@mrrlin-dev/mcp 0.4.85 → 0.4.88

package/dist/bin.cjs

@@ -36673,7 +36673,7 @@ var ARTIFACT_CHECKS = {
   file_set: null,
   code_change: { verifier: "build" },
   structured_data: null,
-  message: null
+  message: { verifier: "status" }
 };
 var ARTIFACT_DESTINATIONS = {
   document: "wiki",
@@ -36681,7 +36681,7 @@ var ARTIFACT_DESTINATIONS = {
   file_set: "artifacts",
   code_change: "repo_host",
   structured_data: null,
-  message: "artifacts"
+  message: "send"
 };
 function resolveKindCapability(kind) {
   return ARTIFACT_DESTINATIONS[kind];
@@ -36737,7 +36737,6 @@ function describeCapabilityRefusal(input) {
 var openApiOperationIds = {
   appendExecutionArtifact: "appendExecutionArtifact",
   archivePlan: "archivePlan",
-  bindProjectGithubRepo: "bindProjectGithubRepo",
   createExecutionRun: "createExecutionRun",
   createExecutionRunHandoff: "createExecutionRunHandoff",
   createAsyncJob: "createAsyncJob",
@@ -36749,10 +36748,6 @@ var openApiOperationIds = {
   beginAsyncJobAttempt: "beginAsyncJobAttempt",
   terminalizeAsyncJob: "terminalizeAsyncJob",
   requeueAsyncJob: "requeueAsyncJob",
-  createGithubPullRequest: "createGithubPullRequest",
-  getGithubPullRequest: "getGithubPullRequest",
-  getGithubWorkflowRunLatest: "getGithubWorkflowRunLatest",
-  getGithubLatestDeployment: "getGithubLatestDeployment",
   createTaskDependency: "createTaskDependency",
   createPlan: "createPlan",
   upsertProject: "upsertProject",
@@ -36775,7 +36770,6 @@ var openApiOperationIds = {
   getTaskDeployTarget: "getTaskDeployTarget",
   getSchedulerPendingTasks: "getSchedulerPendingTasks",
   wakeDirector: "wakeDirector",
-  getGithubInstallationRepositories: "getGithubInstallationRepositories",
   getProject: "getProject",
   getProjectSnapshot: "getProjectSnapshot",
   getTask: "getTask",
@@ -36784,11 +36778,8 @@ var openApiOperationIds = {
   takeOverTask: "takeOverTask",
   closeTaskAsWontDo: "closeTaskAsWontDo",
   getWikiPage: "getWikiPage",
-  handleGithubInstallCallback: "handleGithubInstallCallback",
   listExecutionArtifacts: "listExecutionArtifacts",
   listExecutionRuns: "listExecutionRuns",
-  listGithubInstallations: "listGithubInstallations",
-  listGithubWorkflows: "listGithubWorkflows",
   listPlans: "listPlans",
   listProjects: "listProjects",
   listTaskDependencies: "listTaskDependencies",
@@ -36797,8 +36788,6 @@ var openApiOperationIds = {
   listTaxonomy: "listTaxonomy",
   listWikiPages: "listWikiPages",
   searchWikiPages: "searchWikiPages",
-  dispatchGithubWorkflow: "dispatchGithubWorkflow",
-  dispatchTaskDeploy: "dispatchTaskDeploy",
   createInboxItem: "createInboxItem",
   listInboxItems: "listInboxItems",
   decideInboxItem: "decideInboxItem",
@@ -37510,16 +37499,12 @@ var mrrlinTaskEventAutonomyLevelSchema = external_exports.enum([
   "human_review"
 ]);
 var mrrlinAutoDeploySchema = external_exports.enum(["off", "dev", "prod"]);
-var mrrlinTaskDomainSchema = external_exports.enum(["code", "seo", "marketing", "content"]);
-function normalizeTaskDomain(value) {
-  if (typeof value !== "string")
-    return "code";
-  const v = value.trim().toLowerCase();
-  return mrrlinTaskDomainSchema.options.includes(v) ? v : "code";
-}
+var mrrlinTaskDomainsSchema = external_exports.array(external_exports.string()).min(1);
 function domainScopedReviewHash(rawHash, domain2) {
-  const d = normalizeTaskDomain(domain2);
-  return d === "code" ? rawHash : `${rawHash}@${d}`;
+  const d = Array.isArray(domain2) ? domain2.map(String) : [String(domain2 || "code")];
+  const normalized = d.map((v) => v.trim().toLowerCase()).filter(Boolean);
+  normalized.sort();
+  return normalized.length === 1 && normalized[0] === "code" ? rawHash : `${rawHash}@${normalized.join(",")}`;
 }
 var mrrlinDeclaredOutcomeShapeSchema = external_exports.object({
   sentence: external_exports.string().trim().min(1),
@@ -37816,7 +37801,7 @@ var mrrlinTaskSchema = external_exports.object({
   // ADR 0020. OUTPUT-optional (not defaulted-required) so hardcoded task fixtures/mocks across the
   // codebase need no churn; the DB column is NOT NULL default 'code', so real rows always carry it,
   // and resolveHeads() treats an absent domain as `code`. Persisted create/update use their own forms.
-  domain: mrrlinTaskDomainSchema.optional(),
+  domains: mrrlinTaskDomainsSchema.optional(),
   autonomyLevel: mrrlinAutonomyLevelSchema,
   autonomyReason: external_exports.string().min(1).max(240),
   blockedBy: external_exports.array(mrrlinTaskIdSchema),
@@ -37894,9 +37879,9 @@ var mrrlinTaskSummarySchema = mrrlinTaskSchema.omit({
 var mrrlinPlanSchema = external_exports.object({
   closedTaskCount: external_exports.number().int().nonnegative(),
   // ADR 0020 Phase 2 (decision 7): plan-scoped specs resolve their consensus domain through
-  // plan.domain → project.defaultDomain → 'code'. Nullable (null = inherit project default);
+  // plan.domain → project.defaultDomains → 'code'. Nullable (null = inherit project default);
   // output-optional so existing plan fixtures need no churn.
-  domain: mrrlinTaskDomainSchema.nullable().optional(),
+  domains: mrrlinTaskDomainsSchema.nullable().optional(),
   dueDate: external_exports.string().date().nullable(),
   goal: external_exports.string().min(1),
   id: mrrlinPlanIdSchema,
@@ -37949,7 +37934,7 @@ var mrrlinCloseTaskAsWontDoRequestSchema = external_exports.object({
   reason: external_exports.string().min(1)
 });
 var mrrlinGithubBindingSchema = external_exports.object({
-  appInstallationState: external_exports.enum(["installed", "missing"]),
+  appInstallationState: external_exports.enum(["installed", "missing"]).default("missing"),
   installationId: external_exports.number().int().positive().nullable().default(null),
   operator: external_exports.string().startsWith("@"),
   repo: external_exports.string().regex(/^[^/]+\/[^/]+$/).nullable().default(null)
@@ -38011,7 +37996,7 @@ var mrrlinProjectSummarySchema = external_exports.object({
   slug: mrrlinProjectSlugSchema,
   // ADR 0020: default consensus domain for this project's plan/project-scoped specs. Output-optional
   // (DB column is NOT NULL default 'code') so existing project fixtures/upsert callers need no churn.
-  defaultDomain: mrrlinTaskDomainSchema.optional(),
+  defaultDomains: mrrlinTaskDomainsSchema.optional(),
   // model-tier-planning-and-arbiter D9: per-project judge switch. NULL/true means the judge runs
   // as today; false means intent-check.ts skips it entirely. Output-optional for the same reason
   // defaultDomain is: existing project fixtures/upsert callers need no churn.
@@ -38065,7 +38050,7 @@ var mrrlinProjectSnapshotSchema = external_exports.object({
   project: external_exports.object({
     // ADR 0020 Phase 2: default consensus domain for plan/project-scoped specs. Output-optional
     // (DB column is NOT NULL default 'code') so existing snapshot fixtures need no churn.
-    defaultDomain: mrrlinTaskDomainSchema.optional(),
+    defaultDomains: mrrlinTaskDomainsSchema.optional(),
     displayName: external_exports.string().min(1),
     emoji: mrrlinProjectEmojiSchema,
     slug: mrrlinProjectSlugSchema
@@ -38082,7 +38067,7 @@ var mrrlinTaskCreateShapeSchema = external_exports.object({
   // the preview-only constant "dev"; the tasks column itself still defaults to 'off' at the
   // SQL level for any direct-insert path that bypasses createTask entirely.
   autoDeploy: mrrlinAutoDeploySchema.optional(),
-  domain: mrrlinTaskDomainSchema.optional(),
+  domains: mrrlinTaskDomainsSchema.optional(),
   autonomyLevel: mrrlinAutonomyLevelSchema.default("human_review"),
   autonomyReason: external_exports.string().min(1).max(240).default("Needs human review before automation."),
   category: taxonomyCategorySchema,
@@ -38111,11 +38096,11 @@ var mrrlinTaskCreateShapeSchema = external_exports.object({
   // `apps/api/src/index.ts` for why the refusal cannot live in this schema.
 });
 function refineTaskCreateDomain(data, ctx) {
-  if (data.domain === void 0 && data.parentTaskId == null) {
+  if (data.domains === void 0 && data.parentTaskId == null) {
     ctx.addIssue({
       code: external_exports.ZodIssueCode.custom,
-      path: ["domain"],
-      message: "domain is required unless parentTaskId is set (a follow-up inherits its parent's domain)"
+      path: ["domains"],
+      message: "domains is required unless parentTaskId is set (a follow-up inherits its parent's domains)"
     });
   }
 }
@@ -38181,7 +38166,7 @@ var mrrlinTaskUpdateSchema = external_exports.object({
   actor: external_exports.string().min(1).optional(),
   assignee: mrrlinTaskAssigneeSchema.optional(),
   autoDeploy: mrrlinAutoDeploySchema.optional(),
-  domain: mrrlinTaskDomainSchema.optional(),
+  domains: mrrlinTaskDomainsSchema.optional(),
   autonomyLevel: mrrlinAutonomyLevelSchema.optional(),
   autonomyReason: external_exports.string().min(1).max(240).optional(),
   category: taxonomyCategorySchema.optional(),
@@ -38207,7 +38192,7 @@ var mrrlinTaskUpdateSchema = external_exports.object({
   // fingerprint moved but the topology still maps the label to the same workflow. Never sent
   // by any other caller.
