_TEXT}`);
   }
 }
 function resolveSelfBinPath() {
-  return import_node_path39.default.resolve(process.argv[1] ?? process.execPath);
+  return import_node_path41.default.resolve(process.argv[1] ?? process.execPath);
 }
 main().catch((error51) => {
   process.stderr.write(`mrrlin-mcp fatal error: ${error51 instanceof Error ? error51.message : String(error51)}
@@ -71295,6 +72198,13 @@ main().catch((error51) => {
 });
 /*! Bundled license information:
+content-type/index.js:
+  (*!
+   * content-type
+   * Copyright(c) 2015 Douglas Christopher Wilson
+   * MIT Licensed
+   *)
 @noble/hashes/esm/utils.js:
   (*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) *)