   reverifyRequested: external_exports.boolean().optional()
-}).refine((value) => value.assignee !== void 0 || value.autoDeploy !== void 0 || value.domain !== void 0 || value.autonomyLevel !== void 0 || value.autonomyReason !== void 0 || value.category !== void 0 || value.directorThreadId !== void 0 || value.directorThreadProvider !== void 0 || value.dueDate !== void 0 || value.followUpAt !== void 0 || value.impact !== void 0 || value.notes !== void 0 || value.planId !== void 0 || value.specApproved !== void 0 || value.specWikiPageId !== void 0 || value.status !== void 0 || value.subcategory !== void 0 || value.tags !== void 0 || value.title !== void 0 || value.type !== void 0 || value.verificationDueAt !== void 0 || value.deployTargets !== void 0 || value.reverifyRequested !== void 0, { message: "TaskUpdate requires at least one field" }).superRefine((value, context) => {
+}).refine((value) => value.assignee !== void 0 || value.autoDeploy !== void 0 || value.domains !== void 0 || value.autonomyLevel !== void 0 || value.autonomyReason !== void 0 || value.category !== void 0 || value.directorThreadId !== void 0 || value.directorThreadProvider !== void 0 || value.dueDate !== void 0 || value.followUpAt !== void 0 || value.impact !== void 0 || value.notes !== void 0 || value.planId !== void 0 || value.specApproved !== void 0 || value.specWikiPageId !== void 0 || value.status !== void 0 || value.subcategory !== void 0 || value.tags !== void 0 || value.title !== void 0 || value.type !== void 0 || value.verificationDueAt !== void 0 || value.deployTargets !== void 0 || value.reverifyRequested !== void 0, { message: "TaskUpdate requires at least one field" }).superRefine((value, context) => {
   if (value.autonomyLevel !== void 0 && value.autonomyReason === void 0) {
     context.addIssue({
       code: external_exports.ZodIssueCode.custom,
@@ -38246,7 +38231,7 @@ var apiViolationsErrorSchema = external_exports.object({
   violations: external_exports.array(apiViolationSchema).min(1)
 });
 var mrrlinPlanCreateSchema = external_exports.object({
-  domain: mrrlinTaskDomainSchema.nullable().optional(),
+  domains: mrrlinTaskDomainsSchema.nullable().optional(),
   dueDate: external_exports.string().date().nullable().optional(),
   goal: external_exports.string().min(1),
   id: mrrlinPlanIdSchema,
@@ -38255,7 +38240,7 @@ var mrrlinPlanCreateSchema = external_exports.object({
   status: mrrlinPlanStatusSchema.default("active")
 });
 var mrrlinPlanUpdateSchema = external_exports.object({
-  domain: mrrlinTaskDomainSchema.nullable().optional(),
+  domains: mrrlinTaskDomainsSchema.nullable().optional(),
   dueDate: external_exports.string().date().nullable().optional(),
   goal: external_exports.string().min(1).optional(),
   name: external_exports.string().min(1).optional(),
@@ -39317,7 +39302,8 @@ var CapabilityRouteSchema = external_exports.object({
 var CAPABILITY_OPERATIONS = {
   wiki: { create: "required", update: "required" },
   repo_host: { pull_request: "required", pull_request_state: "required" },
-  publish: { release: "required", observe: "required", preview: "optional", rollback: "optional" }
+  publish: { release: "required", observe: "required", preview: "optional", rollback: "optional" },
+  send: { dispatch: "required", cancel: "optional" }
 };
 var CapabilityToolClassSchema = external_exports.object({
   projectSlug: mrrlinProjectSlugSchema,
@@ -39564,41 +39550,6 @@ function createMrrlinClient(config2) {
     return response.text();
   }
   return {
-    async listGithubInstallations() {
-      const body = await request(`/github/installations`);
-      return githubInstallationListResponseSchema.parse(body).data;
-    },
-    async handleGithubInstallCallback(input) {
-      const setupAction = input.setupAction ?? "install";
-      const url2 = appendQuery(`/github/install/callback`, {
-        installation_id: String(input.installationId),
-        setup_action: setupAction,
-        state: input.state
-      });
-      const body = await request(url2);
-      return githubInstallCallbackResponseSchema.parse(body).data;
-    },
-    async getGithubInstallationRepositories(installationId) {
-      const body = await request(`/github/installations/${encodeURIComponent(String(installationId))}/repositories`);
-      return githubInstallationRepositoriesResponseSchema.parse(body).data;
-    },
-    async bindProjectGithubRepo(projectSlug, input) {
-      const payload = githubBindProjectRepoRequestSchema.parse(input);
-      const body = await request(`${projectPath(projectSlug)}/github/repo`, {
-        body: JSON.stringify(payload),
-        headers: { "content-type": "application/json" },
-        method: "PUT"
-      });
-      return githubBindProjectRepoResponseSchema.parse(body).data;
-    },
-    async createGithubPullRequest(projectSlug, input) {
-      const body = await request(`${projectPath(projectSlug)}/github/pull-requests`, {
-        body: JSON.stringify(input),
-        headers: { "content-type": "application/json" },
-        method: "POST"
-      });
-      return githubCreatePullRequestResponseSchema.parse(body).data;
-    },
     async createTask(projectSlug, input) {
       const body = await request(`${projectPath(projectSlug)}/tasks`, {
         body: JSON.stringify(input),
@@ -39736,44 +39687,6 @@ function createMrrlinClient(config2) {
       const body = await request(`${projectPath(projectSlug)}/wiki/${encodeURIComponent(pageId)}`);
       return wikiPageResponseSchema.parse(body).data;
     },
-    async dispatchGithubWorkflow(projectSlug, workflowId, input) {
-      const body = await request(`${projectPath(projectSlug)}/github/workflows/${encodeURIComponent(workflowId)}/dispatches`, {
-        body: JSON.stringify(input),
-        headers: { "content-type": "application/json" },
-        method: "POST"
-      });
-      return githubWorkflowDispatchResponseSchema.parse(body).data;
-    },
-    async dispatchTaskDeploy(projectSlug, taskId, input) {
-      const body = await request(`${projectPath(projectSlug)}/tasks/${encodeURIComponent(taskId)}/deploy`, {
-        body: JSON.stringify(input),
-        headers: { "content-type": "application/json" },
-        method: "POST"
-      });
-      return githubWorkflowDispatchResponseSchema.parse(body).data;
-    },
-    async getGithubWorkflowRunLatest(projectSlug, query) {
-      const params = new URLSearchParams({
-        workflowId: query.workflowId,
-        branch: query.branch,
-        dispatchedAfter: query.dispatchedAfter
-      });
-      const body = await request(`${projectPath(projectSlug)}/github/workflow-runs/latest?${params.toString()}`);
-      return githubWorkflowRunResponseSchema.parse(body).data;
-    },
-    async getGithubPullRequest(projectSlug, pullNumber) {
-      const body = await request(`${projectPath(projectSlug)}/github/pull-requests/${encodeURIComponent(String(pullNumber))}`);
-      return githubPullRequestResponseSchema.parse(body).data;
-    },
-    async getGithubLatestDeployment(projectSlug, query) {
-      const params = new URLSearchParams({ environment: query.environment });
-      const body = await request(`${projectPath(projectSlug)}/github/deployments/latest?${params.toString()}`);
-      return githubLatestDeploymentResponseSchema.parse(body).data;
-    },
-    async listGithubWorkflows(projectSlug) {
-      const body = await request(`${projectPath(projectSlug)}/github/workflows`);
-      return githubWorkflowListResponseSchema.parse(body).data;
-    },
     async listProjects() {
       const body = await request("/projects");
       return projectSummaryListResponseSchema.parse(body).data;
@@ -40384,17 +40297,6 @@ function createMrrlinClient(config2) {
       });
       return projectSchedulerPolicyResponseSchema.parse(body).data;
     },
-    async getProjectDeployWorkflow(projectSlug, env) {
-      try {
-        const body = await request(`${projectPath(projectSlug)}/deploy-workflows/${env}`);
-        return projectDeployWorkflowResponseSchema.parse(body).data;
-      } catch (error51) {
-        if (error51 instanceof MrrlinApiError && error51.status === 404 && error51.code === "DEPLOY_WORKFLOW_UNSET") {
-          return null;
-        }
-        throw error51;
-      }
-    },
     async getDeployTopology(projectSlug) {
       const body = await request(`${projectPath(projectSlug)}/deploy-topology`);
       return deployTopologyResponseSchema.parse(body).data;
@@ -40418,14 +40320,6 @@ function createMrrlinClient(config2) {
         throw error51;
       }
     },
-    async upsertProjectDeployWorkflow(projectSlug, env, input) {
-      const body = await request(`${projectPath(projectSlug)}/deploy-workflows/${env}`, {
-        body: JSON.stringify(input),
-        headers: { "content-type": "application/json" },
-        method: "PUT"
-      });
-      return projectDeployWorkflowResponseSchema.parse(body).data;
-    },
     async getSchedulerPendingTasks(projectSlug) {
       const body = await request(`${projectPath(projectSlug)}/scheduler/pending`);
       return schedulerPendingTasksResponseSchema.parse(body).data;
@@ -41207,14 +41101,23 @@ var CODE_HEADS_BY_IMPACT = {
   medium: ["plan-reviewer", "security-analyst", "scope-analyst"],
   low: ["plan-reviewer", "scope-analyst"]
 };
-var MAX_DOMAIN_HEADS = Math.max(
-  ...Object.values(HEADS_BY_DOMAIN).map((h) => h.length),
-  ...Object.values(CODE_HEADS_BY_IMPACT).map((h) => h.length)
-);
+var MAX_DOMAIN_HEADS = 7;
+function normalizeDomains(value) {
+  if (value == null) return [DEFAULT_DOMAIN];
+  const items = Array.isArray(value) ? value : [value];
+  const normalized = [];
+  for (const item of items) {
+    if (typeof item === "string") {
+      const v = item.trim().toLowerCase();
+      if (DOMAINS.includes(v) && !normalized.includes(v)) {
+        normalized.push(v);
+      }
+    }
+  }
+  return normalized.length > 0 ? normalized.sort() : [DEFAULT_DOMAIN];
+}
 function normalizeDomain(value) {
-  if (typeof value !== "string") return DEFAULT_DOMAIN;
-  const v = value.trim().toLowerCase();
-  return DOMAINS.includes(v) ? v : DEFAULT_DOMAIN;
+  return normalizeDomains(value)[0];
 }
 function normalizeImpact(value) {
   if (typeof value !== "string") return null;
@@ -41222,10 +41125,19 @@ function normalizeImpact(value) {
   return v === "low" || v === "medium" || v === "high" ? v : null;
 }
 function resolveHeads(domain2, impact) {
-  const d = normalizeDomain(domain2);
-  if (d !== "code") return [...HEADS_BY_DOMAIN[d]];
-  const i = normalizeImpact(impact) ?? "high";
-  return [...CODE_HEADS_BY_IMPACT[i]];
+  const domains = normalizeDomains(domain2);
+  const result = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const d of domains) {
+    const headsForDomain = d === "code" ? CODE_HEADS_BY_IMPACT[normalizeImpact(impact) ?? "high"] : HEADS_BY_DOMAIN[d];
+    for (const h of headsForDomain) {
+      if (!seen.has(h)) {
+        seen.add(h);
+        result.push(h);
+      }
+    }
+  }
+  return result;
 }
 var PERSONAS_BY_DOMAIN = {
   seo: "seo-writer",
@@ -41233,9 +41145,13 @@ var PERSONAS_BY_DOMAIN = {
   marketing: "content-author"
 };
 function resolveProducerPersona(domain2) {
-  const d = normalizeDomain(domain2);
-  if (d === "code") return null;
-  return PERSONAS_BY_DOMAIN[d] ?? null;
+  const domains = normalizeDomains(domain2);
+  for (const d of domains) {
+    if (d !== "code" && PERSONAS_BY_DOMAIN[d]) {
+      return PERSONAS_BY_DOMAIN[d];
+    }
+  }
+  return null;
 }
 
 // src/consensus/acceptance-criteria.ts
@@ -41358,7 +41274,7 @@ async function runSpecGate(_target, deps, opts) {
       ]
     };
   }
-  const baseHeads = resolveHeads(intent.domain, intent.impact);
+  const baseHeads = resolveHeads(intent.domains, intent.impact);
   const extraHeads = opts?.extraHeads ?? [];
   const heads = [...baseHeads, ...extraHeads.filter((h) => !baseHeads.includes(h))];
   const spec = await deps.readSpec();
@@ -42685,7 +42601,8 @@ var ClaudeProcess = class {
       "stream-json",
       "--output-format",
       "stream-json",
-      "--include-partial-messages"
+      "--include-partial-messages",
+      "--verbose"
     ];
     if (options.mode.kind === "new") {
       args.push("--session-id", this.sessionId);
@@ -44024,13 +43941,14 @@ async function resolveSpecDomain(client, projectSlug, page) {
     const taskId = await resolveGatedTaskId(client, projectSlug, page);
     if (taskId !== null) {
       const task = await client.getTask(projectSlug, taskId);
-      return normalizeDomain(task?.domain);
+      return normalizeDomain(task?.domains ?? task?.domain);
     }
     const plans = await client.listPlans(projectSlug);
     const plan = plans.find((p) => p.specWikiPageId === page.id);
-    if (plan?.domain != null) return normalizeDomain(plan.domain);
+    const planDomains = plan?.domains ?? plan?.domain;
+    if (planDomains != null) return normalizeDomain(planDomains);
     const project = await client.getProject(projectSlug);
-    return normalizeDomain(project?.defaultDomain);
+    return normalizeDomain(project?.defaultDomains ?? project?.defaultDomain);
   } catch {
     return "code";
   }
@@ -44433,7 +44351,7 @@ function buildSpecGateDeps(args) {
         const taskId = await resolveGatedTaskId(client, projectSlug, { id: page.id, taskId: page.taskId ?? null });
         if (taskId === null) {
           const project = await client.getProject(projectSlug);
-          return { taskId: null, seed: null, title: null, domain: project.defaultDomain, notes: null };
+          return { taskId: null, seed: null, title: null, domains: project.defaultDomains, notes: null };
         }
         const task = await client.getTask(projectSlug, taskId);
         if (!task) {
@@ -44461,7 +44379,7 @@ function buildSpecGateDeps(args) {
           taskId,
           seed: resolvedSeed,
           title: task.title ?? "",
-          domain: task.domain,
+          domains: task.domains,
           notes,
           impact: task.impact,
           adjudicated,
@@ -44620,10 +44538,10 @@ ${artifact}`,
         timeoutMs,
         codexExecutable
       });
-      const { domain: domain2 } = await loadIntent();
+      const { domains } = await loadIntent();
       try {
         await client.recordSpecConsensusReview(projectSlug, specPageId, {
-          contentHash: domainScopedReviewHash2(contentHash, domain2),
+          contentHash: domainScopedReviewHash2(contentHash, domains),
           outcome: String(outcome),
           rounds: typeof rounds2 === "number" ? rounds2 : 0,
           ...history !== void 0 ? { history } : {},
@@ -44757,7 +44675,7 @@ async function buildDeliverableGateDeps(args) {
   let criteria = [];
   if (taskId) {
     const task = await client.getTask(projectSlug, taskId);
-    domain2 = normalizeDomain(task?.domain);
+    domain2 = normalizeDomain(task?.domains ?? task?.domain);
     impact = task?.impact;
     taskTitle = task?.title ?? "";
     if (task?.specWikiPageId) {
@@ -45306,7 +45224,7 @@ async function maybeRunShadow(input, deps, logger) {
   const productionVerdict = productionVerdictFromOutcome(input.outcome);
   if (productionVerdict === null) return false;
   try {
-    const heads = input.heads ?? [...resolveHeads(input.domain, input.impact), ...input.extraHeads ?? []];
+    const heads = input.heads ?? [...resolveHeads(input.domains, input.impact), ...input.extraHeads ?? []];
     const personaInstructions = {};
     for (const name of heads) {
       try {
@@ -45366,7 +45284,7 @@ function applyActivePanel(deps, panel) {
 async function resolveActivePanel(input, deps) {
   if (!multiLlmActive(input.env ?? process.env)) return null;
   try {
-    const heads = input.heads ?? [...resolveHeads(input.domain, input.impact), ...input.extraHeads ?? []];
+    const heads = input.heads ?? [...resolveHeads(input.domains, input.impact), ...input.extraHeads ?? []];
     if (heads.length === 0) return null;
     const personaInstructions = {};
     for (const name of heads) {
@@ -50458,6 +50376,12 @@ async function deliverToArtifacts(client, projectSlug, payload, bareFetch) {
   }
 }
 
+// src/delivery/send.ts
+async function deliverToSend(server, toolName, payload) {
+  const { operation: _operation, ...args } = payload;
+  return invokeCapability(server, toolName, args);
+}
+
 // src/delivery/publish.ts
 async function deliverToPublish(server, toolName, payload) {
   const { operation: _operation, ...args } = payload;
@@ -50805,6 +50729,14 @@ async function callDestination(client, projectSlug, route, resolvedToolName, pay
     }
     return deliverToArtifacts(client, projectSlug, payload, bareFetch);
   }
+  if (route.capability === "send") {
+    if (typeof operation !== "string" || !(operation in CAPABILITY_OPERATIONS.send)) {
+      throw new Error(`callDestination: payload.operation "${String(operation)}" is not valid for send`);
+    }
+    const server = readMcpServerById(mcpConfigPath ?? defaultMcpConfigPath(), route.serverId);
+    if (server === null) throw new NoGrantForServerError(`no local MCP config for server "${route.serverId}"`);
+    return deliverToSend(server, resolvedToolName, payload);
+  }
   if (route.capability === "publish") {
     if (typeof operation !== "string" || !(operation in CAPABILITY_OPERATIONS.publish)) {
       throw new Error(`callDestination: payload.operation "${String(operation)}" is not valid for publish`);
@@ -51483,7 +51415,7 @@ async function run(ctx, input, builders = defaultNativeSpecGateBuilders) {
         await maybeRunShadow({
           outcome: result.outcome,
           artifact: specPage.markdownBody,
-          domain: shadowDomain,
+          domains: [shadowDomain],
           extraHeads: input.extraHeads,
           correlationId: `Specs/${input.pageId}`,
           // task 1.21: ctx's own minted seat, not an ambient read — ctx already carries it by
@@ -52011,7 +51943,7 @@ function buildDraftSpecPrompt(task, constitution, deployTarget = null) {
     `id: ${task.id}`,
     `title: ${task.title}`,
     `type: ${task.type ?? "task"}`,
-    `domain: ${task.domain ?? "code"}`,
+    `domains: ${(task.domains ?? ["code"]).join(", ")}`,
     `impact: ${task.impact ?? ""}`,
     `category: ${task.category ?? ""} / ${task.subcategory ?? ""}`,
     `tags: ${(task.tags ?? []).join(", ")}`,
@@ -52715,9 +52647,6 @@ var OUTWARD_TOOL_NAMES = /* @__PURE__ */ new Set([
   "browser_press_key",
   "browser_file_upload",
   "browser_select_option",
-  "create_github_pull_request",
-  "dispatch_github_workflow",
-  "dispatch_task_deploy",
   "deliver_file",
   "record_produced_url"
 ]);
@@ -52725,7 +52654,6 @@ var READ_TOOL_NAMES = /* @__PURE__ */ new Set([
   "browser_navigate",
   "browser_snapshot",
   "get_execution_run",
-  "get_github_installation_repositories",
   "get_project",
   "get_project_scheduler_policy",
   "get_project_snapshot",
@@ -52735,8 +52663,6 @@ var READ_TOOL_NAMES = /* @__PURE__ */ new Set([
   "list_artifact_files",
   "list_execution_artifacts",
   "list_execution_runs",
-  "list_github_installations",
-  "list_github_workflows",
   "list_inbox_items",
   "list_plans",
   "list_project_members",
@@ -53497,9 +53423,7 @@ function readOrCreateWorkerToken() {
 var mcpToolNames = {
   appendExecutionArtifact: "append_execution_artifact",
   archivePlan: "archive_plan",
-  bindProjectGithubRepo: "bind_project_github_repo",
   createExecutionRun: "create_execution_run",
-  createGithubPullRequest: "create_github_pull_request",
   createPlan: "create_plan",
   createTaskDependency: "create_task_dependency",
   createTaxonomyEntry: "create_taxonomy_entry",
@@ -53522,14 +53446,9 @@ var mcpToolNames = {
   getProjectSnapshot: "get_project_snapshot",
   getTask: "get_task",
   getWikiPage: "get_wiki_page",
-  dispatchGithubWorkflow: "dispatch_github_workflow",
-  dispatchTaskDeploy: "dispatch_task_deploy",
-  getGithubInstallationRepositories: "get_github_installation_repositories",
   listExecutionArtifacts: "list_execution_artifacts",
   listExecutionRuns: "list_execution_runs",
   listInboxItems: "list_inbox_items",
-  listGithubInstallations: "list_github_installations",
-  listGithubWorkflows: "list_github_workflows",
   listPlans: "list_plans",
   listProjects: "list_projects",
   listTaskDependencies: "list_task_dependencies",
@@ -53541,7 +53460,6 @@ var mcpToolNames = {
   searchKnowledge: "search_knowledge",
   updateExecutionRun: "update_execution_run",
   upsertProjectSchedulerPolicy: "upsert_project_scheduler_policy",
-  recordDeployWorkflow: "record_deploy_workflow",
   updatePlan: "update_plan",
   updateTask: "update_task",
   resetDirectorThread: "reset_director_thread",
@@ -54192,17 +54110,6 @@ var runDecisionConsensusInputSchema = external_exports.object({
   )
 });
 var searchKnowledgeInputSchema = wikiKnowledgeSearchInputSchema;
-var createGithubPullRequestInputSchema = projectScopedSchema.merge(githubCreatePullRequestRequestSchema);
-var listGithubWorkflowsInputSchema = projectScopedSchema;
-var dispatchGithubWorkflowInputSchema = projectScopedSchema.extend({ workflowId: external_exports.string().min(1) }).merge(githubWorkflowDispatchRequestSchema);
-var dispatchTaskDeployInputSchema = taskScopedSchema.extend({
-  env: external_exports.enum(["dev", "prod"]),
-  ref: external_exports.string().min(1).default("main"),
-  workflowId: external_exports.string().min(1)
-});
-var listGithubInstallationsInputSchema = external_exports.object({});
-var getGithubInstallationRepositoriesInputSchema = githubInstallationIdParamSchema;
-var bindProjectGithubRepoInputSchema = projectScopedSchema.merge(githubBindProjectRepoRequestSchema);
 var runScopedSchema = projectScopedSchema.merge(executionRunIdParamSchema);
 var listExecutionRunsInputSchema = projectScopedSchema.merge(executionRunListFiltersSchema);
 var createExecutionRunInputSchema = projectScopedSchema.merge(mrrlinExecutionRunCreateSchema);
@@ -54214,13 +54121,6 @@ var recordProducedUrlInputSchema = runScopedSchema.merge(mrrlinProducedUrlPayloa
 var updateTaskStateInputSchema = runScopedSchema.merge(mrrlinTaskStateReportSchema);
 var getProjectSchedulerPolicyInputSchema = projectScopedSchema;
 var upsertProjectSchedulerPolicyInputSchema = projectScopedSchema.merge(mrrlinProjectSchedulerPolicyUpsertSchema);
-var recordDeployWorkflowInputSchema = projectScopedSchema.extend({
-  env: mrrlinDeployWorkflowEnvSchema,
-  workflowId: external_exports.number().int().positive().nullable(),
-  workflowPath: external_exports.string().nullable().optional(),
-  reason: external_exports.string().nullable().optional(),
-  state: mrrlinDeployWorkflowStateSchema.optional()
-});
 var getSchedulerPendingTasksInputSchema = projectScopedSchema;
 var wakeDirectorInputSchema = projectScopedSchema.merge(wakeDirectorRequestSchema.partial());
 var uploadArtifactInputSchema = projectScopedSchema.merge(
@@ -54278,9 +54178,7 @@ var retrieveContextInputSchema = external_exports.object({
 var mcpToolInputSchemas = {
   [mcpToolNames.appendExecutionArtifact]: appendExecutionArtifactInputSchema,
   [mcpToolNames.archivePlan]: archivePlanInputSchema,
-  [mcpToolNames.bindProjectGithubRepo]: bindProjectGithubRepoInputSchema,
   [mcpToolNames.createExecutionRun]: createExecutionRunInputSchema,
-  [mcpToolNames.createGithubPullRequest]: createGithubPullRequestInputSchema,
   [mcpToolNames.createPlan]: createPlanInputSchema,
   [mcpToolNames.createTaskDependency]: createTaskDependencyInputSchema,
   [mcpToolNames.createTaxonomyEntry]: createTaxonomyEntryInputSchema,
@@ -54301,13 +54199,8 @@ var mcpToolInputSchemas = {
   [mcpToolNames.getProjectSnapshot]: getProjectSnapshotInputSchema,
   [mcpToolNames.getTask]: getTaskInputSchema,
   [mcpToolNames.getWikiPage]: getWikiPageInputSchema,
-  [mcpToolNames.dispatchGithubWorkflow]: dispatchGithubWorkflowInputSchema,
-  [mcpToolNames.dispatchTaskDeploy]: dispatchTaskDeployInputSchema,
-  [mcpToolNames.getGithubInstallationRepositories]: getGithubInstallationRepositoriesInputSchema,
   [mcpToolNames.listExecutionArtifacts]: listExecutionArtifactsInputSchema,
   [mcpToolNames.listExecutionRuns]: listExecutionRunsInputSchema,
-  [mcpToolNames.listGithubInstallations]: listGithubInstallationsInputSchema,
-  [mcpToolNames.listGithubWorkflows]: listGithubWorkflowsInputSchema,
   [mcpToolNames.listPlans]: listPlansInputSchema,
   [mcpToolNames.listProjects]: listProjectsInputSchema,
   [mcpToolNames.listTaskDependencies]: listTaskDependenciesInputSchema,
@@ -54319,7 +54212,6 @@ var mcpToolInputSchemas = {
   [mcpToolNames.searchKnowledge]: searchKnowledgeInputSchema,
   [mcpToolNames.updateExecutionRun]: updateExecutionRunInputSchema,
   [mcpToolNames.upsertProjectSchedulerPolicy]: upsertProjectSchedulerPolicyInputSchema,
-  [mcpToolNames.recordDeployWorkflow]: recordDeployWorkflowInputSchema,
   [mcpToolNames.updatePlan]: updatePlanInputSchema,
   [mcpToolNames.updateTask]: updateTaskInputSchema,
   [mcpToolNames.resetDirectorThread]: resetDirectorThreadInputSchema,
@@ -54350,9 +54242,7 @@ var mcpToolInputSchemas = {
 var mcpToolOperationIds = {
   [mcpToolNames.appendExecutionArtifact]: openApiOperationIds.appendExecutionArtifact,
   [mcpToolNames.archivePlan]: openApiOperationIds.archivePlan,
-  [mcpToolNames.bindProjectGithubRepo]: openApiOperationIds.bindProjectGithubRepo,
   [mcpToolNames.createExecutionRun]: openApiOperationIds.createExecutionRun,
-  [mcpToolNames.createGithubPullRequest]: openApiOperationIds.createGithubPullRequest,
   [mcpToolNames.createPlan]: openApiOperationIds.createPlan,
   [mcpToolNames.createTaskDependency]: openApiOperationIds.createTaskDependency,
   [mcpToolNames.createTaxonomyEntry]: openApiOperationIds.createTaxonomyEntry,
@@ -54373,13 +54263,8 @@ var mcpToolOperationIds = {
   [mcpToolNames.getProjectSnapshot]: openApiOperationIds.getProjectSnapshot,
   [mcpToolNames.getTask]: openApiOperationIds.getTask,
   [mcpToolNames.getWikiPage]: openApiOperationIds.getWikiPage,
-  [mcpToolNames.dispatchGithubWorkflow]: openApiOperationIds.dispatchGithubWorkflow,
-  [mcpToolNames.dispatchTaskDeploy]: openApiOperationIds.dispatchTaskDeploy,
-  [mcpToolNames.getGithubInstallationRepositories]: openApiOperationIds.getGithubInstallationRepositories,
   [mcpToolNames.listExecutionArtifacts]: openApiOperationIds.listExecutionArtifacts,
   [mcpToolNames.listExecutionRuns]: openApiOperationIds.listExecutionRuns,
-  [mcpToolNames.listGithubInstallations]: openApiOperationIds.listGithubInstallations,
-  [mcpToolNames.listGithubWorkflows]: openApiOperationIds.listGithubWorkflows,
   [mcpToolNames.listPlans]: openApiOperationIds.listPlans,
   [mcpToolNames.listProjects]: openApiOperationIds.listProjects,
   [mcpToolNames.listTaskDependencies]: openApiOperationIds.listTaskDependencies,
@@ -54391,7 +54276,6 @@ var mcpToolOperationIds = {
   [mcpToolNames.searchKnowledge]: openApiOperationIds.searchKnowledge,
   [mcpToolNames.updateExecutionRun]: openApiOperationIds.updateExecutionRun,
   [mcpToolNames.upsertProjectSchedulerPolicy]: openApiOperationIds.upsertProjectSchedulerPolicy,
-  [mcpToolNames.recordDeployWorkflow]: openApiOperationIds.upsertProjectDeployWorkflow,
   [mcpToolNames.updatePlan]: openApiOperationIds.updatePlan,
   [mcpToolNames.updateTask]: openApiOperationIds.updateTask,
   [mcpToolNames.updateTaskState]: openApiOperationIds.reportTaskState,
@@ -54414,8 +54298,6 @@ var mcpToolOperationIds = {
 };
 var mcpToolDescriptions = {
   [mcpToolNames.archivePlan]: "Archive a plan/epic and clear task plan links.",
-  [mcpToolNames.bindProjectGithubRepo]: "Bind the project to a GitHub repository + installation id.",
-  [mcpToolNames.createGithubPullRequest]: "Create a GitHub pull request for the project's linked repository installation.",
   [mcpToolNames.createPlan]: "Create a plan/epic for grouping project tasks.",
   [mcpToolNames.createTaskDependency]: "Create a blocked-by relationship between two tasks.",
   [mcpToolNames.createTaxonomyEntry]: "Create an allowed category/subcategory pair.",
@@ -54432,11 +54314,6 @@ var mcpToolDescriptions = {
   [mcpToolNames.getProjectSnapshot]: "Fetch the full project snapshot: GitHub binding, tasks, plans, and wiki pages.",
   [mcpToolNames.getTask]: "Fetch a single task by project slug and task id.",
   [mcpToolNames.getWikiPage]: "Fetch a single markdown Wiki page.",
-  [mcpToolNames.dispatchGithubWorkflow]: "Dispatch a GitHub Actions workflow by workflow file/id against a ref visible to the linked installation.",
-  [mcpToolNames.dispatchTaskDeploy]: "Dispatch a task's dev or prod deploy; caller supplies workflowId chosen for this run (ADR 0012). Subject to auto_deploy policy and prod dev-verification gate.",
-  [mcpToolNames.getGithubInstallationRepositories]: "List repositories visible to a GitHub App installation id.",
-  [mcpToolNames.listGithubInstallations]: "List persisted GitHub App installations.",
-  [mcpToolNames.listGithubWorkflows]: "List the bound repository's GitHub Actions workflows live through the linked installation. No Mrrlin-side cache.",
   [mcpToolNames.listProjects]: "List every project visible to the operator.",
   [mcpToolNames.listPlans]: "List project plans/epics with progress counts.",
   [mcpToolNames.listTaskDependencies]: "List task blocked-by dependencies.",
@@ -54468,7 +54345,6 @@ var mcpToolDescriptions = {
   [mcpToolNames.updateExecutionRun]: "Update an execution run (status, branch, SHA, PR url, dev/prod workflow ids, checkpoint cursor). Transitioning to handoff_queued requires an approved handoff_judgement artifact.",
   [mcpToolNames.getProjectSchedulerPolicy]: "Fetch the project scheduler policy: cadence floor, eligible autonomy levels, and optional wake_floor. Returns defaults if unset.",
   [mcpToolNames.upsertProjectSchedulerPolicy]: "Upsert the project scheduler policy. Partial: only provided fields overwrite existing values.",
-  [mcpToolNames.recordDeployWorkflow]: "Record which GitHub Actions workflow deploys this project for one environment (dev or prod), after confirming it via list_github_workflows + reading its file for a workflow_dispatch trigger. Call this AT MOST ONCE per environment per project, only when the deploy gate has parked on a missing/stale workflow id \u2014 this choice becomes durable project state, not a per-run decision. Pass workflowId=null and state='ambiguous' when zero or more than one candidate is confirmed dispatchable; otherwise pass the single confirmed workflowId with state='resolved' (the default). `source` is derived from your identity server-side \u2014 you cannot set it, and this call is always recorded as 'agent'.",
   [mcpToolNames.getSchedulerPendingTasks]: "Return tasks the scheduler should wake now: ones with follow_up_at or verification_due_at passed, or the policy wake_floor reached, filtered by eligible autonomy levels.",
   [mcpToolNames.wakeDirector]: "Wake Director once for a project: optionally dry-run scheduler evaluation or enqueue execution runs best-effort.",
   [mcpToolNames.listInboxItems]: "List operator-inbox items for a project. Optional filters: kind, status.",
@@ -54682,40 +54558,6 @@ function createMrrlinTools(options) {
       "Unable to archive plan.",
       async (c, { projectSlug, planId }) => await c.updatePlan(projectSlug, planId, { status: "archived" })
     ),
-    [mcpToolNames.listGithubInstallations]: makeTool(
-      client,
-      mcpToolNames.listGithubInstallations,
-      "GITHUB_INSTALLATION_LIST_FAILED",
-      "Unable to list GitHub installations.",
-      async (c) => await c.listGithubInstallations()
-    ),
-    [mcpToolNames.getGithubInstallationRepositories]: makeTool(
-      client,
-      mcpToolNames.getGithubInstallationRepositories,
-      "GITHUB_INSTALLATION_REPOSITORIES_FAILED",
-      "Unable to list installation repositories.",
-      async (c, { installationId }) => await c.getGithubInstallationRepositories(installationId)
-    ),
-    [mcpToolNames.bindProjectGithubRepo]: makeTool(
-      client,
-      mcpToolNames.bindProjectGithubRepo,
-      "GITHUB_REPO_BIND_FAILED",
-      "Unable to bind project repository.",
-      async (c, { projectSlug, ...input }) => await c.bindProjectGithubRepo(projectSlug, input)
-    ),
-    [mcpToolNames.createGithubPullRequest]: makeTool(
-      client,
-      mcpToolNames.createGithubPullRequest,
-      "GITHUB_PULL_REQUEST_CREATE_FAILED",
-      "Unable to create GitHub pull request.",
-      async (c, { projectSlug, ...input }) => await deliverBuiltIn(
-        c,
-        projectSlug,
-        "code_change",
-        { operation: "pull_request", ...input },
-        { mcpConfigPath: options.mcpConfigPath }
-      )
-    ),
     [mcpToolNames.createPlan]: makeTool(
       client,
       mcpToolNames.createPlan,
@@ -54836,27 +54678,6 @@ function createMrrlinTools(options) {
       "Unable to read wiki page.",
       async (c, { projectSlug, pageId }) => await c.getWikiPage(projectSlug, pageId)
     ),
-    [mcpToolNames.dispatchGithubWorkflow]: makeTool(
-      client,
-      mcpToolNames.dispatchGithubWorkflow,
-      "GITHUB_WORKFLOW_DISPATCH_FAILED",
-      "Unable to dispatch GitHub workflow.",
-      async (c, { projectSlug, workflowId, ...input }) => await c.dispatchGithubWorkflow(projectSlug, workflowId, input)
-    ),
-    [mcpToolNames.dispatchTaskDeploy]: makeTool(
-      client,
-      mcpToolNames.dispatchTaskDeploy,
-      "TASK_DEPLOY_DISPATCH_FAILED",
-      "Unable to dispatch the task deploy workflow.",
-      async (c, { projectSlug, taskId, workflowId, ...rest }) => await c.dispatchTaskDeploy(projectSlug, taskId, { ...rest, workflowId })
-    ),
-    [mcpToolNames.listGithubWorkflows]: makeTool(
-      client,
-      mcpToolNames.listGithubWorkflows,
-      "GITHUB_WORKFLOW_LIST_FAILED",
-      "Unable to list GitHub workflows.",
-      async (c, { projectSlug }) => await c.listGithubWorkflows(projectSlug)
-    ),
     [mcpToolNames.listProjects]: makeTool(
       client,
       mcpToolNames.listProjects,
@@ -55203,13 +55024,6 @@ function createMrrlinTools(options) {
       "Unable to upsert project scheduler policy.",
       async (c, { projectSlug, ...input }) => await c.upsertProjectSchedulerPolicy(projectSlug, input)
     ),
-    [mcpToolNames.recordDeployWorkflow]: makeTool(
-      client,
-      mcpToolNames.recordDeployWorkflow,
-      "DEPLOY_WORKFLOW_RECORD_FAILED",
-      "Unable to record the project's deploy workflow choice.",
-      async (c, { projectSlug, env, ...input }) => await c.upsertProjectDeployWorkflow(projectSlug, env, input)
-    ),
     [mcpToolNames.getSchedulerPendingTasks]: makeTool(
       client,
       mcpToolNames.getSchedulerPendingTasks,
@@ -55764,31 +55578,31 @@ async function verifyProviderReadiness(provider, run3, opts = {}) {
       if (cliResult2.status === 0) {
         return {
           ready: true,
-          checks: { cli: true, version: true, auth: false, mcpReachable: false },
+          checks: { cli: true, version: true, auth: false, mcpReachable: false, smoke: true },
           details: []
         };
       } else if (cliResult2.status === null) {
         return {
           ready: false,
-          checks: { cli: false, version: false, auth: false, mcpReachable: false },
+          checks: { cli: false, version: false, auth: false, mcpReachable: false, smoke: false },
           details: ["cli: `agy` binary not found on PATH"]
         };
       } else {
         return {
           ready: false,
-          checks: { cli: true, version: false, auth: false, mcpReachable: false },
+          checks: { cli: true, version: false, auth: false, mcpReachable: false, smoke: false },
           details: [`cli: \`agy --version\` exited with code ${cliResult2.status}`]
         };
       }
     } catch (_e) {
       return {
         ready: false,
-        checks: { cli: false, version: false, auth: false, mcpReachable: false },
+        checks: { cli: false, version: false, auth: false, mcpReachable: false, smoke: false },
         details: ["cli: `agy` binary not found on PATH"]
       };
     }
   }
-  const checks = { cli: false, version: false, auth: false, mcpReachable: false };
+  const checks = { cli: false, version: false, auth: false, mcpReachable: false, smoke: false };
   const details = [];
   let cliResult;
   let cliUnreachable = false;
@@ -55851,7 +55665,34 @@ async function verifyProviderReadiness(provider, run3, opts = {}) {
     }
     if (!checks.mcpReachable) details.push("mcpReachable: external-agents server entry missing or invalid");
   }
-  const ready = checks.cli && checks.version && checks.auth && checks.mcpReachable;
+  if (provider === "codex") {
+    checks.smoke = true;
+  } else if (!checks.cli || !checks.version || !checks.auth || !checks.mcpReachable) {
+    checks.smoke = false;
+  } else {
+    try {
+      const result = run3([
+        "--print",
+        "--input-format",
+        "stream-json",
+        "--output-format",
+        "stream-json",
+        "--include-partial-messages",
+        "--verbose",
+        "--permission-mode",
+        "bypassPermissions",
+        "--model",
+        "haiku",
+        "-p",
+        "hi"
+      ]);
+      checks.smoke = result.status === 0;
+    } catch {
+      checks.smoke = false;
+    }
+    if (!checks.smoke) details.push("smoke: single-turn `claude --print ... -p hi` failed");
+  }
+  const ready = checks.cli && checks.version && checks.auth && checks.mcpReachable && checks.smoke;
   return { ready, checks, details };
 }
 
@@ -56990,7 +56831,7 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.4.85";
+var PKG_VERSION = "0.4.88";
 
 // src/api-base-url-migrate.ts
 var import_node_fs13 = __toESM(require("node:fs"), 1);
@@ -57015,28 +56856,45 @@ function resolveServiceCwd(opts) {
 }
 var BRIDGE_APP_NAME = "mrrlin-bridge";
 function renderEcosystemConfig(opts) {
-  const env = {
-    HOME: opts.home,
-    PATH: opts.pathEnv,
-    MRRLIN_DIRECTOR_BRIDGE_LOG: "1"
-  };
-  if (opts.user) {
-    env.USER = opts.user;
-    if (process.platform === "win32") {
-      env.USERNAME = opts.user;
+  let envLines;
+  if ("env" in opts && opts.env !== void 0) {
+    const safeEnv = /* @__PURE__ */ Object.create(null);
+    for (const key of Object.keys(opts.env)) {
+      const val = opts.env[key];
+      if (val !== void 0) {
+        safeEnv[key] = val;
+      }
+    }
+    const keys = Object.keys(safeEnv).sort();
+    envLines = keys.map((k) => {
+      const keyProp = k === "__proto__" ? '["__proto__"]' : k;
+      return `      ${keyProp}: ${JSON.stringify(safeEnv[k])},`;
+    }).join("\n");
+  } else {
+    const legacyOpts = opts;
+    const env = {
+      HOME: legacyOpts.home,
+      PATH: legacyOpts.pathEnv,
+      MRRLIN_DIRECTOR_BRIDGE_LOG: "1"
+    };
+    if (legacyOpts.user) {
+      env.USER = legacyOpts.user;
+      if (process.platform === "win32") {
+        env.USERNAME = legacyOpts.user;
+      }
     }
-  }
-  if (opts.codexHome) env.CODEX_HOME = opts.codexHome;
-  const claudeConfigDir = opts.claudeConfigDir?.trim();
-  if (claudeConfigDir) env.CLAUDE_CONFIG_DIR = claudeConfigDir;
-  const apiBaseUrl = opts.apiBaseUrl ? retargetRetiredApiBaseUrl(opts.apiBaseUrl).baseUrl : void 0;
-  if (apiBaseUrl && !isProductionApiBaseUrl(apiBaseUrl)) {
-    env.MRRLIN_API_BASE_URL = apiBaseUrl;
-    if (opts.apiAllowRemote && !isStagingApiBaseUrl(apiBaseUrl) && !isLoopbackUrl(apiBaseUrl)) {
-      env.MRRLIN_API_ALLOW_REMOTE = "1";
+    if (legacyOpts.codexHome) env.CODEX_HOME = legacyOpts.codexHome;
+    const claudeConfigDir = legacyOpts.claudeConfigDir?.trim();
+    if (claudeConfigDir) env.CLAUDE_CONFIG_DIR = claudeConfigDir;
+    const apiBaseUrl = legacyOpts.apiBaseUrl ? retargetRetiredApiBaseUrl(legacyOpts.apiBaseUrl).baseUrl : void 0;
+    if (apiBaseUrl && !isProductionApiBaseUrl(apiBaseUrl)) {
+      env.MRRLIN_API_BASE_URL = apiBaseUrl;
+      if (legacyOpts.apiAllowRemote && !isStagingApiBaseUrl(apiBaseUrl) && !isLoopbackUrl(apiBaseUrl)) {
+        env.MRRLIN_API_ALLOW_REMOTE = "1";
+      }
     }
+    envLines = Object.entries(env).map(([k, v]) => `      ${k}: ${JSON.stringify(v)},`).join("\n");
   }
-  const envLines = Object.entries(env).map(([k, v]) => `      ${k}: ${JSON.stringify(v)},`).join("\n");
   return `module.exports = {
   apps: [{
     name: ${JSON.stringify(BRIDGE_APP_NAME)},
@@ -59723,7 +59581,7 @@ async function notifyPinRetirement(info, opts) {
       type: "bug",
       category: "bug",
       subcategory: "reported",
-      domain: "code",
+      domains: ["code"],
       impact: "medium",
       notes: `The pinned strong model "${info.pinnedModel}" for provider "${info.providerId}" was not found in the provider's live model list (retired by provider). Falling back to live default model "${info.fallbackModel}". Please update the operator pin in ~/.mrrlin/ecosystem.config.cjs or the corresponding environment variable (MRRLIN_${info.providerId.toUpperCase()}_STRONG_MODEL).`,
       operatorSeedRequest: `The pinned strong model "${info.pinnedModel}" for provider "${info.providerId}" has been retired. Fallback in use: "${info.fallbackModel}". Update the strong model pin.`,
@@ -60038,7 +59896,7 @@ var BASE_INSTRUCTIONS_PREFIX = [
   "",
   "Publish policy and task split:",
   "- When creating tasks for work that produces a published web page, author the work as a `[code_change]` task and a `[page]` task linked by `blocked_by` (the `[page]` task is blocked by the `[code_change]` task).",
-  '- The `[page]` task must carry domain: "content" so it routes to non-code execution and closes on a live url receipt.',
+  '- The `[page]` task must carry domains: ["content"] so it routes to non-code execution and closes on a live url receipt.',
   "- Set autoDeploy on the code change task following the three-way heuristic:",
   "  - the result is only meaningful once live and there is nothing subjective to look at (`robots.txt`, `llms.txt`, sitemap, metatags) \u2192 release-to-live (`prod`);",
   "  - the operator would plausibly want to see it rendered first (a landing page, copy, a layout) \u2192 stop at preview (`dev`);",
@@ -60233,9 +60091,10 @@ async function gatherContext(client, projectSlug, task, openRunId) {
 async function deployWorkflowReverifyNotice(client, projectSlug) {
   const envs = ["dev", "prod"];
   const flagged = [];
+  const clientWithDeploy = client;
   for (const env of envs) {
     try {
-      const row = await client.getProjectDeployWorkflow(projectSlug, env);
+      const row = await clientWithDeploy.getProjectDeployWorkflow?.(projectSlug, env);
       if (row?.reverifyRequested) flagged.push(env);
     } catch {
     }
@@ -60558,8 +60417,10 @@ async function driveRun(deps, projectSlug, runId) {
       }
     }
   }
-  const runDomain = normalizeDomain(task.domain);
-  if (runDomain !== "code") {
+  const runDomains = Array.isArray(task.domains) ? task.domains : [task.domains ?? "code"];
+  const isPureCode = runDomains.length === 1 && runDomains[0] === "code";
+  if (!isPureCode) {
+    const runDomain = runDomains[0] ?? "code";
     await driveNonCodeRun(deps, projectSlug, runId, leaseId, task, runDomain);
     return;
   }
@@ -61240,7 +61101,7 @@ function buildDeliverableAuthorPrompt(task, specMarkdown) {
     `--- TASK ---`,
     `id: ${task.id}`,
     `title: ${task.title}`,
-    `domain: ${task.domain ?? "code"}`,
+    `domains: ${(task.domains ?? ["code"]).join(", ")}`,
     ``,
     `notes:`,
     task.notes ?? "(none)",
@@ -61906,7 +61767,7 @@ async function runBackstopSweep(deps, drive = (slug, id) => driveRun(deps, slug,
 }
 function isRunRecoverableByThisBridge(run3, worktreeRoot) {
   if (!worktreeRoot) return true;
-  if (!run3.worktreeId) return false;
+  if (!run3.worktreeId) return true;
   const relative = import_node_path30.default.relative(import_node_path30.default.resolve(worktreeRoot), import_node_path30.default.resolve(run3.worktreeId));
   return relative === "" || relative.length > 0 && !relative.startsWith("..") && !import_node_path30.default.isAbsolute(relative);
 }
@@ -66417,97 +66278,6 @@ async function startExecutorServer(opts) {
   }
 }
 
-// src/verification-turn.ts
-function buildVerificationPrompt(input) {
-  return [
-    `You are verifying a deployment. The application is live at: ${input.environmentUrl}`,
-    `Run ONLY read-only HTTP checks against that URL to evaluate the verification steps below.`,
-    `Behave as if you had no repository, filesystem, or credential access: do not read or write`,
-    `files, do not use any credentials, do not contact any other host, and do not attempt to`,
-    `mutate anything \u2014 only observe the deployed app over HTTP. (This is a rule you must follow,`,
-    `not something the environment enforces.)`,
-    ``,
-    `Verification steps for environment "${input.env}":`,
-    input.verificationSection,
-    ``,
-    `When finished, end your final message with EXACTLY one line, nothing after it:`,
-    `VERDICT: PASS - <one-line summary>   (if every step passed)`,
-    `VERDICT: FAIL - <one-line summary>   (if any step failed or could not be confirmed)`
-  ].join("\n");
-}
-function parseVerdict2(text) {
-  const re = /^[^\S\n]*VERDICT:\s*(PASS|FAIL)\b[^\S\n]*[-—:]?[^\S\n]*([^\n]*)/gim;
-  let match;
-  let last = null;
-  while ((match = re.exec(text)) !== null) last = match;
-  if (!last) {
-    return {
-      verdict: "fail",
-      summary: "no parseable VERDICT line in verification output",
-      turnRef: null,
-      fullOutput: text
-    };
-  }
-  const verdict = (last[1] ?? "").toLowerCase() === "pass" ? "pass" : "fail";
-  const summary = (last[2] ?? "").trim() || `verification ${verdict}`;
-  return { verdict, summary, turnRef: null, fullOutput: text };
-}
-function isBlockedVerificationHost(hostname3) {
-  const h = hostname3.toLowerCase().replace(/^\[|\]$/g, "");
-  if (h === "localhost" || h.endsWith(".localhost") || h.endsWith(".local") || h.endsWith(".internal")) return true;
-  const isIpv6 = h.includes(":");
-  if (isIpv6) {
-    if (h === "::1" || h === "::" || h.startsWith("fe80:") || h.startsWith("fc") || h.startsWith("fd")) return true;
-    if (h.startsWith("::ffff:")) return true;
-  }
-  const m = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(h);
-  if (m) {
-    const a = Number(m[1]);
-    const b = Number(m[2]);
-    if (a === 0 || a === 127 || a === 10) return true;
-    if (a === 169 && b === 254) return true;
-    if (a === 172 && b >= 16 && b <= 31) return true;
-    if (a === 192 && b === 168) return true;
-  }
-  return false;
-}
-function createRunVerificationTurn(deps) {
-  return async (input) => {
-    let url2;
-    try {
-      url2 = new URL(input.environmentUrl);
-    } catch {
-      return { verdict: "fail", summary: `invalid environmentUrl: ${input.environmentUrl}`, turnRef: null };
-    }
-    if (url2.protocol !== "http:" && url2.protocol !== "https:") {
-      return { verdict: "fail", summary: `unsupported scheme in environmentUrl: ${url2.protocol}`, turnRef: null };
-    }
-    const hostname3 = url2.hostname;
-    if (!hostname3) {
-      return { verdict: "fail", summary: `environmentUrl has no host: ${input.environmentUrl}`, turnRef: null };
-    }
-    if (isBlockedVerificationHost(hostname3)) {
-      return { verdict: "fail", summary: `refusing to verify against non-public host: ${hostname3}`, turnRef: null };
-    }
-    const providerId = input.run.agentSeat;
-    if (providerId == null) {
-      return { verdict: "fail", summary: "run has no resolved agent_seat", turnRef: null };
-    }
-    const { handle, dispose, cwd } = await deps.startSandbox([hostname3], providerId);
-    try {
-      let text;
-      try {
-        text = await deps.runTurn(handle, buildVerificationPrompt(input), cwd);
-      } catch (error51) {
-        return { verdict: "fail", summary: `verification turn errored: ${String(error51).slice(0, 160)}`, turnRef: null };
-      }
-      return parseVerdict2(text);
-    } finally {
-      dispose();
-    }
-  };
-}
-
 // src/self-review.ts
 function buildSelfReviewPrompt(task) {
   return [
@@ -66577,33 +66347,6 @@ function createSelfReviewTurn(deps) {
   };
 }
 
-// src/verification-section.ts
-function extractVerificationSection(markdown) {
-  const lines2 = markdown.split("\n");
-  const headingRe = /^(#{1,6})\s+(.*)$/;
-  let start = -1;
-  let level = 0;
-  for (let i = 0; i < lines2.length; i += 1) {
-    const m = headingRe.exec(lines2[i] ?? "");
-    if (m && /^verification\b/i.test((m[2] ?? "").trim())) {
-      start = i + 1;
-      level = (m[1] ?? "").length;
-      break;
-    }
-  }
-  if (start === -1) return null;
-  let end = lines2.length;
-  for (let i = start; i < lines2.length; i += 1) {
-    const m = headingRe.exec(lines2[i] ?? "");
-    if (m && (m[1] ?? "").length <= level) {
-      end = i;
-      break;
-    }
-  }
-  const body = lines2.slice(start, end).join("\n").trim();
-  return body.length > 0 ? body : null;
-}
-
 // src/director-reseed.ts
 var import_node_fs21 = require("node:fs");
 var import_node_readline = require("node:readline");
@@ -66668,6 +66411,23 @@ function extractItems(lines2, sessionIds) {
   items.sort((a, b) => a.ts < b.ts ? -1 : a.ts > b.ts ? 1 : 0);
   return { items, skipped: skipped2 };
 }
+function contextMessagesToReseedItems(contextMessages, currentPromptText) {
+  if (!contextMessages || contextMessages.length === 0) return [];
+  const prior = contextMessages.filter((msg, idx) => {
+    if (idx === 0 && currentPromptText && msg.role === "user" && msg.content.trim() === currentPromptText.trim()) {
+      return false;
+    }
+    return true;
+  });
+  if (prior.length === 0) return [];
+  const chronological = [...prior].reverse();
+  const nowIso = (/* @__PURE__ */ new Date()).toISOString();
+  return chronological.map((msg, idx) => ({
+    ts: `${nowIso.slice(0, 10)}T00:00:${(idx + 1).toString().padStart(2, "0")}.000Z`,
+    kind: msg.role === "assistant" ? "assistant" : "user",
+    text: msg.content
+  }));
+}
 function renderReseedBlock(items, opts) {
   const buildText = (kept2, droppedCount) => {
     const header = [
@@ -69182,7 +68942,9 @@ function createBridgeMessageHandler(deps) {
                     // Client-supplied, so the elements are validated and not just the shape:
                     // this array selects which sessions' log rows get replayed into a prompt.
                     priorSessionIds: Array.isArray(msg.priorSessionIds) ? msg.priorSessionIds.filter((id) => typeof id === "string" && id.length > 0) : [],
-                    otherBytes
+                    otherBytes,
+                    contextMessages: msg.context?.contextMessages,
+                    currentText: effectiveText
                   });
                 } catch {
                   reseedPrefix = null;
@@ -69591,48 +69353,6 @@ async function startDirectorBridge() {
     selfReviewTurn: createSelfReviewTurn({
       runTurn: (handle, cwd, prompt) => wrappedTurnLock.run("chat", () => runCollectedAgentTurn(handle, prompt, cwd, SELF_REVIEW_BASE_INSTRUCTIONS))
     }),
-    // ADR 0015 deploy gate: after a pushed run reaches dev_deploy/prod_deploy, the backstop sweep
-    // dispatches the deploy + polls + runs a verification turn against the deployed env URL in a
-    // throwaway cwd. Per the owner no-sandbox decision the verification turn runs from the real
-    // operator config like every other executor turn; its observe-only base instructions bound
-    // behaviour, provider-generic since task 4.1.
-    deployGate: {
-      loadVerificationSection: async (projectSlug, task) => {
-        if (!task.specWikiPageId) return null;
-        const page = await client.getWikiPage(projectSlug, task.specWikiPageId).catch(() => null);
-        return page?.markdownBody ? extractVerificationSection(page.markdownBody) : null;
-      },
-      runVerificationTurn: createRunVerificationTurn({
-        // egressDomains is retained in the seam signature (verification-turn.ts still computes the
-        // env host) but no longer constrains anything — the executor is unrestricted.
-        startSandbox: async (_egressDomains, providerId) => {
-          const cwd = import_node_fs23.default.mkdtempSync(import_node_path37.default.join(import_node_os17.default.tmpdir(), "mrrlin-verify-"));
-          let executor;
-          try {
-            executor = await startExecutorServer({ worktree: cwd, provider: providerId });
-          } catch (error51) {
-            try {
-              import_node_fs23.default.rmSync(cwd, { recursive: true, force: true });
-            } catch {
-            }
-            throw error51;
-          }
-          return {
-            handle: executor.handle,
-            cwd,
-            dispose: () => {
-              executor.dispose();
-              try {
-                import_node_fs23.default.rmSync(cwd, { recursive: true, force: true });
-              } catch {
-              }
-            }
-          };
-        },
-        runTurn: (handle, prompt, cwd) => wrappedTurnLock.run("chat", () => runCollectedAgentTurn(handle, prompt, cwd, VERIFICATION_BASE_INSTRUCTIONS))
-      }),
-      budgetSeconds: deployPollBudgetSeconds()
-    },
     // ADR 0020 Phase 2: run the deliverable-gate over a non-code run's authored Deliverables page.
     // Builds the gate deps (resolving domain/heads/criteria from the page's task + spec) and runs the
     // same convergence loop the spec-gate uses. runId is threaded for verdict provenance (decision 10).
@@ -69818,27 +69538,32 @@ async function startDirectorBridge() {
       });
       return NO_HISTORY_BLOCK;
     };
-    if (!resolveBridgeLogEnabled()) return refuse2("log-disabled");
-    if (!resolvePromptsEnabled()) return refuse2("prompts-not-logged");
-    const retentionWindowMs = readEnvInt("MRRLIN_LOG_RETENTION_AGE_DAYS", 30) * 864e5;
-    const reseedWindowMs = Math.min(config2.idleThreadTtlMs, retentionWindowMs);
-    if (reseedWindowMs < config2.idleThreadTtlMs) {
-      bridgeLogger.logOut({
-        spanId: "reseed",
-        sessionId: args.directorSessionId,
-        type: "<reseed-window-clamped>",
-        payload: {
-          idleThreadTtlMs: config2.idleThreadTtlMs,
-          retentionWindowMs,
-          effectiveWindowMs: reseedWindowMs
-        }
-      });
+    let items = [];
+    let filesCount = 0;
+    let missingFilesCount = 0;
+    let skippedCount = 0;
+    const logEnabled = resolveBridgeLogEnabled();
+    const promptsEnabled = resolvePromptsEnabled();
+    if (logEnabled && promptsEnabled) {
+      const retentionWindowMs = readEnvInt("MRRLIN_LOG_RETENTION_AGE_DAYS", 30) * 864e5;
+      const reseedWindowMs = retentionWindowMs;
+      const files = dayFilesInWindow(/* @__PURE__ */ new Date(), reseedWindowMs);
+      filesCount = files.length;
+      const sessionIds = [args.directorSessionId, ...args.priorSessionIds];
+      const { lines: lines2, missingFiles } = await readSessionRows(import_node_path37.default.join(config2.stateDir, "logs"), files, sessionIds);
+      missingFilesCount = missingFiles;
+      const extracted = extractItems(lines2, sessionIds);
+      items = extracted.items;
+      skippedCount = extracted.skipped;
+    }
+    if (items.length === 0 && args.contextMessages && args.contextMessages.length > 0) {
+      items = contextMessagesToReseedItems(args.contextMessages, args.currentText);
+    }
+    if (items.length === 0) {
+      if (!logEnabled) return refuse2("log-disabled");
+      if (!promptsEnabled) return refuse2("prompts-not-logged");
+      return refuse2("no-rows");
     }
-    const files = dayFilesInWindow(/* @__PURE__ */ new Date(), reseedWindowMs);
-    const sessionIds = [args.directorSessionId, ...args.priorSessionIds];
-    const { lines: lines2, missingFiles } = await readSessionRows(import_node_path37.default.join(config2.stateDir, "logs"), files, sessionIds);
-    const { items, skipped: skipped2 } = extractItems(lines2, sessionIds);
-    if (items.length === 0) return refuse2("no-rows");
     const budget = Math.max(0, Math.min(config2.reseedMaxTokens, config2.turnMaxTokens - args.otherBytes));
     const block = renderReseedBlock(items, {
       maxTokens: budget,
@@ -69852,9 +69577,9 @@ async function startDirectorBridge() {
       payload: {
         sessionId: args.directorSessionId,
         priorSessionIds: args.priorSessionIds.length,
-        dayFiles: files.length,
-        missingFiles,
-        parseSkips: skipped2,
+        dayFiles: filesCount,
+        missingFiles: missingFilesCount,
+        parseSkips: skippedCount,
         itemCount: block.itemCount,
         droppedCount: block.droppedCount,
         estimatedTokens: Buffer.byteLength(block.text, "utf8"),
@@ -71321,49 +71046,440 @@ function runSetCredential(args) {
 var import_node_os18 = __toESM(require("node:os"), 1);
 var import_node_fs24 = require("node:fs");
 var import_node_path38 = __toESM(require("node:path"), 1);
-function isOwnedEcosystemConfig(text) {
-  return /name:\s*"mrrlin-bridge"/.test(text) && /script:\s*"mrrlin-mcp"/.test(text) && /args:\s*"director-bridge"/.test(text);
-}
-function readEnvString(text, key) {
-  const match = new RegExp(`\\b${key}:\\s*("(?:[^"\\\\]|\\\\.)*")`).exec(text);
-  if (!match?.[1]) return void 0;
+function parseEnvLine(line, env) {
+  const trimmed = line.trim();
+  if (!trimmed || trimmed === "}" || trimmed === "},") return;
+  const match = /^\s*(?:([a-zA-Z_$][a-zA-Z0-9_$]*)|"((?:[^"\\]|\\.)*)"|(\["__proto__"\]))\s*:\s*("(?:[^"\\]|\\.)*")\s*,?\s*$/.exec(line);
+  if (!match) return;
+  const identKey = match[1];
+  const quotedKey = match[2];
+  const computedProto = match[3];
+  const rawValue = match[4];
+  if (!rawValue) return;
+  let key = null;
+  if (computedProto) {
+    key = "__proto__";
+  } else if (identKey) {
+    if (identKey === "__proto__") {
+      return;
+    }
+    key = identKey;
+  } else if (quotedKey !== void 0) {
+    try {
+      const parsedKey = JSON.parse(`"${quotedKey}"`);
+      if (typeof parsedKey !== "string" || parsedKey === "__proto__") {
+        return;
+      }
+      key = parsedKey;
+    } catch {
+      return;
+    }
+  }
+  if (key === null) return;
   try {
-    const value = JSON.parse(match[1]);
-    return typeof value === "string" && value.trim() ? value.trim() : void 0;
+    const parsedValue = JSON.parse(rawValue);
+    if (typeof parsedValue === "string") {
+      env[key] = parsedValue;
+    }
   } catch {
-    return void 0;
+    return;
   }
 }
-function normalizeServiceApiTarget(apiBaseUrl, allowRemote) {
-  const normalized = retargetRetiredApiBaseUrl(apiBaseUrl).baseUrl;
-  if (isProductionApiBaseUrl(normalized)) return {};
-  const target = { apiBaseUrl: normalized };
-  if (allowRemote && !isStagingApiBaseUrl(normalized) && !isLoopbackUrl(normalized)) target.apiAllowRemote = true;
-  return target;
+function parseExistingEcosystemConfig(text) {
+  if (text === null || text === void 0) {
+    return { kind: "missing" };
+  }
+  let mode = "code";
+  const templateCurlyStack = [];
+  let curlyDepth = 0;
+  let squareDepth = 0;
+  let parenDepth = 0;
+  let moduleExportsOpened = false;
+  let moduleExportsClosed = false;
+  let appsArrayOpened = false;
+  let appsArrayClosed = false;
+  let appCandidateActive = false;
+  let candidateHasName = false;
+  let candidateHasScript = false;
+  let candidateHasArgs = false;
+  let candidateHasEnv = false;
+  let candidateEnvOpenedOnLine = false;
+  let candidateEnvClosed = false;
+  let candidateEnv = null;
+  let matchedAppEnv = null;
+  let matchedAppCount = 0;
+  let recentCode = "";
+  let lineCode = "";
+  const len = text.length;
+  let i = 0;
+  while (i < len) {
+    const ch = text[i] ?? "";
+    if (mode === "line_comment") {
+      if (ch === "\n") {
+        mode = "code";
+        lineCode = "";
+        candidateEnvOpenedOnLine = false;
+      }
+      i++;
+      continue;
+    }
+    if (mode === "block_comment") {
+      if (ch === "*" && i + 1 < len && text[i + 1] === "/") {
+        mode = "code";
+        i += 2;
+        continue;
+      }
+      if (ch === "\n") {
+        lineCode = "";
+        candidateEnvOpenedOnLine = false;
+      }
+      i++;
+      continue;
+    }
+    if (mode === "single_quote") {
+      if (ch === "\\") {
+        i += 2;
+        continue;
+      }
+      if (ch === "'") {
+        mode = "code";
+        i++;
+        continue;
+      }
+      if (ch === "\n" || ch === "\r") {
+        return { kind: "rejected", text };
+      }
+      i++;
+      continue;
+    }
+    if (mode === "double_quote") {
+      if (ch === "\\") {
+        lineCode += ch + (text[i + 1] ?? "");
+        i += 2;
+        continue;
+      }
+      lineCode += ch;
+      if (ch === '"') {
+        mode = "code";
+        if (appCandidateActive && curlyDepth === 2 && squareDepth === 1) {
+          if (/name\s*:\s*"mrrlin-bridge"/.test(lineCode)) candidateHasName = true;
+          if (/script\s*:\s*"mrrlin-mcp"/.test(lineCode)) candidateHasScript = true;
+          if (/args\s*:\s*"director-bridge"/.test(lineCode)) candidateHasArgs = true;
+        }
+        i++;
+        continue;
+      }
+      if (ch === "\n" || ch === "\r") {
+        return { kind: "rejected", text };
+      }
+      i++;
+      continue;
+    }
+    if (mode === "template") {
+      if (ch === "\\") {
+        i += 2;
+        continue;
+      }
+      if (ch === "`") {
+        mode = "code";
+        i++;
+        continue;
+      }
+      if (ch === "$" && i + 1 < len && text[i + 1] === "{") {
+        mode = "code";
+        templateCurlyStack.push(curlyDepth);
+        curlyDepth++;
+        i += 2;
+        continue;
+      }
+      i++;
+      continue;
+    }
+    if (ch === "/" && i + 1 < len) {
+      if (text[i + 1] === "/") {
+        mode = "line_comment";
+        i += 2;
+        continue;
+      }
+      if (text[i + 1] === "*") {
+        mode = "block_comment";
+        i += 2;
+        continue;
+      }
+      return { kind: "rejected", text };
+    }
+    if (ch === "/") {
+      return { kind: "rejected", text };
+    }
+    if (ch === "'") {
+      mode = "single_quote";
+      i++;
+      continue;
+    }
+    if (ch === '"') {
+      mode = "double_quote";
+      lineCode += ch;
+      i++;
+      continue;
+    }
+    if (ch === "`") {
+      mode = "template";
+      i++;
+      continue;
+    }
+    if (ch === "\n") {
+      if (appCandidateActive && candidateHasEnv && !candidateEnvClosed && curlyDepth === 3 && candidateEnv) {
+        parseEnvLine(lineCode, candidateEnv);
+      }
+      lineCode = "";
+      candidateEnvOpenedOnLine = false;
+      recentCode += " ";
+      i++;
+      continue;
+    }
+    lineCode += ch;
+    recentCode += ch;
+    if (ch === "{") {
+      if (curlyDepth === 0 && squareDepth === 0) {
+        if (/module\.exports\s*=\s*\{$/.test(recentCode.trim())) {
+          if (moduleExportsOpened) return { kind: "rejected", text };
+          moduleExportsOpened = true;
+        }
+      } else if (moduleExportsOpened && !moduleExportsClosed && appsArrayOpened && !appsArrayClosed && squareDepth === 1 && curlyDepth === 1) {
+        appCandidateActive = true;
+        candidateHasName = false;
+        candidateHasScript = false;
+        candidateHasArgs = false;
+        candidateHasEnv = false;
+        candidateEnvOpenedOnLine = false;
+        candidateEnvClosed = false;
+        candidateEnv = /* @__PURE__ */ Object.create(null);
+      } else if (appCandidateActive && squareDepth === 1 && curlyDepth === 2) {
+        if (/\benv\s*:\s*\{$/.test(recentCode.trim())) {
+          candidateHasEnv = true;
+          candidateEnvOpenedOnLine = true;
+        }
+      }
+      curlyDepth++;
+      recentCode = "";
+      i++;
+      continue;
+    }
+    if (ch === "}") {
+      if (curlyDepth === 0) return { kind: "rejected", text };
+      if (templateCurlyStack.length > 0 && templateCurlyStack[templateCurlyStack.length - 1] === curlyDepth - 1) {
+        templateCurlyStack.pop();
+        mode = "template";
+        curlyDepth--;
+        recentCode = "";
+        i++;
+        continue;
+      }
+      if (appCandidateActive && candidateHasEnv && !candidateEnvClosed && curlyDepth === 3) {
+        if (candidateEnvOpenedOnLine) {
+          candidateHasEnv = false;
+        }
+        const beforeBrace = lineCode.slice(0, -1);
+        if (beforeBrace.trim() && candidateEnv) {
+          parseEnvLine(beforeBrace, candidateEnv);
+        }
+        candidateEnvClosed = true;
+      } else if (appCandidateActive && curlyDepth === 2 && squareDepth === 1) {
+        if (candidateHasName && candidateHasScript && candidateHasArgs && candidateHasEnv && candidateEnvClosed) {
+          matchedAppCount++;
+          if (matchedAppCount > 1) return { kind: "rejected", text };
+          matchedAppEnv = candidateEnv;
+        }
+        appCandidateActive = false;
+        candidateEnv = null;
+      } else if (moduleExportsOpened && !moduleExportsClosed && curlyDepth === 1 && squareDepth === 0) {
+        moduleExportsClosed = true;
+      }
+      curlyDepth--;
+      recentCode = "";
+      i++;
+      continue;
+    }
+    if (ch === "[") {
+      if (moduleExportsOpened && !moduleExportsClosed && curlyDepth === 1 && squareDepth === 0) {
+        if (/\bapps\s*:\s*\[$/.test(recentCode.trim())) {
+          if (appsArrayOpened) return { kind: "rejected", text };
+          appsArrayOpened = true;
+        }
+      }
+      squareDepth++;
+      recentCode = "";
+      i++;
+      continue;
+    }
+    if (ch === "]") {
+      if (squareDepth === 0) return { kind: "rejected", text };
+      if (moduleExportsOpened && !moduleExportsClosed && appsArrayOpened && squareDepth === 1 && curlyDepth === 1) {
+        appsArrayClosed = true;
+      }
+      squareDepth--;
+      recentCode = "";
+      i++;
+      continue;
+    }
+    if (ch === "(") {
+      parenDepth++;
+      i++;
+      continue;
+    }
+    if (ch === ")") {
+      if (parenDepth === 0) return { kind: "rejected", text };
+      parenDepth--;
+      i++;
+      continue;
+    }
+    i++;
+  }
+  if (mode !== "code") return { kind: "rejected", text };
+  if (curlyDepth !== 0 || squareDepth !== 0 || parenDepth !== 0) return { kind: "rejected", text };
+  if (!moduleExportsOpened || !moduleExportsClosed) return { kind: "rejected", text };
+  if (!appsArrayOpened || !appsArrayClosed) return { kind: "rejected", text };
+  if (matchedAppCount !== 1 || !matchedAppEnv) return { kind: "rejected", text };
+  return { kind: "accepted", env: matchedAppEnv, text };
+}
+var CURATED_KEYS = [
+  "CODEX_HOME",
+  "CLAUDE_CONFIG_DIR",
+  "MRRLIN_DIRECTOR_BRIDGE_LOG",
+  "MRRLIN_API_BASE_URL",
+  "MRRLIN_API_ALLOW_REMOTE",
+  "MRRLIN_STAGING"
+];
+function mergeConfigEnv(depsEnv, carriedEnv) {
+  const isWin = process.platform === "win32";
+  const DENIED_CARRIED_KEYS = new Set(isWin ? ["HOME", "PATH", "USER", "USERNAME"] : ["HOME", "PATH", "USER"]);
+  const mergedEnv = /* @__PURE__ */ Object.create(null);
+  const preservedNames = [];
+  const droppedNames = [];
+  const carriedKeys = Object.keys(carriedEnv);
+  for (const key of carriedKeys) {
+    if (DENIED_CARRIED_KEYS.has(key)) {
+      droppedNames.push(key);
+      continue;
+    }
+    const envVal = depsEnv[key];
+    if (Object.hasOwn(depsEnv, key) && envVal !== void 0) {
+      let installerVal = envVal;
+      if (key === "CODEX_HOME" || key === "CLAUDE_CONFIG_DIR" || key === "MRRLIN_API_BASE_URL") {
+        installerVal = installerVal.trim();
+      }
+      if (installerVal === "") {
+        droppedNames.push(key);
+      } else {
+        preservedNames.push(key);
+        mergedEnv[key] = installerVal;
+      }
+    } else {
+      const carriedVal = carriedEnv[key];
+      if (carriedVal !== void 0) {
+        preservedNames.push(key);
+        mergedEnv[key] = carriedVal;
+      }
+    }
+  }
+  for (const key of CURATED_KEYS) {
+    if (Object.hasOwn(carriedEnv, key)) continue;
+    const envVal = depsEnv[key];
+    if (Object.hasOwn(depsEnv, key) && envVal !== void 0) {
+      let val = envVal;
+      if (key === "CODEX_HOME" || key === "CLAUDE_CONFIG_DIR" || key === "MRRLIN_API_BASE_URL") {
+        val = val.trim();
+      }
+      if (val !== "") {
+        mergedEnv[key] = val;
+      }
+    } else {
+      if (key === "MRRLIN_DIRECTOR_BRIDGE_LOG") {
+        mergedEnv[key] = "1";
+      }
+    }
+  }
+  preservedNames.sort();
+  droppedNames.sort();
+  return { mergedEnv, preservedNames, droppedNames };
 }
-function readExistingServiceApiTarget(deps, ecoPath) {
-  try {
-    const existing = deps.readFile?.(ecoPath);
-    if (!existing || !isOwnedEcosystemConfig(existing)) return void 0;
-    const apiBaseUrl = readEnvString(existing, "MRRLIN_API_BASE_URL");
-    if (apiBaseUrl) {
-      return normalizeServiceApiTarget(apiBaseUrl, readEnvString(existing, "MRRLIN_API_ALLOW_REMOTE") === "1");
+function deriveMergedApiRouting(mergedEnv, invokingBridgeUrl) {
+  const result = /* @__PURE__ */ Object.create(null);
+  for (const k of Object.keys(mergedEnv)) {
+    const v = mergedEnv[k];
+    if (v !== void 0) {
+      result[k] = v;
     }
-    if (readEnvString(existing, "MRRLIN_STAGING") === "1") {
-      return { apiBaseUrl: STAGING_API_BASE_URL };
+  }
+  if (Object.hasOwn(result, "MRRLIN_API_BASE_URL")) {
+    const rawApi = result["MRRLIN_API_BASE_URL"];
+    if (rawApi === "") {
+      result["MRRLIN_API_BASE_URL"] = "";
+    } else if (rawApi !== void 0) {
+      const retargeted = retargetRetiredApiBaseUrl(rawApi).baseUrl;
+      result["MRRLIN_API_BASE_URL"] = retargeted;
+    }
+  } else {
+    if (result["MRRLIN_STAGING"] === "1") {
+      result["MRRLIN_API_BASE_URL"] = STAGING_API_BASE_URL;
+    } else if (bridgeUrlImpliesStaging(invokingBridgeUrl)) {
+      result["MRRLIN_API_BASE_URL"] = STAGING_API_BASE_URL;
     }
-    return void 0;
-  } catch {
-    return void 0;
   }
+  return result;
+}
+function escapeRegex2(s) {
+  return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
-function deriveServiceApiTarget(deps, ecoPath) {
-  const apiBaseUrl = deps.env.MRRLIN_API_BASE_URL?.trim();
-  if (apiBaseUrl) return normalizeServiceApiTarget(apiBaseUrl, deps.env.MRRLIN_API_ALLOW_REMOTE === "1");
-  if (deps.env.MRRLIN_STAGING === "1" || bridgeUrlImpliesStaging(deps.env.MRRLIN_BRIDGE_URL)) {
-    return { apiBaseUrl: STAGING_API_BASE_URL };
+function performConfigBackup(deps, ecoPath, existingText) {
+  try {
+    if (!deps.listDir || !deps.writeExclusiveFile) {
+      deps.log("Service config backup failed.");
+      return;
+    }
+    const dir = import_node_path38.default.dirname(ecoPath);
+    let files;
+    try {
+      files = deps.listDir(dir);
+    } catch {
+      deps.log("Service config backup failed.");
+      return;
+    }
+    if (!files || !Array.isArray(files)) {
+      deps.log("Service config backup failed.");
+      return;
+    }
+    const base = import_node_path38.default.basename(ecoPath);
+    const backupRegex = new RegExp(`^${escapeRegex2(base)}\\.bak-\\d{4}-\\d{2}-\\d{2}T\\d{2}-\\d{2}-\\d{2}-\\d{3}Z$`);
+    const existingBackups = files.filter((f) => backupRegex.test(f));
+    if (existingBackups.length >= 10) {
+      deps.log("Service config backup failed.");
+      return;
+    }
+    let now;
+    try {
+      now = deps.clock ? deps.clock() : /* @__PURE__ */ new Date();
+    } catch {
+      deps.log("Service config backup failed.");
+      return;
+    }
+    let iso;
+    try {
+      iso = now.toISOString();
+    } catch {
+      deps.log("Service config backup failed.");
+      return;
+    }
+    if (!/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(iso)) {
+      deps.log("Service config backup failed.");
+      return;
+    }
+    const ts = iso.replace(/:/g, "-").replace(/\./g, "-");
+    const backupPath = `${ecoPath}.bak-${ts}`;
+    deps.writeExclusiveFile(backupPath, existingText);
+  } catch {
+    deps.log("Service config backup failed.");
   }
-  return readExistingServiceApiTarget(deps, ecoPath) ?? {};
 }
 var SYSTEM_PATH_DIRS = ["/usr/bin", "/bin", "/usr/sbin", "/sbin"];
 function defaultHomeOwnerUid(home) {
@@ -71439,19 +71555,34 @@ function installService(deps) {
     /* @__PURE__ */ new Set([...resolvedBins.map((b) => import_node_path38.default.dirname(b)), ...systemDirs])
   ).join(import_node_path38.default.delimiter);
   const ecoPath = import_node_path38.default.join(home, ".mrrlin", "ecosystem.config.cjs");
-  const apiTarget = deriveServiceApiTarget(deps, ecoPath);
+  const existingText = deps.readFile ? deps.readFile(ecoPath) : null;
+  const parseResult = parseExistingEcosystemConfig(existingText);
+  if (parseResult.kind === "rejected") {
+    deps.log("Service config env carry skipped.");
+  }
+  if (existingText !== null && existingText !== void 0) {
+    performConfigBackup(deps, ecoPath, existingText);
+  }
+  const carriedEnv = parseResult.kind === "accepted" ? parseResult.env : /* @__PURE__ */ Object.create(null);
+  const { mergedEnv, preservedNames, droppedNames } = mergeConfigEnv(deps.env, carriedEnv);
+  const routedEnv = deriveMergedApiRouting(mergedEnv, deps.env.MRRLIN_BRIDGE_URL);
+  routedEnv.HOME = home;
+  routedEnv.PATH = pathEnv;
+  if (user !== void 0) {
+    routedEnv.USER = user;
+  }
+  if (preservedNames.length > 0) {
+    deps.log(`Service env preserved: ${preservedNames.join(", ")}.`);
+  }
+  if (droppedNames.length > 0) {
+    deps.log(`Service env dropped: ${droppedNames.join(", ")}.`);
+  }
   const text = renderEcosystemConfig({
     cwd: resolved.cwd,
-    home,
-    user,
-    codexHome: deps.env.CODEX_HOME?.trim() || void 0,
-    claudeConfigDir: deps.env.CLAUDE_CONFIG_DIR?.trim() || void 0,
-    pathEnv,
-    apiBaseUrl: apiTarget.apiBaseUrl,
-    apiAllowRemote: apiTarget.apiAllowRemote
+    env: routedEnv
   });
   deps.writeFile(ecoPath, text);
-  const start = deps.runPm2(["startOrReload", ecoPath]);
+  const start = deps.runPm2(["startOrReload", ecoPath, "--update-env"]);
   if (start.code !== 0) {
     deps.log(`pm2 startOrReload failed (exit ${start.code}).`);
     return { ok: false };
@@ -72074,6 +72205,15 @@ async function main() {
           (0, import_node_fs25.mkdirSync)(import_node_path42.default.dirname(p), { recursive: true, mode: 448 });
           (0, import_node_fs25.writeFileSync)(p, c, { mode: 384 });
         },
+        writeExclusiveFile: (p, c) => (0, import_node_fs25.writeFileSync)(p, c, { flag: "wx", mode: 384 }),
+        listDir: (p) => {
+          try {
+            return (0, import_node_fs25.readdirSync)(p);
+          } catch {
+            return null;
+          }
+        },
+        clock: () => /* @__PURE__ */ new Date(),
         // Swallows every error on purpose — the only caller uses this to recover settings from the
         // config it is about to overwrite, and a missing or unreadable file means "no previous
         // value", never a failed install. See readExistingTelemetryDefaultProject.